If there is any doubt in the industry whether digital sovereignty has become a boardroom priority or not, a recent report titled “Navigating Digital Resilience” by SUSE has settle it down.
Nearly 98% of IT leaders surveyed by SUSE has said digital sovereignty is a priority. Yet only 52% are actively taking steps to achieve it. For CIOs, this gap between ambition and execution isn’t just an operational detail, it is a startetegic vulnerability. As AI adoption accelerates and regulatory expectations intensify, the window to act decisively is narrowing.
AI as a catalyst or complicator
The report highlights the tension that lies in the relationship between AI and sovereignty. On one hand, 64% of IT leaders believe AI transparency; control over model training and provenance, will be the top driver of digital resilience over the next five years. On the other, when offered a hypothetical 20% budget increase, organisations overwhelmingly prioritise AI implementation over sovereignty investments.
This signals a troubling pattern: the pressure to adopt AI is outpacing efforts to manage the risks it introduces.
What’s driving action — and what isn’t
The research reveals that external pressure remains the primary catalyst for sovereignty intiatives. A full 41% of respondents admit they only act when required by customers or regulation. While 45% have included sovereignty requirements in recent RFPs and 42% selected vendors on that basis, the reactive posture suggests many enterprises are still waiting for external forces to compel change rather than treating sovereignty as a proactive differentiator.
The report highlights notable regional variation:
- India leads with 62% of respondents describing digital sovereignty as a genuine strategic priority they are actively investing in.
- Germany and Japan follow at 57% each.
- The U.S. stands at 52%, with 61% expressing optimism about digital resilience and 41% already having a formal sovereignty strategy.
- France trails at 39% actively investing.
Control as the common thread
While definitions of digital resilience vary, the report finds organisations converging around a core priniciple: control.
Top priorities include:
- Cybersecurity and threat detection (63%)
- Multi-cloud or hybrid diversification (52%)
- Backup and recovery (45%)
- Continuous monitoring (44%)
Resilience is no longer just about surviving disruptions—it’s about maintaining control in increasingly complex, AI-driven environments.
The hyperscaler dilemma
Enterprises remain deeply reliant on hyperscalers, evne as sovereignty concerns grow. A notable 65% of respondents say hyperscalers are relevant for supporting sovereign workloads, creating a delicate balancing act between scale, convenience, and jurisdictional control.
This tension is driving demand for open, interoperable solutions and regional ecosystems that offer flexibility without lock-in.
What CIOs should consider now
- Audit the gap: Assess whether your organisation’s stated sovereignty priorities are matched by budget allocation and concrete initiatives.
- Embed sovereignty into AI strategy: Don’t treat governance as a bolt-on. Build control over data, models, and infrastructure into AI programmes from inception.
- Move from reactive to proactive: Waiting for regulation or customer pressure is a losing strategy. Early movers will shape vendor relationships and competitive positioning.
- Evaluate hyperscaler dependency: Understand where reliance on global providers creates risk—and where open, interoperable alternatives can provide optionality.
- Tailor strategy to geography: Recognise that regulatory and market conditions vary. A one-size-fits-all approach to sovereignty will fall short.
Looking forward
The Navigating Digital Resilience report delivers a sobering message: nearly everyone agrees digital sovereignty matters, but far fewer are acting on it. For CIOs, closing this gap is no longer optional. In an era where AI is both the engine of innovation and a source of new risk, control over infrastructure, data, and models is becoming the foundation of competitive resilience.
The question is no longer whether to prioritise sovereignty—it’s whether you’re moving fast enough to make it real.