ML20100J253
| ML20100J253 | |
| Person / Time | |
|---|---|
| Site: | Shoreham File:Long Island Lighting Company icon.png |
| Issue date: | 02/28/1985 |
| From: | GENERAL PHYSICS CORP. |
| To: | |
| Shared Package | |
| ML20100J250 | List: |
| References | |
| PROC-850228, NUDOCS 8504100427 | |
| Download: ML20100J253 (23) | |
Text
._
SHORENAM NUCLEAR POWER STATION DERGENCY DIESEL GENERATOR LOADING ANALYSIS PLAN PREPARED FOR LONG ISLAND LIGHTING COMPAYf FEBRUARY 28, 1985 l
l r
OENERAL PHYSICS CORPORATION COLUMBIA MARYLAND v
IARIG XSLAND LIGHTING CCDIPANY EDG Imading Analysis Plan Executive Susunary he Imag Island Lighting Cospany and General Physics Corporation will conduct an evaluation of applicable shoreham operating procedures, training and instrumentation that relate to the management of emergency operation of the TDI Emergency Diesel Generators (EDGs) and the concept of the 3300 IN qualified load. S e evaluation will ensure that there is reasonable assurance that (1) the procedures and training would not lead the operators to load the EDGs to over 3300 IN, (2) the procedures and training provide the necessary guidance to have the EDG load reduced to less than 3300 IN within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> in the unlikely event loads exceed 3300 KW, and (3) the training program adequately addresses 3300 KW load limit associated with the EDGs.
~
A job / task analysis of two scenarios related to operation under EDG loading will be performed by human factors, operations and engineering personnel.
These scenarios will bei i
e Imse of Offsite Power (LOOP) e Imse of Offsite Power with Imse of Coolant Accident (LOOP-LOCA)
In order to evaluate emergency operations under these scenarios, the following shoreham procedures will be used:
e Invol Control SP29.023 01 Revision 5 e Imse of Offsite Power SP29.015.01 Revision 9 e Emergency Shutdown SP29.010.01 Revision d e Containment Control SP29.023.03 Revision 9 The approach for performing the evaluation involves four main steps:
1.
Conduct System Function Review and Job / Task Analysis 2.
Verify ISC Availability and Suitability 3.
Talidate EOPS and Control Room Functions Related to EDG Imading 4.
Review EDG Training Plan Against Job Analysis Worksheets The System Function Review and Job / Task Analysis Step will form the basis of data collected to support the evaluation of operating crew actions, procedures and training during the IAOP and LOOP-LOCA scenarios. Task Analysis worksheets will document tasks, decisions, and information and control requirements, independent of the existing control room instrumentation and controle. We job analysis workshe ts will document the conditions, references, standards, and skills and knowledge requirements associated with each task statement.
Data from Steps 1 through a will be compiled on worksheets and entered into a database management system for review and final documentation purposes.
She Torification Step will consist of first identifying the existing instrumentation and control (IaC) characteristics available in the shoreham control room for each task. In addition a review of applicable system differences between the shoreham control room and the Limerick simulator will be conducted. Finally, the suitability of the entsting 16C to meet the information and control requirements specified in Step 1 above will be assessed.
~ ^ ~ ~ ' *
~
- ...:. '.~....". ~.:'~' ':~~~a 2.
l IANG IS!AND LIGHTING COMPANY S e validation Step will involve walkthroughs in the Shoreham control room and real-time simulation in the Limerick simulator with operations personnel. The simulation will be videotaped for later data analysis. A timeline will be derived from the simulation runs and added to the task analysis worksheets.
Particular emphasis will be placed on collecting data relevant to what the operators are doing to manage and track (log) loads on the EDGs.
S e Review of the Training Lesson Plan against the job analysis worksheets will be conducted once the task data is collected and validated. The review will involve a comparison of skills and knowledge documented in the Job / Task Analysis with the lesson plan objectives and material covered in the lesson.
Recommendations from the four steps will be provided to LIKO in an analysis report by General Physics. he data forms will be approved by LILCO before use and the data collected during the evaluation will be turned over to LIMO at the end of the study.
