ML20137N456

Vol 1 of Crdr:Summary Rept

ML20137N456
Person / Time
Site:	Beaver Valley
Issue date:	12/02/1985
From:	DUQUESNE LIGHT CO.
To:
Shared Package
ML20137N440	List: ML20137N434 ML20137N456 ML20137N496 ML20137N514
References
NUDOCS 8512040124
Download: ML20137N456 (229)

Text

m wem . - e _m._ a1r y ,-mw ,i , _>- y m,

~a W?,4

., ef3 _2m_ W~4 #m;weupgj~i p..m w 2,~

x. m, .

m: ,

.m m ,f M @ .m.

4 ..

w w.- .. w: , - rs:

JW

^~N N, -W . 'i w -

'h:O;h W-}~jM Yfh'~ ' 9 Q D ,'w r ' j V; l. l h, r Gy?.sWW,,

v ua W M.vi whg 'dH o  ? - W h) n.m .. , . s W 's f jl Q, p ' "' % g W ;;:. * } M.,' s%..;}

C >

Q - ,

4, +3~,5D[WT, RDG.g, ADOMLDESIGN

. .. w: , <y

,f $v.l', - ,- -

REVIEW

• ;'Dr a

,, ,  : .~

• O o%&h.

Q} 0 4.y f- t

,; y.;.49 .: . .

n ' q.q;g_

>  ;,un M m a

,, :I

': n; /- .

~ ., . ..

V

~, 61 W,L. .,~'t, .

w (e g:'~ ; tru

_- ,  : M. ,

94,J-n.m .s /: y 1, s 44-

~;; -- c

, om

@F 3b" .'

(i ey 5g 3 t- {,

• D

't gm' s s- v'w y [

s--

mm M c. p-# s s

Ag ; .f . . N.c _ -

< 3 >

r 5. p

%,lh ' -Y ,'- 4 f;, : l v

_ ,} ,. ' ~ ~

, em e a . ,, -w s ,

,, j .- m e.-

h , ~ m AA %; .hrm ,,

s *

2 4:. . ;. '~.i y a ~ % l %m 97 , *%:, q* %a..'.'gLg:p. & qw,O:V ., l

+., ..W.. ,-~y. g, 4 WM:l  ?

. r g?h,

,m .g, g _ -

. ..n' / n s . m p '4.1['^-g.,, ,.

r g

._ < ' +. . ~, >: r. % p g . ' -

^

'QJg' g

d +

y r-

' ; W:' y A i;{jjy 4,,'g'f[ fjj;p;f M'uf Q&@}

m~

a ;x _ m;  : # n

' , . r w . S,:

mv.m[l

. ~

l  ;;y : N:" V~

r p 7^3RM , \ y- .

+

~. 4

< - ;.% , NM,., @Q;$$ s mWeg m&  ;-c ri

@,b. -s,.,-:;4, . .+:

s -

.,v

s. 11

.j W

% QQ:w Q p.AN  ; ,~ Ntr s  ?? k, -' ?' .' -

m,' 's :: ';&. c. y: %,

.m -

-mn.m , .

_w mr r .z,

,c.

+

,^ '

gh ng Q;__

.py' W s e c s4 - - '

' % h '

i Q U,, "^~T.y w' f ' s', , :q:q-D~'r yQ .'>. 1 7,

,.s 4

• - ew y .. .,

L, 1-

, "'s _.

a c,

- .,,,f,+ m%

t

-'7' s. " ,

.ei

"n,O i ' '

4  % + t

~- ...

• O ^b ij .)h,; t m~'_.

7?

v) .

ylM ' ~ <  ;?-& L 3 '

y.p ah , o ' ,

• I4'

.g

+

M,A RW ' -.s Lij <

[

qnns.f. c-n < QM .

e

.i

~

. ,bg

+ ,, n

~ .

-w

, ,m an ~ [-

3

' 'O'

2 3 dg Q 4 .

, . - * # 'l er +

~jf _ : ) * .

• +< M '( -

$[_,

w .ce ,7 p

..f. .

\

n . ~ . ,

^ dG

.t z._ , , . ,

,.c-._,

,.s,,wf, ' m\ 's . =  ;. 4 ~.%)5, m_ v, ~n. . ,

,.,?'

m; .

t ,, i

+

r T; ,t

',w ' 'w g , 4.e -

w m yet

'; q . g

, ~. -

, y _

Q. %;w ay. y* s ...y

'ta  %

ammy

' ~

' ^

s

,t ,- .

, LL .sn p.

m, .w.

<W v a Jg ~. .,.v@#m,m. w :,* .

y y . .n - ~ I ,

, m: n / . ,

f, -

m.

L n-

w M, % .,-, < c .;i e v 4 pu -

< ~

- Lw, p- ' - <t m' :n' .:~; o-, ~< 5

- ,n, m

gJW_, ; fo  % ~

m:7w g. o tne I ) d[

., 2 y . 3 m. -

nj W , --

~, ,,

..e M- . , ,

. ~ n-, , . _

.  % r -

.~

5 3 ;.; ; , ., Q ; 's '; e f 1- ',i;}

~

k .i.

~L, + 1. p

~

' l} ~ -  : h j - >

7.,

'Q- -

,A m j % et w ,

u- w> w u.m - -- .

e

$ %jn fBEAVERNKEEEd

'  :~ ,r- uMW , ~ W :n M

+a POWER!STAtidM -

, ha >

ONIM2? w

<~

.g @8 - -

N:s y; \4 ,

-^'

1 m. _ ...

l m .

'.~., . _

q

.w w-f:b -

,?'

n L-l'

-: 2f_

'r,-

,w m,g,

^

N , .,~.

~.

• 2 ., ,

y L:m' ; ja' y t I y 2

- 8512040124 (( 1 851202 * '

5 M 2 M'i. -

-i

@ PDR ADOCK 05000412 K W iE:6 p d E 2 Q

" i

,s F PDR -!

3 ~*#

+ ,., e 4, 3 lM, f,f0 yo hf 3 < .

+ ~.

m?.:a, 2.W l

+. _

t .c

• . :.u !

.-  ;-fA . - .

3+

.)

l BEAVER VALLEY ,

POWER STATION UNIT - 2 CONTROL ROOM DESIGN REVIEW

l l

l l

l Volume 1

l VOLUME 1 l

TABLE OF CONTENTS i

PAGE TABLE OF CONTENTS ..................................................i LIST OF FIGURES .;................................................. 11i LIST OF TABLES .....................................................iv APPENDICES .........................................................v

1.0 INTRODUCTION

...................................................... 1-1 1.1 Ov e r v i ew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 - 1

1. 2 . Man ag enent and St affi ng . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 -2 1.3 P r og r am P l an . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 - 6 1.4 Review Procedures ............................................ 1-8 1.5 Doc unentation and Doc ument Control . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 1.6 As s e s sm e n t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 - 1 3

1. 7 De f i n i t i on o f Te rms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 - 13 2.0 OPERATING EXPERIENCE REVIEW ....................................... 2-1 4

2.1 Ex ami n ati on o f Av ail abl e Record s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2- 1 2.2 Control Room Operating Personnel Survey . . . . . . . . . . . . . . . . . . . . . . 2-2 3.0 CONTROL ROOM SURVEY ............................................... 3-1 3.1 Guid el i ne Areas Not Surveyed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 3.2 An t h ro pome t r i c Surv ey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 - 4 3.3 An n u nc i at or S u rv ey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 - 16 3.4 Co n t ro l s Surv ey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 -3 2 3.5 D i s pl ays su rv ey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 - 5 3 f

l-3.6 Label s and Loc ation Aids Survey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-71 1

TABLE.0F CONTENTS (cont.)

PAGE 3.7 Com put er Syst em Su rv ey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-88 3.8 Conventions .................................................. 3-120 4.0 SYSTEM FUNCTION REVIEW AND TASK ANALYSIS; AND VERFICATION AND V AL I DA T I O N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 - 1 4.1 Syst em Rev i ew and Task An alysi s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1 4.2 Verification of Task Perfonnance Capabilities . . . . . . . . . . . . . . . . 4-14 4.3 Val idation of Control Room Functions . . . . . . . . . . . . . . . . . . . . . . . . . 4-18 5.0 ASSESSMENT AND DISPOSITION OF HEDs ................................ 5-1 5.1 A s s e s sm e n t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 - 1 5.2 H E D D i s po s i t i o n . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 - 2 6.0 IMPLEMENTATION AND SCHEDULING 0F CORRECTIVE ACTIONS ............... 6-1 7.0 C0 ORDINATION WITH OTHER ACTIV ITIES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1 7.1 Buergency Operati ng Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1 7.2 Regulatory Guide 1.97 ........................................ 7-1 7.3 Un i t 1 Control Room Des i gn Rev i ew . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7- 1

8.0 CONCLUSION

........................................................ 8-1 8.1 C'o n t i n u i ng H un an Fac t o r s P rog r am . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8- 1 8.2 Post-Operation al Human Factors Program . . . . . . . . . . . . . . . . . . . . . . . 8-2 ii

LIST OF FIGURES TITLE PAGE 1.1 BVP S- 2 CRDR OR GAN I ZAT ION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 - 3 4.1 E0P USAGE FOR LOSS OF REACTOR COOLANT (SMALL BREAK) ............... 4-5 4.2 S AMP LE E L EME NT TAB L E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 - 7 4.3 SAMPLE INSTRUMENTATION REQUIREMENTS TABLE ......................... 4-9 4.4 SAMPLE CONTROL / INDICATION TABLE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10 4.5 SAMPLE SYSTEM SEQUENCE MATRIX TABLE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11 4.6 SAMPLE COMPLETED VERIFICATION OF AVAILABILITY CHECKLIST . . . . . . . . . . . 4-16 4.7 SAMPLE COMPLE'TED VERIFICATION OF SUITABILITY CHECKLIST . . . . . . . . . . . . 4-17 4.8 BVPS-2 CONTROL BOARD M0CK-UP ...................................... 4-32 5.1 SAMP L E HED P R IOR I T Y R EC OR D . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 - 3 5.2 SAMPLE REASSESSMENT OF PROB ABLE ERROR AND DEVI ATION FORM . . . . . . . . . . 5-4 5.3 EXAMPLE OF NAMEPLATE USING NEW FORMAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-13 5.4 H E D N O . 2

• C* - 2 217 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 - 17 5.5 H E D NO . 2 E S4 -302 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 - 18 5.6 HED N0. 2BC3-3025 ................................................. 5-19 5.7 HE D NO . 2 B B2 - 3 301 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 -2 0 5.8 HED NO. 2B**-3403 ................................................. 5-21 8.1 U N I T 2 CONTROL ROOM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 - 2 ,

I r

tii i

LIST OF TABLES TITLE PAGE 2.1

SUMMARY

OF HEDs FROM SIMILAR PLANT LERs ........................... 2-3 3.2 ANTHROP 0 METRY SURVEY FINDINGS & HEDs GENERATED .................... 3-7 3.3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATE0....................... 3-18 3.4 CONTROLS SURVEY FINDINGS & HEDs GENERATED ......................... 3-35 3.5 OISPLAYS SURVEY FINDINGS & HEDs GENERATED ......................... 3-56 3.6 LABELS SURVEY FINDINGS & HEDs GENERATED ........................... 3-74 3.7 COMPUTER SURVEY FINDINGS & HEDs GENERATED ......................... 3-91 3.8 CONVENTIONS SURVEY FINDINGS & HEDs GENERATED ...................... 3-122 4.1 SELECTED EVENT SEQUENCES FOR TASK ANALYSIS ........................ 4-2 4.2 SELECTED E0Ps FOR TASK ANALYSIS ................................... 4-6 4.3 VERIFICATION OF AVAILIABILITY FINDINGS & HEDs GENERATED ........... 4-20 4.4 VERIFICATION OF SUITABILITY FINDINGS & HEOs GENERATED . . . . . . . . . . . . . 4-28 4.5 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS & HEDs GENERATED ......................................................... 4-33 l 5.1

SUMMARY

OF HUMAN ENGINEERING DISCREPANCIES ........................ 5-8 5.2 HEDs WHICH HAVE BEEN RESOLVED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10 5.3 HEDs TO BE RESOLVED BY EQUIPMENT CHANGE ........................... 5-11 5.4 LABEL CORRECTIONS ................................................. 5-14 5.5 HEDs RESOLVED BY PROCEDURE CHANGE ................................. 5-16 7.1 UNIT 1 HEDs APPLICABLE TO UNIT 2 .................................. 7-3 l

iv i

l

r VOLUME 2 APPENDICES A BEAVER VALLEY POWER STATION - UNIT NO. 2 CONTROL ROOM DESIGN REVIEW CHARTER B DUQUESNE LIGHT COMPANY NUCLEAR CONSTRUCTION DIVISION CONTROL ROOM DESIGN REVIEW INSTRUCTIONS C : UNIT 1 OPERATOR INTERVIEWS AND QUESTIONNAIRES METHODOLOGY D ' NUR EG-0700, SECTION 6 GUIDELINE /BVPS-2 CONTROL ROOM DESIGN REVIEW FINDINGS CROSS REFERENCE E NRC CLARIFICATION OF TASK ANALYSIS REQUIREMENTS VOLUME 3 HUMAN ENGINEERING DISCREPANCIES v

1.0 INTRODUCTION

Duquesne Light Company (DLC) is the applicant and agent for itself and The Cleveland Electric Illuninating Conpany, Ohio Edison Conpany, and The toledo Edison Conpany for the operation of the Beaver Valley Power Station, W i: 2 (BVPS-2) (NRC Docket No. 50-412). BVPS-2 will enploy a Westinghouse tnree-loop pressurized water reactor (PWR) with a net electrical output of 836 MWe. BVPS-1, located on the sane site, was licensed in January 1976 and also utilizes a Westinghouse three-loop PWR with a net electrical output of 810 MWE.

The Control Building for BVPS is located between Unit 1 and Unit 2 at elevation 735'6". Within the Control Building are the control roans for each unit. The control roans are presently separated by a tenporary steel rein-forced wall. The wall is installed so that Unit 2 construction activities will not hanper Unit 1 operations and to inaintain security in the Unit 1 control roan. The wall will be renoved prior to Unit 2 beconing operational.

Until the wall is' renoved, DLC will not be able to couplete sone of the surveys involving caninon control roon attributes required by NUREG-0700 (see Section 3.1).

The Control Roan Design Review (CRDR) is part of an extensive effort within the nuclear industry and the Nuclear Regulatory Conmission (NRC) to evaluate nuclear power plant control roons, and the operability of energency operating procedures (E0Ps) within the control roon. The goals of the CRDR effort were to identify Hunan Engineering Discrepancies (HEDs) within the context of the existing control roon, energency shutdown panel, and alternate shutdown panel; evaluate the HEDs for their possible impact on the safe oper-ation of the plant; assess whether or not the impact is significant; and provide for adequate disposition of all identified HEDs. In achieving these goals, care was taken to avoid negating the safety characteristics of the existing control roon design. Also practical considerations required that any action taken to upgrade the control roon use accepted hunan factors principles.

1.1 Overview This report describes the methodology, findings, assessment, and implenentation of the BVPS-2 CRDR. The review was conducted to ensure that the control roon and the energency and alternate shut-down panels would support operation during energency conditions and to meet the requirenents of Iten 1.D.1 (Control Roan Design Review) of Supplenent 1 to NUREG-0737 published by Generic Letter 82-33.

Note that the format of this report is not consi presented in Figure 6-1 of the BVPS-2 Progran The . Plan} tent with that present fonnat better organizes and presents the material contained herein.

The CRDR effort will be addressed in Chapter 18.0, "Hunan Factors Engineering," of the FSAR.

1Duquesne Light letter no. 2NRC-3-060 to H. Denton fran E. J. Woolever, dated August 8, 1983.

1-1

The review was conducted in accordance with the BVPS-2 Progran Pl an. The plan organized the review into four phases: Planning, Review, Assessment and Implenentation, and Docunentation.

Planning for the review, based on the Progran Plan, was crystal-lized with the generation of a BVPS-2 CRDR Charter (Appendix A) and a set of detailed instructions for each task ( Appendix B).

Relying heavily upon the expertise of Hunan Factors Specialists (HFS), as well as operating personnel , and instrunentation and control systens engineers, the review phase was acconplished for

.the following tasks in accordance with the established instructions.

• Task 1 - Operating Experience Review

• Task 2 - Control Roan Inventory

• Task 3 - Control Roan Survey

• Task 4 - Systen Review and Task Analysis

• Task 5 - Verification of Control Roan Functions

• Task 6 - Validation of Control Roon Functions The products of each task (wnere applicable) were HEDs, which iden-tify discrepancies and, in sane cases, provide preliminary resolu-tions for the discrepancies based upon NUREG-0700 guidelines.

In the assessnent and implenentation phase, each HED was reviewed in detail by the Core Tean and Support Tean, at which time final resolutions were agreed upon. The HEDs, with their resolution, were given to the DLC Managenent Tean for disposition. Upon agree-ment of DLC managenent, a plan for the implenentation of the HED resolutions was generated. The above review phases are further docunented within this report.

Section 6.0, "Implenentation and Scheduling of Corrective Actions" discusses the time frane for resolving the HEDs identified in this report. Also. discussed in Section 6.0 is the intended approach for evaluating those control roon characteristics whicn were unable to be assessed during the course of tne BVPS-2 CRDR.

'1.2 M,anagement and Staffing This section will identify the CRDR progran teans and their associ-ated areas of responsibility. An overview of the CRDR organization is shown in Figure 1-1. The Regulatory Affairs Department (RAD) of the Nuclear Construction Division (NCD) has primary responsibility for the CRDR. The NCD is a division within the Nuclear Group. The Vice President of the Nuclear Group has responsibility for all nuclear related activities (BVPS-1 and -2) at DLC.

1-2

BVPS-2 CRDR ORGANIZATION f

PROJECT TEAM Manager, Regulatory Affairs E. F. Kurtz, Jr.

Manager, NCO Engineering R. E. Martin Superintendent, BVPS-2 Operations T. P. Noonan SWEC Project Engineer P. Knobel Westinghouse Project Manager T. Lex SUPPORT I&C Engineer D. Szucs

- .....-- W. Young CORE TEAM B0P Systems Engineer Review Team Leader P. Knobel E. T. Eilmann Nuclear Safety / Licensing

- Technical Coordinator M. E. Deflin M. E. Deflin Human Factors Specialists I&C Engineer D. Eike D. J. Vochinsky J. Farbry H. VanCott Reactor Operator C. Baker R. G. Orendi M. Francher Hunan Factors Specialist Operator W. T. Talley/T. J. Voss F. Schuster/C. O'Neil FIGURE l-1 s

1-3

1.2.1 Management Organization

- The management function for the CRDR was under DLC NCD Pro-cedure 1.2, " Organization and Responsibilities," and NCD Procedure 2.10, " Engineering Change Control."

The function of managenent is to:

• approve the Program Plan

• provide the resources necessary for implenentation of the CRDR

• review and approve control roon reconmendations for cor-rection of HEDs

• provide the mechanisa for the preparation and submittal of docunents to the NRC 1.2.2 Project Tean The Project Tean provided the overall coordination of the CRDR program. The function of this tean was to:

• ensure that the CRDR progran was perfonned in accordance with the DLC Quality Assurance Progran

• provide overall support to the CRDR process

• nonitor i the CRDR process

• ensure that the CRDR objectives and tasks, in relation to other NUREG 0737 efforts, are properly coordinated

• establish and initiate a control roam improvenent prograin 1.2.3 Core Tean The day-to-day review activities were the responsiblity of the Core Tean. The Core Tean was responsible for the plan-ning, schedul ing , coordinating, and integration of CRDR activities.

1.2.4 Core _ Tea _n Structure The Core Tean is a multidisciplined tean of individuals with the wide range of skills necessary to perfonn the design review. The Core Tean includes the following personnel:

• Review Tean Leader

• Hunan Factors Specialist

• Reactor Operator (licensed or certified)

• Instrunentation and Control Engineer

• Technical Coordinator The Core Tean was supplenented, as required, by the Support Te an . The Support Tean helped to address such areas as:

l 1

1-4 l i

l l

operations, hunan factors, mechanical engineering, electri-cal engineering, nuclear engineering, procedures, and licensing / nuclear safety. Resunes of all menbers of the CRDR organization are maintained in the CRDR files.

1.2.4.1 The Core Tean had the Review Tean Leader as its key person. This individual provided the adninistrative and technical direction for the project and has overall responsibility for the project. Access to infonnation and individuals which/who provided useful or necessary input to the tean was coordi-nated by the Review Team Leader.

It was the responsibility of the Review Tean Leader to resolve hunan factors concerns on methodology, technique, review findings, assessnent, and HED corrective actions that dissent with the majority opinion of the Core Tean.

1.2.4.2 Human F_ actors Specialist (HFS)

The HFS worked closely with the CRDR organization throughout each phase of the CRDR and shared with the tean the hunan factors technical leadership of the entire CRDR project. This individual is the Essex Hunan Factors Project Manager.

1.2.4.3 Reactor 0_perator (RO)

The R0 assisted in identifying operator tasks and served as the Core Tean expert on the operational constraints for manipulations of plant systens.

1.2.4.4 Instrumentation and Control _(I&C) Engineer The I&C Engineer in conjunction with the Balance-of-Pl ant (80P) Systens Engineer assisted in the identification of plant systen design features and served as the Core Tean expert on the capabilities and limitations of controls and instrunents. The I&C specialist and 80P Systens Engineer also pro-vided input to the tean during the assessnent phase of the review. This individual is the Westinghouse Progran Coordinator.

1.2.4.5 Technical Coordinator Tne Technical Coordinator acted as the primary contact and liaison between the Project, Core, and Support Teans. He al so provided* the interface between the CRDR organization and the NRC. The 1-5

Technical Coordinator was delegated the authority of the Review Tean Leader in cases where the Review Tean Leader was unavailable.

1.3 Program Plan The initial step of the CROR was the preparation of a Progran Plan

- based upon the requirenents of Supplenent I to NUREG-0737 and the guidance contained in NUREG-0700 and NUREG-0801. As described above, the_ Progran Plan addressed the design review activities in four phases:

• Phase I - Planning

• Phase II - Review

• Phase III - Assessnent and Implenentation

• Phase IV - Docunentation BVPS-2 is currently under construction and the Progran Plan was made flexible so that the CRDR tasks would be perfonned within the franework of the overall schedule for the CRDR, Safety Paraneter Display Systen (SPOS) installation, the Regulatory Guide 1.97 (Rev.

2) survey, and the new E0P implenentation.

The Progran Plan was submitted to the NRC for review on August 8, 1983, and the NRC staff conments on the plan were returned on January 23, 1984.

In general, the NRC staff stated that the plan did not describe the proposed review progran in enough detail to allow then to under-stand fully how the CRDR objectives would be acconplished. More specifically, the connents were in- the following areas:

1. Qualification of review tean menbers and level of involvenent in. review tasks.

2. HFS involvenent in detailed planning.

3. Need for more than one hunan factors specialist in the many review tasks.

4. Description of the data base and data base managenent systen.

5. Description of the standardized fonns/ checklists to be used.

6. The necessity to include conventions and standard abbreviations in OLC reference materials.

7. Independence of systen review and task analysis (SRTA) fran other review tasks.

8. Events to be considered in the SRTA.

1-6

9. Event-based vs function-based E0Ps.

~

10. Specific E0Ps to be considered in the SRTA.

11. Infonnation and control requirenents and characteristics to be detennined from SRTA.

12. SRTA methodology.

13. Control room inventory of instrunentation.

14. Control room inventory forms.

15. Verification methodology and tools.

16. Hunan factors guidelines and criteria to' be used in the control room survey.

17. Process for identifying and recording HEDs.

18. State of control roon in which survey will be conducted.

19. Implenentation schedule for correction of HEDs.

20. HED assessment methodology.

t

21. Selection of design improvements traceability.

22. Criteria for selection of design improvements.

23. Methodology to ensure that improvenents correct the HED without introducing new HEDs.

24. Approach to coordinating the CRDR with other post-TMI activi-ties.

25. Control roan modifications resulting from post-TMI actions.

Based on the Progran P1an, a CRDR Charter was developed. The Char-ter describes and organizes the entire CRDR by addressing the fol-lowing subjects:

• Purpose

Objectives

• CRDR Organization

• Schedule

• Monthly Report

• Contractor / Subcontractor

• Records

• Final Report Fonnat l

• Regulatory Issues l l

1-7

)

• Audits

• Revisions to Charter

• Docunent Control .

• Instructions Based _on the NRC review, the staff requested an in-progress audit of the BVPS-2 CRDR progran. The on-site, in-progress audit was conducted by the staff on July 26 and 27,1984. The NRC issued the I results of that meeting on Septenber 10, 1984 2, and stated that,  !

with the exception of conment No.11, all responses were satisfac- ,

tory to the staff. In a subsequent meeting with the staff on l Novenber 20, 1984, further details were presented for the SRTA progran which satisf actorily resolved comment No.11.

The plan was carried out by DLC with the support of Essex Corpora-tion and Westinghouse Electric Corporation. Westinghouse provided tne overall technical coordination of the CRDR, administered the hunan factors contribution of Essex, and provided NSSS instronenta-tion and control expertise. DLC provided overall CRDR managenent, operations expertise, and balance of plant instrunentation and control expertise. To maintain consistency between the organiza-tions involved, a set of detailed instructions were developed for b each CRDR task. The instructions made all tean menbers cognizant of task responsibilities and objectives. The instructions are discussed in Section 1.4 and are contained in Appendix B.

1.3.1 QA Audits I All CRDR work was perfonned under a Quality Assur ance Progran. The CRDR work was audited twice by the DLC. Quality Assurance Department. Audits were conducted October 2-8, 1984, and - August 29-30, 1985. These audits were conducted to ensure that the CRDR work was perfonned in accordance with the Charter and Instructions contained in Appendices A

'~

., and B. The audits did not identify any significant findings

% and all itens have been closed.

/ 1.4 Review Instructions The review phase of the CRDR was acconplished in accordance with the following DLC NCD instructions.

2 Control Roan Design Review Audit Sunmary, frau M. Ley to Applicant (DLC),

dated Septenber 10, 1984.

1-8

INSTRUCTION TASK TITLE,,,,,,,, NO.

lA LER Review R 401 A 18 Control Room Operating Personnel Survey R 401 B 2 Control Room Inventory R .402 3 Hunan Factors Control Room Survey R 403 4 Systen Review and Task Analysis R 404 5 Verification of Task Performance Capabilities R 405 6 Validation of Control Room Functions R 406 7 Assess;nent R 407 8 Final Sunmary Report R 408 9 Hunan Engineering Discrepancy (HED) Report R 409 1A) LER Revie1: The intent of the Licensee Event Reports (LER)

Review is to review available documentation of operating difficul-ties and incidents as outlined in plant specific LERs to identify conditions that may cause hunan performance problens. Since BVPS-2 is under construction, LERs fran North Anna Unit I and Surry Unit I were reviewed for applicability to BVPS-2. In addition, HEDs gen-erated fran the BVPS-l CRDR docunent review were reviewed for applicability to BVPS-2.

IB) Control Room Operatin,g,, Personnel S,urvey: Since BVPS-2 is under construction and there are no Unit 2 trained operators available, BVPS-1 CRDR Operator Survey (using 8V-1 operators) HEDs were reviewed for applicability to BVPS-2.

2) Control Room Inventory: An inventory of all instrumentation, controls, and otner devices on the- main control board, building services control panel, energency shutdown panel (ESP), and alter-nate shutdown panel (ASP) was recorded. Approved design docunenta-tion as of August 17, 1984, was used as a basis for the inventory and the inventory was conpared with the 1/2 scale and full scale main control board photomosaics that were constructed for the CRDR.

3) Hunan Factors Control Room Survey: Much of the detailed assess-ment of'T.he control roon was conducted through checklist surveys.

Surveys entailed the collection of data using preconstructed check-lists and taking direct measurenents. Since BVPS-2 is under con-struction and not all design features were available for review, only the following surveys were conducted.

1-9 l

1

Anthropometrici: analysis of reach and visual access to control room components.

Annunciat_or Systens: checklist evaluation of annunciator systens; direct measurenent of annuncintor fonts, signal intensities, etc.

Controls: checklist evaluation of controls 0,i_spl ays : checklist evaluation of displays L,abels_ _and Location Aids: checklist evaluation of labels and location aids C,o_mp_ uter Systems: checklist evaluation of computer systens C_onvention: checklist evaluation of conyentions 41 System Review and Ta_sk,, Analysis: The SRTA progran systenatically evaluated the needs of the control roon operations crew in response to energency"tranisients. The SRTA process and documentation was

' based on the methodology developed by the Westinghouse Owners Group (WOG) and the NRC clarification conments on task analysis provided at the March 29, 1984, meeting (see Appendix E). The SRTA docunen-tation was structured' to provide the infonnation required by the control roon CRDR tean to perfonn the Verification of Operator Task Performance Capability review phase of the CRDR.

5) Verification of Task Performance Capabilities: The verification of task capabilities was acconplished is two steps: verification of availaoility and verification of suitability. Verification of availability was conducted using results of the SRTA, the control roon inventory, and the BVPS-2 main control board mockup. Operator device requirenents for control, indication, and instrunentation, as identified by the SRTA, were conpared with the inventory and the main control board mockup to establish availability of the devices.

The devices so identified were then evaluated for suitability to the NUREG-0700 Section guidelines using the sane data sources and methodology as used for verification of availability.

6) Validation of Control Room Functi_ons: At the BVPS-2 main con-trol mockup, operators perfonned walk-throughs of the following procedures using validation scenarios developed fran the SRTA and comprised of the following BVPS-2 E0Ps:

• Start-up fron cold shutdown to power operation (5%).

• Load follow from 100% power to 50% power.

• Reactor trip or safety injection (SI).

• SI tennination.

(' i

• Loss of reactor or secondary coolant.

• Post-LOCA cooldown and depressurization.

1-10

~* Transfer to cold leg. recirculation.

• Transfer to hot let recirculation.

• Faulted stean generator isolation.

• Stean generator tube rupture.

• Post-SGTR cooldown using stean dunp.

• Critical safety function status trees.

~

• Response to. nuclear power generation.

3

• Response to inadequate core cooling.

• Response to loss of secondary heat' sink.

• Response to imminent pressurized thennal shock conditions.

• Response to high containment pressure.

During the walk-throughs, the operators identified difficulties and the CRDR _tean noted any deviations fran applicable NUREG-0700 Sec-tion 6 guidelines and any concerns or. questions. The entire set of walk-throughs was video taped. Using the video tapes, a debriefing was held between the operators and the CRDR tean to discuss prob-lens identified during the walk-throughs and to develop the infor-mation necessary to generate applicable HEDs.

1.5 Documentation and Docunent Control Throughout the CRDR progran, the design review activities and results were carefully docunented. Three categories of docunenta-tion were used to support the CRDR: reference docunentation, pro-cess docunentation, and control docunentation.

Reference Documentation: A library of reference documents was establiided to .sup' port the CRDR. It contains the following docu-ments.

• Final Safety Analysis Report

• Main Control Board front panel layout drawings

• Main Control Room ano Computer Room arrangenent drawing

• Main Control Board dimensions drawing

• Main one-line drawings

• Equipnent one-line drawings

>

• One-line power distribution drawings

• Flow diagrans

• AS? layout drawing

• Naneplate engraving lists

• Annunciator window arrangement

• ESP front view drawing

• Building Service Control Panel front view drawing

• Switch contact development drawings

• Logic diagrans Process Docunentation: Data collection and reduction methods were docunented for reporting purposes in accordance with instructions listed in Section 1.4, " Review Instructions."

l-11

lA) LER Review: LERs fran nuclear power plants with similar plant designs were obtained for review. Following screening by the CRDR Core Tean, the Operations Start-up Group and the HFS re-reviewed LERs eliminated by the initial screening and docunented any discrepancies found.

LER Report Summaries were conpleted by the Core Tean menbers for LERs renaining after the above screenings. Preliminary HEDs were issued for events relevant to BVPS-2.

18) Control Room Operating Personnel Survey: Since the BVPS-2 control roon was under construction and there were no BVPS-2. trained operators available, the survey was limited to a review of the BVPS-1 HEDs generated fran their operator surveys. These Unit 1 HEDs applicable to BVPS-2 were then docunented as BVPS-2 HEDs.

2) Control Roan Inventory: Inventory infonnation was recordea on individual Inventory Data Sheets for all instru-mentation, controls, and other devices on the main control board, the building services control panel, the ESP, and the ASP.

3) Hunan Factors Contr_ol Room Survey: Observation data was collected and rE. Corded using the checklists fran the anthro-pometrics, annunciator systens, controls, displays, labels and location aids, conputer systens, and conventions task pl ans. Problens identified were. recorded as preliminary HEDs.

4) Systens Review and Task Analysis: The requirenents used to evaluate the control roon capability were identified by the development of Elenent Tables. The primary document developed to organize the data base of Elenent Tables are the Systen Sequence Matrices. Instrunentation Requirenents Tables. were developed to identify and review requirenents for individual instrunents. Control Requirenents Tables were developed to identify and review requirenents for indi-vidual controls.

5) Verificatio_n of Task Perfonnance Capabilities: Every control and instrunentation device identified in the SRTA Elenent Tables is listed on a Verification of Availability checklist and on a Verification of Suitability checklist (see Figures 4-6 and 4-7). These checklists were used to record the avail aoility and suitabil ity (per NUR EG-0700

-guidelines) of these devices as required to implenent each operator task. Any descrepancies between the required devices and actual control roon devices were recorded on preliminary HEDs.

1-12

6) Validation of Control Roon Functions: The primary docu-mentati'on used for validation was the BVPS-2 Walk-Through Validation scenario forns. As a minimun, these scenarios cover all ~ of the event sequences suggested by NUREG-0700.

All validation walk-throughs were video taped using two caneras: one wide-angle canera showing entire main control board area activity and another canera, wi th zoon lens, following each walk-through action. The debriefings held following each walk-through were also video taped. As wi th the other CRDR tasks, any descrepancies found were recorded as preliminary HEDs.

. Control Documentation: The primary docunentation for control of identified HED, their assessnent, and their resolution was the HED fona. _ As each discrepancy was identified by a Core Tean or Support Tean member, it was recorded on a HED fonn as a Preliminary HED (PHED). PHEDs were reviewed for conpleteness and accuracy and signed by the Westinghouse Progran Coordinator and the Essex Human Factors Manager to denote acceptance of PHED as a HED. PHEDs due to misinterpreted NUREG-0700 guidelines were discarded. As the HEDs were assessed by the Core Tean, each was assigned a priority via a HED Priority Record fonn and each reconmended resolution was assessed using a Reassessment of Probable Error and Deviation fann to detennine whether the correction satisfactorily resolved the existing discrepancy and whether it would introduce new discrepancies.

All of the above documentation was filed in the CRDR file main-tained by the Westinghouse Progran Coordinator and transferred to DLC following conpletion of this report.

1.6 Assessment and Disposition of HEDs Sectiun 5.0 of this report details the assessnent and disposition of HEDs generated during the BVPS-2 CRDR. The assessment method-ology is contained in Instruction R-407.

1.7 0,efinition of Terms Control Room Design Revi_ew (CRDR),:

A post-TMI task listed in NUREG-0660, " Task Action Plan Developed as a Result of the TMI-2 Accident," and NUREG-0737, the staff supplenent to NUREG-0660, as Task I.D.l.

Control Roon Survey: The control roon survey is a static verification of the control roon perfonned by conparing the existing control roon instranentation and layout wi th selected hunan engineering design criteria, i.e., checking the control roon match to the hunan operator.

Elenent Tab,13: A description of the operator tasks per E0P step.

1-13

~ . -, . . - - . -. . . . . _ . . . .- - - - - .

LEmergency Operating Procedures (E0Ps): Pl ant procedures

- directing the operator actions necessary to 'nitigate the ,

consequences of transients and accidents that cause plant paraneters to exceed reactor protection setpoints, engi-neered safety feature setpoints, or other appropriate tech- -

nical limits.

Emergency Response Guidelines (ERGS): Guidelines developed -

fran- systen analysis of transients and accidents - that pro--

E vide' sound technical bases for plant-specific E0Ps.

Hunan Engineerins Discrepancy ',HED): A characteristic of -

the existing con".rol roon that'does not conply with hunan engineering criteria.

Operating Experience Review

lThe operating l experience

• review screens plant operating documents and operator exper-lence to discover hunan engineering shortconings that have or could have caused actual operating problens or near

>- misses in the past.

+

A nunber (1-9) assigned to an HED in the Assess-Priority:

ment phase to categorize the HED based on safety importance and operational significance. The logic' used to assign priority levels is explained in Instruction R-407.

. - Systen_ ,R,ev iew: The detennination of systen functions ,

! required to meet systen goals.

