ML19337A517
| ML19337A517 | |
| Person / Time | |
|---|---|
| Site: | Crane  |
| Issue date: | 09/16/1980 |
| From: | Reid R Office of Nuclear Reactor Regulation |
| To: | Arnold R METROPOLITAN EDISON CO. |
| References | |
| NUDOCS 8009290155 | |
| Download: ML19337A517 (12) | |
Text
p[
'9,[# '
UNITED STATES y '(;g() 4 y g
NUCLEAR REGULATORY COMMISSION
\\,,
j WASHINGTJN, C. C. 20555
\\j %*
,o#
September 16, 1980 Docket No. 50-289 Mr. R. C. Arnold Senior Vice President Metropolitan Edison Company 100 Interpace-Parkway P:esippany, New Jersey 07054 Deer '4r. Arnold:
Enclosed is a copy of a draft of our Human Factors Engineering Control Room Design Review of TMI-1.
We would like to arrange a meeting during the week of October 6, 1980 to discuss the report, your comments, and corrective actions you propose.
Sincerely,
[jf/.
bl_ g Robert W. Reid, Chief Oper: M"g Reactors Branch #4 Divisicn.f Licensing
Enclosure:
Draft cc w/ enclosure:
See next page 8000s90l$$
4
DRAFT Human Factors Engineering Control Room Design Review Three Mile Island ~- Unit 1 During the week of July 21-25 a human factors engineering design review of the TMI-l control room was conducted. The review was perforned by the Human Factors Engineering Branch, Division of Human Factors Safety. The review team was assisted by human factors consultant Harold E. Price of Biotechnology, Inc.
The following sections summarize the staff's observations of control room design and layout, and of the control room operations interactions with that envi ronment. Where possible, observed deficiencies were given a subjec+.ive rating based on the potential for that deficiency to induce an operator error during performance of a critical activity. These ratings are divided into three categories:
1.
Serious Concern - Human / System performance degradation with serious poten-tial safety consequence.
2.
Moderate Concern - Human / System performance degradation with moderate potential safety consequence.
3.
Other Concerns - These require an evaluation by the licensee for future rasolution.
d 4
4
-*e=
- s
,4 ee W
, =
-moe
,g
. DRAFI 1.0 Annunciators / Alarms a.
System lacks a separate, audible alarm acknowledge / silence control.
This in combination with the one acknowledge signal permits operators to acknowledge alarms without reading alarm windows.
(Category 1) b.
There is a minimal annunciator prioritization (Reactor Trip /
Turbine Trip) and tiles with blue corners associated with En-gineered Safeguards Actuation System (ESAS). Other system annun-ciators with safety significance have no priority. Some blue markings on ESAS alarm tiles are readily identifiable.
(Category 1) c.
Some annunciators tiles have busy legends.
(Category 2J 2.0 Process Computer i
CRT display of poor quality and could increase the probability a.
of reading error.
(Category 1) b.
Process computer capability is limited and its Vintage raises question of reliability of information presented to operators.
(Category 1)
Neither the CRT display nor the alarm printer utilize color coded c.
displays, ' (Category 3) d.
Computer backup control panel is not used by operators.
(Category 3) 6
'M "N
9.
ed.-W se, e
, g
.~
DRAFT
~'~
3.0 Controls (General) a.
Controls (J handle, etc.) located near front edge of console could be inadvertently activated.
(Category 1) b.
Set points knobs on Bailey controllers do not lock, and can be accidently rotated. (Category 2) c.
Violation of plant convention for auto / manual positions on some multiple position rotary controls (Sync. Scope and Voltage Reg-ulator).
(Category 1) d.
Legend switch covers are interchangeable.
(Category 1 )
e.
Legend indicators contain numerous-burned out bulbs.
(Category' f.
Many illuminated legend switches are difficult to read.
(Category 1) 9 "J" handle switches are frequently in a position contrary. to the flag indicator color.
(Category 3) h.
Bailey controllers indicate demand signal rather than valve position.
(Category 2)-
4.0 Displays (General)
'a. Panel legend lights do not provide positive indication because of poor contrast with panel backqmund, especially for certain green colored tiles.
(Category 1) b.
Glare is present on all vertical indicators resulting in reduced readability.
(Category 2) c.
Normal operating ranges or set points are not indicated on vertical meters.
