The application of redundancy-related basic safety principles to the 1400 MWE reactor core standby cooling system

International Nuclear Information System (INIS)

Bertrand, R.

1990-01-01

This memorandum shall provide the background for the work of the European Community Commission which is to analyze safety principles relating to redundancy. The redundancy-related basic safety principles applied in French nuclear power plants are the following: . the single-failure criterion, . provisions additional to application of the single-failure criterion. These are mainly provisions made at the design stage to minimize risks associated with common cause failures or the risks of human error which can lead to such failures: - protection against hazards of internal and external origin, - the geographical or physical separation of equipment, - the independence of electrical power supplies and distribution systems, - the additional resources and associated operating procedures making it possible to accommodate total loss of the safety systems. The scope also includes the operating rules which ensure availability of redundant safety-related equipment. The provisions relating to the single-failure criterion are detailed in Basic Safety Rule 1.3.A appended. The application of these principles proposed by the operating organization and accepted by the safety authorities for the design and operation of the standby core cooling system (System RIS) is explained

Interactive effects of relay and circuit breaker aging in a safety-related system

International Nuclear Information System (INIS)

Toman, G.J.; Bacanskas, V.P.; Shook, T.A.; Ladlow, C.C.; Gunther, W.

1987-01-01

This paper provides an overview of the results of a program to evaluate the aging of circuit breakers and relays and the effects of that aging on the function of a safety system used in nuclear power plants. The program was performed under the Nuclear Plant Aging Research (NPAR) Program of the US Nuclear Regulatory Commission under subcontract to Brookhaven National Laboratory. There were two primary aspects to the program. In the first, the aging and failure modes of relays and circuit breakers were determined by evaluating the construction, design, and materials and the failure data related to nuclear power plant service. In the second, the interactions between a safety system and its relays and circuit breakers were evaluated to determine the effects of relay and circuit breaker aging on the function of the safety system. The aging of relays and circuit breakers was assessed through evaluation of failure data bases, discussions with utility personnel, and evaluation of equipment operating and maintenance manuals. The interaction study was based on an analysis of the safety injection system of a pressurized water reactor. The effects of stresses from the system were analyzed for the tendency to cause deterioration of the relays and circuit breakers in the system. Then the effect of the deterioration of relays and circuit breakers on the functional capability of the safety system was evaluated

Computerized reactor protection and safety related systems in nuclear power plants. Proceedings of a specialists' meeting. Working material

International Nuclear Information System (INIS)

1998-01-01

Though the majority of existing control and protection systems in nuclear power plants use old analogue technology and design philosophy, the use of computers in safety and safety related systems is becoming a current practice. The Specialists Meeting on ''Computerized Reactor Protection and Safety Related Systems in Nuclear Power Plants'' was organized by IAEA (jointly by the Division of Nuclear Power and the Fuel Cycle and the Division of Nuclear Installation Safety), in co-operation with Paks Nuclear Power Plant in Hungary and was held from 27-29 October 1997 in Budapest, Hungary. The meeting focused on computerized safety systems under refurbishment, software reliability issues, licensing experiences and experiences in implemented computerized safety and safety related systems. Within a meeting programme a technical visit to Paks NPP was organized. The objective of the meeting was to provide an international forum for the presentation and discussion on R and D, in-plant experiences in I and C important to safety, backfits and arguments for and reservations against the digital safety systems. The meeting was attended by 70 participants from 16 countries representing NPPs and utility organizations, design/engineering, research and development, and regulatory organizations. In the course of 4 sessions 25 technical presentations were made. The present volume contains the papers presented by national delegates and the conclusions drawn from the final general discussion

Evolution of System Safety at NASA as Related to Defense-in-Depth

Science.gov (United States)

Dezfuli, Homayoon

2015-01-01

Presentation given at the Defense-in-Depth Inter-Agency Workshop on August 26, 2015 in Rockville, MD by Homayoon Dezfuli. The presentation addresses the evolution of system safety at NASA as related to Defense-in-Depth.

Sophisticated Calculation of the 1oo4-architecture for Safety-related Systems Conforming to IEC61508

International Nuclear Information System (INIS)

Hayek, A; Al Bokhaiti, M; Schwarz, M H; Boercsoek, J

2012-01-01

With the publication and enforcement of the standard IEC 61508 of safety related systems, recent system architectures have been presented and evaluated. Among a number of techniques and measures to the evaluation of safety integrity level (SIL) for safety-related systems, several measures such as reliability block diagrams and Markov models are used to analyze the probability of failure on demand (PFD) and mean time to failure (MTTF) which conform to IEC 61508. The current paper deals with the quantitative analysis of the novel 1oo4-architecture (one out of four) presented in recent work. Therefore sophisticated calculations for the required parameters are introduced. The provided 1oo4-architecture represents an advanced safety architecture based on on-chip redundancy, which is 3-failure safe. This means that at least one of the four channels have to work correctly in order to trigger the safety function.

Dedication for Safety-Related Fuses used in Class-1E Power System

International Nuclear Information System (INIS)

Hong, Younghee

2014-01-01

The safety-related fuses used in class-1E power system provide overcurrent protection for electrical system and isolate the class 1E circuit from a fault or overload condition. These days, the number of nuclear grade suppliers has been reduced. Accordingly, commercial grade, instead of safety-related, fuses are procured and used in the utilities through the dedication process. Therefore, this paper introduces the commercial grade fuse dedication process/engineering and how to assure the quality requirements with this process and engineering. The fuses used in class-1E power system are to protect overcurrent and to isolate fault. Therefore the fuse for acceptance in order to improve the quality and reliability for commercial grade fuses shall be dedicated. The fuse resistance value may be useful as an indicator of acceptance. The current carrying capacity test can change the fuse performance properties. Therefore these critical characteristics are needed for additional review and analysis with fuse manufactures

Review of domestic and international experience on optimization of tests planning for safety related systems at NPP

International Nuclear Information System (INIS)

Skalozubov, V.I.; Komarov, Yu.A.; Kolykanov, V.N.; Kochneva, V.Yu.; Gablaya, T.V.

2009-01-01

There are represented the basic requirements of normative and operating documents on test periodicity of safety related systems at NPPs, sets out the theoretical methods of test optimization of the technical systems, and analyses foreign engineering methods for changing test periodicity of the NPP systems. Based on this review analyses further tasks are formulated for improvement of the methodical base of optimization of tests planning for safety related systems

Optimal replacement policy for safety-related multi-component multi-state systems

International Nuclear Information System (INIS)

Xu Ming; Chen Tao; Yang Xianhui

2012-01-01

This paper investigates replacement scheduling for non-repairable safety-related systems (SRS) with multiple components and states. The aim is to determine the cost-minimizing time for replacing SRS while meeting the required safety. Traditionally, such scheduling decisions are made without considering the interaction between the SRS and the production system under protection, the interaction being essential to formulate the expected cost to be minimized. In this paper, the SRS is represented by a non-homogeneous continuous time Markov model, and its state distribution is evaluated with the aid of the universal generating function. Moreover, a structure function of SRS with recursive property is developed to evaluate the state distribution efficiently. These methods form the basis to derive an explicit expression of the expected system cost per unit time, and to determine the optimal time to replace the SRS. The proposed methodology is demonstrated through an illustrative example.

Usage of Commercial Grade Programmable Digital Systems in Safety Related Applications

International Nuclear Information System (INIS)

Mandic, D.

2006-01-01

This paper explains methods and conditions, which if completely and correctly fulfilled, enable an operating NPP (Nuclear Power Plant) licensed and operating in accordance with the US codes and US regulatory requirements to use a commercial grade programmable digital device (PLC - Programmable Digital Controller, digital controller, digital computer or process computer) in a safety related application in a NPP. In mid 80's, when an intensive construction cycle of the new NPPs in the U.S.A. was completed, many equipment manufacturers either disappeared from the market or they abandoned their product lines that were designed and manufactured under 10 CFR Part 50 Appendix B quality assurance program. The quality assurance as defined by 10 CFR Part 50 Appendix B comprises all those planned and systematic actions necessary to provide adequate confidence that a Structure, System or Component (SSC) will perform satisfactorily in service . The operating NPPs faced the problem related to the availability of qualified equipment, components and spare parts. The US NRC (Nuclear Regulatory Commission) recognized that problem timely (Oct. 1978 revision of 10CFR21) and required a commercial grade item to be dedicated before it could be used as a basic component. A special process named Dedication of CGI - Commercial Grade Items if conducted properly, provides reasonable assurance that a commercial grade item to be used as a basic component will perform its intended safety related function and, in this respect, is deemed equivalent to an item designed and manufactured under 10 CFR Part 50 Appendix B. After that, the Dedication of CGI has been widely used mostly for relatively simple mechanical, electrical, and IandC components and spare parts. In order to provide guidance to the dedication process, EPRI has issued two documents (EPRI NP-5652 and Supplemental Guidance for EPRI NP-5652). All nuclear power plants, which comply with the US nuclear regulatory requirements, hindered as

System Design and the Safety Basis

International Nuclear Information System (INIS)

Ellingson, Darrel

2008-01-01

The objective of this paper is to present the Bechtel Jacobs Company, LLC (BJC) Lessons Learned for system design as it relates to safety basis documentation. BJC has had to reconcile incomplete or outdated system description information with current facility safety basis for a number of situations in recent months. This paper has relevance in multiple topical areas including documented safety analysis, decontamination and decommissioning (D and D), safety basis (SB) implementation, safety and design integration, potential inadequacy of the safety analysis (PISA), technical safety requirements (TSR), and unreviewed safety questions. BJC learned that nuclear safety compliance relies on adequate and well documented system design information. A number of PIS As and TSR violations occurred due to inadequate or erroneous system design information. As a corrective action, BJC assessed the occurrences caused by systems design-safety basis interface problems. Safety systems reviewed included the Molten Salt Reactor Experiment (MSRE) Fluorination System, K-1065 fire alarm system, and the K-25 Radiation Criticality Accident Alarm System. The conclusion was that an inadequate knowledge of system design could result in continuous non-compliance issues relating to nuclear safety. This was especially true with older facilities that lacked current as-built drawings coupled with the loss of 'historical knowledge' as personnel retired or moved on in their careers. Walkdown of systems and the updating of drawings are imperative for nuclear safety compliance. System design integration with safety basis has relevance in the Department of Energy (DOE) complex. This paper presents the BJC Lessons Learned in this area. It will be of benefit to DOE contractors that manage and operate an aging population of nuclear facilities

IAEA Safety Standards on Management Systems and Safety Culture

International Nuclear Information System (INIS)

Persson, Kerstin Dahlgren

2007-01-01

The IAEA has developed a new set of Safety Standard for applying an integrated Management System for facilities and activities. The objective of the new Safety Standards is to define requirements and provide guidance for establishing, implementing, assessing and continually improving a Management System that integrates safety, health, environmental, security, quality and economic related elements to ensure that safety is properly taken into account in all the activities of an organization. With an integrated approach to management system it is also necessary to include the aspect of culture, where the organizational culture and safety culture is seen as crucial elements of the successful implementation of this management system and the attainment of all the goals and particularly the safety goals of the organization. The IAEA has developed a set of service aimed at assisting it's Member States in establishing. Implementing, assessing and continually improving an integrated management system. (author)

Advances in safety related maintenance

International Nuclear Information System (INIS)

2000-03-01

The maintenance of systems, structures and components in nuclear power plants (NPPs) plays an important role in assuring their safe and reliable operation. Worldwide, NPP maintenance managers are seeking to reduce overall maintenance costs while maintaining or improving the levels of safety and reliability. Thus, the issue of NPP maintenance is one of the most challenging aspects of nuclear power generation. There is a direct relation between safety and maintenance. While maintenance alone (apart from modifications) will not make a plant safer than its original design, deficient maintenance may result in either an increased number of transients and challenges to safety systems or reduced reliability and availability of safety systems. The confidence that NPP structures, systems and components will function as designed is ultimately based on programmes which monitor both their reliability and availability to perform their intended safety function. Because of this, approaches to monitor the effectiveness of maintenance are also necessary. An effective maintenance programme ensures that there is a balance between the improvement in component reliability to be achieved and the loss of component function due to maintenance downtime. This implies that the safety level of an NPP should not be adversely affected by maintenance performed during operation. The nuclear industry widely acknowledges the importance of maintenance in NPP safety and operation and therefore devotes great efforts to develop techniques, methods and tools to aid in maintenance planning, follow-up and optimization, and in assuring the effectiveness of maintenance

Advancements in the design of safety-related systems and components of the MARS nuclear plant

International Nuclear Information System (INIS)

Caira, M.; Caruso, G.; Naviglio, A.; Sorabella, L.; Farello, C.E.

1992-01-01

In the paper, the advancements in the design of safety-related systems and components of the MARS nuclear plant, equipped with a 600 MW th PWR, are described. These advancements are due to the special safety features of this plant, which relies completely on inherent and passive safety. In particular, the new steps of the design of the innovative, completely passive, and with an unlimited autonomy Emergency core Cooling System are described, together with the characteristics of the last version of the steam generator, developed in a new design involving disconnecting components, for a fast erection and an easy maintenance. (author)

Development of integrated D/B system for the safety-related structures in nuclear power plant

International Nuclear Information System (INIS)

Cho, M. S.; Song, Y. C.; Lee, J. S.; Choi, W. S.

2002-01-01

The integrated D/B system is developed for digitalizing the history of the safety-related structures of nuclear power plant. It have 5 database which are consist of Generals, Structural and Design, Materials, Construction, Aging and repair information D/B. For efficient operation of the system, we are to set up the outline of the system, find out data field for target structures, and develop utilities. Utilities will be the aging and repair data management program, the close examination management program, the data search engine with various options which help users to find the information quickly, and the data management program restoring, updating and exchanging input data. Development of the integrated D/B system of the safety-related structures will contribute to management of the structures of nuclear power plant with advanced technology

Safety related terms for advanced nuclear plants

International Nuclear Information System (INIS)

1995-12-01

The terms considered in this document are in widespread current use without a universal consensus as to their meaning. Other safety related terms are already defined in national or international codes and standards as well as in IAEA's Nuclear Safety Standards Series. Most of the terms in those codes and standards have been defined and used for regulatory purposes, generally for application to present reactor designs. There is no intention to duplicate the description of such regulatory terms here, but only to clarify the terms used for advanced nuclear plants. The following terms are described in this paper: Inherent safety characteristics, passive component, active component, passive systems, active system, fail-safe, grace period, foolproof, fault-/error-tolerant, simplified safety system, transparent safety

Safety related terms for advanced nuclear plants

International Nuclear Information System (INIS)

1991-09-01

The terms considered in this document are in widespread current use without a universal consensus as to their meaning. Other safety related terms are already defined in national or international codes and standards as well as in IAEA's Nuclear Safety Standards Series. Most of the terms in those codes and standards have been defined and used for regulatory purposes, generally for application to present reactor designs. There is no intention to duplicate the description of such regulatory terms here, but only to clarify the terms used for advanced nuclear plants. The following terms are described in this paper: Inherent safety characteristics, passive component, active component, passive systems, active system, fail-safe, grace period, foolproof, fault-/error-tolerant, simplified safety system, transparent safety

Priority ranking of safety-related systems for structural assessment at Savannah River Site

International Nuclear Information System (INIS)

Kao, G.C.; Daugherty, W.L.; Barnes, D.M.

1993-01-01

In order to extend the service life of safety related structures and systems in a logical manner, a Structural Enhancement Program was initiated to evaluate the structural integrity of eight systems, namely: cooling water system, emergency cooling system, moderator recovery system, supplementary safety system, water removal system, service raw water system, service clarified water system, and river water system. Since the level of importance of each system to reactor operations varies from one system to another, the scope of structural integrity evaluation for each system should be prioritized accordingly. This paper presents the assessment of system priority for structural evaluation based on a ranking methodology and specifies the level of structural evaluation consistent with the established priority. The effort was undertaken by a five-member panel representing four major disciplines, including: structures, reactor engineering/operations, risk management, and materials. The above systems were divided into a total of thirty-five subsystems. These subsystems were then ranked with six attributes, namely: safety classification, degradation mechanisms, difficulty of replacement, failure mode, radiation dose to workers, and consequence of failure. Each attribute was assigned a set of consequences or events with corresponding weighting scores. The results of the ranking process yielded two groups of subsystems, categorized as Priority I and II subsystems. The level of structural assessment was then formulated accordingly. The prioritized approach will allow more efficient allocation of resources, so that the Structural Enhancement Program can be implemented in a cost-effective and efficient manner

Analyzing Software Requirements Errors in Safety-Critical, Embedded Systems

Science.gov (United States)

Lutz, Robyn R.

1993-01-01

This paper analyzes the root causes of safety-related software errors in safety-critical, embedded systems. The results show that software errors identified as potentially hazardous to the system tend to be produced by different error mechanisms than non- safety-related software errors. Safety-related software errors are shown to arise most commonly from (1) discrepancies between the documented requirements specifications and the requirements needed for correct functioning of the system and (2) misunderstandings of the software's interface with the rest of the system. The paper uses these results to identify methods by which requirements errors can be prevented. The goal is to reduce safety-related software errors and to enhance the safety of complex, embedded systems.

Safety Information System Guide

International Nuclear Information System (INIS)

Bullock, M.G.

1977-03-01

This Guide provides guidelines for the design and evaluation of a working safety information system. For the relatively few safety professionals who have already adopted computer-based programs, this Guide may aid them in the evaluation of their present system. To those who intend to develop an information system, it will, hopefully, inspire new thinking and encourage steps towards systems safety management. For the line manager who is working where the action is, this Guide may provide insight on the importance of accident facts as a tool for moving ideas up the communication ladder where they will be heard and acted upon; where what he has to say will influence beneficial changes among those who plan and control his operations. In the design of a safety information system, it is suggested that the safety manager make friends with a computer expert or someone on the management team who has some feeling for, and understanding of, the art of information storage and retrieval as a new and better means for communication

Results of an aging-related failure survey of light water safety systems and components

International Nuclear Information System (INIS)

Meale, B.M.; Satterwhite, D.G.; MacDonald, P.E.

1988-01-01

The collection and evaluation of operating experience data are necessary in determining the effects of aging on the safety of operating nuclear plants. This paper presents the final results of a two-year research effort evaluating aging impacts on components in light water reactor systems. This research was performed as a part of the Nuclear Plant Aging Research program, sponsored by the US Nuclear Regulatory Commission. Two unique types of data analyses were performed. In the first, an aging-survey study, aging-related failure data for fifteen light water reactor systems were obtained from the Nuclear Plant Reliability Data System (NPRDS). These included safety, support, and power conversion systems. A computerized sort of these records classified each record into one of five generic categories, based on the utility's choice of the failure's NPRDS cause category. Systems and components within the systems that were most affected by aging were identified. In the second analysis, information on aging-related reported causes of failures was evaluated for component failures reported to NPRDS for auxiliary feedwater, high pressure injection, service water, and Class 1E electrical power distribution systems. 3 refs., 13 figs., 4 tabs

Safety Evaluation Approach with Security Controls for Safety I and C Systems on Nuclear Power Plants

International Nuclear Information System (INIS)

Kim, D. H.; Jeong, S. Y.; Kim, Y. M.; Park, H. S.; Lee, M. S.; Kim, T. H.

2016-01-01

This paper addresses concepts of safety and security and relations between them for assessing effects of security features in safety systems. Also, evaluation approach for avoiding confliction with safety requirements and cyber security features which may be adopted in safety-related digital I and C system will be described. In this paper, safety-security life cycle model based confliction avoidance method was proposed to evaluate the effects when the cyber security control features are implemented in the safety I and C system. Also, safety effect evaluation results using the proposed evaluation method were described. In case of technical security controls, many of them are expected to conflict with safety requirements, otherwise operational and managerial controls are not relatively. Safety measures and cyber security measures for nuclear power plants should be implemented not to conflict with one another. Where safety function and security features are both required within the systems, and also where security features are implemented within safety systems, they should be justified

Safety Evaluation Approach with Security Controls for Safety I and C Systems on Nuclear Power Plants

Energy Technology Data Exchange (ETDEWEB)

Kim, D. H.; Jeong, S. Y.; Kim, Y. M.; Park, H. S. [KINS, Daejeon (Korea, Republic of); Lee, M. S.; Kim, T. H. [Formal Works Inc., Seoul (Korea, Republic of)

2016-05-15

This paper addresses concepts of safety and security and relations between them for assessing effects of security features in safety systems. Also, evaluation approach for avoiding confliction with safety requirements and cyber security features which may be adopted in safety-related digital I and C system will be described. In this paper, safety-security life cycle model based confliction avoidance method was proposed to evaluate the effects when the cyber security control features are implemented in the safety I and C system. Also, safety effect evaluation results using the proposed evaluation method were described. In case of technical security controls, many of them are expected to conflict with safety requirements, otherwise operational and managerial controls are not relatively. Safety measures and cyber security measures for nuclear power plants should be implemented not to conflict with one another. Where safety function and security features are both required within the systems, and also where security features are implemented within safety systems, they should be justified.

Requirements and analysis of electromagnetic compatibility of safety-related instrumentation and control system in nuclear power plants

International Nuclear Information System (INIS)

Liu Sujuan

2002-01-01

The state-of-the-art instrumentation and control system and the influence of their application to the electromagnetic compatibility is analyzed. Based on the present situation of nuclear safety in China and relevant experiences from other countries, the author tries to probe into the requirements and test methods about how safety-related instrument and control system to accommodate electromagnetic interference, radio-frequency interference and power surges in the environments of nuclear power plant so as to develop Chinese safety standards

Analysis of Aviation Safety Reporting System Incident Data Associated with the Technical Challenges of the System-Wide Safety and Assurance Technologies Project

Science.gov (United States)

Withrow, Colleen A.; Reveley, Mary S.

2015-01-01

The Aviation Safety Program (AvSP) System-Wide Safety and Assurance Technologies (SSAT) Project asked the AvSP Systems and Portfolio Analysis Team to identify SSAT-related trends. SSAT had four technical challenges: advance safety assurance to enable deployment of NextGen systems; automated discovery of precursors to aviation safety incidents; increasing safety of human-automation interaction by incorporating human performance, and prognostic algorithm design for safety assurance. This report reviews incident data from the NASA Aviation Safety Reporting System (ASRS) for system-component-failure- or-malfunction- (SCFM-) related and human-factor-related incidents for commercial or cargo air carriers (Part 121), commuter airlines (Part 135), and general aviation (Part 91). The data was analyzed by Federal Aviation Regulations (FAR) part, phase of flight, SCFM category, human factor category, and a variety of anomalies and results. There were 38 894 SCFM-related incidents and 83 478 human-factorrelated incidents analyzed between January 1993 and April 2011.

Software for computer based systems important to safety in nuclear power plants. Safety guide

International Nuclear Information System (INIS)

2004-01-01

Computer based systems are of increasing importance to safety in nuclear power plants as their use in both new and older plants is rapidly increasing. They are used both in safety related applications, such as some functions of the process control and monitoring systems, as well as in safety critical applications, such as reactor protection or actuation of safety features. The dependability of computer based systems important to safety is therefore of prime interest and should be ensured. With current technology, it is possible in principle to develop computer based instrumentation and control systems for systems important to safety that have the potential for improving the level of safety and reliability with sufficient dependability. However, their dependability can be predicted and demonstrated only if a systematic, fully documented and reviewable engineering process is followed. Although a number of national and international standards dealing with quality assurance for computer based systems important to safety have been or are being prepared, internationally agreed criteria for demonstrating the safety of such systems are not generally available. It is recognized that there may be other ways of providing the necessary safety demonstration than those recommended here. The basic requirements for the design of safety systems for nuclear power plants are provided in the Requirements for Design issued in the IAEA Safety Standards Series.The IAEA has issued a Technical Report to assist Member States in ensuring that computer based systems important to safety in nuclear power plants are safe and properly licensed. The report provides information on current software engineering practices and, together with relevant standards, forms a technical basis for this Safety Guide. The objective of this Safety Guide is to provide guidance on the collection of evidence and preparation of documentation to be used in the safety demonstration for the software for computer based

Software for computer based systems important to safety in nuclear power plants. Safety guide

International Nuclear Information System (INIS)

2005-01-01

Computer based systems are of increasing importance to safety in nuclear power plants as their use in both new and older plants is rapidly increasing. They are used both in safety related applications, such as some functions of the process control and monitoring systems, as well as in safety critical applications, such as reactor protection or actuation of safety features. The dependability of computer based systems important to safety is therefore of prime interest and should be ensured. With current technology, it is possible in principle to develop computer based instrumentation and control systems for systems important to safety that have the potential for improving the level of safety and reliability with sufficient dependability. However, their dependability can be predicted and demonstrated only if a systematic, fully documented and reviewable engineering process is followed. Although a number of national and international standards dealing with quality assurance for computer based systems important to safety have been or are being prepared, internationally agreed criteria for demonstrating the safety of such systems are not generally available. It is recognized that there may be other ways of providing the necessary safety demonstration than those recommended here. The basic requirements for the design of safety systems for nuclear power plants are provided in the Requirements for Design issued in the IAEA Safety Standards Series.The IAEA has issued a Technical Report to assist Member States in ensuring that computer based systems important to safety in nuclear power plants are safe and properly licensed. The report provides information on current software engineering practices and, together with relevant standards, forms a technical basis for this Safety Guide. The objective of this Safety Guide is to provide guidance on the collection of evidence and preparation of documentation to be used in the safety demonstration for the software for computer based

Software for computer based systems important to safety in nuclear power plants. Safety guide

International Nuclear Information System (INIS)

2000-01-01

Computer based systems are of increasing importance to safety in nuclear power plants as their use in both new and older plants is rapidly increasing. They are used both in safety related applications, such as some functions of the process control and monitoring systems, as well as in safety critical applications, such as reactor protection or actuation of safety features. The dependability of computer based systems important to safety is therefore of prime interest and should be ensured. With current technology, it is possible in principle to develop computer based instrumentation and control systems for systems important to safety that have the potential for improving the level of safety and reliability with sufficient dependability. However, their dependability can be predicted and demonstrated only if a systematic, fully documented and reviewable engineering process is followed. Although a number of national and international standards dealing with quality assurance for computer based systems important to safety have been or are being prepared, internationally agreed criteria for demonstrating the safety of such systems are not generally available. It is recognized that there may be other ways of providing the necessary safety demonstration than those recommended here. The basic requirements for the design of safety systems for nuclear power plants are provided in the Requirements for Design issued in the IAEA Safety Standards Series.The IAEA has issued a Technical Report to assist Member States in ensuring that computer based systems important to safety in nuclear power plants are safe and properly licensed. The report provides information on current software engineering practices and, together with relevant standards, forms a technical basis for this Safety Guide. The objective of this Safety Guide is to provide guidance on the collection of evidence and preparation of documentation to be used in the safety demonstration for the software for computer based

Evaluation of Generic Issue 57: Effects of fire protection system actuation on safety-related equipment

International Nuclear Information System (INIS)

Lambright, J.; Bohn, M.; Lynch, J.; Ross, S.; Brosseau, D.

1992-12-01

Nuclear power plants have experienced actuations of fire protection systems (FPSs) under conditions for which these systems were not intended to actuate and also have experienced advertent actuations with the presence of a fire. These actuations have often damaged safety-related equipment. A review of the impact of past occurrences of both types of such events and their impact on plant safety systems, an analysis of the risk impacts of such events on nuclear power plant safety, and a cost-benefit analysis of potential corrective measures have been performed. Thirteen different scenarios leading to actuation of fire protection systems due to a variety of causes were identified. These scenarios ranged from inadvertent actuation caused by human error to hardware failure, and include seismic root causes and seismic/fire interactions. A quantification of these thirteen root causes, where applicable, was performed on generically applicable scenarios. This document, Volume 4, contains appendices E and F of this report

Study of system safety evaluation on LTO of national project. NISA safety research project on system safety of nuclear power plants

International Nuclear Information System (INIS)

Takizawa, Masayuki; Sekimura, Naoto; Miyano, Hiroshi; Aoyama, Katsunobu

2012-01-01

Japanese safety regulatory body, that is, Nuclear and Industrial Safety Agency (NISA) started a 5-year national safety research project as 'the first stage' from 2006 FY to 2010 FY whose objective is 'Improve the technical information basis in order to utilize knowledge as well as information related to ageing management and maintenance of NPPs. Fukushima disaster happened in March 2011, and the priority of research needs for ageing management dramatically changed in Japan. The second-stage national project started in October 2011 with the concept of 'system safety' of NNPs where not only ageing management on degradation phenomena of important components but also safety management on total plant systems are paid attention to. The second-stage project is so called 'Japanese Ageing Management Program for System Safety (JAMPSS)'. (author)

Intermediate probabilistic safety assessment approach for safety critical digital systems

International Nuclear Information System (INIS)

Taeyong, Sung; Hyun Gook, Kang

2001-01-01

Even though the conventional probabilistic safety assessment methods are immature for applying to microprocessor-based digital systems, practical needs force to apply it. In the Korea, UCN 5 and 6 units are being constructed and Korean Next Generation Reactor is being designed using the digital instrumentation and control equipment for the safety related functions. Korean regulatory body requires probabilistic safety assessment. This paper analyzes the difficulties on the assessment of digital systems and suggests an intermediate framework for evaluating their safety using fault tree models. The framework deals with several important characteristics of digital systems including software modules and fault-tolerant features. We expect that the analysis result will provide valuable design feedback. (authors)

Safety critical systems handbook a straightforward guide to functional safety : IEC 61508 (2010 edition) and related standards

CERN Document Server

Smith, David J

2010-01-01

Electrical, electronic and programmable electronic systems increasingly carry out safety functions to guard workers and the public against injury or death and the environment against pollution. The international functional safety standard IEC 61508 was revised in 2010, and this is the first comprehensive guide available to the revised standard. As functional safety is applicable to many industries, this book will have a wide readership beyond the chemical and process sector, including oil and gas, power generation, nuclear, aircraft, and automotive industries, plus project, instrumentation, design, and control engineers. * The only comprehensive guide to IEC 61508, updated to cover the 2010 amendments, that will ensure engineers are compliant with the latest process safety systems design and operation standards* Helps readers understand the process required to apply safety critical systems standards* Real-world approach helps users to interpret the standard, with case studies and best practice design examples...

Priority ranking of safety-related systems for structural enhancement assessment at Savannah River Site

International Nuclear Information System (INIS)

Kao, G.C.; Daugherty, W.L.; Barnes, D.M.

1992-09-01

In order to extend the service life of safety related structures and systems in a logical manner, a Structural Enhancement Program was initiated to evaluate the structural integrity of eight (8) systems, namely: Cooling Water System, Emergency Cooling System, Moderator Recovery System supplementary Safety System, Water Removal System, Service Raw Water System, Service Clarified Water System, and River Water System. Since the level of importance of each system to reactor operations varies from one system to another, the scope of structural integrity evaluation for each system should be prioritized accordingly. This paper presents the assessment of system priority for structural evaluation based on a ranking methodology and specifies the level of structural evaluation consistent with the established priority. The effort was undertaken by a five-member panel representing four (4) major disciplines, including. structures, reactor engineering/operations, risk management and materials. The above systems were divided into a total of thirty-five (35) subsystem. These subsystems were then ranked with six (6) attributes, namely: Safety Classification, Degradation Mechanisms, Difficulty of Replacement, Failure Mode, Radiation Dose to Workers and Consequence of Failure. Each attribute was assigned a set of consequences or events with corresponding weighting scores. The results of the ranking process yielded two groups of subsystems, categorized as Priority I and II subsystems. The level of structural assessment was then formulated accordingly. The prioritized approach will allow more efficient allocation of resources, so that the Structural Enhancement Program can be implemented in a cost-effective and efficient manner

Environmental tests of a digital safety channel: An investigation of stress-related vulnerabilities of computer-based safety system

International Nuclear Information System (INIS)

Korsah, K.; Wilson, T.L.; Wood, R.; Tanaka, T.

1997-01-01

This article presents the results of environmental stress tests performed on an experimental digital safety channel (EDSC) assembled at the Oak Ridge National Laboratory as part of the Qualification of Advanced Instrumentation and Controls Systems Research program, which was sponsored by the US Nuclear Regulatory Commission. The program is expected to provide recommendations for environmental qualification of digital safety systems. The purpose of the study was to investigate potential vulnerabilities of distributed computer systems used in safety applications when subjected to environmental stressors. The EDSC assembled for the tests employs technologies and digital subsystems representative of those proposed for use in advanced light-water reactors or as retrofits in existing plants. Subsystems include computers, electrical and optical serial communication links, fiber-optic network links, analog-to-digital and digital-to-analog converters, and multiplexers. The EDSC was subjected to selected stressors that are a potential risk to digital equipment in a mild environment. The selected stressors were electromagnetic and radiofrequency interferences (EMI-RFI), temperature, humidity, and smoke exposure. The stressors were applied at levels of intensity considerably higher than the safety channel is likely to experience in a normal nuclear power plant environment. Ranges of stress were selected at a sufficiently high level to induce errors so that failure modes that are characteristic of the technologies employed could be identified. On the basis of the incidence of functional errors observed during testing, EMI-RFI, smoke exposure, and high temperature coupled with high relative humidity, in that order, were found to have the greatest impact of the stressors investigated. The most prevalent stressor-induced upsets, as well as the most severe, were found to occur during the EMI-RFI tests

Experience on environmental qualification of safety-related components for Darlington Nuclear Generating Station

International Nuclear Information System (INIS)

Yu, A.S.; Kukreti, B.M.

1987-01-01

The proliferation of Nuclear Power Plant safety concerns has lead to increasing attention over the Environmental Qualification (EQ) of Nuclear Power Plant Safety-Related Components to provide the assurance that the safety related equipment will meet their intended functions during normal operation and postulated accident conditions. The environmental qualification of these components is also a Licensing requirement for Darlington Nuclear Generating Station. This paper provides an overview of EQ and the experience of a pilot project, in the qualification of the Main Moderator System safety-related functions for the Darlington Nuclear Generating Station currently under construction. It addresses the various phases of qualification from the identification of the EQ Safety-Related Components List, definition of location specific service conditions (normal, adbnormal and accident), safety-related functions, Environmental Qualification Assessments and finally, an EQ system summary report for the Main Moderator System. The results of the pilot project are discussed and the methodology reviewed. The paper concludes that the EQ Program developed for Darlington Nuclear Generating Station, as applied to the qualification of the Main Moderator System, contained all the elements necessary in the qualification of safety-related equipment. The approach taken in the qualification of the Moderator safety-related equipment proves to provide a sound framework for the qualification of other safety-related components in the station

Considerations on nuclear reactor passive safety systems

International Nuclear Information System (INIS)

2016-01-01

After having indicated some passive safety systems present in electronuclear reactors (control bars, safety injection system accumulators, reactor cooling after stoppage, hydrogen recombination systems), this report recalls the main characteristics of passive safety systems, and discusses the main issues associated with the assessment of new passive systems (notably to face a sustained loss of electric supply systems or of cold water source) and research axis to be developed in this respect. More precisely, the report comments the classification of safety passive systems as it is proposed by the IAEA, outlines and comments specific aspects of these systems regarding their operation and performance. The next part discusses the safety approach, the control of performance of safety passive systems, issues related to their reliability, and the expected contribution of R and D (for example: understanding of physical phenomena which have an influence of these systems, capacities of simulation of these phenomena, needs of experimentations to validate simulation codes)

Analysis of Aviation Safety Reporting System Incident Data Associated With the Technical Challenges of the Vehicle Systems Safety Technology Project

Science.gov (United States)

Withrow, Colleen A.; Reveley, Mary S.

2014-01-01

This analysis was conducted to support the Vehicle Systems Safety Technology (VSST) Project of the Aviation Safety Program (AVsP) milestone VSST4.2.1.01, "Identification of VSST-Related Trends." In particular, this is a review of incident data from the NASA Aviation Safety Reporting System (ASRS). The following three VSST-related technical challenges (TCs) were the focus of the incidents searched in the ASRS database: (1) Vechicle health assurance, (2) Effective crew-system interactions and decisions in all conditions; and (3) Aircraft loss of control prevention, mitigation, and recovery.

Role of systems safety in maintaining affordable safety in the 1980's

International Nuclear Information System (INIS)

Hollister, H.; Trauth, C.A. Jr.

1979-01-01

Historically, the Department of Energy and its predecessors have used and supported the development of systems safety programs, practices, and principles, finding them by and large adequate, effective, and managerially efficient. Today, attempts are bing made to resolve increasingly complex environmental, safety, and health problems by turning to increasingly complex and detailed regulation as the primary governmental answer. It is increasingly doubtful that such an approach will provide management of these issues and problems that is either effective or efficient. Challenge is issued to those in systems safety to develop and apply systems safety principles and practices more broadly to total operational systems and not just to hardware and to environmental and health protection and not just to safety, so that the total universe of environmental, safety, and health can be managed effectively and efficiently with encouragement of innovation and creativity, using a relatively brief and concise, but adequate, regulatory base

Software FMEA analysis for safety-related application software

International Nuclear Information System (INIS)

Park, Gee-Yong; Kim, Dong Hoon; Lee, Dong Young

2014-01-01

Highlights: • We develop a modified FMEA analysis suited for applying to software architecture. • A template for failure modes on a specific software language is established. • A detailed-level software FMEA analysis on nuclear safety software is presented. - Abstract: A method of a software safety analysis is described in this paper for safety-related application software. The target software system is a software code installed at an Automatic Test and Interface Processor (ATIP) in a digital reactor protection system (DRPS). For the ATIP software safety analysis, at first, an overall safety or hazard analysis is performed over the software architecture and modules, and then a detailed safety analysis based on the software FMEA (Failure Modes and Effect Analysis) method is applied to the ATIP program. For an efficient analysis, the software FMEA analysis is carried out based on the so-called failure-mode template extracted from the function blocks used in the function block diagram (FBD) for the ATIP software. The software safety analysis by the software FMEA analysis, being applied to the ATIP software code, which has been integrated and passed through a very rigorous system test procedure, is proven to be able to provide very valuable results (i.e., software defects) that could not be identified during various system tests

Evaluation of systems interactions in nuclear power plants: Technical findings related to Unresolved Safety Issue A-17

International Nuclear Information System (INIS)

Thatcher, D.

