Insight

Cloud Migration Strategy: What to Move First, and What to Leave

Origin Digital5 November 202611 min readLast updated 5 November 2026

AI Overview

A successful cloud migration strategy treats every system individually rather than forcing a single approach across the entire IT environment. By assessing workloads against the 7 Rs, organisations can decide what to move, what to replace and what to leave behind. Careful planning ensures data residency requirements are met while keeping running costs predictable.

Key Highlights

  • Treat every workload as a separate migration decision
  • Inventory your systems completely before planning the move
  • Use the 7 Rs to categorise your migration approach
  • Move simple, low-risk workloads first to build team confidence
  • Retaining systems on-premise is a valid strategic choice
  • Plan for overlapping costs during the transition period

A cloud migration strategy is a decision per workload

Moving an entire IT environment with a single blanket approach rarely works. A proper cloud migration strategy evaluates each system to determine the right path forward. You must decide what happens to each workload, in what order the moves occur and the technical reasoning behind those choices.

Different systems serve different purposes and carry distinct risks. A basic file server might move easily to a modern collaboration platform with minimal disruption. A complex line-of-business application often requires careful testing and a phased approach.

A reporting database might need significant architectural changes to perform well off-site. Treating these three examples the same way leads to project delays and cost overruns. Your strategy must account for these variations before any data moves.

Taking the time to build a specific plan for each workload prevents costly mistakes later in the project. It aligns technical execution directly with business priorities and risk tolerance. A successful cloud migration strategy is simply a collection of well-researched, individual workload decisions.

Start with an honest inventory

You cannot plan a migration without a complete picture of what you currently run. Many organisations discover forgotten servers and shadow IT only when they begin mapping their environment. An accurate inventory forms the foundation of all cloud migration strategies.

Skipping discovery is how unexpected outages and budget blowouts happen during the transition. You must understand how an application behaves locally before you can accurately predict how it will perform off-site. Gathering detailed telemetry and business context prevents critical systems from failing after cutover.

Every system needs a documented profile. This profile captures the technical requirements and the business context of the application. Gather the following details for each workload before making any decisions.

  • The business owner responsible for the system
  • Dependencies and integrations with other applications
  • Data sensitivity and compliance requirements
  • Licensing terms and restrictions
  • Performance and latency needs
  • Support lifecycle, including end of support dates
  • How often the system or its data changes

Dependencies decide the order

Undocumented integrations are the most common reason a move stalls. If you move an application but leave its database behind, the resulting latency can render the system unusable. Map how systems talk to each other to group them into sensible migration waves.

The 7 Rs: seven cloud migration strategies

Amazon Web Services identifies seven distinct ways to handle a workload during a migration. These are widely known as the 7 Rs. They provide a common language for technical teams and business leaders to discuss the future of each application.

Not every system needs to be rewritten for the cloud. Some applications will simply move as they are, while others will be replaced entirely by software-as-a-service alternatives. Choosing the right approach balances the effort required against the long-term benefits.

Technical teams evaluate these seven options during the initial assessment phase of the project. Applying the correct label to each workload creates a clear roadmap for the engineering effort required. This structured categorisation ensures that complex legacy systems are not accidentally scheduled for a simple weekend move.

The seven common migration strategies, from least to most change
StrategyWhat happensEffortA good fit when
RetireThe system is decommissioned and turned off.NoneThe workload is no longer used or needed.
RetainThe system stays in its current environment.NoneThe application cannot move or is due for replacement.
RehostThe system moves exactly as it is (lift and shift).LowYou need to exit a data centre quickly.
RelocateA virtualised environment moves with minimal change.Low to mediumYou want to shift VMware workloads directly to cloud infrastructure.
RepurchaseThe application is replaced by a different product.MediumA software-as-a-service alternative exists for the workload.
ReplatformThe underlying infrastructure is upgraded during the move.MediumYou want to use a managed database or modern operating system.
RefactorThe application is rewritten to use cloud-native features.HighThe system needs significant performance or scalability improvements.
The seven common migration strategies, from least to most change

What to move first

Selecting the right initial workloads sets the tone for the entire project. Early moves build confidence across the organisation and prove that the methodology works. They also teach the technical team how to handle access, monitoring, backup and cost reporting in the new environment.

Moving these straightforward systems first creates early momentum for the broader project. It allows the business to see tangible progress without risking critical operational capabilities. The lessons learned during these initial waves inform the planning for more complex migrations later.

Start with systems that have a high tolerance for minor disruptions. Complex applications with dozens of integrations should wait until the team has established a rhythm. Consider these candidates for your first migration waves.

  • Email, files and collaboration, which usually move to Microsoft 365 and SharePoint
  • Development and test environments
  • Standalone apps with few integrations and clear owners
  • Backup and disaster recovery copies
  • New workloads built cloud-first rather than migrated
Workloads sorted into separate paths, some rising to the cloud first and others staying grounded
Each workload gets its own path: some move early, some later, and some stay where they are.

What to leave, at least for now

Migrating to the cloud does not mean moving every single server immediately. Some systems pose too much risk to the business if moved early in the process. Identifying these difficult workloads helps you avoid early failures.

