ML20210G050
| ML20210G050 | |
| Person / Time | |
|---|---|
| Site: | Sequoyah  |
| Issue date: | 02/02/1987 |
| From: | Stewart D, Violette J, Walters R TENNESSEE VALLEY AUTHORITY |
| To: | |
| Shared Package | |
| ML20210F779 | List: |
| References | |
| 205.4(B), 205.4(B)-R01, 205.4(B)-R1, NUDOCS 8702110213 | |
| Download: ML20210G050 (25) | |
Text
~,${
TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(8)
SPECIAL PROGRAM REPORT TYPE:
SEQUOYAH ELEMENT REVISION NUMBER: 1 TITLE:
CONTROL 0F' DESIGN CALCULATIONS Veri fication/ Documentation of Quality Related Desip PAGE 1 0F 24 Computer Codes REASON FOR REVISION:
1.
Revised to incorporate SRP and TAS comments, add chronolog, and add l
Section 10, Corrective Action.
PREPARATION PREPARED BY:
l-2 S-47 o
,u w
(/
SIGNATURE DATE REVIE W5
(
EVIEW G IIIt SIGN URE DATE hh,)
7-2-97 l
g/Fj' '
SIGNATURE DATE CONCURRENCES AhYW
/ 2&hf CEG-H:
Id
/ F7 SRP Jy' 2-2-77 l
SIGNATURE DATE SIGNATURg DATE APPROVED BY:
MWdan!
MN
.ax ECSP MANAGER DATE MANAGER OF NUCLEAR POER DATE CONCURRENCE (FINAL REPORT ONLY)
- SRP Secretary's si gnature denotes SRP concurrences are in files.
8702110213 870205 PDR ADOCK 05000327 P
PDR d
1YA EWLOYEE CONCERNS REPORT NUMER: 205.4(B)
SPECIAL PROGRAM REVISION NUMER:
1 PAGE 2 0F 24 1.
CHARACTERIZATION OF ISSUES:
Concern:
Issues:
HI-85-077-N15 a.
Inadequate verification of quality-
"NRC identified the following related design caputer programs.
concern from review of the QTC file: '_ Inadequate verifica-b.
Inadequate docuentation of quality-tion /docuentation of quality-related design computer programs.
related design computer codes."
2.
HAVE ISSUES BEEN IDENTIFIED IN ANOTHER SYSTEMATIC ANALYSIS? YES X NO Identified by NCR-SQNECB8501 and NCR-GENECBS501
(
Date 04/11/85 and 03/18/85 Identified by NCR-GENNEB8501 Date 03/28/85 3.
DOCtMENT NOS., TAG NOS., LOCATIO6B OR__0THER SPECIFIC DESCRIPTIVE IDENTIFICATION 3 STATED IN ELtMtXT':e None 4.
INTERVIEW FILES REVIEWED:
The expurgated file for HI-85-077 was reviewed relating to concern N15. The file indicated that the concern was oriented toward lack of QA Program controls for cmputer programs used for the cable routing system.
5.
DOCUMENTS REVIEWED RELATED TO THE ELEMENT:
See Appendix A.
6.
WIAT REGULATIONS, LICENSING COM41TMENTS, DESIGN REQUIREMENTS, OR OTHER APPLY OR CONTROL IN THIS AREAT
(
See Appendix A.
0414D (01/23/87)
4 TVA DFLOYEE CONCERNS REPORT NUteER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1 PAGE 3 0F 24 7.
LIST REQUESTS FOR INFORMATION, MEETINGS, TELEPHONE CALLS, AND OTHER DISCUSSIONS RELATG TO ELEMENT.
See Appendix A.
8.
EVALUATION PROCESS:
a.
Reviewed industry standards and regulations for requirements applicable to the verification and documentation of quality-related design computer programs, b.
Reviewed TVA procedures and practices applicable to SQN for implementing the requirements identified in "a" above.
c.
Ingestigated the implementation of the procedures and practices identified in "b," by reviewing the computer program documentation system, examples of canputer program verification records, and related documentation.
d.
Interviewed cognizant TVA parsonnel, and reviewed evidence of previous investigations and nonconfonnance reports to develop an understanding of identified problems.
e.
Assessed the results of the evaluation steps in determining the adequacy of verification and documentation for quality-related design computer programs.
(.
0414D (01/23/87)
o TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1 PAGE 4 0F 24 9.
