I'm talking about regulation and those failures don't seem to be regulatory failures. I guess you could try to regulate to stop having data beaches but I think

I'm talking about regulation and those failures don't seem to be regulatory failures. I guess you could try to regulate to stop having data beaches but I think it would be too broad and largely ineffective anyway but in the case you regulated essentially every web app then a license might be more efficient than actually testing everything. I was thinking more along the lines of things that could cause physical harm (e.g. medical devices) where it makes a bunch more sense to test the device than test the engineers