Document: NUREG-0800
Document ID: 988a555f-fdfa-4452-829d-c06654bfbba5
Document Type: srp
Title: Initial Plant Test Program - Design Certification and New License Applicants
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML0706/ML070660618.pdf
Revision Date: 2023-06
Chapter: 14
Section ID: 14.2
CFR Part: 
CFR Title: 

Content:
nd independence requirements of the protection system. In addition, the ITAAC should verify that interconnection of the protection and control systems was sufficiently limited to ensure that safety is not significantly impaired. 3Refer to RG 1.206, Section C.I.7, Appendix 7C for additional discussion on conformance with IEEE Standard 7-4.3.2. 14.3-44 March 2007 • GDC 25, as it pertains to protection system requirements for reactivity control malfunctions. The ITAAC should verify that the protection system was designed to ensure that specified acceptable fuel design limits are not exceeded for any single malfunction of the reactivity control systems, such as accidental withdrawal of control rods. • GDC 29, as it pertains to protection against anticipated operational occurrences. The ITAAC should verify that the protection and reactivity control systems were designed to ensure an extremely high probability of accomplishing their safety functions in the event of anticipated operational occurrences. C. Documentation of a High-Quality Software Design Process • The ITAAC should address the following planning documentation, with a requirement to demonstrate each of the management, implementation, and resource characteristics shown in BTP 7-143: - Software management plan. The ITAAC should (1) verify that the software management plan addresses each of the management, implementation, and resource characteristics shown in BTP 7-14, and (2) specifically evaluate how the quality of the vendor effort should be assessed and found to be acceptable. - Software development plan. The ITAAC should verify that the software development plan addresses each of the management, implementation, and resource characteristics shown in BTP 7-14. In addition, the ITAAC should specifically verify that the plan clearly states (1) which tasks are part of each life cycle; (2) what the inputs and outputs of that life cycle should be; and (3) how the review, verification, and validation of those