| Current-state assessment | Data, system, integration, control, skills, and dependency assessment | What should be retained, remediated, replaced, consolidated, or retired? | Inventories, diagrams, contracts, policies, incidents, audits, costs, and accountable stakeholders |
| Target state | Architecture principles, platform options, integration patterns, and data-product model | Which operating and technology model best fits public-service and control needs? | Security classifications, residency, continuity, interoperability, accessibility, and procurement constraints |
| Roadmap | Prioritised migration waves, dependencies, milestones, risks, and decision gates | What can be delivered safely and in what sequence? | Funding cycles, programme portfolio, vendor commitments, release windows, and policy deadlines |
| Governance | Ownership, stewardship, decision rights, standards, forums, and escalation model | Who is accountable for data products, quality, access, changes, and risk? | Mandates, organisation design, policy ownership, delegated authority, and assurance routes |
| Engineering and migration | Pipeline designs, mappings, tests, reconciliation, cutover, rollback, and monitoring artefacts | How will data be moved and validated without unacceptable service disruption? | Source access, subject-matter expertise, environments, test data, acceptance criteria, and change windows |
| Operational transition | Runbooks, service levels, monitoring model, support responsibilities, training, and handover | How will the modernized capability remain reliable and controlled? | Support model, staffing, service desk, suppliers, on-call coverage, and operational acceptance |