Sovereignty Shift: A Resilient Digital Future in an Era of Geopolitical Risk
As we move through 2026, almost everything is deeply intertwined with complex digital infrastructures, meaning we can’t possibly build walls high enough to keep every cyberattack or threat out of our vicinity. Therefore, rather than relying solely on the hope of preventing every breach, the focus across Europe is actively transitioning towards digital operational resilience, ensuring that essential services can withstand disruptions and recover quickly.
In this landscape, we must acknowledge a hard reality: absolute prevention is no longer achievable, and our success is now measured by our ability to maintain business continuity during and after an incident.
Operational Resilience Through Collaboration
Operational resilience is the key for achieving higher levels of business continuity. While this approach is spreading, it also means that critical regulations are being put into place — not to serve as an administrative burden, but as a much-needed collaborative baseline.
While NIS 2 helps navigate a spectrum of essential services by encouraging better incident response and supply chain security, DORA mandates that the financial sector withstand and recover from IT-related disruptions while carefully managing risks from third-party providers. Ultimately, these frameworks aim to shift our mindset from merely ticking compliance boxes to building genuine confidence in digital security.
This quest for resilience naturally extends into the realm of Digital Sovereignty, a concept often misconstrued as isolationism. In truth, it is entirely about operational control. It is completely logical that nations seek to maintain oversight of their own critical data and infrastructure.
- The Risk of Extraterritoriality:
A poignant example occurred when the Dutch government intervened in the acquisition of domestic provider Solvinity by the US-based firm Kyndryl. Described by authorities as a “country-neutral, risk-based and proportionate decision,” this was not an aggressive geopolitical move.
Because Solvinity manages vital governmental infrastructure, authorities simply wanted to ensure that critical public data wouldn’t become subject to extraterritorial laws, such as the US CLOUD Act, which could inadvertently compromise data integrity.
- Strategic Action
This milestone decision highlights a vital truth: reliance on foreign-controlled infrastructure poses significant risks. We must prioritise infrastructures and services that allow for country-neutral oversight. Investing in European cloud alternatives and open-source communities is not an isolationist technology choice; it is a vital hedge against geopolitical dependency that preserves the freedom to choose our partners deliberately.
Preparing for the Age of Autonomous AI
As digital innovation continues its relentless pace, organisations must confront the next frontier with strategic foresight. Gartner projects that 2026 will be defined by the emergence of autonomous, or “agentic,” AI. This rapid proliferation of unmanaged AI tools and machine actors is fundamentally expanding the attack surface, introducing complex operational risks that traditional security models are simply not equipped to handle.
To maintain resilience in this new landscape, our approach to identity and culture must evolve:
- The IAM Challenge: Traditional Identity and Access Management (IAM) frameworks were built for human users, not independent machine actors. In a world of agentic AI, these static models are rapidly becoming obsolete.
- The Strategic Pivot: We must transition towards credential automation and policy-driven authorisation. Security must move away from static perimeters and shift towards adaptive, behaviour-based technical models.
- Cultural Resilience: Alongside technological updates, organisations must focus on adaptive, behaviour-based training to foster an organisational culture capable of thriving amidst these sophisticated digital threats.
Conclusion: A Shared Responsibility
Security is fundamentally a team sport. Whether it is managing complex technological dependencies or coordinating with public authorities, the future belongs to those who view resilience not as a compliance burden, but as a distinct competitive advantage.
Ultimately, digital sovereignty ensures we have the freedom to choose our partners, while operational resilience ensures we have the capacity to survive when our systems are tested.
Art Resilia helps organisations navigate this shifting landscape of security and digital sovereignty — supporting them in building the control, resilience and confidence required where it matters most.
Sources:
Cleary Antitrust Watch
Dutch Government Blocks Kyndryl’s Acquisition of Solvinity in First-Ever Telecom FDI Prohibition
https://www.clearyantitrustwatch.com/2026/06/dutch-government-blocks-kyndryls-acquisition-of-solvinity-in-first-ever-telecom-fdi-prohibition/
Consultancy.eu
Advancing European sovereignty in data and technology: a practical approach
https://www.consultancy.eu/news/13800/advancing-european-sovereignty-in-data-and-technology-a-practical-approach
European Commission
Commission proposes tech sovereignty package to strengthen Europe’s digital autonomy and resilience
https://digital-strategy.ec.europa.eu/en/news/commission-proposes-tech-sovereignty-package-strengthen-europes-digital-autonomy-and-resilience
Gartner
Gartner Identifies the Top Cybersecurity Trends for 2026
https://www.gartner.com/en/newsroom/press-releases/2026-02-05-gartner-identifies-the-top-cybersecurity-trends-for-2026