ML18026A325

From kanterella
Revision as of 17:46, 3 February 2020 by StriderTol (talk | contribs) (Created page by program invented by StriderTol)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
Forwards Util Responses Re Performance of Human Factors Review.Annunciators,Controls & Displays Described
ML18026A325
Person / Time
Site: Susquehanna  Talen Energy icon.png
Issue date: 02/27/1981
From: Curtis N
PENNSYLVANIA POWER & LIGHT CO.
To: Youngblood B
Office of Nuclear Reactor Regulation
References
PLA-648, NUDOCS 8103030768
Download: ML18026A325 (43)


Text

REGUI ATORY FORMATION'ISTRIBUTION S EM (RIDS)

ACCESSION NBR:8103030768 FACIL'150 387 SUsquehanna 50'88 Susqueh'anna AUTH'8 NAME I

CURT S i N ~ H 8 AUTHOR AFF ILIATION DOC',DATE:

Steam Steam Electr)c Stations Unit'"1 r Electric Stationi Unit 2E Pennsylvania Power II L i gh t'o 81/02/27

'OCKET'

+

NOTARIZED NO Pennsyl va Pennsyl va 05000387 05000388 RECIP; NAMEI RECIPIENT AFF ILLATION YOUNGBLOODgB ~ J,- I icensing Branch For wards uti 1 s responses re', per 2'UBJECT!"

for manceI of human factors review.

DISTRISUTIOR CODE': 8001S PSAR'/FSAR AMDTS and Related amends' COPIES RECEIVED>>LTR ENCL( Q SIZE>>:

'ITLE:s Correspondence.'OTES:Send ILE 3 copies FSAR L all 05000387 ISE" 3 copies FSAR 8 all amends'end 05000388 RECIPIENT COPIES RECIPIENT COPIES ID CODE/NAME) LTTR ENCL ID CODE/NAME" LTTR ENCL' ACTION: A/D LICENSNG 1 0 YOUNGBLOODgB 0, 1 0 STARKER'8 04 1 1 RUSHBROOKgM,"'NTERNA'I.:

ACCID EVAL> BR26" 1 AUX SYS'R 07 1 1 CHEM ENG BR 08 1 CONT SYS BR 09 1 1 CORE'ERF BR 10. 1 1 EFF TR SYS BR12" 1 1>>

EMERG PREP 22'. iQ EQUIP QUAL'R13 3 3 GEOSC IENCES 14 1 1 HUM FACT ENG 1 1 HYD/GEO BR 2, '2' SYS BR.

BR'aC 16 f<<

06>>

15'LES

>3 LIC QUID BR" f<<

L'IC- QUAL: BR 1 1 MATLi ENG BR 17 1 1 MECH ENG BR 18 1 MPA 1 0 NRCi PDR 02', 1 1 OELD 1 0.

OP LIC BR 1 1 POI>>IER SYS- BR 19 1. 1 PROC/TST REV 20. f. 1 QA BR. 21 1 1

.SESS BR22! 1 1 REAC>> 'SYS BR 23- 1 1 7', G F II >>

NG 01.

BR25>>

1 1

1 1

SIT>> ANAL< BR SYS" INTERAC>> BR 24 1 1

1<<

1 EXTERNAL'CRS NSIC 27 05>>

16 16 1

LPDR'3<<

1 MAR 04

~o'OTAL" NUMBER'F COPIES REQUIRED'" L'TTR 57 ENCL-'51"

I'r '1

~ 0 i-m O II l'I H

/\

C il

TWO NORTH NINTH STREET, ALLENTOWN, PA. 18101 PHONEr (215) 770-5151 NORMAN W. CURTIS Vice President-Engineering 8 Construction-Nucleer 770-5381 February 27, 1981 triltR 0 2 19815 U.S. NJCLTAR RIOUIATORT CO5Ltt 1 55 ION Mr. B. J. Youngblood, Chief Licensing Branch No. 1 U.S. Nuclear Regulatory Commission Washington, D.C. 20555 SUSQUEHANNA SES HUMAN FACTORS REVIEW ER 160450 FILE 841-2 PLA-648

Dear Mr. Youngblood:

Attached are PP&L's responses to the findings and concerns resulting from the Human Factors Review performed by NRC. If you require additional information, please call.

Very truly yours, N. W. Curtis Vice President-Engineering 6 Construction-Nuclear WEB/mks Attachment

/co I 5

//

PENNSYLVANIA POWER 8, LIGHT COMPANY Sloop>< 7@g t

ll r

E

~ ~

I'

SECTION 1 ANNUNCIATORS 1a. The annunciator system does not alert the operator that, an alarmed parameter has cleared and returned to normal. The operator would not"be kept totally informed of system conditions. (Category 1)

I o The annunciator system will be modififed to provide "REVERT" capability.

In its final form the annunciator system will function as follows:

(1) alarm when condition occurs (2) alarm with flashing light and warbling audio (3) operator silences audio, light remains-flashing (4) operator resets alarm, light becomes constant (5) alarm condition clears, light begins to flash at slow rate (6) operator resets alarm, light goes off.

o This:modification will be completed prior to fuel load.

lb. The audible alarm does not direct the operator to the alarming panel because the system has one common audible alarm. (Category 2) o Several annunciator horns will be spread throughout the inner"ring panels. Each will be initiated by those alarms associated within the panel to draw the operator's attention to that annunciator.

o This modification will be completed prior to fuel load.

1c. Except for Panel No. 05A (AR3) there are no coordinates on the annunciator panels. (Category 2) o Apply alpha - numeric coordinates to alarm panels to coincide with alarm response procedure nomenclature.

o This modification will be completed prior to fuel load.

ld. The area radiation annunciators are located throughout the control room. (Category 3)

There are two types of radiation monitorin'g alarm annunciators found in the Susquehanna control room. They are area and process radiation monitoring system annunciators.

