Security

The security pillar addresses how organizations establish and maintain secure, compliant workloads that meet digital sovereignty requirements. This includes building secure foundations, managing access controls, protecting sensitive data, detecting threats, securing infrastructure, and responding to incidents while adhering to jurisdictional regulations.

A security baseline defines controls that protect a workload from compromise: for example, encryption is on, public access is blocked, least privilege is enforced. A sovereignty baseline layers jurisdictional constraints on top: data resides within approved jurisdictions, access is granted considering operator role and location, controls are verifiable and monitored continuously to demonstrate compliance, and workloads can be restored securely when needed. A workload can meet every security baseline but still not meet sovereignty requirements.

Capabilities

• Security foundations

• Access control within sovereign boundaries

• Sovereignty control verification

• Detection and investigation

• Infrastructure access

• Data sovereignty requirements

• Verifiable data controls

• Specialized data protection

• Incident response