Draft for Public Consultation REGDOC-2.3.1: Commissioning of Reactor Facilities

Preface

This regulatory document is part of the CNSC's Operating Performance series of regulatory documents, which also covers accident management and periodic safety reviews. The full list of regulatory document series is included at the end of this document and can be found on the CNSC's Web site at nuclearsafety.gc.ca/eng/acts-and-regulations/regulatory-documents/index

REGDOC-2.3.1, Commissioning of Reactor Facilities, sets out requirements and guidance for the commissioning of facilities in Canada that use nuclear reactors. These facilities (hereafter called "reactor facilities" in this document) include:

• nuclear power plants (NPPs) or small reactors for the generation of power or heat for industrial process
• small reactors for non-power-generation uses (e.g., isotope production, and research and development activities)

The requirements and guidance in this document apply primarily to NPPs. However, the principles behind the requirements and guidance are equally applicable to smaller facilities in a risk-informed (graded) manner, and should be considered in the overall safety case for any reactor facility.

Key principles used in developing this document and the associated regulatory document are consistent with national and international documents. In particular, this document takes into account IAEA NS-G-2.9, Commissioning for Nuclear Power Plants.

This document is intended to form part of the licensing basis for a regulated facility or activity. It is intended for inclusion in licences as either part of the conditions and safety and control measures in a licence, or as part of the safety and control measures to be described in a licence application and the documents needed to support that application.

1. Introduction

1.1 Purpose

REGDOC-2.3.1, Commissioning of Reactor Facilities, sets out the requirements and guidance of the Canadian Nuclear Safety Commission (CNSC) for the commissioning of facilities in Canada that use nuclear reactors. These facilities (hereafter called "reactor facilities" in this document) include:

• nuclear power plants (NPPs) or small reactors for the generation of power or heat for industrial processes
• small reactors for non-power generation uses (e.g., isotope production, and research and development activities)

This regulatory document also sets out requirements and guidance to ensure that commissioning activities meet applicable codes, standards, and design requirements, and that the reactor facility is capable of operating safely and reliably over its lifetime.

1.2 Scope

This regulatory document applies to the commissioning of a new reactor facility. However, the principles set out in this document also apply to commissioning activities related to the life extension, refurbishment and modification of an existing reactor facility.

This document is not intended to override the requirements of other regulatory documents, codes and standards. Rather, it aims to provide a framework within which these can be applied to provide assurance that commissioning is effectively managed. Applicable regulatory documents, codes and standards are referenced in this document.

Note that, where necessary or deemed important, CANDU-specific experience, requirements and expectations are cited in the guidance material in this document.

1.3 Relevant legislation

The provisions of the Nuclear Safety and Control Act (NSCA) and the regulations made under the NSCA relevant to this document are as follows:

• subsection 24(4) of the NSCA, which provides that "No licence shall be issued, renewed, amended or replaced - and no authorization to transfer one given - unless, in the opinion of the Commission, the applicant or, in the case of an application for an authorization to transfer the licence, the transferee (a) is qualified to carry on the activity that the licence will authorize the licensee to carry on; and (b) will, in carrying on that activity, make adequate provision for the protection of the environment, the health and safety of persons and the maintenance of national security and measures required to implement international obligations to which Canada has agreed."
• subsection 24(5) of the NSCA, which provides that "A licence may contain any term or condition that the Commission considers necessary for the purposes of this Act…"
• section 3 of the General Nuclear Safety and Control Regulations, which states the general licence application requirements
• paragraph 12(1)(a) of the General Nuclear Safety and Control Regulations, which provides that "Every licensee shall (a) ensure the presence of a sufficient number of qualified workers to carry on the licensed activity safely and in accordance with the Act, the regulations made under the Act and the licence;"
• paragraph 12(1)(b) of the General Nuclear Safety and Control Regulations, which provides that "Every licensee shall train the workers to carry on the licensed activity in accordance with the Act, the regulations made under the Act and the licence;"
• paragraph 6(g) of the Class I Nuclear Facilities Regulations, which provides that an application for a licence to operate a Class I nuclear facility shall contain, in addition to other information, "the proposed commissioning program for the systems and equipment that will be used at the nuclear facility;"
• paragraph 14(2)(b) of the Class I Nuclear Facilities Regulations, which provides that "Every licensee who operates a Class I facility shall keep a record of the results of the commissioning program referred to in the licence;"

2. Commissioning Program

The licensee shall establish and implement a program for the commissioning of a reactor facility that:

• includes management systems and requirements for participating organizations
• defines clear responsibilities for commissioning activities and oversight, specifying interfaces between construction, commissioning and operating organizations
• is structured to enable the objectives and methods of testing to be understood and to allow management control and coordination
• outlines the testing and verification activities that must be performed to ensure that structures, systems and components (SSCs) important to safety are built as designed and meet the requirements of the facility design and safety analysis
• verifies safety analysis assumptions and the presence of adequate safety and operating margins between design, safety requirements and normal operating conditions
  ensures tests are only conducted if the reactor facility falls within the range of assumptions made in the safety analysis and the licensing basis remains valid
• includes provision of temporary utilities (i.e., power, HVAC, demineralized water, fire protection, lightning, communications, compressed air, waste water processing and discharge)
• identifies the security systems to be commissioned before nuclear fuel or material is brought onsite
• documents the results of testing and verification activities, and identifies any impacts on or changes to the facility design basis
• validates operating and surveillance procedures for which the commissioning tests provide representative activities and conditions
• verifies operating and emergency procedures by trial use
• ensures integrated system validation of control rooms and control areas
• ensures all personnel participating in commissioning activities are trained and qualified
• ensures a schedule, including milestones and regulatory hold points, and test results to be submitted for review are identified and communicated to the CNSC

The licensee shall submit the commissioning program to the CNSC for approval at least one year before commencing commissioning activities.

