Engineering defensible assurance outcomes under NIS and Ofgem oversight at national enterprise scale.