What are your thoughts on the White Paper as a whole ? What do you think about the concept of trustable software? Are current practices 'good enough' in systems which are increasingly complex and networked and will they be able to meet the challenges of the near future?

The paper suggests two possible approaches to implementation but there may well be more. What are the practical next steps towards the implementation of trustable software processes as standard practice? How do we create reference implementations for a trustable process which provides greater confidence in software in a cost effective manner.

We believe that the main barrier to adopting trustable processes will come from the software industry itself? What will prevent the industry adopting a trustable software process and how might we overcome these barriers? Or is inevitable that a disaster involving software will lead to imposed regulation?