DOE OSTI2016
In its 2013 recommendations to the International Atomic Energy Agency (IAEA), the Technical Working Group on Nuclear Power Plant Instrumentation and Control (TWG-NPPIC) identified assessment and evaluation of software dependability as a topic of interest for IAEA Member States. To implement the recommendation of the TWG-NPPIC, the IAEA Scientific Secretary for the TWG initiated a consultancy activity in 2014 to develop a technical report describing a dependability assessment framework suitable for safety instrumentation and control (I and C) systems in nuclear power plants (NPPs). The development of the software dependability assessment report has involved three consultancy meetings at IAEA headquarters in Vienna, Austria. The conduct of these meetings allowed consultation among subject matter experts to generate consensus technical information that serves as the content of the report. The technical contributors consist of international experts from academia, industry, regulatory bodies and research organizations. In September 2014, a technical meeting was held in Daejeon, Republic of Korea, to present interim findings of the consultancy effort and to solicit input from representatives of IAEA Member States. The information and technical comments contributed during the technical meeting were addressed in subsequent development of the report. This paper gives an overview of key technical elements of the IAEA report. The IAEA report presents a framework by which a dependability assessment of safety software can be performed. The specified guiding principles provide the basis for establishing an assessment strategy and implementing the assessment process. The assessment framework provides a systematic, coherent structure within which to organize technical and process evidence to satisfy arguments in support of claims about software dependability properties. During the consultancy activity, the participating subject matter experts focused on high level principles, a structured approach, and identification of suitable methods and techniques. However, it was recognized that what remains is to concretize the framework through specific examples and usage experience. Thus, following publication of the report, it is recommended that case studies be performed to illustrate and more precisely define specific phases and elements of the assessment framework. For example, current national assessment approaches could be mapped into the assessment framework to serve as case studies and help to identify any aspects of the assessment framework that needs further definition or adjustment. Additionally, a challenge problem could be defined to engage stakeholders to apply the assessment framework with a common focus. This could help to better illustrate strategic options and approaches to the assessment phases. It also could serve to suggest other considerations and potential sources of evidence not fully covered in the report. Based on findings from case studies, challenge problems and country experience, it should be possible to develop generalized templates to support application of the assessment framework. These findings can be collected to serve as the basis for a User's Guide on dependability assessment of safety software. (authors)
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