Isolated development, QA and production environments, controlled promotion between them, and the data-handling boundaries that separation requires.
Alongside it, the migration of the Office of General Counsel into Microsoft Azure — tenancy, placement and the segmentation tying cloud workloads back to the enterprise.