(Category 2) a
- .*.,em mag e-M en
DMFI d.
Normal or desired position in strings of meters does not line up for easy monitoring.
(Category 3 )
e.
Most meters fall at mid-scale position.
(Category 1 )
f.
For some motor driven valves, an open circuit breaker inhibits valve position indication (i.e. valve position cannot be determined).
(Category 1) 9 Bailey meter scales do not meet basic human engineering standards (scale internal were poor).
(Category 3) h.
Backlighted legends are diff' cult to read.
Room lighting is dim, contrast is minimal, lettering is crowded and busy and discolora-
~
tion on scratched surfaces is frequent.
(Category 2).
- i. No lamp test capability on control boards or panels.
(Category 1) t
~
- 5.0 Labeling (General) a.
Color meaning is not consistant.
(Category 1) b.
Mimicing is used minimally.
(Category 3) c.
In general, labels are used only at the component level, not at the group, function, system or paneh level.
(Category 1) d.
The use of colors labe'Is is not consistent, for example, blac.:/ white background and print.
(Category 2)
Makeshift labeling was observed on many components including penciled e.
on switch nomenclature, hand letters labeled and vertical meter scale value and the use of dyno tape.
(Category 1) f.
Labels are not all permanently attached.
(Category 1) g.
Little or no use of demarcation lines to separate systems, subsystems, functional grouping, etc.
(Category 1) h.
Labels are wordy, because the function of a system is repeated on each switch of a group.
(Category 2) 6.0 Control Display Relationship
~~
6.1 General - Related controls and displays.do not consistently have both nomenclature and component designation.
(Category 1) f 6.2 Makeup and Purification System a.
Makeup pumps are not grouped together.
(Category 2)
I b.
Lacks positive indication of flow when makeup pump is running.
Indication by an Ameter only that pump is running.
(Category 2)
DRAFT
+
c.
Cannot see seal leak strip chart recorder when using seal injection fl ow.
(Category 3)
~
d.
Dual purpose meter for RC Pump seal 6P and Lab Seal DP has different scalis which could be confusing.
(Category 3) e.
It is impossible to verify a required reading of 3 Flow Meter which has Scale Values of 0 to 16 (x 10)gpm flow on the RC Makeup (Category 1) '
f.
Boration capability is on the 1.1guld. Waste System which is remote to main control console (LWS).
(Category 3) g.
Letdown flow meter is in gpm while scale on controller is in percent and must be converted before setting.
(Category 2) h.
There is no Engineered Safeguards / Safety Irdection annunciator window.
(Category 1) 1.
Engineer Safeguards Actuation Panel has blue status lights which are difficult to interpret as being "on."
(Category 1)
- j. Valve positions (containme it isolation) at bottom at Engineered Safeguards Actuation Panel can't be seen from main console. Also, there appeared to be no color sequence or pattern to help check which valves should be opened or closed.
(Category 1) k.
No direct indication on a Decay Heat Removal (DHR) system is apparent.
(Category 1)
, 1.
DHR temp and DHR cooler temp indicators are side by side but have different scale multipliers.
(Category 2 ',
LPI valve alignment is not sequentially crganized or grouped on m.
panel.
(Category 3) n.
DH, 5, 6, 7 valve controls are not included in mimic.
(Category 2 )
6.2 HVAC System Train "A" controls are on right and train "B" controls are on a.
left side.
(Category 3) b.
No separation or demarcation of grouped J handle control switches (9 in a row).
(Category 2)
Five trend recorders (air flow) are at top of panel (6'6") with c.
excessive glare which requires standing on a stool and lifting covers to be read.
(Category 3) d.
Labeling does not contain information which indicates time required for depressing and holding manual fan start control to start fan (varies by fan, 30 to 90 sec.).
(Category 3) 7.0 Sound Level Readinor The IBM - Selectric printer is 65 dbA while typing.
This level is a.
5 to 6 dbA above ambient and 4 to 5 dbA above most alarm levels.
(. Category 2) b.
Main control board alarm is below ambient noise level.
(Category 1)
=
WeMeg
.g_
Panel left (PL) alarm is only 1 dbA above ambient noise level.
(Category 1) c.
d.
Right Panel Front (PRF) alarm is only ldbA above ambient noise level (Category Liquid Masta System alarm is below ambient noise level.. (Category 1) e.