For sites that will contain multiple reactor facilities, the commissioning program shall clearly identify and track commissioning activities for each individual unit or module.

The content of the final safety analysis report shall be updated according to commissioning results.

3. Management and Organization

3.1 Management system

All commissioning and related activities shall be developed and implemented under the control of the licensee using a management system meeting the requirements of CSA N286-12, Management system requirements for nuclear facilities.

The licensee, contractors and the operating, commissioning and construction organizations shall ensure that their management systems of processes, procedures and practices are relevant to their scope, responsibilities and associated activities (i.e. design, construction and operation).

Guidance

Management system controls should ensure that safety matters are not dealt with in isolation, but are considered within the context of all commissioning activities. This means that health and safety, environmental, security, quality and economic considerations should be integrated so that requirements for safety are established and applied coherently with other requirements or demands. N286-12 permits the use of a graded approach, based on the relative importance to safety of each activity.

3.2 Organizational responsibilities

The licensee is responsible for safety and security and shall oversee the organization, planning, execution and assessment of the commissioning program.

The licensee shall be responsible for the construction, commissioning and operating organizations, which may be part of the licensee's organization or from a contracted organization responsible for their scope of work.

The licensee shall ensure that necessary resources are available to carry out the commissioning activities and to establish, implement, assess and continually improve commissioning activities.

During and following commissioning, under the overall direction of the licensee:

• The construction organization shall ensure that SSCs have been constructed as per design and that quality assurance requirements have been satisfied.
• The commissioning organization shall ensure that SSCs are tested to provide assurance that the reactor facility has been properly designed and constructed and is ready for safe operation.
• The operating organization shall:
  • carry out operation and maintenance
  • satisfy itself that the systems transferred comply with the specified performance, design intent and safety case
  • satisfy itself through integrated system validation exercises that the human-machine system design and supporting mechanisms facilitate human performance in achieving safety and operational goals
  • accept responsibility for the transferred systems
  • become competent in the management and operations of the reactor facility
  • ensure that there will be a sufficient number of qualified workers to operate the facility
• SSCs shall be operated in accordance with the assumptions and intent of the commissioning program, respecting the relevant operating limits and conditions that apply to each testing stage.
• The responsibilities of other participants such as designers, manufacturers and supporting technical organizations shall be specified in appropriate documents.

Interface arrangements shall be identified and agreed upon between the licensee, commissioning organization, operating organization, construction organization and any other organizational units performing the work. The interface arrangements shall be specified in management system documentation and in appropriate contracts.

Interface control shall include the assignment of responsibilities and the establishment of procedures for the identification, review, approval, release, distribution and release of documents that cross organizational boundaries.

Guidance

Responsibilities of each organization should remain clear at all times, even if activities overlap in respect to the use of personnel. The participating organizations may adopt various arrangements in discharging their responsibilities. Appendix E provides examples of typical responsibilities, and Appendix F gives further guidance on recommended interface arrangements.

Commissioning activities should be aligned with the regulatory licensing process. The principal activities performed in commissioning may be divided into the following categories:

• those associated with the final stage of construction and installation of the reactor facility
• those specific to commissioning, including testing and safety review activities
• those associated with the operation, security and maintenance of the reactor facility

Accordingly, personnel performing the above activities may belong to the construction, commissioning or operating organizations, depending on industrial practice and contractual arrangements, as well as upon the physical size and design of the reactor facility. The composition of these organizations may also be influenced by the availability and experience of personnel performing specialized functions. If the operating organization decides to contract the commissioning activities to another organization, it should be made clear that the ultimate responsibility for commissioning and safety remains with the operating organization.

Integrated system validation and minimum shift complement validation should meet the expectations set out in CNSC guides G-278, Human Factors Verification and Validation Plans and G-323, Ensuring Presence of Sufficient Qualified Staff at Class I Nuclear Facilities - Minimum Staff Complement, respectively.

3.3 Transfer of SSCs and the reactor facility

Appropriate procedures shall be in place for the transfer and ownership of SSCs and the reactor facility from the construction organization and non-licensee commissioning staff to the licensee's operating organization.

These procedures shall describe the detailed process steps, including responsibilities and authorities of the parties involved.

Prior to fuel-in-core testing, all systems shall be under the control of the operating organization.

Before the transfer takes place, representatives of the organizations involved in the handover process shall carry out facility walk downs of all systems.

The licensee shall maintain responsibility for safety and security at all times during the transfer.

After the transfer, any turnback for rework/repair shall remain under the ownership of the operating organization.

The transfer of shall be documented. All commissioning records shall be turned over to the operating organization's records-management program and retained for the life of the reactor facility.

