IR 05000280/1987014
| ML18150A220 | |
| Person / Time | |
|---|---|
| Site: | Surry, North Anna, 05000000 |
| Issue date: | 07/07/1987 |
| From: | Long A, Shymlock M NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION II), NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION III) |
| To: | |
| Shared Package | |
| ML18150A219 | List: |
| References | |
| 50-280-87-14, 50-281-87-14, 50-338-87-20, 50-339-87-20, NUDOCS 8707150523 | |
| Download: ML18150A220 (6) | |
Text
..., *-*- ****"-->-~...... *..... ***~**.,._,:.,.:C,.*,,..~>> ~,.,**.**........... *.~).........o.i~-"*._.., -
- -.*
UNITED ST A TES NUCLEAR REGULATORY COMMISSION
REGION II
101 MARIETTA STREET, N.W., SUITE 2900 ATLANTA, GEORGIA 30323 Report Nos.:
50-280/87-14, 50-281,87-14, 50-338/87-20 and 50-339/87-20 Licensee:
Virginia Electric and Power Company Richmond, Virginia* 23261 Docket Nos.~
50-280, 50-281, 50-338, 50-339 License Nos.:
DPR-32, DPR-37, NPF-4, NPF-7 Facility Name:
Surry Units 1 and 2, North Anna Units 1 and 2 Inspection Conducted:
June 11-12, 1987 Inspector:
Q ~ l~r,
..,..
A. R. JonQ:, ~eactor7E~gineer Approved by: ~1)
/~.h-/M. B. Shymloc~,5ection Chief
- 1-J
Operational Programs Section
Division of Reactor Safety SUMMARY Date Signed-r(c/87 Date Signed Scope:
This routine, announced inspection was conducted at the office of the Eng.ineering and Construction Organization in the area of control of computer code *
Results:
No violations or.deviations were identified.
8707150523 870707 PDR ADOC~ 05000280 Q
.
!
- ---***- *** --,.* *--
.. -..... _ _,..,..,~-----..__,..... *.I.,.. __......_.,.-
.......... ~~:--::..,....:~:=~--------
REPORT DETAILS Persons Contacted Licensee Employees:
- K. L. Basehore, Supervisor, Nuclear Engineering
- W. E. Clark, Staff Quality Specialist
- R. F. Driscoll, Manager, Quality Assurance, North Anna
- J. D. Faehl, Staff Specialist, Quality Assurance Engineering
- R. J. Hardwick, Jr., Manager, Corporate Quality Assurance
- J. B. Lee, Jr., Licensing Engineer R. Schaffer, Supervisor, Quality Assurance N. A. Smith, Jr., System Engineer, Nuclear Engineering Other 1 icensee employees contacted included engineers and *security officer *Attended exit interview Exit Interview The inspection scope and findings were summarized on June 12, 1987, with those persons indicated in paragraph 1 abov The inspector described the areas inspected and discussed the inspection findings, including the closure of the two Inspector Followup Items (IFis) listed belo No dtssenting comments were received from.the license ITEM NUMBER I FI 280/82-16-01 IFI 280/82-16-02 STATUS Closed Closed DESCRIPTION/REFERENCE PARAGRAPH Revision of Procedures Concerning Reporting of Code Errors per 10 CFR and Technical Specification Requirements (Paragraph 6.a)
Quality Assurance (QA) Review of Departmental Procedures Controlling Computer Programs (Paragraphs
-
5 and 6.b)
The licensee did not identify as proprietary any of the materials provided to or reviewed by the inspector during this inspectio.
Licensee Action on Previous Enforcement Matters This subject was not addressed in the inspectio *
. --- *-,_,.. __.*.. - *'* *.. *-**...... -* -- *- ¥***--- ~- *--*,....... -***-- -,:-- -*-**- -:::i.'",-.L..*...... ::.... -~.i-*i:.... ~***,.-*..;._,*~-~*--*.......... ::.... v.. ' .'.":*. *-*~.-.*
. **c. ** *-- **-
2 Unresolved Items
,-_
Unresolved items were not identified during the inspectio.
