Is digital sovereignty illusory without open source and a trusted supply chain?

For a Chief Information Officer (CIO) or VP of Infrastructure, the term “digital sovereignty” often arrives as a regulatory burden to support a collection of acronyms like DORA (the EU Digital Operational Resilience Act), NIS2 (the updated Network and Information Security Directive), and PDPA (the Personal Data Protection Act) that require more checklists and audits. This begs the question, is viewing sovereignty through a purely legal lens a strategic mistake? Red Hat’s point of view has just been published in our recently released article, Red Hat Strategic Approach to Compliance, Sovereig