ML18152A099

From kanterella
Jump to navigation Jump to search
Certifies That SPDS Meets Requirements of NUREG-0737,Suppl 1 Re Generic Ltr 89-06,w/listed Exceptions.Completed SPDS Checklists for Plants & Photographs Required by Generic Ltr 89-06 Encl
ML18152A099
Person / Time
Site: Surry, North Anna, 05000000
Issue date: 08/08/1989
From: Stewart W
VIRGINIA POWER (VIRGINIA ELECTRIC & POWER CO.)
To:
NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
RTR-NUREG-0737, RTR-NUREG-1342, RTR-NUREG-737, TASK-1.D.2, TASK-TM 89-353A, GL-89-06, GL-89-6, NUDOCS 8908160198
Download: ML18152A099 (40)
v • d • e


Text

e e VIRGINIA ELECTRIC AND POWER COMPANY RICHMOND, VIRGINIA 23261 August 8, 1989 U. S. Nuclear Regulatory Commission Serial No. 89-353A Attn: Document Control Desk NO/HWB:vlh Rev 1 Washington , D. C. 20555 Docket Nos. 50-280 50-281 50-338 50-339 License Nos. DPR-32 DPR-37 NPF-4 NPF-7 Gentlemen:

VIRGINIA ELECTRIC AND POWER COMPANY SURRY POWER STATION UNITS 1 AND 2 NORTH ANNA POWER STATION UNITS 1 AND 2 GENERIC LETTER 89-06: SAFETY PARAMETER DISPLAY SYSTEM STATUS Generic Letter 89-06: Task Action Plan Item I.D.2 - Safety Parameter Display System issued on April 12, 1989, requested that licensees provide an implementation status of their Safety Parameter Display Systems (SPDS). This is to* be accomplished by submitting to the NRC a comprehensive checklist and photographs of the licensee's SPDS. Per this request, attached are the completed SPDS checklists for Surry and North Anna Power Stations. Also enclosed are the photographs required by Generic Letter 89-06.

  • Based on the preparation of the SPDS checklists and on the NRC inspection of the North Anna Emergency Response Facilities (see NRC Inspection Report Nos. 50-338/88-14 and 50-339/88-14), we certify that the Surry and North Anna SPDS meet the requirements of NUREG-0737, Supplement 1, except as identified in Notes 12 and 16 to the checklists. The actions identified in these two notes will be completed by the end of 1990.

8908J6019B 890808 PDR ADOCK 05000280 p PNU

e e The information provided in this response is true and accurate to the best of my knowledge.

Should you have any questions concerning this submittal, please contact us.

Very truly yours, JJL~

W. L. Stewart Senior Vice President - Power Attachments and Enclosures cc: U.S. Nuclear Regulatory Commission 101 Marietta Street, N.W.

Suite 2900 Atlanta, GA 30323 Mr. W. E. Holland NRC Senior Resident Inspector Surry Power Station Mr. J. L. Caldwell NRC Senior Resident Inspector North Anna Power Station

/

e COMMONWEALTH OF VIRGINIA )

)

COUNTY OF HENRICO )

The foregoing document was acknowledged before me, in and for the County and Commonwealth aforesaid, today by W. L. Stewart who is Senior Vice President - Power, of Virginia Electric and Power Company. He is duly authorized to execute and file the foregoing document in behalf of that Company, and the statements in the document are true to the best of his knowledge and belief.

Acknowledged before me this 8 7JI day of Aa~ , 19B..!i._.

My Commission Expires: ,.j,~ Z5 , 19j'L.

_Et:£i_~_

Notary Public

,, '~,

/

(SEAL)

SURRY VEPCo Safety Parameter Display Status Rec'd w/ltr dtd 08/08/89 ... 8908160198

--NOTICE-THE ATIACHED FILES ARE OFFICIAL RE-

. CORDS OF THE RECORDS & REPORTS MANAGEMENTBRANCH. THEY HAVE BEEN CHARGED TO YOU FOR A LIMITED TIME PERIOD AND MUST BE RETURNED TO THE RECORDS & ARCHIVES SERVICES SECTION P1-122 WHITE FLINT. PLEASE DO NOT SEND DOCUMENTS CHARGED OUT .

THROUGH THE MAIL. REMOVAL OF ANY PAGE(S) FROM DOCUMENT FOR REPRO-DUCTION MUST BE REFERRED TO FILE PERSONNEL.

_.NOTICE-

  • i SPDS CHECKLIST Th.ts*checklist is intended to aid licensees in determining the status of their SPDS. Bracketed, [].information refers to the section in NUREG-1342 where discussions on the specific question(s) may be found.

1.0 GENERAL DESCRIPTION 1 .1 P1ant Name:

Surry Power Station 1.2 Who/What organization developed the original version of the SPDS software

_i'rnplemented at your site?

_!_ Utility (in-house) See Note 1

_ Ut1 lity Owner's Group; w h i c h ? - - - - - - - - - - -

Contractor; which?

Other; who?