Systen Sequence Matrix: - A table dich lists the discrete 4- steps of t1e E0Ps in order of perfonnance and the associated plant. systens and subsystens.

Task _ Analysis: A tool used to delineate systen functions and the specific actions that must take place to acconplish those functions. In the CRDR context, task analysis is used

to detennine the individual tasks that must be conpleted to a allow successful energency operation. This activity checks '

the control room match to tne E0Ps.

i- Task Plan: A restructuring of all NlREG-0700 guidelines

. into 15 7ndividual -surveys to facilitate data collection, reduction, . analysis, and recording. 'Each Task Plan contains all appropriate guidelines, instructions, and ' recording i fonns for measurenents, observations, questionnaires / inter-n views, and document reviews. Task P1an areas are: Workspace, Anthropometrics, Emergency Equipnent, HVAC, Illumination, Ambient Noise, Maintainability, Canmunications, Annunciator Systens, Controls, Di spl ays, Labels and Location Aid s, l Canputer Systens, Conventions, and Verification / Validation.

Completed Task Plans for those areas which were able to be

!. evaluated are contained in the CROR files.

1r i 1-14 ,

4

, -- ._. _ ..._, _-~._...._-_.._.-.-._._ - _ _ , __ .- _._.--___ _ _

Validation: Tne process for detennining whether the control

. .roon operating crew can perfonn their functions effectively given the control roon instrtsnentation, procedures, and training. In the CROR context, validation implies a dynanic perfonnance evaluation.

Verification: The process for detennining whether. instru-

.nentation, controls, and other equipnent ineet the specific requireuents of the energency tasks perfonned by operators.

. The control roon survey is a verification . activity, checking the control roon match to the hisnan operator. In the CRDR context, verification implies a static check of the plant instrumentaticn and controls against established hisnan engi-neering criteria.

l-15

2.0 OPERATING EXPERIENCE REVIEW A review of operating experiences is required to ensure that problens previously encountered during pl ant operations and pl ant start-up are addressed. This phase of the BVPS-2 CRDR consists of two tasks: exanination of historical records (2.1) and a survey of control roon operating personnel (2.2).

2.1 Exanination of Available Historical Records The methodology utilized for this task is contained in DLC NCD Instruction R-401A. DLC NC0 Instruction R-401 A addresses the specifics of all itens contained in the DLC Program Plan.

2.1.1 _B,V,P,S-1 Document Review All of the incident reports (irs) that had been generated at BVPS-1 were reviewed by the BVPS-1 CRDR tean. Of the irs reviewed, 390 were retained and submitted to the BVPS-1 Human Factors Consultant to undergo hunan factors review.

Of the 390 1Rs that were reviewed by the BVPS-1 Human Fac-tors Consultant, 133 were retained for further evaluation and disposition by the BVPS-1 CRDR tean. Of the 133 irs that were evaluated and dispositioned by the BVPS-1 CRDR tean, 8 HEDs were identified, none of diich were found to be applicable to Unit 2.

2.1.2 _B,VPS-2_LER Review The LERs reviewed were fron nuclear power plants with simi-1ar designs as that of BVPS-2. These plants were North Anna Unit I and Surry Unit 1. The LER Review was conducted in accordance with NCD Instruction R-401 A.

A total of 651 LERs were reviewed by the CRDR tean. Of the 651 LERs, 212 were initially screened out by the CRDR tean.

The 212 initially screened LERs were tnen forwarded to DLC operations and the BVPS-2 HFS for review to ensure that the screened LERs did not contain hunan error. Of the 212 screened LERs,12 were returned (11 fran operations, I fran the HFS) for further CRDR Core Tean review.

The 12 LERs needing further review plus the renaining 439 previously unscreened LERs were then split up anong the CRDR Core Tean. Each Core Tean menber filled out an "LER Report Sum. nary" for each of their assigned LERs. The "LER Report Suinmaries" were separated into one of the following three categories:

2-1

• Corrective action taken terainated the consequences of the event.

• Corrective action ta' Ken was adequate but in the judgment of the reviewer, sufficient action was not taken to pre-vent the recurrence of the problen.

• Corrective action taken was not sufficient in the judgment of the reviewer.

All LERs pertaining to the first category (a total of 314) were forwarded to the HFS to review for possible indications of hunan error. LERs pertaining to the second and third categories (a total of 137) were held for Core Tean review.

Of the 314 LERs forwarded to the HFS, 29 were returned for further review by the CRDR Core Tean.

Core Tean LER review neetings were held to discuss the 156 LERs. Of the 166 LERs that were assessed and dispositioned by the Core Tean,12 HEDs were identified (see Table 2.1.2, "Stanary of HEDs from Similar P1 ant LERs").

2.2 Cont,r,o,lloom Operating Personnel __ Survey Although not a statutory requirenent, a Control Roon Operating Personnel Survey (CROPS) was included in the scope of the BVPS-2 CRDR and was to be conducted in accordance with NCD Instruction R-4018. However, during the course of the .CRDR, there were no oper-ators who had received training on the Unit 2 control boards. The only source of operators for CROPS was Unit 1. Since the Unit _1 CRDR had already conducted operator interviews and questionnaires, the Review Tean reviewed HEDs resulting fron the Unit 1 survey for applicability to Unit 2. This approach was acceptable based on the degree of sienilarity of the control boards and to' avoid a duplica-tion of effort. The methodology for the Unit 1 survey is contained in Appendix C, Three of the HEDs generated during the Unit 1 operator survey (BVPS-1 HEDs 52,116,157) were found applicable to Unit 2. See Table 7.1 for a description of these HEDs.

2-2

TABLE 2.1.

SUMMARY

OF HEDs FROM SIMILAR PLANT LERS Virginia LER HEDS LER HED Titles (Subjects) Priority

• Remarks Power LERs BVPS-2 Inadvertent opening of Accumulator 3 LER 280-81039 2 " *-1101 '

drain valve ,

"A" SI Accumulator drained below 3 LER 280-82072 2***-1102 the T.S. minimum 5

LER 280-80002 2 " *-1701 Failure of effluent flow recorder paper N/A Not a CRDR problem 2 " *-2001 Increase in storm drain activity due

! LER 280-81054 to leaks from stripper feed steam heater 1 High safety importance LER 280-82093 2***-2101 Failure to reset alarm f

N/A BVPS-2 has no diesel fire 2* " -2102 Diesel fire pump fuel oil level less LER 280-81076 Pump than required Loss of boric acid flow to blender 5 LER 280-82020 2 " *-2301 and bit recire flow resulting from mechanical failure on A/B pump suction cross connect Nitrogen purge removed 5 LER 280-83015 2***-4001 Containment bulk average temper- 3 LER 338-78081 2 " *-4002 ature not within T.S. limits 4 Iligh safety importance 2***-4003 Post accident monitoring hydrogen LER 338-80058 anayzer failure l Incorrect valve opening resulting in 5

! LER 280-80016 2 " *-4201 inadvertent release of liquid waste test tank 4 Iligh safety importance LER 338-80083 2 " *-4202 Erroneous pressurizer level trans-mitter readings

• The logic used to assign priorities is explained in Instruction R 407.

2-3

I 3.0 CONTROL ROOM SURVEY The methodology used to conduct the control roon surveys at BVPS-2 incorporated a mix of tradi tional procedures and methods tailored to the specific requirenents of the plant per OLC NCD Instruction R-403. The three basic methods enployed within each survey were measurenents, observations, and docunentation revi'ews. Within the sunmary tables, these methods are designated by M, 0, and 0, respectively. Nonnally, operator interviews are also included in the data collection methodology. However, BVPS-2 as an NTOL under construction did not yet have operators trained on the Unit 2 control boards; therefore, interviews were not conducted. Within each of the methods used, specific procedures were followed to ensure a conprehensive data col-lection, data reduction, and analysis process. The procedures were organized into a set of standardized task plans.

The survey process was structured into a nunber of separate tasks, each t,ask involving a specific set of related control roon design features. For exanple, the anthroponetrics survey involved consideration of reach and view-ing factors for each of the various types of consoles in the control roon.

This approach, coupled wi th the standardization of task plan structure, allowed for maxiinun flexibility during data collection, data reduction, and analysis, and resul ted in a standard, well-organized, self-documenting pro-cess.

It was not possible to survey all of the control roon design features since many were not conplete at the time of this CRDR. For this reason, only the sections evaluated will be discussed in the report. Entire sections unable to be surveyed were:

1) Workspace

2) Emergency Equip 1ent

3) HVAC

4) Illunination

5) Anbient Noise

6) Maintainability

7) Connunications All task plans followed the general fonnat of:

1) Introduction (including the objectives)

2) Review Tean Selection and Responsibilities 3 Criteria (from NUREG-0700, Section 6.0) 4 Procedures 5 Equipnent and Facility Requirenents 6 Inputs and Data Fonns 7 Outputs and Results 8 Figures and Tables 9 Procedure Exceptions

10) Appendices (asrequired).

3-1

In addition to this general fonnat, the control roon survey task plans incorporated _ a standardized set of appendices that ensured a consistent well-docanented process for data collection, analyses, assessnent, inplenentation, and audits (the appendices discussed here are for the task plans; they are not appendices to this' report) . The appendix structure enployed for the task plans was:

'~

Appendix A (Criteria) - This is a conpendiun of all 0700, Section 6.0 criteria in 0700 paragraph nunber order that is relevant to that task pl an. It was used to suinarize the final results.

Appendix B (Data Foras) - This appendix is further divided into the following:

B1 Measurenents Data Bl.1 Linear Measurenents (scalar, force, torque, dimensional, 4 air volune, tenperature, hunidity)

Bl.2 Sound Measurements (noise auditory sig nal s, conmuni-cations systens auditory response characteristics)

Bl.3 Light Measurenents (illunination levels, luninance char-acteristics, contrast ratios) 81.4 Through Bl.n "Others" (as required)

B2 Interviews,,a_nd Questionnaires 82.1 Operations B2.2 Engineering B2.3 Instrumentation and Calibration 82.4 Managenent and Adninistration B2.5 Through B2.n "Others" (as required)

B3 Observat_ ion Checklists B4 Docunentation Review Checklists B5 Analysis Aids for B1 - Measurements B5.1 Analysis Aids for Bl.1 B5.2 Analysis Aids for Bl.2 85.3 Analysis Aids for 81.3

- s, i

3-2 niiiii.,i

B5.4 Through B5.n " Analysis Aids for 81.4 through Bl.n" (as required)

B6 Analy,s,1,s,,A, ids for 82 - Interviews / Questionnaires B7 Analysis Aids for B3 - Observation Checklists 88 . Analysis Adis for 84 - Docunentation Review Checklists 89 Additional fonns, as required.

3.1 Guideline Areas Not Surveyed Because BVPS-2 was under construction, the sections listed below could not be surveyed during the course of the CROR. These sections apply to the total control roon workspace, which includes the control board areas for both Unit 1 and Unit 2. The following is a list of criteria fran NUREG-0700 that will be applied when the teaporary wall separating the Unit 1 and Unit 2 control board areas is renoved, as discussed in Section b.0 of this report.

1. W

,,0,rk s p ace Paragraphs 6.1.1.3a through g; 6.1.1.4a through e; 6.1.1.6a and b; 6.1.1.7; 6.1.2.6; 6.1.2.7a through d; 6.1.2.8a through g; 6.1.3.la and b; 6.1.5.6a and b; and 6.1.5.7.

2. Ernergency Equipnent Paragraphs 6.1.4.la through i; 6.1.4.2a through e; 6.1.4.3a and b; 6.1.5.4a and b; 6.2.1.8a through c(3); 6.4.1.ld.

3. Heating,_Ventilati_on,, and Air Con _ditioning Paragraphs 6.1.5.la, 6.1.5.lb, 6.1.5.2a, and'6.1.5.2b.

4. I,1,1,utni nati on Paragraphs 6.1.5.3a(1) tnrough a(9), b through e(2), f, g, and h; 6.1.5.4c.

5. Amb_ient Noise Paragraphs 6.1.5.5a through e.

6. Maintainability Paragraph 6.1.1.Sa through f, 6.2.1.10, 6.3.3.lc(1) through (3),

6.4.3.3c(1) through (4), 6.5.3.la(1) through (3) and c(2), 6.5.4.le and f.

3-3

7. Communications Paragraphs 6.1.3.10; 6.2.1.lc(1) and (2); 6.2.1.2a through e; 6.2.1.3a through e; 6.2.1.4a through e; 6.2.1.5a through c; 6.2.1.6a through f; 6.2.1.7a and b; 6.2.1.8a through c; 6.2.2.la through c; 6.2.2.2a through c; 6.2.2.3a through e; 6.2.2.4a and b; 6.2.2.Sa and b; 6.2.2.6a through c; 6.2.2.7a through c.

3.2 Anthropametric Survey This section docunents the results of the anthroponetrics survey con-ducted in the main control roan, ESP, and ASP at BVPS-2. This review was conducted in accordance with the requirenents of NUREG- 0700, as specified in the BVPS-2 DCRDR Program Plan.

3.2.1 Objectives The objectives of the anthropametrics survey were to:

a. Assess the degree to which all stand-up and sit-stand work stations in the control roan, ESP, and ASP confonn to the L- criteria in NUREG-0700.

b. Identify and docunent any features of the work stations that do not confonn to the criteria in NUREG-0700.

3.2.2 Scope i

The scope of the effort extends to the assessnent of the work station design in the main control roon at the BVPS-2 using the applicable guidelines as stated in NUREG-0700. The anthropo-metrics topics evaluated include:

o Stand-up console dinensions o Sit-stand console dimensions o Vertical panels o Operator-display / controls relationships 3.2.3 Criteria The criteria applied in this survey, identified by NUREG-0700 paragraph nunber, are: paragraphs 6.1.2.2a through g; 6.1.2.3a through h; 6.1.2.4a through c; 6.1.2.5a and b and 6.7.2.3a through f.

The detailed definitions for each criterion are presented in Table 3-2.

3-4

3.2.4 M,ethod 3.2.4.1 Data Collection

a. Data were collected using the checklist contained in the Anthropoinetrics Task Plan.

b. Reach and visual envelopes reconmended in NUREG-0700 were denarcated on the control boards and visual observations cre nad.t of the relative locations of controls and displays. Controls and displays f all-ing outside the reemi.nenle! covelo,Ms were noted and their iten nunbers recorded.

c. Where it was necessary to consider the operational characteristics of the couponent (e.g., Goldeline 6.1.2.5.a[1]), cognizant OLC personnel were con-suited.

3.2.4.2 Analysis -- Data were analyzed according to the follow-ing procedure:

d. All deviations froD the Criteria #f re recorded on HED reports. Recorded infonnation included the displays or controls involved, a description of the problen including the NUREG- 0700 paragraph nunber of the criteria, and a reconnended solution.

b. The data collection description was also recordel on the HED fonn. Where data fron two or .nore sources were contralictory, resolution of the conflict was achieved through data review and discussions .91 th cognizant OLC personnel.

3.2.5 j F ndings The findings of th's anthroponetrics survey are presented in Table 3.2 "Anthroponetry Survey Findings and HEOs Generated." Overal l ,

47 criteria were applied to the .lisplays in the BVPS-2 control roon, ESP, and ASP. Of the criteria assessed, 17 (3 M) were not applicable,19 (4%) were not violated, and 11 (23f.) were vio-l ated . A total of 12 HEDs were generated which docanent all of the 11 crittria stich mee violated. In general, those HEDs describe instances of controls an't displays located too high or too low on tne vertical panels or controls not located nore than three inches away fron the edge of the bench board, 3-5

._,,__m ,

TA THIS PAGE PURPOSELY LEFT BLANK, 1

l 1

I i

I F

t I

i 3-6 k

TABLE 3-2 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENER ATED Page 1 of 9

- // st /

621.2.2 STAND-UP CONSOLE DIMENSIONS

c. CONSOLE HEIGHT TO SEE OVER - M YES When it is necessary for a standing operator to see over the top, console height (with or without annunciator panels) should not exesed 58 inches.

b. CONTROL HEIOHT - (Exhibits 6.1-5 and 6.1-6)

M NO 2 AB*-3024 7 (1) The highest control on a stand-up console should be within the highest reach of the 5th percen-tile female without stretching or using a stool, ladder, etc.

(2) The lowest controls on a stand-up M YES console should be within the lowest reach of the 95th percen-tile male without bending or stooping.

c. BENCHBOARD SLOPE - 1he bench- M NO 28**-1401 7 board slope, in conjunction with its depth, should result in all controls being within the reach radius of the 5th per-centile female, as illustrated in Exhibit 6.1-6.

d. CONTROL DISTANCE FROM THE FRONT EDOE OF THE CONSOLE M NO 2 ES *-3020 $

(1) Controls should be set back a minimum of 3 inches from the front edge to protect against 2B * *-1402 5 accidental activation. L No control should be more than 25 M NO 2ES*-1408 7 (2) inches from the front edge of the 2B*

• 1401 7 console. This accommodates the 2 AB*-3024 7 maximum reach of the 5th per-centile female adult as litustrated in Exhibit 6.1-6.

3-7

TABLE 3-2 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENERATED Page 2 of 9

-- / J/ /

6.1.2.2 (Cont'd)

e. DISPLAY POSITIONING -(Exhibit 6.1-7)

(1) D5 PLAY HEIGHT AND ORIEN-TATION (a) All displays, including annun- M YES clator tiles, should be mounted so that they are within the upper limit of the visual field (750 above the horizontalline of sight) of the 5th percentile female.

(b) In addition, all displays and M YES annunciators should be mounted so that the angle from the line of sight to the face plane is 450 or greater.

The 5th percentile female determines the upper limit.

The 95th percentile male determines the lower limit.

M NO 2V '-2116 9 Covered in (2) HORIZONTAL DISPLACE-MENT - The oblique angle from 2V"-2120 9 TP-3.1 the line of sight to a display ( # 6.3.3.5 a) located to either side of the working position from which the display must be read should be at least 450 This includes annun-clator tiles, which should be read-able from the acknowledge button. (See Exhibit 6.1-8.)

f. LATER AL SPREAD OF CONTROIA M YES AND DISPLAYS - The operator should D be able to perform task sequences at a given work station with minimum respositioning. The amount of operator movement required depends on the arrangement of controls and displays, not simply on the lateral dimensions of the segments of the controlboard.1he maximum lateral spread of controls and displays at a single operator work station should not exceed 72 inches.

3-8

TABLE 3-2 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENERATED Page 3 of 9 s-- / J/ /

6.1.2.2 (Cont'd)

g. POOT ROOli - Enough foot room is M NO 2B'-1403 9 needed to allow the operator to get close to the board without leaning. A clearance of 4 inches vertically and 4 inches horizontally is recommended.

4.1.2.3 SIT-DOWN CONSOLE DIMEN8 IONS 0 CONSOLE HEIGHT TO SEE OVER If the seated operator must see N/A N/A No sit down (1) consoles over the console, the console height should be no more than approximately 27 inches above the seat to accommodate the 5th percentile adult female. Assum-ing seat height adjusted to 18 inches, maximum console height should therefore be 45 inches above the floor.

See-over console heights above 45 N/A N/A No sit down (2) consoles inches may be acceptable, for example, where the seated operator need only monitor (not read) status lights and annun-clators beyond the console, if they are at a suitable distance and helght. ,

N/A N/A No sit down

b. CONTROL HEIGHT - All controls on a consoles sit-down console should be within the reach radius of the 5th percentile female. Measurements should be made using seated shoulder height with the shoulder in line with the leading edge of the benchboard. Bis is 111ustrated in Exhibit 6.1-9.

N// N/A No sit down

c. BENCMBOARD SLOPE - De bench- consoles board slope, in conjunction with its depth, should be such that all controls are within the functional reach radius of the 5th percentile female (as illu-strated in Exhibit 6.1-9) and all displays and markings can be read.

3-9

TABLE 3-3 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENERATED Page 4 of 9

/,

-- / r/ /

601.2.3 (Cont'd)

d. CONTROL DISTANCE FROF THE FRONT EDGE OF THE CONSOLE N/A N/A No sit down (1) Controls should be set back a consoles minimum of 3 inches from the front edge to protect against accidental activation.

Other controls may be mounted as N/A N/A No sit down (2) consoles far back as 25 inches from the console edge. Bis distance accommodates the extended func-tional reach of the 5th percentile as cefined.

e. DISPLAY POSITIONING All displays, including annunciator N/A N/A No sit down (1) consoles tiles, should be mounted so that they are within the upper limit of the visual field - 750 above the horizontal 11ne of sight - of the 5th percentile female (see Exhibit 6.1 -10).

In addition, all displays should be N/A N/A No sit down (2) consoles mounted so that the angle from the line of sight to the display <

face plane is 450 or greater (see Exhibit 6.1-10). De 5th percen-tile female determines the upper limit. (Practically, there is no lower limit for a plausible sit-down console design.)

f. LATRE AL SPREAD OF CONTROLS AND DSPLAYS - (Exhibit 6.1-11)

For control and monitoring N/A N/A No sit down (1) consoles actions that must occur in sequence, al1 necessary controls and displays should be within the maximum extended reach and the viewing range of the seated operator from a single reference polnt.

3-10 l

TABLE 3-2 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENERATED Page 5 of 9 s.- / J/ /

6.1.2.3f (Cont'd)

N/A N/A No sit down (2) For the situation described in consoles item 1, above, and sustained or precise control action, the operator should be able to reach the controls without having to

bend / stretch significantly, N/A N/A No sit down

g. LEG AND FOOT ROOM - Suffielont consoles leg and foot room should be provided to enable seated operators to avoid awk-ward and uncomfortable positions.

' Exhibit 6.1-12 shows the dimensions involved and gives minimums and 1

ranges necessary to accommodate the 5th to 95th percentiles (as defined in Exhibit 6.1-5).

h. WRITING SPACE ON CON 8 OLES -

Writing space may be needed by operators working at consoles.

An area at least 16 inches deep N/A N/A No sit down (1) consoles 1 . and 24 inches wide is recom 4 mended where these dimensions in the totalconfig; ration would fit operator reach capabilities. Less space may be adequate consider-ing the frequency and duration of writing requirements at control room consoles.

If writing space is provided on the N/A N/A No sit down (2) consoles console itself, it should not inter fore with viewing and manipu-lation of controis and displays.

If writing is necessary but space N/A N/A No sit down (3) consoles on the console is not available, other arrangements such as a nearby desk or table should be provided.

3-1I

TABLE 3-2 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENERATED Pere 6 of 9 s-- // d/ /

6.1.2.4 SIT-STAND WORK STATIONS N/A N/A No sit-stand

c. CONTROL AND DBPLAY POE- stations TIONING - The height and lateral limits for controls and displays should conform to the guidelines given for stand-up consoles (Guideline 6.1.2.2).

N/A N/A No sit-stand

b. CHAIR HEIGHT - The operator should stations be provided with a high chair so that the seated eye height is approximately the same as standing eye height.

N/A N/A No sit-stand

c. KNRM ROOM - Knee room and com- stations fortable foot support should be pro vided.

8.1.2.5 VERTICAL PANEL 8

c. CONTROL HEIGHT M NO 2VC6-1404 9 (1) Controls should be placed in an

• area between 34 inches and 70 inches above the floor.

M NO 2VC6-1404 9 (2) Controls requiring precise or frequent operation and emergency D controls should be placed in an area between 34 inches and 53 inches above the floor,

b. DEPLAY HEIGHT M NO 2V * *-1405 5 (1) Displays should be placed in an area between 41 inches and 70 HED incorrect i 2V * *-1407 -

inches above the floor. 1 M NO 2V * *-1405 5 (2) Displays that must be read fre-quently or precisely should be HED incorrect placed in an area between 50 2V * *-1407 -

inches and 65 inches above the floor.

3-12

I TABLE 3-2 I ANTHEOPOMETRY SURVEY PINDINGS & HRrk GENRR ATED Pane 7 of 9

~

// si i  :

6.7.2 CATHODE RAY TUBE (CET) DIS-PLAYS 6.7.2.3 OPERATOR-DISPLAY RELATION-SHIPS

a. VIEWING DISTANCE - Viewing dis- M YES tance should be greater than 18 inches.

VIEWING ANGLE - The minimum M YES Sit-station

b. CRTs angle between the operator's actual line-of-sight (LOS) as measured from the operator's normal work station, and M NO 2V"-1406 9 Vertical the plane of the displa'y screen should panel CRTs be 450 or greater in either the horizontal or vertical direction. See Exhibits 6.7-8 and 6.7-10.

c. SCREEN LOCA110N, SEATED OPERATOE8 (1) CRT displayw which require fre- M YES quent or continuous monitoring, D or which may display important (e.g., alarm) information, should i be located within the following limits as measured from the nor-mal operator work station (see Exhibit 6.7-9):

(a) Horizontallimits - Not more M YES than 350 to the lef t or right of D the operator's straight-ahead LOS.

(b) Verticallimits - Not more M YES than 200 above and 400 below the operator's horizontal LOS.

l (2) CRT displays which do not require M YES frequent or continuous monitor-ing, and which will not display important (e.g., alarm) Infor-I mation, should be located within ,

the following limits.

(a) Horizontallimits - Not more M YES than 950 to the left or right of the operator's straight-ahead LOS.

3-13 l

TABLE 3-2 ANTHROPOMETRY SURYRY FINDINGS & HEDs GENER ATED Page 8 of 9

.-- / J/ /

4.7.2.3e (Cont'd)

(b) Verticallimits - Not more M YES than 700 above and 900 below the operator's horizontal LOS.

d. SCREEN LOCATION, STANDING OPERATORS (t) CRT displays which require fre-quent or continuous monitoring, or which may display important (e.g., alarm) Information, should be located within the following limits as measured from the nor-mal operator work stations (a) Horizontallimits - Not more M YES than 350 to the left or right of D the operator's straight-ahead LOS.

(b) Verticellimits - Not more M YES than 350 above and 250 below D the operator's horizontal LOS.

(2) CRT displays which do not require frequent or continuous monitor-ing, and which will not display important (e.g., alarm) Infor-mation, should be located within the following limits (hs measured from normal operator work stations which permit full operator head and eye rotation):

(a) Horizontal 11mits - Not more M YES than 950 to the left or right of the operator's straight-ahead LOS.

(b) Vertical 11mits - Not more M YES than 850 above and 900 below the operator's horizontal LOS.

l 3-14 f

. ., - . . . . m -

TABLE 3-2 ANTHROPOMETRY SURVEY FINDINGS & HEDs GENERATED Page 9 of 9

-- // J/ /

6.7.2.3 (Cont'd)

e. MOUNTING IN CONSOLES - When M YES CRTs are permanently mounted in con soles, the console configuration, dimensions, and type of use (such as seated, sit-stand, or standing) affects the CRT/ operator interface. Consoles in which CRTs are installed should con-form to the guidelines of Section 6.1.2.

f. VIEl881.lTY OF DATA - All data and O YES messages on the CRT screen should be within the unobstructed view of an operator et the normal work station.

t l

e i

e i

' 3-15 i

i

3.3 Annunciator Survey This section docunents the results of the annunciator survey conducted in the main control roon at SVPS-2. This review was conducted in accordance with the requirenents of NUREG-0700, as specified in the BVPS-2 DCRDR Program Plan.

3.3.1 Objectives The objectives of the annunciator survey were to:

a. Assess the degree to which the annunciator systen in the control roon confonns to the criteria in NUREG-0700,

b. Identify and document any features of the annunciator systen that do not confonn to the criteria in NUREG-0700.

3.3.2 Scope The scope of the effort extends to the assessnent of the annunci-ator systen design in the main control roon at BVPS-2 using the applicable guidelines as stated in NUREG-0700. The topics evaluated include:

o General systen design o Alann paraneter selection o First out annunciators o Prioritization o C1 eared alarms o Signal detection o Auditory coding o Visual annunicator panels o Visual alann recognition and identification o Arrangenent of alann tiles o Tile legends o Tile readability o Annunciator controls.

3.3.3 Criteria The criteria applied in this survey, identified by NUREG-0700 para Sa paragraphs 6.3.1.1; 6.3.1.2a throu h d(2) graph nunber, are:; 6.3.1.3a through d; 6.3.1.4a and b; 6.3.1.5a; thro 6.3.2.la through f; 6.3.2.2a and b; 6.3.3 la through b(2 ;

6.3.3.2a through f.(2a) 6.3.3.3a through f; 6.3.3.4a through c; 6.3.3.5athroughd(6);6.3.4.lathroughd(2);6.3.4.2athroughc; 6.3.4.3a and b; 6.5.1.6a through d(3); and 6.6.6.2a, b, and c.

The detailed definitions for each criterion are presented in Table 3-3.

3-16

3.3.4 Method 3.3.4.1 D a_t,a_,C,o,l l_ec t i on

a. Data were collected using the checklists contained in the annunciator task plan,

b. Data were collected pr i.aarily through measurenent and direct oburvation of tne annunciator systen in the control roon. As necessary, systen docunenta-tion (e.g., P& ids, electrical drawings, annunciator design docunents) were reviewed to aug:nent and corroborate observations and interviews.

3.3.4.2 Analysis -- Data were analyzed according to the follow-ing procedure:

a. All deviations fron the criteria were recorded on HED reports. Recorded infonnation included the con-ponents or systen involved a description of the problen including the NUREG-0700 paragraph nunber of the criteria, and a reconinended solution.

b. The data collection description was also recorded on the HED fonn. Where data fran two or more sources were contradictory, resolution of the conflict was achieved through data review and discussions with cognizant DLC personnel.

c. Upon conpletion of all analyses, the criteria of the annunciator task plan were annotated to indicate conpliance or nonconpliance with the criteria.

3.3.5 Findings The findings of the annunciator survey are presented in Table 3.3

" Annunciator Survey Findings and HEDs Generated." Overall, 98 criteria were applied to the annunciator systen in the BVPS-2 control roon. Since some features of the control roon were not conplete at the time of the survey,12 (12%) of the criteria were unable to be assessed (UTA). These criteria include: 6.3.1.2a-(1), (2), b(1), (2), c(2) and d(1), (2); 6.3.1.3a(3); 6.3.3.2c; 6.3.4.1d(2); 6.3.4.3a and b. Of the criteria assessed, 14 (14%)

were not applicable, 50 (51%) were not violated, and 22 (22%)

were violated. A total of 19 HEDs were generated sich docunent all of the 22 criteria which were not met. In general, those HEDs address auditory signals, annunciator controls, distinctive coding of annunciator tiles, nuisance alanns, alann messages, multi-input alanns annunciator response procedures, and annunci-ator tile grouping and prioritization.

3-17

_ . _ _ __ __ _ . .- - _ - _ - . y _

l 1

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & Hens GENERATED Paare 1 of 14 svenues t/ ./

., 8#/ c

} /

l 6.3.1.1 GENERAL SYSTEM DESIGN Annunciator warning systems are the primary O NO 2* " -2121 9 Validation, control room interface to immediately alert TP-9.2 the operator to out-of-tolerance changes in plant condition. Annunciator warning sys-tems consist of three major subsystems: (a) an auditory alert subsystem, (b) a visual alarm subystem, and (c) an operator response '

subsystem (see Exhibit 6.3-1). Together, these three subsystems should be designed to provide a preferred operational sequence for x annunciator warnings as indicated in Exhibit 6.3.2 4.3.1.2 ALARM PARAMETER SELECTION

a. SET POINTS 'The limits or set points for initiating the annunciator warning system should be established to meet the following goals:

(1) Alarms should not occur so fre- UTA UTA Data not quently as to be considered a available nuisance by the operators.

(2) However, set points should be UTA UTA Data not established to give operators available adequate time to respond to the warning condition before a serious problem develops.

b. GENERAL ALARMS -

(1) Alarms that requ're the control UT/ UTA Data nok room operator to direct an available auxiliary operator to a itven plant location for specific information should be avoided.

(2) If general alarms must be used, UT/ UTA Data not they should only be used for con- available ditions that allow adequate time for aux 111ary operator action and .

subsequent control room operator action.

l l

3-18

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 2 of 14

- .. // s/ /

l 6,3.1.2 (Cont'd)

c. MULECHANNEL OR SH ARED

- ALARMS -

Annunciators with inputs from N/A N/A Individual (1) more than one plant parameter alarms will set point should be avoided. be displayed Multi-input alarms that sum- on CRT (next marize single-input annunciators to annunciator elsewhere in the control room are panet) an exception.

Where multi-input annunciators UTA UTA Data not (2) available must be used, an alarm printout capability should be provided.

The specifics of the alarm should be printed on an alarm typer with sufficient speed and buffer storage to capture all alarm data.

(3) A reflash capability should be O YES provided to allow subsequent alarms to activate the auditory

. alert mechanism and reflash the visual tile even though the first alarm may not have been cleared.

d. MULTI-UNIT ALARMS -

(1) Alarms for any shared plant sys- UTA UTA Data not tems should be duplicated in all available control rooms.

(2) When an item of shared equip UTA UTA Data not ment is being operated from one available control room a status display or signal should be provided in all other control rooms which could potentially control this equip-ment.

6.3.1.3 FIRST OUT ANNUNCIATORS

c. REACTOR SYFTEM - ,

(1) A separate first out panel should O NO 2VA5-2103 5 be provided for the reactor sys tem.

3-19

t TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 3 of 14 sweetuut / 8 6.3.1.3a (Cont'd)

(2) The first out panel should consist O NO 2VAS-2104 -

HED incorrect of separate annunciator tiles for each of the automatic reactor, trip functions.

In the event of a reactor trip, the UTA UTA Data not (3) tile associated with the event available should illuminate, and no other.

b. TURBINE-GENERATOR SYSTEM - A O NO 2VA5-2103 5 separate first out panel, similar in function to the reactor system panel,is recommended.

c. POSITION - First out panels should be O YES located directly above the main control work station for the system.

d. APP 1JCATION - First out annun O YES 2VA5-2104 -

HED incorrect clators should conform to the general -

auditory, visual, and operator response guidelines of this section.

6.3.1.4 PRIORITIZATION .

A. LEVEIA OF PRIORITY -

(1) Prioritization should be accom O NO 2V * *-2115 7 plished using a relatively small (2-4) number of priority levels.

)

(2) Prioritization should be based on N/A N/A No a continuum of importance, priorization severity, or need for operator action in one or more dimensions, e.g.,likelihcod of reactor trip, release of radiation. Exhibit 6.3-3 provides an example of prioritization based on three levels of prioritization..

l l

3-20

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 4 of t4 l smotune 8 8#

623.1.4 (Cont'd)

b. PRIORITY CODING -

(1) Some method for coding the N/A N/A No priority visual signals for the various coding priority levels should be employed. Acceptable methods for priority coding include color, position, shape, or symbolic cod-ing.

(2) Auditory signal coding for priority N/A N/A No priority

. levelis also appropriate. See coding Guideline 6.2.2.3 for recom-mended coding techniques.

6.3.1.5 CLEARED ALARMS

c. AUDITORY SGNAL - Cleared alarms O YES should have a dedicated, distinctive audible signal which should be of finite duration.

b. VISU AL MON AL '!he individual tile should have one of the following:

(1) A special flash rate (twice or N/A N/A See (3) below one-half the normal flash rate is preferred, to allow discrimi-nation), or (2) Reduced brightness, or N/A N/A See (3) below (3) A special color, consistent with O YES the overall control room color coding scheme, produced by a differently colored bulb behind the tile.

6.3.2.1 SIGNAL DETECTION

c. INTENSITY 'Ihe signal should be M YES such that operators can reliably discern the signal above the ambient control room noise. A nominal value of 10 dB(A) above average ambient noise is generally adequate.

3-21

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 5 of 14 s- l/ s i /

6.3.2.1 (Cont'd)

CONTROL - Signal intensity, if O YES Procedure

b. to be written adjustable, should be controlled by administrative procedure.

c. LIMITS - De signal should capture the O YES operator's attention but should not cause irritation or a startled reaction.

d. DETECTION - Each auditory signal O YES should be adjusted to result in approxi-mately equal detection levels at normal operator work stations in the primary operating area.

e. RESET - De annunciator auditory 0 YES alert mechanism should automatically reset when it has been silenced.

f. IDENTIFICA110N - ne operator O YES l should be able to identify the work station or the system where the audi- i tory alert signal originated. Separate auditory signals at each work station l within the primary operating area are recommended.

6,3.2.2 AUDITORY CODING l

t. LOCALIZA110N t

Auditory coding techniques should N/A N/A Auditory l (1) be used when the operator work coding station associated with the alarm not used is not in the primary operating area.

(2) Coded signals from a single audio O YES source should not be used to identify individual work stations within the primary operating area.

