Question 1

What is the difference between DevOps as a Service and individual SaaS tools?

Accepted Answer

Individual tools solve isolated problems. DevOps as a Service provides an integrated, managed platform – including responsibility for availability, security, and the interaction of all components.

Question 2

Does DevOps as a Service replace an internal devops team?

Accepted Answer

No. Teams remain responsible for architecture, code, and the operation of their applications. DevOps aaS replaces platform operations, not expertise.

Question 3

Who is responsible if production operations fail?

Accepted Answer

Responsibility is clearly shared: platform-related issues fall to the provider, while application-related errors remain the responsibility of the team.

Question 4

How can you prevent CI/CD from becoming a security risk?

Accepted Answer

Through built-in security mechanisms, role-based access control, audit logs, and automated checks – implemented from the start.

Question 5

How complex is the migration from an existing toolchain?

Accepted Answer

The effort depends on the current maturity level, but migration can usually be implemented gradually and with low risk.

Question 6

Which signals should monitoring provide in a toolchain context?

Accepted Answer

Beyond availability, key indicators include pipeline lead times, error rates, resource utilization, and security events.

Question 7

Which question should you always ask a provider?

Accepted Answer

Who operates, patches, and takes responsibility for the platform in daily operations – including nights and weekends?

Question 8

What is a sovereign digital workplace?

Accepted Answer

A sovereign digital workplace is an IT environment in which an organization retains control over its data, systems, and operational processes. This includes the software, infrastructure, and legal framework under which the services are operated.

Question 9

Why do some public authorities view Microsoft 365 critically?

Accepted Answer

Microsoft 365 offers extensive functionality, but it relies on global cloud infrastructure. This raises concerns about data protection, legal access by third countries, and long-term vendor lock-in.

Question 10

What does digital sovereignty mean in practice?

Accepted Answer

Digital sovereignty means that authorities can make independent technical, legal, and organizational decisions about their IT environment. This includes control over data access, system operation, and future development.

Question 11

What alternatives to Microsoft 365 exist for public administration?

Accepted Answer

The main alternatives include:openDesk (ZenDiS)Sovereign Desk (ekom21/govIT)Nextcloud Hub (Nextcloud)Open Source Collaboration (T-Systems)These solutions are based on open-source technologies, European cloud infrastructure, and open standards.

Question 12

What is the difference between openDesk and SovereignDesk?

Accepted Answer

openDesk integrates various open-source tools through APIs and Single Sign-On, emphasizing flexibility. SovereignDesk integrates components more tightly, offers multi-tenancy, and provides a more consistent user experience, though with less flexibility at the individual tool level.

Question 13

How does Open Source Collaboration differ from other sovereign workplace offerings?

Accepted Answer

Open Source Collaboration is a modular solution concept rather than a predefined suite. Organizations can select individual components and design a workplace environment tailored to their specific requirements, providing maximum flexibility and independence.

Question 14

How can migration to a sovereign workplace succeed?

Accepted Answer

Successful migration is typically gradual and may include:Hybrid operating modelsPrioritization of sensitive areasParallel use of existing solutionsProgressive replacement of proprietary platforms

Question 15

What role does the cloud play in a sovereign workplace?

Accepted Answer

The cloud is the foundation of modern workplace solutions. For a sovereign workplace, it is important that the infrastructure is operated in European data centers, follows a European legal framework, and provides transparent operating models.

Question 16

What is the difference between a general-purpose cloud and a GPU cloud?

Accepted Answer

A general-purpose cloud is designed to support a broad range of applications, data, and integration services in a flexible and cost-effective manner. A GPU cloud is optimized for compute-intensive AI workloads, such as model training, fine-tuning, and high-performance inference, and provides high-performance GPU clusters with fast interconnects.

Question 17

Do I really need both platforms?

Accepted Answer

Not necessarily. For smaller, standalone generative AI use cases, a single platform may be sufficient. However, when deploying AI at production scale, especially with model training, fine-tuning, or high inference volumes, separating workloads across two platforms typically delivers both technical and economic benefits.

Question 18

What happens to latency and cost when moving data between the two platforms?

