Implementation plan
Phase 8: Pilot hardening
Deliverables and exit criteria for pilot hardening.
Status: planned; completion evidence not yet recorded in this documentation.
Complete:
- Dedicated production runtime cluster
- Entra production configuration
- Pilot group assignments
- Policy excluding regulated data
- Equipment Requests pilot app
- Backup schedule
- Restore drill
- Security review
- External penetration test
- Dependency and host patching runbooks
- Incident-response tabletop
- Owner/reviewer training
- Audit export
- Usage/quota alerts
- Support and escalation process
Exit criteria:
- Full pilot completion scenario from Organization pilot passes.
- Penetration-test critical/high findings are resolved.
- Restore drill meets pilot recovery objective.
- The pilot organization signs off on identity, policy, and scope excluding regulated data.
- Operations team can patch, rotate keys, recover DBs, and roll back deployments using written runbooks.
Evidence to record
Record implementation revisions, test reports, relevant ADRs, unresolved findings, the accepting owner, and acceptance date. Leave this phase planned until its exit criteria are demonstrated.