ML12073A392

From kanterella
Jump to navigation Jump to search

WNA-VR-00283-WBT-NP, Rev. 7, Nuclear Automation Watts Bar Unit 2 NSSS Completion Program I&C Projects Iv&V Summary Report for the Post Accident Monitoring System. Attachment 2
ML12073A392
Person / Time
Site: Watts Bar Tennessee Valley Authority icon.png
Issue date: 02/29/2012
From: Sfamenos N
Westinghouse
To:
Office of Nuclear Reactor Regulation
References
TAC ME0853 WNA-VR-00283-WBT-NP, Rev 7
Download: ML12073A392 (65)
v • d • e


Text

Attachment 2 WEC non-proprietary document WNA-VR-00283-WBT-NP, Revision 7, "IV&V Summary Report for the Post Accident Monitoring System," dated February 2012 (Letter Item 2, SSER 23 Appendix HH Item Number 98)

O)Westinghouse Westinghouse Non-Proprietary Class 3 Nuclear Automation Watts Bar Unit 2 NSSS Completion Program I&C Projects IV&V Summary Report for the Post Accident Monitoring System WNA-VR-00283-WBT-NP, Rev. 7 February 2012 APPROVALS Function Name and Signature Authors Nick Sfamenos*

Senior Engineer, Independent Verification & Validation II Reviewer Secil Karaaslan*

Senior Engineer, Independent Verification & Validation I Approver Murat S. Uzman*

Manager, Independent Verification & Validation I

  • Electronically approved records are authenticated in the electronic document management system.

WESTINGHOUSE NON-PROPRIETARY CLASS 3

© 2012 Westinghouse Electric Company LLC All Rights Reserved

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System LIST OF ADDITIONAL REVIEWERS/CONTRIBUTORS Revision Name and Title 2 Murat Uzman Manager, independent Verification & Validation 2, 3, 4 Stephanie Smith Project Manager, Common Q PAMS I. 3, 4, 5, 6, 7 Jenna L. Tyger Technical Editor, Technical Communications Template Version 2.2 WNA-VR-00283-WBT-NP, Rev. 7 i Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REVISION HISTORY RECORD OF CHANGES Revision Author Description Completed 2 Secil Karaaslan Added brackets for proprietary information based on 12/10 WNA-VR-00283-WBT, Rev. 2 3 Secil Karaaslan Updated for Integration Phase 12/10 4 Secil Karaaslan Updated to incorporate summary of IV&V activities 3/11 per new project baseline and release reports. Impacts all phases through Integration.

Addressed deficiencies that were identified through self-assessments.

5 Secil Karaaslan Updated for Installation Phase 3/11 6 Nick Sfamenos Added Reference 71 to include 2/12 WNA-RL-00743-WBT, Rev. 4, and corrected the reference to this revision for the Flat Panel Display regression testing discussed in subsection 3.5.1.1.

Corrected Test Procedure title names in Table 3.3-2 per CAPS 11-273-M012.

Section 5 was modified to include a comprehensive list of all software and corresponding Software Release Records related to the project.

7 Nick Sfamenos Added References 72 through 79. Updated See EDMS corresponding references throughout the document.

Provided explanation for latest revisions referenced in Section 1.1.

DOCUMENT TRACEABILITY & COMPLIANCE Created to Support the Following Document(s) Document Number Revision Verification & Validation Process for the Common Q WNA-PV-00009-GEN 3 Safety Systems WNA-VR-00283-WBT-NP, Rev. 7 ii Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System OPEN ITEMS iii Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 7 o°° Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System TABLE OF CONTENTS Section Title Page LIST OF ADDITIONAL REVIEW ERS/CONTRIBUTORS ...................................... i REVISION HISTORY ........................................................................................... ii TABLE OF CONTENTS...................................................................................... iv LIST OF FIGURES ....... I.................................... vi ACRONYM S AND TRADEMARKS ......................................................................... vii GLOSSARY OF TERM S ........................................................................................... viii REFERENCES ...................................................................................................... ix.

SECTION 1 INTRODUCTION ....................................................................................................... 1-1 L.1 OBJECTIVE ............................................................. 1-1 1.2 S C OP E ......................................... ................................................................................ 1-1 1.3

SUMMARY

AND CONCLUSIONS .......................................................................... 1-2 SECTION 2 DESCRIPTION OF IV&V TASKS PERFORMED .................................................... 2-1 2.1 CONCEPT PHASE ...................................................................................................... 2-1 2.2 DEFINITION PHASE ................................................................................................. 2-2 2.2.1 Documentation Reviews ............................................................................................. 2-2 2.2.2 Requirements Traceability Assessment ....................................................................... 2-2 2.2.3 Developing Project Specific Test Plan ....................................................... .............. 2-3 2.2.4 Configuration Management Assessment ..................................................................... 2-3 2.2.5 Change Control Assessment ........................................................................................ 2-4 2.3 DESIGN PHASE ......................................................................................................... 2-5 2.3.1 Generic Qualification ................................................................................................... 2-5 2.3.1.1 Generic AC 160 Qualification ...................................................................................... 2-6 2.3.1.2 Generic Platform Software Qualification .................................................................... 2-6 2.3.2 Review of Documentation ........................................................................................... 2-7 2.3.3 Design Reviews ........................................................................................................... 2-7 2.3.4 Requirements Traceability Assessment ...................................................................... 2-7 2.3.5 Developing Test Procedures ........................................................................................ 2-8 2.3.6 Configuration Management Assessment ..................................................................... 2-8 2.4 IMPLEMENTATION PHASE .................................................................................... 2-8 2.4.1 Verification of Software Implementation .................................................................... 2-8 2.4.2 Verification of Hardware Implementation ................................................................... 2-9 2.4.3 Review of Documentation ........................................................................................... 2-9 2.4.4 Requirements Traceability Assessment ....................................................................... 2-10 2.4.5 Configuration Management Assessment ..................................................................... 2-10 2.5 INTEGRATION PHASE ............................................................................................. 2-10, 2.5.1 Cabinet/Channel Integration ........................................................................................ 2-10 2.5.2 Design Reviews ........................................................................................................... 2-11 2.5.3 Requirements Traceability Assessment ....................................................................... 2-11 WNA-VR-00283-WBT-NP, Rev. 7 iv Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System TABLE OF CONTENTS (cont.)

Section Title Page 2.5.4 Configuration M anagement Assessment ..................................................................... 2-11 2.6 INSTALLATION PHASE .......................................................................................... 2-11 SECTION 3

SUMMARY

OF IV&V TASKS RESULTS ................................................................ 3-1 3.1 CONCEPT PHASE ...................................................................................................... 3-1 3.2 DEFINITION PHASE ................................................................................................. 3-1 3.2.1 Review of Documentation ........................................................................................... 3-1 3.2.2 Requirements Traceability Assessment ...................................... ............................ 3-2 3.2.3 Developing Project Specific Test Plan ........................................................................ 3-3 3.2.4 Configuration Management Assessment ..................................................................... 3-3 3.2.5 Change Control Assessment ........................................................................................ 3-4 3.3 DESIGN PHASE ......................................................................................................... 3-5 3.3.1 Generic Qualification ................................................................................................... 3-5 3.3.1.1 Generic AC160 Qualification ...................................................................................... 3-5 3.3.1.2 Generic Platform Qualification .................................................................................... 3-5 3.3.2 Review of Documentation ........................................................................................... 3-8 3.3.3 Design Reviews ........................................................................................................... 3-8 3.3.4 Requirements Traceability Assessment ....................................................................... 3-8 3.3.5 Developing Test Procedures ........................................................................................ 3-9 3.3.6 Configuration Management Assessment ..................................................................... 3-11 3.4 IMPLEM ENTATION PHASE .................................................................................... 3-11 3.4.1 Verification of Software Implementation .................................................................... 3-11 3.4.2 Verification of Hardware Implementation ................................................................... 3-13 3.4.3 Review of Documentation ........................................................................................... 3-13 3.4.4 Requirements Traceability Assessment ....................................................................... 3-14 3.4.5 Configuration Management Assessment ..................................................................... 3-14 3.5 INTEGRATION PHASE ............................................................................................. 3-14 3.5.1 Cabinet/Channel Integration ......................................................................................... 3-15 3.5.1.1 Execution and Reporting of Flat Panel Display Software Test .................................... 3-15 3.5.1.2 Execution and Reporting of Channel Integration Test ................................................. 3-15 3.5.2 Design Reviews ........................................................................................................... 3-16 3.5.3 Requirements Traceability Assessment ....................................................................... 3-16 3.5.4 Configuration Management Assessment ..................................................................... 3-17 3.6 INSTALLATION PHASE ........................................................................................... 3-17 SECTION 4

SUMMARY

OF IV&V FINDINGS AND RESOLUTION ........................................ 4-1 SECTION 5 IV&V ASSESSMENT OF SOFTW ARE QUALITY ................................................. 5-1 SECTION 6 IV&V RECOMMENDATIONS .................................................................................. 6-1 WNA-VR-00283-WBT-NP, Rev. 7 V Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System TABLE OF CONTENTS (cont.)

LIST OF TABLES Table Title Page Table 2.2-1 Definition Phase Docum entation ................................................................................ 2-2 Table 2.2-2 Requirem ent Traceability M atrices .............................................................................. 2-3 Table 2.2-3 Watts Bar 2 PAMS Source Requirement Input Documentation .................................. 2-4 Table 2.2-4 Change Control Databases ........................................................................................... 2-5 Table 2.3-1 D esign Phase D ocum entation ...................................................................................... 2-7 Table 2.4-1 Software Release Records for Application Software .................................................. 2-9 Table 3.3-1 Generic AC160 Qualification ........................................ 3-6 Table 3.3-2 T est Procedures ........................................................................................................... 3-10 Table 3.5-1 Mapping of IV&V Reports to Software Releases ........................................................ 3-14 Table 4-1 C lassifications of Findings ........................................................................................... 4-1 Table 4-2 Exception Reports Issued Against Watts Bar 2 PAMS Project ................................... 4-1 Table 4-3 Exception Reports Issued Against Generic Software .................................................. 4-3 Table 5-1 Software Release Records for Custom PC Elements and Type Circuits .......... 5-2 Table 5-2 Software Release Records for Application Software ................................................... 5-3 Table 5-3 Software Release Records for Generic Software ......................................................... 5-4 LIST OF FIGURES Figure Title Page None.

WNA-VR-00283-WBT-NP, Rev. 7 vi Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System ACRONYMS AND TRADEMARKS Acronyms used in the document are defined in WNA-PS-00016-GEN, "Standard Acronyms and Definitions" (Reference 2), or included below to ensure unambiguous understanding of their use within this document.

Acronym Definition CI Configuration Item CIT Channel Integration Test CPCE Custom PC Element EDMS Electronic Document Management System ER Exception Report EST Element Software Test FAT Factory Acceptance Test FPD Flat Panel Display FPDS Flat Panel Display System FPDST Flat Panel Display Software Test IV&V Independent Verification and Validation PMST Processor Module Software Test QN Quality Notice REC Request for Engineering Change RSE Reusable Software Element RSED Reusable Software Element Document RTM Requirements Traceability Matrix SCR Software Change Request SDS System Design Specification SLC Software Life Cycle SPM Software Program Manual SRR Software Release Record SRS Software Requirements Specification SyRS System Requirement Specification TC Type Circuit Advant, eRoom, and Lotus Notes are trademarks or registered trademarks of their respective owner(s).

Other names may be trademarks of their respective owners.

All other product and corporate names used in this document may be trademarks or registered trademarks of other companies, and are used only for explanation and to the owners' benefit, without intent to infringe.

WNA-VR-00283-WBT-NP, Rev. 7 vii Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System GLOSSARY OF TERMS Standard terms used in the document are defined in WNA-PS-0001 6-GEN, "Standard Acronyms and Definitions" (Reference 2), or included below to ensure unambiguous understanding of their use within this document.

Term Definition Common Qualified Platform A safety system instrumentation and control (I&C) platform defined (Common Q) in WCAP-16097-NP-A, "Common Qualified Platform Topical Report" (Reference 3).

Design Objects Items produced during the design process such as documents, drawings, databases, program code, etc.

WORKM Common Q Workflow Management System - A Lotus Notes database used for exception reporting and resolution tracking.

viii Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 77 All Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES Following is a list of references used throughout this document.

1. WNA-PV-00009-GEN, Rev. 3, "Verification & Validation Process for the Common Q Safety Systems," Westinghouse Electric Company LLC.
2. WNA-PS-00016-GEN, Rev. 5, "Standard Acronyms and Definitions," Westinghouse Electric Company LLC.
3. WCAP-16097-NP-A, Rev. 0, "Common Qualified Platform Topical Report," Westinghouse Electric Company LLC.
4. NSNP 3.6.1, Rev. 2, "Computer Software Development Process," Westinghouse Electric Company LLC, effective February 8, 2010.
5. NA 4.37, Rev. 1, "Configuration Management," Westinghouse Electric Company LLC, effective April 20, 2009.
6. WCAP-16096-NP-A, Rev. 1A, "Software Program Manual for Common Q Systems,"

Westinghouse Electric Company LLC.

7. WNA-BR-00299-WBT, Rev. 5, "Post Accident Monitoring System Baseline Report," Release Level 1.2 Rev. 0, Westinghouse Electric Company LLC.
8. WBT-TVA-0070, "Safety Related Digital Logic Cards Circuitry & Related Instrument Racks Restriction," Tennessee Valley Authority, October 9, 2008.
9. WNA-PD-00073-WBT, Rev. 1. "Project Plan Common Q Post Accident Monitoring System,"

Westinghouse Electric Company LLC.

10. WNS-PQ-00001-WBT, Rev. 0, "Watts Bar Unit 2 NSSS Completion Project Quality Plan,"

Westinghouse Electric Company LLC.

11. WNA-PQ-00220-WBT, Rev. 1, "Watts Bar Unit 2 NSSS Completion I&C Projects - Project Quality Plan," Westinghouse Electric Company LLC.
12. WNA-PD-00056-WBT, Rev. 1, "Project Plan Watts Bar Unit 2 NSSS Completion I&C Projects,"

Westinghouse Electric Company LLC.

13. WNA-DS-01617-WBT-P, Rev. 4, "Watts Bar Unit 2 NSSS Completion Program I&C Projects Post Accident Monitoring System - System Requirements Specification," Westinghouse Electric Company LLC.

7 ix Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 ix Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES (cont.)

