Implementing combined assurance: insights from multiple case studies · Study