The area annunciators are broken down into "unit" and "common" and can be found on 1C651 and OC653 respectively. The position of the alarms was predicated in attracting the Unit, 1 operator to "unit" alarms and both unit operators to "common" alarms. The system is designed to provide the operator with a warning and indication only of radiation levels at, selected locations within various paint buildings.

0 I

The process radiation monitoring system consists of nine independent subsystems. The various annunciators for the nine subsystems are located on the panels 1C651, 1C668, 1C601 and OC653. This system is distinctly different from the area .radiation monitoring system in that the monitors process fluids for radiation levels and provides not only indication but can initiate action to contain the radioactive release in the event that, predetermined .release rates are exceeded.

The alarms are spread throughout the inner ring alarm panels to coincide to the extent practicable with the systems which they are monitoring.

A discussion of the process and area radiation monitoring systems and the position of the alarms in the control room is presented to licensed operators in the Susquehanna System Technology course.

o There is -no need to move the area radiation annunciators. The system is being enhanced by generating a computer display(s) to show area radiation level readings, reducing the absolute need to go to the back panel for level readings.

o The display will be addressed as part of the NR700 long term review.

le. The audible alarm sound intensity level was low (about 1 dbA above ambient). Average measured ambient sound level was 61 dbA. (Category 1) o In item lb, PPSL agreed to provide additional annunciator horns. When implementing item lb, careful attention will be paid to sound intensity level.

o The modification will be complete prior to fuel load.

1f. The computer audible alarm (chime) intensity level was nearly equal to the intensity of the ambient s'ound level. (Cateogory 1) o PPScL will obtain a new chime with adequate intensity.

o The modification will be complete prior to fuel load.

lg., The unfinished control room floorcould have contributed to erroneous sound 'level readings, therefore, the sound levels should be reviewed when the control room construction is- completed. (Category 1)

A control room survey will be taken near the time of fuel loading. Since this is a two unit control room, a final

. survey can not be done until both units are completed.

Essentially, long term item, but a survey will be taken within a few weeks of fuel load to assure that the interim confi'guration does not result in an unacceptable noise level.

2

I SECTION 2 CONTROLS 2a. Items (1) and (2) control used for "open/close" functions are- not consistent on position indications. Some controls have "open" on the left and "close" on the ~ri ht; others are reversed. (Category 1)

The control convention for SSES is established by control movement, not by close/open label position. This in agreement, with NUREG/CR-1580 which states the ON function should have a control action to the right and OFF function should have control action to the left.

For other plants, the terminology CLOSE/TRIP has been applied.

There is no inherent advantage to changing the word OPEN to TRIP ~

All PPSL plants are consistent in the use of CLOSE/OPEN terminology for both breaker and valves.

It should be noted that any reversing of control movement would create an inconsistent indicator lamp convention. Currently, indicator lamps (yellow/red) have a consistent left/right orientation for controls.

No action required.

2.a.3 HX Level Control R604B (Baily Controller) has "open" on the right; while other Baily Controllers have "open" on the "left".

The same deficiency applies to other controls with similar functions, e.g., START-STOP, PAST-SLOW, AUTO-MANUAL.

There appears to be only one group of incorrect controllers.

(OPEN/CLOSE convention) A review of the board will be made and all controllers converted to the proper left/right convention Start-Stop, Fast/Slow, Auto-manual have been reviewed and found to be consistent.

o This modification will be complete prior to fuel load.

2b. Many controls lack position markings. (Category 1) o A review of all boards will be made and all applicable controls will have position markings.

o This modification will be completed prior to fuel load.

2c. The Bailey Type Controls are not clearly direct-acting or reverse acting, e.g., 100%%d open versus 100d%%d closed. (Category 1) o All applicable controllers will have consistent demand indication.

It will become the plant convention that 100%%d will be full open demand on valves, dampers, etc. and O%%d will be full

" 3-

I l, IJ I

closed demand. Any controllers not now conforming will be changed.

o The modification will be complete prior to fuel load.

2d. Many controls lack function identification: (Category 2) o A review of the boards will be made to find controls which are lacking functional labeling. (This was done in GP/PPM report) and all applicable controls will have appropriate labeling.

o The modification will be complete prior to fuel load.

2e. On Panel 1C651 (Recirculation,.Rx water) several rotary control switches have the control open position labeled "A/Open". As far as could be determined, the position is simply "open". (Category 3) o The operation of these controls will be reviewed and the labels will be revised,to properly show the control .function.

o To be included as part of NR 700 long term review.

2f. One J-handle control switch location and type accidental activation (Panel 1C651) Generator makes it subject to and Transformer, Gen.

Syn. Bkr. 230 kV). (Category 1) o PAL will provide a means to prevent accidental activation of Gen and Transf Syn Bkr.

o This modification will be complete prior to fuel load.

2g. There is an excessive number of key operated rotary control switches.

Many of these switches have no key inserted, and keys which are available are not coded to the switch which they will fit (Panel 1C601, ECCS Bench board).

Also there are two key operated switches on an auxiliary panel with no keys (OC673, Off Gas Recombiner - Absorber; cross connect).

(Category 1)

We do not feel there is an excessive number of keylock switches.

Their use is based on design practices to provide for a deliberate action on the part of the operator to change the position of the associated control.

Keys for control switches will not normally be located in the switch. One set of keys will be maintaine'd in the control room and another in the Shift Supervisor's office.

The control room keys will be located in a box .located within the inner ring of panels (possibly mounted on the Unit Monitoring

I Console) for easy but controlled access by control room operators.

Both sets of keys will be governed by a key control procedure. This procedure will limit who has access to the keys and call for peiiodic accounting for the keys.