1989-05-01

This report presents a summary of the activities related to Unresolved Safety Issue (USI)A-17, ''Systems Interactions in Nuclear Power Plants,'' and also includes the NRC staff's conclusions based on those activities. The staff's technical findings provide the framework for the final resolution of this unresolved safety issue. The final resolution will be published later as NUREG-1229. 52 refs., 4 tabs

Definitions of engineered safety features and related features for nuclear power plants

International Nuclear Information System (INIS)

1986-01-01

In light water moderated, light water cooled nuclear power plants, definitions are given of engineered safety features which are designed to suppress or prevent dispersion of radioactive materials due to damage etc. of fuel at the times of power plant failures, and of related features which are designed to actuate or operate the engineered safety features. Contents are the following: scope of engineered safety features and of related features; classification of engineered safety features (direct systems and indirect systems) and of related features (auxiliaries, emergency power supply, and protective means). (Mori, K.)

Software Quality Assurance for Nuclear Safety Systems

International Nuclear Information System (INIS)

Sparkman, D R; Lagdon, R

2004-01-01

The US Department of Energy has undertaken an initiative to improve the quality of software used to design and operate their nuclear facilities across the United States. One aspect of this initiative is to revise or create new directives and guides associated with quality practices for the safety software in its nuclear facilities. Safety software includes the safety structures, systems, and components software and firmware, support software and design and analysis software used to ensure the safety of the facility. DOE nuclear facilities are unique when compared to commercial nuclear or other industrial activities in terms of the types and quantities of hazards that must be controlled to protect workers, public and the environment. Because of these differences, DOE must develop an approach to software quality assurance that ensures appropriate risk mitigation by developing a framework of requirements that accomplishes the following goals: (sm b ullet) Ensures the software processes developed to address nuclear safety in design, operation, construction and maintenance of its facilities are safe (sm b ullet) Considers the larger system that uses the software and its impacts (sm b ullet) Ensures that the software failures do not create unsafe conditions Software designers for nuclear systems and processes must reduce risks in software applications by incorporating processes that recognize, detect, and mitigate software failure in safety related systems. It must also ensure that fail safe modes and component testing are incorporated into software design. For nuclear facilities, the consideration of risk is not necessarily sufficient to ensure safety. Systematic evaluation, independent verification and system safety analysis must be considered for software design, implementation, and operation. The software industry primarily uses risk analysis to determine the appropriate level of rigor applied to software practices. This risk-based approach distinguishes safety

Safety assessment for Generation IV nuclear systems

International Nuclear Information System (INIS)

Leahy, T.J.

2012-01-01

The Generation IV International Forum (GIF) Risk and Safety Working Group (RSWG) was created to develop an effective approach for the safety of Generation IV advanced nuclear energy systems. Recent RSWG work has focused on the definition of an integrated safety assessment methodology (ISAM) for evaluating the safety of Generation IV systems. ISAM is an integrated 'tool-kit' consisting of 5 analytical techniques that are available and matched to appropriate stages of Generation IV system concept development: 1) qualitative safety features review - QSR, 2) phenomena identification and ranking table - PIRT, 3) objective provision tree - OPT, 4) deterministic and phenomenological analyses - DPA, and 5) probabilistic safety analysis - PSA. The integrated methodology is intended to yield safety-related insights that help actively drive the evolving design throughout the technology development cycle, potentially resulting in enhanced safety, reduced costs, and shortened development time

Guide on a national system for collecting, assessing and disseminating information on safety-related events in nuclear power plants

International Nuclear Information System (INIS)

1983-02-01

There is a wide spectrum of safety significance in the events that can occur during nuclear power plant operations. It is important that lessons be learned from safety-related events (hereinafter referred to as unusual events) so as to improve the safety of nuclear power plants. Hence formal procedures should be established for this purpose. The purpose of this document is to provide guidance to Member States for establishing a system (hereinafter referred to as a national system) for collecting, storing, retrieving, assessing and disseminating information on unusual events in nuclear power plants. The guidance given is based on experience gained in the use of existing national and international systems. This guide covers a national system that is part of a programme to improve nuclear power plant safety using experience gained from operating plants both within and outside the country. Implementing the recommendations in this guide would render any national system compatible with other national systems and facilitate the participation in the IAEA System for Reporting Unusual Events with Safety Significance (hereinafter referred to as the IAEA Incident Reporting System, IAEA-IRS) for more widespread dissemination of lessons learned from nuclear power plant operation

System safety education focused on flight safety

Science.gov (United States)

Holt, E.

1971-01-01

The measures necessary for achieving higher levels of system safety are analyzed with an eye toward maintaining the combat capability of the Air Force. Several education courses were provided for personnel involved in safety management. Data include: (1) Flight Safety Officer Course, (2) Advanced Safety Program Management, (3) Fundamentals of System Safety, and (4) Quantitative Methods of Safety Analysis.

Two viewpoints for software failures and their relation in probabilistic safety assessment of digital instrumentation and control systems

International Nuclear Information System (INIS)

Kim, Man Cheol

2015-01-01

As the use of digital systems in nuclear power plants increases, the reliability of the software becomes one of the important issues in probabilistic safety assessment. In this paper, two viewpoints for a software failure during the operation of a digital system or a statistical software test are identified, and the relation between them is provided. In conventional software reliability analysis, a failure is mainly viewed with respect to the system operation. A new viewpoint with respect to the system input is suggested. The failure probability density functions for the two viewpoints are defined, and the relation between the two failure probability density functions is derived. Each failure probability density function can be derived from the other failure probability density function by applying the derived relation between the two failure probability density functions. The usefulness of the derived relation is demonstrated by applying it to the failure data obtained from the software testing of a real system. The two viewpoints and their relation, as identified in this paper, are expected to help us extend our understanding of the reliability of safety-critical software. (author)

Technical basis for evaluating electromagnetic and radio-frequency interference in safety-related I ampersand C systems

International Nuclear Information System (INIS)

Ewing, P.D.; Korsah, K.

1994-04-01

This report discusses the development of the technical basis for the control of upsets and malfunctions in safety-related instrumentation and control (I ampersand C) systems caused by electromagnetic and radio-frequency interference (EMI/RFI) and power surges. The research was performed at the Oak Ridge National Laboratory (ORNL) and was sponsored by the USNRC Office of Nuclear Regulatory Research (RES). The motivation for research stems from the safety-related issues that need to be addressed with the application of advanced I ampersand C systems to nuclear power plants. Development of the technical basis centered around establishing good engineering practices to ensure that sufficient levels of electromagnetic compatibility (EMC) are maintained between the nuclear power plant's electronic and electromechanical systems known to be the source(s) of EMI/RFI and power surges. First, good EMC design and installation practices need to be established to control the impact of interference sources on nearby circuits and systems. These EMC good practices include circuit layouts, terminations, filtering, grounding, bonding, shielding, and adequate physical separation. Second, an EMI/RFI test and evaluation program needs to be established to outline the tests to be performed, the associated test methods to be followed, and carefully formulated acceptance criteria based on the intended environment to ensure that the circuit or system under test meets the recommended guidelines. Third, a program needs to be developed to perform confirmatory tests and evaluate the surge withstand capability (SWC) and of I ampersand C equipment connected to or installed in the vicinity of power circuits within the nuclear power plant. By following these three steps, the design and operability of safety-related I ampersand C systems against EMI/RFI and power surges can be evaluated, acceptance criteria can be developed, and appropriate regulatory guidance can be provided

Safety status system for operating room devices.

Science.gov (United States)

Guédon, Annetje C P; Wauben, Linda S G L; Overvelde, Marlies; Blok, Joleen H; van der Elst, Maarten; Dankelman, Jenny; van den Dobbelsteen, John J

2014-01-01

Since the increase of the number of technological aids in the operating room (OR), equipment-related incidents have come to be a common kind of adverse events. This underlines the importance of adequate equipment management to improve the safety in the OR. A system was developed to monitor the safety status (periodic maintenance and registered malfunctions) of OR devices and to facilitate the notification of malfunctions. The objective was to assess whether the system is suitable for use in an busy OR setting and to analyse its effect on the notification of malfunctions. The system checks automatically the safety status of OR devices through constant communication with the technical facility management system, informs the OR staff real-time and facilitates notification of malfunctions. The system was tested for a pilot period of six months in four ORs of a Dutch teaching hospital and 17 users were interviewed on the usability of the system. The users provided positive feedback on the usability. For 86.6% of total time, the localisation of OR devices was accurate. 62 malfunctions of OR devices were reported, an increase of 12 notifications compared to the previous year. The safety status system was suitable for an OR complex, both from a usability and technical point of view, and an increase of reported malfunctions was observed. The system eases monitoring the safety status of equipment and is a promising tool to improve the safety related to OR devices.

The Evolution of System Safety at NASA

Science.gov (United States)

Dezfuli, Homayoon; Everett, Chris; Groen, Frank

2014-01-01

The NASA system safety framework is in the process of change, motivated by the desire to promote an objectives-driven approach to system safety that explicitly focuses system safety efforts on system-level safety performance, and serves to unify, in a purposeful manner, safety-related activities that otherwise might be done in a way that results in gaps, redundancies, or unnecessary work. An objectives-driven approach to system safety affords more flexibility to determine, on a system-specific basis, the means by which adequate safety is achieved and verified. Such flexibility and efficiency is becoming increasingly important in the face of evolving engineering modalities and acquisition models, where, for example, NASA will increasingly rely on commercial providers for transportation services to low-earth orbit. A key element of this objectives-driven approach is the use of the risk-informed safety case (RISC): a structured argument, supported by a body of evidence, that provides a compelling, comprehensible and valid case that a system is or will be adequately safe for a given application in a given environment. The RISC addresses each of the objectives defined for the system, providing a rational basis for making informed risk acceptance decisions at relevant decision points in the system life cycle.

An analysis of electronic health record-related patient safety concerns

Science.gov (United States)

Meeks, Derek W; Smith, Michael W; Taylor, Lesley; Sittig, Dean F; Scott, Jean M; Singh, Hardeep

2014-01-01

Objective A recent Institute of Medicine report called for attention to safety issues related to electronic health records (EHRs). We analyzed EHR-related safety concerns reported within a large, integrated healthcare system. Methods The Informatics Patient Safety Office of the Veterans Health Administration (VA) maintains a non-punitive, voluntary reporting system to collect and investigate EHR-related safety concerns (ie, adverse events, potential events, and near misses). We analyzed completed investigations using an eight-dimension sociotechnical conceptual model that accounted for both technical and non-technical dimensions of safety. Using the framework analysis approach to qualitative data, we identified emergent and recurring safety concerns common to multiple reports. Results We extracted 100 consecutive, unique, closed investigations between August 2009 and May 2013 from 344 reported incidents. Seventy-four involved unsafe technology and 25 involved unsafe use of technology. A majority (70%) involved two or more model dimensions. Most often, non-technical dimensions such as workflow, policies, and personnel interacted in a complex fashion with technical dimensions such as software/hardware, content, and user interface to produce safety concerns. Most (94%) safety concerns related to either unmet data-display needs in the EHR (ie, displayed information available to the end user failed to reduce uncertainty or led to increased potential for patient harm), software upgrades or modifications, data transmission between components of the EHR, or ‘hidden dependencies’ within the EHR. Discussion EHR-related safety concerns involving both unsafe technology and unsafe use of technology persist long after ‘go-live’ and despite the sophisticated EHR infrastructure represented in our data source. Currently, few healthcare institutions have reporting and analysis capabilities similar to the VA. Conclusions Because EHR-related safety concerns have complex

Inventory of Safety-related Codes and Standards for Energy Storage Systems with some Experiences related to Approval and Acceptance

Energy Technology Data Exchange (ETDEWEB)

Conover, David R.

2014-09-11

The purpose of this document is to identify laws, rules, model codes, codes, standards, regulations, specifications (CSR) related to safety that could apply to stationary energy storage systems (ESS) and experiences to date securing approval of ESS in relation to CSR. This information is intended to assist in securing approval of ESS under current CSR and to identification of new CRS or revisions to existing CRS and necessary supporting research and documentation that can foster the deployment of safe ESS.

Environmental qualification - walkdowns: The documentation of configuration information for safety related components, equipment and systems

International Nuclear Information System (INIS)

Melmer, J.; Waters, M.

1995-01-01

Environmental Qualification walkdowns are conducted to collect field data to verify/validate/document configurations of safety related equipment and systems. This paper describes the process for conducting walkdowns and the justification for using an electronic format. The following are described: a) Background; b) Preparing, executing and processing walkdowns; c) Hardware/software; d) Impact of a paperless system on walkdown execution, maintenance and work planning; e) Other applications for the technology

Current safety issues related to research reactor operation

International Nuclear Information System (INIS)

Alcala-Ruiz, F.

2000-01-01

The Agency has included activities on research reactor safety in its Programme and Budget (P and B) since its inception in 1957. Since then, these activities have traditionally been oriented to fulfil the Agency's functions and obligations. At the end of the decade of the eighties, the Agency's Research Reactor Safety Programme (RRSP) consisted of a limited number of tasks related to the preparation of safety related publications and the conduct of safety missions to research reactor facilities. It was at the beginning of the nineties when the RRSP was upgraded and expanded as a subprogramme of the Agency's P and B. This subprogramme continued including activities related to the above subjects and started addressing an increasing number of issues related to the current situation of research reactors (in operation and shut down) around the world such as reactor ageing, modifications and decommissioning. The present paper discusses some of the above issues as recognised by various external review or advisory groups (e.g., Peer Review Groups under the Agency's Performance Programme Appraisal System (PPAS) or the standing International Nuclear Safety Advisory Group (INSAG)) and the impact of their recommendations on the preparation and implementation of the part of the Agency's P and B relating to the above subject. (author)

Screening of external hazards for NPP with bank type reactor. Modeling of safety related systems and equipment for RBMK. Probabilistic assessment of NPP safety on aircraft impact. Progress report

International Nuclear Information System (INIS)

Kostarev, V.

1999-01-01

This progress report was produced within the frame of IAEA research project on screening the hazards for NPP with bank type reactor. It covers the following tasks; development of the model for the primary loop system of RBMK; developing the models for safety related equipment of RBMK; developing of models for safety related models of EGP-6 type reactor (Bilibinskaya Nuclear Co-generated heat and Power Plant); and probabilistic assessment of NPP safety on aircraft impact

NASA System Safety Handbook. Volume 1; System Safety Framework and Concepts for Implementation

Science.gov (United States)

Dezfuli, Homayoon; Benjamin, Allan; Everett, Christopher; Smith, Curtis; Stamatelatos, Michael; Youngblood, Robert

2011-01-01

basis but to consider measures of aggregate safety risk and to ensure wherever possible that there be quantitative measures for evaluating how effective the controls are in reducing these aggregate risks. The term aggregate risk, when used in this handbook, refers to the accumulation of risks from individual scenarios that lead to a shortfall in safety performance at a high level: e.g., an excessively high probability of loss of crew, loss of mission, planetary contamination, etc. Without aggregated quantitative measures such as these, it is not reasonable to expect that safety has been optimized with respect to other technical and programmatic objectives. At the same time, it is fully recognized that not all sources of risk are amenable to precise quantitative analysis and that the use of qualitative approaches and bounding estimates may be appropriate for those risk sources. Second, the handbook stresses the necessity of developing confidence that the controls derived for the purpose of achieving system safety not only handle risks that have been identified and properly characterized but also provide a general, more holistic means for protecting against unidentified or uncharacterized risks. For example, while it is not possible to be assured that all credible causes of risk have been identified, there are defenses that can provide protection against broad categories of risks and thereby increase the chances that individual causes are contained. Third, the handbook strives at all times to treat uncertainties as an integral aspect of risk and as a part of making decisions. The term "uncertainty" here does not refer to an actuarial type of data analysis, but rather to a characterization of our state of knowledge regarding results from logical and physical models that approximate reality. Uncertainty analysis finds how the output parameters of the models are related to plausible variations in the input parameters and in the modeling assumptions. The evaluation of

Can we use IEC 61850 for safety related functions?

Directory of Open Access Journals (Sweden)

Luca Rocca

2016-08-01

Full Text Available Safety is an essential issue for processes that present high risk for human beings and environment. An acceptable level of risk is obtained both with actions on the process itself (risk reduction and with the use of special safety systems that switch the process into safe mode when a fault or an abnormal operation mode happens. These safety systems are today based on digital devices that communicate through digital networks. The IEC 61508 series specifies the safety requirements of all the devices that are involved in a safety function, including the communication network. Also electrical generation and distribution systems are processes that may have a significant level of risk, so the criteria stated by the IEC 61508 applies. Starting from this consideration, the paper analyzes the safety requirement for the communication network and compare them with the services of the communication protocol IEC 61850 that represents the most used protocol for automation of electrical plants. The goal of this job is to demonstrate that, from the technical point of view, IEC 61850 can be used for implementing safety-related functions, even if a formal safety certification is still missing.

Climate and climate-related issues for the safety assessment SR-Can

International Nuclear Information System (INIS)

Naeslund, Jens-Ove

2006-11-01

The purpose of this report is to document current scientific knowledge of the climate-related conditions and processes relevant to the long-term safety of a KBS-3 repository to a level required for an adequate treatment in the safety assessment SR-Can. The report also includes a concise background description of the climate system. The report includes three main chapters: A description of the climate system (Chapter 2); Identification and discussion of climate-related issues (Chapter 3); and, A description of the evolution of climate-related conditions for the safety assessment (Chapter 4). Chapter 2 includes an overview of present knowledge of the Earth climate system and the climate conditions that can be expected to occur in Sweden on a 100,000 year time perspective. Based on this, climate-related issues relevant for the long-term safety of a KBS-3 repository are identified. These are documented in Chapter 3 'Climate-related issues' to a level required for an adequate treatment in the safety assessment. Finally, in Chapter 4, 'Evolution of climate-related conditions for the safety assessment' an evolution for a 120,000 year period is presented, including discussions of identified climate-related issues of importance for repository safety. The documentation is from a scientific point of view not exhaustive, since such a treatment is neither necessary for the purposes of the safety assessment nor possible within the scope of a safety assessment. As further described in the SR-Can Main Report and in the Features Events and Processes report, the content of the present report has been audited by comparison with FEP databases compiled in other assessment projects. This report follows as far as possible the template for documentation of processes regarded as internal to the repository system. However, the term processes is not used in this report, instead the term issue has been used. Each issue includes a set of processes together resulting in the behaviour of a

Climate and climate-related issues for the safety assessment SR-Can

Energy Technology Data Exchange (ETDEWEB)

Naeslund, Jens-Ove (comp.)

2006-11-15

The purpose of this report is to document current scientific knowledge of the climate-related conditions and processes relevant to the long-term safety of a KBS-3 repository to a level required for an adequate treatment in the safety assessment SR-Can. The report also includes a concise background description of the climate system. The report includes three main chapters: A description of the climate system (Chapter 2); Identification and discussion of climate-related issues (Chapter 3); and, A description of the evolution of climate-related conditions for the safety assessment (Chapter 4). Chapter 2 includes an overview of present knowledge of the Earth climate system and the climate conditions that can be expected to occur in Sweden on a 100,000 year time perspective. Based on this, climate-related issues relevant for the long-term safety of a KBS-3 repository are identified. These are documented in Chapter 3 'Climate-related issues' to a level required for an adequate treatment in the safety assessment. Finally, in Chapter 4, 'Evolution of climate-related conditions for the safety assessment' an evolution for a 120,000 year period is presented, including discussions of identified climate-related issues of importance for repository safety. The documentation is from a scientific point of view not exhaustive, since such a treatment is neither necessary for the purposes of the safety assessment nor possible within the scope of a safety assessment. As further described in the SR-Can Main Report and in the Features Events and Processes report, the content of the present report has been audited by comparison with FEP databases compiled in other assessment projects. This report follows as far as possible the template for documentation of processes regarded as internal to the repository system. However, the term processes is not used in this report, instead the term issue has been used. Each issue includes a set of processes together resulting in the

Software Safety Risk in Legacy Safety-Critical Computer Systems

Science.gov (United States)

Hill, Janice L.; Baggs, Rhoda

2007-01-01

Safety Standards contain technical and process-oriented safety requirements. Technical requirements are those such as "must work" and "must not work" functions in the system. Process-Oriented requirements are software engineering and safety management process requirements. Address the system perspective and some cover just software in the system > NASA-STD-8719.13B Software Safety Standard is the current standard of interest. NASA programs/projects will have their own set of safety requirements derived from the standard. Safety Cases: a) Documented demonstration that a system complies with the specified safety requirements. b) Evidence is gathered on the integrity of the system and put forward as an argued case. [Gardener (ed.)] c) Problems occur when trying to meet safety standards, and thus make retrospective safety cases, in legacy safety-critical computer systems.

Safety design requirements for safety systems and components of JSFR

International Nuclear Information System (INIS)

Kubo, Shigenobu; Shimakawa, Yoshio; Yamano, Hidemasa; Kotake, Shoji

2011-01-01

Safety design requirements for JSFR were summarized taking the development targets of the FaCT project and design feature of JSFR into account. The related safety principle and requirements for Monju, CRBRP, PRISM, SPX, LWRs, IAEA standards, goals of GIF, basic principle of INPRO etc. were also taken into account so that the safety design requirements can be a next-generation global standard. The development targets for safety and reliability are set based on those of FaCT, namely, ensuring safety and reliability equal to future LWR and related fuel cycle facilities. In order to achieve these targets, the defence-in-depth concept is used as the basic safety design principle. General features of the safety design requirements are 1) Achievement of higher reliability, 2) Achievement of higher inspectability and maintainability, 3) Introduction of passive safety features, 4) Reduction of operator action needs, 5) Design consideration against Beyond Design Basis Events, 6) In-Vessel Retention of degraded core materials, 7) Prevention and mitigation against sodium chemical reactions, and 8) Design against external events. The current specific requirements for each system and component are summarized taking the basic design concept of JSFR into account, which is an advanced loop-type large-output power plant with a mixed-oxide-fuelled core. (author)

Towards predictive cardiovascular safety : a systems pharmacology approach

NARCIS (Netherlands)

Snelder, Nelleke

2014-01-01

Cardiovascular safety issues related to changes in blood pressure, arise frequently in drug development. In the thesis “Towards predictive cardiovascular safety – a systems pharmacology approach”, a system-specific model is described to quantify drug effects on the interrelationship between mean

DESIGN PACKAGE 1E SYSTEM SAFETY ANALYSIS

Energy Technology Data Exchange (ETDEWEB)

M. Salem

1995-06-23

The purpose of this analysis is to systematically identify and evaluate hazards related to the Yucca Mountain Project Exploratory Studies Facility (ESF) Design Package 1E, Surface Facilities, (for a list of design items included in the package 1E system safety analysis see section 3). This process is an integral part of the systems engineering process; whereby safety is considered during planning, design, testing, and construction. A largely qualitative approach was used since a radiological System Safety Analysis is not required. The risk assessment in this analysis characterizes the accident scenarios associated with the Design Package 1E structures/systems/components(S/S/Cs) in terms of relative risk and includes recommendations for mitigating all identified risks. The priority for recommending and implementing mitigation control features is: (1) Incorporate measures to reduce risks and hazards into the structure/system/component design, (2) add safety devices and capabilities to the designs that reduce risk, (3) provide devices that detect and warn personnel of hazardous conditions, and (4) develop procedures and conduct training to increase worker awareness of potential hazards, on methods to reduce exposure to hazards, and on the actions required to avoid accidents or correct hazardous conditions.

Operation safety of complex industrial systems. Main concepts

International Nuclear Information System (INIS)

Zwingelstein, G.

2009-01-01

Operation safety consists in knowing, evaluating, foreseeing, measuring and mastering the technological system and human failures in order to avoid their impacts on health and people's safety, on productivity, and on the environment, and to preserve the Earth's resources. This article recalls the main concepts of operation safety: 1 - evolutions in the domain; 2 - failures, missions and functions of a system and of its components: functional failure, missions and functions, industrial processes, notions of probability; 3 - basic concepts and operation safety: reliability, unreliability, failure density, failure rate, relations between them, availability, maintainability, safety. (J.S.)

NASA System Safety Handbook. Volume 2: System Safety Concepts, Guidelines, and Implementation Examples

Science.gov (United States)

Dezfuli, Homayoon; Benjamin, Allan; Everett, Christopher; Feather, Martin; Rutledge, Peter; Sen, Dev; Youngblood, Robert

2015-01-01

This is the second of two volumes that collectively comprise the NASA System Safety Handbook. Volume 1 (NASASP-210-580) was prepared for the purpose of presenting the overall framework for System Safety and for providing the general concepts needed to implement the framework. Volume 2 provides guidance for implementing these concepts as an integral part of systems engineering and risk management. This guidance addresses the following functional areas: 1.The development of objectives that collectively define adequate safety for a system, and the safety requirements derived from these objectives that are levied on the system. 2.The conduct of system safety activities, performed to meet the safety requirements, with specific emphasis on the conduct of integrated safety analysis (ISA) as a fundamental means by which systems engineering and risk management decisions are risk-informed. 3.The development of a risk-informed safety case (RISC) at major milestone reviews to argue that the systems safety objectives are satisfied (and therefore that the system is adequately safe). 4.The evaluation of the RISC (including supporting evidence) using a defined set of evaluation criteria, to assess the veracity of the claims made therein in order to support risk acceptance decisions.

Nuclear power plants. Electrical equipment of the safety system. Qualification

International Nuclear Information System (INIS)

2001-01-01

This International Standard applies to electrical parts of safety systems employed at nuclear power plants, including components and equipment of any interface whose failure could affect unfavourably properties of the safety system. The standard also applies to non-electrical safety-related interfaces. Furthermore, the standard describes the generic process of qualification certification procedures and methods of qualification testing and related documentation. (P.A.)

IAEA/NEA incident reporting system (IRS). Reporting guidelines. Feedback from safety related operating experience for nuclear power plants

International Nuclear Information System (INIS)

1998-01-01

The Incident Reporting System (IRS) is an international system jointly operated by the International Atomic Energy Agency (IAEA) and the Nuclear Energy Agency of the Organisation for Economic Cooperation and Development (OECD/NEA). The fundamental objective of the IRS is to contribute to improving the safety of commercial nuclear power plants (NPPs) which are operated worldwide. This objective can be achieved by providing timely and detailed information on both technical and human factors related to events of safety significance which occur at these plants. The purpose of these guidelines, which supersede the previous IAEA Safety Series No. 93 (Part II) and the NEA IRS guidelines, is to describe the system and to give users the necessary background and guidance to enable them to produce IRS reports meeting a high standard of quality while retaining the high efficiency of the system expected by all Member States operating nuclear power plants. These guidelines have been jointly developed and approved by the NEA/IAEA

Safety regulations concerning instrumentation and control systems for research reactors

International Nuclear Information System (INIS)

El-Shanshoury, A.I.

2009-01-01

A brief study on the safety and reliability issues related to instrumentation and control systems in nuclear reactor plants is performed. In response, technical and strategic issues are used to accomplish instrumentation and control systems safety. For technical issues there are ; systems aspects of digital I and C technology, software quality assurance, common-mode software, failure potential, safety and reliability assessment methods, and human factors and human machine interfaces. The strategic issues are the case-by-case licensing process and the adequacy of the technical infrastructure. The purpose of this work was to review the reliability of the safety systems related to these technical issues for research reactors

Safety program considerations for space nuclear reactor systems

International Nuclear Information System (INIS)

Cropp, L.O.

1984-08-01

This report discusses the necessity for in-depth safety program planning for space nuclear reactor systems. The objectives of the safety program and a proposed task structure is presented for meeting those objectives. A proposed working relationship between the design and independent safety groups is suggested. Examples of safety-related design philosophies are given

Reactor safety systems

International Nuclear Information System (INIS)

Kafka, P.

1975-01-01

The spectrum of possible accidents may become characterized by the 'maximum credible accident', which will/will not happen. Similary, the performance of safety systems in a multitude of situations is sometimes simplified to 'the emergency system will/will not work' or even 'reactors are/ are not safe'. In assessing safety, one must avoid this fallacy of reducing a complicated situation to the simple black-and-white picture of yes/no. Similarly, there is a natural tendency continually to improve the safety of a system to assure that it is 'safe enough'. Any system can be made safer and there is usually some additional cost. It is important to balance the increased safety against the increased costs. (orig.) [de

Aging and service wear of spring-loaded pressure relief valves used in safety-related systems at nuclear power plants

Energy Technology Data Exchange (ETDEWEB)

Staunton, R.H.; Cox, D.F. [Oak Ridge National Lab., TN (United States)

1995-03-01

Spring-loaded pressure relief valves (PRVS) are used in some safety-related applications at nuclear power plants. In general, they are used in systems where, during accidents, pressures may rise to levels where pressure safety relief is required for protection of personnel, system piping, and components. This report documents a study of PRV aging and considers the severity and causes of service wear and how it is discovered and corrected in various systems, valve sizes, etc. Provided in this report are results of the examination of the recorded failures and identification of trends and relationships/correlations in the failures when all failure-related parameters are considered. Components that comprise a typical PRV, how those components fail, when they fail, and the current testing frequencies and methods are also presented in detail.

Aging and service wear of spring-loaded pressure relief valves used in safety-related systems at nuclear power plants

International Nuclear Information System (INIS)

Staunton, R.H.; Cox, D.F.

1995-03-01

Spring-loaded pressure relief valves (PRVS) are used in some safety-related applications at nuclear power plants. In general, they are used in systems where, during accidents, pressures may rise to levels where pressure safety relief is required for protection of personnel, system piping, and components. This report documents a study of PRV aging and considers the severity and causes of service wear and how it is discovered and corrected in various systems, valve sizes, etc. Provided in this report are results of the examination of the recorded failures and identification of trends and relationships/correlations in the failures when all failure-related parameters are considered. Components that comprise a typical PRV, how those components fail, when they fail, and the current testing frequencies and methods are also presented in detail

System theory and safety models in Swedish, UK, Dutch and Australian road safety strategies.

Science.gov (United States)

Hughes, B P; Anund, A; Falkmer, T

2015-01-01

Road safety strategies represent interventions on a complex social technical system level. An understanding of a theoretical basis and description is required for strategies to be structured and developed. Road safety strategies are described as systems, but have not been related to the theory, principles and basis by which systems have been developed and analysed. Recently, road safety strategies, which have been employed for many years in different countries, have moved to a 'vision zero', or 'safe system' style. The aim of this study was to analyse the successful Swedish, United Kingdom and Dutch road safety strategies against the older, and newer, Australian road safety strategies, with respect to their foundations in system theory and safety models. Analysis of the strategies against these foundations could indicate potential improvements. The content of four modern cases of road safety strategy was compared against each other, reviewed against scientific systems theory and reviewed against types of safety model. The strategies contained substantial similarities, but were different in terms of fundamental constructs and principles, with limited theoretical basis. The results indicate that the modern strategies do not include essential aspects of systems theory that describe relationships and interdependencies between key components. The description of these strategies as systems is therefore not well founded and deserves further development. Copyright © 2014 Elsevier Ltd. All rights reserved.

Reactor system safety assurance

International Nuclear Information System (INIS)

Mattson, R.J.

1984-01-01

The philosophy of reactor safety is that design should follow established and conservative engineering practices, there should be safety margins in all modes of plant operation, special systems should be provided for accidents, and safety systems should have redundant components. This philosophy provides ''defense in depth.'' Additionally, the safety of nuclear power plants relies on ''safety systems'' to assure acceptable response to design basis events. Operating experience has shown the need to study plant response to more frequent upset conditions and to account for the influence of operators and non-safety systems on overall performance. Defense in depth is being supplemented by risk and reliability assessment

Safety evaluation report related to the preliminary design of the Standard Reference System, RESAR-414

International Nuclear Information System (INIS)

1978-11-01

The safety evaluation for the Westinghouse Standard Reactor includes information on general reactor characteristics; design criteria for systems and components; reactor coolant system; engineered safety systems; instrumentation and controls; electric power systems; auxiliary systems; steam and power conversion system; radioactive waste management; radiation protection; conduct of operations; accident analyses; and quality assurance

Safety standards of IAEA for management systems

International Nuclear Information System (INIS)

Vincze, P.

2005-01-01

IAEA has developed a new series of safety standards which are assigned for constitution of the conditions and which give the instruction for setting up the management systems that integrate the aims of safety, health, life environment and quality. The new standard shall replace IAEA 50-C-Q - Requirements for security of the quality for safety in nuclear power plants and other nuclear facilities as well as 14 related safety instructions mentioned in the Safety series No. 50-C/SG-Q (1996). When developing of this complex, integrated set of requirements for management systems, the IAEA requirements 50-C-Q (1996) were taken into consideration as well as the publications developed within the International organisation for standardization (ISO) ISO 9001:2000 and ISO14001: 1996. The experience of European Union member states during the development, implementation and improvement of the management systems were also taken into consideration

A formal safety analysis for PLC software-based safety critical system using Z

International Nuclear Information System (INIS)

Koh, Jung Soo

1997-02-01

This paper describes a formal safety analysis technique which is demonstrated by performing empirical formal safety analysis with the case study of beamline hutch door Interlock system that is developed by using PLC (Programmable Logic Controller) systems at the Pohang Accelerator Laboratory. In order to perform formal safety analysis, we have built the Z formal specifications representation from user requirement written in ambiguous natural language and target PLC ladder logic, respectively. We have also studied the effective method to express typical PLC timer component by using specific Z formal notation which is supported by temporal history. We present a formal proof technique specifying and verifying that the hazardous states are not introduced into ladder logic in the PLC-based safety critical system. And also, we have found that some errors or mismatches in user requirement and final implemented PLC ladder logic while analyzing the process of the consistency and completeness of Z translated formal specifications. In the case of relatively small systems like Beamline hutch door interlock system, a formal safety analysis including explicit proof is highly recommended so that the safety of PLC-based critical system may be enhanced and guaranteed. It also provides a helpful benefits enough to comprehend user requirement expressed by ambiguous natural language

NASA aviation safety reporting system

Science.gov (United States)

1981-01-01

Aviation safety reports that relate to loss of control in flight, problems that occur as a result of similar sounding alphanumerics, and pilot incapacitation are presented. Problems related to the go around maneuver in air carrier operations, and bulletins (and FAA responses to them) that pertain to air traffic control systems and procedures are included.

Soft systems methodology as a systemic approach to nuclear safety management

International Nuclear Information System (INIS)

Vieira Neto, Antonio S.; Guilhen, Sabine N.; Rubin, Gerson A.; Caldeira Filho, Jose S.; Camargo, Iara M.C.

2017-01-01

Safety approach currently adopted by nuclear installations is built almost exclusively upon analytical methodologies based, mainly, on the belief that the properties of a system, such as its safety, are given by its constituent parts. This approach, however, does not properly address the complex dynamic interactions between technical, human and organizational factors occurring within and outside the organization. After the accident at Fukushima Daiichi nuclear power plant in March 2011, experts of the International Atomic Energy Agency (IAEA) recommended a systemic approach as a complementary perspective to nuclear safety. The aim of this paper is to present an overview of the systems thinking approach and its potential use for structuring socio technical problems involved in the safety of nuclear installations, highlighting the methodologies related to the soft systems thinking, in particular the Soft Systems Methodology (SSM). The implementation of a systemic approach may thus result in a more holistic picture of the system by the complex dynamic interactions between technical, human and organizational factors. (author)

Soft systems methodology as a systemic approach to nuclear safety management

Energy Technology Data Exchange (ETDEWEB)

Vieira Neto, Antonio S.; Guilhen, Sabine N.; Rubin, Gerson A.; Caldeira Filho, Jose S.; Camargo, Iara M.C., E-mail: asvneto@ipen.br, E-mail: snguilhen@ipen.br, E-mail: garubin@ipen.br, E-mail: jscaldeira@ipen.br, E-mail: icamargo@ipen.br [Instituto de Pesquisas Energeticas e Nucleares (IPEN/CNE-SP), Sao Paulo, SP (Brazil)

2017-07-01

Safety approach currently adopted by nuclear installations is built almost exclusively upon analytical methodologies based, mainly, on the belief that the properties of a system, such as its safety, are given by its constituent parts. This approach, however, does not properly address the complex dynamic interactions between technical, human and organizational factors occurring within and outside the organization. After the accident at Fukushima Daiichi nuclear power plant in March 2011, experts of the International Atomic Energy Agency (IAEA) recommended a systemic approach as a complementary perspective to nuclear safety. The aim of this paper is to present an overview of the systems thinking approach and its potential use for structuring socio technical problems involved in the safety of nuclear installations, highlighting the methodologies related to the soft systems thinking, in particular the Soft Systems Methodology (SSM). The implementation of a systemic approach may thus result in a more holistic picture of the system by the complex dynamic interactions between technical, human and organizational factors. (author)

Design and installation of advanced computer safety related instrumentation

International Nuclear Information System (INIS)

Koch, S.; Andolina, K.; Ruether, J.

1993-01-01

The rapidly developing area of computer systems creates new opportunities for commercial utilities operating nuclear reactors to improve plant operation and efficiency. Two of the main obstacles to utilizing the new technology in safety-related applications is the current policy of the licensing agencies and the fear of decision making managers to introduce new technologies. Once these obstacles are overcome, advanced diagnostic systems, CRT-based displays, and advanced communication channels can improve plant operation considerably. The article discusses outstanding issues in the area of designing, qualifying, and licensing of computer-based instrumentation and control systems. The authors describe the experience gained in designing three safety-related systems, that include a Programmable Logic Controller (PLC) based Safeguard Load Sequencer for NSP Prairie Island, a digital Containment Isolation monitoring system for TVA Browns Ferry, and a study that was conducted for EPRI/NSP regarding a PLC-based Reactor Protection system. This article presents the benefits to be gained in replacing existing, outdated equipment with new advanced instrumentation

Towards the Development of a Methodology for the Cyber Security Analysis of Safety Related Nuclear Digital I and C Systems

International Nuclear Information System (INIS)

Khand, Parvaiz Ahmed; Seong, Poong Hyun

2007-01-01

In nuclear power plants the redundant safety related systems are designed to take automatic action to prevent and mitigate accident conditions if the operators and the non-safety systems fail to maintain the plant within normal operating conditions. In case of an event, the failure of these systems has catastrophic consequences. The tendency in the industry over the past 10 years has been to use of commercial of the shelf (COTS) technologies in these systems. COTS software was written with attention to function and performance rather than security. COTS hardware usually designed to fail safe, but security vulnerabilities could be exploited by an attacker to disable the fail safe mechanisms. Moreover, the use of open protocols and operating systems in these technologies make the plants to become vulnerable to a host of cyber attacks. An effective security analysis process is required during all life cycle phases of these systems in order to ensure the security from cyber attacks. We are developing a methodology for the cyber security analysis of safety related nuclear digital I and C Systems. This methodology will cover all phases of development, operation and maintenance processes of software life cycle. In this paper, we will present a security analysis process for the concept stage of software development life cycle

Safety-related operator actions: methodology for developing criteria

International Nuclear Information System (INIS)

Kozinsky, E.J.; Gray, L.H.; Beare, A.N.; Barks, D.B.; Gomer, F.E.

