What are the practical next steps towards the implementation of trustable software processes as standard practice?