ML17297B015
| ML17297B015 | |
| Person / Time | |
|---|---|
| Site: | Palo Verde  |
| Issue date: | 10/28/1981 |
| From: | Miraglia F Office of Nuclear Reactor Regulation |
| To: | Van Brunt E ARIZONA PUBLIC SERVICE CO. (FORMERLY ARIZONA NUCLEAR |
| References | |
| NUDOCS 8111110320 | |
| Download: ML17297B015 (28) | |
Text
OCT 3 8
>gg~
Docket Nos.:
50-528/529/530 I
Nr. E.
E. Van Brunt, Jr.
Vice President - Nuclear Projects Arizona Public Service Company P. 0.
Box 21666 Phoenix, Arizona 85036
Dear Hr. Van Brunt:
DI'ST(I'BUTTON Docket Pi=le 50-528tl'529/530 LPDR PDR NSEC TERA LB¹3 Files FJNiraglia RLTedesco JDKerrjgan Subject Control Room Design Review/Audit Report, Palo Verde Nuclear Generating Station The enclosed report was prepared bn the basis of a review of your Preliminary Design Assessment (PDA) of the PVNGS control rooms and the design review information provided by the Human Factors Engineering Branch team and consultants that conducted the PVNgS control room design review/audit during the week of September 14, 1981.
The team members ihcluded D. Tondi, R. Ramirez, and A. Ramey-Smith of the NRC, and our consultants from Lawrence Livermore National Laboratory and BioTechnology, Inc.
You are requested to submit a proposal to correct deficiencies ide~tified in the enclosed report and a proposed schedulh9.for implementation 'of corrective actions.
If you have any questions on this matter, please contact us.
Origi~1 sig
'ir88>i~+
cc:
See next page.
Frank J. Niraglia, Chief Licensing Branch No.
3 Division of Licensing 8111110320 811028 PDR ADOCK 05000528 A
PDR 0FF1CED SURNAME/
0ATSP D :LB
/81 DL:
1 ~ ~ ~ ~ ~ ~
1 la 1
/81 NRC FORM 318 RO/8 1NRCM 0240 OFFICIAL RECORD COPY
- USGP0; 'l98~29.824
Mr. E.
E.
Van Brunt, Jr.
Vice President - Nuclear Projects Arizona Public Service Company P. 0.
Box 21666 Phoenix, Arizona 85036 PALO VERDE CC:
Arthur C. Gehr, Esq.
Snell 8 Wilmer 3100 Valley Center
- Phoenix, Arizona 85073 Charles S. Pierson Assistant Attorney General 200 State Capitol 1700 West Washington Phoenix, Arizona 85007 Charles R. Kocher, Esq., Assistant Counsel James A. Beoletto, Esq.
Southern California Edison-Company P. 0. Box 800
- Rosemead, California 91770 Margaret Walker Deputy Director of Energy Programs Economic Planning and Development Office 1700 West Washington Phoenix, Arizona 85007 Mr. Rand L. Greenfield Assistant Attorney General Bataan Memorial Building Santa Fe, New Mexico 87503 Resident Inspector Palo Verde/NPS U.S. Nuclear Regulatory Commission P. 0.
Box 21324 Phoenix, Arizona 85001
~ 's. Patricia Lee Hourihan 6413 S. 26th Street
- Phoenix, Arizona 85040
HUMAN FACTORS ENGINEERING CONTROL ROOM DESIGN REVIBI/AUDIT REPORT PALO VERDE NUCLEAR GENERATING STATION ARIZONA PUBLIC SERVICE COMPANY Introduction A human factors engineering design review of the Palo Verde control room simulator was performed at the site on September 15 through September 17, 1981.
The report was prepared on the basis of the HFEB's audit of the applicant's Preliminary Design Assessment and the human factors engineering design review performed at the site.
This design'review was carried out by a
team from the Human Factors Engineering Branch, Division of Human Factors Safety.
The review team was assisted by human factors consultants from BioTechnology, Inc. (Falls Church, Virginia) and from Lawrence Livermore National Laboratory (University of California), Livermore, California.
Observed human factors design discrepancies were given a priority rating of I,
2 or 3 (high, mode~ate or low), based on the increased potential for operator error and the possible consequences of that error.
Pr iority rating 1 and 2 discrepancies should be corrected prior to issuance of an operating license.
