nuclear power advisory meeting - Amazon S3...from China General Nuclear Power Corporation are...

nuclear power advisory meetingInstrumentation and Control Meeting Materials

AUGUST 29-31, 2016

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

pdro002

Typewritten Text

TABLE OF CONTENTS

WELCOME ……………………………………………………………………………………. 5

ANTITRUST GUIDELINES .…………………………………………………….……….. 7

PLANT PERFORMANCE MONITORING AGENDA ……………………….…… 9

INTEGRATION COMMITTEE AGENDA…………………………………………… 10

DIGITAL I&C IMPLEMENTATION AGENDA……………………………..…….. 13

EXECUTIVE SUMMARY……………………………………………………………….. 14

DELIVERABLES LIST…………………………………………………………………….. 22

RESEARCH FOCUS AREA OVERVIEW FORM …………………….…………… 24

PLANT HEALTH MONITORING …………………………………..………… 24

ADVANCED INFORMATION AND I&C TECHNOLOGIES FOR

PRODUCTIVITY IMPROVEMENTS………..……………..…………........ 28

DIGITAL IMPLEMENTATION IMPROVEMENT………………..………. 35

CYBER SECURITY …………………………………………………………………. 41

ELECTROMAGNETIC COMPATIBILITY ………………………………….. 45

SYSTEM ENGINEERING APPROACH TO I&C

ENGINEERING.………………………………………………………………….… 48

HUMAN FACTORS ENGINEERING FOR NUCLEAR POWER

PLANTS………………………………………………………………………...…... 53

CIRCUIT CARDS - ANALYSIS & IMPLEMENTATION…………….….. 59

I&C PREVENTATIVE MAINTENANCE TEMPLATES.…………….….. 63

RADIATION MONITORING SYSTEMS .……………………..…………… 66

Instrumentation and Control Meeting Materials 3 August 2016

SENSOR ISSUE SCOPING, PROTOTYPE & DEVELOPMENT ……... 70

I&C FOR BEYOND DESIGN BASIS & SEVERE

ACCIDENTSSUSCEPTIBILITY ………………………….…………………….. 76

ROADMAP ………………………………………………………………………………… 81

DIGITAL INSTRUMENTATION & CONTROL IMPLEMENTATION

(NEW/EXISTING PLANTS) ……………………………………………………. 81

ROSTER …………………………………………………………………………………….. 86

I&C INTEGRATION COMMITTEE ………………………………………… 86

I&C RELIABILITY ADVISORY GROUP …………………………………….. 88

DIGITAL I&C IMPLEMENTATION GROUP ……………………………… 90

2016-2017 INSTRUMENTATION AND CONTROL MEETINGS ……….. 92

CONTACTS …………………………………………………………………………………. 93


Dear Members of the EPRI Instrumentation & Controls Integration Committee,

Welcome to the August 2016 EPRI Instrumentation & Controls Integration Committee meeting!

Your role as an Integration Committee member and an active participant in this meeting is vitally

important to ensure that EPRI research is relevant, timely, and implementable at your sites and

utilities. This bi-annual meeting is one of our principle means to obtain your advice and inform

you on the Instrumentation & Controls (I&C) research program’s status and future plans. Based

on your feedback, EPRI will finalize its 2017 I&C Research Plan and ensure that the out year

initiatives within the I&C program align with the needs of our members.

We have good news to report for this meeting. First, the I&C Integration Committee utility

leadership changes are now complete. Please welcome our new integration committee chairman

Mike Mustafa, and technical advisory committee chairmen John Hernandez (Digital I&C

Implementation), and Wes Frewin (I&C Reliability). In addition, after 41 years of service, Dr.

Joseph Naser has retired. Dr. Naser’s many contributions to the I&C program are greatly

appreciated. We wish him well in his retirement. Michael Thow has joined the I&C team. Michael

is our new digital and cyber security Senior Technical Leader. He will share the digital and cyber

security project responsibilities with our current cyber security principal technical leader Matt

Gibson. In addition, Ray Torok has changed his schedule to working part-time effective

immediately.

Several great highlights to report within each of our initiative areas within the EPRI I&C program

include:

1. Utilize I&C to improve plant productivity: The plant performance monitoring project

has started. This project will provide technical support for utility monitoring based plant

productivity improvements, beginning with the development of analytics to identify high

value assets to initiate monitoring in support of operations and maintenance cost

reductions. A workshop on plant performance monitoring was held in June 2016, and much

more is expected in this area, including an industry roadmap, which will be discussed in

the meeting.

2. Enable I&C replacements: EPRI capital has been allocated to build a new I&C and cyber

security laboratory in the EPRI Charlotte office. The lab will be capable of supporting

research to examine the effects digital configuration changes have on plant environments and

scenarios as well as testing for different types of I&C architectures that enhance productivity, while

also improving reliability and security. Several other applications are being considered for the

laboratory which will provide additional technical capabilities that enhance the research

performed at EPRI. In addition, the largely anticipated report, Methods for Assuring Safety

and Dependability when Applying Digital Instrumentation and Control Systems

(TR3002005326), also known as “the EPRI CCF report”, was published in July 2016. The


cyber security technical assessment research is on schedule and planned for publication in

October 2016.

3. Maintain and improve reliability and resilience of installed I&C components: The US

Department of Energy research award on embedded system design and verification for

simplicity is progressing on schedule with developments in the hardware sequencer

architecture and Microelectromechanical systems (MEMS) fabrication capabilities to be

utilized by the team. In addition, development of the digital positioner I&C preventative

maintenance template, and lessons learned and best practices guide based on experience

from China General Nuclear Power Corporation are progressing on schedule with planned

deliverables in December 2016.

Due to the changes within the industry, this year’s I&C integration committee meeting will include

an extended strategy session to discuss the future direction of the EPRI I&C program and its

priorities. In addition, we will have a utility round table for members to share their recent project

experiences and use of EPRI I&C products and information. As in previous meetings, we have

provided the meeting materials for your review in advance of the meeting (printed copies are

available upon request). These materials are also available on the new and improved meeting

“app” and epri.com. Besides the meeting agenda, the materials contain key information on the

program and its projects including:

1. Program executive briefing – a high level document suitable for you to share with your

management on I&C program key activities and products

2. A draft consolidated list of near term EPRI I&C program deliverables

3. Research focus area overview forms and roadmaps for current and proposed work

4. Program administrative information such as upcoming meetings, EPRI staff contacts, etc.

We have also provided presentations with the meeting materials for review in advance of the

meeting with several innovative and high priority projects planned for the coming year.

Thank you for taking the time to review these materials and your continued involvement with

EPRI and the I&C program. I look forward to seeing you in New Orleans.

Sincerely,

Robert E. Austin, III, PE, PMP

Senior Program Manager

Electric Power Research Institute


ANTITRUST GUIDELINES for EPRI Meetings and Conferences

...is to conduct research and development relating to the generation, delivery and use of electricity for the benefit of the public. EPRI advisory meetings are conducted to further that purpose.

The antitrust laws and other business laws apply to EPRI, its Members, participants, funders, and advisers; violations can lead to civil and criminal liability. EPRI is committed to both full compliance and maintaining the highest ethical standards in all of our operations and activities.These guidelines apply to all occasions: before, during, and after EPRI meetings, including in the hallways, over lunch, during breaks and at dinner.

EPRI’S PRIMARY PURPOSE

YOUR ROLE AT EPRI ADVISORY MEETINGS

DO NOT DISCUSS

EPRI DOES NOT RECOMMEND

...is to follow the meeting agenda and provide advice on EPRI’s R&D program and how to make EPRI results most useful. Consult with your company counsel if at any time you believe discussions are touching on sensitive antitrust subjects such as pricing, bids, allocation of customers or territories, boycotts, tying arrangements and the like.

...pricing, production capacity, or cost information which is not publicly available; confidential market strategies or business plans; or other competitively sensitive information. Do not disparage suppliers and/or competitors of EPRI, technology providers and/or EPRI Members and participants.

...the use of particular vendors, contractors or consultants for non-EPRI projects. EPRI will not promote or endorse commercial products or services of third parties. You must draw your own conclusions and make your own choices independently.


Electric Power Research Institute 3420 Hillview Avenue, Palo Alto, California 94304 • PO Box 10412, Palo Alto, California 94303 USA 800.313.3774 • 650.855.2121 • [email protected] • www.epri.com

© 2015 Electric Power Research Institute (EPRI), Inc. All rights reserved. Electric Power Research Institute, EPRI, and TOGETHER…SHAPING THE FUTURE OF ELECTRICTY are registered service marks of the Electric Power Research Institute, Inc.

March 2015

DO NOT AGREE WITH OTHERS

DO NOT TRY TO INFLUENCE

ASK

BE ACCURATE, OBJECTIVE, AND FACTUAL

...in any discussions of goods and services offered in the market by others, including your competitors, suppliers, and customers.

...to discriminate against or refuse to deal with (i.e., “boycott”) a supplier; or to do business only on certain terms and conditions; or to set price, divide markets, or allocate customers.

...or advise others on their business decisions, and do not discuss yours (except to the extent that they are already public).

...for advice from your own legal department, if you have questions about any aspect of these guidelines or about a particular situation or activity at EPRI; or ask the responsible EPRI manager to contact EPRI’s Legal Department.


August 2016 (08/29/2016) New Orleans, Louisiana

Plant Performance Monitoring

Meeting Holder: Richard Rusaw, ([email protected])

Room Location: Chamber Room 1 (MSL)

Monday, August 29, 2016

Time Topic Lead

8:00 am

Meeting Opening

Safety message

Facility Logistics

EPRI Welcome

Introductions

K. Canavan, EPRI

R. Rusaw, EPRI

8:15 am

Introducing the Integrated Monitoring Initiative, The Importance

of the Plant Performance TAC

Issue statement, Benefit Drivers, Value Proposition

Challenges to Transformation

Performance Monitoring Objectives

Roadmap

R. Rusaw, EPRI

10:00 am Morning Break All

10:30 am

Sensors,Data Management, Analytics

Roadmap gap analysis/discussion

Program requirements review

EPRI contributing 2016 & 2017 monitoring projects

R. Rusaw, EPRI

11:00 am

Roundtable Discussion

TAC Review and Comment

Meeting Wrap up and Next Actions

Meeting Performance Assessment

E. Bradley, TVA

TAC

12:00 pm Lunch - Crescent City Ballroom (Mezzanine Level) All



Instrumentation & Controls Integration Committee Meeting

Meeting Holder: Robert Austin, ([email protected])

Room Location: Orpheum Room (SL)

Monday, August 29, 2016

Time Topic Lead

1:00 pm

I&C Integration Committee – Introductions

Welcome by the Chair to members & guests

Meeting purpose and payoff of attending

Agenda review

Acceptance of previous web cast meeting summary

M. Mustafa, Entergy

1:10 pm

I&C Program Review, including

Meeting app & materials

Changes

2016-2018 research plan by area, technology readiness

Project deliverable, scope, schedule deltas

Action item status

R. Austin, EPRI

1:40 pm

Utility I&C Round Table

Recent projects, successes, challenges, use of EPRI

products

Identify items not on agenda but requiring discussion

Utility Members

2:45 pm Member Satisfaction – Actions & Survey K. Canavan, EPRI

3:00 pm Afternoon Break All

3:15 pm

I&C Program Strategy Discussion:

Do we have the right goals?

Do we have the right initiatives?

Do we have the right research focus areas?

Utility Members

5:00 pm Adjourn





Room Location: Orpheum Room (SL)

Tuesday, August 30, 2016

Time Topic Lead

8:00 am Advanced Information Technology (IT) & I&C for Productivity TAC

Report Out E. Bradley, TVA

8:15 am I&C Reliability Projects – Scope, Status, & Future Work for Circuit

Cards, PM Templates, & Sensors Work A. Ali, OPG

8:50 am I&C Reliability – Preventive Maintenance Discussion S. Lopez, EPRI

C. Nielsen, Altran

9:15 am I&C Reliability – Sensor Projects Discussion and Interface with the

Distributed Antenna System

S. Lopez, EPRI

N. Camilli, EPRI


10:15 am I&C Reliability – I&C Technology for Verifiable Systems – Status

Report and Future Work M. Gibson, EPRI

10:45 am Electromagnetic Compatability (EMC) – Scope, Status, &

Deliverables

S. Lopez, EPRI

11:00 am Plant Health Monitoring Technical Advisory Committee (TAC)

Report Out

E. Bradley, TVA

12:00 pm Lunch – Crescent City Ballroom (Mezzanine Level) All

1:00 pm Institute of Nuclear Power Operations (INPO) Report – I&C

Activities (Circuit Cards, Digital, Cyber, & Others)

W. Nowicki, INPO

2:00 pm Cyber Security Projects – Scope, Status, & Deliverables J. Connelly, Exelon

B. Yeates, Southern

2:30 pm Overview of Digital I&C Implementation Projects and Roadmap J. Hernandez, APS


3:15 pm Systems Engineering Report Out TBD

3:45 pm EPRI Final Report on Ensuring Safety/Dependability with Digital &

Software Common Cause Failure Discussion

R. Herb, Southern

4:45 pm Digital I&C Obsolescence – Review of Past Products & Discussion

of Future Work

R. Torok, EPRI

5:00 pm Adjourn





Room Location: Pontalba Room (ML)

Wednesday, August 31, 2016

Time Topic Lead

8:00 am Digital I&C Implementation – Candidate Topics for Future

Projects J. Hernandez, APS

9:00 am I&C in Severe & Beyond Design Basis Accidents D. Curtis, Rolls-Royce

9:15 am Palo Verde Strategic Modernization Program and Control Room

Modernization J. Hernandez, APS


10:15 am

ER APC Report Out:

Exceptions requiring reporting to Equipment Reliability

Action Plan Committee?

ER APC Round Table items recommended next steps

M. Mustafa, Entergy

11:15 am Discussion & Actions to Complete 2016-2018 Research Plan M. Mustafa, Entergy

11:45 am Meeting Plus / Delta, Action Item Review & Close M. Mustafa, Entergy

12:00 pm I&C Integration Committee Adjourns



Digital I&C Implementation Group

Meeting Holder: Ray Torok, ([email protected])

Room Location: Pontalba Room (Mezanine Level)

Wednesday, August 31, 2016

Time Topic Lead

1:00 pm Review Purpose and Agenda J. Hernandez, APS

R. Torok, EPRI

1:10 pm EPRI support of initiative for Delivering the Nuclear Promise –

Products/Workshops/Training – Action Items, etc.

J. Connelly, Exelon

R. Torok, EPRI

2:15 pm Plans for updating the EPRI Digital Design Guide (EPRI

3002002989)

R. Herb, SNC

R. Torok, EPRI


3:20 pm

Candidate topics for future projects

Mobile app potential for guidelines, training, procedures, etc.

Project rankings

J. Hernandez, APS

R. Torok, EPRI

4:00 pm Review Consensus Directions and Action Items J. Hernandez, APS

R. Torok, EPRI

5:00 pm Adjourn J. Hernandez, APS


Instrumentation & Controls

strategic objectives

Instrumentation and control (I&C) systems affect all areas of plant operation and can profoundly

impact cost, reliability, and efficiency in nuclear power plants. As energy markets and

technologies change, resolving I&C-related challenges helps to ensure the cost-effective

operation of power plant equipment. This is critical to the longevity of international and domestic

nuclear power plants, and is at the core of I&C research at EPRI. The I&C program is designed

to help ensure the safe, reliable, and cost-effective long term operation of I&C systems within

nuclear power plants.

The I&C program objectives are as follows:

1. Use I&C to improve overall plant health and productivity: Research within this objective

area introduces up-to-date functions and techniques that can streamline many plant tasks

and procedures to reduce operation and maintenance (O&M) costs while improving

reliability and extending component lifetimes.

2. Develop technologies and technical approaches that reduce the risk of implementing

replacement I&C systems: Research within this objective area addresses the transition

from analog to digital I&C equipment in areas where the available technical guidance is

unclear, incomplete, or evolving, such as failure analysis and cyber security.

3. Improve the reliability and resilience of existing I&C systems and components: Research

within this objective area develops systems and generic technical bases for effective

maintenance and life-cycle management of I&C systems and components currently

installed within nuclear power plants.

Refer to the I&C Cockpit in the EPRI Members Center for a complete list of I&C products and

services. Additionally, product and service information can be found in the 2015 I&C product

bulletin (EPRI Product Number 3002006581), which has been published in various languages

including English, Chinese, Czech, Hungarian, French, Korean, Japanese, Portuguese and Spanish

for our domestic and international members.

schedule

There are 12 I&C products planned for delivery in 2016. All of these deliverables are on schedule

for publication per the enclosed deliverable schedule. In addition, several proposed 2017

deliverables are listed in the enclosed deliverable schedule for review by the I&C Integration

Committee.


benefits and value

Recent benefits & value include:

Use I&C to improve productivity:

o EPRI I&C, with the EPRI Long Term Operations (LTO) program, developed a

software tool to integrate data from multiple sources, such as monitoring and plant

rounds, to diagnose equipment issues before problems occur. This software, FW-

PHM v. 1.2, was released June 2014 (product number 3002001490), and new Plant

Health Monitoring Users Group kicked off in January 2015 in support of Nuclear

and Generation plant health monitoring programs. In 2016, EPRI is developing a

desktop version to supplement the FW-PHM software. The production version of

this application is planned for publication in December 2016. In addition, a new

project was initiated to address monitoring for plant performance industry

objectives. The plant performance monitoring project will address the technical

support for monitoring based plant productivity improvements. In 2016, this project

will begin developing analytics to identify high value assets to initiate monitoring

in support of O&M cost reductions. In addition, a technical advisory group will be

formed to support the project and its objectives.

o EPRI developed the “Human Factors Guidance for Control Room and Digital

Human-System Interface Design and Modification: Guidelines for Planning,

Specification, Design, Licensing, Implementation, Training, Operation, and

Maintenance”, 1010042, December 2005 which is the comprehensive human

factors guidance covering a vast range of topic areas and it includes a checklist for

the guidance for easier application. It is being used by some vendors for new plant

designs and is being used for modifications in operating plants. This guidance is

currently available on the EPRI Member Center website for download

(3002004310). EPRI also developed “Guidance for Developing a Human Factors

Engineering Program for an Operating Nuclear Power Plant”, 3002002770,

December 2014.

