Navigating
Digital Resilience

Challenges, priorities and investments shaping infrastructure.

Table of contents:

Audience Surveyed ↓

5 Countries

Region Balance:


By Country:

United States: 100
France: 55
Germany 51
India: 52
309IT Leaders

Job Responsibility:

165 Executive Leadership CxO VP

95 Function Leadership Director Senior Director

49 Senior Practitioners Chief Architect Head Engineering

Responsibility for decisions:

13 Industries

Employee Range:

Industry:

Key Findings

98%

Prioritize digital sovereignty today — with more than half now taking action

Strategy

94%

Consider open source either very or extremely important to ensuring digital resilience

Sovereignty

51%

Confirm a foreign entity has previously breached their company's privacy or data regulations

Cybersecurity

64%

Believe that AI transparency pushes new digital resilience efforts

AI
Survey Question:

In your own words, what does it mean to be digitally resilient?

Maintaining control over infrastructure while adapting
to constant technological and geopolitical change

CxO, Finance Industry, Japan

Artificial Intelligence

Driving new investment and surfacing the need for resilience

IT Leaders would spend additional budget on implementing AI, data security, and resilience.

Interestingly, AI transparency concerns are pushing the digital resilience topic further:

Our investment in AI fraud tools are drifting, ignoring new patterns that were previously easily detected by simple criteria.

Manufacturing Industry, USA
Survey Question:

If your organization received an unexpected 20% increase in IT budget, where would you most likely invest it? Select all

Extra budget priorities: AI implementation leads at 70%, followed by data security (54%), digital resilience (46%), cloud migration (45%), and open source investment (39%).

Cybersecurity

Half of all respondents have already experienced a breach

51%

Say that a foreign entity has previously breached their company's privacy or data regulations.
Almost one quarter of respondents (23%) say it was a major incident.

It’s the shift from “How do we stay up?” to “How do we keep working” while we are being hit?

Telecommunications Industry, USA

Only a matter of time before we get hit.

Professional Services, USA
Survey Question:

To the best of your knowledge, has a foreign entity ever breached your company's privacy or data regulations?

Foreign entity breach experience: 23% major incident, 28% minor incident, 44% no breach, 5% unsure.

Ransomware has become smarter with AI attacking our supply chain data harder and faster than the clumsy attacks we saw three years ago.

Financial Services, Germany

Those that have already been breached feel more confident today

Very Confident

Confident

Somewhat Confident

Not Confident

Breached

Confidence in surviving disruption among organizations that have experienced a breach.

Not Breached

Confidence in surviving disruption among organizations that have not yet experienced a breach.

Sovereignty

The ultimate goal towards digital resilience

Open source is key

Open source is fundamental to digital resilience. A remarkable 94% of respondents rate it as very or extremely important, with only 6% viewing it as at least a moderate priority.
For today’s leaders, Digital Sovereignty is non-negotiable. Only a tiny fraction (under 2%) see it as a low priority, while “not a priority” received zero votes.

Sovereignty prioritised

Less than 2% say Digital Sovereignty is a low priority.
No single response said it wasn't a priority at all.

94%
Open source is very or extremely important
Survey Question:

In your opinion how important is open source software to ensuring digital resilience?

Importance of open source to digital resilience: 41% extremely important, 53% very important, 6% moderately important.

Investing in infrastructure

In fact, "Digital Sovereignty Expertise" is listed as a 'top 3' factor when evaluating a new cloud or infrastructure provider:

Survey Question:

When evaluating a new cloud or infrastructure provider, which factors matter most? Select all

  1. Regulatory compliance
  2. Technical independence
  3. Digital Sovereignty expertise

Looking ahead:

Perspectives come together when asked what matters
most over the next 5 years

Survey Question:

Looking ahead five years, which of the following do you think will matter most for digital resilience across the industry? Select all

  • AI transparency
  • Trusted global hyperscalers
  • Operational autonomy
  • Sovereign national platforms
  • Open ecosystems

It's clear, an enormous shift towards Digital Sovereignty is already underway, with only 3% disclosing sovereignty wasn't a consideration in most recent decision making.

It's more about people being unprepared than the technology itself

Manufacturing Industry, India

The talent drain …

Telco, France

Without awareness & good habits even strong systems can fail.

Executive, India

Supply chain attacks

Professional Services

Countries

How IT Leaders from each country feel their company is operationalizing sovereignty

Strategy

Findings set a high bar for those not yet developing or having established a formal strategy

93% of IT leaders either have already put a formal strategy in place or are developing one.

Less than 1% say it's not a priority, only .06% to be exact.

Formal digital sovereignty strategy: 50% developing, 43% in place, 6% need one, 1% not a priority.
Survey Question:

Does your organization currently have a formal strategy for digital sovereignty?

There are those among this audience facing genuine hurdles:

1 in every 4 know digital sovereignty is something they should care about. For them, it simply hasn't been resourced.

With a lack of expertise described as the leading reason.

I'm increasingly concerned about our reliance on a small number of cloud providers and the risk that creates.

Consulting Industry, USA

Top reasons organizations have not yet
pursued digital sovereignty
  1. Lack of internal expertise or resources
  2. Waiting for the market to mature
  3. Migration complexity and risk too high
  4. Too expensive or unclear ROI
  5. Alternatives lack features/maturity needed

Cost of the challenge

With ROI or cost stated as the fourth leading obstacle, reliance on single points of failure and the cost of redundancy are influencing organizations without a formal strategy

Single points of failure are more significant than ever. Post inflation budgets are squeezed thin, we cannot afford the redundancy required.

Financial Services, Japan

Making a move...

Despite some barriers, the vast majority surveyed are taking action with their vendors. With a growing number (51%) including digital sovereignty as a formal requirement when purchasing technology and services.

They also believe sovereign national platforms are part of the future solution, including sovereign-specific offerings from hyperscalers.

Summary

Interest is high, but organizations are still wrapping their heads around how to best move forward

Resilience built through experience

Organizations that experienced a major breach are actually the most confident that they can survive a disruption. Getting hit seems to build resilience more so than fear.

Building the rocket at launch

Half of respondents are still developing a digital sovereignty strategy despite many of those people calling it a "high priority." There is a tension between this sense of urgency and actual readiness.

AI demands resilience

70% would invest in AI with extra budget. AI transparency is a forcing function of digital resilience considerations.

Sovereignty drives investment

Regulations, Independence and digital sovereignty expertise are top of mind when selecting an infrastructure provider.

Cybersecurity influence

With many having faced major incidents, threat detection is a critical priority alongside digital sovereignty and data control.

Open source is essential

Particularlty as digital resilience concerns mount as 60% most associate open source with flexibility. 94% Consider open source either very or extremely important to ensuring digital resilience

For me, digital resilience means we’re not dependent on a single system or provider and can pivot when things go wrong.

Head Administrator, USA

You can cope with, adapt to, and recover from digital challenges without falling apart when technology goes sideways

CxO, France, Retail
Survey Question:

In your own words, what does it mean to be digitally resilient?