Cloud Native Maturity Quick Scan

Which of the following business focus priorities is most important to your organization? Which of the following business focus priorities is most important to your organization?

Rank the following business focus priorities from low to top.

1. Innovation & Market expansion
2. Speed & Agility
3. Resilience & Security
4. Operational excellence

How does your organization use composable thinking and architecture? How does your organization use composable thinking and architecture?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Composable business practices.

1. A high-level strategy is defined, and some granular digital products have been implemented as part of a proof of concept.
2. The strategy for composable thinking has been refined and composable architecture is well understood. Some product and service domains have implemented and are maintaining at least granular reusable components.
3. Most product and service domains have a clear catalogue of reusable services. Digital products in domains rely on services operated by other domains. Measurable benefits of the composable architecture and emerging.
4. Products and services provided to customers are based on a solid basis of composable services, with the composable architecture being improved based on progress and insights.
5. Composable products and services are continuously being adapted to customer and ecosystem needs beyond the organisation itself.

How does your organization currently manage the orchestration tooling and processes of functional modular components? How does your organization currently manage the orchestration tooling and processes of functional modular components?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Composable business practices.

1. We are identifying pilot projects and testing simple orchestration with simple rules and workflows for a few functional modular components.
2. We are expanding orchestration to more business processes and implementing basic automation tools. We are establishing operational guidelines for module interaction.
3. We have integrated advanced orchestration tools which are capable of handling complex workflows and multiple dependencies and have standardized practices across the organization.
4. We are utilizing process mining and data analytics to enhance the quality and efficiency of our orchestrated processes. Adaption of processes requires limited capacity from teams.
5. Our orchestration tools are highly sophisticated and provide near real-time orchestration of components. They empower business units to innovate independently and improve their outcomes

Which statement best describes your organization's current use and management of containerization and microservices? Which statement best describes your organization's current use and management of containerization and microservices?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Technology & architecture.

1. Our organization is currently experimenting with containerization and microservices on a small scale, primarily within isolated projects.
2. We operate several containerized applications in production but still rely on some monolithic applications, and we face challenges with complexity and service quality.
3. Our organization has fully embraced containerization with advanced orchestration tools like Kubernetes and has established microservices that align with business needs.
4. We are continuously optimizing our container and microservice architectures, focusing on performance, cost-efficiency, and integrating advanced management tools like service meshes.
5. Our organization leads in container technology with a highly optimized, self-managing infrastructure and an adaptive microservice architecture that integrates cutting-edge technologies like AI and serverless computing.

How does your organization approach cloud infrastructure management, including deployments and monitoring? How does your organization approach cloud infrastructure management, including deployments and monitoring?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Technology & architecture.

1. We are currently exploring cloud infrastructure management options and learning the basic concepts of deployments and monitoring.
2. We have basic cloud infrastructure management in place with operational CI/CD pipelines for infrastructure and initial monitoring systems.
3. Our cloud infrastructure is robust, supports automated deployments, and includes comprehensive monitoring and alerting systems.
4. We leverage advanced cloud technologies, with fully automated deployments and integrated, proactive monitoring tools
5. Our cloud infrastructure is fully automated, self-healing, and uses predictive analytics for monitoring, ensuring optimal performance and reliability.

How does your organization’s leadership foster a culture of innovation, communication, and collaboration? How does your organization’s leadership foster a culture of innovation, communication, and collaboration?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within People & Culture.

1. Leadership encourages teams to explore new ideas and experiment with emerging technologies, providing time and resources for innovation without fear of failure.
2. Leadership promotes a culture of transparency and structured communication, with regular updates and clear, accessible channels for cross-team collaboration
3. Leadership actively supports scaling successful innovations, offering guidance and resources to expand projects that have proven effective.
4. Leadership actively fosters a culture of continuous learning and improvement by encouraging teams to share insights and innovations openly across the organization.
5. Our leaders foster a culture of agility, emphasizing proactive communication and collaboration to adapt processes and strategies in response to new opportunities or industry shifts.

How does your organization measure the performance and continuous development of its staff in relation to cloud-native practices? How does your organization measure the performance and continuous development of its staff in relation to cloud-native practices?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within People & Culture.