14. WNA-DS-01667-WBT-P, Rev. 4, "Watts Bar Unit 2 NSSS Completion Program I&C Projects Post Accident Monitoring System - System Design Specification," Westinghouse Electric Company LLC.
15. WNA-SD-00239-WBT-P, Rev. 4, "Software Requirements Specification for the Post Accident Monitoring System," Westinghouse Electric Company LLC.
16. NABU-DP-00014-GEN, Rev. 2, "Design Process for Common Q Safety Systems," Westinghouse Electric Company LLC.
17. WNA-IG-00 109-GEN, Rev. 0, "Configuration Management Implementation Guideline,"

Westinghouse Electric Company LLC.

18. WBT-D-2660, "Revisions to TVA Specification EDCR-52351 Compliance Matrix," Westinghouse Electric Company LLC, November 17, 2010.
19. Contract Number 65717, "Tennessee Valley Authority Watts Bar Nuclear Plant Unit 2 NSSS Completion Project," Tennessee Valley Authority.
20. WEST-WBT-2008-025, "TVA Contract Work Authorization," Tennessee Valley Authority.
21. WNA-RL-00817-WBT, Rev. 4, "Post Accident Monitoring System Requirements Traceability Release Report," Release Level 1.2.0 Rev. 0, Westinghouse Electric Company LLC.
22. WNA-VR-00279-WBT, Rev. 5, "Watts Bar 2 NSSS Completion Program I&C Projects Requirements Traceability Matrix for the Post-Accident Monitoring System," Westinghouse Electric Company LLC.
23. WNA-VR-00280-WBT, Rev. 2, "Watts Bar 2 NSSS Completion Program I&C Projects Requirements Traceability Matrix for the Reactor Vessel Level Indication System (RVLIS) Custom PC Elements," Westinghouse Electric Company LLC.
24. WNA-PT-00138-WBT-P, Rev. 0, "Watts Bar 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Test Plan," Westinghouse Electric Company LLC.
25. WNA-LI-00058-WBT-P, Rev. 3, "Tennessee Valley Authority (TVA) Watts Bar Unit 2 (WBN2)

Post-Accident Monitoring System (PAMS) Licensing Technical Report," Westinghouse Electric Company LLC.

WNA-VR-00283-WBT-NP, Rev. 7 X Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES (cont.)

26. WNA-CD-00029-GEN, Rev. 1, "Commercial Grade Dedication Report for the ABB Advant PM646A/PM646B Firmware/Base System Software Version 1.3/8, ACC Advanced Version 1.7/1, AC 160 PC and DB Element Library Version 1.5/1 for Common Q Applications," Westinghouse Electric Company LLC.
27. WNA-VR-00284-GEN, Rev. 0, "Common Q Generic FPDS IV&V Summary Report,"

Westinghouse Electric Company LLC.

28. WNA-SD-00248-WBT, Rev. 3, "Software Design Description for the Post Accident Monitoring System Flat Panel Display," Westinghouse Electric Company LLC.
29. WNA-SD-00250-WBT, Rev. 3, "Software Design Description for the Post Accident Monitoring System AC 160 Software," Westinghouse Electric Company LLC.
30. WNA-RL-00827-WBT, Rev. 6, "Post Accident Monitoring System Software Implementation Release Report," Release Level 1.2.0 Rev. 0, Westinghouse Electric Company LLC.
31. WNA-RL-00816-WBT, Rev. 3, "Post Accident Monitoring System Hardware Implementation Release Report," Release Level 1.2.0 Rev. 0, Westinghouse Electric Company LLC.
32. WNA-SD-00277-WBT, Rev. 3, "Post Accident Monitoring System Flat Panel Display System Screen Design Details," Westinghouse Electric Company LLC.
33. WNA-CR-00010-WBT, Rev. 2, "Watts Bar Unit 2 NSSS Completion I&C Projects User Configurable Setpoints for the Post Accident Monitoring System," Westinghouse Electric Company LLC.
34. WNA-TP-02772-WBT, Rev. 0, "Watts Bar 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Cabinet Hardware Test Procedure," Westinghouse Electric Company LLC.
35. WNA-TP-03057-WBT, Rev. 0, "Processor Module Software Test Procedure for the Post Accident Monitoring System," Westinghouse Electric Company LLC.
36. WNA-TP-02955-WBT, Rev. 0, "Watts Bar 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Flat Panel Display Software Test Procedure," Westinghouse Electric Company LLC.
37. WNA-TP-02988-WBT, Rev. 0, "Watts Bar Unit 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Channel Integration Test/Factory Acceptance Test,"

Westinghouse Electric Company LLC.

38. WNA-DS-01070-GEN, Rev. 5, "Application Restrictions for Generic Common Q Qualification,"

Westinghouse Electric Company LLC.

WNA-VR-00283-WBT-NP, Rev. 7 xi Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES (cont.)

39. WNA-RL-00530-GEN, Rev. OV, "Software Release Record for the STDADD05 AC160 Library,"

Westinghouse Electric Company LLC.

40. WNA-RL-00646-WBT, Rev. 2, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA," Westinghouse Electric Company LLC.
41. WNA-RL-00648-WBT, Rev. 0, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB," Westinghouse Electric Company LLC.
42. WNA-RL-00743-WBT, Rev. 1, "Software Release Record for Watts Bar Unit 2 PAMS FPDS,"

Westinghouse Electric Company LLC.

43. WNA-TR-02389-WBT, Rev. 0, "Processor Module Software Test Report for the Post Accident Monitoring System," Westinghouse Electric Company LLC.
44. WNA-VR-00295-WBT, Rev. 1, "Code Review Report for the Post Accident Monitoring System Flat Panel Display," Westinghouse Electric Company LLC.
45. WNA-TR-02383-WBT, Rev. 2, "Post Accident Monitoring System Cabinet Hardware Test Report," Westinghouse Electric Company LLC.
46. NA 10.1.3, Rev. 0, "Inspections," Westinghouse Electric Company LLC, effective May 21, 2010.
47. WNA-TR-02387-WBT, Rev. 1, "Post Accident Monitoring System Flat Panel Display Software Test Report," Westinghouse Electric Company LLC.
48. WNA-TR-02413-WBT, Rev. 1, "Post-Accident Monitoring System Channel Integration Test/Factory Acceptance Test Report," Westinghouse Electric Company LLC.
49. WNA-AR-00196-WBT, Rev. 0, "Regression Analysis for the Post Accident Monitoring System,"

Westinghouse Electric Company LLC.

50. WBT-D-0088, "Transmittal of Westinghouse Comments on TVA Specification EDCR5235 1,"

Westinghouse Electric Company LLC, July 10, 2008.

51. WNA-TR-0245 1-WBT, Rev. 0, "Test Summary Report for the Post Accident Monitoring System,"

Westinghouse Electric Company LLC.

52. WNA-RL-00646-WBT, Rev. 5, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA," Westinghouse Electric Company LLC.
53. WNA-RL-00648-WBT, Rev. 3, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB,' Westinghouse Electric Company LLC.

WNA-VR-00283-WBT-NP, Rev. 7 xii Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES (cont.)

54. WNA-RL-00743-WBT, Rev. 5, "Software Release Record for Watts Bar Unit 2 PAMS FPDS,"

Westinghouse Electric Company LLC.

55. WNA-AR-00209-WBT, Rev. 1, "Regression Analysis for the Post Accident Monitoring System,"

Westinghouse Electric Company LLC.

56. WNA-GO-00085-WBT, Rev. 0, "Post Accident Monitoring System Operations and Maintenance Manual," Westinghouse Electric Company LLC.
57. WNA-MP-00029-WBT, Rev. 0, "Post Accident Monitoring System Maintenance Manual,"

Westinghouse Electric Company LLC.

58. WNA-IP-00520-WBT, Rev. 1, "Post Accident Monitoring System Installation Manual,"

Westinghouse Electric Company LLC.

59. WNA-IP-00528-WBT, Rev. 0, "Post Accident Monitoring Software Installation Procedure,"

Westinghouse Electric Company LLC.

60. NA-IV&V-1 1-0005, Rev. 0, "Assessment of Software Configuration Management Plan for Common Q Projects," Westinghouse Electric Company LLC.
61. WNA-RL-00540-GEN, Rev. 0, "Common Q Software Release Record AC1601P3R8,"

Westinghouse Electric Company LLC.

62. WNA-RL-00563-GEN, Rev. OV, "Common Q Software Release Record AMPL Control Configuration Advanced 1.7/1," Westinghouse Electric Company LLC.
63. WNA-RL-00653-GENRevOVerified, Rev. 0, "Common Q Software Release Record AC160 PC and DB Element Libraries Version 1.5/1," Westinghouse Electric Company LLC.
64. WNA-AR-00201-WBT, Rev. 0, "Post Accident Monitoring System - Compliance to the Common Q Application Restrictions Document," Westinghouse Electric Company LLC.
65. WNA-RL-00646-WBTRev5 Verified, Rev. 0, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA," Westinghouse Electric Company LLC.
66. WNA-RL-00648-WBTRev3_Verified, Rev. 0, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB," Westinghouse Electric Company LLC.
67. WNA-RL-00743-WBTRev5 Verified, Rev. 0, "Software Release Record for Watts Bar Unit 2 PAMS FPDS," Westinghouse Electric Company LLC.
68. WEC 3.3.1, Rev. 2, "Design Reviews," Westinghouse Electric Company LLC, effective November 0 1, 2010.

WNA-VR-00283-WBT-NP, Rev. 7 xiii Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES (cont.)

69. WNA-ER-00143-WBT, Rev. 0, "Common Q PAMS Final Design Review Report FDR-10-23,"

Westinghouse Electric Company LLC.

70. WNA-ER-00105-WBT, Rev. 0, "Watts Bar Two Common Q PAMS Preliminary Design Review Report PDR-10-23," Westinghouse Electric Company LLC.
71. WNA-RL-00743-WBT, Rev. 4, "Software Release Record for Watts Bar Unit 2 PAMS FPDS,"

Westinghouse Electric Company LLC.

72. WNA-DS-01667-WBT-P, Rev. 2, "Watts Bar Unit 2 NSSS Completion Program I&C Projects Post Accident Monitoring System - System Design Specification," Westinghouse Electric Company LLC.
73. WNA-SD-00239-WBT-P, Rev. 1, "Software Requirements Specification for the Post Accident Monitoring System," Westinghouse Electric Company LLC.
74. WNA-VR-00279-WBT, Rev. 1, "Watts Bar 2 NSSS Completion Program I&C Projects Requirements Traceability Matrix for the Post-Accident Monitoring System," Westinghouse Electric Company LLC.
75. WNA-VR-00279-WBT, Rev. 3, "Watts Bar 2 NSSS Completion Program I&C Projects Requirements Traceability Matrix for the Post-Accident Monitoring System," Westinghouse Electric Company LLC.
76. WNA-VR-00295-WBT, Rev. 0, "Code Review Report for the Post Accident Monitoring System Flat Panel Display," Westinghouse Electric Company LLC.
77. WNA-TR-02387-WBT, Rev. 0, "Post Accident Monitoring System Flat Panel Display Software Test Report," Westinghouse Electric Company LLC.
78. WNA-TR-02413-WBT, Rev. 0, "Post-Accident Monitoring System Channel Integration Test/Factory Acceptance Test Report," Westinghouse Electric Company LLC.
79. WNA-AR-00209-WBT, Rev. 0, "Regression Analysis for the Post Accident Monitoring System,"

Westinghouse Electric Company LLC.

(Last Page of Front Matter)

WNA-VR-00283-WBT-NP, Rev. 7 xiV Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 1 INTRODUCTION 1.1 OBJECTIVE This report summarizes the independent verification and validation (IV&V) activities and the results of those activities performed during the Watts Bar Unit 2 Post Accident Monitoring System (PAMS) project.

It summarizes the results and current status of the IV&V tasks identified by WNA-PV-00009-GEN, "Verification & Validation Process for the Common Q Safety Systems" (Reference 1) as augmented by WNA-PT-00138-WBT-P, "Watts Bar 2 Post Accident Monitoring System Test Plan" (Reference 24).

Reference 1 is the interpretation of IV&V activities imposed by the Software Program Manual (SPM) for Common Q Safety Systems (Reference 6) for day-to-day execution.

Updates of this report will occur as the Watts Bar Unit 2 PAMS project progresses through the software life cycle (SLC). The scope section will identify the progressive coverage of the SLC at each revision of this document.

Resolution of anomalies resulted in an iteration of definition, design, implementation, and integration phase activities. This report also captures the regression performed at each phase. Activities that belong to past phases have been re-assessed each time this report is generated for continued applicability of that phase's conclusions. The latest revisions of applicable documents are therefore referenced from within each phase unless an older revision has particular significance to cite.

1.2 SCOPE This revision of the report covers the Concept, System Definition (or requirements), Design, Implementation, and Integration phases of the project as defined by the V&V Process for the Common Q Safety Systems (Reference 1). It also covers Installation phase IV&V activities which are limited in scope to review user documentation only.

The Software Requirements Specification (SRS), in support of the System Requirement Specifications (SyRS) and the System Design Specifications (SDS) bounds the extent of IV&V activities to the System Definition Phase.

The Software Design Descriptions (SDDs) released for both AC 160 and Flat Panel Display (FPD) platforms are input to the Design Phase activities.

The Implementation Phase inputs are the application software released for unit level verification and validation (Processor Module Software Test for AC 160, and code reviews for FPD application). The software is released through Software Release Records (SRRs).

Module level validation (Element Software Test [EST]) of reusable software elements (RSE) used in the Watts Bar 2 PAMS application software has been undertaken as part of the generic qualification.

Although the generic qualification has its own, separate, lifecycle for each RSE, the applicable qualification records are referenced in the Design Phase summary of this report.

WNA-VR-00283-WBT-NP, Rev. 7 1-1 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Execution and reporting of the integration level tests are within the scope of the Integration Phase.

Review of user documentation developed for the Watts Bar Unit 2 PAMS project is part of the Installation Phase IV&V activities.

Resolution of anomalies resulted in an iteration of definition, design, implementation and integration phase activities. This report also captures the regression performed at each phase.

WNA-BR-00299-WBT, "Post Accident Monitoring System Baseline Report," at release level 1.2 (Reference 7) provides a listing of configuration items (Cis) regarded as predecessors to the IV&V activities for both Concept Phase and System Definition Phase for the Watts Bar Unit 2 PAMS project.

