ISO/TC 20/SC 14/WG 5 - Space System Program Management and Quality

This document establishes general rules for qualification assessment of space systems and products used in space systems against their functional and technical specifications. It establishes general requirements for determining system or product readiness for any stage of the life cycle. This includes, for example, readiness for development, manufacture, test, operation, modification, or disposal. This document is applicable to systems and products used in flight or ground support and to products at all levels in a product tree. It applies to systems and products consisting of hardware, software, facilities, materials, methods, processes, procedures or any combination of these. It establishes common: a) general requirements for qualification assessment of item readiness; b) approaches to qualification. This document is intended for use as the basis for a design justification plan. It is intended to be used either in establishing an agreement for such a plan between a customer and a supplier or as the basis for a supplier’s internal qualification practices.

This document defines a set of software product assurance requirements in terms of processes and products to be used for the development, maintenance and operation of software for space systems. It provides a uniform basis for defining the software product assurance activities to be applied and maintained throughout the whole software life cycle, from project conception until the software retirement. This document mainly applies to the space software segment and critical software of ground software segment (e.g. the software which is directly interface to the space segment).

This document sets out the minimum requirements for flight safety systems (FSSs), including flight termination systems (FTSs, externally controlled systems or on-board automatic systems), tracking systems, and telemetry data transmitting systems (TDTSs) for commercial or non-commercial launch activities of orbital or suborbital, unmanned space vehicles. The intent is to minimize the risk of injury or damage to persons, property or the environment resulting from the launching of space vehicles. This document can be applied by any country, by any international organization, whether intergovernmental or not, and by any agency or operator undertaking the launching of space vehicles. This document is intended to be applied by any person, organization, entity, operator or launch authority participating in commercial or non-commercial launch activities of orbital, or suborbital, unmanned space vehicles unless more restrictive requirements are imposed by the launch site country.

This document defines procedures, contents and requirements for test reviews which are composed of the Test Readiness Review (TRR), Post Test Review (PTR) and Test Review Board (TRB). This document is applicable to tests of space systems and space products, including environment tests and functional and performance tests, especially for system level tests and complicated tests.

This document specifies requirements for the safety liabilities of countries undertaking space activities or allowing operators to perform space activities on or from their territory under outer-space treaties adopted by the United Nations. It defines the safety responsibilities for the operators involved in commercial or non-commercial space launch activities. This document establishes the overall safety requirements to be observed on a launch site for prelaunch (integration, test, checking, preparation, etc.) and launch operations of a space object. It provides the basic principles to enable any operator to implement its own safety methods, tools and procedures to ensure the safety of people and personnel, public and private property, and the environment, in a consistent and uniform manner. The safety requirements for system safety are defined in ISO 14620-1, and the requirements for the flight safety systems in ISO 14620-3.

This document provides definitions of all common terms used in the area of space systems and operations for programme management and quality. It does not contain terms specific to an individual International Standard in the area of space systems and operations, which are defined in that particular International Standard.

This document addresses the key elements for an EEE parts management programme for space systems and is written in general terms as a baseline for developing, implementing, validating, and evaluating a space parts management programme. The family of EEE parts includes electro-optical parts.

This document establishes technical guidelines for developing and documenting an electrical, electronic and electromechanical (EEE) parts control program, in order to assure that the parts used in the flight hardware are acceptable and possess adequate functional, radiation and reliability characteristics to meet the system requirements. The family of EEE parts includes electro-optical parts. This document identifies a set of management guidelines for dealing with space systems engineering activities and defines the minimum existing processes on the subject. These guidelines are tailorable to the needs of each individual programme based on the project performance criteria, risk tolerance, budget, mission duration, environment, schedule and other considerations. This document is applicable to all customers and suppliers furnishing flight hardware and is suitable for reference in proposal instructions.