  • 3

1.3 If the SPDS software has undergone significant modification (i.e., more than 25 percent of software replaced or modified) since original a*

implementation, list the organization performing the modification:

Utility (in-house)

_ Utility Owner's G r o u p - - - - - - - - - - -

Contractor

_Other------------------

See Note 2 1.4 What is the hardware host on which the current SPDS software 1s implemented?

- Westinghouse P250

- Westinghouse P250U

_ Gould/SEL, Model N u m b e r - - - - - - - - - - - - - -

- Digital (DEC), Hodel Nunmer - - - - - - - - - - - -

_ IBM, Model Nuamer - - - - - - - - - - - - - - - - -

..!.. MODCOMP, Mode 1 Nuamer __c_1_as_s;.;i;,;;c..;I;,;I~/..;.7.;,,5_ _ _ _ _ _ _ __

- Babc.ock I Wilcox (Recall)

_ Honeywell, Madel Nulllber - - - - - - - - - - - - - -

_ Burroughs, Model Nun>er - - - - - - - - - - - - - -

- Other: Manufacturer, M o d e l - - - - - - - - - - - - -

  • 4

1.5 How many total CPUs are accessible by SPDS software on the computer system described in the previous qutstion? ___s ________

  • ; ;See Note 3
  • 1.6 What is the approximate MIPS rating of all the CPUs counted above?

... ' 1.0 MIPS NOTE: Use a decimal fraction if less than 1.0 (Whetstone Benchmark)

If SPDS does not run on a single computer system, provide the following information for the minority parameter set*provided by a second computer system. For example, a frequent occurrence of this case is where a separate but adjacent computer terminal provides radiological parameters.

1.7 Manufacturer N/A 1.8 Model Number

~---------------

1.9* list parameters provided: _ _N_/A_ _ _ _ _ _ _ _ _ _ __

(on the second system)

  • 1.10 Are significant changes 1a hardwire or software planned in the next two years?

- - YES X NO.

If YES, briefly describe planned changes and 11st a schedule of 111Jor a11estones *

  • 5

\

2.0 PARAMETER,SELECTION

  • This :section is divided into two parts: the safety functions, and the parameters used.to depict each safety function.

2.1.. 'Plant-Specific Safety Functions [III.F.]

L1*st the title of the plant-specific safety function(s) displayed on your SPDS that is (are) equivalent to the safety function 1n Supplement 1 to NUREG-0737.

Supplement 1 To NUREG-0737 Plant-Specific Safety Functions Safety Functions 2.1.1. Reactivity Control Reactivity Control 2.1.2 Core Cooling and Heat Core Heat Raroval Rmnoval Secondary Heat Removal*

See Note 4 2.1.3. RCS Integrity Reactor Coolant System Integrity 2.1.4. Radfoactfvtty Control Radioactivity Control 2.1.5. Containment Condftfons Contail'lllEilt Conditions

  • 6

2.2 Parameters Selected to Display Each Safety Function Th,;purpose of this section is to specify a 11st of parameters used to depict

  • eacn of the five safety functions identifed 1n Supplement 1 to NUREG-0737.

Lists of parameters that have been found acceptable to NRC through prev;ous SPDS PQst-implementation

.., reviews have been provided. One list of par111eters applies to pressuriztd water reactors in general, and the other 11st applies to boiling wa-ter reactors.

NOTE: Check any parameters that have been selected as an SPDS parameter.

List any additional paraineters under the relevant *others* category.

Include additional safety functions and parameters that are a part of your SPDS.

PRESSURIZED WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST [III.F.1]

Supple11ent 1 To NUREG-0737 Safety Functions Parameters 2.2.1 Reactivity Control Neutron Flux

  • x Source Range x Intennediate Range

-- x Power Range x Other: (List) See Notes 2.2.2 Reactor Core COoltng and Heat R1110v1l froa the --X RCS Level x Subcooltng Margin Prt*ry Systell

- Hot Leg Temperature

-- x Cold Leg Temperature Core Exit Thel"IIOcouples

--xx Steaa Generator Level Ste111 Generator Pressure

..L RHR Flow

..L Other: ( L1st) _See

_ _N_o.;..te;.._..6_ _ __

  • 7

2.2.3 RCS Integrity _!_ RCS Pressure .

_ Cold Leg Temperature

.!_ Containment Sump Level

___ Steam Generator (Pressure, Level, Radiation) x Other: (List) See Note 7 2.2.4 Radioactivity Control

-x Stack

~

Monitor Steam11ne Radiation x Containment Radiation

-X Other: (List) See Note 8 2.2.5 ContJ;nment Conditions -x x Containment Pressure

~

Contai1111ent Isolation Containment Hydrogen Concentration

-X Other: (L 1st) Containment Temperature RWST Level 2.2.6 Other Safety Functions Yes x No If yes, 11st functions and parameters *

  • 8

BOILING WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST [Ill.F.2]

  • safety Functions Parameters 2.2.6 Reactivity Control N/A

- APRM SRM

- Other: (L 1st) 2.2.7 Reactor Core Cooling and

- RPV Water Level Removal N/A

-_ Orywell Temperature Other: (L 1st) - - - - - - - -

2.2.8 Pressure Vessel Integrity

.- RPY Pressure

- Other: (L1st) - - - - - - - -

N/A 2.2.9 Radioactivity Control N/A

- Ma1n Stack or Offgas (Pretreatment)

Monitor Conta1nment Radiation Monitor Other: ( L i s t ) - - - - - - - -

2.2.10 Containment Integrity N/A

-- Drywell Pressure Dr,Y1f1ll T1mp1rature

-_ Suppression Pool Temperature Suppression Pool Level

- Containaent Isolation Valve Status Dryw111 Hydrog1n Concentration

  • - Drywe11 Oxygen Concentration

- Other: (L 1st) - - - - - - - - - -

  • 9

2 .2 .11 Other Safety Function$

N/A

- Yes No If yes, list functions and parameters.