DISCUSSION, FINDINGS, AND CONCLUSIONS:
Chronology:
05/70:
Construction permit issued for SQN Units 1 and 2 05/79:
Engineering Design (EN DES) procedure EP 3.23 provides fonnal procedure for control of computer programs 09/80:
Operating license issued for SQN Unit 1 0 9/81 :
Operating license issued for SQN Unit 2 10/84:
Engineering Computer Methods Branch (ECB) is formed to provide administrative control over computer applications for engineering - prior responsibility was with the Civil Engineering Support Branch (CEB) 03/85:
NCR GENNEB8501 filed regarding lack of verification documentation for certain computer programs used in the Nuclear Engineering Branch (NEB) 04/85:
NCR SQNECB8501 filed regarding lack of verification documentation for computer programs used in the SQN cable routing system 07/85:
Procedure ECB-EP 28.01 supersedes EP 3.23 for procedural control of computer program documentation 08/86:
Employee Concern HI-85-077-N15 received by TVA 10/86:
Quality Assurance Evaluation Report - SON Computerized Cable Routing System, documents on evaluation of the SQN cable routing system, with recommended corrective actions Discussion:
9.1 BACKGROUND
The Sequoyah Plant design was begun in the late 1960s when compliance to regulatory requirements was not required to be well documented. The majority of the SQN licensing commitments were made in the late 1960s and early 1970s, and some of the present day regulatory documents are not Sequoyah requirements.
It is not necessary to update the Sequoyah Plant to include all of the new guidance published by NRC, unless there are specific requirements or comnitnents to do so.
0414D (01/?3/87)
-s TVA EWLOYEE CONCERNS REPORT NUMER: 205.4(B )
SPECI AL PROGRAM REVISION NUMER: 1 PAGE 5 0F 24 i
This employee concern was originally raised at Watts Bar Nuclear Plant (WBN). It was considered generically applicable to Sequoyah Nuclear Plant (SQN) since the organization and procedures that governed SQN design were essentially identical to WBN.
The issue identified in this element refers to programatic deficiencies in the control of computer programs used in the design process. In addition to computer program verification, the issue was conservatively interpreted to include other types of docuentation associated with the control of computer program use in engineering.
9.2 GOVERNING STANDARDS AND REGULATIONS The baseline requirements for programmatic controls in the development and use of computer programs in nuclear safety-related design, stem from the general requirements in 10CFR50 Appendix B, Criterion III, " Design Control." This criterion states in part:
"... design control measures shall provide for verifying or checking the adequacy of design, such as by the performance of design reviews, by the use of alternate or simplified calculational methods, or by the perfomance of a suitable testing program. The verifying or checking process shall be perfomed by individuals or groups other than those who performed the original design,..."
The Appendix B requirements are further defined in ANSI N45.2 and ANSI N45.2.11, which prescribe the necessary features of the controls for the design process.
Use of computer programs in the design process requires that appropriate controls be imposed. The l
controls include measures for verification / doc:nentation of those computer programs used for quality-related design, that derive from generalized requirements of the ANSI standards, such as the following:
o Acceptable verification methods include design reviews, l
alternate calculations and qualification testing o
Verification must be docuented and the docuentation of verification retained o
Changes are subject to verification o
Docmentation must be auditable against the identified verification method f.
l l
04140 (01/23/87)
v TVA EMPLOYEE CONCERNS REPORT Nt9EER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1 PAGE 6 0F 24 o
Deficiencies or errors must be controlled by corrective actions to ensure reporting and follow-up o
Review must establish that inputs are correct, assumptions and limitations are described, the methods are appropriate for the intended use, and the output is reasonable compared to the input 9.3 GOVERNING PROCEDURES The current TVA procedures implementing the above requirements and providing the controls for verification and documentation of computer programs were reviewed. They include Nuclear Engineering procedures (NEPs) governing design calculations (NEP 3.1), design output (NEP 5.1), and the specific procedure for control of computer usage and computer program documentation (ECB-EP 28.01).
It was observed that formal procedures for the control of computer programs were not initiated at TVA until quite recently, with the issue of EN DES-EP 3.23 on May 25,1979.
Therefore, specific TVA requirements for computer program verification and documentation were not fonnalized during the period of SQN design activities prior to 1979.
Relevant engineering procedures were upgraded in July,1986 through the issue of change notices to NEP-3.1 and NEP-5.1, which provided more explicit controls for computer-generated calculations and design output.
These changes included specific requirements and responsibilities relating to the use of computers in the design process, and upgraded previous editions of engineering procedures l
that were lacking such coverage.
The following addition made to NEP-3.1, Calculations, in the July 1,1986 change notice is considered by the evaluator to be of special significance relating to computer program verification:
"4.1.2 Preparation (continued)
Preparer 3.
Ensures that for all computer programs used to perform computations / analyses:
o The program has been verified and documented, and is controlled in accordance with ECB-EP 28.01 (is now being upgraded to an NEP) j 04140 (01/23/87)
s TVA EWLOYEE CONCERNS REPORT NUM ER: 205.4(B)
SPECIAL PROGRAM REVISION NUMER: 1 PAGE 7 0F 24 o
The preparer of the calculations is an authorized holder of a controlled user manual for the program, if applicable.
o The sof tware version, computer input, and computer output are docuented, retrievable, and referenced in the calculation docuent."
This change highlights the calculation preparer'.s responsibilities relative to computer program use in the design process, and properly incorporates several basic principals for control of this subject.
