--- title: Questions enterprises should be asking as they migrate to the cloud description: Robert A. Clyde outlines how to take a critical inventory of existing data and operational requirements before migrating workloads to the cloud. image: https://shardsecure.com/hubfs/Blog%20media/cloud-migration-questions-for-enterprises%20(1).jpg --- - [Home](https://shardsecure.com/) - [Blog](https://shardsecure.com/blog) # Questions enterprises should be asking as they migrate to the cloud ![Picture of Robert Clyde](https://shardsecure.com/hs-fs/hubfs/Robert-Clyde.jpg?width=60&name=Robert-Clyde.jpg "Picture of Robert Clyde") [Robert Clyde](https://shardsecure.com/advisors-and-investors/robert-clyde) April 1 2021 ![A young woman using a laptop while working in a server room.](https://shardsecure.com/hubfs/Blog%20media/cloud-migration-questions-for-enterprises%20(1).jpg "A young woman using a laptop while working in a server room.") *In this article, originally published by [InfoSecurity](https://www.infosecurity-magazine.com/blogs/questions-enterprises-asking/), Robert A. Clyde outlines how to take a critical inventory of existing data and operational requirements before migrating workloads to the cloud.* It wasn’t too long ago when the question many enterprises wrestled with was whether migrating to the cloud was a worthwhile endeavor. Aside from a few stray server-huggers, enterprises have resoundingly answered in the affirmative and moved beyond that basic question.Now, though, as the COVID-19 pandemic and resulting widespread transitioning to remote workforces hasten organizations’ embrace of the cloud and SaaS applications, new questions are arising. Let’s examine some of the questions that organizations should be asking to make their cloud migrations successful: #### How can we accelerate our move to the cloud? There is a reason the cloud services market is expected to exceed US $660bn by 2024, according to GlobalData – the cloud brings great potential for organizations to become more efficient, flexible and secure, among other benefits. So, why not be bold in making the move? As enterprises plan their migrations, they should consider going beyond the usual budgetary investments. If the management team had more resources to invest in the cloud transition, what could they accomplish? It might be better to invest more up front and move faster. #### What percentage of our business-critical applications are currently running on the cloud? Even IT leaders who are aware of the cloud’s upside can be deterred from acting if bogged down by existing technologies and processes. That is why it is important to swiftly transition business-critical applications to the cloud. After determining the percentage of business-critical apps that are running on the cloud, a logical follow-up question for cloud champions is whether there are plans to make that total 100%. If not, why? If so, *when will the last server be turned off?* #### Did we include a third-party supplier risk assessment in our cloud risk assessment? Many organizations have not done so, and the massive SolarWinds hack surely has caught the attention of enterprise leaders. Third-party supplier risk needs to be specifically accounted for as part of the risk assessment. Organizations can automatically assess some third-party risks by using tools that block, report and warn about such risks in the CI/CD pipeline. Any major transition done on an aggressive timeframe poses new risks. Further, there should be a way for management to show the board of directors that all major cloud-related risks have been assessed and the appropriate mitigations have been put in place. It is important to call out which risks, if any, might exceed the organization’s risk appetite. #### Have we identified sensitive data and protected it in the cloud? The risk assessment should identify sensitive data stored in the cloud and how well it is protected. Has the organization implemented appropriate and effective data protection solutions like encryption, obfuscation, or [microsharding](https://www.linkedin.com/pulse/microsharding-innovative-way-protect-cloud-data-rob-clyde/)? Does