ML18320A189: Difference between revisions

From kanterella
Jump to navigation Jump to search
StriderTol Bot insert
 
StriderTol Bot change
 
Line 2: Line 2:
| number = ML18320A189
| number = ML18320A189
| issue date = 11/16/2018
| issue date = 11/16/2018
| title = Nuscale Power, LLC Submittal of Changes to Final Safety Analysis Report, Tier 1 Section 2.5, Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design ...
| title = Nuscale Power, LLC Submittal of Changes to Final Safety Analysis Report, Tier 1 Section 2.5, Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design .
| author name = Rad Z
| author name = Rad Z
| author affiliation = NuScale Power, LLC
| author affiliation = NuScale Power, LLC
Line 16: Line 16:


=Text=
=Text=
{{#Wiki_filter:L0-1118-62962 November 16, 2018                                                                                           Docket No. 52-048 U.S. Nuclear Regulatory Commission ATTN: Document Control Desk One White Flint North 11555 Rockville Pike Rockville, MD 20852-2738
{{#Wiki_filter:November 16, 2018 U.S. Nuclear Regulatory Commission ATTN: Document Control Desk One White Flint North 11555 Rockville Pike Rockville, MD 20852-2738 L0-1118-62962 Docket No. 52-048


==SUBJECT:==
==SUBJECT:==
NuScale Power, LLC Submittal of Changes to Final Safety Analysis Report, Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System ,"
NuScale Power, LLC Submittal of Changes to Final Safety Analysis Report, Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System,"
Tier 2 Sections 14.2, "Initial Plant Test Program ," and 14.3, "Certified Design Material and Inspections, Tests , Analyses , and Acceptance Criteria"
Tier 2 Sections 14.2, "Initial Plant Test Program," and 14.3, "Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria"  


==REFERENCES:==
==REFERENCES:==
Letter from NuScale Power, LLC to Nuclear Regulatory Commission , "NuScale Power, LLC Submittal of the Nu Scale Standard Plant Design Certification Application , Revision 1," dated March 15, 2018 (ML18086A090)
Letter from NuScale Power, LLC to Nuclear Regulatory Commission, "NuScale Power, LLC Submittal of the Nu Scale Standard Plant Design Certification Application, Revision 1," dated March 15, 2018 (ML18086A090)
During an October 24 , 2018 Public meeting to discuss the NRC Staffs review of NuScale's Initial Test Program , NuScale Power, LLC (NuScale) discussed potential updates to Final Safety Analysis Report (FSAR), Tier 2 Section 14.2. As a result of this discussion , NuScale changed Tier 1 Section 2.5 and Tier 2 Sections 14.2 and 14.3. The Enclosure to this letter provides a mark-up of the FSAR pages incorporating revisions to Tier 1 Section 2.5 and Tier 2 Sections 14.2 and 14.3, in redline/strikeout format. Nu Scale will include this change as part of a future revision to the NuScale Design Certification Application.
During an October 24, 2018 Public meeting to discuss the NRC Staffs review of NuScale's Initial Test Program, NuScale Power, LLC (NuScale) discussed potential updates to Final Safety Analysis Report (FSAR), Tier 2 Section 14.2. As a result of this discussion, NuScale changed Tier 1 Section 2.5 and Tier 2 Sections 14.2 and 14.3. The Enclosure to this letter provides a mark-up of the FSAR pages incorporating revisions to Tier 1 Section 2.5 and Tier 2 Sections 14.2 and 14.3, in redline/strikeout format. Nu Scale will include this change as part of a future revision to the NuScale Design Certification Application.
This letter makes no regulatory commitments or revisions to any existing regulatory commitments.
This letter makes no regulatory commitments or revisions to any existing regulatory commitments.
If you have any questions , please feel free to contact Carrie Fosaaen at 541-452-7126 or at cfosaaen@nuscalepower.com.
If you have any questions, please feel free to contact Carrie Fosaaen at 541-452-7126 or at cfosaaen@nuscalepower.com.
Sincerely, Zackary W. Rad Director, Regulatory Affairs NuScale Power, LLC Distribution: Samuel Lee , NRC , OWFN-8G9A Gregory Cranston , NRC , OWFN-8G9A Cayetano Santos , NRC , OWFN-8G9A NuScale Power, LLC 1100 NE Circle Blvd , Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com
Sincerely, Zackary W. Rad Director, Regulatory Affairs NuScale Power, LLC Distribution: Samuel Lee, NRC, OWFN-8G9A Gregory Cranston, NRC, OWFN-8G9A Cayetano Santos, NRC, OWFN-8G9A NuScale Power, LLC 1100 NE Circle Blvd, Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com  


LO-1118-62962 Page 2 of 2 11/15/18
LO-1118-62962 Page 2 of 2 11/15/18 NuScale Power, LLC 1100 NE Circle Blvd., Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com


==Enclosure:==
==Enclosure:==
Changes to NuScale Final Safety Analysis Report Sections Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria NuScale Power, LLC 1100 NE Circle Blvd., Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com
Changes to NuScale Final Safety Analysis Report Sections Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria  


LO-1118-62962
LO-1118-62962 NuScale Power, LLC 1100 NE Circle Blvd., Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com


==Enclosure:==
==Enclosure:==
Changes to NuScale Final Safety Analysis Report Sections Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria


Changes to NuScale Final Safety Analysis Report Sections Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria NuScale Power, LLC 1100 NE Circle Blvd., Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com
NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-15 Draft Revision 3 xiii. An analysis will be performed of the output documentation of the System Testing Phase.
xiii. The output documentation of the MPS Testing Phase satisfies the requirements of the System Testing Phase.
xiv. An analysis will be performed of the output documentation of the System Installation Phase.
xiv. The output documentation of the MPS Installation Phase satisfies the requirements of the System Installation Phase.
2.
Protective measures are provided to restrict modifications to the MPS tunable parametersNot used.
A test will be performed on the access control features associated with MPS tunable parametersNot used.
Protective measures restrict modification to the MPS tunable parameters without proper configuration and authorizationNot used.
3.
Physical separation exists between the redundant separation groups and divisions of the MPS Class 1E instrumentation and control current-carrying circuits, and between Class 1E instrumentation and control current-carrying circuits and non-Class 1E instrumentation and control current-carrying circuits.
An inspection will be performed of the MPS Class 1E as-built instrumentation and control current-carrying circuits.
i.
Physical separation between redundant separation groups and divisions of MPS Class 1E instrumentation and control current-carrying circuits is provided by a minimum separation distance, or by barriers (where the minimum separation distances cannot be maintained), or by a combination of separation distance and barriers.
ii.
Physical separation between MPS Class 1E instrumentation and control current-carrying circuits and non-Class 1E instrumentation and control current-carrying circuits is provided by a minimum separation distance, or by barriers (where the minimum separation distances cannot be maintained), or by a combination of separation distance and barriers.
4.
Electrical isolation exists between the redundant separation groups and divisions of the MPS Class 1E instrumentation and control circuits, and between Class 1E instrumentation and control circuits and non-Class 1E instrumentation and control circuits to prevent the propagation of credible electrical faults.
An inspection will be performed of the MPS Class 1E as-built instrumentation and control circuits.
i.
Class 1E electrical isolation devices are installed between redundant separation groups and divisions of MPS Class 1E instrumentation and control circuits.
ii.
Class 1E electrical isolation devices are installed between MPS Class 1E instrumentation and control circuits and non-Class 1E instrumentation and control circuits.
5.
Electrical isolation exists between the EDSS-MS subsystem non-Class 1E circuits and connected MPS Class 1E circuits to prevent the propagation of credible electrical faults.
i.
A type test, analysis, or a combination of type test and analysis will be performed of the Class 1E isolation devices.
i.
The Class 1E circuit does not degrade below defined acceptable operating levels when the non-Class 1E side of the isolation device is subjected to the maximum credible voltage, current transients, shorts, grounds, or open circuits.
ii.
An inspection will be performed of the MPS Class 1E as-built circuits.
ii.
Class 1E electrical isolation devices are installed between the EDSS-MS Subsystem non-Class 1E circuits and connected MPS Class 1E circuits.
Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
No.
Design Commitment Inspections, Tests, Analyses Acceptance Criteria


NuScale Tier 1                                               Module Protection System and Safety Display and Indication System Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-16 Draft Revision 3 6.
No.          Design Commitment                    Inspections, Tests, Analyses                  Acceptance Criteria xiii. An analysis will be performed of xiii. The output documentation of the the output documentation of the        MPS Testing Phase satisfies the System Testing Phase.                  requirements of the System Testing Phase.
Communications independence exists between redundant separation groups and divisions of the Class 1E MPSNot used.
xiv. An analysis will be performed of xiv. The output documentation of the the output documentation of the        MPS Installation Phase satisfies the System Installation Phase.            requirements of the System Installation Phase.
A test will be performed of the Class 1E MPSNot used.
: 2. Protective measures are provided to    A test will be performed on the access Protective measures restrict modification restrict modifications to the MPS      control features associated with MPS to the MPS tunable parameters without tunable parametersNot used.            tunable parametersNot used.            proper configuration and authorizationNot used.
Communications independence between redundant separation groups and divisions of the Class 1E MPS is providedNot used.
: 3. Physical separation exists between    An inspection will be performed of      i. Physical separation between the redundant separation groups        the MPS Class 1E as-built                    redundant separation groups and and divisions of the MPS Class 1E     instrumentation and control current-        divisions of MPS Class 1E instrumentation and control            carrying circuits.                           instrumentation and control current-current-carrying circuits, and                                                      carrying circuits is provided by a between Class 1E instrumentation                                                    minimum separation distance, or by and control current-carrying circuits                                              barriers (where the minimum and non-Class 1E instrumentation                                                    separation distances cannot be and control current-carrying circuits.                                              maintained), or by a combination of separation distance and barriers.
7.
ii. Physical separation between MPS Class 1E instrumentation and control current-carrying circuits and non-Class 1E instrumentation and control current-carrying circuits is provided by a minimum separation distance, or by barriers (where the minimum separation distances cannot be maintained), or by a combination of separation distance and barriers.
Communications independence exists between the Class 1E MPS and non-Class 1E digital systems.
: 4. Electrical isolation exists between    An inspection will be performed of     i. Class 1E electrical isolation devices the redundant separation groups        the MPS Class 1E as-built                    are installed between redundant and divisions of the MPS Class 1E      instrumentation and control circuits.       separation groups and divisions of instrumentation and control circuits,                                              MPS Class 1E instrumentation and and between Class 1E                                                                control circuits.
A test will be performed of the Class 1E MPS.
instrumentation and control circuits                                          ii. Class 1E electrical isolation devices and non-Class 1E instrumentation                                                    are installed between MPS Class 1E and control circuits to prevent the                                                 instrumentation and control circuits propagation of credible electrical                                                  and non-Class 1E instrumentation faults.                                                                             and control circuits.
Communications independence between the Class 1E MPS and non-Class 1E digital systems is provided.
: 5. Electrical isolation exists between    i. A type test, analysis, or a         i. The Class 1E circuit does not degrade the EDSS-MS subsystem non-Class              combination of type test and          below defined acceptable operating 1E circuits and connected MPS Class          analysis will be performed of the     levels when the non-Class 1E side of 1E circuits to prevent the                   Class 1E isolation devices.           the isolation device is subjected to propagation of credible electrical                                                 the maximum credible voltage, faults.                                                                             current transients, shorts, grounds, or open circuits.
8.
ii. An inspection will be performed ii. Class 1E electrical isolation devices of the MPS Class 1E as-built          are installed between the EDSS-MS circuits.                             Subsystem non-Class 1E circuits and connected MPS Class 1E circuits.
The MPS automatically initiates a reactor trip signalNot used.
Tier 1                                                          2.5-15                                            Draft Revision 3
A test will be performed of the MPSNot used.
A reactor trip signal is automatically initiated for each reactor trip function listed in Table 2.5-1Not used.
9.
The MPS automatically initiates an ESF actuation signalNot used.
A test will be performed of the MPSNot used.
An ESF actuation signal is automatically initiated for each ESF function listed in Table 2.5-2Not used.
10.
The MPS automatically actuates a reactor trip.Not used.
A test will be performed of the MPS.Not used.
The RTBs open upon an injection of a single simulated MPS reactor trip signal.Not used.
11.
The MPS automatically actuates the engineered safety feature equipment.Not used.
A test will be performed of the MPS.Not used.
The ESF equipment automatically actuates to perform its safety-related function listed in Table 2.5-2 upon an injection of a single simulated MPS signal.Not used.
12.
The MPS manually actuates a reactor trip.Not used.
A test will be performed of the MPS.Not used.
The RTBs open when a reactor trip is manually initiated from the main control room.Not used.
13.
The MPS manually actuates the ESF equipment.
A test will be performed of the MPS.
The MPS actuates the ESF equipment to perform its safety-related function listed in Table 2.5-3Table 2.5-2 when manually initiated.
14.
The reactor trip logic fails to a safe state such that loss of electrical power to a MPS separation group results in a trip state for that separation group.Not used.
A test will be performed of the MPS.Not used.
Loss of electrical power in a separation group results in a trip state for that separation group.Not used.
15.
The ESFs logic fails to a safe state such that loss of electrical power to a MPS separation group results in a predefined safe state for that separation group.Not used.
A test will be performed of the MPS.Not used.
Loss of electrical power in a separation group results in an actuation state for that separation group.Not used.
Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
No.
Design Commitment Inspections, Tests, Analyses Acceptance Criteria


NuScale Tier 1                                             Module Protection System and Safety Display and Indication System Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-17 Draft Revision 3 16.
No.           Design Commitment                Inspections, Tests, Analyses                  Acceptance Criteria
An MPS signal once initiated (automatically or manually), results in an intended sequence of protective actions that continue until completion, and requires deliberate operator action in order to return the safety systems to normal.
: 6. Communications independence          A test will be performed of the Class Communications independence between exists between redundant              1E MPSNot used.                       redundant separation groups and separation groups and divisions of                                          divisions of the Class 1E MPS is the Class 1E MPSNot used.                                                   providedNot used.
A test will be performed of the MPS reactor trip and engineered safety features signals.
: 7. Communications independence          A test will be performed of the Class Communications independence between exists between the Class 1E MPS and  1E MPS.                               the Class 1E MPS and non-Class 1E digital non-Class 1E digital systems.                                               systems is provided.
i.
: 8. The MPS automatically initiates a    A test will be performed of the       A reactor trip signal is automatically reactor trip signalNot used.         MPSNot used.                          initiated for each reactor trip function listed in Table 2.5-1Not used.
Upon initiation of a real or simulated MPS reactor trip signal listed in Table 2.5-1, the RTBs open, and the RTBs do not automatically close when the MPS reactor trip signal clears.
: 9. The MPS automatically initiates an    A test will be performed of the       An ESF actuation signal is automatically ESF actuation signalNot used.         MPSNot used.                         initiated for each ESF function listed in Table 2.5-2Not used.
ii.
: 10. The MPS automatically actuates a        A test will be performed of the       The RTBs open upon an injection of a reactor trip.Not used.               MPS.Not used.                        single simulated MPS reactor trip signal.Not used.
Upon initiation of a real or simulated MPS engineered safety feature actuation signal listed in Table 2.5-2, the ESF equipment actuates to perform its safety-related function and continues to maintain its safety-related position and perform its safety-related function when the MPS engineered safety feature actuation signal clears.
: 11. The MPS automatically actuates the A test will be performed of the           The ESF equipment automatically engineered safety feature            MPS.Not used.                         actuates to perform its safety-related equipment.Not used.                                                        function listed in Table 2.5-2 upon an injection of a single simulated MPS signal.Not used.
17.
: 12. The MPS manually actuates a            A test will be performed of the       The RTBs open when a reactor trip is reactor trip.Not used.               MPS.Not used.                         manually initiated from the main control room.Not used.
The MPS response times from sensor output through equipment actuation for the reactor trip functions and ESF functions are less than or equal to the value required to satisfy the design basis safety analysis response time assumptions.
: 13. The MPS manually actuates the ESF A test will be performed of the MPS.        The MPS actuates the ESF equipment to equipment.                                                                  perform its safety-related function listed in Table 2.5-3Table 2.5-2 when manually initiated.
A test will be performed of the MPS.
: 14. The reactor trip logic fails to a safe  A test will be performed of the       Loss of electrical power in a separation state such that loss of electrical    MPS.Not used.                         group results in a trip state for that power to a MPS separation group                                            separation group.Not used.
The MPS reactor trip functions listed in Table 2.5-1 and ESFs functions listed in Table 2.5-2 have response times that are less than or equal to the design basis safety analysis response time assumptions.
results in a trip state for that separation group.Not used.
18.
: 15. The ESFs logic fails to a safe state    A test will be performed of the       Loss of electrical power in a separation such that loss of electrical power to MPS.Not used.                         group results in an actuation state for a MPS separation group results in a                                        that separation group.Not used.
The MPS interlocks function as required when associated conditions are met.Not used.
predefined safe state for that separation group.Not used.
A test will be performed of the MPS.Not used.
Tier 1                                                      2.5-16                                          Draft Revision 3
The MPS interlocks listed in Table 2.5-4 automatically establish an operating bypass for the specified reactor trip of ESF actuations when the interlock condition is met. The operating bypass is automatically removed when the interlock condition is no longer satisfied.Not used.
19.
The MPS permissives function as required when associated conditions are met.Not used.
A test will be performed of the MPS.Not used.
The MPS permissives listed in Table 2.5-4 allows the manual bypass of the specified reactor trip or ESF actuations when the permissive condition is met. The operating bypass is automatically removed when the permissive condition is no longer satisfied.Not used.
20.
The MPS overrides function as required when associated conditions are met.Not used.
A test will be performed of the MPS.Not used.
The MPS overrides listed in Table 2.5-4 are established when the manual override switch is active and RT-1 interlock is established. The Override switch must be manually taken out of Override when the Override, O-1, is no longer needed.Not used.
21.
The MPS is capable of performing its safety-related functions when one of its protection channels is placed in maintenance bypass.Not used.
A test will be performed of the MPS.Not used.
With a safety function module out of service switch activated, the safety function is placed in trip or bypass based on the position of the safety function module trip/bypass switch.Not used.
22.
MPS operational bypasses are indicated in the MCR.
A test will be performed of the MPS.
Each operational MPS manual or automatic bypass is indicated in the MCR.
23.
MPS maintenance bypasses are indicated in the MCR.
A test will be performed of the MPS.
Each maintenance bypass is indicated in the MCR.
Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
No.
Design Commitment Inspections, Tests, Analyses Acceptance Criteria


NuScale Tier 1                                           Module Protection System and Safety Display and Indication System Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-18 Draft Revision 3 24.
No.            Design Commitment              Inspections, Tests, Analyses                  Acceptance Criteria
The MPS self-test features detect faults in the system and provide an alarm in the main control room.
: 16. An MPS signal once initiated          A test will be performed of the MPS  i. Upon initiation of a real or simulated (automatically or manually), results reactor trip and engineered safety        MPS reactor trip signal listed in in an intended sequence of          features signals.                        Table 2.5-1, the RTBs open, and the protective actions that continue                                              RTBs do not automatically close when until completion, and requires                                                the MPS reactor trip signal clears.
A test will be performed of the MPS.
deliberate operator action in order                                        ii. Upon initiation of a real or simulated to return the safety systems to                                                MPS engineered safety feature normal.                                                                        actuation signal listed in Table 2.5-2, the ESF equipment actuates to perform its safety-related function and continues to maintain its safety-related position and perform its safety-related function when the MPS engineered safety feature actuation signal clears.
A report exists and concludes that:
: 17. The MPS response times from            A test will be performed of the MPS. The MPS reactor trip functions listed in sensor output through equipment                                            Table 2.5-1 and ESFs functions listed in actuation for the reactor trip                                            Table 2.5-2 have response times that are functions and ESF functions are less                                      less than or equal to the design basis than or equal to the value required                                        safety analysis response time to satisfy the design basis safety                                        assumptions.
* Self-testing features verify that faults requiring detection are detected.
analysis response time assumptions.
: 18. The MPS interlocks function as        A test will be performed of the      The MPS interlocks listed in Table 2.5-4 required when associated            MPS.Not used.                        automatically establish an operating conditions are met.Not used.                                              bypass for the specified reactor trip of ESF actuations when the interlock condition is met. The operating bypass is automatically removed when the interlock condition is no longer satisfied.Not used.
: 19. The MPS permissives function as        A test will be performed of the      The MPS permissives listed in Table 2.5-4 required when associated            MPS.Not used.                        allows the manual bypass of the specified conditions are met.Not used.                                              reactor trip or ESF actuations when the permissive condition is met. The operating bypass is automatically removed when the permissive condition is no longer satisfied.Not used.
: 20. The MPS overrides function as          A test will be performed of the      The MPS overrides listed in Table 2.5-4 required when associated            MPS.Not used.                        are established when the manual conditions are met.Not used.                                              override switch is active and RT-1 interlock is established. The Override switch must be manually taken out of Override when the Override, O-1, is no longer needed.Not used.
: 21. The MPS is capable of performing its A test will be performed of the        With a safety function module out of safety-related functions when one MPS.Not used.                            service switch activated, the safety of its protection channels is placed                                      function is placed in trip or bypass based in maintenance bypass.Not used.                                            on the position of the safety function module trip/bypass switch.Not used.
: 22. MPS operational bypasses are          A test will be performed of the MPS. Each operational MPS manual or indicated in the MCR.                                                      automatic bypass is indicated in the MCR.
: 23. MPS maintenance bypasses are          A test will be performed of the MPS. Each maintenance bypass is indicated in indicated in the MCR.                                                      the MCR.
Tier 1                                                      2.5-17                                          Draft Revision 3
 
NuScale Tier 1                                            Module Protection System and Safety Display and Indication System Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
No.          Design Commitment                  Inspections, Tests, Analyses                    Acceptance Criteria
: 24. The MPS self-test features detect      A test will be performed of the MPS. A report exists and concludes that:
faults in the system and provide an
* Self-testing features verify that faults alarm in the main control room.                                                  requiring detection are detected.
* Self-testing features verify that upon detection, the system responds according to the type of fault.
* Self-testing features verify that upon detection, the system responds according to the type of fault.
* Self-testing features verify that faults are detected and responded within a sufficient timeframe to ensure safety function is not lost.
* Self-testing features verify that faults are detected and responded within a sufficient timeframe to ensure safety function is not lost.
* The presence and type of fault is indicated by the MPS alarms and displays.
* The presence and type of fault is indicated by the MPS alarms and displays.
: 25. The PAM Type B and Type C displays     An inspection will be performed for The PAM Type B and Type C displays are indicated on the SDIS displays in the ability to retrieve the as-built PAM listed in Table 2.5-5 are retrieved and the MCR.                              Type B and Type C displays on the        displayed on the SDIS displays in the SDIS displays in the MCR.                MCR.
25.
: 26. The controls located on the             A test will be performed of the         The IHAs controls provided on the operator workstations in the MCR     controls on the operator workstations operator workstations in the MCR operate to perform IHAs.              in the MCR.                              perform the functions listed in Table 2.5-6.
The PAM Type B and Type C displays are indicated on the SDIS displays in the MCR.
: 27. The RTBs are installed and arranged     An inspection will be performed of       The RTBs have the proper connections for in order to successfully accomplish  the as-built RTBs, including the         the shunt and undervoltage trip the reactor trip function under      connections for the shunt and           mechanisms and auxiliary contacts, and design conditions.Not used.          undervoltage trip mechanism and          are arranged as shown in Figure 2.5-2 to auxiliary contacts.Not used.            successfully accomplish the reactor trip function.Not used.
An inspection will be performed for the ability to retrieve the as-built PAM Type B and Type C displays on the SDIS displays in the MCR.
: 28. Two of the four separation groups       An inspection will be performed of      Separation groups A & C and Division I of and one of the two divisions of RTS   the as-built MPS.Not used.               RTS and ESFAS utilize a different and ESFAS will utilize a different                                            programmable technology from programmable technology.Not                                                    separation groups B & D and Division II of used.                                                                          RTS and ESFAS.Not used.
The PAM Type B and Type C displays listed in Table 2.5-5 are retrieved and displayed on the SDIS displays in the MCR.
: 29. The MCR isolation switches that         An inspection will be performed of      The MCR isolation switches are located in isolate the manual MCR switches       the location of the as-built MCR         the remote shutdown station.Not used.
26.
from MPS in case of a fire in the MCR isolation switches.Not used.
The controls located on the operator workstations in the MCR operate to perform IHAs.
are located in the remote shutdown station.Not used.
A test will be performed of the controls on the operator workstations in the MCR.
Tier 1                                                        2.5-18                                            Draft Revision 3
The IHAs controls provided on the operator workstations in the MCR perform the functions listed in Table 2.5-6.
27.
The RTBs are installed and arranged in order to successfully accomplish the reactor trip function under design conditions.Not used.
An inspection will be performed of the as-built RTBs, including the connections for the shunt and undervoltage trip mechanism and auxiliary contacts.Not used.
The RTBs have the proper connections for the shunt and undervoltage trip mechanisms and auxiliary contacts, and are arranged as shown in Figure 2.5-2 to successfully accomplish the reactor trip function.Not used.
28.
Two of the four separation groups and one of the two divisions of RTS and ESFAS will utilize a different programmable technology.Not used.
An inspection will be performed of the as-built MPS.Not used.
Separation groups A & C and Division I of RTS and ESFAS utilize a different programmable technology from separation groups B & D and Division II of RTS and ESFAS.Not used.
29.
The MCR isolation switches that isolate the manual MCR switches from MPS in case of a fire in the MCR are located in the remote shutdown station.Not used.
An inspection will be performed of the location of the as-built MCR isolation switches.Not used.
The MCR isolation switches are located in the remote shutdown station.Not used.
Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)
No.
Design Commitment Inspections, Tests, Analyses Acceptance Criteria


NuScale Final Safety Analysis Report                                                             Initial Plant Test Program Table 14.2-2: Pool Cleanup System Test # 2 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-23 Draft Revision 3 System Level Test #2-1 Test Objective Test Method Acceptance Criteria i.
System Level Test #2-1 Test Objective                           Test Method                             Acceptance Criteria
Verify the PCUS demineralizers are protected against high water temperatureVerify the SFPCS and the RPCS provide design flow rate to the UHS when aligned for PCUS water cleanup.
: i. Verify the PCUS demineralizers are   i. Place the SFPCS in service to flow   i. a. The MCR indication for SFPCS protected against high water            through a pool cleanup filter and a         pump flow satisfies the design temperatureVerify the SFPCS and the      demineralizer and return flow to the       flow rate specified in Table RPCS provide design flow rate to the    spent fuel pool.                            9.1.3-1a UHS when aligned for PCUS water      AND                                          b. The MCR indication for RPCS cleanup.                                Place the RPCS in service to flow          pump flow satisfies the design ii. Verify the SFPCS and the RPCS            through a different pool cleanup            flow rate specified in Table provide design flow rate to the UHS      filter and demineralizer and return        9.1.3-1b following a PCUS isolation.              flow to the reactor pool.            ii. a. SFPCS flow and RPCS flow to the ii. Simulate a high water temperature          pool cleanup filters and upstream of one of the pool cleanup        demineralizers stop.
ii.
filters.                                b. The SFPCS flow is bypassed to the spent fuel pool.
Verify the SFPCS and the RPCS provide design flow rate to the UHS following a PCUS isolation.
: c. The RPCS cooling flow is bypassed to the reactor pool.
i.
: d. The MCR indication for SFPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1a
Place the SFPCS in service to flow through a pool cleanup filter and a demineralizer and return flow to the spent fuel pool.
: e. The MCR indication for RPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1b Tier 2                                                    14.2-23                                        Draft Revision 3
AND Place the RPCS in service to flow through a different pool cleanup filter and demineralizer and return flow to the reactor pool.
ii.
Simulate a high water temperature upstream of one of the pool cleanup filters.
i.
a.
The MCR indication for SFPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1a b.
The MCR indication for RPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1b ii.
a.
SFPCS flow and RPCS flow to the pool cleanup filters and demineralizers stop.
b.
The SFPCS flow is bypassed to the spent fuel pool.
c.
The RPCS cooling flow is bypassed to the reactor pool.
d.
The MCR indication for SFPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1a e.
The MCR indication for RPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1b Table 14.2-2: Pool Cleanup System Test # 2 (Continued)


NuScale Final Safety Analysis Report                                                                           Initial Plant Test Program Table 14.2-4: Pool Surge Control System Test # 4 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-25 Draft Revision 3 Table 14.2-4: Pool Surge Control System Test # 4 Preoperational test is required to be performed once.
The pool surge control system (PSCS) is described in Section 9.1.3.2.4 and the function verified by this test is:
The pool surge control system (PSCS) is described in Section 9.1.3.2.4 and the function verified by this test is:
System Function                                 System Function Categorization               Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The PSCS supports the UHS by providing nonsafety-related                                     Test #4-1 surge control for UHS operations.
The PSCS supports the UHS by providing surge control for UHS operations.
The PSCS supports the UHS by providing nonsafety-related                                    Test #4-1 a reactor inspection dry dock makeup and drain capability.
nonsafety-related Test #4-1 The PSCS supports the UHS by providing a reactor inspection dry dock makeup and drain capability.
Prerequisites
nonsafety-related Test #4-1 Prerequisites i.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii. For system level test #4-1, the drydock gate can be open or closed.
ii.
Component Level Tests Test Objective                                 Test Method                                 Acceptance Criteria
For system level test #4-1, the drydock gate can be open or closed.
: i. Verify each PSCS remotely-operated Operate each valve from the MCR and                    MCR display and local, visual valve can be operated remotely.            local control panel (if design has local     observation indicate each valve fully valve control).                              opens and fully closes.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
ii. Verify each PSCS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.           observation indicate each valve fails to its safe position.
Verify each PSCS remotely-operated valve can be operated remotely.
iii. Verify each PSCS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-       observation indicate each valve fails to electrical power to its solenoid.          operated valve.                              its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iv. Verify each PSCS pump can be               Stop and start each pump from the MCR. MCR display and local, visual started and stopped remotely.                                                          observation indicate each pump starts and stops.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
: v. Verify the PSCS automatically               Initiate a real or simulated high radiation i. The PSCS tank inlet isolation valve is responds to mitigate a release of          signal in the PSCS tank vent line.                closed.
ii.
radioactivity.                                                                          ii. The PSCS tank outlet isolation valve is closed.
Verify each PSCS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each PSCS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each PSCS pump can be started and stopped remotely.
Stop and start each pump from the MCR. MCR display and local, visual observation indicate each pump starts and stops.
v.
Verify the PSCS automatically responds to mitigate a release of radioactivity.
Initiate a real or simulated high radiation signal in the PSCS tank vent line.
i.
The PSCS tank inlet isolation valve is closed.
ii.
The PSCS tank outlet isolation valve is closed.
[ITAAC 03.09.10]
[ITAAC 03.09.10]
vi. Verify a local grab sample can be           Place the system in service to allow flow A local grab sample is successfully obtained from a PSCS grab sample through the grab sampling device.                      obtained.
vi. Verify a local grab sample can be obtained from a PSCS grab sample device indicated on the PSC piping and instrumentation diagram.
device indicated on the PSC piping and instrumentation diagram.
Place the system in service to allow flow through the grab sampling device.
vii. Verify each PSCS instrument is             Initiate a single real or simulated         The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each PSCS                    MCS or PCS display, or is recorded by the (Test not required if the instrument transmitter.                                      applicable control system historian.
A local grab sample is successfully obtained.
calibration verified the MCS or PCS display.)
vii. Verify each PSCS instrument is available on an MCS or PCS display.
System Level Test #4-1 Test Objective                                 Test Method                                 Acceptance Criteria Verify PSCS automatic control for dry           Align the PSCS for fill and drain of the dry i. a. Pump is stopped and return line dock fill and drain.                           dock.                                                  to pool surge control tank Fill the dry dock to a level that allows               isolation valve is closed.
(Test not required if the instrument calibration verified the MCS or PCS display.)
operation of the reactor inspection dry           b. Pump is stopped and return line dock evacuation pump.                                 to PSCS tank isolation valve is
Initiate a single real or simulated instrument signal from each PSCS transmitter.
: i. Start a PSCS pump and simulate the                 closed.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
following PSCS conditions:                 c. PSCS tank main discharge line
System Level Test #4-1 Test Objective Test Method Acceptance Criteria Verify PSCS automatic control for dry dock fill and drain.
: a. Dry dock low level                           isolation valve is closed.
Align the PSCS for fill and drain of the dry dock.
: b. PSC tank high level
Fill the dry dock to a level that allows operation of the reactor inspection dry dock evacuation pump.
: c. High dry dock level Tier 2                                                            14.2-25                                              Draft Revision 3
i.
Start a PSCS pump and simulate the following PSCS conditions:
a.
Dry dock low level b.
PSC tank high level c.
High dry dock level i.
a.
Pump is stopped and return line to pool surge control tank isolation valve is closed.
b.
Pump is stopped and return line to PSCS tank isolation valve is closed.
c.
PSCS tank main discharge line isolation valve is closed.


NuScale Final Safety Analysis Report                                                           Initial Plant Test Program Table 14.2-5: Ultimate Heat Sink Test # 5 There are no preoperational tests for the UHS.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-26 Draft Revision 3 Table 14.2-5: Ultimate Heat Sink Test # 5 There are no preoperational tests for the UHS.
The UHS is described in Section 9.2.5. The only active functions for the UHS are to provide PAM Type D instrument signals to the safety display and indication system (SDIS). Refer to Table 14.2-66: Safety Display and Indication test
The UHS is described in Section 9.2.5. The only active functions for the UHS are to provide PAM Type D instrument signals to the safety display and indication system (SDIS). Refer to Table 14.2-66: Safety Display and Indication test  
#66 for testing of PAM Type D displays.
#66 for testing of PAM Type D displays.
System Function                         System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
NoneThe UHS supports the DHRS by         N/Asafety-related                       N/AReactor Trip from 100 Percent accepting the heat from the DHR heat                                              Power Test # 104 exchanger.
NoneThe UHS supports the DHRS by accepting the heat from the DHR heat exchanger.
Prerequisites:
N/Asafety-related N/AReactor Trip from 100 Percent Power Test # 104 Prerequisites:
N/A Component Level Tests None Tier 2                                                  14.2-26                                        Draft Revision 3
N/A Component Level Tests None


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-8: Chilled Water System Test # 8 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-30 Draft Revision 3 Table 14.2-8: Chilled Water System Test # 8 Preoperational test is required to be performed once.
The chilled water system (CHWS) is described in Section 9.2.8 and the function verified by this test is:
The chilled water system (CHWS) is described in Section 9.2.8 and the function verified by this test is:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The CHWS supports the following                 nonsafety-related                        Test #8-1 systems by providing cooling water:                                                       Test #8-2
The CHWS supports the following systems by providing cooling water:
* Reactor Building HVAC system (RBVS)
* Reactor Building HVAC system (RBVS)
* normal control room HVAC system (CRVS)
* normal control room HVAC system (CRVS)
* Radioactive Waste Building HVAC system (RWBVS)
* Radioactive Waste Building HVAC system (RWBVS)
* liquid radioactive waste system (LRWS)
* liquid radioactive waste system (LRWS)
* gaseous radioactive waste system (GRWS)
* gaseous radioactive waste system (GRWS) nonsafety-related Test #8-1 Test #8-2 Prerequisites i.
Prerequisites
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
ii. Verify a CHWS flow balance has been performed.
Verify a CHWS flow balance has been performed.
iii. Verify a pump curve test has been completed for the CHWS pumps.
iii. Verify a pump curve test has been completed for the CHWS pumps.
iv. Chiller performance has been verified by either an Air Conditioning, Heating, and Refrigeration Institute (AHRI) certification or a chiller performance capacity test witnessed at the factory with all test documentation provided.
iv. Chiller performance has been verified by either an Air Conditioning, Heating, and Refrigeration Institute (AHRI) certification or a chiller performance capacity test witnessed at the factory with all test documentation provided.
Component Level Tests Test Objective                                 Test Method                               Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each CHWS remotely-operated Operate each valve from the MCR and                 MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
Verify each CHWS remotely-operated valve can be operated remotely.
ii. Verify each CHWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iii. Verify each CHWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-     observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
iv. Verify the speed of each CHWS               Align the CHWS to provide a flow path to MCR display indicates the speed of each variable-speed pump can be                operate a selected pump.                 obtains both minimum and maximum manually controlled.                      Vary the CHWS pump speed from             pump speeds.
ii.
minimum to maximum from the MCR.         Audible and visible water hammer are not observed when the pump starts.
Verify each CHWS air-operated valve fails to its safe position on loss of air.
: v. Verify automatic operation of CHWS Align the CHWS to allow for chiller                 MCR display and local, visual pumps and CHWS chiller to protect operation. Place a pump in service.               observation indicate the following:
Place each valve in its non-safe position.
plant equipment.                          Initiate a simulated start signal for the i. a. Operating pump stops following system conditions.                   b. Operating chiller stops
Isolate and vent air to the valve.
: i. Loss of chilled water flow.           ii. Operating chiller stops ii. Loss of SCWS cooling flow to the operating chiller.
MCR display and local, visual observation indicate each valve fails to its safe position.
vi. Verify each CHWS instrument is             Initiate a single real or simulated       The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each CHWS                MCS or PCS display, or is recorded by the (Test not required if the instrument      transmitter.                              applicable control system historian.
iii. Verify each CHWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
calibration verified the MCS or PCS display.)
Place each valve in its non-safe position.
Tier 2                                                            14.2-30                                          Draft Revision 3
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify the speed of each CHWS variable-speed pump can be manually controlled.
Align the CHWS to provide a flow path to operate a selected pump.
Vary the CHWS pump speed from minimum to maximum from the MCR.
MCR display indicates the speed of each obtains both minimum and maximum pump speeds.
Audible and visible water hammer are not observed when the pump starts.
v.
Verify automatic operation of CHWS pumps and CHWS chiller to protect plant equipment.
Align the CHWS to allow for chiller operation. Place a pump in service.
Initiate a simulated start signal for the following system conditions.
i.
Loss of chilled water flow.
ii.
Loss of SCWS cooling flow to the operating chiller.
MCR display and local, visual observation indicate the following:
i.
a.
Operating pump stops b.
Operating chiller stops ii.
Operating chiller stops vi. Verify each CHWS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each CHWS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.


NuScale Final Safety Analysis Report                                                         Initial Plant Test Program Table 14.2-8: Chilled Water System Test # 8 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-31 Draft Revision 3 System Level Test #8-1 Test Objective Test Method Acceptance Criteria Verify CHWS cooling water flow rates satisfy design.
System Level Test #8-1 Test Objective                       Test Method                             Acceptance Criteria Verify CHWS cooling water flow rates i. Align the CHWS to provide flow to all The CHWS cooling flow to each heat satisfy design.                          heat exchangers cooled by the        exchanger under test meets the CHWSRVS chiller:                     minimum flow rate acceptance criteria RBVS air handling units             contained in the CHWS flow balance RBVS fan coil units                 report.
i.
CRVS air handling units CRVS fan coil units RWBVS air handling units RWBVS fan coil units LRW degasifier condenser GRWS gas coolers ii. Open all CHWS flow control valves.
Align the CHWS to provide flow to all heat exchangers cooled by the CHWSRVS chiller:
System Level Test #8-2 Test Objective                       Test Method                             Acceptance Criteria Verify CHWS cooling water flow rates i. Align the CHWS to provide flow to     The CRVS standby CHWS cooling flow to satisfy design flow.                    the CRVS air handling units and the  each heat exchanger meets the CRVS fan coil units cooled by the   minimum flow rate acceptance criteria CHWSRVS standby chiller.             contained in the CHWS flow balance ii. Open all CHWS flow control valves. report.
RBVS air handling units RBVS fan coil units CRVS air handling units CRVS fan coil units RWBVS air handling units RWBVS fan coil units LRW degasifier condenser GRWS gas coolers ii.
Tier 2                                              14.2-31                                          Draft Revision 3
Open all CHWS flow control valves.
The CHWS cooling flow to each heat exchanger under test meets the minimum flow rate acceptance criteria contained in the CHWS flow balance report.
System Level Test #8-2 Test Objective Test Method Acceptance Criteria Verify CHWS cooling water flow rates satisfy design flow.
i.
Align the CHWS to provide flow to the CRVS air handling units and the CRVS fan coil units cooled by the CHWSRVS standby chiller.
ii.
Open all CHWS flow control valves.
The CRVS standby CHWS cooling flow to each heat exchanger meets the minimum flow rate acceptance criteria contained in the CHWS flow balance report.
Table 14.2-8: Chilled Water System Test # 8 (Continued)


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-10: Circulating Water System Test # 10 This preoperational test is required to be performed once for each circulating water subsystem.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-34 Draft Revision 3 Table 14.2-10: Circulating Water System Test # 10 This preoperational test is required to be performed once for each circulating water subsystem.
The circulating water system (CWS) is described in Section 10.4.5 and the function verified by this test and power ascension testing is:
The circulating water system (CWS) is described in Section 10.4.5 and the function verified by this test and power ascension testing is:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The utility water system (UWS) supports nonsafety-related                               Component-Level Test vi.
The utility water system (UWS) supports the CWS by providing makeup water to maintain water level in the CWS cooling tower basins.
the CWS by providing makeup water to                                                    Ramp Change in Load Demand maintain water level in the CWS cooling                                                  Test #100 tower basins.
nonsafety-related Component-Level Test vi.
The CWS function verified by another test is:
Ramp Change in Load Demand Test #100 The CWS function verified by another test is:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The CWS supports the FWS by removing nonsafety-related                                   CAR Test #32-1 heat from the main condenser.                                                            Ramp Change in Load Demand Test #100 100 Percent Load Rejection Test #103 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The CWS supports the FWS by removing heat from the main condenser.
nonsafety-related CAR Test #32-1 Ramp Change in Load Demand Test #100 100 Percent Load Rejection Test #103 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Component Level Tests: NPM #1 (#7)
Component Level Tests: NPM #1 (#7)
The minimum inventory of pumps, fans and valves tested for NPM #1 (#7) is that inventory required for 6A (6B) CWS operation to support operation of NPM #1 (#7). The testing will continue until all 6A (6B) CWS equipment is tested.
The minimum inventory of pumps, fans and valves tested for NPM #1 (#7) is that inventory required for 6A (6B) CWS operation to support operation of NPM #1 (#7). The testing will continue until all 6A (6B) CWS equipment is tested.
Test Objective                                 Test Method                             Acceptance Criteria
Test Objective Test Method Acceptance Criteria i.
: i. Verify each CWS remotely-operated Operate each valve from the MCR and                MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
Verify each CWS remotely-operated valve can be operated remotely.
ii. Verify each CWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iii. Verify each CWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
iv. Verify each CWS cooling tower fan           Align the CWS to allow for cooling tower MCR display and local, visual can be started and stopped remotely fan operation.                                  observation indicate each cooling tower Stop and start each cooling tower fan    fan starts and stops.
ii.
from the MCR.
Verify each CWS air-operated valve fails to its safe position on loss of air.
: v. Verify each CWS pump can be started Align the CWS to allow for pump                   i. MCR display and local, visual and stopped remotely.                      operation.                                    observation indicate each pump Stop and start each pump from the MCR.        starts and stops.
Place each valve in its non-safe position.
ii. Audible and visible water hammer are not observed when the pump starts.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each CWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each CWS cooling tower fan can be started and stopped remotely Align the CWS to allow for cooling tower fan operation.
Stop and start each cooling tower fan from the MCR.
MCR display and local, visual observation indicate each cooling tower fan starts and stops.
v.
Verify each CWS pump can be started and stopped remotely.
Align the CWS to allow for pump operation.
Stop and start each pump from the MCR.
i.
MCR display and local, visual observation indicate each pump starts and stops.
ii.
Audible and visible water hammer are not observed when the pump starts.
iii. CWS pump cavitation is not observed.
iii. CWS pump cavitation is not observed.
iv. Cooling towers do not experience flow surge or overflow.
iv. Cooling towers do not experience flow surge or overflow.
vi. Verify automatic operation of the           i. Initiate a cooling tower basin low   MCR displays and local, visual CWS cooling tower basin level                  level signal.                        observation verifies the following:
vi. Verify automatic operation of the CWS cooling tower basin level control valve to maintain CWS cooling tower basin level.
control valve to maintain CWS              ii. Initiate a cooling tower basin high  i. The cooling tower basin level cooling tower basin level.                    level signal.                            control valve is open.
i.
ii. The cooling tower basin level control valve is closed.
Initiate a cooling tower basin low level signal.
Tier 2                                                            14.2-34                                          Draft Revision 3
ii.
Initiate a cooling tower basin high level signal.
MCR displays and local, visual observation verifies the following:
i.
The cooling tower basin level control valve is open.
ii.
The cooling tower basin level control valve is closed.  


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-11: Site Cooling Water System Test # 11 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-36 Draft Revision 3 Table 14.2-11: Site Cooling Water System Test # 11 Preoperational test is required to be performed for each NPM.
The site cooling water system (SCWS) is described in Section 9.2.7 and 11.5.2.2.13 and the functions verified by this test and power ascension testing are:
The site cooling water system (SCWS) is described in Section 9.2.7 and 11.5.2.2.13 and the functions verified by this test and power ascension testing are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The SCWS supports the following                 nonsafety-related                        Test #11-1 systems by providing cooling water.
The SCWS supports the following systems by providing cooling water.
* turbine generator system (TGS)
* turbine generator system (TGS)
* RCCWS
* RCCWS
Line 214: Line 401:
* RPCS
* RPCS
* FWS
* FWS
* balance-of-plant drain system (BPDS)
* balance-of-plant drain system (BPDS) nonsafety-related Test #11-1 The UWS supports the SCWS by providing makeup water to maintain water level in the SCWS cooling tower basins.
The UWS supports the SCWS by                   nonsafety-related                         Component-Level Test vii.
nonsafety-related Component-Level Test vii.
providing makeup water to maintain                                                        Ramp Change in Load Demand water level in the SCWS cooling tower                                                    Test #100 basins.
Ramp Change in Load Demand Test #100 Prerequisites i.
Prerequisites
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
ii. Verify an SCWS flow balance has been performed and the system flow balance records have been approved.
Verify an SCWS flow balance has been performed and the system flow balance records have been approved.
iii. Verify a pump curve test has been completed and approved for the SCWS pumps.
iii. Verify a pump curve test has been completed and approved for the SCWS pumps.
Component Level Tests Test Objective                                 Test Method                               Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each SCWS remotely-operated Operate each valve from the MCR and                 MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
Verify each SCWS remotely-operated valve can be operated remotely.
ii. Verify each SCWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iii. Verify each SCWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-     observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
iv. Verify each SCWS cooling tower fan Align the SCWS to allow for cooling               MCR display and local, visual can be started and stopped remotely. tower fan operation.                           observation indicate each cooling tower Stop and start each cooling tower fan    fan starts and stops.
ii.
from the MCR.
Verify each SCWS air-operated valve fails to its safe position on loss of air.
: v. Verify each SCWS pump can be                Align the SCWS to allow for pump         MCR display and local, visual started and stopped remotely.              operation.                                observation indicate each pump starts Stop and start each pump from the MCR. and stops.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each SCWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each SCWS cooling tower fan can be started and stopped remotely.
Align the SCWS to allow for cooling tower fan operation.
Stop and start each cooling tower fan from the MCR.
MCR display and local, visual observation indicate each cooling tower fan starts and stops.
v.
Verify each SCWS pump can be started and stopped remotely.
Align the SCWS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
vi. Verify the SCWS standby pump automatically starts to protect plant equipment.
Align the SCWS to allow for pump operation. Place a pump in service.
Initiate a simulated start signal for the following system conditions.
i.
Low pump header pressure signal.
ii.
Low pump header flow signal.
MCR display and local, visual observation indicate the standby pump discharge valve opens to a throttled position, the pump starts, and then the discharge valve fully opens.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
vi. Verify the SCWS standby pump                Align the SCWS to allow for pump          MCR display and local, visual automatically starts to protect plant operation. Place a pump in service.            observation indicate the standby pump equipment.                                Initiate a simulated start signal for the discharge valve opens to a throttled following system conditions.              position, the pump starts, and then the
: i. Low pump header pressure signal.      discharge valve fully opens.
ii. Low pump header flow signal.          Audible and visible water hammer are not observed when the pump starts.
Tier 2                                                            14.2-36                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-13: Utility Water System Test # 13 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-39 Draft Revision 3 Table 14.2-13: Utility Water System Test # 13 Preoperational test is required to be performed once.
The UWS is described in Section 9.2.9 and the functions verified by this test and power ascension testing are:
The UWS is described in Section 9.2.9 and the functions verified by this test and power ascension testing are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The UWS supports the circulating             nonsafety-related                       CWS Test #10 Component-Level Test vi.
1.
water system by providing makeup                                                    Ramp Change in Load Demand water to maintain water level in the                                               Test #100 CW system cooling tower basins.
The UWS supports the circulating water system by providing makeup water to maintain water level in the CW system cooling tower basins.
: 2. The UWS supports the SCWS by                nonsafety related                       SCWS Test #11 Component-Level Test providing makeup water to maintain                                                  vii.
nonsafety-related CWS Test #10 Component-Level Test vi.
water level in the SCWS cooling                                                    Ramp Change in Load Demand tower basins.                                                                      Test #100
Ramp Change in Load Demand Test #100 2.
: 3. The UWS supports the following               nonsafety-related                        component-level tests systems by providing makeup water:
The UWS supports the SCWS by providing makeup water to maintain water level in the SCWS cooling tower basins.
    -demineralized water system (DWS)
nonsafety related SCWS Test #11 Component-Level Test vii.
    -fire protection system (FPS)
Ramp Change in Load Demand Test #100 3.
    -PWS
The UWS supports the following systems by providing makeup water:
    -CHWS
-demineralized water system (DWS)
    -Reactor Building (RXB)
-fire protection system (FPS)
    -Turbine Generator Building (TGB)
-PWS
    -Radioactive Waste Building (RWB)
-CHWS
    -Annex Building (ANB)
-Reactor Building (RXB)
    -Control Building (CRB)
-Turbine Generator Building (TGB)
Prerequisites
-Radioactive Waste Building (RWB)
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
-Annex Building (ANB)
ii. Verify a pump curve test has been completed for the UWS pumps.
-Control Building (CRB) nonsafety-related component-level tests Prerequisites i.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: i. Verify each UWS remotely-operated Operate each valve from the MCR and                 MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
ii.
ii. Verify each UWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Verify a pump curve test has been completed for the UWS pumps.
iii. Verify each UWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
iv. Verify each UWS pump can be started Align the UWS to allow for pump                 MCR display and local, visual and stopped remotely.                      operation.                              observation indicate each pump starts Stop and start each pump from the MCR. and stops.
Verify each UWS remotely-operated valve can be operated remotely.
Operate each valve from the MCR and local control panel (if design has local valve control).
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each UWS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each UWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each UWS pump can be started and stopped remotely.
Align the UWS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
: v. Verify UWS flow capability by               Align the UWS to allow for pump          MCR display and local, visual automatic start of each UWS pump operation. Place a pump in service.               observation indicate the standby pump while in standby mode.                    Initiate a simulated pump trip.         starts.
v.
Verify UWS flow capability by automatic start of each UWS pump while in standby mode.
Align the UWS to allow for pump operation. Place a pump in service.
Initiate a simulated pump trip.
MCR display and local, visual observation indicate the standby pump starts.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
vi. Verify utility water system (UWS)           Align the UWS to allow for pump         MCR display and local, visual pumps automatically stops to protect operation. Place a pump in service.            observation indicate each pump stops.
vi. Verify utility water system (UWS) pumps automatically stops to protect plant equipment.
plant equipment.                          Initiate a simulated UWS storage tank low level signal.
Align the UWS to allow for pump operation. Place a pump in service.
Tier 2                                                            14.2-39                                          Draft Revision 3
Initiate a simulated UWS storage tank low level signal.
MCR display and local, visual observation indicate each pump stops.