Guidance

Facility handover includes the transfer of SSCs and documentation, and may also include the transfer of personnel. The transfer of documentation (paper and electronic) is a key feature in the handover process. Documentation should be transferred in system packages and over a reasonable period of time, to enable reactor facility personnel to perform a comprehensive review of every package. Document transfers should also depend on how responsibilities for testing after fuel loading, at initial criticality, at low power and at power escalation are assigned.

3.4 Qualifications and training

Personnel engaged in commissioning activities shall have appropriate training, qualifications and competence to perform their assigned tasks effectively.

Training program subjects relevant to the commissioning program shall include:

• commissioning procedures
• reactor facility systems
• conduct of testing and maintaining the reactor facility in safe conditions
• procedural and design changes
• permanent and temporary modifications
• work control and equipment isolation
• interfaces of construction, design and operation with commissioning
• test limitation boundaries in mechanical and electrical systems
• the criteria for, and importance of, reporting incidents and deviations
• commissioning methods and techniques
• safety culture
• nuclear safety, industrial safety, fire protection, radiation protection and security
• design criteria, technology and operational limits and conditions (or the equivalent) for the reactor facility
• environmental protection and waste management of spent fuel and radioactive waste
• full-scope simulator training of operators for reactor start-up, regular operations, reactor shutdown and cooldown and handling of various transients, including accidents

Training shall be systematically reassessed based on experience gained in commissioning, including any incidents. Such experience shall be appropriately incorporated into the training material.

3.5 Performance measurement, assessment and improvement

Commissioning activities that do not conform to requirements shall be identified, and corrective actions shall be employed for their resolution.

Experience and information gained from other commissioning projects shall be reviewed and considered for potential improvements, as applicable.

Guidance

Major and safety-related non-conformances should be reported as per CNSC requirements. All personnel should be made aware that they are expected to identify and report non-conformances. A system should be in place to define non-conformances and specify the roles and responsibilities of the licensee, commissioning organization, and other involved organizations for reporting and correcting non-conformances. In addition, this system should incorporate the regulatory approval process for handling problems and non-conformances when required.

Non-conformances of safety significance should be treated as events by the licensee, and resolved via a corrective action program in a graded manner. The process of determining the safety significance and corrective actions of the non-conformance should include appropriate experts and, if necessary, the design authority. Corrective actions should be assessed in relation to their safety significance and dealt with at the appropriate management level.

Records of corrective actions taken to resolve non-conformances should be maintained. The effectiveness of corrective actions in preventing similar non-conformances should be monitored.

Due to the challenging nature of commissioning, such as tight schedules, new technology or limited availability of resources, corrective actions to non-conformances may require a long time and may stay as pending issues even after handovers from one party to another. These pending non-conformances should be tracked to completion. A comprehensive tracking system should be implemented to ensure that non-conformances are resolved as soon as possible, records are maintained and relevant parties are informed.

The commissioning stage yields much information that should be taken into account in the subsequent operation of the reactor facility. Systematic processes and procedures should be established for reporting on and analyzing abnormal events, human errors and "near misses". Experience gained at this stage should be fed back into the training program for commissioning and operating personnel. Available information on operating experience, including reportable occurrences at the operating power reactor, should be used appropriately in developing and executing procedures. Consideration should also be given to the need for any changes in the design and related documents.

Experience and information gained from commissioning projects should be made available to other licensees, as applicable.

3.6 Emergency management

The licensee shall ensure an appropriate plan is in place for managing emergencies during commissioning.

Emergency management to address the radiological consequences of events shall be established from the time that nuclear fuel is brought to the site. Emergency preparedness management shall be in place and tested before fuel loading begins.

All parties involved in the commissioning program shall be trained to cope with any anticipated emergency at the reactor facility under commissioning.

Guidance

Emergency management for commissioning should take into account the fact that non-nuclear hazards, such as fire, could arise while the nuclear fuel is on the site.

A potential nuclear hazard could arise if an operating reactor facility is adjacent to a construction site or a commissioning site. If this is the case, emergency management measures should be taken for the protection of construction and commissioning personnel. Emergency management should also take into account any other local hazards.

4. Commissioning Tests

4.1 Test objectives

Testing is the core activity of the commissioning program. It shall be sufficiently comprehensive to demonstrate that the reactor facility can operate in the modes for which it has been designed.

In developing test objectives, the safety functions of the SSCs shall be systematically reviewed to ensure that all safety requirements are met.

4.2 Test scope and methods

Tests necessary to demonstrate operability, safety and safety-related functions shall be fully performed. For tests which cannot be performed to their fullest extent, it shall be documented how the safety and design intent is met.

Functional and performance requirements and parameters that clearly identify the approach used for each testing aspect shall be defined.

The commissioning program shall have provisions to ensure that there have been no omissions in testing complex systems.

Tests shall be performed under the most realistic operating conditions practicable and shall support analytical tool validation.

Facility-level integrated tests shall be performed for every reactor facility, irrespective of the availability of similar or identical tests from other single- or multi-unit reactor facilities. Where integrated testing cannot be performed for safety reasons, the licensee shall provide a technical argument that includes acceptable testing alternatives to meet the objectives of the commissioning program.

For any offsite tests, their applicability at the component level shall be documented. Their applicability shall also be documented when integrated at system and facility levels.