Keys and switches will be coded to provide easy identification between keys and switches. The key switch combinations will be grouped in a logical systemized basis ('i.e. if you have 4 key lock switches on a panel, they will all use the same key-lock combination.

o This will be accomplished prior to fuel load.

2h. Some functional groups of controls which have separate panels for Division gl and,Division jj2, or channel A and B, have the paired groups as "mirror image" layouts. However this is not consistent for all paired groups'Category 2)

Example: 1C601, RHR Division I and RHR Divison 1I.

o There is no conclusive data on this topic in the available human engineering literature. A research effort directed toward the resolution of the mirror-imaging question will be conducted during the long-term review period. It should be noted that RHR Division I includes more switches than RHR Division II and thus they are not full mirror images. Mimics will be cleaned up to show flow paths more clearly before fuel load (see 61 in NRC Report). Resolution of item 61 should eliminate confusion in this area.

o Research on this subject will be done as part of our NR700 long term .review.

2i. Indication lights associated with control switches (most bench hoard) cannot, be tested. Lamps are single filament and lamp failure, cannot be 'determined easily. (Category 2) o In the present control room, the lighting configuration can be broken down as follows:

  • 1368 annunciators for Unit 1 and common. They are all testable.

="430 Special Indicator Light segments on panels. These special panel segments include.

Turbine Test (1C668) Testable Pull Core Display (1C651) Testable Turbine Control (1C651) Testable Bypass Value Control (1C651) Testable Rod Selection 6 Action Control (1C651) Not Testable

i I

+s ~

Status SRM/IRM (1C651) Not Testable RCIC Status Display (1C601 SEC 17B) Testable Core Spray Status Display (1C601 Sec 18B) Testable RHR Status Display (1C601 SEC 18B) Testable ADS St'atus Display (1C601 SEC 19B) Testable Core Spray Status Display (1C601 21B) Testable RHR Status Display (1C601 Sec 21B) Testable HPCI Status Display (1C601 SEC 22B) Testable This r'epresents 298 testable out of 430

<<719 .lights or light pairs on the benchboard section of the inner ring panels. These are not testable.

125 of these light/light pairs require periodic testing as part of the pump arid valve test program. This includes the major safety related pumps and critical valves related to these systems.

26 of these light/light pairs on 1C668 are on key locked switches which must be deliverated actuated or paired pumps which are routinely alternated (i.e. turbine EHC pumps).

.28 of these light/light pairs'n 1C601 are on key locked switches which must be deliberated actuated to change lamp state.

41 of 'these light pairs on 1C653 are breaker position lights which can be easily verified on CRT on'he panel.

Based on these figures there are 2517 lamp or lamp pairs in the control room. .1666 are testable with another 220 to be routinely tested. This means 75/ are covered by lamp test or testing.

SSES uses long life bulbs (7000 hr. AC, 3500 hr. for DC based on laboratory tests, the theoretical life is 20,000 hr. AC, 10,000 hr DC) which should help assure that the operator will have all indicator lights available to him.

Each operating .shift will walk down all inner ring panels to assure that every indicator pair shows at'east one light. Replacement bulbs, which have been burned in to reduce infant mortality, will be provided to the operator.

Additionally, as part of its long term review, PAL will look into alternative solutions (like push to test, sockets) for the remaining non-testable lamps and will implement the most practical solution.

- 6-

I'l H i l'

N

o Prior to fuel load procuedures will be in place to (1) assure operators review lamp indicators once per shift and (2) assure proper operation of indicating lamps during pump and valve testing.

Pretested replacement bulbs will be available to the operator. A more permanent solution (i.e. lamp test facilities) will be pursued as part of the long term review.

2j. There is no coding to readily distinguish between controls for pumps, valves, and throttling valves. (Category 2) o To enable, the operator to distinguish controls more readily a unique coding will be used for; (1) Throttling valves switches (2) Other valve switches (3) Motor switches o This modification will be completed prior to fuel load.

2k. Several spring loaded rotary control switches which must be held in the actuating position are fatiguing to the operators. (Category

1) Example:

1C601, RCC Benchboard, Test line CTI VLV F024B o Larger integral handles for spring loaded rotary control switches will be provided.

o This. modificationh will, be done prior to fuel load.

SECTION 3 CONTROL RELATIONSHIPS 3a. Some system controls are mirror-image.

I (Category 2)

Examples:

(1) Division 1 and 2 safety relief valve switches (Panel 19C)

The SRVs are arranged in 3 columns (vertical) on the control board. They are identified by sequ'ential letters A thru R (No I,O,Q). There is no mirror imaging present. ADS pushbuttons resemble mirror-image but are operated by both .hands simultaneously.

(See item 3b) o No action required.

(2) Vertical meters for Uni;t 1 and Unit 2 (Panel 93B).

(Mirror-imaged vertical meters)

The, meters on Panel 93B are not mirror-imaged. Documentation was provided to show this at the Feb. 3, 1981 meeting between PPSL and NRC. (See J-800, Sht. 5, Rev. 0)

I' No action required.

3b. Some relations'hips are not direct. (Category 3)

Examples:

Automatic Depressurization System (ADS) push buttons A,B,C,D do not correspond to the SRVs below (Panel 19C).

There is no direct relationship b'etween the A,B,C,D pushbuttons and SRV A,B,C,D. Actuation of ADS results in operation of six SRVs (G,J,K,L)M,N).

o Color padding will be provided in this section to remove any confusion concerning ADS (see Figure 2 PAL/GP Report).

o This item will be addressed as part of NR 700 long term review.

3c. The SRV switches on Panel 19C are not, functionally grouped. (Category 3) o Since six of the SRVs are used for ADS, color padding will be used to delineate these valves (see Figure 2 in PPM/GP preliminary report).

o To be addressed as part of NR 700 long term review.

