Document: NRC Regulatory Guide
Document ID: 3eb179d3-5491-407d-8b0e-eed083d58a17
Document Type: regulatory_guide
Title: Configuration Management Plans for Digital Computer Software Used in Safety Systems of Nuclear Power Plants + HISTORY - HISTORY 08/2012 – DG-1206 , Proposed Revision 1 08/1996 – DG-1055 , Proposed Revision 0 (Rev. 1)
Source: NRC Regulatory Guide Division 1
Source URL: https://www.nrc.gov/docs/ML1032/ML103200044.pdf
Revision Date: 2023-06
Chapter: 
Section ID: RG-1.169
CFR Part: 
CFR Title: 

Content:
ware components essential to safety; e. software plans that could affect quality; f. test software requirements, designs, or code used in testing; g. test results used to qualify software; h. analyses and results used to qualify software; i. software documentation; j. databases and software configuration data; k. commercial software items that are safety system software; and l. software change documentation. Items that could change because of design changes, review, or audit should be configuration items subject to formal change control. Other items, such as compilers, that may not change but are necessary to ensure correct software production should also be configuration items, thereby ensuring that all factors contributing to the executable software are controlled. This also is useful in areas such as maintenance, future software development, and tracing the impact of reported errors, faults, and the performance of appropriate regression analysis to support the acceptance of future changes to the software. Items that are retained for historical or statistical purposes may be controlled documents. 7. Control of Purchased Materials The SCM program that complies with IEEE Std. 828-2005, as endorsed by this regulatory guide, should take control of contractually developed or qualified commercial software products that are safety system software. This meets the requirements of Criteria VII and VIII with regard to safety system software. This means, for example, that the exact version and build number of the product should be identified and controlled according to the change control procedures applied to other configuration items, and the product’s usage should be tracked and reported. Additional guidance applies to the use of commercial grade software in safety related digital systems. Although not specifically endorsed by any particular regulatory guide the NRC staff has determined that Electric Power Research Institute (EPRI) Topical Report (TR)-106439, “Guideline