Priority rating 3 discrepancies should be evaluated and proposed actions reported as part of the long-term design review in accordance with the guidance provided in NUREG-0700.
Note that some priority 3 ratings include a superscript 1 (i.e., 3~).
Since priority 3~ discrepancies involve simple corrective actions relative to the potential for improving operator performance, they should be corrected prior to issuance of an operating license.
r The following sections are numbered to conform to the guidelines of NUREG-0700 and suomarize the team's observations of the control room design and layout and of the control room operators'nterface with the control room environment.
A list of the human factors strengths observed in the Palo Verde control room simulator is given at the end of the nine major sections of this report.
This list includes those features that the review team felt enhanced the operator interface with the contro'l room simulator.
- Finally, a list of those items that could not be evaluated is presented.
The condition of construction or installation of these items at the time of the site visit was not sufficiently finalized to permit review.
It is expected that the plant control rooms will be made to exactly match the simulator and that the licensee's commitments to correct discrepancies included in this report will apply to both.
HUMAN FACTORS ENGINEERING CONTROL ROOM DESIGN REVIEW/AUDIT REPORT PALO VERDE NUCLEAR GENERATING STATION ARIZONA PUBLIC SERVICE COMPANY 1.
CONTROL ROON WORKSPACE PRIORITY RATING FINDING 1*
The control room bookshelves are inadequate.
(056C) 2*
Glare is a problem for most displays on all of the panels.
It is worst on the "C" surfaces, depending on viewing angle.
(See Fig. l on page 3 for the meaning of "A","B","C, and "D" surfaces.)
(049C)
(064C)
(1008)
(1018)
(103C) 3*
Glare on CMC switch surfaces hinders "light-on" determination.
This is more apparent on the "C" surfaces.
A matte surface might not be as effective a solution as brighter lights.
Example:
(Panel B02) a.)
ESF SWGRA/EQPT Room switch (098C) 4*
The concrete control room floor is not carpeted, which will lead to earlier fatigue during long periods of standing by the operators.
(0688)
Discrepancy also noted in Arizona Public Service Palo Verde Nuclear Generating Station Control Room Human Factors Study.
The numbers in parentheses at the ends of these discrepencies are the ID's from the APS study.
PALO VERDE 0
FIG. l.
!dentification of control board surfaces.
2.
COMMUNICATIONS PRIORITY RATING FINOING 1
1'.
Instructions are not provided for the use of the communication systems.
Procedures have not been established for handling incoming communications at night or during emergencies.
The switching mechanism for the conventionally powered telephone system is 'not programmed to give the control room automatic prior ity access to the switching system.
The short telephone cords prevent total panel coverage by the operators.
The problem is particularly acute on the CVCS and Condensate System pane'ls'.
(067B)
No address labels and/or index are supplied for sound-powered phone jacks in the control room.
EMI noise susceptibility tests have not been conducted to demonstrate that low-level analog o'r digital equipment is not affected by the frequency bands used by walkie-talkies.
Procedures have not been developed to provide unambiguous identification of the person speaking on the walkie-talkie when there are two or more parties on a channel operating at separate locations.
3.'NNUNCIATOR WARNING SY TEMS PRIORITY RATING FINO ING 1
1*
The Annunciator System has several discrepancies.
(118A) 3,2 Some alarms require the operator to direct an auxiliary operator to a given plant location to obtain specific informati on.
Example:
(Panel 807) a.)
Rad Waste System Trouble Tile Some annunciators (e.g.,
some systems on Panel 807) have inputs from more than one plant parameter, but an alarm printout capability is not provided to identify the alarm source.
The Turbine Generator System First-Out annunciator panel on Panel 804 should be located with the turbine/generator controls on Panel 806.
31 31 5
The Turbine Generator System First-Out annunciators on Panel 804 have tiles with small print font.
6 The nature of the annunciator auditory signals could, in some
- cases, cause irritation or a startled reaction.
7 A logical alarm prioritization has not been applied to allow operators to differentiate the most serious alarms from less important ones.
31 8
Auditory signals do not enable the operator to identify the work station location or system associated with the alarm.
9 More than 5 separate frequencies have been used for audible signal coding.
The present use of eleven unique frequencies is excessive.
10*
The Condensate Low Vacuum alarm should be located on Panel 807 and not on Panel 805.
(0958) 11*
The Plant Monitoring System Trouble alarm should be located on Panel 804 and not on Panel 801.
