ML17212A368

From kanterella
Revision as of 18:39, 18 May 2018 by StriderTol (talk | contribs) (Created page by program invented by StriderTol)
Jump to navigation Jump to search
Near-Term OL Human Engineering Rept on St Lucie 2 Control Room.
ML17212A368
Person / Time
Site: Saint Lucie NextEra Energy icon.png
Issue date: 07/06/1981
From:
FLORIDA POWER & LIGHT CO.
To:
Shared Package
ML17212A365 List:
References
RTR-NUREG-0660, RTR-NUREG-0700, RTR-NUREG-660, RTR-NUREG-700, RTR-NUREG-CR-1580 NUDOCS 8107210314
Download: ML17212A368 (103)


Text

NTOLSUMMARYHUMANENGINEERINGREPORTONST-LUCIE.UNIT:NO'2':CONTROLROOMPreparedfor:NuclearRegulatoryCommissionPreparedby:Florida:Power&LightCompanyJuly6,198181072103i4Bi07iSPDRADOCK05000389APDR IIII SUMMARYHUMANFACTORSREPORTTONRC

1.0INTRODUCTION

OnApril29,1981,theEssexCorporationwascontracted,bytheFloridaPoweraLightCompany(FPGL)toprovideHumanEngineering(HE)consultingservicestoassistintheassessmentofseveralnuclearpowerplantcontrolroomsasrequiredbyTaskI.D.ofNUREG-0660andsuggestedguidelinesinNUREG/CR-1580.OnetaskofEssex'swastoconductapreliminaryprelicensingreviewoftheSt.LucieUnitNo.2ControlRoom(CR),theresultsofwhich(AppendixNo.1)aretobetransmittedtotheNuclearRegulatoryCommission(NRC)alongwiththissummaryreport.Thisreport~1'umanEnineerinAssessmentoftheSt.LucieUnitNo.2NuclearPowerPlantControlRoomreport,alongwithaschedulefortheimplementationofworkitemsand/orengineeringreviewprogramsnecessarytocorrecttheseHumanEngineeringDiscrepancies(HED's)whichwereidentifiedashavingasignificantimpactonsafetyrelatedoperatingeffectiveness.NUREG/CR-1580wasusedtoestablishtheguidelinesofthepreliminaryHEDreviewsincethefinalguidelines(NUREG-0700)hadnotbeenissuedasofthedatethisreviewwasconducted.

II TheEssexCorporationperformedapreliminaryassessmentoftheSt.LucieUnitNo.2CRforthepurposeofidentifyingconspic-iousHumanFactorsEngineering(HFE)discrepancieswhichcouldhaveasignificantimpactonsafetyrelatedoperatingeffective-ness.Theoverallcontrolroomassessment.included,butwasnotlimitedto;2.3~45.6.7~CRworkspaceandenvironmentLabelsandjobperformanceaidsControlsDisplaysAnnunciatorsandwarningsComputerdisplaysystemsControlanddisplaylayoutandintegrationTheevaluationwasaccomplishedby:l.Establishingdiscretetasks2.Determiningobjectivesforeachtask3.Developingamethodologyforimplementation4.Results(DataReductionandAnalysis)

II'I Therewerefive(5)itemswhichwerenotcompleteand/oravail-ableonSL-2duringEssex'sreview.Theywere:2~3~4~5~CRCommunicationsSystemProceduresRadiationMonitorsReactorProtectionSystemTMIPost,AccidentAuxiliaryPanelTheseitemswillbediscussedinmoredetailintheFindingsandActionsectionofthisreport.ToaidinreviewofthissummaryreportaswellastheEssexPreliminaryAssessmentofSL-2(AppendixNo.l)theactionsin-tendedandschedulingwillbepresentedinthreesectionsunder4FindingsandActions,asfollows;1.Panelbypaneldiscrepancies2.Genericdiscrepancies3.Othertopicsand/orequipmentnotcoveredbyItems1and2above2'FINDINGSANDACTIONSThissectionaddressestheactionandschedulingproposedbyFP&LwithregardtoaddressingtheseitemsidentifiedasbeingHED'sintheEssex"PreliminaryHumanEngineeringAssessmentoftheSt.LucieUnitNo.2NuclearPowerPlantControlRoom"report.Lay-outanddiscrepanciesuniquetospecificpanelsarediscussedbelow.

I 2.1DiscussionsofFindinsandActionsbPanel2.1.1Panel201-Electrical,TurbineandGeneratorA.Themainsteamdrainvalveindicatorlightsareusedtoshowthedrainvalve'sposition.Thepresentorienta-tionoftheindicatorlightswouldnotcauseanerrorduringasafetyrelatedactivitysincethesevalvesarenotassociatedwithanysafetyrelatedactivities.IntheeventadrainvalveisindicatedtobeinanOFFnormalposition,thesecondarysidefieldoperatorisdispatchedtomakeadetailedinvestigationofthesituation.Reorientationofthisdisplaywouldnotchangeorimprovepresentplantoperatingeffective-ness,thereforenoactionisintendedforthisitem.B.Turbineglandsteamisplacedinserviceduringsecond-arysidewarmup.Onceplacedinservicenofurtheroperatoractionisrequired.Thissystemdoesnotinvolveanysafetyrelatedactivitiesandisnotrequiredtobemanipulatedduringanyperiodsofplanttransients.Reorientationofthiscontrolanddisplaywouldnotchangeorimprovepresentoperatoreffective-ness,thereforenoactionisintendedforthisitem.

