Skip to main content
Norwegian Digital Sovereignty Index (NDSI)
  1. SovereignSky Projects/

Norwegian Digital Sovereignty Index (NDSI)

Planned Started January 2024
Table of Contents

Measure your organization’s digital sovereignty readiness. Based on the EU Cloud Sovereignty Framework.

What Is NDSI?
#

The Norwegian Digital Sovereignty Index is a practical framework for measuring how dependent your organization is on foreign-controlled digital infrastructure. Based on the EU Cloud Sovereignty Framework, it provides a standardized way to assess, compare, and improve your sovereignty posture.

NDSI Levels
#

Organizations are scored from Level 0 to Level 4:

LevelNameScoreWhat It Means
4Sovereign35-44Strong control over digital infrastructure
3Resilient26-34Good awareness, some dependencies to address
2Aware18-25Significant dependencies, exit strategies needed
1Dependent9-17High foreign dependency, priority action needed
0Unassessed0-8Critical gaps, immediate investigation required

Components
#

NDSI Quick Scan Survey
#

11 questions covering:

  • Provider & Jurisdiction - Who provides your cloud services? Are they subject to the US CLOUD Act?
  • Data Control - Where is your data stored? Do you have visibility into all SaaS tools?
  • Exit Readiness - Can you migrate away? How long would it take?
  • Operational Resilience - Backup procedures tested? Alternative providers identified?

Software Risk Check
#

Select the tools your organization uses and get an instant risk assessment. Each tool is scored based on:

  • Provider jurisdiction and ownership
  • Data location guarantees
  • Exit capability and portability
  • Availability of sovereign alternatives

Dependencies
#

NDSI depends on the Software Database to provide:

  • Risk scores for individual software products
  • Mapping to European and open-source alternatives
  • Vendor ownership and jurisdiction data

Current Status
#

The framework is in planning phase. The survey and basic scoring are functional, but full integration with the Software Database for automated risk assessment is under development.