(094C) 12*
There are no Main Generator Trip alarms near the associated controls on Panel 806.
(0458) 13 Annunciator panels are not identified by labels above the panels.
14 No procedure exists to ensure that a legend tile is replaced in the correct location after it has been removed for lamp replacement.
3.'NNUNCIATOR WARNING SY EHS PRIORITY RATING RINGING 31 16 18 Reaching annunciators to replace lamps poses a safety problem.
(004A)
Annunciator tiles do not illuminate and burn steadily in case of a flasher failure.
The vertical and horizontal axes of annunciator panels are not labeled with alphanumerics for easy coordinate designation of a particular visual tile.
The number of alarm tiles exceeds the suggested limit of 50 tiles per matrix.
31 31 31 31 31 19 20 2]*
22*
25*
26*
Cues for prompt identification of an out of service annunciator are not provided.
- Rather, periodic testing is required to determine whether an annunciator is out of service.
The "Seal Oil/H2 Diff Press Lo" tile on Panel 806 should be reworded to 1ndicate whether the turbine or the generator is being referred to.
Inconsistent terminology exists between alarms and controls for Generator Seal Oil on Panel 806.
(091C)
Inconsistent abbreviations are used on alarm legends.
Examp1 e:
(Panel 806) a.)
COND vs.
CNDS (09OC)
Inconsistent alarm legends exist for Linear Power Density on Panel 805.
(085C)
On Panel 804, the annunciator legend is incorrect for T-AVG and T-REF temperature deviation and for RC SYS TRBL.
(081A)
Inconsistent terminology exists between Hp Train alarms and associated control labels on Panel 802.
(073C)
On Panel 806, inconsistent terminology exists on the atarm window for Header Pressure, (i.e., the word "system" in "Condensate Pump Hdr Press Syst Trouble" should be deleted.)
(047C) 3 27 Some alarms on Panel 807 refer the operator to other, more detailed annunciator panels located outside the primary operating area.
Exampl e:
a.)
Rad Waste and Fuel Pool.
'I
3.'NNUNCIATOR WARNING SY MS PRIORITY RATING FINDING 28 29 Some tile legends do not address specific conditions.
For
- example, one alarm is used for Hi-Low and Temperature-Pressure.
I Administrative procedures do not exist which require and control the periodic testing of annunciators.
31 30 Annunicator response controls have not been coded for easy recognition.
4.
CONTROLS PRIORITY RATING FINDING 31 31 The manual activation circuitry for the Panel 805.ESFAS system is based on selected two out of four logic which is different from the auto ESFAS which operates on ~an two out of four logic.
When GE switch handles are allowed to spring back from "Stop," the position indicator flag may go to "red" instead of staying on "green."
Example:
(Panel 806) a.) Switch FWPT A Turning Gear R01A There is a problem distinguishing among the five types of Foxboro controllers and displays.
(105C)
On Panel 805, the Manual Reactor Trip controls lack protection covers.
(086A)
On Panels
- 803, 804;
- 806, and 807, several controls are too close to the panel
- edge, increassng the likelihood of accidental activation.
(025A)
The protection covers on some of the setpoint reset controls on Panel 805 can be left open.
There is an inconsistent use of black and amber bezel color coding on CMC switches.
Examples:
(Panel B03) a.) Reactor Drain Tank Outlet Isolation Valve b.) Makeup Supply to Reactor Drain Tank Valve 31 31 31
]p*
11*
The red/green color coding of the Generator Field Excitation pushbuttons is reversed on Panel 806.
(0358)
It is possible to interchange legend screens on pushbutton legend controls if more than one is removed at a time.
Example:
(Panel 807) a.) Cooling Tower Fan Control panel (050C)
The Panel 803 keyswitch for Letdown Control Valve Bypass (CHN-H5-526) requires keyteeth pointing up, which violates the control room convention.
(0598)
On Panel 802,.there is too strong a resistance for keyswitches requiring activation for long periods.
These keys have small key heads, aggravating the situation.
(113C)
4.'ONTROLS PRIORITY RATING FINOING 31 13*
14 Some CMC switch position indicators point between switch positions.
Example:
(Panel 803) a.) Pre-Holdup Iox Inlet Bypass Selector, Control position is not visible during use of'he Nuclear Cooling Water HX control on Panel B07.
The pointer on the knob will be covered by the operator's hand.
- Also, position indications are obscured by the knob.
There is an excessive use of keylock switches in the control room.
