ML20093A391
| ML20093A391 | |
| Person / Time | |
|---|---|
| Site: | Wolf Creek, Callaway, 05000000 |
| Issue date: | 06/30/1984 |
| From: | NUCLEAR PRODUCTS CO. |
| To: | |
| Shared Package | |
| ML20093A388 | List: |
| References | |
| RTR-NUREG-0737, RTR-NUREG-737 GL-82-33, NUDOCS 8407100433 | |
| Download: ML20093A391 (174) | |
Text
-
Attachment to SLNRC 84-99 REVISION 1 TO THE DETAILED CONTROL ROOM DESIGN REVIEW
SUMMARY
REPORT FOR SNUPPS Wolf Creek Plant - Kansas Gas and Electric Co.
Docket No. STN 50-482 Callaway Plant - Union Electric Company Docket No. STN 50-463 In Response To:
NRC Generic Letter 82-33 Supplement 1 to NUREG 0737 Revised June 1984 8407100433 840629 PDR ADOCK 05000482 F PDR
Preface to Revision 1 Revision 1 to the Detailed Control Room Design Review (DCRDR) Summary Report for SNUPPS is the Supplement to the original Summary Report identified by reference 12. Commitments made subsequent to the refer-ence 12 transmittal contained in NRC's "Resul ts of Preimplementation Audit" are reflected in this revision. Revision bars are provided to identify areas of change from the original Summary Report and changes to responses from findings resulting from the Initial Essex and NRC Review (Preliminary Design Assessment), transmitted by reference 10.
Except for the environmental survey results and the SNUPPS responses to the new NRC concerns identified in NRC (Youngblood) letter to UE (Schnell) and KGE (Koester) dated June 05, 1984, all of the revisions have been transmitted to or discussed with the Staff and are addressed by the Staff
.in their June 5th, letter. The decision for no action to selected findings has been previously agreed to by the NRC, except for those under the Environmental Survey. Preliminary results of Callaway's Environmental Survey were reviewed by telephone conversation with the NRC on April 20, 1984.
Note: The references listed within this Revision refer to those listed in Section 4.0 " References to SNUPPS Submittals to NRC on DCRDR".
12a17
TABLE OF CONTENTS Page 1.0 METHODOLOGY 1-1 1.1 Review Plan 1-1 1.1.1 General 1-1 1.1. 2 Constraints on Program 1-4 1.1. 3 Coordination of Control Room Improvements with 1-4 Other Programs 1.2 Management and Staffing 1-6 1.3 Documentation 1-11 1.3.1 Input Documentation 1-11 1.3.2 Output Documentation 1-12 1.4 Review Procedures 1-13 1.4.1 Operating Experience Review 1-13 1.4.2 System Function Review and Task Analysis 1-13 1.4.3 Control Room Inventory 1-17 1.4.4 Control Room Survey 1-17 1.4.5 Verification of Task Performance Capabilities 1-19 1.4.6 Validation of Control Room Functions 1-19 2.0 REVIEW FINDINGS 2-1 2.1 General 2-1 2.2 Control Room-Wide Survey Findings 2-3 2.2.1 Workspace and Environment 2-3 2.2.2 Cmununications 2-4 2.2.3 Annunciator Warning System 2-4 2.2.4 Labels and Location Aids 2-4 2.3 Panel / Work Station Findings 2-5 2.3.1 Controls 2-5 2.3.2 Displ ays 2-5 2.3.3 Process Computer 2-6 2.3.4 Panel Layout 2-6 2.3.5 Control Display Integration 2-7 2.4 Other Review Findings 2-7 2.4.1 Task Performance Capability 2-7 2.4.2 Validation Program 2-7 3.0 IMPLEMENTATION 3-1 3.1 Completed Improvements 3-1 3.2 Proposed Improvements 3-1
TABLE VF CONTENTS Page
4.0 REFERENCES
TO SNUPPS SUBMI TALS TO NRC ON DCRDR 4-1 5.0 APPENDICES A. Initial Essex and NRC Review (PDA) A-1 B. Supplanentary Survey (SS) B-1 C. Human Factors Review of Auxiliary Shutdown Panel (ASP) C-1 D. Environmental Survey (ES) D-1 E. Validation of Control Room Functions E-1 F. Verification of Task Performance Capabilities F-1 G. Standard Forms Used in the PDA G-1 H. Forms Used For the Environmental Survey H-1 I. Forms Used in the Validation of Control Room Functions I-1 J. Forms Used for the Task Analysis and Verification of J-1 Task Performance Capabilities K. Specific NRC Concerns K-1
1.0 METHODOLOGY 1.1 Review Plan 1.1.1 General The scope and dates of the Detailed Control Room Design Review (DCRDR) are s amarized in Table 1.1.1.
The human engineering review of the control rom was started by SNUPPS in mid-1980 in response to TMI Action Plan Item I.D.l. The review was initiated early, before construction of the Callaway and Wolf Creek control rooms was completed, in order to provide more time to make modifications resulting from the review. The availability of a working simulator of the SNUPPS control rooms, located at the Westinghouse Training Center in Zion, Illinois, made this early start practicable. The review is applicable to both Callaway and Wolf Creek, since the control rooms are of a standardized design, except for the site-specific panels, which control the off-site power systems, the circulating water system and the service water systems. These aspects of the Callaway and Wolf Creek panels were reviewed on a plant specific basis.
In addition, Environmental Surveys have been performed independently at each SNUPPS Control Room and Auxiliary Shutdown Panel. The simulator at the Westinghouse Training Center has site-related control panels, indicators, displays and controls identical to the Callaway design.
Although the SNUPPS DCRDR began prior to issuance of NUREG-0700, the DCRDR includes all of the elements prescribed by NUREG-0700 and NRC Generic Letter 82-33. The SNUPPS review included the following tasks:
o Establishment of a multidisciplinary review tean o Review of operating experience o System functions review and task analysis o Control room inventory o Control room survey o Verification of task perfomance capabilities o Control room validation as an integrated system o Assessment of findings and implementation of resolutions The initial control room survey was performed to the guidelines of NUREG/
CR-1580. However, as will be described, the SNUPPS DCRDR included iterations that ensure responsiveness to the guidelines of NUREG-0700. For example, NUREG-0700 juidelines were used by SNUPPS to evaluate control board modifi-cations and by NRC reviewers of the SNUPPS control room.
The planning and implementation phases of the SNUPPS DCRDR are shown schem-atically in Figure 1.1.1. Most of the actions described within the blocks are self-expl anatory. Those requiring further explanation are discussed in the following sections.
1-1
TABtE 1.1.1 SCOPE OF EFFORT d A o 2 gh E Nm En M $ k2
& c ~$ 5 =5 A
UE 5 o *
- ow t No o o w$ qusv e ocx a Ae om W g ox 6 To
$$ h6 f h5 O
U i$
REVIEW EFFORT DME OF PERFORMANCE GUIDANCE DOCUMENP hh h*k *
- Of REFERENCE USED Preliminary Design August 1980 NUREG/CR- X X Ref. 2, 3, 4, 6 Assessment (PDA) to June 1981 1580 Y
NRC Audit NUREG-0700 Ref. 4, 5, 10 Review cf Aux- Sept. 1983 NUREG-0700 X Appendix C iliary Shutdown Panel (ASP)
Verification of Jan. 1983 to NUREG-0700 X X X X Appendix F Task Performance Jan. 1984 Capabilities Validation of Sept. 1983 NUREG-0700 X Appendix E Integrated System Supplementary Jan. 1984 NUREG-0700 X Appendix B Survey (SS)
Review of April 1984 NUREG-0700 A Appendix D Environmental Aspects (ES) e
Figure 1.1.1 SCHEMATIC OF REVIEW PLAN Management Actions Review Team Actions i Establish objectives; coordinate with other TMI-actions plans 4
Identify & commit resources. Select review team Identify constraints on progre: Prepare detailed work
-Construction m plans. Gather refer-Schedule e ence materials.
-Supporting WOG programs v I l Prepare schedule l I
I PLANNING - - - - - - - -
1, - - - - - - - - inerEnEwtx1Tox - - - - - -- - -
l l Perform review l l Joint Actions l
I Integrate with other '
l________g design / construction requirements.
l I
v I
Recommend control room changes l
i 1
?* v Concur with contro F room changes; initiate imp 1 menta-tion.
I I
I Final Report b_______9 -
+ Monitor Progress SineFunction 1-3
1.1. 2 Constraints on Program As previously noted, one of the constraints on the program was that the DCRDR was started when construction of the control rooms was still underway.
The availability of a working SNUPPS-specific simulator, on which utility operating personnel had initial training, made it possible to perform detailed surveys of the control panels, indicators, displays and controls.
The survey of the simulator was supplemented by surveys of the partially-completed control rooms, including the site-specific panels. However, review of control room environmental f actors: lighting, noise level, communications had to be delayed until completion
- of construction of the first SNUPPS control room (Callaway).
A second major constraint was that the Emergency Response Guidelines (ERGS) generic to Westinghouse reactors were still under development by the Westing-house Owners Group, when the SNUPPS DCRDR was begun. The ERGS are the basis for the system functional reviews and task analyses (SRTA) in the Sh0PPS DCROR. This constraint has been accommodated in the following ways. First, concurrent with the detailed survey of the SNUPPS control panels, operators who had trained on the SNUPPS simulator were interviewed about the effective-ness of the design and a limited set of emergency procedures was performed on the simulator under the observation of the Human Engineering Consultant.
Second, following completion of the generic ERGS, a full set of emergency procedures was performed on the simulator at the Callaway site. The emphasis was on the adequacy of the ERGS, but the progran was video-taped and selected procedures were later reviewed by a Human Engineering Consultant with respect to validation of the SNUPPS control room. 1hird, displays and controls identified by the SRTA as necessary for performance of emergency procedures were exanined in the context of a task analysis that followed the guidelines of NUREG-0700.
1.1.3 Coordination of Control Room Improvements with Other Programs An underlying concept of the control room design is that it must be possible to operate the plant if the plant computer and Safety Parameter Display System (SPDS) are inoperable. Therefore the primary review of the control room design assumed that the computer systems were unavailable. The review provided assurance that instrunents and controls, annunciators and status light panels on the control boards are adequate for performance of normal procedures and emergency operating procedures. However, the task analysis considered the integrated system of control board instruments and controls, the SPDS, the Radiation Monitoring System (RMS) and plant computer.
The SPOS was also reviewed separately from a Human Engineering standpoint in the course of its development by a group of utilities with Westinghouse plants. The locations of the CRTs and printers for the plant computer and SPOS have been selected by Utility Operations personnel in concert with the architect / engineer and Utility and Staff engineering personnel. ARD Corpor-ation reviewed and concurred with the SPOS location at each site during the review of control room workspace.
Management responsibility for ensuring human f actors coordination of con-tinuing activities of DCRDR task analysis, SPDS development and E0P l-4
l 1.1.3 Coordination of Control Room Improvements with Other Programs, continued development by each utility rests with the Project Manager. The Project Manager utilizes review by the DCRDR Team to ensure human engineering coordination among improvement prograns.
Because of the relatively advanced state of the SNUPPS design relative to operating PWRs, the modifications in response to Reg. Guide 1.97 have been relatively minor. The instrumentation for post-accident monitoring was reviewed as part of the primary review of the control boards. So, too, were controls and displays associated with post-TMI modifications.
Pl ant specific emergency procedures have been validated on the Callaway simulator. Each SNUPPS site has a simulator. These simulators are being updated to provide virtually complete fidelity to the control rooms. Opera-tor training at each site includes extensive training on the plant simulator.
1-5
1.2 Management and Staffing The SNUPPS DCRDR has been coordinated by the SNUPPS Staff organization, which is the central organization established by the SNUPPS Utilities to manage the design and licensing of the SNUPPS plants. A Human Factors Plant Review Group (HFPRG), ansisting of a group of professionals from the operations and engineering departments of the SNUPPS Utilities, has been continuously involved in the DCRDR. This core group of professionals was supplemented in one or more of the interrelated progras of the DCRDR by personnel from Bechtel (the architect / engineer), Westinghouse (the reactor supplier), and Human Engineering consultants.
The SNUPPS Staff and HFPRG members reviewed and becue f ailiar with the methods and content of relevant NRC reports and general human f actors engi-neering objectives and methodology. The HFPRG members are f ailiar with the design and operational aspects of the SNUPPS plants. Several members had training on the SNUPPS simulator at Zion and were able to apply that training directly in the review.
Tne organizational structure of the DCRDR Team is shown in Figure 1.2.1. The tem is headed by the SNUPPS Technical Director, who serves as Project Mana-ger. The Project Manager is responsible to the SNUPPS Technical Comittee, which is constituted of the Nuclear Engineering Managers of the SNUPPS Utilities. The Technical Committee, throughout the SNUPPS project, repre-sented the SNUPPS Utilities and has the responsibility for design decisions. .
The SNUPPS Operations Committee, which consists of the Plant Superintendants at Callaway and Wolf Creek, has also provided overview of the DCRDR and has provided input regarding design decisions to the Technical Comittee.
A Project Leader, functioning as Deputy Project Manager, provides the day-to-day coordination of the activities of the DCRDR.
Other major participants in the DCRDR are Human Engineering Consultants, Utility engineering and operations personnel, SNUPPS Staff engineers and represenatatives of the architect / engineer, Bechtel. Three Human Engineering Consultant fims were utilized in order to benefit from special expertise offered by each. Essex Corporation was selected to perfonn the initial Control Room survey because it had authored NUREG/CR-1580 and had conducted several other control room surveys. ARD Corporation was selected to assist in the preparation of DCRDR Progre Plan, because it had authored several other program plans, and to assist in the review of control room environ-mental f actors and in the task analysis. ARD was also used as the Human Engineering Consultant by the group of utilities that cooperatively developed the SPDS. NUS Corporation was selected for the plant specific review of video tapes of walk-throughs of the emergency procedures on the Callaway simulator, because of the qualifications of NUS personnel.
The experience, qualifications and approximate time spent on the project for each of the core professionals of the HFPRG and SNUPPS Staff is given in Table 1.2.1. In addition to these people, there were several other engineers from Bechtel and Westinghouse involved in the implementation of design changes.
i 1-6
Figure 1.2.1 ORGANIZATIONAL STRUCTURE Utility Utility Technical -------------- Operations 4 Connittee i Connittee DCRDR PROJECT TEAM 5NUPF5 Technica1 Dir.
(Proj. Mar.)
5NUPP5 I 5NU3P5 Proj. Leader - - - - - - - - - - - - Staff i (Dep.Proj Mar) Engineers Human utility Utility Architect Engrg. Engrg. Operations Engineer Consultants (Bechtel)
N555 Other '
Vendor Vendors W ,
)
1-1
February 1984 Human Factors / Time Spent on Title Person License Held Education (Degree) Nuclear Exp. (with) HFPRG Technical Director F. Schwoerer (S) - MS Marine E 26 yrs. 3 yrs.
(Project Manager)
Project Leader J. Klein (S) - BSME 6 yrs. 3 yrs.
(Deputy Proj.Mgr.)
SNUPPS Staff Engr. J. Riley (S) - BSAeroE,MBA 7 yrs. 1 yr.
SNUPPS Staff Engr. J. Cermak (S) -
Phd Nuc Engr 23 yrs. 2 yrs.
Haan Engr. Consultant L. Avery (E) - MA Ind.Psyc. 5 yrs. 3/4 yr.
Human Engr. Consultant S. Fleger (E) -
MA Ind.Psyc. 4 yrs. 3/4 yr.
Human Engr. Consultant R. Kane (E) - MA Exp.Psyc. 6 yrs. 3/4 yr.
Human Engr. Consultant C. Krick (E) -
BA Poly. Sci. 3 yrs. 3/4 yr.
Human Engr. Consultant C. Baker (E) - BS Psyc. 6 yrs. 3/4 yr.
Hw an Engr. Consultant P. Thurmond (N) - Ed.D. ,Res.& St at. 4 yrs. 2 mos.
Haan Engr. Consultant J. Gagnon (N) -
MA Psyc. 5 yrs. 2 mos.
Human Engr. Consultant E. Silveman (A) -
Phd.H.F.Psyc.& MSHE 15 yrs. 2 mos.
Human Engr. Consultant R. Kirshner (A) - MA H.F.Psyc. 9 yrs. 2 mos.
Human Engr. Consultant D. Taylor (A) - MS, Human Factors 12 yrs. 2 mo.
. Hwan Engr. Consultant C. Weiss (A) -
MSE, Indus. Engr. 4 yrs. 2 mo.
f, Utility Engr. (I&C) D. Kern (K) -
BSEE 3 yrs. 3 yrs.
Utility Engr M. Hellman (U) -
BSEE 9 yrs. 3 yrs.
Utility Engr. S. Fu (K) -
MSEE 4 yrs. 1/2 yr.
Utility Operations D. Heinlein (U) SRO certified BSME 4 yrs. 3 yrs.
Utility Operations J. McKinstray (K) SRO certified BSAeroE 11 yrs. 3 yrs.
Utility Operations M. Taylor (U) SR0 certified BSME 11 yrs. 1/2 yr.
Utility Operations S. Putthoff (U) SR0 certified - 9 yrs. 1/2 yr.
Architect / Engr. (I&C) D. Grove (B) - MSME 7 yrs. 3 yrs.
Architect / Engr. (I&C) J. Harrison (B) -
BSME 2-1/2 yrs. 2 yrs.
Architect / Engr. (I&C) R. Wu (B) -
MSEng.Elec 13 yrs. 3 yrs.
S = SNUPPS Staff U = Union Electric Company K = Kansas Gas and Electric Company N = NUS Corporation E = Essex Corporation A = ARD Corporation B = Bechtel Power Corporation Table 1.2.1 DCRDR Project Team Personnel and Experience
i f j 1.2 Management and Staffing, continued 1
The manner in which the members of the DCRDR Team participated in the various tasks of the DCRDR is summarized in Table 1.2.2.
The HFPRG was established as a standing review group that will review all proposed control room modifications prior to implementation.
I i
l i
.g 4
5 1 F i
4 4
5 i ,
i l l
l I
4 I
I I
l 1-9 3
SNUPP5 oman Proj. Dep. Proj. Staff Engrg. Utility Jtility Arch /
Mgr. Mgr. Engr. Consult. Engr. Oper. Engr.
TASK 0 0 0 0 0
- 1. Prograrn Definition X(1)
G 9 4
- 2. Master Schedule Preparation X(1) G X 0 e e
- 3. Sub-schedule preparation X
t
- 4. Schedule Maintenance
- 5. Periodic update reports X 0 0 0 e e
- 6. Define DCRDR technical X(1) requirements X e e
- 7. Define DCRDR human factors 0 requirements
- 8. Authorize changes in #2 X and #3 0 9 e
- 9. Detail schedule for plant- X specific review (DCRDR) 0 0 X 0 8 e
- 10. Conduct plant-specific review (DCRDR); prepare HEFS.
0 e t e e X(1) 0
- 11. Evaluate recommended changes (HEFs) 0 0 0 X
- 12. Implement Changes 8 0 0 0
- 13. Program assessment X(1)
- 14. Corrective action sign-off 8 9 X(1)
$ 0 0 0 0
- 15. Final, report preparation 9 X 0 0 0 0
- 16. Final report review X 0
- 17. Final report approval 9 9 X(1)
- 18. Final report delivery 0 d
X o Primary Responsibility (1) Utility Technical Committee 9 o $upport Responsibility Approval Athority 0 o Approval Athority Table 1.2.2 DCRDR Task Responsibility Chart for Proiect Manaaement 1-10
l.3 Documentation A data base library was established for the DCRDR process. This subsection describes the documentation system (input / output documents) and documentation management / control library us?d to support the Detailed Control Room Design Reviews.
1.3.1 Input Documentation The following references were available and/or developed throughout the DCRDR program, o NUREG-0700 o NUREG/CR-1580 l
o FSAR o System Lists o Systen Specification & Functional Description for 80P Computer o Piping and Instrumentation Drawings o Control Room Floor Plan (Lighting, HVAC, Acoustics, etc.)
o Panel Layout Drawings o List of Acronyns Abbreviations o Color Coding Conventions for CRT o 80P Computer Systen Displays o Standardized Valve Nomenclature List o Procedures (Emergency, Abnormal and Operating) o Operational Procedure Preparation Guide o Preliminary Design Assessment Report o WOG Emergency Response Guidelines o WOG System Functions Review and Task Analysis Study o Full Scale Hockups of Control Panels o Other Human Factors / Control Room Studies 1-11
1.3.2 Output Documentation A complete documentation of the review process was maintained during the DCRDR providing data traceability, retrievability and assurance of quality.
The review documentation includes:
o Completed Checklists o Human Engineering Findings (HEFs) o HEF Priority Sheet o Questionnaire Forms Examples of a Human Engineering Finding Form and Priority Sheet may be found in Appendix G. I Examples of forms used in the Task Analysis are in Appendix J. l Examples of an Operating Sequence Diagram used during the Validation of Con-trol Room Functions effort can be found in Appendix I. l The SNUPPS files contain information on HEFs, beginning with checklists from which they are generated, meetings that document their reviews and letters directing appropriate dispositions. Human Engineering Finding forms document discrepancies resulting from the data reduction process and priorities were assigned by completing a priority sheet for the finding.
The actual data collected to produce findings for the PDA are recorded on checklists that are kept within the Human Engineering Evaluation Report (HEER)
File at the SNUPPS Staff offices.
A detailed explanation of data collection and reduction for the initial control room survey (preliminary design assessment, or PDA) may be found in the Essex report, transmitted to the NRC by reference 2.
Copies of the general data and findings are distributed or otherwise made available to all DCRDR team members to allow access and research by any team member as appropriate.
Typical forms used for the remainder of the DCRDR are listed below and are l included in Appendix H.
o Air Velocity Survey Record o Humidity / Temperature Record o Lighting Survey - Luminance and Reflectance Record o Lighting Survey - Illuminance Record o Sound Survey Record Maintenance of the DCRDR document control has provided for traceability, retrievability and assurance of quality throughout the review process.
l-12
1.4 Review Procedures 1.4.1 Operating Experience Review As the SNUPPS plants were under construction at the time of the DCRDR, operating experience was factored into the DCRDR by (1) feedback provided by prospective operators from the Wolf Creek and Callaway plants who had training on the SNUPPS simul ator, (2) utilization of industry experience obtained through involvement of SNUPPS personnel in Westinghouse Owners Group (WOG) activities, and (3) use of the Callaway simulator for the WOG emergency procedure validation program.
A SNUPPS Operating Personnel Survey was conducted by Essex Corporation as part of its PDA review in 1980. Prospective operators from the Wolf Creek and Callaway plants who had training on the SNUPPS simulators were given questionnaires and were interviewed regarding their evaluations of control roon design features. The questionnaire addressed the areas of:
staffing and workload, workspace design, control /displ ay integration and placement, communications, annunciator / warning system, operator protective equipment, computers, procedures / documentation, and operation. The interview covered operator feedback as a result of the operators' initial training experiences on the SNUPPS simulator at Zion.
This survey technique provided the SNUPPS review team with feedback on specific problems with the control room design. Examples of these findings were: confusion with the Engineered Safety Features Actuation System (ESFAS) status panel; difficulty in following the mimics on the Engineered Safeguard Features panel; difficulty in reading annunciator windows from the operating station; and poor positioning of annunciator acknowledge controls. These observations reinforced the findings of Essex Corporation and were directly utilized in developing improved designs for these aspects of the control room.
Together with other utilities having Westinghouse designed plants in operation or under construction, SNUPPS has participated in the fonnation and functioning of a Westinghouse Owners Group (WOG). A key element of the WOG, accounting for approximately half of the total activity, is the Procedures Subcommittee. This subcommittee consists of senior operating personnel, many of whom hold or have held SR0 licenses, from approximately 20 utilities.
This subcommittee contributed direct operating experience, from many years of operation and several emergency events, to the development of improved Emergency Response Guidelines and the Systens Review and Task Analysis.
l.4.2 System Function Review and Task Analysis The general procedure for the system review and task analysis is illustrated in Figure 1.4.1. The starting point is an emergency plant event or con-dition. The term " plant event" is applied to transients or accidents that have been postula:ed by the plant designers and are recognized by the operators from instrumentation available to them. The tenn " plant condition" applies to transients or accidents that may not have been postulated or are not recognized by the operators.
l l-13 1
l i
e Plant Event or Condition
, ___)
i I
Systems / Subsystems I Malysis l
I y----------------y i
I l
Functions I
Malysis I
Iterations based on Verification and MAN MACHINE Validation i
I l
g Task Systems / Equipment
', Description Design i
I i
tr
', Task l Malysis 1
- 1 1 1._ - _ _ _ l Figure 1.4.1 - System Review / Task Malysis Procedure 1-14
i 1.4.2 System Function Review and Task Analysis, continued The systems / subsystems analysis referred to in Figure 1.4.1 has been per-formed on a generic basis for all Westinghouse plants by Westinghouse and the Westinghouse Owners Group (WOG). Plant events postulated include all combinations of initiating sequences and single or multiple equipment failures with calculated probabilities of occurrence greater than 10-o per reactor year and many with probabilities lower than that. For these postulated plant events the systems and broad functional requirements to mitigate each event have been defined. This portion of the systems analysis is the basis for " event related" function analysis. Plant conditions (events not postulated or not recognized by the operators) have been addressed by identifying critical safety functions (CSFs) necessary to preclude or limit fuel damage and/or release of radiation. A set of generic CSF status trees and broad functional requirements to restore any compromised CSFs have been developed. This portion of the systems analysis is the basis for "synptom related" function analyses.
The function analysis consists of developing in detail generic event-related and synptom-related emergency procedures. This work has been done by exper-ienced Westinghouse and utility operations personnel, under the sponsorship of the WOG. Collectively these procedures are termed Emergency Response Guidelines. Extensive background documentation has been developed for the ERGS. The background information includes calculations of emergency events, which serve to identify the ranges over which plant parameters are expected to very and to identify parameter values at which operator actions should be taken. The background analysis has also considered which parameters are the most effective indicators to an operator of the plant condition and progress of events. This includes consideration of which instruments and controls are safety-grade and qualified for post-accident conditions and which are not.
This bears on the accuracy with which an instrument indicates the true para-meter value. The plant-specific emergency operating procedures for the Callaway and Wolf Creek plants are based on and closely follow the ERGS.
A standard Westinghouse plant design (RESAR-3) was the basis for the SNUPPS design. This standard design had evolved on the basis of many years of licensing and operation of Westinghouse-designed reactors. Most of the decisions of when the response to a functional requirement should be auto-matic (machine) and when manual (man) were made during that evolutionary design process. In only a limited number of cases have changes in the allocation of tasks between man and machine been indicated to be desirable by more recent reactor and simulator operating experience.
Task descriptions have also been developed on a generic basis by Westinghoase and the WOG. This program was begun in late 1981 to address the recommenda-tion in Section 3.4 of NUREG-0700. It has consisted of a methodical review of the ERGS and identification of every monitoring task (instrumentation) and operational task (control) identified by each step of each event-related and each symptom-related procedure. These various tasks, many of which are required by more than one procedure, have been combined into one comprehen-sive set of tasks. Since the SNUPPS emergency operating procedures closely follow the ERGS, this system review and task analysis (SRTA) program con-ducted by Westinghouse is directly applicable to the identification of task descriptions for the SNUPPS control room. This effort has identified 141 categories of monitoring tasks (instrumentation) and 119 categories of operational tasks (controls).
1-15
1.4.2 System Function Review and Task Analysis, continued The task analysis function was performed by the SNUPPS DCRDR Team on a SNUPPS-specific basis. The first step was to review the nature of each task description. Most of the tasks (all but 17 categories of the monitoring tasks and all but 10 categories of the operational tasks) are strictly " digital" in nature. That is, a typical monitoring task is to ascertain whether a component is operating or not, whether a valve or breaker is lined up one way or the other, or whether a flow meter is indicating other than zero flow.
Or, in the case of controls, the typical task is to turn equipment on or off or to reposition a valve or breaker. Several of these " digital" operational tasks are manual backups to automatic actions.
An example category of monitoring tasks is the set of tasks requiring the operator to take action based on the value of reactor coolant system wide range pressure. There are approximately forty subtasks in this category and more than sixteen specific values of wide range pressure are cited as bases for operator action. These subtasks are explicitly defined in the ERGS and SRTA developed for the Westinghouse Owners Group. The task review process has been to examine each of these subtasks against the checklist in Appendix B. Similar procedures have been followed for each of the other 16 categories of monitoring tasks. In addition, since the majority of the monitoring tasks use instruments identified in Regulatory Guide 1.97, Rev. 2, the instrument range determined from the SRTA has been checked against the instrument range specified in RG 1.97, Rev. 2. It has been determined that these two sources of range data are consistent.
Ten categories of operational tasks require the operator to exercise some form of modulating control. These tasks were examined using the checklists in Appendix J and were also performed on the Callaway simulator to verify l task performance capability.
1-16
l.4.3 Control Room Inventory The inventory of instruments, controls and displays in the control room is shown on plant design drawings. These drawings include over-all arrangement drawings and drawings of each individual panel. The panel
, drawings include the labels, mimic lines, and demarcation lines that identify the instruments, controls, and displays by coded identification number, plant system and function. Individual instruments, controls, or displays are described in specifications, vendor manuals and/or drawings for each item.
As-built drawings will be prepared as necessary to reflect differences between the as-built panels and design drawings. These design and as-built drawings will be maintained throughout the life of each plant and are sufficient to support the needs of the SNUPPS DCRDR.
