Connect with us

Tech Interviews

Digital Sovereignty in Practice: What It Means for Enterprises Today

Published

on

3D illustration of a complex digital circuit board with interconnected microchips, processors, and data pathways, representing advanced IT infrastructure and smart technology solutions by Hedges Information Technology

In our conversation with Ismail Ibrahim, General Manager, CEMEA at SUSE, we seek to understand the concept better along with his understanding of the industry and how enterprises in the UAE and Saudi Arabia can retain control in a rapidly evolving technology landscape.



What does “digital sovereignty” actually mean for an enterprise today, not in theory, but in day-to-day operations?

From an enterprise perspective, digital sovereignty becomes real the moment it changes what you do on a Monday morning. In practice, it means three things become operational requirements, not policy statements.

First, control over data. Not just where data is stored, but where it is processed, who can access it, and how you prove that in an audit. For many organizations in the UAE and Saudi Arabia, that is increasingly tied to sector rules, procurement requirements, and customer expectations.

You need the ability to keep sensitive workloads within national borders when required, but also to enable controlled data flows when innovation demands it. The important point is that sovereignty is not “ringfencing everything”. It is being deliberate about which data, which workloads and which dependencies must remain under your control.

Second, control over operations. Day-to-day, that looks like resilience and predictability: how quickly you can patch, how confidently you can recover, how consistently you can enforce policy across clusters, clouds and edge sites. This is where many enterprises discover that sovereignty is inseparable from operational excellence. If you cannot reliably manage your environments, you do not really control them.

Third, control over technology choices. This is where open source becomes practical, not ideological. When you build on open, enterprise-supported platforms, you are reducing dependency on opaque codebases and constraining the risk of being forced into a single vendor’s roadmap. Sovereignty is “choice by design”, because choice is what allows you to meet local requirements today and change course tomorrow.

That is why at SUSE we often frame sovereignty around pillars like control, choice and resilience, with autonomy as the long-term outcome. For enterprises, those pillars translate into everyday decisions: architecture, procurement, governance, patching, incident response and lifecycle management.

In the next three years, which will hurt enterprises more: security breaches, or being locked into the wrong technology stack?

    It is not an either-or, because the two risks are increasingly connected.

    A security breach is immediate and visible. It impacts customers, regulators, operations and reputation. But lock-in to the wrong stack can quietly increase breach risk over time, because it limits your ability to respond. If your architecture makes it hard to patch quickly, to segment workloads properly, to implement new controls, or to move sensitive workloads to a compliant environment, you have turned security into a dependency problem.

    Over the next three years, I would say the most damaging scenario for many enterprises is not “breach versus lock-in”, but breach plus lock-in, where an organisation is under pressure and finds it cannot adapt fast enough.

    This is exactly why sovereignty has moved into the C-suite and boardroom. Leaders are recognizing that digital sovereignty sits alongside cybersecurity and operational resilience as a strategic requirement. You need a risk-based approach to your data, workloads and support model, and you need the flexibility to change course.

    Practically, in the UAE and Saudi Arabia, many CIOs are already building mixed environments across on-prem, sovereign cloud, hyperscalers and edge. The goal is not to avoid the cloud. The goal is to avoid a situation where strategic choices are dictated by a single vendor’s constraints. Open, enterprise-grade platforms help you keep the option to move, modernize or localize when needed, without rewriting everything from scratch.

    As AI becomes embedded into infrastructure itself, do you believe enterprises are prepared to trust machines with operational decisions, or are we moving faster than governance allows?

    In many cases, we are moving faster than governance, but that does not mean enterprises should slow down. It means they should modernize governance at the same pace as adoption.

    The key is to separate hype from reality. “Trusting machines” does not mean handing over full autonomy overnight. For most enterprises, AI enters operations in stages.

    Stage one is assistive intelligence, where AI helps surface insights, detect anomalies, recommend actions and reduce manual effort. This is where many organizations see quick operational value, especially in areas like observability, incident triage, capacity planning and security monitoring.

    Stage two is bounded autonomy, where AI can execute actions within defined guardrails, such as automated scaling, routing, remediation playbooks, or policy-driven security responses. The governance requirement here is clear accountability: what is automated, under what conditions, with what approvals, and what audit trail.

      Stage three is agentic operations, where more complex systems handle multi-step tasks across environments. This is the phase where governance must be mature, because the risk is not simply “wrong output”, it is unintended consequences across interconnected systems.

