Use cloud first
- adopt the use of the GC Accelerators to ensure proper security and access controls
- enforce this order of preference: software as a service (SaaS) first, then platform as a service (PaaS), and lastly infrastructure as a service (IaaS)
- fulfill cloud services through SSC Cloud‑Brokering Services
- enforce this order of preference: public cloud first, then hybrid cloud, then private cloud, and lastly non‑cloud (on‑premises) solutions
- design for cloud mobility and develop an exit strategy to avoid vendor lock‑in