European tech buyers add digital sovereignty to cyber shopping list
European tech buyers are increasingly choosing cybersecurity vendors from their own continent in a bid to reduce their reliance on American technology.
- That's the kind of decision that gives European vendors an opening." The stats indicate that EU-HQd vendors comprised 92 percent of tracked sales in security awareness training, 82 percent in vulnerability management, and 52 percent for SIEM and log management.
- NIS2, transposed into national law in October 2024, requires organizations in the bloc to raise their common level of security in the face of digital threats and risks to critical infrastructure.
- That certainly isn’t the case for tech purchases in the British public sector, despite Prime Minister Andy Burnham’s professed desire to buy British.
Digital sovereignty isn't only prompting enterprise customers to question their clouds of choice, it is also reshaping other parts of the industry too, and the shift is marked.
It said organizations are reviewing their reliance on third-party tech in light of EU compliance regimes: the NIS2 Directive and Digital Operational Resilience Act (DORA).
- The Reg has asked Context for UK-specific figures to see whether British customers are also voting with their wallets for European alternatives.
- An organization can keep its existing identity platform and still choose a European supplier to manage its security logs.
- The trend coincides with a loss of trust in the Trump administration among customers outside of America, after it cosied up to autocratic rulers while criticizing and punishing allies with tariffs and more.
- As customers and resellers get clearer about what it means in practice, they're asking who holds the encryption keys, who can access sensitive logs and where that data is stored," said Context veep of research Joe Turner.
- DORA, introduced in January last year, is designed to strengthen cyber security in the financial sector.
How this summary was made: extractive summary — built from the sources' own reporting. It is drawn only from the reporting of the sources listed below — read the originals for full detail. How we summarize →