ML19344A695

From kanterella
Jump to navigation Jump to search
Forwards Response to Human Factor Control Room Review, Detailed in 800730 Meeting.Acceptable Resolutions Found for Each Item Identified by NRC Review Team
ML19344A695
Person / Time
Site: McGuire, Mcguire  Duke Energy icon.png
Issue date: 08/15/1980
From: Parker W
DUKE POWER CO.
To: Harold Denton, Youngblood B
Office of Nuclear Reactor Regulation
References
NUDOCS 8008210487
Download: ML19344A695 (18)


Text

s' e-DUKE POWER COMPANY Powra Bun.ntxo 422 Sottru Cucacu Srazzr, CHAR 14Trz, N. C. asa4a WILLIAM Q. PA R M E R, J R.

V'Ce Persicant 7t gn=omt:Anta 704 Seta Pocowetion 373-4083 August 15, 1980 Mr. Harold R. Denton, Director Office of Nuclear Reactor Regulation U. S. Nuclear Regulatory Commissior.

Washington, D. C.

20555

'- ~~^~

Attention:

Mr. B. J. Youngblood, Chief Licensing Projects Branch No.1 Re: McGuire Nuclear Station Units 1 and 2 Docket Nos. 50-369, 50-370

Dear Mr. Denton:

Attachen is Duke Power Company's response to the human factor review of the McGuire control room by the NRC Staff. These responses are concise and direct since all of the items have been discussed in detail with the Staff in a meeting on July 30, 1980 in Bethesda. In that meeting and previous meetings, slides and handouts were used to outline in some detail our effort to improve the control room as a result of both the NRC review and Duke's own review. This has involved a four man-year effort on Duke Power Company's part to date.

The attached represents what we perceive to be acceptable resolutions for each of the items identified by the NRC review team.

If there are questions regarding the attached, please advise.

V truly yours, 5

.N

/

M-0'/

Qj William O. Parker, Jr.

GAC:vr Attachment

\\

b,\\ \\

i 800.8.210 jf7

ATTACHMENT 1 McGUIRE NUCLEAR STATION I

RESPONSE T,0 NRC CONTROL ROOM REVIEW 1.

ANNUNCIATORS / ALARMS (1) HRC OBSERVATION - No signal to notify op.cator that an alarm has cleared.

(Category 1)

RESPONSE - The alarm system at McGuire consists of both annunciator and computer alarms. While there is no signal to nofity the operator that an annunciator alarm has cleared, the computer prints a hard copy record of computer alarms as they clear.

This arrangement has proven adequate in other generating stations of the Duke Power System.

(2) NRC OBSERVATION - No auditory alarm silence with alarm save capability.

(Ca tegory 1)

RESPONSE - An additional acknow'.edgement pushbutton for each annunciator group will be incorporater so that the audible may be silenced with the alarm light continuing.o flash until it is separately acknowl-edged. This will be completed by fuel loading.

(3)

NRC OBSERVATION - Flash rate for alam.ing windows is less than 3 per second.

(Category 3)

RESPONSE - The visual " flash rate" will be changed to 3 to 5 per second (approxima tely 50% "on," 50% "of f").

This will be done by fuel load-ing.

(4)

NRC OBSERVATION - Yellowing of annunciator windows (with age) results in blue colored windows appearing green.

(Category 3)

RESPONSE - Only three basic colors are involved in the priority assign-ments, and the appearance of blue as slightly green does not affect discrimination between priorities or the operator's color sensitivity.

However, station procedures will be instituted to periodically inspect and. replace windows where readability has been impaired.

This will be done by fuel loading.

(5)

NRC OSSERVATION - Small panel sizes result in poor readability of panels at distances beyond 13 feet.

Size and weight of letters used contribute poor readabili'.

(Ca tegory 3)

RESPONSE - On the Main Control Boards, the location of the annunciators with respect to their associated displays and controls permits usage within this distance.

The annunciators in the upper portion of the HVAC control board will be reengraved to improve readability.

This will be done by fuel loading.

L

-2 ANNUNCI ATORS/ ALARMS (Contd.)

(6) NRC OBSERVATION - Some auditory alarm signals have sound levels only slightly greater than the ambient cor.~rol room sound level.