3d. There is insufficient demarcation. (Category 3) o The control panels will be reviewed for additional demarcation needs and it will be added where necessary.

o To be addressed as part of NR 700 long term review.

SECTION 4 GENERAL DISPLAYS 4a. There are long strings (5 to 10) of scale indicators with no demarca-tion or group labeling. (Category 1) o Visual demarcation or global labeling will be provided as applicable.

o This modification will be completed prior to fuel load.

4b. Several meters have scales with non-standard increments, or with no units indication (e.g., amps, volts,...) (Category 1)

o For the examples cited missing scales will be provided; non-standard scales will be replaced where applicable.

o The modification will be completed prior to fuel load.

4c. Adjacent meters for channel A 6 B do not have the same scale (Panel OC 653 Plant Operatin'g Bench Board, Meteorological and Water Containment Services). (Category 1) o The, same scales for appropriate meters will be provided.

o This modification will be completed prior to fuel load.

4d. Several sets of indicator lights not associated with controls are located on panel OC673, Off Gas Recombiner - Adsorber. The convention on all other boards of the control room is to use this type of indicator for contxol position (or for control and related valve/breaker position). (Category 2) o A review of the operation of this panel revealed that based on our design convention one set is being properly used, but the other should be white lights instead of red.

o The modification will be completed prior to fuel load.

4e. The HX Level Demand Signal (RX604-Bl) display reads out actual values rather than demand values (Panel 1C601, Reactor Core Cooling Benchboard). (Category 1)

The controllers should read out percent demand signal on their integral display (horizontal meter) for immediate feedback to the operator. As for actual values of the process parameter being controlled, there is an associated display on each controller.

These displays provide a reading of parameter being measured (i.e.

temperature for temperature control, bias for master controller).

For every controller, the operator can bind the appropriate parameter displayed close to each controller.

o No action required.

4f. The DCS configuration mimic on the Standby Information Panel (1C652) is a very useful tool for determining DCS status. This usefulness is diminished because the green indicator lights (not following plant convention) representing TRU status are difficult to discriminate whether they are actually on or are being illuminated by the ceiling lights. (Categoxy 3) o PPGL will investigate the availability of LED's which have higher light intensity and will comply with the proper color convention.

LI H

o To be addressed as part of NR 700 long term review.

SECTION 5 CONTROL/DISPLAY ARRANGEMENT 5a. The Reactor Feed Pump Turbine A,B,C cooler discharge Hi temperature annunciator is located on Panel AR-20; the controls are located on Panel AR-23 (approximately nine feet away). (Category 2) o Move RFPT A,B,C cooler discharge Hi temp alarms from panel AR-20 (RFP Section to AR-23 (Turbine Building closed cooling water Section).

o The modification will be completed prior to fuel load.

5b. Controls and displays for Generator H2. Gen. H2 CLR Temp, TIC-0955 and 32 to Gen. Temp. TI-0929 are located on Panel AR-23 while the annunciators are on Panel AR-26 which is approximately 10 feet away. (Category 3) o Move Gen H2 Hi Temp alarm from Panel AR-26 (Generator Section) to AR-23 (Turbine Building Closed Cooling Water Section).

o To be addressed as part of NR 700 long term review.

5c. The Manual Isolation Switches (1C651 Panel g7) have no associated display on the benchboard to show that isolation has occurred. An annunciator message and valve displays are provided on the ECCS Panel which is approximately 20 feet away. (1C601), Panel 19 and 20). (Cate'gory 1) o When the operator pushes the buttons to bring about a group 1 isolation, there is indication for all the valves actuated an panels in the control room. Procedurally, the operator will be told where to find (by panel etc.) all the necessary indicators.

All indicators will be uniquely identified for quick operator observation.

The operator can observe the MSIV closure from a CRT near the pushbuttons. Expanding this display to include all valves was considered, but rejected for the following reasons. The current display is in the DCS system. No single DCS display could handle the 85 digital inputs required, therefore you would need at least two displays.'resently, the 85 spare digital slots needed are also not available. This would mean adding new computer hardware to provide the additional capacity.

This new hardware would necessitate additional changes to other computer hardware to provide the redundancy that currently exists in the DCS system. As a result, this option becomes very costly and complex. A PMS display could be generated 10 "

(sufficient capacity now exists for a sin le dis la e e re undancy of .DCS and thus has a decreased To provide the Susquehanna Operator with a sin le oint a ety Parameter Display System proposed in NUREG 0696.

Display(s) of containment isolation will be in th d o u r fue il l SPDS is a dated re q u irement.

oad until th he implementation of a workin The time span from i g SPDS system will be probabl p y be b short enough to make using a SPDS isplay for containment isolation a viable solution'"

Prior to fuel lo ad, the indicators for valve 'sit uniquely coded and th e proce d ures for veri fying the indicator location will i bee in place. The SPDS display to back this up x e a dressed as a long term solution.

5d. here The is no annunciator messa sagee too draw operator attention when turb ine b ypass valves open. 0 p erator ra or must mu detect the change from o re o the legend lights on benchboard. (Category 1)

NOTE: P rocedure No. ON-43-001 Step ep 3 . 3 , requires bypass valve positron verification as part of verification o veri ication of o reactor o A PMS computer alarm and a DCS generated Alarm Initiated isp ay (AID) aid will be develoopeed too provide the operator with turb ine b ypass information.

o The modification ion will be completed prior to fuel load.

5e. The backup information of the Rx water clean p y po isplays, is located some ten feet f away from the controls (on Standb an y Information Panel). The same a Rod Control System, s em, as t backu information is about 15 feet thee backup ay. ( ategory 2)

The standb y information panel has never been a re uire a as provi e by GE on PAL re q ue st to provide rma x,on for redundant information sel or selected information provided on the UOB.