5.'I SP LAYS PRIORITY RATING FINDING There is no valve position indication for the Demineralizer Oifferentia'l Pressure Control Bypass Valve on Panel 805.
(031C)
On Panel 805, channels A, 8, C and 0 have Calculator Select controls for CEAC.
However, this capability exists only on channels 8 and C.
10*
12*
On Panel 805, operators have been given the ability to calibrate the "actual" power level indicator using a
hei ipot control which appears on the benchboard.
The "actual" level appears on the same Foxboro display as the "sensed" power level, which varies with time, Inadvertent use of the control can cause false power level readings if the calibration is changed.
The loss of one of the two signal trains causes the status of 2 loops to be indeterminant in the High Pressure Safety Injection Flow indication on Panel 802.
(077A)
On Panel 806, there is inadequate Steam Generator Level indication during manual, auxiliary and main feedwater control.
(089A)
Foxboro recorders do not provide good resolution over a
short time ~ange because of a slow recording speed.
(1068)
There is no overload indication on the ameters for large pumps.
(075C)
On Panel 805, there is inadequate indication of safety system status (i.e.,
- SEAS, NSES, CIAS, etc.).
(029A)
There is a need for a wide-range pressure and level indication near the pressurizer controls on Panel 803.
(0178)
The large size of the Power Factor meters found on Panel 806, is not consistent with their importance.
(092C)
There is an unnecessary, redundant indication for the Refueling Mater Tank Level (CHN-LI-700) on Panel 803.
There is a lack of intermediate valve position indication for jog-open valves on Panel 806.
Valve position is known only when valve is fully open or fully closed.
(108A)
- 5. 'ISPLAYS PRIORITY RATING FINOING 1
13+
A large number of Foxboro meters and recorders have a
0 - 100 {i.e., X) scale instead of an engineering unit scale.
Example:
(Panel 805) a.)
The SG level indicators are scaled 0 - 100% for both the narrow and wide range.
(0838)(111C)
The plastic faces of the Foxboro displays seem to scratch and become obscured easily.
They also produce excessive glare.
31 31 15 16 17*
19 20 The blue switch position indicator lights, on CMC switches, are not clearly visible in the ambient control room light.
Example:
(Panel 807) a.) Containment Purge Mode Selector Some Foxboro display scales incorporate leading decimals which are difficult to notice, leading to possible misreading of the scale numerals.
On all Foxboro displays in the control room, the engineering units of parameters being measured are not given.
(007A)
On many displays, e.g., the small anmeter
- displays, the graduation size is too small and the scale labeling is hard to read.
Foxboro meters having major, intermediate, and minor graduations do not differentiate intermediate and minor by using different index lengths.
- Instead, index mark thickness is used, and is difficult to discriminate.
There is a poor scale progression on some meters.
Exampl es:
a.)
LOOP 1A T-HOT / LOOP 2A T-HOT b.)
LOOP 1A T-COLD / LOOP 2A T-COLD 21 22 Foxboro display scale units are sometimes inconsistent in their use of decimal points.
For example, some have
- 100, 200, etc. while others use.1K,
.2K etc.
Example:
{Panel 806) a.)
AFM PUMP 8 DISCH PRESS Red/green coloring is used to denote open/closed, following the industry convention.
However, red/green are also used for other coding besides valve and breaker positions.
5.'ISPLAYS PRIORITY RATING FINDING 31 31 25 The Core Protection Calculator indicator lights on Panel B05 have incorrect color coding.
(116C)
The Plant Protection System relay status lights on Panel B05 are incorrectly colored.
(0878)
Foxboro displays have a parallax problem, especially those located on the lower part of the benchboard.
31 26 27*
28*
29*
30*
31*
32*
33*
34*
35 Zone markings have not been used on meters to show the operational implications of various readings (e.g.
"Danger Range" ).
The scales in the Foxboro displays are loosely fitted, allowing incorrect positioning.
(102C)
There is a lack of lamp redundancy in the CHC switches.
(002C)
There is a lack of lamp redundancy on the Generex panel on Panel 806.
(032C)
There is little distinction between lamp failure and status change of CNC switches.
There are possible conditions when no l>ght will be on, or when more than one should be on.
(001C)
There is no lamp test capability on CMC switches.
(003C)
Lamp removal must be done from the back of the Generex panel on Panel B06.
