Swiss Military Exits Microsoft Cloud: A Strategic Shift
The Swiss military is making a significant change in its IT infrastructure. Experts in cyber defense, particularly from the “Kommando Cyber” and its sub-unit for cyber and electromagnetic actions (CEA), are stepping away from the tech giant Microsoft. By October, all personnel in these units are expected to transition to the open-source alternative known as OpenDesk. This ambitious timeline underscores the urgent necessity for action perceived within the Alpine nation.
Background of the Decision
According to reports, the Swiss military’s shift is a response to a strategic change at Microsoft. Historically, Switzerland has collaborated closely with the American corporation, keeping sensitive governmental data within its own state-run data centers. However, Microsoft has increasingly forced customers into its cloud infrastructure. This means that emails, documents, calendar data, and video conferencing will only be accessible through the servers controlled by the U.S. company. For the Swiss military, which classifies most of its operational data as highly confidential, this poses an untenable security risk.
Cloud Dependence and Geopolitical Risks
The military’s concerns are compounded by worries that sensitive information could unwittingly make its way to the U.S. government. Simon Müller, head of the Cyber Command, has pointed out that Microsoft’s cloud-based Office 365 is unsuitable for an organization with stringent requirements for confidentiality, availability, and integrity. Under existing laws like the U.S. Cloud Act, such services cannot be utilized in specific military contexts. The fear of unauthorized data leaks to foreign intelligence agencies, such as the NSA, is particularly acute.
The geopolitical landscape also adds urgency to these concerns. Recent examples demonstrate how digital infrastructures can be weaponized. The U.S. government has, on occasion, placed temporary bans on exporting certain AI models and compelled Microsoft to hand over emails from Dutch government officials. High-profile cases, such as the disabling of user accounts belonging to judges at the International Criminal Court due to U.S. sanctions, have sparked fears of arbitrary program shutdowns or the abrupt application of aggressive licensing strategies.
The Rise of OpenDesk and LibreOffice
In transitioning to OpenDesk, the Swiss military opts for software developed by Germany’s Center for Digital Sovereignty (Zendis), which serves as an open-source alternative to Microsoft 365. The relevance of such solutions is growing in German-speaking countries; for instance, the Austrian Bundesheer is migrating to LibreOffice, while the Bundeswehr’s IT service provider has signed a framework agreement with Zendis for secure communication and collaboration software like OpenDesk.
Switzerland has been advocating for digital sovereignty for some time. A new law set to take effect in 2024 will require the federal government to disclose the source code of any self-developed software. This initiative aims to reduce dependency on individual software providers and promote transparency. Initially, the military was exempt from this requirement for security reasons, but the Cyber Command is now voluntarily adopting this open-source approach.
Overcoming Technical Hurdles
Despite some identified limitations with OpenDesk, such as a lack of desktop apps and unclear migration costs, these issues are less pressing for the tech-savvy cyber specialists in the military. They will be operating the software independently in their own data centers and are capable of making necessary adjustments.
In addition, the Swiss military is actively contributing to developer platforms, such as GitLab, submitting improvements for cryptographic practices. They have even released their open-source document search engine, Loom. This engagement reflects a desire not merely to consume digital resources but also to give back actively to the community.
The Swiss military’s exit from the Microsoft cloud illustrates a broader trend of organizations prioritizing security and digital sovereignty in an increasingly uncertain geopolitical landscape. As they embrace open-source solutions, they not only enhance their operational security but also contribute to the wider movement toward independence from monopolistic software vendors.
