ML20249C391
| ML20249C391 | |
| Person / Time | |
|---|---|
| Site: | Millstone  |
| Issue date: | 06/22/1998 |
| From: | NORTHEAST NUCLEAR ENERGY CO. |
| To: | |
| Shared Package | |
| ML20249C390 | List: |
| References | |
| NUDOCS 9806290178 | |
| Download: ML20249C391 (29) | |
Text
Docket No. 50-245 B17320 l
l Millstone Nuclear Power Station, Unit No.1 Four-Year Simulator Certification Report June 1998 P
9806290178 990625 DR ADOCK O 25
l MILLSTONE UNIT 1 SIMULATOR
-]
-QUADRENNIAL CERTIFICATION REPORT JUNE 1998 I
APPROVED:
/
Ma pera Training
- ^
D' ate APPROVED:
lln
[Db9l9$
A in age'r rocess ComputeIsind Simulators /
'/ ate D
APP OVED:
4_h GbN'f?
(
?
6perations Manager, Millstone Unit 1
' 'Date i
APPROVED:
/
f(b L dNtI Ak E-irector, NucleaPi raining Department
[
/ Date L
l
.L i
TABLE OF CONTENTS i
Page No.
Quadrennial Certification Report Summarv 1
1.
Simulator Certification Program Overview 2
j 2.
Description ofperformance testing for the four year cycle July 1994 - June 1998 A.
Testing Goals, Methodology and Assumptions 5
B.
Normal Operation and Surveillance Testing.
7 C.
Malfunction Testing 7
D.
Annual Operability Testing 8
E.
Physical Fidelity Verification 9
F.
Instructor Station Testing 9
j G.
Real Time Testing 10 3.
Description of uncorrected performance test failures and schedule for correction 11 4.
- Next Four-Year Schedule 12 5.
Plant design changes not installed within 24-months 12 6.
Major simulator upgrades 12 Attachments
'A.
Open Performance Test Discrepancies B.
Four-Year Schedule u__-_ _ _ _ _ _ _ _ _ - _ __
. QUADRENNIAL CERTIFICATION REPORT
SUMMARY
The Millstone Unit I simulator was initially certified on June 30,1990. Certification was accomplished through the Northeast Utilities Simulator Certification Program, which is also the
)
vehicle for ensuring continued certification. Based on the results of the last four years'-
l.
performance testing, the Millstone Unit 1 simulator continues to demonstrate excellent physical and functional fidelity when compared to the reference unit. The Simulator Certification L
. Program contains a comprehensive testing program, as well as procedural controls to ensure the Millstone Unit I simulator retains high fidelity to the plant.
- This report contains the following sections and two attachments:
! Section 1 provides an overview of the simulator certification program.
H
. - Section'2 provides a description of the performance testing covering the four year cycle ending June 1998
'Section A provides a description of testing methodology and assumptions.
e Sections B through G review and summarize the individual tests, which make up the r
Millstone Unit 1 Simulator performance and operability tests.
1 Section 3 provides a smnmation of open discrepancies on the Millstone Unit I simulator.
1
-3 Section _4 discusses the testing sequence for the next four year certification period (July 1998 Lthrough June 2002).
l
- : Section 5 discusses plant design changes that were not completed within 24 months of installation in the plant.
- - Section 6 provides a description of the new simulator platform and testing that was performed.
q to accept the new platform for use.
i
- Attachment A lists the open performance test discrepancies and their projected resolution date.
~
. Attachment B lists the next four-year performance test schedule.
. e ' The perfonnance tests described in section 2 were all performed by individuals who
- were or are SRO licensed or certified on Millstone Unit 1. Any discrepancies
'l identified during performance testing will be corrected through the Nuclear Simulator
- Engineering Manual (MEM) NSEM-5.01, " Simulator Modification Control."
Page1of13 L
y 1.
SIMULATOR CERTIFICATION PROGRAM OVERVIEW The mission of the cenification program is to:
Ensure that the simulator has the capability to support the operator training e
. programs.
Provide for certification in a timely, cost-effective manner, addressing the specific requirements of NRC 10CFR55.45 (b), and the methodology recommended in L
Regulatory Guide 1.149,1987.
Ensure ongoing compliance with the requirements set forth in ANSI /ANS 3.5,.
1985.
The effon required to accomplish this mission has been grouped into three main -
components: Defmition of the Scope of Simulation, Validation of the Scope of L
Simulation, and Configuration Management. NU has put in place a collection of formal processes called the Nuclear Simulator Engineering Manual (NSEM), to direct all aspects of cenification and ensure compliance to the regulatory requirements. The NSEM is a.
departmentally controlled document.
' The Scope of Simulation that NU cenifies is based upon the NU Simulator Training
- Guides, which encompass
The general requirements specified in ANSI /ANS-3.5,1985 and Regulatory.
e Guide 1.149,1987.
