LR-N16-0113, NED0-33872, Rev. 0, Hope Creek Generating Station Numac Prnm Upgrade Phase 2.

NED0-33872, Rev. 0, Hope Creek Generating Station Numac Prnm Upgrade Phase 2.

ML16256A642
Person / Time
Site:	Hope Creek
Issue date:	08/31/2016
From:	GE-Hitachi Nuclear Energy Americas
To:	Office of Nuclear Reactor Regulation
Shared Package
ML16256A638	List: LR-N16-0113, GEH Affidavits Supporting the Withholding of Information in Enclosure 6 from Public Disclosure LR-N16-0113, Hope Creek Power Range Neutron Monitoring Upgrade - Human Factors Engineering Assessment LR-N16-0113, ISG-06 Enclosure B Roadmap, Phase 2 Documents. LR-N16-0113, NED0-33864, Rev. 0, Appendix B, Numac Systems Engineering Development Plan. LR-N16-0113, NED0-33872, Rev. 0, Hope Creek Generating Station Numac Prnm Upgrade Phase 2. LR-N16-0113, NUREG-0800, Appendix 18-A Assessment, Crediting Manual Operator Actions in the Diversity and Defense-in-Depth Analyses. ML16256A639 ML16256A640 ML16256A641 ML16256A642 ML16256A643 ML16256A644
References
LAR H15-01, LR-N16-0113 NED0-33872, Rev 0
Download: ML16256A642 (163)

Text

GE Hitachi Nuclear Energy NEDO-33872 Revision 0 August 2016 Non-Proprietary Inform ation-Class I (Public)

Hope Creek Generating Station NUMAC PRNM Upgrade Phase 2

Copyright 2016 GE-Hitachi Nuclear Energy Americas LLC All Rights Reserved.

NEDO-33872 Revision 0 Non-Proprietary Inform ation-Class I (Public)

PROPRIETARY INFORMATION NOTICE This is a non-proprietary version of the document NEDC-33872P Revision 0, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

IMPORTANT NOTICE REGARDING CONTENTS OF THIS REPORT PLEASE READ CAREFULLY The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the U.S. Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Revision 0 Non-Proprietary Inform ation-Class I (Public)

LISTOFAPPENDICES A 001N5787, Revision 5, HCGS PRNM Syst em Safety Analysis Task Report B 001N5721, Revision 5, HCGS PRNM System V erification and Validation Task Report C 001N5886, Revision 4, HCGS PRNM System Configuration Management Task Report D 003N4828, Revision 1, HCGS PRNM Verification and Validation Test Summary Report E 003N2569, Revision 1, HCGS PRNM Failure Mode and Effects Analysis Report F 002N9894, Revision 0, HCGS PRNM Qualification Summary Report G 003N2682, Revision 1, HCGS PRNM Reliability Analysis

NEDO-33872 Revision 0 August 2016 Non-Proprietary Information - Class I (Public)

Appendix A PLM Source Record 001N5787.05 HCGS PRNM System Safety Analysis Task Report

Copyright 2015, 2016 GE Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-ii Information Notice This is a non-proprietary version of the document NEDC-33872P Appendix A, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

IMPORTANT NOTICE REGARDING THE CONTENTS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the U.S. Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-iii Revision Summary Revision PLM Revision Revision Description 0 0 Initial Issue (Legacy DRF Section 0000-0166-9196, Rev 0) 1 0 Requirements Phase (001N5787, Rev 0 ) 2 1 Design Phase (001N5787, Rev 1 ) 3 2 Implementation Phase (001N5787, Rev 2 ) 4 3 Editorial changes for external distribution (001N5787, Rev 3) 5 4 Test Phase (DVR)

(001N5787 Rev 4)

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-iv Table of Contents ACRONYMS AND ABBREVIATIONS .................................................................................................................. A-v 1 INTRODUCTION ............................................................................................................................................ A-1 1.1 PURPOSE ............................................................................................................................................................ A-1 1.2 S COPE ............................................................................................................................................................... A-1 1.3 R EFERENCES ....................................................................................................................................................... A-1 2 SYSTEM SAFETY ANALYSIS ACTIVITIES .............................................................................................. A-2 2.1 C ONCEPT P HASE: (B ASELINE 1) .............................................................................................................................. A-2 2.1.1 Safety Function (Safety Classification)........................................................................................

........... A-2 2.1.2 Safety Impact Evaluation ....................................................................................................................... A-4 2.2 R EQUIREMENTS P HASE: (B ASELINE 2) ...................................................................................................................... A-4 2.2.1 Safety Impact Evaluation ....................................................................................................................... A-5 2.3 D ESIGN P HASE: (B ASELINE 3) ............................................................................................................................

..... A-5 2.3.1 Safety Impact Evaluation ....................................................................................................................... A-5 2.4 I MPLEMENTATION P HASE: (B ASELINE 4) ................................................................................................................... A-5 2.4.1 Safety Impact Evaluation ....................................................................................................................... A-5 2.5 T EST P HASE: (B ASELINE 5).............................................................................................................................

........ A-6 2.5.1 Safety Impact Evaluation ....................................................................................................................... A-6 2.5.2 Evaluation of Test and Qualification Program ...................................................................................... A-7 3

SUMMARY

AND CONCLUSION ................................................................................................................. A-8 ATTACHMENT A - ANOMALIES ........................................................................................................................ A-9 ATTACHMENT B - REFERENCES .................................................................................................................... A-10

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-v ACRONYMS AND ABBREVIATIONS Term Definition 2oo4 Two-Out-Of-Four APRM Average Power Range Monitor BTP Branch Technical Position DI&C Digital Instrumentation & Controls DSS-CD Detect and Suppress Solution - Confirmation Density EPRI Electric Power Research Institute FAT Factory Acceptance Test GEH GE-Hitachi Nuclear Energy Americas LLC IEEE Institute of Electrical and Electronics Engineers ISG Interim Staff Guidance IV&V Independent Verification and Validation LPRM Local Power Range Monitor LTR Licensing Topical Report NIC NUMAC Interface Computer NRC Nuclear Regulatory Commission NUMAC Nuclear Measurement Analysis and Control ODA Operator Display Assembly OPRM Oscillation Power Range Monitor PDS Previously Developed Software PRNM Power Range Neutron Monitor PSEG Public Service Enterprise Group RBM Rod Block Monitor STP Simulated Thermal Power SyIVVP System Independent Verification and Validation Plan, (NEDC-33864P, Appendix D) SySSA System Safety Analys is, (NEDC-33864P, Appendix A)

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-1 1 INTRODUCTION GE Hitachi Nuclear Energy (GEH) is contracted by Public Service Enterprise Group (PSEG) Nuclear LLC (the Customer) to deliver a Nuclear Measurement Analysis and Control (NUMAC) Power Range Neutron Monitoring (PRNM) system designed for the Hope Creek Generating Station (Hope Creek) (Reference B.2.1). The PRNM system will have the Oscillation Power Range Monitor (OPRM) with Detect and Suppress Solution - Confirmation Density (DSS-CD) as the stability solution.

1.1 PURPOSE This report is prepared in accordance with WI-23-309-10 (Reference B.1.2.1). This report summarizes the results of the system safety analysis activities defined in the project System Independent Verification and Validation plan (SyIVVP) (Reference B.2.2). The information presented provides objective evidence that the development of the Hope Creek PRNM system, including hardware and software, is executed in accordance with the established life cycle process and procedures. This System Safety Analysis (SySSA) report may be used to fulfill the requirements of DI&C-ISG-06 Enclosure B Item 2.1 (Reference B.3.3.1) which in turn fulfills NUREG 0800 BTP 7-14 Section B.3.2.1 (Reference B.3.3.2).

1.2 SCOPE The scope of the tasks being summarized by this report is defined in the SyIVVP (Reference B.2.2) for the SySSA. The outline and format of this report is in compliance with template WI-23-309-10-T01 (Reference B.1.2.2) with minor modification to accommodate the tasks defined in SyIVVP (Reference B.2.2).

1.3 REFERENCES

See Attachment B.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-2 2 SYSTEM SAFETY ANALYSIS ACTIVITIES 2.1 CONCEPT PHASE: (BASELINE 1) 2.1.1 Safety Function (Safety Classification) The approach to safety-related classification exercised in this section follows the process defined in Section B1.2 of CP-03-02 "Safety-Related Classification of Equipment and Services" (Reference B.1.1.2). The level of the classification is to the subsys tem (e.g., chassis) level with addition of interfacing equipment. The detailed justification of the Hope Creek replacement NUMAC PRNM safety-related equipment cl assification is described below. PSEG Nuclear LLC Specification No. H-1-SE-KDS-0494 Revision 1 (Reference B.2.3) provides the system description of the Hope Creek existing PRNM system and system requirements of the replacement digital PRNM system. PSEG Cyber Security Specification No. H-1-ZZ-KDS-0512-R0 (Reference B.2.4) defines appl icable cyber security control requirements for the replacement digital PRNM system. GEH addresses the above two customer specifications by providing the scope of work, exceptions and cl arifications in GEH Proposal No. 1-1NQ3ZV Revision 3_1 dated December 13, 2012 (Reference B.2.5). References B.2.3, B.2.4 and B.2.5 form part of the contract that this project is based on.

Figure 3-3 of the GEH proposal (Reference B.2.5) defines that Licensi ng Topical Report (LTR) NEDC-32410P-A Volumes 1 and 2, "Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC PRNM) Retrofit Plus Option III Stability Trip Function" dated October, 1995 and NEDC-32410P Supplement 1, dated November 1997 (Reference B.3.1.1) are utilized as the basis for licensing activities. Thus, the overall project scope identified in Section 2.1 of the LTR covers the scope of this upgrade.

Therefore, the safety functions of the NUMAC PRNM system as defined in Section 3.3.2 of the LTR (Reference B.3.1.1) shall be accomplished by this upgrade project.

The following safety functions will be implemented in the Hope Creek PRNM system:

• APRM Neutron Flux -- High Trip

• APRM Simulated Thermal Power (STP) - High Trip

• APRM Neutron Flux - High (Setdown) Trip

• OPRM Instability Trip -

Detect and Suppress Solution - Confirmation Density (DSS-CD) (Reference B.3.1.2) The LTR (Reference B.3.1.1) only describes Option III for the OPRM instability trip. [[ ]] DSS-CD has been approved by the NRC for implementation at various BWRs (e.g., Grand Gulf Nuclear Station). The NUMAC PRNM system (hardware and software) that is relied upon to perform the above safety functions shall be classified as safety-related system.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-3 In addition, Institute of Electrical and Electronics Engineers (IEEE) Standard 603-1991 (Reference B.3.2.1) Clause 5.6.3.1 (1) requires that:

• Equipment that is used for both safety and non-safety functions shall be classified as part of the safety systems. Isolation devices used to affect a safety system boundary shall be classified as part of the safety system. IEEE Standard 7.4.3-2-2003 (Reference B.3.2.2) Clauses 5.6 a) and b) extend this requirement to software: a) Barrier requirements shall be identified to provide adequate confidence that the non-safety functions cannot interfere with performance of the safety functions of the software or firmware. The barriers shall be designed in accordance with the requirements of this standard. The non-safety software is not required to meet these requirements. b) If barriers between the safety software and non-safety software are not implemented, the non-safety software functions shall be developed in accordance with the requirements of this standard. Based on the above criteria and in conjunction with the criteria listed in Section B2 of CP-03-02 (Reference B.1.1.2), the safety classification of the NUMAC PRNM equipment is determined as the following:

Deliverable Equipment Description Safety Classification1. Average & Local Power Range Monitor (APRM) Chassis Q 2. Rod Block Monitor (RBM) Chassis N 3. RBM Interface panels N 4. Low Voltage Power Supply Chassis Q 5. 2/4 Logic Module Chassis Q 6. Fiber Optic Bypass Switch Q

7. Local Power Range Monitor (LPRM) Connector Panel Q 8. Calibration Monitoring Panel Q 9. Operator Display Assembly (ODA) N 10. 4-Channel Analog Isolator Q 11. NUMAC Interface Computer (NIC) Chassis N

12. PRNM Panel P-608 Modification Kits Q

13. PRNM Panel P-608 Internal Copper Cables Q

14. PRNM Panel P-608 Internal Fiber Optic cables Q 15. Fiber optic cables from PRNM to the ODAs, Bypass Switch and NICs Q Notes:

• Equipment listed in the above table is based on Figure 3-1 of GEH Proposal No. 1-1NQ3ZV Revision 3_1 dated December 13, 2012 (Reference B.2.5)

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-4

• Non-safety software/firmware residing in safety-related equipment listed above will be treated as safety-related, unless adequate functional independence can be demonstrated.

• For equipment that is applied for bot h safety and non-safety applications (e.g., Items 4, 8, 12, 13, 14, and 15), safety-rel ated classification (Q) is assigned.

• For electrical equipment, Class Q implies Class 1E. Class N is implies Non-Class 1E.

2.1.2 Safety Impact Evaluation As a replacement system, the GEH approach to software safety planning for the PRNM is to ensure that the safety significan ce of the PRNM retrofit would be consistent with the design basis of the replaced system and of the plant. This is accomplished by the following:

1. The required safety functions of the PRNM are stated in Section 3.3.2 of Reference B.3.1.1.

2. The design basis and compliance to the associated regulatory requirements of the PRNM are described in Section 4 of Reference B.3.1.1.

3. The equipment safety classifications are listed in Section 5.3.4 of Reference B.3.1.1. The software associated with the equipment will have the same safety classification.

4. The effects of PRNM failure are evaluated in Section 6 of the PRNM LTR, NEDC32410P-A, (Reference B.3.1.1). This evaluation includes the common-cau se failure of the PRNM software.

5. For the Hope Creek plant-specific implementati on of PRNM, required actions to be performed by PSEG are identified to ensure that the differe nces in the plant configuration are identified and addressed. These are specified in Sections 3.4, 4.4.1.11, and 6.6 of Reference B.3.1.1. The common-cause failure evaluation of PRNM in Re ference B.3.1.1 is based on the evaluations in NEDC-30851P-A (Reference B.3.1.3) by applying th e events as defined in Electric Power Research Institute (EPRI) NP-2230 (Reference B.3.2.3) considering the loss of the PRNM functions for these events. The utility required action is to confirm the applicability of the evaluations and prepare a 10 CFR 50.59 evaluation to ensure that the PRNM does not introduce any un-reviewed safety questions. This will be performed in the later phase of the life-cycle process.

2.2 REQUIREMENTS PHASE: (BASELINE 2)

[[

]] This analysis focused on the performance specification of these sub-systems. Because the PRNM system has been licensed and installed in prior applications, the analysis was to determine if the Hope Creek specific requirements would introduce a new failure mode. While the Hope Creek requirem ents would not introduce a new failure mode, concerns have been identified and documented in the Hope Creek System NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-5 Verification and Validation Task Report, see NEDC-33872P, Appendix B, for additional information. Comments from the requirements phase IV&V review were provided to the design team for resolution. The updated documents will be reviewed after Baseline 2, and this anomaly will be closed when the Hope Creek PRNM Safety Impact Evaluation has been updated to incorporate or to acknowledge the addressed comments. Anomaly HC_PRNM_SSA-1 is cr eated for tracking purposes (See Attachment A).

2.2.1 Safety Impact Evaluation In the Hope Creek APRM performance specification, it is noticed there is insufficient information for the APRM chassis human machine interface, self-test error messages (critical faults or non-critical faults in self-test). The Hope Creek System Verification and Validation Task Report, NEDC-33872P, Appendix B, pr ovides additional details.

2.3 DESIGN PHASE: (BASELINE 3) The Independent V&V (IV&V) team shall evaluate the system, sub-system, and hardware and software component design documentation, incl uding communication interface protocols, to ensure that these design elements correctly implement the critical requirements related to the performance of the safety functions.

2.3.1 Safety Impact Evaluation The Hope Creek PRNM safety-related functions are essentially the same as the previous NRC approved application (Peach Bottom PRNM). An evaluation of Previously Developed Software (PDS) was conducted during this design phase to compare the Peach Bottom PRNM software to the anticipated software changes for this project. This evaluation determined that no software changes would affect the critical requirements related to the performance of the safety functions. This implementation does not introduce any new or unexpected failure modes or safety risks that were not analyzed for the existing system. All system, sub-system, system, hardware and software component design documentation, and communication interface protocols that were modified from their legacy versions were evaluated to ensure that no new or undesired effects of changes have the potential for adverse effect on the safety functions.

2.4 IMPLEMENTATION PHASE: (BASELINE 4) The IV&V team evaluated the system, sub-system, hardware, and software component design and implementation documentation to ensure that these design elements are transformed into physical hardware and source code that correctly implement the critical design features related to the performance of the safety functions.

2.4.1 Safety Impact Evaluation The Hope Creek PRNM safety-related functions are essentially the same as the previous NRC approved application (Peach Bottom PRNM).

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-6 All system, sub-system, hardware, and software component design and implementation documentation that were modified from their legacy versions were evalua ted and concluded that plant-specific application for Hope Creek PRNM has not introduced any new or undesired effects of changes that have the potential for adverse impact on the sa fety functions.

This conclusion was reached with the review of the following documents:

1. PRNM System Architecture De scription (Reference B.2.6)

2. Diversity and Defense-in-Depth Analysis (Reference B.2.7)

3. Design Analysis Report: Hope Creek NUMAC PRNM System, Hardware, and Software Modifications (Reference B.2.8)

4. Design Report on Computer Integrity, Test and Calibration, and Fault Detection (Reference B.2.9)

5. Hope Creek Plant Specific Responses Re quired by the PRNM LTR (Reference B.2.10) The analyses in these documents confirmed that the design of the Hope Creek PRNM is consistent with the previously approved design

s. None of the identified differences would affect the system's ability to perform its intended safety functions. Section 2.1.2 Item 2 referred to Section 4 of Re ference B.3.1.1 for the regulatory requirements of the PRNM. Evaluation of the system agains t updated regulatory guidance is documented in NEDC-33864P. The system was found to comply with the updated requirements for replacement systems, including requirements for DI&C-ISG-06, BTP-7-14, and the latest regulatory guides (e.g., Regulatory Guide 1.152 (Reference B.3.3.3)) and industry standards (e.g., IEEE 603 and 7-4.3.2). 2.5 TEST PHASE: (BASELINE 5) The IV&V safety impact evaluation confirms that all safety-related requirements are properly covered by appropriate testing and that the system is capable of correctly implementing the critical design features related to the performance of the safety functions.

2.5.1 Safety Impact Evaluation The Hope Creek PRNM safety-related functions are essentially the same as the previous NRC approved application (Peach Bottom PRNM). Test results of component, integration, subsystem, system, and FAT validation testing of safety-related requirements have successfully confirmed that the system will perform the safety functions as required. This conclusion was reached based on the test results as documented in the following test reports:

1. APRM Functional Controller Software IV&V Module Test Summary Report (Reference B.2.11)

2. APRM Subsystem IV&V Integration Test Summary Report (Reference B.2.12)

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-7 3. Two Out of Four Logic Module Test Report (Reference B.2.13)

4. APRM Subsystem Validation Test Report (Reference B.2.14)

5. System Validation Test Report (Reference B.2.15)

6. Factory Acceptance Test Report (Reference B.2.16) The independent validation testing of the Hope Creek PRNM system confirmed that the design is capable of performing its intended safety functions and the safety functions are similar to those that have been previously approved.

2.5.2 Evaluation of Test and Qualification Program The SyIVVP (Reference B.2.2) requires an evalua tion of the testing and qualification program to ensure that the program has not introduced any hazards that have the potential for adverse impact on the safety functions. The test and qualification program for the Hope Creek PRNM system is essentially the same as those previously approved for application in other BWRs (e.g., Columbia, Grand Gulf). [[ ]] was performed as needed to ensure the de sign has been implemented correctly. Independent validation and qualification testing was then performed in a disciplined layer approach to ensure the design meets all the requirements at component, integration, subsystem, system and FAT levels. The PRNM system that has undergone the same type of testing and qualification program has successful operating experience. Therefore, the test and qualification program for the Hope Creek PRNM system w ould not have introduced any hazards that have potential for adverse effect on the system safety functions.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-8 3

SUMMARY

AND CONCLUSION The development and testing of the Hope Creek PRNM system, including hardware and software, was completed and it was concluded that any changes associated to safety-related requirements did not affect the critical requirements related to the performance of the safety functions. This implementation did not introduce any new or undesired effects of changes that have the potential for adverse effect on the safety functions.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-9 ATTACHMENT A - ANOMALIES Anomaly ID Priority* Summary Description Status HC_PRNM_SSA-1 Critical Comments from the requirements phase IV&V review were provided to the design team for resolution. The updated documents will be reviewed after Baseline 2, and this anomaly will be closed when the Hope Creek PRNM Safety Impact Evaluation has been updated to incorporate or to acknowledge the addressed comments. CLOSED *Priority of anomalies is defined as follows:

• Blocker - highest priority representing unacceptably high project risk: project cannot be authorized to continue into the next life cycle phase until resolved.

• Critical - high priority re presenting significant project risk: project may continue into the next life cycle phase without immediate resolution, but has the potential to prevent the project from proceeding at some point in the life cycle unless resolved. If left unresolved, a 'Critical' anomaly will eventually be elevated to 'Blocker' priority level.

• Minor - low priority representing moderate project risk: project may proceed with caution but the anomaly should be resolved or dispositioned before the completion of the project.

• Trivial - lowest priority representing little or no project risk: usually reserved for administrative issues such as typographical or ot her clerical errors that should be rectified.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-10 ATTACHMENT B - REFERENCES B.1 APPLICABLE GEH PROCEDURES B.1.1 COMMON PROCEDURES (CP)

1. CP-23-309, Digital I&C System Safety. *

2. CP-03-02, Safety-Related Classification of Equipment and Services.

• B.1.2 WORK INSTRUCTIONS

1. WI-23-309-10, System Safety Analysis Task Reporting. *

2. WI-23-309-10-T01, System Safety Analysis Task Reporting Template.

• B.2 PROJECT DOCUMENTS

1. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix E, "Hope Creek NUMAC System Management Plan," NEDC-33864P, Revision 0, September 2015.

2. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix D, "NUMAC Systems Independent Verification and Validation," NEDC-33864P, Revision 0, September 2015.

3. PSEG Nuclear L.L.C. Specification No. H-1-SE-KDS-0494 Revision 2.

4. PSEG Cyber Security Specification N

o. H-1-ZZ-KDS-0512-R0, 0000-0165-6903 Revision 0

5. GEH Proposal No. 1-1NQ3ZV Revision 3_1 dated December 13, 2012, 7560-1-1NQ3ZV-KT1, Revision 0.

6. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix A, "PRNM Systems Architecture Description," NEDC-33864P, Revision 0, September 2015.

7. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix I, "Diversity and Defense-in-Depth Analysis," NEDC-33864P, Revision 0, September 2015.

8. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix J, "Design Analysis Report: HC NUMAC PRNM System, Hardware, and Software Modifications," NEDC-33864P, Revision 0, September 2015.

9. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix M, "Design Report on Computer Integrity, Test and Calibration, and Fault Detection," NEDC-33864P, Revision 0, September 2015.

NEDO-33872 Appendix A (001N5787.05) Non-Proprietary Information - Class I (Public)

A-11 10. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix R, "HCGS Plant Specific Responses Required by PRNM LTR," NEDC-33864P, Revision 0, September 2015.

11. APRM Functional Controller Software IV&V Module Test Summary Report, 003N0389 Revision 0.*

12. APRM Subsystem IV&V Integration Test Summary Report, 003N1003 Revision 0. *

13. Two Out of Four Logic Module Te st Report, 003N2152 Revision 1. *

14. APRM Subsystem Validation Test Report, 003N1973 Revision 1. *

15. System Validation Test Re port, 003N3299 Revision 0. *

16. Factory Acceptance Test Report, 003N4961 Revision 0.

• B.3 OTHER REFERENCES B.3.1 TOPICAL REPORTS

1. GE Nuclear Energy, "Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC PRNM) Retrofit Plus Option III Stability Trip Function," NEDC-32410P-A Volumes 1 and 2, October, 1995 and Supplement 1, November 1997.

2. GE Hitachi Nuclear Energy, "GE Hitachi Boiling Water Reactor Detect and Suppression Solution - Confirmation Density," NE DC-33075P-A, Revision 8, November 2013.

3. General Electric Company, "BWR Owners' Group Technical Specification Improvement Analyses for BWR Reactor Protection System," NEDC-30851P-A, May 1988. B.3.2 INDUSTRIAL CO DES AND STANDARDS

1. IEEE Standard 603-1991, "IEEE Standard Criteria for Safety Systems for Nuclear Power Generating Stations".

2. IEEE Standard 7-4.3.2-2003, "IEEE Standard Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations".

3. EPRI NP-2230, "ATWS: A Reappraisal," January 1, 1982. B.3.3 REGULATORY DOCUMENTS 1. NRC DI&C-ISG-06, "Licensi ng Process," January 19, 2011. 2. NUREG-0800 Branch Technical Position (BTP) 7-14 Section B.3.2.3, "Guidance on Software Reviews for Digital Computer-Based Instrumentation and Control Systems," Revision 5, March 2007. 3. Regulatory Guide 1.152, "Criteria for Use of Computers in Safety Systems of Nuclear Power Plants," Revision 3, July 2011.

• Unpublished, available for NRC audit on request.

NEDO-33872 Revision 0 August 2016 Non-Proprietary Information - Class I (Public)

Appendix B PLM Source Record 001N5721.05 HCGS PRNM System Verification and Validation Task Report

Copyright 2015-2016 GE-Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-ii Information Notice This is a non-proprietary version of the document NEDC-33872P Appendix B, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

NOTICE REGARDING CONTEN TS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the US Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-iii Revision Summary Revision PLM Revision Required Changes 0 0 Initial Issue (Legacy DRF Section 0000-0165-9450, Revision 0 ) 1 0 Requirements Phase (001N5721, Revision 0) 2 1 Design Phase (001N5721, Revision 1) 3 2 Implementation Phase (001N5721, Revision 2) 4 3 Editorial changes for external distribution (001N5721, Revision 3) 5 4 Test Phase (Design Validation Review (DVR))

(001N5721 Revision 4)

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-iv Table of Contents ACRONYMS AND ABBREVIATIONS ................................................................................ B-vi 1 INTRODUCTION............................................................................................................. B-1 1.1 Purpose .......................................................................................................................

......... B-1 1.2 Scope .........................................................................................................................

.......... B-1 1.3 References ....................................................................................................................

