producing software to manage drug trials in the USA for example have to go through months of work to demonstrate compliance with FDA regulations.

And of course we hear plenty about data protection rules, even if people seem to be having a lot of trouble sticking to them.

Is there any

equivalent to that FDA regulation for the computers that manage the financial systems, and assign value to the various “assets”? It seems like

there should be a case to answer for anyone who is managing the build of such a system and can’t demonstrate that they’ve taken appropriate steps

to make sure the software doesn’t what it’s supposed to.