IICTI Certified Cloud Migration Specialist

Holders demonstrate that they can apply and evaluate portfolio rationalisation, 7Rs disposition and migration business case, telemetry-driven discovery and application dependency mapping, landing zone architecture, guardrails and compliance-by-design and hybrid network, DNS and connectivity engineering for migration, plus 6 further areas, in realistic professional scenarios, as defined in the AQSCERT scheme for Cloud Migration Specialist.

Who it is for: Professionals working, or preparing to work, in cloud roles.

1. 01Portfolio rationalisation, 7Rs disposition and migration business case10% of the exam

   • Evaluate an enterprise portfolio and design a defensible disposition and business case that sequences value, risk and licensing constraints.
   • Scope: Application portfolio rationalisation, 7Rs/TIME disposition, TCO and NPV modelling, migration readiness assessment, cloud adoption frameworks (CAF, Well-Architected), licensing (BYOL, Windows/SQL Server, Oracle) and executive sponsorship.
2. 02Telemetry-driven discovery and application dependency mapping10% of the exam

   • Analyze discovery telemetry to build accurate dependency graphs and move groups that minimise cross-boundary latency and cutover risk.
   • Scope: Agent-based and agentless discovery, NetFlow/eBPF/connection-table analysis, CMDB reconciliation, rightsizing from utilisation percentiles, hidden dependencies (batch, DNS, hard-coded IPs, licence servers) and move-group affinity analysis.
3. 03Landing zone architecture, guardrails and compliance-by-design10% of the exam

   • Architect a scalable, governed landing zone whose preventive and detective guardrails satisfy regulatory and organisational requirements before workloads arrive.
   • Scope: Multi-account/subscription/project hierarchies, policy-as-code (SCPs, Azure Policy, OPA), IaC pipelines, centralised logging, data residency and sovereignty, shared responsibility and regulatory controls (GDPR, DORA, NIS2, ISO/IEC 27017).
4. 04Hybrid network, DNS and connectivity engineering for migration10% of the exam

   • Design and troubleshoot resilient hybrid connectivity and name resolution that support replication traffic, coexistence and cutover.
   • Scope: Dedicated interconnects vs IPsec VPN, BGP route preference and failover, hub-and-spoke and transit topologies, IP overlap and NAT, MTU/MSS, hybrid DNS forwarding and split-horizon, egress control and bandwidth planning for replication.
5. 05Identity federation, privileged access and workload identity migration10% of the exam

   • Design identity migration that preserves authentication paths, removes long-lived credentials and enforces least privilege across hybrid estates.
   • Scope: AD/Entra ID hybrid identity, SAML/OIDC federation, Kerberos and LDAP dependencies, service accounts, workload identity federation, PAM and break-glass, least privilege, CIEM and secret migration to managed vaults.
6. 06Database and large-scale data migration engineering10% of the exam

   • Engineer data migration pipelines that meet RPO, downtime and integrity targets at scale with verifiable reconciliation.
   • Scope: Homogeneous vs heterogeneous migration, CDC and log-based replication, schema conversion, LOB and sequence handling, offline transfer appliances, throughput calculation, data validation and reconciliation, object storage migration.
7. 07Replatforming, refactoring and incremental modernization patterns10% of the exam

   • Evaluate modernization options and lead incremental refactoring that reduces risk while moving workloads to cloud-native platforms.
   • Scope: Strangler fig, anti-corruption layer, branch by abstraction, containerisation and Kubernetes replatforming, managed services adoption, session/state externalisation, 12-factor remediation and mainframe/legacy offload patterns.
8. 08Wave planning, migration factory operations and automation10% of the exam

   • Lead a migration factory that sequences waves by dependency and risk and sustains predictable, automated throughput.
   • Scope: Wave sequencing and pilot selection, migration factory roles and runbooks, block-level rehost replication tooling, automation pipelines, throughput metrics, change freeze windows, RACI and vendor coordination.
9. 09Cutover engineering, rollback design and hypercare10% of the exam

   • Design and lead cutovers with measurable acceptance criteria, rehearsed rollback and controlled hypercare exit.
   • Scope: Cutover runbooks and go/no-go criteria, DNS TTL management, blue/green and canary cutover, data freeze and final sync, point-of-no-return, rollback and fallback replication, hypercare, SLO-based acceptance and incident handling.
10. 10Post-migration FinOps, resilience and performance optimization10% of the exam

    • Optimize migrated workloads for cost, resilience and performance using measured data and FinOps governance.
    • Scope: FinOps Framework phases, commitment-based discounts, rightsizing and autoscaling, storage tiering and egress cost, tagging and unit economics, DR patterns and RTO/RPO, observability and decommissioning of source estates.

Question types

Single choice 100%

Delivery

Online (remote proctored), Test centre, On-site (corporate)

Retakes

Up to three attempts within any 12-month period. A 14-day waiting period applies after a first unsuccessful attempt and 30 days after a second. Each retake requires a new booking and fee. Retakes draw a different randomised form from the question bank.

Provisional cut score — psychometric validation is required before live delivery. Blueprint v1.0.

1. 1

   Register

   Create a free account and start the programme.

2. 2

   Practice

   Online practice test (coming soon).

3. 3

   Training

   Optional

   Online course or classroom — or skip it.

4. 4

   Certification

   Independent exam and certification decision.

Training is optional and does not by itself confer certification. Find a training partner