....... B-1 2 SYSTEM VERIFICATION AND VALIDATION ACTIVITIES ................................ B-2 2.1 Concept Phase: (Baseline 1) ............................................................................................... B-2 2.1.1 Safety Classification ............................................................................................... B-2 2.1.2 Concept Documentation Evaluation ....................................................................... B-2 2.1.3 Traceability Analysis .............................................................................................. B-3 2.1.4 Security Analysis .................................................................................................... B-3 2.2 Requirements Phase: (Baseline 2) ...................................................................................... B-3 2.2.1 Requirements Documentation Evaluation .............................................................. B-4 2.2.2 Traceability Analysis .............................................................................................. B-4 2.2.3 Security Analysis .................................................................................................... B-5 2.3 Design Phase: (Baseline 3) ................................................................................................. B-5 2.3.1 Design Documentation Evaluation ......................................................................... B-5 2.3.2 Traceability Analysis .............................................................................................. B-6 2.3.3 Security Analysis .................................................................................................... B-7 2.3.4 Safety Analysis ....................................................................................................... B-7 2.3.5 Independent V&V Test Plans ................................................................................. B-7 2.3.6 Qualification Plans .................................................................................................. B-7 2.4 Implementation Phase: (Baseline 4) ................................................................................... B-7 2.4.1 Implementation Documentation Evaluation ........................................................... B-8 2.4.2 Independent V&V Test Procedures ...................................................................... B-11 2.4.3 Qualification Summary Report ............................................................................. B-11 2.4.4 Traceability Analysis ............................................................................................ B-11 2.4.5 Security Analysis .................................................................................................. B-12 2.4.6 Safety Analysis ..................................................................................................... B-12

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-v 2.4.7 Source Code Inspection ........................................................................................ B-12 2.5 Test Phase: (Baseline 5) .................................................................................................... B

-13 2.5.1 Test Phase Documentation .................................................................................... B-13 2.5.2 Traceability Analysis ............................................................................................ B-14 2.5.3 Design Changes of 386SX CPU Module and PLD4 changes............................... B-15 2.5.4 Independent V&V Testing .................................................................................... B-16 2.5.5 Qualification Summary Report ............................................................................. B-16 2.5.6 Independent Validation Test Reports .................................................................... B-17 2.5.7 Security Analysis .................................................................................................. B-18 2.5.8 Safety Analysis ..................................................................................................... B-19 2.5.9 V&V Test Summary Report ................................................................................. B-19 3

SUMMARY

AND CONCLUSION ............................................................................... B-21 ATTACHMENT A - ANOMALIES ..................................................................................... B-22 ATTACHMENT B - REFERENCES ................................................................................... B-26

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-vi ACRONYMS AND ABBREVIATIONS Term Definition 2/4 2 out-of 4 APRM Average Power Range Monitor ASP Automatic Signal Processor BTP Branch Technical Position COTS Commercial off the Shelf CPU Central Processing Unit DDR Detailed Design Review DI&C Digital Instrumentation & Controls DOORS Dynamic Object-Oriented Requirements DSS-CD Detect and Suppress Solution - Confirmation Density DVR Design Validation Review FAT Factory Acceptance Test FDDI Fiber Direct Data Interface FUNCODE Functional Code GEDAC GE Data Acqui sition & Communication GEH GE-Hitachi Nuclear Energy Americas LLC GEK GE Operations and Maintenance Manual HMI Human-Machine Interface HW Hardware ID Identification IEEE Institute of Electrical and Electronics Engineers I/F Interface ISG Interim Staff Guidance IP Internet Protocol IVV Independent Verification and Validation IVVT Independent Verificat ion and Validation Team JED JEDC - Joint Electron Device Engineering Council LPRM Local Power Range Monitor LTR Licensing Topical Report NIC NUMAC Interface Computer NRC Nuclear Regulatory Commission NTP Network Time Protocol NUMAC Nuclear Measurement Analysis and Control NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-vii Term Definition ODA Operator Display Assembly OPRM Oscillation Power Range Monitor PDMS Product Data Management System PDS Previously Developed Software PLD Programmable Logic Device PLM Product Lifecycle Management PRD Project Requirements Document PRNM Power Range Neutron Monitor PSEG Public Service Enterprise Group PWP Project Work Plan RBM Rod Block Monitor RPS Reactor Protection System RTM Requirements Traceability Matrix SAT Site Acceptance Test SDE Secure Development Environment SDS Software Design Specification SMP Software Management Plan STP Simulated Thermal Power SyEDP Systems Engineering Development Plan, (NEDC-33864P, Appendix B) SyIVV System Independent Verification and Validation SyIVVP System Independent Verification and Validation Plan, (NEDC-33864P, Appendix D) SyMP System Management Plan, (NEDC-33864P, Appendix E) SyRS System Requirements Specification SySA System Safety Analysis SyVV System Verification and Validation TCP Transmission Control Protocol TITR Test Item Transmittal Report ULSP Upgrade Licensing Support Plan V&V Verification and Validation

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-1 1 INTRODUCTION GE Hitachi Nuclear Energy (GEH) has been contracted by Public Service Enterprise Group (PSEG) Nuclear LLC (the Customer) to deliver a Nuclear Measurement Analysis and Control (NUMAC) Power Range Neutron Monitoring (PRNM) system designed for Hope Creek Generating Station (Hope Creek) (Reference B.2.1). The PRNM system will have the Oscillation Power Range Monitor (OPRM) with the Detect and Suppress Solution - Confirmation Density (DSS-CD) as the stability solution.

1.1 PURPOSE This system verification and validation report, prepared in accordance with WI-23-310-10 (Reference B.1.2.1), summarizes the results of the activities for each phase of the digital life cycle as defined in the System Independent Verification and Validation Plan (SyIVVP) (Reference B.2.2) for the Hope Creek PRNM project. The information presented provides objective evidence that the development of the Hope Creek PRNM system, including hardware and software, is executed in accordance with the established life cycle process and procedures. This System Independent Verification and Validation (SyIVV) report may be used to fulfill the requirements of DI&C-ISG-06 Enclosure B Item 2.2 (Reference B.3.1.1) which in turn fulfills NUREG-0800 BTP 7-14 Section B.3.2.2 (Reference B.3.1.2).

1.2 SCOPE The tasks for each phase of the digital life cycle are defined in the SyIVVP (Reference B.2.2), including the activities for the SyIVV, the system Secure Development Environment (SDE) and system test and qualification. The outline and format are in compliance with template WI-23-310-10-T01 (Reference B.1.2.2).

1.3 REFERENCES

See Attachment B.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-2 2 SYSTEM VERIFICATION AND VALIDATION ACTIVITIES 2.1 CONCEPT PHASE: (BASELINE 1) 2.1.1 Safety Classification The PRNM system is classified as a safety related system required to perform the following safety functions:

• Average Power Range Monitor (A PRM) Neutron Flux - High Trip

• APRM Simulated Thermal Power (STP) - High Trip

• APRM Neutron Flux - High (Setdown) Trip

• OPRM Instability (DSS-CD) Trip Equipment within the PRNM system that is needed to perform these functions is safety related. Equipment within the PRNM system that does not perform these functions is non-safety related. See Section 2.1.1 of the System Safety Analysis Report (Reference B.2.3) for the determination of the safety classification of each PRNM subsystem and equipment.

2.1.2 Concept Documentation Evaluation As described in the SyIVVP (Reference B.2.2), th e concept evaluation verifies and validates the concept documentation for correctness, consistency, and completeness. The concept documentation evaluated in this phas e of the project life cycle is:

• White Paper Reactor Protection System (RPS) Mode Switch PRNM Interface H-1-SE-KDI-0135 Volume 002 (Reference B.2.4)

• System Architecture (Reference B.2.5)

• Project Requirements Document (PRD) (Reference B.2.6)

• System Management Plan (SyMP) (Reference B.2.1)

• System Engineering Development Plan (SyEDP) (Reference B.2.7)

• System Independent Verification and Validation Plan (SyIVVP) (Reference B.2.2)

• System Quality Assurance Plan (Reference B.2.8)

• Upgrade Licensing Support Pl an (ULSP) (Reference B.2.9) The System Verification and Validation (SyVV) engineer's evaluation resulted in two anomalies: HC_PRNM-IVVT-1 and HC_PRNM-IVVT-2. HC_PRNM-IVVT-1 identified that the original version of the SyIVVP was inconsistent with the requirements of the controlling GEH procedure. This was resolved with the issuance of Appendix D of NEDC-33864P (Reference B.2.2) which was submitted to the Nuclear Regulatory Commission (NRC) with the Phase 1 submittal. HC_PRNM-IVVT-2 was opened to track the resolutions for the Independent NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-3 Verification and Validation (IVV) comments on the above list of documents. See Attachment A for details.

2.1.3 Traceability Analysis The concept phase is the beginning of the traceability analysis as required per WI-23-310-10 (Reference B.1.2.1) and the SyIVVP (Reference B.2.2) to define the top level requirements for downstream traceability. The traceability analysis for the Hope Creek PRNM was deferred to the next phase because the concept documentation may change as a result of the resolution of review comments depicted in Section 2.1.2 above. Anomaly HC_PRNM-IVVT-3 was opened to track this issue. Please see Attachment A for details.

2.1.4 Security Analysis Security analysis as required per WI-23-310-10 (Reference B.1.2.1) and the SyIVVP (Reference B.2.2) will be performed in the requirements phase and reviewed for Baseline 2. Because the PRNM system meets the security requirements of applicable revision of Regulatory Guide 1.152 (Reference B.3.1.3), the documents in the concept phase would not have changed the PRNM design to cause a negative security analysis. Therefore, it is reasonable to defer the security analysis to the requirements phase to ensure that the requirements are consistent with the security requirements. Anomaly HC_PRNM-IVVT-4 was opened to track this issue. Please see Attachment A for details.

2.2 REQUIREMENTS PHASE: (BASELINE 2) The NUMAC PRNM SyIVVP, (Reference B.2.2) was submitted for Baseline 2 for the Hope Creek PRNM project. This is the docketed version and will be referenced in future baseline

evaluations.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-4 2.2.1 Requirements Documentation Evaluation For the requirements phase, the following documents were reviewed by Independent Verification and Validation Team (IVVT) members: 1- PRNM Requirements Sp ecification (Reference B.2.10). 2- APRM Performance Specification (Reference B.2.11).

3- Rod Block Monitor (RBM) Performance Specification 000N6612 Revision 1.

1 4- RBM Interface (I/F) Module Performance Specification 000N7269 Revision 1.

1 5- 2 out-of 4 Logic Module Performance Specification 000N6427 Revision 1.

1 6- NUMAC Interface Computer (NIC) Performance Specification 001N0645 Revision 1.

1 7- NIC Ethernet Protocol Specification 000N6504 Revision 2.

1 The IVVT review comments were resolved (See Anomaly HC_PRNM-IVVT-5 in Attachment A). The main concerns are list ed in four categories in IVVT review:

Category 1: Inadequate configuration items identification. Category 2: Safety system criteria such as Institute of Electrical and Electronics Engineers (IEEE) Standards 603 and 7.4.3-2 (References B.3.2.1 and B.3.2.2, respectively) are not factored and passed down to requirements documents. Category 3: Gap created as a result of deletion of user manual, Software Management Plan (SMP), data sheet, reference documents.

Category 4: Consistency, testability, verifiability, readability, traceability issues. The Operator Display Assembly (ODA) performance specification was not reviewed because the ODA is not safety related and the de sign has not been changed since 1999.

2.2.2 Traceability Analysis The design team establishes project requirements and their forward and backward traceability, as discussed in the SyEDP (Reference B.2.7). The traceability between system requirement specification and subsystem performance specification for each subsystem was established for Independent Verification and Validation (IVV) review. Most of the system and subsystem requirements are unchanged from previous designs. The IVVT analyzed the traceability as established by the design team, and provided suggestions for improvement. These results are detailed in IVVT review comments. The design team was tasked to determine changes for

1 Unpublished, available for NRC audit on request.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-5 improvement. Because the traceability analysis will be evaluated at each baseline, an anomaly was not recorded as such tr acking would not be necessary.

2.2.3 Security Analysis The requirements for the Hope Creek PRNM are similar to the requirem ents in NEDC-32410P-A (Reference B.2.12, the Licensing Topical Report (LTR)) so no new security concern has been introduced in this life cycle phase.

2.3 DESIGN PHASE: (BASELINE 3) 2.3.1 Design Documentation Evaluation Evaluation of design phase documentation was performed by the IVVT on documents that are applicable to this project. Unchanged legacy documents were not required for evaluation because they were previously approved. Results of the design documentation evaluation have determined that the design phase documentation is adequate to proceed to the implementation phase - no "Blocker" or "Critical" anomalies were identified. All anomalies identified during this review are contained in the Product Data Management System (PDMS) in the IVV review comments (Reference B.2.13). Mutual agreement between the design team and IVVT concluded that the identified anomalies will be corrected as stated in the IVV review comments (Reference B.2.13) during the implementation phase.

The following design (phase 3) documents were evaluated:

• Project Work Plan (PWP) 2 - 000N0889SA Revision 4. *

• System Architecture Description (Reference B.2.5)

• PRNM System Requirements Specifi cation (SyRS) (Reference B.2.10)

• APRM Performance Specification (Reference B.2.11)

• NIC Ethernet Protocol Speci fication - 000N6504, Revision 3. *

• Elementary Diagram - 001N6507SA, Revision 1. *

• APRM Schematic - 001N7959SA, Revision 1. *

• RBM Schematic - 001N7958SA - Revision 1. *

• RBM I/F Schematic - 002N2426SA Revision 0. *

• 2 out-of 4 (2/4) Logic Module Schematic - 001N8889SA Revision 1. *

• APRM Internal Communication Block Specification - 001N8548 Revision 1.

• 2 The PWP is the GEH internal version of the system management plan (Reference B.2.1). The PWP is subject to change in dealing with the daily project activities. However, the SMP remains as the governing document for system management.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-6

• APRM Master Human-Machine Interface (HMI) Design Specification -

001N8549 Revision 1. *

• APRM Slave HMI Design Specification - 001N8551 Revision 1. *

• APRM Master Display SDS - 001N8858 Revision 1. *

• APRM Slave Display SDS - 001N8860 Revision 1. *

• APRM Functional SDS - 002N2038 Revision 1. *

• Stability Automatic Signal Processor (A SP) Communication Pr otocol - 002N2036 Revision 0. *

• RBM HMI Design Specification - 001N8713 Revision 2. *

• RBM Internal Communication Block Specification - 002N2144 Revision 0. *

• RBM Functional SDS - 001N9273 Revision 0. *

• RBM Display SDS - 001N9297 Revision 1. *

• APRM ODA Display SDS - 002N2196 Revision 0. *

• APRM ODA HMI Design Specification - 002N2195 Revision 0. *

• RBM ODA Display SDS - 002N2678 Revision 0. *

• RBM ODA HMI Design Specifi cation - 002N2677 Revision 0. *

• NIC SDS - 001N7700 Revision 1. *

• Fiber Direct Data Interface (FDDI) Communication Protocol Specification -

001N8085 Revision 1*

• GE Data Acquisition & Communication (GEDAC) Communication Protocol Specification - 001N1596 Revision 1*

• Previously Developed Software (PDS) Evaluation (Summary of Peach Bottom DSS-CD) - 002N3593 Revision 0*

• PDS Evaluation (Preliminary safety-related software changes for Hope Creek) -

DOC-0003-9154 Revision 0*

• Unpublished, available for NRC audit on request.

2.3.2 Traceability Analysis The design team establishes project requirements and traceability, as discussed in the SyEDP (Reference B.2.7). The design team applied Dynamic Object-Oriented Requirements (DOORS) to establish traceability between requirement specification documents and system, subsystem, and hardware component designs. Most of the de sign is essentially unchanged from the previous project (Peach Bottom PRNM), with the changes only at the interface between PRNM and the plant systems. Applying a previously evaluated design has inherent traceability NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-7 characteristics. Therefore, a thread audit on a sample basis will be applied to perform the traceability analysis to confirm the forward and backward traceability established by the design team. Issue HC_PRNM-IVVT-9 was created in Attachment A to track this issue.

2.3.3 Security Analysis The IVVT analyzed the applicable design documentation to confirm that design features intended to maintain a secure operating environment and ensure reliable system operation have been correctly incorporated into the design. Design features intended to maintain a secure operating environment and ensure reliable system operation have been correctly incorporated. However, some traceability issues were identified as shown below that need to be addressed. Anomaly HC_PRNM-IVVT-10 was opened to track this issue.

Design Specification 3 Missing DOORS traceability to: 001N0645 (NIC) SyRS (511) requirement. 001N1596 (GEDAC) SyRS (511) requirement. 001N8858 (APRM Display SDS) SyRS (509) and (511) requirements.

002N2036 (ASP Stability Communication Block) SyRS (510) requirement. No unwanted or unnecessary design features have been introduced.

2.3.4 Safety Analysis Refer to the Hope Creek PRNM System Safe ty Analysis (SySA) Report (Reference B.2.3).

2.3.5 Independent V&V Test Plans The following Verification and Validation (V&V) test plans have been created under the supervision of the Chief Engineer's Office:

• IVV software module test plan (Reference B.2.14)

• IVV integration test plan (Reference B.2.15)

• IVV subsystem validation test plan (Reference B.2.16)

• IVV system validation test plan (Reference B.2.17)

• IVV Factory Acceptance Test (FAT) plan (Reference B.2.18) 2.3.6 Qualification Plans Refer to the Hope Creek PRNM qualification program (Reference B.2.19).

2.4 IMPLEMENTATION PHASE: (BASELINE 4)

3 Unpublished, available for NRC audit on request.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-8 [[

]] 2.4.1 Implementation Documentation Evaluation Evaluation of implementation phase documentation was performed by the IVV team on all documents released by the design team during this phase of development, such as drawings, code review reports, build descriptions, test item transmittal reports and documents that changed since the last baseline review. This evaluation also focused on anomalies id entified during the prior baseline review (HC_PRNM-IVVT-3 through 7 in Attachment A) to verify that all open anomalies were properly closed and corrected as agreed upon during the design documentation evaluation. All comments and resolutions associated with documen ts evaluated by the IVVT are contained in the PDMS (Reference B.2.20). Results of the implementation documentation evaluation have determined that the implementation phase documentation is adequate to proceed to the test phase - no "Blocker" or "Critical" anomalies remain open. Comments associated with the PWP document remain open and are considered "Trivial". Anomaly HC_PRNM-IVVT-13 was created in Attachment A to track this open item. The following documents were evaluated during this implementation phase:

Document Name Document Number (1) Revisions Reviewed PWP 000N0889SA 4, 5 PRNM SyRS 26A8742SA (2) 3 APRM Performance Specification 000N6426 (3) 3 2/4 Logic Module Performance Specification 000N6427 2,3,4 RBM Performance Specification 000N6612 2 RBM I/F Performance Specification 000N7269 2 NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-9 Document Name Document Number (1) Revisions Reviewed NIC Performance Specification 001N0645 2,3,4 NIC Ethernet Protocol Specification 000N6504 3, 4, 5, 6 Elementary Diagram 001N6507SA 1, 2 APRM Schematic 001N7959SA 1, 2 RBM Schematic 001N7958SA 2 RBM I/F Schematic 002N2426SA 1, 2 2/4 Logic Module Schematic 001N8889SA 2, 3 Routing/Connection Diagram 001N8819SA 1 APRM Internal Communication Block Specification 001N8548 1,2 APRM Master HMI Design Specification 001N8549 1, 2 APRM Slave HMI Design Specification 001N8551 1, 2 APRM Master Display SDS 001N8858 1, 2 APRM Slave Display SDS 001N8860 1, 2 APRM Functional SDS 002N2038 1, 2, 3, 4 RBM HMI Design Specification 001N8713 2, 3, 4, 5, 6, 7 RBM Internal Communication Block Specification 002N2144 1 RBM Functional SDS 001N9273 1 RBM Display SDS 001N9297 1, 2, 3, 4 APRM ODA Display SDS 002N2196 1 APRM ODA HMI Design Specification 002N2195 1 RBM ODA Display SDS 002N2678 1, 2 RBM ODA HMI Design Specification 002N2677 1, 2 NIC SDS 001N7700 1, 2 FDDI Communication Protocol Specification 001N8085 1, 2 GEDAC Communication Protocol Specification 001N1596 1, 2, 3 APRM Functional Software Code Review Report 002N6396 0 APRM Functional Software Module Test Report 002N6397 0 APRM Functional Software Integration Test Report DBR-0007378 0 APRM Functional Software Build Release Description 002N7361 0 APRM Functional Software Test Item Transmittal Report 002N7362 0 APRM FUNCODE 002N7363 0 APRM Display Software Code Review Report 002N7364 0 APRM Display Software Module Test Report 002N7365 0 APRM Display Software Integration Test Report DBR-0009922 0 APRM Display Software Build Release Description 002N7621 0 APRM Display Software Test Item Transmittal Report 002N7622 0 APRM ODA Software Code Review Report 002N7624 0 NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-10 Document Name Document Number (1) Revisions Reviewed APRM ODA Software Module Test Report 002N7625 0 APRM ODA Software Integration Test Report DBR-0010372 0 APRM ODA Software Build Release Description 002N7512 0 APRM ODA Software Test Item Transmittal Report 002N7526 0 RBM Functional Software Code Review Report 002N7514 0 RBM Functional Software Module Test Report 002N7515 0 RBM Functional Software Integration Test Report DBR-0010225 0 RBM Functional Software Build Release Description 002N8222 0 RBM Functional Software Test Item Transmittal Report 002N8223 0 RBM Display Software Code Review Report 002N8225 1 RBM Display Software Module Test Report 002N8226 0 RBM Display Software Integration Test Report DBR-0011045 1 RBM Display Software Build Release Description 002N8227 1 RBM Display Software Test Item Transmittal Report 002N8228 1 RBM ODA Software Code Review Report 002N8230 1 RBM ODA Software Module Test Report 002N8231 0 RBM ODA Software Integration Test Report 002N6396 1 RBM ODA Software Build Release Description 002N6397 1 RBM ODA Software Test Item Transmittal Report DBR-0007378 1 NIC Software Code Review Report 002N7728 1 NIC Software Module Test Report 002N2855 0 NIC Software Integration Test Report 002N2858 1 NIC Software Build Release Description 002N8346 1 NIC Software Test Item Transmittal Report 002N2859 1 (1) Unpublished, available for NRC audit on request. (2) Published as NEDC-33864P, Appendix F (Part 1).

(3) Published as NEDC-33864P, Appendix F (Part 2).

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-11 2.4.2 Independent V&V Test Procedures The IVVT created test cases and procedures to specify the test conditions, inputs to, and expected outputs from the test object being tested. Test procedures specify the steps for executing a set of test cases and define the acceptance criteria in order to evaluate the features being tested. The IVV test cases and procedures created were:

Document Name PLM Location

• Revision Hope Creek IVV Module Test Procedure 002N7588 0 Hope Creek APRM Integration Test Cases and Procedures 002N5941 0 APRM Master Subsystem Validation Test Procedure 002N5541 1 APRM Slave Subsystem Validation Test Procedure 002N5785 1 APRM ODA Subsystem Validation Test Procedure 002N5826 0 RBM Validation Test Procedure 002N5854 0 Hope Creek RBM ODA Validation Test Procedure 002N6134 0 2 Out of 4 Logic Module Validation Test Procedure 002N5432 0 Hope Creek PRNM System NIC Subsystem Validation Test Procedure 002N7255 0 Hope Creek PRNM System Validation Test Procedure 002N5897 0 Hope Creek PRNM FAT Procedure 002N7269 B Hope Creek PRNM System Qualification Summary Report 002N9894 A

• Unpublished, available for NRC audit on request. Note that the FAT procedure and the qualification summary report were released as a draft revision for customer review and feedback. Revision 0 of these documents will be released once customer comments are incorporated.

2.4.3 Qualification Summary Report The Qualification Summary Report (Reference B.2.21) was created during this implementation phase. Revision 0 will be created and released prior to project closure to incorporate customer comments.

2.4.4 Traceability Analysis The design team establishes project requirements and traceability, as discussed in the SyEDP (Reference B.2.7) for each baseline. The design team did establish traceability matrices between requirement specification documents and system, subsystem, and hardware component designs in DOORS and also in system and subsystem documentation. The IVV engineer selected random requirements throughout DOORS-generated reports and traceability matrix tables in system and subsystem documents to verify forward and backward traceability. No anomalies were discovered. Approximately 20% of the requirements in each DOORS-generated report and system and subsystem documents were in cluded in the review.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-12 A deliverable for this implementation phase is a compliance matrix. The completion of the compliance matrix is an open item and needs to be completed to show customer requirement traceability. Anomaly HC_PRNM-IVVT-14 was created in Attachment A to track this open item. Anomaly HC_PRNM-IVVT-14 has been clos ed after the creation of this anomaly and prior to the baseline review closeout meeting.

2.4.5 Security Analysis The IVV security engineer reviewed the design team's resolutions to security analysis comments from Baseline 3 (Refer to Attachment A, HC_PRNM-IVVT-10) and performed the Baseline 4 security analysis per Sect ion 3.4 of Reference B.2.22. A summary of the security analysis is as follows:

1- The design team addressed all security related comments from Baseline 3 (Attachment A, HC_PRNM-IVVT-10).

2- Requirements traceability was established for all security requirements.

3- Coding conventions were followed and the IVVT reviewed all deliverables for compliance.

4- Code static and dynamic vulnerability analyses were performed by the design team using

[[

]]. All vulnerabilities discovered were addressed. The output documents were reviewed by the IVVT for compliance.

5- [[

]]

Conclusion:

No security vulnerabilities were identified.

2.4.6 Safety Analysis Refer to the Hope Creek PRNM SySA report (Reference B.2.3).

2.4.7 Source Code Inspection

[[

]] was inspected and analyzed to confirm that the safety functions are correctly implemented in the code in a manner that doe s not adversely affect safety. Focus was placed on coding practices, implementati on of security features in the source code, and implementation of non-safety related functions in the source code to ensure no adverse effect on safety. Results of the evaluation concluded that the source code is implemented in accordance with its design specification.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-13 2.5 TEST PHASE: (BASELINE 5) 2.5.1 Test Phase Documentation Evaluation of user documentation was performed to confirm that documentation will adequately support the safe operation and proper maintenance of the PSEG PRNM product. User manuals were used in conjunction with all independent validation testing and only the NIC Installation Guide and User Manual was found to need a documentation revision. Reviews of previously released documents that have been revised since the last baseline were also evaluated during this testing phase for correctness, consistency, and completeness. IVV test procedures included below were revised after the last baseline review.

The following documents were eval uated during the testing phase:

Document Name Document Number* Revisions ReviewedPWP 000N0889SA 6 Hope Creek PRNM Software Module Test Plan 002N2707 1 NIC Ethernet Protocol Specification 000N6504 7 PRNM System Requirement Specification 26A8742SA 4 APRM DSS-CD Performance Specification 000N6426 6 RBM Performance Specification 000N6612 3 Elementary Diagram 001N6507SA 3, 4 2/4 Logic Module Schematic 001N8889SA 3,4 APRM Schematic 001N7959SA 3 RBM Schematic 001N7958SA 3 RBM ODA Display Assembly Schematic Diagram 107E5886 2 NIC Installation Guide and User Manual 002N2881 1, 2 APRM Functional Software Code Review Report 002N6392 1 APRM Functional Software Module Test Report 002N6393 1 APRM Functional Software Integration Test Report 002N6395 1 APRM Functional Software Build Release Description 002N6396 1 APRM Functional Software Test Item Transmittal Report 002N6397 1 RBM Functional Software Code Review Report 002N8222 1 RBM Functional Software Module Test Report 002N8223 1 RBM Functional Software Integration Test Report 002N8224 1 RBM Functional Software Build Release Description 002N8225 1 RBM Functional Software Test Item Transmittal Report 002N8226 1 RBM ODA Functional Software Code Review Report 002N8222 2 RBM ODA Functional Software Integration Test Report 002N8224 2 RBM ODA Functional Software Build Release Description 002N8225 2 RBM ODA Functional Software Test Item Transmittal Report 002N8226 2 IVV APRM Integration Test Cases and Procedures 002N5941 2 NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-14 Document Name Document Number* Revisions ReviewedAPRM (Master) Subsystem Validation Test Procedure 002N5541 2 APRM (Slave) Subsystem Validation Test Procedure 002N5785 2 APRM ODA Subsystem Validation Test Procedure 002N5826 1 RBM Subsystem Validation Test Procedure 002N5854 1 NIC Subsystem Test Procedure 002N7255 1 2/4 Logic Module Subsystem Validation Test Procedure 002N5432 1 PRNM System Validation Test Procedure 002N5897 1 PRNM Factory Acceptance Test Procedure 002N7269 B, 0 APRM Master User Manual 002N8903 0 APRM Slave User Manual 002N8904 0 APRM ODA User Manual 002N9190 0 RBM User Manual 002N8985 0 RBM ODA User Manual 002N8986 0 NIC User Manual 002N2881 2

• Unpublished, available for NRC audit on request. No open issues exist from the review of these documents. The GEK was reviewed by the IVV engineer to confirm that all instrument schematic diagrams and performance specifications referenced throughout the GEK have been reviewed by the IVVT. No open issues exist from the review of this document.