Design and implementation corresponding to the Baseline Report is captured in several Release Reports (WNA-RL-00817-WBT, "Post Accident Monitoring System Requirements Traceability Release Report"

[Reference 21 ]; WNA-RL-00827-WBT, "Post Accident Monitoring System Software Implementation Release Report" [Reference 30]; and WNA-RL-00816-WBT, "Post Accident Monitoring System Hardware Implementation Release Report" [Reference 311).

Section 2 of this report describes the IV&V tasks performed during each phase within the scope of this revision. Section 3 provides the results of these tasks. Section 4 summarizes the findings of the IV&V review and assessment activities. Section 5 is an assessment of software quality, and Section 6 presents IV&V's recommendation for the Watts Bar Unit 2 PAMS project.

The Lotus Notes exception reporting and resolution tracking database, WORKM Common Q, contains records of the exception reports (ER) created during the IV&V activities. These ERs contain the details of the IV&V findings summarized in Section 4. Unresolved findings are being carried forward into the next phase of the Watts Bar Unit 2 PAMS project.

1.3

SUMMARY

AND CONCLUSIONS IV&V activities as deemed appropriate for the Concept and Definition Phase of the SLC were performed on CIs released by the Watts Bar Unit 2 PAMS project Baseline Report (Reference 7). IV&V activities pertaining to Design and Implementation Phases of the SLC were performed on configuration items released through Software and Hardware Implementation Release Reports (References 30 and 31, respectively) and the Requirements Traceability Release Report (Reference 21). The software released to IV&V has been through code inspections, unit, and integration tests as well as regression tests per the Test Plan (Reference 24). The software for the PAMS is classified as Important to Safety as defined in the Common Q Software Program Manual (SPM) (Reference 6) and the IV&V activities pertaining to this project are commensurate with this classification as defined by the V&V Process for Common Q Safety Systems (Reference 1).

The review of CIs considered to be within the scope of Concept Phase resulted in no findings.

The Watts Bar Unit 2 PAMS software has successfully completed the required verification and validation activities for the Design, Implementation, and Integration Phases of the SLC. Previous revisions of this report identified documentation and implementation issues that were captured in ERs (see Table 4-2).

WNA-VR-00283-WBT-NP, Rev. 7 1-2 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System New documentation and software releases have been through additional review cycles and a series of regression testing. Satisfactory resolution of all identified issues has been recorded in the issue tracking database.

A Test Summary Report (Reference 51) was produced by IV&V summarizing the test program and its conclusions. The AC 160 and Flat Panel Display System (FPDS) software applications, released for verification via WNA-RL-00646-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA" (Reference 52); WNA-RL-00648-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB" (Reference 53); and WNA-RL-00743-WBT, "Software Release Record for Watts Bar Unit 2 PAMS FPDS" (Reference 54), have been transferred to the Production Software Library that is maintained by IV&V, and corresponding verified SRRs (References 65, 66, 67) have been issued for use in the delivered Watts Bar Unit 2 PAMS.

The installation phase IV&V activities, which are limited to the review of user documentation as released through Post Accident Monitoring System Operations and Maintenance Manual (Reference 56), was also successfully completed.

This IV&V Summary Report concludes that all software life cycle activities applicable to the Watts Bar Unit 2 PAMS system have been completed and the system was found acceptable for proceeding with installation and operation.

(Last Page of Section 1)

WNA-VR-00283-WBT-NP, Rev. 7 1-3 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 2 DESCRIPTION OF IV&V TASKS PERFORMED 2.1 CONCEPT PHASE IV&V tasks for the Concept Phase include review of Concept documentation for consistency, incompatibilities, and compliance to regulations.

The following IV&V tasks have been performed for the Watts Bar Unit 2 PAMS project Concept Phase:

1. Evaluated the PAMS project Baseline Report (Reference 7) for completeness to confirm all necessary Concept Phase documents were captured as CIs.
2. Reviewed WNA-PD-00073-WBT, "Project Plan Common Q Post Accident Monitoring System" (Reference 9), for compatibility and consistency with the parent project's (Watts Bar Unit 2 NSSS Completion Program I&C Project) quality and project plans listed as follows:
a. WNS-PQ-00001-WBT, "Watts Bar Unit 2 NSSS Completion Project Quality Plan" (Reference 10).
b. WNA-PQ-00220-WBT, "Watts Bar Unit 2 NSSS Completion I&C Projects - Project Quality Plan" (Reference 11).
c. WNA-PD-00056-WBT, "Project Plan Watts Bar Unit 2 NSSS Completion I&C Projects" (Reference 12).
3. Reviewed the PAMS project plan (Reference 9) for compatibility and consistency with established procedures and processes as defined in the following references:
a. Westinghouse Level II Policies & Procedures.
b. NSNP 3.6.1, "Computer Software Development Process" (Reference 4).
c. WCAP-16096-NP-A, "Software Program Manual for Common Q Systems" (Reference 6).
d. NABU-DP-00014-GEN, "Design Process for Common Q Safety Systems" (Reference 16).
e. WCAP-16097-NP-A, "Common Qualified Platform Topical Report" (Reference 3).

The SPM (Reference 6) also identifies additional tasks for this phase as follows:

1. Identify major constraints of interfacing systems.
2. Identify constraints and limitations of proposed system.
3. Assess allocation of functions to hardware and software items.

Review of the Tennessee Valley Authority (TVA) work authorization (Reference 20) and the Westinghouse's early comments on TVA specifications (WBT-D-0088, "Transmittal of Westinghouse Comments on TVA Specification EDCR5235 1" [Reference 50]) concluded that the proposed system is based on generic Common Q PAMS design with certain project-specific changes. The generic WNA-VR-00283-WBT-NP, Rev. 7 2-1 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Common Q PAMS is defined in Common Qualified Platform Topical Report, Appendix 1 (Reference 3).

This appendix describes PAMS functions together with constraints and limitations. Therefore, the above identified tasks are not required to be repeated for the Concept Phase of each individual project that utilizes the generic PAMS design. However, the differences from the generic design are captured during the Definition Phase work products and submitted to IV&V. Additionally, IV&V reviewed the TVA specification compliance matrix to confirm the proposed system meets the customer requirements. These are captured in this report as part of the Definition Phase tasks.

PAMS is classified as Important to Safety by the SPM. Therefore, there is no requirement to assess criticality of each software item.

2.2 DEFINITION PHASE The following subsections describe the IV&V tasks performed for the Definition Phase.

2.2.1 Documentation Reviews Table 2.2-1 lists the Definition Phase documents reviewed for clarity, compatibility, correctness and completeness.

Table 2.2-1. Definition Phase Documentation Document Number Document Title Reference WNA-DS-01617-WBT-P Watts Bar 2 NSSS Completion Program I&C Projects 13 Post Accident Monitoring System - System Requirements Specification WNA-DS-01667-WBT-P Watts Bar 2 NSSS Completion Program I&C Projects 14 Post Accident Monitoring System - System Design Specification WNA-SD-00239-WBT-P Watts Bar 2 NSSS Completion Program I&C Projects 15 Software Requirements Specification for the Post Accident Monitoring System For theWBN2 PAMS project, the verifier did not perform the role of independent reviewer for the design team. Qualified independent reviewers from the design team conducted the document reviews before the documents were archived as quality records and made available to the IV&V team.

2.2.2 Requirements Traceability Assessment In order to verify that Watts Bar 2 PAMS requirements were captured completely and correctly, IV&V performed an assessment of the requirements tracing using the Requirements Traceability Matrices (RTMs) released by the Requirement Traceability Release Report (Reference 21).

2-2 Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 7 2-2 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System There are two RTMs released for the Project as shown in Table 2.2-2.

Table 2.2-2. Requirement Traceability Matrices Document Number Document Title Reference WNA-VR-00279-WBT Watts Bar 2 NSSS Completion Program I&C Projects 22 Requirements Traceability Matrix for the Post-Accident Monitoring System WNA-VR-00280-WBT Watts Bar 2 NSSS Completion Program I&C Projects 23 Requirements Traceability Matrix for the Reactor Vessel Level Indication System (RVLIS) Custom PC Elements The RTM for PAMS (Reference 22), also called the "System RTM," traces the Watts Bar 2 PAMS design aspects not already qualified for use as part of the standard Common Q platform or the Common Q PAMS system. The scope of requirements traceability assessment activity for the System Definition Phase covers tracing from SyRS down to the SRS and back.

_~a~c 2.2.3 Developing Project Specific Test Plan A project-specific Test Plan (Reference 24) was developed based on the System Definition Phase documentation. Interpretation of the SPM (Reference 6) requirements for developing a Test Plan is provided in Section 6 of the Verification and Validation Process for Common Q Safety Systems (Reference 1). For ESTs and Processor Module Software Tests (PMSTs), generic test procedures, are available to define the scope and methodology. They also identify the test environment, test tools, and test case format. The test procedures were developed during the Design Phase. These procedures capture both the test specification, which identifies the requirements to be tested and how the test will be conducted, together with individual test cases with inputs and expected outputs.

2.2.4 Configuration Management Assessment IV&V performed an assessment of the project's baseline report (Reference 7) for completeness, consistency, and correctness for the System Definition Phase. Nuclear Automation Policy NA 4.37, Configuration Management (Reference 5) and the guidelines for creating a project document index were used for guidance (Reference 17).

WNA-VR-00283-WBT-NP, Rev. 7 2-3 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System The following activities were performed on the Baseline Report:

1. An evaluation of the Baseline Report to confirm the baseline identifies the source requirement input documents both internal and external, policies and procedures applicable to the project's execution, and the documents generated to capture decomposed system, hardware and software level requirements which arewithin the scope of Definition Phase of SLC.
2. A consistency check of the Definition Phase requirements documents (Table 2.2-1) with the Watts Bar Unit 2 PAMS source requirement input documents. Table 2.2-3 lists the source input documents.

Table 2.2-3. Watts Bar 2 PAMS Source Requirement Input Documentation Document Number Document Title, Reference Contract Number 65717 Tennessee Valley Authority Watts Bar Nuclear Plant Unit 2 19 NSSS Completion Project.

WBT-D-2660 Revision to TVA Specifications EDCR 52351 Compliance 18 Matrix WEST-WBT-2008-025 TVA Contract Work Authorization 20 WBT-TVA-0070 Safety Related Digital Logic Cards Circuitry & Related 8 Instrument Racks Restriction WCAP-16097-NP-A Common Qualified Platform Topical Report 3

3. Verification of the CIs listed in the baseline report. All CIs must be approved and archived in the electronic document management system (EDMS). For CIs representing industry codes and standards, EDMS archival was not required since these documents are available through other repositories.

IV&V has taken credit of the second-party (peer) review of the source requirement input documents (see Table 2.2-3) as the means for verification. IV&V did not perform further review of these documents during this configuration management assessment. As defined by the verification and validation process (Reference 1) and WCAP-16096-NP-A, "Software Program Manual for Common Q Systems" (Reference 6), the scope of IV&V activities begins with the functional requirements definition.

2.2.5 Change Control Assessment IV&V performed an assessment of the change control mechanisms in place for the Watts Bar Unit 2 PAMS project.

Presently, there are two databases used by Nuclear Automation to record and track design changes and issues for the Watts Bar 2 PAMS project. Table 2.2-4 lists the databases and provides a description for each.

WNA-VR-00283-WBT-NP, Rev. 7 2-4 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 2.2-4. Change Control Databases Database Name Description Corrective Action Implemented with Lotus Notes and utilized company-wide to report and Process (CAPs) track issues pertaining to conditions adverse to the safety or quality of items and services.

Exception Reports Implemented with Lotus Notes and maintained by Nuclear Automation to (ERs) for Common Q record and track issues raised during verification and validation (V&V) of Systems Common Q design objects. The ER database also tracks Common Q software change requests (SCRs).

IV&V reviewed each database to impact the issues related to Watts Bar 2 PAMS. The assessment involved the following activities:

1. A status review of CAPs issued against the safety system design processes within Nuclear Automation.
2. A status review of ERs issued against the Watts Bar 2 PAMS project. This assessment was limited to ERs issued by the IV&V team as part of the verification and validation activities against the Watts Bar 2 PAMS project.

In addition to the databases in Table 2.2-4 which are based on defined workflows and the resolution of issues are tracked to closure, the Watts Bar 2 PAMS project also maintains an internal Open Issue database to keep track of self-identified issues that are documentation or project execution commitments.

This Open Issue database was also reviewed by IV&V to confirm the issues are not impacting the successful conclusion of the System Definition Phase. The location and file reviewed is as follows:

Location: \\SINT2010\Groupsl\Aut\Comq\PAMS - Watts Bar 2\Open Item Master Database Filename: WB2 PAMS MASTER Open Items.xls 2.3 DESIGN PHASE The following IV&V activities were performed during the Design Phase:

2.3.1 Generic Qualification Generic qualification refers to RSEs as well as the platform and base software used by the Watts Bar 2 PAMS Project. Although the timing of generic qualification is independent of the project-specific verification efforts, generic software and its requirements are expected to be available at the time of the project's Design Phase activities. Therefore, those generic qualification activities and their results are captured in this phase for reporting purposes.

Rev. 77 2-5 Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, 2-5 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 2.3.1.1 Generic AC160 Qualification a,c 2.3.1.2 Generic Platform Software Qualification The Watts Bar 2 PAMS AC 160 application utilize AC 160 base system software version at 1.3/8 with its applicable standard libraries. IV&V confirmed the base software has been generically qualified before its use with the PAMS project.

Maintenance and Test Panel (MTP) and Operator's Panel (OM) application software, also called as Flat Panel Display System (FPDS) software, makes use of the generic FPDS software at release level 09-00.

IV&V confirmed that the platform software has been generically qualified before use in the PAMS project.

Watts Bar Unit 2 PAMS FPDS software (Reference 54) overrides several software files that were part of the Generic FPDS Release 09-00 (Reference 27). These differences were introduced into the Watts Bar Unit 2 PAMS FPDS application software to implement fixes to the issues identified in the platform software. The difference analysis and V&V of the revised platform software files that are now part of the Watts Bar Unit 2 PAMS FPDS application software have been added to the project's IV&V scope.

2-6 Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 7 2-6 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 2.3.2 Review of Documentation Table 2.3-1 lists the Design Phase documents produced for the Watts Bar 2 PAMS project.

