The first step towards this is having useful industry standards for auditing and certification that actually work... then you can think about an insurance market where insurers force certification.