ML20148A263

From kanterella
Jump to navigation Jump to search
Transcript of Morning Session of 335th ACRS General Meeting on 880310 in Washington,Dc.Pp 1-128.Supporting Documentation Encl
ML20148A263
Person / Time
Issue date: 03/10/1988
From:
Advisory Committee on Reactor Safeguards
To:
References
ACRS-T-1650, NUDOCS 8803170286
Download: ML20148A263 (154)


Text

_ - _ _ _ _ _ _ _ _

}CRTT K5~o O

UNITED STATES NUCLEAR REGULATORY COMMISSION ADVISORY COMM:TTEE ON REACTOR SAFEGUARDS In the Matter of:

335th GENEPAL MEETING

!!ORNING SESSION O

l Pages:

1 through 128 Place:

Washington, D.C.

i el

~'

Date:

March 10, 1988__ _ ~

V q:' ' s c.

t I

g

_\\_

'..by x

e--

....................,...............~...

e...

.mjo u ~ ni l ud" u

{301b O ( o nli N sg t jig HERITAGE REPORTING CORPORATION OfkielReportm O

1220 L Street, N.W., Suke 600 WasNngton, D.C. 20065 (202) 628-4888 l

8903170286 980:-10 PDR ACRS T-1650 DCD

]

l' PU3LIC NOTICE BY THE

,a.

\\.,/

2 UNITED STATES NUCLEAR REGULATORY COMMISSION'S 3

ADVISORY COMMITTEE ON REACTOR SAFEGUARDS 4

5 6

7 The contents of this stenographic transcript of the 8

proceedings of the United States Nuclear Regulatory 9

Commission's Advisory Committee on Reactor Safeguards (ACRS),

10 as reported herein, is an uncorrected record of the discussions 11 recorded at the meeting held on the above date.

12 No member of the_ACRS Staff and no participant at 13 this meeting &ccepts any responsibility for errors or 14 inaccuracies of statement or data contained in this transcript.

()

15 16 17 18

.19 20 21 22 23 24 25

/~T Heritage Reporting Corporation

\\/

(202) 628-4888

~. -. - -. - -

.~.

i.

h i

1:

1

)

I i

i.

~

.g I

T 1

UNITED STATES NUCLEAR REGULATORY COMMISSION 2

ADVISORY COMMITTEE ON REACTOR SAFEGUARDS l

3 l

I L

4 In the Matter of:

)

i

)

l 5

)

)

335TH GENERAL MEETING l

6

)

7

Thursday, March 10, 1988 i

i 8

i Room 1046

^

9 1717 H Street, N.U.

j Washington, D. C '.

20555 l

j 10 The above-entitled matter came on for hearing, p

11 pursuant to notice, at 8:30 a.m.

[

12 l

BEFORE:

DR. WILLIAM KERR 13 Chairman llh Professor of Nuclear Engineering 14 Director, Office of Energy Research j

l University of Michigan 15 Ann Arbor, Michigan l

t 16 ACRS MEMBERS PRESENT:

j f

17 DR. FORREST J.

REMICK r

Vice-Chairman 38 Associate Vice-President for Research Professor of Nuclear Engineering 19 The Pennsylvania State University University Park, Pennsylvania 20 i

l MR. JESSE C.

EBERSOLE 21 Retired Head Nuclear Engineer Division of Engineering Design i

22 Tennessee Valley Authority l

f Knoxville, Tennessee 23 DR. CHESTER P.

SIESS i

24 Professor Emeritus of Civil Engineering i

University of Illinois i

25 Urbana, Illinois llI HERITAGE REPORTING CORPORATION -- (202)628-4888

f 2/3 1

DR. HAROLD W.

LEWIS 2

Prof 9ssor of Physics Department of Physics 3

University of California i

Santa Barbara, California 4

{

MR. CARLYLE MICHELSOli 5

Retired Principal Nuclear Engineer 4

Tennessee Valley Authority 6

Knoxville, Tennessee and Retired Director, Office for Analysis

j 7

and Evaluation of Operational Data U.S.

!!uclear Regulatory Commission 8

Washington, D.C.

l 9

DR. DADE W.

MOELLER l

Professor of Engineering in Environmental Health 10 Associate Dean for Continuing Education School of Public Health i

l 11 Harvard University j

Boston, Massachusetts l

12 i

l DR. PAUL G.

SHEWMON j

13 Professor, Metallurgical Engineering Department

! ()

Ohio State University l

14 Columbus, Ohio i

15 DR. CHESTER P.

SIESS i

E Professor Emeritus of Civil Engineering 16 Argonne flational Laboratory Argonne, Illinois 17 MR. DAVID A.

WARD f

18 Research Manager on Special Assignment i

E.I.

du Pont ce Nemours & Company 19 Savannah River Laboratory y

Aiken, South Carolina 20 i

MR. CHARLES J.

WYLIE l

21 Retired Chief Engineer Electrical Division i

i 22 Duke Power Company Charlotte, North Carolina

{

23 ACRS COG!!IZAllT STAFF MEMBER:

j 1

24

[

l Raymond Fralcy, Executive Director 25 I

I f ()

i I

a i

i i

l 4

+

1 HERITAGE REPORTI!!G CORPORATIOli -- (202)628-4888 i

4 i

1 PROCEEDIilGS

()

2 DR. REMICK:

The meeting will now come to order.

3 This is the first day of the 335th meeting of the Advisory 4

Committee on Reactor Safeguards.

5 During today's meeting the Committee will hear 6

discussion about the following--human factocJ research needs, 7

operating events and incidents, Rancho Seco Nuclear Power 8

Plant restart, DOE advanced reactor severe accident program, 9

future activities, and recent ACRS subcommittee activities.

10 Topics for consideration on Friday and Saturday are listed on 11 the schedule posted on the bulletin board outside the meeting 12 room.

13 The meeting ic being conducted in accordance with 14 the provisionprovisions of the Federal Advisory Committee Act, 15 the Government and the Sunshine act.

Ray F.

Fraley is the 16 designated federal official for the initial portion of the 17 meeting.

18 A transcript of portions of the meeting is being 19 kept.

It is requested that each speaker use one of the 20 microphones, identify himself or herself, and speak with 21 sufficient clarity and volume so that he or she can be readily 22 heard.

23 We received no written statements or requests to 24 make oral statements from members of the public regarding O

25 today's sessions.

HERITAGE REPORTIllG CORPORATION -- (202)628-4888

5 1

I will begin with some items of current interest.

J}

2 (Items of current-interest 1were discussed off the 3

record.)

4 DR. REMICK:

Those are the items of general interest 5

this morning.

We will move then to our first item on the 6

agenda this morning, and that is the human factors research 7

needs, and the person who is handling that is Dave Hard, the 8

person who suggested that we have this information briefing on i

9 the National Academy of Sciences study.

Dave?

[

I k

10 MR. WARD:

Let's see.

Everyone isn't quite here l

11 yet.

So here is Hal.

Now we can start.

Maybe, could we just i

i l

l 12 take a five-minute pause.until we get--

13 DR. REMICK:

Five-minute.

I 14 (There was a brief pause-in the proceedings.)

l 15 DR REMICK:

I would like to reconvene, and I turn l

16 the meeting over to Mr. Ward, on human factors research.

f 17 MR.' WARD:

I just want to remind the Committee of

{

18 where this has come from because we had a hand in it, getting

{

I 19 this effort started a couple of years ago.

j f

20 You may recall that several years ago, the NRC i

21 Research Office had a program in human factors which gradually 22 died out.

In Chet's research reports, we complained about it 23 every year for three or four consecutive years.

A couple of i

24 things eventually happened.

One was that the National O

25 Academy's panel drawn together to give the NRC some advice on k

i HERITAGE REPORTING CORPORATION -- (202)628-4888 j

6 1

the general topic of research, the so-called--headed by Bob

(}

2 Frosh, had as one of its recommendations that a' program in 3

human factors research be, was importart and should be 4

restored.

5 The second thing that happened was that the, really 6

through initiative on the NRC research staff which we endorsed 7

with a letter, the National Academy and the National Research 8

Council was asked to put together a panel to study the, more 9

specifically the need for research in the area of human 10 factors for the. for the NRC and the nuclear power industry, 4

11 so a couple of years ago a panel was put together.

The 12 chairman of the panel was Dr. Neville Moray, who is our 13 speaker today, who was then with the Department of Industrial 14 Engineering and professor of industrial engineering at the 15 University of Toronto.

He has since moved to Champagne, 16 Urbana and the University of Illinois, and I think the 17 football team anyway is a little bit better in Illinois than 18 at Toronto, although not much, although alumni can't--it 19 doesn't seem to have much of a record, so I don't think those 20 were his reasons for going to Illinois.

21 But anyway, the panel labored over the course of 22 eighteen months or somewhat longer I think, and has come out 23 with its report.

The report has been published.

I think Dr.

24 Moray has given a presentation on the report to the human or O

25 to the NRC staff nanagement or at least the research HERITAGE REPORTING CORPORATION -- (202)628-4888

.);

_7 1=

management.

Eric Beck George seems committed to develop the 1

()

2 new program in human factors research presumably using this 3

report as guidance for that.

Neville has come here.today to 4

spend about three hours with us giving us a summary of the 5

report.

I think you will find that he will be a very 6

knowledgeable and interesting speaker on the topic and he is t

7 prepared I think to interact with you and answer questions as P

we go along.

9 He also plans as I understand to give a similar 10 report to the commissioners.

I think that is scheduled for, I 11 don't know if it is for April or perhaps May.

i 12 We also have here Dr. Harold Van Cott from the 13 National Research Council, who is the staff director of this O

e 14 program, and a major participant in the study.

i 15 Let's see.

I was--just one other little thing.

I J

16 was a nember of the panel, kind of a minor member.

I didn't 17 really make an awful lot of input, but I was interested in j

i 18 what was being done, but I think that probably must disqualify 19 me from doing something.

I don't know what.

I am not sure, 1

1 20 but under out rules I think there is something I can't do.

I 21 haven't figured out what it is, but I am just telling you that 22 in advance.

Some conflict of interest; I can't figure out i

1 23 what interests there are.

i i

24 DR. SIESS:

Not financial anyway.

(:)

25 DR. LEWIS:

There really is no conflict.

HERITAGE REPORTING CORPORATION -- (202)628-4888 i

t 8

1 DR.'REMICK:

I think he is just informing us he was

{)

2 a member.

3 MR. WARD:

Yes.

4 DR. SIESS:

You would like an apology!

5 DR. LEWIS:

There is no conflict, just that we can't 6

give any credence to your judgment about the quality of the 7

effort, but that's our problem, not yours.

8 MR. WARD:

Okay.

I don't think there is anything 9'

else then, and so at this time, I will ask Neville Moray to go 10 ahead with his presentation.

}

11 A. REMICK:

I will put in a little commercial that 12 the-Human Factors Subcommittee will meet on the 28th of this B

13 month to consider the NRC human factors research plan.

O 14 DR. SHEWHON:

Where?

15 DR. REMICK:

Here.

16 DR. MORAY:

Good morning, ladies and gentlemen, and i

l 17

-thank you for giving me the opportunity to come and present-i 18 the results of our work to you.

19 I wasn't aware at the time of Dave's strange beliefs 20 about college football, but we will forgive him that.

Maybe 3

21 that was the reason he didn't get to meetings, trying to drum l

l 22 up some sort of support for the teams that he supports!

l l

23 I would like to begin by thanking the National f

I 24 Research Council staff for their support, particularly Dr. Van

(

25 Cott who is here this morning, and his predecessor, Stan 1

l

[

HERITAGE REPORTING CORPORATION -- (202)628-4888

.., _ _ _. _.... _ _ _. ~ _.. _, _,, _, _. -

9 4

1 Deutsch, who gave us enormous help.

Also Beverly Huey who is j }~

2 here this morning is my co-editor who worked heroically to 3

produce the report and spent the last few weeks working on it 4

with a fever, a high temperature and driving in and out of 5

Washington every day in order to work on it, and I think she 6

deserves the highest praise for the final presentation of it.

7 I would also particularly.like to thank the people 8

at the NRC for the support they gave us, tom Ryan and Dan 9

Jones in particular who gave us all the assistance that we 10 asked for at every point, 11 The panel which was convened--by the way, let me say 12 once that if you want to stop me at any time and ask 13 questions, I would be very happy.

I prefer in fact that 14 format rather than for me to run on until the end and for you 15 to ask ne questions.

Please break in at any moment.

16 The Committee, as the panel, as is characteristic of 17 the National Research Council, was drawn from a wide variety i

r 18 of disciplines because it was felt that at the beginning that 19 there was a heavy tendency for human factors to be thought of 20 as something in control room design.

Particularly following 21 the events at Three Mile Island, we felt that that was 22 inadequate definition and that we had to cover a much wider i

23 variety of disciplines.

24 There is plenty of suggestion that major problems in

(:)

25 the management and operation of nuclear plants occur in, i

l HERITAGE REPORTING CORPORATION -- (202)628-4888 i

L J

10 1

management _ organizational factors, relationships with the j }

2 regulators, and that end, and right down to certainly still 3

problems with control room design, and therefore, the people 4

who were, drew into the panel included everything from 5

sociologists and economists up to nuclear engineers and people 6

who had been on the executive of a power company.

They worked 7

extremely hard, and I consider it a privilege to have been 8

able to work with that group.

I was most impressed.

9 We were given very short briefings by NRC to begin 10 with, two-day briefing.

We were able to take the panel to 11 Three Mile Island, visit the, both the plants to introduce 12 those who had not been in the, had anything to do with nuclear r

13 work before, which I think was also very valuable.

Of the 14 panel, about eleven out of this group people had in some way 15 or other been connected with work to do with the nuclear 4

16 industry in the past.

Some had been actually. working in the 17 industry, as for example Ed Smith.

Some had been working in 18 universities or research institutes, both in this country and 19 abroad such as Rasmussen and myself.

Some had been l

l 20 consultants, so the majority had experience at some level or 21 other of nuclear industry, and the few who had not as I say i

22 were put there for their particular skills and were very 23 quickly I think able to appreciate the major points.

24 Our charge was to identify study areas where 4

25 there had been inadequate attention paid and where more work HERITAGE REPORTING CORPORATION -- (202)628-4888

a 11 i

i 1

.needed to be done.

We were not charged, expli:itly not f

[

(}

2 charged to'do a critical review of NRC's past work, but to say 4

I 3

where we thought future research still remained, and that is i

4 ~

the reason for the particular emphasis in the final report.

j 4

I 5

Implicitly in some things we write in the report j

l 1

l 6

there is criticism of the past programs of NRC.

That is 1

V I

l 7

inevitable, and I don't think any of us feel we have co 8

apologize for that, but our main concern is that if there is j

l i

9 to be a viable nuclear industry, there is still research that j

i r

10 needs to be donc on human factors in order to increase safety 11 and to ensure that both the objective safety of the operations j

[

i 12 are increased and also that it is seen, that the public's view l

13 of the industry is one which accepts that safety as being i

O i

14 improved.

15 MR. EBERSOLE:

Let me ask a question.

THI was a I

like many others where there had been investigations and 16 case 17 known deficiencies which would have led to the precise 18 accident that occurred, and there were many other--

19 DR. REMICK:

A little bit louder.

l f

20 MR. EBERSOLE:

There Davis-Besse was a succession of l

21 these things where to a greater or less degree the situation

[

e i

22 exists to cause the particular thing to happen, yet there is, I,

f 23 it is impossible to get a reaction from the technical i

24 community at large to fix this until something happens.

O 25 Are you going to get into the roots of why this is HERITAGE REPORTING CORPORATION -- (202)628-4888 f

_ _. _ _ _ _ _.. _ _. ~. _ _. _. _.. _ _. _ -. _ _. _ _ _ _ _ _ _ _ _ _ _ _ _. _ _ _ _.... _ _

l I

12 l

l 1

so?

I 2

DR. MORAY:

You will see that some of the

{)

3 recommendations we make for'research is into how to improve i

l 4

what has come to be called cultural reliability.

That is, to 5

try to get an understanding of how either through regulation t

i 4

e 6

or through persuasion, management and organizational forces i

e 7

can exactly tackle that problem.

It is clear that there is a l

8 resistance to change unless very strong and probably usually l

l l

i 9

either economic reasons or regulatory pressure makes people do i

l I

i i

10 it.

i 11 We would like to feel that something rather more i

)

i I

12 than that could be done.

Yet, certainly we are asking for l

13 research in that area.

We don't know the answers, although q

v i

14 there is a large amount of research in industrial sociology l

l l

I 15 which is relevant to that.

i l

l 16 MR. EBERSOLE:

Thank you.

l i

t 17 DR. MORAY:

It is also interenting that I recently f

l I

18 received actually from a nuclear inspector in Britain a i

j 19-document en the tolerability of risk for nuclear power j

f I

d l

20 stations which they just published which is meant to be a l

i i

I 21 document which came out of the Sizewell B inquiry, and this is I

22 a public document to explain to the public at large what their

)

23 attitudes about risk assessment are.

And in that, there is a i

24 section where they also come out strongly along the lines that l

(:)

25 there are major problems in management and organizational

{

l HERITAGE REPORTING CORPORATION -- (202)628-4888 i

i 13 t

4

[

1 control as a source of of problems.

I think--I am interested i

2 to find that although it is not written for the same purpose,

(}

3-there is a lot in that document which is exactly along the 4

lines that we have suggested.

1 5

MR. EBERSOLE:

I see, i

l I

l 6

DR. MORAY:

The Canadiana also I think are think.ing 4

)

7 the same way.

i f

1 8

(Slide) t i

I 9

DR. MORAY:

One useful place to start from is to i

l 10 look back at the history of the NRC's research' program up to, l-J 11 up to the time that the program was effectively cancelled two I

12 or three years ago.

13 There certainly has been an extensive amount of l

14 research which they have done.

The bibliography in our report j

B f

15 is quite extensive.

I think it runs to rather 150 entries, f

16 and we did manage to look at the NRC's publications, NUREGs 17 and NUREGs CRs.

There are somewhere around about a hundred, 18 between hundred and 125 publications which have come out on j

19 human factors, and by topic they are broken down approximately 20 as this list shows.

The numbers don't add up exactly because 21 clearly some of the papers, some of the research reports can 22 be catalogued under different headings, but it is interesting 23 to see where most of the work has been.

24 Clearly displays and SPDS has been, had received a O

25 lot of interest.

That represents the response to THI in terms f

HERITAGE REPORTING CORPORATION -- (202)628-4888

,... ~ - -. - -.

_.. -. - - - - - -.. ~...

... ~ -. _ -

j 14 l

i 1

l 1

of looking into the design of control rooms and trying to put 2

that right.

j}

3 Performance qualifications and licensing has

[

1 t

l 4

received a lot--and of course, the outstanding is human error j

f

{

5 probability in PRA.

Now I will come back to that later on 4

t i

l 6

because we do have some fairly strong feelings about research l

I E

{

7 in that area.

?

1 l

8 Briefly, we think that it is very understandable why i

9 so much effort has been put into this, but we don't think that 10 research, further research into estimating the probability of j

11 human error for PRA along the lines which has been done so far 12 is worth doing.

And I will come back to explain in more 13 detail later on, but I think this is perhaps one of the more 14 contentious things.

It is something that was said in an 15 earlier program when the Human Factors Society proposed a 16 research program, and I will leave that now, but I will i

'I f

17 certainly come back to it later.

f 18 (Slide) l 19 DR. MORAY:

The panel met, as Dave said, for l

20 approximately eighteen months.

We received briefings from 21 many organizations.

We received written communications from 1

22 nuclear power plant operators, and within our timeframe, we

)

23 have tried to do as thorough a job as we can.

Now as you will 24 see in the report, we have deliberately excluded certain O

25 topics, largely bacause of time.

)

HERITAGE AEPORTING CORPORATION -- (202)628-4888

f.

15-1 We have not looked into human factors of waste

()

2 management.

We have not looked into the-human factors of 3

. security and say anti-terrorist activities or anything of that i

4 kind.

We felt that there was, we would not be abla to do a 5

thorough job if we extended our work that wide, so we are 6

strictly looking at the operation, management, maintenance of l

7

.really current power plants.

We discussed whether we should 4

8 consider future developments in the next generation of plants.

9 We decided not to do that for two reasons really.

One is tlaat j

I 10 it is extremely difficult to guess where technology is going r

11 these days.

It is changing so fast, that if we tried to guess t

12 what the human factors issues would be ten years down the road j

13 on the assumption that a new generation of plants is going to 14 be built, it is highly unlikely that our recommendations would i

15 have any degree of reality at all.

6 16 MR. EBERSOLE:

From your basic charge, the panel l

17 charge, and from NUMARC, it would appear you have to operate 18 on the presumptive basis that the operators are handed a plant l

19 which is designed properly in the first place.

t i

20 DR. MORAY:

No.

As you will see in the report, we i

i 21 say that certainly one sense you can give to the word human 22 error is error in initial design.

I t

23 MR. EBERSOLE:

You have that within your scope?

I I

24 DR. MORAY:

It would have been within our scope.

We

(:)

i 25 decided not to, as I say, look at that with an eye to future HERITAGE REPORTING COPPORATION -- (202)628-4888

16 1

design.

(-)d 2

HR. EBERSOLE:

I am talking about past and existing.

3 DR. MORAY:

Yes.

I don't think there would be--it 4

is difficult perhaps to see what kind of research you could 5

now do on the current design efforts because there don't seem 6

to be any.

The design process I think is not well understood.

7 I mean the nature of engineering design is not well 8

understood.

There is research going on not particularly in 9

the nuclear area about, a lot of research going on here and 10 there on designs such as to support engineering teaching in 11 universities, and I think it is worth looking at that.

12 One of the points we are going to make is that you 13 can really look at research in different ways.

There is

-)

J 14 highly specific research which is directed at particular 15 problems for the nuclear industry, and it is obvious that kind 16 of research should be done.

17 There is also research on generic topics, 18 fundamental research which is not being directed immediately 19 to the nuclear industry, will relate to problems which are of 20 importance to the nuclear industry simply because they are 21 important to many otner industries as well.

For example, the 22 causal model of human error which is nothing particularly 23 specific about nuclear, and finally, there is the question of 24 transferring of existing knowledge.

The research there is O

25 simply a matter of research on how to do it, how to nake it HERITAGE REPORTING CORPORATION -- (202)628-4888

- _ _. -... -.. - -.. -. -. -. ~ -. - - -... - - -. - _...

_ -.. -. -. ~ -

17 1

i

?

}

1 more effective.

So yes, we certainly feel that in so far as

{

I

[}

2 humans do design and they do construction and they do s

j 3

operation, they do maintenance and they do management and they

~

f l

4 do decommissions which is another thing we didn't look at 1

4 l

5 specifically, all tnose areas are~ areas where if you can l

}

6 reduce the impact of human error, you will by definiticn 7

improve systems safety.

h

[

8 I think when we, there was one point at which we had f

j 9

an enormous shopping list of research topics.