Table 2.3-1. Design Phase Documentation Document Number Document Title Reference WNA-SD-00250-WBT Software Design Description for the Post Accident 29 Monitoring System AC 160 Software WNA-SD-00248-WBT Software Design Description for the Post Accident 28 Monitoring System Flat Panel Display WNA-SD-00277-WBT Post Accident Monitoring System Flat Panel Display System 32 Screen Design Details WNA-CR-00010-WBT Watts Bar 2 NSSS Completion I&C Projects User 33 Configurable Setpoints for the Post Accident Monitoring System A preliminary design review as defined by SPM was performed during the design phase on the initial releases of the documents in Table 2.3-1. As design progressed and addressed anomalies identified throughout the SLC, new revisions of the design specification documents were released for verification.

Critical design reviews were performed on the revisions released for Channel Integration Test/Factory Acceptance Test (CIT/FAT) and on the latest revisions released to close issues identified during those tests.

The FPDS Screen Design Details are considered design details and their verification has been left for the Flat Panel Display System Test.

The User Configurable Setpoints for PAMS provide a list of addressable constants and their default values for testing purposes only. This document has not been verified for correctness as the initial values will be modified during plant startup. However, the document has been used to verify the FPDS application code databases for variable name, description, range and unit values.

2.3.3 Design Reviews A design review (preliminary) was conducted by the design team per NA 3.3.1 Design Review procedure (Reference 68) in May 2010. IV&V participated in this design review as observer.

2.3.4 Requirements Traceability Assessment Requirements Traceability Assessment at the Design Phase includes verification of tracing from SDD statements to the higher level requirements.

WNA-VR-00283-WBT-NP, Rev. 7 2-7 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 2.3.5 Developing Test Procedures IV&V Test Team utilized the System Definition Phase requirements documents identified in Table 2.2-1 to develop test procedures at each test phase. The test phases include Cabinet Hardware Test (CHT),

Processor Module Software Test (PMST), Flat Panel Display System Test (FPDST) and Channel Integration Test (CIT). The CIT is also referred to as Factory Acceptance Test (FAT).

The EST for each RSE has been developed under generic qualification efforts based on requirements identified in the RSEDs.

An assessment of test coverage was performed to verify the completeness of the overall test program. As a result of this activity, the RTM was updated with tracing information linking SRS requirements to SDDs and test statements.

2.3.6 Configuration Management Assessment IV&V performed an assessment of the project's release reports for software (Reference 30), hardware (Reference 31), and RTMs (Reference 21) for completeness and consistency with the Project's Baseline Report (Reference 7) as applicable to the Design Phase.

The following activities were performed on the Release Reports:

1. An evaluation of the release reports to confirm they include the documents expected within the scope of Design Phase of SLC.
2. A consistency check of the release levels between the release reports and the baseline report.
3. Verification of the CIs listed in the release reports. All CIs must be approved and archived in the electronic document management system (EDMS).

2.4 IMPLEMENTATION PHASE The following IV&V activities were performed during the Implementation Phase:

2.4.1 Verification of Software Implementation IV&V tasks in this phase include code inspections for both AC 160 and FPD application software as well as execution of PMST Procedure.

WNA-VR-00283-WBT-NP, Rev. 7 2-8 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Waits Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System The following table identifies the SRRs that released the application software for IV&V inspection and test:

Table 2.4-1. Software Release Records for Application Software Document Number Document Title Reference WNA-RL-00646-WBT Common Q Software Release Record for Watts Bar Unit 2 52 PAMS Train A, PAMA WNA-RL-00648-WBT Common Q Software Release Record for Watts Bar Unit 2 53 PAMS Train B, PAMB WNA-RL-00743-WBT Software Release Record for Watts Bar Unit 2 PAMS FPDS 54 This IV&V task includes both test and code inspections (i.e., Greenlining) executed according to the PAMS Test Plan (Reference 24). WNA-TP-03057-WBT, "Processor Module Software Test Procedure for the Post Accident Monitoring System" (Reference 35) identifies what requirements are to be tested versus the code inspection credited for validation.

The software for both AC 160 and FPDS has been released for verification multiple times to address anomalies identified during previous iterations of IV&V review, testing activities or for self identified issues. Regression analysis is performed to determine the scope of V&V activities necessary to verify the changes. Regression can include code inspection, testing, and documentation reviews. Test cases developed in previous release cycles may also be re-executed to ensure that no unintended changes in functional behavior have occurred as a result of changes made to the current revision under test.

In addition to WNA-TR-02389-WBT, "Processor Module Software Test Report for the Post Accident Monitoring System" (Reference 43), WNA-AR-00196-WBT, "Regression Analysis for the Post Accident Monitoring System" (Reference 49); WNA-AR-00209-WBT, "Regression Analysis for the Post Accident Monitoring System" (Reference 55); and WNA-VR-00295-WBT, "Code Review Report for the Post Accident Monitoring System Flat Panel Display" (Reference 44) were generated, and revised over time, to cover complete verification of multiple releases.

2.4.2 Verification of Hardware Implementation WNA-TP-02772-WBT, "Watts Bar 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Cabinet Hardware Test Procedure" (Reference 34) has been executed to validate the hardware implementation per the PAMS Test Plan (Reference 24).

2.4.3 Review of Documentation An assessment of the PAMS application conformance with the application restrictions defined in WNA-DS-01070-GEN, "Application Restrictions for Generic Common Q Qualification" (Reference 38),

was performed by the Design Team. The results of this assessment were reviewed by IV&V.

WNA-VR-00283-WBT-NP, Rev. 7 2-9 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 2.4.4 Requirements Traceability Assessment There is no Requirements Traceability Assessment performed during the Implementation Phase as the software itself is not an input to the RTM. The tracing of SDDs is a Design Phase activity and the verification of software implementation against the SDD is an IV&V activity that does not impact the RTM. Although the PMST procedure has been developed during this phase, the IV&V input for tracing PMST test cases to the SDD and SRS has been incorporated into the RTM in its Integration Phase release which also included tracing information from the integration tests.

2.4.5 Configuration Management Assessment IV&V performed an assessment of the project's release reports for software implementation (Reference 30) for completeness and consistency against the project's Baseline Report (Reference 7) as applicable to the Implementation Phase.

The following activities were performed on the release reports:

1. An evaluation of the configuration management release reports to confirm they include the necessary application software releases expected within the scope of Implementation Phase of SLC.
2. Verify the SRRs contain all applicable objects, code and documentation, necessary to define the application software and its operating environment.
3. Verification of the CIs listed in the release reports. All CIs must be approved and archived in the electronic document management system (EDMS).

2.5 INTEGRATION PHASE The following IV&V activities were performed during the Integration Phase:

2.5.1 Cabinet/Channel Integration The functional tests that verify integration of the released software with the deliverable hardware are the CITs. Prior to execution of CIT, though, a validation of the display software is performed through a-FPDST in order to ensure that the FPDS complies with all display requirements, thereby reducing the risk of CIT failure due to display issues.

The FPDST is a prerequisite to the CIT, which also fulfills the purpose of FAT. CIT/FAT validates the PAMS system-level requirements on target hardware.

Execution and reporting of the results of these tests are within the scope of the Integration Phase tasks per the Test Plan (Reference 24).

WNA-VR-00283-WBT-NP, Rev. 7 2-10 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 2.5.2 Design Reviews A Final Design Review was conducted during the Integration Phase (February 7, 2011) to summarize the updates made to the Watts Bar Unit 2 PAMS design requirements and implementation details documents within the scope of this review since the Preliminary Design Review meeting held on May 12, 2010.

Status of testing activity across all phases, including PMST, CHT, FPDST, and CIT with corresponding results, was discussed.

2.5.3 Requirements Traceability Assessment Requirements Traceability Assessment at the Integration Phase includes tracing test elements to the software and system requirements, and updating the RTM for test coverage.

2.5.4 Configuration Management Assessment There have been new baseline and release reports reflecting the updated revisions of requirements documents as well as the software implementation and requirements traceability. The latest revisions of baseline and release reports have been reviewed for completeness and consistency.

2.6 INSTALLATION PHASE IV&V activities for the installation phase of the Westinghouse Watts Bar 2 PAMS project include review of Operations and Maintenance Manual (Reference 56).

(Last Page of Section 2)

WNA-VR-00283-WBT-NP, Rev. 7 2-11 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 3

SUMMARY

OF IV&V TASKS RESULTS 3.1 CONCEPT PHASE Review of the Watts Bar PAMS project's Baseline Release Report (Reference 7) did not produce any findings.

Furthermore, review of the PAMS project plan (Reference 9) with respect to the projects' higher level quality plans and project plans (References 10, 11, and 12) did not produce any findings.

The PAMS Project Plan (Reference 9) is also compatible and consistent with established procedures and processes, as identified in References 3, 4, 6, and 16.

3.2 DEFINITION PHASE The following subsections summarize the IV&V tasks results for the scope identified in Section 1.2.

3.2.1 Review of Documentation Review of the Watts Bar 2 PAMS definition documents produced findings. The ER database (see Section 4 for the ER numbers) contains records for these findings. The ERs reported in previous revisions of this report (V&V-769, V&V-770, and V&V-868) have resulted in update of requirements documents and the ERs were closed after review of their resolution.

IV&V review of the SyRS did not produce specific comments against it during the document review activity. However, IV&V's acceptance of the SyRS was based on;

" IV&V's review of Westinghouse's early comments on TVA specifications (Reference 50)

" IV&V's review of Westinghouse's compliance assessment with the TVA specifications (Section 12 of the Watts Bar 2 PAMS Licensing Technical Report, Reference 25) to confirm the proposed system meets the customer requirements.

" Demonstrated evidence of independent review of SyRS requirements by an additional Westinghouse verifier

" Demonstrated evidence of independent review by TVA consultants TVA identified several non-compliance issues and Westinghouse responded to those comments with a modified Compliance Matrix that addressed them (Reference 18).

IV&V credits the demonstrated compliance of SyRS to the higher level input requirements supplied by TVA, and hence found the SyRS acceptable to drive the Watts Bar 2 PAMS design.

WNA-VR-00283-WBT-NP, Rev. 7 3-1 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Throughout the project execution, the SyRS has been through several revisions. The drivers for these revisions include clarifications to the requirements as Westinghouse converge on the contract compliance matrix, separate TVA comments on their review of each revision of the document, generic NRC comments, as well as resolution of exception reports.

At Revision 2, the SyRS requirements have become stable with TVA's approval of the document per WBT-TVA- 1511 "Comments on the Revision 2 Documentation" along with minor comments to be corrected in Rev. 3.

Revision 3 additionally addressed generic comments from NRC by removing "shall" or "must" statements outside of certain requirements. It also addressed numerous editorial changes, updated Guidance statements, and updated requirement text to use certain terms consistently. TVA comments on Revision 2 document were also addressed at this time. One requirement change worth mentioning was to add digital inputs to the scope of display requirements for input monitoring page - an oversight on the document but not an impact on software requirements (downstream requirements did have DI to drive implementation).

The changes in Revision 4 were driven by TVA comments (WBT-TVA-1624) to clarify wording on some requirements. One of the TVA comments was already addressed internally as a result of CIT-627 which was initiated by IV&V test team during CIT/FAT. This revision also added 2 new requirements to give basis to the floating point acceptance criteria used in CIT per DT-853, an issue that was also identified by the IV&V Test Team.

The iterations in the SyRS beyond Revision 2 did not result in software changes other than those initiated by the ERs.

In conclusion, the Licensing Technical Report (Reference 25) demonstrates compliance of the Westinghouse SyRS to the higher level input requirements supplied by TVA.

The review of new revisions of the System Requirements Specification (Reference 13), the System Design Specification (Reference 14), and the Software Requirements Specification (Reference 15) did not produce any new anomalies.

3.2.2 Requirements Traceability Assessment The RTM for PAMS (Reference 22) was reviewed as part of requirements traceability assessment in conjunction with the applicable revisions of SyRS, SDS, and SRS (see Table 2.2-1 for references)..

Findings were captured in 3 separate exception reports: V&V-800 on Revision 0 of the RTM; V&V-870 and V&V-871 on Revision 1 of the RTM, and V&V-888 on Revision 2 of the RTM.

The findings are against the deficiencies in the RTM and the inconsistencies in cross-referencing between Appendix A and Appendix B of the RTM. Additionally, the Revision 2 of the RTM has made some minor updates to the requirements text with intention to back-fit these changes into the next revision of SRS.

These instances have been acknowledged in Open Items section of the RTM and carried forward to the project's Master Open Items database. However, independent of the design team's record keeping, IV&V raised these inconsistencies in requirement text within ERs to track these to closure. These anomalies WNA-VR-00283-WBT-NP, Rev. 7 3-2 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System have all been confirmed addressed in Revision 3 and Revision 4 of the System RTM that reflects updates to the SyRS, SDS, and SRS.

The RVLIS RTM (Reference 23) has been reviewed for complete and correct tracing of individual RSEDs requirements to the Watts Bar 2 PAMS system and software requirements. Other than very minor non-reportable documentation issue, no comments were generated as a result of this review.

3.2.3 Developing Project Specific Test Plan Prior to release of Revision 1 of this report, a project-specific Test Plan was generated (Reference 24).

The purpose of this Test Plan is to describe the complete test program for the Watts Bar 2 PAMS project.

An evaluation of the Test Plan against the SPM has identified some discrepancies in demonstrating full compliance with the SPM requirements. Some of the information expected in the Test Plan was in fact captured in the Test Procedures which contain test specification and test case details. An assessment of the comprehensiveness of the test program was performed by IV&V Test Team and concluded that the test procedures were developed adequately and are complete and comprehensive per the Test Plan. The results of this assessment are included in the Test Summary Report, WNA-TR-02451-WBT (Reference 51).

The Project Plan (Reference 9) has been updated to include the project-specific Test Plan (Reference 51).

3.2.4 Configuration Management Assessment IV&V performed an assessment of the project's baseline report (Reference 7) for completeness, consistency and correctness for the current phase of the project (i.e., the Definition Phase).

Evaluation of the Baseline Report confirms that the CIs within the baseline report are complete and consistent with what is expected at the Concept and Definition Phase of SLC, except for inclusion of the now-available project specific Test Plan (Reference 24). The Baseline Report identifies the source requirement input documents and applicable plans and procedures for the project's execution. It also contains all the necessary hardware and software level decomposed requirements to allow the project precede with the design phase activities.

The review also confirms consistency of Definition Phase requirements documents (Table 2.2-1) with the Watts Bar Unit 2 PAMS source requirement input documents (Table 2.2-3).

