ML20116E708
| ML20116E708 | |
| Person / Time | |
|---|---|
| Site: | Comanche Peak  |
| Issue date: | 11/02/1992 |
| From: | William Cahill TEXAS UTILITIES ELECTRIC CO. (TU ELECTRIC) |
| To: | NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| References | |
| RTR-NUREG-0737, RTR-NUREG-737, TASK-1.D.2, TASK-TM GL-89-06, GL-89-6, TXX-92525, NUDOCS 9211090342 | |
| Download: ML20116E708 (18) | |
Text
.
i i --
Log # TXX 92525 L
4 File # 10035 E
E GL 89-06 919 (clo) 71/ELEC7Rlr Ref. # 10CFR50.54(f) wnu.m j. c.bm. Jr.
November 2, 1992 tiscope t'u r forsedent U. S. Nuclet,' Regulatory Commission Attn: Document Control Desk Washington, D. C.
20555
SUBJECT:
COMANCHE PEAK STEAH ELECTRIC STATION (CPSFS) UNIT 2 DOCKET NO. 50-446 RESPONSE TO GENERIC LETTER 89-06: TAS% ACFION PLAN ITEM 1.D.2 - SAFETY PARAMETER DISPLAY SYSTEH (SPOS)
Gentlemen:
Enclosed is the CPSES Unit 2 response to Generic Letter 89-06.
The response includes the Generic Letter checklist.
In addition, riotes have been provided, where necessary, to clarify several o' the checklist responses.
Print outs of the SPDS display screens are available upon request.
The CPSES SPDS design is in compliance with TV Electric's understanding of the requirements of NUREG-0737, Supplement 1.
The Unit I response to the Generic letter was transmitted via letter from William J. Cahill, Jr. to NRC logged TXX 89445 and dated July 11, 1989.
Sincerely, f
William J. Cahill, Jr.
JDR/
Attachments c-Mr. J. L. Hilhoan, Region IV Resident Inspectors, CPSES (2)
Mr. B E. Holian, NRR
{
090072
-4 "l
9211090342 921102 l
PDR ADOCK 05000446 4co n, ony, street t15. si pati.,Texa,752n1 A.
. to TXX-92525
)
Page 1 of 1 UNITED STATES OF AMERICA NUCLEAR REGULATORY COMMISSION l
In the Hatter of
)
)
1 Texas Utilities Electric Company
)
Docket No. 50-446 (Comanche Peak Steam Electric
)
Station Unit 2)
)
AEflDAVIT William J. Cahill, Jr. being duly sworn, hereby deposes and says that he is Group Vice President, Nuclear of TV Electric, th6 lead Applicant herein; that he is duly authorized to sign and file with the Nuclear Regulatory Cormission this response to Generic Letter 89-06 for Comanche Peak Steam Electric Stetion Unit 2; that he is familiar with the content thereof; and that the matters set forth therein are true and correct to the best of his knowledge, information and belief.
fiil i am J. Ca t)(Ji, J r.
~
Group Vice PrMident, Nuclear SLATE OF TEXAS
)
)
COUNTY OF Dallas
)
Subscribed and sworn to before me, on this 2nd day of November
, 1992.
N 01 l
[
Hotary ublic
\\
t c
Response To Generic Letter 89-06 Task Action Plan Itet Safety Parameter Displa.s n em to TXX-92525 W
b i
4 i**
SPDS CHECKLIST This checklist is intended to aid licensees in jetermining the statue, of their SFDS.
Bracketed, [ ], information refers to the section in NUREG-1342 where discussions on the specific questio:i(s) m*.,
found.
1.0 GENERAL DESCRIP'.*0N 1.1 Plant Name:
Comanche Peak Steam Electric Station (CPSES) Unit 2 (tfote 1) 1.2 Who/What organization developed the original version of the SPDS software implemented at your site?
