About Supply Assure
Trusted with the supply chains
that keep the UK running.
We’ve been accountable for supply chain risk on some of the UK’s most critical programmes, from Parliament and defence to nuclear, finance and the NHS. Now we manage yours, or help you manage it yourself, in both directions.
Our difference
People, not just platforms.
Third-party risk is a people problem before it’s a technology one.
Tools can score a supplier. It takes experienced practitioners to understand the context, challenge the evidence and turn it into actionable intelligence your leadership can trust and your whole organisation can act on.
Risk score: 72 / 100
EXPERT JUDGEMENT
Why it’s 72, and whether it actually matters to your business.
38 findings, all flagged high
REAL-WORLD PRIORITIES
The three that are genuine threats, and what to fix first.
Security policy uploaded ✓
CULTURE AND PROCESS
Whether anyone at the supplier actually follows it.
Alert raised at 02:14
HUMAN OVERSIGHT
A judgement call on what it means, and what to do next.
Report sent to the security team
PEOPLE ON BOARD
Procurement, legal, finance and the board all acting on it.
Leadership
Brought together by one of the UK’s most complex programmes.
We met on the Houses of Parliament Restoration Programme, where a national landmark depended on a vast supply chain. Between us we led its security, digital assurance and commercial delivery, and saw first-hand how third-party risk is really managed, and how it should be.
Supply Assure is what we built next.
Behind us sits a team of analysts and technical partners who shape how we deliver. So every client gets options that fit their organisation, not a one-size-fits-all fix.
MW
Matt Wilson
MCIOB
CO-FOUNDER · COMMERCIAL AND DELIVERY
Matt is a programme and commercial management specialist with 15 years’ experience managing complex contract portfolios across Critical National Infrastructure programmes and global supply chains. He has advised TfL, Crossrail, the NHS, the Houses of Parliament Restoration Programme and, most recently, Thames Water. A Chartered Member of the CIOB, Matt brings deep post-contract experience auditing and delivering NEC and G-Cloud contracts.
LinkedIn profile
AT
Adrian Taylor
CISSP
CO-FOUNDER · DIGITAL RISK AND ASSURANCE
Adrian is a digital risk and supply chain security specialist with 40 years in IT, 25 of them in cyber security. A trusted adviser to global enterprises and UK Government departments, he has worked with Barclays, UBS, the Ministry of Justice, the Department for Education, LOCOG and the Houses of Parliament Restoration Programme. Adrian is also a former CESG Listed Adviser.
LinkedIn profile
AS
Andy Simpson
CISSP
CO-FOUNDER · SECURITY LEADERSHIP
Andy is a security leader with 25 years’ experience protecting mission-critical assets, beginning with a military career securing defence networks and operations across EMEA. He has safeguarded some of the UK’s most sensitive infrastructure as CISO for the Houses of Parliament Restoration Programme and security lead for Rolls-Royce SMR’s nuclear programme, and now leads security at a scaling AI business. A Chartered Engineer, Andy has also studied AI for Cyber Security at Oxford.
LinkedIn profile
80 years
Combined experience in IT, security and delivery
UK Gov
Trusted by government departments and global enterprises
CNI
Defence, nuclear, government, finance and health
What is third-party risk management?
TPRM is how an organisation identifies, assesses and controls the risks that come from the organisations it works with: suppliers, service providers, contractors and their own sub-contractors. Done well, it also covers the assurance you owe to your customers.
What do you mean by two-way?
Do we need to buy a TPRM platform?
How do you find suppliers we don’t know about?
Should every supplier get the same security requirements?
Your move
Would you trust your supply chain to anyone less?
The team trusted with some of the UK’s most sensitive programmes is ready to look at yours. It starts with a 30-minute health check.
Book a health check
WHAT HAPPENS NEXT
01
30-minute call
Tell us where you’re worried.
02
We review both directions
The suppliers you rely on and the customers who rely on you.
03
You get a roadmap
Prioritised, practical and board-ready.