Document: NUREG-0800
Document ID: 4cca74ec-66e0-4765-9c61-cf547e17c308
Document Type: srp
Title: of the plant safety analysis report (SAR).  Although the NRC did not endorse the annexes of
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1601/ML16019A114.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7.6
CFR Part: 
CFR Title: 

Content:
tation tasks that are to be carried out by the applicant or licensee. The acceptance criterion for software safety analysis implementation is that the tasks in that plan have been carried out in their entirety. Appendix 7.1-D-16 Revision 1 - August 2016 Documentation should exist that shows that the safety analysis activities have been successfully accomplished for each life-cycle activity group. In particular, the documentation should show that the system safety requirements have been adequately addressed for each activity group; that no new hazards have been introduced; that the software requirements, design elements, and code elements that can affect safety have been identified; and that all other software requirements, design, and code elements will not adversely affect safety. SRP BTP 7-14, Subsection B.3.1.9 has additional details on the management, implementation and resource characteristics of the software safety plan. Another item for risk management is the security considerations in the life-cycle processes of digital computer-based systems. Guidance for the treatment of SDOE in the life-cycle process is provided in RG 1.152. The reviewer, when analyzing the risk management program, should keep in mind that licensee acceptance of risk is not necessarily sufficient or acceptable. As an example, if the licensee decides to use highly complex software in lieu of a simpler system, the licensee should demonstrate that the complexity is acceptable. The reviewer should look for alternative solutions, an analysis of those alternatives, and a reason why the complexity offered sufficient advantages to outweigh the disadvantages. The risk management program is intended to manage risk, not only to state that risk is acceptable. 5.4 Equipment Qualification (IEEE Std 7-4.3.2, Clause 5.4) Guidance on determining the environmental qualification procedures for safety-related computer-based I&C systems is provided by RG 1.209, “Guidelines for Environmental Qualification of