PRIORITIZATION - Coding may be N/A N/A AudLtory b.

used to indicate alarm priority. (See coding Guideline 6.3.1.4.) not used l

3-22 l

T ABLE 3-3

- ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 6 of 14

~

- l/ si /

6,3.3.1 VISUAL ANNUNCIATOR PANELS

a. LOCATION - Visual alarm panels O YES should be located above the related controls and displays which are required for corrective or diagnostic action in response to the alarm. (See Exhibit 6.3 -4.)

b. LABELING-(1) Each panel should be identified by 0 YES a label above the panel.

(2) Panel identific'ation label height M YES l

should be consistent with a sub- l tended visual angle of a least 15 '

minutes when viewed from a cen-tra1 position within the primary operating area.

6.3.3.2 VISUAL ALARM RECOG AND IDENT O YES l

a. FLASHING - The specific tile (s) on an

- annunciator panel should use flashing I illumination to indicate an alarm con-dition.

b. FLASH RATE - Flash rates should be M YES from three to five flashes per second with approximately equal on and off times.

c. FLASHER FAILURE - In case of UT/ UTA Data not l flasher failure of an alarmed tilt, the available I tile light should illuminate and burn steadily.

d. CONTRAST DETECTABILITY 'Ihere O YES 1 should be high enough contrast between l alarming and steady-on tiles, and between illuminated and nonilluminated tiles, so that operators in a normally illuminated control room have no pro-blem discriminating alarming, steady-on, and steady-off visual tiles.

3-23

T ABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 7 of 14 suiotunt / 8 e 6,3.3.2 (Cont'd)

O YES f

e. " DARK" ANNUNCIATOR PANELS - A '

" dark" annunciator panel concept should  ;

be used. This means that under normal ,

operating conditions no annunciators l would be illuminated; all of the visual tiles of the annunciator panels would be

" dark."

f. EXTENDED DURATION ILLUMI-N ATION - If an annunciator tile must be "ON" for an extended period during normal operations (e.g., during equip-ment repair or replacement), it should be Distinctively coded for positive N/A N/A Procedure (1) recognition during this period, and to be written Controlled by administravie O YES Procedure (2) to be written procedures. D 6.3.3.3 ARRANGEMENT OF VIBUAL ALARM TILES

t. MATRIX ORGANIZATION - Visual O YES alarms should be organized as a matrix of visual alarm tiles within each annunciator panel.

b. FUNCTION AL GROUPING - Visual D YES alarm tiles should be grouped by function or system within each annun-clator panel. For example area radi-ation alarms should be grouped on one panel, not spread throughout the con-

) trol room.

c. LABELING OR AXES -

(1) The vertical and horizontal axes O YES of annunciator panels should be labeled with alphanumerics for ready coordinate designation of a particular visual tile.

3-24

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 8 of 14 smotunt / 8/ c 6,3.3.3c (Cont'd)

(2) Coordinate designation is O NO 2V "-2105 9 preferred on the left and top sides of the annunciator panel.

(3) Letter height for coordinate O YES designation should be consistent with a subtended visual angle of at least 15 minutes as viewed from a central position within the primary operating area.

d. PATTERN RECOGNITION -

(1) The number of alarm tiles and the O NO 2V"-2106 7 matrix density should be kept low (a maximum of 50 tiles per matrix is suggested).

(2) Tiles within an annunciator panel D YES matrix should be grouped by sub-system, function, or other logical organization.

c. O T-OF-SERVICE ALARMS - Cues D YES for prompt recognition of an out-of-service annunciator should be designed into the system.

f. BLANK TILES - Blank or unused O YES 2BSP-2107 5 HED Incorrect annunciator tiles should not be illumi nated (except during annunciator testing) 1 6.3.3.4 VISUAL TILE LEGENDS

c. UNAMBIGUOUS - Annunciator visual O NO 2V"-2108 7 I tile legends should be specific and unambiguous. Wording should be in 1

concise, short messages.

b. SINGULARITY - Alarms which refer D YES the operator to another, more detailed annunciator panellocated outside the primary operating area should be mini-mized.

3-25

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 9 of 14

.- l/ s i /

6.,3.3.4 (Cont'd)

c. SPECIFICITY - Tile legends should O NO 2V '-2109 7 address specific conditions; for D example, do not use one alarm for HIGH-LOW, TEM PERATU RE-PRES-SURE.

6.3.3.5 VISUAL TILE READABILITY

a. DISTANCE - De operator should be able to read all the annunciator tiles from the position at the work station

• where the annunciator acknowledge control is located.

(1) Letter height should subtend a M NO 2V"-2116 9 minimum visual angle of 15 2V"-2120 9 minutes, or .004 x viewing distance. The preferred visual angle is 20 minutes, or .006 x viewing distance.

(2) Letter height should be identical M YES for all tiles, based on the maxi-mum viewing distance. Separate calculations should be made for stand-up and sit-down work stations.

b. TYPE STYLE - De size and style of lettering should meet the following:

(1) Type styles should be simple. O YES (2) Type styles should be consistent O YES on all visual tiles.

(3) Only upper-case type should be O YES used on visual tiles.

c. LEGEND CONTRAST - Legends should provide high contrast with the

! tile background.

(1) Legends should be engraved. O NO 2VC *-2110 7 l

l (2) Legends should be dark lettering O YES l on a light background.

3-26

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 10 of 14

~

._ i/ si /

6,3.3.5 (Cont'd)

d. LETTER DIMENSIONS AND SPAC-ING -

(1) S troke -w id th -to -ch arac te r-he igh t M NO 2V"-2112 7 ratio should be between 1:6 and 1:8. ,

1 (2) Letter width-to-height ratio M YES ,

1 should be between til and 3:5.

(3) Numeral width-to-height ratio il YES shotild be 3:5.

(4) Minimum space between char- M YES acters should be one stroke width.

+

(5) Minimum space between words M NO 2V"-2113 7 should be the width of one char acter.

(6) Minimum space between lines M NO 2V"-2114 7 l

should be one-half the character height.

6.3.4.1 CONTROIE (See Exhibit 6.3-5.)

o. SILENCE -

(1) Each set of operator response O YES controls should include a silence control.

(2) It should be possible to silence an O YES I auditory alert signal from any set l of annunciator response controls l In the primary operting area. 1 1

b. ACKNOWLEDGE (1) A control should be provided to O YES )

terminate the flashing of a visual tile and have it continue at steady illumination until the alarm is .

cleared.

3-27

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 11 of 14

~

- .. / / si /

6,3.4.1 (Cont'd)

(2) Acknowledgement should be pos- D YES sible only at the work station where the alarm originated.

c. RESET (1) If an automatic cleared alarm O YES feature is not provided, a control should be provided to reset the system after an alarm has cleared.

(2) The reset control should silence D YES any audible signalindicating clearance and should extinguish tile illumination.

(3) The reset control should be effec- D YES tive only at the work station for the annunciator panel where the alarm initiated.

d. TEST (1) A control to test the auditory 0 YES signal and flashing illumination of all tiles in a panel should be pro-vided.

(2) Periodic testing of annunciators UTA UTA Data not should be required and controlled available by administrative procedure.

6:3.4.2 CONTROL SET DESIGN

c. POSITIONING OF REPETT11YR O NO 2B"-2117 7 GROUPS - Repetitive groups of annunciator controls should have the same arrangement and relative location at different work stations. This is to facilitate ' blind" reaching,

b. CONTROL CODING - Annunciator .

response controls should be coded for easy recognition using techniques such as:

3-28

TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 12 of 14 s-.. // J/ /

6,3.4.2b. (Cont'd)

(1) Color coding; N/A N/A No color coding (2) color shading the group of annun- 0 NO 2B * *-2118 7 clator controls; demarcating the group of annun O NO 2B * *-2118 7 (3) clator controls; or (4) shape coding, particularly the O NO 2B* *-2118 7 silence control. (See Exhibitor 6.3-5, Example 2.)

c. NONDEFEATABLE CONTROLS - O NO 2B"-2119 9 Annunciator control designs should not allow the operator to defeat the con-trol. For example, some pushbuttons used for annunciator silencing and acknowledgement can be held down by inserting a coin in the ring around the pushbutton. 'this undesirable design feature should be eliminated.

6.3.4.3 ANNNUCIATOR RESPONSE PROCEDURES

c. AVAILABILITY - Annunciator UT/ UTA Data not response procedures should be available available in the control room.

b. INDEXING - Annunciator response UT/ UTA Data not procedures should be indexed by panel available indentification and annunciator tile coordinates.

6.5.1.6 COLOR CODING

a. REDUND ANCY - In all applications of O YES color coding, color should provide redundant information. 'Ihat is, the pertinent information should be avail-able from some other cue in addition to color.

3-29

1 TABLE 3-3 ANNUNCIATOR SURVEY FINDINGS & HEDs GENERATED Page 13 of 14

.-.: / / if / /

l 6,5.1.6 (Cont'd)

b. NUMBER OF COLORS -

The number of colors used for O YES (1) coding should be kept to the mini-mum needed for providing suf-ficient information.

1he number of colors used for O YES (2) coding should not exceed 11.

c. MEANING OF COLORS -

(1) The meaning attached to a parti- O YES cular color should be narrowly defined.

Red, green, and amber (yellow) O YES (2) should be reserved for the fol-lowing uses:

Reds unsafe, danger, immediate operator action required, or an indication that a critical parameter is out of tolarance.

Green safe, no operator action required, or an indication that a parameter is within tolerance.

Amber (yellow): hazard (potentially unsafe), caution, attention required, or an indi-cation that a marginal value or parameter exists.

d. PRINCIPLES OF COLOR SELECTION (1) The primary principle which O YES should be applied in selecting colors for coding purposes which do not have the immediate safety implications'of red, green, and amber is to ensure that each color is recognized as different from any other. Exhibit 6.5-7 lists 22 colors of maximum contrast.

Each successive color has been selected so that it will contrast maximally with the color just preceding it and satisfactorily 3-30

TABLE 3-3 ANNUNCIATOR SURVEY PINDINGS & HEDs GENERATED Page 14 of 14 suetune f / /

6.5.1.6d(l) (Cont'd) with earlier colors in the list.

The first 9 colors have been selected so as to yield satis-factory contrast for red-green-deficient as well as color-normal observers. Die remaining 13 colors are useful only for color-normal observers.

(2)' Colors selected for coding should O YES contrast well with the background

'on which they appear.

l (3) Ambient lighting in the area in O YES whit.h color coding is used will l influence the apparent color of the coded element (especially for surface colors). Each color selected for coding should be evaluated under allillumination conditions under which it is used.

6.6.6.2 DEMARCATION

c. USE - Lines of demarcation can be used to:

(1) Enclose functionally related dis- D NO 2V"-2111 7 plays.

(2) Enclose functionally related con- N/A N/A Visually trols distinctive grouping used j (3) Group related controls and dis- N/A N/A )

plays.

b. CONTRAST - Lines of demarcation N/A N/A No demarca-should be visually distinctive from the tion used panel background.

c. PERMANENCE - Lines of demar N/A N/A No demarca-cation should be permanently attached. tion.used 3-31

3.4 ' Controls Survey This section docunents the results of the controls survey conducted in the main control roon, ESP, and ASP at BVPS-2. This review was conducted in accordance with the requirenents of NUREG-0700, as specified in the BVPS-2 DCRDR Program Plan.

3.4.1 Objectives The objectives of the displays survey were to:

a. Assess the degree to dich all controls in the control roan, ESP, and ASP confonn to the criteria in NUREG-0700.

b. Identify and docunent any features of the controls that do not confonn to the criteria in NUREG-0700.

3.4.2 Scope The scope of the effort extends to the assessment of the control design in the main control roon, ESP, and ASP at BVPS-2 using the appl icable guidelines as stated in NUR EG-0700. The control topics evaluated include:

o General principles of control design o Prevention of accidental activation o Direction of movenent o Coding of controls o Pushbutton design o Round pushbuttons o Legend pushbuttons o Rotary selector controls o J-Handle controls o Continuous adjustment rotary controls o Thunbwheels o Slide switches o Toggle switches o Separation of controls.

Several NUREG-0700 guidelines appropriate to controls are being considered as part of task analysis, and verification and valida-tion activities. These have, therefore, been incorporated into the verification and validation evaluation reports.

3.4.3 Criteria The criteria applied in this survey, identified by NUREG-0700 paragraph nunber, are: paragraphs 6.4.1.la(1) through c(2) and e(l) throu 6.4.1.2a through 6.4.2.la through h; through c(4), e, f(l) and g;f (3); 6.4.3.lb and c; 6.4.2.2c(1)gh-e(3);

6.4.3.2a through d; 6.4.3.3.b(1), through (5) and d(l) through e(5); 6.4.4.la; 6.4.4.2a and b; 6.4.4.3a through g(3); 6.4.4.4a 3-32

through e(5); 6.4.4.5a through f; 6.4.5.la through d(2)(e);

6.4.5.2a through b(2); 6.4.5.3a through c(6); 6.4.5.4a(1) through

-e(4); 6.5.1.6a through c(2) and e(1) through e(3); and 6.8.3.la through c. The detailed definitions for each criterion are pre-sented in Table 3-4.

3.4.4 Method 3.4.4.1 Data Collection

a. Data were collected using the checklists contained in the Controls Task Plan,

b. The majority of the data were collected through direct observation of controls in the control roon.

As necessary, measurenents were made of the physical characteristics (e.g., size, separation, displ ace-ment of the controls).

3.4.4.2 Analysis -- Data were analyzed according to the follow-ing procedure:

a. All deviations fron the criteria were recorded on HED reports. Recorded infonnation included the control or controls involved (e.g., rotary controls, pushbuttons,- J-Handle controls, etc.), a description of the problen including the NUREG-0700 paragraph nunber of the criteria, and a reconinended solution.

b. The data collection description was also recorded on the HED fonn. Where data fran two or more sources were contradictory, resolution of the conflict was achieved through data review and discussions with cognizant DLC personnel.

c. Upon conpletion of all analyses, the criteria of the controls task plan were annotated to indicate con-pliance or nonconpliance with the criteria.

3.4.5 Findings The . findings of the controls survey are presented in Table 3.4

" Controls Survey Findings and HEDs Generated." Overal l , 143 criteria were applied to the controls in the BVPS-2 control roon, ESP, and ASP. Since some features of the control roon were not conplete at the time of the survey, three (2%) of the criteria were unable to be assessed. These criteria include: 6.4.1.2d(2) and f; and 6.4.4.3e. Of the criteria assessed, 45 (31%) were not applicable, 76 (53%) were not violated, . and 19 (13%) were vio-l ated . A total of 21 HEDs were generated which document all of 3-33

z _ _- _ . . . _ _. ._ _ . . _ _ ._.

ic

-;/ .

/' the'-19 criteria . dich were not met. In general, those ' HEDs describe instances of accidental activiation of controls, incon-v sistent direction of movenent, pushbutton resistance, and control separation. ,.

l r

I L

I i

i I-p .

3-34

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 1 of 18

- t/ s t /

6.4.1.1 GENERAL PRINCIPLES

c. ADEQUACY -

(1) It should provide a sufficient D NO 2 AB *-3207 5 range of control. 2ES2-3208 5 2BB1-3013 7 HED Incorrect 2BA *-3014 9 Valid., TP-9.2 2 " *-3018 8 Verif., TP-9.2 2BC2-3019 8 Verif., TP-9.2 2BA4-3205 8 Verif., TP-9.2 2B"-3206 6 Verif., TP.9-2 (2) It should be easily adjusted with D NO 2BC3-3025 7 the required level of precision.

b. ECONOMY -

(1) There should be a good reason to D YES require a control for the function concerned.

(2) Duplication of controls should not D YES occur, except for a specific reason.

(3) The precision and range of a D YES control should not greatly exceed the need.

(4) Selected controls should be O YES economic of space.

l l

c. HUMAN SUTTABILITY -

(1) Each control should be recog- O NO 2ES4-3023 5 nizable in terms of its function.

(2) Each control should be of the type O NO 2ES4-3023 5 normally anticipated for the operation concerned. This means conforming to operator expectations, matching to other controls for the same function, and generally conforming to conventional practice.

3-35

TABLE 3-4 CONTROLS SURVEY FINDINGS & HE ENERATED Pare 2 of 18 sumust 8 / E 6.4.1.1 (Cont'd)

c. DURABILITY -

Broken, chipped, or crumbled O NO 2B A *-3201 8 l (1) control surfaces should not ordi-narily occur.

(2) Control knobs or handles should 1 YES not rotate, slip, or move loosely on their shafts.

.(3) No internal wear or breakage N/A N/A Controls are should occur which alters the unused

" feel" or other sensory feedback of a control. Controls should not develop internallooseness, binding, or backlash.

8.4.1.2 PREVENTION OF ACCIDENTAL ACTIVATION C. PROPER LOCA110N - Controls O YES should be located and oriented so that the operator is not likely to strike or move them accidentally in any sequence of control movements.

b. FIKED PROTECTIVE FTRUCTURES -

(1) Controls may be recessed, O YES shielded, or otherwise surrounded by physicalbarriers. (See Exhibit 6.4-1)

(2) The control should be entirely 0 YES contained within the envelope described by the recess or barrier.

c. MOVABLE CCsVERS OR OUARDS -

(1) Controls may be covered or N/A N/A Not on guarded with movable (e.g., panel hinged) barriers. (See Exhibit

• 6.4-2)

(2) Safety or lock wires should not be N/A N/A Not on used. panel l

l i

3-36 l

l TABLE 3-4 I CONTROla SURVEY FINDINGS & HE RRATED Pare 3 of 18 suiotune 8 E+ 8 l

6,4,1.2 (Cont'd) l

! (3) When the guard is in the open N/A N/A Not on position, it should not interfere panel l

l with the operation of the guarded l

control or other adjacent controls,

d. INTERLOCKING CONTROIE -

Controls may be provided with inter-locks so that:

(1) Extra movement is required (e.g., O YES a side movement out of a detent position or a pull-to-engage clutch).

(2) Prior operation of a related or UTA UTA Data not locking controlis required. available

c. REBISTANCE TO MOVEMENT - O YES Controls should be provided with resist-ance (e.g., friction or spring-loading),

so that distinct or sustained effort is required for activation.

f. SEQUEN11AL AC11VATION - When a UTA UTA Data not strict sequential activation is neces- available sary, controls should be provided with locks to prevent the controls from passing through a position. Further movement should require a new control action.

g. CHOICE OF AC110N - Rotary action O YES controls should be used in situations where linear or pushbutton controls would be subject to inadvertent activa-tion, and fixed protective structures are impractical or inappropriate.

8.4.2.1 DIREC110N OF MOVEMENT To minimize operator error, control

• m:vements should conform to the following population stereotypes (for U.S. population only):

c. ON, START, RUN, OR OPEN - Up, O NO 2B"-3403 7 right, forward, clockwise, or pull.

3-37

TABLE 3-4 CONTROIA SURVEY FINDINGS & HEDs GENERATED Pare 4 of 18

.- l/ si /

6,4.2.1 (Cont'd)

OFF, STOP, CLOSE - Down, lef t, O NO 2B' *-3403 7 b.

backward, counterclockwise, or push.

O YES

c. RIGHT(AS A FUNCTION)- Clockwise or right. .

O YES

d. LEFT(AS A FUNCTION)-Counter-clockwise or left.

RAISE - Up. O YES o.

f. LOWER - Down. - O YES INCREASE - Forward, up, right, or O NO 2BB2-3301 5 High safety

g. Importance clockwise. Valid., TP-9.2 DECREASE - Backward, down, left, or O NO 2BB2-3301 5 High safety

h. Importance counterclockwise. Valid., TP-9.2 8.4.2.2 CODING OF CONTROIA

c. SIZE CODING N/A N/A Size codiag (1) No more than three different not used sizes of controls should be used for discrimination by absolute size.

(2) Controls used for performing the O YES same function on different items of equipment should be the same size.

When knob diameter is used as a N/A N/A Diameter  :

(3) coding Not I coding parameter, differences used between diameters shc'J1d be at least 0.5 inch.

When knob thickness is a coding N/A N/A Thickness (4) coding not parameter, differences between used' thicknesses should be at least 0.4 inch.

I 3-38

l TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENER ATED Page 5 of 18 sviotunt 8 [

l _ 6.4.2.2 (Cont'd)

c. ROTATING KNOB SHAPE OPTIONS - O YES Retating knob controls for different types of control actions should be dis-tinguishable by sight and touch and not easily confused with each other.

i Exhibits 6.4-4 through 6.4-6 give examples of 15 suitable knob designs developed for three major classes of knobs, each class intended for a dif-ferent purposes multiple rotation, fractional rotation, and detent posi-tioning.

f. COLOR CODING (1) Color coding should follow the O YES recommendations of Guideline 6.5.1.6.

(3) The color of the control should O YES contrast with the panel back-ground. (See Guideline 6.1.5.6.e) 6.4.3.1 PUSHBUTION DESIGN PRINCIPLES

b. INDICA'ITON OF ACTIVA'110N - To O YES ensure that the operator knows that a pushbutton has been pressed far enough

. for activation, a positive indication should be provided in the form of a snap feel, an audible click, or an' integral light.

c. PUSRBUTION SURFACE - For best O YES operation, the surface of a pushbutton should offer slip resistance, or be concave.

6 4.3.2 ROUND PUSBBUT1DNS(See Exhibit

~

, 6.4-7)

c. Diameter (D), for fingertip operation l

(inches) l (1) Unguarded and nonrecessed push M YES

! buttons Minimum 0.385 i

l 3-39

TABLE 3-4 CONTROla SURVEY FINDINGS & HEDs GENERATED Page 6 of 18 l s_ // si /

l 6.4.3.2a (Cont'd) )

Guard $.1 or recessed pushbuttons N/A N/A No such (2)

Minimun C.75 equipment i b. Diameter (D), for tnumb or heel of hand M YES l operation (inches)

Minimum 0.75

c. Displacement (A), for thumb or finger M YES  ;

operation (in:hes) 1 1

Minimum 0.125

d. Resistance (R), for fingertip operation M YES (ounces)

Minimum 10 Maximum 40 6.4.3.3 LEGEND PUSHBUTFONS

b. LEGEND (1) The legend should be readable O YES under ambient light conditions, with or without internalillumina-tion.

(2) The illuminated condition should O YES be clearly recognizable under the ,

1 highest predicted ambient light l condition and should be at least 10% brighter than the surrounding I panel. l (3) Legend lettering and contrast N/A N/A Covered in should conform to recommenda- TP 5.1 (see 6.5.3.3) tions for legend lights (Guideline 6.5.3.3).

(4) The legend message should be O YES specific, unambiguous, and concise.

(5) The legend message should con- O NO 2BC2-3401 9 tain no more than three lines of lettering.

3-40

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Pare 7 of 18

.- // si /

6.4.3.3 (Cont'd)

d. BARRIERS (1) Barriers should be used when O NO 2BC2-3402 7 legend pushbuttons are contiguous.

(2) Barriers should have rounded N/A N/A No barriers edges, used

e. LEGEND PUSHBUTTON

. DIMENSIONS - For maximum effectiveness of legend pushbutton controls, the following dimensions should be used (see Exhibit 6.4.8):

(1) Size (S)(inches) M YES Minimum 0.75 Maximum 1.5 (2) Displacement (A) (inches) M YES Minimum 0 (touch plate)

Minimum 0.125 (all others)

Maximum 0.250 (3) Barrier width (Bw)(inches) M YES 2VC8-3404 9 HED Incorrect Minimum 0.125 (4) Barrier depth (Bd)(inches) M YES Minimum 0.183 Maximum 0.250 (5) Resistance (ounces) M YES Minimum 10 (except touch plate)

Maximum 40 6.4.4.1 ROTARY CONTROL DEEGN PRINCIPLES

c. DIREC110N OF AC11VA110N -Rotary 0 YES control settings should increase in value with a clockwise rotation.

6.4.4.2 J-HANDLES

a. HIGH-TORQUE DESIGNS - J-handles i should conform to dimensions as follows (see Exhibit 6.4-9):

(1) Length (L)(inches) M YES Minimum 3.75 Optimum 4.0 3-4I l

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 8 of 18 s- l/ si /

6 4.4.2a (Cont'd)

M YES (2) Clearance (C)(inches)

Minimum 1.0 Optimum 2.0 O YES

b. LOW-TORQUE DESIGNS - For certain purposes, smaller scale J-handles may be used. In such cases the handle proportion usually has a flattened or flared tip for finger placement, and the clearance between handle and panel surface can be less.

6.4.4.3 KEY-OPERATED CONTROLS USE - Key-operated controls should be D NO 2BB'-3015 5 c.

used when system requirements dictate Valid., TP-9.2 that the function being controlled should be secured against activation by unauthorized personnel. If key-oerated controls cannot be justified in terms of security, they are probably not necessary and should ot be used. Key-operated switches should not be used solely as a means of shape coding.

O NO 2BC2-3202 9

b. TERTH: SINOLE ROW - Keys with a single row of teeth should be inserted into the lock with the teeth pointing up or forward,

c. TErfH DOUBLE ROW - If keys have N/A N/A teeth on both edges, they should fit the lock with either side up or forward.

O NO 2BC2-3203 9

d. ON-OFF ORIENTA110N - Imks should be oriented so that the switch is OFF (or SAFE) when the key is in the vertical position.

UTA UTA Data not

c. KEY REttOVAL - Operators should available not normally be able to remove the key

! from the lock unless the switch is -

turned to the OFF or SAFE position.

f. LABELINO - Control positions should O YES f

be labeled.

l 3-42 o __. __ __. _

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 9 of 18 s.s - // J/ /

6.4.4.3 (Cont'd)

g. KEY-OPERATED CONTROL DIMENSONS - The following dimensions should be used for key-cperated controls (see Exhibit 6.4-10).

Displacement (A)(degrees) M NO 2BC2-3901 9 (1)

Minimum 800 Maximum 900 (2) Height (H) (inches) M YES Minimum 0.5 '

Maximum 3.0 Resistance (inch / pounds) N/A N/A Data not (3) available Minimum 1.0 Maximum 6.0 6.4.4.4 CON 11NUOUS ADJUWFMENT ROTARY CONTROL 8 - To ensure precise control along a continuous variable, con-tinuous adjustment rotary controls are appropriate.

c. KNOBS - Knobs for continuous adjust- O YES ment controls should be round in shape, with knurled or serrated edges,

b. POSmON DIDICATION - When an O YES indication of position is desirable, the pointer configurations shown in Exhibit 6.4-11 may be used. Where more accuracy engraved and(is required, a line should be filled with contrasting pigment) both on top and down the side of the pointer, as shown on the knob at the bottom of the exhibit.

c. DDdENWONS (1) Fingertip grasp knobs should con-form to the following dimensions:

(a) Height (inchec) N/A N/A No such equipment Minimum 0.5 Maximum 1.0 3-43

TABLE 3-4 CONTROLE SURVEY FINDINGS at HEDs GENERATED Page 10 of 18

.- l/ si /

6.4.4.4e (Cont'd)

(b) Diameter (inches) N/A N/A No such Minimum 0.375 equipment Maximum 4.0 Thumb and forefinger encircled N/A N/A No such (2) equipment knobs should conform to the following dimensions:

Diameter (Inches)

Minimum 1.0 Maximum 3.0 TORQUE - Knob torque should be N/A N/A No problem

d. controlling within the range of 4.5 to 6.0 inch / ounces.

c. CON'11NUOUS ADJUWFMENT ROTARY CONTROLS WrrH RNOB SEIR'f5 - If knob skirts are used, such controls should conform to approximately the following dimensions. See Exhibit 6.4-12.

(1) Skirt diameter (DS): 2.0 inches. M NO 2" " -3001 9 (2) Skirt height (Hs): 0.25 inch. M YES (3) Finger stop diameter (DF ): 1.25 M YES inches.

(4) Finger stop height (HF) plus M YES rotary knob height (H K ): total 0.75 inch. ,

(5) Knob diameter (DK): 0.75 inch. M YES 6.4.4.5 ROTARY SELEC10R CONTROLS l O YES j

c. SELEC110N - Rotary selector con-trols should be used when three or more detented positions are required, and may be used for two-detented position

• operation.

3-44 l

TABLE 3-4 CONTROIE SURVEY FINDINGS & HEDs GENERATED Pare 11 of 18 s - .. // d/ /

{

6.4.4.5 (Cont'd)

b. POSITIONING (1) To ensure proper positioning of a O YES discrete rotary control, detents should be provided at each control position.

(2) It should not be possible to post- O YES tion a control between detented positions.

(3) A maximum of 24 positions should O YES be used on a rotary selector control.

(4) To minimize the possibility of O YES placing a rotary selector control in an unused position, stops should be provided at the limits of the control range.

c. RRADABILITY - To maximize read (/A N/A No scales ability, rotary controls should have a moving pointer and fixed position settings.

d. POSITION INDICA 110N (1) Position indication should be provided. Desirable alternatives ares (a) Illuminated indicator lights, O YES i

(b) A line engraved both on the )T/A N/A None in top of the knob and down the CR ,

side, or I (c) A pointer shape. O YES (2) It should not be possible to con- O YES l l fuse the position of the knob in reference to position markers on the panel. To minimize the problem of parallax, pointers on '

knobs should be mounted close to the settings to which they point.

l 3-45 l

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 12 of 18

. - .: / / si /

624.4.5 (Cont'd)

c. DIMENSIONS - Recommended dimensions for rotary selector switches are as follows (see Exhibit 6.4-13):

(1) Length (L) (inches) M YES Minimum 1.0 (2) Width (W) (inches) M YES Maximum 1.0

.(3) Diameter (D) (inches) M YES Minimum 1.0 (4) Depth (H) (inches) M YES Minimum 0.625 (5) Resistance (inch / pounds) M YES Minimum 1.0 Maximum 6.0

f. MOMENTARY CONTACT ROTARY SELECTOR CONTROLS - Knobs for O YES spring-loaded momentary contact rotary selector controls should be large enough to be easily held against the spring torque, without fatigue, for as long as necessary to accomplish the control action.

6.4.5.1 THUMBWHEELS

a. VISIBILFFY - To minimize error, O YES thumbwheel readouts should be visible from the thumbwheel operating position.

N/A N/A No such

b. CODING - If the thumbwheelis used equipment as an input device, the OFF, zero, or normal position should be coded to facilitate visus 1 recognition of status.

c. CON 11NUOUS ADJUSTMENTTHUMB-WHEEL 8 - The dimensions of thumb-wheel controls which permit continuous adjustment (not stepped or detented) should be as follows:

At least 1 inch of the wheel N/A N/A No such (1) should be exposed to permit easy equipment manipulation.

3-46

-o TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 13 of 18 suiotunt M e., 8 /

6,4.5.le (Cont'd)

N/A N/A No such (2) Resistance should be between 3 equipment and 6 ounces.

N/A N/A No such (3) If the thumbwheel has an OFF equipment position, a detent should be pro-vided for feedback at that point.

d, DISCRETE SETI'INO (STEPPED)

THUMBWHEEIA (1) Thumbwheel controls which have O YES discrete settings should be detented between positions. The control should snap into each position, and resist intermediate or uncertain settings.

(2) Discrete thumbwheel controls should conform to the following specifications. (See Exhibit

• 6.4-14)

(a) Diameter (D) (inches) M YES Minimum 1.5 Maximum 2.5 (b) Trough distance (L) (inches) M YES Minimum 0.45 Maximum 0.75 (c) Width (W)(inches) M YES Minimum 0.1 (d) Depth (H)(inches) M YES Minimum 0.125 Maximum 0.5 (e) Resistance (ounces) M YES Minimum 6 Maximum 20 6.4.5.2 SLIDE SWITCHES .

N/A N/A Not on

c. SURFACE - The surface of slide panel switches should be serrated or knurled,

b. DIMENSIONS - Slide switches should conform to approximately the following dimensions. See Exhibit 6.4-15.

3-47

t TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 14 of 18

~

y / / d/ /

6,4.5.2b (Cont'd)

(1) Thickness (T): 0.25 inch. N/A N/A Length (L): 1.0 inch. N/A N/A Not on (2) panel a

r 6.4.5.3 TOGGLE SWl'ItHES POSITIONING - To minimize the pos- N/A N/A Not on

a. panel sibility of inadvertent activation or -

setting between control positions, toggle switches should have an elastic resistance that increases as the control is moved and drops as the switch snaps into position.

b. FEEDBACE - Toggle switches should N/A N/A Not on emit an audible click, or provide some panel other source of fee &ack on activation.

c. DDRENEONS - To ensure the most effective tee, toggle switches should conform to the following dimensions.

See Exhibit 6.4-16.

(1) Arm length (L), for use by one N/A N/A Not on finger (inches) panel Minimum 0.5 Maximum 2.0 (2) Tip diameter (D)(inches) N/A N/A Not on Minimum 0.125 panel Maximum 1.0

\ Not on

~

(3) Resistance (small switch) (ounces) N/A N/A Minimum 10 panel Maximum 16 (4) Resistance (large switch) (ounces) N/A N/A Not on Minimum 10 panel Maximum 40 (5) Displacement ( A), two position N/A N/A Not on (degrees) panet Minimum 30 Maximum 120 3-48

l TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 15 of 18 suetues [ 8 6,4.5.3e (Cont'd)

Displacement (A), three position N/A N/A Not on (6) panel (degrees between settings)

Minimum 18 Maximum 60 Optimum 25 N/A N/A Not on 614.5.4 ROCKER SWITCHES panel

c. ORIENTA'I10N - Rocker switches should ordinarily be oriented vertically.

Activation of the upper part N/A N/A Not on (1) should control the ON or panel INCREASE function.

Horizontal orientation should be N/A N/A Not on (2) used only when the location of the panel controlled function or equipment requires it.

b. INDICAMON OF ACMVAMON (1) Activation should be indicated by N/A N/A Not on a snap feel, an audible click, or an panel integral light.

(2) In the ON position, the top of the N/A N/A Not on switch should be flush with the panel

, panel surface.

c. RESISTANCE (1) Control resistance should N/A N/A Not on gradually increase, then drcp to panel zero when the control snarJ into position.

(2) This resistance should preclude N/A N/A Not on the switch being placed between panel positions.

d. INADVERTENT ACMVAMON - If it N/A N/A Not on controls a critical function, the switch panel should be protected by channel guards or other means to prevent inadvertent

. activation.

3-49

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 16 of 18 sumunt / 8 /

6,4.5.4 (Cont'd)

N/A N/A Not on

e. ROCKER SWITCH DIMENSIONS - (see panel Exhibit 6.4-17):

(1) Width (W)(inches)

Minimum 0.75 Maximum 1.5 N/A N/A Not on (2) Resistance (ounces) panel Minimum 10 Maximum 40 Displacement, two-position N/A N/A Not on (3) switches ( A)(degrees) panel Minimum 30 Maximum 120 Displacement, three-position N/A N/A Not on (4) switches (A)(degrees) panel Minimum 18 Maximum 60 Optimum 25 6.5.1.6 COLOR CODING

2. REDUNDANCY - In all applications of O YES color coding, color shauld provide redundant information. That is, the pertinent information should be avail-able from some other cue in addition to color.

b. NUMDER OF COIARS (1) The number of colors used for O YES coding should be kept to the mini-mum needed for providing suf-ficient information.

(2) The number of colors used for O YES coding should not exceed 11. .

c. MEANING OF COLORS .

(1) The meaning attached to a par- O YES ticular color should be narrowly defined.

3-50

TABLE 3-4 CONTRO13 SURVEY FINDINGS & HEDs GENERATED Page 17 of 18

~

F l

-- // d/ /

6,5.1.6c (Cont'd)

Red, green, and amber (yellow) l (2) '

should be reserved for the following uses:

(

Red: unsafe, danger, immediate O YES l

l operator action required, or an indication that a critical param-eter is out of tolerance.

Green: safe, no operator action O NO 2BC2-3405 7 Conventions, required, or an indication that a TP-8.1 parameter is within tolerance.

Amber (yenow): hazard O YES (potentially unsafe), caution, attention required, or an indica-tion that a marginal value or parameter exists.

o. PRINCIPI.ES OF COLOR SELEC110N (1) The primary principle which O YES should be applied in selecting colors for coding purposes which do not have the immediate safey impilcations of red, green, and amber is to ensure that each color is recognized as different from any other. Exhibit 6.5-7 lists 22 colors of maximum contrast.

Each successive color has been selected so that it will contrast maximally with the color just preceding it and satisfactorily with earlier colors in the list.

The first 9 colors have been selected so as to yield satis-factory contrast for red-green-deficient as well as color-normal observers. The remaining 13 colors are usefulonly for color-normal observers.

(2) Colors selected for coding should O YES i contrast well with the background on which they appear.

l 3-51

TABLE 3-4 CONTROLS SURVEY FINDINGS & HEDs GENERATED Page 18 of 18 suietunt M o 8 6.5.1.6e (Cont'd)

Ambient lighting in the area in O YES (3) which color coding is used will influence the apparent color of the coded element (especially for surface colors). Each color selected for coding should be evaluated under allillumination conditions under which it is used.