IV&V verified that all CIs within the Baseline Report (Reference 7) are properly archived in EDMS, except for those that are customer documents that are not appropriate to be placed under Westinghouse EDMS. IV&V confirmed that all such external documents are available for project use in the Project's eRoom.

The Baseline Report also includes generic RSEDs related to the RVLIS functionality that will form basis of the software design. Inclusion of these generic RSEDs in a project specific baseline report was necessary as there were no prior qualification records existed as part of generic Common Q PAMS design WNA-VR-00283-WBT-NP, Rev. 7 3-3 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System including RVLIS. Corresponding verified software release for the RVLS library is included in the Software Implementation Release Report (Reference 30).

3.2.5 Change Control Assessment IV&V reviewed each database described in Table 2.2-4 to find the issues related to Watts Bar 2 PAMS.

The following CAPS are related to the Watts Bar 2 PAMS:

CAPS 10-240-M002 was generated after finding that AF 100 communication error detection between the MTP and the OM was not reliable. The issue was observed during execution of CIT/FAT. The ER CIT-624 has been filed to address the problem for Watts Bar 2 PAMS. The CAPS was initiated to determine and recommend solution to the effected Common Q projects. A resolution for Watts Bar 2 PAMS project has been put in place and the associated ER CIT-624 is now closed.

Issue Report CAPS-10-259-M032 was written after the NRC requested an evaluation to be performed to demonstrate compliance of SRS format and contents with the IEEE Std 830. A review of WNA-SD-00239-WBT, "Watts Bar 2 NSSS Completion Program I&C Projects SRS for the Post Accident Monitoring System", (Reference 73) was performed with respect to how it meets the SRS guidelines in IEEE Standard 830-1998 and Regulatory Guide 1.172. Internal memo CQSA-10-004, Rev. 1, provides the results of this review. The findings in CQSA-10-004 were addressed in a subsequent revision of the Watts Bar 2 PAMS SRS.

CAPS 10-341-M005 was issued to track an issue with the datafetch application with respect to the redundant bus. The version of datafetch application in the generic FPDS at release level 09-00 introduces AF100 bus communication delays and loss of data when one communication cable is disconnected. The issue was identified during CIT/FAT. The issue was tracked for the Watts Bar 2 PAMS project through ER DT-884. Resolution has been included in the software and regression tested successfully. The ER is closed.

CAPs 11-020-M041 and 11-05 1-WOO1 were issued to capture a discrepancy with the Trend Display. A fix was provided by the platform group and incorporated into the Watts Bar 2 PAMS FPDS application through DT-918. The two CAPS continue to investigate the extent of condition and any safety evaluations on previously delivered software. Tests were devised and run during the regression of the FPDST for Watts Bar 2 PAMS project to address the issue for the project. The ER has been closed after successful validation of the software changes.

In addition to the CAPS database, all IV&V generated anomalies, including those that were identified during the test activities, have been captured in the Lotus Notes WORKM database. A list of these IV&V generated issues can also be found in Section 4.

The Project's self-maintained Master Open Items database was also reviewed for completeness. All documentation issues captured in the Open Item section of definition phase documents and RTMs were confirmed to have been included in this database.

WNA-VR-00283-WBT-NP, Rev. 7 3-4 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 3.3 DESIGN PHASE The IV&V activities pertaining to the Design Phase are complete and reported in the following subsections.

3.3.1 Generic Qualification The Watts Bar 2 PAMS system relies on generically qualified platform and software libraries.

3.3.1.1 Generic AC160 Qualification Table 3.3-1 lists the RSEDs of generic CPCE's and TCs that are being used by the Watts Bar 2 PAMS application software. It also lists the verification records that qualified the corresponding software element for use in Common Q applications:

3.3.1.2 Generic Platform Qualification AC 160 Base Software qualification was performed through Commercial Grade Dedication process. The Watts Bar 2 PAMS application will utilize the AC160 base system software version at 1.3/8, ACC Advant version at 1.7/1, and standard AC160 PC and DB Element Library Version at 1.5/1 (Reference 26). IV&V has issued the AC 160 base software and generic libraries for use with the Common Q projects through verified SRRs (References 61, 62, 63) after review of the Commercial Grade Dedication Report (Reference 26) and confirming any new or revised restrictions were included in the Application Restrictions for Generic Common Q Qualification document (Reference 38). The verified SRRs are then used as building blocks of project specific application software releases (Reference 52 and 53)

Generic Flat Panel Display System (FPDS) software release 09-00 has been generically verified by IV&V with a resulting summary report (Reference 27). However, the project has identified several issues with the verified software and initiated CAPS process. Accordingly, Watts Bar 2 project incorporated into its application those platform files that were updated to fix the issues for the project.

WNA-VR-00283-WBT-NP, Rev. 7 3-5 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3.3-1. Generic AC160 Qualification RSED Type Name/Option Test Procedure Test Report Verified Software Release Record WNA-DS-00306-GEN, CPCE EUCONVRT/STDADD05 WNA-TP-00479-SSP, WNA-TR-00338-SSP WNA-RL-00530-GEN, Rev. OV Rev. 5 Rev. 1/APP Rev. 2/APP WNA-DS-00288-GEN, CPCE SYSTIME/STDADD05 WNA-TP-00449-GEN, WNA-TR-00279-GEN Rev. 1/APP Rev. 0/APP Rev. 0 WNA-DS-00315-GEN, CPCE CAL_CRC/STDADD05 WNA-TP-00517-GEN, WNA-TR-00368-GEN, Rev. 2 Rev. 1/APP Rev. I 00000-ICE-3238, CPCE CETMON/PAMS01 00000-ICE-35470, 00000-ICE-37744, WNA-RL-00327-GEN, Rev. 1V Rev. 04 Rev. 04 Rev. 02 00000-ICE-3238, CPCE SMMON/PAMSO1 00000-ICE-35471, 00000-ICE-37745, Rev. 04 Rev. 04 Rev. 02 00000-ICE-30140, CPCE LATCHINT/PAMSO1 00000-ICE-35293, 00000-ICE-37366, Rev. 04 Rev. 01 Rev. 07 WNA-DS-01564-GEN, TC EXMODERR WNA-TP-02272-GEN, WNA-TR-01430-GEN, WNA-RL-00286-GEN, Rev. 3V Rev. 2 Rev. 0 Rev. 0 WNA-DS-01715-GEN, TC PMDIAG WNA-TP-0241 1-GEN, WNA-TR-01922-GEN, WNA-RL-00412-GEN, Rev. 2V Rev. 4 Rev. 0 Rev. I WNA-DS-01505-GEN, TC REFLASH WNA-TP-00658-SSP, WNA-TR-00526-SSP, WNA-RL-00249-GEN, Rev. OV Rev. 0 Rev. 0/APP Rev. 1/APP 3-6 Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 7 3-6 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3.3-1. Generic AC160 Qualification (cont.)

RSED Type Name/Option Test Procedure Test Report Verified Software Release Record WNA-DS-01838-GEN, CPCE DENS04/RVLIS WNA-TP-02670-GEN, WNA-TR-02207-GEN, WNA-RL-00441-GEN_Rev7_Verified, Rev. 3 Rev. 0 Rev. 1 Rev. 0 WNA-DS-01839-GEN, CPCE RLDCORR/RVLIS WNA-TP-02671-GEN, WNA-TR-02208-GEN, Rev. 4 Rev. 0 Rev. I WNA-DS-01840-GEN, CPCE MAXS/RVLIS WNA-TP-02591-GEN, WNA-TR-01939-GEN, Rev. 2 Rev. 0 Rev. 0 WNA-DS-01841-GEN, CPCE MIN_S/RVLIS WNA-TP-02591-GEN, WNA-TR-02204-GEN, Rev. 2 Rev. 0 Rev. 0 WNA-DS-01 842-GEN, CPCE STLVLCAL/RVLIS WNA-TP-02672-GEN, WNA-TR-02209-GEN, Rev. 4 Rev. 0 Rev. 1 WNA-DS-01845-GEN, CPCE DHCALC/RVLIS WNA-TP-02673-GEN, WNA-TR-02210-GEN, Rev. 6 Rev. 0 Rev. 1 WNA-DS-01846-GEN, CPCE NDH/RVLIS WNA-TP-02674-GEN, WNA-TR-0221 I-GEN, Rev. 2 Rev. 0 Rev. I WNA-DS-01847-GEN, CPCE VOIDFRAC/RVLIS WNA-TP-02668-GEN, WNA-TR-02205-GEN, Rev. 2 Rev. 0 Rev. 2 WNA-DS-01848-GEN, CPCE LVLMNTR/RVLIS WNA-TP-02675-GEN, WNA-TR-02212-GEN, Rev. 4 Rev. 0 Rev. I WNA-DS-01849-GEN, CPCE PUMPSTAT/RVLIS WNA-TP-02676-GEN, WNA-TR-02213-GEN, Rev. 2 Rev. 0 Rev. 2 WNA-DS-01994-GEN, CPCE FILTO 1/RVLIS WNA-TP-02669-GEN, WNA-TR-02206-GEN, Rev. 0 Rev. 0 Rev. 1 WNA-DS-02065-GEN, CPCE LVLALMiRVLIS WNA-TP-02667-GEN, WNA-TR-02214-GEN, Rev. 2 Rev. 0 Rev. 0 WNA-VR-00283-WBT-NP, Rev. 7 3-7 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 3.3.2 Review of Documentation Both AC 160 and FPDS SDDs have been released and reviewed by IV&V. Design Review Checklists have been filled out and achieved in EDMS to document the parameters considered during the review process.

For AC 160 application software SDD, the review was performed while developing PMST procedure. ERs PMST- 168, PMST- 169 and PMST- 170 were issued to identify mismatches of SDD against SRS requirements. Note that this review was performed on the initial release of the AC 160 SDD (WNA-SD-00250-WBT, Rev. O[Reference 29]) which is considered Preliminary Design Review per sPM (Reference 6).

Since then, new revisions of the AC 160 application software SDD have been issued. Review of the latest revision of SDD (Reference 29) has been performed in conjunction with the review of latest System RTM which linked SDD statements to the SRS requirements (Reference 22). V&V-888 has been initiated that identifies comments against Rev. 1 of the SDD as well as its tracing to the requirements. An attempt to address this ER with Rev. 2 of the SDD failed and the design team response was rejected by IV&V as incomplete. As a result, another update to the SDD was performed which successfully closed V&V-888.

The FPDS SDD Revision 2 review was performed as part of code inspections. V&V-872 was issued to capture both SDD issues as well as issues pertaining to released code. This ER is confirmed closed after additional tests requested by IV&V were performed during FPDST regression.

3.3.3 Design Reviews A Preliminary Design Review (Reference 70) was performed by the design team per Nuclear Automation Level 2 Procedure WEC 3.3.1 Design Reviews (Reference 68) in May 2010. IV&V participated in this design review as observer.

Fifty seven Design Review Action Items (CHITs) were created during the Preliminary Design Review, affecting the documents described in Table 2.3-1, as well as the System Requirements Specification (Reference 13), and the System Design Specification (Reference 14). All CHITs have been reviewed by IV&V, along with their corresponding code and document implementations, and have a Completed status.

3.3.4 Requirements Traceability Assessment The System RTM (Reference 22) has been revised for the Design Phase to capture the requirements from the most recent revision of System Definition Phase documents as well as by populating the Design Element column. The requirement traceability assessment performed at this phase include review of added/deleted/modified system and software requirements, verification of their tracing in the revised RTM, and thoroughly review of the Design Element column.

V&V-888 was generated that identifies comments against SDD as well as its tracing to the requirements.

This ER is now closed.

WNA-VR-00283-WBT-NP, Rev. 7 3-8 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System a,c A revision to the RVLIS RTM (Reference 23) has been made at this phase to capture the changes onto the Reactor Vessel Level Monitoring CPCE. No findings were generated per this review.

3.3.5 Developing Test Procedures The IV&V Test Team generated test procedures commensurate with the test program defined in the PAMS Test Plan (Reference 24).

Table 3.3-2 provides the test procedures developed at this phase based on the Revision 2 of SyRS, SDS, and SRS.

WNA-VR-00283-WBT-NP, Rev. 7 3-9 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitorin, System Table 3.3-2. Test Procedures Test Level Test Procedure Title Ref.

CHT WNA-TP-02772-WBT Watts Bar 2 NSSS Completion Program I&C 34 Projects Post Accident Monitoring System Cabinet Hardware Test Procedure EST Various Refer to Table 3.3-1 for list of Element Software Test Procedures applicable to Watts Bar 2 PAMS project.

PMST WNA-TP-03057-WBT Processor Module Software Test Procedure for the 35 Post Accident Monitoring System FPDST WNA-TP-02955-WBT Watts Bar 2 NSSS Completion Program I&C 36 Projects Post Accident Monitoring System Flat Panel Display Software Test Procedure CIT/FAT WNA-TP-02988-WBT Watts Bar Unit 2 NSSS Completion Program I&C 37 Projects Post Accident Monitoring System Channel Integration Test/Factory Acceptance Test A Test Coverage Assessment was also performed during the Design Phase based on requirements presented in the PAMS System RTM, WNA-VR-00279-WBT, "Watts Bar 2 NSSS Completion Program I&C Projects Requirements Traceability Matrix for the Post-Accident Monitoring System", (Reference 74). The Appendix A of the System RTM has been used as a worksheet (also called the Test Coverage Assessment Worksheet) to perform the Test Coverage Assessment. A table was added to this worksheet that contains a list of requirements from the SDS,, WNA-DS-01667-WBT, "Watts Bar Unit 2 NSSS Completion Program I&C Projects Post Accident Monitoring System - System Design Specification",

(Reference 72), as not all SDS requirements had been traced within the System RTM. This ensured completeness of the test coverage.

Three columns were added to the Test Coverage Assessment Worksheet. The "Test Coverage" column identifies requirements that are needed to be validated in the test phases CHT, FPDST, and/or CIT. The software requirements to be validated during the PMST are identified in the "PMST Test Coverage" column. The "Comments" column provides additional guidance to the test engineer while developing the actual test cases.

An assessment was performed to make sure all testable requirements had been assigned to a test phase for validation. The assessment also included the completeness of each test activity to fully validate the requirements. In certain cases the requirement can only be fully addressed through multiple test phases.