(Ca tegory 1)

RESPONSE - The level of the audible alarm is adjustable and will be adjusted to 7-9 dbA above the background average. This will be done by fuel loading.

(7) NRC OBSERVATION - Lamp replacement in annunciator panels is dif ficult and provides opportunity for accidental actuation of panel-mounted switches and controls.

(Category 2) o RESPONSE - A second operator will be made available to assist the one changing the lamps and to detect and correct any inadvertent actuation.

Instructions will be issued to this effect by fuel loading.

)

i I

.~

3 2.

OPERATOR / COMPUTER INTERFACE (1}

NRC OBSERVATION - Computer lacks graphic trending capability.

(Category 3)

RESPONSE - Computer points can be assigned to twelve analog recorder pens to provide trending capability, as requested by the operator. Also, a transient.moni toring program is used in the computer system.

It includes approximately 100 analog points and 25 digital points, and It stores data for 10 minutes prior to selected events as well as 4

for 30 minutes following the event. The stored data may be accessed in tabular or plotted form via hard copy and/or CRT. display.

(2)

NRC OBSERVATION - CRT's are difficult to read at distances beyond 8 to 9 feet.

Information displayed in red is not readable beyond 5 feet.

(Category 2)

RESPONSE - This is within reasonable design objectives for the basic control room layout. Under normal (reduced)' lighting level as

' selected by the operators readibility is even bette "

orther, computer usage is supportive to other instrumentation.

In addition, the CRT's will be tilted forward and/or will incorporate hoods as required to enhance readability. This will be done by fuel loading.

a l

(3) NRC OBSERVATION - Insufficient emphasis is placed on operators to fully use the control room computer capabilities.

(Category 3)

RESPONSE - Operators are-trained in the use of the computer for those functions provided to support operation of the plant. Operators are not necessarily familiar with those capabilities of the comput ?"

used by supporting groups within the station in the conduct of special tests or periodic maintenance. Additionally, since the computer I, supportive to other instrumentation, operators are trained to be able 4

to operate the plant without the use of the computer. However, to assure an indepth understanding of-the operator aid functions of the computer, additional training for control room operators will be conducted on the use of the computer prior to fuel loading.

(4)

NRC OBSERVATION - Computer printouts are very difficult to read (very faint print).

(Ca tegory -1)

I RESPONSE - Faint print has been resolved by ribbon replacement.

The ribbon will be replaced on a regular basis to ensure readability.

Appropriate instructions to assure this will be issued by fuel loading.

4 4

d r

-,_,.__-__m m-.-..

-4 OPERATOR / COMPUTER INTERFACE (Contd.)

(5) NRC OBSERVATION - Computer has a "two page" capability to display messages but there. is no provision for alerting the operator that some alarm data has been folded over to page 2.

(Category 2)

RESPONSE - The Alarm Video will display each new alarm (identified by the

> cursor) in red until it is acknowledged when it turns green.

If the alarm display is not full, no other alarms exist.

If the alarm screen fills up (i.e., 40 alarms), a new alarm will displace the oldest (acknowledged) alarm, which is removed to a "back up" queue.

The fact that the alarm video display is full indicates that there may be older alarms in the back-up queue.

The concept of the Alarm Video display is one of an interface for the operator to observe and acknowledge incoming alarms. All computer alarms are also printed on the alarm printer.

A complete list of all points detected in alarm can be displayed by an operator request for an alarm " Point Status Summary Display," and operators are trained in the use of this display.

If more than one page of points in alarm exist, there will be a visual statement (a t the bottom of the current display list) instructing the operator to go to the next page.

Each incoming alarm is detected and stored with all the data for that point in the data base. The maximum rate at which new alarms are processed is limited by the scan rate for the input points - once every 400 milliseconds for digital points or up to several minutes for certain classes of analog points.

i 3

- ~.

-5 3

CONTROLS (1)

NRC OBSERVATION - Control switches are located 2 inches from console edges. There is no provision (e.g., a console rail) for protecting these switches from accidental actuation.

(Category 1)

RESPdNSE - All E30 switches along console edges will be fitted with a collar that prevents accidental actuation.

