ML20100K191

From kanterella
Jump to navigation Jump to search
Rev 1 to Safety Analysis for Hope Creek Generating Station SPDS-Display Design & Implementation
ML20100K191
Person / Time
Site: Hope Creek PSEG icon.png
Issue date: 03/31/1985
From:
OPERATIONS ENGINEERING, INC.
To:
Shared Package
ML20100K184 List:
References
NUDOCS 8504120304
Download: ML20100K191 (68)


Text

.

SAFETY ANALYSIS FOR HOPE CREEK GENERATING STATION SAFETY PARAMETER DISPLAY SYSTEM DISPLAY DESIGN AND IMPLEMENTATION OEI Document 8407-1 Revision 1 March,1985 Prepared for Public Service Electric and Gas Company llope Creek Generating Station By Operations Engineering, Incorporated 39510 Paseo Padre Parkway Fremont, California 94538 (415) 794-0770 NEE ** posed 8E8$$8s4 F PDR

i OEI Document No. 8407-1 TABLE OF CONTENTS 1.0 OVERVIEW 2.0 DESIGN BASIS OF DISPLAYS 3.0 ANALYSIS OF EOP DECISION FUNCTIONS 4.0 DISPLAY STRUCTURE DEVELOPMENT 5.0 DISPLAY DESIGN 6.0 SPDS COMPUTER SYSTEMS 7.0 VALIDATION OF SPDS PARAMETER VALUES 8.0 APPLICATION OF HUMAN FACTORS ENGINEERING PRINCIPLES 9.0 SYSTEM PERFORMANCE VALIDATION 10.0 OPERATOR TRAINING 11.0 SCHEDULE APPENDIX A DEFINITIONS i

OEI Document No. 8407-1 FIGURES Number Title PA21 1-1 SPDS DISPLAY DEVELOPMENT PROCESS 1-3 1-2 SPDS DISPLAY DESIGN - INTERFACES WITH SYSTEM HARDWARE l-5 4-1 DISPLAY STRUCTURE 4-2 9-1 EVALUATION MODEL FOR PERFORMANCE 9-3 VALIDATION TABLES Number Title EASA 2-1 NUREG-0737 SPDS INFORMATION REQUIREMENTS AS ADDRESSED BY THE HCGS EOPs 2-3 2-2 HCGS SPDS PARAMETERS 2-7 '

2-3 CORRELATION BETWEEN CRITICAL SAFETY FUNCTIONS AND SPDS PARAMETERS 2-8 l

11

OEI Document 8407-1, Overview 1.0 OVERVIEW The design of Safety Parameter Display System (SPDS) displays for the Hope Creek Generating Station (HCGS) will use a methodology based on a function and task analysis of the plant's Emergency Operating Procedures (EOPs). The HCGS EOPs are based upon Revision 3 of the symptomatic Emergency Procedure Guidelines (EPGs) that were issued through the BWR Owners Group and approved for implementation by the NRC. The methodology employed for converting the generic EPGs to plant-specific EOP Technical Guidelines is described in the Hope Creek Generating Station Procedures Generation Package (previously submitted to the NRC).

Sections 4.1.a and 4.1.f of NUREG-0737 Supplement 1 stipulate that the SPDS shall present information sufficient to assess plant safety status, with the principal purpose and function of the system being "to aid the control room personnel during abnor-mal and emergency conditions in determining the safety status of the plant and in assessing whether abnormal conditions warrant corrective action by operators ... " Plant conditions affecting reactivity control, reactor core cooling and heat removal, reactor coolant system integrity, radioactivity control, and containment integrity are specifically identified as parameters for which information should be provided.

The plant's EOPs fully address these conditions through the Revision 1 1-1

OEI Document 8407-1, Overview symptom-based approach to emergency response. Information requirements are identified through a function and task analysis of the plant EOPs, and a structured set of SPDS displays is then designed to provide this information in a format which is directly usable by the plant operating staff in executing the procedures.

An overview of the process which will be followed for SPDS dis-play dev.elopment and implementation is presented in Figure 1-1 (Page 1-3). Information requirements are identified through the EOP Function and Task Analysis. Display features are designed to support these information requirements directly, and also to support the information processing (including decision making) performed by the operating staff when executing the EOPs.

Additionally, the EOP Function and Task Analysis is used to identify the specific set of emergency response control functions and control function parameters for the Hope Creek plant. A structure for the SPDS displays is defined based upon the structure and organization of the EOPs, and the identified EOP control functions.

The display structure, identified information requirements, and display features incorporating information processing are integrated in the design of individual displays. This process provides a basis for structuring, organising, and accessing the Revision 1 1-2

OEI Document 8407-1, Overview EOP FUNCTION AND TASK ANALYSIS I I T I I

CONTROL FUNCTIONS T CONTROL FUNCTION ---> INFORMATION REQUIREMENTS I PARAMETERS I I I I I I T I I I EOP STRUCTURE I I I INFORMATION Als OltGANIIATION I I l PROCESSING I I I I I I I I T T I T T I

DISPLAY STRUCTURE I DISPLAY FEATURES I

i l i t i l l I T T T HUMAN FACTORS


> DISPLAY DESIGN <--- ENGINEERING l PRINCIPLES I I I I I I T I I I I CRT PRESENTATION OF DISPLAYS <----------

1 l

I I l I ,

I I EMERGENCY OPERATING USER l l PROCEDURES TRAINING l I .

I I I I I T T T l

l PERFORMANCE VERIFICATION OF DISPLAYS I

I I l [B.3Ylgjons - as appropfjjLtigl _ _J Figure 1-1: SPDS DISPLAY DEVELOPMENT PROCESS Revision 1 1-3

i i

4-

~

OEI Document 8407-1, Overview i

i j set of displays in a manner which directly facilitates execution j of the plant's EOPs.

i j Human factors engineering principles are applied in the design of l

t display features, in the design of each individual display, and in the presentation of displays on the system CRT.

i j

After the displays are designed, a dynamic evaluation is conduc-1 ted using the plant EOPs. Operators will be trained on the use j of procedures and on the SPDS design prior to participating in the dynamic evaluation of the displays. Where evaluation results '

i 4

indicate that revisions to the displays are appropriate and necessary, such modifications will be incorporated prior to final 2

i system implementation.

The display design process interfaces with system hardware as l shown in Figure 1-2 (Page 1-5):

o Data acquisition and input to the computer system evolves 1

from the information requirements identified in the EOP.

Function and Task Analysis.

