Document: NUREG-0800
Document ID: 395bd951-6025-480c-a22f-d53f3c4d0155
Document Type: srp
Title: B-9
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML0705/ML070550087.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7.1
CFR Part: 
CFR Title: 

Content:
Revision 5 - March 2007 For both direct and indirect parameters, the applicant/licensee should verify that the characteristics (e.g., range, accuracy, resolution, response time) of the instruments that produce the protection system inputs are consistent with the analysis provided in Chapter 15 of the SAR. 4.9. Capability for Sensor Checks (IEEE Std. 279-1971 Clause 4.9) The most common method used to verify the availability of the input sensors is by cross checking between redundant channels that have available readout. When only two channels of readout are provided, the applicant/licensee should state the basis used to ensure that an operator will not take incorrect action when the two channel readouts differ. The applicant/licensee should state the method to be used for checking the operational availability of non-indicating sensors. 4.10. Capability for Test and Calibration (IEEE Std. 279-1971 Clause 4.10) Guidance on periodic testing of the protection system is provided in Regulatory Guide 1.22, "Periodic Testing of Protection System Actuation Functions," and in Regulatory Guide 1.118, Revision 3, "Periodic Testing of Electric Power and Protection Systems," which endorses IEEE Std. 338-1987, "Standard Criteria for the Periodic Surveillance Testing of Nuclear Power Generating Station Safety Systems." The extent of test and calibration capability provided bears heavily on whether the design meets the single-failure criterion. Any failure that is not detectable must be considered concurrently with any random postulated, detectable, single failure. Periodic testing should duplicate, as closely as practical, the overall performance required of the protection system. The test should confirm operability of both the automatic and manual circuitry. The capability should be provided to permit testing during power operation. When this capability can only be achieved by overlapping tests, the test scheme must be such that the tests do, in fact, overlap from one test segment