      For the UAE and Saudi Arabia, readiness often depends on whether organisations have already done the foundations: standardised platforms, consistent policy enforcement, clean identity and access controls, and modern lifecycle management. If the foundation is fragmented, AI simply accelerates fragmentation.

      This is why we are seeing strong interest in approaches that support governance by design, including the ability to run AI solutions in more controlled environments. In many regulated sectors, that includes air-gapped or restricted environments, where organizations want to adopt AI while keeping strict control of data movement and operational boundaries.

      My view is that enterprises can absolutely trust AI in operations, but only when they treat trust as an engineering outcome: transparent systems, auditable controls, clear guardrails, and the ability to override. Governance is not a blocker. Governance is what makes adoption sustainable.

      By 2030, will enterprises still control their infrastructure choices, or will hyperscalers and AI vendors effectively decide that for them?

      Enterprises will control their choices if they design for control now. If they do not, the market will make the decision for them.

      By 2030, the default buying motion will push organizations toward managed services, vertically integrated AI stacks, and increasingly opinionated platforms. That can deliver speed, but it can also compress choice, especially if your applications, data pipelines, security controls and operational tooling are tightly coupled to one vendor.

      So the question is really about architecture and leverage. Enterprises that prioritise portability, standardization and open platforms will keep leverage. They can choose the right environment for each workload, based on performance, compliance, cost, and risk. Enterprises that ignore portability will find that “choice” exists on paper, but not in practice.

      This is where digital sovereignty is often misunderstood. Sovereignty does not mean rejecting global technology. It means retaining the ability to make deliberate decisions about where workloads run and who controls the critical layers. Many leaders now talk about “glocal” strategies: using global innovation while maintaining local control and compliance where it matters.

      At SUSE, our positioning has been consistent: open source supports sovereignty because it promotes transparency, portability and freedom from lock-in. That is not a slogan, it is a practical roadmap for keeping infrastructure choices in the hands of enterprises, not vendors.

      If you had to offer one piece of advice to CIOs and policymakers in the UAE and Saudi Arabia navigating rapid digital transformation, what would it be?

        My one piece of advice is this: treat sovereignty as an enabler of innovation, not a constraint, and build it into your operating model early.

        For CIOs, that means starting with a clear map of your critical workloads and dependencies. Decide what must remain under national control, what can run on hyperscalers, what needs sovereign cloud options, and what requires special governance. Then standardize your foundations so you can enforce policy consistently. When sovereignty is engineered into the platform layer, transformation becomes faster, because you are not negotiating compliance from scratch every time you modernize an application.

        For policymakers, it means continuing to create frameworks that encourage both innovation and trust. The UAE has taken a pragmatic approach in showing that openness and sovereignty do not have to conflict. When the policy environment supports clear requirements and predictable compliance expectations, enterprises can innovate with confidence.

        And for both, there is a shared point: invest in skills and ecosystem capability. Sovereign outcomes are not delivered by policy alone, they are delivered by people, platforms, and partnerships. When you develop local talent, strengthen the partner ecosystem, and support enterprise-grade open source, you build resilience and long-term autonomy without slowing innovation.

        Continue Reading

        Cover Story

        The AI Learning Dilemma: Better Answers, But Better Thinkers?

        Published

        on


        As artificial intelligence becomes embedded in higher education, universities face a growing challenge: ensuring that students develop independent thinking rather than simply producing polished AI-assisted work. From rethinking assessments to preserving the value of intellectual effort, the conversation is shifting towards what Turnitin calls learning integrity.

        In this interview with Amal Dimashki – Regional Director, MENAT & Pakistan, Turnitin explores how institutions can balance AI adoption with critical thinking, meaningful assessment and the development of essential learning skills.

        Amal Dimashki, Regional Director – MENAT & Pakistan, Turnitin



        Students are becoming increasingly comfortable prompting AI, but how can universities ensure they are still developing independent reasoning and critical thinking rather than simply producing better AI-assisted answers?

        Prompting is becoming an important skill, but being able to write a sophisticated prompt is not the same as being able to think critically.

        AI can be a very effective learning partner. It can help students brainstorm, explore different perspectives, challenge an argument or receive feedback on something they have written. But students still need to do the cognitive heavy lifting. If they simply prompt AI for an answer and then refine that answer until it looks better, we may improve the quality of the output without necessarily developing the student’s thinking.