The training requirements for performing the various plant str.rt-up, shutdown,.
operating and emergency procedures.
Outside events (e.g., selected LERs, plant design changes, etc.) that affect the
. training programs and/or the simulator configuration.
. Specific perfonnance tests were developed for the Millstone Unit I simulator, which
~
fulfill the testing requirements of ANSI /ANS 3.5,1985, and recommended testing in Regulatory Guide 1.149,1987.~ Included are the following test categories:
e Malfunctions o.
- Normal operations and surveillance LInstructor station Annual operability e
l Page 2 of13 l
_o
jg i
g ny
-m i
- Real-Time -
er' Physical fidelity verification ;
- The Millstone Unit I simulator performance tests are dynamic documents and are the primary mechanism for validating simulator performance and fidelity. As such, they are -
updated to reflect modifications made to the simulator and/or new reference plant performance data. The performance tests are repeated over a four-year period at the rate.
- of approximately 25 percent per year / The operability test and physical fidelity -
evaluation portions are performed annually.
NU's' Simulator Certification Program provides control'over the configuration of the Millstone Unit I simulator to ensure that it can effectively support the training mission and that regulatory commitments are satisfied. The main components of simulator.
configuration management are: 1) Design Data Base,12) Documentation, and 3) m Modification Control and Scope of Simulation Expansion.-
' l. The intent of the Simulator Design Data Base is to have available the complete data 1 on which the simulator is designed, and on which upgrading is based. The specific
' data which forms the design basis for the current Millstone Unit I simulator hardware configuration and software models has been identified and validated.; As such, we utilize the latest revision of plant documents and rely on the formal plant design 1'
change process for notification of modifications and transmittal ofpertinent -
information. Open Simulator Discrepancy Reports constitme the Updated Design Data Base described in ANSI /ANS 3.5,1985.
s
- 2. Simulator-specific documentation is needed for certification and/or maintenance of the simulator. TVhile this documentation is controlled and updated, it is not considered to be part of the Simulator Design Data Base.
. 3. NU has in place a modification control process to implement design changes on the E
f Millstone Unit I simulator and to ensure that the simulator fully complies with
' ANSI /ANS 3.5 (1985),' Reg. Guide 1.149, and 10 CFR 55.45. The following i
l procedural controls have been implemented:'
]
i L
Maior Plant Modifu;atiam - The Millstone Unit I simulator was certified as a l
plant referenced simulator. Significant reference plant control room changes, such as control room design review modifications, must receive special consider-ation'due to their potential major impact on training. NSEM 6.04, " Major Plant
' Modifications," addresses this concern. This process guideline ensures that major
.j
- plant modifications affecting the reference plant control room are reviewed and acted on in a timely manner.' This ensures that training and exams continue to be performed on a valid plant referenced Simulator.
h Page 3 of13
~
1 1
Plant Design Changes / Procedure Changes - Plant design changes and procedure changes are sent to the training department to be reviewed for training impact and simulator impact. This assures that both training and the simulator are continually evaluated and updated as plant changes occur. Procedural controls covering tLs review process are in training procedures. Plant design changes requiring simulator modifications are handled within the time allowed by ANSI /ANS 3.5 Section 5.2 and 5.3.
Student Feedback - Student (licensee) feedback is an important input to simulator fidelity. Student feedback on simulator performance is requested during the critique of each training scenario. If there is a simulator discrepancy it is noted and provided to the Simulator Operations Assistant for dispositioning.
Reference Plant Performance Data - As plant events occur, data is retrieved and evaluated to validate Simulator Fidelity. NSEM 6.03," Collection of Plant Performance Data," covers the collection of reference plant performance data.
Development of New Simulator Training Guides - Simulator Certification, NSEM 6.02, " Development of New Simulator Guides," covers requirements for validating new simulator training guides. This ensures that new simulator training guides use only certified remote functions, certified malfunctions, certified initial conditions, and do not exceed any simulator operating limits.
Simulator Certification Documentation - As the Millstone Unit I simulator is modified, approprhte simulator certification documentation needs to be updated.
NSEM 5.02, " Retest Guidelines," covers updating of the performance tests.
A Simulator Configuration Control Committee (SCCC) has been established to provide overall simulator design control and management ofresources involved in simulator modifications. The SCCC is chaired by the Manager of Operations for Millstone Unit I and includes representatives from the Operator Training Branch and Process Computers and Simulators department.
Page 4 of13
2.
DESCRIPTION OF PERFORMANCE TESTING FOR THE FOUR YEAR CYCLE JULY 1994-JUNE 1998 A.
