Execution pressures holding back Australian public sector transformation ambitions, new Sovereign Technology Report finds
Australian government and critical infrastructure organisations are under growing pressure to modernise technology ecosystems while maintaining operational control, accountability and resilience.
New research suggests the gap between ambition and execution is widening.
The Sovereign Technology Report: From Complexity to Confidence, released by Kinetic IT in partnership with ADAPT, draws on surveys and executive interviews with leaders across the public sector and regulated industries.
Its central finding is clear: sovereignty is no longer just a policy or procurement issue. It is now an operational challenge. Organisations must maintain visibility, accountability and control across critical systems, especially during disruption or periods of increased risk.
The research confirms what many technology leaders already recognise. They must deliver transformation programs, adopt automation and AI, and continue providing essential services without major increases in budget or resources.
Questions once viewed as operational are now becoming central to transformation success. Who responds during an incident? Where does accountability sit? How quickly can organisations recover?
The report argues that these answers increasingly separate organisations that modernise with confidence from those that modernise and lose control.
Kinetic IT commissioned the research in response to increasing scrutiny around how government, defence and critical infrastructure organisations manage modernisation, cyber resilience, AI adoption and operational accountability.
The findings combine ADAPT’s 2025 Government Edge research series with executive interviews conducted alongside Kinetic IT thought leaders.
AI Adoption Is Exposing Readiness Gaps
The report identified a major shift in how leaders view transformation.
Digital modernisation remains a strategic priority. However, the biggest challenge is no longer ambition. It is execution under pressure.
While 60 percent of agencies identified agentic AI as an investment priority, only 2 percent believed they currently have the governance, data maturity and assurance needed to support safe AI deployment.
The report also found that 74 percent of leaders reported severe or significant capability gaps across data, analytics and AI. This made it the largest capability gap identified.
Organisations must close the gap between ambition and readiness
Jacqui Adams, Head of Digital Transformation at Kinetic IT, said:
“The report highlights an opportunity to close the gap between ambition and readiness. Digital capabilities have the potential to enhance productivity, strengthen decision-making, and improve the way citizens and business engage with government.
“Leaders are focussed on identifying and addressing the barriers to adopt and scale these technologies. For example, the need to co-design and deliver a cohesive AI strategy and operating model that is aligned to and enables enterprise priorities. Of note is the establishment of robust and responsive governance and data frameworks to ensure speed is balanced with trust, resilience, accountability, and long-term flexibility.
“The research shows that digital technologies amplify the underlying characteristics of a system. Therefore, if an organisation’s strategy, services, customer journeys, or practices are opaque, fragmented, poorly governed, badly designed, or vulnerable, digital transformation will accelerate these challenges whilst making them harder to detect and more consequential.
“This confirms what we see every day: agencies that embed sovereignty by design into their AI strategy and operating model are establishing the foundations to build trust, strengthen resilience, improve accountability, and retain control over their digital capabilities.”
Execution Risk Is Limiting Transformation Scale
One of the report’s strongest findings was that many agencies still operate without a formal reinvestment model for maintaining technology assets.
Technology now underpins essential public services and critical infrastructure.
According to the findings, 73 percent of Australian public sector leaders identified funding and resourcing constraints as the primary barrier to transformation.
Organisations are being asked to modernise faster, strengthen cyber resilience, adopt AI and maintain uninterrupted services. Many must do this without additional resources or tolerance for disruption.
Sovereign execution becomes a leadership priority
Murray Thompson AM CSC, Chief Strategy Officer at Kinetic IT, said:
“The report introduces the concept of ‘sovereign execution’, which is the operational discipline of maintaining control, accountability, resilience, and evidence across modern technology environments, regardless of which vendors, platforms, or delivery partners are involved.
“Rather than being a question of ownership, vendor origin or compliance, ‘sovereignty’ in this context is better understood as the ability to retain meaningful control over systems, data, and capabilities where it matters most.
“This requires leaders to make deliberate choices early in the design of their strategy and operating model to ensure they can balance speed with trust, resilience, accountability, and long-term flexibility.”