6.8.3.1 SEFARATION OF CONTROLS Recommended minimum control separation distances are shown in Exhibits 6.8-2 and 6.8-3. In most cases, control room operations will require greater separation.

The function requirements that should be considered are

^

ACCESS - Control access should not O NO 2BC3-3025 8 a.

be impeded by any position of an adjacent control.

b. INADVERTENT ACTUA'110N -Control O YES actuation should not result in advertent actuation of an adjacent control.

c. SDSULTANEOUS ACTUATION - O YES Simultaneously actuation of adjacent controls (where required) should be possible.

3-52

-3.5 Displays Survey This section docunents the results of the displays survey conducted in the main control roon, ESP, and ASP at BVPS-2. This review was conducted in accordance with the requirenents of NUREG-0700, as specified in the BVPS-2 DCRDR Program P1an.

3.5.1 Objectives r.

The objectives of the displays survey were to:

a. Assess the degree to which, all displays in the control roan, l- ESP, and ASP conform to the criteria in NUREG-0700.

b. Identify and docunent any features of the displays that do not confonn to the criteria in NUREG-0700.

3.5.2 Scope The scope of the effort extends to the assessment of the display design in the main control roon, ESP, and ASP at BVPS-2 using the applicable guidelines as stated in NUREG-0700. The display topics evaluated include:

o Display failure o Usability of displayed values o Readability o Printing on the display face o Scale markings o Coding o Display movenent o Scale pointers o Zone markings

o Light indicators (legend and simple) o Legend design o Trend recorders.

CRT displays are evaluated as part of the conputer survey. Sev-eral NUREG-0700 guidelines appropriate to displays are addressed as part of ' task analysis and task verification and validation activities. These guidelines have been incorporated into ' the verification and validation evaluation reports.

3.5.3 Criteria The criteria applied in this survey, identified by NUREG-0700 paragraph nunber, are: paragraphs 6.5.1.lf; 6.5.1.2d(1) through e; 6 5.1.3a through c(1) and d(1) through d(6); 6.5.1.4a(1) through f; 6.5.1.5a through c and e and f; 6.5.1.6a through c(2) and ell) through e(3); 6.5.2.la through c; 6.5.2.2a(1) through c; 6.5.2.3a through c; 6.5.2.4a through c(3); 6.5.2.5; 6.5.3.lb, l 3-53 I l

I

c(1) and d; 6.5.3.2a(1), a(3), and b; 6.5.3.3a(1) through b(7);

.6.5.4.la through d and g through k; 6.5.4.2a(1) through b(4);

6.5.5.la(1) through c(2); and 6.5.5.2a(1) through c.

The detailed definitions for each criterion are presented in Table 3-5.

3.5.4 Method 3.5.4.1 Data Collection f a. Data were collected using the checklists fron the l Displays Task Plan.

D. Data were collected primarily through direct obser-vation of displays in the control roon. As neces-sary, measurenents were made of the physical charac-teristics (e.g., character size, height-to-width ratios, etc.) of control roon displ ays. Where guidelines refer to consistency with operating procedures (e.g., 6.5.1.4.e), preliminary E0Ps were reviewed.

c. Data were recorded on the appropriate fonns.

3.5.4.2 Analysis -- Data were analyzed according to the follow -

ing procedure:

a. All deviations from the criteria wre recorded on HED reports. Recorded infonaation included the instrument 'or instrunents involved (e.g., legend lights, meters, chart recorders, etc.), a descrip-tion of the problen including the NUREG-0700 para-graph nunber of the criteria, and a recammended solution.

b. The data collection method was also recorded on the HED fonn. Where data fran two or more sources were contradictory, resolution of the conflict was achieved through data review and discussions with cognizant DLC personnel.

c. Upon conpletion of all analyses, the criteria of the displays task plan were annotated to indicate con-pliance or noncompliance with the criteria.

3.5.5 Findings The findings of the displays survey are presented in Table 3.5

" Displays Survey Findings and HEDs Generated." A total of 107 criteria were applied to the displays in the BVPS-2 control roon, 3-54

ESP , and ASP . Since some features of the control roon were not conplete at the time of the survey; nine (8%) of the criteria were unable to be assessed. These criteria included: 6.5.3.lb and d; 6.5.4.la, b, h, and i; 6.5.5.1.c(1); and 6.5.5.2b and c.

Of the criteria assessed, 9 (8%) were not applicable, 60 (56%)

were not violated, and 29 - (27%) were violated. A total of 27 HEDs were generated which docunent all of the 29 criteria which were not met. .In general, those HEDs address display labeling, readability, adequacy of infomation presentation and methods of infonnation presentation.

3-55

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 1 of 15 d/

~

s. / /

6,5.1.1 INFORMATION TO BE DEPLAYED

f. DISPLAY PAILURE - When panel O YES instruments, such as meters, fall or become inoperative, the failure should be apparent to the operator (e.g.,

through off-scale indication).

615.1.2 USABILITY OF DISLAYED YALUES

d. SCALE RANGE - Scales should be selected to (1) Span the expected range of opera- O YES tional parameters, or

. (2) Employ appropriate scale ranging O YES techniques, or (3) Be supported by auxiliary wide- O YES range instruments.

c. SCALE EZE - Scale ranges may be O YES .

expanded (or contracted) by multiplying or dividing Indicated scale values by powers of ten. All such scales should be clearly marked as to whether the indicated values should be multiplied or divided, and the factor involved (e.g.,

10, 100, 1000).

6.5.1.3 READABILITY

c. CHARACTER HEIGHT - Character M NO 2* " -2303 9 height should subtend a minimum visual angle of 15 minutes, or 0.004 x viewing distance. 'Ihe preferred visual angle is 20 minutes, or 0.006 x viewing distances.

b. TYPE STYLE - Exhibits 6.5-1 and 6.5-2 present two recommended sets of characters, character size and style should meet the following:

(1) Type styles should be simple. O Y ES (2) Type styles should be consistent. O YES l

l 3-56

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Pere 2 of 15

.- // si /

6.5,1.3b (ContM)

(3) Only upper-case letters should be O YES used.

c. CONTRArt - Highest contrast is provided by black and white.

(1) Visual displays should normally O NO 2VC8-2205 7 contain black markings on a white 2VC7-2401 9 background.

d. CHARACTER DIMENSONS AND SPACING - -

(1) Stroke-width-to-character-height M NO 2* " -2002 5 ratios should be between 16 and 1:8.

(2) Letter width-to-height ratios M NO 2* " -2002 5 should be between 1:1 and 3:5.

(3) Numeral width-to-height ratios M NO 2* " -2002 5 should be 3:5.

(4) Minimum space between char- M NO 2 " *-2002 5 acters should be one stroke width.

(5) Minimum space between words M YES should be the width of one character.

(6) Minimum space between lines M YES should be on-half the chart 1ter height.

8.5.1.4 PRIN11NG ON THE DBPLAY FACE

a. PROVEION OF NEEDED MENAGE -

If any information is required to use the display,it must be provided close enough to the scale so that the scale and the message are clearly associated.

The message may be communicated: ,

(1) By printing on the display face. O NO 2 " *-2204 8 (2) By an appropriate label adjacent O YES to the display.

3-57

e TABLE 3-5 D:UPLAYS SURVEY FINDINGS & HEDs GENERATED Pese 3 of 15

~

- .. // si /

6.5.1.4 (Cont'd)

b. AVOIDANCE OF EXTRANEOUS O NO 2B'-2206 9 ITEMS - Categories of information not needed in using the display should be avoided (7.g., patent notices, manu-facturer's trademark or address),

c. BREVFIT - To avoid distraction and O YES interference with the needed essential markings, messages should be written as briefly as clarity permits.

d. ABBREVIATIONS - Only standard and D NO 2V"-1111 8 commonly accepted abbreviations should be used. Conventions, TP-8.1

c. CONSBTENCY WITH PROCEDURES - D NO 2* " -3018 8 The printed message should use the O same terms as the procedures in display Verification, identification, parameter identifi- TP-9.2 cation, and units displayed.

f. INDICA'110N OF TRANSFORMA110NS O YES NEEDED - Where necessary to multi-ply or divide the displayed readings by powers of 10 to determine quantitative value, the operation required and result derived must be clearly indicated.

8.5.1.5 8CALE M ARKINGS i

! c. USE OF GRADUA110N8 - Scales for O YES quantitative reading should be provided with graduations consistent with the progression of their numerals.

I (1) No more than 9 graduations O NO 2* " -2208 7 should separate numerals.

(2) Major and minor graduations O YES should be used if there are up to four graduations between .

numerals.

(3) Major, intermediate, and minor O NO 2 " *-2203 6 graduation should be used if there are five or more graduations between numerals.

3-58

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Pare 4 of 15

.- l/ si /

l 6.5.1.5 (Cont'd) l M NO 2***-2003 9

b. GRADUATION HEIGHT - Graduation heights as a function of viewing distance should bei O NO 2VC7-2201 9

c. VALUES INDIC ATED BY UNIT 7 Valid., TP-9.2 2VC5-2405 GRADUATIONS - Successive values indicated by unit graduations should be one of those shown below or those values multiplied by some power of 10.

D NO 2VC6-2218 5

e. LINEAR VS LOGARITHMIC SCALES - i Logarithmic scales should be avoided Valid., TP-9.2 unless needed to display a large range of values.

0 NO 2

• C *-2217 9 Verif., TP-9.2

f. MULTISCALE INDICA' TOE 8 -Multi-scale indicators (i.e., single pointer, multiple scales) should be avoided unless they can be justified as of opera-tional benefit, and precautions are taken to avoid operator confusion.

6.5.1.6 COLOR CODING

c. REDUNDANCY - In all applications of O YES color coding, color should provide redundant information. That is, the

• pertinent information should be avail-able from some other cue in addition to color.

3-59

I TABLE 3-5 l

i DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 5 of 15

~

. // J/ /

6.5.1.6 (Cont'd)

b. NUMBER OF COLORS -

O YES (1) The number of colors used for coding should be kept to the mini-mum needed for providing suf-ficient information.

(2) The number of colors used for O YES coding should not exceed 11.

c. MEANING OF COLORS (1) The meaning attached to a par- O YES ticular color should be narrowly de fined.

(2) Red, green, and amber (yellow) should be reserved for the fol-lowing uses:

Reds unsafe, danger, immedIate O YES operator action required, or an indication that a critica1 param-eter is out of tolerance.

Greens safe, no operator action O YES required, or an indication that a parameter is within tolerance.

Amber (yellow): hazard O YES (potentially unsafe), caution, attention required, or an indica-tion that a marginal value of parameter exists.

3-60

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 6 of 15 e.- / d/ /

6.5.1.6 (Cont'd)

e. PRINCIPLES OF COLOR SELECTION (1) The primary principle which O YES should be applied in selecting '

colors for coding purposes which do not have the imemdiate safety implications of red, green, and amber is to ensure that each color is recognized as different from any other. Exhibit 6.5-7 lists 22 colors of maximum contrast.

Each successive color has been selected so that it wi11 contrast maximally with the color just preceding it and satisfactorily with earlier colors in the list.

The first 9 colors have been selected so as to yield satis-factory contrast for red-green-deficient as well as color-normal observers. The remaining 13 colors are useful only for color-

. norma 1 observers.

(2) Colors selected for coding should O YES contrast well with the background on which they appear.

(3) Ambient lighting in the area in O YES which color coding is used will influence the apparent color of the coded element (especially for surface colors). Each color selected for coding should be evaluated under allillumination conditions under which it is used.

6.5.2.1 DIRECTION ALITY OF MOVEMENT AND NUMBERING WITH FIKED-SCALE AND MOVING-POINTER METERS

c. CIRCULAR SC ALES - Scale values O YES should increase with clockwise move-ment of the pointer as in Exhibit 6.5-8.

b. VERTICAL STRAIGHT SCALES -Scale O YES values should increase with upward movement of the pointer as in Exhibit

6. 5 - 9.

3-61

l TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 7 of 15 i l

e- / J/ / \

6.5.2.1 (Cont'd)

I O YES J

c. HORIZONTAL STRAIGHT SC ALES -

Scale values should increase with j pointer movement to the right as in ,

Exhbit 6.5-10.

615.2.2 POINTERS

c. POINTER TIP FORM -

Pointer tips should be simple. O NO 2V "-2202 9 (1)

Examples of preferred and non-preferred types are given in Exhibit 6.5-11.

(2) Pointer tips should be selected to O NO 2* ' -2209 9 minimize concealment of scale I raduation marks or numerals.

See Exhibit 6.58.)

b. POINTER POSPTIONINO RELA 1TVE TO .

SCALE -

1 (1) Poir.ter tip should extend to M YES withiq about 1/16 inch of (but not overlap) the smallest graduation marks on the scale. (See Exhibits 6.5-8, -9,-10.)

(2) Pointers should be mounted to O YES avoid parallax errors.

c. POINTER VISIBILITY - Pointer / O NO 2 " *-2210 8 background contrast and pointer size should be adequate to permit rapid recognition of pointer position.

See Verification 6.5.2.3 ZONE MARKINO (Exhibit 6.5-12) TP-9.2, HED #

2* " -2220 Zone markings should be conspicuous N/A N/A No zone

a. coding and distinctively different for different ,

)

zones.

b. Zone marking should not interfere with N/A N/A No zone i reading of quantitative markings. coding j

c. If color is used for coding, color should N/A N/A No zone be related to meaning as given in coding Guideline 6.5.1.6.c.

3-62

i TABLE 3-5 f DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 8 of 15 l

~

s-.. // d/ / l 6.5.2.4 ORIENTATION OF M ARKINGS ON FtKED-SCALE METERS

c. NUMERAL ORIENTATION -Individual O NO 2BC3-2207 9 numerals on any type of fixed scale should be vertical (see Exhibit 6.5-13).

This holds true for circular as well as linear scales.

b. ZERO-POINT ORIENTATION -

(1) Where pointer movement is more N/A N/A No such than 3600, the zero point should scales be located at the 12 o' clock position.

(2) Where positive and negative O YES values are displayed around a zero or null position, the zero or null polnt should be loceted at the 12 o' clock position.

c. END-POINT DIDICA110N ON PARTIAleREVOLU110N SCALES -

(1) Where the scale covers less than a O YES full rotation of the pointer, scale end-points should be Indicated by a break in scale (see Exhibit 6.5-13).

(2) The break should be at least one O YES numbered intervalin length.

(3) The break should be oriented at O YES the 6 o' clock position.

8.5.1.5 MOVING-SCALE METERS Moving-scale fixed-pointer meters are infre- N/A N/A No such quently seen in nuclear power plant control equipment rooms. They should be evolded in favor of the more effective fixed-scale moving-pointer types. ,

3-63

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENER ATED Page 9 of 15

+

emesues 8

6.5.3.1 CHARACTERISTICS AND PROBLEMS OF LIGHT INDIC ATORS UTA UTA Data not

b. PRECAUTIONS TO ASSURE available UN AMBIGUOUS SENENG BY OPERA'IURS - Lights should not appear to be glowing when in fact they are off, or vice versa. To that end, ambient light sources should be selected, located, or controlled to avoid reflections or refractions. (See Guideline 6.1.5.3.)

c. PRECAUTIONS TO AVOID MISINTERPRETATION -

O NO 2BB2-2309 7 (1) System / equipment status should be inferred by illuminated indica- .

Valid., TP-9.2 tors, and never by the absence of illumination.

UT) UTA Data not

d. USE AS ALERTING DIDICATORS - available Alerting the operator to unfavorable status should be a function of the annunciator system and not assigned to light indicators. ,

6.5.3.2 DESIGN AND USE OF NONLEGEND LIGHT INDICATORS

a. IDENTIFICATION OF MEANING -

(1) Where meaning is not apparent, O YES labeling must be provided close to the light indicator showing the message intended by its glowing.

(3) 'the color of the light should be O YES clearly identifiable.

b. LIGHT INTRNETY 'the illuminated O YES Indicator should be at least 10% greater in light intensity than the surrounding panel (as measured by a spot photom-eter).

3-64

i TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 10 of 15 j

-- / J/ /

4.5,3.3 DESIGN AND USE OF LEGEND LIGHT INDICATORS

a. VISIBILITY FACTORS -

(1) Light intensity of the illuminated O YES indicators should be at least 10%

greater than the surrounding panel (as measured by a spot photometer).

(2) Legends should be legible under O NO 2B"-2302 7 ambient illumination with indica-tor lights off.

(3) Legend lettering should contrast O NO 2 B"-2304 7 well with background under both ambient and transilluminated lighting.

b. LEGEND DESIGN (1) Generallegend design should be O YES consistent throughout the control room.

(2) Lettering should be simple, ar.d M YES should follow Guideline 6.51.3 for O style and size.

(3) Symbolic legends should be clear O YES and unambiguous as to their meaning.

(4) Text should be short, concise, and O YES unambiguous.

(5) Legend messages should contfin O NO 2 " *-2305 9 no more than three lines of text.

(6) Nomenclature and abbreviations D NO 2 " *-1111 8 should be standard, and consistent with usage throughout the control Conventions, room and in the procedures. TP-8.1 (7) Legends should be worded to tell O YES the status indicated by glowing of the light.

3-65

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 11 of 15 smotunt 8 [

8.5.4.1 GENERAL CHARACTERISTICS OF GRAPHIC RECORDERS UTA UTA Data not ,

a. QUALITY OF EXPENDABLE available  !

M ATERIAIA - Pens, inks, and paper should be of a quality to provide clear, distinct, and reliable marking. For example, ink should not clog pens or smudge on the paper.

D'A UTA Data not

b. SCALE COMPATIBILITY - Scales available printed on the recording paper should ,

be the same as the scales shown on the recorder.

O NO 2B * *-2206 9

c. SC ALE DESIGN - Recorder scales 2VC7-2201 9 should be numbered and marked according to the general principles of 2***-2208 7 2VC5-2405 7 Valid, TP-9.2 scale graduation (Guideline 6.5.1.5),

with number style and dimensions according to Guidelines 6.5.1.3 and 6.5.1.4.

d. PAPER TAKEUP AND CUTOFF - A O YES takeup spool should be provided to receive completed recordings. On most instruments this is provided as an inherent part of the design. Also, means should be provided for tearing off completed records for storage.

g. USE - As a general rule, recorders D YES should be used to record trend informe.-

tion and material which may be needed for later reference.

h. PLACEMENT OF RECORDERS - As UTA UTA Data not devices which must be verified and available attended by the operator, graphic recorders should in principle be located within the primary operating area rather than on back panels.

UTA UTA Data not

i. PAPER-SPEED ADJUSTABILITY -Not available only should high pr se < *l W option be provided to run ou' < o + , for detach-ment, but a selee%. ? ower speeds should be availabit L permit adjust-ment of thr time scale so that rate-of-change inf ormation can be indicated.

3-66

- ~ . . _ __ _

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 12 of 15

// si

~

.. /

l 6.5A.1 (Cont'd)

j. ANNOTATION - it should be con- O YES venient to annotate recordings with date and time markings, with paper speed if varied from normal, with parameter identification, or with any other relevant information.

k. VISIBILITY - Recorder design should O YES ensure that all data willbe visible through the window of the recorder and not require open-door operation to expose it. ,

615A.2 SPECIFIC RECORDER TYPES

c. CONTINUOUS RECORDERS -

(1) LABELING - Labels should O YES (dentify the parameters recorded.

With multiple-pen recorders, parameters should be listed in the order of the associated scales on the recorder.

(2) INK COLORS - Each pen should O YES use a different colored ink to permit channelidentification from line color. Colors selected should be distinctively different and should afford good contrast with the paper.

b. DISCRETE RECORDERS -

CHANNEL OVERLOAD 'Ihe D YES (1) recorder should not be loaded beyond its designed channel capacity because this adds com-plexity to the analysis and pro-longs sampling cycle time.

(2) CH ANNEL IDENTIFICATION ON D YES INSTRUMENT - Discrete recorders should be equipped to display an easily viewed manner the channel being plotted.

Viewing from odd and incon-venient angles should not be imposed.

3-67

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 13 of 15

~

~

. - - / d/ /

6.5.4.2b (Cont'd)

(3) CHANNEL IDENTIFICATION ON UTA UTA RECORDING - Number-printing mechanism should be designed and maintained to provide clear, sharp, and small numbering to avoid crowding of data and conse-quent analysis problems.

(4) CH ANNEL SELECTION D YES No such CAPABILITY - Provision should equipment be made to select any single channel fcr immediate display without awaiting completion of a sampling cycle.

6.5.5.1 DRUM-TYPE COUNTERS

c. NUMERICAL PRESENTATION P ACTORS -

(1)- ORIENTATION - Multidigit O YES -

numbers formed by several counter drums should be read horizontally from left to right (see Exhibit 6.5-14).

(2) WIDTH-HEIGHT RATIO - To M YES compensate for the distortion imposed by the curved surface of the drum, counter numerals should reflect a width-height ratio of lil, not 3:5 as recom-mended for numerals and other displays.

(3) GROUPING OF NUMERAla - If O NO 2BA4-2502 7 more than four digits are required, they should be grouped and the groupings separated as appropriate by commas, by a decimal point, or by additional space (see Exhibit 6.5-15).

(4) CONTRAST - The color of the O NO 2B'-2503 9 numerals and of the background should be chosen to yield high contrast. Black numerals on -

white drum surface is )

recommended.

l l

3-68 l

s TABLE 3-5 DISPLAYS SURVEY FINDINGS & 3EDs NERATED Pare 14 of 15

-- // si /

6,5.5.la (Cont'd)

(5) DRUM FINISH - The surface of O YES the drums and surrounding areas should have a matte finish to minimize glare.

b. MOUN11NG -

(1) Drum-type counters are clearly 0 YES readable only within a viewing angle that is more restrictive than for most displays.

Accordingly, they should be mounted perpendicular to the operator's line of sight.

(2) Counters should be mounted as O YES olose as possible to the panel surface to minimize shadows and maximize viewing angle.

(3) The window should be sized to O YES

• Uow no more than one digit per drum to appear in the window at any one time.

c. DRUM MOVEMENT -

(1) Numbers should change by snap D YES

- action rather than through con-tinuous movement.

(2) The counter drums should move NO 28E1-2501 9 upward with increasing values.

6.5.5.2 ELECTRONIC COUNTERS

a. NUMERICAL PRESENTATION FACTORS -

(1) ORIENTATION - Multidigit O YES counters should be criented to read horizontally from left to

• right.

3-69

TABLE 3-5 DISPLAYS SURVEY FINDINGS & HEDs GENERATED Page 15 of 15

// si

~

/

4.5.5.2a (Cont'd)

CH AR ACTER STYLE - Simple M YES (2) character fonts should be used.

Styles using variable stroke widths, slanted characters, etc.,

should be avoided.

NUMERAL HEIGHT - Numerals M YES (3) should be of such a height as to subtend a visual angle of 15 minutes from the farthest antici-pated viewing distance.

(4) WIDTH-TO-HEIGHT RATIO - M YES Width-to-heigh ratio of numerals should be approximately 3:5.

(5) SP ACING - Horizontal specicg M YES between numerals should be between one-quarter and one-half the numeral width.

UTA UTA Data not b, RATE OF CHANGE - Numerals should gyaggggg, not follow each other faster than two per second when the operator is expected to read the numerals consecutively.

UTA UTA Data not

c. CONTRAST - Character-to-background available contrast ratio should be between 15:1 minimum and 20:1 proferred.

3-70

T 3.6 Labels and Location Aids Survey This se'ction docunents the results of the lacels and location aids sur-

- vey conducted in the main control roon, ESP, and ASP at BVPS-2. This review was conducted in accordance with the requirenents of NLREG-0700, as specified in the BVPS-2 DCRDR Program Plan.

3.6.1 Objectives The objectives of the labels and location aids survey were to:

a. Assess the degree to which all labels and location aids in the control roon, ESP, and ASP confonn to the criteria in NUREG-0700.

b. Identify and docunent any features of the labels and location aids that do not confonn to the criteria in NUREG-0100.

3.6.2 Scope The scope of the effort extends to the assessnent of the labels and location aids in the main control roon, ESP, and ASP at BVPS-2 using the applicable guidelines as stated in NUREG-0700.

The topics evaluated include:

o Labeling of annunciator panels o Color coding of labels o Need for labeling o Hierarchical labeling o Placement of labels o Mounting of labels o Spatial orientation of labels o Label visibility o Label content o Word selection o Consistency o Synbols o Control position labeling o Label readability o Tenporary labels o Denarcation o Mimics.

3.6.3 Criteria The criteria applied in this survey, identified by NUREG-0700 paragraph nunber, are: paragraphs 6.3.3.3c(1) through (3);

6.5.1.6a through e; 6.6.1.1, 6.6.1.2a and b; 6.6.2.la through f; 6.6.2.2a and b; 6.6.2.3a and b; 6.6.2.4a through d; 6.6.3.la through b; 6.6.3.2a through f; 6.6.3.3b and c; 6.6.3.4a through 3-71

e; 6.6.3.5; 6.6.3.6, 6.6.3.7a and 0; 6.6.3.8a through c; 6.6.3.9a ano 0; 6.6.4.la and b; 6.6.4.2a through d; 6.6.5.la through h; 6.6.5.2a and b; 6.6.6.2a through c; 6.6.6.3; 6.6.6.4a through c; and 6.8.3.2d.

The detailed definitions for each criterion are presented in Table 3.6.

3.6.4 Method 3.6.4.1 Data Collection

a. Data were collected using the checklists fron the Labels and Location Aids Task Plan.

b. Data were collected primarily through review of the preliminary labeling list and direct observation of the control roon labeling. When possible, measure-ments were made of the physical characteristics (e.g., character size and separation, height-to-width ratios, etc.) of the control roon labels. For those guidelines related to consistency with opera-ting procedures (e.g., 6.6.3.3.c), preliminary E0Ps were reviewed.

c. Data were recorded on the appropriate data collec-l tion fonns.

l 3.6.4.2 Analysis -- Data were analyzed according to the follow-ing procedure:

l a. All deviations fran the criteria were recorded on l HED reports. Recorded infonnation included the labels involved, a description of the problen including the NUREG-0700 paragraph nunber of the criteria, and a recommended solution,

b. The data collection method was also recorded on the l HED fonn. Wiere data fran two or more sources were contradictory, resolution of the conflict was achieved through data review and discussions with cognizant OLC personnel,

c. Upon conpletion of all analyses, the criteria of the labels task plan were annotated to indicate conpli-ance or noncompliance with the criteria.

3.6.5 Findings The findings of the labels and location aids survey are presented -

in Table 3 6 " Labels Survey Findings and HEDs Generated." Overall l

3 72 7

- , . ~ - . .

115 criteria were applied to the labels and location aids in the BVPS-2 control roon, ESP, and ASP. Since some features of the control roon were not conplete at the time of the survey, 34 (30%) of the criteria were unable to be assessed. These criteria included: 6.5.1.6e(3); 6.6.2.2a; 6.6.2.4d; 6.6.3.2f; 6.6.3.3c; 6.6.3.9b; 6.6.4.la; 6.6.4.2a through d; 6.6.5.la through h; 6.6.5.2a and b. Of the criteria assessed,11 (10%) were not appl icable, 49 (43%) were not violated, and 21 (18%) were violated . A total of 20 HEDs were generated sich docunent all of the 21 criteria which were not met. In general, those HEDs address label content, lack of a hierarchical labeling schene, nonstandard abbreviations, readability of l abels, and lack of denarcation.

l l

I l

l 3-73

l TABLE 3-6 l LABELS SURVEY FINDINGS & HEDs GENERATED Page t of 14

~

. - - // J/ /  !

6.3.3.3 ARRANGEMENT OF VISUAL ALARM TILES

c. LABELING OF AXES (1) The vertical and horizontal axes O YES of annunciator panels should be labeled with alphanumeries for ready coordinate designation of a particular visual tile.

(2) Coordinate designation is prefer- 0 NO 2V"-2105 9 Annunciators red on the left and top sides of TP-3.1 the annunciator panel.

(3) Letter height for coordinate M YES designation should be consistent with a subtended visual angle of at least 15 minutes as viewed from a central position within the primary operating area.

4.5.1.6 COLOR CODING

a. REDUNDANCY - In all applications of O YES color coding, color should provide redundant information. That is, the pertinent information should be available from some other cue in addition to color.

b. NUMBER OF COLOBS (1) The number of colors used for O YES coding should be kept to the minimum needed for providing sufficient information.

(2) 1he number of colors used for O YES coding should not exceed 11.

c. MEANING OF COLOBS (1) The meaning attached to a O YES particular color should be narrowly defined.

3-74

TABLE 3-6 LABEIE SURVEY FINDINGS & HEDs GENERATED Page 2 of 14 l

// si

~

/

6,5.1.6c. (Cont'd)

(2) Red, green, amber (yellow) should be reserved for the following uses:

Red: unsafe, danger, im med O YES late operator action required, or an indication that a critical parameter is out of tolerance.

Green safe, no operator O YES action required, or an indi-cation that a parameter is within tolerance.

Amber (yellow): hazard O YES (potentially unsafe), caution, attention required, or an indi-cation that a marginal value or parameter exists,

d. CONSISTENCY OF 38EANINO The meaning of a particular color O YES (3) should remain the same both within and among the various systems to which it is applied.

c. PRINCIPLES OF COLOR SELECTION (1) The primary principle which O YES should be applied in selecting colors for coding purposes which do not have the immediate safety implications of red, green, and amber is to ensure that each color is recognized as different from any other. Exhibit 6.5-711sts 22 colors of maximum contrast.

Each successive color has been selected so that it will contrast maximally with the color just preceding it and satisfactorily with earlier colors in the list.

The first 9 colors have been selected so as to yield saftisfactory contrast for red-green-de ficient as well as color-normalobservers. The remaining 13 colors are useful l only for color-normal observers, 3-75

TABLE 3-6 LABELS SURVEY FINDINGS at HEDs GENERATED Pare 3 of 14 8 /

svetune 6,5,1.6e. (Cont'd)

Colors selected for coding should O YES (2) contrast well with the background on which they appear.

UTA UTA Data not (3) Ambient lighting in the area available which color coding is used will influence the apparent color of the coded element (especially for surface colors). Each color selected for coding should be evaluated under allillumination conditions under which it is used.

6.6.1.1 NEED FOR LABELING Controls, displays, and other equipment items D NO 2***-1113 5 that must be located, identified, or manipu- Verif.. TP-9.1

' lated should be appropriately and clearly 2***-1117 5 labeled to permit rapid and accurate human performance. Verif., TP-9.2 6.6.1.2 HIERAKCHICAL SCHEME Ta reduce confusion, operator search time, O NO 2***-1103 5 and redundancy, a hierarchicallabeling should be used. (See Exhibit 6.6-1.)

a. RANKING Major labels should be used to O NO 2***-1103 5 (1) identify major systems or operator work stations.

Subordinate labels should be used O NO 2* " -1103 5 (2) ,

to identify subsystems or fune tional groups.

Component labels should be used D YES (3) to identify each discrete panel or console element.

N/A N/A No such (4) Labels should not repeat infor- equipment mation contained in higher-level labels, s

(

i 3-76 s

l l

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page i of 14 I

, amuu f uf  !! E +

1 6.6.1.2 (Cont'd)

b. LETTER GRADATIONS - Labels should be graduated in letter size l

such that i

N/A N/A No hierarchial (1) System / work station labels are labels about 25% larger than Subsystem / functional group labels N/A N/A (2) which are about 25% larger than Component labels which are about N/A N/A (3) 25% larger than (4) Control position identifiers. N/A N/A 6.6.2.1 PLACEMENT O NO 2B"-1104 9

c. NORMAL PLACEMENT - Labels 9 should be placed above the panel ele 2 ES *-1118 ment (s) they describe.

PANEL LABELING - 1he placement N/A N/A No such

b. labeling l of labels on control panels should con- f form to the guidance shown in Exhibit 1 6.6-1.

O YES

c. VISIBILITY ENHANCEMENT - Labels ,

of elements located above eye level  ;

should be positioned to ensure labe!

visibility.

I

d. PROKIMITY - Labels should be placed O YES close to the panelelement. See Exhibit 6.6 -2.

O YES

o. LABELS ON CONTROL 5 - Labels should not appear on the control itself when an adjustment or manipulation is I required that causes the operator's hand l to obscure the label for an extended time period.

f. ADJACENT LABELS --Adjacent lebels O YES should be separated by sufficient space so that they are not read as one continuous label. See Exhibits 6.6-3 and 6.6-4.

l l

3-77

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENER ATED Pare 5 of 14

.- l/ si /

6.6.2.2 MOUNTING UTA UTA Permanent

a. INTEGRITY- Label should be mounted labels not in such a way as to preclude accidental yet installed removal.

b. SURFACE - Labels should be mounted O YES on a flat surface.

6.6.2.3 SPATIAL ORIENTATION

a. HORIZONTAL ORIENTA'110N (1) Labeh should be oriented hori- G YES zontally so that they may be read quickly and easily from left to right.

l (2) Although not normally recom- O YES mended, verticalorientation may be used only where space is limited.

b. CURVED PATTERNS - Curved O YES patterns of labeling should be avoided.

See Exhibit 6.6-5.

6.6.2.4 VISDRIETY

c. O?RER DIFORMATION SOURCES - O YES Labeh should not cover any.other infor-mation source. 'Ihey should not detract from or obscure figures or scales which must be read by the operator.

b. CONCEALMENT - Labeh should not O YES be covered or obscured by other units in i the equipment assembly.

c. CONTROLS - Labeh should be visible O YES to the operator during control  !

actuation. I

d. CLEANING - Administrative pro- UTA UTA cedures should be in place for the periodic cleaning of labeh.

3-78

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page 6 of 14 sciotunt [ [

6.613.1 KINDS OF INFORM ATION

c. PRIMARY PUNCT10N - Labels should O NO 2* " -1115 7 Validation, describe the function of equipment TP-9.2 items,

b. SECONDARY FUNCTION --If needed for O YES clarity, engineering characteristics or nomenclature may also be described.

6.6.3.2 WORD SELECTION

c. INTENDED ACTION --The words employed D NO 2 " *-1115 7 Valid., TP-9.2 in the label should express exactly what 2VB2-2404 8 Valid., TP-9.2 action is intended. 2BA4-3016 8 Valid., TP-9.2

b. CLARITY - Instructions should be D YES clear.

c. DIRECT - Instructions should be D YES direct.

d. MEANINO - Words should be used that D YES have a commonly accepted meaning for all intended users.

e. TECHNICAL TERMS - Unusual tech- D YES nical terms should be avoided.

f. SPELLINO - Words should be correctly UTA UTA Permanent spelled. labels not yet installed 6.6.3.3 CONSBTENCY

b. INTERNAL CONSWrENCY - Labels O NO 2 " *-1111 8 should be consistent within and across pieces of equipment in their use of Conventions, words, aeronyms, abbreviations, and TP-8.1 part/ system numbers. See Exhibit 6.6-6.

l 3-79

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page 7 of 14

/

smotunt #

/ E4/ E

/ $

r 636.3.3 (Cont'd)

D YES Procedures

c. CONSISTENCY WITH PROCEDURES to use

- There should be no mismatch between nomenclature used in pro- standarized cedures and that printed on the labels. MCB nomen.

6.6.3.4 SYMBOLS

a. MEANING - Abstract symbols should O YES be used only if they have a commonly accepted meaning for allintended users

. (e.g., %).

b. DIlmMGUISHABILITY - Symbols O YES should be unique and distinguishable from each other.

c. STANDARD - A commonly accepted O YES standard configuration should be used.

d. CONESTENCY - Symbols should be O YES consistently used within and across panels.

s. ROMAN NUMERAIA - Use of Roman O YES numerals should be avoided.

6.6.3.5 BREVrrY Brevity should not be stressed if the results O YES l' will be unfamiliar to operating personnel.

Words on labels should be concise and still convey the intended meaning. See Exhibit 6.6-7.

6.6.3.6 SIMILARITY Words and abbreviations of similar appear- O NO 2ES*-1120 6 ance should be avoided where an error in interpretation could result. When labels containing similar words, abbreviations, or ceronyms are located in close proximity to cach other, different words should be

• selected or means of coding should be used to reduce the probability of selecting the wrong control or reading the wrong display. See Exhibit 6.6-8.

1 3-80

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page 8 of 14

~

.-- / d/ /

6.6 3.7 FUNCTION AL GROUPS O NO 2* " -1105 5

a. - FUNCTION AL RELATIONSHIP -

Labels should be used to identify functionally grouped controls or displays.

O NO 2 " *-1105 5

b. LOCATION - I.abels should be located above the functional groups they ident-ify.

6.6.3.8 CONTROL POSTION LABELING O YES

a. POSITION - All discrete functional control positons should be identified.

O YES

b. DIRECTION - Direction of motion (increase, decrease) should be identified for continuous motion rotary controls.

