Document: NUREG-0800
Document ID: fea61ff0-f344-4101-adfb-590e3d9dfafe
Document Type: srp
Title: Draft Revision 6 – August 2015
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1515/ML15159A946.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
he control of software. The SSP should require that appropriate safety requirements be included in the software requirements specification. It should define the safety-related activities to be carried out for each set of life cycle activities, from requirements through operation and maintenance. The SSP should identify all documentation required for the proper and safe operation of the software. Procedures should require monitoring the software safety function performance during operation of the system. The SSP should require that hazards identified by plant safety analysis, system safety analysis and security vulnerability assessment be traceable to the software safety analysis whenever these hazards can affect software operability or whenever software has a role in controlling the hazard. B.3.1.9.3 Resource Characteristics of the SSP The resource characteristics that the SSP should exhibit include methods/tools and standards. Methods/tools refer to a description of the methods and tools used to carry out the safety activities. The SSP should specify a process for selecting tools. It should describe a method for preventing the inadvertent introduction of hazards by the use of project tools. Standards involve a list of the international, national, industry and company standards and guidelines to be followed by the safety organization. B.3.1.9.4 Review Guidance for the SSP It is important for the reviewer to evaluate the completeness of the SSP and the approaches for how the applicant/licensee will handle the various issues. It is also likely, as mentioned above, that there may not be a separate safety plan; the concepts of software safety may be included in the SMP or some other plan. As long as the concepts mentioned above are addressed, this is acceptable. There should be a group which specifically considers the safety issues of the digital system to determine the acceptability of the system. The safety organization should consider the security risk as well as the