This will be completed by fuel loading.

(2)

NRC OBSERVATION - Some controllers have reversed scales (C at top 100%

a t bottom.

(Category 2)

RESPONSE - Installation of "Open" and "Close" labels (Red "0" and Green "C") has been completed as an intermediate step to properly define direction. Controllers will be replaced (and signal reversing relays incorporated where applicable) by the first refueling.

(3) NRC OBSERVATION - Some controllers do not provide direction-of-movement indications - e.g., right-to-close, left-to-open.

(Category 3)

RESPONSE - Rotational arrows indicating the increase or opan direction-are being applied to controller knobs. This will be ompleted by fuel loading.

(4)

NRC OBSERVATION - Control grouping is not based on contro function or sequence or on component impo rtance. This results in additional operator search time in locating a specific control.

(Category 1)

RESPONSE - Duke Power Company's Review Task Force has identified this problem, insofar as nuclear service water and safety injectinn systems are concerned.

(A)

For the safety injection system, switches involved in the switch-over to recirculation have been emphasized with cut!!nc strips.

This is complete.

(B) A-grid matrix identification scheme with appropriate references made in the Operating Procedures will be applied to the nuclear service water system components. This will be completed by fuel load.

(C)

In addition, the labeling program has identified Train A and Train B components cf all systems in order to minimi:r. potential confusion. This program is complete.

(5) NRC OBSERVATION - Controls used only during start-up and shut-down (i.e.,

not used during normal operation) on some panels 4.e., Si c/2cem)~

occupy panel space that could be used during normai ecerations and emergencies.

(Category 2) 4

. - _ ~..

-6 CONTROLS (Contd.)

RESPONSE - Significant valves have been highlighted by outlining and relabeling to emphasize the more important ones in use.

This has been~compJeted.

-(6) NRC OBSERVATION - Strings of more than 5 controllers increases possibility of selection error.

(Category 3)

RESPONSE - Improved labeling has been applied to all groups of contrc'.lers to reduce error potential. This program is' complete.

(7)

NRC OBSERVATION - Switch / Control movements violate stereo-typical conven-tion (e.g..,

rod selector switch).

(Category 2)

RESPONSE - Rod Group Selector Switch orientation and escutcheon labeling is being changed to match (left to right) the rod group position indicator sequence. This will be complete by fuel loading.

Five specific rotary switches used in emergency operations will be modified as required to be consistent with our convention. This will be done by fuel loading. All othera not consistent with our convention will be modified as necessary b, the first refueling.

(8) HRC OBSERVATION - Auxiliary Feedwater pump turbine reset buttons are physically separated f rom each other.

(Category 3)

RESPONSE - The auxiliary feedwater system is designed to provide automatic initiation when necessary. The reset buttons are uf ed during return to normal sequences. Based on existind separation und location, as well as operating experience, the safety impact and error potential is I

considered minimal.

(9)

NRC OBSERVATION - Illuminated position indicators on control and switches do not have lamp test capability.

(Category 2)

RESPONSE - Lamp / switch status verifica ion is a check point at shif t-change to which both oncoming and leaving operators must sign off.

In addi-tion, should both position lights be out (indicating possible lamp failure), the operator can determine the position of a safety related valve by observation of the monitor light panel or by means of a computer video display or printout.

(10) NRC OBSERVATION - Legend light bulb replacement (on controllers) can lead to mislabeled status indicators if more than one lamp is replaced at the same time.

(Category 1)

RESPONSE - Position labels have been added to the controllers.

This, together with scale indications and parameter indications, provide instant correlation. This has been completed.

5

,, -. _ - ~,

-7 CONTROLS (Contd.)

(11) NRC OBSERVATION - Control layouts do not mimic systems or subsystems.

(Ca tego ry,3)

RESPONSE - Refer to response on Controls, Item 4, and Labeling, item 1.

-8 4.

DISPLAYS (1) NRC OBSERVATION - Operating raages (nornal-warning-abnormal) are not displayed.on meter faces.