1 se up e
f
............. -..... ~....
ee
IANG ICIAND LIGHTING COMPANY SHOREMAM NUCLEAR POWER STATION EMERGENCY DIESEL GENERATOR IDADING ANALYSIS PIAN 1.0 system Functions Review and Task Analysis for EDG Loading 1.1 Purpose The purpose of the System Function Review and Task Analysis is to conduct an evaluation of applicable shoreham operating procedures, training and instru-mentation that relate to the management of emergency operation of the TDI 1
Bnergency Diesel Generators (EDGs) and the concept of the 3300 Kw qualified load.
LIICO has performed a job analysis which identified major tasks associated with operation of the EDGs with the qualified load of 3300 KW under emergency operations. This job analysis will be used as input to the detailed evaluation of systems functions and operator tasks associated with the IDOP and IDOP-LOCA events. The stated purpose will be accomplished by performing an analysis of tasks contained in the shorehaa teergency Operating Procedures (EOPs) listed belows e
Invel Control SP 29.023.01 Revision 5 e
Ioss of Offsite Power SP 29.015.01 Revision 9 e
Emergenpy Shutdown SP 29.010 01 Revision 4 e
Containment Control SP 29.023 03 Revision 9 The steps that make up the System Functions Review and Task Analysis are shown in Figure 1 and are described below.
1.2 System Functions Descriptions Plant systems and subsystems in the shoreham control room that the operator must access during EDG emergency operations will be identified. Existing plant documentation (i.e., Shoreham FSAR) relating to plant systems will serve as a prime information source.
Descriptions of the functions for each of the systems identified above will be prepared. These system descriptions will include:
l e
The function (s) of the system Ekider what conditions the system is used o
A brief explanation of how the system operates e
the description of systems functions in this manner will serve as a reference base for subsequent task analysis.
1
._,__..~...--
.g IANG ISIAND LIGHTING COMPANY Identify Plant Systems
,i' and Functions
) f b
Define Representative scenarios and Related EOPs for Analysis
)
e Identify Residual Tasks I f Develop Task Analysis Worksheets
)
Conduct Walkthroughs of scenarios i
I f 1
i Verify Task Performance Capabilities I f validate Control Room Functions Figure 1.
Systems Functions Review and Task Analysis Steps 2
IANG ISLAND LIGHTING COMPANT 1.3 Scenario Develorusent The Shoreham Emergency Operating procedures and the list of Shoreham systems will be used to define a set of simulator and walkthrough scenarios which adequately sample the Emergency Diesel Generator Loading emergency conditions and the plant systems and system functions used in those conditions. The Shoreham. plant-specifie EOPs that will be used includes:
e Loss of Offsite Power Emergency Shutdown Level Control e
Containment Control The scenarious selected for task analysis are listed in Table 1.
In addition, a l
brief narrative description of each scenario vill'.be prepared that establishes the limits and conditions of the events to be analyzed. The descriptions vill include:
I Initial plant conditions e
Sequence initiator Progression of action Final plant conditions Major systems involved Scenarios developed will challenge, artificially if necessary, the diesel load limit in the context of removing load to either return to below the limit or to allow equipment start without exceeding the limit. To the extent this cannot be achieved in the simulator, it will be accomplished in control room walkthroughs.
1.k Residual Task Identifiestion Residual operator tasks (unique tasks) from the plant-specific EOPs not covered in the simulator scenarios will be identified and analyzed separately in valkthroughs for associated information and control requirements. The analysis of residual tasks will be done to ensure that the operator interfaces had been examined even if those interfaces were not exercised in the simulator scenarios selected for validation. Verification of equipment availability and suitability vill be performed for these residual tasks as well as for tasks embedded in the emergency scenarios.
15 Task Analysis Worksheet Develozeent Task Analysis Worksheets (see Figures 2 and 3) will be developed that indicate the operational steps required in each scenario along with the appropriate information and control requirements,means of' operation, and I&C present on the control boards.
The operator tasks will be analyzed using plant-specific EOPs as a starting point.
The Task Analysiis Worksheets will be prepared in the following manner:
1.