        This is why AI literacy needs to go beyond teaching students how to prompt. Students need to learn how to critically evaluate AI-generated content, verify information and sources, question what they are given and make their own judgments about the output. Turnitin’s guidance on responsible prompting encourages students to engage with AI iteratively and interrogate its responses rather than simply accepting what it produces.

        We want students to use AI as a learning partner while remaining actively engaged in the learning process and taking ownership of the work they produce. Turnitin’s guidance to students reinforces this by encouraging them to ensure that the majority of their work remains their original thinking.

        Universities therefore need to develop AI literacy alongside critical thinking and independent judgment, so that becoming better at using AI does not come at the expense of developing the skills students are there to learn.

        What should a modern assessment look like if institutions want to measure a student’s actual understanding rather than just the quality of the final submitted work?

        In an AI-enabled environment, assessing only the final product gives us a limited view of whether learning actually took place. A polished final submission does not necessarily tell us how the student arrived there.

        This is where a process-based approach to assessment becomes increasingly important. Educators can build meaningful checkpoints into the learning journey through outlines, drafts, formative feedback, revisions and reflection. This allows them to see how the student’s thinking developed, how they responded to feedback and where they may need additional support. Turnitin’s multipart assignments, for example, are designed around structured checkpoints for guidance and reflection throughout the writing process.

        At Turnitin, we refer to the broader framework behind this as learning integrity. It expands traditional academic integrity by placing greater emphasis on the integrity of the learning process and ensuring that students are doing the work necessary to learn and develop.

        It brings us back to a familiar principle: “show your work.” Greater visibility into drafts, revisions and the development of ideas gives educators richer evidence of how a student approached the assignment rather than relying on a single snapshot at the end. Turnitin Clarity, for example, provides visibility into how students develop their work from ideation through to final submission.

        This does not mean making every assessment more complicated. It means designing assessment around the learning objective and creating opportunities for students to demonstrate that they have developed the skills being assessed.

        The final submission will continue to matter, but it can be considered alongside evidence of the learning process that produced it.

        AI makes it possible to get answers, summaries and explanations almost instantly. Do you worry that this could reduce students’ ability to sustain attention, read deeply and work through difficult material without immediate assistance?

        There is certainly a risk, and students themselves recognise it. Turnitin’s research found that 64% of students are concerned that the use of AI in education may be shortcutting their learning.

        Learning should not become a completely frictionless process. Researching a subject, developing a point of view, articulating ideas with evidence, editing and working through something difficult all require effort, and some of that effort is where learning happens.

        Turnitin refers to this through the concept of “productive struggle.” Cognitive growth and long-term retention require students to engage with difficulty rather than having every challenge immediately removed for them.

        That does not mean students should struggle without support. AI can provide guidance and feedback throughout the learning process. Turnitin Clarity’s AI Assistant, for example, is designed to prompt reflection and support students throughout their writing without generating the full response for them.

        As AI becomes more capable, preserving productive struggle will become increasingly important. We want students to benefit from the support AI can provide without removing the effort involved in developing knowledge and skills.

        4. Looking ahead, how do you see the role of academic integrity evolving as AI becomes embedded in writing, research and learning, and what will universities need to change over the next few years?

        Academic integrity will remain fundamental, but its role is expanding as AI becomes embedded in learning.

        At Turnitin, we describe this evolution through learning integrity, a proactive expansion of traditional academic integrity that places greater emphasis on the integrity of the learning process. It reflects the need to understand how students are developing their work and ensure they are developing the skills their education is intended to build.

        Over the next few years, universities will need to translate this into practice. AI governance needs to provide educators with clear guidance, while recognising that responsible AI use will not look the same across every subject or assessment. Turnitin’s learning integrity framework recognises a spectrum ranging from no AI in some contexts to defined AI use cases and more open use in others.

        Educators will also need greater agency over how AI is introduced into teaching and assessment. Turnitin’s latest Learning Integrity Insights found that AI decision-making is moving closer to faculty and teaching and learning leaders, while educators are asking for education-specific AI that is flexible enough to reflect how they actually teach and design assignments.

        Technology therefore needs to adapt to pedagogy, rather than pedagogy adapting to the technology. This is the principle behind Turnitin Clarity’s configurable AI settings, which allow educators to determine the level and type of AI support appropriate for an individual assignment.

        Over the next few years, universities will need to bring these pieces together: clear AI governance, greater educator agency, assessment practices that support learning integrity, and technology designed around the needs of teaching and learning.

