Evidence-led cybersecurity assurance and measurable control effectiveness. Designed for board-level discussion and onward sharing.