As far as I am aware there will be approved SCRATCOH from CAA (EASA?) which will if introduced be an 'acceptable means of compliance' however units will be able to modify to suit their own needs using the SMS and risk assessments etc. And yes I can see it will be open to abuse by less scrupulous operators.