the way the data is stored, used and protected comply with company policy, industry standards and regulations? #### Have we implemented DevSecOps to develop and deploy cloud applications? This should be a firm “yes.” To put it plainly, migrating to the cloud without [DevSecOps](https://www.infosecurity-magazine.com/blogs/security-devops-implementations-1/) doesn’t make sense. DevSecOps is the way to successfully implement cloud applications from the standpoints of both security and quality. For organizations on this path, cloud champions should ask what percentage of our CI/CD pipeline is fully automated? Does it include automated unit tests, third-party risk checks, integration tests, security tests, security checks and audit artifacts, and can security leaders show a simple chart reflecting the DevSecOps capability progress over time? #### Do we have knowledgeable cloud practitioners in place? Migrating from on-premise servers and infrastructure to the cloud might require existing employees to be re-skilled and trained for the organization’s intended cloud uses. Independent reviews are critical, and [cloud audits performed by credentialed auditors](https://www.isaca.org/credentialing/certificate-of-cloud-auditing-knowledge) will typically surface significant security and/or compliance risks, particularly given the fast-evolving regulatory landscape for data governance and data privacy. The questions above are just a starting point for making cloud migrations a success. In today’s business climate, forward-thinking boards should want to know what their organizations are doing to stay ahead of the curve. Cloud changes rapidly with new capabilities, and management and board directors should be curious about what their teams are doing to keep up on an ongoing basis. The business landscape will benefit from the large volume of cloud migrations that are taking place, but organizations need to be mindful that just because they are transitioning to the cloud does not guarantee success. Related security, risk and regulatory considerations need to be accounted for to ensure the intended business benefits are realized. [Cloud migration](https://shardsecure.com/blog/tag/cloud-migration) ## Read on ![](https://shardsecure.com/hubfs/Picture2.jpg) June 15 2026 ### [ShardSecure MCP Secure Gateway](https://shardsecure.com/blog/shardsecure-mcp-secure-gateway-identity-aware-data-redaction-and-least-privilege-context-enrichment-for-ai-inference) [Read more](https://shardsecure.com/blog/shardsecure-mcp-secure-gateway-identity-aware-data-redaction-and-least-privilege-context-enrichment-for-ai-inference) ![](https://shardsecure.com/hubfs/Keyboard%20with%20high%20tech%20user%20map%20icons%20and%20symbols-1.jpeg) February 18 2026 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Unstructured Data Left Exposed: A Cloud Breach That Should Worry Every Enterprise](https://shardsecure.com/blog/unstructured-data-left-exposed-a-cloud-breach-that-should-worry-every-enterprise) [Read more](https://shardsecure.com/blog/unstructured-data-left-exposed-a-cloud-breach-that-should-worry-every-enterprise) ![](https://shardsecure.com/hubfs/Keyboard%20with%20high%20tech%20user%20map%20icons%20and%20symbols-1.jpeg) November 12 2025 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Can You Really Trust Hyperscalers with Your Data at Rest?](https://shardsecure.com/blog/can-you-really-trust-hyperscalers-with-your-data-at-rest) [Read more](https://shardsecure.com/blog/can-you-really-trust-hyperscalers-with-your-data-at-rest) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/Acronis%20and%20ShardSecure%20unveil%20a%20groundbreaking%20technology%20partnership%20set%20against%20a%20backdrop%20of%20a%20sleek%20modern%20office%20filled%20with%20digital%20screens%20displaying%20dynamic%20data%20flows%20The%20atmosphere%20buzzes%20with%20excitement%20and%20anticipation%20illuminated%20by%20sof-1.png) October 16 2025 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Acronis + ShardSecure: Stronger data protection for modern threats](https://shardsecure.com/blog/acronis-shardsecure-stronger-data-protection-for-modern-threats) [Read