TESTING GOALS. METHODOLOGY AND ASSUMPTIONS The NU simulator certification program, goals, methodologies, and assumptions were established to ensure an efficient, effective, and comprehensive approach to testing. Certain elements of this testing philosophy are worthy of mention here:
Testing should be conducted for normal, abnormal, and emergency conditions.
The siinulator response, as verified by testing, during normal, abnormal, and emergency conditions shall meet the following criteria necessary to support the contents of the training curriculum:
Correct diagnosis of events by the operator is possible.
Capabilities exist for the operator to intervene and mitigate events.
Actions or inaction taken by operators shall result in similar response as in the reference plant.
Alarms and automatic system actuations shall occur such that operator diagnosis and response is not adversely affected.
Any discrepancies found during testing that violate these criteria shall be j
documented by generating s Discrepancy Report (DR), to be dispositioned in
{
l accordance with the NSEM.
The requirements of ANSI /ANS 3.5 shall be implemented.
1 Simulator controls used in training, such as, switches, annunciators, meters, controllers, recorders, lights, keylocks, pushbuttons, etc., should be tested.
Personnel with current or previous Millstone Unit 1 SRO licenses or certifications are used for performance and operability testing.
In the absence of finite data, a combination of operating experience, e
engineeringjudgment and analytical results shall be used to test the simulator response to major malfunctions such as large break LOCA, steem line break,
'etc.
Page 5 of13
Testing shall be conducted whenever a modification is made to the simulator
. that aflects its fidelity relative to the reference unit or its functional operation as a simalator. Modifications to the simulator design shall be validated -
throngn testing prior to use in training and examination.
During the development and conduct of specific testing it became necessary to l'
establish additional guidance. This was done to more effectively apply the
- requirements of ANSI /ANS 3.5 and respond to the unique attributes of each test.
This additional guidance ar deviation from the general philosophy is summarized below:
J L
1)
NORMAL OPERATIONS TESTING Testing ofsurveillances on redundant equipment or flowpaths is.
not required if the primary piece of equipment or flowpath is tested. For example, if the Train I Service Water Pump surveillance is performed, the Train II Service Water Pump E
surveillance need not be performed.
j The simulator's capability of performing a reactor scram followed
.e by recovery to Iated (full) power (ANSI /ANS 3.5, Section 3.1.1, Item 4)is tested by testing:
a plant startup to 100% power, followed by
]
a reactor trip, then 1
an increase in power to 15%
{
'2)-
TRANSIENT TESTING The Steady State tests did not monitor Thermal Power. Neutron I
flux, reactor pressure and generator electrical power were recorded
_j and provided adequate indication of thermal power response.
No secondary heat balance data is recorded in the Steady State i
tests. Generator electrical power, main steam flow and feedwater flows provide indication of secondary plant performance.
Some transients record only one Recirc loop's flow instead of total loop flow. Individual loop flow is an adequate indication of total loop flow response where both loops respond identically.
i Page 6 of13 j
'l
1
\\
~
B.
NORMAL OPERATIONS AND SURVEILLANCE TESTING The normal operations and sutveillances required by ANSI /ANS 3.5 Section 3.1.1(1), (2),
(3), (4), (5), (6), (7), (8), and (10) were performed using controlled copics of Millston:
Unit 1 operating procedures and surveillance. ANSI /ANS 3.5, Sect 4on 3.L1 (9) was tested in a separate reactor core test. NSEM 4.10, " Normal Operations Verification,"
contains the generic guidance used to write and perfonn the Millstone Un't 1 Simulator Nonnal Operations and Surveillance Test.
Using controlled copies of Millstone Unit 1 operating procedures, the following sequence of operations was tested on the Millstone Unit 1 Simulator:
- 1. The simulator was initialized to cold shutdown conditions.
- 2. Nuclear startup
- 3. Plant heatup
- 4. Plant startup
- 5. Load increase to 100% power
- 6. Reactor scram
- 7. Reactor scram recovery
- 8. Nuclear startup
- 9. Plant startup
- 10. Load increase to 15% power
- 11. The simulator was reinitialized to 100% power.
- 12. Plant shutdown to hot standby
- 13. Reactor shutdown
- 14. Plant cooldown to cold shutdown
- C.
MALFUNCTION TESTING i
The Millstone Unit I simulator is certified for 265 malfunctions, which meet the requirement for 25 types of malfunctions specified in section 3.1.3 of ANSI /ANS 3.5,
. (1985).
Each certified malfunction has its own test. Guidance for writing and conducting j
malfunction tests is contained in:
NSEM 4.04, Major Malfunction Testing NSEM 4.05, Malfunction Testing Malfunctions which cause major integrated plant effects, such as loss ofinstrument air, loss of normal power, etc., have their respective malfunction tests written and tests Page 7 of13
8 Q
L conducted per the guidance in NSEM 4.04. For these " major" malfunctions, computer idata, analytical data, or actual plant response data (if available) is typically used to verify correct ' malfunction response. Analytical data was obtained from the following -
documents / sources:
.. Millstone Unit 1 Startup Test Program Results (G.E.)