Enable replacement I&C:

o EPRI I&C worked with the industry to develop technical guidance on assessing and

managing susceptibilities to potential digital system failures and unintended

behaviors that can lead to failures in plant systems, including common-cause

failures (CCF). The technical report “Methods for Assuring Safety and

Dependability when Applying Digital Instrumentation and Control Systems”,

3002005326, June 2016 provides practical guidance that will help utility engineers,

equipment suppliers, and system integrators address a full range of potential digital

failure and CCF issues. It includes steps for identifying and qualitatively assessing

susceptibilities in terms of their likelihood, failure effects, and the measures in place

to protect against them. The report also includes guidance on using susceptibility

and coping analyses to screen and prioritize potential vulnerabilities, as well as the

application of risk insights.

o EPRI I&C has developed a suite of products and training materials that address a

wide range of issues with digital replacements, from well-established concerns

such as proper configuration management, testing and electromagnetic capability

qualification, to new issues such as cyber security and digital project management.

One of the most recent additions is a “Digital Design Guide” (product number


3002002989), which addresses integration of digital specific issues into the overall

plant design change process. Utilities can also use the classroom and computer-

based training materials on the digital design guide, digital issues, and human

factors (product numbers 3002005327, 3002000531, 3002000317, and

3002000319), to train personnel at any time, and support compliance with the INPO

ACAD requirements for training. The original digital I&C computer-based training

materials that were completed in 2013 are in the process of being updated to include

the latest digital I&C research and will be available for download in 2017.

o One issue that has been problematic for new plant equipment and especially for

digital I&C systems in recent years is electromagnetic compatibility (EMC).

There have been numerous changes to EMC issues and frequencies over the years,

such that EPRI has updated its “Guidelines for Electromagnetic Interference

Testing of Power Plant Equipment, Revision 4 to TR-102323” (3002000528).

This guide helps nuclear plant engineers address EMC issues and perform

qualification testing in a consistent, comprehensive manner. Utilities can also use

the classroom and computer-based training materials on EMI Qualification of

Digital Equipment Upgrades in Nuclear Power Plants (3002005506), to train their

personnel at any time, rather than wait for a scheduled course offering. This

material in the process of being updated to include the latest EMC research and will

be incorporated into the INPO NANTEL system in 2016 to support personnel

compliance with INPO ACAD requirements for training.

o EPRI has developed products that continue providing research on cyber security.

The Technical Assessment Methodology is a ‘bottom up’ technical approach for

performing vulnerability assessments on digital devices. The Technical Assessment

Methodology will contain guidance products and templates that scale from small to

large attack surfaces, including system level applications. Several examples and

early reference assessments have been completed and show scalability. This

report (3002008023) is on track for an October 2016 publication. The efficacy of

the Technical Assessment methodology has proven beneficial for the Risk

Informed Cyber Methodology. Phase 3 of this project will continue in to 2017 and

include performing a pilot of a single nuclear unit at scale. Palo Verde has been

confirmed as the pilot site and the results and lessons learned will be integrated into

improving the overall methodology.

o The Nuclear I&C Program is completing the installation of a digital I&C and cyber

security laboratory that will provide its researchers and members with several

additional technical capabilities that enhance the research performed at EPRI. The

lab will have features such as a plant simulator, OSI/PI, data diodes, wireless and

wired network infrastructure and a virtualized server architecture to allow

researchers tremendous flexibility when performing cyber security and digital I&C

research. The I&C lab will be able to obtain OSI/PI datasets from utility members

for data analysis, perform cyber security technical vulnerability assessments, and

utilize a fully functional plant simulator. All of this equipment will also connect to

field instrumentation from different I&C equipment vendors that will be available

such as SIEMENS, Allen Bradley, National Instruments, and others. Upcoming

research could include looking at the effects digital configuration changes have on

the plant environment as well as testing different types of I&C architectures that

enhance productivity, while also improving reliability and security. Members will

be able to bring in their own equipment for cyber assessments on a limited basis.


Projects will begin to utilize the lab in the fall of 2016.

Improve I&C reliability & resilience:

o Capturing and sharing best practices and lessons learned helps to ensure the safety,

profitability, and longevity of nuclear power plants. EPRI I&C is working with

the China General Nuclear Power Corporation (CGNPC), who has implemented an

I&C reliability program that has significantly reduced its number of downpowers

and shutdowns that were the result of I&C equipment failures, to develop a best

practices and lessons learned guide that will benchmark against the EPRI “Gold

Card”. This guide will discuss aging management and mitigation methods and

processes, technical requirements development, and site implementation practices

to improve the safety and availability of nuclear power plant equipment. The

product is on track for a December 2016 publication.


industry interactions

The EPRI plant health monitoring software is a cross-program and sector effort within

EPRI that also has Idaho National Labs and the Department of Energy (DOE) Light

Water Reactor Sustainability project involvement.

EPRI I&C interacts regularly with the DOE’s Light Water Reactor Sustainability

Program in the technical area of Advanced Instrumentation, Information and Control

Technologies.

EPRI I&C interacts regularly with the US NRC Office of Research to collaborate on

research and share information on plans.

EPRI I&C is integrated with the Institute of Nuclear Power Operations (INPO) through

its participation in meetings addressing topics such as digital upgrades, circuit cards,

radiation monitoring systems.

EPRI regularly participates in industry forms on cyber security, notably the NEI Cyber

Security workshop and Nuclear Information Technology Strategic Leadership (NITSL)

meetings.


Proposed I&C research spending

The proposed I&C research spending plan is provided within the enclosed I&C Integration

Committee meeting materials. This plan contains an overview of the I&C research focus areas,

along with spending projections for each research focus area and technology readiness level (TRL)

category. In this plan, cyber security, plant health monitoring and digital I&C implementation

make up 68% of the proposed I&C budget due to the new technical assessment optimization,

WHAM, systems engineering pilot, workshops and computer-based-training modules which are

funded by the EPRI nuclear sector.

Figure 1: Estimated I&C Spending by Research Focus Area & Year, 2017 – 2019

Figure 2 – Estimated I&C Spending by Technology Readiness Level, 2017 – 2019


advisor organization

The alignment of EPRI I&C research initiative areas, research focus areas and advisors is shown

in the table below:


EPRI I&C Research & Advisory Bodies

Initiative Area Advisory Group Research Focus Area (EPRI Project Manager) Meets During?

Utility Technical

Advisory

Committee (TAC)

Chair

Improve

Productivity

(Overall Lead R.

Rusaw)

Monitoring TAC Plant Health Monitoring (R. Rusaw) FWMIG H. Nudi

Productivity TAC

(includes I&C

Productivity

Improvement)

Advanced IT & I&C for Productivity (R. Rusaw) LWRS E. Bradley

Enable

Replacement

(Overall Lead M.

Gibson)

DI&C TAC (includes

DI&C Implementation)

Digital implementation improvement (M. Gibson)

NPC; INPO

Digital J. Hernandez

I&C failure analysis & Common Cause Failure (CCF)

prevention (R. Torok)

Human factors (M. Gibson)

System engineering approach to I&C (M. Gibson)

Cybersecurity TAC Cybersecurity (M. Gibson) 2 times / year J. Connelly, B.

Yeates

EMC TAC Electromagnetic compatibility (EMC) (S. Lopez) As required J. Shank

I&C Reliability

(Overall Lead S.

Lopez)

I&C Reliability TAC

(includes I&C

Reliability)

Circuit cards - analysis & implementation (S. Lopez)

NPC; INPO

Circuit Card W. Frewin

I&C preventive maintenance templates (S. Lopez)

Radiation Monitoring Systems (S. Lopez)

Sensor Issue Scoping, Prototype & Deployment (S.

Lopez)

I&C Severe Accident

TAC

I&C in severe & beyond design basis accidents (R.

Rusaw) As required D. Curtis


Project ID Product ID Product Name Product Type Planned

Completion

Date

EPRI Project

Manager

Status

1-107627 3002006737 Design Considerations for Replacing Single Loop Controllers and Other Controls with Field Programmable Gate Array-Based Equipment

Technical Report 04/30/2016 Naser, Joseph Albert

Published

1-106695 3002008207 PHM Analytics - Desktop Application Software 10/31/2016 Rusaw, Richard Lee

On Schedule

1-105344 TBD Nuclear Measurement Uncertainty Analysis Technical Update 1Q2017 Rusaw, Richard Lee

On Schedule

1-106695 TBD PMDB utilization to support reduced maintenance activityAnalytic software Application (Mart’e) and application guideline

Software 4Q2017 Rusaw, Richard Lee

Proposed

1-0697501-105773

3002005326 Methods for Assuring Safety and Dependability when Applying Digital Instrumentation and Control Systems

Technical Report 06/30/2016 Torok, Raymond Charles

Published

1-105629 3002008020 Nuclear Cyber Security Exercise Scenarios Technical Report 08/05/2016 Gibson, Thomas Monroe

Published

1-107504 3002008023 Cyber Security Assessment Framework: Methods and Guidance Technical Report 10/31/2016 Gibson, Thomas Monroe

On Schedule

1-107504 3002008206 Cyber Security Segmentation and Separation in Nuclear Applications Technical Report 11/30/2016 Gibson, Thomas Monroe

On Schedule

1-106912 3002008018 Systems Engineering Methodology: Modification Change Model Technical Report 12/18/2016 Gibson, Thomas Monroe

On Schedule

1-105623 3002008024 Electromagnetic Compatibility Computer Based Training Module Revision 1 Software 12/18/2016 Lopez, Stephen Michael

On Schedule

1-105861 TBD Risk Informed Cyber Security: Methods and Guidance Technical Report 1Q2017 Gibson, Thomas Monroe

Proposed

1-105624 TBD Digital I&C Computer-Based-Training Modules Update Software 3Q2017 Thow, Michael On Schedule

Improve Productivity

Enable Replacement I&C

2016 Deliverables List


Project ID Product ID Product Name Product Type Planned

Completion

Date

EPRI Project

Manager

Status

2016 Deliverables List

1-105622 TBD Workshops and Tech Transfer on Digital Failure Susceptibility Workshop 4Q2017 Torok, Raymond Charles

On Schedule

1-105623 TBD Wireless Technology Assessment Technical Report 4Q2017 Lopez, Stephen Michael

On Schedule

1-106912 TBD Systems Engineering Pilot Implementations Technical Report 4Q2017 Gibson, Thomas Monroe

Proposed

1-107504 TBD Cyber Security Technical Assessment Optimization-Year 3 Supply Chain Integration, Training, and Reference Assessments

Technical Report 4Q2017 Gibson, Thomas Monroe

Proposed

1-107504 TBD Cyber Security Assessment Framework: Reference Assessments Database On-going Gibson, Thomas Monroe

Proposed

1-107669 N/A Nuclear Qualification Demonstration of a Cost Effective Common Cause Failure Mitigation in Embedded Digital Devices (Year 1)

US DOE Status Report

09/30/2016 Gibson, Thomas Monroe

On Schedule

1-069418 3002008025CGNPC I&C Reliability Best Practices and Lessons Learned

Technical Report 12/18/2016 Lopez, Stephen Michael

On Schedule

1-069418 N/A I&C Digital Positioner PM Template Database 12/18/2016 Lopez, Stephen Michael

On Schedule

1-074104 3002008026 Demonstrating Feasibility of a Sustainable, Modular Wireless Triaxial Vibration Sensor for Equipment Monitoring Phase 2

Technical Report 12/18/2016 Lopez, Stephen Michael

On Schedule

1-107975 TBD Area Acoustic & Electromagnetic Emissions Monitoring – Hardware Development Study Technical Update 2Q2017 Lopez, Stephen Michael

On Schedule

1-107669 N/A Nuclear Qualification Demonstration of a Cost Effective Common Cause Failure Mitigation in Embedded Digital Devices (Year 2)

US DOE Status Report

4Q2017 Gibson, Thomas Monroe

On Schedule

Maintain I&C Reliability


Research Focus Area Overview Form

Page 1 of 4

DATE: 6/2016

Note: Red asterisk (*) designates a required field.

*TRL: 5 - 8

*Portfolio Year: 2016

*Research Focus Area Title: Plant Health Monitoring/Nuclear Plant Management Information Systems

Project Leader Name: Richard Rusaw

Project Leader Phone: 704-595-2690

Project Leader email: [email protected]

Target Start Date (MM/YYYY): 01/2016

Anticipated Duration (number of months) for current project set: 36 Months

*Key Research Questions (The Need):

The overall reliability, performance, and efficiency of the operating fleet of nuclear plants requires a

significant advancement with ongoing improvement programs to remain viable as a competitive long

term asset. The DOE and EPRI has identified Industrial analytics commonly referred to as “Plant health

Monitoring” as a cornerstone technical capability required to support operational effectiveness, an

efficient industrial management information system, and safety. Plant health monitoring provides a key

analytical resource and expert knowledge that eclipses the human resources currently operating within

an outdated industrial business model. Future plant performance and human resource efficiency

objectives in an aging fleet will require an integrated plant management information system supported

by industrial analytic technology. Plant Health Monitoring focuses on the development and adoption of

the technologies needed by the industry to meet those objectives.

Objectives (The Why):

Reliability, performance, and efficiency is addressed by providing monitoring technology in real-time

plant asset condition assessment with state of the art system, structures, and component (SSC) anomaly

detection, diagnosis, and risk informed remaining useful life (RUL). Implementation of Industrial

analytics provides early detection of failure modes and rapid response to initiating corrective actions.

This prevents or limits operating plant assets in life limiting degradation modes that can degrade leading

to plant shutdown. The automated technical capabilities provide plant engineering staff effective tools

to reduce O&M by automating the monitoring, problem analysis, and record keeping tasks. This

provides the opportunity for the staff to focus on higher value tasks in support of the above objectives.

The high value information allows plant management to make better informed decisions on plant

operation, maintenance, safety, and long term operation.



Page 2 of 4

Project Set Approach and Scope (The How):

This project will continue to develop the technology to meet the analytic requirements of a Plant Health

Monitoring program. EPRI will continue to advance monitoring technologies with a focus on

productivity, reliability, and performance. EPRI will continue to extract industry expert knowledge and

provide access to the information to our members through multiple application methodologies. The

diagnostic, RUL, and record keeping tools provided by EPRI software products will continue

improvement to enhance adoption, implementation, and utilization. The project will develop application

platforms, validation and testing of results through participation and cooperation with engaged utilities.

We will maintain the computational infrastructure to support and maintain the supporting databases

and interfaces to our members through pilot projects and user groups. EPRI will develop a monitoring

technology laboratory to assist in advancing new technologies and validating current applications.

Value Proposition and Benefit Statement:

Automatically Identifies fault and impending failure conditions of plant assets accurately by comparing expertly derived asset fault signatures with plant operating data.

Estimates how long an aging or faulty asset will continue to provide reliable service.

Can support all types of generating and transmission assets, including systems, passive, and

active assets in nuclear, coal, combined cycle, co-generation, wind, hydro and switchyard

facilities.

Fills the gap between the need for timely, accurate performance analysis and the availability of

plant engineering resources

Reduces surveillance frequencies (owner controlled programs)

Supports CBM

Key Activities Provide greater detail on key activities/milestones:

Activity Description Date

Plant Health Monitoring User Group Initiated in 2015, meets twice per year.

Anticipated Deliverables List of proposed deliverables in tabular form – product type at a minimum:

Deliverable Types

Database updates each year as data is developed providing new diagnostic and RUL signatures.

New software applications to improve field level utilization including desktop and mobile applications



Page 3 of 4

Past EPRI Work on Topic This section can be used to list specific EPRI work that is tied to this project set

and allows for explanation of its applicability:

Title Short Description Date

Fleet-Wide Prognostic and Health Management Suite (FW-PHM) Database Content Version 1.2 -

3002007506 This product updates fault signature information used in the Fleet-Wide Prognostic and Health Management Suite software to accomplish the task of transforming plant information into an accurate and consistent assessment of asset condition and operating reliability for operating a fleet of aging nuclear and fossil power plant assets more productively.

5/2016

Fleet-Wide Prognostic and Health Management Suite (FW-PHM) Database Content 2014-2, Version 1.1


11/2014

Fleet-Wide Prognostic and Health Management Suite (FWPHM Suite) Database Content, 2014-1


7/2014

Fleet-wide Prognostic and Health Management Suite (FW-PHM Suite) v1.2

3002002762 The Fleet wide Prognostic and Health Management Suite software accomplishes the task of transforming plant information into an accurate and consistent assessment of asset condition and operating reliability for operating a fleet of aging nuclear and fossil power plant assets more productively.

6/2014

On-Line Monitoring for Equipment Condition Assessment

1016724 This project demonstrates an approach to obtaining an integrated source of data for power plant equipment that merges traditional process measurements with new data streams made available through the processing and conversion of high-frequency vibration data. The integrated source of data can feed empirical monitoring software systems to improve their diagnostic capabilities. In addition, this project demonstrates the deployment of a wireless vibration monitoring system that is of reasonable cost and is robust in an industrial

12/2008


https://membercenter.epri.com/abstracts/Pages/ProductAbstract.aspx?ProductId=000000003002007506
















Page 4 of 4

environment. Methodologies to extract specific spectral features from vibration spectra and to transmit this information to a plant historian are demonstrated and suggested as a partial way of supporting and improving typical periodic vibration collection and analysis for rotating machinery health monitoring.



Page 1 of 7

DATE: 6/2016


*TRL: 5 -7


*Research Focus Area Title: Advanced Information and I&C Technologies for Productivity

Improvements

Project Leader Name: Joseph Naser



Target Start Date (mm/yyyy): 1/2011



Nuclear power plants have significant challenges to reduce risks, drive cost efficiency and increase value.

