NASA Procedural Requirements

NPR 8000.4A Effective Date: December 16, 2008 Expiration Date: December 16, 2013

Subject: Agency Risk Management Procedural Requirements

Responsible Office: Office of Safety and Mission Assurance

Preface

P.1 Purpose

a. This NASA Procedural Requirements (NPR) document provides the requirements for risk management for the Agency, its institutions, and its programs and projects as required by NASA Policy Directive (NPD) 1000.0, Governance and Strategic Management Handbook; NPD 7120.4, Program/Project Management; and NPD 8700.1, NASA Policy for Safety and Mission Success. Risk management includes two complementary processes: Risk-Informed Decision Making (RIDM) and Continuous Risk Management (CRM).

b. This NPR establishes requirements applicable to all levels of the Agency. It provides a framework that integrates the RIDM and CRM processes at all levels. This NPR also establishes the roles, responsibilities, and authority to execute the defined requirements Agency wide. It builds on the principle that program and project requirements should be directly coupled to Agency strategic goals and applies this principle to risk management processes within all Agency organizations at a level of rigor that is commensurate with the stakes and complexity of the decision situation that is being addressed.

c. The implementation of these requirements leads to a risk management approach that is coherent across the Agency and achieves appropriate coverage of risks (including cross-cutting risks) within NASA. “Coherent” means that (a) Agency strategic goals explicitly drive RIDM and, therefore, CRM, at all levels, (b) all risk types are considered collectively during decision making, and (c) risk management activities are coordinated horizontally and vertically, across and within programs, projects, and institutions.

d. This NPR contains requirements for risk management. Detailed explanations and descriptions will be provided in associated procedural handbooks.

P.2 Applicability

This NPR applies to all Agency activities, including:

a. NASA Headquarters and NASA Centers, including Component Facilities and Institutional/ Mission Support Offices, and to the Jet Propulsion Laboratory and other contractors to the extent specified in their respective contracts.

b. New and existing programs and projects that provide aeronautics and space products or capabilities; i.e., flight and ground systems, technologies, and operations for aeronautics and space.

P.3 Authority

a. National Aeronautics and Space Act of 1958, as amended, 42 U.S.C. º 2473 (c) (l).

b. NPD 1000.0, Governance and Strategic Management Handbook.

c. NPD 1000.5, Policy for NASA Acquisition

d. NPD 1200.1, NASA Internal Control.

e. NPD 8700.1, NASA Policy for Safety and Mission Success.

P.4 Applicable Documents

a. NPD 1000.3, The NASA Organization.

b. NPD 1440.6, NASA Records Management.

c. NPR 1441.1, NASA Records Retention Schedules.

d. NPR 7120.5D, NASA Space Flight Program and Project Management Requirements.

e. NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Requirements.

f. NPR 7120.8, NASA Research and Technology Program and Project Management Requirements.

g. NPR 7123.1, NASA Systems Engineering Processes and Requirements.

h. NPR 8705.6, Safety and Mission Assurance Audits, Reviews, and Assessments.

i. Federal Acquisition Regulation parts 7 and 15.

j. NASA Federal Acquisition Regulation Supplements parts 1807 and 1815.

P.5 Measurement/Verification

Compliance with the requirements contained in this NPR will be verified through the application of the integrated assessment model required by paragraph 2.2.d.

P.6 Cancellation

NPR 8000.4, Risk Management Procedural Requirements, dated April 25, 2002.

/S/
Bryan O’Connor
Chief, Safety and Mission Assurance

DISTRIBUTION:
NODIS