If the alternative is not getting the security certifications required to operate legally in the sectors they depend on for revenue what alternative does an org

If the alternative is not getting the security certifications required to operate legally in the sectors they depend on for revenue what alternative does an organization really have to seeking/implementation solutions in sync with the mandated regulations. And this is not an private company whose demise is insignificant to the society at large(as all companies must be in an functional capitalist economy) but the government itself instituting policies to protect itself from dependence on a single foreign company. And being told by an court to get off the o365 cloud is not an theoretical prospect for an European governmental organization as the EU commission found out about a month ago(https://www.edps.europa.eu/press-publications/press-news/press-releases/2024/european-commissions-use-microsoft-365-infringes-data-protection-law-eu-institutions-and-bodies_en https://www.edps.europa.eu/press-publications/press-news/pre...).