(033C)
Green light intensity is used to distinguish faulted from normal status on the Electric Bus Panel on Panel 801.
However, the two intensities are not discernible unless one witnesses the change in intensity as it happens.
(072C)
The Plant Protection System controls on Panel B05 are illuminated when they are in the OFF position, in violation of the convention used throughout the control room.
(088B)
On Panel B04, the control rod full insertion indicator array uses a 'light off'ondition to signal failure to fully insert.
An unlit indicator could be difficult to find among a field of lit tiles during a reactor scram.
However, this approach proves to be satisfactory during a
dropped rod situation.
In this case, all tiles are unlit, except that for the dropped rod, which is lit.
5.'ISPLAYS PRIORITY RATING RINGING 2
36+
37 38 There is a general problem which allows legend screens for both indicator lights and backlit switches to be interchanged.
Examples:
t
-a.)
Electric Bus Panel on'Panel 801 b.)
SESS Panel on Pane1 802 c.)
CEDM Panel on Panel 804 d.
Reactor Power Cutback System on Panel 804.
e.
EHC Control Panel MTIB-A-09 (005C);{014C);(021C);{063C)
The Plant Protection System relay status lights are illuminated to indicate availability.
A given light goes out when the related Plant Protection System is not available.
The low light intensity of some indicators makes them difficult to read.
31 39*
40*
There is a lack of distinction between legend lights and backlit switches.
Example:
EHC Control Panel MTN-A-09 (063C)
Typing-over of data occurs on the multipoint trend recorders on Panel 07.
(051C)
PRIORITY RATING FINDING 31 31 31 31 31 31 31 31 31 31 31 31 31 6*
7 10 11*
13 The logic for selecting the correct pairs of the manual reactor trip controls on Panel 805 is not clearly indicated on the board.
(030A) t Thei e are missing labels on the Electric Bus mimic on Panel 801.
(0118)
There are missing labels on the controls for the CR ESSENTIAL AHU FAN DAMPERS on Panel 802.
(015A)
Labels are either missing or non-descriptive on the FM E
SR Systems Board on Panel 806.
(0408)
There are missing labels on the Main Steaming Rate switches on Panel 806.
(0468)
There are missing labels on the RAS ACTIVATION controls on Panel 805.
(084A)
There are no labels on the pushbuttons on Panel 806.
There are no labels on the indicator lights on Panel 807.
On Panel 805, the SG Flow indicator is not labeled.
None of the panels/consoles in the main control room use a
heirarchical labeling scheme.
All labeling is at individual component level, except for subpanels for some systems (e.g.,
SESS; Plant Protection System; etc.)
The label locations for the four DNBR/LPD calculators on Panel 805 are not consistent.
Trains A and 8 are labeled below while trains C and D are labeled above.
(082C)
Some component labels are not placed above or in the best proximity to the equipment they identify.
In general, display labels appear below the displays, while control labels are above.
A temporary label has been taped to the panel to explain the control positions for the Nuclear Cooling Mater HX which appears on Panel 807.
On the vertical panels, the Foxboro displays obscure their own 1 abel ing.
(104A)
There is an incorrect label on the'Reactor Coolant Pump 18 control.
(023C) 6:
LABELS AND LOCATION AI S
PRIORITY RATING F INDING 31 31 31 31 31 31 31 16.
]7*
]B*
20
'21 22 23 24*
25 26 27*
There is inadequate labeling on the LOOP 1A T-HOT / LOOP 2A T-HOT indicator on Panel B06. It currently reads:
Ambiguous labeling appears on all dual-indicator Foxboro
'isplays.
Displays have side-by-side vertical scales, whi1e the labels are placed one above the other.
Plant convention is, the upper label refers to the left hand scale while the lower label refers to the right hand seal e.
(104A)
There is an incorrect label on the Diesel Generator start-stop switch Panel B01.
(0718)
Incorrect labeling is used for the alarm acknowledge button on the Radiation Monitor Terminal.
(109C)
On Panel B06, the MSIV control labels are insufficiently descriptive.
On Panel 806, trend recorders are not labeled as being designatable.
Redundant but incomplete labeling is used on the Manual Reactor Trip controls on Panel 805.
There are two "trip" labels on, each, and nowhere is the trip channel specifically stated.
On Panel B04, labels for Reactor Coolant Pump seal pressure and temperature are inconsistent and do not provide adequate information.
They do not indicate "pressure" and "temperature" as applicable, and whether they are inlet or outlet sampling points.
