Development and Trustworthiness of autonomous / cognitive Systems - Part 4: Development at System Level