For multi-unit reactor facilities:

• component- and system-level integration tests shall be done onsite for every unit in the reactor facility
• special provisions shall be made to ensure that the commissioning tests of a unit do not jeopardize the safety of another unit; such provisions shall include safety analysis (of the operating unit), conducting a hazard assessment, obtaining specific written approval from the manager responsible for the operating unit and obtaining the required approvals from the CNSC
• that have SSCs common to more than one unit, tests shall be conducted on each unit to provide assurance that the specified performance requirements of these SSCs meet the design intent of each unit

Guidance

If the testing procedure uses SSC test results from offsite tests, this should be defined and justified, showing the validity and applicability of performed offsite tests to:

• the onsite physical and functional condition of SSCs
• their interfaces with the rest of the reactor facility

For some reactor technologies and construction processes, some tests on SSCs performed offsite may need to be considered as part of the commissioning process. In such cases, specific justification should be provided showing the validity of the performed tests for the current installed conditions of the SSCs and related functional and physical interfaces.

4.3 Acceptance criteria

Acceptance criteria for the commissioning tests, against which the acceptability of the test results will be evaluated, shall be defined by the test procedures.

Acceptance criteria shall be classified as either important to safety or not important to safety.

The technical basis of the acceptance criteria, which is consistent with the safety, design and performance requirements, shall be documented in preparation for and prior to conducting the tests.

Guidance

CNSC approval of the acceptance criteria important to safety may be needed before performing the commissioning tests. This will depend on the facility-specific commissioning program.

Parameters measured during the test should directly relate to, or correlate with, the design requirements important to safety while recognizing the safety limits and integrity of the structure, system or component. In cases where measured parameters do not directly relate to the acceptance criteria, analytical tools may be used to demonstrate that the safety objectives are met. However, before their first use, the validation and verification of the analytical tools, in compliance with regulatory requirements, should be documented.

Acceptance criteria, especially those directly or indirectly linked to safety, should not change during the execution of a test.

After completion of a test, there may be a discrepancy between the results and acceptance criteria. Observed discrepancies and their resolution should be documented; impact assessment of the discrepancies on the past and pending tests should also be performed and approvals should be secured before proceeding with further tests.

4.4 Test procedures

All commissioning tests shall be performed in accordance with the commissioning program and authorized written procedures.

Preparation of test procedures, including their verification and approval, shall be documented.

The test procedures, including acceptance criteria, shall be reviewed, verified and approved by the design, commissioning and operating organizations.

Test procedures shall establish actions for deviations from procedures, where test results fall outside the acceptance criteria or if unexpected events occur.

Deviations from approved test procedures shall be addressed according to the operating organization's control change procedures, leading to updated and approved procedures as per the original commissioning program.

Should a deviation occur, tests shall only resume after any existing issue is dispositioned (e.g., through design change, change in operating requirements, or change in operating modes,) by the commissioning organization and approved by the relevant parties.

Depending on the facility-specific commissioning program, some commissioning tests for safety systems may require onsite regulatory oversight. In such cases, the CNSC shall be informed of these tests in a timely manner so that CNSC staff can attend.

Competent personnel and sufficient controls shall be in place to validate test procedures.

Guidance

For some tests, the test procedures may require SSCs to be placed in a different configuration than the normal operating configuration. Such deviations or changes may involve temporary interlock bypasses, temporary additional interlocks, temporary system bypasses, valve configurations and instrument settings. Consideration should be given to minimize such arrangements, and to ensure that any deviations from the normal functioning of the as-built systems do not invalidate the test objectives. In such instances, the test procedures should:

• specify the deviations/changes for the SSCs from the normal operating configurations
• specify back-out provisions and anticipate response to events that could arise from the test
• provide supporting evidence with reference to safety analysis
• include all the necessary steps for the restoration of the SSCs to their normal configuration after the test is completed
• include a list of all necessary checks that are needed to ensure that:
  • the deviations/changes are made safely and correctly
  • the SSCs are returned to their normal configuration safely and correctly

Test procedures should use normal facility operating procedures to ease their verification. Where improvements to operating procedures are identified during commissioning, commissioning personnel should consider, in consultation with the operating organization, amending the procedures to permit operating personnel to become familiar with them. Where operating procedures have not yet been developed, the operating organization should have processes in place to manage commissioning records for use in developing operating procedures.

The development, verification and validation of commissioning test procedures may benefit from the use of validated simulator and computer codes. The use of the facility simulator should be considered in training and preparing commissioning teams, particularly for complex commissioning tests or for investigating possible adverse conditions that may occur during the test.

The process for preparing test procedures should allow for sufficient time to:

• conduct various levels of review, including responding to potential review requests from the CNSC. The scope and depth of reviews should be commensurate with the nature of the test - regardless of whether a test requires SSCs to be placed in a different configuration from the normal operating configuration - and the impact on system safety
• report test results
• enable review of the test results to proceed safely and efficiently

Examples of deviations from approved test procedures to be addressed according to the operating organization's control change procedures include:

• a test acceptance criterion that is not met
• inability to demonstrate compliance with the acceptance criterion because of at least one of the test conditions not being fulfilled
• the determination of an inadvertent change to the test procedure steps that impacts the acceptance criterion
• inability to implement the test completely, as developed in the test procedure

Should a deviation occur, a review that includes the following should be carried out:

• immediate corrective actions to ensure facility and personnel safety
• safety implications of the deviation
• root-causes of the deviation
• an assessment of whether the deviation prevents continuation of the commissioning activities
• violations of safety and regulatory requirements
• appropriate corrective actions, such as:
  • re-performing the test as per procedures
  • modifying the design
  • updating the safety analysis
  • updating/correcting test procedures
  • updating operational documentation

The deviation review process should not be finalized until all corrective actions are completed and the commissioning procedures are updated and approved. For any deviations requiring a design change, the affected test(s) should be repeated to confirm conformance after the design change modifications have been implemented.