1984-03-01

This report presents a methodology for developing criteria for design evaluation of safety-related actions by nuclear power plant reactor operators, and identifies a supporting data base. It is the eleventh and final NUREG/CR Report on the Safety-Related Operator Actions Program, conducted by Oak Ridge National Laboratory for the US Nuclear Regulatory Commission. The operator performance data were developed from training simulator experiments involving operator responses to simulated scenarios of plant disturbances; from field data on events with similar scenarios; and from task analytic data. A conceptual model to integrate the data was developed and a computer simulation of the model was run, using the SAINT modeling language. Proposed is a quantitative predictive model of operator performance, the Operator Personnel Performance Simulation (OPPS) Model, driven by task requirements, information presentation, and system dynamics. The model output, a probability distribution of predicted time to correctly complete safety-related operator actions, provides data for objective evaluation of quantitative design criteria

Field Programmable Gate Array-based I and C Safety System

International Nuclear Information System (INIS)

Kim, Hyun Jeong; Kim, Koh Eun; Kim, Young Geul; Kwon, Jong Soo

2014-01-01

Programmable Logic Controller (PLC)-based I and C safety system used in the operating nuclear power plants has the disadvantages of the Common Cause Failure (CCF), high maintenance costs and quick obsolescence, and then it is necessary to develop the other platform to replace the PLC. The Field Programmable Gate Array (FPGA)-based Instrument and Control (I and C) safety system is safer and more economical than Programmable Logic Controller (PLC)-based I and C safety system. Therefore, in the future, FPGA-based I and C safety system will be able to replace the PLC-based I and C safety system in the operating and the new nuclear power plants to get benefited from its safety and economic advantage. FPGA-based I and C safety system shall be implemented and verified by applying the related requirements to perform the safety function

Field Programmable Gate Array-based I and C Safety System

Energy Technology Data Exchange (ETDEWEB)

Kim, Hyun Jeong; Kim, Koh Eun; Kim, Young Geul; Kwon, Jong Soo [KEPCO, Daejeon (Korea, Republic of)

2014-08-15

Programmable Logic Controller (PLC)-based I and C safety system used in the operating nuclear power plants has the disadvantages of the Common Cause Failure (CCF), high maintenance costs and quick obsolescence, and then it is necessary to develop the other platform to replace the PLC. The Field Programmable Gate Array (FPGA)-based Instrument and Control (I and C) safety system is safer and more economical than Programmable Logic Controller (PLC)-based I and C safety system. Therefore, in the future, FPGA-based I and C safety system will be able to replace the PLC-based I and C safety system in the operating and the new nuclear power plants to get benefited from its safety and economic advantage. FPGA-based I and C safety system shall be implemented and verified by applying the related requirements to perform the safety function.

The micro-processor controlled process radiation monitoring system for reactor safety systems

International Nuclear Information System (INIS)

Mizuno, K.; Noguchi, A.; Kumagami, S.; Gotoh, Y.; Kumahara, T.; Arita, S.

1986-01-01

Digital computers are soon expected to be applied to various real-time safety and safety-related systems in nuclear power plants. Hitachi is now engaged in the development of a micro-processor controlled process radiation monitoring system, which operates on digital processing methods employed with a log ratemeter. A newly defined methodology of design and test procedures is being applied as a means of software program verification for these safety systems. Recently implemented micro-processor technology will help to achieve an advanced man-machine interface and highly reliable performance. (author)

System Safety in an IT Service Organization

Science.gov (United States)

Parsons, Mike; Scutt, Simon

Within Logica UK, over 30 IT service projects are considered safetyrelated. These include operational IT services for airports, railway infrastructure asset management, nationwide radiation monitoring and hospital medical records services. A recent internal audit examined the processes and documents used to manage system safety on these services and made a series of recommendations for improvement. This paper looks at the changes and the challenges to introducing them, especially where the service is provided by multiple units supporting both safety and non-safety related services from multiple locations around the world. The recommendations include improvements to service agreements, improved process definitions, routine safety assessment of changes, enhanced call logging, improved staff competency and training, and increased safety awareness. Progress is reported as of today, together with a road map for implementation of the improvements to the service safety management system. A proposal for service assurance levels (SALs) is discussed as a way forward to cover the wide variety of services and associated safety risks.

Development of Non-safety System Architecture and Evaluation of Components/Systems

International Nuclear Information System (INIS)

Oh, I. S.; Lee, C. K.; Kim, D. H.; Lee, J. W.; Lee, D. Y.; Park, W. M.; Hwang, I. K.; Hur, S.; Kim, J. T.; Park, J. C.; Lee, J. W.

2007-10-01

We describe in this report the works performed for a technical evaluation of the non-safety digital control system of the KNICS, the non-safety process control system of the KNICS, a communication load analysis for the MMIS (including both the non-safety and the safety systems) of the KNICS, the development of MMI and an implementation of the logic for the CVCS, and the works performed to support writing a proposal needed for bidding an I and C system based on the KNICS. The technical evaluation results were aimed to be used by the designers to detect parts needed to be corrected or to be newly inserted, and also by the developers during the development phase. The requirement specifications and the data requirement characteristics have been identified for each subsystem of the determined KNICS structure. For each communication node, the specifications related to the data transfer including the data capacity for interfaces, delay time for the data transfer, and the marginal availability of its performance capabilities have been analyzed to identify the amount of data transfer and hence to verify that both of the designed structures for the safety related communications network and for the digital communications network are appropriate. The results of the supporting work performed for writing the technical specifications related to each subsystem of the KNICS structure, are expected to be useful in writing a proposal for the expected Uljin new units 1 and 2, and in the I and C upgrade for any of the existing nuclear power plants under operation. Also included in this report are the descriptions on a design of the chemical volume control system (CVCS), on the supporting work performed to draw the logic diagrams for CVCS using the tool ISaGRAF, and on the generation of a set of system displays to be used as references

Development of Non-safety System Architecture and Evaluation of Components/Systems

Energy Technology Data Exchange (ETDEWEB)

Oh, I. S.; Lee, C. K.; Kim, D. H.; Lee, J. W.; Lee, D. Y.; Park, W. M.; Hwang, I. K.; Hur, S.; Kim, J. T.; Park, J. C.; Lee, J. W

2007-10-15

We describe in this report the works performed for a technical evaluation of the non-safety digital control system of the KNICS, the non-safety process control system of the KNICS, a communication load analysis for the MMIS (including both the non-safety and the safety systems) of the KNICS, the development of MMI and an implementation of the logic for the CVCS, and the works performed to support writing a proposal needed for bidding an I and C system based on the KNICS. The technical evaluation results were aimed to be used by the designers to detect parts needed to be corrected or to be newly inserted, and also by the developers during the development phase. The requirement specifications and the data requirement characteristics have been identified for each subsystem of the determined KNICS structure. For each communication node, the specifications related to the data transfer including the data capacity for interfaces, delay time for the data transfer, and the marginal availability of its performance capabilities have been analyzed to identify the amount of data transfer and hence to verify that both of the designed structures for the safety related communications network and for the digital communications network are appropriate. The results of the supporting work performed for writing the technical specifications related to each subsystem of the KNICS structure, are expected to be useful in writing a proposal for the expected Uljin new units 1 and 2, and in the I and C upgrade for any of the existing nuclear power plants under operation. Also included in this report are the descriptions on a design of the chemical volume control system (CVCS), on the supporting work performed to draw the logic diagrams for CVCS using the tool ISaGRAF, and on the generation of a set of system displays to be used as references.

Establishing management information system to solve the information management problem of nuclear safety related personnel's qualification management

International Nuclear Information System (INIS)

Sun Haipeng; Liu Zhijun; Li Tianshu

2013-01-01

With the rapid progress of nuclear energy and nuclear technology utilization, nuclear safety related personnel play an increasingly important role in ensuring nuclear safety. NNSA personnel qualification management information system conducts a multi-faceted, effective, real-time monitoring and information collection for nuclear safety staff practice unit management, knowledge management, license application, appraisal management or supervision, training management or supervision and certified staff management, and also is a milestone for NNSA to build the state department with 'five-feature' (learning-oriented, service-oriented, economical, innovative, clean-type). (authors)

A new concept of safety parameter display system

International Nuclear Information System (INIS)

Martinez, A.S.; Oliveira, L.F.S. de; Schirru, R.; Thome Filho, Z.D.; Silva, R.A. da.

1986-07-01

A general description of Angra-1 Parameter Display System (SSPA), a real time and on-line computerized monitoring system for the parameters related to the power plant safety is presented. This system has the main purpose of diminish the load on the Angra-1 power plant operators at an emergency event by supplying them with the additional tools serving as the basis for a prompt identification of the accident. The SSPA is a kind of safety parameter display system whose concept was introduced after Three Mile Island accident in USA. The SSPA comprises two nuclear applications independently considered. They are included into the Parameters Monitoring Integrated System (SIMP) and the safety critical function system (SFCS). (Author) [pt

Synergistic behaviour of nuclear radiation, temperature-humidity extremes and LOCA situation on safety and safety-related equipment in Indian nuclear power plants

International Nuclear Information System (INIS)

Kulkarni, R.D.; Bora, J.S.; Prakash, Ravi; Agarwal, Vivek; Sundersingh, V.P.

2002-01-01

Full text: The general philosophy for the instrumentation in nuclear power plants is based on the use of equipment/instruments which are capable of continuous satisfactory operation over a long period of time with minimum attention. Long term reliability under varying service conditions is of prime importance. The reliability of nuclear power plant depends on the reliability of safety and safety-related electronic instruments/ equipment used for performing the crucial tasks. The electrical and electronic systems/ circuits/ components of the equipment used in reactor safety systems (e.g. reactor protection system, emergency core cooling system, etc.) and reactor safety-related systems (e.g. reactor containment isolation and cooling system, reactor shutdown system, etc.) are responsible for safe and reliable operation of a nuclear power plant. The performance of reactor safety and safety-related equipment/instruments viz. pressure and differential pressure transmitter, amplifier for ion chamber, etc. has been evaluated under synergistic atmosphere including LOCA to find out the critical link in the circuits and subsequent modifications are suggested. The mathematical representation of the generated database has been done to estimate the life span of the instruments and accordingly the guidelines has been prepared for the operational staff to avoid the forced outage of the plant. All the details are included and mathematical models are presented to predict the future performances

Safety system status monitoring

International Nuclear Information System (INIS)

Lewis, J.R.; Morgenstern, M.H.; Rideout, T.H.; Cowley, P.J.

1984-03-01

The Pacific Northwest Laboratory has studied the safety aspects of monitoring the preoperational status of safety systems in nuclear power plants. The goals of the study were to assess for the NRC the effectiveness of current monitoring systems and procedures, to develop near-term guidelines for reducing human errors associated with monitoring safety system status, and to recommend a regulatory position on this issue. A review of safety system status monitoring practices indicated that current systems and procedures do not adequately aid control room operators in monitoring safety system status. This is true even of some systems and procedures installed to meet existing regulatory guidelines (Regulatory Guide 1.47). In consequence, this report suggests acceptance criteria for meeting the functional requirements of an adequate system for monitoring safety system status. Also suggested are near-term guidelines that could reduce the likelihood of human errors in specific, high-priority status monitoring tasks. It is recommended that (1) Regulatory Guide 1.47 be revised to address these acceptance criteria, and (2) the revised Regulatory Guide 1.47 be applied to all plants, including those built since the issuance of the original Regulatory Guide

Safety system status monitoring

Energy Technology Data Exchange (ETDEWEB)

Lewis, J.R.; Morgenstern, M.H.; Rideout, T.H.; Cowley, P.J.

1984-03-01

The Pacific Northwest Laboratory has studied the safety aspects of monitoring the preoperational status of safety systems in nuclear power plants. The goals of the study were to assess for the NRC the effectiveness of current monitoring systems and procedures, to develop near-term guidelines for reducing human errors associated with monitoring safety system status, and to recommend a regulatory position on this issue. A review of safety system status monitoring practices indicated that current systems and procedures do not adequately aid control room operators in monitoring safety system status. This is true even of some systems and procedures installed to meet existing regulatory guidelines (Regulatory Guide 1.47). In consequence, this report suggests acceptance criteria for meeting the functional requirements of an adequate system for monitoring safety system status. Also suggested are near-term guidelines that could reduce the likelihood of human errors in specific, high-priority status monitoring tasks. It is recommended that (1) Regulatory Guide 1.47 be revised to address these acceptance criteria, and (2) the revised Regulatory Guide 1.47 be applied to all plants, including those built since the issuance of the original Regulatory Guide.

Traceability of Software Safety Requirements in Legacy Safety Critical Systems

Science.gov (United States)

Hill, Janice L.

2007-01-01

How can traceability of software safety requirements be created for legacy safety critical systems? Requirements in safety standards are imposed most times during contract negotiations. On the other hand, there are instances where safety standards are levied on legacy safety critical systems, some of which may be considered for reuse for new applications. Safety standards often specify that software development documentation include process-oriented and technical safety requirements, and also require that system and software safety analyses are performed supporting technical safety requirements implementation. So what can be done if the requisite documents for establishing and maintaining safety requirements traceability are not available?

Regulatory Oversight of Safety Culture in Finland: A Systemic Approach to Safety

International Nuclear Information System (INIS)

Oedewald, P.; Väisäsvaara, J.

2016-01-01

In Finland the Radiation and Nuclear Safety Authority STUK specifies detailed regulatory requirements for good safety culture. Both the requirements and the practical safety culture oversight activities reflect a systemic approach to safety: the interconnections between the technical, human and organizational factors receive special attention. The conference paper aims to show how the oversight of safety culture can be integrated into everyday oversight activities. The paper also emphasises that the scope of the safety culture oversight is not specific safety culture activities of the licencees, but rather the overall functioning of the licence holder or the new build project organization from safety point of view. The regulatory approach towards human and organizational factors and safety culture has evolved throughout the years of nuclear energy production in Finland. Especially the recent new build projects have highlighted the need to systematically pay attention to the non-technical aspects of safety as it has become obvious how the HOF issues can affect the design processes and quality of construction work. Current regulatory guides include a set of safety culture related requirements. The requirements are binding to the licence holders and they set both generic and specific demands on the licencee to understand, monitor and to develop safety culture of their own organization but also that of their supplier network. The requirements set for the licence holders has facilitated the need to develop the regulator’s safety culture oversight practices towards a proactive and systemic approach.

An Attack Model Development Process for the Cyber Security of Safety Related Nuclear Digital I and C Systems

Energy Technology Data Exchange (ETDEWEB)

Khand, Parvaiz Ahmed; Seong, Poong Hyun [Korea Advanced Institute of Science and Technology, Daejeon (Korea, Republic of)

2007-10-15

Nuclear power plants (NPPs), the redundant safety related systems are designed to take automatic action to prevent and mitigate accident conditions if the operators and the non-safety systems fail to maintain the plant within normal operating conditions. Presently, there is trend of connecting computer networks of commercial NPPs to corporate local area networks (LANs) to give engineers access to plant data for economic benefits. An increase in plant efficiency of a couple percentage points can translate to millions upon millions of dollars per year. The nuclear industry is also moving in the direction of installing digital controls that would allow for remote operation of plant functions, perhaps within a few years. However, this connectivity may also cause new security problems such as: in 2003, a computer worm named as slammer penetrated a private computer network at Ohio's Davis-Besse nuclear plant and disabled a safety monitoring system called a safety parameter display system (SPDS). Moreover, the present systems were developed with consideration of reliability and safety rather than security. In present scenario, there is a need to model and understand the cyber attacks towards these systems in a systematic way, and to demonstrate that the plant specific procedures and the imposed security controls adequately protect the systems from analyzed cyber security attacks. Attack trees provide a systematic, disciplined and effective way to model and understand cyber attacks towards any type of systems, make it possible to understand risks from deliberate, malicious intrusions from attackers, and make security decisions. Using attack trees the security of large systems can be modeled by considering a security breach as a system failure, and describing it with a set of events that can lead to system failure in a combinatorial way. The attacks towards the system are represented in a tree structure, with an attack that can significantly damage the system operation

An Attack Model Development Process for the Cyber Security of Safety Related Nuclear Digital I and C Systems

International Nuclear Information System (INIS)

Khand, Parvaiz Ahmed; Seong, Poong Hyun

2007-01-01

Nuclear power plants (NPPs), the redundant safety related systems are designed to take automatic action to prevent and mitigate accident conditions if the operators and the non-safety systems fail to maintain the plant within normal operating conditions. Presently, there is trend of connecting computer networks of commercial NPPs to corporate local area networks (LANs) to give engineers access to plant data for economic benefits. An increase in plant efficiency of a couple percentage points can translate to millions upon millions of dollars per year. The nuclear industry is also moving in the direction of installing digital controls that would allow for remote operation of plant functions, perhaps within a few years. However, this connectivity may also cause new security problems such as: in 2003, a computer worm named as slammer penetrated a private computer network at Ohio's Davis-Besse nuclear plant and disabled a safety monitoring system called a safety parameter display system (SPDS). Moreover, the present systems were developed with consideration of reliability and safety rather than security. In present scenario, there is a need to model and understand the cyber attacks towards these systems in a systematic way, and to demonstrate that the plant specific procedures and the imposed security controls adequately protect the systems from analyzed cyber security attacks. Attack trees provide a systematic, disciplined and effective way to model and understand cyber attacks towards any type of systems, make it possible to understand risks from deliberate, malicious intrusions from attackers, and make security decisions. Using attack trees the security of large systems can be modeled by considering a security breach as a system failure, and describing it with a set of events that can lead to system failure in a combinatorial way. The attacks towards the system are represented in a tree structure, with an attack that can significantly damage the system operation as a

Survey of systems safety analysis methods and their application to nuclear waste management systems

International Nuclear Information System (INIS)

Pelto, P.J.; Winegardner, W.K.; Gallucci, R.H.V.

1981-11-01

This report reviews system safety analysis methods and examines their application to nuclear waste management systems. The safety analysis methods examined include expert opinion, maximum credible accident approach, design basis accidents approach, hazard indices, preliminary hazards analysis, failure modes and effects analysis, fault trees, event trees, cause-consequence diagrams, G0 methodology, Markov modeling, and a general category of consequence analysis models. Previous and ongoing studies on the safety of waste management systems are discussed along with their limitations and potential improvements. The major safety methods and waste management safety related studies are surveyed. This survey provides information on what safety methods are available, what waste management safety areas have been analyzed, and what are potential areas for future study

Survey of systems safety analysis methods and their application to nuclear waste management systems

Energy Technology Data Exchange (ETDEWEB)

Pelto, P.J.; Winegardner, W.K.; Gallucci, R.H.V.

1981-11-01

This report reviews system safety analysis methods and examines their application to nuclear waste management systems. The safety analysis methods examined include expert opinion, maximum credible accident approach, design basis accidents approach, hazard indices, preliminary hazards analysis, failure modes and effects analysis, fault trees, event trees, cause-consequence diagrams, G0 methodology, Markov modeling, and a general category of consequence analysis models. Previous and ongoing studies on the safety of waste management systems are discussed along with their limitations and potential improvements. The major safety methods and waste management safety related studies are surveyed. This survey provides information on what safety methods are available, what waste management safety areas have been analyzed, and what are potential areas for future study.

Safety system function trends

International Nuclear Information System (INIS)

Johnson, C.

1989-01-01

This paper describes research to develop risk-based indicators of plant safety performance. One measure of the safety-performance of operating nuclear power plants is the unavailability of important safety systems. Brookhaven National Laboratory and Science Applications International Corporation are evaluating ways to aggregate train-level or component-level data to provide such an indicator. This type of indicator would respond to changes in plant safety margins faster than the currently used indicator of safety system unavailability (i.e., safety system failures reported in licensee event reports). Trends in the proposed indicator would be one indication of trends in plant safety performance and maintenance effectiveness. This paper summarizes the basis for such an indicator, identifies technical issues to be resolved, and illustrates the potential usefullness of such indicators by means of computer simulations and case studies

The NASA Aviation Safety Reporting System

Science.gov (United States)

1983-01-01

This is the fourteenth in a series of reports based on safety-related incidents submitted to the NASA Aviation Safety Reporting System by pilots, controllers, and, occasionally, other participants in the National Aviation System (refs. 1-13). ASRS operates under a memorandum of agreement between the National Aviation and Space Administration and the Federal Aviation Administration. The report contains, first, a special study prepared by the ASRS Office Staff, of pilot- and controller-submitted reports related to the perceived operation of the ATC system since the 1981 walkout of the controllers' labor organization. Next is a research paper analyzing incidents occurring while single-pilot crews were conducting IFR flights. A third section presents a selection of Alert Bulletins issued by ASRS, with the responses they have elicited from FAA and others concerned. Finally, the report contains a list of publications produced by ASRS with instructions for obtaining them.

Safety analysis and evaluation methodology for fusion systems

International Nuclear Information System (INIS)

Fujii-e, Y.; Kozawa, Y.; Namba, C.

1987-03-01

Fusion systems which are under development as future energy systems have reached a stage that the break even is expected to be realized in the near future. It is desirable to demonstrate that fusion systems are well acceptable to the societal environment. There are three crucial viewpoints to measure the acceptability, that is, technological feasibility, economy and safety. These three points have close interrelation. The safety problem is more important since three large scale tokamaks, JET, TFTR and JT-60, start experiment, and tritium will be introduced into some of them as the fusion fuel. It is desirable to establish a methodology to resolve the safety-related issues in harmony with the technological evolution. The promising fusion system toward reactors is not yet settled. This study has the objective to develop and adequate methodology which promotes the safety design of general fusion systems and to present a basis for proposing the R and D themes and establishing the data base. A framework of the methodology, the understanding and modeling of fusion systems, the principle of ensuring safety, the safety analysis based on the function and the application of the methodology are discussed. As the result of this study, the methodology for the safety analysis and evaluation of fusion systems was developed. New idea and approach were presented in the course of the methodology development. (Kako, I.)

Report on safety related occurrences and reactor trips July 1, 1976-December 31, 1976

International Nuclear Information System (INIS)

Andermo, L.

1977-04-01

This is a systematically arranged report on all reported safety related occurrences and reactor trips in Swedish nuclear power plants in operation during July 1, 1976 to December 31, 1976 inclusive. The facilities involved are Oskarshamn 1 and 2, Ringhals 1 and 2 and Barsebaeck 1. During this period of the 6 months 37 safety related occurrences and 34 reactor trips have been reported to the Nuclear Power Inspectorate. As earlier experiences have shown it is to the greatest extent the conventional components which bring about the safety related occurrences or occurrences leading to outages or power reductions. However, the component errors discovered in the safety related systems have not affected the function of their redundant systems and other diverse systems have not been involved. Therefore the reactor safety has been satisfactory. The fact that even small deviations from prescribed operation results in automatic and safe shut down of the reactor, does not always imply a conflict with operational availability. The number of reactor trips are almost as low as during the last period, which is a drastic reduction compared to earlier time periods. The greatest outages are caused by occurrences without safety significance.(author)

Overview of Risk Mitigation for Safety-Critical Computer-Based Systems

Science.gov (United States)

Torres-Pomales, Wilfredo

2015-01-01

This report presents a high-level overview of a general strategy to mitigate the risks from threats to safety-critical computer-based systems. In this context, a safety threat is a process or phenomenon that can cause operational safety hazards in the form of computational system failures. This report is intended to provide insight into the safety-risk mitigation problem and the characteristics of potential solutions. The limitations of the general risk mitigation strategy are discussed and some options to overcome these limitations are provided. This work is part of an ongoing effort to enable well-founded assurance of safety-related properties of complex safety-critical computer-based aircraft systems by developing an effective capability to model and reason about the safety implications of system requirements and design.

Decision support systems and expert systems for risk and safety analysis

International Nuclear Information System (INIS)

Baybutt, P.

1986-01-01

During the last 1-2 years, rapid developments have occurred in the development of decision support systems and expert systems to aid in decision making related to risk and safety of industrial plants. These activities are most noteworthy in the nuclear industry where numerous systems are under development with implementation often being made on personal computers. An overview of some of these developments is provided, and an example of one recently developed decision support system is given. This example deals with CADET, a system developed to aid the U.S. Nuclear Regulatory Commission in making decisions related to the topical issue of source terms resulting from degraded core accidents in light water reactors. The paper concludes with some comments on the likely directions of future developments in decision support systems and expert systems to aid in the management of risk and safety in industrial plants. (author)

Using system dynamics simulation for assessment of hydropower system safety

Science.gov (United States)

King, L. M.; Simonovic, S. P.; Hartford, D. N. D.

2017-08-01

Hydropower infrastructure systems are complex, high consequence structures which must be operated safely to avoid catastrophic impacts to human life, the environment, and the economy. Dam safety practitioners must have an in-depth understanding of how these systems function under various operating conditions in order to ensure the appropriate measures are taken to reduce system vulnerability. Simulation of system operating conditions allows modelers to investigate system performance from the beginning of an undesirable event to full system recovery. System dynamics simulation facilitates the modeling of dynamic interactions among complex arrangements of system components, providing outputs of system performance that can be used to quantify safety. This paper presents the framework for a modeling approach that can be used to simulate a range of potential operating conditions for a hydropower infrastructure system. Details of the generic hydropower infrastructure system simulation model are provided. A case study is used to evaluate system outcomes in response to a particular earthquake scenario, with two system safety performance measures shown. Results indicate that the simulation model is able to estimate potential measures of system safety which relate to flow conveyance and flow retention. A comparison of operational and upgrade strategies is shown to demonstrate the utility of the model for comparing various operational response strategies, capital upgrade alternatives, and maintenance regimes. Results show that seismic upgrades to the spillway gates provide the largest improvement in system performance for the system and scenario of interest.

Critical Characteristics of Radiation Detection System Components to be Dedicated for use in Safety Class and Safety Significant System

International Nuclear Information System (INIS)

DAVIS, S.J.

2000-01-01

This document identifies critical characteristics of components to be dedicated for use in Safety Significant (SS) Systems, Structures, or Components (SSCs). This document identifies the requirements for the components of the common, radiation area, monitor alarm in the WESF pool cell. These are procured as Commercial Grade Items (CGI), with the qualification testing and formal dedication to be performed at the Waste Encapsulation Storage Facility (WESF) for use in safety significant systems. System modifications are to be performed in accordance with the approved design. Components for this change are commercially available and interchangeable with the existing alarm configuration This document focuses on the operational requirements for alarm, declaration of the safety classification, identification of critical characteristics, and interpretation of requirements for procurement. Critical characteristics are identified herein and must be verified, followed by formal dedication, prior to the components being used in safety related applications

New Paradigm in Nuclear Safety from Quality Assurance to Safety Management System

International Nuclear Information System (INIS)

Lim, Nam-Jin; Park, Chan-Gook; Nam, Ji-Hee; Kim, Kwan-Hyun; Kwon, Hyuk-il; Lee, Young-Gun Lee

2006-01-01

The initial concept of Quality Control (QC) controlling the quality of products is now evolving toward the Management System (MS) achieving safety, through Quality Assurance (QA) ensuring the quality of products and Quality Management (QM) managing the quality by a systematic approach. Nuclear safety can be achieved through an integrated MS that ensures the health, environmental, security, quality and economic requirements being considered together with nuclear safety requirements. MS approach is developed through realizing that most of nuclear accidents had occurred not by the malfunction of hardware or equipment, but by the human error. The MS is a set of inter-related or interacting elements (system) that establishes policies and objectives and which enables those objectives to be achieved in an efficient and effective way

Development and applications of a safety assessment system for promoting safety culture in nuclear power plants

International Nuclear Information System (INIS)

Takano, Ken-ichi; Hasegawa, Naoko; Hirose, Ayako; Hayase, Ken-ichi

2004-01-01

For past five years, CRIEPI has been continuing efforts to develop and make applications of a 'safety assessment system' which enable to measure the safety level of organization. This report describe about frame of the system, assessment results and its reliability, and relation between labor accident rate in the site and total safety index (TSI), which can be obtained by the principal factors analysis. The safety assessment in this report is based on questionnaire survey of employee. The format and concrete questionnaires were developed using existing literatures including organizational assessment tools. The tailored questionnaire format involved 124 questionnaire items. The assessment results could be considered as a well indicator of the safety level of organization, safety management, and safety awareness of employee. (author)

A sensor monitoring system for telemedicine, safety and security applications

Science.gov (United States)

Vlissidis, Nikolaos; Leonidas, Filippos; Giovanis, Christos; Marinos, Dimitrios; Aidinis, Konstantinos; Vassilopoulos, Christos; Pagiatakis, Gerasimos; Schmitt, Nikolaus; Pistner, Thomas; Klaue, Jirka

2017-02-01

A sensor system capable of medical, safety and security monitoring in avionic and other environments (e.g. homes) is examined. For application inside an aircraft cabin, the system relies on an optical cellular network that connects each seat to a server and uses a set of database applications to process data related to passengers' health, safety and security status. Health monitoring typically encompasses electrocardiogram, pulse oximetry and blood pressure, body temperature and respiration rate while safety and security monitoring is related to the standard flight attendance duties, such as cabin preparation for take-off, landing, flight in regions of turbulence, etc. In contrast to previous related works, this article focuses on the system's modules (medical and safety sensors and associated hardware), the database applications used for the overall control of the monitoring function and the potential use of the system for security applications. Further tests involving medical, safety and security sensing performed in an real A340 mock-up set-up are also described and reference is made to the possible use of the sensing system in alternative environments and applications, such as health monitoring within other means of transport (e.g. trains or small passenger sea vessels) as well as for remotely located home users, over a wired Ethernet network or the Internet.

Concept of safety related I and C and power supply systems in the passive safety concept of the HTR-module

International Nuclear Information System (INIS)

Juengst, U.

1990-01-01

The main motivation for the passive safety concepts is to gain a better quality of safety or at least to achieve higher public acceptance for nuclear power plants. This strategy has been introduced into the European Fast Reactor (EER), a common project of France, UK and Germany is applied stringently to the German high-temperature gas-cooled reactor ''HTR - Module''. The following fields are briefly described in the paper: Safety design features of the HTR - Module, overview of I and C concept, reactor protection system, emergency control room, power supply concept, system arrangement and protection against external hazards, accidents sequence of station black-out. (author). 3 figs

Guards: An approach safety-related systems using cots example of MMI and reactor automation in nuclear submarine application

International Nuclear Information System (INIS)

Brun, M.

1998-01-01

For at least 10 years, the nuclear industry designs and licences specific digital safety-critical systems (IEC 1226 class A). One key issue for future programs is to design and licence safety-related systems providing more complex functions and using Commercial-Off-The-Shelf components. This issue is especially raised for Reactor automation and Man-Machine-Interface. The usual I and C (Instrumentation and Control) organisation for these functions is based on redundancy between a commercial, up-to-date, unclassified > system and a simplified classified > system using traditional technologies. It clearly appears that such organisation is not satisfying from the point of view of people who have actually to operate these systems: The operator is supposed not to trust the normal system and rely on the back-up system which is less helpful and that he use very few. This paper presents a new approach to that problem using COTS components in low-level layers, safety architecture and mechanisms at medium level layer (GUARDS architecture developed in the current ESPRIT project number 20716), and a pre-validated functional layer. The aim of this solution is to comply with the > IEC 1226 class B requirements, at lower overall cost (design, implementation, licensing, long term confidence). This approach is illustrated by its application in Man-Machine-Interface (MMI) for our future program of Nuclear submarine. (author)

Safety logic systems of PFBR

International Nuclear Information System (INIS)

Sambasivan, S. Ilango

2004-01-01

Full text : PFBR is provided with two independent, fast acting and diverse shutdown systems to detect any abnormalities and to initiate safety action. Each system consists of sensors, signal processing systems, logics, drive mechanisms and absorber rods. The absorber rods of the first system are Control and Safety Rods (CSR) and that of the second are called as Diverse Safety Rods (DSR). There are nine CSR and three DSR. While CSR are used for startup, control of reactor power, controlled shutdown and SCRAM, the DSR are used only for SCRAM. The respective drive mechanisms are called as CSRDM and DSRDM. Each of these two systems is capable of executing the shutdown satisfactorily with single failure criteria. Two independent safety logic systems based on diverse principles have been designed for the two shut down systems. The analog outputs of the sensors of Core Monitoring Systems comprising of reactor flux monitoring, core temperature monitoring, failed fuel detection and core flow monitoring systems are processed and converted into binary signals depending on their instantaneous values. Safety logic systems receive the binary signals from these core-monitoring systems and process them logically to protect the reactor against postulated initiating events. Neutronic and power to flow (P/Q) signals form the inputs to safety logic system-I and temperature signals are inputs to the safety logic system II. Failed fuel detection signals are processed by both the shut down systems. The two logic systems to actuate the safety rods are also based on two diverse designs and implemented with solid-state devices to meet all the requirements of safety systems. Safety logic system I that caters to neutronic and P/Q signals is designed around combinational logic and has an on-line test facility to detect struck at faults. The second logic system is based on dynamic logic and hence is inherently safe. This paper gives an overview of the two logic systems that have been

Risk-based evaluation tool for safety-related maintenance involving scaffolding

International Nuclear Information System (INIS)

Stevens, C.; Azizi, M.; Massman, M.

1988-01-01

The US Nuclear Regulatory Commission (NRC) has expressed a general concern that transient materials in and around safety systems at nuclear power plants represent a seismic safety hazard to the plant, in particular, the uncontrolled use of scaffolding during maintenance activities. Currently, most plants perform a seismic safety analysis for all uses of scaffolding near safety-related equipment to determine appropriate tie-down locations, scaffolding reinforcements, etc. This is both time-consuming and, for the most part, unnecessary. A workable engineering solution based on risk analysis techniques has been developed and is being used at the Palo Verde nuclear generating station (PVNGS)

Safety of mechanical devices. Safety of automation systems

International Nuclear Information System (INIS)

Pahl, G.; Schweizer, G.; Kapp, K.

1985-01-01

The paper deals with the classic procedures of safety engineering in the sectors mechanical engineering, electrical and energy engineering, construction and transport, medicine technology and process technology. Particular stress is laid on the safety of automation systems, control technology, protection of mechanical devices, reactor safety, mechanical constructions, transport systems, railway signalling devices, road traffic and protection at work in chemical plans. (DG) [de

Criteria for safety-related operator actions

International Nuclear Information System (INIS)

Gray, L.H.; Haas, P.M.

1983-01-01

The Safety-Related Operator Actions (SROA) Program was designed to provide information and data for use by NRC in assessing the performance of nuclear power plant (NPP) control room operators in responding to abnormal/emergency events. The primary effort involved collection and assessment of data from simulator training exercises and from historical records of abnormal/emergency events that have occurred in operating plants (field data). These data can be used to develop criteria for acceptability of the use of manual operator action for safety-related functions. Development of criteria for safety-related operator actions are considered

Report on safety related occurrences and reactor trips July 1, 1979 - December 31, 1979

International Nuclear Information System (INIS)

Olsson, S.; Andermo, L.

1980-01-01

This is a report on all reported safety related occurrences and reactor trips in Swedish nuclear power plants in operation during July 1 to December 31, 1979 inclusive. The facilities involved are Barsebaeck 1 and 2, Oskarshamn 1 and 2 and Ringhals 1 and 2. During this period of 6 months 76 safety related occurrences and 27 reactor trips have been reported to the Nuclear Power Inspectorate. It is to the greatest extent conventional components such as valves and pumps which bring about the safety related occurrences or occurrences leading to outages or power reductions. However, the component errors discovered in the safety related systems have not affected the function of their redundant system and other diverse systems have not been involved. Therefore the reactor safety has been satisfactory. The total number of reactor trips are normal. The average value for these 6 months is 4.5 trips/unit. Approximetely one half of the reactor trips happened at zero or very low power operation. The fact that even small deviations from prescribed operation result in an automatic and safe shut down of the reactor, does not always imply a conflict with operational availability. The greatest outages are caused by occurrences without safety significance. (author)

Medication Safety Systems and the Important Role of Pharmacists.

Science.gov (United States)

Mansur, Jeannell M

2016-03-01

Preventable medication-related adverse events continue to occur in the healthcare setting. While the Institute of Medicine's To Err is Human, published in 2000, highlighted the prevalence of medical and medication-related errors in patient morbidity and mortality, there has not been significant documented progress in addressing system contributors to medication errors. The lack of progress may be related to the myriad of pharmaceutical options now available and the nuances of optimizing drug therapy to achieve desired outcomes and prevent undesirable outcomes. However, on a broader scale, there may be opportunities to focus on the design and performance of the many processes that are part of the medication system. Errors may occur in the storage, prescribing, transcription, preparation and dispensing, or administration and monitoring of medications. Each of these nodes of the medication system, with its many components, is prone to failure, resulting in harm to patients. The pharmacist is uniquely trained to be able to impact medication safety at the individual patient level through medication management skills that are part of the clinical pharmacist's role, but also to analyze the performance of medication processes and to lead redesign efforts to mitigate drug-related outcomes that may cause harm. One population that can benefit from a focus on medication safety through clinical pharmacy services and medication safety programs is the elderly, who are at risk for adverse drug events due to their many co-morbidities and the number of medications often used. This article describes the medication safety systems and provides a blueprint for creating a foundation for medication safety programs within healthcare organizations. The specific role of pharmacists and clinical pharmacy services in medication safety is also discussed here and in other articles in this Theme Issue.