On Panel B02, the SESS Panel and related board items have inconsistent labeling.
(076A)
Poor labeling is used on the LP Heater Train controls, i.e.,
TRAIN-OUTLET v.s.
TRAIN INLET.
Annunciator tiles for SG Differential Pressure do not accurately describe the significant condition.
"SGl> SG2" should read "SG2< SG1", since the low differential pressure of SG2 is the condition of importance.
Additionally, the benchboard label "HI SG-1d P" does not describe the same differential condition as the annunciator tiles.
There are more than 3 lines of text on several switch and indicator legends.
(114C) t 6.
LABELS AND LOCATION AIDS PRIORITY RATING FINDING 2S.
Inconsistent abbr eviations are used in some locations.
Examples:
(Panel BOS)
. a.)
COND = Condenser COND = CondensaTe I
b.)
COND POLISHING DEMIN OUTLT VLV
~ON ENSATE POLISHING DEMIN INLT VLV ASHEN A POLISHING DEMIN DIFF PRESS CONT 29 There is a general problem with the selection and usage of abbreviations in the labeling throughout the control room.
Abbreviations are not consistently applied and are sometimes not clear in their meaning.
Example:
a.)
The use of COND for Condenser and CNDS for Condensate.
These choices do not uniquely identify the names involved.
31 31 31 31 31 31 31 30 There are inconsistent abbreviations on the component label and the switch legend for the Pre-Holdup Iox Inlet Bypass Selector on Panel B03.
31 The Audio Range Selector on Panel 804 has no position labeling to indicate the multiplication factor being chosen.
32 The position labeling on some keyswitches is misleading.
Examples:
a.)
The position label "LOCKED NORMAL" refers to the normal position of the
~ke and has no meaning with respect to the equipment being controlled.
b.)
When key is in "I OCKED" position, operator does not know whether it is locked open or locked closed.
33 Most ESFAS rotary controls are jog-type while some (AFAS-1, AFAS-2) have two discrete positsons.
This distinctson is not apparent from the control appearance.
34 Manual ESFAS switches have no position indications or direction of movement indicators.
"35 The procedure for labeling'the designatable trend recorder is to handwrite the current designation on an adjoining metal plate with a grease pen.
This is not very legible.
36*
There is an illegible label for the CWP/Bypass switch on Panel B04.
(066A) 37*
Label color is incorrect for the "HOT LEG INJECTION B FLOW" on Panel 802.
(074A) l 6.
LABELS AND LOCATION AIDS PRIORITY RATING FINDING 31 31 31 31 31 31 38".
On Panel 803, the mimic line to the charging pumps used during loss of power is missing from the CVCS mimic.
(079A) 39*
There is a lack of demarcation of all major systems on most of the panels.
(112A) 40*
Ineffectual multi-colored strips appear on some boards.
(052A) 41 There is a general inconsistency in the use of color coding in the control room.
Examples:
a.)
Mimic colors are not consistently
- applied, and sometimes use the same colors as in the train/channel color coding on the same panel.
b.)
The use of both blue and white as an override indication on some valve controls.
42*
On Panel 803, there is no clear mimic indication where the flow to and from the reactor occurs.
Basically, there is a
need for a clear mimic terminator.
(020C) 43*
There are missing mimic lines on the Electric Bus mimic on Panel 801.
(115C) 44 The Electric Bus mimic on Panel 801 does not identify Units 2 5 3 on buses S05 and S06.
45 Directional arrows are missing from some mimics.
(The absence of arrows from the Electric Bus mimic is acceptable.)
46 Motor Operated Disconnect (MOD) switch controls on Panel 801 are too far away from the associated MOD on the mimic.
31 47 On Panel 801, the Circuit Breaker control switch is not labeled to identify the breaker, and is located in the mimic as though it is part of the white-bus when it is not.
48 There are several b~eakers on Panel 801 which are not incorporated into a mimic.
7.
PROCESS COMPUTERS 0
PRIORITY RATING FINDING 3
l The computer system does not contain a sequential file of operator entries which are available upon operator request.
2 On Panel 805, the numeric-only key configuration is not the same in all cases.
For example, the Core Protection Calculator keyboard is calculator style and the Core Monitoring Computer keyboard is telephone style.
3 3
Conmunication Console (I-J-SgN-RR75) control room keyboards contain keys which are not used by operators.
