Appendix C. Compliance Matrix and Tailoring Guidance and Resources
Guidance and resources to assist programs and projects in tailoring NPR 7120.5, NASA Space Flight Program and Project Management Requirements, requirements have been established
and/or developed by the Agency, Mission Directorates, and Centers. These include compliance matrices (see Section C.1), consultation and assistance for tailoring (see Section C.2), and
resources for developing the tailoring approach (see Section C.3). An Agency Tailoring Web site which includes many of these resources is available at
https://appel.nasa.gov/npr-7120-5-tailoring-resources.
C.1 Compliance Matrix
C.1.1 The Compliance Matrix documents the program’s or project’s compliance with the requirements of NPR 7120.5 or how the program or project is tailoring the requirements in
accordance with Section 3.5. It is submitted as part of the Formulation Agreement, Program Plan, or Project Plan. The Compliance Matrix is provided to streamline the tailoring (waiver and
deviation) process described in Section 3.5 and may be used to document approval for designating requirements as non-applicable. (See Section 3.5.3.) If the Compliance Matrix is
completed in accordance with these instructions, it meets the requirements for requesting tailoring and for designating requirements as non-applicable and serves as a group submittal for
waivers to NPR 7120.5. Once the Formulation Agreement or Program or Project Plan is signed, tailoring and non-applicable designations are approved. A copy is forwarded to the CPMO
and OCE for programs and Category 1 projects and to OCE for Category 2 and 3 projects. If the Compliance Matrix changes or if compliance is phased for existing programs or projects,
updated versions of the Compliance Matrix are incorporated into an approved Formulation Agreement or Program or Project Plan revision.
C.1.2 Compliance Matrix options have been developed to facilitate the tailoring process. Programs and projects may use the full Compliance Matrix, or, if applicable, a pre-customized
Compliance Matrix template, or a pre-approved Blanket Tailoring Compliance Matrix. (See Agency Tailoring Web site for examples of these Compliance Matrices and templates.) The
project manager or program manager should coordinate with the program or the Mission Directorate, respectively, to select and obtain the appropriate approval for using a Compliance
Matrix other than the full Compliance Matrix. Instructions for completing a Compliance Matrix are provided below.
a. Full Compliance Matrix: The full Compliance Matrix is provided in Table C-1 and on the Agency Tailoring Web site. It is also available on the OCE tab under the “Other NASA-Level
Documents” menu in NODIS.
b. Pre-customized Compliance Matrix Templates: These Compliance Matrix templates eliminate non-applicable requirements for specific types of programs and projects. Programs and
projects may choose to use the applicable pre-customized template instead of the full Compliance Matrix in Table C-1 to document and obtain approval for tailoring. Examples of
pre-customized compliance matrix templates include templates for Uncoupled and Loosely Coupled Programs, Tightly Coupled Programs, Single-Project Programs, and projects.
c. Pre-approved Blanket Tailoring Compliance Matrices: Mission Directorates and programs may and are encouraged to develop tailored Compliance Matrices and obtain approval for
tailoring specific types of programs and projects under their purview. Mission Directorates and programs are required to follow the instructions outlined in “Template Instructions” (see
below) for identifying tailored requirements, developing justifications for tailoring, and obtaining approval for tailoring from requirement owners and from the CPMO for the NASA AA to
establish a pre-approved blanket tailoring Compliance Matrix. Programs and projects that are eligible to invoke these pre-approved Compliance Matrices are not required to obtain approval
for the tailored requirements since that approval has already been obtained by the Mission Directorate or program. (Approval for additional tailoring is required.) For example, the STMD
Technology Demonstration Program has a pre-approved Compliance Matrix.
C.1.3 Template Instructions
C.1.3.1 The Compliance Matrix lists:
a. The paragraph reference.
b. The NPR 7120.5 requirement statement.
c. The “requirement owner” (the organization or individual responsible for the requirement).
d. Whether tailoring authority for the requirement is delegated or held at HQ.
e. The organization or individual to whom the requirement applies (MDAA, CD, PM).
f. A “comply?” column to describe applicability or intent to tailor.
g. The “justification” column to justify the rationale for tailoring and how tailoring is to be applied.
h. The “approval” column when signatures are required to approve tailoring.
