As a start, there should be a rule that no government organisation is allowed to use software they don’t have full control over.

We depend too much on Microsoft and AWS etc.