By using the approach described in section 1.4.2 for task analysis, a formal itemization of control toom components for comparison with instrumentation requirements was not necessary. A verification of the appropriate control room inventory to adequately perform control room functions as represented in the WOG task description was performed. This process is described in detail in section 1.4.5.
l.4.4 Control Room Survey The control room survey was performed in several stages, as necessitated by the construction schedule.
The first stage was a comprehensive survey of all of the control panels, with coincident interviews of operating personnel and walk-through of a limited set of emergency procedures. Essex Corporation was the Human Engineering consultant for this phase. This initial review, which was performed prior to issuance of NUREG-0700, used the guidelines of NUREG-CR/1580 and this survey
- evaluated controls and displays located on the Callaway control room and a SNUPPS simulator, and led to the study of special areas, e.g. annunciator prioritization, safety status monitoring, and control / display enhancement.
- This survey is termed a Preliminary Design Assessment (PDA).
4 Instrumentation, controls and other equipment items were examined for human engineering acceptability as components, including reference to their specific uses in task performance. Discrepancies were based on design incompatibility with human perceptual, motor, psychological or size characteristics. Results of the SNUPPS review are listed in the Essex Report transmitted by reference 2. Sample checklists and actual Human Engineering
- Finding forms are kept in the SNUPPS HEER files.
Subsequent to the Essex review, the NRC (HFSB) performed a review in July 1981 using the human engineering design criteria identified in the NUREG 0700 checklist. A thorough audit was conducted and Findings were identified.
Results were documented in the form of correspondence and the subsequent Technical Evaluation Report (TER). Actions taken by SNUPPS in direct response to these reviews have been documented in a series of letters, dated from June 1981 to April 1982 (references 2 through 6),
i r
1-17 t
1.4.4 Control Room Survey, continued The second stage of the control room survey, which took place from mid-1981 to late-1983, was a review of modifications made to correct findings of the Essex and NRC reviews and to install instruments and controls added in the final evolution of the design. These reviews were perfonned by the HFPRG, with assistance of a Human Engineering consultant, and were done to the guidelines of NUREG-0700.
The third stage of the control room survcy was a review of previously unfin-ished iteras, as identified in the NRC's Technical Evaluation Report (TER).
This review is termed the Supplementary Survey, or 55. This stage was started in late-1983 and is now complete. This portion of the review l was addressed mainly to environmental characteristics of the control room.
The procedures for SNUPPS environmental measurements follow the guidance of NUREG-0700 Appendix E, and findings were handled in a manner similar l to those of the control room survey.
1.4.4.1 Sound Survey Procedures The locations for sound measurements were noted on a control room layout drawing. Measurements were taken at each operator position that requires verbal comunication and/or auditory discrimination of a signal.
Considerations during measurement included ambient noise levels (where l snbient noise is defined as background control room noise without the contri-bution of alarms, printers or comunications equipment), annunciator alarm levels (work station annunciator and any other annunciators that must be heard at that work station) under both ambient and high noise level con-ditions (e.g., with printers, other alarms and signals), telephones and other communication equipment and evacuation signals and other alarms.
1.4.4.2 Lighting Survey Procedures The location for the illumination measurements were noted on a control room layout drawing. Readings were taken:
o in front of each front panel o in the center of the control room o in front of each back panel Various combinations of power supplies were utilized. l 1.4.4.3 Humidity / Temperature Procedures Humidity ind temperature were measured by setting meters in an area where !
they woulo not be disturbed. Readings at floor level and at 6 f t. above floor level every hour for at least one 24-hour period were taken.
i 1-18
1.4.4.4 Air Velocity Survey Procedures l 1 i The locations for air velocity readings were noted on a control room layout i drawing. Measurements were taken at principal operator work stations at an elevation of 6 ft, for standing positions, and at 4 ft. for sitting positions. '
1.4.5 Verification of Task Performance Capabilities f The objective of this part of the DCRDR is to compare the instrumentation i and equipment requirements derived from the task analysis to items in the l l control room inventory. This has been done as follows.
Each task identified by the Emergency Response Guidelines is tabulated in the generic system review and task analysis (SRTA). For each of these tasks, the SNUPPS DCRDR team has identified the specific instruments and/or controls used to perform the task and the locations of these instruments and/or
, controls.
- As described in Section 1.4.2, most of the required operator tasks are 4
digital in nature. The verification of performance capabilities for these
] digital tasks emphasizes two points: (1) is the control or instrumer*,
properly located in the control room and (2) is the design of the control or
! instrument in accordance with Human Engineering principles?
i instruments that must be utilized in other than digital manner have received j
. greater attention. The characteristics of these instruments, such as range, j precision and units are compared with the values of the parameter (s) d< s- t played at which operator tasks must be performed. The review also identified (
j alternative sources of the information required by the task analysis, j l Controls that perform a modulating (vs. digital) function are reviewed [
in the context of the objectives of the operator task and the relationship between the controller and the indication of the variable (s) controlled, i
Checklists used to verify task performance capabilities of instruments ;
and controls are contained in Appendix J. l .
1.4.6 Validation of Control Room Functions '
An important feature of the DCRDR is the iteration process shown schematic-i ally in Figure 1.4.1. At several times during the systems function and task analyses, emergency procedures have been performed on simulators of the same I
! design as the SNUPPS control boards and the ability for the operators to !
4 perform the necessary functions and tasks with the procedures, controls, and instrumentation provided has been validated.
]
The validation review determined if the operator tasks needed to implement ,
the ERGS can be accomplished effectively within the structure of the estab- !
lished operating and emergency procedures and the design of the control ,
room. l
. f i
7 1-19
1.4.6 Validation of Control Room Functions, continued I
An initial validation program was condnted for the SNUPPS control room using video-taped walk-throughs of selected procedures perfomed at the SNUPPS simulator at Zion. The following plant procedures were evaluated during this validation:
o Immediate Action and Diagnosis o Loss of Primary Reactor Coolant o Loss of Secondary Coolant o Steam Generator Tube Rupture o High Wind / Tornado Station Blackout o Reactor Trip o Turbine Trip
]
o Loss of One Feedwater Pump Each procedure was taped twice, once with a full complement of operators without any interruptions and once with an operator explaining each step.
- The videotapes were then used to analyze the operator actions for each of 1
these procedures. Instances of poor control / display relationships, lack of necessary information and inadequate presentation of information were iden-tified from the analysis and identified as findings. These findings were included in the Essex Corporation report of the PDA.
A second verification and validation program, with focus on the Emergency Response Guidelines, was performed at the Callaway simulator in June 1982.
The program consisted of a walk-through of f orty-one of the ERGS (the entire set). The operators for this program are operating personnel from the Callaway and Wolf Creek plants. Westinghouse engineering and training per-sonnel observed the program. An NRC representative was present part of the time. Though the verification and validition program was specifically focused on the ERGS, the program also served to validate that all necessary instruments and controls are avaliable and conveniently located in the SNUPPS control room.
A structured evaluation of these aspects of the SNUPPS control room design was subsequently performed using video tapes made during the ERG verification and validation program. The following factors were included in this review of video tapest o The indications and annunciators should be referenced in the procedure (s),
o The units of measurement displayed should be appropriate andconsistentwiththeprocedure(s).
o The operator actions expressed or implied by the proce.
dure (s) should be within the capability of the operator (s).
1-20
1.4.6 Validation of Control Room Functions, continued Operators in conjunction with human f actors specialists performed the analysis. In addition, using a unit floor diagram, work station flow was recorded and the following issues addressed; o Direction of movement o Sequence of movement i
o Frequency of the movement o Estimated time criticality of the movement o Real time estimate of the time that the operator (s) spend at each work station 1 21
2.0 REVIEW FINDINGS 2.1 General Six processes are recommended by NUREG 0700 to estabitsh benchmarks and identify findings for e complete Detailed Control Room Design Review (DCRDR):
Review of Operating Experience System Function Review and Task Analysis Control Room Inventory Control Room Survey Verification of Task Performance Capabilities Control Room Validation Table 1.1.1 outlines these six processes and the associated ShUPPS reviews performed to date to satisfy each. The DCRDR reviews have resulted in a total of 279 findings to date, as shown in Table 2.1. Because of the large I number of findings, individual findings are treated only in stanmary f ashion in the body of this report. More complete descriptions of the findings and the corrective actions are contained in Appendices A through F of this l report.
All reviews except the Environmental Survey and review of site specific panels are generic to both SNUPPS control rooms. Environmental Surveys have been performed independently at each SNUPPS control room and Auxiliary Shutdown Panel. Appendix 0 contains results of Callaway's and Wolf Creek's Envircnmental Surveys.
The process for evaluation of findings by SNUPPS begins within the Human Factors Plant Review Group (HFPRG). Upon review of an HEF, the HFPRG first determines whether the finding is valid. Because the control room reviewer, Human Engineering Consultant or NRC reviewer, does not always fully understand the plant design, some of the HEFs have been determined to be not applicable. The HFPRG then takes the following f actors into account in developing recommended resolutions to HEFst
- Priority, which indicates the safety significance of the HEF
- Difficulty of backfitting changes, e.g., availability of space on control panels Class IE separation requirements, etc.
- Complexity of change, e.g., straightforward change versus significant redesign.
- Impact on schedules for construction, startup and operation High priority HEFs are considered first. In most cases the HEF includes a recommended change. If the HEF requires physical changes to the control boards or equipment mounted on the boards, the architect engineer evaluates the impact of the changes and advises the HFPRG of any constraints that may exist, e.g., Class IE separation requirments, ability of equipment supplier to change his equipnent, schedular considerations. If the change involves significant redesign (e.g., re prioritiration of cnnunciators, change of system status panels, rearrangment of instruments and controls, 21
Table 2.1 Control Room Reviews - Summary of Findings Number of Findings NUREG 0700 Section Total Review 6.1 6.2 6.3 6.4 6.5 6.6 6.7 6.8 6.9 PDA 10 0 14 16 28 62 12 19 14 175 SS 1 8 1 6 21 0 18 5 1 51 ASP 6 3 0 5 11 5 0 3 0 33 ES 2 0 1* 0 0 0 0 0 0 3 Total s 19 11 16 27 60 67 30 27 15 272 Task Perf. Cap. 1 Valid. Prog. 6 Total 279 PDA - Preliminary Design Assessment SS - Supplementary Survey ASP - Auxiliary Shutdown Panel ES - Environmental Survey
- Callaway Only l
2-2
2.1 General, continued redesign of mimics), the HEPRG decides which organization, i .e. , architect engineer, Utilities or SNUPPS Staff will have lead responsibility to develop the change. In a limited number of cases the HEF is deemed to be impractical to be implemented and/or of low importance and the HFPRG recomends against making the indicated changes.
The actions recommended by the HFPRG are documented by the Deputy Project Manager and referred to the Technical and Operations Committees for their review and endorsement. Upon concurrence by these committees, the actions necessary to implement the modifications are initiated by the Project Manager or Deputy Project Manager.
Prior to implementation of design improvements, the proposed redesign is reviewed by the DCRDR Team. The procedure for this review begins with an evaluation of the redesign against the HEF and recommended resolution (if provided). Changes involving significant redesign are usually depicted in a full-scale mockup of the control board or full-scale drawings prior to finalization of the proposed redesign. The revised design is always scrutinized from a human engineering viewpoint by the DCRDR Tean during their evaluation and, in most cases, by the Human Engineering Consultant as well. The finalized redesign is reflected on control board drawings and the simulator panels at each site where Utility operations and engineering personnel review the modifications. Through these reviews it is determined that:
- The selected design improvements will provide the necessary correction
- The improvement does not introduce new HEFs.
These conclusions are verified by walk-through of selected procedures on a full-scale mockup, the simulator or the control room af ter the changes have been made. Any feedback on the redesign is conveyed to the DCRDR Team via the Utility operations or engineering representatives.
2.2 Control Room-Wide Survey Findings 2.2.1 Workspace and Environment Section 6.1 of NUREG-0700 delineates the aspects of the control room evaluated in this context. A summary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 10 4 App. A l
SS 1 0 App. B ASP 6 5 App. C l ES 2 Cal-2 WC-1 App. D l
No corrective actions will be taken for 6 of the PDA findings. Only two of these no action findings (1.1,1.8) are Category 1 or 2. The justifi-cations for not taking corrective actions are given in Appendix A. l The SS finding for which no corrective action is to be taken is other l than Category 1 or 2.
l 2-3 e
2.2.1 Workspace and Environment, continued One finding of the ASP review (1.4) has been evaluated to require no cor-rective action and is Category 1 or 2. Justification is provided in Appen-dix C.
The single ES finding (1.2) for which no action will be taken applies tc Wolf Creek. Justification for no action is provided in Appendix D.
2.2.2 Communications Section 6.2 of NUREG-0700 delineates the aspects of the control room eval-uated in this context. A sunmary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 0 0 App. A SS 8 3 App. B ASP 3 2 App. C ES 0 0 App. D The 5 55 findings for which no corrective action is to be taken are other than Category 1 or 2.
The only ASP finding that does not require corrective action is other than Category 1 or 2.
2.2.3 Annunciator Warning System Section 6.3 of NUREG-0700 delineates the aspects of the control room eval-uated in this context. A sunmary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 14 13 App. A SS 1 0 App. B ASP 0 0 App. C ES 1 1 App. D The one PDA finding for which no corrective action is to be taken (3.7) has been determined by SNUPPS to be an invalid finding.
The SS finding identified is other than Category 1 or 2 and was investi-gated further during the environmental sound study.
Action was taken on the single finding from the Callaway ES (3.1). Imple-mentation was performed at Wolf Creek prior to their ES and was found to alleviate the finding. A similar correction was performed at Calla-way.
2.2.4 Labels and Location Aids Section 6.6 of NUREG-0700 delineates the aspects of the control roan eval-uated in this context. A sunmary of the findings is as follows:
2-4
2.2.4 Labels and Location Aids, continued
. Review No. of Findings No. to be Corrected Reference PDA 62 54 App. A SS 0 0 App. B ASP 5 4 App. C ES 0 0 App. D Of the 8 PDA findings for which no corrective action will be taken, only 3 (6.1, 6.3 and 6.15) are Category 1 or 2. Justification is provided in Appendix A.
The one ASP finding for which no corrective action is to be taken is not safety-related. The justification for no corrective action is provided in Appendix C. l 2.3 Panel / Work Station Findings 2.3.1 Controls Section 6.4 of NUREG-0700 delineates the aspects of the control room eval-uated in this context. A summary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 16 13 App. A SS 6 3 @p. B ASP 5 3 App. C ES 0 0 App. D Two of the three findings for which no corrective action is to be taken (4.4, 4.5) are Category 1 or 2. Justification for no action is provided in Appendix A.
Two of the 3 SS findings for which no corrective action is to be taken are other than Category 1 or 2. Subsequent to field verification, it was deter-mined that the remaining finding (4.5) required no corrective action.
Two of the findings of the ASP review have been evaluated to require no corrective action and only one (4.1) is Category 1 or 2. Justification is provided in Appendix C.
2.3.2 Displays Section 6.5 of NUREG-0700 pertains to these aspects of the control room.
A summary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 28 18 App. A SS 21 14 App. B ASP 11 2 App. C ES 0 0 App. D 2-5 i
2.3.2 Displays, continued Four cf the 10 PDA findings for which no corrective action is to be taken (5.2, 5.9, 5.24, 5.27) are category 1 or 2. Justification for no action is given in Appendix A.
The 7 SS findings for which no corrective action has been identified are other than category 1 or 2.
Only one of the 9 ASP findings (5.11) for which no corrective action is to be taken is category 1 or 2. The justifications for no actions are given in Appendix E.
2.3.3 Process Computer Section 6.7 of NUREG-0700 pertains to the computer. A summary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 12 3 Ref. A SS 18 2 App. B ASP 0 0 App. C ES 0 0 App. D Only two (7.4, 7.11) of the 9 PDA findings for which no corrective action is to be taken is considered category 1 or 2.
All but one (7.1) of the sixteen SS findings that have been identified as needing no corrective action are other than category 1 or 2. Finding 7.1 was evaluated during the environmental lighting tests.
2.3.4 Panel Layout Section 6.8 of NUREG-0700 applies to panel layout. A sunmary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 19 14 App. A SS 5 0 App. B ASP 3 1 App. C ES 0 0 App. D
- Five of the 19 PDA findings are listed as no action. Only one of the five l
(8.17) is category 1 or 2. l Five SS findings have been identified as requiring no corrective action and are other than category 1 or 2.
One of the 2 no action findings for the ASP is considered category 1 or 2 (8.3) and appropriate justification for no action is provided in Appendix C. l 2-6 L:.
2.3.5 Control-Display Integration Section 6.9 of NUREG-0700 delineates the aspects of the control room evaluated in this context. A sunmary of the findings is as follows:
Review No. of Findings No. to be Corrected Reference PDA 14 9 App. A SS 1 1 App. B ASP 0 0 App. C ES 0 0 App. D Of the 14 findings discovered during the PDA, only 5 have been designated as no action. Three of these 5 findings are category 1 or 2 (9.4, 9.13, 9.14) and justification for no action is provided in Appendix A.
The SS finding identified has been listed as requiring corrective action.
The Safety Parameter Display System (SPDS) has been reviewed separately and is described in reference 11. The presence and displays of the SPDS have been considered in the Verification of Task Performance Capabilities and their location within the Control Room has been determined by the DCRDR Review Team and subsequently considered by ARD Corporation in their review of Control Room workspace.
2.4 Other Review Findings 2.4.1 Validation Program l
The results of this review are given in Appendix E. There were 6 findings.
Two of these will be corrected. Justification for no action on the remaining 4 is given in Appendix E.
2.4.2 Task Performance Capability The results of this review are given in Appendix F. There was one finding related to labeling of indicator lights on auxiliary feedwater controllers.
Upon further investigation, it was determined that this finding was simulator specific. Additional work on the Task Analysis is planned for the future and a supplemental report will be submitted to the NRC by July 1,1985.
o j 2-7 l
3.0 IMPLEMENTATION 3.1 Completed Improvements The PDA was performed to provide advance information regarding the human f actors acceptability of the Control Room and was accomplished prior to the issuance of NUREG 0700. This advance information allowed early imple-mentation of findings, i.e., prior to fuel load, that would otherwise not be possible if the Control Room review had not begun until later. Altnough implementation of selected findings from other than the PDA will occur prior to fuel load, the vast majority will come from the PDA; therefore, these will be discussed in this subsection only.
Table 3.1 provides a status of implementation for PDA findings. A completed corrective action is shown as either "C" for Callaway jobsite, and/or "W" for Wolf Creek.
Of the total 175 findings,128 are listed for action (7 findings are site specific to Callaway). Of the 128 findings, Callaway has implemented action for 122 findings and Wolf Creek has implemented 89 corrective actions. With the exception of findings 5.8 and 5.17, the remaining corrective actions for Callaway(findings 5.25, 5.28, 7.2, and 8.14) are scheduled to be implemented prior to exceeding 5% power.
3.2 Proposed Improvements Findings resulting from the TER open items, ASP evaluation, and Validation Program are tracked by Table 3.2 and will have corrective actions imple-mented as noted. (Note changes in implementation dates for SS finding 4.2 and ASP finding 1.5 relative to the latest schedule transmitted by reference 13). One finding resulted from the Task Performance Capability Study and was determined to be specific to the Callaway simulator.
- g l
l l
l )
1.
1 1 l *.
l 5 l ,
l 3-1 i
% ', -1 - --
Status of Findings From Initial Essex and NRC Review (PDA) of l SNUPPS Control Room 9 June 22,1984 A A I A A I A A I A A I NRC C C M NRC C C M NRC C C M NRC C C M FIlOING C T P FI!OING C T P FINDING C T P FINDING C T P E I L' E I L E I L E I L AND P O E AND P O E AND P O E AND P O E PRIORITY T N M PRIORITY T N M PRIORITY T N M PRIORITY T N M 1.1 (lfAl N4 NA 5.6 (31) Al N4 NA 6.23 (1) Al F29 C 7.6 (3) A2 N2 NA 1.2 (3) A2 N2 NA 5.7 (3) A6 N3 NA 6.24 (2) Al F25 C,W 7.7 (3) A6 N6 NA 1.3 (1) Al F10 C 5.8 (2) Al U2 6.25 (3) A2 F26 C, 7.8 (3) A6 N3 NA 1.4 (1) A4 F9 C,W 5.9. (2) Al N1 NA 6.26 (31) Al F25 C,W 7.9 (3) A6 N3 NA 1.5 (1) Al F8 C,W 5.10 (1) Al F14 C,W 6.27 (31) Al F25 C 7.10 (31) Al N4 NA 1.6 (1) Al F9 C,W 5.11 (3) A6 N3 NA 6.28 (1) Al F8 C,W 7.11 (1) A6 N ~ NA 1.7 (3) A6 N3 NA 5.12 (2) A4 U2 C 6.29 (31) A4 F25 C,W 7.12 (2) Al U2 C 1.8 (1) A6 N6 NA 5.13 (2) Al 203 C,W 6.30 (31) Al F25 C,W 8.1 (1) Al U1 C,W l.9 (3) A6 N3 NA 5.14 (31) Al F17 C 6.31 (2) A4 202 C,W 8.2 (3) AhF25 C,
. 1.10 (3) A6 N3 NA 5.15 (3) A6 N3 NA 6.32 (31) Al F25 C,W 8.3 (31) Al N4 NA
._ 3.1 (1) Al Ul C 5.16 (3) A6 N3 NA 6.33 (31) A6 F3 C,W 8.4 (31) Al P25 C 3.2. (3) A2 F3 C,W 5.17 (1) A4 U2 -
6 34 (31) A4 F27 C 8.5 (31) Al F28 C,W l 3.3 (3) A5 F3 C,W 5.18 (1) Al U1 C,W 6.35 (1) A4 F25 C,W 8.6 (31) Al U2 C,W 3.4 (1) Al F3 C,NA 5.19 (2) Al F9 C,W 6.36 (1) Al F25 C,W 8.7 (3) A4 F8 C,W 3.5 (1) Al F22 C 5.20 (3) A2 N2 NA 6.37 (31) Al F27 C 8.8 (3) A6 N3 NA 3.6- (3) A2 F3 C,W 5.21 (2) Al F4 C 6.38 (3) A6 F25 C,W 8.9 (3) A2 F25 C,W 3.7 (2) Al N4 NA 5.22 (31) A6 U2 C,W 6.39 (31) Al F27 C,W 8.10 (3) A6 N6 NA 3.8 (3) A6 U1 C 5.23 (1) Al F15 C,W 6.40 (31) Al F25 C,W 8.11 (3) A2 F25 C,W c 3.9 (3) A5 F3 C,W 5.24 (2) Al N4 NA 6.41 (31) Al U2 C, 8.12 (1) A6 F7 C,W i 3.10 (1) A5 F3 C,W 5.25 (2) Al U2 6.42 (31) Al F9 C, 8.13 (2) Al F8 C,W 3.11 (31) A5 F3 C,W 5.26 (31) Al F29 C,W 6.43 (31) Al U1 C,W 8.14 (2) A4 F8 W 3.12 (1) A5 F3 C,W 5.27 (1) Al N9 NA 6.44 (31) Al F25 C,W 8.15 (2) Al F8 C,NA 3.13 (1) Al U2 C 5.28 (1) A4 Ul ,NA 6.45 (31) A4 F27 C,W 8.16 (2) A6 F8 C,W 3.14 (1) Al F9 C,W 6.1 (1) Al N4 NA 6.46 (31) Al F27 C,W 8.17 (1) Al N4 NA 4.1 (3) A2 N2 NA 6.2 (1) Al F9 C,W 6.47 (31) A6 F25 C, 8.18 (3) A6 N3 NA 4.2- (1) Al F8- C,W 6.3 (2) Al N4 NA 6.48 (3) A6 N3 NA 8.19 (3) A6 F23 C 4.3 -(2) Al F26 C,W 6.4 (31) Al F27 C,W 6.49 (31) A6 F28 C,W 9.1 (2) A4 F25 C,W 4.4 (1) Al N4 NA 6.5 (31) Al F25 C, 6.50 (2) A6 F28 C,W 9.2 (3) A6 N3 NA 4.5 -(2) Al N6 NA 6.6 (1) Al F25 C,W 6.51 (31) Al F28 C 9.3 (1) A4 F25 C,W 4.6. (2) Al F9 C,W 6.7 (1) Al F25 C,W 6.52 (1) Al F28 C,W 9.4 (2) Al N4 NA 4.7 (1) Al F24 CW 6.8 (1) A4 F25 C,W 6.53 (1) Al F28 C,W 9.5 (3) A4 F8 C,W 4.8 (2) Al F9 C,W 6.9 (1) A4 F25 C,W 6.54 (31) A6 N6 NA 9.6 (2) Al F8 C,W e
4.9 (2) Al F25 C,W 6.10 (1) A4 F25 C,W 6.55 (31) Al F28 C,W 9.7 (2) Al F8 C,W 4.10 (2) A4 F19 C,W 6.11 (3) A6 N3 NA 6.56 (1) Al F28 C,W 9.8 (2) Al F8 C,W 4.11 -(1) A4 U2 C,W 6.12 (31) Al F25 C,W 6.57 (31) Al F28 C,W 9.9 (2) Al F23 C,NA 4.12 -(1) A4 F26 C, 6.13 (31) Al F25 C,W 6.58 (31) A4 F28 C,W 9.10 (3) A6 N3 NA 4.13 (1) A6 RBC C,W 6.14 (31) Al N4 NA 6.59 (1) A4 F28 C 9.11 (2) A6 F8 C,W l 4.14 (3) A2 F18 C, 6.15 (2) Al N6 NA 6.60 (1) A4 F28 C,W 9.12 (2) A4 F8 C,W 4.15 (31) Al F26 C, 6.16 (31) Al N4 NA 6.61 (1) Al F29 C,W 9.13 (2) Al N4 NA 4.16 (31) Al F9 C,W 6.17 (1) Al F29 C, 6.62 (1) A4 F28 C,W 9.14 (2) A6 N6 NA 5.1 (3) A2 F21 C,W 6.18 (31) Al F9 C,W 7.1 (31) Al N4 NA 5.2 (2) Al N4 NA 6.19 (31) Al F25 C,W 7.2 (2) Al F17 l 5.3 - (31) Al Fil C,NA 6.20 (2) Al F23 C,NA 7.3 (2) Al F18 C,
- 5.4 (2) A4 F12 C,W 6.21 (31) Al F25 C,W 7.4 (2) Al N4 NA l 5.5 (3) A2 F13 C,W 6.22 (31) Al F25 C,NA 7.5 (3) A6 N3 NA l
( ) - Priority Table 3.1 [
ACCEPT - Acceptability of SNUPPS' Response A1 - Accepted per NRC (Hopkins, Edison) letter to SNUPPS (UE, KGE) dated 02/16/82 '(
A2 - Accepted per NRC (Youngblood) letter to SNUPPS (Schnell, Koester) dated 03/08/83 A3 - Acceptable per SLNRC 82-016, 03/16/82 A4 - Accepted per NRC (Youngblood) letter to SNUPPS (Schnell, Koester) dated 07/02/82 A5 - Acceptable per SLNRC 82-020, 04/12/82 A6 - Acceptable per SLNRC 84-0048, 03/21/84 ACTION - Action as follows:
F3 -
FCWP FJ108 -
003 F4 -
FCWP FE094 -
004 F8 -
FCWP FJ200 -
008 F9 -
FCWP FJ200 -
009 F10 -
FCWP FJ200 -
010 Fil -
FCWP FJ200 -
011 F12 -
FCWP FJ200 -
012 F13 -
FCWP FJ200 -
013 F14 -
FCWP FJ200 -
014 FIS -
FCWP FJ200 -
015 F16 -
FCWP FJ200 -
016 F17 -
FCWP FJ200 -
017 or FCWP FJ106 - 017 or FJ-200-213 or 2RJ-200S-703 F18 - FCWP FJ200 -
018 or FCWP FJ106 - 018 F19 -
FCWP FJ200 - 019 F20 - FCWP FJ200 -
020 F21 -
FCWP FJ200 -
021 F22 -
FCWP FJ200 -
022 (FJ200-209 for Wolf Creek for Finding 3.5)
~
F23 -
FCWP FJ200 -
023 (and FJ-200-210 for Findihg '3.19)
F24 -
FCWP FJ200 -
024 F25 -
FCWP FJ200 -
025 F26 -
FCWP FJ200 -
026 F27 - FCWP FJ200 -
027
! F28 -
FCWP FJ200 -
028
! F29 -
FCWP FJ200 -
029 202 -
FCWP FJ200 -
202 203 -
FCWP FJ200 -
203 RBC -
Rework Plans RJ200-B & RJ-200-C F -
Work Plan expected to be issued in the near future.
N -
No action required per this transmittal.
