Document: NUREG-0800
Document ID: fea61ff0-f344-4101-adfb-590e3d9dfafe
Document Type: srp
Title: Draft Revision 6 – August 2015
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1515/ML15159A946.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
logies examined during the thread audit are those which the software developer committed to using, and if they are being used correctly. The thread audit is one of the few times where the reviewer can examine the actual development process rather than the documented plans for a development process. B.3.2.3 Acceptance Criteria for Software Configuration Management Activities RG 1.169, “Configuration Management Plans for Digital Computer Software Used in Safety Systems of Nuclear Power Plants,” endorses IEEE Std 828, “IEEE Standard for Software Configuration Management Plans,” subject to specific provisions identified in the RG, as providing guidance that is acceptable for carrying out software configuration management. Software configuration management can be partitioned into two types of activities: the management and control of the software and the associated development environment; document control. There are many configuration management tools available for software. A particular tool should be selected, evaluated, and used properly for software configuration control. The SDP describes the software and documents that will be created and placed under configuration control. If the software and documents are controlled in different systems, then each should be described, as well as their relationship to each other. The SCMP describes the implementation tasks that are to be carried out. The acceptance criterion for software CM implementation is that the tasks in the SCMP have been carried out in their entirety. Documentation should exist that shows that the configuration management tasks for that activity group have been successfully accomplished. In particular, the documentation should show that configuration items have been appropriately identified; that configuration baselines have been established for the activity group; that an adequate change control process has been used for changes to the product baseline; and that appropriate configuration audits