- - Millstone Unit 1 Updated Final Safety Analysis Report (UFSAR) e ' Millstone Unit 1 Reference Plant Data Book
- 1 Cycle 13 Reload Analysis Report
.. LOCA Analysis Report for Millstone Unit 1, G.E., July 1989 All'other malfunctions that are not classified as a major malfunction have their respective malfunction tests written and tests conducted per the guidance in NSEM 4.05. This type -
of malfunction is typically an instrument malfunction, a contmiler malfunction, a pump trip, etc. Malfunction tests in this category are typically "Best Estimate" Analysis. "Best Estimate" Analysis means a Millstone Unit 1 NRC licensed or SRO certified instructor or
- previously licensed or certified individual utilizes his experience, operating procedures, piping and instrument drawings, electrical drawings, and possibly hand calculations to estimate proper simulator response.
' ANSI /ANS 3.5 (1985), Section 3.4.2, requires that provisions be available for incorporating additional malfunctions. As an example, malfunctions on the new Recirc Speed Controller: RR08, RR09, RR10, and RR12 were added during the last 4 year certification cycle to the simulator to reflect changes in the Millstone Unit 1 plant design.
' All certified malfunctions are retested over a four year interval, as described in Section 4 of this document.
.. D.
ANNUAL OPERABILITY TESTING ANSI /ANS 3.5 (1985) Section 5.4.2 and Appendix B specify annual operability testing
)
' requirements. The methodology used to write and conduct operability tests is described
-l in NSEM 4.09, " Simulator Operability Testing." Using the guidance provided in NSEM i
4.09, an annual operability test specific to the Millstone Unit I simulator was performed.
i l
Annual operability testing consists of the following items; i
Steady state testing at 50% power, 80% power and 100% power e
Stability testing at 100% power l
e Performance testing for ten (10) transients i
Page 8 of13 L
~
b c
'i-Reference plant data obtained at 50%,80% and 100% power during the various plant
- startups and power reductions was used as the basis for steady state testing. Utilizing the reference plant data, comparisons were made between the simulator and reference plant ~
~ for approximately 14 selected critical and non-critical points. These 14 points include all Ethose listed in ANSUANS 3.5 Section Bl.l.
A stability test was performed at 100% power for 14 points over a one hour period. This test was in conformance with ANSUANS 3.5 Section Bl.l. Acceptance criteria for the steady state and stability tests were based on ANSUANS 3.5 Section 4.1. The ten
' transients described in ANSUANS 3.5 Section Bl.2 were analyzed using the parameters indicated in ANSUANS 3.5 Sections Bl.2.1,2, or 3, as appropriate.
E.
PHYSICAL FIDELITY VERIFICATION
' ANSUANS 3.5 (1935) Sections 3.2 and 3.3.1 require sufficient panels and controls simulation to conduct normal operations and malfunction response. Further, the simulator instrumentation and controls are required to duplicate the physicalL characteristics of the reference plant. In response to the issuance of 10CFR55.45, a two step evaluation process was employed for the existing Millstone Unit I simulator to ensure compliance with the ANSUANS 3.5 Section 3.2 and 3.3.1 requirements.
NU has a strong commitment to. maintain the Millstone Unit I simulator up to'dat-with' the reference plant control boards in a timely manner. NSEM 6.04, " Major Plant
. Changes," addresses controls on major design changes (such as control room design.
. review) that challenge a " plant referenced simulator" to remain an effective training tool.
Minor plant changes are addressed within the time constraints of ANSUANS 3.5 Sections 5.2 and 5.3.
F.-
INSTRUCTOR STATION TESTING L
Between June and October of 1997, simulator instructor station testing was performed as described in NSEM 4.11, " Instructor Station."
' Instructor station testing verified correct operation of the following features of the
' Millstone Unit' 1 instructor station:
e Backtrack
- Fast Time e Slow Time Boolean Trigger -
e Page 9 of13
.c
Composite Malfunction j
e
- Variable Parameter Control
. Freeze j
Snapshot e
To verify the I/O override feature of the Millstone Unit I simulator, a sampling of the following points were tested to verify proper operation.
Analog Outputs e
Analog Inputs DigitalInputs e'
Digital Outputs -
"Crywolf' Annunciator feature.
e Le ' Annunciator Override The purpose of the I/O override feature testing was to verify the feature itself, not every I/O override point. The Millstone Unit I simulator has the ability to I/O override.
essentially every point in the simulator. While this is a great capability, there are therefore thousands ofI/O override points. Curriculum testing of a simulator lesson plan
' requires the testing of any individual I/O override point to be used in training or exams, thereby verifying the individual I/O override points to be used.