The Engineering Computer Methods Branch (ECB) presently has the responsibility to prepare, or coordinate the preparation of, all Division of Nuclear Engineering (DNE) computer program docmentation. Prior to October 1984, that responsibility resided with the Civil Engineering Support Branch (CEB) through a computer services staff.
In spite of the organizational changes for computer program control, the procedural requirements and implementation activities remained essentially the same through the organizational transition.
ECB-EP 28.01 presently provides for control of DNE computer activities, and includes methods for implementing the verification 4
and docuentation requirements of the governing standards. The evaluator was informed that this docuent is being revised, upgrading it to NEP status to emphasize its general applicability throughout DNE, and also to update and clarify procedural requirements detemined to be necessary by TVA as part of the corrective actions taken in response to Nonconfomance Reports (NCRs).
9.4 VERIFICATION OF COMPUTER PROGRAMS The requirements for verification of computer programs constitute specialized applications of design control measures relating to design verification.
ECB-EP 28.01 provides a definition of verification as follows:
l l
(
0414D (01/23/87)
W TVA DFLOYEE CONCERNS REPORT NUtBER: 205.4(B )
SPECIAL PROGRAM REVISION NUISER:
1 PAGE 8 0F 24
" Verification - Process by which it is detemined that computer sof tware conforms with at least one of the following standards:
a.
The computer program is a recognized program in the public domain, and has had sufficient history of use to justify its applicability and validity without further demonstration. The dated program version that has been used, the software or operating system, and the computer hardware configuration must be specified to be accepted by virtue of its history of use.
b.
The computer program',s solutions to a series of test problems, with accepted results, have been demonstrated to be substantially identical to J
those obtained by similar, independently written programs in the public domain. The test problems should be demonstrated to be similar to or within the range or applicability for the problems analyzed by the computer program to justify acceptance of the program, c.
The computer program',s solutions to a series of test problems are substantially identical to those obtained by hand calculations or from accepted experimental test or analytical results published in technical literature. The test problems should be demonstrated to be similar to the problems analyzed to justify acceptance of the program."
ECB-EP 28.01 provides general requirements for perfoming the computer program verification, doctnenting it as a mandatory part of the program manual, and controlling it as part of the required documentation retained in the DNE Computer System Library.
As a corollary to the requirements for verification of computer programs, the evaluator also confimed that the TVA procedures addressed the responsibility for validation of computer program applications as part of the controls on computer usage.
In this area ECB-EP 28.01 specificall requires that the program user perfoms the following:y
(
04140 (01/23/87)
TVA ENLOYEE CONCERNS REPORT NUMBER: 205.4(B )
SPECIAL PROGRAM REVISION NUMBER:
1 PAGE 9 0F 24 1
" Program User...
5.
Prepares for each application by use of the controlled computer documentation and execution procedures; ensures that the program applies to the job at hand.
j 6.
Ensures valid use of the program.
Note On request, ECB provides consultation on specific uses of programs, where expertise is available. The user, however, must decide
=
whether a program is suited to the particular
{
use...."
To facilitate the investigation of implementation of the requirements for computer program verification, TVA',s methods of docmenting the verification of computer programs were classified by the evaluator into three general categories:
?
o Docnentation of computer program verification that is controlled and maintained by ECB in the DNE Computer System Library in accordance with ECB-EP 28.01 o
Docuentation of verification that is prepared and maintained as part of an engineering calculation, typically for computer programs where the output can be verified each time the program is executed o
Docmentation controlled and maintained for non-TVA sof tware by organizations outside TVA, such as computer services vendors f
Each of these categories was investigated by reviewing examples of the verification docuentation practices being followed within DNE.
To evaluate verification docuentation of the type in the first r
l category noted above, records maintained by ECB in the DNE Computer System Library were reviewed to ccnfinn the existence of verification for safety-related computer programs. Doceentation files for a sample of programs, representing the various technical branches, were reviewed to the ECB-EP 28.01 requirements (App. A, 5.ss).
In addition, an overview of the docuentation for the other programs in the DNE Computer System Library was perfomed to detemine general content.
{
04140 (01/23/87)
r 1/A DFLOYEE CONCERNS REPORT NUMER 205.4(8)
SPECIAL PROGRAM l
REVISION NUSER: 1 PAGE 10 0F 24 The review indicated that except for the conditions noted in the following paragraphs, regarding deficiencies in the doceentation of cable routing programs and the response program, the files contained verification doceentation for each program sampled. The docuentation included hand calculations and/or computer verification runs that established conforisance to ECB-EP 28.01.
a Deficiencies regarding the cable routing program verification docuentation had previously been identified by TVA, and are the subject of TVA NCR SQNECB 8501. The NCR reported that there was no verification docuentation or controlled user docuentation available for the computer programs used in the cable routing system. This condition was apparently due to these computer programs erroneously being classified as " business" category j
programs, not subject to quality assurance program requirements.
