Securing tech stacks and operations from geopolitical upheaval

The takeaways:

• Geopolitics is now a technology variable. There is no one-size-fits-all response.
• Sourcing and architecture decisions are now more closely intertwined with state influence, shaped by incentives, regulation and standards-setting.
• Managing risk and building resilience without sacrificing performance requires the board and C-suite to lead an organisation-wide strategy.

Geopolitical tensions are escalating, and competition is intensifying. Institutions, alliances, and rules are being tested and reshaped. What does this mean for how companies run their operations and manage risk?

Companies may feel compelled to choose sides, even as the composition of those sides shifts. For multinational corporations (MNCs), that can change the assumptions behind where and how you operate at scale.

Global competition is increasingly playing out through technology, with direct implications for your tech stack—from chip to cloud and everything in between. You should weigh trade-offs across your technology investments: cost, quality and operational sustainability, security and data, and interoperability.

These trade-offs carry financial, security, compliance, and operational continuity implications, so addressing them shouldn’t be handled by any single function alone. Managing these risks and building resilience without sacrificing performance requires the board and C-suite to lead an organisation-wide strategy.

Sourcing and architecture decisions are now more closely intertwined with state influence, shaped by incentives, regulation and standards-setting.

Nation-states may increasingly take steps to entice or even force businesses, governments and quasi-governmental organisations such as utilities to purchase technology from certain providers. The impact could be most pronounced in MNC subsidiaries in emerging markets and developing economies, particularly in Latin America, Africa, Asia, and the Middle East, where geopolitical competition is likely to be fierce.

The tech-related levers countries pull and the strategies they pursue will vary. We expect state-backed digital infrastructure initiatives will likely intensify in the coming years. These levers shape which vendors can succeed and how easily organisations can switch or integrate across ecosystems. Here are four factors to watch:

• Cost. Some countries, particularly China, are likely to offer more favourable technology acquisition terms, including lower upfront costs, improved financing, and other incentives to increase adoption and capture markets. Beijing has pursued this strategy for years and will likely intensify those efforts.
• Technology policy and digital sovereignty. Countries are likely to more aggressively use policy regulation or other mechanisms to steer and, in some cases, mandate the use of specific technologies by businesses and governments, particularly in low- and middle-income countries. In particular, they will likely use data localisation requirements, cross-border data transfer restrictions, and digital sovereignty laws to shape technology ecosystems in their favour. Once written into regulatory frameworks, these requirements can lock in preferred infrastructure and create long-term structural dependence.
• Strategic integration and conditional access. Countries are increasingly linking technology adoption to broader economic and security relationships. By controlling access to critical technology, bundling digital infrastructure with financing and trade arrangements, and tying defence or intelligence cooperation to compatible systems, states can constrain the options available. In turn, technology choices can become inseparable from supply chain access, market opportunity, and alignment with a state’s national security priorities.
• International bodies. Countries may increasingly seek to influence international standards bodies and technical rule-making to advance standards that favour their technologies. These outcomes can set the criteria for certification, procurement, and deployment, and create long-term lock-in for businesses.

These levers add up to a more constrained decision environment, where the top technology choice can depend as much on jurisdiction and alignment as on performance. Every organisation’s exposure will differ based on where it operates, its legal structures, and current tech stack. Still, a few key considerations tend to surface as you set direction, and they may overlap.

• Cost vs. quality and operational sustainability. Lower prices and favourable financing can be helpful in the near term. Test those savings against long-term performance and reliability, and against geopolitical risk that could disrupt operations. For MNCs, consider how your subsidiaries, which may more acutely face these trade-offs, should proceed.
• Security and data. Provider and platform-ecosystem choices can affect the confidentiality, integrity, and availability of data, as well as the risk of data capture. A key question to consider is how you manage security and data risk if China-aligned technology is adopted enterprise-wide, or if the parent relies, for example, on Western technology while regional and local subsidiaries rely on Chinese technology.
• Interoperability. If tech stacks diverge, will your systems still work at scale? Consider what happens if interoperability is maintained, degraded, or severed, and what the operational impact would be.
• Reputation and market access. Technology choices can be read as political signals, shaping perceptions among investors, customers, employees, and host governments. They can also influence eligibility for government contracts, participation in critical infrastructure, and access to specific markets. Assess whether adopting one technology ecosystem could build stakeholder trust in one jurisdiction while constraining commercial opportunities elsewhere.
• Regulatory requirements. As technology choices are treated as geopolitical alignment, companies will need to navigate a growing web of regulations designed to secure the issuing country's interests and, in some cases, constrain competitors. Regularly monitor regulatory developments to build lead time for emerging compliance requirements that could narrow technology options or force late-stage redesigns.

Once you’ve sized your exposure, you can translate these trade-offs into clear decision rights, resilience investments, and practical safeguards.

Geopolitics is now a technology variable. There is no one-size-fits-all response. But you can take steps now to reduce exposure, secure continuity, and preserve strategic options.

• Build geopolitics into your technology strategy. Capability, reliability, and price still matter. But leaders now need to give greater weight to state use of technology-related levers that can reshape provider and ecosystem choices over the near, medium, and long term, especially for subsidiaries operating in the Global South.
• Plan on longer horizons. This geopolitical disruption won’t play out on a single timeline, so your technology strategy shouldn’t be built only for the near term. In some cases, higher near-term costs, including investments tied to local regulatory expectations for operational continuity, may be justified by long-term resilience. Start by defining your minimum viable company—the essential processes, technology and infrastructure you need to operate through disruption, stay compliant, and secure your licence to operate, even if parts of your tech stack need to be isolated, replaced, or abandoned.
• Treat tech-stack risk as a C-suite agenda. Tech-stack risk is now an enterprise issue, shaped by global tensions that may unfold over different time horizons. Decision rights should be clear across functions and regions. Align technology, cyber, legal, risk, compliance, procurement, and business leaders on scenarios, thresholds, and escalation paths, so you can act quickly as conditions change.
• Invest in geopolitical and technology expertise. Bridging international affairs and technology strategy shouldn’t be treated as a part-time task. Hire or engage specialists with deep knowledge of both who can build a detailed understanding of your organisation’s technology needs, budgets, global footprint, among other factors, and advise on tech stack-related strategies. Operating in this environment without such specialists increases risk.
• Build redundancy in critical systems. Optionality matters when conditions can shift quickly. Consider building redundancy into your cloud and other critical systems, including portability of data and applications, so you have options as conditions change and can mitigate security, data, and interoperability risks.
• Challenge assumptions, often. Geopolitical dynamics are likely to evolve in ways that challenge traditional assumptions about countries and their alliances. Nation-states considered stable and governed by the rule of law may take new directions. As those realities shift, the pressure points on your tech stack may shift too. Regularly reassess and have a clear understanding of what’s changing, so you can stay prepared.

Over the next few years, much remains uncertain. But one thing is clear: until conditions stabilise, the risk of significant technology-related disruption remains. Taking steps now can help secure your operational capability and keep your options open.