As geopolitical tensions escalate globally, the significance of digital public infrastructure is coming under intense scrutiny. Historical conflicts have traditionally ravaged physical assets like ports and railways, but modern warfare increasingly disrupts something less visible yet far more critical: digital systems that underpin societal functions.
Emerging Weaknesses in Digital Infrastructure
The recent conflict in Iran has underscored vulnerabilities in digital infrastructures that few governments anticipated. As battles extend beyond conventional theaters, attention is shifting from military assets to the digital infrastructure—data centers, cloud service providers, and technology platforms integrated into global supply chains. Concurrently, the closure of the Strait of Hormuz threatens vital supplies of aluminum, helium, and liquefied natural gas, all crucial inputs for semiconductor manufacturing and the cloud infrastructure essential for governmental functions.
Rethinking Sovereignty in the Digital Age
This structural fragility raises an essential question about sovereignty in an era marked by geopolitical strife and concentrated digital power. Countries like India, Brazil, and Estonia showcase the potential benefits of well-designed digital systems—such as reduced corruption and enhanced financial inclusion. However, simply implementing digital applications does not equate to controlling the underlying infrastructure. Governments neglecting this distinction expose themselves to four strategic risks.
The Illusion of Control
The first risk is the illusion of control. Governments that develop national digital services often mistakenly believe they have secured their strategic capabilities. In reality, key components—cloud computing, semiconductor supply chains, and AI infrastructure—are dominated by a handful of private companies, primarily located in select nations. A policy change or compliance shift by these companies can lead to repercussions well beyond what any affected government anticipated.
A prime example is the recent dispute between Anthropic and the U.S. government. In June, the Trump administration mandated Anthropic to suspend access to its advanced models for foreign users—only to lift some restrictions within two weeks. Governments globally using Anthropic’s models discovered that their digital capabilities were subject to decisions rendered in Washington.
Unforeseen Risks of Integration
Second, success itself can become a source of vulnerability. In India, the Unified Payments Interface and Brazil’s instant payment platform Pix handle millions of transactions daily. These systems, while impressive, are so deeply embedded in daily economic life that a prolonged disruption would not only inconvenience users but also paralyze trade and delay social service payments, sparking governance crises within hours. While one might argue the efficiencies of such systems outweigh the risks, the question remains whether deep interdependencies could inadvertently lead to chaos.
As integration deepens, isolated malfunctions are unlikely. Digital identities have become essential for banking, elections, communication, tax administration, and social protection. A single failure in an identity layer can rapidly cascade through interconnected systems, blocking access to banking accounts, halting vital cash transfers, and obstructing critical communication and healthcare services. By the time engineers trace the fault, the political crisis may have already begun. The more interconnected the systems, the more a single point of failure can act as a trigger for widespread disruption.
Market Concentration and Strategic Vulnerabilities
The third risk stems from market concentration. The global digital economy currently relies on an alarmingly small number of cloud service providers, AI models, operating systems, chip designers, and submarine cable operators. This concentration creates significant efficiencies but simultaneously introduces unprecedented systemic vulnerabilities. Any geopolitical crisis, cyberattack, or regulatory restriction impacting this limited number of companies resonates across global economies.
Regrettably, many governments have only realized this post-crisis. By developing advanced digital public services but outsourcing the essential infrastructure, they effectively transferred their nervous systems abroad.
Redefining Accountability and Control
The state itself is not just a user of these digital identity and payment systems; it reshapes governance dynamics by concentrating information, decision-making processes, and operational authority. Without robust legal protections and independent oversight, the very infrastructure designed to facilitate social payments may become tools of exclusion, surveillance, and political control.
Yet trust cannot simply be added to digital public infrastructure post-implementation; it must be embedded from the outset. Governments that overlook these foundations do not merely ignore risks—they create them.
Toward a Comprehensive Digital Vision
This reality does not diminish the arguments for digital public infrastructure. However, reaping its benefits necessitates a broader vision for what successful digital transformation entails. Technically, governments must develop systems designed to withstand individual component failures through redundancy, interoperability, and resilience to internet disruptions. Institutionally, the governance bodies overseeing digital public infrastructure must be genuinely independent, transparent, and accountable.
Recent geopolitical developments have transformed infrastructure into a field of strategic competition, and digital systems are no exception. Originally intended to provide public services, these systems are now pivotal in state authority and geopolitical influence.
As they establish digital public infrastructure, governments must remain acutely aware of the dependencies and vulnerabilities they are creating. The digital foundations of state power are no longer just administrative concerns—they are matters of national security that must be treated as such.