Accepted Answer

This is one of the main challenges of hybrid AI architectures. A direct, high-performance connection between the two platforms is essential to minimize latency and maintain predictable costs. Organizations should discuss networking requirements and associated costs with their cloud provider or providers from the outset. For example, they may want to negotiate free outbound data transfers from the general-purpose cloud to the GPU cloud.

Question 19

Can an AI cloud built on multiple platforms still be sovereign?

Accepted Answer

Yes. Sovereignty is determined not by the number of platforms, but by whether data remains within European jurisdictions, operating models comply with European regulatory requirements, and organizations retain control over their data flows. An integrated, unified, and ideally automated architecture can provide these capabilities across multiple platforms.

Question 20

Which GPUs are used?

Accepted Answer

The answer depends on the workload. Compute-intensive training and high-performance inference typically use the latest NVIDIA Blackwell data center accelerators, while other workloads may be better served by different GPU classes. The appropriate GPU is selected based on factors such as model size, throughput requirements, and budget.

Question 21

How can I avoid vendor lock-in?

Accepted Answer

Vendor lock-in can be minimized by using open interfaces, portable data and model formats, and an architecture that does not depend on proprietary services from a single hyperscale cloud provider. A sovereign cloud strategy should allow workloads to be migrated when business or technical requirements change.

Question 22

Which organizations benefit most from this approach?

Accepted Answer

This architecture is particularly valuable for organizations in regulated industries and for enterprises that process business-critical data while deploying AI at industrial scale. It is well suited to environments where high performance, regulatory compliance, and operational control are equally important.

Question 23

Is electronic records management in the cloud automatically less secure than a solution in an in-house data center?

Accepted Answer

No. The security of electronic records management does not depend solely on the operating model, but rather on how security, access controls, and data protection measures are implemented. Cloud environments can provide a very high level of security when they are appropriately certified and supported by clear governance structures.

Question 24

Does using the cloud mean that public administration gives up control over its records?

Accepted Answer

No. In a professionally managed cloud environment, control over data, access rights, and processes remains with the public authority. Although responsibility for technical operations is outsourced, professional and organizational control remains in place.

Question 25

Is the cloud also suitable for smaller municipalities?

Accepted Answer

Yes. Smaller municipalities often benefit in particular from cloud solutions because they do not need to build and operate their own complex IT infrastructure. This enables resources to be used more efficiently and digitalization projects to be implemented more quickly.

Question 26

When is a hybrid solution more appropriate than a pure cloud solution?

Accepted Answer

Hybrid models are appropriate when certain line-of-business applications or datasets must remain on-premises because of regulatory or organizational requirements, while other components can be operated flexibly in the cloud. They support a gradual and controlled transformation approach.

Question 27

How much does cloud-based electronic records management change day-to-day administrative work?

Accepted Answer

In most cases, the impact is substantial. Workflows become more digital, information becomes centrally accessible, and coordination increasingly takes place through digital processes. At the same time, this requires adjustments to established working methods and administrative procedures.

Question 28

How complex is the transition to cloud-based electronic records management?

Accepted Answer

The level of effort depends heavily on the organization’s starting point. Key factors include the digital maturity of existing processes, the quality of existing data, and the integration of current line-of-business applications. In most cases, the transition is a multi-stage transformation project.

Question 29

Can a cloud solution be introduced step by step?

Accepted Answer

Yes. In practice, implementation is often iterative, for example by starting with individual departments or selected processes. This allows the transition to be managed in a controlled manner and supported more effectively at the organizational level.

Question 30

How can organizations avoid becoming too dependent on a single provider in the long term?

Accepted Answer

The key is to rely on open standards, interoperable interfaces, and clear contractual arrangements. When selecting a solution, organizations should also ensure from the outset that data portability and exit scenarios are built into the overall concept.

Blog

Everything you need to know about the Data Act

Sovereign Cloud: Greater Protection for Europe’s Data

What’s new with OpenStack?

OpenStack - the standard for the sovereign public cloud

The highlights of the OpenInfra Summit 2023 in Vancouver

Data protection-compliant learning: Digital tools for schools

Open source code: How the cloud benefits from open source

What companies need to consider when working with CRITIS operators

What companies need to consider when working with CRITIS operators