N2 -
No Action Required per NRC (Youngblood) letters to SNUPPS (Schnell, Koester) dated 03/08/82 N3 -
No Action Required per SLNRC 82-016, 03/16/82 N4 -
No Action Required per NRC (Youngblood) letter to SNUPPS (Schnell, Koester) dated 07/02/82 N6 -
No Action Required per SLNRC 83-0063, 11/30/83 U1 -
Utility administrative function U2 -
Utility to perform hardware change (FJ200-020 for W.C.-Finding 4.11)
( (FJ200 017 for W.C.-Finding 5.22)
.- (FJ200-025 for W.C.-Finding 8.6)
IMPLEM - Implementation as foTlows:
C- Modification has been made to Caliaway control pnel W- Modification has been made to Wolf Creek control panel, 3 ,
NA - Not applicable (no action required) ;
L
IMPLEMENTATION SCHEDULE FOR SUPPLEMENTARY SURVEY AND AUXILIARY SHUTDOWN PANEL FINDINGS June 22, 1984 Y SUPPLEMENTARY SURVEY ASP REVIEW FINDING A I 5RA FINDING A I 5RA FINDING A I 5RA AND C M F%E/ AND C M F%E/ AND C M F%E/
PRIORITY T P LPFT PRIORITY T P LPFT PRIORITY T P LPFT 1.1 (5) N 5.16 (0) X C,W X 1.1* (2) X C X 2.1 (5) N 5.17 (5) N 1.2 (1) X C X 2.2 (0) X C, X 5.18 (0) X C, X 1.3 (2) X C X 2.3 (5) X C, X 5.19 (0) X XX 1.4 (2) N 2.4 (6) N 5.20 (6) N 1.5 (2) X X 2.5 (5) N 5.21 (6) N 1.6 (2) X C,W X 2.6 (5) N 7.1 () N 2.1 (2) X C, X 2.7 (5) N 7.2 (5) N 2.2 (5) N 2.8 () X C,W X 7.3 (5) N 2.3 (1) X X 3.1 (4) N 7.4 (5) N 4.1 (2) N 4.1 (6) N 7.5 (5) N 4.2 (4) X C,W X 4.2* (0) X X 7.6 (5) X C, X 4.3 (5) N 4.3 (6) N 7.7 (5) N 4.4 (5) X X 4.4* (0) X C X 7.8 (5) N 4.5 (5) X X 4.5 (0) N 7.9 (5) N 5.1 (5) N 4.6* (0) X C X 7.10 (6) N 5.2 (5) N 5.1 (6) X C X 7.11 (5) N 5.3 (5) N 5.2 (0) X C,W X 7.12 (6) N 5.4 (5) N 5.3 (5) X X 7.13 (5) N 5.5 (5) N 5.4 (5) X X 7.14 (5) N 5.6 (5) N 5.5 (5) N 7.15(5) N 5.7 (5) N 5.6 (5) N 7.16 (6) N 5.8 (5) X X 5.7 (5) N 7.17 (5) X C X 5.9 (5) X C, X 5.8 (5) X X 7.18 (5) N 5.10 (5) N 5.9* (0) X C X 8.1 () N 5.11 (2) N 5.10 (5) X X 8.2 (5) N 6.1 (5) X X 5.11 (5) X X 8.3 (5) N 6.2 (5) X C,W X 5.12 (5) X C, X 8.4 (5) N 6.3 (2) X C, X 5.13 (6) N 8.5 (5) N 6.4 (5) X C,W X 5.14 (5) X C,W X 9.1 () X C,W X 6.5 (5) 8.1 (5)
N 5.15 (5) X C,W X N 8.2 (1) X C,W X VALIDATION PROGRAM 8.3 (2) N 1 () N 4 () N ENVIRONMENTAL SURVEY 2 () N 5 () X X (CALLAWAY) 3 () X X 6 () N 1.1* ( ) X X 1.2* ( ) X X ACT - Action to be taken 3.1* ( ) X C X IMP - Resolution Implemented as follows: (WOLF CREEK)
C - Callaway 1.1 () X X W - Wolf Creek 1.2 () N N - Not Applicable; no action to be taken FL - Implementation expected by Fuel Load 5%P - Implementation planned prior to exceeding 5% power REF - Implementation planned prior to completion of first refueling outage A/T - Administratively controlled or handled through training
- - Applicable to Callaway Only l
Table 3.2
4.0 REFERENCES
TO SNUPPS SUBMlTTALS TO NRC ON DCRDR
- 1. SLNRC 81-26, 04/21/81: Human Factors Control Room Design Review
- 2. SLNRC 81-51, 06/26/81: Human Factors Evaluation of the SNUPPS Control Room - Essex Report
- 3. SLNRC 81-65, 08/12/81: Human Factors Evaluation of the SNUPPS Control Room - Proposed Resolutions to Findings in the Essex Report
- 4. SLNRC 82-04, 01/19/82: NUREG-0737, Item I.D.1 - hesponses to NRC Audit Report Findings
- 5. SLNRC 82-016, 03/16/82: NUREG-0737, Item I..D.1 - Revised Responses to NRC Audit Report Findings
- 6. SLNRC 82-020, 04/12/82: NUREG-0737, Item I.D.1 - Results of Annunciator Prioritization Study
- 7. SLNRC 83-0019, 04/15/83: Generic Letter 82 SNUPPS Response
- 8. SLNRC 83-0035, 06/30/83: SNUPPS Program Plan for the DCRDR - Issued 06/83
- 9. SLNRC 83-0062,11/28/83: SNUPPS Program Plan for the DCRDR - Revised 11/83 10.SLNRC 83-0063,11/30/83: NUREG-0737, Item I.D.1 - Revised Responses to NRC Audit Report Findings 11.SLNRC 84-0003, 01/13/84: SPDS Safety Analysis 12.SLNRC 84-0019, 02/02/84: DCRDR Summary Report for SNUPPS 13.SLNRC 84-0048, 03/21/84: NRC Audit of SNUPPS CRDR, Week of February 27, 1984 14.ULNRC-790, 04/06/84: Callaway Plant CRDR 15.KMLNRC 84-077, 0F "1/84: Wolf Creek Human Factors Modifications 16.ULNRC-822, 05/15/84: Callaway Plant CRDR i
4-1 u . - _ _ _ _ _
Apcendix A
'I INITI AL ESSEX AND NRC REVIEW (PDA) i l
l l
l I
I I
I l
l f
A-1-0
1.0 Control Room Workspace Finding 1 Some controls are located too high to be accessible to (1) a 5th percentile operator. One J-handle switch is lo-cated 73" above the floor. Some emergency controls for the BORON INJ RECIRC PUMP are located 66" above the floor. The maximum recommended height for controls is 56".
Response On panel RL014 at Callaway, the switchyard breaker con-trol switches are located above the recomended height in order to retain their proper relationship to the switchyard mimic which is arranged to show the correct association of the transmission lines, busses and circuit breakers. Manual operation of these control switches is infrequent and is performed only after discussion with and at the direction of the Union Electric system dispatcher so that the operator action is deliberate and unhurried. These control switches can be operated by a 5th percentile operator as the attached picture illustrates.
The referenced control (Boron Inj. Recirc. Pump) which is in panel RL017 is not an emergency control. The pump is operated only when required to adjust the boron con-centration in the boron injection tank (BIT). With its present location (66" above the floor) a 5th per-centile operator can perform any necessary functions required as the attached picture illustrates.
Finding 2 Controls on the test and maintenance operations panels (3) have not been placed in the vertical area between 34" and 70" above the floor. Controls on these back panels are located significantly above and below the recom-mended range.
Response The controls on the panels behind the main control boards are not used on any kind of routine basis by the operator. They are, in fact, exactly as described, for test or maintenance functions. This creates no problems fo. the reactor operator because the operator
! will be aware of test or maintenance activities on these panels and can take appropriate actions without undue or adverse effects.
Finding 3 There are several J-handle control switches that are (1) located closer to the front edge of the panels than the i- recommended 3". These switches can be inadvertently actuated. These switches are located on RL001, RL013, i RL015, RL019, RLO21, RLO23, ana RLO25.
Response Metal guardrails will be installed on all outer-ring control board consoles and on the RL001 inner-ring console. This will maintain approximately 2-1/2" of l
i j A-1-1
1.0 Control Room Workspace, continued free space between the operator body and the front edge of the console benchboard.
Finding 4 Both of the SOURCE RANGE BLOCK and RESET pushbutton (1) switches are located very close to the edge of the panel and are subject to inadvertant activation. If the reset pushbutton was accientally activated, it would clear the system for start-up, tripping the unit off line if the reactor power level was less than 10%.
Response Shrouds will be added to pushbuttons SE-HS-5 and SE-HS-10.
Finding 5 The critical TD AUX FW Ptf1P TRIP / RESET control is lo-(1) cated in a position where it can be inadvertently actuated.
Response This trip / reset control switch has been deleted and will be removed from the panel.
Finding 6 The annunciator response controls are located on the (1) fronts of the benchboards and can be easily activated by leaning against the panels.
Response The test and first-out annunciator reset controls will be guarded to prevent accidental actuation. The acknow-ledge buttons will be equipped with mushroom type actuators and will remain on the front of the bench-boards. This location is highly desirable because its uniqueness allows the operator to operate it by feel with no danger of actuating any other type o' control, while devoting his visual attention to the annunciator. There are no adverse consequences of accidentally activating the acknowledge button.
Finding 7 Some controls are located further in from the front (3) edge of the inner ring consoles than the recommended 24". These controls will not be accessible to a 5th percentile operator.
i Response All controls located on the inner ring consoles can be l
operated by 5th percentile operators as the attached l pictures illustrate.
Finding 8 Some vertical and horizontal meters are located higher l (1) than the reconsnended 70" above the floor. These dis-l plays will not be reeJable or accessible to a 5th per-centile operatcr. Most of these meters are located between 75" and 84" from the floor. Some meters are A-1-2 i
L
1.0 Control Room Workspace, continued located as high as 92", and the top rows of the annun-ciator panels are all located 117" above the floor.
This problem exists on all of the main control room outer ring panels and on the Remote Shutdown panel.
Response When viewed from the leading edge of the benchboard, it has been detennined that all instruments in question can be read from the viewpoint of a fifth percentile operator.
The meters used on the SNUPPS Main Control Board are of the "bi-level anti-parallax" design. These meters have a curved scale face and indicator movement which allow for easy readability when placed above 70". The annun-ciator tile lettering has been enlarged (see SLNRC 82-020) to provide readability from the front consoles. In gen-eral, displays must be located more than 70" above the floor to prevent the lateral spread of displays from exceeding guideline measurements (NUREG 0700 Sec. 6.1.2.2.f).
The SNUPPS Main Control Board configuration represents the optimum compromise between grouping displays above the 70" guideline and within the 72" lateral spread guide-line.
Finding 9 The annunciators are mounted out of the visual field gf (3) the 5th percentile operator (recommended maximum = 75 abovethehorizontallineofsight). The viewing angle was measured to be approximately 80 .
Response The intent of the 75 guideline is to avoid placement of indicators where uncomfortable neck strain would result from prolonged observation. The annunciators are legible to a 5th percentile operator. By their nature, annunciators do not require more than a few seconds of scrutiny before the operator would move on to other tasks. In this time it is unlikely that any adverse phygiological problems would develop from looking up at an 80 angle. Additionally, the operators will usually acknowledge and read the annun-ciators from the consoles instead f the main board, where the viewing angle is less than 75 Finding 10 The annunciator tfles are mounted with less than the recom-(3) mended minimum 45 viewing angle from the tile plane to the 5th percentile operator's line of sight at the acknowledge cogtrols. The viewing angle was measured to be approximately 33 Response Enlargement of the annunciator engravings, as described in 3.12, will alleviate this problem. Additionally, the operators will usually acknowledge alarms from the consoles instead of the main control boards. The viewing angle from console is not strongl dependent on the operators' height, and is greater than 45 A-1-3
2.0 Corrrnunications Reviewed during the Supplementary Survey l
A-2-1
i 3.0 Annunciator Warning System l
Finding 1 A reflash capability is not provided that allows sub-(1) sequent alarms to activate the auditory alert mechanism and reflash the visual tile even though the first alarm may not have been cleared.
Response This statement is incorrect, with the exception of the auditory alert mechanism. If the time delay relay associated with an annunciator group times out before an alarm is acknowledged (adjustable from 0 to 60 seconds), that auditory device is silenced automatically and will not reset until the acknowledge button is pressed. This feature has no effect on the visual indications, which do have reflash capability on all windows with multiple inputs. The annunciator time-out feature is desirable in that it eliminates a distracting and repetitive chore during conditions of high stress, i.e. a time when several alarms are being generated in rapid sequence as during a trip. The initial auditory signal alerts the operator of a problem. Allcwing the timer to run out and silence its initial and subsequent auditory signals will reduce the need for extraneous activity (repetitivly acknowledging alarms) and allow the operators to concentrate on assessing the situation and taking corrective action. Once the immediate actions have been taken, the operator resets the auditory alam simply by pressing the acknowledge button.
Administrative Controls will be established to prevent adjusting the alarm to time out in less than 3 seconds. l Operators will be required to reset the alarms at the earliest reasonable time af ter response to previous al ams .
Finding 2 The "first out" alarms that are provided for the reactor (3) system and the turbine-generator system are not located on physically separate panels from the remainder of the annunciators. The proposed prioritization scheme for the annunciators will further interfere with easy recognition of the first out alarms.
Response The "first out" alarms that are provided for the reactor system and the turbine-generator system are each grouped separately on the annunciator window panels. In addition, a black demarcation line will be used to separate the "first out" annunciator windows.
Finding 3 There is no prioritization of annunciator alarms by (3) location, color, or other coding scheme.
A-3-1
3.0 Annunciator Warning System, continued Response Results of the Annunciator prioritization study were previously transmitted to the NRC.
Finding 4 The annunciator indicating breaker trip is on RLO14 (1) while the associated breaker control is on RLOM.
Response The referenced annunciator window will be moved to the matrix on panel RK026. This is the cicsest annun-ciator matrix to the breaker control location. This is site specific to Callaway.
Finding 5 The tile coordinate labels and panel identification (1) labels for the annunciators have not yet been engraved or otherwise permanently attached. Also, annunciator response procedures are not indexej by panel identifi-cation and tile coordinates.
Response The annunciator matrices will be indexed by means of a coordinate system utilizing letters to denote rows and numbers to denote columns. In order to facilitate rapid location of a tile, each column will have its own unique number (1 through 134). Labels for each row and for every other column will be attached to the panels. The annunciator response procedures will be revised to include tile coordinates.
Finding 6 Annunciator windows are not keyed or coded to prevent (3) inadvertent interchange.
Response Tile locations will be engraved into each tile.
Finding 7 The flash rates of the annunciators are not the recom-(2) mended three to five flashes per second with approx-imately equal on and off times. The rates are approx-imately one flash per second, or slightly less.
Response The Finding is incorrect. During the " alert" portion of the annunciator sequence, the flash rate is rapid, about 3 flashes per second. The slow flash rate referred to occurs during the " return to normal" phase of the sequence for first out annunciators and those other annunciators equipped with the ringback feature.
Finding 8 There is no distinctive coding to indicate annunciator (3) tiles that are illuminated for extended periods of time.
Response The dark board concept while at normal power operation will be supported. Lights to be lit for extended periods of time while at power operation and that are due to maintenance related activites will be identified administratively to the operator. Reactor Operator shift turnover documentation will include information on ar.nunciators that are locked in, or are out of service.
A-3-2
3.0 Annunciator Warning System, continued Finding 9 The annunciator panel matrix density is too high on (3) some panels. For example RLO26 is a 23 x 6 matrix with 138 tiles. The reconmended maximum is 50 tiles per l matrix. j I
Response Demarcation lines have been added to the panels to di-vide the matrices into groups of alarms related to sim- 1 ilar equipment. The location of these lines will be subject to change in the future based on operational experience or operator preference.
Finding 10 Some annunciator tiles do not adequately specify the (1) alarm condition (e.g., "RHR PUMP TROUBLE" and "ACCUM TANK - LEVEL HI/LO").
Response All annunciator legends have been reviewed as part of our annunciator prioritization study. The examples given above are not deficient in our view. The use of a high level " Trouble" alarm reduces the total ntsnber of annun-ciators in the control room. Amplifying information is available from the computer and from local control panel s. HI-L0 alarms also reduce toe number of annun-ciators needed in the control room. This type of alarm alerts the operator to a level problem. Other instrumen-tation will then be used to identi'y the exact nature of the problem, i.e. whether the level is HI or LO.
Figding 11 The annunciator legend character height-to-width ratio (3 ) was measured to be approximately 7:3. It snould be no more than 5:3.
Response The annunciator character size that will be used is 3/8 inch high by 5/16 inch wide with a .06 inch stroke width and 1/4 inch line spacing. This results in a l height " , width ratio of 3.6:3, and a height to stroke width ratio of 6.25:1.
Finding 12 The annunciator legends are difficult to read from the (1) inner ring of control consoles due to inadequate char-acter size, stroke width, and spacing; but they can ue l acknowledged from that location. For viewing the annunciators from the 12' distance within the inner ring of control cor soles, the character stroke width should be at least .058 inch and the height-to-stroke width ratio should be 6:1.
Response See response for Finding 3.11.
l i
s l- A-3-3
1 3.0 Annunciator Warning System, continued Finding 13 The annunciator response controls do not include all (1) of the following: silence, acknowledge, reset, and test controls. There is no separate silence control. The acknowledge control will silence the alam before 10 seconds have elapsed from the time of alarm initiation.
The auto silence function will silence the alarm after 10 seconds from initiation. Only the first out alarm panels have reset capability. The remainder of the annunciator alarms are automatically reset.
Response (1) The silence function is incorporated in the ac-knowledge control. This is desirable because it reduces the number and complexity of controls associated with the annunciators without any func-tion loss or ambiguity. This feature reduces the visual search time and memory requirements for the operator, enhancing overall performance.
(2) The auto-silence function is adjustable from 0 to 60 seconds. A discussion of the merits of this system is included in the position statenent on NRC item 3.01.
(3) The statement concerning reset capability is incor-rect. First of all, the terminology that applies is " Ring back." This means that an auditory and visual signal (slow flash rate) are generated when the alarm condition clears on annunciators with the ring-back feature. All "First Out" annunciators have ring-back, and the others may be converted to ring-back by changing a card in the logic cabinet.
We are using the ring-back feature only for annun-ciators that convey important information to the operator by clearing.
The timer circuits, to prevent adjusting alarms to time out in less than the designated time, will not be adjusted by operation's personnel. A nane tag will be placed on, or near, the device with instructions stating a minimum
! setting is to be maintained.
l Alarms typically are not equipped with ring back if its presence prompts short term corrective action in the con-trol room. Exceptions have been made to this rule when a ring back would indicate that a critical parameter has returned to an acceptable value. For example, the " pres-surizer low level-heaters off-letdown isolated" alarm (B-032) is corrected from the control room but is equipped l with ringback.
( This selection process for annunciators " ring back"
~
was based on the following criteria:
A-3-4 l
3.0 Annunciator Warning System, continued
- 1. The operator must perform some function that is either required or allowed by virtue of the change in the alarmed parameter.
- 2. The operator should be alerted to the clearing of an alarm that indicates a significant change in an important system for which he has no direct control or indication.
- 3. The operator should be clerted when corrective action that he has initiated has been effective when a prolonged amount of time will elapse between initiation of corrective action and the clearing of the condition.
- 4. The operator should be alerted when critical systems or components have been returned to operation.
The ring back feature was incorporated on annunciators which met these criteria. The ring back feature is a relatively easy feature to incorporate and the list of annunciators requiring it may very well be changed as operational experience and plant specific need dictate.
Finding 14 The location order of the annunciator controls is incon-(1) sistent from one panel to another (e.g., Test, Acknow-ledge on RL015; Acknowledge, Test on RL019 & RLO23; Acknowledge, Reset, Test on RL019; Acknowledge, Test, Reset on RLO25; First Out Acknowledge, First Out Reset and Annunciator Acknowledge on RL005).
Response The annunciator controls will be repositioned so that they are consistent. In addition, all controls, except the acknowledge buttons, will be recessed to prevent l inadvertent operation. These controls (test and First-
- out reset) will require deliberate attention to acti-vate, thereby minimizing inadvertent actuation of the i test function, and preventing loss of the First-out l infonnation. Labels will be placed immadiately above each button on the gently-sloped portion of the control j panel.
I A-3-5
4.0 Controls Finding 1 Some of the Cutler-Hammer pushbuttons will be diffi-(3) cult to operate while wearing protective equipment gloves.
Response An operator can operate the Cutler-Hammer pushbuttons without difficulty while wearing switching gloves.
These gloves consist of a heavy rubber liner and an outer lerther glove. As the attached picture illustrates, wearing protective gloves even as bulky as switching gloves, does not cause any diffuculty for the operator.
Finding 2 The guarding mechanism for several controls on RL018 (1) consists of a red plastic cover with a sliding plastic plate that is removed to operate. Some of the red covers are not permanently attached and will be easily lost. The sliding plates will also be easy to misplee.
Response The red plastic collars will be attached pemanently to the switch bezels. The transparent sliding plate is not necessary for the guarding device to perform its function. The transparent plate will be eliminated.
Finding 3 The intentional or accidental tripping of the two un-(2) guarded 480V BREAKER J-handle switches on RL016 (Rod Drive Power Supplies) would result in a reactor trip if both are tripped at the same time. Some guarding mechanism is needed for these controls.
Response These J-handles (Breakers: 52PG1901, 52PG2001; Switches:
PGHIS-16, PGHIS-18) will be replaced with red J-handles and labels will be added to identify these breakers as the power supply to the rod drive motor-generator sets.
Finding 4 The OPEN and CLOSE pushbuttons on some Cutler-Hemmer R) switch arrays can be actuated and latched simultaneously.
Rerponse These pushbutton switches are used in 11 applications on the main control board. They are not available from the supplier with mechanical interlocks between the OPEN and CLOSE pushbuttons. These 11 switches are used in non-IE solenoid valve circuits designed such that the valve will travel to the safe position should both the OPEN and CLOSE pushbuttons be actuated and latched simultaneously. The OPEN and CLOSE pushbuttons on these switches are separated by indicating lights eliminating
, the possibility of an operator inadvertently actuating i both functions simultaneously. A more likely occur-i rence would be operator error in forgetting to unlatch a position before actuating the other position. In A-4-1
4.0 Controls, continued this case the valve stays IN or travels to the safe position and the actual vaTve position is reflected by the pushbutton indicating lights thus alerting the operator if this is not the desired valve position. In addition the operator would notice that both OPEN and CLOSE pushbuttons are depressed particularly if the indicated valve position is not the desired valve position.
In the design of the main control board, Cutler-Hammer type E-30 switches have been utilized for valves and dampers and electroswitch type 20 for pump, f an, and breaker controls. This practice was followed to aid the operator in quick recognition of devices by switch type. In order to maintain this standardization some few cases exist where credit must be taken for operator training and procedures. In these few cases we believe maintaining the recognition and standardization of function has greater merit than introducing new manu-facturers or types of switches. In addition, the schematic design has been accomplished to nullify impro-per operator actions for these switches by design of predictable valve travel. Based on the switch and schem-atic design described herein and the main control board switch standardization concept, we conclude that the switches are adequate and proper for their intended use.
Finding 5 Some of the Cutler-Hammer pushbutton arrays are arranged (2) so that they violate plant convention and population stereotypes for the position of the OPEN and CLOSE functions. Some arrays are arranged OPEN/CLOSE rather than the conventional CLOSE/0 PEN. Some arrays are arranged with CLOSE on the top row of the array, rather than the conventional OPEN= top and CLOSE= bottom.
Response The plant convention for the Cutler-Hammer pushbutton switches is CLOSE=left, OPEN=right; OPEN= top and CLOSE=
bottom. Switches with only OPEN-CLOSE pushbuttons were inspected and found to conform.
However, there are other switch arrangements. For example: CLOSE-norm on the upper row with the bottom row lef t bl ank. While it confirms the CLOSE-left convention, it does not follow the CLOSE-bottom con-vention. If this switch is reversed, it will satisfy the CLOSE-bottom convention but in so doing will vio-late the CLOSE-left convention. Since the "nonn" is only a release of the main switch, the CLOSE-left A-4-2
4.0 Controls, continued convention is maintained. It should be noted, there will be no adverse effect if the wrong button is actuated.
Operators will look for feedback indication af ter ac-tuation. Errors can be quickly detected and corrected.
Finding 6 The SYNC CHECK RELAY BYPASS J-handle control violates (2) direction-of-movement stereotypes. The ON function is at the center, upright position, and the OFF function is at the right-hand position.
Response The SYNC CHECK BYPASS control switch will be replaced with a new switch having the correct direction of move-ment; off at center, upright position and on at right-hand position. Handle will be removable only when it is in the center off position.
Finding 7 The BTRS CONTROL SW has an unconventional arrangement of (1) functions. The DILUTE function is located on the left, the BORATE function is located in the center, and the 0FF position is located on the right. This implies that the control, when leaving the 0FF position, must actuate the BORATE function before it can actuate the 4
DILUTE function.
Response This BTRS CONTROL switch will be charged to a type ,
similar to the one on the simulator. The new switch !
will have the 0FF position located in the center with DILUTE and BORATE functions located on the lef t and right, respectively.
Finding 8 The TURBINE TRIP and OVERSPEED controls are placed (2) adjacent to each other. The controls are extremely similar in appearance and could be easily confused.
Response Red plastic collar-type guards will be placed on the PFWP Turbine Trip / Reset controls FCHIS-18 and FCHIS-118.
Finding 9 The two 4.16 kV Bus NB02 Breaker 152 J-handle controls (2) on RL015 are alternate breakers that are not differen-tiated from the adjacent normal breakers. These con-trols could be easily confused and incorrectly activated.
Response The alternate breaker to feed Bus NB02 and the alternate breaker to feed Bus NB01 (152 NB0212 and 152 NB0109, respectively) will have their nameplate engravings changed to indicate they are the alternate feeds. The normal and alternate feeds are also electrically inter-locked to prevent both breakers from being closed and causing incorrect activation.
A-4-3
4.0 Controls, continued Finding 10 There is no way to visually distinguish controls that (2) require continuous pressure to operate from momentary contact switches.
Response All pushbuttons that require the operator to hold the button until the valve or damper has completely changed state or is used to jog the valve to a mid position will be engraved with an "H" indicating " hold." This change will be implemented for all applicable motor operated and air operated valves and dampers.
Finding 11 It is difficult to distinguish the legend pushbuttons (1) from the legend lights on the MAIN TURBINE EHC PANEL.
Response Modifications will be made to either the legend lights or the pushbuttons on the EHC so that there is a clear distinction between the two.
Finding 12 The REACTOR COOLANT M/U WATER control has a STOP position, (1) a RUN position, and a PULL TO LOCK position. There is a stop provided at the RUN position that would indicate to the operator that this function had been activated. How-ever, there is no such stop for the STOP function. There are no other indications associated with this control that would indicate that the STOP function had been activated.
Response A line will be engraved on the switch f ace of BG-HS-26 adjacent to "STOP" to indicate the stop position. Since this switch provides an input to the Westinghouse reactor ,
makeup system and controls the action of more than one device, addition of indication lights on the switch will not be made.
Finding 13 Some J-handle controls have excessive spring tension for (1) their return to center function. When an operator releases the handle from + function activation position, the handle can spring back with such force that the activation of the opposite function occurs. In less extreme cases when the opposite function is not activated, a mechanical indicator flag incorporated into the control is sometimes thrown to the opposite function indication, creating a position /
indication mismatch.
Response The J-handle controls described are being replaced with switches of an upgraded design that will reduce or eliminate the spring back occurrence detected.
Finding 14 On some of the J-handle switches it is possible to (3) riistake the handle of the switch for the position indi-cator, since there are no other position pointers used.
A-4-4
4.0 Control, continued Response An engraved arrow will be added on to the J-handle of all applicable J-handle switches. The engraved arrows will be filled with white paint and clear filler for easy identification.
Figding15 The pointer for the AUDIBLE COUNT RATE CONTROL-AUDIO (3 ) MULTIPLIER partially obscures the position labels associated with the control. In addition, the pointer is not always visible from the normal position of the operator.
Response An engraved line will be added on to the knob for this selector switch. The line will be filled with white paint and clear filler for easy identification.
Figding16 The handle on the MAIN GEN VOLTMETER PHASE SELECT (3) switch obstructs both the position labels associated with the control and the switch pointer.
Response The MAIN GEN V0LTMETER PHASE SELECT switch handle will be replaced with an oval handle which will offer less obstruction of the pointer and position labels.
A-4-5
5.0 Displays Finding 1 There is no indication of PRESSURIZER PRESSURE in the (3) range between 700-1700 psig on RL002.
Response A new pressure indicating channel will be provided for the reactor coolant system. This new instrument channel will have a range of 0 - 3,000 psig. It will be located on RLOO2 in th'e area where other pressurizer instruments are locatad.
Finding 2 When displays fail or became inoperative, the f ailure (2) is not always apparent to the operator.
Response All safety-related displays have a redundant display and/or display of diverse variable (s). Therefore, if any safety-related display fails in a manner that is not obvious (e.g., other than f ailure off-scale low or high), the operator (s) will have no difficulty identi-fying the failure or operating the plant in accordance with approved procedures.
Figding3 The scales for the COOLING TOWERS BASIN LEVEL meters (3) are indexed in feet above sea level rather than actual basin level.
Response The scales for the COOLING TOWERS BASIN LEVEL meters will be changed to reflect actual basin level in feet of water.
Finding 4 The scale on a VARMETER on RLOO6 is inappropriate to (2) measure vars. The zero mark is currently located at the bottom of the scale. The zero should be at the middle of the scale so that the operator could monitor lead / lag by the location of the pointer above zero or below.
Response The meter (MA-JI-4) will be revised to a zero centered scale and provide indication of VARS "IN" or "OUT."
Finding 5 The measurement variable labeling on the scale f ace (3) of the displays is oriented vertically from top-to-bottom, rather than horizontally, from lef t-to-right.
The vertical label on the face of the TRANSFER VOLT-METER on RLOO6 is especially difficult to read because of the length of the legend.
Response The transfer voltmeter on RLOO6 has more information than necessary and is difficult to read. The scale legend will be changed to read D.C. VOLTS from top to bottom. A review of the remainder of the meters on the control boards has produced no other meters with legends containing excess information.
A-5-1
5.0 Displays, continued Fipding6 The process controller scales (0-100) are not labeled (3) to indicate which is full open and which is full closed.