2.5.2 Traceability Analysis Requirements associated with changes in documents identified in Section 2.5.1 have been evaluated to confirm forward and backward traceability of changes are complete and accurate. The traceability process established during the prior baseline was repeated by selectively choosing random requirements throughout DOORS-generated reports and traceability matrix tables in system and subsystem documents to verify forward and backward traceability. No anomalies were discovered. Approximately 35% of the requirements in each DOORS-generated report, system, and subsystem documen ts were included in the review. The compliance matrix created during the prior baseline was revised to update the independent validation testing column that identify where each customer requirement was validated by the IVVT. This compliance matrix uses a DOORS-generated report that identifies all customer requirements in the H-1-SE-KDS-0494 Revision 2 document and then adds a column for IVV testing to trace sections in the independent validation test procedures to the customer requirement document (H-1-SE-KDS-0494 Revision 2). The GEH responses to the Hope Creek cyber security requirements were revised to update the independent validation testing column that identifies where each cyber security requirement was NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-15 validated during IVV testing. The revised GE H responses to H-1-ZZ-KDS-512 are traceable in DOORS and Reference B.2.25.

2.5.3 Design Changes of 386SX CPU Module and PLD4 changes

[[

]] Design documentation that changed as a result of the CPU module and PLD correction are included in Section 2.5.1. The following documenta tion was created for the design changes to the CPU module: Document Name Document Number* Revisions ReviewedPLD4 Design Analysis DBR-0013981 1 CPU Module Schematic Drawing 105E1359 6 CPU Module PLD4 Component Validation Test Plan 003N4079 0 PLD4 CPU22 Simulation DBR-0014494 0 PLD4 Hardware (HW) Chip Test DBR-0014558 0 PLD4 HW Integration Test DBR-0014524 0 386SX Module PLD4 Build Description DBR-0016243 0 CPU Module PLD4 Modification Test Item Transmittal Report (TITR) DBR-0016194 0 CPU Module PLD4 Test Procedure 003N3598 0 CPU Module PLD4 Component Validation Test Report 003N4079 0 CPU Module Modify from 178B3777G002 to 178B3777G003 003N3041 1 PLD4 CPU, JED Program 003N1391 1 Regression Test Scope for Validation Tests after CPU Module PLD4 Modification DBR-0016637 0

• Unpublished, available for NRC audit on request.

[[

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-16

]] 2.5.4 Independent V&V Testing IVV testing is performed in a layered approach, consisting of module testing of the smallest testable units, then integrating those units into larger testable units, and then testing the integrated units at the instrument (or subsystem) level. Validation testing is performed on each NUMAC instrument (or subsystem) and on the fully integrated system to ensure the system meets all specified requirements. Results of IVV testing are documented in IVV test reports (see Section 2.5.6). When IVV testing reveals anomalies that require changes to th e design regression testing of appropriate scope will be performed to confirm the acceptability of the changes. Test procedure(s) may be revised for the design changes. The approach to regression testing, if required, will be documented in the applicable V&V test report (see Section 2.5.6). This IVV testing includes the following:

• APRM software module testing (A PRM functional unit testing)

• Programmable logic module testing (PLD4 unit testing)

• APRM subsystem integration testing

• Subsystem validation testing o APRM (Master) o APRM (Slave) o APRM ODA o RBM o RBM ODA o NIC o 2/4 Logic Module

• System validation testing

• Factory acceptance testing 2.5.5 Qualification Summary Report The qualification summary report (Reference B.2.21) was revised and released after incorporation of PSEG comments.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-17 2.5.6 Independent Validation Test Reports The independent validation test reports prepared by the IVVT document the results of IVV testing at each level. The independent validation test reports document the V&V test results and are traceable to the V&V test procedures produced in the previous life cycle phase. The independent validation test reports created at each le vel of testing include:

Document Name Document Number* APRM Functional Controller Software IVV Module Test Summary Report 003N0389 R0 APRM Subsystem IVV Integration Test Summary Report 003N1003 R0 APRM Subsystem Validation Test Report 1 003N1973 R0, R1, & R2 RBM and RBM ODA Validation Test Report 2 003N2289 R0 & R1 NIC Validation Test Report 003N3394 R0 2/4 Logic Module Validation Test Report 003N2152 R0 System Validation Test Report 003N3299 R0 FAT Report 003N4961 R0 CPU Module PLD4 Component Validation Test Report 003N4079 R0 Notes: [[

]]

• Unpublished, available for NRC audit on request.

[[

]]

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-18 2.5.7 Security Analysis The IVV security engineer performed the Baseline 5 security analysis per Section 3.5 of the cyber security plan (Reference B.2.22). Testing was performed to confirm that subsystem and system software and hardware security design features are correctly configured and enabled, the product does not contain unauthorized pathways (i.e., open ports) and services, and is free from known vulnerabilities.

PRNM System:

[[

]] NIC: [[

]] NIC Open Ports and Services:

[[

]] NIC Vulnerability Assessment:

[[

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-19

]]

Conclusion:

The security design features of the PRNM system and the NIC have successfully passed testing and no new security risks have been introduced.

2.5.8 Safety Analysis Refer to the Hope Creek PRNM SySA Report (Reference B.2.3).

2.5.9 V&V Test Summary Report The V&V test summary report summarizes the results of all IVV testing documented in individual independent validation test reports at the various levels. The report also includes a discussion of the unstructured testing performed by the design team. Refer to Reference B.2.2.3 for details of all IVV testing and unstructured testing. The conclusion of the V&V activities, as indicated in the V&V Test Summary Report, is that the PRNM software is ready for use in the

Hope Creek PRNM application.

2.6 COMMON TO ALL PHAS ES: (ANY BASELINE)

See description within each baseline evaluation.

2.6.1 Tool Evaluation Approvals Tools that were used by the design team for this project have been evaluated per WI-23-301-12 (Reference B.1.2.3). The copies of the tool ev aluation reports are archived in the PDMS.

The following tools will be used by the design team and during V&V testing for this project. They have been reviewed and approved for their intended application, including ability to perform V&V activities if so designated:

1) JIRA 2) ASP Motorola Tools Suite

3) Expect 4) Intel In-Circuit Emulator ICE_386 Tools

5) iSystem Z80180 CPU Emulation Tools

6) Jenkins Automated Build

7) Model HP 64110A Tools

8) NIC Development Tools

9) Parasoft C++ test

10) Softool Development Tools Suite NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-20 11) VAX_VMS_386 Tool Suite

12) VAX VMS PLM86 Development Tools

13) PRNM Simulator

14) Cyber OpenVAS

15) Cyber Zenmap

16) Hostsim 17) MVDNIC Comm Test Tool Datalogger

18) MVDNIC Comm Test Tool Testme

19) Deleted 20) Read Sample Data

21) PRNM Simulator Tool Report

22) DOORS 23) Galep 24) WinCUPL 25) ModelSim 2.6.2 Licensing Material Approvals The following documents were provided to Hope Creek:

1) NEDC-33864P Revision 0.

2) NEDO-33864 Revision 0.

2.6.3 Other Activities None NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-21 3

SUMMARY

AND CONCLUSION The development and testing of the Hope Creek PRNM system, including hardware and software, was completed and it has been concluded that no open testing issues exist, and that the software is approved for use in th e Hope Creek PRNM application.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-22 ATTACHMENT A - ANOMALIES Anomaly ID Priority 1 Summary Description Status HC_PRNM-IVVT-1 Critical Numerous discrepancies exist between the "Hope Creek, NUMAC PRNM System Independent V&V Plan" SyIVVP, Legacy DRF Section 0000-0161-9341, Revision 0 (Reference B.2.2), WI-23-309-10, Revision 1.0 and WI-23-310-10, Revision 1.0. (References B.1.2.4 and B.1.2.1, respectively).

Resolution: The SyIVVP document was changed to 001N6199. Note: 001N6199 is the input document for NEDE-33835P, Revision 0 (R eference B.2.25) that was submitted to the NRC as the system IVV plan.

Closed HC_PRNM-IVVT-2 Critical The SyVV engineer's evaluation comments on the following documents were provided to the development team for resolution.

1. White Paper RPS Mode Switch PRNM Interface H-1-SE-KDI-0135 Volume 002, Legacy DRF 0000-

0165-6906, Revision 0.

Resolution:

Mode switch testing not needed during FAT. This is a plant modification and should be tested during the SAT if the customer desires. 2. System Architecture, Legacy DRF Section 0000-0163-9982, Revision 0.

Resolution: Document changed and released as 001N2029. See DOC-0002-2970 for comments. 3. PRD, Legacy DRF Section 0000-0164-5321, Revision 0 4. PWP, Legacy DRF Section 0000-0156-4628, Revision 0.

Resolution: Document changed and released as 000N0889SA. See DOC-0002-2970 for comments. 5. SyEDP, Legacy DRF Section 0000-0161-9340, Revision 0.

Resolution: Document changed and released as 001N6198. 6. SyIVVP, Legacy DRF Section 0000-0161-9341, Revision 0.

Closed

1.Closed

2.Closed 3.Closed

4.Closed

5.Closed

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-23 Anomaly ID Priority 1 Summary Description Status Resolution: Document changed and released as 001N6199. 7. System Quality Assurance Plan, Legacy DRF Section 0000-0161-9342, Revision 0.

Resolution: Document changed and released as 001N6201. 8. ULSP, Leacy DRF Section 0000-0156-4641, Revision 0 NOTE: All comments provided are stored under the same Legacy DRF Section as this report:

0000-0165-9450.

6.Closed

7.Closed 8.Closed HC_PRNM-IVVT-3 Critical Traceability analysis as required per WI-23-310-10 and the SyIVVP (Reference B.2.2) deferred to the next phase due to the fact that the concept documentation may change as a result of the resolution of review comments. This anomaly is opened to track this issue.

Resolution: Performed traceability analysis during the requirements phase.

Closed HC_PRNM-IVVT-4 Critical Security analysis as required per WI-23-310-10 and the SyIVVP (Reference B.2.2) is deferred to the requirements phase because the documents in the concept phase would not have changed the PRNM design to cause a negative security analysis. This anomaly is opened to track this issue.

Resolution: Completed the security analysis; refer to Section 2.2.3.

Closed HC_PRNM-IVVT-5 Critical IVVT's comments for the Hope Creek PRNM project requirements phase are stored in DOC-0002-2970

Revision 0.

Resolution: Revise documents as agreed (DOC-0002-2970 Revision 0).

Closed HC_PRNM-IVVT-6 Critical 26A8742SA Revision 2 IV&V evaluation in process.

Resolution: Document changed and released as Revision 3. See DOC-0002-2970 for comments.

Closed HC_PRNM-IVVT-7 Critical 000N6426 Revision 2 IV&V evaluation in process.

Resolution: Document changed and released as Revision 3. See DOC-0002-2970 for comments.

Closed NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-24 Anomaly ID Priority 1 Summary Description Status HC_PRNM-IVVT-8 Critical The design documentati on review identified issues during the evaluation process and all comments and

resolutions are stored in DOC-0002-2970 Revision 2.

Resolution: All comments from the design documentation review have been closed during the implementation phase documentation review Closed HC_PRNM-IVVT-9 Critical A thread audit of the Requirements Traceability Matrix (RTM) created by the design team is to be performed to confirm forward and ba ckward traceability.

Resolution: A matrix of the results is stored in DOORS and is available for NRC audit on request.

Closed HC_PRNM-IVVT-10 Critical The security analysis identified the following four traceability issues: Design Specification:

Missing DOORS traceability to: 001N0645 (NIC) SyRS (511) requirement. 001N1596 (GEDAC) SyRS (511) requirement.

001N8858 (APRM

Display SDS)

SyRS (509) and (511) requirements.

002N2036 (ASP

Stability

Communication Block) SyRS (510) requirement.

Resolution: Closed per the security analysis completed as detailed in Section 2.4.5.

Closed HC_PRNM-IVVT-11 Critical The PLD in the 386 CPU needs to be modified to correct the error found in resolving reset issues.

Resolution:

The PLD was changed and all testing completed successfully, Refer to Section 2.5.3 for

details. Closed HC_PRNM-IVVT-12 Critical Need to address customer comments related to cyber security during the FAT.

Resolution:

Section 7.1 was added to the FAT to test ports on the NIC and the GEH responses have been updated and sent to PSEG.

All tests in this section were performed during the FAT without any pending open items. The port testing defined in this section was completed and no further action is required.

Closed NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-25 Anomaly ID Priority 1 Summary Description Status HC_PRNM-IVVT-13 Trivial Non-technical editorial type comments associated with the PWP remain open. Refer to the IVV Hope Creek Detailed Design Review (DDR) document review

comments and resolutions.

Resolution: The PWP was revised to Revision 6 to address the comments.

Closed HC_PRNM-IVVT-14 Minor Complete the implementation phase compliance matrix.

Resolution: Completed compliance matrix.

Closed Note 1 Priority of anomalies is defined as follows:

• Blocker - highest priority representing unacceptably high project risk: project cannot be authorized to continue into the next life cycle phase until resolved.

• Critical - high priority representing significant project risk: project may continue into the next life cycle phase without immediate resolution, but has the potential to prevent the project from proceeding at some point in the life cycle unless resolved. If left unresolved, a 'Critical' anomaly will eventually be elevated to 'Blocker' priority level.

• Minor - low priority representing moderate project risk: project may proceed with caution but the anomaly should be resolved or dispositioned before the completion of the project.

• Trivial - lowest priority representing little or no project risk: usually reserved for administrative issues such as typographical or other clerical errors that should be rectified.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-26 ATTACHMENT B - REFERENCES B.1 APPLICABLE GEH PROCEDURES B.1.1 COMMON PROCEDURES (CP)

1. CP-23-310, Digital I&C System Verification and Validation

• B.1.2 WORK INSTRUCTIONS

1. WI-23-310-10, System Verification and Validation Task Reporting *

2. WI-23-310-10-T01, System Verification and Validation Task Reporting Template *

3. WI-23-301-12 Tool Evaluations *

4. WI-23-309-10, System Safety Analysis Task Reporting

• B.2 PROJECT DOCUMENTS

1. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix E, "Hope Creek NUMAC System Management Plan," NEDC-33864P, Revision 0, September 2015.

2. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix D, "NUMAC Systems Independent Verification and Valid ation," NEDC-33864P, Revision 0, September 2015.

3. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade Phase 2," Appendix A, "HCGS PRNM Safety Analysis Task Report," NEDC-33872P, Revision 5, June 2016.

4. White Paper RPS Mode Switch PRNM Interface H-1-SE-KDI-0135 Volume 002, Legacy DRF 0000-0165-6906 Revision 0. *

5. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix A, "PRNM Systems Architecture Description," NEDC-33864P, Revision 0, September 2015.

6. PRD, Legacy DRF Section 0000-0164-5321 Revision 0. *

7. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix B, "NUMAC Systems Engineering Development Plan," NEDC-33864P, Revision 0, September 2015.

8. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix C, "NUMAC Systems Quality Assurance Plan," NEDC-33864P, Revision 0, September 2015.

9. ULSP, Legacy DRF Section 0000-0156-4641 Revision 0.

• NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-27 10. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix F, Part 1, "NUMAC PRNM System Requirements Specification," NEDC-33864P, Revision 0, September 2015.

11. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix F, Part 2, "NUMAC APRM DSS-CD Performance Specification,"," NEDC-33864P, Revision 0, September 2015.

12. GE Nuclear Energy, "Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC PRNM) Retrofit Plus Option III Stability Trip Function," NEDC 32410P A Volume 1, October 1995.

13. IVV Review Commen ts, Revision 1 *

14. IVV Software Module Test Plan, 002N2707 Revision 0. *

15. IVV Integration Test Plan, 002N4394 Revision 0. *

16. IVV Subsystem Validation Te st Plan, 002N2267 Revision 0. *

17. IVV System Validation Test Plan, 001N8530 Revision 0. *

18. IVV FAT Plan, 001N9191 Revision 0. *

19. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix H, "NUMAC Qualification Program HCGS," NEDC-33864P, Revision 0, September 2015.

20. IVV Review Comments, Revision 2. *

21. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade Phase 2," Appendix F, "NUMAC PRNM Qualification Summary Report," NEDC-33872P, Revision 0, June 2016.

22. NUMAC Systems Cyber Security Plan, 002N2752 Revision 0. *

23. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade Phase 2," Appendix D, "Verification and Validation Test Summary Report," NEDC-33872P, Revision 0, June 2016.

24. GEH, "Hope Creek 494 Repor t," Revision 1, March 2016.

25. GEH Responses to Hope Creek docum ent H-1-ZZ-KDS-0512, 003N5438 Revision 0. *

26.

• Unpublished, available for NRC audit. B.3 OTHER REFERENCES B.3.1 REGULATORY DOCUMENTS 1. NRC DI&C-ISG-06, "Licensi ng Process," January 19, 2011.

NEDO-33872 Appendix B (001N5721.05) Non-Proprietary Information - Class I (Public)

B-28 2. NUREG-0800 Branch Technical Position (BTP) 7-14 Section B.3.2.3, "Guidance on Software Reviews for Digital Computer-Based Instrumentation and Control Systems,"

Revision 5, March 2007. 3. NRC Regulatory Guide 1.152, "Criteria for Use of Computers in Safety Systems of Nuclear Power Plants," Revision 3, July 2011. B.3.2 INDUSTRIAL CO DES AND STANDARDS

1. IEEE Standard 603, "IEEE Standard Criteria for Safety Systems for Nuclear Power Generating Stations," 1991.

2. IEEE Standard 7.4.3-2, "IEEE Standard Criteria for Programmable Digital Devices in Safety Systems of Nuclear Powe r Generating Stations."

NEDO-33872 Revision 0 August 2016 Non-Proprietary Information - Class I (Public)

Appendix C PLM Source Record 001N5886.04 HCGS PRNM System Configuration Ma nagement Task Report

Copyright 2014, 2015, 2016 GE Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-ii Information Notice This is a non-proprietary version of the document NEDC-33872P Appendix C, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

IMPORTANT NOTICE REGARDING THE CONTENTS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the U.S. Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-iii Revision Summary Revision Revision Description 0 Initial Issue (Baseline 2) 1 1 Revised for Baseline 3 2 Revised for Baseline 4 3 Editorial changes for external distribution 4 Revised for Baseline 5

1 The SyCM Task Report for Baseline 1 is located in Legacy DRF 0000-0165-9441.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-iv Table of Contents ACRONYMS AND ABBREVIATIONS ...................................................................................... V

1. INTRODUCTION ................................................................................................................... 1 1.1 Purpose ........................................................................................................................ 1 1.2 Scope .........................................................................................................................

... 1 1.3 References ....................................................................................................................

1 2. SYSTEM CONFIGURATION MANAGEMENT ACTIVITIES ........................................... 2 2.1 Concept Phase: (Baseline 1) ........................................................................................ 2 2.2 Requirements Phase: (Baseline 2) ............................................................................... 2 2.3 Design Phase: (Baseline 3) .......................................................................................... 2 2.4 Implementation Phase: (Baseline 4) ............................................................................ 3 2.5 Test Phase: (Baseline 5) ............................................................................................... 3 2.6 Differences from Columbia Generating Station PRNM .............................................. 4

3.

SUMMARY

AND CONCLUSION ........................................................................................ 5 3.1 As Designed Configuration ......................................................................................... 5 3.2 As Built Configuration ................................................................................................ 5 3.3 As Installed Configuration ........................................................................................... 5 ATTACHMENT A - ANOMALIES.............................................................................................. 6 ATTACHMENT B - REFERENCES ............................................................................................ 7 ATTACHMENT C SYSTEM CONFIGURATION MANAGEMENT STATUS ACCOUNTING SPREADSHEET ................................................................................................. 9

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-v ACRONYMS AND ABBREVIATIONS Term Definition APRM Average Power Range Monitor ASP Automatic Signal Processor BOM Bill of Material BTP Branch Technical Position CDR Conceptual Design Review CGS Columbia Generating Station CPU Central Processing Unit DDR Detailed Design Review DI&C Digital Instrumentation & Controls DMA Direct Memory Access DSS-CD Detect and Suppress Solution - Confirmation Density DVR Design Validation Review EPROM Erasable Programmable Read-Only Memory FAT Factory Acceptance Test FDDI Field Deviati on Disposition Request FMEA Failure Mode Effects Analysis GEDAC General Electric Data Acquisition and Communication GEH GE-Hitachi Nuclear Energy Americas LLC GEIO GE Input Output HMI Human Machine Interface ICD Interface Control Drawing ID Identification ISG Interim Staff Guidance IVV Independent Verification and Validation LTR Licensing Topical Report NIC NUMAC Interface Computer NRC Nuclear Regulatory Commission NUMAC Nuclear Measurement Analysis and Control ODA Operator Display Assembly PDR Preliminary Design Review PDS Previously Developed Software PLD Programmable Logic Device PRNM Power Range Neutron Monitor NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-vi Term Definition PRR Product Requirements Review PSEG Public Service Enterprise Group PWP Project Work Plan QA Quality Assurance RBM Rod Block Monitor RTM Requirements Traceability Matrix SDS System Design Specification SyCM System Configuration Management SyEDP Systems Engineering Development Plan, (NEDC-33864P, Appendix B) SyIVV System Independent Verification and Validation SyIVVP System Independent Verification and Validation Plan, (NEDC-33864P, Appendix D) SyMP System Management Plan, (NEDC-33864P, Appendix E) SyQA System Quality Assurance SyQAP System Quality Assurance Plan, (NEDC-33864P, Appendix C) SyRS System Requirements Specification SySA System Safety Analysis TDR Technical Design Review TITR Test Item Transmittal Report ULSP Upgrade Licensing Support Plan V&V Verification and Validation

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-1 1. INTRODUCTION 1.1 PURPOSE GE Hitachi Nuclear Energy (GEH) is contracted by Public Service Enterprise Group (PSEG) Nuclear LLC (the Customer) to deliver a Nuclear Measurement Analysis and Control (NUMAC) Power Range Neutron Monitoring (PRNM) System with Detect and Suppress Solution - Confirmation Density (DSS-CD) stability solution for the Hope Creek Generating Station. The project goals and project management aspects of the project are discussed in the System Management Plan (SyMP, Reference B.2.1). The System Engineering Development Plan (SyEDP, Reference B.2.2) supports the SyMP, and is used in conjunction with the System Independent Verification and Validation Plan (SyIVVP, Reference B.2.3) and the System Quality Assurance Plan (SyQAP, Reference B.2.4). This System Configuration Management Task Report is prepared in accordance with the SyEDP and WI-23-311-10 (Reference B.1.4). This Configuration Management Task Report may be used to fulfill the requirements of DI&C-ISG-06 Enclosure B Item 2.3 (Reference B.3.1.1) which in turn fulfills NUREG-0800 Branch Technical Position (BTP) 7-14 Section B.3.2.3 (Reference B.3.1.2). The System Configuration Management Status Accounting spreadsheet (Attachment C), addresses the DI&C-ISG-06 document submittal requirements related to the design, manufacturing, testing and validation of the Hope Creek PRNM system.

1.2 SCOPE The System Configuration Management Task Report summarizes the configuration management activities performed during each phase of the project as described in the SyEDP (Reference B.2.2). The System Configuration Management Task Report also documents the results and conclusions reached, including any anomalies and associated resolutions. The information in this report is used to establish the configuration of the design at the end of each life cycle phase.

1.3 REFERENCES

See Attachment B.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-2 2. SYSTEM CONFIGURATION MANAGEMENT ACTIVITIES 2.1 CONCEPT PHASE: (BASELINE 1) Attachment C 2 provides the identification and revision level of the configurable items that constitute Baseline 1. These items include the System Management Plan (SyMP, Reference B.2.1), the project planning documents, the design input requirements documentation, the engineering reports, the Quality Assurance (QA) Functional Configuration Audit Checklist (Reference B.2.5), and the Product Requirements Review (PRR) Report (Reference B.2.6). Baseline 1 is the first baseline for the project.

2.2 REQUIREMENTS PHASE: (BASELINE 2) Attachment C provides the identification and revision level of the configurable items that constitute Baseline 2. The configurable items are listed in the System Configuration Management Status Accounting spreadsheet that is archived along with this report in Design Basis Record 001N5886 Revision 0. These items include the system-level and instrument-level requirements specifications, the QA Functional C onfiguration Audit Chec klist (Reference B.2.5), and the Conceptual Design Review (CDR) Report (Reference B.2.7). Baseline 2 also includes changes to configurable items from previous baseline as identified in Attachment C. Due to the change from eMatrix to PLM product data management systems between Baselines 1 and 2, the configurable items common to each baseline have been assigned new document numbers applicable through project completion.

2.3 DESIGN PHASE: (BASELINE 3) Attachment C provides the identification and revision level of the configurable items that constitute Baseline 3. The configurable items are listed in Attachment C. These items include the software design specifications, communication and protocol specifications, system and instrument level hardware drawings, the QA Functional Configuration Audit Checklist (Reference B.2.5), and the Preliminary Design Review (PDR) Report (Reference B.2.8). Changes to configurable items from previous baselines during the PDR phase are identified by updated revision levels in Attachment C. During Baseline 3 the NUMAC planning documents were revised to be released as NEDC documents (References B.2.1, B.2.2, B.2.3, and B.2.4) for DI&C-ISG-06 Phase 1 submittals. There are no changes in the plans. Changes were made to design requirements specifications due to Independent Verification and Validation (IVV) comments regarding traceability.

2 GEH internal documents may be listed in Attachment C. The relevant information in these internal documents may have been submitted to the Nuclear Regulatory Commission (NRC) for review as a separate document (e.g., 002N4398, Revision 1 is submitted as the System Management Plan). The GEH internal document is the Project Work Plan 000N0889SA. For configuration management purposes these documents are considered to be equivalent as they serve the same purpose.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-3 Revision levels of the Baseline 3 configurable items in Attachment C reflect the versions reviewed by the IVV team prior to the form al PDR review in January 2015. Due to ongoing design activities and customer review cycles, later revisions of these items may exist. Revised documents will be reviewed by the IVV team during the Implementation Phase, and Attachment C will be updated prior to Baseline 4.

2.4 IMPLEMENTATION PHASE: (BASELINE 4) Attachment C provides the identification and re vision level of the configurable items that constitute Baseline 4. The configurable items are listed in the System Configuration Management Status Accounting spreadsheet that is archived along with this report in Design Basis Record 001N5886 Revision 2. These items in clude the software code review, module test, integration test and Test Item Transmittal Reports (TITRs), software programs, Erasable Programmable Read-Only Memory (EPROM) dr awings, IVV Test Procedures, the QA

Functional Configuration Audit Checklist (Refer ence B.2.5), and the De tailed Design Review (DDR) Report (Reference B.2.9). Changes to configurable items from previous baselines during the DDR phase are identified by updated revision levels in Attachment C. During Baseline 4, several requirements and design documents were re vised to address IVV review comments.

2.5 TEST PHASE: (BASELINE 5) Attachment C provides the identification and re vision level of the configurable items that constitute Baseline 5. The configurable items are listed in the System Configuration Management Status Accounting spreadsheet that is archived along with this report in Design Basis Record 001N5886 Revision 3. These items include instrument user's manuals, IVV system and subsystem test reports, Factory Acceptance Test (FAT) report, the QA Functional Configuration Audit Checklist (Reference B.2.

5), and the Design Validation Review (DVR)

Report (Reference B.2.10). Changes to configurable items from previous baselines during the DVR phase are identified by updated revision levels in Attachment C.

[[

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-4

]] Successful completion of the IVV testing, including customer witn essed FAT, concluded that the PRNM system with the modified parts may be released for installation at Hope Creek.

2.6 DIFFERENCES FROM COLUMBIA GENERATING STATION PRNM NEDC-33864P, Appendix J, Section 4 (Reference B.2.11) identified some differences between the Columbia Generating Station (CGS) and Hope Creek configurations. There are three additional differences in addition to those previously described. [[

]]

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-5 3.

SUMMARY

AND CONCLUSION 3.1 AS DESIGNED CONFIGURATION Attachment C lists the As Designed configuration.

3.2 AS BUILT CONFIGURATION The As Built configuration is the same as the As Designed configuration described in Section 3.1.

