By:
Nana Appiah Acquaye
TALISMAN
Cybersecurity unveils the Digital Sovereignty Intelligence Platform (DSIP), a
system that turns digital sovereignty from an abstract aspiration into a
concrete operational discipline. DSIP enables governments to quantify and
manage the real drivers of digital independence, data control, vendor
dependency, and operational resilience through a unified intelligence framework
that exposes systemic risks, maps critical dependencies, and guides strategic
interventions.
Speaking exclusively to TechReview
Africa in an interview, the Founder and Chief Technology &
Solutions Officer (CTSO) of TALISMAN Cybersecurity, Gallo Fall unveiled the
company's Digital Sovereignty Intelligence Platform (DSIP), describing it as a
comprehensive assessment and monitoring solution that enables governments and
institutions to evaluate their level of digital independence across critical
technology domains.
According to Fall, the platform
integrates multiple specialist assessment and monitoring models into a single
verified intelligence system that provides what he described as a
"360-degree sovereignty posture" for governments and organizations.
"It integrates five specialist
assessment and monitoring models into a verified intelligence platform. Each
model targets a distinct dimension of digital sovereignty, from core data
governance to AI control, vendor risk, public infrastructure and advanced
geopolitical resilience," he said.
The platform's first module, the
Digital Data Sovereignty Assessment Tool (DD-SAT), serves as the foundational
assessment model, measuring how effectively a government or organization
controls its own data, digital infrastructure and regulatory environment.
"The core question it answers is
whether you control your own environment or whether you remain dependent on
foreign systems and laws," Fall explained.
The assessment allows governments to
evaluate all pillars simultaneously or focus on selected areas such as data
governance or infrastructure. The methodology is questionnaire-based and
employs quantitative analysis and mathematical modelling similar to technology and
cybersecurity risk assessment frameworks widely used in the heavily regulated
United States banking sector.
Another core component is the Artificial
Intelligence Sovereignty Gauge (AISG), which evaluates whether governments
genuinely control their artificial intelligence systems, training data and
emerging technologies or whether those capabilities remain dependent on foreign
entities.
The model assesses AI ownership and
control, training data sovereignty, AI supply chain dependency, regulatory
frameworks, system resilience, governance, accountability and emerging
technologies including biometrics and satellite systems.
Fall said the AI assessment framework
is designed to provide governments with a detailed understanding of their
readiness and control over AI ecosystems.
The platform also incorporates Vendor
Sovereignty Scanner (vScan), which evaluates the risks associated with
technology vendors and external service providers.
According to Fall, the module
identifies technology dependencies, data access risks, cloud hosting
jurisdictions, contractual lock-in risks and vendor exit strategies, enabling
governments to understand which suppliers pose the greatest threat to their digital
independence.
He noted that the scanner considers
issues such as the United States Cloud Act and other foreign legislations that
could potentially affect data sovereignty for governments relying on overseas
cloud infrastructure.
Another module focuses on Digital
Public Infrastructure (DPI), assessing critical national digital assets
including digital identity systems, digital payments, data exchange platforms,
digital public goods and long-term sustainability.
To broaden the scope beyond core
digital governance, TALISMAN Cybersecurity also developed Sovereignty Extended
Assessment (SOVEX), which evaluates nine additional sovereignty dimensions,
including telecommunications spectrum governance, quantum readiness,
post-quantum encryption preparedness and national sovereignty benchmarking.
Fall said the telecommunications
spectrum assessment was developed after discussions with African
telecommunications engineers seeking more structured methods to evaluate
national spectrum sovereignty.
The platform is supported by the
Digital and AI Sovereignty Risk Management Framework (SRMF), which consolidates
findings from 25 specialist models into a unified national risk management
framework for governments, ministries and national cybersecurity agencies.
Complementing these assessment tools
is DSAT-Live, a continuous monitoring dashboard that allows governments to
operationalize digital sovereignty by tracking risks, recommendations and
remediation progress over time.
The dashboard enables organizations to
assign risk owners, prioritise remediation activities, monitor implementation
timelines and measure improvements through real-time reporting.
Following each assessment, the
platform generates detailed reports identifying critical, high and medium-level
risks together with recommended mitigation measures. Executive summaries are
also produced for senior government officials requiring strategic overviews.
Beyond structured assessments, the
platform includes an automated Digital Sovereignty Benchmarking engine that
analyses publicly available information from international sources including
the International Telecommunication Union (ITU), the World Bank and cloud
infrastructure datasets to estimate a country's overall digital sovereignty
posture.
Using Estonia as the benchmark for
digital sovereignty, the system compares countries against internationally
recognised best practices.
During the demonstration, Fall used
the platform to assess several countries including Rwanda, Switzerland,
Senegal, Ghana, China and Saudi Arabia.
He explained that while the
benchmarking tool provides rapid high-level insights, comprehensive evaluations
require governments to complete the full assessment models with
country-specific information.
Discussing Africa's digital
transformation efforts, Fall argued that many countries have focused primarily
on accelerating digital services without adequately measuring the new
technological dependencies those investments create.
"What I see in Africa is digital
acceleration. They accelerated to make services run, but they are also creating
new dependencies and new vulnerabilities," he said.
He added that many governments
frequently discuss digital sovereignty but lack the assessment mechanisms
needed to understand their current position or determine where investments
should be prioritised.
"Without this data, it is very
difficult to make decisions. The banking industry uses similar assessment
methodologies to understand where to invest and reduce risk. Governments need
the same capability for digital sovereignty," he said.
The platform also supports document
analysis through application programming interfaces (APIs), databases, URLs and
uploaded documents, allowing it to automatically extract relevant information
and populate assessment responses.
According to Fall, the Digital
Sovereignty Intelligence Platform currently delivers assessment accuracy of
approximately 98 to 99 percent based on available information and structured
analytical models.
He believes the platform can provide
African governments with the intelligence needed to reduce technology
dependence, strengthen national cybersecurity, improve governance of critical
digital infrastructure and build long-term digital sovereignty strategies.
Fall also emphasized that digital sovereignty does not mean rejecting foreign technology, severing global internet connections, or building a closed national network. It means retaining control, choice, and the ability to audit or switch dependencies even while relying on foreign infrastructure. The goal he noted is to govern interdependence, not eliminate it.
That’s why DSIP
was built sovereign‑by‑design: delivering the intelligence to assess, govern,
operationalize, and reclaim sovereignty across every dimension. It enables
every nation and every sector to manage digital dependencies on their own terms
— while positioning Africa to lead the global journey toward sovereign digital
futures.
