Assessment-first
Define the required outcome and target posture before selecting a solution.
About OSAF
Assess first. Prescribe second.
OSAF began with a simple question: what remains possible when a critical dependency no longer cooperates?
Why OSAF exists
Digital transformation increased capability, speed and scale. It also concentrated critical dependencies across cloud, SaaS, identity, software supply chains and AI.
Organizations are often asked to choose a “sovereign” technology before they have defined what sovereignty means for the service in question.
OSAF takes a different path. It starts with one bounded critical service, identifies the business outcomes that require protection, tests the operational capabilities that must remain possible and asks for evidence.
The result is not a universal label. It is a current posture, a proportionate target and a decision about the gap that matters most.
Framework purpose
Turn sovereignty into an operational question.
OSAF is designed to help leaders discuss dependency and control in terms that connect technology, risk, resilience, governance and business consequence.
Evidence-first
Distinguish a claim or document from an implemented, monitored and tested control.
Proportionate
Match the target to the service consequence. Maximum autonomy is not automatically the right answer.
Project acknowledgements
Research is strengthened by the people who make it possible.
OSAF is an independent research-led framework supported through authorship, sponsorship and continued practical development.
Author & project lead
Gopi Haran
Creator and steward of the Operational Sovereignty Assessment Framework.
Learn more about Gopi Haran ↗Project sponsor
Creative Emergy
OSAF gratefully acknowledges Creative Emergy for sponsoring this research project and supporting its public demonstration.
Visit Creative Emergy ↗Current status
Early-stage research prototype.
OSAF originated from graduate research into Canadian technological and cloud sovereignty and is being developed as a practical assessment method.
It should not be represented as a mature commercial standard, certification, legal opinion, regulatory assurance or security audit. The framework and demonstration are educational decision support.