(Categcry 2)

RESPONSE - Abnormal limits have been selecttd based on Technical Specifi-cations, limits' associated with normal plant operation, unit operability or equipment damage, whichever is more conservative. Preliminary marking of scales above and/or below these limits will be made by the application of red tape to scale covers. Upon verification of operating ranges, all scales (where range marking is applicable) will be replaced with permanently marked (painted or enameled) scales.

Indicators for safety related systems will be marked preliminarily with tape by fuel loading. Marking will be completed on a permanent basis by the first refuel * <.

(2) NRC OBSERVATION -Valve controls for nuclear service water valves powered by Unit 2 power supply do not light on the Unit I control console or vice versa.

(Ca tegory 1)

RESPONSE - This will be changed so that the switch lights on both Units will be active (regardless of from which Unit the system is powered) and a status light on MC9 will be ' incorporated in the control system on each Unit's control board to indicate the unit is powering these valves. These changes will be incorporated by fuel loading.

(3)

NRC OBSERVATION - Clustering of 5 or more indicators interferes with prompt indicator identification.

(Category 3)

RESPONSE-Thishasbeencorre[tedbyimprovedlabeling. This program is complete.

(4) NRC OBSERVATION - Circular displays are difficult to read.

Contributing factors are letter size and weight and Illumination level.

(Category 3)

RESPONSE - In addition to the already conpleted labeling program, these instruments will be rescaled for clarity, eliminating double ranges.

This will be completed by the first refueling.

NRC SUPPLEMENTAL COMMENT - Instrument Air Indicator has non-typical graduations (increments of 4 per unit, readability of scales is questionable). Air Ejector Vacuum indicator is marked both " inches of Mercury Vacuud' and " pounds per square inch gauge." Out-of-service pointer position needs clarification.

i RESPONSE - Th' instrument Air Indicator is being refitted with a scale with major d visions and pressure indications at 0, 50, 100 and 150 psig, intermediate division at 10 pound intervals and minor divisions at.

5 pound intervals. Graduations will be in center of scale so that pointers do not cover them.

The vacuum indicator scale will have the "psig" engraving removed.

Corrections will be completed by fuel loading.

-9

-DISPLAYS (Contd.)

The Vacuum Indicator is a pneumatic receiver gauge operating on a 3 to 15 psig signal corresponding to the measured range of 30 inches i'

vacuum to,0.

Thus, on failure of signal the gauge will go to the bottom of the scale - i.e., below 30 inches. Station proced n es address failures in the. Instrument air 3/rtem.

(5)

NRC-OBSERVATION - Selector switches for strip chart, recorders can be

_placed in an intermediate (no selection) position.

(Category 2)

RESPONSE - This deficiency will be corrected by replacement with switches having positive detent.

Completion will be by first refueling.

e 5

t 1

i J

1 I

L

-10 5

CONTROL / DISPLAY lilTEGRATION (1) NRC OBSERVATION - Control / display grouping by function or importance is not always followed (e.g., CVCS panel) operator perceptual - Motor patterns cannot be developed.

(Category 2)

RESPONSE - Refer to item 4 under Contruls.

in addition, improved label-ing and train identification has been applied to improve operator-perception. This work is complete.

(2)

NRC OBSERVATION - Integral control / display layouts on bench panels are not always in the order of operational sequencing and can contribute to operator selection error.

(Category 2)

RESPONSE - Refer to item 4 under Controls.

In addition, improved label-ing has been applied to minimize this selection error patential and is complete.

c s

3 4--,

, - -,, ~,, - ~

r m.

n.,-

.c----

-11 6.

LABELING (1) NRC OBSERVATION - Use of mimic diagrams on the control panels is minimum.

(Ca tego ry.2)

RESPONSE - CRT graphics, improved labeling, group / item outlining, and s*jstem demarcation is used in lieu of mimics.

(2) NRC OBSERVATION - Some labels are dif ficul t to read.

(Category 1)

RESPONSE - A program for replacing all labels with new standard nameplates has been completed. Those labels for the row of switches (E30's) at the rear of the flat console surface will be raised by use of a thick spacer to facilitate visual clearance of the switches. This will be completed by fuel loading.

(3)

NRC OBSERVATION - Some labels are missing.

(Category 1).

RESPONSE - All components on the control board have been adequately labeled.