2.1.1C.Thegeneratorfeedandmegavarindicatorsareindepend-entinstrumentsusedduringdifferentperiodsofoperation.Theplacementoftheturbinegeneratorgovernor(speedcontrol)andgeneratorcontrols,withrespecttothegeneratorspeedandmegavarindicators,areconsistentwithindustrystandards.Thesecontrolsand/orindicatorsarenotrequiredtobemanipulatedduringsafetyrelatedactivities.Reorientationofthesecontrolsanddisplayswouldnotchangeorimproveoperatoreffectiveness,thereforenoactionisintendedforthisitem.D.Turbineandreactortrippushbuttonsareplacedinareasofhighvisibilitysothatinadvertentactuationwouldnotoccur.Presentlynoactionisplannedforthisitern.E,F,G.Labelinganddemarcationofthegeneratormegavardisplays,dieselgeneratorcontrolsanddisplaysaswellastheDEHvalvetestpushbuttonsandlegendlightswillbeaccomplishedduringtheimplementationportionoftheongoinglabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.Thereviewisscheduledtobecompletedpriortofuelload.

2.1.1H.Non-glareglasswillbeinstalledondieselgenerator2Bfrequencymeter.2.1.2Panel202-FeedwaterandCondensateA.Thechemicalrecorderslocatedbetweentheauxiliaryfeedwatercontrolsandindicatorsarescheduledtobemovedpriortocoreloadtosupportinstallationoftheauxiliar'yfeedwaterautomaticinitiationsystem.B,C.Theheaterdrainpumpcontrolsandauxiliaryfeedwater'ipumpandvalvecontrolswillbereviewedduringtheongoinglabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.Thereviewissched-uledtobecompletedpriortofuelload.D.Theauxiliaryfeedwaterheaderflowtrendrecordersarescheduledtobereversedtobeconsistentwiththeirassociatedcontrolsassoonastherequiredsupportingengineeringdocumentationiscompleted.

I 2.1.2E.Theprimarywaterstoragetankleveldisplay,aswellasthetransferpumpcontrols,arenotassociatedwiththemakeupcontrolfunctionsanddisplayslocatedonPanel205.Relocationofthesecontrolsanddisplayswouldrequiretheoperatortosplithisattentionbetweenthe205and202panelduringfillingoftheprimarywaterstoragetank.FP&Lfeelstheseitemsareproperlylocatedandintendsnofurtheraction.F~Thesubjectmainsteamisolationvalvesandfeedwaterblockvalvesarenotrequiredtobemanipulatedduringnormalplantoperation.However,theirstatusandalsomanipulationwouldberequiredduringcontainmentiso-lationandsafeguardsactuation.Duetothefactthatthesecontrolsareofprimeconcernduringcertainsafetyrelatedfunctions,theyareplacedonPanel202.FP&Lintendsnofurtheraction.2.1.3Panel203-ReactorCoolantSstemAgBgC,D.ItemsA,B,CandDwillbereviewedduringthepresentongoinglabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.Theseitemswillbeprioritizedandcorrectiveactionsinitiatedpriortofuelload.E.Anengineeringreviewofthereferencedmetermountingschemewillbeinitiatedtoinvestigatetherasingand/orcantingofthesubjectmeters.

l14 2.1.4Panel204-NuclearInstrumentationA.Thepresentorientationoftheselectorswitchwouldnotcauseanerrorduringasafetyrelatedactivity.Relocationoftheselectorswitchwouldnotimprovepresentplantoperatingeffectiveness,thereforenoactionisintendedatthistime.B.ThenormalT-AVGandT-REFdisplays,used'uringcontrolrodmanipulation,arelocatedimmediatelytotherightoftheCEAcontrols.Relocationoftheredundantdisplayswouldnotimprovepresentplantoperatingeffectiveness,thereforenoactionisintendedatthistime.C.PresentlyoperatorsusetheSequenceofEventsRecorder(SER)todeterminetheassociatedchainofeventswithregardtoareactorandturbinetrip.TheSERprintsoutfirstandallsubsequenttripsandtimeofoccur-D.E.~ence.Presentlynofurtheractionisplannedwithregardtothisitem.Thereactortrippushbuttonsareplacedinanareaofhighvisibilitysothatinadvertentactuationcouldnotoccur.Presentlynoactionisplannedfortheirrelocation.IfthesameHEdiscrepanciesarereproducedonSL-2,theywillbeaddressedby:1.Removinganti-glareglassfromCRTcover2-.PlacingashieldovertheCRTtoreduceincidentlighttothedisplay.

5, 2.1.5Panel20S-ChemicalVolumeandControlSstemA.RelabelingofHIC-1110willbeaccomplishedduringtheimplementationportionoftheongoinglabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.The.reviewisscheduledtobecom-B.pletedpriortofuelload.Areviewoftheletdown,chargingandVCTcontrolsisscheduledforreviewduringtheongoinglabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.FP&LandEBASCOwillexaminealtern-ativesandaddresspriortofuelload.C.TheprimarywatertransferpumpslocatedonPanel202arenotassociatedwiththemakeupcontrolfunctionsanddisplayslocatedonPanel20S.Relocationofthesetransferpumpcontrolswouldrequiretheoperatortosplithisattentionbetweenthe20Sand202panelduringfillingoftheprimarywaterstoragetank.FP&Lfeelstheseitemsareproperlylocatedandintendsnofurtheraction.D.Theannunciatorcontrolsandcolorcodingwillbecorrectedforconsistencyduringtheongoinglabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogramwhichisscheduledforcompletionpriortofuelload.