Forcing these problematic workloads into an early migration wave usually results in severe performance degradation. Business operations can grind to a halt if a tightly coupled database is suddenly separated from its application by a high-latency connection. Recognising these limitations early allows you to plan alternative solutions or schedule them for a later phase.

Certain applications are fundamentally unsuited to off-site hosting without major architectural changes. Others carry contractual or compliance burdens that complicate a quick transition. Keep these systems out of your initial migration waves.

  • Systems due to be replaced soon, where a migration is effort spent twice
  • Tightly coupled applications that would need several others moved with them
  • Workloads with strict latency needs close to on-site equipment or plant
  • Legacy software tied to specific hardware or licensing
  • Workloads whose data cannot leave a site for contractual reasons
An on-premise server connected securely to a cloud environment in a hybrid setup
A hybrid end state, with some systems on-premise and some in the cloud, is valid when it is chosen on purpose.

Retain is a decision, not a delay

Leaving a system on-site is a valid choice. Write down exactly why it stays and schedule a date when it will be reviewed. A hybrid end state is perfectly acceptable when chosen on purpose.

The phases of an on-premise to cloud migration

A structured approach prevents an on-premise to cloud migration from turning into a chaotic series of weekend outages. Breaking the project into logical phases ensures nothing is missed. Microsoft's Cloud Adoption Framework provides practical guidance for structuring this work.

Rushing through these phases compromises the stability of the entire IT environment. A methodical progression ensures that security, governance and cost controls are embedded into the foundation of the new platform. Treating a migration as a phased project mitigates operational risk.

Each phase requires specific skills and outputs before the next can begin. Skipping the planning phase to start moving servers inevitably leads to rework. Follow these four distinct phases to keep the project on track.

Four phases of an on-premise to cloud migration
  1. 1

    Assess

    Inventory all workloads, map dependencies and determine the right migration strategy for each application.

  2. 2

    Plan

    Group workloads into migration waves, design the target cloud architecture and prepare the landing zone.

  3. 3

    Migrate

    Execute the moves according to the plan, testing each workload thoroughly before final cutover.

  4. 4

    Optimise

    Review performance, adjust resource allocations and implement cost controls once systems are running in the cloud.

Azure migration in practice

For organisations already using Microsoft 365, Azure is often the natural home for infrastructure. An Azure migration typically begins with the Azure Migrate tool. It discovers on-premises servers and assesses their readiness before any data moves.

Most technical teams start by rehosting virtual machines to get comfortable with the platform. Once familiar, they often replatform stable workloads to reduce maintenance overhead (for example a managed database). Review your software licensing early in the design phase.

Azure Hybrid Benefit lets organisations apply eligible existing Windows Server and SQL Server licences to Azure. These licences must have active Software Assurance or qualifying subscriptions. Where it applies, it can reduce the ongoing compute cost of Microsoft workloads.

Application migration to the cloud requires discipline. Test each application in the target environment thoroughly before the final cutover. Always plan a rollback procedure in case the application fails to perform as expected off-site.

Keep security intact during the move

Cloud security follows a shared responsibility model. The provider secures the underlying physical platform and network infrastructure. The customer remains completely responsible for identities, data, access and configuration.

Migrations often expose poor security practices that were hidden on internal networks. Do not copy weak configurations into the cloud. Fix identity issues first by enforcing multi-factor authentication, applying least privilege access and removing stale accounts.

Security controls must operate effectively during the transition period when systems span both environments. Keep logging turned on through the cutover window to monitor for suspicious activity. Ensure your target architecture aligns with the mitigation strategies in the Essential Eight.

Maintaining visibility across both the old and new environments is critical during the transition. Security teams must be able to detect anomalies regardless of where the workload temporarily resides. Consistent enforcement of access policies prevents malicious actors from exploiting the confusion of a migration window.

  • Verify identity and access controls before moving data
  • Ensure data is encrypted in transit and at rest
  • Do not replicate overly permissive firewall rules
  • Test backups and restores in the new environment
  • Confirm logging and monitoring capture all cloud resources

Data residency and privacy

Keeping data onshore is entirely achievable for Australian organisations. Azure has Australian regions (Australia East in Sydney, Australia Southeast in Melbourne, Australia Central in Canberra). AWS also operates Australian regions in Sydney and Melbourne.

Despite local infrastructure, these regions must be chosen deliberately during setup. Australian Privacy Principle 8 (OAIC) covers the cross-border disclosure of personal information. You must know exactly where personal information goes, which includes understanding support and backup locations.

Always ask your cloud providers where data is stored, processed and supported. Global support teams might access your systems from overseas during troubleshooting. Origin Digital makes Australian data residency the default, with any offshore processing treated as a disclosed exception.

Drafting clear policies around data handling reduces regulatory risk. Business leaders must understand that choosing a local data centre does not automatically guarantee that support personnel are also local. Transparency from your hosting provider is essential for maintaining compliance with Australian privacy laws.