Classification analysis of organization factors related to system safety

International Nuclear Information System (INIS)

Liu Huizhen; Zhang Li; Zhang Yuling; Guan Shihua

2009-01-01

This paper analyzes the different types of organization factors which influence the system safety. The organization factor can be divided into the interior organization factor and exterior organization factor. The latter includes the factors of political, economical, technical, law, social culture and geographical, and the relationships among different interest groups. The former includes organization culture, communication, decision, training, process, supervision and management and organization structure. This paper focuses on the description of the organization factors. The classification analysis of the organization factors is the early work of quantitative analysis. (authors)

Time Based Workload Analysis Method for Safety-Related Operator Actions in Safety Analysis

Energy Technology Data Exchange (ETDEWEB)

Kim, Yun Goo; Oh, Eung Se [Korea Hydro and Nuclear Power Co., Daejeon (Korea, Republic of)

2016-05-15

During the design basis event, the safety system performs safety functions to mitigate the event. The most of safety system is actuated by automatic system however, there are operator manual actions that are needed for the plant safety. These operator actions are classified as important human actions in human factors engineering design. The human factors engineering analysis and evaluation is needed for these important human actions to assure that operator successfully perform their tasks for plant safety and operational goals. The work load analysis is one of the required analysis for the important human actions.

Time Based Workload Analysis Method for Safety-Related Operator Actions in Safety Analysis

International Nuclear Information System (INIS)

Kim, Yun Goo; Oh, Eung Se

2016-01-01

During the design basis event, the safety system performs safety functions to mitigate the event. The most of safety system is actuated by automatic system however, there are operator manual actions that are needed for the plant safety. These operator actions are classified as important human actions in human factors engineering design. The human factors engineering analysis and evaluation is needed for these important human actions to assure that operator successfully perform their tasks for plant safety and operational goals. The work load analysis is one of the required analysis for the important human actions.

Evaluating safety management system implementation

International Nuclear Information System (INIS)

Preuss, M.

2009-01-01

Canada is committed to not only maintaining, but also improving upon our record of having one of the safest aviation systems in the world. The development, implementation and maintenance of safety management systems is a significant step towards improving safety performance. Canada is considered a world leader in this area and we are fully engaged in implementation. By integrating risk management systems and business practices, the aviation industry stands to gain better safety performance with less regulatory intervention. These are important steps towards improving safety and enhancing the public's confidence in the safety of Canada's aviation system. (author)

Safety related experience in FFTF startup and operation

International Nuclear Information System (INIS)

Peterson, R.E.; Halverson, T.G.; Daughtry, J.W.

1982-06-01

The Fast Flux Test Facility (FFTF) is a 400 MW(t) sodium cooled fast reactor operating at the Hanford Engineering Development Laboratory, Richland, Washington, to conduct fuels and materials testing in support of the US LMFBR program. Startup and initial power ascension testing of the facility involved a comprehensive series of readiness reviews and acceptance tests, many of which relate to the inherent safety of the plant. Included are physics measurements, natural circulation, integrated containment leakage, shielding effectiveness, fuel failure detection, and plant protection system tests. Described are the measurements taken to confirm the design safety margins upon which the operating authorization of the plant was based. These measurements demonstrate that large margins of safety are available in the FFTF design

Recent advances in systems safety and security

CERN Document Server

Stamatescu, Grigore

2016-01-01

This book represents a timely overview of advances in systems safety and security, based on selected, revised and extended contributions from the 2nd and 3rd editions of the International Workshop on Systems Safety and Security – IWSSS, held in 2014 and 2015, respectively, in Bucharest, Romania. It includes 14 chapters, co-authored by 34 researchers from 7 countries. The book provides an useful reference from both theoretical and applied perspectives in what concerns recent progress in this area of critical interest. Contributions, broadly grouped by core topic, address challenges related to information theoretic methods for assuring systems safety and security, cloud-based solutions, image processing approaches, distributed sensor networks and legal or risk analysis viewpoints. These are mostly accompanied by associated case studies providing additional practical value and underlying the broad relevance and impact of the field.

Integrated therapy safety management system.

Science.gov (United States)

Podtschaske, Beatrice; Fuchs, Daniela; Friesdorf, Wolfgang

2013-09-01

The aim is to demonstrate the benefit of the medico-ergonomic approach for the redesign of clinical work systems. Based on the six layer model, a concept for an 'integrated therapy safety management' is drafted. This concept could serve as a basis to improve resilience. The concept is developed through a concept-based approach. The state of the art of safety and complexity research in human factors and ergonomics forms the basis. The findings are synthesized to a concept for 'integrated therapy safety management'. The concept is applied by way of example for the 'medication process' to demonstrate its practical implementation. The 'integrated therapy safety management' is drafted in accordance with the six layer model. This model supports a detailed description of specific work tasks, the corresponding responsibilities and related workflows at different layers by using the concept of 'bridge managers'. 'Bridge managers' anticipate potential errors and monitor the controlled system continuously. If disruptions or disturbances occur, they respond with corrective actions which ensure that no harm results and they initiate preventive measures for future procedures. The concept demonstrates that in a complex work system, the human factor is the key element and final authority to cope with the residual complexity. The expertise of the 'bridge managers' and the recursive hierarchical structure results in highly adaptive clinical work systems and increases their resilience. The medico-ergonomic approach is a highly promising way of coping with two complexities. It offers a systematic framework for comprehensive analyses of clinical work systems and promotes interdisciplinary collaboration. © 2013 The Authors. British Journal of Clinical Pharmacology © 2013 The British Pharmacological Society.

Integrated therapy safety management system

Science.gov (United States)

Podtschaske, Beatrice; Fuchs, Daniela; Friesdorf, Wolfgang

2013-01-01

Aims The aim is to demonstrate the benefit of the medico-ergonomic approach for the redesign of clinical work systems. Based on the six layer model, a concept for an ‘integrated therapy safety management’ is drafted. This concept could serve as a basis to improve resilience. Methods The concept is developed through a concept-based approach. The state of the art of safety and complexity research in human factors and ergonomics forms the basis. The findings are synthesized to a concept for ‘integrated therapy safety management’. The concept is applied by way of example for the ‘medication process’ to demonstrate its practical implementation. Results The ‘integrated therapy safety management’ is drafted in accordance with the six layer model. This model supports a detailed description of specific work tasks, the corresponding responsibilities and related workflows at different layers by using the concept of ‘bridge managers’. ‘Bridge managers’ anticipate potential errors and monitor the controlled system continuously. If disruptions or disturbances occur, they respond with corrective actions which ensure that no harm results and they initiate preventive measures for future procedures. The concept demonstrates that in a complex work system, the human factor is the key element and final authority to cope with the residual complexity. The expertise of the ‘bridge managers’ and the recursive hierarchical structure results in highly adaptive clinical work systems and increases their resilience. Conclusions The medico-ergonomic approach is a highly promising way of coping with two complexities. It offers a systematic framework for comprehensive analyses of clinical work systems and promotes interdisciplinary collaboration. PMID:24007448

Technical evaluation of the susceptibility of safety-related systems to flooding caused by the failure of non-Category I systems for Turkey Point Nuclear Power Plant, Units 3 and 4

International Nuclear Information System (INIS)

Collins, E.K.

1979-08-01

Three separate reviews of the Turkey Point Units 3 and 4 were conducted by the FPLCO between 1972 and 1975. Initially, at the request of NBC in 1972, the FPLCO reviewed several water systems as sources of flooding. Subsequently, as a result of an abnormal occurrence, the drainage system was reviewed. Finally, the facilities were again reviewed at NRC's request and both the potential sources of flooding and safety-related equipment which could be damaged by flooding were identified. The sources of flooding and the appropriate safety equipment are discussed. An evaluation is presented of measures that were taken by FPLCO to minimize the danger of flooding and to protect safety-related equipment

Quality Control Activities Related to Mechanical Maintenance of Safety Related Components at Krsko NPP

International Nuclear Information System (INIS)

Djakovic, D.

2016-01-01

For successful, safe and reliable operation of nuclear power plant, maintenance processes have to be systematically controlled and procedures for quality control of maintenance activities shall be established. This is requested by the quality assurance program, which shall provide control over activities affecting the quality of structures, systems, and components, considering their importance to safety. As a part of Quality and Nuclear Oversight Division (QNOD; SKV), the Quality Control Department (QC) provides quality control activities, which are deeply involved in maintenance processes at Krsko NPP, both on safety related and non-safety related (non-nuclear safety) components. QC activities on safety related components have to fulfil all requirements, which will enable the components to perform their intended safety functions. This paper describes quality control activities related to mechanical maintenance of safety related components at Krsko NPP and significant role of the Krsko plant QC Department in three particular maintenance cases connected with safety related components. In these three specific cases, the QC has confirmed its importance in compliance with quality assurance program and presented its significant added value in providing safe and reliable operation of the plant. The first maintenance activity was installation of nozzle check valves in the scope of a modification for improving regulation of spent fuel pit pumps. The QC Department performed receipt inspection of the valves. Using non-destructive examination methods and X-ray spectrometry, it was found out that the valve diffuser was made of improper material, which could cause progressive corrosion of the valve diffuser in borated water and consequently a loss of safety function of the valves followed by long-term consequences. The second one was the receipt inspection of containment ventilation fan coolers. The coolers were claimed and sent back to the supplier because the QC Department

Adoption of digital safety protection system in Japan

International Nuclear Information System (INIS)

Ogiso, Z.

1998-01-01

The application of micro-processor-based digital controllers has been widely propagated among various industries in recent years. While in the nuclear power plant industry, the application of them has also been expanding gradually starting from non-safety related systems, taking advantage of their reliability and maintainability over the conventional analog devices. Based on the careful study of the feasibility of digital controllers to the safety protection system, the Tokyo Electric Power Company proposed on May 1989 the adoption of digital controllers to the safety protection system in the Application for Permission of Establishment of Kashiwazaki-Kariwa units 6 and 7 (ABWR-1350Mwe each). MITI, Ministry of International Trade and Industry, the Japanese regulatory body for electric power generating facilities, had approved this application after careful review. This paper describes a series of supporting activities leading to the MITI's approval of the digital safety protection system and the MITI's licensing activities. (author)

Development of safety related technology and infrastructure for safety assessment

International Nuclear Information System (INIS)

Venkat Raj, V.

1997-01-01

Development and optimum utilisation of any technology calls for the building up of the necessary infrastructure and backup facilities. This is particularly true for a developing country like India and more so for an advanced technology like nuclear technology. Right from the inception of its nuclear power programme, the Indian approach has been to develop adequate infrastructure in various areas such as design, construction, manufacture, installation, commissioning and safety assessment of nuclear plants. This paper deals with the development of safety related technology and the relevant infrastructure for safety assessment. A number of computer codes for safety assessment have been developed or adapted in the areas of thermal hydraulics, structural dynamics etc. These codes have undergone extensive validation through data generated in the experimental facilities set up in India as well as participation in international standard problem exercises. Side by side with the development of the tools for safety assessment, the development of safety related technology was also given equal importance. Many of the technologies required for the inspection, ageing assessment and estimation of the residual life of various components and equipment, particularly those having a bearing on safety, were developed. This paper highlights, briefly, the work carried out in some of the areas mentioned above. (author)

Technical features of ABWR safety systems

International Nuclear Information System (INIS)

Sugisaki, Toshihiko; Tominaga, Kenji; Horiuchi, Tetsuo

1986-01-01

The engineering safety facilities of ABWRs have been disigned so as to have many excellent characteristics such as safety, reliability and economy, reflecting the merit of adopting new technology such as internal pumps and new control rod driving mechanism, and coupled with the safety peculiar to BWRs. In this paper, about ECCS, containment vessels and others which compose the engineering safety facilities of ABWRs, the characteristics related to the safety owing to the adoption of internal pumps and others, and the evaluation of the performance at the time of various accidents are discussed. As the results of safety evaluation, it was clarified that due to the safety peculiar to ABWRs and the characteristics of the safety facilities, the large increases of safety, reliability and economy have been planned in the ABWRs, and for example, core flooding can be maintained even at the time of a hypothetical loss of coolant accident. BWRs have the simple system constitution, good self controllability, large natural circulation ability, simple operation control method and excellent ability of confining heat and radioactivity. BWRs have three safety functions to stop reactors, to remove heat from reactors, and to confine radioactive substances. These functions of ABWRs were evaluated, and very high safety was confirmed. (Kako, I.)

Effect of Occupational Health and Safety Management System on Work-Related Accident Rate and Differences of Occupational Health and Safety Management System Awareness between Managers in South Korea's Construction Industry.

Science.gov (United States)

Yoon, Seok J; Lin, Hsing K; Chen, Gang; Yi, Shinjea; Choi, Jeawook; Rui, Zhenhua

2013-12-01

The study was conducted to investigate the current status of the occupational health and safety management system (OHSMS) in the construction industry and the effect of OHSMS on accident rates. Differences of awareness levels on safety issues among site general managers and occupational health and safety (OHS) managers are identified through surveys. The accident rates for the OHSMS-certified construction companies from 2006 to 2011, when the construction OHSMS became widely available, were analyzed to understand the effect of OHSMS on the work-related injury rates in the construction industry. The Korea Occupational Safety and Health Agency 18001 is the certification to these companies performing OHSMS in South Korea. The questionnaire was created to analyze the differences of OHSMS awareness between site general managers and OHS managers of construction companies. The implementation of OHSMS among the top 100 construction companies in South Korea shows that the accident rate decreased by 67% and the fatal accident rate decreased by 10.3% during the period from 2006 to 2011. The survey in this study shows different OHSMS awareness levels between site general managers and OHS managers. The differences were motivation for developing OHSMS, external support needed for implementing OHSMS, problems and effectiveness of implementing OHSMS. Both work-related accident and fatal accident rates were found to be significantly reduced by implementing OHSMS in this study. The differences of OHSMS awareness between site general managers and OHS managers were identified through a survey. The effect of these differences on safety and other benefits warrants further research with proper data collection.

Architecture Level Safety Analyses for Safety-Critical Systems

Directory of Open Access Journals (Sweden)

K. S. Kushal

2017-01-01

Full Text Available The dependency of complex embedded Safety-Critical Systems across Avionics and Aerospace domains on their underlying software and hardware components has gradually increased with progression in time. Such application domain systems are developed based on a complex integrated architecture, which is modular in nature. Engineering practices assured with system safety standards to manage the failure, faulty, and unsafe operational conditions are very much necessary. System safety analyses involve the analysis of complex software architecture of the system, a major aspect in leading to fatal consequences in the behaviour of Safety-Critical Systems, and provide high reliability and dependability factors during their development. In this paper, we propose an architecture fault modeling and the safety analyses approach that will aid in identifying and eliminating the design flaws. The formal foundations of SAE Architecture Analysis & Design Language (AADL augmented with the Error Model Annex (EMV are discussed. The fault propagation, failure behaviour, and the composite behaviour of the design flaws/failures are considered for architecture safety analysis. The illustration of the proposed approach is validated by implementing the Speed Control Unit of Power-Boat Autopilot (PBA system. The Error Model Annex (EMV is guided with the pattern of consideration and inclusion of probable failure scenarios and propagation of fault conditions in the Speed Control Unit of Power-Boat Autopilot (PBA. This helps in validating the system architecture with the detection of the error event in the model and its impact in the operational environment. This also provides an insight of the certification impact that these exceptional conditions pose at various criticality levels and design assurance levels and its implications in verifying and validating the designs.

SACS2: Dynamic and Formal Safety Analysis Method for Complex Safety Critical System

International Nuclear Information System (INIS)

Koh, Kwang Yong; Seong, Poong Hyun

2009-01-01

Fault tree analysis (FTA) is one of the most widely used safety analysis technique in the development of safety critical systems. However, over the years, several drawbacks of the conventional FTA have become apparent. One major drawback is that conventional FTA uses only static gates and hence can not capture dynamic behaviors of the complex system precisely. Although several attempts such as dynamic fault tree (DFT), PANDORA, formal fault tree (FFT) and so on, have been made to overcome this problem, they can not still do absolute or actual time modeling because they adapt relative time concept and can capture only sequential behaviors of the system. Second drawback of conventional FTA is its lack of rigorous semantics. Because it is informal in nature, safety analysis results heavily depend on an analyst's ability and are error-prone. Finally reasoning process which is to check whether basic events really cause top events is done manually and hence very labor-intensive and timeconsuming for the complex systems. In this paper, we propose a new safety analysis method for complex safety critical system in qualitative manner. We introduce several temporal gates based on timed computational tree logic (TCTL) which can represent quantitative notion of time. Then, we translate the information of the fault trees into UPPAAL query language and the reasoning process is automatically done by UPPAAL which is the model checker for time critical system

Resistance ability evaluation of safety-related structures for the simulated aircraft accident

Energy Technology Data Exchange (ETDEWEB)

Kim, Young Jin; Kim, Sung Woon; Choi, Jang Kyu [Daewoo E and C Co., Ltd., Suwon (Korea, Republic of)] (and others)

2003-03-15

Aircraft accidents on nuclear safety-related structures can cause severe damage to the safety of NPP(Nuclear Power Plant)s. To assess the safety of nuclear safety-related structures, the local damage and the dynamic response of global structures should be investigated together. This study have compared several local damage assessment formulas suggested for aircraft as an impactor, and have set the assessment system of local damage for impact-proof design of NPP containment buildings. And the local damage of nuclear safety-related structures in operation in Korea for commercial aircraft as impactor have been estimated. Impact load-time functions of the aircraft crash have been decided to assessment the safety of nuclear safety-related structures against the intentional colliding of commercial aircraft. Boeing 747 and Boeing 767 is selected as target aircraft based on the operation frequencies and weights. Comparison of the fire analysis methods showed that the method considering heat convection and radiation is adequate for the temperature analysis of the aircraft fuel fire. Finally, the study covered the analysis of the major structural drawings and design drawings with which three-dimensional finite element model analysis is expected to be performed.

An Integrated Safety Assessment Methodology for Generation IV Nuclear Systems

International Nuclear Information System (INIS)

Leahy, Timothy J.

2010-01-01

The Generation IV International Forum (GIF) Risk and Safety Working Group (RSWG) was created to develop an effective approach for the safety of Generation IV advanced nuclear energy systems. Early work of the RSWG focused on defining a safety philosophy founded on lessons learned from current and prior generations of nuclear technologies, and on identifying technology characteristics that may help achieve Generation IV safety goals. More recent RSWG work has focused on the definition of an integrated safety assessment methodology for evaluating the safety of Generation IV systems. The methodology, tentatively called ISAM, is an integrated 'toolkit' consisting of analytical techniques that are available and matched to appropriate stages of Generation IV system concept development. The integrated methodology is intended to yield safety-related insights that help actively drive the evolving design throughout the technology development cycle, potentially resulting in enhanced safety, reduced costs, and shortened development time.

Analyzing Software Errors in Safety-Critical Embedded Systems

Science.gov (United States)

Lutz, Robyn R.

1994-01-01

This paper analyzes the root causes of safty-related software faults identified as potentially hazardous to the system are distributed somewhat differently over the set of possible error causes than non-safety-related software faults.

Safety system for child pillion riders of underbone motorcycles in Malaysia.

Science.gov (United States)

Sivasankar, S; Karmegam, K; Bahri, M T Shamsul; Naeini, H Sadeghi; Kulanthayan, S

2014-01-01

Motorcycles are a common mode of transport for most Malaysians. Underbone motorcycles are one of the most common types of motorcycle used in Malaysia due to their affordable price and ease of use, especially in heavy traffic in the major cities. In Malaysia, it is common to see a young or child pillion rider clinging on to an adult at the front of the motorcycle. One of the main issues facing young pillion riders is that their safety is often not taken into account when they are riding on a motorcycle. This article reviews the legally available systems in child safety for underbone motorcycles in Malaysia while putting forth the need for a safety system for child pillion riders. Various databases were searched for underbone motorcycle safety systems, related legislation, motorcycle accident data, and types of injuries and these were reviewed to put forth the need for a new safety system. In motorcycle-related accidents, children usually sustain lower limb injuries, which could temporarily or permanently inhibit the child's movements. Accident statistics in Malaysia, especially those involving motorcycles, reflect a pressing need for a reduction in the number of accidents. In Malaysia, the legislation does not go beyond the mandatory use of safety helmets for young pillion users. There is a pressing need for another safety system or mechanism(s) for young pillion riders of underbone motorcycles. Enforcement of laws to enforce the usage of passive safety systems such as helmets and protective gear is difficult in underdeveloped and developing countries. The intervention of new technology is inevitable. Therefore, this article highlights the need for a new safety backrest system for child pillion riders to ensure their safety.

Undetected latent failures of safety-related systems. Preliminary survey of events in nuclear power plants 1980-1997

International Nuclear Information System (INIS)

Lydell, B.

1998-03-01

This report summarizes results and insights from a preliminary survey of events involving undetected, latent failures of safety-related systems. The survey was limited to events where mispositioned equipment (e.g., valves, switches) remained undetected, thus rendering standby equipment or systems unavailable for short or long time periods. Typically, these events were symptoms of underlying latent errors (e.g., design errors, procedure errors, unanalyzed safety conditions) and programmatic errors. The preliminary survey identified well over 300 events. Of these, 95 events are documented in this report. Events involving mispositioned equipment are commonplace. Most events are discovered soon after occurrence, however. But as evidenced by the survey results, some events remained undetected beyond several shift changes. The recommendations developed by the survey emphasize the importance of applying modern root cause analysis techniques to the event analysis to ensure that the causes and implications of occurred events are fully understood

Development and implementation of setpoint tolerances for special safety systems

International Nuclear Information System (INIS)

Oliva, A.F.; Balog, G.; Parkinson, D.G.; Archinoff, G.H.

1991-01-01

The establishment of tolerances and impairment limits for special safety system setpoints is part of the process whereby the plant operator demonstrates to the regulatory authority that the plant operates safely and within the defined plant licensing envelope. The licensing envelope represents the set of limits and plant operating state and for which acceptably safe plant operation has been demonstrated by the safety analysis. By definition, operation beyond this envelope contributes to overall safety system unavailability. Definition of the licensing envelope is provided in a wide range of documents including the plant operating licence, the safety report, and the plant operating policies and principles documents. As part of the safety analysis, limits are derived for each special safety system initiating parameter such that the relevant safety design objectives are achieved for all design basis events. If initiation on a given parameter occurs at a level beyond its limit, there is a potential reduction in safety system effectiveness relative to the performance credited in the plant safety analysis. These safety system parameter limits, when corrected for random and systematic instrument errors and other errors inherent in the process of periodic testing or calibration, are then used to derive parameter impairment levels and setpoint tolerances. This paper describes the methodology that has evolved at Ontario Hydro for developing and implementing tolerances for special safety system parameters (i.e., the shutdown systems, emergency coolant injection system and containment system). Tolerances for special safety system initiation setpoints are addressed specifically, although many of the considerations discussed here will apply to performance limits for other safety system components. The first part of the paper deals with the approach that has been adopted for defining and establishing setpoint limits and tolerances. The remainder of the paper addresses operational

FOOD SAFETY CONTROL SYSTEM IN CHINA

Institute of Scientific and Technical Information of China (English)

Liu Wei-jun; Wei Yi-min; Han Jun; Luo Dan; Pan Jia-rong

2007-01-01

Most countries have expended much effort to develop food safety control systems to ensure safe food supplies within their borders. China, as one of the world's largest food producers and consumers,pays a lot of attention to food safety issues. In recent years, China has taken actions and implemented a series of plans in respect to food safety. Food safety control systems including regulatory, supervisory,and science and technology systems, have begun to be established in China. Using, as a base, an analysis of the current Chinese food safety control system as measured against international standards, this paper discusses the need for China to standardize its food safety control system. We then suggest some policies and measures to improve the Chinese food safety control system.

Development of a Safety Assessment Information System for the Management of Periodic Safety Assessment Activities

International Nuclear Information System (INIS)

Song, Tae Young

2007-01-01

At present, the 10-year Periodic Safety Review(PSR) has been performing to confirm all the aspects of safety issues for all the operating plants in compliance with domestic nuclear law of article 23, subarticle 3. For each plant, in addition, Probabilistic Safety Assessment(PSA) and Severe Accident Management Guideline(SAMG) are being implemented and revised periodically to reflect the latest safety level according to principle fulfillment of severe accident policy statement. The assessment reports, as one of outcomes from these activities, are submitted into and reviewed by domestic regulatory body. During reviewing (in-office duty) and licensing (regulatory duty) process, a large number of outcomes of which most are the formal technical reports and licensing materials, are inevitably produced. Moreover, repeated review process over the plants can make them accumulated and produce a variety of documents additionally. This circumstance motivates to develop effective tool or system for the management of these reports and related technical documents for the future use in licensing process and for subsequent plant assessments. This paper presents the development status of Safety Assessment Information System(SAIS) which manages safety-related documents of PSR, PSA and SAMG for practical use for experienced engineers in charge of these areas

Development of a Safety Assessment Information System for the Management of Periodic Safety Assessment Activities

Energy Technology Data Exchange (ETDEWEB)

Song, Tae Young [Nuclear Engineering and Technology Institute, Daejeon (Korea, Republic of)

2007-07-01

At present, the 10-year Periodic Safety Review(PSR) has been performing to confirm all the aspects of safety issues for all the operating plants in compliance with domestic nuclear law of article 23, subarticle 3. For each plant, in addition, Probabilistic Safety Assessment(PSA) and Severe Accident Management Guideline(SAMG) are being implemented and revised periodically to reflect the latest safety level according to principle fulfillment of severe accident policy statement. The assessment reports, as one of outcomes from these activities, are submitted into and reviewed by domestic regulatory body. During reviewing (in-office duty) and licensing (regulatory duty) process, a large number of outcomes of which most are the formal technical reports and licensing materials, are inevitably produced. Moreover, repeated review process over the plants can make them accumulated and produce a variety of documents additionally. This circumstance motivates to develop effective tool or system for the management of these reports and related technical documents for the future use in licensing process and for subsequent plant assessments. This paper presents the development status of Safety Assessment Information System(SAIS) which manages safety-related documents of PSR, PSA and SAMG for practical use for experienced engineers in charge of these areas.

Application of life-cycle information for advancement in safety of nuclear fuel cycle facilities. Application of safety information to advanced safety management support system

International Nuclear Information System (INIS)

Suzuki, Kazuhiko; Ishida, Michihiko

2005-08-01

Risk management is major concern to nuclear energy reprocessing plants to improve plant and process reliability and ensure their safety. This is because we are required to predict potential risks before any accident or disaster occurs. The advancement of safety design and safety systems technologies showed large amount of useful safety-related knowledge that can be of great importance to plant operation to reduce operation risks and ensure safety. This research proposes safety knowledge modeling framework on the basis of ontology technologies to systematically construct plant knowledge model, which includes plant structure, operation, and the associated behaviors. In such plant knowledge model safety related information is defined and linked to the different elements of plant knowledge model. Ontology editor is employed to define the basic concepts and their inter-relations, which are used to capture and construct plant safety knowledge. In order to provide detailed safety knowledgebase, HAZOP results are analyzed and structured so that safety-related knowledge are identified and structured within the plant knowledgebase. The target safety knowledgebase includes: failures, deviations, causes, consequences, and fault propagation as mapped to plant knowledge. The proposed ontology-based safety framework is applied on case study nuclear plant to structure failures, causes, consequences, and fault propagation, which are used to support plant operation. (author)

Safety review on unit testing of safety system software of nuclear power plant

International Nuclear Information System (INIS)

Liu Le; Zhang Qi

2013-01-01

Software unit testing has an important place in the testing of safety system software of nuclear power plants, and in the wider scope of the verification and validation. It is a comprehensive, systematic process, and its documentation shall meet the related requirements. When reviewing software unit testing, attention should be paid to the coverage of software safety requirements, the coverage of software internal structure, and the independence of the work. (authors)

SBO simulations for Integrated Passive Safety System (IPSS) using MARS

International Nuclear Information System (INIS)

Kim, Sang Ho; Jeong, Sung Yeop; Chang, Soon Heung

2012-01-01

The current nuclear power plants have lots of active safety systems with some passive safety systems. The safety of current and future nuclear power plants can be enhanced by the application of additional passive safety systems for the ultimate safety. It is helpful to install the passive safety systems on current nuclear power plants without the design change for the licensibility. For solving the problem about the system complexity shown in the Fukushima accidents, the current nuclear power plants are needed to be enhanced by an additional integrated and simplified system. As a previous research, the integrated passive safety system (IPSS) was proposed to solve the safety issues related with the decay heat removal, containment integrity and radiation release. It could be operated by natural phenomena like gravity, natural circulation and pressure difference without AC power. The five main functions of IPSS are: (a) Passive decay heat removal, (b) Passive emergency core cooling, (c) Passive containment cooling, (d) Passive in vessel retention and ex-vessel cooling, and (e) Filtered venting and pressure control. The purpose of this research is to analyze the performances of each function by using MARS code. The simulated accident scenarios were station black out (SBO) and the additional accidents accompanied by SBO

The passive safety systems of the Swr 1000

International Nuclear Information System (INIS)

Neumann, D.

2001-01-01

In recent years, a new boiling water reactor (BWR) plant called the SWR 1000 has been developed by Siemens on behalf of Germany's electric utilities. This new plant design concept incorporates the wide range of operating experience gained with German BWRs. The main objective behind developing the SWR 1000 was to design a plant with a rated electric output of approximately 1000 MW which would not only have a lower capital cost and lower power generating costs but would also provide a much higher level of nuclear safety compared to plants currently in operation. This safety-related goal has been met through, for example, the use of passive safety equipment. Passive systems make a significant contribution towards increasing the over-all level of plant safety due to the way in which they operate. They function solely accord-ing to basic laws of nature, such as gravity, and perform their designated functions with-out any need for electric power or other sources of external energy, or signals from instrumentation and control (I and C) equipment. The passive safety systems have been designed such that design basis accidents can be controlled using just these systems alone. However, the design concept of the SWR 1000 is nevertheless still based on the provision of active safety systems in addition to passive systems. (author)

The socio-technical system and nuclear safety

International Nuclear Information System (INIS)

Stefanescu, Petre; Mihailescu, Nicolae; Dragusin, Octavian

1999-01-01

In the field of nuclear safety there have been defined notions like 'technical factors' and 'human factors'. The technical factors depend on designing and manufacturing of components/equipment, actually depend on the people's work. The study of human factors consists in analyzing and recommending the terms that allow an individual to be a reliable and safety agent. Accordingly, he/she is placed in working conditions corresponding to human abilities, associating the means of three levels: - designing, i.e. the action upon the technical system and upon work organization; - correction, i.e. the action upon the evolution of the technical system and organizing; - formation/training, i.e. action upon operators. The paper presents a characterization of the socio-technical system and on this basis discusses the issue of individual adjustment to the socio-technical system and reciprocally, the issue of the socio-technical system adjustment to the individual. Concepts as: ergonomics, physical medium, man/machine interface and support of the operator, man/machine task sharing, the work organizing are put in relation with the central subject, the nuclear safety

Probabilistic approaches to LCO's and surveillance requirements for standby safety systems

International Nuclear Information System (INIS)

Lofgren, E.V.; Varcolik, F.

1982-11-01

Results are presented for a comprehensive analysis of risk-based methods for establishing Limiting Conditions for Operation (LCO) and surveillance requirements for on-line test and repair of nuclear power plant safety system components. Limiting Conditions for Operation refers to the legal constraint on safety system component outage times that are imposed by the NRC as part of the reactor operating license. Generally, when a safety system component is removed for repair or test for a period of time there is a period of increased vulnerability concerning the probability that the affected safety system will be available to mitigate an accident. This period of increased vulnerability exists until the component is restored to service. The constraint on the duration of this period, the allowed outage time (AOT), is the aspect of LCOs that is of interest here. In particular, methods are reviewed and developed that relate measures of risk to the AOT. Only by explicitly relating risk to AOT can outage times be constrained by placing limits on risk. Methods developed for relating risk measures to outage times are presented. The review and analysis of risk related methods for establishing LCOs are described

Research on integrated managing system based on CIMS for nuclear power plant safety

International Nuclear Information System (INIS)

Zhou Gang

2006-01-01

In order to improve safety, economy and reliability of operation for nuclear power plant (NPP), a novel integrated managing method was proposed based on the ideas of computer and contemporary integrated manufacturing system (CIMS). The application of CIMS to nuclear power plant safety management was researched. In order to design an integrated managing system to meet the needs of NPP safety management, all work related to nuclear safety is divided into different category according to its characters. On basis of this work, general integrated managing system was designed at first. Then subsystems were designed and every subsystem implements a category of nuclear safety management work. All subsystems are independent relatively on the one hand and are interrelated on other hand by global information system. (authors)

Identification of Crew-Systems Interactions and Decision Related Trends

Science.gov (United States)

Jones, Sharon Monica; Evans, Joni K.; Reveley, Mary S.; Withrow, Colleen A.; Ancel, Ersin; Barr, Lawrence

2013-01-01

NASA Vehicle System Safety Technology (VSST) project management uses systems analysis to identify key issues and maintain a portfolio of research leading to potential solutions to its three identified technical challenges. Statistical data and published safety priority lists from academic, industry and other government agencies were reviewed and analyzed by NASA Aviation Safety Program (AvSP) systems analysis personnel to identify issues and future research needs related to one of VSST's technical challenges, Crew Decision Making (CDM). The data examined in the study were obtained from the National Transportation Safety Board (NTSB) Aviation Accident and Incident Data System, Federal Aviation Administration (FAA) Accident/Incident Data System and the NASA Aviation Safety Reporting System (ASRS). In addition, this report contains the results of a review of safety priority lists, information databases and other documented references pertaining to aviation crew systems issues and future research needs. The specific sources examined were: Commercial Aviation Safety Team (CAST) Safety Enhancements Reserved for Future Implementation (SERFIs), Flight Deck Automation Issues (FDAI) and NTSB Most Wanted List and Open Recommendations. Various automation issues taxonomies and priority lists pertaining to human factors, automation and flight design were combined to create a list of automation issues related to CDM.

Maintenance of radiation safety information system

Energy Technology Data Exchange (ETDEWEB)

Choi, Ho Sun [Korea Institute of Nuclear Safety, Taejon (Korea, Republic of); Park, Moon Il; Chung, Chong Kyu; Lim, Bock Soo; Kim, Hyung Uk; Chang, Kwang Il; Nam, Kwan Hyun; Cho, Hye Ryan [AD center incubation LAB, Taejon (Korea, Republic of)

2001-12-15

The objectives of radiation safety information system maintenance are to maintain the requirement of users, change of job process and upgrade of the system performance stably and effectively while system maintenance. We conduct the code of conduct recommended by IAEA, management of radioisotope inventory database systematically using analysis for the state of inventory database integrated in this system. This system and database will be support the regulatory guidance, rule making and information to the MOST, KINS, other regulatory related organization and general public optimizationally.

Reporter Concerns in 300 Mode-Related Incident Reports from NASA's Aviation Safety Reporting System

Science.gov (United States)

McGreevy, Michael W.

1996-01-01

A model has been developed which represents prominent reporter concerns expressed in the narratives of 300 mode-related incident reports from NASA's Aviation Safety Reporting System (ASRS). The model objectively quantifies the structure of concerns which persist across situations and reporters. These concerns are described and illustrated using verbatim sentences from the original narratives. Report accession numbers are included with each sentence so that concerns can be traced back to the original reports. The results also include an inventory of mode names mentioned in the narratives, and a comparison of individual and joint concerns. The method is based on a proximity-weighted co-occurrence metric and object-oriented complexity reduction.

Qualification of safety-related valve actuators

International Nuclear Information System (INIS)

Anon.

1981-01-01

This Standard describes the qualification of all types of power-driven valve actuators, including damper actuators, for safety-related functions in nuclear power generating stations. It may also be used to separately qualify actuator components. This Standard establishes the minimum requirements for, and guidance regarding, the methods and procedures for qualification of all safety-related functions of power-driven valve actuators

Highway Safety Program Manual: Volume 8: Alcohol in Relation to Highway Safety.

Science.gov (United States)

National Highway Traffic Safety Administration (DOT), Washington, DC.

Volume 8 of the 19-volume Highway Safety Program Manual (which provides guidance to State and local governments on preferred highway safety practices) concentrates on alcohol in relation to highway safety. The purpose and objectives of the alcohol program are outlined. Federal authority in the area of highway safety and general policies regarding…

Undetected latent failures of safety-related systems. Preliminary survey of events in nuclear power plants 1980-1997

Energy Technology Data Exchange (ETDEWEB)

Lydell, B. [RSA Technologies, Vista, CA (United States)

1998-03-01

This report summarizes results and insights from a preliminary survey of events involving undetected, latent failures of safety-related systems. The survey was limited to events where mispositioned equipment (e.g., valves, switches) remained undetected, thus rendering standby equipment or systems unavailable for short or long time periods. Typically, these events were symptoms of underlying latent errors (e.g., design errors, procedure errors, unanalyzed safety conditions) and programmatic errors. The preliminary survey identified well over 300 events. Of these, 95 events are documented in this report. Events involving mispositioned equipment are commonplace. Most events are discovered soon after occurrence, however. But as evidenced by the survey results, some events remained undetected beyond several shift changes. The recommendations developed by the survey emphasize the importance of applying modern root cause analysis techniques to the event analysis to ensure that the causes and implications of occurred events are fully understood. 7 refs, 4 tabs, 3 figs. Also available at the SKI Home page: //www.ski.se.

