1. Requirements

1.2.5 To support compliance with NASA policy and facilitate the application of resources to mitigate risk, the NASA Headquarters' Chief Engineer, in coordination with the Chief, Safety and Mission Assurance, shall maintain a reliable list of the Agency's programs and projects containing software.

1.1 Notes

NPR 7150.2, NASA Software Engineering Requirements, does not include any notes for this requirement.

1.2 Applicability Across Classes

2. Rationale

NASA develops and maintains an inventory of software across the Agency to facilitate strategic decisions based on actual data. The NASA Office of the Chief Engineer (OCE) (in coordination with the Chief of the Safety and Mission Assurance (S&MA) Office) and the Software Steering Board are overseeing the update of the Software Inventory of projects based on the classification of software.  The Centers provide updates with supporting data directly into the Software Inventory Management System (SIMS), the Agency's software inventory database. The rationale and uses of this Software Inventory include:

1. The Software Inventory directly supports the NASA Chief S&MA Officer and the Independent Verification and Validation (IV&V) Board of Directors (IBD) in the selection of projects to receive Agency-funded IV&V services each year.
2. The Software Inventory supports Engineering and S&MA Technical Authorities' duties by cataloging the classification of software on projects and whether it is safety critical.
3. The Software Inventory supports the OCE in helping to determine whether Centers' software engineering capabilities are commensurate with their responsibilities.
4. The Software Inventory provides an accurate profile of critical software (Class A, B, and C and Class D and E safety critical) across the Agency to facilitate strategic decisions based on real data.
5. The Software Inventory supports Mission Directorate offices in supplementing the Master Agency Project List's Metadata Manager (MDM) system with information on critical software.
6. Center S&MA personnel utilize the Software Inventory to help identify projects and assure they are covered and have been assessed for safety critical software and software assurance. 
7. The Software Inventory provides NASA personnel with current data for decision-making.
8. The Software Inventory supports the OCE and Office of S&MA during the planning phase of Center surveys and IPS (Institutional Programmatic Support) audits.

In coordination with this process, each Center's Office of Safety and Mission Assurance (OSMA) organization is requested to provide safety critical software and software assurance information.  Once the Center inputs are complete, the OCE may augment the Center lists with inputs from Mission Directorates, Support Offices, and Centers as appropriate.  The inventory data for a specific Center also supports Center planning for project support and review activities.

3. Guidance

Periodically the OCE (Office of the Chief Engineer) issues a request to the Centers with instructions

There is a minimal set of data collected for Class D and Class E software. Since projects containing exclusively Classes F, G, and H software are inventoried separately under the direction of the Chief Information Officer, they are not required to report under the OCE request.

The OCE software inventory is officially maintained in SIMS.

The OCE requires that a "Designated Point of Contact" (DPC) be named at each Center for the inventory activities. The DPC (or a designee) will be responsible for accessing the Software Inventory Management System (SIMS) and entering the Center's updated data into the system, or in the case of a new project, creating a new entry in the SIMS tool. The Center S&MA personnel will also have access to SIMS to enable the updating of the S&MA information for their Center's projects. All data must be reviewed and prioritized at the Center (based on the criticality and risk inherent in the project) by the appropriate Center personnel. The review must include participation by the representatives of the local S&MA office.

Detailed instructions

• Project information.
• Software title(s).
• Whether the software in development is safety critical.
• The size in KSLOC (Thousand Software Lines of Code)s
• Whether it is using the NASA IV&V facility services.
• The current software classification.
• Dates of major milestone reviews.
• The percentage of new or reused code.
• The software quality assurance effort on the project.
• Indications of primary and secondary languages being used.
• Contact information.
• Other identifying data.

The instructions counsel the DPC (designated point of contact) to include facility software as part of the Center's data inputs.

In addition to the OCE review of the Center's submission, the OCE may review the Center software inventory at its periodic software surveys at the Center. See the reference to the OCE survey worksheet

4. Small Projects

All software developed, acquired or being maintained by NASA is included in the inventory. Size of the project is not used as a discriminator for inclusion of project data in the inventory.

5. Resources

6. Lessons Learned

 
As part of its 2003 audit report on IV&V software, the Inspector General (IG) included this recommendation: "The NASA Chief Engineer, in coordination with the Associate Administrator for Safety and Mission Assurance, should establish a process that provides the NASA IV&V Facility, on a recurring basis, a complete and accurate list of the Agency's programs and projects governed by either NASA Procedures and Guidelines 7120.5A or NASA Technical Standard 8719.13A."