ML20244B598

From kanterella
Jump to navigation Jump to search
Rev 1 to ERC892402, Arkansas Nuclear One Training Administrative Guideline Simulator Fidelity Testing
ML20244B598
Person / Time
Site: Arkansas Nuclear Entergy icon.png
Issue date: 04/05/1989
From: Danni Smith
ARKANSAS POWER & LIGHT CO.
To:
Shared Package
ML20244B597 List:
References
ERC892402, NUDOCS 8906130184
Download: ML20244B598 (11)


Text

n ERC892402 Rav. 04/05/89

.ANO TRAINING ADMINISTRATIVE GUIDEILINE SIMULATOR FIDELITY TESTING REVISION 1 APRIL 5, 1989 l

l APPROVAL: / 5-It-E>

SIMULgRSUfPORTSUPERVISOR DATE C - 2E E. , b / .r-/c. -29 SIMULATOR TRAINING SUPERVISOR DATE C / s//7/gc, OPS TRAINING SUPERINTENDENT- DATE h b_

TRAINING MANAGER

/ \

DATE s

..l

. ERC892402

.Rev. 04/05/89

)

SIMULATOR FIDELITY TESTING-J 1.0 PURPOSE The purpose of this guideline is to provide the administrative controls required to conduct'and document fidelity testing on the simulator.

- 2. 0 SCOPE This guideline is applicable to ANO Unit 1 and Unit 2 Simulators.

3.0 REFERENCES

3.1 ANSI /ANS-3.5-1985 3.2 10CFR55 3.3 ANO Training Administrative Guideline: Simulator Modification Control 3.4 AN0 Training Administrative Guideline: pocumentsWhichAffectTraining 4.0 DEFINITIONS 4.1 Fidelity Testing There are three types of tests that.are designed to test the fidelity j of the simulator.

a. Performance Testing A performance test will be run at the completion of initial construction and anytime that simulator design changes result in significant simulator configuration or performance varia-tions.
b. Discrepancy Report (DR) Testing A DR Test will be performed to validate a modification prior to its use for training. The test will be controlled by a test-plan that is approved by a lead trainer and. retained in the DR package.
c. Operability Testing A simulator operability test shall be performed annually (i 3 months) and is intended to:

! 1) Verify. simulator performs in real-time.

l

2) Verify simulator in normal operations against plant operating procedures, s
3) Verify simulator performance cTiteria against the steady state criteria.

2

'l 4

ERC892402 1 Rev. 04/05/89

4) Verify simulator in' surveillance' operations against plant surveillance procedures. .;
5) Verify simulator performance.against the transient criteria for a benchmark set of transients.
6) Verify a minimum of 25% of'the ANSI /ANS 3.5 - 1985 malfunctions against the criteria previously. established by operations and training personnel.
7) Verify overall simulator model completeness and integration.

4.2' Terminology used in this guideline is consistent with the definitions provided in ANSI /ANS-3.5-1985 and 10CFR55.

5.0 RESPONSIBILITY AND AUTHORITY 5.1 'The Simulator Training Supervisor is responsible for insuring com-pliance with regulatory requirements concerning simulator fidelity testing.

5.2 The Simulator Training Supervisor shall review and approve simulator performance and operability tests prior to testing.

5. 3 A Lead Trainer must approve DR test plans prior to testing.

5.4 The Test Director is responsible for the performance and documentation of simulator performance and operability testing.

6.0 INSTRUCTIONS 6.1 Performance Testing 6.1.1 Each simulator performance test will provide guidance and evaluation criteria-in the following areas:

a. Computer Real Time Testing
b. Normal Operation. Testing
c. Steady State Operations Testing
d. Surveillance Testing
e. Transient Testing
f. Malfunction Testing 6.1.2 Test Sequence
a. The Test Director will determine if a problem resolu-tion is required immediately (prior to proceeding with the test) or if the test can continue after a DR has been written.