Instrumentation and control systems important to safety in nuclear power plants. Safety guide

International Nuclear Information System (INIS)

2005-01-01

This Safety Guide was prepared under the IAEA programme for establishing safety standards for nuclear power plants. It supplements Safety Standards Series No. NS-R-1: Safety of Nuclear Power Plants: Design (the Requirements for Design), which establishes the design requirements for ensuring the safety of nuclear power plants. This Safety Guide describes how the requirements should be met for instrumentation and control (I and C) systems important to safety. This publication is a revision and combination of two previous Safety Guides: Safety Series Nos 50-SG-D3 and 50-SG-D8, which are superseded by this new Safety Guide. The revision takes account of developments in I and C systems important to safety since the earlier Safety Guides were published in 1980 and 1984, respectively. The objective of this Safety Guide is to provide guidance on the design of I and C systems important to safety in nuclear power plants, including all I and C components, from the sensors allocated to the mechanical systems to the actuated equipment, operator interfaces and auxiliary equipment. This Safety Guide deals mainly with design requirements for those I and C systems that are important to safety. It expands on paragraphs of Ref in the area of I and C systems important to safety. This publication is intended for use primarily by designers of nuclear power plants and also by owners and/or operators and regulators of nuclear power plants. This Safety Guide provides general guidance on I and C systems important to safety which is broadly applicable to many nuclear power plants. More detailed requirements and limitations for safe operation specific to a particular plant type should be established as part of the design process. The present guidance is focused on the design principles for systems important to safety that warrant particular attention, and should be applied to both the design of new I and C systems and the modernization of existing systems. Guidance is provided on how design

Light-water reactors. Safety problems and related studies in France

International Nuclear Information System (INIS)

Lelievre, J.

1975-01-01

The program of theoretical and experimental studies developed by the CEA on the safety of PWR reactors is presented: studies relative to the consequences of a LOCA following a rupture of the primary system, studies relative to fuel element behavior, studies on steels, reliability studies and studies of non-destructive testing methods [fr

How could intelligent safety transport systems enhance safety ?

NARCIS (Netherlands)

Wiethoff, M. Heijer, T. & Bekiaris, E.

2017-01-01

In Europe, many deaths and injured each years are the cost of today's road traffic. Therefore, it is wise to look for possible solutions for enhancing traffic safety. Some Advanced Driver Assistance Systems (ADAS) are expected to increase safety, but they may also evoke new safety hazards. Only

Airline Safety Management: The development of a proactive safety mechanism model for the evolution of safety management system

OpenAIRE

Hsu, Yueh-Ling

2004-01-01

The systemic origins of many accidents have led to heightened interest in the way in which organisations identify and manage risks within the airline industry. The activities which are thought to represent the term "organisational accident", "safety culture" and "proactive approach" are documented and seek to explain the fact that airlines differ in their willingness and ability to conduct safety management. However, an important but yet relatively undefined task in the airline...

Safety applications of computer based systems for the process industry

International Nuclear Information System (INIS)

Bologna, Sandro; Picciolo, Giovanni; Taylor, Robert

1997-11-01

Computer based systems, generally referred to as Programmable Electronic Systems (PESs) are being increasingly used in the process industry, also to perform safety functions. The process industry as they intend in this document includes, but is not limited to, chemicals, oil and gas production, oil refining and power generation. Starting in the early 1970's the wide application possibilities and the related development problems of such systems were recognized. Since then, many guidelines and standards have been developed to direct and regulate the application of computers to perform safety functions (EWICS-TC7, IEC, ISA). Lessons learnt in the last twenty years can be summarised as follows: safety is a cultural issue; safety is a management issue; safety is an engineering issue. In particular, safety systems can only be properly addressed in the overall system context. No single method can be considered sufficient to achieve the safety features required in many safety applications. Good safety engineering approach has to address not only hardware and software problems in isolation but also their interfaces and man-machine interface problems. Finally, the economic and industrial aspects of the safety applications and development of PESs in process plants are evidenced throughout all the Report. Scope of the Report is to contribute to the development of an adequate awareness of these problems and to illustrate technical solutions applied or being developed

Safety parameter display system: an operator support system for enhancement of safety in Indian PHWRs

International Nuclear Information System (INIS)

Subramaniam, K.; Biswas, T.

1994-01-01

Ensuring operational safety in nuclear power plants is important as operator errors are observed to contribute significantly to the occurrence of accidents. Computerized operator support systems, which process and structure information, can help operators during both normal and transient conditions, and thereby enhance safety and aid effective response to emergency conditions. An important operator aid being developed and described in this paper, is the safety parameter display system (SPDS). The SPDS is an event-independent, symptom-based operator aid for safety monitoring. Knowledge-based systems can provide operators with an improved quality of information. An information processing model of a knowledge based operator support system (KBOSS) developed for emergency conditions using an expert system shell is also presented. The paper concludes with a discussion of the design issues involved in the use of a knowledge based systems for real time safety monitoring and fault diagnosis. (author). 8 refs., 4 figs., 1 tab

Nuclear-power-safety reporting system: feasibility analysis

International Nuclear Information System (INIS)

Finlayson, F.C.; Ims, J.

1983-04-01

The US Nuclear Regulatory Commission (NRC) is evaluating the possibility of instituting a data gathering system for identifying and quantifying the factors that contribute to the occurrence of significant safety problems involving humans in nuclear power plants. This report presents the results of a brief (6 months) study of the feasibility of developing a voluntary, nonpunitive Nuclear Power Safety Reporting System (NPSRS). Reports collected by the system would be used to create a data base for documenting, analyzing and assessing the significance of the incidents. Results of The Aerospace Corporation study are presented in two volumes. This document, Volume I, contains a summary of an assessment of the Aviation Safety Reporting System (ASRS). The FAA-sponsored, NASA-managed ASRS was found to be successful, relatively low in cost, generally acceptable to all facets of the aviation community, and the source of much useful data and valuable reports on human factor problems in the nation's airways. Several significant ASRS features were found to be pertinent and applicable for adoption into a NPSRS

Safety concerns related to modular/prefabricated building construction.

Science.gov (United States)

Fard, Maryam Mirhadi; Terouhid, Seyyed Amin; Kibert, Charles J; Hakim, Hamed

2017-03-01

The US construction industry annually experiences a relatively high rate of fatalities and injuries; therefore, improving safety practices should be considered a top priority for this industry. Modular/prefabricated building construction is a construction strategy that involves manufacturing of the whole building or some of its components off-site. This research focuses on the safety performance of the modular/prefabricated building construction sector during both manufacturing and on-site processes. This safety evaluation can serve as the starting point for improving the safety performance of this sector. Research was conducted based on Occupational Safety and Health Administration investigated accidents. The study found 125 accidents related to modular/prefabricated building construction. The details of each accident were closely examined to identify the types of injury and underlying causes. Out of 125 accidents, there were 48 fatalities (38.4%), 63 hospitalized injuries (50.4%), and 14 non-hospitalized injuries (11.2%). It was found that, the most common type of injury in modular/prefabricated construction was 'fracture', and the most common cause of accidents was 'fall'. The most frequent cause of cause (underlying and root cause) was 'unstable structure'. In this research, the accidents were also examined in terms of corresponding location, occupation, equipment as well as activities during which the accidents occurred. For improving safety records of the modular/prefabricated construction sector, this study recommends that future research be conducted on stabilizing structures during their lifting, storing, and permanent installation, securing fall protection systems during on-site assembly of components while working from heights, and developing training programmes and standards focused on modular/prefabricated construction.

Organizational and methodological aspects for contemporary health and safety management system

Directory of Open Access Journals (Sweden)

Sugak Evgeny

2017-01-01

Full Text Available Industrial injuries and work-related disorders considerable lowering we are facing in developed countries may be due to switching to a new health and safety management system entitled “Occupational Safety and Health Management System”. The Russian Federation has prepared certain regulatory documents prescribing some suggestions regarding implementing the contemporary system for industrial injuries prevention based upon the methods for professional risks management. However, despite the efforts made by the Russian Government, reformation of the health and safety management system at various companies is being performed rather slowly that may be as well owing to poor competence of managers and specialists regarding contemporary labor safety model content, methodical and organizational novations in the sphere of occupational safety and health management.. The article refers to a number of principal issues distinguishing the new health and safety management system from conventional approach.

Comprehensive Lifecycle for Assuring System Safety

Science.gov (United States)

Knight, John C.; Rowanhill, Jonathan C.

2017-01-01

CLASS is a novel approach to the enhancement of system safety in which the system safety case becomes the focus of safety engineering throughout the system lifecycle. CLASS also expands the role of the safety case across all phases of the system's lifetime, from concept formation to decommissioning. As CLASS has been developed, the concept has been generalized to a more comprehensive notion of assurance becoming the driving goal, where safety is an important special case. This report summarizes major aspects of CLASS and contains a bibliography of papers that provide additional details.

An intelligent hybrid system for surface coal mine safety analysis

Energy Technology Data Exchange (ETDEWEB)

Lilic, N.; Obradovic, I.; Cvjetic, A. [University of Belgrade, Belgrade (Serbia)

2010-06-15

Analysis of safety in surface coal mines represents a very complex process. Published studies on mine safety analysis are usually based on research related to accidents statistics and hazard identification with risk assessment within the mining industry. Discussion in this paper is focused on the application of AI methods in the analysis of safety in mining environment. Complexity of the subject matter requires a high level of expert knowledge and great experience. The solution was found in the creation of a hybrid system PROTECTOR, whose knowledge base represents a formalization of the expert knowledge in the mine safety field. The main goal of the system is the estimation of mining environment as one of the significant components of general safety state in a mine. This global goal is subdivided into a hierarchical structure of subgoals where each subgoal can be viewed as the estimation of a set of parameters (gas, dust, climate, noise, vibration, illumination, geotechnical hazard) which determine the general mine safety state and category of hazard in mining environment. Both the hybrid nature of the system and the possibilities it offers are illustrated through a case study using field data related to an existing Serbian surface coal mine.

Report on safety related occurrences and reactor trips July 1, 1977 - December 31, 1977

International Nuclear Information System (INIS)

Andermo, L.; Sundman, B.

1974-04-01

This is a systematically arranged report on all reported safety related occurrences and reactor trips in Swedish nuclear power plants in operation during July 1 to December 31, 1977 inclusive. The facilities involved are Barsebaeck 1 and 2, Oskarshamn 1 and 2 and Ringhals 1 and 2. During this period of 6 months 48 safety related occurrences and 49 reactor trips have been reported to the Nuclear Power Inspectorate. Included is also one incident June 21 in Barsebaeck 2 which was not included in the last compilation of occurrences. As earlier experiences have shown it is to the greatest extent the conventional components which bring about the safety related occurrences or occurrences leading to outages or power reductions. However, the component errors discovered in the safety related systems have not affected the function of their redundant systems and other diverse systems have not been involved. Therefore the reactor safety has been satisfactory. The total number of reactor trips have increased nearly 30% since the last period. Those occurred during power operation however, were less. More than 50% of the reactor trips happened in the shutdown condition. The fact that even small deviations from prescribed operation result in automatic and safe shut down of the reactor, does not always imply a conflict with operational availability. The greatest outages are caused by occurrences withou02068NRM 0000169 450

DART - for design basis justification and safety related information management

International Nuclear Information System (INIS)

Billington, A.; Blondiaux, P.; Boucau, J.; Cantineau, B.; Doumont, C.; Mared, A.

2000-01-01

DART is the acronym for Design Analysis Re-engineering Tool. It embodies a systematic and integrated approach to NPP safety re-assessment and configuration management, that makes use of Reverse Failure Mode and Effect Analysis in conjunction with a state-of-the-art relational database and a standardized data format, to permit long-term management of plant safety related information. The plant design is reviewed in a step-by-step logical fashion by constructing fault trees that identify the link between undesired consequences and their causes. Each failure cause identified in a fault tree is addressed by defining functional requirements, which are in turn addressed by documenting the specific manner in which the plant complies with the requirement. The database can be used to generate up-to-date plant safety related documents, including: SAR, Systems Descriptions, Technical Specifications and plant procedures. The approach is open-minded by nature and therefore is not regulatory driven, however the plant licensing basis will also be reviewed and documented within the same database such that a Regulatory Conformance Program may be integrated with the other safety documentation. This methodology can thus reconstitute the plant design bases in a comprehensive and systematic way, while allowing to uncover weaknesses in design. The original feature of the DART methodology is that it links all the safety related documents together, facilitating the evaluation of the safety impact resulting from any plant modification. Due to its capability to retrieve the basic justifications of the plant design, it is also a useful tool for training the young generation of plant personnel. The DART methodology has been developed for application to units 2, 3 and 4 at Vattenfall's Ringhals site in Sweden. It may be applied to any nuclear power plant or industrial facility where public safety is a concern. (author)

DART - for design basis justification and safety related information management

International Nuclear Information System (INIS)

Billington, A.; Blondiaux, B.; Boucau, J.; Cantineau, B.; Mared, A.

2001-01-01

DART is the acronym for Design Analysis Re-Engineering Tool. It embodies a systematic and integrated approach to NPP safety re-assessment and configuration management, that makes use of Reverse Failure Mode and Effect Analysis in conjunction with a state-of-the-art relational database and a standardized data format, to permit long-term management of plant safety related information. The plant design is reviewed in a step-by-step logical fashion by constructing fault trees that identify the link between undesired consequences and their causes. Each failure cause identified in a fault tree is addressed by defining functional requirements, which are in turn addressed by documenting the specific manner in which the plant complies with the requirement. The database can then be used to generate up-to-date plant safety related documents, including: SAR, Systems Descriptions, Technical Specifications and plant procedures. The approach is open-minded by nature and therefore is not regulatory driven, however the plant licensing basis will also be reviewed and documented within the same database such that a Regulatory Conformance Program may be integrated with the other safety documentation. This methodology can thus reconstitute the plant design bases in a comprehensive and systematic way, while allowing to uncover weaknesses in design. The original feature of the DART methodology is that it links all the safety related documents together, facilitating the evaluation of the safety impact resulting from any plant modification. Due to its capability to retrieve the basic justifications of the plant design, it is also a useful tool for training the young generation of plant personnel. The DART methodology has been developed for application to units 2, 3 and 4 at Vattenfall's Ringhals site in Sweden. It may be applied to any nuclear power plant or industrial facility where public safety is a concern. (author)

Analysis on relation between safety input and accidents

Institute of Scientific and Technical Information of China (English)

YAO Qing-guo; ZHANG Xue-mu; LI Chun-hui

2007-01-01

The number of safety input directly determines the level of safety, and there exists dialectical and unified relations between safety input and accidents. Based on the field investigation and reliable data, this paper deeply studied the dialectical relationship between safety input and accidents, and acquired the conclusions. The security situation of the coal enterprises was related to the security input rate, being effected little by the security input scale, and build the relationship model between safety input and accidents on this basis, that is the accident model.

The application of VMEbus system to the safety related parameters indication and alarm system for nuclear power plants

International Nuclear Information System (INIS)

Lee, Chul Kwon; Koo, In Soo; Jang, Gwi Sook; Shin, Jae Hwal.

1996-12-01

This report presents the basic feature, the status of technical development, and it's application for the VMEbus which has been utilized in industrial application such as controller, robotics, automation control. The application software of VMEbus is also reviewed. The design considerations are presented when applying the system to the instrumentation and control technique of nuclear power plants. The conceptual design of safety related parameter using the integrated VMEbus system. The results indicate that the application of VMEbus has advantages such as easy maintenance, accurate and reliable operation, easy expansion and upgrade. Also, the integrated VMEbus system is capable of limited real-time processing because it can be processed by multi-processors and can reduce the effort of software development by using off-the-shelf software. However, the adoption of digital system is produced problems such as software common mode failure, EMI and RFI, and verification and validation methods of off-the-shelf hardware and software. To resolve these problems in the future, further research are required. (author). 7 tabs., 19 figs., 24 refs

The application of VMEbus system to the safety related parameters indication and alarm system for nuclear power plants

Energy Technology Data Exchange (ETDEWEB)

Lee, Chul Kwon; Koo, In Soo; Jang, Gwi Sook; Shin, Jae Hwal

1996-12-01

This report presents the basic feature, the status of technical development, and it`s application for the VMEbus which has been utilized in industrial application such as controller, robotics, automation control. The application software of VMEbus is also reviewed. The design considerations are presented when applying the system to the instrumentation and control technique of nuclear power plants. The conceptual design of safety related parameter using the integrated VMEbus system. The results indicate that the application of VMEbus has advantages such as easy maintenance, accurate and reliable operation, easy expansion and upgrade. Also, the integrated VMEbus system is capable of limited real-time processing because it can be processed by multi-processors and can reduce the effort of software development by using off-the-shelf software. However, the adoption of digital system is produced problems such as software common mode failure, EMI and RFI, and verification and validation methods of off-the-shelf hardware and software. To resolve these problems in the future, further research are required. (author). 7 tabs., 19 figs., 24 refs.

A study on the establishment of safety assessment guidelines of commercial grade item dedication in digitalized safety systems

International Nuclear Information System (INIS)

Hwang, H. S.; Kim, B. R.; Oh, S. H.

1999-01-01

Because of obsolescing the components used in safety related systems of nuclear power plants, decreasing the number of suppliers qualified for the nuclear QA program and increasing maintenance costs of them, utilities have been considering to use commercial grade digital computers as an alternative for resolving such issues. However, commercial digital computers use the embedded pre-existing software, including operating system software, which are not developed by using nuclear grade QA program. Thus, it is necessary for utilities to establish processes for dedicating digital commercial grade items. A regulatory body also needs guidance to evaluate the digital commercial products properly. This paper surveyed the regulations and their regulatory guides, which establish the requirements for commercial grade items dedication, industry standards and guidances applicable to safety related systems. This paper provides some guidelines to be applied in evaluating the safety of digital upgrades and new digital plant protection systems in Korea

Research on conceptual design of simplified nuclear safety instrument and control system

International Nuclear Information System (INIS)

Huang Jie

2015-01-01

The Nuclear safety instrument and control system is directly related to the safety of the reactor. So redundant and diversity design is used to ensure the system's security and reliability. This make the traditional safety system large, more cabinets and wiring complexity. To solve these problem, we can adopt new technology to make the design more simple. The simplify conceptual design can make the system less cabinets, less wiring, but high security, strong reliability. (author)

ICT support safety, health and environment management system (e-SHEMS)

International Nuclear Information System (INIS)

Amy Hamijah Ab Hamid; Hasfazilah Hassan; Siti Massari Amran; Norzalina Nasirudin; Azimawati Ahmad; Mohd Suhaimi Kassim; Shaharum Ramli; Musa Ibrahim; Mohd Sidek Othman

2009-01-01

Safety program is compulsory for a nuclear technology related research and development institution like Nuclear Malaysia. It has been implemented in various safety standard systems including Act 514, Act 304, ISO 14000, OSHAS 18001 and IAEA. This paper began with Nuclear Malaysia history in initiating our own safety standard system since 1982. Currently, Nuclear Malaysia's Safety Health and Environment Management System (SHE-MS) was stipulated for similar purpose. Furthermore, it has implemented guidelines by AELB, IAEA, DOSH, Fire Brigade and Police Force. This paper briefly describes the overall structure of SHE-MS, how it functions and being managed, and lessons learned. The findings which are based on the issues and challenges, then it can be analysed to propose a development of SHE-MS ICT-support application for future improvement and enhancement in inculcating and nurturing safety culture among Nuclear Malaysia staff. (Author)

Multi-dimensional database design and implementation of dam safety monitoring system

Directory of Open Access Journals (Sweden)

Zhao Erfeng

2008-09-01

Full Text Available To improve the effectiveness of dam safety monitoring database systems, the development process of a multi-dimensional conceptual data model was analyzed and a logic design was achieved in multi-dimensional database mode. The optimal data model was confirmed by identifying data objects, defining relations and reviewing entities. The conversion of relations among entities to external keys and entities and physical attributes to tables and fields was interpreted completely. On this basis, a multi-dimensional database that reflects the management and analysis of a dam safety monitoring system on monitoring data information has been established, for which factual tables and dimensional tables have been designed. Finally, based on service design and user interface design, the dam safety monitoring system has been developed with Delphi as the development tool. This development project shows that the multi-dimensional database can simplify the development process and minimize hidden dangers in the database structure design. It is superior to other dam safety monitoring system development models and can provide a new research direction for system developers.

Modification and backfitting in safety related systems at Ringhals 2

Energy Technology Data Exchange (ETDEWEB)

Lidh, B. [KSU, Nykoeping (Sweden); Stroemqvist, E. [ES-Konsult AB, Stockholm (Sweden)

1995-08-01

This report is intended for use by the Swedish Nuclear Power Inspectorate. It has been published to enable comparison of modification and backfitting implemented at Ringhals-2, with those implemented at other plants, both domestic and abroad. The report summarizes the more notable modifications and backfitting carried out on any safety-related equipment, or software, at Barsebaeck, and covers the decade 1984 to 1994. Modifications to hardware, and to some extent to software, are catalogued, but not described in any detail. No general procedures (operational or maintenance) are dealt with. 4 refs.

Modification and backfitting in safety related systems at Ringhals 2

International Nuclear Information System (INIS)

Lidh, B.; Stroemqvist, E.

1995-08-01

This report is intended for use by the Swedish Nuclear Power Inspectorate. It has been published to enable comparison of modification and backfitting implemented at Ringhals-2, with those implemented at other plants, both domestic and abroad. The report summarizes the more notable modifications and backfitting carried out on any safety-related equipment, or software, at Barsebaeck, and covers the decade 1984 to 1994. Modifications to hardware, and to some extent to software, are catalogued, but not described in any detail. No general procedures (operational or maintenance) are dealt with. 4 refs

The complexity of patient safety reporting systems in UK dentistry.

Science.gov (United States)

Renton, T; Master, S

2016-10-21

Since the 'Francis Report', UK regulation focusing on patient safety has significantly changed. Healthcare workers are increasingly involved in NHS England patient safety initiatives aimed at improving reporting and learning from patient safety incidents (PSIs). Unfortunately, dentistry remains 'isolated' from these main events and continues to have a poor record for reporting and learning from PSIs and other events, thus limiting improvement of patient safety in dentistry. The reasons for this situation are complex.This paper provides a review of the complexities of the existing systems and procedures in relation to patient safety in dentistry. It highlights the conflicting advice which is available and which further complicates an overly burdensome process. Recommendations are made to address these problems with systems and procedures supporting patient safety development in dentistry.

A Methodological Framework for Software Safety in Safety Critical Computer Systems

OpenAIRE

P. V. Srinivas Acharyulu; P. Seetharamaiah

2012-01-01

Software safety must deal with the principles of safety management, safety engineering and software engineering for developing safety-critical computer systems, with the target of making the system safe, risk-free and fail-safe in addition to provide a clarified differentaition for assessing and evaluating the risk, with the principles of software risk management. Problem statement: Prevailing software quality models, standards were not subsisting in adequately addressing the software safety ...

Preliminary safety evaluation for CSR1000 with passive safety system

International Nuclear Information System (INIS)

Wu, Pan; Gou, Junli; Shan, Jianqiang; Zhang, Bo; Li, Xiang

2014-01-01

Highlights: • The basic information of a Chinese SCWR concept CSR1000 is introduced. • An innovative passive safety system is proposed for CSR1000. • 6 Transients and 3 accidents are analysed with system code SCTRAN. • The passive safety systems greatly mitigate the consequences of these incidents. • The inherent safety of CSR1000 is enhanced. - Abstract: This paper describes the preliminary safety analysis of the Chinese Supercritical water cooled Reactor (CSR1000), which is proposed by Nuclear Power Institute of China (NPIC). The two-pass core design applied to CSR1000 decreases the fuel cladding temperature and flattens the power distribution of the core at normal operation condition. Each fuel assembly is made up of four sub-assemblies with downward-flow water rods, which is favorable to the core cooling during abnormal conditions due to the large water inventory of the water rods. Additionally, a passive safety system is proposed for CSR1000 to increase the safety reliability at abnormal conditions. In this paper, accidents of “pump seizure”, “loss of coolant flow accidents (LOFA)”, “core depressurization”, as well as some typical transients are analysed with code SCTRAN, which is a one-dimensional safety analysis code for SCWRs. The results indicate that the maximum cladding surface temperatures (MCST), which is the most important safety criterion, of the both passes in the mentioned incidents are all below the safety criterion by a large margin. The sensitivity analyses of the delay time of RCPs trip in “loss of offsite power” and the delay time of RMT actuation in “loss of coolant flowrate” were also included in this paper. The analyses have shown that the core design of CSR1000 is feasible and the proposed passive safety system is capable of mitigating the consequences of the selected abnormalities

Safety Metrics for Human-Computer Controlled Systems

Science.gov (United States)

Leveson, Nancy G; Hatanaka, Iwao

2000-01-01

The rapid growth of computer technology and innovation has played a significant role in the rise of computer automation of human tasks in modem production systems across all industries. Although the rationale for automation has been to eliminate "human error" or to relieve humans from manual repetitive tasks, various computer-related hazards and accidents have emerged as a direct result of increased system complexity attributed to computer automation. The risk assessment techniques utilized for electromechanical systems are not suitable for today's software-intensive systems or complex human-computer controlled systems.This thesis will propose a new systemic model-based framework for analyzing risk in safety-critical systems where both computers and humans are controlling safety-critical functions. A new systems accident model will be developed based upon modem systems theory and human cognitive processes to better characterize system accidents, the role of human operators, and the influence of software in its direct control of significant system functions Better risk assessments will then be achievable through the application of this new framework to complex human-computer controlled systems.

Nuclear power plant systems, structures and components and their safety classification

International Nuclear Information System (INIS)

2000-01-01

The assurance of a nuclear power plant's safety is based on the reliable functioning of the plant as well as on its appropriate maintenance and operation. To ensure the reliability of operation, special attention shall be paid to the design, manufacturing, commissioning and operation of the plant and its components. To control these functions the nuclear power plant is divided into structural and functional entities, i.e. systems. A systems safety class is determined by its safety significance. Safety class specifies the procedures to be employed in plant design, construction, monitoring and operation. The classification document contains all documentation related to the classification of the nuclear power plant. The principles of safety classification and the procedures pertaining to the classification document are presented in this guide. In the Appendix of the guide, examples of systems most typical of each safety class are given to clarify the safety classification principles

Survey and evaluation of inherent safety characteristics and passive safety systems for use in probabilistic safety analyses

International Nuclear Information System (INIS)

Wetzel, N.; Scharfe, A.

1998-01-01

The present report examines the possibilities and limits of a probabilistic safety analysis to evaluate passive safety systems and inherent safety characteristics. The inherent safety characteristics are based on physical principles, that together with the safety system lead to no damage. A probabilistic evaluation of the inherent safety characteristic is not made. An inventory of passive safety systems of accomplished nuclear power plant types in the Federal Republic of Germany was drawn up. The evaluation of the passive safety system in the analysis of the accomplished nuclear power plant types was examined. The analysis showed that the passive manner of working was always assumed to be successful. A probabilistic evaluation was not performed. The unavailability of the passive safety system was determined by the failure of active components which are necessary in order to activate the passive safety system. To evaluate the passive safety features in new concepts of nuclear power plants the AP600 from Westinghouse, the SBWR from General Electric and the SWR 600 from Siemens, were selected. Under these three reactor concepts, the SWR 600 is specially attractive because the safety features need no energy sources and instrumentation in this concept. First approaches for the assessment of the reliability of passively operating systems are summarized. Generally it can be established that the core melt frequency for the passive concepts AP600 and SBWR is advantageous in comparison to the probabilistic objectives from the European Pressurized Water Reactor (EPR). Under the passive concepts is the SWR 600 particularly interesting. In this concept the passive systems need no energy sources and instrumentation, and has active operational systems and active safety equipment. Siemens argues that with this concept the frequency of a core melt will be two orders of magnitude lower than for the conventional reactors. (orig.) [de

Impact of Passive Safety on FHR Instrumentation Systems Design and Classification

International Nuclear Information System (INIS)

Holcomb, David Eugene

2015-01-01

Fluoride salt-cooled high-temperature reactors (FHRs) will rely more extensively on passive safety than earlier reactor classes. 10CFR50 Appendix A, General Design Criteria for Nuclear Power Plants, establishes minimum design requirements to provide reasonable assurance of adequate safety. 10CFR50.69, Risk-Informed Categorization and Treatment of Structures, Systems and Components for Nuclear Power Reactors, provides guidance on how the safety significance of systems, structures, and components (SSCs) should be reflected in their regulatory treatment. The Nuclear Energy Institute (NEI) has provided 10 CFR 50.69 SSC Categorization Guideline (NEI-00-04) that factors in probabilistic risk assessment (PRA) model insights, as well as deterministic insights, through an integrated decision-making panel. Employing the PRA to inform deterministic requirements enables an appropriately balanced, technically sound categorization to be established. No FHR currently has an adequate PRA or set of design basis accidents to enable establishing the safety classification of its SSCs. While all SSCs used to comply with the general design criteria (GDCs) will be safety related, the intent is to limit the instrumentation risk significance through effective design and reliance on inherent passive safety characteristics. For example, FHRs have no safety-significant temperature threshold phenomena, thus enabling the primary and reserve reactivity control systems required by GDC 26 to be passively, thermally triggered at temperatures well below those for which core or primary coolant boundary damage would occur. Moreover, the passive thermal triggering of the primary and reserve shutdown systems may relegate the control rod drive motors to the control system, substantially decreasing the amount of safety-significant wiring needed. Similarly, FHR decay heat removal systems are intended to be running continuously to minimize the amount of safety-significant instrumentation needed to initiate

Recent progress in safety-related applications of reactor noise analysis

International Nuclear Information System (INIS)

Hirota, Jitsuya; Shinohara, Yoshikuni; Saito, Keiichi

1982-01-01

Recent progress in safety-related applications of reactor noise analysis is reviewed, mainly referring to various papers presented at the Third Specialists' Meeting on Reactor Noise (SMORN-III) held in Tokyo in 1981. Advances in application of autoregressive model, coherence analysis and pattern recognition technique are significant since SMORN-II in 1977. Development of reactor diagnosis systems based on noise analysis is in progress. Practical experiences in the safety-related applications to power plants are being accumulated. Advances in quantitative monitoring of vibration of internal structures in PWR and diagnosis of core stability and control system characteristics in BWR are notable. Acoustic methods are also improved to detect sodium boiling in LMFBR. The Reactor Noise Analysis Benchmark Test performed by Japan in connection with SMORN-III is successful so that it is possible to proceed to the second stage of the benchmark test. (author)

Gas-Induced Water-hammer Loads Calculation for Safety Related Systems

Energy Technology Data Exchange (ETDEWEB)

Lee, Seungchan; Yoon, Dukjoo [Korea Hydro and Nuclear Power Co., LTd, Daejeon (Korea, Republic of); Lee, Dooyong [Seoul National Univ., Seoul (Korea, Republic of)

2013-05-15

Of particular interest, gas accumulation can result in system pressure transient in pump discharge piping following a pump start. Consequently, this evolves into a gas-water, a water-hammer event and the accompanying force imbalances on the piping segments can be sufficient to challenge the piping supports and restraint. This paper describes an method performing to the water-hammer loads to determine the maximum loading that would occur in the piping system following the safety injection signal and to evaluate its integrity. For a given gas void volumes in the discharge piping, the result of the calculation shows the maximum loads of 18,894.2psi, which is smaller than the allowable criteria. Also, the maximum peak axial force imbalances acting on the support is 1,720lbf as above.

Gas-Induced Water-hammer Loads Calculation for Safety Related Systems

International Nuclear Information System (INIS)

Lee, Seungchan; Yoon, Dukjoo; Lee, Dooyong

2013-01-01

Of particular interest, gas accumulation can result in system pressure transient in pump discharge piping following a pump start. Consequently, this evolves into a gas-water, a water-hammer event and the accompanying force imbalances on the piping segments can be sufficient to challenge the piping supports and restraint. This paper describes an method performing to the water-hammer loads to determine the maximum loading that would occur in the piping system following the safety injection signal and to evaluate its integrity. For a given gas void volumes in the discharge piping, the result of the calculation shows the maximum loads of 18,894.2psi, which is smaller than the allowable criteria. Also, the maximum peak axial force imbalances acting on the support is 1,720lbf as above

A Study of Cyber Security Activities for Development of Safety-related Controller

Energy Technology Data Exchange (ETDEWEB)

Lee, Myeongkyun; Song, Seunghwan; Yoo, Kwanwoo; Yun, Donghwa [Korea Univ., Seoul (Korea, Republic of)

2014-05-15

Nuclear Power Plant Regulatory guide describes the regulatory requirements to implement cyber security activities to ensure that design and operate to respond to cyber threats that exploited to vulnerability of digital-based technologies associated with safety-related digital instrumentation and control systems at nuclear power plants. Cyber security activities coverage is instrumentation and control systems to perform safety functions and digital-based equipment to use development, test, analysis and asset for instrumentation and control systems. Regulatory guidance is required to the cyber security activities that should be performed in each development phase of safety-related controller. Development organization should establish and implement to cyber security plans for responding to cyber threats throughout each lifecycle phase and the result of the cyber security activities should be generated to the documents. In addition, the independent verification and validation organization should perform simulated penetration test for enhancing response capabilities to cyber security threats and development organization should establish and implement response hardening solutions for the cyber security vulnerabilities identified in the simulated penetration test.

A Study of Cyber Security Activities for Development of Safety-related Controller

International Nuclear Information System (INIS)

Lee, Myeongkyun; Song, Seunghwan; Yoo, Kwanwoo; Yun, Donghwa

2014-01-01

Nuclear Power Plant Regulatory guide describes the regulatory requirements to implement cyber security activities to ensure that design and operate to respond to cyber threats that exploited to vulnerability of digital-based technologies associated with safety-related digital instrumentation and control systems at nuclear power plants. Cyber security activities coverage is instrumentation and control systems to perform safety functions and digital-based equipment to use development, test, analysis and asset for instrumentation and control systems. Regulatory guidance is required to the cyber security activities that should be performed in each development phase of safety-related controller. Development organization should establish and implement to cyber security plans for responding to cyber threats throughout each lifecycle phase and the result of the cyber security activities should be generated to the documents. In addition, the independent verification and validation organization should perform simulated penetration test for enhancing response capabilities to cyber security threats and development organization should establish and implement response hardening solutions for the cyber security vulnerabilities identified in the simulated penetration test

Manual on quality assurance for computer software related to the safety of nuclear power plants

International Nuclear Information System (INIS)

1988-01-01

The objective of the Manual is to provide guidance in the assurance of quality of specification, design, maintenance and use of computer software related to items and activities important to safety (hereinafter referred to as safety related) in nuclear power plants. This guidance is consistent with, and supplements, the requirements and recommendations of Quality Assurance for Safety in Nuclear Power Plants: A Code of Practice, 50-C-QA, and related Safety Guides on quality assurance for nuclear power plants. Annex A identifies the IAEA documents referenced in the Manual. The Manual is intended to be of use to all those who, in any way, are involved with software for safety related applications for nuclear power plants, including auditors who may be called upon to audit management systems and product software. Figs

A study on optimization of the nuclear safety system

International Nuclear Information System (INIS)

Lee, Sang Hoon; Koh, Byung Joon; Kim, Jin Soo; Kim, Byoung Do; Cho, Seong Won; Kwon, Seog Kwon; Choi, Kwang Sik

1986-12-01

The number of nuclear facilities (nuclear power plants, research reactors, nuclear fuel facilities) under construction or in operation in Korea continues to increase and this has brought about increased importance and concerns toward nuclear safety in Korea. Also, domestic nuclear related organizations are increasingly carrying out the design/construction of nuclear power plants and the development /supply of nuclear fuels. In order to flexibly respond to these changes and to suggest direction to take, it is necessary to re-examine the current nuclear safety regulation system. This study is carried out in two stages and this report describes the results of the analysis and the assessment of the nuclear licencing system of such foreign countries as sweden and German, as the first of the two. In this regard, this study includes the analysis on the backgrounds on the choice of nuclear licensing system, the analysis on the licensing procedures, the analysis on the safety inspection system and the enforcement laws, the analysis on the structure and function of the regulatory, business and research organizations as well as the analysis on the relationship between the safety research and the regulatory duties. In this study, the German safety inspection system and the enforcement procedures and the Swedish nuclear licensing system are analyzed in detail. By comparing and assessing the finding with the current Korea Nuclear Licensing System, this study points out some reform measures of the Korean system that needs to improved. With the changing situations in mind, this study aims to develop the nuclear safety regulation system optimized for Korean situation by re-examining the current regulation system. (Author)

Does the concept of safety culture help or hinder systems thinking in safety?

Science.gov (United States)

Reiman, Teemu; Rollenhagen, Carl

2014-07-01

The concept of safety culture has become established in safety management applications in all major safety-critical domains. The idea that safety culture somehow represents a "systemic view" on safety is seldom explicitly spoken out, but nevertheless seem to linger behind many safety culture discourses. However, in this paper we argue that the "new" contribution to safety management from safety culture never really became integrated with classical engineering principles and concepts. This integration would have been necessary for the development of a more genuine systems-oriented view on safety; e.g. a conception of safety in which human, technological, organisational and cultural factors are understood as mutually interacting elements. Without of this integration, researchers and the users of the various tools and methods associated with safety culture have sometimes fostered a belief that "safety culture" in fact represents such a systemic view about safety. This belief is, however, not backed up by theoretical or empirical evidence. It is true that safety culture, at least in some sense, represents a holistic term-a totality of factors that include human, organisational and technological aspects. However, the departure for such safety culture models is still human and organisational factors rather than technology (or safety) itself. The aim of this paper is to critically review the various uses of the concept of safety culture as representing a systemic view on safety. The article will take a look at the concepts of culture and safety culture based on previous studies, and outlines in more detail the theoretical challenges in safety culture as a systems concept. The paper also presents recommendations on how to make safety culture more systemic. Copyright © 2013 Elsevier Ltd. All rights reserved.

Technical evaluation of the susceptibility of safety-related systems to flooding caused by the failure of non-category 1 systems for the Yankee Rowe Nuclear Power Station

International Nuclear Information System (INIS)

Epps, R.C.

1980-11-01

This report documents the technical evaluation of the Maine Yankee Atomic Power Station. The purpose of this evaluation was to determine whether the failure of any non-Class I (seismic) equipment could result in a condition, such as flooding, that might adversely affect the performance of the safety-related equipment required for the safe shutdown of the facility, or to mitigate the consequences of an accident. Criteria developed by the US Nuclear Regulatory Commission were used to evaluate the acceptability of the existing protection system as well as measures taken by Maine Yankee Atomic Power Company (MYAPC) to minimize the danger of flooding and to protect safety-related equipment

The aviation safety reporting system

Science.gov (United States)

Reynard, W. D.

1984-01-01

The aviation safety reporting system, an accident reporting system, is presented. The system identifies deficiencies and discrepancies and the data it provides are used for long term identification of problems. Data for planning and policy making are provided. The system offers training in safety education to pilots. Data and information are drawn from the available data bases.

