Document: NUREG-0800
Document ID: 4f141c71-35ca-4353-9047-a13efe6d56b7
Document Type: srp
Title: Revision 6 - August 2016
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1601/ML16019A308.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
risks in an appropriate manner, and stayed consistent with the software safety strategy. Where possible the reviewer should assess the adequacy of the risk evaluations. The final result of the review is that the reviewer should assure that the various software safety activities will resolve the safety issues. B.3.1.10 Software Verification and Validation Plan (SVVP) A SVVP should plan the implementation of all of the necessary V&V activities. Guidance for the appropriate V&V activities is found in the following sources. RG 1.152, Section C.2, “Secure Development and Operational Environment for the Protection of Digital Safety Systems,” contains guidance for testing the SDODE design features. RG 1.168 endorses IEEE Std 1012, “IEEE Standard for Software Verification and Validation,” as providing methods acceptable to the staff for meeting the regulatory requirements as they apply to V&V of safety system software, subject to the exceptions listed. RG 1.168 also endorses IEEE Std 1028, “IEEE Standard for Software Reviews and Audits,” as providing an approach acceptable to the staff for carrying out software reviews, inspections, walkthroughs and audits, subject to the exceptions listed. RG 1.168, Section C.7.c, “Secure Analysis,” states that the NRC staff considers the assessment of the secure operational environment design features of safety system software to be part of the minimum set of software V&V activities. NUREG/CR-6101, Section 3.1.4, “Software Verification and Validation Plan,” and Section 4.1.4, “Software Verification and Validation Plan,” contain guidance on SVVPs. The SVVP should exhibit the management, implementation and resource characteristics listed below. B.3.1.10.1 Management Characteristics of the SVVP The management characteristics that the SVVP should exhibit include purpose, organization, oversight, responsibilities, and risks. Purpose refers to a definition of the purpose and scope of the software V&V activities. The