Competitiveness with other energy sources is a major concern to prevent premature plant closings due

to economic considerations. Aging and obsolescence of equipment and systems and heavy reliance on

analog technology are making competitiveness more challenging. New requirements and commitments,

knowledge drain and increased difficulty to hire and retain younger staff add to the challenges.

Plant operations are labor-intensive due to vast numbers of operational and support activities required

by technologies mostly used in plants. The advantageous use of advanced instrumentation, Information

and control (AII&C) technologies in plants is needed to make significant improvements in productivity,

reductions (or at least control) in operations and maintenance (O&M) costs, and reductions in human

errors.


The overall objective of the R&D is to take advantage of and demonstrate AII&C technologies for more

efficient operation, improved productivity, reduced O&M costs, reduced human errors and reduced

dosage for plant workers.


The project set approach has a wide variety of activities to meet the objective. These come from the

activities in the EPRI Instrumentation and Control (I&C) program, the EPRI Long Term Operation (LTO)

program and the Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) program. The



Page 2 of 7

latter two programs have developed a joint R&D plan. An annual meeting will be held between the three

programs to share information and develop new projects.

Improved and new I&C, human-system interface (HSI), information and communications technologies

used properly can address concerns about cost-effectively maintaining current performance levels and

enable shifts to even higher levels. This will be primarily through reduced O&M costs, improved

reliability, reduced downtime, reduced likelihood of human errors, reduced unnecessary workload,

improved information storage and access, greater knowledge retention and transfer, and access to

remote expertise. The activities here will facilitate implementing new technologies to improve

productivity through new capabilities that will provide positive benefits for the plant. Efforts will include

providing familiarization and demonstration of the new technologies and how they can be used for plant

and personnel productivity improvements, as well as providing pros and cons of their uses.

The activities in this project set will work closely with the LTO program and DOE LWRS program joint

advanced technology strategic plan to support effective long term operation. The plan covers the

following six task areas:

Human performance improvement for nuclear power plant field workers

Outage safety and efficiency

On-line monitoring and information integration

Integrated operations

Hybrid control room

Automated plant

(Note the EPRI I&C Wireless Heath and Asset Monitoring (WHAM) project also contributes to the first

three task areas.)

The shorter term activities will be related to the first two task areas. A major, longer term effort was

initiated in 2016 with a utility planning multiple digital upgrades to develop the design of an effective

hybrid control room throughout the changes.

The remaining activity is to try to use technology and human factors engineering (HFE) to help address

the nuclear power industry’s concern that the cumulative impact of improvement initiatives and process

controls is detracting resources from more important aspects of plant operation and maintenance and,

hence hurting competitiveness. The industry is already addressing approaches to reduce the cumulative

impact. An additional technology-based approach is to identify human errors that lead to higher risks

and determine if there are “traps’ that are facilitating the errors. Then, where most beneficial,

technology and HFE can be used to remove these “traps” allowing easy justification for removing the

associated improvement initiatives and process controls.


Members can use information sharing among the different groups and the collection of technical

reports developed to take advantage of existing and advanced I&C, HSI, and IT capabilities to: a) enable

continued safe and effective operation; b) make plant and human performance improvements; c)



Page 3 of 7

reduce O&M costs; and d) overcome concerns about maintaining the current high levels of performance

due to aging and obsolescence, knowledge drain, and fewer staff. Taking advantage of these will help

plants remain competitive with other sources of electricity and reduce the likelihood on premature plant

closing due to economic reasons.

Key Activities:


Joint Meetings of DOE LWRS Advanced II&C Group and EPRI Productivity Projects and Research: This activity will share information on productivity improvement related projects, research and plant pilot projects being carried out under the DOE LWRS Advanced II&C program and EPRI’s I&C and LTO programs. The objectives of these projects include increasing efficiency, and reducing costs and the likelihood of human errors. These meetings are also used to develop new ideas that will increase plant productivity. Also at these meetings plants have become interested in becoming a pilot project plant.

8/2016

Identify and Remove/Reduce Causes Leading to Cumulative Impact of Improvement Initiatives and Process Controls with Technology Solutions: This activity will produce a report that will a) identify repeated human errors in nuclear power plants that result in significant extra improvement initiatives and process controls which are potentially caused by “traps” (studies have determined that about 70% of human errors result from “traps” that add challenges to the human doing the correct thing); b) develop a prioritization list of solutions to remove “traps” based on potential benefits (including reducing risks of removing performance initiatives and process controls) and the readiness of the solution technology or process; c) work with utilities to implement solutions to demonstrate potential results; and d) develop guidance for identifying “traps” and approaches for removing them.

12/2017

Final Guidelines to Implement Technologies for Improved Outage Safety and Efficiency: This activity will produce guidance based on lesson learned in plant pilot projects under the LWRS AII&C program, and research by EPRI and other organizations. To support more efficient outage management and coordination, and associated reduced outage time and costs, advanced technologies are needed to facilitate information flow into, across, and out of the outage control center (OCC). These include technologies to conduct interactive meetings with participants in other locations. The resulting capabilities will also allow the entire OCC to share information as it develops in response to an emergent issue to support faster and better informed decisions.

12/2020 (partially funded by LTO)

Final Guidelines to Implement Technologies for Human Performance Improvement for Nuclear Power Plant Field Workers: This activity will produce guidance based on lesson learned in plant pilot projects under the LWRS AII&C program, and research by EPRI and other organizations. This will focus on mobile technologies that will support plant field workers in more efficiently performing typical work activities with less likelihood of human errors. The mobile technology will include general work process instructions, component identification capabilities, wireless communications to transmit and receive real-time information, audio, picture and video streaming, and use of heads-up, hands-free displays for workers involved in hands-on work.

12/2020 (partially funded by LTO)



Page 4 of 7

Anticipated Deliverables:

Deliverable Types

Joint Meetings of DOE LWRS Advanced II&C Group and EPRI Productivity Projects and Research

Joint annual meetings held at the Idaho National Laboratory covering LWRS, LTO and I&C projects, research and plant pilot project results that support productivity improvements that include increasing efficiency, and reducing costs and the likelihood of human errors – 8/2015

Identify and Remove/Reduce Causes Leading to Cumulative Impact of Improvement Initiatives and Process Controls with Technology Solutions

Develop a report that identifies repeated human errors potentially caused by “traps” and approaches to eliminate selected “traps” – 12/2017

Final Guidelines to Implement Technologies for Improved Outage Safety and Efficiency

Develop final guidelines that will support improved outage safety and efficiency through improved real-time information and decision-making to reduce outage lengths– 12/2020

Final Guidelines to Implement Technologies for Human Performance Improvement for Nuclear Power Plant Field Workers

Develop final guidelines that will support more efficient and less costly plant field worker performance – 12/2020

Past EPRI Work on Topic:


Joint Meetings of DOE LWRS Advanced II&C Group and EPRI Productivity Activities (annual event)

Meetings to discuss advanced instrumentation, information and control technologies for productivity improvements to support continuing cost-effective operation of operating plants and provide options for new build plants

Last annual meeting held 8/2015

7th International Workshop on the Application of FPGAs in Nuclear Power Plants hosted by EPRI

Presentations from this meeting are on the EPRI I&C cockpit.

10/2014

Principles and Approaches for Developing Overall Instrumentation and Control Architectures that Support Acceptance in Multiple International Regulatory Environments

3003002953 This report This report summarizes the technical requirements and guidelines contained in various international regulatory documents, standards and guides, as well as other constraints that could impact the overall I&C architecture. It then examines current concepts for defense in depth and adapts these to

11/2014



Page 5 of 7

provide a framework that can be used for defining I&C architectures. Finally, the report provides overall principles, approaches and guidelines for developing I&C architectures that meet safety requirements and other important design constraints, and should have a higher likelihood of gaining acceptance in multiple regulatory environments. The intent is that the guidance can be used by utilities and suppliers working on design and licensing of I&C architectures for new builds and for upgrades to operating plants.

Guidance for Developing a Human Factors Engineering Program for an Operating Nuclear Power Plant

3002002770 This report provides guidance for utilities on developing a HFE program for modifications made to operating plants. It also provides examples including a sample HFE procedure developed for one plant, and descriptions of HFE activities performed in support of a fleet-wide control room modification effort by another utility. Appropriate application of HFE principles and guidance in the design of plant modifications has become more important as operating plants modernize their I&C systems, control rooms and HSIs. In addition, HFE is being applied extensively in the designs for new plants where utilities will ultimately have responsibility for maintaining the HFE design basis for the plants over their lifetime once they become operational. Application of HFE principles and methods is required in order to maintain plant safety. It is also important to maintaining plant operability and reliability as modifications are made over time and it applies to all systems, not just safety systems. HFE is good engineering practice and it should be an integral part of modification design, implementation, operation and maintenance.

12/2014

Intelligent Plant Configuration Management Using Wireless Sensors: Application to Nuclear Power Plant Valves

3002005325 This report describes the development and demonstration of a prototype intelligent plant configuration management system using available wireless position sensors for valves. The sensors used were added to existing valves on a flow loop and were low cost and non-intrusive. This system will allow remote access to current valve positions saving the need to send someone to determine them. This system will also support peer checking from a remote location. The demonstration of the wireless sensors was performed on a flow loop with multiple flow paths and valves (including different types of valves).

7/2015



Page 6 of 7

In the future this approach could be extended to other components and process parameters.

Human Factors Guidance for Control Room and Digital Human-System Interface Design and Modification: Guidelines for Planning, Specification, Design, Licensing, Implementation, Training, Operation, and Maintenance for Operating Plants and New Builds

3002004310 This report gives a comprehensive set of HFE guidance and checklists that can be used to: a) prepare practical, comprehensive requirements eliminating costly iterations, errors and misunderstandings; b) establish technical bases for designs and implementation; c) make informed decisions on functionality to incorporate in the control room and other HSIs; d) incorporate HFE into the design to maximize operator and other plant staff effectiveness and reduce likelihood of human errors; and e) develop improved guidance where regulatory guidance is unclear or does not exist including for more efficient and economical operation as well as safe operation. Specific tasks were: a) expand and update HFE guidance in (1010042), which was published in 2005, based on new information pertinent to human factors planning, design processes, and control room and HSI technologies; b) expand the scope to include considerations for new build plants; c) reflect current regulatory approaches both from U.S. and non U.S. perspectives; and d) ensure consistency and effective use of 3002004310 along with other guidance documents.

12/2015

Idaho National Laboratory (INL) Reports from the DOE Light Water Reactor Sustainability Program’s Advanced Instrumentation, Information and Control Systems Technologies Technical Program

These reports are developed under the joint plan between DOE LWRS and EPRI LTO. This list was put onto the EPRI I&C and LTO cockpits and will be updated periodically.

4/2016

Design Considerations for Replacing Single Loop Controllers and Other Controls with Field Programmable Gate Array-Based Equipment

3002006737 This report provides guidance, processes and examples to help utilities 1) overcome the barriers to upgrading obsolete single loop controllers with FPGA-based technology and 2) effectively implement FPGA-based replacements of single loop controllers such that the implementation and future O&M costs are reduced. The guidance covers the entire lifecycle from requirements development to plant implementation and final testing. It also provides guidance for implementing enhancements, as deemed necessary and appropriate by the plant, such as removing single points of vulnerability and adding

4/2016



Page 7 of 7

beneficial functionality. The guidance identified what plants should consider when replacing both simple and complex analog and relay-based controllers with FPGA-based controllers.



Page 1 of 6

DATE: 6/2016


*TRL: 4 - 7


*Research Focus Area Title: Digital Implementation Improvement

Project Leader Name: Ray Torok

Project Leader Phone: 650 855-2310


Target Start Date (mm/yyyy) Estimated start date of work: 01/2013



Operating nuclear plants are gradually transitioning much of their aging and obsolete instrumentation

and control (I&C) equipment from analog to digital technology. However, plants have experienced

significant unanticipated costs, delays and operating events associated with digital system

implementations. As a result, despite the improvements in performance and reliability that digital

technology offers, the risks associated with I&C upgrades are often judged to be greater than the risks of

continuing to operate with obsolete analog equipment. New nuclear plants will be “all digital;” they will

use more extensive and highly integrated I&C systems than existing plants. While their digital issues are

largely the same, the increased complexity will often require new or extended solutions, with

corresponding cost and schedule risks. The industry needs updated methods and tools that address

new digital-specific technical issues and help engineers anticipate and mitigate potential vulnerabilities

before putting the digital systems into operation in the plants.

Inadequate knowledge, processes and guidance in key areas have contributed to significant

unanticipated costs due to problems coping with various implementation issues. Examples include

unexpected and undesired behaviors of digital equipment, and inadequate execution of key design and

development tasks, such as software verification and validation, configuration management, and

evaluation of failure modes and effects. Adverse impacts have included:

Large increases in vendor and utility staff costs

Significant project delays, as much as one or two refueling cycles

Plant trips

Extended outages to correct problems

Additional engineering to correct problems

Increased regulatory scrutiny



Page 2 of 6


The primary objectives of this focus area are improved methods, tools, technical guidance and training that will help nuclear utilities cost-effectively implement and maintain digital I&C with reduced risks of unanticipated costs and undesired behaviors. The R&D focus is on issues that are proving problematic for utilities implementing digital upgrades, typically issues for which digital technology offers new or different challenges compared to the analog equipment it replaces. Examples include configuration management, comprehensive testing, and identification of potential undesired behaviors under abnormal operating conditions.


New projects are proposed by utility advisors and EPRI staff and discussed to develop tentative

objectives, product descriptions and anticipated uses, and identify the target audience. Typically, the

EPRI project manager (PM) will select a project team of subject matter experts to conduct the research

and recruit utility advisors to form a technical advisory group (TAG) for the project. TAG members

review and comment on drafts, discuss course corrections with the project team, and help guide the

project to ensure that the end products will be used and useful.

The EPRI project team researches the issues of interest for the project, investigating approaches

currently used in the nuclear industry, practices and solutions used in other industries, and novel

methods coming out of university research programs. They assess the available information and draw

from all sources as appropriate to develop solutions/methods/guidance that can be practically and cost-

effectively applied to address nuclear plant issues. Examples of topics important to digital I&C

implementation addressed in this way include:

Evaluation of commercial grade equipment for critical applications

Applying risk methods to digital I&C

Hazard analysis for digital I&C

Protecting against common-cause failure

Configuration management

Testing

Requirements engineering

Comprehensive design guidance for digital implementations

Identifying and managing failure susceptibilities

Where appropriate, the activities include demonstrations of methods on actual plant modification

projects, and development of classroom and/or computer-based training materials. Digital I&C

implementation projects have also gathered operating experience data, and then developed and

documented corresponding lessons learned to help utility engineers understand and avoid potential

pitfalls.



Page 3 of 6


The practical guidance developed in this focus area helps utilities improve their processes and will

significantly reduce the likelihood of incurring large unanticipated costs associated with digital

implementations, up to and including inadvertent plant shutdowns. Having EPRI develop methods and

solutions for digital I&C issues allows utilities to avoid the costs associated with developing such

guidance, and also enables them to pool their resources with other utilities and effectively fund more

extensive efforts than would be practical for an individual utility to undertake.

Key Activities:


Digital I&C Training Module Updates (of products 3002000531, 3002005327)

The EPRI project team will work with utility engineers through a technical advisory committee (TAC) to identify and develop preliminary requirements for the computer-based training (CBT) module updates. At this stage the emphasis will be on determining methods that:

Address the key issues and training needs

Will be accepted and used by the target audience

Will be cost effective to apply The EPRI project team will then develop the updated CBT modules to address the TAC inputs to the extent practicable. The existing CBT modules will be reviewed carefully, and proposed changes flagged. Some modules may be eliminated. Some may be combined. The project team will investigate reorganizing the modules per the Digital Design Guide, and proceed in that direction if it the results are promising. After trials and mid-course reviews and adjustments, the new suite of CBTs will be completed and published through EPRI and if appropriate, in INPO’s NANTeL system.

12/2017

Assessing and Managing Failure Susceptibilities of Digital Instrumentation and Control Systems:

The EPRI project team is developing guidance and a systematic method for assessing and managing potential digital system failure susceptibilities, including common-cause failure. The guidance draws from industry standards and practices, lessons learned, and related EPRI products published over the last several years. It addresses both safety and non-safety applications, providing recommended practices for assessing digital control system susceptibilities and protecting against them. Technical considerations include factors that affect the likelihood of both latent software defects and the triggering conditions that can activate them: factors such as software development practices, test coverage, system and functional complexity, and designed-in defensive measures. The report recommends the use of coping analysis to investigate the effects of potential failures and misbehaviors in cases where appropriate. Ultimately, the approach relies on the use of engineering judgment to consider all the available evidence and decide if the failure risks have been managed adequately.

6/2016



Page 4 of 6


Deliverable Types Demonstrations and Operating Experience:

Guideline/Methodology:

Methods for Assuring Safety and Dependability when Applying Digital Instrumentation and Control Systems- 6/2016

Training:

Computer-Based Training (CBT) Module Updates -12/2017



Instrumentation and Control Modernization at Dukovany Nuclear Power Plant—Lessons Learned (

3002002986 The principal investigator reviewed all phases of the NPP Dukovany I&C modernization project to develop lessons learned and recommended practices that will be helpful to others who are contemplating large I&C modernization projects at nuclear power plants. The report explains how the modernization project was planned, executed and licensed. Specific areas addressed included: the bidding process and selection of suppliers and sub-suppliers; the I&C architectures planned for the modernized systems; the design phase, including discussion of the various standards applied; the installation strategy, including the staggered schedule developed to sequence and coordinate activities at the four Dukovany units; the testing program for the new systems; and the progression of I&C architectures used to transition from the initial to final plant configuration.

