End-to-end Digital Assurance for Quantum Systems

Dynamic, principles-based assurance for complex, high-integrity systems is a new frontier in modern, digital assurance. This talk on the work of the Quantum Systems Engineering team at Loughborough explores the interplay between evolving technology and the operational and regulatory environments it operates in. Their recent Quantum Key Distribution (QKD) assurance project coincided with a significant shift in approach to Principles-Based Assurance (PBA) by the UK’s National Cyber Security Centre’s (NCSC). Unlike prevailing technology profile approaches, such as Common Criteria (CC), PBA specifies ‘what’ is to be achieved, not ‘how‘ to achieve it. NCSC sees PBA as a key enabler to the UK being a science and technology superpower by 2030.

Doing PBA is hard, doing it with confidence harder still, especially when it is new to so many and considering has significant enterprise-level implications. Applying principles rather than rules requires hands-on, brain-on engagement at senior level to determine what good looks like in context for every case. Similarly, assurance evaluation is less straightforward and requires more work to assess. Such a transition is not undertaken lightly, but is seen as essential for the future resilience and security of highly interconnected, dynamically reconfiguring systems that cannot be assured using rigid approaches.

Biography

Stephen is a systems engineer with a vision for a harmonious, interconnected world that understands how to use technology to break down barriers and bridge divides. As a Senior Research Associate at Loughborough University, he focuses on dynamic assurance of quantum systems. In 2025 he completed his PhD in Automotive Cybersecurity, which focused on modelling how enterprises with global impact can work together to deliver complex, high-integrity road vehicle systems that remain secure throughout their lifecycles.

His research demonstrates how rigorous modelling of business and engineering practices can contribute to improving the resilience of complex, software-intensive systems. His work is applicable to many types of high-integrity system that must remain secure throughout their lifecycle. He applies ontology engineering and model-based systems engineering (MBSE) methods to enterprise systems of systems comprising people, processes and technology.

Before academia, Stephen consulted on requirements-led engineering for international businesses. His background in safety-critical embedded software ranges from Formula 1, through automotive Tier 1, to OEM. He also ran a technical translation business for 12 years serving major German organisations.

In his spare time, Stephen volunteers with INCOSE and runs Robot Day (www.robotday.co.uk), a volunteer-led celebration of Science, Technology, Engineering, Arts and Mathematics (STEAM).