News: 1765983297

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

NATO's battle for cloud sovereignty: Speed is existential

(2025/12/17)


NATO is in an existential race to develop sovereign cloud-based technologies to underpin its mission, the alliance's Assistant Secretary General for Cyber and Digital Transformation told an audience at the Royal United Services Institute (RUSI) last week.

Jean-Charles Ellermann-Kingombe said the Ukraine war has highlighted the impact of technology on the battlefield, from drones to AI for targeting. Likewise, it shows the need for a coherent, secure approach to data and similarly coherent and secure cloud platforms to store and process it.

"Modern conflict no longer rewards the side with the most data," Ellermann-Kingombe declared. "It rewards the side with the ability to connect it, understand it and act on it first."

[1]

This means that cloud adoption is more than just a technical issue for "specialists in white rooms." Rather, it is a strategic and operational imperative that underpins "the credibility of our collective defense."

[2]

[3]

"But if cloud is essential, then speed is existential," he declared.

"The threat picture we face is grave," he said. China and Russia are harnessing AI and machine learning, and "exploring quantum computing and autonomous systems powered by cloud architectures that evolve every day."

[4]

This means the alliance's own digital transformation needs a clear sense of urgency. "That means building a modernized digital backbone to enhance intelligence sharing, accelerate decision making, and strengthen operational readiness across all 32 allies."

Strengthening deterrence, enhancing resilience, and investing in innovation and technology are all key pillars of the alliance's [5]NATO 2030 strategy . The 2030 plan kicked off in 2020, before war erupted in Ukraine. Various NATO statements on the strategy refer to sovereignty, but little reference to digital sovereignty or cloud sovereignty.

However, Ellermann-Kingombe used both phrases repeatedly, saying that when it comes to sovereignty, "our approach is one of confidence through cooperation."

[6]

He outlined three dimensions of sovereignty. First is the need to control access to data as well as its location. Operational sovereignty covers how systems are operated and by who. Technological sovereignty covers the need to maintain operations, "even if a provider withdraws or is sanctioned."

At the same time, he said: "We must acknowledge the trade offs… full sovereignty often comes with reduced scalability and innovation speed."

NATO members will have to adopt multiple models, he predicted, from globally connected clouds to isolated or air-gapped environments for highly classified workloads.

"This diversity is not weakness, but the pragmatic expression of sovereignty in a complex world. It is the balance between autonomy and Alliance, between national control and collective capability."

But he insisted digital sovereignty does not have to mean isolation, and American and European companies are working closely together. "We see new models in Belgium, where US hyperscalers partner with trusted European operators to deliver jurisdictionally isolated clouds that respect local control while maintaining innovation speed."

He added: "We should also keep in mind that sovereignty and openness can coexist through technical safeguards, open standards and interoperability."

This means "we can protect what must remain sovereign. Our secrets, our decision making, our command authority. Without losing the innovation and resilience that come from NATO wide cooperation and partnership with industry from Allied nations."

Looking ahead to AI supported command and control, quantum resilient cryptography, "one thing is certain, no nation and no company can achieve this alone altogether." The Trump White house would probably disagree.

NATO – and the audience – have to keep three things in mind, Ellermann-Kingombe said. "First, that we act with urgency. The threat evolves daily. Our technologies and defenses must evolve faster. Second, prioritize collaboration. Industry, academia and allies all bring critical ideas and solutions. Harnessing them will make us strong."

"And three, design for sovereignty, build systems that enhance economy, strengthen allied trust and secure the foundations of our partnership in the digital era."

[7]Crisis in Icebergen: How NATO crafts stories to sharpen cyber skills

[8]NATO taps Google for air-gapped sovereign cloud

[9]Ex-NATO hacker: 'In the cyber world, there's no such thing as a ceasefire'

[10]New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

In a discussion following his speech, Ellermann-Kingombe said it was critical to engage with industry – including beyond the traditional defense sector. This includes tech companies and startups "that have much more accelerated development cycles."

But a shift to newer tech – and newer tech suppliers – also needs a much more tech savvy bureaucracy and agile procurement system, he added. This can't be left entirely in the hands of decision-makers "above 50 who grew up without mobile phones."

Ellermann-Kingombe spoke just days before the UK announced a "rapid £140 million boost" for [11]drone and counter-drone technology . The cash is aimed towards British "SMEs, micro-SMEs, and universities."

