Capgemini Survey Finds Only 14% of Large Organisations Report Full Technology Dependency Visibility

Most large organisations in a Capgemini Research Institute survey do not report end-to-end visibility into their technology dependencies. Capgemini says only 14% have fully mapped those dependencies, which it defines as visibility across critical components, suppliers, providers, and dependencies with continuous or near-real-time risk tracking. The finding appears in Digital Sovereignty: From Policy Ambition to Executive Imperative, published on 8 September 2026.

For Drupal operators, the significance is not that the research measured Drupal deployments; it did not. Capgemini treats dependency visibility, supplier concentration, substitutability, portability, and exit readiness as connected operational questions. That framework is relevant when agencies and public bodies assess whether a service can be moved or maintained if a critical technology provider has to be replaced.

The report also points to long switching timelines. Capgemini says 41% of organisations would need three to 12 months to transition away from a critical provider, while 36% would need more than 12 months; 13% say they could switch within three months, and 10% report no viable alternative provider. Connectivity, cybersecurity, and hardware are identified as the areas where alternative providers are most difficult to find.

Capgemini frames digital sovereignty as a question of managed dependency rather than complete technological independence. Sixty-nine per cent of respondents agree that digital sovereignty means having the capacity to choose technological dependencies, while 59% consider full digital sovereignty unrealistic in the current ecosystem. The report recommends measures including portability, interoperability, fallback arrangements, exit strategies, open standards, and portable technology designs to reduce lock-in and improve resilience.

The report includes public-sector examples that reinforce the emphasis on substitutability. Jean-Baptiste Courouble, chief information officer at French social-security collection network URSSAF, says the organisation has established a programme to assess whether it can exit what he describes as captive vendors, using dependency mapping and prioritisation to decide which risks justify intervention. Charles-Pierre Astolfi, chief information officer at France's National Institute of Geographic and Forest Information, describes digital sovereignty for a public institution primarily in terms of whether technologies can be substituted and whether supply-chain dependencies remain under control.

The Capgemini Research Institute surveyed 1,300 business and technology executives in April 2026 at private-sector organisations with more than $1 billion in annual revenue and public-sector organisations with more than $1 billion in annual budgets. It supplemented the survey with 13 interviews with senior executives and desk research. The findings reflect respondents' assessments and do not independently test provider migration times, dependency mapping, or the portability of Drupal deployments.