ML20246H341
| ML20246H341 | |
| Person / Time | |
|---|---|
| Site: | Hope Creek  |
| Issue date: | 07/10/1989 |
| From: | Labruna S Public Service Enterprise Group |
| To: | NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| References | |
| RTR-NUREG-0737, RTR-NUREG-1342, RTR-NUREG-737 GL-89-06, GL-89-6, NLR-N89131, NUDOCS 8907170077 | |
| Download: ML20246H341 (19) | |
Text
,,
i g
_ 'l Pubtle Service Electric and Gas -
Company
'St:nley LaBruna Public Service Electric and Gas Cornpany P.O. Box 236, Hancocks Bridge, NJ 08038 609-339-4800 vee Premdent - Nuciner overanon.
July 3 0, 1989 NLR-N89131 United States Nuclear Regulatory Commission Document Control. Desk Washington, DC 20555 j!
Gentlemen:
' RESPONSE.TO GENERIC LETTER 89-06 SAFETY' PARAMETERS DISPLAY SYSTEM DOCKET NO. 50-354 HOPE CREEK GENERATING STATION Pursuant to the requirements of Generic Letter 8 06, PSE&G has evaluated the Hope Creek Safety Parameter Display. System (SPDS)'
against the' requirements of NUREG 0737, Supplement 1.
PSE&G has determined that-the Hope Creek SPDS does not fully meet the requirelaents of NUREG 0737.-
Discrepancies between NUREG 0737 and the Hope Creek SPDS were identified during the verification and validation process.
All discrepancies have been resolved and appropriate revisions to plant documents will be complete and verified by August 31, 1989.
This matter was previously discussed in PSE&G letter NLR-N89047, dated March 31, 1989.
. Based on the checklist provided with Generic letter 89-06, no other areas of non-conformance with the requirements of NUREG "0737, Supplement 1 are identified.
Upon completion of the documentation revisions discussed above, the Hope Creek SPDS will be in full compliance with NUREG 0737, Supplement 1 requirements.
. Attachment 1 to this. letter is a copy of the completed checklist which, although not required by the Generic Letter, is being provided for your information. represents clarifications to the responses to certain checklist items where it was felt that the checklist did not allow an accurate description of the Hope Creek SPDS.
As required by the Generic Letter, supporting documents and photographs will be maintained for three years.
Should you have any questions, please feel free to contact us.
Sincerely,
/
Attachments 8907170077 890710 AA2 PDR ADOCK 05000334 UwJ P
PDC lll
Document Control Desk 2
7-10-89 NLR-N89131 C
Mr.
C. Y. Shiraki Licensing Project Manager Mr. G. W. Meyer Senior Resident Inspector Mr. W. T. Russell, Administrator Region I Mr. Kent Tosch, Chief New Jersey Department of Environmental F"otection Division of Environmental Quality Bureau of Nuclear Engineering CN 415 Trenton, NJ 08625 l
l l
- p.:
Ref:
NLR-N89131 Generic Leter 89-06 STATE OF NEW JERSEY
)
)
SS.
COUNTY OF SALEM
)
S.
LaBruna, being duly sworn according to law deposes and says:
I am Vice President - Nuclear Operations of Public Service Electric and' Gas Company, and as'such, I find-the matters set forth in our letter dated July 10 1989
, concerning the Hope Creek Generating Station, are true to the best of my knowledge, information and belief.
Subscribed and Sworn t re me this N sc day of 1989 W
./
NotaryPdicofNewJersey (ARAINE Y. BEARD Notary Public of New Jersey My Commis*lon Expires May 1, IN My Commission expires on
ATTACHMENT 1 SPDS CHECKLIST This checklist is intended to aid licensees in determining the status of their SPDS. Bracketed,[],informationreferstothesectioninNUREG-1342where discussions on the specific question (s) may be found.
1.0 GENERAL DESCRIPTION 1.1 Plant Name: Hope Creek Generating Station 1.2 Who/What organization developed the original version of the SPDS software implemented at your site?