Response The scales on the controllers are not position indi-cators, they are controller output meters. Labeling them with "open" and " closed" could result in an oper-ator assuming that the meter is a position indicator and thereby make an incorrect judgement.
Tinding 7 Several display scales begin with an unnEnbered major (3) graduation mark.
Response Subsequent to an evaluation of all Control Room display scales that were found to begin with unnumbered major graduation marks, it was determined that with the exception of the Rod Speed Counter (SI412) on RLOO3, indicator pointers will remain within numbered grad-uations whenever their associated system is operating.
- 1. 3. Operators with extensive training on SNUPPS simulators ,
'/r ', have indicated that the relatively short duration that '
readings may be outside numbered graduations on the
? Rod Speed Counter has presented no problems to system b
~
operation, and they support the decision that no further
{g action will be taken.
o- >
'r : Finding;8 The lengths of the graduation marks on some of the dis- i
^ ' (2), play scales are not large enough to be read from the required ' distances. l Respons'e The vital infomation is mostly on the front panels where
!. 1 <-
D the graduations can be easily read from the required dis-tance. The back panel and front panel scales will have tolerance ranges marked on them as soon as these tolerances are defined, therefore, being able to read each graduation .
is not required from any required distance, only that the [
- readings are within tolerance. We also have annunciators l
- to alert the operators of conditions out of tolerance.
Finding 9 The size and contrast of the scale markings and numer-als on many of the outer ring displays are inadequate (2)
'r, to be read from the inner ring consoles.
Response With the tolerance zones marked on the scales, the numerals !
,L and scale markings will not need to be read, only that the l meters are reading within the tolerance zones dich will be ;
easily detemined from the inner ring console. !
Finding 10 Some vertical displays use scales which contain both However, no positive t
(1) positive and neg(ative numbers.-) markings appear on the scale(
(+) or negative
! A-5-2 ;
. . - . . - . , . - . - - - . . - - . , - - - , - -,, ,- J
5.0 Displays, continued Response Five vertical meters have been identified which con-tain both positive and negative numbers and do not readily identify which are positive and negative.
These meters are: SE N1-41C, 42C, 43C, 44C on RLOO4 and SC TI-412A on RL003. The scales on these meters will be changed to identify that positive (+) is towards the top and negative (-) is towards the bottom.
Finding 11 The indicator lights for the R0D DIRECTION and the ROD (3) DIRECT DEMAND violate the plant color-coding conven-tion. The IN indicator lights are green and the OUT indicator lights are red.
Response This statement is incorrect. Green is used on the reactor trip breaker indication to show that the breakers are open and the rods tripped into the core.
This is in accordance with industry color convention for breaker position indication. The effect of rod insertion on power (i.e. decreases power) corresponds to the " cold" - green, " hot" - red convention for breakers. For this reason, the current application of green for rods in and red for rods out should be retai ned.
Finding 12 The REACTOR TRIP BREAXER A and B indicator lights vio-(2) late the plant color-coding convention for the use of red and green. These breaker indicators use red =
open and green = closed. The plant convention is red
= closed and green = open.
Response The REACTOR TRIP BREAKER indicators will be revised to indicate red when closed and green when open.
Finding 13 The movement of the scale pointers on the Hagan pro-(2) cess controllers violates the left-to-right increase convention. The magnitude of the scale reading in-creases as the pointer moves from right-to-left.
The CLOSE/0 PEN position convention is also violated.
The OPEN position is to the lef t of the center, and the CLOSE position is to the right.
Response Labels will be added to the seven Hagan controller f aceplates indicating the direction of vernier rota-tion for Open. The seven controllers identified are:
Silver: BGHC123, BGHC128, EPHC943 Black: BGHC182, BGHC387, EJHIC606, EJHIC607 Figding14 The pointers obscure the shortest graduation marks (3 ) on the scales of some of the trend recorders on RL018.
The pointers on some of the recorders on RLO22 totally obscure all graduation marks along with the numerals.
A-5-3
5.0 Displays, continued Response The scales for pointers located on RL018 and RLO22 recorders will be adjusted to allow maximum visibility.
Finding 15 The numerals on the MFW PUMP TURBINE SPEED circular 4
(3) meters on RL005 are placed on the see side of the meter graduations as the pointer. This causes the pointer to obscure the indicated value.
Response The MFW Pump Turbine Speed meters are not used for precise control of the feed ptsnp turbine. They are used primarily during startup of the turbine to give the operator an indication of how f ast the turbine is accelerating. The numerals are large enough that they are not totally obscured.
I Finding 16 The long hand of the potentiometer dial on the Hagen (3) " Full Station" process controllers obscures the dial numerals.
Response The potentiometer dials on process controllers are very similar to a clock f ace, with the short hand in-dicating major divisions of the pot range and the long hand indi-cating fractions of the major division much as the long hand on a watch indicates minutes. As on a wristwatch, the presence of numerals is not necessary for accurate interpretation of the long hand's position, provided the
, major divisions are clearly visible, which they are.
Mistakes in setting these pots are therefore unlikely.
- Should a mistake occur, that f act will be readily apparent from other control room indicators and annunciators, and l such a mistake would be easily correctible.
Finding 17 Displays do not have normal operating ranges or set (1) points indicated.
Response Tolerance zones will be marked on most meters. The mark-l ings should be applied so that they are in the plane of the meter f ace to avoid parallax error. As this involves L
partial disassembly of the meter, plant I&C personnel L
would be involved. Actual application of marking will follow system turnover to operations; it is anticipated i:
that this will be completed by the end-of the first refuel-ing. Temporary markings will be used on the glass meter faces until sufficient operating experience is gained.
Finding 18 Single filament incandescent lamps are used without (1) the means of test for bulb or circuit failure.
Response Single filament incandescent lamps are used for position and status indication.- It is preferred to neon bulbs I
A-5-4
. - -. _ = . -._. . -.. . . - . - ..
E 5.0 Displays, continued since neon bulbs provide lower level of illumination in 1 a well lighted control room enviroment. The single
- filament bulbs being used have an estimated 20,000 hours0 days <br />0 hours <br />0 weeks <br />0 months <br /> i life span. This is a result of the f act that the voltage supplied to the bulbs has been reduced approx-imately 7% to increase bulb life. A burnt bulb can be j- traced by observation alone. Each switch or a group
- of lights for a component contains at least two status lights, one for OPEN (RUN, ON) and the other for CLOSE
! (STOP,0FF). At any given time during normal operation, at least one of the two lamps is lit, otherwise bulb or circuitry problem is indicated. This can be remeaied by either replacing both bulbs or repairing circuit failure.
Verification that the lights are energized will be made at shift turnover.
4 There will be procedural steps for an operator to check i for burnt light bulbs in the Control Room and Auxiliary Shutdown Panel at shift turnover.
Finding 19 The legend lights for STEAM DUMP VALVE POSITION violate (2) the OPEN= top and CLOSE= bottom convention. The CLOSED (green) indicators are located above the OPEN (red) indicators.
, Response These legend lights will be rearranged so that the
. OPEN (red) is on top and CLOSED (green) is on the bottom.
v t Finding 20 The legend plates for the DEMINERALIZER TRAIN "A" and (3) "B" legend lights are not keyed or coded to prevent inadvertent interchange during bulb replacement.
Response There are two identical demineralizer trains located next to each other. .The likelihood of inadvertently 7
interchanging legend lights is very remote if not inconceivable. The one demineralizer train will act as a pattern for the nther train if more than one lens cover is removed for multiple bulb replacement. These
! lights are strictly indication and interchange of lens covers would be apparent to the operator when i
). he initiated a function on the controls.
i Finding 21 The redundant ESF SYSTEM STATUS INDICATION legend (2) lights lack identical layout between the matrices.
They also make inconsistent use of abbreviations. In addition, inconsistent logic is used in the NSSS mon-itoring system that interf aces with these two display
- matrices.
- Response The redundant legend lights have been arranged con-
! sistently. NSSS logic has been revised to be consistent A-5-5
5.0 Displays, continued with the logic of balance of plant components and to maintain a dark board concept. Abbreviations have been made consistent to those used in the annunciator prior-itization study.
Figding 22 The bottom scale on each of the RCP A,B,C, and D (3 ) SEAL LEAK 0FF trend recorders obscures the top of the recorder paper. In addition, the pointer for the bottom scale of each recorder is located behind the scale, prohibiting the reading of current infor-mation.
Response Clear scales have been installed on these recorders.
Finding 23 lhe top of the NIS RECORDER window obscures the expo-(1) nential values at the top of the recorder scale whEn the scale is viewed from a normal standing position.
Response The recorder window will be modified so that it will not obscure the exponential values at the top of the recorder scale.
Finding 24 Many of the two- and three-pen recorders have one pen (2) that is mounted below and/or behind the scale. This location creates parallax which will make the reading of trend information difficult.
Response The " trending information" is obtained by comparison of data over some period of time; not at the exact moment it is printed on the chart paper. Therefore, the area of focus is the larger picture presented by the lines on the chart paper in the large viewing area provideo. In addition, the scale printed on the chart paper provides j
reference to orders of magnitude.
- " Current infonnation" is obtained from the individual parameter indicator and not from recorders.
Finding 25 The recorded data on the MAIN TURBINE VIBRATION AC and l (2) MAIN TURBINE TEMP + EXPAN impact recorders is printed j on top of cther data, making the information totally
! illegible. The graph lines on these recorders are a
! light blue color which provides poor legibility and l
contrast. In addition, the scaling on the graph paper does not correspond to the horizontal scale on the l
impact recorders. The data is recorded in the form l of a number (1-16 or 1-20) of very small size that. is difficult to read.
A-5-6
5.0 Displays, continued Response The turbine recorders will print points that touch each other when all points have the same value. The operator uses the information on the recorder to deter-mine points that vary from the norm. When a point varies from the remainder of the points, it will be obvious to the operator. The color of the graph lines and the scaling on the graph paper will be changed to improve legibility and correspond to the horizontal scale on the recorder. When a single point prints by itself on the paper, the number is legible and the print wheel also has a larger number on it to identify which point is printing. More detailed information can be obtained from the plant computer whenever the operator suspects a point is trending out of its normal range.
Figding26 There are no units of measurement provided for the
'(3 ) counters on RL002.
Resonse Nameplates with GALS engraved on them will be installed directly to the right of the flow counters on BG-FY-111BB, BG-FY-111B, BG-FY-110BB and BG-FY-1108.
Finding 27 The red covers installed over the counter numbers ob-(1) scures the numbers from view. To read the counter accurately, the cover must be reised.
Response The red translucent cover is used to prevent anyone from trying to use the predetermining wheels to see how many counts are remaining. These wheels flip / flop during the count such that the numbers have no meaning, and therefore are of no meaning to the operator.
Finding 28 The glass potentiometers covers on some of the Hagen process controllers are missing.
Response This problem is unique to construction. This type of problem should be noticed and corrected during turn-over.
A-5-7
l I
6.0 Labels and Location Aids Finding 1 ' There are several horizontal meters on RL013 that are l (1) missing their associated component labels.
Response Anmeters located in the feeder circuits are positioned above the associated circuit breaker control switch.
These meters are adequately identified due to location in mimic and proximity to associated circuit breaker control switch nameplate.
Finding 2 Two CIRCUIT / LAMP TEST pushbutton arrays on RL017 are (1) not labeled. This makes it impossible to determine which of the buttons serves each function (circuit test or lamp test).
Response The engravings on the two CIRCUIT / LAMP TEST pushbutton switches will be changed. The upper pushbutton will read "INTLK TEST" and the lower pushbutton, "VLV TEST".
i Finding 3 There is no label with the REACTOR TRIP BREAKER A and (2) B indicator lights to indicate that the red and green mean closed and open, respectively.
Response Red for closed and green for open is a color convention used throughout the control room for breaker position indication. Since the reactor trip breakers do not differ from this convention, no special labeling will be used. The indicator lights will not be labeled "open/ closed" because those that are labeled are push-buttons.
Figding4 There are no permanent panel number identification (3 ) labels. Temporary labels made of dark gray duct tape that are very hard to read have been put on some of the higher numbered panels.
Response Labels with the panel numbers will be added to the control boards.
l The SAFEGUARD SYSTEM switches on RLOO3, which illum-f Figding5 l (3 ) inate to acknowledge / clear status indicators on RL018, have no labeling to indicate their function.
Response Demarcation lines and a summary label will be added to clarify the purpose of this group of buttons. (See sketch) i
(
! A-6-1
6.0 Labels and Location Aids, continued Sketch to Finding 5:
ESF STATUS PANEL SYSTEM LEVEL LAMP ESF ALARM
/ MANUAL CONTROL V~ ACKNOWLEDGE T l M** l K' 9 I l "4. 35.'"
- l 'oT'# ' * :: = = *
. .. """ .ll:T"" =.3.b
?! W ET v! TI' d~ff .
]IL. O l.'E.
~
. i ?! ]d.
.~.:
w -
3 i'. li.I ^I
)
GI l *%.W I #t'UD#' '9. ""#' #sY""*** "":.=""
- .
- :t v. vT Tif v' . -:
Y, d v. -
? I 97 -! si s ". n /
Finding 6 The label on RL002 that reads BORIC ACID TO VCT INLET (1) is incorrent. Boric acid is not sent to the VCT because of possible fouling of the VCT spray system.
Response The label on RL001 for BG HIS 111B will be changed to read:
MAKEUP TO VCT INLET.
Finding 7 There is an incorrect label for the TRAIN A RETURN (1) VALVE. This label should indicate that this is a SUPPLY / RETURN VALVE.
Response This label will be changed to read "SPLY/ RETURN VALVE" on RL019.
Finding 8 The J-handle label XMR01 TO XNB01 BREAKER 252PA0201 on (1) RL016 is wrong. This label should read XMR01 TO XNB02 BREAKER 252PA0201.
Response The label for NB-HIS-1 will be revised to read 13.8KV XMR01 TO XNB02 BKR PA0201.
Finding 9 The label for the CONTAINMENT ISOLATION PHASE B SB-HS-47 (1) J-handle control is incorrect and should read PHASE A.
Response The label for switch SB-HS-47 will be revised to read "CISA" (RL018).
Finding 10 The label for the N SUPPLY 2 CTMT ATMOS ISO VLV EP-HC-9.'
is incorrect. This process controller is for a vent valve, not an isolation valve.
Response The label for process controller EP-HC-943 will be changed to "ACC N2 SPLY VENT VLV CTRL".
l f
i l A-6-2 l
L,
)
l 6.0 Labels and Location Aids, continued Finding 11 There are no functional or system summary labels.
(3)
Response Panel number: are being added. The close functional relationships that exist on each panel segment are well understood by trained operators. Addition of summary labels is unnecessary and would add visual clutter.
Figding12 The heirarchical labels for the PZR RELIEF TANK in-(3 ) dications and the REACTOR C0OLANT LOOP FLOW indications do not clearly fulfill their purpose. The system portion of each label is engraved with the same size type f ace as the indication identifier portions of the label.
Since the system portion of each label is engraved oser the center indication identifier, it appears only to apply to that indication identifier rather than to the whole group.
Response The labels for Reactor Coolant Loop Flow and PZR Relief Tank will be changed as below to make it apparent that the system portion refers to the group of indicators rather than just to a specific indicator.
LOOP REACTOR COOLANT FLOW BB F1- BB FI- BB FI-PRESStlRIZER RELIETTATK BB TI-468 BB PI-469 BB LI-470 Figding13 The EXCESS LETOOWN OUTLET TEMPERATURE and PRESSURE (3 ) display labels on RLOO2 do not follow the recommended guidelines for hierarchical labeling. The group label for the pair of meters does not include the word OUTLET, which is, therefore, engraved before PRESSURE and before TEMPERATURE. Labels on displays directly adjacent to this group do follow the hierarchical labeling guide-lines.
Response The label for Excess Letdown Temperature and Pressure will be changed to follow the hierarchical labeling guidelines as shown below.
EXCESS LTON HX OUTLET TEMP OUTLET PRESS BG TI-122 BG PI-124 l
l A-6-3 I-
6.0 Labels and Location Aids, continued Figding14 The size of the lettering on the component labels for (3 ) controls is not 25% larger than the lettering on the control position labels, as reconinended. The position label lettering for all of the J-handle controls is the same size or larger than the associated component label lettering.
Response Component labels have a distinctive shape and lettering and are always located above the device to be operated.
After locating the correct device, the operator then determines the desired position by the labeling on device escutcheon. Due to this serial operating activity, adequate emphasis is provided by the label-ing distinctions now provided.
Finding 15 The labels for some indicator lights on RLO13, RLO14, (2) and RL018 are located below the lights. Lsbels are conventionally placed above their associated compo-nents elsewhere in the control room.
Response On panels RL013 and RL014, the nameplates for some indi-cator lights are located below the lights in order to provide needed information while maintaining the mimic to a reasonable size. On RL013, pump dischage valve position lights are located at the bottom of the panel and due to the specific arrangement, the identification of these lights is positive and unambiguous. On panel RL014, the 345kV circuit breaker controls consists of time-proven control switches and indicating lights. This arrangement provides the most compact arrangement possible for these devices considering back panel wiring. Operation of these controls is infrequent and does not require rapid compon-ent identification. In some cases control switches are only shown by the mimic, these nameplates are also located below the lights for consistency within the switchyard mimic.
Generally, all controls and indicators located on panels RL013 and RL014 are related to systens and equipment which are ancilliary to the main unit operation and do not serve safety related systems. Operation of the controls on these panels is infrequent and requires unhurried responses.
Additionally, these panels are located at the lef t extremity of the control board and will have minor effect to the operation of the other control panels.
A-6-4
l l
6.0 Labels and Location Aids, continued l Subsequent to the mimic study performed on panels RL017 and RL018, it was determined that locating indicator light nameplates below the indicator lights and above their associated control label helped araw the operator's attention to their close association and also allowed more freedom in relocating the mimic lines. See also finding 9.1.
Fipding16 The label for the T REF/T AVG AUCTIONEERED trend (3 ) recorder is located at the bottom of tne recorder, rather than above as is the plant convention.
Response The location of the label is such that there is no question at all as to which device it refers to. There is inadequate room to locate the label above the re-corder. See sketch
_,,,.6 ..
,. 1 .
1ll;,
I
. . .. . . .q mmmmmmiemumm
' n 1 i l a 1. I t . 1 h[Iifkl fy,Id:,
i4H- 4H 7~ .:L..
I Ws I _
A-6-5
6.0 Labels and Location Aids, continued Finding 17 The labels for the displays that are located at high (1) positions on the outer ring panels are not readable by an operator at the front edge cf the panel. These labels are obscured from this position by their asso-ciated displays.
Response In those high locations where the labels are not read-able due to obstruction of associated display devices, the labels will be moved or installed with adequate spacers underneath the labels so that the labels are readable by any operator at the front edge of the panel.
Figding18 The central annunciator response control labels are not (3 ) visible from a standing position at the benchboard edge.
Response All labels for annunciator response pushbutton switches will be relocated to the top of console benchboard.
These labels will be situated on the edge of the con-sole benchboard directly lined up with corresponding pushbutton switches.
Figding19 The STM GEN A through D DUMP CTRL AT SliUIDOWN PNL (3 ) labels are placed such that they can Le associated with indicator lights that they do not apply to.
These labels apply only to the white light in each group of one red, one green, and one white indicator light. The red and green lights in each group are associated with the STM GEN A through D STM DUMP TO ATMOS VLV POS 1abels.
Response The labels will be rearranged. A 1abel bearing "SG B STEAM DUMP TO ATMS" will be centered above the red and green lights. A 1abel bearing "SG B STEAM DUMP CTRL AT S/D PANEL" will be centered on top of the white light (RL006).
Finding 20 The ESF XFMR XNB01 UNIT 2 and the XFMR SPB 218 AND (2) MISCELLANE0US TRANSFORMERS 1abels are located side
- by side in association with an indicator light. It is not clear from this label arrangement what the associated indicator light refers to.
Response One nameplate (ESF XFMR XNB01 UNIT 2) will be removed.
This is site specific to Callaway. l Figding21 The DG NE01 REGULATOR NULL INDICATION label ON RL015 (3 ) is not attached to the panel. The screw holes in the label are drilled in the wrong places to fit the holes drilled in the panel.
t i
A-6-6 i
l
6.0 Labels and Location Aids, continued Response A new label indicating "DG NE01 REGULATOR MAN / AUTO SIG l MATCH NEII-5" will be made and affixed to the RL015 benchboard.
Figding22 Some labels in the control room have come loose. Most (3 ) of the loose labels were glued to the painted panel surface rather than screwed on.
Response All labels will be inspected for proper installation.
Those which became loose will be secured.
Finding 23 The label relating pen color to displayed parameter (1) on some recorders is located in the recorder window.
This label location obscures part of the chart paper when the recorder door is closed, and the infomation provided by the label is not available when the door is open.
Response The label relating pen color to displayed parameter will be relocated from the window to the bottom part of the door.
Finding 24 In addition to the standard component labels, there (2) are one or two labels incorporated into the top and/
or bottom edges of some of the Hagan prccess con-trollers. These labels generally provide either re-dundant or confusing infomation. In some cases, the incorporated labels which use small print, contain the information that is necessary to differentiate between adjacent controllers.
Response A study of Control Panel labels was being performed and redundant infomation will be deleted. Along with this all necessary infomation to differentiate between controllers will be included on nameplate labels.
f Finding 25 Several J-handle controls on RL015 are designed with (3) the numeral "1" occupying the central position between 0FF and ON. The numeral "1" is used as a procedure step to enable synchronization of offsite power sources with the diesel generators, but as presently labeled does not convey any meaningful infomation to the operators.
Response The "1" occupying the center position between 0FF and ON J-handle controls on RLO15 will be changed to "I".
The "I" stands for indication.
A-6-7
l l
l 6.0 Labels and Location Aids, continued Figding26 The J-handles on RLOO6 that are labeled STEAM FLOW (3 ) SELECT SW, FW FLOW SELECT SW, and STEAM GENERATOR LEVEL SELECT SW do not select flow or level, as the labels indicate. They select the channel from a flow or level sensor that will be used as an input to the Reactor Protection System.
Response This statement is incorrect. These switches select the channels of each of the three parameters, steam flow, feed flow, and steam generator level that are to be displayed on the associated trend recorder, and that are input to the steam generator level control system and main feed pump speed control. These switches have no control over inputs to the Reactor Protection System.
The word " channel" will be added to each applicable nameplate to show selection of channels.
Figding27 Five valve control switches in a group of eight on (3 ) RLO24 do not have component labels that indicate that they actuate valves. This problem also occurs other places in the control room.
Response - A study on Control Panel labels is being performed to insure consistent labeling is used to denote what a switch is actuating.
Finding 28 The TD AUX FW PUMP TRIP / RESET pushbutton has an in-(1) tegral label that reads TRIP. This integral label makes it unclear whether the button can also perform a reseting function, as the component label implies.
Response This switch is being eliminated from the main control board.
Figding29 A label on RL002 which refers to the emergency bora- I (3 ) tion system imprecisely reads IMMEDIATE BORATE FLOW.
Response The label for indicator BG-FI-183A will be revised to read "EMERG BORATE FLOW."
Figding30 A label on RL002 which refers to the emergency bora-(3 ) tion system imprecisely reads IMMEDIATE BORATE TO CHARGING PUMP SUCTION.
Response The label for the emergency boration system on RL001 will be changed to read "EMERG BORATE TO CHG PUMP SUCT". l A-6-8
~
l 6.0 Labels and Location Aids, continued Finding M The labels for the MAIN TURBINE LIFT PUMPS J-handles (2) and indicator lights do not clearly imply the asso-ciation between the components.
Response Demarcation will be used to make clear the association between indicator and label (see response to finding 6.47).
Fiyding32 The labels do not consistently use terminology or (3 ) abbreviations even in directly adjacent applications.
There is no consistent application of abbreviations in place of complete words. This is a wide-spread problem throughout the control room. For example, adjacent display groups on RL001 use VCT and VOLUME CONTROL TANK.
There is no space constraint that would require the use of the abbreviation VCT on the one label.
Response Some components are recognized as readily by their abbreviation as they are by their whole name (for example, RCP, or RWST). For these items, only the abbreviation will be used on labels. For all other components, the entire name will be used where there is room on the label to do this. Where there isn't room an abbreviation will be used. A study on Control Panels is underway to ensure that abbreviations, when used, will be uniquely defined and consistently applied for each component.
Figding33 There is noAbbreviations trol room. standard abbreviations list for the con-are used inconsistently (3 )
throughout the control room.
Response A SNUPPS Control Room abbreviation list has been gener-ated by the annunciator prioritization and label study.
It will be controlled and used for all main control board abbreviations.
Fipding34 The RCIC DRAIN TANK HX DISCHARGE pushbutton does not (3 ) use the abbreviation for " normal" used elsewhere in the Control Room. Instead of the standard NORM, this pushbutton reads:
NOR MAL.
Response The pushbutton for HB-HIS-7176 will be revised to read
" NORM" in order to provide consistency with other push-button labeling.
Finding 35 Three labels on RLOO4 are missing the delta symbol that (1) indicates temperature change. The labels incorrectly read RCLP 2T, RCLP 3T, and RCLP 4T.
A-6-9
6.0 Labels and Location Aids, continued Response The labels for indicators BB-TI-421A, 431A and 441A will be revised to indicate A T.
Finding 36 The label on RLC04 for RCLP 1 has e "A" instead of a (1) delta symbol.
Response A new label with the correct " Delta" symbol will be made and affixed to the RLOO4 panel.
Figding37 The engraved lettering on the small red pushbuttons (3 ) on the Cutler-Hammer switch arrays is too small to be easily read. The letters are filled with white paint that has become dirty, which has further degraded their legibility.
Response The referenced Cutler-Hammer switch is comprised of main pushbutton (PB) switches and corresponding small reo PB switches integrated in one switch assembly.
These switches are situated right next to each other and bear the following engraved lettering:
MAIN SWITCH SMALL RED PB SWITCH OPEN CL5 CLOSE NORM NON-ISO 150 It is therefore evident, the small red PB switch serves only one function - to negate the main switch function.
It deactivates, or releases, the main switch.
Operating personnel executing a switching operation will observe the main switch function - to open, close, or non-isolate. When he wishes to perform the opposite function, he will actuate the small red PB and has no real need to refer to the lettering on the PB. The lettering is merely provided as a backup reminder to assure him of its function. Improperly engraved / fin-ished engraving will be replaced.
Findino 38 All of the labels in the control room appear crowded.
(3) The inclusion of the engineering number on the compo-nent labels in the same size lettering as the primary identification infonnation contributes to this crowded appearance.
Response A study on the Control Panel labels has been perfomed to alleviate the crowded appearance.
Figding 39 The character height of thc position labels on J-handle (3 ) controls is under the reconinended minimum size for the normal viewing distance of 28 inches.
A-6-10
6.0 Labels and Location Aids, continued Response will be changed The existing circular to horizontal format.label engraving Larger letters/ numbers will be engraved on the escutcheon.
Fi9ding 40 The contrast of a majority of the colored labels is poor (3) Some of the combinations of background / lettering colors are: black / white, white / black, red / yellow, yellow / black, etc. Only the white / black are optimally legible. The red / yellow labels are especially hard to read.
Response The use of colored labels to identify controls and indi-cations by separation group is an exceptionally useful tool during many plant transients. It is particularly useful when responding to a loss of power in a specific train, including AC power and DC or AC instrument power. .
The operator can quickly identify degraded controls and indicators based on the colored labels. The label en-gravings are legible at the viewing distance that exists when an operator is operating an associated control.
When an operator is at a greater distance (the center of the control room, for exanple) he can make a rapid re-view of critical component status on a train basis using the color of the labels, component status lights, and ,
knowledge of panel layout. At this distance (12'-15')
engravings of any color combination would not be legible. ,
Replacing the colored labels with black and white ones would eliminate a vital form of information. A yellow 1 border will be provided around red labels that currently ,
have yellow lettering and the yellow lettering will be 3 changed to white. r F1 ding 41 The engraved legends on the keys of the process com .
9 puter keyboard are hard to read. The magenta function (3) key legends have especially poor contrast, and some of !
the other keys have inadequate engraving depth.
Response Magenta function keys will be changed to a neutral color along with the remaining function keys. The legend engravings for the new key caps have been verified to be satisfactory.
Fi ding 42 The label script on the TEST INTERLOCK LOSS OF PWR 9 PRESS SIGNAL and STEAM DUMP VALVES POSITION engraved (3 )
indicator lights on RLOO6 is barely readable due to inadequate engraving depth and lack of script filler pigment of contrasting color.
1 i
l A-6-ll
6.0 Labels and Location Aids, continued
, Response The two indicator light lenses for the TEST INTERLOCK
! LOSS OF PWR PRESS SIGNAL and STEAM DUMP VALVES POSITION will be replaced with new lenses bearing adequate en-graving and proper script filler pigment of contrasting color.
I F19 ding 43 The engraved surfaces of the labels have no clear ;
(3 ) filler to prevent the buildup of dirt. This will result in eventual reduction of legibility.
Response All labels will be inspected for adequacy of engraving l and smoothness of label surf ace finish. Those which are found unsatisfactory for any reason, including suscepti-i bility to accumulation of dirt, will be replaced. Peri-odic surveillance to review board cleanliness will be performed and boards will be cleaned as required, t
l F19 ding 44 The label engraving style makes it impossible to dif-i (3) ferentiate the letter "I" from the numeral "1". Both
! letter and numeral are represented by a vertical slash.
Response During the label study, engravings will be reviewed and corrected where necessary to allow the letter "I" to be distinguished from the numeral "1". In general,the con-text informs the operator whether a "1" or "I" is intended.