(It may be that the keyboard is not used at all.)
4 The Radiation Monitoring Printer multiple-mode keyboard utilizes the same keys for both alphanumerics and functions by using "shift" keys.
5 Computer system operating procedures and contingency procedures have not been developed.
6 Data point addresses are not cross-indexed by program
- name, system/subsystem, and functional group.
7*
There is glare on the CRT screers.
(053C)
(065C) 8 Disturbing flicker is evident on the CRT on Panel B01.
9 CRT fonts use variable stroke widths such that the vertical strokes of the characters are narrower than the horizontal strokes.
10*
There are missing labels in the CRT data displays.
(054C) 11*
Label highlighting is lacking in the CRT data displays.
(055C) 12 Error messages on the CRT displays do not contain instructions to the operator regarding required corrective action.
13 When the process computer system requires the operator to
- standby, periodic feedback is not provided to the operator to indicate normal system operation and the reason for the delay.
14 Color use on the CRT is not consistent with other color coding in the control room.
15 Color coding used on CRT displays does not conform to guidelines.
-1S-
7.
PROCESS COMPUTERS PRIORITY RATING FINDING 2
16.
Printers do not have a printing capability of at least 300 lines per minute.
17 Printed material does not have an adequate contrast ratio due'o the ribbon condition.
18 The operator has no capability to request printouts by alarm group (e.g.,
- system, subsystem, component).
8.
PANEL LAYOUT PRIORITY RATING RINGING On Panel 804, the Reactor Coolant Pump 1A control is in close proximity to the Backup Heater Bank A31 - A36.
Handles are similar in shape, leading to a potential operator error and reactor trip.
'(0968)
On Panel 805, the layout sequence of the Reactor Protection Pretrip/Trip indicators is poor.
Related indicators are not grouped together.
Examples:
a.)
Reactor Power b.
Pressurizer Pressure c.
Steam Generator Level 31 12*
There is an inconsistent mode select sequence for the MSR switches on Panel 806.
(093C)
On Panel 806 the SG1 and SG2 wide range steam generator level indicators are not consistently located with respect to the narrow range indicators.
There is a lack of symmetry between the RPS control switches and the corresponding status lights on the lower benchboard on Panel 805.
On Panel 804, the Reactor Coolant Pump 2A (28)
DP displays are separated by the Core 2A DP display.
Mirror imaging is used in the layout of related controls for Condensate Pumps A,B 5 C as well as for the Condenser controls/displays on Panel 805.
Panel 806 has a hybr id component layout with mixed mirror image and replicated controls and displays.
The layout of the SESS Panel does not conform with the layout of Panel 802.
(078C)
Some differences exist between the designs of the simulator and the Unit 1 control room.
(See page 27, item 1)
Key tags for keyswitches obscure near by labels and other controls/displays.
There is possible interference among the controls on the benchboard of Panel 807 due to their closeness at the intersection of surfaces "C" and "D."
(097C)
The Panel 804 there is inadequate functional grouping of the Rod Motion Control indicator lights.
- 9. 'ONTROL-DISPLAY INTEGR ION PRIORITY RATING FINDING 1
About 16 annunciator tiles located on Panel
- 801, belong on the Panel 806 board section where they will be used to signal corrective action to be controlled from Panel 806.
Example:
a.)
Main Generator V/Hz b.
Main Generator Excitation, c.
Under Frequency Negative Sequence Pretrip 2
On Panel 804, the five automatic reactor regulation control rod motion demand indic~aors can be lit in conflict with a
manual mode of oper ation that the operator has selected.
3 Trip indicators for High Log-Power and Low Pzr Press should be located in closer proximity to the High Log-Power Bypass and Low Pzr Press Bypass controls.
4 In most instances on 804, each of 4 pumps has a separate set of Foxboro meters.
- However, on the RCP inlet and
- outlet, comnon temperature meters are used,
- wherein, the left bar of the meter is for pump 1A and the right bar of the same meter is for pump 18.
The same is true for 2A and 28.
5*
On Panel 801, the Diesel Generator Synchroscopes are more than nine feet from the circuit breaker controls.
(0708) 6 On Panel 801, the Incoming Voltmeters associated with the Diesel Generators are located too far from the circuit breaker controls.
1.
The mobile procedure cart with procedures attached is a good way to make procedures conveniently available.
2.
3.
The
!diamond" orientation of the control switches in the CVCS mimic enhances the operator's understanding of the functions being execut'ed.