12/2015

Computer Based Training (CBT) - Digital Design Guide 2015

3002005327 In 2014 EPRI published the Digital Design Guide (3002002989), with comprehensive guidance on addressing digital technology issues within the framework of nuclear plant modification processes. In 2015 a CBT module is being developed based on the Digital Design Guide. It will be added to the existing suite of CBT modules addressing digital implementation issues (3002000531)

10/2015



Page 5 of 6

Hazard Analysis Demonstration – Generator Exciter Replacement - Lessons Learned

3002006956 The EPRI project team assisted Palo Verde engineers in performing hazard analyses on parts of their ongoing generator exciter replacement project – Systems theoretic process analysis (STPA) and fault tree analysis (FTA) were applied to the heating, ventilation and air conditioning (HVAC) system to help identify and manage potential system vulnerabilities that could lead to forced plant outages. The EPRI project objective was to gather lessons learned in regard to the practicality, effectiveness, and ease of training for selected methods in the 2013 EPRI guideline on hazard analysis of digital systems (3002000509).

10/2015

Digital Instrumentation and Control Design Guide

3002002989 This report provides guidance for implementing design control in plant modifications involving digital instrumentation and control (I&C) equipment and systems. It is intended to complement existing policies and procedures used by owner/operators in controlling engineering changes to their facilities. The report focuses on issues specific to digital technology, presenting guidance on key technical topics within the framework of a generic modification process.

10/2014

Requirements Engineering for Digital Instrumentation and Control Systems

3002002843 This guideline describes an approach that utilities can use to refine and improve their processes for developing, analyzing and tracking requirements for digital upgrades.

11/2014

Digital Instrumentation & Control Computer-Based Training Modules

3002000531 This product consists of 31 training modules on digital instrumentation and control (I&C) implementation issues for new build and operating nuclear plants. The materials are provided in two forms: computer-based training (CBT) modules and PowerPoint presentations, which include instructor notes.

9/2013

Hazard Analysis Methods for Digital Instrumentation and Control Systems

3002000509 This report documents an investigation of the use of various hazard and failure analysis methods to reveal potential vulnerabilities in digital instrumentation and control (I&C) systems before they are put into operation. The report looks at six approaches, ranging from well-established practices to novel methods still transitioning from academic demonstrations to practical, realistic applications. It includes step-by-step procedures and worked examples, applying each of the methods to sample problems based on actual

6/2013



Page 6 of 6

cases to assess the methods for effectiveness, range of applicability and practicality of use by nuclear plant engineers and their suppliers.

Commercial-Grade Digital Equipment for High-Integrity Applications: Oversight and Review of Evaluation and Acceptance Activities

1025283 This guideline helps utility engineers in overseeing commercial-grade item evaluation and acceptance activities as they are planned and executed and in assessing the documented evidence of previously performed activities.

8/2013

Guideline on Testing Digital Instrumentation and Control Systems

1025282 This report presents a systematic discussion of the various testing phases encountered during plant modifications involving implementation of new digital I&C equipment. For each testing phase, the report offers detailed step-by-step guidance with references to relevant industry standards and other related technical guidance. The guidance is intended to apply to both safety and non-safety systems using a graded approach based on safety significance and complexity.

12/2012

Guideline on Configuration Management for Digital Instrumentation and Control Equipment and Systems

1022991 This guideline provides focused guidance for implementing configuration management for digital I&C equipment and systems. It addresses both software and hardware issues. Best practices and effective methods are identified and developed into practical guidance for owner/operator engineers and their contractors.

11/2011



Page 1 of 4

DATE: 6/2016


*TRL: 4 - 8


*Research Focus Area Title: Nuclear Cyber Security

Project Leader Name: Matt Gibson




Anticipated Duration (number of months) for current project set: 60 months


Cyber Security is a new and escalating domain that requires deliberate technical solutions to manage

the attendant cost and labor demands. For each nuclear site there can be 1,000’s of digital devices, each

require explicit application of hundreds of cyber security controls without regard to plant impact or

measureable security benefit. These expenditures are predicted to substantially escalate as utilities

grapple with the regulatory mandated program implementation and ongoing sustainability, unless a firm

technical basis is developed to guide cyber security activities. EPRI has identified the following key

technical issues within nuclear cyber security that will need to be addressed:

Lack of technical basis for the application of controls and methods

Lack of risk informed cyber security analysis methods to shape mitigation strategies

Lack of effective supply chain and development phase methods for managing cyber security risk

Lack of effective integration of technical cyber security principles within system design and analysis

Limited selection of deterministic cyber security methods


The key objective is to address the identified technical issues with effective and rational cyber security

techniques, insights, and processes that establish a sustainable cyber security posture for the nuclear

industry while reducing the risk of a meaningful cyber-attack on a power plant facility.


EPRI will explore new and existing methods and technologies so that results with high efficacy can be

utilized by industry stakeholders. EPRI will develop strategic and tactical technical guidance for nuclear

plants to effectively & efficiently incorporate improved cyber security technology and methods into



Page 2 of 4

plant digital systems and new procurements, including lessons learned from traditional IT solutions &

other industries, but taking into account nuclear considerations such as safety, risk analysis and

configuration. Utilizing input from the EPRI Cyber Security Technical Advisory Committee (CTAC), the

EPRI focus area manager will select and pursue research projects that provide meaningful results that

contribute to an integrated Nuclear Cyber Security Framework. Example Framework research includes:

Risk informed Cyber Security Methods and Technical Guidance

Optimized Cyber Security Technical Assessment Methodologies

Reference Technical Assessments for industry common use

Cyber Security Supply Chain Methods and Technical Guidance

Nuclear Cyber Security Exercise Scenarios

Cyber Security Incident Response Guidance


Effective cyber security methods, techniques, and guidance will contribute to the normalization of cyber

security topical execution and reduce the churn and uncertainty currently being experienced while

ensuring a safe plant against the evolving threat. Working with a better focus and efficiency, the

industry will avoid substantial waste when implementing and sustaining their cyber security program.

The industry and the public benefits from enhanced safety, security, and reliability of plant operation at

a reasonable cost.

Key Activities:


Technical Assessment Optimization and Reference Assessment development: An effective “bottom-up” technical assessment methodology is being developed that leverages attack surface analysis, control method effectiveness, and control method implementation burden to achieve high vulnerability identification and efficient mitigation. The method will be used to create a library of reference technical assessments that can be used by members to further reduce their assessment burden.

12/2016

Nuclear Exercise Scenario Development: A group of scenarios are being developed that aide members in creating Emergency Preparedness and Incident response training exercises. This will help provide consistent training experiences.

8/2016

Risk Informed Cyber Security Methods and Guidance Development: Significant effort will be spent developing a usable plant level risk informed cyber security analysis method that can leverage the existing PRA information and be combined with credible probability surrogates to achieve cyber risk insights. This will contribute to stabilizing the regulatory and technical cyber security program efforts by providing a graded approach based on evaluated risk.

12/2017



Page 3 of 4


Deliverable Types Nuclear Cyber Security Failure Scenarios – 8/2016 Optimized Technical Assessment Methodology and Guidance with reference assessments-

12/2016



Cyber Security Procurement Methodology, Rev. 1

3002001824 This technical report is Revision 1 of the results of a four-phase, EPRI cross-sector project. This project developed a methodology for procuring digital I&C systems with the necessary cyber security controls. This technical report (Revision 1) incorporates lessons learned from application of the methodology in development of worked examples. This methodology determines the subset of cyber security controls that apply to a given procurement. This method has been applied to three worked examples and develops additional guidance with sample procurement language. In addition, the method provides mapping between major applicable regulations and guidelines to the relevant example. A computer-based training module that complements the methodology is also available (3002002499).

12/2013

Technical Guideline for Cyber Security Requirements and Life Cycle Implementation Guidelines for Nuclear Plant Digital Systems

1019187 This guideline provides an overview of the current U.S. regulatory requirements and industry guidance for nuclear plant digital assets. The guideline includes a plant technical procedure for addressing cyber security during the SDLC phases for new digital equipment within the scope of 10 CFR 73.54. Four examples illustrating use of the plant technical procedure during SDLC phases are provided. The guideline also contains suggestions on how non-U.S. nuclear and nonnuclear plants might apply the contents. For NRC-regulated Critical Digital Assets, the guideline is based on addressing a set of cyber security controls provided in NEI 08-09 Revision 6. These controls were derived from the National Institute of Standards & Technology (NIST) Special Publication series of cyber security controls practices, notably NIST SP 800-53, which are generic to all computer-based systems.

10/2010

Digital Asset Characterization, Vulnerability Profile

3002004999 EPRI evaluated several common digital devices with small attack surfaces to identify the smallest attack surface that could be

12/2015



Page 4 of 4

Development, and Mitigating Controls Guidance- Phase 1 Small Attack Surface

characterized across a wide range of devices based on their common characteristics. These included valve positioners, instrument transmitters and single loop controllers. The team then developed the list of traits that would define the Tier 1(small attack surface) boundary as well as the vulnerability classes that would encompass the wider range of specific technical vulnerabilities. This research can be used by both engineering and cyber security personnel as an aid in assessing digital assets with small attack surfaces. While only it is Phase 1 results and is intended to be combined with later research, it can be used now to characterize and evaluate digital assets during routine assessments.

Integration of Hazard Models into a Consequence Based Vulnerability Analysis Method- Phase 2

3002004997 EPRI has investigated the feasibility of applying well-established hazard and failure analysis models for assessing the risk from the cyber domain. The models are described in EPRI report 3002000509, which evaluated five hazard analysis methods for evaluating and managing potential failure modes and mechanisms in DI&C systems: fault tree analysis (FTA), failure modes and effects analysis (FMEA), hazard and operability (HAZOP) analysis, the purpose graph analysis (PGA) method, and systems theoretic process analysis (STPA). The research documented in the current report extended the evaluation of those hazard analysis methods. Specifically, it investigated their applicability for identifying cyber domain vulnerabilities and consequences to digital assets. The intent is to allow optimal control selection by prioritizing security control implementations based on the risks. The combined approach of STPA, FTA, IDART, and CIRA methodologies shows promise as a path forward. The IDART method identifies vulnerabilities and requires the determination of consequences, and STPA meshes with FTA to provide a methodical approach to determining these consequences. CIRA provides a process for evaluating and prioritizing risks and controls and a means of identifying gaps in protection. This research can be used by both engineering and cyber security personnel as an aid in understanding the methods that can be used to evaluate cyber security risk in a nuclear plant environment. The Phase I results can help to inform plant practices and methods during routine assessments, and can lay the groundwork for understanding and applying the later results of the project.

12/2015



Page 1 of 3

DATE: 6/2016


*TRL: 6 - 8


*Research Focus Area Title: Electromagnetic Compatibility

Project Leader Name: Stephen Lopez

Project Leader Phone: 704 595-2975





Utilities need to ensure that instrumentation and control (I&C) systems are not adversely affected by

electromagnetic disturbances, and that new equipment coming into the plants does not create

electromagnetic disturbances that can adversely affect other plant equipment. Managing

electromagnetic compatibility (EMC) has become a moving target, due to evolving I&C technologies with

new EMC characteristics, particularly wireless devices which are rapidly evolving, operating at higher

frequencies and powers and becoming more prevalent in plant operations and maintenance activities.

As a result, industry guidance on managing EMC and equipment qualification testing needs periodic

updating to address the evolving technologies.


The objective is to develop and update technical guidance to help nuclear plants effectively and

efficiently address potential EMC vulnerabilities that could cause undesired component behaviors

and/or plant events. Where appropriate, this includes development of classroom and/or computer-

based training materials, as well as gathering operating experience, and developing and documenting

corresponding guidance and lessons learned to help utility engineers implement new technologies.


Activities in this focus area are guided by an EPRI working group composed of utility and industry

experts on EMC. The group includes engineers responsible for EMC qualification test labs, consultants

brought in to diagnose and fix problems at the plants, and plant engineers who address emerging EMC

issues. The working group meets roughly once a year to discuss problems and to formulate and

prioritize recommendations for consideration by the EPRI program manager and the Instrumentation

and Control Integration Committee.



Page 2 of 3

For new projects the EPRI project manager selects a project team of subject matter experts to conduct

the research. The working group members review and comment on drafts, discuss course corrections

with the project team, and help guide the project to ensure that the end products will be used and

useful. The project team researches the issue, investigating approaches currently used in the nuclear

industry and practices and solutions used in other industries, as well as industry standards. They assess

the available information and draw from all sources as appropriate to develop solutions/methods/

guidance that can be practically and cost-effectively applied to address the nuclear plant issues.

Examples of topics addressed in this way include:

EMC qualification of digital equipment for applications critical to safety and plant reliability

Case studies of EMC-related events with lessons learned and corresponding recommendations

for plant engineers

Supplemental guidance on specific EMC issues

EMC Training for plant engineers


The practical guidance developed in this focus area helps utilities improve their processes that help

protect against EMC-related events and will significantly reduce the likelihood of incurring large

unanticipated costs associated with digital implementations, up to and including inadvertent plant

shutdowns. Having EPRI develop methods and solutions for EMC issues allows utilities to avoid the costs

associated with developing such guidance, and also enables them to pool their resources with other

utilities and effectively fund more extensive efforts than would be practical for an individual utility to

undertake. The working group meetings provide opportunities to share experiences and solutions with

other utility engineers, as well as consultants with decades of experience addressing EMC issues in

various industries.

Key Activities:


Update Computer-Based Training (CBT) modules for NANTEL Compliance

For many years EPRI has offered a two-day classroom training seminar on EMC qualification. A CBT version of the course was developed in 2015 and is now being updated to comply with INPO NANTEL requirements; it will provide utilities a lower cost option with more flexibility to take advantage of the course with minimal disruption of other activities and schedules.

12/2016

Wireless Technology Assessment

The proliferation of wireless devices (e.g. tablets, VoIP phones, cell phones, etc.) increases the potential for RF emission induced plant events. As a result, the use of administrative controls and identification of precautions and recommendations to support the use of wireless technologies within the power block is required to avoid electromagnetic interference issues and limit their impact if experienced. This project will examine the state of wireless device technology and its use within the power block in an effort to develop recommendations for future revisions of EPRI TR-102323

12/2017



Page 3 of 3


Deliverable Types

Computer-Based Training Modules for EMC with PowerPoint slides and instructor notes (Revision 2)

Wireless Technology Assessment (technical report)




EMI Qualification of Digital Equipment Upgrades in Nuclear Power Plants Version 1.0 Computer-Based Training

3002005506 The CBT presents the recommended generic EMI susceptibility and emissions test levels for use in establishing equipment EMC for nuclear power plant applications. The CBT also identifies emissions sources in nuclear power plants; recommends appropriate standards for equipment testing; defines plant and equipment emissions limits; and details practices to ensure proper grounding, cable separation, emissions control of portable transceivers, and restriction of EMI sources in the vicinity of EMI-sensitive equipment.

11/2015

Guidelines for Electromagnetic Compatibility Testing of Power Plant Equipment: Revision 4 to TR-102323

3002000528 This guide defines recommended generic EMC susceptibility and emissions test levels for nuclear power plant applications. Recommended tests are referenced in standards defined by the military and commercial sectors, and the levels are conservative based on the analyzed data.

12/2013

Assessment of Electromagnetic Interference Events in Nuclear Power Plants, Reported to INPO: 1975 to 2011

1022984 This report presents a study and analysis of reported electromagnetic interference– (EMI-) related incidents in nuclear power plants. The analysis is intended to inform the estimation of risk from EMI and offer suggestions on how that risk can be further mitigated from current levels.

12/2011

Handbook for Electromagnetic Compatibility of Digital Equipment in Power Plants TR-102400 Volumes 1 and 2

TR-102400-V1 and TR-102400-V2 This two-volume handbook explains the fundamentals of electromagnetic compatibility and provides guidelines for ensuring EMC of digital equipment in power plants.

10/1994



Page 1 of 5

DATE: 6/2016


*TRL: 3 - 8


*Research Focus Area Title: System Engineering Approach to I&C Engineering

Project Leader Name: Matt Gibson






Can it be demonstrated that modern systems engineering methods as a whole (i.e., not just

requirements engineering) can improve the safety, reliability, quality and cost-effectiveness of digital

I&C systems, above and beyond the results achievable with current plant modification methods and

traditional system development lifecycle models?

The current engineering change process, including I&C design, within utilities is primarily based on

nuclear QA requirements and may lack a deliberate engineering process based on consensus standards.

This has been a barrier to the integration of new topical areas including Hazards Analysis, Software

Engineering, Cyber Security, and Human Factors Engineering (HFE), which are based on the Systems

Engineering Process described in IEEE-1220 and IEC-15288.

Objectives (The What):

The objective is to investigate Systems Engineering Methods that would allow seamless integration of

new topical areas and improve overall plant modification execution.

Specific objectives include:

Discovery of the prevalence of System Engineering methods in current processes

Discovery of methods to tailor the System Engineering methods to utility engineering processes

Create and pilot methods that would result in measurable improvements in the digital

engineering design and implementation process that could address the issues described in

INPO 10-0008 and IER L2-11-2



Page 2 of 5


EPRI is proposing projects that would investigate integrating the System Engineering Process into the

core Design Engineering Process to align industry I&C design practices with modern engineering

processes for design, modification, and lifecycle management at utilities. This work will solicit input via a

technical advisory committee composed of utility and industry technical experts that will advise the

project team and ensure the products will be beneficial and utilized. Initial work will center on

investigating current processes and to what extent system engineering methods are currently

embedded in those processes. This will give the follow-on research activities a perspective on the nature

and scope of existing gaps. Analysis of these gaps will allow the research team to determine the

feasibility and potential efficacy of integrating system engineering methods into the I&C design process.

Based on a favorable analysis, the research has moved into the development of Integrated System

Engineering methods that can be used by utilities to improve digital I&C execution. These methods will

potentially result in change management challenges at member utilities. EPRI research will also

investigate the training and technology transfer methods that would be most effective in affecting

change. The research would further involve pilot implementations at member utilities with lessons

learned and feedback integrated back into the research products.