It was j

h I

j 10 considerably, it wra considerably longer than the one I just f

l 11 showed you of the work that the NRC has in the past done, and l

12 we felt when we were advised at that point and what we i

i j

13 discussed at great detail, if we were to be of the createst l

14 assistance to NRC in choosing a research progran for the next j

i i

l 15 few years, it was important not simply to list everything that l

16 we felt needed research because that runs perhaps to getting l

17 on for between 50 and a hundred tcpics, it was more important l

18 to identify a relatively small number of topics which were of 19 greater urgency in the sense that we really felt if they had l

l 20 to choose, these with the ones they should work on over the 21 next three years.

In doing that, they would natural).y begin l

l 22 to find out other topics and the program should be 23 self-sustaining at least from the point of view of questions.

I 24 Financing, of course, is another matt 7r.

O 25 So what we have given in the report is a relatively HERITAGE REPORTING CORPORATION -- (202)628-4888 Li-

=

18 1

short list of topics, but these are the ones which as I say,-

-(

2 we think the NRC should immediately act on.

3 We have not discussed how totich money should be 4

spent.

We don't think that's our, that was the panel's 5

problim.

Tnat is-a problem of management for NRC It is 6

their problem to decide how much money they want to spend on 7

it in the light of their budget in the sar.e ucy that 8

ultimately they have to decide which of the topies get top 9

priority and also how they are going to manage their overall 10 research.

11 Now we have talked in the report at considerable 12 length about two tcpics.

One is the nature of human factors, 13 and the other is what we mean by systems approach.

14 Human factors is clearly still not understood really 15 by engineers. although it has beccme I think better understood 16 in the last few years in the nuclear industry, and I must say I

17 I thir4 due to NRC's efforts, perhaps because they have forced 18 the industry to take some notice of it through things like the 19 detailed control reom design review.

1 j

20 I am impressed by the extent to which the industry 21 has responded.

There was an ANS topical meeting about 22 eighteen sonths ago, and I was quite interested.

I went to 23 that meeting, and I was puzzled why I found the papers rather 24 boring, ano toward the end of the meeting, I realized that the O

25 resson they were boring was thac nobody was arguing about HERITAGE REPORTING CORPORATION -- (202)628-4888

. -. ~ - - - - - - -. - _ - -.

.. _. - ~ -

19 1

anything and that what I was listening to were engineers now 2

talking-about a certain aspect of human factors such as task

)

3 analysis as if they took for granted these were good things to 4

do which was a marked change from say three or four years f

5 prior to that at Myrtle Beach 1 a7d 2.

I think the message 6

has been getting across.

Whether it has been getting across I

7 to management is another matter, because ultimately it is a 8

question of investment.

9 Now regulators can force an industry to respond to 10 safety issues whether the industry likes it or not.

We feel I

11 and we have said at one point in the report that in fact, by i

12 and large, a safe industry is probably a productive industry.

I i

f 13 Insof ar as you can keep the pl ant up and running, it is

[

(

14 actually going to be profitable to be safe.

You can reduce j

j 15 human error.

You will reduce the number of shutdowns, reduce I

16 the number of shutdowns.

You reduce stress to the plant, and I

17 obviously you keep generating electricity for efficiency, so 18 the industry actually in many occasions I think it should be i

I 19 possible to persuade the industry and management that actually i

20 it is not merely cost that goes into the kind of things that 21 we are suggesting, but it actually will improve their e

(

22 profitability.

That is always difficult to show in a detailed j

i i

23

way, j

i 24 There are cases where specific, specific cases where O

25 you can point at very large savings as a result of fairly i

I I

i HERITAGE REPORTING CORPORATION -- (202)628-4888 l

20 1

large investments in human factors.

()

2 So we have gone to some trouble in the report to 3

spell out the nature of human factors as we see it, 4

particularly to make the point that we want to extend human i

5 factors to include things which usually come under the helping 6

industrial psychology or sociology of organizations and 7

management.

8 The reason is that we support very strongly the idea 9

of a systems approach.

Now the phrase systems approach is, of 10 course, one of the things that everybody believes in and e

11 everybody knows it is a good thing, and we all ought to think 12 like that, particularly complicated industries and complicated 13 processes.

We want to give it a bit more coherent 14 description, definition than that, and this picture which t

l 15 comes from onc of Shikiar's report who is, he was on our f

16 panel, points to what we mean, 17 One can think of any large industry complex, high j

18 technology industry, in the form of this sort of onion-shaped t

19 diagram.

In the middle, you have the technical engineering 11 20 system.

That's the hardware.

That's the plant itself, the 21 control room hardware, so forth.

l 1

22 Outside it you have the personnel sub-system and the 1

i 23 interface between the two at A is the place where most 24 conventional human factors has been done, namely, the control i

25 room / human nachine interface design in the control room, and h

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

~. -,.,_, -,_.___. _.._.,.,, _

m.

,,_,.__._,.m...-....-_,.._,,,,-___.,.,,,._-..,_,

--..__ _ _ _ _ _ _. _ _._ _ ___.. _ - _ _ __ _ _~. _ _. _ _. _. _ _. _ _ __ _ _.

L f

i 21 l

j 1

there is absolutely no doubt that getting that wrong will i-

!- ( }

2 cause a great deal of trouble.

f i

3 There is a rather nice phrase that a friend of'mine i

4 introduced'a few years ago called cognitive impedance l

l 5

matching.

The idea is that by analogy with electrical i

J 6'

impedance matching, if the properties of the-thing inside here 1

7 and the properties of the thing outside here are not properly l

8 matched across the interface, then just as incorrect impedance i

9 matching will give you a' loss of power with electricity, so j

t 10 incorrect matching between the properties of the hardware and j

l 11 the human will give you a loss of transmission of information l

i 12 and control aceoss the interface, that it is important to l

13 understand how to design this interface so that the, the flow 14 of informatien and control is matched to the' properties of the j

l 15 human.

l 16 That is what everybody understands, and that's where j

l I

-17 the major thrust has been since Three Mile Island we feel.

j l

l 18 The problem is that it is relatively easy to redesign control I

i i

19 rooms, and consequently it is relatively easy to, for people j

n i

l 20 to feel that that problem has now been solved and human l

I 21 factors can now be abandoned.

l l

22 We don't know why HRC dropped its human factors i

l l

l 23 research program.

We didn't go on a ferreting expedition to i

i I

24 try to see what would come out if we put a ferret down the

(:)

25 rabbit hole.

I don't think that is our business.

The simple j

HERITAGE REPORTING CORPORATION -- (202)628-4888 L

~ -

22 1-fact remains that the best estimates we have are that 1

l

((

2 somewhere between 30 and 80 percent of industrial incidents 3

and accidents are in some sense or other attributable to human 4

error.

Even INPO's data suggest it is about 50 percent in the 5

nuclear industry, and if that's the case, it is very striking 6

that people should not continue to do research on it.

7 One reason possibly is the feeling that we have done 0

it because we have done the control room.

We want to point 9

out that outside that there is the personnel sub-system.

This a

10 includes factors such as social interaction among operators, 11 problems of defining hierarchy of control in the control room, 12 problems of hierarchial relationships between the operators 13 and the maintenance crews, and the organization and 14 management.

I 15 As we sy at one point in the report, if you had 16 excellent hardware and excellent plant and bad management, 17 then you are going to have workers who do not use the 18 excellent hardware properly.

A very small mistake on the part i

19 of management can produce a crisis in morale and willingness i

20 to work on the part of operators, which will take months or 1

21 even years to restore.

l 22 It is possible that the major reason why operators i

23 at Peach Bottom were asleep was they were merely physically j

24 tired, and if so, that in itself is a management problem.

It

(

l 25 is a management fault because if you look through the NRC's HERITAGE REPORTING CORPORATION -- (202)628-4888

23 i.

1 research on the structure of shift work, it is abundantly

{}

clear there is a enormous variety and quite irrational variety 2

3 of shifts, many of which are of a design which are known to be i

l 4

likely to produce bad work, fatigued workers, and high l

i 5

probability of human error.

And it is not the person.

It is l

}

l l

6 not the operators who choose the shift work.

That is a j

I-7 management problem.

l l

l 1

8 There is many ways--

i f

9 MR. WARD:

Neville, I mean is the point there 10 that--I mean you are talking about shifts in terms of the i

11 length of shifts and the sequence of rotation and that sort of j

12 thing?

13 DR. MORAY:

Yes.

14 MR. WARD:

Is your point there that there is an l

15 existing body of knowledge that could be epplied and just

}

i 16 hasn't been?

17 DR. MORAY:

There is indeed.

We will point out that 18 when I come to the research recommendations.

The point I am 19 making here is that however good the hardware is in the plant, 20 and however well intentioned and well motivated the operators 21 are and well trained, if the management is incorrectly done, 22 then you will destroy the overall efficiency of the 23 organization.

24 The options available to operators and maintenance O

25 people here are constrained by what manageme;,t allows them to i

HERITAGE REPORTING CORPORATION -- (202)628-4888

(... _. _. -. - - - - - -. -....

I 24

[

1 to do and what management demands of them.

The behavior you

{

()

2 see at this level, at this interface, is not entirely a

{

3 property merely of the humans at this level.

It is also a I'

l 4

property of the humans at management and organization.

f f

l 5

Management can make or break a plant in the way that it makes i

I 6

the workers respond to the demands of management, and it is l

7 now increasingly realized not just in this industry, but not i

8 just in this country, but other countries and other I

9 industries, in the military and so forth, that the problems of l

l 10 management here are absolutely crucial.

They may be along l

11 with maintenance probably, the two most important factors j

k j

12 which are not yet well under control in the industry from the l

l 13 point of view of making it safe.

[

j l

l 14 Certainly we need to do much more research at this l

i t

i i

15 level.

l l

l 5

L i

16 Finally, management themselves are under pressure i

17 from what we are here calling the environmental context, and

~

18 that includes the regulatory bodies, the PUCs, the public.

19 The way they are seen are there are now cases ehere you meet i

i 20 people who, operators who have moved into a new part of the t

i i

I 21 country to work at a plant and when their neighbors discover

{

22 they are working at a nuclear power plant they are effectively

[

23 socially ostracized.

Now that is not a situation where you j

i 24 are 1.kely to be able to recruit the best people and keep them l

l 25 working well.

l l

I i

(

l l

HERITAGE REPORTING CORPORATION -- (202)628-4888 j

u L.,

~

~-

h '+

),.

25 y

1

'And I don'.t have to tell this audience the amount of 1

2 pressure that, from the public that is.on the industry, and

{j 3

the point is that none of these work in isolation.

The

[

^

4' regulators here determine in a sense, well, they determine i

5 very directly what goes into the control room.

Only certain 6

options are possible in the ways of' equipment and modes of 7

operation given certain regulations.

Innovation may be e

8' ' '

hindered by regulation.

Innovation may be hindered by 9

' management.

It is quite cle:ar that the design of nany power

' 10 statyens is the way it is because the m'anagement was used to 5 11 building fossil plants for many years and also because of the 12 influence early on of the nuclear Navy on the way that the 13 industry developed.

()

s l

14 You have quite different kinds of plants in other 15 countriec which have started from different viewpoints.

The t

16 mode of regulation is quite different in other ccuntries.

To e

17 take the, perhaps the extremes, on the one hand you have the l

18 American system where it is in a sense clear that the idea is l

19 to regulate in detail from the top down, whereas you compare t

l 20 that with say the British mode where it is a responsibility'of r

L 21 the plants, of the utilities to make their plants safe.

They

(

22 can do it anyway they like but they then have to prove to the 23 regulators that what they have done is satisfactory, which i

l i

24 gives them a much greater flexibility in how they do it.

O 25 I am not saying that one or other is guaranteed to i

{

I HERITAGE REPORTI!!G CORPORATIO!! -- (202)628-4888 I

i

E x

g 1

l 26 l

_ f '.

l I

?

I l

1 be better.

I am ju's't saying that they are different, and in r

o j }-

2 so far as they are different, there is a very tight relation i

L

.here and the actual choice of I

i 3

between the regulators out b

f f

4 hardware in here.

l

?

5 Similarly, the kind of people you can get to be

{

t I

6 operators affects management.

The kind of equipment that is i

b f

7 available affects the, what management will expect them, I

l i

i t

j 8

expect to happen in the control rooms.

That in turn will l

9 affect the regulators because people who invent new devices f

J i

l' 10 will come to the regulator and say can we use them?

'11 It is simply not possible to solve a problem by 12 chanding any one feature in a diagram like this.

That as I

il3 another, one means of systems approach and research must be t

14 done we believe in a systems approach and systems setting.

If 15 you look through the published research, one is struck by the l

l 16 fact--I am talking about the NRC NOREGs CRs, one is truck by l

1 s

17 two things.

One is there are very few experiments--lot of j

18 surveys, lot of models, lot of reviews.

There are very few 19 true experiments.

20 That is not surprising.

It is extremely difficult 21 to do exp*.riments on large, complex systems.

For one thing, i

22 the kind of people who normally do research at universities 23 can't get at them, and one of our recommendations is that l

24 there should be an improved, somebody should set up improved l

25 channels of communication so that, for example, university t

HERITAGE REPORTING CORPORATION -- (202)628-4888 L

a

py

,uy ; 3,w. g ~.

J, gy;;g n.

~~

.f,j.,,.

XQ> ~ '.,'..

^y*

wng --

..\\

~

.g

'~

r

_ a. :

.a 1

researchers cea got access to sim31ators arid m the industry.

n

+2 3

Bubapo.*; f rom that, tnere is a ter.dency to thin)I'

~~3 that if one has a particular problem,-let's say that f.nere are

[

4 too many displays in the control rocm,;that you solve t?mt by 5

saying all ricruti iet us go to CRT display drivrn by

~

b 6

compuyrs, ant. siTwe only have six of them and therufcVe it 5

l 7

is going to uv c. smaller control' room and therefore it.nl1 be 4

8 ensier for the person'to v?r)c with. and think that that is 411 9

t h v.t w i l l,*n a p p e n.

10 hw "he coupling between changing any one thinst in a 11 system qt th* s cornplexity and what happens at other levels' 12 should he appatent to anybody who has ever been -in9olved 9tc.3, d

13 city where somebody'has Duilt a new' expressway with.the aim of

~

l L

14 reducing the traffil flow.

There is a tendency for people to r

i 15 think. hat if you -have a co;nplex system and you change one i

16 thing in it, what you have is the old systela with one cb.inge.

17 You don't.

What you have is a new system, and where there is, 18 where it is aighly complex, large number of sub-systems

)

4 19 tc.ghtly coupled, you simply cannot tell what the new system is f

1 20 going to be like.

You build the expressway to reduce the i

I l

21 traffic.

What happens?

You now have do.ble the number of I

l 22 people cei. muting in fron the suburbs uho never tried to do it i

r l

23 before into tne core.

Generally speaking, a.? uoon as you I

l 24 build ring roads, the tctal amount of traffic goes up and the O

25 traffic problems gets wcrse, all almos? withou. exception I 1

l l

l HERITAGE REPORTING CORPORATION -- (202)628-4888 l-

.-.-,-,.-....,-..-.._-.._..._.-._....-__J.

t

28 1

think.

In road planning that has been found.

i i

()

2 The point we are making, that is a general preperty~

c 3

of large, complex systems.

When you change something, you are 4

changing everything.

If you move from hard wired control i

5 rooms to soft wired control rooms here, you are changing the l

6 number of people.you need, changes the way they will directly l

i 7

interact with the system, the kind of operating procedures you l

8 need.

You probably are going to be changing, you may have to l

9 consider changing shift werk and certainly have to consider I

l 10 changing maintenance and changing training, and that means i

I 11 that management is going to be affected and that certainly i

12 means somebody is going to have to go back to the regulatory 13 Commission and ask that they are allowed to do things in 14 certain ways.

You cannot change any one thing without l

I 15 changing the rest.

16 HR. EBERSOLE:

System interaction is a standard part

[

17 of your business?

18 DR. MORAY:

I think, yes, I think so.

Research l

19 should be seen in this light.

One of the things we say 20 specifically is that wh-somebody does a piece of research, i

21 they should be required to--

22 MR. WARD:

Do you have a question?

23 DR. LEWIS:

I did.

You don't have to go back.

I 24 just want to ask to what extent what you have just said is f

25 universal.

I really have two questions, because it must HERITAGE REPORTING CORPORATION -- (202)628-4888

~~

-~

29 i

1

_ depend a great deal on the internal stability of the system 2

whether making a change propagates through the system or is 3

simply contained.

4 A friend of mine who worked for a long time in the

[

5 Pentagon at a very, very siigh level claimed that it was like a 6

giant inflated ballocn.

If you put your finger in, you could 7

make a dent.

When you removed the finger, there was no sign 8

the dent had ever been there, and this is an example _of a 9

stable system which is almost impossible to move, so one must 10 know something about the local dynamics of the system to know 11 whether a change--there are examples on your side, of course.

12 Who would have known that the invention of television would 13 completely corrupt American politics?

That was probably 14 unpredictable and yet it did happen, so one really must know 15 something about the system.

There is no universality about 16 the rule that if you change something, there won't be any 17 effect.

18 DR. MORAY:

It is certainly true I think very large t

19 systems tend to have ultra-stability.

There are many ways, 20 you can kick it in many different ways and it will find a way 21 of coming back to its initial starting point.

i 22 DR. LEWIS:

That is correct.

t L

23 DR. MORAY:

But if you add something to the system, l

6 24 I mean that's if you put a disturbance into an existing 25 system, but if you actually change something in the system, HERITAGE REPORTING CORPORATION -- (202)628-4888 i

30 1

the point I am making is that if you have a sufficiently 2

large, complex system, you simply are not going to be able to

'(}

3 tell very readily.

~

4 I would accept, I think the point you make is 5

absolutely sound.

What we are saying is that part of the 6

thing, that one must stop thinking about'what amounts to quick 7

fix, local fixes in the system.

You have to realize if you 8

make a change in the hardware and control room, you may be 9

changing management.

Make a change in management, you may'be 10 changing the maintenance.

11 DR. LEWIS:

I agree with your general concept. I am 12 only wondering how universal it is.

13 DR. MORAY:

I think it is also fairly universal if 14 you radically change something, add parameter to the system, 15 you get a different system.

It is very difficult to predict 16 properties.

17 DR. LEWIS:

That it is difficult to predict is 18 certainly universally true.

19 Could I ask one other question while I have you?

20 Back to the old comment that management can make or break a 21 system, we always say that, too, it is kind of a slogan that 22 we have that concern for quality originates at the top and 23 propagates through the system.

24 Again, I wonder how universal that is because one O

25 can imagine four sub-categories--active management, and HERITAGE REPORTING CORPORA ~ ION -- (202)628-4888

= - - - - _ - - - _ _ _. - - - - _ _ _ _

i l

l 31 l

I

'l passive management, and' top management and middle management, i (}

2 And there are certainly many organizations whose quality is 3

more or less ind2 pendent of the top management.

That is, top, l

4 some companies don't even know who owns them from one year to

(

l 5

the next, so it has a certain amount of irrelevance'.

And 6

passive management is sometimes the best thing that can happen

)

7 to a company even if, especially if it is inept.

It is better j

l-l 8

that it be passive, and again there is a slogan among the i

f 9

military people that generals are only important if you are j

f 10 losing the war.

They are irrelevant if you are winning the l

I 11 war.

Their purpose is to recover from defeat, j

12 I wonder to what extent there has been research that j

13 clarifies various sub-categories of management?-

(

b 14 DR. MORAY:

There has been considerable research in i

15 the military context.

And in fact, one or two of the people i

16 in our panel, for example, Laporte is active in this kind of

[

?

17 area.

There has been a lot of research in various industries.

l 1

18 The thing that is, one of the things that is striking about

[

t 19 the nuclear industry is that you, if you look around, you find l

l 20 that there are a number of plants where they have very similar 21 hardware.

They have the same kind of reactors, roughly the j

l 22 same age more or less, the same kind of control rooms, 23 although one of the problems is, of course, they aren't 24 identical.

They have been running for about the same length O

25 of time.

If you look at the availability and the safety i

i HERITAGE REPORTING CORPORATION -- (202)628-4888 f

~ 32' 1

record, it is wildly different, and it is very, you know, one

()

2 faced with that sort of data, one is inclined to say that at 3

least the possibility that what is going on has something to 4

do with management policies should be looked at.

5 DR. LEWIS:

That it should be looked at I agree, but 6

I wonder, it is always easy to blame it on management and 7

there may be, for example, I can give you countries of 8

comparable size, gross national product, and some of which 9

work well and some of which don't, and it is very hard to pin 10 down just why that is the case.

11 DR. MORAY:

Yes.

I don't think it is necessarily 12 easy, but in so far as when people use the phrase human error, 13 they almost always mean operator error.

We are arguing that 14 the time has come to consider the possibility that it is not 15 operator error, that operators do remarkably well considering 16 the systems that they are trying to control.

17 DR. LEWIS:

I agree with that.

18 DR. MORAY:

If operators are good and working well, 19 you still are have troubling, then it is probably not there 20 that you should do the research.

21 DR. SHEWMON:

Pilot error causes all airplane 22 crashes!

23 DR. LEWIS:

As in that case, I am trying to abolish 24 the term pilot error and operator error from the language O

25 because to think of operators only in terms of their negative I

HERITAGE REPORTING CORPORATION -- (202)628-4888

_l

33 1

potential is a one-sided ~ view of the role of operators.

2 DR. MORAY:

Certainly.

3 DR. LEWIS:

3s with pilots.

4 DR. MORAY:

Yes.

In many, I mean we are simply 5

arguing that viewed from a systems--there has been too 6

much--human factors or ergonomics when it is understood by the 7

public at all, it generally is thought of to be knobs and 8

dials and chairs and tables and work schedules, and while 30 9

years ago there might be some truth in that, that is not true 10 now.- And even if it were, we believe that a human factors 11 program should not restrict itself to the traditional human 12 factors but must include things like industrial sociology and 13 industrial psychology, social, study of social interaction, O

14 and we want to urge NRC that in its research program it should 15 include those kinds of features.

16 We believe that there are certain things that should 17 be done, changes made in how research is done.

Certainly it 18 would be worthwhile trying to interest a wider research 19 community in taking part in this, for example, universities 20 and so on.

Also staying for a moment with the idea of 21 systems, there is a tendency for people to give highly 22 specific results in their research.

Suppose I were asked to 23 do research on computerized operating procedures, which is 24 quite a likely topic to come up.

In the past, there has been O

25 a tendency for people simply to take a, to do experiment and HERITAGE REPORTING CORPORATION -- (202)628-4888

i.

l 34 l

l-say loch, here is what happens if you have your procedures on

()

2 the computer, here is what happens if you have them in bound 3

volumes at the back of the room, and this is better than that.

4 We would like to see NRC put a lot of pressure on 5

their researchers when they are reporting thoir results to do l

6 so in such a way as to put it a systents context and say 4-l-

7 furthermore, you know, let us suppos hypothetical thing a

i 8

that they decide that computerized operating procedures are i

9 better or seem to be better.

That's, ncbody knows if that is 10 the case let me hasten to add.

You don't just say that.

You 11 snould say this particular implementation seems to be better 12 and if it were to be implemented, we must point out that it 13 would require decisions about how many computer screens you 14 have in the control room.

It would require, have the 15 following impact on training.

It would have the following j

16 impact on manning levels, the following impact on management, 17 management will have to make the following kind of decisions 18 when they implement it.

