David I. Gertman

Resilient control systems: Next generation design research

Since digital control systems were introduced to the market more than 30 years ago, the operational efficiency and stability gained through their use have fueled our migration and ultimate dependence on them for the monitoring and control of critical infrastructure. While these systems have been designed for functionality and reliability, a hostile cyber environment and uncertainties in complex networks and human interactions have placed additional parameters on the design expectations for control systems.

Human Error Quantification Using Performance Shaping Factors in the SPAR-H Method:

This paper describes a cognitively based human reliability analysis (HRA) quantification technique for estimating the human error probabilities (HEPs) associated with operator and crew actions at nuclear power plants. The method described here, Standardized Plant Analysis Risk-Human Reliability Analysis (SPAR- H) method, was developed to aid in characterizing and quantifying human performance at nuclear power plants. The intent was to develop a defensible method that would consider all factors that may influence performance. In the SPAR-H approach, calculation of HEP rates is especially straightforward, starting with pre-defined nominal error rates for cognitive vs. action-oriented tasks, and incorporating performance shaping factor multipliers upon those nominal error rates.

How training and experience affect the benefits of autonomy in a dirty-bomb experiment

A dirty-bomb experiment conducted at the INL is used to evaluate the effectiveness and suitability of three different modes of robot control. The experiment uses three distinct user groups to understand how participants background and training affect the way in which they use and benefit from autonomy. The results show that the target mode, which involves automated mapping and plume tracing together with a point and click tasking tool, provides the best performance for each group. This is true for objective performance such as source detection and localization accuracy as well as subjective measures such as perceived workload, frustration and preference. The best overall performance is achieved by the Explosive Ordinance Disposal group which has experience in both robot teleoperation and dirty bomb response. The user group that benefits least from autonomy is the Nuclear Engineers that have no experience with either robot operation or dirty bomb response. The group that benefits most from autonomy is the Weapons of Mass Destruction Civil Support Team that has extensive experience related to the task, but no robot training.

Simplified Expert Elicitation Procedure for Risk Assessment of Operating Events

This report describes a simplified, tractable, and usable procedure within the US Nuclear Regulator Commission (NRC) for seeking expert opinion and judgment. The NRC has increased efforts to document the reliability and risk of nuclear power plants (NPPs) through Probabilistic Risk Assessment (PRA) and Human Reliability Analysis (HRA) models. The Significance Determination Process (SDP) and Accident Sequence Precursor (ASP) programs at the NRC utilize expert judgment on the probability of failure, human error, and the operability of equipment in cases where otherwise insufficient operational data exist to make meaningful estimates. In the past, the SDP and ASP programs informally sought the opinion of experts inside and outside the NRC. This document represents a formal, documented procedure to take the place of informal expert elicitation. The procedures outlined in this report follow existing formal expert elicitation methodologies, but are streamlined as appropriate to the degree of accuracy required and the schedule for producing SDP and ASP analyses.

A Microworld Simulator for Process Control Research and Training

We introduce and will demonstrate a new software tool for creating simulations of simplified process control tasks—what Vincente (2000) termed microworlds—for research and training applications. This tool builds on previous software tools, such as the synthetic task environment DURESS, but provides more flexibility in simulation design, a more realistic physics model, and additional components for representing complex processes, such as auditory and visual alarms for nuclear power plants. Further, our microworld simulation tool can be used for a variety of tasks, from flexibly specifying a synthetic environment for research on a desktop computer to scaling up to large format touch displays with realistic controls typical of high-fidelity process control simulators. Potential applications of the microworld simulator include research on the cognitive engineering of human-machine interfaces used in process control, training of process control operators and other personnel, and rapid prototyping and testing of process controls and displays.