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-14: Demineralized Water System Test # 14 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-41 Draft Revision 3 Table 14.2-14: Demineralized Water System Test # 14 Preoperational test is required to be performed once.
The DWS is described in Section 9.2.3 and 11.5.2.2.16 and the function verified by this test is:
The DWS is described in Section 9.2.3 and 11.5.2.2.16 and the function verified by this test is:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The DWS supports the following systems nonsafety-related                                component-level tests by providing coolingmakeup water.
The DWS supports the following systems by providing coolingmakeup water.
* CVCS
* CVCS
* boron addition system (BAS)
* boron addition system (BAS)
Line 291: Line 518:
* reactor building (RXB)
* reactor building (RXB)
* radioactive waste building (RWB)
* radioactive waste building (RWB)
* feedwater treatment system (FWTS)
* feedwater treatment system (FWTS) nonsafety-related component-level tests Prerequisites i.
Prerequisites
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
ii. Verify a pump curve test has been completed for the DWS pumps.
Verify a pump curve test has been completed for the DWS pumps.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each DWS remotely-operated Operate each valve from the MCR and                 MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control)                          opens and fully closes.
Verify each DWS remotely-operated valve can be operated remotely.
ii. Verify each DWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control)
iii. Verify each DWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
iv. Verify the DWS pump can be started Align the DWS to allow for pump                   MCR display and local, visual and stopped remotely.                      operation.                              observation indicate each pump starts Stop and start each pump from the MCR. and stops.
ii.
Verify each DWS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each DWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify the DWS pump can be started and stopped remotely.
Align the DWS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
: v. Verify DWS flow capability by               Align the DWS to allow for pump          MCR display and local, visual automatic start of each DWS pump operation. Place a pump in service.               observation indicate the standby pump while in standby mode.                    Initiate a simulated pump trip.         starts.
v.
Verify DWS flow capability by automatic start of each DWS pump while in standby mode.
Align the DWS to allow for pump operation. Place a pump in service.
Initiate a simulated pump trip.
MCR display and local, visual observation indicate the standby pump starts.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
Tier 2                                                            14.2-41                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-18: Control Room Habitability System Test # 18 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-47 Draft Revision 3 Table 14.2-18: Control Room Habitability System Test # 18 Preoperational test is required to be performed once.
The control room habitability system (CRHS) is described in Section 6.4 and the functions verified by this test are:
The control room habitability system (CRHS) is described in Section 6.4 and the functions verified by this test are:
System Function                               System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The CRHS supports the Control             nonsafety-related                        Test #18-1 Building (CRB) by providing clean                                                 Test #18-2 breathing air to the control room                                                 Test #18-3 envelope (CRE) and maintaining a positive control room pressure during high radiation or loss of offsite power conditions.
1.
: 2. The CRHS supports the CRB by               nonsafety-related                        Test #18-1 providing high pressure, clean                                                     Test #18-2 breathing air in air bottles for use.
The CRHS supports the Control Building (CRB) by providing clean breathing air to the control room envelope (CRE) and maintaining a positive control room pressure during high radiation or loss of offsite power conditions.
: 3. The CRVS supports the CRB by               nonsafety-related                        Test #18-1 providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.
nonsafety-related Test #18-1 Test #18-2 Test #18-3 2.
: 4. The plant protection system (PPS)         nonsafety-related                        Test #18-1 supports the CRHS by providing actuation and control signals.
The CRHS supports the CRB by providing high pressure, clean breathing air in air bottles for use.
: 5. The CRVS supports the CRB by               nonsafety-related                        Test #18-1 providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.
nonsafety-related Test #18-1 Test #18-2 3.
: 6. The CRVS supports the PPS by               nonsafety-related                        Test #18-1 providing instrument information signals relating to isolation of the CRE and activation of the CRH system.
The CRVS supports the CRB by providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.
: 7. The CRVS supports the CRB by               nonsafety-related                        Test #18-1 (radiation detection) isolating the CRVS outside air intake                                             CRVS Test #19-3 (smoke/toxic gas) when radiation is detected downstream of the charcoal filtration unit.from the environment and operating CRVS in recirculation mode to prevent exposure to smoke and toxic gas, or when radiation is detected downstream of the charcoal filtration unit.
nonsafety-related Test #18-1 4.
: 8. The PPS supports the CRVS by               nonsafety-related                        Test #18-1 providing actuation and control signals to the CRE isolation dampers.
The plant protection system (PPS) supports the CRHS by providing actuation and control signals.
Prerequisites
nonsafety-related Test #18-1 5.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The CRVS supports the CRB by providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.
ii. Verify a CRHS air balance has been performed and the CRHS air balance records have been approved. [This prerequisite is not required for component-level tests.]
nonsafety-related Test #18-1 6.
The CRVS supports the PPS by providing instrument information signals relating to isolation of the CRE and activation of the CRH system.
nonsafety-related Test #18-1 7.
The CRVS supports the CRB by isolating the CRVS outside air intake when radiation is detected downstream of the charcoal filtration unit.from the environment and operating CRVS in recirculation mode to prevent exposure to smoke and toxic gas, or when radiation is detected downstream of the charcoal filtration unit.
nonsafety-related Test #18-1 (radiation detection)
CRVS Test #19-3 (smoke/toxic gas) 8.
The PPS supports the CRVS by providing actuation and control signals to the CRE isolation dampers.
nonsafety-related Test #18-1 Prerequisites i.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
Verify a CRHS air balance has been performed and the CRHS air balance records have been approved. [This prerequisite is not required for component-level tests.]
iii. Verify CRHS air bottlers are pressurized to their design working pressure. [This prerequisite is not required for component-level tests.]
iii. Verify CRHS air bottlers are pressurized to their design working pressure. [This prerequisite is not required for component-level tests.]
iv. Component Level Tests i. and ii. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.
iv. Component Level Tests i. and ii. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.
Tier 2                                                        14.2-47                                            Draft Revision 3


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-18: Control Room Habitability System Test # 18 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-48 Draft Revision 3 Component Level Tests Test Objective Test Method Acceptance Criteria i.
Component Level Tests Test Objective                               Test Method                               Acceptance Criteria
Verify each CRHS remotely-operated valve can be operated remotely.
: i. Verify each CRHS remotely-operated Place the CRHS air bottles in service.             i. MCR workstation display, safety valve can be operated remotely.          Place CRVS in service to supply air to the     display instrument display and local, CRE.                                          visual observation indicate each Operate each valve from the MCR.              valve fully opens and fully closes under preoperational temperature, differential pressure, and flow conditions.
Place the CRHS air bottles in service.
Place CRVS in service to supply air to the CRE.
Operate each valve from the MCR.
i.
MCR workstation display, safety display instrument display and local, visual observation indicate each valve fully opens and fully closes under preoperational temperature, differential pressure, and flow conditions.
[ITAAC 03.01.02]
[ITAAC 03.01.02]
ii. Verify each CRHS solenoid-operated Place the CRHS air bottles in service.           i. MCR display, safety display valve fails to its safe position on loss Place CRVS in service to supply air to the     instrument display and local, visual of electrical power to its solenoid. CRE.                                           observation indicate each valve fails
ii.
: i. Place each valve in its non-safe           open under preoperational position. Isolate electrical power to     temperature, differential pressure, its solenoid.                            and flow conditions.
Verify each CRHS solenoid-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place the CRHS air bottles in service.
Place CRVS in service to supply air to the CRE.
i.
Place each valve in its non-safe position. Isolate electrical power to its solenoid.
i.
MCR display, safety display instrument display and local, visual observation indicate each valve fails open under preoperational temperature, differential pressure, and flow conditions.
[ITAAC 03.01.03]
[ITAAC 03.01.03]
iii. Verify each CRHS instrument is           Initiate a single real or simulated       The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each CRHS                MCS or PCS display, or is recorded by the (Test not required if the instrument    transmitter.                              applicable control system historian.
iii. Verify each CRHS instrument is available on an MCS or PCS display.
calibration verified the MCS or PCS display.)
(Test not required if the instrument calibration verified the MCS or PCS display.)
System Level Test #18-1 Test Objective                               Test Method                               Acceptance Criteria
Initiate a single real or simulated instrument signal from each CRHS transmitter.
: i. Verify PPS provides actuation signals Place the CRVS in automatic operation. i. MCR workstation display and local, for CRHS and CRVS.                       Place the CRHS air bottles in service.         visual observation indicate the ii. CRHS realigns to provide breathable Place CRVS in service to supply air to the          following:
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
air to the CRE under accident            CRE.                                           ia. The CRVS outside air damper conditions.                              Start CRVS filter unit.                              closes.
System Level Test #18-1 Test Objective Test Method Acceptance Criteria i.
iii. CRVS realigns to isolate outside air    Initiate each of the following real or         iib. The CRVS filter unit fan stops.
Verify PPS provides actuation signals for CRHS and CRVS.
dampers and CRE under accident          simulated CRHS actuation signals:             iiic. The CRVS control room conditions.
ii.
* High radiation signal downstream of               envelope isolation dampers Verify the CRHS and the CRVS                    the CRVS filter unit                               close.
CRHS realigns to provide breathable air to the CRE under accident conditions.
automatically respond to provide
iii. CRVS realigns to isolate outside air dampers and CRE under accident conditions.
* Loss of AC power.                           ivd. The CRHS air supply isolation breathable air to the CRE under accident                                                          valves open.
Verify the CRHS and the CRVS automatically respond to provide breathable air to the CRE under accident conditions.
conditions.                                                                                  ve. CRHS pressure relief isolation valves open.
Place the CRVS in automatic operation.
Place the CRHS air bottles in service.
Place CRVS in service to supply air to the CRE.
Start CRVS filter unit.
Initiate each of the following real or simulated CRHS actuation signals:
* High radiation signal downstream of the CRVS filter unit
* Loss of AC power.
i.
MCR workstation display and local, visual observation indicate the following:
ia. The CRVS outside air damper closes.
iib. The CRVS filter unit fan stops.
iiic. The CRVS control room envelope isolation dampers close.
ivd.The CRHS air supply isolation valves open.
ve. CRHS pressure relief isolation valves open.
vif. CRVS air handling unit stops.
vif. CRVS air handling unit stops.
viig. CRVSE general exhaust fan stops.
viig. CRVSE general exhaust fan stops.
viiih. CRVS battery room exhaust fan stops.
viiih. CRVS battery room exhaust fan stops.
[ITAAC 03.09.02]
[ITAAC 03.09.02]
(items i.a. through i.e.v)
(items i.a. through i.e.v) i.
: i. PPS generates alarms in the MCR for the following:
PPS generates alarms in the MCR for the following:
: a. High radiation
: a. High radiation
: b. Loss of AC power.
: b. Loss of AC power.
Tier 2                                                          14.2-48                                            Draft Revision 3
Table 14.2-18: Control Room Habitability System Test # 18 (Continued)


NuScale Final Safety Analysis Report                                                             Initial Plant Test Program Table 14.2-19: Normal Control Room HVAC System Test # 19 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-50 Draft Revision 3 Table 14.2-19: Normal Control Room HVAC System Test # 19 Preoperational test is required to be performed once.
The CRVS is described in Sections 6.4.3.2, 9.4.1, and 11.5.2.2.1, and the functions verified by this test are:
The CRVS is described in Sections 6.4.3.2, 9.4.1, and 11.5.2.2.1, and the functions verified by this test are:
System Function                           System Function Categorization         Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The CRVS supports the CRB by           nonsafety-related                      Test #19-1 providing cooling, heating and                                               Test #19-2 humidity control to maintain a suitable environment for the safety and comfort of plant personnel.
1.
: 2. The CRVS supports the systems          nonsafety-related                       Test #19-1 located in the CRB by providing                                               Test #19-2 cooling, heating and humidity control to maintain a suitable environment for the operation of system components.
The CRVS supports the CRB by providing cooling, heating and humidity control to maintain a suitable environment for the safety and comfort of plant personnel.
: 3. The CRVS supports the CRB by          nonsafety-related                       Test #19-1Test #19-3 (smoke/toxic gas) maintaining the CRB at a positive                                             CRHS Test #18-1 (radiation) pressure with respect to adjacent areas during normal operation.The CRVS supports the CRB by isolating the CRVS outside air intake from the environment and operating the CRVS in recirculation mode to prevent exposure to smoke and toxic gas, or when radiation is detected downstream of the charcoal filtration unit.
nonsafety-related Test #19-1 Test #19-2 2.
: 4. The CRVS supports the CRB by          nonsafety-related                       Test #19-1 (CRB positive pressure) maintaining the CRB at a positive                                             RBVS Test #20-1 (RXB negative pressure) ambient pressure relative to the Reactor Building (RXB) and the outside atmosphere to control the ingress of potentially airborne radioactivity from the RXB or the outside atmosphere to the CRB.
The CRVS supports the systems located in the CRB by providing cooling, heating and humidity control to maintain a suitable environment for the operation of system components.
: 5. The PPS supports the CRVS by           nonsafety-related                      Test #19-3 providing actuation and control signals to the outside air isolation dampers.
nonsafety-related Test #19-1 Test #19-2 3.
: 6. The CRVS supports the CRB by           nonsafety-related                      Test #19-4 protecting personnel from exposure to radiation during a design basis accident, when power is available, by removing radioactive contamination from outside air via charcoal filtration, as required by radiation dose analyses.
The CRVS supports the CRB by maintaining the CRB at a positive pressure with respect to adjacent areas during normal operation.The CRVS supports the CRB by isolating the CRVS outside air intake from the environment and operating the CRVS in recirculation mode to prevent exposure to smoke and toxic gas, or when radiation is detected downstream of the charcoal filtration unit.
The CRVS functions verified by other tests are:
nonsafety-related Test #19-1Test #19-3 (smoke/toxic gas)
The CRVS supports the CRB by isolating nonsafety-related                          CRHS Test #18-1 the CRVS outside air intake when radiation is detected downstream of the charcoal filtration unit.
CRHS Test #18-1 (radiation) 4.
The CRVS supports the CRB by providing nonsafety-related                         CRHS Test #18-1 isolation of the CRE from the surrounding areas and outside environment via isolation dampers.
The CRVS supports the CRB by maintaining the CRB at a positive ambient pressure relative to the Reactor Building (RXB) and the outside atmosphere to control the ingress of potentially airborne radioactivity from the RXB or the outside atmosphere to the CRB.
Tier 2                                                    14.2-50                                        Draft Revision 3
nonsafety-related Test #19-1 (CRB positive pressure)
RBVS Test #20-1 (RXB negative pressure) 5.
The PPS supports the CRVS by providing actuation and control signals to the outside air isolation dampers.
nonsafety-related Test #19-3 6.
The CRVS supports the CRB by protecting personnel from exposure to radiation during a design basis accident, when power is available, by removing radioactive contamination from outside air via charcoal filtration, as required by radiation dose analyses.
nonsafety-related Test #19-4 The CRVS functions verified by other tests are:
The CRVS supports the CRB by isolating the CRVS outside air intake when radiation is detected downstream of the charcoal filtration unit.
nonsafety-related CRHS Test #18-1 The CRVS supports the CRB by providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.
nonsafety-related CRHS Test #18-1


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-19: Normal Control Room HVAC System Test # 19 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-51 Draft Revision 3 The CRVS supports the PPS by providing instrument information signals relating to isolation of the CRE and activation of the CRHS.
The CRVS supports the PPS by providing nonsafety-related                                  CRHS Test #18-1 instrument information signals relating to isolation of the CRE and activation of the CRHS.
nonsafety-related CRHS Test #18-1 Prerequisites i.
Prerequisites
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
ii. Verify a CRVS air balance has been performed and the CRVS air balance records have been approved. [This prerequisite is not required for component-level tests.]
Verify a CRVS air balance has been performed and the CRVS air balance records have been approved. [This prerequisite is not required for component-level tests.]
iii. Verify CRVS high-efficiency particulate air (HEPA) and charcoal adsorbers have been installed and tested and the test records have been approved. [This prerequisite is not required for component-level tests.]
iii. Verify CRVS high-efficiency particulate air (HEPA) and charcoal adsorbers have been installed and tested and the test records have been approved. [This prerequisite is not required for component-level tests.]
iv. Verify CRVS control room isolation dampers have been leak tested and the test records have been approved. [This prerequisite is not required for component-level tests.]
iv. Verify CRVS control room isolation dampers have been leak tested and the test records have been approved. [This prerequisite is not required for component-level tests.]
: v. Component Level Tests x. and xi. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.
v.
Component Level Tests Test Objective                               Test Method                                 Acceptance Criteria
Component Level Tests x. and xi. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.
: i. Verify each CRVS remotely-operated Operate each damper from the MCR and MCR display and local, visual damper can be operated remotely. local control panel (if design has local           observation indicate each damper fully damper control).                            opens and fully closes.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
ii. Verify each CRVS air-operated           Place each damper in its non-safe           MCR display and local, visual damper fails to its safe position on  position. Isolate and vent air to the       observation indicate each damper fails loss of air.                          damper.                                      to its safe position.
Verify each CRVS remotely-operated damper can be operated remotely.
iii. Verify each CRVS air-operated           Place each damper in its non-safe           MCR display and local, visual damper fails to its safe position on  position. Isolate electrical power to its   observation indicate each damper fails loss of electrical power to its        solenoid.                                    to its safe position.
Operate each damper from the MCR and local control panel (if design has local damper control).
solenoid.
MCR display and local, visual observation indicate each damper fully opens and fully closes.
iv. Verify CRVS dampers automatically Open each damper actuated by a smoke MCR display and local, visual close on associated smoke or fire      or fire signal. Initiate an alarm signal for observation indicate each damper signals.                               each damper.                                closes.
ii.
: v. Verify each required CRVS fan stops Initiate an alarm signal for each fan.             MCR display and local, visual on actuation of its associated fire or                                              observation indicate each fan stops.
Verify each CRVS air-operated damper fails to its safe position on loss of air.
smoke alarm.
Place each damper in its non-safe position. Isolate and vent air to the damper.
vi. Verify each CRVS pressurization fan Initiate an alarm signal for each fan.           MCR display and local, visual starts automatically on the actuation                                              observation indicate each pressurization of its associated fire or smoke alarm.                                              fan starts.
MCR display and local, visual observation indicate each damper fails to its safe position.
vii. Verify the fan speed of each CRVS       Vary the speed of each fan from the MCR MCR display indicates the speed of each variable-speed fan can be manually and local control panel (if design has           fan varies from minimum to maximum controlled.                            local fan control).                          speed.
iii. Verify each CRVS air-operated damper fails to its safe position on loss of electrical power to its solenoid.
viii. Verify the standby CRVS main supply Place an AHU in service. Place the              MCR display and local, visual air handling unit (AHU) starts         standby AHU in automatic control. Stop observation indicate the standby AHU automatically on the stop of the      the operating AHU.                          starts.
Place each damper in its non-safe position. Isolate electrical power to its solenoid.
operating CRVS main supply AHU.
MCR display and local, visual observation indicate each damper fails to its safe position.
ix. Verify each standby CRVS fan coil unit Place an FCU in service. Place the standby MCR display and local, visual (FCU) starts automatically on the stop FCU in automatic control. Stop the           observation indicate the standby FCU of the operating CRVS fan coil unit. operating FCU.                                starts.
iv. Verify CRVS dampers automatically close on associated smoke or fire signals.
: x. Verify each CRVS control room             Place each damper in its non-safe           Each CRVS control room envelope envelope isolation damper fails to its position. Isolate and vent air to the       isolation damper fails to its closed safe position on loss of air.          damper.                                      position on loss of air under preoperational temperature, differential pressure, and flow conditions while the CRV system is supplying flow to the CRE.
Open each damper actuated by a smoke or fire signal. Initiate an alarm signal for each damper.
MCR display and local, visual observation indicate each damper closes.
v.
Verify each required CRVS fan stops on actuation of its associated fire or smoke alarm.
Initiate an alarm signal for each fan.
MCR display and local, visual observation indicate each fan stops.
vi. Verify each CRVS pressurization fan starts automatically on the actuation of its associated fire or smoke alarm.
Initiate an alarm signal for each fan.
MCR display and local, visual observation indicate each pressurization fan starts.
vii. Verify the fan speed of each CRVS variable-speed fan can be manually controlled.
Vary the speed of each fan from the MCR and local control panel (if design has local fan control).
MCR display indicates the speed of each fan varies from minimum to maximum speed.
viii. Verify the standby CRVS main supply air handling unit (AHU) starts automatically on the stop of the operating CRVS main supply AHU.
Place an AHU in service. Place the standby AHU in automatic control. Stop the operating AHU.
MCR display and local, visual observation indicate the standby AHU starts.
ix. Verify each standby CRVS fan coil unit (FCU) starts automatically on the stop of the operating CRVS fan coil unit.
Place an FCU in service. Place the standby FCU in automatic control. Stop the operating FCU.
MCR display and local, visual observation indicate the standby FCU starts.
x.
Verify each CRVS control room envelope isolation damper fails to its safe position on loss of air.
Place each damper in its non-safe position. Isolate and vent air to the damper.
Each CRVS control room envelope isolation damper fails to its closed position on loss of air under preoperational temperature, differential pressure, and flow conditions while the CRV system is supplying flow to the CRE.
[ITAAC 03.02.01]
[ITAAC 03.02.01]
Tier 2                                                          14.2-51                                              Draft Revision 3
Table 14.2-19: Normal Control Room HVAC System Test # 19 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-19: Normal Control Room HVAC System Test # 19 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-53 Draft Revision 3 System Level Test #19-3 Test Objective Test Method Acceptance Criteria Verify the CRVS isolates makeup air when smoke or toxic gas is detected in the makeup air ductworkVerify PPS actuates CRVS outside air dampers when toxic gas or smoke is detected in the makeup air ductwork.
System Level Test #19-3 Test Objective                           Test Method                                 Acceptance Criteria Verify the CRVS isolates makeup air when Place the CRVS in automatic operation. Outside air dampers is closed to isolate smoke or toxic gas is detected in the   i. Initiate a simulated high smoke or       makeup air.
Place the CRVS in automatic operation.
makeup air ductworkVerify PPS actuates        toxic gas signal for the makeup air CRVS outside air dampers when toxic gas      ductwork upstream of the CRVS filter or smoke is detected in the makeup air       unit.
i.
ductwork.
Initiate a simulated high smoke or toxic gas signal for the makeup air ductwork upstream of the CRVS filter unit.
System Level Test #19-4 Test Objective                           Test Method                                 Acceptance Criteria Verify the CRVS automatically responds   Place the CRVS in automatic operation. i. Outside air is diverted through the to mitigate the consequences of high    Initiate a real or simulated high radiation    CRVS filter unit by closing the CRVS radiation in the outside air.            signal for the outside air ductwork            filter unit bypass dampers and upstream of the CRVS filter unit.              opening the CRVS filter unit isolation dampers.
Outside air dampers is closed to isolate makeup air.
ii. The CRVS filter unit fan starts.
System Level Test #19-4 Test Objective Test Method Acceptance Criteria Verify the CRVS automatically responds to mitigate the consequences of high radiation in the outside air.
Place the CRVS in automatic operation.
Initiate a real or simulated high radiation signal for the outside air ductwork upstream of the CRVS filter unit.
i.
Outside air is diverted through the CRVS filter unit by closing the CRVS filter unit bypass dampers and opening the CRVS filter unit isolation dampers.
ii.
The CRVS filter unit fan starts.
[ITAAC 03.09.01]
[ITAAC 03.09.01]
(items i. and ii.)
(items i. and ii.)
Tier 2                                                      14.2-53                                              Draft Revision 3
Table 14.2-19: Normal Control Room HVAC System Test # 19 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-20: Reactor Building HVAC System Test # 20 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-54 Draft Revision 3 Table 14.2-20: Reactor Building HVAC System Test # 20 Preoperational test is required to be performed once.
The RBVS is described in Section 9.4.2 and the functions verified by this test are:
The RBVS is described in Section 9.4.2 and the functions verified by this test are:
System Function                             System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The RBVS supports the RXB by             nonsafety-related                        Test #20-1 providing cooling, heating and                                                   Test #20-2 humidity control to maintain a                                                   Reactor Building Ventilation System suitable environment for the safety                                             Capability Test # 96 and comfort of plant personnel.
1.
: 2. The RBVS supports the systems            nonsafety-related                         Test #20-1 located in the RXB by providing                                                 Test #20-2 cooling, heating and humidity                                                   Reactor Building Ventilation System control to maintain a suitable                                                   Capability Test # 96 environment for the operation of system components.
The RBVS supports the RXB by providing cooling, heating and humidity control to maintain a suitable environment for the safety and comfort of plant personnel.
: 3. The RBVS supports the RXB by             nonsafety-related                        Test #20-1 maintaining the RXB at a negative                                               Test #20-3 ambient pressure relative to the outside atmosphere to control the movement of potentially airborne radioactivity from the RXB to the environment.
nonsafety-related Test #20-1 Test #20-2 Reactor Building Ventilation System Capability Test # 96 2.
: 4. The CRVS supports the CRB by             nonsafety-related                        Test #20-1 (RXB negative pressure) maintaining the CRB at a positive                                               CRVS Test #19-1 (CRB positive pressure) ambient pressure relative to the Reactor Building (RXB) and the outside atmosphere to control the ingress of potentially airborne radioactivity from the RXB or the outside atmosphere to the CRB.
The RBVS supports the systems located in the RXB by providing cooling, heating and humidity control to maintain a suitable environment for the operation of system components.
: 5. The RWBVS supports the RWB by            nonsafety-related                         Test #20-3 (off-normal RBVS exhaust maintaining the RWB at a negative                                               alignment) ambient pressure relative to the                                                 RWBVS Test #21-1 (normal RBVS exhaust outside atmosphere to control the                                               alignment) movement of potentially airborne radioactivity from the RWB to the environment.
nonsafety-related Test #20-1 Test #20-2 Reactor Building Ventilation System Capability Test # 96 3.
Prerequisites
The RBVS supports the RXB by maintaining the RXB at a negative ambient pressure relative to the outside atmosphere to control the movement of potentially airborne radioactivity from the RXB to the environment.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related Test #20-1 Test #20-3 4.
ii. Verify an RBVS air balance has been performed and the RBV system air balance records have been approved. [This prerequisite is not required for component-level tests.]
The CRVS supports the CRB by maintaining the CRB at a positive ambient pressure relative to the Reactor Building (RXB) and the outside atmosphere to control the ingress of potentially airborne radioactivity from the RXB or the outside atmosphere to the CRB.
nonsafety-related Test #20-1 (RXB negative pressure)
CRVS Test #19-1 (CRB positive pressure) 5.
The RWBVS supports the RWB by maintaining the RWB at a negative ambient pressure relative to the outside atmosphere to control the movement of potentially airborne radioactivity from the RWB to the environment.
nonsafety-related Test #20-3 (off-normal RBVS exhaust alignment)
RWBVS Test #21-1 (normal RBVS exhaust alignment)
Prerequisites i.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
Verify an RBVS air balance has been performed and the RBV system air balance records have been approved. [This prerequisite is not required for component-level tests.]
iii. RBVS high-efficiency particulate air and charcoal adsorbers have been installed and tested. [This prerequisite is not required for component-level tests.]
iii. RBVS high-efficiency particulate air and charcoal adsorbers have been installed and tested. [This prerequisite is not required for component-level tests.]
Component Level Tests Test Objective                             Test Method                               Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each RBVS remotely-operated Operate each damper from the MCR and MCR display and local, visual damper can be operated remotely. local control panel (if design has local       observation indicate each damper fully damper control).                          opens and fully closes.
Verify each RBVS remotely-operated damper can be operated remotely.
ii. Verify each RBVS air-operated           Place each damper in its non-safe         MCR display and local, visual damper fails to its safe position on  position. Isolate and vent air to the     observation indicate each damper fails loss of air.                          damper.                                  to its safe position.
Operate each damper from the MCR and local control panel (if design has local damper control).
Tier 2                                                        14.2-54                                            Draft Revision 3
MCR display and local, visual observation indicate each damper fully opens and fully closes.
ii.
Verify each RBVS air-operated damper fails to its safe position on loss of air.
Place each damper in its non-safe position. Isolate and vent air to the damper.
MCR display and local, visual observation indicate each damper fails to its safe position.  


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-23: Radioactive Waste Drain System Test # 23 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-61 Draft Revision 3 Table 14.2-23: Radioactive Waste Drain System Test # 23 Preoperational test is required to be performed once.
The RWDS is described in Section 9.3.3 and the functions verified by this test or another preoperational test are:
The RWDS is described in Section 9.3.3 and the functions verified by this test or another preoperational test are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The RWDS supports the RWB by                 nonsafety-related                        Test #23-1 collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.
1.
: 2. The RWDS supports the RXB by                 nonsafety-related                        Test #23-1 collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.
The RWDS supports the RWB by collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.
: 3. The RWDS supports the ANB by                 nonsafety-related                        Test #23-1 collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.
nonsafety-related Test #23-1 2.
: 4. The RWDS supports the UHS by                 nonsafety-related                        Test #23-2 providing detection and monitoring of leakage through the UHS liner and the dry dock liner.
The RWDS supports the RXB by collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.
: 5. The LRWS supports the RWDS by               nonsafety-related                        Test #23-1 receiving and processing the effluent                                               LRWS Test #35-2 from the RWB radioactive waste drain sumps.
nonsafety-related Test #23-1 3.
: 6. The LRWS supports the RWDS by                nonsafety-related                         Test #23-1 receiving and processing the effluent                                                LRWS Test #35-2 from the RXB radioactive waste drain sumps.
The RWDS supports the ANB by collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.
: 7. The LRWS supports the RWDS by                nonsafety-related                         Test #23-1 receiving and processing the effluent                                                LRWS Test #35-2 from the ANB radioactive waste drain sumps.
nonsafety-related Test #23-1 4.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The RWDS supports the UHS by providing detection and monitoring of leakage through the UHS liner and the dry dock liner.
Component Level Tests Test Objective                                 Test Method                               Acceptance Criteria
nonsafety-related Test #23-2 5.
: i. Verify each RWDS remotely-operated Operate each valve from the MCR and                 MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
The LRWS supports the RWDS by receiving and processing the effluent from the RWB radioactive waste drain sumps.
ii. Verify each RWDS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
nonsafety-related Test #23-1 LRWS Test #35-2 6.
iii. Verify each RWDS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-     observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
The LRWS supports the RWDS by receiving and processing the effluent from the RXB radioactive waste drain sumps.
iv. Verify each RWDS pump can be               Align the RWDS to allow for pump         MCR display and local, visual started and stopped remotely.              operation.                                observation indicate each pump starts Stop and start each pump from the MCR. and stops.
nonsafety-related Test #23-1 LRWS Test #35-2 7.
: v. Verify a local grab sample can be           Place the system in service to allow flow A local grab sample is successfully obtained from an RWDS grab sample through the grab sampling device.                  obtained.
The LRWS supports the RWDS by receiving and processing the effluent from the ANB radioactive waste drain sumps.
device indicated on the RWDS piping and instrumentation diagram.
nonsafety-related Test #23-1 LRWS Test #35-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Tier 2                                                            14.2-61                                          Draft Revision 3
Component Level Tests Test Objective Test Method Acceptance Criteria i.
Verify each RWDS remotely-operated valve can be operated remotely.
Operate each valve from the MCR and local control panel (if design has local valve control).
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each RWDS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each RWDS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each RWDS pump can be started and stopped remotely.
Align the RWDS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
v.
Verify a local grab sample can be obtained from an RWDS grab sample device indicated on the RWDS piping and instrumentation diagram.
Place the system in service to allow flow through the grab sampling device.
A local grab sample is successfully obtained.


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-23: Radioactive Waste Drain System Test # 23 (Continued) vi. Verify each RWDS instrument is         Initiate a single real or simulated         The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each RWDS            MCS or PCS display, or is recorded by the (Test not required if the instrument  transmitter.                                applicable control system historian.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-62 Draft Revision 3 vi. Verify each RWDS instrument is available on an MCS or PCS display.
calibration verified the MCS or PCS display.)
(Test not required if the instrument calibration verified the MCS or PCS display.)
System Level Test #23-1 Test Objective                             Test Method                                 Acceptance Criteria Verify RWDS pumps start and stop           Align each RWDS sump or tank to allow       MCR displays and local, visual automatically and transfer liquid waste    water in a selected sump or tank to be       observation verifies the following:
Initiate a single real or simulated instrument signal from each RWDS transmitter.
to its design location in the LRWS.        pumped to its design location in the         i. The first pump starts on HI level and LRWS (as indicated by the RWDS piping             transfers water to its design location and instrumentation diagrams).                    in the LRWS.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
: i. Fill the selected sump or tank until a   ii. The second (alternate) pump starts HI water level is obtained to start the     on HI-HI level.
System Level Test #23-1 Test Objective Test Method Acceptance Criteria Verify RWDS pumps start and stop automatically and transfer liquid waste to its design location in the LRWS.
first (primary) pump.                   iii. Both primary and alternate pumps ii. Continue filling the sump or tank             stop on LO level.
Align each RWDS sump or tank to allow water in a selected sump or tank to be pumped to its design location in the LRWS (as indicated by the RWDS piping and instrumentation diagrams).
until a HI-HI level starts the second   iv. The alternate pump starts on HI (alternate) pump.                            level.
i.
Fill the selected sump or tank until a HI water level is obtained to start the first (primary) pump.
ii.
Continue filling the sump or tank until a HI-HI level starts the second (alternate) pump.
iii. Stop filling the sump or tank to allow the primary and alternate pumps to stop on low level.
iii. Stop filling the sump or tank to allow the primary and alternate pumps to stop on low level.
iv. Refill the sump or tank until the alternate pump starts on HI level.
iv. Refill the sump or tank until the alternate pump starts on HI level.
System Level Test #23-2 Test Objective                             Test Method                                 Acceptance Criteria Verify each RWDS equipment drain sump Fill the selected sump at a rate that              PCS data indicates the sump fill rate alarms on a fill rate that exceeds the pool exceeds the PLDS leakage rate setpoint.     alarmed at the PLDS leakage rate leakage detection system (PLDS) leakage                                                  setpoint.
MCR displays and local, visual observation verifies the following:
rate setpoint.
i.
Tier 2                                                        14.2-62                                            Draft Revision 3
The first pump starts on HI level and transfers water to its design location in the LRWS.
ii.
The second (alternate) pump starts on HI-HI level.
iii. Both primary and alternate pumps stop on LO level.
iv. The alternate pump starts on HI level.
System Level Test #23-2 Test Objective Test Method Acceptance Criteria Verify each RWDS equipment drain sump alarms on a fill rate that exceeds the pool leakage detection system (PLDS) leakage rate setpoint.
Fill the selected sump at a rate that exceeds the PLDS leakage rate setpoint.
PCS data indicates the sump fill rate alarmed at the PLDS leakage rate setpoint.
Table 14.2-23: Radioactive Waste Drain System Test # 23 (Continued)


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program RAI 09.03.03-1S2, RAI 14.02-6, RAI 14.02-6S1 Table 14.2-24: Balance-of-Plant Drain System Test # 24 Preoperational test is required to be performed to support sequence of construction turnover of the BPDS system.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-63 Draft Revision 3 RAI 09.03.03-1S2, RAI 14.02-6, RAI 14.02-6S1 Table 14.2-24: Balance-of-Plant Drain System Test # 24 Preoperational test is required to be performed to support sequence of construction turnover of the BPDS system.
BPDS system is described in Section 9.3.3 and 11.5.2.2.15 and the functions verified by this test are:
BPDS system is described in Section 9.3.3 and 11.5.2.2.15 and the functions verified by this test are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The BPDS supports the condensate nonsafety-related                                    Test #24-1 polisher demineralizers, the three                                                 Test #24-7 cooling tower chemical addition systems, and the DWS reverse osmosis units by providing a means to collect and transfer chemical wastes to either the LRWS or to the UWS.
1.
: 2. The BPDS supports the two TGBs, the nonsafety-related                                Test #24-1 two diesel generators, the auxiliary                                               Test #24-7 boiler, the combustion turbine, the Central Utility Building, and the diesel driven firewater pump by providing a means to collect, treat, and transfer the waste water to the either the LRWS or to the UWS.
The BPDS supports the condensate polisher demineralizers, the three cooling tower chemical addition systems, and the DWS reverse osmosis units by providing a means to collect and transfer chemical wastes to either the LRWS or to the UWS.
: 3. The BPDS supports the CRB floor             nonsafety-related                        Test #24-1 drains by providing a means to                                                     Test #24-7 collect, treat, and transfer the waste water to the UWS.
nonsafety-related Test #24-1 Test #24-7 2.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The BPDS supports the two TGBs, the two diesel generators, the auxiliary boiler, the combustion turbine, the Central Utility Building, and the diesel driven firewater pump by providing a means to collect, treat, and transfer the waste water to the either the LRWS or to the UWS.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
nonsafety-related Test #24-1 Test #24-7 3.
: i. Verify each BPDS remotely-operated Operate each valve from the MCR and                MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
The BPDS supports the CRB floor drains by providing a means to collect, treat, and transfer the waste water to the UWS.
ii. Verify each BPDS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
nonsafety-related Test #24-1 Test #24-7 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
iii. Verify each BPDS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
iv. Verify each BPDS pump can be               Align the BPDS to allow for pump         MCR display and local, visual started and stopped remotely.              operation.                              observation indicate each pump starts Stop and start each pump from the MCR. and stops.
Verify each BPDS remotely-operated valve can be operated remotely.
Operate each valve from the MCR and local control panel (if design has local valve control).
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each BPDS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each BPDS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each BPDS pump can be started and stopped remotely.
Align the BPDS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
: v. Verify the pump speed of each BPDS Vary the speed of each pump from the MCR display indicates the speed of each variable-speed pump can be                MCR and local control panel (if design   pump varies from minimum to manually controlled.                      has local pump control).                 maximum speed.
v.
vi. Verify each BPDS instrument is             Initiate a single real or simulated     The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each BPDS                MCS or PCS display, or is recorded by the (Test not required if the instrument      transmitter.                            applicable control system historian.
Verify the pump speed of each BPDS variable-speed pump can be manually controlled.
calibration verified the MCS or PCS display.)
Vary the speed of each pump from the MCR and local control panel (if design has local pump control).
Tier 2                                                            14.2-63                                        Draft Revision 3
MCR display indicates the speed of each pump varies from minimum to maximum speed.
vi. Verify each BPDS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each BPDS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.  


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-64 Draft Revision 3 System Level Test #24-1 Test Objective Test Method Acceptance Criteria Verify BPDS automatically controlled pumps in sumps and tanks with a fire water removal pump, start and stop automatically and transfer liquid waste to its design location.
System Level Test #24-1 Test Objective                         Test Method                                   Acceptance Criteria Verify BPDS automatically controlled   Align each BPDS sump or tank to allow         MCR displays and local, visual pumps in sumps and tanks with a fire    water in a selected sump or tank to be       observation verifies the following:
Align each BPDS sump or tank to allow water in a selected sump or tank to be pumped to its design location. If the sump fill rate in the following test method is insufficient for automatic start of the alternate pump or fire pump, the primary pump or alternate pump may be temporarily removed from service to allow an increase in the sump level.
water removal pump, start and stop      pumped to its design location. If the         i. The primary pump starts on HI level automatically and transfer liquid waste sump fill rate in the following test               and transfers water to its design to its design location.                method is insufficient for automatic start         location in the LRWS or UWS system.
i.
of the alternate pump or fire pump, the       ii. The alternate pump starts on HI-HI primary pump or alternate pump may be             level.
Verify that Pump #1 is set to the primary pump and Pump #2 is set to alternate. Fill the selected sump or tank until a HI water level is obtained to start the primary pump.
temporarily removed from service to iii. The fire water removal pump starts allow an increase in the sump level.
ii.
on HI-HI-HI level.
Continue filling the sump or tank until a HI-HI level starts the alternate pump.
: i. Verify that Pump #1 is set to the iv. The fire water removal pump stops primary pump and Pump #2 is set to on HI-HI level.
alternate. Fill the selected sump or tank until a HI water level is obtained v. Both primary and alternate pumps to start the primary pump.                    stop on LO level.
ii. Continue filling the sump or tank         vi. The primary pump starts on HI level.
until a HI-HI level starts the alternate vii. The alternate pump starts on HI-HI pump.                                        level.
iii. Fill the sump or tank until a HI-HI-HI level starts the fire water removal pump.
iii. Fill the sump or tank until a HI-HI-HI level starts the fire water removal pump.
iv. Stop filling the sump or tank to allow the fire water removal pump to stop on HI-HI level.
iv. Stop filling the sump or tank to allow the fire water removal pump to stop on HI-HI level.
: v. Continue (or start) sump or tank dewatering to allow the primary and alternate pumps to stop on LO level.
v.
Continue (or start) sump or tank dewatering to allow the primary and alternate pumps to stop on LO level.
vi. Change pump controls to make Pump #2 the primary pump and Pump #1 the alternate pump, and refill the sump or tank until the primary pump starts on HI level.
vi. Change pump controls to make Pump #2 the primary pump and Pump #1 the alternate pump, and refill the sump or tank until the primary pump starts on HI level.
vii. Continue filling the sump or tank until a HI-HI level starts the alternate pump.
vii. Continue filling the sump or tank until a HI-HI level starts the alternate pump.
Note: Pump #1 and Pump #2 are not the actual names of the pumps, these names are used to differentiate between the two pumps.
Note: Pump #1 and Pump #2 are not the actual names of the pumps, these names are used to differentiate between the two pumps.
Tier 2                                                    14.2-64                                              Draft Revision 3
MCR displays and local, visual observation verifies the following:
i.
The primary pump starts on HI level and transfers water to its design location in the LRWS or UWS system.
ii.
The alternate pump starts on HI-HI level.
iii. The fire water removal pump starts on HI-HI-HI level.
iv. The fire water removal pump stops on HI-HI level.
v.
Both primary and alternate pumps stop on LO level.
vi. The primary pump starts on HI level.
vii. The alternate pump starts on HI-HI level.
Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-65 Draft Revision 3 System Level Test #24-2 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.
System Level Test #24-2 Test Objective                         Test Method                               Acceptance Criteria Verify the BPDS automatically responds Place a north chemical waste water sump i. The north chemical waste water to mitigate a release of radioactivity. pump in operation. Initiate a real or           sump pump stops.
Place a north chemical waste water sump pump in operation. Initiate a real or simulated high radiation signal on the 6A CPS regeneration skid waste effluent.
simulated high radiation signal on the 6A ii. North chemical waste collection CPS regeneration skid waste effluent.           sump to BPDS collection tank Repeat the test for each pump.                 isolation valve is closed.
Repeat the test for each pump.
i.
The north chemical waste water sump pump stops.
ii.
North chemical waste collection sump to BPDS collection tank isolation valve is closed.
iii. North chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.
iii. North chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.
[ITAAC 03.17.02]
[ITAAC 03.17.02]
(i through iii)
(i through iii)
System Level Test #24-3 Test Objective                         Test Method                               Acceptance Criteria Verify the BPDS automatically responds   Place a south chemical waste water        i. The pump stops.
System Level Test #24-3 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.
to mitigate a release of radioactivity. sump pump in operation. Initiate a real or ii. South chemical waste collection simulated high radiation signal on the 6B       sump to BPDS collection tank CPS regeneration skid waste effluent.          isolation valve is closed.
Place a south chemical waste water sump pump in operation. Initiate a real or simulated high radiation signal on the 6B CPS regeneration skid waste effluent.
Repeat the test for each pump.             iii. South chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.
Repeat the test for each pump.
i.
The pump stops.
ii.
South chemical waste collection sump to BPDS collection tank isolation valve is closed.
iii. South chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.
[ITAAC 03.18.02]
[ITAAC 03.18.02]
(i through iii)
(i through iii)
System Level Test #24-4 Test Objective                         Test Method                               Acceptance Criteria Verify the BPDS automatically responds Place a north waste water sump pump in i. The north waste water sump pump to mitigate a release of radioactivity. operation. Initiate a real or simulated         stops.
System Level Test #24-4 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.
high radiation signal in the BPDS north ii. North waste water sump discharge TGB floor drains.                              to BPDS collection tank isolation Repeat the test for each pump.                  valve is closed.
Place a north waste water sump pump in operation. Initiate a real or simulated high radiation signal in the BPDS north TGB floor drains.
Repeat the test for each pump.
i.
The north waste water sump pump stops.
ii.
North waste water sump discharge to BPDS collection tank isolation valve is closed.
iii. North waste water sump discharge to LRW high conductivity waste tank isolation valve is closed.
iii. North waste water sump discharge to LRW high conductivity waste tank isolation valve is closed.
[ITAAC 03.17.03]
[ITAAC 03.17.03]
(i thorugh iii)
(i thorugh iii)
System Level Test #24-5 Test Objective                         Test Method                               Acceptance Criteria Verify the BPDS automatically responds Place a south waste water sump pump in i. The south waste water sump pump to mitigate a release of radioactivity. operation. Initiate a real or simulated         stops.
System Level Test #24-5 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.
high radiation signal in the BPDS south ii. South waste water sump discharge TGB floor drains.                              to BPDS collection tank isolation Repeat the test for each pump.                  valve is closed.
Place a south waste water sump pump in operation. Initiate a real or simulated high radiation signal in the BPDS south TGB floor drains.
Repeat the test for each pump.
i.
The south waste water sump pump stops.
ii.
South waste water sump discharge to BPDS collection tank isolation valve is closed.
iii. South waste water sump discharge to LRW high conductivity waste tank isolation valve is closed.
iii. South waste water sump discharge to LRW high conductivity waste tank isolation valve is closed.
[ITAAC 03.18.03]
[ITAAC 03.18.03]
(i through iii)
(i through iii)
Tier 2                                                  14.2-65                                              Draft Revision 3
Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-66 Draft Revision 3 System Level Test #24-6 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.
System Level Test #24-6 Test Objective                           Test Method                                   Acceptance Criteria Verify the BPDS automatically responds   Place a north waste water sump pump in i. The north chemical waste water to mitigate a release of radioactivity. operation. Initiate a real or simulated           sump pump stops.
Place a north waste water sump pump in operation. Initiate a real or simulated high radiation signal in the BPDS auxiliary blowdown cooler condensate.
high radiation signal in the BPDS             ii. North chemical waste collection auxiliary blowdown cooler condensate.             sump to BPDS collection tank Repeat the test for each pump.                     isolation valve is closed.
Repeat the test for each pump.
i.
The north chemical waste water sump pump stops.
ii.
North chemical waste collection sump to BPDS collection tank isolation valve is closed.
iii. North chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.
iii. North chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.
[ITAAC 03.17.04]
[ITAAC 03.17.04]
(i through iii)
(i through iii)
System Level Test #24-7 Test Objective                           Test Method                                   Acceptance Criteria Verify BPDS automatically controlled     Align each BPDS sump or tank to allow        MCR displays and local, visual pumps, in sumps and tanks without a fire water in a selected sump or tank to be       observation verifies the following:
System Level Test #24-7 Test Objective Test Method Acceptance Criteria Verify BPDS automatically controlled pumps, in sumps and tanks without a fire water removal pump, start and stop automatically and transfer liquid waste to its design location.
water removal pump, start and stop      pumped to its design location. If the         i. The primary pump starts on HI level automatically and transfer liquid waste  sump fill rate in the following test               and transfers water to its design to its design location.                  method is insufficient for automatic start         location in the LRWS or UWS system.
Align each BPDS sump or tank to allow water in a selected sump or tank to be pumped to its design location. If the sump fill rate in the following test method is insufficient for automatic start of the alternate pump, the primary pump may be temporarily removed from service to allow an increase in the sump level.
of the alternate pump, the primary pump       ii. The alternate pump starts on HI-HI may be temporarily removed from                   level.
: i.
service to allow an increase in the sump     iii. Both primary and alternate pumps level.                                            stop on LO level.
Verify that Pump #1 is set to the primary pump and Pump #2 is set to alternate. Fill the selected sump or tank until a HI water level is obtained to start the primary pump.
: i. Verify that Pump #1 is set to the iv. The primary pump starts on HI level.
primary pump and Pump #2 is set to alternate. Fill the selected sump or     v. The alternate pump starts on HI-HI tank until a HI water level is obtained       level.
to start the primary pump.
ii. Continue filling the sump or tank until a HI-HI level starts the alternate pump.
ii. Continue filling the sump or tank until a HI-HI level starts the alternate pump.
iii. Stop filling the sump or tank to allow the primary and alternate pumps to stop on LO level.
iii. Stop filling the sump or tank to allow the primary and alternate pumps to stop on LO level.
Line 527: Line 927:
: v. Continue filling the sump or tank until a HI-HI level starts the alternate pump.
: v. Continue filling the sump or tank until a HI-HI level starts the alternate pump.
Note: Pump #1 and Pump #2 are not the actual names of the pumps; these names are used to differentiate between the two pumps.
Note: Pump #1 and Pump #2 are not the actual names of the pumps; these names are used to differentiate between the two pumps.
Tier 2                                                      14.2-66                                              Draft Revision 3
MCR displays and local, visual observation verifies the following:
: i.
The primary pump starts on HI level and transfers water to its design location in the LRWS or UWS system.
ii. The alternate pump starts on HI-HI level.
iii. Both primary and alternate pumps stop on LO level.
iv. The primary pump starts on HI level.
: v. The alternate pump starts on HI-HI level.
Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)


NuScale Final Safety Analysis Report                                                                         Initial Plant Test Program Table 14.2-27: Main Steam System Test # 27 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-70 Draft Revision 3 Table 14.2-27: Main Steam System Test # 27 Preoperational test is required to be performed for each NPM.
The MSS is described in Section 10.3. MS functions are not verified by this test. The MSS functions verified by other tests are:
The MSS is described in Section 10.3. MS functions are not verified by this test. The MSS functions verified by other tests are:
System Function                                 System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The MSS supports the SG by                   nonsafety-related                         TGS Test #33-2 delivering steam to the main condenser.
1.
: 21. The MSS supports the TGS by                 nonsafety-related                         TGS Test #33-2 providing steam to the TGS.                                                          Ramp Change in Load Test #100
The MSS supports the SG by delivering steam to the main condenser.
: 32. The MSS supports the CNTS by                 nonsafety-related                         MPS Test #63-6 providing secondary isolation of the main steam lines.
nonsafety-related TGS Test #33-2
: 43. The MSS supports the DHRS by                 nonsafety-related                          MPS Test #63-6 providing a backup means for required boundary conditions for DHRS operation.
: 21. The MSS supports the TGS by providing steam to the TGS.
Prerequisites
nonsafety-related TGS Test #33-2 Ramp Change in Load Test #100
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: 32. The MSS supports the CNTS by providing secondary isolation of the main steam lines.
Component Level Tests Test Objective                                   Test Method                               Acceptance Criteria
nonsafety-related MPS Test #63-6
: i. Verify each MSS remotely-operated Operate each valve from the MCR and                   MCR display and local, visual valve can be operated remotely.            local control panel (if design has local   observation indicate each valve fully valve control)                            opens and fully closes.
: 43. The MSS supports the DHRS by providing a backup means for required boundary conditions for DHRS operation.
ii. Verify each MSS air-operated valve           Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.         observation indicate each valve fails to its safe position.
nonsafety-related MPS Test #63-6 Prerequisites i.
iii. Verify each MSS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-     observation indicate each valve fails to electrical power to its solenoid.          operated valve.                            its safe position.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
iv. Verify automatic operation of MSS           Initiate a simulated signal for the       Any remote display or local verification extraction steam to protect the main following system conditions.                    indicates the following:
Component Level Tests Test Objective Test Method Acceptance Criteria i.
turbine.                                  i. feedwater heater high level            i. extraction steam block valve closes ii. turbine trip                          ii. extraction steam non-return check valve closes
Verify each MSS remotely-operated valve can be operated remotely.
: v. Verify each MSS instrument is                 Initiate a single real or simulated       The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each MSS                  MCS or PCS display, or is recorded by the (Test not required if the instrument transmitter.                                    applicable control system historian.
Operate each valve from the MCR and local control panel (if design has local valve control)
calibration verified the MCS or PCS display.)
MCR display and local, visual observation indicate each valve fully opens and fully closes.
System Level Tests None Tier 2                                                              14.2-70                                          Draft Revision 3
ii.
Verify each MSS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each MSS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify automatic operation of MSS extraction steam to protect the main turbine.
Initiate a simulated signal for the following system conditions.
i.
feedwater heater high level ii.
turbine trip Any remote display or local verification indicates the following:
i.
extraction steam block valve closes ii.
extraction steam non-return check valve closes v.
Verify each MSS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each MSS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
System Level Tests None


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-28: Feedwater System Test # 28 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-71 Draft Revision 3 Table 14.2-28: Feedwater System Test # 28 Preoperational test is required to be performed for each NPM.
The FWS is described in Section 10.4.7; Section 9.2.6 (condensate storage tank); Section 10.4.1 (condenser); FWS functions are not verified by FWS tests. FWS functions verified by other tests are:
The FWS is described in Section 10.4.7; Section 9.2.6 (condensate storage tank); Section 10.4.1 (condenser); FWS functions are not verified by FWS tests. FWS functions verified by other tests are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The FWS supports the CPS by                   nonsafety-related                        CPS Test #30-1 providing water for CPS rinse and CPS resin transfer.
1.
: 2. The FWS supports the TG by cooling nonsafety-related                                  TGS Test #33-1 superheated steam in the gland                                                     Ramp Change in Load Test #100 steam desuperheater prior to the steam entering the gland seals.
The FWS supports the CPS by providing water for CPS rinse and CPS resin transfer.
: 3. The FWS supports the containment nonsafety-related                                     TGS Test #33-1 system (CNTS) by supplying                                                          Ramp Change in Load Test #100 feedwater to the SGs.
nonsafety-related CPS Test #30-1 2.
: 4. The FWS supports the turbine                  nonsafety-related                       TGS Test #33-1 generator by cooling superheated                                                   100 Percent Load Rejection Test #103 turbine bypass steam in the turbine bypass desuperheater prior to the steam entering the main condenser.
The FWS supports the TG by cooling superheated steam in the gland steam desuperheater prior to the steam entering the gland seals.
: 5. The FWS supports the turbine                  nonsafety-related                       TGS Test #33-1 generator by accepting turbine                                                      100 Percent Load Rejection Test #103 bypass steam into the main condenser.
nonsafety-related TGS Test #33-1 Ramp Change in Load Test #100 3.
: 6. The FWS supports the CNTS by                 nonsafety-related                        MPS Test #63-6 providing secondary isolation of the feedwater lines.
The FWS supports the containment system (CNTS) by supplying feedwater to the SGs.
: 7. The FWS supports the decay heat              nonsafety-related                       MPS Test #63-6 removal system (DHRS) by providing secondary isolation of the feedwater lines, ensuring required boundary conditions for DHRS operation.
nonsafety-related TGS Test #33-1 Ramp Change in Load Test #100 4.
Prerequisites i.Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The FWS supports the turbine generator by cooling superheated turbine bypass steam in the turbine bypass desuperheater prior to the steam entering the main condenser.
nonsafety-related TGS Test #33-1 100 Percent Load Rejection Test #103 5.
The FWS supports the turbine generator by accepting turbine bypass steam into the main condenser.
nonsafety-related TGS Test #33-1 100 Percent Load Rejection Test #103 6.
The FWS supports the CNTS by providing secondary isolation of the feedwater lines.
nonsafety-related MPS Test #63-6 7.
The FWS supports the decay heat removal system (DHRS) by providing secondary isolation of the feedwater lines, ensuring required boundary conditions for DHRS operation.
nonsafety-related MPS Test #63-6 Prerequisites i.Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.Verify a pump curve test has been completed for the FWS pumps.
ii.Verify a pump curve test has been completed for the FWS pumps.
Component Level Tests Test Objective                                   Test Method                             Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each FWS remotely-operated Operate each valve from the MCR and                 MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
Verify each FWS remotely-operated valve can be operated remotely.
ii. Verify each FWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iii. Verify each FWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
iv. Verify each FWS condensate pump Align the FWS to allow for pump                       MCR display and local, visual can be started and stopped remotely. operation.                                    observation indicate each pump starts Stop and start each pump from the MCR. and stops.
ii.
Verify each FWS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each FWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each FWS condensate pump can be started and stopped remotely.
Align the FWS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
Tier 2                                                            14.2-71                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-29: Feedwater Treatment System Test # 29 Preoperational test is required to be performed for the 6A NPMs and for the 6B NPMs.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-73 Draft Revision 3 Table 14.2-29: Feedwater Treatment System Test # 29 Preoperational test is required to be performed for the 6A NPMs and for the 6B NPMs.
The feedwater treatment system (FWTS) is described in Section 10.4.11 and the function verified by this test and power ascension testing is:
The feedwater treatment system (FWTS) is described in Section 10.4.11 and the function verified by this test and power ascension testing is:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The FWTS supports the FWS by                   nonsafety-related                       Component-level tests controlling and maintaining feedwater                                                    Primary and Secondary Chemistry chemistry.                                                                              Test #79 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The FWTS supports the FWS by controlling and maintaining feedwater chemistry.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
nonsafety-related Component-level tests Primary and Secondary Chemistry Test #79 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
: i. Verify each FWTS remotely-operated Operate each valve from the MCR and               MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
ii. Verify each FWTS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
Verify each FWTS remotely-operated valve can be operated remotely.
iii. Verify each FWTS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iv. Verify each FWTS pump can be               Align the FWTS to allow for pump        MCR display and local, visual started and stopped remotely and           operation.                              observation indicate each pump starts locally (if designed).                     Stop and start each remotely-controlled and stops.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
pump from the MCR.                       Audible and visible water hammer are Stop and start each locally-controlled   not observed when the pump starts.
ii.
pump locally.
Verify each FWTS air-operated valve fails to its safe position on loss of air.
: v. Verify the speed of each FWTS               Vary the speed of each pump from the MCR display indicates pump speed variable-speed pump can be                MCR and local control panel (if design   varies from minimum to maximum manually controlled.                      has local pump control).                 speed.
Place each valve in its non-safe position.
vi. Verify each FWTS instrument is             Initiate a single real or simulated     The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each FWTS                MCS or PCS display, or is recorded by the (Test not required if the instrument transmitter.                                  applicable control system historian.
Isolate and vent air to the valve.
calibration verified the MCS or PCS display.)
MCR display and local, visual observation indicate each valve fails to its safe position.
System Level Tests None Tier 2                                                            14.2-73                                        Draft Revision 3
iii. Verify each FWTS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each FWTS pump can be started and stopped remotely and locally (if designed).
Align the FWTS to allow for pump operation.
Stop and start each remotely-controlled pump from the MCR.
Stop and start each locally-controlled pump locally.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
v.
Verify the speed of each FWTS variable-speed pump can be manually controlled.
Vary the speed of each pump from the MCR and local control panel (if design has local pump control).
MCR display indicates pump speed varies from minimum to maximum speed.
vi. Verify each FWTS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each FWTS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
System Level Tests None


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-30: Condensate Polishing System Test # 30 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-75 Draft Revision 3 System Level Test #30-1 Test Objective Test Method Acceptance Criteria Verify the CPS automatically completes resin regeneration.
System Level Test #30-1 Test Objective                         Test Method                               Acceptance Criteria Verify the CPS automatically completes Align the FWS to support CPS resin        i. The resin transferred to the resin regeneration.                    regeneration.                                  regeneration skid.
Align the FWS to support CPS resin regeneration.
Align the ABS to support CPS resin         ii. The CPS regeneration cycle regeneration.                                  completed successfully.
Align the ABS to support CPS resin regeneration.
: i. Automatically transfer the test resin   iii. The resin transferred to a bed from a condensate polisher to         condensate polisher.
i.
the CPS regeneration skid.           iv. ABS steam maintains hot water ii. Initiate an automatic regeneration of       heater outlet temperature at design the resin.                                setpoint during resin regeneration.
Automatically transfer the test resin bed from a condensate polisher to the CPS regeneration skid.
ii.
Initiate an automatic regeneration of the resin.
iii. Automatically transfer the test resin bed from the CPS regeneration skid to a condensate polisher.
iii. Automatically transfer the test resin bed from the CPS regeneration skid to a condensate polisher.
Tier 2                                                  14.2-75                                            Draft Revision 3
i.
The resin transferred to the regeneration skid.
ii.
The CPS regeneration cycle completed successfully.
iii. The resin transferred to a condensate polisher.
iv. ABS steam maintains hot water heater outlet temperature at design setpoint during resin regeneration.
Table 14.2-30: Condensate Polishing System Test # 30 (Continued)


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-31: Feedwater Heater Vents and Drains System Test # 31 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-76 Draft Revision 3 Table 14.2-31: Feedwater Heater Vents and Drains System Test # 31 Preoperational test is required to be performed for each NPM.
The feedwater heater vents and drains system (HVDS) system is described in Section 10.4.7. and the functions verified by this test and power ascension testing are:
The feedwater heater vents and drains system (HVDS) system is described in Section 10.4.7. and the functions verified by this test and power ascension testing are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The HVDS system supports the FWS nonsafety-related                                    Component level tests by venting the feedwater heaters.
1.
: 2. The HVDS system supports the FWS nonsafety-related                                    Component level tests by controlling level in the shell sides                                             Ramp Change in Load Demand feedwater heaters.                                                                  Test #100 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The HVDS system supports the FWS by venting the feedwater heaters.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
nonsafety-related Component level tests 2.
: i. Verify each HVDS remotely-operated Operate each valve from the MCR and               MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
The HVDS system supports the FWS by controlling level in the shell sides feedwater heaters.
ii. Verify each HVDS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
nonsafety-related Component level tests Ramp Change in Load Demand Test #100 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
iii. Verify each HVDS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
iv. Verify automatic operation of HVDS Initiate a simulated turbine trip.               Any remote display or local verification valves to protect the turbine on                                                    indicates the following:
Verify each HVDS remotely-operated valve can be operated remotely.
turbine trip.                                                                      i. Low, intermediate and high pressure feedwater heater extraction steam supply valves are closed.
Operate each valve from the MCR and local control panel (if design has local valve control).
ii. Low, intermediate and high pressure feedwater heater air assisted check valves are closed.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each HVDS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each HVDS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify automatic operation of HVDS valves to protect the turbine on turbine trip.
Initiate a simulated turbine trip.
Any remote display or local verification indicates the following:
i.
Low, intermediate and high pressure feedwater heater extraction steam supply valves are closed.
ii.
Low, intermediate and high pressure feedwater heater air assisted check valves are closed.
iii. Low, intermediate and high pressure feedwater heater extraction steam dump valves are open.
iii. Low, intermediate and high pressure feedwater heater extraction steam dump valves are open.
: v. Verify automatic operation of HVDS Initiate a simulated signal for the               Any remote display or local verification valves to protect turbine on high          following system conditions.             indicates the following:
v.
feedwater heater level.                   i. Low pressure feedwater heater high i. Low pressure feedwater heater level.                                  extraction steam supply valve and ii. Intermediate pressure feedwater          low pressure feedwater heater heater high level.                      extraction steam dump valve are iii. High pressure feedwater heater high      open.
Verify automatic operation of HVDS valves to protect turbine on high feedwater heater level.
level                              ii. Intermediate pressure feedwater heater extraction steam supply valve and intermediate pressure feedwater heater extraction steam dump valve are open.
Initiate a simulated signal for the following system conditions.
i.
Low pressure feedwater heater high level.
ii.
Intermediate pressure feedwater heater high level.
iii. High pressure feedwater heater high level Any remote display or local verification indicates the following:
i.
Low pressure feedwater heater extraction steam supply valve and low pressure feedwater heater extraction steam dump valve are open.
ii.
Intermediate pressure feedwater heater extraction steam supply valve and intermediate pressure feedwater heater extraction steam dump valve are open.
iii. High pressure feedwater heater extraction steam supply valve and high pressure feedwater heater extraction steam dump valve are open.
iii. High pressure feedwater heater extraction steam supply valve and high pressure feedwater heater extraction steam dump valve are open.
Tier 2                                                            14.2-76                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-32: Condenser Air Removal System Test # 32 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-78 Draft Revision 3 Table 14.2-32: Condenser Air Removal System Test # 32 Preoperational test is required to be performed for each NPM.
The condenser air removal system (CARS) is described in Section 10.4.2 and the functions verified by this test and power ascension testing are:
The condenser air removal system (CARS) is described in Section 10.4.2 and the functions verified by this test and power ascension testing are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The CARS supports the condensate nonsafety-related                                    Test #32-1 and FWS by removing air and non-condensable gases from the main condenser.
1.
: 2. The circulating water system (CWS) nonsafety related                                 Test #32-1 supports the FWS by removing heat                                                  Ramp Change in Load Demand from the main condenser.                                                            Test #100
The CARS supports the condensate and FWS by removing air and non-condensable gases from the main condenser.
: 3. The ABS supports the turbine                 nonsafety-related                       Test #32-1 generator by supplying gland seal steam.
nonsafety-related Test #32-1 2.
: 4. The auxiliary boiler supports the FWS nonsafety-related                              Test #32-1 by supplying steam to the condenser for sparging when necessary.
The circulating water system (CWS) supports the FWS by removing heat from the main condenser.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety related Test #32-1 Ramp Change in Load Demand Test #100 3.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
The ABS supports the turbine generator by supplying gland seal steam.
: i. Verify each CARS remotely-operated Operate each valve from the MCR and                MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
nonsafety-related Test #32-1 4.
ii. Verify each CARS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
The auxiliary boiler supports the FWS by supplying steam to the condenser for sparging when necessary.
iii. Verify each CARS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-   observation indicate each valve fails to electrical power to its solenoid.          operated valve.                          its safe position.
nonsafety-related Test #32-1 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
iv. Verify each CARS pump can be               Align the CARS to allow for pump         MCR display and local, visual started and stopped remotely.              operation.                              observation indicate each pump starts Stop and start each pump from the MCR. and stops.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
Verify each CARS remotely-operated valve can be operated remotely.
Operate each valve from the MCR and local control panel (if design has local valve control).
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each CARS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each CARS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each CARS pump can be started and stopped remotely.
Align the CARS to allow for pump operation.
Stop and start each pump from the MCR.
MCR display and local, visual observation indicate each pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
Audible and visible water hammer are not observed when the pump starts.
: v. Verify CARS valves automatically             Initiate a simulated signal for the     Any remote display or local verification operate to maintain CARS seal water following system conditions.                   indicates the following:
v.
separator tank level.                     i. CARS seal water separator tank high i. CARS seal water separator tank level.                                  makeup valve is closed and drain ii. CARS seal water separator tank low        valve is open.
Verify CARS valves automatically operate to maintain CARS seal water separator tank level.
level.                              ii. The CARS seal water separator makeup valve is open and drain valve is closed.
Initiate a simulated signal for the following system conditions.
vi. Verify a CARS standby pump                 Align the CARS to allow for pump         MCR display and local, visual automatically starts to protect plant operation. Place a pump in service.           observation indicate the standby pump equipment.                                Initiate a simulated main condenser high starts.
i.
pressure.                                Audible and visible water hammer are not observed when the pump starts.
CARS seal water separator tank high level.
vii. Verify a local integrated grab sample Place the system in service to allow flow A local grab sample is obtained.
ii.
can be obtained from the CARS grab through the grab sampling device.
CARS seal water separator tank low level.
sample device.
Any remote display or local verification indicates the following:
Tier 2                                                            14.2-78                                          Draft Revision 3
i.
CARS seal water separator tank makeup valve is closed and drain valve is open.
ii.
The CARS seal water separator makeup valve is open and drain valve is closed.
vi. Verify a CARS standby pump automatically starts to protect plant equipment.
Align the CARS to allow for pump operation. Place a pump in service.
Initiate a simulated main condenser high pressure.
MCR display and local, visual observation indicate the standby pump starts.
Audible and visible water hammer are not observed when the pump starts.
vii. Verify a local integrated grab sample can be obtained from the CARS grab sample device.
Place the system in service to allow flow through the grab sampling device.
A local grab sample is obtained.