Discrete steps in the Shoreham E0Ps will be identified in order of performance. These steps will be recorded in the " Procedure Number" column of the Task Analysis Worksheet, and branching points noted depending on the plant transient being analyzed in the " Scenario Response" column. Note that there may have been more tasks subsequently identified in Step 2 below than there vill be procedural steps.
3
--^
eas'NM M M Nem N _
ed e
~
LONG ISLAND LIGHTING COMPANY 5
f
,I I
f
^
1 1 I l l
t r
j }
v i
- l a
s.
2 h
E.
1-1 11 il i
i 111 4
i i
IANG IS1AND LIGHTING COMPANY operating scenario name and identifier (ID).
1.
ernmo 2.
PROCEDURE 50. (SEDRERAM) procedure step number for SHOREHAM EOPs (Emergency Operating Procedures).
from simulation for each task (start /stop time).
3.
REAL TIME a description of the crew member task / subtask in the d.
Tass /sDWTASE
=
operating sequence.
a notation designating decision points or branching 5.
SCEN. RESP.
information needed for correct task execution for the operating scenario (as defined in the operating scenario description).
6.
CREW 8EBEBER the crew member who performs the task.
=
the location where the task is performed.
7.
ImC any contingent decision and/or 3.
DECISION Asm/OR ACTION sageIReeswes action requirements that are linked to task performance.
the information and control requirements g.
INFORNATION AND CONTROL MEO.
for successful task performance (derived independently of the actual I&C in the control room). Noted in this column are (1) the system involved (2) the parameter, component in procedure needed and (3) the relevant characteristics of the parameter or component, required for the operator to execute the ) task (e.g., parameter range, accuracy, scale, units or control states.
the actual means (e.g. switch, meter, etc) used by operators to 10.
sERAss perform the task in the control room.
the actual instrumentation and controls (IAC) 11.
ZeC IDENT. (PANEL /WO.)
identified from walkthroughs that the operators used to perform the task. The IEC is uniquely identified using a PANEL number and Equipment Number (NO.).
columns that indicate the availability 12.
TERIFICATIGE (& TAIL./5DIT.)
and suitability of the Instrumentation and controls (I&C) needed for task performance. These col mns would contain a "yes" or "no" answer which is arrived at through a Verification Process Flowchart. Entries that are a
'no" are detailed further ~on an NED Suitability Assessment Form.
any commente related to scenario execution, task
- 13. Capoters performance, or the accampanying task requirement columna (the balance of the task analysis worksheet)
Figure 3.
Task Analysis Worksheet Fields (Columns) Definitions 5
..s
.e
LONG ISIAND LIGHTING COMPANY TABLE 1 SHORENAM OPERATING SCENARIOS FOR TASK ANALYSIS SCENARIO 1.
Ioss of Offsite Power SCENARIO 2.
Ioss of Offsite Power with Ioss of Coolant Accident G
6
.. ~.... -.
IANG ISIAND LIGHTING COMPA1R 2.
A brief description of the operator's tas'ks (in order of procedural steps) will be recorded in the " Tasks / Subtasks" colum of the Task Analysis Tom. Note that there may be more tasks described than are explicitly called out in the procedural step. Tasks, both explicit and implicit, will be documented by SRO subject matter experts and General Physics human factors specialists using plant-specific E0Ps and Shoreham FSAR.
3.
The operator decisions and/or actions that are linked to task performance will be noted in the " Decision and/or Contingent Action Requirements" column. System functional response is described when appropriate in this column. This set of data also includes branching points in the EOPs that detemine the outcome of the operating sequence.
k.
Input and Output requirements for successful task performance are noted in the "Information and Control Requirements" column in Figure 2.
These are typically parameters, components or procedural information that are necessary for operators to adequately assess plant conditions or system status (e.g., reactor vessel water level. dry well temperature, etc.).
Malevant characteristics for parameter readings or control selection will be noted by the Subject Matter Expert (SME) in the "Information and Control Requirements Column" in Figure 2.
