My point is it is a bit ridiculous to regulate re-use via a standardization and regulatory scheme. It will simply not work because the area specified is very generic ("Software Development") and technology oriented ( no "Freeware" ...WTF do they mean by freeware ? ) .  Its like saying we must have standards and regulations on the "manufacturing process" ... I am sure KEBS themselves have different evaluative standards on *end products* and very specific standards on certain specific *processes*. Clearly a gum-boot is different from a office shoe -- even though both are shoes -- so you need different standards to evaluate quality.

Ideally standardization should be on the end product  - e.g. minimal standards for a company offering BPO / offshoring services -- i.e. does the provider meet internationally recognized data security standards ? what are these minimum standards  ? etc...

People will always pirate / copy / steal / counterfiet / plagiarize / break the law while driving .. there are laws already in place for these crimes ... why do you want stricter laws and regulatory mechanisms when the existing scheme isnt being implemented properly ? do you really think it will work ?