2.1.5E.Thesubjectliquidwasteflowvalves'ndicatinglightsandlabelingwillbecorrectedtobeconsistentwith,standardconventionsassoonastherequiredsupportengineeringdocumentationiscompleted.F.Installationofasuitablesquarerootextractorandqualifieddisplay,alongwithpropercalibrationprocedures,ispresentlyscheduledtobecompletedduringtheunitsfirstrefuelingoutage.2.1.6Panel206-EmerencCoreCoolinSstemandComonentCoolinWaterSstemA.B.Thelowheadandhighheadsafetyinjectioncontrolsanddisplaysarescheduledforadetailedengineeringreviewduringthelabeling,system/subsystemdemarca-tion,syntaxandannunciatorreviewprogram.,Thereviewisscheduledforcompletionpriortofuelload.Theemergencycorecoolingcontrolsanddiplaysarescheduledforreviewduringthelabeling,system/sub-systemdemarcation,syntaxandannunciatorreviewprogram.Thereviewisscheduledforcompletionpriortofuelloadwithimplementationoflabelingandde-marcationrequirementspriortofuelload.10 I

2.1.6C.ThehydrazinecontrolanddisplaysystemarrangementonD.EControlPanel206isduetothefireseparationcri-teria.Thisitemwillbereviewedduringthelabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.Thereviewispresentlyscheduledforcompletionpriortofuelload.Theshutdowndisplaysandcontrolsarearrangedtocomplywithpresentchannel/fireseparationcriteria.Thedisplaysandcontrolswillbereviewed,duringthelabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogramtodeterminewhatcontrol/Idisplayinterfacesareachievable.Presentlynoimmediaterelocationofcontrolsordisplaysareplanned.TheCCWfromRCpumpsheatexchangerflowmeters(FIS-14-15-A,-B,-Cand-D)wereplacedtosatisfytheEngineeringSafetyFeaturesActuationSystem(ESAF)requirements.Theseindicatorsarenotdirectlyassociatedwiththecontrolsinquestion.Theflowindicatorsarecheckedbytheoperatorperiodicallyandrelocationofthedisplayswouldviolatethedesignrequirementsof.theESAFSystem.Presentlythisitemisnotscheduledforanyaction.11 1

2.1.6F.HIC-3638processcontrollerwillbereorientatedtoachieveconsistencywithcontrolroomconvention,assoonastherequiredsupportingengineeringdocumen-tationiscompleted.2.1.7MiscellaneousPanelsA.Thematrixrelayholdpushbuttonisonlyusedduringperiodiccheckoutofthereactorprotectionsystem.IftheassociatedreactortripbreakersarenotresetpriortotestingthealternatechanneltheunitwouldB.C~experienceareactortrip.PresentlytheRPSsystemisnotinstalledonSL-2andwillhavetobereviewedforthisitemuponitsinstallationpriortofuelload.ThereisnoroomtorepositiontheHVACcontrolsinquestionabovethe34inchplane.Thesecontrolsareinfrequentlyoperatedand'donotposeanycontrol/dis-playproblemswithregardtointerpretation.Thecontrolsforthereactorregulatingsystemareusedduringnormalcalibrationintervalsandarenotrequiredtobemanipulatedduringplantoperation.Presently,thereisnofurtheractionplannedwithregardtotheseitems.Theimpacttrendrecorderlegendwillberelocatedduringthelabeling,system/subsystemdemarcation,syntaxandannunciatorreviewprogram.Thereviewisscheduledforcompletionpriortofuelload.12 ll 2.1.7D.TheindicatinglightlensesonvalveFCV-25-8ontheE~HVACpanelwillbechangedtoagreewithstandardplantconvention(greenindicatesvalveclosedandredindicatesvalveopen).Keysareplacedinasecurekeycabinetasrequiredbypresentsecurityrequirements.ThekeystorageandaccessprogramforthosekeysrequiredintheCRwillnotbechangedsincetheiruseisnotrequiredforimmediateoperatoraction.Keyswillbeprovidedattheremoteshutdownpaneltoallowtheoperatorimmediateaccess.2.2GENERICDESCREPANCIESThissectionsummarizescommondiscrepanciesandoutlinesthereviewprogramand/orcorrectiveactiontobetaken.Thefollowingsectionidentifiesthediscrepancyasarrangedinthefollowingmanner:0DiscreancDescrition-BriefstatementofthehumanoStatusengineeringdiscrepancy.-Reviewprogramstoestablishcorrectiveactiontobetakenandfeasability.1.Labelingreview2.System/SubsystemDemarcationReview3.SyntaxReview4.AnnunciatorReview5.DetailedSystemInterfaceaEngineeringReview13

Imlementation-Presentschedulingissuchthatmostitemswillbecompletedpriortofuelload;however,thoseitemsrequiringdetailedengi-neeringreview,procurementofqualifiedinstrumenta-tionand/orcontrolswilltentativelybescheduledsuchthatinitialscopingwillbecompletedpriortocoreload.A.Indicatesreviewandscheduledrepairpriortofuelload.B.Indicatesdetailedengineeringreviewcom-pletedpriortofuelload.Schedulingorrepairsubjecttoengineeringandmaterialavailability.C.Preliminaryscopeofworktobecompletedpriortofuelloadwithrecommendationsand1implementationschedule.o~Cetegor-Categoryassignmentisasub-jectivedeterminationoferrorrisk(High,Moderate,Some)aswellassafetyrelatednessoftheoper-atoractivities.14 5'

Category1-Highriskofoperatorerrorinsafe-tyrelatedactivityCategory2-ModerateriskofoperatorerrorinsafetyrelatedactivityCategory3-SomeriskoferrorinsafetyrelatedactivityCategory4-RiskoferrorinnonsafetyrelatedactivityCategory5-Additionalevaluationrequired15

~g~~~~~~~+5STLUCIEUNIT$2LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionLABELCONTENTSSTATUSIMPLEMENTATIONCATEGORYl.Abbreviationsarenotusedconsistentlyinlabels.2.Contentoflabelsisnotconsistent.3.Incorrectlabels.16 5I STLUCIEUNIT02LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionLABELCODINGSTATUSCIMPLEMENTATIONCATEGORYl.Labelsarehighlysimilar.'k2.Pushbuttonshavetwolabelslwhichpresentredundantinformation.3.Componentlabelsarenotlargerthancomponentposi-tionlabels.4.Labelsarecolorcodedbasedlonpowersupply,notsystem.5.Somelabelsaredifficulttolreadduetoinsufficientcolorcontrastbetweenlabelsurfaceandprint.

