Senior Principal Chief Architect
Since February, over 1,500 organizations have used Red Hat's complimentary Digital Sovereignty Readiness Assessment to establish a sovereignty baseline in 15 minutes. Today we're introducing the Digital Sovereignty Readiness Appraisal, a workshop-based maturity evaluation that delivers capability-level analysis, industry-weighted scoring, facilitation materials, and an actionable transformation roadmap. The assessment framework is open source, and we've made it available on GitHub.A facilitated roadmap for true digital autonomyDigital sovereignty has moved from a compliance checkbox to a board-level mandate. Geopolitical uncertainty, extraterritorial data access laws, and regulations such as the EU's NIS2, DORA, CRA, and the AI Act oblige organizations to ask hard questions—not only where data resides, but who can access it during support escalations, software updates, and AI training workflows.Many enterprises have started that journey with a baseline assessment. They increasingly know their gaps. What they need next is a credible path from diagnosis to action.That is the gap the Digital Sovereignty Readiness Appraisal is designed to fill.Red Hat's approach to sovereignty has always been "your cloud, your rules": Control, transparency, and portability built on open source and open hybrid cloud. The Readiness Assessment gave organizations a fast, objective starting point. The Appraisal helps cross-functional teams turn that starting point into a prioritized roadmap they can execute.The journey so far: Digital Sovereignty Readiness AssessmentSince launching the Digital Sovereignty Readiness Assessment in February 2026, we've seen strong adoption from organizations seeking to understand their sovereignty posture. This self-service tool delivers value in just 10–15 minutes:21 targeted questions across 7 key domainsInstant maturity scoring (Foundation, Developing, Strategic, Advanced)Domain-by-domain breakdown showing strengths and gapsThe Digital Sovereignty Readiness Assessment has been ideal for:Initial discovery conversationsExecutive awareness of sovereignty risksQuick organizational health checksBut we kept hearing the same question: "This is great for identifying gaps—but how do we fix them?"The next evolution: Digital Sovereignty Readiness AppraisalThe Digital Sovereignty Readiness Appraisal is a comprehensive, workshop-based maturity evaluation for organizations ready to move from awareness to action.Where the assessment provides a snapshot, the Digital Sovereignty Readiness Appraisal delivers specific, capability-by-capability analysis across seven domains and 48 capabilities:Data sovereignty (8 capabilities): Residency, privacy, classification, jurisdictional control, key management, workload protection, data flow auditing, third-party access policiesTechnical sovereignty (8 capabilities): Portability, vendor lock-in mitigation, open standards, API access, interoperability, technical independence, technology choice, architecture controlOpen source (8 capabilities, sub-pillar of technical sovereignty): Software freedom, transparency, community participation, forking rights, security visibility, contribution culture, license compliance, ecosystem engagementOperational sovereignty (8 capabilities): Service independence, skill building, disaster recovery, change management, operational control, business continuity, performance management, capacity planningManaged services (8 capabilities, sub-pillar of operational sovereignty): Service provider evaluation, contract negotiation, SLA management, exit strategies, data ownership, service independence, supply chain security, third-party riskAssurance sovereignty (8 capabilities): Independent audits, verification, transparency, security standards, compliance validation, risk management, incident response, continuous monitoringExecutive oversight (8 capabilities): Governance, strategic alignment, risk ownership, budget allocation, policy enforcement, stakeholder communication, decision rights, accountabilityWorkshop-facilitated or self-assessmentThe Digital Sovereignty Readiness Assessment is designed for solo completion.The Digital Sovereignty Readiness Appraisal is built for collaborative workshop sessions (typically 2–3 hours), where cross-functional teams:Discuss capability maturity as a groupReach a consensus on the current stateIdentify quick wins and strategic priorities togetherThis model reflects a reality often overlooked: Sovereignty failures rarely happen in customer-facing layers alone. They surface in support paths, metadata flows, vendor contracts, and operational dependencies—the areas that require aligned judgment across IT, security, legal, and executive stakeholders.Comprehensive reporting suiteThe Digital Sovereignty Readiness Assessment delivers a simple PDF, but the Digital Sovereignty Readiness Appraisal provides an interactive results dashboard including:Executive summary: At-a-glance performance, critical insights, and strategic recommendationsOverview: Radar chart, maturity levels, and overall scoringStrengths: Analysis of mature capabilities with quick wins and leverage opportunitiesGaps: Critical capability gaps with business impact analysis and 90-day action plansRecommendations: Comprehensive improvement roadmapCapability table: Capability-by-capability maturity matrixA detailed, downloadable PDF report containing all salient findings for stakeholders who need an audit-ready artifact is also available.
