Cloud Maturity Quick Scan

Which of the following business focus priorities is most important to your organisation? Rank them by dragging and dropping each item into the correct order. Place your highest priority at the top of the list and your lowest priority at the bottom. Which of the following business focus priorities is most important to your organisation? Rank them by dragging and dropping each item into the correct order. Place your highest priority at the top of the list and your lowest priority at the bottom.

Rank the following business focus priorities from low to top.

1. Innovation & Market expansion
2. Speed & Agility
3. Resilience & Security
4. Operational excellence

How does your organisation use composable thinking and architecture? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Composable Business Practices). How does your organisation use composable thinking and architecture? Select the option that best describes your organisation by clicking on one of the answers below.

1. We have defined a high-level strategy, and implemented some granular digital products as part of a proof of concept.
2. We understand composable architecture and have refined our strategy for composable thinking. In some product and service domains, we have implemented and are maintaining at least granular reusable components.
3. Most of our product and service domains have a clear catalogue of reusable services. Some of our digital products on services operated by other domains. We are beginning to see measurable benefits of composable architecture.
4. The products and services we provide to customers are based on a solid basis of composable services, and we are improving our composable architecture based on progress and insights.
5. We are continuously adapting composable products and services to customer and ecosystem needs beyond our organisation.

How does your organisation currently manage the orchestration tooling and processes of functional modular components? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Composable Business Practices). How does your organisation currently manage the orchestration tooling and processes of functional modular components? Select the option that best describes your organisation by clicking on one of the answers below.

1. We are identifying pilot projects and testing simple orchestration with simple rules and workflows for a few components.
2. We are expanding orchestration to more business processes and implementing basic automation tools. We are establishing operational guidelines for module interaction.
3. We have integrated advanced orchestration tools. With these, we can handle complex workflows and multiple dependencies. We have standardised practices across the organisation.
4. We are utilising process mining and data analytics to enhance the quality and efficiency of our orchestrated processes. Adapting processes requires limited capacity from our teams.
5. Our orchestration tools are highly sophisticated and provide near real-time orchestration of components. They empower our business units to innovate independently and improve their outcomes.

Which statement best describes your organisation's current use and management of containerisation and microservices? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Technology & Architecture). Which statement best describes your organisation's current use and management of containerisation and microservices? Select the option that best describes your organisation by clicking on one of the answers below.

1. We are currently experimenting with containerisation and microservices on a small scale, primarily within isolated projects.
2. We operate several containerised applications in production but still rely on some monolithic applications, and we face challenges with complexity and service quality.
3. We have fully embraced containerisation with advanced orchestration tools like Kubernetes and we have established microservices that align with business needs.
4. We are continuously optimising our container and microservice architectures, focusing on performance, cost-efficiency, and integrating advanced management tools like service meshes.
5. We are leading the way in container technology with a highly optimised, self-managing infrastructure and an adaptive microservice architecture that integrates cutting-edge technologies like AI and serverless computing.

How does your organisation approach cloud infrastructure management, including deployments and monitoring? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Technology & Architecture). How does your organisation approach cloud infrastructure management, including deployments and monitoring? Select the option that best describes your organisation by clicking on one of the answers below.

1. We are currently exploring cloud infrastructure management options and learning the basic concepts of deployments and monitoring.
2. We have basic cloud infrastructure management in place with operational CI/CD pipelines for infrastructure and initial monitoring systems.
3. Our cloud infrastructure is robust, supports automated deployments, and includes comprehensive monitoring and alerting systems.
4. We leverage advanced cloud technologies, with fully automated deployments and integrated, proactive monitoring tools.
5. Our cloud infrastructure is fully automated, self-healing, and uses predictive analytics for monitoring, ensuring optimal performance and reliability.

How does your organisation’s leadership foster a culture of innovation, communication, and collaboration? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within People & Culture). How does your organisation’s leadership foster a culture of innovation, communication, and collaboration? Select the option that best describes your organisation by clicking on one of the answers below.

1. Our leadership encourages teams to explore new ideas and experiment with emerging technologies, providing time and resources for innovation without fear of failure.
2. Our leadership promotes a culture of transparency and structured communication, with regular updates and clear, accessible channels for cross-team collaboration.
3. Our leadership actively supports scaling successful innovations, offering guidance and resources to expand projects that have proven effective.
4. Our leadership actively fosters a culture of continuous learning and improvement by encouraging teams to share insights and innovations openly across the organisation.
5. Our leaders foster a culture of agility, emphasising proactive communication and collaboration to adapt processes and strategies in response to new opportunities or industry shifts.