Sg~~~~~~~gNSTLUCIEUNIT42LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscreancDescritionSTATUSIMPLEMENTATIONCATEGORYLABELREADABILITY1.Charactersonlabelsareseparatedbylessthantheminimumrecommendedspace(1/6)characterheight).2.Linespacingonlabelsisinadequate(lessthan1/2thecharacterheight).3.Manyabbreviationsinlabels3ontheHVAC,plantauxiliariesandlinerepeatpanelsarefollowedbyperiods.4.Readabilityoflabelsisreducedbecauseoffontstyle.18 STLUCIEUNIT42LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionLABELLOCATIONANDMAINTENANCESTATUSIMPLEMENTATIONCATEGORYl.Pointersoverlapindexonlargehorizontaltrendrecorders.N/AOperatorsusethesedevicesfortrend.3Recorderpaperhasproperscale.Presentlynoaction.isintended.2.Key-operatedswitcheshavetaped-onlabels.3.Engravedlabelswerenotfilledinandhavenowbe-comeobscuredbygrease,grimeanddirt.4.Labelshavebeenplacedunderdisplaysinalmostallcasesandareoftenobscuredbytheequipmenttheyareintendedtoidentify.25.Labelsarenotdirectlyoncontrolsanddisplays.19

Sg~~~~~~~0~~~~~~Qllfy~STLUCIEUNIT02LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionLABELLOCATIONANDMAINTENANCE(Cont.)6.Labelsarenotlocatedinaconsistentmannerthrough-outthecontrolroom,makingitdifficulttoidentifycomponentgroupings.STATUS1,2IMPLEMENTATIONCATEGORY7.Labelsarenotlocatedonthemostunclutteredsurface.8.Labellingofunitsontrend1recorders,countersandpro-cesscontrollersisincon-sistentandoftenredundanttothecontrollabel.9.Thereisnoindicationontwocolortrendrecorderastowhichcolorrepresentsanactualreadingandwhichrepresentsthesetpoint.20 STLUCIEUNIT02LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionLABELLOCATIONANDMAINTENANCE(Cont.)10.Thereareunlabelledposi-tionsonrotarycontrols(observationmadeinUnitflRPSPanel).STATUSIMPLEMENTATIONCATEGORYll.Manytrendrecordershaveblanklabelsorlabelswhichdonotexplainthedisplay'sfunction.12.Anumberofcontrolsanddisplayshavelabelswhichareeithermissingorappeartobeincorrect.21

STLUCIEUNITN2LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionDEMARCATIONSTATUSIMPLEMENTATIONCATEGORYl.Summarylabelsanddemar-cationlinesarenotusedtoidentifyandseparatesystemssurroundingmimics.Labelsdonotalwaysappearabovemimicareas.1,22.Thereislittleornouseofsummarylabellingorde-marcationtoidentifyfunc-tionallyrelatedcomponents.1,2,522

STLUCIEUNIT52LABELSANDJOBPERFORMANCEAIDSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionMIMICUSABILITYSTATUSIMPLEMENTATIONCATEGORY.1.Mimicsarenotconsistently2colorcoded.2.Notallmimiclinesterm-.inateatalabelorlabelledcomponent.3.Insufficientuseofmimicsincontrolroom.Atpresent,theyareonlyusedforelec-tricalsystems.1,2,523

0~~~~~~~+IllSTLUCIEUNIT42CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionCONTROLSDIFFICULTTOUSESTATUSIMPLEMENTATIONCATEGORY1.Processcontrollersonbenchboardindicatesetpointwithagreenstripattachedtocover,causingseriousparallaxproblems.2.Criticalpushbuttonsarelocated69,64and60in.,respectively,abovethestandingsurface.N/AThesepushbuttonsareplacedinhighlyvisibleareassuchthatinadvertentactuationcanbeminimized.Presentlynoactionisintended.3.Notallcontrolsanddis-playsusedinnormaloper-ationsarelocatedbetween34and74in.abovethefloor.4.Feedbackprovidedforcon-trolsuseisbreakerposi-tionratherthanactualpumpstate.N/AIndicatorlightsgivestatusofbreakercontrolandbreakerprotec-tion.Operatorusesassociatedpressureand.flowindicatorstodeter-mineactualsystemstatus.24

STLUCIEUNITe2CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionCONTROLSSUBJECTTOIN-ADVERTENTACTIVATIONl.Oncesetpointsaresetonprocesscontrollers,nomeansareprovidedtoguardagainstaccidentalmovingofthecontrols.STATUSN/AIMPLEMENTATIONTheprocesscontrollersinquestionaregenerallylocatedinlowbodyandhandtrafficareas.Noactionisintended.CATEGORY2.Criticalcontrolsareunguarded.25

STLUCIEUNIT42CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionVIOLATIONSOFCONTROLCONVENTIONSl.Allswitchkeysarein-sertedwithteethpointingdownSTATUSN/AIMPLEMENTATIONAllkeyswitchesareorientedinthesamemanner.Visualindicationisusedtomonitorswitchposition.Noyctionisintendedatthistime.CATEGORY2.OffpositionisnotverticalN/Ainkeyoperatedswitches.Allkeyswitchesareorientedinasimilarmanner.Visualindicationisusedtomonitorswitchposition.Noactionisintendedatthistime.3.Rotaryswitchpositionconventionsareviolatedinanumberofcases.26