Utility (in-house) uti M iy Owner's Group; which? Westinchouse AD lloc Subconnittee on x
Instrumentation System Contractor; which?
Other; who?
..... -. -. - ~.
'n
. 1.3
.lf the SPOS software has '>ndergone significant modification.(i.e., more-than 25 percent of software replaced or modified) since original implementation, list the organization performing the modificatior.:
- Utility (in-house) i Utility Owner's Group _
)
I x Contractor SAIC (Note 2)
Other 1.4 What is the hardware host on which the current SPDS software.is implemented?
Westingbouse P250 Westinghouse P2500
_ Gould/SEL, Model Number _
x Digital (DEC) Model Number
-VAX 4000'-
_ IBM, Nodel Nunber _
MODCOMP, Modell Number _,
_ Babcock & Wilcox- (Recall)
-Honeywell, Model. Number Burroughs, 'Model - Nurber
~ '"
Other: Manufacturer, Model
,U
.e
.r.
.,r.
. e y..
+y y
~
i 1.5 How nany total CPUs are accessible by SPDS sof tware on the computer system described in the previous question?
Two (2) 1.6 Phat is the approximate MIPS rating of all the CPUs counted above?
8 MIPS NOTE: Use a decimal fraction if less than 1.0 If SPDS does not run on a single computer system, provide the following information for the minority parameter set provietd by a second computer sy stem.
For example, a frequent occurrence of this case is where a separate but adjacent computer terminal provides radiological parameters.
1.7 Manufacturer N/A 1.8 Model Number N/A 1.9 List parameters provided:
N/A (on the second system) 1.10 Are significant changes in hardrare or sof tware planned in the next two years?
YES x NO.
If YES, briefly describe planned changes and list a schedule of major milestones.
l l
l l
I
.. - - =.. - -
d' 2.0; PARAMETER SELECTION This section is divided into two parts: the safety functions, and the parameters-used to depict eacn safety function.
2.1 Plant-Specific Safety Functions [111.F.]
List the title of the plant-specific safety function (s) displayed on your SPDS that is (are) equivalent to the safety function in Supplement I to NUREG-0737.
s St.pplement 1 To NUREG-0737 Plant-Specific Safety-Fune.tions.
Safety Functions 1
2.1.1.
Reactivity Control
- sub :r t e i cality 2.1.2 Core Cooling and Heat core cooling Removal Heat Sink Inventcry e
2.1.3.
RCS Integrity Integrity 2.1.4.
Radioactivity Control.
Radioactivity Target.
- 2.1.5.
. Containment Coi61tions
,.. containment c
.a.
2.2 Parameters Selected to Display Each Safety function The purpose of this section is to specify S list of parameters used to depict each of the five safety functions identifed in Supplement 1 to NUREG-0737.
Lists of parareters that have been found acceptable to NRC through prev 1ous SPDS post-implementation reviews have been provided. One list of parameters applies to pressurized water reactors in general, and the other list applies to boiling water reactors.
fiOTE:
Check any parameters that have been selected as an SPDS parameter.
List any additional parameters under the relevant "Others" category.
Include additional safety functions and parameters that are a part of your SPDS.
PRESSURIZED WATER REACTOR SPOS PARAMETER SELECTION CHECKLIST [III.F.1]
Supplement 1 To NUREG-0737 i
Safety Functions Parameters 2.2.1 Reactivity Control Neutron Flux 2 Source Range 2 Intermediate Range X Power Range Source Range Startup Rate Other:
(List) Wide Ranee Mentron Flux 1
Internediat- 'any_c Startup Rate Wide Pa Narrow Range 2.2.2 Reactor Core Cooling and 2 RCS Level coj."
tl un soune nt r
g l
Heat Removal from the X Subcooling Margin l
l Primary System
_ Hot Leg Temperature Cold Leg Temperature Core Exit Therrocouples 2 Steam Generator Level 2 Steam Generator Pressure RHR Flow 2 Other:
(List)
Auxiliarv Feedwater Flow Au'.tioneered High Core Exit Taernocouple
u.