19 In other words, we would like to see research seen 20 by the people who do research in the systems context, not 21 simply as a fact which they have discovered because one of the 22 things which worries us greatly, there is this huge body of 73 research at NRC and it clearly is not having much of an impact 24 on industry.

The information is not getting transferred out, O

25 and part of that is--there are a number of reasons.

HERITAGE REPORTING CORPORATION -- (202)628-4888

35 1

One is that NRC's own cataloging system doesn't 2

allow it.

The people who helped us, Tom Ryan and Dan Jones, 3

went to heroic efforts to enable us to know what that list of 4

publications is because they don't have an organized data base 5

in which they can access information.

If they don't, it 6

certainly is not going to be used by anybody else.

7 And there is a good body of research.

I mean I 8

think a lot of research that has been done by NRC in the last 9

few years is very good and potentially valuable.

Where EPRI 10 research gets into industry, it seems to be the case that 11 NRC's doesn't.

12 DR. SHEWMON:

I'm on various mailing lists and one 13 of these comes from DOE who obviously spends a fair amount of O

14 money on data bases.

I will get thick books on more than I 15 ever wanted to know about waste management or whatever else.

16 How about DOE's system on operations research or 17 whatever you want to call it?

18 DR. MORAY:

I don't think--well, I think what we 19 would like to see is some efforts made to really coordinate 20 activity between NRC, DOE, EPRI, INPO, because something like 21 an improved data base, joint data base management system for 22 research is something where there could be cooperation.

It is 23 in no way going to decrease the rigor of regulation.

It is 24 going to improve the flow of information, and it is going to 25 get rid of some of the adversarial, a small step in getting HERITAGE REPORTING CORPORATION -- (202)628-4888

36 1

rid some of the adversarial aspect of regulation.

One can't 2

help being struck by the possibility that, the intensive

[

{

3 adversary relation between the regulator and-industry that has 4

grown up.

It harmful in the end to safety because f.t is a 5

climate that tends to lead to the industry merely satisfying 6

the letter of the law because it is so much trouble, and we 4

7 would like to see steps taken to reduce the adversarial 8

relationship.

4 9

Now we do not want to see the rigor of regulation j

i 1

10 reduced, but we want to see perhaps the way it is done, ways l

l l

11 explored whereby more cooperation and certainly some kind of J

12 cooperation between the various agencies all of which are

[

13 doing similar work or related work should be improved.

(

14 We found cases where, I mean I know of one case,

[

l 5

I 15 there is a field where I am particularly interested where 16 there are, three reports on how to do task analysis were s

17 commissioned almost within a few months of each other, one by i

18 DOE, one by NRC, and there was one other one at the time that 1

19 I was looking into this.

It appeared that none of them new of t

]

20 the existence of the others.

Now there may have been very i

i 21 good reasons that they were all commissioned simultaneously, 22 but--and I am not entirely in favor of excluding all

(

23 duplicstion of efforts.

Sometimes that can be valuable.

One 24 does feel there is less cooperation between the various k

C:)

i 25 organizations and agencies than there could be.

I

)

J HERITAGE REPORTINv CORPORATION -- (2021628-4888

37 1

MR. MICHELSON:

Well,-I'm Oure you must appreciate j) 2 there is an overwhelming amount of information generated in r

3 this. country in the nuclear area that is fed out to_the i

4 utilities.

The point is that is one of the problems.

The 5

utilities are overwhelmed by the information input, and in 6

their own processing and application is the problem.

We don't i

7 package our information well.

It is yes, there is three or 8

four, five different people, organizations working at a 9

different area.

Each one will give a report to the utility, 10 and it is a problem.

i 11 I think you ought to put more emphasis upon making 12 sure that what you do is packaged in such a form that the l

13 utilities can use it.

You have got to whet their appetites to 14 show there is really something here they can use, and rarely

}

15 do I see research reports that whet the appetite of the user.

16 They are highly academic, don't seem to relate to the real i

17 world, although if you think about it a while, it does, but 18 che utility doesn't have the time to sit down and think about 1

19 whether or not this might be useful.

l 20 DR. MORAY:

I agree completely.

The industry, EPRI 21 does it quite successfully I think.

22 MR. MICHELSON:

They do a better job than most.

93 DR. MORAY:

And I think if the NRC's own research 24 could be brought up to the stendards of EPRI as far as 25 transmission to industry, that would be a considerable step in HERITAGE REPORTING CORPORATION -- (202)628-4888

38

[~

1 the right direction, but I would like to see assumedly more, I

2.

the panel would like to see more cooperation.

l

-{~

1 3

You know, it is very obvious that two great a 4

cooperation could be seen by the public as being weak j

i,

'4 l

5 regulation.

We are aware of that, and we know there.are l

6 constraints both in the kind of research that can be done, the l:

7 degree of cooperation that can be done, and we are. sensitive 8

to that, but nonetheless, we feel there are areas such as l

l i

9 improved transmission of research and so forth where that i

t i

10 can't possibly have a bad effect on regulation and is likely i

i 11 to have a good effect.

[

l 12 MR. MICHELSON:

You are going to have to, you are i

i 13 going to have to convince the research community that they

(

i 14 have got to develop a salable, they have got to do a sales job j

i 15 on their product, and it seems that they are not j

16 overly-interested in that aspect.

j j

s l-17 DR. MORAY:

Well, that's true.

I mean I think I

6 l

18 university researchers are not used to doing it very often, I

l 19 although considering the number of my colleagues that seem to l

f 20 have private consulting companies, that is a bit strange, and f

21 I guess consulting companies are interested in getting the j

1 I

22 package out the door and the check in, but I agree with that i

i 23 completely, and as a matter of fact, as I worked through our f

I 24 specific recommendations, you will see that we want to pay j

j O

i i

25 so.me attention to that, t

i I

HERITAGE REPORTING CORPORATION -- (202)C28-4888 i

?

-. - l

l.

f

?

39 1

1 So what I think I will-do now is begin to go through 2

our major recommendations, and any of the points that I have

}}

I i

3 raised so far I will be quite happy to come back to later on.

l 4

(Slide) l 5

DR. MORAY:

The most important thing is that NRC 6

make a firm public commitment to research in this area.

I I

7 If--the fact that they have cancelled their program of 8

research two or three years ago, if I were in industry, I l

l 9

would take that as a signal that I needn't bother about it any l

10 more.

Clearly if NRC isn't concerned, I don't have to be.

11 We are delighted to see that they are starting up l

12 again, and we strongly support their decision to start the 13 program again.

There are going to be problems because now 14 with the exception of a couple of people present, they have j

f 15 lost I think all of their human factors people, and if I were i

16 a human factors--I am a human factors person.

If I were 17 looking for a job, as I am not, I would be very chary of

(

18 taking a job with the NRC human factors program because I know i

19 that on its past histories, it has not been supported well.

I g

20 know it was cancelled, and if I am going to comm.t myself as a 21 senior professional to that thing, that is not an attractive 22 undertaking.

I think they are going to have difficulty in l

23 attracting good people.

Most of the good people have gone to l

24 other places and I think it will not be possible to get them O

25 back.

l HERITAGE REPORTING CORPORATION -- (202)628-4888

...... _i

a' -

i 40.

l 1

Thereois one thing in particular we feel is 2

important, looking at the past histories of the program, f

(}

I 3

There has been several conflicts of interest between I

4 short-term research and long-term research, between research 5

on the regulatory side or requests for research on the 6

regulatory side and research plans in the RES branch which we 7

feel that it is very important that research must be 8

continuous, relatively small amounts of money, but a program 9

sustained over a long period of time is going to be more 10 effective than flinging a limited amount of money at the 11 problem for two years and closing it down again, and that also 12 goes for the local control.

That is, it is undesirable that l

6 13 if the, if RES has started a program, that they should be j

14 interrupted at the short-term behest of the regulatory side i

15 and made, and have to stop their program and divert effort and 16 funds into a short-tern problem.

17 Now it is quite clear that there are short-term 18 problems which have to be, have work done on them in order to I

l i

19 solve the immediate questions.

If somebody comes up, as they l

20 are likely to do, with a new piece of equipment, for example, 21 somebody comes up tomorrow and says I have a certain system

]

22 which I want to put into the control room, can I do it, then 23 there is going to have to be a quick decision made and that l

24 means research is going to have to bo done on certain systems O

25 or whatever, and that suggested to un that in fact the HERITAGE REPORTING CORPORATION -- (202)628-4888

=

f.

i I

41 1

1 research program should be perhaps split, that these

()

2 responsive questions should be run out of the regulatory side 3

and the long-term sustained program, building up the knowledge 4

base for regulation and safety should be done out of the RES 5

branch, and to some extent these should be separated.

That 6

implies, of course, funds for research done by the regulatory 7

side.

Also implies increased staffing.

There is going to 8

have to be increase in stafiing anyway 15 they are going to 9

run the program at all because they haven't got enough people 10 to run it at present, 11 More importantly, we came to the conclusion after 12 talking to a number of people and thinking hard about it, that 13 if there is going to be a viable human factors program, it 14 should have a branch head of its own.

We are not saying that 15 the person who is the branch head needs to be a psychologist 16 who has done human factors professional training.

There are f

i 17 many people now who are engineers who have come from, who have 18 acquired sufficient knowledge and skills in human factors over 19 the last ten years through working in national laboratories.

20 working in consulting companies, working indeed in industry, 21 and interacting with human factors professionals that they are 22 now certainly of a sufficiently high standard and sufficiently 23 knowledgeable to take that position, but we do feel that if 24 human factors is a subdivision of some other branch as O

25 presently it is being run out of reliability., that is not i

l HERITAGE REPORTING CORPORATION -- (202)628-4883 1

'42 1

adequate to sustain a good program.

()

2 Let me say immediately this is in no way a criticism 3

of the reliability branch's program, or how they have their l

4 interaction with human factors, We simply believe that from j

5 an organizational point of view, just as if a cohesive j

6 sustained program of research.is to be mounted, because of the t

7 structure of HRC and because of the way the budget is handled n

i 8

and the lines of decision-making go, it is essential that any 9

program which has a major impact on safety should be a branch I

i j

10 and should be run by its own branch head, not a a subdivision I

11 of some other branch which basically has a different mission.

i t

12 That's implicit in this particular summary.

It is spelled out I

13 in more detail in the, in the report.

1 l

14 Secondly, as I said before, we want to emphasize i

i 15 that people should adopt a systems oriented approach.

Also we I

e 16 have tried to say, I think we have not said it quite as r

I 17 explicitly as we should have done or we haven't rep 2ated it as 4

18 much as we should have done, that when we talk about research t

4 1

5

)

19 on human factors, we mean particularly operational level.

We j

l 20 also mean maintenance.

i i

21 There is little doubt in my mind that, and I think r

'2 in the panel's, that maintenance is a very serious source of

{

l j

23 human error.

Maintenance people on the whole are less well

(

?

24 trained than others.

The conditions under which they work may l

(

25 be not all that good compared with operators.

Their I

HERITAGE REPORTING CORPORATION -- (202)628-4888 1

~.

i 43 i

1 qualifications are very variable across the country.

Some 7

c 2

utilities have their own maintenance people.

Some appear to 3

contract maintenance out.

They may be using maintenance 4

people who are qualified in a different state and may be e

l 5

absolutely no way of tracking the qualifications of the 4

L J

6 individual maintenance workers, and that cannot be good for a 7

high-level, high quality maintenance program.

8 We would like to see--whenever we say operation, we l'

9 include maintenance throughout this report.

We think it is 10 very important.

That again is something which is being I j

11 think accepted worldwide in the nuclear industry.

i i

12 DR. SHEWMON:

I certainly agree with your comment on 13-the need to have emphasis on maintenance.

Systems oriented j

14 approach sounds like one is in favor of motherhood but doesn't 15 mean an awful lot more to me.

L i

16 System criented, do you mean maintenance is 17 important, or you should look for ramifications or what?

~

l 1

18 DR. HORAY:

You should look for ramifications.

19 Obviously it is important.

Going back to what I was saying a i

I 4

20 bit earlier, I suppose sort of classic in a way Three Mile 21 Island gave you the classical case for the naintenance 22 problems, that perfectly good equipment, equipment that is in 7

i i

23 perfectly good operational state, can be left in an improper i

24 state as a result of maintenance.

Maintenance work, goes and l

r 1

I 25 workv on it, leaves it in a valve closed that should be open, t-1 f

i 1

l l

4 HERITAGE REPORTING CORPORATION -- (202)628-4888 l

r r

. b

}.

44 l

1 power-off that should be power on, and because--the systems

-l i

l

(])

2 approach is not just motherhood because it says that the point f

3 at which research is required is the coupling between l

I 4

operation and maintenance and management.

'I 5

How can you ensure that the people in the control

.h 6

room know exactly the state of the plant given that 7-maintenance is finished?

What kind of communication is there j

8 between the maintenance teams and the operator?

Are the 9

maintenance people simply regarded as slaves who come in and i

10 fix things and see themselves as that, or are they seen 11 actually as an important component in the system?

Do the I

12 operators care about the maintenance people and the way they l

13 do their work in such a way that there is a strong O

14 relationship with them?

They understand that the two of them, 15 the maintenance and the operators, are entirely dependent upon 16 each other for the way the plant works?

17 There is a famous picture in the, one of the EPRI 18 publications back there about 1977,

'78.

when Lockheed j

t i

19 Corporation looked into the deaign of power plants, l

20 maintainability, which shows a picture of a maintenance worker 21 sitting on the floor with a manual in his hands.

The caption

}

22 is this is the only case in which a maintenance worker was 23 seen to consult some procedures.

24 And I think we don't know, we don't appear to be,

)

25 either we don't know or don't appear to be using the knowledge

{

i l

HERITAGE REPORTING CORPORATION -- (202)628-4888 i

i 45 1

1 as to how to get the best quality maintenance out of the j

[}

2 maintenance workers and how to couple the quality of r

3 maintenance to operation.

It is not isolated.

This is what I l

4 mean by systems.

That it is absolutely classical that you get j

5 faults where the, something is indicated as incorrect in the 6

control' room, maintenance people go out, they work on the l

l 7

wrong unit, wrong train.

We are told by NRC that that ir the t

i 8

most common failure of maintenance is wrong unit, wrong train l

1 9

maintenance.

10 Now that shows that there is something wrong not i

11 just with the labeling on the plant, but there is something 12 wrong with communication.

They shouldn't go to the wrong t

13 unit, wrong train.

Probably a basic ergonomics, they would be

(

i 14 able to tell that they were working en the wrong unit, wrong i

l 15 train.

And somebody ought to have noticed when they were j

16 doing that back in the control room and nanagement when they j

17 signed it off.

Clearly there is, when you get failure of f

l 18 communication like that, you are talking about systees i

t 19 problems.

l 20 MR. EBERSOLE:

In fact it is only in recent months 5

21 that maintenance is surfacing as a matter of safety interest, p

22 I am going to be astonished if NRC and ACRS even takes t

i 23 significant interest in that aspect of safety.

i f

)

J4 DR. MORAY-I mean it is clearly--

J5 MR. EBERSOLE:

It is dull.

It is dog wor.t.

i i

j l

HERITAGE REPORTING CORPORATION -- (202)628-4888 4

a

l 46 l

1 DR. MORAY:

That's right.

)))

2 HR. EBERSOLE:

He matter how significant, if it is 3

dull, it is tossed off the table.

4 DR. HORAY:

dell, I think there is enough, there 5

have been anough catastrophes on various scales in the last 6

few years-at chemical plants.around the world and so forth, it 7

is now, my impression in talking to people in Europe and 8

Canada and the States is that everybody is beginning to 9

realize the importance of maintenance and there is, climate is 10 shifting.

I think what you have now got to do is sell it as 11 an interesting research topic to people who might want to do 12 it, and that may be difficult because as you say, certain I

13 aspects of it--I don't think it is dull when you get problem i

O f

14 of that severity.

It is interesting.

15 MR. EBERSOLE:

The common attitude, that is the 16 janitor's job almost.

17 DR. MORAY:

That's right, and that is a recipe for 18 catastrophy.

19 MR. EBERSOLE:

There is a cultural problem.

It is a 20 career problem there.

2.1 DR. MORAY:

Yes.

Incidentally, one thing that we 22 mentioned that I would like to say is that there is a, one 23 tends frequently to look at other countries to see how it is 24 done there.

Whether it is regulation or maintenance or j

25 whatever, I think that is very difficult to do.

l HERITAGE REPORTING CORPORATION -- (202)628-4888 w

=

't 47

)

l l

1 One of the problems about research in this industry a

f 2

is that if you look at France, you look at Britain, look at

)

l 3

Canada, look at Japan, it is not at all easy to decide what l

l 4

you can learn from their experiences.

One should not

{

}

5 underestimate the cultural differences between the way people

)

f 6

work.

I have been struck by the fact that frequently in the l

7 United States I hear that operators complain about how boring f

'[

8 the task is.

Now the funny thing is in Canada the reactors l

9 are run by computer, and all the operator does is acknowledge 10 alarms on the computers, and yet I don't hear Canadian reactor l

l 11 operators saying it is a boring job despite the fact that they j

i 12 do these in a sense more than the American operators.

l 13 And I asked some operators in Britain a few years

(

14 ago whether it was boring.

They said no, it is very i

I 15 interesting.

And I suspect that this reflects national 16 characteristics.

It may very well be the case that Americans 17 like to feel that they are in the action the whole time and 18 therefore if they have got a building that is running smoothly 19 and doesn't have to be tweaked the whole time, it is a boring 20 job.

I 21 And I think there are more, I think there is more t

l 22 importance in national characteristics than one is sometimes I

23 inclined to admit so I think it is difficult to learn.

One 24 has to be careful about the lesson we draw from other

(:)

25 cultures.

You may remember that I think it was Oscar Wilde i

I HERITAGE REPORTING CORPORATION -- (202)628-4888 i

i 48 l

I said America and England were would countries divided by a t

(}

2 common language.

I 3

MR. EBERSOLE:

Can you translate some of what you j

j 4

say about the aircraft industry, aviation and pilots?

l t

5 DR. REMICK:

I'm sorry.

We can't hear you.

6 MR. EBERSOLE:

Haintenance in the aircraft and'the i

1 7

tendency to look on the pilot as the focal point of troubles.

s 8

DR. HORAY:

It.is the ireny the more automated a 9

system you get, the more you put computer in, robots in, the 1

j 10 more the system becomes autonomous, the more it is clear that r

i 11 human error is going to be maintenance error.

Ultimately in 12 the turnkey factory the only human errors are going to be i

13 maintenance errors, and as soon as you start thinking about I

j 14 that, and reflect upon the fact we are upgrading systems, I

15 including nuclear plants, more and more automation, it is L

i 16 clear that a major thrust toward maintenance has to be made i

t I

[

17 because the more successful you are modernizing the plant, the 18 more dependent upon maintenance you become and the higher the j

t 19 qualification the maintenance force is going to have to have

(

20 to deal with it.

i 7

21 MR. EBERSOLE:

Would you be interer'ed in I

j 22 approaching the terrible problem that we have never solved f

23 about when do you automate and when you do not and for what i

24 reasons?

(

25 DR. HORAY:

That is an interesting research topic, l

l i

j HERITAGE REPORTING CORPORATION -- (202)628-4888 I

l

49 i

1 and it is certainly one, it is one that some people, including 2

myself, are actively working on, not surprisingly few people 3

are.

It is not an easy question to answer.

i 4

MR. EBERSOLE:

I know that.

We certainly haven't 5

answered it.

6 DR. MORAY:

No.

j

)

7 DR. EBERSOLE:

Not even close to an agreement.

{

i 8

DR. MORAY:

I think that is true.

I think we don't f

i 9

know e.4ough at the moment.

And the problem is that you used

[

k 10 to be able to appeal to something like physics laws--this is l

l 11 what humans do, this is what machines do best.

That is 12 becoming obsolete.

l 13 MR. WYLIE:

I gather from what you said in your 0

1 14 opening statements that you did not undertake to consider 15 future designs?

16 DR. MORAY:

No, we did not.

i 17 HR. WYLIE:

However, the thing he is talking about, 18 of course, is when you automate, when you do not automate, is 19 something for future designs primarily.

20 DR. MORAY:

Oh, yes.

21 MR. WYLIE:

Also the plant can be designed in a 22 number of ways to facilitate mair'.cnance, for example, the 23 German approach of four trains, so that you can take any train 24 out for maintenance, and not affect your operations.

You also 25 design in on-line testing that does not affect operations.

HERITAGE REPORTI!JG CORPORATION -- (2021628-4888

r"-----~~-

- - - - - - ~ - - -

1 l

5 l

i L

I 1

things like that, that we don't do a lot of in this country.

(

I I

l (}

2 It would seem to me, of course, our committee is facing, there

~3 are a number of advanced designs coming before the Committee f

L 4

that are seeking certification in the next few years, so it is f

l t

5 very important that'we look at those things.

6 DR. HORAY:

Yes.

Oh, yes.

L l

7 MR. WYLIE:. And they are human factors related.

$j' 8

DR. MORAY:

Yes.

Certainly we heard from DOE about j

l

[

9 the inherently safe reactor design, and there was some, some l

l 10 hint, people were talking about having four small reactors run j

{

11 by one operator.

This may be inherently safe, but that t

i 12 doesn't mean there are aren't human factors that have to do

(

r 13 with, to do with workload, operator workload estimation, 14 bordome if you like, shift problems and so forth.

Yes, I mean 15 the fact thqt you are going to more automated system doesn't f

16 mean there aren't human factors prob 1ces, i

17 There are, however, unless you have a turnkey 18 factory in which you switch it on and nobody ever goes in, 19 then you ptan the human factors problems back to the design 20 stage, and I think it is very important to remember that i

I 21 debugging software is probably harder than debugging hardware.

I i

22 As far as we can find out, nobody knows how to debug very 1

l 23 large software systems.

I 24 I was talking te the person at Ontario Hydro a

(:)

25 couple of years ago who is responsible for the software of the i

i HERITAGE REPORTING CORPORATION -- (202)628-4888 b

(_________

_=_

I t

$1 l

1 Darlington and Pickering, and the way you debug the very large s

2 complex software syste=s, you try them out and when you find I

i 3

error, you fix it, try it out gain.

You fix that.

And you l

j 4

come up and curve toward performance where there don't seem to l

5 be any errors.

When you can't find any for a reasonably long i

6 time, you say that is probably okay and then you use it, and 1

[

7 you do not know whether three years down the road buried l

l I

8 somewhere in the software there is something waiting to 9

happen.

Someone called it the pathogen in the system, an 10 accident waiting to happen.

And it is probably impossible to 11 find them.

I think it is literally true that given a 12 sufficiently large software system you cannot guarantee, there 13 is no way you can guarantee to find all the flaws in the i

O 14 software.

Then you get into problems of how--this is getting 15 a bit out of my field.

I am not talking about the report.

I 16 am beginning to talk about some of my own opinions.

17 DR. SHEWMOll:

There is levels of flaws, too.

There 18 is the question of whether something goes to the wrong place 19 or whether somebody by making a mistake can get you, how 20 people can mock-up is something you are more familiar with the 21 variety of than nost.

