1.2.5 To support compliance with NASA policy and facilitate the application of resources to mitigate risk, the NASA Headquarters' Chief Engineer, in coordination with the Chief, Safety and Mission Assurance, shall maintain a reliable list of the Agency's programs and projects containing software.
NPR 7150.2, NASA Software Engineering Requirements, does not include any notes for this requirement.
1.2 Applicability Across Classes
NASA develops and maintains an inventory of software across the Agency to facilitate strategic decisions based on actual data. The NASA Office of the Chief Engineer (OCE) (in coordination with the Chief of the Safety and Mission Assurance (S&MA) Office) and the Software Steering Board are overseeing the update of the Software Inventory of projects based on the classification of software. The Centers provide updates with supporting data directly into the Software Inventory Management System (SIMS), the Agency's software inventory database. The rationale and uses of this Software Inventory include:
In coordination with this process, each Center's Office of Safety and Mission Assurance (OSMA) organization is requested to provide safety critical software and software assurance information. Once the Center inputs are complete, the OCE may augment the Center lists with inputs from Mission Directorates, Support Offices, and Centers as appropriate. The inventory data for a specific Center also supports Center planning for project support and review activities.
The guidance for this requirement applies to software Classes A though E (see SWE-020). Inventory information for software Classes F through H are captured separately and maintained by the NASA Chief Information Officer.
There is a minimal set of data collected for Class D and Class E software. Since projects containing exclusively Classes F, G, and H software are inventoried separately under the direction of the Chief Information Officer, they are not required to report under the OCE request.
The OCE requires that a "Designated Point of Contact" (DPC) be named at each Center for the inventory activities. The DPC (or a designee) will be responsible for accessing the Software Inventory Management System (SIMS) and entering the Center's updated data into the system, or in the case of a new project, creating a new entry in the SIMS tool. The Center S&MA personnel will also have access to SIMS to enable the updating of the S&MA information for their Center's projects. All data must be reviewed and prioritized at the Center (based on the criticality and risk inherent in the project) by the appropriate Center personnel. The review must include participation by the representatives of the local S&MA office.
- Project information.
- Software title(s).
- Whether the software in development is safety critical.
- The size in KSLOC (Thousand Software Lines of Code)s
- Whether it is using the NASA IV&V facility services.
- The current software classification.
- Dates of major milestone reviews.
- The percentage of new or reused code.
- The software quality assurance effort on the project.
- Indications of primary and secondary languages being used.
- Contact information.
- Other identifying data.
The instructions counsel the DPC (designated point of contact) to include facility software as part of the Center's data inputs.
One particular instruction of note states that if a project contains software of multiple classes, the data requirements are to be based on the highest class.
4. Small Projects
All software developed, acquired or being maintained by NASA is included in the inventory. Size of the project is not used as a discriminator for inclusion of project data in the inventory.
6. Lessons Learned