2.3 Detailed Parameter Questions [III.F.l.e and III.F.2.e]

2.3.1 Are containment isolation delfland signals input to SPDS (e.g., PWR -

Phase A/B Isolation Demand Signal or BWR - Group Isolation Demand Signals J?

-* X YES

- NO 2.3.2 Does the SPDS use actual containment isolation valve position as an input to monitor successful isolation? x YES

- NO 3.0 DISPLAY OF SAFETY FUNCTIONS [III.F.]

  • 3.1 3.2 Does the SPDS provide the status of all five safety functions on one display page? .!.,. YES ___ NO Are the individual parameters that support the safety functions grouped by safety function? .!.,. YES _ NO 3.3 Is the status of 111 five safety functions always displayed on the SPDS7 [III.B.2] .Ji._ YES_ NO 4.0 RELIABLE DISPLAY [III.A.3 except 1s noted]

4.1 Is the SPDS hosted on the s1111 COlll)uter system 1s the plant process computer?

YES x NO If NO, does the SPDS computer receive SOiie of the computer point ;nputs from the process computer? _ YES ~ NO 10

4.2 List location of accessible (e.g., keyboards) devices capable of

  • *~~

changing SPDS data. [III.A.3.a]

TSC Programner *s Roan and Main Control Room See Note 9 4.3 Are SPDS hardware availability data documented?

-X YES NO IF YES, what is the docu111ented percent availability of the SPDS hardware over the past 12 months? NOTE: Availability should be based on power operation, startup, hot s*tandby, and hot shutdown only and not include other plant modes. 98.27 S Available 4.4 Are the SPDS coaputer points included in routine instrument loop surveillances? [III.A.3.a] ~YES_ NO.

4.5 What percentage of software verification and validation has been caapleted?

x lOOS

_ Approximately half Planned in the future

  • - Other, describe--------

4.6 Have changes to the SPDS host caaputer and software been 11ainta1ned under a formal Software/Hardware Change Request (or equivalent) system? Check all that apply below:

~ Yes; For how long? 2 years No

__ Have plans to in the future

  • 11

4.7 How frequently does the SPDS display ;nva-11d or erroneous information?

[III .A.3.a]

~

frequent (above 5 percent)

nfrequent (1-5 percent) rare ( less than 1 percent of the time) 4.8
  • How frequently have any of the crit;cal safety functions be~n in a false

_alann condition? [III.A.3.a]

-- frequent x infrequent (above percent)

(1-5 5

percent)

___ rare (less than percent of the time) 1 4.9 Does the SPDS display valid paPameter information during adverse containment conditions? x YES

- NO 5.0 HUMAN FACTORS [III.E txcept as noted]

Human factors in the context of SPDS design includes the usefulness of the technical 1nfonnation displayed on the screen to users and their performance during emergency operations. Hu111n factors also includes display design techniques, such as labeling, display layout, and control/display integration.

lh1s section provides a s111ple of the kinds of questions to be asked to help determine the degree to which the SPDS design incorporates accepted human factors principles.

5 *. 1 Who is the pri* .user of the SPDS?

-x Shift Supervisor

[III.B.1]

- Shift Technical Advisor Board Other Operators (specify)_ _ _ __

  • 12

5.2 Are 111 SPDS controls located at the SPDS workstation?

..- [III.B.1]

-X YES

- NO If NO, where are the controls located?

5:_-3 Is a11 SPDS-related 1nfonnat1on phys;cally displayed such that the information can clearly be read froa the SPDS user's typical position? [III.A.1 and III.B.1]

- X YES

- NO If NO, what specific information is available at other locations?

5.4 How are SPDS displays accessed? [III.A.2]

Continuous display, no interaction possible.

____x_ _ Keyboard, one or two keystroke function key.

- - - - Keyboard, greater than 2 keystrokes.

x Touchscreen.

Cursor/menu (aouse, Joystick, up/down key).

See Note 10 5.5 Does the SPDS consfstantly respond to user connands in less than 10 seconds? [III.A.2]

- X YES

- NO If NO, 1s feedback provided to the user regarding delays in response?

- YES

- NO 5.6 Does the SPDS saap11ng rate for parameters match the display update rate for those parameters? [III.A.2]

- YES

- X NO 13

If NO. what specific parameters do not match?

".. See Note 11 5.7 Are all parameter units of measure displayed on the SPDS consistent with the units of measure included in the emergency operating procedures?