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-32: Condenser Air Removal System Test # 32 (Continued) viii. Verify each CARS instrument is       Initiate a single real or simulated       The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each CARS          MCS or PCS display, or is recorded by (Test not required if the instrument transmitter.                              the applicable control system historian.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-79 Draft Revision 3 viii. Verify each CARS instrument is available on an MCS or PCS display.
calibration verified the MCS or PCS display.)
(Test not required if the instrument calibration verified the MCS or PCS display.)
System Level Test #32-1 Test Objective                             Test Method                               Acceptance Criteria Verify the CARS can maintain main         Place the ABS in automatic control to     i. Maintain main condenser design condenser vacuum pressure.                supply gland seal steam.                      vacuum pressure.
Initiate a single real or simulated instrument signal from each CARS transmitter.
Place the FWS in automatic control to     ii. The ABS is capable of providing condense the gland seal steam in the           sparging steam to the main gland exhaust condenser.                       condenser as indicated by steam Place the CWS in automatic control to         flow.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
provide cooling to the main condenser. iii. The ABS is capable of supplying
System Level Test #32-1 Test Objective Test Method Acceptance Criteria Verify the CARS can maintain main condenser vacuum pressure.
: i. Place the CARS in service to establish     gland seal steam to the turbine vacuum in the main condenser.            generator at design pressures.
Place the ABS in automatic control to supply gland seal steam.
ii. Open the feedwater sparge isolation valves to provide steam sparging to the main condenser.
Place the FWS in automatic control to condense the gland seal steam in the gland exhaust condenser.
Tier 2                                                        14.2-79                                          Draft Revision 3
Place the CWS in automatic control to provide cooling to the main condenser.
i.
Place the CARS in service to establish vacuum in the main condenser.
ii.
Open the feedwater sparge isolation valves to provide steam sparging to the main condenser.
i.
Maintain main condenser design vacuum pressure.
ii.
The ABS is capable of providing sparging steam to the main condenser as indicated by steam flow.
iii. The ABS is capable of supplying gland seal steam to the turbine generator at design pressures.
Table 14.2-32: Condenser Air Removal System Test # 32 (Continued)


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program RAI 10.02-3, RAI 10.02.03-1, RAI 10.02.03-2 Table 14.2-33: Turbine Generator System Test # 33 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-80 Draft Revision 3 RAI 10.02-3, RAI 10.02.03-1, RAI 10.02.03-2 Table 14.2-33: Turbine Generator System Test # 33 Preoperational test is required to be performed for each NPM.
The TGS is described in Sections 10.2, 10.4.3, and 10.4.4. The TGS and other functions verified by this test and power ascension testing are:
The TGS is described in Sections 10.2, 10.4.3, and 10.4.4. The TGS and other functions verified by this test and power ascension testing are:
System Function                           System Function Categorization         Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The TGS supports the MSS by             nonsafety-related                       Test #33-1 providing steam bypass from the                                              100 Percent Load Rejection Test #103 MSS to the main condenser.
1.
: 2. The MHS supports the CVCS by           non-safety related                     Test #33-1 adding heat to primary coolant.
The TGS supports the MSS by providing steam bypass from the MSS to the main condenser.
: 3. The CVCS supports the reactor           nonsafety-related                      Test #33-1 coolant system (RCS) by heating primary coolant.
nonsafety-related Test #33-1 100 Percent Load Rejection Test #103 2.
: 4. The ABS supports the module heatup nonsafety-related                            Test #33-1 system (MHS) by supplying steam for heating reactor coolant at startup and shutdown.
The MHS supports the CVCS by adding heat to primary coolant.
: 5. The FWS supports the CNTS by           nonsafety-related                       Test #33-1 supplying feedwater to the SGs.                                              Ramp Change in Load Test #99
non-safety related Test #33-1 3.
: 6. The FWS supports the TGS by cooling nonsafety-related                          Test #33-1 superheated turbine bypass steam in                                           100 Percent Load Rejection Test #103 the turbine bypass desuperheater prior to the steam entering the main condenser.
The CVCS supports the reactor coolant system (RCS) by heating primary coolant.
: 7. The FWS supports the TGS by             nonsafety-related                       Test #33-1 accepting turbine bypass steam into                                          100 Percent Load Rejection Test #103 the main condenser.
nonsafety-related Test #33-1 4.
: 8. The FWS supports the TGS by cooling nonsafety-related                          Test #33-1 superheated steam in the gland                                               Ramp Change in Load Test #100 steam desuperheater prior to the steam entering the gland seals.
The ABS supports the module heatup system (MHS) by supplying steam for heating reactor coolant at startup and shutdown.
: 9. The MSS supports the SGS by             nonsafety-related                      Test #33-12 delivering steam to the main condenser.The CVCS supports emergency core cooling system (ECCS) valves by providing water to reset the ECCS valves.
nonsafety-related Test #33-1 5.
: 10. The MSS supports the TGS by           nonsafety-related                       Test #33-2 providing steam to the TGS.                                                  Ramp Change in Load Test #100 Prerequisites
The FWS supports the CNTS by supplying feedwater to the SGs.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related Test #33-1 Ramp Change in Load Test #99 6.
The FWS supports the TGS by cooling superheated turbine bypass steam in the turbine bypass desuperheater prior to the steam entering the main condenser.
nonsafety-related Test #33-1 100 Percent Load Rejection Test #103 7.
The FWS supports the TGS by accepting turbine bypass steam into the main condenser.
nonsafety-related Test #33-1 100 Percent Load Rejection Test #103 8.
The FWS supports the TGS by cooling superheated steam in the gland steam desuperheater prior to the steam entering the gland seals.
nonsafety-related Test #33-1 Ramp Change in Load Test #100 9.
The MSS supports the SGS by delivering steam to the main condenser.The CVCS supports emergency core cooling system (ECCS) valves by providing water to reset the ECCS valves.
nonsafety-related Test #33-12
: 10. The MSS supports the TGS by providing steam to the TGS.
nonsafety-related Test #33-2 Ramp Change in Load Test #100 Prerequisites i.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The following prerequisites are not required for component testing:
The following prerequisites are not required for component testing:
ii. Verify Test #32-1 has been completed to verify the CARS can maintain main condenser vacuum pressure (reference test 14.2-32).
ii.
Verify Test #32-1 has been completed to verify the CARS can maintain main condenser vacuum pressure (reference test 14.2-32).
iii. The SG feedwater flush is complete.
iii. The SG feedwater flush is complete.
iv. The CARS is automatically maintaining main condenser vacuum.
iv. The CARS is automatically maintaining main condenser vacuum.
: v. Initial RCS temperature must be approximately 200°F to allow for hot functional testing to obtain data at an RCS temperature of 200°F and above.
v.
vi. The NPM and supporting systems are aligned to increase RCS temperature and pressure.
Initial RCS temperature must be approximately 200°F to allow for hot functional testing to obtain data at an RCS temperature of 200°F and above.
Tier 2                                                    14.2-80                                          Draft Revision 3
vi. The NPM and supporting systems are aligned to increase RCS temperature and pressure.  


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-33: Turbine Generator System Test # 33 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-82 Draft Revision 3 System Level Test #33-1 Test Objective Test Method Acceptance Criteria i.
System Level Test #33-1 Test Objective                               Test Method                               Acceptance Criteria
Verify the CVCS is capable of supplying water at sufficient pressure to close the ECCS valves.
: i. Verify the CVCS is capable of             Close the ECCS valves.                    i. CVCS pressure is sufficient as supplying water at sufficient pressure Align the plant to cool the RCS via the        indicated by closure of the ECCS to close the ECCS valves.              TGS bypass system.                              valves.
ii.
ii. Verify the MHS is capable of heating     Warm main steam lines.                    ii. a. CVCS supply remains in a the RCS to a temperature sufficient to Place the TGS steam bypass valve in                sub-cooled state while heating obtain criticality.                   automatic control.                                 the RCS using the module heatup iii. Verify the MHS is capable of heating                                                      system as verified by CVCS Place the feedwater regulating valve in the RCS to establish natural                                                              temperature and pressure.
Verify the MHS is capable of heating the RCS to a temperature sufficient to obtain criticality.
steam generator inventory control.
iii. Verify the MHS is capable of heating the RCS to establish natural circulation flow sufficient to obtain criticality.
circulation flow sufficient to obtain                                                  b. RCS temperature is sufficient to Place the MHS and the CVCS in automatic criticality.                                                                              obtain criticality.
ivii. Verify the TGS automatically controls turbine bypass flow to the main condenser.
control to heat the RCS.
iv. Verify the FWS automatically controls flow to the SGs to maintain SG inventory.
ivii. Verify the TGS automatically controls                                            iii. RCS natural circulation flow is Place the ABS high-pressure system in turbine bypass flow to the main                                                        sufficient to obtain criticality.
vi. Verify the FWS automatically cools the TGS bypass steam flow in the main steam desuperheater.
automatic control to heat the MHS heat condenser.                                                                      ivii. The TGS bypass flow is maintained exchanger from RCS ambient iv. Verify the FWS automatically controls    temperature to the highest temperature         maintains steam pressure at flow to the SGs to maintain SG        achievable by MHS heating.                      setpoint.
vii. Verify a local grab sample can be obtained from an MHS system grab sample device.
inventory.                                                                      iv. The feedwater flow to the steam Align the FWS to cool the gland seal vi. Verify the FWS automatically cools      steam desuperheater.                           generator is maintained at setpoint.
viii. Verify the FWS automatically cools the TGS gland steam in the gland steam desuperheater.
the TGS bypass steam flow in the                                                 vi. The cooled TGS bypass main steam desuperheater.                                                              flowtemperature is maintained at vii. Verify a local grab sample can be                                                      setpoint.
ix. Verify hotwell level is automatically controlled while receiving bypass steam.
obtained from an MHS system grab                                                vii. A local grab sample is successfully sample device.                                                                        obtained at RCS normal operating viii. Verify the FWS automatically cools                                                    temperature and pressure.
Close the ECCS valves.
the TGS gland steam in the gland                                                viii. The cooled gland seal steam steam desuperheater.                                                                  temperature is maintained at ix. Verify hotwell level is automatically                                                    setpoint.
Align the plant to cool the RCS via the TGS bypass system.
controlled while receiving bypass                                                ix. Hotwell level is maintained at steam.                                                                                setpoint while receiving bypass steam.
Warm main steam lines.
Place the TGS steam bypass valve in automatic control.
Place the feedwater regulating valve in steam generator inventory control.
Place the MHS and the CVCS in automatic control to heat the RCS.
Place the ABS high-pressure system in automatic control to heat the MHS heat exchanger from RCS ambient temperature to the highest temperature achievable by MHS heating.
Align the FWS to cool the gland seal steam desuperheater.
i.
CVCS pressure is sufficient as indicated by closure of the ECCS valves.
ii. a. CVCS supply remains in a sub-cooled state while heating the RCS using the module heatup system as verified by CVCS temperature and pressure.
: b. RCS temperature is sufficient to obtain criticality.
iii. RCS natural circulation flow is sufficient to obtain criticality.
ivii. The TGS bypass flow is maintained maintains steam pressure at setpoint.
iv. The feedwater flow to the steam generator is maintained at setpoint.
vi. The cooled TGS bypass flowtemperature is maintained at setpoint.
vii. A local grab sample is successfully obtained at RCS normal operating temperature and pressure.
viii. The cooled gland seal steam temperature is maintained at setpoint.
ix. Hotwell level is maintained at setpoint while receiving bypass steam.
System Level Test #33-2 This test may be performed after the completion of Test 33-1 when the RCS is at normal operating pressure and the RCS has achieved the maximum temperature achievable by warming the RCS using MHS heating.
System Level Test #33-2 This test may be performed after the completion of Test 33-1 when the RCS is at normal operating pressure and the RCS has achieved the maximum temperature achievable by warming the RCS using MHS heating.
Test Objective                               Test Method                               Acceptance Criteria Verify the maximum main turbine speed Place the main turbine in service as            The maximum main turbine speed is that can be obtained using the MHS to follows:                                        obtained.
Test Objective Test Method Acceptance Criteria Verify the maximum main turbine speed that can be obtained using the MHS to heat the RCS.
heat the RCS.                               i. Ensure the RCS is at RCS is at normal operating pressure and the RCS is at maximum temperature achievable by warming the RCS using MHS heating.
Place the main turbine in service as follows:
ii. Place turbine on turning gear with seal steam in service.
i.
Ensure the RCS is at RCS is at normal operating pressure and the RCS is at maximum temperature achievable by warming the RCS using MHS heating.
ii.
Place turbine on turning gear with seal steam in service.
iii. Warm up turbine to required temperature.
iii. Warm up turbine to required temperature.
iv. Increase main turbine speed.
iv. Increase main turbine speed.
Tier 2                                                        14.2-82                                              Draft Revision 3
The maximum main turbine speed is obtained.
Table 14.2-33: Turbine Generator System Test # 33 (Continued)


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-35: Liquid Radioactive Waste System Test # 35 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-84 Draft Revision 3 Table 14.2-35: Liquid Radioactive Waste System Test # 35 Preoperational test is required to be performed once.
The LRWS is described in Section 11.2 and 11.5.2.1.5 and the functions verified by this test are:
The LRWS is described in Section 11.2 and 11.5.2.1.5 and the functions verified by this test are:
System Function                             System Function Categorization       Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The LRWS supports the solid             nonsafety-related                     Test #35-1 radioactive waste system (SRWS) by                                            Test #35-2 receiving and processing liquid                                              Component-level test xi radioactive waste from the SRWS SRWS Test #37-7 dewatering skid.
1.
: 2. The LRWS supports the SFPCS by           nonsafety-related                    Test #35-1 receiving contaminated pool water                                             Test #35-2 to aid in the removal of titrated water                                       Component-level tests or boron. Treated liquid radwaste has the option to return to the pool as makeup.
The LRWS supports the solid radioactive waste system (SRWS) by receiving and processing liquid radioactive waste from the SRWS dewatering skid.
: 3. The LRWS supports the CVCS by           nonsafety-related                     Test #35-1 receiving and processing primary                                              Test #35-2 coolant from CVCS letdown.                                                    CVCS Test #38-1
nonsafety-related Test #35-1 Test #35-2 Component-level test xi SRWS Test #37-7 2.
: 4. The LRWS supports the RWDS by           nonsafety-related                     Test #35-1 receiving and processing the effluent                                        Test #35-2 from the RWB radioactive waste drain                                          RWDS Test #23-1 sumps.
The LRWS supports the SFPCS by receiving contaminated pool water to aid in the removal of titrated water or boron. Treated liquid radwaste has the option to return to the pool as makeup.
: 5. The LRWS supports the RWDS by           nonsafety-related                     Test #35-1 receiving and processing the effluent                                        Test #35-2 from the RXB radioactive waste drain                                          RWDS Test #23-1 sumps.
nonsafety-related Test #35-1 Test #35-2 Component-level tests 3.
: 6. The LRWS supports the RWDS by           nonsafety-related                     Test #35-1 receiving and processing the effluent                                        Test #35-2 from the ANB radioactive waste drain                                          RWDS Test #23-1 sumps.
The LRWS supports the CVCS by receiving and processing primary coolant from CVCS letdown.
: 7. LRWS supports the CVCS by receiving nonsafety-related                          Test #35-1 and processing the noncondensable gases and vapor from the pressurizer.
nonsafety-related Test #35-1 Test #35-2 CVCS Test #38-1 4.
The LRWS functions verified by other tests are:
The LRWS supports the RWDS by receiving and processing the effluent from the RWB radioactive waste drain sumps.
System Function                             System Function Categorization       Function Verified by Test #
nonsafety-related Test #35-1 Test #35-2 RWDS Test #23-1 5.
The LRWS supports the CVCS by               nonsafety-related                    CVCS Test #38-1 receiving and processing primary coolant from CVCS letdown.
The LRWS supports the RWDS by receiving and processing the effluent from the RXB radioactive waste drain sumps.
The LRWS supports the RWDS by              nonsafety-related                     RWDS Test #23-1 receiving and processing the effluent from theRWB radioactive waste drain sumps.
nonsafety-related Test #35-1 Test #35-2 RWDS Test #23-1 6.
The LRWS supports the RWDS by              nonsafety-related                     RWDS Test #23-1 receiving and processing the effluent from theRXB radioactive waste drain sumps.
The LRWS supports the RWDS by receiving and processing the effluent from the ANB radioactive waste drain sumps.
The LRWS supports the RWDS by              nonsafety-related                     RWDS Test #23-1 receiving and processing the effluent from the ANB radioactive waste drain sumps.
nonsafety-related Test #35-1 Test #35-2 RWDS Test #23-1 7.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
LRWS supports the CVCS by receiving and processing the noncondensable gases and vapor from the pressurizer.
Tier 2                                                      14.2-84                                        Draft Revision 3
nonsafety-related Test #35-1 The LRWS functions verified by other tests are:
System Function System Function Categorization Function Verified by Test #
The LRWS supports the CVCS by receiving and processing primary coolant from CVCS letdown.
nonsafety-related CVCS Test #38-1 The LRWS supports the RWDS by receiving and processing the effluent from theRWB radioactive waste drain sumps.
nonsafety-related RWDS Test #23-1 The LRWS supports the RWDS by receiving and processing the effluent from theRXB radioactive waste drain sumps.
nonsafety-related RWDS Test #23-1 The LRWS supports the RWDS by receiving and processing the effluent from the ANB radioactive waste drain sumps.
nonsafety-related RWDS Test #23-1 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-35: Liquid Radioactive Waste System Test # 35 (Continued) ix. Verify LRW pumps automatically       Align the LRWS to allow each of the         MCR displays and local, visual operate to prevent tank overflow. following LRW transfer pumps to             observation indicate the following:
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-86 Draft Revision 3 ix. Verify LRW pumps automatically operate to prevent tank overflow.
automatically transfer effluent to one of   i. The transfer pump starts and its design locations.                           transfers effluent to its design Degasifier transfer pump A and B                 location.
Align the LRWS to allow each of the following LRW transfer pumps to automatically transfer effluent to one of its design locations.
LCW collection tank transfer pump A and     ii. The transfer pump stops.
Degasifier transfer pump A and B LCW collection tank transfer pump A and B
B HCW collection tank transfer pump A and B
HCW collection tank transfer pump A and B
LCW sample tank transfer pump A and B HCW sample tank transfer pump A and B Detergent waste collection tank transfer pump Demineralized water break tank transfer pump
LCW sample tank transfer pump A and B HCW sample tank transfer pump A and B Detergent waste collection tank transfer pump Demineralized water break tank transfer pump i.
: i. Simulate a HI HI level signal in each of the above tanks.
Simulate a HI HI level signal in each of the above tanks.
ii. Simulate a low level signal in each of the above tanks.
ii.
: x. Verify a local grab sample can be     Place the system in service to allow flow   A local grab sample is successfully obtained from a LRWS grab sample    through the grab sampling device.          obtained.
Simulate a low level signal in each of the above tanks.
device indicated on the LRW piping and instrumentation diagram.
MCR displays and local, visual observation indicate the following:
xi. Verify SRWS dewatering skid effluent Align SRWS dewatering skid discharge to    SRWS dewatering skid effluent is can be transferred to LRW high-      one of the LRW high-conductivity waste     transferred to the LRW high-conductivity waste (HCW) collection  collection tanks. Fill the SRWS             conductivity waste collection tank. The tanks.                              dewatering skid high integrity container   SRWS dewatering skid diaphragm pump (HIC) to above the low level pump stop     is stopped.
i.
setpoint. Start the SRWS dewatering skid diaphragm pump.
The transfer pump starts and transfers effluent to its design location.
xii. Verify each LRWS instrument is       Initiate a single real or simulated         The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each LRWS            MCS or PCS display, or is recorded by the (Test not required if the instrument transmitter.                                applicable control system historian.
ii.
calibration verified the MCS or PCS display.)
The transfer pump stops.
x.
Verify a local grab sample can be obtained from a LRWS grab sample device indicated on the LRW piping and instrumentation diagram.
Place the system in service to allow flow through the grab sampling device.
A local grab sample is successfully obtained.
xi. Verify SRWS dewatering skid effluent can be transferred to LRW high-conductivity waste (HCW) collection tanks.
Align SRWS dewatering skid discharge to one of the LRW high-conductivity waste collection tanks. Fill the SRWS dewatering skid high integrity container (HIC) to above the low level pump stop setpoint. Start the SRWS dewatering skid diaphragm pump.
SRWS dewatering skid effluent is transferred to the LRW high-conductivity waste collection tank. The SRWS dewatering skid diaphragm pump is stopped.
xii. Verify each LRWS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each LRWS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
System Level Test #35-1 This test should be performed after the completion of Test 33-1 when the RCS is at normal operating pressure and the RCS has achieved the maximum temperature achievable by warming the RCS using MHS heating.
System Level Test #35-1 This test should be performed after the completion of Test 33-1 when the RCS is at normal operating pressure and the RCS has achieved the maximum temperature achievable by warming the RCS using MHS heating.
Test Objective                           Test Method                                 Acceptance Criteria
Test Objective Test Method Acceptance Criteria i.
: i. Verify LRWS can process a gaseous Align LRWS to receive pressurizer               i. The LRW degasifier removes waste stream.                        gaseous waste from the pressurizer              condensable gases and vents waste during hot functional testing.                  to the RBVS or GRWS.
Verify LRWS can process a gaseous waste stream.
Process the pressurizer gaseous waste      ii. The LRW degasifier liquid transfer through the LRW degasifier.                      pumps transfer the liquid condensate waste to the low conductivity waste collection tanks.
Align LRWS to receive pressurizer gaseous waste from the pressurizer during hot functional testing.
Tier 2                                                      14.2-86                                            Draft Revision 3
Process the pressurizer gaseous waste through the LRW degasifier.
i.
The LRW degasifier removes condensable gases and vents waste to the RBVS or GRWS.
ii.
The LRW degasifier liquid transfer pumps transfer the liquid condensate waste to the low conductivity waste collection tanks.
Table 14.2-35: Liquid Radioactive Waste System Test # 35 (Continued)


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-36: Gaseous Radioactive Waste System Test # 36 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-88 Draft Revision 3 Table 14.2-36: Gaseous Radioactive Waste System Test # 36 Preoperational test is required to be performed once.
The GRWS is described in Section 11.3 and 11.5.2.2.6 and the functions verified by this test or another preoperational test are:
The GRWS is described in Section 11.3 and 11.5.2.2.6 and the functions verified by this test or another preoperational test are:
System Function                                 System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The GRWS supports the LRWS by               nonsafety-related                          Test #36-1 receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.
1.
: 2. The GRWS supports the CES by                 nonsafety-related                          Test #36-1 receiving and / or collecting                                                         CES Test #41-2 potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.
The GRWS supports the LRWS by receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related Test #36-1 2.
Component Level Tests Test Objective                                 Test Method                               Acceptance Criteria
The GRWS supports the CES by receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.
: i. Verify each GRWS remotely-operated Operate each valve from the (main                   MCR display and local, visual valve can be operated remotely.            control room) MCR and local control       observation indicate each valve fully panel (if design has local valve control). opens and fully closes.
nonsafety-related Test #36-1 CES Test #41-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii. Verify each GRWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.         observation indicate each valve fails to its safe position.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
iii. Verify each GRWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-     observation indicate each valve fails to electrical power to its solenoid.          operated valve.                            its safe position.
Verify each GRWS remotely-operated valve can be operated remotely.
iv. Verify GRWS valves automatically           i. Initiate a real or simulated high GRWS MCR display and local, visual operate to maintain vessel volume.            moisture separator level.             observation indicate the following:
Operate each valve from the (main control room) MCR and local control panel (if design has local valve control).
ii. Initiate a real or simulated low GRWS i. The moisture separator drain valve is moisture separator level.                  open.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii. The moisture separator drain valve is closed.
ii.
: v. Verify GRWS inlet isolation valves           Simulate a GRWS inlet stream oxygen       MCR display and local, visual automatically close and nitrogen          concentration high signal.                observation indicate the following:
Verify each GRWS air-operated valve fails to its safe position on loss of air.
purge valve opens on high inlet                                                      i. The inlet stream isolation valves are stream oxygen concentration.                                                              closed.
Place each valve in its non-safe position.
ii. The nitrogen purge valve is open.
Isolate and vent air to the valve.
vi. Verify GRWS isolates upon loss of           Simulate a loss of RWBVS exhaust flow. MCR display and local, visual RWBV exhaust flow.                                                                    observation indicate the GRWS isolation valves are closed.
MCR display and local, visual observation indicate each valve fails to its safe position.
vii. Verify radiation isolation of GRWS         i. Initiate a real or simulated GRWS       MCR display and local, visual charcoal decay beds upon detection            train A decay bed discharge flow       observation indicate the following:
iii. Verify each GRWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
of decay bed discharge flow high              high radiation signal.                 i. GRWS train A charcoal decay bed radiation level.                          ii. Initiate a real or simulated GRWS          discharge isolation valve is closed.
Place each valve in its non-safe position.
train B decay bed discharge flow high [ITAAC 03.09.04]
Isolate electrical power to each air-operated valve.
radiation signal.
MCR display and local, visual observation indicate each valve fails to its safe position.
ii. GRWS train B charcoal decay bed discharge isolation valve is closed.
iv. Verify GRWS valves automatically operate to maintain vessel volume.
i.
Initiate a real or simulated high GRWS moisture separator level.
ii.
Initiate a real or simulated low GRWS moisture separator level.
MCR display and local, visual observation indicate the following:
i.
The moisture separator drain valve is open.
ii.
The moisture separator drain valve is closed.
v.
Verify GRWS inlet isolation valves automatically close and nitrogen purge valve opens on high inlet stream oxygen concentration.
Simulate a GRWS inlet stream oxygen concentration high signal.
MCR display and local, visual observation indicate the following:
i.
The inlet stream isolation valves are closed.
ii.
The nitrogen purge valve is open.
vi. Verify GRWS isolates upon loss of RWBV exhaust flow.
Simulate a loss of RWBVS exhaust flow.
MCR display and local, visual observation indicate the GRWS isolation valves are closed.
vii. Verify radiation isolation of GRWS charcoal decay beds upon detection of decay bed discharge flow high radiation level.
i.
Initiate a real or simulated GRWS train A decay bed discharge flow high radiation signal.
ii.
Initiate a real or simulated GRWS train B decay bed discharge flow high radiation signal.
MCR display and local, visual observation indicate the following:
i.
GRWS train A charcoal decay bed discharge isolation valve is closed.
[ITAAC 03.09.04]
ii.
GRWS train B charcoal decay bed discharge isolation valve is closed.
[ITAAC 03.09.05]
[ITAAC 03.09.05]
Tier 2                                                            14.2-88                                            Draft Revision 3


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-37: Solid Radioactive Waste System Test # 37 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-90 Draft Revision 3 Table 14.2-37: Solid Radioactive Waste System Test # 37 Preoperational test is required to be performed once.
The SRWS is described in Section 11.4 and the functions verified by this test or another preoperational test are:
The SRWS is described in Section 11.4 and the functions verified by this test or another preoperational test are:
System Function                               System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The SRWS supports the LRWS by               nonsafety-related                       Test #37-1 receiving spent resin and carbon bed                                                Test #37-4 from LRW processing skids.                                                          Test #37-6 Test #37-7
1.
: 2. The SRWS supports the CVCS by               nonsafety-related                       Test #37-2 receiving spent resin from CVCS ion                                                Test #37-5 exchange vessels.                                                                  Test #37-7
The SRWS supports the LRWS by receiving spent resin and carbon bed from LRW processing skids.
: 3. The SRWS supports the PCUS by               nonsafety-related                       Test #37-3 receiving spent resin and sludge                                                    Test #37-5 from PCUS ion exchange vessels.                                                    Test #37-7
nonsafety-related Test #37-1 Test #37-4 Test #37-6 Test #37-7 2.
: 4. The SRWS supports the CRVS by               nonsafety-related                        Test #37-8 receiving exhausted HEPA filters to be compacted and shipped off site.
The SRWS supports the CVCS by receiving spent resin from CVCS ion exchange vessels.
: 5. The SRWS supports the RWBVS by             nonsafety-related                        Test #37-8 receiving exhausted HEPA filters to be compacted and shipped off site.
nonsafety-related Test #37-2 Test #37-5 Test #37-7 3.
: 6. The SRWS supports the RBVS by               nonsafety-related                        Test #37-8 receiving exhausted HEPA filters and charcoal bed from RXB and normal control room HVAC, to be compacted and shipped off site.
The SRWS supports the PCUS by receiving spent resin and sludge from PCUS ion exchange vessels.
: 7. The SRWS supports the GRWS by               nonsafety-related                        Test #37-8 receiving contaminated or exhausted charcoal beds, packaging the waste in approved containers and shipping it to a licensed facility.
nonsafety-related Test #37-3 Test #37-5 Test #37-7 4.
: 8. The SRWS supports portions of the nonsafety-related                                  Test #37-8 Annex Building HVAC system by receiving, compacting, packaging, and storing exhausted HEPA and charcoal filters for storage and shipment offsite.
The SRWS supports the CRVS by receiving exhausted HEPA filters to be compacted and shipped off site.
: 9. The LRWS supports the solid                 nonsafety-related                        Test #37-7 radioactive waste system (SRWS) by                                                 LRWS Test #35-2 receiving and processing liquid radioactive waste from the SRWS dewatering skid.
nonsafety-related Test #37-8 5.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
The SRWS supports the RWBVS by receiving exhausted HEPA filters to be compacted and shipped off site.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
nonsafety-related Test #37-8 6.
: i. Verify each SRWS remotely-operated Operate each valve from the MCR and              MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
The SRWS supports the RBVS by receiving exhausted HEPA filters and charcoal bed from RXB and normal control room HVAC, to be compacted and shipped off site.
ii. Verify each SRWS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position.
nonsafety-related Test #37-8 7.
Tier 2                                                        14.2-90                                            Draft Revision 3
The SRWS supports the GRWS by receiving contaminated or exhausted charcoal beds, packaging the waste in approved containers and shipping it to a licensed facility.
nonsafety-related Test #37-8 8.
The SRWS supports portions of the Annex Building HVAC system by receiving, compacting, packaging, and storing exhausted HEPA and charcoal filters for storage and shipment offsite.
nonsafety-related Test #37-8 9.
The LRWS supports the solid radioactive waste system (SRWS) by receiving and processing liquid radioactive waste from the SRWS dewatering skid.
nonsafety-related Test #37-7 LRWS Test #35-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
Verify each SRWS remotely-operated valve can be operated remotely.
Operate each valve from the MCR and local control panel (if design has local valve control).
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each SRWS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.  


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-38: Chemical and Volume Control System Test # 38 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-93 Draft Revision 3 Table 14.2-38: Chemical and Volume Control System Test # 38 Preoperational test is required to be performed for each NPM.
The CVCS is described in Section 9.3.4 and 11.5.2.2.11 and the functions verified by this test, other preoperational tests and power ascension testing are:
The CVCS is described in Section 9.3.4 and 11.5.2.2.11 and the functions verified by this test, other preoperational tests and power ascension testing are:
System Function                                 System Function Categorization           Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The CVCS supports the RCS by                 nonsafety-related                       Test #38-1 providing primary coolant makeup.                                                  Ramp Change in Load Demand Test #100
1.
: 2. The CVCS supports the RCS by                 nonsafety-related                       Test #38-1 providing primary coolant letdown.                                                  Ramp Change in Load Demand Test #100
The CVCS supports the RCS by providing primary coolant makeup.
: 3. The CVCS supports the RCS by                 nonsafety-related                       Test #38-2 providing pressurizer spray flow for                                                Ramp Change in Load Demand RCS pressure control.                                                              Test #100
nonsafety-related Test #38-1 Ramp Change in Load Demand Test #100 2.
: 4. The CVCS supports the RCS by                 nonsafety-related                        Test #38-3 changing the boron concentration of the primary coolant.
The CVCS supports the RCS by providing primary coolant letdown.
: 5. The BAS supports the CVCS by                 nonsafety-related                        Test #38-3 providing uniformly mixed borated water on demand.
nonsafety-related Test #38-1 Ramp Change in Load Demand Test #100 3.
: 6. The LRWS supports the CVCS by               nonsafety-related                       Test #38-1 receiving and processing primary                                                    LRWS Test #35-2 coolant from CVCS letdown.
The CVCS supports the RCS by providing pressurizer spray flow for RCS pressure control.
The CVCS functions verified by other tests are:
nonsafety-related Test #38-2 Ramp Change in Load Demand Test #100 4.
The CVCS supports emergency core               nonsafety-related                        MPS Test #63-6TGS Test #33-1 cooling system (ECCS) valves by providing water to reset the ECCS valves.
The CVCS supports the RCS by changing the boron concentration of the primary coolant.
The CVCS supports the RCS by heating nonsafety-related                                   TGS Test #33-1 primary coolant.
nonsafety-related Test #38-3 5.
The CVCS supports the RCS by isolating safety-related                                   MPS Test #63-6 dilution sources.
The BAS supports the CVCS by providing uniformly mixed borated water on demand.
The CVCS supports the RCS by providing nonsafety-related                                MPS Test #63-11 primary coolant makeup in beyond design basis events.
nonsafety-related Test #38-3 6.
Prerequisites
The LRWS supports the CVCS by receiving and processing primary coolant from CVCS letdown.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related Test #38-1 LRWS Test #35-2 The CVCS functions verified by other tests are:
ii. Verify a pump curve test has been completed and approved for the CVCS pumps.
The CVCS supports emergency core cooling system (ECCS) valves by providing water to reset the ECCS valves.
nonsafety-related MPS Test #63-6TGS Test #33-1 The CVCS supports the RCS by heating primary coolant.
nonsafety-related TGS Test #33-1 The CVCS supports the RCS by isolating dilution sources.
safety-related MPS Test #63-6 The CVCS supports the RCS by providing primary coolant makeup in beyond design basis events.
nonsafety-related MPS Test #63-11 Prerequisites i.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
Verify a pump curve test has been completed and approved for the CVCS pumps.
iii. Component Level Tests iv., v., and vi. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.
iii. Component Level Tests iv., v., and vi. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.
Component Level Tests Test Objective                                 Test Method                             Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each CVCS remotely-operated Operate each valve from the MCR and               MCR display and local, visual valve can be operated remotely.            local control panel (if design has local observation indicate each valve fully valve control).                          opens and fully closes.
Verify each CVCS remotely-operated valve can be operated remotely.
ii. Verify each CVCS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each        observation indicate each valve fails to electrical power to its solenoid.          air-operated valve.                      its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iii. Verify each CVCS air-operated valve Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.       observation indicate each valve fails to its safe position Tier 2                                                            14.2-93                                          Draft Revision 3
MCR display and local, visual observation indicate each valve fully opens and fully closes.
ii.
Verify each CVCS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each valve in its non-safe position.
Isolate electrical power to each air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each CVCS air-operated valve fails to its safe position on loss of air.
Place each valve in its non-safe position.
Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position


NuScale Final Safety Analysis Report                                                             Initial Plant Test Program Table 14.2-38: Chemical and Volume Control System Test # 38 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-96 Draft Revision 3 System Level Test #38-1 Test Objective Test Method Acceptance Criteria Verify proper operation of the automatic pressurizer level control.
System Level Test #38-1 Test Objective                           Test Method                             Acceptance Criteria Verify proper operation of the automatic This test will be performed in           i. MCS data indicates that automatic pressurizer level control.              conjunction with turbine generator           pressurizer level control is test #33-1, which heats the RCS from         maintained within the design ambient conditions to no less than           operating level band.letdown 4205°F but as high as reasonably             maintained pressurizer level at achievable.                                  setpoint.
This test will be performed in conjunction with turbine generator test #33-1, which heats the RCS from ambient conditions to no less than 4205°F but as high as reasonably achievable.
: i. For pressurizer automatic level       ii. MCS data indicates that the control on the low end of the design     pressurizer level control results in an operating band usePlace pressurizer     increased pressurizer level within level control in automatic operation     acceptable limits of the target during RCS heatup to demonstrate         pressurizer level.CVCS makeup to automatic letdown. Use the module       the RCS to increase pressurizer level control system (MCS) data historian     to the target setpoint.
i.
to review pressurizer level at maximum-obtained RCS temperature.
For pressurizer automatic level control on the low end of the design operating band usePlace pressurizer level control in automatic operation during RCS heatup to demonstrate automatic letdown. Use the module control system (MCS) data historian to review pressurizer level at maximum-obtained RCS temperature.
ii. To raise pressurizer level, use MCS automation and operator permission to increase to a target pressurizer level.
ii.
To raise pressurizer level, use MCS automation and operator permission to increase to a target pressurizer level.
Note: Pressurizer letdown level control is automatic; however pressurizer makeup level control is automatic with consent of operator.
Note: Pressurizer letdown level control is automatic; however pressurizer makeup level control is automatic with consent of operator.
System Level Test #38-2 Test Objective                           Test Method                             Acceptance Criteria Verify proper operation of the automatic This test will be performed in           i. MCS data indicates automatic pressurizer pressure control.            conjunction with turbine generator           pressurizer heater operation raised test #33-1 which heats the RCS from         pressurizer pressure to the setpoint.
i.
ambient conditions to no less than       ii. MCS data indicates automatic 4205°F but as high as reasonably             pressurizer spray valve operation achievable.                                 lowered pressurizer pressure to the Place pressurizer pressure control in       spray valve closure setpoint.MCS automatic and raise pressure setpoint to     data indicates that automatic the normal operating band.                   pressurizer pressure control is Raise pressurizer pressure to the           maintained within the design pressurizer spray valve open setpoint.      operating pressure band.
MCS data indicates that automatic pressurizer level control is maintained within the design operating level band.letdown maintained pressurizer level at setpoint.
ii.
MCS data indicates that the pressurizer level control results in an increased pressurizer level within acceptable limits of the target pressurizer level.CVCS makeup to the RCS to increase pressurizer level to the target setpoint.
System Level Test #38-2 Test Objective Test Method Acceptance Criteria Verify proper operation of the automatic pressurizer pressure control.
This test will be performed in conjunction with turbine generator test #33-1 which heats the RCS from ambient conditions to no less than 4205°F but as high as reasonably achievable.
Place pressurizer pressure control in automatic and raise pressure setpoint to the normal operating band.
Raise pressurizer pressure to the pressurizer spray valve open setpoint.
Use the MCS data historian to review pressurizer pressure at maximum-obtained RCS temperature.
Use the MCS data historian to review pressurizer pressure at maximum-obtained RCS temperature.
Tier 2                                                    14.2-96                                        Draft Revision 3
i.
MCS data indicates automatic pressurizer heater operation raised pressurizer pressure to the setpoint.
ii.
MCS data indicates automatic pressurizer spray valve operation lowered pressurizer pressure to the spray valve closure setpoint.MCS data indicates that automatic pressurizer pressure control is maintained within the design operating pressure band.
Table 14.2-38: Chemical and Volume Control System Test # 38 (Continued)


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-38: Chemical and Volume Control System Test # 38 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-97 Draft Revision 3 System Level Test #38-3 Test Objective Test Method Acceptance Criteria Verify proper operation of CVCS automatic dilution and boration control.
System Level Test #38-3 Test Objective                           Test Method                               Acceptance Criteria Verify proper operation of CVCS         This test will be performed in           i. BAS storage tank sample boron automatic dilution and boration control. conjunction with turbine generator             concentration is within test #33-1 which heats the RCS from           specifications.
This test will be performed in conjunction with turbine generator test #33-1 which heats the RCS from ambient conditions to no less than 4205°F but as high as reasonably achievable.
ambient conditions to no less than       ii. MCS data indicates that the dilution 4205°F but as high as reasonably               of the RCS results in a decreased achievable.                                   boron concentration within Ensure that RCS low flow rate alarm is         acceptable limits of the target clear to ensure adequate mixing for           concentration.
Ensure that RCS low flow rate alarm is clear to ensure adequate mixing for dilution and boration.
dilution and boration.                   iii. MCS data indicates that the boration
i.
: i. Place the BAS storage tank on               of the RCS results in a increased recirculation and sample boron           boron concentration within concentration.                           acceptable limits of the target ii. Use the MCS automation and                 concentration.
Place the BAS storage tank on recirculation and sample boron concentration.
operator permission to decrease to a target RCS boron concentration.
ii. Use the MCS automation and operator permission to decrease to a target RCS boron concentration.
iii. Use the MCS and operator permission to increase to a target RCS boron concentration.
iii. Use the MCS and operator permission to increase to a target RCS boron concentration.
Tier 2                                                    14.2-97                                          Draft Revision 3
i.
BAS storage tank sample boron concentration is within specifications.
ii. MCS data indicates that the dilution of the RCS results in a decreased boron concentration within acceptable limits of the target concentration.
iii. MCS data indicates that the boration of the RCS results in a increased boron concentration within acceptable limits of the target concentration.
Table 14.2-38: Chemical and Volume Control System Test # 38 (Continued)


NuScale Final Safety Analysis Report                                                                         Initial Plant Test Program Table 14.2-39: Boron Addition System Test # 39 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-98 Draft Revision 3 Table 14.2-39: Boron Addition System Test # 39 Preoperational test is required to be performed for each NPM.
The boron addition system (BAS) is described in Section 9.3.4. The BAS function verified by this test is:
The boron addition system (BAS) is described in Section 9.3.4. The BAS function verified by this test is:
System Function                                 System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The BAS supports the SFPCS by providing nonsafety-related                                 component-level test xiiiTest #39-1 borated water to the RXB pools.
The BAS supports the SFPCS by providing borated water to the RXB pools.
The BAS function verified by other test is:
nonsafety-related component-level test xiiiTest #39-1 The BAS function verified by other test is:
System Function                                 System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The BAS supports the CVCS by providing nonsafety-related                                   CVCS Test #38-3 uniformly mixed borated water on demand.
The BAS supports the CVCS by providing uniformly mixed borated water on demand.
Prerequisites
nonsafety-related CVCS Test #38-3 Prerequisites i.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii. Verify a pump curve test has been completed and approved for the BAS pumps.
ii.
Component Level Tests Test Objective                                 Test Method                               Acceptance Criteria
Verify a pump curve test has been completed and approved for the BAS pumps.
: i. Verify each BAS remotely-operated Operate each valve from the MCR and                  MCR display and local, visual valve can be operated remotely.            local control panel (if design has local   observation indicate each valve fully valve control).                            opens and fully closes.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
ii. Verify each BAS air-operated valve         Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of air. Isolate and vent air to the valve.         observation indicate each valve fails to its safe position.
Verify each BAS remotely-operated valve can be operated remotely.
iii. Verify each BAS air-operated valve         Place each valve in its non-safe position. MCR display and local, visual fails to its safe position on loss of      Isolate electrical power to each air-     observation indicate each valve fails to electrical power to its solenoid.          operated valve.                            its safe position.
Operate each valve from the MCR and local control panel (if design has local valve control).
iv. Verify the BAS transfer pump can be Align the BAS to allow for pump                   MCR display and local, visual started and stopped remotely.              operation.                                observation indicate the pump starts Stop and start the transfer pump from      and stops.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
the MCR.                                  Audible and visible water hammer are not observed when the pump starts.
ii.
: v. Verify the BAS supply pump can be Align the BAS to allow for pump                       MCR display and local, visual started and stopped remotely.              operation.                                observation indicate the pump starts Start and stop the supply pump from the and stops.
Verify each BAS air-operated valve fails to its safe position on loss of air.
MCR.                                      Audible and visible water hammer are not observed when the pump starts.
Place each valve in its non-safe position.
vi. Verify the speed of the BAS variable- Align the BAS to provide a flow path to MCR display indicates the speed of each speed pumps can be manually                operate a selected pump.                   pump obtains both minimum and controlled.                                Vary the BAS pump speed from               maximum pump speeds.
Isolate and vent air to the valve.
minimum to maximum from the MCR.           Audible and visible water hammer are not observed when the pump starts.
MCR display and local, visual observation indicate each valve fails to its safe position.
vii. Verify BAS valves automatically           i. Initiate a real or simulated high BAS MCR display and local, visual operate to protect plant equipment.            batch tank level signal.               observation indicate the following:
iii. Verify each BAS air-operated valve fails to its safe position on loss of electrical power to its solenoid.
ii. Initiate a real or simulated high BAS i. The batch tank fill and return valves storage tank level signal.                  are fully closed.
Place each valve in its non-safe position.
ii. The storage tank fill and recirculation valves are fully closed.
Isolate electrical power to each air-operated valve.
Tier 2                                                            14.2-98                                            Draft Revision 3
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify the BAS transfer pump can be started and stopped remotely.
Align the BAS to allow for pump operation.
Stop and start the transfer pump from the MCR.
MCR display and local, visual observation indicate the pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
v.
Verify the BAS supply pump can be started and stopped remotely.
Align the BAS to allow for pump operation.
Start and stop the supply pump from the MCR.
MCR display and local, visual observation indicate the pump starts and stops.
Audible and visible water hammer are not observed when the pump starts.
vi. Verify the speed of the BAS variable-speed pumps can be manually controlled.
Align the BAS to provide a flow path to operate a selected pump.
Vary the BAS pump speed from minimum to maximum from the MCR.
MCR display indicates the speed of each pump obtains both minimum and maximum pump speeds.
Audible and visible water hammer are not observed when the pump starts.
vii. Verify BAS valves automatically operate to protect plant equipment.
i.
Initiate a real or simulated high BAS batch tank level signal.
ii.
Initiate a real or simulated high BAS storage tank level signal.
MCR display and local, visual observation indicate the following:
i.
The batch tank fill and return valves are fully closed.
ii.
The storage tank fill and recirculation valves are fully closed.


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-39: Boron Addition System Test # 39 (Continued) viii. Verify the BAS transfer pump stops   Align the BAS to allow for pump             MCR display and local, visual automatically to protect plant      operation.                                 observation indicate the following:
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-99 Draft Revision 3 viii. Verify the BAS transfer pump stops automatically to protect plant equipment.
equipment.                          i. Place the BAS transfer pump in           i. The transfer pump stops.
Align the BAS to allow for pump operation.
service on recirculation to the BAS   ii. The transfer pump stops.
i.
batch tank. Initiate a simulated a low batch tank level signal.
Place the BAS transfer pump in service on recirculation to the BAS batch tank. Initiate a simulated a low batch tank level signal.
ii. Place the BAS transfer pump in service on recirculation to the BAS storage tank. Simulate a low storage tank level signal.
ii.
ix. Verify BAS supply pumps stop           Align the BAS to allow for pump             MCR display and local, visual automatically to protect plant      operation.                                 observation indicate the following:
Place the BAS transfer pump in service on recirculation to the BAS storage tank. Simulate a low storage tank level signal.
equipment.                          i. Place a BAS supply pump in service       i. The supply pump stops.
MCR display and local, visual observation indicate the following:
on recirculation to the BAS batch     ii. The supply pump stops.
i.
bank. Initiate a simulated a low batch tank level signal.
The transfer pump stops.
ii. Place a supply pump in service on recirculation to the BAS storage tank.
ii.
The transfer pump stops.
ix. Verify BAS supply pumps stop automatically to protect plant equipment.
Align the BAS to allow for pump operation.
i.
Place a BAS supply pump in service on recirculation to the BAS batch bank. Initiate a simulated a low batch tank level signal.
ii.
Place a supply pump in service on recirculation to the BAS storage tank.
Initiate a simulated low storage tank level signal.
Initiate a simulated low storage tank level signal.
: x. Verify BAS flow capability by           Align the BAS to allow for pump             MCR display and local, visual automatic start of each BAS supply  operation. Place a supply pump in           observation indicate the standby pump pump while in standby mode.          service. Initiate a simulated pump trip     starts.
MCR display and local, visual observation indicate the following:
signal.                                    Audible and visible water hammer are not observed when the pump starts.
i.
xi. Verify supply pump low flow           Align the BAS to allow a BAS supply         MCR displays and local, visual protection.                          pump flow sufficient to close the pump observation verifies the following:
The supply pump stops.
recirculation valve to the storage tank. i. The pump recirculation valve is
ii.
: i. Manually throttle a valve in the pump       open.
The supply pump stops.
flow path until the flow rate reaches ii. The pump recirculation valve is the pump minimum flow setpoint.            closed.
x.
ii. Open the throttled valve xii. Verify a local grab sample can be     Place the system in service to allow flow A local grab sample is successfully obtained from a BAS grab sample      through the grab sampling device.          obtained.
Verify BAS flow capability by automatic start of each BAS supply pump while in standby mode.
device.
Align the BAS to allow for pump operation. Place a supply pump in service. Initiate a simulated pump trip signal.
xiii. Verify the BAS automatically adds a i. Verify the BAS batch tank contains a   MCR displays and local, visual specified quantity of borated water      sufficient volume of water to conduct observation verifies the following:
MCR display and local, visual observation indicate the standby pump starts.
from the BAS batch tank to the RXB        this test.                             i. The BAS to SFPCS valve initially pools.                              ii. Align the BAS and the SFPCS to              opens to supply water from the BAS supply water from the BAS to the          to the SFPCS pump suction.
Audible and visible water hammer are not observed when the pump starts.
SFPCS pump suction.                    ii. The BAS to SFPCS valve iii. Enter a BAS batch tank target level to    automatically closes when the BAS terminate batch operation to the          batch tank obtains the target level.
xi. Verify supply pump low flow protection.
spent fuel pool.
Align the BAS to allow a BAS supply pump flow sufficient to close the pump recirculation valve to the storage tank.
xiiiv.Verify each BAS instrument is       Initiate a single real or simulated         The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each BAS            MCS or PCS display, or is recorded by the (Test not required if the instrument transmitter.                                applicable control system historian.
i.
calibration verified the MCS or PCS display.)
Manually throttle a valve in the pump flow path until the flow rate reaches the pump minimum flow setpoint.
Tier 2                                                        14.2-99                                          Draft Revision 3
ii.
Open the throttled valve MCR displays and local, visual observation verifies the following:
i.
The pump recirculation valve is open.
ii.
The pump recirculation valve is closed.
xii. Verify a local grab sample can be obtained from a BAS grab sample device.
Place the system in service to allow flow through the grab sampling device.
A local grab sample is successfully obtained.
xiii. Verify the BAS automatically adds a specified quantity of borated water from the BAS batch tank to the RXB pools.
i.
Verify the BAS batch tank contains a sufficient volume of water to conduct this test.
ii.
Align the BAS and the SFPCS to supply water from the BAS to the SFPCS pump suction.
iii. Enter a BAS batch tank target level to terminate batch operation to the spent fuel pool.
MCR displays and local, visual observation verifies the following:
i.
The BAS to SFPCS valve initially opens to supply water from the BAS to the SFPCS pump suction.
ii.
The BAS to SFPCS valve automatically closes when the BAS batch tank obtains the target level.
xiiiv.Verify each BAS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each BAS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
Table 14.2-39: Boron Addition System Test # 39 (Continued)


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-39: Boron Addition System Test # 39 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-100 Draft Revision 3 System Level Tests NoneSystem Level Test #39-1 Test Objective Test Method Acceptance Criteria i.
System Level Tests NoneSystem Level Test #39-1 Test Objective                         Test Method                                 Acceptance Criteria
Verify the BAS automatically adds a specified quantity of borated water from the BAS batch tank to the RXB pools.
: i. Verify the BAS automatically adds a i. Verify the BAS batch tank contains a     MCR displays and local, visual specified quantity of borated water      sufficient volume of water to conduct observation verifies the following:
i.
from the BAS batch tank to the RXB      this test.                             i. The BAS to SFPCS valve initially pools.                              ii. Align the BAS and the SFPCS to              opens to supply water from the BAS supply water from the BAS to the          to the SFPCS pump suction.
Verify the BAS batch tank contains a sufficient volume of water to conduct this test.
SFPCS pump suction.                    ii. The BAS to SFPCS valve iii. Enter a BAS batch tank target level to    automatically closes when the BAS terminate batch operation to the          batch tank obtains the target level.
ii.
spent fuel pool.
Align the BAS and the SFPCS to supply water from the BAS to the SFPCS pump suction.
Tier 2                                                    14.2-100                                          Draft Revision 3
iii. Enter a BAS batch tank target level to terminate batch operation to the spent fuel pool.
MCR displays and local, visual observation verifies the following:
i.
The BAS to SFPCS valve initially opens to supply water from the BAS to the SFPCS pump suction.
ii.
The BAS to SFPCS valve automatically closes when the BAS batch tank obtains the target level.
Table 14.2-39: Boron Addition System Test # 39 (Continued)


NuScale Final Safety Analysis Report                                                                         Initial Plant Test Program Table 14.2-41: Containment Evacuation System Test # 41 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-102 Draft Revision 3 Table 14.2-41: Containment Evacuation System Test # 41 Preoperational test is required to be performed for each NPM.
The CES is described in Sections 9.3.6, 11.5.2.2.7 and 5.2.5 and the functions verified by this test or another preoperational test are:
The CES is described in Sections 9.3.6, 11.5.2.2.7 and 5.2.5 and the functions verified by this test or another preoperational test are:
System Function                                 System Function Categorization               Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The CES supports the CNTS by                 nonsafety-related                           Test #41-1 removing water vapor from the                                                          Test #41-2 containment vessel (CNV).                                                              Test #41-3
1.
: 2. The CES supports the CNTS by                 nonsafety-related                           Test #41-1 condensing water vapor removed                                                          Test #41-2 from the CNV in the containment                                                        Test #41-3 evacuation condenser.
The CES supports the CNTS by removing water vapor from the containment vessel (CNV).
: 3. The CES supports the CNTS by                 nonsafety-related                           Test #41-1 removing non-condensable gases                                                          Test #41-2 from the CNV.                                                                          Test #41-3
nonsafety-related Test #41-1 Test #41-2 Test #41-3 2.
: 4. The CES supports CNTS by providing nonsafety-related                                      Test #41-4 leak-before-break leak detection monitoring capability.
The CES supports the CNTS by condensing water vapor removed from the CNV in the containment evacuation condenser.
: 5. The CES supports the RCS by                 nonsafety-related                           Test #41-3 providing RCS leak detection monitoring capability.
nonsafety-related Test #41-1 Test #41-2 Test #41-3 3.
: 6. The GRWS supports the CES by                 nonsafety-related                            Test #41-2 receiving and / or collecting                                                           GRWS Test #36-1 potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.
The CES supports the CNTS by removing non-condensable gases from the CNV.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related Test #41-1 Test #41-2 Test #41-3 4.
Component Level Tests Test Objective                                 Test Method                                 Acceptance Criteria
The CES supports CNTS by providing leak-before-break leak detection monitoring capability.
: i. Verify each CES remotely-operated Operate each valve from the MCR and                    MCR display and local, visual valve can be operated remotely.            local control panel (if design has local     observation indicate each valve fully valve control).                              opens and fully closes.
nonsafety-related Test #41-4 5.
ii. Verify each CES air-operated valve         Place each CES valve in its non-safe        MCR display and local, visual fails to its safe position on loss of air. position. Isolate and vent air to the valve. observation indicate each valve fails to its safe position.
The CES supports the RCS by providing RCS leak detection monitoring capability.
iii. Verify each CES air-operated valve         Place each CES valve in its non-safe         MCR display and local, visual fails to its safe position on loss of      position. Isolate electrical power to each observation indicate each valve fails to electrical power to its solenoid.          CES air-operated valve.                      its safe position.
nonsafety-related Test #41-3 6.
iv. Verify each CES pump can be started Stop and start each pump from the MCR. MCR display and local, visual and stopped remotely.                                                                  observation indicate each pump starts and stops.
The GRWS supports the CES by receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.
: v. Verify the speed of each CES variable- Vary the speed of each pump from the MCR display indicates pump speed speed pump can be manually                MCR and local control panel (if design       varies from minimum to maximum controlled.                                has local pump control).                     speed.
nonsafety-related Test #41-2 GRWS Test #36-1 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
vi. Verify each CES pump automatically Place a pump in operation. Initiate a real MCR displays and local, visual stops to protect plant equipment.          or simulated signal for each pump trip       observation verifies the pump stops.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
condition.
Verify each CES remotely-operated valve can be operated remotely.
vii. Verify each CES pump suction and          Open the pump suction and discharge Each pump suction and discharge valve discharge valve automatically closes valves.                                            closes on each real or simulated valve to protect the CES equipment.             Initiate a real or simulated signal for each close condition.
Operate each valve from the MCR and local control panel (if design has local valve control).
valve close conditions.
MCR display and local, visual observation indicate each valve fully opens and fully closes.
Tier 2                                                            14.2-102                                            Draft Revision 3
ii.
Verify each CES air-operated valve fails to its safe position on loss of air.
Place each CES valve in its non-safe position. Isolate and vent air to the valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iii. Verify each CES air-operated valve fails to its safe position on loss of electrical power to its solenoid.
Place each CES valve in its non-safe position. Isolate electrical power to each CES air-operated valve.
MCR display and local, visual observation indicate each valve fails to its safe position.
iv. Verify each CES pump can be started and stopped remotely.
Stop and start each pump from the MCR. MCR display and local, visual observation indicate each pump starts and stops.
v.
Verify the speed of each CES variable-speed pump can be manually controlled.
Vary the speed of each pump from the MCR and local control panel (if design has local pump control).
MCR display indicates pump speed varies from minimum to maximum speed.
vi. Verify each CES pump automatically stops to protect plant equipment.
Place a pump in operation. Initiate a real or simulated signal for each pump trip condition.
MCR displays and local, visual observation verifies the pump stops.
vii. Verify each CES pump suction and discharge valve automatically closes to protect the CES equipment.
Open the pump suction and discharge valves.
Initiate a real or simulated signal for each valve close conditions.
Each pump suction and discharge valve closes on each real or simulated valve close condition.  


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-41: Containment Evacuation System Test # 41 (Continued) viii. Verify a local grab sample can be   Place the system in service to allow flow A local grab sample is successfully obtained from a CES grab sample      through the grab sampling device.          obtained.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-103 Draft Revision 3 viii. Verify a local grab sample can be obtained from a CES grab sample device indicated on the CES piping and instrumentation diagram.
device indicated on the CES piping and instrumentation diagram.
Place the system in service to allow flow through the grab sampling device.
ix. Verify each CES instrument is         Initiate a single real or simulated         The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each CES            MCS or PCS display, or is recorded by the (Test not required if the instrument transmitter.                                applicable control system historian.
A local grab sample is successfully obtained.
calibration verified the MCS or PCS display.)
ix. Verify each CES instrument is available on an MCS or PCS display.
System Level Test #41-1 Test Objective                             Test Method                                 Acceptance Criteria Verify the automatic operation of the CES After the containment flooding and drain The automated control establishes and to establish and maintain design vacuum    system (CFDS) completes draindown of maintains vacuum in the CNV.
(Test not required if the instrument calibration verified the MCS or PCS display.)
for the CNV.                              the CNV and the NPM is in hot functional testing, place the CES in automatic operation.
Initiate a single real or simulated instrument signal from each CES transmitter.
System Level Test #41-2 Test Objective                             Test Method                                 Acceptance Criteria Verify radiation isolation and flow       The NPM is in hot functional testing with   i. The CES effluent flow path to the diversion on high radiation level in the  the RCS at normal operating pressure.           RBVS is isolated and diverted to CES.                                      The CES is operating in automatic control       GRWS.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
with a CNV steady-state vacuum pressure     [ITAAC 02.07.01]
System Level Test #41-1 Test Objective Test Method Acceptance Criteria Verify the automatic operation of the CES to establish and maintain design vacuum for the CNV.
indicating the noncondensable gases have been removed from the CNV.
After the containment flooding and drain system (CFDS) completes draindown of the CNV and the NPM is in hot functional testing, place the CES in automatic operation.
ii. The CES effluent to process sample Initiate a real or simulated high radiation      panel isolation valve is closed.
The automated control establishes and maintains vacuum in the CNV.
signal for the CES vacuum pump
System Level Test #41-2 Test Objective Test Method Acceptance Criteria Verify radiation isolation and flow diversion on high radiation level in the CES.
The NPM is in hot functional testing with the RCS at normal operating pressure.
The CES is operating in automatic control with a CNV steady-state vacuum pressure indicating the noncondensable gases have been removed from the CNV.
Initiate a real or simulated high radiation signal for the CES vacuum pump discharge.
i.
The CES effluent flow path to the RBVS is isolated and diverted to GRWS.
[ITAAC 02.07.01]
ii.
The CES effluent to process sample panel isolation valve is closed.
[ITAAC 02.07.01]
[ITAAC 02.07.01]
discharge.
iii. The CES purge air solenoid valves to the vacuum pumps are closed.
iii. The CES purge air solenoid valves to the vacuum pumps are closed.
[ITAAC 02.07.01]
[ITAAC 02.07.01]
iv. The automated control maintains vacuum in the CNV.
iv. The automated control maintains vacuum in the CNV.
Tier 2                                                      14.2-103                                            Draft Revision 3
Table 14.2-41: Containment Evacuation System Test # 41 (Continued)


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-48: Decay Heat Removal System Test # 48 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-113 Draft Revision 3 Table 14.2-48: Decay Heat Removal System Test # 48 Preoperational test is required to be performed for each NPM.
The DHRS is described in Section 6.3. DHRS functions are not verified by DHRS tests. DHRS functions verified by other tests are:
The DHRS is described in Section 6.3. DHRS functions are not verified by DHRS tests. DHRS functions verified by other tests are:
System Function                           System Function Categorization         Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The DHRS supports the RCS by           safety-related                         MPS Test #63-6 opening the DHRS actuation valves                                            Reactor Trip from 100 Percent Power for DHRS operation.                                                          Test # 104
1.
: 2. The DHRS supports the MPS by           safety-related                         MPS Test #63-1 providing MPS actuation instrument information signals.
The DHRS supports the RCS by opening the DHRS actuation valves for DHRS operation.
: 3. The DHRS supports the MPS by           nonsafety-related                     SDIS Test #66-2 providing PAM instrument information signals.
safety-related MPS Test #63-6 Reactor Trip from 100 Percent Power Test # 104 2.
: 4. The UHS supports the DHRS by           safety-related                         Reactor Trip from 100 Percent Power accepting the heat from the DHRS                                              Test # 104 heat exchanger.
The DHRS supports the MPS by providing MPS actuation instrument information signals.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
safety-related MPS Test #63-1 3.
Component Level Tests Test Objective                             Test Method                           Acceptance Criteria
The DHRS supports the MPS by providing PAM instrument information signals.
: i. Verify each DHRS instrument is         Initiate a single real or simulated   The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each DHRS          MCS or PCS display, or is recorded by the (Test not required if the instrument  transmitter.                          applicable control system historian.
nonsafety-related SDIS Test #66-2 4.
calibration verified the MCS or PCS display.)
The UHS supports the DHRS by accepting the heat from the DHRS heat exchanger.
System Level Tests None Tier 2                                                      14.2-113                                        Draft Revision 3
safety-related Reactor Trip from 100 Percent Power Test # 104 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Component Level Tests Test Objective Test Method Acceptance Criteria i.
Verify each DHRS instrument is available on an MCS or PCS display.
(Test not required if the instrument calibration verified the MCS or PCS display.)
Initiate a single real or simulated instrument signal from each DHRS transmitter.
The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.
System Level Tests None


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-49: In-core Instrumentation System Test # 49 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-114 Draft Revision 3 Table 14.2-49: In-core Instrumentation System Test # 49 Preoperational test is required to be performed for each NPM.
The in-core instrumentation system (ICIS) is described in Section 7.0.4.7 and the function verified by this test and power ascension testing is:
The in-core instrumentation system (ICIS) is described in Section 7.0.4.7 and the function verified by this test and power ascension testing is:
System Function                           System Function Categorization         Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The ICIS supports the MPS by           nonsafety-related                       Test #49-1 providing reactor core (RXC)                                                  Reactor Coolant System Temperature temperature information.                                                      Instrument Calibration Test #93 The ICIS functions verified by another test is:
1.
System Function                           System Function Categorization         Function Verified by Test #
The ICIS supports the MPS by providing reactor core (RXC) temperature information.
The ICIS supports the MPS by providing nonsafety-related                           SDIS Test #66-2 RXC temperature information.
nonsafety-related Test #49-1 Reactor Coolant System Temperature Instrument Calibration Test #93 The ICIS functions verified by another test is:
Prerequisites
System Function System Function Categorization Function Verified by Test #
: i. The ICIS instrument strings are inserted into the core.
The ICIS supports the MPS by providing RXC temperature information.
ii. Verify an instrument calibration has been performed on all ICIS thermocouples by cross-calibrating the thermocouple to the RCS narrow range resistance temperature detectors (RTDs) prior to RCS heatup.
nonsafety-related SDIS Test #66-2 Prerequisites i.
Component Level Tests None System Level Test #49-1 Test Objective                             Test Method                             Acceptance Criteria Verify proper temperature indication is Heat the RCS from ambient conditions to MCS data indicates that the ICIS obtained from the ICIS thermocouples. normal operating temperaturethe             thermocouples respond properly.
The ICIS instrument strings are inserted into the core.
maximum RCS temperature that can be obtained by the Module Heating System.
ii.
Verify an instrument calibration has been performed on all ICIS thermocouples by cross-calibrating the thermocouple to the RCS narrow range resistance temperature detectors (RTDs) prior to RCS heatup.
Component Level Tests None System Level Test #49-1 Test Objective Test Method Acceptance Criteria Verify proper temperature indication is obtained from the ICIS thermocouples.
Heat the RCS from ambient conditions to normal operating temperaturethe maximum RCS temperature that can be obtained by the Module Heating System.
Use the MCS data historian to cross-check the ICIS thermocouples to each other and the RCS narrow-range and wide range RTDs.
Use the MCS data historian to cross-check the ICIS thermocouples to each other and the RCS narrow-range and wide range RTDs.
Tier 2                                                    14.2-114                                          Draft Revision 3
MCS data indicates that the ICIS thermocouples respond properly.