VISIBILITY - Control position infor- 0 NO 2B"-3204 7 c.

mation should be visible to the operator during operation of the control.

6.6.3.9 ACCESS OPENING, D ANGER, WARNING. AND SAFETY INSTRUCTION LABELING N/A N/A No such

a. ACCESS OPENING LABEIA - Each equipment access opening used by control room operators should be 'abeled to identify the function of items accessible through it.

UT/ UTA Permanent

b. DANGER, WARNING, AND SAFETY labels not INSTRUCTION LABELS - All danger, yet installed warning, and safety instruction labels should be in accordance with appropri-ate safety standards.

6.6.4.1 READABILITY

a. CH ARACTER HEIGHT (1)

~

Character height should subtend a UT/ UTA Permanent labels not visual angle of 15 minutes as a yet installed minimum, or 0.004 x viewing distance. A visual angle of 20 minutes, or 0.006 x viewing dis-tance, is preferred.

l I

3-81

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page 9 of 14

-- l/ s i /

6.6.4.la (Cont'd)

Letter height should be identical UTA UTA Permanent , ,

(2) for alllabels within the same labels not hierarchicallevel, based on the . vet installed maximum viewing distance,

b. CONTRAST (1) To ensure adequate contrast and O NO 2* " -1106 9 prevent loss of readability because of dirt, dark characters should be provided on a light background. ,

If color print is used for coding N/A N/A No such (2) purposes, it should conform to the print established color coding scheme for the control room. (See Guide-line 6.5.1.6.) Colors should be chosen for maximum contrast against the labelbackground.

Exhibit 6.6-9 rates various color combinations in terms of relative legibility.

6.6.4.2 STYLE (Exhibits 6.5-1 and 6.5-2)

c. CH ARACTER SELECTION (1) Labels should be prepared in capi- UTA UTA Permanent tal letiers. labels not yet installed (2) The design of letters and num- UTA UTA Permanent erals should be simple and without labels not flourishes or serifs. yet installed

b. CHARACTER WIDTH (1) Letter width-to-height ratio UTA UTA Permanent should be between 1:1 and 3:5. labels not yet Installed Numeral width-to-height ratio UTA UTA Permanent (2) should be 3:5 except for the num- labels not eral"4" which should be one yet installed stroke width wider and the num-eral"1" which should be one stroke in width.

i l

I 3-82

TABLE 3-6 LABE13 SURVEY FINDINGS & HEDs GENERATED Page 10 of 14

-- / J/ /

6.6A.2 (Cont'd)

UTA UTA Permanent

c. STROKE WIDTH - Stroke width-to- labels not l character height ratio should be yet installed between 1:6 and 1:8.

d. SPACING I UTA UTA Permanent l (1) The minimum space between labels not 1 characters should be one stroke yet installed  !

width.

UT/ UTA Permanent (2) The minimum space between labels not words should be one character yet installed width.

The minimum space between lines UT/ UTA Permanent (3) labels not should be one-half of the char- yet installed acter height.

6.6.5.1 USE OF TEMPORARY LABELS NECESSITY - Temporary labels should UT/ UTA Data not

c. available be used only when necessary.

UT/ UTA Data not

b. HUMAN FACTORS PRAC'11CES - available Temporary labels should conform to good human engineering principles.

VIStBILITY - Temporary labels should UT/ . UTA Data not

c. available not obscure prior permanent labels unless the old labelis to be replaced.

IDENTIFICATION - Tag-out labels UT), UTA Data not

d. available should clearly identify out-of-service components and equipment.

MOUNTING - Tag-outs should be UT/, UTA Data not f e. available securely affixed.

OBSCURATION - Tag-outs should not UTn UTA Data not

f. available obscure the label associated with the nonoperable device.

AC'11VATION - Tag-outs should be UTn UTA Data not g.

designed to physically prevent actu- available ,

ation of a control.

3-83 l

l

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page 11 of 14

_., / / J/ /

6.6.5.1 (Cont'd)

ADJACENT DEVICES - Tag-outs UTA UTA Data not

h. available should not obscure any adjacent devices or their associated labels. ,

f 6.6.5.2 CONTROL OF TEMPORARY LABELS UTA UTA Administra-

! a. ADttINWrRATIVE PROCEDURES - tive proce-i The use of temporary labels should be administratively controlled. dures not yet written

b. REVIEW PROCEDURES - A review procedure should be in place that will result in a determination of:

(1) when temporary labels are UTA UTA Administra-needed; tive proce-dures not yet written how they will be used; UTA UTA Administra-(2) tive proce-dures not yet written their content (given human engi- UTA UTA Administra-(3) neering requirements); tive proce-dures not yet written (4) their installation; UTA UTA Administra-tive proce- l dures not l yet written (5) the impact of their use on other UTA UTA Administra-system equipment (e.g., annun- tive proce-clators, mimics); dures not yet written (6) documentation requirements; UTA UTA Administra-tive proce-dures not yet written l

3-84 i

. 1 1

i i

?

TABLE 3-6 I LABELS SURVEY FINDINGS & HEDs GENERATED Pare 12 of 14 s- // J/ /

l

\

6 6.5.2b. (Cont'd) retraining requirements; UTA UTA Administra- l (7) tive proce-dures not yet written their periodic review; and UTA UTA Administra-(8) tive proce-dures not yet written

-(9) their removal. UTA UTA Administra-tive proce-dures not yet written 6.6.6.2 DEllARCAT10N (See Exhibit 6.6-1)

c. USE - Lines of demarcation can be O NO 2ES1-1119 6 used to 2 AB *-1121 7 (1) Enclose functionally related dis- 0 NO 2***-1107 6 plays.

(2) Enclose functionally related con- 0 NO 2***-1108 6 trols.

(3) Group related controls and dis- 0 NO 2***-1107 6 plays.

2***-1108 6

b. CONTRAST - Lines of demarcation N/A N/A No demarca-should be visually distinctive from the tion lines panel background.

c. PERMANENCE - Lines of N/A N/A No demarca-demarcation should be permanently tion lines attached.

3-85

l TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Pare 13 of 14 sweeunt M 8 I

6.6.6.3 COLOR C: lor should be dedicated to specif[c fune- O NO 2 " *-1116 5 tions or conditions throughout the control Valid, TP-9.2 l room in order for the code to elicit the sxpected operator response. De color cod-Ing scheme should be used consistently throughout the control room. Refer to Guideline 8.5.1.6 for specific recom-m ndations on the use of color.

6.6.6.4 USE OF MIMICS

a. COLOR (1) Flow paths should be color coded. O YES  !

l Colors should be selected in con-formance with Guidelines 6.5.1.6.

(2) The mimic colors should be dis- O YES criminably differcat from each other.

(3) There should be adequate contrast O YES between the mimic colors and the panel.

(4) Mimic lines depicting flow of the O YES same contents (e.g., steam, water, electricity) should be color coded the same throughout the control room.

(5) No more than 4 miraic lines of the O YES same color should run in parallel if the operator mus+ quickly identify any one of the lines.

b. MIMIC LINES (1) Differentialline widths may be N/A N/A Differential used to code flow paths (e.g., line widths significance, volume, level). not used (2) Overlapping of mimic lines should O YES be avoided.

(3) Flow directions should be clearly O YES indicated by distinctive arrow-heads.

3-86

TABLE 3-6 LABELS SURVEY FINDINGS & HEDs GENERATED Page 14 of 14 suiotunt M E I 6_6.6.4b (Cont'd)

(4) All mimic origin points should be O YES labeled or begin at labeled com-ponents.

J All mimic destination or terminal O YES (5) l points should be labeled or end at labeled components.

Component representations on O YES (6) mimic lines should be identified.

l

c. SYMBOIA ,

Graphic symbols should be readily 0 YES (1) l understood and commonly used.

I (2) Symbols should be used consis- O YES tently.

6.8.3.2 STRINOS OR CLUtrERS OF SDEILAR COMPONENTS

d. LARGE MATRICES (1) Large matrices of similar com- 0 NO 2* " -1109 9 ponents should have the coordinate axes labeled for identification of any single component within the grid. The left and top sides of the matrix should be used for labeling (see Exhibit 6.8-6).

(2) Large matrices should be sub- 0 NO 2* " -1110 9 divided by appropriate demar-cation.

3-87

l l

3.7 Computer' System Survey This section docunents the results of the conputer systens conducted in the main control roon at BVPS-2. This review was conducted in accordance I with the requirenents of NUREG-0700, as specified in the BVPS-2 DCROR Program Plan. i 3.7.1 Objectives The objectives of the computer systems survey were to:

a. Assess the degree to which the conputer systen in the control room conforms to the criteria in NUREG-0700.

b. Identify and document any features of the conputer systen that do not conform to the criteria in NUREG-0700.

3.7.2 Scope The scope of the effort extends to the assessment of the conputer systens design in the main control roon at BVPS-2 using the applicable guidelines as stated in NUREG-0700. The scope consists of the following, although many of the topics could not be evalu-ated since many features of the control roan canputer systen were not couplete at the time of the survey.

o Software security o Operator /conputer dialogue o Pronpting and structuring o Keyboards o Conputer function controls o Other control devices o Computer response time o Access aids o CRT display characteristics o Synbol and character size o Operator-display relationships o Data presentation format o Screen layout and structuring o Messages o Graphic coding and highlighting o Multiple-page considerations o Printer characteristics o Alann messages o Graph and table requirenents.

3.7.3 Criteria The criteria applied in this survey, identified by NLREG-0700 paragraph nunber, are: paragraphs 6.5.1.6d(2), 6.7.1.la through d, 6.7.1.2a through d, 6.7.1.3a through e, 6.7.1.4a through 1, 6.7.1.Sa through d, 6.7.1.6a through d, 6.7.1.7a and b, 6.7.1.8a 3-88

4 and b, 6.7.2.la through h, 6.7.2.2a through g, 6.7.2.3a through f, 6.7.2.4a through q, 6.7.2.Sa through n, 6.7.2.6a through 1, i

'6.7.2.7a through m, 6.7.2.8a through e, 6.7.3.la through f, .

6.7.3.2a through f, 6.7.3.3a through d. I The detailed definitions for each criterion are presented in Table 3-7.

3.7.4 Method 3.7.4.1 Data Collection

a. Data were collected using the checklists contained in the Computer Systen Task Plan. Data were col-lected pritaarily through measurenent and review of systen docunentation, including hardware specifica-tions.

b. All pertinent observations were recorded on the appropriate data forms.

3.7.4.2 Analysis -- Data were analyzed according to the follow-ing procedure:

a. All deviations fran the criteria were recorded on HED reports. Recorded infonnation included the i tens involved, a description of the problem including the NUREG-0700 paragr ph nunber of the criteria, and a recommended solution,

b. The data collection method was also recorded on the HED fonn. Where data fran two or more sources were contradictory, resolution of the conflict was achieved through data review and discussions witn cognizant plant personnel.

c. Upon conpletion of all analyses, the criteria of the conputer systen task plan were annotated to indicate compliance or noncompliance with the criteria.

3.7.5 Findings The findings of the conputer systens survey are presented in Table 3.7 "Conputer Survey Findings and HEDs Generated." Over-all, 228 criteria were applied to the conputer systen in the BVPS-2 control roon. Since inany features of the control roon conputer systen were not conplete at the tine of the survey the vast inajority of criteria, 212 (93%) were unable to be assessed.

These criteria included: 6.5.1.6d(2), 6.7.1.la through d, 6.7.1.2a through d, 6.7.1.3a through e, 6.7.1.4a c, d, e(1) and (2), f, h, and i, 6.7.1.5a through d, 6.7.1.6a through d, 3-89

6.7.1.7a and b, 6.7.1.8a and b, 6.7.2.la and d through h, 6.7.2.2a, b(1) and c through 9, 6.7.2.4a through q, 6.7.2.Sa

-through n 6.7.2.6a and b, 6.7.2.7a through m, 6.7.2.8a through e, 6.7.3.la(2) through f, 6.7.3.2a through f, 6.7.3.3a through d.

Of. the criteria assessed,14 (6%) were not violated, and 2 (1%)

.were violated. A total of 2 HEDs were generated which document

-the 2 criteria which were not met.

e 4

4 i

3-90

, _ n. ._. _ ... . , , . . - . , _ _ , , . - . , -

.__.,,w.v.

_ ,,,_y. - -_ _. ,, . _., ,,,,,_

l TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 1 of 29

~

suetunt it/ J/ /

i 611.6 COLOR CODING I

d. CONSISTENCY OF MEANING UTA UTA Data not (2) The meaning of a particular color available should remain the same whether applied to panel surfaces or pro-jected in signallights or on CRTs.

6,7.1.1 SOFTW ARE SECURITY UTA UTA Data not

c. AUTHORIZATION 'Ihe system available should include positive protection pro-visions to ensure that only properly authorized personnel can make changes (by entry, deletion, or alteration).

UTA UTA Data not

b. SECURE STORAGE - At least one available copy of the current operating software should be stored in a secure remote location.

UTA UTA Data not

c. EDITING - When characters, words, or available phrases are to be inserted, such items should first be collected and displayed ,

on a buffer area of the screen, and then collectively inserted by one operator command.

UTA UTA Data not

d. ACKNOWLEDGEMENT - Before any available operator requests are processed that would result in permanent changes to .

existing data, the computer system should require operator acknowledge- J ment. i 611.2 OPERATOR / COMPUTER DIALOGUE

c. LANGU AGE CHARACTERWTICS J Data not j (1) Dialogue should be based on the UTA UTA available l operator's point of view, not the ,

programmer's. )

UT/ UTA Data not l (2) Dialogue should be logical.

available ;

UT/ UTA Data not (3) Dialogue should be used in a con- available sistent manner,  !

l 3-91 l

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 2 of 29

~

// si /

6.,7.1.2a (Cont'd)

Dialogue should reflect the UTA UTA Data not (4) vocabulary and syntax of the available expected user population.

l Input words (e.g., keywords) UTA UTA Data not 15) should approximate real words. available Dialogue should require an UTA UTA Data not (6) explicit command in order to available terminate an interaction.

b. ENTRY LENGTH .Individualinput UTA UTA Data not words which must be typed should not available exceed 7 characters.

c. AB8 REVIA 110NS i (1) Abbreviations should be used UTA UTA Data not whenever possible to minimize available operator input requirements.

(2) If the operator is using a synonym UTA UTA Dab not i or abbreviation for a system com- available mand name, the computer system should use the same synonym or abbreviation when referring to that command in messages, prompts, etc., to the operator.

(3) The use of abbreviations or con- UTA UTA Data not tractions for output text should available be avoided.

l

d. ERROR AVOIDANCE - Operator UT/ UTA Data not inputs, responses, or actions which available could significantly degrade computer system or plant performance should not be dependent on a single keystroke.

6.7.1.3 PROMPTING AND STRUCTURING

a. OPERATOR REQUES15 - 1he com UT/ UTA Data not puter system should contain promptifig available and structuring features by which an operator can request additionalinfor-mation.

3-92

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 3 of 29 s; f [I suetuet #/ /o 8f 6,7.1.3a (Cont'd)

UTA UTA Data not

b. CORRECTION OF DATA - De com- available puter system should contain prompting and structuring features by which an operator can request corrected infor-mation when an error is detected.

UTA UTA Data not

c. MODE / FILE DISPLAY - De computer available system should display the mode desig-nation and the file (s) being processed.

UTA UTA Data not

d. SPECIFIC ERROR CORRECTION - available The computer system should permit correction of individual errors without requiring re-entry of correctly entered data.

ENTRY FILE - De computer system UTA UTA Datu not

e. available should contain a sequential file of operator entries, available upon opera-tor request.

6.7.1.4 DATA ENTRY - KEYBOARDS UTA UTA Data not

c. ALPHANUMERIC KEYBOARD available ARRANGEMENT - Keyboards that combine alphabetic and numer;c func-tions on a single keyboard should con-form to the standard "QWERTY" arrangement. See Exhibit 6.7.-l.

b. NUMERIC KEYBOARD ARRANGE- D YES MENT - De configuration of a key-board used to enter solely numeric data should be a 3x3+1 matrix, either ,

" telephone" style or " calculator" style.

see Exhibit 6.7-2.

UTA UTA Data not

c. USE OF MULTIFLE REYBOARDS - If available i

there is more than one computer system keyboard in a control room, the alphanumeric and/or numeric-only key configuration should be the same in all .

cases.

UTA UTA Data not

d. KEY MEASUREMENTS - To maximize available the effectiveness of keyboards, key dimensions and separation should be as illustrated (see Exhibit 6.7-3).

l I

3-93

)

i 1

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Pare 4 of 29

/ /g d/

.-- / \

l l

6,7.1.4 (Cont'd)

Data not

c. KEY DISPLACEMENT AND available RESI!rrANCE - To provide positive key movement feedback to the opera-tor, and to reduce inadvertent activa-tion of keys, (1) Key displacement should be as UTA UTA Data not shown in Exhibit 6.7-4. available (2) Key resistance should be as shown UTA UTA Data not in Exhibit 6.7-4. available I

f. POSITIVE INDICA 110N - To provide UTA UTA Data not i positive key actuation fee &ack to the available operator, a definite indication should be i provided (e.g., snap, feel, audible click, '

release of resistance).

g. KEYBOARD SIAPE - Keyboards M NO 2CIC-0301 9 should have a slope between 150 and D 250 from the horizontal (see Exhibit 6.7-5).

h. VISUAL FEEDBACK - Data being UTA UTA Data not entered via keyboards should be dis- available played as it is keyed.

' i. RELEVANT KEYS 'Ihe presence of UTA UTA Data not nonrelevant keys, such as those that available rcight be used by programmer person-nel, adds to keyboard complexity and induces operator errors. Controlroom keyboards should contain only those keys which are used by operators.

6,7.1.5 COMPUTER FUNCTION CONTROLS CONTROL DEEGN - When dedicated UT/ -UTA Data not c.

controls are used for selection of available computer or display functions or modes, the design of the controls should con-form to the appropriate guidelines .

specified in Section 6.4, Controls.

3-94

l TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 5 of 29

//

s-- J/ /

6,7.1.5 (Cont'd)

UTA UTA Data not

b. LABELING AND NOMENCLATURE - available '

Terms, nomenclature, and abbreviations l used on function controls should be the same as or consistent with the terms, i nomenclature, and abbreviations of the computer function which is selected or displayed.

UTA UTA Data not

c. MASTER CONTROL - When CRTs are available subject to operation by centrally l

, located master controls, a positive 1 indication should be provided: l (1) At the master-controllocation to UT" UTA Data not identify those displays under local available or master control.

(2) At the individual CRT to indicate UTA UTA Data not whether the display is under available master or local control. I

d. FUNCTION CONTROLS l (1) When dedicated controls are used UTA UTA Data not to initiate / activate functions, the available keys should be grouped together.

(2) Function controls should be easily UTA UTA Data not distinguished from other types of available keys on the computer console.

(3) Each function control should be UTA UTA Data not clearly labeled to indicate its available function to the operator.

(4) If multiple computer consoles UTA UTA Data not exist in the control room, the available design and layout of the function controls should be consistent for all consoles.

I 3-95

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 6 of 29 suetunt 8 dr 6,7.1.5d (Cont'd)

When function keys are included UT/ UTA Data not (5) with an alphanumeric keyboard, available the function keys should be physically separate. (Avoid multiple-mode keyboards which utilize the same keys for both alphanumeries and functions by i

using " shift" keys or mode l

' selection controls.)

6.7.1.6 OTHER CONTROL DEVICES

c. LOCA110N - 1he control devices UT/ UTA Data not should be operable from the location available where the operator is most likely to need to interact with the computer (e.g., keyboard, computer console, dis-play screen). l

b. SPEED - The control device should UT/ UTA Data not provide rapid positioning of cursors or available selection of choices.

c. ACCURACY - Device or method UT/ UTA Data not accuracy should be commensurate with available the functions to be served.

d. DISPLACEMENT - Control design UT/ UTA Data not should allow the operator freedom of available movement to perform other duties.

6.7.1.7 COMPUTER RESPONSE TIME TO OPERATOR QUERIES

a. M AKIMIZE RESPONSE TIMES - The UT/. UTA Data not computer system should provide the available correct response to each type of query within the recommended response times l

listed in Exhibit 6.7-6. l

b. RESPONSE DELAY MESSAOES -When UT/. UTA Data not response time for any query exceeds 3 available seconds, a delay message should be -

presented to maintain the operator's I attention and to confirm normal com-puter operation. (See also Guideline 6.7.2.6.)

3-96

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 7 of 29 smotunt / 8 /

6.7.1.8 ACCESS AIDS

a. COMPUTER SYSTEM PROCEDURES UTA UTA Data not (1) A compute set of computer sys- available tem operating procedures and contingency procedures should be available in the control room.

Procedures should be prepared UTA UTA Data not (2) available from the point of view of the contro1 room operator.

UTA UTA Data not (3) Procedures should be in hardcopy form as a minimum, available (4) Operating procedures should describes (a) The overall computer system. UTA UTA Data not available (b) The computer system UTA UTA Data not components with which the available

. operator can interface.

(c) The specific procedures UTA UTA Data not necessary to accomplish all of available the operator-computer Inter-face functions.

(5) Contingency procedures should describe UT/ UTA Data not (a) Indications available to the available operator which identify failure or malfunctioning of the computer system.

(b) Necessary actions to be per- UT/ UTA Data not formed by the operator if the available computer fails or malfunc-tions.

3-97

I l

TABLE 3-7 paam 2 af 99 i

! COMPUTER SURVEY FINDINGS & hen. nFMPR ATFn susotune 8 8 e /

6,7.1.8 (Cont'd)

b. DATA POINTINDICES (1) The specific codes, or addresses, by which data displays can be called up by an operator should be cross-indexed by:

UTA UTA Data not (a) Alphanumeric or numeric code available UTA UTA Data not (b) Program name available UTA UTA Data not (c) tiystem/ subsystem identifica- available tion UTA UTA Data not (d) Functional group identifica- available tion.

UTA UTA Data not (2) Cross-Indices should be available available in the control room in hardcopy form as a minimum.

8.7.2.1 CRT DISPLAY CHARACTERWI1CS UTA UTA Data not

c. READABILITY - Alphanumeric and available graphic characters should be easily readable by the operator under all con-trol room lighting conditions.

UTA UTA Data not

b. REFLECTED GLARE - CRT screens available should be installed to minimize or eliminate reflected glare at normal operator viewing angles.

l

c. SCREEN LUBENANCE UTA UTA Data not (1) Ambient illumination should con- available tribute no more than 25% to screen luminance through diffuse reflection and phosphor ~

excitation.

UTA UTA Data not (2) When ambient illumination in the available vicinity of the CRT is in the medium to high range (see Guide-line 6.1.5.3), the CRT should use dark characters and symbols on a light background.

1 3-98

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 9 of 29

// si /

612.lc (Cont'd)

UTA UTA Data not (3) When the CRT uses dark available characters on a light background,  ;

the screen background luminance ,

should be 23 foot-Lamberts (ft-L) minimum and 46 ft-L preferred.

UTA UTA Data not (4) When the CRT uses light available characters on a dark background, the character luminance should be 23 ft-L minimum and 46 ft-L preferred.

d, LUMIN ANCE CONTRAST Contract between light UTA UTA Data not (1) available characters and a dark screen )

background should be 15:1 mini-mum and 20:1 preferred.

UTA UTA Data not (2) Contrast between dark characters available and a light screen background should be 1:15 minimum and 1:20 preferred.

UTA UTA Data not

e. GEOMETRIC DISTORTION - 1he available cumulative effects of all geometric distortion should not displace any peint within the viewable area of the screen from its correct position by more than 5% of picture height.

f. RESOLUTION - Discrimination of fine detallis a function of the number of scan lines or addressable points

(" resolution elements") per unit length.

CRTs for displaying simple alpha- UTA UTA Data not (1) available numeric text should have a minimum of 20 resolution elements per inch.

CRTs for displaying complex UTA UTA Data not (2) available symbols and graphic detail should have a minimum of 100 resolution elements per inch.

l l

3-99

l TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 10 of 29

_. / J/ /

6,7.2.1f (Cont'd)

Complex symbols which must be UT/ UTA Data not (3) available distinguished from other complex shapes should have a minimum of 10 resolution elements for the I longest dimension of the symbol.

Alphanumeric characters should UT/ UTA Data not (4) available l have a minimum of 10 resolution elements per character height.

UT/ UTA Data not

g. - REGENERATION RATE - The regen- available eration rate for a particular CRT dis-play should be above the critical frequency at fusion so that the occur- l rence of disturbing flicker is not perceptible.

h. CRT DBPLAY CONTROIA Parameters such as luminance UT) UTA Data not (1)

(brightness), contrast, and color available should be adjustable by the con-trol room operator.

(2) Adjustment controls should con- UT/ UTA Data not form to the appropriate guidelines available in Section G.4, Controls, and Section 6.9, Control-Display Integration.

6.7.2.2 SYMBOLS AND CHARACTERS

o. SYMBOL SIZE - When a displayed UT/ UTA Data not symbol of complex shape is to be dis- available tlnguished from another symbol shape that is also complex, the visual angle of the symbol should subtend not less than 20 minutes of are at the required viewing distance,

b. ALPH ANUMERIC CHARACTER SIZE (1) The height of alphanumeric UT/. UTA Data not characters should have a visual available angle of not less than 12 minutes of are at the required viewing distance.

3-100

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 11 of 29

.. // si /

6,7.2.2b (Cont'd)

Alphanumerie characters should D YES (2) be uppercase letters.

UTA UTA Data not

c. CHARACTER WIDTH-TO-HEIGHT available RA*110 - 1he width-to-height ratio for alphanumeries should be between 3:5 and 1:1.

Data not

d. STROK E-WIDTH-TO-CH ARACTER-HEIGHT UTA UTA available RATIO - Stroke-width-to-character-height ratio should be between 1:5 and 1:10.

GRAPHICS - A graphic line will UTA UTA Data not

c. available appear continuous if the separation between addressable points, or resolu-tion elements, is less than one minute of arc. To provide the illusion of continuity, graphic lines should contain a minimum of 50 resolution elements per inch.

f. CHARACTER AND SYMBOL SEPARA'110N Horizontal separation between UTA UTA Data not (1) characters or symbols should be available between 10% and 65% of char-acter or symbol height.

Separation should be not less than UTA UTA Data not (2) 25% of character or symbol rvailable height when any of tha following degraded conditions exists:

(a) When character or symbol UTA UTA Data not width is less than 85% of available height; (b) When character or symbol UTA UTA Data not luminance is less thar.12 ft-L; available (c) When luminance contrast is UTA UTA Data not less than 88%; available UTA UTA Data not (d) When CRT screen location is greater than 350 to the left or available right of the operator's I straight-ahead line of sight; 3-10I l

i TABLE 3-7 COMPUTER SURVEY FINDINGS & HE ; GENERATED Pare 12 of 29 2.- l/ s i /

6,7.2.2f(2) (Cont'd)

(e) When the visual angle sub- UTA UTA Data not tended by symbol height is less available than 15 minutes of are; (f) When the visual angle sub- UTA UTA Data not tended by character height is available less than 12 minutes of arc.

g. CHARACTER STYLE (FONT)

(1) Simple character fonts should be UTA UTA Data not used, with no serifs, variable available stroke widths, slanting, etc.

(2) When dot-matrix characters are~ UTA UTA Data not used, 7x9 dot-matrix should be available used in preference to 5x7 dot-matrix.

(3) Character styles such as Lincoln / UTA UTA Data not Mitre or Leroy should be used. available 6.7.2.3 OPERAMR-DISPLAY DELAMONSHIPS

a. VIEWINO DISTANCE - Viewing dis-tance should be greater than 18 inches. M YES

b. VIEWING ANGLE - 1he minimum M NO 2V * *-1406 9 Anthropometries, angle between the eperator's actual TP-1.2 line-of-sight (LOS) as measured from the operator's normal work station, and the plane of the display screen should be 450 or greater in either the hori-zontal or vertical direction. See Exhibits 6.7-8 and 6.7-10.

c. SCREEN LOCA110N, SEATED OPERAMES (1) CRT displays' which require fre- See next quent or continuous monitoring, page or which may display important (e.g., alarm) information, should be located within the following limits as measured from the normal operator work station (see Exhibit 6.7-9):

3-102

I TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 13 of 29

.. // si /

8,7.2.3e (Cont'd)

M YES (a) Horizontallimits - Not more than 35o to the left or right of the operator's straight-ahead LOS.

(b) Verticallimits - Not more M YES than 200 above and 400 below the operator's horizontal LOS.

(2) CRT displays which do not require frequent or continuous moni-toring, and which will not display inportant (e.g., alarm) Informa-t1on, should be located within the felowing limits (as measured from normal operator work stations which permit full operator head and eye rotation).

See Exhibit 6.7-10):

(a) Horizontallimits - Not more M YES than 950 to the left or right of the operator's straight-ahead LOS.

(b) Verticallimits - Not more M YES than 700 above and 900 below the operator's horizontal LOS.

d. SCREEN LOCATION, STANDING OPERATORS CRT displays which require fre- l (1) i quent or continuous monitoring, l or which may display important (e.g., alarm) Information, should l be located within the following limits as measured from the normal operator work station:  :

(a) Horizontallimits - Not more M YES than 350 to the left or right of the operator's straight-ahead ,

LOS.

I (b) 'lertical 3mits - Not more M YES 1 than 350 above and 25o below 1 the operator's horizontal LOS.

i 3-103 i

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 14 of 29 e m ust 8 e 8+ f +

A 6.7.2.3d (Cont'd) -('

(2) CRT displays which do not require frequent or continuous moni-toring, and which will not display important (e.g., alarm) Informa-tion, should be located within the following limits (as measured from normal operator work statfors which permit full operator head and eye rotation):

(a) Horizontallimits - Not more M YES than 950 to the f. eft or right of the operator's straight-ahead LOS.

(b) Verticallimits - Not more M YES than 850 above and 900 below the operator's horizontal LOS.

e. MOUNTING IN CONF 0LES - When M YES CRTs are permanently mounted in con- .

soles, the console configuration, dimensions, and 13pe of use (such as seated, sit-stand, or standing) affects the CRT/ operator interfice. Consoles '

in which CRTs are installed should conform to the guide 11nes of Section f 6.1.2. , i

f. VISIBILITY OF DATA - All data and M VES messages on the CRT screen should be within the unobstructed view of an operator at the normal work station.

6.7.2.4 DATA PRESENTATION FORMAT

a. USABILITY OF DATA (1) Data should be presented to the UTA UTA Data not operator in a readily usable hvallable format.

(2) There should be no requirement UTA UTA Data not for transposing, computing, inter- available polating, or mentally translating dispir.yed data into other units or numerical bases.

3-104

l l

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 15 of 29 l/ s

-- i /

6,7.2.4 (Cont'd)

b. ILLUSTRATIONS - Illustrations should UTA UTA Data not be used whenever possible to supple- svallsble ment or explain text.

c. CH ARACTER GROUPING When 5 or more digits and/or non- UTA UTA Data not (1) text alphanumeries are displayed, available and no natural (i.e., population stereotyped) organization exists, characters should be grouped in blocks of 3 to 4 characters each.

(2) Groups should be separated by a UTA UTA Data not minimum of 1 blank character available space.

d. MAINTENANCE OF ORDERING - UTA UTA Data not  :

Elements in a data field should be dis- available played in logical order (e.g., chrono-logical).

e. PRESENTATION OF IDENTICAL DATA (1) The manner of presentation of UTA UTA Data not identical data should be based on available the uses to which the data willbe put by the operator.

(2) Within the limits of (1) above, UTA UTA Data not identical data in different available presentations should be displayed in a consistent, standardized manner.

f. MENU DESIGNATORS (1) Numbers should be used as desig- UTA UTA Data not nators when listing selectable available items.

(2) Numerical designators should UTA UTA Data not start with the number "1"(not available zero).

3-105

TABLE 3-7 COMPUTER SURVEY PINDINGS & HEDs GENERATED Page 16 of 29

-- l/ s/ /

G.7.2.4f (Cont'd)

(3) If the use of numbers as desig- UTA UTA Data not nators would create confusion available l

because of other numbers which make up the item to be desig-nated, alphabetic characters should be used.

I When used, alphabetic designators UTA UTA Data not (4) should start with the letter "A." available

g. LISTS (1) Lists should be vertically aligned UTA UTA Data not and le f t-Justified. available (2) Indentation should be used for UTA UTA Data not subclassifications, available

h. TABLES AND GRAPHS - Quantitative UTA UTA Data not data which must be scanned and com- available pared should be presented in either tabular or graphic form.

i. HYPHENATION - The use of hyphena- UTA UTA Data not tion should be minimized. available J. ALIGNMENT (1) When presented in tabular form, UTA UTA Data not alphanumeric data should be left- available justified.

(2) When presented in tabular form, UTA UTA Data not numeric data should be right- available justified with decimal points aligned.

k. PERIODS - Periods should be placed UTA UTA Data not after item selection designators and at available the end of a sentence.

l 3-106

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 17 of 29

-- l/ s i /

6.7.2.4 (Cont'd)

1. STANDARDIZED FIELDS - The fol-i lowing standardized fields should be used:

UTA UTA Data not (1) Telephone Number:(914)S55-1212 available Time: HH:MM:SS, HH:MM, UTA UTA Data not (2) avallable M M:SS:(.S)

UTA UTA Data not (3) Date: MM:DD:YY. available

m. DATA GROUP LABELING Each individual data group or UTA UTA Data not (1) available message should have a descriptive title.

(2) . Labels should reflect some unique UTA UTA Data not available characteristic of the content of the data group or message.

UT/ UTA Data not

n. LABEL PLACEMENT - Labels should available be located in a consistent manner either above or to the left of the data group or message they describe, UT/ UTA Data not

o. LABEL ORIENTATION - Labels should available be oriented horizontally.

p. LABEL HIGHLIGHTING Labels should be highlighted or UT/ UTA Data not (1) available otherwise accentuated to facili-tate operator scanning and recog-nltion.

'Ite technique used to highlight UT/ UTA Data not (2) available labels should be easily dis-tinguished from that used to high-light emergency or critical i

messages.

I OPTION LABELS - When presenting a UT/ UTA Data not

q. available list of operator options, the label should reflect the question or choices being posed to the operator.

l 3-107

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 18 of 20 l/ s

~

-- i /

6,7.2.5 SCREEN LAYOUT AND l STRUCTURING l

a. ORGANIZATION OF DATA Displayed data should be UTA UTA Data not (1) available organized in a logical, consistent manner.

Displayed data should reflect UTA UTA Data not (2) available some obvious and inherent quality of the data groups (e.g., hier-archical, sequential, or mimic relationships),

LOCATION OF DATA GROUPS - UTA UTA Data not b.

Physicallocation of specific data svailable groups (e.g., alarms, menus) on the screen should be consistent.

UTA UTA Teata not

c. DEMARCATION OF DATA available SUBGROUPS - Organization and separation of information subgroups should be made apparent to the operator through the use of blank spaces, lines, or some other form of visible demarcation.

UTA UTA Data not

d. USE FREQUENCY RANKING - Lists available of options should be organized according to the probs.bility of selection for each item, with high probability items presented first.

UTA UTA Data not

e. ALPHANUMERIC RANKING - Non- available option lists of equal-probability options '

should be presented in alphabetical or numerical order.

SEPARATION OF PARAGRAPHS - UTA UTA Data not f.

Paragraphs in continuous text should be available separated by at least one blank line.

g. SELECTION DESIGN ATORS - UT/ UTA Data not Selection designators in menus should available be separated from text descriptors by at least one blank space.

3-108

l TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 19 of 29

.. // si /

6,7.2.5 (Cont'd)

UTA UTA Data not

h. PAGE DESIGNATION - When data are available contained on multiple pages, each page should display both page number and total number of pages.

UTA UTA Data not

i. ' CONTINUOUS NUMBERING ~ Items available contained in a numbered list and described on " continue" pages should be numbered relative to the first number on the first page of the list.

UTA UTA Data not J. PLACEMENT OF INSTRUCTIONS - available When directions to the operator accompany a list of options, such directions should precede presentation of the list.

k. URGENT MESSAGES UTA UTA Data not (1) Urgent messages requiring immediate operator response available should be highlighted to attract

- the operator's attention.

UTA UTA Data not (2) Urgent messages should always be available displayed in the same location.

USE OF CURSOR - In systems in UTA UTA Data not 1.

which selection is made by use of a available cursor, formats should be organized to minimize positioning movements of the cursor.

UTA UTA Data not

m. SCREEN LOADING - De amount of available information-bearing activated screen area should not exceed 25% of the total screen area. His does not include demarcation lines used to separate groups of data.