Figding45 The AUTO position label for several control switches on (3) RLO25 is a decal and therefore subject to easy removal.
Response Control Switches CB-HIS-4, 5, 6, 7, 8, 9 and 10 will be replaced with switch plates having "AUT0" engraved rather than stick-on labels.
Figding46 Several J-handle selector switches on RLOO5 and RLOO6 (3 ) have position labels that are decals that can be easily removed.
Response RLOO5 has no decals on any of the J-handle switches.
RLOO6 has four (4) J-handle selector switches with decals. (AE LS/519C, AE LS/529C, AE LS/539C, and AE LS/549C) These decals will be removed, and the required lettering will be engraved on the switch C0ver.
Figding47 Demarcation is not adequately used to visually isolate (3) separate system components or to enhance existing re-lationships between components contained within the
, same system.
l l A-6-12 L
6.0 Labels and Location Aids, continued Response PANEL DEMARCATION PLAN REMARKS RL001 none panel contains extensive mimic RLOO2 none mock-up was constructed and evaluation showed no need for demarcation.
RLOO3 see sketch Same as finding 6.05.
RLOO4 none simple panel layout, re-quires no demarcation RL005,RL006 see sketch RLO11 see sketch RLO12 none RL013,RL014 none These panels contain ex-RL015,RL016 tensive mimics. Use of RL017,RL018 demarcation lines s RL019 not needed to improve clarity, and would inter-fere with mimics.
RLO20 none RLO21,RLO22 see sketch RLO23,RLO24 none These panels contain mimics and do not require demarc ation.
RLO25,RLO26 see sketch RLO27 none This simple panel arrange-ment contains a mimic and does not require demarcation.
RLO28 none A-6-13
i !
DEMA RC AT/o M Fon PA NE L R L ooJ ESF STATUS PANEL SYSTEM LEVEL LAMP ESF ALARM '
/ MAMJAL CONTROL Y ACKNOWLEDGE l M i ane I m.39: I .55::-- l '19 - et:?S- '"" .- w- - +;s -
. W TT Is> r. 'f1TI CT TT E lT T v -
01T tsL'i I si s
z u.:..u : rev s. .m_. i. ..-
.v.r. . i> v..a v. ,_ ..
. $ "L ' !
...T YI
= 7 YI w y W
=,7 "f' ~ ,
A d a. '
- k h
/\
8_ h
/
I A 6 - 14
~ '
U ~l l r L i
I i
! me t W! ! ; -
'
- Lt i_'
4 o, DE M A R C,A T TON fcR
... , e ed j e 4 _'O i art T
~
e- A WE L S k l coS~ f R L 00b #
-h
- -; 4;v - ,
% W g- - - - ?. ,i e
- 4:
,. t _ -i _
~ ~ ~
e j
', L e ip,,m.3,i.m
<c------- 1 r n'
,~~~-~ .7 N '
.! -I [j f,. , - - - - - ; ,_- - -[- - -;1> Lf_ . ------
l, .,
I 4'].; s g d
el - - ,* l ]l +
.)
l
=
9I iTj m
,.i. i -.
_ i -- * , ,. b.
It--
vl k e, st'.l? a 7
j . ig r - - - - - - '
ll l1 c---
- t. _.tg t s _ _ _ . _ _ _
1 m
l i Yf' ( *l, ,s . .- l f {
L.---._._a.,,-'
L .-__.____
x p
r _ _ _.s . .s l'
t
j
-- _J "ll] - f f
._ll 33 J_
2 ll $U.
ib _!i. ]
_ L ._
'_L - _
< n,-
, e r--- . **
.__;_-- : , fl - ,
-#, , y F,.' T l M.
< k ,
l .g i
- y T__-=--.----------
1
. i 7,- - = 9.- __@:
a ?j -
3
~l] kL s ,.-
Ltt gy ll -
l t ,
a 3 .j(o'j[Ig n s yh ,
nr ll o
r- - , . _ ----r----+- - -
I h
L wlI *
'd 'l t
3[ __ _
{i .
b
' f { I
~
) l 28 e .I i-O.8 tw ,_ ..a_. a ._1 b
- t. L, l
t d La l7.1b - ' __'
< _l $l F'J E ,
N r
I tm 0 ) [_[- 0 { @ L F11 o _
i
-,-- 11 IFI, .
l l]- ij -
}
e.
7, _
g
'"gI. .
=
3 -,9 I
E l Q
W _~
'*y 0,
' l (-
b, - f ,y t i ,l : = _ - b, _ _
s a
~l ll -,,
, > ,, ,, ,- +
(~ r 2 6 I' i - _ u. J J.2 _
i _; h !
r I
'i ,
ff , - -
r EG. ,
l -- .- - - .b (
j _.
k3 r ._. l -
. ,i w i wQ f I t I i
- f 4 . -.E ,
I I'i jJii 2 o
- I l ..! .,! !
l l : .e I -
~ _ ' ,5l -
I i l ,
' Q_- -
i i
-r I
'4 A 15 6
e A
l FOLO LiNE
\ '
RLOlf.
/
I D EM A R C. ATIo A/ Fon NAMEL_ RL oil V.
l d
8 w
5 2
2 I
I Fw'mh e-d
<;;;g a = =,.'i r c;;; ;;;;; = c;;;
e,[
i dl
,= = e, =~=a
!i_ E _*d I
g , w ,
=x
9E212li2999
== =e =e y
is E E, A ,'0- =A 0, E I w-==~ = = = = ' I
_4b'~k.f.! b b, LkfE !5kl _
! 7 'Wl\W =
t O<>
CQ A 16 7
w
,' h '
- . N ru y -
v -
- o.
r- - - --h
- ~
E l:
~
r3------,-i ! o3 oh b
' ]4 1
e i' c c:
3L;. . . . . . ..J l y h
, g dl P.l r,------il l_ E !
Itl i
'[]; si],r[n-l ,s iu I
e u
- , u_ _
'\
e __D EM A R C ATIOM F*O R E \
"_---~
i I
, -1*.-
tI _.~j
- g_ r---;
Ei E! E '
R t_ 02. s / R L o 22 o
.-], e
. Fl]M. s,
- u u-
,. . _ - _ - _ . - s, 'Ui
, 4- , ' n" P< E,-ilN ;
f,l_B,'J~)
- t. '- --
- ..__..._:_J lg r
ij -
9 ,_
,i i .
l_
3
~
e lU Q l l_ '
j, I ! 'l
___c_____
, [
, p ; c____..___. __ , 3 a,
- t. _ _ _ _ _ _ _,
i t:Lil y c:____ B_15l __ -_ _ _ _ , _
0 toe g1 g
l
_e_ :
=Rst. _ r_j Ujos 4 s
=
C2 J g
] t
~
0
~
,J. t J I B B
9 0
~
l 3 gs
'SJ t
> i E :E _
_ r---
- __ O ]
M
_l t
_3 _LE.___a [_ *1l -_
i j a -s -
r -_- A .
l*
e C3 1 m
':- - r :
1 n -
e _-
?. -
3 g _
L1 -
e ci- .1:r_- -s.,l- B, M M . ,,, T
\1 T k ,
_j__ - .
l4 _l 8 t _ ]c.-- Bl,
- s
- d. - - -
u . . -L , _ y _
1' p,900';3 r 9ov3 040 2 Nil M 3A vW l y
t A 6 - 17 9
0
I r 1050 c T bdE'M A RC-ATs av Fo R --
l e t "l~ e U en .*v-
'{l i
g .
t 4 l- I j, )
s 5 _
J __. P A MEI 5
_ R L ozs f' Ps L o2 6 p_~f ill i e,..........a il, l. -7* is f e
R',\
l-b._
L,:
L' . _ _ . .
e e e p_ .
l
~
w
]7
- AR a j
}'
e 1 a
_J )) 't e-l l' ]O ]3 E: 2 0!R0l:EW,
_ Ll . _
- - 1 R 4 =,w'l *
=
0! ED- -
3 00B E
-- s m..,
i ,9 '
gg 9 -)
9 N '
d t - I L L- I 1l ei . - . ~J ut__. J g ; l <...
s .--. -
l . - .
52G E.~ !
- 1
~
Dz E TE D3
..-..--,---_... . . , ,p
- ;) - - - - I- - - -
S
[ (l I b 1ll @ Q
, - _ _ _ . . . . . . . . _ _ __. - - - - - s - = - m - - - .- - - . m
{
~
g I l
J- -
Ii _: -
i : : a
',. 23:E gL
, [._ b si y
c.
_ d _
~
a 3 T 0 0 g
~~~
U T U! I _I 3[l _
Q g __
,,:~ ~~~~1_' ~ ~
e s 6-I E T .
"f g l _ . .
A sh I h I l [. 'f T hp
';; _ ]"l v ( -
- - J _
/- -
, ,, _ s b d', _
- - - - - - - * - - -" ~ ~ " - - * * -
5 . - . . . . . . . _ _ _ . g -
j .
ll
- ll tJ o
t
]
l a
5 t -
I I
9 . 7 b b 5
) 9
!)$ 3 3 l,C s ,rs
\- -
/- j3 , T
+%- 1 , -t 3
o
[-
. l!
=. _Lj tll .
g
- = . .. _. _ .. ._ " - * * - , " * - __---" --ll,--* ;
v D E ll 3 ] 1 i
a - - "
i
- t b@g :3 ,j.,
s s J J J I
G: t J s
. I i 4 OLOFO
- F - CCFOs CMG 3eeli M3&wn i
.-_._-._..__.-_3,,.,.._..~~~~-- ~ ~ ~ ~ "
A 18 o .>
ies
r 6.0 Labels and Location Aids, continued Finding 48 The label color-code used to differentiate between (3) electrical trains is not consistent with the other uses of color in the control room.
Response Identification of safety-related electrical trains provides the operator with significant information regarding potential train degradation. The essential safety functions provided by these electrical trains during an event requires significant operator aware-ness regarding train status during all modes of plant operation. Train color coding as now used provides added emphasis consistent with these safety requirements.
Figding49 The mimic on RLOO1 incorrectly implies that the (3 ) CHARGING HDR FLOW control only controls the rate of flow in the flow path, since a single mimic line goes to the control and a single line leaves the contrcl. The mimic does have a second outlet line to indicate the portion of the inlet flow that is used for reactor coolant ptsnp seal injection.
Response The CHARGING HDR FLOW CONTROL (BG HC 182) will influence RCP seal injection flow by manually varying backpressure in the main flow line. Overall flow is controlled by CHARGING PUMP FLOW CONTROL (BG FK 121) which automatically compensates for changes made by BG HC 182. A label indicating "RCP SEALS" will be added to the mimics to improve clarity.
Finding 50 The mimic on RL001 dees not show flow from the CEN-(2) TRIFUGAL CHARGING PUMPS through the CHARGING PUMP (mini) FLOW VALVES.
Response The CVCS mimic has been evaluated and modified to include this flow.
Figding51 The mimic lines have warped and come loose from the (3) panel surface in several places. Several mimics are missing portions of mimic because the lines have broken completely off.
Response All mimic lines will be inspected for correctness in shape and security on board. Defective or missing lines will be replaced. Those that cane loose from the panel surface will be secured.
Finding 52 There is a missing section of gray mimic lines between the 480V XPG20-LCPG20 BREAKER 52PG2001 J-handle con-trol and the 480V LC PG19-PG20 TIE PKR 52PGl916 J-handle control. There is also a missing section of A-6-19
6.0 Labels and Location Aids, continued mimic lines between the 13.8KV PA02-XPB04 BREAKER 252PA0208 J-handle control and the 13.8KV BUS TO XFMR XPB04 AMPS vertical meter.
Response All mimic lines will be inspected for completeness.
The two missing sections will be replaced.
Finding 53 The transfomer symbol label in the mimic for the (1) 480V XPG25-LC PG25 BREAKER 52 PG2501 J-handle breaker control is upside down. The gray portion of the label which symbolizes the 480V side should be on the bottom, and the black portion of the label which symbolized the 13.8KV side should be on the top.
Response All mimic symbol labels w111 be inspected for correct-ness of orientation. The transfomer symbol label for the "480V XPG25-LC PG25 BREAKER 52PG2501" will be re-versed so that the gray portion of the label is on the bottom and the black portion of the label is on the top.
Figding54 There is no consistent color-coding of mimic lines.
(3 ) For example, nine different colors are used for electricity.
Response Control panel mimics were reviewed and colors were assigned as described bele,w:
For electricity, the following colors apply:
Yellow - 345KV Orange - 4.16KV Black - 13.8KV Silver Gray - 480V For water, the following colors apply:
Red - Containment Spray Blue - Borated Water except Safety Injection Gray - Unborated Demineralized Water Tan - Test Lines and Boron Injection Recirculation Orange - Condensate and Feedwater Light Green - Essential Service Water Yellow - Component Cooling Water Purple - Safety Injection For other processes, the following color applies:
White - Nitrogen Figding55 The mimic lines are not graduated in size to differ-(3) entiate primary flow paths from secondary flow paths.
A-6-20
d' 6.0 Labels and Location Aids, continued Response A complete review of the mimic display was made.
Mimic line size for primary flow paths will be larger than mimic line size for secondary flow paths.
Finding 56 Some mimic line flow arrows indicate the wrong direc-(1) tion of flow.
Response All mimic line flow directions will be inspected.
Those showing the wrong direction of flow will be
, corrected.
I Figding57 Several labels within mimics on RL019 are intersected r (3) by mimic lines when no actual connection exists between the components indicated by the labels and the L flow paths represented by the mimic.
Response The mimics on RL019 have been reviewed and will be
- modified to correct this finding.
Figding58 The label leading to the 4.16 KV BUS N801 BREAKER and
!- (3) the 4.16 KV BUS N802 BREAKER J-handle controls on the breaker mimic on RLO15 is not clear in its specification
! of the origin of the mimic. The label reads OFFSITE POWER, while it should more appropriately read FROM ESF XFPR XNB01.
1 I Response The Mimic label on RL015 will be revised to read "FROM ESF XFMR XN801."
Finding 59 Several of the line origination and termination labels (1) for the mimics on RLO17 and RL018 provide the operator with inaccurate information. Some of the origination labels indicate where the line should be going (TO) as a termination label should, while some of the termination labels indicate the origination of the line (FROM) as an origination label should, i
i Response The mimics on RL017 and RL018 have been reviewed and will be modified to correct this finding.
Finding 60 The accumulator mimics on RLO18 have lines that termin-(1) ate without labels to indicate their destinations.
i ..
Response The mimics on RLO18 have been reviewed and will be
.. modified to include labels to indicate destinations.
I Finding 61 The arrangement of valves in the mimic that depicts (1) the flow of boric acid and make-up water to the volume
[. control tank indicates that boric acid can be sent to
~
the volume control tank spray. An operator reported A-6-21
l 6.0 Labels and Location Aids, continued l that the valves can even be arranged to accomplish this. If a check valve exists that prevents flow in the indicated direction, an arrow or check valve synbol is needed on the mimic. If there is no such flow re-striction in the system, a label is needed to caution the operator not to arrange the valves in this way.
Response There is no check valve that would prevent the flow described. A label will be placed next to the switch with the engraving: CAUTION: 00 NOT BORATE VIA BG FCV1118. This is not a safety concern with the ShuPPS design but merely a delay in the boric acid response.
Finding 62 The N, SUPPLY CTMT ATMOS ISO VLV EP-HC-93 process (1) contrblier relates to two separate mimic loops but visual connection is poor. This is due to the lack of a mimic line termination label.
Response This HEF was corrected with the mimic changes on RLO17 and 18 mock-up. A direction label will be added to the mimic indicating "TO ACC TANKS A & C."
A-6-22
'r 7.0 Process Computer Figding1 The computer system does not include a file of operator (3) entries. The sequence of events log will include oper-ator entries, but these will not be isolated, grouped or coded in any way.
Response All operator entries are printed on the operator's printer, located in the control room. Each entry is logged as it occurs. This is desirable in that control room personnel are immediately cognizant of the status of computer displays, logs, trends, etc. Operator entries are positively identified by the nature of the printed message. We propose no further coding as it would tend to clutter the printout.
Finding 2 The CRT displays can be aff ected by each of the key-(2) ' boards. This mtans that an operator at one location can disrupt and lose data on a CRT that another opera-tor is using. In addition, there are no signals on the displays or elsewhere to indicate which keyboard is being used to effect a particular display.
Response A sof tware change will be made to insert a verification step into the computer code. The user at the engineer's console will request a display to be brought up on a control room CRT. At this point the computer will ask the user if he wants to change the display. He will answer "yes" and the display will be brought up. In-serting this extra step will insure that inadvertent removal of displays does not occur. The two keyboards in the control room are in such close proximity as to preclude any problem. Therefore the verification step will not be inserted for control room users as it would introduce unnecessary delay. A message on the displays indicating the originating keyboard would unnecessarily clutter the screen.
Users at the computer engineers' console have no need to change displays on the control room CRT's. However, if the control room CRT keyboards are inoperable, the engineers' console can serve as a back-up keyboard and change CRT displays in the control room as directed by the plant operators. The verification step being added will prevent users at the engineers' console from inadvertently changing displays on the control room CRT's.
A-7-1
7.0 Process Computer, continued Finding 3 The red, green, and white colored keys on the process (2) computer keyboard are not grouped together and are not in any functional sequence.
Response Keys will be grouped by function and be of a neutral color except for Alarm Acknowledge, DC Power, and Display Color Assignment keys. Grouping by use of color is therefore unnecessary.
Finding 4 The dark blue characters on the CRT displays are diffi-
'(2) cult to read due to poor contrast with the screen background. This color should only be used for non-critical information.
Response The color blue is not used for alphanumeric characters on the CRT's. On Piping and Instrument Diagrams, blue is used for pressurized hydrogen and nitrogen process lines, which is not critical infomation.
Finding 5 The two CRT displays on RLO20 are located between 76-91 (3) inches above the standing surf ace. This location exceeds the recommended height for CRT displays.
Response A study was conducted and CRT readability was verified.
For both the alarm and trend displays, the text letter height exceeds the guidelines for the fifth percentile female operator viewing distance.
Finding 6 .The colors red and yellow are not used on the CRT dis-(3) plays according to the recormlended guidelines applica-tions of danger and caution, respectively. On the alarm list display, red is used to indicate digital points in the alarm and yellow is used to indicate analog
, al arms .
Response The present arrangement of alarm indications (red in-dicating digital alarms and yellow indicating analog
- alarms) is functionally equivalent to the recommended guidelines. A digital alarm such as a breaker trip, equipment f ailure, partial trip bistable, valve mis-alignment, etc., would indicate a condition requiring
~
l t~ immediate analysis and action. With the use of con-servative alarm limits, analog points in alarm would indicate the beginning of an undesirable trend, and allow the operators time to respond to keep parameters
, within the desired operating limits.
Finding 7 The color-coding of information used on the CRT dis-(3). plays is not consistently applied. One color may be
, used to convey different types of information. Con-J, versely, the same information type may be presented
. in different colors on different display pages.
7 A-7-2
7.0 Process Computer, continued N
Response: The color coding of infomation used throughout the control room is applied as follows:
Computer Terminals B0P Function Keyboard: White - Alarm Acknowledge Neutral Colors - Remaining Function Keys B0P/ Disp 1ays: General Displays Green - Points in Nomal Status Red - Points in Alarm Yellow - Out-of-Service / Failure Messages
- Operator Request for Information White - Message Types (headers, etc.)
Piping and Instrument Diagrams A. Process lines of In-line Equipment:
Cyan - Flowing liquid fluid Magenta - 1) Pressurized stean
- 2) Energized Elec. Sys.
White - Operating ventilation air Blue - Pressurized hydrogen and nitrogen Green - 1) Non-flowing liquid fluid
- 2) Non-pressurized stean
- 3) De-energized elec. sys.
Yellow - 1) Process line w/ undefined status
- 2) Outline of equipment
- 3) Electrical Sys W/ Undefined Status B. Alphanumeric Information White - Current updated values for displayed
! Process parameters w/ normal operating conditions Red - Current updated values for displayed process parameters in alarm conditions Yellow - Static, nonvariable information for
! titles, equip. labels and other notes SPDS Keyboard: Active keys are of neutral colors SPDS Displays: Primary Displays Green - Parameters Normal Status Red - Paraneters Not Normal Yellow - Alert Status / Failure A-7-3
7.0 Process Computer, continued RMS Keyboard: White with Black Letters RMS Displays: Green - Normal Radiation Red - High Radiation Yellow - Alert Radiation Cyan - Monitor Equip. Failure Magent a - Communications Failure Blue - System Failure White - Monitor Off Line Yellow & Cyan - Text NOTE: The colors used for the SNUPPS RMS are General Atomic's Standard which is utilized throughout the Nuclear industry.
RRIS Keyboard: Charcoal with White Letters RRIS Displays: White - Text Red - Alarms Panel Colors Piping Mimic: Blue - Borated Water, Except SI Gray - Unborated Demin. Water Light Green - Essential Service Water Violet - Safety Injection Red - Containment Spray Tan - Test Lines & Boron Inj. Recirc.
White - Nitrogen Yellow - Component Cooling water Orange - Steam Electrical Mimic: Yellow - 345 KV Black - 13.8 KV Orange - 4.16 KV Gray - 480 V Nanlepl ates : Red / White Letters - Separation Group #1 White / Black Letters - Separation Group #2 Blue / White Letters - Separation Group #3 Yellow /B1ack Letters - Separation Group #4, i
Red Face, Yellow - Manual Initiation of both Border, White Letters protection trains for RX trip, SI manual actuation CSAS, CISA and CISB Black / White Letters - Separation Groups 5 and 6, panel naneplates, general nameplates i
I A-7-4
7.0 Process Computer, continued 9
Annunci ators: Main Control Board White / Black Letters, Backlit White - General White / Black Letters, Backlit Red - First Out ESF Status Panel White / Black Letters, Backlit either White or Amber Reactor Partial Trip Panel Yellow - Blocks and Bypasses Blue - Permissives Red - Activation Violet - Trouble Alarm White - Trips Process Control Status Panel Red - Steam Dumps Blue - Permissives White - Trips General Indicating Red - Valves open, equipment running, breakers Light Philosophy closed.
Green - Valves closed, equipment not running, breakers open.
Amber - Auto Trip.
White - Status (e.g. auto, reset, control select).
Controls: Colors are used to highlight certain controls to enhance operator actions.
e l
l l
A-7-5
I 7.0 Process Computer, continued Finding 8 Location references are not provided in the viewable (3) portion of the frame when the operator is required to scroll or pan on the point summaries, system index, and other summary type displays. The system displays are referenced acceptably.
Response The only multipage displays besides the system displays are the point summaries and alarm summaries. These summaries are generally only used by computer mainte-nance personnel, as one control room CRT is dedicated to alarms for operator use. The summaries are always dis-played in alph-numeric order and convenient page forward and page back functions allow rovement among pages. The alphanumeric nature of these displays allows the operator to determine whether he is at the front, middle or end of a list. In addition, if a page is full, this clues the operator to the possibility of additional pages. In light of this, no further action is deemed necessary.
Finding 9 There is no printer located in the control room for (3) hard copy information, including alarm printouts. This deprives the operator of useful information.
Response There is a control room printer included in the system.
It was located in the computer room at the time of the audit for startup purposes.
Figding10 Although computer feedback messages are generally pro-(3 ) vided to the operator, there is no message to indicate that a request for a remote printout has been received and confirmed or denied.
Response There is a " function initiated" message which indicates that a request for a remote printout has been accepted.
If a printer has failed, is off-line or out of service, the system will print a message on the operator's printer, display a secondary alarm on the alam CRT, and switch to an assigned alternate printer. This provides a high degree of assurance that the requested function has actually been performed.
Finding 11 Several functions available on the control room process (1) computer keyboard are for the use of the computer pro-gramers, not the reactor operators. For example, operators have the ability to insert values into the system status displays. No indication appears to identify these as inserted values rather than actual values.
A-7-6 I _, __ __ _
7.0 Mrocess Computer, continued Response During normal operation, control room operators are not required to use the " insert value" function button on the computer keyboard. It is anticipated that modifica-tion of point values will be infrequent. If point modi-fication is required, it will be performed under the direction of the Shift Supervisor. If values have been inserted via this function button on the canputer key-board, the modified values would be available on the inserted value summary display. The control room operator has access to the inserted value point summary display via the same computer keyboard and CRT as is being used for the system status displays. Therefore, no further action on this finding is necessary.
Finding 12 There are no procedures available to the operator which (2) cover the necessary actions to take in the event the process computer fails.
Response The utilities will develop a procedure and log sheet to be used in case of computer failure.
4 i
i i
A-7-7
8.0 Panel Layout Finding 1 During emergency procedures, the operator is required (1) to compare the REACTOR C0OLANT PRESSURE meter on RL002 and the STEAM GENERATOR PRESSURE meter on RLO26. These displays are separated by about 25 feet.
Response The most probable emergency for which RCS pressure and S/G pressure must be compared is Steam Generator Tube Rupture. Af ter taking the immediate actions for safety injection, it is necessary to depressurize the RCS to the pressure of the faulted S/G. If RCP's are still running, the depressurization is performed at RL001 with the spray valves. If RCP's have been stopped, the depressurization is done at RL021 with the PORV('s).
For this reason, the depressurization of RCS to S/G pressure is a two man job. At the point in the proce-dure where two operators are needed, a second reactor operator will be available.
All licensed operators will be trained and practiced on a plant specific simulator for the coordination required to perform this procedure. The high level SPDS display for steam generator tube rupture will also be useful in evaluating the depressurization cf the RCS.
Finding 2 The SAFEGUARD SYSTEMS STATUS SELECT switches on RL003 (3) are placed between the CRT and the keyboard, but they are not related to the process computer.
Response The Safeguards System Status Select switches will be labeled and demarcated. See 6.05 for a sketch.
Figding3 The two MN STM/FW VLV ACCUM CHARGE TEST and the two (3 ) MN STM/FW ISO VLV EXERCISE ACTUATE controls are func-tionally and sequentially related but are not grouped together.
Response The two cited groups of controls are not functionally rel ated. The two "MN STM/FW VLV ACCUM CHARGE TEST" switches are directly associated with the two Accumula-tor Charge Test Select switches. The two "MN STM/FW EXERCISE ACTUATE" control switches are directly asso-ciated with the exercise select switches. These four switches are grouped together with their respective
" Test" and " Actuate" select switches. The grouping is adequate since " Test" or " Actuate" will normally follow " Select."
A-8-1
"~ j - --
v r 'M- ym ---
8.0 Panel Layout, cont'.irut d Figding4 The STM GEN A through D LVL SEL SW controls are not (3 ) located directly below their associated trend re-corders. These switches may be inadvertently asso-ciated with the AUX FEEDWATER display that they are located directly beneath.
Response Demarcation lines will be added to clearly group these three switches (see sketch).
A l sit e stNERATon i
"-F l
. i ee e t g .l _
l [+ h , ,
m gqi : :/ ,4 :
l [, ,
4 :.,, ;, i :
j l=1+1=1 _ }.
Ni l l Tfr I I~~eJIf
- s
- s - s y b >j lEFI l -~J l OO OO lWTFI".*TTTI l Mh" l l ~.~:29
.i f.s n n - -- - -3 l Fipding5 The ACCUMULATOR TANK FILL LINE ISO VALVE pushbutton (3 ) on RL018 is located where it is only clearly asso-ciated with the B and D accumulator tanks although it is actually associated with all of the trains.
Response Due to the distance between the two mimic groups, it is impractical to associate the two groups with a mimic line. Labels will be provided to clearly show the connection. The label on B & D accumulator tanks will read "T0 ACC A & C" the label on A & C accumulator tanks will read "ACC FILL LINE FROM SI PlNP" A-8-2
8.0 Panel Layout, continued Figding6 The two RC DRAIN TANK HX DISCHARGE ISO VALVE controls (3 ) and the two RC DRAIN TANK VENT CONTAIPMENT 150 VALVE controls on RLO22 are not sufficiently separated or demarcated from the unassociated RELIEF TANK valves to their left.
Response Demarcation will De used to indicate the separation of these components (the actual panel affected is RLO21).
Finding 7 The BORIC ACID TOTALIZER is located over the COMBINED (2) REACTOR M/U & BA COUNTER. The COMBINED M/U & BA FLOW TOTALIZER is located over the BORIC ACID COUNTER. The counters are not related and the totalizer locations should be reversed.
Response The locations of the Boric Acid Totalizer (BG-FY-110BB) and the Combined M/V and Boric Acid Totalizer (BG-FY-1118B) on RLOO2 will be reversed as recommended by Essex.
Finding 8 The STEAM DUMP SELECT SW AB US-500Z on RL005 selects (3) the mode for the STEAM HEADER PRESSURE CONTROL, but the select switch and process controller are not lo-cated adjacent to one another.
Response Switch AB US-500Z and Steam Header Pressure Controller AB PK-507 are located together in a compact section of the Balance of Plant console (RL005 & RLOO6). ABUS 500Z is located in a cluster of 3 switches that con-trol the status of the steam dump system. AB US500Z is located directly below an important related indica-tion, Steam Dump Demand. The Steam Header Pressure Controller is located above the instrument cluster containing Steam Dump Demand and Main Steam Pressure and below the Steam Dump valve position indication.
Moving any one component to improve a control-display relationsh;p will result in loss of desirable rela-tionship ' at now exists.
Finding 9 It is not clear from the panel layout of the BTRS DE-(3) MINERALIZER INLET TEMP controllers and the associated BTRS TEMPERATURE display at what point in the flow path the displayed temperature is sensed. The B con-troller is located below the display and to the lef t of the A controller. The actual flow path is through the B heat exchanger then through the A heat exchanger.