1. Performance measurement focuses on the initiation and success of small-scale projects, emphasizing how early-stage ideas translate into tangible cloud-native improvements.
2. Staff are evaluated based on their responsiveness to incidents, proactive problem-solving, and contributions to enhancing availability and real-time operational capabilities.
3. Teams are assessed by how effectively they handle growing demands, with particular attention to resource scalability and maintaining consistent performance as cloud-native workloads expand.
4. Progress is tracked through retrospectives, regular updates from product owners, and team-driven innovation that drives continuous improvement in cloud-native delivery.
5. Adaptability is gauged by how rapidly teams adopt emerging technologies, respond to shifting requirements, and actively advance overall cloud readiness.

How does your organization manage regulatory and compliance requirements in the cloud? How does your organization manage regulatory and compliance requirements in the cloud?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Policy & Governance.

1. Our organization focuses on fundamental regulatory and compliance requirements, not necessarily cloud-focused, addressing issues in the cloud as they arise with primarily manual processes for attestation monitoring and reporting.
2. We are developing regulatory and compliance processes specifically for cloud environments using a basic mix of manual and semi-automated approaches. Regular attestation, monitoring and reporting still relies primarily on manual intervention.
3. We leverage out-of-the-box solutions in combination with manual & semi-automated approaches to manage compliance in the cloud with limited manual intervention in monitoring & reporting. Manual checks are still involved in attestation of controls.
4. We have refined predefined processes & increased automation to enhance compliance management. Regular monitoring is in place with improved integration across cloud platforms. Some manual input is still necessary for attestation, and reporting adjustments.
5. We have primarily integrated regulatory requirements using cloud-native solutions, achieving comprehensive integration across critical cloud platforms and automated attestation of controls. Automated, real-time monitoring & reporting systems for compliance management.

How would you best describe your organization’s strategy for identity access & management (IAM), operational resilience, data privacy & security, and third-party management in cloud? How would you best describe your organization’s strategy for identity access & management (IAM), operational resilience, data privacy & security, and third-party management in cloud?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Policy & Governance.

1. Basic controls for resilience & data privacy are in place, primarily reactive in nature. Cloud operations rely on manual processes with minimal monitoring.
2. Some standardized controls for resilience and data privacy are being developed. Cloud operations include basic monitoring and manual IAM procedures. Third-party risk management involves periodic compliance reviews.
3. Advanced controls for resilience and data privacy are implemented within cloud operations. Monitoring is conducted periodically, with semi-automated IAM processes. Third-party risk management includes routine compliance assessments with automated alerts for significant deviations.
4. Proactive, integrated controls for resilience and data privacy are embedded within cloud operations. Real-time monitoring and adaptive IAM are in place. Third-party risk management includes continuous compliance tracking and automated alerts.
5. Controls for resilience & data privacy are fully optimized & seamlessly integrated across critical aspects of cloud operations. Advanced real-time monitoring and predictive analytics are used for adaptive IAM. Third-party risk management is automated with real-time compliance updates and predictive risk analytics.

How do you manage and align cloud spending to balance cost-control and business priorities? How do you manage and align cloud spending to balance cost-control and business priorities?

Select the option that best describes your organisation. View the pop-up text by the icon on the right of this page for an explanation of terms within Policy & Governance.

1. Cloud spending is monitored reactively, with limited visibility and minimal financial oversight. Budgets are managed on an as-needed basis, which can lead to unexpected costs and misalignment with strategic goals.
2. Basic cost controls and tracking tools provide some visibility into spending patterns. Periodic reviews are conducted, though optimization efforts remain manual, and alignment with business objectives is still developing.
3. Structured FinOps practices bring regular budget tracking, team accountability, and automated insights. Cloud spending is monitored consistently, enabling data-driven decisions. Optimization efforts are still applied periodically.
4. Advanced FinOps practices, such as real-time analytics and automated budget controls, support proactive management of cloud investments. Spending aligns closely with strategic priorities, with continuous cost optimization.
5. Predictive analytics allow for automated budget controls and dynamic calculations of how cloud spending aligns with business needs (integrated cost and value analytics), enabling teams to monitor &adapt their strategies quickly.