This Focus Area will help the industry transition to a modern, proven engineering process. This has the

potential to transform the way the nuclear industry maintains and updates their facilities. This will

improve project implementation and make better use of scarce engineering resources. A systems

engineering process will allow innovative technologies to root within existing plants and drive improved

operational techniques. Improvements in the quality and schedule of digital modifications with the

attendant of cost reduction can be a significant contributor to the economic posture of nuclear power

plants and their continued viability for public benefit.

Key Activities:


Develop Systems Engineering Guides and Methods: Based on industry insights and innovative perspectives, this product will develop a usable methodology and implementation guidance that can be used for pilot implementations beyond 2016.

12/2016


Deliverable Types

Methods, Practices, and Guidelines that implement an effective systems engineering methodology

that has been validated via pilot implementations and lessons learned.

Systems Engineering Methodology: Modification Change Guide - 12/2016

Conduct validation pilots with interested stakeholders - 12/2017



Page 3 of 5



EPRI-Hazard Analysis Methods for Digital Instrumentation and Control Systems

3002000509 The project developed worked examples of varying complexity to better understand the strengths, weaknesses, and applicability of six Hazard Analysis Methods: functional FMEA, design FMEA, a top-down method using fault tree analysis (FTA), HAZard and OPerability (HAZOP) analysis, systems theoretic process analysis (STPA), and purpose graph analysis (PGA). Based on lessons learned from the examples, step-by-step procedures for each of the methods was developed. The notion of hybrid or blended methods that combine top-down and bottom-up approaches to improve efficiency and effectiveness was given additional consideration. The procedures and example problems in the report and the taxonomy examples will help utility engineers involved in implementing digital systems. Improved hazard analysis methods may also be the key to resolving regulatory uncertainty regarding understanding and managing software and digital system failure modes. However, it appears that the most effective methods are also the most difficult to apply and are new to the utility industry.

6/2013

EPRI-Requirements Engineering for Digital Instrumentation and Control Systems

3002002843 This guideline helps nuclear owner/operators and vendors design and implement digital I&C systems with a more complete and correct set of requirements. It suggests an iterative approach for requirements specification that combines the use of early conceptual designs and the consideration of risk as it pertains to the success of any digital I&C system. It stresses the need for self-consistent and complete specifications and incorporates requirements verification and analysis techniques such as hazards analysis that have been shown to be helpful. Utilities that apply these concepts of requirements engineering should realize a more predictable project execution and will inherently reduce the associated project risks related to the application of digital components and systems. Additionally, the projects that use this process appropriately should experience a more robust verification and validation effort. Both of these aspects equate to lower total cost of ownership for the

11/2014



Page 4 of 5

installed product and fewer unexpected events related to the specific digital system.

EPRI-Hazard Analysis Methods for Digital Instrumentation and Control Systems

3002002770 This report provides the guidance that will help plant operators, suppliers, and supporting third parties 1) plan for the extensive activities required for design and licensing of a new plant control room and related facilities; 2) plan changes to existing control rooms and HSIs that address obsolescence issues and the need for new capabilities; and 3) meet plant goals of improved availability, reliability, and cost-effectiveness while meeting Nuclear Regulatory Commission (NRC) safety requirements–and providing support to meet safety requirements of other regulatory bodies. These guidelines will be the main support for plant owner/operators as they modernize control rooms, HSIs, and I&C systems. The guidance also will support developers of new plants. The document’s primary use will be as a reference that is accessed and used when specific needs arise. This project has developed necessary guidelines and technical bases to support these areas. The project's overall aim is to support operational requirements of power plants while improving their availability, reliability, and cost-effectiveness, and meeting NRC safety requirements. This report provides guidance that is useful for operating plants that are modifying and updating their control rooms and HSI and for owner/operators pursuing new builds.

12/2014

EPRI-Digital Instrumentation and Control - Design Guide

3002002989 This project developed a “generic” plant modification process based on input from several of the utility members of the technical advisory group (TAG). The team then described the interrelations between the activities needed to address digital issues in eight key topic areas, showing suggested activity assignments, sequencing, and interactions that could be expected among various stakeholders during the various phases of the generic modification process. The TAG provided reviews at various stages to ensure that the final guideline scope, content, and format would be suitable for the intended users. For each of the digital topic areas—analysis, requirements, procurement, human factors engineering, data communications, cyber security, plant integration design, testing, configuration management, and licensing—the report offers descriptions and recommendations, including

11/2014



Page 5 of 5

pointers to other, more detailed sources of information and guidance. Topic-specific activities are also shown graphically in “swim lane” diagrams that show sequences and linkages among various activities during each phase of the modification process. A Digital Design Guide wall poster is also available to illustrate the placement of all activities for all topics in a large scale, integrated “swim lane” view. It is expected that the guidance in this report will be used to complement existing plant processes or as a “roadmap” for developing or updating internal programs or procedures for conducting digital I&C engineering activities.



Page 1 of 6

DATE: 6/2016


*TRL: 5-8


*Research Focus Area Title: Human Factors Engineering for Nuclear Power Plants







Approximately 80% of all undesired events in nuclear plants are attributed to human error. Appropriate

application of human factors engineering (HFE) can reduce the likelihood of human errors related to

design, design changes and procedures. Updated and expanded guidance on HFE principles and

processes in requirements, design, verification and validation of plant modifications to control rooms

and other new or modified digital human-system interfaces (HSIs) is needed to improve interface

designs and reduce the likelihood of human errors and potential unplanned outages or power

reductions caused by them.

No comprehensive set of HFE computer-based training (CBT) modules for digital systems and human-

system interfaces (HSIs) for utility personnel for digital modifications to operating nuclear power plants

is available. In addition to the need for HFE knowledge to support plant activities, INPO’s ACAD-98-004,

revision 2 has added HFE knowledge requirements for digital engineers.


The overall objective of the R&D is to reduce the likelihood of human errors and the resulting unplanned

outages or power reductions, equipment damage, productivity losses and increased regulatory

attention. The first underlying objective is to update and expand the existing EPRI HFE guidelines to

address new issues, requirements and technologies and to add new build plant specific guidance. The

second underlying objective is to develop a set of CBT modules to transfer HFE information and

guidance to utility personnel.



Page 2 of 6


EPRI 3002004310 “Human Factors Guidance for Control Room and Digital Human-System Interface

Design and Modification: Guidelines for Planning, Specification, Design, Licensing, Implementation,

Training, Operation, and Maintenance for Operating Plants and New Builds”, which was published in

December 2015, provides an extensive set of HFE guidelines. These guidelines and associated technical

bases address modification of operating plant I&C systems, control rooms and other human-system

interfaces (HSIs) and address new build plant specific HFE issues. These guidelines also address new

issues and standards, HFE and I&C technology advances, and new industry and regulatory positions. In

addition, these guidelines address issues related to new technologies that are advantageous for

operating plant operation and modifications, and for new build plant designs.

This project will take the previously developed EPRI HFE training class materials (3002000319) and

update and expand them as appropriate based on the new updated and expanded HFE guidelines

(3002004310) to develop CBT modules to support operating plant and new plant activities. After the

content of the CBT modules are completed, the project will work with a professional CBT development

company to develop the actual modules.


Members will have an up-to-date and expanded comprehensive set of HFE guidelines and associated

CBT modules for in-house modifications and new build designs. They will support interactions with

suppliers to play a stronger role in the design, evaluation, and acceptance of the digital modifications or

new build designs of the control room, remote shutdown station, other local control stations, and other

HSIs. They can also benefit from the understanding of human factors and HFE in discussions with

regulators. Members can obtain additional value through enhancing their lifetime HFE plant program,

which in the case of new build plants, will take advantage of the vendor’s HFE program and design

bases. Computer-based training modules will make it easier for utilities, and they can be put up onto the

INPO website.

Key Activities:


This activity will produce the first set of HFE computer-based training modules based on training class materials (3002000319) plus appropriate new material from (3002004310) published 12/2015. The class materials will be broken up into reasonably sized modules for effective learning. Scripts and appropriate graphics will be developed for the CBT modules. The materials, scripts and graphics will be provided to a company which professionally designs and produces CBT modules.

12/2017

This activity will produce the remaining set of HFE computer-based training modules.

12/2018



Page 3 of 6


Deliverable Types

Computer-Based Training Modules



Human Factors Guidance for Control Room and Digital Human-System Interface Design and Modification: Guidelines for Planning, Specification, Design, Licensing, Implementation, Training, Operation, and Maintenance

1010042 This report provides an extensive set of HFE guidelines that address modification of operating plant instrumentation and control (I&C) systems, control rooms and other HSIs to help ensure that the HFE aspects of the plant that are affected by I&C and HSI modification are well designed and, thus, improve overall plant operations, reliability, and safety, i.e., realize the benefits of digital I&C and HSI technology. The report provides guidance in the areas of: a) control room modification planning; b) HFE design, analyses and tools; c) detailed HFE guidelines; d) regulatory and licensing activities; and e) special topics related to operations and maintenance. This report is superseded by 3002004310. However, this report will remain available for a couple of years to allow utilities time to change any references to 3002004310.

12/2005

Computerized Procedure Systems: Guidance on Design, Implementation and Use of Computerized Procedure Systems, Associated Automation and Soft Controls

1015313 This report provides guidance on the design, implementation and use of computerized procedure systems. Computerized procedures can provide different levels of functionality, ranging from systems that simply display a replica of paper-based procedures on a computer screen, to systems that automatically retrieve relevant process data for a procedure step and process the step logic as an aid to the operator, to systems that include procedure-based automation. Computerized procedures are an important part of the overall human-system interface (HSI) in advanced control rooms being designed for new build plants. They also are being introduced into some operating plants as those plants modernize their control rooms and HSIs. The guidance in this report can be applied for both new designs and modifications.

8/2010



Page 4 of 6

Guidance for Identifying and Implementing Human-System Interfaces Needed to Supplement Computer-Based Workstations in the Main Control Room

1015089 This report provides guidance on identifying and implementing a set of HSIs that are needed in addition to the non-safety selectable HSIs provided on the control room workstations to provide a design that adequately supports meeting plant safety, reliability and operability goals. Designated “supplemental HSIs,” these HSIs have requirements related to hardware/software design and equipment qualification, or requirements for accessibility, that are typically not met by non-safety computer-based workstations with selectable displays and controls. Examples of needed supplemental HSIs include: a) HSIs that need to be implemented using equipment that is qualified to perform safety functions and thus can be counted on to remain functional for use under accident conditions; these HSIs can be credited in the licensing basis for accident mitigation and safe shutdown; b) HSIs that need greater accessibility than the selectable HSIs provided on the workstations; for example, those that need to be spatially dedicated (i.e., in a fixed location) and continuously visible to the operators to provide maximum accessibility; c) HSIs needed at the remote shutdown station to handle situations in which the main control room must be evacuated; and d) HSIs that are needed during power operation to handle failure or degradation of the normally-used HSIs.

11/2010

Program on Technology Innovation: Decision-Centered Guidelines for the Design of Human System Interfaces for Electric Power Industry Applications: Design Guidance to Support Decision Making in Complex Work Environments

1025791 This report provides guidance to support improved user decision-making across a broad range of electric power industry application areas. The guidelines aid in design of user-centered HSIs, while increasing beneficial uses of new technologies for electric power industry systems. Decision-centered guidelines are applicable to system designs involving new technology that will transform current user tasks, responsibilities, and workload. New kinds of errors, introduced as result of information overload and confusion, already experienced in other industries include loss of situation awareness due to loss of the “big picture,” and mode errors due to uncertainty concerning the current state of an automatic system. Decision-centered guidelines prevent these kinds of problems from developing, as well as supporting faster situation awareness and better and faster decision-making.

9/2012



Page 5 of 6

Human Factors Engineering Training Course for Operating Nuclear Power Plant Personnel

3002000319 This report provides PowerPoints and instructor notes for an HFE training course for operating plant personnel involved in modification projects. The material consists of Basic and Advanced sections. The Basic section provides an overview of HFE and its application at operating plants. The Advanced section provides detailed descriptions of selected HFE activities and methods, and includes numerous examples and exercises. The course focus is the main control room (MCR) and HSIs located within the MCR. In addition, the training course material is applicable to other worker locations and activities, such as local control stations, emergency response facilities, and maintenance activities. The HFE principles and methods described in this course represent good engineering practices that have been widely accepted, and should be followed in the design of any modification that could impact human performance. The information should be useful to a broad spectrum of users, including suppliers as well as plant owner/operators, in the U.S. and in other countries. Most of the training material is applicable to new build plants.

12/2013

Guidance for Developing a Human Factors Engineering Program for an Operating Nuclear Power Plant

3002002770 This report provides guidance for utilities on developing a HFE program for modifications made to operating plants. It also provides examples including a sample HFE procedure developed for one plant, and descriptions of HFE activities performed in support of a fleet-wide control room modification effort by another utility. Appropriate application of HFE principles and guidance in the design of plant modifications has become more important as operating plants modernize their I&C systems, control rooms and HSIs. In addition, HFE is being applied extensively in the designs for new plants where utilities will ultimately have responsibility for maintaining the HFE design basis for the plants over their lifetime once they become operational. Application of HFE principles and methods is required in order to maintain plant safety. It is also important to maintaining plant operability and reliability as modifications are made over time and it applies to all systems, not just safety systems. HFE is good engineering practice and it should be an integral part of modification design, implementation, operation and maintenance.

12/2014



Page 6 of 6

Human Factors Guidance for Control Room and Digital Human-System Interface Design and Modification: Guidelines for Planning, Specification, Design, Licensing, Implementation, Training, Operation, and Maintenance for Operating Plants and New Builds

3002004310 This report a comprehensive set of HFE guidance and checklists that can be used to: a) prepare practical, comprehensive requirements eliminating costly iterations, errors and misunderstandings; b) establish technical bases for designs and implementation; c) make informed decisions on functionality to incorporate in the control room and other HSIs; d) incorporate HFE into the design to maximize operator and other plant staff effectiveness and reduce likelihood of human errors; and e) develop improved guidance where regulatory guidance is unclear or does not exist, including for more efficient and economical operation as well as safe operation. Specific tasks were: a) expand and update HFE guidance in (1010042), which was published in 2005, based on new information pertinent to human factors planning, design processes, and control room and HSI technologies; b) expand the scope to include considerations for new build plants; c) reflect current regulatory approaches both from U.S. and non U.S. perspectives; and d) ensure consistency and effective use of 3002004310 along with other guidance documents. This report supersedes 1010042.

12/2015



Page 1 of 4

DATE: 6/2016


*TRL: 5 - 8


*Research Focus Area Title: Circuit Cards - Analysis & Implementation







Instrumentation and control (I&C) systems play a key role in the operation, health, and safety of nuclear power plants. Critical systems must be reliable to avoid unplanned trips and power outages, which can compromise safety and result in elevated costs for the plant owners and consumers. As legacy systems age and as digital system implementation remains challenging, actions to maintain or improve circuit card reliability become increasingly important. Experience has shown that aging or poorly maintained circuit cards result in failures that can cause plant

trips and power de-rates. These issues have compelled utilities to take repair or replacement actions to

maintain the availability and reliability of their plants. In some cases, however, upgrading these older

systems does not make financial sense due to the current business environment, regulatory

environment, and time and resources required to perform the upgrade. As a result, plants will have to

maintain existing systems long past the period where effective vendor support is available. Once these

systems are replaced, maintenance will be required and effective life-cycle planning will be the key for

continued operations.


The primary objective of this research focus area is to avoid unanticipated costs and safety concerns

resulting from circuit card reliability and obsolescence issues.

The secondary objective is to capture and share lessons learned and solutions to problems experienced

in the area of circuit card reliability and obsolescence. This can minimize the impact of circuit card

reliability and obsolescence issues.



Page 2 of 4


Develop practical guidance, tools and equipment that present cost-effective solutions to current and

future problems, which may also include the pursuit of vendor technology development if best suited

for the potential implementation of project deliverables. Project advisors are encouraged to identify

issues that need to be researched, provide input on requirements for potential projects, and offer

solutions that can be used to resolve current or future issues.

Potential projects are selected by the EPRI project manager and socialized with the participating

member utilities. The member utilities designate representatives to serve as technical advisors for the

project. The EPRI project team coordinates at least one meeting per year to review current activities,

discuss issues, and address any potential concerns within the focus area. Members share plant

experiences, discuss lessons learned, provide feedback on current projects, and identify areas that need

additional research or guidance. Example topics include the development of best practices and lessons

learned guidance, and circuit card reliability simulation tools. Where appropriate, the group sponsors

the development of new projects to combat emerging issues in the area of I&C circuit card reliability and

obsolescence.


The practical guidance developed through this research focus area helps nuclear plant operators detect

and resolve potential issues before they result in costly power reductions, shutdowns, or safety

concerns. The project also promotes technology transfer of industry and EPRI guidance to support the

longevity of installed circuit cards and components. This focus area:

Provides a broad cross-section of operating experience from which to exchange information on lessons learned and best practices

Provides a forum for the identification of high-priority research activities to resolve circuit card maintenance and life-cycle planning issues

Key Activities:


I&C Reliability Best Practices and Lessons from China Based on China General Nuclear Power Company (CGNPC) Experience: Circuit card failures across the nuclear power industry were increasing over the last decade when utilities and other key industry stakeholders took action to reduce the number of circuit card failures. While many utilities adopted recommendations directly from the EPRI Gold Card, the China General Nuclear Power Company (CGNPC) developed its own practices that were similar to and in some cases expanded upon the EPRI guidance. Since

12/2016



Page 3 of 4

incorporating these practices, CGNPC has been able to consistently meet its needs for I&C performance and reliability. EPRI plans to analyze the guidance and best practices coming from CGNPC and perform a gap analysis against the EPRI Gold Card to identify and examine any differences in approach as well as their potential impact on plant operations.