NuScale Final Safety Analysis Report                                                           Initial Plant Test Program Table 14.2-53: Process Sampling System Test # 53 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-127 Draft Revision 3 System Level Test #53-3 Test Objective Test Method Acceptance Criteria Verify sampling capability of the secondary sampling points.
System Level Test #53-3 Test Objective                       Test Method                               Acceptance Criteria Verify sampling capability of the   i. The NPM is in hot functional testing   i. The PSS secondary sampling system secondary sampling points.                with the RCS at normal operating         feedwater/main steam sample panel pressure and the maximum                 instruments provide indication of operating temperature achievable by       the water and steam analysis.
i.
heating the RCS with the MHS.       ii. The feedwater/main steam ion The FWS and MSS are in service.           chromatography analysis panel Align the FWS, MSS, PSS, and ABSPSS       monitors the programmed ion.
The NPM is in hot functional testing with the RCS at normal operating pressure and the maximum operating temperature achievable by heating the RCS with the MHS.
to provide continuous sampling flow iii. The feedwater/main steam ion to the PSS secondary sampling             chromatography analysis panel system feedwater/main steam               monitors the programmed ion.
The FWS and MSS are in service.
sample panel.                       iv. The feedwater/main steam ion ii. Open the manual feedwater/main             chromatography analysis panel steam ion chromatography analysis         monitors the programmed ion.
Align the FWS, MSS, PSS, and ABSPSS to provide continuous sampling flow to the PSS secondary sampling system feedwater/main steam sample panel.
panel valve to obtain a feedwater to v. The feedwater/main steam ion SG sample.                               chromatography analysis panel iii. Open the manual feedwater/main           monitors the programmed ion.
ii.
steam ion chromatography analysis panel valve to obtain an SG-1 steam sample.
Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a feedwater to SG sample.
iii. Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain an SG-1 steam sample.
iv. Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a SG-2 steam sample.
iv. Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a SG-2 steam sample.
: v. Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a condensate pump discharge sample.
v.
Tier 2                                                14.2-127                                          Draft Revision 3
Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a condensate pump discharge sample.
i.
The PSS secondary sampling system feedwater/main steam sample panel instruments provide indication of the water and steam analysis.
ii.
The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.
iii. The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.
iv. The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.
v.
The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.
Table 14.2-53: Process Sampling System Test # 53 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program RAI 01-1 Table 14.2-57: Highly Reliable DC Power System Test # 57 Component level tests are required to be performed for each NPM, and once for the EDSS common channels.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-132 Draft Revision 3 RAI 01-1 Table 14.2-57: Highly Reliable DC Power System Test # 57 Component level tests are required to be performed for each NPM, and once for the EDSS common channels.
System Level Test #57-1 and Test #57-2 are required to be performed once.
System Level Test #57-1 and Test #57-2 are required to be performed once.
System Level Test #57-1 and Test #57-2 may be performed concurrently.
System Level Test #57-1 and Test #57-2 may be performed concurrently.
System Level Test #57-3 is required to be performed once for each NPM.
System Level Test #57-3 is required to be performed once for each NPM.
The EDSS is described in Sections 8.1.2.2, 8.1.4.2 and 8.3.2.1.1, and the functions verified by this test are:
The EDSS is described in Sections 8.1.2.2, 8.1.4.2 and 8.3.2.1.1, and the functions verified by this test are:
System Function                           System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The highly reliable DC power system       nonsafety-related                          All functions are verified by component-(EDSS) supports the following systems by                                             level tests.
The highly reliable DC power system (EDSS) supports the following systems by providing DC electrical power.
providing DC electrical power.                                                       System level tests provide additional
* MPS
* MPS                                                                                 verification as follows:
* neutron monitoring system (NMS)
* neutron monitoring system (NMS)                                                     PLS - Test #57-1
* fixed area radiation monitoring system (RMS)
* fixed area radiation monitoring system                                             SDIS - Test #57-2 (RMS)
MPS - Test #57-3
* plant lighting system (PLS)
* plant lighting system (PLS)
* PPS
* PPS
* safety display information system (SDIS)
* safety display information system (SDIS)
* CRVS EDS system functions verified by other tests are:
* CRVS nonsafety-related All functions are verified by component-level tests.
System Function                           System Function Categorization             Function Verified by Test #
System level tests provide additional verification as follows:
: 1. EDSS supports the MPS by providing nonsafety-related                               Reference 14.2-66SDIS Test #66, EDSS module-specific operating                                                  Component-level test: Module-Specific parameter information signals.                                                  test iii.
PLS - Test #57-1 SDIS - Test #57-2 MPS - Test #57-3 EDS system functions verified by other tests are:
Component level test
System Function System Function Categorization Function Verified by Test #
: 2. EDSS supports the PPS by providing nonsafety-related                               Reference 14.2-66SDIS Test #66, EDSS common operating parameter                                                  Component-level test: Common test iii.
1.
information signals.                                                            Component level test Prerequisites
EDSS supports the MPS by providing EDSS module-specific operating parameter information signals.
: i. Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related Reference 14.2-66SDIS Test #66, Component-level test: Module-Specific test iii.
ii. Verify a valve-regulated lead-acid battery acceptance tests has been performed on all EDSS batteries to confirm battery capacity in accordance with IEEE Standard 1188 Sections 6 and 7.
Component level test 2.
EDSS supports the PPS by providing EDSS common operating parameter information signals.
nonsafety-related Reference 14.2-66SDIS Test #66, Component-level test: Common test iii.
Component level test Prerequisites i.
Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
ii.
Verify a valve-regulated lead-acid battery acceptance tests has been performed on all EDSS batteries to confirm battery capacity in accordance with IEEE Standard 1188 Sections 6 and 7.
iii. Verify battery charger performance testing has been completed by the manufacturer or a site acceptance test has been completed in accordance with manufacturer instructions.
iii. Verify battery charger performance testing has been completed by the manufacturer or a site acceptance test has been completed in accordance with manufacturer instructions.
Component Level Tests Test Objective                             Test Method                               Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each EDSS bus can be powered Configure the EDSS batteries and battery EDSS bus voltage is within design limits.
Verify each EDSS bus can be powered by its associated batteries.
by its associated batteries.          chargers associated with an EDSS bus such that one of the batteries is the only source of power to the bus.
Configure the EDSS batteries and battery chargers associated with an EDSS bus such that one of the batteries is the only source of power to the bus.
Repeat the test using the other battery associated with the EDSS bus under test as the only power source.
Repeat the test using the other battery associated with the EDSS bus under test as the only power source.
Repeat the test for the remaining EDSS channels.
Repeat the test for the remaining EDSS channels.
Tier 2                                                    14.2-132                                            Draft Revision 3
EDSS bus voltage is within design limits.


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-57: Highly Reliable DC Power System Test # 57 (Continued) ii. Verify each EDSS bus can be powered Configure the EDSS batteries and battery EDSS bus voltage is within design limits.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-133 Draft Revision 3 ii. Verify each EDSS bus can be powered by its associated battery chargers.
by its associated battery chargers. chargers associated with an EDSS bus such that one of the battery chargers is (Test may be performed as part of    the only source of power to the bus.
(Test may be performed as part of site acceptance testing.)
site acceptance testing.)
Configure the EDSS batteries and battery chargers associated with an EDSS bus such that one of the battery chargers is the only source of power to the bus.
Repeat the test using the other battery charger associated with the EDSS bus under test as the only power source.
Repeat the test using the other battery charger associated with the EDSS bus under test as the only power source.
Repeat the test for the remaining EDSS channels.
Repeat the test for the remaining EDSS channels.
iii. Verify each EDSS instrument is       Initiate a single real or simulated       The instrument signal is displayed on an available on an MCS or PCS display. instrument signal from each EDSS          MCS or PCS display, or recorded by the (Test not required if the instrument transmitter.                              applicable control system historian.
EDSS bus voltage is within design limits.
calibration verified the MCS or PCS display.)
iii. Verify each EDSS instrument is available on an MCS or PCS display.
System Level Tests System Level Test #57-1 Test Objective                                           Test Method                           Acceptance Criteria Verify the EDSS common buses provide i.       With both EDSS common buses           i. The MCR lighting designed to be independent power to the main control          energized and providing power to           powered by the EDSS Division I room (MCR) emergency lighting.                 MCR emergency lighting,                    common bus is de-energized, and de-energize the EDSS Division I            the MCR emergency lighting (RG 1.41 Independence Test)                    common bus.                                designed to be powered by the EDSS Division II common bus is ii. With both EDSS common buses                  energized.
(Test not required if the instrument calibration verified the MCS or PCS display.)
energized and providing power to MCR emergency lighting,              ii. The MCR emergency lighting de-energize the EDSS Division II            designed to be powered by the common bus.                                EDSS Division II common bus is de-energized, and the MCR emergency lighting designed to be powered by the EDSS Division I common bus is energized.
Initiate a single real or simulated instrument signal from each EDSS transmitter.
System Level Test #57-2 Test Objective                                           Test Method                           Acceptance Criteria Verify the EDSS common buses provide     i. With EDSS Division I and Division II i. Power is available in the MCR for independent power to all SDIS MCR              common buses energized verify              SDIS displays.
The instrument signal is displayed on an MCS or PCS display, or recorded by the applicable control system historian.
displays.                                     power is available in the MCR for all SDIS displays.                       ii.a. Power is not available in the MCR for (RG 1.41 Independence Test)                                                                SDIS Division I displays.
System Level Tests System Level Test #57-1 Test Objective Test Method Acceptance Criteria Verify the EDSS common buses provide independent power to the main control room (MCR) emergency lighting.
ii. De-energize the EDSS Division I common bus.                          ii.b. Power is available in the MCR for SDIS Division II displays.
(RG 1.41 Independence Test)
iii. Re-energize the EDSS Division I common bus and de-energize the        iii.a. Power is not available in the MCR for EDSS Division II common bus.                SDIS Division II displays.
: i. With both EDSS common buses energized and providing power to MCR emergency lighting, de-energize the EDSS Division I common bus.
ii. With both EDSS common buses energized and providing power to MCR emergency lighting, de-energize the EDSS Division II common bus.
: i. The MCR lighting designed to be powered by the EDSS Division I common bus is de-energized, and the MCR emergency lighting designed to be powered by the EDSS Division II common bus is energized.
ii. The MCR emergency lighting designed to be powered by the EDSS Division II common bus is de-energized, and the MCR emergency lighting designed to be powered by the EDSS Division I common bus is energized.
System Level Test #57-2 Test Objective Test Method Acceptance Criteria Verify the EDSS common buses provide independent power to all SDIS MCR displays.
(RG 1.41 Independence Test)
: i. With EDSS Division I and Division II common buses energized verify power is available in the MCR for all SDIS displays.
ii. De-energize the EDSS Division I common bus.
iii. Re-energize the EDSS Division I common bus and de-energize the EDSS Division II common bus.
: i. Power is available in the MCR for SDIS displays.
ii.a. Power is not available in the MCR for SDIS Division I displays.
ii.b. Power is available in the MCR for SDIS Division II displays.
iii.a. Power is not available in the MCR for SDIS Division II displays.
iii.b. Power is available in the MCR for SDIS Division I displays.
iii.b. Power is available in the MCR for SDIS Division I displays.
Tier 2                                                    14.2-133                                              Draft Revision 3
Table 14.2-57: Highly Reliable DC Power System Test # 57 (Continued)


NuScale Final Safety Analysis Report                                                             Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-144 Draft Revision 3 Table 14.2-63: Module Protection System Test #63 Preoperational test is required to be performed for each NPM.
The MPS is described in Sections 7.0, 7.1, and 7.2 and the functions verified by this test and power ascension testing are:
The MPS is described in Sections 7.0, 7.1, and 7.2 and the functions verified by this test and power ascension testing are:
System Function                             System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The MPS supports the CNTS by           safety-related                        Test #63-4 removing electrical power to the trip                                       Test #63-6 solenoids of the following CIVs on a containment system isolation actuation signal:
1.
The MPS supports the CNTS by removing electrical power to the trip solenoids of the following CIVs on a containment system isolation actuation signal:
* RCS injection containment isolation valves
* RCS injection containment isolation valves
* RCS discharge containment isolation valves
* RCS discharge containment isolation valves
Line 1,010: Line 1,797:
* CES containment isolation valves
* CES containment isolation valves
* RCCWS containment isolation valves
* RCCWS containment isolation valves
* CFDS containment isolation valves
* CFDS containment isolation valves safety-related Test #63-4 Test #63-6 2.
: 2. The MPS supports the CNTS by           safety-related                        Test #63-4 removing electrical power to the trip                                       Test #63-6 solenoids of the following valves on a DHRS actuation signal.
The MPS supports the CNTS by removing electrical power to the trip solenoids of the following valves on a DHRS actuation signal.
* DHRS actuation valves
* DHRS actuation valves
* Main steam isolation valves
* Main steam isolation valves
* Main steam bypass isolation valves
* Main steam bypass isolation valves
* Feedwater isolation valves
* Feedwater isolation valves safety-related Test #63-4 Test #63-6 3.
: 3. The MPS supports the ECCS by           safety-related                        Test #63-4 removing electrical power to the trip                                       Test #63-6 solenoids of the following valves on an ECCS actuation signal.
The MPS supports the ECCS by removing electrical power to the trip solenoids of the following valves on an ECCS actuation signal.
* Reactor vent valves
* Reactor vent valves
* Reactor recirculation valves Tier 2                                                  14.2-144                                        Draft Revision 3
* Reactor recirculation valves safety-related Test #63-4 Test #63-6


NuScale Final Safety Analysis Report                                           Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-145 Draft Revision 3 4.
: 4. The MPS supports the                     safety-related          Test #63-4 CNTSontainment system by                                         Test #63-6 removing electrical power to the trip solenoids of the following containment isolation valves on a CVCS isolation actuation signal:
The MPS supports the CNTSontainment system by removing electrical power to the trip solenoids of the following containment isolation valves on a CVCS isolation actuation signal:
* RCS injection containment isolation valves
* RCS injection containment isolation valves
* RCS discharge containment isolation valves
* RCS discharge containment isolation valves
* PZR pressurizer spray CIVs
* PZR pressurizer spray CIVs
* RPV high point degasification containment isolation valves
* RPV high point degasification containment isolation valves safety-related Test #63-4 Test #63-6 5.
: 5. The MPS supports the CVCS by             safety-related          Test #63-4 removing electrical power to the trip                           Test #63-6 solenoids of the DWS supply isolation valves on a DWS isolation actuation signal.
The MPS supports the CVCS by removing electrical power to the trip solenoids of the DWS supply isolation valves on a DWS isolation actuation signal.
: 6. The MPS supports the ECCS by             safety-related          Test #63-4 removing electrical power to the trip                           Test #63-6 solenoids of the reactor vent valves on an LTOP actuation signal.
safety-related Test #63-4 Test #63-6 6.
: 7. The MPS supports the ELVS by             safety-related          Test #63-4 removing electrical power to the                                 Test #63-6 pressurizer heaters on a pressurizer heater trip actuation signal.
The MPS supports the ECCS by removing electrical power to the trip solenoids of the reactor vent valves on an LTOP actuation signal.
: 8. The MPS supports the EDNS by             safety-related           Test #63-4 removing electrical power to the                                Test #63-5 CRDS for a reactor trip.
safety-related Test #63-4 Test #63-6 7.
: 9. The DHRS supports the RCS by             safety-related          Test #63-6 opening the DHRS actuation valves on a DHRS actuation signal for DHRS operation.
The MPS supports the ELVS by removing electrical power to the pressurizer heaters on a pressurizer heater trip actuation signal.
: 10. The CNTS supports the DHRS by           safety-related          Test #63-6 closing CIVs for the main steam and feedwater systems when actuated by the MPS.
safety-related Test #63-4 Test #63-6 8.
: 11. The CNTS supports the RCS by           safety-related          Test #63-6 closing the CIVs for pressurizer spray, RCS injection, RCS letdown, and RPV high point degasification when actuated by the MPS.
The MPS supports the EDNS by removing electrical power to the CRDS for a reactor trip.
: 12. The CNTS supports the RXB by           safety-related          Test #63-6 providing a barrier to contain mass, energy, and fission product release by closure of the CIVs upon a containment isolation signal.
safety-related Test #63-4 Test #63-5 9.
: 13. The ECCS supports the RCS by           safety-related          Test #63-6 opening the ECCS reactor vent valves and reactor recirculation valves when their respective trip valve is actuated by the MPS.
The DHRS supports the RCS by opening the DHRS actuation valves on a DHRS actuation signal for DHRS operation.
Tier 2                                                    14.2-145                      Draft Revision 3
safety-related Test #63-6
: 10. The CNTS supports the DHRS by closing CIVs for the main steam and feedwater systems when actuated by the MPS.
safety-related Test #63-6
: 11. The CNTS supports the RCS by closing the CIVs for pressurizer spray, RCS injection, RCS letdown, and RPV high point degasification when actuated by the MPS.
safety-related Test #63-6
: 12. The CNTS supports the RXB by providing a barrier to contain mass, energy, and fission product release by closure of the CIVs upon a containment isolation signal.
safety-related Test #63-6
: 13. The ECCS supports the RCS by opening the ECCS reactor vent valves and reactor recirculation valves when their respective trip valve is actuated by the MPS.
safety-related Test #63-6 Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                               Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-146 Draft Revision 3
: 14. The ECCS supports the RCS by         safety-related            Test #63-6 providing recirculated coolant from the containment to the RPV for the removal of core heat.
: 14. The ECCS supports the RCS by providing recirculated coolant from the containment to the RPV for the removal of core heat.
: 15. The ECCS supports the RCS by         safety-related            Test #63-6 providing LTOP for maintaining the reactor coolant pressure boundary.
safety-related Test #63-6
: 16. The CVCS supports the RCS by         safety-related             Test #63-6 isolating dilution sources.
: 15. The ECCS supports the RCS by providing LTOP for maintaining the reactor coolant pressure boundary.
: 17. The FWS supports the CNTS by         nonsafety-related         Test #63-6 providing secondary isolation of the feedwater lines.
safety-related Test #63-6
: 18. The MSS supports the CNTS by         nonsafety-related          Test #63-6 providing secondary isolation of the main steam lines.
: 16. The CVCS supports the RCS by isolating dilution sources.
: 19. The FWS supports the DHRS by         nonsafety-related          Test #63-6 providing secondary isolation of the feedwater lines, ensuring required boundary conditions for DHRS operation.
safety-related Test #63-6
: 20. The NMS supports the MPS by           safety-related             Test #63-14 providing neutron flux data for                                  Neutron Monitoring System Power various reactor trips.                                          Range Flux Calibration Test #92
: 17. The FWS supports the CNTS by providing secondary isolation of the feedwater lines.
: 21. ECCS supports MPS by providing       nonsafety-related         Test #63-1 instrumentation information signals.
nonsafety-related Test #63-6
: 22. The DHRS supports the MPS by         safety-related             Test #63-1 providing MPS actuation instrument information signals.
: 18. The MSS supports the CNTS by providing secondary isolation of the main steam lines.
: 23. The RCS supports the MPS by           nonsafety-related         Test #63-1 providing instrument information signals.
nonsafety-related Test #63-6
: 24. The RCS supports the MPS by           safety-related             Test #63-1 providing instrument information signals for LTOP actuation
: 19. The FWS supports the DHRS by providing secondary isolation of the feedwater lines, ensuring required boundary conditions for DHRS operation.
: 25. The CVCS supports the RCS by         nonsafety-related          Test #63-116 providing primary coolant makeup in beyond design basis events.ECCS valves by providing water to reset the ECCS valves.
nonsafety-related Test #63-6
: 26. The CFDS supports the RCS by         nonsafety-related          Test #63-11 providing borated coolant inventory for the removal of core heat during a beyond design basis accident.
: 20. The NMS supports the MPS by providing neutron flux data for various reactor trips.
: 27. The MPS supports the DHRS by         safety-related            Test #63-6 removing electrical power to the trip solenoids of the DHRS actuation valves on a DHRS actuation signal.
safety-related Test #63-14 Neutron Monitoring System Power Range Flux Calibration Test #92
: 28. The MPS supports the CNTS by         safety-related             Test #63-1 providing power to sensors.
: 21. ECCS supports MPS by providing instrumentation information signals.
: 29. The MPS supports the DHRS by         safety-related             Test #63-1 providing power to sensors.
nonsafety-related Test #63-1
: 30. The MPS supports the RCS by           safety-related             Test #63-1 providing power to sensors.
: 22. The DHRS supports the MPS by providing MPS actuation instrument information signals.
Tier 2                                                  14.2-146                            Draft Revision 3
safety-related Test #63-1
: 23. The RCS supports the MPS by providing instrument information signals.
nonsafety-related Test #63-1
: 24. The RCS supports the MPS by providing instrument information signals for LTOP actuation safety-related Test #63-1
: 25. The CVCS supports the RCS by providing primary coolant makeup in beyond design basis events.ECCS valves by providing water to reset the ECCS valves.
nonsafety-related Test #63-116
: 26. The CFDS supports the RCS by providing borated coolant inventory for the removal of core heat during a beyond design basis accident.
nonsafety-related Test #63-11
: 27. The MPS supports the DHRS by removing electrical power to the trip solenoids of the DHRS actuation valves on a DHRS actuation signal.
safety-related Test #63-6
: 28. The MPS supports the CNTS by providing power to sensors.
safety-related Test #63-1
: 29. The MPS supports the DHRS by providing power to sensors.
safety-related Test #63-1
: 30. The MPS supports the RCS by providing power to sensors.
safety-related Test #63-1 Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-147 Draft Revision 3 Prerequisite Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Prerequisite Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
A complete staging and testing of system hardware and software configurations will be conducted. This factory acceptance testing will be conducted in accordance with a written test procedure for testing the software and hardware of the MPS prior to installation in the plant. Following installation, site acceptance testing shall be completed in accordance with developed procedures to ensure the MPS is installed and fully functional as designed. This testing must be completed and approved prior to performing preoperational testing.
A complete staging and testing of system hardware and software configurations will be conducted. This factory acceptance testing will be conducted in accordance with a written test procedure for testing the software and hardware of the MPS prior to installation in the plant. Following installation, site acceptance testing shall be completed in accordance with developed procedures to ensure the MPS is installed and fully functional as designed. This testing must be completed and approved prior to performing preoperational testing.
Component Level Tests None System Level Test #63-1 Test Objective                               Test Method                                 Acceptance Criteria Verify the instrument signals of MPS         Table 7.1-2 lists all of sensors which input Each MPS monitored signal is displayed monitored variables are displayed in the to MPS.                                         on an MCR workstation and the module-MCR.                                        This test may be performed concurrently specific safety display instrument panel with safety display and indication system (if designed for safety display instrument (SDIS) test #66 -2 for PAM Type B and       display).
Component Level Tests None System Level Test #63-1 Test Objective Test Method Acceptance Criteria Verify the instrument signals of MPS monitored variables are displayed in the MCR.
Type C testing described in Section 14.2.12.
Table 7.1-2 lists all of sensors which input to MPS.
This test may be performed concurrently with safety display and indication system (SDIS) test #66 -2 for PAM Type B and Type C testing described in Section 14.2.12.
Inject a single signal as close as practical for each sensor listed in Table 7.1-2 and monitor its response on an MCR workstation and the module-specific safety display instrument panel (if designed for safety display instrument display).
Inject a single signal as close as practical for each sensor listed in Table 7.1-2 and monitor its response on an MCR workstation and the module-specific safety display instrument panel (if designed for safety display instrument display).
If the sensor signal is designed to be disconnected when the NPM is moved then it will be necessary to test the signal from the sensor to the disconnect and then from the disconnect to the MCR display.
If the sensor signal is designed to be disconnected when the NPM is moved then it will be necessary to test the signal from the sensor to the disconnect and then from the disconnect to the MCR display.
Each MPS monitored signal is displayed on an MCR workstation and the module-specific safety display instrument panel (if designed for safety display instrument display).
System Level Test #63-2 (Not used)
System Level Test #63-2 (Not used)
Test Objective                               Test Method                                 Acceptance Criteria
Test Objective Test Method Acceptance Criteria i.
: i. Verify the reactor trip logic fails to a  This test will verify initiation of a trip  i. Loss of electrical power in a safe state such that loss of electrical state for MPS separation groups on loss          separation group results in a reactor power to an MPS separation group         of power to that separation group.              trip state for that separation group.
Verify the reactor trip logic fails to a safe state such that loss of electrical power to an MPS separation group results in a reactor trip state for that separation group.
results in a reactor trip state for that Component actuation is not required or [ITAAC 02.05.14]
ii.
separation group.                        verified.
Verify the ESF logic fails to a safe state such that loss of electrical power to an MPS separation group results in a predefined safe state for that separation group.
ii. Loss of electrical power in a ii. Verify the ESF logic fails to a safe    i. Remove power from one separation              separation group results in the state such that loss of electrical            group of one reactor trip function         predefined state for that separation power to an MPS separation group              listed in Table 7.1-3 to provide a trip     group.
This test will verify initiation of a trip state for MPS separation groups on loss of power to that separation group.
results in a predefined safe state for        state for that separation group.       [ITAAC 02.05.15]
Component actuation is not required or verified.
that separation group.                        Repeat tests for all separation groups for all reactor trip functions.
i.
ii. Remove power from one separation group of one ESF actuation function listed in Table 7.1-4 to provide a predefined state for that separation group.
Remove power from one separation group of one reactor trip function listed in Table 7.1-3 to provide a trip state for that separation group.
Repeat tests for all separation groups for all reactor trip functions.
ii.
Remove power from one separation group of one ESF actuation function listed in Table 7.1-4 to provide a predefined state for that separation group.
Repeat tests for all separation groups for all ESF actuation functions.
Repeat tests for all separation groups for all ESF actuation functions.
Tier 2                                                        14.2-147                                              Draft Revision 3
i.
Loss of electrical power in a separation group results in a reactor trip state for that separation group.
[ITAAC 02.05.14]
ii.
Loss of electrical power in a separation group results in the predefined state for that separation group.
[ITAAC 02.05.15]
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-148 Draft Revision 3 System Level Test #63-3 Test Objective Test Method Acceptance Criteria Verify each ECCS reactor vent valve (RVV) and reactor recirculation valve (RRV) operates to satisfy its ESF-actuated design stroke time.
System Level Test #63-3 Test Objective                           Test Method                                 Acceptance Criteria Verify each ECCS reactor vent valve (RVV) This test will verify the stroke time of    Each ECCS RRV and RVV travels from fully and reactor recirculation valve (RRV)     each RRV and RVV by actuating the          closed to fully open in less than or equal operates to satisfy its ESF-actuated     valves with RCS pressure below the          to the time specified in Technical design stroke time.                      inadvertent actuation block                Specifications.
i.
: i. Verify MPS operating bypass         setpoint.operation of each operating        i. a. The operating bypasses are interlocks are automatically         bypass interlock and operating bypass                automatically established.
Verify MPS operating bypass interlocks are automatically established when the associated interlock condition is satisfied and automatically removed when the condition is not satisfied.
established when the associated     permissive. Component actuation is not
ii.
: b. The operating bypasses are interlock condition is satisfied and required or verified.
Verify MPS operating bypasses can be manually established when the associated permissive condition is satisfied and automatically removed when the condition is not satisfied.
automatically removed.
iii. Verify MCR alarms when operating bypasses are established.
automatically removed when the      i. Close all RVVs and RRVs.
This test will verify the stroke time of each RRV and RVV by actuating the valves with RCS pressure below the inadvertent actuation block setpoint.operation of each operating bypass interlock and operating bypass permissive. Component actuation is not required or verified.
[ITAAC 02.05.18]
i.
condition is not satisfied.          ii. Verify RCS pressure is below the ii. Verify MPS operating bypasses can          inadvertent actuation block setpoint   ii. a. The operating bypasses can be be manually established when the          specified in Technical Specifications.          manually established.
Close all RVVs and RRVs.
associated permissive condition is  iii. Actuate ECCS using the manual ECCS         b. The operating bypasses are satisfied and automatically removed      actuation switches in the MCR.                  automatically removed.
ii.
when the condition is not satisfied. Table 7.1-5 contains the following         [ITAAC 02.05.19]
Verify RCS pressure is below the inadvertent actuation block setpoint specified in Technical Specifications.
iii. Verify MCR alarms when operating    information:                               iii. Each established operating bypass is bypasses are established.                                                            alarmed in the MCR.
iii. Actuate ECCS using the manual ECCS actuation switches in the MCR.
* The identification of each operating bypass interlock and operating bypass [ITAAC 02.05.22]
Table 7.1-5 contains the following information:
permissive and their logic.
* The identification of each operating bypass interlock and operating bypass permissive and their logic.
* The function of the operating bypass
* The function of the operating bypass i.
: i. a. Simulate the logic for an operating bypass interlock.
a.
: b. Remove the logic.
Simulate the logic for an operating bypass interlock.
b.
Remove the logic.
Repeat test for all operating bypass interlocks.
Repeat test for all operating bypass interlocks.
ii. a. Simulate the logic for an operating bypass permissive and manually establish the operating bypass.
ii.
: b. Remove the logic.
a.
Simulate the logic for an operating bypass permissive and manually establish the operating bypass.
b.
Remove the logic.
Repeat test for all operating bypass permissives.
Repeat test for all operating bypass permissives.
Tier 2                                                      14.2-148                                            Draft Revision 3
Each ECCS RRV and RVV travels from fully closed to fully open in less than or equal to the time specified in Technical Specifications.
i.
a.
The operating bypasses are automatically established.
b.
The operating bypasses are automatically removed.
[ITAAC 02.05.18]
ii.
a.
The operating bypasses can be manually established.
b.
The operating bypasses are automatically removed.
[ITAAC 02.05.19]
iii. Each established operating bypass is alarmed in the MCR.
[ITAAC 02.05.22]
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-149 Draft Revision 3 System Level Test #63-4 Test #63-4 is performed concurrently with Test #63-6 which operates all of the ESF actuation valves during hot functional testing.
System Level Test #63-4 Test #63-4 is performed concurrently with Test #63-6 which operates all of the ESF actuation valves during hot functional testing.
Test #63-4 records the stroke times of DHRS actuation valves as they travel to their ESF-actuated position with the RCS pressure at normal operating pressure.
Test #63-4 records the stroke times of DHRS actuation valves as they travel to their ESF-actuated position with the RCS pressure at normal operating pressure.
Test Objective                             Test Method                                 Acceptance Criteria Verify each DHRS actuation valve           Time the operation of all DHRS actuation Each DHRS actuation valve travels from operates to satisfy its ESF-actuated      valves as they actuate to their ESF         fully closed to fully open in less than or design stroke time.                        position during the manual ESF               equal to the time specified in Technical
Test Objective Test Method Acceptance Criteria Verify each DHRS actuation valve operates to satisfy its ESF-actuated design stroke time.
: i. Verify the MPS automatically initiates  actuation   testing in Test #63-6.This test Specifications.
i.
a reactor trip signal.                 verifies initiation of reactor trip signals i. A reactor trip signal is displayed in and ESF actuation signals only.                  the MCR for all 2 out of 4 logic ii. Verify the MPS automatically initiates Component actuation is not required or            combinations of each reactor trip an ESF actuation signal.
Verify the MPS automatically initiates a reactor trip signal.
verified.                                        function.
ii.
Test #63-1 is completed in order to use      [ITAAC 02.05.08]
Verify the MPS automatically initiates an ESF actuation signal.
the associated test signals.
Time the operation of all DHRS actuation valves as they actuate to their ESF position during the manual ESF actuation testing in Test #63-6.This test verifies initiation of reactor trip signals and ESF actuation signals only.
ii. An ESF actuation signal is displayed Real or simulated CNTS level, reactor trip        in the MCR for all 2 out of 4 logic breaker position, RCS temperature and            combinations each reactor ESF NMS signals may be required to provide            actuation function.
Component actuation is not required or verified.
the necessary bypass interlock status for
Test #63-1 is completed in order to use the associated test signals.
Real or simulated CNTS level, reactor trip breaker position, RCS temperature and NMS signals may be required to provide the necessary bypass interlock status for either the reactor trip or ESF actuation to be available.
i.
Initiate an automatic reactor trip signal by simulating a reactor trip function for each function listed in Table 7.1-3.
All combinations of the 2 out of 4 logic are tested for each reactor trip function.
ii.
Initiate an automatic ESF actuation signal by simulating an ESF actuation function for each function listed in Table 7.1-4. All combinations of the 2 out of 4 logic must be actuated for each ESF function.
Each DHRS actuation valve travels from fully closed to fully open in less than or equal to the time specified in Technical Specifications.
i.
A reactor trip signal is displayed in the MCR for all 2 out of 4 logic combinations of each reactor trip function.
[ITAAC 02.05.08]
ii.
An ESF actuation signal is displayed in the MCR for all 2 out of 4 logic combinations each reactor ESF actuation function.
[ITAAC 02.05.09]
[ITAAC 02.05.09]
either the reactor trip or ESF actuation to be available.
: i. Initiate an automatic reactor trip signal by simulating a reactor trip function for each function listed in Table 7.1-3.
All combinations of the 2 out of 4 logic are tested for each reactor trip function.
ii. Initiate an automatic ESF actuation signal by simulating an ESF actuation function for each function listed in Table 7.1-4. All combinations of the 2 out of 4 logic must be actuated for each ESF function.
System Level Test #63-5 (Not used)
System Level Test #63-5 (Not used)
Test Objective                             Test Method                                 Acceptance Criteria
Test Objective Test Method Acceptance Criteria i.
: i. Verify the MPS manually actuates a     This test will verify the automatic and     i. The reactor trip breakers open.
Verify the MPS manually actuates a reactor trip.
reactor trip.                          manual reactor trips. Reactor trip           [ITAAC 02.05.12]
ii.
ii. Verify the MPS automatically          actuation is verified by reactor trip actuates a reactor trip.              breaker actuation. Only one trip function is required to perform the automatic         ii. The reactor trip breakers open.
Verify the MPS automatically actuates a reactor trip.
reactor trip,                               [ITAAC 02.05.10]
This test will verify the automatic and manual reactor trips. Reactor trip actuation is verified by reactor trip breaker actuation. Only one trip function is required to perform the automatic reactor trip, i.
: i. Initiate a manual reactor trip from the MCR.
Initiate a manual reactor trip from the MCR.
ii. Initiate an automatic reactor trip signal by simulating any single reactor trip function.
ii.
Tier 2                                                      14.2-149                                              Draft Revision 3
Initiate an automatic reactor trip signal by simulating any single reactor trip function.
i.
The reactor trip breakers open.
[ITAAC 02.05.12]
ii.
The reactor trip breakers open.
[ITAAC 02.05.10]
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-150 Draft Revision 3 System Level Test #63-6 Test 63-6 is performed at hot functional testing concurrently with TGS test #33-1 (reference 14.2.12.33) to allow testing of ESF actuations at normal operating pressure and elevated temperatures. Test #33-1 heats the RCS from ambient conditions to the highest temperature achievable by MHS heating. These hot functional testing conditions provide the highest differential pressure and temperature conditions that can be achieved prior to fuel load.
System Level Test #63-6 Test 63-6 is performed at hot functional testing concurrently with TGS test #33-1 (reference 14.2.12.33) to allow testing of ESF actuations at normal operating pressure and elevated temperatures. Test #33-1 heats the RCS from ambient conditions to the highest temperature achievable by MHS heating. These hot functional testing conditions provide the highest differential pressure and temperature conditions that can be achieved prior to fuel load.
Test Objective Test Method Acceptance Criteria i.
Test Objective                             Test Method                                 Acceptance Criteria
Verify the MPS can manually actuate ESF equipment from the MCR.
: i. Verify the MPS can manually actuate Figure 7.1-1 identifies all ESF actuation i. The MPS actuates the ESF equipment ESF equipment from the MCR.          signals such as CVCS isolation and CNTS         to perform its safety-related function ii. Verify deliberate operator action is isolation.                                        as described in Table 7.1-4.
ii.
required to return the ESF actuated Table 7.1-4 lists all of the ESF functions.       Each ECCS valve opens after receipt equipment to its non-actuated        This test will verify the design response       of an ESF signal and after RCS position.                             of ESF actuation signals using both a           pressure is decreased to the iii. Verify the MPS can automatically      single manual ESF signal and a single ESF       threshold pressure for operation of actuate ESF equipment from all ESF function to provide an automatic ESF               the inadvertent actuation block actuation signals.                   actuation signal. All manual and               described in described in Section automatic ESF functionsactuation signals        6.3.2.2.
Verify deliberate operator action is required to return the ESF actuated equipment to its non-actuated position.
are tested.                                [ITAAC 02.01.13]
iii. Verify the MPS can automatically actuate ESF equipment from all ESF actuation signals.
The RCS is at normal operating pressure [ITAAC 02.01.14]
Figure 7.1-1 identifies all ESF actuation signals such as CVCS isolation and CNTS isolation.
supplying bypass steam to the              [ITAAC 02.01.15]
Table 7.1-4 lists all of the ESF functions.
condenser.                                  [ITAAC 02.01.18]
This test will verify the design response of ESF actuation signals using both a single manual ESF signal and a single ESF function to provide an automatic ESF actuation signal. All manual and automatic ESF functionsactuation signals are tested.
: i. Initiate a manual ESF actuation signal [ITAAC 02.01.19]
The RCS is at normal operating pressure supplying bypass steam to the condenser.
from the MCR.
i.
Initiate a manual ESF actuation signal from the MCR.
ii.
a.
Attempt to operate the actuated ESF equipment from the MCR.
b.
Remove the manual ESF actuation signal and attempt to operate the actuated ESF equipment from the MCR.
c.
Use the MCR enable nonsafety control switch to allow operation of the ESF actuated equipment from the MCR.
Repeat for all MCR manual ESF actuations.
iii. Initiate an automatic ESF actuation signal. The test may be performed with the RCS at ambient conditions.
Repeat for all ESF actuation signals.
i.
The MPS actuates the ESF equipment to perform its safety-related function as described in Table 7.1-4.
Each ECCS valve opens after receipt of an ESF signal and after RCS pressure is decreased to the threshold pressure for operation of the inadvertent actuation block described in described in Section 6.3.2.2.
[ITAAC 02.01.13]
[ITAAC 02.01.14]
[ITAAC 02.01.15]
[ITAAC 02.01.18]
[ITAAC 02.01.19]
[ITAAC 02.01.20]
[ITAAC 02.01.20]
ii. a. Attempt to operate the actuated ESF equipment from the MCR.      [ITAAC 02.05.13]
[ITAAC 02.05.13]
: b. Remove the manual ESF              [ITAAC 02.05.16]
[ITAAC 02.05.16]
actuation signal and attempt to  ii. a. The actuated equipment cannot operate the actuated ESF                  be operated from the MCR.
ii.
equipment from the MCR.              b. The actuated equipment cannot
a.
: c. Use the MCR enable nonsafety                be operated from the MCR.
The actuated equipment cannot be operated from the MCR.
control switch to allow operation    c. The ESF equipment can be of the ESF actuated equipment            operated from the MCR.
b.
from the MCR.
The actuated equipment cannot be operated from the MCR.
c.
The ESF equipment can be operated from the MCR.
[ITAAC 02.01.13]
[ITAAC 02.01.13]
Repeat for all MCR manual ESF
[ITAAC 02.01.14]
[ITAAC 02.01.14]
actuations.
[ITAAC 02.01.15]
[ITAAC 02.01.15]
iii. Initiate an automatic ESF actuation signal. The test may be performed      [ITAAC 02.05.16]
[ITAAC 02.05.16]
with the RCS at ambient conditions. iii. The MPS automatically actuates the Repeat for all ESF actuation signals.      ESF equipment to perform its safety-related function as described in Table 7.1-4.
iii. The MPS automatically actuates the ESF equipment to perform its safety-related function as described in Table 7.1-4.
[ITAAC 02.01.13]
[ITAAC 02.01.13]
[ITAAC 02.01.14]
[ITAAC 02.01.14]
Line 1,158: Line 2,031:
[ITAAC 02.05.11]
[ITAAC 02.05.11]
[ITAAC 02.05.16]
[ITAAC 02.05.16]
Tier 2                                                      14.2-150                                            Draft Revision 3
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-151 Draft Revision 3 System Level Test #63-7 Test #63-7 is performed concurrently with Test #63-6 which operates all of the ESF actuation valves during hot functional testing.
System Level Test #63-7 Test #63-7 is performed concurrently with Test #63-6 which operates all of the ESF actuation valves during hot functional testing.
Test #63-7 records the stroke times of containment isolation valves (CIVs) as they travel to their ESF-actuated position with the RCS pressure at normal operating pressure.
Test #63-7 records the stroke times of containment isolation valves (CIVs) as they travel to their ESF-actuated position with the RCS pressure at normal operating pressure.
Test Objective                             Test Method                                 Acceptance Criteria Verify the CIVs operate to satisfy their   Table 6.2-5 contains the design closure i. Each containment isolation valve ESF-actuated design stroke time.           time for containment isolation valves.          travels from fully open to fully closed in less than or equal to the time listed in Table 6.2-5Section 6.2.4.3 after Time the operation of all CIVs as they receipt of a containment isolation actuate to their ESF position during the signal.
Test Objective Test Method Acceptance Criteria Verify the CIVs operate to satisfy their ESF-actuated design stroke time.
manual ESF actuation testing in Test #63-
Table 6.2-5 contains the design closure time for containment isolation valves.
: 6.                                          [ITAAC   02.01.08]
Time the operation of all CIVs as they actuate to their ESF position during the manual ESF actuation testing in Test #63-
: 6.
i.
Each containment isolation valve travels from fully open to fully closed in less than or equal to the time listed in Table 6.2-5Section 6.2.4.3 after receipt of a containment isolation signal.
[ITAAC 02.01.08]
[ITAAC 02.05.17]
[ITAAC 02.05.17]
System Level Test #63-8 This test will verify the time response of MPS reactor trip and ESF actuation signals. The reactor trip test verifies response time through reactor trip breaker actuation. The ESF response time is tested through the de-energization of the associated solenoid valve or the opening of the pressurizer heater supply breaker. ESF valve response times are tested in Test #63-7.
System Level Test #63-8 This test will verify the time response of MPS reactor trip and ESF actuation signals. The reactor trip test verifies response time through reactor trip breaker actuation. The ESF response time is tested through the de-energization of the associated solenoid valve or the opening of the pressurizer heater supply breaker. ESF valve response times are tested in Test #63-7.
Test Objective                             Test Method                                 Acceptance Criteria Verify the MPS response times from         Section 7.1.4 contains a description of     The MPS reactor trip functions listed in sensor output through:                      design basis event actuation delays         Table 7.1-3 and ESF functions listed in
Test Objective Test Method Acceptance Criteria Verify the MPS response times from sensor output through:
: i. reactor trip breaker actuation for the assumed in the plant safety analysis and Table 7.1-4 have response times that are reactor trip function.                listed in Table 7.1-6. The actuation delays less than or equal to the design basis do not include ESF actuated component safety analysis response time ii. de-energization of the associated delays for actuated valves.                assumptions in Table 7.1-6.
i.
solenoid valve for ESF-actuated valves.
reactor trip breaker actuation for the reactor trip function.
iii. opening of the pressurizer heater      Perform a time response test for the       [ITAAC 02.05.17]
ii.
supply breaker for the pressurizer    actuation signals listed in Table 7.1-6.
de-energization of the associated solenoid valve for ESF-actuated valves.
heater trip.
iii. opening of the pressurizer heater supply breaker for the pressurizer heater trip.
Section 7.1.4 contains a description of design basis event actuation delays assumed in the plant safety analysis and listed in Table 7.1-6. The actuation delays do not include ESF actuated component delays for actuated valves.
Perform a time response test for the actuation signals listed in Table 7.1-6.
Response time testing for ESF actuated CNTS, DHRS, ECCS and DWS valves are found in Test #63-7.
Response time testing for ESF actuated CNTS, DHRS, ECCS and DWS valves are found in Test #63-7.
The MPS reactor trip functions listed in Table 7.1-3 and ESF functions listed in Table 7.1-4 have response times that are less than or equal to the design basis safety analysis response time assumptions in Table 7.1-6.
[ITAAC 02.05.17]
System Level Test #63-9 (Not used)
System Level Test #63-9 (Not used)
Test Objective                             Test Method                                 Acceptance Criteria Verify protective measures are provided     Section 7.2.9.1 provides the manual         All actions described in Section 7.2.9.1 to restrict modifications to the MPS        actions required to modify tunable         are required to modify tunable tunable parameters.                        parameters.                                parameters.
Test Objective Test Method Acceptance Criteria Verify protective measures are provided to restrict modifications to the MPS tunable parameters.
A test will be performed to verify that all [ITAAC 02.05.02]
Section 7.2.9.1 provides the manual actions required to modify tunable parameters.
manual actions described in Section 7.2.9.1 are required to modify tunable parameters.
A test will be performed to verify that all manual actions described in Section 7.2.9.1 are required to modify tunable parameters.
Tier 2                                                        14.2-151                                            Draft Revision 3
All actions described in Section 7.2.9.1 are required to modify tunable parameters.
[ITAAC 02.05.02]
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-152 Draft Revision 3 System Level Test #63-10 Test Objective Test Method Acceptance Criteria i.
System Level Test #63-10 Test Objective                           Test Method                                 Acceptance Criteria
Verify the MPS is capable of performing its safety-related functions when one of its separation groups is placed in maintenance bypass.Verify MCR alarms when automatic operating bypasses are established.
: i. Verify the MPS is capable of           Section 7.2.4.2 discusses the operation of i. a. The SFM out of service provides a performing its safety-related        the MPS maintenance bypass operation               no trip to the respective functions when one of its separation for the MPS safety function module                 scheduling and voting groups is placed in maintenance      (SFM).The purpose of this test is to verify         module.Each automatic bypass.Verify MCR alarms when        MCR alarms, not to verify the logic of the         operating bypass is alarmed in automatic operating bypasses are    operating bypasses. Any signal that                 the MCR.
ii.
established.                        establishes the bypass can be used.         [ITAAC 02.05.22]
Verify MCR alarms when manual operating bypasses are established.
ii. Verify MCR alarms when manual        Table 7.1-5 contains a list of operating   ii. b. There is no change to the 2 out of operating bypasses are established. bypasses.                                           4 voting logic for the separation iii. Verify MPS maintenance bypasses                                                          group.Each manual operating are indicated in the main control    i. For automatically established                 bypass is alarmed in the MCR.
iii. Verify MPS maintenance bypasses are indicated in the main control room.
room.                                    operating bypasses perform the         [ITAAC 02.05.221]
Section 7.2.4.2 discusses the operation of the MPS maintenance bypass operation for the MPS safety function module (SFM).The purpose of this test is to verify MCR alarms, not to verify the logic of the operating bypasses. Any signal that establishes the bypass can be used.
following:
Table 7.1-5 contains a list of operating bypasses.
iii. The inoperable status of the SFM is a..Simulate the logic required to           provided in the MCR.
i.
establish the operating bypass.
For automatically established operating bypasses perform the following:
[ITAAC 02.05.23]
a..Simulate the logic required to establish the operating bypass.
b..Remove the logic.
b..Remove the logic.
c..Repeat for each automatically established operating bypass.
c..Repeat for each automatically established operating bypass.
: i. For manually established operating bypasses perform the following:
i.
For manually established operating bypasses perform the following:
a..Simulate the logic required to allow the operating bypass to be established.
a..Simulate the logic required to allow the operating bypass to be established.
b..Manually establish the operating bypass.
b..Manually establish the operating bypass.
c..Repeat the logic.
c..Repeat the logic.
d..Repeat for each manually established operating bypass.
d..Repeat for each manually established operating bypass.
ii. a. Place an SFM in maintenance bypass by using the out of service and trip/bypass switches associated with the SFM.
ii.
: b. Repeat tests for all SFMs.
a.
Tier 2                                                       14.2-152                                          Draft Revision 3
Place an SFM in maintenance bypass by using the out of service and trip/bypass switches associated with the SFM.
b.
Repeat tests for all SFMs.
i.
a.
The SFM out of service provides a no trip to the respective scheduling and voting module.Each automatic operating bypass is alarmed in the MCR.
[ITAAC 02.05.22]
ii.
b.
There is no change to the 2 out of 4 voting logic for the separation group.Each manual operating bypass is alarmed in the MCR.
[ITAAC 02.05.221]
iii. The inoperable status of the SFM is provided in the MCR.
[ITAAC 02.05.23]
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-153 Draft Revision 3 System Level Test #63-11 Test Objective Test Method Acceptance Criteria Verify the controls located on the operator workstations in the MCR operate to perform important human actions.
System Level Test #63-11 Test Objective                       Test Method                               Acceptance Criteria Verify the controls located on the   Test is performed to verify operation of   i. Water is added to the RCS.
Test is performed to verify operation of redundant trains and divisions.
operator workstations in the MCR      redundant trains and divisions.            ii. Water is added to the RCS.
i.
operate to perform important human    i. Use MPS Division I controls, BAS     iii. Water is added to containment.
Use MPS Division I controls, BAS supply pump A train, and CVCS makeup pump A train to perform the following:A test will be performed to verify the CVCS can add water to the RCS after a containment isolation signal using the O-1 override switch and MCR controls.
actions.                                  supply pump A train, and CVCS iv. Water is added to containment.
a.
makeup pump A train to perform the following:A test will be performed to [ITAAC 02.05.20]
Insert a manual containment isolation signal.
verify the CVCS can add water to the [ITAAC 02.05.26]
b.
RCS after a containment isolation     (i., and ii., iii., and iv.)
Override the containment isolation signal using the CNTS isolation override switch.
signal using the O-1 override switch and MCR controls.
c.
: a. Insert a manual containment isolation signal.
Enable nonsafety controls using the enable nonsafety control switch.
: b. Override the containment isolation signal using the CNTS isolation override switch.
d.
: c. Enable nonsafety controls using the enable nonsafety control switch.
Using an operator workstation in the MCR, align the BAS, CVCS, and CNTS to add inventory to the RCS.
: d. Using an operator workstation in the MCR, align the BAS, CVCS, and CNTS to add inventory to the RCS.
ii.
ii. Use MPS Division II controls, BAS supply pump B train, and CVCS makeup pump B train to perform the following:A test will be performed to verify the CFDS can add water to containment after a containment isolation signal using the O-1 override switch and MCR controls.
Use MPS Division II controls, BAS supply pump B train, and CVCS makeup pump B train to perform the following:A test will be performed to verify the CFDS can add water to containment after a containment isolation signal using the O-1 override switch and MCR controls.
: a. Insert a manual containment isolation signal.
a.
: b. Override the containment isolation signal using the CNTS isolation override switch.
Insert a manual containment isolation signal.
: c. Enable nonsafety controls using the enable nonsafety control switch.
b.
: d. Using an operator workstation in the MCR, align the BAS, CVCS, and CNTS to add inventory to the RCS.
Override the containment isolation signal using the CNTS isolation override switch.
c.
Enable nonsafety controls using the enable nonsafety control switch.
d.
Using an operator workstation in the MCR, align the BAS, CVCS, and CNTS to add inventory to the RCS.
iii. Use MPS Division I controls and CFDS pump A train to perform the following:
iii. Use MPS Division I controls and CFDS pump A train to perform the following:
: a. Insert a manual containment isolation signal.
a.
: b. Override the containment isolation signal using the CNTS isolation override switch.
Insert a manual containment isolation signal.
Tier 2                                                  14.2-153                                              Draft Revision 3
b.
Override the containment isolation signal using the CNTS isolation override switch.
i.
Water is added to the RCS.
ii.
Water is added to the RCS.
iii. Water is added to containment.
iv. Water is added to containment.
[ITAAC 02.05.20]
[ITAAC 02.05.26]
(i., and ii., iii., and iv.)
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                     Initial Plant Test Program Table 14.2-63: Module Protection System Test #63 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-154 Draft Revision 3 c.
: c. Enable nonsafety controls using the enable nonsafety control switch.
Enable nonsafety controls using the enable nonsafety control switch.
: d. Using an operator workstation in the MCR, align the CFDS and CNTS to add inventory to containment.
d.
Using an operator workstation in the MCR, align the CFDS and CNTS to add inventory to containment.
iv. Use MPS Division II controls and CFDS pump B train to perform the following:
iv. Use MPS Division II controls and CFDS pump B train to perform the following:
: a. Insert a manual containment isolation signal.
a.
: b. Override the containment isolation signal using the CNTS isolation override switch.
Insert a manual containment isolation signal.
: c. Enable nonsafety controls using the enable nonsafety control switch.
b.
: d. Using an operator workstation in the MCR, align the CFDS and CNTS to add inventory to containment.
Override the containment isolation signal using the CNTS isolation override switch.
Tier 2                                            14.2-154                        Draft Revision 3
c.
Enable nonsafety controls using the enable nonsafety control switch.
d.
Using an operator workstation in the MCR, align the CFDS and CNTS to add inventory to containment.
Table 14.2-63: Module Protection System Test #63 (Continued)


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-65: Neutron Monitoring System Test # 65 Preoperational test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-156 Draft Revision 3 Table 14.2-65: Neutron Monitoring System Test # 65 Preoperational test is required to be performed for each NPM.
The NMS is described in Section 7.0.4.2 and the functions verified by this test and power ascension testing are:
The NMS is described in Section 7.0.4.2 and the functions verified by this test and power ascension testing are:
System Function                           System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
: 1. The NMS supports the MPS by           safety-related                             Test #63-41 providing neutron flux data for                                                  Neutron Monitoring System Power various reactor trips.                                                            Range Flux Calibration Test #92
1.
: 2. The NMS supports the MPS by           nonsafety-related                           Test #66-2 providing information signals for PAM.
The NMS supports the MPS by providing neutron flux data for various reactor trips.
: 3. The NMS supports the MPS by           nonsafety-related                          Test #66-2 providing information signals for PAM during CNV flooded conditions.
safety-related Test #63-41 Neutron Monitoring System Power Range Flux Calibration Test #92 2.
Prerequisites Prerequisites associated with NMS testing are identified in the referenced test abstract cited under the Function Verified by Test # heading.
The NMS supports the MPS by providing information signals for PAM.
Component Level Tests None System Level Tests None Tier 2                                                    14.2-156                                            Draft Revision 3
nonsafety-related Test #66-2 3.
The NMS supports the MPS by providing information signals for PAM during CNV flooded conditions.
nonsafety-related Test #66-2 Prerequisites Prerequisites associated with NMS testing are identified in the referenced test abstract cited under the Function Verified by Test # heading.
Component Level Tests None System Level Tests None


NuScale Final Safety Analysis Report                                                                     Initial Plant Test Program Table 14.2-66: Safety Display and Indication System Test # 66 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-159 Draft Revision 3 System Level Test #66-1 Test 66-1 is conducted concurrently with TGS test# 33-1 which warms the RCS from ambient conditions to the highest temperature achievable by MHS heating.
System Level Test #66-1 Test 66-1 is conducted concurrently with TGS test# 33-1 which warms the RCS from ambient conditions to the highest temperature achievable by MHS heating.
Test Objective Test Method Acceptance Criteria Verify that the output signals from the NPM level, pressure, temperature and flow instruments listed in Table 7.1-2 properly trend while increasing RCS temperature and pressure.
Test Objective                           Test Method                                   Acceptance Criteria Verify that the output signals from the   Increase RCS temperature from ambient Trended data shows agreement NPM level, pressure, temperature and     to the highest temperature achievable between the two divisional instruments flow instruments listed in Table 7.1-2   by MHS heating.                              or the four safety group instruments properly trend while increasing RCS       Using the MCS historian record the           monitoring the same variable.All temperature and pressure.                engineering values for the output of the instruments track within acceptable Note: This is not a verification of      instruments described in the test             design limits.
Note: This is not a verification of instrument calibrations.
instrument calibrations.                  objective. Record data at approximately (Use Technical Specification channel 50 °F intervals from ambient temperature check limits, when applicable) to the maximum RCS temperature.
Increase RCS temperature from ambient to the highest temperature achievable by MHS heating.
Using the MCS historian record the engineering values for the output of the instruments described in the test objective. Record data at approximately 50 °F intervals from ambient temperature to the maximum RCS temperature.
Note: Instrument signals are provided to the module-specific SDIS display and the main control room workstations.
Note: Instrument signals are provided to the module-specific SDIS display and the main control room workstations.
System Level Test #66-2 Test Objective                           Test Method                                   Acceptance Criteria
Trended data shows agreement between the two divisional instruments or the four safety group instruments monitoring the same variable.All instruments track within acceptable design limits.
: i. Verify PAM Type B and C variables are i. Simulate an injection signal for the i. The PAM Type B and C variables displayed on the module-specific         PAM Type B and C variables listed in         listed in Table 7.1-7 are retrieved SDIS displays in the MCR.                Table 7.1-7.                                 and displayed on the SDI displays in ii. Verify alarms associated with PAM    ii. Increase or decrease a simulated               the MCR.
(Use Technical Specification channel check limits, when applicable)
Type B and C variables are retrieved      injection signal for the PAM Type B [ITAAC 02.05.25]
System Level Test #66-2 Test Objective Test Method Acceptance Criteria i.
in the MCR.                              and C variables listed in Table 7.1-7 to iii. Verify module-specific PAM Type D        obtain its associated alarm.             ii. The alarms associated with the PAM variables are displayed on the      iii. Simulate an injection signal for the         Type B and C variables listed in Table module-specific SDIS displays in the      PAM Type D variables listed in Table         7.1-7 are retrieved and displayed on MCR.                                     7.1-7                                         the SDI displays in the MCR.
Verify PAM Type B and C variables are displayed on the module-specific SDIS displays in the MCR.
ii.
Verify alarms associated with PAM Type B and C variables are retrieved in the MCR.
iii. Verify module-specific PAM Type D variables are displayed on the module-specific SDIS displays in the MCR.
i.
Simulate an injection signal for the PAM Type B and C variables listed in Table 7.1-7.
ii.
Increase or decrease a simulated injection signal for the PAM Type B and C variables listed in Table 7.1-7 to obtain its associated alarm.
iii. Simulate an injection signal for the PAM Type D variables listed in Table 7.1-7 i.
The PAM Type B and C variables listed in Table 7.1-7 are retrieved and displayed on the SDI displays in the MCR.
[ITAAC 02.05.25]
ii.
The alarms associated with the PAM Type B and C variables listed in Table 7.1-7 are retrieved and displayed on the SDI displays in the MCR.
iii. The PAM Type D variables listed in Table 7.1-7 are retrieved and displayed on the SDIS displays in the MCR.
iii. The PAM Type D variables listed in Table 7.1-7 are retrieved and displayed on the SDIS displays in the MCR.
Tier 2                                                      14.2-159                                              Draft Revision 3
Table 14.2-66: Safety Display and Indication System Test # 66 (Continued)