For unexpected events, consideration should be given to any fault responses and emergency actions required for each test procedure. In some cases it may be the same response to alarms as would be necessary for planned operation, whereas other cases may require specific actions because of the configuration of the reactor facility during testing. The test procedures should identify the specific limits and conditions applicable to the test and the actions to be taken if the limits are approached.

Although the format of procedures may vary from facility to facility, the contents of test procedures should include the following:

• Introduction: a summary of the main test objectives and of the safety aspects to be demonstrated. The system to be tested should be identified and the anticipated test results should be indicated. The relationship of the test being carried out to the main phases of the commissioning program should be highlighted.
• Test objectives and methods: the objectives of the test and the means by which they are to be achieved, including step-by-step actions.
• Limiting criteria: applicable operational limits and conditions, including temporary ones. Limits and conditions that must be adhered to in order to prevent damage to the reactor facility should also be included.
• Prerequisites and initial conditions: the state of all relevant SSCs and other pertinent conditions that might affect the operation of the system to be tested (including coordinating construction, commissioning, operations, verification activities and hold points), particularly if different from normal. This information should include, where appropriate, the precautions necessary to maintain the desired system configuration.
• Test conditions and procedures: the way in which the system to be tested is required to be brought up to test conditions and details of the test procedures, preferably be in a step-by-step format. This information should include any temporary changes or abnormal alignments of the system or of adjacent systems, and supported by safety analysis.
• Acceptance criteria: the stated acceptance criteria. Wherever possible, this statement should be quantitative as well as qualitative (e.g., for fuel loading).
• List of instrumentation and special test equipment: all special equipment and calibrations necessary to perform the test. The equipment should have appropriate accuracy and should be clearly identifiable.
• Staffing, qualification and responsibilities: staffing needs, qualification requirements and assignment of duties and responsibilities for conducting tests, including personnel required to oversee and/or witness.
• Special precautions: measures and actions necessary for the safety of personnel and the security of equipment.
• Completion of test: indication by the responsible personnel that the test has been completed and the systems have been returned to normal conditions. The removal of temporary changes or of any abnormal lineup should be individually specified (i.e., as steps in the test procedure).
• Permanent records: information necessary for permanent records, including baseline data.
• Identification, cross-referencing and distribution: a unique identification system (such as one using reference numbering), including comprehensive cross-references to associated documents and a distribution list of those persons who should receive it.
• Data collection and processing: arrangements for tabulating data and test results. Test sheets should have standardized forms and each sheet should be signed by the data collector. Chronological recording is desirable (test data, date and time). Data pre-processing by the data acquisition system and post-processing, if any, should be validated and verified.
• Non-conformities: arrangements to manage any non-conformities identified as a result of the tests.
• Provisions for the techniques and methods of data analysis, including the analysis of measurement results: verification and validation of the software used for data collection, storage and analysis prior to the test. These are important, and the repeatability, accuracy and measurement uncertainty should be documented.

4.5 Review, evaluation and reporting of test results

Test results shall be reviewed by the commissioning organization to ensure that all deviations are resolved and that operating constraints, if any, are identified and documented.

Interpretation of test data shall be reviewed by persons who have the technical expertise to determine that the operational characteristics of the SSC and/or process are captured.

Formal reports for each test shall be prepared by individuals responsible for the tests, and approved by the commissioning organization.

The reactor facility design, operational and safety documentation shall be updated during the commissioning process to reflect test results and resolution of deviations.

If test results indicate that a change to the scope of subsequent tests is required, a documented assessment shall be performed prior to proceeding with the remaining tests to ensure that:

• the proposed changes do not fall outside the range of assumptions made in the safety analysis and do not invalidate the licensing basis
• the proposed changes do not invalidate the results of the previous tests
• the proposed changes do not adversely impact future tests in terms of scope, objectives and sequence
• the commissioning documents are updated with the nature of, and justification for, the proposed changes as per management system requirements

The commissioning organization shall report the test results to the operating organization and to other participants in the commissioning program, as required.

Guidance

Although it may be expedient to prepare summary reports as an interim measure for a quick assessment of the test results, a formal comprehensive report that includes a final evaluation of the test results should be prepared.

The format of a report may vary, but should typically include:

• an introduction, which includes a summary of test objectives with evidence of safety objectives, a description of the test method and acceptance criteria
• references to appropriate test procedures
• the conduct of the test, including the duration, the initial and final states of the reactor facility, the actual limitations experienced and the problems encountered and actions taken to overcome them (including modifications to the facility or procedures)
• a concise description of any special test equipment used
• a summary of data collected and analysis of the data
• an evaluation of results, including both qualitative observations (e.g., visual observations) and a comparison of applicable test data with the acceptance criteria
• conclusions regarding system or component adequacy
• deficiencies relating to design and construction found during conduct of the tests, as well as system modifications and corrective actions required to correct these deficiencies
• cross-references and a distribution list

Formal reports may serve as valid test/phase completion certificates, as long as they contain all the required information. In addition to individual test reports, phase test reports and a final station commissioning report should be prepared.

