IBM’s US$169B CEO mandate for Asia Pacific

• Digital sovereignty strategies will be implemented by 80% of multinational organisations by 2027 as regulatory and cyber pressures intensify across APAC
• APAC’s sovereign cloud market is expected to surge to US$36.7 billion by 2027, while the region faces 34% of global cyber incidents

Digital sovereignty has transitioned from a compliance concern to a strategic imperative that demands the attention of the C-suite across the Asia Pacific. With regulatory frameworks multiplying and cyber threats intensifying, enterprise leaders can no longer afford to treat data control, AI governance and infrastructure autonomy as purely technical matters.

According to IBM’s recent white paper on sovereign tech capabilities, Asia Pacific’s sovereign cloud market is projected to grow at a 31.5% CAGR, reaching US$36.7 billion by 2027. Globally, IBM projects the market will surge from US$37 billion in 2023 to US$169 billion by 2028—a 4.5-fold increase driven by regulatory mandates and security imperatives.

“Digital sovereignty isn’t just a regulatory trend, it’s an economic goldmine,” said Hans Dekkers, General Manager of IBM Asia Pacific. “By capitalising on this key moment, enterprises will be resilient, innovative, and ready for the digital future.”

Regulatory landscape accelerates faster than enterprise readiness

China, India, Singapore, Malaysia and Indonesia have already implemented data localisation laws that fundamentally alter how organisations architect their technology infrastructure. Gartner predicts that by 2028, 65% of governments worldwide will introduce technological sovereignty requirements.

The stakes extend beyond fines. Non-compliance risks market exclusion entirely. By 2027, 80% of multinational organisations are expected to implement digital sovereignty strategies—not as optional, but as a prerequisite for market access.

Digital sovereignty demands architectural transformation

Building sovereign capabilities requires intentional architecture integrating public, private and sovereign cloud infrastructure. The key distinction: AI systems must run securely on local infrastructure where critical enterprise data resides, rather than forcing data to move elsewhere.

IBM’s white paper on sovereign tech capabilities positions digital sovereignty as a policy-led issue with direct operational consequences—influencing architecture decisions, risk management, business continuity planning and market access.

Hybrid cloud architectures combine local data residency requirements with global failover capabilities, ensuring resilience by moving critical workloads across zones to mitigate risks.

Asia Pacific faces disproportionate cyber risk

Asia Pacific accounted for 34% of global cyber incidents in 2024—the most-attacked region worldwide. Sovereign frameworks ensure sensitive data stays local and secure, reducing exposure to geopolitical risks and cyber threats.

Trust has become currency. Gartner research reveals 19% of consumers lost trust in brands due to data breaches or poor data protection policies. Investors, customers and regulators now demand data safety as a baseline expectation.

Unlocking competitive advantage through data sovereignty

Digital sovereignty isn’t merely defensive—it’s increasingly competitive differentiation. Enterprise data represents an untapped advantage, yet 99% remains unused. Data value realisation is only possible within sovereign frameworks where organisations control how data is governed, accessed, processed and protected.

In banking alone, spending on sovereign cloud capabilities will rise from US$14 billion in 2023 to US$66 billion in 2028—nearly a fivefold increase reflecting compliance pressure and strategic value recognition.

AI convergence creates new imperatives

The convergence of digital sovereignty with AI advancement is reshaping operating models. AI-human augmentation is emerging as a core operating principle, with AI agents prompting urgent business model overhauls.

Forward-thinking organisations are replacing hierarchical silos with AI-powered automation and cross-functional agility. This workflow-centric transformation unlocks productivity gains and innovation-driven revenue growth—but only when sovereign data frameworks enable secure AI deployment on local infrastructure.

Indonesia’s Telkom and India’s Bharti Airtel are already building sovereign digital foundations through trusted partnerships, demonstrating that digital sovereignty and innovation aren’t mutually exclusive.

The CEO playbook for digital sovereignty transformation

IBM’s white paper outlines key principles: Embed digital sovereignty into corporate strategy as a C-suite priority, not an IT department project. Adopt hybrid clouds by design to balance compliance with agility. Leverage AI to unlock untapped enterprise data. Build trusted sovereign partnerships to navigate regulatory landscapes. Upskill talent for AI, cybersecurity and compliance.

Organisations treating digital sovereignty as an operating model rather than a compliance checkbox will thrive in regulated markets. For Asia Pacific’s enterprise leaders, the question isn’t whether to embrace digital sovereignty, but how quickly they can architect required capabilities.

As governments accelerate policy implementation and cyber threats intensify, the window narrows. Leaders who act now gain first-mover advantages in market access, customer trust and operational resilience—while those who delay risk exclusion from critical markets.

Want to experience the full spectrum of enterprise technology innovation? Join TechEx in Amsterdam, California, and London. Covering AI, Big Data, Cyber Security, IoT, Digital Transformation, Intelligent Automation, Edge Computing, and Data Centres, TechEx brings together global leaders to share real-world use cases and in-depth insights. Click here for more information.