3 l

i

. e ERC892402 Rev. 04/05/89' 6.1.3 Control of Testing

a. Approved plant procedures will be.used to perform.all plant operations required _by the performance test.
b. Malfunctions to be tested will be evaluated against criteria previously established by Operations and Training personnel. -
c. Transients to be tested will be evaluated against re-corded plant data and the SAR.
d. .Each section of the performance test will include ac-ceptance. criteria that is consistent with the require-ments of' ANSI /ANS-3.5-1985.
e. The' Test Director is. responsible for determining if acceptance criteria have been met,
f. Testing will be considered complete when the Test Director determines that the following termination criteria have been met:
1) Transient Testing-Simulation shall continue until such time that a stable,. controllable and safe condition is attained which can be continued to.a Cold Shutdown condi-tion or until the simulator' operating limits are reached.
2) Malfunction Testing.
a. For malfunctions not resulting .in a plant trip but_ requiring a plant shutdown, terminate when a shutdown is started,
b. For malfunctions resulting in a plant trip, terminate when the plant is being controlled in acccrdance with the appropriate section of the E0P.
c. For malfunction not covered by a or b above, terminate when the plant reaches (or is placed into) a stable condition.
3) Unless otherwise specified, testing will be con-ducted at M0L.

,s 4

l ERC892402 Rev. 04/05/89. 1 6.1.4 Selection of_ time-in-life testing

a. To. insure that the inherent characteristics that change over co're life are modeled correctly, a set of malfunc-tions for this test have been selected. These are based on discussion oetween Training and Operations-personnel, j i

6.1.5 Documentation during Performance Testing

a. The Test Director is responsible for insuring that the.. 'j information required by the performance test is gathered, attached,-logged and evaluated as. appropriate.
b. The Test Director will document any procedural. step that can't be' completed from the. simulator-Control Room or Instructor Aid Console.

j

c. The Test Director will insure that a Discrepancy Report (DR) is initiated on any item that does not meet the established acceptance' criteria or that in his opinion.

should be evaluated further. This includes problems encountered in Step o above. '.The Test Director will keep a chronological log of problems encountered as a l result of testing (see Attachment 1). 4 6.1.6 Upon completion of the performance test the results shall be l reviewed and evaluated by the Simulator Training Supervisor, j the Test Director and the Operations ' Superintendent (or his 1 designee) if available. A report will be written that speci - '

fies problems encountered during testing, actions being taken to resolve the problems, impact that the problems have on j training and recommendations concerning utilization of the I simulator to avoid any " negative training". <

6.1.7 The following conditions must exist'to consider the perfor- l mance.of the simulator satisfactory for training:

l

a. The performance test must be completed and documented.
b. All discrepancies noted by the Test Director have been '

documented and a Discrepancy Report (DR) has been  ;

initiated. '

c. The DRs resulting from the performance test have been -  ;

reviewed and evaluated by the Simulator Training Super- '

visor and the Operations Superintend;ent or his designee.

,, y 5 i i

ERC892402 Rev. 04/05/89 6.2 Discrepancy Report (DR) Testing 6.2.1 Each simulator change resulting from a DR must be tested prior to being used for training.

6.2.2- A Lead Trainer will be responsible for. writing a DR Test Plan. The test plan will give adequate guidance..to run a " performance test" on the component that has been changed.

6.2.3 The Simulator Engineer will review the test plan for completeness and approve it for use.

6.2.4 When work on the DR has been completed, the Simulator Support group will notify the Lead Trainer that the DR is ready for

. testing.

6.2.5 The Lead Trainer will provide a trainer to test the component as per the approved test plan.

6.2.6 If the results of the test are satisfactory the test plan will be signed off and included with the DR package. If the test is not satisfactory the Simulator Support group will continue work on the DR.

6. 3 Operability Testing 6.3.1 Each simulator operability test will provide guidance and evaluation criteria in the following areas:
a. Computer Real Time Testing
b. Normal Operations Testing l
c. Steady State Operations Testing
d. Surveillance Testing
e. Transient Testing
f. Malfunction Testing 6.3.2 Test Sequence
a. There is no required sequence for testing so the se-quence will be at the discretion of the Test Director.
b. The Test Director will determine if a problem resolu-tion is required immediately (prior to proceeding with the test) or if the test can. continue after a DR has been written. ~
6

ERC892402 Rev. 04/05/89 1

4 6.3.3 Control of Testing

a. . Approved plant procedures will be used to perform all plant operations required by the operability test.
b. ~ Malfunctions to be tested will be evaluated against criteria previously established by.0perations and.