The temperature sensor for the disp 1ay is located at the outlet of the A heat exchanger.
A-8-3
8.0 Panel Layout, continued Response The BG TK381B and BGTK381A controllers work together to control BTRS demineralizer inlet temperature during the the borate mode by controlling letdown divert flow through the tube side of the Letdown Reheat Heat Exchanger. To clarify this, the labeling will be changed as follows:
Controller BG TK-381B 1st Line: LTDN DIVERT 2nd Line: BYPASS CTRL 3rd Line: BE TK-381B Controller BG TK-381A ist Line: LTDN DIVERT 2nd Line: FLOW CTRL 3rd Line: BG TK-381A Finding 10 The STEAM GENERATOR A & B and C & D WIDE RANGE LEVEL and (3) the STEAM GENERATOR A & B and C & D PRESSURE trend recorders are not grouped according to the different steam generators.
For example, the STEAM GENERATOR A trend information is not grouped with the other STEAM GENERATOR A information.
Response The hook-up for the four steam generator level and pressure trend recorders will remain grouped by pressure and level to aid in diagnosing transients such as tube rupture or steam line break. These groupings will then be demarked.
The trend recorders are grouped together by wide range level and steam generator pressure. They have demarca-tions around them with nameplates clearly indicating the parameters they are displaying and setting them off from the rest of the steam generator information. The inforTna-tion grouped together in this way is valuable in assessing accident conditions, i.e.: steam breaks, feed breaks, tube ruptures.
In these instances a Reactor Operator must compare the pressures of all four steam generators to each other and must also compare the levels of all four steam generators to each other to diagnose the accident conditions mentioned above. Comparing a single steam generators' pressure to its level will not be useful information to the operator.
With the use of the demarcations and nameplates, we do com-ply with basic displa.v position relationship guidelines given in section 6.9.i of NUREG 0700.
A-8-4
8.0 Panel Layout, continued Finding 11 The two BTRS DEMINERALIZER INLET TEMP controllers on (3) RL002 appear to be located in an unconventional al-phabetical sequence. The B controller is located to the left of the A controller. However, the pl ant drawings indicate that the associated equipment is also arranged with the 8 heat exchanger before the A heat exchanger in the flow path. ,
Response Both controllers work together to control flow to a single heat exchanger, the Letdown Reheat Heat Exchanger.
The label changes suggested for 8.09 s'1ould resolve this finding.
Finding 12 The pushbutton orientations of two switches on the (1) RL001 mimic do not match their positions in the mimic.
Switch BG-HIS-112A has HUT on the top pushbutton of the switch, with VCT on the bottom. These pushbutton locations should be reversed. Switch BG-HIS-129 has DEMIN on the top pushbutton of the switch, with VCT on the bottom. These locations should also be reversed.
Response The push 5utton orientations will be changed.
Finding 13 The RCP A SEAL LEAK 0FF & INJ FLOW chart recorders on (2) RLO22 are arranged in an unconventional numerical se-quence - 2, 4, 1, and 3.
Response Instrumentation for the four reactor coolant loops are arranged in the order of, from left to right, A, B, C, L and D (or Loop 1, 2, 3, and 4). The RCP SEAL LEAK 0FF
& INJECTION FLOW Chart Recorders are presently arranged
~
in that order. The Loop Hot & Cold Leg Temnerature Recorders will be rearranged such that they will corre-spond to the order of the RCP Seal Leakoff & Injection Flow Recorder located immediately above these tempera-ture recorders.
Finding 14 The NIS RECORDER SELECT SW SE HS-1 and the NIS RECORDER (2) SELECT SW SE HS-2 are arranged in an unconventional numerical sequence. The NIS RECORCER SELECT SW SE HS-2 is located to the left of the NIS F.ECORDER SELECT SW SE HS-1.
Response The positions of NIS Recorder Select switches SE HS-1 and 2 on RL003 will be reversed as suggested by the HEF.
Finding 15 The BLOWDOWN VALVE #1 CONDUCTIVITY RATIO / AUTO-MAN CON-(2) TROLLER and the BLOWDOWN VALVE #2 CONDUCTIVITY RATIO /
AUT0-MAN CONTROLLER are located in an unconventional
' lef t to right numerical sequence. The #2 controller is located to the left of the #1 controller.
A-8-5
8.0 Panel Layout, continued Response Unit 1 controller will be placed to the left of the 1 Unit 2 controller and the Unit 2 controller will be marked future. See also finding 9.09.
Finding 16 The RHR PINP ROOM SUMP PUMP A through D controls are (2) arranged in an unconventional alphabetical sequence. ,
The controls are arranged in two rows with B in the top '
left location, A in the top right location, D in the bottom lef t location, and C in the bottom right loca-tion.
The CENTRIFUGAL CHARGING PLMP A and B controls on RL001 and the DEMINERALIZER TRAIN A and B AUT0-MAN FLOW con-trols on RLO14 are also located in an unconventional B =
left, A = right arrangement.
Response The controls for the four RHR ptsnp room sump pumps, A through D, will be rearranged in the following manner:
Pump A - Top left Pump B - Top right Pump C - Bottom left Pump D - Bottom right The controls for the centrifugal charging ptsnps A and B are enwrapped in mimics on RL001. Reversing these con-trols would require not only additional separation barriers at the back of the board which would be extremely difficult to acconinodate due to limited space but would also result in poorly defined mimic displays. Demineral-izer train A and B Auto-Man flow controllers on RLO14 will remain as presently installed.
Demineralizer train A and B Auto-Man Flow controls on RLO14 are designed in the present unconventional arrange-ment B = left, A= right to preclude control rewiring if an additional demineralizer train ('C') is required in the future. In this instance, the additional train, due to space limitations, would be located to the left (RL0ll),
adjacent to the present train B. This permits a logical pregression from right to left of A, B, C. Since the Auto-flan Flow Controls do not affect and are not assoc-iated with safety-related equipment, Union Electric is of the opinion that it is unnecessary to rewire the controls A = left, B = right.
Finding 17 The indicator lights for the INTAKE PUMP C DISCHARGE (1) VALVE control are located in an unconventional red = left and green = right arrangement. The related A and B indi-cator lights are arranged conventionally with green = lef t and red = right.
A-8-6
8.0 Panel Layout, continued Response The lens covers for the Intake Pump C Discharge Valve were inadvertently reversed. This condition has now been corrected to agree with convention of green = lef t and red = right.
Finding 18 The CONTROL BANK and SHUTDOWN BANK STEP counters are (3) grouped together. Since these counters are identical, an operator could easily read a count from the wrong group, especially since the same numbering system is used on the labels of each (e.g., A-1, A-2, etc.)
Response These step counters are grouped and sequenced in order of withdrawal, with the first rods to be withdrawn on the lower left and the last to be withdrawn on the upper right of the matrix. The operator compares these step counters with the digital rod position indication. Any erroneously perceived differences would be quickly de-tected. The step counters are also clearly labeled as either control bank or shutdown bank, including the group identification.
Finding 19 Several component groups on RL005, RLOC6, RL014, RL015, (3) RL017, RL018, and RL019 are mirror imaged. In some of these groups the mirror imaging is not exact. The ESF CONTROL PANEL (RL017 and RL018), in particular, exhibits significant problems in mirror imaging and mixed mirror imaging. These arrangements will create transference of training problems for the operator.
Response The mimics have been reviewed for upgrading to enhance the visual grouping of controls. On RL014 the mimic layout represents the actual physical arrangement as much as feasible. Many of the redundant systems have portions common to both making a quasi-symmetrical layout desirable. This is particularly true of panels RL017 and RL018. A full-scale mockup of those panels was constructed and revisions to the mimics, labels and the locations of some indicators were made to improve the clarity to the operator. A representative of our Human Factors consultant (Essex Corporation) partici-pated in the review of the final arrangement of RLO17 and RLO18.
One of two groups of containment spray systen displays on RLO17 will be rearranged to be identical to the other group.
The Callaway mimic bus on RL014 for future switchyard circuits will be removed.
A-8-7
8.0 Panel Layout, continued Although mirror imaging also exists on RLOOS, RLO15 and RL019 and is not exact in all areas, the present arrangement of the panel devices does not create operational problems. The devices that are not com-pletely mirror imaged are already in the same general area (within a few inches) of their mirrored image location, and the specific device can be rapidly identified by the nameplate. Also, the operator will not operate a device without nameplate verification, and one result of the nameplate study is increased ease of identification. Furthermore, the operators have been training extensively on the SNUPPS simu-lators which have the same arrangement as the Main Control Panels and interchanging the locations of the devices may create more confusion for the operators at this stage.
Therefore the present arrangement of these control panels is considered acceptable from an operational standpoint.
A-8-8 i
9.0 Control-Display Integration Finding 1 Several pairs of indicator lights on RL017 and RL018 (2) are located to the right of their associated controls rather than above them. In addition, the associated identification labels are located below rather than above these lights.
Response Indicator lights on RL017 and RL018 will be located above their respective controls. Labels for both the lights and the controls will be located between the actual light and control. This provides a close asso-ciation between control and indicator.
Finding 2 Related controls, displays, and indicator lights (3) throughout the control roon are often located on both the inner and outer rings of panels. These rings are separated by approximately 8 feet. This arrangement prevents close visual association between the associated displays and controls. For example, the SEAL WATER OUTLET ISOLATION VALVE controls are located on RL001, while the associated LEAKAGE FLOW indicators are located on RLO21.
Response The design objective is to maintain close association between instruments / controls located on the inner-ring and outer-ring control boards. However, due to factors such as split system association and mimic display arrangement, it is not always possible to accommodate one close visual association without sacrificing some other aspects of association. The cited seal water outlet isolation valve controls are part of the reactor coolant & support system and are shown in the mimics on RL001. The RCP Seal Leakage Flow indicators which are a part of the RCP instrumentation systen are grouped together with other RCP indications on RLO21.
i The control room layout supports normal and emergency operating conditions whereby key controls and displays are clustered together. Infrequently used controls and displays are sometimes separated.
Finding 3 There is inconsistent labeling between some trend re-(1) corders on RL018 and their associated controls on RL017.
l The numbers "1" and "2" are used for component identi-l fication within trains on the trend recorders, while the letters "A" and "B" are used for component identifica-tion within trains on the controls.
A-9-1
9.0 Control-Display Integration Response The labels on recorders EJ-TR-613 and 612 will be changed to read "A" and "B" in lieu of "1" and "2".
Finding 4 The R0D INSERTION LIMIT and NEUTRON FLUX DETECTOR (2) recorders on RLO22 that will be monitored during con-trol manipulation on RL003 are not located sufficiently close that an operator can read them clearly and with-out parallax from a normal operating position.
Response There is an abundance of information on neutron flux on RL003, both recorded and on meters, for the operator to use during normal plant operation. The recorders on RLO22 are 0-200% over power recorders used only in post-trip diagnosis. Constant monitoring of the Rod Insertion Limit computer output is not necessary. An annunciator (Rods at Low Limit) sounds when rods are 10 steps from the rod insertion limit, informing tne operator of a need for action (boration). A second alarm sounds when the rods reach the insertion limit.
Even at this point the operator has two hours to cor-rect the situation before exceeding a limiting condi-tion for operation.
Finding 5 The AIR COMPRESSOR C indicator lights are located over (3) the AIR COMPRESSOR A RESET CONTROL. In addition, the AIR COMPRESSOR A and B indicator lights are located in an unconventional alphabetical sequence. The AIR COMPRESSOR A indicator lights are located to the right of the AIR COMPRESSOR B lights.
Response The location of the AIR COMPRESSOR indicator lights for COMPRESSOR A (QL-3) and COMPRESSOR C (QL-1) will be reversed.
Finding 6 The MAIN STM RHTR vertical displays are offset to (2) the left of their associated controls by about 6" to 12". The MAIN STM RHTR indicator lights are offset to the left in a 2x2 matrix rather than being located under their associated vertical displays.
Response The vertical displays located on RLO24 are for indi-cation of steam flow to the reheaters. These indica-tors are provided for indication of tube leakage and are not directly associated with the controls located below. The indicator lights for the second stage low load valves will be relocated to the lef t.
Finding 7 The FUEL POOL COOLING PUMPS B and A controls are lo-(2) cated in an inconsistent order with their associated DISCHARGE displays. The displays are correctly ordered A - B, while the controls are ordered B - A.
A-9-2
9.0 Control-Display Integration The R0D DIRECT DEMAND and ROD DIRECTION indicator )
lights on RL003 are also located in inconsistent order with their associated controls.
Response The Fuel Pool Cooling Pump controls and the Fuel Pool Heat Exchanger CCW Discharge Isolation Valve controls will be rearranged. Pump A and valve A controls will be located immediately below the A-loop flow indicator and Pump B & valve B controls, mediately below the B-loop flow indicator.
The Rod Direction demand lights will be relocated to above the temperature error meter, SCTI-412A, on RLOO3, as shown on the following sketch:
yx 1_).m 3_,J J.. te L.1 t_A l
- l *i*
, K'~.b fl ?"C'"
i wr i oo i=i VOO 1
7M i r I-M ~.
I vs~ l IF i b!
6!
ll i i- ' '
i l j I
- I* I Finding 8 The OVER PWR/0VER TEMP T RECORDER SELECT switch is (2) located beneath its associated trend recorder, but an unrelated trend recorder is located between the associated components.
Response The recorders SETR411 and BGLR102 will be exchanged so that the SETR411 recorder (over pwr/over temp) will be immediately above its select switch.
Finding 9 The association between the PLANT BYPASS VALVE MAN (2) controller and the PLANT BYPASS display is not clear.
The display is below and to the left of the controller and two unrelated controllers are between the associated components.
A-9-3
9.0 Control-Display Integration, continued Response The Plant Bypass Valve Controller will be relocated closer to the Plant Bypass display. The controllers will be rearranged so that when viewed from left to right will be Blow Down Valve 1 Controller, Plant Bypass Valve Controller, and Future Controller.
Finding 10 Related controls and displays are not always easily (3) identified as being associated. For example, the reactor operations controls and displays on RL003 and RLOO4 are not well arranged by specific functions (e.g.
startup).
Response The example given as having poor association between related controls and displays (e.g. reactor controls) follows a very definite pattern. The primary control of the reactor is with the control rods during startup.
The operator will be controlling the reactor with the rods while observing the Source Range counts and start-up rate meters located above and to the left of the rod control. As reactivity is increased and Source Range counts increase, the Intermediate Range meters located directly to the right of the Source Range meters will begin to indicate. The Power Range meters and recorder are located on the panel (RL004) directly above the rod controls. The reactor coolant average temperature is also located above the Power Range meters so the operator can observe it along with power. To the left of the Power Range and reactor coolant temperature located on RL002, the Pressurizer level and pressure indicators give the operator indication of Reactor coolant water volume and pressure. All of these controls and indica-tions are located on a section of the board approximately 4' x 4' which will require little if any movement of the operator during startup.
The primary controls and displays necessary to operate the plant are located in a very systematic layout and secondary displays and controls are located directly behind these, on the outer ring of boards, to the highest degree possible.
Finding 11 The arrangement of indicator lights and their associated (2) controls is not consistent from application to appli-cation. For example, the CCW PUMP A through D RESET indicator lights are placed to the right or left of their associated control rather than above, as is the convention.
A-9-4
9.0 Control-Display Integration, continued Response The CCW Pump A through 0 reset lights on RL019 will be removed as they are not required.
Finding 12 The displays for the MFW PUMP TURB A and MFW PUMP TURB B are arranged in the following horizontal sequence:
TURB A TURB BRG OIL PRESS, TURB B TURB BRG OIL PRESS, TURB A PUMP BRG OIL PRESS, TURB B PUMP BRG OIL PRESS.
BRG OIL PRESS (right-hand pair of meters). The assoc-iated controls for PUMP A are in a vertical column below the TURB BRG OIL PRESS meters (lef t-hand pair of meters).
This is poor functional grouping of the TURB A and TURb 8 displays with their associated controls.
Response The locations of indicators FC-PI-164A and FC-PI-68A will be interchanged as indicated by this HEF.
Finding 13 The control groups in the CVCS mimic are in reversed (2) orientation from their associated displays. The L ET-DOWN HX OUTLET control is located on the lef t half of RL001. The LETDOWN HX OUTLET display is located on the right half of RLOO2. The BORIC ACID TO VCT con-trols are located on the right half of RL001. The BORIC ACID TO VCT display is located on the left half of RL002.
Response The Letdown HX Outlet display is located towards the cente" of RL002. Pressurizer controls and displays are on the right half of RL002. The existing arrange-ment places the key displays and controls concerning pressurizer level, and pressure immediately adjacent to the reactivity controls and indications where one person can readily monitor the major reactor system parameters. The controls and indication on RLOO2 for boric acid constitute a stand alone control station for boration and dilution. The controls on RL001 would be used manually only if those on RLOO2 malfunction.
Automatic controls are located on RL002. The operator has the option of selecting either " manual" or " auto-matic" functions. Boration and dilution are not fast response actions.
Finding 14 Three PRESSURIZER HEATER controls and three PRESSURIZER (2) PRESSURE and LEVEL controls are reversed with respect to their associated displays.
A-9-5 i
9.0 Control-Display Integration, continued Response- The current arrangement is considered to be adequate as described below:
- 1. On the attached drawing, the Pressurizer Heater con-trols are the three switches indicated on the lower right.
- 2. The switches referred to in the finding as Pressurizer Pressure and Level controls are the three switches to the left of the Heater controls. These are actually channel select switches, not controls.
- 3. None of the six switches listed in 1. or 2. above are normally used as controls. The channel select switches determine which channels input to the process controllers for Pressurizer Pressure and Level. Once set, these switches need be changed only when the Operator has indications of an instrument channel failure. If the failed channel is selected for use by a controller, the Operator selects another channel for input. The Heater switches set up the Pressurizer Master Controller. Once these are set, they are changed only when specified by procedure. Specifically, the backup Heaters are energized manually during boration or dilution to force the Pressure Controller to open the spray valves, and establish flow through the Pressurizer for mixing.
- 4. The channel select switches are logically located with respect to the Process Controllers that they affect.
See the drawing for signal relationships.
- 5. Normal operation of the Pressure Control System is completely automatic, and does not involve any Opera-tor manipulation of these switches. Manual operation uses the push buttons on the Process Controllers, and again, does not involve these switches.
l A-9-6
- i ~ 4 . ! .
444644ist, '
1
, I y
.? hl t i" ll a i ai ft?
-as ;!
i I d 5 t!
c'?
' >i f' ' '
$3 JI ? '
h5 1h til
$! hki M
llhl
~ Illh.
T.T s . = 3.1. T, la.
r ,
~
? . *. . =lfit ,i, g p! * == _-
.,_ __ _ p,q
-= ~ -- ; .
~ ~
'~I IO gjj!.
L i . = ..= 1 -) ,
i
', gi o9 ;[' 51 LI f! 2 __ _ _ '
l l a,e,
,l:.
7l;j,,!
~~
.r j II lll d 0 0 ii ip!
.- i t'.'J rl !Ej g ____!. = = =1? lil L t P
- 3 I T ll
- c90 0
!.1 fr,a
- 1 Jr,,i _ - - _--_____
k M y
a l
ljf t a if I --:--.-._ - - - - *
~= J J . . .I J, bC ll i 50 6k6osfi ll!..
li .... T,1j. 9:l l
, f 1s,
~
a 0 . liv. . . . . ; ~ c~ -
,7 Y!l.',-
1- I J... _. _I J_ I ,
e pr liillii
!"h'j: i . . . . '
I LLLs .h'* '6.0 ?. I . $*?' -\ i l:i i . . . .
i 3 >
d'l 'liL' rIhoJ
!owlI:'l e0,).
54 {,.@, % ljilili w
ii; f . . , _ f ... . . ,, . . ,, s u s
,;; i ,
3_, f ,. E .
iii
'It ' ' o,4N,Il .?Lg,j,, )!! @,l J_'j ggn r i et
- q. c.f,..,-)-9q), .
li; n
l"jsog*o.jo.
. .- p (
S
'l'^' '.a.I
< , ,,, g-3
,..f
.. f , f .), g ,77, ,
,e gi .
- glp . _ _ .
9 1 .
- _ _ _ = _ . __
d'- _
Attachment to Finding 1.1
. s M ls ;,
N! /, e.'.%,?.k< . i ,.*$Y g' M,
. . . ,i i~
't
~
'tr.w.35 w .,k:7..;gggO I
- , l ,
'f igj, ,
, r.
l
~
W ]
I M, _.
w ~ .{ j ,pj . d. ;-: -
l 0
v
- h. 7,'
's. fb ya*^e n
e d
s 8
g
. ?; .
. .m. 's .
, ; i/*i9;
.. [..w ~
,< O '
'f. -l 1 k '
' . p, y, .> ,
.)3 .
M,
- l 'b5ft i .
g .~,
.1 f.Y ) ... '. $3 [ , ,
RLO14 RLO18 NOTE: The person illustrated measures approximately 5'-1" in height, with shoes.
i
-l
/
~o %
t Attachment to Finding 1.7 k, *
~
r'hg=_q-
$p.?
g fyv - f kTNU" " (
- kW Y i
.. .2.
b hgw$f.Y'$
- $*. y 9
.s m! 2'm>~
I _
~- k N- Yf f j,
- ~
s ,
-3. - .; 3
\_
RL002 Lwy.IfdI ,p gAdCh.h:n 18' -
NOTE: The person illustrated measures approximately 5'-1" in height, with shoes.
l -
6, -. ._ _
Attachment to Finding 4.1 em.. . m . . ..s . --
g "9 " S M '#*
w..... _,
a: tt *:S
.q.t i
+
. ?;,g .*~l.W
? (: A ^&^ 4 g .7 a __- : . : y
'g, .
y 4 9, __
O... y'N t.9 ,> 1 3
APPENDIX B l Supplanentary Survey B-1
l.0 Control Room Workspace Finding 1 There is no coding scheme established to clearly differ-(5) entiate different types, sizes, and styles of expendables and spare parts from each other.
Response Due to the relatively snall amount of spare parts required in the control room, canbined with most parts having identifying markings, a rigid coding scheme is unnecessary.
Unlaoeled parts will be labeled as deemed necessary.
I i
I l
l B-2
2.0 Communications Finding 1 Periodic testing is not planned for communication equipment.
(5)
Response The routine use of communications equipment will ensure the equipment is operating properly.
Finding 2 Control room personnel do not have override priviledges on (0) outside telephone lines.
Response Direct lines out of the control room are provided. Direct lines to TSC and E0F will also be provided.
Finding 3 The location and design of the phone on RL003 makes it incon-(5) venient and in the way of the control room operators. Also the cords are not long enough.
Response A cord clamp is being used to keep the cord for the Public Address off the floor. The length of the existing cord is acceptable.
Finding 4 The headsets associated with sound powered phones are uncom-(6) fortable.
Response These headsets are for use by maintenance personnel and their use would result in minor consequences and inconvenience to control room operations. No further action is required.
Finding 5 The drawer in which headphones are stored is not labeled.
(5)
Response This finding would result in minor consequences and incon-venience to control room operations. No further action is required.
Finding 6 There are no speakers associated with the control room (5) public address systen located in the control room bathrooms.
Response Speakers in the centrol room bathroom are unnecessary as operators in the control room caa attract the attention of operators in the bathroom.
Finding 7 The audio gain on the public address systen is designed so that (5) the operators could turn the volume down to an inaudible level.
Response It is normal practice to adjust the audio gain to an audible level, therefore, this should not be a problem. No action is required.
Finding 8 There is not adequate communication equipment available to
, () control room operators when they are wearing protective gear.
Specifically it is impossible to hear the operators when they i
talk through face masks.
Response Face masks containing provisions to facilitate voice com- l munications will be provided.
B-3
'ip,,.
t.
.3.0 Annunciator Warning System Finding 1 The computer alarms and annunciator horns are not loud (4) enough to properly distinguish the sound from the anbient noise.
Response This finding was investigated in the environmental sound study.
?
(
b e
/
B-4
'I
.' 3
.e 4.0 Controls Finding 1 It is not possible to operate CH E-30 switches or the con-(6) trols on the Foxboro meters when wearing emergency gloves.
Response This finding is a duplicate of NRC finding 4.1. See SNUPPS response per reference 10.
Finding 2 The scale face for the setpoint on the Letdown Hx Outlet (0) Pressure control (BG-PK-131) on RL001 is broken.
Response This finding will be corrected at system turnover.
Finding'3 The design of all of the annunciator acknowledge buttons is (6) such that the operator can inadvertently activate them by leaning against the panel.
Response The annunciator controls have been redesigned based on NRC finding 3.14.
Finding 4 The startup reset control (SF-HS-3) on RL003 is missing an (0) escutcheon plate.
'4 S' Response The label for this control will be modified to indicate switch position.
Finding 5 There is an inconsistent CH E-30 switch configuration for (0) several controls.
Response- Refer to NRC finding 4.5 for the SNUPPS response.
Finding 6 The "'open" and "close" positions are reversed on the follow-(0) ing controls:
Panel # Component #
RLO14 QLDA-3101A RL014 QLDA-3101B RLO14 QLDA-3101C Response This finding will be resolved through modifications to the control room.
B-5
- i. _ _ . _ _ _ _ _
5.0 Displ ays Finding 1 The individual rod position labels (H6, H10, F8, etc.) cannot (6) be read from RL003.
Response During plant operations when moving control rods, one l operator would normally be stationed at the rod position panel and another operator would be stationed at the control panel. The operator at the IRPI would compare bank position at the rod control panel to the IRPIS. This issue will be further addressed through training.
Finding 2 The totalizer and counter do not identify the units of measure (0) for the Boric Acid Counter and Totalizer (BG-FY-110BB) or the Combined Makeup and BA Totalizer and Counter (BG-FY-1108, BG-FY-lllBB,BG-FY-lllB).
Response Refer to NRC finding 5.26 for the response (see reference 10).
Finding 3 More than nine graduations separate the major numerals on (5) sixty nine displays.
Response Tolerance zones will be marked on displays where practical throughout the control room and will reduce or eliminate the potential for misreading displays.
Finding 4 Linear scales are not used on several displays.
(5)
Response Where practical, tolerance zones will be marked on displays to. improve readaoility.
Finding 5 All Foxboro controllers, which have demand and actual status (5) do not distinguish between pointers which indicate demand /
actual status.
Response All Foxboro controllers were reviewed and were found to differentiate between actual and demand.
Finding 6 All Foxboro controllers have a poor contrast between black (5) numerals and a cream colored background. The readability is degraded by this contrast.
Response The readability is only slightly degraded and does not warrant a scale change.
l l
l l
B-6
1 5.0 Displays, continued Finding 7 On all Foxboro controllers, the unit and multiplier infor-(5) mation is presented in the upper left hand corner. Due to the position, contrast, and size, this infonnation is dif-ficult to read.
Response With training and repetitive use of these controllers, the information will be readily apparent to the operators.
Finding 8 Display scales for several meters do not use an optimal (5) numeral progression:
Response Although the scales are not optimal by NUREG 0700 guidelines, the operators have found that the numeral progressions are adequate and were practical and usable. Also, tolerance zones will be marked on displays to aid operators in reading the displays.
Finding 9 There is an unlabeled recorder on RL014. Neither the scale (0) nor the label provide identification information.
Response This is a construction related problem that should be cor-rected at turnover.
Finding 10 More than four graduations are used on 42 displays without (5) use of major and minor graduations.
Response On many of these displays, there are intennediate markings.
Vital information is mostly on the front panels where the graduatier.s can be more easily read from the required distance. The back panel and front panel scales will have tolerance ranges marked on them as soon as these tolerances are defined, thereby simplifying the operators reading task with an aid to easily identify if readings are within tolerance. We also have annunciators to alert the operators of conditions out of tolerance.
1 Finding 11 Graduation lengths or contrast thickness is not sufficient (5) to distinguish intermediate graduation marks on 87 displays.
Response See previous response (finding 5.10).
Finding 12 The display units for the Fuel Pool level (EC-LI-39A), Fuel (5) Pool Pump Discharge (EC-FI-17A), and Fuel Pool Pump
! Discharge (EC-FI-18A) on RLO21 are not appropriate for use l by the operators.
l Response The display units and the units provided in the procedures will be made to agree.
i B-7
5.0 Displays, continued Finding 13 Legend labels for the permissive / blocked / partial trip status (6) panel (SB069) on RLO22 are not readable from the operator's console.
Response This finding was previously reported and the display has been redesigned to establish a light pattern to aid the operator with the reading of the display. Legend labels are readable from the panel workstation.
Finding 14 The label inside the trend recorders for Stean Generator wide (5) range level and pressure (AE-LR-501, AE-Lk-503, AB-PR-514, AB-PR-535) on RLO26 are not consistent with the component labels. The component labels identify steam generators as A, B, C, D where as the inside recorder labels use LP1, LP2, LP3, and LP4.
Response The labels inside the trend recorders will be changed to agree with the component labels.
Finding 15 There are no scale label indications on the Steam /Feedwater (5) flow and level trend recorders (AE-FR-510, AE-FR-520, AE-FR-530, and AE-FR-540) on RLO M and the Boric Acid flow recorder (BG-FR-110) on RL002 to indicate the measured variable.
Response Colored dots will be added to the scales inside the above recorders to indicate the correct association.
Finding 16 The scale values for the Charger Header Control (BG-HC-182)
(0) on RL001 and the BTRS Demineralizer Bypass Control (BG-HC-387) on RL002 increase from right to left.
Response A label will be added to Hagan controller faceplates identifying the direction of vernier rotation required to open the valve.
Finding 17 All Foxboro meters have pointers which overlap the scale (5) markings.
Response The overlap is minor and will have only minor, if any, consequences to the operator.