G.
REAL TIME TESTING
^
Real time testing was performed in February 1997, per NSEM 4.13, "Real Time Simulator Verification." '
- The pugose of this test was to verify that all simulation models are running in real time.
Verification was accomplished by:
. Monitoring the operations of the real time executive and ensuring it is running in real time.
Running the following complex scenarios and measuring the time used by each of the frames. Of the 50 milliseconds available no more than 9.6 msec was ever required,
- leaving greater than 80% spare time at all times.
_ ATWS (stuck rods)
Turbine load reject / trip Steam-Line Break Loss of Coolant Accident Page 10 of13 lu L
I
-l.
Installing software counters to run at the end of each frame and comparing their actual e-value with values expected to ensure there was no lapse in real time.
The results of these tests show that the Millstone Unit 1 simulator performs in real time.
This test will be repeated once every four years or at any time a question exists that the Millstone Unit 1 simulator is not running in real time.
3.
DESCRIPTION OF UNCORRECTED PERFORMANCE TEST FAILURES AND SCHEDULE FOR CORRECTION NSEM 5.01," Simulator Modification Control," establishes controls for the coordination, resolution, and documentation ofidentified differences between the simulator and its reference plant. A Discrepancy Report (DR) is a form used by the Operator Training Branch and the Process Computers and Simulators department to record all identified discrepancies and ensure that the requirements of ANSI /ANS 3.5 are satisfied. DRs are resolved in accordance with NSEM 5.01, " Simulator Modification Control," and NSEM 6.04," Major Plant Modifications."
As ofJune 1,1998, there are 136 open discrepancies on the Millstone Unit I simulator of which 48 are from performance tests. These 48 open performance discrepancies are listed in Attachment A. The open discrepancies have been evaluated for training impact. Since each scenario is validated prior to its approval and use, the impact on training is minimal and controlled. Scenarios with unacceptable simulator performance are not used in training. Approximately 300 discrepancies of all types (e.g. plant design changes) were
)
dispositioned over the past four years.
j t
i The previous quadrennial report mentioned the possible resolution of an open DR "with a J
new NSSS modelin 1995-1996." This model upgrade was delayed and has been rescheduled to be completed by December 31,2000. The upgrade of the NSSS model expands our training capability by increasing the scope of simulation, and reduces the software maintenance effort required to tune transient responses to newly acquired reference plant data. This upgrade of the NSSS model is voluntary and not for the purpose of meeting the requirements of ANSI /ANS-3.5,1985 (as endorsed by Regulatory Guide 1.149, Revision 1), but will be installed solely as a training enhancement by December 31,2000. Additionally, the presently installed NSSS model fully supports i
restart of the unit from the current extended shutdown.
j i
Page 11 of13 1
1 f
I I-E.
l l
1 4.
NEXT FOUR-YEAR SCHEDULE. (JULY 1998 TO JUNE 2002) l The Millstone Unit 1 performance tests will be repeated over a four year interval as described in Attachment B. This schedule has been written basec on the guidance provided in NSEM 4.07, " Master Test Schedule." This four year interval will start on July 1,1998.
The following tests must be perfonned each year:
Annual operability Physical fidelity verification e
i The following tests must be performed over a 4 year inteival.
Normal operations and surveillance Malfunctions
{
e Instructor station l
- Real time 5.
PLANT DESIGN CHANGES NOT INSTALLED WITHIN 24 MONTHS There were two plant design changes that were not incorporated within the 24 month time frame per ANSI /ANS 3.5. These were changes to the process computer data base and involved modifying procesc computer points or their nomenclature. Both had minimal impact on operator training and have since been incorporated.
l 6.
MAJOR SIMULATOR UPGRADES In the first quarter of 1997, the Gould 32/87 processors and peripherals were replaced with a SUN Enterprise 3000 platform and new peripherals. The re-host included complete benchmark testing against the previous platform by using the simulator operability test. These tests included 1) instructor station test and 2) all annual operability tests. Any difference in the two benchmarks were resolved before the simulator with the new platform was returned to service.
Page 12 of13 l
l
h.
Millstone Unit 1 Simulator Computer System Configuration (A) Hardware t
- Enterprise 3000 UltraSparc server l
- 2.5GB/sec Gigaplane system bus 167Mhz CPUs with 4MB external cache
- 256 MB main memory
- Intemal CD drive
- Intemal 8mm 20-40GB DAT drive,
- 2 Fast Wide Ultra SCS13 buses 2.lGB internal drives
- 3 TurboGraphics cards with 20" color screens.