STLUCIEUNIT42CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionCONTROLLAYOUTANDSUBSTITUTIONERRORSSTATUSIMPLEMENTATIONCATEGORY1.Functionallyrelatedcon-trolsanddisplaysarenotcollocated.2.Controlsusedtogetherarenotincloseproximity.1,23.Functionallysimilaroridenticalprimarycontrolsarenotconsistentlyarrangedandlocatedfrompaneltopanel.'1,227

STLUCIEUNIT<<2CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscreancDescritionCONTROLLAYOUTANDSUBSTITUTIONERRORS(Cont.)4.Minimumseparationforcontrolsnotachieved.STATUSN/AIMPLEMENTATIONThesearenon-safetyrelateditems.Thepushbuttonsinquestionarelargeandinadvertentactivationoftwoatonceisnotlikely.Nofurtheractionisintended.CATEGORY5.Controlsnotarrangedbyimportanceorfrequencyofuse.28

STLUCIEUNIT52CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionCONTROLCODING1.Keyoperatedswitchesarenotconsistentlycolorcoded.STATUS2.IMPLEMENTATIONCATEGORY2.Keyoperatedswitcheshaveunlabelledpositions.3.Flagsonbreakercontrolsareobscuredbycontrolhandles.29

WgESTLUCIEUNIT52CONTROLSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscreancDescritionSTATUSIMPLEMENTATIONCATEGORYCOLORCODING(Cont.)4.Coversonalllegendpush-buttonsareinterchange-able.l,25.DirectionalarrowsontopofT-handleRESETcontrols-arethesamecolorastherestoftherestofthehandle.36.Anumberofrotaryselector2switcheshavedirectionalmarkingsorarrowswhicharenotpresentlyfilledwithacontrastingpaintpigment.7.Controlhavenodifferen-tialcodingforpumps,fans,orvalves(exceptinlabelwording).N/APresentlythereisnoactionintended3inthisarea.Itisfeltthataddi-tionalcodingwouldplaceseverere-strictionwithlabelvisibilityandwouldnotenhancepresentoperatoreffectiveness.30 I

Illa'WWWWWWgEWWWWSTLUCIEUNIT02ANNUNCIATORSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionANNUNCIATORINFORMATIONUNCLEARORNOTPROVIDEDSTATUSIMPLEMENTATIONCATEGORY1.Thereareanumberofunnecessaryannunciators.2.TherearenoannunciatorsfortheHydrazinesystem.'.Someannunciatorsusedinstartupwillbenormallyonduringfullpowersituations.4.Theonlyindicationthatanannunciatorhasbeenclearedistheextinguish-mentofthelight.N/AThepresentannunciatorsystemisconsistentwithFPL'sstandarddesign.Clearingofanannunciatorisindica-tiveofabacktonormalconditionwhichdoesnotrequireoperatoraction.Noactionisintendedatthistime.31 M'WWWWWWWWWMSTLUCIEUNIT02ANNUNCIATORSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionPRIORITIZATIONNOTPROVIDEDSTATUSIMPLEMENTATIONCATEGORY1.Permissivedisplaysarelocatedonannunciatorpanelswhichshouldbereservedforalarmdisplays.N/AThesepermissivesalerttheoperatortochangingconditionswhichrequirehisattentionoraction.FPLfeelsthesealarmsareproperlylocatedandnofurtheractionisintended.2.ImportantannunciatorsarenotcolororpositioncodedexceptonannunciatorpanelC.Thatpanelisalsotheonlyonewithafirstoutresetfunction.32 IIIIII

~g~~~~~~~Hl~~~~~~8$+~'TLUCIEUNIT42ANNUNCIATORSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionANNUNCIATORTITLESDIFFICULTTOREAD/INTERPRETl.Annunciatorfontsizeisnotsufficientforreliable.reading,particularlyatdistancesgreaterthanseveralfeet.STATUSIMPLEMENTATIONCATEGORY2.Manyannunciatortitlesaretoowordy.3,433 II STLUCIEUNIT52ANNUNCIATORSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionANNUNCIATORCONTROLSMISLEADINGSTATUSIMPLEMENTATIONCATEGORYl.Annunciatorbuttonlabelsareunreadable.2.Locationofsimilarbuttons5isnotthesamefrompaneltopanel,andtheyarenotinthesameorderfrompaneltopanel.3.Annunciatorpushbuttonsareinconsistentlylabelled.Summarylabelsaresome-timesused,sometimesmissing.Abbrevationsareusedinconsistently.34

STLUCIEUNIT52ANNUNCIATORSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionINCONSISTENTANNUNCIATORLAYOUTSTATUSIMPLEMENTATIONCATEGORYl.Annunciatorwindowsarenotabovethesystemstheyaddress.4,535

STLUCIEUNIT52ANNUNCIATORSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionAUDIBLEANNUNCIATORSPOORLYCODEDSTATUSIMPLEMENTATIONCATEGORYl.Annunciatoraudiblesarelocatedbehindthepanels,makingitdifficultforoperatorstolocalizethealarm.2.Annunciatoraudiblessoundatambient(basal)noiselevels.36

