2.5.6 The project shall define the milestones at which the software supplier(s) progress will be reviewed and audited as a part of the acquisition activities.
Known contract milestones are expected to be included in the resulting contract.
NPR 7150.2A does not include any notes for this requirement.
This requirement applies to all classes and safety criticalities except:
- Class E and not Safety Critical
- Class H
Class D not Safety Critical, and Class G are labeled with "P(Center)". This means that an approved Center-defined process that meets a non-empty subset of the full requirement can be used to achieve this requirement.
Class F is labeled as "X(not OTS)" which means that the project is required to meet this requirement for all software that is not considered off-the-shelf.
For any software project, it is critical for management to review progress early and periodically to ensure the project remains on schedule, is progressing toward implementation of the requirements, and ultimately is addressing the customer's needs. It is also important for management to confirm periodically that the technical goals of the project are being achieved and that the technical direction of the project is appropriate (NASA Systems Engineering Processes and Requirements, NPR 7123.1). Milestone reviews provide this type of management visibility into a project.
For software development that is acquired (supplied by a contractor), having regular progress reviews is even more important since these reviews are the keys to ensuring the contractor understood and will provide the product that NASA requested and that meets NASA's requirements for safety, quality, reliability, etc.
Milestone reviews can also serve to facilitate and ensure coordination between multiple development groups including development groups at multiple NASA centers and contractors.
For acquired software development, milestone reviews should be incorporated into the contract because the contract is the binding document for contractor performance and deliverables. The contract should contain, among other key elements, surveillance activities including monitoring activities, reviews, audits, decision points, meetings, etc.
Other items related to milestone reviews that should be included in the contract are:
- Review periods for deliverables
- Time period for making corrections to resolve findings
- Formal reviews, such as those found in NPR 7123.1A, NPR 7120.5D, NPR 7120.7 (IT and Institutional Infrastructure) and NPR 7120.8 (Research and Technology)
- Technical reviews
- Progress reviews
- Acceptance reviews
The following center guidance may provide insights into reviews and review topics that should be considered for inclusion in the SOW and contract:
- Process Monitoring and Control (PMC)
See the ?[7.7 - Acquisition Guidance] topic in this handbook for additional guidance on this topic. The references in this topic may also provide additional guidance on project milestone reviews and topics for consideration.
Keep in mind that reviews not included in the contract, may be difficult to require of the contractor, so it is important to ensure the Statement of Work (SOW) and other contract elements are reviewed by the proper project management and/or technical authority for completeness.
For projects designated "small" by center criteria or designate as a high risk via NASA payload risk classifications (NPR 8705.?), it may be possible to reduce the number of reviews to meet time and cost constraints. Keep in mind, however, that milestone reviews should not be eliminated, as these reviews are critical checkpoints in the lifecycle of the project. Projects covered by NPR 7120 and NPR 7123.1A are required to follow specific project milestone reviews with software components. Small projects should determine the set of reviews that provide the greatest insights into progress toward the project's technical goals and the technical direction of the project.
- NASA Systems Engineering Processes and Requirements w/Change 1, NPR 7123.1
- NASA Space Flight Program and Project Management Requirements, NPR 7120.5
- ?[7.7 - Acquisition Guidance]
- ?[7150:Entrance and Exit Criteria]
- Project Monitoring & Control (PMC), Goddard Space Flight Center (GSFC) Process Asset Library (PAL), http://software.gsfc.nasa.gov/AssetsApproved/PA1.4.doc5.1
There are currently no tools identified for this requirement.
Tailorable acquisition management and oversight processes for NASA contracted software development are essential to ensure that customers receive a quality product. A documented lesson from the NASA Lessons Learned database (http://www.nasa.gov/offices/oce/llis/0921.html) includes as a cause of the loss of a mission "the lack of a controlled and effective process for acquisition of contractor-developed, mission critical software." In this particular case, the quality of the contractor's product was not monitored as it would have been if the proper milestones for reviewing and auditing contractor progress were in place.