- YES ..lL NO See Note 12 5.8 Are all parameter labels and abbreviations consistent with the labels and abbreviations included in the emergency operating procedures?

- YES. -L NO See Note 12 5.9 Is any of the displayed infonnation in a fonn that requires transformation or calculation?*

- YES

-X NO IF YES. what types of transformations or calculations are necessary?

5.10 Are the high-and low-level setpoints consistent with hard-wired parameter 1nstru111nt1tton 1nd reactor protection system setpoints?

L YES - NO

  • See Note 13 SGll Does SPDS display htgh-1nd low-level setpoints?

- YES L NO See Note 14 5.12 Are the SPDS calculated values such as subcooling margin. consistent with calculated values on the plant process C011puter?

_!,.. YES - NO See Note 15 14

  • 5.13 Are 111 parameter units of ineasure displayed on SPDS consistent with the

,hard wired instrumentation?

~ I.

_!_ YES - NO See Note 16 5.14:Are all parameter labels and abbreviations consistent with hard-wired

~ .

instrument labels and abbreviations?

. . * ..!.. YES - NO See Note 16 5.15 Were the technical basis for software specifications verified with plant-specific data (for example, heat-up and cool-down limits, variable steam generator setpoints and high and low level alarm setpoints)?

-x YES

  • -NO 5.16 List LERs written as a result of SPDS software problems.

No LERs have been written as a result Qf SPDS software problems 6.0 TRAINING [III.C.2 all questions]

  • 6.1 Does simulator training include training in the use of the SPD51

- X YES

- NO 6.2 How long is fon11l classroo11 training for SPDS users?

-- Ho for1111l cl1s1roG11 training Less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />

- x 2-4 hours

- More than 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> 6.3 Is there periodic requa11fication training for SPDS7 ..i YES

- NO If YES, how often? Annually

  • 15

6.4 When are SPDS users given training regarding the relationship of the parameters to the plant safety functions? Check all that apply below:

--- Not trained

- - - ~ On the job or required reading

.... --...:x.......~ During requalification training

During an initial SPDS training program 7.0 ELECTRICAL ISOLATION [III.C.1 all questions]

7.1 What isolation devices are currently used?

Validyne MUX MC370AD-Q2

  • 1:2 Are these devices the same ones that were originally installed and approved by NRC? *x YES

- - NO 16

  • NORTH ANNA STATION NORTH ANNA STATION LOCAL DCP EOF (DUAL)

NORTH ANNA*

,~ATION

'TSC (DUAL)

RICHMOND CENTRAL EOF (DUAL)

SURRY SURRY STATION STATION LOCAL DCP

  • SURRY STATION TSC (DUAL)

FIGURE 1 - BLOCK DIAGRAM OF ERF COMPUTER SYSTEM

  • 1.

NOTES FOR SURRY CHECKLIST The original SPDS software was developed by Virginia Electric and Power based upon a design provided by Energy Incorporated, International.

2. Less than 25% of the SPDS has been changed since independent verification and validation was performed and the SPDS was declared operational.

Changes are made in-house in accordance with internal software control procedures.

3. The Central and Local Emergency Operation Facility (EOF) computer systems and Technical Support Center (TSC) computer systems can access the SPDS.

The SPDS for the control rooms is provided by the Technical Support Center computer systems. The Central and Technical Support Center computer systems are redundant consisting of two CPU's each. Data from the Validyne multiplexers is brought into the Data Communication Processors (DCP's) and shared among the EOF's. A block diagram of the computer system network is shown in Figure 1.

4. Core Cooling and Heat Removal is split into two separate functions. They are Core Heat Removal and Secondary Heat Removal.
5. Other reactivity control inputs include the following:

Startup rate RCCA's not full-in indication .

Cold leg temperature

6. This safety function has been divided into two separate safety functions (See answer to Item 2.1.2). Other reactor core cooling and heat removal from the primary system inputs include the following:

RCS flow Average loop temperature Loop delta temperature Total feedwater flow Steam flow Condensate storage tank level

7. . Other RCS integrity inputs include the following:

Secondary system activity Containment pressure Pressurizer level Pressurizer relief paths out of position indication Margin to NOT limit High head safety injection flow

  • 8. Other radioactivity control inputs include the following:

Condenser air ejector radiation monitors Liquid release paths radiation monitors Primary coolant radiation monitors Secondary steam radiation monitors Area radiation monitors

9. . SPDS points may be taken off of scan and new values inserted at the STA and Shift Supervisor consoles in the control room, at the Programmer's console in the TSC programmer's room and at site emergency manager's console in the TSC. The plant mode may be manually overridden at the STA and Shift Supervisor consoles. Substituted values are indicated by a color change (cyan) on SPDS displays.
  • Any SPDS -values calculated using substituted values are also indicated by a color change (white) in order to indicate that the value calculated is suspect because substituted values were used:

1o. The SPDS is initially accessed from keyboard function keys. Once the SPDS has been accessed, the keyboard or touchscreen (on touchscreen equipped

.CRT's), can be used to access other displays within the SPDS.