How does your organisation measure the performance and continuous development of its staff in relation to cloud-native practices? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within People & Culture). How does your organisation measure the performance and continuous development of its staff in relation to cloud-native practices? Select the option that best describes your organisation by clicking on one of the answers below.

1. Our performance measurement focuses on the initiation and success of small-scale projects, emphasising how early-stage ideas translate into tangible cloud-native improvements.
2. . We evaluate our staff based on their responsiveness to incidents, proactive problem-solving, and contributions to enhancing availability and real-time operational capabilities.
3. We assess our teams by how effectively they handle growing demands, with particular attention to resource scalability and maintaining consistent performance as cloud-native workloads expand.
4. We track progress through retrospectives, regular updates from product owners, and team-driven innovation that drives continuous improvement in cloud-native delivery.
5. We gauge our adaptability by how rapidly our teams adopt emerging technologies, respond to shifting requirements, and actively advance overall cloud readiness.

How does your organisation manage regulatory and compliance requirements in the cloud? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Policy & Governance). How does your organisation manage regulatory and compliance requirements in the cloud? Select the option that best describes your organisation by clicking on one of the answers below.

1. We focus focus on fundamental regulatory and compliance requirements. We are not cloud-focused, instead we address issues in the cloud as they arise with primarily manual processes for attestation monitoring and reporting.
2. We are developing regulatory and compliance processes specifically for cloud environments, using a basic mix of manual and semi-automated approaches. For regular attestation, monitoring and reporting, we still rely primarily on manual intervention.
3. We leverage out-of-the-box solutions in combination with manual & semi-automated approaches to manage compliance in the cloud with limited manual intervention in monitoring & reporting. Manual checks are still involved in attestation of controls.
4. We have refined predefined processes and increased automation to enhance compliance management. Regular monitoring is in place with improved integration across cloud platforms. Some manual input is still necessary for attestation, and reporting adjustments.
5. We have integrated regulatory requirements using mostly cloud-native solutions, achieving comprehensive integration across critical cloud platforms and automated attestation of controls. Automated, real-time monitoring & reporting systems for compliance management.

How would you best describe your organisation's strategy for identity access & management (IAM), operational resilience, data privacy & security, and third-party management in cloud? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Policy & Governance). How would you best describe your organisation's strategy for identity access & management (IAM), operational resilience, data privacy & security, and third-party management in cloud? Select the option that best describes your organisation by clicking on one of the answers below.

1. We have basic controls for resilience and data privacy in place, primarily reactive in nature. Cloud operations rely on manual processes with minimal monitoring.
2. We are developing some standardised controls for resilience and data privacy. Our cloud operations include basic monitoring and manual IAM procedures. Third-party risk management involves periodic compliance reviews.
3. We are implementing advanced controls for resilience and data privacy within cloud operations. We Monitor periodically, with semi-automated IAM processes. Our third-party risk management includes routine compliance assessments with automated alerts for significant deviations.
4. Proactive, integrated controls for resilience and data privacy are embedded within cloud our operations. Real-time monitoring and adaptive IAM are in place. Our third-party risk management includes continuous compliance tracking and automated alerts.
5. Our controls for resilience and data privacy are fully optimised and seamlessly integrated across critical aspects of cloud operations. We use advanced real-time monitoring and predictive analytics for adaptive IAM. Third-party risk management is automated with real-time compliance updates and predictive risk analytics.

How do you manage and align cloud spending to balance cost-control and business priorities? Select the option that best describes your organisation by clicking on one of the answers below (See the pop up text at the icon on the right side of this page for explanations of the terms within Policy & Governance). How do you manage and align cloud spending to balance cost-control and business priorities? Select the option that best describes your organisation by clicking on one of the answers below.

1. We monitor our cloud spending reactively, with limited visibility and minimal financial oversight. Budgets are managed on an as-needed basis, which can lead to unexpected costs and misalignment with strategic goals
2. Basic cost controls and tracking tools provide some visibility into our spending patterns. We conduct periodic reviews, though optimisation efforts remain manual, and alignment with business objectives is still developing.
3. Structured FinOps practices bring regular budget tracking, team accountability, and automated insights. We consistently monitor cloud spending, enabling data-driven decisions. Optimisation efforts are still applied periodically.
4. Advanced FinOps practices, such as real-time analytics and automated budget controls, support proactive management of our cloud investments. Our spending aligns closely with strategic priorities, with continuous cost optimisation.
5. Predictive analytics allow for automated budget controls and dynamic calculations of how our cloud spending aligns with business needs (integrated cost and value analytics), enabling teams to monitor and adapt their strategies quickly.