Munich makes digital sovereignty measurable with its own score

Munich has introduced an innovative self-developed scoring system to evaluate all its IT services for dependencies on specific vendors and states, a significant step towards enhancing digital sovereignty. This initiative aims to provide objective metrics for assessing the risks associated with reliance on external technology providers, particularly those outside the European Union. The move underscores a growing European emphasis on building independent digital infrastructure and reducing vulnerabilities in critical public sector IT systems. The system meticulously analyzes IT services by assigning scores based on factors such as data sovereignty, source code accessibility, and the geographic location of cloud infrastructure and development teams. This detailed assessment allows the city to identify which services may pose a risk due to undue influence from foreign governments or proprietary vendor lock-in. By quantifying these dependencies, Munich can make informed decisions about future IT procurement and development strategies. This proactive approach directly impacts software companies, cloud providers, and public sector bodies by setting a new standard for evaluating digital service resilience and autonomy. For Munich, the goal is to foster greater control over its digital destiny, ensuring that its essential services are not compromised by external political or commercial pressures. The broader implication is a potential blueprint for other European cities and governments looking to bolster their own digital sovereignty and mitigate the risks of reliance on non-EU tech giants.