(B) Software
- SUN Solaris 2.5.1 operating system
- Sybase 10.0.2 relational database managernent system
- Dataview 9.5 graphical tool runtime
- NUSE (Northeast Utilities Simulation Environment)
- NUXIS (Northeast Utilities X-Window Instructor Station)
NUSE The Northeast Utilities Simulation Environment (NUSE) was developed in-house by the Simulators and Computer Engineering (SCE) staff. The real time portion of NUSE includes the real time executives (MainExec, Rtexec), interactive debugging task (IDT), I/O module, etc. and provides the model execution sequencing, scheduling, panel interfacing and on-line parameter monitoring. The off-line portion of NUSE includes tools and utilities used by engineers to develop, debug and maintain the simulation models.
NUXIS Northeast Utilities X-Window Instructor Station (NUXIS) was also developed in-house by the SCE staff using Dataview's graphic tools. NUXIS provides a window based, point and click, graphical user interface for instructors. The new instructor station is capable of storing 98 initial conditions versus the 59 which is what was available on the previous model.
Page 13 of13
ATTACHMENT A Millstone Unit 1 OPEN PERFORMANCE TEST DISCREPANCIES June 30.1998 The discrepancies-identified during the performance testing are listed herein.
The discrepancies are annotated as to the proposed schedule for resolution based on Operator Training needs. This schedule is our best estimate at this time, hcwever, it is subject to change based on resources, emergent work, and Millstone Unit l's restart status.
i.
l Page1of3 l
l
ATTACHMENTS Millstone Unit 1 Open Performance Test Discrepancies June 30,1998 DR Number Dhcipline Due Date DR Title
'1991-1-0105-SW' 6/30/99 Voltage Decrease On Load Reject (DL) -
1991-1-0117 SW 12/31/99.-
Traveling Screen Fouling (DL) :
1991-1-0118-
.SW 6/30/99
. Main Condenser Tube Rupture (DM) 1992 1-0107 '
SW'
.10/1/98 Torus Water Temp vs. LOCA (DM) 1992-1-0112 -
SW' 10/1/98
' Fuel Failure Effects on Ann #6, #8 & #14 (DH) -
1992-1-0147 SW.
12/31/00 Torus Air Temp vs. LOCA (DM)-
'1992-1-0180 SW 6/30/00 Gland Seal Pressure vs. Unloader Valve (DL) 1993-1-0045 '
.SW.
6/30/99 TBCCW CLG vs. Station Cooling Water Temp (DM) 1993-1-0054 SW-16/30/99 Bypass Valve Operation without Hyd Oil Pressure (LL)
.1993-1-0059 SW' 60^/99 Malf. TUO2 Turb ShaA Lube Oil Pump (DM) 1993-1-0075-SW 12/31/98 Malfunction SC04 (LL) 1993-1-0119 SW 12/31/00 CST Level (LL) 1993-1-0123 ~
SW-12/31/00-Hip-B Temp of Norm Drain (DL) 1993-1-0131 ~
SW 6/30/99-UP/LP Htr Drn Cascade FW24 (DL)
- 1 1994-1-0019
- SW 10/31/98 RPV Pressure Spike vs. MS Line Break Transient (DM) 1994-1-0021 SW-10/31/98 RPV Water Level vs. MCA & FW Flow (DM) 1994-1-0023 SW~
12/31/00 RPV Pressure Oscillations vs. MCA Transient (DM)
.1994 1-0040-
-SW 10/31/98 CROI Malt FuelFailure(DH) 1994 1-0115 SW 6/30/00 Malf. EG12 G/T Speed (Oscill)(LL).
1996-1-0046 SW 10/31/98 Feedwater Malt FW19 Response incorrect (DM) 1997-1-0015 SW.
6/30/99 Simulator Slow Time CAT C(E)
< 1997-1-0018 SW 6/30/99 Malf. ED10 CAT C (LM)
R
'1997 1-0019.
SW 6/30/00 Malf. ED12 CAT C (LL)
-1997-1 0020-SW.
12/31/98 Malf. TUO6 CAT C(DL) f1997-l 0021 SW 6/30/99 Malf. SC04 CAT C(DL)'
.]
