Computing systems.
CFR · 2024-01-01 · US · Title 14
(a) (1) Any software or data that implements a capability that, by intended operation, unintended operation, or non-operation, can present a hazard to the public; and (2) The level of criticality of each computing system safety item identified in paragraph (a)(1) of this section, commensurate with its degree of control over hazards to the public and the severity of those hazards. (b) (1) Identify and evaluate safety requirements for each computing system safety item; (2) Ensure the safety requirements are complete and correct; (3) Implement each safety requirement; and (4) Verify and validate the implementation of each safety requirement by using a method appropriate for the level of criticality of the computing system safety item. For each computing system safety item that is safety critical under § 401.7, verification and validation must include testing by a test team independent of the development division or organization. (c) (1) Responsibilities for each task associated with a computing system safety item; (2) Processes for internal review and approval—including review that evaluates the implementation of all safety requirements—such that no person approves that person's own work; (3) Processes to ensure development personnel are trained, qualified, and capable of performing their role; (4) Processes that trace requirements to verification and validation evidence; (5) Processes for configuration management that specify the content of each released version of a computing
official document · source cfr-2024 · id 14:§ 450.141