Question 1

What is the difference between DevOps as a Service and individual SaaS tools?

Accepted Answer

Individual tools solve isolated problems. DevOps as a Service provides an integrated, managed platform – including responsibility for availability, security, and the interaction of all components.

Question 2

Does DevOps as a Service replace an internal devops team?

Accepted Answer

No. Teams remain responsible for architecture, code, and the operation of their applications. DevOps aaS replaces platform operations, not expertise.

Question 3

Who is responsible if production operations fail?

Accepted Answer

Responsibility is clearly shared: platform-related issues fall to the provider, while application-related errors remain the responsibility of the team.

Question 4

How can you prevent CI/CD from becoming a security risk?

Accepted Answer

Through built-in security mechanisms, role-based access control, audit logs, and automated checks – implemented from the start.

Question 5

How complex is the migration from an existing toolchain?

Accepted Answer

The effort depends on the current maturity level, but migration can usually be implemented gradually and with low risk.

Question 6

Which signals should monitoring provide in a toolchain context?

Accepted Answer

Beyond availability, key indicators include pipeline lead times, error rates, resource utilization, and security events.

Question 7

Which question should you always ask a provider?

Accepted Answer

Who operates, patches, and takes responsibility for the platform in daily operations – including nights and weekends?

Question 8

What is a sovereign digital workplace?

Accepted Answer

A sovereign digital workplace is an IT environment in which an organization retains control over its data, systems, and operational processes. This includes the software, infrastructure, and legal framework under which the services are operated.

Question 9

Why do some public authorities view Microsoft 365 critically?

Accepted Answer

Microsoft 365 offers extensive functionality, but it relies on global cloud infrastructure. This raises concerns about data protection, legal access by third countries, and long-term vendor lock-in.

Question 10

What does digital sovereignty mean in practice?

Accepted Answer

Digital sovereignty means that authorities can make independent technical, legal, and organizational decisions about their IT environment. This includes control over data access, system operation, and future development.

Question 11

What alternatives to Microsoft 365 exist for public administration?

Accepted Answer

The main alternatives include:openDesk (ZenDiS)Sovereign Desk (ekom21/govIT)Nextcloud Hub (Nextcloud)Open Source Collaboration (T-Systems)These solutions are based on open-source technologies, European cloud infrastructure, and open standards.

Question 12

What is the difference between openDesk and SovereignDesk?

Accepted Answer

openDesk integrates various open-source tools through APIs and Single Sign-On, emphasizing flexibility. SovereignDesk integrates components more tightly, offers multi-tenancy, and provides a more consistent user experience, though with less flexibility at the individual tool level.

Question 13

How does Open Source Collaboration differ from other sovereign workplace offerings?

Accepted Answer

Open Source Collaboration is a modular solution concept rather than a predefined suite. Organizations can select individual components and design a workplace environment tailored to their specific requirements, providing maximum flexibility and independence.

Question 14

How can migration to a sovereign workplace succeed?

Accepted Answer

Successful migration is typically gradual and may include:Hybrid operating modelsPrioritization of sensitive areasParallel use of existing solutionsProgressive replacement of proprietary platforms

Question 15

What role does the cloud play in a sovereign workplace?

Accepted Answer

The cloud is the foundation of modern workplace solutions. For a sovereign workplace, it is important that the infrastructure is operated in European data centers, follows a European legal framework, and provides transparent operating models.

Question 16

What is the difference between a general-purpose cloud and a GPU cloud?

Accepted Answer

A general-purpose cloud is designed to support a broad range of applications, data, and integration services in a flexible and cost-effective manner. A GPU cloud is optimized for compute-intensive AI workloads, such as model training, fine-tuning, and high-performance inference, and provides high-performance GPU clusters with fast interconnects.

Question 17

Do I really need both platforms?

Accepted Answer

Not necessarily. For smaller, standalone generative AI use cases, a single platform may be sufficient. However, when deploying AI at production scale, especially with model training, fine-tuning, or high inference volumes, separating workloads across two platforms typically delivers both technical and economic benefits.

Question 18

What happens to latency and cost when moving data between the two platforms?

Accepted Answer

This is one of the main challenges of hybrid AI architectures. A direct, high-performance connection between the two platforms is essential to minimize latency and maintain predictable costs. Organizations should discuss networking requirements and associated costs with their cloud provider or providers from the outset. For example, they may want to negotiate free outbound data transfers from the general-purpose cloud to the GPU cloud.

Question 19

Can an AI cloud built on multiple platforms still be sovereign?

