1. Requirements Mapping and Compliance Matrix

Rationale

The rationale for the requirements is contained in this Handbook (NASA Software Engineering Handbook, NASA-HDBK-2203). Programs/Projects may substitute a matrix that documents their compliance with their particular Center's implementation of NPR 7150.2 ⁰³⁹, if applicable. This topic contains a compliance matrix for the requirements organized by class and including a tailoring field for each requirement, tailoring rationale, and approval signature lines.

The Compliance Matrix documents the program/project's compliance or intent to comply with the requirements of NPR 7150.2 ⁰³⁹ or justification for tailoring. The matrix lists:

a. The unique requirement identifier.

b. The section reference.

c. The NPR 7150.2 ⁰³⁹ requirement statement.

d. The Technical Authority Level responsible for assessing a project's compliance matrices, tailoring, waivers, and deviations from requirements in NPR 7150.2.

e. The requirement owner (the organization or individual responsible for the requirement).

f. The applicability of the requirements in NPR 7150.2 to specific systems and subsystems within the Agency's investment areas, programs, and projects is determined through the use of the NASA-wide definition of software classes.

Tailoring Guidance

Use the following guidance, also included in the matrix, to interpret the contents of the compliance matrix included in this topic:

X - Indicates an invoked requirement by this NPR consistent with Software Classification (See SWE-139). May be tailored with Technical Authority approval (NPR 7150.2, Chapter 2.2).

Blank - Optional/Not invoked by NPR 7150.2.

X (not OTS) - Does not apply to Off the Shelf (OTS), Commercial Software.

Center Director - Center Director or the Center Director's designated Engineering Technical Authority or Center Director's designated Safety and Mission Assurance Technical Authority.

Each requirement in this Handbook also includes a graphical representation of its compliance matrix data:

Applicability Across Classes

Key:    - Applicable | - Not Applicable

Notes

The compliance matrix contains references to notes, e.g., “(Note 2)” which are included here for reference.  These notes are also included in the compliance matrix itself.

Note 1 - Project is required to meet this requirement to the extent necessary to satisfy safety critical aspects of the software. All Safety-critical software has to be classified as Class D or Higher (See Topic 7.2).

Note 2 - Applies to Class B software except for Class B software on NASA Class D payloads, as defined in NPR 8705.4 ⁰⁴⁸. For Class B software, in lieu of a CMMI rating by a development organization, the project will conduct an evaluation, performed by a qualified evaluator selected by the Center Engineering Technical Authority, of the seven process areas listed in SWE-032 and mitigate any risk, if deficient. This exception is intended to be used in those cases in which NASA wishes to purchase a product from the "best of class provider," but the best of class provider does not have the required CMMI rating. When this exception is exercised, the Center Engineering Technical Authority should be notified.

Note 3 - For tailoring of NASA-STD-8739.8, the Software Assurance and Software Safety Standard, use the tailoring provided within those documents. They are both risk-based and Software Class based tailoring.

Note 4 - The Technical Authority implementation responsibilities for Class F software is at the NASA Headquarters Chief Information Officer (CIO) level, the Technical Authority implementation responsibilities for Class G and H is at the Center CIO organization level or at the level defined in the Center Technical Authority implementation plan. All Safety-critical software has to be classified as Class D or higher (See Topic 7.2).

The Software Classification Spreadsheet

To download the Software Classification Spreadsheet ⁴⁴³, please click the link below.

Compliance Matrix for Each Class

2. Resources

2.1 References

• (SWEREF-083)
  NPR 7150.2 NASA Software Engineering Requirements,
  NPR 7150.2D, Effective Date: March 08, 2022, Expiration Date: March 08, 2027 https://nodis3.gsfc.nasa.gov/displayDir.cfm?t=NPR&c=7150&s=2D Contains link to full text copy in PDF format. Search for "SWEREF-083" for links to old NPR7150.2 copies.
• (SWEREF-257)
  NASA Engineering and Program/Project Management Policy,
  NPD 7120.4E, NASA Office of the Chief Engineer, Effective Date: June 26, 2017, Expiration Date: June 26, 2022
• (SWEREF-284)
  NPR 7150.2D Compliance Matrices by Class Templates. SWEHB Topic 7.16
  This topic contains spreadsheets for each class of software. For older versions of SWEHB, see SWE-125 and Topic 7.16 in the appropriate version.

2.2 Tools