3.3 AS INSTALLED CONFIGURATION The As Installed configuration is determined by PSEG.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-6 ATTACHMENT A - ANOMALIES None.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-7 ATTACHMENT B - REFERENCES B.1 APPLICABLE GEH PROCEDURES B.1.1 COMMON PROCEDURES (CP)

1. CP-23-311, Digital I&C System Configuration Management.* B.1.2 ENGINEERING OPERATING PROCEDURES (EOP)

None B.1.3 POLICIES AND PROCEDURES (P&P)

None B.1.4 WORK INSTRUCTIONS 1. WI-23-311-10, System Configuration Management Task Reporting.* B.2 PROJECT DOCUMENTS

1. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix E, "Hope Creek NUMAC System Management Plan," NEDC-33864P, Revision 0, September 2015.

2. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix B, "NUMAC Systems Engineering Development Plan," NEDC-33864P, Revision 0, September 2015.

3. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix D, "NUMAC Systems Independent Verification and Valid ation," NEDC-33864P, Revision 0, September 2015.

4. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix C, "NUMAC Systems Quality Assurance Plan," NEDC-33864P, Revision 0, September 2015.

5. QA Functional Configurati on Audit Checklist, 001N8748.*

6. Baseline 1 PRR Report NEE-R0020167, Legacy DRF 0000-0168-0827.*

7. Baseline 2 CDR Report NEE-R0021513, 001N6250 Revision 0.*

8. Baseline 3 PDR Report NEE-R0022066, 001N6250 Revision 1.*

9. Baseline 4 DDR Report NEE-R0022853, 001N6250 Revision 2.*

10. Baseline 5 DVR Report NEE-R0023537, 001N6250 Revision 3.*

11. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," NEDC-33864P, Revision 0, September 2015.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-8 B.3 OTHER REFERENCES B.3.1 REGULATORY DOCUMENTS 1. NRC DI&C-ISG-06, "Licensi ng Process," January 19, 2011. 2. NUREG-0800 Branch Technical Position (BTP) 7-14 Section B.3.2.3, "Guidance on Software Reviews for Digital Computer-Based Instrumentation and Control Systems,"

Revision 5, March 2007. B.3.2 INDUSTRIAL CO DES AND STANDARDS None

• Unpublished, available for NRC audit on request.

NEDO-33872 Appendix C (001N5886.04) Non-Proprietary Information - Class I (Public)

C-9 ATTACHMENT C SYSTEM CONFIGURATION MANAGEMENT STATUS ACCOUNTING SPREADSHEET

NEDO-33872 Appendix C (001N5886.04)

Non-Proprietary Information - Class I (Public)

Hope Creek PRNM Attachment C Concept (BL1)Require-ments (BL2)Design (BL3)Imple-mentation (BL4)Test (BL5)1.01aProject Work Plan (PWP)CommercialCP-19-1210000-0156-462801.01bProject Work Plan (PWP)CommercialCP-19-121000N0889SA23561.02aSystem Engineering Development Plan (SyEDP)PlanningCP-23-3020000-0161-934001.02bSystem Engineering Development Plan (SyEDP)PlanningCP-23-302001N61980111 1.03aSystem Independent V&V Plan (SyIVVP)PlanningCP-23-3100000-0161-93410 1.03bSystem Independent V&V Plan (SyIVVP)PlanningCP-23-310001N61990111 1.04aSystem Quality Assurance Plan (SyQAP)PlanningCP-23-3030000-0161-93420 1.04bSystem Quality Assurance Plan (SyQAP)PlanningCP-23-303001N620101111.05Upgrade Licensing Support PlanPlanningCP-23-3130000-0156-464100000 1.06Project Requirements DocumentConceptWI-03-100-300000-0164-5321000001.07aSystem Architecture DescriptionConceptWI-03-100-300000-0163-998200 1.07bSystem Architecture DescriptionConceptWI-03-100-30001N20293331.08Chief Engineers Risk EvaluationPlanningCP-03-100-G3300000-0156-462800000 1.09Mode Switch ModificationConceptWI-03-100-300000-0165-6906000002.01PRNM System Requirements Spec (SyRS)Corp. Numbered Doc.CP-03-100-G40026A8742SA12342.02APRM Performance SpecCorp. Numbered Doc.CP-03-100-G400000N64261246 2.032/4 Logic Module Performance SpecCorp. Numbered Doc.CP-03-100-G400000N64271144 2.04RBM Performance SpecCorp. Numbered Doc.CP-03-100-G400000N66121123 2.05RBM I/F Performance SpecCorp. Numbered Doc.CP-03-100-G400000N72691122 2.06NIC Performance SpecCorp. Numbered Doc.CP-03-100-G400001N06451144 2.07ODA Performance SpecCorp. Numbered Doc.CP-03-100-G40024A51060000 2.08NIC Ethernet Protocol SpecCorp. Numbered Doc.CP-03-100-G400000N650422673.01Elementary DiagramCorp. Numbered Doc.CP-03-100-G400001N6507SA0243.02APRM SchematicCorp. Numbered Doc.CP-03-100-G400001N7959SA123 3.03RBM SchematicCorp. Numbered Doc.CP-03-100-G400001N7958SA123 3.04RBM I/F SchematicCorp. Numbered Doc.CP-03-100-G400002N2426SA022 3.052/4 Logic Module SchematicCorp. Numbered Doc.CP-03-100-G400001N8889SA134 3.06ODA SchematicCorp. Numbered Doc.CP-03-100-G400107E5886222 3.07Routing/Connection DiagramCorp. Numbered Doc.CP-03-100-G400001N8819SA012 3.08APRM Wire ListCorp. Numbered Doc.CP-03-100-G400343A3495333 3.09RBM Wire ListCorp. Numbered Doc.CP-03-100-G400343A3953122 3.10RBM I/F Wire ListCorp. Numbered Doc.CP-03-100-G400002N3563033 3.112/4 Logic Module Wire ListCorp. Numbered Doc.CP-03-100-G400002N2584044 3.12APRM Internal Communication Block SpecCorp. Numbered Doc.CP-03-100-G400001N8548022 3.13APRM Master Human-Machine Interface (HMI) Design SpecCorp. Numbered Doc.CP-03-100-G400001N8549022 3.14APRM Slave Human-Machine Interface (HMI) Design SpecCorp. Numbered Doc.CP-03-100-G400001N8551022 3.15APRM Master Display SDSCorp. Numbered Doc.CP-03-100-G400001N8858022 3.16APRM Slave Display SDSCorp. Numbered Doc.CP-03-100-G400001N8860022 3.17APRM Functional SDSCorp. Numbered Doc.CP-03-100-G400002N2038044 3.18ASP Stability Monitor SDSCorp. Numbered Doc.CP-03-100-G40026A7189222 Concept Phase Requirements Phase Design Phase SyCM Doc No.Configurable Items (Document Titles)

Document Category Approval/ Release Mechanism Controlled Document Location Identifier (PDMS ID or CorpNum Drawing Number)

Page 1 of 6 NEDO-33872 Appendix C (001N5886.04)

Non-Proprietary Information - Class I (Public)

Hope Creek PRNM Attachment C Concept (BL1)Require-ments (BL2)Design (BL3)Imple-mentation (BL4)Test (BL5)SyCM Doc No.Configurable Items (Document Titles)

Document Category Approval/ Release Mechanism Controlled Document Location Identifier (PDMS ID or CorpNum Drawing Number)3.19Stability ASP Communication ProtocolCorp. Numbered Doc.CP-03-100-G400002N20360003.20Scanning ASP Communication ProtocolCorp. Numbered Doc.CP-03-100-G40026A7100000 3.21Scanning ASP Firmware Design SpecCorp. Numbered Doc.CP-03-100-G40026A7102000 3.22RBM Human-Machine Interface (HMI) Design SpecCorp. Numbered Doc.CP-03-100-G400001N8713177 3.23RBM Internal Communication Block SpecCorp. Numbered Doc.CP-03-100-G400002N2144011 3.24RBM Funtional SDSCorp. Numbered Doc.CP-03-100-G400001N9273011 3.25RBM Display SDSCorp. Numbered Doc.CP-03-100-G400001N9297044 3.26APRM ODA Display SDSCorp. Numbered Doc.CP-03-100-G400002N2196011 3.27APRM ODA HMI Design SpecCorp. Numbered Doc.CP-03-100-G400002N2195011 3.28RBM ODA Display SDSCorp. Numbered Doc.CP-03-100-G400002N2678022 3.29RBM ODA HMI Design SpecCorp. Numbered Doc.CP-03-100-G400002N2677022 3.30NIC SDSCorp. Numbered Doc.CP-03-100-G400001N7700022 3.31FDDI Comm Protocol SpecCorp. Numbered Doc.CP-03-100-G400001N8085022 3.32GEDAC Comm Protocol SpecCorp. Numbered Doc.CP-03-100-G400001N1596033 3.33APRM ICDCorp. Numbered Doc.CP-03-100-G400001N8588001 3.34RBM ICDCorp. Numbered Doc.CP-03-100-G400001N8619001 3.35PRNM Panel ICDCorp. Numbered Doc.CP-03-100-G400001N8633SA011 3.36PDS Evaluation (Summary of Peach Bottom DSS-CD)Corp. Numbered Doc.CP-03-100-G400002N3593000 3.37PDS Evaluation (Prelim safety related software changes Hope Creek)Corp. Numbered Doc.CP-03-100-G400DOC-0003-9154000 3.38IVV System Validation Test PlanCorp. Numbered Doc.CP-03-100-G400001N8530000 3.39IVV Factory Acceptance Test PlanCorp. Numbered Doc.CP-03-100-G400001N9191011 3.40IVV Sub-System Validation Test PlanCorp. Numbered Doc.CP-03-100-G400002N2267000 3.41IVV Software Module Test PlanCorp. Numbered Doc.CP-03-100-G400002N2707001 3.42IVV Integration Test PlanCorp. Numbered Doc.CP-03-100-G400002N4394000 3.43Susceptibility AssessmentEngineering ReportCP-23-314DOC-0004-0153000 Page 2 of 6 NEDO-33872 Appendix C (001N5886.04)

Non-Proprietary Information - Class I (Public)

Hope Creek PRNM Attachment C Concept (BL1)Require-ments (BL2)Design (BL3)Imple-mentation (BL4)Test (BL5)SyCM Doc No.Configurable Items (Document Titles)

Document Category Approval/ Release Mechanism Controlled Document Location Identifier (PDMS ID or CorpNum Drawing Number)

Implementation Phase4.01APRM Functional Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N6392014.02APRM Functional Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N639301 4.03APRM Functional Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N639501 4.04APRM Functional Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N639601 4.05APRM Functional Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N639701 4.06APRM FUNCODECorp. Numbered Doc.CP-03-100-G400DBR-000737801 4.07APRM Display Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N736100 4.08APRM Display Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N736200 4.09APRM Display Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N736300 4.10APRM Display Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N736400 4.11APRM Display Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N736500 4.12APRM DSPCODECorp. Numbered Doc.CP-03-100-G400DBR-000992200 4.13APRM ODA Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N762100 4.14APRM ODA Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N762200 4.15APRM ODA Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N762300 4.16APRM ODA Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N762400 4.17APRM ODA Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N762500 4.18APRM ODACODECorp. Numbered Doc.CP-03-100-G400DBR-001037200 4.19RBM Functional Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N751201 4.20RBM Functional Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N752601 4.21RBM Functional Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N751301 4.22RBM Functional Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N751401 4.23RBM Functional Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N751501 4.24RBM FUNCODECorp. Numbered Doc.CP-03-100-G400DBR-001022501 4.25RBM Display Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N822211 4.26RBM Display Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N822300 4.27RBM Display Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N822411 4.28RBM Display Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N822511 4.29RBM Display Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N822611 4.30RBM DSPCODECorp. Numbered Doc.CP-03-100-G400DBR-001104511 4.31RBM ODA Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N822712 4.32RBM ODA Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N822800 4.33RBM ODA Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N822912 4.34RBM ODA Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N823012 4.35RBM ODA Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N823112 Page 3 of 6 NEDO-33872 Appendix C (001N5886.04)

Non-Proprietary Information - Class I (Public)

Hope Creek PRNM Attachment C Concept (BL1)Require-ments (BL2)Design (BL3)Imple-mentation (BL4)Test (BL5)SyCM Doc No.Configurable Items (Document Titles)

Document Category Approval/ Release Mechanism Controlled Document Location Identifier (PDMS ID or CorpNum Drawing Number)4.36RBM ODA DSPCODECorp. Numbered Doc.CP-03-100-G400DBR-0011046124.37NIC Software Code Review ReportCorp. Numbered Doc.CP-03-100-G400002N772811 4.38NIC Software Module Test ReportCorp. Numbered Doc.CP-03-100-G400002N285500 4.39NIC Software Integration Test ReportCorp. Numbered Doc.CP-03-100-G400002N285811 4.40NIC Software Build Release DescriptionCorp. Numbered Doc.CP-03-100-G400002N834611 4.41NIC Software Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400002N285911 4.42NIC Software Source FilesCorp. Numbered Doc.CP-03-100-G400DBR-000315211 4.43NIC Software Project FilesCorp. Numbered Doc.CP-03-100-G400DBR-000339200 4.44PRNM System Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N589701 4.45IVV APRM Functional Code Module Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N758800 4.46APRM (Master) Sub-system Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N554112 4.47APRM (Slave) Sub-system Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N578512 4.48APRM ODA Sub-system Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N582601 4.49IVV APRM Integration Test Cases and ProceduresCorp. Numbered Doc.CP-03-100-G400002N594102 4.50RBM Sub-system Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N585401 4.51RBM ODA Sub-system Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N613400 4.522/4 Logic Module Sub-system Validation Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N543201 4.53PRNM Factory Acceptance Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N7269A0 4.54NIC Sub-system Test ProcedureCorp. Numbered Doc.CP-03-100-G400002N725501 APRM EPROM SETCorp. Numbered Doc.CP-03-100-G400001N2364SAG001014.55EPROM Program APRM-U1Corp. Numbered Doc.CP-03-100-G400002N734304.55bEPROM Program APRM-U1Corp. Numbered Doc.CP-03-100-G400003N2213 04.56EPROM Program APRM-U9Corp. Numbered Doc.CP-03-100-G400002N734404.56bEPROM Program APRM-U9Corp. Numbered Doc.CP-03-100-G400003N2214 04.57EPROM Program APRM-U13Corp. Numbered Doc.CP-03-100-G400002N798500 4.58EPROM Program APRM-U14Corp. Numbered Doc.CP-03-100-G400002N798600 SCANNING ASP EPROM SETCorp. Numbered Doc.CP-03-100-G400148C6123G003444.59EPROM Program ASP Scanning-U51Corp. Numbered Doc.CP-03-100-G400265A325100 4.60EPROM Program ASP Scanning-U52Corp. Numbered Doc.CP-03-100-G400265A325200 4.61EPROM Program ASP Scanning-U53Corp. Numbered Doc.CP-03-100-G400265A325300 STABILITY ASP EPROM SETCorp. Numbered Doc.CP-03-100-G400234C6154G005994.62EPROM Program ASP Stability-U51Corp. Numbered Doc.CP-03-100-G400000N823800 4.63EPROM Program ASP Stability-U52Corp. Numbered Doc.CP-03-100-G400000N823900 4.64EPROM Program ASP Stability-U53Corp. Numbered Doc.CP-03-100-G400000N824000 Page 4 of 6 NEDO-33872 Appendix C (001N5886.04)

Non-Proprietary Information - Class I (Public)

Hope Creek PRNM Attachment C Concept (BL1)Require-ments (BL2)Design (BL3)Imple-mentation (BL4)Test (BL5)SyCM Doc No.Configurable Items (Document Titles)

Document Category Approval/ Release Mechanism Controlled Document Location Identifier (PDMS ID or CorpNum Drawing Number)

RBM EPROM SETCorp. Numbered Doc.CP-03-100-G400001N2363SAG001014.65EPROM Program RBM-U1Corp. Numbered Doc.CP-03-100-G400002N835704.65bEPROM Program RBM-U1Corp. Numbered Doc.CP-03-100-G400003N2661 04.66EPROM Program RBM-U9Corp. Numbered Doc.CP-03-100-G400002N837504.66bEPROM Program RBM-U9Corp. Numbered Doc.CP-03-100-G400003N2662 04.67EPROM Program RBM-U14Corp. Numbered Doc.CP-03-100-G400002N833401 APRM ODA EPROM SETCorp. Numbered Doc.CP-03-100-G400002N6511SAG001014.68EPROM Program APRM ODA-U14Corp. Numbered Doc.CP-03-100-G400002N806200 RBM ODA EPROM SETCorp. Numbered Doc.CP-03-100-G400002N6512SAG001014.69EPROM Program RBM ODA-U14Corp. Numbered Doc.CP-03-100-G400002N833512 4.70CPU Module PLD4 Design DocumentCorp. Numbered Doc.CP-03-100-G400DBR-0013981 14.71CPU Module PLD4 Source CodeCorp. Numbered Doc.CP-03-100-G400DBR-0015536 14.72CPU Module PLD4 Test Item Transmittal ReportCorp. Numbered Doc.CP-03-100-G400DBR-0016194 04.73CPU Module PLD4 Build DescriptionCorp. Numbered Doc.CP-03-100-G400DBR-0016243 0 Test Phase5.01APRM Master User ManualCorp. Numbered Doc.CP-03-100-G400002N8903 05.02APRM Slave User ManualCorp. Numbered Doc.CP-03-100-G400002N8904 05.03APRM ODA User ManualCorp. Numbered Doc.CP-03-100-G400002N9190 05.04RBM User ManualCorp. Numbered Doc.CP-03-100-G400002N8985 05.05RBM ODA User ManualCorp. Numbered Doc.CP-03-100-G400002N8986 05.06NIC User ManualCorp. Numbered Doc.CP-03-100-G400002N2881 25.07APRM IVV Module Test Summary ReportCorp. Numbered Doc.CP-03-100-G400003N0389 05.08APRM IVV Integration Test Summary ReportCorp. Numbered Doc.CP-03-100-G400003N1003 15.09APRM Subsystem IVV Test ReportCorp. Numbered Doc.CP-03-100-G400003N1973 25.10RBM Subsystem IVV Test ReportCorp. Numbered Doc.CP-03-100-G400003N2289 15.112/4 Logic Subsystem IVV Test ReportCorp. Numbered Doc.CP-03-100-G400003N2152 15.12NIC Subsystem IVV Test ReportCorp. Numbered Doc.CP-03-100-G400003N3394 05.13System IVV Test ReportCorp. Numbered Doc.CP-03-100-G400003N3299 05.14FAT Test ReportCorp. Numbered Doc.CP-03-100-G400003N4961 05.15V&V Summary ReportCorp. Numbered Doc.CP-03-100-G400003N4828 1 Page 5 of 6 NEDO-33872 Appendix C (001N5886.04)

Non-Proprietary Information - Class I (Public)

Hope Creek PRNM Attachment C Concept (BL1)Require-ments (BL2)Design (BL3)Imple-mentation (BL4)Test (BL5)SyCM Doc No.Configurable Items (Document Titles)

Document Category Approval/ Release Mechanism Controlled Document Location Identifier (PDMS ID or CorpNum Drawing Number)C.01aSyIVV Task ReportIVV ReportCP-03-100-G3300000-0165-94500 C.01bSyIVV Task ReportIVV ReportCP-03-100-G330001N57210124 C.02aSySA Safety Analysis Task ReportIVV ReportCP-03-100-G3300000-0166-91960 C.02bSySA Safety Analysis Task ReportIVV ReportCP-03-100-G330001N57870124 C.03aSyQA Functional Configuration Audit ChecklistAudit RecordCP-03-100-G3300000-0165-94490 C.03bSyQA Functional Configuration Audit ChecklistAudit RecordCP-03-100-G330001N87480123C.04aSyCM Configuration Management Task ReportIVV ReportCP-03-100-G3300000-0165-9441 0C.04bSyCM Configuration Management Task ReportIVV ReportCP-03-100-G330001N5886 01 24C.05aRisk Analysis / Risk RegisterCommercialCP-03-100-G3300000-0156-4622 0C.05bRisk Analysis / Risk RegisterCommercialCP-03-100-G330001N5899 01 23C.06Tool Evaluation ReportsEngineering ReportCP-03-100-G3300000-0163-4517 000C.06aTool Evaluation ReportsEngineering ReportCP-03-100-G330DOC-0005-0266 0 1 C.07aFailure Modes and Effects Analysis (FMEA) PlanEngineering ReportCP-03-100-G3300000-0168-0827 0 C.07bFailure Modes and Effects Analysis (FMEA)Engineering ReportCP-03-100-G330001N6249 00 12C.08Customer Spec Requirements Traceability Matrix (RTM)IVV ReportCP-03-100-G330DOC-0002-12880012C.09IVV Review CommentsIVV ReportCP-03-100-G330DOC-0002-29700122C.10Baseline 1 Review/PRR Report (No Task Reports)IVV ReportCP-03-100-G3300000-0165-00450C.11Baseline 1 Review/PRR ReportIVV ReportCP-03-100-G3300000-0168-08270C.12Baseline Review/TDR ReportIVV ReportCP-03-100-G330001N62500123 Document Categories (see the table above):

• Audit record: A quality record resulting from a QA audit.

• Commercial: A document that is related to the commercial business functions

• Corp. Numbered Doc.: A GE corporate numbered document or drawing that is formally issued.

• Engineering Report: A document generated by design engineering that is not assigned a corporate number.

• FDDR: Field Deviation Disposition Requests are generated to address equipment issues discovered during installation.

• Instruction: A document generated by design engineering to provide instructions to perform a task.

• IVV Report: An Independent V&V report, typically used to report results from V&V activities (e.g. test summary report).

• IVV Test Doc.: A document generate by the Independent V&V team (e.g. test plan).

• Planning Doc.: A document that contains project planning information.

• Requirements Doc.: A document that contains system or equipment requirements.

• Source Code: The program listing written in a programming language (e.g., C, Assembly, Verilog, etc.) used for programmable d igital parts.

• User Documentation: Document that is placed in the technical manual provided to the customer.

Documents Common to Multiple Development Phases Page 6 of 6 NEDO-33872 Revision 0 August 2016 Non-Proprietary Information - Class I (Public)

Appendix D PLM Source Record 003N4828.01 HCGS PRNM Verification and Validation Test Summary Report

Copyright 2016 GE-Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-ii Information Notice This is a non-proprietary version of the document NEDC-33872P Appendix D, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

IMPORTANT NOTICE REGARDING THE CONTENTS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG Nuclear LLC (PSEG) for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the U.S. Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-iii Revision Summary Revision Required Changes 0 Initial revision 1 Changed security classification to Class II (Internal) and removed names in Section 8.0

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-iv TABLE OF CONTENTS ACRONYMS AND ABBREVIATIONS ....................................................................................................

.... D-vi 1.0 TEST

SUMMARY

REPORT IDENTIFIER ........................................................................................ D-1 2.0

SUMMARY

.......................................................................................................................

................... D-1 2.1 Items Subject to Testing ......................................................................................................

.............. D-2 2.1.1 APRM Software Items ...........................................................................................................

... D-2 2.1.2 Rod Block Monitor (RBM) Software Items .............................................................................. D-2 2.1.3 NUMAC Interface Computer (NIC) Software Items ................................................................ D-3 2.1.4 2-Out-Of-4 Logic Module PLDs ............................................................................................... D-3 2.1.5 386SX CPU Module, PLD4 ...................................................................................................... D

-3 2.2 Test Plans and Procedures .....................................................................................................

............ D-3 2.2.1 Test Plans and Procedures for Unstructured Testing ................................................................ D-3 2.2.2 Test Plans for Independent Validation Testing ......................................................................... D-4 2.2.3 Test Procedures for Independent Validation Testing ................................................................ D-4 2.3 Test Reports ..................................................................................................................

.................... D-5 2.3.1 Test Reports for Unstructured Testing ...................................................................................... D-5 2.3.2 Test Reports for Independent Validation Testing ..................................................................... D-6 2.4 Test Environment ..............................................................................................................

................ D-6 3.0 VARIANCES .....................................................................................................................

................... D-7 3.1 Variances from Design Specifications ..........................................................................................

.... D-7 3.2 Variances from Test Procedures ................................................................................................

....... D-7 4.0 COMPREHENSIVENESS ASSESSMENT ......................................................................................... D-7 4.1 Independent Testing of Changes to Previously Developed Software ............................................... D-7 4.2 Comprehensive Validation Testing of the Hope Creek PRNM System ........................................... D-8 4.3 Hope Creek PRNM Requirements Traceability Analysis ................................................................. D-8 4.4 Regression Analysis ...........................................................................................................

............... D-8 4.5 386SX Module and PLD4 Analysis ................................................................................................

.. D-9 5.0

SUMMARY

OF ACTIVITIES .........................................................................................................

.... D-9 5.1 Unstructured Testing Activities ...............................................................................................

......... D-9 5.2 Independent Validation Testing Activities .....................................................................................

... D-9 6.0

SUMMARY

OF RESULTS.............................................................................................................

... D-10 6.1 Results of Unstructured Testing ...............................................................................................

....... D-10 6.1.1 Report: APRM Functional Software Module Test Report (Revision 0 and Revision 1) ........ D-10 6.1.2 Report: APRM Functional Software Integration Test Report (Revision 0 and Revision 1) ... D-10 6.1.3 Report: APRM Display Software Module Test Report (Revision 0) ...................................... D-10 6.1.4 Report: APRM Display Software Integration Test Report (Revision 0) ................................ D-10 6.1.5 Report: APRM ODA Software Module Test Report (Revision 0) ......................................... D-10 6.1.6 Report: APRM ODA Software Integration Test Report (Revision 0) .................................... D-11 6.1.7 Report: RBM Functional Software Module Test Report (Revision 0 and Revision 1) .......... D-11 6.1.8 Report: RBM Functional Software Integration Test Report (Revision 0 and Revision 1) ..... D-11 6.1.9 Report: RBM Display Software Module Test Report (Revision 0) ........................................ D-11 6.1.10 Report: RBM Display Software Integration Test Report (Revisions 0 and 1) ........................ D-12 6.1.11 Report: RBM ODA Software Module Test Report (Revision 0) ............................................ D-12 6.1.12 Report: RBM ODA Software Integration Test Report (Revisions 0, 1, and 2) ...................... D-12 6.1.13 Report: NIC Software Module Test Report (Revision 0) ....................................................... D-12 6.1.14 Report: NIC Software Integration Test Report (Revision 0 and Revision 1) ......................... D-12 6.1.15 Report: PLD4 Test Item Transmittal Report (Revision 0) ...................................................... D-12 6.2 Results of Independent Validation Testing ..................................................................................... D-13 NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-v 6.2.1 Report: APRM Functional Controller Software IV&V Module Test Summary Report Revision 0 D-13 6.2.2 Report: APRM Subsystem IV&V Integration Test Summary Report Revision 0 .................. D-14 6.2.3 Report: APRM Subsystem Validation Test Report Revision 0 .............................................. D-14 6.2.4 Report: APRM Subsystem Validation Test Report Revision 1 .............................................. D-14 6.2.5 Report: APRM Subsystem Validation Test Report Revision 2 .............................................. D-15 6.2.6 Report: Rod Block Monitor and RBM ODA Validation Test Report Revision 0 .................. D-16 6.2.7 Report: Rod Block Monitor and RBM ODA Validation Test Report Revision 1 .................. D-17 6.2.8 Report: NUMAC Interface Computer (NIC) Validation Test Report Revision 0 .................. D-18 6.2.9 Report: Two-Out-Of-Four Logic Module Validation Test Report Revision 1 ....................... D-18 6.2.10 Report: System Validation Test Report Revision 0 ................................................................ D-19 6.2.11 Report: Factory Acceptance Test Report Revision 0 .............................................................. D-20 6.2.12 Report: CPU Module PLD4 Component Validation Test Report Revision 0 ......................... D-21 6.2.13 System Response Time Confirmation ..................................................................................... D-21 7.0 EVALUATION ....................................................................................................................

............... D-21 7.1 APRM Software .................................................................................................................

............. D-21 7.2 APRM ODA Software .............................................................................................................

....... D-21 7.3 RBM Software ..................................................................................................................

.............. D-21 7.4 RBM ODA Software ..............................................................................................................

......... D-21 7.5 NIC Software ..................................................................................................................

................ D-22 7.6 2-Out-Of-4 Logic Module Programmable Logic ............................................................................ D-22 7.7 386SX CPU Module, PLD4 ........................................................................................................