I j o Data processing takes the acquired data and processes it 4

consistent with the information processing incorporated f

l in the design of the various display features.

i 4 t, i

Revision 1 1-4

OEI Document 8407-1, Overview 1

I I

____________________________ i l INFORMATION REQUIREMENTS l i I l l C l l 0

1 T n T P DATA ACQUISITION l 0 l INFORMATION I -------------------l T I PROCESSING l---> DATA PROCESSING I E R

U S

l DISPLAY STRUCTURE l<----------> E a

I l DISPLAY DESIGN l<----------> N T

E R

l HUMAN FACTORS l F l ENGINEERING PRINCIPLES l-----------> A C

E I

I T

i CRT PRESENTATION OF DISPLAYS i

Figure 1-2's SPDS DISPLAY DESIGN - INTERFACES WITH SYSTEM HARDWARE Revision 1 1-5

i l

OEI Document 8407-1, Overview o Display structure and composition considers hardware provided for accessing and presenting the displays on the j computer system's CRT.

Additional details on specific aspects of the SPDS display design process described above are provided in the subsequent sections of this report.

Definitions of terms used to describe the program for developing

the Hope Creek Generating Station SPDS displays are provided in

, Appendix A.

o j

i Revision 1 1-6

OEI Document 8407-1, Design Basis of Displays 2.0 DESIGN BASIS OF DISPLAYS The Hope Creek Generating Station SPDS employs a procedures-based display concept. Whereas displays could be developed to serve as an incipient accident detector, industry experience with previous SPDS designs indicates that displays would be more meaningful and more useful to operators if the displayed information would more closely support emergency response (e.g., the operators' actions, and the decisions that must be made in order for the correct emergency response actions to be taken).

Emergency response actions and the associated decision-making carried out by the operating crew are directly supported by developing the SPDS displays such that they support execution of the HCGS EOPs. The generic EPGs, from which the EOPs were developed, have been evaluated by the NRC and accepted as a satisfactory basis for emergency response procedures. Since the EOPs are symptom-oriented and not based on a limited set of specific transients or accident scenarios, plant safety can be assured for a wide range of events and severe accidents, through

. adherence to the EOPs and maintaining plant conditions as speci-fled-there-in. Selection of SPDS parameters to monitor plant safety status using EOP function and task analysis results provides a basis for parameter selection that not only integrates with NRC-approved guidelines and procedures for emergency response but also is analytically traceable to the post-TMI Revision 1 2-1

OEI Document 8407-1, Design Basis of Displays requirements for additional analysis of transients and accidents.

As previously pointed out, the EOPs are utilized in the display I

design process via function and task analysis of the procedures.

The EOP Function and Task Analysis satisfies the requirements 4

stated in NUREG-0737 Supplement 1, Sections 5.1.b(ii) and 4.2.a.

In fact, although the results of the analysis are to be used as the basis for SPDS display development, the analysis was initial-ly developed as part of the HCGS Control Room Design Review (CRDR) . Therefore, function and task analysis is used as design input for display development rather than post-implementation review criteria.

Since the EOPs address all of the functions and conditions specified in Section 4.1.f of NUREG-0737 Supplement 1 (as shown in Table 2-1, Page 2-3), and since the EOP Function and Task Analysis identifies the operator's emergency response information requirements, the display development methodology being employed binds Section 4.1.f with sections 4.2.a (design basis of SPDS displays) and 5.1.b.ii (use of EOP function and task analysis).

As a result, the displays developed through this process fully support emergency response information requirements, which in i

turn encompasses the SPDS basis functions and conditions speci-fled in Section 4.1.f.

l l

Revision 1 2-2 i, . - . - .-.. - - . - - - . - . .

OEI Document 8407-1, Design Basis of Displays i l l TABLE 2-1 1 I I l NUREG-0737 SPDS INFORMATION REQUIREMENTS I I AS ADDRESSED BY THE BCGS EOPs i l i l I I I l NUREG-0737 Supplement 1 l l Section 4.1.f l I Information Recuirements Associated HCGS EOPs l 1 I I I i 1. Reactivity Control OP-EO.ZZ-101, " Reactor / I l Pressure Vessel Control" l I i l OP-EO.ZZ-207, " Level / Power l l Control" l I I I I I 2. Reactor Core Cooling OP-EO.ZZ-101, " Reactor / l l and Heat Removal Pressure Vessel Control" I I I l OP-EO.ZZ-201, " Level l l Restoration" l I I l OP-EO.ZZ-202, " Emergency l l Depressurization" l I I l OP-EO.ZZ-203, " Steam l l Cooling" i I I I OP-EO.ZZ-204, " Spray l l Cooling" l i I I OP-EO.ZZ-205, " Alternate l l Shutdown Cooling" l I I ,

1 OP-EO.ZZ-206, " Reactor l l Flooding" l I I 4 l OP-EO.ZZ-207, " Level / Power l l Control" l l l 1 l l (THIS TABLE CONTINUES ON THE NEXT PAGE) i I I Revision 1 2-3

OEI Document 8407-1, Design Basis of Displays l

I l TABLE 2-1 I l (Continued) l I

I I

I l NUREG-0737 Supplement 1 l l Section 4.1.f I I Information Reauirements Associated EOPs l l

l l

l l 3. Reactor Coolant OP-EO.ZZ-101, " Reactor / l l System Integrity Pressure Vessel Control" l i l i OP-EO.ZZ-207, " Level / Power l l Control" l l

l l OP-EO.ZZ-102, " Containment l l Control" l 1

I I

I l 4. Containment Integrity OP-EO.ZZ-102, " Containment l l Control" l 1

I I OP-EO.ZZ-103, " Reactor l l Building Control" l l

l l

I l 5. Radioactivity Control OP-EO.ZZ-103, " Reactor l l Building Control" l I

I l OP-EO.ZZ-104, "Radioac- l l tivity Release Control" l l

l l

l Revision 1 2-4

OEI Document 8407-1, Design Basis of Displays Eleven emergency response control functions can be identified in the HCGS EOPs by applying the generic work completed under an EPRI/ DOE project for the BWR Owners Group which developed procedures-based displays. These control functions are the following:

EOP Control Function ACRONYM Monitor and control RPV RPVWLC (RPV Water Level water level. Control)

Monitor and control RPV RPVPC (RPV Pressure pressure. Control)

Monitor and control RXPC (Reactor [RX] Power reactor power. Control)

Monitor and control SPWTC (Suppression Pool

suppression pool water Water Temperature l

t temperature. Control)

Monitor and control DWTC (DryWell Temperature drywell temperature. Control)

Monitor and control primary PCPC (Primary Containment containment pressure. Pressure Control)

Monitor and control SPWLC (Suppression Pool suppression pool water Water Level Control) level.

Monitor and control RBTC (Reactor Building Reactor Building area Temperature Control) temperatures.