4.6 Modifications

Modifications to test procedures and other related documents shall be authorized by means of a formal licensee-approved process to control changes in documentation.

For modifications to the sequence of a test within a hold point or across hold points, appropriate reviews shall be performed, and formal approvals shall be obtained from the commissioning organization. The review shall ensure that all the prerequisites for the out-of-sequence test are met in order to ensure the test is performed safely.

Temporary modifications to an approved design configuration for the purposes of commissioning testing shall be controlled by the commissioning organization, with licensee oversight. A review shall be performed to ensure that safety implications are considered.

Guidance

Modifications to the test sequence may be made because of:

• changes in external conditions (e.g., availability of the grid)
• progress in other tests
• status of periodic tests or maintenance activities

Proposals for design modifications to address a deviation should consider regulatory requirements and the stipulations of the operating organization. Proposals for modifications should assess the impact on other systems as well as safety implications for the commissioning program or individual tests.

The CNSC should be informed in advance of any major modifications to test procedures.

5. Testing Phases and Regulatory Hold Points

Tests shall be performed in phases and in a logical progressive sequence. Where applicable to the type of reactor facility, the following commissioning test phases shall constitute the minimum regulatory hold points for the reactor start-up:

• Phase A: prior to fuel load
• Phase B: prior to leaving reactor shutdown state
• Phase C: approach to critical and low power tests
• Phase D: high-power tests

For each regulatory hold point, it shall be confirmed that all prerequisites established between the licensee and the CNSC necessary for proceeding beyond the regulatory hold point are met.

Licensees shall submit a written request and obtain written approval from the CNSC before proceeding beyond each regulatory hold point.

Guidance

Testing of a specific structure, system or component may require changes to the reactor facility configuration and modes of operation. Such testing may also place demands on appropriate functioning of other SSCs and the availability of various safety functions. Therefore, the sequence of testing is important to the overall safety of the reactor facility.

Tests should be planned in chronological order. Before nuclear material is brought onsite, applicable security systems should be commissioned and operational. Safety systems and safety-related systems (e.g., fire protection system, radiation protection system, emergency power system) should be operational before other systems are tested, for the protection of personnel, public and the environment, and facility or nuclear safety. Tasks necessary for the preparation of the next sequence of tests, in particular the availability requirements of the systems that are necessary, should be identified. Relevant safety system(s) and alarm settings, including those of radiological protection instruments, should be specified at appropriate stages during commissioning.

A system/component-level functional dependency matrix (within a system, across systems, at system interfaces, and across units for multi-unit sites) may help identify and plan the chronology and sequence of tests. Some tests across systems may need to be grouped and performed at the same time to ensure appropriate interfacing of such systems. Support systems (e.g., compressed air system, electrical system, service water system, demineralized water supply system) should be tested prior to the testing of other systems that depend on their availability.

Within the overall fuel-out (Phase A) or fuel-in (Phase B and up) (see sections 5.1 and 5.2, respectively) commissioning program, activities are usually further divided into cold and hot performance tests.

Cold performance tests are thermal hydraulic tests under cold conditions and involve:

• pressure and pressure drop
• flow
• pump-head/pump-flow characteristics
• equipment and instrument performance tests of the nuclear steam plant and balance of plant

Cold performance testing includes the initial starting of fluid and support systems. The objectives of these tests are to obtain initial operational data on equipment, determine operational compatibility with interfacing systems, and verify the functional performance of these systems.

Hot performance tests are thermal hydraulic tests under hot conditions and involve:

• pressure, and pressure drop
• flow
• equipment and instrument performance tests of the primary and secondary side systems

Hot performance testing should be undertaken to verify the conformance of systems with specified requirements. Where possible, these tests should follow cold performance tests under operating conditions that simulate typical temperatures, pressures and flow rates for anticipated operational occurrences (AOOs) and design-basis accidents (DBAs).

The tests should verify the effectiveness of heat insulation and heat removal systems. Initial flow rates, pump-head/pump-flow characteristics, pressure drop and temperature measurements at various locations around the reactor facility should be checked and confirmed against design calculations. The vibration levels, clearances and other provisions that were made to accommodate thermal expansion of SSCs should be checked and confirmed.

Phases or hold points are imposed to ensure proper assessment of available commissioning results against pre-defined acceptance criteria. Licensees may incorporate as many phases or hold points as they see fit, as long as the minimum regulatory hold points are included. Depending on the situation, the CNSC may request additional regulatory hold points beyond the set minimum. The selection of regulatory hold points will generally be agreed upon between the licensee and the CNSC and incorporated into the licence.

At each hold point, the test results and the general condition of the reactor facility should be reviewed and approved by the commissioning and operating organizations. To facilitate the release of hold points, including regulatory hold points, it is recommended that the licensee develop detailed matrices of the prerequisites to be formally demonstrated for each hold point. These matrices should be developed in agreement with all stakeholders.