Guidelines for Implementation of an Advanced Outage Control Center to Improve Outage Coordination, Problem Resolution, and Outage Risk Management

This research effort is a part of the Light-Water Reactor Sustainability (LWRS) Program, which is a research and development (R&D) program sponsored by Department of Energy (DOE) and performed in close collaboration with industry R&D programs that provide the technical foundations for licensing and managing the long-term, safe, and economical operation of current nuclear power plants. The LWRS program serves to help the U.S. nuclear industry adopt new technologies and engineering solutions that facilitate the continued safe operation of the plants and extension of the current operating licenses. Managing NPP outages is a complex and difficult task due to the large number of maintenance and repair activities that are accomplished in a short period of time. During an outage, the outage control center (OCC) is the temporary command center for outage managers and provides several critical functions for the successful execution of the outage schedule. Essentially, the OCC functions to facilitate information inflow, assist outage management in processing information, and to facilitate the dissemination of information to stakeholders. Currently, outage management activities primarily rely on telephone communication, face to face reports of status, and periodic briefings in the OCC. It is a difficult task to maintain current the information relatedmorexa0» to outage progress and discovered conditions. Several advanced communication and collaboration technologies have shown promise for facilitating the information flow into, across, and out of the OCC. The use of these technologies will allow information to be shared electronically, providing greater amounts of real-time information to the decision makers and allowing OCC coordinators to meet with supporting staff remotely. Passively monitoring status electronically through advances in the areas of mobile worker technologies, computer-based procedures, and automated work packages will reduce the current reliance on manually reporting progress. The use of these technologies will also improve the knowledge capture and management capabilities of the organization. The purpose of this research is to improve management of NPP outages through the development of an advanced outage control center (AOCC) that is specifically designed to maximize the usefulness of communication and collaboration technologies for outage coordination and problem resolution activities. This technical report for industry implementation outlines methods and considerations for the establishment of an AOCC. This report provides a process for implementation of a change management plan, evaluation of current outage processes, the selection of technology, and guidance for the implementation of the selected technology. Methods are presented for both adoption of technologies within an existing OCC and for a complete OCC replacement, including human factors considerations for OCC design and setup.«xa0less

Human Reliability Analysis for Computerized Procedures

This paper provides a characterization of human reliability analysis (HRA) issues for computerized procedures in nuclear power plant control rooms. It is beyond the scope of this paper to propose a new HRA approach or to recommend specific methods or refinements to those methods. Rather, this paper provides a review of HRA as applied to traditional paper-based procedures, followed by a discussion of what specific factors should additionally be considered in HRAs for computerized procedures. Performance shaping factors and failure modes unique to computerized procedures are highlighted. Since there is no definitive guide to HRA for paper-based procedures, this paper also serves to clarify the existing guidance on paper-based procedures before delving into the unique aspects of computerized procedures.

FRAMEWORK AND APPLICATION FOR MODELING CONTROL ROOM CREW PERFORMANCE AT NUCLEAR POWER PLANTS

This paper summarizes an emerging project regarding the utilization of high-fidelity MIDAS simulations for visualizing and modeling control room crew performance at nuclear power plants. The key envisioned uses for MIDAS-based control room simulations are: (i) the estimation of human error associated with advanced control room equipment and configurations, (ii) the investigative determination of contributory cognitive factors for risk significant scenarios involving control room operating crews, and (iii) the certification of reduced staffing levels in advanced control rooms. It is proposed that MIDAS serves as a key component for the effective modeling of cognition, elements of situation awareness, and risk associated with human performance in next generation control rooms.

A QUALITATIVE METHOD TO ESTIMATE HSI DISPLAY COMPLEXITY

There is mounting evidence that complex computer system displays in control rooms contribute to cognitive complexity and, thus, to the probability of human error. Research shows that reaction time increases and response accuracy decreases as the number of elements in the display screen increase. However, in terms of supporting the control room operator, approaches focusing on addressing display complexity solely in terms of information density and its location and patterning, will fall short of delivering a properly designed interface. This paper argues that information complexity and semantic complexity are mandatory components when considering display complexity and that the addition of these concepts assists in understanding and resolving differences between designers and the preferences and performance of operators. This paper concludes that a number of simplified methods, when combined, can be used to estimate the impact that a particular display may have on the operators ability to perform a function accurately and effectively. We present a mixed qualitative and quantitative approach and a method for complexity estimation.

Development of a Technical Basis and Guidance for Advanced SMR Function Allocation

This report presents the results from three key activities for FY13 that influence the definition of new concepts of operations for advanced Small Modular Reactors (AdvSMR: a) the development of a framework for the analysis of the functional environmental, and structural attributes, b) the effect that new technologies and operational concepts would have on the way functions are allocated to humans or machines or combinations of the two, and c) the relationship between new concepts of operations, new function allocations, and human performance requirements.