5 STLUCIEUNIT02DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionCODINGISUNCLEARORMISLEADINGSTATUSIMPLEMENTATIONCATEGORY1.Twoofthethreelightsassociatedwitheachofthelistedswitchesarered.2.Verticalscaleindicatorlightshavemultiplemeanings.Thesamelightcanmeaneither"highset-pointexceeded",or"scalepoweron".3.Labelsforrotaryswitchcontrolpositionsarenotorientedhorizontallyandpositionlabelsareob-scuredbythecontrolhandle.4.Becauseofthelayoutofdisplaysandlabels,un-relateddisplaysappearrelated.1,237 STLUCIEUNIT52DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscreancDescriptionLACKOFLAMPTESTING/LAMPADJUSTABILITYSTATUSIMPLEMENTATIONCATEGORY1.Therearenolamptestingcapabilitiesforsimpleindicatorlights,legendlights,ortheCEAPositionDisplay.2.ThereisnodimmingcontrolN/Aforilluminateddisplays.Ambientlightingconditionswilleitherbeinthenormalconditionortheemergencylightingcondition.Presentlythedisplayilluminationisnotfoundtobedistractingduringthereduced'lightingcondition.Brighterdisplaysaredesirableduringthetransitionperiodwhiletheoperator'seyesarestilladjustingtothelightingconditions.FPLintendsnofurtheractionatthistime.38

~gSISTLUCIEUNIT<<2DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionSTATUSIMPLEMENTATIONCATEGORYDISPLAYINFORMATIONISOBSCURED1.LEDsarenotconstructedtominimizereflectionofambientilluminationfromthedisplaycover.2.ExtremevaluesareobscuredN/Aonverticalmetersduetometerdesign.3;Thepointersonallprocesscontrollerverticalscalesandallcircularmetersobscurescalenumerals.Meterswereselectedsuchthatindi-5catorsoperateinthemid2/3ofthescale.ThePostAccidentinstrumentshavebeenintegratedintothecontrolboardsuchthattheoperatorshouldhaveacomprehensiveviewofthecontrolboardfromhisdesklocation.Theoper-3atorcanviewthesenumeralsaboveandbelowthepointertodeterminemeterreading.AnOFFnormalconditionshouldbereadilyvisiblefromthisvantagepointatwhichtimehewouldbeabletomakeamoredetailedin-vestigationandassessmentofthesituation.NofurtheractionisintendedwithregardtoItems2and3.39

STLUCIEUNIT02DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionDISPLAYINFORMATIONISOBSCURED(Cont.)4.Glaremakesdisplaysdifficulttoread.STATUSIMPLEMENTATIONCATEGORY5.Displaysarelocatedwellaboveeyelevel.N/ATheseitemsrequirenooperatorinter-4faceduringnormalplantoperation.TheyprovidenocontrolfunctionandtheirrelocationwouldnotimprovetheoperatoreffectivenessduringnormalorOFFnormaloperatingconditions.FPLintendsnofurtheractionwiththisitem.40

STLUCIEUNIT02DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescritionDISPLAYEDINFORMATIONISDIFFICULTTOINTERPRETORREADSTATUSIMPLEMENTATIONCATEGORY1.MultipledecimalpointsappearonNIXIEtubedisplays.2.Codingisnotusedonmultiplescaletrendre-corderstodenotewhichscaleisassociatedwithwhichtrendinformation.3.Smallverticaltrendre-cordersonCRpanelsuseindiceswhicharedifficultto-readandhavenoscalemarkings.4.Therearemorethan9minormarksonmanylargetrendrecorders.N/ATheserecordersprovidetrendinformationtotheoperatorsuchthathecandetermineanOFFnormalcondition,ataglance.Hethencanmakeadetailedinvestigation.FPLfeelstheinstrumentsareproperlyselectedandintendsnofurtheraction.41 ii~I STLUCIEUNIT42DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionDISPLAYEDINFORMATIONISDIFFICULTTOINTERPRETORREAD(Cont.)STATUSIMPLEMENTATIONCATEGORY5.MajormarksonsmallverticalN/Aindicatorsarelessthan.5inchapart.Ahighlevelorlowlevelalarmisannunciatedatwhichtimetheoperatorwouldmakeamoredetailedinvesti-gation.Presently,FPLintendsnofurtheractiononthisitem.6.Informationfromsomever-5ticalindicators,trendre-cordersandprocesscontrollersisnotpresentedinadirectlyusableform(valuesmultipliedbyaconstant.)7.PaperontrendrecordersdoesN/Anotmatchscale.42

sg~~~~~~~galSTLUCIEUNIT02DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionDISPLAYEDINFORMATIONISDIFFICULTTOINTERPRETORREAD(Cont.)STATUSIMPLEMENTATIONCATEGORY8.ParallaxexistsbetweentheN/Adisplayscaleandthepenontrendrecorders.Theserecordersshowtrendinformation2andarenotindicators.Thechart.paperisscaledandthetrendcomparedoversomeperiodoftime.Presently,FPLintendsnofurtheraction.9.Radiationmonitortrendrecordersareoftheimpactvariety.Portionsofthenumericsymbolsdonotprint,symbolsareprintedoveroneanother,andtherearetoomanysymbols(upto23onanindividualrecorder),makingtheoutputimpossibletointerpret.NOTE:TheradiationmonitoringsystemforUnit2isdi'fferentthanUnitlandwillbere-evaluatedforthisitem.N/A43

STLUCIEUNIT02DISPLAYSHUMANFACTORSENGINEERINGDISCREPANCYREPORTSDiscrepancDescriptionDISPLAYLAYOUTISMIS-LEADING,DIFFICULTTOUSE1.Stringsoffiveormoreverticalmetersareused,whichmakesthemid-stringcomponentsdifficulttoidentify.STATUSl,2IMPLEMENTATIONCATEGORY44

