1 Review of Specifications for Digital Upgrades NHUG Summer Meeting July 17, 2008 Tim Mitchell Component Engineering Palo Verde Nuclear Generating Station Tim Mitchell Component Engineering Palo Verde Nuclear Generating Station

NHUG - Chicago - 7/17/082 Specifications Reviewed Southern California Edison – SONGS Replace six (6) non-class chillers controls with digital controls Duke – McGuire Station Replace two (2) safety related Carrier chiller controls with Trane Tracer CH531 Micro-processor based controls TVA – Browns Ferry Replace four (4) air cooled safety related chillers with rotary screw compressors with digital controls TVA – Sequoyah Upgrade six (6) digital control systems to digital, micro-processor based control systems and add a Refrigerant Monitor Arizona Public Service Co – Palo Verde Control Air System Software Upgrades Core Protection Calculator System Upgrades

NHUG - Chicago - 7/17/083 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Nuclear Regulatory Commission (NRC): Reg. Guide – Criteria for Digital Computers in Safety Systems of Nuclear Power Generations Stations Reg. Guide – V&V, Reviews, and Audits for Digital Computer Software Used in Safety Systems of Nuclear Power Generation Stations Reg. Guide – Software Test Documentation for Digital Computer Software Used in Safety Systems of Nuclear Power Generating Stations Reg. Guide – Software Unit Testing for Computer Software Used in Safety Systems of Nuclear Power Generating Stations Reg. Guide Software Requirements Specifications for Computer Software Used in Safety Systems of Nuclear Power Generating Stations

NHUG - Chicago - 7/17/084 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Nuclear Regulatory Commission (NRC) Continued: Reg. Guide – Developing Software Lifecycle Processes for Computer Software Used in Safety Systems of Nuclear Power Generation Stations Reg. Guide – Guidelines for Evaluating Electromagnetic and Radiofrequency Interference in Safety Related Instrumentation and Control Systems Reg. Guide 1.75 – Physical Independence of Electrical Systems 10 CFR 20 – Standards for Protection Against Radiation 10 CFR 21 – Reporting of Defects and Noncompliance

NHUG - Chicago - 7/17/085 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Nuclear Regulatory Commission (NRC) Continued: 10 CFR 50, Appendix A - Licensing of production and Utilization Facilities, General Design Criteria for Nuclear Power Plants 10 CFR 50, Appendix B – Quality Assurance Criteria for Nuclear Power Plants 10 CFR 50, Appendix I – Numerical Guides for Design Objectives and Limiting Conditions of Operations NUREG – 0700 – Human – System Interface Design Review Guidelines NUREG – 0737 – Requirements for Emergency Response Capabilities NUGEG – 0800 – Design Review Plan (SRP), Ch 7, BTP-14

NHUG - Chicago - 7/17/086 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Institute of Electrical and Electronic Engineers (IEEE): – 2003 – Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations – Criteria for Protection Systems for Nuclear Power Generating Stations – Criteria for Class 1E Electrical Systems for Nuclear Power Generating Stations – Standard for Qualifying Class 1E Equipment for Nuclear Power Generating Stations – Standard Criteria for the Periodic Testing of Nuclear Power Generating Station Protection Systems

NHUG - Chicago - 7/17/087 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Institute of Electrical and Electronic Engineers (IEEE) Continued: – Guide for Seismic Qualification of Class 1E Equipment for Nuclear Power Generating Stations – Guide for Type Test of Class lE Electric Cables, Field Splices and Connections for Nuclear Power Generating Stations – Trial-Use Guide for the Application of the Single Failure Criterion to Nuclear Power Generating Station Protection Systems – Trial-Use Standard Criteria for Separation of Class 1E Equipment and Circuits 603 –1998 – Standard Criteria for Safety Related Systems for Nuclear Power Generating Stations

NHUG - Chicago - 7/17/088 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Institute of Electrical and Electronic Engineers (IEEE) Continued: – Standard Software Engineering Terminology – Software Quality Assurance Plans Part 3: Carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications – Standard for Software Configuration Management Plans – Standard for Software Test Documentation – Recommended Practice for Software Requirements Specifications – Standard for Software Unit Testing