11. Although the. d.isplay rates are typically faster than the sampling rates, the difference between the rates is not sufficient to cause problems in display interpretation. The fastest CRT update rate is 1 second while the slowest scan rate is 5 seconds. Trend displays automatically update at the rate the trend data
  • is sampled. *
12. The development of the SPDS included a human factors review to ensure consistency of SPDS units of measure, parameter labels, and abbreviations.

During this human factors review, the Rev. 0 EOPs were considered. The EOPs are to be revised in accordance with WOG Rev. 1A by December 31, 1989. The SPDS units of measure, parameter labels, and abbreviations will be reviewed against these new EOPs* and revised accordingly.

13. The SPDS is d~signed to work in all plant modes, including power operation, startup, reactor tripped, safety injection, etc. This requires a set of alarm limits which vary with plant mode and with the actuation of some systems.* Alarm setpoints for the SPDS are based on Technical Specifications, PLS, and FSAR.

Hardwired instrumentation displayed in the control room generally does not have this same mode dependency. However, SPDS and tiardwired limits are consistent during normal power operation.

14. Alarm condition is shown by changing colors of the SPDS bar graphs to
  • . correspond to the current alarm level for the parameter being shown ..
15. Calculations performed both on the SPDS and plant process computer are done in a similar manner. However, SPDS inputs are validated in a more rigorous manner than plant process computer inputs. Data is brought into the SPDS from a different system than the plant process computer system and all inputs into one system do not necessarily go into the other. Therefore, similar, yet not always identical, inputs are used in calculations done on both systems.
16. Though consistent, the SPDS units of measure, parameter labels, and abbreviations are not identical to the hardwired instrumentation. As stated in Note 12, the development of the SPDS included a human factors review to ensure consistency of SPDS units of measure, parameter labels, and abbreviations. The review and upgrade of the hardwired instrumentation units of measure, parameter labels, and abbreviations is currently being accomplished as a result of the NUREG-0700 CRDR human factors review.

See Virginia Electric and Power Company letter dated March 31, 1986, Serial No.86-171, "Control Room Design Review Final Summary Report."

SPDS CHECKLIST Th.ts*checklist

., is intended to aid licensees in determining the status of their SPDS. Bracketed, [],information refers to the section in NUREG-1342 where discussions on the specific question(s) may be found.

1.0 GENERAL DESCRIPTION 1.1 Plant Name: North Anna Power Station 1.2 Who/What organization developed the original version of the SPDS software implemented at your site?

~ Utility (in-house) See Note 1

_ Ut111ty Owner's Group; w h i c h ? - - - - - - - - - - -

Contractor; w h i c h ? - - - - - - - - - - - - - - - -

Other; who? - - - - - - - - - - - - - - - - - -

  • 3

1.3 If the SPOS software has undergone significant modification (i.e., more than 25 percent of software replaced or modified) since original 7 ,

implementation, list the organization performing the modification:

_ Utility (in-house)

- Utility Owner's Group Contractor

- Other See Note 2 1.4 What is the hardware host on which the current SPDS software is implemented?

- Westinghouse P250

- Westinghouse P250U

_ Gould/SEL, Model N u m b e r - - - - - - - - - - - - - -

Digital (DEC), Model Number IBM, Model Nuamer _________________

~ MODCOMP, Model Nud>er __c_1a_s_s_i_c_r_r_/7_s_________

- Babc.ock I Wilcox (Recall)

  • - Honeywell, MOClel Nulllber - - - - - - - - - - - - - -
  • - Burroughs, Hodel Nuri>er - - - - - - - - - - - - - -

Other: Manufacturer, Model - - - - - - - - - - - - -

  • 4

1.5 How many total CPUs are accessible by SPDS software on the computer system described in the previous qu~stion? ------'-5-------------------------

-~;See Note 3

  • 1.6 What is the approximate MIPS rating of all the CPUs counted above?

.:~ ____1.,.,_o MIPS NOTE: Use a decimal fraction if less than 1.0 (Whetsone Benchmark)

If SPDS does not run on a single computer system, provide the following information for the minority parameter set provided by a second computer system. For example, a frequent occurrence of this case is where a separate but adjacent computer terminal provides radiological parameters.

1.7 Manufacturer --.:..::N:i..:A:.:.-*----------------------------------------

. 1.8 Mode 1 Number ....,M,,6,,1________________________________________

1. 9- L1 st parameters provided:

-i~._______________________________

(on the second syste111) 1.10 Are significant changes in hardware or software planned in the next two years? ~YES .A.NO.

If YES, briefly describe planned changes and 11st a schedule of 111jor atlestones *

  • 5

2.0 PARAMETER SELECTION Thi$:section is divided into two parts: the safety functions, and the parameters used.to depict each safety function.

2.1. ' 'Plant-Specific Safety Functions [III.F.]

. o\

u.st the title of the plant-specific safety function(s) displayed on your SPDS that 1s (are) equivalent to the safety function 1n Supplement 1 to NUREG-0737.