Corrective action for this NCR is in process and includes procedure modifications and the development of required computer program verification docuentation.
l A TVA report, " Quality Assurance Evaluation Report - Sequoyah Nuclear Plant Computerized Cable Routing System" (App. A, 5.t),
i docuents an evaluation of the SQN computerized cable routing i
system and confims the lack of adequate docuentation of computer l
program verification.
Further detatis on NCR SQNECB 8501 and the above noted TVA report l
are contained in Sequoyah Element Report, 239.0, including identification of deficiencies in the verification calculation
( App. A, 5.u) prepared by Engineering as corrective action for the I
NCR.
In addition to files discussed above, one verification file, l
RESPONSE 545-088-262297, contained docuents that were reproduced from microfilm records. The docments were not legible, preventing confimation of the adequacy of the verification, and an independent DNE review of the verification package was not evi dent. Discussion of this file with responsible CEB personnel established that the RESPONSE computer program was of early 1970s l
origin, and was not currently used for design output. The verification docmentation was a retrofit activity carried out by TVA to demonstrate correlation with another independently written computer program.
l L
l I
t i
r i
I
{
04140 (01/23/87)
.,. _. _, ~,,,,,........ - _.. _ _, _ _. _ _.
TVA EFLOYEE CONCERNS REPORT NUpBER: 205.4(B )
SPECIAL PROGRAM REVISION NUpBER: 1 f
PAGE 110F 24 f
To evaluate verification docuentation of the type prepared l
and maintained as part of an engineering calculation (rather than maintained by the library), examples of calculations prepared by NEB that included computer program verification i
doceentation were reviewed (App. A, 5.v and w). Although the examples demonstrated compliance with the requirements of ECS-EP 28.01, an interview with NB personnel detemined that deficiencies in this area of computer program verification had been documented on NCR GENNEB8501.
NCR GENNEB8501 identifies a lack of verification for three computer programs (CORAD, STPISOTP, and QADISOTP), which were used in safety-related analysis on SQN. These are programs used within the Nuclear Engineering Branch (NB), and the i
docunentation of verification would have been expected to exist as part of the calculation packages for which these computer programs were employed. The reason for the omission of doceentation was stated by NEB personnel to be the lack of procedures for such verification at the time when these comput9r programs were first authored or used in NEB. The impact of the deficiencies docunented in NCR GENNEB8501 was evaluated by TVA, and determined not to be a significant condition adverse to quality.
Because of the existence of these identified cases of lack of verification docunentation in calculation packages, the evaluator reviewed the elements of the TVA Design Calculation j.
Verification Program (DCVP), to determine whether or not that program would identify other similar cases of omission - if they existed. TVA has comitted to the DCVP to establish the identification of those calculations required to support i
safety systems used for safe shutdown (essential calculations). After identification, the essential calculations are to be located and reviewed; and then i
generated, updated, or superseded as necessary to support the l
design ( App. A, 5.hh). Further details on the DCVP are i
discussed in Sequoyah Element Report 205.1.
Engineering Branch instructions for accomplishing the DCVP j
were reviewed by the evaluator to establish whether this j
program included measures to confim the existence of computer i
sof tware verification for those cases where a computer program l
was utilized in generating an essential calculation.
The l
existing instructions do not include specific measures for confirming this item.
t i
(
)
i 04140 (01/23/87)
TVA ENLOYEE CONCERNS REPORT NUMER: 205.4(B )
SPECIAL PROGRAM REVISION NUMBER: 1
/
PAGE 12 0F 24 t
To address the verification of non-TVA computer programs controlled and maintained by canputer services vendors, ECB-EP 28.01 requires an auditable, TVA-approved, QA program. The evaluator reviewed the implementation of this requirement for Control Data Corporation (CDC), the major source of non-TVA 1
computer programs used by DNE.
It was confirmed that TVA had evaluated and approved the CDC " Quality Assurance Policies and Procedures" manual, and had audited the implementation of the CDC quality assurance program.
9.5 COMPUTER PROGRAM DOCUMENTATICN The requirements for computer program documentation are contained in ECB-EP 28.01, and are sunearized in Appendix A to that procedure, which provides a description of the contents for program manuals and user manuals.
The following are identified as mandatory elements of the program manual documentation maintained in the computer program library:
o Engineering software sunnary (provides information on sof tware ID, program principles, operating system, etc.)
o Revision control record 1
o Program description o
Assunptions and limitations o
Input requirements o
Execution instructions and requirements o
Source testing o
Verification In addition to the documentation identified above, the procedures also require documentation to control computer program error reporting and follow-up, and controls for distribution of user manuals.
Samples of the program manual documentation in the computer program library were reviewed by the evaluator. Although fonnat was observed to vary widely among the manuals, and several adninistrative anomalies were noted (see App. A, 7.a),
the docunentation was adequate.
i
(
04140 (01/23/87)
TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NLMBER: 1 0
PAGE 13 0F 24 A review of the ccmputer program error reporting system was l
performed by the evaluator.