NHUG - Chicago - 7/17/089 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Institute of Electrical and Electronic Engineers (IEEE) Continued: – Software Validation & Verification (V&V) Plans – Recommended Practice for Software Design Descriptions 1023 –2004 – Guide for Application of Human Factors Engineering to Systems, Equipment, and Facilities of Nuclear Power Generating Stations – Standard for Software Reviews and Audits – Standard Classification for Software Anomalies – Standard for Software User Documentation

NHUG - Chicago - 7/17/0810 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Institute of Electrical and Electronic Engineers (IEEE) Continued: – Software Lifecycle Process – Guide for Developing System Requirements Specifications

NHUG - Chicago - 7/17/0811 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: EPRI Guides: EPRI TR Guidelines for Electromagnetic Interference Testing in Power Plants EPRI TR – 1996 Guideline on Evaluation and Acceptance of Commercial Grade Digital Equipment for Nuclear Safety Application EPRI TR – 1996 Generic Requirements Specification for Qualifying a Commercially Available PLC for Safety Related Application at Nuclear Power Plants EPRI TR – – 1997 Evaluating Commercial Digital Equipment for High integrity Applications EPRI TR – – 1997 Requirements for Engineering for Digital Upgrades – Specification, Analysis, and Tracking EPRI NP-5652 – 1988 Utilization of Commercial Grade Items in Nuclear Safety Related Applications

NHUG - Chicago - 7/17/0812 Applicable NRC Guidance and Industry Standards for Safety Related Digital Controls: Other Applicable Standards: ANSI / ANS 3.5 – 1998 – Nuclear Power Plant Simulator for Use in Operator Training and Examination ANSI / ANS N – 1972 – Packing, Shipping, Receiving, Storage and Handling of items for Nuclear Power Plants ANSI / ANS – Guidelines for Considering User Needs in Computer Program Development

NHUG - Chicago - 7/17/0813 Plant Specific Programs and Procedures: Programs and Procedures the Vendor is required to follow: Updated Final Safety Analysis Report (UFSAR) Data and Software Quality Assurance (SQA) Program Vendor Technical Data Controls Station Configuration Management / Control Program Classification of Systems and Components Station Labeling Procedures Danger / Red Tag Control Procedures System and Equipment Description Annunciation Interfaces Shipping and Receiving Programs Wire and Cable Termination Controls Seismic Spectrum of Station Components

NHUG - Chicago - 7/17/0814 Technical Requirements: Identify Work Scope: System operational parameters and response include any desired changes made to the existing design Input parameters and system performance goals Include all changes and what instrumentation does not change Identify the required instrument accuracy and readability Identify additional functionality needs Human – System Interface Criterion Identify Maintenance, Testing, and diagnostic needs Identify Workstation functionality and remote communication links Alarm and Station Computer Interfaces Acceptance Testing Factory Acceptance Testing (FAT) Post installation Acceptance Testing

NHUG - Chicago - 7/17/0815 Technical Requirements: Identify Work Scope: EMF / RFI and Radiological Requirements Life Cycle Requirements Troubleshooting and Functional Requirement Provide a failure Modes and Effects Analysis (FMEA) Training Needs Specify training materials for use in Maintenance and Operator Classes Identify any special Tools for Maintenance and Troubleshooting Expected Electrical Quality Identify the minimum and maximum voltage Identify the expected Loss of Power Transient Time Specify a schedule for deliverables

NHUG - Chicago - 7/17/0816 Technical Requirements: Quality Assurance Requirements: Identify the specific Nuclear Safety quality standards Identify the QA program to be followed Identify Vendor document details Software Control and change notification Identify the Vendor Support for Software Changes or Troubleshooting

NHUG - Chicago - 7/17/0817 Technical Requirements: Maintenance Requirements and Spare Parts: Specify any special periodic maintenance Maintenance Rule Impacts Spare parts List Specify any long term storage limitations Battery Life Identify the length of time the Vendor Support

NHUG - Chicago - 7/17/0818 “… Studies of software based systems have concluded that a large fraction of the problems characterized as software errors are more correctly attributed to problems in the requirements specifications, such as errors, omissions, inconsistencies, and ambiguities. The experience of nuclear utilities seems consistent with this review, in part, from ill-defines and inadequately verified requirements… “ EPRI – TR – : Requirements Engineering for Digital Upgrades

NHUG - Chicago - 7/17/0819 SAFELY and efficiently generate electricity for the long term SAFELY and efficiently generate electricity for the long term

20 Questions & Discussion