How techno-nationalism is complicating IT resilience and supply chains for CIOs

The growth of techno-nationalism, meaning the use of technology policy to advance national economic and security interests, has had a series of knock-on effects for the CIO. Especially for CIOs orchestrating enterprise IT on a global scale, techno-nationalism impacts more than just architectural decision-making; it also creates operational challenges for IT organizations, particularly in supply chains, resilience planning, and regulatory compliance. Today, governments are asserting greater control over semiconductors, cloud infrastructure, AI models, and cross-border data flows. Previously abstract geopolitical tension is now directly filtering through to enterprise technology operations. For CIOs, the consequences go well beyond infrastructure strategy: Tariffs, export controls, supply chain dependencies, and regulatory oversight are beginning to affect everything from hardware procurement to disaster recovery planning. It’s unsettling to many CIOs to find themselves sitting in yet another hot seat. Yet here they are, sometimes even facing regulators to discuss the details of their technology stack, data stores, and operations. To succeed in this environment, CIOs need to understand how tech nationalism is changing the playing field — and respond accordingly.

Supply chain impacts

One major operational challenge of techno-nationalism centers on the supply chain. The most disruptive change to supply chains in recent years arguably came when “the Trump administration’s April 2025 ‘Liberation Day’ tariffs killed just-in-time inventory for IT hardware,” according to Collin Hogue-Spears, public cloud compliance leader and senior director of product management at Black Duck, a security provider.  Piling tech nationalism on top of that pushed CIOs firmly into unknown territory and raised the risks across IT supply chains. Keep in mind that “each country defines ‘sovereignty’ differently,” which means CIOs often end up managing multiple, non-uniform environments, said Mark Townsend, co-founder & CTO at AcceleTrex. The supply chain for IT hardware has long been a global affair, but under tech nationalism, these trades are no longer straightforward; in some cases, they are no longer legal. Sometimes disruption in supply chains is less of an unintended regulatory consequence and more of a strategic and purposeful play by governments to exert more control. “The AI race is increasingly constrained not by chips, but by energy. On this front, the U.S. and Europe risk falling behind China,” said Taavi Madiberk, CEO and co-founder of Skeleton Technologies, a leader in energy storage solutions. “Energy storage is now foundational to data center resilience, but China’s dominance over critical raw materials for batteries, like lithium, further compounds the competitive imbalance,” Madiberk said. AI competitiveness ultimately depends on energy competitiveness, he explained. “If the West is serious about AI leadership, policy must prioritize energy scalability, secure supply chains, and smart trade policy,” Madiberk added.

Sovereign AI and interoperability risks

This has naturally led to the rise of sovereign AI, alongside the new assemblies of sovereign clouds. But floating under the radar is what some experts describe as a potential interoperability crisis, according to Peter Wang, co-founder and Chief AI & Innovation Officer at Anaconda, a provider of open‑source–based Python platform, tools, and enterprise services for data science, machine learning, and AI development. AI fragmentation could “lead to a world where models don’t speak the same language,” which would stall innovation and create security risks that “no one is prepared for,” he said. Yet techno-nationalism shows no signs of slowing down. As a result, the private sector may soon find itself ensnared in interoperability conflicts, roiling regulatory changes and government grabs for more power. In any case, “costs rise, capabilities vary, and you may lose access to the global features your teams rely on,” said Townsend. Managing these new supply chain risks and challenges may therefore require CIOs to take a different approach entirely. One way that CIOs can best manage this is “by moving from a single-vendor or single-region dependency mindset to a portfolio-based approach,” according to Sarita Benjamin, general manager of supply chain solutions at Accuris, a global engineering data and technology company. “That means mapping vendors to geopolitical exposure, understanding where critical components and data actually originate, and building optionality into sourcing decisions. Visibility and diversification — not just redundancy — are becoming essential risk-management tools,” Benjamin explained.

Geographic failover strategies

Business resilience plans will also need to be completely redesigned to accommodate the rise of additional threats on many new fronts. “Traditional disaster recovery assumes data moves freely across borders during an outage. That’s over,” said Hogue-Spears. “If your cloud provider fails over from London to Amsterdam, does the network path go direct, or does it transit France or Germany? Every country your data passes through during failover creates potential sovereignty violations. The regional constraints are brutal,” Hogue-Spears added. He suggests that CIOs carefully review and revamp their plans for geographic failovers in light of these new changes. “The best strategy is a tiered approach: use global failover for public or non-sensitive systems, and region-locked failover for anything governed by data residency rules,” said Townsend. “Some vendors now enforce zero trust API policies across all regions, ensuring uniform security even during a failover event.”. Fortunately, you don’t have to throw out your clouds and start over from scratch, but you should review everything with this new perspective. “Cloud usage is still a great option for dimensioning your infrastructure in an agile way, however, you should consider not putting all your eggs in one basket,” said Kim Larsen, CISO at Keepit, a provider of security protection for cloud and company data. Larsen suggests that CIOs begin by building a strong and tested resilience plan around their hyperscaler usage or cloud usage in general. But be sure to keep in mind “various threats like hybrid attacks, geopolitical disturbances and accidental incidents in your planning process, which could highlight the need to have your resilience solution close by,” he said.

CIO policy discussions with government regulators

Techno-nationalism isn’t just prompting change from within but also external conversations with the government. Regulators are seeking information from CIOs on IT modernization and security, as well as tech stacks. Governments are specifically looking for compliance on both security and the use of restricted software and hardware from adversarial countries, according to Ted Krantz, CEO at interos.ai. “Maintaining a persistent audit of infrastructure and preventing shadow IT are crucial first steps toward preparedness for persistent monitoring of tech-focused restrictions,” he said. As a result, tech purchasing has also become a more precarious task. “Historically, CIOs have not needed to integrate geopolitical shifts into their IT purchasing decisions. This is no longer the case as it directly impacts the threat and regulatory landscape,” said Krantz. Complicating the situation further are current and emerging restrictions that target many emerging technologies. IT purchasing has to navigate the shifting range of companies and products that are prohibited too. “In addition, with the tit-for-tat retaliatory tariffs and sanctions, many critical minerals that are essential to modern technologies are experiencing major fluctuations and availability,” said Krantz. “Diversifying by both suppliers and regions can help build greater stability and continuity despite the widespread shifts,” he said.

Enjoyed this article? Sign up for our newsletter to receive regular insights and stay connected.