The requirements in ECB-EP 28.01 provide only a minimum description of responsibilities and activities associated with this subject. However, in reviewing DNE's processing of error reports for 1985 and 1986, the evaluator observed that the necessary steps for controlling and administering this activity were being accomplished and documented within ECB. Documentation included a control log to track and maintain status of the error notice review cycle: documentation of the distribution of error notices to the computer program user's branch for determination of impact and further dissemination to appropriate users; and documentation of the evaluation and impact of the identified computer program error.
j T'i. evaluator noted a significant quantity of documentation in t.1e computer program error reporting system, concerning error l
reports received from computer service bureaus (esp. Control Data Cor,) oration) for computer programs developed and controlled outside TVA.
NRC recently highlighted in IE Information Notice 86-77 a general concern with follow-up on l
computer service bureau errer reporting.
The existence of DNE documentation for service bureau error reports is a positive indicator that this particular area is not a problem at TVA.
Imp 1tmentation of the system to control user manucls was also reviewed. While the essential requirements for this system are included in ECB-EP 28.01, the implementing instructions were provided in an informal desk procedure used by the individual responsible for the distribution. The system appeared well organized, with master copies of the user manuals maintained in a controlled fashion. Maintenance of accurate users lists was observed to be a considerable task.
In light of the transitions in the DNE workforce a confirmation of the current status of these lists by TVA could be of benefit.
Findings a.
The current TVA practices and procedures for verification and documentation of computer programs used in safety-related design on SQN provide a system that addresses the essential elements of the governing standards and regulations.
However, the following observations were made in evaluating this system:
04140 (01/22/87)
TVA EMPLOYEE CONCERNS REPORT NIMIER: 205.4(B)
SPECIAL PROGRAM REVISION NLMBER: 1 I
PAGE 14 0F 24 o
The formal TVA program for computer program documentation is of recent vintage (1979) relative to design activities for SQN.
It is not apparent that retrofit considerations for this documentation have been adequately addressed.
o The system has recently undergone considerable organizational change with the establishment of the Engineering Computer Methods Branch (ECB) to centralize DNE cenputer activities.
Procedure upgrades have also recently occurred, and additional procedure changes are apparently in
- process, o
Although recent changes to certain procedures (NEP-3.1 and NEP-5.1) provide upgrades to address computer program verification, the composite set of procedures governing DNE computer activities lack sufficient description of requirements and elements necessary to effectively implement the system for computer program verification and documentation.
Program elements such as reporting, Engineering Computer Program Library functions for documentation control, and controls for release of computer programs into production status, are examples of areas where additional coverage could be of benefit, b.
The documentation of those computer program verifications reviewed by the evaluator was in general conformance to the requirements of the governing procedure.
However, TVA nonconfonnance reports (NCR SONECB 8501 and NCR GENNEB 8501) document deficiencies regarding the lack of computer program verification documentation for certain programs:
o CORAD o
STPISOTP o
QADIS0TP o
Various computer programs for the SQN ccmputerized cable routing system as identified in NCR SONECB 8501 and the TVA " Quality Assurance Evaluation Report - Sequoyah Nuclear Plant Computerized Cable Routing System."
1 04140 (01/2?/87) i
TVA EMPLOYEE CONCERNS REPORT NLSWER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1 PAGE 15 0F 24 i
c.
In addition to the cases noted in b. of lack of verification documentation, the documentation file for one computer program verification (RESPONSE), was of insufficient legibility to be considered an adequate QA record.
d.
Documentation such as user manuals and error reports, necessary for proper control of the computer program activities in the design process, was in general conformance to the requirements of the governing procedure.
(With the exception of those cases identified in b.)
e.
The SQN restart program for review of the essential calculations, referred to as the design calculation verification program (DCVP), does not presently include measures to confirm the existence of computer program verification for those cases where a computer program was utilized in generating an essential calculation.
f.
The accuracy (correctness) of the lists used for distribution of controlled copies of the computer program user manuals is questionable, due to the many TVA personnel shifts occurring since the origination / revision of the lists.
==
Conclusion:==
Since specific cases of non-existence of required computer program verification documentation have been identified by TVA (NCR SQNECB2501 and NCR GENNEB8501), the evaluation team considers that the issue regarding inadequate verification and documentation of quality-related design computer programs is l
valid for specific instances.
Although no additional cases of lack of computer program verification documentation were identified in the evaluation, the fact that verification documentation does not exist for certain computer programs identified by TVA dictates that further actions are necessary.
It cannot be concluded that the condition of lack of verification documentation is isolated to the identified cases, without further justification and/or investigation beyond the scope of this evaluation.
04140 (01/23/87)
TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NLSWER: 1 I
PAGE 16 0F 24 10.
CORRECTIVE ACTION:
TVA has submitted a corrective action plan (TCAB-038) that has been reviewed by the evaluation team.