22 DR. MORAY:

Yes.

There is another problem in a 23 system sense about the software, and that is the way, what 24 tends to happen these days because really first-rate software l

25 people are hard to come by, bit the first bugs are fixed by l

f HERITAGE REPORT!!!G CORPORATIO!! -- (202)628-4888 i

52 1

one person who leaves the company, works for somebody else,

(])

2 and the next few are fixed by something else and he then 3

leaves and three or four years down the road you have got i

t 4

patches all over it and nobody actually knows how it works i-i

(

5 anymore.

And you can never get the-people back, and'it is, i

2 6

you know, there is a sense in which it is probably neither i

7 debuggable nor fixable.

It seems to be engineering solutions.

8 You commission separate, two or three separate sets

l j

9 of-software and two or three separate sets of hardware by l

1 i

10 different computers, literally different; instead of having 1

l 11 two FAXs, I have a FAX and CDC or something, and then you get 4

2 12 software written by two different companies to do the same l

t t

i 13 work, so it is rather unlikely that the factory which sends 1

14 down a particular software package on a particular hardware i

15 package will simultaneously send the other software down an i

16 its hardware package when they are not actually physically the t

r

{

17

same, i

l 18 DR. SHEWMON:

You are suggesting this is a way to i

l

\\

i l

19 take care of common mode failure if say we have got redandant i

20 loops. one is completely different from the other one at least

}

i 21 in software and computer?

{

l 22 DR. MORAY:

That's what I am saying at the computer

(

t f

l 23 equipment level.

I am not a computer science expert, but I l

24 cannot see how else you are going to guarantee real

)

'S redundanc/.

I i

l I

i l

HERITAGE REPORTING CORPORATION -- (202)628-4888 i

t

)

53 h

i l

1 MR. EBERSOLE:

But the--

l

(}

2 MR. MICHELSON:

The hardware is suffering from the l

l j

3 same problem.

At the same time it has also been patched by i

i t

i 4

people who have now left and other people don't realize that l

5 the bug is built into the hardware particularly in control

".t' 6

systems.

t 7

DR. MORAY:

Maybe the lesson, maybe the lesson is t

1 8

simply redundancy is not all what it seems to be.

9 HR. MICHELSON:

It may not be.

l I

10 DR. MORAY:

One tends to rely on, and actually I'm l

11 sorry, I am getting way away from my presentation.

I think 12 one very important thing to remember is that even if 13 redundancy is all it seee.s to be and hardware, that if you put 14 two humans side by side, if you multiplex two humans, you 15 don't get the same effect as multiplicationof hardware.

If 16 you have two people, one of whom is checking the work of the f

other,9 hat way be better or worse or no different f rom having l

17 t

I 18 one of them because what, the first one may think is wrong if 19 it is going to be checked, I don't have to pay so much 20 attention to it, and the second one may think since he has-21 done it, I don't have to check it all that well, and there may 22 be status problems as to one sees the other as his superior.

l 23 and/or whatever, and you really cannot tell.

There is 24 absolutely no way that if you take the probability of huren O-25 error as being P.

if ycu have two humann, that it is P squared I

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

l

s'

.n y

f 54 1

and so on; absolutely not.

i.

y/[ }

2 DR. LEWIS:

I have some long, some experience with 3

larg$ software programs and there it is almost always the case

~

4 1

4 that if ene programmer checks the work of another programmer, 5

he will not find the errors, but if you take a programmer who I

6 has never baen exposed to the subject and put him in the dark

,i 7

roon and force him to do it over again, the answer will turn 8

out different, but people cannot check other people's work.

9 They can only do it themselves in the software business.

10 DR. MORAY:

I this that is a common experience.

It i

.1 is almoni never possible to use sonebody else's program.

You s

l l

12 always end L) writing your own.

l 13 DR. LEWIS:

Back on the subject of redundancy, in O

14 this agency there seems to be a little bit of confusion l

15 between the word redundancy and the word diversity.

At least 16 I think there is scee canfusion, and the question of I

i 17 diversity, you =entioned it in the context of software, having 18 a conpletely different program, parallel, is a tradectf i

19 because sometines it is better to have technical redundant i

20 corponents.

vther times it is better to have diverse l

l 1

21 components.

Depends on the failure rates, and the degree to j

I I

}

22 which you heve conpronised yourself by going to diversity.

It I

1

'3 is by no.reans a trivial question.

l i

l 24 DR. M(RAY:

I don't think it is.

And it is not a j

05 trivial question when you are talking about humans.

HERITAGE REPORTING CORPORATION -- (202)623-4S88

c g

e ;e,;

-y

+

q..

6 i

~

55 i

a e

1-MR. WAD:

Why don't %c l.dkb a fifteen-minute brea'k

- (Y,

2, ef.this point?

s,)',.

liR. REMICK:

Reconvenerat ten minutes after ten.

s Llj,

4 (A brief recess wa3.taken.)

.a 5

DR. REMICK:

Can we please reconvene, Mr. Ward?

6 MR. WARD:

Okay.

Neville, contir.ue as you will.

L f

DR. MORAY:

With-your permission, I will get on to 8

the, some of the substantiv'e recommendations that we have, we 9

wish to rske in the record.

I 10 The first one nas'to dc. to do with how research 11 should be conducted, and there are a number of tcpics that we 12

_want to raise here.

L 13 One is that a lot of redearch in the past has been 0

14 run through ar.d by the national laboratories who have done a 15 mery goed job, but we would like to see the rysearch. community 16 cxtended to try to bring in more people from universAtie.3 snd 17 o'.her research instituter.

-13 He ?lse think that the quality of the researcu would 19 be imprx ed by peer review, and we think the peer review i

20 should occur not just at tr e end of the research but actually l

21 at the time when RFPs are prepared.

It would help--the NRC 22 human factors g:vour has suffered from being very undermanned 23 and overworked, and I think that one of the ror. sons that they 24 have had to use the national laboratories as intermediaries in

(~I) 25 running their research is because of that.

1 HERITAGE REPORTING CORPORATION -- (202)629-4338

~

__-_____.____._..__...-__._______.._-..~-_____.____..._.m

___-__m_m L

g -

56 i

i i

1 Now the trouble is that that's wasteful of funds

(

-l

[

because everybody is creaming off overheads as you go down-2 3

layer after layer, and also really it would be preferable that i

i' 4-the NRC should manage its own research program.

For that they i

5' need more people.

l 1

t l

6 But they could make use of we feel something rather j

I 7

like ACRES but just for the human factors, and I believe I I

)

i 8

have heard that Mr. Beckshard may be in fact implementing j

ri 9

something like that, sort of an advisory group on human I

10 factors so that at the time that research problems were l

l l

11 formulated and an RFP'was sent out, that would be subject to l

I i'

l 12 pee't review.

The bids would be subjected to peer review, and l~

13 the reports at the end of the research would be subjected to l

j 14 peer review.

l b

I 15 This has been done once recently in their programs l

j-4 11 6 with I think considerable success in a program of research on f

i I

17 modeling the human errors, how human errors arise.

That's a l

j i

i 18 standard way of getting good quality research out of the i

j 19 research community.

It wouldn't be particularly expensive.

I

[

20 think you could get people, find enough people who had, were l

21 prepared to give their time in the public interest to do this.

l I

?

t 22 DR. LEWIS:

I note with some amusement your vugraph j

23 says you recommend involving a diverse group of knowledgeable l

l l

24 people, but you don't say anything about redundancy.

t i

C:)

'5 DR. MORAY:

Yes.

j l

1 l

l I

4-'

HERITAGE REPORTING CORPORATION -- (202)628-4888 f. ---

~

57

1 MR. WARD:

Every committee is redundant.

()

2 DR. MORAY:

The thing is that one thing that the 3

peer. review process might be used for is in fact to try to get 4

the research to ensure the research is slanted toward i

5 usefulness.

I would like to see that done.

There is a i

6 tendency if you get universities involved in doing 7-research--maybe I can put it this way, that the panel felt 8

that it is important to see the results of research not just 9

as the uccumulation of facts.

I will come back to this when I 10 talk about PRA work, but essentially the reason for doing 11 research on human factors in nuclear power safety is to see 4

12 the existing situation as being one which is sending out i

13 signals, even think of it in control theory as signals, that i

14-the existing situation sends out signals saying there is 15 something wrong with the system, all right, accidents, t

16 incidents, and the point of research is to act to take these I

(

17 error signals if you like in a closed loop sense and generate i

18 appropriate control actions.

19 P.esearch is not.just to acquire information, and in f

20 order to get academic, university researchers particularly to I

L 21 really work in that context, I think the peer review would be 22 one way of doing that.

Peers may be not just academic, also i

23 be people from industry, to help NRC's small human factors 24 staff to monitor the quality of the research.

That's--yes?

l ()

l 25 DR. REMICK:

What is the evidence to the first l

l l

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

~ - -

.~

E 58 1

sentence-of your second' paragraph there that there are

~2 barriers to accessibility.to simulators?

4 3

DR. MORAY:

It is quite, well, it is quite simply 4

this.

If I want to do research on human behavior in the 5

operation of a nuclear power plant, I~can do it at about three 6.

separate levels.

I can take a very small'and specific problem 7

and do it in my laboratory.

I can use my IBM PC or work 8

station or whatever and simulate a part of a display.

'If I 9

want to find out, for example, whether one kind'of display is 10 more legible than another, whether analog display is better 11-than digital displays, I can do that in the laboratory, and I 12 can do it sufficiently well to be sure that my results will 13 transfer to a real situation.

.(

14 If I want to do research on what happens over an 15 eight-hour shift when people are controlling a real, something 16 like a real plant with two or three people involved, and the 17 kind of interactions which are involved in a real nuclear i

18 power plant, then I need something which embodies the 19 properties of a real plant, and that's a simulator.

That's 20 the other extreme.

In between there are part task simulators 21 and so forth.

22 DR. REMICK:

It is a very strong statement--there 23 are barriers to that, and that sounds as if somebody has been 24 turned done.

I am wondering what evidence there is that O

25 people have been turned down trying to get access recently.

l l

HERITAGE REPORTING CORPORATION -- (202)628-4888

59-1 DR. MORAY:

I have talked to utilities once~or twice 2

and said you know, I have certain research topics which I 3

would like to investigate in connection with this, and the

-4 topics seemed to them'quite sensible, and the answer is--is 5

there any chance of being able to do it on your simulator?-

~

6 And the. answer is no because we use our simulator every day-7 all day for training, and licensing, and it is just we simply 8

cannot provide you with a time.

It is so expensive to run, 9

and it is so heavily used that we can't set aside time for 10 research.

Now I am not saying it is impossible.

11 DR. REMICK:

Is this in recent years?

12 DR. MORAY:

Oh, yes.

13 DR. REMICK:

Has any effort been made to utilize the O

14 NRC simulators?

2 15 DR. MORAY:

They don't, they don't--

16 MR. WEISS:

No.

We just acquired them.

They have 17 not been used for research at all.

18 DR. REMICK:

Hight they be?

19 MR. WEISS:

It is possible, yes.

20 MR. WARD:

I guess one problem with that, of course,

[

21 is that for at least some of the research you want to do, you 22 need not only the simulator but you need a crew.

23 DR. MORAY:

That's right, By barriers we don't mean 24 malicious barriers or barriers of ill intent.

We just mean O

25 that in fact, you can't get at them, for whatever reason.

The l

HERITAGE REPORTING CORPORATION -- (202)628-4888

. ~ _ - -

60-1 facilities are not available.

I mean there has-been talk of a

(}

2' national center for either nuclear human factors.research'or

~

3

complex systems research.

4 D R'. REMICK:

The thing that worries me, by that you 4

5 have the simulator, maintaining a simulator up to date is a 6

continuous problem, and you talk about crews.

If you are 7

going to have a national center, you are not going to have so it seems to me that utility 8

knowledgeable operating crews, 9

simulators are the best.

I do know of cases where utilities 10 are making their simulators available for removal or even for F

11 university course work, systems courses and so forth,- so some 12 utilities are doing it.

I was just wondering how widespread 13 the barrier is.

14 DR. MORAY:

On the panel when we--it was felt there 15 were several of.us who were interested in doing research, in 16 selling people from the university or research groups in a 17 vender supply and so on, and up until'now, say a year ago, the 18 feeling was that it was extremely difficult to get access to 19 simulators of this kind.

20 What we are saying is that there is a real, already 4

1 21 two kinds of problems of transfer of research.

One is if I do 22 it in the laboratory, it may not work in the real world.

And 23 that's notorious.

I have to, I do, personally I do research 24 on fairly high technology pr^ cess control type of topics.

It O

25 is, by my standards, the work I do is expensive, slow, and f

HERITAGE REPORTI!!G CORPORATIO!! -- (202)628-4888

[.

61 i

[

1 difficult, and I think some of it will transfer to real life i

r~)

2 tasks, but'I am.not sure.

At some point or other I will go to l(3 -

3 somebody with a simulator and say I have got all this work i

i l

4 done, now I would like to try it out in a real situation, can i

I 5

I'use your simulator, and they may say yes.

That's a sort of l

l 6

intellectual problem of transfer of results.

I i

1 7

Whether the laboratory results generalize to the l

i L

F 1

j 8

real world; in human factors research, it frequently doesn't i

9 unless you are very e reful how you do it.

I t

1 J

10 The second reason for wanting to get access to 11 simulators to do research is I think plausibility.

If you

)

i i

12 want the industry to believe that there, the results you find I

i i.

I 13 actually will make a difference to their plants, it is.much

(

l 14 more convincing--

l' I

i l

15 DR. REMICK:

I am not questioning the need to use I

I i

16 the simulator.

It is a question about whether there is access 17 or not, and I think one way, that experimenters have to get J

18 the utilities or the industrial organizations interested in i

19 research so that they would help make those facilities 20 available.

I 21 DR. MORAY:

I agree completely.

J 22 MR. MICHELSON:

Have to do a sales job.

23 DR. MORAY:

Absolutely.

In our report, we suggest t

24 in fact that organizations like MUMARC and INPO could be sort i

?

O-25 of brokers between the university community and NRC, that if l

t i

l HERITAGE REPORTING CORPORATION -- (202)628-4888 l

t

i-i 62 r

1 NRC--another way of getting cooperation in less adversarial l

l ()

2 thir;gs which is not going to in any way imperil' the quality of l

3 regulation is to, for NRC and INPO and NUMARC to-get together i

i 4

to provide research help, to provide research facility access i

5 for the people doing the research.

1 l

6 You know, don't forget it is only recently any I

7 simulators have been around.

If you are talking five years i

j 8

ago, you won't have had access because there weren't any.

I i

i 9

DR. REMICK:

It was why I asked for recent evidence, t

10 DR. MORAY:

It may be getting easier.

But it is not

{

l l'

easy.

j 12 DR. SIESS:

Again, with relation to this slide, but I

13 another aspect of it, with reference to peer review, in I

(

14 another area of research where the NRC had been urged to get i

1 15 peer review of research, reports of research results, the NRC t

f 16 response has been to direct the researchers to publish in l

)

I i

(.

17 referee journals.

l 18 Would you consider that an adequate form of peer l'

19 review?

e i

20 DR. MORAY:

No, I wouldn't.

That's an adequate form j

l l

l r

21 of peer review for ensuring that people get tenure on the l

i l

22 basis of the research they have done for NRC, but that's not i

23 really the issue.

l I

24 The issue is peer review which both ensures the 25 scientific quality of the work, and also ensures that it is HERITAGE REPORTING CORPORATION -- (202)628-4888 u

63 1

seen as relevant to the solving of industrial problems, and

[}

those are not necessarily the same things.

I was saying 2

3 during the break that we are faced at the moment with a rather

'4 bizarre situation where we have a professional journal called 5

human factors, and now there is talk of founding a send one 6

called applied human factors, and I must say I find that 7

strange, because if human factors is not applied, what are we 8

doing it for?

I mean--and I think that really is a serious 9

issue.

10 Another problem, of course, is is it the case that 11 we have a sufficiently sophisticated group of human factors

.12 professionals who could peer review nuclear human factors 13 work?

And I think the answer to that is probably yes.

There 14 was enough, there have been enough people involved in the i

15 first few years of the NRC human factors program as 16 consultants and contractors and research workers that we can 17 find it.

There won't be in another few years unless the 18 program runs again, but yes, you could find people 19 sufficiently knowledgeable to do it.

They are not all that 20 many, but there are enough.

It will be better than not having 21 any.

22 So these recommendations toward improving the 23 quality of research.

l l

24 (Slide)

(

I I

25 DR. MORAY:

Continuity, we do feel that it is more l

l l

HERITAGE REPORTING CORPORATION -- (202)628-4888

64-1 important to have continuity than to have very large funding, f))-

2 not more than to have adequate funding, but certainly 3

continuity of research is important.

4 NRC's human factors people have suffered-from sort 5

of on again, off again decisions.

Programs get put on hold or 6

cancelled and then started up again, and through pressures for 7

various kinds inside NRC.

That is not the way to do good 8

research.

You have to maintain the research community's 9

interest if people are going, if the good people are going to 10 go on bidding to do the research, and it is, a sustained 11 moderate program over several years is going to be more 12 productive than a few large one-shot projects we believe.

13 (Slide) 14 DR. MORAY:

This, we have transfer of knowledge, we 15 have already talked about.

There is a large amount of human 16 factors knowledge out there.

It is not nuclear specific, but 17 it is has to do with everything from shift work and 18 organizational behavior down to knobs and dials in the control 1

19 room.

It is clear that that is, has not in the past been I

t 20 adequately used.

That was documented by the EPRI studies of 21 control room design back in the late '70s.

Some of the new 22 control rooms are now looking much better and have used human 23 factors work.

i 24 In many cases, it is not research that is needed but

(

25 application of existing knowledge, and to have that happen, we HERITAGE REPORTING CORPORATION -- (202)628-4888

[

~

65 1

have to improve transfer of knowledge from the data-base to 2

industry, to designero, and to management in particular.

3 We have some' recommendations to how that might be 4

improved, but clearly there is something not working well at 5

present.

The information is not getting transferred.

Now 6

again a few years ago it was quite difficult to find the data.

7 Now there are a number of handbooks.

There have been several 8

handbooks published in the last two or three years.

There is 3

a major handbook of human factors information about to come 10 out from the United States Air Force, and for basic control 11 room decisions, there should be no problem at all in finding 12 data now.

There really shor.ld be no difficulty in finding 13 data on things like shift work, and the research here is not 14' content research, but research on better methods of 15 transmission of information.

We would like to see some 16 methods done in that way.

17 DR. REMICK:

In arriving at this recommendation, was i

18 there any consideration of whether the NRC should publish an 19 annual review comparea ta possibly DOE or EPRI?

20 DR. MORAY:

The reference to the annual review 21 starts from the fact that NRC does in fact publish an annua 22 review of its research.

At least in the human factors, at 23 least it did when it had it, but when you look at that, it is 24 not in a form which would be particularly useful.

If I were a

(:)

25 plant manager, and I wanted to understand what new research l

l l

l HERITAGE REPORTING CORPORATION -- (202)628-4888 t

_-.__,-,.,_.,,__._,,-_.._,,._.__.,_,_,-.m.__-_.

i 66 1

had been done'which would help me to improve my plant, it is

((]).

2 clearly a document to, for internal consumption, to tell the 3

rest of the organization what has been going on in this past 4

year.

5 Now we want to go beyond that. -What we would like 6

to see done is an annual review of research which is relevant 7

to the need of the nuclear industry, not je e research that is 8

done by the NRC.

Rather like the annual reviews of physics, 9

annual reviews of psychology, annual reviews of pharmacology 10 and-so forth.

11 Yes, it could be done by any of those bodies.

We 12 don't really mind.

In fact, we would like to see this as 13 being a compendium of research which is relevant to improving 14 human factors in the nuclear industry regardless of where it 15 comes from.

It should combine work done by NRC, by DOE, by 16 EPRI, by psychology, by, you know, it requires people to scan 17 the journals and find out all sources of research, and then 18 write it in a form which would be let's say attractive to 19 industry.

That it would become--

20 DR. REMICK:

That might be a function of EPRI rather 21 than the NRC it seems to me.

22 DR. MORAY:

Well, we do think that, we keep coming i

4 I

23 back to this in a sense, that there is no reason why EPRI--we i

24 look, in the report, we do discuss the possibility of EPRI, O

25 INPO, DOE, IEEE even doing research, and we spent some time a

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

-_~,__,_,___.-,,......_.__..-,__.,.....__,,_._....___.__________.._,.I

67 i

1 1

considering whether a regulatory agency should in fact do-c 2

research, and we came to the conclusion in the end that yes, 3

it should, because while EPRI's research is certainly of a 4

high quality, they have done some excellent work, some of 5

their publications are absolutely first rate, it is clear that 6

their agenda is going to be strongly shaped by the perceptions 7

from inside the industry as to what is important and what 8

isn't, and INPO doesn't do research.

It is not in its 9

charter.

And DOE has its own interests and its own job.

And 10 IEEE is not a research organization either, and when you go 11 down this list, you are left with the conclusion that yes, NRC 12 must direct research.

13 But we would certainly favor cooperative activity.

L 14 The problem is if you give it to EPRI, in a year or three 15 years down the road that EPRI doesn't, decides that it is 16 worth doing, then NRC will have to take it back, should take 17 it back anyway.

We would not object to NRC coming to an 18 arrangement with EPRI whereby EPRI would do it, but I think it 19 needs pushing from NRC, and not just left it to EPRI.

20 Yes?

21 MR. SERIG:

Do you envision a document something 22 like Mil Standard 1472 where there is a custodian and that 23 document under goes periodic upgrade where knowledgeable 24 experts within the subareas of that document contribute to the 1

25 upgrade?

HERITAGE REPORTING CORPORATION -- (202)628-4888

68 1

DR. MORAY:

You don't need a new document like that.

j }

2 There are enough of.them around anyway.

There is the Mil Spec 3

1.

There is the EPRI volume on control rooms, there is the 4

EPRI volume on design maintainability.

There is the USAF 5

engineering data compendium.

There are lots of them around.

6 No.

What we are talking about is simply a 7

relatively small document, put out on an annual basis which 8

summarizes research from all sources whether it is social, 9

whether it is sociology, or an NRC contract on a highly 10 technical problem like EOP design, and just is available.

.11 Each year a volume comes out and says look, here is a list and I

12 a short description of work that is, that has been done in the 13 last twelve months or more likely to be year before that, 4

(

l 14 which is of relevance and we think of usefulness to industry, P

15 to improve the human factors efforts, improve safety and 16 productivity.

l 17 DR. REMICK:

Would the questioner please identify I

L 18 yourself?

19 MR. SERIG:

Dennis Serig, Liability Human Factors l

20 Branch of the RAS.

I 21 DR. MORAY:

I wouldn't like to see a big volur1.

22 You just added little bits and I think this should be sort of 23 annual.

24 MR. MICHELSON:

Is this annual form that is produced f

25 in these other fields, is it prepared by people who have l

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

69 1

reviewed these articles and are knowledgeable of how they-

-2 might-be applied with some then discussion of how they might

{

3 be applied?

4 DR. MORAY:

No.

