ML18094A564
| ML18094A564 | |
| Person / Time | |
|---|---|
| Site: | Salem  |
| Issue date: | 07/10/1989 |
| From: | Labruna S Public Service Enterprise Group |
| To: | NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| References | |
| RTR-NUREG-0737, RTR-NUREG-1342, RTR-NUREG-737 GL-89-06, GL-89-6, NLR-N89132, NUDOCS 8907170225 | |
| Download: ML18094A564 (22) | |
Text
Public Service Electric and Gas Company Stanley LaBruna Public Service Electric and Gas Company P.O. Box 236, Hancocks Bridge, NJ 08038 609-339-4800 Vice President - Nuclear Operations July 10, 1989 NLR-N89132 United States Nuclear Regulatory Commission Document Control Desk Washington, DC 20555 Gentlemen:
\\
RESPONSE TO GENERIC LETTER 89-06 SAFETY PARAMETERS DISPLAY SYSTEM DOCKET NOS. 50-272 AND 50-311 SALEM GENERATING STATIONS UNIT NOS. 1 AND 2 Pursuant to the requirements of Generic Letter 89-06, PSE&G has evaluated the Salem Safety Parameters Display System (SPDS) against the requirements of NUREG 0737, Supplement 1.
PSE&G has determined that the Salem SPDS does not fully meet the requirements of NUREG 0737.
The discrepancies identified were discussed with the NRC Licensing Project Manager, Mr. J. Stone, during a telecon held May 10, 1989.
In March 1989, prior to the issuance of Generic Letter 89-06, Public Service Electric and Gas (PSE&G) initiated a self-assessment program to review the implementation status of the Salem SPDS.
An action plan was subsequently developed to address all self-identified discrepancies resulting from the program.
The results of the program have been reflected in to this letter.
The target completion date for resolution, implementation, and verification of all action plan items is March 31, 1990.
At that time, the Salem SPDS will be in full compliance with the requirements of NUREG 0737, Supplement
- 1. to this letter, although not required, provides the completed checklist for the Salem SPDS. to identifies additional parameters used to depict the five safety functions of Section 2.2 of the checklist. to Enclosure 1 represents clarifications to several items included in the checklist where it was felt that the checklist did not allow an accurate description of the Salem SPDS.
(---,e=,,=71=)=7'"1=7---0~.:;:.~*
25 :39071 o PDR ADOCK 05000272 P
PDC lloo3
Document Control Desk NLR-N89132 2
7-10-89 Should you have any questions, please feel free to contact us.
c Mr. J. c. Stone Licensing Project Manager Ms. K. Halvey Gibson Senior Resident Inspector Sincerely, Mr. w. T. Russell, Administrator Region I Mr. Kent Tosch, Chief New Jersey Department of Environmental Protection Division of Environmental Quality Bureau of Nuclear Engineering CN 415 Trenton, NJ 08625
REF:
NLR-N89132 Generic Letter 89-06 STATE OF NEW JERSEY SS.
COUNTY OF SALEM S. LaBruna, being* duly sworn according to law deposes and says:
I am Vice President - Nuclear Operations of Public Service Electric and Gas Company, and as such, I find the matters set forth in our letter dated July 10, 1989
, concerning the Salem Generating Station, Unit Nos. 1 and 2, are true to the best of my knowledge, information and belief.
Subscribed and Sworn
~.d..
E day of t{J~Lre me
---rr---' 1989 Jersey IARAINE Y. BEARD Notary P1.!bl,ic of New Jersey My c;;ommission Expires May 1, 1991 My Commission expires on
ENCLOSURE 1 SPDS CHECKLIST This checklist is intended to aid licensees in determining the status of their SPDS.
Bracketed, [ ], information refers to the section in NUREG-1342 where discussions on the specific question(sJ may be found.
1.0 GENERAL DESCRIPTION 1.1 Plant Name:
Salem Gen. Station 1 & 2 1.2 Who/What organization developed the original version of the SPDS software implemented at your site?