2.2.3 RCS Integrity
'X RCS Pressure.
x Cold Leg Temperature Containment' Sump. Level:
_ Steam Generator (Pressure, Level, Radiation)
X Other:- (List) liot Leg Temperature Pressurizer Pressure-RVLIS-Pressurizer Level I
2.2.4 Radioactivity Control X Stack Monitor X
Steamline Radiation X
Containmer.t Radiation x
Other:
(List) Condenser Off Cas Radiation -
- 2.2.5 Containment Conditions x
Containment Pressure Containment Isolation
_ Containment-Hydrngen Concentration x
Other:
(List) containmen water tevel 2.2.6 Other Safety Functions Yes-x No If yes.. list' functions and parameters.
e8,6 -
L 4
WO 4
d f
e,
I BOILINGWATERREACTORSPDSPARAMETERSELECTIONCHECKLIST[III.F.2]
n/A Supplement i To NUREG-0737 Safety Functions Parameters 2.2.6 Reactivity Control
(List) 2.2.7 Reactor Core Cooling and
___ RPV Water Level Removal
__,Drywell Temperature
___ Other:
(List) 2.2.8 Pressure Vessel Integrity RPV Pressure Other:
(List) 2.2.9 Radioactivity Control
___ Main Stack or Offgas (Pretreatment)
Monitor Containment Radiation Monitor
___ Other:
(List) 2.2.10 Containment Integrity
___ Drywell Pressure Drywell Temperature
___ Suppression Pool Temperature
___ Suppression Pool Level
___ Containment Isolation Valve Status
'Drywell Hydrogen Concentration
___ Drywell C3ygen Concentration
___ Other:
(List)
9-2.2.11 Other Safety Functions
___ Yes ___ No If yes, list functions and parameters.
2.3 Detailed Parameter Questions [III.F.1.e and III.F.2.e) 2.3.1 Are containment isolation det.and signals input to SPDS (e.g., PWR -
Phase A/B Isolation Demand Signal or BWR - Group Isolation Demand Signals)?
X YES ___ NO 2.3.2 Does the SPDS use actual containment isolation valve position as an input to monitor successful isolation?
x YES N0 3.0 DISPLAY OF SAFETY FUNCTIONS [III.F.]
l 3.1 Does the SPDS provide the status of all five safety functions on l
one display page?
x YES ___ N0 3.2 Are the ir.dividual parameters that support the safety functions grouped by safety function?.
X YES ___ N0 3.3 Is the status of all five safety functions always displayed l
ontheSPDS?[III.B.2] _jc YES N0 4.0 RELIABLEDISPLAY[III.A.3exceptasnoted]
4.1 Is the SPDS hosted on the same comput(r system es the plant process computer?
_1_ YES NO If NO, does the SPDS computer receive some'of the computer point inputs from the-process computer? ___ YES ___ NO
_ __ _...... ~. _.. _.. -
- _ _. _ _. _ ~
_. ~. _..
4.2 List location ot accessible (e.g., keyboards) devices capable of cnanging SPDS data.
[Ill.A.3.a]
(Note 3):
Design Engineering Or9antration-(Note 4): Unit 2 Control Roon Area 1
4.3 Ara SPOS hardware availability data documented?-
YES X NO IF YES, what-is the documented percent availability of the SPDS hardware over the past 12 months? NOTE: Availability should be based on power.
operation, startup, het standby, and hot shutdown only and not include other plant modes.
Note 5
% Available 4.4 Are the SPDS computer points included in routine instrument loop surveillances? LIII.A.3.a] x YES NO.
4.5 What percentage of sof tware verification and validation has been coinpleted?
100%
x Approximately half Planned in the future Other, describe-4.6 Have changes to the SPDS host computer and software been maintained under a formal Sof tware/ Hardware Change Request (or equivalent)- system? Check' p
all that apply below:
I l
x Yes; For how long?.