Finding 18 The scale values for the Battery Chargers (NK22, NK12, NK13, (0) NK14, NK24, NK23) on RL0l6 do not increase from left to right.
Response This finding will be resolved through modifications to the control room. Ammeters for battery chargers NK22 and NK23 are correct as is and will not be modified.
B-8
B 5.0 Displays, continued Finding 19 The scales printed on the recorder paper for BG-FR-110 (0) (RL002), BB-TR-412 (RLOO4), GN-PR-934 (RL018), EJ-TR-613 (RL018), EJ-TR-612 (RL018), PR-938 (RL020). BB-PR-403 (RL022), BB-PR-455 (RLO22), BG-FR-154 (RL0c2), BG-FR-155 (RLO22 , BG-FR-156 (RLO22, BG-FR-157 (RLO22), BB-TR-413 (RL022 , BB-TR-423 (RLO22), BB-TR-433 (RLO22), BB-TR-443 (RLO22 , AB-PR-514 (RLO26), and AB-PR-535 (RLO26) do not match the scales on the recorders.
Response Union Electric will place orders for all chart paper by 04/13/84 and, by fuel load, paper with 0 to 100% scales will be used in any recorder that does not have its proper paper installed. It is anticipated that the bulk of the paper ordered will be received and installed prior to exceeding 5% power. In the interim, until the remainder of the paper is installed, the recorder tag number and ON/0FF times and dates will be noted on the 0 to 100% paper being used in its place.
By Fuel Load, KGE will install the proper chart paper on all but seven of the chart recorders. It is anticipated that the paper for these seven chart recorders will be received and installed prior to exceeding 5% power. In the interim, until the renainder of the paper is installed, the recorder tag number and ON/0FF times and dates will be noted on 0 to 100% scale paper that will be used on the seven chart recorders.
Finding 20 There is no label on the trend recorder (RJ-UR-2) located (6) on the RL002 panel to identify the recorded parameters.
Response The parameters displayed on this recorder are selectable by the operator from all those parameters available in the canputer und will therefore vary. No corrective action l will be taken.
Finding 21 The megawatt recorder (MA-JR-1) on RLO24 does not have a
[ (6) scale printed on the recorder paper.
Response The design of the recorder allows for the meter scale on the display to act as the scale for recorded data. This finding does not result in significant consequences l or inconvenience to control room operations.
i I
l 1
! B-9 u
~'
6.0 Labels and Location Aids No findings were detected on this section.
B-10
7.0 Process Computer Finding 1 Excess glare is reflected frort the two computer CRTs on
() RLOO7.
Response This finding was investigated in the environmental light study.
Finding 2 The alphanumeric characters on the CRTs have 6.4 picture (5) elements per character height. Seven picture elements per character height is recomended by NUREG 0700.
Response All alphanumeric characters are easily read from all operator workstations. No corrective action is necessary.
Finding 3 The luminance, contrast, and color of the CRTs can be (5) adjusted by the control room operators.
Response This versatility is beneficial if used properly. The operators will refrain from adjusting these controls without prior approval from the Shift Supervisor.
Finding 4 The display data on the computer systems require interpolat-(5) ing and mathematical calculations. For example, data is presented in units of k lbm/br on the computer and must be converted to gal / min for the operator's use. Also, there is an inconsistent use of words. For example, open is used synonomously with not closed.
Response There is no inconsistency between CRT's and the control boards. No change is necessary.
Finding 5 Indentation of subclassifications is not used in the lists (5) generated on the CRTs.
Response The use of color as well as spacing between lines and para-graphs adequately separates the subclassifications.
i Finding 6 Numbers with and without decimal points are intermixed in l (5) columns and therefore do not line up consistently.
Response All alphanumeric characters are easily read from all of the operator workstations and operators will be made aware of this inconsistency through training.
l
! Finding 7 Individual data groups do not have descriptive titles.
(5) They are identified by numbers (1-10) and the operator must refer to other documentation to determine the corresponding l title, l
l B-11
7.0 Process Computer, continued Response Data from operator logs are operator selectable and are considered temporary and it is the responsibility of the operator to input and retrieve their own information.
Finding 8 Lists of options are not organized on the computers accord-(5) ing to any logical scheme.
Response These lists of options are not meant to guide operators.
This finding does not result in significant consequences or inconvenience to control room operations. No action will be taken.
Finding 9 When data are contained on multiple pages, the page does (5) not display the page number or the total number of pages.
Response This finding is a duplicate of NRC finding 7.8 and its response will be handled as noted in reference 10.
Finding 10 Feedback messages are not provided to the operators to (6) indicate changes in the status of the computer systen functioning.
Response This finding is incorrect. Function initiated messages are displayed for all operator requests that are accepted by the the computer (Refer to NRC finding 7.10).
Finding 11 Periodic feedback is not provided to the operator to (5) indicate normal system operation and the reason for any system delays.
Response Periodic feedback is provided in the form of a flashing purple cursor to indicate normal systen operation. A white steady cursor is indication of the computer not in communication with the CRT terminal. During normal operation, system delays are seldam incurred.
Finding 12 Colors used on the CRT to convey information are not con-l (6) sistent with all other color codes in the control room.
l Response The process lines of the P&ID displays were originally designed to use mimic line colors for the various plant systems, however, this resulted in diagrams that were dif-l ficult to assimilate because of color clutter. This l significantly detracted from the purpose of the dis-I plays, particularly when the dynamic state is considered.
}
Accordingly, the use of the mimic colors was modified and l line colors were primarily based on the fluid media and
- its dynamic status, i.e., static, pressurized, flowing, undefined status. Process line segments within each P&ID have the capability of changing color based on their current state. Generally, based on more than 40 displays, only one B-12
7.0 Process Computer, continued fluid is represented in any given P&ID display. This results !
in a clear understanding of the fluid media and dynamic j status which therefore justifies the inconsistency between '
the CRT and mimics.
Yellow is used in the P&ID alphanumeric information to depict static, nonvariable infomation for titles, equip-ment labels and other notes, whereas white is used for similar type information (message types, headers, etc.) on General Displays. This difference in colors is minor and should not affect operator performance. For points in normal status in the P&ID alphanumeric information, the current updated numeric values are white rather than green (as in the General Displays) to provide improved readability. These differences have been identified to the operators through training and have been detemined to be non-problematic.
Based on previous experience with revising colors on the 80P computer system, changes are very expensive and, in con-junction with the above explanation, are not cost effective.
No further changes to 80P computer system colors are pl anned.
Finding 13 Red and green are both used in the Primary plant graphic (bbl).
(5)
Response The colors in this graphic conform to the CRT color coding scheme. The operators report no problems associated with the use of both red and green in this display.
Finding 14 All data relevant to a specific operator entry are not dis-(5) played on a single page.
Response In some cases, there is too much information to contain on one page. Operators are aware of the use of multiple page entries.
Finding 15 There is no date or headings on the trend data.
(5)
Response Trend data is operator selectable and therefore no date or headings are used. A trend pen summary is available to identify points trended.
Finding 16 The printer does not have the capability of 150 lines a (6) minute print speed.
Response The TermiNet 1200 has the capability to output infomation at 60 lines per minute (120 characters per second). Based on the alam field size on the printer (70 characters per line)
B-13
7.0 Process Computer, continued l the actual printer capability is greater than 100 lines per l minute. However, a 300 line per minute printer is located .
immediately adjacent to the control room. The TermiNet l printer has a "f ail over" capacity so that the operator can channel output to the high speed printer. During emergency situations the 60 line per minute is more than adequate for providing essential sequential alarm information to the operator in the control room without resulting in an informa-tion overload condition. Given that the TermiNet terminal has advantages to the operator not available on a high speed printer and under circumstances where a high speed printer is available to the operator adjacent to the control room, no further action is anticipated. The buffer capacity for the B0P computer systen is greater than 1500 alarms and the buffer capacity for the annunciator systen is about 1000 additional alarms. The SNUPPS alarm system and printer, therefore, are capable of handling the anticipated quantity of alarms in any emergency situation.
Finding 17 There are no instructions attached to the printer for (5) reloading paper, ribbon, ink, etc.
Response An instruction sheet will be attached to the printer.
Finding 18 The printer is set up such that the last line of print is (5) obscured from the operators' view.
Response The operator has the ability to page up if he wants to read the last line of print. Also, utility personnel will replace the ribbon and/or clean the plastic cover as needed to ensure proper readability. No further action is required.
i B-14
8.0 Panel Layouts Finding 1 The NIs are located on the back panels. This instrumen-() tation may be needed during an emergency event.
Response All information required for emergency events is given on the front panels.
Finding 2 The demarcation of RC Pump groups la:ks hierarchical labeling (5) of groups.
Response The arrangement of these groups precludes the need for hierarchical labels.
Finding 3 The Permissives/ Block Partial Trip Status (SB069) on RLO22 l (5) are located high on the panel. The upper tiles are difficult to read due to parallax and the size of the legends.
Response The operator can adjust his position to correct for parallax.
In addition, the light patterns are used to give the operator indication of status.
Finding 4 The control used in adjusting RC Saal Injection Flow is the (5) Charging Header Flow Control (BG-HC-182) located on RLOO3 while the associated displays for setting injection flow are located on RLO22.
Response This display is only used during its initial setup. Moving the display and control close together would be unnecessary.
l Finding 5 The RCP Bearing Temperature reccrder (BB-TR-500) is located on (5) the back panel. The operator can select to have temperatures displayed on the CRT but this cuts the signal to the recorder so the trending is lost. If the recorder is selected, the CRT does not have the values for the display.
Response Normally, bearing temperatures will only be displayed on the B0P c uter. The trend recorder may be used during startur
, and r er selected times.
4 t
l I
B-15
9.0 Control / Display Integration Finding 1 The Reactor Vessel level range on RLO22 is confusing to the
() operators. The range is from 0 to 120%.
Response Operators will be trained to realize that changes in water density can cause the reactor vessel level indicator to read 65ove 100%, which also explains the reason for a scale range of 0 to 120%. Wolf Creek's scale range was inconsistent and it was determined that the range of 0 to 120% is correct. Wolf Creek's scale has been modified.
B-16
l ARD Csrporation l
Table 3. HEF Prioritization Scheme Severity Criteria
- 1. If an error occured, could plant safety be jeopardized or degraded? ,
e Yes - enter a.*1" in Question 1 o No - enter a "O" in @estion 1
- 2. If an error occured, could plant reliability be reduced?
e Yes - enter a "1" in Westion 2 e No - enter a "0" in Question 2
- 3. Would the plant's response to the error both:
- a. Provide the operator sufficient time to correct it, and I
- b. Provide a positive warning (e.g. alarm) that the error has been comitted?
o Yes - enter a "1" in Question 3 o No - enter a *0" in Question 3 Prioritization Formula 1 2 3 Priority Type 1 X 1 = 1.0 Safety Related 1 X 0 = 2.0 Safety Related 0 1 1 = 3.0 Reliability Related 4 0 1 0 = 4.0 Reliability Related 0 0 1 = 5.0 Perfomance Problem Note: The following additional priorities were used in prioritizing the HEFs identified in this review:
Priority Type 0 NEF will be corrected without further assessment 6 HEF meets acceptable HF criteria
.O l
B-17
i Appendix C l
HUMAN FACTORS REVIEW 0F AUXILIARY SHUTDOWN PANEL
?
i i
l i
i l
I j C-1 i
1.0 CONTROL ROOM WORKSPACE Finding 1 RP118A and B are located less than the recommended 50 inch (2) separation between vertical panel and opposing wall. In particular, door box TV14131 reduces the separation for RP118B by 10 inches, providing only 30 inches available for operator movement. Location of door box TV14131 is site unique to Callaway.
Response Relocate the Callaway door box TV14131 elsewhere within the room or directly outside the room. The resulting 40 inch separation between panels and wall is sufficient.
Finding 2 There is no identified area for procedure and/or document (1) storage within the Auxiliary Shutdown room.
Response A 2-drawer file cabinet will be bolted within the ASP room for procedure / document storage and will b identified accordingly.
Finding 3 There is no identified area for spare parts storage (bulbs, (2) fuses, etc.) nor provisions for maintaining a record of parts.
Response A 2-drawer file cabinet will be bolted within the ASP room for spare parts storage and will have provisions for main-taining a record of parts.
Finding 4 Some controls are located outside the reconnended height (2) of between 34 inches and 53 inches above the floor for pre-cise or frequent and emergency operation. All controls have been placed between 43 inches and 64 inches above the floor.
Response All controls are located within the recommended height of between 34 inches and 70 inches above the floor for normal operation.
Finding 5 Some displays are located outside the recommended height (2) for both normal (between 41 inches and 70 inches above the floor) and frequent or precise readings (between 50 inches and 65 inches above the floor). All displays are located between approximately 65 inches and 80 inches above the floor.
Response Resolution to this finding was proposed by ULNRC-822, 05/15/84 with NRC's reply made on 06/11/84. UE is investigating this finding further and will propose an alternate resolution in future correspondence.
C-2
1.0 CONTROL ROOM WORKSPACE (continued)
By fuel load KGE will provide a temporary step in Wolf Creek's ASP room and, prior to exceeding 5% power, will install a raised floor as the permanent resolution to this finding.
Finding 6 There were no apparent forms of acceptable fire detection /
(1) protection equipment located in the vicinity of the Remote Shutdown Panel at the time of review.
Response The SNUPPS design provides for 4 ionization detectors to be located within Room 1413. A portable C07 extinguisher will be located immediately around the corner from t .e exit to Room 1413.
2.0 COMMUNICATIONS Finding 1 A periodic check should be performed to ensure all communica-(2) tions are operating properly.
Responsa During routine inspections of the Auxiliary Shutdown Panel and room, communications equipment will be checked.
Finding 2 Procedures should be established dealing with handling incoming (5) and outgoing emergency messages.
Response All incoming / outgoing emergency messages at the Auxiliary Shutdown Panel will be coordinated by the Shif t Supervisor, or his designee.
Finding 3 Reliable means should exist for communicating with support (1) facilities, on and off site, during Auxiliary Shutdown Panel use.
Response A Public Address and telephone will be provided as means for communicating with support f acilities both on and of f site, respectively.
3.0 ANNUNCIATOR WARNING SYSTEMS Not applicable 4.0 CONTROLS Finding 1 Manual control stations for the auxiliary feedwater control (2) valves may be inadvertently actuated.
C-3
4.0 CONTROLS (continued)
Response When the stations are in their normal mode of control, moving the lever will have no effect on the valve position. Any inadvertent actuation of the stati'n during the local mode of control will only recult in momentary valve movement re-sulting in a minor change in flow. Any significant change in flow would be apparent to the operator through the Aux.
Feedwater flow indicator.
Finding 2 The Control Room instrumentation transfer switches follow (4) a different convention for switching tnan that followed by the steem dump transfer switches and valve transfer switches, as follows:
Left Position Right Position Control Xfer Sw: ISO CTRL ROOM NORMAL Stm Dump Xfer Sw: REMOTE LOCAL Valve Xfer Sw: REMOTE LOCAL Response Conventions for the 3 control transfer switches will be reversed and will ir.dicate "150 CTRL ROOM" inthe Right Posi-tion and " NORMAL" in the Left Position. The 12 steam dump and valve transfer switches will remain unchanged.
Finding 3 Covers for legend pushbuttons should be keyed to prevent the (5) possibility of interchanging the covers af ter lanp replacement.
Response Due to the small number of covers and only one existing stero-type (i.e. " AUT0" on lef t and " MAN" on right), these covers will not be keyed, as the prebability of confusing the proper location is very low.
Finding 4 To maintain consistency with the Control Room, there should be (5) some indication made for pushbuttons that require holding to complete a valve stroke.
Response Any push 5uttons of this nature will be appropriately identi-fled and marked.
Finding 5 Cutler-Hammer switches are black with white lettering, which (5) is inconsistent with those on the Main Control Board.
Response Cutler-Hammer switches will be changed to agree with those on the Main Control Board.
5.0 VISUAL DISPLAYS Finding 1 Scale range and units should be the same as those used on (5) similar displays located in the Control Room.
C-4 a
5.0 VISUAL DISPLAYS (continued)
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 2 The following displays contain extraneous information on (5) their scales, such as duplication of label information or the addition of vendor trademarks:
RP 118A RP118B ABPI-524B, ABPI-5448 ABPI-516X, ABPI-535X AELI-501A, AELI-503A AELI-502A, AELI-504A AELI-528X, AELI-548X AELI-517X, AELI-537X Response The above display scales were checked against similar scales located in the control room and no differences were found.
Finding 3 The units provided for the motor driven and turbine driven (5) cuxiliary feedwater pump discharge pressures (psig) are incon-sistent with the units provided for the suction pressures (psia).
Displays affected are:
ALPI-15B (psig), ALPI-218 (psig), ALPI-248 (psia), ALPI-268 (psia)
Response All display scales were checked against similar scales located in the control roan and no differences were found.
Finding 4 Some displays are provided with more than the recanmended 9 (5) graduations between numerals.
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 5 Values indicated by unit graduations on ABPI-516X, ABPI-5248, (5) ABPI-535X and ABPI-544B are other than those recommended by paragraph 6.5.1.5.c of NUREG 0700. Values on these indicators are shown es 0 300 600 900 1200. In addition, some scales begin with an unnumbered graduation mark (e.g. BBTI-443A).
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 6 The pointer on the RCS HOT LEG LOOP 4 indicstor (BBTI-443A)
(5) is red while all other pointers are black.
Response All display scales were checked against similar scales located in the control room and no differences were found.
I C-5 l
l -
5.0 VISUAL DISPLAYS (continued)
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 2 The following displays contain extraneous information on (5) their scales, such as duplication of label information or the addition of vendor trademarks:
RP 118A RPliSB ABP I-524B, ABP I-544B ABPI-516X, ABPI-535X AELI-501A, AELI-503A ' AEL I-502A, AEL1-504A AELI-528X, AELI-548X AELI-517X, AELI-537X Response The above display scales were checked against similar scales located in the control room and no differences were found.
Finding 3 The units provided for the motor driven and turbine driven (5) auxiliary feedwater ptnp discharge pressures (psig) are incon-sistent with the units provided for the suction pressures (psia).
Displays affected are:
ALPI-15B (psig), ALPI-21B (psig), ALPI-24B (psia), ALPI-26B (psia)
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 4 Some displays are provided with more than the recommended 9 (5) graduations between numerals.
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 5 Values indicated by unit graduations on ABPI-516X, ABPI-5248, (5) ABPI-535X and ABPI-544B are other than those recomended by paragraph 6.5.1.5.c of NUREG 0700. Values on these indicators are shown as 0 300 600 900 1200. In addition, some scales begin with an unnumbered graduation mark (e.g. BBTI-443A).
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 6 The pointer on the RCS H0T LEG LOOP 4 indicator (BBTI-443A)
(5) is red while all other pointers are black.
Response All display scales were checked against similar scales located in the control room and no differences were found.
Finding 7 Pointer tips on the Steam Generator Steam Dump to Atmosphere (5) controls obscure the smallest graduation marks on the scale.
Response The pointer tip width on ABPIC-1B, ABPIC-28, ABPIC-38, ABPIC-4B is small enough for an operator to observe which graduation mark has been selected as the setpoint.
C-5
5.0 VISUAL DISPLAYS (continued)
Finding 8 Zone markings should be placed on displays as necessary to (5) provide operators with information regarding range, setpoints, etc. Zore markings should not interfere with quantitative markings.
Response Tolerance zones will be marked in accordance with similar displays located in the Control Room.
Finding 9 The following indicator light do not have bulb test capability (5)
ABZL-1B through ABZL-48, FCZL-312DB, -3158, -3178, -312AD,
-312AE, -312AF.
Response Most indicator lights on the Auxiliary Shutdown Panel are in groups of 2 or 3 and will always have one light lit. If FCZL-312DB f ails, sufficient inf,ormation is provided by the governor valve position lights and the Auxiliary Feed Pump speed control. Procedural steps will provide for checking for burnt light bulbs (refer to NRC finding 5.18).
Finding 10 Provisions should be made to prevent interchanging indicator (5) lenses.
Response Due to the small number of indicator lenses and existing stereotyping for color coding, it is unnecessary to modify the lens to prevent interchangeability.
Finding 11 Nomenclature and abbreviations for legend light indicators (2) should be consistent with standard Control Room usage.
Responso Legend light indicators were reviewed against the Standard SNUPPS abbreviations list and no inconsistencies were detected.
6.0 LABELS AND LOCATION AIDS Firding 1 The label for RPHIS-3 should be located above the switch.
(5)
Response The label position for RPHIS-3 will be relocated above the switch.
Finding 2 The label for BGHIS-8149CB is loose.
(5)
Response Loose labels will be detected and corrective actions imple-mented at system turnover.
C-6
6.0 Labels and Location Aids (continued)
Finding 3 Labels should be consistent with existing abbreviations and (2) nomenclature.
Response A label study will be performed on all labels located on the Auxiliary Shutdown Panels. This study will be similar to that performed on Control Room labels.
Finding 4 Blue nameplates provide insufficient contrast when compared (5) to black nameplates.
Response Blue nameplates will be made the same shade as those in the Control Room.
Finding 5 A procedure should be in place for periodic cleaning of (5) labels.
Respons'e Routine inspection of the panels will indicate any required cleaning.
7.0 PROCESS COMPUTERS Not Applicable 8.0 PANEL LAYOUT Finding 1 The arrangement of ABPI-535X, BBTI-443A and BBTI-423X on RP118B (5) appears to be inconsistent with the arrangement of similar displays on RP118A.
Response Since the indicators are not used for control purposes but for verification of heat removal, and the indicators can be located quickly on the panels, the present arrangement is acceptable.
Finding 2 Demarcation should be used to enhance recognition of groups (1) of controls and displays.
Response Demarcation will be provided as shown on the attached sketch.
Tape may be used in lieu of paint as an interim fix. Demar-cation will eventually be painted on prior to the end of the first refueling outage.
Finding 3 On panel RP1188, the indicators for M.D. auxiliary feedwater (2) pump suction and discharge pressures are located one above the other, whereas the indicators for TD auxiliary feedwater pump suction and discharge pressures are located side by side.
Response Since these indicators are used as status monitors and not for control purposes, and the indicators can be located quickly, it is acceptable to leave the indicators in there present arrangement.
9 C-7
9.0 CONTROL-DISPLAY INTEGRATION No findings were detected on this section.
C-8
l
\ .
. .( .lRP 1181
). '.
r . . .
./( AUXILIARY SHUTDOWN PANEL If - .
.. .~.. .
I%NEL A -
.. . ~ . . .
PANEL B ..
r - . ... ...... . . .. .
, . _M
- m... . . .
. . . . . -- :. 4- - - . . . ----.,. - .- ... ' , , . , ,-------,----,---~_~--r----.
-r ,,
- 1
- m. ..
- g gi , .- -
, : ( -
i
.g '
, .e <
g * , 3 I '
1, ..
. g f.
e-s: . .
n . ..
s g
p 8
I 4
! n-,n a,J' , ,g,,
. ..AA . . . .,e . st h
'..' ~,..,. .< .. -
.1.E. 'I AB. AI.
a.. .
- ,..L W g a..'..e u .. ...- ...m..s. e .
pI; m; W =
g p . .
.. . m ; m ..w mi q; m, t
L .
l e n.
.J _> ,m;.
1
, . ,- i. ,- , 1 .
.... ..t... -
u 2 - .o
. L.u . .lc .
g '. .
v .v w;W-i
. i.3 .
.j r
3.-
j Q,5 q ,
t
- I '
- i. .
p
, l.a. 2 f lh 'pI'.l 5 5E '
.a i a bb ' '
i
, i, . -..
Lu &lM w...
J.U: A r.J '.L ,
<l -
A> 2 .
.C
.. . 2 . e-s.------ *.o-.....a... .
. n . u - - - .: . . . .w- - - - - - --- u . - - a L .
2
.. , . a.
l
\ .. . . .
u . .
o .
t_ .
-s e-. - '
= - -
. s.g .
=
C-9 .- .-
E F PRIORITY SHEET FOR
. AUXILIARY SHUTDOWN PANEL FINDINGS A. @estions
- 1. If an error occurred, could plant safety be jeopardized or degraded? '
O Yes - enter a *1" in @estion 1 O No - enter a *0" in @estion 1
- 2. If an error occurred, could plant reliability be reduced?
O Yes - enter a "1" in @ estion 2 0 No - enter a "0" in @estion 2
- 3. Would the plant's response to the error both
- a. Provide the operator sufficient time to correct it and b.Provideapositivewarning(e.g. alarm)thattheerrorhasbeen comnitted?
'J Yes - enter a *0" in @estion 3 0 No - enter a *1" in @ estion 3
- 8. Prioritization Formula 1 2 3 Priority Type 1 0 or 1 1 1.0 Safety Related 1 0 or 1 0 2.0 Safety Related 0 1 1 3.0 Reliability Related ',
0 1 0 4.0 Reliability Related 0 0 1 5.0 Performance Problen C. Priority Question Question Finding 1 2 3 Priority Finding 1 2 3 Priority 1.1 1 0 0 2.0 5.4 0 0 1 5.0 1.2 1 0 1 1.0 5.5 0 0 1 5.0 1.3 1 0 0 2.0 5.6 0 0 1 5.0 1.4 1 0 0 2.0 5.7 0 0 1 5.0 1.5 1 0 0 2.0 5.8 0 0 1 5.0 1.6 1 1 1 1.0 5.9 0 0 1 5.0 t
2.1 1 0 0 2.0 5.10 0 0 1 5.0 l 2.2 0 0 1 5.0 5.11 1 0 0 2.0 l
2.3 1 0 1 1.0 6.1 0 0 1 5.0 4.1 1 0 0 2.0 6.2 0 0 1 5.0
.. 4. 2 0 1 0 4.0 6.3 1 0 0 2.0 4.3 0 0 1 5.0 6.4 0 0 1 5.0 4.4 0 0 1 5.0 6.5 0 0 1 5.0 4.5 0 0 1 5.0 8.1 0 0 1 5.0 t 5.1 0 0 1 5.0 8.2 1 0 1 1.0 5.2 0 0 1 5.0 8.3 1 0 0 2.0 .
5.3 0 0 1 5.0 C-10 l
9 Appendix D d
ENVIR0tNENTAL SURVEY a
a I
)
a
}
D-1 1 _
CALLAWAY - SPECIFIC 1.0 Control Room Workspace Finding 1 Although NUREG-0700 recommends a maximum air velocity of 45 fpm based on MIL-STD-4728, the updated standard, 7 MIL-STD-472C, recommends using 100fpm as the maximum air velocity. The values at the Callaway vertical panels range from 102-184fpm. These values are high in order to meet the cooling requirements in the control room.
Response According to the Industrial Engineering Handbook, high air velocity values do not degrade physical or mental operator performance. The only impact is regarding the comfort of the operator. In addition, high air velocity values act to reduce the perceived tenperature of the rocm.
Therefore, at the current air velocity, the tenperature of the control room should be greater than the 74-77'F recommended levels. For this reason, the temperature of the Callaway control room (77-80*F) does not need to be altered. In addition, Operations personnel will be questioned after several months of operation to detennine if subsequent adjustments are necessary.
Finding 2 At the auxiliary shutdown panel, all illumination levels fall above the recommended 20-30fc range. In addition, one value (68fc) exceeds the recommended maximum value of 50fc. The lighting level on this panel should be reduced to obtain approximately one half of the current illunination levels.
Response The illumination level in the Auxiliary Shutdown Panel will be reduced as noted.
D-2
M CALLAWAY - SPECIFIC
- 3.0 Annunciator Warning System ,
Finding 1 The sound survey revealed that there was no perceivable difference between the ambient noise level and the noise
. level of the annunciator horns. The discrimination of y '
the horns is critical for the operators to recognize al arms . l
- Response The annunciator horns have been repositioned such that 'l the sound is directed into the control room and is per-ceivable by the operator. j l
i.
+
i t
- - f l'
i 1
l r
e f
D-3
WOLF CREEK - SPECIFIC s
c 1.0 Control Room Workspace N Finding 1 Air velocities in the control room exceed the 45fpm speci-fied maximum (by NUREG-0700) only at the vertical panels.
MIL-STD-472C recommends using 100fpm as the maximum air speed. The values at the Wolf Creek vertical panels range from 25-130fpm.
Response According to the Industrial Engineering Handbook, high air velocity values do not degarde physical or mental operator performance. The only impact is regarding the comfort of the operator. In addition, high air velocity values act to reduce the perceived temperature of the room. Therefore, at the current air velocity, the temperature of the conrol room should be greater than the 74-77*F recommended levels.
For this reason, the temperature of the Wolf Creek control room (72-78*F) does not need to be altered. In addition, Operations personnel will be questioned af ter several months
', of operation to detennine if subsequent adjustments are
- necess ary.
Finding 2 At the auxiliary shutdown panel, illumination levels f all between 12-24fc. This level needs to te increased in order to f all into the 20-30fc range recommended by NUREG-0700.
Response Subsequent to the initial survey, the existing overhead light diffuser was cleaned and a minimum reading of 18fc was obtained. This lighting level is considered adequate.
t 0-4
Appendix E l
s 3:t VALIDATION OF CONTROL ROOM FUNCTIONS s g f(;Q ^
g
.\
~
t
.1' 7
.s f Y
J.
a p.
E-1 so k-
APPENDIX E Validation of Control Room Functions FINDING 1: An operator initially incorrectly identified valves during ;
letdown isolation in executing Procedure ECA-2.
Upon further investigation, it was found that panel RL001 is to be modified and mimiced in order to facilitate the operator interf ace.
