Half-day technical workshop
- Current-state diagram, dependency list, risks, open decisions, and responsible owners.
- Cost baseline, IAM/IAM Identity Center review, network, logs, backup, WAF, encryption, and incident-response assumptions.
- Prioritized backlog for the first sprint and criteria to validate success.