The following steps should be undertaken at the end of each hold point:

• Documents to certify the performance of tests and provide phase clearances for the continuation of the commissioning program should be prepared and issued.
• Test certificates should be issued by the commissioning organization to certify that the tests have been completed in accordance with authorized procedures, stating any reservations about departures from or limitations of the procedures.
• Phase completion certificates should be issued by the commissioning organization to certify that all the tests in the respective commissioning phase have been satisfactorily completed (listing all deficiencies and non-conformances, if any). Phase completion certificates should also list associated test certificates.
• It should be ensured that succeeding phases can be conducted safely and that the safety of the reactor facility is never dependent on the performance of untested SSCs.

The written request to the CNSC for approval to proceed beyond a regulatory hold point should confirm that:

• all related project commitments tied to the regulatory hold point have been completed
• all systems required for safe operation beyond the regulatory hold point are available
• all specified operating procedures have been formally validated
• specified training has been completed and staff are qualified
• all non-conformances and unexpected results identified leading up to the regulatory hold point have been addressed

5.1 Phase A: Prior to fuel load

Before fuel is loaded into the core, the operability, availability and performance of the SSCs that will ensure safety with fuel in the core shall be tested, and appropriate tests of fuel handling equipment shall be completed.

Guidance

Satisfactory pre-operational tests (see Appendix A for recommended tests) should take into account the proper sequence of tests of electrical systems, instrumentation systems and other service systems (such as cooling water and fire protection systems). This is to ensure the availability of the services required to implement the entire commissioning program. Special instrumentation and control required for the first fuel load and start-up should be installed and checked during this phase.

During this phase, operations personnel should take the opportunity to use, verify and validate operating procedures.

Some critical elements of heat sinks (flow rates, pressures, etc.) may be tested with fuel imitators in the core. These tests provide early assurances that safety will be maintained once fuel is loaded. Typically, testing of these systems will continue after fuel load.

5.2 Phase B: Prior to leaving reactor shutdown state

This phase focuses on ensuring the fuel is loaded into the reactor safely, and on confirming that the reactor is in a suitable condition to be started up and that all prerequisites for permitting the reactor to go critical have been met. This phase must be successfully completed before approaching criticality.

During this phase:

• the reactivity control mechanism shall be available and in service and the reactor shall be maintained subcritical at all times
• availability of the automatic shutdown systems shall be confirmed where possible
• the availability of the reactor trip system against neutronic and process-related upsets shall be confirmed
• subcriticality checks shall be performed at regular steps during fuel loading to determine safe loading increments for subsequent loading
• predictions of the behaviour of the core in terms of its reactivity shall be available for the evaluation of subcriticality margin
• acceptance criteria for the maximum permissible deviation of predicted values from measurements shall be defined
• tests on coolant flow, pressure, temperature and the performance of associated instrumentation and control mechanisms shall be conducted
• fuel loading shall be supervised by certified representatives from the operating organization

Guidance

This phase involves initial fuel loading and subcriticality tests (see Appendix B for recommended tests).

For applicable reactor designs, the core should be fuelled in accordance with a predetermined loading pattern. Fuel loading procedures should include, as appropriate:

• periodic data recording
• audible indication of flux increase
• monitoring of neutron count rate when reactivity is being inserted or removed and during any other operations that could potentially affect core reactivity

Any changes occurring in the reactor should be reported immediately to the control room personnel. Fuel loading should be stopped if measurements deviate from predicted values and commence only after the root-causes are determined and appropriate corrective actions are taken. If required by the safety analysis, the position of each core element should be independently confirmed and documented.

5.3 Phase C: Approach to critical and low-power tests

This phase focuses on confirming reactor behaviour at the stage of initial criticality and subsequent low-power tests. It includes activities that cannot be performed with the reactor held in a subcritical state (shutdown state).

During this phase:

• trip set points shall be verified to ensure that they are compatible with the demands of the tests scheduled in this phase
• the availability of the automatic shutdown systems shall be confirmed for low-power shutdown
• radiological surveys and functional tests of radiation protection equipment shall be made
• changes in reactivity shall be continuously monitored and evaluated so that the prediction of the point of criticality is continually checked
• the performance of the reactor core shall be commensurate with design assumptions and predictions, and comply fully with the safety analysis report
• it shall be confirmed that the reactor core is in proper condition to operate higher power levels
• characteristics of the reactivity control systems and shielding shall be commensurate with design assumptions and predictions, and shall comply fully with the safety analysis report
• integrated system validation shall be completed if it has not been conducted during earlier phases of commissioning

Guidance

During this phase, criticality of the fuel in the reactor core is achieved for the first time (see Appendix C for recommended tests). The power levels of this phase will be the lowest that give reliable and stable measurements and that enable the required conditions to perform the specified tests. Special very-low-power (start-up) instrumentation may be used if necessary and may need to be connected into the shutdown logic where trip coverage is not available from the normal shutdown means (detectors out of range).

The sequence and magnitude of the reactivity changes should be done in accordance with defined procedures, using reactivity devices such as mechanical control rods (and rods of other types), adjustable reflectors, liquid poison, and adjustment of process fluids such as coolant flow or moderator level. In these tests, reactor trip set points for different shutdown means should be set to conservative values.

