prEN 9115-002

Aerospace series - Requirements for Aviation, Space, and Defence Organizations - Non-Deliverable Software

1.1 General
This document defines the requirements for the effective control of non-deliverable software. This document can be used during the development, test, production, release, use, maintenance, and retirement of non-deliverable software. This can include non-deliverable software procured from outside manufacturers and incorporated in the production, evaluation, test, acceptance, or calibration of a deliverable product. When an organization outsources one or more of the processes involved in the creation of non-deliverable software, this document applies.
This document focuses solely on the unique requirements of the operational processes that pertain to non-deliverable software as defined by section 1.2. Operational processes not covered in this document are addressed by the organization’s Quality Management System (QMS), based on EN 9100 and/or ISO 9001.
1.2 Application
This document applies to non-deliverable software (including firmware) that directly affects the quality of a deliverable product or service. Following are several applications and supporting examples of non-deliverable software that is within scope of this document:
-   Design and Development: modelling, simulation, virtual reality, virtual machine, data science, Computer-Aided Design (CAD), Three-Dimensional (3D) modelling, analysis tools, software compiler, and code generators.
-   Manufacture: additive manufacturing data files, Computer Numerical Controlled (CNC) programs, robotics, factory automation, tools that load deliverable software, special process (e.g., heat treat, shot peen, sonic wall inspection), and automated manufacturing software (i.e., pick and place).
-   Verification and Validation: Coordinate Measuring Machine (CMM) programs, hardware or software qualification, code coverage, test scripts, analysis tools, acceptance test, production acceptance, calibration (inspection, test or calibration), simulator, and emulator.
Non-deliverable software is not delivered to the customer under a contract or agreement.
The following types of software are not within scope of this standard:
-   deliverable software (refer to EN 9115);
-   embedded manufacturing and test equipment software (e.g., operating system);
-   business systems or office software; and
-   information systems software for business applications.

Qualitätsmanagementsysteme - Anforderungen an Organisationen der Luftfahrt, Raumfahrt und Verteidigung - Nicht Mitgelieferte Software

Systèmes de management de la qualité - Exigences pour les organismes de l'aéronautique, l'espace et la défense - Logiciels non livrables

1.1 Généralités
Le présent document définit les exigences pour un contrôle efficace des logiciels non livrables. Ce
document peut être utilisé au cours des phases de développement, d'essai, de production, de
publication, d'utilisation, de maintenance et de retrait des logiciels non livrables. Il peut s'agir des
logiciels non livrables achetés auprès de fabricants extérieurs et intégrés à la phase de production,
d'évaluation, d'essai, d'acceptation ou d'étalonnage d'un produit livrable. Lorsqu'un organisme
externalise un ou plusieurs procédés impliqués dans la création d'un logiciel non livrable, le présent
document s'applique.
Le présent document décrit seulement les exigences uniques des processus opérationnels qui
concernent les logiciels non livrables tels que définis au paragraphe 1.2. Les processus opérationnels
non couverts dans le présent document sont adressés par le système de management de la
qualité (SMQ) de l'organisme conformément à l'EN 9100 et/ou à l’ISO 9001.
1.2 Application
Le présent document s'applique aux logiciels non livrables (y compris les microprogrammes) qui ont un
impact direct sur la qualité d'un produit ou d'un service livrable. Voici plusieurs applications et
exemples associés de logiciels non livrables qui relèvent du domaine d'application du présent
document :
• Conception et développement : modélisation, simulation, réalité virtuelle, machine virtuelle, science
des données, conception assistée par ordinateur (CAO), modélisation tridimensionnelle (3D), outils
d'analyse, compilateur de logiciel et générateurs de code ;
• Fabrication : fichiers de données de fabrication additive, programmes à commande
numérique (CNC), robotique, automatisation d'usine, outils de chargement des logiciels livrables,
procédés spéciaux (par exemple : traitement thermique, grenaillage, inspection sonique des parois)
et logiciels de fabrication automatisée (c'est-à-dire bras-transfert) ;
• Vérification et validation : programmes de machine à mesurer tridimensionnelle (MMT),
qualification de matériel ou de logiciel, couverture de code, scripts de test, outils d'analyse, essai
d'acceptation, acceptation de la production, étalonnage (contrôle, essai ou étalonnage), simulateur
et émulateur.
Les logiciels non livrables ne sont pas livrés au client dans le cadre d'un contrat ni d'un accord.
Les types de logiciels suivants ne relèvent pas du domaine d'application de la présente norme :
• logiciels livrables (voir l'EN 9115) ;
• logiciels intégrés de fabrication et d'équipement d'essai (par exemple : système d'exploitation) ;
• systèmes d’entreprise ou logiciels de bureautique ; et
• logiciels de systèmes d'information pour applications professionnelles.

