ML20246H484
| ML20246H484 | |
| Person / Time | |
|---|---|
| Site: | Prairie Island  |
| Issue date: | 07/11/1989 |
| From: | Parker T NORTHERN STATES POWER CO. |
| To: | Office of Nuclear Reactor Regulation |
| References | |
| RTR-NUREG-0737, RTR-NUREG-1342, RTR-NUREG-737 GL-89-06, GL-89-6, NUDOCS 8907170112 | |
| Download: ML20246H484 (21) | |
Text
- _-
l
'l Northem States Power Company l
414 Nicollet Mall l'
Minneapolis. Minnesota 554011927 July 11, 1989 Telephone (612) 330 5500 Director of Nuclear Reactor Regulation U S Nuclear Regulatory Commission Attn: Document Control Desk Washington, DC 20555 PRAIRIE ISLAND NUCLEAR GENERATING PLANT Docket Nos. 50-282 License Nos. DPR-42 50-306 DPR-60 Response to NRC Generic Letter 89-06 Safety Parameter Display System The purpose of this letter is to provide a response to Generic Letter 89-06.
The following activities were performed:
Completion of the checklist for the Safety Parameter Display System, Obtained photographs and display screen prints of the operational Safety Parameter Display System for both units during power operation (in accordance with the Photography Instructions contained in Generic Letter 89-06), and Reviewed NUREG-1342 information for applicability to the Prairie Island Safety Parameter Display System implementation.
Northern States Power Company contracted the services of an independent contractor to complete the above activities to provide additional assurance that the response prepared is not biased toward the Prairie Island Safety j
Parameter Display System implementation.
(
Based on results of the above activities, the Safety Parameter Display System implemented at Prairie Island Units 1 and 2 meets the requirements of NUREG-0757, Supplement 1.
The Safety Parameter Display System is an operational system that (as defined in Section IV. of NUREG-1342):
Has been fully installed, tested, accepted, and turned over to plant operations for use, foof I
1 8907170112 890711
{DR ADOCK 05000282 PDC
c
.e.
Northem States Power Company 1
8 Page 2-Provides the defined function of the Safety Parameter Display System, i.e.,
displays the minimum information sufficient to. allow operations to assess plant safety status; specifically, displays sufficient information to monitor the five safety functionsidefined in Supplement 1 te UUREG-0737-Provides valid, reliable information in a continuous display, and Functions as a system that includes clearly written procedures for its j
use and operators that have been fully trained to operate and interpret l
its displays.
The-completed checklist for the Safety Parameter Display System Implementation is contained in Attachment 1.
The photographs and other supporting documentation have been retained in our files for your review.
Please contact us if you have questions concerning the Safety Parameter Disp 1 Sys omas Par er Manager.
. Nuclear Support Services c: Regional Administrator - Region III, NRC Senior Resident Inspector, NRC NRR Project Manager, NRC G Charnoff Attachments: Affidavit Safety Parameter Display System Checklist and Comments l
y,- - -- --
J--
- = - - - - - -
- - - - - - - - - - - - - - - - - - ~ - - - -
' - ' - - - - ~ - -
-- =---------- ---- - - - -- - -
.,4 ? '
[2 --
UNITED STATES NUCLEAR REGUIATORY COMMISSION NORTHERN STATES POWER COMPANY PTAIRIE ISLAND NUCLEAR GENEPATING PIANT DOCKET NOS. 50-282 50-306 Response to NRC Generic Letter 89-06 Safety Parpmeter Displav System Northern States Power Co'mpany. a Minnesota corporation, with this letter is submitting its response to NRC Generic Letter 89-06 for the Prairie Island Nuclear Generating Plant.
This letter and attachments contain no restricted or other defense infor-mation.
NORTHERN ST TES POWER COMPANY By e6 Thomas M Parker Manager Nuclear Support Services
'Onthis//
day of
!LL h b'efore me a notary public in and for said County, personally appearea Thomas M Parker, Manager Nuclear Support Services, and being first duly sworn acknowledged that he is authorized to execute this document on behalf of Northern States Power Company, that he knows the-contents-thereof, and that to the best of his knowledge, information, and be-lief the statements made in it are true and that it is not interposed for O
delay.