NASA Aviation Safety Reporting System (ASRS)

Science.gov (United States)

Connell, Linda J.

2017-01-01

The NASA Aviation Safety Reporting System (ASRS) collects, analyzes, and distributes de-identified safety information provided through confidentially submitted reports from frontline aviation personnel. Since its inception in 1976, the ASRS has collected over 1.4 million reports and has never breached the identity of the people sharing their information about events or safety issues. From this volume of data, the ASRS has released over 6,000 aviation safety alerts concerning potential hazards and safety concerns. The ASRS processes these reports, evaluates the information, and provides selected de-identified report information through the online ASRS Database at http:asrs.arc.nasa.gov. The NASA ASRS is also a founding member of the International Confidential Aviation Safety Systems (ICASS) group which is a collection of other national aviation reporting systems throughout the world. The ASRS model has also been replicated for application to improving safety in railroad, medical, fire fighting, and other domains. This presentation will discuss confidential, voluntary, and non-punitive reporting systems and their advantages in providing information for safety improvements.

Jefferson Lab IEC 61508/61511 Safety PLC Based Safety System

International Nuclear Information System (INIS)

Mahoney, Kelly; Robertson, Henry

2009-01-01

This paper describes the design of the new 12 GeV Upgrade Personnel Safety System (PSS) at the Thomas Jefferson National Accelerator Facility (TJNAF). The new PSS design is based on the implementation of systems designed to meet international standards IEC61508 and IEC 61511 for programmable safety systems. In order to meet the IEC standards, TJNAF engineers evaluated several SIL 3 Safety PLCs before deciding on an optimal architecture. In addition to hardware considerations, software quality standards and practices must also be considered. Finally, we will discuss R and D that may lead to both high safety reliability and high machine availability that may be applicable to future accelerators such as the ILC.

Reliability estimation of safety-critical software-based systems using Bayesian networks

International Nuclear Information System (INIS)

Helminen, A.

2001-06-01

Due to the nature of software faults and the way they cause system failures new methods are needed for the safety and reliability evaluation of software-based safety-critical automation systems in nuclear power plants. In the research project 'Programmable automation system safety integrity assessment (PASSI)', belonging to the Finnish Nuclear Safety Research Programme (FINNUS, 1999-2002), various safety assessment methods and tools for software based systems are developed and evaluated. The project is financed together by the Radiation and Nuclear Safety Authority (STUK), the Ministry of Trade and Industry (KTM) and the Technical Research Centre of Finland (VTT). In this report the applicability of Bayesian networks to the reliability estimation of software-based systems is studied. The applicability is evaluated by building Bayesian network models for the systems of interest and performing simulations for these models. In the simulations hypothetical evidence is used for defining the parameter relations and for determining the ability to compensate disparate evidence in the models. Based on the experiences from modelling and simulations we are able to conclude that Bayesian networks provide a good method for the reliability estimation of software-based systems. (orig.)

Technical self reliance of digital safety systems

Energy Technology Data Exchange (ETDEWEB)

Kwon, Kee Choon; Lee, Dong Young [Korea Atomic Energy Research Institute, Daejeon (Korea, Republic of); Kim, Kook Hun [Doosan Heavy Industries and Construction, Changwon (Korea, Republic of); Choi, Seung Gap [POSCON, Pohang (Korea, Republic of)

2009-04-15

This paper summarizes the development results of the Korea Nuclear Instrumentation and Control System (KNICS) project sponsored by the Korean government. In this project, Man Machine Interface System (MMIS) architecture, two digital platforms, and several control systems are developed. One platform is a programmable Logic Controller (PLC) for a safety system and another platform is a Distributed Control System (DCS) for a non safety system. With the POSAFE Q PLC, a Reactor Protection System (RPS) and an Engineered Safety Feature Component Control System (ESF CCS) are developed. A Power Control System (PCS) is developed based on the DCS. The safety grade platform and the digital safety systems obtained approval for the Topical Report from the Korean regulatory body in February of 2009. Also a Korean utility and a vendor company determined KNICS results to apply them to the planned Nuclear Power Plant (NPP) in March 2009. This paper introduces the technical self reliance experiences of the safety grade platform and the digital safety systems developed in the KNICS R and D project.

The management system for the disposal of radioactive waste. Safety guide

International Nuclear Information System (INIS)

2008-01-01

The objective of this Safety Guide is to provide recommendations on developing and implementing management systems for all phases of facilities for the disposal of radioactive waste and related activities. It covers the management systems for managing the different stages of waste disposal facilities, such as siting, design and construction, operation (i.e. the activities, which can extend over several decades, involving receipt of the waste product in its final packaging (if it is to be disposed of in packaged form), waste emplacement in the waste disposal facility, backfilling and sealing, and any subsequent period prior to closure), closure and the period of institutional control (i.e. either active control - monitoring, surveillance and remediation; or passive control - restricted land use). The management systems apply to various types of disposal facility for different categories of radioactive waste, such as: near surface (for low level waste), geological (for low, intermediate and/or high level waste), boreholes (for sealed sources), surface impoundment (for mining and milling waste) and landfill (for very low level waste). It also covers management systems for related processes and activities, such as extended monitoring and surveillance during the period of active institutional control in the post-closure phase, safety and performance assessments and development of the safety case for the waste disposal facility and regulatory authorization (e.g. licensing). This Safety Guide is intended to be used by organizations that are directly involved in, or that regulate, the facilities and activities described in paras 1.15 and 1.16, and by the suppliers of nuclear safety related products that are required to meet some or all of the requirements established in IAEA Safety Standards Series No. GS-R-3 'The Management System for Facilities and Activities'. It will also be useful to legislators and to members of the public and other parties interested in the nuclear

Integrating system safety into the basic systems engineering process

Science.gov (United States)

Griswold, J. W.

1971-01-01

The basic elements of a systems engineering process are given along with a detailed description of what the safety system requires from the systems engineering process. Also discussed is the safety that the system provides to other subfunctions of systems engineering.

Programmable Electronic Safety Systems

International Nuclear Information System (INIS)

Parry, R.

1993-05-01

Traditionally safety systems intended for protecting personnel from electrical and radiation hazards at particle accelerator laboratories have made extensive use of electromechanical relays. These systems have the advantage of high reliability and allow the designer to easily implement failsafe circuits. Relay based systems are also typically simple to design, implement, and test. As systems, such as those presently under development at the Superconducting Super Collider Laboratory (SSCL), increase in size, and the number of monitored points escalates, relay based systems become cumbersome and inadequate. The move toward Programmable Electronic Safety Systems is becoming more widespread and accepted. In developing these systems there are numerous precautions the designer must be concerned with. Designing fail-safe electronic systems with predictable failure states is difficult at best. Redundancy and self-testing are prime examples of features that should be implemented to circumvent and/or detect failures. Programmable systems also require software which is yet another point of failure and a matter of great concern. Therefore the designer must be concerned with both hardware and software failures and build in the means to assure safe operation or shutdown during failures. This paper describes features that should be considered in developing safety systems and describes a system recently installed at the Accelerator Systems String Test (ASST) facility of the SSCL

Nuclear power safety reporting system feasibility analysis and concept description

International Nuclear Information System (INIS)

Finlayson, F.C.; Ims, J.R.; Hussman, T.A.

1984-01-01

The Aerospace Corporation is assisting the US Nuclear Regulatory Commission (NRC) in the evaluation of the potential attributes of a voluntary, nonpunitive data gathering system for identifying and quantifying the factors that contribute to the occurrence of significant safety problems involving humans in nuclear power plants. The objectives of the Aerospace Administration (FAA)/National Aeronautics and Space Administration (NASA) Aviation Safety Reporting System (ASRS) in order to determine whether it would be feasible to apply part (or all) of the ASRS concepts for collecting data on human factor related incidents to the nuclear industry; and (2) to identify and define the basic elements and requirements of a Nuclear Power Safety Reporting System (NPSRS), assuming the feasibility of implementing such a system was established

Design Information from the PSA for Digital Safety-Critical Systems

International Nuclear Information System (INIS)

Kang, Hyun Gook; Jang, Seung Cheol

2005-01-01

Many safety-critical applications such as nuclear field application usually adopt a similar design strategy for digital safety-critical systems. Their differences from the normal design for the non-safety-critical applications could be summarized as: multiple-redundancy, highly reliable components, strengthened monitoring mechanism, verified software, and automated test procedure. These items are focusing on maintaining the capability to perform the given safety function when it is requested. For the past several decades, probabilistic safety assessment (PSA) techniques are used in the nuclear industry to assess the relative effects of contributing events on plant risk and system reliability. They provide a unifying means of assessing physical faults, recovery processes, contributing effects, human actions, and other events that have a high degree of uncertainty. The applications of PSA provide not only the analysis results of already installed system but also the useful information for the system under design. The information could be derived from the PSA experience of the various safety-critical systems. Thanks to the design flexibility, the digital system is one of the most suitable candidates for risk-informed design (RID). In this article, we will describe the feedbacks for system design and try to develop a procedure for RID. Even though the procedure is not sophisticated enough now, it could be the start point of the further investigation for developing more complete and practical methodology

Ventilator-Related Adverse Events: A Taxonomy and Findings From 3 Incident Reporting Systems.

Science.gov (United States)

Pham, Julius Cuong; Williams, Tamara L; Sparnon, Erin M; Cillie, Tam K; Scharen, Hilda F; Marella, William M

2016-05-01

In 2009, researchers from Johns Hopkins University's Armstrong Institute for Patient Safety and Quality; public agencies, including the FDA; and private partners, including the Emergency Care Research Institute and the University HealthSystem Consortium (UHC) Safety Intelligence Patient Safety Organization, sought to form a public-private partnership for the promotion of patient safety (P5S) to advance patient safety through voluntary partnerships. The study objective was to test the concept of the P5S to advance our understanding of safety issues related to ventilator events, to develop a common classification system for categorizing adverse events related to mechanical ventilators, and to perform a comparison of adverse events across different adverse event reporting systems. We performed a cross-sectional analysis of ventilator-related adverse events reported in 2012 from the following incident reporting systems: the Pennsylvania Patient Safety Authority's Patient Safety Reporting System, UHC's Safety Intelligence Patient Safety Organization database, and the FDA's Manufacturer and User Facility Device Experience database. Once each organization had its dataset of ventilator-related adverse events, reviewers read the narrative descriptions of each event and classified it according to the developed common taxonomy. A Pennsylvania Patient Safety Authority, FDA, and UHC search provided 252, 274, and 700 relevant reports, respectively. The 3 event types most commonly reported to the UHC and the Pennsylvania Patient Safety Authority's Patient Safety Reporting System databases were airway/breathing circuit issue, human factor issues, and ventilator malfunction events. The top 3 event types reported to the FDA were ventilator malfunction, power source issue, and alarm failure. Overall, we found that (1) through the development of a common taxonomy, adverse events from 3 reporting systems can be evaluated, (2) the types of events reported in each database were related

Ventilator-Related Adverse Events: A Taxonomy and Findings From 3 Incident Reporting Systems

Science.gov (United States)

Pham, Julius Cuong; Williams, Tamara L; Sparnon, Erin M; Cillie, Tam K; Scharen, Hilda F; Marella, William M

2016-01-01

BACKGROUND: In 2009, researchers from Johns Hopkins University's Armstrong Institute for Patient Safety and Quality; public agencies, including the FDA; and private partners, including the Emergency Care Research Institute and the University HealthSystem Consortium (UHC) Safety Intelligence Patient Safety Organization, sought to form a public-private partnership for the promotion of patient safety (P5S) to advance patient safety through voluntary partnerships. The study objective was to test the concept of the P5S to advance our understanding of safety issues related to ventilator events, to develop a common classification system for categorizing adverse events related to mechanical ventilators, and to perform a comparison of adverse events across different adverse event reporting systems. METHODS: We performed a cross-sectional analysis of ventilator-related adverse events reported in 2012 from the following incident reporting systems: the Pennsylvania Patient Safety Authority's Patient Safety Reporting System, UHC's Safety Intelligence Patient Safety Organization database, and the FDA's Manufacturer and User Facility Device Experience database. Once each organization had its dataset of ventilator-related adverse events, reviewers read the narrative descriptions of each event and classified it according to the developed common taxonomy. RESULTS: A Pennsylvania Patient Safety Authority, FDA, and UHC search provided 252, 274, and 700 relevant reports, respectively. The 3 event types most commonly reported to the UHC and the Pennsylvania Patient Safety Authority's Patient Safety Reporting System databases were airway/breathing circuit issue, human factor issues, and ventilator malfunction events. The top 3 event types reported to the FDA were ventilator malfunction, power source issue, and alarm failure. CONCLUSIONS: Overall, we found that (1) through the development of a common taxonomy, adverse events from 3 reporting systems can be evaluated, (2) the types of

Conceptual design of an integrated information system for safety related analysis of nuclear power plants (IRIS Phase 1)

International Nuclear Information System (INIS)

Hofer, K.; Zehnder, P.; Galperin, A.

1994-01-01

This report deals with a conceptual design of an integrated information management system, called PSI-IRIS, as needed to assist the analysts for reactor safety related investigations on Swiss nuclear power plants within the project STARS. Performing complicated engineering analyses of an NPP requires storage and manipulation of a large amount of information, both data and knowledge. This information is characterized by its multi-disciplinary nature, complexity, and diversity. The problems caused by inefficient and lengthy manual operations involving the data flow management within the framework of the safety related analysis of an NPP, can be solved by applying computer aided engineering (CAE) principles. These principles are the basis for the design of the integrated information management system PSI-IRIS presented in this report. The basic idea is to create a computerized environment, which includes both database and functional capabilities. The database of the PSI-IRIS consists of two parts, an NPP generic database (GDB) and a collection of analysis results (CASE L IB). The GDB includes all technical plant data and information needed to generate input decks for all computer codes utilized within the STARS project. The CASE L IB storage contains the accumulated knowledge, input decks, and result files of the NPP transient analyses. Considerations and analysis of the data types and the required data manipulation capabilities as well as operational requirements resulted in the choice of an object-oriented database management system (OODBMS) as a development platform for solving the software engineering problems. Several advantages of OODBMS's over conventional relational database management systems were found of crucial importance, especially providing the necessary flexibility for different data types and the potential for extensibility. (author) 15 figs., tabs., 20 refs

JRC-IE's research of safety of Gen IV systems

International Nuclear Information System (INIS)

Tsige-Tamirat, H.; Ranguelova, V.; Feutterer, M.; Ammirabile, L.; Carlsson, J.; D'Agata, E.; Laurie, M.; Magallon, D.

2010-01-01

The Institute for Energy (IE), one of the seven scientific Institutes of the Joint Research Centre (JRC) of the European Commission, has the mission to provide scientific and technical support for the conception, development, implementation and monitoring of community policies related to energy. To accomplish its mission, IE performs research in the areas of renewable energies, safety and sustainability of nuclear energy for current and future reactor systems, energy technic/economic assessment, and security of energy supply. The Generation IV International Forum (GIF) is a cooperative international endeavour organized to carry out R and D needed to establish the feasibility and performance capabilities of the next generation nuclear energy systems and support the progress towards their realization. The EU, represented by EURATOM and with the JRC as implementing agent, is working together with other GIF partners to perform pre-competitive R and D on key technologies to be implemented in future nuclear systems. IE is engaged in experimental research, simulation and modeling, scientific, feasibility and engineering studies on innovative nuclear reactor systems needed to support the EURATOM contribution to GEN IV initiative, in particular in assessment of innovative fuels and materials, development of new reactor core concepts and safety solutions and knowledge management and preservation. IE's research activities on Generation IV reactor systems are focused on the assessment of the potential of such systems to meet long term EU energy needs with respect to economical advantages, enhanced safety, sustainability, and proliferation resistance. IE participates in international collaborations and has bilateral research cooperation both with European and non-European partners. This paper gives an overview of IE's current research activities on the Gen IV reactor systems related to safety. (authors)

Guidelines for implementation of RCM on safety systems

International Nuclear Information System (INIS)

Kim, Tae Woon; Brijendra Singh.

1996-04-01

Reliability Centered Maintenance (RCM) methodology was originally developed by the commercial airlines industry in the early 1960s for identifying applicable and effective preventive maintenance tasks and as currently used in nuclear power industry. Effective maintenance of the systems at a nuclear power plant (NPP) is essential for its safe and reliable operation. Reliability Centered Maintenance at NPP is the program to assure that plant systems remain within an original design criteria and are not adversely affected during the plant life time. The aim of this report is to provide the guidelines to implement the RCM approach on NPP safety systems. Safety systems are usually standby and therefore, we need to periodically detect and repair failures that may have occurred since the previous activation or inspection the equipment. The RCM guidelines are intended to help identify the failure modes and related root causes and then decide the maintenance policies to achieve the high level of safety and reliability. The RCM is intended to improve or maintain high levels of system reliability and plant availability. Since the reliability of plant systems will be improved, the plant safety correspondingly will be increased. Another goal of RCM is to optimize the maintenance and surveillance tasks such that the overall level of resources required to accomplish essential tasks is kept to minimum. RCM also strives to eliminate unnecessary corrective maintenance and to select yet most cost-effective approach to maintenance, testing and inspection for system components. 9 refs. (Author) .new

Outline of the requirements of application of computer based instrumentation and control systems in the systems important to safety on Bohunice NPPs

International Nuclear Information System (INIS)

Bacurik, J.

1997-01-01

The most important regulatory requirements and issues are described related to the review, evaluation and assessment of computer-based safety-related IandC systems, with emphasis on safety instrumentation and control. These aspects include safety classification and categorization of IandC, ranking of applicable codes and standards, design evaluation on the system level, and software assessment. (author)

Safety Management Characteristics Reflected in Interviews at Swedish Nuclear Power Plants: A System Perspective Approach

Energy Technology Data Exchange (ETDEWEB)

Salo, Ilkka (Risk Analysis, Social and Decision Research Unit, Dept. of Psychology, Stockholm Univ., Stockholm (Sweden))

2005-12-15

The present study investigated safety management characteristics reflected in interviews with participants from two Swedish nuclear power plants. A document analysis regarding the plants' organization, safety policies, and safety culture work was carried out as well. The participants (n=9) were all nuclear power professionals, and the majority managers at different levels with at least 10 years of nuclear power experience. The interview comprised themes relevant for organizational safety and safety management, such as: organizational structures and organizational change, threats to safety, information feedback and knowledge transfer, safety analysis, safety policy, and accident and incident analysis and reporting. The results were in part modeled to important themes derived from a general system theoretical framework suggested by Svenson and developed by Svenson and Salo in relation to studies of 'non-nuclear' safety organizations. A primer to important features of the system theoretical framework is presented in the introductory chapter. The results from the interviews generated interesting descriptions about nuclear safety management in relation to the above themes. Regarding organizational restructuring, mainly centralizations of resources, several examples of reasons for the restructuring and related benefits for this centralization of resources were identified. A number of important reminders that ought to be considered in relation to reorganization were also identified. Regarding threats to the own organization a number of such was interpreted from the interviews. Among them are risks related to generation and competence change-over and risks related to outsourcing of activities. A thorough picture of information management and practical implications related to this was revealed in the interviews. Related to information feedback is the issue of organizational safety indicators and safety indicators in general. The interview answers indicated

Safety Management Characteristics Reflected in Interviews at Swedish Nuclear Power Plants: A System Perspective Approach

International Nuclear Information System (INIS)

Salo, Ilkka

2005-12-01

The present study investigated safety management characteristics reflected in interviews with participants from two Swedish nuclear power plants. A document analysis regarding the plants' organization, safety policies, and safety culture work was carried out as well. The participants (n=9) were all nuclear power professionals, and the majority managers at different levels with at least 10 years of nuclear power experience. The interview comprised themes relevant for organizational safety and safety management, such as: organizational structures and organizational change, threats to safety, information feedback and knowledge transfer, safety analysis, safety policy, and accident and incident analysis and reporting. The results were in part modeled to important themes derived from a general system theoretical framework suggested by Svenson and developed by Svenson and Salo in relation to studies of 'non-nuclear' safety organizations. A primer to important features of the system theoretical framework is presented in the introductory chapter. The results from the interviews generated interesting descriptions about nuclear safety management in relation to the above themes. Regarding organizational restructuring, mainly centralizations of resources, several examples of reasons for the restructuring and related benefits for this centralization of resources were identified. A number of important reminders that ought to be considered in relation to reorganization were also identified. Regarding threats to the own organization a number of such was interpreted from the interviews. Among them are risks related to generation and competence change-over and risks related to outsourcing of activities. A thorough picture of information management and practical implications related to this was revealed in the interviews. Related to information feedback is the issue of organizational safety indicators and safety indicators in general. The interview answers indicated that the area

System safety engineering analysis handbook

Science.gov (United States)

Ijams, T. E.

1972-01-01

The basic requirements and guidelines for the preparation of System Safety Engineering Analysis are presented. The philosophy of System Safety and the various analytic methods available to the engineering profession are discussed. A text-book description of each of the methods is included.

Safety performance monitoring of autonomous marine systems

International Nuclear Information System (INIS)

Thieme, Christoph A.; Utne, Ingrid B.

2017-01-01

The marine environment is vast, harsh, and challenging. Unanticipated faults and events might lead to loss of vessels, transported goods, collected scientific data, and business reputation. Hence, systems have to be in place that monitor the safety performance of operation and indicate if it drifts into an intolerable safety level. This article proposes a process for developing safety indicators for the operation of autonomous marine systems (AMS). The condition of safety barriers and resilience engineering form the basis for the development of safety indicators, synthesizing and further adjusting the dual assurance and the resilience based early warning indicator (REWI) approaches. The article locates the process for developing safety indicators in the system life cycle emphasizing a timely implementation of the safety indicators. The resulting safety indicators reflect safety in AMS operation and can assist in planning of operations, in daily operational decision-making, and identification of improvements. Operation of an autonomous underwater vehicle (AUV) exemplifies the process for developing safety indicators and their implementation. The case study shows that the proposed process leads to a comprehensive set of safety indicators. It is expected that application of the resulting safety indicators consequently will contribute to safer operation of current and future AMS. - Highlights: • Process for developing safety indicators for autonomous marine systems. • Safety indicators based on safety barriers and resilience thinking. • Location of the development process in the system lifecycle. • Case study on AUV demonstrating applicability of the process.

77 FR 70409 - System Safety Program

Science.gov (United States)

2012-11-26

...-0060, Notice No. 2] 2130-AC31 System Safety Program AGENCY: Federal Railroad Administration (FRA... rulemaking (NPRM) published on September 7, 2012, FRA proposed regulations to require commuter and intercity passenger railroads to develop and implement a system safety program (SSP) to improve the safety of their...

Modelling safety of multistate systems with ageing components

Energy Technology Data Exchange (ETDEWEB)

Kołowrocki, Krzysztof; Soszyńska-Budny, Joanna [Gdynia Maritime University, Department of Mathematics ul. Morska 81-87, Gdynia 81-225 Poland (Poland)

2016-06-08

An innovative approach to safety analysis of multistate ageing systems is presented. Basic notions of the ageing multistate systems safety analysis are introduced. The system components and the system multistate safety functions are defined. The mean values and variances of the multistate systems lifetimes in the safety state subsets and the mean values of their lifetimes in the particular safety states are defined. The multi-state system risk function and the moment of exceeding by the system the critical safety state are introduced. Applications of the proposed multistate system safety models to the evaluation and prediction of the safty characteristics of the consecutive “m out of n: F” is presented as well.

Modelling safety of multistate systems with ageing components

International Nuclear Information System (INIS)

Kołowrocki, Krzysztof; Soszyńska-Budny, Joanna

2016-01-01

An innovative approach to safety analysis of multistate ageing systems is presented. Basic notions of the ageing multistate systems safety analysis are introduced. The system components and the system multistate safety functions are defined. The mean values and variances of the multistate systems lifetimes in the safety state subsets and the mean values of their lifetimes in the particular safety states are defined. The multi-state system risk function and the moment of exceeding by the system the critical safety state are introduced. Applications of the proposed multistate system safety models to the evaluation and prediction of the safty characteristics of the consecutive “m out of n: F” is presented as well.

Applications of computer based safety systems in Korea nuclear power plants

International Nuclear Information System (INIS)

Won Young Yun

1998-01-01

With the progress of computer technology, the applications of computer based safety systems in Korea nuclear power plants have increased rapidly in recent decades. The main purpose of this movement is to take advantage of modern computer technology so as to improve the operability and maintainability of the plants. However, in fact there have been a lot of controversies on computer based systems' safety between the regulatory body and nuclear utility in Korea. The Korea Institute of Nuclear Safety (KINS), technical support organization for nuclear plant licensing, is currently confronted with the pressure to set up well defined domestic regulatory requirements from this aspect. This paper presents the current status and the regulatory activities related to the applications of computer based safety systems in Korea. (author)

Evaluating Safety Culture Under the Socio-Technical Complex Systems Perspective

International Nuclear Information System (INIS)

Lemos, F. L. de

2016-01-01

Since the term “safety culture” was coined, it has gained more and more attention as an effort to achieve higher levels of system safety. A good deal of effort has been done in order to better define, evaluate and implement safety culture programs in organizations throughout all industries, and especially in the Nuclear Industry. Unfortunately, despite all those efforts, we continue to witness accidents that are, in great part, attributed to flaws in the safety culture of the organization. Fukushima nuclear accident is one example of a serious accident in which flaws in the safety culture has been pointed to as one of the main contributors. In general, the definitions of safety culture emphasise the social aspect of the system. While the definitions also include the relations with the technical aspects, it does so in a general sense. For example, the International Nuclear Safety Advisory Group (INSAG) defines safety culture as: “The assembly of characteristics and attitudes in organizations and individuals which establishes that, as an overriding priority, nuclear plant safety issues receives the attention warranted by their significance.” By the way safety culture is defined we can infer that it represents a property of a social system, or a property of the social aspect of the system. In this sense, the social system is a component of the whole system. Where, “system” is understood to be comprised of a social (humans) and technical (equipment) aspects, as a Nuclear Power Plant, for example. Therefore, treating safety culture as an identity on its own right, finding and fixing flaws in the safety culture may not be enough to improve safety of the system. We also needed to evaluate all the interactions between the components that comprise all the aspects of the system. In some cases a flaw in the safety culture can easily be detected, such as an employee not wearing appropriate individual protection equipment, e.g., dosimeter, or when basic safety

Programmable electronic safety systems

International Nuclear Information System (INIS)

Parry, R.R.

1993-01-01

Traditionally safety systems intended for protecting personnel from electrical and radiation hazards at particle accelerator laboratories have made extensive use of electromechanical relays. These systems have the advantage of high reliability and allow the designer to easily implement fail-safe circuits. Relay based systems are also typically simple to design, implement, and test. As systems, such as those presently under development at the Superconducting Super Collider Laboratory (SSCL), increase in size, and the number of monitored points escalates, relay based systems become cumbersome and inadequate. The move toward Programmable Electronic Safety Systems is becoming more widespread and accepted. In developing these systems there are numerous precautions the designer must be concerned with. Designing fail-safe electronic systems with predictable failure states is difficult at best. Redundancy and self-testing are prime examples of features that should be implemented to circumvent and/or detect failures. Programmable systems also require software which is yet another point of failure and a matter of great concern. Therefore the designer must be concerned with both hardware and software failures and build in the means to assure safe operation or shutdown during failures. This paper describes features that should be considered in developing safety systems and describes a system recently installed at the Accelerator Systems String Test (ASST) facility of the SSCL

System safety education focused on industrial engineering

Science.gov (United States)

Johnston, W. L.; Morris, R. S.

1971-01-01

An educational program, designed to train students with the specific skills needed to become safety specialists, is described. The discussion concentrates on application, selection, and utilization of various system safety analytical approaches. Emphasis is also placed on the management of a system safety program, its relationship with other disciplines, and new developments and applications of system safety techniques.

Cyber Security Risk Assessment for the KNICS Safety Systems

International Nuclear Information System (INIS)

Lee, C. K.; Park, G. Y.; Lee, Y. J.; Choi, J. G.; Kim, D. H.; Lee, D. Y.; Kwon, K. C.

2008-01-01

In the Korea Nuclear I and C Systems Development (KNICS) project the platforms for plant protection systems are developed, which function as a reactor shutdown, actuation of engineered safety features and a control of the related equipment. Those are fully digitalized through the use of safety-grade programmable logic controllers (PLCs) and communication networks. In 2006 the Regulatory Guide 1.152 (Rev. 02) was published by the U.S. NRC and it describes the application of a cyber security to the safety systems in the Nuclear Power Plant (NPP). Therefore it is required that the new requirements are incorporated into the developed platforms to apply to NPP, and a cyber security risk assessment is performed. The results of the assessment were input for establishing the cyber security policies and planning the work breakdown to incorporate them

Radiation safety systems at the NSLS

International Nuclear Information System (INIS)

Dickinson, T.

1987-04-01

This report describes design principles that were used to establish the radiation safety systems at the National Synchrotron Light Source. The author described existing safety systems and the history of partial system failures. 1 fig

Knowledge management and safety compliance in a high-risk distributed organizational system.

Science.gov (United States)

Gressgård, Leif Jarle

2014-06-01

In a safety perspective, efficient knowledge management is important for learning purposes and thus to prevent errors from occurring repeatedly. The relationship between knowledge exchange among employees and safety behavior may be of particular importance in distributed organizational systems where similar high-risk activities take place at several locations. This study develops and tests hypotheses concerning the relationship between knowledge exchange systems usage, knowledge exchange in the organizational system, and safety compliance. The operational context of the study is petroleum drilling and well operations involving distributed high-risk activities. The hypotheses are tested by use of survey data collected from a large petroleum operator company and eight of its main contractors. The results show that safety compliance is influenced by use of knowledge exchange systems and degree of knowledge exchange in the organizational system, both within and between units. System usage is the most important predictor, and safety compliance seems to be more strongly related to knowledge exchange within units than knowledge exchange between units. Overall, the study shows that knowledge management is central for safety behavior.

Systems Safety and Engineering Division

Data.gov (United States)

Federal Laboratory Consortium — Volpe's Systems Safety and Engineering Division conducts engineering, research, and analysis to improve transportation safety, capacity, and resiliency. We provide...

Design for safety: theoretical framework of the safety aspect of BIM system to determine the safety index

Directory of Open Access Journals (Sweden)

Ai Lin Evelyn Teo

2016-12-01

Full Text Available Despite the safety improvement drive that has been implemented in the construction industry in Singapore for many years, the industry continues to report the highest number of workplace fatalities, compared to other industries. The purpose of this paper is to discuss the theoretical framework of the safety aspect of a proposed BIM System to determine a Safety Index. An online questionnaire survey was conducted to ascertain the current workplace safety and health situation in the construction industry and explore how BIM can be used to improve safety performance in the industry. A safety hazard library was developed based on the main contributors to fatal accidents in the construction industry, determined from the formal records and existing literature, and a series of discussions with representatives from the Workplace Safety and Health Institute (WSH Institute in Singapore. The results from the survey suggested that the majority of the firms have implemented the necessary policies, programmes and procedures on Workplace Safety and Health (WSH practices. However, BIM is still not widely applied or explored beyond the mandatory requirement that building plans should be submitted to the authorities for approval in BIM format. This paper presents a discussion of the safety aspect of the Intelligent Productivity and Safety System (IPASS developed in the study. IPASS is an intelligent system incorporating the buildable design concept, theory on the detection, prevention and control of hazards, and the Construction Safety Audit Scoring System (ConSASS. The system is based on the premise that safety should be considered at the design stage, and BIM can be an effective tool to facilitate the efforts to enhance safety performance. IPASS allows users to analyse and monitor key aspects of the safety performance of the project before the project starts and as the project progresses.

Improved safety of the system 80+TM standard plants design through increased diversity and redundancy of safety systems

International Nuclear Information System (INIS)

Matzie, Regis A.; Carpentino, Frederick L.; Robertson, James E.

1996-01-01

Safely systems in the System 80+ TM Standard Plant are designed with more redundancy, diversity and simplicity than earlier nuclear power plant designs. These gains were accomplished by an evolutionary process that preserved the desirable and proven features in currently operating nuclear plants, while improving reliability and defense-in-depth. The System 80+ safety systems are the primary contributors to a core damage frequency that is more than 100 times lower than 1980's vintage U. S. designs, including the predecessor System 80 R standard nuclear steam supply system (NSSS) design. The System 80+ design includes significant improvements to the safety injection system, emergency feedwater system, shutdown cooling system, containment spray system, reactor coolant gas vent system, and to their vital support systems. These improvements enhance performance for traditional design basis events and significantly reduce the probability of a severe accident. The System 80+ design also incorporates safety systems to mitigate a severe accident. The added systems include the rapid depressurization system, the in-containment refueling water storage tank, the cavity flooding system. These systems fully address the U. S. Nuclear Regulatory Commission's (US NRC) severe accident policy. The System 80+ safety systems are integrated with the System 80+ Nuclear Island (NI) design. The NI general arrangement provides quadrant separation of the safety systems for protection from fire and flooding, and large equipment pull spaces and lay down areas for maintenance. This paper will describe the System 80+ safety systems advanced design features, the improved accident prevention and mitigation capabilities, and startup, operating and maintenance benefits

Automatic creation of Markov models for reliability assessment of safety instrumented systems

International Nuclear Information System (INIS)

Guo Haitao; Yang Xianhui

2008-01-01

After the release of new international functional safety standards like IEC 61508, people care more for the safety and availability of safety instrumented systems. Markov analysis is a powerful and flexible technique to assess the reliability measurements of safety instrumented systems, but it is fallible and time-consuming to create Markov models manually. This paper presents a new technique to automatically create Markov models for reliability assessment of safety instrumented systems. Many safety related factors, such as failure modes, self-diagnostic, restorations, common cause and voting, are included in Markov models. A framework is generated first based on voting, failure modes and self-diagnostic. Then, repairs and common-cause failures are incorporated into the framework to build a complete Markov model. Eventual simplification of Markov models can be done by state merging. Examples given in this paper show how explosively the size of Markov model increases as the system becomes a little more complicated as well as the advancement of automatic creation of Markov models

Product Engineering Class in the Software Safety Risk Taxonomy for Building Safety-Critical Systems

Science.gov (United States)

Hill, Janice; Victor, Daniel

2008-01-01

When software safety requirements are imposed on legacy safety-critical systems, retrospective safety cases need to be formulated as part of recertifying the systems for further use and risks must be documented and managed to give confidence for reusing the systems. The SEJ Software Development Risk Taxonomy [4] focuses on general software development issues. It does not, however, cover all the safety risks. The Software Safety Risk Taxonomy [8] was developed which provides a construct for eliciting and categorizing software safety risks in a straightforward manner. In this paper, we present extended work on the taxonomy for safety that incorporates the additional issues inherent in the development and maintenance of safety-critical systems with software. An instrument called a Software Safety Risk Taxonomy Based Questionnaire (TBQ) is generated containing questions addressing each safety attribute in the Software Safety Risk Taxonomy. Software safety risks are surfaced using the new TBQ and then analyzed. In this paper we give the definitions for the specialized Product Engineering Class within the Software Safety Risk Taxonomy. At the end of the paper, we present the tool known as the 'Legacy Systems Risk Database Tool' that is used to collect and analyze the data required to show traceability to a particular safety standard

Improvement of risk informed surveillance test interval for the safety related instrument and control system of Ulchin units 3 and 4

International Nuclear Information System (INIS)

Jang, Seung Cheol; Lee, Yun Hwan; Lee, Seung Joon; Han, Sang Hoon

2012-05-01

The purpose of this research is the development of various methodologies necessary for the licensing of the risk informed surveillance test interval(STI) improvement for the safety related I and C systems in UCN 3 and 4, for instance, reactor protection system (RPS), engineered safety features actuation system (ESFAS), ESF auxiliary relay cabinet (ARC), and core protection calculator (CPC). The technical adequacy of the methodology was sufficiently verified through the application to the following STI changes. o CPC channel functional test (change from 1 month to 3 months including safety channel and log power test) o RPS channel functional test (change from 1 month to 3 months) o RPS logic and trip channel test (change from 1 month to 3 months. 1 month for RPS manual actuation test) o ESFAS channel functional test (change from 1 month to 3 months) o ESFAS logic and trip channel test (change from 1 month to 3 months) o ESF auxiliary relay test (change from 1 month to 3 months with staggered test. Manual actuation at the ESF ARC is added as a backup of ESF actuation signals during emergency operation

Improvement of risk informed surveillance test interval for the safety related instrumentation and control system of Yonggwang units 3 and 4

International Nuclear Information System (INIS)

Jang, Seung Cheol; Lee, Yun Hwan; Lee, Seung Joon; Han, Sang Hoon

2012-05-01

The purpose of this research is the development of various methodologies necessary for the licensing of the risk informed surveillance test interval(STI) improvement for the safety related I and C systems in YGN 3 and 4, for instance, reactor protection system (RPS), engineered safety features actuation system (ESFAS), ESF auxiliary relay cabinet (ARC), and core protection calculator (CPC). The technical adequacy of the methodology was sufficiently verified through the application to the following STI changes. o CPC channel functional test (change from 1 month to 3 months including safety channel and log power test) o RPS channel functional test (change from 1 month to 3 months) o RPS logic and trip channel test (change from 1 month to 3 months. 1 month for RPS manual actuation test) o ESFAS channel functional test (change from 1 month to 3 months) o ESFAS logic and trip channel test (change from 1 month to 3 months) o ESF auxiliary relay test (change from 1 month to 3 months with staggered test. Manual actuation at the ESF ARC is added as a backup of ESF actuation signals during emergency operation

The Management System for Nuclear Installations Safety Guide

International Nuclear Information System (INIS)

2009-01-01

This Safety Guide is applicable throughout the lifetime of a nuclear installation, including any subsequent period of institutional control, until there is no significant residual radiation hazard. For a nuclear installation, the lifetime includes site evaluation, design, construction, commissioning, operation and decommissioning. These stages in the lifetime of a nuclear installation may overlap. This Safety Guide may be applied to nuclear installations in the following ways: (a)To support the development, implementation, assessment and improvement of the management system of those organizations responsible for research, site evaluation, design, construction, commissioning, operation and decommissioning of a nuclear installation; (b)As an aid in the assessment by the regulatory body of the adequacy of the management system of a nuclear installation; (c)To assist an organization in specifying to a supplier, via contractual documentation, any specific element that should be included within the supplier's management system for the supply of products. This Safety Guide follows the structure of the Safety Requirements publication on The Management System for Facilities and Activities, whereby: (a)Section 2 provides recommendations on implementing the management system, including recommendations relating to safety culture, grading and documentation. (b)Section 3 provides recommendations on the responsibilities of senior management for the development and implementation of an effective management system. (c)Section 4 provides recommendations on resource management, including guidance on human resources, infrastructure and the working environment. (d)Section 5 provides recommendations on how the processes of the installation can be specified and developed, including recommendations on some generic processes of the management system. (e)Section 6 provides recommendations on the measurement, assessment and improvement of the management system of a nuclear installation. (f

Software system safety

Science.gov (United States)

Uber, James G.