This document supports and complements the implementation of the risk management process defined in ISO 17666 in situations when the application of a quantitative risk assessment is deemed necessary. This document defines the principles, process, implementation and requirements for conducting a quantitative risk assessment and explains the details of probabilistic risk assessment (PRA) as applied to safety. While PRA can be applied to project risk management involving cost and schedule, this application is outside the scope of this document. This document provides the basic requirements and procedures for the use of PRA techniques to assess safety or mission risk and success in space programmes and projects. This document is applicable to all international space projects involving: — the design of space vehicles for the transportation of personnel in space; — the design of space and non-terrestrial planetary stations inhabited by human beings; — the design of space and launch vehicles powered by, or carrying, nuclear materials; — other projects as directed by the authorities or clients. These types of projects generally involve scenarios, chains of events or activities that could result in the death of, or serious injury to, members of the public, astronauts or pilots, or the workforce, or the loss of critical or high-value equipment and property. For other types of projects, it is intended that PRA be performed at the discretion of the project management.

This document defines the contents, methods and requirements of configuration management for space projects, and the responsibilities and authorities of related parties. It can be used together with ISO 14300‑1:2011, Clause 10. This document is applicable to the configuration management of space projects from the mission analysis phase to the disposal phase.

This document defines the safety programme and the technical safety requirements that are implemented in order to comply with the safety policy as defined in ISO 14300‑2. It is intended to protect flight and ground personnel, the launch vehicle, associated payloads, ground support equipment, the general public, public and private property, and the environment from hazards associated with space systems. Launch site operations are described by ISO 14620‑2 and flight safety systems in ISO 14620‑3. The safety policy is applied by implementing a system safety programme, supported by risk assessment, which can be summarized as follows. a) Hazardous characteristics (system and environmental hazards) and functions with potentially hazardous failure effects are identified and progressively evaluated by iteratively performing systematic safety analyses. b) The potential hazardous consequences associated with the system characteristics and functional failures are subjected to a hazard reduction sequence whereby: hazards are eliminated from the system design and operations; hazards are minimized; and hazard controls are applied and verified. c) The risks that remain after the application of a hazard elimination and reduction process are progressively assessed and subjected to risk assessment, in order to: show compliance with safety targets; support design trades; identify and rank risk contributors; support apportionment of project resources for risk reduction; assess risk reduction progress; and support the safety and project decision-making process (e.g. waiver approval, residual risk acceptance). d) The adequacy of the hazard and risk control measures applied are formally verified in order to support safety validation and risk acceptance. e) Safety compliance is assessed by the project and safety approval obtained from the relevant authorities.

This document defines the programme management requirements for material, mechanical parts and processes for projects covering mission definition, design, development, production and operations of space systems, including disposal. This document covers the following: — management, including organization, reviews, acceptance status and documentation control; — selection criteria and rules; — evaluation, validation and qualification, or verification testing; — procurement and receiving inspection; and — utilization criteria and rules. This document applies to all space deliverable products and all programme phases.

ISO/TS 18667:2018 applies to the design, development, fabrication, test, and operation of commercial, civil, and military space and ground control systems, sites/facilities, services, equipment, and computer software. Criteria is provided for rating the capability of the entire SD&QA programme or an individual SD&QA process to identify, assess, and eliminate or mitigate risks that threaten safety or mission success. The predefined capability rating criteria define the sequence of activities necessary to achieve a measurable improvement in the effectiveness of SD&QA risk management by implementing it in stages. Organizations can evaluate their existing SD&QA programme against the criteria in this document to identify the activities that need to be added, deleted, or modified to achieve the desired technical risk management effort. The phrase "desired technical risk management effort" means the activities and resources used to identify, assess, and eliminate or mitigate technical risks are commensurate with the product's unit-value/criticality and systems engineering life cycle data content/maturity.