Supple111ent 1 To NUREG-0737 Plant-Specific Safety Functions Safety Functions 2.1.1. Reactivity Control Reactivity Control 2.1.2 Core Cooling and Heat Core Heat Renpyal Removal Secondary Heat Removal See Note 4 2.1.3. RCS Integr1ey Reactor coo1ant System, Integrity

  • 2.1.4. Rad1C>Act1v1ty Control Badi oactbd ty CootroJ 2.1.s. Containment Conditions Containment Conditions 6

2.2 Parameters Selected to Display Each Safety Function

  • Tht; purpose of this section is to specify 1 11st of parameters used to depict
  • eacn of the five safety functions identifed in Supplement 1 to NUREG-0737.

Lists of parameters that have been found acceptable to NRC through prev;ous SPDS post-implementation reviews have been prov;ded. One list of parameters applies to pressurized water reactors in general, and the other 11st applies to boiling wa-ter reactors.

NOTE: Check any parameters that have been selected as an SPDS para11eter.

List any additional parameters under the relevant *others* category.

Include additional safety functions and para111eters that are a part of your SPDS.

PRESSURIZED WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST (III.F.1]

Supplement 1 To NUREG-0737 Safety Functions Par1111ters 2.2.1 Reactivity Control Neutron Flux

-- x Source Range x Intennediate Range

- x Power Range i Other: (L 1st) __ ___N_o_te See ........s ______

2.2.2 Reactor Core COoltng and Heat RIIIOval froa the

-- Subcooltng Margin x RCS Level x

Pri*ry Systell

-- Hot Leg T1111>erature Cold Leg Temperature

-- x Core Exit Thel'IIOcouples

...x.....,. Steu Generator Level

~ Steam Generator Pressure _

- x RHR Flow

~ Other: ( L1st) ..§eeiiiDiiilii...N~P.u.~,is;;;..,:61,&-_ _ __

7

2.2.3 RCS Integrity ~ RCS Pressure

___ Cold Leg Temperature

.A- Containment Sump Level 7 ,:

___ Steam Generator (Pressure, Level, Radiation)

... ..L. Other: {Li st) _See

_ _N_o_te_7_ _ _ __

\

2.2.4 Radioactivity Control ~ Stack Monitor

~ Steamline Radiation

..x.. Containment Radiation x Other: (list) See Note 8 2.2.5 Containment Conditions -A. Containment Pressure

-a. Containment Isolation

-A. Containment Hydrogen Concentration

~ Other: (L 1st) contaimnent Temperature RWST Leve1 2.2.6 Other Safety Functions Yes x No

  • If yes, list functions and parameters.

8

BOILING WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST (111.F.2]

  • safety Functions Parameters 2.2.6 Reactivity _Control

- APRM SRM N/A - Other: (L 1st) 2.2.7 Reactor Core Cooling and Removal

-- RPV Water Level Drywell Te11peratur1

_ Other: ( L i s t ) - - - - - - - -

N/A 2.2.8 Pressure Vessel Integrity N/A RPY Pressure Other: (List) - - - - - - - -

2.2.9 Rad1oact1v1ty Control N/A

- Main Stack or Offgas (Pretreatment)

Monitor Cont1111111nt Radiation Monitor Other: ( L i s t ) - - - - - - - -

2.2.10 Contai11111nt Integrity N/A

-- Drywe 11 Pressure Drywell Temperature Suppression Pool Temperature Suppression Pool Level Conta1n111nt Isolation Valve Status

-- Drywe11 Hydrogen Concentration Drywell Oxygen Concentration

_ Other: (L 1st) - - - - - - ~ -

  • 9

2.2 .11 Other Safety Functions

- Yes

- No

  • N/A If yes. 11st functions and parameters
  • 7 '

2.3. Detailed Parameter Questions [III.F.1.e and III.F.2.e]

2.3.1 Are containment isolation deinand signals input to SPDS (e.g., PWR -

Phase A/8 Isolation Demand Signal or BWR - Group Isolation Demand Sign*a lsJ?

i YES _ NO 2.3.2 Does the SPDS use actual containment isolation valve position as an input to monitor successful isolation? x YES

- NO 3.0 DISPLAY OF SAFETY FUNCTIONS [III.F.]

  • 3.1 3.2 Does* the SPDS provide the status of all five safety functions on one display page? ~ YES _ NO Are the individual par111eters that support the safety functions grouped by safety function? ~ YES ___ NO 3.3 Is the status of 111 five safety functions always displayed on the SPDS? [I II .B.2] x YES NO 4.0 RELIABLE DISPLAY [III.A.3 except as noted]

4.1 Is the SPOS hosted on the s111e COlllputer system as the plant process computer? ___ YES ~ NO If NO, does the SPDS computer receive SOiie of the c011puter point ;nputs from the process computer? ___ YES .._ NO

  • 10

4.2 List location of accessible (e.g ** keyboards) dev;ces capable of

  • changing SPDS data. [111.A.3.a]

TSC Progranmer*s Roan and Main Control*Roan See Note 9 4.3 Are SPDS hardware availability data documented? ~ YES NO lF YES, what is the docu111ented percent ivailability of the SPDS hardware over the. past 12 months? NOTE: Availability should be based on power operation. startup, hot standby, and hot shutdown only and not include other plant modes. 99.64 S Available 4.4 Are the SPDS coaputer points included in routine instrument loop surveillances? [111.A.3.a] .-!... YES~ NO.