The Test Coverage Assessment Worksheet was archived with Revision 2 of this report in EDMS for audit purposes. The information contained in this worksheet was later used to update the System RTM during the Integration Phase with added granularity from the actual test procedures developed. The test coverage is now captured in the System RTM (Reference 22), and the worksheet used during the Design Phase is obsolesced.

WNA-VR-00283-WBT-NP, Rev. 7 3-10 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 3.3.6 Configuration Management Assessment IV&V performed an assessment of the project's release reports (References 21, 30, and 31) for completeness, consistency, and correctness for the Design Phase of the project.

Evaluation of the release reports confirms that the Configuration Items (CIs) within the release reports are complete and consistent with each other.

IV&V verified that all CIs within the Release Reports are properly archived in EDMS.

3.4 IMPLEMENTATION PHASE The IV&V activities pertaining to the Implementation Phase are complete and reported in the following subsections.

3.4.1 Verification of Software Implementation The ESTs were performed on RSEs of the generic RVLIS option library. The resulting test reports are listed in Table 3.3-1.

The PMST, both tests and code inspections, has been executed on Revision 1 of the AC160 Application Software for Train A. This resulted in ERs (PMST-171 through PMST-174). Train B code was verified per regression analysis. It was found that the same findings are applicable to Train B. Results were reported in the PMST Report (Reference 43), which also includes the code inspection records.

Since then, a new revision was released for Train A (WNA-RL-00646-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA" [Reference 40]) with accompanying Train B software (WNA-RL-00648-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB" [Reference 41]). A regression analysis was performed on the revised code to validate the changes made to the PAMS application software and requirements documents since the execution of the PMST. The changes were made in response to the ER/SCRs filed against PAMS application software during the Design and Implementation Phases of the SLC. The regression analysis included tracing each change driver identified in the SRR to the code changes. A new difference analysis was performed between the latest revisions of Train A and Train B software. This regression analysis identified how to verify the latest released code: re-test, inspection, or crediting test results of CIT procedures.

The new requirements added to the SRS (Reference 15) were also analyzed. In addition to this revision analysis, Train A and Train B source code files have been analyzed to ensure that no functional differences exist between Train A and Train B.

For most changes, a code analysis sufficed as the means to completely verify the change. Where applicable, a corresponding CIT was referenced as an additional means of verifying the fix.

The regression analysis resulted in ERs (V&V-893 and V&V-894). These two ERs address a lack of justification to minor software changes that have been made to the AC160 application code.

WNA-VR-00283-WBT-NP, Rev. 7 3-11 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System ER PMST- 171 was written during the implementation phase (PMST). Issues documented with PMST-171 have not been addressed with the revised AC 160 application code and required further software and/or documentation change.

There have been two regression analyses performed for AC 160 code changes. Regression between software releases Rev. 2 and Rev. I (for Train A and its corresponding Train B releases) were reported in WNA-AR-00196-WBT (Reference 49). A regression analysis between Rev. 5 and Rev. 2 was captured in a new regression analysis report, WNA-AR-00209-WBT, "Regression Analysis for the Post Accident Monitoring System", (Reference 79). These regression analysis reports confirm closure of all past PMST anomalies as well as those self-identified or new anomalies resulting from CIT/FAT.

During the internal audit it was found that the RTM for Watts Bar Unit 2 PAMS, WNA-VR-00279-WBT, "Watts Bar 2 NSSS Completion Program I&C Projects Requirements Traceability Matrix for the Post-Accident Monitoring System", (Reference 75) cites WNA-TR-02389-WBT for the SRS requirement R5.4.2-1 but there was no reference to this requirement in the PMST Report. CAPS 11-050-M004 has been filed to address the problem. The Regression Analysis report has been updated (Reference 55) to include the verification reference for the SRS requirement R5.4.2-1.

IV&V performed a code review on Rev. 1 of the FPD application software. The review included both the C code and the databases that contain data compiled from source requirements documents as well as the User Configurable Setpoints document (Reference 33). The effort resulted in exception reports (V&V-872 and FPDS-008).

The FPDS code review process was repeated after the new release of the PAMS FPD application software. This code review analysis was limited to the changes applied to PAMS FPD application software Revision 3, and how these changes differentiate Revision 3 from Revision 1. Source code modules were reviewed for conformance with the Coding Standards and for adherence to the software Application Restrictions (Reference 38). Configuration data files were also reviewed for consistency and correctness with the SDD. The review of the software modules associated with the PAMS FPD application provides reasonable assurance that the issues found with the Rev. 1 release have been addressed. The Watts Bar 2 PAMS FPDS SDD Rev 2 was reviewed both to conform to this software release and to comply with the Watts Bar 2 PAMS SRS (Reference 15).

In addition to the anomalies identified by code review process, the PAMS FPD application software Rev. 3 addressed additional issues. The Generic Flat Panel Display System (FPDS) platform release 09-00 introduced AF 100 communication delays when one of the two redundant AF 100 cables is disconnected. As a result, PAMS FPD application software did not utilize the datafetch function that comes with generic release 09-00. Instead, a version of the datafetch function from generic FPD release 08-00 was included in the PAMS FPD application software. All other Common Q FPDS Generic files were kept at 09-00 versions. PAMS FPD application software also overrides cqTrend files that were part of the Generic FPDS Release 09-00 to address issues identified with trend displays. A regression analysis was performed on the affected files. The details regarding the changes made for PAMS FPDS software is captured in the PAMS FPD CRR (Reference 44). Generic FPDS platform release 09-00 has been generically verified by IV&V with a resulting summary report (Reference 27). For all the platform files and features utilized as is from the Generic FPDS Release 09-00, generic verification results are credited.

WNA-VR-00283-WBT-NP, Rev. 7 3-12 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System The IV&V activities also included the review of the RTM (Reference 22) to verify whether FPD code review can be credited to close outstanding open item P092. It was determined that additional tests needed to demonstrate validation of some parts of the requirements that code review cannot be credited alone. These additional tests were tracked through ERs (FPDST-008 and V&V-924). All required additional tests were conducted during FPDST regression and the outstanding ERs were successfully closed.

A CRR was issued to document the results (Reference 44).

Implementation Review Checklists have been filled out and achieved in EDMS to document the parameters considered during the code review process.

During IV&V review of WNA-IP-00520-WBT, "Post Accident Monitoring System Installation Manual" (Reference 58), a problem with initialization of the MTP display application was observed. V&V-932 was issued to track the problem. The startup scripts were modified and released (Reference 54) to ensure that WBT PAMS Application Software starts in the proper sequence. The modification was limited to startup scripts and there was no change to FPD Application Software. Therefore, there is no impact to the PAMS FPD (Reference 44). Also, there is no impact on AC160 software or any functional impact on FPDS displays. The previous CIT/FAT (WNA-TR-02413 -WBT, "Post-Accident Monitoring System Channel Integration Test/Factory Acceptance Test Report" [Reference 48]) and FPDST (WNA-TR-02387-WBT, "Post Accident Monitoring System Flat Panel Display Software Test Report" [Reference 47]) conclusions are still valid. Additional regression testing was performed to confirm the implementation. The Watts Bar 2 PAMS FPDS SDD (Reference 28) was reviewed to verify the new startup implementation.

3.4.2 Verification of Hardware Implementation The Cabinet Hardware Test Procedure (Reference 34) was executed and results were reported in the Post Accident Monitoring System Cabinet Hardware Test Report (Reference 45). The CHT procedure and its report were reviewed by IV&V for compliance with the PAMS Test Plan (Reference 24) and for confirmation of test results. There are 2 non-conformances reported: Quality Notice (QN) #60039888 for Train A and QN #60039887which are not direct failure of the CHT tests performed, but identify the results of the prerequisite in-process inspections. The quality control inspection process along with the life cycle of quality notices are governed by the Nuclear Automation Level 3 procedures (Reference 46).

These Quality Notices shall be satisfactorily closed and verified during the final inspections before the system is shipped. Nevertheless, an ER (CHT-054) has been issued to increase visibility to these outstanding issues within the Project team.

3.4.3 Review of Documentation Per SRS requirement R2.1-1, WNA-AR-00201-WBT, "Post Accident Monitoring System - Compliance to the Common Q Application Restrictions Document" (Reference 64) has been created to assess the Watts Bar PAMS application's compliance with the application restrictions defined in WNA-DS-01070-GEN (Reference 38). The conclusions drawn in WNA-AR-00201-WBT demonstrate that the Watts Bar PAMS application complies with the application restrictions defined in WNA-DS-01070-GEN. IV&V has reviewed the compliance assessments made by the Design Team for each of the applicable application restrictions, and concurs with their findings.

WNA-VR-00283-WBT-NP, Rev. 7 3-13 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 3.4.4 Requirements Traceability Assessment No RTM was issued to cover the Implementation Phase details. The SDD was already traced in the RTM at the Design Phase and reviewed by IV&V. The tracing of PMST statements has been incorporated into the RTM together with the remaining Integration Phase tests. See subsection 3.5.2 for activities performed during the Integration Phase Requirements Traceability Assessment.

3.4.5 Configuration Management Assessment IV&V performed an assessment of the project's release reports (References 21, 30, and 31) for completeness, consistency, and correctness for the Implementation Phase of the project.

Evaluation of the release reports confirms that the CIs within the release reports are complete and consistent with each other with one exception. Although the PAMS application software use more than one option library, only the RVLIS library's verified SRR is listed in the release reports.

IV&V verified that all CIs within the release reports are properly archived in EDMS.

3.5 INTEGRATION PHASE Subsequent sections of this report provide a summary of the IV&V tasks performed during the Integration Phase of the software life cycle.

The following table identifies the reports produced throughout the Watts Bar Unit 2 PAMS test program and the respective software revisions subject to those tests, reviews and analyses.

Table 3.5-1. Mapping of IV&V Reports to Software Releases AC 160 Train A Rev. 0 Rev. 1 Rev. 2 Rev. 3 Rev. 4 Rev. 5 WNA-RL-00646-WBT AC 160 Train B N/A N/A Rev. 0 Rev. 1 Rev. 2 Rev. 3 WNA-RL-00648-WBT FPDS N/A Rev. 0 Rev. 1 Rev. 2 Rev. 3 Rev. 4 Rev. 5 WNA-RL-00743-WBT Unit AC160 WNA-TR- WNA-AR- WNA-AR-00209-WBT, Level 02389-WBT, 00196-WBT, Rev. 1 Rev. 0 Rev. 0 FPDS WNA-VR-00295-WBT, WNA-VR-00295-WBT, Rev. 0 Rev. 1 WNA-VR-00283-WBT-NP, Rev. 7 3-14 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3.5-1. Mapping of IV&V Reports to Software Releases (cont.)

Channel CIT/FAT WNA-TR- WNA-TR- Addressed in Level 02413-WBT, 02413-WBT, FPDST Rev. 0 Rev. 1 FPDST WNA-TR- WNA-TR-02387-WBT, 02387-WBT, Rev. 1 Rev. 1 3.5.1 Cabinet/Channel Integration Per the PAMS Test Plan (Reference 24), the Cabinet/Channel Integration Tests consist of the FPDST and the CIT. CIT also fulfills the contractual requirement of the FAT; therefore, CIT, FAT, or CIT/FAT will be used interchangeably.

3.5.1.1 Execution and Reporting of Flat Panel Display Software Test The FPDST of the Watts Bar Unit 2 PAMS has been performed on version 00.02/02 of AC160 Application Software released by WNA-RL-00646-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA" (Reference 40) for Train A; WNA-RL-00648-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB" (Reference 41) for Train B; and FPD Application Software released by WNA-RL-00743-WBT, "Software Released Record for Watts Bar Unit 2 PAMS FPDS" (Reference 42). The FPDS testing of the Watts Bar Unit 2 OM and MTP subsystems began November 9, 2010 and continued until November 11, 2010. Test results were captured in WNA-TR-02387-WBT, "Post Accident Monitoring Flat Panel Display Software Test Report" in its original release. Executing the FPDST Procedure has resulted in ERs (DT-841, DT843 through DT-854, and DT-856).

Following FPDST, issues with the Trend Display and FPD Heartbeat status were identified. This resulted in a fix to the FPD application software which was tracked via DT-918 and DT-959, respectively. Further, additional testing was requested by IV&V to validate certain requirements (identified as Open Item P092 in System RTM) that cannot be addressed via code inspection alone. These were captured in ERs FPDS-008 and V&V-924, and added to the scope of FPDST Regression.

A regression test was performed to validate changes to the software and close out outstanding ERs. The test was conducted on modified software released through new revisions to SRRs WNA-RL-00646-WBT (Reference 52), WNA-RL-00648-WBT (Reference 53), and WNA-RL-00743-WBT (Reference 71).

Upon successful execution of these regression tests, a revision to the FPDS Test Report was issued (Reference 47).

3.5.1.2 Execution and Reporting of Channel Integration Test The CIT/FAT of the Watts Bar Unit 2 PAMS has been executed on version 00.02/02 of AC160 Application Software released by WNA-RL-00646-WBT, "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train A, PAMA" (Reference 40) for Train A and WNA-RL-00648-WBT, WNA-VR-00283-WBT-NP, Rev. 7 3-15 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System "Common Q Software Release Record for Watts Bar Unit 2 PAMS Train B, PAMB" (Reference 41) for Train B between November 15, 2010 and November 19, 2010. Test results were captured in Revision 0 of WNA-TR-02413-WBT, "Post-Accident Monitoring System Channel Integration/Factory Acceptance Test Report". The tests performed on each train were nearly identical with minor changes which are due to differences in addressable constants between the two trains.

A total of eight ERs (CIT-621 through CIT-628) were generated to document problems identified during testing. Most of the issues discovered during testing were minor software and procedural problems. The resolution of anomalies resulted in revised software which went through a regression analysis and testing.

Upon successful execution of these regression tests, a revision to the CIT/FAT Report was issued (Reference 48).

3.5.2 Design Reviews A Final Design Review was performed by the design team per Nuclear Automation Level 2 Procedure WEC 3.3.1 Design Reviews (Reference 68) in February 2011. IV&V participated in this design review as observer. As a result of the Final Design Review (Reference 69), one Design Review Action Items (CHIT) was created to address a signal quality issue with respect to addressable constants. This CHIT has been reviewed by IV&V, along with its corresponding code fix and document changes, and has a Completed status.