Plan the cost before the first bill

Cloud pricing models differ fundamentally from traditional hardware purchases. You pay for what you provision, which makes accurate sizing critical. Failing to model costs accurately can lead to unpleasant surprises in the first billing cycle.

Cost management does not end at cutover. Right-size your resources once real usage is visible in the new environment. Review your consumption monthly to catch anomalies before they become expensive problems.

Establishing a regular rhythm for financial review prevents cloud spend from spiralling out of control. Tagging resources by department or project provides granular visibility into where money is being spent. This financial accountability is a core component of operating successfully in a consumption-based environment.

Costs that are easy to miss in a cloud migration
CostWhy it is missedWhat to do
Running both environmentsOld hardware still runs while the cloud environment is built.Budget for duplicate hosting costs during the transition.
Data transferCloud providers often charge for data leaving their network.Map traffic patterns to estimate egress fees accurately.
LicensingExisting licences may not transfer to cloud environments.Audit software agreements before finalising the target architecture.
Over-provisioned resourcesServers are matched to old hardware specs, not actual usage.Size cloud resources based on historical performance metrics.
Skills and supportInternal teams need training to manage the new platform.Include training and third-party support in the project budget.
Costs that are easy to miss in a cloud migration

Mistakes that slow migrations down

Even well-funded projects can stall if the execution lacks discipline. Many organisations repeat the same structural errors when moving workloads off-site. Recognising these pitfalls early keeps the project timeline intact.

Avoid these common errors to ensure a smoother transition. Technical teams must remain vigilant against taking shortcuts that compromise the target architecture. Proper governance and strict adherence to the migration plan will keep the project aligned with business objectives.

  • Moving workloads without a complete and accurate inventory
  • Treating every workload the same instead of evaluating individually
  • Leaving identity and access cleanup until after the migration
  • Executing a cutover without a documented and tested rollback plan
  • Ignoring software licensing constraints until the first invoice arrives
  • Declaring victory at cutover instead of optimising the environment

A strategy is a living plan

Review and refine the plan after each wave, because every move teaches you something about the next. Origin Digital gives vendor-agnostic advice, with no resale margin steering the recommendation, and supplies Microsoft 365 and Azure licensing through Pax8.

Frequently asked questions

What are the 7 Rs of cloud migration?

The 7 Rs are seven common strategies for migrating workloads to the cloud. They include retire, retain, rehost, relocate, repurchase, replatform and refactor. These categories help organisations decide the best technical approach for each individual application.

Which migration strategy moves on-premise systems to Azure without modification?

The rehost strategy moves systems exactly as they are without architectural changes. This approach is often called lift and shift. Tools like Azure Migrate are frequently used to execute this type of migration.

How much does it cost to migrate to the cloud?

The total cost depends entirely on your specific workloads and the chosen migration approach. You must budget for parallel running costs, data transfer fees and software licensing during the transition. Once workloads are migrated, you can right-size resources to control ongoing monthly expenditure.

How long does a cloud migration take?

The timeline depends heavily on the number and complexity of the workloads involved. Small environments with simple applications can move relatively fast. Larger infrastructure projects are staged in waves to manage risk and minimise business disruption.

Is the cloud more secure than on-premise?

Cloud security operates on a shared responsibility model. The cloud provider secures the physical infrastructure, but you remain responsible for access, data and configuration. If you configure your environment poorly, the cloud can be just as vulnerable as an on-premise network.

Do we have to move everything to the cloud?

No, you do not have to move every workload off-site. The retain and retire strategies are valid choices for systems that are unsuited for migration or no longer needed. A hybrid environment is a perfectly acceptable outcome when chosen deliberately.

About the author

Origin Digital

A senior-led technology consultancy that designs, builds and runs the technology organisations depend on. Perth-based, nationally delivered. Supporting hundreds of Australian businesses since 2022. Our Insights are written by the practitioners who deliver this work, and checked against the primary sources listed with each article.

  • IBM Silver Partner
  • Australian Cyber Awards 2026 Winner, Indigenous Cyber Business of the Year
  • Supply Nation Certified
  • WALGA Preferred Supplier, WA Local Government

Last reviewed 5 November 2026. General information only, not advice for your specific environment. More about Origin Digital

Sources

  1. Migration strategies (the 7 Rs), AWS Prescriptive Guidance
  2. Migrate to Azure, Microsoft Cloud Adoption Framework
  3. Azure Migrate overview, Microsoft Learn
  4. Azure Hybrid Benefit, Microsoft Azure
  5. Shared responsibility in the cloud, Microsoft Learn
  6. Azure regions list, Microsoft Learn
  7. AWS Regions and Availability Zones, Amazon Web Services
  8. APP 8: Cross-border disclosure of personal information, Office of the Australian Information Commissioner

Engage without a procurement detour

Talk to us about your project.

Senior-led, Indigenous-owned and approved on the panels government and enterprise buy through. Tell us what you are trying to do and we will tell you, honestly, whether we are the right fit.

  • WALGA · Preferred Supplier Arrangement
  • CUA ICT2021 · Common Use Arrangement
  • BuyICT · Digital Marketplace