        Continue Reading

        Tech Interviews

        Building Digital Sovereignty Through Operational Control

        Published

        on

        Exclusive interview with Anirban Mukherjee, Director of Solutions Architecture, Red Hat

        Digital sovereignty is increasingly moving beyond data residency. What does genuine operational control look like for organisations that need to retain control over their data, applications and infrastructure?

        Data residency answers where information sits. Operational control answers who can run, inspect, recover, and change the stack when it matters.

        In practice, that means organisations can choose where workloads run – on premises, sovereign cloud, or public cloud – without rewriting applications every time. It means they can audit the software supply chain, keep recovery paths under their own governance, and decide which models, tools, and partners sit in their AI and application environments.

        For many MENA enterprises and public-sector bodies, the test is simple: can you keep serving citizens and customers if a single vendor, region, or connectivity path is constrained? Open hybrid platforms give you that room to manoeuvre because the control plane and the open source components stay portable.

        As organisations continue to rely on hyperscalers, where do you see the strongest case for combining public cloud with sovereign cloud and on-premises environments?

        Hyperscalers remain excellent for elasticity, global reach, and certain managed services. The strongest case for a mixed model is when data sensitivity, latency, or regulatory expectations vary across the same organisation.

        We routinely see customer data, AI inference close to the data, and regulated workloads stay in sovereign or on-premises environments, while less sensitive or bursty workloads use public cloud. The point is not to reject public cloud. It is to stop treating it as the only place innovation can happen.

        An open hybrid cloud approach lets MENA organisations keep one consistent platform experience across those footprints, so teams are not rebuilding skills and tooling for every environment.

        Could the growing AI infrastructure requirement actually increase technology concentration, and what can organisations do to avoid creating a new form of dependency around AI platforms?

        Yes, the growing AI infrastructure requirements can actually increase technology concentration, – if every AI workload is tied to one model provider, one accelerator vendor, or one proprietary stack, concentration risk simply moves up a layer.

        Organisations reduce that risk by treating AI like the rest of enterprise IT: multiple models for multiple jobs, open tooling where possible, and a platform that can run across hardware and clouds. Smaller, purpose-built open models are often a better fit for specific enterprise tasks than relying on one giant external model for everything.

        In the Middle East, where national AI strategies are accelerating investment, the winners will be the ones who can innovate quickly without locking the next decade of infrastructure decisions into a single vendor path.

        Open hybrid cloud is often positioned as a way to balance control with access to innovation. What does a mature open hybrid cloud strategy look like in practice?

        Maturity looks like consistency. Same platform, same security and policy controls, same developer experience – whether the workload sits in a national data centre, a partner sovereign cloud, or a hyperscaler.

        It also looks like deliberate placement: you put each application and AI workload where it creates the best outcome for cost, performance, and governance, and you can move it when those conditions change.

        For solution architects in this region, the practical question is: can the customer ship new services without creating a parallel stack every time? If the answer is yes, the hybrid strategy is working.

        Vendor dependency is difficult to eliminate entirely. How should organisations assess concentration risk and maintain credible alternatives without creating unnecessary complexity?

        You will always have dependencies. The goal is to make them conscious and reversible.

        Assess concentration by asking: what breaks if this vendor changes pricing, exits a market, or restricts a capability? Which workloads have no second path? Where does your data or model IP become hard to extract?

        Credible alternatives do not mean running five of everything. They mean open standards, portable workloads, and a clear exit or dual-run plan for the few systems that truly matter. Complexity comes from unmanaged sprawl. Discipline comes from a shared platform and clear ownership of what must stay portable.

        Red Hat’s role is to help customers keep that optionality – from infrastructure through to AI – so strategic independence is designed in, not bolted on after a crisis.

        Continue Reading

        Tech Interviews

        UAE Enterprises Shift Focus from AI Adoption to Measurable Business Value

        Published

        on


        Exclusive interview with Shadi Hatoum, Regional Director MEA at Tealium

        The UAE is moving quickly from AI experimentation to deployment. What do you think will determine which organizations actually turn adoption into measurable business value?

        The organizations that create measurable value will be those that connect AI to a clearly defined business decision, then give it the right data and operating model to support that decision.

        The UAE has already built significant momentum. Boston Consulting Group found that 42% of UAE organizations qualify as AI Leaders, while 37% have reached the scaling stage of AI maturity. The next test is whether that maturity translates into sustained outcomes.

        Deploying a model is not the same as changing how a business operates. AI needs trusted, consented, and real-time context around customer identity, behavior, intent, and journey stage. It also needs clear ownership, measurable objectives, and teams that understand how to use the output.