.... D-22 8.0 APPROVALS .....................................................................................................................

................ D-22

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-vi ACRONYMS AND ABBREVIATIONS Term Definition APRM Average Power Range Monitor ASP Automatic Signal Processor CPU Central Processing Unit DMA Direct Memory Access DOORS Dynamic Object-Oriented Requirements FAT Factory Acceptance Test FDDI Field Direct Data Interface GEH GE-Hitachi Nuclear Energy Americas LLC GEIO GE Input Output GGNS Grand Gulf Nuclear Station HW Hardware ID Identification IEEE Institute of Electrical and Electronics Engineers I/V Current to voltage IV&V Independent Verification and Validation LPRM Local Power Range Monitor LTR Licensing Topical Report N/A Not Applicable NIC NUMAC Interface Computer NOS Nuclear Oversight NRC Nuclear Regulatory Commission NUMAC Nuclear Measurement Analysis and Control NVRAM Non-Volatile Random Memory Access ODA Operator Display Assembly OPRM Oscillation Power Range Monitor PLD Programmable Logic Device PLM Product Lifecycle Management PRNM Power Range Neutron Monitor PSEG Public Service Enterprise Group Nuclear LLC QA Quality Assurance RBM Rod Block Monitor SyEDP Systems Engineering Development Plan, (NEDC-33864P, Appendix B) SyIVVP System Independent Verification and Validation Plan, (NEDC-33864P, Appendix D) V&V Verification and Validation NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-1 1.0 TEST

SUMMARY

REPORT IDENTIFIER NEDC-33872P, Revision 0, Appendix D 2.0

SUMMARY

The Verification and Validation (V&V) test program for testing the Hope Creek Generating Station Power Range Neutron Monitor (PRNM) system is a layered approach. Testing consists of module testing of the smallest testable units, then in tegrating those units in to larger testable units, and testing the integrated units. The process repeats as follows:

integrating individual software components into executa ble applications that are specific to each programmable logic device (PLD) or central processing unit in the system, then integrating those applications into the instruments in which they run, and finally integrating the instruments within the system to perform the system functions. Validation testing is performed on each instrument and on the integrated system to ensure the system meets all specified requirements. The various types of testing performed for the Hope Creek PRNM system are described in the fo llowing paragraphs. Unstructured Testing Unstructured testing is [[ ]] testing performed by the software design engineer in accordance with the Nuclear Measurement Analysis and Control (NUMAC) Systems Engineering Development Plan (SyEDP) [[

]]. All safety-related and non-safety related software items are subject to this type of testing. Unstructured testing is an important part of the NUMAC software development process, and is a prerequisite to the formal independent testing. The results of unstructured testing are verified and documented in a test report.

Independent Module and Integration Testing Independent module and integration testing is formal testing performed according to a test plan and procedure prepared and executed by an independent team. The safety-related Average Power Range Monitor (APRM) software and 2-Ou t-Of--4 Logic Module programmable logic are subject to this type of testing. Independent module testing and integr ation testing addresses requirements of Institute of Electrical and El ectronics Engineers (IE EE) Standard 1012-2004, "IEEE Standard for Software Verification and Validation," as endorse d by Regulatory Guide 1.168 Revision 2, "Verification, Validation, Reviews, and Audits for Digital Computer Software Used in Safety Systems of Nuclear Power Plants." The results of independent module testing and independent integration testing are verified and documented in a test report.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-2 Independent Validation Testing Independent validation testing is formal testing performed according to a test plan and procedure prepared and executed by an independent team. All safety-related and non-safety related software items are subject to this type of testing. Validation testing performed on safety-related items addresses requirements of IEEE Standard 1012-2004, "IEEE Standard for Software Verification and Validation," as endorsed by Regulatory Guide 1.168 Revision 2, "Verification, Validation, Reviews, and Audits for Digital Computer Software Used in Safety Systems of Nuclear Power Plants." The results of validation testing are verified and documented in a test report. 2.1 Items Subject to Testing The following software revisions were tested throughout the Hope Creek PRNM verification and validation process. Only the latest revision of each software module is included in the

configuration of the Hope Creek PRNM system.

2.1.1 APRM Software Items APRM Software Items Software Revision NUMAC Library Archive *

1. APRM Functional Code (Master and Slave) 0 DBR-0007378 R0

2. APRM Functional Code (Master and Slave) 1 DBR-0007378 R1

3. APRM Display Code (Master and Slave) 0 DBR-0009922 R0

4. APRM ODA Code 0 DBR-0010372 R0

5. Scanning ASP Code 1 VAX6 [NUMACAPRM.

ASPCODE.60HZ.REV1]

6. Stability ASP Code 0 0000-0165-2256, Rev 0

• NUMAC Library Archives are GEH internal documents and are available for NRC audit. NOTE: The Scanning Automatic Signal Processor (ASP) Code was previously developed for Hatch Nuclear Station and the Stability ASP Code was previously developed for Grand Gulf Nuclear Station. This software application has been applied to the Hope Creek PRNM application with no changes. This test report does not discuss further testing on these specific modules.

2.1.2 Rod Block Monitor (RBM) Software Items RBM Software Items Software Revision NUMAC Library Archive *

1. RBM Functional Code 0 DBR-0010225 R0

2. RBM Functional Code 1 DBR-0010225 R1

3. RBM Display Code 0 DBR-0011045 R0

4. RBM Display Code 1 DBR-0011045 R1

5. RBM ODA Code 0 DBR-0011046 R0

6. RBM ODA Code 1 DBR-0011046 R1

7. RBM ODA Code 2 DBR-0011046 R2

• NUMAC Library Archives are GEH internal documents and are available for NRC audit.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-3 2.1.3 NUMAC Interface Computer (NIC) Software Items NIC Software Items Software Revision NUMAC Library Archive *

1. Software Source Files 0 DBR-0003152 R0

2. Software Source Files 1 DBR-0003152 R1

3. Software Project Files 0 DBR-0003392 R0

• NUMAC Library Archives are GEH internal documents and are available for NRC audit.

2.1.4 2-Out-Of-4 Logic Module PLDs 2-Out-Of-4 Logic Module PLDs Revision NUMAC Library Archive *

1. U1 Files 2 0000-0118-1306 R2

2. U11 Files 3 0000-0118-1306 R5 (Contains Revision 3 of the PLD firmware)

3. U21 Files 2 0000-0118-1306 R2* NUMAC Library Archives are GEH internal documents and are available for NRC audit. NOTE: The 2-Out-Of-4 Logic Module PLDs were previously developed for Grand Gulf Nuclear Station (GGNS) and have been applied to the Ho pe Creek PRNM application with no changes.

2.1.5 386SX CPU Module, PLD4 PLD4 Revision NUMAC Library Archive *

1. 105E1359 PLD4 CUPL source code 1 DBR-0015536 R1

• NUMAC Library Archives are GEH internal documents and are available for NRC audit.

2.2 Test Plans and Procedures The following sections describe the Test Plans and Test Procedures for Unstructured Testing and for Independent Validation Testing. The NUMAC SyEDP provides specific guidance for unstructured module testing and integration testing. The NUMAC System Independent Verification and Validation Plan (SyIVVP) provides specific guidance for independent validation testing.

2.2.1 Test Plans and Procedures for Unstructured Testing The NUMAC SyEDP provides specific guidance for unstructured module testing and integration testing. Test plans and procedures for unstructured testing are included in the test reports listed in Section 2.3.1.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-4 2.2.2 Test Plans for Independent Validation Testing Test Plans Revision NUMAC Library Archive *

1. Software Module Test Plan Revision 1 1 002N2707 R1

2. Subsystem Integration Test Plan Revision 0 0 002N4394 R0

3. Subsystem Validation Test Plan Revision 0 0 002N2267 R0

4. System Validation Test Plan Revision 0 0 001N8530 R0

5. Factory Acceptance Test Plan Revision 1 1 001N9191 R1

6. Regression Test Scope for Validation Tests after CPU Module PLD4 Modification 0 DBR-0016637 R0

7. CPU Module PLD4 Component Validation Test Plan Revision 0 0 003N3478 R0

• NUMAC Library Archives are GEH internal documents and are available for NRC audit.

2.2.3 Test Procedures for Inde pendent Validation Testing Test Procedures Test Plan Software Items Tested NUMAC Library Archive *

1. APRM Functional Controller IVV Module Test Procedure Revision 0 2.2.2(1) 2.1.1(1) 002N7588 R0

2. APRM Integration Test Cases and Procedures Revision 2 2.2.2(2) 2.1.1(1) 002N5941 R2

3. APRM (Master) Subsystem Validation Test Procedure Revision 2 2.2.2(3) 2.1.1(1-3) 2.1.5(1) 002N5541 R2

4. APRM (Slave) Subsystem Validation Test Procedure Revision 2 2.2.2(3) 2.1.1(1-3) 002N5785 R2

5. APRM (ODA) Subsystem Validation Test Procedure Revision 1 2.2.2(3) 2.1.1(4) 002N5826 R1

6. Rod Block Monitor Validation Test Procedure Revision 1 2.2.2(3) 2.1.2(1-4) 2.1.5(1) 002N5854 R1

7. Rod Block Monitor ODA Validation Test Procedure Revision 0 2.2.2(3) 2.1.2(6-7) 002N6134 R0

8. IV&V Test Procedure NIC Subsystem Revision 1 2.2.2(3) 2.1.3(2-3) 002N7255 R1

9. 2 Out Of 4 Logic Module Validation Test Procedure Revision 1 2.2.2(3) 2.1.4(1,-3) 002N5432 R1

10. PRNM System Validation Test Procedure Revision 1 2.2.2(4) 2.1.1(2-4) 2.1.2(2,4,7) 2.1.3(2-3) 2.1.4(1-3) 002N5897 R1

11. Factory Acceptance Test Procedure Revision 0 2.2.2(5) 2.1.1(2-4) 2.1.2(2,4,7) 2.1.3(2-3) 2.1.4(1-3) 2.1.5(1) 002N7269 R0

12. CPU Module PLD4 Component Validation Test Procedure Revision 0 2.2.2(7) 2.1.5(1) 003N3598 R0

• NUMAC Library Archives are GEH internal documents and are available for NRC audit.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-5 2.3 Test Reports The following sections describe the Test Reports for Unstructured Testing and Independent Validation Testing. The NUMAC SyEDP provides specific guidance for unstructured module test and integration test reporting. The NUMAC SyIVVP provides specific guidance for independent validation test reporting.

2.3.1 Test Reports for Unstructured Testing Test Report Test Plan and Procedure Software Items Tested NUMAC Library Archive *

1. APRM Functional Software Module Test Report Revision 0 N/A 2.1.1(1) 002N6393 R0

2. APRM Functional Software Module Test Report Revision 1 N/A 2.1.1(2) 002N6393 R1

3. APRM Functional Software Integration Test Report Revision 0 N/A 2.1.1(1) 002N6395 R0

4. APRM Functional Software Integration Test Report Revision 1 N/A 2.1.1(2) 002N6395 R1

5. APRM Functional Software Test Item Transmittal Report Revision 0 N/A 2.1.1(1) 002N6397 R0

6. APRM Functional Software Test Item Transmittal Report Revision 1 N/A 2.1.1(2) 002N6397 R1

7. APRM Display Software Module Test Report Revision 0 N/A 2.1.1(3) 002N7362 R0

8. APRM Display Software Integration Test Report Revision 0 N/A 2.1.1(3) 002N7363 R0

9. APRM Display Software Test Item Transmittal Report Revision 0 N/A 2.1.1(3) 002N7365 R0

10. APRM ODA Software Module Test Report Revision 0 N/A 2.1.1(4) 002N7622 R0

11. APRM ODA Software Integration Test Report Revision 0 N/A 2.1.1(4) 002N7623 R0

12. APRM ODA Software Test Item Transmittal Report Rev0 N/A 2.1.1(4) 002N7625 R0

13. RBM Functional Software Module Test Report Revision 0 N/A 2.1.2(1) 002N7526 R0

14. RBM Functional Software Module Test Report Revision 1 N/A 2.1.2(2) 002N7526 R1

15. RBM Functional Software Integration Test Report Revision 0 N/A 2.1.2(1) 002N7513 R0

16. RBM Functional Software Integration Test Report Revision 1 N/A 2.1.2(2) 002N7513 R1

17. RBM Functional Software Test Item Transmittal Report Revision 0 N/A 2.1.2(1) 002N7515 R0

18. RBM Functional Software Test Item Transmittal Report Revision 1 N/A 2.1.2(2) 002N7515 R1

19. RBM Display Software Module Test Report Revision 0 N/A 2.1.2(3) 002N8223 R0

20. RBM Display Software Integration Test Report Revision 0 N/A 2.1.2(3) 002N8224 R0

21. RBM Display Software Integration Test Report Revision 1 N/A 2.1.2(4) 002N8224 R1

22. RBM Display Software Test Item Transmittal Report Revision 0 N/A 2.1.2(3) 002N8226 R0

23. RBM Display Software Test Item Transmittal Report Revision 1 N/A 2.1.2(4) 002N8226 R1

24. RBM ODA Software Module Test Report Revision 0 N/A 2.1.2(5) 002N8228 R0

25. RBM ODA Software Integration Test Report Revision 0 N/A 2.1.2(5) 002N8229 R0

26. RBM ODA Software Integration Test Report Revision 1 N/A 2.1.2(6) 002N8229 R1

27. RBM ODA Software Integration Test Report Revision 2 N/A 2.1.2(7) 002N8229 R2

28. RBM ODA Software Test Item Transmittal Report Revision 0 N/A 2.1.2(5) 002N8231 R0

29. RBM ODA Software Test Item Transmittal Report Revision 1 N/A 2.1.2(6) 002N8231 R1

30. RBM ODA Software Test Item Transmittal Report Revision 2 N/A 2.1.2(7) 002N8231 R2 NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-6 Test Report Test Plan and Procedure Software Items Tested NUMAC Library Archive *

31. NIC Software Module Test Report Revision 0 N/A 2.1.3(1,3) 002N2855 R0

32. NIC Software Integration Test Report Revision 0 N/A 2.1.3(1,3) 002N2858 R0

33. NIC Software Integration Test Report Revision 1 N/A 2.1.3(2,3) 002N2858 R1

34. NIC Software Test Item Transmittal Report Revision 0 N/A 2.1.3(1,3) 002N2859 R0

35. NIC Software Test Item Transmittal Report Revision 1 N/A 2.1.3(2,3) 002N2859 R1

36. PLD4 CPU22 Simulation N/A 2.1.5(1) DBR-0014494 R0

37. PLD4 Hardware (HW) Chip Test N/A 2.1.5(1) DBR-0014558 R0

38. PLD4 HW Integration Test N/A 2.1.5(1) DBR-0014524 R0

39. PLD4 Test Item Transmittal Report Revision 0 N/A 2.1.5(1) DBR-0016194 R0

• NUMAC Library Archives are GEH internal documents and are available for NRC audit.

2.3.2 Test Reports for Independent Validation Testing Test Report Test Procedur e Software Items Tested NUMAC Library Archive *

1. APRM Functional Controller Software IV&V Module Test Summary Report Revision 0 2.2.3(1) 2.1.1(1) 003N0389 R0

2. APRM Subsystem IV&V Integration Test Summary Report Revision 1 2.2.3(2) 2.1.1(1) 003N1003 R1

3. APRM Subsystem Validation Test Report Revision 2 2.2.3(3-5) 2.1.1(1-4) 2.1.5(1) 003N1973 R2

4. Rod Block Monitor and RBM ODA Validation Test Report Revision 1 2.2.3(6-7) 2.1.2(1-4,6,7) 2.1.5(1) 003N2289 R1

5. NUMAC Interface Computer (NIC) Validation Test Report Revision 0 2.2.3(8) 2.1.3(2-3) 003N3394 R0

6. Two-Out-Of-Four Logic Module Validation Test Report Revision 12.2.3(9) 2.1.4(1-3) 003N2152 R1

7. System Validation Test Report Revision 0 2.2.3(10) 2.1.1(2-4) 2.1.2(2,4,7) 2.1.3(2-3) 2.1.4(1-3) 003N3299 R0

8. Factory Acceptance Test Report Revision 0 2.2.3(11) 2.1.1(2-4) 2.1.2(2,4,7) 2.1.3(2-3) 2.1.4(1-3) 2.1.5(1) 003N4961 R0

9. CPU Module PLD4 Component Validation Test Report Revision 0 2.2.3(12) 2.1.5(1) 003N4079 R0* NUMAC Library Archives are GEH internal documents and are available for NRC audit.

2.4 Test Environment The testing was conducted in both the NUMAC development lab on prototype equipment configured to match the production design and in the NUMAC factory acceptance staging area on the actual Hope Creek PRNM system production equipment. See Section 6.0 for details.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-7 3.0 VARIANCES 3.1 Variances from Design Specifications GEH policies and procedures do not allow the unconditional release of software that does not meet design specifications. All software items identified in Section 2.1 of this report meet applicable specifications for the Hope Creek PRNM project. If testing shows a software item does not comply with its specification then a test anomaly is reported and must be appropriately resolved prior to unconditional release of the software item. Disposition of the anomaly may include modification of the specification, with justification, to match the software performance, or modification of the software to meet the specification. See Sectio n 6.0 of this report for disposition of all anoma lies noted during testing.

3.2 Variances from Test Procedures Any deviation from a formal test procedure is reported as a test anomaly. Disposition of the anomaly may include modification of the test procedure, with justifi cation, or deferral of the test case requiring deviation from the test procedure to another test (e.g., deferra l of a module test to an integration test). See Section 6.0 of this report for disposition of all anomalies noted during testing. 4.0 COMPREHENSIVEN ESS ASSESSMENT 4.1 Independent Testing of Changes to Previously Developed Software

[[

]] The results of this analysis were used to determine the extent of independent module testing required. The module test procedure identified in Section 2.2.3 of this report is trace able to the associated software design specification and the performance specification. The integration test procedure identified in Section 2.2.3 of this report is traceable to the performance spec ification. Results of independent module testing and independent integration testing are documented in the test reports identified in Section 2.3.2 of this report and summarized in Sectio n 6.2 of this report.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-8 4.2 Comprehensive Validation Testing of the Hope Creek PRNM System The NUMAC SyIVVP requires traceability of the validation procedures to the requirements documented in the system performance specifications. A cross-reference matrix is developed for each validation test procedure to establish and document the traceability analysis. These traceability matrices are used to verify the validation test procedures against the requirements and performance specifications and to confirm that all f unctions are tested. The validation test procedures identified in Section 2.2.3 of this report are traceable to the applicable Hope Creek PRNM specifications. The traceability analysis documented in the validation test procedure demonstrates that all applicable requirements are tested. Results of independent validation testing are documented in the test reports identified in Section 2.3.2 of this report and summarized in Section 6.2 of this report.

4.3 Hope Creek PRNM Requirements Traceability Analysis In addition to the traceability matrices discussed above in Section 4.2 of this report, a requirements traceability analysis for the Hope Creek PRNM project was performed using a requirements database developed using the IBM Rational Dynamic Object-Oriented Requirements (DOORS) software. The database provides forward and backward traceability of requirements that spans the Concept, Requirements, Design, Implementation, and Test phases of the NUMAC software development life cycl e for the Hope Creek PRNM project. The requirements database developed in DOORS used in conjunction with the traceability matrices discussed in Section 4.2 and the traceability of the modules tested to the applicable software design specifications discussed in Section 4.1 provides the forward and backward traceability of the Hope Creek PRNM requirements to the testing performed and documented.

4.4 Regression Analysis Regression analysis is performed for testing of changes to code to resolve anomalies. Whenever changes are made to code that was previously tested a regression analysis is performed to determine the potential effect of the code changes and to determine the extent of re-test required. The results and conclusions of regression analysis are reflected in the test reports identified in Section 2.3 of this report.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-9 4.5 386SX Module and PLD4 Analysis The 386SX Central Processing Unit (CPU) modules [[

]] 5.0

SUMMARY

OF ACTIVITIES 5.1 Unstructured Testing Activities Unstructured testing occurs throughout the development of the software. There are no specific requirements for where, when, or how unstructured testing is performed beyond the requirements for unstructured testing specified in the NUMAC SyEDP. Typically, such testing is performed using source code analysis tools, simulation tools, and on prototype equipment configured to match the production design using emulators and other lab equipment in the NUMAC development lab environment. See the test repo rts identified in Section 2.3.1 of this report for details including personnel involved in the te sting, dates the testing was performed, and any special tools that were required to perform the testing.

5.2 Independent Validation Testing Activities Independent validation testing that includes module, integration, subsystem, system, and Factory Acceptance Test (FAT) testing is performed in accordance with approved test plans and procedures. Independent module testing is performed using source code analysis tools, simulation tools, and on prototype equipment configured to match the production design using emulators and other lab equipment in the NUMAC development lab environment. Independent integration testing is performed on prototype equipment configured to match the production design, using emulators and other lab equipment in the NUMAC development lab environment, or may be performed on producti on hardware in the NUMAC FAT staging area.

Independent subsystem and system validation testing is performed on prototype equipment configured to match the production design in the NUMAC development lab environment, or may be performed on production hardware in the NUMAC FAT staging area. Equipment to simulate NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-10 plant inputs and monitor system outputs is used during validation testing. See the test reports identified in Section 2.3.2 for de tails including personnel involved in the testing, dates the testing was performed, and any special tools that were required to perform the testing. All independent validation module, integration, subsystem, and system tests were performed by the GEH Independent Verification and Validation (IV&V) team. The test procedure for the FAT was approved by PSEG prior to test execution. Personnel from PSEG performed an audit prior to the FAT (2-29-16 Nov2016-041 KJB GE Hitachi PRNM Surveillance Report.pdf). Personnel from PSEG also performed all test steps of the FAT. PSEG personnel who performed the FAT test steps and their acceptance of the test results were recorded in the signed datasheets. Nuclear Oversight (NOS) personnel were present to witness and performed QA inspection during the FAT execution.

6.0

SUMMARY

OF RESULTS A description of testing and anomalies discovered during testing of uns tructured testing and independent validation testing are summarized below.

6.1 Results of Unstructured Testing 6.1.1 Report: APRM Functional Software Module Te st Report (Revision 0 and Revision 1) Unstructured testing of the APRM Functional Software M odule was successfully completed without anomalies (Revision 0). Independent validatio n testing revealed anomalies (Sections 6.2.1 and 6.2.3) that resulted in software changes. Additional unstructured testing after software changes was completed without anomalies (Revision 1) and independent validation regression testing was also completed without anomalies (Sections 6.2.4 and 6.2.5).

6.1.2 Report: APRM Functional Software Integration Test Report (Revision 0 and Revision 1) Unstructured testing of the APRM Functional Software Integration Module was successfully completed without anomalies (Revision 0). Independent validation testing revealed anomalies (Sections 6.2.1 and 6.2.3) that resulted in software changes. Additional unstructured testing after software changes was completed without anomalies (Revision 1) and independent validation regr ession testing was also completed without anomalies (Sections 6.2.4 and 6.2.5).

6.1.3 Report: APRM Display Software Module Test Report (Revision 0) Unstructured testing of the APRM Display Software Module was successfully completed without anomalies.

6.1.4 Report: APRM Display Software Inte gration Test Report (Revision 0) Unstructured testing of the APRM Display So ftware Integration Module was successfully completed without anomalies.

6.1.5 Report: APRM ODA Software Module Test Report (Revision 0)

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-11 Unstructured testing of the APRM Operator Display Assembly (ODA) Software Module was successfully completed without anomalies.

6.1.6 Report: APRM ODA Software Integr ation Test Report (Revision 0) Unstructured testing of the APRM ODA Software Integration Module was successfully completed without anomalies.

6.1.7 Report: RBM Functional Software Module Te st Report (Revision 0 and Revision 1) Unstructured testing of the RBM Functional Software Integration Module was successfully completed without anomalies (Revision 0). Independent validation testing revealed anomalies (Section 6.2.6) that resulted in software changes. Additional unstructured testing after software changes was completed without anomalies (Revision 1) and independent validation regression testing was also completed without anomalies (Sections 6.2.7 and 6.2.8).

6.1.8 Report: RBM Functional Software Integration Test Report (Revision 0 and Revision 1) Unstructured testing of the RBM Functional Software Integration Module was successfully completed without anomalies (Revision 0). Independent validation testing revealed anomalies (Section 6.2.6) that resulted in software changes. Additional unstructured testing after software changes was completed without anomalies (Revision 1) and independent validation regression testing was also completed without anomalies (Sections 6.2.7 and 6.2.8).

6.1.9 Report: RBM Display Software Module Test Report (Revision 0) Unstructured testing of the RBM Display Software Module was successfully completed without anomalies.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-12 6.1.10 Report: RBM Display Software Integrati on Test Report (Revisions 0 and 1) Unstructured testing of the RBM Display So ftware Integration Module was successfully completed without anomalies (Revision 0).

Independent validatio n testing revealed anomalies (Section 6.2.6) that resulted in software changes. Additional unstructured testing after software changes was completed without anomalies (Revision 1) and independent validation regression testi ng was also completed without anomalies (Sections 6.2.7 and 6.2.8).

6.1.11 Report: RBM ODA Software Module Test Report (Revision 0) Unstructured testing of the RBM ODA Software Module was successfully completed without anomalies.

6.1.12 Report: RBM ODA Software Integration Test Report (Revisions 0, 1, and 2)

Unstructured testing of the RBM ODA Soft ware Integration Module was successfully completed without anomalies (Revision 0). Software changes were made to address issues identified following the initial release of software and additional unstructured testing was successfully completed without anomalies (Revision 1). Independent validation testing revealed anom alies (Section 6.2.6) that resulted in software changes.

Additional unstructured testin g after software changes was completed without anomalies (Revision 2) and independent validation regr ession testing was also completed without anomalies (Sections 6.2.7 and 6.2.8).

6.1.13 Report: NIC Software Module Test Report (Revision 0) Unstructured testing of the NIC Software Module was successfully completed without anomalies.

6.1.14 Report: NIC Software Integration Test Report (Revision 0 and Revision 1)

Unstructured testing of the NIC Software In tegration was successfu lly completed without anomalies (Revision 0). Software changes were made to address issues identified following the initial release of software and additional unstr uctured testing was successfully completed without anomalies (Rev ision 1). Independent validation testing and regression testing was also completed without anomalies.

6.1.15 Report: PLD4 Test Item Transmittal Report (Revision 0)

A combination of different test methodologies was used including: simulation, testing of the individual chip, and testing the chip integrated into the CPU module in an APRM chassis.

Simulation: All tests passed, and the conclusion was that the logic tested matches the design intent but because the [[ ]], limited conclusions could be reached regarding the CUPL code. Therefore testing of the compiled CUPL code w ould be required in a real chip.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-13 Chip Testing: All tests passed, but there were two anomalies. The conclusion was that the logic worked as intended but that certain aspects of the design could not be completely vetted in the existing test setup. Therefore testing of the chip in an actual CPU card would be required to comple tely validate the design. Integration Testing: All tests passed. There were no anomalies. The operation of the new PLD was demonstrated to be correct.

6.2 Results of Independent Validation Testing 6.2.1 Report: APRM Functional Controller Software IV&V Module Test Summary Report Revision 0 6.2.1.1 Disposition of Reported Anomalies The following anomalies were identified during IV&V testing: Default parameter CONFIRMATION DENSITY TRIP AMPLITUDE DISCRIMINATOR was not set in accordance with the definition in the APRM Performance Specification 000N6426. Further investigation revealed that a constant value was set incorrectly in the software. The software was changed and an APRM subsystem validation regression test (Section 6.2.4) was performed and completed successfully without anomalies. Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.1.2 Results The independent module validation testing was completed successfully with no unresolved anomalies. The software was changed to resolve an anomaly. The revised software was accepted based on the review of the software changes and the successful completion of the subsystem test.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-14 6.2.2 Report: APRM Subsystem IV&V Integra tion Test Summary Report Revision 0 6.2.2.1 Disposition of Reported Anomalies The following anomalies were identified during IV&V testing: Three Field Direct Data Interface (FDDI) memory ranges were inaccessible from the APRM display. Further investigation revealed that the operation under test is not a requirement and is a feature added for diagnostic purposes. This feature restricts access to unused memory locations. The feature behaves as designed. Testing performed was determined to be adequate and no ch anges to the code were required. Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.2.2 Results The independent integration validation testing was completed successfully with no anomalies.

