ML22167A179
| ML22167A179 | |
| Person / Time | |
|---|---|
| Issue date: | 06/27/2022 |
| From: | Michelle Kichline NRC/NRR/DRA/APOB |
| To: | |
| Kichline M | |
| References | |
| Download: ML22167A179 (17) | |
Text
Dependency Analysis Using the Integrated Human Event Analysis System Human Reliability Analysis Methodology Michelle Kichline Senior Reliability and Risk Analyst U.S. Nuclear Regulatory Commission
=
Background===
- The NRC developed the IDHEAS General Methodology (IDHEAS-G) [1] as a general framework that can be used to create application-specific HRA methods.
- IDHEAS-G includes a new dependency framework that analyzes the dependency between two HFEs by identifying and evaluating how failure of the first human action effects the context of subsequent human actions.
- IDHEAS for Event and Condition Assessment (IDHEAS-ECA) [1] was created for quantifying the HEPs for nuclear power plant PRAs.
- IDHEAS Dependency Model (IDHEAS-DEP) [3] was developed using the new dependency framework in IDHEAS-G and the quantification methodology in IDHEAS-ECA [2].
2
Development of IDHEAS-DEP
- RES developed a set of dependency relationships and factors and presented them to the WG.
- 6 WG members analyzed an HFE pair for dependency using IDHEAS-ECA and presented their results to the WG.
- The WG discussed each example and how the dependency impacts could be evaluated using IDHEAS-ECA.
- The WG reviewed the dependency factors created by the project team and the draft guidance document.
3
Process Overview 4
IDHEAS Dependency Types
- Consequential - Occurrence of the preceding HFE (HFE1) changes the context for performing the subsequent HFE (HFE2) from the context that was assumed when the HFE was analyzed without dependency.
- Cognitive - Dependency in the cognitive information for two consecutive HFEs.
- Resource-sharing - The two HFEs share limited resources such as critical tools, staffing, water, or electricity.
5
Dependency Relationships IDHEAS-DEP defines five different dependency relationships:
R1 - Functions or Systems R2 - Time Proximity R3 - Personnel R4 - Location R5 - Procedure 6
Entry Conditions OR HFE1 and HFE2 are in the same PRA event sequence or minimal cutset There are no relevant human action success events between HFE1 and HFE2.
The initiating event is caused by human actions and is analyzed as the first HFE, such that the subsequent HFEs need to be assessed for dependency.
Proceed to Predetermination (Step 1) 7
Predetermination Analysis Dependency Relationship Assessment Guidelines Complete Dependency i)
HFE1 and HFE2 use the same procedure, AND ii)
HFE1 is likely to occur because of issues associated with the common procedure (such as having an ambiguous or incorrect procedure), AND iii)
There is no opportunity to recover from the issue with the procedure between HFE1 and HFE2.
Note: Opportunity for recovery may exist if there is adequate time to recover, AND steps in the procedure to recover, AND additional personnel outside the crew, such a shift technical advisor (STA),
available to identify the need to recover.
YES NO R1 -
Functions or Systems i)
HFE1 and HFE2 have the same functions or systems, OR ii)
HFE1 and HFE2 have coupled systems or processes that are connected due to automatic responses or resources needed.
YES NO R2 -
Time Proximity i)
HFE1 and HFE2 are performed close in time, OR ii)
The cues for HFE1 and HFE2 are presented close in time.
YES NO R3 -
Personnel i)
HFE1 and HFE2 are performed by the same personnel.
YES NO R4 -
Location i)
HFE1 and HFE2 are performed at the same location, OR ii)
The workplaces for HFE1 and HFE2 are affected by the same condition (such as low visibility, high temperature, low temperature, or high radiation).
YES NO R5 -
Procedure i)
HFE1 and HFE2 use the same procedure.
YES NO 8
Basis for Screening Process Dependency relationships between HFEs can result in one or more dependency factors.
Each dependency factor potentially impacts some PIFs associated with HFE2.
- The impact of each dependency factor on HFE2 is based on how occurrence of HFE1 changes the context for HFE2.
