FEATURE develop a methodology for determining what sovereignty actually looks like inside a modern Cloud environment.
The starting point is that technological independence and technological selfsufficiency are not the same thing.
Wilton Mota, President, Serpro, argues that Cloud sovereignty cannot be reduced to a binary choice between sovereign and non-sovereign infrastructure. Nor can it be determined simply by asking where data is physically stored.
Instead, Serpro is examining control across three dimensions: data, operations and technology.“ This involves identifying, among other aspects, who has access to the keys, who manages the environment, to which jurisdictions it is subject, what its external dependencies are, and whether the operation can be maintained in the event of an interruption,” said Mota.
Brazil’ s answer is not technological isolation. It is controlled dependence.
That immediately raises uncomfortable questions for conventional sovereign Cloud strategies.
A government may require information to remain inside national borders, but what happens if administrators depend on software hosted overseas? Who controls the encryption keys? Can the platform still be managed if an external connection disappears? What happens when a licensing agreement ends? Can workloads move elsewhere or has proprietary technology effectively locked them in?
Brazil’ s existing Government Cloud already imposes requirements around data residency and operations within national territory. The Brazilian Cloud is intended to go further by building domestic capacity to develop, maintain and evolve critical parts of the technology stack.
The objective is not to purge foreign technology. That would be extraordinarily difficult in an www. intelligentcio. com
INTELLIGENT CIO LATAM
25