Utility (in-house)
_Utility Owner's Group; which?------------
Contractor; which? EAI/NOVA Technologies Other; who?
~--------------------~
Page l of 19
ENCLOSURE 1 1.3 If the SPDS software has undergone significant modification (i.e., more than 25 percent of software replaced or modified) since original implementation, list the organization performing the modification:
_Utility (in-house)
_Utility Owner's Group------------
N/A See Attachment 2 Contractor ----------------------
Other -----------------------
1.4 What is the hardware host on which the current SPDS software is implemented?
Westinghouse P250 Westinghouse P250U
-2:_ Gou l d/SEL, Model Numb er __
3_2_;_s_1_s_o ___ s_e __
e_A_t_t_a_c_h_m_e_n_t __ 2 _
Digital (DEC), Model Number-------------
IBM, Model Number --------------------------
MODCOMP, Model Number----------------
Babcock & Wilcox (Recall)
Honeywe 11, Mode 1 Number -------------------------
_Burroughs, Model Number-----------------
Other: Manufacturer, Model -----------------
Page 2 of 19
ENCLOSURE l 1.~ How many total CPUs are accessible by SPDS software on the computer system described in the previous question?
two (See Attachment 2) 1.6 What is the approximate MIPS rating of all the CPUs counted above?
g MIPS NOTE: Use a decimal fraction if less than 1.0 See Attachment 2.
If SPDS does not run*on a single computer system, provide the following infonnation for the minority parameter set provided by a second computer system.
For example, a frequent occurrence of this case is where a separate but adjacent computer terminal provides radiological parameters.
1.9 List parameters provided:
N A
~
....... ~~~~~~~~~~~~~~
(on the second system) 1.10 Are significant changes in hardware or software planned in the ne~t two years? ~YES ~NO.
If YES, briefly describe planned changes and list a schedule of major milestones.
Page 3 of 19
- ~,.
ENCLOSURE 1 2.0 PARAMETER SELECTION This section is divided into two parts: the safety functions, and the parameters used to depict each safety function.
2.1 Plant-Specific Safety Functions [III.F.] See Attachment 2.
List the title of the plant-specific safety function(s) displayed on your SPDS that is (are) equivalent to the safety function 1n Supplement 1 to NUREG-0737.
Supplement 1 To NUREG-0737 Safety Functions 2.1.1.
2.1.2 2.1.3.
2.1.4.
2.1.5.
Reactivity Control Core Cooling and Heat Removal RCS Integrity Radioactivity Control Containment Conditions Plant-Specific Safety Functions Shutdown Margin Core cooling Heat sink Thermal Shock Coolant Inyentory Radiation Monitoring Containment Environment Page 4 of 19
". *.. *.*...,~
ENCLOSURE l 2.2 Parameters Selected to Display Each Safety Function The purpose of this section is to specify a list of parameters used to depict eacn of the five safety functfons identifed in Supplement 1 to NUREG-0737.
Lists of parameters that have been found acceptable to NRC through previous SPDS post-implementation reviews have been provided. One list of parameters applies to pressurized water reactors in general, and the other list applies to boiling water reactors.
NOTE:
Check any parameters that have been selected as an SPDS parameter.
List any additional parameters under the relevant 110thers 11 category.
Include additional safety functions and parameters that are a part of your SPDS.
PRESSURIZED WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST [III.F.l]
Supplement 1 To NUREG-0737 Safety Functions 2.2.1 Reactivity Control 2.2.2 Reactor Core Cooling and Heat Removal from the Primary System Parameters Neutron Flux
~
Source Range 2f_ Intermediate Range
_L Power Range 2f_ Other:
(List) See Attachment 1.