Delivery Confidence Is Becoming More Important Than Speed
The research reflects a changing reality across government and critical infrastructure sectors.
Transformation is happening now. At the same time, agencies continue managing legacy platforms, workforce pressure, regulatory obligations and increasingly complex delivery environments.
Public trust is becoming a measure of success
Jacqui Adams said:
“Modernisation is no longer a future-state conversation. It’s happening now, with agencies also managing legacy platforms, workforce pressures, regulatory obligations, and increasingly complex delivery environments.
“As platforms, data and AI move closer to the core of how government and critical services are designed, managed, and delivered, public trust is increasingly a key success measure of transformation.
“Success isn’t just ‘does the technology work?’ it is ‘do citizens trust the outcome, and can we maintain operational control, flexibility, and accountability?’”
Hybrid Operating Models Will Persist
The report found hybrid operating environments are now standard across government.
Many agencies reported cloud migration programs remain incomplete.
Larger and more complex organisations often sit further behind, creating extended periods where legacy systems, cloud environments, operational technologies and multiple service providers operate together.
Hybrid environments are becoming the long-term reality
Murray Thompson said:
“Hybrid environments are no longer a temporary transition state for government agencies. For many organisations, they are becoming the long-term operating reality.
“Agencies are modernising while simultaneously maintaining legacy platforms, managing complex cloud setups, supporting operational technologies, and coordinating multiple delivery partners.”
Accountability Is Reshaping Technology Decisions
The research also highlighted growing concerns around fragmented accountability in multi-vendor environments, particularly during incidents and periods of disruption.
Organisations are increasingly shifting their focus from innovation speed toward operational assurance and accountability.
Public sector and critical infrastructure leaders operate in environments where service disruption carries economic, societal and sometimes national security consequences.
Leaders want confidence under pressure
Murray Thompson said:
“This changes how technology decisions are made. Leaders want confidence that systems can be governed, secured, and operated under pressure, not just modernised quickly.”
The report reinforces the need for stronger operational governance models.
Thompson added:
“Sovereignty is now about who holds privileged access, who can respond in the first hour of an incident, how accountability is maintained across multiple providers, and whether organisations can evidence control under pressure.”
Sovereign Execution Becomes a Core Operating Requirement
The report argues that sovereign execution is becoming a defining requirement for organisations operating in high-consequence environments.
This is particularly relevant under obligations linked to the Security of Critical Infrastructure Act, Australian Government AI guardrails and broader cyber resilience frameworks.
Transformation success depends on trust and resilience
Jacqui Adams said:
“The research is intended to help organisations navigate the operational realities shaping transformation efforts, and offer practical insights for modernising sustainably, ethically and safely in today’s environment.
“Public sector organisations are required to concurrently balance technology transformation, operational continuity, cyber resilience, and staff and citizen experience.
“The leaders making progress are transforming with intent to build trust, resilience and accountability.”
The full report, The Sovereign Technology Report, is available at SovTech.Report.
About Kinetic IT (www.KineticIT.com.au)
Kinetic IT is an Australian-owned technology services provider delivering secure, sovereign ICT solutions to government, defence, and critical industry sectors. With a national workforce of over 1,500 employees, Kinetic IT partners with organisations that underpin Australia’s essential services, economic resilience, and national security. The company provides end-to-end capabilities across digital infrastructure, cyber security, intelligent workplace, and service integration, underpinned by onshore expertise and a security-first approach. Founded more than 25 years ago, Kinetic IT has helped customers navigate complexity, manage risk, and deliver meaningful outcomes through technology.
About Cyber News Live
Stay ahead with Cyber News Live! First, we deliver real-time reporting and sharp threat intelligence. Additionally, we provide educational content for professionals, practitioners, and curious minds. From there, whether it’s breaking breach alerts or deep dives into attack vectors, we cover it all. Ultimately, our mission is clear: we make complex cyber topics understandable. And beyond that, we ensure critical knowledge stays accessible to everyone.