5 Once the Tasks, Decision Requirements, and Infomation and Control requirements are specified, the specific instrumentation and controls (I&C) for EDG loading with the qualified load limit of 3300kW that the operator required per procedural step will be documented. The I&C needed to either (1) initiate, maintain or remove a system from service, (2) confirm that an appropriate system response has or has not occurred, i.e., feedback, or (3) make a decision regarding plant or system status will be listed. The "Means" column refers to how the information and control requirements are presented on the control boards (e.g., switch, meter, etc.). The "IS'C Identification" column provides the specific panel number and identification number of the control or instrument.
l For each I&C (equipment) identified in this column, the equipment i
characteristics (parsmeter, range, units, scale, and/or control states)
I are noted on the form in Figure k.
A description of the equipment characteristics noted in Figure k is contained in Figure 5.
These characteristics are used in the Verification of I&C Availability and Suitability Step as discussed in Section 2 below.
It is important to note that Steps 1 through k are completed on the Task Analysis i
l Worksheet using independent sources of data other than the actual I&C present in the control room. Step 5 essentially completes the first step in the verification process to identify whether or not the necessary I&C for task performance is available in the control room.
The remaining colusns of the Task Analysis Worksheet will be utilized during the l
Verification of Task Performance Capabilities, which is described in Section 2.
j These columns are briefly described below:
I 7
I 4
r
,..,uw-~-..
..,a.
LONG ISLAND LIGHTING COMPANY 6.
Verification column (used during the Verification step)
" Availability" of the I&C identified in Step Five (5.) for successful operator task performance is noted by a check in this column; " Suitability" i
of the I&C to meet the infomation and control requirements of operator task is noted by a check in this column.
7.
Comments / Candidate EEDs Comments or candidate Ruman Engineering Discrepancies (NEDs) can be noted in this column during any step of the Task Analysis or V&V phases. Data for IEDs will be entered on an RED form and into the computerized database.
The Task Analysis Worksheet thus serves as the complete record of operator tasks, decisions, information and control requirements, and 2&C availability and suitability verification during the selected emergency operating sequences. His record is developed through the series of steps described above.
l 16 Task Analysis Database j
\\
The task analysis data will be entered into a computerized database. The l
forms that are used in collecting the data ares j
e Task Analysis Worksheet e
IEC Equipment Characteristics These forms collectively makeup the complete database fields that are defined for the Task Analysis, verification and Validation phases. He Task Analysis Worksheet is the master record of task data and the verification phase i
decisions made about the task data and associated I&C Equipment Characteristics.
In the computerised database, each data field (column) is represented only once with data being keyed to one or more fields of the Task Analysis l
l Worksheet. The other two forms are linked by either the Task Analysis j
worksheet (TAW) Scenario and Task I.D. (see Equipment Suitability HED Form) or by the IEC Equipment Identification coltaans (see IEC Equipment Characteristics form). The engineer can enter the database by referencing either the Scenario-Task ID or the IEC Identification (Panel No.)
keys. In this way, the database allows flexibility to search both operator task data and equipment data.
1.7 control mean Inventory
~
The function intended for a control room inventory is to determine whether the instroentation and controls needed to support the operation of the EDGs below 3300 kw under emergency conditions actually exist. His function will be accomplished as part of the task analysis effort and the related verification and validation efforts. The determination of 2&C availability is described in Section 2 3, 14C Availability. Equipment characteristics associated with the I&C (Equipment) identified in the task analysis worksheet will be noted using
~
the form in Figure d.
i e
LONG I: LAND LIGHTING COMPANY 11 e e I
i ni e u
I a..
i c!
I 1
41 i
=t e 4
s 3
4
's a
l_
1 e E
E.
I @
m i
H t
4 e E
.}
l
.u
(
l l
l l[
L e
L e 2.1 I
i
}
Figure 4.
1&C Equipment Characteristics l
9 4
, an e e aume ese 9 88** *
- f*
11P '
IAMOG ISIAND LIGHTING COMPANY 1
1.
PANEL 1.D. - the specific panel identification code. It can be a letter code or number code.
I 2.
REVIEWER & DATE - the name of the person filling out the equipment g
characteristics form and the date it was performed.
3.
IEC DESCRIPTION - this is the noun name description of the instrument or i
control as it appears on the panel. 'Ihe Parameter measured should be included as the last part of the I&C Description where applicable.
4.
IEC NtMBER = this is the alpha-numeric identification code given to an instrument or control.