Accepted Answer

Yes. Sovereignty is determined not by the number of platforms, but by whether data remains within European jurisdictions, operating models comply with European regulatory requirements, and organizations retain control over their data flows. An integrated, unified, and ideally automated architecture can provide these capabilities across multiple platforms.

Question 20

Which GPUs are used?

Accepted Answer

The answer depends on the workload. Compute-intensive training and high-performance inference typically use the latest NVIDIA Blackwell data center accelerators, while other workloads may be better served by different GPU classes. The appropriate GPU is selected based on factors such as model size, throughput requirements, and budget.

Question 21

How can I avoid vendor lock-in?

Accepted Answer

Vendor lock-in can be minimized by using open interfaces, portable data and model formats, and an architecture that does not depend on proprietary services from a single hyperscale cloud provider. A sovereign cloud strategy should allow workloads to be migrated when business or technical requirements change.

Question 22

Which organizations benefit most from this approach?

Accepted Answer

This architecture is particularly valuable for organizations in regulated industries and for enterprises that process business-critical data while deploying AI at industrial scale. It is well suited to environments where high performance, regulatory compliance, and operational control are equally important.

Question 23

Is electronic records management in the cloud automatically less secure than a solution in an in-house data center?

Accepted Answer

No. The security of electronic records management does not depend solely on the operating model, but rather on how security, access controls, and data protection measures are implemented. Cloud environments can provide a very high level of security when they are appropriately certified and supported by clear governance structures.

Question 24

Does using the cloud mean that public administration gives up control over its records?

Accepted Answer

No. In a professionally managed cloud environment, control over data, access rights, and processes remains with the public authority. Although responsibility for technical operations is outsourced, professional and organizational control remains in place.

Question 25

Is the cloud also suitable for smaller municipalities?

Accepted Answer

Yes. Smaller municipalities often benefit in particular from cloud solutions because they do not need to build and operate their own complex IT infrastructure. This enables resources to be used more efficiently and digitalization projects to be implemented more quickly.

Question 26

When is a hybrid solution more appropriate than a pure cloud solution?

Accepted Answer

Hybrid models are appropriate when certain line-of-business applications or datasets must remain on-premises because of regulatory or organizational requirements, while other components can be operated flexibly in the cloud. They support a gradual and controlled transformation approach.

Question 27

How much does cloud-based electronic records management change day-to-day administrative work?

Accepted Answer

In most cases, the impact is substantial. Workflows become more digital, information becomes centrally accessible, and coordination increasingly takes place through digital processes. At the same time, this requires adjustments to established working methods and administrative procedures.

Question 28

How complex is the transition to cloud-based electronic records management?

Accepted Answer

The level of effort depends heavily on the organization’s starting point. Key factors include the digital maturity of existing processes, the quality of existing data, and the integration of current line-of-business applications. In most cases, the transition is a multi-stage transformation project.

Question 29

Can a cloud solution be introduced step by step?

Accepted Answer

Yes. In practice, implementation is often iterative, for example by starting with individual departments or selected processes. This allows the transition to be managed in a controlled manner and supported more effectively at the organizational level.

Question 30

How can organizations avoid becoming too dependent on a single provider in the long term?

Accepted Answer

The key is to rely on open standards, interoperable interfaces, and clear contractual arrangements. When selecting a solution, organizations should also ensure from the outset that data portability and exit scenarios are built into the overall concept.

Question 31

What is the difference between Multi-Cloud and hybrid cloud?

Accepted Answer

A hybrid cloud combines different deployment models, such as public cloud and on-premises infrastructure. Multi-cloud refers to the use of multiple cloud platforms or cloud providers, regardless of the underlying deployment model.

Question 32

Why does Multi-Cloud become complex without effective management?

Accepted Answer

Because each cloud platform has its own security model, cost structure, tools, APIs, and operational processes. Without consistent governance, complexity increases rapidly.

Question 33

Is Multi-Cloud more secure than a single-cloud environment?

Accepted Answer

Not necessarily. Security depends primarily on governance, architecture, and operational processes. However, a multi-cloud approach can reduce dependence on a single-cloud provider and improve organizational resilience.

Question 34

When is a Multi-Cloud strategy worthwhile?

Accepted Answer

A multi-cloud strategy is particularly valuable when organizations need to support diverse workloads, comply with regulatory requirements, or achieve digital sovereignty objectives.

Question 35

How does FinOps help in Multi-Cloud operations?

Accepted Answer

FinOps provides visibility into cloud spending and helps organizations optimize resource usage and control costs across multiple cloud platforms.