1988-01-01

Software itself is not hazardous, but since software and hardware share common interfaces there is an opportunity for software to create hazards. Further, these software systems are complex, and proven methods for the design, analysis, and measurement of software safety are not yet available. Some past software failures, future NASA software trends, software engineering methods, and tools and techniques for various software safety analyses are reviewed. Recommendations to NASA are made based on this review.

Probabilistic safety criteria at the safety function/system level

International Nuclear Information System (INIS)

1989-09-01

A Technical Committee Meeting was held in Vienna, Austria, from 26-30 January 1987. The objectives of the meeting were: to review the national developments of PSC at the level of safety functions/systems including future trends; to analyse basic principles, assumptions, and objectives; to compare numerical values and the rationale for choosing them; to compile the experience with use of such PSC; to analyse the role of uncertainties in particular regarding procedures for showing compliance. The general objective of establishing PSC at the level of safety functions/systems is to provide a pragmatic tool to evaluate plant safety which is placing emphasis on the prevention principle. Such criteria could thus lead to a better understanding of the importance to safety of the various functions which have to be performed to ensure the safety of the plant, and the engineering means of performing these functions. They would reflect the state-of-the-art in modern PSAs and could contribute to a balance in system design. This report, prepared by the participants of the meeting, reviews the current status and future trends in the field and should assist Member States in developing their national approaches. The draft of this document was also submitted to INSAG to be considered in its work to prepare a document on safety principles for nuclear power plants. Five papers presented at the meeting are also included in this publication. A separate abstract was prepared for each of these papers. Refs, figs and tabs

Reactor Safety Assessment System

International Nuclear Information System (INIS)

Sebo, D.E.; Bray, M.A.; King, M.A.

1987-01-01

The Reactor Safety Assessment System (RSAS) is an expert system under development for the United States Nuclear Regulatory Commission (USNRC). RSAS is designed for use at the USNRC Operations Center in the event of a serious incident at a licensed nuclear power plant. RSAS is a situation assessment expert system which uses plant parametric data to generate conclusions for use by the NRC Reactor Safety Team. RSAS uses multiple rule bases and plant specific setpoint files to be applicable to all licensed nuclear power plants in the United States. RSAS currently covers several generic reactor categories and multiple plants within each category

Reactor safety assessment system

International Nuclear Information System (INIS)

Sebo, D.E.; Bray, M.A.; King, M.A.

1987-01-01

The Reactor Safety Assessment System (RSAS) is an expert system under development for the United States Nuclear Regulatory Commission (USNRC). RSA is designed for use at the USNRC Operations Center in the event of a serious incident at a licensed nuclear power plant. RSAS is a situation assessment expert system which uses plant parametric data to generate conclusions for use by the NRC Reactor Safety Team. RSAS uses multiple rule bases and plant specific setpoint files to be applicable to all licensed nuclear power plants in the United States. RSAS currently covers several generic reactor categories and multiple plants within each category

Safety systems and safety analysis of the Qinshan phase III CANDU nuclear power plant

International Nuclear Information System (INIS)

Cai Jianping; Shen Sen; Barkman, N.

1999-01-01

The author introduces the Canadian nuclear reactor safety philosophy and the Qinshan Phase III CANDU NPP safety systems and safety analysis, which are designed and performed according to this philosophy. The concept of 'defence-in-depth' is a key element of the Canadian nuclear reactor safety philosophy. The design concepts of redundancy, diversity, separation, equipment qualification, quality assurance, and use of appropriate design codes and standards are adopted in the design. Four special safety systems as well as a set of reliable safety support systems are incorporated in the design of Qinshan phase III CANDU for accident mitigation. The assessment results for safety systems performance show that the fundamental safety criteria for public dose, and integrity of fuel, channels and the reactor building, are satisfied

Safety assessment of emergency electric power systems for nuclear power plants

International Nuclear Information System (INIS)

1986-09-01

This paper is intended to assist the safety assessor within a regulatory body, or one working as a consultant, in assessing a given design of the Emergency Electrical Power System. Those non-electric power systems which may be used in a plant design to serve as emergency energy sources are addressed only in their general safety aspects. The paper thus relates closely to Safety Series 50-SG-D7 ''Emergency Power Systems at Nuclear Power Plants'' (1982), as far as it addresses emergency electric power systems. Several aspects are dealt with: the information the assessor may expect from the applicant to fulfill his task of safety review; the main questions the reviewer has to answer in order to determine the compliance with requirements of the NUSS documents; the national or international standards which give further guidance on a certain system or piece of equipment; comments and suggestions which may help to judge a variety of possible solutions

Safety related terms for advanced nuclear plants; Terminos relacionados con la seguridad para centrales nucleares avanzadas

Energy Technology Data Exchange (ETDEWEB)

NONE

1995-12-01

The terms considered in this document are in widespread current use without a universal consensus as to their meaning. Other safety related terms are already defined in national or international codes and standards as well as in IAEA's Nuclear Safety Standards Series. Most of the terms in those codes and standards have been defined and used for regulatory purposes, generally for application to present reactor designs. There is no intention to duplicate the description of such regulatory terms here, but only to clarify the terms used for advanced nuclear plants. The following terms are described in this paper: Inherent safety characteristics, passive component, active component, passive systems, active system, fail-safe, grace period, foolproof, fault-/error-tolerant, simplified safety system, transparent safety.

Food safety performance indicators to benchmark food safety output of food safety management systems.

Science.gov (United States)

Jacxsens, L; Uyttendaele, M; Devlieghere, F; Rovira, J; Gomez, S Oses; Luning, P A

2010-07-31

There is a need to measure the food safety performance in the agri-food chain without performing actual microbiological analysis. A food safety performance diagnosis, based on seven indicators and corresponding assessment grids have been developed and validated in nine European food businesses. Validation was conducted on the basis of an extensive microbiological assessment scheme (MAS). The assumption behind the food safety performance diagnosis is that food businesses which evaluate the performance of their food safety management system in a more structured way and according to very strict and specific criteria will have a better insight in their actual microbiological food safety performance, because food safety problems will be more systematically detected. The diagnosis can be a useful tool to have a first indication about the microbiological performance of a food safety management system present in a food business. Moreover, the diagnosis can be used in quantitative studies to get insight in the effect of interventions on sector or governmental level. Copyright 2010 Elsevier B.V. All rights reserved.

Requirements to be taken into account in the design, qualification startup and operation of electrical equipment for safety-related electrical systems

International Nuclear Information System (INIS)

1985-07-01

RFS or Regles Fondamentales de Surete (Basic Safety Rules) applicable to certain types of nuclear facilities lay down requirements with which compliance, for the type of facilities and within the scope of application covered by the RFS, is considered to be equivalent to compliance with technical French regulatory practice. The object of the RFS is to take advantage of standardization in the field of safety, while allowing for technical progress in that field. They are designed to enable the operating utility and contractors to know the rules pertaining to various subjects which are considered to be acceptable by the Service Central de Surete des Installations Nucleaires, or the SCSIN (Central Department for the Safety of Nuclear Facilities). These RFS should make safety analysis easier and lead to better understanding between experts and individuals concerned with the problems of nuclear safety. The SCSIN reserves the right to modify, when considered necessary, any RFS and specify, if need be, the terms under which a modification is deemed retroactive. The purpose of this RFS is to provide the rules to be respected in order that safety-related electrical systems can perform its function under plausible operating conditions

Safety and interlock system for Tristan

International Nuclear Information System (INIS)

Takeda, S.; Kudo, K.; Katoh, T.; Akiyama, A.

1987-01-01

This report describes alarm and interlock system of TRISTAN, concentrating on personnel safety. The basis of TRISTAN machine-control system (TMS) is an N-to-N computer network and KEK NODAL which offers high software productivity. TMC achieves high flexibility of operation both for normal operation and for the fast commissioning. However, to assure the safety of personnel and the TRISTAN machine operation, the safety system has to continue functioning during TMC failure as well. A distributed safety and interlock system (DSIS) is used for diversification of risks in TRISTAN system. DSIS is functionally subdivided along local system lines and has a hierarchical structure of 12 programmable sequence controllers (PSCs). Optical fiber links connect the PSCs at subsystem level and a PSC at the supervisory level of TRISTAN central control room (TCCR). The subsystem PSCs provide the interlock functions between their local devices. The local PSCs interact with the central system through a limited number of summarized signals. The central PSC provides the interlock functions between the subsystems and interacts with an operator's panel. Personnel safety is based on a system of electrical interlock keys, emergency push-buttons around the tunnel, at the entrance gates or in the control room

Safety-critical Java for embedded systems

DEFF Research Database (Denmark)

Schoeberl, Martin; Dalsgaard, Andreas Engelbredt; Hansen, René Rydhof

2016-01-01

This paper presents the motivation for and outcomes of an engineering research project on certifiable Javafor embedded systems. The project supports the upcoming standard for safety-critical Java, which defines asubset of Java and libraries aiming for development of high criticality systems....... The outcome of this projectinclude prototype safety-critical Java implementations, a time-predictable Java processor, analysis tools formemory safety, and example applications to explore the usability of safety-critical Java for this applicationarea. The text summarizes developments and key contributions...

Decomobil, Deliverable 3.6, Human Centred Design for Safety Critical Transport Systems

OpenAIRE

PAUZIE, Annie; MENDOZA, Lucile; SIMOES, Anabela; BELLET, Thierry; MOREAU, Fabien

2014-01-01

The scientific seminar on 'Human Centred Design for Safety Critical Transport Systems' organized in the framework of DECOMOBIL has been held the 8th of September 2014 in Lisbon, Portugal, hosted by ADI/ISG. The aims of the event were to present the scientific problematic related to the safety of the complex transport systems and the increasing importance of human-­centred design, with a specific focus on Resilience Engineering concept, a new approach to safety management in highly complex sys...

49 CFR 659.25 - Annual review of system safety program plan and system security plan.

Science.gov (United States)

2010-10-01

... system security plan. 659.25 Section 659.25 Transportation Other Regulations Relating to Transportation... and system security plan. (a) The oversight agency shall require the rail transit agency to conduct an annual review of its system safety program plan and system security plan. (b) In the event the rail...

A study of software safety analysis system for safety-critical software

International Nuclear Information System (INIS)

Chang, H. S.; Shin, H. K.; Chang, Y. W.; Jung, J. C.; Kim, J. H.; Han, H. H.; Son, H. S.

2004-01-01

The core factors and requirements for the safety-critical software traced and the methodology adopted in each stage of software life cycle are presented. In concept phase, Failure Modes and Effects Analysis (FMEA) for the system has been performed. The feasibility evaluation of selected safety parameter was performed and Preliminary Hazards Analysis list was prepared using HAZOP(Hazard and Operability) technique. And the check list for management control has been produced via walk-through technique. Based on the evaluation of the check list, activities to be performed in requirement phase have been determined. In the design phase, hazard analysis has been performed to check the safety capability of the system with regard to safety software algorithm using Fault Tree Analysis (FTA). In the test phase, the test items based on FMEA have been checked for fitness guided by an accident scenario. The pressurizer low pressure trip algorithm has been selected to apply FTA method to software safety analysis as a sample. By applying CASE tool, the requirements traceability of safety critical system has been enhanced during all of software life cycle phases

Critical incidents related to cardiac arrests reported to the Danish Patient Safety Database

DEFF Research Database (Denmark)

Andersen, Peter Oluf; Maaløe, Rikke; Andersen, Henning Boje

2010-01-01

Background Critical incident reports can identify areas for improvement in resuscitation practice. The Danish Patient Safety Database is a mandatory reporting system and receives critical incident reports submitted by hospital personnel. The aim of this study is to identify, analyse and categorize...... critical incidents related to cardiac arrests reported to the Danish Patient Safety Database. Methods The search terms “cardiac arrest” and “resuscitation” were used to identify reports in the Danish Patient Safety Database. Identified critical incidents were then classified into categories. Results One...

Use of FPGA and CPLD in nuclear reactor safety systems and its regulatory review requirements for reactor safety

International Nuclear Information System (INIS)

Roy, Suvadip; Biswas, Animesh; Pradhan, S.K.

2015-01-01

Field Programmable Gate Arrays (FPGA) and Complex Programmable Logic Devices (CPLD) is being used widely in safety critical and safety related systems in nuclear power plans like in trip logic units, Engineered Safety Feature (ESF) actuation decision logic and neutronic signal processing for their reprogrammability feature and compact design. These HDL Programmable devices (HPD) are complex devices consisting of both hardware and software which is used to implement the logic on the FPGA. It is observed that these Programmable devices suffer from various modes of failure and the major failures in these devices are due to Single Event Upset (SEU), where a highly energetic ionizing radiation may lead to device failure which can even occur in radiologically benign environment. Other failures can occur during steps of developing the hardware using software tools like during Synthesis and placement and routing of the desired hardware. Here a study on use of such devices in Nuclear Reactors, study on mode of failures of these devices, way to tackle such failure and development of review guidelines for review of such devices used in safety critical and safety related systems with special emphasis on choice of software tools, way to mitigate effects of SEU and simulation and hardware testing results to be reviewed by regulatory body during design safety review is done. (author)

OBTAINING FOOD SAFETY BY APPLYING HACCP SYSTEM

Directory of Open Access Journals (Sweden)

ION CRIVEANU

2012-01-01

Full Text Available In order to increase the confidence of the trading partners and consumers in the products which are sold on the market, enterprises producing food are required to implement the food safety system HACCP,a particularly useful system because the manufacturer is not able to fully control finished products . SR EN ISO 22000:2005 establishes requirements for a food safety management system where an organization in the food chain needs to proove its ability to control food safety hazards in order to ensure that food is safe at the time of human consumption. This paper presents the main steps which ensure food safety using the HACCP system, and SR EN ISO 20000:2005 requirements for food safety.

Hospital nurses' working conditions in relation to motivation and patient safety.

Science.gov (United States)

Toode, Kristi; Routasalo, Pirkko; Helminen, Mika; Suominen, Tarja

2015-03-01

There is a lack of empirical knowledge about nurses' perceptions of their workplace characteristics and conditions, such as level of autonomy and decision authority, work climate, teamwork, skill exploitation and learning opportunities, and their work motivation in relation to practice outputs such as patient safety. Such knowledge is needed particularly in countries, such as Estonia, where hospital systems for preventing errors and improving patient safety are in the early stages of development. This article reports the findings from a cross-sectional survey of hospital nurses in Estonia that was aimed at determining their perceptions of workplace characteristics, working conditions, work motivation and patient safety, and at exploring the relationship between these. Results suggest that perceptions of personal control over their work can affect nurses' motivation, and that perceptions of work satisfaction might be relevant to patient safety improvement work.

Design-related inherent safety characteristics in large LMFBR power plants

International Nuclear Information System (INIS)

Tzanos, C.P.; Barthold, W.P.; Bowers, C.H.; Ferguson, D.R.; Prohammer, F.G.; van Erp, J.B.

1976-01-01

Design-related safety-enhancing features such as (1) extended pump coastdown, (2) increased negative reactivity feedbacks, (3) reduced sodium void reactivity, and (4) self-actuated shutdown systems are evaluated. Primary emphasis is placed on preventing or limiting core damage. Attention is also given to features aimed at mitigation of the energetics potential of hypothetical core-disruptive accidents

Industrial Personal Computer based Display for Nuclear Safety System

International Nuclear Information System (INIS)

Kim, Ji Hyeon; Kim, Aram; Jo, Jung Hee; Kim, Ki Beom; Cheon, Sung Hyun; Cho, Joo Hyun; Sohn, Se Do; Baek, Seung Min

2014-01-01

The safety display of nuclear system has been classified as important to safety (SIL:Safety Integrity Level 3). These days the regulatory agencies are imposing more strict safety requirements for digital safety display system. To satisfy these requirements, it is necessary to develop a safety-critical (SIL 4) grade safety display system. This paper proposes industrial personal computer based safety display system with safety grade operating system and safety grade display methods. The description consists of three parts, the background, the safety requirements and the proposed safety display system design. The hardware platform is designed using commercially available off-the-shelf processor board with back plane bus. The operating system is customized for nuclear safety display application. The display unit is designed adopting two improvement features, i.e., one is to provide two separate processors for main computer and display device using serial communication, and the other is to use Digital Visual Interface between main computer and display device. In this case the main computer uses minimized graphic functions for safety display. The display design is at the conceptual phase, and there are several open areas to be concreted for a solid system. The main purpose of this paper is to describe and suggest a methodology to develop a safety-critical display system and the descriptions are focused on the safety requirement point of view

Industrial Personal Computer based Display for Nuclear Safety System

Energy Technology Data Exchange (ETDEWEB)

Kim, Ji Hyeon; Kim, Aram; Jo, Jung Hee; Kim, Ki Beom; Cheon, Sung Hyun; Cho, Joo Hyun; Sohn, Se Do; Baek, Seung Min [KEPCO, Youngin (Korea, Republic of)

2014-08-15

The safety display of nuclear system has been classified as important to safety (SIL:Safety Integrity Level 3). These days the regulatory agencies are imposing more strict safety requirements for digital safety display system. To satisfy these requirements, it is necessary to develop a safety-critical (SIL 4) grade safety display system. This paper proposes industrial personal computer based safety display system with safety grade operating system and safety grade display methods. The description consists of three parts, the background, the safety requirements and the proposed safety display system design. The hardware platform is designed using commercially available off-the-shelf processor board with back plane bus. The operating system is customized for nuclear safety display application. The display unit is designed adopting two improvement features, i.e., one is to provide two separate processors for main computer and display device using serial communication, and the other is to use Digital Visual Interface between main computer and display device. In this case the main computer uses minimized graphic functions for safety display. The display design is at the conceptual phase, and there are several open areas to be concreted for a solid system. The main purpose of this paper is to describe and suggest a methodology to develop a safety-critical display system and the descriptions are focused on the safety requirement point of view.

The LHC personnel safety system

International Nuclear Information System (INIS)

Ninin, P.; Valentini, F.; Ladzinski, T.

2011-01-01

Large particle physics installations such as the CERN Large Hadron Collider require specific Personnel Safety Systems (PSS) to protect the personnel against the radiological and industrial hazards. In order to fulfill the French regulation in matter of nuclear installations, the principles of IEC 61508 and IEC 61513 standard are used as a methodology framework to evaluate the criticality of the installation, to design and to implement the PSS.The LHC PSS deals with the implementation of all physical barriers, access controls and interlock devices around the 27 km of underground tunnel, service zones and experimental caverns of the LHC. The system shall guarantee the absence of personnel in the LHC controlled areas during the machine operations and, on the other hand, ensure the automatic accelerator shutdown in case of any safety condition violation, such as an intrusion during beam circulation. The LHC PSS has been conceived as two separate and independent systems: the LHC Access Control System (LACS) and the LHC Access Safety System (LASS). The LACS, using off the shelf technologies, realizes all physical barriers and regulates all accesses to the underground areas by identifying users and checking their authorizations.The LASS has been designed according to the principles of the IEC 61508 and 61513 standards, starting from a risk analysis conducted on the LHC facility equipped with a standard access control system. It consists in a set of safety functions realized by a dedicated fail-safe and redundant hardware guaranteed to be of SIL3 class. The integration of various technologies combining electronics, sensors, video and operational procedures adopted to establish an efficient personnel safety system for the CERN LHC accelerator is presented in this paper. (authors)

Improved Management of Part Safety Classification System for Nuclear Power Plant

Energy Technology Data Exchange (ETDEWEB)

Park, Jin Young; Park, Youn Won; Park, Heung Gyu; Park, Hyo Chan [BEES Inc., Daejeon (Korea, Republic of)

2016-10-15

As, in recent years, many quality assurance (QA) related incidents, such as falsely-certified parts and forged documentation, etc., were reported in association with the supply of structures, systems, components and parts to nuclear power plants, a need for a better management of safety classification system was addressed so that it would be based more on the level of parts . Presently, the Korean nuclear power plants do not develop and apply relevant procedures for safety classifications, but rather the safety classes of parts are determined solely based on the experience of equipment designers. So proposed in this paper is a better management plan for safety equipment classification system with an aim to strengthen the quality management for parts. The plan was developed through the analysis of newly introduced technical criteria to be applied to parts of nuclear power plant.

Cost benefit analysis of reactor safety systems

International Nuclear Information System (INIS)

Maurer, H.A.

1984-01-01

Cost/benefit analysis of reactor safety systems is a possibility appropriate to deal with reactor safety. The Commission of the European Communities supported a study on the cost-benefit or cost effectiveness of safety systems installed in modern PWR nuclear power plants. The following systems and their cooperation in emergency cases were in particular investigated in this study: the containment system (double containment), the leakage exhaust and control system, the annulus release exhaust system and the containment spray system. The benefit of a safety system is defined according to its contribution to the reduction of the radiological consequences for the environment after a LOCA. The analysis is so far performed in two different steps: the emergency core cooling system is considered to function properly, failure of the emergency core cooling system is assumed (with the possible consequence of core melt-down) and the results may demonstrate the evidence that striving for cost-effectiveness can produce a safer end result than the philosophy of safety at any cost. (orig.)

Safer Systems: A NextGen Aviation Safety Strategic Goal

Science.gov (United States)

Darr, Stephen T.; Ricks, Wendell R.; Lemos, Katherine A.

2008-01-01

The Joint Planning and Development Office (JPDO), is charged by Congress with developing the concepts and plans for the Next Generation Air Transportation System (NextGen). The National Aviation Safety Strategic Plan (NASSP), developed by the Safety Working Group of the JPDO, focuses on establishing the goals, objectives, and strategies needed to realize the safety objectives of the NextGen Integrated Plan. The three goal areas of the NASSP are Safer Practices, Safer Systems, and Safer Worldwide. Safer Practices emphasizes an integrated, systematic approach to safety risk management through implementation of formalized Safety Management Systems (SMS) that incorporate safety data analysis processes, and the enhancement of methods for ensuring safety is an inherent characteristic of NextGen. Safer Systems emphasizes implementation of safety-enhancing technologies, which will improve safety for human-centered interfaces and enhance the safety of airborne and ground-based systems. Safer Worldwide encourages coordinating the adoption of the safer practices and safer systems technologies, policies and procedures worldwide, such that the maximum level of safety is achieved across air transportation system boundaries. This paper introduces the NASSP and its development, and focuses on the Safer Systems elements of the NASSP, which incorporates three objectives for NextGen systems: 1) provide risk reducing system interfaces, 2) provide safety enhancements for airborne systems, and 3) provide safety enhancements for ground-based systems. The goal of this paper is to expose avionics and air traffic management system developers to NASSP objectives and Safer Systems strategies.

Development of digital safety system logic and control

International Nuclear Information System (INIS)

Nishikawa, H.; Sakamoto, H.

1995-01-01

Advanced-BWR (ABWR) uses total digital control and instrumentation (C and I) system. In particular, ABWR adopts a newly developed safety system using advanced digital technology. In the presentation the digital safety system design, manufacturing and factory validation test method are shortly overviewed. The digital safety system consists of micro-processor based digital controllers, data and information transmission by optical fibers and human-machine interface using color flat displays. This new developed safety system meet the nuclear safety requirements such as high reliability, independence of divisions, operability and maintainability. (2 refs., 4 figs., 1 tab.)

Performance of food safety management systems in poultry meat preparation processing plants in relation to Campylobacter spp. contamination.

Science.gov (United States)

Sampers, Imca; Jacxsens, Liesbeth; Luning, Pieternel A; Marcelis, Willem J; Dumoulin, Ann; Uyttendaele, Mieke

2010-08-01

A diagnostic instrument comprising a combined assessment of core control and assurance activities and a microbial assessment instrument were used to measure the performance of current food safety management systems (FSMSs) of two poultry meat preparation companies. The high risk status of the company's contextual factors, i.e., starting from raw materials (poultry carcasses) with possible high numbers and prevalence of pathogens such as Campylobacter spp., requires advanced core control and assurance activities in the FSMS to guarantee food safety. The level of the core FSMS activities differed between the companies, and this difference was reflected in overall microbial quality (mesophilic aerobic count), presence of hygiene indicators (Enterobacteriaceae, Staphylococcus aureus, and Escherichia coli), and contamination with pathogens such as Salmonella, Listeria monocytogenes, and Campylobacter spp. The food safety output expressed as a microbial safety profile was related to the variability in the prevalence and contamination levels of Campylobacter spp. in poultry meat preparations found in a Belgian nationwide study. Although a poultry meat processing company could have an advanced FSMS in place and a good microbial profile (i.e., lower prevalence of pathogens, lower microbial numbers, and less variability in microbial contamination), these positive factors might not guarantee pathogen-free products. Contamination could be attributed to the inability to apply effective interventions to reduce or eliminate pathogens in the production chain of (raw) poultry meat preparations.

Perspective on Secure Development Activities and Features of Safety I and C Systems

International Nuclear Information System (INIS)

Kang, Youngdoo; Yu, Yeong Jin; Kim, Hyungtae; Kwon, Yong il; Park, Yeunsoo; Choo, Jaeyul; Son, Jun Young; Jeong, Choong Heui

2015-01-01

The Enforcement Decree of the Act on Physical Protection and Radiological Emergency (ED-APPRE) was revised December 2013 to include security requirements on computer systems at nuclear facilities to protect those systems against malicious cyber-attacks. It means Cyber-Security-related measures, controls and activities of safety I and C systems against cyber-attacks shall meet the requirements of ED-APPRE. Still regulation upon inadvertent access or non-malicious modifications to the safety I and C systems is covered under the Nuclear Safety Act. The objective of this paper is to propose KINS' regulatory perspective on secure development and features against non-malicious access or modification of safety I and C systems. Secure development activities and features aim to prevent inadvertent and non-malicious access, and to prevent unwanted action from personnel or connected systems for ensuring reliable operation of safety I and C systems. Secure development activities of safety I and C systems are life cycle activities to ensure unwanted, unneeded and undocumented code is not incorporated into the systems. Secure features shall be developed, verified and qualified throughout the development life cycle

Perspective on Secure Development Activities and Features of Safety I and C Systems

Energy Technology Data Exchange (ETDEWEB)

Kang, Youngdoo; Yu, Yeong Jin; Kim, Hyungtae; Kwon, Yong il; Park, Yeunsoo; Choo, Jaeyul; Son, Jun Young; Jeong, Choong Heui [Korea Institute of Nuclear Safety, Daejeon (Korea, Republic of)

2015-05-15

The Enforcement Decree of the Act on Physical Protection and Radiological Emergency (ED-APPRE) was revised December 2013 to include security requirements on computer systems at nuclear facilities to protect those systems against malicious cyber-attacks. It means Cyber-Security-related measures, controls and activities of safety I and C systems against cyber-attacks shall meet the requirements of ED-APPRE. Still regulation upon inadvertent access or non-malicious modifications to the safety I and C systems is covered under the Nuclear Safety Act. The objective of this paper is to propose KINS' regulatory perspective on secure development and features against non-malicious access or modification of safety I and C systems. Secure development activities and features aim to prevent inadvertent and non-malicious access, and to prevent unwanted action from personnel or connected systems for ensuring reliable operation of safety I and C systems. Secure development activities of safety I and C systems are life cycle activities to ensure unwanted, unneeded and undocumented code is not incorporated into the systems. Secure features shall be developed, verified and qualified throughout the development life cycle.

Effect of Occupational Health and Safety Management System on Work-Related Accident Rate and Differences of Occupational Health and Safety Management System Awareness between Managers in South Korea's Construction Industry

OpenAIRE

Yoon, Seok J.; Lin, Hsing K.; Chen, Gang; Yi, Shinjea; Choi, Jeawook; Rui, Zhenhua

2013-01-01

Background: The study was conducted to investigate the current status of the occupational health and safety management system (OHSMS) in the construction industry and the effect of OHSMS on accident rates. Differences of awareness levels on safety issues among site general managers and occupational health and safety (OHS) managers are identified through surveys. Methods: The accident rates for the OHSMS-certified construction companies from 2006 to 2011, when the construction OHSMS became ...

Safety features of subcritical fluid fueled systems

International Nuclear Information System (INIS)

Bell, C.R.

1995-01-01

Accelerator-driven transmutation technology has been under study at Los Alamos for several years for application to nuclear waste treatment, tritium production, energy generation, and recently, to the disposition of excess weapons plutonium. Studies and evaluations performed to date at Los Alamos have led to a current focus on a fluid-fuel, fission system operating in a neutron source-supported subcritical mode, using molten salt reactor technology and accelerator-driven proton-neutron spallation. In this paper, the safety features and characteristics of such systems are explored from the perspective of the fundamental nuclear safety objectives that any reactor-type system should address. This exploration is qualitative in nature and uses current vintage solid-fueled reactors as a baseline for comparison. Based on the safety perspectives presented, such systems should be capable of meeting the fundamental nuclear safety objectives. In addition, they should be able to provide the safety robustness desired for advanced reactors. However, the manner in which safety objectives and robustness are achieved is very different from that associated with conventional reactors. Also, there are a number of safety design and operational challenges that will have to be addressed for the safety potential of such systems to be credible

Safety features of subcritical fluid fueled systems

International Nuclear Information System (INIS)

Bell, C.R.

1994-01-01

Accelerator-driven transmutation technology has been under study at Los Alamos for several years for application to nuclear waste treatment, tritium production, energy generation, and recently, to the disposition of excess weapons plutonium. Studies and evaluations performed to date at Los Alamos have led to a current focus on a fluid-fuel, fission system operating in a neutron source-supported subcritical mode, using molten salt reactor technology and accelerator-driven proton-neutron spallation. In this paper, the safety features and characteristics of such systems are explored from the perspective of the fundamental nuclear safety objectives that any reactor-type system should address. This exploration is qualitative in nature and uses current vintage solid-fueled reactors as a baseline for comparison. Based on the safety perspectives presented, such systems should be capable of meeting the fundamental nuclear safety objectives. In addition, they should be able to provide the safety robustness desired for advanced reactors. However, the manner in which safety objectives and robustness are achieved in very different from that associated with conventional reactors. Also, there are a number of safety design and operational challenges that will have to be addressed for the safety potential of such systems to be credible

Safety features of subcritical fluid fueled systems

Energy Technology Data Exchange (ETDEWEB)

Bell, C.R. [Los Alamos National Laboratory, NM (United States)

1995-10-01

Accelerator-driven transmutation technology has been under study at Los Alamos for several years for application to nuclear waste treatment, tritium production, energy generation, and recently, to the disposition of excess weapons plutonium. Studies and evaluations performed to date at Los Alamos have led to a current focus on a fluid-fuel, fission system operating in a neutron source-supported subcritical mode, using molten salt reactor technology and accelerator-driven proton-neutron spallation. In this paper, the safety features and characteristics of such systems are explored from the perspective of the fundamental nuclear safety objectives that any reactor-type system should address. This exploration is qualitative in nature and uses current vintage solid-fueled reactors as a baseline for comparison. Based on the safety perspectives presented, such systems should be capable of meeting the fundamental nuclear safety objectives. In addition, they should be able to provide the safety robustness desired for advanced reactors. However, the manner in which safety objectives and robustness are achieved is very different from that associated with conventional reactors. Also, there are a number of safety design and operational challenges that will have to be addressed for the safety potential of such systems to be credible.

77 FR 11120 - Patient Safety Organizations: Voluntary Relinquishment From UAB Health System Patient Safety...

Science.gov (United States)

2012-02-24

... Organizations: Voluntary Relinquishment From UAB Health System Patient Safety Organization AGENCY: Agency for... notification of voluntary relinquishment from the UAB Health System Patient Safety Organization of its status as a Patient Safety Organization (PSO). The Patient Safety and Quality Improvement Act of 2005...

Development of a hybrid safety system: Actuation of the secondary automatic depressurization system at an early stage

International Nuclear Information System (INIS)

Nishimoto, Masae; Umezawa, Shigemitsu; Okabe, Kazuharu; Matsuoka, Tsuyoshi

1996-01-01

A Hybrid Safety System, which is an optimum combination of active and passive safety systems, has been developed in order to improve the safety, reliability and economic features of the next generation of PWRs. The passive safety systems include Automatic primary Depressurization System (ADS), Secondary Automatic Depressurization System (SADS), advanced accumulators, gravity injection system and so on. In this study the authors have improved the actuation logic of the passive safety systems. The original logic in the previous study actuates ADS at an early stage of an event such as a Loss-of-Coolant Accident (LOCA), and this is followed by the actuation of SADS. In this study they divide SADS into two systems. The first, small SADS, uses small valves corresponding to the relief valves of the conventional PWR plants. The second, large SADS, corresponds to the original SADS using multiple valves of large capacity. With the new logic, the passive systems are actuated during a typical small LOCA. Small LOCA analyses using several break areas were performed for a 1,400 MWe PWR plant with a Hybrid Safety System. The results predict that core uncovery does not occur in the case of a relatively small break area and that core heat removal during a small LOCA is improved in comparison with the analyses for conventional PWR plants, where the secondary pressure remains higher during the event. The results also predict that this new logic make it possible to reduce the ADS valve size and the actuation pressure setpoint of the passive safety systems

Cyber Security Penetration Test for Digital Safety I and C Systems

International Nuclear Information System (INIS)

Lee, C. K.; Kim, D. H.; Kwon, K. C.; Joo, H. K.; Song, J. S.

2010-01-01

In the Korea Nuclear I and C Systems Development project the platforms for plant protection systems are developed, which function as a reactor shutdown, actuation of engineered safety features and a control of the related equipment. Those are fully digitalized through the use of safety-grade programmable logic controllers (PLCs) and few types of communication network. However the Regulatory Guide 1.152 (Rev. 02) was published by the U.S. NRC in 2006 and it recommended the application of a cyber security to the safety systems in the Nuclear Power Plant (NPP). Therefore to incorporate the new licensing requirement, a cyber security risk assessment is performed for the platforms. Then the vulnerabilities identified by the risk assessment are validated by penetration test. This paper summarizes test scenario, test results and their incorporation into system design

Safety Justification and Safety Case for Safety-critical Software in Digital Reactor Protection System

International Nuclear Information System (INIS)

Kwon, Kee-Choon; Lee, Jang-Soo; Jee, Eunkyoung

2016-01-01

Nuclear safety-critical software is under strict regulatory requirements and these regulatory requirements are essential for ensuring the safety of nuclear power plants. The verification & validation (V and V) and hazard analysis of the safety-critical software are required to follow regulatory requirements through the entire software life cycle. In order to obtain a license from the regulatory body through the development and validation of safety-critical software, it is essential to meet the standards which are required by the regulatory body throughout the software development process. Generally, large amounts of documents, which demonstrate safety justification including standard compliance, V and V, hazard analysis, and vulnerability assessment activities, are submitted to the regulatory body during the licensing process. It is not easy to accurately read and evaluate the whole documentation for the development activities, implementation technology, and validation activities. The safety case methodology has been kwon a promising approach to evaluate the level and depth of the development and validation results. A safety case is a structured argument, supported by a body of evidence that provides a compelling, comprehensible, and valid case that a system is safe for a given application in a given operating environment. It is suggested to evaluate the level and depth of the results of development and validation by applying safety case methodology to achieve software safety demonstration. A lot of documents provided as evidence are connected to claim that corresponds to the topic for safety demonstration. We demonstrated a case study in which more systematic safety demonstration for the target system software is performed via safety case construction than simply listing the documents

Safety Justification and Safety Case for Safety-critical Software in Digital Reactor Protection System

Energy Technology Data Exchange (ETDEWEB)

Kwon, Kee-Choon; Lee, Jang-Soo [Korea Atomic Energy Research Institute, Daejeon (Korea, Republic of); Jee, Eunkyoung [KAIST, Daejeon (Korea, Republic of)

2016-10-15

Nuclear safety-critical software is under strict regulatory requirements and these regulatory requirements are essential for ensuring the safety of nuclear power plants. The verification & validation (V and V) and hazard analysis of the safety-critical software are required to follow regulatory requirements through the entire software life cycle. In order to obtain a license from the regulatory body through the development and validation of safety-critical software, it is essential to meet the standards which are required by the regulatory body throughout the software development process. Generally, large amounts of documents, which demonstrate safety justification including standard compliance, V and V, hazard analysis, and vulnerability assessment activities, are submitted to the regulatory body during the licensing process. It is not easy to accurately read and evaluate the whole documentation for the development activities, implementation technology, and validation activities. The safety case methodology has been kwon a promising approach to evaluate the level and depth of the development and validation results. A safety case is a structured argument, supported by a body of evidence that provides a compelling, comprehensible, and valid case that a system is safe for a given application in a given operating environment. It is suggested to evaluate the level and depth of the results of development and validation by applying safety case methodology to achieve software safety demonstration. A lot of documents provided as evidence are connected to claim that corresponds to the topic for safety demonstration. We demonstrated a case study in which more systematic safety demonstration for the target system software is performed via safety case construction than simply listing the documents.

The unique safety challenges of space reactor systems

International Nuclear Information System (INIS)

Lanes, S.J.; Marshall, A.C.