w, 1997-1-0023
' SW 12/31/98 Lin Pump Motors CAT C
-1997-1-0027 SW 12/31/98 Malf. TUO3 CAT A (DH) i Pege 2 of 3 r
V
. as i
DR Number Discipline Due Date DR Title 1997-1-0028 SW 12/31/98 Malf. ED15 CAT C (DL) 1997-1-0029 SW 12/31/00 N1 RPS Relays CAT C(LL) 1997-1-0036 SW 12/31/00 Fast Time Parameters (E) 1998-1-0014 SW 12/1/98 DW Compr. Trip on Loss of RBCCW 1998-1-0015 SW 12/31/99 Annun. 921 A (1-4) Should Come from TIS 1998-1-0017 SW 12/31/99 Bellows Seal Area Alarm 1998-1-0018 SW 6/30/99 Leak Rate on RC08 1998-1-0019 SW 6/30/99 Should Haveliigh Amps on RC01A 1998-1-0020 SW 12/31/99 DW Cooling Coil Leak Should Cause Floor Drain Alarm I
1998-1-0023 SW 12/31/98 IC-7 Opens with Group 4 Present 1998-1-0027 SW 12/31/98 Main Steam Rad Monitor Dnscle Alarm j
1998-1-0028 SW 6/30/99 Core Flow to RR Pump Flow Relationship 1598-1-0030 SW 6/30/99 Loss of SCCW on RR M/G 1998-1-0031 SW 6/30/99 Loss of SCCW Effects on Feed /Cond.
l 1998-1-0032 SW 12/31/98 RWO2 vs. Emergency Rod in 1998-1-0033 SW 12/31/00 Reactor Pressure Response on Loss of Feed 1998-1-0034 SW 12/31/00 Level Response on MSIV Closure i
1998-1-0035
.SW 12/31/00 Steam Flow Response w/MS01 1998-1-0037 HW/SW 12/31/99 Install Digital Service Water Indicator 1998-1-0038 SW 6/30/99 Gas Turbine Freq. Meter Should Fail Downscale 1998-1-0039 HW 12/31/99 Install Computers on Operator's Desk to Maintain Logs TotalDRs: 48 l
l f
j Page 3 of 3
..e AT. TACHMENT B Millstone Unit 1 PERIODIC PERFORMANCE TESI SCHEDULE START EN_Q Performance Testi July 1,1998 June 30,2002 t
Year Onef July 1,1998 June 30,1999 Year Two:
July 1,1999 June 30,2000
- Year Three:
July 1,2000 June 30,2001
' Year Four:
July 1,2001 June 30,2002 i
APPROVED BY:
N b /P 77
/
ASOT '
l Rev.: 3 Date. 3/26/97 Page: 1of10 NSEM-4.07 l
4
.. 8
- as
! Ann==1'Onerahility NSEM-4.09 50% Steady State Accuracy 80% Steady State Accuracy 100% Steady State Accuracy 100% Stability Transient #1: Manual Scram Transient #2: Simultaneous Trip of L-All Feedwater Pumps '
- Transient #3: Simultaneous Closure
/
of All Main Steam Isolation Valves L
Transient #4: Simultaneous Trip of Both Recirculation Pumps
. Transient #5: Trip of Any. Single
. Recirculation Pump ~
l ll Transient #6: Main Turbine Trip, w/o Scram L;
Transient #7: Maximum Rate Power Ramp
!~
Transient #8:Marimum Size LOCA Transient #9: Maximum Size Unisolable Main Steam Line Rupture-L-
l 1-Transient #10: Isolation, SORV, l..
'Feedwater failure i
Rev.: 3 Date: 3/26/97 Page: 2 of 10 NSEM-4.07
___..--___________._-___,_-_._-___a
.. ~
l l
YEAR OhT l
TEST DATE-INTTIALS Maior Malfunctions NSEM-4.04 '
ED11 Loss Of Normal Power (Fast Transfer to RSST Failure)
ED14 Lose 'of 345 KV Transmission (Load Reject)
IA03 Loss ofInstrument Air RC01 ' Loss of Reactor Building Closed Cooling Water Malfunctions NSEM-4.05 Circulating Water System CW Control Rod Drive System RD Core Spray System CS Instrument Air System IA" Low Pressure Coolant Injection' LP Reactor Building Closed Cooling Water RC Reactor Protection System RP--
Service Water System SW Turbine Building Closed Cooling Water CC 1
Rev.: 3 Date: 3/26/97 i
Page: 3 of 10
)
NSEM-4.07
)
7, '
~,
YEAR ONE TEST DATE INITIALS l
l l
Normal Plant Evolutions NSEM-4.10 Instructor Station Verification NSEM-4.11 Simulator Physical fidelitv/ Human Factors Evaluation-:
NSEM 4.12 Real Time Simulation Verification NSEM-4.13 Rev.: 3 Date: 3/26/97 Page: 4 of 10 NSEM-4.07
YEAR TWO l
TEST DATE INTTIALS Annual Operability NSEM-4.09 30% Steady State Accuracy 80% Steady State Accuracy 100% Steady State Accuracy 100% Stability Transient #1: Manual Scram Transient #2: Simultaneous Trip of All Feedwater Pumps Transient #3: Simultaneous Closure of All Main Steam Isolation Valves Transient #4: Simultaneous Trip of Both Recirculation Ihnnps Transient #5: Trip of Any Single Recirculation Pump Transient #6: Main Turbine Trip, w/o Scram Transient #7: Maximum Rate Power Ramp Transient #8: Maximum Size LOCA Transient #9: Maximum Size Unisolable Main Steam Line Rupture Rev.: 3 Date: 3/26/97 Page: 5 of 10 NSEM-4.07
.< ~ *.
