Digital sovereignty: a new economic imperative

For a long time, digital sovereignty was seen as an issue reserved for public institutions or critical infrastructure operators. Today, European legislation (NIS2, DORA) requires much greater transparency regarding partners, suppliers and solutions, raising numerous questions about the sovereignty of services. This development helps to strengthen companies’ ability to control their information flows, make informed decisions and protect their strategic assets.

Against a backdrop of digitalisation, outsourcing and the rise of AI, the issue of sovereignty takes on a very specific dimension. It can sometimes be seen as a hindrance to companies wishing to rapidly implement technological solutions for specific business needs. Indeed, it is often much quicker to adopt a SaaS solution than to set up an infrastructure to provide a service to a business department. But in a geopolitical context marked by growing and complex uncertainties, including with certain long-standing partners, the issues of sovereignty take on their full significance. Companies must now ask themselves several key questions: where is their data hosted, is it secure, who can access it, under which jurisdiction does it fall, and what alternatives exist in the event of a service interruption?

From compliance to risk management

European regulatory requirements regarding cybersecurity are becoming increasingly stringent. From the protection of sensitive data to operational resilience and risk management, businesses must be able to identify where their data is located, who has access to it, and which jurisdiction it falls under. The financial sector, which has been regulated for many years, is now best equipped to comply with these requirements. Other sectors still often perceive these new challenges as an additional constraint on top of previous ones (such as the GDPR). However, this shift is essential to ensure their survival, and control over their IT systems inevitably involves the issue of sovereignty. Understanding one’s risks and implementing measures to eliminate them or mitigate their impact must become the norm for all.

A game-changing geopolitical landscape

International tensions have served as a reminder that the hosting of digital infrastructure is not a neutral matter. Issues such as extraterritoriality, technological dependence and access to data are now at the forefront of leaders’ minds.

For businesses, the challenge lies in striking a balance between innovation, performance and risk management. The aim is not to abandon global technologies, but to develop a digital strategy that preserves decision-making autonomy over the most sensitive assets.

Cybersecurity: a cornerstone of sovereignty

It is impossible to discuss sovereignty without mentioning cybersecurity. The implementation of an Information Security Management System, for example, will make it possible to incorporate considerations of sovereignty into the management process.

Identifying critical business processes and data that is sensitive to the organisation, the ability to protect them, detect threats, respond to incidents, manage the supply chain and associated risks, and ensure business continuity are now fundamental elements of an organisation’s digital autonomy.

At Proximus NXT Luxembourg, this approach is underpinned by a comprehensive vision of cybersecurity, supported by around 100 security and cybersecurity experts. It enables businesses to strengthen their security posture in the long term, whilst supporting their strategic and operational objectives.

Cybersecurity must form the foundation of trust, business continuity and performance for organisations.
Olivier Trientz, Business Development Manager, Cybersecurity Services, Next NXT

A strategic choice for the future

Digital sovereignty is not merely a technological choice. It is a genuine strategic lever that enables businesses to better manage their risks, meet regulatory requirements and prepare for growth in an increasingly complex environment.

For organisations in Luxembourg, the question is no longer whether they should be concerned with digital sovereignty, but how to integrate it effectively into their transformation strategy.

Luxembourg has a real opportunity to become a trusted European hub for data and digital services.

Olivier Trientz, Business Development Manager, Cybersecurity Services, Next NXT