ML20136G085
| ML20136G085 | |
| Person / Time | |
|---|---|
| Issue date: | 03/14/1997 |
| From: | Matthews D NRC (Affiliation Not Assigned) |
| To: | Donovan K BWR OWNERS GROUP |
| References | |
| PROJECT-691 NUDOCS 9703170194 | |
| Download: ML20136G085 (5) | |
Text
.. . - - - - - . .
---..------------m 3
March 14, 1997 l
-Mr. Kevin P. Donovan, Chairman l Boiling Water Reactor Owners' Group l Centerior Energy Perry Power Plant MC A210 P. 0.. Box 97 Perry, OH 44081
SUBJECT:
' FOLLOW-UP AUDIT OF THE ABB-CE DYNAMIC CONTROL HAMILTON STANDARD OPTION III OSCILLATION POWER RANGE MONITOR SOFTWARE
Dear Mr. Donovan:
On September 16, 17, and 18, 1996, the staff conducted an audit of the Dynamic Controls Hamilton Standard oscillation power range monitor (0PRM) software, which was developed by ABB-CE for the Boiling Water Reactors Owners' Group.
The staff's audit report was subsequently transmitted to you by letter dated October 30, 1996. The report identified two deficiencies as open items that
- must be corrected before the oscillation power range mor tor can be connected to the reactor trip system.
On December 9 - 12, 1996, the NRC staff conducted a followup audit of the ABB-CE OPRM software, reviewing two ORPM requirements: the period-based algorithm (PBA), and the watchdog timer. Additionally, the staff audited the requirements traceability matrix (RTM), which was managed by the ABB-CE Independent Verification and Validation team. The staff's report of the follow-up audit is provided as Enclosure 1.
The staff concludes that the deficiencies from the previous audit have been acceptably addressed, that the OPRM software has been acceptably implemented, and.that the RTM is acceptable. With the exception of one minor deficiency, the staff also concludes that the watchdog timer requirement has been implemented in accordance with the developer's Software Development Plan and that the watchdog timer implementation is acceptable.
If you have any questions concerning this matter, please contact the project manager, Jim Wilson, at (301) 415-1108.
Sincerely,
- Original Signed B 1 David B. Matthews,y:hief C 1 Generic Issues and Environmental Projects Branch Office of Nuclear Reactor Regulation Project No. 691 cc: see attached list l DISTRIBUTION: l Central File PGEB r/f OGC BBoger JMauck MSlosson ;
PUBLIC ACRS TMartin JWermiel MChiramal MWaterman '
Document Name: BWROG-RE.ADT *see previous corycurronce OFC PGEB M SC:PGEB C:HICB C:'P,Gl df i Th ,
j NAME JWilson:b RArchitzel* JWermiel* DMaNbwk N '
I DATE 3/M/97 3/07/97 3/06/97 3/lk/97 4
0FFICIAL RECORD COPY .
970317019 4 970314 gh, m e
%iEpgc6 mrw1 raos . . - . . - - . . .
l
[pa ncy %
g o
,j UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINoTON, D.C. 20565-0001
- March 14, 1997 i
l Mr. Kevin P. Donovan, Chairman Boiling Water Reactor Owners' Group Centerior Energy Perry Power Plant ,
MC A210 P. O. Box 97 Perry, OH 44081 1
SUBJECT:
FOLLOW-UP AUDIT OF THE ABB-CE DYWilC CONTROL HAMILTON STAN OPTION III OSCILLATION POWER RANGE MONITOR SOFTWARE
Dear Mr. Donovan:
4 On September 16, 17, and 18, 1996, the staff conducted an audit of the Dynamic Controls Hamilton Standard oscillation power range monitor (OPRM) software, which was developed by ABB-CE for the Boiling Water Reactors Owners' Group.
The staff's audit report was subsequently transmitted to you by letter dated October 30, 1996. The report identified two deficiencies as open items that must be corrected before the oscillation power range monitor can be connected to the reactor trip system.
On December 9 - 12, 1996, the NRC staff conducted a followup audit of the ABB-CE OPRM software, reviewing two ORPM requirements: the period-based algorithm (PBA), and the watchdog timer. Additionally, the staff audited the requirements traceability matrix (RTM), which was managed by the ABB-CE 4
Independent Verification and Validation team. The staff's report of the follow-up audit is provided as Enclosure 1.
