The dynamics of change in the international arena have compelled the European Union and its member states to re-evaluate previous principles regarding the inevitability of trade globalisation and the reliability of supply chains. It is evident that there is a prevailing tendency towards the establishment of strategic autonomy, of which cybersecurity constitutes an integral component. Those obliged to apply public procurement regulations have an important role to play in ensuring strategic autonomy. Fundamental principle of this regulation is the equal treatment of actors within these procurements. However, this principle may conflict with attempts to ensure strategic autonomy. The article’s analysis focuses on three institutions that allow for exceptions to this principle: local content requirements, the preference for EU-based vendors, and the selection of offers based on bidder experience. These exceptions are analysed within the context of achieving maximum cybersecurity within the broader pursuit of strategic autonomy.