Mhen the computer system is in its final form a UPS (U i 'bl Po l an operational reliability for S pply),

wi l result. Re'liability will i be calcul te p and shall a pp ly whenever the reactor is above co ld s h ut d own status ooperational unavailability will be 11

Downtime Operational Unavailability = Operating Time where:

Downtime is any length of time the DCS system cannot perform its intended function when the reactor is above cold, shutdown status because of any of the following:

degraded circuits, equipment, power supplies or instrumentation (this shall .not include truly redundant equipment such as core thermocouples or computer system components).

unreliable performance due to lack of adequate sensor data; and o scheduled outages to perform preventative maintenance or instrumentation, equipment, power supplies or sensors.

Operating time, is the length of time the reactor is above cold shutdown status.

With the procedures that will be available, and the expected limited operational unavailability, the operators will have little use for the SIP. But shown that it if it becomes necessary simulator experience has can be used by a single operator.

The design intent for the ACR is for operation by one operator per unit. In fact, during two unit operation there will .be a third licensed operator in the control room. The extra operator could reduce the work load on a single operator during these off-normal conditions'Note, there will be two operators in the control room during single unit operation.)

In conclusion, the control room is designed to be operated by a single operator utilizing the computer displays, controls, and indicators on the various control boards. As with all off-normal conditions, the operator will be trained to operate using the SIP, but this is not a significant situation for him to handle.

o No action required (see 7J).

5f. Rod withdraw and rod insert push button switches have the same appearance as associated indicators. This might create selection errors. (Category 1) o A distinct coding will be used to differentiate insert from withdraw to assure the operator will recognize the proper function.

"12-

o The modification will be completed prior to fuel load.

5g. The turbine-generator control panel does not have an indication of automatic operation of EBOP-HS-1936 or ESOP-HS-10182. All other controls on this panel have auto operation indication. (Category 2) o The convention in the control room is to provide .a white auto light indicator with pushbutton switches. For all violations of this convention we will add white auto lights for those switches.

o The modification will be complete prior to fuel load.

5h. The Manual Steam Isolation and RCIC Turbine Trip push buttons are not recessed (or protected) to avoid accidental activation, subpanel 17C. (Category 1) o PAL will provide extensions for the bezels to prevent acci-dential activation.

o This modification will be completed prior to fuel load.

5i. The containment pressure and the containment temperature meters are not adjacent, also the suppression chamber pressure and the suppression chamber temperature meters are not adjacent, subpanel 20B. (Category 2) o PAL has directed Bechtel to modify this section for post TMI changes. The NRC concern will be addressed in the final configuration.

o The modification will be completed prior to fuel load.

5j. The controls for HV 5713, HV 5714, HV 5711 are used together but are not adjacent. Controls for HV 5703, HV 5704, and HV 5705 are used together but are not adjacent. Both sets of controls are not lined up for sequence of use, subpanel 20C. (Category 3)

Separation concerns will result in movement of these switches.

Final arrangements should reflect Figure 4 of the PL/GP Human Factors Report.

To be addressed as part of NR 700 Long Term Review.

5k. Containment or suppression pool chamber pressure vertical scale does not present information in the form or with the precision that the operator needs. (Scale presently reads 0 to 20 psia--operator needs scale to read 0 to + 15 psig), subpanel 20B. (Category 1) 13 "

o PPM had directed Bechtel to make changes to this section to incorporate Post-TMI changes. Included in these revisions are multiple meters with various meter ranges which will provide the proper information to the operator.

o The modification will be, completed prior to fuel load.

51. RX VESSEL LVL vertical scale and SAFE GUARD PRESSURE chart recorders are not adjacent, subpanel 21B. (Category 3) o The "safeguard pressure" chart. recorder on J-802 Sht. 7 is labeled RX LVI>>Press. Both scales are on the same recorder.

These recorders have indicating scales on them.

o No action required.

5m. The displays on two sections of panel 1C601 are placed differently (Section 22B versus Section 17B). There is no separation between the vertical meters on Section 22B. (Category 3) o PP8rL will study enhancements to improve information flow 'to the operator. The instruments were laid out to coincide with procedures. While both systems are steam turbines there is nothing to indicate that they will be operated and monitored exactly the same.

o To be addressed as part'f NR 700 Long Term Review 5n. For the control rod drive panel, the NMS (IRM, APRM) display is on CRT. If the CRT display is not available the operator must use the indication on the stand-by information panel 10 foot away. (Category 3)

This item is essentially the same as 5e and the, same discussion applies.

o No action planned.

5o. There are two controls labeled Normal/Inop on, the Unit Operating Benchboard. It is difficult to determine their function and there is no associated display. (Category 3) o The function of the controls will be clearly identified by appropriate labeling so the operator understands its use.

o To be addressed as part of NR 700 Iong Term Review.

5p. Reactor level chart recorder and reactor pressure chart recorder are not adjacent. The two RHR chart recorders are not adjacent, subpanel 18B. (Category 3) o J802 Sht.' shows that R vessel level and reactor pressure are on the same recorder. xThese recorders have indicating scales on them.

o No action required.

SECTION 6 LABELING AND CODING In general labeling of components on the'oards is not consistent with the nomenclature used on the drawings.

6a. Nomenclautre for Division 1 and Division 2 is not used consistently, e.g., (Category 1) o Standard abbreviations approved by Engr. will be obtained and appropriate labels applied.

o The modifications will be completed prior to fuel load.

6b. Incorrect spelling, e.g., (Category 1) o New labels, with correct spelling will be provided, for all examples.

o The modifications will be completed prior to fuel load.

6c. Hissing labels, e.g., (Category 1) o Missing labels, where appropriate, on "'displays and controls will be provided.

o The modifications will be completed prior to fuel load.