The staff concludes that the deficiencies from the previous audit have been acceptably addressed, that the OPRM software has been acceptably implemented, and that the RTM is acceptable. With the exception of one minor deficiency, the staff also concludes that the watchdog timer requirement has been
{'
implemented in accordance with the developer's Software Development Plan and that the watchdog timer implementation is acceptable.
i If you have any questions concerning this matter, please contact the project manager, Jim Wilson, at (301) 415-1108.
P
'G k DavidB.Matthegs, Chief Generic Issues and Environmental Projects Branch Office of Nuclear Reactor Regulation Project No. 691 cc: see attached list
f" i
FOLLOW-UP SOFTWARE AUDIT OF THE DYNAMIC CONTROLS HAMILTON STANDARD /ABB-CE OSCILLATION POWER RANGE MONITOR
{ l.0 INTRODUCTION i
On December 9 - 12, 1996, the NRC staff conducted a followup audit of the ABB-a CE oscillation power range monitor (OPRM) software, reviewing two OPRM 4
requirements: the period-based algorithm (PBA), and the watchdog timer.
l
' Additionally, the staff audited the requirements traceability matrix (RTM),
which was managed by the ABB-CE Independent Verification and Validation (IV&V) team.
2.0 EVALUATION 2.1 Period-Based Alaorithm In its software audit in September 1996, the staff reviewed the implementation !
of the PBA. The major discrepancy in that audit concerned the adequacy of the l input variable requirement documentation, which led the staff to conclude that i verification activities had not been adequately performed. l In this follow-up audit, the staff revisited the PBA requirement to ensure corrective actions had been performed to address the staff's comments from the September 1996 audit. The staff found that the documentation had been corrected to reflect the actual input variable requirements. The staff concludes that the documentation now provides an acceptable level of detail such that future independent software modifications may be performed using the existing documentation. The staff also concludes that verification of the PBA requirement is now acceptable.
2.2 Watchdoo Timer The staff also audited the watchdog timer requirement. Watchdog timing is used in the OPRM to ensure that the OPRM software does not miss important calculational sequences and does not stall during a calculation cycle.
The staff noted that specific watchdog timer cycle times are hard-coded into the software. These required cycle times are determined through software i
testing, and are then entered into the source code, which is then recompiled, j The staff noted that references to these hard-coded values were not included j in the source code listing or V&V life cycle documentation. Future j compilations of these computer software units (CSUs) should include a reference to the data worksheets describing the source of the hard-coded values.
With the exception of the minor deficiency noted above, the staff found that !
the watchdog timer requirement had been implemented in accordance with the developer's Software Development Plan. The staff concludes that the watchdog timer implementation is acceptable.
I
4 i
2.3 Reauirements Traceability Matrix In the September 1996 audit, the staff noted that the scope of the RTM did not include the implementation phase of the software life cycle. The staff stated that this discrepancy should be corrected. In the December follow-up audit, the staff verified the addition of the implementation phase to the RTM.
The staff also correlated the RTM item references to the software detailed design description (SDD), computer software components (CSCs), and computer software units (CSus). The staff assumed that CSUs and CSCs in the SDD represent requirements that should be addressed in the RTM. The staff found several CSUs and CSCs that were not directly referenced in the RTM. These apparent discrepancies were later clarified through discussions with the ABB-CE IV&V manager.
With assistance from the IV&V manager, the staff also audited the RTH to determine whether requirement references were adequately specified. The staff found several instances of references that did not include section numbers, table numbers, or other clarifying reference identification. However, the listed references did provide an acceptable trail to additional information.
3.0 CONCLUSION
S The staff audited the RTM, and the software development part of the PBA and the watchdog timer.
The staff concludes that the OPRM software has been acceptably implemented, although some additional documentation regarding the l source of hard coded watchdog timer values would be helpful for future OPRM software revisions. The staff also concludes that the RTM is acceptable.
t Project No. 691 Boiling Water Reactor Owners Group cc: C. D. Terry Vice President, Nuclear Engineering Niagara Mohawk Power Corporation Nine Mile Point-2 PO Box 63 Lycoming, NY 13093 ,
D. B. Fetters '
PECO Energy Nuclear Group Headquarters MC 62C-3 965 Chesterbrook Blvd. )
Wayne, PA 19087 I
! L. A. England Entergy Operations Inc. !
i PO Box 31995 !
Jackson, MS 39286 '
K. K. Sedney GE Nuclear Energy
, 175 Curtner Ave, M/C 182 San Jose, CA 95125 T. J. Rausch Commonwealth Edison Company
' Nuclear Fuel Services 1400 Opus Place, 4th Floor ETWIII l Downers Grove, IL 60515