2.3SPECIALANDOTHERTOPICSSeveralareasofcontrolroomreviewwereaddressedbyevaluatingcomponentsandenvironmentintheSL-1CR,sincetheassociatedequipmentorstateofCRcompletionprohibitedthetakingofdatainUnitNo.2.Theseareasarediscussedinthissectionalongwithcommentsandschedulingofrepairs.2.3.1DiitalDataProcessinSstem(DDPS)andSeuenceofEventsRecorder(SER)TheDDPStobeinstalledinUnitNo.2istobeopera-tionallyandvisuallyidenticaltothesysteminstalledonSL-1.ThefollowingareresponsestothenotedHED's.A.SomeoftheinformationprovidedbytheDDPSisforuseB.bythereactorengineeringdepartment.Someconversa-tionsanddescriptionshavebeenprovidedattheterminaloutputsuchthattheoperatorscanusetheinformationifdesired.Presentlynofurtheractionisintendedwiththisitem.Category3Theprojectiondisplaysaresubject,topooruniformityofbrightnessandpoorbackgroundcontrastaswellasincompletedisplayduetonormalfailureand/oragingofdisplaybulbs.FP&Lwilladdresstheproblembyimprovingmaintenanceofthebulbs.Category545 2.3.lC.FP&LhasrequestedtheirInstrumentationandControlD.grouptoreviewthepossibilityofmodifyingthesoftwaresuchthatthehourlylogwillhaveunitsindicatedontheheadingcolumn.Category3TheoriginalsoftwareprovidedwithDDPScrossrefer-encesaddresslocationswithdescriptions.Presentlyconsiderationisbeinggiventoperformingapre-liminaryscopeofsyntaxreviewontheDDPS;however,adetailedstudyandimplementationcouldnottakeplaceuntiltheoverallplantsyntaxreviewiscompleted.PresentlythesyntaxreviewisscheduledforcompletionsometimepriortofuelloadandtheDDPSreviewcannotE~startuntilsometimeafterwithimplementationdepen-dentonsoftwaredevelopmentandcompatibilityoftermswithcurrentprogramaddresses.Theearliestprojectdateforimplementationisthefirstrefueling.Category4TheDDPSprintercanbeadvancedafewlinesbytheoperatortoviewthelastlineofoutput.FPSLintendsnofurtheractionwithregardtothisitem.Category446 2.3.1F.Presentlytherearenoprovisionsinthesoftwaretoprovideforhighlightsbycolor,labelsorother\means.TheInstrumentationandControlgrouphasbeenG.requestedtoperformapreliminaryscopetodetermine'feasibilityofsuchaneffort.Preliminaryscopingistobecompletedpriortofuelload.Category5TheSequenceofEventsRecorderdoesoutputintimesequencestartingwiththefirsttimeflaggedeventandendingwiththelast.Whenademandlogofthepreceedingeventsisrequesteditcanbeinterruptedbyanincomingalarm.PresentlyFP&Lintendsnofurtheractiononthisitemsincetimesequencingissufficienttodeterminethecauseoftripandchainofeventsfollowing.2.3.2ControlRoomEnvironmntandLaoutSL-lwasusedtoevaluateCRenvironmentintermsoflightingandnoise.ThesedataaredeemedsomewhatgeneralizabletotheSL-2controlroomforthefollowingreasons:47

0Lightingsystemsarehighlysimilar.Exceptionsinclude;1)useofcoloredlightsinsomeplacesintheSL-1CR,and2)reducedlightingachievedbyoperatorsintheSL-1CRbyturningoffseveralbanksoflights.Theseexceptionswillreduceincidencelightinthecontrolroom.Lightmeasurementsweretakenundertheaboveconditions.LayoutsoftheCRsishighlysimilar,asareplacementsofnoise/sourcessuchasvents,coolingfans,etc.,locatedwithinthecontrolroom.Itispointedout,however,thatsoundattenuatingfeaturesareevidentintheSL-1CR(wallpanels),whichmaynotbeprovidedinSL-2.Further,noisesourcesoutsidetheSL-2CR(forexample,theturbine)willprobablyhavedifferenteffectsonCRambientnoise.NoisedatafromSL-1aresomewhatmoresuspectthanambientlightingdata.Workspacearrangementandvisibilityobservationswerealsotaken,inpart,fromtheSL-1ControlRoom.SinceoverallCRlayoutsarehighlysimilar,thesedataareconsideredgeneralizabletotheSL-2CR.

Surveyresultsindicatethatambientlightinglevelsaregenerallygood.Incidentlightinthemainoperationarearangedfrom68to107foot-candlesinthebenchportionoftheboards,and38to54foot-candlesontheverticalportionoftheboards.Lightinglevelsbehindthecontrolboardswassomewhatless,aslowas22foot-candles.Incidentlightatthereactoroperator'sconsolewasmeasuredtobe87foot-candles.Withalllightsturnedon,amaximumof170foot-candleswasnotedbythereactoroperator'sdesk.Onepotentialareaofconcernisincidentlightuniformityonthemainboards.Nonuniformityofincidentlightdoesnotappeartoposeaproblem,however,totheoperators.AproblemnotedwithlightingwasthattherearenodirectmeanstotesttheoperabilityofemergencyCRlighting.FPGLisexaminingmeanstoprovideemergencylightingtestcapability.Ambient(basal)noisewasgenerallywithintheNUREG1580Guidelines.Onepointoverthesafeguardspanelmeasured67dB(A),twodB(A)abovetheGuidelines'imit.Thisisnotconsideredtobeexcessivelyabovethelimit.However,theremayexistotherunidentifiednoisesourcesinSL-2,orfewernoisesources.DirectevaluationofSL-2noiselevels49

