Cisco’s sovereign technology push in India: What it means for data security, critical infrastructure, digital independence

Who controls the technology running a country’s hospitals, banks, government networks and critical services? Increasingly, that question is about more than cybersecurity. It is also about who can access sensitive data, who manages essential systems and whether those systems can keep working during a geopolitical crisis.

That is the context behind Cisco’s decision to bring its sovereign critical infrastructure portfolio to India. Speaking at the Bloomberg New Economy Forum in New Delhi on Tuesday, October 13, Cisco Chairman and CEO Chuck Robbins said the company planned to introduce the offering in India over the coming months.

The announcement comes as India pushes to reduce dependence on foreign suppliers in strategically important areas without shutting itself off from global technology partnerships.

What is Cisco’s sovereign critical infrastructure portfolio?

Cisco’s offering is designed to give governments and organisations greater control over their digital infrastructure and sensitive data. The company launched the portfolio in Europe in September 2025 and introduced it in Canada in August 2026, according to its official announcements.

The portfolio covers networking, computing, cybersecurity, collaboration and management tools, including security and observability capabilities from Splunk, which Cisco acquired in 2024.

A key feature is the option to operate systems on an organisation’s own premises, including in an air-gapped environment — one that is physically disconnected from the internet and other external networks. Cisco says this configuration can allow customers to manage their systems and data without the company remotely accessing, controlling or disabling the products.

However, this does not mean the technology itself becomes Indian-owned or that every deployment will automatically meet every Indian regulatory requirement. The actual level of control depends on how the system is configured, who operates it and the applicable contractual and legal arrangements.

Why does India need greater control over critical technology?

Consider a government department handling sensitive records or a financial institution running essential banking systems. If its digital infrastructure depends on external access, connectivity or a supplier’s continued intervention, that dependence can become a security and operational concern.

Robbins said governments were increasingly asking how they could keep data within national boundaries while retaining operational control over critical systems. He also argued that countries needed to balance domestic capabilities with partnerships because building every layer of the technology stack independently could be expensive and time-consuming.

For India, the challenge is to build stronger domestic capabilities while continuing to benefit from international expertise. Data security, cybersecurity, supply-chain resilience and the ability to keep essential services running are all part of that calculation.

India’s Digital Personal Data Protection Act and the DPDP Rules, 2025, establish a framework for processing personal data and protecting individual rights. But data protection and technological sovereignty are not identical: keeping personal data secure does not, by itself, ensure that a country controls all the hardware, software and systems on which its services depend.

How does Cisco’s move fit into India’s semiconductor ambitions?

Robbins also highlighted India’s potential in semiconductor design and manufacturing, saying the world needed additional capacity and could benefit from India’s participation.

The government is pursuing that goal through the India Semiconductor Mission. At SEMICON India 2026 in September, Electronics and IT Minister Ashwini Vaishnaw said the next phase, ISM 2.0, would focus on design, materials and equipment, fabrication plants, assembly and testing, research and development, and talent.

The government’s ambition is to build a broader semiconductor ecosystem, rather than concentrate only on chip manufacturing. That matters because advanced technology depends on multiple layers of expertise, from designing chips to producing the equipment and components used in digital infrastructure.

Robbins said India had the scale to develop critical technology capabilities and become a more important participant in global supply chains. He also emphasised that partnerships with trusted companies would remain necessary.

What could Cisco’s India launch mean for businesses and government?

The immediate significance is that Indian organisations could gain another option for running sensitive systems with tighter control over data, access and operations. Potential users include government bodies, financial institutions, healthcare providers and other operators of critical infrastructure, although Cisco has not yet announced specific Indian customers or deployment details.

The larger question is whether such systems can help India reduce operational dependencies without sacrificing innovation or becoming locked into a single supplier.

Cisco’s India rollout is planned for the coming months, so pricing, availability, local partnerships and the precise deployment options for Indian customers remain to be announced.

For India, technological sovereignty is not simply about keeping data at home. It is about having the skills, infrastructure and choices to decide how essential systems operate — while knowing when global partnerships offer advantages that would be difficult to build independently.

(With inputs from ANI)