3-109

l TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 20 of 29

1. +

emeeuse 6,7.2.5 (Cont'd)

UTA UTA Data not

n. TREND PLOT SCALES - CRT dis- available played trend plot scales should be con-sistent with the intended functionaluse of the data. (For example, the moni-toring of neutron flux at reactor trip may have a variable scale of 0% to 1%

of the design value and a time scale resolution of seconds. However, post-trip monitoring may have a variable scale of 0% to 10% with a time scale resolution of minutes. Finally, opera-tionallog data of neutron flux may have a time scale resolution of hours.)

6.7.2.6 MESSAGES

c. MESSAGES, GENERAL Messages should be concise. UTA UTA Data not (1) available Messages should provide the UTA UTA Data not (2) operator with the information available necessary to complete a specific action or decision sequence, UTA UTA Data not

b. MESSAGE CONTENT - Information contained in messages should be available necessary, complete, and readily usable. 1 USE OF PROMPTS - Prompts should UTA UTA Data not

c. available be displayed whenever the operator may need directions or guidance to initiate or complete an action or sequence of actions.

CONTENT OF PROMPTS - Prompts UT/ UTA Data not d.

should contain clear and specific cues available and instructions which are relevant to the action to be taken.

UT/ UTA Data not

e. PROMPT INFORMATION available SEQUENCE - Directions should be placed in the sequence to be used by the operator.

3-110

l TABLE 3-7 '

COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 21 of 29

\

~

. // J/ / \

6.7.2.6 (Cont'd)

UTA UTA Data not

f. USE OF ERROR MESSAGES -When- available ever an operator error or invalid input is detected, an error message should be displayed.

UTA UTA Data not

g. ERROR CORRECTION GUIDANCE - available Error messages should contain instruc-tions to the operator regarding required corrective action.

UTA UTA Data not

h. ERROR CORRECTION EASE - available Capability should be provided for operator correction of individual errors without affecting adjacent valid entries.

UTA UTA Data not

1. SYSTEM STATUS FEED 8ACK available MESSAGES - Feedback messages should be provided to the operator to indicate changes in the status of system functioning.

UTA UTA Data not J. SELECTION FEEDBACK - When a available displayed message or datum is selected as an option or input to the system, the subject item should be highlighted, or otherwise positively identified, to indi-cate acknowledgement by the system.

DELAY FEED 8ACK - When system UTA UTA Data not

k. available functioning requires the operator to stand by, such as when the computer is searching for requested data, periodic feedback should be provided to the operator to indicate normal system operation and the reason for the delay.

UTA UTA Data not

1. AC'11VITY COMPLE110N available FEEDBACK - When a process or sequence is completed by the system, positive indication should be presented to the operator concerning the outcome of the process and requirements for subsequent operator actions.

3-111

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 22 of 29 J/

/

6,7.2.7 GRAPHIC CODING AND HIGHUGHTING UTA UTA Data not

a. USE OF HIGHUGHTING -Highlighting available should be used to attract the operator's attention to any displayed data item or message which is important to decision-making or action requirements.

b. CONSISTENT APPROACH UTA UTA Data not (1) Highlighting methods which have available information value beyond their attention-getting quality should have the same meaning in all applications.

UTA,UTA Data not (2) Highlighting methods associated available with emergency conditions should not also be used in association with normalconditions.

UTA UTA Data not

c. CONTRAST ENHANCEMENT - When available contrast enhancement (i.e., increased illumination intensity level) is used for highlighting, not more than two (preferable) or three (maximum) brightness levels should be used in a single presentation.

UTA UTA Data not

d. FUCKER OR BUNKING - Blinking of available a symbol or message (e.g., ON-OFF er alternating high-low brightness) for

< purposes of highlighting should be reserved for emergency conditions or similar situations requiring immediate operator action.

o. BUNK RATES UTA UTA Data not (1) When blinking is used for high- available lighting, a maximum of 2 blink rates should be used.

UTA UTA Data not (2) When a single blank rate is used, available the rate should approximate 2 to 3 " blinks" per second with a minimum of 50 msee "on" time between blinks.

3-112

TABLE 3-7 COF.PUTER SURVEY FINDINGS & HEDs GENERATED Page 23 of 29 emesuet # 8 +

l I 6.7.2.7e (Cont'd)

When 2 blink rates are used, the UTA UTA Data not (3) available fast blink should approximate 4 per second and

! the slow blink should approximate 1 per second.

l When 2 blink rates are used, the UTA UTA Data not (4) available "on-off" ratio should approximate 50 %

When 2 blink rates are used, the UTA UTA Data not (5) available higher rate should apply to the most critical information.  !

INVERSE VIDEO - Image reversal UTA UTA Data not ]

f. available 1

(e.g., dark characters on a light back- i ground) should be used primarily for I highlighting in dense data fields, such as a word or phrase in a paragraph of text, or a set of characters in a table of data.

USE OF GRAPHIC CODING - Graphic UTA UTA Data not

g. available ,

coding methods (e.g., symbols, boxes, 1 underlines, colors) should be used to present standard qualitative infor-mation to the operator or to draw the operator's attention to a particular portion of the display.

UT/ UTA Data not

h. GRAPHIC CODE CONSISTENCY - available Graphic codes, used separately or in combination, should have the same meaning in all applications.

UT/ UTA Data not

i. GEOMETRIC SHAPE CODING - When available geometric shape (symbol) coding is used, the basic symbols should vary widely in shape.

J. NUMBER OF SYMBOLS The number of b'asic symbols used UT/ UTA Data not (1) available for coding should be kept small.

The upper limit under optimum UT/ UTA Data not (2) available display conditions should be 20.

l 3-113 l

I i

T ABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 24 of 29

/ / si i \

6,7.2.7j (Cont'd)

The upper limit under adverse UTA UTA Data not (3) display conditions should be 6. available When needed, other highlighting UTA UTA Data not (4) and graphic techniques (color, available filled versus unfilled, and other

" modifiers") should be used to display different states or qualities of a basic symbol.

k. USE OF COLOR - (Exhibit 6.7-11)

(1) Colors used on the CRT to convey UTA UTA Data not information should be consistent available in use and meaning with all other color codes in the control room.

(2) Once colors are assigned a UTA UTA Data not specific use or meaning, no other available color should be used for the same purpose.

1. COLOR MEANINGS - When color is UTA UTA Data not used, the meaning of the colors should, available where applicable, equate with the com-monly understood meaning of those colors. The following specific meanings for selected colors should apply when these colors are used in CRT displays:

(1) Red - Unsafe condition, danger, UTA UTA Data not immediate operator action available required, or critical parameter value out of tolerance.

(2) Green - Safe condition, no UTA UTA Data not operator action required, or available parameter value is within tolerance.

(3) Yellow / Amber - Hazard, UTA UTA Data not potentially unsafe, caution, available attention required; marginal parameter value exists.

3 - 114

f TABLE 3-7 l COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 25 of 29

~

// J/ /

6.7.2.7 (Cont'd)

m. RED-GREEN COMBINATIONS (1) Whenever possible, red and green UTA UTA Data not colors should not be used in com- available bination.

(2) Use of red symbols / characters on UTA UTA Data not a green background should available especially be avoided.

6.7.2.8 MULTIPLE-PAGE CENSIDERATIONS

c. OPERATOR MEMORY (1) Page design and content planning UTA UTA Data not should minimize requirements for available operator memory.

(2) All data relevant to a specific UTA UTA Data not operator entry should be displayed available on a single page,

b. AU'DIT TRAIL - When pages are UTA UTA Data not organized in a hierarchical fashion, available containing a number of different paths through the series, a visual audit trail of the choices should be available upon operator request. I

c. LOCATION REPERENCES (1) When the operator is required to UTA UTA Data not J scroll or pan on a large logical available

. frame, location references should be provided in the viewable por-tion of the frame. (For example, when scrolling a list, ony part of which is visible at any one time, the present and maximum loca-tion should be shown.)

(2) Sectional coordinates should be UTA UTA Data not used when large schematics must available be panned or magnified.

3-115

l l

TABLE 3-7 COMPUTER SURVEY PINDINGS & HEDs GENRRATED Pare 26 of 29

.- l/ si /

6.7.2.8 (Cont'd)

UTA UTA Data not

d. OPERATOR CONTROL - The opera- available tor should have some capability for controlling the amount, format, and j complexity of information (e.g., core  :

dumps, program outputs, error mes- f sages) being displayed by the system. .

UTA UTA Data not l

c. LOCATION CONSISTENCY - If the available message is a variable option list, com-  ;

mon elements should maintain their l physical relationship to other recurring elements.

}

l 6.7.3.1 PRDITER CHARACTERIS11CS

c. PRINTER APPLICATIONS Printers should be part of the D YES Data not (1) available process computer system and be located in the primary operating ,

l area.

Control room printers should UTA UTA Data not (2) available provide the capability to record alarm data, trend data, and plant status data.

b. DISPLAY COPIBS UTA UTA Data not (1) The system should,if possible, be available designed to provide hardcopy of any page appearing on the CRT at the request of the operator.

If the copy willbe printed remote UTA UTA Data not (2) available to the operator, a print confirma-tion or denial message should be displayed.

Printer operation should not alter UTA UTA Data not (3) available screen content.

UTA UTA Data not

c. PORM OF PRINTED INPORMA110N - available Printed information should be presented in a directly usable form with minimal requirements for decoding, transposing, and interpolating.

3-116

l TABLE 3-7 COMPUTER SURVEY PINDINGS & HEDs GENERATED Page 27 of 29

//

~

~

. d/ /

6.7.3.1 (Cont'd)

UTA UTA Data not

d. PRINTER SPEED - Printers used for available recording trend data, computer alarms, and critical status information should have a high-speed printing capability of at least 300 lines a minute to permit printer output to keep up with com-puter output.

c. PRINTER OPERA 110N - Paper, ribbons, and ink (if used) should be con-sistent with the followinkt Hard-finir.h matte paper should be UTA UTA Data not (1) available used to avoid smudged copy and glare.

There should be a positive indica- UTA UTA Data not (2) available tion of the remaining supply of recording materials.

Instructions for reloading paper, UTA UTA Data not (3) available ribbon, ink, etc., should appear on an instruction plate attached to the printer.

When the printer is down during UTA UTA Data not (4) available reloading, data and information which would normally be printed must not be lost.

A takeup device for printed UTA UTA Data not (5) available materials should be provided which requires little or no operator attention and which has a capacity at lease equal to the feed supply,

f. PRINT COPY ACCRMN1JTY 'the following features should be provided to enhance operator accessibility of printed materials UT/ UTA Data not (1) Provisions should be made so that the operator can always read the available most recently printed line.

3-117

TABLE 3-7 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 28 of 29

.. // si /

6.7.3.1 f (Cont'd)

UTA UTA Data not (2) Printed material should have an available adequate contrast ratio to ensure easy operator reading.

UT/ UTA Data not (3) It should be possible to annotate available the print copy while it is stillin the machine.

UT/ UTA Data not (4) The recorded matter should not available be obscured, masked, or otherwise hidden in a manner which pre-vents direct reading of the material.

6.7.3.2 ALARM MESSAGES

a. ALARM RECORDS UTA UT4 Data not (1) A printer should be provided for available recording alarm messages, UTA UTA Data not (2) All annunciator alarms should be available recorded.

UT/ UTA Data not

b. ALARM SEQUENCE - Alarm mes- available sages should be recorded in the sequence of their occurrence, UT/ UTA Data not

c. OPERATOR-REQUESTED available PRINTOUT - Provisions should be included to provide, upon operator request, printouts by alarm group (e.g.,

system, subsystem, component).

UT/ UTA Data not

d. ALARM IDENTIFICATION - Alarm available messages should be readily distinguish-able from other messages.

UT/ UTA Data not

c. ALARM DISCRIMIN ATION - Alarm available messages should provide rapid identifi-cation of the nature of the alarm.

f. CONSISTENT TERMINOLOGY -

Wording in alarm messages should:

UT/ UTA Data not (1) Clearly relate to the specific available annunciator tile that is illumi-nated.

3-118

TABLE 34 COMPUTER SURVEY FINDINGS & HEDs GENERATED Page 29 of 29 1

// si /

6.7.3.2f (Cont'd)

UTA UTA Data not (2) Contain at least that information available (i.e., wording) presented in the illuminated annunciator tile.

UTA UTA Data not (3) Provide additional specific data. available 6,7.3.3 GRAPH AND TABLE REQUIREMENTS UTA UTA Data not

c. SHAPE OF FUNCTION - If the available general shape of the function is important in making decisions, a graph j should be used.

INTERPOLATION - If interpolation is UTA UTA Data not

b. available necessary,line graphs are preferable to 4 bar graphs and tables,

c. GRIDS UTA UTA Data not (1) Graphs should be constructed so available that numbered grids are bolder than unnumbered grids.

UTA UTA Data not (2) If 10-grid intervals are used, the available fifth intermediate grid should be less bold than the numbered grid, but bolder than the unnumbered grids.

d. TABLES Tables should be simple, concise, UT/ UTA Data not (1) available and readable.

When table columns are long, UT/ UTA Data not (2) available numbers should be separated into groups by providing a space between groups of five.

When columns are not separated UT/ UTA Data not (3) available by verticallines, the columns should be separated by at least 2 character widths.

3-l19

3.8 Conventions Survey This section docunents the results of the conventions survey conducted in the nain control roon, ESP, and ASP at BVPS-2. This review was con-ducted in accordance with the requirenents of NUREG-0700, as specified in the BVPS-2 DCRDR Program Plan.

3.8.1 Objectives The objectives of the conventions survey were to:

a. Identify the NUREG-0700 defined conventions that are applied in the BVPS control roan.

b. Detennine if the applications of the identified conventions are consistent across the applicable design features,

c. Docunent any inconsistent or missing conventions in the con-trol roan.

3.8.2 Scope The scope of the effort extends to the assessment of color, shape, and arrangenent coding across design features in the main control roon, ESP, and ASP at BVPS-2 using the applicable guide-lines as stated in NUREG-0700. The topics evaluated include:

o Coding of controls o Color coding of controls and displays o Label content consistency o Enhancenents of energency controls a Use of Abbrevictions and Acronyns 3.8.3 Criteria The criteria applied in this survey, identified by NUREG-0700 paragraph nunber, are: paragraphs 6.3.3.4d; 6.4.2.2a, b, f(1) and f(2); 6.5.1.6b(2), c(2), and d(1) through d(3); 6.5.3.2a(2);

6.6.3.3a; 6.6.6.4c(1) and c(2); 6.8.1.3c and d.

The detailed definiions for each criterion are presented in Table 3.8.

3.8.4 Method 3.8.4.1 Data Collection

a. All required data fonns, plant docunentation, engi-neering drawings, equipnent, and materials were made available prior to conduct of this task. Pennission was obtained for all required access to the control roan.

3-120

D. Data were collected using methods and procedures consisting of observations and oocunent reviews.

3.8.4.2 Analysis -- Data were analyzed according to the follow-ing procedure:

a. All deviations fran the criteria were recorded on HED reports. Recorded infonnation included the conponents involved (e.g., controls, meters, labels, etc.), a description of the problen including the NlREG-0700 paragraph nunber of tne criteria, and a reconnended solution.

b. The data collection description was also recorded on the HED fonn. Where data fran two or more sources were contradictory, resolution of the conflict was achieved through data review and discussions with cognizant DLC personnel.

c. Upon canpletion of all analyses, the criteria of the conventions task plan were annotated to indicate compliance or nonconpliance with the criteria.

3.8.5 Findings The findings of the conventions survey are presented in Table 3-8

" Conventions Survey Findings and HEDs Generated." Overal l , 18 criteria were applied to the conventions in the BVPS-2 control roan, ESP, and ASP. Of the criteria assessed two (11%) were not applicable, eight (44%) were not violated, and eight (44%) were violated. A total of six HEDs were generated which docunent all of the eight criteria wnich were not met. In general, those HEDs describe instances of inconsistent uses of color, no administra-tive control over the uses of abbreviations, and no enhancenent techniques a 'd on energency controls.

3-121

TABLE 3-8 CONVENTIONS SURVEY FINDINGS & HEDs GENERATED Pane 1 of 3

.- l/ s i /

6.3.3.4 VISUAL TILE LEGENDS O NO 2V * *-1111 8

d. AB8 REVIA 110NS - Abbreviations and acronyms should be consistent with 2V * *-1112 8 those used elsewhere in the control room.

6.4.2.1 CODING OF CONTROLS (Exhibit 6.4-3)

CONSErfENCY - The coding system O YES c.

should be uniform throughout the conteol room.

O NO 2ES1-3021 5

b. LOCA110N CODINO - Controls should be located so as to be easily related to functions and functional groupings.

Controls with similar functions should be in the same location from panel to panel. (See Guideline 6.8.2.3.)

f. COLOR CODINO Color coding should follow the O NO 2***-2306 7 (1) recommendations of Guideline 6.5.1.6.

When color coding is used to N/A N/A Not used (2) relate a control to its corre-sponding display, the same color should be used for both the control and the display.

6.5.1.6 COLOR CODINO

b. NUMBER OF COLORS O YES (2) The number of colors used for coding shuld not exceed 11.

3-122 ,

TABLE 3-8 CONVENTIONS SURVEY FINDINGS & HEDs GENERATED Page 2 of 3 suietune 8 8 /

6.5,1.6 (Cont'd)

c. MEANING OF COLOES (2) Red, green, and amber (yellow) should be reserved for the following uses:

Red unsafe, danger, immediate O YES operator action required, or an indication that a critical param-eter is out of tolerance.

Green: safe, no operator action O NO 2 " *-2306 7 required, or an indication that a parameter is within tolerance.

Amber (yellow): hazard O YES (potentially unsafe), caution, attention required, or an Indica-tion that a marginal value or parameter exists.

d. CONSBTENCY OF MEANING (1) " The meaning assigned to particu- 0 NO 2 " *-2306 7 lar colors should be consistent 2BC2-3405 7 across all applications within the control room.

(2) The meaning of a particular color O YES l

should remain the same whether applied to panel surfaces or pro-jected in signal lights or on CRTs.

(3) The meaning of a particular color O NO 2* " -2306 7 should remain the same both 2BC2-3405 7 l

within and among the various systems to which it is applied. l 6.5.3.2 DESIGN AND USE OF NONLEGEND LIGHT INDICATORS

a. IDENTIFICA110N OF MEANING J (2) The color of the light indicator O NO 2* " -2306 7 when transilluminated should I conform to the generalcode established for the control room.

(See Guideline 6.5.1.6.)

3-123

TABLE 3-8 CONVENTIONS SURVEY FINDINGS & PRn nRNRR ATED Pare 3 of 3

-- l/ si /

6.6.3.3 LABEL CONTENT CONSISTENCY

~ADMININRA11VE CONTROL - A list D NO 2* " -1111 8 c.

of standard names, acronyms, abbrevia tions, and part/ system numbers should 2V"-1112 8 he 1:. place and administratively Valid, TP-9.2 2* " -1114 9 controlled.

6.6.6.4 USE OF MIMICS

c. SYMBOIA (1) Graphic symbols should be readily D YES

'rtderstood and commonly used.

(2) Sy nbols should be used D YES consistently.

6.8.1.3 ENHANCINO RECOONmON AND IDENTIFICATION N/A N/A Color shading

c. COIAR SHADINO - Color shading not used may be used to enhance recognition of controls, displays, or functional groups.

When color shading is used, colors should provide adequate contrast, and should be consistent with other color coding in the control room.

d. EMEROENCY CONTRO1A -Distine- O YES tive enhancement techniques should be used for emergency controls.

3-124

4.0 SYSTEM FUNCTION REVIEW AND TASK ANALYSIS AND VERIFICATION AND VALIDATION 4.1 System Review and Task Analysis The systen review and task analysis fonns the basis for the verifi-cation of task perfonnance capabilities and the validation of con-trol room functions tasks.

4.1.1 Introduction The SRTA progran systenatically evaluated the needs of the control roon operations crew in response to energency tran-sients. The SRTA process and documentation was based on the methodology (see Reference 1) developed by the WDG and the NRC clarification conments (see Reference 2) on task analy-sis provided to the WOG at the March 29, 1984, meeting . The SRTA docunentation was structured to provide the infonnation required by the CRDR tean to perfonn the Verification of Operator Task Perfonnance Capability review phase of the CRDR.

4.1.2 Task Analysis Program The SRTA progran consists of a systenatic evaluation of representative plant energency operations to identify opera-tor actions and associated instrunentation and controls necessary to support operator response to energency tran-sients. The methodology and documentation for this phase were based on that developed by the WOG (see Reference 1).

The following subsections describe the selection of event sequences and E0Ps for task analysis and the process used to

. analyze the E0Ps to identify and docunent operator actions and required instrunentation and controls.

4.1. 2.1 Selection of Event Sequences and E0Ps for Task Analysis Task analysis data was developed for ev ent sequences that reflect a spectrun of plant ener-gency operations. The event sequences selected conplied with the reconmendations in NUREG-0700 and ensured that the task analysis docunentation addressed the important areas of energency opera-tion (e.g., event diagnosis, critical safety func-tion monitoring, high risk event sequences, etc.),

in addi tion, the event sequences selected repre-sentatively exercised the E0Ps. The event sequences selected for task analysis are itenized in Table 4.1 4-1

TABLE 4.1 SELECTED EVENT SEQUENCES FOR TASK ANALYSIS

1. Spurious safety injection

2. Loss of reactor coolant (snall break, approx.1 inch dianeter)

• 3. Loss of reactor coolant (snall break, approx. 4 inch diameter)

4. Loss of reactor coolant (large break)

5. Loss of secondary coolant

6. Conbined loss of reactor and secondary coolant

7. Stean generator tube rupture (design basis)

• 8. Stean generator tube rupture (multiple ruptures in one stean gener-ator)

• 9. Stean generator tube rupture (ruptures in more than 3ne stean gener-ator)

• 10. Anticipated transient without scram

• 11. Inadequate core cooling (resulting from failures in energency core cooling systen)

12. Inadequate core cooling (resulting from loss of secondary heat sink)

13. Pressurized thermal shock transient

14. High containment pressure transient

• Event sequences recommended in NUREG-0700 l

4-2 1

1

Based on the selected event sequences, the E0P set was reviewed to detennine Wiich procedures should be used in response to the above event sequences. -

In the synpton-based EOP set, at least two E0Ps (or portions thereof) and the critical safety function status trees were inplenented in response -to an energency transient. Figure 4-1 schenatically illustrates E0P impl enentation in response to a small break loss of coolant accident (LOCA). The review of E0P implenentation for the selected event sequences identified the selected E0Ps to be task analyzed . The selected E0Ps task analyzed are itenized in Table 4.2. This table also shows the event sequences for W11ch the E0P is inplenented.

Note that the Critical Safety Functiun Status Trees were inplanented for all event sequences. Through task analyzing these status trees, docunentation was developed for monitoring the plant safety state

, during energency operations, independent of the energency transient.

4.1.2.2 Process for Identification of Operator Actions Having selected the subset of E0Ps to be used, the task analysis process was applied to each E0P to identify the operator actions necessary to imple-ment the E0P in response to energency transients.

Following identification of operator actions, the necessary instrunentation and control requirenents to support the operator actions were identified.

This detailed infonnation (in addition to general infonnation on the operator function and the pur-pose of each E0P step) was docunented on Elenent Tables (see Figure 4-2) similar in fonnat to those developed in the WOG SRTA progran.

The docunents used for task analysis were the gen-eric ERGS, the plant specific E0Ps and the plant specific design and operational source docunenta-tion (flow diagrans, systen descriptions, electri-cal diagrans, etc). The task analysis activity was a table top evaluation of the plant specific E0Ps relative to the generic ERGS and pl ant specific source docunentation and identified the operator actions and associated instrunentation and control requirenents necessary to support operator response to energency transients. The table top evaluation was perfonned based on the- existing plant design and was independent of the existing control roon configuration and the specific instrunents and controls contained therein. The task analysis process was perfonned as follows:

4-3

1. Each E0P step was evaluated to identify the

. operator function (s) that the step supported and the purpose for the step. This infonnation was entered at the top of the table.

2. The step was then systenatically reviewed to identify the operator actions necessary to implenent each E0P step. Since the E0Ps fre-quently utilize concise task statenents -to trigger operator actions, all actions that are needed for operation of plant systens were not explicitly identified in the E0Ps. Where appropriate, the task analysis included identi-fication of the specific actions necessary to perfonn the tasks identified in the E0Ps. The operator actions were then entered on the Ele-ment Table.

3. Each operator action was then evaluated to identify the instrunentation and controls necessary for the operator to perfonn the necessary actions. This evaluation of instru-mentation and controls also identified the instrunentation and control criteria require-ments necessary for proper perfonnance of operator actions. The instrunentation and controls were entered on the Elenent Table.

Criteria requirenents (e.g. decreasing, at zero, etc.) were included in parentheses following the associated instrunentation and control s.

With respect to the task analysis process, any cautions and notes that preceded E0P steps were considered as part of the step and were analyzed on separate Elenent Tables.

Following preparation of the Elenent Tables for the selected E0Ps, the renaining E0Ps were reviewed to identify any operator actions, instrunentation or controls existing in the renaining E0Ps but not the selected E0Ps. This review ensured that the selected E0Ps were representative of energency operations. Any unique actions, instrunentation, or controls identified in this review were included in the task analysis process and identified on Elenent Tables. This approach provided representa-tive task. analysis docunentation in an efficient manner sile ensuring conpl ete identification of operator actions, instrunentation, and controls utilized in energency operations.

4-4

--w., ---- , . - - - . - - - , . - - , , . - , . , , , , ~ , - , ~ - , - . . . , . , , , , _ - - . , - - - . ,,

l E0P USAGE FOR LOSS OF REACTOR COOLANT (SMALL BREAK) y u V 1 i

EO E-1 E2 E3 ES 00 -

1I -

ES41 ES4.3 ES 1.1 ES 1.2 ES41 ES42 ES-8.3 g -

- -J - -

- - 1 -

JL ES43 ES44 ES 1.8 ES f.4 l

- - m -

E4 El E3 Sertoe Sedes Sedes Feedost Feedout Feldest ECA. ECA- ECA. ECA. ECA. ECA-i 0.0 1.1 2.1 S.1 SJ 8.3 1

ECA- ECA- ECA-0.1 0.2 1.2 ECA 2.9 ECA 3.1 ECA 3 2 ECA 3.3 Fossout Feldoet Feldowl Feedout i

1 Figure 4-1 4-5

TABLE 4.2 SELECTED E0Ps FOR TASK ANALYSIS E0Ps .

Sequences Reactor Trip or Safety Injection All SI Termination 1,2,5,12 Loss of Reactor or Secondary Coolant 2,3,4,5,6 Post-LOCA Cooldown and Depressurization 2 Transfer to Cold Leg Reciruciation 4 Transfer to Hot Leg Recirculation 4 Faulted Steam Generator Isolation 5,6 Steam Generator Tube Rupture 7,8,9 Post-SGTR Cooldown Using Steam Dtap 7,8,9 Critical Safety Function Status trees All Response to Nuclear Power Generation /ATW5 10 Response to Inadequate Core Cooling 11 Response to Loss of Secondary Heat Sink 12 Response to Iminent Pressurized Thermal Shock Conditions 13 Response to High Containment Pressure 14 ,

-l4 4-6

ELEMENT TABLE FOR E-0 STEP 1 _

FUNCTION: Verify Automatic Actuations Ciagnose Plant Condition STEP: Verify Reactor Trip PURPOSE: To Ensure That The Reactor Has Tripped c f .

ACTIONS :

o Determine if the reactor has tripped

- Rods are at bottom

- Reactor trip and bypass breakers open

- Rod position indication at zero

- Neutron flux decreasing o Trip the reactor INSTRUMENTATION:

o Control rod bottan lights indication (rods at bottom) o Power range neutron flux indication (decreasing) o Intermediate range neutron flux indication (decreasing) o Source range neutron flux indication (decreasing)

~

o Control rod position indication (at zero) o Reactor trip and bypass breaker position indications (open)

CONTROL / EQUIPMENT:

Reactor' Trip Switches (trip)

FIGURE 4-2 4-7

y -

4.1.2.3 Compilation of Instrunentation and Control Require-

. ments Following conpletion of the task analysis process, the resulting infonnation was conpiled on sunmary tables which highlighted specific infonnation.

This was especially advantageous for instrunenta-tion and controls since all uses for a specific instrument or control are presented on a single Requirenents Table, precluding the need for a user to review all Elenent Tables to obtain the sane

. d ata. Consequently, following conpletion of the El enent Tables for the selected E0Ps and unique emergency operator actions, the instrunentation and

< control requirenents were conpiled on Instrumenta-tion Requirenents Tables (see Figure 4-3) and Con-trol / Indication Requirenents Tables (see Figure 4 -4 ) , respectively, simil ar in fonnat to those

- developed in the WOG SRTA program.

4.1.2.4 Compilation of System Sequence Requirements As part of the task analysis process to identify and evaluate operator actions, plant systens were

, reviewed to identify equipnent (instrunentation and controls) that must be used to acconplish operator if ,, actions. Following conpletion of the task analysis V process, the resul ting infonnation on operator actions and plant systens were conpiled to show the sequence in dich the operator uses the plant sys-tens in implenenting the E0Ps. A Systen Sequence Matrix was prepared for each selected E0P to show the plant systens that were used to perfonn each

- i step in the E0P. As with other task analysis docu-3 mentation, the Systen Sequence Matrices (see Figure 4-5) are similar in fonnat to those developed in the WOG SRTA progran.

4.1.3 Suninary of Task Analysis Documentation The docunentation resulting fran the SRTA progran consists of the following: 1 l

4.1.3.1 Element Tables

. The elenent tables identify the operator actions necessary for response to energency transients, including identification of specific instrunenta- ;

tion and control requirenents necessary for imple- !'

mentation of operator actions.

4-8 l

s 4

l s l

INSTRUMENTATION REQUIREMENTS TABLE SYSTEM: REACTOR COOLANT INSTRUMENTATION: Pressurizer Pres'sure (2RCS-PI444, 445, 455, 456, 457)

CRITERI A _RE_qu,IREMENTS: PROCEDURE STEP Greater than 1875 PSIG E-0 Step 22 Less than 2335 PSIG E-0 Step 22 Less than 2335 PSIG E-1 Step 5 - Caution Less than 2335 PSIG FR-P.1 Step 3 Less than 2335 PSIG E-1 Step 5 Less than 2260 PSIG E-0 Step 22 Less than PORY Setpoint FR-P.1 Step 3 - Caution Stable at or Trending to 2235 PSIG ES-0.1 Step 5 Stable ES-1.1 Step 28 l

FIGURE 4-3 4-9

CONTROL / INDICATION REQUIREENTS TABLE SYSTEM: REACTOR COOLANT SYSTEM CONTROL / INDICATION: Pressurizer Spray Valves PROCEDURE STEP CRITERIA REQUIREENTS:

Close E-0 Step 22 Open/Close/ Auto E-0 Step 27 Open; Closed ES-1.1 Step 20 Open/Close ES -1.1 Step 20 Open; Close ES-1.2 Step 14 Open/Close ES-1,2 Step 14 Open; Closed ES -1.2 Step 22 j Open/Close ES-1.2 Step 22 Open; Closed E-3 Step 18 Open; Closed E-3 Step 30 Open E-3 Step 30 Open; Closed ES-3.3 Step 6 Open ES-3.3 Step 6 Open; closed FR-P.1 Step 16 Open/Close FR-P.1 Step 16 Open; Closed FR-P.1 Step 17 - Caution Open/Close FR-P.1 Step 17 - Caution Open; Closed FR-P.1 Step 22 Opea/Close FR-P.1 Step 22 Open; Closed FR-P.1 Step 24 Open/Close FR-P.1 Step 24 FIGURE 4-4 4-10

SYSTEM StqutNCE MATRIX TABLE j PROCEDURt: ES-3.3. POST-SCTR C00LDOWN ustWG STEAM Dump SYSTERS  !

O B C C C C D D E F F F F GHM H M M L RNP Q R RRRRR 5 5 5 T V STEP D A C H N V A G 5 W PW W N V V V V V R 5 i C 5 C D M m P 5 1 5 w n R G 5 P 5 M $ 5 5 7 CW L 5 5 C P R 5 2 5 5 5 5 5 5 1 5 5 5 5 5 R $ 5 5 l-Cl e l

l-C2  !

I l . .

2 e e e 3 e )

bc es k

5-W1 e 5 e e e 6-C e 6 e e e 7 e e ,

8 e s e SC e 9 C1 l

9 9 e 10 e o ,

i 11-N O Il e e o l I

I i 12 e e 13 e e o e 16 e e e e 15 e 16 Astria Table 1

- Figure 4-5 4-11

4.1.3.2 Ins'trumentation and Control Requirement Tables

The Requirenent Tables conpile the specific cri-teria requirenents for instrunentation and controls necessary for implenentation of operator actions.

4.1.3.3 System Sequence Matrices The Systen Sequence Matrices identify the sequence in which the operator uses pl ant systens in response to energency transients. Separate matrices are provided for each selected E0P that was task analy?ed.

4.1.4 Use of Task Analysis Documentation in Verification of Opera-tor Task Perfonnance Capability 4.1.4.1 The objective of Verification of Operator Task Perfonnance capability is to assure that operator tasks can be performed in the existing control room with minimun potential for hunan error. Verific a-tion evaluates task execution at each work station and consists of:

4.1.4.1.1 Verification of Availability Verification of the presence (or absence) of instrunents and equipnent that provide the infonnation and control capabilities necessary to impl anent i operator actions.

4.1.4.1.2 Verification of Suitability Verification that the man-machine inter-faces provided- by the displ ays, controls i and other control roon features are '

effectively designed to support operator actions.

4.1.4.2 The task analysis docunentation was structured to support a verification process consisting of ve i-fication of operator action perfonnance capability.

The following subsection describes the use of the task analysis docunentation in supporting the veri-fication process.

4.1. 4. 2.1 Verification of Operator Action Perfor-mance Capability The verification activity consists of evaluating the av ail ability and suit-ability of control roan instrunentation 4-12

and controls to support perfonnance of operator actions. The Elenent Taoles were used for this activity.

For each Elenent Table, the multidisci-plinary CRDR review tean systenatically reviewed the operator actions itenized under the ACTIONS heading . As each action was revi ewed, the CRDR tean located the instrunentation and controls in the control roon necessary to support the operator actions. After locating the instrumentation and controls, the tean evaluated the suitability of the instrunentation and controls for per-fonning the operator actions. The suit-ability ev aluation was structured to evaluate the specific operator action

. criteria (e.g., greater than 1500 psig, less than 700*F, etc.) upon which opera-tor actions are based. The tean utilized the infonnation under the INSTRUMENTA-TION and the CONTROLS headings to ident-ify criteria requirenents. In working through . each Elenent Table, the tean evaluated all entries under the ACTIONS, INSTRUMENTATIONS, and CONTROLS headings to ensure that the task analysis docu-mentation was couplete and self-consis-tent.

4.1.5 'use of Task Analysis Docucentation in Validation of Control Room Functions The objective of Validation of Control Rocn Functions is to detennine tether the functions of the control roon operat-ing crew can be acconplished effectively within (1) the structure of defined E0Ps, and (2) the design of the control roon as it exists. Validation evaluates operator function execution within the integrated control roon configuration and consists of walk and talk-throughs of sel ected event sequences with control roon personnel.

The E0Ps are the appropriate docunents for use by the con-trol roon personnel in directing their response to the selected event sequences. Although not specifically devel-oped or needed for Validation, the Elenent Tables of the SRTA progran were used by the multidisciplinary CRDR tean as a source docunent with which to observe the response of the operators to the event sequences. Since the Elenent Tables 4-13 l

-_ ._._ ._________J

were developed based on the procedures, these tables iten-

- ized detailed operator actions and associated instrunenta-tion and control requirenents necessary for proper response to energency transients. Through conparing the actions in the Elenent Tables with the operator walk-through actions, discrepancies were noted and discussed in the talk-through portion of the validation.

4.1.6 References

1. Westinghouse Owners Group, Emergency Response Guidelines Systen Review and Task Analysis, Volunes 1, 2A, 2B, and 3, April 1, 1983.

2. NRC Menorandun fran H. Brent Cl ayton to Dennis L.

Zienann, Meeting Summary-Task Analysis Requirenents of Supplenent 1 to NUREG-0737, March 29, 1984. Meeting with Westinghouse Owners Group (WOG) Procedures Subcon-mittee and Other Interested Persons, April 5, 1984.

4.2 Verification of Task Performance Capabilities The verification of task perfonnance capabilities was acconplished in accordance wi th the guidelines in NUREG-0700 per DLC NCD Instruction R 405.

4.2.1 Methodology The verification of task perfonnance capabilities was I divided into two parts: verification of availability and verification of suitability.