Question 36

How do you avoid vendor lock-in?

Accepted Answer

Vendor lock-in can rarely be eliminated entirely. However, a well-designed multi-cloud strategy can reduce dependencies, increase flexibility, and provide viable alternatives.

Question 37

What role does digital sovereignty play?

Accepted Answer

Digital sovereignty is an important driver of many multi-cloud strategies. It helps organizations determine where sensitive data and critical applications should be hosted to meet regulatory, organizational, and business requirements.

Question 38

What role does sustainability play in cloud selection?

Accepted Answer

Sustainability is becoming an increasingly important factor in cloud strategy. Energy efficiency, environmental impact, energy costs, and long-term resource availability should all be considered when selecting the most appropriate cloud environment.

Question 39

What is a European cloud?

Accepted Answer

The operator and the operating model are aligned with European requirements. In addition to the location of the data centers, the legal area, operator structure, data protection and control over data play an important role.

Question 40

What distinguishes a European cloud from a sovereign cloud?

Accepted Answer

A European cloud primarily describes the geographical and organizational assignment. A sovereign cloud goes further, enabling organizations to maintain control over data, applications, and digital processes.

Question 41

For which workloads are European cloud providers an alternative?

Accepted Answer

They are suitable for a wide range of business applications, such as virtual servers, databases, storage, web applications, development environments, and AI applications. They are particularly relevant for organizations with high requirements for data protection, compliance and digital independence.

Question 42

What limits can European cloud offerings have?

Accepted Answer

Hyperscalers have a rich portfolio of specialized services, a global infrastructure, or extensive proprietary platform services. Companies should therefore analyze their requirements and decide which workloads are best placed on which platform.

Question 43

Does the US CLOUD Act also affect data in European data centers?

Accepted Answer

The location of a data center alone does not determine which legal regulations are relevant. Among other things, the operator structure and the applicable legal area are decisive. Organizations should consider these factors when choosing a cloud.

Question 44

How can vendor lock-in be reduced?

Accepted Answer

Vendor lock-in can be reduced through open technologies, standardized interfaces, container technologies such as Kubernetes and portable applications, among other things. A deliberate multi-cloud strategy can also help limit dependencies.

Question 45

Is a complete switch of US hyperscalers necessary?

Accepted Answer

No. Many companies today combine different clouds. A hybrid cloud or multi-cloud architecture makes it possible to leverage different strengths: local offerings for sensitive or regulated workloads and international platforms for global services.

Question 46

Which certifications and certificates are relevant?

Accepted Answer

Depending on the industry, different proofs may be relevant. ISO 27001, BSI C5, GDPR compliance and industry-specific requirements, among others, often play an important role.

Question 47

How long does a cloud migration take?

Accepted Answer

That depends on the scope and complexity of the IT landscape. Small, independent workloads can be migrated within just a few minutes, although several days should be allocated for planning. Larger transformation projects, on the other hand, can take several months or longer.

Question 48

Can a cloud migration be completed without downtime?

Accepted Answer

Not in every case. However, test migrations, parallel operations, and careful planning can often reduce interruptions and migration risks to a minimum.

Question 49

Which applications are not readily suitable for the cloud?

Accepted Answer

Tightly coupled legacy systems and applications with specific hardware dependencies, in particular, often require modernization first or initially remain in their existing environment.

Question 50

What is the difference between rehosting, replatforming, and refactoring?

Accepted Answer

With rehosting, an application is migrated almost unchanged. Replatforming involves targeted adaptations to the target platform. Refactoring or re-architecting fundamentally modernizes the application. Today, AI tools can drastically reduce the effort involved.

Question 51

What is a cloud landing zone?

Accepted Answer

A landing zone provides the standardized technical foundation for a cloud environment. It includes networks, security policies, roles, monitoring, logging, and governance, among other components. It provides a basic cloud setup out of the box.

Question 52

How can vendor lock-in be avoided?

Accepted Answer

Open standards, portable architectures, container technologies, and an exit strategy planned at an early stage can make it significantly easier to switch providers later.

Blog

Cloud 2026: What lies ahead?

Cloud cost optimization and FinOps

Are you “critical”? Then you need to take action on NIS2

New certificate: Esquema Nacional de Seguridad

IT Award in Gold 2025 won as sovereign cloud

The next generation of computing: More compute power at lower cost

Everything you need to know about the Data Act

Hyperscaler risk assessment for financial institutions

The new T Cloud Public newsletter is coming