6d. Bailey controllers are not labeled (Panel 18B). (Category 1) o Any controller which through a construction deficiency was not labeled at the time of the NRC review will be labeled.

o The modifications will be completed prior to fuel load.

6e. The meaning of the red and blue lines on chart recorder are defined but the green line is not (Panel 20B). (Category 3) o A label defining green as a spare will be applied to any recorder not using the green line.

o To be addressed as part of NR 700 Long Term Review.

15

V h H

6f. (1) Unconventional labeling, e.g., (Category 1)

Bailey displays 'are labeled above while vertical scale displays are labeled below (Panel 18B)

Bailey controllers aie labeled above, the corresponding indication is labeled below which is'our design convention.

are labeled as controllers even though they have Bailey'ontrollers indicators built in.

o No action required.

6f. (6) Unconvential labeling, e.g. (Category 1)

Because the label of the label position, it isrefers.

not clear to which indicator INBOARD VALVE E32-F002B (Back panel 1C644) o By use of proper labeling, color padding etc., the confusion will be cleared -up.

o The modification will be completed prior to fuel load.

6f. (2),(3),(5),(7) Unconventional labeling, e.g. (Category 1)

Each item will be changed to comply with NRC recommendation.

The modification will be completed prior to fuel load.

6g.(1) Inconsistent labeling, e.g., (Category 1)

A,B,C,D Automatic Depression Switch arm pushbutton does not refer to the A,B,C,D Safety Relief Valve switches below.

(Panel 19C).

There is no relation between .A,B,C,D, ADS switch arm pushbutton and A,B,C,D Safety Relief Valve switches below. See Item (3b).

No action required.

6g.(2) Inconsistent labeling (Category 1)

(2) Use of PSIA, PSI, and PSIG (Panel 42B).

NPE will instruct Bechtel to provide replacement meters on this panel which will have the- proper scale. Any additional changes to the control room will reflect the proper nomen-clature.

The modification will be completed prior to fuel load.

16-

6h. Excessive labeling, e.g., all 16 Safety Relief Switches start thei'r labeling with "Safety Relief ...." (Category 3) o We will provide new labels to enhance this section.

o To be addressed as part of NR 700 Long Term Review.

6i. Labels over recorders are too high to read, (Category 3).

o PAL will review recorder labels and make necessary changes to enhance readability.

o To be addressed as part of NR 700 Long Term Review.

6j . On -OC 673, Off Gas Re'combiner-Adsorber, the 2 cross-connect, controls have inconsistent/inaccurate identification labels.

o Cross-connect to adsorbers 1/2 HV"17190 (Ad.)

o Cross-connect to absorbers HV-27190 (Ab.)

Also, the mimic has some directional arrows and end point labels missing. Also, the mimic color (purple/violet) has an unknown meaning and does not appear to be part of mimic color convention used in the control room. (Category 1)

The mimic color is correct according to the PPSL color convention.

The justifying information was provided at the Feb. 3, 1981 meeting between PPSL and NRC.

o Label and mimic changes will be made to correct confusion.'

The modification will be completed prior to fuel load.

6k. The demarcation is not complete; i.e.: (Category 3)

I o Demarcation, using color padding,'ill be 'implemented. Refer to PAL/GP Preliminary Human Factors Engineering Recommendations for feed pump and containment atmosphere control changes.

P Demarcation through apron panel and annunciators will be studied further.

o To be addressed as part of NR 700 Long Term Review.

61. The Mimics are not complete; e.g.: (Category l)

RHR mimics will be modified using shape coding to differentiate 3 main flow paths. Starting/Ending labels will be added to mimics.

The modifications will be completed prior to fuel load.

17

SECTION 7 COMPUTERS 7a. Color convention used on CRT displays is different from the color convention used for control indicators on the bench boards. Also differs from benchboard mimic colors where they exist. (Category 2)

The CRT and bench board color conventions are different, however, each is consistent within its'elf. It is our intent that the operator thoroughly understand the'olor coding conventions.

Changing 'the color conventions could have a very undersirable effect. For example, using red and yellow for dynamic valve indication would be a counter productive use of the red color on CRT's since it currently has been restricted to displaying only abnormal situations.

By using red to also indicate "normal" valve status, ambiguity would arise and the effectiveness of the visual que would be diminished.

Maintaining the current limited use of color is important to the design philosophy of our control room.

o No action required.

7b. Color discrimination on CRTs is difficult in some instances, particularly between white and cyan and between green and yellow. Difficulty is compounded where a screen glare problem exists. (Category 2) o PI will implement a periodic CRT maintenance program for convergence, color alignment and contrast to insure a high CRT display quality. Additionally it should be pointed out that all licensed operator candidates must pass a color blindness examination. The test is the Ishahari Color Plate test for Iso-chromatics. It tests for all colors which would be found in the control'oom.

o This will be completed prior to fuel load.

7c. Glare is a problem on CRT screens as a result of ambient illumination, both direct and reflected. One CRT (1C651) has a "non-glare" screen which alleviates the glare problem, but introduces some fuzziness to the displayed information. Glare on CRT (1, 3, and 8 plus 'the -2 on UMC) display affects readability. (Category 2)

All new CRT's will have an integral glare screen which does not reduce readability yet does reduce glare. As old CRTs need replacement the new ones will be provided. The new purchase spec is now being used. All CRTs will be replaced (or interim glare reduction implemented) prior to fuel load.

The changes will be completed prior to fuel load.

v 7d. There is no correlation between the formats which appear on the CRTs (e.g., 1A) and the associ'ated system select control positions which are labeled in abbreviated words with no numbers. (Category 2) o The formats can be easily updated to correlate with the system select positions. Format 1A would have an identifier of

'RWC-A'nd not 1A. This code would be included on line .4/48 of the format and as the format ID for Video Display Services.