Aeronavtika - Zahteve za letalske, vesoljske in obrambne organizacije - Nedobavljiva programska oprema

General Information

• Status: Not Published
• Publication Date: 04-Jun-2024
• ICS: 03.100.70 - Management systems
• ICS: 03.120.10 - Quality management and quality assurance
• ICS: 35.080 - Software
• ICS: 49.020 - Aircraft and space vehicles in general
• Technical Committee: ASD-STAN - Aerospace
• Drafting Committee: ASD-STAN/D 6/S 1 - EAQG European Aerospace Quality Group
• Current Stage: 4060 - Closure of enquiry - Enquiry
• Start Date: 01-Sep-2022
• Completion Date: 01-Sep-2022
• Ref Project: oSIST prEN 9115-002:2022 - Aerospace series - Requirements for Aviation, Space, and Defence Organizations - Non-Deliverable Software

Standards Content (Sample)

SLOVENSKI STANDARD
oSIST prEN 9115-002:2022
01-september-2022
Aeronavtika - Zahteve za letalske, vesoljske in obrambne organizacije -
Nedobavljiva programska oprema

Aerospace series - Requirements for Aviation, Space, and Defence Organizations - Non-

Deliverable Software
Qualitätsmanagementsysteme - Anforderungen an Organisationen der Luftfahrt,
Raumfahrt und Verteidigung - Nicht Mitgelieferte Software
Systèmes de management de la Qualité - Exigences pour les Organisations de
l'Aéronautique, l'Espace et la Défense - Logiciel non livrable
Ta slovenski standard je istoveten z: prEN 9115-002
ICS:
35.080 Programska oprema Software
49.020 Letala in vesoljska vozila na Aircraft and space vehicles in
splošno general
oSIST prEN 9115-002:2022 en,fr,de

2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
oSIST prEN 9115-002:2022
---------------------- Page: 2 ----------------------
oSIST prEN 9115-002:2022
DRAFT
EUROPEAN STANDARD
prEN 9115-002
NORME EUROPÉENNE
EUROPÄISCHE NORM
June 2022
ICS
English Version
Aerospace series - Requirements for Aviation, Space, and
Defence Organizations - Non-Deliverable Software

Systèmes de management de la Qualité - Exigences Qualitätsmanagementsysteme - Anforderungen an

pour les Organisations de l'Aéronautique, l'Espace et la Organisationen der Luftfahrt, Raumfahrt und

Défense - Logiciel non livrable Verteidigung - Nicht Mitgelieferte Software

This draft European Standard is submitted to CEN members for enquiry. It has been drawn up by the Technical Committee ASD-

STAN.

If this draft becomes a European Standard, CEN members are bound to comply with the CEN/CENELEC Internal Regulations

which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.

This draft European Standard was established by CEN in three official versions (English, French, German). A version in any other

language made by translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC

Management Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,

Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,

Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and

United Kingdom.

Recipients of this draft are invited to submit, with their comments, notification of any relevant patent rights of which they are

aware and to provide supporting documentation.

Warning : This document is not a European Standard. It is distributed for review and comments. It is subject to change without

notice and shall not be referred to as a European Standard.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION
EUROPÄISCHES KOMITEE FÜR NORMUNG
CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels

© 2022 CEN All rights of exploitation in any form and by any means reserved Ref. No. prEN 9115-002:2022 E

worldwide for CEN national Members.
---------------------- Page: 3 ----------------------
oSIST prEN 9115-002:2022
prEN 9115-002:2022 (E)
Contents Page

European foreword ...................................................................................................................................................... 3

Introduction .................................................................................................................................................................... 4

1 Scope .................................................................................................................................................................... 5

1.1 General................................................................................................................................................................ 5

1.2 Application ........................................................................................................................................................ 5

2 Normative references .................................................................................................................................... 5

3 Terms and definitions ................................................................................................................................... 6

4 Design and development of non-deliverable software ..................................................................... 6

4.1 Design and development planning ........................................................................................................... 6

4.2 Design and development inputs ................................................................................................................ 7

4.3 Verification ........................................................................................................................................................ 8

4.4 Validation .......................................................................................................................................................... 8

4.5 Release, review and approval .................................................................................................................... 8

4.6 Design and development outputs ............................................................................................................. 8

4.7 Configuration management ........................................................................................................................ 8

4.7.1 Identification and traceability ................................................................................................................... 8

4.7.2 Control of changes .......................................................................................................................................... 9

4.8 Information assurance and cybersecurity ............................................................................................. 9

5 Purchased software ....................................................................................................................................... 9

5.1 Overview ............................................................................................................................................................ 9

5.2 Software selection .......................................................................................................................................... 9