The existing ones, annual reviews 5

of physics and chemistry and so on,-are scholarly compendia.

6 MR. MICHELSON:

What the industry I think needs in 7

this case is something that the people who are already very 8

busy can pick up and without too much additional effort at 9

least find out if there is something here I need to know about 10 and then it can go back and give you the~ detailed articles.

11 If you don't whet their appetite, they are not going to pay 12 any attention to scholarly documents.

13 DR. MORAY:

They shouldn't be scholarly documents.

O 14 They should be usable documents.

i' 15 MR. MICHELSON:

What I think the nuclear industry 16 community needs is somebody who sits down and who understands l

17 all this work and who can convert it into ideas at least as to 18 how it might be applied, and I, I like, that's the kind I f

19 would like to read because I don't have time to read more than l

20 that.

21 DR. MORAY:

I agree completely.

I am not, we are 22 not--when I talk ab'out research in this context today, I am l

23 not talking about scholarly research, to be published in 24 archival journals.

I am talking about research which is i

25 useful.

l

[

l HERITAGE REPORTING CORPORATION -- (202)628-4888

70 i

1 MR. MICHELSON:

Scholarly research needs to be done, i

[}

2 but then somebody needs to convert it into language and ideas

{

3 understandable to the general designer or the general l

l 4

maintainer, whoever'.

1 5

DR. MORAY:

Yes.

I have never understood why people i

6 think that is a particularly difficult undertaking.

1-I l

7 MR. MICHELSON:

It isn't, but it is not, it is dog l

I 8

work so to speak, and not, a scholarly individual doesn't want I

r

(

l 9

to get his hands dirty with that sort of thing.

l l

10 DR. MORAY:

I think it is quite fun actually.

f i

11 MR. MICHELSON:

You are perhaps the exception.

I 12 DR. MORAY:

It is a worth,.you get a lot of reward r

s f

l 13 for actually--but I agree.

It doesn't get you tenure.

(2) 14 MR. MICHELSON:

Doesn't get the originality reward.

15 DR. MORAY:

And doesn't get you tenure, and that is-l 1

16 a problem, but it is, there are people who can do it.

All we 1

17 are saying is that we really need, there is no point in doing 18 the research if it doesn't get used.

We are not asking NRC to t

19 support basic research for the good of the research community.

20 We are talking about a program which must lead to work which i

t 21 is not merely useful but used.

Otherwise there really is no I

22-point in doing it.

23 So whatever I say, please bear that in mind.

That's

}

24 the, I may talk as if I am thinking about scholarly research i

O 25 of no particular use whatsoever, but that is not actually the l

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

l-l 71 1

)

1 point.

- j 2

Dissemination of nuclear industry-human-factors

)

)

3 research, we do think'that'there is a need to improve t

.t 4

communication, and in particular, tnere is a lot of useful i

l-

)

5 information at NRC, at EPRI, at INPO.

It is difficult to find t

6 it at INPO because as you probably know, you can't get at INPO 7

unless you are in the industry.

I can't get hold of INPO i

l t

3 8

documents at all.

If I ask INPO for a document, a couple of f

9 times I have asked for some of their documents which are j

I i

f 10 excellent to use for teaching, and the answer is no, can't 11 have them.

You have to go to the utility.

If the utility I

i 12 will get them for you, you can have'them, but INPO is a closed 1

l 13 book to the research community, unfortunately.

14 But it would be I think a step in the right 15 direction to try to get some kind of coordinated bibliographic 1

i 16 data base with NRC and the other agencies.

j l

l 17 MR. MICHELSON-Human factors data base, is thac l

I 18 what you mean?

s i

I

(

I 19 DR. MORAY:

I am talking about human factors data l

I l

20 base.

For all I know, the other ones exist.

i

[

21 DR. REMICK:

When you say human factors data base, f

l 22 how broadly are you defining it?

You told us earlier that it l

I 23 was a very broad definition including management.

l 24 DR. !!ORAY :

At least, when--you could define it

[

i C:)

(

25 let's say at least to include those publications which have in l

l I

i

{

HERITAGE REPORTING CORPORATION -- (202)628-4888 L

. _, _. _ _. _ _... _ _ _ _.. _ _ _ ~. _.. _. _... _ _ _ _ _. _. _ _ _.

l/

Y i

72~

i 1

the past come out of NRC's own' program.

p

(}

2 DR. REMICK:

How-broad?

Would it include management 3

issues?

l..

l 4

DR. MORAY:

Yes.

They have sponsored.research on j

l l

5 management issues.

6 DR. REMICK:

You indicated it includes PUCs and 7

regulatory--I am not sure how far you want this to go.

i l

i 8

DR. MORAY:

I want it to be one--

.)

i 9

DR. REMICK:

I think this is an excellent j

i 10 suggestion, i

l.

11 DR. MORAY:

It really doesn't take all that much l

12 effort.

It is trivial these days given the computer, cheap 1

1 13 computing power now.

And I would say that if I were at NRC, I j

14 would want at least all my own documents, all NRC's own

[

15 published documents, NUREGs and NUREGs CRs, to be on the data 1

16 base, with key words search.

That is an absolute. minimum.

j

!i 17 DR. REMICK:

You are talking about--

18 DR. MORAY:

Yes, It shouldn't take--you know, if j

l 19 somebody comes to me and says can I have a complete list of h

20 all your human factors publications, it shouldn't take a

}

21 relatively senior person days of his time to dig them out.

I 22 DR. REMICK:

I guess I am still confused because l

l 23 human factors as you defined it includes things that you said l

24 environment.

It goes out beyond the technical issues to

_(

25 the--I mean let me look at your chart.

How far would you want I

i HERITAGE REPORTING CORPORATION -- (202)628-4888 l

=

i 1

73 i

that because if you get too large a data base, then it is very i

'l i

2 difficult to use.

)

3 DR.-MORAY:

No.

That's not true.

If you have a 4

decent accessing system, retrievable system, it is not 5

difficult to use at all.

I use Dialogue regularly which has h

6 thousands of journals on it, and I don't have any problem 7

using it at all.

It's just a question'of will you get a good 8

data base?

9 DR. REMICK:

Suppose I--

10 DR. MORAY:

I would say NRC should put all its 11 NUREGs and NUREGs CRs into a data base with a good retrievable 12 system.

13 DR. REMICK:

Now I want to access human factors.

14 How far do I go?

i 15 DR. MORAY:

You say human factors, and it says we 16 have 400 articles, and you say human factors and control l

17 rooms, and it says we have 20, and you say human factors and 18 control rooms and procedures, and it says we have four and you 1

^

l 19 say give me the abstract.

20 DR. REM CK:

I am looking for the definition of 21 human factors in that sense.

22 DR. MORAY:

With a modern data base, you can work f

23 from the raw documents.

If it is in the title or the i

24 abstract, the retrievable system will pick it up, t

25 DR. REMICX:

How about management issues?

t HERITAGE REPORTING CORPORATION -- (202)628-4888

(

,.-. _. - - -. -. - - - -. - - ~ - - - - - - -. _ _. -. _ -. -. -. _

s 74 j

^

l 1

DR. MORAY:

You type management, human factors and i

I I

l

[

2' management and nuclear power.

That's what I do.

When I get a L

i, 3

contract, that's what I do.

l 4

MR. MICHELSON:

This is heavily dependent upon

{

l' l

l-5 writing abstracts that are pitched toward the system of 6

searching.

If you are going to device--abstracts aren't now i

j 7

prepared necessarily that way, so it is a lot more difficult.

l 8

DR. SHEWMON:

Many journals have been having key i

s I

9 words as a requirement for years, j

i i

10 MR. MICHELSON:

And if you write your abstract, the i

11 key words, it is great., but if you are writing an abstract not 12 having anything much in mind--

13 DR. MORAY:

This is a sort of super human fallacy 14 You are saying it would be very difficult to find an article 15 if it wasn't encoded in the right way, if I were looking it up 16 on computer.

It is not easier to find it if you are not 17 looking it up on computer.

1 f

f 18 MR. MICHELSON:

Anything is better perhaps than not l

11 9 having--

l 20 DR. MORAY:

The existing situation.

21 MR. MICHELSON:

Yes.

But it works better, of 22 course, once you know the system and then write the, and j

23 extract it from the system.

L I

l 24 DR. MORAY:

How days you don't even have to do that 1

(

l 25 storage.

You can put the documents in.

i 6

HERITAGE REPORTING CORPORATION -- (202)628-4888

75

'1' MR. MICHELSON:

I have tried those systems, too.

It

/~}

2 is an exper4.ence trying to figure out how to search such large

\\s 3

data bases.

4 DR. MORAY:

It is easier to search a large data base 5

than a poorly organized large library which doesn't have the' 6

journals, f

7 MR. MICHELSON:

Always easier.

8 DR. MORAY:

That is all we are saying at the moment.

9 It is virtually impossible to find out the data and with very 10 little effort and money it would become accessible to people 11 at the push of a button.

12 MR. MICHELSON:

NRC, there is even greater 4

{

13 interesting source of human factor information, and that is in

(

14 the form of inspector's reports, deficiencies reports and so 15 forth, which again there is no way to search because they are 16 not key worded into a search system.

I don't think you 17 necessarily meant to go to that extent, but I think there is

\\

18 some valuabic information there that you just simply can't i

j 19 retrieve easily.

20 MR. WARD:

I think we probably need to move on.

f 21 DR. MORAY:

Right.

Let me come to the specific 22 research topics we have chosen.

You may remember that I said 23 that out of a very large shopping list we have decided, we 24 have tried to narrow down the proposals and we have chosen a i ()

25 number of topics for immediate, which we propose as immediate l

HERITAGE RE ORTING CORPORATION -- (202)628-4888

{

l

i i

j l

76 1

I i

I 1

1 research topics on the basis of three criteria.

Some research I

-([

2 topics may have a critical impact on safety and must be 1

3 addressed immediately.

Some areas, research is needed as a i

t l

4 basis for evaluation.

And some research may be essential l

1 l

5 building block for long-term program, and in all cases, the l

l t

~6 research should be aimed at management, maintenance, and other l

7 ancillary workers as well as control room operators.

4 8

(Slide) a l

I 9

DR. MORAY:

The first area of research we have i

10 called human system interface design, and you have a j

i 1

l 11 second--were those the ones I gave you last might?

They are l

f i

r l

12 just stuck in the back looseleaf; just before the conclusions i

13 there is an extra set of pages.

And what I am going to do is, t

[

14 for example, this one, human interface, system interface j

15 design, what I am going to do is go into a little more detail l

16 than the last time I presented this work as to what the topics 17 are.

18 l' 1.

KRAMER:

Joel Kramer, NRR--Neville, could you i

19 describe a little bit how the panel made the determination of l

l

[

20 what was critically inportant to safety as your criteria?

i 21 What was the basis for the process?

l 22 DR. MORAY:

Yes.

We began by, we spend sometime i

23 essentially looking through the topics which NRC hadn't done f'

24 research on, looking at the relative weight that had been put O

25 into work in the past, and looking into, considering what we j

HERITAGE REPORTING CORPORATION -- (202)628-4888 i

-. _ _ _ _ _ _ _ _..... _. _.. _.. _.. _ _ _ _ _.. _ _. _. _. _.. ~. _ _ _.. _ _ _. _.. _. _.

t i;-

77 l

j 1

knew about recent incidents at nuclear power, and also going l

2 on the basis of our general, genetal knowledge of, since i

q i

3 several of us have spent a number of years doing consulting or i

[

j 4

work in this area.

i i

4 5

We felt that there were a large number of questions

]

i 6

to which we would prefer to know the answers if we were, if i

i i

)

7 somebody came to us and said how can I improve the operation i

}

8 of plants in this area, we asked would we have an answer for I

9 that?

I i

10 After that we began to look at it in a different I

e 11 way.

We said are there things, are there going to be l

12 innovations coming up where regulation may be required soon, i

13 and we feel that we do not know what the answers should be I

(

14 about this.

And that led particularly to some of the I

15 questions on automation and computer developments, and we felt i

i 16 these were important, these were urgent because we knew that l

17 there were companies and venders who were working on certain 18 kinds of innovation, particularly AI and computer-assisted 19 systems and since they were about to start marketing them, it j

20 was important to find, important that NRC should have answers l

21 to problems about ensuing--because the utilities were going to 22 come to NRC and ask permission to use new technical 23 innovations, so that was the first criterion that we knew of, 24 the existing technological innovation for which we did not 25 know, for example, how to, how to assess them.

I HERITAGE REPORTING CORPORATION -- (202)628-4888 j

i

78 i

2 1

Other questions, the basic research, the long-term

(}-

2 ones, we felt there were certain topics which were going to i

i 1

3 require a great deal of research, most of which would feed l

l 4

into making increasing safety, and therefore we better be I

l 5

started now and just kept going, for example, causal models l

i-l l

6 for human error, so it was really, I think those are the two l

l l

7 major things.

j l

i i

.8 There were certain basic knowledge which we don't i

l 1

r 9'

have, but it is bound to help, and therefore that research

[

l l

10 should be started and should be run continuously for a long i

11 time.

I f,

12 On the other extreme, chere are certain particular

(

l 13 topics which we know NRC is going to be asked about in the I

(

14 regulatory context soon, and therefore one should try to get I

15 the answers to those quickly.

l 5

f l

16 Is that a satisfactory answer?

j t

i 17 MR. KRAMER:

Partially I guess.

The question is for 18 any of these things activity is ongoing, the question is how l

19 important is safety?

How is it measured and how is it 20 determined?

l 21 DR. MORAY:

Right.

f 22 MR. KRAMER:

And that detailed process from a r

i 23 technical standpoint I am still not sure how the panel dealt t

24 with that.

O 25 DR. MORAY:

We did not sit down and say do we know f

HERITAGE REPORTING CORPORATION -- (202)628-4888 E

D

... - - - - -. ~. -.... -. -. -.-. - _ -. -

j 79 j

1 the probability of, the probability of human error of a l

l 2

particular kind?

If we do this research, can we say that the l

i s_

l 3

probability will drop from P1 to P2 as a result of this j

l.

f' 4

research?

Because frankly we don't believe in those numbers l

I 5

in the context of humans.

I 6

I think our feeling was that the research we i

l

{

7 proposed will lead to safer systems, maybe what our natural i

l F

j l

8 judgment, we may regard as qualitative judgment.

We cannot l

9 say by what percentage it will change.

Furthermore, nobody

(

i

)

10 can.

Furthermore, it is probably in principle impossible.

l 11 I guess the answer, I mean the real answer is that 12 as with NRC, most NRC specialist panels working on topics like I

I i

i 13 this, the reason those, the people on the panel are brought j

(

I 14 together is the feeling that their collective expertise and i'

i 15 wisdom over the field puts them in a position to make a l

?

i i

l j

16 collective judgment where there is no, were there are no hard 17 numerical criteria.

If you had hard numerical criteria, you i

t 18 would not need to pay the Na*.ional Research Council to do this i

l l

19 work.

I mean we are being asked to criticize expert judgment 20 which later on puts me in an embarrassing position, but f

c 21 essentially are asking for expert judgment, okay.

I think t

22 that may be the answer you are looking for.

23 In the field of human interface design, human system I

n 24 interface design, the most important topics we feel have to do i

(

25 with computer aiding, either computer based information and l

HERITAGE REPORTING CORPORATION -- (202)628-4888 l

I

f-1 f

i 80 i

t 8

1 display systems, and automation and computer based performance

{

l

(}

2 aids.

The reason we feel that these are important is because i

3 they are examples of things which people are about to try to i'

4 sell to the industry.

They may be expert systems.

They may s

?

I I

l-5 be computed aided diagnosis, or they may be computer based j

i 6

operating procedures.

j i

l

(

i 7

The most critical thing in this area is that nobody l

i i

l l

8

.knows how to assess the quality of expert systems.

I have t

9 done a little bit of work on certai: systems myself and one or j

i 10 two other people on the panel have as well.

It is remarkably I

i 11 easy to build an expert system these days with the software l

l l

12 shells you can buy off the shelf.

It is extraordinarily 13 difficult to tell whether you have got a good one, and I have j

14 read no papers which convince me that anybody knows how to do, j

)

15 to tell whether you have got a good one or not.

i 16 I was looking at a paper that said validation and l

l 17 verification and assessment of expert systems yesterday, and l

t 18 it is garbage, and it is from a major journal in the field, f

19 It is clear that it is not enough as the academic criteria i

20 might be to show that this expert system behaves like a human j

f 21 because the reason you are putting it is it that you want it 22 to be better than a human, but how you tell whether you have i

k t

l

}

23 got a good one or not is totally unclear.

Usually it is an

[

r 24 existence proof.

Switch it on and it gives you some 25 expertise, but we do not know how to tell whether you have a I

l HERITAGE REPORTING CORPORATION -- (202)628-4888

{

=

l Y

' ll j-7 81 l

A 1

I

+

l

~

l

'high quality artificial intelligence system to support l

("

i

.l 2

. decision-making, and we do not believe'that NRC'shouldiget

'E l

I ol l

3 into the business of building expert systems or computer aids, i

('

al 4

or of paying other people to do some.

That is a.real black "l

5 hole for absorbing money.

I I

i 6

DOE has got some people working on certain system l

7 development.

EPRI has people working on axpert system

[

t 8

development, and NRC should leave system development alone.

l 9

Let other people do it.

What they should do is develop l

10 research to enable them in a' regulatory context to say whether i

11 or not a particular computer is good enough to be put in a f

(

i 12 plant, and that is a very important issue.

It is going to j

t 13 come up for judgment very soon,and we don't know how to do it.

I

(:)

i 14 On the operating side, there are also problems to do j

b 15 with computer aided displays, what are the best kind of l

i 16 displays, compqter aided SPDSs, SPDS have become in fact a way i

17 of getting computers into control rooms which are basically in 18 the States not computer oriented.

l t

19 Operating procedures, there is still problems to do

}

i 20 with operating procedures.

The symptom based versus problem, l

21 whether or not they should be computerized or not.

How to I

22 tell when you have a good, valid operating procedure; there 6

i l

23 are big problems in innovation.

One of then is that if you

't I

l 24 give people a new piece of equipment with which they are to O

r 25 work, for example, a new kind of display, say the star graph i

i HERITAGE REPORTING CORPORATION -- (202)628-4888 l

t i

[

82 i

1-1 dia sys, for the, not-the variant displays, one would expect 2

it to take many hours or indeed days or perhaps even weeks for L

i' 3

operators to become used to new equipment.

And it is very, it 4

is ethodologically extremely difficult and very expensive to l

{

i i

5 validate a new method, 1,elatively trivial table top laboratory

}

6 based experiment.

I now hsve to find, I have to practice my l

t l

7 subjects for say maybe screral weeks, 10, 20, 30, 40 hours4.62963e-4 days <br />0.0111 hours <br />6.613757e-5 weeks <br />1.522e-5 months <br />

}

i t

i i

8 before I check my data on trivial table top simulation of l

I 9

small thermalhydraulic system.

If I put in new displays, I 1

10 want to tell whether it is a good one.

Unless it is J

i l'

11 blindingly good compared to the old one, I would expe':t r

r 12 negative transfer effect) to take sometime for operators to l

'13 learn how to use it and to give up their old habits.

To tell q'

~ 14 what their behavior is going to be like in the limit is going.

15 to be difficult, time consuming, and that's not, that's a real 16 problem for innovation.

And one should I suppose require the 17 venders of new equipment to show that they have validated the 18 qualities of their displays.

Certainly research needs to b9 19 done.

There all these~a'reas of human system interface design.

20 (Slide) 21 DR. MORAY:

The second area is personnel 22 sub-systems, and the main things here are maintenance, and 23 enhancement of operational skill, improvements in the j

V 24 licensing examinations, and problems to do with shift O

25 scheduling and vigilance.

I spelled that out a bit further in f

HERITAGE REPORTI!!G CORPORATIOli -- (202)628-4888 I

Ap

,rz a

90 0

9 L-p 83-

. ti 1

Nurn.

2-(Slide) 3-DR. MORAY:

We'stil\\ need better methods of telling 4-whether training is effective or not.

There are'a variety of 5

aew methods of' training being explored in military contexts 6

and in certain other industrial contexts.

Thare is a,^since 7

we now have whole task high fidelity simulators, there is a e_

8 tendency-to use them.

You have to train people on the entire 9-system, may not be the most effective way.

There may be i

10 partict33r.sub-systems on which it is more effective to train g

11 people on a'small simulator, part task simulator, to give them y

12 intense prectice on subsectiona ot the task.

+

a 13 The trouble is if ycu tr ain them on a whole C:)

14.

f'ull-scr.le simulator, it *:akes a long tin ( to run an incident, 1

3 15 2nd yod are'cifectively givi d--the amount of time that they l

36 spend on a particular part of the training given that you are 17 working with a full-scale simulator is relatively small f

f 16 oecause it takes place 30 the context of the entire operav3:n, 19-of the who:e simulation.

It may be that there are certain I

20 p ar ti cular- - t a sk s, say some particular set of manipulations 1,

21 during stvet-up which could be taken out and put in a part i

t i

22 task simulntor which isreery small, very cheap, put on a PC, 23 give people intense practice on that part!cular sub-skill 24 iWich is a particularly difficult one, and it would be far l

35 more effective to train that intensively on a part task HERITkGE REFORTIllG CORPORATION -- (202)628-4?88

,,%-,--n

.-w,,

-_, ~, _ _,,,, _ _ _,, _,,

84 1

simulator and then transfer the training to a whole task 2'

simulator from time to time.

(}

3 Exploratory, embedded training, exploratory l

4 trcining, there is this fundamental thing.about how people i

.5 come to understand the system they are working with.

It may 6

not, be that giving them drills on pre-planned incidents is f

7 not the most efficient way.

There is the problem of training 8

for rare ununknown events.

If the trainer cannot think of an 9

event, then he cannot train the trainee to cope with that 10 event.

And one needs to understand the fundamental problem of 11 how you train people to cope with unknown events beyond design i

4 12 basis interests.

[

13 There isn't time to train people in one sense for

[

14 all the design basis events, and in any complex system there 15 are more ways of it going wrong than the trainer can think of.

f 16 And this is a very important topic.

I L

17 MR. EBERSCLE:

In that connection, I think most i

t 4

18 simulators are unable to take the problem up if you postulate 19 a failure involving total plant, of a single function which is

[

i l

^

i 20 critical, because the designers and the regulators have not 21 required a presentation of a schedule of events which occurs l

l 22 when those unfortunate things happen, and certainly the j

l l

23 computer is in ignorance of what happens and therefore the

[

?

l 24 operator, but those things are quite available if you just C:)

25 search.