ISO 20892:2017 specifies procedures in the preparation and carrying out of the modernization process of launch complexes and their components. These procedures are devised in case there is a need to make changes in existing configuration of launch complexes. ISO 20892:2017 establishes the following: a) modernization stages; b) modernization performance requirements; c) functions of the main participants of the modernization process and their interactions. The requirements specified in this document are used by organizations involved in the modernization of the launch complexes. ISO 20892:2017 is directly aimed at increasing economic efficiency in terms of the modernization process in creating new vehicles or changing the specification of a launch complex by a service customer, etc., or whether or not there is a need to build a new launch complex. ISO 20892:2017 is also aimed at providing safety and health requirements for LC personnel, since increased demand for launch complex safety may be one reason to modernize the facility. ISO 20892:2017 offers a unified approach to the management of the modernization process (preparation and carrying out). Since there are no specific requirements and data, target dates for the carrying out of the modernization process can be flexible.

ISO 17666:2016 defines, extending the requirements of ISO 14300‑1, the principles and requirements for integrated risk management on a space project. It explains what is needed to implement a project-integrated risk management policy by any project actor, at any level (i.e. customer, first-level supplier, or lower-level suppliers). It contains a summary of the general risk management process, which is subdivided into four (4) basic steps and nine (9) tasks. The implementation can be tailored to project-specific conditions. The risk management process requires information exchange among all project domains and provides visibility over risks, with a ranking according to their criticality for the project; these risks are monitored and controlled according to the rules defined for the domains to which they belong. The fields of application of ISO 17666:2016 are all the space project phases. A definition of project phasing is given in ISO 14300‑1. When viewed from the perspective of a specific programme or project context, the requirements defined in ISO 17666:2016 are tailored to match the genuine requirements of a particular profile and circumstances of a programme or project.

ISO 16290:2013 defines Technology Readiness Levels (TRLs). It is applicable primarily to space system hardware, although the definitions could be used in a wider domain in many cases. The definition of the TRLs provides the conditions to be met at each level, enabling accurate TRL assessment.

ISO 10789:2011 describes the processes and the requirements for the management of information/documentation within space programmes and projects. The requirements specified in ISO 10789:2011 apply to and affect the customer and supplier at all levels. When viewed from the perspective of a specific project context, the requirements defined in ISO 10789:2011 need to be tailored to match the specific requirements of the particular profile and circumstances of a project. Defence information and documentation are not part of the scope of ISO 10789:2011.

ISO 11893:2011 defines the project organization principles and requirements needed to provide satisfactory and coherent management of space projects. The general requirements for project organization are given in ISO 14300-1. It addresses the following, in particular: responsibility and authority of the actors (all actors, customer, supplier), interrelations between the actors (meetings, action monitoring, reporting, assessments and audits), information technologies, and project organization documentation. The requirements specified herein apply to and affect the supplier and customer at all levels. ISO 11893:2011 is applicable to the customer-supplier relationship for space products to the extent agreed by both parties. It is intended to be used as a basis when establishing and negotiating customer program/project management requirements and to guide the supplier's responses. When viewed in a specific project context, the requirements defined in this International Standard should be tailored to match the specific requirements of a particular profile and circumstances of a project.

ISO 21351:2005 provides an overview of the respective purposes and positions of functional and technical specifications, their required contents, and the process for developing these documents. ISO 21351:2005 is applicable to all types of space systems, all product elements, and projects.

ISO 14300-2:2011 defines the product assurance (PA) policy, objectives, principles, and requirements for the establishment and implementation of PA programmes for space programmes covering mission definition, design, development, production and operations of space products, including disposal. The PA discipline covers: PA management, quality assurance, safety assurance, dependability (reliability, availability and maintainability) assurance of software and hardware products, as well as parts (including electrical, electromechanical and electronic components, and mechanical parts), materials and processes assurance. ISO 14300-2:2011 defines their respective objectives, policies, and principles to achieve the stated overall PA objectives throughout the complete life cycle of the products. The provisions of ISO 14300-2:2011 apply to space products.