5.3 Purchasing information ................................................................................................................................ 9

5.4 Acceptance and maintenance ................................................................................................................... 10

6 Release and utilization of non-deliverable software ....................................................................... 10

6.1 Controls and utilization .............................................................................................................................. 10

6.1.1 General.............................................................................................................................................................. 10

6.1.2 Release and distribution ............................................................................................................................ 10

6.1.3 Access control................................................................................................................................................. 10

6.1.4 Obsolete software ......................................................................................................................................... 11

6.1.5 Preservation of software ............................................................................................................................ 11

6.2 Documented information ........................................................................................................................... 11

Annex A (informative) Acronym log .................................................................................................................... 12

Bibliography ................................................................................................................................................................. 13

---------------------- Page: 4 ----------------------
oSIST prEN 9115-002:2022
prEN 9115-002:2022 (E)
European foreword

This document (prEN 9115-002:2022) has been prepared by the Aerospace and Defence Industries

Association of Europe — Standardization (ASD-STAN).

After enquiries and votes carried out in accordance with the rules of this Association, this document has

received the approval of the National Associations and the Official Services of the member countries of

ASD, prior to its presentation to CEN.
This document is currently submitted to the CEN Enquiry.
prEN 9115-002 supersedes and modernizes the Aerospace Recommended

Practice (ARP) 9005, “Aerospace Guidance for Non-Deliverable Software”, published in June 2005.

ARP9005 guidance was published as an “Americas Only” sector-specific document.
---------------------- Page: 5 ----------------------
oSIST prEN 9115-002:2022
prEN 9115-002:2022 (E)
Introduction

This document standardizes, to the greatest extent possible, the non-deliverable software requirements

for the aviation, space, and defence industry. The establishment of common requirements for use at all

levels of the supply-chain by organizations around the world is intended to result in improved quality,

schedule, and cost performance by the reduction or elimination of organization unique requirements

and wider application of good practices.

Applicability of this standard should be based on the context of organization, business, operations,

product development, and other standards that may be required for higher quality assurance levels.

The organization should identify applicable software based on the impact to the deliverable products

and services.
---------------------- Page: 6 ----------------------
oSIST prEN 9115-002:2022
prEN 9115-002:2022 (E)
1 Scope
1.1 General

This document defines the requirements for the effective control of non-deliverable software. This

document can be used during the development, test, production, release, use, maintenance, and

retirement of non-deliverable software. This can include non-deliverable software procured from

outside manufacturers and incorporated in the production, evaluation, test, acceptance, or calibration of

a deliverable product. When an organization outsources one or more of the processes involved in the

creation of non-deliverable software, this document applies.

This document focuses solely on the unique requirements of the operational processes that pertain to

non-deliverable software as defined by section 1.2. Operational processes not covered in this document

are addressed by the organization’s Quality Management System (QMS), based on EN 9100 and/or

ISO 9001.
1.2 Application

This document applies to non-deliverable software (including firmware) that directly affects the quality

of a deliverable product or service. Following are several applications and supporting examples of non-

deliverable software that is within scope of this document:

• Design and Development: modelling, simulation, virtual reality, virtual machine, data science,

Computer-Aided Design (CAD), Three-Dimensional (3D) modelling, analysis tools, software

compiler, and code generators.

• Manufacture: additive manufacturing data files, Computer Numerical Controlled (CNC) programs,

robotics, factory automation, tools that load deliverable software, special process (e.g., heat treat,

shot peen, sonic wall inspection), and automated manufacturing software (i.e., pick and place).

• Verification and Validation: Coordinate Measuring Machine (CMM) programs, hardware or

software qualification, code coverage, test scripts, analysis tools, acceptance test, production

acceptance, calibration (inspection, test or calibration), simulator, and emulator.

Non-deliverable software is not delivered to the customer under a contract or agreement.

The following types of software are not within scope of this standard:
• deliverable software (refer to EN 9115);
• embedded manufacturing and test equipment software (e.g., operating system);
• business systems or office software; and
• information systems software for business applications.
2 Normative references
There are no normative references in this document.
---------------------- Page: 7 ----------------------
oSIST prEN 9115-002:2022
prEN 9115-002:2022 (E)
3 Terms and definitions

Definitions for general terms can be found in the IAQG Dictionary . An acronym log for this document is

presented in Annex A.

ISO and IEC maintain terminological databases for use in standardization at the following addresses:

• ISO Online browsing platform: available at https://www.iso.org/obp
• IEC Electropedia: available at https://www.electropedia.org/
For the purpose of this document, the following definitions apply:
3.1
Free Open-Source Software (FOSS)

software that is both free software and open-source software; where anyone is able to use, copy, study,

and change the software
Note 1 to ent
...