X RCS Level
-~
Subcooling Margin Hot Leg Temperature
~
Cold Leg Temperature
~
Core Exit Thermocouples Steam Generator Level Steam Generator Pressure RHR Flow
~
Other:
(L 1st) See Attachment 1 See Attachment 2 Page 5 of 19
-:-c..-
~
2.2.3 RCS Integrity 2.2.4 Radioactivity Control 2.2.5 Containment Conditions 2.2.6 Other Safety Functions ENCLOSURE l X
RCS Pressure
~
Cold Leg Temperature
~
Containment Sump Level L Steam Generator (Pressure, Level, Radiation)
_!_ Other:
(List) See Attachment 1 See Attachment 2
.lL. Stack Monitor X Steamline Radiation (Main Steam)
X Canta inment Radiation (Area & Ef f iuent)
_!_Other: (List) See Attachment 1
~
Containment Pressure
~
Containment Isolation
~
Containment Hydrogen Concentration
.2S_ Other:
(List) See Attachment 1 See Attachment 2.
Yes LNo If yes, list functions and parameters.
Page 6 of l9
~
ENCLOSURE 1 BOILING WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST [III.F.2]
Supplement 1 To NUREG-0737 Safety Functions 2.2.6 Reactivity Control 2.2.7 Reactor Core Cooling and Removal 2.2.8 Pressure Vessel Integrity 2.2.9 Radioactivity Control 2.2.10 Containment Integrity Parameters APRM SRM Other:
(List)
RPV Water Level
~~~~~---~~----
~
Drywell Temperature 0th er : ( L 1 st )
RPV Pressure Other:
(List)
~-----------------
~-----------------
_Main Stack or Offgas (Pretreatment)
Monitor Conta1nment Radiation Monitor Other:
(L 1st)
~-----------------
~
Drywell Pressure
~
Drywell Temperature Suppression Pool Temperature
~
Suppression Pool Level Containment Isolation Valve Status
~
Drywell Hydrogen Concentration Drywell Oxygen Concentration Other: (list)
--~~~~~~~----
Page 7 of 19
ENCLOSURE 1
- 2.2.11 Other Safety Functions Yes No If yes, list functions and parameters.
2.3 Detailed Parameter Questions [III.F.1.e and III.F.2.e]
2.3.1 Are containment isolation demand signals input to SPDS (e.g., PWR -
Phase A/B Isolation Demand Signal or BWR - Group Isolation Demand Signals}?
YES _!. NO 2.3.2 Does the SPDS use actual 'ontainment isolation valve position as an input to monitor successful isolation?
~YES _
NO See Attachment 2.
3.0 DISPLAY OF SAFETY FUNCTIONS [III.F.]
See Attachment 2.
3.1 Does the SPDS provide the status of all five safety functions on one display page?
~YES NO 3.2 Are the individual parameters that support the safety functions grouped by safety function? 2f._ YES _
NO 3.3 Is the status of all five safety functions always displayed on the SPDS? [III.B.2] -1£ YES ~NO 4.0 RELIABLE DISPLAY [III.A.3 except as noted]
4.1 Is the SPDS hosted on the same computer system as the plant process computer? _
YES x NO If NO, does the SPDS computer receive some of the computer point inputs from the process computer? _
YES
~
NO Page 8 of 19
ENCLOSURE l
- 4.2 List location of acces.sible (e.g., keyboards) devices capable of changing SPDS data. [III.A.3.a]
Recorder Panel 3 (RP3)
Operator Desk Computer Room 4.3 Are SPDS hardware availability data documented?
YES X NO IF YES, what is the documented percent availability of the SPDS hardware over the past 12 months?
NOTE:
Availability should be based on power operation, startup, hot standby, and hot shutdown only and not include other plant modes.
See Attachment 2.
% Available 4.4 Are the SPDS surveillances?
computer points included in LIII.A.3.a].1L_ YES NU.
routine instrument loop See Attachment 2.
4.5 What percentage.of software verification and validation has been completed?
100%
_Approximately half Planned in the future
....K_ Other, describe See Attachment 2.
4.6 Have changes to the SPDS host computer and software been maintained under a formal Software/Hardware Change Request (or equivalent) system?
Check all that apply below:
JL Yes; For how long?
3 years Hardware 4-No Software
~
Have plans to in the future Software See Attachment 2.
9 of 19
ENCLOSURE 1
- 4.7 How frequently does the SPDS display invalid or erroneous information?