Monitor and control RBRLC (Reactor Building Reactor Building area Radiation Level radiation levels. Control)

Monitor and control RBWLC (Reactor Building area water levels. Water Level Control)

Revision 1 2-5

OEI Document 8407-1, Design Basis for Displays EOP Control Function ACRONYM (Continued)

Monitor and control OSRRC (Off-Site Radio-off-site radioactivity activity Release release Control)

The SPDS parameter set (shown in Table 2-2, Page 2-7),

evolves from the identified EOP control functions. This set of parameters is defined such that the plant will be main-tained in a safe condition as long as these parameters are maintained within the ranges specified in the EOPs. Thus, since the EOPs provide sufficient emergency response instructions for transients and accidents occurring under all plant operating conditions, the SPDS parameter set-derived from analysis of the EOPs likewise provides adequate information for assessing plant safety status under all modes of operation.

If the EOPs are updated, an assessment will be made to determine what additions to the SPDS parameter set might be necessary (if any); subsequent update of SPDS displays can be easily accommodated.

The correlation between " Critical Safety Functions" (as defined in NUREG-0737, Supplement 1), and the HCGS SPDS parameters is shown in Table 2-3 (Page 2-8).

Revision 1 2-6

OEI Document 8407-1, Design Basis of Displays l

I I I TABLE 2-2 l 1 1 I HCGS SPDS PARAMETERS l l l l l l 1. RPV water level l I I l 2. RPV pressure i I I I 3. Reactor power i l i I 4. Suppression pool water temperature l I I I 5. Drywell pressure l I I l 6. Drywell temperature l l I l 7. Suppression chamber pressure I I I l 8. Suppression chamber temperature l I I l 9. Suppression pool water level l I I l 10. Reactor Building area temperatures (areas as defined l l in Table 1 and Table 2 of OP-EO.ZZ-103) i I I l 11. Reactor Building area radiation levels (areas as l

[ defined in Table 3 of OP-EO.ZZ-103) l I I i 12. Reactor Building sump and area water levels (areas as l l defined in Table 4 of OP-EO.ZZ-103) l I I l 13. Off-site radioactivity release rate i l I Revision 1 2-7

OEI Document 8407-1, Design Basis of Displays t

i I I TABLE 2-3 I I I I CORRELATION BETWEEN CRITICAL SAFETY FUNCTIONS l l AND SPDS PARAMETERS I 1 I l Critical Safety Function 1 Associated SPDS Parameters 2  ;

I I I I i 1. Reactivity Control Reactor power l I I I RPV water level I r i l I RPV pressure 1 I I 1 I I 2. Reactor Core Cooling Reactor power l l and Heat Removal l i RPV water level l I I I RPV pressure l I I i l I 3. Reactor Coolant RPV water level l l System Integrity 1 l RPV pressure l I I I Drywell pressure i I I l Drywell temperature l

' i 1 I Suppression pool l l water temperature l I I I suppression pool l I water level l I I I Suppression chamber I l pressure  !

1 I l Suppression chamber l I temperature i I I I I 1

I (THIS TABLE CONTINUES ON THE NEXT PAGE) l I I Revision 1 2-8 l

_ ~ . . _ _ _ . _ . . . _ _. . _ . . . _ _ _ . _ _ _ . _ . _ _ _ _ _ _ - . _ . _ _ _ _ . _ _ . . . _ . , _ _ . _ _

f OEI Document 8407-1, Design Basis of Displays I I I TABLE 2-3 l l (Continued) l I I I I l Critical Safety Punction1 Associated SPDS Parameters 2 l l l l l l 4. Containment Integrity Drywell pressure l i i i Drywell temperature l I I l Suppression chamber l l pressure I l l l Suppression chamber l l temperature l I I l Suppression pool l l water temperature l I i l Suppression pool l l water level l I I l Reactor Building area i I temperature 1 i I l Reactor Building area I l radiation level l I I l Reactor Building sump l l and area water level l I I I I l 5. Radioactivity Control Reactor Building area l I radiation level l I I l Off-site radioactivity l l release rate l I I l l l Notes: 1. As defined in NUREG-0737, Supplement 1 l l l l 2. From associated EOPs, as shown in Table 2-1 l l l Revision 1 2-9

OEI Document 8407-1, Design Basis of Displays

The emergency response control functions apply to the entire 4 operating crew, as a whole, rather than to just one individual 1 operator or supervisor since the symptom-based EOPs do not specify a division of labor between operators and supervisors and do not restrict actions or decision-making to a specific loca-tion. Analysis results and their application to SPDS display design thereby directly support integrated emergency response.

In executing the EOPs, the operator is not required to identify

, the event or sequence of events which initiated the emergency (or potential emergency). Rather, actions are specified to directly control a few parameters which can be directly monitored. By i designing the SPDS displays based on information required to execute the EOPs, this same symptomatic approach to emergency j response is totally integrated for the operating staff.

i l

Revision 1 2-10

OEI Document 8407-1, Analysis of EOP Decision Functions 3.0 ANALYSIS OF BOP DECISION FUNCTIONS The EOPs specify performance of the control functions in a series of decision and action functions. These decision and action functions were identified in the EOP Function and Task Analysis.

In the SPDS display design development process, each decision function for each control function will be separately evaluated in terms of the control ftnction status information that the operator requires in order to make the decision. In addition to explicitly identified information requirements, a second input for display development is the associated information processing which the operator would perform in making the decision -(i.e.,

comparison of the current value of a parameter to a setpoint or limit value). At the conclusion of this information requirements analysis, a compilation of information needs is assembled under the respective control functions. This information set then serves as the data base for display feature development.

Application of information analysis results for display feature development is illustrated in the examples of Section 5.0.

Revision 1 3-1

l OEI Document 8407-1, Display Structure 4.0 DISPLAY STRUCTURE DEVELOPMENT Development of a structure for the SPDS displays is an iterative process. A hierarchical structure evolves by assigning an individual display to each control function on a one-for-one basis, and then defining a top-level display for a summary presentation of plant safety status.

As display feature development and the design of displays at the control function level progresses, it may be the case that insuf-ficient information is available to fill the display field for a particular control-function-level display. Where this occurs for two or more control functions having a direct association in the i

EOP structure, a mid-level composite display may evolve between the top-level display and the control-function-level displays.

I Additionally, where direct association in the EOP structure and organization exists for several control-function-level displays, a summary display mid-level in the structure may also evolve.

i The structure described above is illustrated, conceptually, in Figure 4-1.

4 i

l Revision 1 4-1 i

OEI Document 8407-1, Display Structure CD OOOOO OO

.i NOTE: l Any display can l l be reached by l l direct access l Figure 4-1: DISPLAY STRUCTURE Revision 1 4-2

OEI Document 8407-1, Display Design 5.0 DISPLAY DESIGN Individual display features are developed to directly assist the operator's decision-making process. The methods chosen to present information on the displays must have a technical basis 4

and must do more than simply replicate existing control room instrumentation. To meet these criteria, the following process will be employed for designing display features:

1. Each identified decision function is examined to deter-mine the information within the SPDS parameter set that is required in order to make the decision.
2. Each decision and its associated information are then examined to determine what processing the operator is
required to perform on the information in order to make the decision.
3. The result of this information processing is identified.

i j 4. A display feature to present this information processing I result is designed.

i This process results in the development of display features which

{

relieve the operator of the task of processing much of the infor-mation contained in the parameter set in order to make the decisions required for execution of the EOPs.