Training personnel.

c. Transients tested will.normally.be-the.same~tran-sients, tested in the performance test and will be evaluated against performance test results.~
d. Each section of the operability test.will include ac-ceptance criteria that is. consistent with the require-ments of' ANSI /ANS-3.5-1985.
e. The Test Director is responsible for~ determining.if acceptance criteria have been met.
f. Testing will be considered complete when the Test Director determines that the following termination criteria have been met:
1) Transient Testing Simulator shall continue until such' time that a' stable, controllable and safe condition is at-tained which can be continued to a Cold Shutdown

- condition or until the simulator operating limits are reached.

2) Malfunction Testing a) For malfunctions not resulting in a plant trip but requiring a' plant shutdown, terminate when a shutdown is started, b) For malfunctions resulting in a plant trip, terminate when the plant is being controlled in accordance with the appropriate section of the E0P.

c) For malfunctions not covered by a or b above, terminate when the plant reaches (or is placed into') a stable condition.

r .3) Unless otherwise specified, testing will be con-ducted at MOL.

l ~.

7

, :ERC892402-RGv. 04/05/89 6.3.4' Selection of Time-in-li.fe Testing

a. To insure that inherent. characteristics that' change over-

. core-life are modeled correctly,-test the set of' mal-

. functions'. listed in Section F Step'7.3 of the opera-'-

'bility. test ~ annually; 6.3.5 Documentation DuringL0perability Testing-

a. . .The Test Director is responsible for insuring thatithe information required by the. operability is gathered,

, ' attached, logged and evaluated ~as appropriate.

b. -ThelTest Director will document any: procedural step' that can't be completed from the Simulator Control ,

' Room ~or Instructor Aid Console..

c. The Test Director will-insure:thatia Discrepancy Re .

port (DR).is' initiated onLany item _that does'not meet "3 the established acceptance criteria or:that-in:hisf opinion should be evaluated further. LThis includes problems.encounteredLin Step b above. The Test-Director will keep a chronological' log of problems encountered as a result of testing;(see Attachment ~1).

6.3.6 Upon completion of the operability test'the results shall be reviet,ed and evaluated by the: Simulator Training l Super-visor, the Test Director and the. Operations Superintendent.

(or his designee) if.available/ A report.will be written-that specifies problems encountered'during testing,' actions-being taken to resolve the problems', impact that:the prob-lems have on training and recommendations concerning utili-zation of the simulator to avoid any " negative training".

6.3.7 The following conditions must exist to consider the~perfor -

mance of the simulator satisfactory lfor training.

~

a) The operability test must be completed and documented.

b) All discrepancies noted by the Test Di'ector r have been documented and a Discrepancy Report (DR) has been initiated.

c) The DRs'resulting from the operability test have been reviewed and evaluated by the Simulator Training Super-L i.

visor and the'0perations Superintendent or his' designee.

? )

l q

8 q i

ERC892402..

Rev. 04/05/89 6.4 Reports and' Record Retention The. Simulator: Training Supervisor will submit, every four 6.4.1-years'on the anniversary of'the certification,'a. report to~

-the Commission which identifies.any uncorrected performance.

test failures, and submit a schedule-for correction of such performance test failures., if any.

6. 4. 2 , Retain all reports for at least four years.

9

)

ERC892402.

Rev. 04/05/89 ATTACHMENT--1., .

. PERFORMANCE TEST,DR LOG' I l' l. . l- .. l l .DR NUMBER- :I , PERFORMANCE-  : 1. OPERATING' ,I  ; DISCREPANCY ~ I.

l l- TEST < STEP #- l' PROCEDURE- l- - PREVENTS : l::

I- l l AND-STEP'#- - l -- COMPLETION .l a l' i 1. -1. OF. STEP: l

.ls

-l- 1 I I . l- ,

l- .I l 'l -(Y) . (N) l .-

1; I

i I

l-1 i

I:

l-l --

,1 l- l l l- I l'

l-1 I

I I

l I

l- 'l

-l l I

I I

I I

I j, l  ;

I i 1 l-1 I I I

I l ,

1 1 I I  :

1 I I

' I ,

i I I I l l i

10 1

- - - -__ __ __ n

{

1 4

l l

ATTACHMENT 3 l

ANO TRAINING ADMINISTRATIVE GUIDELINE SIMULATOR MODIFICATION CONTROL 1

i l

___-__-_____-_ _