Sovereignty, Secure by Design and zero trust are often managed as separate workstreams. In high-consequence programmes they should meet in one control model.
| Decision | Sovereignty lens | Secure by Design lens | Zero-trust / OT lens |
|---|---|---|---|
| Identity service | Who controls and operates it? Which jurisdiction applies? | Which risks and requirements does it address? How is it tested? | What happens to safe operations when it is unreachable? |
| Privileged support | Where are staff, authority and tooling located? | Is the path represented in architecture, risk and evidence? | Is access attributable, time-bound, mediated and recoverable? |
| Encryption and keys | Who can use, recover, revoke or compel the keys? | Are key controls traced to data risks and verified? | Will loss of key services interrupt essential control? |
| Supplier dependency | Can service continue if the supplier or nation withdraws? | Is the dependency owned, tested and accepted? | Can the affected zone isolate and operate safely? |
| Exit or recovery | Can capability move or continue under local control? | Has the plan been exercised with retained evidence? | Are restoration order and operational safety understood? |
Questions for the next programme review
1. Which external authority or dependency has the greatest power to interrupt the mission?
2. Can we follow a material cyber risk from threat to tested control and accountable decision?
3. Which operational process would be endangered by a failed security or identity control?
4. Which privileged access path is least visible or least attributable?
5. What would we need to operate, isolate, recover or exit if normal external support disappeared?
6. When did we last test those claims, and what did the evidence show?
About TIS Global
TIS Global helps organisations design, assure and deliver secure digital transformation in complex and regulated environments. We bring together strategy, enterprise architecture, cyber security, cloud and operational delivery to turn policy into services that work in the real world.
References and further reading
[1] Ministry of Defence, “Secure by Design - a new way to manage cyber risk in capabilities” (30 May 2023).
[2] Ministry of Defence, “Secure by Design: User-centred guidance on Digital MOD.UK” (10 February 2025).
[3] Ministry of Defence, “Secure by Design: Two Years of Building a More Resilient MOD” (13 August 2025).
[4] National Cyber Security Centre, “Zero Trust” collection, reviewed 16 January 2026.
[5] National Cyber Security Centre, “Secure connectivity principles for operational technology (OT)”.
[6] National Cyber Security Centre, “Cyber Assessment Framework”.
© TIS Global 2026 | These papers provide general guidance and does not replace legal, safety or system-specific assurance advice.