cannotbemadeuntiltheunitisoperational.Peaknoiselevelsreached80dB(A)atthesafeguardspanel.Theprimarysourceofnoiseseemedtobealowfrequencyresonancecomingfromtheturbinedeck.TwoareasofconcernwhichwereidentifiedinCRlayoutareasfollows:A.Thehandrailrunningalongthefrontofthebenchboardobscuresvisiontomanycontrolsanddisplays.ThehandrailforSL-2willbedesignedandinstalledsuchthatobscuringvisiontocontrolsanddisplayswillnottakeplace.B.PortionsoftheradiationmonitorsandHVACareobscuredbyotherboards.Theradiationmonitoroperatorscontrolconsolewillbeplacedsuchthattheoperatorisallowedeasyaccess.TheobscuredportionoftheHVACpaneldoesnotcontainanyinformationwhichwouldberequiredbytheoperatorwhileperforminganytaskinareasofthecontrolroomwherethelineofsighttothepanelisimpaired.ItshouldbenotedalsothattheHVACcontrolsanddisplayforSL-2arenotlocatedinthesamelocationonSL-l.FPGLpresentlyplansnofurtheractiononthisitem.50 2.3.3CommunicationThecommunicationsystemforSL-2has,asyet,notbeendesignedintermsofcontrolroomlocations,accesses,etc.Further,thecommunicationsconsoleinSL-1isbeingredesignedandwillbereproducedonSL-2.FP&LhasrequestedEssexCorporationtoreviewandcommentonthepreliminarydesignwhenitismadeavailable.AnevaluationofCRcommunicationshasnot,asofthisdate,beencompleted.2.3.4PersonalProtectiveGearEvaluationofpersonalprotectionequipmentwasconductedintheSL-1controlroom.Thegear,storageandpackagingistobethesameinSL-2.ThefollowingareresponsestothenotedHED's.A.Therespiratorandairpackfacemaskspresentlyinuseareofstandarddesign.Theprotectivecoveringoverthelenseiseasilyremovedpriortoplacingthemaskonandprovidesnoobstruction.FPaLpresentlyplansnofurtheractiononthisitem.51 I

2.3.4B.ThefacemasksusedatSt.LuciearecapableofracceptingtheoperatorseyeglassesaswellastheC.D.correctivelensesdesignedforusewiththemask.ThecompanypurchasedcorrectivelensesaremaintainedbytheHealthPhysicsgrouptoassuretheiravailabilitytoproperlyauthorizedpersonnel.FP&Lpresentlyplansnofurtheractiononthisitem.FP&LHealthPhysicsgroupwillberequestedtoscopeandevaluatetheuseofadditionalspeechcommunicationdevicespriortofuelload.FP&Lwillincorporatefullpackagedsuitsintotheiremergencyclothingprogramforthecontrolroom.2.3.5ProceduresDocumentsEmergencyproceduresfortheSL-2CRwereunderpreparationatthetimeofreview.FP&LwillgeneratethefollowingemergencyproceduresbasedonCE.guidelinesforNRCCRDRauditreview:oMainSteamLineBreakoBlackoutoperationoLossofReactorcoolantoSteamGeneratorTubeRupture52 2.3.5Theseproceduresarebeingwrittenusingaformatdiscussedinthereport,ReviewofEffectivenessofEmerencProce-duresfor0eratorUse,writtenbyLundConsulting,forCombustionEngineering.Theformatbeingemployedisthe"LayeredFormat,"suggestedbytheauthorsasbeingpreferablytonarrativetypeformat(asisusedinSL-1).Further,language,syntax,andnomenclatureistobeconstrainedtoachieveconsistency.FP&Lhastakenthispositioninordertoexpeditetheirprocedurepreparationeffortinatimelyandeffectivemanner.Essexhasnotcurrentlyreviewedtheprocedures,norreviewedindepththedocumentfromwhichtheprocedureformatisbeingselected.Walkthroughsusingtheemergencyprocedureshavenotbeenconducted.However,theNRChasconductedareviewoftheCEGuidelinesandFP&Lispreparingthoseemergencyoperatingproceduresrequiredfortheprelicensinginaccordancewiththesubjectreviewedprocedureguidelines.Essexwillreviewasampleofprocedureswhileperformingthedetailedsystem/taskanalysisreviewpresentlyscheduledtostartafterSL-1'sdetailedreviewiscompletedinlateNovemberof1981.53 III 2.3.6RadiationMonitorsTheradiationmonitoringsystematSL-2wasnotavailableatthetimeoftheevaluation.TheradiationmonitorsinSL-1isnotrepresentativeofthoseplannedforSL-2.TheunitstobepurchasedforSL-2aredesignedandbuiltbytheGeneralAtomicsCompany(GA).AnindicationofthehumanengineeringoftheseunitsisprovidedinAppendixBoftheattached.EssexReport.Theevaluationwasconducted,initially,fortheCarolinaPowerandLightCompany.ThesystemevaluatedbyEssexissimilartothestandardGAunitwhichwaspurchasedfortheSL-2controlroom.TheEssexreport,alongwithAppendixB,willbeforwardedtoEbascoforadetailedreview,evaluationandscopingofachievablebackfitstotheGAunits.3'CONCLUSIONS/RECOMMENDATIONSAvarietyofhumanengineeringdiscrepancieshavebeennotedintheSL-2controlroom.BackfitstobeconductedatSL-2byFPaLwillgreatlyenhanceoperabilityoftheCR.Forsystemsnotevaluated(e.g.,communications)duetouncompleteddesigns,FPGLcommitmenttoachieveadequateHEdesignpriortofabricationshouldservetoavoiddiscrepanciesand,therefore,enhanceoper-ationofthesesystems.Wherediscrepancieshavebeenidenti-fied,butappropriateandsuitablebackfitshavenotbeenidenti-fied,furtherexaminationofthediscrepanciesisrequiredinordertoselectandschedulebackfits.54

APPENDIX1