5.
INSTRUMENT TYPE - this is either a switch, meter, recorder, controller, potentiometer, pushbuttons, indicator lights, etc.
6.
RANGE - this is the meter range from minimum to maximust on the scale.
7.
UNITS - the standard of measurement such as GPM, APMS, INCHES, RPM, etc.
S.
DIVISIONS / SCALE - the divisions are listed as major and minor graduations. The scale is either log or linear.
9.
CONTROL / LIGHTS - for a control, list the switch positions (i.e.:
open-normal-close). For lights, list the color and its meaning when illuminated.
f Figure 5.
Description of aquipment characteristics Form 10 2
._,..-..-x.
4 LONG ISIAND I.IGHTING COMPANY 4
t 1.8 videotape Data Analysis Methodology videotapes of the operating scenarios will be taken in the Limerick simulator.
In analysing the videotapes of the scenarios, the primary concern will be the recording of instruments and controle used in each task.
1 Each time a discrete action is performed, (e.g., observing a meter, positioning a control, informing other operators of plant status), the analyst will fill in the Task Analysis Worksheet as described in the Systems Function l
Review and Task Analysis Procedure. 'the fields completed in the videotape analysis will ber e
Time e
Task performed Control room crew member e
Bis location e
Means used to perform the action (e.g., meter, discrete control,
~~
e verbal, continuously variable control)
Isc Identification numbers of components used (includes Panel No. and e
l Comp. No.)
The list of components used will be detailed further on an Equipment Characteristics form (see Figure 4).
This form includes IEC characteristics associated with the Isc identified on the Task Analysis Worksheet as follows:
Display characteristics e
Range Units Scale type Accuracy
=
control characteristics e
States Direct / Indirect Once the task analysis data reduction is complete, any new tasks identified will be subjected to analysis for independent information and control requirements by a subject matter expert (BME). This SME vill not have seen the actual I&C used by the operating crew.
The completed Task Analysis Forms will be then ready to be used in the Terification of Availability and suitability Phase of the evaluation study.
20 verification of Task Performance Capabilities 21 Purpose The purpose of the Verification of Task Performance Capabilities is to systematically verify that the information and control requirements that are j
identified in the task analysis are 11
" ~ ~ ' * ' '
2 ~~ ~.~ **.* ~ P ".~. ~.T.~ ~ ~~.~ 7_.. f.2 7.~. ~ ~.'.*/. " " ~ ~ ~ ~
~~~
LONG ISIAND LIGHTING COMPANY
~
Present in the main control room and/or available to the operators.
e Effectively designed to support correct procedure gerformance e
2.2 Methodology S e verification of Task Performance Capabilities will utilise a two-phase approach to achieve the purpose stated above. In the first phase, the presence or absence of the instrumentation and controls that will be noted in the task analysis will be confirmed. h is will be done by comparing the requirements in the "Information and Control Requirements" column of the Task Analysis Form to the actual IEC manipulated ("IEC Identification" coluan) by the operator during the validation scenarios (see Fir;ure 6).
~
2.3 IEC Availability The presence or absence of required instrumentation and controls to manage EDG loading with the qualified 3300 KW load limit will be noted in the l
l
" Availability" coluan of the Task Analysis Form. If discovered that required j
instrumentation and controls are not available to the operator, any such occurrence will be identified as an HED and documented accordingly on an HED form.
The result of the verification of IEC availability will be a main control room inventory (in the Task Analysis Form column labelled "ISC Requirements") of instrumentation and controle needed to support operation under EDG emergency conditions.
2.4 I&C Suitability The second phase will determine the human engineering suitability of the required instrumentation and controls to manage EDG loading with the qualified 3300 EW load limit by ccuparing the instrumentation against the criteria shown in Figure 6.
For example, if a meter utilized in a particular procedure step exists in the main control room, that particular meter will be examined to determine whether or not it has the appropriate range and scaling to support the operator in the corresponding procedural step. If the meter characteristics are not appropriate, it will be noted by placing a check in the "Not Fully Useable" column of the Equipment Suitability Form (see Figure 7).
