When is good enough good enough? On software assurances

Abstract

Digital technologies prove to be challenging to regulate but also, or perhaps due to the fact that they prove to be challenging to provide assurances for. In this paper, we present this two-faceted challenge, going into technical reasons for the difficulty of building reliable software and how technological safeguards can only provide limited guarantees, but also going into the current regulatory frameworks addressing digital technology dependability. We then discuss tools, both technological and regulatory, that are being explored in innovative technology and legislation to support such regulatory protection.