2.3.5.1.10 PIR Plan  2.3.5.1.11 SSAR 2.3.6  ISM  2.3.6.2  PIR Report  The PIR Team must develop a  PIR Plan prior to the ISD for the investment program under  review. The plan must expand and refine the PIR Strategy by defining expected outcomes,  planned activities, and resources necessary to complete the review. SRM input to the plan  should be submitted after the SSAR is completed and approved. The ATO Chief Safety  Engineer reviews the safety input to the PIR Plan and provides concurrence or  recommendations to the PIR Team Leader and PIR Quality Officer.  The purpose of an SSAR is to conduct and document a comprehensive evaluation of the safety  risk being accepted before the program is deployed into the NAS. This means that the SSAR  summarizes the safety analyses and assessments and development assurance activities  conducted by the PO. The SSAR is a continuous, closed-loop process containing the SRVT. The SRVT contains all of the safety requirements identified with the origin of the requirement  (e.g., OSA, CSA, PHA, SSHA, SHA, and O&SHA), including V&V. At the IOC and ISD, all  safety requirements must undergo V&V by the PO. Objective evidence of V&V closed status  may be reviewed by the ATO Chief Safety Engineer upon request.  Verification is the process that ensures that the product is being built correctly (according to  specifications). Validation is the process of proving that the product being built is operationally  suitable and effective. Both must be successful to deploy the product.  While verifying the safety requirements, AJI may review all of the previous development  assurance activities to make a final determination that the development assurance safety  requirements have been met.  When the ATO Chief Safety Engineer approves the SSAR, he or she affirms that all safety  requirements have been met. See Appendix I for further information on how to prepare an SSAR. After a system’s IOC and/or ISD, the Operational Audits and Assessments (Air Traffic)  Team, AJI-323, may perform a post-implementation safety assessment. AJI-323 must transmit  any safety-related findings to the PO for action.  The PIR Team prepares a  PIR Report after it completes its review. The ATO Chief Safety  Engineer reviews the report’s safety findings (including safety data that verifies whether the  predicted residual risk has been met) and recommendations and provides concurrence or  recommendations to the PIR Quality Officer. If the PIR reveals an increased safety risk, the risk  acceptor must coordinate a reassessment to determine if changes to the safety risk mitigation  strategy are necessary. An SRM panel must convene to assess the risk of any new hazards  and/or to develop additional safety requirements to ensure risk is acceptable.  After the PIR Report is completed, the PO must develop a plan outlining actions and milestones  (with completion dates) to address the report’s recommendations. These recommendations  2_SRMGSA_202003  Originally published March 2020  Uncontrolled copy when downloaded  20 2.3.6.1  Post-Implementation Safety Assessment 