]
h
/(Y s W )
l
- c. /
lq OAO W a:::::::::::::::::::::::::::::.m MA MMICIA K. LaCORE NOTAM RSLilNIllINESOTA M (BUNTY My Commelign Expires Sept. 24.1993 w-:::::::'::.::,::^::::ewwwwwvn l
l-L:
ATTACHMENT 1 SPDS' CHECKLIST AND COMMENTS This attachment includes the SPDS checklist completed in response to the requirements outlined in NRC Generic Letter 89-06. Any additional comments related to the provided checklist item responses are included subsequent to the checklist sorted by checklist item number. These comments are identified as SC for "See Comments"in the checklist.
1 19DSR52/7 1
l
\\
i SPDS CHECKLIST This checklist is intended to aid licensees in determining the status of their SPDS. Bracketed,[],informationreferstothesectioninNUREG-1342where discussions on the specific question (s) may be found.
4 e
1.0 GENERAL DESCRIPTION 1.1 Plant Name:
Prairie Island Nuclear Generating Plant (Units 1 and 2)*
1.2 Who/What organization developed the original version of the SPDS software implemented at your site?
Utility (in-house)
Utility owner's Group; which?
Generic Safety. Assessment System (SAS),
X Ad Hoc Group of the Westinghouse Owners Group Subccmnittee on Instrumentation in 1981 Contractor; which?
Other; who?
- Responses provided on subsequent pages apply to both Unit 1 and 2 unless otherwise noted.
l l
I 2
_ __J
1.3 If the $POS software has undergone significant modification (i.e., more than 25 percent of software replaced or modified) since original implementation, list the organization performing the modification:
X Utility (in-house)
Utility Owner's Group J Contractor Science Applications International Corporation (SAIC)
_ Other 1.4 What is the hardware host on which the current SPOS software is implemented?
Westinghouse P250 Westinghouse P2500 X Gould/SEL, Model Number 32-6780
_ Digital (DEC), Model Number
_ IBM, Model Number
_ M00 COMP, Model Mus6er
_ Babcock & Wilcox (Recall)
_ Honeywell, Model taber
_ Burroughs, Model Number i
_ Other: Manufacturer, Model
)
1.5 'How many total CPUs are accessible by SPDS software on the computer system
)
described in the previous question?
2 (see caments)
{
I 1.6 What is the approximate MIPS rating of all the CPUs counted above?
2.8 MIPS NOTE: Use a decimal fraction if less than 1.0 If SPDS does not run on a single computer, system provide the following information for the minority parameter set provided by a second computer system. For example, a frequent occurrence of this case is where a separate l
but adjacent. computer terminal provides radiological parameters.
1 (Runs on a single computer system) 1.7 Manufacturer j
1.8 Model Number I
1.9 List parameters provided:
(onthesecondsystem) 1.10 Are significant changes in hardware or software planned in the next two years? _YES gNO.
j If YES, briefly describe planned changes and list a schedule of major allestones.
l 4
t 2.0~ PARAMETER SELECTION This section is divided into two parts: the safety functions, and the paraatters used to' depict each safety function.
2.1-Plant-Specific Safety Functions [III.F.]
List the title of the plant-specific safety function (s) displayed on your SPDS that is (are) equivalent to the safety function in Supplement 1 to NUREG-0737.
1 Supplement 1 To NUREG-0737 Plant-Specific Safety Functions Safety Functions
)
2.1.1.
Reactivity Control suh-riticality i
2.1.2 Core Cooling and Heat core coolina Removal' Heat sink Tnventnrv 2.1.3.
RCS Integrity Intaarity (SC, See comments) 2.1.4.
Radioactivity Control containment 2.1.5.
Containment Conditions 5
i
)
2.2 Parameters Selected to Display Each Safety Function 1
The purpose of this section is to specify a list of parameters used to depict each of the five safety functions identifed in Supplement 1 to NUREG-0737.
Lists of parameters that have been found acceptable to NRC through previous SPDS post-implementation reviews have been provided. One list of parameters applies to pressurized water reactors in general, and the other list applies to boiling water reactors.
NOTE:
Check any parameters that have been selected as am SP05 parameter.