[III.A.3.a]
-L frequent (above 5 percent)
See Attachment 2.
~
infrequent (1-5 percent) rare (less than 1 percent of the time) 4.8 How frequently have any of the critical safety functions been in a false alarm condition? [III.A.3.a]
...x... frequent (above 5 percent) see Attachment 2.
~
infrequent (1-5 percent) rare (less than 1 percent of the time) 4.9 Does the SPDS display valid pa~ameter information during adverse containment conditions?
X YES NO See Attachment 2.
5.0 HUMAN FACTORS [III.E ~xcept as noted]
Human factors in the context of SPDS design includes the usefulness of the technical information displayed on the screen to users and their performance during emergency operations.
Human factors also includes display design techniques, such as labeling, display layout, and control/display integration.
lhis section provides a sample of the kinds of questions to be asked to help determine the degree to which the SPDS design incorporates accepted human factors principles.
5.1 Who is the prime user of the SPDS?
[III.B.1]
~
Shift Supervisor X Shift Technical Advisor
~
Board Operators
_Other (specify) _____ _
See Attachment 2.
Page 10 of 19
ENCLOSURE l
X YES
[III.B.1]
See Attachment 2.
If NO, where are the controls located? ----------
5.3 Is all SPDS-related information physically displayed such that the information can clearly be read from the SPDS user's typical position? [III.A.1 and III.B.1]
.JL YES NO See Attachment 2.
If NO, what specific information is available at other locations?
5.4 How are SPDS displays accessed? [III.A.2] See Attachment 2
Continuous display, no interaction possible.
x Keyboard, one or two keystroke function key.
Keyboard, greater than 2 keystrokes.
Touchscreen.
x Cursor/menu (mouse, joystick, up/down key).
5.5 Does the SPDS consistently respond to user conunands in less than 10 seconds? [I I I.A.2]
See Attachment 2 *
..JL YES NO If NO, is feedback provided to the user regarding delays in response?
YES NO NO 5.6 Does the SPDS sampling rate for parameters match the display update rate for those parameters? [III.A.2]
X YES NO See Attachment 2.
Page ll of 19
~ °'
I 1
I 1
~
- ENCLOSURE 1 If NO, what specific parameters do not match?
5.7 Are all paramet~r units of measure displayed on the SPDS consistent with the units of measure included in the emergency operating procedures?
~
YES NO See Attachment 2.
5.8 Are all parameter labels and abbreviations consistent with the labels and abbreviations included in the emergency operating procedures?
X YES NO See Attachment 2.
5.9 Is any of the displayed information in a form that requires transformation or calculation?*
YES ~
NO See Attachment 2.
IF YES, what types of-transformations or calculations are necessary?
5.10 Are the high-and low-level setpoints consistent with hard-wired parameter instrumentation and reactor protection system setpoints?
X. YES NO See Attachment 2 5.11 Does SPDS display high-and low-level setpoints?
_YES _L. NO 5.12 Are the SPDS calculated values such as subcooling margin, consistent with calculated values on the plant process computer?
X YES NO See Attachment 2.
Page 12 of 19
ENCLOSURE 1
- 5.13 Are all parameter units of measure displayed on SPDS consistent with the hard wired instrumentation?
X YES NO See Attachment 2.
5.14 Are all parameter labels and abbreviations consistent with hard-wired instrument labels and abbreviations?
X YES NO See Attachment 2.
5.15 Were the technical basis for software specifications verified with plant-specific data (for example, heat-up and cool-down limits, v~**iable steam generator setpoints and high and low level alarm setpoints)?
X YES _NO.
5.16 List LERs written as a result of SPDS software problems. see Attachment 2. -
None 6.0 TRAINING [III.C.2 all questions]
See Attachment 2.
6.1 Does simulator training include training in the use of the SPDS1 YES X NO 6.2 How long is formal classroom training for SPDS users?
No formal classroom training less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> L
2-4 hours More than 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> 6.3 Is there periodic requal1fication training for SPDS?
x YES NO If YES, how often?