I Revision 1 5-1

1 OEI Document 8407-1, Display Design i

l Display features designed to support the decision functions, and the explicit information requirements supporting action func-tions, are combined in a display consistent with the general principles of display format, the technical scope of the display, and the location of the display within the display structure.

Through application of generic work completed under an EPRI/ DOE project for the BWR Owners Group on development of procedures-based displays, two generic display features have been adopted and modified for use in Hope Creek's SPDS displays. These are the Control Function Parameter Matrix and the History Graph, each of which is separately described below.

Control Function Parameter Natrix The Control Function Parameter Matrix (CFPM) is a concise presen-tation of each control function parameter's current value. The matrix is comprised of four groupings of parameters, arranged consistent with the organization of the 100-series EOPs:

REACTOR / PRESSURE l l REACTOR l OFF-SITE l VESSEL (RPV) l CONTAINMENT l BUILDING l RELEASE CONTROL l CONTROL l CONTROL l CONTROL l l l (OP-EO.ZZ-101) l (22-102) l (22-103) l (ZZ-104)

The CFPM appears on each display in the SPDS display structure below the top-level display, arranged horizontally across the top Revision 1 5-2

OEI Document 8407-1, Display Design of the display. The field where the parameter, its value, and the associated engineering units are presented is color-coded to indicate current status of the parameter relative to defined control values, setpoints and limits.

The preliminary design (initial draft) of each of the groupings is shown below. The final design of the CFPM may differ somewh
t from the initial design as the displays themselves evolve and as the spec,ific graphics capabilities of the computer system are addressed in more detail.

Reactor / Pressure Vessel (RPV) Control:

RPV RX <--- Location WL -PRES PWR <--- Parameter and current value

+ 30 1025 50 (color coded)

IN PSIG  % <--- Engineering Units Containment Control:

SUP POOL DRYWELL <--- Location WL TEMP PRES TEMP <--- Parameter and current value 100 90 1.50 130 (color coded)

O O IN F PSIG F <--- Engineering Units Revision 1 5-3

OEI Document 8407-1, Display Design Reactor Building Control:

l REACTOR BLDG <--- Location )

TEMP RAD WL <--- Parameter and current value 101 35 0.5 (color coded) 0F FT MR/HR <--- Engineering Units l

.i Off-Site Release Control:

l OFF-SITE <--- Location GAS IODINE <--- Parameter and current value 630 0.145 (color coded)

E+3 uCI/SEC <--- Engineering Units History Graphs Historical data on past values of an SPDS parameter is presented in bar graph format. History graphs are included on a display when, for example, trend information is required in order to evaluate the ability of being able to maintain the value of a parameter below a specified setpoint or Limit.

Revision 1 5-4

OEI Document 8407-1, Display Design The general design of history graphs is shown below.

Current value

[ SPDS PARAMETER ] <--of parameter, including engineering units 300 l/ l/ i/l/l/ l/1/i/ l/ F-I/5 150 J l/1/1/1/1/1/1/1/l/1/1/1/l/1/1/1/1/1/

7'/l/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/

/l/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/

/l/l/1/l/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/1/

0

-5 -4 -3 -2 -1 0 <---Time Scale MINUTES I

I Value Scale When placed on displays at the control-function-level, history graphs are consistently located in the upper right quadrant of  ;

the display field. The box above the history graph displaying the current value of the parameter is color-coded consistent with

)

its status relative to the normal control band specified for that i

parameter in the EOPs.

l Examples of the initial design of additional display features and the process followed in their development are shown in the remaining part of this section (Display Feature Development l examples 1 through 3); steps from the suppression pool water I l

Revision 1 5-5

OEI Document 8407-1, Display Design temperature control portion of OP-EO.ZZ-102, " Containment Con-trol" were selected for purposes of illustration.

As individually designed features are grouped together on a dis-play, considerations of uniformity, duplication of information, spacing, etc. may result in some design modifications, and some features may not be appropriate in the composite design of the display. As was discussed for the CFPM, more detailed considera-tion of computer graphics capabilities and changes made to the EOPs upon completion of the EOP Verification and Validation Program may also cause these prototype designs to change; however, the general approach for development of display features remains applicable.

Revision 1 5-6

OEI Document 8407-1, Display Design I

l l

l l

DISPLAY FEATURE DEVELOPMENT - EXAMPLE 1 1 Control Function Parameter: Suppression pool water I

temperature Decision Function: Is suppression pool water temperature above 95 0 F?

OP-BO.II: 102 l Steps: Entry Condition, and SC/T-2 Information Requirements:

1. Suppression pool water temperature - current value Information Processing:
1. Comparison of the current value of suppression pool water temperature to 95 0F Information Processing Result:
1. Status of the current value of suppression pool water temperature relative to the value 950 F Display Features:
1. Color-code change of the SUP POOL TEMP block of the CFPM when the value of suppression pool water temperature is at or above 95 0F.

TEMP 95

2. Tabular presentation of the temperature margin to 950 F, noting the action which is to be taken when suppression pool water temperature exceeds 95 F; MARGIN TO VALUE digital display color coded consistent with CURRENT VALUE of the parameter relative to the ACTION VALUE.

CURRENT ACTION MARGIN TO PARAMETER VALUE ACTION VALUE VALUE U

SP TEMP 95 P COOLING 95 F OF Revision 1 5-7

1 OEI Document 8407-1, Display Design DISPLAY FEATURE DEVELOPMENT - EXAMPLE 1 (Continued)

Control Function Parameter Suppression pool water temperature Decision Function: Is supprgssion pool water temperature above 95 F? (Continued)

Display Features: (Continued)

3. " Flag" alongside the suppression pool water temperature bar graph, positioned at the 95"F point on the vertical scale, with a color-code change when the current value of suppreagion

. pool water temperature is at or above 95 F.

F

- 100

<-- 95 COOLING

/

/

0 l

0 MINUTES 1

n Revision 1 5-8

OEI Document 8407-1, Display Design DISPLAY FEATURE DEVELOPMENT - EXAMPLE 2 Control Function Parameter: Suppression pool water temperature Decision Function: Can suppression pool water temperature be maintained below 1100F?

