Not everything needs to be sovereign in government, but what does?

▤ Summary

This article explains how governments should classify cloud systems by sovereignty risk instead of applying one uniform rule. It argues that critical processes like payments and core registries belong in the strictest layer, while lower-risk systems can use more flexible hosting models. It also introduces the DICTU sovereignty assessment tool as a practical framework for evaluating cloud services across legal, operational, technical, and human dimensions. The piece connects this Dutch approach to broader European sovereignty frameworks and procurement practices, showing how organizations can use these models to write better cloud requirements.

▦ Linked Companies