3.5.3 Requirements Traceability Assessment IV&V provided input to the Revision 4 of the System RTM during the Integration Phase to add tracing to the test statements as defined in WNA-TP-03057-WBT, "Processor Module Software Test Procedure for the Post Accident Monitoring System" (Reference 35); WNA-TP-02955-WBT, "Watts Bar 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Flat Panel Display Software Test Procedure" (Reference 36); WNA-TP-02772-WBT, "Watts Bar 2 NSSS Completion Program I&C Projects Post Accident Monitoring System Cabinet Hardware Test Procedure" (Reference 34); and WNA-TR-02413-WBT, "Post-Accident Monitoring System Channel Integration Test/Factory Acceptance Test Report" (Reference 48).

The requirement traceability assessment performed at this phase includes review of RTM test coverage against the most recent revision of System Definition Phase documents (Table 2.2.- 1). Some requirements were determined to be verified through inspection on the final release of the software as they were related to the configuration of the operating environment.

IV&V performed an additional review of the System RTM (Reference 22) during the Integration Phase to review the changes that were introduced with revision 5. The open items being tracked for closure pending completion of FPD regression tests and code review activities have been addressed with the new revision. All of the typographical errors that were identified during the NRC audit have been corrected.

3-16 Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 7 3-16 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitorin2 System 3.5.4 Configuration Management Assessment A new baseline report (Reference 7), Software Implementation Release Report (Reference 30) and Requirement Traceability Release Report (Reference 21) were issued that capture the new requirements, design and implementation changes performed since the initial run of CIT/FAT.

IV&V has performed an assessment of the changes in the contents of these release reports for completeness, consistency, and correctness for the Integration Phase of the project, as well as to confirm closure of outstanding anomalies.

IV&V has completed the assessment of the software configuration management plan (SCMP) for Common Q projects. The IV&V team reviewed the adequacy and completeness of the configuration management methods defined in the SCMP (SPM, Section 6) and their implementation. The description of the activities performed and the outcome for this assessment are provided with NA-IV&V-1 1-0005, "Assessment of Software Configuration Management Plan for Common Q Projects" (Reference 60).

3.6 INSTALLATION PHASE As part of the installation phase activities, the system has been re-installed from the installation CDs.

IV&V-932 was issued to document a vulnerability observed during a short period of time while the FPDS is being started up. The issue was addressed within the FPD software, retested and closed.

IV&V performed a review of Post Accident Monitoring System Operations and Maintenance Manual (Reference 56) which includes vendor documents as well as the following Watts Bar Unit 2 PAMS specific installation and maintenance procedures:

" Post Accident Monitoring System Maintenance Manual (Reference 57),

The Westinghouse generated maintenance and installation documents have been reviewed and found acceptable.

(Last Page of Section 3)

WNA-VR-00283-WBT-NP, Rev. 7 3-17 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 4

SUMMARY

OF IV&V FINDINGS AND RESOLUTION This section provides a listing of IV&V ERs generated for the Watts Bar 2 PAMS project and their current status.

Multiple IV&V findings may be reported within a single ER if that facilitates the assignment and resolution of the findings easier, such as one ER per each document. IV&V classified and listed each finding in the ER. Classification of findings is as described in Table 4-1.

Table 4-1. Classifications of Findings Classification Description ANO The finding is an anomaly and satisfactory resolution is required for lV&V's acceptance.

RAI The finding requires additional information for clarity and/or IV&V's understanding. Depending on the information provided, the finding is either removed or turned into an anomaly.

COM The finding is a comment or suggestion for improvement of the documentation and does not impact IV&V acceptance if not resolved.

Table 4-2 lists the,ERs and their metrics for the project-specific findings:

Table 4-2. Exception Reports Issued Against Watts Bar 2 PAMS Project ER Subject ANO COM RAI ER Workflow Status Open/Closed V&V-769 SRS, Rev 1 11 Resolution Complete Closed V&V-770 SDS, Rev 1 14 Resolution Complete Closed V&V-800 RTM, Rev 0 2 Resolution Complete Closed PMST-168 SDD, Rev. 0 1 Resolution Complete Closed PMST-169 SDD, Rev. 0 1 Resolution Complete Closed PMST-170 SDD, Rev. 0 1 Resolution Complete Closed PMST-171 RTD Quality 1 Resolution Complete Closed PMST- 172 DSP Quality 1 Resolution Complete Closed PMST- 173 Average RJT 1 Resolution Complete Closed PMST-174 RCS Press. 1 Resolution Complete Closed V&V-868 SRS 23 5 Resolution Complete Closed V&V-870 RTM, Rev. 1 8 Resolution Complete Closed WNA-VR-00283-WBT-NP, Rev. 7 4-1 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 4-2. Exception Reports Issued Against Watts Bar 2 PAMS Project (cont.)

ER Subject ANO COM RAI ER Workflow Status Open/Closed V&V-871 RTM, Rev. 1 11 22 Resolution Complete Closed V&V-872 FPDS code 33 6 Resolution Complete Closed V&V-888 RTM, Rev. 2 5 8 Resolution Complete Closed FPDS-008 FPDS DB 82 Resolution Complete Closed CIT-620 FPDS DB 1 Resolution Complete Closed CIT-621 AC 160 1 Resolution Complete Closed thermocouple CIT-622 AC 160 RTD 1 Resolution Complete Closed CIT-623 CETMON 2 Resolution Complete Closed CIT-624 AC 160 FOM 1 Resolution Complete Closed CIT-625 TMARCET I Resolution Complete Closed CIT-626 SMM Test I Resolution Complete Closed CIT-627 Cabnt Temp 1 Resolution Complete Closed CIT-628 RVLIS Calc I Resolution Complete Closed DT-841 FPDS Printing I Resolution Complete Closed DT-843 FPD Res 1 Resolution Complete Closed DT-844 FPDS Screen 1 Resolution Complete Closed DT-845 FPDS RJT 1 Resolution Complete Closed DT-846 FPDS Time 1 Resolution Complete Closed DT-847 SRS 1 Resolution Complete Closed DT-848 FPDS Display 1 Resolution Complete Closed DT-849 FPDS Display I Resolution Complete Closed DT-850 Annun Test 1 Resolution Complete Closed DT-851 FPDST 1 Resolution Complete Closed Procedure DT-852 RCS P Res. 1 Resolution Complete Closed DT-853 FPD Rounding I Resolution Complete Closed DT-854 SMM 1 Resolution Complete Closed DT-856 FPDS RCP 1 Resolution Complete Closed V&V-893 AC 160 1 Resolution Complete Closed V&V-894 AC160 1 Resolution Complete Closed V&V-924 FPDS 1 Resolution Complete Closed WNA-VR-00283-WBT-NP, Rev. 7 4-2 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 4-2. Exception Reports Issued Against Watts Bar 2 PAMS Project (cont.)

ER Subject ANO COM RAI ER Workflow Status Open/Closed DT-882 AC 160 1 Resolution Complete Closed DT-884 Datafetch I Resolution Complete Closed DT-889 FPDS SDD 1 Resolution Complete Closed DT-890 AC 160 SDD I Resolution Complete Closed DT-902 WDT 1 Resolution Complete Closed DT-9 18 Trends I Resolution Complete Closed DT-775 SRS 1 Resolution Complete Closed DT-620 MINS 1 Resolution Complete Closed DT-959 FPD Heartbeat 1 Resolution Complete Closed monitoring V&V-931 Document 1 Resolution Complete Closed Comments V&V-932 FPD Startup 1 Resolution Complete Closed Table 4-3 lists the ERs issued against the generic qualification of Custom PC Elements or Type Circuits used within the Watts Bar 2 PAMS project.

Table 4-3. Exception Reports Issued Against Generic Software ER Subject ANO COM RAI ER Status Open/Closed V&V-703 MAXS 2 Resolution Complete Closed V&V-707 SRR RVLIS Library 1 Resolution Complete Closed V&V-711 LVLMNTR I Resolution Complete Closed V&V-739 NDH 1 Resolution Complete Closed V&V-740 SRR RVLIS Library 2 Resolution Complete Closed V&V-742 LVLALM 2 Resolution Complete Closed V&V-745 DENSO4 I Resolution Complete Closed V&V-746 RLDCORR 3 Resolution Complete Closed V&V-747 PUMPSTAT 2 Resolution Complete Closed V&V-749 FILTO1 2 Resolution Complete Closed V&V-751 PUMPSTAT I Resolution Complete Closed 7 4-3 Westinghouse Non-Proprietary Class 3 WNA-VR-00283-WBT-NP, Rev.

WNA-VR-00283-WBT-NP, Rev. 7 4-3 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 4-3. Exception Reports Issued Against Generic Software (cont.)

ER Subject ANO COM RAI ER Status Open/Closed V&V-750 DENSO4 1 Resolution Complete Closed V&V-752 NDH I Resolution Complete Closed V&V-757 RLDCORR 1 1 Resolution Complete Closed V&V-758 DENSO4 1 Resolution Complete Closed V&V-760 STLVLCAL 1 Resolution Complete Closed V&V-762 DHCALC I Resolution Complete Closed V&V-039 SYS-TIME 1 Resolution Complete Closed V&V-755 SYSTIME 1 Resolution Complete Closed V&V-779 STLVLCAL 3 Resolution Complete Closed V&V-781 DHCALC 1 Resolution Complete Closed V&V-785 PMDIAG 13 6 Resolution Complete Closed V&V-792 DHCALC 1 Resolution Complete Closed V&V-794 VOIDFRAC I Resolution Complete Closed (Last Page of Section 4)

WNA-VR-00283-WBT-NP, Rev. 7 4-4 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 5 IV&V ASSESSMENT OF SOFTWARE QUALITY The Watts Bar 2 Post Accident Monitoring System project has:

" Maintained project plans (Reference 9 and Reference 24)

" Established a design baseline (Reference 7)

" Released design artifacts through release reports (References 21, 30, and 31)

  • Managed design changes The Design Team will maintain the System RTM (Reference 22) for the Watts Bar 2 PAMS project.

There are-still two open issues with the System RTM both of which can be closed crediting regression test activities. IV&V will continue to assess the completeness and correctness of the requirements throughout the project.

IV&V has filled and archived checklists at the end of each phase, except for the Concept Phase. No checklist requirement exists in SPM for Concept Phase. Below is the list of checklists generated by IV&V across all phases. The source of the checklists is the Verification and Validation Process for the Common Q Safety Systems, Appendix A through E, (Reference 1). However checklists used are inclusive of SPM checklist items except for one known deficiency. Implementation phase checklist in Reference 1 inadvertently excluded Review of Unit Test Documentation. The SPM checklist questions were manually included in the checklists filed for Implementation Phase. Only the last applicable checklists are shown below.

Definition Phase Checklists:

  • WNA-DS-01617-WBT rev4 Checklist
  • WNA-DS-01667-WBT rev4 Checklist

" WNA-SD-00239-WBT rev4_Checklist Design Phase Checklists:

  • WNA-SD-00248-WBT R3 Checklist (FPD)
  • WNA-SD-00250-WBTR3_CheckList (AC160)

Implementation Phase Checklists:

" FPDS Code Review Report (Reference 44) contains a checklist for each module

  • The EST Reports for CPCE's (Table 3.3-1) contain a code review checklist
  • WNA-RL-00646-WBTTrainAR5_CheckList (AC 160)

" WNA-RL-00646-WBTTrainBR3_CheckList (AC 160)

" WNA-RL-00743-WBTR5_Checklist (FPD)

WNA-VR-00283-WBT-NP, Rev. 7 5-1 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Integration Phase Checklists:

0 WNA-TR-02389-WBT RO CheckList.pdf (PMST) 0 WNA-TR-02387-WBT RO CheckList (FPDST) 0 WNA-TR-02413-WBT RO CheckList (CIT) 0 WNA-TR-02451-WBTROCheckList (Test Summary)

Installation Phase Checklists:

0 WNA-IP-00520-WBTRI1CheckList.pdf (Installation Manual)

WNA-MP-00029-WBTROCheckList.pdf (Maintenance Manual)

All of these project activities have been conducted in accordance with established Westinghouse Electric Company policies, procedures, and processes. All Watts Bar 2 PAMS design objects covered in this report have undergone second-party (peer) and IV&V review.

The software release that went through regression has been transferred into the Production software library that is maintained by IV&V. Verified SRRs (References 65, 66, and 67) have been issued by IV&V back to the Project. The Verified SRRs certify that the software is acceptable for use in the intended application. Their contents meet the Exhibit-8-1 of the Software Program Manual for Common Q Systems (Reference 6) for Computer Code Certificates. Verified SRR's can be used as one of the inputs to generate Certificate of Conformance prior to delivering the software for installation and use at Watts Bar Unit 2.

Tables 5-1, 5-2, and 5-3 list all software elements and their corresponding SRRs that were either qualified or utilized during the project.

Table 5-1. Software Release Records for Custom PC Elements and Type Circuits Custom PC Element/

Library SRR Document Number Verified SRR Document Number EUCONVRT/STDADD05 StdAdd05_001-SRR, Rev. 3 WNA-RL-00530-GEN, Rev. OV SYSTIME/STDADD05 StdAdd05_OO1-SRR, Rev. 3 WNA-RL-00530-GEN, Rev. OV CALCRC/STDADD05 StdAdd05_OO1-SRR, Rev. 3 WNA-RL-00530-GEN, Rev. OV CETMON/PAMSO1 WNA-RL-00327-GEN, Rev. 1 WNA-RL-00327-GEN, Rev. 1V SMMON/PAMSO1 WNA-RL-00327-GEN, Rev. 1 WNA-RL-00327-GEN, Rev. 1V LATCHINT/PAMSO1 WNA-RL-00327-GEN, Rev. 1 WNA-RL-00327-GEN, Rev. 1V EXMODERR WNA-RL-00286-GEN, Rev. 3 WNA-RL-00286-GEN, Rev. 3V PMDIAG WNA-RL-00412-GEN, Rev. 2 WNA-RL-00412-GEN, Rev. 2V REFLASH WNA-RL-00249-GEN, Rev. 0 WNA-RL-00249-GEN, Rev. OV WNA-VR-00283-WBT-NP, Rev. 7 5-2 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 5-1. Software Release Records for Custom PC Elements and Type Circuits (cont.)