Utility (in-house)
Utility Owner's Group; which?
l J Contractor; which?
Nova Technologies, Inc.
_ Other; who?
Page 1 of 14 i
ATTACHMENT 1 1.3 If the SPDS software has undergone significant modification (i.e., more than 25 percent of software replaced or modified) since original implementation, list the organization performing the modification:
_ Utility (in-house)
_ Utility Owner's Group
_ Contractor
_ Other 1.4 What is the hardware host on which the current SPDS software is implemented?
i Westinghouse P250 Westinghouse P2500 2 Gould/SEL, Model Number 32/97
_ Digital (DEC), Model Nutter
_ 18t1, Model Number
_ MODCOMP, Model Number
_ Babcock & Wilcox (Recall)
_ Honeywell, Model Number
_ Burre, ughs, Model Number
_ Other: Manufacturer, Model Page 2 of 14
1 i
ATTACHMENT 1 i
1.5 How many total CPUs are accessible by SPDS sof tware on the computer system l
described in the previous question?
Two 1.6 What is the approximate MIPS rating of all the CPUs counted above?
Nine MIPS NOTE: Use a decimal fraction if less than 1.0 (See attachment)
If SPDS does not run on a single computer system, provide the following information for the minority parameter set provided by a second computer I
system. For example, a frequent occurrence of this case is where a separate l
but adjacent computer terminal provides radiological parameters.
)
l 1.7 Manufacturer Digital Equipment Corporation f
l l
1.8 Model Number Vax 11/750 1.9 List parameters provided:
See Attachment (onthesecondsystem) i I
1.10 Are significant changes in hardware or software planned in the next two years? x YES NO.
If YES, briefly describe planned changes 4
and list a schedule of major milestones.
)
See attachment 1
1 l
l Page 3 of 14 ggl
'a mums umm i m uiimmu u m ug mm mm mmmm u m-mm wmu u u
ATTACHMENT 1 2.0 PARAMETER SELECTION This section is divided into two parts: the safety functions, and the parameters used to depict each safety function.
2.1 Plant-Specific Safety Functions [III.F.]
List the title of the plant-specific safety function (s) displayed on your SPDS that is (are) equivalent to the safety function in Supplement 1 to NUREG-0737.
Supplement 1 To NUREG-0737 Plant-Specific Safety Functions Safety Functions l
2.1.1.
Reactivity Control Reactor Power Control Display
- APRM's
- SRM's I
2.1.2 Core Cooling and Heat Reactor Water Level Control Display Removal 2.1.3.
RCS Integrity RPV Pressure Control Display I
l
~
2.1.4.
Radioactivity Control offsite Release control Display I
& Reactor Building Control Display I
2.1.5.
Containment Conditions Listed as Header Information on every Display
& Primary Containment Isolation Valves Display
& Drywell Pressure Control Display Page 4 of 14
ATTACHMENT 1 l
2.2 Parameters Selected to Display Each Safety Function J
The purpose of this section is to specify a list of parameters used to depict
]
eacn of the five safety functions identifed in Supplement I to NUREG-0737.
j Lists of parameters that have been found acceptable to NRC through previous SPDS post-implementation reviews have been provided. One list of parameters applies to pressurized water reactors in general, and the other list applies to boiling water reactors.
NOTE:
Check any parameters that have been selected as an SPDS parameter.
List any additional parameters under the relevant "Others" category.
Include additional safety functions and parameters that are a part of your SPDS.
