NATO's battle for cloud sovereignty: Speed is existential

Build a digital backbone faster than adversaries can evolve or lose the information war

NATO is in an existential race to develop sovereign cloud-based technologies to underpin its mission, the alliance's Assistant Secretary General for Cyber and Digital Transformation told an audience at the Royal United Services Institute (RUSI) last week.

Jean-Charles Ellermann-Kingombe said the Ukraine war has highlighted the impact of technology on the battlefield, from drones to AI for targeting. Likewise, it shows the need for a coherent, secure approach to data and similarly coherent and secure cloud platforms to store and process it.

"Modern conflict no longer rewards the side with the most data," Ellermann-Kingombe declared. "It rewards the side with the ability to connect it, understand it and act on it first."

This means that cloud adoption is more than just a technical issue for "specialists in white rooms." Rather, it is a strategic and operational imperative that underpins "the credibility of our collective defense."

"But if cloud is essential, then speed is existential," he declared.

"The threat picture we face is grave," he said. China and Russia are harnessing AI and machine learning, and "exploring quantum computing and autonomous systems powered by cloud architectures that evolve every day."

This means the alliance's own digital transformation needs a clear sense of urgency. "That means building a modernized digital backbone to enhance intelligence sharing, accelerate decision making, and strengthen operational readiness across all 32 allies."

Strengthening deterrence, enhancing resilience, and investing in innovation and technology are all key pillars of the alliance's NATO 2030 strategy. The 2030 plan kicked off in 2020, before war erupted in Ukraine. Various NATO statements on the strategy refer to sovereignty, but little reference to digital sovereignty or cloud sovereignty.

However, Ellermann-Kingombe used both phrases repeatedly, saying that when it comes to sovereignty, "our approach is one of confidence through cooperation."

He outlined three dimensions of sovereignty. First is the need to control access to data as well as its location. Operational sovereignty covers how systems are operated and by who. Technological sovereignty covers the need to maintain operations, "even if a provider withdraws or is sanctioned."

At the same time, he said: "We must acknowledge the trade offs… full sovereignty often comes with reduced scalability and innovation speed."

NATO members will have to adopt multiple models, he predicted, from globally connected clouds to isolated or air-gapped environments for highly classified workloads.

"This diversity is not weakness, but the pragmatic expression of sovereignty in a complex world. It is the balance between autonomy and Alliance, between national control and collective capability."

But he insisted digital sovereignty does not have to mean isolation, and American and European companies are working closely together. "We see new models in Belgium, where US hyperscalers partner with trusted European operators to deliver jurisdictionally isolated clouds that respect local control while maintaining innovation speed."

He added: "We should also keep in mind that sovereignty and openness can coexist through technical safeguards, open standards and interoperability."

This means "we can protect what must remain sovereign. Our secrets, our decision making, our command authority. Without losing the innovation and resilience that come from NATO wide cooperation and partnership with industry from Allied nations."

Looking ahead to AI supported command and control, quantum resilient cryptography, "one thing is certain, no nation and no company can achieve this alone altogether." The Trump White house would probably disagree.

NATO – and the audience – have to keep three things in mind, Ellermann-Kingombe said. "First, that we act with urgency. The threat evolves daily. Our technologies and defenses must evolve faster. Second, prioritize collaboration. Industry, academia and allies all bring critical ideas and solutions. Harnessing them will make us strong."

"And three, design for sovereignty, build systems that enhance economy, strengthen allied trust and secure the foundations of our partnership in the digital era."

In a discussion following his speech, Ellermann-Kingombe said it was critical to engage with industry – including beyond the traditional defense sector. This includes tech companies and startups "that have much more accelerated development cycles."

But a shift to newer tech – and newer tech suppliers – also needs a much more tech savvy bureaucracy and agile procurement system, he added. This can't be left entirely in the hands of decision-makers "above 50 who grew up without mobile phones."

Ellermann-Kingombe spoke just days before the UK announced a "rapid £140 million boost" for drone and counter-drone technology. The cash is aimed towards British "SMEs, micro-SMEs, and universities."

The cash will be funneled by UK Defense Investment, the "focal point for innovation" within the Ministry of Defence, with a ring-fenced annual budget of at least £500 million.

It has already invested more than £25 million in an uncrewed AI submarine, as well as £5 million seed corn investment into Land Autonomous Collaborative Platforms – such as autonomous drones to support British Army Apache helicopters. ®