Deliverable Types

I&C Reliability Best Practices and Lessons from China Based on China General Nuclear Power Company (CGNPC) Experience:

Develop a report discussing I&C Reliability best practices and lessons learned - 12/2016



Reverse Engineering via Computer Simulation and Visualization of Nuclear Plant Printed Circuit Boards

3002005324 This project has successfully demonstrated 3D scanning of Printed Circuit Boards (PCBs) using an image-based scanner. Until now, this has not been feasible due to limitations such as miniature components, component and board reflectivity, and component proximity. This tool enables digital representation of physical PCBs, showcasing integrated reverse engineering capabilities within a virtual environment called PREVIEW (the PRedictive Environment for VIsualization of Electromechanical Virtual Validation). PREVIEW can be used to visualize existing PCBs in a simulation environment—providing input to perform the virtual reliability and maintainability analyses necessary to estimate PCB remaining time to failure. This project lays the foundation for development of 3D PCB scanning via simulation and visualization. The work thus far has demonstrated clear potential for transferring physical information on the design of existing PCBs into a digital 3D model and using this model in an immersive virtual environment that has the ability to subject the model to various stressors.

9/2014

Circuit Card Replacements Involving Field-Programmable Gate Arrays: Case Studies

3002002957 This report documents two circuit card replacement projects involving the use of FPGAs, and application of

11/2014



Page 4 of 4

the EPRI FPGA guidelines. The first project involves replacement of obsolete microprocessor-based timing modules for the emergency diesel generator load sequencers at a U.S. boiling water reactor plant. The second project is replacing obsolete display system controller cards that interface between the digital control computers and main control room display systems at a Canadian plant with CANDU (CANada Deuterium Uranium) reactors. In both cases FPGAs are being used to perform the primary functions of the replacement circuit cards. This report documents the experience to date and lessons learned from the two projects, including experience in determining the design basis for the original circuit cards, developing requirements for the replacement card designs, and taking advantage of the FPGA-based replacements to make improvements in system reliability and maintainability. Methods and tools used for developing and testing the FPGA applications are also described.

EPRI Gold Card Project: Prioritization Strategy for Circuit Card Reliability Guidelines

3002002642 This report outlines a prioritization strategy for implementing Electric Power Research Institute (EPRI) guidelines related to the improvement of circuit card reliability at nuclear power plants. The methodology in this report originates from a 2012 site visit to a member utility who requested EPRI’s assistance in applying EPRI guidelines and other industry recommendations to improve their circuit card program. In addition to outlining a prioritized and graded approach of the guidelines, this report also cites examples from various utilities and sources for implementing selected guidelines within a circuit card program.

3/2014

EPRI Gold Card Project: Circuit Card Reliability Program Guidance

1022990 In support of the industry’s efforts to improve reliability, EPRI collected knowledge about the circuit card components and created a guidance document called the EPRI Gold Card (1022990) to mitigate or reduce the number of failures in nuclear power plants. This guidance presents recommendations and best practices for all aspects of plant operations related to circuit cards—from procurement, handling, burn-in, storage, in-service and operational controls, maintenance, troubleshooting, data capture related to card failures, refurbishment and repair, reverse engineering, and training for repair personnel.

12/2011



Page 1 of 3

DATE: 6/2016


*TRL: 7-8


*Research Focus Area Title: I&C Preventative Maintenance Templates







Experience has shown that aging or poorly maintained I&C systems result in failures that can cause plant

trips and power de-rates. These issues have compelled utilities to take repair or replacement actions to

maintain the availability and reliability of their systems. A healthy preventative maintenance program

supports these operations. To develop PM programs for the most important equipment types using a

valid technical basis, utilities require information on the most appropriate tasks and task intervals that

address the ways the equipment degrades while accounting for the influences of duty cycle and service

conditions. Before the Preventative Maintenance Basis Database (PMBD) was developed, this data did

not exist in an accessible form—often resulting in arbitrary and unsuitable tasks and intervals that

increased maintenance costs and diminished reliability. The EPRI PMBD is a natural tool for capturing

maintenance guidance for plant equipment.


The primary objective of this activity is to avoid unanticipated costs and safety concerns resulting from

I&C equipment reliability issues. This means developing practical guidance, and tools that present cost-

effective solutions to current and future PM problems. The PMBD serves as a reference for PM task

selection on common plant equipment and components.

The objective of the PMBD application is to make utility experience of technically applicable and cost-

effective PM tasks easily accessible to utility engineers. This objective requires that recommendations

on PM tasks include an outline of the technical basis in a way that utility engineers can adapt to plant

conditions, and requires integrated guidelines for the user to be able to use the database efficiently for

common tasks.



Page 2 of 3




project. Where appropriate, the group sponsors the development of new projects to address emerging

needs for new templates.

Expert panels composed of individuals from EPRI, EPRI-member utilities, and manufacturers meet and

formulate the basis and range of PM task options presented for the selected component. The content is

then reviewed, updated, and formatted for posting to the EPRI PMBD.


The PMDB is an essential reference for utilities seeking to:

1. Validate their current PM program 2. Perform PM tasks less frequently as part of a living maintenance program 3. Improve PM tasks as appropriate corrective action 4. Improve equipment reliability 5. Develop more consistent PM programs across a fleet of plants

The result of which creates a safer, more reliable, and cost-effective nuclear power plant for electricity consumers.

Key Activities:


Create new I&C PM Template: The PMBD contains several I&C equipment related PM templates. This effort will expand the portfolio of templates available in the PMBD to include additional I&C components. The next template slated for development is the I&C digital positioner.

10/2016


Deliverable Types

Create new I&C PM Template:

Revise PMDB to include the following new I&C PM template: Digital Positioner



Page 3 of 3



Update existing I&C PM Templates

PMDB revised to include the following updated I&C PM templates: Booster, Positioner, I/P and E/P Transducer, DC Power Supply, Electrolytic Capacitor, Pneumatic Controller, Pressure Regulator, Pressure Sensor and Transmitter

12/2015

Update existing I&C PM Templates

PMDB revised to include the following updated I&C PM templates: Signal Conditioner, and Analog Electronic Controller

08/2014



Page 1 of 4

DATE: 6/2016


*TRL: 5 - 8


*Research Focus Area Title: Radiation Monitoring Systems







Area and process Radiation Monitoring Systems (RMS) have presented a wide variety of challenges to plant personnel in the areas of maintenance, calibration, operation, training, regulatory compliance, and equipment obsolescence. Radiation monitors are also aging and, in many cases, have obsolete components with limited or no vendor support. RMS issues are occurring, and it is important to understand how the continued aging of these components adds to the challenge of maintaining these important systems.


The objectives of this focus area are as follows:

Develop technical guides and tools to assist in mitigating the impact of or resolving RMS issues.


EPRI collected information from various sources in order to determine the most critical problems and

issues that impact RMS performance and system health. A list of potential projects was created to

address the areas of concern related to RMS reliability and performance. Five prioritized projects were

then selected as potential EPRI projects to pursue. These projects were expanded to provide detailed

descriptions of the tasks, milestones, deliverables, and estimated timeframe of each project.

Potential projects were selected by the EPRI project manager and socialized with the participating

member utilities. The member utilities will designate representatives to serve as technical advisors for

each of the projects. Where appropriate, the group will sponsor the development of new projects to

address emerging needs or issues.



Page 2 of 4


This focus area will help to resolve reliability issues surrounding RMS. The practical guidance developed

through this research focus area helps nuclear plant operators detect and resolve potential issues

before they result in costly operations, or safety concerns. The project also promotes technology

transfer of industry and EPRI guidance to support the longevity or replacement of RMS and its

components.

Key Activities:


Update Area and Process Radiation Monitoring System Guide and Calibration of Radiation Monitors at Nuclear Power Plants Guide: Some information in the EPRI Area and Process Radiation Monitoring System Guide (published in 2003) and Calibration of Radiation Monitors at Nuclear Power Plants (published in 2005) guide are out of date, not complete, or changes in standards and regulatory documents have occurred since they were written. In addition, the guides were not written with an international perspective. This project updates the two guides based on available industry documents, contractor experience, and information from experienced industry personnel. Updates to the Area and Process RMS Guide and the Calibration Guide will be performed to 1) enhance the information for training, 2) provide the latest thinking in reliability improvement, and 3) update the reference documents from both a domestic and international perspective.

(TBD) 2017 / 2018


Deliverable Types

Update Area and Process Radiation Monitoring System Guide and Calibration of Radiation Monitors at Nuclear Power Plants Guide:

Develop a technical update for each report that eliminates out of date information, incorporates supplemental information, and reflects changes in standards and regulatory documents. The guides will also be updated to better address international utility concerns.



Page 3 of 4



RMS Resources Page N/A This project developed an online resource (webpage) inside EPRI.com that provides an overview of RMS systems and components, provides a list of area and process monitors in service at utilities, and provides useful links to RMS industry reports and products. This product can be accessed from the NMAC cockpit webpage on EPRI.com.

12/2015

Radiation Monitoring System Obsolescence Management Guide

3002005269 The Radiation Monitoring Systems (RMS) Obsolescence Management Guide is a comprehensive guide for upgrading and coping with obsolete RMS at nuclear power plants (NPPs). Its content is based on interviews and recommendations from experienced plant personnel who are responsible for maintaining the reliability and continued operation of plant-installed RMS. It presents information collected during the course of several in-depth interviews centered on obsolescence issues and their relation to RMS evaluations, upgrades, and the coping strategies adopted by utilities to maintain RMS equipment reliability. It summarizes findings from interviews in the form of a list of recommendations and also offers the reader the ability to explore additional supporting information associated with each recommendation in subsequent sections of the guide.

11/2015

Plant Installed Radiation Monitoring System Scoping Study

3002002879 The Radiation Monitoring System Scoping Study includes a thorough review of data from available sources related to plant-installed radiation monitoring system (RMS) performance and reliability, along with a list of potential projects that could be pursued to address major areas of concern arising from the review of the compiled data. In its final section, the RMS Scoping Study presents five potential projects best suited for the Electric Power Research Institute (EPRI) to pursue in an effort to provide continuing support for RMS. Each of these five potential projects includes a description and objectives, task list, milestones with deliverables, and an estimated milestone time frame associated with the project

7/2014



Page 4 of 4

Area and Process Radiation Monitoring System Guide

1007909 This guide provides technical information to assist personnel in understanding and resolving equipment and operational problems associated with RMS. It includes: system overview information, industry operating experience discussions, troubleshooting guidance, and summary of the regulatory requirements.

08/2003

Calibration of Radiation Monitors at Nuclear Power Plants

1011965 This guide provides technical information to assist personnel in understanding and resolving equipment and operational problems associated with RMS. It includes: training information, calibration information, troubleshooting guidance, and a summary of the calibration requirements.

12/2005



Page 1 of 6

DATE: 1/27/15


*TRL: 3 - 7


*Cockpit Display Title: Sensor Issue Scoping, Prototype & Development







Existing nuclear power plant sensing systems are typically comprised of older wired technologies

requiring significant man-hours to maintain, exhibit large response and recovery times when generating

readings, confined to certain applications, or consume significant energy to operate. Access to real-time

and predictive information about the condition and performance of every component of the end-to-end

power system is possible through the integration of advanced sensor technology.


Nuclear plant instrumentation and control (I&C) systems provide critical information and enable

corresponding actions that ensure the safety and efficiency of the plant during operation. However,

limited measurement capabilities available in existing plants, and high implementation costs can make

monitoring of some key components difficult or impossible.

The objective of this project is to apply, specify, develop, and integrate advanced sensors into nuclear

power plant applications. Advanced sensors will be used to measure plant parameters, more efficiently,

and less costly than existing technologies.


Develop or integrate practical knowledge and equipment that present cost-effective solutions to current

and future nuclear power plant issues. This may include the application of vendor technology if best

suited for plant implementation or the initial development of sensor technology. Project advisors are

encouraged to identify issues that need to be researched, provide input on requirements for potential

projects, and offer solutions that can be used to resolve current or future problems.



Page 2 of 6



project. Where appropriate, the group sponsors the development of new projects to address emerging

needs for new sensors.


Combining appropriate sensor technologies with the ability to process large amounts of data can have profound impacts on addressing risks through better prediction of plant operation, asset health and impacts associated with nuclear power generation. An efficient, cost effective, and fully integrated sensor network will support a more rapid and targeted crew dispatch ability that can be used to anticipate events and quickly assess plant conditions and infrastructure health.

Key Activities:


Solid-state Hydrogen Sensor Pilot Study: This research demonstrates the Solid-state Hydrogen Sensor performance in an industrial power plant environment. The goal of this research is to benchmark the new sensor performance with the existing plant installed sensor. Discussions are currently underway for testing in 2017.

TBD (2017)

Modular Wireless Tri-axial Vibration Sensor Development: This research focuses on designing and building a prototype modular wireless sensor system that has a long battery life and can be reconfigured for various sensing and communication needs, based on plant applications and requirements. EPRI demonstrated the feasibility of this concept in report 3002005725, Demonstrating Feasibility of a Sustainable, Modular Wireless Triaxial Vibration Sensor for Equipment Monitoring. This project expands on the initial development by performing additional prototype development and testing. The project will integrate additional hardware (transducers and wireless protocols), software (e.g. visualization suites, battery lifetime estimator, etc.) and vibrational power harvesting subsystems. In addition, the project will test the triaxial vibration sensor on a representative piece of equipment (e.g. pump) for performance screening and optimization. The goal of this research is to

12/2016



Page 3 of 6

reduce overhead associated with wireless sensor system deployment by increasing the utility of these systems.

Anticipated Deliverables List of proposed deliverables in tabular form – product type at a minimum:

Deliverable Types

Modular Wireless Tri-axial Vibration Sensor Development:

Develop a report discussing the prototype sensor design and associated testing.




Demonstrating Feasibility of a Sustainable, Modular Wireless Triaxial Vibration Sensor for Equipment Monitoring

3002005725 This report presents results and findings from a prototyping project that involved the design, assembly, and testing of a modular wireless triaxial vibration sensor that could be used for equipment monitoring applications in nuclear power plants. The design team built and tested a hardware and software prototype in a laboratory environment, and they demonstrated the ability to reconfigure the sensor using a temperature transducer and alternate wireless protocol as a proof of concept. Power calculations indicate that the system can last for up to two years without the use of power harvesting when transmitting data every 5 hours (0.21 days) using both a proprietary 2.4 GHz and an open Zigbee wireless protocol. This performance is according to the desired specifications from utility personnel. Initial testing of the vibrational power harvesting technologies was successful and further demonstrated the potential for improved sensor performance and flexibility. Follow-on testing, as well as hardware and software modifications, such as the incorporation of power harvesting and refinements in the user interface, are required in order to further develop the sensor prior to deployment in a power plant environment.

12/2015

Design Study to Determine the Effect of Radiation on Hydrogen Permeability in Polymeric Layers for Use with the Solid-State Hydrogen Sensor

3002005504 This report presents environmental testing results for a prototype semiconductor-based (solid-state) hydrogen sensor that could serve as a potential replacement solution for existing sensors used inside

10/2015



Page 4 of 6

hydrogen monitoring systems at nuclear power plants. Sensor performance following a total radiation exposure dosage of 4 Mrad is described for seven different polymeric protective layer (membrane) materials.

Program on Technology Innovation: Optical Fiber Bragg Gratings for Pressure Monitoring in Nuclear Power Plant Applications - Industrial Performance Testing Results

3002005379 This report describes sensor performance testing conducted in a relevant environment - one of the steam plants on the Pennsylvania State University’s University Park campus. The sensor was installed and used to measured differential pressure across a boiler feed-water valve for over 60 days. This report describes the installation and compares the output of the optical fiber Bragg grating pressure sensor to other sensors installed in the plant.

6/2015

Conceptual Design of a Modular Wireless Triaxial Vibration Sensor

3002003214 This report describes the conceptual design of a

wireless triaxial vibration sensor. The current work is divided into two separate components. The first

component is aimed at understanding the need for innovation on wireless triaxial vibration sensors

within power plants, quantifying the specifications required, and determining the gap between these

specifications and existing commercial products. The second component conceptualizes a novel system capable of accommodating the needs of a plant.

10/2014

Conceptual Design Study for Installation of a Solid State Hydrogen Sensor: For Use in Hydrogen Monitoring at Nuclear Power Plants

3002002880 This report provides a conceptual design study

examining the scope and considerations associated with the developed solid-state hydrogen sensor, and

its use inside hydrogen monitoring systems at nuclear power plants. It also presents other potential

applications for the technology within nuclear power plants such as a self-powered hydrogen-sensing

option deployed inside the containment building of a nuclear power plant.

6/2014

Development of a Prototype Solid-State Hydrogen Sensor: For Use in Hydrogen Monitoring at Nuclear Power Plants

3002002881 This report presents a design, along with the initial prototype testing results, for a solid-state hydrogen sensor that could serve as a potential replacement solution for existing sensors used inside hydrogen monitoring systems at nuclear power plants. Using an existing system and sensor design that is representative of most plants across the industry, a prototype sensor was developed to serve as a direct replacement option within existing hydrogen-analyzing cabinets that are designed to sample containment gas during post-accident conditions at

04/2014



Page 5 of 6

nuclear power plants. This prototype was then tested using available environmental qualification data from previously qualified hydrogen monitoring systems. Gaps in performance were identified for future detailed design and testing. Test results are discussed in detail in this report along with a discussion of the advantages and disadvantages of using this particular sensor design for post-loss-of-coolant-accident (post-LOCA) monitoring of hydrogen.

Fiber Bragg Sensors for Single and Differential Pressure Monitoring in Nuclear Power Plant Applications: Environmental and Accident Condition Testing Results

3002004293 This report describes specific testing conducted to emulate the current physical and performance capabilities of standard nuclear grade instrumentation and to characterize changes in FBGS performance as a result of exposure to nuclear gamma radiation, accident levels of vibration, high temperature, and humidity.

05/2014

Hydrogen Detection in Nuclear Power Plants: Comparison of Potential, Existing, and Innovative Technologies

3002002107 This research considers the application of seven

different hydrogen-sensing technologies and compares them in their suitability for deployment in a

containment environment. The summary of technologies presented in this paper was compiled

from academic and industrial-related literature along with published test results. Toward the end of the

report, conclusions are reached as to the most suitable technologies for potential deployment in a containment environment. A synthesis of the more

suitable technologies with available power harvesting technologies is then presented at the end of the

report and leads to the recommendation of a potential in-containment hydrogen sensing system.