ISO 14620:2011 specifies requirements for the safety liabilities of countries undertaking space activities or allowing operators to perform space activities on or from their territory under outer space treaties adopted by the United Nations. It defines the safety responsibilities for the operators involved in commercial or non-commercial space launch activities. ISO 14620:2011 establishes the overall safety requirements to be observed on a launch site for prelaunch (integration, test, checking, preparation, etc.) and launch operations of a space object. It provides the basic principles to enable any operator to implement its own safety methods, tools, and procedures, to ensure the safety of people and personnel, public and private property, and the environment, in a consistent and uniform manner.

ISO 10795:2011 provides definitions of all common terms used in the area of space systems and operations. ISO 10795:2011does not contain terms specific to an individual International Standard in the area of space systems and operations, which are defined in that particular International Standard.

ISO 10794:2011 defines the programme management requirements for material, mechanical parts and processes for projects covering mission definition, design, development, production and operations of space systems, including disposal. ISO 10794:2011 covers the following: management, including organization, reviews, acceptance status and documentation control; selection criteria and rules; evaluation, validation and qualification, or verification testing; procurement and receiving inspection; utilization criteria and rules. ISO 10794:2011 applies to all space deliverable products and all programme phases.

ISO 14300-1:2011 addresses the space programme/project management requirements, applicable through a top-down approach in a contractual relationship between customers and suppliers. The applicable requirements for product assurance are given in ISO 14300-2. Annex A of ISO 14300-1:2011 gives the general ISO standards framework for space systems programme management. ISO 14300-1:2011 is intended to be used as a basis when establishing and negotiating customer project management requirements, and guiding the supplier's responses. It allows: a clear definition of the roles, responsibilities and authorities of the different customers and suppliers; coherence between their activities; communication capability between them; stable and rigorous project organization; and as far as possible, standardization of the rules applicable to various programmess/projects. It still allows for supplier flexibility in its implementation and tailoring.

ISO 23460:2011 presents the requirements for a dependability (reliability, availability and maintainability) assurance programme for space projects. ISO 23460:2011 defines the dependability requirements for space products as well as for system functions implemented in software, and the interaction between hardware and software. The provisions of ISO 23460:2011 apply to all programme phases.

ISO 21350:2007 contains requirements and guidelines for the utilization of off-the-shelf (OTS) items, their selection, acquisition, integration, qualification and implementation related to a space product or system. Specifically excluded are piece parts and materials, such as electrical, electronic and electromechanical (EEE) parts, thermocouples, rivets, fasteners, connectors, fittings, adhesives, insulation, wiring and plumbing.

ISO 21349:2007 provides process requirements for project reviews as a set of required functions. The requirements and recommendations cover the function inputs, outputs, mechanisms, and controlling conditions. It is intended for use in implementing the review requirements of ISO 14300-1, ISO 14300-2, ISO 15865, and such other space systems and operations standards that require formal reviews. ISO 21349:2007 specifies the responsibilities of a review board and gives guidance concerning review board composition. ISO 21349:2007 is applicable to reviews for a project at any level within a larger project, as well as for major milestone reviews at the top level of a major project. It is intended to be used either by an independent developer as a basis for enterprise processes, or as a basis for an agreement between a supplier and a customer. ISO 21349:2007 also provides normative descriptions of the kinds of reviews that are commonly useful in assuring the success of a space project.

ISO 14620-3:2005 sets out the minimum requirements for Flight Safety Systems, including flight termination systems (externally controlled system or on-board automatic system), tracking systems, and telemetry data transmitting systems for commercial or non commercial launch activities of orbital or sub-orbital, unmanned space vehicles. The intent is to minimize the risk of injury or damage to persons, property or the environment resulting from the launching of space vehicles. ISO 14620-3:2005 can be applied by any country, by any international organization, whether intergovernmental or not, and by any agency or operator undertaking the launching of space vehicles. ISO 14620-3:2005 is intended to be applied by any person, organization, entity, operator or launch authority participating in commercial or non-commercial launch activities of orbital or sub-orbital, unmanned space vehicles unless more restrictive requirements are imposed by the launch site country.

