Document: NRC Regulatory Guide
Document ID: d6326081-f430-476d-8098-4edf00868dd9
Document Type: regulatory_guide
Title: Verification, Validation, Reviews, and Audits for Digital Computer Software Used in Safety Systems of Nuclear Power Plants + HISTORY - HISTORY 08/2012 – DG-1267 , Proposed Revision 2 01/2003 – DG-1123 , Proposed Revision 1 08/1996 – DG-1054 , Proposed Revision 0 (Rev. 2)
Source: NRC Regulatory Guide Division 1
Source URL: https://www.nrc.gov/docs/ML1031/ML103160431.pdf
Revision Date: 2023-06
Chapter: 
Section ID: RG-1.168
CFR Part: 
CFR Title: 

Content:
tly performed. Criterion III requires design control measures for verifying or checking the adequacy of design. Safety system software V&V organizations may employ audits, including functional audits, in-process audits, and physical audits of software. Although these audits are DG-1267, Page 9 commonly considered to be the responsibility of the software quality assurance organization and the configuration management organization, they should be performed and relied on by the V&V organization. If so, the audits should be described in the SVVP. IEEE Std. 1028-2008 describes an acceptable method of conducting these audits. b. Regression Analysis and Testing Criterion III requires that design changes be subject to design control measures commensurate with those applied to the original design. Regression analysis and testing following the implementation of software modifications is an element of the V&V of software changes and should be part of the minimum set of software V&V activities for safety system software. c. Secure Analysis IEEE Std. 1012-2004 lists “security analysis” as a V&V task and part of the life-cycle V&V activities. Clause 7.7.4 provides guidance on control procedures applied to the V&V effort to protect software products and V&V results from unauthorized alterations. These V&V tasks should be designed to test the secure operational environment design features of the safety system software. The security related V&V tasks should not only verify and validate the SDOE feature criteria and functions, but also assure protection from inadvertent manipulation of the test environment and test results. The security analysis V&V tasks activities may be addressed in a separate document or as part of one or more of the other documents. Measures taken to secure the test environment and processes should address the V&V test phase vulnerabilities identified in the vulnerability assessment. The NRC staff may review and audit any of the documentation and/or V&V