Control of Safety-Related Computer Programs Procedural controls of safety-related computer codes within the Engineering and Construction (E&C) organization were reviewed to assure that codes are being developed, maintained, and modified in accordance with the design control measures contained in ANSI N45.2.ll-1974, 11Quality Assurance Requirements for the Design of Nuclear Power Plants". Computer codes under the control of the Nuclear Opera ti ans Department were not addressed in the inspectio Control of safety-related computer software used by E&C is implemented by a tiered system of procedures. The commitments in the approved Quality Assurance Program are amplified by the policies and guidelines presented in the Nuclear Operations Department (NOD) Standards Manua The E&C organization is bound to the NOD standards by formalized agreements documented in the Nuclear Design Control Interface Manual, which delineates procedures to assure that design changes are adequately controlle The E&C Nuclear Design Control Manual (NDCM) controls the activities of the Mechanical, Nuclear, Civil, and Electrical Engineering Department These procedures are supplemented by standards and departmental implementi~g procedure The inspector reviewed the following selected NOD Standards, E&C Design Control Manual Sections, and departmental implementing procedures controlling safety-related computer software:
NOD Administrative Standard,_ NOD Software Support E&C Nuclear Design Control Manual Section 3.1, Revision 3, Design Inputs E&C Nuclear Design Control Manual Section 3.3, Revision 0, Design Verifications E&C Nuclear Design Control Manual Section 3.12, Revision 1, Computer Software E&C Nuclear Design Control Manual Section 6.1, Revision 0, Problem Reporting System Nuclear Implementing Procedure NFA-102, Revision 0, Documentation and Verification of Analytical Methods and Calculations Techniques Nuclear Implementing Procedure NFA-104, Revision 0, Control of Nuclear Fuel and Analysis Computer Codes and Resources
..... _.. _.._*-.~ -****'" *-~-- *--****- _ _,_,.. ~ ~*--* ~.....,. -H**~**** o*v.*---~.._._. ~.-........i,.,*... *-** ~~~~--;t ::;::i;-..**-.,J*,&'1 *-~-..,::.:....C...*~------****-
Mechanical Engineering Discipline Implementing Procedure 14.5,*
Computer Software Control, 12/12/84 The Nuclear Operations Department Standard on Software Support.establishes the responsibilities and requirements for the evaluation, development, maintenance, and control of quality software for the NOD, and is app 1 i cab 1 e to i nterna 1 and vendor code usag Engineering and Construction Nuclear Design Control Manual Section 3.1 establishes guidelines for.ensuring that the design input requirements of ANSI N45.2.11-1974 are met when outputs from computer codes are used as design input to other engineering tasks. E&C NDCM Section 3.3 establishes requirements for the review and verificati-on of engineering activities performed by or under the direction of E&C. Section 3.12 establishes guidelines and requirements for the control of computer codes accessed by E&C pers.onne Collectively, these procedures provide adequate controls for safety related computer program To verify the implementation of the procedural requirements, the inspector reviewed the Production Code Notebooks for a version of RE TRAN and a version of COBRA. The RETRAN Code Notebook demonstrated the controls in place for codes obtained from an outside source where the licensee does not modify the Fortran codin The COBRA version represented a code where the licensee makes Fortran change The inspector also reviewed a Model Notebook for RETRAN, which documented the verification of. plant-specific input modelin The three documents reviewed satisfied the requirements for listings, check cases, code release forms, input information, record updates, etc. of NFA-104, Control of Nuclear Fuel Analysis Computer Codes
- and Resource The inspector concluded that safety-related computer programs were being we 11 contra 11 ed by the 1 i cense *
The adequacy of 1 i censee code contro 1 measures, combined with the verification by the inspector of adequate Quality Assurance audits of the area, closes Inspector Followup Item 50-280/82-16-02 (Paragraph 6.b). Followup on Previou~ly Identified Inspector Followup Items (92701) (Closed) Inspector Followup Item 50-280/82-16-01:
Revision of Procedures Concerning the Reporting of Code Errors per 10 CFR 21 and Technical Specification Requirements Background:
