Document: NUREG-0800
Document ID: fea61ff0-f344-4101-adfb-590e3d9dfafe
Document Type: srp
Title: Draft Revision 6 – August 2015
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1515/ML15159A946.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
d be a group which specifically considers the safety issues of the digital system to determine the acceptability of the system. The safety organization should consider the security risk as well as the risk to the plant if the digital system malfunctions. The reviewer should assess whether the proper risks were considered, that the applicant/licensee addressed BTP 7.14-35 Draft Revision 6 - August 2015 these risks in an appropriate manner, and stayed consistent with the software safety strategy. Where possible the reviewer should assess the adequacy of the risk evaluations. The final result of the review is that the reviewer should assure that the various software safety activities will resolve the safety issues. B.3.1.10 Software Verification and Validation Plan (SVVP) A SVVP should plan the implementation of all of the necessary V&V activities. Guidance for the appropriate V&V activities is found in the following sources. RG 1.152, Section C.2, “Secure Development and Operational Environment for the Protection of Digital Safety Systems,” contains guidance for testing the SDODE design features. RG 1.168 endorses IEEE Std 1012, “IEEE Standard for Software Verification and Validation,” as providing methods acceptable to the staff for meeting the regulatory requirements as they apply to V&V of safety system software, subject to the exceptions listed. RG 1.168 also endorses IEEE Std 1028, “IEEE Standard for Software Reviews and Audits,” as providing an approach acceptable to the staff for carrying out software reviews, inspections, walkthroughs and audits, subject to the exceptions listed. RG 1.168, Section C.7.c, “Secure Analysis,” states that the NRC staff considers the assessment of the secure operational environment design features of safety system software to be part of the minimum set of software V&V activities. NUREG/CR-6101, Section 3.1.4, “Software Verification and Validation Plan,” and Section 4.1.4, “Software Verification and Validation