Core risk areasContent: stale sites, old versions, large libraries, long paths, checked-out files, unsupported characters, and records needs.Permissions: broken inheritance, direct permissions, orphaned users, external sharing, and sensitive content exposure.Customizations: farm solutions, scripts, templates, master pages, event receivers, timer jobs, and integrations.Forms: InfoPath, customized list forms, PDF intake, Access-style patterns, and embedded business logic.Workflows: Nintex, SharePoint Designer, SharePoint 2010/2013 workflows, scheduled jobs, and custom automation.Target readiness: SharePoint Online architecture, Teams mapping, labels, retention, sharing, ownership, and support.Risk scoring outputHigh-risk sites require owner validation and remediation before migration.Medium-risk sites can often move after targeted cleanup and pilot validation.Low-risk sites may be candidates for early waves or retirement.Forms and workflows should become first-class workstreams, not exceptions discovered during cutover.Reference notesMicrosoft SharePoint Server 2019 lifecycle