1 HERITAGE REPORTING CORPORATION -- (202)628-4888

t 4

(-

l i-85 i

l 1

DR. MORAY:

There are~ considerable evidence from f

!~ 2 LERs and actual history of events to suggest that the biggest j I 3 problem for operators are not the large foreseeable events, j l i l l' 4 large LOCAu.. They are the problems where you get a number of { S trivial or even unnoticed plants of small sub-systems which { 6 really don't make my difference to anything until something 7 else happens and then they discover there was a whole train of f I 8 things. } 9 HR. EBERSOLE: It takes two or three things in { I 10 coincidence to really pile the-problem up. ( a i 11 DR. MORAY: That's right, and it is, you know, the l I 12 problem again is that to use a high fidelity, full-scale 13 simulator to deal vith those sort of problems is really taking O 14 an awful lot of time out of a very large system. [ 15 MR. EBERSOLE: Simulators simply aren't -:esigned to 16 cope with it. Whatever you put in comes out of then. You i 17 don't put those things in. i 18 DR. MORAY: It is very important that whole task 19 simulators should be present, because we know that skill 20 declines when it is not practiced, particularly cognitive l I 21 skills. Central motor skills, not too badly. I rode a 22 bicycle for the first time in about 30 years, and after not 23 riding a bicycle for 30 years you get on a bicycle, you can i I I 24 ride it. Maybe you can't ride it hands off around the corner, i ) 25 but you can ride it, but cognitive skills decline rapidly when [ HERITAGE REPORTING CORPORATION -- (202)628-4888

a L f. l 86 .i 8 1 they are not exercised, and that's why the airlines use [ 2 intensipe retraining in full scope simulators, and the only [ (} l 3 way we know to keep up skills, to keep cognitive skills: L l 4 efficient over a long period, complex systems, is continuous i ( 5 training in simulators, and therefore it is absolutely I l 6 essential to have some experience of full-scale simulation. f l t i t 7 operators distrust simulators which are not exact l ] 8 copies of the plant which they work on, for understandable 9 reasons, so we are not saying that the money has been wasted. l 10 It hasn't--fundamental importance, they are there for training 11 and retaining. Skill maintenance is keeping the skill up once 12 it has got there. The learning curve is an astometric curve, 13 but the moment you stop training, it doesn't stay up there. 14 It continues to decline. And the only way to keep it up is by i 15 retraining at relatively frequent intervals, and so that 16 certainly is an important thing, but one needs more research 17 on how to deal with these other things, particularly how to l 18 train people for the unknown event. 19 It may turn out to be that you don't do the training ( l 20 on simulation. Maybe something else you should do. 21 MR. EBERSOLE: We have recently been inquiring and f f 22 have found that postulating a total AC power plant, there is l l 23 virtually no knowledge of sequential events that occur l 24 subsequent to that. Operator's ignorance of the first pinch i 25 point that he may face where he should have hit something but j i l HERITAGE REPORTING CORPORATION -- (202)628-4888 l i

l 87-i l 1 hasn't, and the point where it'is impossible for him to do I 2 anything because it is too late, it has been permanently i l 3 damaged, I regard _that as a rather serious detriment or void 4 in the' operator's knowledge and ability to cope with the j 5 plant, but it is, the cases we know, that you can't get i 6 anything done about it. 7 DR. MORAY: Well, that's, you know, and I guess a i t -8 part of the research would be to do a review of things, of 9 possible scenarios which need training, work out a way of 1 10 doing it, j i 11 MR. EBERSOLE: It is hardly worthwhile to say when } 12 system A fails, start system B, but that has been the j l' 13 practice. 14 DR. MORAY: I mean in a sense what you want here, _ 15 the distinction which is made in the trade becomes very 16 influential between skill based, rule based and knowledge 17 based behavior. Skill based behavior is highly automatic 18 behavior. Writing a bicycle is an example. You respond to i 19 signals coming from the environment and without having to 20 think about it at all, make the appropriate response. 21 Rule based behavior is essentially procedures. If 22 the plant is in a situation, then I do this. If it is in that 23 situation, then I do the other. And those rules may be 24 spelled out as written procedures or they may be rules which i l 25 are embodied in the head by training. l l l HERITAGE REPORTING CORPORATION -- (2021628-4888

l l 88 j i -1 Knowledge based behavior is a situation where you l 2 look at the information and it does not match anything you O-1 l 4 3 have seen, does not match anything you have been trained for, j. 4 then you have to start thinking what am I going to do about 5 it? 6 MR. EBERSOLE: That was the case in TMI 2. They had 7 no engineering knowledge handed to them, certainly not any 1 L 8 procedure followed. I' 9 DR. MORAY: Right, but in fact operators do very i l R10 well. You want to keep humans in there for the-ability to 11 deal with these sort of things. The question is how do you 12 train for it it? We need research on it. We don't know the l-l 13 answer. ! '( ) 14 MR. EBERSOLE: I think you need to bore into the 15 consequences of these very events and layer them out, but 16 that's not done. 17 DR. MORAY: That's only the ones you can think of. 18 MR. EBERSOLE: You can think of some horrible things 19 that for which currently at least somebody says well, we are 20 not going to investigate that because-- 21 MR. WARD: Jesse can think of more of them than the 22 average person cant 23 DR. MORAY: Let me move on. Qualifications, there 24 has been considerable amount of good work done by NRC on O. 25 improving the quality of licensing examinations, and the way HERITAGE REPORTING CORPORATION -- (202)628-4888

_ ~..-- _ _ _- l L ) l 89 L 4 l.. 1 those-are done., We think there is still research to be done, j i l-e ) 2 Particularly there is need for research on the validity and 3 reliability of the examinations. Do the examinations as they 1 ) 4-are carried out both the table top examinations and simulator l -{ 5 examinations, do they actually tell you whether or not the i b 6 person is well qualified? That's the validity problem. I 7 Reliability, are they independent of who administers them? 8 Will.you always get the same answer if the same person j 9 administers the examination the? Same student on different l l 10 occasion, will you always get the same answer? I l 11 This is, there is research that han been done, good j 12 research. We are saying there is more of it needed, and it is l 13 _needed fairly urgently because this is, the pool of employees ( 14 is changing. There is, we are moving to a time when you may l 15 get less people come to you out of the nuclear Navy, have to 16 take a wider pool of possible operators. Therefore, it is 17 important to know how to do good licensing examinations, i [ 18 Academic qualifications, we feel there is certainly l l 19 room for research here. It is, this is the notorious problem 1 20 of whether or not people should have degrees if they are l I 21 operators or any of senior operators or whatever. There is a 22 very peculiar state of affairs in the literature. We all, I i I i 23 think we all believe that academic--I use academic training t i 24 in, the academic in quotes. What I mean is training in l l I l 25 understanding of the fundamental mechanisms underlying the 1 1 HERITAGE REPORTING CORPORATION -- (202)628-4888 E

= 1 l l-90 1 process which you are dealing with, which you are operating () 2 with. 3 It seems that it must be the case'that the more you l 4 understand about a process, the better you will be able to 5 control it, the better you will be able to deal with it. In L. l 6 other words, knowledge must surely support skills. If one j .7 'didn't believe that, certainly nobody would be suggesting the l [ 8 need for degrees. l 9 There is a small amount of research that has been 10 done on this topic in a variety of settings on a variety of I l l-11 problems in which people have been exposed to theoretical I l 12 knowledge and tested to see whether it helps them to exercise l l 13 skills. Without exception in the literature, it makes no l () l 14 difference at all. There is no, I know about eight or nine L j 15 studies. Not one single one of them shows that adding I l t 16 theoretical knowledge helps the person to do the operational l' i 17 skill better. I l 18 Now that seems to me clearly nonsense. There must l l 19 be something wrong with the research. I am not saying it has i l 20 been done badly. It hasn't been done badly, but I cannot l 21 bring myself to believe those results. The fact of the matter 22 is that in one sense it does make sense. You can read about I 23 how you t play a violin, and it won't--read as much as you 24 like about it, doesn't mean you can play a violin, but on the I (:) i 25 other hand, another level, it seems it must be wrong. It can l l l HERITAGE REPORTING CORPORATION -- (202)628-4888 I

91 1 not be true that teaching people fundamental understanding of r-2 the process they are controlling doesn't help them to control j \\~)) 3 it if.it is done correctly. l j 4 DR. REMICK: How about surgeons? l t 5 DR. MORAY: I clearly--you better-know what part of 6 the body it is you are cutting, although sometimes one .r 7 sometimes wonders! 8 The point is, the only point we.wnnt to make is that 9 if you.look for objective evidence, the objective evidence i 10 says that theoretical knowledge doesn't help. What we feel is 11 that, the correct response to that is to say we need research 12 on how to ensure that theoretical knowledge does help. I ] 13 Clearly if you are faced with an unknown situation for which ( 14 you have no procedures, the only thing you have got left is + 15 theoretical knowledge about how the plant will work, the I 16 engineering and the physics. Therefore, it must be possible 17 somehow to learn how to transfer, get that knowledge, 18 theoretical knowledge, to improve operational procedures, but l. 19 we don't know how to do it at present. i 20 MR. MICHELSON: Isn't it heavily dependent upon the 21 time available for response? l 22 DR. MORAY: Nobody knows. A ? 23 MR. MICHELSON: Clearly if i have only a few seconds l 24 in which to do something, I am not going to react to all my O 25 theoretical knowledge. If an pilot also an engineer, it i HERITAGE REPORTING CORPORATION -- (202)628-4888 I

_ - _ _ = i j 92 U i '1 wouldn't make a bit of difference. t 2 DR. HORAY: The research shows as we have it'that 3 even if you have plenty of time, it doesn't help. For some 4 reason or other, for some reason or other, theoretical l l 5 . knowledge doesn't become coupled to the cycle. People talk i 6 about the distinction between procedural knowledge and 7 theoretical knowledge, between skill and knowledge if you i l 8 like. l 9 HR. EBERSOLE: There was a case., I think it is 10 unique. At least I thought it was, where this physical 11 knowledge, they did contribute to saving an aircraft because 12 he applied power to highly mounted engine in the vertical l l 13 stabilizer. He could correct an attitudinal problem. l O 'i 14 DR. HORAY: I am not saying it doesn't happen. I am 15 saying we don't know how to guarantee that the transfer of t ? 16 theoretical training to skills. Therefore, you get l 17 understandable resentment by operators who believe they are l ? 18 about to be told they have to go back and get a degree, and t 19 that's quite reasonable because even one of NRC's own 20 documents looked at the actual content of the courses such I 21 people took and they are largely irrelevant to the J r J 22 actual--university degrees are not about controlling power r 5 t 23

plants, k

24 We think, I think there may be the beginnings of an [ [ f 25 understanding as to what you have to do in order to get that f i HERITAGE REPORTING CORPORATION -- (202)628-4888 ) r i f

i 93 l l l .1 transfer. The point is we don't know how to do it at_the t 2 moment, and therefore we need research on it. That's why this i ~

O.

I 3 is an urgent problem. 4 MR. EBERSOLE: Internal bias in those programs, the j 5 -operators being so trained really never did want to learn that. l ~6 stuff and never did pass legitimate examinationa on competence l l 7 in the technical aspect. i 8 DR. MORAY: I don't see'why one should assume bad l 9 faith on the part of people who are complaining about how they j l 10 are treated. I would prefer to assume good faith. l l 11 MR. EBERSOLE: Valid examinations, they had acquired l 12 the technical basis. 13 DR. MORAY: All we know, I am saying that if NRC, O 14 for example, wants to mandate engineering degrees, they are 15 doing so at a time when there is no research to say it is i i 16 going to help. f 17 MR. EBERSOLE: Okay.m. I 18 DR. MORAY: And the natural thing to do would be to 19 do the research and find out how to do it, say all right, we 20 will mandate this kind of course and that means you have to 21 find universities or colleges to do it. You have got to get F 22 agreement on syllabus, agreement on method, and that 23 is--otherwise it is a waste of everybody's time, not actually l 24 making any difference. 25 DR. SHEWMON: In any teaching situation there is HERITAGE REPORTING CORPORATION -- (202)628-4888

. ~. _ - . = - _ - -. - 94 1 always the problem of getting the student to recognize that t (') 2 they have seen that problem before in a slightly different--it i N._/ s i 3 is clear to the professor, and you pull your hair out. It is 4 not clear to the student, and it is to some, and it isn't to r ( ) 5 many. 1 6 DR. MORAY: That's right. That is a criticism of 7 how the teaching is done. That shows that you are failing to i r 8 teach what you are trying to teach, and you cannot assume that i 9 it must be that all students are stupid because by and large I I i 10 don't think the students are stupid. We simply don't know how f i i 11 to do it. That's the issue. And we need research on it. 12 DR. SHEWMON: Some are less stupid than others. l 13 DR. !!ORAY: The fact of the matter is even with the 14 best students, wo don't now how to do it. You may actually l I 15 manage to do it with the bright students. We don't know how 16 to do it deliberately. Therefore, this is a matter we really f l 17 do need research. I 18 STA, staffing, as we know, it is, there are problems 19 to do with how well the shift technical advisor position is i 20 working. We need research to show how to improve that 21 particular facility in nuclear power plants. 22 Screening and selection of staff, we feel rore ( ~ i 23 research could be done. When it comes to shift schedule and r 24 vigilance, these last two, screening and selection, after i l l 25 shift scheduling and vigilance, that is not, that is more a t I l HERITAGE REPORTING CORPORATION -- (202)628-4888 [

95. i l 1 ' matter of searching existing knowledge and applying it, seeing 5 i i 2 how to apply it fundamentally, particularly on shift (} { 3 scheduling, enormous amount-there, and it just needs to be l 4 applied.- I 5 So that's a case of research into how to apply l' I 6 existing knowledge. l 6 7 DR. SHEWHON: Sir, if you had come six months 8 earlier, there would have been somebody sitting up there near 9 you who would have tried to get you to say that indeed 10 aptitude testing was an essential part of the selection, 11 especially for maintenance and such things. 12 Do you f eel this is well establisi ed or would you 13 care to comment? O 14 DR. MORAY: Aptitude testing is not easy. The l 15 personality testing in general is a relatively weak 16 technology. We think that as, again as problems begin to 17 develop about where one is going to recruit operating and 18 maintenance personnel for nuclear industry, work should be 19 done on this. 20 There is the problems about people who are 21 responsive to stress. You know, you are not going to be able 22 to, I think you are not going to be able to give tests that 23 say this is the man you want. It is an excellent person, what I I 24 you are really looking for, at least in the testing and l (:) 25 screening. You are trying to make sure that you weed out l l HERITAGE REPORTING CORPORATION -- (202)628-4888 l

96 l 1 people who are likely to be hazards, and who don't work uall 2 under stress, and there are some indications of different 3 personality types, so forth, where you might be able to say 4 these people are at risk. You are not, never going to be able 5 to take a test and say this person is absolutely I will 6 guarantee 100 percent if you hire this person and not that 7 person, this person will never make my mistakes. This person 8 will be excellent in every way. 9 DR. SHEWHON: I like the word--you used aptitude 10 better than I did when you got into psychological testing 11 because my impression was that this person was more or felt 12 more strongly that this was helpful with regard to aptitudo, 13 with regard to machinery or things of that sort which you i l O i 14 thought one could test for when he was interested in l 15 psychological testing. j i 16 DR. MORAY: Was this person qualified in the I i 17 literature on testing? j i 18 DR. SHEWMON: This person was qualified by having l 19. run a plant for many years and seeing who did well and who 20 hadn't. t c 21 DR. MORAY: Yer. I remember doing some work on 22 selection of fighter controllers for the RAF a few years ago, 23 and we actually developed a test that would certainly have 24 irproved their recruiting by about 10 percent, considerable 25 financial savings, in which they were totally uninterested. HERITAGE REPORTING CORPORATION -- (202)628-4888

/ 97 1 They knew how to select people. They interviewed them and I '(]} 2 they talked to them about why they wanted to be RAF officers 3 and that selects people like yourself and it is notorious in j i 4 the literature that interviews, for example, is the worst t 5 possible way of selecting anybody for anything. People who I I 6 want to pass--I do not believe that personality testing is !.t t 7 sufficiently strong to. enable you to identify unique [-t 8 individuals who are guaranteed to fulfill the role that you 9 want for them. 10 The correlations are, between the test scores and i 11 subsequent performance are statistically significant but l l 12 frequently not high enough to guarantee that you have weeded I l 13 out a large proportion of the variants, but only people who [ O i 14 have studied how the tests are constructed and how the l 15 methodology works are really people who can pass Judgment on 16 whether or not it is inherently weak or strong. i 17 DR. SHEWHON: I keep saying aptitude. You keep l 18 saying personality. Is that becatse you want to talk about 19 personality testing or because you consider them the same? f 20 DR. MORAY: No. It is because I think it is easier j l t 21 to test for aptitude but I am prepared to concede it is { } 22 impossible to test usefully for personality under some l 23 circumstances. I don't see why I should accept the critical i 24 judgment of somebody who has spent his life in a different ( i j 25 profession about certain aspect of my profession any more ti in + HERITAGE REPORTING CORPORATION -- (202)628-4888 l l

f ^ r ,r. i 98 l-1 he should accept my judgments about his profession, you know. {) .2 I wouldn't expect him'to let me manage a power plant. I am l 3 not quite clear why he should expect me to let him say without { i t h 4 understanding the methodology of testing that the test must be l 5 nonsense just because it has to do with personality. 6 DR. SHEWHON: He thought aptitude tests were so l 7 wonderful the NRC should require the utilities use them. 8 DR. MORAY: I think he overestimates aptitude tests 9 and underestimates personality tests. I don't think either, I ) 10 don't think they are either that good or that bad, and if one 11 wants to make a decision, let's do..earch and find out how 12 good they are. I 13 MR. WYLIE: That's the recommendation? i O 14 DR. MORAY: That's the recommendation, yes, is to 15 continue to look into whether it is possible to develop more 16 effective tests, both for aptitude, acknowledge, for 17 personality, which will be of use. And methodology for doing i 18 that research is personally well understood. J 19 There was some research done a few years ago by 20 Donnette on this, simply recommending that given the 21 importance of making sure that you have the right kind of 22 people running plants, it is worthwhile spending some more I 23 money on research. The answer may very well be that it 24 doesn't work, but after that is what? If we knew the answor, ( 25 we wouldn't be recommending the research. I I HERITAGE REPORTING CORPORATION -- (202)628-4888 R- -e-.

rI ~ 99 [ l MR. MICHELSON: One of the keys.of the problem 13 2 even after you understand the testing process, you are going 3 to have to have adequate. system of measuring performance l gg 4 thereafter to decide whether a particular testing procedure i i 5 picked good people. We don't have good performance l 6 evaluators. 7 DR. MORAY: The problem of validation is critical, 5 8 and that is very difficult. You may have to wait several 9 years to see the results. 10 MR. MICHELSON: We need some means of evaluating 11 performance. We have, we are trying to learn to do it for J 12 nuclear plants by looking at some kind of outputs from the l i 13 plant, capacity factors, but we need it on individuals. I ( 14 guess it will be in one of your items. 15 DR. MORAY: I would like to press on. I am enjoying 16 my conversation with you very much and find it stimulating and i h 17 intereszing, but I would like to be able to get through our i l 18 report. [ \\ 19 Human performance, the single most important thing i 20 here we feel is research on causal model of human error, l l 21 especially the situation for unplanned elements. This brings ) 22 me to the question about our attitude toward human reliability l 23 and PRA. l 24 We--by the way, we say that we need research on 25 measurements of performance, particularly if we are going to I l HERITAGE REPORTING CORPORATION -- (202)628-4888

_ __=____ 100 { l go to performance oriented regulation. We really don't know j s 2-what are the best measures of performance of the human {) i j 3 operator's performance. I want to talk about this a little i t 4 bit because PRA and human reliability estimates have, of i t j. 5 course, played a very central role in research. They play a j l f 6 role'in licensing. They play a central role in the l 7 discussions of safety. l I t j 8 Basically, our worry is the following. There has j l I l 9 been many attempts--Swain and Cutland, of course, the ? i ) 10 classical one, the Thorpe technique, to estimate human l 11 reliability. There have been variants on this. There have 12 been some more, been a whole set of these things. 13 What they are all doing, either what they are doing 14 or what they are based on, at present, is expert estimates of 15 the probability of human error because we do not have a data 16 base for the probability of human errors, particularly for 17 rare events. We don't have empirical collection of data which 18 tells us how often a particular kind of error is in fact made. 19 Now further research using existing techniques is i I 20 simply refining the technique of getting experts to give you j 21 their best guess, but that's what the estimates remain. 22 We would support the collection of data to get 23 empirical estimates of human error, and that presumably means 24 improving LERs, analoging what actually happens, and ( 25 collecting data from simulators and so forth. HERITAGE REPORTING CORPORATION -- (202)623-4888

l I i 101 i 1 But if you use expert judgment to establish the (~N 2 numbers for human reliability, you will only know whether [ l (_) i 3 those numbers are correct by validating it. How do you I i 4 validate it? You validate it against empirical data. If you i f 5 have got the empirical data, you don't need expert judgment. f I 1 l 6 So if what you want is point estimates of human error rates, i 7 what is the probability of making a particular kind of error? I [ j 8 Then any research efforts should go into compiling data, not ? into further ways of getting expert judgment, because we have l 10 enough of that. We have gone as far as we can go, but one can [ 11 raise a second question. Is this kind of measurement what you j l i 12 want? i e I 13 Firstly, as Swain himself says in the NUREG 178, O 14 those numbers are highly dependent upon performance, shaping i i i I 15 factors. For example, at two or three o' clock in the morning, f i i 16 circadian rhythms guarantee error rate is going to be I i 17 substantially higher than the nominal error rates. Every ( i f 18 study that has ever been investigated shows that in the f a I 4 19 mornings the error rate goes up and even when people have been i 20 on that shift for a long time and think they have adapted, he l } 21 still hasn't. 1 t i 22 As Swain points out, there are a variety of l I 4 i { 23 canditions under stress, for exarple, when you can expect the 7 i i 24 error rates to go up. All of these things mean that those [ f i j 25 numbers of typical human error rate are not reliable. Even if 1 I I ); j HERITAGE REPORTING CORPORATION -- (202)628-4883 "'WF'-- .m. .]