12/2013

Optical Fiber Bragg Gratings for Single- and Differential Pressure Monitoring in Nuclear Power Plant Applications

3002000758 This report investigated a specific application of the

Bragg sensor for gauge and differential pressure sensing. Emphasis was placed on developing a sensor package with a similar form factor to existing industry

pressure transmitters.

05/2013

Technology Innovation: Fiber Bragg Gratings for Pressure Monitoring in Nuclear Power Plants

1025732

This report examines the use of optical fiber Bragg grating technology for pressure monitoring in nuclear power plants. Three stages of testing were completed to experimentally investigate the concept of a fiber Bragg grating pressure transducer. The first stage of testing was carried out using the concept pressure transducer test fixture. Observations made

07/2012



Page 6 of 6

during the first stage of testing provided motivation for an environmental chamber investigation to analyze temperature compensation calculations. The third stage of testing was a final evaluation of the concept pressure transducer. Experimental analysis suggests that the proposed fiber Bragg grating pressure transducer would have high repeatability in isothermal operating conditions.

Program on Technology: An Analysis of Fiber Bragg Grating--Technology for Applications in the Nuclear Power Industry

1020496 This report presents analysis and opinions about the possibilities and limitations of FBG sensors in the previously described applications. Specifically, for each area of opportunity, Section 2 provides the technical approach, anticipated implementation issues, a test plan, and commentary on the viability of the application. Utility and plant personnel responsible for communications and data-gathering systems will find this research helpful.

12/2009

Fiber Bragg Grating Sensors R&D for Nuclear Power Applications

1020394 This report provides background information on FBG sensors, summarizes the current status of R&D, reviews promising applications at NPPs, and presents recommendations for further research and testing.

11/2009



Page 1 of 5

REVIEW DRAFT 6/2016


*TRL: 1-4


*Research Focus Area: I&C for Beyond Design Basis & Severe Accidents




Target Start Date (mm/yyyy) Estimated start date of work: 8/2014



The March 2011 earthquake and tsunami damage to the Fukushima Daiichi plant in Japan resulted in the

plant losing its normal monitoring and control capabilities for an extended period of time. When there is

inadequate plant data and information available, there will be a lack of complete understanding of plant

state and severity during and after beyond design basis events (BDBEs) and severe accidents (SAs). This

will hinder proper responses to minimize:

Public and plant personnel health exposure and consequences

Plant and environmental damage

Public and plant costs

Since the accident, the results of coping analyses done by EPRI and reactor owners groups have not

been reviewed for potential instrumentation and control (I&C) and human factors (HF) impacts, and

there may be lessons learned from the events in Japan, as well as other SAs, about the required

durability and capabilities of post-severe accident I&C systems. The international community and

nuclear power industry are trying to improve methods in which utilities can respond to a beyond design

basis or severe accident, and as a result, research is needed to determine the required durability and

capabilities of post BDBE and SA I&C systems.


The objective of this research focus area is to identify I&C, HF and robotics gaps / needs that should be

addressed to measure plant data and conditions, to allow access to plant data and conditions where

needed, and to display the plant data and other information in a meaningful manner to prevent SAs or

to minimize the severity of SAs over the long term. For the gaps / needs identified, this research will



Page 2 of 5

help determine alternative instrument measurement, control methodologies and human-system

interfaces (HSIs) that utilities and vendors should consider when assessing the need for updated or new

post-severe accident monitoring and mitigation systems. This project will be coordinated with “The Way

Forward” initiative for post-Fukushima response. The work will identify the potential advantages of new

technologies and identify the technical challenges in deploying new solutions.


EPRI will work with other agencies to:

1) Review the I&C and HF needs required by existing and proposed coping guidelines and evaluate

alternative instrument measurement and control methodologies

2) Evaluate new and evolving instrument technology applicable to the needed parameters

(pressure, temperature, hydrogen concentrations, etc.) and severe accident environments

3) Identify the potential advantages of new technologies and identify the technical challenges in

deploying new solutions.

This focus area will have a technical advisory group that includes representatives from Industry, NRC,

INPO, DOE, and the Owners Groups.

Initiate a structured approach to identify I&C, HF and robotics lessons learned taking advantage of work

done by other organizations to produce:

Evaluated list of I&C, HF and robotics lessons learned

Identified potential for improvements to I&C, HF and robotics

Technology options including those from other industries

Proposed research to address gaps/needs (The first phase of this research will be based on a

collection of SAs in nuclear facilities, including power plants)

Explore modeling, simulating BDBEs & SAs (and allowing interactions with operators and other plant

staff). The goal is to be able to run simulations for a variety of BDBEs and combination of BDBEs (even

those thought to be extremely unlikely) to evaluate deficiencies in procedures, sensors, back-up

equipment, etc.


The adequacy or inadequacy of the existing I&C to cope with severe accidents will be determined, along

with high-value areas which could improve plant safety, and minimize 1) public and plant personnel

health exposure and consequences, 2) plant and environmental damage and 3) public and plant costs.

Tasks in this research focus area will be used to inform the requirements for new sensing capability

development, such as hydrogen sensors for direct-replacement and in-containment applications. They

will also focus on other systems and supporting information. In some cases, these development may

have beneficial applications during normal operation.



Page 3 of 5

Key Activities:


Quarterly Technical Advisory Group Conference Call:

Quarterly – Next Scheduled Date: 7/2016

Severe Accident Mobile Investigator Development: This project is designing a robotic drone that can maneuver within potentially uninhabitable areas, measure various parameters (e.g., temperature, pressure, radiation level, etc.) and wirelessly transmit data to an offsite computing location for analysis and display. The objective is to create an instrument that can assist during accident scenarios by providing real-time situational information to an offsite operator for assessment and decision making purposes. This can provide utilities with monitoring capabilities following accident scenarios when human and standard auxiliary monitoring systems are no longer available due to extreme environmental conditions and a loss of site power. The tool is being designed for enhanced monitoring and response planning purposes.

Phase 2 Development: 12/2016

Identification and Prioritization of Gaps / Needs Based on Severe Accidents Lessons Learned Study for I&C Equipment Applicability: Study, evaluate and document lessons learned and other information from Fukushima Daiichi and other nuclear facilities that have experienced severe accidents. Identify gap / needs in I&C and HF to reduce the likelihood or the severity of an SA based on the lessons learned. Prioritize the gaps / needs and determine if EPRI research is needed to address any of them.

12/2017


Deliverable Types

Beyond Design Basis Event & Severe Accident I&C Technical Advisory Group Quarterly Conference Calls:

Manage and participate in quarterly stakeholder conference call to discuss related items status and planning

Internal Design Report for EPRI Severe Accident Mobile Investigator:

EPRI internal technical report to discuss the research performed to date



Page 4 of 5

Lessons Learned and Potential Improvements for I&C and HF from Structured Study:

EPRI technical report



Severe Nuclear Accidents: Lessons Learned for Instrumentation, Control and Human Factors

3002005385 Severe Accidents Lessons Learned Study for I&C Equipment Applicability: Study, evaluate and document lessons learned and other information from Fukushima Daiichi and other nuclear facilities that have experienced severe accidents. Identify gap / needs in I&C and HF to reduce the likelihood or the severity of an SA based on the lessons learned. This report provides a methodology for assessing the usability of existing plant instruments during a severe accident. Applications to two pilot plants, one a BWR and one a PWR, indicated that this instrument assessment methodology is practical and useful. For the two pilot plants, existing plant instruments can provide most of the information that is needed during a severe accident. Alternative methods of obtaining information are also identified in the report.

12/2015

Severe Accident Management Guidance Technical Basis Report, Volume 1: Candidate High Level Actions & Their Effects

1025295 This report is organized into two volumes. Volume 1 defines the reactor coolant system (RCS), spent fuel pool (SFP), and containment damage conditions that could be relevant for severe accidents, identifies the CLHAs, and summarizes the effects that could result from each CHLA. Volume 2 is composed of appendices, each of which describes the physical behavior for one type of phenomenon relevant to severe accidents. These appendices also include the technical bases for calculation aids that can be used to estimate the core, RCS, and containment response if an action is taken. Although these calculations are generally not intended to provide detailed results, the results are sufficient to allow consideration of the relative benefits and possible undesired effects associated with each action for the conditions the operators are facing.

10/2012



Page 5 of 5

Assessment of Existing Plant Instrumentation for Severe Accident Management

TR-103412 This report provides a methodology for assessing the usability of existing plant instruments during a severe accident. Applications to two pilot plants, one a BWR and one a PWR, indicated that this instrument assessment methodology is practical and useful. For the two pilot plants, existing plant instruments can provide most of the information that is needed during a severe accident. Alternative methods of obtaining information are also identified in the report.

12/1993


Design and Use of New Technologies

Human Factors Engineering

Cyber Security

Digital Instrumentation & Control Implementation (New/Existing Plants)Eq

uipm

ent R

elia

bilit

y (E

R) A

PCAd

vanc

ed N

ucle

ar T

echn

olog

y (A

NT)

APC

Long

Ter

m O

pera

tion

(LTO

) APC

NEI

INPO

Util

ities

Failure / Hazard Analysis

Training on Digital Issues

Mods with Regulatory Review

Update Processes, Skill Sets, Organization

2016 2021 202220202017 2018 2019

Mods for Obsolescence and Reliability Improvement

Review/Endorse Industry Guidance

Guidance to Stabilize Regulatory Environment

Periodic Technical Discussions with EPRI under MOU

Resolve Licensing Review Issues, Interface w/ RegulatorsCyber Industry Licensing Basis

Operating Plants New Plants

Monitor Digital Processes and Training

Annual Industry Workshops on Digital I&C Issues and Lessons Learned

Legend

Key Milestone

ER Unfunded Work

ER Funded Work

ANT Funded Work

ANT Unfunded Work

Dig. I&C CBT Updates

Managing Dig. Failure/CCF Susceptibility Wkshps

7a - NUC_ER_03_R10 Digital IC Implementation 3Aug2016.vsd Aug 2016

Completed Milestone

Hazard Analysis Demonstrations

EPRI HFE Guides Complete

EPRI Hazard, CCF Guides Complete

EPRI Cyber Guides Complete

Outage Safety and Efficiency (with INL)

Interim Guide for Hybrid Control Room

Refine Hazard Guide

LTO Funded Work

LTO Unfunded Work

EMC - Wireless Tech Assess

Update CBTs in NANTEL

Optimize Cyber Sec. Assess.

Pilot Implementations Training Guides/CBT

Cyber Hazards Analysis Methods

Gov

ernm

ent

Cyber Security During Construction

Update CCF Guide

HFE CBTs for Operating Plants

Sys. Eng. Design Process Guide

Deterministic Cyber Controls

Tech for Outage Safety, Efficiency (with INL)

Obsolescence Management

Embedded Device for Verifiability of EDG Control (for NEET 2)

Human Perf. Improvement For NPP Field WorkersHFE Tech Transfer Tools

Workshops - Consensus Approach for Dig. Mods

Simulation/Virtualization for Design

Use Simulators to Evaluate I&C Hazards


NUC_ER_03_R10 Digital IC Implementation 3Aug2016 August 2016

DIGITAL INSTRUMENTATION & CONTROL IMPLEMENTATION (NEW/EXISTING PLANTS)

ISSUE STATEMENT

Operating nuclear plants are gradually transitioning much of their aging and obsolete instrumentation and control (I&C) equipment from analog to digital technology. However, plants have experienced significant unanticipated costs, delays and operating events associated with digital system implementations. As a result, the risks associated with I&C upgrades are often judged to be greater than the risks of continuing to operate with obsolete analog equipment. New nuclear plants will be ‘all digital;' they will use more extensive and highly integrated I&C systems than existing plants. While their digital issues are largely the same, the increased complexity will often require new or extended solutions, with corresponding cost and schedule risks. The industry needs updated methods and tools that address digital-specific technical issues and help engineers anticipate and mitigate potential vulnerabilities before putting the digital systems into operation in the plants.

DRIVERS

Much of the current analog equipment has aged to the point where replacement is inevitable, plants implementing new digital I&C systems are experiencing unexpected and costly problems, and new build I&C systems will use approaches not yet proven or licensed in nuclear plants.

Aging and Obsolete Equipment

In many cases existing analog equipment has become difficult or impossible to maintain. Suppliers have discontinued support, spare parts are no longer available, and expertise has been lost through attrition and retirement. License renewal and extended fuel cycles exacerbate this problem. While it is possible to extend the lives of some analog systems by using enhanced maintenance practices and reverse-engineered replacement parts, this approach becomes more costly and less effective over time. Also, it typically cannot provide key digital technology benefits, such as performance improvements and elimination of single point vulnerabilities.

Just as the aging analog systems are becoming less reliable, expectations for equipment reliability and plant availability are increasing. Analog I&C plants have many single point vulnerabilities that digital technology can eliminate, with corresponding reliability and safety benefits. Power uprates often introduce new conditions and performance requirements (e.g., accuracy, response time) that require digital technology. New builds face unprecedented expectations of operating excellence, even at initial startup.

Negative Experiences with Digital I&C Replacements

Digital upgrades at several plants have incurred significant unanticipated costs due to inadvertent plant trips, extended outages to correct start-up issues, project delays due to protracted regulatory reviews, and even project cancellations. Key factors are inexperience with digital technology, the need for updated methods and tools that address digital-specific technical issues, and a paradigm shift to foster awareness of the issues and adapt utility and vendor processes, organizations and skill sets accordingly.

New Plants will be “All Digital”

New plants will use highly integrated digital systems that push the technical and regulatory concerns beyond the experience of operating plants. Managing digital issues such as cyber security, human factors engineering (HFE), safety-to-non-safety communication, and hazard analysis will require improved analytical methods, guidance and training.

RESULTS IMPLEMENTATION

This project will develop improved methods and guidance that will enable nuclear utilities, their equipment suppliers and system integrators to cost-effectively implement and maintain digital I&C with reduced risk



of unanticipated costs and undesired behaviors. EPRI research will develop the technical bases and methods to improve plant processes for I&C modifications and address key issues, such as hazard analysis to find and mitigate vulnerabilities before installation, cyber security, and human factors engineering for digital control room interfaces. EPRI products will include technical reports, guidelines, and companion training materials to enable utilities to apply the research results and update staff on the latest issues and solutions. EPRI will also provide technical input to NRC Research to inform regulatory issues under the existing EPRI/NRC memorandum of understanding.

The EPRI digital I&C research results will play a key role in supporting the Delivering the Nuclear Promise initiative in the U.S., where owner/operators and industry oversight organizations will apply EPRI research results to help ensure that utility engineers maintain competence on digital issues, that utility processes are updated to address specific digital system concerns such as configuration management and common-cause failure, and that the processes are being applied appropriately.

In some cases, EPRI research results may be used to provide a technical basis or resolution of a regulatory concern. Example topics of this type include cyber security, electromagnetic compatibility (EMC), and assessing the likelihood of potential software common-cause failures introduced by digital upgrades in safety and non-safety applications.

EPRI research results will provide the basis for computer-based training (CBT) modules on digital issues that will be made available through normal EPRI channels, and for selected topics, through INPO's on-line training systems. Utilities will apply EPRI guidance and training materials to maintain proficiency in managing digital I&C from specification to design evaluation, testing, implementation, operation and maintenance. They will require suppliers, integrators and contractors to apply these materials on an as-needed basis. In some cases, operating plants may elect to wait for key issues to be resolved via new plant builds, and then apply the proven solutions to reduce schedule, cost, and regulatory risks.

PROJECT PLAN

EPRI will develop improved methods and guidance for addressing digital issues on a topic-by-topic basis and for enhancing design and engineering change processes, including newer approaches like systems engineering techniques. Technical advisory committees (TACs) comprised of knowledgeable utility and industry representatives will guide product development and act as reviewers and contributors to ensure that the products have appropriate scope, detail and practical utility for their intended users. Products will include detailed procedures, worked example problems, industry workshops and training materials. They will be updated on an as-needed basis as new information and operating experience become available and as new issues come to light. Key topic areas of upcoming research include:

Failure / Hazard Analysis, including Protection against Common-Cause Failure

It is highly desirable is to identify and mitigate potential digital vulnerabilities before the system is operating in the plant. Traditional hardware failure analysis methods are not well-suited for digital technology. Software does not wear out. It can be highly complex, and failures typically result from design errors and unanticipated system interactions. This project has researched existing and emerging approaches and developed guidance for applying selected methods in nuclear plants. It will continue the effort with plant demonstrations, development of tools to streamline steps that are tedious and labor intensive, and improved training and technology transfer methods that will help utilities come up to speed on new and improved hazard analysis methods.

Cyber Security

Nuclear power plants face evolving cyber security threats and regulatory requirements for digital devices, components, and systems. Implementing cyber security design and operational controls for new and existing instrumentation and control (I&C) systems requires cyber security experts, I&C engineers, and procurement organizations to work together with vendors to implement and maintain an effective cyber security posture. Improper or incomplete implementation of controls and methods can result in costly retrofits. This focus area is researching cyber security approaches and developing practical methods for nuclear plant applications in coordination with other EPRI sectors as part of a strategic imperative.

Human Factors / Advanced Operations via the Control Room



Human factors engineering (HFE) is important to maintaining safe, reliable and cost-effective operation of the plant. It is also a regulatory requirement. Human error continues to be a significant contributor to events that have occurred at operating plants, and appropriate application of HFE can help reduce the chances for error, increase human performance levels and reduce challenges to the plant. Products will include updated and expanded human factors guidance, including guidance on integrating HFE with other engineering processes, as well as training materials and improved decision-based interface designs.