OP-EO.II: 102 l Step SC/T-8 Information Requirements:

1. Suppression pool water temperature - current value
2. Suppression pool water temperature - historical values Iaformation Processing:
1. Comparison of the current value of suppression pool 1

water temperature to 110 0F

~

2. Determination of suppression pool water temperature trend (increasing / decreasing)

Information Processing Result:

1. Status of suppression pool water temperature relative to the value 110 0 F i

.: Revision 1 5-9

1 OEI Document 8407-1, Display Design

]

i DISPLAY FEATURE DEVELOPMENT - EXAMPLE 2 (Continued) ,

Control Function Parameter Suppression pool water temperature i

Decision Function Can suppression pool water temperature 0

be maintained below 110 F? (Continued)

Display Features
1. Bar graph history curve depicting the value of i

suppression pool water temperature over some prior period of time.

SUP POOL TEMP 97 0 4

F

{ 300 i

J 150

! I/l/l/ .

i

!/1/1/l/l/l/l/l/l/l/

/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/

/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/l/ 0

-5 _4 -3 -2 -l b j MINUTES t

i 1

1 Revision 1 5-10

OEI Document 8407-1, Display Design 1

DISPLAY FEATURE DEVELOPMENT - EXAMPLE 2 (Continued) l Control Function Parameter Suppression pool water temperature Decision Function: Cansuppressionpoolwagertemperature be maintained below 110 F? (Continued)

_______________________________________________________________ l Display Features: (Continued)

2. " Flag" alongside the suppression pool water temperature bar graph, positioned at the 110 F point on the vertical scale, with a color-code changewhenthecurrentvalueofsuppressgon pool water temperature is at or above 110 F.

<-- 110 SCRAM

)I 100

/ <-- 95 COOLING

/

/

/

/ 0 1

0

3. Tabular presentation of the temperature margin to 110 F, noting the action which is to be taken ghen suppression pool water temperature exceeds 110 F.

Color-coded to indicate status relative to the action value; positive values indicate below the action value, negative values indicate above the action value.

CURRENT ACTION MARGIN TO PARAMETER VALUE ACTION VALUE VALUE SP TEMP 95 P COOLING 95 F 0F SCRAM 110*F + 15 F Revision 1 5-11

OEI Document 8407-1, Display Design Considerations DISPLAY FEATURE DEVELOPMENT - EXAMPLE 3 Control Function Parameter: Suppression pool water temperature Decision Function: Can the combination of RPV pressure and suppression pool water temperature be maintained below curve SC-T-1 [ Heat Capacity Temperature Limit]?

OP-BO.II: 102 l Stept SC/T-18 Information Requirements:

1. Suppression pool water temperature - current value
2. Suppression pool water temperature - historical values
3. RPV pressure - current value
4. RPV pressure - historical values
5. Heat Capacity Temperature Limit function (suppression pool water temperature as a function of RPV pressure)

Information Processing:

1. Comparison of the current value of suppression pool water temperature to the suppression pool water temperature value of the Heat Capacity Temperature Limit for the current value of RPV pressure
2. Determination of suppression chamber water temperature trend
3. Comparison of the current value of RPV pressure to the RPV pressure value of the Heat Capacity Temper-ature Limit, for the current value of suppression pool water temperature
4. Determination of RPV pressure trend Revision 1 5-12

I OEI Document 8407-1, Display Design Considerations l DISPLAY FEATURE DEVELOPMENT - EXAMPLE 3 (Continued)

Control Function Parameter: Suppression chamber pool temperature l

_______________________________________________________________ l Decision Function: Can the combination of RPV pressure and suppression pool water temperature be I maintained below curve SC-T-1 [ Heat Capacity Temperature Limit]? (Continued)

Information Processing Results: l l

1. Status of suppression pool water temperature relative '

to the suppression chamber water temperature value of j

.the Heat Capacity Temperature Limit for the current value of RPV pressure

2. Status of RPV pressure relative to the RPV pressure value of the Heat Capacity Temperature Limit, for the l current value of suppression pool water temperature '

l l

i l

l 1

i l

l Revision 1 5-13

OEI Document 8407-1, Display Design Considerations DISPLAY FEATURE DEVELOPMENT - EXAMPLE 3 (Continued)

Control Function Parameter: Suppression pool water temperature Decision Function: Can the combination of RPV pressure and suppression pool water temperature be maintained below curve SC-T-1 [ Heat Capacity Temperature Limit]? (Continued)

Display Features:

1. " Flag" alongside the suppression pool water temperature bar graph, positioned on the vertical scale at the suppression pool water temperature value of the Heat Capacity Temperature Limit for the current value of RPV pressure, with a color-code change when the current value of suppression pool water temperature is at or above the Heat Capacity Temperature Limit. (NOTE: vertical positioning of the " flag" will vary as the current value of RPV pressure varies.)

g F

300 l

<-- 175 HCTL ,

'T i

/ 150

/

l

/ \

l 0 0

MINUTES Revision 1 5-14

OEI Document 8407-1, Display Design Considerations DISPLAY FEATURE DEVELOPMENT - EXAMPLE 3 (Continued)

Control Function Parameter: Suppression pool water temperature Decision Function: Can the combination of RPV pressure and suppression pool water temperature be maintained below curve SC-T-1 [ Heat Capacity Temperature Limit]? (Continued)

Display Features: (Continued)

2. Tabular display of:
a. The existing suppression pool water temperature margin to the Heat Capacity Temperature Limit

! for the current value of RPV pressure, and

b. The existing RPV pressure margin to the Heat Capacity Temperature Limit for the current value of suppression pool water temperature.

Color-coded to indicate status relative to the Limit; positive values indicate below the Limit, negative values indicate above the Limit.

l MARGIN TO HCTL l l-_______________________l l SP TEMP l + 85 0 F l l__--_____________--_____l l RPV PRES l + 800 PSIG l Revision 1 5-15

OEI Document 8407-1, Display Design Considerations DISPLAY FEATURE DEVELOPMENT - EXAMPLE 3 (Continued)

Control Function Parameter: Suppression pool water temperature Decision Function: Can the combination of RPV pressure and suppression pool water temperature be maintained below curve SC-T-1 [ Heat Capacity Temperature Limit]? (Continued)

Display Features: (Continued)

3. Tabular presentation of the existing suppression pool water temperature margin to the Heat Capacity

. Temperature Limit (for the current value of RPV pressure), and of the existing RPV pressure margin to the Heat Capacity Temperature Limit (for the current value of suppression chamber water temperature).

Color-coded to indicate status relative to the Limit; positive values indicate below the Limit, negative values indicate above the Limit.

CURRENT LIMIT MARGIN PARAMETER VALUE LIMIT VALUE TO LIMIT O

SP TEMP 90 F HCTL 175 F + 85 F RPV PRES 750 PSIG HCTL NONE INF 5

Revision 1 5-16

OEI Document 84C7-1, SPDS Computer Systems 6.0 SPDS COMPUTER SYSTEMS SPDS displays will be presented on control room CRTs via the Control Room Integrated Display System (CRIDS), a part of the Plant Computer Systems (PCS). CRIDS utilizes dual redundant Honeywell TDC 45000 computers with Honeywell 7100 remote I/O.

