Document: NUREG-0800
Document ID: 4f141c71-35ca-4353-9047-a13efe6d56b7
Document Type: srp
Title: Revision 6 - August 2016
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1601/ML16019A308.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
dures should require monitoring the software safety function performance during operation of the system. The SSP should require that hazards identified by plant safety analysis, system safety analysis and security vulnerability assessment be traceable to the software safety analysis whenever these hazards can affect software operability or whenever software has a role in controlling the hazard. B.3.1.9.3 Resource Characteristics of the SSP The resource characteristics that the SSP should exhibit include methods/tools and standards. Methods/tools refer to a description of the methods and tools used to carry out the safety activities. The SSP should specify a process for selecting tools. It should describe a method for preventing the inadvertent introduction of hazards by the use of project tools. Standards involve a list of the international, national, industry and company standards and guidelines to be followed by the safety organization. B.3.1.9.4 Review Guidance for the SSP It is important for the reviewer to evaluate the completeness of the SSP and the approaches for how the applicant/licensee will handle the various issues. It is also likely, as mentioned above, that there may not be a separate safety plan; the concepts of software safety may be included in the SMP or some other plan. As long as the concepts mentioned above are addressed, this is acceptable. There should be a group which specifically considers the safety issues of the digital BTP 7.14-37 Revision 6 - August 2016 system to determine the acceptability of the system. The safety organization should consider the security risk as well as the risk to the plant if the digital system malfunctions. The reviewer should assess whether the proper risks were considered, that the applicant/licensee addressed these risks in an appropriate manner, and stayed consistent with the software safety strategy. Where possible the reviewer should assess the adequacy of the risk evaluations. The final result of the review