Foundational Security, Operational Autonomy and Organizational Privacy are essential for National Sovereignty.

Any country whose government agencies (, at a minimum the Executive Branch and Departments of State and Defense,) are operationally reliant on an(y) external or foreign entity for Identity and Access, does not have national sovereignty.

The trustworthiness and independent functioning of an organization's Identity and Access services are mission-critical, and at most organizations worldwide, these two services are delivered by an independently operable Active Directory.

At such organizations, the primary identities and credentials are in complete and autonomous control of the organization, and their functioning, availability and security are neither dependent on nor accessible/subvertible by an external entity.

Further, at such organizations, all security authentications and authorizations happen internally, and knowledge and control of Who is logging on, when, where, and accessing what stays within the organization.

In contrast, at organizations wherein their primary identities and credentials are stored, managed or secured in an(y) external (entity's) infrastructure (e.g. the Cloud), the functioning, availability and security of these two mission-critical services are always dependent on, accessible to and/or subvertible by the external entity, and thus always vulnerable.

Further, at such organizations, security authentications and authorizations happen externally, and knowledge and control of Who is logging on, when, where, and accessing what is always also known to and subvertible by the external entity.

Organizations operating on Active Directory have foundational security, operational autonomy and organizational privacy, and consequently countries whose government agencies operate on Active Directory have National Sovereignty.