1 The angled CRT mounting enhances display visibilityfor the operators.
4.
The low height of the CRT cabinets on the sit down console provides easy viewing of other control board sections.
5.
The 5 degree slope on control board surface "B" enhances the useability of the controls and displays.
6.
The turn-to-start / push-to-stop feature of some valve motion controls frees the operator to perform other functions as compared to controls that require turn-and-hold-to-activate.
7.
Generally, the layout and grouping of systems, subsystems and components is clean and uncluttered.
8.
There are few instances of long, unbroken rows of similar displays.
9.
The number of alarm windows is not excessive.
10.
A zero reading is clearly differentiated from a failed-meter status on Foxboro displays.
11.
Himics have been used to enhance the operators'nderstanding of systems.
12.
Equipment labels are generally legible.
13.
First-out annunciator panels for reactor trip and turbine trip will identify the initiating events for the operators.
14.
Safety systems status is indicated by the SESS Panel.
The following items were unavailable for review in whole or in part:
I.
A detailed comparison of the simulator with the'Unit 1 control room could not be performed to identify all differences that might exist.
o Document organization and stor age o
Spare par ts, operating expendables and tools o
Supervisor access o
Non-essenti al personnel access 3.
Emer enc E ui ment o
Operator protective equipment o
Fire, radiation and rescue equipment o
Emergency equipment storage 4.
Environment o
Temperature and humidity o
Ventilation o
Emergency liqhting o
Auditory environment o
Personal storage o
Ambience and comfort 5.
The absence of documents made it impossible to evaluate consistency of procedure terminology with labels,
- displays, abbreviations, or document indexing and cross-referencing.
6.
Due to the existing state of the system, it was not possible to adequately evaluate the CRT displays for content and data presentation format.
7.
Lack of actual emergency gear prevented the evaluation of the operation of controls while wearing or using the emergency
- gear, or the availability of face masks with diaphragms capable of transmitting speech.
8.
The actual discernability and reliability of audio signals above ambient noise could not be measured.
9.
The capability of complete internal and external comnunications during emergencies (i.e., paging at the remote shutdown panel and/or direct cormunication with back panels, shift supervisor's office, etc.)
could not be evaluated.
t t
10.
Since only Panel 806 had color-shaded background panel sections, it was not possible to evaluate the effectiveness of the use of shading colors to identify groups of functionally related controls and displays throughout the control room.
ll.
The proposed Plant Protection System logic alarm box on Panel 805 could not be evaluated because it is not yet installed.
12.
It was not possible to evaluate the out-of-service and temporary labeling systems because they had not been developed.
13.
It was not possible to evaluate the following instrumentation systems because they were not available:
a.)
In-core thermocouple instrumentation displays b.)
Sub-Cooling monitor instrumentation displays OCLETIONS MAGE BY HFEB AUO TEAM FROM THE APS PRELIMINARY IGN ASSESSMENT Listed below are the deleted discrepancies, followed by the reason for deletion.
BED NQ.
0 ISCREPANCY OSOA Labels on CVCS charging pumps on Panel 803 impIy incorrect operation.
Reason for deletion:
The labels are correct for the present configuration.
122A The CMC switches used for'og-valve control have uncomf ortabl e knobs.
Reason for deletion:
There is no need to hold knobs longer than 20 seconds.
060B NORMAL position labels are missing on all jog keyswitches.
Reason for deletion:
The NORMAL label has no meaning for the center position for the jog keyswitches and is misleading.
013C There are sharp edges on bookstops on Panels B02 and B07.
Reason for deletion:
No discrepancy found.
058C There is a lack of operator understanding of the control board design.
Reason for deIetion:
Training considerations are outside the scope of the HFEB review.
069C On Panel B02, there is glare on the SESS Panel which hinders a light-on,determination.
Reason for deletion:
The lights are easily appar ent when lit.
117C The Generator Ground Voltmeter is poorly located.
Reason for deletion:
This voltmeter has been moved.
The following HFEB audit team finding relates to procedures and operator training. It will be referred to the Procedures and Test Review Branch for further consideration:
On Panel B05, operator fatigue/error, leading to inadvertent rea'ctor trip, may result frcm the procedure for reducing the LO PZR PRESS and LO SG PRESS setpoints during shutdown.
The procedure must be repeated several times and for each of the 4
channels on the Reactor Protection System.