8.0 Other Observations Diesel Generator Governor has no indication on J handle switch for a.
fast / slow speed control which is inconsistant with other speed controls.
(Category 2 )
b.
Unrelated " Reactor Building Emergency Cooler B&C" displays are located in the center of the diesel panel.
(Category 3 )
On DHR system, controls for loop A and B were not associated with c.
their dis' plays which are located approximately 8 feet away.
(Category 2) d.
One DHR indicator and control switch which are located on loop B panel actually belong to loop A panel.
(Category a Discrimination between systems and subsystems is difficult because of e.
lack of use of demarcation lines and color coding.
(Category 1) f.
Auxiliary Feedwater system lacks a flow meter.
(Category 1)
The ICS system is spread out over 3 panels.
(Category 3) 9 h.
Control / display arrangements for ICS (feedwater, steam level) are not apparent.
(Category 2) 4 9
m 4..
-n
.____ _____ __ 9.0 Remote Shutdown Panel (RSP)
Is not independent of the control Rooi.' - some actions are required in a.
control room.
(Category 1) b.
(Category 1) c.
Communication is by sound powered mike with no mike in area.
Communication is also by
}
~
Center (Key kept in CR).
(Category 1) d[ No scott-air packs near RSP.
(Category 2) 10.0 Shift Supervisor Office a.
No emergency lightin9 is provided in this office.
(Category 3) b.
No scott air packs are stored in this office.
(Category 3) 11.0 Communication in Control Room a.
Only one non-dedicated c'Jtside telephone line.
(Category 3) b.
No sound powered mikes are readily avsilable (Category 1)
Ifeaknesses in radio communications with technician outside the CR.
c.
(Category 1) d.
Some inoperable page telephones in the plant area. Some areas in plant are not reachable by phone. (Category 2)
Page system unintelligible in some areas of plant due to ambient e.
noise levels.
(Category 3).
. 12.0 Control Room Equipment a.
Three Scott Air Packs are kept in the CR, but there are eleven people planned to be in the CR during emergency operations.
(Category 1) b.
Air refill bottles are stored 3 floors below the CR.
Elevator failures makes transport of airpacks difficult. (Category 3) 13.0 Tech Support Center a.
fio airpacks are available.
(Category 1) b.
flo emergency lighting is provided.
(Category 1) 14.0 Emergency Procedures a.
Innediate action steps are too detailed some sith an excessive number of steps required to be completed immediately.
(Category 3 )
b.
Steam Line Break procedure is written as an abnormal procedure rather tr an an, emergency procedure. (Category
..)
Some steps which require 2 operators to implement are not noted. (Catego y 3) c.
- d. 'So.me procedures, ha.ve notes.before symptons which are actually action,
e
. steps. Many notes. in procedures are actually steps.
(Category 3)
- e. Some procedures referenca control and display labels by. names different from the names actually used on the labels:- (Category 2),,
'F n
,4,
.__,,1,__
i
~
m
,l,,'.'"..<.
~'~,..*..'".4...
- %., 7.-**
-a w,
-?
,,..,,,,,;,. ','*;. 's
.:,, a. '.. ~
- 4..,., -
- -*E*-i'd
$ t<. e., d..'s. 6.,.s.$,*, y, i
,;g,'
- '....,g.,.*
, '.;[(
- y yg
,..g, y
6 0
. t 15.0 Lighting a.
Lighting was not specifically designed for reading labels, displays and meters.
(Category 2) b.
Direct glare from overhead lights on both controls and displays made readability difficult.
(Category 2) c.
fio lighted exit sign in the control room.
(Category 2)
General Comments fio formal system exists for providing operators feedback about k a.
suggestions made.
b.
Sub-cooling instrumentation is not in place and operating.
In-core thermocouples (te ) have been connected to the process computer, c.
s a monitoring program has been written and the system is in the checkout An NRC team wi_ll review the functionability of the system from process.
a human factors engineering point-of-view before restart.
?.
e t.'.-
a..
~ -
s
=
4 3
'.i.' L' -
,s.
T'..
m-
~
,,l,,
..-4 c..
- .. :. c. :
...C.+.:-.cc...._;,,3
.;., _;, ; 3 ;,, j, - - s f;.,, _.,.,; w,g ;g 3
.