Document: NUREG-0800
Document ID: dc63e8aa-2a74-4078-9e19-9a26ed1b4d8c
Document Type: srp
Title: Revision 6 – July 2012
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1105/ML110550791.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
he safety-related system/division level manual initiation required by IEEE Std. 603-1991 is sufficiently diverse, the diverse (second) manual means would not be necessary (see Section B.1.5, “Manual Initiation of Automatically Initiated Protective Actions Subject to CCF”). If credit is taken for a manual actuation method that meets both the IEEE Std. 603-1991, Clauses 6.2 and 7.2 requirements and a need for a diverse manual means, then the applicant should demonstrate that the criteria are satisfied and that sufficient diversity exists. Note that if the diverse means is non-safety, then IEEE Std. 603-1991, Clause 5.6, "Independence," directs the separation or independence of the safety systems and the diverse means (see Figure 1). (7) If the D3 assessment reveals a potential for a CCF, then the method for accomplishing the diverse means of actuating the protective safety functions can be achieved via either an automated system (see Section 3.4, “Use of Automation in Diverse Means” below), or manual operator actions that meet HFE acceptability criteria (see Section 3.5, “Use of Manual Action as a Diverse Means of Accomplishing Safety Functions” below). (8) If the D3 assessment reveals a potential for a CCF, then the method for accomplishing the diverse means of actuating the protective safety functions should meet the following criteria: The diverse means should be: a) at the system or division level (depending on the design); b) initiated from the control room; c) capable of responding with sufficient time available for the operators to determine the need for protective actions even with indicators that may be malfunctioning due to the CCF if credited in the D3 coping analysis; d) appropriate for the event; e) supported by sufficient instrumentation that indicates: 1. the protective function is needed, 2. the safety-related automated system did not perform the protective function, and Revision 6 – July 2012 BTP 7-19-16 3. whether the automated diverse