C.1.3.2 The “Requirement Owner” column designates which organization is responsible for maintaining the requirement for the Agency. The head of the requirement owner’s organization
has the authority for approving tailoring unless this authority has been formally delegated. The “Delegated” column indicates whether the HQ’s requirement owner has delegated or retained
approval authority for tailoring of the requirement.
a. “Yes” in the “Delegated” column indicates that tailoring authority has been delegated by the requirement owner.
b. “No” in the “Delegated” column indicates that tailoring authority has been retained by the requirement owner.
c. Check the Agency Tailoring Web site for the POC who can provide the name of the HQ person with tailoring approval authority or the organization to which the authority is delegated.
d. If the “Delegated” column is blank, programs and projects should:
(1) Check the Agency Tailoring Web site for information on delegation by the requirement owner and/or
(2) Check the Agency Tailoring Web site for the HQ requirement owner’s POC and work with the POC to determine if tailoring authority has been retained or delegated.
C.1.3.3 The next three columns (“MDAA,” “CD,” and “PM”) designate to whom the requirement applies. An “A” in the column indicates applicability. Programs and projects do not need to
address requirements that are not applicable to “PM.”
C.1.3.4 The “Comply?” column is filled in by the program or project to identify the program’s or project’s approach to the requirement. The project inserts an “FC” for “fully compliant,”
“T” for “tailored,” or “NA” for a requirement that is “non-applicable,” per Section 3.5.3. (See Appendix A for the definition of a Non-Applicable Requirement.)
C.1.3.5 The column titled “Justification” documents the rationale for tailoring, documents how the requirement will be tailored, or justifies why the requirement is not applicable. It is
expected that much of the rationale will already have been developed in retrievable program and/or project records and can simply be referenced (in an appropriate, accessible form). The
level of documentation should be commensurate with the significance of departure from the norm and is determined by the requirement owner or as delegated. In the case where evaluation
indicates that the tailoring of a requirement increases risk, evidence of official acceptance of that risk should be provided as referenced in retrievable program or project records. Columns in
the Compliance Matrix can be adjusted to accommodate the necessary information.
C.1.3.6 The “Approval” column is used to indicate approval for tailored requirements. The name, title, and signature of the responsible authority (requirement owner or delegate) in this
column indicates that approval and any required concurrences have been obtained. The requirement owner consults with the other organizations that were involved in the establishment of
the specific requirement and obtains the concurrence of those organizations having a substantive interest.
a. The name, title, and signature of the responsible authority indicating approval of tailoring is required only for tailored requirements, i.e., those requirements with a “T” in the “Comply”
column. This is not required for requirements with “NA” in the “Comply” column.
b. For requirements for which tailoring authority has been retained, program and project managers should work with the HQ requirement owners’ POCs to obtain the names of individuals
with tailoring approval authority.
c. For requirements that have been delegated, program and project managers should work with the delegated representative or with the HQ requirement owners’ POCs to obtain information
specific to the delegated authorities.
C.1.3.7 Redundant signatures are not required in the “Approval” column of the Compliance Matrix, if the requirement owner is already a required signatory (e.g., MDAA, Center Director,
program manager, and project manager) on the Formulation Agreement, Program Plan, or Project Plan. An example of this would be OCE requirements that have been delegated to the
Center Director. In this case, a separate signature by the Center Director is not required in the “Approval” column since the Center Director is a signatory on the plan. However, if tailoring
was proposed for a requirement by an owner who isn’t normally a signatory on the Formulation Agreement, Program Plan, or Project Plan (e.g., OSMA), the program or project manager
should obtain the signature of the approving official in the “Approval” column of the Compliance Matrix prior to submitting the Formulation Agreement, Program Plan, or Project Plan for