6.2.3 Report: APRM Subsystem Validati on Test Report Revision 0 6.2.3.1 Disposition of Reported Anomalies The following anomalies were identified during IV&V testing: The top end voltage during the Adjust Output test was at an incorrect value. Further investigation revealed that a constant value was set incorrectly in the software. The software was changed and an APRM subsystem validation regression test (Section 6.2.4) was performed and completed successfully without anomalies. Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.3.2 Results The independent APRM subsystem validation testing was completed successfully with no unresolved anomalies. The software was changed to resolve an anomaly. The revised software was accepted based on the review of the software changes and the successful completion of the subsystem test.

6.2.4 Report: APRM Subsystem Validati on Test Report Revision 1 NOTE: This Test Report is for APRM subsystem regression testing due to APRM functional software changes.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-15 6.2.4.1 Disposition of Reported Anomalies The APRM functional software was revised because of an error related to the default parameter CONFIRMATION DENSITY TRIP AMPLITUDE DISCRIMINATOR as described in a prior test report (Section 6.2.1.1). Regression testing was performed for this anomaly and completed successfully without anomalies and no new or undesired effects because of the software change. The APRM Functional software was revised because of an error related to the Adjust Output test as described in the prior test report (Section 6.2.3.1). Regression testing was performed for this anomaly and completed successfully without anomalies and no new or undesired effects because of the software change. 6.2.4.2 Results The independent APRM subsystem validation regression testing was completed successfully with no anomalies.

6.2.5 Report: APRM Subsystem Validati on Test Report Revision 2 NOTE: This Test Report is for APRM subsystem regression testing due to the 386SX CPU module change. A complete test execution of the APRM (Master) Subsystem Validation Test Procedure (2.2.3(3)) was completely performed after the board manufacturer (Gavial) reworked the CPU Modules on all APRMs, LPRMs, and RBMs.

6.2.5.1 Disposition of Reported Anomalies The APRM subsystem regression testing successfully completed without anomalies.

6.2.5.2 Results The independent APRM subsystem validation regression testing was completed successfully with no anomalies.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-16 6.2.6 Report: Rod Block Monitor and RBM ODA Validation Test Report Revision 0 6.2.6.1 Disposition of Reported Anomalies The following anomalies were iden tified during IV&V testing:

RBM ANOMALIES The initial setting for LPRM Auto Bypass failed. Troubleshooting was performed that replaced the RBM B CPU module in order to reset the Non-Volatile Random Access Memory (NVRAM) to its default condition.

RBM subsystem regression testing (Section 6.2.7) was performed for this anomaly and completed successfully without anomalies and it was verified that no changes to the code were required. RBM A and RBM B GE Input Output (G EIO) module self-t est frequently failed. Further investigation revealed [[ ]] worked without anomalies and this alternate DMA chip was used during FAT testing. No changes to the code

were required. The RBM did not send part of the LPRM flux data to the NIC. Further investigation revealed that a software change was necessary. NIC subsystem validation tes ting (Section 6.2.8) was performed after this RBM software change and completed successfully without anomalies. The RBM did not send part of th e Oscillation Power Range Monitor (OPRM) cell data to the NIC. Furt her investigation revealed that a software change was necessary. NIC subsystem validation regression testing (Section 6.2.8) was performed af ter this RBM software change and completed successfully without anomalies. Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were record ed. Testing performed was determined to be adequate and no changes to the code were required.

RBM ODA ANOMALIES Four LPRM Identifications (IDs) were displayed on the RBM ODA screen. Further investigation rev ealed that a software change was required. The software was changed and an RBM ODA subsystem

validation regression test (Section 6.2.7) was performed and completed successfully without anomalies.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-17 Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.6.2 Results The RBM subsystem and RBM ODA subsystem validation testing was completed successfully with no unresolved anomalies. The software was changed to resolve anomalies. The revised software was accepted based on the review of the software changes and the successful completion of the subsystem tests.

6.2.7 Report: Rod Block Monitor and RBM ODA Validation Test Report Revision 1 NOTE: This Test Report is for the RBM and RBM ODA subsystem regression testing due to RBM software changes, RBM ODA software changes, and 386SX CPU module changes. 6.2.7.1 Disposition of Reported Anomalies Regression testing was performed after replacing the RBM CPU module to confirm the correct operation of the LPRM Auto Bypass as described in the prior test report (Section 6.2.6.1) and completed successfully without anomalies and no new or undesired effects. Additional RBM regression testing was performed after the 386SX CPU module change. Regression testing completed successfully without anomalies and no new or undesired effects. The RBM ODA software was revised to correct a problem of not displaying all LPRM identification (ID) data as described in the prior test report (Section 6.2.6.1). Regression testing was performed for this anomaly and completed successfully without anomalies and no new or undesired effects because of the software change.

6.2.7.2 Results The independent RBM and RBM ODA subsystem validation regression testing and 386SX CPU module regression testing was completed successfully with no unresolved anomalies.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-18 6.2.8 Report: NUMAC Interface Computer (NIC) Validation Test Report Revision 0 6.2.8.1 Disposition of Reported Anomalies The NIC subsystem validation test procedure was executed in two phases. The first phase performed all test steps except for the Stability Data Message test for OPRM D cells and noted the following anomaly (described below). The RBM software was updated to correct a problem of not sending all OPRM cell data to the NIC as described in the prior test report (Section 6.2.6.1). Regression testing of the NIC subsystem validation test procedure was performed to verify the correct operation of the OPRM cell data that is sent to the NIC from the RBM; the same test steps that were skipped prior to the RBM software change. Testing completed successfully without anomalies. Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.8.2 Results The independent NIC subsystem validation testing and NIC subsystem validation regression testing was completed successfully with no anomalies.

6.2.9 Report: Two-Out-Of-Four Logic Module Validation Test Report Revision 1 6.2.9.1 Disposition of Reported Anomalies The following anomaly was identified during IV&V testing: Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.9.2 Results The independent Two-Out-Of-Four L ogic Module validation testing was completed successfully with no anomalies.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-19 6.2.10 Report: System Validation Te st Report Revision 0 6.2.10.1 Disposition of Reported Anomalies The following anomalies were identified during IV&V testing: RBM B GEIO module self-test freque ntly failed. Further investigation revealed [[ ]] worked without anomalies and this alternate DMA chip was used during FAT testing. No changes to the code were required. APRM B (Master and Slave) was not able to create a current to voltage (I/V) plot. Further investigation into this problem was undertaken while the instrument was in the failed st ate. All indications were that the software operated as expected but pe ripheral cards were not behaving as anticipated. The two chassis were power cycled and no further anomalies were observed. Behavior is attribut ed to the CPU noise issue observed affecting other peripheral cards in other chassis in the system. The CPU noise issue has been identified and re solved and no further peripheral card anomalies have been observed. No changes to the code were required. An unexpected cycle count value on APRM D (Slave). The cycle count

indicated a power cycle during the ni ght after regular testing hours. Further investigation revealed this reset was attributed to a hardware problem caused by a CPU timing issue and was resolved with the updated 386SX CPU module. Additional APRM and RBM regression testing (Sections 6.2.5 and 6.2.7) verified th at the replaced 386SX CPU module worked without anomalies and this revised CPU module was used during

FAT testing. No changes to the code were required. A bypass error associated to intermittent communications was resolved by cleaning the fiber optic connector. No changes to the code were required. A 'Coil Error R12' message was associated to a loose J4 connector on APRM D that was not securely ti ghtened during fiber optic cable manipulation performed during testi ng. No changes to the code were required. A 'Voter Pattern Error' message occurred when APRM D was put into

bypass. Further investigation revealed that a faulty non-production fiber optic cable was causing the problem. No changes to the code were required.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-20 Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.10.2 Results The independent system validation testing was completed successfully with no unresolved anomalies.

6.2.11 Report: Factory Acceptance Test Report Revision 0 6.2.11.1 Disposition of Reported Anomalies The following anomalies were identified during IV&V testing:

• ACUMEN was not available during the FAT performance. The HostSim application was used to download gain information instead of using ACUMEN. Testing performed was determined to be adequate and no

changes to the code were required.

• A comment made by PSEG on the connection/routing diagram that after further investigation revealed that it was not a FAT anomaly and discussions between PSEG and the design team resolved the issue. No

changes to the code were required.

• One of the APRM ODAs displayed ex tra lines on the display screen. Further investigation revealed a hardware error and the APRM ODA was replaced with the spare instrument. No changes to the code were required.

• A unexpected oscilloscope result was due to an inappropriate reset of the PRNM simulator signal generator. The test procedure was marked up and the test steps re-performed. Testing performed was determined to be adequate and no changes to the code were required.

• Test procedure errors analogous to typographical type errors, test procedure execution, and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no

changes to the code were required.

6.2.11.2 Results The independent FAT validation testing was completed successfully with no unresolved anomalies.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-21 6.2.12 Report: CPU Module PLD4 Component Va lidation Test Report Revision 0 Independent validation testing using the CPU Module PLD4 Component Validation Test Procedure (2.2.3(12)) was completely executed.

6.2.12.1 Disposition of Reported Anomalies The following anomaly was identified during IV&V testing:

• Test procedure errors analogous to typographical type errors and test procedure improvements/clarifications were recorded. Testing performed was determined to be adequate and no changes to the code were required.

6.2.12.2 Results The independent CPU Module PLD4 compone nt validation testing was completed successfully with no anomalies.

6.2.13 System Response Time Confirmation Testing performed in the System Validation Test Procedure (Section 2.2.3 (10)) and the Factory Acceptance Test Procedure (Section 2.2.3 (11)) verified the correct response times of all requirements associated to timing constraints. All measured timing responses were verified to not exceed the specified limits. Results of all timing verifications are contained in the data

sheets as described in Section 2.3.2 (items 7 and 8).

7.0 EVALUATION 7.1 APRM Software Based on the successful completion of the testing summarized in Sections 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.10, and 6.2.11, APRM software items 2.1.1(2, 3, 5-10) are approved for use in the Hope Creek PRNM application.

7.2 APRM ODA Software Based on the successful completion of the testing summarized in Sections 6.1.5, 6.1.6, 6.2.3, 6.2.4, 6.2.10, and 6.2.11, APRM ODA software item 2.1.1(4) is approved for use in the Hope Creek PRNM application.

7.3 RBM Software Based on the successful completion of the testing summarized in Sections 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.2.6, 6.2.7, 6.2.10, and 6.2.11, RBM software items 2.1.2(2, 4) are approved for use in the Hope Creek PRNM application.

7.4 RBM ODA Software Based on the successful completion of the testing summarized in Sections 6.1.11, 6.1.12, 6.2.6, 6.2.7, 6.2.10, and 6.2.11, RBM ODA software item 2.1.2(7) is approved for use in the Hope Creek PRNM application.

NEDO-33872 Appendix D (003N4828.01) Non-Proprietary Information-Class I (Public)

D-22 7.5 NIC Software Based on the successful completion of the testing summarized in Sections 6.1.13, 6.1.14, 6.2.8, 6.2.10, and 6.2.11, NIC software item 2.1.3(2, 3) are approved for use in the Hope Creek PRNM application.

7.6 2-Out-Of-4 Logic Modul e Programmable Logic Based on the successful completion of the testing summarized in Sections 6.2.9, 6.2.10, and 6.2.11, 2-Out-Of-4 Logic Module programmable logic items 2.1.4(1, 2, 3) are approved for use in the Hope Creek PRNM application.

7.7 386SX CPU Module, PLD4 Based on the successful completion of the testing summarized in Sections 6.1.15, 6.2.11, and 6.2.12, PLD4 programmable logic item 2.1.5(1) is approved for use in the Hope Creek PRNM application.

8.0 APPROVALS The GE Hitachi Nuclear Energy's Chief Engineer's Office approved this test summary report for PSEG's Hope Creek PRNM; electronic signatures are stored in GEH PLM Engineering Change Order for this document.

NEDO-33872 Revision 0 August 2016 Non-Proprietary Information - Class I (Public)

Appendix E PLM Source Record 003N2569.01 HCGS PRNM Failure Modes and Effects Analysis Report

Copyright 2016 GE-Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-ii IMPORTANT NOTICE REGARDING CONTENTS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the U.S. Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-iii Revision Summary Revision Section Modified Required Changes 0 All Initial issue. 1 Various Incorporated customer comments.

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-iv TABLE OF CONTENTS

1.0 INTRODUCTION

............................................................................................................. E-1

2.0 TECHNICAL EVALUATION

......................................................................................... E-2 3.0

SUMMARY

AND CONCLUSION .................................................................................. E-4

4.0 REFERENCES

.................................................................................................................. E

-5 NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-v ACRONYMS AND ABBREVIATIONS Term Definition APRM Average Power Range Monitor D3 Diversity and Defense-in-Depth DI&C Digital Instrumentation & Controls FMEA Failure Modes and Effects GEH GE-Hitachi Nuclear Energy Americas LLC IEEE Institute of Electrical and Electronics Engineers ISG Interim Staff Guidance LAR License Amendment Request LPRM Local Power Range Monitor LTR Licensing Topical Report NRC Nuclear Regulatory Commission NUMAC Nuclear Measurement Analysis and Control PRNM Power Range Neutron Monitor PSEG Public Service Enterprise Group RBM Rod Block Monitor RPS Reactor Protection System SE Safety Evaluation

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-1

1.0 INTRODUCTION

This report fulfills the requirement of a Phase 2 submittal per Digital Instrumentation & Controls (DI&C) Interim Staff Guidance (ISG)-06 (Reference 1) by providing an evaluation of Failure Modes and Effects (FMEA) of the Nuclear Measurement and Control (NUMAC) Power Range Neutron Monitoring (PRNM) system to be implemented in the Hope Creek Generating Station. The requirements of the FMEA are specified in Section D.9.4.2.1.1, whic h also noted that: "There is no specific regulatory guidance on the format, complexity or conclusions concerning the FMEA. Each system must be independently assessed to conclude that the FMEA is sufficiently detailed to provide a useful assessment of the potential failures and the effects of those failures. For example, an FMEA is a method for documenting a single failure analysis which is conducted in

accordance with IEEE Standard 379-2000 as endorsed by RG 1.53 Rev. 2." In accordance with DI&C-ISG-06, the review of the PRNM system would be Tier 2 as the PRNM has a previously approved Licensing Topical Report (LTR, Reference 2). The Nuclear Regulatory Commission (NRC) approved the design of the NUMAC PRNM retrofit design as described in the LTR based on its conformance to Institute of Electrical and Electronics Engineers (IEEE) Standard 279-1971, "Criteria for Protection Systems for Nuclear Power Generating Stations" (Reference 3). The LTR provided an FMEA and an evaluation of its conformance to the single failure criteria. The staff evaluation concluded that "(the PRNM design) provides the required isolation and physical independence to ensure acceptable defense against Single-Failures." (Section 3.2, Reference 4).

Recent regulatory guidance and industry standards updated the definition of the single-failure criterion. Namely, Regulatory Guide 1.153, "Criteria for Safety Systems" (Reference 5) endorses IEEE Standard 603-1991, "IEEE Standard Criteria for Safety Systems for Nuclear Power Generating Stations" (Reference 6), an d Regulatory Guide 1.53, "Application of the Single-Failure Criterion to Safety Systems" (Reference 7) endorses IEEE Standard 379-2000, "IEEE Standard Application of the Single-Failure Criterion to Nuclear Power Generating Station Safety Systems" (Reference 8). These two IEEE standards provide an updated single-failure criterion that is somewhat different from the one in IEEE Standard 279-1971 (Reference 3) because they include some additional considerations in the following three sub-clauses of IEEE Standard 379-2000:

• Clause 5.2 Nondetectable failure

• Clause 5.3 Cascaded failures

• Clause 5.4 Design basis events This evaluation supplements the information in the previously approved LTR (Reference 2) to address the single failure analysis as defined in the latest regulations and industry standards and provides the necessary information for an FMEA as specified in DI&C ISG-06.

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-2

2.0 TECHNICAL EVALUATION

As discussed in the original NUMAC PRNM LTR (Reference 2) Section 4.4.1.1.2, the PRNM design satisfies Clause 4.2 (Single-Failure Criterion) of IEEE Standard 279-1971 (Reference 3) because of system architecture, wiring practices, and isolation. The Local Power Range Monitor (LPRM) cable arrangement under the reactor vessel and routing to the control room is not changed for the replacement PRNM. In the replacement PRNM, the same split of LPRMs is maintained unchanged except that the LPRMs will provide inputs to each of the four Average Power Range Monitor (APRM) channels instead of the original six APRM channels. The four NUMAC APRM channels are mounted in separate bays in the cabinet. The 2-Out-Of-4 Logic Modules are mounted in separate housings with isolation from the APRM channels. Communications between APRMs and the 2-Out-Of-4 Logic Modules and between APRMs and Rod Block Monitors (RBMs) is by fiber-optic link. The trip outputs of the 2-Out-Of-4 Logic Modules are routed to the Reactor Protection System (RPS) through the original paths without change. This combination of architecture, wi ring practices, and isola tion provides the required electrical isolation and separation to satisfy Clause 4.2 (Single-Failure Criterion) of IEEE Standard 279-1971 (Reference 3); and as discussed in more detail below, IEEE Standard 603-1991 (Reference 6) and IEEE Standard 379-2000 (Reference 7). The updated definition of the Single-Failure Criterion, as found in IEEE Standard 379-2000 (Reference 7) and IEEE Standard 603-1991 (Reference 6) includes additional considerations in three sub-clauses. The following discussion addresses each of these sub-clauses, and shows that the PRNM design satisfies them. The first sub-clause requires that the system perform its safety functions in the presence of a single failure concurrent with all identifiable but non-detectable failures. As disc ussed above, in connection with IEEE Standard 279-1971 Clause 4.2, the NUMAC PRNM continues to perform it safety function in the presence of a single failure. The system is designed as fail-safe with self-test and watch-dog timer capabilities. As explained in Section 6.3.5 of the PRNM LTR (Reference 2), "the automatic self-test coverage for the APRM and OPRM functions includes all of the major signal processing modules from the LPRM inputs to the final voted output to the RPS." The NRC staff concluded that "PRNM self-testing features ensure that a failed channel will result in either an alarm or a trip of the associated APRM, OPRM, or voter channel. Failure of an APRM or OPRM channel results in an alarm or trip in each voter channel. Failure of a voter channel results in an alarm or a half trip in the reactor protection system, depending on the failure." See Section 3.6.2 of the NRC Safety Evaluation (SE) in Reference 4. The NRC staff also agreed that any failures not detected by self-test will be detected by channel check activities. Watch-dog timers are provided to monitor computer processing to assure that the module's computer does not hang up (and thereby cease to perform se lf-test functions) and provide continued communication to the 2-out-of-4 voters. The combination of self-test, watch-NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-3 dog timer and periodic surveillance ensure that the NUMAC PRNM system meets the additional consideration of single failures that are "identifia ble but non-detectable". As discussed in Reference 9, Appendix D, Technical Design Reviews are conducted during the PRNM project. These reviews require an FMEA as one of the deliverables, among others. During the Hope Creek PRNM project, the findings in the NUMAC PRNM LTR and SE were confirmed. Specifically, identified failure modes that could impair a trip function were detectable. Additionally, it should be noted that the NUMAC PRNM will continue to perform its safety function even in the presence of a second random failure. The system has "N-2 redundancy," meaning that if any two APRM channels are out of service, the safety function is performed by the remaining two channels. As for the 2-Out-Of-Four Logic Modules, the design is fail-safe and they interpret a loss of signal from an APRM as a trip condition. The PRNM design meets the first sub-clause. The second sub-clause requires that the system perform its safety function in the presence of all failures caused by the single failure. As discussed above in connection with IEEE Standard 279-1971, the redundant channels are independent and isolated. Other clauses in the industry standards address this aspect of system designs, and other sections in the License Amendment Request (LAR) demonstrate that the PRNM design is acceptable. See Section 4.4.1.1.6 of the NUMAC LT R (Reference 2), Section 3.5 of the NRC SE (Reference 4), and Section 3.3.1 of Appendix O of Reference 9. Besides physical and electrical isolation, another related aspect is inter-division communication. The PRNM inter-division communication is discussed in Appendix A of Reference 9, which addresses D.7.2 of DI&C-ISG-06 (Reference 1) and references the DI&C-ISG-04 (Reference 10) compliance matrix from previous submittals. Collectively, the PRNM isolation and the acceptable inter-division communication ensure that a credible fault or failure in one channel will not cascade to and impair another channel. Therefore, the effects of the single-failure are confined to that single channel, and with only one channel impaired, a scram occurs when any two of the remaining three APRM channels detect a trip condition. The PRNM design meets the second sub-clause. The third sub-clause requires that the system perform it safety functions for a design basis event in the presence of all failures and spurious system actions that cause or are caused by the design basis events requiring the safety function. The Hope Creek PRNM system Diversity and Defense-in-Depth (D3) analysis (Reference 9, Appendix I) Section 4 tabulates all the Hope Creek design basis events which credit the PRNM. Based on a review of the events that require a PRNM trip signal, the events will not impair the PRNM. Additionally, the NUMAC PRNM equipment is qualified, as discussed in Sections 4.4.1.1.5 and 4.4.2 in the NUMAC LTR (Reference 1) and Appendix H of Reference 9. Thus, the design meets the third sub-clause.

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-4 3.0

SUMMARY

AND CONCLUSION In summary, the retrofit NUMAC PRNM system satisfies the single-failure criterion, as it is defined in IEEE Standard 279-1971, IEEE Standard 603-1991, and IEEE Standard 379-2000. The new definitions of the single failure do not intr oduce any new failure mode that was not considered in the LTR (Reference 2).

NEDO-33872 Appendix E (003N2569.01) Non-Proprietary Information - Class I (Public)

E-5

4.0 REFERENCES

1. NRC DI&C-ISG-06, "Licensing Pro cess," Revision 1, January 19, 2011.

2. GE Nuclear Energy, "Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC PRNM) Retrofit Plus Option III Stability Trip Function," NEDC-32410P-A Volume 1, October 1995.

3. IEEE Standard 279, "Criteria for Protection Systems for Nuclear Power Generating Stations," 1971.

4. NRC letter to Mr. David W. Reigel, NUMAC Project Manager, "Acceptance of Licensing Topical Report NEDC- 32410-P, Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC-PRNM) Retrofit Plus Option III Stability Trip Function (TAC No. M90616)," September 5, 1995.

5. NRC Regulatory Guide 1.153, "Criteria for Safety Systems," Revision 1, June 1996.

6. IEEE Standard 603, "IEEE Standard Criteria for Safety Systems for Nuclear Power Generating Stations," 1991.

7. IEEE Standard 379, "IEEE Standard Application of the Single-Failure Criterion to Nuclear Power Generating Station Safety Systems," 2000.

8. NRC Regulatory Guide 1.53, "Application of the Single-Failure Criterion to Safety Systems," Revision 2, November 2003.

9. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," NEDC-33864P, Revision 0, September 2015.

10. NRC DI&C-ISG-04, "Highly Integrated Control Rooms - Communications Issues (HICRc),"

Revision 1, March 6, 2009.

NEDO-33872 Revision 0 August 2016 Non-Proprietary Information - Class I (Public)

Appendix F PLM Source Record 002N9894.00 HCGS PRNM Qualification Summary Report

Copyright 2015, 2016 GE Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-ii Information Notice This is a non-proprietary version of the document NEDC-33872P Appendix F, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

IMPORTANT NOTICE REGARDING THE CONTENTS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the U.S. Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-iii Revision Summary Revision Date Revision Summary A 08/28/2015 Draft Issue 0 03/31/2016 Incorporated Customer Comments

• Implemented editorial comments

• Added RRCS Power Supply

• Removed DLVPS

• Corrected CE101 limits

• Addressed UFP (§1.2.1, §4.5)

• Added discussion on seismic qual relating to the panel rear doors Incorporated Component Updates

• Added 386SX-CPU G003 Analysis

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-iv Table of Contents

1. INTRODUCTION ..................................................................................................................

..... F-1 1.1 Purpose .......................................................................................................................

.................. F-1 1.2 Scope .........................................................................................................................

................... F-1 1.2.1 Equipment Covered ............................................................................................................. F-2 1.2.2 Qualification Approach .......................................................................................................

F-3 1.3 References ....................................................................................................................

................ F-3 1.4 Acronyms and Abbreviations ....................................................................................................

.. F-3 2.

SUMMARY

REQUIREMENTS ................................................................................................. F-5 2.1 Qualification Basis ...........................................................................................................

............ F-5 2.2 Quality Assurance .............................................................................................................

........... F-6 2.3 Report Approval ...............................................................................................................

........... F-6 2.4 Traceability ..................................................................................................................

................ F-7

3. QUALIFICATION REQUIREMENTS ....................................................................................... F-7 3.1 Seismic Requirements ..........................................................................................................

........ F-7 3.2 EMC Requirements ..............................................................................................................

........ F-7 3.3 Environmental Requirements ..................................................................................................... F-10 4. EQUIPMENT EVALUATION ................................................................................................. F-10 4.1 APRM ..........................................................................................................................

.............. F-13 4.2 2/4 Logic Module ..............................................................................................................

......... F-14 4.3 QLVPS .........................................................................................................................

.............. F-15 4.4 RRCS ..........................................................................................................................

............... F-15 4.5 RBM............................................................................................................................

............... F-15 4.6 RBM Interface Module ..........................................................................................................

.... F-16 4.7 ODA ...........................................................................................................................

................ F-16 4.8 4-Channel Analog Isolator .....................................................................................................

.... F-17 4.9 NIC............................................................................................................................

................. F-17 4.10 Fiber Optic Bypass Switch .....................................................................................................

.... F-18 4.11 APRM Calibration & Monitoring Panel .................................................................................... F-18 4.12 RBM Calibration & Monitoring Panel ...................................................................................... F-19 4.13 LPRM Connector Panel ..........................................................................................................

... F-19 4.14 MDR Relay Mounting ............................................................................................................

... F-19 5. QUALIFICATION

SUMMARY

............................................................................................... F-20 5.1 Seismic .......................................................................................................................

................ F-20 5.2 Environmental .................................................................................................................

........... F-21 5.3 EMC ...........................................................................................................................

................ F-21

6. CONCLUSIONS ...................................................................................................................

.... F-22 ATTACHMENT A - TRACEABILITY ................................................................................................ F-23 ATTACHMENT B - REFERENCES* .................................................................................................. F

-24 ATTACHMENT C - HCGS SEISMIC FLOOR RESPONSE SPECTRA ............................................ F-28

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-1 1. INTRODUCTION 1.1 Purpose GE Hitachi Nuclear Energy (GEH) is supplying a Nuclear Measurement Analysis and Control (NUMAC) Power Range Neutron Monitor (PRNM) system to Hope Creek Generating Station. The NUMAC PRNM system upgrade provides a functional replacement for the existing analog PRNM system. The replacement NUMAC PRNM system is designed to maintain functional operability under conditions specified in the Public Service Enterpri se Group (PSEG) Hope Creek PRNM System Detailed Specification H-1-SE-KDS-0494 (Reference B.3.1). The replacement NUMAC PRNM system equipment is required to encompass those qualification requirements specified in H ope Creek Specificati on H-1-SE-KDS-0494 (Reference B.3.1), the NUMAC PRNM System Requirements Specification (Reference B.2.1), and the NUMAC Requireme nts Specification (Reference B.2.2 and/or B.3.3). This Qualification Summary Report directly supports the Hope Creek PRNM qualification program (Reference B.3.2) ensuring equipment qualification specifica lly to Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1).

