Digital sovereignty is under pressure within the central government in the cloud
The central government is increasingly using the public cloud, but governance, risk management, and strategic direction are not keeping pace.
Of the 126 material public cloud services, no prior risk assessment was conducted for as many as 67% regarding sovereignty, continuity, and data protection, among other factors.
Furthermore, the dependence on primarily American hyperscalers creates geopolitical and legal risks, partly due to the CLOUD Act and FISA 702.
The Court of Audit advises stronger central coordination, joint procurement, better contractual safeguards, realistic exit strategies, and explicit research into European cloud alternatives.
Digital sovereignty is not about data location, but a continuous process of control, risk management, and strategic autonomy.