YEAR TWO TEST DATE INTTIALS Transient #10: Isolation, SORV, Feedwater failure Maior Malfunctions (NSEM-4.04)
CH01 Drywell Cooler Failure (Loss of all Drywell Cooling)
CR01 Fuel Cladding Failure CWO4 Main Condenser Tube Rupture
. (Chloride Intrusion) i SWO1 Service Water Pump Trip (Loss -
of All Service Water) i Malfunctions NSEM-4.05 Automatic Pressure Relief System AP HVAC/ Containment CH Condensate / Feedwater FW -
j Main Steam System MS NuclearInstrumentation NI
. Standby Liquid Con' rol SL t
Simulator Ooeratine Limits NSEM 4.08 Simulator Physical fidelitv/ Human Factors Evaluation-:
NSEM 4.12 Rev.: 3 Date: 3/26/97 Page: 6 of 10 NSEM-4.07
= _ _ _ _ - _ _
3 <. '.
YEAR THREE TEST DATE INITIALS Annual Operability NSEM-4.09 30% Steady State Accuracy -
80% Steady State Accuracy' 100% Steady State Accuracy 100% Stability Transient #1: Manual Scram Transient #2: Simultaneous Trip of
- All Feedwater Pumps Transient #3: Simultaneous Closure of All Main Steam Isolation Valves Transient #4: Simultaneous Trip of Both Recirculation Pumps Transient #5: Trip of Any Single Recirculation Pump Transient #6: Main Turbine Trip, w/o Scram Transient #7: Maximum Rate Power Ramp Transient #8:Marimum Size LOCA
' Transient #9: Maximum Size Unisolable Main Steam Line Rupture Rev.: 3 Date: 3/26/97 Page: 7 of 10 NSEM-4.07 i
L _ _ _ _. _ _ - -_. _ _ _ _ _ _ _ _ _ _ _ _.. -. - _.. -... _ _ -.
YEAR THREE TEST DATE INTTIALS
. Transient #10: Isolation, SORV, j
Feedwater failure
'i;c Maior Malfunctions NSEM-4.04 CC01 Loss of Turbine Building Closed Cooling Water CC08 Loss of Stator Cooling, Generator
- Load Runback CWO1 Loss of Vacuum Malfunctions NSEM-4.05 I
l ElectricalDistribution ED ElectricalGeneration EG L'
Secondary Closed Cooling Water SC Turbine Control System TC 7
Process Computer PC w
Normal Plant Evolutions NSEM-4.10
. Simniator Physical fidelitv/ Human Factors Evaluation-:
NSEM 4.12 I
Rev.: "
Date: 3/26/97 Page: 8 of 10 NSEM-4.07 l
i
= _ _ _ _ _ _ _ _ = _ _ _ _ _ _ - __
YEAR FOUR TEST DATE INITIALS
~ Annual Oncrability NSEM-4.09 30% Steady State Accuracy 80% Steady State Accuracy -
L100% Steady State Accuracy 100% Stability Transient #1: Manual Scram Transient #2: Simultaneous Trip of -
All Feedwater Pumps.
Transient #3: Simultaneous Closure of All Main Steam Isolation Valves Transient #4: Simultaneous Trip of Both Recirculation Pumps -
Transient #5: Trip of Any Single Recirculation Pump Transient #6: Main Turbine Trip, w/o Scram Transient #7: Maximum Rate Power Ramp l
Transient #8: Maximum Size LOCA Transient #9: Madmum Size Unisolable Main Steam Line Rupture r..
- Transient #10: Isolation, SORV, Feedwater failure Rev.: 3 Date: 3/26/97 Page: 9 of 10 NSEM-4.07
_2
l'
?
YEAR FOUR TEST DATE INITIALS Maior Malfunctions NSEM-4.04 RD01A All Rods Fail to Insert (ATWS)
SC01. : Loss of Secondary Closed Cooling
. Water TC06 Bypass Valve Failure, Turbine Trip Malfunctions NSFR-LD5 Off-Gas System OG I
Reactor Core System CR L
Radiation Monitoring System RM
(
Shutdown Cooling System SD Waste Disposal System WD Rod Worth Minimizer RWM Annunciator AN Simniatar Physical fidelitv/ Human Factors Evaluation:
NSFR 4.12 l ~
i'.
l Rev.: 3 Date: 3/26/97' Page: 10 of 10 NSEM-4.07 ll'c:.
_ _ _ -