102 1 they were empirical ones, they are not fixed estimates. There I () 2 is no fixed number which you can take to be the characteristic 3 error rate for a particular human error. 4 MR. EBERSOLE: You are talking about the time of 5 day. What about the case of the shuttle event? And what is i 6 being done to prevent that maldecision the second time? 7 DR. MORAY: I don't tnink that was a time of day. i i j 8 That was a-- I j 9 HR. EBERSOLE: It is another set of conditions-I l 10 altering the decisional process, but what is going to be done l l 11 now to-- j i j. 12 DR. MORAY: I don't know. That comes under the l L (:) 13 heading of organizational and management. 14 MR. EBERSOLE: I know. That's what I am mostly i 15 interested in. f 16 MR. WARD: We are on a different topic. 17 DR. HORAY: I will come back to that. I want to I 18 make, the following is the point I want to make and which we 19 believe very strongly is fundamental to this. 20 Even if you did have empirical estimates which says j I 21 the probability of making a particular kind of error is such 22 and such, that is not what you want to to know. That tells 23 you that the probability that a particular thing will happen 24 at sometime. O 25 What you need to know in order to reduce the risk of HERITAGE REPORTING CORPORATION -- (202)628-4888

o 103 1 error and hazard is when is it going to happen? The fact that 2 it happens one in a thousand times, however you define time, l 3 is really of no interest in preventing it. It is a signal 4 saying if it is a high number like one in ten, it means. l 5 something has got to be done about it,-if it is a number like f 6 one in ten to the 6th or ten to the ten, then it means this is I 7 so low that you probably don't have to do anything about it, 8 but the point is what you want to know, is it going to happen l 9 in the next five minutes? Because if you know when it is 10 going to happen, then you can take steps to prevent it. If 11 you know what it is that makes it happen, you can take steps 1 12 to prevent it. I 13 You don't get that knowledge from studying error ( 14 probabilities. You get that knowledge from studying error 15 causing mechanisms, and therefore we say that the research 16 that is needed on error, human error, is research on the 17 causal mechanisms of the genesis of human errors. What makes 18 people make incorrect judgments? What makes people make l, 19 incorrect perception? What makes people make incorrect l 20 actions? What is it about the situation in which they are 21 working which produces this kind of error now rather than next 22 week or in a different situation? 23 It is causality that is fundamentally the thing we 24 need to understand, not frequency. And so we say very 25 strongly, that enough research has Leen done on frequency of HERITAGE REPORTING CORPORATION -- (202)628-4868

- - - - - - = _ - - = i a i 104 1 errors. What we now need is major research, long-term r 2 research on causality. Now some people have begun to work on f (} I 3 that in the last few years, and we do have an understanding of i 4 methodology and we believe that should be very strongly 5 supported. It should be one of the major ones; going to take 6 a long time to do it. It is basic research, and almost 7 anything we find out in it will feed back into safety fairly-8 directly. } 9 DR. STEINDLER: Could I ask a question? Is there 10 any indication that the methodology is reliable? 11 DR. MORAY: Of the causal--oh, yes. Yes. '4h a t is 12 happening is that we are getting, for the microtheories, we 13 have good theories, for example, about signal noira ratio of j () 14 displays and how that is, changes the probability of error, f 15 We know, we understand the distinction between signal 16 strengths of incoming information from the environment and l l 17 changes in the decision criteria inside the person. Those can l 1 1 18 be distinguished, measured quantitatively by using, applying i 19 theory of signal detection to the human operator. We are I i 20 beginning to have good experimental evidence on what are 21 called slips, which is I know what I am intend to do but in i i 22 fact I reach out to press one button, in fact I press the 23 adjacent one--slips of action. 24 The nost--we are beginning to understand some things ( 25 about what it is that makes you make a decision for one HERITAGE REPORTING CORPORATIOH -- (202)628-4888

L l 105 j p 1 1 strategy rather than another, which soras back to the point '( } 2 that you raised about the, there is nothing difficult about 3 the method. That is not quite true. But there is a good 4 standard experimental methodology for doing these problems, 5 and it is beginning to develop quite rapidly. Five or six 6 years, ten years ago there was nothing. Nobody was working on 7 it. 8 DR. STEIhDLER: And your view is that nethodology is 9 sufficiently broadly applicable to that? 10 DR. MORAY: Yes. 11 DR. STEINDLER: It is well in hand? j t 12 DR. HORAY: Oh, yes. It is--very many people are f l 13 doing it and particularly if you want to transfer laboratory 14 situation to the field situation, one is, this is a classical 15 case. One is going to validate a laboratory study on fairly l l 16 simple systers with something like a simulator. Sooner or l 17 later you are going to toke it out and do it in the field, 18 make sure what you found works. Yes, we have gotten the 19 r.ethodology. It is not an extremely, it is not much different 20 from many things that are already done. It is cyclical, 21 s i-el ' a matter of a topic that is being researched. We can 22 do research on perception, attention, memory, decision making. 1 23 Research has been done on that for years, not in this 24 particular context, but clearly, this is the fundamental topic i O 25 in many ways. What makes this par'. cular error occur now? I HERITAGE REPORTING CORPORATION -- (202)628-4888 I

= _ _ _ _ - - - = - _ = _ _ _ - _ _ _ _ _ _ = =__ f j 106 l 1 s 1 If you know the answer to that, you can do something i i ggg 2 about it. PRA doesn't tell you what to do about anything l 3 except possibly don't start the thing up in the first place. }j 4 It really, we are really very strongly arguing for totally 1 3 j 5 different, total shift in direction of research in the context i 6 of human error. I l 7 HR. WARD: A comment on that--the risk analysts are 8 going to continue to be interested in error rates, whether 9 they, you know, it is productive to continue to refine their 1 I 10 estimates or the numbers they use in risk study or not, it is I 5 [ l 11 a question, but they are going to be, continue to be ~ l 12 interested in that. 13 DR. MORAY: Yes. 14 FA. WARD: I think the point this Committee has 15 tried to make and I have tried to make kind of ineffectively 16 over the last two, three, four years, is that that's fine. I 17 That's a valid interest, bit it has nothing to do, it has all 18 to do with risk analysis but it has nothing to do with human 19 factors. It is sort of like a risk analyst is going to be, l 20 continues to be interested in failure rates of diesel 21 emergency generators, but what we are trying to do is, is to 22 figure out how to design diesel emergency generators, and sone 23 knowledge of error rates is interesting in that, and perhaps 24 useful, but it is hardly a substitute for figuring out how to l 25 design it. It is just one kind of minor input, and I think i HERITAGE REPORTING CORPORATIO!! -- (202)628-4888 t

=_ 107 1 that's the, what the NRC has fallen'into. It has acted as if t 2 this little narrow area of research in human error rates to 3 service the PR\\ program is a substitute for a human factors l 4 program, and it is not. 5 DR. MORAY: Yes. Distinction really is between the 6 management of error, of risk, management of error and the 7 measurement of it. We are arguing we must manage it. 8 MR. WEISS: Is this a fair interpretation of what 9 you just said, that if a human is involved, errors will occur? 10 And rather than addressing error rate, whether it is high or 11 low, we want to look at when it will occur, in our operational 12 sequence, and what we could do to prevent it? l 13 DR. HORAY: And why it occurs; when it occurs, why O 14 it occurs, and what we can do to prevent it. If you know 15 where it occurs, then you can do something to prevent it. 16 MR. WEISS: Even if we have some evidence that the 17 rate of occurrence is very, very low because you don't know 18 when it will happen, you still have to address it? 19 DR. MORAY: You have to, yes, but the point is that 20 you have to distinguish between, when you say the human error 21 rate is very low, you have to be very careful what you are 1 22 saying. There is abundant evidence from most other industries i 23 that the rate at which humans make errors is actually quite l 24 high, but the rate at which they recover from them is also l i i 25 very high. l I HERITAGE REPORTING CORPORATION -- (202)628-4888 l i

l 108 1 In the short haul airline industry, there was both a 2 simulator study done by NASA few years ago, and empirical data 3 from a short haul European airline between Britain and 4 Germany, both of which found that cockpit crews made errors of 5 navigation and things like this about once every five minutes, 6 but they found them again, and the point is if you have a slow 7' plant, you have got to distinguish between error, humans 8 making an error, erroneous piece of behavior, and that 9 emerging as plant performance. 10 Now we are talking about human error behavior._ The 11 plant will absorb a lot of errors. The hazard only arises 12 when the error turns into performance of the plant output. I 13 And the, some recent work in which Woods shows that for 14 example, people are very good at detecting their own erroneous 15 action. If they do something incorrectly, they almost always 16 spot it. If they make an incorrect judgment or perception, 17 they are very poor at spotting it. Very often it is spotted 18 only when somebody else comes in. 19 For example, I mean the classical one, you can go 20 back to T!!I. The fixation on the problem solving, on the 21 hypothesis was such that it required somebody who wasn't 22 involved in the decision-making, goes back to the remark 23 somebody made about programning as well. You can't find your 24 own program bugs. Somebody coming in looking at it will find O 25 it very quickly. HERITAGE REPORTING CORPORATION -- 1202)628-4888 .2..

- = =_ i 109 l. 1 We don't really know how frequently errors occur i (} 2 which are immediately corrected perhaps even before they f 3 emerge,fso: the person. If I look at something, make a i p 4 judgmey.,: about what I have seen, if I read a meter, make a } 1 j 5 judgment'about what I have seen, it is incorrect, and I think j \\ 6 now because of that, I shouldn't take the following action. 7 and then before I take it I think wait a ninute, I am wrhng l \\ 8 about that, that is not what I should do, nobody will ever see i t 9 anything. Cognitive errors that stay inside the head are not j i f 10 measurable certainly not by Thorpe, but if we understand the s i 11 psychological mechanism by which errors occur, what factors l [ 12 cause them to hoop, what predisposes people to make an error i 13 of judgment, then we can try to design displays and control l l 14 systems, we could design hierarchy of interpersonal 15 interaction, in the control room. We could design management 16 policy which would nit.imize those and try to remove the 17 causes. This is the point of engineering practice to control l 18 error by the biofeedback system. 19 In engineering practice it is standard practice to 20 control error by a feedback system. Controlling human error 21 or human exacerbated risk should be done in the same way. You 22 should use f.he numbers which you get in PRA or in error 23 research not as facts about error, but as contro!. signals 24 which havo to preduce behavior to change the system. At the O 25 moment, PRAs, using them as facts is descriptivea. We are i HERITAGE REPORTING CORPORATION -- (202)628-4888 \\

.. _ _. _ _ _ _ _ = j .110-(- '. 1 saying that those numbers, if anything, are control signals, I 2' require response to reduce the error. 3 Then as Dave said, the point about human factors 4 research is to change the behavior, not to measure it in this 5 case. 6 organizational aspects--I am afraid we haven't left x 7 ourselves all that much time on this. Impact of regulation on i 8 management--we repeatedly heard that management finds itself ( 9 spending so much time meei.ing regulation that it hasn't got I l 10~ time to manage. And again, let us give, let us ascribe good 11 faith to management, and that we would like to see a q l 12 discussion of styles of regulations. I 13 organizational design, whether it is true that ( p i U \\ l 14 different styles of organization and management is what is 15 making a difference in availability and safety of plants when i i 16 all else seems to be equal. I 17 operational decision-making, we would like to see 18 some work on the selection and training of managers. How do 19 you, what should be your criteria for recruiting managers? l 20 That seems to us to be just as important as what should be l 21 your criteria for recruiting operators. 22 We would like to see possible, we certainly would 23 like to see research on whether it is possible to improve 24 cooperation between the regulators and the regulated without O 25 reducing the rigors of regulation. HERITAGE REPORTING CORPORATION -- (202)628-4888

1.. . DI 111 1 Now J Lknew v. hat is extremely tricky. It is very 2 tricky.'politicallp at-we believe that adverscrial stance is y. 3-ne, t the way to preLuce thi best performance from the system, g C, if the adversarial stance is te be reduced to the regulations. ~ a t 1 5 It could take place in an atmosphere of more cooperation, one 6 could.magine the industr;r,seeing regulation as being P 7 something which helps them rather'than something which. hinders 8 them, and we would like, there is reeparch in other fields ^- done on this, these sorts of topics, cc t<w regulation, 1 10 different styles of regulation, different modes of regulation. .l 11 As I said, internationally there are a wide variety 12 of styles of regulation and it is not clear that any one of j 1.' them is particularly better than the other, but it mcy be, it .O 14 it is worth finding'out if you can ponsibly do that. 15 Ope.ationa7 decision-making, management style t,., 16 performance, culture of reliability,:hcw do you, how do you c. ^ 17 manage in order so thtt everybody involved in the plant. sees L . important 18 reliability and safety as being inherurtly the most 19 thing w'cich they are trying t<L do? It is. abundantly cle? in l ind tsty;- oper' tern are caught between knowing that they 1 20 eny a L -21 must work for safety and knowing that tney must work for l l 22 productivity. _23 Is it possible to find out wbst' kind of p 24 organizational design and manae.en,ent ph.losophy maximizes the !,( ) l 25 concern with saf ety and keeps id al_'ve and well? We do, we do i ll } f L i HERITAGU RENORTIITG CORPORATIO.'i -- (202)628-4888 s a i 4 1-+x l

\\ ) 112 i j JL feel that we would like to see where it is possible a l 4 ("), 2 cooperation, and the way that, we feel that cooperation at the j %/ 3 research level as I have indicated one or two times is [ a i i 4 probably an acceptable kind of cooperation between the 3 5 regulator and the regulated. 7 4 i l 6 We are not saying that all research should be done l 7 by !!RC. Research should be done by the industry. Industry { i: 8 should be down into research. Research should be done by both I t 4 F j 9 sides on topics which seem to be of mutual good, and mutual j i i 10 desirability, and that would, all these are connected with i i e 11 that. l i' 12 There is no doubt in our minds, and this seems to be 13 supported worldwide, that organizational matters as much or no l (} f 14 more so than operator behavior is a source of hazard and risk. l t 15 You can either increase it or reduce it. If it is done well, l 16 it will reduce hazard, and improve productivity. If it is I 17 done badly, the best hardware and best designed plant in the I 7 I 18 world will not be run well by people who are ill managed. I l 19 Therefore, it is imperative to discover more about the l I 20 relation between management and performance in the nuclear 21 industry. I 22 I think probably maintenance, we came to feel that l j t 23 maintenance and organizational matters were the two, almost i i 24 the two most important ones, sort of generic ones. I came I 25 into the panel, as did several of us, as hard edged ) i f 1 i HERITAGE REPORTIliG CORPORATIOff -- (202)628-4888 l L

_. _ ____ ___. ___ ___ -~_..___ __ _ _. I 113 I l researchers,'either engineers or psychologists who had been j _2 concerned with human information from seeing hard edged (} 3 experimental research, and I certainly came out of the panel j - l 4 with a profound feeling that'it was important to know much i 5 more'about organirational and managerial matters, and that j 6 probably you could almost make more difference that way than ~ I 7 you could by improving control. We feel very, very strongly j 8 that this is of the utnost importance as a research program. I c 9 NRC had, of course, begun to look at it before their 10 program was closed down. There is a number of quite good 11 reports in this-area. 12 (Slide) 13 DR. HORAY: Finally we would like to see research on () 14 regulatory environment. Let me put them both up. We would 15 like to see a deeper understanding of the appropriate mix of Ii 16 government regulation and self, and self-regulation by the l 17 industry. We would like to see research on developing an I i 18 array of performance indicators to track plant performance, 19 particularly that has to be done if you ara going to go to i ~ 20 performance based regulation, and in more detail, we would [ l L 21 like to see NRC look at its own hunian f actors. Its regulation 22 should at least be well human factored, they are presented in 23 ways that people can understand what they are being asked to f l 24 do rather than ambiguous. O 25 We would like to see research on the regulatory f i I i HERITAGE REPORTING CORPORATION -- (202)628-4888 } 1 I

'114 l' [' 1 impact on innovation. How can you support technolocical i. fj} 2 ' innovation, at-the same time ensuring adequate regulation to 3 make sure that it is safe? L[ 4 There are models of regulation,-and this has been ) I l-5 researched in other industries as to what kind. It is worth. l 4 1 6 looking at these alternative model plant performance I 7 indicators, so we are asking NRC to look at the human factors I j 8 of its own operation and own products. It is after all I 9 staffed by humans, and therefore its behavior and products are f I 10 likely to be influenced by human factors considerations in the f 11 same way that the-industry is. 12 To summarize, we are encouraged by the initiative i i 13 shown by NRC to develop and fund a new human factors research { 14 program if it receives strong support by NRC and industry, 15 managed by qualified human factors specialist, at the branch 16 ~ level, and if it is staffed by a team of multi-disciplinary [ f a e 17 scientists. I am not saying they should all be human factors t i 18 psychologists. They must be interdisciplinary, mix of 19 engineers and behavior scientists, human factors specialists, e 20 and then the initial steps will have been taken. L 1 21 Further steps should be taken by URC and industry as I t 22 necessary as they begin to see the implications of the report ? l. i 23 and as their new research program unfolds. j 24 And thank you very mucy for your patience and i 25 listening to a rather lengthy presentation. I will be happy I [ HERITAGE REPORTING CORPORATION -- (202)628-4888

115 1 to' spend the~ remaining twenty minutes answering questions. ~) 2 DR. SHEWMON: On that penultimate slide, did the ~J 2 question of the effectiveness'and the strategy of using fines 4 ever arise? 5 DR. MORAY: We didn't consider that as an explicit 6 topic,-no. k 7 DR. SHEWMON: One of the things which has offended 8 the sensitivities of one member who is not here today who is 9 also not certified in your profession so you might not accept 10 the reaction, but was that if somebody reports a fall and you 11 then say by gum, you were wrong, we will fine you for it, this 12 probably wasn't the best way to do it. 4 13 DR. MORAY: I think that we would support that. O 14 There has been talk, as you know, about whether or not you 15 could use the same method that the FAA uses for 16 scif-reporting, of self-reporting of errorc, whereby pilots 17 are encouraged to report their own faults and providing they 18 are not criminally, liable to criminal prosecution for them, 19 providing they don't report too many, no action is taken. And 20 the reports are sent through NASA so that the origin of the 21 report is hidden, but then the actual reports are published. 22 That would ce, it seems that the aerospace industry 23 is benefiting from that. Certainly pilots think very well of 24 that and they seen to be seeing this as a way of hc1 ping them 25 to avoid errors. HERITAGE REPORTING CORPORATION -- (202)628-4888

116 1 .DR. SHEWMON: I have never heard that. Could you ("T 2 give Ray a record of it? s. / 3 - DR. MORAY: Callbacks published it which.has case .4 reports. There is an NRC report on.it. There were two 5 reports written actually by NRC as to whether or not you could 6 implement this for the nuclear industry, self-reporting. 7 MR. WARD: There has been an attempt to'do that. 8 What is it, VEPCO has a program that they are trying to 9 develop. 10 DR. SIESS: That was internal within the company. 11 Paul's question was-- 12 MR. WARD: It wasn't going to be internal, was going 13 to be through INPO I think, but the idea is that individual 14 participants in the process, whether they are pilots or F 15 controllers or whatever, can submit anonymous reports of 16 occurrences that are at the, that haven't affected the i 17 process. The airplane hasn't crashed or anything. 18 DR. SIESS: Nobody will tell NRC about it? 19 DR. MORAY: Only as a--they won't tell NRC where the i 20 report came from, merely what happened. Now there are 1 l 21 prob. ems with it. i 22 DR. .IESS: There sure are. They will end up in 23 court probably. I 24 DR. MORAY: That's the issue, whether you can l C:) t 25 organize a self-reporting system analagous to the airlines. l l 1 l HERITAGE REPORTING CORPORATION -- (202)628-4888

i:I 117 V one seems to work very well. I think there 1 The other thing, r -s 2 are some reasons why it would be much harder _to make it work 4 l 3 'in the nuclear industry. One reason is there aren't enough 1 1 L 4 plants, that almost any report you got, a knowledgeable person 5 could work out where it came from, whereas you can't really do f 6 that with the airlines. l l 7 MR. WARD: It seems to me Paul's question maybe'was 8 a little, started out being a little bit different, and I e l 9-might rephrase it. l l 10 Is, you know, there is-a question as to whether the i l t 11 NRC's strategy of using fines for really more serious 12 violations is effective in reducing, making plants safer. I -l i i i 13 think the question might be is that a researchable topict We f () 14 have, all we have is opinions on it, and I don't know that 15 there is even empirical evidence that coulo be sorted out one t [ 16 way or the other, but is that a researchable topic? l 17 DR. MORAY: I can see some questions that could be I 18 answered. It is researchable. It is r? searchable. I'm not -l t F 19 sure quite what you get out of it in the end because it is 20 difficult to see what the control would be. 21 DR. SHEWHON: Not sure he can make it strong enough 22 to convince the Commission they should change their ways. 23 DR. SIESS: There must have been research on rewards i i 24 and punishment on effects of human behavior. We are not i I O 25 talking about human behavior. He are talking about i i i HERITAGE REPORTING CORPORATION -- (202)628-4888 l I t

...-- ~.. -... - -. -... -... i [ 118 l i i 1 institutional behavior. f { 2 DR. MORAY: Punishment is an-inefficient way of 3 changing behavior. That's what we know about humans. r 4 DR. SIESS: Whether rewards.would help, flying the E i i V i 5 flag? b 6 DR. MORAY: I would say probably.yes. I mean I l-7 think rewards would help. t 8 MR. WARD: Send the resident. inspector home. i i 9 DR. SIESS: _Give him a little pat on the back, f I i 10 DR. MORAY: I think the, one of the problems would 4 11 be that in working out how it was, how that effect was l i r 12 working, it would be quite difficult to see at what level it 13 was having its effect for good or bad. Is it affecting the 1 14 management, the workers, soon forth? Certainly penalizing i l 15 somebody who in good faith reports a problem, thinks this I l 16 happened, and it was all right I caught that this time but I j } 17 think this is something which is dangerous if it happens P I 18

e. gain, if you then fine him, if you punish him for doing i

I 19 something in good faith which he thinks is helping, that is 20 really going to destroy it. l 21 DR. SIESS: NRC doesn't always think it is l i 22 penalizing them. It is, the fine may be $50,000 for what i 23 happened and because it is repo. in good faith they reduce i 24 it to twenty-five, so you see they have rewarded him, not O) (_ l 25-penalized him. l l t HERITAGE REPORTING CORPORATION -- (202)628-4888 { i

119 1 DR. MORAY: I think it is'a researchable topic,,yes. (} 2 DR. MOELLER: I have found your_ presentation.to be i 3 very good, and I also find more myself that you have certainly -4 broadened my concept of what all the field of human factors 5 entails. 6 At.the very end, though, I begin to find myself with 7 a fundamental question, and that is you have cited that of 8 course human factors research could help a person better 9 operate a plant say for the operator, but then you have gone i 10 on and you have told me now that human factors research, and l 11 now I am going to put words in your mouth because I know you 12 didn't say this, but human factors research is all'we need to i l 13 do to tell how to better organize and-staff a plant, it is all e LO 14 we need to do to tell how to better set.up a federal agency e 15 for regulating the plant. It is all we have to do to even set r 16 up a system 1of performance indicators, and I guess I am just L 17 not quite ready to go that far. 18 I think you have very significant contribution to i 19 maybe in all of these fields, but you were commenting earlier i 20 about your professional area and so forth. I'm no management 21 or administration specialist or anything, but I think they i l 22 would challenge you that a human factors person can tell them 23 all about how best to manage. i I 24 DR. MORAY: I don't think you heard me use the word 25 "all" at any stage in my presentation. l I HERITAGE REPORTING CORPORATION -- (202)628-4888 l

120 I .1 DR. MOELLER: I said that'. You did not. But I { 2 could jump to the conclusion that maybe you implied that. Ij' 3 DR. MORAY: No. What I was'trying to say--oh h 4 absolutely not. Absolutely not. I mean I know that well r l l 5 enough. I was a harmless academic psychologist when I was V '6 rung up by the nuclear inspector who said he understood I knew i 1 7 all about human factors, would I brief them on the human 8 factors of seismic inquiry? I said I don't know anything. l t 9 about nuclear human. factors. I just happen to hade been i e i l 10 visiting somebody who does, and they said nonetheless, you j 11 know more than anyone else we can find, would you do it? And .l g r l 12 it took me four years to learn enough about the nuclear i 13 industry to feel confide making aay. kind of judgments. l 14 And that was spending quite a lot of time working on.it. J 1 15 MR. EBERSOLE: You were involved is the Sizewell 16 inquiry? i f 17 DR. MORAY: Briefed the nuclear inspector in [ 18 Brighton along with Lawrence Bainbridge. We wrote them in k 19 brief what they should look for at Sizewell inquiry in the i o i l 20 human factors area. They adopted our brief as theirs when i 21 questioning CGB. [ t 22 No. What I want to say, I mean by talking about 23 systems, and once or twice mentioning multi-disciplinary work, l l 24 what I say is absolutely fundamentally no single discipline 25 can do this. If I was going to work on control room design, i r l l HERITAGE REPORTING CORPORATION -- (202)628-4888 j

