IT carve-out from the parent tenant

Full separation of IT infrastructure as the prerequisite for organisational autonomy.

Client: SOS-Kinderdörfer weltweit Website: www.sos-kinderdoerfer.de Scope: AD, M365 tenant, application estate, third-party accounts, 200 endpoints Timeline: Kickoff Q2 2026 – summer 2026 cutover Model: Big-bang cutover on one date FairPlay role: Project management support including IT-leadership cover, workstream coordination, test planning, documentation Technical implementation: SOS IT and third-party providers Status: In implementation

Starting point

SOS-Kinderdörfer weltweit was fully embedded in the IT landscape of its parent organisation: shared tenant, shared domain, shared licences. Management decided on a full separation to establish operational independence and clear governance boundaries.

Challenge

• Forest trust across three organisations
• Tenant migration through a third-party tool
• Legal approval as a critical path
• Complete inventory of all systems
• Four external stakeholder axes
• Big bang without a second chance

Approach

FairPlay established the governance structure across seven documented workstreams:

1. Project planning
2. AD & Forest: new domain, two domain controllers, OU tiering, forest trust
3. Applications & third-party accounts
4. Tenant migration
5. Testing & validation
6. Communication
7. System analysis: system profiles, BIA, and emergency plan

The programme is controlled through one central test plan with pre- and post-cutover phases as the single source of truth. Technical implementation of the workstreams is handled by internal IT and third-party providers. In parallel, FairPlay also owns the Intune endpoint programme technically.

Result

Core message

External PM control in a highly complex carve-out, paired with technical ownership for the Intune foundation.