more](https://shardsecure.com/blog/acronis-shardsecure-stronger-data-protection-for-modern-threats) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/The%20image%20portrays%20a%20hightech%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20data%20security%20concepts%20At%20the%20forefront%20a%20glowing%20vault%20symbolizing%20advanced%20filelevel%20encryption%20stands%20tall%20surrounded%20by%20intricate%20patterns%20of%20fragmented%20data.png) October 1 2025 | [Data Sensitivity](https://shardsecure.com/blog/tag/data-sensitivity) ### [Revolutionizing Data Security: How Agentless File Level Encryption Makes Stolen Data Useless](https://shardsecure.com/blog/sensitive_data) [Read more](https://shardsecure.com/blog/sensitive_data) ![unstructured data](https://shardsecure.com/hubfs/Digital%20image%20of%20globe%20with%20conceptual%20icons.%20Globalization%20concept.jpeg) September 15 2025 | [Cybersecurity News](https://shardsecure.com/blog/tag/cybersecurity-news) ### [Elevating unstructured data security: ShardSecure® and Entrust® Join Forces!](https://shardsecure.com/blog/entrust_partnership) [Read more](https://shardsecure.com/blog/entrust_partnership) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/scales%20%20ransomware%20attack%20to%20pay%20the%20money%20or%20risk%20the%20attack.jpeg) July 29 2025 | [Ransomware](https://shardsecure.com/blog/tag/ransomware) ### [CISOs on Strategic Considerations in Ransomware Response](https://shardsecure.com/blog/ransomware-fine) [Read more](https://shardsecure.com/blog/ransomware-fine) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/Image%20for%20AI%20data%20types-1.jpeg) July 29 2025 | [Data security](https://shardsecure.com/blog/tag/data-security) ### [The Growth of AI is driving the Imperative of Securing Unstructured Data](https://shardsecure.com/blog/ai-unstructured-data) [Read more](https://shardsecure.com/blog/ai-unstructured-data) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20hightech%20digital%20landscape%20showcasing%20a%20sleek%20modern%20office%20environment%20illuminated%20by%20soft%20blue%20and%20white%20lighting%20In%20the%20foreground%20a%20large%20computer%20screen%20displays%20intricate%20graphs%20and%20charts%20related%20to%20data%20security%20while%20a%20gr.jpeg) July 22 2025 | [Data security](https://shardsecure.com/blog/tag/data-security) ### [How to make your SharePoint data of zero value in a zero day attack!](https://shardsecure.com/blog/sharepoint_breach) [Read more](https://shardsecure.com/blog/sharepoint_breach) [![ShardSecure®](https://shardsecure.com/hubfs/ShardSecure%20brand%20assets/Logo%20(2022)/ShardSecure-Logo__Horizontal--White.svg "ShardSecure®")](https://shardsecure.com/) 101 Avenue of the Americas, 9th Floor, New York, NY 10013, United States of America [![linkedin](https://shardsecure.com/hubfs/_2023/li.svg) ](https://www.linkedin.com/company/shardsecure) [![tweeter](https://shardsecure.com/hubfs/_2023/tweeter.svg) ](https://www.twitter.com/ShardSecure) [![facebook](https://shardsecure.com/hubfs/_2023/facebook.svg) ](https://www.facebook.com/ShardSecure/) [![facebook](https://shardsecure.com/hubfs/_2023/youtube.svg) ](https://www.youtube.com/@shardsecure877) © 2026 ShardSecure®. All rights reserved. [Privacy Policy](https://shardsecure.com/privacy-policy) ![websights](https://ws.zoominfo.com/pixel/62e7bb6d62a6b2008e071c83) ![](https://px.ads.linkedin.com/collect/?pid=5456580&fmt=gif) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Robert Clyde", "url" : "https://shardsecure.com/blog/author/robert-clyde" }, "dateModified" : "2023-09-08T14:31:26.138Z", "datePublished" : "2021-04-01T04:00:00.000Z", "headline" : "Questions enterprises should be asking as they migrate to the cloud", "image" : [ "https://shardsecure.com/hubfs/Blog%20media/cloud-migration-questions-for-enterprises%20(1).jpg" ], "mainEntityOfPage" : { "@id" : "https://shardsecure.com/blog/cloud-migration-questions-for-enterprises", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://shardsecure.com/hubfs/ShardSecure-Logo__Horizontal--Purple-Inverted.svg" }, "name" : "ShardSecure" } } ```