7.... -...-.....-... -..-. - _..-. - - -. - -.-. - - - ~ ~ _.~ _. -... -.....-., _. - -.... 1 L [ l 121 t S i l-l' ~1 or operating-procedures, I would certainly want to, I wouldn't i ') (} 2 ~do it without having engineers to work with'because I don't i 3 know enough about it, because if I wanted to work on anything, i l 4 'I would work with people who are experts in that-area and what l l-5 is more, I would work with the people from the industry. 1 t 6 DR. MOELLER: They in turn should not undertake such 1 r [ 7 evaluations or studies without including human factors? i l 8 DR. MORAY: That is all I would say. [ ( 9' DR. MOELLER: I agree. l l 10 DR. MORAY: Certainly. The gentleman at this end of I 11 the table? t I I j 12 DR. STEINDLER: Yes. I would like to revisit the i l i j 13 issue of adversarial approach. You apparently, or clarify for-t 14 me what it is that you were advocating. I think one of these l l l 15 vugraphs showed a call for reduction in the adversarial I 16 stance. What is it that you mean by that? \\ I l 17 DR. MORAY: I have talked to people both in the i 18 industry and in the regulatory bodies in Britain and in i 19 Canada, and in America, and I am struck by the degree of l 20 animosity in this country compared with the other countries. I 21 For example, recently I was, we were doing some { 22 research on how to use simulators for assessment with Ontario i 23 Hydro and we found ourselves sitting in a room with some of I i 24 Ontario Hydro staff, some of the people from the Atomic Energy l 25 Control Board and ourselves discussing how this should be i I I HERITAGE REPORTING CORPORATION -- (202)628-4888 e

_- ~ L [- 122 t 4 1 L i 1 done. We had been using their' simulator for the morning. And I ~ (}. 2 we were sitting around the table all saying well, the I 3 simulator is really not working very well, is it? And the t f. 4 Ontario Hydro people were saying no, as a matter of fact, we j. 5 have never actually tried to see if we could implement this i 1 4 i 6 feature. The regulators'were saying well, don't you think you 1 [ 7 should do that?~ And they were saying well, yes, we should. I I 8 We really haven't had time, and I cannot imagine a l 9 conversation of that degree of amiability in which everybody 10 in the room, the consultants, utility people, and the I l 11 regulators, were sitting around jointly working in an amiable i l 12 and constructive way to try to decide what'tc do with a l j i 13 situation that all three of them agreed wasn't really what it 14 should be. i I: I I 15 What I am saying is that that, it is not that they i~ l I 16 don't regulate rigorously. They do regulate rigerously. They i 17 just regulate rigorously in a different kind of way, and my 18 impression is that there is so much animosity between the 19 industry and the regulators in this country that what happens J d f 20 is that the industry will only go the shortest conceivable i - ) 5 21 distance that it can get away with in order to satisfy 22 regulation. l l 2 l 23 DR. STEINDLER: Let me make a comment. You have 24 shifted from adversarial to animosity, and I think that's a ( J 25 very critical shift. If you were to suggest to me that the HERITAGE REPORTING CORPORATION -- (202)628-4888 I

.s 123 adversarial' relations'ip should be abandoned, then my. comment h 1 2 is that you can't function that way. All peer review is based } 3 on the adversarial notion. 4 If you are suggesting that the-animosity should be 5 abandoned, then I would agree with you heartily, but I am 6 drawing a sharp distinction between the two and that may be j 7 artificial, but it may be taken by someone who reads the 8 vugraph that you really don't want a peer review operation 9 where the applicant is challenged on the technical basis to l 10 demonstrate, to show case. I don't know what you want to call 11' it. I think that has to remain. i 12 DR. MORAY: Yes. No. -That's why I keep on coming 1 l 12 back to the thing-that we would like to see positive 14 cooperation, but it is clear that it has got to be done in 15 areas which preserves at the same time the rigors of i 16 regulation. I tried to use the word preserving the rigor, 17 rigorous regulation, but doing it away from the adversarial J 18 nature. That'a the distinction. I think we are making the 19 same distinction. 20 DR. SIESS: Were there any lawyers present at that I l-t l 21 meeting in Canada? l 22 DR. MORAY: Any? I 23' DR. SIESS: Lawyers present? l l l 24 DR. MORAY: No. On the whole, we don't feel such a (1) I 25 need for lawyers as you seem to down here. I t HERITAGE REPORTING CORPORATION -- (202)628-4888 l .._...,._,,,,..._._._,,,._..,m.-_.,,

_...,-..__.__-___._..._.m 8 P 124 i I 1 DR. SIESS: Very few serious meetings between NRC i i [^{ } 2 and licensees that are in trouble without lawyers being { t i 3 present on both sides ~. That tells me something. I am not i I ? l 4 sure what itsis. l [ 5 DR. MORAY: I'was struck some years ago when I first { I k l 6 came across this by the interesting fact that in Britain, and [ i~ S 7 Canada they have a parliamentary system and law has evolved on f r f l 8 the basis of case, case studies, and the constitution is done f 9 by sort of, you know, discussions in the' context of past [ l 10 cases. l 11 Your constitution is a written constitution, and I i j 12 until very recently Canada didn't have have a written l l i 13 constitution. Of course the UK doesn't. It is almost as if l 14 your regulatory style a reflective of political constitution. r 15 You write the constitution, then you regulate downwards, 16 whereas the British and Canadians have got unwritten l 17 constitution, and tell people you can do what you like } 18 providing you can show us that it is okay, and it really is. 19 It is an interesting reflection of the political structures. 20 It is quite striking. 21 DR. SHEWMON: I am not a student of this, but I feel 22 that part of it has to do that every so often a legislater 23 gets his name in the paper and some notoriety by secusing the i 24 industry that the regulator is in bed with the industry, and i 25 too cozy with it, and that in an effort to show that they i HERITAGE REPORTING CORPORATION -- (202)628-4888

(.--_.._--._..-.....--.---_....-..-. . -.. _ _ -. -.... - -... ~. -.. - -... i 125 l l. l 1 aren't in bed and aren't cozy, they must be more stern. y l' - is quite poss'ible. We are aware of -2' DR. MORAY: That 3 the fact even th'at some of the things we have suggested in the a I i t. 4 way of ~'research about IIRC-on its own structure are probably l 5 strictly speaking outside its conventional mandate as to what j l i I j 6 it-is allowed to do research on. 4 7 DR. SHEWMO!!: The legislaters in Canada don't make j I l 8 their points in the same way or brownie points or something I j 9 am talking about? j i j i 10 DR. MORAY: For some reason, there seems to be much 11 less of that both in Canada and the UK. I should imagine in l 12 France they get positive brownie points by saying what a t l-t 13 splendid thing nuclear energy is. l O 1 14 MR. WARD: On this topic of regulatory industry, I J 1 l 15 guess my prejudices are about the same as--I am not saying l i I 16 yours are prejudices. My prejudices are similar to your v 17 understandings. Let's put it that way. I 18 But the contrary of what you just said, there is an- [ j 19 interesting report, and they can get you a copy of it before j i l 20 you leave, that--you don't know John O'Hearn recently wrote a l i t 21 study he did for, I think it was, it was the Province of f ( I 22 Ontario, provincial government, who wanted him to make an k 23 assessment of the Canadian style of regulating the nuclear [ I i 24 power versus the U.S. style. And I think he pointed out some i O e, 25 of the things that you have mentioned, but also he pointed out f i t 5 (202)628-4888 HERITAGE REPORTIllG CORPORATIOli --

126 1 that the Canadian style seems to be running into some problems s 2 that it is having, because of this kind of family around the } 3 table nature of regulation, there are some problems in 4 transporting that outside of Canada, and you know, when they 5 are intererted in selling power plants to other countries, 6 there is not a body of documented regulation. And second, 7 'maybe I found more interesting, there seems to be a problem of 8 transporting that to another generation of people who are 9 running and operating. 10 DR. MORAY: Yes. The first point you make I don't 11 know where it is that Canada don't sell abroad, but they 12 certainly don't sell. 13 The second one I think is a very interesting one, 14 and may be valid. I think it is a widespread observation in 15 many fields of life that the second generation of almost any 16 organization finds it difficult to preserve the enthusiams and 17 the dedication of the first, whether it is a political 18 organization of a country, or whatev2r, I mean I think that 19 is why Mau Tai Sung unleashed the cultural revolution was to. 20 try to keep the enthusiasm going. 21 I think that is, I mean I think that is interesting 22 on all sides, and is probably independent of the particular 23 kind of regulation. I mean we are not, remember we are not, 24 in this document we are not getting any solutions. All we are O 25 doing is identifying questions which need to be researched. HERITAGE REPORTING CORPORATION -- (202)628-4888

127 1 And if I had given the impression that I'know the-answers, I L{}: 2 certainly-overstepped the intentions of what I meant to have 3 been doing, got drawr. into f ascinating conversations with you. -4 What the report is aboutHis simply areas to which we 5 do not.know the answers and where it would be nice to know: 6 them, and it occurred to me I didn't mention the absolutely 7 paradiametric evidence where management is of importance and 8 that is Chernobyl. Chernobyl was management-induced fault, 9 aided by design perhaps, but basically it was a 10 management-induced fault, and it would be extremely unwise to 11 think that management-induced faults cannot occur in countries i 12 other than the Soviet union. j 13 MR. EBERSOLE: By that you just don't mean i. the 14 operational context way back into the design and report i 15 decisions? I 16 DR. MORAY: Sure. So bear in mind when you say the 17 report, what we are doing is we are trying'to give NRC our 38 support in rebuilding a human factors program plan which is 19 going to be difficult given its past history. Fundamentally i. i l 20 the entire operation is driven by the fact that somewhere r 21 around about whe.t, 30 percent, 50 percent, 80 percent, of l [ 22 incidents and accidents in some way human induced. As long as 23 that remains true, it is extraordinarily difficult to see why I i s i -24 there should not be a program of human factors research in a t ( 25 major industry. l l HERITAGE REPORTING CORPORATION -- (202)628-4888 t f

_ ~. - _. - - - - - - - - _ - - - - - - - - - I f-_ 128 { 4 i i i [ l' + MR. WARD: Neville, thank you very much. I think i 2 you have been all I hoped for. t [ 3 DR. ret 1ICK: We thank you vel < much--most j i 3 L 4 interesting report, and we will reconvene, gentlemen, at 1:00, i 5 .and we will take up operating events and incidences. l l l ' i 6 (Whereupon, at Noon, the meeting was recessed, to 7 reconvene at 1:00 p.m. the same day.) 3 t 8 i 9 l r I i 10 l-l l 11 12 t I 13 O \\ i 14 l l 15 l 16 17 18 19 i h 20 i l 22 ,23 i i [ 24 t l9 25 HERITAGE REPORTING CORPORATIO!! -- (202)628-4888

i i tq (~} REPORTER'S CERTIFICATE \\ 3 OOCKET NUMBER: L 4l CASE TITLE: Advisory Committee o1. Reactor Safety 5 HEARI G DATE: March 10, 1988 6 LOCATION: Washington, D,C. 7 I hereby certify that the proceedings and evidence 8 are contained fully and accurately on the tapes and notes 9 reported by me at the hearing in the above case before the 10 Nuclear Regulatory Commission 11 and that this is a true and accurate transcript of the case. 12 () 13 Date March 10, 1988 14 15 1 E4fthJ e 1 t / Official Reporter ~ - $ERITAGE REPORTING CORPORATION 18 1220 L Street, N.W. Washington, D.C. 20005 19 f i 20 21 22 i N () 24 HERITAGE REPORTING CORPORATION l (202)62S-4888 i

O HUMAN FACTORS RESEARCH AND NUCLEAR SAFETY PANEL ON HUMAN FACTORS RESEARCH NEEDS IN NUCLEAR REGULATORY RESEARCH r co""'""= o" "u"^" racroas O COMMISSION ON BEHAVIORAL AND SOCIAL SCIENCES AND EDUCATION NATIONAL RESEARCH COUNCIL I i i O I l

Q PANEL MEMBERS NEVILLE MORAY (Chair), Department of Industrial Engineering, University of Toronto LINDA COHEN, Depa.tment of Economics, University of California, Irvme RUSSELL DYNES, Department of Sociology, University of Delaware HERBERT ESTRADA, MPR Associates, Washington, D.C. CLAY E. GEORGE, Department of Psychology, Texas Tech University PAUL M. HAAS Advanced Systems Technology, International Technology Corporation, Oak, Ridge, Tennessee LARRY HIRSCHHORN, Wharton Center for Applied Research, Philadelphia, Pennsylvama l JOYCE KEEN, Clinical Psychology, Iowa Methodist Medical Center, Des Moines, Iowa TODD R. LAPORTE, institute of Governmental Studies, University of California, Berkeley O JENS RASMUSSEN, C nitive En ineeringbenmarkRISO National Laboratory and

enmark, skilde, Technical University of RICHARD SHIKIAR, Battelle Human Affairs Research Centers, Seattle, Washington J. ED SMITH, J. Ed's Nuclear Service Corporation, Central, South Carolina l

DAVID WARD, E.I. du Pont de Nemours and Company, Savannah River Laboratory, Aiken, South Carolina DAVID WOODS, Westinghouse Research and Development Center, Pittsburgh, Pennsylvania THOMAS B. SHERIDAN (ex officio), Chair, Committee on Human Factors HAROLD P. VAN COTT, Study Director STANLEY DEUTSCH, Study Director (1984-1987) BEVERLY M. HUEY, Research Associate / Consultant

O THE PANEL'S CHARGE "[to] identify study areas in the current and recent programs that may have received inadequate attention and to provide guidance to the Office of Nuclear Regulatory Research, the Nuclear Regulatory Commission (NRC), and other research and i development agencies in government, private industry, and universities regarding an appropriate research program in human O racto,s to enhance the sare ope,ation or nuclear power plants." i h I' L h i b O

TABLE 1 O

SUMMARY

OF NRC RESEARCH Based on list of NUREGs and NUREG/CRs provided by NRC The following table shows the number of reports which have been published since 1975 on each topic of research in some cases, reports have been included in more than one category because of the nature of the work. Organization and Management 8 Training Simulators 7 Emergency Preparedness 4 Operating Procedures (including Emergency Operating Procedures) 10 0 Ope,ato, E,,o,s 14 Displays and SPDSs 22 f Selection 1 ( Job and Task Analysis 8 Allocation of Function 2 Qualifications & Licensing 23 Performance Measurement 7 Training 8 Operator Behavior, STA 9 Control Room Design Evaluation 6 Maintenance 13 Human Error Probability and PRA 27 O l 1

O Overview STARTED: January 1,1986 COMPLETED: February 29,1988 APPROACH:

  • SEVEN PANEL MEETINGS
  • BRIEFINGS BY:

Argonne National Laboratory Department of Energy O Eiectric power Research institute Hanford Engineering Development Laboratory f Institute of Nuclear Power Operation Nuclear Regulatory Commission Westinghouse

  • VISITS TO:

Electric Power Research Institute Three Mile Island

  • REVIEW OF NRC AND OTHER RELATED PUBLICATIONS 1

l 'O 1 1

~ O ENVIRole(ENTAL CONTEXT C ORGANIZATIONAL / MANAGEMENT INFRASMUCTURE PERSONNEL SUBSYSTDI A TECHNICAL / 8 ENGINEERING B SYSTEM A .lO C l I FIGURE 1 Components of a integrative System Safety Analysis Adapted from: Shikiar, R. An Integrative Approach To System Safety. Battelle Human Affairs Research Centers Report, BHARC 400/85/014; Seattle, Washington.

O RECOMMENDATION 1: COMMITMENT TO HUMAN FACTORS RESEARCH l l The panel recommends that the NRC make a firm public commitment to applied behavioral and social science (human factors safety) g, research. This would require a decision to increase staffing and financial support. 1 a O l

RECOMMENDATION 2: ADOPTING A SYSTEMS-ORIENTED APPBOACH i in recognition of the many ways in which human behavior can affect nuclear power plant safety, the panel recommends that the NRC's research program maintain a broad perspective. The operator / maintainer-plant interface is extremely important; but other O fact rs arising fr m the way in which a plant is organized, staffed, managed, and regulated and the way it interacts with other elements of the industry can also affect human performance, induce human error, and increase the level of risk of a plant.

m O REC.OMMENDATION 3: PEER REVIEW AND ENHANCED ACCESS TO NUCLEAR POWER RESEARCH FACILITIES AND PERSONNEL The panel recommends that the NRC involve a diverse group of knowledgeable researchers in planning, conducting, and evaluating its research program. In addition, peer review of proposals and of draft reports by behavioral science experts is needed to ensure the quality of sponsored research. O One of the barriers to effective human factocs research has been the failure to provide behavioral science researchers access to realistic settings, to facilities such as simulators, and to people j such as experienced operators. While the panel recogni:es tha practical difficulties involved, we strongly urge the NRC and the nuclear industry to take significant steps that enhance researchers' access to these facilities and people. One step towards achieving this goal would be to create a national research facility for the study of human factors in nuclear power systems. O

l- ) 'l l/ \\ a O i RECOMMENDATION 4: CONTINUITY IN T.NE RESEARCH PROGitAM i: l I \\ / For the research prograrn ?.e.nroduce useful, practical results, continuity on important !ssues is essential. To be effective, a l research program must operate coherently for an extended period i rather than change in response to each new, immediate, external O d ' * * " d S ' " c ' ' ' " ' ' ' ' c h ' ' ' " * " ' ' " ' ' ' " * ' " " '

  • Y ' ' " "

l important as level of expenditure. t i / i l O f ..--...____..._____________.___,_______.[,_,,__ j

O RECOMMENDATION 5: TRANSFER OF KNOWLEDGE The panel recommends that the NRC take the greatest possible cdvantage of ex.isting research in the behavioral and social sciences by increasing the transfer of knowledge to the nuclear industry. To O this end, the panel recommends that the NRC publish an annual review of the human factors research relevant to the nuclear power industry. l l l O l

O RECOMMENDATION 6: DISSEMINATION OF NUCLEAR INDUSTRY HUMAN FACTORS RESEARCH The panel has observed that several problems exist in the usability and transfer of human factors research reports prepared by the NRC, its contractors, the national laboratories, and other elements working on human factors research related to nuclear power that should be addressed. O One impediment is the difficulty in searching for and retrieving human factors research reports. We are not aware that any central bibliographic data base or search service exists to abstract, index, cnd make available bibliographic or full text information, including NRC human factors publications. We recommend that mechanisms to improve the dissemination of human factors results throughout the industry be developed. One element is to use or develop a bibliographic or search service. As a first step the panel recommends the development of a bibliographic system for NRC-supported human factors reports. O l i . ~.

RECOMMENDATION 7: A HUMAN FACTORS AGENDA BASIS FOR DETERM!NING RESEARCH PRIORITIES: Some research topics may have a criticalimpact on safety and thus must be addressed immediately. In some areas research is needed as a basis for evaluation. O A particular research topic may be an essential building block for a long-term program. NOTE: In all cases research should be aimed at management, maintenance, and other ancillary workers, as well as control room operators. ) l 1

l O ) HUMAN-SYSTEM INTERFACE DESIGN 1 Highest priority topic: Automation and computer-based job performance aids I

2) PERSONNEL SUBSYSTEM Higher priority topics:

Maintenance and enhancement of operational skill I l 1 Improvements in licensing examinations Shift Scheduling and Vigilance O

O

3) HUMAN PERFORMANCE Higher priority topic:

) Causal models of human error, especially for situations with unplanned elements

4) MANAGEMENT AND ORGANIZATION High priority topics:

O . The impact of,eguiations on the p,actice or m,nagement l Organizational design and a culture of reliability O l

L i

O CONTROL OF HUMAN ERROR In engineering it is standard practice to control error by a feedback syriem. Controlling human error, and hence human-induced r

or human-exacerbated risk, should be done in the same way. Human factors research should be seen not as an answer to a question about risk, but as a control signalin a feedback system. Risk analysis suggests aspects of operation that require modification because they are prone to the effects of human error. Research suggests ways to change human behavior so as to reduce i human error. O Yhe results of these changes alter the values in the risk analysis. Further risk analysis and task analysis of new methods of operation will suggest further changes in operation or new candidates for l sources of human-error--and the cycle will repeat. l l I l i l ~ _..

O CONTROL OF HUMAN ERROR (CONT.) If the results of research are to lead in a direct and practical way to the reduction of error and the reduction of risk, then research must be coupled to reliability analysis and to management, operations, maintenance, and regulation, so that an effective control signalis sent through the system. The NRC must conduct regulatory research on the problem of coupling the control signals of research to their reliability and risk analysis so as to optimize the control operations, not just to Q answer questions and accumulate knowledge. O 1

4 O

5) THE REGULATORY ENVIRONMENT Higher priority topics:

The appropriate < nix of government regulation and industry self-regulation

O 1

Developing and tracking a wide array of performance l indicators i O

O Human-System Interface Design Computer-based information and display systems Nature of effective systems Automation and computer-based performance aids . Methods of assessment and evaluation Operating procedures Including validation Human factors in software development O lO l File 2836M, 4

? L O Personnel Subsystem Training Measurement of effectiveness . New methods of training Whole-versus part-task simulators Exploratory training Embedded training . Rare / unknown events Qualifications Licensing examination, validity, reliability Academic qualifications Staffing STA Screening and selection Shift scheduling and vigilance O 1 l l l O File 2836M, 5 l


,-.---,,,,n,-_,,,_.,,n,-n,,,

,..., - ~ -

Y t 1 O Human Performance Measurement of performance Causal models of 11uman error . Less emphasis on HEP estimation More emphasis on predictive models I t O I i O 1 File 2836M, 2

O O Organization Aspects of NPPS Impact of regulation on management Style of regulations l Relation of production to safety Regulations and cooperation Reduction of adversial stance Organizational design i . Management and safety . Management and culture of reliability l Operational decisionmaking { ' Q . Management style and performance l Emergency identification and timely response Selection and training of managers f i l I r i l l i O 1 ? Fife 2836M, 3

o O Regulatory Environment Development of regulation Regulatory impact on innovation Human factors of NRC Models of regulation Plant oerformance indicators l ' O l O File 2836M, 1 l

O CONCLUSIONS The panel is encouraged by the initiative shown by the NRC to develop and fund a new human factors research program. If this plan is implemented in 1988, receives the strong support of the NRC and of the industry, is managed by a qualified human factors specialist, is staffed by a team of multidisciplinary scientists, and is organized l Q cs a separate branch rather than as a subdivision of the reliability branch, then the initial steps of leadership required of the NRC in this critical area will have been taken. Further steps will be taken i as the NRC and the industry review and implement the recommendations made by f he panel. i O}}