The corrective action plan commits to activities that, if properly implemented, should address the findings noted in Section 9 of this report.
A sumary of the committed actions, correlated to the applicable findings, is as follows:
a.
Findings (CATD 205.02 SQN 01, CATD 205.04 SQN 02)
Formal TVA procedures for the control of verification and documentation of computer programs used in design activities were not in place prior to 1979.
As a result, computer programs developed and used prior to the existence of formal procedure in this area may not have adequate verification and documentation.
In addition, further actions by TVA are necessary to justify that the lack of required computer program verification documentation is isolated to those cases aircady documented in TVA nonconfomance reports.
Committed Actions A complete list of computer programs used (past and present) for the generation of design output on SQN will be established by TVA. The process will include a survey of all DNE organizations, to provide infomation on computer programs used to generate or handle design output.
Each identified computer program will be evaluated to determine the level of usage, documentation, and verification.
Corrective actions will be taken in accordance with established procedures, to resolve any problems identified in the evaluation process.
ECD will have the lead responsibility for this corrective action, and will coordinate activities with the discipline branches.
The completion date for this corrective action is committed to be October 1,1987.
(
04140 (01/?3/87)
TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1
(
PAGE 17 0F 24 b.
Findings (CATD 205.04 SQN 03)
Corrective actions are not yet complete for certain TVA NCRs and evaluations that document deficiencies in verification documentation for certain computer programs used in SQN design activities:
o NCR SQNECB8501 o
NCR GENNEB8501 o
Quality Assurance Evaluation Report - SQN Computerized Cable Routing System Committed Actions The TVA corrective action plan provides a summary of the remaining activities necessary to complete these reports.
Those items with SQN restart significance are committed to be completed by March 31, 1987, c.
Findings (CATD 205.04 SQN 04)
Existing TVA procedures for control of the verification and documentation of computer programs used in design activities, do not provide sufficient description of requirements and the program elements necessary for proper implementation.
Committed Actions Procedure NEP-3.8, " Computer System Qualification and Control," which is currently in preparation, will include adequate coverage of such elements as error reporting and DNE Computer System Library functions for documentation and production library controls. Training on the NEP-3.8 requirements will be provided to DNE personnel.
The estimated completion date given by TVA for this non-restart activity, is June 9,1987.
d.
Findings (CATD 205.04 SQN 05)
The DNE Computer System Library file for computer programs RESPONSE, contains numerous documents that were reproduced from microfilm and are not legible.
l 04140 (01/?3/P7)
{
5 TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1
(
PAGE 18 0F 24 Committed Actions DNE/ECB will generate a legible microfilm copy of the RESPONSE computer program verification documentation, as a replacement for the existing record copy.
In addition, procedures will include the requirement for the DNE Computer System Library to verify the legibility of microfilm copies of computer system documentation (existing and future submittal s).
The estimated completion date given by TVA for this non-restart activity, is March 12, 1987.
e.
Findings (CATD 205.04 SQN 06) l Controlled computer program user's manuals are distributed through the use of lists which, in some cases, reflect extensive distributions.
The accuracy of those lists is questionable due to the many TVA personnel transitions occurring since the origination and/or revision of the lists.
Committed Actions DNE/ECB will verify the current user's manual distribution lists, and will include a procedural requirement for the DNE Computer System Library to periodically verify the distribution lists.
The estimated completion date given by TVA for this non-restart activity, is May 12, 1987.
f l
I
(
04140 (01/??/87)
i TVA EMPLOYEE CONCERNS REPORT NLMBER: 205.4(B)
SPECIAL PROGRAM REVISION NLMBER: 1
(;
PAGE 19 0F 24 APPENDIX A S.
DOCUMENTS REVIEWED RELATED TO THE ELEMENT:
a.
10CFR50, Appendix B, Quality Assurance Criteria for Nuclear Power Plants and Fuel Reprocessing Plants b.
ANSI N45.2-1971, Quality Assurance Program Requirements for Nuclear Power Plants c.
ANSI N45.2.11-1974, Quality Assurance Requirements for the Design of Nuclear Power Plants d.
ANSI /ASME NQA-1 (1986 Edition) Quality Assurance Program Requirements for Nuclear Facilities, Supplement 35-1, Supplementary Requirements for Design Control (Reference only
- not a TVA commitment) e.
IEEE Standard 730-1984, Software Ouality Assurance Plans, (Reference only - not a TVA commitment) f.
SQN FSAR, Section 17. " Quality Assurance," updated through Amendment 3, (04/86) g.
TVA Topical Report, TVA TR75-1 A, R8, Quality Assurance Program Description for the Design, Construction, and Operation of TVA Nuclear Power Plants h.
Office of Engineering Procedure, OEP-07, R0, Calculations, (04/26/85) 1.
Nuclear Engineering Proccoure, NEP-3.1, RO, Calculations, including Procedure Change Notice No. 1, (07/01/86) j.