1.2 Scope This Qualification Summary Report provides a summary of the Hope Creek NUMAC PRNM system equipment to the seismic, Electromagnetic Compatibility (EMC), and environmental qualification requirements identified in the above stated customer and GEH technical specifications. This document summarizes the qualification of the NUMAC PRNM system to those requirements based on [[

]] This summary report addresses the panel level qualification to the EMC, environmental, and seismic requirements representative of the equipment locations and installation discussed in the Hope Creek PRNM qualification program (Reference B.3.2). Typically, the environmental and seismic qualifications have been performed at a subsystem level while EMC qualification has already been performed at a system (panel) level. This summary report performs the environmental qualification at the panel level based on the margins of the [[ ]] equipment. The panel level seismic qualification to the Hope Creek floor response spectrum is provided based on a panel structural analysis performed by GEH seismic analysis team (Reference B.3.3).

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-2 1.2.1 Equipment Covered The conclusions documented in this qualification summary apply to the specific GEH supplied equipment itemized in Table 1.2-1 excluding any qualification exceptions noted. The items listed in Table 1.2-1 consist of equipment from the GEH engineering Bill of Material (BOM) identified as Hope Creek NUMAC PRNM Project (268X1330SAG001) and includes equipment from the NUMAC PRNM System Instruments and Hardware (268X1331SAG001), NUMAC PRNM Panel and Hardware (268X1332SAG001), and covers the NUMAC PRNM Sp are Parts (268X1333SAG001). The Hope Creek PRNM qualification program (Reference B.3.2) stated that the Universal Front Panel (UFP) display was to be redesigned and that a component qualification would be performed. It has been decided that the UFP would not need to be redesigned and the previously qualified UFP (References B.4.3, B.4.4, and B.4.5) will be applied to the Hope Creek PRNM system.

Table 1.2-1: Equipment Supplied Item Subsystem Name Part Identification 1 Average Power Range Monitor (APRM) 343A3623SAG001 2 2/4 Logic Module 304A3807SAG001 3 Quad Low Voltage Power Supply (QLVPS) 304A3721AAG001 4 Redundant Reactivity Control System (RRCS) Power Supply 233C4050G002 5 Rod Block Monitor (RBM) 343A3941SAG001 6 RBM Interface Module 304A3806SAG001 7 APRM Operator Display Assembly (ODA) 304A3800SAG001 8 RBM ODA 304A3800SAG002 9 4-CH Analog Isolator 148C6130AAG001 10 NUMAC Interface Computer (NIC) 147C3736SAG001 11 Fiber Optic (F/O) Bypass Switch 148C6420G001 12 APRM Cal/Monitoring Panel 148C7146G003 13 RBM Cal/Monitoring Panel 148C7155G001 14 Local Power Range Monitor (LPRM)

Connector Panel 148C6759G315, G316, G317, G625, G626, G335, G336, G337, G646, G347, G355, G356, G357 15 MDR Relay Mounting 234C7806G002 NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-3 1.2.2 Qualification Approach Qualification of the Hope Creek PRNM system equipment is established by the following approach and which provides an outline of this report beginning at Section 3 through Section 6.

a) Identify the applicable requirements for the Hope Creek PRNM system equipment.

b) Identify the [[ ]] NUMAC PRNM system equipment.

c) Compare the [[ ]] equipment design to the Hope Creek PRNM system equipment.

d) Compare the qualification requirements of the [[ ]] equipment to the Hope Creek requirements.

e) Qualify the equipment listed in Table 1.2-1 to the Hope Creek PRNM system requirements (a) using comparison method (b, c, d) and/or any performed qualification type-test or analysis.

f) Document the conclusions.

1.3 References Provided in Attachment B.

1.4 Acronyms and Abbreviations Table 1.4-1: Acronyms Term Description APRM Average Power Range Monitor ASL Approved Supplier List BOM Bill of Material CE "Conformité Européenne", European Conformity CPU Central Processing Unit dB Decibel dBµA Decibel-Microampere (unit of conducted emission amplitude) dBµV Decibel-Microvolt (unit of radiated electric field amplitude) dBpT Decibel-Picoteslas (unit of radiated magnetic field amplitude) DBE Design Basis Event E-W East-West (or SS, Side-Side)

EFT Electrical Fast Transient EL Electroluminescent EMC Electromagnetic Compatibility EMI Electromagnetic Interference NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-4 Table 1.4-1: Acronyms Term Description EPROM Erasable Programmable Read-Only Memory EQ Environmental Qualification ESD Electrostatic Discharge EU European Union ºF Degree(s) Fahrenheit F/O Fiber Optic g Unit of gravitational acceleration GEH GE-Hitachi Nuclear Energy Americas LLC GEIO General Electric Input Output GHz Giga hertz Gy Gray (Unit of absorbed radiation dose) hr Hour HVPS High Voltage Power Supply Hz Hertz I&C Instrumentation and Controls IEC International Electrotechnical Commission IEEE Institute of Electrica l and Electronic Engineers IV&V Independent Verification and Validation kHz kilohertz kV kilovolt(s) LPRM Local Power Range Monitor m meter(s) µV microvolt(s)

MCR Main Control Room MHz Megahertz N-S North-South (or FB, Front-Back) NIC NUMAC Interface Computer NPI New Product Introduction NPP Nuclear Power Plant NRC Nuclear Regulatory Commission NUMAC Nuclear Measurement Analysis and Control OBE Operating Basis Earthquake NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-5 Table 1.4-1: Acronyms Term Description ODA Operator Display Assembly PCB Printed Circuit Board PLM Product Lifecycle Management PRNM Power Range Neutron Monitor PSEG Public Service Enterprise Group psia Pound per Square Inch Absolute QA Quality Assurance QLVPS Quad Low Voltage Power Supply Rad Unit of absorbed radiation dose RBM Rod Block Monitor RFI Radio-Frequency Interference RRCS Redundant Reactivity Control System RRS Required Response Spectra SFPLM Spent Fuel Pool Level Monitor SSE Safe Shutdown Earthquake TID Total Integrated Dose UFP Universal Front Panel US United States V/M Volt(s) per meter WC Water Column 2.

SUMMARY

REQUIREMENTS 2.1 Qualification Basis The basis for the qualification of the NUMAC PRNM system equipment being supplied to Hope Creek is the [[ ]] NUMAC PRNM equipment and similar-type subsystems. The basis for qualification also includes performance of type-testing or analysis of specific subsystems or components provided to Hope Creek where identified.

All NUMAC qualifications [[ ]] have been performed in accordance with the descriptions for those methods as stated in Institute of Electrical and Electronic Engineers (IEEE) Standard 323 (Reference B.6.1). In addition to the description provided in the IEEE Standard 323 for analysis qualification met hod, is that an analysis performed on NUMAC equipment includes a comparison based on the similarity to previously type-tested equipment. Any NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-6 previous NUMAC qualification citing a specific IEEE Standard (e.g., 323, 344) revision year is inclusive of all IEEE revision years for that standa rd. GEH NUMAC qualifications are performed in accordance with the guidance provided in Nuclear Regulatory Commission (NRC) regulatory guides and the endorsed IEEE standard for that period. In all instances, any NUMAC equipment identified [[ ]] has been qualified to either NUMAC Requirements Specification References B.2.2 or B.2.3. The latter reference represents the first version of the specifications required to be met by NUMAC equipment while the first reference represents the current NUMAC requirements document. The environmental conditions specified by the two requirements are unchanged at the subsystem level with the current requirements version including component temperature and humidity conditions. The seismic Required Response Spectra (RRS) has changed with more acceleration points throughout the response range a nd slightly higher peak accel erations although the response spectrum is virtually the same profile. The EMC requirements have changed based on the evolving industry standards and changes to NRC Regulatory Guide 1.180 (Reference B.5.3).

In any instance of a previous qualification to either NUMAC Requirements Specification, the basis for equipment qualification of the Hope Creek PRNM system equipment are the requirements specified in Hope Creek Sp ecification H-1-SE-KDS-0494 (Reference B.3.1).

2.2 Quality Assurance The NUMAC PRNM system equipment identified in Table 1.2-1 and covered by this Qualification Test Report is manufactured by Gavial. Gavial is on the GEH Approved Supplier List (ASL) and therefore subject to the quality assurance guidance in the GEH Quality Assurance Program Description (Reference B.1.1). In addition to following GEH quality assurance guidance for qualifying equipment, all qualifications of NUMAC equipment, including this summary report, are performed in accordance with the guidance found in NRC regulatory guides, NRC interim staff guidance and NRC endorsed IEEE and International Electrotechnical Commissi on (IEC) standards, all of which are included in References B.5 and B.6.

2.3 Report Approval This qualification summary report is indepe ndently reviewed and approved in accordance with GEH verification processes which are part of the GEH Quality Assurance (QA) program (Reference B.1.1) approved by the NRC. The responsible approving personnel for this summary report are identified by GEH's documentation database, Product Lifecycle Management (PLM). The resp onsible personnel are part of the GEH Independent Verification and Validation (IV&V) team forming an internal Instrumentation and Control (I&C) organization reporting to the Chief Engineer's office and which are technically and managerially independent from the design team. The individuals NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-7 performing IV&V activities possess the appropriate sk ills, training, knowledge, and experience necessary to execute those activities.

2.4 Traceability The matrix in Attachment A provides the traceability of this Qualification Summary Report to the appropriate sections of Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1), NUMAC PRNM System Requirements Specification (Reference B.2.1), and the NUMAC Requirements Specification (References B.2.2 and B.2.3). This Qualification Summary Report is intended to demonstrate that the NUMAC PRNM system design meets the qualification requirements identified in those specifications and the trace matrix provides that linking information.

3. QUALIFICATION REQUIREMENTS This section identifies the qualification requirements as stated in Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1). The NUMAC PRNM system must meet those qualification requirements specified and demonstrate the ability of the equipment to perform its intended safety function(s) under the Hope Creek normal and abnormal service conditions including de sign basis events. The NUMAC PRNM system is to be located in the Hope Creek Main Control Room (MCR) where the existing analog PRNM system hardware is located. The replacement NUMAC PRNM system is to be qualified based on operating in locations / conditions that are designated mild-environments. The equipment qualification includes requirements for seismic, EMC, and environmental (temperature, humidity, pressu re, and radiation).

3.1 Seismic Requirements The seismic requirements identified in Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1) are presented in graphical form based on the Safe Shutdown Earthquake (SSE) and Operating Basis Earthquake (OBE) permutations of Vertical, Horizontal (E-W), and Horizontal (N-S) floor response spectra. Those graphs are specified in Attachment 9 of the Reference B.3.1 requirements document and are copied to Attachment C of this report for convenience of that information. A seismic event is considered a design basis event and no other postulated beyond-Design Basis Event (DBE) are considered other than specified below under Section 3.3.

3.2 EMC Requirements Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1) specifies that EMC qualification shall demonstrate the PRNM system equipment is in compliance with NRC Regulatory Guide 1.180 (Reference B.5.3). Tables 3.2-1 and 3.2-2 identify the test levels and frequency ranges which encompass Regulatory Guide 1.180 (Reference B.5.3) and which are in agreement with the NUMAC Requirements Specification (Reference B.2.2) and Hope Creek PRNM qualification program (Reference B.3.2). Therefore, Tables 3.2-1 NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-8 and 3.2-2 identify the requirements of Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1) for EMC qualification.

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-9 Table 3.2-1: EMC Qualificat ion Requirements - Immunity EMC Category Test Test Levels Electrostatic Discharge (ESD) IEC 61000-4-2 8 kV contact, 15 kV air High Frequency Radiated Electromagnetic Field Immunity IEC 61000-4-3 10V/M (26 MHz to 18 GHz) Electrical Fast Transient (EFT) / Burst IEC 61000-4-4 +/- 2 kV power lines, +/- 1 kV other lines. Surge Immunity IEC 61000-4-5 IEC 61000-4-12 +/- 4 kV power, +/- 2 kV shields and grounds 100kHz & 1MHz ring waves High Frequency Conducted Immunity IEC 61000-4-6 97dBµA (10 kHz to 200 MHz) Low Frequency Conducted MIL Std 461E CS101 136dBµV (30 Hz to 5 KHz) to 116dBµV (150kHz) Low Frequency Radiated MIL Std 461E RS101 180dBpT (30 Hz to 60 Hz) to 116dBpT (100kHz)

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-10 Table 3.2-2: EMC Qualification Requirements - Emission EMC Category Test Test Levels Power Leads, Low Frequency Conducted MIL Std 461E

CE101 90dBµA (120Hz to

1.15kHz) to 86dBµA

(10kHz) Power Leads, High

Frequency Conducted MIL Std 461E

CE102 100dBµV (10kHz) to

79dBµV (112kHz to

500kHz) to 73dBµV

(500kHz to 2MHz)

Magnetic Fields, Low

Frequency Radiated MIL Std 461E

RE101 160dBpT (30Hz) to

90dBpT (100kHz)

Electric Fields, High

Frequency Radiated MIL Std 461E

RE102 59dBµV/m (2MHz to 25MHz) to 72dBµV/m (1GHz) to 82 dBµV/m

(18GHz) 3.3 Environmental Requirements The environmental requirements identified in Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1) are re produced in Table 3.3-1. Table 3.3-1: Normal Operating and Abnormal Conditions Parameter Normal Min Normal Max Abnormal Min Abnormal Max Temperature 66°F 78°F 78°F 78°F Humidity 20% 60% 40% 50% Pressure 0"WC 0.25"WC -0.25"WC 0.25"WC Radiation, Gamma Rate (Rad/hr) 0.00 5.00E

-4 0.00 5.00E

-4 Radiation, Gamma Total Integrated Dose (TID) (Rad) 0.00 2.00E 2 0.00 2.00E 2 Accident and/or post-accident conditions (beyond-DBE) follow the Abnormal operating conditions listed in Table 3.3-1.

4. EQUIPMENT EVALUATION The NUMAC PRNM system equipment being provided to Hope Creek as a replacement PRNM system is to be qualified to the seismic, EMC, and environmental qualification requirements stated above. The fo llowing subsections provide an evaluation of the

[[ ]] PRNM system equipment to the Hope NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-11 Creek PRNM system equipment by comparing the equipment at the subsystem and component levels.

Table 4-1 provides a tabulated association of the GEH subsystem part numbers identified for the Hope Creek PRNM system to previously qualified PRNM or other similar NUMAC subsystems.

Table 4-1: Hope Creek PRNM Equipment Similarity Item Subsystem Name Qualified Subsystem Hope Creek Subsystem Qualification References 1 APRM 343A3623G001 343A3623SAG001 B.3 (4), (12)

B.4 (3), (4), (5), (17) 2 2/4 Logic Module 304A3807G002, 304A3807WAG001 304A3807SAG001 B.3 (5), (6)

B.4 (1), (2), (6),

(18) 3 QLVPS 304A3721G003, 304A3721AAG001 304A3721AAG001 B.3 (8), B.4 (4), (6), (7), (17), (18) 4 RRCS Power Supply DA323A1124P001, 233C4050G002 233C4050G002 B.3 (6), B.4 (15) 5 RBM 304A3720G001 343A3941SAG001 B.4 (8), (18) 6 RBM Interface Module 304A3806G002 304A3806SAG001 B.4 (7), (9), (10), (18) 7 APRM & RBM ODA 304A3800G006 304A3800SAG001, 304A3800SAG002 B.4 (11), (12), (13), (18)

B.3 (7) 8 4-Channel Analog Isolator 148C6130G001 148C6130AAG001 B.4 (14), (18) 9 NIC 147C3736CHG001 147C3736SAG001 B.3 (8), (9), (10), B.4 (16) 10 F/O Bypass Switch 148C6420G001 148C6420G001 B.3 (8) B.4 (7), (9), (18) 11 APRM Cal/Monitoring Panel 148C7146G001 148C7146G003 B.3 (8) B.4 (7), (9), (10), (18) 12 RBM Cal/Monitoring Panel 148C7155G001 148C7155G001 B.3 (8), B.4 (7), (9), B.4 (10), (18), (19)

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-12 Table 4-1: Hope Creek PRNM Equipment Similarity Item Subsystem Name Qualified Subsystem Hope Creek Subsystem Qualification References 13 LPRM Connector Panel 148C6759 G315-G317, G335-G337, G347, G355-G357, G625-G626, G646 148C6759G315, G316, G317, G625, G626, G335, G336, G337, G646, G347, G355, G356, G357 B.3 (8), (18) 14 MDR Relay Mounting none 234C7806G002 B.3 (11)

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-13 4.1 APRM A comparison can be made between the [[ ]] APRM identified in Table 4-1 and the Hope Creek APRM subsystem. The listed components identified by different part numbers in the two APRM BOMs are a nameplate, the two Erasable Programmable Read-Only Memory (EPROM) sets, and the High Voltage Power Supply (HVPS) component. Th e Hope Creek APRM contains two less LPRM components than the previously qualifie d version. The Central Processing Unit (CPU) component in the Hope Creek APRM is identified with the same base part number but with a different group number, 178B3777G003. The nameplates are made from the same label stock and are differentiated only by the identifying information printed onto the label. The EPROMs are the same I&C part with only different firmware programmed. Neither of those differences have an effect on the APRM subsystem qualification. [[

]] The HVPS component was redesigned to pr ovide an additional higher output voltage resulting in modifications to the original design. The redesigned HVPS was tested to the environmental temperature and humidity extremes while validating the performance characteristics of the component, including a short-circuit test of the output. The environmental type-testing has been completed confirming the qualification of the HVPS to the specified temperature and humidity requirements (Reference B.3.12). The seismic, EMC, and other qualification requirements are addressed in the HVPS Qualification Plan-Analysis (Reference B.3.4). The CPU component identified as 178B3777G003 in the Hope Creek APRM subsystem is qualified to the environmental, seismic, and EMC requirements specified in the NUMAC Requirements Specification (Reference B.2.2). The qualification of the 386SX-CPU G003 assembly was performed by analysis per th e Component Qualifica tion Report (Reference B.3.13). The generic APRM was qualified to the seismic, EMC, and environmental qualification requirements specified in the NUMAC Requirements Specification (Reference B.2.2).

Each of those qualifications is provided in the respective test reports identified by References B.4.3, B.4.4, and B.4.5. Based on those type-tests performed and per NUMAC PAR22 (Reference B.4.17), the generic APRM ha s a qualified service life of 40 years.

The Hope Creek APRM subsystem is qualified to the seismic, EMC, and environmental qualification requirements specified in the NUMAC Requirements Specification (Reference B.2.2).

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-14 4.2 2/4 Logic Module

[[

]] The difference in nameplates does not affect the qualification of the 2/4 Logic Module subsystem. The Hope Creek relay logic card has been qualified to seismic, EMC, and environmental (radiation and pressure) specifications by the Relay Logic Card Qualification Analysis (Refer ence B.3.5). The Hope Creek relay logic card has been qualified to environmental (aging, temperature, and humidity) specifications by the Relay Logic Card Environmental Qualific ation Test Report (Reference B.4.1).

The difference in the Hope Creek 2/4 Logic Module chassis to the previously qualified 2/4 Logic Module chassis is one wire added, the conne ctor plate, and the front panel. The added wire is merely to provide an additional route of the internal sourced voltage. The connector plates are mechanically identical with the qualified version only taking a different part number due to silk-screening based on the NPP where the equipment is being applied. The front panel assemblies are identical with only mechanical differences of the X-Y test rotary switch, compression latches, and one added wire. The X-Y test rotary switch is identical to the previous qualified switch with a difference in internal contacts being gold-plated for the Hope Creek switch. This improvement provides an enhancement relating to operability and reliability without affecting qualification. The compression latches do not affect the EMC or environmental qualifi cation and only need to be addressed based on seismic qualifications. These compression latches are considered seismically qualified for the Hope Creek 2/4 Logic Module because these same latches were most recently qualified during the New Product Introduction (NPI) Spent Fuel Pool Level Monitor (SFPLM) project (Reference B.4.2) which is a similar size and weight and is a structurally similar NUMAC subsystem.

The generic 2/4 Logic Module was qualified in the PRNM 2/4 Logic Module Environmental Qualification (EQ) Test Report (Reference B.4.6) to environmental qualification requirements that meet or exceed the NUMAC Requirements Specification (Reference B.2.2). The NPP 2/4 Logic Module was qualified in the NUMAC PRNM Equipment Qualification (Reference B.3.6) to seismic and EMC qualification requirements specified in the NUMAC Requirements Specifi cation (Reference B.2.3). The generic 2/4 Logic Module has a qualified service life of 40 years per Reference B.4.18 except as follows: the qualified life of component pow er supply DA233A3785P001 in the 2/4 Logic Module is 26 years.

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-15 The Hope Creek 2/4 Logic Module subsystem is qualified to the seismic, EMC, and environmental qualification requirements specified in the NUMAC Requirements Specification (References B.2.2 or B.2.3) as stated in the above paragraphs.

4.3 QLVPS The QLVPS equipment identified in Table 4-1 for Hope Creek was [[

]] qualified per the evaluation in Reference B.3.8). The evaluation was based on the seismic type-testing (Reference B.4.7) performed on a QLVPS contai ning the identical internal power supply, DA265A1313P002. The qualified QLVPS identified with the same part number as Hope Creek was [[ ]] type-tested to EMC and environmental requirements (References B.4.4 and B.4.6, respectively). The [[ ]] qualified QLVPSs were type-tested to the seismic, EMC, and environmental requirements specified in the NUMAC Requirements Specification (Reference B.2.2). Th e individual power supplies installed in the QLVPS have a qualified service life of 26 years per NUMAC PAR22 (Reference B.4.17). The Hope Creek QLVPS subsystem is qualified to the seismic, EMC, and environmental qualification requirements specified in the NUMAC Requirements Specification (Reference B.2.2).

4.4 RRCS The equipment identified in Table 4-1 as pr eviously qualified equipment include seismic and environmental qualification (Reference B

.3.6) of a RRCS power supply containing the identical modular power supply, DA323A1124P001, used in the Hope Creek RRCS. The qualified RRCS power supply identified with the same part number as the Hope Creek was

[[ ]] type-tested to EMC requirements (Reference B.4.15). The

[[ ]] qualified RRCS power supply was qualified to the seismic, EMC, and environmental requirements specified in the NUMAC Requirements Specification (Reference B.2.2). The RRCS power supply ha s a qualified service lif e of 26 years based on similarity of internal parts in the design as compared to the QLVPS.

The Hope Creek RRCS subsystem power supply is qualified to the seismic, EMC, and environmental qualification requirements specified in the NUMAC Requirements Specification (Reference B.2.2).

4.5 RBM The NUMAC RBM identified as the [[ ]] qualified to seismic, environmental and EMC requirements documented by test reports identified in the RBM subsystem Qualification Plan-Analysis (Reference B.4.8). That analysis compares the Hope Creek RBM BOM to the generic RBM and identifies that the components identified for each subsystem ar e essentially identical with the exception of the chassis assemblies. Although the RBM chassis assemblies are different, the Hope Creek RBM chassis assembly is identical to the generic qualified APRM chassis assembly identified as Item 1 of Table 4-1 and which includes the same UFP 223D6445G002. The NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-16 analysis in Reference B.4.8 concluded the Hope Creek RBM subsystem is qualified to the requirements specified in the Hope Creek PRNM qualification program (Reference B.3.2) based on similarity to the generic NUMAC RBM subsystem. The CPU component identified as 178B3777G003 is included in the Hope Creek RBM subsystem and is discussed in Section 4.1 a bove. The Component Qualification Report (Reference B.3.13) also addressed General Electric Input Output (GEIO) Component 2397171G001 and confirmed the GEIO maintains qualification to the NUMAC Requirements Specification (Reference B.2.2). The NUMAC RBM subsystem has a qualified service life of 40 years per Reference B.4.18. The Hope Creek RBM subsystem is qualified to the seismic, EMC, and environmental requirements specified by the NUMAC Requirements Specification (Reference B.2.2).

4.6 RBM Interface Module The NUMAC RBM interface module identified as the [[ ]] was type-tested and qualified to seismic, environmental and EMC requirements documented by test reports arch ived in References B.4.7, B.4.9, and B.4.10, respectively. The type-testing of the [[ ]] RBM interface module was performed to the requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3). The Hope Creek RBM interface module is identical to the qualified equipment with one exception. The qualified subsystem contains an additional Printed Circuit Board (PCB) not installed and not required in the Hope Creek subsystem, thus confirming the Hope Creek RBM interface module represents a subset of the qualified version and is enveloped by the same specified qualification requirements. The NUMAC RBM interface module subsystem has a qua lified service life of 40 years per Reference B.4.18 except as follows: the qualified life of component power supply DA233A3785P001 in the RBM interface module is 26 years. The Hope Creek RBM interface module is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3).

4.7 ODA The NUMAC ODA identified as the [[

]] was type-tested and qualified to seismic, EMC, and environmental requirements documented by test reports archived in References B.4.11, B

.4.12, and B.4.13, respectively.

The type-testing of the [[ ]] ODA was performed to the requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3). Although the Hope Creek ODA has a completely di fferent identification of part numbers in the BOM, the Hope Creek ODA design is same as the previous [[ ]] subsystem. Both designs contain an Electroluminescent (EL) display which is the only functionality of NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-17 the ODA subsystem and is the only significan t difference between the Hope Creek ODA and [[ ]] qualified ODA. The equipment also includes the hardware necessary for assembly and connectivity to the supported NUMAC subsystem. Therefore, the main concern within the subsystem relating to qualification would be the display. Reference B.3.7 addresses those differences and provides a justification for the qualification of the EL display in the Hope Creek ODA to the [[ ]] qualified ODA EL display. The NUMAC ODA subsystems have a qualified serv ice life of 40 years per Reference B.4.18 except as follows: the qualified life of the component power supply, 343A1242, in the ODA is 35 years per Reference B.2.4.

The Hope Creek ODA is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3).

4.8 4-Channel Analog Isolator The NUMAC 4-channel analog isolator identified as the [[ ]] qualified equipment was type-tested and qualified to seismic, EMC, and environmental requirements documented by the NUMAC PRNM Generic Qualification Summary (R eference B.4 (18)) and EQ Test reports (Reference B.4.14). The testing of the qualified 4-channel analog isolator was performed to the requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3). The 4-channel analog isolator subsystem has a qualified service life of 40 years per Reference B.4.18. The Hope Creek 4-channel analog isolator is identical to the [[ ]] qualified subsystem. The Hope Creek 4-channel analog isolator is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3).

4.9 NIC The NUMAC interface computer identified as the [[ ]] qualified equipment was qualified by an analysis (Reference B.3.10) to an environmentally qualified (type-tested) generic NIC (Reference B.3.9). The generic qualified NIC was type-tested to EMC requirements documented by test report archived in Reference B.4.16. The testing of the generic qualified NIC was performed to environmental and EMC, (including European Conformity (CE) mark), requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.2). The Hope Creek NIC is identical to the

[[ ]] qualified subsystem identified in Table 4-1 with only the exception of software. The software change does not affect the [[ ]] qualifications. In addition, the BOM for the [[ ]] qualified NIC identifies components as "Inactive" and specifies to use the components called-out in the Hope Creek NIC.

Because the NIC is a non-safety device and is required to be mounted into a non-safety panel, there have been no seismic requirements specified for that equipment and therefore NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-18 that subsystem has not been seismically qualified. The NIC subsystem has a qualified service life of 40 years per Reference B.3.8. The Hope Creek NIC is qualified to the EMC requirements equivalent to those specified in the NUMAC Requirements Specification (Ref erence B.2.2) with one exception to surge test levels. The EMC testing performed did confirm the NIC met the levels specified in Regulatory Guide 1.180 (Reference B.5.3) as well as the levels specified for the CE mark (Reference B.6.7). The Hope Creek NIC is qualified to the temperature requirements specified by the NUMAC Requirements Specifi cation (Reference B.2.2). The generic NIC does not meet the maximum humidity requirement of the NUMAC Requirements Specification of 90% although the generic NIC was qualified to a maximum humidity of 80%. Therefore, the Hope Creek NIC exceeds the maximum humidity requirement of 60%

specified in Table 3.3-1 while maintaining sufficient margin.

4.10 Fiber Optic Bypass Switch The NUMAC Fiber Optic (F/O) bypass switch id entified as the previously qualified equipment was type-tested to seismic requirements documented by the test report archived in Reference B.4.7. The [[ ]] qualified F/O bypass switch was analyzed to environmental requirements documented by th e test report archived in Reference B.4.9.