4. 2 .1.1 Verification of Availability Each operator need (control, indication, and instrument) identified in the SRTA elenent tables I was listed on a verification of availability check- l

. list (Figure 4-6). The Core Tean then conpared i each operator need with the BVPS-2 CRDR main con- '

trol board mockup and the inventory data sheets, as required, to verify the availability of the devices ,

necessary to impl enent each operator task. The '

main control board section identifier and device mark nunber was recorded on the c.hecklist for each device found. Any missing device was recorded on a HED and the HED nunber was recorded on the check-list. In addition, the main control board was conpared with the . renaining NUREG-0700, Section 6 guidelines pertaining to verification of equipnent avail ability per task pl an TP-9.2. Task pl an TP-9.2 is contained in the CROR files.

4-14

4.2.1.2 Verification of Suitability

~

As was done for the verification of availability, each operator need was listed on a verification of suitability checklist (Figure 4-7). The Core Tean

. then conpared the operator control, indication, and instrunent requirenents with the main control board mockup and inventory data sheets, as necessary, to ensure that the devices on the main control board have the characteristics (range, precision, po si-tion, etc.) to support each operator t ask. In addition, the characteristics of the devices were conpared against the renaining NUREG-0700, Section 6 guidelines that pertain to verification of equip-ment suitability.

f 4-15

VERIFICATION OF TASK PERF01344flCE CAFABILITTEs EWIPMENT AVAILASILITY REMARKS PROCEDURE / IIIFOWETION OR C(NITROL ES MARK e OK (/)

3ECTI088 11 0 . e HED 100.

TASK STEP RE@lRDENT g.o Sg flesws **4=hi s p es- 98 414,490,419 415,' 495,4 99, y (2nss is 4*.m*4.*u..a ;.gr.4e+, ifC C 44>4ftdes s 7 4&.. 1 e uu 4.- 4as 2 9 E-o yyg 2 Rd 'il 491,423 k'*

7 7'a v. LL.f:. fades *rrda 4md Sa', b s f* A t b '* Y#- gA1 Non G V io 7 ' Sr (a!!"*N)

E.0 .ha t; < o.oJ.a.t:<.a ir. rw a.h. ,,y4.yy 4s y $ p y V (mh s Cnews rev+se.4rn, ssej RCl P e Lv11 t a n.

W

"'O

~

'v?a t.<s't.

s Cas.rws-

. / .veversC*< nen,4ss)

K .* I w byr gcqss UM'N A M *s N s* * *

( .. _ eA R

fu s, k o J.<e t** u 4 F w **=l*f.~ y,yyyym p, y s y Sh g.o val.c.[zrws*pprossa.st.c) .

R t a sv . es. s.a 1 1 Fws- tsg A,g y Ea f W 7 * ~, Oey 5' L*Fws..ft

• )*Anf* ',n s L. .i.i dic e t.,.

See, fairs"Xue ; ' Wed famys yy y f.o y C2rws- faen.s] ( t~ro*ge)

"# 2 9hv $= FCV (15 9 91,41 y y 20 S"'IN' N : f",4ss,418)(cl,Q V* I'*

• y (a Fws- P K 418 S~,Ak= kr : F W ay p ** Vn/=w

• Ocf 2 f awS* ft 411, 4 t1,4 9 s V g.o y (trws-Pk4.M,4s1,4%)(cl )

~

s~. Ale s f.c : Fw zw.t.~ veA" 8A\ 1 Fafs.NW ts1 h,c,c V 5-o ,

y' (2 Fws*Hyvss7 A,s.c J (cf.se.)

Figure 4-6 Sample Completed Verification of Availability Checklist 4-16

VERIFICATION OF TASK PERFORMANCE CAPA81LITIES HUMAN ENGINEERING SUITABILITY ACTUAL RENARKS RESilRED INFORMATION OR CONTROL

• RANGE

• RANGE MCB MARK =0K (d PROCEDURE & NO.

• POTENTIAL

• ACCU 8tACY

• ACCURACY SECTION TASK STEP REQUIREMENT CONCERNS

• POSITIONS

• POSITIONS

• PRECISION

• HED NO. .

• PRECISION g.o .sw. Mes for- : cJag;g/nH51 O pre /C '=s= Ofc gg} u s ,C

'sa' ** ">

lL Ad jry va l*w .s (ope,s feboa)

O- H Ot.) ' o'g a r g .gg ggp AFW lle J Mden Cone.@9%vf *Fleuth Toh\ } 363 E-o

"" "' a*M -a2 0

/B CW 7 "* * #*

• 8 '* P Pd arwm MD AfW f"~j's Sfa t- = n- y.s w a *,/s/pTL

/

i-o sodsa M*E ( ruonnonjy; 3leff d) ,g C3 ,s jg yG 7~D AF W ,% **j o S fk he e ceen e$, %&

\ 5-u jordies fi a (run.n,-j ; sf.pyJ) twn - T3 \*\

jg P'aicl **I o /c 3*'55 8 Soe 'c6 y E-o 7D AFW 7.f./.* Stlis* < 3j*r//

Va (< pas J... ti - 8t-(d 3,e'c,,, e,c

/B rind soviosa ar n_a_s h C arwa swa open,cs oa cm/c f-0 Af w YoAes ,weih k ,,rk eh h " #' " ' "

a

/B (8M*Avsoo A.s c D.s,s']( , .ci d 3"' Ad' * *r sta<4 s/3 / eri_ C2 w,_ n /

E-0 s,s

/B MD Ark ?"'ja (st<Q . n_

gms s sov apeo Q f(

g.o Su~ teles f.< . TD A f W p u,y Sthat 3-f// /* /" *

/

IL C1 .es >3,qer /

/8 fAegsu *soviesa_a i n r_a l t e re=1 oya o(c y,oc u pc, Swet&< for: Afv CrMas ' (D /

5.o tL " A @'#E J

/8 (A NE'llcVioo A,8.c,0,E F](oce.)

Figure 4-7 Sample Completed Verification of Suitability' Checklist

~ -- - - - - __ _E7_ ___

4'.2.2 Findings The findings of the verification of task perfonnance~

capabilities are presented in Table 4.3, " Verification of Availaoility Findings and HEDs Generated," and Table 4.4,

" Verification 'of Suitability Findings and HEDs Generated."

4.3 Validation of Control Room Functions The validation of control roon functions task was acconplished in accordance with the guidelines in NUREG-0700 per DLC NCD Instruc-tion R-406.

4.3.1 Methodology Using the main control board mockup (Figure 4-8), three DLC operator / instructors walked-through the following validation scenarios, under the direction and scrutiny of the Core  ;

Tean.

Scenario:

No. Nane A-1 Reactor Trip  !

A-2 ATWS from Full Power Following Loss of Off-Site  ;

Power A-3 Loss of All Feedwater  !

A-4 Secondary Break Outside Containment l A-5 SGTRS in Different Stean Generators Plus Cooldown A-6 DBA LOCA with Switchover A-7 Intennediate LOCA-Post LOCA Cooldown l A-8 Steam Generator Tube Leak Plus Spurious SI l i

A-9 Inadequate Core Cooling A-10 Secondary Break-All Stean Generator Stop Valves Fail to Close B-4 Loss of All AC Power Recovery with SGTR C-1 Plant Startup fran Cold Shutdown to Power Operation ,

l C-2 Load Folow fran 100% Power to 50% Power During the walk-throughs, discrepancies were noted in three ways: by individual Core Tean members conparing the walk-through actions with the NUREG-0700, Section 6, guidelines; by operator caninent on operational difficulties, discrepan-cies, or inconsistencies; and by Core Tean members observa-tions of operational difficulties.

The entire set of walk-throughs was recorded on video tape I using two caneras: one wide-angle view of the entire con-trol roon operating area and _one close-up canera with a 4-18 i

zoon lens to follow each operator action and pennit the recording of inain control board device and control position titles.

Following the walk-throughs, at convenient break points, the operators were debriefed by the Core Tean sile viewing the tapes fran the zoon-lens canera.. (T;ie debriefings were also video taped so they could oe reviewed if questions arose regarding the details of an operational difficulty.) All discrepancies noted during the walk-throughs were discussed.

The HFS wrote down all discrepancies and prepared a HED for each.-

4.3.2 Findings The findings of the validation of control roon functions task are presented in Table 4.5, " Validation of Control Roon

< Functions and HEDs Generated."

(-

4-19

TABLE 4.3 PAGE 1 0F 8 VERIFICATION OF AVAILABILITY FINDINGS & EDs GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REPRRKS 6.1.1.1 ACCESSIRILITY OF INSTRUENTATION/EQUIPENT ,

No 2ES*-1001 6 High Safety A. Present in the C_ontrol Room Importance Control room instrumentati6n and equipment should include all controls and displays needed for. (1) detection of 2AB*-2017 6 . :,h S afety abnormal conditions, and (2) bringing the plant to a safe Importance shut-down condition. HED Incorrect 2AB*-0201 7 2***-2005 7 2***-3002 7 High Safety Importance 2***-3003 5 High Safety Importance 2***-3004 7 2***-3005 7 2***-3006 9 2BA*-3007 9 2BC*-3008 8 High Safety Importance 4-20

TABLE 4.3 PAGE 2 0F 8 VERIFICATION OF AVAILABILITY FINDIIIGS & HEDs GEllERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS 6.1.1.la (continued) 2BA*-3009 5 High Safety Importance :

2***-3010 5 High Safety Importance 2***-3012 6 HED Incorrect 2VC6-2402 5 High Safety Importance

8. Arranged to Facilitate Coverage Yes Operators should not have leeway to leave the primary operating area to attend control roon instrunentation on back panels during operational sequences in which continuous monitoring or the timing of control actions may be critical.

4-21

TABLE 4.3 PAGE 3 0F 8 VERIFICATION OF AVAILABILITY FINDINGS & E Ds. GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS 6.1.3.1 UNIT INTEGRATION AND INTERFERENCE D. Sharing of Procedures _ Yes-Each unit should have its own set of procedures and.other reference documents as required to make sure that refer-ences are easily available to personnel in each unit, and to avoid conflicting needs for the same reference.

E. Sharing of, Equipment

1. Control of plant equipment from one control room Yes should not affect the ability of operators of other

. control rooms to maintain control of their respective units. ~

2. The status of plant equipment under the control of Yes one control room should be displayed in all control rooms capable of controlling that equipment.

3. If control of plant equipment from one control room Yes renders that equipment unavailable to other control i rooms, availability status indications should be displayed in all control rooms. .

(

4-22

TABLE 4.3 PAGE 4 0F 8 VERIFICATION OF AVAILABILITY FINDINGS & E Ds GENERATED i

(

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE j

6.1.3.le - (continued)

N/A

4. A single, centrally located control panel /consolc may be used for dual-unit control rooms within the same isolation boundary when this design does not conflict with the panel layout and control-display integration guidelines of Sections 6.8 and 6.9.

Administrative procedures should be in place which Yes

5. "

assign responsibility for allocation of use of controls of shared plant. equipment to ing)e control room.

6.3.4.3 ANNUNCIATOR RESPONSE PROCE00RES A. Availability Annunciator response procedures should be available in Procedures not yet written the control room.

B. Indexing Procedures not Annunciator response procedures should be indexed by yet written panel idantification and annunciator title coordinates, i

1 4-23

- TABLE 4.3 PAGE 5 0F 8 VERIFICATION OF AVAILABILITY FINDINGS & EDs GENERATED m

COMPLIANCE HED NUMBER PRIORITY RE E RKS GUIDELINE 4

m -

6.5.1.1 INFORMATION TO BE DISPLAYED Task Analysis Yes A.

Analysis of operator tasks in relation to system engi-neering and system functional objectives is recommended as the surest means of establishing operator information .

requirements.

No 2V**-2006 5 High Safety B. Completeness of Information Importance Visual displays.provided in the control room should give 9 operators all the information about system status and 2VC7-2016 parameter values tSat is needed to meet task requirements High Safety in normal, abnormal, and emergenc, situations. 2***-2219 7 Importance Unnecessarym Information Yes C.

! Efficient performance requires not only display of all needed information but also avoiding the display of I extraneous information in the prime operating area.

Redundancy Yes D.

Redundancy in the presentation of information items should be limited to cases where needed for backup or to avoid excessive operator movement.

+

4-24 i- - - -- -- - - --- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

TABLE 4.3 i AGE 6 0F 8 f

i VERIFICATION OF AVAILABILITY FINDINGS & IEDs GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS 6.5.1.1 - (continued) ,

t E. Demand Information Versus Status Information No 2***-3101 5 High Safety Importance Demand information shows that equipment has been com-manded (by control settings or otherwise) to a particular state or level . It shows only what is demanded - not what is actually being realized. Status information shows the state or level actually in affect.

To prevent operator confusion, it is essential that No 2***-3101 5 High Safety

1. Importance displays be identified as to whether they reflect demand or actual status.

Visual display of actual system / equipment status No 2***-3101 5 High Safety

2. Importance should be displayed for all important parameters.

e y __

4-25

TABLE 4.3- PAGE 7 0F 8 VERIFICATION OF AVAILABILITY FINDINGS & HEDs GENERATED COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE 6.5.1.2 USABILITY OF DISPLAYED VAllES No 2V**-2014 6 High Safety

, R. Elimination of Operator Conversion Importance All displays should indicate values in a form immediately 2VA5-2216 9 usable by the operator without requiring mental conver-sion. 2VC8-2011 9 2VC6-2012 9 2V**-2211 5 High Safety

' Importance Percentage Indication Yes C.

Percentage indication may be used when the parameter is meaningfully reflected by percentage.

D. Scale Range Scales should be selet.ted to:

Yes

1. Span the expected range of operational parameters, Or 4-26

8 F

0 e S y y y 8 K t e t e t e R ec ec ec E f n fn fn G

A E E

aa St r aa St aa St r P r R ho ho ho O gp gp gp i m im im HI HI HI Y

T I

R 7 5 O 5 I

R P

R 3 9 8 D E 0 0 1 E B 2 4 0 T

A M L 2 2 2 N - - -

R 9 S 6 C

E D E

A V

A V V E 2 2 2 G H

• s D .

E E C N .

& A s I

L o e _

S P N Y G

t

! M I O _

D C _

N 3 I ,

7 F -

4 2 Y -

E T 4 -

L I . _

B L s A I r t T B n A o e L , m _

I A s u _

V e r .

u t A q s F i n O h n i N c e g

O e n t

I T

a _

A g r _

n - _

C i e I

F g d .

I n i w

R a E r y V E r N e a I l L a i E c l D s i x

I U e u G t a a y i

) r b d p e o d e

u r p t i

n p r t a o p

n p o y u

c o s

( l p

- m e E B d 0 2 .

1 2 3 5

6

, d

TABLE 4.4 .

PAGE.1 - OF 4 '

VERIFICATION OF SUITABILITY FINDINGS & EDs GENERATED

(

l GbIDELINE COMPLIANCE HED NUMBER PRIORITY RENRRKS l 6.5.1.1 INFORMATION TO BE DISPLAYED l

Task Analysis Yes l A.

A'n alysis of operator tasks in relation to system engineering and system functional objectives is recommended as the surest means of establishing operator information requirements.

Display Failure Yes F.

When panel instruments, such as meters, fail or become inoperable, the failure should be apparent to the operator (e.g., through off-scale indication).

l 6.5.1.2 USABILITY OF DISPLAYED VALUES No 2V**-2007 5 High Safety A. Scale Selection Importance Scale units should be consistent with the ' degree of High Safety 2VC6-2015 8 precision and accuracy needed by the operator. Importance 2***-2213 5 2VC6-2214 5 m

4-28

TABLE 4.4 .PAGE 2 0F 4 VERIFICATION OF SUITABILITY FINDINGS & HEDs GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY. REMARKS 6.5.1.2a - (continued) 2***-2220 6 High Safety Importance 2VA5-2009 7 High Safety Importance 2VA6-2010 8 2VC8-2011 9 2VC6-2218 5 High Safety Importance i

E. Scale Size Yes Scale ranges may be expanded (or contracted) by multiply-ing or dividing indicated scale values by powers of ten.

All such scales should be clearly marked as to whether tne indicated values should De multiplied or divided, and the factor involved (e.g., 10,100,1000).

F. Sensitivity Yes Display dynanic sensitivity should be selected to mini-mize the display of nonnal randon variations in equipnent perfonnance.

4-29

TABLE 4.4 PAGE 3 0F 4' VERIFICATION OF SUITABILITY FINDINGS & HEDs GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS 6.5.1.5 PRINTING ON THE DISPLAY FACE ,

D. Scale Compatibility No 2V**-2212 7 High Safety Importance When two or more displays of the sane paraneter (e.g.,

pressure, temperature) must be compared, scales should be 2VA9-2406 7 conpatible in nunerical progression and scale organiza-tion.

E. Linear vs. Logarithnic Scales Yes Logarithnic scales should be avoided unless needed to display a range of values.

F. Multiscale Indicators No 2*C*-2 217 9 Multiscale indicators (i.e., single pointer, multiple scales) should be avoided unless they can be justified as of operational benefit, and precautions are taken to avoid operator confusion.

6.9.1.2 MULTIPLE CONTROLS AND DISPLAYS C. 4. Displays should read off-scale, not zero, when not Yes selected, especially if zero is a possible paraneter displayed.

4-30

TABLE 4.4 'PAGE;4 0F.4 VERIFICATION OF SUITA81LITY FINDINGS & EDs GEIERATED I

COMPLIANE .HED NUMBER PRIORITY REPRRKS I GUIDELINE -l

\

6.9.3.2 CONTROL DISPLAY RATIO Yes i

A. Contr01 s Controls should provide a capability to affect the param-

eter controlled easily, with the required level of pre-

' cision.. They should be effective in sufficient time, under expected dynamic conditions, and within the limits ,

of manual dexterity, coordination, and reaction time.

i Displays Yes B. i Displays should provide a capability to distinguish sig-nificant levels of the system parameter controlled.

Yes

! C. Excess Precision i

Both dispicys and controls should have a precision which does not greatly exceed that required.

Yes j D. Feedback Feedback from the display should be apparent for any i

deliberate movement of a control .

1 4-31

_~ - __

l FIGURE 4.8 BVPS - 2 Control Board Mock-up i-f l

n.-,- -

.~c- c . . , -- . . . - --

' w * ~ . ,a 4_... , ..%,.-,

.. . r ja . r-+ . f .,* '-y .'{-# M fD q(.Q.""/" * - ~~'-'

y,,x,3+. n e : , %l , ; ( U ( ,:- ' a -a; w

-~ % n;f,EdQe.

-\g- ~

• 2,. .e .

.{n % 4 L M72--- ._ ^ N '-' T - -

t *' .

. 225.* if 1 ' ^

323 r :35E5 8 85580 sees

1:23 ::a W?' g 98 1 *:3E B 5 W ;c, '

EB hi.

IM

A: "' M ar* n* * 'n 5 iins- m3' =, . .

...=.,<e, $,

gggy, -g g . -~~

gre a m. --

y, FA" e -.

r 'y

. . . . . .- ~*

f I

4-32 I.

1 TABLE 4.5 PAGE 1 (N 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED 1

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE t 6.1.1.2 ~ CONSISTENCY 0F MANNING WITH EQUIPMENT LAYOUT Coverage Yes A.

Control room manning and task assignments should ensure canplete and timely coverage of controls, displays, and other equipment required during all modes of operation.

Yes B. Utilization of Additional Personnel Additional onsite or offsite personnel may augment the normal crew canplement under certain conditions (e.g.,

refueling). If so, activities and task assignments should be planned to ensure proper coordination. (Note:

special training for this situation may be required.)

6.1.3.1 UNIT INTEGRATION AND INTERFERENCE Equipment Arrangement Yes -

A.

Equipnent should be arranged with movement and communica-tion patterns in mind, so that each unit operations do not interfere with each other.

Senior Operator _ Station N/A B.

Senior operators who supervise and assist operations of more than one unit need to be stationed so that they can 4-33

TABLE 4.5 PAGE 2 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND NEDs GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS l 6.1.3.1 (Continued) communicate effectively with operators in each unit and have an unobstructed visual path to the control boards of each unit.

C. Sharing of Pers.onnel N/A Where operators may assist those of another unit, poten-tial task loading should be evaluated to assure that each unit can be covered adequately in all situations.

6.i.3.2 UNIT MIRROR IMAGING N/A If a mirror image design has been used:

A. Dedicated Crews Operational crews should be conmitted to one or the other unit. They should not be allowed to alternate between the two mirrored units. This includes operators manning

.a single center desk station.

B. Accentuate Differences The distinction between the mirrored units should be heightened as much as possible so that there will be no confusion about where one unit ends and the other begins.

4 34

TABLE 4.5 PAGE 3 0F 20 l

VALIDATION OF CONTROL ROOM FUNCTIONS FINulNGS AND HEDs GENERATED COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE

( 6.1.3.? (Continued) i This can be done by using a different color schene for the elenents of each unit, including carpeting, desks, and other work station equipment, as well as the board surface areas.

6.4.2.2 CODING OF CONTROLS When color coding is used to relate a control to its N/A F. 2.

correspondind display, the sane color should be used for both the control and the display.

6.4.3.1 PUSHBUTTON DESIGN PRINCIPLES Yes A. Pbsition Pushbuttons in a row or matrix should be positioned in a logical order, or in an order related to the procedural sequence.

6.8.1.1 ASSIGNED PANEL CONTENTS Controls and displays should be placed within the control room at locations which promote efficient procedures, safe 4-35

TABLE 4.5 PAGE 4 0'F 20' VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND.HEOs GENERATED

<d C0WLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE --

6.8.1.1 (Continued) "s operation, and maximtsn oper'ator awareness of the current sys-tem condition. There are three general methods for achieving this condition. They are: (a) grouping by task sequence, '

(b) grouping by systen function, and (c) grouping by impor- .

tance and frequency of use.

No 2BA*-301h 6 High Safety A. Groubing by Tas_k Sequence,y Importance Controls and displays should be assigned to work stations so as to minimize operator movement. To the extent, practical, this assignment should consider both nonnal and emergency procedures. It should be practical to perform all frequently occurring routine tasks, with a minimtsa of htsnan movement from panel to panel.

Yes B. Grouping by System Function Within the constraints of grouping by task sequence, controls and displays should be assigned to panels in functional groups related to systen structure. This grouping should promote easy understanding of the rela-tionship between controls and system, and should assist 9raphic or pictorial display or systen relationships.

Group _ing by_Importance and Frequency of U_se Yes C.

Within the constraints of grouping by task sequence and . _ -

4-36

l TABLE 4.5 PAGE 5 0F'20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED

___. _a__.. _ . ___ __. ...

1 GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS 6.8.1.1 (Continued) by systen function, controls and displays should be assigned to panels depending on their importance and frequency of use. Controls or displays which are neither important to plant safety nor frequency of use. Controls or displays which are neither important to plant safety not frequently used should be installed in secondary panel locations.

Yes i

6.8.1.2 EFFECTIVE PANEL LAYOUT The location of controls and displays within a single panel should make the effective use of the viewing and manual mani-pulative areas. The allocation of panel positions should first ensure the integrity of arrangement or grouping by system function and task sequence. Within those constraints, consideration should be given to the following factors:

(a) the frequency with which controls and displays are used; (b) the significance of controls and displays in tenns of their possible use during an emergency; (c) the importance of controls and displays to overall systen performance; and (d) special requirenents in using a control device or display instrumants, such as the need for accuracy, speed, applica-tion of force, or a particular type of movement.

4-37 t

- TABLE 4.5 PAGE 6 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED

' --- . _ .. = . . . - - ---- -

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE ,

6.8.1.3 ENHANCING RECOGNITION AND IDENTIFICATION A. Spacing Yes Spacing consists of physically separating groups of con-ponents on a panel with enough space between groups so that the boundaries of each group are obvious. Spacing between groups should be at least the width of a typical control or display in the group.

No See Table 3-6 B. Qemarcation for findings and Demarcation consists of circunscribing functional or HEDs from Guide-selected groups of controls and displays with a contrast- line 6.6.6.2 ing line. The application of denarcation techniques should conform to Guideline 6.6.6.2.

6.8.2.1 SEQUENCE, FREQUENCY OF USE, AND FUNCTIONAL CONSIDERATIONS A. Sequence Controls and displays which are used together during a normal task sequence should be grouped together.

Displays which are observed in a specified sequence, Yes 1.

as during hot-leg temperature check for all reactor 4-38

f TABLE 4.5 PAGE 7 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED l

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE ,

6.8.2.la(Continued) coolant loops, should be grouped together. It is desirable that they be positioned .so that they are nonnally used in a left-to-right, top-to-bottom, or other natural sequence.

Controls which are operated in sequence, as in ener- Yes 2.

gizing a system or aligning a series of valves for a particular function, should be grouped together. It is desirable that they be positioned so that they are nonnally used in a lef t-to-right, top-to-bottom, or other natural sequence.

When there is a set of related controls and displays, Yes 3.

the layout of displays should be symmetrical with the controls they represent.

B. Frequency of Use_

Frequently used controls and displays should be arranged to reduce search time and minimize the potential for error during use.

They should be near the center of the preferred Yes 1.

visual and manual areas. .

They should be positioned so as to be easily Yes

2. -

identified. --

4-39

TABLE 4.5 PAGE 8 0F 20 l

l VAllDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED

-- -_1 ---

C0tPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE ,

C. F,ugt,1,onal Consid_erations Yes functionally related controls and displays should be grouped together when they are: ,

Used together to perfonn tasks related to a specific Yes 1.

function (e.g., operation of the residual heat renov-al systen) .

~

Identical in purpose, (e.g., reactor coolant ptsnps). Yes 2.

6.8.2.2 LOGICAL ARRANGEMENT AND LAYOUT B. Other Expectations 2ES2-3022 6 High Safety Imp.

2***-1201 5 High Safety Imp.

Where other operator expectations can be identified, 2VC6-2008 8 High Safety Imp, conponents should be arranged to match these expecta- 2881-2215 9 tions. 2B81-3011 9 6.8.2.4 STANDARDIZATION When a precedent has been established in the arrangenent and location of controls and displays, that standard practice should De followed unless other crucial considerations neces-sitate a change.

. ~ .. - - ~ ~ ........

, ~..

4-40

VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND.NEDs GENERATED COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE ,

6.8.2.4 (Continued) .

Yes A. Panel _ _to _.P anel Standardizatio_n Standardization should be maintained where similar func '

tions or panels are located at several work stations or units and must be used by the sane personnel.

N/A B. Si_mulator-to-C_ontrol Room _ Standardization Standardization should be maintained where simulators or procedure trainers 'are used that simulate the actual operational equipnent.

6.8.3.2 STRINGS OR CLUSTERS OF SIMILAR C0W ONENTS On occasions it may be necessary to have a large group of similar conponents arranged together in strings, matrices, or other clusters. Those human factors principles presented in Section 6.8.2, Layout Arrangenent Factors, should not be compronised where large clusters of components are concerned.

However, considerations such as search time, discriminability of components, and avoidance of selection errors will often make a strong or matrix the preferred arrangement. The fol-lowing criteria should apply:

1

-.~ ........ _ -- -

4-41

TABLE 4.5 PAGE 10 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED

_.--- - __ m ...-

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE 6.8.3.2 (Continued)

Orientation Yes A.

Horizontal rows of displays should be used rather than vertical columns.

B. String Length Yes Strings of snall displays should not exceed about 20 inches on the contrt' board.

C. Nunber of Components

1. No more than 5 similar components should be laid out in an unbroken row or colunn. Yes

2. If more than 5 similar conponents must be laid out together, the string or cluster should be broken up Yes by techniques such as physical spacing or demarcation 6.8.3.3 MIRROR IMAGING Mirror-imaging is an arrangement in which two functional Yes groups are laid out symmetrically so that one is a conplete, 4-42

TABLE 4.5 PAGE 11 0F.20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED HED NUMBER PRIORITY REMARKS COMPLIANCE GUIDELINE ,

6.8.3.3 (Continued) or almost complete, reversal of the other. Mirror-imaging should not be used, and any recurring functional groups should be replicated.

Yes 6.9.1.1 SINGLE CONTROL AND DISPLAY PAIRS Controls and displays which are nonnally used together should be located in close proximity to each other, but positioned and separated sufficiently so that the display is not obstructed during operation.

Yes A. Proximity A visual display that will be monitored during control manipulation should be located sufficiently close that an operator can read it clearly and without parallax fran a nonnal operating posture.

Yes B. Obstruct _ ion Controls and displays should be located so that displays are n'ot obscured during control operation.

4-43

TABLE 4.5 PAGE 12 DF 20 VALIDATION OF CONTROL RODM FUNCTIONS FINDINGS AND HEDs GENERATED COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE C. Association Related controls and displays should be easily identified as being associated. This association can be established (or enhanced) by (1) location, (2) labeling, (3) coding, (4) denarcation, and (5) consistency with operator expectations. The following relationships should be immediately apparent to the operator:

Association of displays with controls. Yes 1.

The direction of movenent of control and display. Yes-2.

Yes

3. The rate and limits of movenent of the control and display.

6.9.1.2 MULTIPLE CONTROLS OR DISPLAYS The control and monitoring of nuclear power plant systens will occcasionally require either multiple controls or mult-iple displays. Control display relationships in multiple '

arrays should be apparent to the operator and consistent with human expectations.

A. Multiple Controls, Single Di_ splay __

Controls should be mounted below the display. Yes 1.

4-44 f --_- - - - _ _ - _ - - - - _ _ _ _ _ _ _ _

TABLE 4.5 PAGE 13 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED ,

[

GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS t -

2. Controls should be centered on the display. Yes f

3. Controls should be grouped in a line or matrix. Yes

4. If not feasible to mount controls directly below the Yes display, controls should be mounted to the right of the display.

S. Where there is a normal order of use, controls should Yes be arranged for use in left-to-right, top-to-bottom, or other natural sequence.

Where the above techniques cannot apply, or where for No See Table 3-8

6. for Guideline other reasons the relationships are not readily 6.8.1.3 findings apparent, layout enhancement techniques should be See Table 3-6 suployed - spacing, demarcation, color shading, for related insert panels, panel relief, and the use of mimics. findings and See Guideline 6.8.1.3 HEDs from Guide-line 6.6.6.2 B. Single Control, Multiple Displays Displays should be located above the control. Yes 1.

The control should be placed as near as possible to Yes 2.

the display, and preferably underneath the center of the display array.

=- -

4-45

TABLE 4.5 PAGE 14 0F 20 VALIDATION OF CONTROL RODM FUNCTIONS FINDINGS AND HEDs GENERATED

---

-.. - - - 1.. .... . .---

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE Displays shouid be arranged horizontally or in a Yes 3.

matrix.

4. If it is not feasible to mount displays above the Yes control, they should be mounted to the left of the ,

control.

Where there is a normal order of use, displays should Yes 5.

read from.left-to-right, top-to-bottom, or in other natural sequence.

Where'the above techniques cannot apply, or where for Yes 6.

other reasons the control-display relationship is not clearly apparent, layout enhancenent techniques should be enployed. See Guideline 6.8.1.3.

7. Displays should not be obscured during control 2

manipulation.

Yes C. Display Selectors Where displays are selected for viewing using a rotary selector switch, the following should apply:

1. The control should move clockwise from 0FF (if appropriate) through settings 1, 2, 3. ..n.

Yes

....=

-e..-

4-46

TABLE 4.5 PAGE 15 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED 1 --

COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE '

s _ . . .

The control room position sequence should confonn to Yes 2.

the display sequence.

3. Control position indications should correspond with display lables. Yes Yes 6.9.2.1- LOCATION AND ARRANGEMENT OF CONTROL-DISPLAY GROUPS A. Functio _nal Integrity Multiple controls or displays related to the sane Yes function (e.g., power, status, test) should be grouped together.

B. Sequence of Use Sequence of use should be as follows:

Yes

1. Left to right.

Top to botton. Yes 2.

The above cambined (nonnal reading order). Yes 3.

4-47

TABLE 4.5 PAGE 16'0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED GUIDELINE COMPLIANCE HED NUMBER PRIORITY REMARKS 6.9.2.2 SINGLE PANEL ARRANGEMENTS Appropriate arrangenents for control-display relationship, in order of preference, are (a) display above each control, (b) displays and controls in matched rows, and (c) multi-row displays with a single row of controls. Practice should be consistent, so that operator expectations are not confused.

A. Display Above Each Control The preferred configuration is witn the display above No 2 BA4-2307 6 High Safety Imp.

each control. If this configuration is used the following should apply:

1. Each display should be located directly above its associated control.

i

2. The display / control pairs should be arranged in rows. Yes B. Controls and Displays in Rows As an alternative, displays may be arrayed in rows as the upper portion of a panel, matched to controls arrayed in similar rows below.

1. Each control should occur at the sane relative Yes l

position as the display to which it is associated.

4-48

TABLE 4.5 PAGE 17 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELINE

~ .

'6.9.2.2b (Continued) .

Controls and displays should have corresponding Yes 2.

.l aDel s.

C. Multi-Row Displays with Single-Row Controls A less desired arrangement is one in which two or more

. rows of displays are arrayed above a single row of controls.

Displays should be ordered left to right and top to Yes 1.

botton (in normal reading order), and matched to controls ordered left to right.

2. Controls and displays should have corresponding l abel s.

Yes D. .Consisitent Practice Arrangenents of functionally similar controls and dis-plays should conform to the sane convention throughout the control room.

E. Control / Display Packages When controls and related displays are assembled using Yes modular packaged units, the design of the packages will 4-49

TABLE 4.5 PAGE 18 0F 20 VALIDATION OF CONTROL ROOM FUNCTIONS FINDINGS AND HEDs GENERATED

- COMPLIANCE HED NUMBER PRIORITY REMARKS GUIDELI.NE 6.9.2.2~(Continued)

Limit the location and arrangement which can be achieved.

In this case, modules should be se'ected and arranged to achieve maximum conformity with the principles described above.

6.9.2.3 CONTROL'S AND DISPLAYS IN SEPARATE PLANES A. Separate Controls and_ Displays Where displays are on separated panels, they should preferably be on tt:0 adjacent upper panel fron their associated controls.

B. Facing Panels In no case should related controls and displays be located on separate panels that face each other.

6.9.3.1 GENERAL MOVEMENT RELATIONSHIPS A. Rotary _ Control,s Rotary controls should turn clockwise to cause an increase 4-50

TABLE 4.5 PAGE 19 0F 20 VALIDATION OF CONTROL It00M FUNCTIONS FINDINGS AND HEDs GENERATED HED NUMBER PRIORITY REMARKS COW LIANCE GUIDELINE ,

in paraneter value. The associated display movenents should be as follows:

Yes

1. Linear scales, up or t2 the right.

Yes

2. Digital displays, increasing in value.

Yes

3. Strings of indicator lights, botton-to-top ,or lef t-to-right.

Yes

4. Circular meter pointers, clockwise.

i B. Linear Controls Linear controls should move up or to the right to cause an increase in paraneter value. The associated display rela-tionships should be:

Yes

! 1. Linear scales, up or to the right.

Yes

2. Digital scales, increasing in value.

Yes

3. Strings of indicator lights, bottom-to-top, or left-to right.

a

-c 4-51

TABLE 4.5 PAGE 20 0F 20 VALIDATION OF CONTHDL RODM FullCTIONS FINDINGS AND HEDs GENERATED I

GUIDELINE COW LIANCE HED NUMBER P,RIORITY REFZ.IS C. Display Respo'ne Time Lag

1. There should be no time lag between systen condition Yes change and display indication.

2. When there is a time lag between control actuation Yes and ultimate systen state, there should be an insnedi-ate feedback indication of the process and direction of paraneter change.

1 l

I 4-52

5.0 ASSESSMENT AND DISPOSITION OF HEDs 5.1 Assessment Assessnent of the HEDs generated by the various CRDR tasks was accomplished in accordance with DLC NCD Instruction R-407.

5 .1.1 Methodology Following review and signoff by the Westinghous Progran Coordinator /I&C Engineer (to ensure accuracy and conplete-ness fron a technical standpoint) and by the Essex Hunan Factors Project Manager /HFS (to ensure accuracy and con-pleteness fran a hunan factors standpoint), each HED was assigned a unique nunber, recorded in the HED Log and assessed by the review tean (the meaning of the HED nunber is explained in Instruction R-409) . Preliminary HEDs that were not legiti.nate because of the misinterpretation of a NUREG-0700, Section 6, guideline or the misunderstanding of a control roon feature were discarded.

The Review Tean consisted of the Review Tean Leader, the Technical Coordinator, the Instrunentation and Control Engi-neer, the R0, the HFS, and supporting personnel as deter-mined necessary by the Review Tean.

Fi rst, the Review Tean assessed the priority of each HED based upon a preestablished logic diagran (See Figure 5.1).

Each HED was categorized as follows:

• Category I - A HED based upon an error documented as actu-ally occuring at a plant of similar design.