Design and use of new technologies, such as field programmable gate arrays (FPGA) in high integrity applications

Digital technologies are rapidly evolving; this project is investigating promising new devices and approaches for nuclear plant applications. As an example, field-programmable gate arrays (FPGAs) are gaining increased attention worldwide for use in nuclear power plant I&C systems, particularly for safety applications. The use of FPGAs might reduce complexity and the associated burden of gaining regulatory approval and provide better protection against obsolescence compared to conventional microprocessor-based systems. The project is developing guidelines, case studies and design criteria for application of new digital technologies in nuclear plant I&C systems, addressing both safety and non-safety uses. A current demonstration project is developing a low complexity FPGA application to investigate reliability and verification concepts that take advantage of application segmentation and deliberate design simplicity.

RISKS

Successful completion of the research described here will help utilities strengthen programs to update I&C systems. I&C modernization competes for limited utility resources with other issues that may need more immediate attention to maintain plant safety and operability. If utility budgets do not protect long term strategic I&C plans, the transition to digital will be correspondingly delayed, possibly to the end of plant life. Also, if plants experience too many costly problems with digital implementations, they will avoid additional upgrades. The regulatory environment may represent a significant risk if progress is not made in finding practical, cost-effective resolutions to key issues. New builds will likely lead operating plants on some key issues; if their efforts falter, there will be a corresponding adverse impact on operating plant I&C modernization.

RECORD OF REVISION

This record of revision will provide a high level summary of the major changes in the document and identify the Roadmap Owner.

Revision Description of Change

0 Original Issue: August 2011 Roadmap Owner: Ray Torok

1 Revision Issued: December 2011 Roadmap Owner: Ray Torok Changes: Changed title to include new plants, updated implementation group activities and I&C architecture project in flowchart.

2 Revision Issued: August 2012 Roadmap Owner: Ray Torok Changes: Added milestone completion indicators, updated planned project endpoints where needed within flowchart.

3 Revision: December 2012 Roadmap Owner: Ray Torok Change: Updated selected schedules and milestones in flowchart.



4 Revision: August 2013 Roadmap Owner: Ray Torok Changes: Revised write-up and flowchart to focus on selected high-visibility topics rather than high-level discussion of all I&C implementation topics

5 Revision: December 2013 Roadmap Owner: Ray Torok Changes: Revised write-up and flowchart to add detail and updates in regard to progress in projects addressing CBT modules, likelihood of digital CCF, hazard analysis, and use of FPGAs in I&C replacements.

6 Revision: August 2014 Roadmap Owner: Ray Torok Changes: Revised write-up and flowchart to add detail and updates in regard to progress in projects addressing cyber security, human factors engineering, electromagnetic compatibility, and a proposed new project to look at application of systems engineering methods to digital I&C design.

7 Revision: December 2014 Roadmap Owner: Ray Torok Changes: Updated description of cyber activities. Modified flow chart to reflect latest plan, including new cyber security and systems engineering projects.

8 Revision: August 2015 Roadmap Owner: Ray Torok Changes: Schedules and funding indicators updated on the flow chart.

9 Revision: December 2015 Roadmap Owner: Ray Torok Changes: Schedules and funding indicators updated on the flow chart.

10 Revision: August 2016 Roadmap Owner: Ray Torok Changes: Schedules and funding indicators updated on the flow chart. Added reference to Delivering the Nuclear Promise initiative.


NAME TITLE COMPANY

Abraham,Jamal Principal Nuclear Engineer PSEG Nuclear, LLCAli,Abuzafar Section Manager Nuclear Engineering Ontario Power Generation, Inc.Amundsen,James Supervisor/BETA Laboratory FirstEnergy Nuclear Operating Co.Austin,Robert Program Manager, Sr Electric Power Research Institute (EPRI)Barnes,Daniel Senior Staff Engineer Exelon Generation, LLCBiggs,Curtis Reliability Engineer Luminant Holding Company LLCBradley,Edward Electrical I&C Specialist Tennessee Valley Authority (TVA)Branam,Tim Principal Engineer Wolf Creek Nuclear Operating Corp.Bryson,Michael PDM Engineer Southern California Edison Co.Burgess,Nick Principal Engineer Duke Energy Corp.Carlson,Lucas Xcel Energy Services, Inc.Connelly,John Exelon Generation, LLCCurtis,David Rolls Royce Marine PowerFrancia,Lorenzo Tech. & Engineering Mgr., Nuclear UNESA - A. E. Industria ElectricaFrewin,Wesley Chief Digital Engineer NextEra Energy, Inc.Gallardo,Israel I & C Engineering Manager Comision Federal de Electricidad (CFE)Haggard,Ralph Senior Engineer South Carolina Electric & Gas Co.Hanna,Tim Nuclear Engineer III Dominion Resources, Inc.Hashimoto,Atsushi General Manager, TEPSCO Tokyo Electric Power Company Holdings, Inc.Hawkins,Hylan Instrument & Control Supervisor Nebraska Public Power DistrictHerb,Ray Digital Principal Engineer Southern Nuclear Operating Co.Hernandez,John Senior Engineer Arizona Public Service Co.Higgins,William New Brunswick Power Corp.Hodge,Walter Senior Engineer American Electric Power, Inc.Jarrett,Ron Engineering Specialist Tennessee Valley Authority (TVA)Kim,Won Manager Korea Plant Service & Engineering Co., Ltd.Klemptner,Alexander Principal Engineer DTE Electric CompanyKomori,Takeyuki The Kansai Electric Power Co., Inc.Kuwata,Kenichiro Manager of Nuclear Power Mgmt Sect The Chugoku Electric Power Co., Inc.Lee,KwangDae Principal Engineer Korea Hydro & Nuclear Power Co., Ltd.Lim,Hee-Taek Senior Researcher Korea Hydro & Nuclear Power Co., Ltd.Mertens,Philip Rolls Royce Marine PowerMorilhat,Patrick EDF R&D, Program Manager Electricite de France S.A.Mustafa,Mohamed Senior Staff Engineer Entergy Services, Inc.Nakashima,Junichi Nuc Power Maint. Mgmt. Group Kyushu Electric Power Co., Inc.Newman,Ethan ICE Engineer Pacific Gas & Electric Co.Nishioka,Tomomi Nuclear Power Facilities Managment The Chugoku Electric Power Co., Inc.

COMMITTEE ROSTERINSTRUMENTATION AND CONTROLS INTEGRATION COMMITTEE


NAME TITLE COMPANY

COMMITTEE ROSTERINSTRUMENTATION AND CONTROLS INTEGRATION COMMITTEE

Ntuli,Velaphi Manager Eskom Holdings SOC LimitedOgata,Masanori Kyushu Electric Power Co., Inc.Okita,Akihiro Assistant Manager Shikoku Electric Power Co., Inc.Olson,Randall Fleet Systems Engineering Manager Southern Nuclear Operating Co.Park,Jinsoo Engineer Korea Plant Service & Engineering Co., Ltd.Pawley,Andrew Senior Program Manager Control Tennessee Valley Authority (TVA)Pena,Norberto Liason Engineer Nucleoelectrica Argentina S.A.Ruether,Joe License Renewal Electrical Supv. Xcel Energy Services, Inc.Salomão Jr.,Goncalves I&C Engineer Eletrobras Termonuclear S.A.Schut,James I&C Engineer Bruce Power Limited PartnershipShibamoto,Hiroshi Deputy Manager Chubu Electric Power Co., Inc.Shu,Ma Vice-Chief Engineer CGNPC China Nuclear Power Operations Co., Ltd.Sterba,Christopher Supervisor, Digital Design Omaha Public Power DistrictTooley,Paul Grp. Head, Ctrl & Inst. Safety Sys. EDF Energy Nuclear Generation, Ltd.


NAME TITLE COMPANY

Albrigo, Thomas Arizona Public Service Co.Ali, Abuzafar Section Manager Nuclear Engineering Ontario Power Generation, Inc.Amaral, Jose Support Engineering Superintendent Eletrobras Termonuclear S.A.Amundsen, James Supervisor/BETA Laboratory FirstEnergy Nuclear Operating Co.Austin, Robert Program Manager, Sr Electric Power Research Institute (EPRI)Bradley, Edward Electrical I&C Specialist Tennessee Valley Authority (TVA)Brewer, Arnold I&C Engineer Exelon CorporationBridges, Martin Technical Leader, Sr Electric Power Research Institute (EPRI)Bryson, Michael PDM Engineer Southern California Edison Co.Burgess, Nick Principal Engineer Duke Energy Corp.Carlson, Lucas Xcel Energy Services, Inc.Colthorpe, Russell Electric Power Research Institute (EPRI)Couch, James TVA Lead Instrument Engineer Tennessee Valley Authority (TVA)Craven, Thomas System Manager American Electric Power Service Corp.Cretinon, Laurent Electricite de France S.A.Curtis, David Rolls Royce Marine PowerDuff, Gary I&C ,Specialist, CMO Exelon CorporationEaton, Colin Rolls Royce Marine PowerEidson, Michael Senior Specialist Southern Nuclear Operating Co.Frank, Eric Principal Engineer DTE Electric CompanyFrewin, Wesley Chief Digital Engineer NextEra Energy, Inc.Furtado, Preeti Sr. Engineer, I&C Exelon Generation, LLCGobert, Alain Resident Researcher EDF Liaison Electricite de France S.A.Greene, Jeffrey Electric Power Research Institute (EPRI)Griffin, Jason System Engineer NextEra Energy Point Beach, LLCHeishman, James Program Manager, Sr Electric Power Research Institute (EPRI)Higgins, William New Brunswick Power Corp.Husted, Terry Engineering Specialist Exelon CorporationJarrett, Ron Engineering Specialist Tennessee Valley Authority (TVA)Johnson, Wayne Technical Leader, Principal Electric Power Research Institute (EPRI)Junkin, Scott Senior Engineer Southern Nuclear Operating Co.Kerns, Matthew Assistant Department Manager - Equi INPO Institute of Nuclear Power OperationsKim, Won Manager Korea Plant Service & Engineering Co., Ltd.Klemptner, Alexander Principal Engineer DTE Electric CompanyKostela, Ted Sr. Technical Engineer Ontario Power Generation, Inc.Kuball, Silke EDF Energy Nuclear Generation, Ltd.Lambdin, Thomas Electrical I&C System Engineer Arizona Public Service Co.

COMMITTEE ROSTERINSTRUMENTATION & CONTROL RELIABILITY ADVISORY GROUP


NAME TITLE COMPANY

COMMITTEE ROSTERINSTRUMENTATION & CONTROL RELIABILITY ADVISORY GROUP

Lee, Jaeki Senior Manager Korea Hydro & Nuclear Power Co., Ltd.Lim, Hee-Taek Senior Researcher Korea Hydro & Nuclear Power Co., Ltd.Lopez, Stephen Technical Leader/Project Manager Electric Power Research Institute (EPRI)Mertens, Philip Rolls Royce Marine PowerMustafa, Mohamed Senior Staff Engineer Entergy Services, Inc.Newman, Ethan ICE Engineer Pacific Gas & Electric Co.Park, Jinsoo Engineer Korea Plant Service & Engineering Co., Ltd.Pawley, Andrew I&C/ Electrical Senior Program Mana Tennessee Valley Authority (TVA)Rouse, Deborah Senior Administrative Assistant Electric Power Research Institute (EPRI)Rusaw, Richard Technical Leader, Sr Electric Power Research Institute (EPRI)Sanders, Stephen Supervisor - I&C Support Luminant Holding Company LLCSawyer, DiAngelo Engineer I&C Exelon Generation, LLCSchimmoller, Brian Manager, Research Portfolio Electric Power Research Institute (EPRI)Schut, James I&C Engineer Bruce Power Limited PartnershipTannenbaum, Marc Technical Leader, Principal Electric Power Research Institute (EPRI)Tate, Kevin Electrical/I&C Engineer Southern Nuclear Operating Co.Tortora, John Sr. Evaluator INPO Institute of Nuclear Power OperationsWiegand, Christopher Program Manager Electric Power Research Institute (EPRI)Wilder, Don UT Battelle, LLCWilliams, Jonathan Sr. Engineer Exelon Generation, LLCYe, Songhae Staff Korea Hydro & Nuclear Power Co., Ltd.


NAME TITLE COMPANY

Albrigo, Thomas Arizona Public Service Co.Amundsen, James Supervisor/BETA Laboratory FirstEnergy Nuclear Operating Co.Archambo, Neil Principal Engineer Duke Energy Corp.Austin, Robert Program Manager, Sr Electric Power Research Institute (EPRI)Barbour, John I&C System Engineer Ameren MissouriBarnes, Daniel Senior Staff Engineer Exelon Generation, LLCBarrios Eufrasio, Fabian Engineer Comision Federal de Electricidad (CFE)Biggs, Curtis Reliability Engineer Luminant Holding Company LLCBlackwell, Kristina Engineer - Design Engineering & Ana Luminant Holding Company LLCBradley, Edward Electrical I&C Specialist Tennessee Valley Authority (TVA)Burgess, Nick Principal Engineer Duke Energy Corp.Carver, Chris Luminant Holding Company LLCChan, Rudolph Maintenance Superintendent PSEG Power, LLCChenkovich, Jeremy Design Engineer Dominion GenerationColburn, Daniel Nuclear Technical Specialist Dominion GenerationConnelly, John Exelon Generation, LLCCraven, Thomas System Manager American Electric Power Service Corp.Deluca, Bill Supv., Computer Systems Talen Energy CorporationFerrer, Ygnacio Comision Federal de Electricidad (CFE)Frewin, Wesley Chief Digital Engineer NextEra Energy, Inc.Furtado, Preeti Sr. Engineer, I&C Exelon Generation, LLCGibson Jr., Matt Technical Leader, Principal Electric Power Research Institute (EPRI)Gigliotti, Rich Dominion Nuclear ConnecticutGoldstein, Ravid Senior Engineer Eskom Holdings SOC LimitedGrady, Zachary Design Engineer PSEG Power, LLCGriffin, Jason System Engineer NextEra Energy Point Beach, LLCHardin, Larry Corporate Operations Manager Emirates Nuclear Energy CorporationHerb, Ray Digital Principal Engineer Southern Nuclear Operating Co.Hernandez, John Senior Engineer Arizona Public Service Co.Herron, John Engineering Supervisor - Design Exelon CorporationHodge, Walter Senior Engineer American Electric Power, Inc.Hunton, Paul Fleet Digital I&C Program Manager Duke Energy Corp.Jarrett, Ron Engineering Specialist Tennessee Valley Authority (TVA)Kinsman, Douglas Associate Evaluator INPO Institute of Nuclear Power OperationsKlemptner, Alexander Principal Engineer DTE Electric CompanyLambdin, Thomas Electrical I&C System Engineer Arizona Public Service Co.Lansing, John Engineer I Dominion Virginia PowerMarcos, Leonardo Maintenance Staff Eletrobras Termonuclear S.A.Mertens, Philip Rolls Royce Marine Power

COMMITTEE ROSTERDIGITAL I&C IMPLEMENTATION GROUP


NAME TITLE COMPANY

COMMITTEE ROSTERDIGITAL I&C IMPLEMENTATION GROUP

Miller, Shonique Engineer I Entergy Operations, Inc.Moliterno, Gabriel Engineer Nucleoelectrica Argentina S.A.Mundt, Chris General Supervisor I&C Maintenance Xcel Energy Services, Inc.Mustafa, Mohamed Senior Staff Engineer Entergy Services, Inc.Nguyen, Thuy Senior Research Engineer Electricite de France S.A.Nowicki, William Senior Evaluator INPO Institute of Nuclear Power OperationsOlson, Randall Fleet Systems Engineering Manager Southern Nuclear Operating Co.Rebori Carretero, Daniel Engineer - Nuclear DTE EnergyRice, Brandon Electrical Engineer Xcel Energy Services, Inc.Salomao, Goncalves Eletrobras Termonuclear S.A.Santiago, Carlos Comision Federal de Electricidad (CFE)Sawyer, DiAngelo Engineer I&C Exelon Generation, LLCStavely, Jim Salem Nuclear Fuels Manager PSEG Power, LLCSteele, Fred Principal Engineer Energy NorthwestSylvester, Nickolas Senior Engineer Arizona Public Service Co.


2016-2017 INSTRUMENTATION AND CONTROL MEETINGS

August 29 – September 1, 2016 EPRI Nuclear Power Council Week Meetings New Orleans, LA September 20-22, 2016 2016 Joint EPRI Cyber Security Technical Advisory Committee and INPO IT Cyber Program Managers Meeting Charlotte, NC October 3-7, 2016 9th International Workshop on the Application of Field Programmable Gate Arrays in Nuclear Power Plants Lyon, France November 15 – 17, 2016 Nuclear Plant Digitalization Conference Charlotte, NC http://www.nuclearenergyinsider.com/nuclear-plant-digitalization/ January 30 – February 2, 2017 EPRI Nuclear Power Council Week Meetings Charlotte, NC June 11 – 15, 2017 10th International Topical Meeting on Nuclear Plant Instrumentation, Control and Human Machine Interface Technology (Embedded in American Nuclear Society Annual Meeting) San Francisco, CA http://www.ans.org/meetings/m_148 August 28 – 31, 2017 EPRI Nuclear Power Council Week Meetings Hollywood, FL


http://www.nuclearenergyinsider.com/nuclear-plant-digitalization/

http://www.ans.org/meetings/m_148

CONTACTS

PROGRAM MANAGER

Robert Austin, PE, PMP

Senior Program Manager

704.595.2529, [email protected]

PROJECT MANAGERS

Matt Gibson, PE, CISSP

Principal Technical Leader

704.595.2951

[email protected]

Stephen Lopez

Technical Leader/Project Manager

704.595.2975

[email protected]

Rick Rusaw, PE

Senior Technical Leader

704.595.2690

[email protected]

Michael Thow

Senior Technical Leader

704-595-2967

[email protected]

Ray Torok, PE

Technical Exeecutive

650.855.2310

[email protected]


mailto:[email protected]





Date post:	26-Jun-2020
Category:	Documents
Upload:	others
View:	1 times
Download:	0 times

nuclear power advisory meeting - Amazon S3...from China General Nuclear Power Corporation are...

Documents