- If occurrence of HFE1 would not result in any changes to the context associated with HFE2, the dependency factor may be discounted.
- Each undiscounted dependency factor potentially results in new PIFs, new PIF attributes, or worsening of the PIF attributes that were originally assessed in the individual HEP of HFE2.
Some PIF attributes impact HEPs more significantly than others. The screening process focuses on evaluation of the more significant PIF attributes.
The screening process groups the impact of the most likely affected PIF attributes for each dependency factor into Low, Medium, and High impact categories.
The dependency impact values (Pd) are based on IDHEAS-ECA.
9
Screening Analysis Potential Dependency Factors Basis for Discounting the Potential Dependency Factor Dependency Impact R1.1 Same functions or systems leads to cognitive dependency A.
Occurrence of HFE1 leads to the scenario or parts of the scenario being different from what was typically trained; thus, the scenario associated with HFE2 becomes less familiar. (Note: Occurrence of HFE1 alters the scenario for HFE2; thus, HFE1 causes some level of unfamiliarity with HFE2)
B.
Occurrence of HFE1 leads to an incorrect or biased mental model of the situation associated with HFE2.
A - HFE2 was trained in the scenarios that HFE1 occurs (e.g., Feed & Bleed is the last action after others fail) so there is no unfamiliarity due to HFE1.
B - HFE2 is well trained on in various scenarios such that personnel are unlikely to develop a wrong mental model due to occurrence of HFE1.
A/B - There is no cognitive link (similar thought process) between the two HFEs; thus, occurrence of HFE1 has no impact on scenario familiarity or mental model associated with HFE2.
B - There are opportunities between the HFEs to break the incorrect mental model, such as multiple crews or diverse cues.
This cognitive dependency affects the PIF for scenario familiarity, which addresses the mental model. Scenario familiarity is applicable when there is something wrong with the mental model and there is no diverse method available to correct the wrong mental model.
Low: Pd = 5E-2
Parts of scenario become unfamiliar (e.g., different from what was trained on), OR
HFE1 creates a biased mental model or preference for wrong strategies.
Medium: Pd = 1E-1
Parts of scenario become unfamiliar (e.g., different from what was trained on), AND
HFE1 creates a biased mental model or preference for wrong strategies.
High: Pd = 3E-1
HFE1 creates a mismatched or wrong mental model for HFE2 due to close cognitive links between HFE1 and HFE2 (e.g., thought process).
10
Screening Dependency Impact Calculate the screening dependent HEP of HFE2 by taking the probabilistic sum of the individual HEP of HFE2 (P2) and each of the undiscounted dependency impact values (Pd), as follows:
Dependent HEP of HFE2 = 1 1 1
= 1 1 1 1 NOTE: When the dependency impact values are small, the screening dependent HEP can be approximated by summing the dependency impact values and the individual HEP of HFE2. This approximation should not be used when any High dependency impact values are applicable.
11
Potential Dependency Factors HFE Relationship Potential Dependency Factors Dependency Impact No Impact Low Medium High R1 Functions or systems R1.1 Same functions or systems leads to cognitive dependency 0.0 5E-2 1E-1 3E-1 R1.2 Same functions or systems leads to consequential dependency 0.0 1E-2 5E-2 2E-1 R1.3 Same functions or systems leads to resource-sharing dependency 0.0 2E-3 1E-2 5E-2 R2 Time proximity R2.1 Close time proximity in performing HFE1 and HFE2 leads to consequential dependency Varies depending on the ratio of time available to time required (Ta/Tr) for performing HFE2
> 4 0.0 3 and 4 1E-3 2 and < 3 1E-2 1 and < 2 1E-1 R2.2 Close time proximity in receiving the cues for HFE1 and HFE2 leads to consequential dependency 0.0 5E-3 5E-2 1E-1 R3 Personnel R3.1 Same personnel leads to cognitive dependency 0.0 5E-2 1E-1 3E-1 R3.2 Same personnel leads to consequential dependency 0.0 2E-3 1E-2 3E-2 R3.3 Same personnel leads to resource-sharing dependency 0.0 2E-3 1E-2 5E-2 R4 Location R4.1 Same location leads to consequential dependency 0.0 2E-3 5E-3 2E-2 R4.2 Same location and time leads to consequential dependency 0.0 2E-3 5E-3 7E-3 R5 Procedure R5.1 Same procedure leads to cognitive dependency 0.0 5E-3 5E-2 3.5E-1 12
Detailed Analysis Potential Dependency Factors Basis for Discounting the Potential Dependency Factor Dependency Impact R1.1 Same functions or systems leads to cognitive dependency A.