(4) NRC OBSERVATION - Some cabinets and panels lack system labels.

(Category 1)

RESPONSE - All cabinets / panels will be identified by. system labels.

[his

~'

will be fully completed by fuel loading.

(5)

NRC OBSERVATION - Abbreviations.are inconsistent from label to label.

(Ca tegory 2)

RESPONSE - A standard abbreviation list has been used in our relabeling program.

(6) NRC OBSERVATION - Some Train A - Train B systems are not color coded for distinction.

(Category 2)

RESPONSE - The relabeling program included the color coding of trai..

power supplies by an identifying strip at the ends of each label and is complete.

.(7)

NRC OBSERVATION - Relabeling to a consistent format and color code scheme has not been completed.

(Ca tegory 1)

RESPONSE - All labeling to consistent formats and color code schemes is now complete, i

-12 7

COMMUNICATIONS (1) NRC OBSERVATION - There are no sound powered headsets in the control room.

~

(Category 2)

RESPONSE - At the time of the review team's visit to McGuire, there were no sound powered headsets in the control due to the status of the construction and testing effort. A full complement of sound-powered phones (consisting of four phones) is now in place in the control room.

(2)

NRC OBSERVATION - There are no explicit procedures for handling communica-tions during an emergency.

(Category 1)

RESPONSE - Communication procedures for various emergency conditions are outlined in the emergency procedure for each condition.

Procedures which have this communication information in them include:

Alert - EP/0/A/5032 Site Energency - EP/0/A/5033 General Emergency - EP/0/A/5034 These procedures designate the shif t supervisor as the emergency coordinator until relieved by the acation manager or his designee.

As such, he is responsible for answeri.1g phones, contacting appropri-ate onsite and offsite personnel and agencies and handling communica-tion in general.

(3) NRC OBSERVATION - There is no operations center phone (NRC hotline) in the control room.

(Category 1)

RESPONSE - Arrangements will be made with the NRC resident inspector at McGuire Nuclear Station to assure installation of an "NRC hotline" in the control room and other appropriate plant locations before fuel loading.

(4) NRC OBSERVATION - There is no intra-control room communication system to the HVAC panel or to the in-core probe panels.

(Category 3)

RESPONSE - A new phone station tied into the plant phone system will be installed at the HVAC panel. Additionally, a long cord will be added to an existing phone station in the rear of the control room which will reach the in-core instrumentation cabinet.

(5) NRC OSSERVATION - There are no communication systems at the remote shut-down panel.

(a) A plant phone is located in the general vicinity of the panel',

but not within reach of an operator standing at the panel.

r,_

-.m.____..

-13 COMMUNICATIONS'(Contd.)

(b) A sound-powered phone jack is located at the panel, but no

- phone / headset was stored at this location.

(Category 1)

RESPONSE'- An ' extension to the plant phone system will be added adjacent to the remote shutdown panel. Additionally, a sound powered phone

' headset will be stored inside the remote shutdown panel.

Both of these items will be completed prior to fuel loading.

i f

4 1

W i

I

=

I i

,w,>

,,,r--

r

,,,,-~--,y-v,.c.y-

..y

.+..~_rw.,_.,,-.,-,.w--,,.w,

,,.,,,,.-n-,e

-14 8.

EMERGENCY EQUIPMENT (1) NRC OBSERVATION - Access to self-contained breathing equipment (survivor pack) is festricted. This gear is now located is the shift supervisor'c office, which is not a part of the control room controlled area.

Future storage of this gear at the rear of the control room (in locked cabniets) will require going to the shif t supervisor's office for the cabinet key.

(Category 1)

RESPONSE - Four self-contained air breathing packs are mounted at the rear of the control room in unlocked storage boxes. A fifth unit will be mounted upon receipt of mounting hardware.

(2)

NRC OBSERVATION - The number of pieces of protective gear (and extra air supplies) to be stored in the control room is not known.

(Category 2)

RESPONSE - In addition to the five self-contained air breathing packs described in item 1, a cart with two high pressure air bottles and a' manifold is available in the control room. Six air breathing masks capable of being connected to the air bottles' manifold are stored in the control room for operator use. Also, spare bottles (s20) for the survivor packs are stored in an area adjacent to the control room.