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-67: Fixed-Area Radiation Monitoring System Test # 67 Preoperational test is required to be performed once.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-160 Draft Revision 3 Table 14.2-67: Fixed-Area Radiation Monitoring System Test # 67 Preoperational test is required to be performed once.
The fixed-area radiation monitoring system is described in Section 12.3.4 and the function verified by this test is:
The fixed-area radiation monitoring system is described in Section 12.3.4 and the function verified by this test is:
System Function                           System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The fixed-area radiation monitoring       nonsafety-related                          Component-level test system supports the following buildings by monitoring radiation levels:
The fixed-area radiation monitoring system supports the following buildings by monitoring radiation levels:
* ANB
* ANB
* CRB
* CRB
* RWB
* RWB
* TGB
* TGB
* RXB RMS function verified by another test is:
* RXB nonsafety-related Component-level test RMS function verified by another test is:
System Function                           System Function Categorization             Function Verified by Test #
System Function System Function Categorization Function Verified by Test #
The RMS supports the RXB by monitoring nonsafety-related                              SDIS Test #66-2 radiation levels in the building in proximity of the bioshield.
The RMS supports the RXB by monitoring radiation levels in the building in proximity of the bioshield.
Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
nonsafety-related SDIS Test #66-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.
Component Level Tests Test Objective                             Test Method                               Acceptance Criteria
Component Level Tests Test Objective Test Method Acceptance Criteria i.
: i. Verify each fixed airborne radiation Actuate the check source on a fixed           MCR display and local, visual monitors response to an alarm        airborne radiation monitor listed in Table observation indicate the following:
Verify each fixed airborne radiation monitors response to an alarm condition known source.
condition known source.                12.3-110.                                  i. The main control room audible and Repeat test for the remainder of fixed        visual alarms are received.
Actuate the check source on a fixed airborne radiation monitor listed in Table 12.3-110.
airborne radiation monitors.              ii. The local readout, audible alarm and visual alarm are received.
Repeat test for the remainder of fixed airborne radiation monitors.
ii. Verify each fixed area radiation       Actuate the check source on a fixed area MCR display and local, visual monitors response to an alarm        radiation monitor listed in                observation indicate the following:
MCR display and local, visual observation indicate the following:
condition known source.                Table 12.3-121.                            i. The main control room audible and Repeat test for the remainder of fixed        visual alarms are received.
i.
area radiation monitors.                  ii. The local readout, audible alarm and visual alarm are received.
The main control room audible and visual alarms are received.
System Level Tests None Tier 2                                                    14.2-160                                            Draft Revision 3
ii.
The local readout, audible alarm and visual alarm are received.
ii.
Verify each fixed area radiation monitors response to an alarm condition known source.
Actuate the check source on a fixed area radiation monitor listed in Table 12.3-121.
Repeat test for the remainder of fixed area radiation monitors.
MCR display and local, visual observation indicate the following:
i.
The main control room audible and visual alarms are received.
ii.
The local readout, audible alarm and visual alarm are received.
System Level Tests None


NuScale Final Safety Analysis Report                                                         Initial Plant Test Program Table 14.2-70: Hot Functional Testing Test # 70 Preoperational testing is required to be performed once for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-164 Draft Revision 3 Table 14.2-70: Hot Functional Testing Test # 70 Preoperational testing is required to be performed once for each NPM.
The following identifies the tests employed in support of the performance of hot functional testing.
The following identifies the tests employed in support of the performance of hot functional testing.
Hot Functional Testing Tests Test Objective                       Verified by Test #     Tested Function Categorization CES                             i. Verifies the automatic         i. CES Test #41-1      nonsafety-related operation of the CES to     ii. CES Test #41-2 establish and maintain       iii. CES Test #41-3 design vacuum for the iv. CES Test #41-4 CNV.
Hot Functional Testing Tests Test Objective Verified by Test #
ii. Verify radiation isolation on high radiation level in the ABS.
Tested Function Categorization CES i.
Verifies the automatic operation of the CES to establish and maintain design vacuum for the CNV.
ii.
Verify radiation isolation on high radiation level in the ABS.
iii. Verifies the CES supports RCS leakage detection.
iii. Verifies the CES supports RCS leakage detection.
iv. Verifies the CES level and pressure instrumentation support leak-before-break leakage detection.
iv. Verifies the CES level and pressure instrumentation support leak-before-break leakage detection.
CVCS                            i. Verifies CVCS automatic        i. CVCS Test #38-1     nonsafety-related operation to maintain        ii. CVCS Test #38-2 pressurizer level.          iii. CVCS Test #38-3 ii. Verifies automatic pressurizer pressure control.
i.
CES Test #41-1 ii.
CES Test #41-2 iii. CES Test #41-3 iv. CES Test #41-4 nonsafety-related CVCS i.
Verifies CVCS automatic operation to maintain pressurizer level.
ii.
Verifies automatic pressurizer pressure control.
iii. Verifies CVCS automatic boration and dilution of the RCS.
iii. Verifies CVCS automatic boration and dilution of the RCS.
ECCS                            i. Each ECCS valve opens          i. MPS Test #63-6      nonsafety-related after receipt of an ESF signal and after RCS pressure is decreased to the threshold pressure for operation of the inadvertent actuation block.
i.
FWS                            i. Verifies the FWS              i. TGS Test #33-1      nonsafety-related automatically controls flow ii. TGS Test #33-1 to the SGs to maintain SG inventory.
CVCS Test #38-1 ii.
ii. Verifies the FWS automatically cools the turbine generator bypass steam flow in the main steam desuperheater.
CVCS Test #38-2 iii. CVCS Test #38-3 nonsafety-related ECCS i.
ICIS                            i. Verifies proper                i. ICIS Test #49-1     nonsafety-related temperature indication is obtained from the ICIS thermocouples.
Each ECCS valve opens after receipt of an ESF signal and after RCS pressure is decreased to the threshold pressure for operation of the inadvertent actuation block.
LRWS                            i. Verifies the LRWS receives i. LRWS Test #35-1         nonsafety-related and processes a gaseous stream from the pressurizer.
i.
Tier 2                                                      14.2-164                                  Draft Revision 3
MPS Test #63-6 nonsafety-related FWS i.
Verifies the FWS automatically controls flow to the SGs to maintain SG inventory.
ii.
Verifies the FWS automatically cools the turbine generator bypass steam flow in the main steam desuperheater.
i.
TGS Test #33-1 ii.
TGS Test #33-1 nonsafety-related ICIS i.
Verifies proper temperature indication is obtained from the ICIS thermocouples.
i.
ICIS Test #49-1 nonsafety-related LRWS i.
Verifies the LRWS receives and processes a gaseous stream from the pressurizer.
i.
LRWS Test #35-1 nonsafety-related


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-70: Hot Functional Testing Test # 70 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-165 Draft Revision 3 MHS i.
MHS                             i. Verifies the MHS is capable   i. TGS Test #33-1            nonsafety-related of heating the RCS to a       ii. TGS Test #33-1 temperature sufficient to     iii. TGS Test #33-1 obtain criticality.
Verifies the MHS is capable of heating the RCS to a temperature sufficient to obtain criticality.
ii. Verifies the MHS is capable of heating the RCS to establish natural circulation flow sufficient to obtain criticality.
ii.
Verifies the MHS is capable of heating the RCS to establish natural circulation flow sufficient to obtain criticality.
iii. Verifies a local grab sample can be obtained from an MHS grab sample device indicated on the MHS piping and instrumentation diagram.
iii. Verifies a local grab sample can be obtained from an MHS grab sample device indicated on the MHS piping and instrumentation diagram.
MPS                            i. Verifies design responses    i. MPS Test #63-6            safety-related to manual ESF signals.       ii. MPS Test #63-7 ii. Verifies containment         iii. MPS Test #63-6 isolation valves closure times.
i.
TGS Test #33-1 ii.
TGS Test #33-1 iii. TGS Test #33-1 nonsafety-related MPS i.
Verifies design responses to manual ESF signals.
ii.
Verifies containment isolation valves closure times.
iii. Verifies the ECCS valves closes when the CVCS provides water to reset the ECCS valves.
iii. Verifies the ECCS valves closes when the CVCS provides water to reset the ECCS valves.
PSS                            i. Verifies sampling capability  i. PSS Test #53-1            nonsafety-related of the primary sampling      ii. PSS Test #53-2 points.                      iii. PSS Test #53-3 ii. Verifies sampling capability of the containment sampling points.
i.
ii. Verifies sampling capability of the secondary sampling points.
MPS Test #63-6 ii.
SDIS                            i. Verify that the output        i. SDIS Test #66-1          nonsafety-related signals from the NPM level, pressure, temperature, and flow instruments listed in Table 7.1-2 properly trend while increasing RCS temperature and pressure.
MPS Test #63-7 iii. MPS Test #63-6 safety-related PSS i.
TGS                            i. Verifies the TGS              i. TGS Test #33-1             nonsafety-related automatically controls       ii. TGS Test #33-2 turbine bypass flow to the   iii. TGS Test #33-1 main condenser.
Verifies sampling capability of the primary sampling points.
ii. Verify the maximum main turbine speed that can be obtained using the MHS to heat the RCS.
ii.
Verifies sampling capability of the containment sampling points.
ii.
Verifies sampling capability of the secondary sampling points.
i.
PSS Test #53-1 ii.
PSS Test #53-2 iii. PSS Test #53-3 nonsafety-related SDIS i.
Verify that the output signals from the NPM level, pressure, temperature, and flow instruments listed in Table 7.1-2 properly trend while increasing RCS temperature and pressure.
i.
SDIS Test #66-1 nonsafety-related TGS i.
Verifies the TGS automatically controls turbine bypass flow to the main condenser.
ii.
Verify the maximum main turbine speed that can be obtained using the MHS to heat the RCS.
iii. Verifies the ECCS valves close when the CVCS provides water to reset the ECCS valves.
iii. Verifies the ECCS valves close when the CVCS provides water to reset the ECCS valves.
Prerequisites Prerequisites associated with performing hot functional testing are identified in the referenced test abstract cited under the Verified by Test # heading.
i.
Tier 2                                                      14.2-165                                          Draft Revision 3
TGS Test #33-1 ii.
TGS Test #33-2 iii. TGS Test #33-1 nonsafety-related Prerequisites Prerequisites associated with performing hot functional testing are identified in the referenced test abstract cited under the Verified by Test # heading.
Table 14.2-70: Hot Functional Testing Test # 70 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-76: Initial Fuel Load Test # 76 The Initial Fuel Load Test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-172 Draft Revision 3 Table 14.2-76: Initial Fuel Load Test # 76 The Initial Fuel Load Test is required to be performed for each NPM.
This test is performed prior to initial fuel load.
This test is performed prior to initial fuel load.
Test Objectives
Test Objectives i.
: i. Conduct initial fuel load with no inadvertent criticality.
Conduct initial fuel load with no inadvertent criticality.
ii. Install fuel assemblies and control components at the locations specified by the design of the initial RXC.
ii.
Prerequisites
Install fuel assemblies and control components at the locations specified by the design of the initial RXC.
: i. Plant systems required for initial fuel loading have completed preoperational testing.
Prerequisites i.
ii. Plant systems required for initial fuel loading have been aligned per operations procedures.
Plant systems required for initial fuel loading have completed preoperational testing.
ii.
Plant systems required for initial fuel loading have been aligned per operations procedures.
iii. The design of the initial RXC that specifies the final core configuration of fuel assemblies and control components is completed.
iii. The design of the initial RXC that specifies the final core configuration of fuel assemblies and control components is completed.
iv. A core load sequence has been approved.
iv. A core load sequence has been approved.
: v. Neutron monitoring data from a previous NPM initial fuel loading or calculations showing the predicted response of monitoring channels are available for evaluating monitoring data.
v.
Neutron monitoring data from a previous NPM initial fuel loading or calculations showing the predicted response of monitoring channels are available for evaluating monitoring data.
vi. The lower RPV is installed in the RPV support stand.
vi. The lower RPV is installed in the RPV support stand.
vii. Control room communications are established.
vii. Control room communications are established.
viii. RXB radiation monitors are functional.
viii. RXB radiation monitors are functional.
ix. Boron concentration in the pool is within Technical Specification limits.
ix. Boron concentration in the pool is within Technical Specification limits.
Test Method
Test Method i.
: i. The overall process of initial fuel loading will be supervised by a licensed senior reactor operator with no other concurrent duties.
The overall process of initial fuel loading will be supervised by a licensed senior reactor operator with no other concurrent duties.
ii. Install fuel and control components per approved procedures.
ii.
Install fuel and control components per approved procedures.
iii. Monitor boron concentration inside the RPV periodically during fuel load to ensure it satisfies TS.
iii. Monitor boron concentration inside the RPV periodically during fuel load to ensure it satisfies TS.
iv. Monitor neutron counts during the load of each fuel assembly and plot an independent inverse count rate ratio for each source range detector after each fuel load assembly is loaded.
iv. Monitor neutron counts during the load of each fuel assembly and plot an independent inverse count rate ratio for each source range detector after each fuel load assembly is loaded.
: v. Verify neutron count data are consistent with calculations showing the predicted response. For fuel loading of the second NPM and all subsequent NPMs use data obtained from previous fuel loadings.
v.
Verify neutron count data are consistent with calculations showing the predicted response. For fuel loading of the second NPM and all subsequent NPMs use data obtained from previous fuel loadings.
vi. Demonstrate the inverse count rate ratio does not show significant approach to criticality.
vi. Demonstrate the inverse count rate ratio does not show significant approach to criticality.
vii. Maintain the status of the core loading.
vii. Maintain the status of the core loading.
viii. Maintain communication between fuel handling personnel and the MCR.
viii. Maintain communication between fuel handling personnel and the MCR.
Acceptance Criterion
Acceptance Criterion i.
: i. Each fuel assembly and control component is installed in the location specified by the design of the initial RXC.
Each fuel assembly and control component is installed in the location specified by the design of the initial RXC.
ii. There is no indication of inadvertent criticality.
ii.
Tier 2                                                        14.2-172                                          Draft Revision 3
There is no indication of inadvertent criticality.


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-79: Primary and Secondary System Chemistry Test # 79 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-175 Draft Revision 3 Table 14.2-79: Primary and Secondary System Chemistry Test # 79 Startup test is required to be performed for each NPM.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
Test Objective Verify water quality in the primary system and secondary system using the PSS.
Test Objective Verify water quality in the primary system and secondary system using the PSS.
Prerequisites
Prerequisites i.
: i. The PSS instruments have been calibrated.
The PSS instruments have been calibrated.
ii. The NPM is fully assembled.
ii.
The NPM is fully assembled.
iii. The RCS is at hot zero power (RCS at normal operating pressure and RCS temperature at the maximum temperature obtainable when heated only by the MHS).
iii. The RCS is at hot zero power (RCS at normal operating pressure and RCS temperature at the maximum temperature obtainable when heated only by the MHS).
Test Method
Test Method i.
: i. Use the PSS to sample the normal primary system sample points listed in Table 9.3.2-1.
Use the PSS to sample the normal primary system sample points listed in Table 9.3.2-1.
ii. Use the PSS to sample the normal secondary system sample points listed in Table 9.3.2-3.
ii.
Use the PSS to sample the normal secondary system sample points listed in Table 9.3.2-3.
iii. To the extent practical, responses of PSS radiation monitors should be verified by laboratory analyses of grab samples taken at the same process location.
iii. To the extent practical, responses of PSS radiation monitors should be verified by laboratory analyses of grab samples taken at the same process location.
iv. Conduct the test at steady-state condition at approximately 25, 50, 75, and 100 percent reactor thermal power.
iv. Conduct the test at steady-state condition at approximately 25, 50, 75, and 100 percent reactor thermal power.
Acceptance Criterion The sample analysesis satisfyies the limits specified in plant procedures.
Acceptance Criterion The sample analysesis satisfyies the limits specified in plant procedures.
Tier 2                                                      14.2-175                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-82: Pressurizer Spray Bypass Flow Test # 82 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-179 Draft Revision 3 Table 14.2-82: Pressurizer Spray Bypass Flow Test # 82 Startup test is required to be performed for each NPM.
This test is performed after initial fuel loading but prior to initial criticality.
This test is performed after initial fuel loading but prior to initial criticality.
Test Objective Verify the pressurizer spray bypass flow rate is adequate to prevent thermal fatigue of the spray line components and provide sufficient mixing in the pressurizer to maintain pressurizer water chemistry similar to the rest of the RCS while avoiding unnecessary energization of the pressurizer heaters.
Test Objective Verify the pressurizer spray bypass flow rate is adequate to prevent thermal fatigue of the spray line components and provide sufficient mixing in the pressurizer to maintain pressurizer water chemistry similar to the rest of the RCS while avoiding unnecessary energization of the pressurizer heaters.
Prerequisites
Prerequisites i.
: i. The core is installed.
The core is installed.
ii. The NPM is fully assembled.
ii.
The NPM is fully assembled.
iii. The RCS is at hot zero power (RCS at normal operating pressure and RCS temperature at the maximum temperature obtainable when heated only by the MHS).
iii. The RCS is at hot zero power (RCS at normal operating pressure and RCS temperature at the maximum temperature obtainable when heated only by the MHS).
Test Method
Test Method i.
: i. With the automatic pressurizer spray valve closed, adjust the manual spray bypass valve to maintain a continuous spray bypass flow of approximately one gpm.
With the automatic pressurizer spray valve closed, adjust the manual spray bypass valve to maintain a continuous spray bypass flow of approximately one gpm.
ii. If the continuous bypass spray flow requires the operation of the pressurizer backup heaters to maintain the pressurizer pressure setpoint, throttle close the bypass valve until pressurizer pressure is maintained by the proportional heaters.
ii.
If the continuous bypass spray flow requires the operation of the pressurizer backup heaters to maintain the pressurizer pressure setpoint, throttle close the bypass valve until pressurizer pressure is maintained by the proportional heaters.
Acceptance Criterion The spray bypass valve is throttled to maintain the required bypass flowflow satisfies design requirements.
Acceptance Criterion The spray bypass valve is throttled to maintain the required bypass flowflow satisfies design requirements.
Tier 2                                                      14.2-179                                            Draft Revision 3


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-90: Power-Ascension Test # 90 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-187 Draft Revision 3 Table 14.2-90: Power-Ascension Test # 90 Startup test is required to be performed for each NPM.
This test is performed prior to power-ascension testing.
This test is performed prior to power-ascension testing.
Test Objective Identify the sequence for the following power-ascension tests.
Test Objective Identify the sequence for the following power-ascension tests.
: a. Core Power Distribution Map Test #91
a.
: b. Neutron Monitoring System Power Range Flux Calibration Test #92
Core Power Distribution Map Test #91 b.
: c. Reactor Coolant System Temperature Instrument Calibration Test #93
Neutron Monitoring System Power Range Flux Calibration Test #92 c.
: d. Reactor Coolant System Flow Calibration Test #94
Reactor Coolant System Temperature Instrument Calibration Test #93 d.
: e. Radiation Shield Survey Test #95
Reactor Coolant System Flow Calibration Test #94 e.
: f. Reactor Building Ventilation System Capability Test #96
Radiation Shield Survey Test #95 f.
: g. Thermal Expansion Test #97
Reactor Building Ventilation System Capability Test #96 g.
: h. Control Rod Assembly Misalignment Test #98
Thermal Expansion Test #97 h.
: i. Steam Generator Level Control System Test #99
Control Rod Assembly Misalignment Test #98 i.
: j. Ramp Change in Load Demand Test #100
Steam Generator Level Control System Test #99 j.
: k. Step Change in Load Demand Test #101
Ramp Change in Load Demand Test #100 k.
: l. Loss of Feedwater Heater Test #102
Step Change in Load Demand Test #101 l.
: m. 100 Percent Load Rejection Test #103
Loss of Feedwater Heater Test #102
: n. Reactor Trip from 100 Percent Power Test #104
: m. 100 Percent Load Rejection Test #103 n.
: o. Island Mode Test for the First NuScale Power Module (Test #105)
Reactor Trip from 100 Percent Power Test #104 o.
: p. Island Mode Test for Multiple NuScale Power Modules (Test #106)
Island Mode Test for the First NuScale Power Module (Test #105) p.
: q. Remote Shutdown Workstation Test #107NuScale Power Module Vibration Test #108
Island Mode Test for Multiple NuScale Power Modules (Test #106) q.
: r. NuScale Power Module Vibration Test #108 Prerequisites None Test Method
Remote Shutdown Workstation Test #107NuScale Power Module Vibration Test #108 r.
: i. Identify the specific plant conditions required for each power-ascension test procedure to maintain technical specification operability.
NuScale Power Module Vibration Test #108 Prerequisites None Test Method i.
ii. Identify the prerequisites required for each power-ascension test procedure.
Identify the specific plant conditions required for each power-ascension test procedure to maintain technical specification operability.
ii.
Identify the prerequisites required for each power-ascension test procedure.
iii. Determine the test sequence for power-ascension testing based on technical specification requirements and test prerequisites.
iii. Determine the test sequence for power-ascension testing based on technical specification requirements and test prerequisites.
Acceptance Criterion The sequence for power-ascension testing has been determined.
Acceptance Criterion The sequence for power-ascension testing has been determined.
Tier 2                                                    14.2-187                                        Draft Revision 3


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-97: Thermal Expansion Test # 97 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-194 Draft Revision 3 Table 14.2-97: Thermal Expansion Test # 97 Startup test is required to be performed for each NPM.
This test is performed during plant heatup and cooldown.
This test is performed during plant heatup and cooldown.
Test Objectives
Test Objectives i.
: i. Verify that ASME Code Class 1, 2, and 3 system piping can expand without obstruction and that expansion is within design limits. All ASME Code Class 1, 2, and 3 system piping is within the RXB.
Verify that ASME Code Class 1, 2, and 3 system piping can expand without obstruction and that expansion is within design limits. All ASME Code Class 1, 2, and 3 system piping is within the RXB.
ii. Verify that high-energy piping inside the RXB can expand without obstruction and that expansion is within design limits.
ii.
Verify that high-energy piping inside the RXB can expand without obstruction and that expansion is within design limits.
Prerequisite Temporary instrumentation is installed on piping outside the NPM as required to monitor the deflections for the piping under test.
Prerequisite Temporary instrumentation is installed on piping outside the NPM as required to monitor the deflections for the piping under test.
Test Method
Test Method i.
: i. Thermal expansion testing is performed in accordance with ASME OM Standard, Part 7 as discussed in Section 3.9.2.1.2.
Thermal expansion testing is performed in accordance with ASME OM Standard, Part 7 as discussed in Section 3.9.2.1.2.
ii. Record deflection data during plant heatup and cooldown.
ii.
Record deflection data during plant heatup and cooldown.
iii. Identify support movements by recording hot and cold positions of the supports.
iii. Identify support movements by recording hot and cold positions of the supports.
(Note: piping testing will be determined in COL Item 3.9-13) iv. All tested piping is within the RXB.
(Note: piping testing will be determined in COL Item 3.9-13) iv. All tested piping is within the RXB.
: v. All tested piping is outside the NPM.
v.
All tested piping is outside the NPM.
vi. All tested piping is contained within the MSS, FWS, ABS, PSS, and CVCS.
vi. All tested piping is contained within the MSS, FWS, ABS, PSS, and CVCS.
Acceptance Criteria In accordance with ASME OM Standard, Part 7, Ffor the piping systems tested:
Acceptance Criteria In accordance with ASME OM Standard, Part 7, Ffor the piping systems tested:
: i. There is no evidence of blocking of the thermal expansion of piping or component, other than by installed supports, restraints, and hangers.
i.
ii. Spring hanger movements must remain within the hot and cold setpoints and supports must not become fully retracted or extended.
There is no evidence of blocking of the thermal expansion of piping or component, other than by installed supports, restraints, and hangers.
ii.
Spring hanger movements must remain within the hot and cold setpoints and supports must not become fully retracted or extended.
iii. Piping and components return to their approximate baseline cold position.
iii. Piping and components return to their approximate baseline cold position.
Tier 2                                                      14.2-194                                        Draft Revision 3


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-99: Steam Generator Level Control Test # 99 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-196 Draft Revision 3 Table 14.2-99: Steam Generator Level Control Test # 99 Startup test is required to be performed for each NPM.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
Test Objective
Test Objective i.
: i. Verify the ability of SG inventory control systems to sustain a ramp increase in load demand.
Verify the ability of SG inventory control systems to sustain a ramp increase in load demand.
ii. Assess the dynamic response of SG inventory for ramp increase in load demand.Verify the stability of the automatic SG level control system by introducing simulated transients at various power levels during the ascension to full power.
ii.
Prerequisite
Assess the dynamic response of SG inventory for ramp increase in load demand.Verify the stability of the automatic SG level control system by introducing simulated transients at various power levels during the ascension to full power.
: i. The feedwater system is operating in steam generator inventory pressure control (Feedwater regulating valves in automatic control).The NPM is operating in a steady-state condition at the specified power level.
Prerequisite i.
Test Method
The feedwater system is operating in steam generator inventory pressure control (Feedwater regulating valves in automatic control).The NPM is operating in a steady-state condition at the specified power level.
: i. Raise reactor thermal power to approximately 25 percent.Simulate an SG level transient by changing the level setpoint at approximately 25, 50, 75, and 100 percent reactor thermal power.
Test Method i.
ii. Use the main control room turbine controls to provide a 5 percent of full power per minute load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.Record the steam generator level control response when the control system is returned to automatic control.
Raise reactor thermal power to approximately 25 percent.Simulate an SG level transient by changing the level setpoint at approximately 25, 50, 75, and 100 percent reactor thermal power.
ii.
Use the main control room turbine controls to provide a 5 percent of full power per minute load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.Record the steam generator level control response when the control system is returned to automatic control.
iii. Use the main control room turbine controls to provide a 5 percent of full power per minute load decrease in demand at approximately 25, 50, and 75, and 100 percent reactor thermal power.Adjustments to the control systems are made, if necessary, prior to proceeding to the next power plateau.
iii. Use the main control room turbine controls to provide a 5 percent of full power per minute load decrease in demand at approximately 25, 50, and 75, and 100 percent reactor thermal power.Adjustments to the control systems are made, if necessary, prior to proceeding to the next power plateau.
Acceptance Criteria
Acceptance Criteria i.
: i. The SG inventory control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:During recovery from a simulated steam generator level transient, SG level control response is consistent with the design for the following:
The SG inventory control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:During recovery from a simulated steam generator level transient, SG level control response is consistent with the design for the following:
: a. SG superheatovershoot or undershoot to the new level.
a.
: b. SG pressuretime required to achieve the new level.
SG superheatovershoot or undershoot to the new level.
: c. SG inventoryerror between the actual level and control setpoint.
b.
: d. Feed pump speedfeedwater pump discharge pressure oscillations.
SG pressuretime required to achieve the new level.
ii. SG inventory control systems response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.Water hammer indications:
c.
: a. Audible indications of water hammer are not observed.
SG inventoryerror between the actual level and control setpoint.
: b. No damage to pipe supports or restraints.
d.
: c. No damage to equipment.
Feed pump speedfeedwater pump discharge pressure oscillations.
: d. No equipment leakage as a result of the steam generator level transient.
ii.
Tier 2                                                      14.2-196                                          Draft Revision 3
SG inventory control systems response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.Water hammer indications:
a.
Audible indications of water hammer are not observed.
b.
No damage to pipe supports or restraints.
c.
No damage to equipment.
d.
No equipment leakage as a result of the steam generator level transient.


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program RAI 03.09.02-69 Table 14.2-100: Ramp Change in Load Demand Test # 100 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-197 Draft Revision 3 RAI 03.09.02-69 Table 14.2-100: Ramp Change in Load Demand Test # 100 Startup test is required to be performed for each NPM.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
Test Objectives
Test Objectives i.
: i. Verify the ability of the plant automatic control systems to sustain a ramp increase in load demand.
Verify the ability of the plant automatic control systems to sustain a ramp increase in load demand.
ii. Assess the dynamic response of the plant for ramp increase in load demand.
ii.
Prerequisites
Assess the dynamic response of the plant for ramp increase in load demand.
: i. The NPM is operating in a steady-state condition at the designated power level.
Prerequisites i.
ii. The plants electrical distribution system is aligned for normal operation.
The NPM is operating in a steady-state condition at the designated power level.
ii.
The plants electrical distribution system is aligned for normal operation.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
: a. Reactivity control
a.
: b. RCS temperature control
Reactivity control b.
: c. Pressurizer pressure control
RCS temperature control c.
: d. Pressurizer level control
Pressurizer pressure control d.
: e. Turbine control
Pressurizer level control e.
: f. Feedwater level control
Turbine control f.
: g. CWS basin level control
Feedwater level control g.
: h. SCWS basin level control
CWS basin level control h.
: i. Feedwater heater level control
SCWS basin level control i.
: j. Hotwell level control iv. If required, verify instrumentation is installed for piping vibration testing.
Feedwater heater level control j.
Test Method
Hotwell level control iv. If required, verify instrumentation is installed for piping vibration testing.
: i. Use the main control room turbine controls to provide a 5 percent of full power per minute load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.
Test Method i.
ii. Use the main control room turbine controls to provide a 5 percent of full power per minute load decrease in demand at approximately 25, 50, and 75, and 100 percent reactor thermal power.
Use the main control room turbine controls to provide a 5 percent of full power per minute load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.
ii.
Use the main control room turbine controls to provide a 5 percent of full power per minute load decrease in demand at approximately 25, 50, and 75, and 100 percent reactor thermal power.
iii. Conduct piping vibration testing, as required, during power changes.
iii. Conduct piping vibration testing, as required, during power changes.
Tier 2                                                        14.2-197                                        Draft Revision 3


NuScale Final Safety Analysis Report                                                                       Initial Plant Test Program Table 14.2-100: Ramp Change in Load Demand Test # 100 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-198 Draft Revision 3 Acceptance Criteria i.
Acceptance Criteria
The turbine does not trip.
: i. The turbine does not trip.
ii.
ii. The reactor does not trip.
The reactor does not trip.
iii. The main steam safety valves do not open.
iii. The main steam safety valves do not open.
iv. The turbine does not overspeed.
iv. The turbine does not overspeed.
: v. The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The primary and secondary control systems, with no manual intervention, maintain reactor power, reactor coolant system temperatures, pressurizer pressure and level, and SG levels and pressures within acceptable ranges during and following the transient.
v.
: a. Reactor Power
The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The primary and secondary control systems, with no manual intervention, maintain reactor power, reactor coolant system temperatures, pressurizer pressure and level, and SG levels and pressures within acceptable ranges during and following the transient.
: b. RCS temperature
a.
: c. Pressurizer pressure
Reactor Power b.
: d. Pressurizer level
RCS temperature c.
: e. SG superheat
Pressurizer pressure d.
: f. SG pressure
Pressurizer level e.
: g. SG inventory
SG superheat f.
: h. Gland seal temperature
SG pressure g.
: i. CWS basin level
SG inventory h.
: j. SCWS basin level
Gland seal temperature i.
: k. Feedwater heater level
CWS basin level j.
: l. Main condenser hotwell level
SCWS basin level k.
: m. Main condenser vacuum
Feedwater heater level l.
: n. Outlet temperature of turbine bypass desuperheater vi. Control system response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.
Main condenser hotwell level
vii. Water hammer indications
: m. Main condenser vacuum n.
: a. Audible indications of water hammer are not observed.
Outlet temperature of turbine bypass desuperheater vi. Control system response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.
: b. No damage to pipe supports or restraints.
vii. Water hammer indications a.
: c. No damage to equipment.
Audible indications of water hammer are not observed.
: d. No equipment leakage as a result of the ramp change.
b.
No damage to pipe supports or restraints.
c.
No damage to equipment.
d.
No equipment leakage as a result of the ramp change.
viii. Piping vibration - System specific steady state and transient vibration testing criteria are established by the piping designer. Actual acceptance criteria will depend on the selected test method, but may include:
viii. Piping vibration - System specific steady state and transient vibration testing criteria are established by the piping designer. Actual acceptance criteria will depend on the selected test method, but may include:
: a. Limits for stresses calculated based on the observed/measured vibration response of the system.
a.
: b. No permanent deformation or damage is observed in the piping system or supports.
Limits for stresses calculated based on the observed/measured vibration response of the system.
: c. Vibration displacements are not excessive, would not potentially cause the piping to come in contact with surrounding SSC, and are such that the movement of supports and flexible joints is within their allowable limits.
b.
Tier 2                                                      14.2-198                                              Draft Revision 3
No permanent deformation or damage is observed in the piping system or supports.
c.
Vibration displacements are not excessive, would not potentially cause the piping to come in contact with surrounding SSC, and are such that the movement of supports and flexible joints is within their allowable limits.
Table 14.2-100: Ramp Change in Load Demand Test # 100 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-101: Step Change in Load Demand Test # 101 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-199 Draft Revision 3 Table 14.2-101: Step Change in Load Demand Test # 101 Startup test is required to be performed for each NPM.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.
Test Objectives
Test Objectives i.
: i. Verify the ability of the plant automatic control systems to sustain step load increases and step load decreases in demand.
Verify the ability of the plant automatic control systems to sustain step load increases and step load decreases in demand.
ii. Assess the dynamic response of the plant for a load step demand.
ii.
Prerequisites
Assess the dynamic response of the plant for a load step demand.
: i. The NPM is operating in a steady-state condition at the specified power level.
Prerequisites i.
ii. The plants electrical distribution system is aligned for normal operation.
The NPM is operating in a steady-state condition at the specified power level.
ii.
The plants electrical distribution system is aligned for normal operation.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
: a. Reactivity control
a.
: b. RCS temperature control
Reactivity control b.
: c. Pressurizer pressure control
RCS temperature control c.
: d. Pressurizer level control
Pressurizer pressure control d.
: e. Turbine control
Pressurizer level control e.
: f. Feedwater level control
Turbine control f.
: g. CWS basin level control
Feedwater level control g.
: h. SCWS basin level control
CWS basin level control h.
: i. Feedwater heater level control
SCWS basin level control i.
: j. Hotwell level control Test Method
Feedwater heater level control j.
: i. Use the MCR turbine controls to provide a 10 percent step load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.
Hotwell level control Test Method i.
ii. Use the MCR turbine controls to provide a 10 percent step load decrease in demand at approximately 25, 50, 75, and 100 percent reactor thermal power.
Use the MCR turbine controls to provide a 10 percent step load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.
Tier 2                                                      14.2-199                                          Draft Revision 3
ii.
Use the MCR turbine controls to provide a 10 percent step load decrease in demand at approximately 25, 50, 75, and 100 percent reactor thermal power.


NuScale Final Safety Analysis Report                                                               Initial Plant Test Program Table 14.2-101: Step Change in Load Demand Test # 101 (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-200 Draft Revision 3 Acceptance Criteria i.
Acceptance Criteria
The turbine does not trip.
: i. The turbine does not trip.
ii.
ii. The reactor does not trip.
The reactor does not trip.
iii. The main steam safety valves do not open.
iii. The main steam safety valves do not open.
iv. The turbine does not overspeed.
iv. The turbine does not overspeed.
: v. The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The primary and secondary control systems, with no manual intervention, maintain reactor power, RCS temperatures, pressurizer pressure and level, and SG levels and pressures within acceptable ranges during and following the transient.
v.
: a. Reactor Power
The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The primary and secondary control systems, with no manual intervention, maintain reactor power, RCS temperatures, pressurizer pressure and level, and SG levels and pressures within acceptable ranges during and following the transient.
: b. RCS temperature
a.
: c. Pressurizer pressure
Reactor Power b.
: d. Pressurizer level
RCS temperature c.
: e. SG superheat
Pressurizer pressure d.
: f. SG pressure
Pressurizer level e.
: g. SG inventory
SG superheat f.
: h. Gland seal temperature
SG pressure g.
: i. CWS basin level
SG inventory h.
: j. SCWS basin level
Gland seal temperature i.
: k. Feedwater heater level
CWS basin level j.
: l. Main condenser hotwell level
SCWS basin level k.
: m. Main condenser vacuum
Feedwater heater level l.
: n. Outlet temperature of turbine bypass desuperheater vi. Control system response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.
Main condenser hotwell level
vii. Water hammer indications
: m. Main condenser vacuum n.
: a. Audible indications of water hammer are not observed.
Outlet temperature of turbine bypass desuperheater vi. Control system response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.
: b. No damage to pipe supports or restraints.
vii. Water hammer indications a.
: c. No damage to equipment.
Audible indications of water hammer are not observed.
: d. No equipment leakage as a result of the step load change.
b.
Tier 2                                                    14.2-200                                          Draft Revision 3
No damage to pipe supports or restraints.
c.
No damage to equipment.
d.
No equipment leakage as a result of the step load change.
Table 14.2-101: Step Change in Load Demand Test # 101 (Continued)


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program Table 14.2-102: Loss of Feedwater Heater Test # 102 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-201 Draft Revision 3 Table 14.2-102: Loss of Feedwater Heater Test # 102 Startup test is required to be performed for each NPM.
This test is performed at approximately 50 and 90 percent reactor thermal power.
This test is performed at approximately 50 and 90 percent reactor thermal power.
Test Objectives
Test Objectives i.
: i. Verify the ability of the plant automatic control systems to sustain a loss of the high pressure feedwater heater during power operation.
Verify the ability of the plant automatic control systems to sustain a loss of the high pressure feedwater heater during power operation.
ii. Assess the dynamic response of the plant for the loss of the high pressure feedwater heater.
ii.
Prerequisites
Assess the dynamic response of the plant for the loss of the high pressure feedwater heater.
: i. The NPM is operating in a steady-state condition at the specified power level.
Prerequisites i.
ii. The plants electrical distribution system is aligned for normal operation.
The NPM is operating in a steady-state condition at the specified power level.
ii.
The plants electrical distribution system is aligned for normal operation.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
: a. Reactivity control
a.
: b. RCS temperature control
Reactivity control b.
: c. Pressurizer pressure control
RCS temperature control c.
: d. Pressurizer level control
Pressurizer pressure control d.
: e. Turbine control
Pressurizer level control e.
: f. Feedwater level control
Turbine control f.
: g. CWS basin level control
Feedwater level control g.
: h. SCWS basin level control
CWS basin level control h.
: i. Feedwater heater level control
SCWS basin level control i.
: j. Hotwell level control Test Method Close the turbine generator extraction steam supply isolation valve to the high pressure feedwater heater from the main control room at approximately 50 and 90 percent reactor thermal power.
Feedwater heater level control j.
Acceptance Criteria
Hotwell level control Test Method Close the turbine generator extraction steam supply isolation valve to the high pressure feedwater heater from the main control room at approximately 50 and 90 percent reactor thermal power.
: i. The reactor does not trip.
Acceptance Criteria i.
ii. The turbine does not trip.
The reactor does not trip.
ii.
The turbine does not trip.
iii. The main steam safety valves do not open.
iii. The main steam safety valves do not open.
iv. The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:
iv. The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:
: a. Reactor Power
a.
: b. RCS temperature
Reactor Power b.
: c. Pressurizer pressure
RCS temperature c.
: d. Pressurizer level
Pressurizer pressure d.
: e. SG superheat
Pressurizer level e.
: f. SG pressure
SG superheat f.
: g. SG inventory
SG pressure g.
: h. Gland seal temperature
SG inventory h.
: i. CWS basin level
Gland seal temperature i.
: j. SCWS basin level
CWS basin level j.
: k. Feedwater heater level
SCWS basin level k.
: l. Main condenser hotwell level
Feedwater heater level l.
: m. Main condenser vacuum
Main condenser hotwell level
: n. Outlet temperature of turbine bypass desuperheater Tier 2                                                      14.2-201                                          Draft Revision 3
: m. Main condenser vacuum n.
Outlet temperature of turbine bypass desuperheater


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program Table 14.2-103: 100 Percent Load Rejection Test # 103 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-202 Draft Revision 3 Table 14.2-103: 100 Percent Load Rejection Test # 103 Startup test is required to be performed for each NPM.
This test is performed at approximately 100 percent reactor thermal power.
This test is performed at approximately 100 percent reactor thermal power.
Test Objectives
Test Objectives i.
: i. Verify the ability of the plant automatic control systems to sustain a 100 percent load rejection from full power.
Verify the ability of the plant automatic control systems to sustain a 100 percent load rejection from full power.
ii. Assess the dynamic response of the plant for a 100 percent power load rejection.
ii.
Prerequisites
Assess the dynamic response of the plant for a 100 percent power load rejection.
: i. The NPM is operating in a steady-state condition at full reactor thermal power.
Prerequisites i.
ii. The plants electrical distribution system is aligned for normal operation.
The NPM is operating in a steady-state condition at full reactor thermal power.
ii.
The plants electrical distribution system is aligned for normal operation.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.
: a. Reactivity control
a.
: b. RCS temperature control
Reactivity control b.
: c. Pressurizer pressure control
RCS temperature control c.
: d. Pressurizer level control
Pressurizer pressure control d.
: e. Turbine control
Pressurizer level control e.
: f. Feedwater level control
Turbine control f.
: g. CWS basin level control
Feedwater level control g.
: h. SCWS basin level control
CWS basin level control h.
: i. Feedwater heater level control
SCWS basin level control i.
: j. Hotwell level control Test Method Manually trip the generator output breaker to provide a 100 percent load rejection.
Feedwater heater level control j.
Acceptance Criteria
Hotwell level control Test Method Manually trip the generator output breaker to provide a 100 percent load rejection.
: i. The turbine trips.
Acceptance Criteria i.
ii. The reactor does not trip.
The turbine trips.
ii.
The reactor does not trip.
iii. The main steam safety valves do not open.
iii. The main steam safety valves do not open.
iv. The turbine does not overspeed beyond design limits.
iv. The turbine does not overspeed beyond design limits.
: v. The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The turbine generator bypass valve opens and modulates steam flow to the condenser to maintain steam generator pressure.
v.
: a. Reactor Power
The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The turbine generator bypass valve opens and modulates steam flow to the condenser to maintain steam generator pressure.
: b. RCS temperature
a.
: c. Pressurizer pressure
Reactor Power b.
: d. Pressurizer level
RCS temperature c.
: e. SG superheat
Pressurizer pressure d.
: f. SG pressure
Pressurizer level e.
: g. SG inventory
SG superheat f.
: h. Gland seal temperature
SG pressure g.
: i. CWS basin level
SG inventory h.
: j. SCWS basin level
Gland seal temperature i.
: k. Feedwater heater level
CWS basin level j.
: l. Main condenser hotwell level
SCWS basin level k.
: m. Main condenser vacuum
Feedwater heater level l.
: n. Outlet temperature of turbine bypass desuperheater vi. The FWS automatically provides the necessary feedwater flow to the steam generator.
Main condenser hotwell level
vii. Water hammer indications
: m. Main condenser vacuum n.
: a. Audible indications of water hammer are not observed.
Outlet temperature of turbine bypass desuperheater vi. The FWS automatically provides the necessary feedwater flow to the steam generator.
: b. No damage to pipe supports or restraints.
vii. Water hammer indications a.
: c. No damage to equipment.
Audible indications of water hammer are not observed.
: d. No equipment leakage as a result of the load rejection.
b.
Tier 2                                                      14.2-202                                          Draft Revision 3
No damage to pipe supports or restraints.
c.
No damage to equipment.
d.
No equipment leakage as a result of the load rejection.


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program RAI 04.06-2 Table 14.2-104: Reactor Trip from 100 Percent Power Test # 104 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-203 Draft Revision 3 RAI 04.06-2 Table 14.2-104: Reactor Trip from 100 Percent Power Test # 104 Startup test is required to be performed for each NPM.
This test is performed at 100 percent reactor thermal power.
This test is performed at 100 percent reactor thermal power.
Test Objectives
Test Objectives i.
: i. Verify the ability of the NPM to sustain a reactor trip from 100 percent reactor thermal power and automatically cool the RCS to mode 3 (all RCS temperatures < 420 &deg;F).
Verify the ability of the NPM to sustain a reactor trip from 100 percent reactor thermal power and automatically cool the RCS to mode 3 (all RCS temperatures < 420 &deg;F).
ii. Assess the dynamic response of the plant to thea reactor trip.
ii.
Assess the dynamic response of the plant to thea reactor trip.
iii. Verify each fully withdrawn CRA satisfies the CRA drop time acceptance criteria at full flow conditions.
iii. Verify each fully withdrawn CRA satisfies the CRA drop time acceptance criteria at full flow conditions.
iii. Verify the ability of DHRS to cool the RCS to Mode 3 (all RCS temperatures < 420 &deg;F).
iii. Verify the ability of DHRS to cool the RCS to Mode 3 (all RCS temperatures < 420 &deg;F).
Prerequisites
Prerequisites i.
: i. The NPM is operating in a steady-state condition at full reactor thermal power.
The NPM is operating in a steady-state condition at full reactor thermal power.
ii. The plants electrical distribution system is aligned for normal operation.
ii.
Test Method
The plants electrical distribution system is aligned for normal operation.
: i. Manually trip the reactor from the MCR.
Test Method i.
ii. Measure the drop time for each fully withdrawn CRA.
Manually trip the reactor from the MCR.
ii.
Measure the drop time for each fully withdrawn CRA.
iii. Allow the RCS temperature trends to stabilize.
iii. Allow the RCS temperature trends to stabilize.
iv. Manually initiate DHRS.
iv. Manually initiate DHRS.
Line 1,645: Line 2,685:
Acceptance Criteria Acceptance criteria to be verified after manual reactor trip:
Acceptance Criteria Acceptance criteria to be verified after manual reactor trip:
i.The reactor trips.
i.The reactor trips.
ii. The CIVs close.
ii.
The CIVs close.
iii. The decay heat removal valves open.
iii. The decay heat removal valves open.
iiv. The turbine generator bypass valve operates to prevent opening of the main steam safety valve.
iiv. The turbine generator bypass valve operates to prevent opening of the main steam safety valve.
iiiv. The turbine tripsspeed does not exceed overspeed design limits.
iiiv. The turbine tripsspeed does not exceed overspeed design limits.
vi. The reactor vent valves do not open.
vi. The reactor vent valves do not open.
ivii. Water hammer indications
ivii. Water hammer indications a.
: a. Audible indications of water hammer are not observed.
Audible indications of water hammer are not observed.
: b. No damage to pipe supports or restraints.
b.
: c. No damage to equipment.
No damage to pipe supports or restraints.
: d. No equipment leakage as a result of the reactor trip.
c.
No damage to equipment.
d.
No equipment leakage as a result of the reactor trip.
Acceptance criteria to be verified after DHR actuation:
Acceptance criteria to be verified after DHR actuation:
: v. a. DHRS actuation valves open.
v.
: b. MSIVs close.
a.
: c. FWIVs close.
DHRS actuation valves open.
: d. Feedwater regulating valves close
b.
: e. Secondary main steam isolation valves close
MSIVs close.
: f. Secondary main steam bypass isolation valves close
c.
: g. Pressurizer heater breakers trip viii. The RCS cools to a stable condition in mode 3 (all RCS temperatures < 420 &deg;F) without operator intervention.
FWIVs close.
d.
Feedwater regulating valves close e.
Secondary main steam isolation valves close f.
Secondary main steam bypass isolation valves close g.
Pressurizer heater breakers trip viii. The RCS cools to a stable condition in mode 3 (all RCS temperatures < 420 &deg;F) without operator intervention.
vii. RCS cooldown rate is within Technical Specification limits.
vii. RCS cooldown rate is within Technical Specification limits.
viiix.Each fully withdrawn CRA drop time is within Technical Specification limits.
viiix.Each fully withdrawn CRA drop time is within Technical Specification limits.
Tier 2                                                      14.2-203                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program RAI 14.02-5 Table 14.2-105: Island Mode Test for the First NuScale Power Module (Test # 105)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-204 Draft Revision 3 RAI 14.02-5 Table 14.2-105: Island Mode Test for the First NuScale Power Module (Test # 105)
This startup test is required to be performed for the first NPM in power operation. No other NPMs are in power operation. Test #105 is performed once per facility. Startup Test #106 tests island mode for multiple NPMs.
This startup test is required to be performed for the first NPM in power operation. No other NPMs are in power operation. Test #105 is performed once per facility. Startup Test #106 tests island mode for multiple NPMs.
This test is performed at 100 percent reactor thermal power. Island mode operation is described in Section 8.3.1.1.1 Test Objective for the first NPM in power operation
This test is performed at 100 percent reactor thermal power. Island mode operation is described in Section 8.3.1.1.1 Test Objective for the first NPM in power operation i.
: i. Verify the first NPM in power operation can operate independently from an offsite transmission grid after transition from the transmission grid to island mode.
Verify the first NPM in power operation can operate independently from an offsite transmission grid after transition from the transmission grid to island mode.
ii. Verify plant electrical loads may be transitioned from island mode to an offsite transmission grid without interruption to the operation of the first NPM in power operation.
ii.
Verify plant electrical loads may be transitioned from island mode to an offsite transmission grid without interruption to the operation of the first NPM in power operation.
Prerequisites The first NPM in power operation is in normal operation at 100 percent reactor thermal power.
Prerequisites The first NPM in power operation is in normal operation at 100 percent reactor thermal power.
Test Method Simulate a loss of the transmission grid by opening the switchyard supply breakers (reference Figures 8.3-2a and 8.3-2b).
Test Method Simulate a loss of the transmission grid by opening the switchyard supply breakers (reference Figures 8.3-2a and 8.3-2b).
Acceptance Criteria
Acceptance Criteria i.
: i. a. The turbine generator associated with the NPMservice unit generator under test does not trip and changes from droop mode control to isochronous mode to control the loads on site.
a.
The turbine generator associated with the NPMservice unit generator under test does not trip and changes from droop mode control to isochronous mode to control the loads on site.
: b. The first NPM in power operation remains at approximately 100 percent reactor thermal power using turbine generator bypass operation.
: b. The first NPM in power operation remains at approximately 100 percent reactor thermal power using turbine generator bypass operation.
: c. Electrical power to plant loads is uninterrupted without loss of voltage or automatic bus transfers.
c.
: d. The auxiliary AC power source starts automatically but does not automatically load its associated bus.
Electrical power to plant loads is uninterrupted without loss of voltage or automatic bus transfers.
ii. The plant electrical loads are transitioned back to the external offsite grid connection when it becomes available.
d.
Tier 2                                                      14.2-204                                            Draft Revision 3
The auxiliary AC power source starts automatically but does not automatically load its associated bus.
ii.
The plant electrical loads are transitioned back to the external offsite grid connection when it becomes available.


NuScale Final Safety Analysis Report                                                                   Initial Plant Test Program RAI 14.02-5 Table 14.2-106: Island Mode Test for Multiple NuScale Power Modules (Test # 106)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-205 Draft Revision 3 RAI 14.02-5 Table 14.2-106: Island Mode Test for Multiple NuScale Power Modules (Test # 106)
This startup test is required to be performed once with multiple (at least two) NPMs in operation. Test #106 is performed once per facility. Startup Test #105 tests island mode for a single NPM.
This startup test is required to be performed once with multiple (at least two) NPMs in operation. Test #106 is performed once per facility. Startup Test #105 tests island mode for a single NPM.
COL Item 14.2-7:         A COL applicant that references the NuScale Power Plant design certification will select the plant configuration to perform the Island Mode Test (number of NuScale Power Modules in service).
COL Item 14.2-7:
A COL applicant that references the NuScale Power Plant design certification will select the plant configuration to perform the Island Mode Test (number of NuScale Power Modules in service).
This test is performed at 100 percent reactor thermal power for all NPMs under test. Island mode operation is described in Section 8.3.1.1.1 Test Objective for multiple NPM in operation:
This test is performed at 100 percent reactor thermal power for all NPMs under test. Island mode operation is described in Section 8.3.1.1.1 Test Objective for multiple NPM in operation:
: i. Verify all NPMs under test can operate independently from an offsite transmission grid after transition from the transmission grid to island mode.
i.
ii. Verify plant electrical loads may be transitioned from island mode to an offsite transmission grid without interruption to the operation of the service unit NPM.
Verify all NPMs under test can operate independently from an offsite transmission grid after transition from the transmission grid to island mode.
ii.
Verify plant electrical loads may be transitioned from island mode to an offsite transmission grid without interruption to the operation of the service unit NPM.
Prerequisites The NPMs selected for test are in normal operation at 100 percent reactor thermal power.
Prerequisites The NPMs selected for test are in normal operation at 100 percent reactor thermal power.
Test Method Simulate a loss of the transmission grid by opening the switchyard supply breakers (reference Figures 8.3-2a and 8.3-2b).
Test Method Simulate a loss of the transmission grid by opening the switchyard supply breakers (reference Figures 8.3-2a and 8.3-2b).
Acceptance Criteria
Acceptance Criteria i.
: i. a. The service unit turbine generator transitions to island mode by changing from droop mode control to isochronous mode control to control the load on the 13.8kV bus it is supplying.
a.
: b. The service unit NPM remains at approximately 100 percent reactor thermal power using turbine generator bypass operation.
The service unit turbine generator transitions to island mode by changing from droop mode control to isochronous mode control to control the load on the 13.8kV bus it is supplying.
: c. The non-service unit turbine generators trip.
b.
: d. The non-service unit NPMs power reduces to approximately 95 percent reactor thermal power using turbine generator bypass operation.
The service unit NPM remains at approximately 100 percent reactor thermal power using turbine generator bypass operation.
: e. Electrical power to plant loads is uninterrupted without loss of voltage or automatic bus transfers.
c.
The non-service unit turbine generators trip.
d.
The non-service unit NPMs power reduces to approximately 95 percent reactor thermal power using turbine generator bypass operation.
e.
Electrical power to plant loads is uninterrupted without loss of voltage or automatic bus transfers.
fd. The auxiliary AC power source starts automatically but does not automatically load its associated bus.
fd. The auxiliary AC power source starts automatically but does not automatically load its associated bus.
ii. The plant electrical loads are successfully transitioned back to an external offsite grid connection when it becomes available.
ii.
Tier 2                                                      14.2-205                                            Draft Revision 3
The plant electrical loads are successfully transitioned back to an external offsite grid connection when it becomes available.