        From my perspective, data readiness and organizational adoption will be the two biggest differentiators. The organizations that can put reliable context in front of AI at the moment of decision, and embed the resulting insight into daily workflows, will be best positioned to turn adoption into measurable value.

        How much of the current gap between AI ambition and AI impact comes down to fragmented or outdated customer data?

        A significant part of the gap comes down to data readiness, although technology alone is not the whole answer. Most organizations do not lack data. Their challenge is that the data is fragmented, difficult to interpret, or unavailable when a decision needs to be made.

        Historical data provides useful depth, but AI also needs data in motion. It needs to understand what a customer is doing now, what has changed, what the customer has consented to, and whether the signal belongs to the correct individual or account.

        Tealium’s Future of Customer Data research found that 88% of organizations consider real-time data important to achieving business objectives. That is important because an AI system working from yesterday’s profile may produce a technically valid recommendation that is no longer relevant.

        The real opportunity is to create a trusted context layer that connects identity, behavior, consent, and intent, then makes that context available to models and decisioning systems while the customer interaction is still taking place.

        Does agentic AI create a new governance problem for enterprises, particularly when agents are acting on customer data without constant human intervention?

        Agentic AI does not make the principles of governance entirely new, but it raises the stakes and increases the speed at which controls need to operate. When an AI agent can move from recommendation to action, governance can no longer be treated only as a periodic policy or review exercise. It needs to operate within the data flow and decision process itself.

        Enterprises need clear controls over which data an agent can access, the purpose for which it can use that data, how identity and consent are verified, which actions it is authorized to take, and when a person must review or approve the outcome.

        The key question is not only whether an agent can access a piece of customer data. It is whether the agent should use that data for this customer, for this purpose, at this moment.

        That requires trusted data, current consent, auditability, defined action limits, and clear escalation paths. As autonomy increases, accountability needs to become more precise, not less.

        Which sectors in the Middle East do you think are furthest ahead in using real-time customer data and AI together effectively?

        From my experience across the region, telecommunications and travel, hospitality, and tourism are among the most active and promising sectors because they generate frequent customer signals and have a clear need to respond in the moment.

        In a recent discussion with the Chief Commercial Officer of a major telecom operator in the region, we talked about growth as filling a bucket while also stopping the leaks. Acquisition fills the top, but poor service, irrelevant engagement, and unresolved friction allow value to escape through churn. Sustainable growth requires both attracting new customers and protecting the loyal customer base already in the bucket.

        This is where AI-supported decisioning can create real value. Trusted, consented, real-time behavioral data can help an operator recognize changes in usage, service issues, digital engagement, and signs of churn. The next best action may be to resolve a problem, recommend a more suitable plan, position a bespoke package at the right time, or avoid making an offer when the customer first needs support.

        The objective is not to push more offers. It is to improve relevance and timing. That can support retention, strengthen loyalty, and create opportunities to grow average revenue per user, or ARPU, by responding to what the customer needs in that moment.

        Travel, hospitality, and tourism have a similarly strong opportunity. The customer journey moves from inspiration and research to booking, arrival, the in-destination experience, and loyalty. Each stage creates different needs. A traveler facing disruption needs assistance, while a guest already at a destination may value a timely, personalized experience or service.

        These sectors show why hyper-personalization at scale depends on trusted, consented behavioral data in motion. The value comes from giving AI initiatives the current context they need to choose the next best action for that specific moment.

        At AI Everything Abu Dhabi 2026, what are the biggest changes you are seeing in the conversations enterprises are having compared with a year or two ago?

        The biggest change is that enterprises are no longer asking whether they should adopt AI. They are asking how to move it into production, connect it to measurable outcomes, and govern it at scale.

        A year or two ago, many conversations centered on experimentation and individual use cases. Today, the questions are more operational. Leaders want to understand how AI will work with their existing data, how agents will receive current customer context, how decisions will be controlled, and how value will be measured beyond a successful pilot.

        I am also hearing much more emphasis on adoption. Organizations recognize that a model does not create value by itself. Teams need clear use cases, practical training, shared measures of success, and confidence in the data behind the recommendation.

        The conversation has therefore moved from AI capability to AI readiness. That includes the quality of the data foundation, the governance around it, the ability to make decisions in real time, and the people and processes required to turn those decisions into action. For me, that is a sign that the market is becoming more mature and more focused on sustainable business impact.

        Continue Reading

        Trending

        Copyright © 2023 | The Integrator