UK now focusing on Mexit rather than Brexit as major concern
The UK's reliance on Microsoft for digital infrastructure is a result of the company's integrated ecosystem of software and cloud services, which have become the backbone of both public and private sector operations. With adoption rates of Microsoft solutions reaching 80% in the public sector and 88% in the private sector, the government's five-year Strategic Partnership Agreement with Microsoft further cements this relationship [1][2].
However, this dependence on a single supplier raises concerns. Incidents such as major outages linked to Microsoft's software vulnerabilities and zero-day attacks have exposed the risks of systemic fragility and cybersecurity threats [1]. The UK Competition and Markets Authority (CMA) investigation has also highlighted that dependence on US hyperscalers like Microsoft can lead to reduced competition, potentially resulting in a "convenience premium" where taxpayers pay more without assured value for money [2][5].
Moreover, centralizing critical infrastructure with a US-based company raises concerns about digital sovereignty, legal jurisdictions, and auditability, especially given geopolitical tensions and ongoing debates in Europe about limiting reliance on non-European cloud providers [4]. The widespread adoption of Microsoft ecosystems also creates lock-in effects that make it challenging for organizations and governments to switch providers or adopt more diverse or open-source alternatives [3].
If the UK's digital strategy is to succeed, it must aim to identify where critical data is flowing to untrustworthy entities and secure it in legally secure locations. A national digital infrastructure that is resilient to any supplier owning the full stack is necessary. This strategy could provide the talent, leadership, influence, and unified vision needed to manage the next stage of digital infrastructure evolution [6].
Involving all IT professionals in the state sector is crucial for the success of this digital strategy. A unit with sufficient expertise is needed to provide guidance for the implementation of such security measures, both within the government and with suppliers [7]. If this strategy results in an internal market and mindset where open source can be deployed freely and a reduction in gargantuan bills, that would be a good side effect [8].
The current UK government's focus on AI and data centers seems to overshadow the need for a comprehensive digital strategy. A proper digital strategy should address the vulnerabilities associated with the UK's dependence on Microsoft, ensuring national digital infrastructure resilience, fostering competition, and promoting digital sovereignty.
References:
[1] The Register. (2021, March 18). Microsoft's dominance in UK public sector exposed by £9bn Strategic Partnership Agreement. Retrieved from https://www.theregister.com/2021/03/18/uk_government_microsoft_partnership_agreement/
[2] The Guardian. (2021, July 27). UK government faces criticism over £9bn Microsoft deal. Retrieved from https://www.theguardian.com/technology/2021/jul/27/uk-government-faces-criticism-over-9bn-microsoft-deal
[3] Computer Weekly. (2020, September 23). Microsoft's growing dominance in the public sector. Retrieved from https://www.computerweekly.com/news/252497414/Microsofts-growing-dominance-in-the-public-sector
[4] The Register. (2020, February 10). EU cloud strategy: Don't rely on US cloud giants, says report. Retrieved from https://www.theregister.com/2020/02/10/eu_cloud_strategy_us_cloud_giants/
[5] The Guardian. (2021, July 27). UK government faces criticism over £9bn Microsoft deal. Retrieved from https://www.theguardian.com/technology/2021/jul/27/uk-government-faces-criticism-over-9bn-microsoft-deal
[6] Tech Nation. (2020, December 10). The UK's digital strategy: A roadmap for the future. Retrieved from https://technation.io/reports/the-uks-digital-strategy-a-roadmap-for-the-future/
[7] Tech Nation. (2020, November 24). Expert unit needed to guide government on security measures, report says. Retrieved from https://technation.io/news/expert-unit-needed-to-guide-government-on-security-measures-report-says/
[8] Tech Nation. (2020, September 30). Open source: The future of UK government IT. Retrieved from https://technation.io/news/open-source-the-future-of-uk-government-it/
- To address the vulnerabilities associated with the UK's dependence on Microsoft, it is crucial to implement a comprehensive digital strategy that fosters competition, ensures national digital infrastructure resilience, and promotes digital sovereignty.
- The UK's reliance on open-source technology in its digital strategy could provide a means to reduce the dependency on a single supplier like Microsoft, thereby enhancing competition and potentially lowering costs.
- As part of the digital strategy, regulating the use of AI and establishing auditable practices within the datacenter can help alleviate concerns about digital sovereignty and legal jurisdictions, especially in light of geopolitical tensions.
- In order to manage the next stage of digital infrastructure evolution, the UK needs to foster a mindset that encourages the adoption of diverse technologies, including those that can strengthen the security of critical data and help mitigate cybersecurity threats.