1991-01-01

Compact reactor systems can provide high levels of power for extended periods in space environments. Their relatively low mass and their ability to operate independently of their proximity to the sun make reactor power systems high desirable for many civilian and military space missions. The US Department of Energy is developing reactor system technologies to provide electrical power for space applications. In addition, reactors are now being considered to provide thermal power to a hydrogen propellant for nuclear thermal rocketry. Space reactor safety issues differ from commercial reactor issues, in some areas, because of very different operating requirements and environments. Accidents similar to those postulated for commercial reactors must be considered for space reactors during their operational phase. Safety strategies will need to be established that account for the consequences of the loss of essential power

Status of the EU test blanket systems safety studies

International Nuclear Information System (INIS)

Panayotov, Dobromir; Poitevin, Yves; Ricapito, Italo; Zmitko, Milan

2015-01-01

Highlights: • TBS safety demonstration files. • Safety functions and related design features – detailed TBS components classifications. • Nuclear analyses, radiation shielding and protection. • TBS radiological waste management strategy and categorization. • Selection and definition of reference accidents scenarios and accidents analyses. - Abstract: The European joint undertaking for ITER and the development of fusion energy (‘Fusion for Energy’ – F4E) provides the European contributions to the ITER international fusion energy research project. Among others it includes also the development, design, technological demonstration and implementation of the European test blanket systems (TBS) in ITER. Currently two EU TBS designs are in the phase of conceptual design – helium-cooled lithium-lead (HCLL) and helium-cooled pebble-bed (HCPB). Safety demonstration is an important part of the work devoted to the achievement of the next key project milestone the conceptual design review. The paper reveals the details of the work on EU TBS safety performed in the last couple of years: update of the TBS safety demonstration files; safety functions and related design features; detailed TBS components classifications; nuclear analyses, radiation shielding and protection; TBS radiological waste management strategy and categorization; selection and definition of reference accidents scenarios, and accidents analyses. Finally the authors share the information on on-going and planned future EU TBS safety activities.

Status of the EU test blanket systems safety studies

Energy Technology Data Exchange (ETDEWEB)

Panayotov, Dobromir, E-mail: dobromir.panayotov@f4e.europa.eu; Poitevin, Yves; Ricapito, Italo; Zmitko, Milan

2015-10-15

Highlights: • TBS safety demonstration files. • Safety functions and related design features – detailed TBS components classifications. • Nuclear analyses, radiation shielding and protection. • TBS radiological waste management strategy and categorization. • Selection and definition of reference accidents scenarios and accidents analyses. - Abstract: The European joint undertaking for ITER and the development of fusion energy (‘Fusion for Energy’ – F4E) provides the European contributions to the ITER international fusion energy research project. Among others it includes also the development, design, technological demonstration and implementation of the European test blanket systems (TBS) in ITER. Currently two EU TBS designs are in the phase of conceptual design – helium-cooled lithium-lead (HCLL) and helium-cooled pebble-bed (HCPB). Safety demonstration is an important part of the work devoted to the achievement of the next key project milestone the conceptual design review. The paper reveals the details of the work on EU TBS safety performed in the last couple of years: update of the TBS safety demonstration files; safety functions and related design features; detailed TBS components classifications; nuclear analyses, radiation shielding and protection; TBS radiological waste management strategy and categorization; selection and definition of reference accidents scenarios, and accidents analyses. Finally the authors share the information on on-going and planned future EU TBS safety activities.

INTEGRATED SAFETY MANAGEMENT SYSTEM IN AIR TRAFFIC SERVICES

Directory of Open Access Journals (Sweden)

Volodymyr Kharchenko

2014-06-01

Full Text Available The article deals with the analysis of the researches conducted in the field of safety management systems.Safety management system framework, methods and tools for safety analysis in Air Traffic Control have been reviewed.Principles of development of Integrated safety management system in Air Traffic Services have been proposed.

Analysis and design on airport safety information management system

Directory of Open Access Journals (Sweden)

Yan Lin

2017-01-01

Full Text Available Airport safety information management system is the foundation of implementing safety operation, risk control, safety performance monitor, and safety management decision for the airport. The paper puts forward the architecture of airport safety information management system based on B/S model, focuses on safety information processing flow, designs the functional modules and proposes the supporting conditions for system operation. The system construction is helpful to perfecting the long effect mechanism driven by safety information, continually increasing airport safety management level and control proficiency．

Occupational Safety and Health System for Workers Engaged in Emergency Response Operations in the USA.

Science.gov (United States)

Toyoda, Hiroyuki; Kubo, Tatsuhiko; Mori, Koji

2016-12-03

To study the occupational safety and health systems used for emergency response workers in the USA, we performed interviews with related federal agencies and conducted research on related studies. We visited the Federal Emergency Management Agency (FEMA) and National Institute for Occupational Safety and Health (NIOSH) in the USA and performed interviews with their managers on the agencies' roles in the national emergency response system. We also obtained information prepared for our visit from the USA's Occupational Safety and Health Administration (OSHA). In addition, we conducted research on related studies and information on the website of the agencies. We found that the USA had an established emergency response system based on their National Incident Management System (NIMS). This enabled several organizations to respond to emergencies cooperatively using a National Response Framework (NRF) that clarifies the roles and cooperative functions of each federal agency. The core system in NIMS was the Incident Command System (ICS), within which a Safety Officer was positioned as one of the command staff supporting the commander. All ICS staff were required to complete a training program specific to their position; in addition, the Safety Officer was required to have experience. The All-Hazards model was commonly used in the emergency response system. We found that FEMA coordinated support functions, and OSHA and NIOSH, which had specific functions to protect workers, worked cooperatively under NRF. These agencies employed certified industrial hygienists that play a professional role in safety and health. NIOSH recently executed support activities during disasters and other emergencies. The USA's emergency response system is characterized by functions that protect the lives and health of emergency response workers. Trained and experienced human resources support system effectiveness. The findings provided valuable information that could be used to improve the

Methodology for identifying boundaries of systems important to safety in CANDU nuclear power plants

International Nuclear Information System (INIS)

Therrien, S.; Komljenovic, D.; Therrien, P.; Ruest, C.; Prevost, P.; Vaillancourt, R.

2007-01-01

This paper presents a methodology developed to identify the boundaries of the systems important to safety (SIS) at the Gentilly-2 Nuclear Power Plant (NPP), Hydro-Quebec. The SIS boundaries identification considers nuclear safety only. Components that are not identified as important to safety are systematically identified as related to safety. A global assessment process such as WANO/INPO AP-913 'Equipment Reliability Process' will be needed to implement adequate changes in the management rules of those components. The paper depicts results in applying the methodology to the Shutdown Systems 1 and 2 (SDS 1, 2), and to the Emergency Core Cooling System (ECCS). This validation process enabled fine tuning the methodology, performing a better estimate of the effort required to evaluate a system, and identifying components important to safety of these systems. (author)

Data Analysis of Occupational Health and Safety Management and Total Quality Management Systems

Directory of Open Access Journals (Sweden)

Ahmet Yakut

2013-01-01

Full Text Available In our study, Total Quality Management, Occupational Health and Safety on the effects of the construction industry, building sites of Istanbul evaluated with the results of the survey of 25 firms. For Occupational Health and Safety program, walked healthy, active employees in her role increased and will increase the importance of education. Due to non-implementation of the OHS system in our country enough, work-related accidents and deaths and injuries resulting from these accidents is very high. Firms as a result of the analysis, an effective health and safety management system needs to be able to fulfill their responsibilities. This system is designated as OHSAS 18001 Occupational Health and Safety Management System and the construction industry can be regarded as the imperatives.

Preservation of FFTF Data Related to Passive Safety Testing

International Nuclear Information System (INIS)

Wootan, David W.; Butner, R. Scott; Omberg, Ronald P.; Makenas, Bruce J.; Nielsen, Deborah L.

2010-01-01

One of the goals of the Fuel Cycle Research and Development Program (FCRD) is to preserve the knowledge that has been gained in the United States on Liquid Metal Reactors (LMR). A key area deserving special attention for preservation is the data relating to passive safety testing that was conducted in FFTF and EBR-II during the 1980's. Accidents at Unit 4 of the Chernobyl Station and Unit 2 at Three Mile Island changed the safety paradigm of the nuclear power industry. New emphasis was placed on assured safety based on intrinsic plant characteristics that protect not only the public, but the significant investment in the plant as well. Plants designated to perform in this manner are considered to be passively safe since no active sensor/alarm system or human intervention is required to bring the reactor to a safe shutdown condition. The liquid metal reactor (LMR) has several key characteristics needed for a passively safe reactor: reactor coolant with superior heat transfer capability and very high boiling point, low (atmospheric) system pressures, and reliable negative reactivity feedback. The credibility of the design for a passively safe LMR rests on two issues: the validity of analytic methods used to predict passive safety performance and the availability of relevant test data to calibrate design tools. Safety analysis methods used to analyze LMRs under the old safety paradigm were focused on calculating the source term for the Core Disruptive Accident. Passive safety design requires refined analysis methods for transient events because treatment of the detailed reactivity feedbacks is important in predicting the response of the reactor. Similarly, analytic tools should be calibrated against actual test experience in existing LMR facilities. The principal objectives of the combined FFTF natural circulation and Passive Safety Testing program were: (1) to verify natural circulation as a reliable means to safely remove decay heat, (2) to extend passive safety

Evaluation of food safety management systems in Serbian dairy industry

Directory of Open Access Journals (Sweden)

Igor Tomašević

2016-01-01

Full Text Available This paper reports incentives, costs, difficulties and benefits of food safety management systems implementation in the Serbian dairy industry. The survey involved 27 food business operators with the national milk and dairy market share of 65 %. Almost two thirds of the assessed dairy producers (70.4 % claimed that they had a fully operational and certified HACCP system in place, while 29.6 % implemented HACCP, but had no third party certification. ISO 22000 was implemented and certified in 29.6 % of the companies, while only 11.1 % had implemented and certified IFS standard. The most important incentive for implementing food safety management systems for Serbian dairy producers was to increase and improve safety and quality of dairy products. The cost of product investigation/analysis and hiring external consultants were related to the initial set-up of food safety management system with the greatest importance. Serbian dairy industry was not greatly concerned by the financial side of implementing food safety management systems due to the fact that majority of prerequisite programmes were in place and regularly used by almost 100 % of the producers surveyed. The presence of competency gap between the generic knowledge for manufacturing food products and the knowledge necessary to develop and implement food safety management systems was confirmed, despite the fact that 58.8 % of Serbian dairy managers had university level of education. Our study brings about the innovation emphasizing the attitudes and the motivation of the food production staff as the most important barrier for the development and implementation of HACCP. The most important identified benefit was increased safety of dairy products with the mean rank scores of 6.85. The increased customer confidence and working discipline of staff employed in food processing were also found as important benefits of implementing/operating HACCP. The study shows that the level of HACCP

Study on 'Safety qualification of process computers used in safety systems of nuclear power plants'

International Nuclear Information System (INIS)

Bertsche, K.; Hoermann, E.

1991-01-01

The study aims at developing safety standards for hardware and software of computer systems which are increasingly used also for important safety systems in nuclear power plants. The survey of the present state-of-the-art of safety requirements and specifications for safety-relevant systems and, additionally, for process computer systems has been compiled from national and foreign rules. In the Federal Republic of Germany the KTA safety guides and the BMI/BMU safety criteria have to be observed. For the design of future computer-aided systems in nuclear power plants it will be necessary to apply the guidelines in [DIN-880] and [DKE-714] together with [DIN-192]. With the aid of a risk graph the various functions of a system, or of a subsystem, can be evaluated with regard to their significance for safety engineering. (orig./HP) [de

Design an optimum safety policy for personnel safety management - A system dynamic approach

International Nuclear Information System (INIS)

Balaji, P.

2014-01-01

Personnel safety management (PSM) ensures that employee's work conditions are healthy and safe by various proactive and reactive approaches. Nowadays it is a complex phenomenon because of increasing dynamic nature of organisations which results in an increase of accidents. An important part of accident prevention is to understand the existing system properly and make safety strategies for that system. System dynamics modelling appears to be an appropriate methodology to explore and make strategy for PSM. Many system dynamics models of industrial systems have been built entirely for specific host firms. This thesis illustrates an alternative approach. The generic system dynamics model of Personnel safety management was developed and tested in a host firm. The model was undergone various structural, behavioural and policy tests. The utility and effectiveness of model was further explored through modelling a safety scenario. In order to create effective safety policy under resource constraint, DOE (Design of experiment) was used. DOE uses classic designs, namely, fractional factorials and central composite designs. It used to make second order regression equation which serve as an objective function. That function was optimized under budget constraint and optimum value used for safety policy which shown greatest improvement in overall PSM. The outcome of this research indicates that personnel safety management model has the capability for acting as instruction tool to improve understanding of safety management and also as an aid to policy making

Design an optimum safety policy for personnel safety management - A system dynamic approach

Energy Technology Data Exchange (ETDEWEB)

Balaji, P. [The Glocal University, Mirzapur Pole, Delhi- Yamuntori Highway, Saharanpur 2470001 (India)

2014-10-06

Personnel safety management (PSM) ensures that employee's work conditions are healthy and safe by various proactive and reactive approaches. Nowadays it is a complex phenomenon because of increasing dynamic nature of organisations which results in an increase of accidents. An important part of accident prevention is to understand the existing system properly and make safety strategies for that system. System dynamics modelling appears to be an appropriate methodology to explore and make strategy for PSM. Many system dynamics models of industrial systems have been built entirely for specific host firms. This thesis illustrates an alternative approach. The generic system dynamics model of Personnel safety management was developed and tested in a host firm. The model was undergone various structural, behavioural and policy tests. The utility and effectiveness of model was further explored through modelling a safety scenario. In order to create effective safety policy under resource constraint, DOE (Design of experiment) was used. DOE uses classic designs, namely, fractional factorials and central composite designs. It used to make second order regression equation which serve as an objective function. That function was optimized under budget constraint and optimum value used for safety policy which shown greatest improvement in overall PSM. The outcome of this research indicates that personnel safety management model has the capability for acting as instruction tool to improve understanding of safety management and also as an aid to policy making.

Design an optimum safety policy for personnel safety management - A system dynamic approach

Science.gov (United States)

Balaji, P.

2014-10-01

Personnel safety management (PSM) ensures that employee's work conditions are healthy and safe by various proactive and reactive approaches. Nowadays it is a complex phenomenon because of increasing dynamic nature of organisations which results in an increase of accidents. An important part of accident prevention is to understand the existing system properly and make safety strategies for that system. System dynamics modelling appears to be an appropriate methodology to explore and make strategy for PSM. Many system dynamics models of industrial systems have been built entirely for specific host firms. This thesis illustrates an alternative approach. The generic system dynamics model of Personnel safety management was developed and tested in a host firm. The model was undergone various structural, behavioural and policy tests. The utility and effectiveness of model was further explored through modelling a safety scenario. In order to create effective safety policy under resource constraint, DOE (Design of experiment) was used. DOE uses classic designs, namely, fractional factorials and central composite designs. It used to make second order regression equation which serve as an objective function. That function was optimized under budget constraint and optimum value used for safety policy which shown greatest improvement in overall PSM. The outcome of this research indicates that personnel safety management model has the capability for acting as instruction tool to improve understanding of safety management and also as an aid to policy making.

Application of Safety Instrumented System (SIS) approach in older nuclear power plants

Energy Technology Data Exchange (ETDEWEB)

Nasimi, Elnara; Gabbar, Hossam A., E-mail: hossam.gabbar@uoit.ca

2016-05-15

Highlights: • Study Safety Instrumented System (SIS) design for older nuclear power plant. • Apply SIS on Reheater Drains (RD) system. • Apply IEC 61508/61511 to design safety system. • Evaluate risk reduction based on proposed SIS design. - Abstract: In order to remain economically effective and financially profitable, the modern industries have to take their safety culture to a higher level and consider production losses in addition to simple accident prevention techniques. Ideally, compliance with safety requirements start during early design stages, but in some older facilities provisions for Safety Instrumented Systems (SIS) may not have been originally included. In this paper, a case study of a Reheater Drains (RD) system is used to illustrate such an example. Frequent failures of tank level controller lead to transients where the operation of shutting down RD pumps requires operators to manually isolate the quenching water and to close the main steam admission valves. Water in this system is at saturation temperature for the reheater steam side pressure, and any manual operation of the system is highly undesirable due to hazards of working with wet steam at approximately 758 kPa(g) pressure, preheated to 237 °C. Additionally, losses of inventory are highly undesirable as well and challenge other systems in the plant. In this paper, it is suggested that RD system can benefit from installation of an independent SIS system in order to address current challenges. This idea is being explored using IEC 61508 framework for “Functional safety of electrical/electronic/programmable electronic safety-related systems” to provide assurance that the SIS will offer the necessary risk reduction required to achieve required safety for the equipment.

Meeting the maglev system's safety requirements

Energy Technology Data Exchange (ETDEWEB)

Pierick, K

1983-12-01

The author shows how the safety requirements of the maglev track system derive from the general legal conditions for the safety of tracked transport. It is described how their compliance beyond the so-called ''development-accompanying'' and ''acceptance-preparatory'' safety work can be assured for the Transrapid test layout (TVE) now building in Emsland and also for later application as public transport system in Germany within the meaning of the General Railway Act.

Inherent and passive safety measures in accelerator driven systems: a safety strategy for ADS

International Nuclear Information System (INIS)

Maschek, W.; Rineiski, A.; Morita, K.; Flad, M.

2001-01-01

The efficiency of Accelerator Driven Systems (ADSs) for the transmutation and incineration of nuclear waste is strongly related to the utilization of so-called dedicated fuels. In the ideal case these fuels should consist of pure TRUs without fertile materials as 238 U or 232 Th to achieve highest incineration/transmutation rates. Dedicated fuels still have to be developed and programs are under way for their fabrication, irradiation and testing. These fertile-free fuels may suffer from deteriorated thermal or thermo-mechanical properties, as a reduced melting point, reduced thermal conductivity or even thermal instability. First analyses have shown that the use of dedicated fuels may lead to a strong deterioration of the safety parameters of the reactor core as e.g. the void worth, the Doppler or the kinetics quantities as neutron generation time and β eff . In addition, a dedicated core may contain multiple ''critical'' fuel masses, resulting in a considerable recriticality potential. Current knowledge on these dedicated fuels suggests that ''critical'' reactors may not be feasible, because of safety reasons. However, for ADSs, the salient hope has been promoted that due to the subcriticality of the system the poor safety features of such fuels could be coped with. Analyses are presented which show potential safety problems for such dedicated cores. Respecting the results of these analyses a safety strategy is proposed along the lines of defense approach in analogy with ideas formerly developed for fast reactors. Inherent and passive safety measures are integrated into the various defense lines. (author)

Electronic clinical safety reporting system: a benefits evaluation.

Science.gov (United States)

Elliott, Pamela; Martin, Desmond; Neville, Doreen

2014-06-11

, accessibility, and consistency. The implementation process encountered challenges related to customizing the software and the development of the classification system for coding occurrences. This impacted on the ability of the managers to close-out files in a timely fashion. The issues that were identified, and suggestions for improvements to the form itself, were shared with the Project Team as soon as they were noted. Changes were made to the system before the rollout. There were many benefits realized from the new system that can contribute to improved clinical safety. The participants preferred the electronic system over the paper-based system. The lessons learned during the implementation process resulted in recommendations that informed the rollout of the system in Eastern Health, and in other health care organizations in the province of Newfoundland and Labrador. This study also informed the evaluation of other health organizations in the province, which was completed in 2013.

Aging related degradation in turbine drives and governors for safety related pumps

International Nuclear Information System (INIS)

Cox, D.F.

1991-01-01

This study is being performed to examine the relationship between time dependent degradation, and current industry practices in the areas of maintenance, surveillance, and operation of stem turbine drive for safety related pumps. These pumps are located in the Auxiliary Feedwater (AFW) system for pressurized water reactor (PWR) plants, and the Reactor Core Isolation Cooking (RCIC) and High Pressure Coolant Injection (HPCI) systems for Boiling Water Reactor (BWR) facilities. This research has been conducted by examining current information in the Nuclear Plant Reliability Data System (NPRDS), reviewing Licensee Event Reports, thoroughly investigating contacts with operating plant personnel, and by personal observation. This information was reviewed to determine the cause of each reported event and the method of discovery. From this data attempts have been made at determining the predictability of events and possible preventive measures that may be implemented

Strategy to safety grade systems replacements

International Nuclear Information System (INIS)

Stimler, M.; Sullivan, K.E.; Trebincevic, I.

1993-01-01

The introduction of digital instrumentation and control systems in nuclear power plants is characterized by the need to satisfy the requirements of safety, reliability and man-machine ergonomics. Today digital instrumentation and control systems meet these requirements and the trend in Europe is towards full digital based nuclear power plant control systems. This paper describes Siemens (KWU) experience in nuclear power plants and development in trends within Europe. Topics which are the subject of major concern to NPP operators addressed in this paper are: human performance factors - man-machine interface; operating philosophy; safety, availability and reliability. Other aspects addressed are: Siemens open-quotes defense in depthclose quotes concept, description of Siemens digital I ampersand C systems, safety requirements and systems, I ampersand C qualification, control room ergonomics, information systems and retrofitting experience

System safety education focused on system management

Science.gov (United States)

Grose, V. L.

1971-01-01

System safety is defined and characteristics of the system are outlined. Some of the principle characteristics include role of humans in hazard analysis, clear language for input and output, system interdependence, self containment, and parallel analysis of elements.

Preliminary Performance Analysis Program Development for Safety System with Safeguard Vessel

International Nuclear Information System (INIS)

Kang, Han-Ok; Lee, Jun; Park, Cheon-Tae; Yoon, Ju-Hyeon; Park, Keun-Bae

2007-01-01

SMART is an advanced modular integral type pressurized water reactor for a seawater desalination and an electricity production. Major components of the reactor coolant system such as the pressurizer, Reactor Coolant Pump (RCP), and steam generators are located inside the reactor vessel. The SMART can fundamentally eliminate the possibility of large break loss of coolant accidents (LBLOCAs), improve the natural circulation capability, and better accommodate and thus enhance a resistance to a wide range of transients and accidents. The safety goals of the SMART are enhanced through highly reliable safety systems such as the passive residual heat removal system (PRHRS) and the safeguard vessel coupled with the passive safety injection feature. The safeguard vessel is a steel-made, leak-tight pressure vessel housing the RPV, SIT, and the associated valves and pipelines. A primary function of the safeguard vessel is to confine any radioactive release from the primary circuit within the vessel under DBAs related to loss of the integrity of the primary system. A preliminary performance analysis program for a safety system using the safeguard vessel is developed in this study. The developed program is composed of several subroutines for the reactor coolant system, passive safety injection system, safeguard vessel including the pressure suppression pool, and PRHRS. A small break loss of coolant accident at the upper part of a reactor is analyzed and the results are discussed

Safety Management System in Croatia Control Ltd.

OpenAIRE

Pavlin, Stanislav; Sorić, Vedran; Bilać, Dragan; Dimnik, Igor; Galić, Daniel

2009-01-01

International Civil Aviation Organization and other international aviation organizations regulate the safety in civil aviation. In the recent years the International Civil Aviation Organization has introduced the concept of the safety management system through several documents among which the most important is the 2006 Safety Management Manual. It treats the safety management system in all the segments of civil aviation, from carriers, aerodromes and air traffic control to design, constructi...

On safety classification of instrumentation and control systems and their components

International Nuclear Information System (INIS)

Yastrebenetskij, M.A.; Rozen, Yu.V.

2004-01-01

Safety classification of instrumentation and control systems (I and C) and their components (hardware, software, software-hardware complexes) is described: - evaluation of classification principles and criteria in Ukrainian standards and rules; comparison between Ukrainian and international principles and criteria; possibility and ways of coordination of Ukrainian and international standards related to (I and C) safety classification

A new assessment method for demonstrating the sufficiency of the safety assessment and the safety margins of the geological disposal system

International Nuclear Information System (INIS)

Ohi, Takao; Kawasaki, Daisuke; Chiba, Tamotsu; Takase, Toshio; Hane, Koji

2013-01-01

A new method for demonstrating the sufficiency of the safety assessment and safety margins of the geological disposal system has been developed. The method is based on an existing comprehensive sensitivity analysis method and can systematically identify the successful conditions, under which the dose rate does not exceed specified safety criteria, using analytical solutions for nuclide migration and the results of a statistical analysis. The successful conditions were identified using three major variables. Furthermore, the successful conditions at the level of factors or parameters were obtained using relational equations between the variables and the factors or parameters making up these variables. In this study, the method was applied to the safety assessment of the geological disposal of transuranic waste in Japan. Based on the system response characteristics obtained from analytical solutions and on the successful conditions, the classification of the analytical conditions, the sufficiency of the safety assessment and the safety margins of the disposal system were then demonstrated. A new assessment procedure incorporating this method into the existing safety assessment approach is proposed in this study. Using this procedure, it is possible to conduct a series of safety assessment activities in a logical manner. (author)

Catalogue of systems for the monitoring of working conditions relating to health and safety

NARCIS (Netherlands)

Prins, R.; Verboon, F.

1991-01-01

In this Catalogue a number of systems or instruments for Monitoring Working Conditions and workers Health and Safety have been described. The general aim of the project was three-fold: - to obtain an overall assessment of the existing instruments for identifying risk factors and working conditions

Compiler issues associated with safety-related software

International Nuclear Information System (INIS)

Feinauer, L.R.

1991-01-01

A critical issue in the quality assurance of safety-related software is the ability of the software to produce identical results, independent of the host machine, operating system, or compiler version under which the software is installed. A study is performed using the VIPRE-0l, FREY-01, and RETRAN-02 safety-related codes. Results from an IBM 3083 computer are compared with results from a CYBER 860 computer. All three of the computer programs examined are written in FORTRAN; the VIPRE code uses the FORTRAN 66 compiler, whereas the FREY and RETRAN codes use the FORTRAN 77 compiler. Various compiler options are studied to determine their effect on the output between machines. Since the Control Data Corporation and IBM machines inherently represent numerical data differently, methods of producing equivalent accuracy of data representation were an important focus of the study. This paper identifies particular problems in the automatic double-precision option (AUTODBL) of the IBM FORTRAN 1.4.x series of compilers. The IBM FORTRAN version 2 compilers provide much more stable, reliable compilation for engineering software. Careful selection of compilers and compiler options can help guarantee identical results between different machines. To ensure reproducibility of results, the same compiler and compiler options should be used to install the program as were used in the development and testing of the program

SYSTEMS SAFETY ANALYSIS FOR FIRE EVENTS ASSOCIATED WITH THE ECRB CROSS DRIFT

International Nuclear Information System (INIS)

R. J. Garrett

2001-01-01

The purpose of this analysis is to systematically identify and evaluate fire hazards related to the Yucca Mountain Site Characterization Project (YMP) Enhanced Characterization of the Repository Block (ECRB) East-West Cross Drift (commonly referred to as the ECRB Cross-Drift). This analysis builds upon prior Exploratory Studies Facility (ESF) System Safety Analyses and incorporates Topopah Springs (TS) Main Drift fire scenarios and ECRB Cross-Drift fire scenarios. Accident scenarios involving the fires in the Main Drift and the ECRB Cross-Drift were previously evaluated in ''Topopah Springs Main Drift System Safety Analysis'' (CRWMS M and O 1995) and the ''Yucca Mountain Site Characterization Project East-West Drift System Safety Analysis'' (CRWMS M and O 1998). In addition to listing required mitigation/control features, this analysis identifies the potential need for procedures and training as part of defense-in-depth mitigation/control features. The inclusion of this information in the System Safety Analysis (SSA) is intended to assist the organization(s) (e.g., Construction, Environmental Safety and Health, Design) responsible for these aspects of the ECRB Cross-Drift in developing mitigation/control features for fire events, including Emergency Refuge Station(s). This SSA was prepared, in part, in response to Condition/Issue Identification and Reporting/Resolution System (CIRS) item 1966. The SSA is an integral part of the systems engineering process, whereby safety is considered during planning, design, testing, and construction. A largely qualitative approach is used which incorporates operating experiences and recommendations from vendors, the constructor and the operating contractor. The risk assessment in this analysis characterizes the scenarios associated with fires in terms of relative risk and includes recommendations for mitigating all identified hazards. The priority for recommending and implementing mitigation control features is: (1) Incorporate

DEVELOPMENT OF RISK-BASED AND TECHNOLOGY-INDEPENDENT SAFETY CRITERIA FOR GENERATION IV SYSTEMS

Energy Technology Data Exchange (ETDEWEB)

William E. Kastenberg; Edward Blandford; Lance Kim

2009-03-31

This project has developed quantitative safety goals for Generation IV (Gen IV) nuclear energy systems. These safety goals are risk based and technology independent. The foundations for a new approach to risk analysis has been developed, along with a new operational definition of risk. This project has furthered the current state-of-the-art by developing quantitative safety goals for both Gen IV reactors and for the overall Gen IV nuclear fuel cycle. The risk analysis approach developed will quantify performance measures, characterize uncertainty, and address a more comprehensive view of safety as it relates to the overall system. Appropriate safety criteria are necessary to manage risk in a prudent and cost-effective manner. This study is also important for government agencies responsible for managing, reviewing, and for approving advanced reactor systems because they are charged with assuring the health and safety of the public.

DEVELOPMENT OF RISK-BASED AND TECHNOLOGY-INDEPENDENT SAFETY CRITERIA FOR GENERATION IV SYSTEMS

International Nuclear Information System (INIS)

Kastenberg, William E.; Blandford, Edward; Kim, Lance

2009-01-01

This project has developed quantitative safety goals for Generation IV (Gen IV) nuclear energy systems. These safety goals are risk based and technology independent. The foundations for a new approach to risk analysis has been developed, along with a new operational definition of risk. This project has furthered the current state-of-the-art by developing quantitative safety goals for both Gen IV reactors and for the overall Gen IV nuclear fuel cycle. The risk analysis approach developed will quantify performance measures, characterize uncertainty, and address a more comprehensive view of safety as it relates to the overall system. Appropriate safety criteria are necessary to manage risk in a prudent and cost-effective manner. This study is also important for government agencies responsible for managing, reviewing, and for approving advanced reactor systems because they are charged with assuring the health and safety of the public

Commercial grade item (CGI) dedication of MDR relays for nuclear safety related applications

Science.gov (United States)

Das, Ranjit K.; Julka, Anil; Modi, Govind

1994-08-01

MDR relays manufactured by Potter & Brumfield (P&B) have been used in various safety related applications in commercial nuclear power plants. These include emergency safety features (ESF) actuation systems, emergency core cooling systems (ECCS) actuation, and reactor protection systems. The MDR relays manufactured prior to May 1990 showed signs of generic failure due to corrosion and outgassing of coil varnish. P&B has made design changes to correct these problems in relays manufactured after May 1990. However, P&B does not manufacture the relays under any 10CFR50 Appendix B quality assurance (QA) program. They manufacture the relays under their commercial QA program and supply these as commercial grade items. This necessitates CGI Dedication of these relays for use in nuclear-safety-related applications. This paper presents a CGI dedication program that has been used to dedicate the MDR relays manufactured after been used to dedicate the MDR relays manufactured after May 1990. The program is in compliance with current Nuclear Regulatory Commission (NRC) and Electric Power Research Institute (EPRI) guidelines and applicable industry standards; it specifies the critical characteristics of the relays, provides the tests and analysis required to verify the critical characteristics, the acceptance criteria for the test results, performs source verification to quality P&B for its control of the critical characteristics, and provides documentation. The program provides reasonable assurance that the new MDR relays will perform their intended safety functions.

Design of Instrumentation and Control Systems for Nuclear Power Plants. Specific Safety Guide

International Nuclear Information System (INIS)

2016-01-01

This publication is a revision and combination of two Safety Guides, IAEA Safety Standards Series No. NS-G-1.1 and No. NS-G-1.3. The revision takes into account developments in instrumentation and control (I&C) systems since the publication of the earlier Safety Guides. The main changes relate to the continuing development of computer applications and the evolution of the methods necessary for their safe, secure and practical use. In addition, account is taken of developments in human factors engineering and the need for computer security. This Safety Guide references and takes into account other IAEA Safety Standards and Nuclear Security Series publications that provide guidance relating to I&C design

A safety assessment methodology applied to CNS/ATM-based air traffic control system

Energy Technology Data Exchange (ETDEWEB)

Vismari, Lucio Flavio, E-mail: lucio.vismari@usp.b [Safety Analysis Group (GAS), School of Engineering at University of Sao Paulo (Poli-USP), Av. Prof. Luciano Gualberto, Trav.3, n.158, Predio da Engenharia de Eletricidade, Sala C2-32, CEP 05508-900, Sao Paulo (Brazil); Batista Camargo Junior, Joao, E-mail: joaocamargo@usp.b [Safety Analysis Group (GAS), School of Engineering at University of Sao Paulo (Poli-USP), Av. Prof. Luciano Gualberto, Trav.3, n.158, Predio da Engenharia de Eletricidade, Sala C2-32, CEP 05508-900, Sao Paulo (Brazil)

2011-07-15

In the last decades, the air traffic system has been changing to adapt itself to new social demands, mainly the safe growth of worldwide traffic capacity. Those changes are ruled by the Communication, Navigation, Surveillance/Air Traffic Management (CNS/ATM) paradigm , based on digital communication technologies (mainly satellites) as a way of improving communication, surveillance, navigation and air traffic management services. However, CNS/ATM poses new challenges and needs, mainly related to the safety assessment process. In face of these new challenges, and considering the main characteristics of the CNS/ATM, a methodology is proposed at this work by combining 'absolute' and 'relative' safety assessment methods adopted by the International Civil Aviation Organization (ICAO) in ICAO Doc.9689 , using Fluid Stochastic Petri Nets (FSPN) as the modeling formalism, and compares the safety metrics estimated from the simulation of both the proposed (in analysis) and the legacy system models. To demonstrate its usefulness, the proposed methodology was applied to the 'Automatic Dependent Surveillance-Broadcasting' (ADS-B) based air traffic control system. As conclusions, the proposed methodology assured to assess CNS/ATM system safety properties, in which FSPN formalism provides important modeling capabilities, and discrete event simulation allowing the estimation of the desired safety metric.

A safety assessment methodology applied to CNS/ATM-based air traffic control system

International Nuclear Information System (INIS)

Vismari, Lucio Flavio; Batista Camargo Junior, Joao

2011-01-01

In the last decades, the air traffic system has been changing to adapt itself to new social demands, mainly the safe growth of worldwide traffic capacity. Those changes are ruled by the Communication, Navigation, Surveillance/Air Traffic Management (CNS/ATM) paradigm , based on digital communication technologies (mainly satellites) as a way of improving communication, surveillance, navigation and air traffic management services. However, CNS/ATM poses new challenges and needs, mainly related to the safety assessment process. In face of these new challenges, and considering the main characteristics of the CNS/ATM, a methodology is proposed at this work by combining 'absolute' and 'relative' safety assessment methods adopted by the International Civil Aviation Organization (ICAO) in ICAO Doc.9689 , using Fluid Stochastic Petri Nets (FSPN) as the modeling formalism, and compares the safety metrics estimated from the simulation of both the proposed (in analysis) and the legacy system models. To demonstrate its usefulness, the proposed methodology was applied to the 'Automatic Dependent Surveillance-Broadcasting' (ADS-B) based air traffic control system. As conclusions, the proposed methodology assured to assess CNS/ATM system safety properties, in which FSPN formalism provides important modeling capabilities, and discrete event simulation allowing the estimation of the desired safety metric.

Safety climate and culture: Integrating psychological and systems perspectives.

Science.gov (United States)

Casey, Tristan; Griffin, Mark A; Flatau Harrison, Huw; Neal, Andrew

2017-07-01

Safety climate research has reached a mature stage of development, with a number of meta-analyses demonstrating the link between safety climate and safety outcomes. More recently, there has been interest from systems theorists in integrating the concept of safety culture and to a lesser extent, safety climate into systems-based models of organizational safety. Such models represent a theoretical and practical development of the safety climate concept by positioning climate as part of a dynamic work system in which perceptions of safety act to constrain and shape employee behavior. We propose safety climate and safety culture constitute part of the enabling capitals through which organizations build safety capability. We discuss how organizations can deploy different configurations of enabling capital to exert control over work systems and maintain safe and productive performance. We outline 4 key strategies through which organizations to reconcile the system control problems of promotion versus prevention, and stability versus flexibility. (PsycINFO Database Record (c) 2017 APA, all rights reserved).

A Survey on the HFE-related Technologies for the Improvements of Human Performance of Safety Personnel in Rail System

International Nuclear Information System (INIS)

Koo, I. S.; Park, G. O.; Suh, S. M.; Sim, Y. R.; Go, J. H.; Jeong, J. H.; Son, C. H.

2005-08-01

Many studies have shown that the most cases of rail accidents have occurred because of performing his/her tasks in inappropriate way. It is generally recognised that the rail system without human element could never be happened quite long time. So human element in rail system is going to be the major factor to the next tragic accident. This state-of-the-art report describes three major HFE-related technologies, training simulator, the integrated test facility for human factors engineering, and human performance evaluation system, that are used in the other industries including nuclear power industry for the purpose of increasing rail safety through out the improvement of human task performance. Base on this report, the way of developing those technologies that should be applied to the korean rail system is presented

A Survey on the HFE-related Technologies for the Improvements of Human Performance of Safety Personnel in Rail System

Energy Technology Data Exchange (ETDEWEB)

Koo, I. S.; Park, G. O.; Suh, S. M.; Sim, Y. R.; Go, J. H.; Jeong, J. H.; Son, C. H

2005-08-15

Many studies have shown that the most cases of rail accidents have occurred because of performing his/her tasks in inappropriate way. It is generally recognised that the rail system without human element could never be happened quite long time. So human element in rail system is going to be the major factor to the next tragic accident. This state-of-the-art report describes three major HFE-related technologies, training simulator, the integrated test facility for human factors engineering, and human performance evaluation system, that are used in the other industries including nuclear power industry for the purpose of increasing rail safety through out the improvement of human task performance. Base on this report, the way of developing those technologies that should be applied to the korean rail system is presented.

Impacts of age-related failures on nuclear systems

International Nuclear Information System (INIS)

Meale, B.M.; Satterwhite, D.G.; Krantz, E.A.; MacDonald, P.E.

1986-01-01

Aging-related failure data from nine light water reactor safety, support, and power conversion systems have been extracted from an operational data base. Systems and components within the systems that are most affected by aging are identified. In addition, information on aging-related root causes of component failures has been extracted for service water and Class 1E electrical power distribution systems. Engineering insights are presented, and preliminary quantification of the importance of aging-related root causes for a service water system is provided