The following codes will be used for the remaining DCS systems:

1 - RWC 2 - COND 3 " FW

.4 - RECIRC 5- CRD 6 "NMS 7 - MS 8 -'URB 9- GEN o The modifications will be complete prior to fuel load.

7e. The CRT system select controls have a "master" position which enables the SRO to display the appropriate format for each system on the Unit Operating Bench Board (UOB) from a single location in the event of an emergency. If the switch has been left in other than "Master" position, remote mastering for that CRT cannot be accomplished, and there is no indicator to tell the SRO that mastering was not accomplished. (It is possible that the incorrect format may be on the screen). (Category 3) o The DCS system retains the last selected position of the

'FORMAT SELECT'otary switch at all times. If that switch is not in the 'MASTER'osition and a DCS format is currently on display, the system will be modified to automatically display the phrase 'NOT MASTER'n line 4/48 of the respective CRT between the format ID and the failed CRT 8 list.

o To be addressed as part of NR 700 Iong Term Review.

7f. Although the controls for the DCS CRTs are proximally located to the CRT, there is no functional label to indicate that they are CRT controls. (Category 2) o A CRT controls label, identifying its related CRT fj, will be provided.

o The modifications will be completed prior to fuel load.

7g. The CRT "System Select" for "Format Select" controls are in top-to-bottom order; the associated push-buttons are in left-to-right order, but with "Format Select Enable" on the left, and "System Group Menu" on the right, which is a reversal of convention. (Category 3) o The lens legend,and functions of the FORMAT CHANGE, ENABLE and SYSTEM GROUP MENU buttons will be reversed.

o To be addressed as part of NR 700 Long Term Review.

7h. Th'e two CRT screens at the Plant Monitoring Console (OC 683) are satisfactorily recessed in the console and angled up toward the seated operator's eye reference point. However, when both Units gl and N2 axe being monitored, the single keyboard will be centered between the two CRTs, causing 'a poor viewing angle (left/right) for the seated operator. The viewing angle for a standing operator is poor because of the deeply recessed CRTs. (Category 3)

This entire panel is designed as a sit down panel and is properly used by a seated operator. The operator can easily position himself in front of either CRT. Additionally the keyboard is movable to allow the operator to move for him.

it to whatever position is most comfortable o No action required.

7i. Keyboards used with CRTs have two sets of number keys, one in the standard QWERTY keyboard and a separate 10-digit set. The reason for this is not clear since, either set can be used apparently, (1C 651; 1C 684; OC 683). (Category 3)

Two keyboards are provided for different data entry needs.

The QWERTY keyboard is optimal (fewer errors) for alphaumeric data input. Removing the numeric keys from the QWERTY keyboard would violate industry convention (NUREG/ER - 1580 p. CON-78).

The 10-digit KEYBOARD is optimal for numeric input. Arrangement corresponds to calculator style keyboards having the lowest error rate and fastest data entry speed. (McCormick, 1976).

The numbers on the QWERTY Keyboard and the 10-Digit Keyboard have identical meaning 'to the computer system.

o No action required.

7j . There are no operator procedures for operator action following total loss of the Display Control System (DCS) or the Performance Monitoring System (PMS). (Category 1)

"20-

o Procedures will be available to the operator to describe action to be taken in the remote case of total loss of the DCS system or PMS system. The operators will train for these contingencies on the simulator using these procedures.

o The procedures will be available prior to fuel load.

7k. Poor organization of point ID on the PMS. (This could be improved by grouping of systems/sub-systems). (Category 1)

A PMS service, the Point Dictionary Service, currently exists to enable an operator to determine the point, ID for a monitored plant dynamic process. The service consists of 4 pages of 2-character group codes which uniquely identify the first 2 characters of the desired point ID. The group codes are arranged by major plant system (i.e.; nuclear turbine, condensate, feedwater, etc. systems) with appropriate subdivisions. (See the example detailed below)

ND - Control Rod Drive NR - Recirculation System NL - Reactor Water Cleanup NV - Reactor Vessel NC - Reactor Containment NM - Monitoring (Flux, Power)

NA - Radiation NW - Rod Worth Minimizer NH - Residual Heat Removal NS - Core Spray Following determination of the 2 character group code, the third character of the point ID is ascertained by identifying the desired physical quantity and relating that quantity to the summary listed below:

P - Pressure T - Temperature V - Vibration I - Ievel F - Flow S - Speed C - Conductivity/Chemistry E - Voltage I -- Current J Power U - Electrical Multivariable (Vars. Va. Watt-Hrs.)

R - Radiation 0 Flux Ievels Z,Y - Status/Position (Contact Input Not Covered By Q or H, Analog Position Indicator) 21

Ci Q

- Trip/Scram/Block (Sequence of Events Inputs)

H - Status/Po'sition (Contact Inputs of Hand Switches and Pushbutton A -- Analyses and Calculations (Pseudo and Calculated Analogs)

D - Digital or Status Computation (PSEUDO Digital Inputs) 3-9 " Other Miscellaneous Indications The remaining 2 characters of the desired point ID can not be determined by paging through the service summary displays, however sufficient data now exists to the service user to allow the point dictionary service to display the desired point ID. By entering only the 2-character group code, the system will respond with an alpha-numerically sorted list of all system point ID's and their associated 24 character description beginning with the first entry of the requested 2-character group code.

The operator can now page through sequential summary pages until the desired point ID is obtained.

In addition to this PMS service, a controlled hardcopy list of all system point ID's and their associated descriptions will be maintained within the control room.

o No action required.

