ASME NQA-1 — Quality Assurance Requirements for Nuclear Facility Applications — Compliance Brief — Compliance brief

ASME NQA-1 — Quality Assurance Requirements for Nuclear Facility Applications — Compliance Brief

Record: nuclear-cert-009 (Nuclear — standard, flagship) Issuing body: American Society of Mechanical Engineers (ASME) Jurisdiction: International — U.S. adoption via NRC endorsement (Regulatory Guide 1.28) and 10 CFR 50.55a QA provisions; effectively mandatory for the U.S. nuclear supply chain.

1. What it is

ASME NQA-1 is the nuclear industry's consensus quality-assurance standard: the detailed "how" behind the 18 criteria of Appendix B to 10 CFR Part 50. Where Appendix B states what a QA program must achieve (design control, procurement control, corrective action, etc.), NQA-1 provides the implementable requirements — and where the NRC endorses it, following NQA-1 (with the NRC's exceptions) constitutes an acceptable method of complying with Appendix B.

NQA-1 grew out of the consolidation of the ANSI N45.2 series (1970s–80s). Its structure:

Part I — Requirements: 18 numbered requirements mirroring Appendix B's 18 criteria (Requirement 1 Organization, Requirement 2 QA Program, Requirement 3 Design Control, ... Requirement 16 Corrective Action, Requirement 18 Audits).
Part II — Quality Assurance Requirements for Nuclear Facility Applications: subparts with detailed requirements for specific activities (e.g., Subpart 2.2 packaging/shipping, 2.7 computer software, 2.14 commercial-grade dedication, 2.19 laboratory services — note the NRC takes exception to 2.19 and points to NEI 14-05A instead).
Part III — Nonmandatory appendices: guidance.
Part IV — Definitions.

2. Scope — who/what it applies to, triggers

Applies to: any organization performing safety-related activities for nuclear facilities — utilities (their Appendix B programs), N-stamp holders (Section III NCA-4000 QA), architect-engineers, and the entire safety-related supply chain down to subtier suppliers.
Trigger: performing work classified as safety-related (or "important to safety") under a facility's licensing basis. Commercial-grade dedication (Subpart 2.14 / EPRI guidance) is the process by which commercial items are qualified for safety-related use — the dominant QA activity for most suppliers.
NRC endorsement mechanics: Regulatory Guide 1.28 endorses specific NQA-1 editions for design/construction QA programs; 10 CFR 50.55a paragraphs (b)(1)(iv), (b)(2)(x), and related provisions identify NQA-1 editions as acceptable for Section III QA. Licensees commit to a specific edition in their licensing basis — changing editions is a licensing-basis change.
DOE interface: DOE nuclear facilities use NQA-1 alongside 10 CFR 830 nuclear-safety management requirements; DOE O 414.1D endorses NQA-1-based QA.

3. Key requirements and compliance obligations

The 18 requirements in practice: graded QA program; design control with independent verification; procurement document control flowing QA requirements to subtier suppliers; control of purchased items and services (supplier evaluation, source inspection, receipt inspection); inspection and test control with acceptance criteria; nonconformance control and corrective-action programs (the NRC inspects these hardest — IP 71152 problem identification and resolution); QA records (lifetime vs. nonpermanent retention — a perennial audit finding area); audits (internal and supplier).
Commercial-grade dedication (CGD): the four acceptance methods (special tests/inspections, commercial-grade survey, source verification, acceptable supplier/item performance history) — CGD failures (inadequate dedication of digital components, counterfeit/fraudulent items) are among the most common supply-chain enforcement findings.
Software QA (Subpart 2.7 / NQA-1 Requirement 3/11 interfaces): safety-related software verification and validation — increasingly important with digital I&C upgrades.
Counterfeit, fraudulent, and suspect items (CFSI): NRC and industry (EPRI) programs; procurement QA must include CFSI prevention — a live enforcement focus.
Supplier oversight: licensees retain ultimate responsibility for subtier supplier QA — "flow-down" failures (licensee didn't impose or verify QA at the subtier) are classic inspection findings.

4. Penalties / consequences of non-compliance

Enforcement flows through the licensee's Appendix B obligations: NOVs, civil penalties, and ROP findings (the QA/supply-chain area feeds the human-performance and safety-culture cross-cutting aspects).
10 CFR Part 21 defect reporting applies to suppliers of basic components — failure to evaluate and report defects is independently enforceable against vendors (the NRC issues NOVs directly to vendors).
Commercial: utilities delist suppliers after QA breakdowns; NUPIC (Nuclear Procurement Issues Corporation) joint audits mean a failure at one utility propagates to all members' approved-supplier lists.
For N-stamp holders, QA breakdown threatens the ASME Certificate of Authorization (see the Section III brief).

5. Version / edition status and live changes (verified to 2026-09-30)

NQA-1-2024 (issued July 24, 2024) is the latest ASME edition. However — and this is the practically important point — the NRC-endorsed editions lag significantly: RG 1.28 Revision 6 endorses NQA-1-2017, NQA-1-2019, and NQA-1-2022 (Parts I and II, with exceptions/clarifications). The most commonly used edition in the supply chain remains NQA-1-2008 with the NQA-1a-2009 addendum or newer endorsed editions, because licensees' licensing bases commit to specific editions. (Sources: RG 1.28 Rev 6; industry references.)
Practical consequence: do not procure or program to "the latest NQA-1" — conform to the edition in your customer's licensing basis and the NRC endorsement. Edition mismatches between supplier programs and utility requirements are a real audit finding category.
Digital/CFSI trends: NRC and industry attention continues on commercial-grade dedication of digital components and CFSI prevention — program updates, not code-edition changes.
RG 1.28 revision status beyond Rev 6 not verified — flagged; check for a newer revision endorsing NQA-1-2024 before assuming non-endorsement.

PE Nuclear (NCEES) (nuclear-cert-003) — PEs own design-control (Requirement 3) implementation and CGD technical evaluations; the engineering credential behind QA-significant decisions.
NRC RO/SRO Licenses (nuclear-cert-001, nuclear-cert-002) — operations QA (procedures, corrective action) is part of the licensed-operator's world, but operator licensing doesn't test NQA-1.
Certified Health Physicist (CHP) (nuclear-cert-004) — no direct NQA-1 nexus.
Honest note: NQA-1 competence is demonstrated through employer QA programs, lead-auditor qualification (per NQA-1 Requirement 2 / Supplement 2S-3), and NUPIC auditor qualification — organizational/personnel qualifications, not catalogue certifications. ASQ's Certified Quality Auditor (CQA) is the adjacent individual credential but is outside the catalogue.

7. Honest flags

Edition/endorsement facts verified against RG 1.28 Rev 6 and secondary sources — but RG revision currency beyond Rev 6 not verified; recheck before procurement.
The "most commonly used is 2008/2009a" characterization is from secondary industry sources — directionally reliable, not a survey.
NQA-1 is paywalled; requirement summaries here are from NRC regulatory guides and public industry materials.
CGD acceptance-method descriptions are standard industry practice per EPRI/NRC guidance — verify against current EPRI guidance for program implementation.

Original ETS reference writing, verified against public sources on 2026-09-30. Thin sourcing is flagged inline. Not legal advice — confirm current editions with the issuing body.

ASME NQA-1 — Quality Assurance Requirements for Nuclear Facility Applications — Compliance Brief