Environment & identity
Who owns the infrastructure account, network entry point, identity provider and administrator recovery policy? Clarify data residency and mobile access requirements.
Recovery & operations
Who owns backups, restoration tests, incident response and certificates? Agree responsibility and evidence before service targets.
Updates & support
Which baseline is supported, how are updates signed, and what is the rollback plan? Qualify offline licenses and consented support access where required.