The upgrade from the Honeywell 4500 system to the Honeywell 45000 system provides the capacity for a 1-second parameter update time, and adds sufficient memory to easily accommodate future (new) SPDS parameters, computer points for data acquisition, and displays as their need may arise. In addition to the Honeywell systems, data links from the ERFDAS, NSSS, and RMS computer systems are used for input into the SPDS. (For a detailed description of the PCS and CRIDS, refer to HCGS FSAR Section 7.5.1.3.3.)

The plant computer systems are not Class lE. However, the sys-tems do present information to the operator during all plant conditions using data acquired from both Class lE and non-Class lE circuits. Where the computer I/O is connected to Class lE cir-cuits, isolation devices are provided. Refer to the response to HCGS FSAR question 421.13 for a complete discussion of these isolation devices.

Revision 1 6-1

OEI Document 8407-1, Validation of SPDS Parameter Values 7.0 VALIDATION OF SPDS PARAMETER VALUES 7.1 General Description Validation of SPDS parameters is accomplished through range checking of indicated values, and then averaging the in-range (i.e., " good") values to obtain the displayed value. Where data availability for a parameter may be limited to one sensor, or where only trip unit or Limit switch data may be available (as may be the case for some Reactor Building parameters), instrument circuit checking is employed to insure that data from a " failed instrument" is not displayed.

Through this approach to information processing, invalid data is suppressed before display. When normally included instrument data is not included in the computation of a displayed value for an SPDS parameter, this information is presented through color coding of the displayed value.

l Revision 1 7-1

OEI Document 8407-1, Validation of SPDS Parameter Values 7.2 Detailed Description This section describes the specific processing employed in validating the displayed value of each SPDS parameter.

RPV Water Level:

The value of RPV water level presented on the SPDS displays is determined by the processing of information listed below.

1. RPV water level as indicated by each wide range RPV water level instrument channel:

Channel Instrument ID CRIDS ID A LT-N091A A2595 B LT-N091B A2803 A LT-N402A A3543 B LT-N402E A3544 A LT-N402B A3549 B LT-N402F A3550

2. RPV water level as indicated by each narrow range RPV water level instrument channel:

Channel Instrument ID CRIDS ID A PDT-N004A A2574 B PDT-N004B A2575 Revision 1 7-2

OEI Document 8407-1, Validation of SPDS Parameter Values

3. RPV water level as indicated by each shutdown range RPV water level instrument channel:

Channel Instrument ID CRIDS ID A LT-3622A A2593 B LT-3622B A2596

4. RPV water level as indicated by each fuel zone RPV water level instrument channel:

Channel Instrument ID CRIDS ID A LT-N085A A2807 B LT-NO85B A2804

5. Reactor recirculation pump status (stop/run):

Pump NSSS ID AP201 C051 BP201 C052 The validated value of RPV water level is obtained by performing data processing as follows:

1. Determining which indicated values of RPV water level are within the instrument indicating range (i.e.,

confirming that the value indicated by the instrument channel is not up-scale high or down-scale low).

Revision 1 7-3

OEI Document 8407-1, Validation of SPDS Parameter Values i

2. Averaging all on-scale RPV water level values, but in-l cluding the fuel zone RPV water level instrument values in the computation of the average o,nly g if both reactor recirculation pumps are off.

Y e

a i

i i

Revision 1 7-4

OEI Document 8407-1, Validation of SPDS Parameter Values RPV Pressure The value of RPV pressure presented on the SPDS displays is determined by the processing of information listed below.

1. RPV pressure as indicated by each wide range RPV pressure instrument channel:

Channel Instrument ID CRIDS ID A PT-3684A A2594 B PT-3684B A2802

2. RPV pressure as indicated by each narrow range RPV pressure instrument channel:

Channel Instrument ID CRIDS ID n/a PT-NOO8 A2578 A PT-N403A A3541 B PT-N403E A3542 A PT-N403B A3547 B PT-N403F A3548 Revision 1 7-5

OEI Document 8407-1, Validation of SPDS Parameter Values The validated value of RPV pressure is obtained by performing data processing as follows:

1. Determining which indicated values of RPV pressure are within the instrument indicating range (i.e., confirming that the value indicated by the instrument channel is not up-scale high or down-scale low).
2. Averaging all on-scale RPV pressure values.

Revision 1 7-6

OEI Document 8407-1, Validation of SPDS Parameter Values Reactor Power:

The value of reactor power presented on the SPDS displays is determined by the processing of information listed below.

1. Reactor power as determined by each neutron monitoring system APRM instrument channel:

Channel Instrument ID CRIDS ID A P608-AR31 A2175 B P608-AR32 A2177 C P608-AR41 A2179 D P608-AR22 A3480 E P608-AR51 A2183 F P608-AR12 A2185

2. APRM bypass switch positions (each channel):

Channel Instrument ID NSSS ID A P608-PS31-K16 C041 B P608-PS32-K16 C042 C P608-PS41-K16 C043 D P608-PS22-K16 C044 E P608-PS51-K16 C045 F P608-PS12-K16 C046 Revision 1 7-7

OEI Document 8407-1, Validation of SPDS Parameter Values

3. APRM INOP logic status (each channel):

Channel Instrument ID CRIDS ID A P608-AR31-K8 Not yet assigned B P608-AR32-K8 Not yet assigned C P608-AR41-K8 Not yet assigned D P608-AR22-K8 Not yet assigned E P608-AR51-K8 Not yet assigned F P608-AR12-K8 Not yet assigned The validated value of reactor power is obtained by performing data processing as follows:

1. Determining which APRM instrument channels have an indicated value within the instrument indicating range (i.e., confirming that the value indicated by the instrument channel is not up-scale high or down-scale low).
2. Determining which APRM instrument channels are not by-passed.
3. Determining which APRM instrument channels are operable (as defined by INOP logic status).
4. Averaging all on-scale APRM reactor power values of un-bypassed and operable instrument channels.

Revision 1 7-8

OEI Document 8407-1, Validation of SPDS Parameter Values Suppression Pool Temperature:

The value of suppression pool temperature presented on the SPDS displays is determined by the processing of information listed below.

Channel Instrument ID CRIDS ID A-1 TE-3647El A9825 A-2 TE-3647H1 A9826 A-3 TE-3647N1 A9827 A-4 TE-3647P1 A9828 A-5 TE-3647R1 A9829 A-6 TE-3648A1 A9830 A-7 TE-3648B1 A9831 A-8 TE-3648C1 A9832 B-1 TE-3647B1 A9835 B-2 TE-3647C1 A9836 B-3 TE-3647F1 A9837 B-4 TE-3647J1 A9838 B-5 TE-3647L1 A9839 B-6 TE-3647M1 A9840 B-7 TE-364701 A9841 B-8 TE-3648D1 A9842 l.