PRESSURIZEDWATERREACTORSPDSPARAMETERSELECTIONCHECKLIST[III.F.1]
Supplement 1 To NUREG-0737 Safety Functions Parameters 2.2.1 Reactivity Control Neutron Flux
_ Source Range
_ Intermediate Range
_ Power Range
_ Other: (List) 2.2.2 Reactor Core Cooling and
_ RCS Level Heat Removal from the Subcooling Margin Primary System
_ Hot Leg Temperature
_ Cold Leg Temperature
_ Core Exit Thermocouple Steam Generator Level
_ Steam Generator Pressure
_ RHR Flow
_ Other:
(List)
Page 5 of 14 h
ATTACHMENT 1 2.2.3 RCS Integrity
_ RCS Pressure
_ Cold Leg Temperature
_ Containment Sump Level
_ Steam Generator (Pressure, Level, Radiation)
_ Other: (List) 2.2.4 Radioactivity Control
_ Stack Monitor
_ Steamline Radiation
_ Containment Radiation
_ Other: (List) 2.2.5 Containment Conditions
_ Containment Pressure
_ Containment Isolation
_ Containment Hydrogen Concentration
_ Other: (List) 2.2.6 Other Safety Functions Yes No If yes, list functions and parameters.
Page 6 of 14
ATTACHMENT 1 BOILINGWATERREACTORSPDSPARAMETERSELECTIONCHECKLIST[III.F.2]
';vpphment 1 To NUREG-0737 Safety Functions Parameters 2.2.6 Reactivity Control 2 APRM 2 SRM X Other: (List) ^See attachment i
2.~2. 7 Reactor Core Cooling and 2 RPV Water Level i
Removal X Drywell Temperature 2 Other: (List) See attachment 2.2.8 Pressure Vessel Integrity
[RP/ Pressure 2 Other: (List)
See attachment 2.2.9 Radioactivity Control 2 Main Stack or Offgas (Retreatment)
Monitor 2 Containment Radiation Monitor
_ Other: (List) 2.2.10 Containment Integrity 1 Drywell Pressure X Drywell *(emperature X Suppression Pool Temperature 2 Suppression Pool Level
)
X Containment Isolation Valve Status l Drywell Hydrogen Concentration
]
2 Drywell Oxygen Concentration
_ Other: (List)
Page 7 of 14 sim.ni
..d-sins su
.........___.m.
ATTACHMENT 1 2.2.11 Other Safety Functions
_ Yes L No If yes, list functions and parameters.
2.3 Detailed Parameter Questions [III.F.1.e and III.F.2.e]
2.3.1 Are containment isolation demand signals input to SPDS (e.g., PWR -
Phase A/B Isolation Demand Signal or BWR - Group Isolation Demand Signals)?
X YES NO 2.3.2 Does the SPDS use actual containment isolation valve position as an input to monitor successful isolation?
X YES NO 3.0 DISPLAY OF SAFETY FUNCTIONS [III.F.]
I 3.1 Does the SPDS provide the status of all five safety functions on q
one display page?
X YES NO 3.2 Are the individual parameters that support the safety functions X YES N0 grouped by safety function?
3.3 Is the status of all five safety functions always displayed ontheSPDS?[III.B.2]
X YES NO 4.0 RELIABLEDISPLAY[III.A.3exceptasnoted) 4.1 Is the SPDS hosted on the same computer system as the plant process computer? _ YES X NO If NO, does the SPDS computer receive some of the computer point inputs from the process computer?
YES X NO See attachment.
Page 8 cif 14
ATTACHMENT 1 4
4.2 List location of accessible (e.g., keyboards) devices capable of enanging SPDS data. [III.A.3.a]
See a tt a ch mo n t-4.3 Are SPDS hardware availability data documented? _ YES X NO See attachment IF YES, what is the documented percent availability of the SPDS hardware over the past 12 months? NOTE: Availability should be based on power operation, startup, het standby, and hot shutdown only and not include other plant modes.
1 Available 4.4 Are the SPDS computer points included in routine instrument loop surveillance? LI!!.A.3.a]
x YES NO.
