Sovereign Cloud or Digital Vassalage? Why Australia and the Five Eyes Still Hold the Last Laugh

by PAUL L. KEBAIJA

State Enterprises Minister William Duma stood at the Sheraton in Port Moresby last Friday and declared Papua New Guinea “serious about building the trusted digital infrastructure required for a modern economy.” The launch of Kumul Cloud Infinity, billed as the country’s first sovereign cloud and AI data centre, was presented as a declaration of digital independence. Data would stay “closer to home,” under “national governance and security arrangements.” Reliance on offshore infrastructure would shrink. Confidence would rise. The future, Duma insisted, would be written in Port Moresby, not Sydney or Silicon Valley.

Australia and the broader Five Eyes architecture still own the decisive levers, the undersea routes, the upstream gateways, the high-end silicon, the satellite constellation now blanketing the wards, and the dominant mobile network that carries most of PNG’s everyday traffic. A single data centre in Port Moresby, however well-branded, does not rewrite those facts.

Digicel PNG remains the leading mobile operator in the country. It covers the majority of the population, runs the densest 4G footprint, continues tower expansion and 5G upgrades, and handles the bulk of voice, data, mobile money and last-mile government service delivery. That network is owned by Telstra.
In July 2022 Telstra completed the acquisition of Digicel Pacific. Telstra holds 100 percent of the ordinary equity. The Australian Government, through Export Finance Australia, provided the overwhelming majority of the financing, approximately USD 1.33 billion, while Telstra itself contributed around USD 270 million. The deal was explicitly framed in Canberra as securing “trusted” telecommunications infrastructure across the Pacific and preventing potential Chinese influence over a critical regional asset. Australian taxpayers underwrote the risk. Telstra now owns and operates Digicel across PNG, Fiji, Vanuatu, Samoa, Tonga and Nauru.
When officials speak of reducing offshore reliance and strengthening national digital resilience, they omit the fact that the primary mobile network, the layer ordinary Papua New Guineans and most government systems actually use every day, is controlled by an Australian company whose parent government sits at the core of the Five Eyes intelligence alliance.

PNG’s international bandwidth remains overwhelmingly dependent on routes shaped and financed by Australia. The Coral Sea Cable System (CS²), the main high-capacity link to Australia and the Solomon Islands, was majority-funded by Canberra precisely to keep Huawei Marine out of the picture. PPC-1 traffic continues to route toward Australian and Guam gateways. These are not neutral commercial assets; they are strategic infrastructure built with explicit security and geopolitical intent.

Now comes the Pukpuk Connectivity Initiative: three new international-grade submarine cables, valued at USD 120 million, fully funded by Australia under the Pukpuk Treaty, a mutual defence agreement. The project is presented as a gift with “no cost implications to the State.” That framing is convenient. It also means the next generation of PNG’s digital backbone is being laid under the financial and strategic terms of a defence partner whose primary intelligence alignment is the Five Eyes. Google may lay the fibre, but the cheque and the strategic framing come from Canberra. Redundancy is being built, but redundancy within a trusted Western network, not outside it.
Local storage of government records and health data is useful. It does not change the fact that the moment that data needs to talk to the outside world, or when citizens stream, bank or trade internationally, the packets still travel across infrastructure designed, funded and monitored within the Australian strategic perimeter.

Kumul Cloud Infinity runs on NVIDIA H200 GPUs and Hewlett Packard Enterprise hardware, layered with CloudSigma’s platform. NVIDIA is an American company whose most advanced chips are subject to export controls and whose strategic interests align with Washington. HPE is American. CloudSigma is Swiss-founded and markets itself as a sovereign-cloud enabler, yet it operates inside the same Western technology ecosystem and partners closely with HPE. This is not indigenous capability. It is imported high-performance computing packaged as local sovereignty.

Meanwhile, the last-mile and rural connectivity push is being handed to Starlink. Digicel first and then Telikom are the authorised national resellers. Starlink is a SpaceX system, American-owned, American-controlled, and operating under a regulatory and intelligence environment fully integrated into the Five Eyes signals-intelligence architecture. Low-earth-orbit satellites deliver speed and reach that fibre cannot match in the Highlands or the islands. They also deliver traffic that, by design and by law in the United States, is accessible to the same alliance that already sees most of the Pacific’s undersea cables.
A sovereign data centre that still depends on American GPUs for AI workloads, an Australian-owned mobile network for the majority of user traffic, and American satellites for rural reach is not a declaration of independence. It is a declaration that PNG intends to operate as a secure, interoperable node inside the preferred Western stack.

PNG’s cybersecurity institutions remain thin. Australia has spent years building the National Cyber Security Centre, offering rapid-response teams, training, and joint frameworks on AI principles and digital sovereignty for the Pacific. These are genuine capacity-building efforts. They are also relationship-building efforts that create lasting technical and institutional dependence. When the next major incident hits, and it will, the first phone call will still go to Canberra or its Five Eyes partners, not to a fully autonomous PNG capability that does not yet exist at scale.

Power reliability remains a chronic constraint. The new data centre itself relies on layered backups, including gas generation, precisely because the grid cannot be trusted. Resilience that depends on imported hardware, imported expertise and imported energy solutions is resilience on someone else’s terms.

None of this requires conspiracy. It requires only an honest reading of infrastructure, capital and institutional power. Australia has spent the better part of a decade ensuring that critical Pacific digital infrastructure stays out of Chinese hands and inside a “trusted” Western framework. The Coral Sea Cable was the first major demonstration. The Pukpuk cables under a defence treaty are the latest. The acquisition of Digicel Pacific, underwritten by Australian taxpayers, locked in control of the dominant mobile network.

Starlink licensing and the dual Telikom/Digicel reseller arrangements fit the same pattern. The Five Eyes do not need to own every server in Port Moresby. They need the routes, the high-end compute supply chain, the satellite layer, the primary mobile network, and the institutional relationships that turn connectivity into influence.

Duma is correct that data has become one of the world’s most valuable resources and that where it is stored and under whose law matters. The uncomfortable corollary is that PNG still does not control the decisive layers of the stack that determine who can see the traffic, who can interdict it, who can shape the standards, and who holds the long-term leverage when politics or security require it.

Kumul Cloud Infinity is a real step. It is also a step taken inside a cage whose bars were forged in Sydney, Washington and the Five Eyes joint facilities. The government can call it sovereignty. The cables, the chips, the satellites, the mobile network owned by Telstra, and the alliance architecture will continue to have the last laugh.

@FOLLOWERS