Custom PC Element/

Library SRR Document Number Verified SRR Document Number DENSO4/RVLIS WNA-RL-00441 -GEN, Rev. 7 WNA-RL-0044 1-GENRev7_Verified, Rev. 0 RLDCORR/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 MAXS/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 MIN_S/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 STLVLCAL/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 DHCALC/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 NDH/RVLIS WNA-RL-00441 -GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 VOIDFRAC/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 LVLMNTR/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 PUMPSTAT/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 FILTO1/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GEN Rev7_Verified, Rev. 0 LVLALM/RVLIS WNA-RL-00441-GEN, Rev. 7 WNA-RL-00441-GENRev7_Verified, Rev. 0 Table 5-2. Software Release Records for Application Software SRR Document Document Title Number Verified SRR Document Number Common Q Software Release WNA-RL-00646-WBT, WNA-RL-00646-WBT_Rev5_Verified, Record for Watts Bar Unit 2 Rev. 5 Rev. 0 PAMS Train A, PAMA Common Q Software Release WNA-RL-00648-WBT, WNA-RL-00648-WBTRev 3_

Record for Watts Bar Unit 2 Rev. 3 Verified, Rev. 0 PAMS Train B, PAMB Software Release Record for WNA-RL-00743-WBT, WNA-RL-00743-WBTRev 5 Watts Bar Unit 2 PAMS FPDS Rev. 5 Verified, Rev. 0 WNA-VR-00283-WBT-NP, Rev. 7 5-3 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 5-3. Software Release Records for Generic Software SRR Document Document Title Number Verified SRR Document Number Common Q Generic Flat Panel WNA-RL-00272-GEN, WNA-VR-00284-GEN, Rev. 0, Display System Software Rev. 3 "Common Q Generic FPDS IV&V Release Record Summary Report," Rev. 0 Common Q Software Release WNA-RL-00540-GEN, WNA-RL-00540-GEN, Rev. OV Record AC1601P3R8 Rev. 0 AMPL Control Configuration WNA-RL-00563-GEN, WNA-RL-00563-GEN, Rev. OV Advanced 1.7/1 Rev. 0 Common Q Software Release WNA-RL-00653-GEN, WNA-RL-00653-GENRevOVerified, Record AC 160 PC and DB Rev. 0 Rev. 0 Element Libraries Version 1.5/1 (Last Page of Section 5)

WNA-VR-00283-WBT-NP, Rev. 7 5-4 Westinghouse Non-Proprietary Class 3

Nuclear Automation IV&V Summary Report Watts Bar Unit 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 6 IV&V RECOMMENDATIONS The Watts Bar 2 PAMS project demonstrated sufficient evidence for IV&V to conclude completion of the Integration Phase with successful regression of FPDST and CIT/FAT.

During the execution of the project, there has been one internal audit and 2 audits performed by U.S. NRC. These audits resulted in several corrective actions that impacted the Watts Bar Unit 2 PAMS project. Westinghouse has performed several self-assessments to verify compliance to both Software Program Manual and the industry standards. These self-assessments have resulted in immediate actions as well as future improvement suggestions.

IV&V recommends that the lessons learned from this project be captured in the Westinghouse' iKnow Lessons Learned Database and the future improvement suggestions are followed up by issuing CAPS issue reports.

(Last Page of Section 6)

WNA-VR-00283-WBT-NP, Rev. 7 6-1 Westinghouse Non-Proprietary Class 3

Attachment 3 WEC non-proprietary document CAW 12-3425, "Application for Withholding Information From Public Disclosure WNA-VR-00283-WBT-P, Revision 7, "IV&V Summary Report for the Post Accident Monitoring System," (Proprietary)" dated March 1, 2012 (Letter Item 2, SSER 23 Appendix HH Item Number 98)

Westinghouseo0°ooo Westin houseWestinghouse Electric Company Nuclear Services 1000 Westinghouse Drive Cranberry Township, Pennsylvania 16066 USA U.S. Nuclear Regulatory Commission Direct tel: (412) 374-4643 Document Control Desk Direct fax: (724) 720-0754 11555 Rockville Pike e-mail: greshaja@westinghouse.com Rockville, MD 20852 Proj letter: WBT-D-3837 CAW-12-3425 March 1, 2012 APPLICATION FOR WITHHOLDING PROPRIETARY INFORMATION FROM PUBLIC DISCLOSURE

Subject:

WNA-VR-00283-WBT-P, Rev. 7, "IV&V Summary Report for the Post Accident Monitoring System" (Proprietary)

The proprietary information for which withholding is being requested in the above-referenced report is further identified in Affidavit CAW-12-3425 signed by the owner of the proprietary information, Westinghouse Electric Company LLC. The affidavit, which accompanies this letter, sets forth the basis on which the information may be withheld from public disclosure by the Commission and addresses with specificity the considerations listed in paragraph (b)(4) of 10 CFR Section 2.390 of the Commission's regulations.

Accordingly, this letter authorizes the utilization of the accompanying affidavit by Tennessee Valley Authority.

Correspondence with respect to the proprietary aspects of the application for withholding or the Westinghouse affidavit should reference this letter, CAW-12-3425, and should be addressed to J. A. Gresham, Manager, Regulatory Compliance, Westinghouse Electric Company, Suite 428, 1000 Westinghouse Drive, Cranberry Township, Pennsylvania 16066.

Very truly yours, J.A. Gresham, Manager Regulatory Compliance Enclosures

CAW- 12-3425 AFFIDAVIT COMMONWEALTH OF PENNSYLVANIA:

ss COUNTY OF BUTLER:

Before me, the undersigned authority, personally appeared J. A. Gresham, who, being by me duly sworn according to law, deposes and says that he is authorized to execute this Affidavit on behalf of Westinghouse Electric Company LLC (Westinghouse), and that the averments of fact set forth in this Affidavit are true and correct to the best of his knowledge, information, and belief:

Gresham, Manager Regulatory Compliance Sworn to and subscribed before me this 1st day of March 2012 lotary Pbi COMMONWEALTH OF PENNSYLVANIA Notarial Seal Cynthia Olesky, Notary Public manor Boro, Westmoreland County My Commission Expires July 16, 2014 Member, Pennsvlvania Association of Notaries

2 CAW-12-3425 (1) I am Manager, Regulatory Compliance, in Nuclear Services, Westinghouse Electric Company LLC (Westinghouse), and as such, I have been specifically delegated the function of reviewing the proprietary information sought to be withheld from public disclosure in connection with nuclear power plant licensing and rule making proceedings, and am authorized to apply for its withholding on behalf of Westinghouse.

(2) I am making this Affidavit in conformance with the provisions of 10 CFR Section 2.390 of the Commission's regulations and in conjunction with the Westinghouse Application for Withholding Proprietary Information from Public Disclosure accompanying this Affidavit.

(3) I have personal knowledge of the criteria and procedures utilized by Westinghouse in designating information as a trade secret, privileged or as confidential commercial or financial information.

(4) Pursuant to the provisions of paragraph (b)(4) of Section 2.390 of the Commission's regulations, the following is furnished for consideration by the Commission in determining whether the information sought to be withheld from public disclosure should be withheld.

(i) The information sought to be withheld from public disclosure is owned and has been held in confidence by Westinghouse.

(ii) The information is of a type customarily held in confidence by Westinghouse and not customarily disclosed to the public. Westinghouse has a rational basis for determining the types of information customarily held in confidence by it and, in that connection, utilizes a system to determine when and whether to hold certain types of information in confidence. The application of that system and the substance of that system constitutes Westinghouse policy and provides the rational basis required.

Under that system, information is held in confidence if it falls in one or more of several types, the release of which might result in the loss of an existing or potential competitive advantage, as follows:

(a) The information reveals the distinguishing aspects of a process (or component, structure, tool, method, etc.) where prevention of its use by any of

3 CAW-12-3425 Westinghouse's competitors without license from Westinghouse constitutes a competitive economic advantage over other companies.

(b) It consists of supporting data, including test data, relative to a process (or component, structure, tool, method, etc.), the application of which data secures a competitive economic advantage, e.g., by optimization or improved marketability.

(c) Its use by a competitor would reduce his expenditure of resources or improve his competitive position in the design, manufacture, shipment, installation, assurance of quality, or licensing a similar product.

(d) It reveals cost or price information, production capacities, budget levels, or commercial strategies of Westinghouse, its customers or suppliers.

(e) It reveals aspects of past, present, or future Westinghouse or customer funded development plans and programs of potential commercial value to Westinghouse.

(f) It contains patentable ideas, for which patent protection may be desirable.

There are sound policy reasons behind the Westinghouse system which include the following:

(a) The use of such information by Westinghouse gives Westinghouse a competitive advantage over its competitors. It is, therefore, withheld from disclosure to protect the Westinghouse competitive position.

(b) It is information that is marketable in many ways. The extent to which such information is available to competitors diminishes the Westinghouse ability to sell products and services involving the use of the information.

(c) Use by our competitor would put Westinghouse at a competitive disadvantage by reducing his expenditure of resources at our expense.

4 CAW-12-3425 (d) Each component of proprietary information pertinent to a particular competitive advantage is potentially as valuable as the total competitive advantage. If competitors acquire components of proprietary information, any one component may be the key to the entire puzzle, thereby depriving Westinghouse of a competitive advantage.

(e) Unrestricted disclosure would jeopardize the position of prominence of Westinghouse in the world market, and thereby give a market advantage to the competition of those countries.

(f) The Westinghouse capacity to invest corporate assets in research and development depends upon the success in obtaining and maintaining a competitive advantage.

(iii) The information is being transmitted to the Commission in confidence and, under the provisions of 10 CFR Section 2.390; it is to be received in confidence by the Commission.

(iv) The information sought to be protected is not available in public sources or available information has not been previously employed in the same original manner or method to the best of our knowledge and belief.

(v) The proprietary information sought to be withheld in this submittal is that which is appropriately marked in WNA-VR-00283-WBT-P, Rev. 7, "IV&V Summary Report for the Post Accident Monitoring System" (Proprietary), dated February 2012, for submittal to the Commission, being transmitted by Tennessee Valley Authority letter and Application for Withholding Proprietary Information from Public Disclosure, to the Document Control Desk. The proprietary information as submitted by Westinghouse is that associated with the Post Accident Monitoring System and may be used only for that purpose.

5 CAW-12-3425 This information is part of that which will enable Westinghouse to:

(a) Continue to provide technical support for verification and validation services for the Post Accident Monitoring System.

(b) Remain competitive in the marketplace for support services.

Further this information has substantial commercial value as follows:

(a) Westinghouse plans to sell the use of similar information to its customers for the purpose of design verification and validation.

(b) Westinghouse can sell support and defense of licensing activities.

(c) The information requested to be withheld reveals the distinguishing aspects of a methodology which was developed by Westinghouse.

Public disclosure of this proprietary information is likely to cause substantial harm to the competitive position of Westinghouse because it would enhance the ability of competitors to provide similar calculations, analysis and licensing defense services for commercial power reactors without commensurate expenses. Also, public disclosure of the information would enable others to use the information to meet NRC requirements for licensing documentation without purchasing the right to use the information.

The development of the technology described in part by the information is the result of applying the results of many years of experience in an intensive Westinghouse effort and the expenditure of a considerable sum of money.

In order for competitors of Westinghouse to duplicate this information, similar technical programs would have to be performed and a significant manpower effort, having the requisite talent and experience, would have to be expended.

Further the deponent sayeth not.

PROPRIETARY INFORMATION NOTICE Transmitted herewith are proprietary and/or non-proprietary versions of documents furnished to the NRC in connection with requests for generic and/or plant-specific review and approval.

In order to conform to the requirements of 10 CFR 2.3 90 of the Commission's regulations concerning the protection of proprietary information so submitted to the NRC, the information which is proprietary in the proprietary versions is contained within brackets, and where the proprietary information has been deleted in the non-proprietary versions, only the brackets remain (the information that was contained within the brackets in the proprietary versions having been deleted). The justification for claiming the information so designated as proprietary is indicated in both versions by means of lower case letters (a) through (f) located as a superscript immediately following the brackets enclosing each item of information being identified as proprietary or in the margin opposite such information. These lower case letters refer to the types of information Westinghouse customarily holds in confidence identified in Sections (4)(ii)(a) through (4)(ii)(f) of the affidavit accompanying this transmittal pursuant to 10 CFR 2.390(b)(1).

COPYRIGHT NOTICE The reports transmitted herewith each bear a Westinghouse copyright notice. The NRC is permitted to make the number of copies of the information contained in these reports which are necessary for its internal use in connection with generic and plant-specific reviews and approvals as well as the issuance, denial, amendment, transfer, renewal, modification, suspension, revocation, or violation of a license, permit, order, or regulation subject to the requirements of 10 CFR 2.390 regarding restrictions on public disclosure to the extent such information has been identified as proprietary by Westinghouse, copyright protection notwithstanding. With respect to the non-proprietary versions of these reports, the NRC is permitted to make the number of copies beyond those necessary for its internal use which are necessary in order to have one copy available for public viewing in the appropriate docket files in the public document room in Washington, DC and in local public document rooms as may be required by NRC regulations if the number of copies submitted is insufficient for this purpose. Copies made by the NRC must include the copyright notice in all instances and the proprietary notice if the original was identified as proprietary.

Tennessee Valley Authority Letter for Transmittal to the NRC The following paragraphs should be included in your letter to the NRC:

Enclosed are:

1. copies of WNA-VR-00283-WBT-P, Rev. 7, "IV&V Summary Report for the Post Accident Monitoring System" (Proprietary)
2. _ copies of WNA-VR-00283-WBT-NP, Rev. 7, "IV&V Summary Report for the Post Accident Monitoring System" (Non-Proprietary)

Also enclosed is the Westinghouse Application for Withholding Proprietary Information from Public Disclosure CAW- 12-3425, accompanying Affidavit, Proprietary Information Notice, and Copyright Notice.

As Item 1 contains information proprietary to Westinghouse Electric Company LLC, it is supported by an affidavit signed by Westinghouse, the owner of the information. The affidavit sets forth the basis on which the information may be withheld from public disclosure by the Commission and addresses with specificity the considerations listed in paragraph (b)(4) of Section 2.390 of the Commission's regulations.

Accordingly, it is respectfully requested that the information which is proprietary to Westinghouse be withheld from public disclosure in accordance with 10 CFR Section 2.390 of the Commission's regulations.

Correspondence with respect to the copyright or proprietary aspects of the items listed above or the supporting Westinghouse affidavit should reference CAW- 12-3425 and should be addressed to J. A. Gresham, Manager, Regulatory Compliance, Westinghouse Electric Company, Suite 428, 1000 Westinghouse Drive, Cranberry Township, Pennsylvania 16066.

Retrieved from "https://kanterella.com/w/index.php?title=ML12073A392&oldid=2104186"