Resolution: The mimic reconfiguration was developed to alleviate problems of this nature. In addition, the operators, such as the one discussed above, were relatively inex-perienced with the SNUPPS panels at the time of the Veri-fication and Validation effort. Their additional training .
would also help reduce or eliminate future occurances of '
this type.
FINDING 2: Boron injection bank (BIT) temperature was requested during RCS temperature control in executing procedure ECA-2. BIT temperature was not available on the control boards or CRT displays and had to be specially requested from the computer technician.
Resolution: Procedure ECA-2 has no requirement for BIT temperature.
If BIT temperature were required during a Loss of All AC Power, an operator could be dispatched locally to obtain BIT temperature. Any requirements for reading BIT tem-perature would be picked up during the Control Room Inventory and limited Task Analysis.
FINDING 3: (a) Procedure E-3 references pressurizer level to less than 9%. The scale on the indicator is marked in major increments of 20% and minor increments of 2%.
The operator has to interpolate to read a value of 9%.
(b) Narrow range steam generator level is specifically referenced in procedures E-0, E-1, E-2, and E-3 to determine SG level as low as 9%. The scale is marked in major increments of 20% and minor increments of 2%. The operator has to interpolate to read a value of 9%.
Resolution: The actual -value indicated in the procedures will be rounded off to the nearest readable increment.
FINDING 4: No ESW valve position indication was available in the simulator control room during the loss of all AC power sequence (3). The infomation required in executing procedure ECA-2.2 was obtained by requesting ESW valve position from auxiliary operators who have to verify position locally.
Resolution: During a Loss of All AC Power sequence, it would be appropriate for ep!rators to verify valve position locally since tu normal position indication in the control room would be lost.
E-2
FINDING 5: The. steam generator pressure indicator on panel RLO26 has a scale with major graduations marked in 400 lb.
increments, and minor graduations of 200 lbs increments.
Procedure RF-C.1, Step 13, requires operators to dump steam to decrease pressure to 215 psig. Steam pressure readings as low as 15 psig are required by Step 17 of Procedure RF-C.1. The operator has to interpolate to read these values.
Resolution: The actual scales have graduations in 20 psi increments.
The value indicated in the procedures will be rounded off to the nearest readable increment.
FINDING 6: Panel RL017 required long search times for operators to locate necessary controls in performing Attachment 3 of Procedure ECA-2 in response to loss of all AC power (sequence 3).
Resolution: The mimic on panels RL017 and RL018 was reconfigured to alleviate problems of this nature. In addition, operators such as those described above, were relatively inexper-ienced with the panels. Additional training and exper-ience are expected to help in reducing search time.
E-3
Appendix F VERIFICATION OF TASK PERFORMANCE CAPABILITIES F-1
APPENDIX F Verification of Task Performance Capabilities F.1 Monitoring Tasks As described in the text of this report, only 17 sets of monitored parameters are used for tasks that depend on the value of the parameters. All of the other monitoring tasks are " digital" in that they depend on observing whether a parameter is in one of two possible states. The actions associated with each of the 17 parameters used in a non-digital way are considered to be a
" task category" . For each of these " task categories" there are several
" subtasks", e.g., determine whether reactor coolant system pressure is less than 1405 psig. Each such " subtask" has been separately evaluated, even though there are close similarities among subtasks in a given category.
However, this similarity of subtasks has been used to compress the tabular summary of the evaluation of monitoring tasks contained in this appendix.
Most of the information in the accompanying tables is documented in plant emergency procedures, the control room inventory, the FSAR, and the specifi-cations for the individual displays. The data on precision of the displays is based to some extent on the judgement of the reviewers. The tabulated values of required precision are judgemental values based on the analyses of the task requirements, which considers the effects of an operator performing the task at a value of the parameter different from the value specified in the emergency procedures. In general the tolerances tabulated under task requirements are in the range of 25 to 50% of the instrument uncertainties, which have been considered in development of the parameter values specified in emergency procedures. The nurnerical values tabulated under instrument characteristics are based on the judgement that an operator can discriminate to within + 1/4 of the smallest subdivision on the instrument scale.
F.2 Control Tasks The verification of the ability to perfonn control tasks was accomplished by actually performing the tasks on the Callaway simulator. These tasks are summarized in the accompanying table headed " Control Tasks".
The only finding that resulted from the Verification of Task Performance Capabilities deals with engravings or backlit pushbuttons for the following Auxiliary Feedwater regulator valve control switches on panel RLOO6:
AL HK-5A, -6A, -7A, -8A, -9A, -10A, -11A, -12A The backlit pushbuttons should be engraved with "0 PEN" and "CLOSE" in lieu of " MAN" and "AUT0". It was subsequently determined that this finding is specific to the Callaway simulator.
F-2
MONITORING IASKS Range h Units Precision of Display Primary Alternative Task Reqmts Instr-~harstics Task Regmts Instr Charstics Indication Indications Evaluation
'craneter .
O to 110% 0 to I!0% full 11%(at best) 10.5% Analog Indi- -Intermediate OK l 1. Power Range Range Neutron full power power cators NI-418,
! Neutron Flux 42B,438,448 Flus
- Decreasing (RG 1.97) -SPD3
- Rapidly (RLOO4)
-BOP Computer CRTs decreasing -Power Range
- 5% Flux Recorders (4 on RLO22)
- 2. Intermediate Range 10-Il to 10-3 10-11 to 1/10 1 1/10 decade Analog Indi- -Intermediate OK 10-3 ags decade (at cators NI-35B, Range Startup N2utron Flux amps 368 (RLOO3) Rate Indi-
- Decreasing (RG 1.97) 610-6-200% best) full power) cators
- Rapidly -P6 Permissive decreasing Lightsfactuated q - Below 10-10 amps at 10-lu amps) i
-Intennediate Range S Flux Recorder (RLOO4)
-SPOS 0.1 to 104 nR/hr t 1/5 decade !1/10 decade Computerized -Hi and Hi-Hi OK
- 3. Ccntainment 0.1 to Radiation Alarms Radiation 104 NR/hr 1 to 108 R/hr -Analog Display in 1 to 107 R/hr Monitoring
- Normal System (Digital C.R. (RE 59 on
- 1 R/hr (RG 1.97) Output)(SP056A) RLO20)(1 to 108 R/hr) 10-7 to 10-4 11/5 decade il/10 decade Computerized
- Setpoint for 1 x 10-4 Process Monitor-isolating con- pCi/cc pCi/cc ing System (Dig-tainment gaseous ital Output) ventilation
MONITORING TASKS Precision of Display Primary Alternative Range & Units Indications Evaluation Task Regmts i Instr Charstics Task Retyts Instr Charstics Indication Parmeter 1 psi 0.25 psi Analog Indi- Analog Recorders, OK
) 4. Containment 0 to 60 psig 0 to'70 psig cators PI-- PR934,938 (RLO18 &
(normal design (analog)
Pressure (RG 1.97) 934,935,936, RLO20)
- Normal range) 937 (RLO18)
- 17 psig 0 to 180 psig f5 psi !1.3 psi Analog Indi-
- 27 psig -5 to 180 (analog) cators PI-
- 60 psig psig (RG (wide range) l 938,939
- 1.97) (RLO20)
' ' 3 to +3 psig
- 10.2 psi 0.1 psi BOP Computer (normal (digital) operating range) i OK to.5 in Analog Indi- . Analog Recorder:
l 5. Containment on 28 to 144 in 0 to 156 in il in cators LI-7, LR-6 (RLO20)
Rec u (RG 1.97) 8,9,10 -80P Computer
] _ e (R018)
? - Normal i 0 - Increasing l
- 10 f t 10 psi il2 psi Analog Indi- -Analog Recorder: OK l 6. RCS Wide Range O to 3000psig 0 to 3000 psig PI 403,405 PR403(RLO22) .-
(approx.) (analog)
! Pressure (RG 1.97) (RLO22) 80P Computer CRTs
! - 2645 psig iO.5 psi Digital #ressurizer Pres-
! - 2445 psig (digital) Indicator on sure (1700 to 1 - 2335 psig Panel RLO22 2500psig) l - 2310 psig 13 psi (driven by Wide Range Pres-
- 1920 psig (analog- BOP Com- sure (0 to 700
- 1900 psig narrow range) puter) psig indicator) l - 1849 psig PI 403A (RLOO2)
! - 1536 psig -SPDS 1 - 1405 psig -High & Low Alams
- 1000 pMg -Automatic Act-
- 700 psig uations (Reactor
.405 psig
- 400 psig
- 200 psig
- 195 psig i
MONITORING TASKS Range & Units Precision of Display Primary Alter 1stive Tast Regmts Instr Ciarstics Task Reqmts Instr Charstics Indication Indic itions Evaluation P.irameter 4
- SG pressure Comparisons
- 50 psi below with SG SG Press. pressure
- 200 psi are above SG press. required in response to l
a SGTR.
These actions are j y part of the ,
- m recovery j
~
sequence, and occur 30 min. or more after the event.
- 7. Pressurizer Pres- 1700 to 2500 1700 to 2500psig I5 psi 3 psi Analog Indi- -RCS Wide Range Pres -
OK j sure psig (analog) cators PI- sure (Digital Indi-
- Normal range 455A,456,457, cator-RLO22)
- Stable or 458 (RLOO2) -BOP Computer CRTs
- increasing SPDS j - 1849 psig -SI Actuation at
- 2235 psig 1849 psig t
Wide Range 0 (50 to 750 F (analog) cators TI- SiUS Temperature per RG 1.97) 10.50F 413A,423A
! - Stable (digital) (RLO21)
- Increasing /
Decreasing
- 5640F
- 5570F
- 5500F
- 4000F
- 3500F
- 2000F
MONITORING TASKS Precision of Display Primary A1:.ernative
~
Range & Uni ~.s Evaluation Task Regmts Inst - Charstics Task Reqmts Instr Charstics Indication Infications
, Parameter
- 1600F
- Equal to Cold Leg Temp.
0 tc 700 0F I2.50F f2.50F Analog Indi--BOP Ccmputer CRTs OK
- 9. RCS Cold Leg 0 to 600T (analog) cators TI- -SPDS Wide Range (50 to 750T #I30'4230 Temperature per RG 1.97) 10*50F (di9 ital) l (RLO21)
- Stable
- Increasing /
T Decreasing
$ - 564 0F
- 550 F
- 1600F
- 500F decrease / -
hr :
10.RCS Average 540 to 5900F 530 to 6300F IIT 10.50F Analog Indi- -BOP Computer CRTs cators TI- -Digital Indicator OK Temperature 412,422,432, on Panel RLO22
- 5644 442 (RLOO4) (driven by BOP
- 5570F Computer)
-BOP Computer CRTs
- 11. Core Exit TC 200 to 12000F 0 to 2300 F 0
Il0 0F *1T SPDS
-Digital Indi-OK Temperature (200 to 23000F cation at Sub-
- Stable RG 1.97) cooling Monitor
- Increasing / (RP081)
Decrgasing -Subcooling Monitor
- 1200 F (for comparison
- 7000F with pzr temp.)
- 4000F
- 3500F
- 50 0F below pzr water !5 0F temperature
I MONITORING TASKS Precision of Display Primary Alternative l Range & Units Evaluation i Task Reqmts Instr Charstics Task Regnts ' Instr Charstics Indication Indications Parmeter 100 to 7000F 150F 12.50F Analog Indi- Subcooling Monitor OK
- 12. Pressurizer Water 100 to 7000F cator TI-453 (for comparison Temperature (RLOO2) with core exit TC)
- 2000F Comparison
- Equal to satur-
- with SG temp.
ation temp. of "' '*'
ru tured SG indications
- 50 F above core on 2 panels exit TC temp. and conver-sion of measured pressure to saturated temp. This task is assoc-iated with an optional long-
_ term recovery
[ procedure from SGTR (i.e , more than 30 min -
1 hr after event)
UK Il% f 0.5% Analog Indi- SPDS
- Stable span (Bottom span 45aA,460A,
- Increasing / to top per 461,462 Decreasing RG 1.97) (RLOO2)
- 92% of span j
- 90% of span '
- 70% of span
- 60% of span f
- 50% of span :
- 40% of span -
- 35% of span
- 30% of span
- 25% of span
MONITORING TASKS Precision of Display Primary A10rnative
-- Range & Unio _ Indication Indicattor.s Evaluation i Task Reqmts Inst _ Charstics Task Reqmts Instr Charstics
~
__ Parmeter
- 20% of span
- 17% of span
- 10% of span l
2000 : Subcooling IUS F Sub- 130F Subcooling Analog Indi- - Subrooling Panel OK l
2000F Sub - (RP018A,B) 14.RCS Subcooling to 23000F Super- cooling 1120F Superheat cators TI-
-0F0 cooling to 1390A,B (Digital Indica-350F Super- heat 1250F Super- tion)
- 500F heat (RLO22) heat (RG - SPDS (Digital) 1.97) 11% 11% Analog Indi- - SPDS (Digi al) OK
- 15. Reactor Vessel O to 100% 0 to 120% cation LI- - Analog Recorder Level (RG 1.97) 1311,1312 (RP080)
_ 1321,1322
- Increasing / (RLO21)
Decreasing
- Specific q Vclues d3 Correspond-
- ing to:
o 3-1/2 ft above bottom of fuel plus uncertainties o Top of core plus uncer-tainties l o Full upper-head o Avg. system void fraction with RCP(s) running Il0 psi 17.5 psi Analog Indi- - SPDS (Digital) Olt
- 16. Steam Generator 0 to 1300 psiS 0 to 1300 psig cation PI- - BOP Computer Pressure (each of (0 to 1420 psig 514A,515A, CRTs (Digital) 4 SG) per RG 1.97) 515A,PI-524A ,
- Stable 525A,526A,
- Decreasing ,
MONITORING TASKS Precision of Dis Hay Primary ATternative
~
Range & Uni's Injications Evaluatior Task Regmts Inst- Charstics Task Regmts Instr Clarstics Indication Parameter PI-534A,535A,
- 1234 psig 536A,PI-544A,
- 1185 psig 545A,546A,
- 985 psig (RLO26)
- 800 rsig
- 698 psig
- 585 psig
- 400 psig
- 250 psig
- 215 psig
- O psig
' greater than RCS pressure
- Lower in one SG than in others Il% !0.5% Analog Indi- - BOP Computer CRTs OK
- 17. Steam Generator 0 to 100% of 0 to 100% of cators LI- (Digitial)
Level-Narrow Range span span 517,518,519, - SPDS (Digital)
(each of 4 SG) LI-527,528, - Wide Range SG
- 78% of span 529 LI-537, Level (Analog) 7 - 65% of span 538,539,
- - 59% of span LI-547,548
- 50% of span 549 (RLO26)
- 25% of span
- 9% of span
- Increasing /
Decreasing
- In range
f I
CONTROL TASKS Contro1(s) Parameter control Range Control Precision Unnecessary Dup- Type of Control Task Sufficient Used Indication Sufficient Sufficient lication Avoided
- 1. Charging Line Flow Con-IF5T Talve OK OK OK 1Tontrol Charging Flow HC182 FI-121A OK (RL001) (RLOO2)
OK OK OK
- Control Pressurizer LI-459A. OK g ( b2) '
NA OK OK FK 121 NA NA ,
- Place valve in auto. l control mode (RL001) l
- 2. Charging Line Hand Control valve FI 215A,8 OK OK OK OK
-Adjust seal injection HC8357A,B flow (RL001) (RLOO1)
OK OK OK
- 3. Low Pressure Letdown PK 131 PI 131 OK Control Valve (RL001) FI 132 g -Adjust letdown finw (RLOO2) 1 by adjusting set-o point of letdown HX outlet pressure control
- 4. Control Charging Flow HC 8357A,8 LI-459A,460A! OK OK OK OK
-control pzr level or HC 182* 461,462 [
(RLOO1) (RLOO2) l ,
OK PI-455A,456,l! OK OK OK
-Control RCS pressure (Adjust charging or 457,458 1 letdown as required to (RLOO2) I reduce pressure to less than 2260psig)
CONTROL TASKS Control Range Control Precision Unnecessary Dup- Type of Control
~
Task contro1(s) .Farameter lication Avoided Sufficient Used Indicetion Sufficient Sufficient OK OK OK
-Equalize charging and FI-917A,8 OK letdown (adjust charg- (RL018) ing flow) ,
I or FI-121A*
(RLOGI)
NA OK OK FK-121 NA NA
-Set in auto. control mode (RL001)
- Cannot use HC-182 or F1-121A if SI is in effect.
- 5. Control Letdown Flow OK OK OK
-control pzr level HIS-8153A.B LI-459A,460A, OK i '
8154A,8 461,462 HC-8157A,8 (RLOO2) l q or PK-131*
' (RLOO1) 2 OK OK OK PI-455A,4E6, OK
-Control RCS Pressure 457,458 (RLOO2)
OK OK FI-138A,3 OK OK
-Equalize charging and letdown (adjust let- (RLOGI)
,I or FI-132*
down flow)
(RLOO2) ;
l
- Cannot use PL-131 or FI-132 if cont. 1 sol. is in effect.
CONTROL TASKS Control (s) - Parameter Control Range Control Precision Unnecessary Dup- Type of lication Avoided Control Suffi-
~
Used Indication Sufficient cient Task
- 5. Component Cooling Water OK OK OK HIS 61 FAHL-17,18 OK
- Establish CCW flow to 19,20 RCP thermal barriers (RLO19)
(RK022)
=
- 7. Steam Generator Atmos-pheric Relief Valves OK OK TI 412,422, OK OK
- Decrease FCS average PIC 1A,2A, 3A,4A 432,442 temp. to 5570F (RLOO6) (RLOO4)
OK OK OK ,
OK i - Cool RCS at a speci-C fied rate / control RCS 1
[
~
cooldown rate OK OK Ti 1390A,8 OK OK
- Establish / maintain RCS subcooling (RLO22) or SPDS OK OK OK
- Rapidly cool SGs 50'F Steam line OK pressure *
(RLO26)
OK OK OK
- Decrease SG pressure PI 514A thru OK
' 546A to a specified value [
(RLO26) or
. SPDS
- Procedure contains table of pressures corresponding to 500F temp, reduction.
r CONTROL TASKS Parameter Control Range Control Precision Unnecessary Dup- Type of Control Task 00ntrolts) lication Avoided Sufficient Used Indication Sufficient Sufficient
- 8. Condenser Steam Dump Valves OK OK
- Decrease RCS avg. PK507 TI-412,422, OK OK temp. to 5570F (RLOO6) 432,442 (RLOO4)
OK OK OK
- Cool RCS at a speci- 0.P
,fied rate / control RCS ,I cooldown rate OK OK OK
! - Establish / maintain TI-1390A B OK RCS subcooling (RLO22)
(
"p or SPDS C Steam pres- OK OK OK OK l
- - Rapidly cool SGs500F
! sure
- I PI-507 (RL005) l OK OK OK
- Decrease SG pressure PI-507 OK
'I to a specified value (RLOOS)
- Procedure contains table of pressures corresponding to 500F temp. reduction.
l 9. Auxiliary Feedwater Flow l
OK OK OK
- Control AFW flow HK-5A,6A, FI- 1A,2A, 3L, Og l
! 7A,8A,9A, 4A (RLOO6) 10A 11A, & SG Level
! (RLO26) l 12A*
(RLOO2)
- Isolate AFW flow to a SG j 'I OK OK OK OK
- Normal control is by throttle valves. Can stop/ start motor driven AFW pumps by HIS 22A, 23A (RLOOS) and turbine driver: AFW pump by HIS 312A (RLOO5).
4 1 1 l l -
. o rt tn ne oi Cc K i
ff O of u
eS p
y T
d pe ud Di ir o rt K a O sn so ei ct ea nc ni Ul n
i o
s it cn ee K ri Pc O i
lf of ru tS n
o C
S K
S e g
A nt T
an L Rei K O l c O R
T oi N rf O tf C nu oS C i n
ro ei )
tt ea IS mc ai XO XO rd L an CR PI A(
f -
s t
i )
od IS re XO ts XO nU L 0 CR 0 A(
l e o n o
r t r i b
k t n r s c o u a e C t T l E
i c k c
e l a i
n u a b
n b r u r d R u y T H 0
1
- 9N-
,l' flllllllf l i
l l Appendix G l l
STANDARD FORMS USED IN THE PDA G-1
APPENDIX Vill HUMAN ENGINEERING FINDING PLANT UNIT: DATE:
NO: -
REVIEWER NAME:
a) HEF TITLE:
b) ITEMSINVOLVED:
NOMENCLATURE LOCATION PHOTO No.
! TEM TYPE
, e,
.o s) FINDING DESCRIPTION (GUIDELINES AT VARIANCE WITH):
4 SPECIFIC OPERATOR ERROR (S) THAT COULD RESULT FROM HEF:
G-2
__________________l
W SUSSESTONS FOR POTENTIAL BACKFIT r-esssx aevuw emst sats IIFERESEARCettR _
SATA SOLL.IBSR. __
paeanAas men. -
SATE: _
MEF COMMITTEE REVIEW DISPOSITON:
DREFER TO OPERATWNS O FURTura mEviEW BY:
DUE DATE
- DNO ACTMN REQUIRED SXPLANAT@N BELOW OR ATTACNED)
D10 SE CORRECTED ST PCR 00THER:__ -
FCR emATE D 70 St CORRECTED SY MR SARelDATE)
-DATE: _
EVALUATWN COMPLETED -
SNUPPS PROJECT IHRECTOR. _
G-3
- -~
,' NEMS f & 3 ARE TO BE 00MPLETED ONLY IF UTILITY OUEST10NS THE S LIST THE PROCEDURES OR OPERATWNS THAT USE THE IJSTED ITEMS IN TO INDUCE THE OPERATOR ERROR:
- 3) LIST THE CONSEQUENCES OF OPERATOR ERROR DURING ALL MODES G-4
HEF PRIORITY SHEET -
esar No._
A.Guestions
.. 1. W en arter eseurred, seuld plant safety by jeepenlland er degrededt e Yes enter e *1"in Ouestion 1 e No . enter a '4"Io Question 1
& N en error securred, sound plant reflebility be reduest?
e Yes enter o "1"in Ouestion 2 e No enter e *W" bi Ouestion 2 8.Would the plant's respons to me erver both
- e. Provide the operator sufficient time le servoet R andb. Provide a e Yes enter e"0"in Ovestion 3 e No enter e "1"in Ouestien 8 S.Peledtlantion Formula
- Pfledty Type 1 2 _
m SA Safety Related 1 X 1 Safety Related X e w 18 1 m 18 Rollability Related e 1 1 Rollability Related a 4,0 s
0 1 e 1 e E0 Portamenee Problem S 8 C.PriorMy cuestion Petedty 1 s e G-5
)
l Appendix H l FORMS FOR ENVIRONMENTAL SURVEY H-1
AIR VELOCITY SURVEY REL',J3 .
Date: Time:
Plant:
pleasurements made by: Sheet i of Equipment / Instrument used:
Serial f: Calibration date:
4 ft.
Location 6 ft.
l H-2
HUMIDITY / TEMPERATURE RECORD h te: N Plant:
parasurements made by:
Equipment / Instrument used:
9 79,3 g Calibration date:
Temperature Humidity h rks Time Height Floor 6 ft. _
D ft.
Floor 6 ft.
Floor 6 ft.
Floor 6 ft.
Floor o it. -
PIcor 6 ft.
Floor _
6 ft. -
Floor a ft. _
Floor
., b ft.
H-3 2
- - i-mum m i
. b 2 -
k a s
g
. E g V t .
3 3 G W f i c
E gv E E 3
u u
- t S t. :
A' .
.E 1 32 12 .
= }E s.
=
G k
B 3 S
a W
W .2 S
ta d A*3 a e o g .o k =
- g h -
32 w &
$ E~
tG t
a3 I ~
' 3 & .
a **
i 8
- 6 3 a' g
5 -
5 8 3 -*1 s 358 S. m 9 2 4 W.
=2 2
3
%126 I 2 g e ,
E
. t 8 ,
=
I d .. ..
-
- W AR i
.. 2 - 1 g e
. e.n g. 6 E R w 3 H-4
LIGHTING $URVEY ILLLMINANCE RECORD Date: Time:
Plant:
Sheet # of Ikasurements made by:
Equipment / Instrument used:
Calibration date:
Serial f:
Other Location Conditions Panel full AC Full Ref. (Specify)
No. 1.D. No. M ient Emergency H-5
~ _ _ - _ _ - _ _ _ _ _ . _ _ _ _ _ _ _
SOUND SURVEY RECORD .
Date: Time: Sheet # of Plant:
Measurements made by:
Equipment / Instrument used:
serf al f: Calinration date:
Octave Band Center Frequency 500 2K 4K Remarks Operator Work Station e(A) 2bo 1K H-6
[- .
Appendix I FORMS USED IN THE VALIDATION OF CONTROL ROOM FUNCTIONS c
i I
- s
/'
- , ~
b?
.o
.r.
's I k 4 h ._ a p),
,jt l ,
I_1 f
l ,e','
' '1
.a _ g- '4 ' !
l
> l rA i .
t i
h a i.
I uns k4I$ $
=
h m
l t i
+
~~ .
Ii I g l 1'r '14
[ 49%
p _: = = = , ,
N *I w II rr 8 kT S4
{s gj pH
~ ~ ep 0 -
- p
- ;s
--___.___.., , 3 ;-
= gi*! /- = 1 N a A
$ )
- g. f
_/ '
id 6 4
[
'~
gj f g g g g$
e3
~~p y -
g u
(
y et
.p R E c 4 h .~ .
g s, .._______
y
.q s -- s '
t A 3 Nb t } ,
h}j '- N ?R EM IHf G jliii ilN!!
9ai " p h A 4k li\i 18 416 jP 4Q4 rd !
4.Q : 1D I
.il Il .
ll' Rd yd d !!l 9 g[ip i4 i d R 38 8f iff'j,
$}Lgj s ig hd lit n no n g!!
ng;m n u :
os ib g _ .t J
- m. .u. .m o m - ,
E'f i {i f4d -
I-2 CL r- _.
Appendix J l FORMS USED FOR THE TASK ANALYSIS AND VERIFICATION OF TASK PERFORMANCE CAPABILITIES J-1
a E
PM ~
b' e
E
% s x \ s N .
- px s s
x s
x s
k N N \ \ \
4 7 .
cf O '3,-
i.,-s 1
- . C Y-
- dP r >
c y
- 3 6m A-
\ \ N \ \
3
,f i '2 '2 h '2 a
,a +i o
+i 6
4 e +,
e
+i i -
u9 h %a b % %
53u +1o 6 6 e
+ M +t +i +t D
k \' , h \ \
r l$9 S i
a i
a44 s o Q g f
- e +
l B E $ E
.$g , S. . J. -
O f e g
$ ? ? ?e i .e
%~ k .
A h- ] S I 6L k
$?e '- S.)
W(
- a S.sH A 3 ,
3 l f f i t a{ h } i e
- + J-2
i et T' s '
i.
? ,. .1 N
p:
s,L*!.
i
- i
.i e
g e
- l i \
lii .
a 1a i1 e
a9 kk -
$i $ h
) .{aIE J
5 o J
s1 E ,
3 d 5:
b J-3
s a
Appendix K 4
SPECIFIC NRC CONCERNS s
s 4
K-1
m Appendix K SPECIFIC NRC CONCERNS i l
Page Reference from NRC (Youngblood) letter to UE (Schnell) and KGE Concern Discussion of Results (Koester) dated 06/05/84
- 1. Hagan Controller Convention App. A, PDA Finding 5.13 Page 18 and App. B, SS Finding 5.16
- 2. Check for Burnt Light Bulbs App. A, PDA Finding 5.18 App. C, ASP Finding 5.9
- 3. Mirror Imaging App. A, PDA Finding 8.19
- 4. Homemade Scales Reference 14 Page 20
- 5. Public Address Cord C1 amp App. B, SS Finding 2.3
- 6. Environmental Survey App. D Page 10
- 7. Annunciator Auto Silence App. A, PDA Finding 3.13 Adjustment
- 8. Label to Indicate Switch App. 8, SS Finding 4.4 Page 18 Position
- 9. Differentiation between App. 8, SS Finding 5.5
" Actual" and " Demand" for Foxboro Controllers
- 10. Chart Paper App. 8, SS Finding 5.19 Page 19
- 12. Existing Design Information App. B, SS Findings 7.10 Page 19 for Feedback Messages and and 7.11 Periodic Feedback
- 14. Printer Speed App. 8, SS Finding 7.16
- 15. Reactor Vessel Level Range App. 8, SS Finding 9.1 Page 20
- 16. Charging Pump to RCP Seal Below Flow Indicators
- 18. Display Height at ASP App. C, A>P Finding 1.5 Page 21 and Reference 16
- 20. Alarm Printer Readability App. B, ASP Finding 7.18 Page 19 of Last Line
- 21. SPDS Locatio.. Page 2-7 Page 13
- 22. Coordination With Other Page 1-4 Page 13 Prograns
- 23. Verification of Improvements Page 2-2 Page 12 Concern: The Charging Pump to RCP Seal Flow indicators (BG-FI-215A, Page 20 B) have non-linear scales from 0 to 80 GPM whereas normal flow is approximately 32 GPM. The NRC requested that the utilities study this situation to detennine why this scale was choser, and if it should be replaced with a new scale.
K-2
4 v
i Response: The original Westinghouse system design would have provided flow readings as high as 80 GPM, which accounts for the present non-linear scale of 0 to 80 GPM. Subsequently, Westinghouse revised the system design which will now provide flows only as high as 32 GPM. A square root extractor will be incor-porated in the indicator circuitry to provide a linear out-put and the scale will be revised, c
4 1
9 4
K-3
___