4.5 What percentage of software verification and validation has been COIIJ)leted?

.L. lOOS

_ Approximately half Planned in the future

_Other.describe--------

4.6 Have changes to the SPDS host coaputer and software been mainta,ned under a for111l Software/Hardware Change Request (or equivalent) system? Check all that apply below:

.x_ Yes; For haw long? 2 years No

_ Have plans to in the future

  • 11

4.7 How frequently does the SPDS display ;nval1d or erroneous information?

[III.A.3.a]

=:.

___ frequent (above 5 percent)

___ ;nfrequent (1-5 percent)

.*

  • X rare (leSS than 1 percent Of the time) 4.8 How frequently have any of the critical safety functions been in a false alarm condition? [III.A.3.a]

___ frequent (above 5 percent)

~ infre9uent (1-5 percent)

-*- rare (less than 1 percent of the *time) 4.9 Does the SPDS display valid paPameter information during adverse containment conditions?......_ YES~ NO 5.0 HUMAN FACTORS [III.E ~xcept as noted]

Human factors in the,context of SPDS design includes the usefulness of the technical information displayed on the screen to users and their performance during emergency operations. Hu111n factors also includes display design_

techniques, such as labeling, display layout, and control/display integration.

I hfs section provides a s111ple of the kinds of questions to be asked to help determine the degree to which the SPDS design incorporates accepted human factors principles.

5.1 Who is the pri111 user of the SPDS?

[III.B.1]

-~

Shift Shift Supervisor Technical Advisor

-_ Board Other Operators (specify)_ _ _ __

  • 12

5.2 Are all SPDS controls located at the SPDS workstation?

-X YES

- NO

. . [III.B.1]

~ ..- 1f NO, where are the controls located?

s:.-3 Is all SPDS-related 1nfonnat1on physically displayed such that the information can clearly be read from the SPDS user's typical pos1t1on? [III.A.I and III.B.1]

-x YES

- NO If NO, what specific 1nformat1on 1s available at other locations?

5.4 How are SPDS displays accessed? [III.A.2]

Continuous display, no interaction possible.

X Keyboard, one or two keystroke function key.

Keyboard, greater than 2 keystrokes.

x Touchscreen.

Cursor/menu (aause, joystick, up/down key).

See Note 10 5.5 Does the SPDS consistently respond to user c011111nds in less than 10 seconds? [III.A.2]

..., YES _ NO If NO, 1s feedback provided to the user regarding delays in response?

- YES

- NO 5.6 Does the'SPDS saap11ng rate for parameters match the display update rate for those p1r111et1rs? [III.A.2]

- YES

-X . NO

  • 13

If NO, what specific parameters do not match?

  • See Note 11 5.7 Are all parameter units* of measure displayed on the SPDS consistent with the un1ts of measure included in the emergency operating procedures?

YES X NO See Note 12 5.8 Are all parameter labels and abbreviations consistent with the labels and abbreviations included in the emergency operating procedures?

YES . x NO See* Note 12 5.9 Is any of the displayed infonnation in a form that requires transformation or calculation?*

YES X NO IF YES, what types of transfonnations or calculations are necessary?

5.10 Are the high-and low-level setpoints consistent with hard-wired parameter instrumentation and reactor protection systell setpoints?

-:,~ YES

- NO See Note 13 5.11 Does SPDS display high-and low-level setpoints?

YES x NO See Note 14 5.12 Are the SPOS calculated values such as subcooling 111rgin 1 consistent with calculated values on the.plant process CQIIIPuter?

-x YES

- NO See Note 15

  • 14

5.13 Are all parameter units of measure displayed on SPDS consistent with the

  • 5.14:Are

,hard

~

  • \

wired instrumentation?

.ir_ YES _ NO See Note 16 .

all parameter labels and abbreviations consistent with hard-wired

  • instrument labels and abbreviations1
  • . .x.,.. YES _ NO See Note 16 5.15 Were the technical basis for software specifications verified with plant-specific data (for example, heat-up and cool-down limits, variable steam generator setpoints and high and low level 1l1r11 setpoints)?

~ YES ~NO 5.16 List LERs written as a result of SPDS software proble11s.

No LERs have been written as a result of SPDS software problems.

6.0 TRAINING [III.C.2 111 questions]

6.1 Does sin.ilator training include training in the use of the SPDS1

-X YES

- NO 6.2. How long is for111l classrooa training for SPDS users?