A-AVG N/A A9833 B-AVG N/A A9834 i

Revision 1 7-9

F OEI Document 8407-1, Validation of SPDS Parameter Values The validated value of suppression pool temperature is obtained by performing data processing as follows:

1. Determining which indicated values of suppression pool temperature are within the instrument indicating range (i.e., confirming that the value indicated by the instrument is not up-scale high or down-scale low).
2. Averaging on-scale A-AVG and B-AVG values.
3. If A-AVG and/or B-AVG is not on scale, averaging the associated on-scale individual (A-1 through A-8, and/or B1 through B-8) values for that channel.

Revision 1 7-10

OEI Document 8407-1, Validation of SPDS Parameter Values Suppression Pool Water Level:

The value of suppression pool water level presented on the SPDS displays is determined by the processing of suppression pool water level information listed below.

Channel Instrument ID CRIDS ID A LT-4805-1 A2368 C LT-4805 A2230 NOTE: No suppression pool water level channel B or D exists.

The validated value of suppression pool water level is obtained by performing data processing as follows:

1. Determining which indicated values of suppression pool water level are within the instrument indicating range (i.e., confirming that the value indicated by the instrument is not up-scale high or down-scale low).
2. Averaging all on-scale suppression pool water level values.

Revision 1 7-11

i OEI Document 8407-1, Validation of SPDS Parameter Values Drywell Pressure:

The value of drywell pressure presented on the SPDS displays is determined by the processing of information listed below.

1. Drywell pressure as determined by each wide range drywell pressure instrument channel:

Channel Instrument ID CRIDS ID A PT-4960A2 A2805 D PT-4960B2 A2806 l 2. Drywell pressure as determined by each narrow range drywell pressure instrument channel:

l Channel Instrument ID CRIDS ID A PT-4960A3 Not yet assigned l

The validated value of drywell pressure is obtained by performing data processing as follows:

l

1. Determining which indicated values of drywell pressure are within tre instrument indicating range (i.e., con-firming that the value ind!.cated by the instrument is not up-scale high or down-tcale low).
2. Averaging all on-scale drywell pressure values.

i Revision 1 7-12

OEI Document S407-1, Validation of SPDS Parameter Values l

Suppression Chamber Pressure: i The value of suppression chamber pressure presented on the SPDS displays is determined by the processing of information listed below.

1. Suppression chamber pressure as determined by each wide range suppression chamber pressure instrument channel:

Channel Instrument ID CRIDS ID A PT-4960Al A2813 B PT-4960B1 A2814

2. Suppression chamber pressure as determined by the narrow range suppression chamber pressure instrument:

Channel Instrument ID CRIDS ID D PT-4960B3 Not yet assigned The validated value of suppression chamber pressure is obtained by performing data processing as follows:

1. Determining which indicated values of suppression chamber pressure are within the instrument indicating range (i.e., confirming that the value indicated by the instrument is not up-scale high or down-scale low).
2. Averaging all on-scale suppression chamber pressure values.

Revision 1 7-13

OEI Document 8407-1, Validation of SPDS Parameter Values Drywell Temperature:

The value of drywell temperature presented on the SPDS displays is determined by the processing of drywell temperature informa-tion listed below.

Location (Channel) Instrument ID CRIDS ID Local TE-9469B A2264 Local TE-9469A A2265

~

Local TE-9469G A2266 Local TE-9469H A2267 Local TE-9469C A2268 Local TE-9469D A2269 Local TE-9469E A2270 Local TE-9469F A2271 Local TE-9469J A2272 Local TE-9469K A2273 i

Local TE-9469L A2274 Local TE-9469M A2275 Local TE-9469N A2276 Local TE-9469P A2277 Local TE-94690 A2278 Local TE c '.69R A2279 Local TE-9469S A2280 Local TE-9469T A2281 Local TE-94690 A2282 Revision 1 7-14

OEI Document 8407-1, Validation of SPDS Parameter Values Location (Channel) Instrument ID CRIDS ID Local TE-9469V A2283 Local TE-9469W A2284 Local TE-9469X A2285 Local TE-9469Y A2286 Local TE-9469Z A2287 A TT-4967A2 A2811 B TT-4967B2 A2812 The validated value of drywell temperature is obtained by per-forming data processing as follows:

1. Determining which indicated values of drywell temper-ature are within the instrument indicating range (i.e.,

confirming that the value indicated by the instrument is not up-scale high or down-scale low) .

2. Averaging all on-scale drywell temperature values.

Revision 1 7-15

OEI Document 8407-1, Validation of SPDS Parameter Values Suppression Chamber Temperature:

The value of suppression chamber temperature presented on the SPDS displays is determined by the processing of suppression chamber temperature information listed below.

Channel Instrument ID CRIDS ID A TT-4967Al A7082 B TT-4967B1 A7083 The validated value of suppression chamber temperature is obtained by performing data processing as follows:

1. Determining which indicated values of suppression cham-ber temperature are within the instrument indicating range (i.e., confirmir.g that the value indicated by the instrument is not up-scale high or down-scale low).
2. Averaging all on-scale suppression chamber temperature values.

Revision 1 7-16

OEI Document 8407-1, Validation of SPDS Parameter Values Reactor Building Water Level, Radiation Level, and Temperature:

G

.i The design of instrumentation required to support execution of procedure OF-EO.ZZ-103, " Reactor Building Control," and the individual listings of Reactor Building areas and their associated operating values in the tables of OP-EO.ZZ-103, is currently undergoing final engineering review. Details regarding validation of Reactor Building SPDS parameters is therefore not available; however, the method employed for validating these parameters will be consistent with that already described for the validation of other SPDS parameters.

3 1

Revision 1 7-17

OEI Document 8407-1, Validation of SPDS Parameter Values Radioactivity Release Rate:

The value of off-site radioactivity release rate presented on the SPDS displays is a computed value, determined by the processing of noble gas and iodine radioactivity release rate information as specified in HCGS FSAR Table 11.5-1 for North Plant, South Plant, and PRVS. This data is validated by the RMS computer system prior to being transmitted over the RMS data link to CRIDS.

1 r

i Revision 1 7-18 l

OEI Document 8407-1, Human Factors Engineering 8.0 APPLICATION OF BUNAN FACTORS ENGINEERING PRINCIPLES Consistent with the guidance provided in Section 4.1.e of NUREG-0737 Supplement 1, " accepted human factors principles" will be employed in the SPDS display development process. Relevant criteria will be derived from the Computer System Survey results of the HCGS CRDR conducted by PSEAG's human factor's consultant.