List any additional parameters under the relevant "Others" category.
l l
Include additional safety functions and parameters that are a.part of l
your SPDS.-
l PRESSURIZED WATER REACTOR SPDS PARAMETER SELECTION CHECKLIST [III.F.1]
Supplement 1 To NUREG-0737 l
Safety Functions Parameters **
I 2.2.1 Reactivity Control Neutron Flux 2 ource Range S
J Intermediate Range a Power Range x Other: (List) (see ccrments) 2.2.2 Reactor Core Cooling and g RCS Level Heat Removal from the y Subcooling Margin i
Primary System 1 Hot Leg Temperature X Cold Leg Temperature X Core Exit Thermocouple X Steam Generator Level X Steam Generator Pressure
{ RHR Flow l
X Other:
(List)
(see ccxwnts)
- Note: In addition to bar graph and data point dispb ye
-y kay eme im +s also have an associated trend graph display.
2.2.3 RCS Integrity 3 RCS Pressure X Cold Leg Temperature X Containment Sump Level (see comenti Steam Generator (Pressure Level, Radiation)
_ Other: (List) 1 tack Monitor S
2,2.4 Radioactivity Control X Steamline Radiation X Containment Radiation X Other:
(List) steam Generator Blowdcun wncenser zur Ejector X Containment Pressure 2.2.5 Containment Conditions (se mantsh Containment Isolatico (See commentsh i;ontainment Hydrogen Concentration (List) C ntainment Humidity (on trend grapt A Other:
splays) containment sump Level 2.2.6 Other Safety Functions Yes XNo If yes, Itst functions and parameters.
7
2.2.6 to 2.2.11 tbt applicable to a PWR.
80! LING WATER REACTOR SPOS PARAMETER SELECTION CHECKLIST [III.F.2)
Supplement 1 To NUREG4737 Safety Functions Parameters l
2.
Reactivity Control
_ APRM l
I.Y Other:
(List) 2.2.7 Reactor Cooling and
_ RPV Water Level Renoval
_ Drywell Temperatur
_ Other: (List) 2.2.8 Pressure Yessel Intog ty
_ RPV Pre ure
_ Other (List) 2.2.9 Radioactivity Control ain Stack or Offgas (Retreatment) onitor.
_ Con neent Radiation Monitor
_ Other:
(List) 2.2.10 Containment In rity
_ Drywell Pressu
_ Drywell Temperatu
_ Suppression Pool T erature
_ Suppression Pool Level
_ Containment Isolation Ya e Status
_ Drywell %drogen concentrat n
_ Drywell Oxygen Concentration I
_ Other: (List) 8
4 li Other Safety Functions
_ Yes _ No If yes, list f as and parameters.
N N
N 2.3 Detailed parameter Questions [III.F,1.e and III.F.2.e]
2.3.1 Are containment isolation demand signals input to SPOS (e.g., PWR -
Phase A/B Isolation Demand Signal or SWR - Group Isolation Demand Signals)?
x YES NO 2.3.2 Does the SPOS use actual containment isolation valve position as an input to monitor successful isolation?
X YES N0 3.0 015PLIY 0F SAFETY FUNCTIONS [!II.F.]
3.1 Doen the SPOS provide the status of all five safety functions on one display page?
X YES N0 3.2 Are the individual parameters that support the safety functions grouped by safety functionf sc YES NO 3.3 Is the status of all five safety functions always displayed ontheSP057[I!!.B.2]
sc YES NO 4.0 RELIABLE O!5 PLAY [III.A.3 except as noted]
4.1 Is the SPOS hosted on the same computer system as the plant process X
computerf YES NO If NO, does the SPOS computer receive some of the computer point inputs from the process computerf _ YE5 _ N0 t
9 l
.d i
i
,4 4.2 List location of accessible (e.g., keyboards) devices capable of changing SPDS data. [III.A.3.a]
Substitute. values can only be manually changed at the control room secondary SPDS cusplays and in the computer room. Administrative procedures are in place to control such cha.ges.
. Substitute 7alues' ere
~ recognized by the SPDS as "not valid" and appropriately displayed.
4.3 Are SPDS hardware availability dat$ documented?
X YES NO IF YES, what is the documented percent availability of the SPDS hardware over the past 12 months? NOTE: Availability should be based on power operation, startup, het stansby, and hot shutdown only and not include other plant modes.
Unit:1r 99.2%
Unit '2r 99.4%
% Available Note: Availability data covers June 1988 throug6 May 1989.
4.4 Are the SPDS computar points included in routine instrument loop surveillance? [III.A.3.a]
X YES NO.