_o_n_c_e_e_v_e_r.._y_y_e_a_r _________ _
Page 13 of 19 i*
ENCLOSURE 1
- 6.4 When are SPDS users given training regarding the relationship of the parameters to the plant safety functions?
Check all that apply below:
Not trained On the job or required reading x
During requalification training X
During an initial SPDS training program 7.0 ELECTRICAL ISOLATION [III.C.l all questions]
7.1 What isolation devices are currently used?
Fiber optic link 7.2 Are these devices the same ones that were originally installed and approved by NRC? ~
YES ___ NO Page 14 of 19
ENCLOSURE 1 ATTACHMENT 1 ATTACHMENT TO SECTION 2.2 OF CHEtKLIST OTHER PARAMETERS USED TO DEPICT THE FIVE SAFETY FUNCTIONS SAFETY FUNCTIONS Reactivity Control Reactor Core Cooling and Heat Removal RCS Integrity Radioactivity Control Containment Conditions PARAMETERS Reactor Trip Demand Signals from Trains A & B Reactor Coolant Pump Status Reactor Coolant System Pressure Containment Pressure Containment Area Radiation(R44A&B)
Auxiliary Feedwater Flow Main Feedwater Flow Pressurizer Level Reactor Vessel Level Containment Particulate, Noble Gas and Iodin~
RllA, Al2A&B Plant Vent Particulate, Iodine and Noble Gas R41A,B&C Containment Sump Level Containment Area Radiation (R44A&B)
Page 15 of 19
- 1. 3
- 1. 4
- 1. 5
- 1. 6 2.1 2.2.2
- 2. 2. J 2.2.5 ENCLOSURE 1
- ATTACHMENT 2 SPDS CHECKLIST ASSOCIATED WITH NRC GENERIC LETTER NO. 89-06 DOCUMENTATION FOR VARIOUS QUESTIONS IN CHECKLIST Less than twenty-five percent (25%) of the SPDS software has been modified. Software was added to the computer sys~em (not SPDS software) for other projects (Thermal Monitoring, MIDAS, SOE).
Safety Analysis Report describes the hardware used fer SPDS.
The Safety Analysis Report shows the syscam configuration.
Nine (9) MIPS (4.5 for each processer) is based en the Wheatstone Bench Mark.
The association between the Plant-Specific Safety Functions and Supplement 1 To NUREG-0737 Safety Functions is shown in the Sa~ety Analysis Report.
Hot and Cold Leg Temperatures, Steam Generator Level and Pressure and RHR Flow are currently in the SPDS da~abase. These parameters will be displayed on the third level display of the Core Cooling Critical sa:ety Function.
Containment Sump Leval is currently in the SPDS database. This parameter will be displayed on the third level display of the Coolant Inventory Critical Safety Function.
Fifty-three percent (53%) of actual Phase A containnent isolation valve positions are monitored on SPDS. One hundred percent (100%) of Phase B containment isolation valve positions are monitored on,SPDS.
During the pre-implementation audit conducted by the NRC in December 1985, PSE&G told the NRC that all Phase A & B containment isolation valve positions are displayed on the Status Panel located on Recorder Panel
- 4 (RP4). This panel is adjacent to Recorder Panel #3 (RPJ) where the 25" SPDS monitor is located. The operator can see Phase A/B isolation indications from that location. ~he NRC agreed that this was adequate and it was stated in the notes of meeting distributed Page 16 *of 19
2.3.2 3.0
- 4. 3 4.4 4.5 4.6
- 4. 7 ENCLOSURE 1
- by the Lice~sing and Regulation Departrr.ent. In the pre-implementation audit report dated June 9, 1986 received from the NRC, the following was stated:
"Containment isolation closures are not included in the display.
Contain~ent closure status is, however, shown on a lighted back panel display which is close to the 25" CRT and easily visible to the operators and STA. This is probably a satisfactory method of presenting contain~ent isolation status. However, if the lighted back panel is ever relocated such that it is not easily visible to the operator, then the containme~t isolation closure status will be reqtiired in the SPDS".
