Playbook
We need a governed Azure foundation before any team builds a workload
A growing engineering organisation wants to stop teams provisioning Azure resources directly. The CIO has asked for a landing zone with identity, network segmentation, policy, and cost visibility in place before any team is offered a subscription.
Trigger — CIO sponsorship; engineering teams blocked from production until governance lands.
Good outcome — Subscription-vending pipeline live with policy + cost guardrails, identity, and a paved-road network.