1.2.1. The implementation of NPD 2210.1 and this NPG at the Centers is the responsibility of the designated parties as follows:

1.2.1.1. The Center Patent or Intellectual Property Counsel (or the Manager for Technology Transfer Division, or designee, at Centers without Patent or Intellectual Property Counsel) is responsible for performing an Intellectual Property Assessment of software considered within the scope and purpose of NPD 2210.1 and this NPR.

1.2.1.2. The Director, Center Commercial Technology Office, or designee, is responsible for coordinating a technology commercialization assessment of software deemed within the scope and purpose of NPD 2210.1 and this NPR.

1.2.1.3. The Center Export Administrator is responsible for coordinating an export control assessment on all software prior to any foreign release as defined in paragraph 2.2.3 (i.e., assisting with a determination if the software, or some portion thereof, should be subject to export restrictions under either the Export Administration Regulations or the International Traffic in Arms Regulations). When a foreign release of software is contemplated (including a release to a foreign entity within the United States), the Center Export Administrator will be consulted to ensure that such release complies with applicable export laws and regulations, and the NASA Export Control Program.

1.2.1.4. The Center Director, or designee, is responsible for appointing an individual as the Software Release Authority, or for appointing a group of individuals as the Software Release Group. A Software Release Group must have a team leader or chairperson designated as the Software Release Authority. The Software Release Authority may establish supplemental procedures and guidance to support the implementation and administration of NPD 2210.1 and this NPR.

1.2.1.5. The NASA Inspector General, or designee, is responsible for appointing an individual or group of individuals as the Software Release Authority for the purpose of determining the release of forensic software developed by the Office of Inspector General for law enforcement purposes. The Software Release Authority appointed for this purpose shall comply with the requirements of the NPD and this NPR 2210.1.

1.2.1.6. The NASA Principal Center for Information Technology Security (PCITS) is responsible for developing guidance, including a standard checklist to assist the Centers in the identification and the mitigation or elimination of information technology security risks associated with the external release of software considered under the auspices of NPD 2210 and this NPR. The Center IT Security Manager (ITSM) will provide advice and interpretation of the guidance for the IT security assessment of all such software, and shall be consulted, as warranted by the guidance, by the Center SRA and the cognizant software development and assurance organizations prior to the release of the software.

1.2.1.7. The Center Information Technology Security Manager is responsible for identifying to the Software Release Authority any security risks inherent in the release of specific software and for determining how to eliminate or manage those risks as needed.

1.2.1.8. The Software Release Authority is responsible for determining the applicability of this NPR to software that may be outside the purpose and scope of NPD 2210.1, and for ensuring that all external releases of applicable software are accomplished in accordance with NPD 2210.1 and this NPR. Accordingly, the Software Release Authority is responsible for managing the implementation of NPD 2210.1 and this NPR in coordination with the Center Patent or Intellectual Property Counsel, the Manager for the Technology Transfer Office, the Center Export Administrator, the Center Information Technology Security Manager, the Center Procurement Office, the Center office responsible for the software and other Center offices, as may be necessary.