His type of occurrence will be defined as an NED and documented accordingly on an RED form. If the equipment characteristics are appropriate then it will be noted by placing a check in the suitability column on the Task Analysis Worksheet (Figure 2).
3.0 validation of EOPs and Control Room Punctions 31 Purpose The purpose of the validation of EOP and Control Room Functions step in the study will be to determine whether the functions allocated to the control room operating crew could be accomplished effectively within (1) the structure of the Shoreham specific BOPS and.(2) the design of the main control room as it 1-exists.
l' 12 mm..
wmu i - u -.. x r.
~ -. --
- 3. _ _ __
.._lN': M L = :.X m. M ; ~3r m u
... s up.;...
s..
t k
LONG ISIAND LIGHTING CCMPANY 9-
.J*
i Flow Chart of Decision Presses
=4 ter verifying E quipment $sertetwirty
'J For ewry 14 in me mt reirse,we.
Ify est es serament specded is e
t si,teWe to. reset me.n ees s --
te9cy seatd9tN'es 1
1I CutittRiA Poet DEC1880ed5 Does 9e P evi.eerhont s
M appreerste pgg informat.en %edbeth e informaten Seployed to persprete ter the q,
medelsty treuel et M'teryl taskt e Aepreerett parameter Geoleved b
e Depts, of eWentitet.se and'or edite-
,,,,,g,,
tree thfermeten eersprete 9er task
,,gyn,,g NI easiletpe umach
,, g e Decrete/continimia sentrol fidactars Perises wegrete 89' e O.sof ty e' t'emd informeleP evedeWe shea oppeerete
,,,,,,g,
=
YES q,^
1 I
Does me seiem Peces ectuot*
NO system states informatiemi qp
- 18' rect)
GEC e Actimi system eew.ement etetes enfor-l spietem e prevere remer the9 Mrett k eMy enf ermat.em le 3. dem89e et. selve ether egpement pas. tem for gemtre86ers. e* rect Us. en-TE$
evealetpfe that 6,ect measure o9 94pe m system loce) yeeems espreeriete intermat.ea and tefwts actual system NO status' YES 3
r teF Elo*En&C e Ee cPmeat Fev des opersprete pre-is eser sad reage et seatrol me NO 08W'F*'"'
e acese vn.m ere sere stent one We es-N
gree e' prete=oa aseced q,
qp q,
e Beate rence speas the espectee verge IDEN I IID e Vol.es cessered are a e krm immo6-ygg etely weseWe m 4 esagplden 1f EDVIPWINT WE ETS
$UITAgiLITY RtoointWINTS FOR TASE PE R F0#h*ANCE
- elle Figure 6.
Flow Chart of Decision Process for Tarifying Equipment suitability 13
.. ~
LONG ISIAND LIGHTING COMPANY EQUIPt4ENT SUITABILITY HEDs Completed by:
Date:
Odect sys.
g Taw atF.
EC E
=ai tab aet 8*a ys,,
wi, Seon.
Tas41.D.
M-unesmse pr..
e e
4 Figure 7.
Equipment suitability EED Form 14
.. -oes meanw. 7e.. -. ~..
=
IANG ISLiutD LIGHTING CGtPANY 32 Nethodology for Validation This section provides an overview of the steps invol'ved in the simulator validation of EOPs and Control Room Functions. First, scenarios will be developed that challenge critical safety functions that must be restored using the procedures. Second, expected operator actions will be delineated for each s:enario so that a hypothetical template is available for comparison to what actually happens during the simulator run. Next, the scenario will be simulated and the operatir.g crew will use the EOPs to restore the plant to a safe condition. 'the operators are then debriefed to provide an important source of information for evaluating the procedure set. Following*the debriefing, operators will walk through the scenario in slower than real time to evaluate the operational aspects of the control room design. The video-tapes and generated documentation are then reviewed for dynamic performance problems and procedural error. Procedural errors will be written up on liuman Engineering Discrepancy forms for LILCO resolution and dynamic control room hardware discrepancies will be written up as REDS. The following' sections provide further details of this process.