The [[ ]] qualified F/O bypass switch was analyzed to EMC requirements documented by qualification summary reports archived in References B.4.18 and B.3.8. The testing and analysis of the qualified F/O bypass switch was performed to the requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3). The F/O bypass switch has a qualified service life of 40 years per Reference B.4.18. The Hope Creek F/O bypass switch is identical to the previously qualified subsystem.

The Hope Creek F/O bypass switch is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3).

4.11 APRM Calibration & Monitoring Panel The NUMAC APRM calibration and monitoring panel identified as the [[

]] qualified equipment was type-tested to seismic and EMC requirements documented by test reports archived in References B.4.7 and B.4.10, respectively. The [[

]] qualified APRM calibration and monitoring panel was analyzed to environmental requirements documented by test report archiv ed in Reference B.4.9. The testing and analysis of the qualified APRM calibration and monitoring panel was performed to the requirements equivalent to those specified in the NUMAC Requirements Specification (References B.2.3). The Hope Creek APRM calibration and m onitoring panel is identical to the [[ ]] qualified equipment with two ex ceptions. The front panel overlays are different which do not affect qualification and the [[ ]] qualified subsystem contains a rotary switch not installed and not required for the Hope Creek subsystem. The NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-19 minor differences identified provide evidence the Hope Creek APRM calibration and monitoring panel represen ts a subset of the qu alified version and ther efore is enveloped by the same specified qualification requirements. The APRM calibration and monitoring panel has a qualified service life of 40 years based on Reference B.4.18. The Hope Creek APRM calibration and monitoring panel is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (References B.2.3).

4.12 RBM Calibration & Monitoring Panel The NUMAC RBM calibration and monitoring panel identified as the [[

]] qualified equipment was qualified by analysis to seismic and environmental requirements and type-tested to EMC requirements documented by test reports archived in References B.4.7, B.4.9, and B.4.10, respectively. The qualification of that RBM calibration and monitoring panel was performed to the requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3). The RBM calibration and monitoring panel has a quali fied service life of 40 years based on References B.4.18 and B.4.19. The Hope Creek RBM calibration and monitoring panel is identical to the [[ ]] qualified subsystem. The Hope Creek RBM calibration and monitoring panel is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3).

4.13 LPRM Connector Panel The NUMAC LPRM connector panel identified as the [[ ]] qualified equipment was qualified by analysis to seismic, EMC and environmental requirements documented by qualification summary report identified in Reference B.3.8. The qualification analysis of the LPRM connector panel was performed to the requirements

equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3). The LPRM connector panel has a qualified service life of 40 years per Reference B.4.18. The Hope Creek LPRM connect or panel is identical to the previously qualified subsystem.

The Hope Creek LPRM connector panel is qualified to the seismic, EMC, and environmental requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.3).

4.14 MDR Relay Mounting The Hope Creek MDR relay mounting kit consists of hardware screws to be supplied (N663B15006) which mounts the customer provided MDR-4171 relay onto the MDR mounting plate. An analysis was performed (Reference B.3.11) to confirm the hardware specified is qualified to withstand the seismic vibrations of the RRS of the NUMAC NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-20 Requirements Specification (Reference B.2.2). The hardware mounting kit is not affected by the environmental or EMC conditions. The MDR relay mounting screws (N663B15006) contained in the MDR relay mounting kit (234C7806G002) are qualified to the seismic requirements equivalent to those specified in the NUMAC Requirements Specification (Reference B.2.2). Based on the above statement it is not necessary to address an environmental or EMC qualification of hardware mounting equipment.

5. QUALIFICATION

SUMMARY

Any NUMAC equipment [[

]] qualified to Reference B.2.3 is considered qualified to Reference B.2.2 even if that specific subsystem has not been type tested to the later reference specifications. Because the equipment designs are based on a standard NUMAC subsystem product family; the subsystems are built based on the same platform, the components making up the subsystems are built with the same interface and mounting, and those components within different subsystems perform the same functionality, it is justified to state the NUMAC equipment meets both specifications. In addition, in many instances components are used across different subsystems and the same component qualified by Reference B.2.3 was qualified again in the different subsystem by Reference B.2.2, further justif ying the interchangeab ility and qualification equivalency.

The GEH process verifies and validates that all NUMAC equipment maintains a form, fit, and functional equivalence in order to support the specified qualification requirements and that equivalence is maintained with each component or subsystem revision.

5.1 Seismic The Hope Creek seismic requirements are identified in Section 3.1 and specified by the floor response spectra in Attachment C of this summary report. The Hope Creek NUMAC subsystems identified in Table 1.2-1 combine to make up the Hope Creek NUMAC PRNM system. Each subsystem, with the exception of the NIC, has been qualified by type-testing and/or analysis to one or the other NUMAC Requirements Specifica tion (References B.2.2 or B.2.3). The RRS specified in either of the NUMAC Requireme nts Specifications

envelop the floor response spectra in Attachment C while qualifying the NUMAC subsystems based on a rigid frame mount. Therefore, it is necessary to qualify the equipment at the panel level based on the Hope Creek floor response spectra. The Hope Creek PRNM system equipment in Table 1.2-1 (excluding NIC) is seismically qualified for operating in the modified PRNM panel assemblies to the Hope Creek site-specific seismic design basis loads per the analysis provided in the Hope Creek PRNM Seismic Report (Reference B.3.3).

The panel analysis of Reference B.3.3 did not consider the rear doors of the PRNM assembly although they would add structural integrity when closed. The purpose of the panel analysis is to evaluate the seismic qualification for the Hope Creek PRNM. It would NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-21 be a conservative approach to not consider the presence of the rear door. Previous qualification of the panel door would still be applicable with the PRNM implementation.

5.2 Environmental The Hope Creek PRNM system equipment in Table 1.2-1 has been qualified by type-testing and/or analysis to the environmental requirements specified in the NUMAC Requirements Specifications (References B.2.2 or B.2.3). Both of the requirements identify environmental conditions that exceed the Hope Creek environmental requirements stated in Section 3.3 of this summary report. The environmental qualification temperature levels for the NUMAC subsystem equipment includes greater than 20% margin above the Hope Creek requirements while accounting for a conservative internal panel heat rise of 20°F. The humidity and TID of radiation qualification levels of the NUMAC PRNM system equipment also includes greater than 20% margin over the Hope Creek requirements of Table 3.3-1. The pressure differentials identified for the Hope Creek NPP in Table 3.3-1 are negligible compared to the qualification levels of 13-16 psia identified for the previously qualified equipment. The radiation dose rate based on the Hope Creek requirements compared to the previously qualified NUMAC equipment is at the same level. The NUMAC PRNM subsystem equipment identified by Hope Creek PRNM qualification program (Reference B.3.2) Section 3.1 as safety-related and non-safety related system equipment is specified in Section 4 of this summary report as having a qualified service life of 40 years. The exceptions are the power supply components in the 2/4 Logic Module, QLVPS, and RBM interface module which have a qualified service life of 26 years and in the ODA which has a qualified service lif e of 35 years. The Hope Creek PRNM system equipment in Table 1.2-1 is environmentally qualified to the conditions identified by the Hope Creek requirements of Section 3.3.

5.3 EMC The Hope Creek PRNM system equipment in Table 1.2-1 has been qualified by type-testing and/or analysis to the EMC requirements specified in the NUMAC Requirements Specifications (References B.2.2 or B.3.3). While some of the generic qualified equipment was performed to earlier EMI/RFI standards as identified by qualification to Reference B.2.3, those early standards (IEC Standard 801.[x]) specify test levels comparable to the current standards (IEC Standard 61000-4-[x]) identified in Reference B.2.2 and Tables 3.2-1 and 3.2-2. In addition, various NUMAC subsystems have been qualified to test standards beyond the requirements of Tables 3.2-1 and 3.2-2 by meeting the requirements of the European Union (EU) CE mark. Hope Creek Specification H-1-SE-KDS-0494 (Reference B.3.1) specifies that EMC qualification shall demonstrate the PRNM system equipment is in compliance with NRC Regulatory Guide 1.180 (Reference B.5.3). The NUMAC Requirements Specification (Reference B.2.2) is directly aligned with the requirements specified in Regulatory NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-22 Guide 1.180; therefore, equipment quali fied in accordance with the NUMAC Requirements Specification is in comp liance with NRC Regulatory Guide 1.180. The Hope Creek PRNM system equipment in Table 1.2-1 is qualified to the EMC requirements identified for the Hope Creek NPP in Section 3.2, Tables 3.2-1 and 3.2-2.

6. CONCLUSIONS Based on the comparisons of the Hope Creek NUMAC PRNM system equipment to the

[[ ]] qualified NUMAC PRNM equipment provided by the evaluation in Section 4 and the analysis and test summarized in Section 5, it is concluded the equipment identified in Table 1.2-1 is qualified to the Hope Creek NUMAC PRNM system requirements specified in Section 3 (Tables 3.2-1, 3.2-2, 3.3-1.) and Attachment C

.

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-23 ATTACHMENT A - TRACEABILITY Hope Creek Qualification Summary Report Hope Creek Specification H-1-SE-KDS-0494 NUMAC PRNM System Requirements Specification 26A8742SA NUMAC Requirements Specification 23A5082AA NUMAC Requirements Specification 23A5082 3.1, Attachment C 4.2.3, Attachment 9 9.2 3.2, Table 3.2-1, Table 3.2-2 4.2.2 9.3 3.3, Table 3.3-1 4.2.1, Table 4.2-1 9.1 4.1, 4.3, 4.4, 4.14 4.2 4.2 4.2.1-4.2.4 4.2.5-4.2.6 4.5-4.8, 4.10-4.13 4.2 4.9 4.2.1-4.2.5 5.1 4.2.3, Attachment 9 9.2 4.2.6 4.2.6 5.2 4.2.1, Table 4.2-1 9.1 4.2.1-4.2.4 4.2.1-4.2.4 5.3 4.2.2 9.3 4.2.5 4.2.5 6 4.2 9

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-24 ATTACHMENT B - REFERENCES* B.1 Applicable GEH Documents

1. GE Hitachi Nuclear Energy, "Quality Assurance Program Description,"

NEDO-11209-A, Revision 12, February 11, 2015. B.2 Specifications

1. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix F, Part 1, "NUMAC PRNM System Requirements Specification," NEDC-33864P, Revision 0, September 2015.

2. GE Hitachi Nuclear Energy, "NUMAC Requirements Specification," 23A5082AA, Revision 2.*

3. GE Hitachi Nuclear Energy, "NUMAC Requirements Specification," 23A5082, Revision 2.*

4. GE Hitachi Nuclear Energy, Power Suppl y Purchase Part, 343A1241, Revision 3.* B.3 Project Documents

1. PSEG, Hope Creek Generating Station Power Range Neutron Monitoring System Detailed Specification, H-1-SE-KDS-0494, Revision 2.

2. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," Appendix H, "NUMAC Qualification Program HCGS," NEDC-33864, Revision 0, September 2015.

3. GE Hitachi Nuclear Energy, "Hope Creek PRNM Seismic Report," 002N8130, Revision 0.*

4. GE Hitachi Nuclear Energy, "HVPS Qu alification Plan-Analysis," 002N4741, Revision 0.*

5. GE Hitachi Nuclear Energy, "Relay Logic Card Qualification Analysis," 002N4371, Revision 0.*

6. GE Hitachi Nuclear Energy, NUMAC Power Range Neutron Monitoring (PRNM) Equipment Qualification, Re vision 1 0000-0125-3409, Revision 2.*

7. EL Display Similarity Report, Z40-00008-00.*

8. NUMAC PRNM Components 268X1331TCG001, 268X1332TCG001, G002, 268X1333TCG001, Qualification Summary, Revision 1.*

9. GE Hitachi Nuclear Energy, "NUMAC Interface Computer (NIC) Chassis Qualification Summary," 0000-0099-3083, Revision 0.*

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-25

10. GE Hitachi Nuclear Energy, "Qualification Summary Report for NUMAC Wide Range Neutron Monitor (WRNM) System Components 492X201CHG001 ~ G005,"

Revision 0, 0000-0141-8764 Revision 0.*

11. GE Hitachi Nuclear Energy, "HCG S MDR Relay Mounting Analysis,"

DBR-0012639.*

12. GE Hitachi Nuclear Energy, "NUMAC HVPS EQ Test Report," 002N9975, Revision 0.*

13. GE Hitachi Nuclear Energy, "NUMAC 386SX-CPU (178B3777G003) Component Qualification Report," 003N4156, Revision 0.* B.4 Qualification Test Reports

1. GE Hitachi Nuclear Energy, "Relay Logic Card Environmental Qualification Test Report," 002N4034, Revision 0.*

2. GE Hitachi Nuclear Energy, "SFPLM System Seismic Qualification Test Report,"

0000-0165-3199, Revision 1.*

3. GE Hitachi Nuclear Energy, "New Standardized NUMAC Instruments, Seismic Qualification Test Report,"

Revision 2, 0000-0118-9530, Revision 4.

4. GE Hitachi Nuclear Energy, "New Standardized NUMAC Instruments, APRM (343A3623G001) and PCI (343A3626G001, LRM (343A3628G001 & WRNM (343A3627G001), Electromagnetic Compatibility (EMC) Test Report," Revision 0, 0000-0118-9536, Revision 0.*

5. GE Hitachi Nuclear Energy, "New Standardized NUMAC Instruments, APRM (343A3623G001) and PCI (343A3626G001, LRM (343A3628G001 & WRNM (343A3627G001), Environmental Qualification Test Report," Revision 0, 0000-0118-9533, Revision 0.*

6. GE Hitachi Nuclear Energy, "PRNM Two-out-of-Four Logic Module (304A3807WAG001) and QLVPS Power Supply (304A3721AAG001)

Environmental Qualification Test Re port," Revision 0, 0000-0132-9737, Revision 0.*

7. GE Nuclear Energy, "Seismic Qualification Test Report Generic NUMAC PRNM System," Revision 0, A00-02506-05 Index M5.*

8. GE Hitachi Nuclear Energy, "RBM Subsystem Qualification Plan-Analysis,"

001N0166R0, Revision 0.*

9. GE Nuclear Energy, "Qualification Test Report Generic NUMAC PRNM System,"

Revision 0, A00-02506-05 Index M3.*

10. GE Nuclear Energy, "Electromagnetic Compatibility Test Report NUMAC PRNM System," A00-02506-05 Index M4; includes Appendix C of Test Report Index M4-C1.*

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-26

11. GE Nuclear Energy, "Interim Report - NUMAC WRNM Seismic Test, A00-02506-03, Index V; Seismic Qualification Test of NUMAC WRNM, Detector Preamp, ODA, and 4-Ch Analog Isolator Module," A00-02506-03, Index Y.*

12. GE Nuclear Energy, "Engineering Test Report NUMAC EMI Test, WRNM, Detector Preamplifier, Analog Isolator, and ODA," A00-02506-03 Index T3.*

13. GE Nuclear Energy, "Environmental Qualification Test Report NUMAC WRNM ODA 304A3800G006," A00-02506-03 Index U.*

14. GE Nuclear Energy, "Environmental Qualification Test Report NUMAC 4 Channel Analog Isolator 148C6130G001," A00-02506-03 Index X.*

15. GE Hitachi Nuclear Energy, "EMC Test Report of NUMAC PRNM System," 0000-0119-4535 Revision 0.*

16. GE Hitachi Nuclear Energy, "Engineering Services Test Report for CE EMC Qualification Revision 0," 0000-0142-3836, Revision 0.*

17. GE Hitachi Nuclear Energy, "NUMAC Product Analysis Report," Addendum 22, Revision 0, 0000-0118-9524, Revision 0.*

18. GE Nuclear Energy, "NUMAC PRNM Generi c Qualification Summ ary," Revision 1, A00-02506-05, Index M9.*

19. GE Nuclear Energy, "NUMAC Product Analysis Report," Addendum 14, "Generic NUMAC PRNM System," Revision 0, A00-02506-05 Index M1.* B.5 Regulatory Documents

1. NRC Regulatory Guide 1.209, "Guidelines for Environmental Qualification of Safety-Related Computer-Based Instrumentation and Control Systems in Nuclear Power Plants," March 2007.

2. NRC Regulatory Guide 1.100, "Seismic Qualification of Electrical and Active Mechanical Equipment and Functional Qualification of Active Mechanical Equipment for Nuclear Power Plants," Revision 3, September 2009.

3. NRC Regulatory Guide 1.180, "Guidelines for Evaluating Electromagnetic and Radio-Frequency Interference in Safety-Related Instrumentation and Control Systems," Revision 1, October 2003.

4. NRC DI&C-ISG-06, "Licensing Process," January 19, 2011. B.6 Industrial Codes and Standards

1. IEEE Standard 323-2003, "IEEE Standard for Qualifying Class 1E Equipment for Nuclear Power Generating Stations."

2. IEEE Standard 344-2004 "IEEE Recommended Practice for Seismic Qualification of Class 1E Equipment for Nuclear Power Generating Stations."

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-27

3. IEC 61000-3-2, Edition 3.2, 2009-04, "Limits for harmonic current emissions (equipment input current <= 16A per phase)."

4. IEC 61000-3-3, Edition 3.0, 2013-05, "Limitation of voltage changes, voltage fluctuations and flicker in public low-voltage supply systems, for equipment with rated current <= 16A per phase and not subject to conditional connection."

5. IEC 61000-4-4, Edition 3.0, 2012-04, "Electromagnetic compatibility (EMC) - Part 4-4: Testing and measurement techniques - Electrical fast transient/burst immunity test." 6. IEC 61000-4-5, Second Edition, 2005-11, "Electromagnetic compatibility (EMC) - Part 4-5: Testing and measurement techniques -Surge immunity test."

7. IEC 61000-6-2, Second Edition, 2005-01, "General Standards - Immunity for Industrial Environments."

8. IEC 61000-6-4, Edition 2.1, 2011-02, "General Standards - Emission standard for industrial environments."

9. IEC 61010-1, Edition 3.0, 2010-06, "Safety requirements for electric equipment for measurement, control, and laboratory use - Part 1: General requirements."

10. MIL-STD-461E, 1999, "Requirements for the Control of Electromagnetic Interference Characteristics of Subsystems and Equipment."

• Unpublished, available for NRC audit on request.

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-28 ATTACHMENT C - HOPE CREEK SEISMIC FLOOR RESPONSE SPECTRA

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-29

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-30

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-31

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-32

NEDO-33872 Appendix F (002N9894.00) Non-Proprietary Information - Class I (Public)

Page F-33

NEDO-33872 Revision 0 August 2016

Non-Proprietary Information - Class I (Public)

Appendix G PLM Source Record 003N2682.01 HCGS PRNM Reliability Analysis

Copyright 2016 GE-Hitachi Nuclear Energy Americas LLC All Rights Reserved

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-ii INFORMATION NOTICE This is a non-proprietary version of the document NEDC-33872P Appendix G, which has the proprietary information removed. Portions of the document that have been removed are indicated by an open and closed bracket as shown here [[ ]].

NOTICE REGARDING CONTEN TS OF THIS REPORT Please Read Carefully The design, engineering, and other information contained in this document are furnished for the purposes of supporting a license amendment request by PSEG for a NUMAC Power Range Neutron Monitor upgrade in proceedings before the US Nuclear Regulatory Commission. The only undertakings of the GEH respecting information in this document are contained in the contract between PSEG and GEH, and nothing contained in this document shall be construed as changing the contract. The use of this information by anyone other than PSEG, or for any purpose other than that for which it is intended, is not authorized; and, with respect to any unauthorized use, GEH makes no representation or warranty, express or implied, and assumes no liability as to the completeness, accuracy, or usefulness of the information contained in this document, or that its use may not infringe privately owned rights.

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-iii Revision Summary Revision Section Modified Revision Description 0 All Initial Issue 1 Various Incorporated customer comments

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-iv TABLE OF CONTENTS ACRONYMS AND ABBREVIATIONS ................................................................................... G-v 1.0 Introduction ..................................................................................................................

..... G-1 1.1 Differences from CGS PRNM ............................................................................................. G-1 1.2 PRNM Hardware Reliability Data ....................................................................................... G-2 1.3 PRNM Unavailability Analysis............................................................................................ G-5 1.4 Conclusion ....................................................................................................................

....... G-5

2.0 REFERENCES

.................................................................................................................. G

-6 NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-v ACRONYMS AND ABBREVIATIONS Term Definition APRM Average Power Range Monitor CGS Columbia Generating Station HVPS High Voltage Power Supply I&C Instrumentation and Control ISG Interim Staff Guidance I/V Current to voltage LPRM Local Power Range Monitor LTR Licensing Topical Report MTBF Mean Time Between Failure NUMAC Nuclear Measurement Analysis and Control OPRM Oscillation Power Range Monitor PRNM Power Range Neutron Monitor PSEG Public Service Enterprise Group RBM Rod Block Monitor RPS Reactor Protection System US United States NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-1

1.0 INTRODUCTION

The purpose of this appendix is to address review criteria and guidelines for reliability analyses contained in Sections D.9.4.2.15 and D.10.4.2.15 of Digital I&C-ISG-06 (Reference 1) for the Hope Creek Power Range Neutron Monitor (PRNM). This is accomplished by confirming that the conclusions contained in Section 6.5 of the PRNM Licensing Topical Report (LTR) remain valid, based upon the plant-specific configuration of the Hope Creek PRNM modification. This analysis is intended to supplement the reliability analysis contained in Section 5.3.14, 6.0 and Appendix F of the PRNM LTR (Reference 2) as modified by PRNM LTR Supplement 1 (Reference 3) and the reliability analysis previously submitted for the Columbia Generating Station (CGS) PRNM project, NEDC-33751P Revision 3 (Reference 4). The PRNM configuration for Hope Creek is similar to the PRNM configuration installed for CGS. Therefore, the reliability analysis for the Hope Creek PRNM is based on the evaluation of the differences between the Hope Creek PRNM configuration and CGS configuration.

1.1 DIFFERENCES FROM CGS PRNM The three hardware differences in the Hope Creek PRNM configuration identified in the Hope Creek Nuclear Measurement Analysis and Control (NUMAC) PRNM Upgrade Phase 1 report (Reference 5) Appendix J, are:

1. New relay logic card in the 2-out-of-4 voters that is less susceptible to the heat and aging failure mechanisms.

2. Enhanced High Voltage Power Supply (HVPS) that provides the voltage to Local Power Range Monitor (LPRM) detectors up to 240 VDC versus the previous

200 VDC for detector plateau testing current to voltage (I/V) curves.

3. New front panel display (due to obsolescence issues). Other as built changes are:

1. The Average Power Range Monitor (APRM) and Rod Block Monitor (RBM) instrument chassis has been redesigned to include a new backplane for improved signal integrity.

2. The 386SX computer module has been e nhanced to reduce internal noise.

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-2 1.2 PRNM HARDWARE RELIABILITY DATA 1.2.1 New relay logic card - [[

]] Therefore, the unavailability calculat ion in Reference 4 is not affected. 1.2.2 Enhanced HVPS - Based on manufacturer's qualitative assessment, the predicted reliability data of the previous version HVPS is applied to the enhanced HVPS. Thus, the failure rate data contained in Reference 4 is applied to the new HVPS. Therefore, the unavailability calculation in Reference 4 is not affected. 1.2.3 New front panel display - Pred icted reliability data is provided in Table 1-1 for the new front panel display. [[ ]] The failure data below is provided for information only and does not affect the unavailability analysis in Reference 4. 1.2.4 The Hope Creek APRM and RBM instrument chassis has been redesigned to include a new backplane which eliminates wire wrap terminations for improved signal integrity.

[[

]] Therefore, the unavailability analys is in Reference 4 is not affected. 1.2.5 The 386SX computer module is enha nced to reduce internal noise. [[ ]] Therefore, the unavailability analysis in Reference 4 is not affected.

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-3 Table 1-1 Reliability Data for Hope Creek PRNM Equipment Failure Rate Data for New Module Failure Rate Data for Hope Creek PRNMS Hardware Hardware Item Max. Qty (Note 1) Max. Qty (Note 1) MTBF, Field, hours (Note 2) MTBF, MIL 217, hours (Note 3) MTBF for Analysis, hours (Note 4) Non-Self-Test MTBF, hours (Note 5)Max. Qty (Notes 1 & 10) Max. Qty (Notes 1 & 9) Max. Qty (Notes 1 & 10) MTBF, Field, hours (Notes 2 & 14) MTBF, MIL 217, hours (Note 3) MTBF for analysis, hours (Note 4) Non-Self-Test MTBF, hours (Note 5)Analysis APRM/RBM APRM RBM APRM RBM LPRM Front Panel 1 1 - [[ ]]- 1 1 1 - 4.92E+044.92E+04 (Note 11)

-- [[

]]

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-4 Notes for Table 1-1: 1. Typical maximum quantities of modules used in the instrument or assembly are shown for information. 2. MTBF from field data is included where there has been sufficient field experience. In some cases (marked with "v"), this is vendor-supplied data. In other cases, the field experience is with a similar module (marked with an "s"). 3. MIL 217 calculations [[

]] 4. The MTBF used in reliability analysis is shown in the "MTBF for analysis" column. These values are, in order of preference:

[[

]] 5. "Non-Self-Test MTBF" is the estimated failure rate of the portions of a module not covered by the automatic self-test and required for safety or important rod block function.

[[

]] 6. Included with APRM instrument chassis (no modules) failure rate and in the overall APRM instrument MTBF.

• 7. Included with front panel failure rates. *

8. The relay logic card [[ ]]

• 9. RBM and RBM interface module are non-safety related, and do not perform, nor do they support directly, the PRNM critical functions which are described in Section 3.3.2 of the PRNM LTR (Reference 2) and modified by the PRNM LTR Supplement 1 (Reference 3). [[

]] 10. APRM and LPRM instruments are identical and utilize the same set of modules. 11. Module does not support or provide the PRNM critical functions which are described in Section 3.3.2 of the PRNM LTR (Reference 2) as modified by LTR Supplement 1 (Reference 3). [[

]] 12. [[ ]]

• 13. [[ ]]

• 14. [[ ]]

• Not applicable to Hope Creek; retained for comparison to the CGS analysis (Reference 4).

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-5 1.3 PRNM UNAVAILABILITY ANALYSIS The failure rates of the new hardware items affecting unavailability calculations are equal to or better than the modules they replaced. The front panel is not included in the unavailability analysis calculations. Therefore the unavailability analysis calculations contained in the reliability analysis previously submitted for the CGS PRNM project, NEDC-33751P Revision 3 (Reference 4), are still valid with the different hardware items in the Hope Creek PRNM upgrade.

1.4 CONCLUSION

Hope Creek PRNM and CGS PRNM configurations are similar. The differences between the two PRNM systems have been evaluated and it has been concluded that the conclusions contained in NEDC-33751P Revision 3 (Reference 4) are applicable to the Hope Creek PRNM upgrade. The criteria of 10 CFR 50 Appendix A, Criterion 21-"Protection system reliability and testability" are therefore satisfied following installation of the Hope Creek PRNM modification.

NEDO-33872 Appendix G (003N2682.01) Non-Proprietary Information - Class I (Public)

G-6

2.0 REFERENCES

1. NRC DI&C-ISG-06, "Task Working Group #6: Licensing Process," Revision 1, January 19, 2011.

2. GE Nuclear Energy, "Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC PRNM) Retrofit Plus Option III Stability Trip Function,"

NEDC-32410P-A, October 1995.

3. GE Nuclear Energy, "Nuclear Measurement Analysis and Control Power Range Neutron Monitor (NUMAC PRNM) Retrofit Plus Option III Stability Trip Function," NEDC-32410P-A, Supplement 1, November 1997.

4. GE Hitachi Nuclear Energy, "Columbia Generating Station Power Range Neutron Monitoring System Reliability Analysis," NEDC-33751P Revision 3, October 2012.

5. GE Hitachi Nuclear Energy, "Hope Creek Generating Station NUMAC PRNM Upgrade," NEDC-33864P, Revision 0, September 2015.

6. Military Handbook, "Reliability Prediction of Electronic Equipment," MIL-HDBK-217F, December 1991.