CIOPages
All RFP packages

RFP Package · Foundational IT & Infrastructure

Cloud Migration & Modernization Platforms RFP questions and template

120 questions, 10 demo scenarios and a five-vendor scorecard for choosing Cloud Migration & Modernization Platforms software, in one Excel workbook.

What this package is for

Use it to run a Cloud Migration & Modernization Platforms software selection, from the first long list to the final scorecard.

What the category covers. Software that discovers, assesses, plans and moves server and database workloads to cloud and private-cloud destinations: discovery and dependency mapping, disposition and cost modeling, wave orchestration, replication, cutover and rollback, replatforming and post-move optimization. Bought by infrastructure, cloud and enterprise architecture leaders running a data-center exit, a hypervisor exit or a cloud migration program.

A selection usually runs in three rounds. The package has questions for each:

  • RFI, to the long list. 25 questions screen out products that lack something you need.
  • RFP, to the shortlist. 62 questions ask how each product does the work.
  • Deep dive, to the finalists. 33 questions ask for proof on your own data.

10 demo scenarios tell each vendor what to load and what to show, so every product does the same work in front of you. 100 due-diligence questions cover security, integration, implementation and exit. The scorecard weights the answers and ranks up to five vendors.

Each question comes with why it matters, what a good answer looks like and the red flags, so the people scoring the replies know what to look for.

3 questions from the package

From the RFI round. The first shows part of the guide each question carries; the workbook adds follow-ups, how to verify the answer, a priority and a weight.

1. Provide a matrix of the source platforms your product can discover, showing for each whether collection is agentless, agent-based, or both.

Why it matters. If a source type in the buyer's estate can only be inventoried with agents, or cannot be inventoried at all, the buyer must plan an agent rollout or collect data by hand. Either way the inventory has gaps that weaken every later assessment step.

Good answer
  • Hypervisor, physical, and cloud sources are listed as separate rows with supported version ranges
  • States which attributes are unavailable in agentless mode compared with agent-based mode for each source
  • Covers the operating system families in [operating system versions]
Red flags
  • Claims support for "all major platforms" without version ranges
  • Physical servers are covered only through manual spreadsheet or file import
  • No distinction between generally available and planned support

2. List the methods your product uses to detect dependencies between servers, stating for each method whether it requires an agent on the server.

Why it matters. If dependency detection relies on one method, servers where that method cannot run are missing from the map. Their integrations are then first discovered when they break at cutover.

3. For each of the six dispositions (retire, retain, rehost, replatform, repurchase, refactor), state whether your product generates it as a recommendation or only records it when a user assigns it manually.

Why it matters. If the product can generate only some dispositions, the rest depend on manual analysis. Under deadline pressure, the applications that need that analysis tend to default to rehost.

Capability areas

Discovery & Inventory (12)

Agentless and agent-based collection of servers, operating systems, installed software, databases, and utilization data across hypervisor, physical, and cloud sources, including collector deployment, credential handling, and blind-spot reporting. Dependency relationships are covered in DEP.

Dependency & Application Mapping (13)

Network-flow and process-level dependency detection, grouping of servers into applications, surfacing of undocumented integrations, and import or reconciliation with existing records such as a CMDB. Wave sequencing based on these maps is covered in WAV.

Portfolio Assessment & Disposition (11)

Per-application readiness scoring, six R's disposition recommendations (retire, retain, rehost, replatform, repurchase, refactor), anti-pattern and blocker reports, and how the buyer reviews and overrides recommendations. Cost figures behind those recommendations are covered in TCO.

Right-Sizing & Cost Modeling (9)

Performance-based right-sizing, target instance and storage mapping, total-cost comparison across candidate destinations, and license portability assumptions in the model. Commercial terms for the platform itself are excluded.

Wave Planning & Orchestration (11)

Grouping applications into migration waves by dependency affinity, scheduling against fixed deadlines, runbook automation, and orchestration of many servers per wave with status tracking. Individual cutover mechanics are covered in CUT. Program-level progress reporting across waves is included.

Replication & Data Movement (12)

Continuous block-level, byte-level, or journal-based replication, initial sync and delta handling, bandwidth throttling, source-side performance impact, database replication, and application-consistent capture. Encryption of the replication stream is covered in LZG. Bulk transfer of file shares and object data, online or by offline transfer device, is included.

Test Cutover, Cutover & Rollback (11)

Non-disruptive test cutovers in isolated networks, production cutover sequencing, achievable recovery point and cutover window per workload, post-cutover health checks, and rollback to source. Ongoing optimization after sign-off is covered in POM. Network changes at cutover (IP address retention or re-addressing, DNS updates, load balancer repointing) are included.

Source & Target Coverage (10)

Supported source platforms, target clouds and private-cloud destinations, cloud-to-cloud moves, operating system and database version support, and exit paths off a licensed hypervisor platform to cloud, to hosted virtualization services, or to a private landing zone. Replication internals are covered in REP.

Replatform & Modernization (13)

Automated replatforming to managed databases, containers, and managed application tiers, schema and code conversion, AI-assisted code refactoring, and mainframe or legacy-language modernization where in scope. Generic AI governance is covered by cross-cutting modules.

Landing Zone & Migration Governance (9)

Encryption of replication in transit and at rest, customer-managed keys on target disks, role separation within migration workflows, audit records of each cutover action, and enforcement of landing-zone guardrails such as networking, tagging, and policy on migrated resources. Vendor-wide security posture is covered by the security module.

Post-Migration Validation & Optimization (9)

Application validation after the move, right-sizing and commitment recommendations for landed workloads, cost and tagging reporting per wave, and decommissioning tracking for vacated source servers and data-center footprint. Pre-move cost modeling is covered in TCO.

Demo scenarios

Each scenario lists the data to load before the demo, then the steps to show, and the questions it scores.

  1. Discover a tier-1 application end to end
  2. Assign dispositions across a sample portfolio
  3. Right-size one application group for two destinations
  4. Plan waves backward from a license renewal date
  5. Test cutover and rollback of a database workload
  6. One workflow for public and hosted destinations
  7. Replatform a database and containerize one tier
  8. AI-assisted refactor with developer review
  9. Land a workload in a guarded landing zone
  10. Review a completed wave before closing it

Due diligence

The workbook carries the screening questions from these modules. Each module is also sold on its own.

Questions about this package

How many Cloud Migration & Modernization Platforms RFP questions are there?

120 solution questions in 11 capability areas: 25 for the RFI, 62 for the RFP and 33 deep-dive questions for the finalists. The workbook adds 100 due-diligence questions on security, integration, implementation and exit.

What comes with each question?

Why it matters, good-answer signals, red flags, follow-up questions, how to verify the answer (a demo step, a test or a document), and a suggested priority and weight for scoring.

Can I edit the questions?

Yes. The workbook is an ordinary Excel file. Change, add or remove questions, and change the weights; the scorecard recalculates.

Which license do I need?

The Enterprise License covers any number of evaluations inside one organization. The Consultancy License covers use with any number of clients. Neither allows reselling or republishing the questions.

Before you shortlist

The buyer guide compares the products in this category and what decides between them.

Buyer Guide
Cloud Migration & Modernization Platforms

For the business side of the same change: