Estimate timeline for replacing SFTPs

A sneaky little task this. Seems ultra simple, but in reality, a slightly more convoluted process than anyone assumes it will be.

Many businesses rely on successful push-pull of data using SFTP locations, between themselves and their external partners, and there are many downstream business processes that rely on these operating. As such, it is key to get this right. For a business integration project, there are likely multiple SFTPs that need migrating, so several of these ned to happen simultaneously.

Outline timeline below.

Step 1 - Designated SFTP owner makes contact with external party to notify them about the upcoming changes, and to arrange a discussion between IT representatives on both sides, to discuss technical process to change the SFTP

Time estimate: 1 day to 2 weeks (due to matching up availability on both sides)

Step 2 - Each side completes requisite security questionnaires

Time estimate: 1 day to 2 weeks (due to needing to find the answers - security-minded organisations, especially ones protecting a Cyber Essentials accreditation will often not proceed without having taken this step)

Step 3 - IT representatives on both sides create new SFTP sites/locations with relevant permissions and automation rules

Step 4 - IT and external party test connections to ensure users can access the new SFTP sites, ensure all functionalities (upload, download, permissions) work as expected, as well as any automated push-pull mechanisms

Time estimate: 1 day to 2 weeks (due to matching up availability on both sides, and possibly the need to wait for batch jobs to run to deposit and collect data)

Step 5 - Once migration date agreed and confirmed, designated owner makes contact with external party to notify them about date for the change and from which date they should use the new location to deposit or retrieve data

Give at least 4 weeks in the plan for migrating multiple SFTP locations, 6 weeks is better.