See question 2.2.5 above.
The Safety Analysis Report and color copies of all displays provide documentation ~or this section.
Hardware availability is documented by shift operators in the control room narrative log. This is used to determine whether or not the plant is operating under abnormal conditions due to loss of plant process computers and in the event that the system is down for an extended period (72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> as defined in the Event Classification Guide) to declare an Unusual Event.
Statistics concerning the percentage availability over a defined period (i.e 12 months) have not been co:npiled.
If an SPDS point is associated with an instrument loop, the I&C Depart~ent will include it in their surveillances.
Verification and Validation (V&V) of SPDS software was completed, however it was not maintained. An action plan is in place which will address V&V. R.Swartzwelder of the Licensing and Regulation Dept. discussed this action plan with the NRC via phone on May 10, 1989.
The existing design change request process being used to make changes in the Plant will be used for S?DS. To date this has not been enforced for software.
Configuration control will be addressed as a part of the action plar...
Display of invalid or erroneous information is due to unreliable software. This will be addressed as a part of the action plan.
Page 17 of 19
- 4. 8 4.9 5.1 5 )
- 5. 3 5.4
- 5. 5 5.6 5.7 ENCLOSURE 1
- Critical Safety Functions being in false alarm condition is due to unreliable software. This will be addressed as a part of the action plan.
Instrumentation associated with in-containment systems is qualified for adverse contain~ent conditions.
Under normal operating conditions the desk and board operators will use the SPDS. Under abnormal operating conditions the Shift Technical Advisor will use the SPDS.
The SPDS work station consists of a video gererator, CRT and keyboard. The pictures will show the CRT keyboard combination.
One SPDS CRT (19") and keyboard is located at the operator's desk and containment isolation indication (Status Panel) is visible from that location. One SPDS CRT (25") and keyboard is located on Recorder Panel #3 (RP3). This is adjacent to the Status Panel where containment isolation indication is located. The photographs will show these locations.
The SPDS User's Manual will explain how displays are accessed:
The response times for displays (time from keyboard entry to complete static and dynamic screen display are as follows:
First to second level 2 seconds Second to third level 3 seconds Third to fourth level 7 seconds (this includes 30 Llinutes of historical data).
Displays accessed by horizontal movement or function keys 3 seconds The sampling rate is one second for all parameters except thermocouples, which is five seconds. The display update rate for all parameters is two seconds.
A discussion with a representative of the Operations Department reveals that there are no inconsistencies in units of measure between the EOPs and the.control rooD instruments. The units of measure for SPDS were taken the* control room instruments.
Page 18 of 19
5.8 5.9 5.10 5.12 5.13 5.14 5.15 5.16
6.0 REFERENCES
ENCLOSURE 1
- There is a standard abbreviations list which was developed for Salem Generation Station as a part of t~e Human Factors Engineering ~eview of the Control Rooms.
This document was reviewed and approved by the NRC and published as a PSE&G official document (Design MeDorandom # S-C-X600-CDM-0511-0).
Infbrma~ion displayed on SPDS is exactly as displayed in the Control Room.
The high a~d low setpoints were taken from the Station Alarm & Trip Setpoint Book.
All calculations done by the Plant Process Computer were duplicated in the SPDS.
See question #5.7 above.
See question #5.8 above.
See question #5.10 above.
The SPDS is not included in the Technical Specifications SPDS training is included in the operator's annual requalification program. SPDS is also included in the E~ergency Preparedness Department's annual training program. Simulator training will include the use of SPDS starting with the 1989/1990 requalification program. This program starts in August 1989.
1 SPDS User's Manual 2
Safety Analysis Report dated April 20, 1987 3
Design Memorandum # S-C-X600-CDM-0511-0 entitled "Salem Generating Station Control Room Human Factors Guidelines Units 1 and 2" 4
Alarm and Trip Setpoints Books 1&2 5
Pre-implementation Audit Report dated June 9, 1986 June 29, 1939 Page 19 of 19