Nuclear Engineering Procedure, NEP-5.1, R0, Design Output, including Procedure Change Notice, No. 1, (07/01/86) k.
Nuclear Engineering Procedure, NEP-5.2, RO, Review, (07/01/86) 1.
OE-01 2000, Computer Facilities and Equipment -
Administration and Control, (09/27/85) m.
EN DES-EP3.23, R3, EN DES Com) uter Activities Requiring Quality Assurance - Computer Jsage, Computer Program Documentation, and Computer Resident Data, (01/03/84) l Oal4D (01/23/P7)
TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1
(
PAGE 20 0F 24 APPENDIX A (Cont'd) n.
ECB-EP 28.01, R0, OE Computer Activities Requiring (uality Assurance - Computer Usage, Computer Program Documentation, and Computer Resident Data, (07/01/85)
Division of (uality( Assurance, Deviation Report o.
POE-A-85-0003-D03, 03/28/85) p.
Problem Identification Report GENNEB8601, (B45 860310 852),
(03/11/86) q.
Nonconformance Report SQNECB8501. (B45 850422 259), (04/11/85)
Nonconformance Report GENECB8501, (B42 850313 004), (03/13/85) r.
Nonconfonnance Report GENNEB8501RI, (B45 860512 851),
s.
(05/13/86) t.
Quality Assurance Evaluation Report, SON Computerized Cable i
Routing System (No RIMS), (10/28/86)
Office of Engineering Calculation, (B25 851011800),
u.
" Corrective Action for NCR SQNECB8501 by SQN Design Document Check," (10/11/85) v.
EN DES Calculation, TI-ANL-169, (NEB 841231 235)
" Installation and Verification of MONSTER Version 2.0A" (12/28/84) w.
EN DES Calculation, TI-ANL-1707 (B45 850529 235),
" Implementation of RELAPS/ POD 2 ' (05/27/85) x.
TVA memo frem E.G. Beasley to J. A. Crittenden, (805 850531 008) " Evaluation Report POE-A-85-0003-Control of Design Interfaces," (05/31/85) y.
TVA memo from E.G. Beasley to T. W. Roberts, (B05 850614 002), "0E QMS Audit 85 ECB Methods, Planning, and Development Group," (06/14/85) z.
TVA memo from T. W. Roberts to E. G. Beasley, (B42 850716 001), " Response to E0 (MS Audit 85 ECB Methods, Planning, and Development Group," (07/16/85) l t
aa.
TVA memo from E. G. Beasley to T. W. Roberts, (B05 850729
\\
001), "0E OMS Audit 85 ECB Technical Services Group,"
(07/29/05) 04140 (01/23/87) l
TVA EMPLOYEE CONCERNS REPORT NLSSER: 205,4(B)
SPECIAL PROGRAM REVISION NUMBER: 1
(
PAGE 210F 24 APPENDIX A (Cont'd) bb.
TVA memo from T. W. Roberts to E. G. Beasley, (B42 850916 001), "0E QMS Audit 85-31 ECB TSG,"
(09/16/85) cc.
TVA memo from T. W. Roberts to J. P. Vineyard, (B42 851021004), "Sequoyah Nuclear Plant Units 1 and 2 - NCR SQNECB8501 - Verification of Computer Cable and Raceway Programs and Data," (10/21/85) dd.
TVA memo from E. G. Beasley to Quality Management Staff Files, (B05 851217 001), " Deviation Report P0E-A-85-0003-003," (12/17/85) ee.
TVA memo from T.W. Roberts to E. G. Beasley, (B42 860110 004), Deviation Report POE-8-85-0003-003, (01/10/86) ff.
TVA memo to J. A. Crittenden to R. W. Cantrell, (L19 860114 861), "0E Response to Deviation f
POE-A-85-0003-D03," (01/14/86) gg.
TVA memo from R. W. Cantrell to R. J. Mullin, (B05 860129 001), "0E Response to Deviation POE-A-85-0003-D03," (01/29/86) hh, TVA memo from J. A. Kirkebo to Those Listed, (805 860307 006), " Design Calculations,"
(03/07/86) 11.
TVA memo from W. S. Raughley to Those Listed, (843 860111 903), " Policy Memorandum PM86-15 (EEB)-
Electrical Calculations Checklist," (08/06/86) jj.
TVA memo from R. O. Barnett to J. A. Kirkebo, (B41 860811 013), " Design Calculations," (08/11/86) kk.
TVA meno from C. A. Chandley to J. A. Kirkebo, (B44 860814 014), "Sequoyah Nuclear Plant - Review of 1
Existing Calculations 11.
TVA memo from J. A. Raulston to Those Listed, (045 860909 258), " Design Calculation Verification,"
(09/09/86)
DNE Computer System Inventory Current Through 9/12/86 mm.
(Draf t - Provided by TVA Transmittal No.140).