1 years 1:
No Have plans to-in the future s
[..
-'e r
..._,.c.
r i
4.7 How frequently does the SPDS display invalid or erroneous information?
[III.A.3.a]
- (See item 4.3) frequent (above 5 percent)
___ infrequent (1-5 percent) rare (less than 1 percent of the time) 4.8 How frequently have any of the critical safety functions ten in a false alarm condition? [III.A.3.a]
(See item 4.3)
__,, frequent (above 5 percent) infrequent (1-5 percent)
___ rare (less than 1 percent of the time) 4.9 Does the SPDS display valid parameter information during adverse co.itainment conditions?
x YES NO (Note 6)
. 5.0 HUMAN FACTORS [III.E except as noted]
Human-factors in the context of SPDS design includes the usefulness of the.
technical-information displayed on the screen'to users and their performance-during emergency operations. -Human factors-also includes display design-techniques, ~such as labeling, display layout, and control / display integration.
J' this section provides'a sample of the kinds of-questions to be asked to helpi determine the degree to which-the SPDS. design incorporates accepted human tactors principles.
5.1 --Who is'the prir.e user of the SPDS?
___ Shift Supervisor
-[III.B.1]
_x, Shift Ter.hnical Advisor
' ' _ Board Operators-
_x_ Other-(specify) Unit supervisor-d 7T-'f'w w
w we r-we t
e 4
5.? Are all SPDS controls located at the SPDS workstation?
x YES _ NO
[1!I.B.1]
If NO, where are the controls located?
5.3 is all SPDS-related information physically displayed such thet the information can clearly be read from the SPDS user's typical position? [III.A.1 and III.B.1]
x YES NO If N0, what specific information is available at other locations?
5.4 How are SPDS displays accessed? [Ill.A.2]
(Note 7)
Continuous display, no interaction possible.
x Keyboard, one or two keystroke function key.
x Keyboard, groater than 2 keystrokes, x
Touchscreen.
Cursor / menu (mouse, joystick, up/down key).
5.5 Does the SPDS consistently respond to user comands in less than 10 seconds? [III.A.2]
x YES _ NO If NO, is feedback provided to the user regarding delays in response?
YES N0 5.6 Does the SPDS sampling rate for parameters match the display update rate for those parameters? [III.A.2]
x YES NO
If N0, what specific parameters do not match?
5.7 Are all parameter units of measure displayed on the SPDS consistent with the units measure included in the emergency operating procedures?
X YES
O 5.8 Are all paramete labals and abbreviations consistent with the labels and abbreviations included in the emergency operating procedures?
X YES NO 5.9 Is any of the displayed information in a form that re'csires transformation or calculation?'
YES 1 NO l
IF YES, what types of transformations or calculations are necessary?
5.10 Are the high-and low-level setpoints consistent with hard-wired j
parameter instrumentation and reactor protection system setpoints?
x YES _ iiO 5.11 Does SPDS display high-and low-level setpoints?
x YES _ No 5.12 Are the SPDS calculated values such as subcooling margin, consistent with calculated values on the plant process computer?
i x YES NO (Note 8) l l
5.13 Are all parameter units of measure displayed on SPDS consistent with the hard wired instrumentation?
_x_ YES NO 5.14 Are all parameter labels and abbreviations consistent with hard-wired instrument labels and abbreviations?
YES NO 5.15 Were the technical basis for software specifications verified with plant-specific data (for example, heat-up and cool-down_ limits, variable steam ges;racor setpoints and high ard low level alarm setpoints)?
YES NO 5.16 List LERs written as a result of SPDS software problems.
N/A - CPSES Unit 2 does not have an operating license (Note 9) 6.0 TRAINING [III.C.2611 questions]
6.1 Does simulator training include training in the use of the SPDS?
x YES N0 6.2 How long is formal classroom training for SPDS users?