4.5 What percentage of software verification and validation has been completed?
_ 100%
_ Approximately half
_ Planned in the future
_x_ Other, describe see atta chmont-4.6 Have changes to the SPDS host computer and software been maintained under a formal Software / Hardware Change Request (or equivalent) system? Check all that apply below:
See attachment
_ Yes; For how long?
years L No
_ Have plans to in the future Page 9 of 14
i i
ATTACHMENT 1 4
4.7 How frequently does the SFDS display invalid or erroneous information?
[III.A.3.a]
See attachment frequent (above 5 percent)
_ infrequent (1-5 percent)
X rare (less than 1 percent of the time)
I 4.8 How frequently have any of the critical safety functions been in a false alarm condition? [III.A.3.a]
See attachment I
i
_ frequent (above 5 percent)
_ infrequent (1-5 percent) 1 rare (less'than 1 percent of the time) f l
l 4.9 Does the SPDS display valid parameter information during adverse containment conditions?
X YES NO See attachment I
5.0 HUMANFACTORS[III.Eexceptasnoted]
Human factors.in the context of SPDS design includes the usefulness of the i
technical information displayed on the screen to users and their performance during emergency operations. Human factors also includes display design techniques, such as labeling, display layout, and control / display integration.
lhis section provides a sample of the kinds of questions to be asked to help determine the degree to which the SPDS design incorporates accepted human l
tactors principles.
5.1 Who is the prime user of the SPDS?
J Shift Supervisor
[III.B.1]
_ Board Operators
_ Other (specify)
Page 10 of 14
ATTACHMENT 1 i
5.2 Are all SPDS controls located at the SPDS workstation?
X YES N0 (III.B.1)
If NO, where are the controls located?
5.3 Is all SPDS-related information physically displayed such that the information can clearly be read from the SPDS user's typical position?[III.A.1andIII.B.1)
J YES _ N0 if NO, what specific information is available at other locations?
q 5.4 How are SPDS displays accessed? [III. A.2]
Continuous display, no interaction possible.
X Keyboard, one or two keystrate function key.
Keyboard, greater than 2 keystrokes.
Touchscreen.
Cursor / menu (mouse, joystick, up/down key).
5.5 Does the SPDS consistently respond to user commands in less than 10 seconds? [III.A.2]
2 YES _ NO If NO., is feedback provided to the user regarding delays in response?
YES NO 5.6 Does the SPDS sampling rate for parameters match the display update rate for those parameters? [III.A.2]
X 'YES NO Page 11 of 14
ATTACHMENT 1 If NO, what specific parameters do not match?
5.7 Are all parameter units of measure displayed on the SPDS consistent with the units of measure included in the emergency operating procedures?
i X YES _ NO i
5.8 Are all parameter labels and abbreviations consistent with the labels and abbreviations included in the emergency operating procedures?
2 YES _ NO 5.9 Is any of the displayed information in a form that requires transformation or calculation?*
_ YES X'O N
IF YES, what types of transformations or calculations are necessary?
5.10 Are the high-and low-level setpoints consistent with har:'-wired parameter instrumentation and reactor protection system setpoints?
X YES _ NO 5.11 Does SPDS display high-and low-level setpoints?
2 YES _ NO See attachment 5.12 Are the SPOS calculated values such as subcooling margin, consistent with calculated values on the plant process computer?
2 YES N0 See attachment 4
Page 12 of 14
ATTACHMENT 1 5.13 Are all parameter units of measure displayed on SPDS consistent with the hard wired-instrumentation?
X YES NO 1
5.14 Are all parireter labeis and abbreviations consistent with hard-wired instrument labels and abbreviations?
YES _ HD 2
5.15 Were the technical basis for software specifications verified with plant-specific data (for example, heat-up and cool-down limits, v. iable steam generator setpoints and high and low level alarm setpoints)?
X.YES NO 5.16 List LERs written as a result of SPDS software problems.
None 6.0 TRAINING [III.C.2allquestions]
6.1 Does simulator training include training in the use of the SPDSY X YES NO 6.2 How long is formal classroom training for SPDS users?