These bottles are under the custody of station Health Physics personnel.

i i

-15 9.

CONTROL ROOM WORKSPACE/ ENVIRONMENT (1) NRC OBSERVATION - Ambient noise ' levels approach 65 DBA.

Most of this noise comp from the ventilation system and is expected to have a constant pitch and sound level.

(Category 2)

RESPONS2 - Noise level is within OSHA and Mil. Std. limits.

(2) NRC OBSERVATION - Background sound levels are high enough to interfere with normal verbal communications at distances beyond 10 feet.

(Category 2)

RESPONSE - This meets minimum Mil. Std. requirements.

(3) NRC OBSERVATION - Emergency DC lighting results in glare on some panels.

Displays on these panels are difficult to read.

(Category 3)

RESPONSE - Duke will retain a lighting consultant to review normal and emergency control room lighting to ensure acequate illumination under credible operating conditions. This survey will be completed by the end of 1980. Approporate modifications will be made by the first refueling.

(4) NRC OBSERVATION - Some back panel controls require excessive reach for actuation.

(Category 3)

RESPONSE - During actual operating and simulator experience, it has been noted that all controls c;an be reached.

(5)

NRC OBSERVATION - Some displays on back vertical panels were at illumina-tion level less than 30 foot candles.

(Category 3)

RESPONSE - Lamps will be cleaned and replaced where necessary by fuel loaj-Ing. This item will also be included in the response to item 3 of this section.

(6)

NRC OBSERVATION - Lighting quality may be affecting readability (of labels).

(Category 3)

RESPONSE - Relabeling with black letters / white background to improve read-ability has been completed. The impact of lighting will be included in the program outlined for item 3 of this section.

-16 10.

EMERGENCY PROCEDURES The McGuire emergency procedures are currently being reviewed and, in many cases, repategorized.

It is our intention to subdivide the current emergency procedures into abnormal operating procedures and emergency procedures. Under this new classification, the following procedures, as a minimur., will be included in the category of emergency procedures; 1)

Loss of Reactor Coolant 2)

Steam Generator Table Ru'pture 3)

Steam Line/ Feed Line Rupture 4)

Implementing Procedures for the Station Emergency Plan Additionally, procedures for 1) through 3) above are being revised to better conform to the Westinghouse guidelines. Upon completion of this effort, these procedures will be submitted for NRC review.

During this procedure revision process, the following will be incorporated to the extent practical.

10.

a.

(1) 10.

a.

(6) 10.

a.

(2) 10.

a.

(10) 10.

a.

(3) 10.

a.

(11) 10.

a.

(4)

It is expected that subsequent NRC staff review of the revised procedures will verify satisfactory implementation.

Responses to the remaining commer.ts are outlined below.

(5)

NRC OBSERVATION - Only one set of emergency procedures is located in the control room.

(Ca tegory.1)

RESPONSE - A working copy file for all emergency procedures will be estab-lished in the control room. This will assure sufficient copies of each procedure will be available in the control room.

(7) NRC OBSERVATION - The emergency procedures index is not up to date.

j (Category 1).

RESPONSE - The emergency procedures index has been updated. The control room receives an updated procedure index via a distribution list frem the Station Master File periodically.

(8) NRC OBSERVATION - Storage facilities for emergency procedures are inade-quate, and procedures are not individually available.

(Category 1)

RESP 0 HSE - See response to item 5 Individual copies of emergency proce-dures will be available with the establishing of working copies of these procedures.

(9) NRC OBSERVATION - Procedures do not provide a means for " checking off" completed steps of the procedure.

(Ca tegory 2)

= ~...

. - ~.. - ~.... -,..,... _. _.

9

/

l

-17 i

EMERGENCY PROCEDURES (Contd.)

RESPONSE - The emergency procedure for loss of reactor coolant, steam /

feedline break and steam generator tube rupture will be revised to include provisions-for checking off appropriate steps in these procedures.

i 1

)

l i

.i I

w h

o 4

l l

l s

,,...,_,..v-

....... _ _ - > - -....,,, -. - -,, ~, -,.. -

....... _, -,, - -,..