A financial services company plans to move its existing CRM system into the cloud. The current system hosts 50 million customers. Which of the following steps should be done FIRST for moving this application into the cloud?
A. Perform security testing of the application to ensure that there are no new security vulnerabilities being introduced.
B. Perform testing to confirm that all the customer data can be mapped/migrated during the allocated change window.
C. Communicate with customers that they will be moving to a new CRM system which will be hosted in the cloud.
D. Perform a physical site assessment on where the application is hosted to ensure adequate controls are in place.
I don’t understand. Why would you perform a security test before you even know you can perform the move? Its a waste of resources. Make sure you can actually do the migration before you bother to security test – otherwise the security tests could end up pointless. Maybe I’m missing something, but I would say B, not A.