Document: NUREG-0800
Document ID: 7a278d84-5310-4198-b914-fa3af5a0a0ef
Document Type: srp
Title: Appendix 7-A
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML0525/ML052500553.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
Appendix 7-A Rev. 4 — June 1997 BTP HICB-17-1 NEW Branch Technical Position HICB-17 Guidance on Self-Test and Surveillance Test Provisions A. Background This branch technical position (BTP) provides guidelines for reviewing the design of the self-test and surveillance test provisions. These guidelines are based on reviews of applicant/licensee submittals and vendor topical submittals describing self-test and surveillance test assumptions, terminology, methodology, and experience gained from NRC inspections of operating plants. 1. Regulatory Basis 10 CFR 50.55a(h), "Protection Systems," requires in part that protection systems satisfy the criteria of ANSI/IEEE Std 279, "Criteria for Protection Systems for Nuclear Power Generating Stations." Section 4.10 of ANSI/IEEE Std 279 requires the capability to test and calibrate protection system channels and devices. Section 4.21 states that protection systems must be designed to facilitate the recognition and location of malfunctioning components or modules. Additionally, Section 4.2 requires that any single failure within the protection system shall not prevent proper protective action at the system level. Reg Guide 1.153, "Criteria for Power, Instrumentation, and Control Portions of Safety Systems," which endorses IEEE Std 603, "Standard Criteria for Safety Systems for Nuclear Power Generating Stations," contains similar requirements. Reg. Guide 1.53, "Application of the Single-Failure Criterion to Nuclear Power Protection Systems," which endorses ANSI/IEEE Std 379, "Standard Application of the Single-Failure Criterion to Nuclear Power Generating Station Safety Systems," amplifies this requirement by noting that the protection system must be capable of accomplishing the required protective function in the presence of any single detectable failure concurrent with all identifiable, but non-detectable failures. Consequently, self-testing and periodic testing are important elements in a design's ability to meet the