NuScale Final Safety Analysis Report                                                                 Initial Plant Test Program RAI 04.06-2 Table 14.2-107: Not UsedRemote Shutdown Workstation Test # 107 Startup test is required to be performed for each NPM.
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-206 Draft Revision 3 RAI 04.06-2 Table 14.2-107: Not UsedRemote Shutdown Workstation Test # 107 Startup test is required to be performed for each NPM.
This test is performed at approximately 10 - 20 percent reactor thermal power.
This test is performed at approximately 10 - 20 percent reactor thermal power.
Test Objectives
Test Objectives i.
: i. Verify the NPM safety-related controls can be disabled at the remote shutdown station.
Verify the NPM safety-related controls can be disabled at the remote shutdown station.
ii. Verify the NPM nonsafety-related controls are functional at the remote shutdown station.
ii.
Verify the NPM nonsafety-related controls are functional at the remote shutdown station.
iii. Verify each fully withdrawn CRA satisfies the CRA drop time acceptance criteria with the reactor operating at 10 - 20 percent reactor thermal power.
iii. Verify each fully withdrawn CRA satisfies the CRA drop time acceptance criteria with the reactor operating at 10 - 20 percent reactor thermal power.
Prerequisites
Prerequisites i.
: i. Communication exists between the MCR and the remote shutdown station.
Communication exists between the MCR and the remote shutdown station.
ii. The reactor is operating in a steady-state condition at 10 - 20 percent reactor thermal power.
ii.
Test Method
The reactor is operating in a steady-state condition at 10 - 20 percent reactor thermal power.
: i. Using the appropriate operating procedure, the operator manually trips the reactor under test before leaving the MCR.
Test Method i.
ii. Measure the drop time for each fully withdrawn CRA.
Using the appropriate operating procedure, the operator manually trips the reactor under test before leaving the MCR.
ii.
Measure the drop time for each fully withdrawn CRA.
iii. Using the appropriate operating procedure, the operator uses manual switches in the remote shutdown station to isolate the module protection system manual actuation switches, override switches, and the enable nonsafety control switches for each nuclear power modules module protection system in the MCR to prevent spurious actuation of equipment due to fire damage.
iii. Using the appropriate operating procedure, the operator uses manual switches in the remote shutdown station to isolate the module protection system manual actuation switches, override switches, and the enable nonsafety control switches for each nuclear power modules module protection system in the MCR to prevent spurious actuation of equipment due to fire damage.
Acceptance Criteria
Acceptance Criteria i.
: i. An operator verifies that the module protection switch controls in the MCR have been disabled.
An operator verifies that the module protection switch controls in the MCR have been disabled.
The displays in the remote shutdown station verify the following NPM status:
The displays in the remote shutdown station verify the following NPM status:
ii. The reactor is tripped.
ii.
The reactor is tripped.
iii. All CIVs are closed.
iii. All CIVs are closed.
iv. The DHRS actuation valves are open.
iv. The DHRS actuation valves are open.
: v. All RCS temperatures cool to less than 420&deg;F (mode 3, safe shutdown) without operator action.
v.
All RCS temperatures cool to less than 420&deg;F (mode 3, safe shutdown) without operator action.
vi. Safety-related components cannot be operated from the remote shutdown station.
vi. Safety-related components cannot be operated from the remote shutdown station.
vii. The nonsafety-related controls in the remote shutdown station controls can be used to place the plant in a configuration specified by the appropriate operating procedure.
vii. The nonsafety-related controls in the remote shutdown station controls can be used to place the plant in a configuration specified by the appropriate operating procedure.
viii. Each fully withdrawn CRA drop time is within Technical Specification limits.
viii. Each fully withdrawn CRA drop time is within Technical Specification limits.
Tier 2                                                      14.2-206                                          Draft Revision 3


NuScale Final Safety Analysis Report                                                   Initial Plant Test Program Table 14.2-109: List of Test Abstracts (Continued)
NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-210 Draft Revision 3 99 N/A Steam Generator Level Control 100 N/A Ramp Change in Load Demand 101 N/A Step Change in Load Demand 102 N/A Loss of Feedwater Heater 103 N/A 100 Percent Load Rejection 104 N/A Reactor Trip from 100 Percent Power 105 N/A Island Mode Test for the First NuScale Power Module 106 N/A Island Mode Test for Multiple NuScale Power Modules 107 N/A Not UsedRemote Shutdown Workstation 108 N/A NuScale Power Module Vibration Table 14.2-109: List of Test Abstracts (Continued)
Test Number  System Abbreviation                                  Test Abstract 99     N/A                 Steam Generator Level Control 100     N/A                 Ramp Change in Load Demand 101     N/A                 Step Change in Load Demand 102     N/A                 Loss of Feedwater Heater 103     N/A                 100 Percent Load Rejection 104     N/A                 Reactor Trip from 100 Percent Power 105     N/A                 Island Mode Test for the First NuScale Power Module 106     N/A                 Island Mode Test for Multiple NuScale Power Modules 107     N/A                 Not UsedRemote Shutdown Workstation 108     N/A                 NuScale Power Module Vibration Tier 2                                            14.2-210                                    Draft Revision 3
Test Number System Abbreviation Test Abstract


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-28 Draft Revision 3 02.05.01 MPS Section 7.2.1.1, I&C Safety System Development Process, discusses the software lifecycle phases for the MPS. The purpose is to verify software implementation based on licensing commitments to 10 CFR Part 50, Appendix A, GDC 1 (Quality), Appendix B (Quality Assurance Criteria), RGs 1.28, 1.152, 1.168, 1.169, 1.170, 1.171, 1.172, and 1.173, and the associated IEEE standards. The licensee shall perform analyses for each phase and generate technical reports to conclude that the lifecycle phases were implemented per the licensing commitments. Per RG 1.152, a generic waterfall software life cycle model consists of the following phases: (1) concepts, (2) requirements, (3) design, (4) implementation, (5) test, (6) installation, checkout, and acceptance testing, (7) operation, (8) maintenance, and (9) retirement.
ITAAC No. System                                  Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.01   MPS       Section 7.2.1.1, I&C Safety System Development Process, discusses           X the software lifecycle phases for the MPS. The purpose is to verify software implementation based on licensing commitments to 10 CFR Part 50, Appendix A, GDC 1 (Quality), Appendix B (Quality Assurance Criteria), RGs 1.28, 1.152, 1.168, 1.169, 1.170, 1.171, 1.172, and 1.173, and the associated IEEE standards. The licensee shall perform analyses for each phase and generate technical reports to conclude that the lifecycle phases were implemented per the licensing commitments. Per RG 1.152, a generic waterfall software life cycle model consists of the following phases: (1) concepts, (2) requirements, (3) design, (4) implementation, (5) test, (6) installation, checkout, and acceptance testing, (7) operation, (8) maintenance, and (9) retirement.
The ITAAC verifies that output documentation of each Software Lifecycle phase satisfies the requirements of that phase for the MPS and that software were implemented per licensing commitments to 10 CFR Part 50, Appendix A, GDC1 (Quality), Appendix B (Quality Assurance Criteria), RGs 1.28, 1.152, 1.168, 1.169, 1.170, 1.171, 1.172, and 1.173, and the associated IEEE standards.
The ITAAC verifies that output documentation of each Software Lifecycle phase satisfies the requirements of that phase for the MPS 14.3-28 and that software were implemented per licensing commitments Certified Design Material and Inspections, Tests, Analyses, and to 10 CFR Part 50, Appendix A, GDC1 (Quality), Appendix B (Quality Assurance Criteria), RGs 1.28, 1.152, 1.168, 1.169, 1.170, 1.171, 1.172, and 1.173, and the associated IEEE standards.
X 02.05.02 MPS Section 7.2.9, Control of Access, Identification, and Repair, discusses the protective measures that prevent modification of the MPS tunable parameters without proper configuration and authorization. Guidance on this issue is provided in DI&C-ISG-04 Revision 1, "Highly-Integrated Control Rooms - Communications Issues," under interdivisional communications, staff position 10.
02.05.02   MPS       Section 7.2.9, Control of Access, Identification, and Repair,               X discusses the protective measures that prevent modification of the MPS tunable parameters without proper configuration and authorization. Guidance on this issue is provided in DI&C-ISG-04 Revision 1, "Highly-Integrated Control Rooms - Communications Issues," under interdivisional communications, staff position 10.
In accordance with Table 14.2-63, a preoperational test demonstrates that protective measures restrict modification to the MPS tunable parameters without proper configuration and authorization. This test will be performed by attempting to modify the tunable parameters with the MPS not in the correct configuration or without authorization.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that protective measures restrict modification to the Acceptance Criteria MPS tunable parameters without proper configuration and authorization. This test will be performed by attempting to modify the tunable parameters with the MPS not in the correct configuration or without authorization.Not used.
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
Draft Revision 3
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-31 Draft Revision 3 02.05.06 MPS Section 7.1.2, Independence, discusses the communication independence between redundant Class 1E digital communication system divisions. The purpose is to verify proper data isolation between redundant divisions. Requirements for independence are given in IEEE Std. 603-1991. Guidance for providing independence between redundant divisions of the Class 1E digital communication system is provided in Digital I&Cs Interim Staff Guidance (ISG) 04.
ITAAC No. System                                  Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.06   MPS       Section 7.1.2, Independence, discusses the communication                   X independence between redundant Class 1E digital communication system divisions. The purpose is to verify proper data isolation between redundant divisions. Requirements for independence are given in IEEE Std. 603-1991. Guidance for providing independence between redundant divisions of the Class 1E digital communication system is provided in Digital I&Cs Interim Staff Guidance (ISG) 04.
A vendor test demonstrates that independence between redundant divisions of the Class 1E MPS is provided.Not used.
A vendor test demonstrates that independence between redundant divisions of the Class 1E MPS is provided.Not used.
02.05.07   MPS       Section 7.1.2, Independence, discusses the communication                   X independence between Class 1E digital communication systems and non-Class 1E digital communication systems. The purpose is to verify that logical or software malfunction of the nonsafety-related system cannot affect the functions of the safety system.
X 02.05.07 MPS Section 7.1.2, Independence, discusses the communication independence between Class 1E digital communication systems and non-Class 1E digital communication systems. The purpose is to verify that logical or software malfunction of the nonsafety-related system cannot affect the functions of the safety system.
14.3-31 Requirements for independence are given in IEEE Std. 603-1991.
Requirements for independence are given in IEEE Std. 603-1991.
Guidance for providing independence between the Class 1E digital Certified Design Material and Inspections, Tests, Analyses, and communication system and non-Class 1E digital communication systems is provided in Digital Instrumentation and Controls ISG 04.
Guidance for providing independence between the Class 1E digital communication system and non-Class 1E digital communication systems is provided in Digital Instrumentation and Controls ISG 04.
A vendor test demonstrates that independence between the Class 1E MPS and non-Class 1E digital systems is provided.
A vendor test demonstrates that independence between the Class 1E MPS and non-Class 1E digital systems is provided.
02.05.08   MPS       Section 7.1.1.2.1, Protection Systems, describes automatic and             X manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the reactor trip system (RTS). The reactor trip functions are listed in Table 7.1-3:
X 02.05.08 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the reactor trip system (RTS). The reactor trip functions are listed in Table 7.1-3:
Reactor Trip Functions. The reactor trip logic for the monitored variables is provided in Figure 7.1-1.
Reactor Trip Functions. The reactor trip logic for the monitored variables is provided in Figure 7.1-1.
The MPS initiates an automatic reactor trip signal when the Acceptance Criteria associated plant condition(s) exist.
The MPS initiates an automatic reactor trip signal when the associated plant condition(s) exist.
In accordance with Table 14.2-63, a preoperational test Draft Revision 3 demonstrates that a reactor trip signal is automatically initiated for each reactor trip function listed in Tier 1 Table 2.5-1.
In accordance with Table 14.2-63, a preoperational test demonstrates that a reactor trip signal is automatically initiated for each reactor trip function listed in Tier 1 Table 2.5-1.
The actuation of reactor trip breakers (RTBs) is not required for this test. The verification of the existence of a reactor trip signal is accomplished using main control room (MCR) displays.Not used.
The actuation of reactor trip breakers (RTBs) is not required for this test. The verification of the existence of a reactor trip signal is accomplished using main control room (MCR) displays.Not used.
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-32 Draft Revision 3 02.05.09 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual engineered safety features (ESFs) actuations, variables that are monitored to provide input into automatic ESFs signals, and the features of the ESF systems. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions.
ITAAC No. System                                Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.09   MPS       Section 7.1.1.2.1, Protection Systems, describes automatic and           X manual engineered safety features (ESFs) actuations, variables that are monitored to provide input into automatic ESFs signals, and the features of the ESF systems. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions.
The ESFs logic for the monitored variables is provided in Figure 7.1-1.
The ESFs logic for the monitored variables is provided in Figure 7.1-1.
The MPS initiates an automatic ESF actuation signal when the associated plant condition(s) exist.
The MPS initiates an automatic ESF actuation signal when the associated plant condition(s) exist.
In accordance with Table 14.2-63, a preoperational test demonstrates that an automatic ESF actuation signal is automatically initiated for each of the ESF functions listed in Tier 1 Table 2.5-2.
In accordance with Table 14.2-63, a preoperational test demonstrates that an automatic ESF actuation signal is automatically initiated for each of the ESF functions listed in Tier 1 Table 2.5-2.
The actuation of ESFs equipment is not required for this test. The 14.3-32 verification of the existence of an ESF actuation signal is Certified Design Material and Inspections, Tests, Analyses, and accomplished using MCR displays.Not used.
The actuation of ESFs equipment is not required for this test. The verification of the existence of an ESF actuation signal is accomplished using MCR displays.Not used.
02.05.10   MPS       Section 7.1.1.2.1, Protection Systems, describes automatic and           X manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the RTS. The reactor trip functions are listed in Table 7.1-3: Reactor Trip Functions. The reactor trip logic for the monitored variables is provided in Figure 7.1.
X 02.05.10 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the RTS. The reactor trip functions are listed in Table 7.1-3: Reactor Trip Functions. The reactor trip logic for the monitored variables is provided in Figure 7.1.
The MPS initiates an automatic reactor trip signal for the reactor trip functions when the associated plant condition(s) exist.
The MPS initiates an automatic reactor trip signal for the reactor trip functions when the associated plant condition(s) exist.
In accordance with Table 14.2-63, a preoperational test demonstrates that the RTBs open when any one of the automatic Acceptance Criteria reactor trip functions is initiated from the MCR. The RTBs are only opened once to satisfy this test objective.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that the RTBs open when any one of the automatic reactor trip functions is initiated from the MCR. The RTBs are only opened once to satisfy this test objective.Not used.
Draft Revision 3
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-33 Draft Revision 3 02.05.11 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual ESFs actuations, variables that are monitored to provide input into automatic ESFs signals, and the features of the engineered safety feature systems. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions. The ESFs logic for the monitored variables is provided in Figure 7.1.
ITAAC No. System                                Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.11   MPS       Section 7.1.1.2.1, Protection Systems, describes automatic and           X manual ESFs actuations, variables that are monitored to provide input into automatic ESFs signals, and the features of the engineered safety feature systems. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions. The ESFs logic for the monitored variables is provided in Figure 7.1.
The MPS initiates an automatic ESF actuation signal for the functions listed in Tier 1 Table 2.5-2 when the associated plant condition(s) exist.
The MPS initiates an automatic ESF actuation signal for the functions listed in Tier 1 Table 2.5-2 when the associated plant condition(s) exist.
In accordance with Table 14.2-63, a preoperational test demonstrates that ESF equipment automatically actuates to perform its safety-related function listed in Tier 1 Table 2.5-2 upon an injection of a single simulated MPS signal.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that ESF equipment automatically actuates to perform its safety-related function listed in Tier 1 Table 2.5-2 upon an injection of a single simulated MPS signal.Not used.
14.3-33 02.05.12   MPS       Section 7.1.1.2.1, Protection Systems, describes automatic and          X Certified Design Material and Inspections, Tests, Analyses, and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the RTS. A manual reactor trip is one of the MPS manually actuated functions.
X 02.05.12 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the RTS. A manual reactor trip is one of the MPS manually actuated functions.
In accordance with Table 14.2-63, a preoperational test demonstrates that the RTBs open when a reactor trip is manually initiated from the MCR.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that the RTBs open when a reactor trip is manually initiated from the MCR.Not used.
02.05.13   MPS       Section 7.1.1.2.1, Protection Systems, describes manual ESFs             X actuation, variables that are monitored to provide input into automatic ESFs signals, and the features of the ESF system. The ESFs functions that can be manually actuated are shown in Figure 7.1-1 Acceptance Criteria In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS actuates the ESF equipment to perform its safety-related function listed in Tier 1 Table 2.5-23 when Draft Revision 3 manually initiated.
X 02.05.13 MPS Section 7.1.1.2.1, Protection Systems, describes manual ESFs actuation, variables that are monitored to provide input into automatic ESFs signals, and the features of the ESF system. The ESFs functions that can be manually actuated are shown in Figure 7.1-1 In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS actuates the ESF equipment to perform its safety-related function listed in Tier 1 Table 2.5-23 when manually initiated.
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-34 Draft Revision 3 02.05.14 MPS Section 7.1.6, Safety Evaluation, describes the MPS conformance to the GDC in 10 CFR 50 Appendix A. Guidance provided in Design Specific Review Standard Section 7.2.3, Reliability, Integrity, and Completion of Protective Action, states that the design incorporate protective measures that provide for I&C safety systems to fail in a safe state, or into a state that has been demonstrated to be acceptable on some other defined basis, if conditions such as disconnection of the system, loss of power, or adverse environments, are experienced.
ITAAC No. System                                Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.14   MPS       Section 7.1.6, Safety Evaluation, describes the MPS conformance to       X the GDC in 10 CFR 50 Appendix A. Guidance provided in Design Specific Review Standard Section 7.2.3, Reliability, Integrity, and Completion of Protective Action, states that the design incorporate protective measures that provide for I&C safety systems to fail in a safe state, or into a state that has been demonstrated to be acceptable on some other defined basis, if conditions such as disconnection of the system, loss of power, or adverse environments, are experienced.
Section 7.1.6 describes that consistent with GDC 23, the MPS is designed, with sufficient functional diversity as to prevent the loss of a protection function, to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of power, or postulated adverse environments are experienced. Section 7.2.3.2, System Integrity Characteristics, states that the MPS is designed such that in the event of a condition such as a system disconnection or loss of power the MPS fails into a safe state.
Section 7.1.6 describes that consistent with GDC 23, the MPS is designed, with sufficient functional diversity as to prevent the loss of a protection function, to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of power, or postulated adverse environments are experienced. Section 7.2.3.2, 14.3-34 System Integrity Characteristics, states that the MPS is designed Certified Design Material and Inspections, Tests, Analyses, and such that in the event of a condition such as a system disconnection or loss of power the MPS fails into a safe state.
In accordance with Table 14.2-63, a preoperational test demonstrates that when the loss of electrical power is detected in a separation group of the MPS that separation group fails to a safe state resulting in a reactor trip state for that separation group.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that when the loss of electrical power is detected in a separation group of the MPS that separation group fails to a safe state resulting in a reactor trip state for that separation group.Not used.
Acceptance Criteria Draft Revision 3
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-35 Draft Revision 3 02.05.15 MPS Section 7.1.6, Safety Evaluation, describes the MPS conformance to the GDC in 10 CFR 50 Appendix A. Guidance provided in Design Specific Review Standard Section 7.2.3, Reliability, Integrity, and Completion of Protective Action, states that the design incorporate protective measures that provide for I&C safety systems to fail in a safe state, or into a state that has been demonstrated to be acceptable on some other defined basis, if conditions such as disconnection of the system, loss of power, or adverse environments, are experienced.
ITAAC No. System                                Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.15   MPS       Section 7.1.6, Safety Evaluation, describes the MPS conformance to       X the GDC in 10 CFR 50 Appendix A. Guidance provided in Design Specific Review Standard Section 7.2.3, Reliability, Integrity, and Completion of Protective Action, states that the design incorporate protective measures that provide for I&C safety systems to fail in a safe state, or into a state that has been demonstrated to be acceptable on some other defined basis, if conditions such as disconnection of the system, loss of power, or adverse environments, are experienced.
Section 7.1.6 describes that consistent with GDC 23, the MPS is designed, with sufficient functional diversity as to prevent the loss of a protection function, to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of power, or postulated adverse environments are experienced. Section 7.2.3.2, System Integrity Characteristics, states that the MPS is designed such that in the event of a condition such as a system disconnection or loss of power the MPS fails into a safe state. For an ESF function this predefined safe state may be that the actuated component remains as-is.
Section 7.1.6 describes that consistent with GDC 23, the MPS is designed, with sufficient functional diversity as to prevent the loss of a protection function, to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of power, or postulated adverse environments are experienced. Section 7.2.3.2, 14.3-35 System Integrity Characteristics, states that the MPS is designed Certified Design Material and Inspections, Tests, Analyses, and such that in the event of a condition such as a system disconnection or loss of power the MPS fails into a safe state. For an ESF function this predefined safe state may be that the actuated component remains as-is.
In accordance with Table 14.2-63, a preoperational test demonstrates that when the loss of electrical power is detected in a separation group of the MPS that separation group fails to a safe state for that separation group.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that when the loss of electrical power is detected in a separation group of the MPS that separation group fails to a safe state for that separation group.Not used.
Acceptance Criteria Draft Revision 3
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-37 Draft Revision 3 02.05.17 MPS Section 7.2.12.1, Automatic Control, describes the signals and initiating logic for each reactor trip and required response times.
ITAAC No. System                                Discussion                                DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.17   MPS       Section 7.2.12.1, Automatic Control, describes the signals and         X initiating logic for each reactor trip and required response times.
In accordance with Table 14.2-63, a preoperational test demonstrates that the measured time for the reactor trip functions listed in Tier 1 Table 2.5-1 is less than or equal to the maximum values assumed in the accident analysis.
In accordance with Table 14.2-63, a preoperational test demonstrates that the measured time for the reactor trip functions listed in Tier 1 Table 2.5-1 is less than or equal to the maximum values assumed in the accident analysis.
Section 7.2.12.1, Automatic Control, describes the signals and initiating logic for each ESF and the required response times.
Section 7.2.12.1, Automatic Control, describes the signals and initiating logic for each ESF and the required response times.
In accordance with Table 14.2-63, a preoperational test demonstrates that the measured time for the ESF functions listed in Tier 1 Table 2.5-2 is less than or equal to the maximum values assumed in the accident analysis.
In accordance with Table 14.2-63, a preoperational test demonstrates that the measured time for the ESF functions listed in Tier 1 Table 2.5-2 is less than or equal to the maximum values assumed in the accident analysis.
Technical specification SR 3.0.1 bases states that surveillances may 14.3-37 be performed by means of any series of sequential, overlapping, or total steps provided the entire surveillance is performed within the Certified Design Material and Inspections, Tests, Analyses, and specified frequency. The technical specification bases also describe an allowance for response time to be verified by any series of sequential, overlapping, or total channel measurements.
Technical specification SR 3.0.1 bases states that surveillances may be performed by means of any series of sequential, overlapping, or total steps provided the entire surveillance is performed within the specified frequency. The technical specification bases also describe an allowance for response time to be verified by any series of sequential, overlapping, or total channel measurements.
02.05.18   MPS       Section 7.2.4.1, Operating Bypasses, describes MPS operating           X bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.
X 02.05.18 MPS Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.
The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.
The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.
In accordance with Table 14.2-63, a preoperational test Acceptance Criteria demonstrates that the MPS interlocks listed in Tier 1 Table 2.5-4 automatically establish an operating bypass for the specified reactor trip or ESF actuations when a real or simulated signal Draft Revision 3 simulates that the associated interlock condition is met; and are automatically removed when the real or simulated signal simulates that the associated permissive condition is no longer satisfied.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS interlocks listed in Tier 1 Table 2.5-4 automatically establish an operating bypass for the specified reactor trip or ESF actuations when a real or simulated signal simulates that the associated interlock condition is met; and are automatically removed when the real or simulated signal simulates that the associated permissive condition is no longer satisfied.Not used.
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-38 Draft Revision 3 02.05.19 MPS Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.
ITAAC No. System                                Discussion                                DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.19   MPS       Section 7.2.4.1, Operating Bypasses, describes MPS operating           X bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.
The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.
The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.
In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS permissives listed in Tier 1 Table 2.5-4 allows the manual bypass of the specified reactor trip or ESF actuations when a real or simulated signal simulates that the associated permissive condition is met; and are automatically removed when the real or simulated signal simulates that the associated permissive condition is no longer satisfied.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS permissives listed in Tier 1 Table 2.5-4 allows the manual bypass of the specified reactor trip or ESF actuations when a real or simulated signal simulates that the associated permissive condition is met; and are automatically removed when the real or simulated signal simulates that the associated permissive condition is no longer satisfied.Not used.
14.3-38 02.05.20   MPS       Section 7.2.4.1, Operating Bypasses, describes MPS operating           X bypasses for reactor trip functions. Section 7.2.4.1, Operating Certified Design Material and Inspections, Tests, Analyses, and Bypasses, describes MPS operating bypasses for ESF actuations.
X 02.05.20 MPS Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.
The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.
The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.
In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS overrides listed in Tier 1 Table 2.5-4 are established when the manual override switch is active and a real or simulated RT-1 interlock is established.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS overrides listed in Tier 1 Table 2.5-4 are established when the manual override switch is active and a real or simulated RT-1 interlock is established.Not used.
Acceptance Criteria Draft Revision 3
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-39 Draft Revision 3 02.05.21 MPS Section 7.2.4.2, Maintenance Bypass, describes the MPS maintenance bypass operation mode. An individual protection channel can be placed in a maintenance bypass operation mode to allow manual testing and maintenance during power operation, while ensuring that the minimum redundancy required by the Technical Specifications is maintained. The reactor trip functions are listed in Table 7.1-3: Reactor Trip Functions. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions.
ITAAC No. System                                Discussion                                  DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.21   MPS       Section 7.2.4.2, Maintenance Bypass, describes the MPS                   X maintenance bypass operation mode. An individual protection channel can be placed in a maintenance bypass operation mode to allow manual testing and maintenance during power operation, while ensuring that the minimum redundancy required by the Technical Specifications is maintained. The reactor trip functions are listed in Table 7.1-3: Reactor Trip Functions. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions.
In accordance with Table 14.2-63, a preoperational test demonstrates that with a safety function module out of service switch activated, the safety function is placed in trip or bypass based on the position of the safety function module trip/bypass switch. Each separation group of the reactor trip functions listed in Tier 1 Table 2.5-1 and each separation group of the ESFs signals listed in Tier 1 Table 2.5-2 is tested by placing the separation group in maintenance bypass.Not used.
In accordance with Table 14.2-63, a preoperational test demonstrates that with a safety function module out of service switch activated, the safety function is placed in trip or bypass based on the position of the safety function module trip/bypass switch. Each separation group of the reactor trip functions listed in Tier 1 Table 2.5-1 and each separation group of the ESFs signals 14.3-39 listed in Tier 1 Table 2.5-2 is tested by placing the separation group Certified Design Material and Inspections, Tests, Analyses, and in maintenance bypass.Not used.
X 02.05.22 MPS Section 7.2.4.2, Maintenance Bypass, describes the MPS maintenance bypass operation mode. An individual protection channel can be placed in a maintenance bypass operation mode to allow manual testing and maintenance during power operation, while ensuring that the minimum redundancy required by the technical specifications is maintained. Section 7.2.4.2 discusses the status indication of MPS manual or automatic bypasses placed in maintenance bypass operation mode.
02.05.22   MPS       Section 7.2.4.2, Maintenance Bypass, describes the MPS                   X maintenance bypass operation mode. An individual protection channel can be placed in a maintenance bypass operation mode to allow manual testing and maintenance during power operation, while ensuring that the minimum redundancy required by the technical specifications is maintained. Section 7.2.4.2 discusses the status indication of MPS manual or automatic bypasses placed in maintenance bypass operation mode.
In accordance with Table 14.2-63, a preoperational test demonstrates that each operational MPS manual or automatic bypass is indicated in the MCR.
In accordance with Table 14.2-63, a preoperational test demonstrates that each operational MPS manual or automatic Acceptance Criteria bypass is indicated in the MCR.
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
Draft Revision 3
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP


Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features Tier 2 NuScale Final Safety Analysis Report and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-43 Draft Revision 3 02.05.27 MPS Section 7.0.4.1.2, Reactor Trip System, discusses the arrangement of the protection system RTBs. Figure 7.0-6: Reactor Trip Breaker Arrangement provides the arrangement of the RTBs.
ITAAC No. System                                Discussion                                DBA  Internal/External  Radiological  PRA & Severe  FP Hazard                          Accident 02.05.27   MPS       Section 7.0.4.1.2, Reactor Trip System, discusses the arrangement of   X the protection system RTBs. Figure 7.0-6: Reactor Trip Breaker Arrangement provides the arrangement of the RTBs.
This ITAAC verifies that the RTBs conform to the arrangement indicated in Tier 1 Figure 2.5-1. In addition, the ITAAC inspection verifies proper connection of the shunt and undervoltage trip mechanisms and other auxiliary contacts.Not used.
This ITAAC verifies that the RTBs conform to the arrangement indicated in Tier 1 Figure 2.5-1. In addition, the ITAAC inspection verifies proper connection of the shunt and undervoltage trip mechanisms and other auxiliary contacts.Not used.
02.05.28   MPS       Section 7.1.5.1, Application of NUREG/CR-6303 Guidelines,               X discusses that two of the four separation groups and one of the two divisions of RTS and ESFAS will utilize a different programmable technology.
X 02.05.28 MPS Section 7.1.5.1, Application of NUREG/CR-6303 Guidelines, discusses that two of the four separation groups and one of the two divisions of RTS and ESFAS will utilize a different programmable technology.
A ITAAC inspection is performed to verify that MPS separation groups A & C and Division I of RTS and ESFAS utilize a different programmable technology from separation groups B & D and 14.3-43 Division II of RTS and ESFAS.Not used.
A ITAAC inspection is performed to verify that MPS separation groups A & C and Division I of RTS and ESFAS utilize a different programmable technology from separation groups B & D and Division II of RTS and ESFAS.Not used.
Certified Design Material and Inspections, Tests, Analyses, and 02.05.29   MPS       Section 7.1.3.3, Redundancy in Nonsafety I&C System Design,             X discusses that when operators evacuate the MCR and occupy the RSS, two manual isolation switches for the MPS divisions are provided to isolate the MPS manual actuation switches in the MCR to prevent fires in the MCR from causing spurious actuations of associated equipment.
X 02.05.29 MPS Section 7.1.3.3, Redundancy in Nonsafety I&C System Design, discusses that when operators evacuate the MCR and occupy the RSS, two manual isolation switches for the MPS divisions are provided to isolate the MPS manual actuation switches in the MCR to prevent fires in the MCR from causing spurious actuations of associated equipment.
An ITAAC inspection is performed of each MCR isolation switch location to verify that the switch exists in the RSS.Not used.
An ITAAC inspection is performed of each MCR isolation switch location to verify that the switch exists in the RSS.Not used.
Acceptance Criteria Draft Revision 3}}
X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)
ITAAC No.
System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP}}

Latest revision as of 09:29, 5 January 2025

Nuscale Power, LLC Submittal of Changes to Final Safety Analysis Report, Tier 1 Section 2.5, Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design .
ML18320A189
Person / Time
Site: NuScale
Issue date: 11/16/2018
From: Rad Z
NuScale
To:
Document Control Desk, Office of New Reactors
References
LO-1118-62962
Download: ML18320A189 (97)


Text

November 16, 2018 U.S. Nuclear Regulatory Commission ATTN: Document Control Desk One White Flint North 11555 Rockville Pike Rockville, MD 20852-2738 L0-1118-62962 Docket No.52-048

SUBJECT:

NuScale Power, LLC Submittal of Changes to Final Safety Analysis Report, Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System,"

Tier 2 Sections 14.2, "Initial Plant Test Program," and 14.3, "Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria"

REFERENCES:

Letter from NuScale Power, LLC to Nuclear Regulatory Commission, "NuScale Power, LLC Submittal of the Nu Scale Standard Plant Design Certification Application, Revision 1," dated March 15, 2018 (ML18086A090)

During an October 24, 2018 Public meeting to discuss the NRC Staffs review of NuScale's Initial Test Program, NuScale Power, LLC (NuScale) discussed potential updates to Final Safety Analysis Report (FSAR), Tier 2 Section 14.2. As a result of this discussion, NuScale changed Tier 1 Section 2.5 and Tier 2 Sections 14.2 and 14.3. The Enclosure to this letter provides a mark-up of the FSAR pages incorporating revisions to Tier 1 Section 2.5 and Tier 2 Sections 14.2 and 14.3, in redline/strikeout format. Nu Scale will include this change as part of a future revision to the NuScale Design Certification Application.

This letter makes no regulatory commitments or revisions to any existing regulatory commitments.

If you have any questions, please feel free to contact Carrie Fosaaen at 541-452-7126 or at cfosaaen@nuscalepower.com.

Sincerely, Zackary W. Rad Director, Regulatory Affairs NuScale Power, LLC Distribution: Samuel Lee, NRC, OWFN-8G9A Gregory Cranston, NRC, OWFN-8G9A Cayetano Santos, NRC, OWFN-8G9A NuScale Power, LLC 1100 NE Circle Blvd, Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com

LO-1118-62962 Page 2 of 2 11/15/18 NuScale Power, LLC 1100 NE Circle Blvd., Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com

Enclosure:

Changes to NuScale Final Safety Analysis Report Sections Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria

LO-1118-62962 NuScale Power, LLC 1100 NE Circle Blvd., Suite 200 Corvallis, Oregon 97330 Office 541.360-0500 Fax 541.207.3928 www.nuscalepower.com

Enclosure:

Changes to NuScale Final Safety Analysis Report Sections Tier 1 Section 2.5, "Module Protection System and Safety Display and Indication System, Tier 2 Sections 14.2, Initial Plant Test Program, and 14.3, Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria

NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-15 Draft Revision 3 xiii. An analysis will be performed of the output documentation of the System Testing Phase.

xiii. The output documentation of the MPS Testing Phase satisfies the requirements of the System Testing Phase.

xiv. An analysis will be performed of the output documentation of the System Installation Phase.

xiv. The output documentation of the MPS Installation Phase satisfies the requirements of the System Installation Phase.

2.

Protective measures are provided to restrict modifications to the MPS tunable parametersNot used.

A test will be performed on the access control features associated with MPS tunable parametersNot used.

Protective measures restrict modification to the MPS tunable parameters without proper configuration and authorizationNot used.

3.

Physical separation exists between the redundant separation groups and divisions of the MPS Class 1E instrumentation and control current-carrying circuits, and between Class 1E instrumentation and control current-carrying circuits and non-Class 1E instrumentation and control current-carrying circuits.

An inspection will be performed of the MPS Class 1E as-built instrumentation and control current-carrying circuits.

i.

Physical separation between redundant separation groups and divisions of MPS Class 1E instrumentation and control current-carrying circuits is provided by a minimum separation distance, or by barriers (where the minimum separation distances cannot be maintained), or by a combination of separation distance and barriers.

ii.

Physical separation between MPS Class 1E instrumentation and control current-carrying circuits and non-Class 1E instrumentation and control current-carrying circuits is provided by a minimum separation distance, or by barriers (where the minimum separation distances cannot be maintained), or by a combination of separation distance and barriers.

4.

Electrical isolation exists between the redundant separation groups and divisions of the MPS Class 1E instrumentation and control circuits, and between Class 1E instrumentation and control circuits and non-Class 1E instrumentation and control circuits to prevent the propagation of credible electrical faults.

An inspection will be performed of the MPS Class 1E as-built instrumentation and control circuits.

i.

Class 1E electrical isolation devices are installed between redundant separation groups and divisions of MPS Class 1E instrumentation and control circuits.

ii.

Class 1E electrical isolation devices are installed between MPS Class 1E instrumentation and control circuits and non-Class 1E instrumentation and control circuits.

5.

Electrical isolation exists between the EDSS-MS subsystem non-Class 1E circuits and connected MPS Class 1E circuits to prevent the propagation of credible electrical faults.

i.

A type test, analysis, or a combination of type test and analysis will be performed of the Class 1E isolation devices.

i.

The Class 1E circuit does not degrade below defined acceptable operating levels when the non-Class 1E side of the isolation device is subjected to the maximum credible voltage, current transients, shorts, grounds, or open circuits.

ii.

An inspection will be performed of the MPS Class 1E as-built circuits.

ii.

Class 1E electrical isolation devices are installed between the EDSS-MS Subsystem non-Class 1E circuits and connected MPS Class 1E circuits.

Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)

No.

Design Commitment Inspections, Tests, Analyses Acceptance Criteria

NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-16 Draft Revision 3 6.

Communications independence exists between redundant separation groups and divisions of the Class 1E MPSNot used.

A test will be performed of the Class 1E MPSNot used.

Communications independence between redundant separation groups and divisions of the Class 1E MPS is providedNot used.

7.

Communications independence exists between the Class 1E MPS and non-Class 1E digital systems.

A test will be performed of the Class 1E MPS.

Communications independence between the Class 1E MPS and non-Class 1E digital systems is provided.

8.

The MPS automatically initiates a reactor trip signalNot used.

A test will be performed of the MPSNot used.

A reactor trip signal is automatically initiated for each reactor trip function listed in Table 2.5-1Not used.

9.

The MPS automatically initiates an ESF actuation signalNot used.

A test will be performed of the MPSNot used.

An ESF actuation signal is automatically initiated for each ESF function listed in Table 2.5-2Not used.

10.

The MPS automatically actuates a reactor trip.Not used.

A test will be performed of the MPS.Not used.

The RTBs open upon an injection of a single simulated MPS reactor trip signal.Not used.

11.

The MPS automatically actuates the engineered safety feature equipment.Not used.

A test will be performed of the MPS.Not used.

The ESF equipment automatically actuates to perform its safety-related function listed in Table 2.5-2 upon an injection of a single simulated MPS signal.Not used.

12.

The MPS manually actuates a reactor trip.Not used.

A test will be performed of the MPS.Not used.

The RTBs open when a reactor trip is manually initiated from the main control room.Not used.

13.

The MPS manually actuates the ESF equipment.

A test will be performed of the MPS.

The MPS actuates the ESF equipment to perform its safety-related function listed in Table 2.5-3Table 2.5-2 when manually initiated.

14.

The reactor trip logic fails to a safe state such that loss of electrical power to a MPS separation group results in a trip state for that separation group.Not used.

A test will be performed of the MPS.Not used.

Loss of electrical power in a separation group results in a trip state for that separation group.Not used.

15.

The ESFs logic fails to a safe state such that loss of electrical power to a MPS separation group results in a predefined safe state for that separation group.Not used.

A test will be performed of the MPS.Not used.

Loss of electrical power in a separation group results in an actuation state for that separation group.Not used.

Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)

No.

Design Commitment Inspections, Tests, Analyses Acceptance Criteria

NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-17 Draft Revision 3 16.

An MPS signal once initiated (automatically or manually), results in an intended sequence of protective actions that continue until completion, and requires deliberate operator action in order to return the safety systems to normal.

A test will be performed of the MPS reactor trip and engineered safety features signals.

i.

Upon initiation of a real or simulated MPS reactor trip signal listed in Table 2.5-1, the RTBs open, and the RTBs do not automatically close when the MPS reactor trip signal clears.

ii.

Upon initiation of a real or simulated MPS engineered safety feature actuation signal listed in Table 2.5-2, the ESF equipment actuates to perform its safety-related function and continues to maintain its safety-related position and perform its safety-related function when the MPS engineered safety feature actuation signal clears.

17.

The MPS response times from sensor output through equipment actuation for the reactor trip functions and ESF functions are less than or equal to the value required to satisfy the design basis safety analysis response time assumptions.

A test will be performed of the MPS.

The MPS reactor trip functions listed in Table 2.5-1 and ESFs functions listed in Table 2.5-2 have response times that are less than or equal to the design basis safety analysis response time assumptions.

18.

The MPS interlocks function as required when associated conditions are met.Not used.

A test will be performed of the MPS.Not used.

The MPS interlocks listed in Table 2.5-4 automatically establish an operating bypass for the specified reactor trip of ESF actuations when the interlock condition is met. The operating bypass is automatically removed when the interlock condition is no longer satisfied.Not used.

19.

The MPS permissives function as required when associated conditions are met.Not used.

A test will be performed of the MPS.Not used.

The MPS permissives listed in Table 2.5-4 allows the manual bypass of the specified reactor trip or ESF actuations when the permissive condition is met. The operating bypass is automatically removed when the permissive condition is no longer satisfied.Not used.

20.

The MPS overrides function as required when associated conditions are met.Not used.

A test will be performed of the MPS.Not used.

The MPS overrides listed in Table 2.5-4 are established when the manual override switch is active and RT-1 interlock is established. The Override switch must be manually taken out of Override when the Override, O-1, is no longer needed.Not used.

21.

The MPS is capable of performing its safety-related functions when one of its protection channels is placed in maintenance bypass.Not used.

A test will be performed of the MPS.Not used.

With a safety function module out of service switch activated, the safety function is placed in trip or bypass based on the position of the safety function module trip/bypass switch.Not used.

22.

MPS operational bypasses are indicated in the MCR.

A test will be performed of the MPS.

Each operational MPS manual or automatic bypass is indicated in the MCR.

23.

MPS maintenance bypasses are indicated in the MCR.

A test will be performed of the MPS.

Each maintenance bypass is indicated in the MCR.

Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)

No.

Design Commitment Inspections, Tests, Analyses Acceptance Criteria

NuScale Tier 1 Module Protection System and Safety Display and Indication System Tier 1 2.5-18 Draft Revision 3 24.

The MPS self-test features detect faults in the system and provide an alarm in the main control room.

A test will be performed of the MPS.

A report exists and concludes that:

  • Self-testing features verify that faults requiring detection are detected.
  • Self-testing features verify that upon detection, the system responds according to the type of fault.
  • Self-testing features verify that faults are detected and responded within a sufficient timeframe to ensure safety function is not lost.
  • The presence and type of fault is indicated by the MPS alarms and displays.

25.

The PAM Type B and Type C displays are indicated on the SDIS displays in the MCR.

An inspection will be performed for the ability to retrieve the as-built PAM Type B and Type C displays on the SDIS displays in the MCR.

The PAM Type B and Type C displays listed in Table 2.5-5 are retrieved and displayed on the SDIS displays in the MCR.

26.

The controls located on the operator workstations in the MCR operate to perform IHAs.

A test will be performed of the controls on the operator workstations in the MCR.

The IHAs controls provided on the operator workstations in the MCR perform the functions listed in Table 2.5-6.

27.

The RTBs are installed and arranged in order to successfully accomplish the reactor trip function under design conditions.Not used.

An inspection will be performed of the as-built RTBs, including the connections for the shunt and undervoltage trip mechanism and auxiliary contacts.Not used.

The RTBs have the proper connections for the shunt and undervoltage trip mechanisms and auxiliary contacts, and are arranged as shown in Figure 2.5-2 to successfully accomplish the reactor trip function.Not used.

28.

Two of the four separation groups and one of the two divisions of RTS and ESFAS will utilize a different programmable technology.Not used.

An inspection will be performed of the as-built MPS.Not used.

Separation groups A & C and Division I of RTS and ESFAS utilize a different programmable technology from separation groups B & D and Division II of RTS and ESFAS.Not used.

29.

The MCR isolation switches that isolate the manual MCR switches from MPS in case of a fire in the MCR are located in the remote shutdown station.Not used.

An inspection will be performed of the location of the as-built MCR isolation switches.Not used.

The MCR isolation switches are located in the remote shutdown station.Not used.

Table 2.5-7: Module Protection System and Safety Display and Indication System Inspections, Tests, Analyses, and Acceptance Criteria (Continued)

No.

Design Commitment Inspections, Tests, Analyses Acceptance Criteria

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-23 Draft Revision 3 System Level Test #2-1 Test Objective Test Method Acceptance Criteria i.

Verify the PCUS demineralizers are protected against high water temperatureVerify the SFPCS and the RPCS provide design flow rate to the UHS when aligned for PCUS water cleanup.

ii.

Verify the SFPCS and the RPCS provide design flow rate to the UHS following a PCUS isolation.

i.

Place the SFPCS in service to flow through a pool cleanup filter and a demineralizer and return flow to the spent fuel pool.

AND Place the RPCS in service to flow through a different pool cleanup filter and demineralizer and return flow to the reactor pool.

ii.

Simulate a high water temperature upstream of one of the pool cleanup filters.

i.

a.

The MCR indication for SFPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1a b.

The MCR indication for RPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1b ii.

a.

SFPCS flow and RPCS flow to the pool cleanup filters and demineralizers stop.

b.

The SFPCS flow is bypassed to the spent fuel pool.

c.

The RPCS cooling flow is bypassed to the reactor pool.

d.

The MCR indication for SFPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1a e.

The MCR indication for RPCS pump flow satisfies the design flow rate specified in Table 9.1.3-1b Table 14.2-2: Pool Cleanup System Test # 2 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-25 Draft Revision 3 Table 14.2-4: Pool Surge Control System Test # 4 Preoperational test is required to be performed once.

The pool surge control system (PSCS) is described in Section 9.1.3.2.4 and the function verified by this test is:

System Function System Function Categorization Function Verified by Test #

The PSCS supports the UHS by providing surge control for UHS operations.

nonsafety-related Test #4-1 The PSCS supports the UHS by providing a reactor inspection dry dock makeup and drain capability.

nonsafety-related Test #4-1 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

For system level test #4-1, the drydock gate can be open or closed.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each PSCS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each PSCS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each PSCS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each PSCS pump can be started and stopped remotely.

Stop and start each pump from the MCR. MCR display and local, visual observation indicate each pump starts and stops.

v.

Verify the PSCS automatically responds to mitigate a release of radioactivity.

Initiate a real or simulated high radiation signal in the PSCS tank vent line.

i.

The PSCS tank inlet isolation valve is closed.

ii.

The PSCS tank outlet isolation valve is closed.

[ITAAC 03.09.10]

vi. Verify a local grab sample can be obtained from a PSCS grab sample device indicated on the PSC piping and instrumentation diagram.

Place the system in service to allow flow through the grab sampling device.

A local grab sample is successfully obtained.

vii. Verify each PSCS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each PSCS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Test #4-1 Test Objective Test Method Acceptance Criteria Verify PSCS automatic control for dry dock fill and drain.

Align the PSCS for fill and drain of the dry dock.

Fill the dry dock to a level that allows operation of the reactor inspection dry dock evacuation pump.

i.

Start a PSCS pump and simulate the following PSCS conditions:

a.

Dry dock low level b.

PSC tank high level c.

High dry dock level i.

a.

Pump is stopped and return line to pool surge control tank isolation valve is closed.

b.

Pump is stopped and return line to PSCS tank isolation valve is closed.

c.

PSCS tank main discharge line isolation valve is closed.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-26 Draft Revision 3 Table 14.2-5: Ultimate Heat Sink Test # 5 There are no preoperational tests for the UHS.

The UHS is described in Section 9.2.5. The only active functions for the UHS are to provide PAM Type D instrument signals to the safety display and indication system (SDIS). Refer to Table 14.2-66: Safety Display and Indication test

  1. 66 for testing of PAM Type D displays.

System Function System Function Categorization Function Verified by Test #

NoneThe UHS supports the DHRS by accepting the heat from the DHR heat exchanger.

N/Asafety-related N/AReactor Trip from 100 Percent Power Test # 104 Prerequisites:

N/A Component Level Tests None

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-30 Draft Revision 3 Table 14.2-8: Chilled Water System Test # 8 Preoperational test is required to be performed once.

The chilled water system (CHWS) is described in Section 9.2.8 and the function verified by this test is:

System Function System Function Categorization Function Verified by Test #

The CHWS supports the following systems by providing cooling water:

  • Radioactive Waste Building HVAC system (RWBVS)
  • liquid radioactive waste system (LRWS)
  • gaseous radioactive waste system (GRWS) nonsafety-related Test #8-1 Test #8-2 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a CHWS flow balance has been performed.

iii. Verify a pump curve test has been completed for the CHWS pumps.

iv. Chiller performance has been verified by either an Air Conditioning, Heating, and Refrigeration Institute (AHRI) certification or a chiller performance capacity test witnessed at the factory with all test documentation provided.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each CHWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each CHWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each CHWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify the speed of each CHWS variable-speed pump can be manually controlled.

Align the CHWS to provide a flow path to operate a selected pump.

Vary the CHWS pump speed from minimum to maximum from the MCR.

MCR display indicates the speed of each obtains both minimum and maximum pump speeds.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify automatic operation of CHWS pumps and CHWS chiller to protect plant equipment.

Align the CHWS to allow for chiller operation. Place a pump in service.

Initiate a simulated start signal for the following system conditions.

i.

Loss of chilled water flow.

ii.

Loss of SCWS cooling flow to the operating chiller.

MCR display and local, visual observation indicate the following:

i.

a.

Operating pump stops b.

Operating chiller stops ii.

Operating chiller stops vi. Verify each CHWS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each CHWS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-31 Draft Revision 3 System Level Test #8-1 Test Objective Test Method Acceptance Criteria Verify CHWS cooling water flow rates satisfy design.

i.

Align the CHWS to provide flow to all heat exchangers cooled by the CHWSRVS chiller:

RBVS air handling units RBVS fan coil units CRVS air handling units CRVS fan coil units RWBVS air handling units RWBVS fan coil units LRW degasifier condenser GRWS gas coolers ii.

Open all CHWS flow control valves.

The CHWS cooling flow to each heat exchanger under test meets the minimum flow rate acceptance criteria contained in the CHWS flow balance report.

System Level Test #8-2 Test Objective Test Method Acceptance Criteria Verify CHWS cooling water flow rates satisfy design flow.

i.

Align the CHWS to provide flow to the CRVS air handling units and the CRVS fan coil units cooled by the CHWSRVS standby chiller.

ii.

Open all CHWS flow control valves.

The CRVS standby CHWS cooling flow to each heat exchanger meets the minimum flow rate acceptance criteria contained in the CHWS flow balance report.

Table 14.2-8: Chilled Water System Test # 8 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-34 Draft Revision 3 Table 14.2-10: Circulating Water System Test # 10 This preoperational test is required to be performed once for each circulating water subsystem.

The circulating water system (CWS) is described in Section 10.4.5 and the function verified by this test and power ascension testing is:

System Function System Function Categorization Function Verified by Test #

The utility water system (UWS) supports the CWS by providing makeup water to maintain water level in the CWS cooling tower basins.

nonsafety-related Component-Level Test vi.

Ramp Change in Load Demand Test #100 The CWS function verified by another test is:

System Function System Function Categorization Function Verified by Test #

The CWS supports the FWS by removing heat from the main condenser.

nonsafety-related CAR Test #32-1 Ramp Change in Load Demand Test #100 100 Percent Load Rejection Test #103 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests: NPM #1 (#7)

The minimum inventory of pumps, fans and valves tested for NPM #1 (#7) is that inventory required for 6A (6B) CWS operation to support operation of NPM #1 (#7). The testing will continue until all 6A (6B) CWS equipment is tested.

Test Objective Test Method Acceptance Criteria i.

Verify each CWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each CWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each CWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each CWS cooling tower fan can be started and stopped remotely Align the CWS to allow for cooling tower fan operation.

Stop and start each cooling tower fan from the MCR.

MCR display and local, visual observation indicate each cooling tower fan starts and stops.

v.

Verify each CWS pump can be started and stopped remotely.

Align the CWS to allow for pump operation.

Stop and start each pump from the MCR.

i.

MCR display and local, visual observation indicate each pump starts and stops.

ii.

Audible and visible water hammer are not observed when the pump starts.

iii. CWS pump cavitation is not observed.

iv. Cooling towers do not experience flow surge or overflow.

vi. Verify automatic operation of the CWS cooling tower basin level control valve to maintain CWS cooling tower basin level.

i.

Initiate a cooling tower basin low level signal.

ii.

Initiate a cooling tower basin high level signal.

MCR displays and local, visual observation verifies the following:

i.

The cooling tower basin level control valve is open.

ii.

The cooling tower basin level control valve is closed.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-36 Draft Revision 3 Table 14.2-11: Site Cooling Water System Test # 11 Preoperational test is required to be performed for each NPM.

The site cooling water system (SCWS) is described in Section 9.2.7 and 11.5.2.2.13 and the functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

The SCWS supports the following systems by providing cooling water.

  • turbine generator system (TGS)
  • RCCWS
  • condenser air removal system (CARS)
  • PSS
  • CHWS
  • instrument air system (IAS)
  • SFPCS
  • RPCS
  • FWS
  • balance-of-plant drain system (BPDS) nonsafety-related Test #11-1 The UWS supports the SCWS by providing makeup water to maintain water level in the SCWS cooling tower basins.

nonsafety-related Component-Level Test vii.

Ramp Change in Load Demand Test #100 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify an SCWS flow balance has been performed and the system flow balance records have been approved.

iii. Verify a pump curve test has been completed and approved for the SCWS pumps.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each SCWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each SCWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each SCWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each SCWS cooling tower fan can be started and stopped remotely.

Align the SCWS to allow for cooling tower fan operation.

Stop and start each cooling tower fan from the MCR.

MCR display and local, visual observation indicate each cooling tower fan starts and stops.

v.

Verify each SCWS pump can be started and stopped remotely.

Align the SCWS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

vi. Verify the SCWS standby pump automatically starts to protect plant equipment.

Align the SCWS to allow for pump operation. Place a pump in service.

Initiate a simulated start signal for the following system conditions.

i.

Low pump header pressure signal.

ii.

Low pump header flow signal.

MCR display and local, visual observation indicate the standby pump discharge valve opens to a throttled position, the pump starts, and then the discharge valve fully opens.

Audible and visible water hammer are not observed when the pump starts.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-39 Draft Revision 3 Table 14.2-13: Utility Water System Test # 13 Preoperational test is required to be performed once.

The UWS is described in Section 9.2.9 and the functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The UWS supports the circulating water system by providing makeup water to maintain water level in the CW system cooling tower basins.

nonsafety-related CWS Test #10 Component-Level Test vi.

Ramp Change in Load Demand Test #100 2.

The UWS supports the SCWS by providing makeup water to maintain water level in the SCWS cooling tower basins.

nonsafety related SCWS Test #11 Component-Level Test vii.

Ramp Change in Load Demand Test #100 3.

The UWS supports the following systems by providing makeup water:

-demineralized water system (DWS)

-fire protection system (FPS)

-PWS

-CHWS

-Reactor Building (RXB)

-Turbine Generator Building (TGB)

-Radioactive Waste Building (RWB)

-Annex Building (ANB)

-Control Building (CRB) nonsafety-related component-level tests Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a pump curve test has been completed for the UWS pumps.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each UWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each UWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each UWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each UWS pump can be started and stopped remotely.

Align the UWS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify UWS flow capability by automatic start of each UWS pump while in standby mode.

Align the UWS to allow for pump operation. Place a pump in service.

Initiate a simulated pump trip.

MCR display and local, visual observation indicate the standby pump starts.

Audible and visible water hammer are not observed when the pump starts.

vi. Verify utility water system (UWS) pumps automatically stops to protect plant equipment.

Align the UWS to allow for pump operation. Place a pump in service.

Initiate a simulated UWS storage tank low level signal.

MCR display and local, visual observation indicate each pump stops.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-41 Draft Revision 3 Table 14.2-14: Demineralized Water System Test # 14 Preoperational test is required to be performed once.

The DWS is described in Section 9.2.3 and 11.5.2.2.16 and the function verified by this test is:

System Function System Function Categorization Function Verified by Test #

The DWS supports the following systems by providing coolingmakeup water.

  • boron addition system (BAS)
  • liquid radioactive waste system (LRWS)
  • SFPCS
  • RCCWS
  • process sampling system (PSS)
  • FWS
  • ABS
  • CARS
  • RWBVS
  • PCUS
  • annex building (ANB)
  • balance of plant drains (BPDS)
  • turbine building HVAC system (TBVS)
  • annex building HVAC system
  • reactor building (RXB)
  • radioactive waste building (RWB)
  • feedwater treatment system (FWTS) nonsafety-related component-level tests Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a pump curve test has been completed for the DWS pumps.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each DWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control)

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each DWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each DWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify the DWS pump can be started and stopped remotely.

Align the DWS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify DWS flow capability by automatic start of each DWS pump while in standby mode.

Align the DWS to allow for pump operation. Place a pump in service.

Initiate a simulated pump trip.

MCR display and local, visual observation indicate the standby pump starts.

Audible and visible water hammer are not observed when the pump starts.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-47 Draft Revision 3 Table 14.2-18: Control Room Habitability System Test # 18 Preoperational test is required to be performed once.

The control room habitability system (CRHS) is described in Section 6.4 and the functions verified by this test are:

System Function System Function Categorization Function Verified by Test #

1.

The CRHS supports the Control Building (CRB) by providing clean breathing air to the control room envelope (CRE) and maintaining a positive control room pressure during high radiation or loss of offsite power conditions.

nonsafety-related Test #18-1 Test #18-2 Test #18-3 2.

The CRHS supports the CRB by providing high pressure, clean breathing air in air bottles for use.

nonsafety-related Test #18-1 Test #18-2 3.

The CRVS supports the CRB by providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.

nonsafety-related Test #18-1 4.

The plant protection system (PPS) supports the CRHS by providing actuation and control signals.

nonsafety-related Test #18-1 5.

The CRVS supports the CRB by providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.

nonsafety-related Test #18-1 6.

The CRVS supports the PPS by providing instrument information signals relating to isolation of the CRE and activation of the CRH system.

nonsafety-related Test #18-1 7.

The CRVS supports the CRB by isolating the CRVS outside air intake when radiation is detected downstream of the charcoal filtration unit.from the environment and operating CRVS in recirculation mode to prevent exposure to smoke and toxic gas, or when radiation is detected downstream of the charcoal filtration unit.

nonsafety-related Test #18-1 (radiation detection)

CRVS Test #19-3 (smoke/toxic gas) 8.

The PPS supports the CRVS by providing actuation and control signals to the CRE isolation dampers.

nonsafety-related Test #18-1 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a CRHS air balance has been performed and the CRHS air balance records have been approved. [This prerequisite is not required for component-level tests.]

iii. Verify CRHS air bottlers are pressurized to their design working pressure. [This prerequisite is not required for component-level tests.]

iv. Component Level Tests i. and ii. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-48 Draft Revision 3 Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each CRHS remotely-operated valve can be operated remotely.

Place the CRHS air bottles in service.

Place CRVS in service to supply air to the CRE.

Operate each valve from the MCR.

i.

MCR workstation display, safety display instrument display and local, visual observation indicate each valve fully opens and fully closes under preoperational temperature, differential pressure, and flow conditions.

[ITAAC 03.01.02]

ii.

Verify each CRHS solenoid-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place the CRHS air bottles in service.

Place CRVS in service to supply air to the CRE.

i.

Place each valve in its non-safe position. Isolate electrical power to its solenoid.

i.

MCR display, safety display instrument display and local, visual observation indicate each valve fails open under preoperational temperature, differential pressure, and flow conditions.

[ITAAC 03.01.03]

iii. Verify each CRHS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each CRHS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Test #18-1 Test Objective Test Method Acceptance Criteria i.

Verify PPS provides actuation signals for CRHS and CRVS.

ii.

CRHS realigns to provide breathable air to the CRE under accident conditions.

iii. CRVS realigns to isolate outside air dampers and CRE under accident conditions.

Verify the CRHS and the CRVS automatically respond to provide breathable air to the CRE under accident conditions.

Place the CRVS in automatic operation.

Place the CRHS air bottles in service.

Place CRVS in service to supply air to the CRE.

Start CRVS filter unit.

Initiate each of the following real or simulated CRHS actuation signals:

  • High radiation signal downstream of the CRVS filter unit
  • Loss of AC power.

i.

MCR workstation display and local, visual observation indicate the following:

ia. The CRVS outside air damper closes.

iib. The CRVS filter unit fan stops.

iiic. The CRVS control room envelope isolation dampers close.

ivd.The CRHS air supply isolation valves open.

ve. CRHS pressure relief isolation valves open.

vif. CRVS air handling unit stops.

viig. CRVSE general exhaust fan stops.

viiih. CRVS battery room exhaust fan stops.

[ITAAC 03.09.02]

(items i.a. through i.e.v) i.

PPS generates alarms in the MCR for the following:

a. High radiation
b. Loss of AC power.

Table 14.2-18: Control Room Habitability System Test # 18 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-50 Draft Revision 3 Table 14.2-19: Normal Control Room HVAC System Test # 19 Preoperational test is required to be performed once.

The CRVS is described in Sections 6.4.3.2, 9.4.1, and 11.5.2.2.1, and the functions verified by this test are:

System Function System Function Categorization Function Verified by Test #

1.

The CRVS supports the CRB by providing cooling, heating and humidity control to maintain a suitable environment for the safety and comfort of plant personnel.

nonsafety-related Test #19-1 Test #19-2 2.

The CRVS supports the systems located in the CRB by providing cooling, heating and humidity control to maintain a suitable environment for the operation of system components.

nonsafety-related Test #19-1 Test #19-2 3.

The CRVS supports the CRB by maintaining the CRB at a positive pressure with respect to adjacent areas during normal operation.The CRVS supports the CRB by isolating the CRVS outside air intake from the environment and operating the CRVS in recirculation mode to prevent exposure to smoke and toxic gas, or when radiation is detected downstream of the charcoal filtration unit.

nonsafety-related Test #19-1Test #19-3 (smoke/toxic gas)

CRHS Test #18-1 (radiation) 4.

The CRVS supports the CRB by maintaining the CRB at a positive ambient pressure relative to the Reactor Building (RXB) and the outside atmosphere to control the ingress of potentially airborne radioactivity from the RXB or the outside atmosphere to the CRB.

nonsafety-related Test #19-1 (CRB positive pressure)

RBVS Test #20-1 (RXB negative pressure) 5.

The PPS supports the CRVS by providing actuation and control signals to the outside air isolation dampers.

nonsafety-related Test #19-3 6.

The CRVS supports the CRB by protecting personnel from exposure to radiation during a design basis accident, when power is available, by removing radioactive contamination from outside air via charcoal filtration, as required by radiation dose analyses.

nonsafety-related Test #19-4 The CRVS functions verified by other tests are:

The CRVS supports the CRB by isolating the CRVS outside air intake when radiation is detected downstream of the charcoal filtration unit.

nonsafety-related CRHS Test #18-1 The CRVS supports the CRB by providing isolation of the CRE from the surrounding areas and outside environment via isolation dampers.

nonsafety-related CRHS Test #18-1

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-51 Draft Revision 3 The CRVS supports the PPS by providing instrument information signals relating to isolation of the CRE and activation of the CRHS.

nonsafety-related CRHS Test #18-1 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a CRVS air balance has been performed and the CRVS air balance records have been approved. [This prerequisite is not required for component-level tests.]

iii. Verify CRVS high-efficiency particulate air (HEPA) and charcoal adsorbers have been installed and tested and the test records have been approved. [This prerequisite is not required for component-level tests.]

iv. Verify CRVS control room isolation dampers have been leak tested and the test records have been approved. [This prerequisite is not required for component-level tests.]

v.

Component Level Tests x. and xi. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each CRVS remotely-operated damper can be operated remotely.

Operate each damper from the MCR and local control panel (if design has local damper control).

MCR display and local, visual observation indicate each damper fully opens and fully closes.

ii.

Verify each CRVS air-operated damper fails to its safe position on loss of air.

Place each damper in its non-safe position. Isolate and vent air to the damper.

MCR display and local, visual observation indicate each damper fails to its safe position.

iii. Verify each CRVS air-operated damper fails to its safe position on loss of electrical power to its solenoid.

Place each damper in its non-safe position. Isolate electrical power to its solenoid.

MCR display and local, visual observation indicate each damper fails to its safe position.

iv. Verify CRVS dampers automatically close on associated smoke or fire signals.

Open each damper actuated by a smoke or fire signal. Initiate an alarm signal for each damper.

MCR display and local, visual observation indicate each damper closes.

v.

Verify each required CRVS fan stops on actuation of its associated fire or smoke alarm.

Initiate an alarm signal for each fan.

MCR display and local, visual observation indicate each fan stops.

vi. Verify each CRVS pressurization fan starts automatically on the actuation of its associated fire or smoke alarm.

Initiate an alarm signal for each fan.

MCR display and local, visual observation indicate each pressurization fan starts.

vii. Verify the fan speed of each CRVS variable-speed fan can be manually controlled.

Vary the speed of each fan from the MCR and local control panel (if design has local fan control).

MCR display indicates the speed of each fan varies from minimum to maximum speed.

viii. Verify the standby CRVS main supply air handling unit (AHU) starts automatically on the stop of the operating CRVS main supply AHU.

Place an AHU in service. Place the standby AHU in automatic control. Stop the operating AHU.

MCR display and local, visual observation indicate the standby AHU starts.

ix. Verify each standby CRVS fan coil unit (FCU) starts automatically on the stop of the operating CRVS fan coil unit.

Place an FCU in service. Place the standby FCU in automatic control. Stop the operating FCU.

MCR display and local, visual observation indicate the standby FCU starts.

x.

Verify each CRVS control room envelope isolation damper fails to its safe position on loss of air.

Place each damper in its non-safe position. Isolate and vent air to the damper.

Each CRVS control room envelope isolation damper fails to its closed position on loss of air under preoperational temperature, differential pressure, and flow conditions while the CRV system is supplying flow to the CRE.

[ITAAC 03.02.01]

Table 14.2-19: Normal Control Room HVAC System Test # 19 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-53 Draft Revision 3 System Level Test #19-3 Test Objective Test Method Acceptance Criteria Verify the CRVS isolates makeup air when smoke or toxic gas is detected in the makeup air ductworkVerify PPS actuates CRVS outside air dampers when toxic gas or smoke is detected in the makeup air ductwork.

Place the CRVS in automatic operation.

i.

Initiate a simulated high smoke or toxic gas signal for the makeup air ductwork upstream of the CRVS filter unit.

Outside air dampers is closed to isolate makeup air.

System Level Test #19-4 Test Objective Test Method Acceptance Criteria Verify the CRVS automatically responds to mitigate the consequences of high radiation in the outside air.

Place the CRVS in automatic operation.

Initiate a real or simulated high radiation signal for the outside air ductwork upstream of the CRVS filter unit.

i.

Outside air is diverted through the CRVS filter unit by closing the CRVS filter unit bypass dampers and opening the CRVS filter unit isolation dampers.

ii.

The CRVS filter unit fan starts.

[ITAAC 03.09.01]

(items i. and ii.)