3.3 Methodology for Simulator Validation A scenario is a collection of selected pre-planned events used as a framework for validation. A scenario includes the initial plant conditions, action To the
- l sequences and expected outcome for a hypothetical plant emergency.
extent possible, each scenario will be planned to include a unique set of paths through the EOPs in order to exercise as much of the procedures as possible. While some of the objectives of procedure verification / validation can be evaluated without reference to events, the useability of EOPs can be fully evaluated in the context of successfully controlling emergency events. Thus, scenarios will be constructed to challenge the procedures based on selected events.
~
A systematic procedure for choosing events with which to construct a scenario provides greater assurance that a representative sampling of events will be chosen. One way to sample events is to select ones that challenge the The procedures to maintain critical safety functions of the plant.
development of scenarios is a multistep process'and is described in the following paragraphs.
The first step in the development of scenarios will be to define which critical safety functions are to be challenged. Once the critical safety functions have been identified, the validation team will define the boundary l
conditions within which the scenario would be exercisedt specifically, the l
validation team will define the initial conditions and final. conditions of the j
Initial conditions are defined as those conditions existing (i.e.,
scenario.
l plant status) issnediately prior to the event intended to challenge critical safety functions. Final conditions will be defined as those conditions representing a safe and stable plant. Restoration of the simulator to a state consistent with these final conditions will be the ultimate criterion for validation.
l 15
,-,------.,,+.--w,-.-....-_,m,
,,mmm.-,
--,r.--,---e,
- - ~
IANG ISIAND LIGHTING COMPANY Se next step will involve analyzing the Shoreham EOPS to identify those elemente representing the desired final conditions. The EOPs will be further analysed to define the hypothetical event path of the scenario in progressing from the initial to final conditions. Finally, the progression of action and scenario initiator (s) will be defined. The progression of action is a chronological description of the events highlighted on the EOPs as well as anticipated operator actions. S e scenario initiator (s) is that event which degrades plant status to a level requiring entry to the EOPs.
hollowingdevelopmentofscenariosbythevalidationteam,scenarioswillbe reviewed by Limerick simulator instructors to ensure that simulator perform-ance required by the scenarios is consistent with simulator capabilities
(
(i.e., to ensure that simulator modeling is adequate to successfully exercise l%
the scenario). Where inconsistencies are noted, the scenario progression of action will be modified as necessary, as will be the sequence initiator (s) and timing of malfunctions. It should be noted that. these modifications vill not redefine the incenarioss they only modify the specific simulator functions used to successfully implement the scenarios.
l 3.4 Delineation of Expected Operator Actions g,
The scenarios developed by the validation team will be of sufficient com-plexity to require the use of multiple procedures to restore the plant to a safe and stable condition. The scenarios will to the extent possible include both loading and unloading sequences for the EDGs.
The format presented in Figure 2 will be used by the validation team, both in defining the expected operator actions and evaluating the scenario. This format will identify:
A procedure set for the scenario and specific steps from each e
procedure Operator actions which follow an expected path through the scenario e
Description of specific points at which differences between the e
control room and simulator may impact operator performance f
Description of discrepancies between actual performance and expected e
performance e
Categorisation of discrepancies (training, procedures, instrumentation)
Following the completion of simulator exercises, actual operator actions will be compared with the EOP elements to identify any discrete EOP elements or groups of elements that had not been exercised by the scenarios. As appropriate, these residual tasks will be identified and the procedure steps vill be evaluated.
The residual tasks (i.e., those E0P elements not smenable to simulation) vill be evaluated in the walkthroughs at Shoreham with the operators.
16
t' IANG ICIAND I,IGHTING COMPANY l
i.
i
- l 35 Evaluation of simulator / Control Room Differences l
A comparison will be made between the Limerick simulator and the shoreham main control room, to determine significant differences that could affect the scenarios as they relate to the EDG 3300kW gualified load limit. Differences i
j in panel design will be noted, where appropriate, and operator actions vill be delineated so that attention can be given to the differences during the simulator runs and subsequent analysis. Operators will be familiarized with these differences prior to performing each scenario.
36 Performance of simulator Runs The operating crew chosen for the simulator runs will be familiarized with the latest procedures through training. Se crew will not briefed on the actual scenarios to be run. De operators will be, however, briefed on the purpose
~
of the validation.