/
SON Supplier Evaluation Data Sheet, (L10 860612 809), Control nn.
04140 (01/23/87) l
TVA EMPLOYEE CONCERNS REPORT NUIEER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1
(
PAGE 22 0F 24 APPENDIX A (Cont'd) oo.
TVA Supplier Audit 85V-47, (L19 860618 800), Control Data Corp., (06/18/86) pp.
TV Supplier Audits 83V-17 and 92V-25, Control Data Corp.
(Various correspondence and data provided by TVA Transmittal No.148)-
qq.
Letter from McNutt to Parkinson, (TCAB-038), " Employee Concern Evaluation Program - Sequoyah Restart Program -
Corrective Action Plan (CAP) " (12/19/86) rr.
TVA memo from W. Zobel to D. T. Clift, (B45 860505 235),
" Computer Code CORAD," (12/24/86) ss.
DNE Computer System Library Files for Computer Programs:
SPIPE, CONAN, FAAST, STP, CH1224, Cable Routing, RESPONSE 6.
WHAT REGULATIONS, LICENSING COP 941TMENTS, DESIGN REQUIREMENTS OR OTHER APPLY OR CONTROL IN THIS AREA?
a.
10CFR50, Appendix B, Quality Assurance Criteria for Nuclear Pqwer Plants and Fuel Reprocessing Plants b.
ANSI N45.2, Quality Assurance Program Requirements for Nuclear Power P1 ants c.
ANSI N45.2.11, Ouality Assurance Requirements for the Design of Nuclear Power Plants d.
SQN FSAR, Section 17, " Quality Assurance" e.
TVA Topical Report, TVA TR75-1 A, Quality Assurance Program Description for the Design, Construction and Operation of TVA Nuclear Power Plants f.
Nuclear Engineering Procedure, NEP-3.1, Calculations g.
Nuclear Engineering Procedure, NEP-5.1, Design Output h.
Nuclear Engineering Procedure, NEP-5.2, Review i.
ECB-EP 28.01, OE Computer Activities Requirinc Quality Assurance - Computer Usage, Computer Program Locumentation,
/
and Computer Resident Data 04140 (C1/23/87)
TVA EMPLOYEE CONCERNS REPORT NUMBER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER:
1
(
PAGE 23 0F 24 APPENDIX A (Cont'd) 7.
LIST REQUESTS FOR INFORMATION, MEETINGS, TELEPHONE CALLS, AND OTHER DISCUSSIONS RELAltu TO ELEMENT a.
Meetings with DHE Personnel at Knoxville, Tenn. (10/07/86 and 10/08/86), BLT 060 b.
Request for Information (RFI), SQN-564, (09/15/86) c.
RFI, SON-641, (10/16/86) d.
RFI, SQN-660, (10/25/86) e.
RFI, SQN-688, (11/04/86) f.
Telephone Call, Anderson, Bechtel, with Clift and Gorczyca, TVA, IOM 381, (11/07/86) 4 i
r 04140 (01/?3/07)
~
m
~
fel REFERENCE
- ECPSI2GJ-ECPSI21C TENNESSEE VALLEY AUTHORITY PAGE --
6S FREQUENCY
- REQUEST OFFICE OF NUCLEAR P0HER RUN TIME - 12:57:19 ONP - ISSS - RHM EMPLOYEE CONCERN PROGRAM SYSTEM (ECPS)
RUN DATE - 12/02/86 LIST OF EMPLOYEE CONCERN INFORMATION CATEGORY: EN DES PROCESS & OUTPUT SUBCATEGORY: 20504 VERIF/ DOC OF QUALITY RELATED DESIGN COMPUTER CODES KEYHORD A I
S GENERIC H
APPL QTC/NSRS P
KEYHORD B CONCERN SUB R PLT BB$H INVESTIGATION S
CONCERN KEYNORD C NUMBER CAT CAT D LOC FLQB REPORT R
DESCRIPTION KEYWORD D
)
HI 077-NI5 EN 20504 N HBN YYYY SR NRC IDENTIFIED THE FOLLONING CONCERN REPORT FROM REVIEN OF THE QTC FILE: "INAD EQUATE VERIFICATION / DOCUMENTATION OF QUALITY-RELATED DESIGN COMPUTER COD ES."
I CONCERNS FOR CATEGORY EN SUBCATEGORY 20504
)
)
J J
J
}
}
)
$1
TVA EMPLOYEE CONCERNS REPORT NL5SER: 205.4(B)
SPECIAL PROGRAM REVISION NUMBER: 1
(
PAGE 24 0F 24 CATD LIST The following CATDs identify and provide corrective actions for the findings included in this report:
205.04 SON 01 (12/19/86) 205.04 SON 02 (12/19/86) 205.04 SQN 03 (12/19/86) 205.04 SON 04 (12/19/86) 205.04 SQN 05 (12/19/86) 205.04 SQN 06 (12/19/86)
(
l 04140 (01/23/87)