4.5 What percentage of software verification and validation has been completed?
x 1005
_ Approximately half Planned in the future
_ Other, describe j
i 4.6 Have changes to the SPDS host computer and software been maintained under a formal Software / Hardware Change Request (or equivalent) system? Check all that apply below:
x Yes; For how long?
24 years
_ No Have plans to in the future O
10 i
9 4.7 How frequently does the SPDS display invalid or ermneous information?
[I11.A.3.a]
_ frequent (above 5 percent)
_ infrequent (1-5 percent) 1 rare (less than 1 percent of the time) 4.8 How frequently have any of the critical safety functions been in a false alarm condition? [III.A.3.a]
_ frequent (above 5 percent)
_ infrequent (1-5 percent) i rare (less than 1 percent of the time) 4.9 Does the SPDS display valid parameter information during adverse containment conditions?
X YES _ N0 3.0 HUMAN FACT 0k5 [III.E except as noted]
Human factors in the context of SPDS design includes the usefulness of the technical information displayed on the screen to users and their performance l
during emergency operations. Human factors also includes display design techniques, such as labeling, display layout, and control / display integration.
this section provides a sample of the kinds of questions to be asked to help determine the degree to which the SPDS' design incorporates accepted human factors principles.
5.1 Who is the prime user of the SPD57
_ Shift Supervisor
[III.8.1]
_ Shift Technical Advisor 1 Board Operators
_ Other (specify) 11 L__________--_____
l 5.2 Are all SPDS controls located at the SPDS workstation?
X YES N0
[III.B.1]~
l If NO, where are the controls located?
)
l 5.3 Is all SPDS-relates information physically displayed such that the l:
information can clearly be read from the SPDS user's typical position?[III.A.1andIII.B.1]
X YES NO If N0, what specific informatica is available at other locations?
1 5.4 How are SPDS displays accessed? [III.A.2]
Continuous display, no interaction possible.
(see coments) Keyboard, one or two keystroke function key.
(see cements) Keyboard, greater than 2 keystrokes.
Touchscreen.
Cursor / menu (mouse, joystick, up/down key).
5.5 Does' the 'SPDS consistently respond to user commands in less than 10 seconds? [III.A.2]
g YES _ N0 if N0, is feedback provided to the user regarding delays in response?
YES NO 5.6 Does the SPDS sampling rate for parameters match the display update rate for those parameters? [III.A.2]
YES
. NQ i
12 i
If NO, what specific parameters do not match?
5.7 Are all parameter units of measure displayed on the SPDS consistent with the units of measure included in the emergency operating procedures?
X YES _ NO 5.8 Are all parameter labels and abbreviations consistent with the labels and abbreviations included in the emergency operating procedures?
X YES N0 5.9 Is any of the displayed information in a fom that requires transformation or calculation?
- X YES NO IF YES, what types of transformations or calculations are necessary?
5.10 Are the high-and low-level setpoints consistent with hard-wired i
parameter instrumentation and reactor protection system setpoints?
x YES ND 5.11 Does SPDS display high-and lom-inval setpoints?
2 YES _ NO 5.12 Are the SPDS calculated values such as subcooling margin, consistent with calculated values on the plant process computer?
X YES NO 13
5.13 Are all parameter units of measure displayed on SPDS consistant with the hard wired instrumentation?
X,,,, YES _ N0 5.14 Are all parameter labels and abbreviations consistent with hard-wired instrument labels and abbreviations?
1 YES _ NO 5.15 Were the technical basis for software specifications verified with plant-specific data (for example, heat-up and cool-down limits, variable steam generator setpoints and high and low level alarm setpoints)?
x YES N0 5.16 List LERs written as a result of SPDS software problems.
None 6.0 TRAINING [III.C.2allquestions]
6.1 Does simulator training include training in the use of the SPDSY X YES NO 6.2 How long is formal classroom training for SPDS users?
_ No formal classroom training
_ Less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />
_ 2-4 hours 1 More than 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> X
6.3 Is there periodic requalification training for SPDS7 YES ND If YES, how often?
Averages every six weeks.
i 14
q o
1
)
6.4 When are SPDS users given training regarding the relationship of the parameters to the plant safety functions? Check all that apply below:-
Not trained On the job or required reading X
During requalification training X
During an initial SPDS training 1
program 7.0 ELECTRICALISOLATION[III.C.1allquestions]
i What iselation devices are currently used?
l The SPDS utilizes fiber optic cables and nodems to transmit data from the Class lE (Type 1) remote multiplexing units to the SPDS. The fiber optic nocems were manufactured by canputer Products Incorporated.