Each scenario will be simulated separately (in real-time) with a debriefing session and walkthrough after the run. During the run, validation team f
members will be observers at a minimum, two training / operations personael and one human factors specialist will participate. Some notes will be recorded on Task Analysis forms, but excessive note-taking will be avoided so that the observers are free to observe. The tape record of the scenario will permit the observers to analyze occurrences later. In addition to the videotape of the scenarios, computer printouts from the simulator of switch, l
parameter, and annunciator status will assist in the analysis of the tapes if the observers are uncertain of an action because of camera placement.
I During the simuiator runs, if the crew takes an expected alternate path that will be as correct as the expected path, they will be allowed to continue uninterrupted. If the operating crew momentarily takes an unexpected alternate path that will be an incorrect path, but will be able to get back on the correct path using the procedure within a reasonable amount of time, the simulation will continue undisturbed.
If, however, the crew takes an unexpected alternate path that is incorrect and shows no sign of recovering, 1
the simulation will be stopped. If an obvious, remediable error is involved, e.g., a page of the procedure was missing, the problem will be corrected and the run started again where it went astray.
3.7 Debriefing of Operators The operator debriefing session will be conducted immediately af ter each scenario run on the simulator. S e comments of the operators who participated in the exercise will provide one of the most important sources of information for evaluating the procedure set. Operator actions which did not lend themselves to direct observation, such as symptom diagnosis or conversion of displayed values will be described by the operators during the debriefing.
The operators' comments will also contribute to greater accuracy in analyzing deviations from expected operator actions which occurred during the scensrio.
i i
17
.,.-,---,.-a.--_--..-,.-----..--.,,,-_,-n-
IANG ICLAND LIINTING COMPANY 38 scenario walkthroughs The purpose of the walkthrough will be to evaluate the operational aspects of control room design in terms of control / display relationships, display grouping, control feedback, visual and comununication links, manning levels, These walkthroughs will traf fic patterns, and the field operator functions.
be perfomed at Shoreham, i
After the operator debriefing is completed, the operators will be z,equested to During the perform a walkthrough of the scenario in slower than real time.
walkthroughs, the operators will note any errors, such as improper step These sequencing or branching, that occurred on the Task Analysis Forms.
errors will be traced back to the EOPs for investigation to ascertain whether l
the error occurred because of a procedural problem.
If a procedural problem is discovered, it will be documented and later written The RED forms will be submitted to LIIr0 Operations who up on an EED form.
will review them and take the appropriate action.
l The operators who perform the scenarios will review the Task balysis Worksheets along with a human factors specialist. The operators will be asked to note any errors or problems that were encountered in the walkthroughs and Any dynamic performance to expound upon the source of the errors or problema.
problems uncovered during this phase will be documented as EEDs.
Once the events have been analysed to extract the information noted above, I. ink Analyses, vill be prepared to document movements of the operators in the Shoreham control room during the scenarios.
Review of EDG Training Plan with Job Ana.kysis Worksheets 40
/
General Physics and LIIr0 will review the EDG Training Plan and compare it to the job analysis data collected in Step 1 above.
H e comparison will focus on the skills and knowledge needed to manage EDG These skills and knowledge loading during the IDOP and 140P-LOCA scenarios.
requirements identified in the job analysis portion of step 1 (see Figure 8) will form the basis for the review of the lesson plan objectives and the material content covered in the lesson.
Recomumendations for improving the lesson plan will be provided in a summary These recomunendations will also address the correspondence of form to LI140.
the lesson plan content to the EDG procedures and their use in the Shoreham l
control room.
i 18
.....__.=_,=,2...;.,--__.....
b
~ ~ ~ " ' '
^
- :. s*.~ 1 s - ~ ~ ' - -- -
.. a. :
~,
- LONG ISIAND LIGHTING COMPANY
$i I
4 tkII m
~
I 3C i
8 I
e I
w i
~
s ii a4
=,
i I,
I l
Bl
"[s I
ge gi 5
1 I
i-Skille and howledge Worksheet Figure 3.
19
~
ATTACHMENT 5 TDI - Emergency Diesel Generator 3300 KW Load Lesson Plan