71. The CRT graphic symbols are hard to identify beyond five feet.,

Component symbols are too small. (Category 3)

The PPGL des'ign basis for viewing distance regarding CRT displays is twenty-eight inches. NUREG 1580 does not stipulate maximum viewing distance for the standing operator.

o Currently two different valve symbols are used. The larger "squared" valve symbol will be the only one used 'for gate, ball, or globe valve applications. The smaller "rounded" itwill symbol be phased out as existing formats are revised, since is harder to distinguish filled/not-filled (close/open).

o Will be addressed as part of NR 700 Long Term Review.

7m. Information density of the CRT display formats (two examples) exceed 30/ of available display area. (Category 3)

Human engineering literature (Danchak, 1976) concludes that no more than 25/ of the CRT screen should contain data (numbers, as opposed to symbology). No CRT displays have more than 25/ of the screen com osed of data. This topic is not addressed in NUREG/CR-1580 (reference pp. VD-45 to VD-57). To calculate total effective density values, the arrangement of the information as well as the nature of the inforamtion should be considered. The ability of operators to "chunk" information far outweighs a physical hardware density standard. The two examples cited by NRC 'fall into the "chunked" information category.

o No action required.

-22"

V

~ g ~

SECTION 8 CONTROL ROOM WORKSPACE AND 'EVIRONMENT 8 (a) Illumination Illumination levels found at the base of the vertical panels ranged between 28 and 54 foot candles. Illumination levels at the annunciator panels, with the annunciator lights "off" ranged between 20.7 and 59 foot candles.

These levels of illumination are substandard (30 foot candles at the reading surface), however, the annunciators are not referred to unless they are illuminated. The only information that needs to be read are the matrix labeling (found in the simulator, but not yet installed

.in the control room) and the panel descriptions. (Category 3) 1580 does not explicate the methodology for spot illuminance readings'he IES Handbook Utilizes an averaging method.

When the figures cited are averaged (28 and 54) they yield 41 ft. candles which falls within the recommended guidelines of 1580 (30 ft. candles min.). Readability is measured by luminance, not illuminance, and our measurements indicate good luminance levels.

No action required.

8.2.1 CRT glare were of two types. The first relates to indirect specular glare of the polished glass surfaces of some CRTs.

The other relates to the interference of direct light of overhead fluorescent fixtures on the frosted (diffused) surface of other CRTs. (Category 2) item 7C addresses this problem.

No additional action required.

8.2.3 Indirect specular glare on all indicators and meters with plexiglass faces. (Category 3) o PAL will experiment with various coatings and/or replacement lenses to reduce the glare on all indicators and meters.

o To be addressed as part of NR 700 Long Term Review.

8.2.4 Indirect specular glare from polished surfaces of pushbutton controls which interferes with readibility. (Category 3)

At 30 ft.-candles, .no impairment of readability has been experienced or observed due to specular glare off of pushbutton switches. The PAL review of the present situation does not

show this to be a problem. PPGL will relook at the potential problem once the control room is painted and otherwise brought up to a more complete status.

To be completed as part of NR 700 long term review.

Indirect specular glare from diffused surfaces of mimics which interferes with readability of inforamtion. (Example: Yellow mimics with white letters). (Category 3) o The readability problem will be alleviated by use of appropriate letter/mimic colors.

o Will be addressed in NR 700 Long Term Review.

Indirect specular glare of chrome key operated control switches causes unnecessary attention, which is distracting and takes away from the importance of labeling information. This is a generic problem with all shiny metalic surfaces. (Category 3)

The color of the control should have a high contrast with the panel background. Prior to changing any control colors, consideration shall be given to anticipated ambient lighting levels.

At the 30 foot candles illumination level, no specular glare was observed off of the chrome switches. Readability criteria in terms of luminance ratio and luminance-levels were adequately met.

No action required.

Direct glare caused by first and second tiered lighting (lower two tiers of ceiling lights) contrasted against dark (low luminous intensity annunciators in foreground. (Category 3)

PAL feels that the manner in which the control room is painted will effect these items. Xn any event, the luminance contrast ratio is conformed to.

No action required.

Direct glare caused by second ti'er from bottom lighting fixtures parallel to the line of sight is within 45 of the horizontal floor plane and within the normal field of vision to read information, i.e., 442-462 foot lamberts. (Category 3)

Control Room painting and lighting is being investigated to reduce effect of glare on readability of annunciator legends.

Baffles or appropriate measures will be looked into if necessary.

4 o Will be addressed as part of NR 700 Iong Term Review.

8.2.9 Frosted glass and taped information on chart recorder makes it, difficult to read chart or determine trends. Suppanel 18B.

(Category 3)

PP&L will look into replacement of .frosted glass on chart recorders. The nature of the taped inforamtion will be studied and 'either removed or placed on permanent labels.

Will be addressed as part of NR 700 Long Term Review.

8(b) Noise Sound level was measured at six locati'ons. The average level was 61 dbA. Xt is recommended that a noise .survey be carried out prior to operation to establish, the background noise and .the level of the alarms'See Section 1 e and f). (Category 1) o Another sound level survey will be taken prior to fuel load.

An additional survey will be made when the control .room is totally completed.

8c. Communications (Category 1)

1. There is no page loudspeaker at the remote shutdown panel.

o The plant staff will verify that the loudspeaker for the remote shutdown panel (which is on the drawings but not installed at the time of the NRC visit) is in place and operating.

The verification will be completed prior to fuel load.

8c. (2) The masks used will interfere with the voice communications.

o 'AL will obtain equipment to provide adequate voice F

o 'he communications when masks are used.

equipment will be obtained prior to fuel load.

8d. Maintenance (Category 1)

(1) Status display lights do not have lamp test.

(2) Failed lamps could result in unknown valve position and pump status.

This is addressed in 2i.

o No action required.

RTJ:DEB 13"A

'0 E

~ r.