Floragasse 7 – 5th floor, 1040 Vienna

Assessment of the Digital Sovereignty of Software Systems

Digital sovereignty is not a single metric, but the result of numerous technical, organizational, and strategic factors. We help you make these different perspectives transparent and derive well-informed actions for managing and evolving your software landscape.

Modern software systems rely on a wide range of external components, platforms, and software supply chains whose risks and dependencies are often difficult for organizations to fully understand. Recent security incidents and geopolitical developments have demonstrated that digital dependencies can become a strategic risk for businesses and critical infrastructure operators.

Digital sovereignty is not a single metric but rather the result of the interplay between numerous technical, organizational, and strategic factors. Our data-driven and automatable assessment helps organizations make these different perspectives transparent and derive well-informed actions for managing and evolving their software landscape.

At its core is a multi-dimensional evaluation of digital dependencies. To achieve this, various information sources and analytical perspectives are combined to assess aspects such as cybersecurity, maintainability, software supply chains, technological diversity, and structural dependencies in an integrated manner.

In addition, contextual factors such as governance structures, technological alternatives, and organizational influences can be incorporated into the assessment.

The results are presented through structured analyses and interactive dashboards, providing decision-makers with a transparent foundation for prioritizing risks, identifying improvement opportunities, and systematically strengthening their organization’s digital sovereignty.

Upon completion of the analysis, you will receive the following results:

  • Transparent visibility into the digital dependencies within your software landscape
  • Assessment of security and maintainability indicators
  • Analysis of software supply chains and transitive dependencies
  • SBOM-based analysis of the origin and provenance of software components
  • Identification of platform, cloud, and registry dependencies
  • Analysis of concentration and vendor lock-in risks
  • Prioritized recommendations for strengthening and improving digital sovereignty

Benefits

  • Transparency into digital dependencies and software supply chains
  • Visibility into security and maintainability risks
  • Integrated assessment of technical and organizational perspectives
  • Support for strategic technology decision-making
  • Early identification of concentration and vendor lock-in risks
  • Improved traceability and understanding of complex software systems
  • Foundation for long-term resilience and open-source strategies
  • Flexible adaptation to organization-specific requirements

Target Groups

  • Public sector organizations and government agencies
  • Operators of critical infrastructure
  • CISOs and IT security leaders
  • Compliance and risk management professionals
  • Organizations with open-source strategies
  • Software development departments
  • IT architects and enterprise architects
  • Digital transformation and innovation leaders

Our experts:

Costs

Customized analysis and assessment tailored to your needs. Pricing is based on a project-specific proposal and the scope of work involved.

Your contact person: Kevin Mallinger, kmallinger@sba-research.org