The changing geopolitical environment is pushing companies to identify which hardware and software dependencies they can accept and which could represent critical vulnerabilities. The objective is not complete self-sufficiency, considered impossible today, but to recover greater control over strategic technologies and business data.
At a Digital Round Table organized by Radio24 on digital sovereignty, Giuliano Noci, vice rector of Politecnico di Milano, identified corporate data management as a central priority. In his view, sovereignty should be expressed through control of the data value chain.
Giuseppe Di Franco, CEO of Lutech, emphasized the importance of internal expertise, capable partners and knowledge of the business context. These elements should allow a company to move from one provider to another while retaining control over its data, processes and business functions. He also warned that delays could make the transition more expensive and force companies to give up part of their sovereignty in order to catch up with other countries.
Data control also depends on the applications that use information from companies and public administrations. Cristiano Cannarsa, CEO of Sogei, cited Italy’s electronic invoicing, pre-filled tax returns, state budget and digital tax proceedings as examples of systems developed and controlled domestically. For him, control over these applications is another expression of sovereignty.
Cloud infrastructure was another major focus of the discussion. Andrea Campora, head of Leonardo’s Cyber & Security Solutions division, described the approach adopted for Italy’s National Strategic Hub for public administration. The model combines private cloud infrastructure with US hyperscalers, while classifying data according to its level of sensitivity: ordinary, strategic or critical. Data stored with hyperscalers is encrypted, reflecting a pragmatic approach that balances costs, risks and business value.
The European Union is also working to support a European cloud industry and direct part of public procurement toward European providers. Innocenzo Genna, an expert in European digital regulation, said the response from the EU and its member states had been late, noting that US hyperscalers already controlled most of the European cloud market when the debate over cloud sovereignty gained momentum.
According to Genna, European action is developing along three main lines. The first is reducing companies’ dependence on the technologies they use through effective rules on portability, interoperability and switching providers, an area addressed by the Data Act. A further proposal under discussion in Brussels concerns public procurement in the cloud sector. The Cyber Security Act, meanwhile, focuses on hardware supply chains.
Sources: Il Sole 24 Ore Italia.