Assurance Matters

Digital identity, CNI & security compliance

Specialist information assurance and governance.

Assurance Matters advises organisations on information assurance, governance, metrics and estimation. Our work spans digital identity, critical national infrastructure (CNI) and security compliance, with a focus on practical controls and clear assurance evidence for stakeholders.

At a glance

35+ yearsDr Carol Buttle’s experience in information assurance
Regulated sectorsDefence, counter-terrorism, CNI, banking, finance and healthcare
ISO 27001, NIST & Cyber EssentialsStandards and schemes we advise on

What we do

01

Digital identity & biometrics

Security and assurance for digital identity and biometric systems — from risk modelling for multi-modal biometrics to the governance, controls and evidence that trust frameworks and procurement teams expect.

02

Governance

We review existing governance policies, identify gaps, and draft clear policies, terms of reference and reporting structures. Where it helps, we run briefing workshops so good practice becomes part of how teams work — not theory left on a shelf.

03

Assurance

Assurance for public- and private-sector projects. We provide the guidance and structures organisations need to give stakeholders assurance evidence relating to compliance — across security, safety and financial matters — and we help evaluate challenging or failing projects.

04

Metrics

Benchmarking, metrics and KPIs drawn from continuous research across industries, so leadership teams can measure compliance, risk and performance against meaningful, objective indicators.

05

Estimation

Adaptable estimation models built on relevant sector benchmarks, giving a realistic picture of the cost, effort and schedule a project involves — across information security, software, construction, change management, biometrics and infrastructure.

How we work

We work on a simple principle: governance and assurance should support delivery, not get in its way.

  • Led by Dr Carol Buttle, drawing on her long-standing information assurance experience.
  • Practical over theoretical — clear policies and working controls, written in plain language.
  • Evidence-based — benchmarking, metrics and KPIs that support clear stakeholder reporting.
  • Briefings and workshops — practical guidance for teams putting governance into practice.

Principal

Dr Carol Buttle

Assurance Matters is led by Dr Carol Buttle, Technical Director of BBS IT Associates, who brings over 35 years' experience in information assurance and governance across defence, counter-terrorism, critical national infrastructure, healthcare, banking and finance. She has served as Technical Director and CISO on cyber security and biometric programmes, and has published on biometric security and risk modelling for multi-modal biometrics.

  • CESG Certified Professional (CCP) Lead Accreditor
  • Accredited Cyber Essentials consultant
  • President and Distinguished Fellow, ASEP
  • Senior Advisor and Distinguished Fellow, SEC — Lead Chair, Metric and Benchmark Special Interest Group
  • Senior Advisor for Security Systems and Biometrics, SSEC

Get in touch

For enquiries about our services:

contact@assurancematters.co.uk