Table 14.2-19: Normal Control Room HVAC System Test # 19 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-54 Draft Revision 3 Table 14.2-20: Reactor Building HVAC System Test # 20 Preoperational test is required to be performed once.

The RBVS is described in Section 9.4.2 and the functions verified by this test are:

System Function System Function Categorization Function Verified by Test #

1.

The RBVS supports the RXB by providing cooling, heating and humidity control to maintain a suitable environment for the safety and comfort of plant personnel.

nonsafety-related Test #20-1 Test #20-2 Reactor Building Ventilation System Capability Test # 96 2.

The RBVS supports the systems located in the RXB by providing cooling, heating and humidity control to maintain a suitable environment for the operation of system components.

nonsafety-related Test #20-1 Test #20-2 Reactor Building Ventilation System Capability Test # 96 3.

The RBVS supports the RXB by maintaining the RXB at a negative ambient pressure relative to the outside atmosphere to control the movement of potentially airborne radioactivity from the RXB to the environment.

nonsafety-related Test #20-1 Test #20-3 4.

The CRVS supports the CRB by maintaining the CRB at a positive ambient pressure relative to the Reactor Building (RXB) and the outside atmosphere to control the ingress of potentially airborne radioactivity from the RXB or the outside atmosphere to the CRB.

nonsafety-related Test #20-1 (RXB negative pressure)

CRVS Test #19-1 (CRB positive pressure) 5.

The RWBVS supports the RWB by maintaining the RWB at a negative ambient pressure relative to the outside atmosphere to control the movement of potentially airborne radioactivity from the RWB to the environment.

nonsafety-related Test #20-3 (off-normal RBVS exhaust alignment)

RWBVS Test #21-1 (normal RBVS exhaust alignment)

Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify an RBVS air balance has been performed and the RBV system air balance records have been approved. [This prerequisite is not required for component-level tests.]

iii. RBVS high-efficiency particulate air and charcoal adsorbers have been installed and tested. [This prerequisite is not required for component-level tests.]

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each RBVS remotely-operated damper can be operated remotely.

Operate each damper from the MCR and local control panel (if design has local damper control).

MCR display and local, visual observation indicate each damper fully opens and fully closes.

ii.

Verify each RBVS air-operated damper fails to its safe position on loss of air.

Place each damper in its non-safe position. Isolate and vent air to the damper.

MCR display and local, visual observation indicate each damper fails to its safe position.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-61 Draft Revision 3 Table 14.2-23: Radioactive Waste Drain System Test # 23 Preoperational test is required to be performed once.

The RWDS is described in Section 9.3.3 and the functions verified by this test or another preoperational test are:

System Function System Function Categorization Function Verified by Test #

1.

The RWDS supports the RWB by collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.

nonsafety-related Test #23-1 2.

The RWDS supports the RXB by collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.

nonsafety-related Test #23-1 3.

The RWDS supports the ANB by collecting radioactive waste in drain sumps and tanks and transfers it to the LRWS for processing.

nonsafety-related Test #23-1 4.

The RWDS supports the UHS by providing detection and monitoring of leakage through the UHS liner and the dry dock liner.

nonsafety-related Test #23-2 5.

The LRWS supports the RWDS by receiving and processing the effluent from the RWB radioactive waste drain sumps.

nonsafety-related Test #23-1 LRWS Test #35-2 6.

The LRWS supports the RWDS by receiving and processing the effluent from the RXB radioactive waste drain sumps.

nonsafety-related Test #23-1 LRWS Test #35-2 7.

The LRWS supports the RWDS by receiving and processing the effluent from the ANB radioactive waste drain sumps.

nonsafety-related Test #23-1 LRWS Test #35-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each RWDS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each RWDS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each RWDS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each RWDS pump can be started and stopped remotely.

Align the RWDS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

v.

Verify a local grab sample can be obtained from an RWDS grab sample device indicated on the RWDS piping and instrumentation diagram.

Place the system in service to allow flow through the grab sampling device.

A local grab sample is successfully obtained.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-62 Draft Revision 3 vi. Verify each RWDS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each RWDS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Test #23-1 Test Objective Test Method Acceptance Criteria Verify RWDS pumps start and stop automatically and transfer liquid waste to its design location in the LRWS.

Align each RWDS sump or tank to allow water in a selected sump or tank to be pumped to its design location in the LRWS (as indicated by the RWDS piping and instrumentation diagrams).

i.

Fill the selected sump or tank until a HI water level is obtained to start the first (primary) pump.

ii.

Continue filling the sump or tank until a HI-HI level starts the second (alternate) pump.

iii. Stop filling the sump or tank to allow the primary and alternate pumps to stop on low level.

iv. Refill the sump or tank until the alternate pump starts on HI level.

MCR displays and local, visual observation verifies the following:

i.

The first pump starts on HI level and transfers water to its design location in the LRWS.

ii.

The second (alternate) pump starts on HI-HI level.

iii. Both primary and alternate pumps stop on LO level.

iv. The alternate pump starts on HI level.

System Level Test #23-2 Test Objective Test Method Acceptance Criteria Verify each RWDS equipment drain sump alarms on a fill rate that exceeds the pool leakage detection system (PLDS) leakage rate setpoint.

Fill the selected sump at a rate that exceeds the PLDS leakage rate setpoint.

PCS data indicates the sump fill rate alarmed at the PLDS leakage rate setpoint.

Table 14.2-23: Radioactive Waste Drain System Test # 23 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-63 Draft Revision 3 RAI 09.03.03-1S2, RAI 14.02-6, RAI 14.02-6S1 Table 14.2-24: Balance-of-Plant Drain System Test # 24 Preoperational test is required to be performed to support sequence of construction turnover of the BPDS system.

BPDS system is described in Section 9.3.3 and 11.5.2.2.15 and the functions verified by this test are:

System Function System Function Categorization Function Verified by Test #

1.

The BPDS supports the condensate polisher demineralizers, the three cooling tower chemical addition systems, and the DWS reverse osmosis units by providing a means to collect and transfer chemical wastes to either the LRWS or to the UWS.

nonsafety-related Test #24-1 Test #24-7 2.

The BPDS supports the two TGBs, the two diesel generators, the auxiliary boiler, the combustion turbine, the Central Utility Building, and the diesel driven firewater pump by providing a means to collect, treat, and transfer the waste water to the either the LRWS or to the UWS.

nonsafety-related Test #24-1 Test #24-7 3.

The BPDS supports the CRB floor drains by providing a means to collect, treat, and transfer the waste water to the UWS.

nonsafety-related Test #24-1 Test #24-7 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each BPDS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each BPDS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each BPDS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each BPDS pump can be started and stopped remotely.

Align the BPDS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify the pump speed of each BPDS variable-speed pump can be manually controlled.

Vary the speed of each pump from the MCR and local control panel (if design has local pump control).

MCR display indicates the speed of each pump varies from minimum to maximum speed.

vi. Verify each BPDS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each BPDS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-64 Draft Revision 3 System Level Test #24-1 Test Objective Test Method Acceptance Criteria Verify BPDS automatically controlled pumps in sumps and tanks with a fire water removal pump, start and stop automatically and transfer liquid waste to its design location.

Align each BPDS sump or tank to allow water in a selected sump or tank to be pumped to its design location. If the sump fill rate in the following test method is insufficient for automatic start of the alternate pump or fire pump, the primary pump or alternate pump may be temporarily removed from service to allow an increase in the sump level.

i.

Verify that Pump #1 is set to the primary pump and Pump #2 is set to alternate. Fill the selected sump or tank until a HI water level is obtained to start the primary pump.

ii.

Continue filling the sump or tank until a HI-HI level starts the alternate pump.

iii. Fill the sump or tank until a HI-HI-HI level starts the fire water removal pump.

iv. Stop filling the sump or tank to allow the fire water removal pump to stop on HI-HI level.

v.

Continue (or start) sump or tank dewatering to allow the primary and alternate pumps to stop on LO level.

vi. Change pump controls to make Pump #2 the primary pump and Pump #1 the alternate pump, and refill the sump or tank until the primary pump starts on HI level.

vii. Continue filling the sump or tank until a HI-HI level starts the alternate pump.

Note: Pump #1 and Pump #2 are not the actual names of the pumps, these names are used to differentiate between the two pumps.

MCR displays and local, visual observation verifies the following:

i.

The primary pump starts on HI level and transfers water to its design location in the LRWS or UWS system.

ii.

The alternate pump starts on HI-HI level.

iii. The fire water removal pump starts on HI-HI-HI level.

iv. The fire water removal pump stops on HI-HI level.

v.

Both primary and alternate pumps stop on LO level.

vi. The primary pump starts on HI level.

vii. The alternate pump starts on HI-HI level.

Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-65 Draft Revision 3 System Level Test #24-2 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.

Place a north chemical waste water sump pump in operation. Initiate a real or simulated high radiation signal on the 6A CPS regeneration skid waste effluent.

Repeat the test for each pump.

i.

The north chemical waste water sump pump stops.

ii.

North chemical waste collection sump to BPDS collection tank isolation valve is closed.

iii. North chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.

[ITAAC 03.17.02]

(i through iii)

System Level Test #24-3 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.

Place a south chemical waste water sump pump in operation. Initiate a real or simulated high radiation signal on the 6B CPS regeneration skid waste effluent.

Repeat the test for each pump.

i.

The pump stops.

ii.

South chemical waste collection sump to BPDS collection tank isolation valve is closed.

iii. South chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.

[ITAAC 03.18.02]

(i through iii)

System Level Test #24-4 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.

Place a north waste water sump pump in operation. Initiate a real or simulated high radiation signal in the BPDS north TGB floor drains.

Repeat the test for each pump.

i.

The north waste water sump pump stops.

ii.

North waste water sump discharge to BPDS collection tank isolation valve is closed.

iii. North waste water sump discharge to LRW high conductivity waste tank isolation valve is closed.

[ITAAC 03.17.03]

(i thorugh iii)

System Level Test #24-5 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.

Place a south waste water sump pump in operation. Initiate a real or simulated high radiation signal in the BPDS south TGB floor drains.

Repeat the test for each pump.

i.

The south waste water sump pump stops.

ii.

South waste water sump discharge to BPDS collection tank isolation valve is closed.

iii. South waste water sump discharge to LRW high conductivity waste tank isolation valve is closed.

[ITAAC 03.18.03]

(i through iii)

Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-66 Draft Revision 3 System Level Test #24-6 Test Objective Test Method Acceptance Criteria Verify the BPDS automatically responds to mitigate a release of radioactivity.

Place a north waste water sump pump in operation. Initiate a real or simulated high radiation signal in the BPDS auxiliary blowdown cooler condensate.

Repeat the test for each pump.

i.

The north chemical waste water sump pump stops.

ii.

North chemical waste collection sump to BPDS collection tank isolation valve is closed.

iii. North chemical waste collection sump to LRW high conductivity waste tank isolation valve is closed.

[ITAAC 03.17.04]

(i through iii)

System Level Test #24-7 Test Objective Test Method Acceptance Criteria Verify BPDS automatically controlled pumps, in sumps and tanks without a fire water removal pump, start and stop automatically and transfer liquid waste to its design location.

Align each BPDS sump or tank to allow water in a selected sump or tank to be pumped to its design location. If the sump fill rate in the following test method is insufficient for automatic start of the alternate pump, the primary pump may be temporarily removed from service to allow an increase in the sump level.

i.

Verify that Pump #1 is set to the primary pump and Pump #2 is set to alternate. Fill the selected sump or tank until a HI water level is obtained to start the primary pump.

ii. Continue filling the sump or tank until a HI-HI level starts the alternate pump.

iii. Stop filling the sump or tank to allow the primary and alternate pumps to stop on LO level.

iv. Change pump controls to make Pump #2 the primary pump and Pump #1 the alternate pump, and refill the sump or tank until the primary pump starts on HI level.

v. Continue filling the sump or tank until a HI-HI level starts the alternate pump.

Note: Pump #1 and Pump #2 are not the actual names of the pumps; these names are used to differentiate between the two pumps.

MCR displays and local, visual observation verifies the following:

i.

The primary pump starts on HI level and transfers water to its design location in the LRWS or UWS system.

ii. The alternate pump starts on HI-HI level.

iii. Both primary and alternate pumps stop on LO level.

iv. The primary pump starts on HI level.

v. The alternate pump starts on HI-HI level.

Table 14.2-24: Balance-of-Plant Drain System Test # 24 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-70 Draft Revision 3 Table 14.2-27: Main Steam System Test # 27 Preoperational test is required to be performed for each NPM.

The MSS is described in Section 10.3. MS functions are not verified by this test. The MSS functions verified by other tests are:

System Function System Function Categorization Function Verified by Test #

1.

The MSS supports the SG by delivering steam to the main condenser.

nonsafety-related TGS Test #33-2

21. The MSS supports the TGS by providing steam to the TGS.

nonsafety-related TGS Test #33-2 Ramp Change in Load Test #100

32. The MSS supports the CNTS by providing secondary isolation of the main steam lines.

nonsafety-related MPS Test #63-6

43. The MSS supports the DHRS by providing a backup means for required boundary conditions for DHRS operation.

nonsafety-related MPS Test #63-6 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each MSS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control)

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each MSS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each MSS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify automatic operation of MSS extraction steam to protect the main turbine.

Initiate a simulated signal for the following system conditions.

i.

feedwater heater high level ii.

turbine trip Any remote display or local verification indicates the following:

i.

extraction steam block valve closes ii.

extraction steam non-return check valve closes v.

Verify each MSS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each MSS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Tests None

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-71 Draft Revision 3 Table 14.2-28: Feedwater System Test # 28 Preoperational test is required to be performed for each NPM.

The FWS is described in Section 10.4.7; Section 9.2.6 (condensate storage tank); Section 10.4.1 (condenser); FWS functions are not verified by FWS tests. FWS functions verified by other tests are:

System Function System Function Categorization Function Verified by Test #

1.

The FWS supports the CPS by providing water for CPS rinse and CPS resin transfer.

nonsafety-related CPS Test #30-1 2.

The FWS supports the TG by cooling superheated steam in the gland steam desuperheater prior to the steam entering the gland seals.

nonsafety-related TGS Test #33-1 Ramp Change in Load Test #100 3.

The FWS supports the containment system (CNTS) by supplying feedwater to the SGs.

nonsafety-related TGS Test #33-1 Ramp Change in Load Test #100 4.

The FWS supports the turbine generator by cooling superheated turbine bypass steam in the turbine bypass desuperheater prior to the steam entering the main condenser.

nonsafety-related TGS Test #33-1 100 Percent Load Rejection Test #103 5.

The FWS supports the turbine generator by accepting turbine bypass steam into the main condenser.

nonsafety-related TGS Test #33-1 100 Percent Load Rejection Test #103 6.

The FWS supports the CNTS by providing secondary isolation of the feedwater lines.

nonsafety-related MPS Test #63-6 7.

The FWS supports the decay heat removal system (DHRS) by providing secondary isolation of the feedwater lines, ensuring required boundary conditions for DHRS operation.

nonsafety-related MPS Test #63-6 Prerequisites i.Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.Verify a pump curve test has been completed for the FWS pumps.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each FWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each FWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each FWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each FWS condensate pump can be started and stopped remotely.

Align the FWS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-73 Draft Revision 3 Table 14.2-29: Feedwater Treatment System Test # 29 Preoperational test is required to be performed for the 6A NPMs and for the 6B NPMs.

The feedwater treatment system (FWTS) is described in Section 10.4.11 and the function verified by this test and power ascension testing is:

System Function System Function Categorization Function Verified by Test #

The FWTS supports the FWS by controlling and maintaining feedwater chemistry.

nonsafety-related Component-level tests Primary and Secondary Chemistry Test #79 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each FWTS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each FWTS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each FWTS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each FWTS pump can be started and stopped remotely and locally (if designed).

Align the FWTS to allow for pump operation.

Stop and start each remotely-controlled pump from the MCR.

Stop and start each locally-controlled pump locally.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify the speed of each FWTS variable-speed pump can be manually controlled.

Vary the speed of each pump from the MCR and local control panel (if design has local pump control).

MCR display indicates pump speed varies from minimum to maximum speed.

vi. Verify each FWTS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each FWTS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Tests None

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-75 Draft Revision 3 System Level Test #30-1 Test Objective Test Method Acceptance Criteria Verify the CPS automatically completes resin regeneration.

Align the FWS to support CPS resin regeneration.

Align the ABS to support CPS resin regeneration.

i.

Automatically transfer the test resin bed from a condensate polisher to the CPS regeneration skid.

ii.

Initiate an automatic regeneration of the resin.

iii. Automatically transfer the test resin bed from the CPS regeneration skid to a condensate polisher.

i.

The resin transferred to the regeneration skid.

ii.

The CPS regeneration cycle completed successfully.

iii. The resin transferred to a condensate polisher.

iv. ABS steam maintains hot water heater outlet temperature at design setpoint during resin regeneration.

Table 14.2-30: Condensate Polishing System Test # 30 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-76 Draft Revision 3 Table 14.2-31: Feedwater Heater Vents and Drains System Test # 31 Preoperational test is required to be performed for each NPM.

The feedwater heater vents and drains system (HVDS) system is described in Section 10.4.7. and the functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The HVDS system supports the FWS by venting the feedwater heaters.

nonsafety-related Component level tests 2.

The HVDS system supports the FWS by controlling level in the shell sides feedwater heaters.

nonsafety-related Component level tests Ramp Change in Load Demand Test #100 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each HVDS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each HVDS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each HVDS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify automatic operation of HVDS valves to protect the turbine on turbine trip.

Initiate a simulated turbine trip.

Any remote display or local verification indicates the following:

i.

Low, intermediate and high pressure feedwater heater extraction steam supply valves are closed.

ii.

Low, intermediate and high pressure feedwater heater air assisted check valves are closed.

iii. Low, intermediate and high pressure feedwater heater extraction steam dump valves are open.

v.

Verify automatic operation of HVDS valves to protect turbine on high feedwater heater level.

Initiate a simulated signal for the following system conditions.

i.

Low pressure feedwater heater high level.

ii.

Intermediate pressure feedwater heater high level.

iii. High pressure feedwater heater high level Any remote display or local verification indicates the following:

i.

Low pressure feedwater heater extraction steam supply valve and low pressure feedwater heater extraction steam dump valve are open.

ii.

Intermediate pressure feedwater heater extraction steam supply valve and intermediate pressure feedwater heater extraction steam dump valve are open.

iii. High pressure feedwater heater extraction steam supply valve and high pressure feedwater heater extraction steam dump valve are open.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-78 Draft Revision 3 Table 14.2-32: Condenser Air Removal System Test # 32 Preoperational test is required to be performed for each NPM.

The condenser air removal system (CARS) is described in Section 10.4.2 and the functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The CARS supports the condensate and FWS by removing air and non-condensable gases from the main condenser.

nonsafety-related Test #32-1 2.

The circulating water system (CWS) supports the FWS by removing heat from the main condenser.

nonsafety related Test #32-1 Ramp Change in Load Demand Test #100 3.

The ABS supports the turbine generator by supplying gland seal steam.

nonsafety-related Test #32-1 4.

The auxiliary boiler supports the FWS by supplying steam to the condenser for sparging when necessary.

nonsafety-related Test #32-1 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each CARS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each CARS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each CARS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each CARS pump can be started and stopped remotely.

Align the CARS to allow for pump operation.

Stop and start each pump from the MCR.

MCR display and local, visual observation indicate each pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify CARS valves automatically operate to maintain CARS seal water separator tank level.

Initiate a simulated signal for the following system conditions.

i.

CARS seal water separator tank high level.

ii.

CARS seal water separator tank low level.

Any remote display or local verification indicates the following:

i.

CARS seal water separator tank makeup valve is closed and drain valve is open.

ii.

The CARS seal water separator makeup valve is open and drain valve is closed.

vi. Verify a CARS standby pump automatically starts to protect plant equipment.

Align the CARS to allow for pump operation. Place a pump in service.

Initiate a simulated main condenser high pressure.

MCR display and local, visual observation indicate the standby pump starts.

Audible and visible water hammer are not observed when the pump starts.

vii. Verify a local integrated grab sample can be obtained from the CARS grab sample device.

Place the system in service to allow flow through the grab sampling device.

A local grab sample is obtained.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-79 Draft Revision 3 viii. Verify each CARS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each CARS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Test #32-1 Test Objective Test Method Acceptance Criteria Verify the CARS can maintain main condenser vacuum pressure.

Place the ABS in automatic control to supply gland seal steam.

Place the FWS in automatic control to condense the gland seal steam in the gland exhaust condenser.

Place the CWS in automatic control to provide cooling to the main condenser.

i.

Place the CARS in service to establish vacuum in the main condenser.

ii.

Open the feedwater sparge isolation valves to provide steam sparging to the main condenser.

i.

Maintain main condenser design vacuum pressure.

ii.

The ABS is capable of providing sparging steam to the main condenser as indicated by steam flow.

iii. The ABS is capable of supplying gland seal steam to the turbine generator at design pressures.

Table 14.2-32: Condenser Air Removal System Test # 32 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-80 Draft Revision 3 RAI 10.02-3, RAI 10.02.03-1, RAI 10.02.03-2 Table 14.2-33: Turbine Generator System Test # 33 Preoperational test is required to be performed for each NPM.

The TGS is described in Sections 10.2, 10.4.3, and 10.4.4. The TGS and other functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The TGS supports the MSS by providing steam bypass from the MSS to the main condenser.

nonsafety-related Test #33-1 100 Percent Load Rejection Test #103 2.

The MHS supports the CVCS by adding heat to primary coolant.

non-safety related Test #33-1 3.

The CVCS supports the reactor coolant system (RCS) by heating primary coolant.

nonsafety-related Test #33-1 4.

The ABS supports the module heatup system (MHS) by supplying steam for heating reactor coolant at startup and shutdown.

nonsafety-related Test #33-1 5.

The FWS supports the CNTS by supplying feedwater to the SGs.

nonsafety-related Test #33-1 Ramp Change in Load Test #99 6.

The FWS supports the TGS by cooling superheated turbine bypass steam in the turbine bypass desuperheater prior to the steam entering the main condenser.

nonsafety-related Test #33-1 100 Percent Load Rejection Test #103 7.

The FWS supports the TGS by accepting turbine bypass steam into the main condenser.

nonsafety-related Test #33-1 100 Percent Load Rejection Test #103 8.

The FWS supports the TGS by cooling superheated steam in the gland steam desuperheater prior to the steam entering the gland seals.

nonsafety-related Test #33-1 Ramp Change in Load Test #100 9.

The MSS supports the SGS by delivering steam to the main condenser.The CVCS supports emergency core cooling system (ECCS) valves by providing water to reset the ECCS valves.

nonsafety-related Test #33-12

10. The MSS supports the TGS by providing steam to the TGS.

nonsafety-related Test #33-2 Ramp Change in Load Test #100 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

The following prerequisites are not required for component testing:

ii.

Verify Test #32-1 has been completed to verify the CARS can maintain main condenser vacuum pressure (reference test 14.2-32).

iii. The SG feedwater flush is complete.

iv. The CARS is automatically maintaining main condenser vacuum.

v.

Initial RCS temperature must be approximately 200°F to allow for hot functional testing to obtain data at an RCS temperature of 200°F and above.

vi. The NPM and supporting systems are aligned to increase RCS temperature and pressure.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-82 Draft Revision 3 System Level Test #33-1 Test Objective Test Method Acceptance Criteria i.

Verify the CVCS is capable of supplying water at sufficient pressure to close the ECCS valves.

ii.

Verify the MHS is capable of heating the RCS to a temperature sufficient to obtain criticality.

iii. Verify the MHS is capable of heating the RCS to establish natural circulation flow sufficient to obtain criticality.

ivii. Verify the TGS automatically controls turbine bypass flow to the main condenser.

iv. Verify the FWS automatically controls flow to the SGs to maintain SG inventory.

vi. Verify the FWS automatically cools the TGS bypass steam flow in the main steam desuperheater.

vii. Verify a local grab sample can be obtained from an MHS system grab sample device.

viii. Verify the FWS automatically cools the TGS gland steam in the gland steam desuperheater.

ix. Verify hotwell level is automatically controlled while receiving bypass steam.

Close the ECCS valves.

Align the plant to cool the RCS via the TGS bypass system.

Warm main steam lines.

Place the TGS steam bypass valve in automatic control.

Place the feedwater regulating valve in steam generator inventory control.

Place the MHS and the CVCS in automatic control to heat the RCS.

Place the ABS high-pressure system in automatic control to heat the MHS heat exchanger from RCS ambient temperature to the highest temperature achievable by MHS heating.

Align the FWS to cool the gland seal steam desuperheater.

i.

CVCS pressure is sufficient as indicated by closure of the ECCS valves.

ii. a. CVCS supply remains in a sub-cooled state while heating the RCS using the module heatup system as verified by CVCS temperature and pressure.

b. RCS temperature is sufficient to obtain criticality.

iii. RCS natural circulation flow is sufficient to obtain criticality.

ivii. The TGS bypass flow is maintained maintains steam pressure at setpoint.

iv. The feedwater flow to the steam generator is maintained at setpoint.

vi. The cooled TGS bypass flowtemperature is maintained at setpoint.

vii. A local grab sample is successfully obtained at RCS normal operating temperature and pressure.

viii. The cooled gland seal steam temperature is maintained at setpoint.

ix. Hotwell level is maintained at setpoint while receiving bypass steam.

System Level Test #33-2 This test may be performed after the completion of Test 33-1 when the RCS is at normal operating pressure and the RCS has achieved the maximum temperature achievable by warming the RCS using MHS heating.

Test Objective Test Method Acceptance Criteria Verify the maximum main turbine speed that can be obtained using the MHS to heat the RCS.

Place the main turbine in service as follows:

i.

Ensure the RCS is at RCS is at normal operating pressure and the RCS is at maximum temperature achievable by warming the RCS using MHS heating.

ii.

Place turbine on turning gear with seal steam in service.

iii. Warm up turbine to required temperature.

iv. Increase main turbine speed.

The maximum main turbine speed is obtained.

Table 14.2-33: Turbine Generator System Test # 33 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-84 Draft Revision 3 Table 14.2-35: Liquid Radioactive Waste System Test # 35 Preoperational test is required to be performed once.

The LRWS is described in Section 11.2 and 11.5.2.1.5 and the functions verified by this test are:

System Function System Function Categorization Function Verified by Test #

1.

The LRWS supports the solid radioactive waste system (SRWS) by receiving and processing liquid radioactive waste from the SRWS dewatering skid.

nonsafety-related Test #35-1 Test #35-2 Component-level test xi SRWS Test #37-7 2.

The LRWS supports the SFPCS by receiving contaminated pool water to aid in the removal of titrated water or boron. Treated liquid radwaste has the option to return to the pool as makeup.

nonsafety-related Test #35-1 Test #35-2 Component-level tests 3.

The LRWS supports the CVCS by receiving and processing primary coolant from CVCS letdown.

nonsafety-related Test #35-1 Test #35-2 CVCS Test #38-1 4.

The LRWS supports the RWDS by receiving and processing the effluent from the RWB radioactive waste drain sumps.

nonsafety-related Test #35-1 Test #35-2 RWDS Test #23-1 5.

The LRWS supports the RWDS by receiving and processing the effluent from the RXB radioactive waste drain sumps.

nonsafety-related Test #35-1 Test #35-2 RWDS Test #23-1 6.

The LRWS supports the RWDS by receiving and processing the effluent from the ANB radioactive waste drain sumps.

nonsafety-related Test #35-1 Test #35-2 RWDS Test #23-1 7.

LRWS supports the CVCS by receiving and processing the noncondensable gases and vapor from the pressurizer.

nonsafety-related Test #35-1 The LRWS functions verified by other tests are:

System Function System Function Categorization Function Verified by Test #

The LRWS supports the CVCS by receiving and processing primary coolant from CVCS letdown.

nonsafety-related CVCS Test #38-1 The LRWS supports the RWDS by receiving and processing the effluent from theRWB radioactive waste drain sumps.

nonsafety-related RWDS Test #23-1 The LRWS supports the RWDS by receiving and processing the effluent from theRXB radioactive waste drain sumps.

nonsafety-related RWDS Test #23-1 The LRWS supports the RWDS by receiving and processing the effluent from the ANB radioactive waste drain sumps.

nonsafety-related RWDS Test #23-1 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-86 Draft Revision 3 ix. Verify LRW pumps automatically operate to prevent tank overflow.

Align the LRWS to allow each of the following LRW transfer pumps to automatically transfer effluent to one of its design locations.

Degasifier transfer pump A and B LCW collection tank transfer pump A and B

HCW collection tank transfer pump A and B

LCW sample tank transfer pump A and B HCW sample tank transfer pump A and B Detergent waste collection tank transfer pump Demineralized water break tank transfer pump i.

Simulate a HI HI level signal in each of the above tanks.

ii.

Simulate a low level signal in each of the above tanks.

MCR displays and local, visual observation indicate the following:

i.

The transfer pump starts and transfers effluent to its design location.

ii.

The transfer pump stops.

x.

Verify a local grab sample can be obtained from a LRWS grab sample device indicated on the LRW piping and instrumentation diagram.

Place the system in service to allow flow through the grab sampling device.

A local grab sample is successfully obtained.

xi. Verify SRWS dewatering skid effluent can be transferred to LRW high-conductivity waste (HCW) collection tanks.

Align SRWS dewatering skid discharge to one of the LRW high-conductivity waste collection tanks. Fill the SRWS dewatering skid high integrity container (HIC) to above the low level pump stop setpoint. Start the SRWS dewatering skid diaphragm pump.

SRWS dewatering skid effluent is transferred to the LRW high-conductivity waste collection tank. The SRWS dewatering skid diaphragm pump is stopped.

xii. Verify each LRWS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each LRWS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Test #35-1 This test should be performed after the completion of Test 33-1 when the RCS is at normal operating pressure and the RCS has achieved the maximum temperature achievable by warming the RCS using MHS heating.

Test Objective Test Method Acceptance Criteria i.

Verify LRWS can process a gaseous waste stream.

Align LRWS to receive pressurizer gaseous waste from the pressurizer during hot functional testing.

Process the pressurizer gaseous waste through the LRW degasifier.

i.

The LRW degasifier removes condensable gases and vents waste to the RBVS or GRWS.

ii.

The LRW degasifier liquid transfer pumps transfer the liquid condensate waste to the low conductivity waste collection tanks.

Table 14.2-35: Liquid Radioactive Waste System Test # 35 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-88 Draft Revision 3 Table 14.2-36: Gaseous Radioactive Waste System Test # 36 Preoperational test is required to be performed once.

The GRWS is described in Section 11.3 and 11.5.2.2.6 and the functions verified by this test or another preoperational test are:

System Function System Function Categorization Function Verified by Test #

1.

The GRWS supports the LRWS by receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.

nonsafety-related Test #36-1 2.

The GRWS supports the CES by receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.

nonsafety-related Test #36-1 CES Test #41-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each GRWS remotely-operated valve can be operated remotely.

Operate each valve from the (main control room) MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each GRWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each GRWS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify GRWS valves automatically operate to maintain vessel volume.

i.

Initiate a real or simulated high GRWS moisture separator level.

ii.

Initiate a real or simulated low GRWS moisture separator level.

MCR display and local, visual observation indicate the following:

i.

The moisture separator drain valve is open.

ii.

The moisture separator drain valve is closed.

v.

Verify GRWS inlet isolation valves automatically close and nitrogen purge valve opens on high inlet stream oxygen concentration.

Simulate a GRWS inlet stream oxygen concentration high signal.

MCR display and local, visual observation indicate the following:

i.

The inlet stream isolation valves are closed.

ii.

The nitrogen purge valve is open.

vi. Verify GRWS isolates upon loss of RWBV exhaust flow.

Simulate a loss of RWBVS exhaust flow.

MCR display and local, visual observation indicate the GRWS isolation valves are closed.

vii. Verify radiation isolation of GRWS charcoal decay beds upon detection of decay bed discharge flow high radiation level.

i.

Initiate a real or simulated GRWS train A decay bed discharge flow high radiation signal.

ii.

Initiate a real or simulated GRWS train B decay bed discharge flow high radiation signal.

MCR display and local, visual observation indicate the following:

i.

GRWS train A charcoal decay bed discharge isolation valve is closed.

[ITAAC 03.09.04]

ii.

GRWS train B charcoal decay bed discharge isolation valve is closed.

[ITAAC 03.09.05]

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-90 Draft Revision 3 Table 14.2-37: Solid Radioactive Waste System Test # 37 Preoperational test is required to be performed once.

The SRWS is described in Section 11.4 and the functions verified by this test or another preoperational test are:

System Function System Function Categorization Function Verified by Test #

1.

The SRWS supports the LRWS by receiving spent resin and carbon bed from LRW processing skids.

nonsafety-related Test #37-1 Test #37-4 Test #37-6 Test #37-7 2.

The SRWS supports the CVCS by receiving spent resin from CVCS ion exchange vessels.

nonsafety-related Test #37-2 Test #37-5 Test #37-7 3.

The SRWS supports the PCUS by receiving spent resin and sludge from PCUS ion exchange vessels.

nonsafety-related Test #37-3 Test #37-5 Test #37-7 4.

The SRWS supports the CRVS by receiving exhausted HEPA filters to be compacted and shipped off site.

nonsafety-related Test #37-8 5.

The SRWS supports the RWBVS by receiving exhausted HEPA filters to be compacted and shipped off site.

nonsafety-related Test #37-8 6.

The SRWS supports the RBVS by receiving exhausted HEPA filters and charcoal bed from RXB and normal control room HVAC, to be compacted and shipped off site.

nonsafety-related Test #37-8 7.

The SRWS supports the GRWS by receiving contaminated or exhausted charcoal beds, packaging the waste in approved containers and shipping it to a licensed facility.

nonsafety-related Test #37-8 8.

The SRWS supports portions of the Annex Building HVAC system by receiving, compacting, packaging, and storing exhausted HEPA and charcoal filters for storage and shipment offsite.

nonsafety-related Test #37-8 9.

The LRWS supports the solid radioactive waste system (SRWS) by receiving and processing liquid radioactive waste from the SRWS dewatering skid.

nonsafety-related Test #37-7 LRWS Test #35-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each SRWS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each SRWS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-93 Draft Revision 3 Table 14.2-38: Chemical and Volume Control System Test # 38 Preoperational test is required to be performed for each NPM.

The CVCS is described in Section 9.3.4 and 11.5.2.2.11 and the functions verified by this test, other preoperational tests and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The CVCS supports the RCS by providing primary coolant makeup.

nonsafety-related Test #38-1 Ramp Change in Load Demand Test #100 2.

The CVCS supports the RCS by providing primary coolant letdown.

nonsafety-related Test #38-1 Ramp Change in Load Demand Test #100 3.

The CVCS supports the RCS by providing pressurizer spray flow for RCS pressure control.

nonsafety-related Test #38-2 Ramp Change in Load Demand Test #100 4.

The CVCS supports the RCS by changing the boron concentration of the primary coolant.

nonsafety-related Test #38-3 5.

The BAS supports the CVCS by providing uniformly mixed borated water on demand.

nonsafety-related Test #38-3 6.

The LRWS supports the CVCS by receiving and processing primary coolant from CVCS letdown.

nonsafety-related Test #38-1 LRWS Test #35-2 The CVCS functions verified by other tests are:

The CVCS supports emergency core cooling system (ECCS) valves by providing water to reset the ECCS valves.

nonsafety-related MPS Test #63-6TGS Test #33-1 The CVCS supports the RCS by heating primary coolant.

nonsafety-related TGS Test #33-1 The CVCS supports the RCS by isolating dilution sources.

safety-related MPS Test #63-6 The CVCS supports the RCS by providing primary coolant makeup in beyond design basis events.

nonsafety-related MPS Test #63-11 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a pump curve test has been completed and approved for the CVCS pumps.

iii. Component Level Tests iv., v., and vi. must be performed under preoperational test conditions that approximate design-basis temperature, differential pressure, and flow conditions to the extent practicable, consistent with preoperational test limitations.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each CVCS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each CVCS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each CVCS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-96 Draft Revision 3 System Level Test #38-1 Test Objective Test Method Acceptance Criteria Verify proper operation of the automatic pressurizer level control.

This test will be performed in conjunction with turbine generator test #33-1, which heats the RCS from ambient conditions to no less than 4205°F but as high as reasonably achievable.

i.

For pressurizer automatic level control on the low end of the design operating band usePlace pressurizer level control in automatic operation during RCS heatup to demonstrate automatic letdown. Use the module control system (MCS) data historian to review pressurizer level at maximum-obtained RCS temperature.

ii.

To raise pressurizer level, use MCS automation and operator permission to increase to a target pressurizer level.

Note: Pressurizer letdown level control is automatic; however pressurizer makeup level control is automatic with consent of operator.

i.

MCS data indicates that automatic pressurizer level control is maintained within the design operating level band.letdown maintained pressurizer level at setpoint.

ii.

MCS data indicates that the pressurizer level control results in an increased pressurizer level within acceptable limits of the target pressurizer level.CVCS makeup to the RCS to increase pressurizer level to the target setpoint.

System Level Test #38-2 Test Objective Test Method Acceptance Criteria Verify proper operation of the automatic pressurizer pressure control.

This test will be performed in conjunction with turbine generator test #33-1 which heats the RCS from ambient conditions to no less than 4205°F but as high as reasonably achievable.

Place pressurizer pressure control in automatic and raise pressure setpoint to the normal operating band.

Raise pressurizer pressure to the pressurizer spray valve open setpoint.

Use the MCS data historian to review pressurizer pressure at maximum-obtained RCS temperature.

i.

MCS data indicates automatic pressurizer heater operation raised pressurizer pressure to the setpoint.

ii.

MCS data indicates automatic pressurizer spray valve operation lowered pressurizer pressure to the spray valve closure setpoint.MCS data indicates that automatic pressurizer pressure control is maintained within the design operating pressure band.

Table 14.2-38: Chemical and Volume Control System Test # 38 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-97 Draft Revision 3 System Level Test #38-3 Test Objective Test Method Acceptance Criteria Verify proper operation of CVCS automatic dilution and boration control.

This test will be performed in conjunction with turbine generator test #33-1 which heats the RCS from ambient conditions to no less than 4205°F but as high as reasonably achievable.

Ensure that RCS low flow rate alarm is clear to ensure adequate mixing for dilution and boration.

i.

Place the BAS storage tank on recirculation and sample boron concentration.

ii. Use the MCS automation and operator permission to decrease to a target RCS boron concentration.

iii. Use the MCS and operator permission to increase to a target RCS boron concentration.

i.

BAS storage tank sample boron concentration is within specifications.

ii. MCS data indicates that the dilution of the RCS results in a decreased boron concentration within acceptable limits of the target concentration.

iii. MCS data indicates that the boration of the RCS results in a increased boron concentration within acceptable limits of the target concentration.

Table 14.2-38: Chemical and Volume Control System Test # 38 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-98 Draft Revision 3 Table 14.2-39: Boron Addition System Test # 39 Preoperational test is required to be performed for each NPM.

The boron addition system (BAS) is described in Section 9.3.4. The BAS function verified by this test is:

System Function System Function Categorization Function Verified by Test #

The BAS supports the SFPCS by providing borated water to the RXB pools.

nonsafety-related component-level test xiiiTest #39-1 The BAS function verified by other test is:

System Function System Function Categorization Function Verified by Test #

The BAS supports the CVCS by providing uniformly mixed borated water on demand.

nonsafety-related CVCS Test #38-3 Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a pump curve test has been completed and approved for the BAS pumps.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each BAS remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each BAS air-operated valve fails to its safe position on loss of air.

Place each valve in its non-safe position.

Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each BAS air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each valve in its non-safe position.

Isolate electrical power to each air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify the BAS transfer pump can be started and stopped remotely.

Align the BAS to allow for pump operation.

Stop and start the transfer pump from the MCR.

MCR display and local, visual observation indicate the pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

v.

Verify the BAS supply pump can be started and stopped remotely.

Align the BAS to allow for pump operation.

Start and stop the supply pump from the MCR.

MCR display and local, visual observation indicate the pump starts and stops.

Audible and visible water hammer are not observed when the pump starts.

vi. Verify the speed of the BAS variable-speed pumps can be manually controlled.

Align the BAS to provide a flow path to operate a selected pump.

Vary the BAS pump speed from minimum to maximum from the MCR.

MCR display indicates the speed of each pump obtains both minimum and maximum pump speeds.

Audible and visible water hammer are not observed when the pump starts.

vii. Verify BAS valves automatically operate to protect plant equipment.

i.

Initiate a real or simulated high BAS batch tank level signal.

ii.

Initiate a real or simulated high BAS storage tank level signal.

MCR display and local, visual observation indicate the following:

i.

The batch tank fill and return valves are fully closed.

ii.

The storage tank fill and recirculation valves are fully closed.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-99 Draft Revision 3 viii. Verify the BAS transfer pump stops automatically to protect plant equipment.

Align the BAS to allow for pump operation.

i.

Place the BAS transfer pump in service on recirculation to the BAS batch tank. Initiate a simulated a low batch tank level signal.

ii.

Place the BAS transfer pump in service on recirculation to the BAS storage tank. Simulate a low storage tank level signal.

MCR display and local, visual observation indicate the following:

i.

The transfer pump stops.

ii.

The transfer pump stops.

ix. Verify BAS supply pumps stop automatically to protect plant equipment.

Align the BAS to allow for pump operation.

i.

Place a BAS supply pump in service on recirculation to the BAS batch bank. Initiate a simulated a low batch tank level signal.

ii.

Place a supply pump in service on recirculation to the BAS storage tank.

Initiate a simulated low storage tank level signal.

MCR display and local, visual observation indicate the following:

i.

The supply pump stops.

ii.

The supply pump stops.

x.

Verify BAS flow capability by automatic start of each BAS supply pump while in standby mode.

Align the BAS to allow for pump operation. Place a supply pump in service. Initiate a simulated pump trip signal.

MCR display and local, visual observation indicate the standby pump starts.

Audible and visible water hammer are not observed when the pump starts.

xi. Verify supply pump low flow protection.

Align the BAS to allow a BAS supply pump flow sufficient to close the pump recirculation valve to the storage tank.

i.

Manually throttle a valve in the pump flow path until the flow rate reaches the pump minimum flow setpoint.

ii.

Open the throttled valve MCR displays and local, visual observation verifies the following:

i.

The pump recirculation valve is open.

ii.

The pump recirculation valve is closed.

xii. Verify a local grab sample can be obtained from a BAS grab sample device.

Place the system in service to allow flow through the grab sampling device.

A local grab sample is successfully obtained.

xiii. Verify the BAS automatically adds a specified quantity of borated water from the BAS batch tank to the RXB pools.

i.

Verify the BAS batch tank contains a sufficient volume of water to conduct this test.

ii.

Align the BAS and the SFPCS to supply water from the BAS to the SFPCS pump suction.

iii. Enter a BAS batch tank target level to terminate batch operation to the spent fuel pool.

MCR displays and local, visual observation verifies the following:

i.

The BAS to SFPCS valve initially opens to supply water from the BAS to the SFPCS pump suction.

ii.

The BAS to SFPCS valve automatically closes when the BAS batch tank obtains the target level.

xiiiv.Verify each BAS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each BAS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

Table 14.2-39: Boron Addition System Test # 39 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-100 Draft Revision 3 System Level Tests NoneSystem Level Test #39-1 Test Objective Test Method Acceptance Criteria i.

Verify the BAS automatically adds a specified quantity of borated water from the BAS batch tank to the RXB pools.

i.

Verify the BAS batch tank contains a sufficient volume of water to conduct this test.

ii.

Align the BAS and the SFPCS to supply water from the BAS to the SFPCS pump suction.

iii. Enter a BAS batch tank target level to terminate batch operation to the spent fuel pool.

MCR displays and local, visual observation verifies the following:

i.

The BAS to SFPCS valve initially opens to supply water from the BAS to the SFPCS pump suction.

ii.

The BAS to SFPCS valve automatically closes when the BAS batch tank obtains the target level.

Table 14.2-39: Boron Addition System Test # 39 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-102 Draft Revision 3 Table 14.2-41: Containment Evacuation System Test # 41 Preoperational test is required to be performed for each NPM.

The CES is described in Sections 9.3.6, 11.5.2.2.7 and 5.2.5 and the functions verified by this test or another preoperational test are:

System Function System Function Categorization Function Verified by Test #

1.

The CES supports the CNTS by removing water vapor from the containment vessel (CNV).

nonsafety-related Test #41-1 Test #41-2 Test #41-3 2.

The CES supports the CNTS by condensing water vapor removed from the CNV in the containment evacuation condenser.

nonsafety-related Test #41-1 Test #41-2 Test #41-3 3.

The CES supports the CNTS by removing non-condensable gases from the CNV.

nonsafety-related Test #41-1 Test #41-2 Test #41-3 4.

The CES supports CNTS by providing leak-before-break leak detection monitoring capability.

nonsafety-related Test #41-4 5.

The CES supports the RCS by providing RCS leak detection monitoring capability.

nonsafety-related Test #41-3 6.

The GRWS supports the CES by receiving and / or collecting potentially radioactive and hydrogen-bearing waste gases which require processing prior to release to the environment.

nonsafety-related Test #41-2 GRWS Test #36-1 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each CES remotely-operated valve can be operated remotely.

Operate each valve from the MCR and local control panel (if design has local valve control).

MCR display and local, visual observation indicate each valve fully opens and fully closes.

ii.

Verify each CES air-operated valve fails to its safe position on loss of air.

Place each CES valve in its non-safe position. Isolate and vent air to the valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iii. Verify each CES air-operated valve fails to its safe position on loss of electrical power to its solenoid.

Place each CES valve in its non-safe position. Isolate electrical power to each CES air-operated valve.

MCR display and local, visual observation indicate each valve fails to its safe position.

iv. Verify each CES pump can be started and stopped remotely.

Stop and start each pump from the MCR. MCR display and local, visual observation indicate each pump starts and stops.

v.

Verify the speed of each CES variable-speed pump can be manually controlled.

Vary the speed of each pump from the MCR and local control panel (if design has local pump control).

MCR display indicates pump speed varies from minimum to maximum speed.

vi. Verify each CES pump automatically stops to protect plant equipment.

Place a pump in operation. Initiate a real or simulated signal for each pump trip condition.

MCR displays and local, visual observation verifies the pump stops.

vii. Verify each CES pump suction and discharge valve automatically closes to protect the CES equipment.

Open the pump suction and discharge valves.

Initiate a real or simulated signal for each valve close conditions.

Each pump suction and discharge valve closes on each real or simulated valve close condition.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-103 Draft Revision 3 viii. Verify a local grab sample can be obtained from a CES grab sample device indicated on the CES piping and instrumentation diagram.

Place the system in service to allow flow through the grab sampling device.

A local grab sample is successfully obtained.

ix. Verify each CES instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each CES transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Test #41-1 Test Objective Test Method Acceptance Criteria Verify the automatic operation of the CES to establish and maintain design vacuum for the CNV.

After the containment flooding and drain system (CFDS) completes draindown of the CNV and the NPM is in hot functional testing, place the CES in automatic operation.

The automated control establishes and maintains vacuum in the CNV.

System Level Test #41-2 Test Objective Test Method Acceptance Criteria Verify radiation isolation and flow diversion on high radiation level in the CES.

The NPM is in hot functional testing with the RCS at normal operating pressure.

The CES is operating in automatic control with a CNV steady-state vacuum pressure indicating the noncondensable gases have been removed from the CNV.

Initiate a real or simulated high radiation signal for the CES vacuum pump discharge.

i.

The CES effluent flow path to the RBVS is isolated and diverted to GRWS.

[ITAAC 02.07.01]

ii.

The CES effluent to process sample panel isolation valve is closed.

[ITAAC 02.07.01]

iii. The CES purge air solenoid valves to the vacuum pumps are closed.

[ITAAC 02.07.01]

iv. The automated control maintains vacuum in the CNV.

Table 14.2-41: Containment Evacuation System Test # 41 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-113 Draft Revision 3 Table 14.2-48: Decay Heat Removal System Test # 48 Preoperational test is required to be performed for each NPM.

The DHRS is described in Section 6.3. DHRS functions are not verified by DHRS tests. DHRS functions verified by other tests are:

System Function System Function Categorization Function Verified by Test #

1.

The DHRS supports the RCS by opening the DHRS actuation valves for DHRS operation.

safety-related MPS Test #63-6 Reactor Trip from 100 Percent Power Test # 104 2.

The DHRS supports the MPS by providing MPS actuation instrument information signals.

safety-related MPS Test #63-1 3.

The DHRS supports the MPS by providing PAM instrument information signals.

nonsafety-related SDIS Test #66-2 4.

The UHS supports the DHRS by accepting the heat from the DHRS heat exchanger.

safety-related Reactor Trip from 100 Percent Power Test # 104 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each DHRS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each DHRS transmitter.

The instrument signal is displayed on an MCS or PCS display, or is recorded by the applicable control system historian.

System Level Tests None

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-114 Draft Revision 3 Table 14.2-49: In-core Instrumentation System Test # 49 Preoperational test is required to be performed for each NPM.

The in-core instrumentation system (ICIS) is described in Section 7.0.4.7 and the function verified by this test and power ascension testing is:

System Function System Function Categorization Function Verified by Test #

1.

The ICIS supports the MPS by providing reactor core (RXC) temperature information.

nonsafety-related Test #49-1 Reactor Coolant System Temperature Instrument Calibration Test #93 The ICIS functions verified by another test is:

System Function System Function Categorization Function Verified by Test #

The ICIS supports the MPS by providing RXC temperature information.

nonsafety-related SDIS Test #66-2 Prerequisites i.

The ICIS instrument strings are inserted into the core.

ii.

Verify an instrument calibration has been performed on all ICIS thermocouples by cross-calibrating the thermocouple to the RCS narrow range resistance temperature detectors (RTDs) prior to RCS heatup.

Component Level Tests None System Level Test #49-1 Test Objective Test Method Acceptance Criteria Verify proper temperature indication is obtained from the ICIS thermocouples.

Heat the RCS from ambient conditions to normal operating temperaturethe maximum RCS temperature that can be obtained by the Module Heating System.

Use the MCS data historian to cross-check the ICIS thermocouples to each other and the RCS narrow-range and wide range RTDs.

MCS data indicates that the ICIS thermocouples respond properly.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-127 Draft Revision 3 System Level Test #53-3 Test Objective Test Method Acceptance Criteria Verify sampling capability of the secondary sampling points.

i.

The NPM is in hot functional testing with the RCS at normal operating pressure and the maximum operating temperature achievable by heating the RCS with the MHS.

The FWS and MSS are in service.

Align the FWS, MSS, PSS, and ABSPSS to provide continuous sampling flow to the PSS secondary sampling system feedwater/main steam sample panel.

ii.

Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a feedwater to SG sample.

iii. Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain an SG-1 steam sample.

iv. Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a SG-2 steam sample.

v.

Open the manual feedwater/main steam ion chromatography analysis panel valve to obtain a condensate pump discharge sample.

i.

The PSS secondary sampling system feedwater/main steam sample panel instruments provide indication of the water and steam analysis.

ii.

The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.

iii. The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.

iv. The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.

v.

The feedwater/main steam ion chromatography analysis panel monitors the programmed ion.

Table 14.2-53: Process Sampling System Test # 53 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-132 Draft Revision 3 RAI 01-1 Table 14.2-57: Highly Reliable DC Power System Test # 57 Component level tests are required to be performed for each NPM, and once for the EDSS common channels.

System Level Test #57-1 and Test #57-2 are required to be performed once.

System Level Test #57-1 and Test #57-2 may be performed concurrently.

System Level Test #57-3 is required to be performed once for each NPM.

The EDSS is described in Sections 8.1.2.2, 8.1.4.2 and 8.3.2.1.1, and the functions verified by this test are:

System Function System Function Categorization Function Verified by Test #

The highly reliable DC power system (EDSS) supports the following systems by providing DC electrical power.

  • MPS
  • neutron monitoring system (NMS)
  • fixed area radiation monitoring system (RMS)
  • plant lighting system (PLS)
  • safety display information system (SDIS)
  • CRVS nonsafety-related All functions are verified by component-level tests.

System level tests provide additional verification as follows:

PLS - Test #57-1 SDIS - Test #57-2 MPS - Test #57-3 EDS system functions verified by other tests are:

System Function System Function Categorization Function Verified by Test #

1.

EDSS supports the MPS by providing EDSS module-specific operating parameter information signals.

nonsafety-related Reference 14.2-66SDIS Test #66, Component-level test: Module-Specific test iii.

Component level test 2.

EDSS supports the PPS by providing EDSS common operating parameter information signals.

nonsafety-related Reference 14.2-66SDIS Test #66, Component-level test: Common test iii.

Component level test Prerequisites i.

Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

ii.

Verify a valve-regulated lead-acid battery acceptance tests has been performed on all EDSS batteries to confirm battery capacity in accordance with IEEE Standard 1188 Sections 6 and 7.

iii. Verify battery charger performance testing has been completed by the manufacturer or a site acceptance test has been completed in accordance with manufacturer instructions.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each EDSS bus can be powered by its associated batteries.

Configure the EDSS batteries and battery chargers associated with an EDSS bus such that one of the batteries is the only source of power to the bus.

Repeat the test using the other battery associated with the EDSS bus under test as the only power source.

Repeat the test for the remaining EDSS channels.

EDSS bus voltage is within design limits.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-133 Draft Revision 3 ii. Verify each EDSS bus can be powered by its associated battery chargers.

(Test may be performed as part of site acceptance testing.)

Configure the EDSS batteries and battery chargers associated with an EDSS bus such that one of the battery chargers is the only source of power to the bus.

Repeat the test using the other battery charger associated with the EDSS bus under test as the only power source.

Repeat the test for the remaining EDSS channels.

EDSS bus voltage is within design limits.

iii. Verify each EDSS instrument is available on an MCS or PCS display.

(Test not required if the instrument calibration verified the MCS or PCS display.)

Initiate a single real or simulated instrument signal from each EDSS transmitter.

The instrument signal is displayed on an MCS or PCS display, or recorded by the applicable control system historian.

System Level Tests System Level Test #57-1 Test Objective Test Method Acceptance Criteria Verify the EDSS common buses provide independent power to the main control room (MCR) emergency lighting.

(RG 1.41 Independence Test)

i. With both EDSS common buses energized and providing power to MCR emergency lighting, de-energize the EDSS Division I common bus.

ii. With both EDSS common buses energized and providing power to MCR emergency lighting, de-energize the EDSS Division II common bus.

i. The MCR lighting designed to be powered by the EDSS Division I common bus is de-energized, and the MCR emergency lighting designed to be powered by the EDSS Division II common bus is energized.

ii. The MCR emergency lighting designed to be powered by the EDSS Division II common bus is de-energized, and the MCR emergency lighting designed to be powered by the EDSS Division I common bus is energized.

System Level Test #57-2 Test Objective Test Method Acceptance Criteria Verify the EDSS common buses provide independent power to all SDIS MCR displays.

(RG 1.41 Independence Test)

i. With EDSS Division I and Division II common buses energized verify power is available in the MCR for all SDIS displays.

ii. De-energize the EDSS Division I common bus.

iii. Re-energize the EDSS Division I common bus and de-energize the EDSS Division II common bus.

i. Power is available in the MCR for SDIS displays.

ii.a. Power is not available in the MCR for SDIS Division I displays.

ii.b. Power is available in the MCR for SDIS Division II displays.

iii.a. Power is not available in the MCR for SDIS Division II displays.

iii.b. Power is available in the MCR for SDIS Division I displays.

Table 14.2-57: Highly Reliable DC Power System Test # 57 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-144 Draft Revision 3 Table 14.2-63: Module Protection System Test #63 Preoperational test is required to be performed for each NPM.

The MPS is described in Sections 7.0, 7.1, and 7.2 and the functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The MPS supports the CNTS by removing electrical power to the trip solenoids of the following CIVs on a containment system isolation actuation signal:

  • RCS injection containment isolation valves
  • RCS discharge containment isolation valves
  • Pressurizer spray containment isolation valves
  • RPV high point degasification containment isolation valves
  • CES containment isolation valves
  • RCCWS containment isolation valves
  • CFDS containment isolation valves safety-related Test #63-4 Test #63-6 2.

The MPS supports the CNTS by removing electrical power to the trip solenoids of the following valves on a DHRS actuation signal.

  • DHRS actuation valves
  • Feedwater isolation valves safety-related Test #63-4 Test #63-6 3.

The MPS supports the ECCS by removing electrical power to the trip solenoids of the following valves on an ECCS actuation signal.

  • Reactor vent valves
  • Reactor recirculation valves safety-related Test #63-4 Test #63-6

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-145 Draft Revision 3 4.

The MPS supports the CNTSontainment system by removing electrical power to the trip solenoids of the following containment isolation valves on a CVCS isolation actuation signal:

  • RCS injection containment isolation valves
  • RCS discharge containment isolation valves
  • PZR pressurizer spray CIVs
  • RPV high point degasification containment isolation valves safety-related Test #63-4 Test #63-6 5.

The MPS supports the CVCS by removing electrical power to the trip solenoids of the DWS supply isolation valves on a DWS isolation actuation signal.

safety-related Test #63-4 Test #63-6 6.

The MPS supports the ECCS by removing electrical power to the trip solenoids of the reactor vent valves on an LTOP actuation signal.

safety-related Test #63-4 Test #63-6 7.

The MPS supports the ELVS by removing electrical power to the pressurizer heaters on a pressurizer heater trip actuation signal.

safety-related Test #63-4 Test #63-6 8.

The MPS supports the EDNS by removing electrical power to the CRDS for a reactor trip.

safety-related Test #63-4 Test #63-5 9.

The DHRS supports the RCS by opening the DHRS actuation valves on a DHRS actuation signal for DHRS operation.

safety-related Test #63-6

10. The CNTS supports the DHRS by closing CIVs for the main steam and feedwater systems when actuated by the MPS.

safety-related Test #63-6

11. The CNTS supports the RCS by closing the CIVs for pressurizer spray, RCS injection, RCS letdown, and RPV high point degasification when actuated by the MPS.

safety-related Test #63-6

12. The CNTS supports the RXB by providing a barrier to contain mass, energy, and fission product release by closure of the CIVs upon a containment isolation signal.

safety-related Test #63-6

13. The ECCS supports the RCS by opening the ECCS reactor vent valves and reactor recirculation valves when their respective trip valve is actuated by the MPS.

safety-related Test #63-6 Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-146 Draft Revision 3

14. The ECCS supports the RCS by providing recirculated coolant from the containment to the RPV for the removal of core heat.

safety-related Test #63-6

15. The ECCS supports the RCS by providing LTOP for maintaining the reactor coolant pressure boundary.

safety-related Test #63-6

16. The CVCS supports the RCS by isolating dilution sources.

safety-related Test #63-6

17. The FWS supports the CNTS by providing secondary isolation of the feedwater lines.

nonsafety-related Test #63-6

18. The MSS supports the CNTS by providing secondary isolation of the main steam lines.

nonsafety-related Test #63-6

19. The FWS supports the DHRS by providing secondary isolation of the feedwater lines, ensuring required boundary conditions for DHRS operation.

nonsafety-related Test #63-6

20. The NMS supports the MPS by providing neutron flux data for various reactor trips.

safety-related Test #63-14 Neutron Monitoring System Power Range Flux Calibration Test #92

21. ECCS supports MPS by providing instrumentation information signals.

nonsafety-related Test #63-1

22. The DHRS supports the MPS by providing MPS actuation instrument information signals.

safety-related Test #63-1

23. The RCS supports the MPS by providing instrument information signals.

nonsafety-related Test #63-1

24. The RCS supports the MPS by providing instrument information signals for LTOP actuation safety-related Test #63-1
25. The CVCS supports the RCS by providing primary coolant makeup in beyond design basis events.ECCS valves by providing water to reset the ECCS valves.

nonsafety-related Test #63-116

26. The CFDS supports the RCS by providing borated coolant inventory for the removal of core heat during a beyond design basis accident.

nonsafety-related Test #63-11

27. The MPS supports the DHRS by removing electrical power to the trip solenoids of the DHRS actuation valves on a DHRS actuation signal.

safety-related Test #63-6

28. The MPS supports the CNTS by providing power to sensors.

safety-related Test #63-1

29. The MPS supports the DHRS by providing power to sensors.

safety-related Test #63-1

30. The MPS supports the RCS by providing power to sensors.

safety-related Test #63-1 Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-147 Draft Revision 3 Prerequisite Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

A complete staging and testing of system hardware and software configurations will be conducted. This factory acceptance testing will be conducted in accordance with a written test procedure for testing the software and hardware of the MPS prior to installation in the plant. Following installation, site acceptance testing shall be completed in accordance with developed procedures to ensure the MPS is installed and fully functional as designed. This testing must be completed and approved prior to performing preoperational testing.

