Document: NRC Regulatory Guide
Document ID: d6326081-f430-476d-8098-4edf00868dd9
Document Type: regulatory_guide
Title: Verification, Validation, Reviews, and Audits for Digital Computer Software Used in Safety Systems of Nuclear Power Plants + HISTORY - HISTORY 08/2012 – DG-1267 , Proposed Revision 2 01/2003 – DG-1123 , Proposed Revision 1 08/1996 – DG-1054 , Proposed Revision 0 (Rev. 2)
Source: NRC Regulatory Guide Division 1
Source URL: https://www.nrc.gov/docs/ML1031/ML103160431.pdf
Revision Date: 2023-06
Chapter: 
Section ID: RG-1.168
CFR Part: 
CFR Title: 

Content:
d relationship lines are excluded. Regardless of the approach selected for a given V&V task, the applicant or licensee has ultimate responsibility for the adequacy of V&V and the quality of subsequent safety system software. This is particularly important when an external organization has performed the V&V tasks (e.g., a licensee acquires a commercial-grade product approved by the NRC staff for implementation in a safety-related system). In these cases, the applicant or licensee is not relieved of the responsibility for ensuring that the V&V and subsequent software quality satisfy the NRC’s requirements for reliability. Thus, the applicant or licensee should verify that the extent of independence between the organization responsible for design and the organization responsible for verification and checking of the design meets the NRC’s requirements in Appendix B. This independence is to be sufficient to ensure that schedule and resource demands placed on the design process do not compromise the V&V process. Criterion II states that the program must provide for indoctrination and training of personnel performing activities affecting quality as necessary to ensure that suitable proficiency is achieved and maintained. The independent verifiers should be at least as proficient, and preferably more proficient in both software engineering and I&C safety system functionality and design to ensure that software V&V is adequately implemented. IEEE Std. 1012-2004 provides guidance for establishing financial, managerial, and technical independence for software V&V. Criterion I of Appendix B requires that persons and organizations performing quality assurance functions report to a management level such that they have authority and organizational freedom, including independence from cost and schedule considerations, sufficient to identify quality problems; initiate, recommend, or provide solutions; and verify implementation of solutions. Specifically, there shall be an