Additionally, the guidance provided in " Computer-Generated Dis-play System Guidelines, Volume 1: Display Design," (EPRI Report NP-3701, September 1984) will be consulted and followed where appropriate. In general, the following human factor's aspects of display design will be emphasized o Logical, functional arrangements and groupings of information o Intelligibility o Consistency in the manner of presenting information o Acceptable content density o Content integration o Readability o Effective, unambiguous, consistent, and readily identifiable color usage Revision 1 8-1

OEI Document 8407-1, 11uman Factors Engineering o Application of highlighting techniques o Understandability of presented information o Efficient utilization of display area o Use of hierarchical labeling to promote readability and unambiguous interpretation of presented information As previously identified in Section 6.0, SPDS displays are pre-sented on CRIDS CRTs. CRIDS is reviewed from a human factors perspective as part of the Hope Creek Control Room Design Review to identify discrepancies from NUREG-0700 criteria. Addition-ally, the SPDS portion of CRIDS is being designed with consider-ation being given to the human factors guidance contained in NUREG-0835 and Chapter 18.2 (draf t) of NUREG-0800.

Revision 1 8-2

OEI Document 8407-1, Performance Validation 9.0 SYSTEN PERFORMANCE VALIDATION Confirmation that the SPDS meets system performance requirements will be achieved through dynamic evaluations conducted on the HCGS simulator prior to SPDS implementation at the plant. An integrated program will be developed detailing validation criteria and objectives, evaluation methods, qualification requirements of review team members, data collection, assessment of evaluation findings, and the mechanism for incorporating recommended modifi-cations to the displays as appropriate and necessary. In developing the Performance Validation Program, guidance contained in the fc11owing documents will be considered o Computer-Generated Display System Guidelines, Volume 2:

Developing an Evaluation Plan (EPRI NP-3701, September 1984) o NUREG-0700, " Guidelines for Control Room Design Reviews,"

September 1981 (Section 6.7.2) o NUREG-0835, " Human Factors Acceptance Criteria for the Safety Parameter Display System," Octob'er 1981 o NSAC-39, " Verification and Validation for Safety Parameter Display Systems," December 1981 Revision 1 9-1

r-051 Document 8407-1, Performance Validation l

l .

l In general, the Performance Validation Program will assess the display system and the included displays with respect tot o compatibility

o Understandability l

l o Usability Compatibility addresses the nature of physical presentations to i

l the user and expected user responses with respect to human input-output abilities and limitations. Understandability addresses integrated system design in the sense that the structure, format and content of the user-system dialog must achieve meaningful communication. Usability addresses the ability and effectiveness of the system to support the operator in assessing plant safety status and executing the EOPs over the full range of plant operating modes.

Methods to be employed for validation of system performance include paper evaluations, part-task simulator evaluations, and l full-scope simulator evaluations as illustrated in Figure 10-1.

The results of paper evaluations contribute effectively to an iterative design process. Information feedback from part-task simulator evaluations assists in finalizing the system design prior to performing the formal full-scope simulator evaluation.

l Revision 1 9-2 l

OSI Document 8407-1, Performance Validation


> SYSTEM DESIGN I

I I I I I I I i +

l l

l PAPER EVALUATION I

I I I I I l<________________l l +

1 I

l PART TASK l SIMULATOR l EVALUATION l

I l

l l l 1 l<________________l l t i

l l FULL-SCOPE l SIMULATOR I EVALUATION I

I l l I I I I I +

FIGURE 9-1: EVALUATION MODEL FOR PERFORMANCE VALIDATION Revision 1 9-3

y 1

i OBI Document 8407-1, Performance Validation Transients used in simulator evaluations will be the same as those used for EOP verification and validation. These scenarios include multiple failures (concurrent and sequential) and, in combination, dynamically exercise the EOPs and the SPDS displays to the maximum extent possible within the capabilities of the simulator.

Review team members for the full-scope simulator evaluation will be independent of the design group. Trained operators will participate in all phases of the Performance Validation Program. Assessment of validation results, and the recommenda-tion and implementation of corrective actions to resolve discrepancies will involve members from both the design and evaluation groups.

Performance Validation Program documentation will include:

1. A Program plan
2. Completed checklists and other collected data
3. Assessments of the results of the evaluations
4. Recommendations for corrections of deficiencies Revision 1 9-4

l l

l OEI Document 8407-1, Operator Training 10.0 OPERATOR TRAINIJ!fe Control room operators will be formally trained on the simulator regarding the use of the SPDS displays, their information con-tent, the means of accessing displays, and the anticipated use of displays during both normal and off-normal plant conditions prior to implementation of the SPDS at the plant. Formal operator training on these topics will be conducted after the SPDS valida-tion program (Section 9.0) has been completed.

Revision 1 10-1

-e . - .

OEI Document 8407-1, Schedule 11.0 SCHEDULE SPDS design and implementation will proceed in accordance with the following approximate schedule:

March / April 1985: Display design ,

April /May 1985: Software programming May/ June 1985: System performance validation June 1985: Formal operator training June 1985: System design finalized Revision 1 11-1

OEI Document 8407-1, Appendix A APPENDIX A DEFINITIONS

OBI Document 8407-1, Appendix A DEF INITIONS Although many of the terms listed below are often used in a broader sense, the following definitions have been adopted for use in describing the Hope Creek Generating Station SPDS Display Design program.

ACTION FUNCTION:

An operator function involving the performance of a con-scious movement, operation of controls, or execution of a series of procedural steps.

Example: " Inject boron into the RPV with SLC."

DECISION ANALYSIS:

A specialized form of task analysis in which operator decisions are identified and systematically examined to identify associated information requirements.

DECISION FUNCTION:

An operator function involving a determination, evaluation, or judgement through which a procedural branch path or action is selected.

Example: "If suppression pool temperature cannot be maintained below the Heat Capacity Temper-ature Limit, ...

-Revision 1 A-1

l l

I l

l OEI Document 8407-1, Appendix A FUNCTION:

l A higher order activity by which the plant operating crew .

)

meets the objectives of the operating procedures. Within I 1

the context of the SPDS Display Design description, functions include decisions and actions.

FUNCTIONAL ANALYSIS:

1 The process of identifying and analyzing the functions per-  !

l formed by the control room operating crew in executing the '

Emergency Operating Procedures.

INFORMATION REOUIREMENT:

Knowledge of plant status required as an input to making a decision or taking an action.

TA g:

A well defined subdivision of a function; a specific activity contributing toward the accomplishment of a function.  !

Examples: Starting a pump, opening a valve, etc.  !

i l

TASK ANALYSIS

)

The process of identifying and analyzing the tasks performed by the control room operating crew in executing the 1

Emergency Operating Procedures. l l

Revision 1 A-2

. . - . .