The cash will be funneled by UK Defense Investment, the "focal point for innovation" within the Ministry of Defence, with a ring-fenced annual budget of at least £500 million.

It has already invested more than £25 million in an uncrewed AI submarine, as well as £5 million seed corn investment into Land Autonomous Collaborative Platforms – such as autonomous drones to support British Army Apache helicopters. ®

Get our [12]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aULhqFep7AKPD7pP5gfKqgAAAAA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aULhqFep7AKPD7pP5gfKqgAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aULhqFep7AKPD7pP5gfKqgAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aULhqFep7AKPD7pP5gfKqgAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://www.nato.int/en/news-and-events/events/transcripts/2021/06/04/nato-2030-a-transatlantic-agenda-for-the-future#:~:text=NATO%202030%20is%20an%20agenda%20that%20aims,common%2Dfunded%20budget**%20*%20**Investing%20in%20new%20capabilities**

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aULhqFep7AKPD7pP5gfKqgAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2025/12/10/nato_cyber_training/

[8] https://www.theregister.com/2025/11/24/nato_google_cloud/

[9] https://www.theregister.com/2025/06/28/exnato_hacker_ceasefire_iran/

[10] https://www.theregister.com/2025/05/27/new_russian_cyberspy_crew_laundry_bear/

[11] https://www.gov.uk/government/news/rapid-140-million-boost-for-drone-and-counter-drone-tech-from-newly-formed-uk-defence-innovation

[12] https://whitepapers.theregister.com/



Three years ago

VoiceOfTruth

The head of the British Army famously said: Russia has already lost.

I don't know what kind of crack they are smoking in Camberley, but it must be some real good shit.

Re: Three years ago

Dan 55

He said Russia had strategically lost. And convincing all Western Europe holdouts to join NATO and to start what was supposed to be a 4 day war* and still be at it 4 years later are hardly strategic wins.

* Well, we all know the war really started in 2014 but you get my point.

Re: Three years ago

DarkwavePunk

I was in Estonia just after the Crimea annexation and asked the locals whether they thought it would destabilise the region and if it was a threat to them. The general consensus was "No" at the time. That changed over the years. My Finnish mates on the other hand were pretty much "Those fucking Russians" from day one. Europe is slowly waking up to threats but I really hope the slumber hasn't been too long.

Re: Three years ago

Anonymous Coward

It's certainly British SOP to allow a rather despondent view of the UKs defence position to propagate unchallenged. It establishes a baseline that makes it hard to gauge the reality. Which suits Britains long proven military strategy perfectly.

People of a certain vintage may remember the Falklands, and how quite a few people suggested that Britain was a clapped out washed up has been whose would be returning with it's arse well and truly kicked.

Conversely, all Russia seems to be able to do is make billy big bollocks threats. I am still quaking in my boots from the ones from 3 years ago (which you will notice Britain totally ignored).

Strong countries don't make threats. They just act when they need to.

The only time I would worry about the UKs military capabilities is if it went around the world saying how amazing it was and how totally and utterly ready the UK was for war.

First step: stop using AWS & similar

alain williams

We cannot use anything that is subject to USA laws. The USA has proven itself to not be a reliable friend, some would say that the USA is fast becoming an enemy.

If we want to be able to survive a temper tantrum from the orange one then all of our data and processing has got to be beyond his reach.

OK: we are talking about NATO of which the USA is still a part (when I last checked 5 mins ago), they will want to use USA providers but it must be possible for non USA data to be held on non USA machines with the ability to quickly firewall off from the USA if needs be.

Anonymous Coward

I know let's outsource our critical infrastructure and data to a few mega corporations. What could go wrong. I mean it's such a nice sounding name - The Cloud... It's light, fluffy, pretty....and ethereal - Ruh Roh!!!!!

Anonymous Coward

If you want something to work all the time, you probably won't want a major cloud provider. You will want your own datacenters with generators and a fucktonne of fuel for them as well as dedicated networks that aren't connected to the internet. Or you could just give a bunch of money to the usual suspects.

Doctor Syntax

"Modern conflict no longer rewards the side with the most data, It rewards the side with the ability to connect it, understand it and act on it first."

That connecting and understanding thing - the word is "information". It was always information that mattered but data can be measured in Tb so you can always claim to have lots of that, even if you've got no information from it.

"Dump the condiments. If we are to be eaten, we don't need to taste good."
-- "Visionaries" cartoon