• Category II - A HED based upon a discrepancy having a relatively high potential for degrading perfonnance.

• Category III - A HED based upon a discrepancy having a relatively low potential for degrading perfonnance.

Each HED was then assessed further for safety importance and consequence of error to detennine priority, with a scale of 1 through 9 rel ating relative overall importance fran a safety and hunan factors perspective (for more details on priority rating, see Instruction R-407, Appendix B). Figure 5.1 is a sample of a conpleted HED Priority Record Fonn.

The Review Tean evaluated each HED and detennined what cor-rective action should be taken. Corrective actions, such as surf ace enhancenent, design change, or procedural, training, or administrative changes, were reconmended. The reconmend-ations are recorded on the HED forms.

5-1

Following CRDR Core Tean agreenent on the reconmended reso-lutions, a reassessment was perfonned to detennine Aether the correction satisf actorily resolved the existing discrep-ancy and to ensure that the final reconmended resolution would not introduce new discrepancies. Each HED resolution was assessed for the extent of deviation fran the guide-lines. A rating of zero oeviation for the reconmended reso-lutiun was considered acceptable. A greater-than-zero devi-ation fron the guidelines requireo a deternination of error potential and a detennination of consequence of error on a scale of 1 through 6. An error potential or a consequence of error greater than 3 required a modification of the reconmended resolution or a docunented justification of the original resolution. Figure 5.2 is a sanple of a conpleted Reassessnent of Probable Error and Deviation fonn.

The reconmended resolution section of each HED was reviewed and signed by the Westinghouse Progrsn Coordinator, the DLC Review Tean Leader, and the Essex Hunan Factors Project Manager to denote acceptance of the reconmended resolution.

The HEDs were submitted to DLC managenent for review and approv al . The DLC Managenent Tean consisted of the Engi-neering Manager, the Regulatory Af fairs Manager, and the Operations Manager to approved, disapproved, or modified and justified the reconmended rc.olutions. Dissapproved or modified HEDs were returned to the Review Tean for concur-rence, reiteration of the original reconmendation, or the developnent of an alternate recanmendation.

l l

l S-2

I

~

HED PRIORITY RECORD HED# g g - M g)

N YES

1. DOCUMENTED ERROR?

N YES 1 DOCUMENTED UNSAFE CONDITION OR TECH.

SPEC. VIOLATION?'

YES

3. HIGH SAFETY IMPORTANCE NO (PAM OR 1E)?

1 2 3 4 5 8

4. ERROR POTENTIAL?

M ,

H 1 2 3 4 5

5. CONSEQUENCE OF ERROR: H EDW

(-)

If vas no l cariocar i j v

If 1r ve use so was sa a no

• • NE" s

' = ^' a ,r u catsoon,a cassoon, m Ir 1 r 1 r if

"' S * 'er uSaaEcs m$a Eco nSe I.ca no no no no i

if i f I f 17 ou ace ve coa ou a ves oa ou ace va con ou c f ves 666666666

~

I I paeoany Levets ,

Figure 5.1 5-3

REASSESSMENT OF PROBABLE ERROR AND DEVIATION HED # g% R.W \

SOME COMPLETE

1. EXTENT OF DEVIATION NONE .

4 5 6 0 1 2 3 FROM GUIDELINES LOW til9_li

2. ERROR POTENTIAL 1 2 3 4 5 6 LOW HIGH 3, CONSEQUENCE OF ERROR 4 5 6 1 2 3 YES DEV = 0 CEPTABLE RESOLUTION NO i f ERROR YES OTENT'AL AN ACCEPTABLE RESOLUTION

, gEOU CE S3 NO 1 f MODIFY RECOMMENDATION OR JUSTIFY AND DOCUMENT l

SIGNOFF: DLC RTL S/ [

DATE: 7 r '

Figure 5.2 l 5-4 i

_ _ _ _ . _ _ . _ _ _ _ _ __ _ _ _ _______._._ __. ----------------------------eee ,o -r--,--- +--- --- - - w ve- e,---ww---

5.2 ~ HED Disposition ATI 160 HEDs identified during the BVPS-2 CRCF have been disposi-tioned by DLC managenent and are contained in Volune 3 of .this report. Table 5.1, " Summary of Hunan Engineering Discrepancies,"

lists all HEDs (except those requiring no change) by type of correction required for resolution. Tne correction categories and c nunber of HEDs in cach catego.y are as follows3*

C - resolution complete or in crogress 7 HEDs E - equipment change requi,eo for resolution 21 HEDs L - label (surface enhancenent) change required for resolution 26 HEDs P - procedure change required for resolution 12 HEDs No change required 98 HEDs 5.2.1 Resolution Complete or in Progress HEDs in this category either are resolved, or the design effort necessary for resolution is currently underway.

Table 5.2, " Corrections in Progress," lists the HEDs in this category and describes the current status.

5.2.2 Equipment Change Required Table 5.3, "Equipnent Resolutions," lists all HEDs Wiich require addition, change, or movenent of control equipnent for resolution.

The HEDs in this category have been assigned a " Change Request" number (as shown in Table 5.1) and placed into the existing change request process in accordance with NCD Pro-cedure 2.12 "Onsite Design Change Control." Inconsistencies in Section L (Di sposition) of the HED Report will be resolved through the change request process.

5.2.3 Label Change Required Label (surface enhancenent) changes are relatively si.nple means of tinproving an operator's ability to control the pl ant. Included in this category are all HEDs reconmending lines of denarcations, flow path mimics, and hierarchical schenes as well as individual device scales and labels. A 3When the reviewer adds the HEDs by category, he will arrive at a total of 164. This is because two HEDs fall into categories E and P and two HEDs fall into categories L and P. The actual nunber of HEDs is 160.

5-5

canprehensive prograa of labeling has begun, which incorpo-

-rates the following activities to ensure that labeling HEDs

~

are resolved in a consistent fashion.

1. A standard station nonenclature and abbreviations list has been established. This list is contained in Chapter 48 of the Operating Manual and will serve as the stand-ard for both Unit 1 and Unit 2.

2. A standard conponent naneplate fonnat for both Unit 1 and Unit 2 has been established and will be fonnatted wherever possible according to the following (see Figure 5.3 for an exanple):

Nameplate Line 1:

.lst: Main conponent or systen, related to or serviced by the conponent controlled or subsysten or paran-eter displayed, preceded by the appropriate alpha

, nuneric identifier.

2nd: Equipnent or subsysten containing either the con-ponent controlled or paraneter displayed.

Naneplate Line 2:

Component controlled or paraneter displayed preceded by the appropriate descriptions.

Naneplate Line 3:

Mark nunber of conponent controlled centered on this ,

line of the naneplate.

Power supply identification in the lower right hand corner of the plate.

3. The main control board, building service control panel, emergency shutdown panel and alternate shutdown panel label lists have been revised in accordance with the above standards.

Table 5.4 lists HEDs to be resolved by label change or demarcation.

5.2.4 Procedure Change Required Table 5.5 lists HEDs which may be resolved by procedure change.

5-6

5.2.5' No Change Required This group of HEDs was dispositioned by the Review Tean and/

. or the Managenent Tean as requiring no change. The justifi-cations for no change are docunented on the backside of each HED Report (see Volune 3).

5.2.6' HED Exanples Photographs of 5 HEDs identified during the BVPS-2 CROR are shown in Figures 5.4 thru 5.8.

I I f

-k 5-7

TABLE 5.1 St#9tARY OF HJMAN ENGIEERIhG DISCREPf6CIES Correction Category Pet Remarks Change HED ho. ED Title Tyoe Recuest I

5 ELDCR 2PG-1428  ;

2*++-1201c Arrangement not logical C ChTRL MR6T '

2+++-1201e Arrangement not logical C CNTRL ARRST 5 Itses 1119A and 751 are in correct oositten 2AB+-0201 Locate como equionent C ASP 7 C CNTil TYPE 7 74 2BC3-3025 SAS comoressor switches C ESP 5 2ES+-3020 Controls too close to front Setooints outside range C INDICATORS 5 68 2V++-2007 5 65 2VC6-2214 Do not use multsplier C INDICATORS CNTRL MR6T 5 83 2+++-1201a Arrangoesnt not logical E ChTRL MR6T 5 80 2+++-1201b Arrangement not logical E CNTRL MR6T 5 81 2*++-1201d Arrangement not logical E DiTRL MR6T 5 82 2+++-1201g Arrangement not logical E ADD EEJIP 7 N/A 2+++-2005 Add a control room clock E INDICATORS 9 67 2VC6-2012 Change scale to feet E INDICATORS 9 66 2+C+-2217 Do not use sulti-scale E 2AB+-2017 Ecuts in proc not on panel E8p ASP 6 11 anc 2) only ++

5 ++

2BB+-3015 Overpress. protection keylocks E DiTIL TYPE .

7 62 2B++-3403 Standby alars wrong direction E CNTRL TYPE 2BB2-3301 Rod control wrong direction E CNTRL TYPE 5 69 2ES+-1001 Eauip in proc not on parel E4P ESP 6 5) Add clock only N/A 2ES2-3022 Arrangement not logical E esp 6 72 ESP 5 70 2ES4-3023 Different transfer sex used E Do not une sultiplier E Ile!CATORS 6 73 2V*+-2014 2VA6-2010 Do not use multiplier E INDICATORS B 64 2VA9-2403 Wrong scale on recorder E ECORDERS 5 Add linear cares 63 2VB2-2404 Wrong label on recorder E ECORDERS B h/A ECORDERS 5 75 2VC6-2402 Wrong label on recorder E ECORDERS 7 ++

2VC5-2405 Recorder scale graduations E 2BB1-3026 Block soitches; illogical order E CTIL ARiuiT 7 Unit 1 I G Review **

2+++-1101 Inadvertent opening of v1v L LAEL & DEMARC 3 2<*+-1103 No hierarchical labels L LABEL & DEMMC 5 2+++-1105 No labels for funct groups L LABEL 4 DEMMC 5 2+++-1107 No demarcation lires L LABEL 8 DEMMC 6 2+++-1106 No demarcation lives L LABEL 8 DDIMC 6 2+++-1109 Label coordinates of arrays L LABEL & DOIMC 9 2+++-1111 Non std abbrev used on labels L LABEL & DEMMC 8 2+++-1113 Some labels are incorrect L LABEL 8 DOIARC 5 2e++-1115 Some labels are incorrect L LABEL & DEMMC 7 2+++-1116 Location aids are needed L LABEL & DDIMC 5 2+++-1117 Label entr11ers for range L LABE & DOqM C 5 L LABEL & DOqARC 5 2*++-1201f Grovo PPOWST indicators ~

2+++-2213 Setootnts not match scale L8P PRCCEDURES 5 2BB1-2215 Related indicators not ordered L LABEL 4 DEMMC 9 2+++-2220 Setootnts not match scale L8p PROCEDURES 6 2+++-3002 Identify SLI switches L LABEL & DDIARC 7 Wrong HEL coscription 2AB+-1121 Add demarcation L ASP 7 2B++-1104 Labels not always aDove L LABEL & D N RC 9 5-8 . _ _ _ _ _ _ -_.

TABLE 5.1 (CONT.)

Si.MGRY OF HUMAN ENGINEERIN3 DISCREPfhCIES nED ha. ED Title Correction Category Prt Remaras C9ange Type Recuest 2 Bee-2302 Remark legend light engraving L STATUS P M LS 7 2944-2502 Group digits on counters L INDICATuRS 7 2ES*-1118 Labels not aleuys above L ESP 9 2ES*-1120 identical naseolates L ESP 6 2ES1-1119 No esmarcation lines L ESP 6 L Ap00CIATOR 8 2 Vee-1112 Non-standard abbrev. used 2VA9-2406 Distinguish between points L ECORDERS 7 2VC6-2008 Arrange indicators logically L LABEL 8 DDGRC 8

' 2***-2213 Setpoints not match scale P&L PROCEDUES 5 2***-2220 Setpoints not match scale P&L PROCEDURES 6 2*++-3006 Ecuto in proc not on panel P PROCEDURES 9 2ABe-2017 Equip in proc not on panel P&E ASP G 3) Use 2ES*-1001 resolution 2ABe-3207 Smitches missing targets P ASP 5 29**-3206 Settch pos missing on entrilrs P PROCEDURES 6 2BA*-3014 Set controller for pressure P PROCEDCES 8 29A4-3205 Puso control without speed sel P PROCEDURES 8 2ESo-1001 Ecuto in proc not on panel D4E ESP 6 1) TO 4) DNLt 2ES2-3208 Pump control without speed sel P ESP 5 2VC6-2218 Setpoints not match scale P PROCEDURES 5 2*++-3018 Labels not match proc P PROCEDURES 8 NOTES:

1) CORECTI(k TYPE C - Change to resolve this ED is noe in progress E - Equipment change : add or sove L - Label change demarcation, grouping, standard nomenclature annunciator engraving, and indicator labeis P - Procedure change on;y

2) ** - Change request No, not yet assigned

3) PRIORITY - see NCD Instruction R407 (Appendia B) l

_ 5-9 _

i TABLE 5.2 HEDs es!Cn NAVE BEEh RESDLVED PAhE. DilAWIMi ITEM MARK DESCRIPTIOh 0F RES(1.UTION l nD rec.

M. M. M. M.

2+++-1201c BB-1,2 RE-25h 535,536 2RCS+PCV455C,D EADCR 2PQ - 142a provtoes acceotable resolution 537 2RCS+PCV456 2+++-1201e BA-4 RE-25K 710,711 2 SIS +MOV867A-D Refer to RE-25K Rev. 5. Itses 1119A and 751 are in correct oosition 751,11194 This HED is resolved when ED 2+++-1201 is resolvec as incicate:

1 2AB+-0201 ASP R00n Consunication souionent part of ASP room cesign 1 2BC3-3025 BC-2,3 RE-25V.W 149A,150A 2SAS-C21A,B Change of switch hancles is cosoletec l

2ES+-3020 ESP RE-25DE-DS All Admin. control will ensure that olent;1as5 9 ver is in :: ace 1 not in use. l 2V++-2007 VA-5 E-25A 995 20SS-LR100 Current range is 13 - 742 inches VC-5 RE-250 290A, B 20SS+L!!00A, B Current range is 13 '742 inches ,

VC-5 E-250 908A, B 2FNC+L1102R, B Current range is 0 - 480 inches J VA-5 RE-25A 1013 2RSS-LR151 Current range is 0 - 225 incnes VH E-259 1006A, B 2RSS+L!151A, B Current range is 0 - 225 irenes 2VC6-2214 VC-6 RE-25R 263 20m-PIl01 Current range is 0 - 1000 csig r

e S-10 . _ _

VABLE 9.3

)EDs TG BE RESCLVED BY E211PEhT DW6E

~

Panel Drawing itses Mark ho. Desertotton of Change RED ho.

Sect 1on involved 644 640 2MSSePK1018,C Excnange the positions of the controllers 2 e+-1201a BA-2/3 E-25H 2p+-120!b Be-4 RE-25J/K See Descriptf an Move the following snatches:

714 - 206*FCVI!3B 715 - BA Blend Control 716 - 2CHS*TCV143 722 - 2CHS-MOV311 729 - 2CHS-MOV303A 730 - 2CHS-MOV303B 731 - 2D6-MN303C E-25J/K See Description Move the follouing snatchest 2**+-1201d BA-4 709 - 2SISeNOVE98 710 - 2 SIS *MOV867B 711 - 2 SIS

• MOVE 7D 717 - 2CHS*LCV115D 979 - 20 6*MOV111 2+++-1201g BC-2 RE-25V HICs 2FE* HIC 100A-F Exchange 'A' for "E' and 'B' for 'F' 2*++-2005 h/A N/A ' Clock N/A Add digital clock to the control room wall - not on tne MCB 2*Co-2217 BC-3 E-25W 3A Synch Meter Delete 0 - 26 kV scale VC-8 RE-256 3B Synch Meter Delete 0 - 26 kV scale 2AD+-2017 ASP E-25SA Clock N/A 1) Add the indicator; circuitry is already in the W E rack El Add digital clock to the ASP race wall - not on the panel

3) Cooldown rate indication not nesced 2Be+-3403 BB-2 E-25N 335 N/A Reverse contacts on the standby alars suitch BC-3 RE-25W 170 N/A 2982-3301 BB-2 E-25N 329B N/A Reverse pushbuttons under the rod control station 2ES+-1001 ESP N/A Clock N/A Add digital clock to the ESP race wall - not on the panel 2ES2-3022 ES M RE-250F 207-210 Move the following switchest  ;

207 - 20 6*S0V206 208 - 2CHS*LCV115C l 209 - 206*LCV115E 210 - 2CHSatCV1150 l 1

2ES4-3023 ESP-4 RE-250H 296*FK605B Replace the current transfer switches 2D6eHIC7588 with OT-2 switches with small 'J' handles 2V++-2014 VA-6 E-25B 879A-C 216S-PIl01A-C Purchase new scales without the sultiplier VC-5 RE-250 296,297 2CCP*F1117A1,B1 VC-5 E-250 305A,B 2CCP-F1117A2,B2 VC-6 RE-25R 1140 2FW6-P1152 VC-6 RE-25R 913 2FW6-91155 VC-6 RE-25R 919 2 MSS-P1104A,B,C VC-7 RE-255 260A,B 2 MSS-pit 02A,B VA-9 RE-25E E5 2RCS-II21A,B,C 2VA6-2010 VA-6 RE-25B 8794-C 2 MSS-P!!01A-C See above 2VA9-2403 VA-9 RE-25E E3B 2D6-FR154B 0.2 gas is required to be displayed, but can not ce read on the scuare root scale. Reuork the instrueent loops to disDiay f the 0.2 gom reactng clearly Dy changing the recorder scale are:

f 1) acdtng three scuare root extractor carcs, or l 21 enanging or recalterating the transettters 5-11 1

\

TABLE 5.3 (C0hT.)

HEDs TO BE RESOLVED Bf EGJIPMENT CHANGE ED ho. Parel Drawing Itses Mark No. Description of Change Section Involved E-22 448 2ES-TR406 Remark label to call the green pen Tref 2ro2-2404 VB-6 2VC6-2402' VC-6 RE-25A 281 2FW6-LR477 Change scale to read 0 - 100 percent 2VC6-2012 VC-6 E-25R E73A,B 2FE-L1104A1,2 Change scale units free inches to feet (PDWST levell 28B1-3026 BB-1 E-25N 344-347 OT-2 SWITCES Rearrange block switches as follows:

360,361 SGjACE RANGE INTEiIEDIATE RANGE POER iWNiE 2VC5-2405 VC-6 RE-25R 276 2DM-PR103 Diange recorder scale values so they progress by 1, 2, 5, or 10.

2BBe-3015 BB-2 RE-25N 352A AIM /BLG:K Install keylock or guard to prevent accidental actuation 354A 4

i s

, 5-12

EXAl@LE OF' NAMEPLATE USING NEW FORMAT AUXILIARY FEEDWATER TO STEAM GENERATOR EXISTING NAMEPLATE: 2FWE*HCV100A AC2-E3 21C SG AFW THROTTLE VLV PROPOSED NAMEPLATE: 2FWE*HCV100A 3/4" E-13 1

3" FIGURE 5.3 5-13

TABLECJ.4 LABEL CDRRECTIONS PAEL DRAWin ITEMS MARK DESCRIPTION OF CHANGE HED ho.

ho. No. No.

A CONSISTENT HIERARCHICAL LABELING SCEE WILL RESUE THE F(LLOWING HEDs 1

2+++-1101 BA1-3 571,616,627 2 SIS +MOVB52 M use oemarcation to differentiate tnese All panels Add a hierarchical labeling schese 2+++-1103 All panels Add labels for furetional groups of controls and displays 2+++-1105 i

All panels Add lines of demarcation for functionally related displays 2+++-1107 All panels Add lines of demarcation for functionally related controls 2+++-1104 All ESF controls use color codes to highlight safeguarcs controls 2+++-1116 Add PAM set demarcation to groups of 2+++-1201f VA-5 RE-25A PAM Sets 1 8 11 VA4 E-25B indicators on these panels VA-B RE-25D BB-1 E-25N VC-5 RE-250 l

VC4 RE-25R Provide demarcation armi sumary laoels 2+++-3002 BC-2 RE-25V SL1 switches 789-792 2AB+-1121 ASP E-256A panel face Add hierarchical labeling aM demarcation to ASP 2VC6-2006 VC4 RE-25R 920,921 2FE+L14+7 Covered for ED 2++e-120!f l

TE FILL (nillG EDs WILL BE ESILVED BY ElHICING TE 1EICATOR FACE OR SWITCH ESCUTCE0h 2+++-2213 All indicators Mark normal zones arui setooints on scale faces idere appropriate Mark normal zones and setpoints on scale faces 2+++-2220 All indicators

' where appropriate TE F(LL(ni1NG EDs WILL BE ESILVED BY (NAN 61N6 TE LABEL BISI - A Add roe and column labels to inese status ligat panels 2+++-1109 BA-3 RE-25H 1069 BA-3 E-25H 1070 BISI - B VC4 RE-25R 1020 MSS DARINS VC-5 RE-250 1019 ESS ISOL VLYS BC-2 RE-25V 18 MSS BfPASS BC-2 RE-25V 19 SG TRIPS BC-2 RE-25V 47 S6 TRIPS BB-1 E-25N 308 PRI PLAhT BA-4 RE-25K 465 RCP STATUS BA-2 RE-256 464 ESF Status 5-14

TABLE 9.4 (C0hT.)

LABEL CURRECTIONS HED No. PAIG. DEAWI!G ITEMS MARK DESCRIPTION OF CHANGE ho. ho. ho.

2eee-1111 All labels and annunciator Use stardard nomenclature and abbreviations tiles (Refer to Doerating Manual Ch. 48) 2eee-1113 All labels and annunciator Same as 2e++-1111 Establish stanoard format tiles ( see ED attacheent )

2e++-1115 BR-2 E-256 1501,1505 20SS*P24A,B 1) Change ' Chemical Addition Pump" to

' Chemical Injection P eo' BB-4 E-250 406 20SS-P23 2) Change 'Dionical Addition Pump

• to

" Quench Spray Chemical Addition Puso" BC-3 E-25W 1 % ,198 008 85,94 3) See ED writeep 166 89-2A 2e++-1117 All panels controllers Add "open' and ' closed' positton indication to controllers 2ES1-1119 ESP-1 E-2SE 108T,111T 2NISeSOV105A-F Add nameplates for transfer pushbuttons 108T & 111T which state the controls associated w/ each pusnDutton 2 Bee-1104 BB-3 E-25p 378A 21st!-N!35,36 Place labels above irdicators BB-3 RE-250 3788 2l06-N131,32 BB-2 E-2Si 313 21BWHi!4+B BB-2 RE-25N 315 2RCS-T14*28,C BB-2 E-2Si 316 2ES-T1408,IB BB-2 RE-25N 317 2RCS-SI408 BA-4 E-25K %5 E P Status BR-1 RE-256 44 ESF Status BB-1 RE-25N 307 Gen iti 2 Bee-2302 Legend lights Reengrave selected legend lights 29A4-2502 BR-4 E-25J 720 2DE-F91S113 Add deciaal point to drum counters on totalizers BR-4 ilE-25K 733 2DE-rQIS168 Labeling revisions as indicated on ED attachment BR-4 E-2U 991 2 chi-FQ113 BR-4 E-25K 992 206-FQ168 2ESo-1118 ESP E-25DE-D6 All Place labels above coeconents 2ES+-1120 ESP-3 RE-25D6 303-304 2156MOU02A Add train designation to labels ESP-4 RE-25H 406-407 2RHSWOn01B 2Ve+-1112 All annunciators Use standard nomenclature and abbreviations 2VA9-2406 VA-9 E-25E 8644,B 2flCS-TR448A,B Addlabeltorecorderswhichidentifyindividual recorder points 2BB1-2215 BB-1 RE-25N 325 SEL SWTCH Change label on PIR level charmel selector switch 5-15

. TAk.E 5.5 EDs RE51VED BY PROCEDJPE ChAME nED %. REC 0pOEhDED PROCEDURE CHANGE de*+-2213 Revise omcoaum mferences to these setootnts to the next most conservative, readable value. Also marking normal operating ranges on the indicator face will helo 2+++-2220 Same resolution as ED 2+++-2213 2*++-3006 Change procedure to show local control 2ABe-2017 3) See 2ES*-1001 resolution - Recutre logging of temo anc time to deterstne coolcown rate 2ABe3207 Change procedure to ooit reference to targets on smitches 2Be+-3206 Isolation valves are ADVs and do not modulate.

Define the need for 'oull to lock' Change the procedure to reflect installed souionent 2BA+-3014 Revise the procedure to show soculation of the controller smile monitoring 2 MSS-PIl01A, B, C. nmen the desired pressure is attatred, and the auto-setpoint corresponds to the desired pressure, the controller should be placed or returned to automatic.

The controller will then saintain the set pressure 2BA4-3205 The procedum should describe the installed single speed Duma 2ES+-1001 Revise the procedures to show the following:

11 2pSS*90V105A-F (Itses 107 - 112) provioe the necessary control

2) 2FE-fl100A-C (Items 150 - 1521 provide tnis indication

3) The difference between THet (Items 355) and TCold (! tees 350) provides this information

4) The clock and itse 3 above provioe this information 2ES2-3208 The procedure should describe the installed single sased puso 2VC6-2218 Modify procecure to maintain flow and to maintain steam generator water level 2+++-3018 Ensure proceoure matenes tersinology, abbreviations, and nomenclature used on the nameplates and satten escutcheers 5-16

l FIGURE 5-4 HED No. 2*C*-2217

Description:

The " SYNCH VOLTS - INCOMING NORMAL" indicator is a ,

multiscale indicator (violates NUREG-0700 criterion 6.S.1.4 f). I It is also different than the " SYNCH VOLTS -RUNNING l NORMAL" indicator. These two indicators should have identical scales.

s

-ls ex, ,

<A ggy. .,

i _

I

[y,k1 P f'6

'y sMl'I' i ,

iia e,,

s

W 2o s 'a.

22 no -

~

s 100 11 0 g'

24  %

!8 .. . 90 , g e novoir, N ', 's.g yo,7, O

l

,xg.,

Resolution:

Replace the existing " SYNCH VOLTS - INCOMING NORMAL" indicator with one that matches the " SYNCH VOLTS -

RUNNING NORMAL" indicator.

5-17

FIGURE 5-5 HED No. 2ES4 - 3023

Description:

The emergency shutdown panel uses two different types of switches for transferring control from the main control board (MCB) to the shutdown panel (SDP). (Violates NUREG-0700 criterion 6.4.1.1). The two controls on the left (43C and 48-CESNL) are preferred (external handle). The two on the right (43E and 43D -CESNL) are of the type normally anticipated when controlling valves.

_m '

{' ff ,

F: yen.

W t, .

C:

6 '?"' 43B Li ^ei, 9a wo

$ r 1:y y 7 5' p i * ,

Resolution:

Ensure that all transfer switches are of the preferred type.

5-18

FIGURE 5-6 l

HED No. 2BC3 - 3025

Description:

When the control for 2SAS - C2l A (Station Air Compressor) is in " PULL-TO-LOCK", 2SAS - CZlB cannot be placed in

" START" because the control handles interfere with each other (violates NL TEG-0700 criterion 6.4.1.1).

DB D B BR asns-c.ua 2:As -C210 E N M I Resolution:

Install oval-shaped control handles that will not interfere with each other, as shown below.

l

,,, . .3

.......g y,.. -. .

5-19

. ,a n In M ,...,- \h,figee \ A mt tik

l i

FIGURE 5-7 HED No. 2BB2 - 3301 ,

I l

Description:

The existing rod position controller is inconsistent with l operator's expectations (violates NUREG-0700 criterion 6.4.2.1). Also, the' positions are reverse to that of Unit 1.

, k BEREI i

Resolution: ,

1 The switch contacts and control labelling will be reversed so that pushing lever foward will push rods IN and pulling lever will pull rods OUT.

5-20

FIGURE 5-8 HED No. 2B** - 3403

Description:

The standby alarm switch does not conform to convention of pull to start and push to stop (violates NUREG-0700 criterion .

6.4.2.1). Also, the positions are reverse to that of Unit 1.

l I

e l

l l

Resolution: 1 The switch contacts and labelling will be reversed so that pulling the switch will actuate the standby alarm and pushing will stop the alarm.

J I

l i

'l .

5-21

.l l

i

6.0 Il@LEMENTATION AND SCHEDULING 0F CORRECTIVE ACTIONS It is anticipated that all HED corrective actions will be iraplenented prior to the scheduled fuel load date of April 30, 1987. However, there is one exception: HED 2VA9-2403 may involve considerable rework in the instru-ment loops and/or a change out of the transnitters. The scope for resolving this HED is under investigation. If circunstances should arise which would prevent DLC fron iinplenenting an HED identified in this report prior to fuel load, the NRC will be notified.

The NUREG-0700 criteria listed in Section 3.1 of this report sich involve dual unit control roon characterstics, and those listed as unable to be assessed, will be evaluated using the original set of CRDR instructions, ensuring a consistent approach for the Assessnent and Disposition of HEDs which may result. Tne post-CRDR evaluation will conmence after renoval of the tenporary wall and den the dual unit control roon is in a state which will allow for a couplete and final review. It is anticipated that any HEDs resul ting fron the post-CRDR evaluation will be impl enented prior to or during the first refueling cycle followi ng canpl etion of the po st-CRDR evaluation.

l l

I 1

6-1

7.0 C0 ORDINATION WITH OTHER ACTIVITIES 7 .1 Emergency Operating Procedures (E0Ps)

The usability of the E0Ps and their correlation to the control roan hardware are important aspects of the E0P developnent progran .

With this in mind, BVPS-2 integrated the E0P validation progran witn the CRDR validation progran. This approach ensured a coordi-nated effort between the two prograns while eliminating the dupli-l cation of work that would have otherwise occured. In addition, the SRTA portion of the CRDR used the E0Ps as its basis. This exanina-tion of the E0Ps enabled the Review Tean to reconmend changes to the E0Ps which would enhance their usability in the control roon.

HEDs generated against the E0Ps are listed in Table 5.5.

7.2 Regulatory Guide 1.97 -- Post-Accident Monitoring The Regulatory Guide 1.97 instrumentation was already installed at the time of the CRDR and therefore was reviewed as an integral part of the CRDR. The Regulatory Guide 1.97 instrisnentation, like all of the operator information and control needs, was reviewed in the Control Roan Survey, SRTA, Verification of Task Perfonnance Capabilities, and Validation of Control Room Functions.

7.3 Unit 1 Control Room Design Review The Unit 1 and Unit 2 CRDRs were conducted oy separate Review Teans due to the scheduling constraints of the Unit 2 construction project. The Unit 2 CRDR Summary Report was originally schedcled for a June,1985, submittal while the Unit 1 submittal was sched- l uled for Decenber,1985. However, with the announcenent in January, 1985, of the 14-month delay in the project conpletion date, the Unit 2 Summary Report submittal date was changed to Decenber,1985.

The revised submittal date ensured a more conprehensive review and increased coordination with Unit 1 (since both review tasks would ,

l now be conducted in parallel), yet allowed for sufficient time to implenent the HED fixes prior to the scheduled fuel load date of April 30, 1987.

7.3.1 Unit 1/ Unit 2 Coordination The primary means of coordinating the two efforts was through the exchange of HEDs. All BVPS-2 HEDs were forwarded to the BVPS-1 Tean Leader and vice-versa. The HEDs were then reviewed to ensure that similar problens would receive similar fixes. The Unit 1 HEDs were then screened by the Unit 2 Operations Startup Group to identify HEDs which:

1 7-1 -

1. Apply to Unit 2,

2. Have soine type of action reconmended by Unit 1 - Review Tean, and

3. Were not identified as an HED by the Unit 2 Review Tean.

There are ten Unit 1 HEDs which meet the above criteria (see

-Tabl e 7.1). Nine of these have resolutions reconmended by the Unit 1 tean, but at the writing of this report, had not yet received final Unit 1 disposition. Unit 2 will await l

Unit 1 disposition prior to acting on these HEDs.

4 f

• l 7-2 I

TABLE 7.1 )

U,N,IT _1 HE_D_s AP_P,LICABLE TO UNIT 2 Unit 1 Unit 2 Action HED No. ,,,_____ Description Task 45 Page phone cords are long and Control Roan Awaiting Unit 1 could trip operators Survey Disposition 51 Claxons on fire alarm and Control Room Awaiting Unit I radiation alarm are sane Survey Disposition 52 Radiation monitor alarm is Operator Awaiting Unit 1 intense and causes operator Interview Disposition discomfort i

Rod control start-up - control Control Roan Awaiting Unit 1 l 100 snould be protected fran Survey Disposition inadvertent actuation 116 OT-2 Emergency Generator Operator Awaiting Unit 1 ground switch indicator lights Questionnaire Disposition violate red / green convention & Interview 157 Volt Meters - .nost are on the Questionnaire Awaiting Unit 1 0-130V or 0-150V scale. Survey Disposition i Operator must convert when bus has higher voltage 183 Governor valves, throttle Control Roan Awaiting Unit 1 position meters and tracking Survey Disposition 1 meters - voltage limiter l status light in wrong. i position 337 Station air and containment Control Roon Awaiting Unit 1 Instrunent Ai.r indicators Survey Disposition are arranged anong turbine indicators. Controls are arranged similarly but denarcated differently.

362 Exciter circuit creaker switch Control Roan Awaiting Unit 1 .

)

can be confused with contain- Survey Disposition

.nent instrunent air conpressor switch (side-by-side, sane type handle) 386 Block switches should be Control Roon Unit 2 HED No.

ordered 1) source, 2) inter- Survey 2881-3026 mediate, 3) power 7-3 l

I

8.0 CONCLUSION

S The BVPS-2 CRDR progran was conducted to ensure conpliance with accepted hunan engineering standards. Tne standards used are contained in NUREG-0700.

Appendix D provides a NUREG-0700 Section 6 Guidelines /BVPS-2 CRDR findings cross-reference.

With the conpletion of the CRDR, DLC feels confident that the control roon, ESP, and ASP will support operation during nonnal and energency condi-tions. The success of the CRDR progran can be attributed to three factors:

o managenent connaitment to the review effort o expertise of the multidisciplinary Review Tean, and o detailed planning and scheduling in the early stages of the review.

8.1 Continuing Human Factors Program The success of the CRDR progran also required a good working rela-tionship between the Operations, Engineering, and Licensing depart-ments. This established relationship will be helpful as the HED resolutions are implenented. The equipnent change resolutions are being implenented through the Change Request process discussed in Section 5.2.2. The procedure changes will be incorporated into the next revision of the E0Ps. The HEDs involving labeling 14aprovenents have been addressed through the revised Naneplate Engraving List which incorporates the standard station rionenclature, abbreviations list, and the new naneplate fonnat.

The denarcation and hierarchical labeling schene was not attenpted during the course of the CRDR due to the ongoing construction in the control roon (see Figure 8.1). This effort will begin in the near future at which time the design of the control boards will be, for the most part, finalized. DLC plans to use the Electric Power and Research' Institute (EPRI) Report NP-2411, "Hunan Engineering Guide for Enhancing Nuclear Control Roans," and the existing guidance of the BVPS-1 control board to guide this effort.

Any control board changes made after the CRDR and before operation of Unit 2 will be reviewed by engineers at Stone & Webster Corp.

( Architect / Engineer for BVPS-2), wno are trained in Hunan Factors, to ensure that no new HEDs are created. Also, all changes must be reviewed by the Design Change Control Group (DCCG) at DLC. The chainnan of the DCCG was a member of the Unit 1 CRDR and had input to the Unit 2 CRDR. The operations representative on the DCCG was an active participant on the BVPS-2 CRDR Tean and had extensive input during the Assessnent and Disposition phase.

8-1

. 8 .'2 Post-Operational Human Factors ' Program At BVPS-1 (an operational plant) any design changes which inyolve the control roon are required to receive a hunan factors review in the Design Concept stage. When BVPS-2 becones operational, it will

-^ ~ also be subject to this requirenent. The existing (BVPS-1) guide-

. line for conducting a Human Factors Review is Nuclear Engineering Departnent Internal Instruction No. 39, "Hunan Factors Engineering Guidelines." This instruction reconmends operator interviews and use of consultants in reviewing the proposed change and requires conpliance.with NUREG-0700 guidelines. The full-scale photo mock-up is also available to ensure that the proposed change does not create any new HEDs.

1 e

8-2

FIGURE 8.1 BVPS - 2 Control Room (under construction) ,

l l

1 I

i t er w ._

i >. n.g y

g, ertr no r=u ,

i ,, g ~- '"Mk-- ,

t*N __

1 h',$

4 I

t 8-3 l

. _ _