NRC Inspection 280/82-15 identified a need to revise Nuclear Fuel Engineering (NFE) Procedure No. 16.1, "Report Under 10 CFR 21, 10 CFR 50 and the Technical Specifications", and Fuel Resources Department Quality Assurance Manual No. 15.2, "Reporting of Fuel-Related Items to the NRC as Defined by 10 CFR 50.55e and 10 CFR Part 21
, to bring these procedures into conformance with the VEPCO Quality Assurance Manua <*"** **
<
- J*
-
~*
- '
>"-*"* *,<,Lo_., __... ___,/;" ___.*.__,._....,.,,,,_,..,.,._J._,,,..,,*,.4*,.,........ _~,,*.,;,,,...J*")'"~*.*-*~.f... a."~i.....---.,* *._, __.A--J'****""'**
."-*"*****~
Resolution:
The inspector verified that the applicable procedures in place at the time of NRC Inspection 280/82-16 were appropriately revise Subsequent to that inspection, the licensee changed their organi zati ona l structure and their system of procedures. The inspector reviewed in detail _Engineering and Construction (E&C)
Nuclear Design Control Manual (NDCM) Section 6.1, "Problem Reporting System", which is the current procedure governing the reporting, reviewing and correcting of problems in design and engineering activities. This document adequately addresses the requirements of 10 CFR Part 2 The inspector reviewed Engineering Change Request (ECR) No. 0321, dated April 23, 1987, and the Deviation Report dated April 27, 1987, *
for a computer code error. The inspector verified that the error was documented and reviewed in accordance with the requirements of E&C NDCM Section The ECR identified a non-conservative error in the Hi-Hi containment pressure setpoint used in certain Stone and Webster analyses. The review of the error as documented in the Deviation Report determined that conservatisms in modeling of containment spray adequately compensated for the error. Therefore the error did not create a substantial safety hazard as defined in 10 CFR Part 21, and was not reportable to the NR *
The licensee stated that they had identified very few examples of computer code errors. A 1986 Quality Assurance audit of compliance with the reporting requi~ements in NDCM Section identified no problems (Paragraph 6.b).
Based on the information above, this item is close (Closed) Inspector Followup Item 50-280/82-16-02:
Quality Assurance Review of Departmental Procedures Controlling Computer Programs Background:
Departmental procedures implementing the Quality Assurance program were to be reviewed by Quality Assurance personnel for conformance to Quality Assurance requirement Resolution:
The inspector reviewed the annual QA audits of the E&C Organization Nuclear Engineering Department for 1985 and 1986. The scope of the QA audits was to verify that Nuclear Engineering activities are in compliance with the requirements of 10 CFR, the Nuclear Operations Department Standards Manual, the E&C Nuclear Design Control Manual, and departmental supporting procedures and standard : "***.**--.,~***..... "'"*****--~-----
., *-~--~,.,..,h....... -........ ~....... ~#---*--**.
-***- ~--** ~...... *-~-**,-*~ **., **,~---*--~~.......... _, _____., _____. --.... -.. *.... _..... '
Audit No. 85-33, E&C Nuclear and Civil Engineering, dated June 24-28, 1985, presented no. significant findings in the area of control of safety-related computer software. Audit No. 86-63, Nuclear Engineering, dated September 29 - October 3, 1986, identified a need to update review signatures and this was promptly corrected by the licensee. Audit 86-63 documented good adherence to procedural controls, as stated in the report:
Engineering programs and other engineering products were audited to verify that they were being conducted in accordance with the requirements of E&C NDCM Section 3.3, Design Verification No deviations were identified in the.audi To verify comp 1 i ance with the guidelines and requirements in NDCM Section 3.12, Computer Software, for controlling the development of computer codes, 65 randomly selected computer codes were evaluated with respect to procedural requirement No discrepancies were identifie The PDQ and COBRA codes used by Nuclear Fuel Engineering were examined in the QA audit for compliance with NDCM Section 3.1, Design Inputs, and no problems were identifie Compliance with the reporting requirements of NDCM Section was verified in the QA audit through the review of 4 Engineering Change Requests (ECR 1s) which identified potential safety problems in computer code No problems in the area of reportability were identifie Based on the adequacy of the Quality Assurance Audi ts and on the results of the review of overall* procedural controls on safety-related computer codes (Paragraph 5) this item is closed.