The fiber optic cables were manufactured by Siecor Corporation.
7.2 Are these devices the same ones that were originally installed and i
approved by NRC7 X YES NO j
)
i I
i l
l 15
5 SPDS CHECKLIST COMMENTS Checklist item Comments 1.5 2 CPUs total are provided for each unit. Either one is capable of providing the SPDS function simultaneously. The alternate CPU serves as a backup for its respective unit.
2.1.4 The safety function title " Radioactivity Control" or its equivalent is not displayed on the SPDS. However, as noted in response to Checklist Item 2.2.4, all key parameters are monitored and displayed. Additionally, on the top level displays key radioactivity control parameters are combined into logical display groupings.
2.2.1 Reactor coolant ten:perature, reactor trip status (circuit breaker position), and safety injection initiation (signal present) are additional parameter inputs to the Suberiticality Critical Safety Function (CSF) tree display. These inputs are used to determine when the Suberiticality tree is to be evaluated.
2.2.2 RCS level is displayed both as reactor vessel level and as pressurizer level. Reactor coolant pump running status and feedwater flow to steam generators are additional parameter inputs provided to the Core Cooling and Heat Sink CSF tree displays, respectively. These inputs drive decision points on the CSF tree displays to the appropriate emergency operating procedures (EOPs). Hot leg temperature is monitored and displayed on one of the nine SPDS trend graph displays. A trend graph of the last 30 minutes is also displayed.
Additionally, hot leg temperature is indirectly available through the " reactor coolant average temperature" display available on the SPDS top level " Normal Operation" and "Heatup/Cooldown" displays. RHR flow is monitored and displayed on one of the nine SPDS trend graph displays. A trend graph for the last 30 minmes is also displayed.
Additionally, RHR flow and trend graph data are available on the top level " Cold Shutdown" SPDS display.
2.2.3 In addition to both steam generator pressure and level (narrow and wide range), steam generator radiation is monitored and displayed for both the main steam lines and the steam generator blowdown line.
19DsR52/7 16
k SPDS CHECKLIST COMMENTS
' Checklist Item Comments 2.2.5 Containment isolation indication is a default type of display, i.e., indication will occur if containment isolation did not take place. Containment isolation signal initiation and contain: ent isolation' valve position are the monitored inputs which dr.ee this function. Containment hydrogen.
concentration is monitored and displayed on one of the nine SPDS trend graph displays. Trend graph information for the last 30 minutes is also displayed.
3.2 For the purposes of critical safety function status, the
- individual parameters are grouped for display and logic purposes with appropriate CSFs. This grouping, however, is not identical to the groupings presented in Checklist Item 2.2.1 through 2.2.6 above. Though largely identical to the Checklist groupings, parameters were grouped on the basis of CSF status trees for entry into appropriate EOPs. However, all parameters are displayed and accessible on the SPDS.
3.3 The status of all safety functions (CSFs) is always displayed (except Radioactivity Control) on 17 of 18 SPDS displays.
The 18th display is only monitored and used in cold shutdown. During cold shutdown, the CSF status is not applicable. Parameters which support the fifth. safety function (Radioactivity Control) are always displayed on the top level normal operation and heatup/cooldown operating mode displays. As the top level " normal operation" display is normally displayed during plant operation, radioactivity control status is normally displayed. Additionally, various radioactivity control parameters are displayed on other SPDS displays as well.
i 19DSR52/7 17
I j
a SPDS CHECKLIST COMMENTS 1
(continued) f Checklist Item
' Comments
]
5.4 All SPDS displays are accessible on the control room main board by depressing one key dedicated to each separate
- display. At all other SPDS display locations, the three top level and six CSF Status tree displays have a dedicated access key. To access the remaining SPDS display screens (trend grapha) five or six keys (including the return key) must be depressed.
5.6 Display update rate is every two seconds. The SPDS calculation interval rate is every two seconds. The SPDS data base update rate (which provides the value displayed) can be adjusted. For all SPDS inputs, the data base update rate is between 0.2 and two seconds.
19DSR$2/7 18 L
L i