_ No formal classroom training
_ Less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> X 2-4 hours
_ More than 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> 6.3 Is there periodic requalification s*aining for SPDS7 X
YES NO If YES, how often?
Annually Page 13 of 14
1 ATTACHMENT 1 6.4 When are SPDS users given training regarding the relationship of the parameters to the plant safety functions? Check all that apply below:
Not trained On the job or required reading X
During requalification training x
During an initial SPDS training program 7.0 ELECTRICALISOLATION[III.C.1allquestions]
7.1 What isolation devices are currently used?
Fiber Optic Transmitter / Receiver (FOTR Cards) 7.2 Are these devices the same ones that were originally installed and approved by NRC? J YES _ NO i
1 Page 14 of 14
_________________D
L
~
}
ATTACHMENT 2 l
~
Explanatory text for checklist items associated with NRC Genttic Letter No. 89-06 1.6 Nine (9) MIPS as based on the manufacturer's Wheatstone Bench Mark tests.
1.9 Radiological data such as plant vent flows of effluents (gas and iodine) and area radiation monitors are transferred via-the data link from the Vax 11/750 computer to the Gould 32/97 computer.
1.10 General Electric redefinition of EOP Parameters.
Revision 4 ot EOP Appendix C Calculations 2.2.6 Under the "Other" category:
A) Control Rod Position (All Rods Inserted)
B) Standby Liquid Control System (SLCS) Tank Level and Pump Status 2.2.7 Under the "Other" category:
A) Cooling System Injection Status (Feedwater, CRD, RCIC, HPCI, Core Spray, RHR LPCI) 2.2.8 Under the "Other" category:
A) Drywell Pressure 4.1 SPDS does not receive computer point inputs from the plant process computer (the Control Room Interactive Display System (CRIDS)) but it receives its radiological data from the Vax 11/750 computer system.
4.2 Devices capable of changing SPDS data are located in the 163' elevation computer room which houses the Gould 32/97 computer but to be able to make any changes a series of passwords must be entered correctly to gain access.
Also a significant amount of Gould/Sel computer knowledge is required to be able to manipulate and SPDS data.
4.3 Hardware availability is documented by shift operators in the
" control room narrative log" for the purpose of determining whether or not the plant is operating under abnormal operating conditions due to loss of plant process computers and in the event that the system is down for an extended period (7.2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> as defined in the Event Classification Guide) to declare an Unusual Event.
Statistics concerning the percentage availability over a defined period (i.e. 12 months) have not been compiled.
Page 1 of 2
ATTACHMENT 2 o
l 4.5 Verification and validation has been performed, the l
discrepancies have been identified and the resolutions to the L
system have been implemented but the associated documentation l
(design memorandums DM-0483, DM-0484 and DM-0491) has to be retyped and submitted to Document control.
4.6 The PSE&G document design change request process was used
'to install the system originally.
No additional changes have been implemented since the system was brought on-line.
4.7 The assessment of how frequently the SPDS displays invalid or erroneous data is based on operator interviews / conversation 4.8 and on performance of surveillance procedures on field instruments associated with the monitored points.
4.9 SPDS provides valid parameter information during adverse contain7ent conditions as long as the field instruments, which are Q-qualified, are functional and providing correct information.
5.6 Parameter scan rate exceeds the display update rate on all points that are being scanned by SPDS as defined in the SPDS database (PS-J-0626-0).
5.11 SPDS provides high and low lu.el setpoints for all the Critical-Function Parameters (Reactivity Control, Reactor Core Cooling and Removal, Pressure Vessel Integrity, and Containment Integrity) except for Radioactivity Control which is provided by the Radiation Monitoring process computer and passed via datalink.
The plant process computer (CRIDS) provides alarm limits for all other points that are displayed.
5.12 SPDS calculated values are consistent with the plant process computer (CRIDS) due to the fact that the values are passed redundantly to SPDS and CRIDS after being processed by signal conditioning cards located in the multiplexer cabinets.
i l
I Page 2 of 2 i