Component Level Tests None System Level Test #63-1 Test Objective Test Method Acceptance Criteria Verify the instrument signals of MPS monitored variables are displayed in the MCR.

Table 7.1-2 lists all of sensors which input to MPS.

This test may be performed concurrently with safety display and indication system (SDIS) test #66 -2 for PAM Type B and Type C testing described in Section 14.2.12.

Inject a single signal as close as practical for each sensor listed in Table 7.1-2 and monitor its response on an MCR workstation and the module-specific safety display instrument panel (if designed for safety display instrument display).

If the sensor signal is designed to be disconnected when the NPM is moved then it will be necessary to test the signal from the sensor to the disconnect and then from the disconnect to the MCR display.

Each MPS monitored signal is displayed on an MCR workstation and the module-specific safety display instrument panel (if designed for safety display instrument display).

System Level Test #63-2 (Not used)

Test Objective Test Method Acceptance Criteria i.

Verify the reactor trip logic fails to a safe state such that loss of electrical power to an MPS separation group results in a reactor trip state for that separation group.

ii.

Verify the ESF logic fails to a safe state such that loss of electrical power to an MPS separation group results in a predefined safe state for that separation group.

This test will verify initiation of a trip state for MPS separation groups on loss of power to that separation group.

Component actuation is not required or verified.

i.

Remove power from one separation group of one reactor trip function listed in Table 7.1-3 to provide a trip state for that separation group.

Repeat tests for all separation groups for all reactor trip functions.

ii.

Remove power from one separation group of one ESF actuation function listed in Table 7.1-4 to provide a predefined state for that separation group.

Repeat tests for all separation groups for all ESF actuation functions.

i.

Loss of electrical power in a separation group results in a reactor trip state for that separation group.

[ITAAC 02.05.14]

ii.

Loss of electrical power in a separation group results in the predefined state for that separation group.

[ITAAC 02.05.15]

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-148 Draft Revision 3 System Level Test #63-3 Test Objective Test Method Acceptance Criteria Verify each ECCS reactor vent valve (RVV) and reactor recirculation valve (RRV) operates to satisfy its ESF-actuated design stroke time.

i.

Verify MPS operating bypass interlocks are automatically established when the associated interlock condition is satisfied and automatically removed when the condition is not satisfied.

ii.

Verify MPS operating bypasses can be manually established when the associated permissive condition is satisfied and automatically removed when the condition is not satisfied.

iii. Verify MCR alarms when operating bypasses are established.

This test will verify the stroke time of each RRV and RVV by actuating the valves with RCS pressure below the inadvertent actuation block setpoint.operation of each operating bypass interlock and operating bypass permissive. Component actuation is not required or verified.

i.

Close all RVVs and RRVs.

ii.

Verify RCS pressure is below the inadvertent actuation block setpoint specified in Technical Specifications.

iii. Actuate ECCS using the manual ECCS actuation switches in the MCR.

Table 7.1-5 contains the following information:

  • The identification of each operating bypass interlock and operating bypass permissive and their logic.
  • The function of the operating bypass i.

a.

Simulate the logic for an operating bypass interlock.

b.

Remove the logic.

Repeat test for all operating bypass interlocks.

ii.

a.

Simulate the logic for an operating bypass permissive and manually establish the operating bypass.

b.

Remove the logic.

Repeat test for all operating bypass permissives.

Each ECCS RRV and RVV travels from fully closed to fully open in less than or equal to the time specified in Technical Specifications.

i.

a.

The operating bypasses are automatically established.

b.

The operating bypasses are automatically removed.

[ITAAC 02.05.18]

ii.

a.

The operating bypasses can be manually established.

b.

The operating bypasses are automatically removed.

[ITAAC 02.05.19]

iii. Each established operating bypass is alarmed in the MCR.

[ITAAC 02.05.22]

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-149 Draft Revision 3 System Level Test #63-4 Test #63-4 is performed concurrently with Test #63-6 which operates all of the ESF actuation valves during hot functional testing.

Test #63-4 records the stroke times of DHRS actuation valves as they travel to their ESF-actuated position with the RCS pressure at normal operating pressure.

Test Objective Test Method Acceptance Criteria Verify each DHRS actuation valve operates to satisfy its ESF-actuated design stroke time.

i.

Verify the MPS automatically initiates a reactor trip signal.

ii.

Verify the MPS automatically initiates an ESF actuation signal.

Time the operation of all DHRS actuation valves as they actuate to their ESF position during the manual ESF actuation testing in Test #63-6.This test verifies initiation of reactor trip signals and ESF actuation signals only.

Component actuation is not required or verified.

Test #63-1 is completed in order to use the associated test signals.

Real or simulated CNTS level, reactor trip breaker position, RCS temperature and NMS signals may be required to provide the necessary bypass interlock status for either the reactor trip or ESF actuation to be available.

i.

Initiate an automatic reactor trip signal by simulating a reactor trip function for each function listed in Table 7.1-3.

All combinations of the 2 out of 4 logic are tested for each reactor trip function.

ii.

Initiate an automatic ESF actuation signal by simulating an ESF actuation function for each function listed in Table 7.1-4. All combinations of the 2 out of 4 logic must be actuated for each ESF function.

Each DHRS actuation valve travels from fully closed to fully open in less than or equal to the time specified in Technical Specifications.

i.

A reactor trip signal is displayed in the MCR for all 2 out of 4 logic combinations of each reactor trip function.

[ITAAC 02.05.08]

ii.

An ESF actuation signal is displayed in the MCR for all 2 out of 4 logic combinations each reactor ESF actuation function.

[ITAAC 02.05.09]

System Level Test #63-5 (Not used)

Test Objective Test Method Acceptance Criteria i.

Verify the MPS manually actuates a reactor trip.

ii.

Verify the MPS automatically actuates a reactor trip.

This test will verify the automatic and manual reactor trips. Reactor trip actuation is verified by reactor trip breaker actuation. Only one trip function is required to perform the automatic reactor trip, i.

Initiate a manual reactor trip from the MCR.

ii.

Initiate an automatic reactor trip signal by simulating any single reactor trip function.

i.

The reactor trip breakers open.

[ITAAC 02.05.12]

ii.

The reactor trip breakers open.

[ITAAC 02.05.10]

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-150 Draft Revision 3 System Level Test #63-6 Test 63-6 is performed at hot functional testing concurrently with TGS test #33-1 (reference 14.2.12.33) to allow testing of ESF actuations at normal operating pressure and elevated temperatures. Test #33-1 heats the RCS from ambient conditions to the highest temperature achievable by MHS heating. These hot functional testing conditions provide the highest differential pressure and temperature conditions that can be achieved prior to fuel load.

Test Objective Test Method Acceptance Criteria i.

Verify the MPS can manually actuate ESF equipment from the MCR.

ii.

Verify deliberate operator action is required to return the ESF actuated equipment to its non-actuated position.

iii. Verify the MPS can automatically actuate ESF equipment from all ESF actuation signals.

Figure 7.1-1 identifies all ESF actuation signals such as CVCS isolation and CNTS isolation.

Table 7.1-4 lists all of the ESF functions.

This test will verify the design response of ESF actuation signals using both a single manual ESF signal and a single ESF function to provide an automatic ESF actuation signal. All manual and automatic ESF functionsactuation signals are tested.

The RCS is at normal operating pressure supplying bypass steam to the condenser.

i.

Initiate a manual ESF actuation signal from the MCR.

ii.

a.

Attempt to operate the actuated ESF equipment from the MCR.

b.

Remove the manual ESF actuation signal and attempt to operate the actuated ESF equipment from the MCR.

c.

Use the MCR enable nonsafety control switch to allow operation of the ESF actuated equipment from the MCR.

Repeat for all MCR manual ESF actuations.

iii. Initiate an automatic ESF actuation signal. The test may be performed with the RCS at ambient conditions.

Repeat for all ESF actuation signals.

i.

The MPS actuates the ESF equipment to perform its safety-related function as described in Table 7.1-4.

Each ECCS valve opens after receipt of an ESF signal and after RCS pressure is decreased to the threshold pressure for operation of the inadvertent actuation block described in described in Section 6.3.2.2.

[ITAAC 02.01.13]

[ITAAC 02.01.14]

[ITAAC 02.01.15]

[ITAAC 02.01.18]

[ITAAC 02.01.19]

[ITAAC 02.01.20]

[ITAAC 02.05.13]

[ITAAC 02.05.16]

ii.

a.

The actuated equipment cannot be operated from the MCR.

b.

The actuated equipment cannot be operated from the MCR.

c.

The ESF equipment can be operated from the MCR.

[ITAAC 02.01.13]

[ITAAC 02.01.14]

[ITAAC 02.01.15]

[ITAAC 02.05.16]

iii. The MPS automatically actuates the ESF equipment to perform its safety-related function as described in Table 7.1-4.

[ITAAC 02.01.13]

[ITAAC 02.01.14]

[ITAAC 02.01.15]

[ITAAC 02.01.18]

[ITAAC 02.01.20]

[ITAAC 02.05.11]

[ITAAC 02.05.16]

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-151 Draft Revision 3 System Level Test #63-7 Test #63-7 is performed concurrently with Test #63-6 which operates all of the ESF actuation valves during hot functional testing.

Test #63-7 records the stroke times of containment isolation valves (CIVs) as they travel to their ESF-actuated position with the RCS pressure at normal operating pressure.

Test Objective Test Method Acceptance Criteria Verify the CIVs operate to satisfy their ESF-actuated design stroke time.

Table 6.2-5 contains the design closure time for containment isolation valves.

Time the operation of all CIVs as they actuate to their ESF position during the manual ESF actuation testing in Test #63-

6.

i.

Each containment isolation valve travels from fully open to fully closed in less than or equal to the time listed in Table 6.2-5Section 6.2.4.3 after receipt of a containment isolation signal.

[ITAAC 02.01.08]

[ITAAC 02.05.17]

System Level Test #63-8 This test will verify the time response of MPS reactor trip and ESF actuation signals. The reactor trip test verifies response time through reactor trip breaker actuation. The ESF response time is tested through the de-energization of the associated solenoid valve or the opening of the pressurizer heater supply breaker. ESF valve response times are tested in Test #63-7.

Test Objective Test Method Acceptance Criteria Verify the MPS response times from sensor output through:

i.

reactor trip breaker actuation for the reactor trip function.

ii.

de-energization of the associated solenoid valve for ESF-actuated valves.

iii. opening of the pressurizer heater supply breaker for the pressurizer heater trip.

Section 7.1.4 contains a description of design basis event actuation delays assumed in the plant safety analysis and listed in Table 7.1-6. The actuation delays do not include ESF actuated component delays for actuated valves.

Perform a time response test for the actuation signals listed in Table 7.1-6.

Response time testing for ESF actuated CNTS, DHRS, ECCS and DWS valves are found in Test #63-7.

The MPS reactor trip functions listed in Table 7.1-3 and ESF functions listed in Table 7.1-4 have response times that are less than or equal to the design basis safety analysis response time assumptions in Table 7.1-6.

[ITAAC 02.05.17]

System Level Test #63-9 (Not used)

Test Objective Test Method Acceptance Criteria Verify protective measures are provided to restrict modifications to the MPS tunable parameters.

Section 7.2.9.1 provides the manual actions required to modify tunable parameters.

A test will be performed to verify that all manual actions described in Section 7.2.9.1 are required to modify tunable parameters.

All actions described in Section 7.2.9.1 are required to modify tunable parameters.

[ITAAC 02.05.02]

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-152 Draft Revision 3 System Level Test #63-10 Test Objective Test Method Acceptance Criteria i.

Verify the MPS is capable of performing its safety-related functions when one of its separation groups is placed in maintenance bypass.Verify MCR alarms when automatic operating bypasses are established.

ii.

Verify MCR alarms when manual operating bypasses are established.

iii. Verify MPS maintenance bypasses are indicated in the main control room.

Section 7.2.4.2 discusses the operation of the MPS maintenance bypass operation for the MPS safety function module (SFM).The purpose of this test is to verify MCR alarms, not to verify the logic of the operating bypasses. Any signal that establishes the bypass can be used.

Table 7.1-5 contains a list of operating bypasses.

i.

For automatically established operating bypasses perform the following:

a..Simulate the logic required to establish the operating bypass.

b..Remove the logic.

c..Repeat for each automatically established operating bypass.

i.

For manually established operating bypasses perform the following:

a..Simulate the logic required to allow the operating bypass to be established.

b..Manually establish the operating bypass.

c..Repeat the logic.

d..Repeat for each manually established operating bypass.

ii.

a.

Place an SFM in maintenance bypass by using the out of service and trip/bypass switches associated with the SFM.

b.

Repeat tests for all SFMs.

i.

a.

The SFM out of service provides a no trip to the respective scheduling and voting module.Each automatic operating bypass is alarmed in the MCR.

[ITAAC 02.05.22]

ii.

b.

There is no change to the 2 out of 4 voting logic for the separation group.Each manual operating bypass is alarmed in the MCR.

[ITAAC 02.05.221]

iii. The inoperable status of the SFM is provided in the MCR.

[ITAAC 02.05.23]

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-153 Draft Revision 3 System Level Test #63-11 Test Objective Test Method Acceptance Criteria Verify the controls located on the operator workstations in the MCR operate to perform important human actions.

Test is performed to verify operation of redundant trains and divisions.

i.

Use MPS Division I controls, BAS supply pump A train, and CVCS makeup pump A train to perform the following:A test will be performed to verify the CVCS can add water to the RCS after a containment isolation signal using the O-1 override switch and MCR controls.

a.

Insert a manual containment isolation signal.

b.

Override the containment isolation signal using the CNTS isolation override switch.

c.

Enable nonsafety controls using the enable nonsafety control switch.

d.

Using an operator workstation in the MCR, align the BAS, CVCS, and CNTS to add inventory to the RCS.

ii.

Use MPS Division II controls, BAS supply pump B train, and CVCS makeup pump B train to perform the following:A test will be performed to verify the CFDS can add water to containment after a containment isolation signal using the O-1 override switch and MCR controls.

a.

Insert a manual containment isolation signal.

b.

Override the containment isolation signal using the CNTS isolation override switch.

c.

Enable nonsafety controls using the enable nonsafety control switch.

d.

Using an operator workstation in the MCR, align the BAS, CVCS, and CNTS to add inventory to the RCS.

iii. Use MPS Division I controls and CFDS pump A train to perform the following:

a.

Insert a manual containment isolation signal.

b.

Override the containment isolation signal using the CNTS isolation override switch.

i.

Water is added to the RCS.

ii.

Water is added to the RCS.

iii. Water is added to containment.

iv. Water is added to containment.

[ITAAC 02.05.20]

[ITAAC 02.05.26]

(i., and ii., iii., and iv.)

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-154 Draft Revision 3 c.

Enable nonsafety controls using the enable nonsafety control switch.

d.

Using an operator workstation in the MCR, align the CFDS and CNTS to add inventory to containment.

iv. Use MPS Division II controls and CFDS pump B train to perform the following:

a.

Insert a manual containment isolation signal.

b.

Override the containment isolation signal using the CNTS isolation override switch.

c.

Enable nonsafety controls using the enable nonsafety control switch.

d.

Using an operator workstation in the MCR, align the CFDS and CNTS to add inventory to containment.

Table 14.2-63: Module Protection System Test #63 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-156 Draft Revision 3 Table 14.2-65: Neutron Monitoring System Test # 65 Preoperational test is required to be performed for each NPM.

The NMS is described in Section 7.0.4.2 and the functions verified by this test and power ascension testing are:

System Function System Function Categorization Function Verified by Test #

1.

The NMS supports the MPS by providing neutron flux data for various reactor trips.

safety-related Test #63-41 Neutron Monitoring System Power Range Flux Calibration Test #92 2.

The NMS supports the MPS by providing information signals for PAM.

nonsafety-related Test #66-2 3.

The NMS supports the MPS by providing information signals for PAM during CNV flooded conditions.

nonsafety-related Test #66-2 Prerequisites Prerequisites associated with NMS testing are identified in the referenced test abstract cited under the Function Verified by Test # heading.

Component Level Tests None System Level Tests None

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-159 Draft Revision 3 System Level Test #66-1 Test 66-1 is conducted concurrently with TGS test# 33-1 which warms the RCS from ambient conditions to the highest temperature achievable by MHS heating.

Test Objective Test Method Acceptance Criteria Verify that the output signals from the NPM level, pressure, temperature and flow instruments listed in Table 7.1-2 properly trend while increasing RCS temperature and pressure.

Note: This is not a verification of instrument calibrations.

Increase RCS temperature from ambient to the highest temperature achievable by MHS heating.

Using the MCS historian record the engineering values for the output of the instruments described in the test objective. Record data at approximately 50 °F intervals from ambient temperature to the maximum RCS temperature.

Note: Instrument signals are provided to the module-specific SDIS display and the main control room workstations.

Trended data shows agreement between the two divisional instruments or the four safety group instruments monitoring the same variable.All instruments track within acceptable design limits.

(Use Technical Specification channel check limits, when applicable)

System Level Test #66-2 Test Objective Test Method Acceptance Criteria i.

Verify PAM Type B and C variables are displayed on the module-specific SDIS displays in the MCR.

ii.

Verify alarms associated with PAM Type B and C variables are retrieved in the MCR.

iii. Verify module-specific PAM Type D variables are displayed on the module-specific SDIS displays in the MCR.

i.

Simulate an injection signal for the PAM Type B and C variables listed in Table 7.1-7.

ii.

Increase or decrease a simulated injection signal for the PAM Type B and C variables listed in Table 7.1-7 to obtain its associated alarm.

iii. Simulate an injection signal for the PAM Type D variables listed in Table 7.1-7 i.

The PAM Type B and C variables listed in Table 7.1-7 are retrieved and displayed on the SDI displays in the MCR.

[ITAAC 02.05.25]

ii.

The alarms associated with the PAM Type B and C variables listed in Table 7.1-7 are retrieved and displayed on the SDI displays in the MCR.

iii. The PAM Type D variables listed in Table 7.1-7 are retrieved and displayed on the SDIS displays in the MCR.

Table 14.2-66: Safety Display and Indication System Test # 66 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-160 Draft Revision 3 Table 14.2-67: Fixed-Area Radiation Monitoring System Test # 67 Preoperational test is required to be performed once.

The fixed-area radiation monitoring system is described in Section 12.3.4 and the function verified by this test is:

System Function System Function Categorization Function Verified by Test #

The fixed-area radiation monitoring system supports the following buildings by monitoring radiation levels:

  • ANB
  • RWB
  • TGB
  • RXB nonsafety-related Component-level test RMS function verified by another test is:

System Function System Function Categorization Function Verified by Test #

The RMS supports the RXB by monitoring radiation levels in the building in proximity of the bioshield.

nonsafety-related SDIS Test #66-2 Prerequisites Verify an instrument calibration has been completed, with approved records and within all calibration due dates, for all instruments required to perform this test.

Component Level Tests Test Objective Test Method Acceptance Criteria i.

Verify each fixed airborne radiation monitors response to an alarm condition known source.

Actuate the check source on a fixed airborne radiation monitor listed in Table 12.3-110.

Repeat test for the remainder of fixed airborne radiation monitors.

MCR display and local, visual observation indicate the following:

i.

The main control room audible and visual alarms are received.

ii.

The local readout, audible alarm and visual alarm are received.

ii.

Verify each fixed area radiation monitors response to an alarm condition known source.

Actuate the check source on a fixed area radiation monitor listed in Table 12.3-121.

Repeat test for the remainder of fixed area radiation monitors.

MCR display and local, visual observation indicate the following:

i.

The main control room audible and visual alarms are received.

ii.

The local readout, audible alarm and visual alarm are received.

System Level Tests None

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-164 Draft Revision 3 Table 14.2-70: Hot Functional Testing Test # 70 Preoperational testing is required to be performed once for each NPM.

The following identifies the tests employed in support of the performance of hot functional testing.

Hot Functional Testing Tests Test Objective Verified by Test #

Tested Function Categorization CES i.

Verifies the automatic operation of the CES to establish and maintain design vacuum for the CNV.

ii.

Verify radiation isolation on high radiation level in the ABS.

iii. Verifies the CES supports RCS leakage detection.

iv. Verifies the CES level and pressure instrumentation support leak-before-break leakage detection.

i.

CES Test #41-1 ii.

CES Test #41-2 iii. CES Test #41-3 iv. CES Test #41-4 nonsafety-related CVCS i.

Verifies CVCS automatic operation to maintain pressurizer level.

ii.

Verifies automatic pressurizer pressure control.

iii. Verifies CVCS automatic boration and dilution of the RCS.

i.

CVCS Test #38-1 ii.

CVCS Test #38-2 iii. CVCS Test #38-3 nonsafety-related ECCS i.

Each ECCS valve opens after receipt of an ESF signal and after RCS pressure is decreased to the threshold pressure for operation of the inadvertent actuation block.

i.

MPS Test #63-6 nonsafety-related FWS i.

Verifies the FWS automatically controls flow to the SGs to maintain SG inventory.

ii.

Verifies the FWS automatically cools the turbine generator bypass steam flow in the main steam desuperheater.

i.

TGS Test #33-1 ii.

TGS Test #33-1 nonsafety-related ICIS i.

Verifies proper temperature indication is obtained from the ICIS thermocouples.

i.

ICIS Test #49-1 nonsafety-related LRWS i.

Verifies the LRWS receives and processes a gaseous stream from the pressurizer.

i.

LRWS Test #35-1 nonsafety-related

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-165 Draft Revision 3 MHS i.

Verifies the MHS is capable of heating the RCS to a temperature sufficient to obtain criticality.

ii.

Verifies the MHS is capable of heating the RCS to establish natural circulation flow sufficient to obtain criticality.

iii. Verifies a local grab sample can be obtained from an MHS grab sample device indicated on the MHS piping and instrumentation diagram.

i.

TGS Test #33-1 ii.

TGS Test #33-1 iii. TGS Test #33-1 nonsafety-related MPS i.

Verifies design responses to manual ESF signals.

ii.

Verifies containment isolation valves closure times.

iii. Verifies the ECCS valves closes when the CVCS provides water to reset the ECCS valves.

i.

MPS Test #63-6 ii.

MPS Test #63-7 iii. MPS Test #63-6 safety-related PSS i.

Verifies sampling capability of the primary sampling points.

ii.

Verifies sampling capability of the containment sampling points.

ii.

Verifies sampling capability of the secondary sampling points.

i.

PSS Test #53-1 ii.

PSS Test #53-2 iii. PSS Test #53-3 nonsafety-related SDIS i.

Verify that the output signals from the NPM level, pressure, temperature, and flow instruments listed in Table 7.1-2 properly trend while increasing RCS temperature and pressure.

i.

SDIS Test #66-1 nonsafety-related TGS i.

Verifies the TGS automatically controls turbine bypass flow to the main condenser.

ii.

Verify the maximum main turbine speed that can be obtained using the MHS to heat the RCS.

iii. Verifies the ECCS valves close when the CVCS provides water to reset the ECCS valves.

i.

TGS Test #33-1 ii.

TGS Test #33-2 iii. TGS Test #33-1 nonsafety-related Prerequisites Prerequisites associated with performing hot functional testing are identified in the referenced test abstract cited under the Verified by Test # heading.

Table 14.2-70: Hot Functional Testing Test # 70 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-172 Draft Revision 3 Table 14.2-76: Initial Fuel Load Test # 76 The Initial Fuel Load Test is required to be performed for each NPM.

This test is performed prior to initial fuel load.

Test Objectives i.

Conduct initial fuel load with no inadvertent criticality.

ii.

Install fuel assemblies and control components at the locations specified by the design of the initial RXC.

Prerequisites i.

Plant systems required for initial fuel loading have completed preoperational testing.

ii.

Plant systems required for initial fuel loading have been aligned per operations procedures.

iii. The design of the initial RXC that specifies the final core configuration of fuel assemblies and control components is completed.

iv. A core load sequence has been approved.

v.

Neutron monitoring data from a previous NPM initial fuel loading or calculations showing the predicted response of monitoring channels are available for evaluating monitoring data.

vi. The lower RPV is installed in the RPV support stand.

vii. Control room communications are established.

viii. RXB radiation monitors are functional.

ix. Boron concentration in the pool is within Technical Specification limits.

Test Method i.

The overall process of initial fuel loading will be supervised by a licensed senior reactor operator with no other concurrent duties.

ii.

Install fuel and control components per approved procedures.

iii. Monitor boron concentration inside the RPV periodically during fuel load to ensure it satisfies TS.

iv. Monitor neutron counts during the load of each fuel assembly and plot an independent inverse count rate ratio for each source range detector after each fuel load assembly is loaded.

v.

Verify neutron count data are consistent with calculations showing the predicted response. For fuel loading of the second NPM and all subsequent NPMs use data obtained from previous fuel loadings.

vi. Demonstrate the inverse count rate ratio does not show significant approach to criticality.

vii. Maintain the status of the core loading.

viii. Maintain communication between fuel handling personnel and the MCR.

Acceptance Criterion i.

Each fuel assembly and control component is installed in the location specified by the design of the initial RXC.

ii.

There is no indication of inadvertent criticality.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-175 Draft Revision 3 Table 14.2-79: Primary and Secondary System Chemistry Test # 79 Startup test is required to be performed for each NPM.

This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.

Test Objective Verify water quality in the primary system and secondary system using the PSS.

Prerequisites i.

The PSS instruments have been calibrated.

ii.

The NPM is fully assembled.

iii. The RCS is at hot zero power (RCS at normal operating pressure and RCS temperature at the maximum temperature obtainable when heated only by the MHS).

Test Method i.

Use the PSS to sample the normal primary system sample points listed in Table 9.3.2-1.

ii.

Use the PSS to sample the normal secondary system sample points listed in Table 9.3.2-3.

iii. To the extent practical, responses of PSS radiation monitors should be verified by laboratory analyses of grab samples taken at the same process location.

iv. Conduct the test at steady-state condition at approximately 25, 50, 75, and 100 percent reactor thermal power.

Acceptance Criterion The sample analysesis satisfyies the limits specified in plant procedures.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-179 Draft Revision 3 Table 14.2-82: Pressurizer Spray Bypass Flow Test # 82 Startup test is required to be performed for each NPM.

This test is performed after initial fuel loading but prior to initial criticality.

Test Objective Verify the pressurizer spray bypass flow rate is adequate to prevent thermal fatigue of the spray line components and provide sufficient mixing in the pressurizer to maintain pressurizer water chemistry similar to the rest of the RCS while avoiding unnecessary energization of the pressurizer heaters.

Prerequisites i.

The core is installed.

ii.

The NPM is fully assembled.

iii. The RCS is at hot zero power (RCS at normal operating pressure and RCS temperature at the maximum temperature obtainable when heated only by the MHS).

Test Method i.

With the automatic pressurizer spray valve closed, adjust the manual spray bypass valve to maintain a continuous spray bypass flow of approximately one gpm.

ii.

If the continuous bypass spray flow requires the operation of the pressurizer backup heaters to maintain the pressurizer pressure setpoint, throttle close the bypass valve until pressurizer pressure is maintained by the proportional heaters.

Acceptance Criterion The spray bypass valve is throttled to maintain the required bypass flowflow satisfies design requirements.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-187 Draft Revision 3 Table 14.2-90: Power-Ascension Test # 90 Startup test is required to be performed for each NPM.

This test is performed prior to power-ascension testing.

Test Objective Identify the sequence for the following power-ascension tests.

a.

Core Power Distribution Map Test #91 b.

Neutron Monitoring System Power Range Flux Calibration Test #92 c.

Reactor Coolant System Temperature Instrument Calibration Test #93 d.

Reactor Coolant System Flow Calibration Test #94 e.

Radiation Shield Survey Test #95 f.

Reactor Building Ventilation System Capability Test #96 g.

Thermal Expansion Test #97 h.

Control Rod Assembly Misalignment Test #98 i.

Steam Generator Level Control System Test #99 j.

Ramp Change in Load Demand Test #100 k.

Step Change in Load Demand Test #101 l.

Loss of Feedwater Heater Test #102

m. 100 Percent Load Rejection Test #103 n.

Reactor Trip from 100 Percent Power Test #104 o.

Island Mode Test for the First NuScale Power Module (Test #105) p.

Island Mode Test for Multiple NuScale Power Modules (Test #106) q.

Remote Shutdown Workstation Test #107NuScale Power Module Vibration Test #108 r.

NuScale Power Module Vibration Test #108 Prerequisites None Test Method i.

Identify the specific plant conditions required for each power-ascension test procedure to maintain technical specification operability.

ii.

Identify the prerequisites required for each power-ascension test procedure.

iii. Determine the test sequence for power-ascension testing based on technical specification requirements and test prerequisites.

Acceptance Criterion The sequence for power-ascension testing has been determined.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-194 Draft Revision 3 Table 14.2-97: Thermal Expansion Test # 97 Startup test is required to be performed for each NPM.

This test is performed during plant heatup and cooldown.

Test Objectives i.

Verify that ASME Code Class 1, 2, and 3 system piping can expand without obstruction and that expansion is within design limits. All ASME Code Class 1, 2, and 3 system piping is within the RXB.

ii.

Verify that high-energy piping inside the RXB can expand without obstruction and that expansion is within design limits.

Prerequisite Temporary instrumentation is installed on piping outside the NPM as required to monitor the deflections for the piping under test.

Test Method i.

Thermal expansion testing is performed in accordance with ASME OM Standard, Part 7 as discussed in Section 3.9.2.1.2.

ii.

Record deflection data during plant heatup and cooldown.

iii. Identify support movements by recording hot and cold positions of the supports.

(Note: piping testing will be determined in COL Item 3.9-13) iv. All tested piping is within the RXB.

v.

All tested piping is outside the NPM.

vi. All tested piping is contained within the MSS, FWS, ABS, PSS, and CVCS.

Acceptance Criteria In accordance with ASME OM Standard, Part 7, Ffor the piping systems tested:

i.

There is no evidence of blocking of the thermal expansion of piping or component, other than by installed supports, restraints, and hangers.

ii.

Spring hanger movements must remain within the hot and cold setpoints and supports must not become fully retracted or extended.

iii. Piping and components return to their approximate baseline cold position.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-196 Draft Revision 3 Table 14.2-99: Steam Generator Level Control Test # 99 Startup test is required to be performed for each NPM.

This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.

Test Objective i.

Verify the ability of SG inventory control systems to sustain a ramp increase in load demand.

ii.

Assess the dynamic response of SG inventory for ramp increase in load demand.Verify the stability of the automatic SG level control system by introducing simulated transients at various power levels during the ascension to full power.

Prerequisite i.

The feedwater system is operating in steam generator inventory pressure control (Feedwater regulating valves in automatic control).The NPM is operating in a steady-state condition at the specified power level.

Test Method i.

Raise reactor thermal power to approximately 25 percent.Simulate an SG level transient by changing the level setpoint at approximately 25, 50, 75, and 100 percent reactor thermal power.

ii.

Use the main control room turbine controls to provide a 5 percent of full power per minute load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.Record the steam generator level control response when the control system is returned to automatic control.

iii. Use the main control room turbine controls to provide a 5 percent of full power per minute load decrease in demand at approximately 25, 50, and 75, and 100 percent reactor thermal power.Adjustments to the control systems are made, if necessary, prior to proceeding to the next power plateau.

Acceptance Criteria i.

The SG inventory control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:During recovery from a simulated steam generator level transient, SG level control response is consistent with the design for the following:

a.

SG superheatovershoot or undershoot to the new level.

b.

SG pressuretime required to achieve the new level.

c.

SG inventoryerror between the actual level and control setpoint.

d.

Feed pump speedfeedwater pump discharge pressure oscillations.

ii.

SG inventory control systems response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.Water hammer indications:

a.

Audible indications of water hammer are not observed.

b.

No damage to pipe supports or restraints.

c.

No damage to equipment.

d.

No equipment leakage as a result of the steam generator level transient.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-197 Draft Revision 3 RAI 03.09.02-69 Table 14.2-100: Ramp Change in Load Demand Test # 100 Startup test is required to be performed for each NPM.

This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.

Test Objectives i.

Verify the ability of the plant automatic control systems to sustain a ramp increase in load demand.

ii.

Assess the dynamic response of the plant for ramp increase in load demand.

Prerequisites i.

The NPM is operating in a steady-state condition at the designated power level.

ii.

The plants electrical distribution system is aligned for normal operation.

iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.

a.

Reactivity control b.

RCS temperature control c.

Pressurizer pressure control d.

Pressurizer level control e.

Turbine control f.

Feedwater level control g.

CWS basin level control h.

SCWS basin level control i.

Feedwater heater level control j.

Hotwell level control iv. If required, verify instrumentation is installed for piping vibration testing.

Test Method i.

Use the main control room turbine controls to provide a 5 percent of full power per minute load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.

ii.

Use the main control room turbine controls to provide a 5 percent of full power per minute load decrease in demand at approximately 25, 50, and 75, and 100 percent reactor thermal power.

iii. Conduct piping vibration testing, as required, during power changes.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-198 Draft Revision 3 Acceptance Criteria i.

The turbine does not trip.

ii.

The reactor does not trip.

iii. The main steam safety valves do not open.

iv. The turbine does not overspeed.

v.

The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The primary and secondary control systems, with no manual intervention, maintain reactor power, reactor coolant system temperatures, pressurizer pressure and level, and SG levels and pressures within acceptable ranges during and following the transient.

a.

Reactor Power b.

RCS temperature c.

Pressurizer pressure d.

Pressurizer level e.

SG superheat f.

SG pressure g.

SG inventory h.

Gland seal temperature i.

CWS basin level j.

SCWS basin level k.

Feedwater heater level l.

Main condenser hotwell level

m. Main condenser vacuum n.

Outlet temperature of turbine bypass desuperheater vi. Control system response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.

vii. Water hammer indications a.

Audible indications of water hammer are not observed.

b.

No damage to pipe supports or restraints.

c.

No damage to equipment.

d.

No equipment leakage as a result of the ramp change.

viii. Piping vibration - System specific steady state and transient vibration testing criteria are established by the piping designer. Actual acceptance criteria will depend on the selected test method, but may include:

a.

Limits for stresses calculated based on the observed/measured vibration response of the system.

b.

No permanent deformation or damage is observed in the piping system or supports.

c.

Vibration displacements are not excessive, would not potentially cause the piping to come in contact with surrounding SSC, and are such that the movement of supports and flexible joints is within their allowable limits.

Table 14.2-100: Ramp Change in Load Demand Test # 100 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-199 Draft Revision 3 Table 14.2-101: Step Change in Load Demand Test # 101 Startup test is required to be performed for each NPM.

This test is performed at approximately 25, 50, 75, and 100 percent reactor thermal power.

Test Objectives i.

Verify the ability of the plant automatic control systems to sustain step load increases and step load decreases in demand.

ii.

Assess the dynamic response of the plant for a load step demand.

Prerequisites i.

The NPM is operating in a steady-state condition at the specified power level.

ii.

The plants electrical distribution system is aligned for normal operation.

iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.

a.

Reactivity control b.

RCS temperature control c.

Pressurizer pressure control d.

Pressurizer level control e.

Turbine control f.

Feedwater level control g.

CWS basin level control h.

SCWS basin level control i.

Feedwater heater level control j.

Hotwell level control Test Method i.

Use the MCR turbine controls to provide a 10 percent step load increase in demand at approximately 25, 50, and 75 percent reactor thermal power.

ii.

Use the MCR turbine controls to provide a 10 percent step load decrease in demand at approximately 25, 50, 75, and 100 percent reactor thermal power.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-200 Draft Revision 3 Acceptance Criteria i.

The turbine does not trip.

ii.

The reactor does not trip.

iii. The main steam safety valves do not open.

iv. The turbine does not overspeed.

v.

The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The primary and secondary control systems, with no manual intervention, maintain reactor power, RCS temperatures, pressurizer pressure and level, and SG levels and pressures within acceptable ranges during and following the transient.

a.

Reactor Power b.

RCS temperature c.

Pressurizer pressure d.

Pressurizer level e.

SG superheat f.

SG pressure g.

SG inventory h.

Gland seal temperature i.

CWS basin level j.

SCWS basin level k.

Feedwater heater level l.

Main condenser hotwell level

m. Main condenser vacuum n.

Outlet temperature of turbine bypass desuperheater vi. Control system response is reviewed and compared to expected performance. Necessary adjustments to the control systems have been made prior to proceeding to the next power plateau.

vii. Water hammer indications a.

Audible indications of water hammer are not observed.

b.

No damage to pipe supports or restraints.

c.

No damage to equipment.

d.

No equipment leakage as a result of the step load change.

Table 14.2-101: Step Change in Load Demand Test # 101 (Continued)

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-201 Draft Revision 3 Table 14.2-102: Loss of Feedwater Heater Test # 102 Startup test is required to be performed for each NPM.

This test is performed at approximately 50 and 90 percent reactor thermal power.

Test Objectives i.

Verify the ability of the plant automatic control systems to sustain a loss of the high pressure feedwater heater during power operation.

ii.

Assess the dynamic response of the plant for the loss of the high pressure feedwater heater.

Prerequisites i.

The NPM is operating in a steady-state condition at the specified power level.

ii.

The plants electrical distribution system is aligned for normal operation.

iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.

a.

Reactivity control b.

RCS temperature control c.

Pressurizer pressure control d.

Pressurizer level control e.

Turbine control f.

Feedwater level control g.

CWS basin level control h.

SCWS basin level control i.

Feedwater heater level control j.

Hotwell level control Test Method Close the turbine generator extraction steam supply isolation valve to the high pressure feedwater heater from the main control room at approximately 50 and 90 percent reactor thermal power.

Acceptance Criteria i.

The reactor does not trip.

ii.

The turbine does not trip.

iii. The main steam safety valves do not open.

iv. The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:

a.

Reactor Power b.

RCS temperature c.

Pressurizer pressure d.

Pressurizer level e.

SG superheat f.

SG pressure g.

SG inventory h.

Gland seal temperature i.

CWS basin level j.

SCWS basin level k.

Feedwater heater level l.

Main condenser hotwell level

m. Main condenser vacuum n.

Outlet temperature of turbine bypass desuperheater

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-202 Draft Revision 3 Table 14.2-103: 100 Percent Load Rejection Test # 103 Startup test is required to be performed for each NPM.

This test is performed at approximately 100 percent reactor thermal power.

Test Objectives i.

Verify the ability of the plant automatic control systems to sustain a 100 percent load rejection from full power.

ii.

Assess the dynamic response of the plant for a 100 percent power load rejection.

Prerequisites i.

The NPM is operating in a steady-state condition at full reactor thermal power.

ii.

The plants electrical distribution system is aligned for normal operation.

iii. The following control systems are in automatic control:Reactor, turbine, and secondary control systems are in automatic mode.

a.

Reactivity control b.

RCS temperature control c.

Pressurizer pressure control d.

Pressurizer level control e.

Turbine control f.

Feedwater level control g.

CWS basin level control h.

SCWS basin level control i.

Feedwater heater level control j.

Hotwell level control Test Method Manually trip the generator output breaker to provide a 100 percent load rejection.

Acceptance Criteria i.

The turbine trips.

ii.

The reactor does not trip.

iii. The main steam safety valves do not open.

iv. The turbine does not overspeed beyond design limits.

v.

The plant automatic control systems, with no manual intervention, maintain the following parameters within design limits during and following the transient:The turbine generator bypass valve opens and modulates steam flow to the condenser to maintain steam generator pressure.

a.

Reactor Power b.

RCS temperature c.

Pressurizer pressure d.

Pressurizer level e.

SG superheat f.

SG pressure g.

SG inventory h.

Gland seal temperature i.

CWS basin level j.

SCWS basin level k.

Feedwater heater level l.

Main condenser hotwell level

m. Main condenser vacuum n.

Outlet temperature of turbine bypass desuperheater vi. The FWS automatically provides the necessary feedwater flow to the steam generator.

vii. Water hammer indications a.

Audible indications of water hammer are not observed.

b.

No damage to pipe supports or restraints.

c.

No damage to equipment.

d.

No equipment leakage as a result of the load rejection.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-203 Draft Revision 3 RAI 04.06-2 Table 14.2-104: Reactor Trip from 100 Percent Power Test # 104 Startup test is required to be performed for each NPM.

This test is performed at 100 percent reactor thermal power.

Test Objectives i.

Verify the ability of the NPM to sustain a reactor trip from 100 percent reactor thermal power and automatically cool the RCS to mode 3 (all RCS temperatures < 420 °F).

ii.

Assess the dynamic response of the plant to thea reactor trip.

iii. Verify each fully withdrawn CRA satisfies the CRA drop time acceptance criteria at full flow conditions.

iii. Verify the ability of DHRS to cool the RCS to Mode 3 (all RCS temperatures < 420 °F).

Prerequisites i.

The NPM is operating in a steady-state condition at full reactor thermal power.

ii.

The plants electrical distribution system is aligned for normal operation.

Test Method i.

Manually trip the reactor from the MCR.

ii.

Measure the drop time for each fully withdrawn CRA.

iii. Allow the RCS temperature trends to stabilize.

iv. Manually initiate DHRS.

viii. Allow the RCS to cool to mode 3 after DHR actuation.

Acceptance Criteria Acceptance criteria to be verified after manual reactor trip:

i.The reactor trips.

ii.

The CIVs close.

iii. The decay heat removal valves open.

iiv. The turbine generator bypass valve operates to prevent opening of the main steam safety valve.

iiiv. The turbine tripsspeed does not exceed overspeed design limits.

vi. The reactor vent valves do not open.

ivii. Water hammer indications a.

Audible indications of water hammer are not observed.

b.

No damage to pipe supports or restraints.

c.

No damage to equipment.

d.

No equipment leakage as a result of the reactor trip.

Acceptance criteria to be verified after DHR actuation:

v.

a.

DHRS actuation valves open.

b.

MSIVs close.

c.

FWIVs close.

d.

Feedwater regulating valves close e.

Secondary main steam isolation valves close f.

Secondary main steam bypass isolation valves close g.

Pressurizer heater breakers trip viii. The RCS cools to a stable condition in mode 3 (all RCS temperatures < 420 °F) without operator intervention.

vii. RCS cooldown rate is within Technical Specification limits.

viiix.Each fully withdrawn CRA drop time is within Technical Specification limits.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-204 Draft Revision 3 RAI 14.02-5 Table 14.2-105: Island Mode Test for the First NuScale Power Module (Test # 105)

This startup test is required to be performed for the first NPM in power operation. No other NPMs are in power operation. Test #105 is performed once per facility. Startup Test #106 tests island mode for multiple NPMs.

This test is performed at 100 percent reactor thermal power. Island mode operation is described in Section 8.3.1.1.1 Test Objective for the first NPM in power operation i.

Verify the first NPM in power operation can operate independently from an offsite transmission grid after transition from the transmission grid to island mode.

ii.

Verify plant electrical loads may be transitioned from island mode to an offsite transmission grid without interruption to the operation of the first NPM in power operation.

Prerequisites The first NPM in power operation is in normal operation at 100 percent reactor thermal power.

Test Method Simulate a loss of the transmission grid by opening the switchyard supply breakers (reference Figures 8.3-2a and 8.3-2b).

Acceptance Criteria i.

a.

The turbine generator associated with the NPMservice unit generator under test does not trip and changes from droop mode control to isochronous mode to control the loads on site.

b. The first NPM in power operation remains at approximately 100 percent reactor thermal power using turbine generator bypass operation.

c.

Electrical power to plant loads is uninterrupted without loss of voltage or automatic bus transfers.

d.

The auxiliary AC power source starts automatically but does not automatically load its associated bus.

ii.

The plant electrical loads are transitioned back to the external offsite grid connection when it becomes available.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-205 Draft Revision 3 RAI 14.02-5 Table 14.2-106: Island Mode Test for Multiple NuScale Power Modules (Test # 106)

This startup test is required to be performed once with multiple (at least two) NPMs in operation. Test #106 is performed once per facility. Startup Test #105 tests island mode for a single NPM.

COL Item 14.2-7:

A COL applicant that references the NuScale Power Plant design certification will select the plant configuration to perform the Island Mode Test (number of NuScale Power Modules in service).

This test is performed at 100 percent reactor thermal power for all NPMs under test. Island mode operation is described in Section 8.3.1.1.1 Test Objective for multiple NPM in operation:

i.

Verify all NPMs under test can operate independently from an offsite transmission grid after transition from the transmission grid to island mode.

ii.

Verify plant electrical loads may be transitioned from island mode to an offsite transmission grid without interruption to the operation of the service unit NPM.

Prerequisites The NPMs selected for test are in normal operation at 100 percent reactor thermal power.

Test Method Simulate a loss of the transmission grid by opening the switchyard supply breakers (reference Figures 8.3-2a and 8.3-2b).

Acceptance Criteria i.

a.

The service unit turbine generator transitions to island mode by changing from droop mode control to isochronous mode control to control the load on the 13.8kV bus it is supplying.

b.

The service unit NPM remains at approximately 100 percent reactor thermal power using turbine generator bypass operation.

c.

The non-service unit turbine generators trip.

d.

The non-service unit NPMs power reduces to approximately 95 percent reactor thermal power using turbine generator bypass operation.

e.

Electrical power to plant loads is uninterrupted without loss of voltage or automatic bus transfers.

fd. The auxiliary AC power source starts automatically but does not automatically load its associated bus.

ii.

The plant electrical loads are successfully transitioned back to an external offsite grid connection when it becomes available.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-206 Draft Revision 3 RAI 04.06-2 Table 14.2-107: Not UsedRemote Shutdown Workstation Test # 107 Startup test is required to be performed for each NPM.

This test is performed at approximately 10 - 20 percent reactor thermal power.

Test Objectives i.

Verify the NPM safety-related controls can be disabled at the remote shutdown station.

ii.

Verify the NPM nonsafety-related controls are functional at the remote shutdown station.

iii. Verify each fully withdrawn CRA satisfies the CRA drop time acceptance criteria with the reactor operating at 10 - 20 percent reactor thermal power.

Prerequisites i.

Communication exists between the MCR and the remote shutdown station.

ii.

The reactor is operating in a steady-state condition at 10 - 20 percent reactor thermal power.

Test Method i.

Using the appropriate operating procedure, the operator manually trips the reactor under test before leaving the MCR.

ii.

Measure the drop time for each fully withdrawn CRA.

iii. Using the appropriate operating procedure, the operator uses manual switches in the remote shutdown station to isolate the module protection system manual actuation switches, override switches, and the enable nonsafety control switches for each nuclear power modules module protection system in the MCR to prevent spurious actuation of equipment due to fire damage.

Acceptance Criteria i.

An operator verifies that the module protection switch controls in the MCR have been disabled.

The displays in the remote shutdown station verify the following NPM status:

ii.

The reactor is tripped.

iii. All CIVs are closed.

iv. The DHRS actuation valves are open.

v.

All RCS temperatures cool to less than 420°F (mode 3, safe shutdown) without operator action.

vi. Safety-related components cannot be operated from the remote shutdown station.

vii. The nonsafety-related controls in the remote shutdown station controls can be used to place the plant in a configuration specified by the appropriate operating procedure.

viii. Each fully withdrawn CRA drop time is within Technical Specification limits.

NuScale Final Safety Analysis Report Initial Plant Test Program Tier 2 14.2-210 Draft Revision 3 99 N/A Steam Generator Level Control 100 N/A Ramp Change in Load Demand 101 N/A Step Change in Load Demand 102 N/A Loss of Feedwater Heater 103 N/A 100 Percent Load Rejection 104 N/A Reactor Trip from 100 Percent Power 105 N/A Island Mode Test for the First NuScale Power Module 106 N/A Island Mode Test for Multiple NuScale Power Modules 107 N/A Not UsedRemote Shutdown Workstation 108 N/A NuScale Power Module Vibration Table 14.2-109: List of Test Abstracts (Continued)

Test Number System Abbreviation Test Abstract

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-28 Draft Revision 3 02.05.01 MPS Section 7.2.1.1, I&C Safety System Development Process, discusses the software lifecycle phases for the MPS. The purpose is to verify software implementation based on licensing commitments to 10 CFR Part 50, Appendix A, GDC 1 (Quality), Appendix B (Quality Assurance Criteria), RGs 1.28, 1.152, 1.168, 1.169, 1.170, 1.171, 1.172, and 1.173, and the associated IEEE standards. The licensee shall perform analyses for each phase and generate technical reports to conclude that the lifecycle phases were implemented per the licensing commitments. Per RG 1.152, a generic waterfall software life cycle model consists of the following phases: (1) concepts, (2) requirements, (3) design, (4) implementation, (5) test, (6) installation, checkout, and acceptance testing, (7) operation, (8) maintenance, and (9) retirement.

The ITAAC verifies that output documentation of each Software Lifecycle phase satisfies the requirements of that phase for the MPS and that software were implemented per licensing commitments to 10 CFR Part 50, Appendix A, GDC1 (Quality), Appendix B (Quality Assurance Criteria), RGs 1.28, 1.152, 1.168, 1.169, 1.170, 1.171, 1.172, and 1.173, and the associated IEEE standards.

X 02.05.02 MPS Section 7.2.9, Control of Access, Identification, and Repair, discusses the protective measures that prevent modification of the MPS tunable parameters without proper configuration and authorization. Guidance on this issue is provided in DI&C-ISG-04 Revision 1, "Highly-Integrated Control Rooms - Communications Issues," under interdivisional communications, staff position 10.

In accordance with Table 14.2-63, a preoperational test demonstrates that protective measures restrict modification to the MPS tunable parameters without proper configuration and authorization. This test will be performed by attempting to modify the tunable parameters with the MPS not in the correct configuration or without authorization.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-31 Draft Revision 3 02.05.06 MPS Section 7.1.2, Independence, discusses the communication independence between redundant Class 1E digital communication system divisions. The purpose is to verify proper data isolation between redundant divisions. Requirements for independence are given in IEEE Std. 603-1991. Guidance for providing independence between redundant divisions of the Class 1E digital communication system is provided in Digital I&Cs Interim Staff Guidance (ISG) 04.

A vendor test demonstrates that independence between redundant divisions of the Class 1E MPS is provided.Not used.

X 02.05.07 MPS Section 7.1.2, Independence, discusses the communication independence between Class 1E digital communication systems and non-Class 1E digital communication systems. The purpose is to verify that logical or software malfunction of the nonsafety-related system cannot affect the functions of the safety system.

Requirements for independence are given in IEEE Std. 603-1991.

Guidance for providing independence between the Class 1E digital communication system and non-Class 1E digital communication systems is provided in Digital Instrumentation and Controls ISG 04.

A vendor test demonstrates that independence between the Class 1E MPS and non-Class 1E digital systems is provided.

X 02.05.08 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the reactor trip system (RTS). The reactor trip functions are listed in Table 7.1-3:

Reactor Trip Functions. The reactor trip logic for the monitored variables is provided in Figure 7.1-1.

The MPS initiates an automatic reactor trip signal when the associated plant condition(s) exist.

In accordance with Table 14.2-63, a preoperational test demonstrates that a reactor trip signal is automatically initiated for each reactor trip function listed in Tier 1 Table 2.5-1.

The actuation of reactor trip breakers (RTBs) is not required for this test. The verification of the existence of a reactor trip signal is accomplished using main control room (MCR) displays.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-32 Draft Revision 3 02.05.09 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual engineered safety features (ESFs) actuations, variables that are monitored to provide input into automatic ESFs signals, and the features of the ESF systems. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions.

The ESFs logic for the monitored variables is provided in Figure 7.1-1.

The MPS initiates an automatic ESF actuation signal when the associated plant condition(s) exist.

In accordance with Table 14.2-63, a preoperational test demonstrates that an automatic ESF actuation signal is automatically initiated for each of the ESF functions listed in Tier 1 Table 2.5-2.

The actuation of ESFs equipment is not required for this test. The verification of the existence of an ESF actuation signal is accomplished using MCR displays.Not used.

X 02.05.10 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the RTS. The reactor trip functions are listed in Table 7.1-3: Reactor Trip Functions. The reactor trip logic for the monitored variables is provided in Figure 7.1.

The MPS initiates an automatic reactor trip signal for the reactor trip functions when the associated plant condition(s) exist.

In accordance with Table 14.2-63, a preoperational test demonstrates that the RTBs open when any one of the automatic reactor trip functions is initiated from the MCR. The RTBs are only opened once to satisfy this test objective.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-33 Draft Revision 3 02.05.11 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual ESFs actuations, variables that are monitored to provide input into automatic ESFs signals, and the features of the engineered safety feature systems. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions. The ESFs logic for the monitored variables is provided in Figure 7.1.

The MPS initiates an automatic ESF actuation signal for the functions listed in Tier 1 Table 2.5-2 when the associated plant condition(s) exist.

In accordance with Table 14.2-63, a preoperational test demonstrates that ESF equipment automatically actuates to perform its safety-related function listed in Tier 1 Table 2.5-2 upon an injection of a single simulated MPS signal.Not used.

X 02.05.12 MPS Section 7.1.1.2.1, Protection Systems, describes automatic and manual reactor trips, variables that are monitored to provide input into automatic reactor trip signals, and the features of the RTS. A manual reactor trip is one of the MPS manually actuated functions.

In accordance with Table 14.2-63, a preoperational test demonstrates that the RTBs open when a reactor trip is manually initiated from the MCR.Not used.

X 02.05.13 MPS Section 7.1.1.2.1, Protection Systems, describes manual ESFs actuation, variables that are monitored to provide input into automatic ESFs signals, and the features of the ESF system. The ESFs functions that can be manually actuated are shown in Figure 7.1-1 In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS actuates the ESF equipment to perform its safety-related function listed in Tier 1 Table 2.5-23 when manually initiated.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-34 Draft Revision 3 02.05.14 MPS Section 7.1.6, Safety Evaluation, describes the MPS conformance to the GDC in 10 CFR 50 Appendix A. Guidance provided in Design Specific Review Standard Section 7.2.3, Reliability, Integrity, and Completion of Protective Action, states that the design incorporate protective measures that provide for I&C safety systems to fail in a safe state, or into a state that has been demonstrated to be acceptable on some other defined basis, if conditions such as disconnection of the system, loss of power, or adverse environments, are experienced.

Section 7.1.6 describes that consistent with GDC 23, the MPS is designed, with sufficient functional diversity as to prevent the loss of a protection function, to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of power, or postulated adverse environments are experienced. Section 7.2.3.2, System Integrity Characteristics, states that the MPS is designed such that in the event of a condition such as a system disconnection or loss of power the MPS fails into a safe state.

In accordance with Table 14.2-63, a preoperational test demonstrates that when the loss of electrical power is detected in a separation group of the MPS that separation group fails to a safe state resulting in a reactor trip state for that separation group.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-35 Draft Revision 3 02.05.15 MPS Section 7.1.6, Safety Evaluation, describes the MPS conformance to the GDC in 10 CFR 50 Appendix A. Guidance provided in Design Specific Review Standard Section 7.2.3, Reliability, Integrity, and Completion of Protective Action, states that the design incorporate protective measures that provide for I&C safety systems to fail in a safe state, or into a state that has been demonstrated to be acceptable on some other defined basis, if conditions such as disconnection of the system, loss of power, or adverse environments, are experienced.

Section 7.1.6 describes that consistent with GDC 23, the MPS is designed, with sufficient functional diversity as to prevent the loss of a protection function, to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of power, or postulated adverse environments are experienced. Section 7.2.3.2, System Integrity Characteristics, states that the MPS is designed such that in the event of a condition such as a system disconnection or loss of power the MPS fails into a safe state. For an ESF function this predefined safe state may be that the actuated component remains as-is.

In accordance with Table 14.2-63, a preoperational test demonstrates that when the loss of electrical power is detected in a separation group of the MPS that separation group fails to a safe state for that separation group.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-37 Draft Revision 3 02.05.17 MPS Section 7.2.12.1, Automatic Control, describes the signals and initiating logic for each reactor trip and required response times.

In accordance with Table 14.2-63, a preoperational test demonstrates that the measured time for the reactor trip functions listed in Tier 1 Table 2.5-1 is less than or equal to the maximum values assumed in the accident analysis.

Section 7.2.12.1, Automatic Control, describes the signals and initiating logic for each ESF and the required response times.

In accordance with Table 14.2-63, a preoperational test demonstrates that the measured time for the ESF functions listed in Tier 1 Table 2.5-2 is less than or equal to the maximum values assumed in the accident analysis.

Technical specification SR 3.0.1 bases states that surveillances may be performed by means of any series of sequential, overlapping, or total steps provided the entire surveillance is performed within the specified frequency. The technical specification bases also describe an allowance for response time to be verified by any series of sequential, overlapping, or total channel measurements.

X 02.05.18 MPS Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.

The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.

In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS interlocks listed in Tier 1 Table 2.5-4 automatically establish an operating bypass for the specified reactor trip or ESF actuations when a real or simulated signal simulates that the associated interlock condition is met; and are automatically removed when the real or simulated signal simulates that the associated permissive condition is no longer satisfied.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-38 Draft Revision 3 02.05.19 MPS Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.

The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.

In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS permissives listed in Tier 1 Table 2.5-4 allows the manual bypass of the specified reactor trip or ESF actuations when a real or simulated signal simulates that the associated permissive condition is met; and are automatically removed when the real or simulated signal simulates that the associated permissive condition is no longer satisfied.Not used.

X 02.05.20 MPS Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for reactor trip functions. Section 7.2.4.1, Operating Bypasses, describes MPS operating bypasses for ESF actuations.

The operating bypasses are applied automatically when plant conditions dictate that the safety function is not needed, or that the safety function prevents proper plant operation at a specific mode of operation.

In accordance with Table 14.2-63, a preoperational test demonstrates that the MPS overrides listed in Tier 1 Table 2.5-4 are established when the manual override switch is active and a real or simulated RT-1 interlock is established.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-39 Draft Revision 3 02.05.21 MPS Section 7.2.4.2, Maintenance Bypass, describes the MPS maintenance bypass operation mode. An individual protection channel can be placed in a maintenance bypass operation mode to allow manual testing and maintenance during power operation, while ensuring that the minimum redundancy required by the Technical Specifications is maintained. The reactor trip functions are listed in Table 7.1-3: Reactor Trip Functions. The ESFs functions are listed in Table 7.1-4: Module Protection System Engineered Safeguards Functions.

In accordance with Table 14.2-63, a preoperational test demonstrates that with a safety function module out of service switch activated, the safety function is placed in trip or bypass based on the position of the safety function module trip/bypass switch. Each separation group of the reactor trip functions listed in Tier 1 Table 2.5-1 and each separation group of the ESFs signals listed in Tier 1 Table 2.5-2 is tested by placing the separation group in maintenance bypass.Not used.

X 02.05.22 MPS Section 7.2.4.2, Maintenance Bypass, describes the MPS maintenance bypass operation mode. An individual protection channel can be placed in a maintenance bypass operation mode to allow manual testing and maintenance during power operation, while ensuring that the minimum redundancy required by the technical specifications is maintained. Section 7.2.4.2 discusses the status indication of MPS manual or automatic bypasses placed in maintenance bypass operation mode.

In accordance with Table 14.2-63, a preoperational test demonstrates that each operational MPS manual or automatic bypass is indicated in the MCR.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP

NuScale Final Safety Analysis Report Certified Design Material and Inspections, Tests, Analyses, and Acceptance Criteria Tier 2 14.3-43 Draft Revision 3 02.05.27 MPS Section 7.0.4.1.2, Reactor Trip System, discusses the arrangement of the protection system RTBs. Figure 7.0-6: Reactor Trip Breaker Arrangement provides the arrangement of the RTBs.

This ITAAC verifies that the RTBs conform to the arrangement indicated in Tier 1 Figure 2.5-1. In addition, the ITAAC inspection verifies proper connection of the shunt and undervoltage trip mechanisms and other auxiliary contacts.Not used.

X 02.05.28 MPS Section 7.1.5.1, Application of NUREG/CR-6303 Guidelines, discusses that two of the four separation groups and one of the two divisions of RTS and ESFAS will utilize a different programmable technology.

A ITAAC inspection is performed to verify that MPS separation groups A & C and Division I of RTS and ESFAS utilize a different programmable technology from separation groups B & D and Division II of RTS and ESFAS.Not used.

X 02.05.29 MPS Section 7.1.3.3, Redundancy in Nonsafety I&C System Design, discusses that when operators evacuate the MCR and occupy the RSS, two manual isolation switches for the MPS divisions are provided to isolate the MPS manual actuation switches in the MCR to prevent fires in the MCR from causing spurious actuations of associated equipment.

An ITAAC inspection is performed of each MCR isolation switch location to verify that the switch exists in the RSS.Not used.

X Table 14.3-1: Module-Specific Structures, Systems, and Components Based Design Features and Inspections, Tests, Analyses, and Acceptance Criteria Cross Reference(1) (Continued)

ITAAC No.

System Discussion DBA Internal/External Hazard Radiological PRA & Severe Accident FP