Look at the outcomes. If the protocol has been implemented before, what were the results? Were defects identified efficiently? Was the software product compliant with quality requirements?