ISO 15865:2005 establishes common rules for assessing the qualification of space systems and products used in space systems against their functional and technical specifications. It establishes a basis for determining system or product readiness for any stage of the life cycle. This includes, for example, readiness for development, manufacture, test, operation, modification, or disposal. ISO 15865:2005 is applicable to systems and products used in flight or ground support and to products at all levels in a product tree. It applies to systems and products consisting of hardware, software, facilities, materials, methods, processes, procedures or any combination of these. It establishes common rules for assessment of item readiness and approaches to qualification. ISO 15865:2005 is intended for use as the basis for a design justification plan. It is intended to be used either in establishing an agreement for such a plan between a customer and a supplier or as the basis for a supplier's internal qualification practices.

ISO 14621-1:2003 addresses the preferred program elements recommended for EEE parts. ISO 14621-1:2003 is written in general terms as a baseline for developing and implementing a parts program.

ISO 14621-2:2003 establishes technical guidelines for developing and documenting an electrical, electronic and electromechanical (EEE) parts control program, in order to assure that the parts used in the flight hardware are acceptable and possess adequate functional, radiation and reliability characteristics to meet the system requirements. These guidelines are tailorable to the needs of each individual programme based on the project performance criteria, risk tolerance, budget, mission duration, environment, schedule and other considerations. ISO 14621-2:2003 is applicable to all customers and suppliers furnishing flight hardware and is suitable for reference in proposal instructions.

ISO 17666:2003 extends the requirements of ISO 14300-1, the principles and requirements for integrated risk management on a space project. It explains what is needed to implement a project-integrated risk management policy by any project actor, at any level (i.e. customer, first-level supplier, or lower-level suppliers). ISO 17666:2003 contains a summary of the general risk management process, which is subdivided into four (4) basic steps and nine (9) tasks. The implementation can be tailored to project-specific conditions. The risk management process requires information exchange among all project domains and provides visibility over risks, with a ranking according to their criticality for the project. These risks are monitored and controlled according to the rules defined for the domains to which they belong. ISO 17666:2003 is applicable to all space project phases, as defined in ISO 14300-1. When viewed from the perspective of a specific programme or project context, the requirements defined in ISO 17666:2003 should be tailored to match the genuine requirements of a particular profile and circumstances of a programme or project.

ISO 14620-1:2002 defines the safety programme and the technical safety requirements that are implemented in order to comply with the safety policy as defined in ISO 14300-2. It is intended to protect flight and ground personnel, the launch vehicle, associated payloads, ground support equipment, the general public, public and private property, and the environment from hazards associated with space systems. Launch site operations are described by ISO 14620-2. The safety policy is applied by implementing a system safety programme, supported by risk assessment, which can be summarized as follows: hazardous characteristics (system and environmental hazards) and functions with potentially hazardous failure effects are identified and progressively evaluated by iteratively performing systematic safety analyses; the potential hazardous consequences associated with the system characteristics and functional failures are subjected to a hazard reduction sequence whereby hazards are eliminated from the system design and operations, hazards are minimized, and hazard controls are applied and verified; the risks that remain after the application of a hazard elimination and reduction process are progressively assessed and subjected to risk assessment, in order to show compliance with safety targets, support design trades, identify and rank risk contributors, support apportionment of project resources for risk reduction, assess risk reduction progress, and support the safety and project decision-making process (e.g. waiver approval, residual risk acceptance); the adequacy of the hazard and risk control measures applied are formally verified in order to support safety validation and risk acceptance; safety compliance is assessed by the project and safety approval obtained from the relevant authorities. ISO 14620-1:2002 is applicable to all space projects where during any project phase there exists the potential for hazards to personnel or the general public, space flight systems, ground support equipment, facilities, public or private property, or the environment. The imposition of these requirements on the project suppliers' activities requires that the customer's project product assurance and safety organization also respond to these requirements in a manner which is commensurate with the project's safety criticality. When viewed from the perspective of a specific programme or project context, the requirements defined in ISO 14620-1:2002 should be tailored to match the genuine requirements of a particular profile and circumstances of a programme or project.