The BS7988 standard is now formally published, and is broadly in line with the provisional specification presented by John Kleeman, David Keech and Stephen Wright to this conference last year. Compliance with the standard requires quality assurance across a wide range of areas - hardware, software, network, data storage and human issues are all covered. It requires consideration of security, reliability and accessibility. In this session we will work collectively to build a provisional framework for a QA system to cover those areas of the Standard that fall within the remit of conference delegates, principally those relating to software development. The output of the session will be a draft of a quality audit that can be published as part of the conference proceedings. While clearly this will be very much a first-stage document, we hope that it will provide pointers for further work in this area.