Occurrence of HFE1 leads to the scenario or parts of the scenario being different from what was typically trained; thus, the scenario associated with HFE2 becomes less familiar. (Note: Occurrence of HFE1 alters the scenario for HFE2; thus, HFE1 causes some level of unfamiliarity with HFE2)
B.
Occurrence of HFE1 leads to an incorrect or biased mental model of the situation associated with HFE2.
A - HFE2 was trained in the scenarios that HFE1 occurs (e.g., Feed & Bleed is the last action after others fail) so there is no unfamiliarity due to HFE1.
B - HFE2 is well trained on in various scenarios such that personnel are unlikely to develop a wrong mental model due to occurrence of HFE1.
A/B - There is no cognitive link (similar thought process) between the two HFEs; thus, occurrence of HFE1 has no impact on scenario familiarity or mental model associated with HFE2.
B - There are opportunities between the HFEs to break the incorrect mental model, such as multiple crews or diverse cues.
Potentially affected CFMs:
All CFMs Potentially impacted PIFs:
SF - Scenario Familiarity PIF attributes that are most likely impacted by the dependency factor:
SF1 - Unpredictable dynamics in known scenarios
SF2 - Unfamiliar elements in the scenario
SF3 - Scenarios trained on but infrequently performed
SF4 - Bias or preference for wrong strategies exists, mismatched mental models 13
Conclusion
- IDHEAS-DEP leverages the IDHEAS-ECA quantification method to develop screening dependency values that can be applied to HEPs for HFEs modeled using any HRA method.
- Both the screening analysis and detailed analysis provide a dependent HEP for HFE2 and identify the dependency relationships, dependency factors, and PIFs impacted by the occurrence of HFE1
- In general, the dependent HEPs calculated using IDHEAS-DEP are lower than those calculated using THERP.
- In some cases, the independent HEP may already account for the dependency impacts (such as for feed and bleed or initiating high pressure recirculation).
14
Questions?
15
- CFM - Cognitive Failure Mode
- EPRI - Electric Power Research Institute
- HEP - Human Error Probability
- HFE - Human Failure Event
- HRA - Human Reliability Analysis
- IDHEAS - Integrated Human Event Analysis System
- IDHEAS-DEP - IDHEAS Dependency Analysis
- IDHEAS-ECA - IDHEAS for Event and Condition Assessment
- IDHEAS-G - IDHEAS General Methodology
- NRC - Nuclear Regulatory Commission
- NRR - Office of Nuclear Reactor Regulation
- PIF - Performance Influencing Factor
- PRA - Probabilistic Risk Analysis
- RES - Office of Nuclear Regulatory Research
- WG - Working Group 16
References 1.
U.S. Nuclear Regulatory Commission, NUREG-2198, The General Methodology of an Integrated Human Event Analysis System (IDHEAS-G), May 2021, ADAMS Accession No. ML21127A272.
2.
U.S. Nuclear Regulatory Commission, Research Information Letter 2020-02, Integrated Human Event Analysis System for Event and Condition Assessment (IDHEAS-ECA), February 2020, ADAMS Accession No. ML20016A481.
3.
U.S. Nuclear Regulatory Commission, Research Information Letter 2021-14, Integrated Human Event Analysis System Dependency Analysis Guidance (IDHEAS-DEP), November 2021, ADAMS Accession No. ML21316A107.
17