-- No formal cl1ssrooa training Less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />

..i_ 2-4 hours

- More than 4 lloun 6.3 Is there pertodtc requaltftcatton training for SPDS? ~ YES

- NO If YES, how often? Annually

  • 15

6.4 When are SPDS users given training regarding the relationship of the parameters to the plant safety functions? Check all that apply below:

--- OnNot thetrained

..., --- job or required reading

---x During requalification training

--- Duringprogram an initial SPOS training 7.0 ELECTRICAL ISOLATION [III.C.l all questions]

7.1 What isolation devicts are currently used?

Validyne MOX MC370AD-Q2

-t:2 Are these devices the same ones that were orig1na11y -installed and approved by NRC? ~ YES ___ NO 16

~.\

  • NORTH ANNA STATION NORTH ANNA STATION LOCAL DCP EOF (DUAL)

NORTH ANNA STATION

RICHMOND CENTRAL EOF (DUAL)

SURRY SURRY STATION STATION LOCAL DCP EOF (DUAL)

SURRY*

STATION I

k* TSC (DUAL)

FIGURE 1 - BLOCK DIAGRAM OF ERF COMPUTER SYSTEM

NOTES FOR NORTH ANNA CHECKLIST

1. The original SPDS software was developed by Virginia Electric and Power based upon a design provided by Energy Incorporated, International.
2. Less than 25% of the SPDS has been changed since independent verification and validation was performed and the SPDS was declared operational. Changes are
  • made in-house in accordance with internal software control procedures.
3. The Central and Local Emergency Operation Facility (EOF) computer systems and Technical Support Center (TSC) computer systems can access the SPDS. The SPDS for the control rooms is provided by the Technical Support Center computer systems. The Central and Technical Support Center computer systems are redundant consisting of two CPU's each. Data from the Validyne multiplexers is brought into the Data Communication Processors (DCP's) a*nd shared among the EOF's. A block diagram of the computer system network is shown in Figure 1.
4. Core Cooling and Heat Removal is split into two separate functions. They are Core Heat Removal and Secondary Heat Removal.
5. Other reactivity control inputs include the following:

Startup rate RCCA's not full-in indication Cold leg temperature

6. This safety function has been divided into two separate safety functions (See answer to Item 2.1.2). Other reactor core cooling and heat removal from the primary system inputs include the following:

RCS flow Average loop temperature Loop delta temperature Total feedwater flow Steam flow Condensate storage tank level

7. Other RCS integrity inputs include the following:

Secondary system activity Containment pressure Pressurizer level Pressurizer relief paths out of position indication

  • Margin to NOT limit High head safety injection flow
8. Other radioactivity control inputs include the following:

Condenser air ejector radiation monitors Liquid release paths radiation monitors Primary coolant radiation monitors Secondary steam radiation monitors Area radiation monitors

9. SPDS points may be taken off of scan and new values inserted at the STA and Shift Supervisor consoles in the control room, at the Programmer's console in the TSC programmer's room and at Site Emergency Manager's console in the TSC.

The plant mode may be manually overridden at the STA and Shift Supervisor consoles. Substituted values are indicated by a color change (cyan) on SPDS displays. Any SPDS values calculated using substituted values are also indicated by a color change (white) in order to indicate that the value calculated is suspect

, because substituted values were used.

10. The SPDS is initially accessed from keyboard function keys. Once the SPDS has been accessed, the keyboard or touchscreen (on touchscreen equipped CRTs),

can be used to access other displays within the SPDS.

11. Although the display rates are typically faster than the sampling rates, the difference between the rates is not sufficient to cause problems in display interpretation. The fastest CRT update rate is 1 second while the slowest scan rate is 5 seconds. Trend displays automatically update at the rate the trend data is sampled.
12. The development of the SPDS included a human factors review to ensure consistency of SPDS units of measure, parameter labels, and abbreviations.

During this human factors review, the Rev. O EOPs were considered. The EOPs are to be revised in accordance with WOG Rev. 1A by December 31, 1989. The SPDS units of measure, parameter labels, and abbreviations will be reviewed

  • against these new EOPs and revised accordingly.
13. The SPDS is designed to work in all plant modes, including power operation, startup, reactor tripped, safety injection, etc. This requires a set of alarm limits which vary with plant mode and with the actuation of some systems. Alarm setpoints for the SPDS are based on Technical Specifications, PLS, and FSAR.

Hardwired instrumentation displayed in the control room generally does not have this same mode dependency. However, SPDS and hardwired limits are consistent during normal power operation.

14. Alarm condition is shown by changing colors of the SPDS bar graphs to correspond to the current alarm level for the parameter being shown .
15. Calculations performed both on the SPDS and plant process computer are done in a similar manner. However, SPDS inputs are validated in a more rigorous manner than plant process computer inputs. Data is brought into the SPDS from a different system than the plant process computer system and all inputs into one system do not necessarily go into the other. Therefore, similar, yet hot always identical, inputs are used in calculations done on both systems.
16. Though consistent, the SPDS units of measure, parameter labels, and abbreviations are not identical to the hardwired instrumentation. As stated in Note 12, the development of the SPDS included a human factors review to ensure consistency of SPDS units of measure, parameter labels, and abbreviations. The review and upgrade of the hardwired instrumentation units of measure, parameter labels, and abbreviations is* currently being accomplished as a result of the NUREG-0700 CRDR human factors review. See Virginia Electric and Power Company letter dated June 30, 1986, Serial No. 85-268C, "Control Room Design Review Final Summary Report." *
Retrieved from "https://kanterella.com/w/index.php?title=ML18152A099&oldid=2504555"