___ No formal classroom training Less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />
_J.
2-4 hours
___ More than 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> x
YES NO 6.3 Is there periodic requalification training for SPDS?
If YES, how often?
Note 10
e a
6.4 When are SPDS users given training regarding the relationship of the parameters to the plant safety functions? Check all that apply below:
Not trained On the job or required reading x
During requa'ification training x
During an initial SPDS training program 7.0 ELECTRICAL ISOLATION [Ill.C.1 all questions]
7.1 What isolation devices are currently used?
a) Gamnametrics - Action Pak MI;L 4300-107 & Isolator P/N 200626-1 S/N 238 b) Core Cooling Monitor - Optical Isolation c) Heater Junction Therrocouple Svstam - Optical Fiber Cable d) Westinghouse 7300 - WCAP 8829A e) Computer Products, Inc. - Optical Isolation 7.2 Are these devices the same ones that were -originally -installed and approved by NRC? ___ YES ;K, NO (Note 11) k 4
l
- .a
ls s
NOTES 1.
Currently the Unit 2 ERFCS/SPDS computer is not the same as the Unit 1 ERFCS/SPDS computer.
The design for displays and safety parameters are virtually identical but the harowaro is dissimilar in respect to CPUs, hardware, peripherals and display units.
Also the Unit 2 ERFCS/SPDS is integrated with the Unit 2 Plant Computer to provide a more consistent man-machine interface for the control room vperators.
2.
SAIC has provided the necessary interface to software contractors (Computer Engineering Services) to convert the Unit 1 ERFC"'DPDS sof tware to compatible sof tware for the Unit 2 Plar.t Ccunputer Syste n.
SAIC is the systems integrator and software vendor for similar systems at approximately 18 otter nuclear power sites.
3.
All SPDS/ERFCS database points are controlled by the system / database
~
administrator.
Changes to the parameters which control the interpretation, processing and alarming of database points must be aporoved and worked by the systems ac.ministrator representative via strong design control procedures.
4.
All SPDS input points are blocked to modification by operations personnel.
All changes to data can be controlled via design change control.
Points in error and invalidated by the computer system are reported as such and can be easily removed from scan, if necessary, to assure more accurate parameters.
To furtt.cr maintain adequate control, the system provides a feature by which a list can be generated to track those points which have been removed frotn scan.
5.
Currently, the availability of the SPDS is indeterminate, due to the operational status of CPSES (i.e.,
NTOL).
During low power startup operations, CPSES will perform a 30-day availability test to quantify SPDS availability.
6.
Currently, the SPDS is undergoing preoperational testing. Preops_;ticual testing will validate the SPDS inputs from sensor to display.
7.
Two designated SPDS terminals can be accessed via ad,4acent one-operator-action keypade which contain only the 21 SPDS graphics keys.
All other control room, EOF and TSC display workstations provide high resolution touch screen monitors and keyboards by which one can request SPDS displays.
8.
The SPDS is a totally integrated application on the Plant Computer System and, as such, uses the same calculated values.
9 The Unit 2 SPDS software has not been in use in an operating unit; however, the Unit 1 SPDS design has not been questioned and the Jnit 2 SPDS design has been based upon the Unit 1 application.
10.
Requalification training on SPDS is performed when material changes to the system (hardware or software) are made or when deficiencies in operator usage of SPDS are observed.
isolation devices for Itens (a) and (e)Gmretrics neutron flux inctnrentation 11.
Ti e have not been reviemd by the tRC (rar flREG1342). During the 1988 SPEC upgrade.
smnais were added to the database on~ Unit 1 and the desien has been duplicated on Unit T Dtring the Unit 2 Plant Jter Systen installation the dultiplexor and data acQuisitico ega; rent were chanctd.
Comuter Products, Inc. Test data is available for review on s te.. Items b),(c)and d) have been reviemd and approved by the fRC as acceptable isolaticodev(ices.
l
-