Achieving criticality requires a cautious approach and continuous monitoring of the neutron flux. After the subcritical multiplication factor has been determined, predictions for the point of criticality should be performed while making smaller, successive adjustments to positive reactivity. The objective of these actions is to avoid passing through the point of criticality with a high rate of change in neutron flux (short period of multiplication). After criticality has been achieved, a conservative start-up rate of flux increase should be used in attaining low power.

5.4 Phase D: High-power tests

This phase focuses on demonstrating reactor and systems behaviour at higher power levels, including activities that could not be carried out at the power levels in Phase C.

During this phase:

• high-power tests shall be performed at various bulk power intervals. Where specified in the licence, these intervals shall be approved by the CNSC
• in accordance with the design, tests shall be made to demonstrate that the reactor facility is able to:
  • safely operate at steady state under normal operating conditions
  • mitigate or prevent AOOs escalating to more severe events
  • safely cope with DBAs (note that the facility need not be put into a DBA condition, but rather the function of mitigating systems verified)
• a documented review shall be carried out at the end of each high-power test to confirm that the operational limits and conditions are adequate and practicable and identify any constraints on the operation of the reactor facility

Guidance

This phase should generally be limited to those tests that can only be carried out at high power (see Appendix D for recommended tests).

This phase of commissioning tests consists of incremental approach to full power. A comprehensive range of power tests should be made to confirm that the reactor facility can be operated in accordance with the design intent and that the reactor facility can continue to operate safetly. Typically, power is increased in increments until full power is reached. At each increment, a series of prerequisite tests are performed that must be met before proceeding to the next power level. The CNSC may stipulate more than one regulatory hold point as power increases, based on the specifics of the testing program and the relevance to demonstrating the safe operation of the facility.

During testing, in order to minimize time at risk, tests that are necessary to demonstrate safe operability should be completed without delay.

Appendix A: Recommended Phase A Commissioning Tests

The following tests, as applicable to the facility should be performed prior to fuel loading:

• testing of relevant systems in main and secondary control rooms in service to support Phase A testing
• confirmation that reactor coolant and connected systems meet cleanliness requirements
• confirmation of the availability and functionality of the reactor control system
• testing of neutron detectors
• service tests:
  • compressed air systems used for safety-related functions in service
  • fire protection systems in service throughout facility
  • safety-important process cooling systems in service (e.g., heat sink systems important reactor cooling and emergency sources of water)
  • facility heating, ventilating and air conditioning systems (fans, ducts, dampers, chiller units, piping, tanks, instrumentation and control)
  • facility communication system (annunciating system, telephones and wireless)
  • nuclear security systems
• CANDU - moderator system tests:
  • leak test
  • pumps and motors
  • cover gas recombination units
  • relief valves in cover gas system
  • purification columns
  • liquid poison addition system
  • leakage collection system
  • heavy water addition and transfer system
  • vibration
  • water quality
• electrical system tests (as needed to support safe reactor operation):
  • AC power (normal, emergency and standby)
  • DC power (normal, emergency and standby)
  • back-up, emergency diesel, black-out diesel load sequencing tests
  • preliminary loss of offsite and house load power tests
• safety systems tests:
  • made operational to the extent possible
  • check insertion and withdrawal speeds for control absorbers/shut-off rods/adjustable reflectors
  • check insertion speeds for second shutdown system (if applicable)
  • logic/interlocks
• fuel storage and handling tests:
  • test and calibration of fuelling machines (CANDU)
  • fuel transfer systems
  • spent fuel storage bay cooling and purification systems (including alarms)
  • decontamination facilities
• radiation protection system tests:
  • area radiation monitors
  • personnel monitors and radiation survey instruments
  • laboratory equipment
  • in situ efficiency tests of air and absorption filters
• other generic commissioning for systems to support fuel load
• other prerequisites that could be considered for this phase include:
  • automatic shutdown systems poised
  • start-up monitoring instrumentation verified and made available to initiate automatic and manual reactor shutdown when necessary
  • wiring continuity and electrical protective devices checked
  • settings on torque-limiting devices and calibration adjusted (CANDU)
  • all necessary "jumpers' and interlocks installed for the specific testing configuration
  • requirements and procedures ready to test the fuel handling and fuelling machine (CANDU) and/or any other tool or system as necessary
  • the means to prevent inadvertent criticality specified
  • the readiness of the neutron flux monitoring system
  • availability of qualified personnel, and verification of SSCs important to safety

Appendix B: Recommended Phase B Commissioning Tests

The following tests, as applicable to the facility, should be performed prior to leaving the shutdown state:

• reactor coolant system (RCS) pressure boundary integrity before filling
• testing of neutron detectors
• RCS tests:
  • flow verification (confirm flow distribution and absence of flow blockage)
  • pressurizer heaters available and feed/bleed paths open
  • RCS inventory control systems in service
  • pumps and motors
  • pressure control and relief valves
  • strainers/filters, purification columns, tanks, etc.
  • instrumentation used for monitoring system performance and logic functions
  • coolant water addition and transfer system available to supply make-up water on demand
  • vibration
  • water quality within specifications
  • boration systems
• containment integrity tests:
  • containment leak-rate test
  • functional tests on containment isolation valves, dampers, air locks and associated logic and instrumentation
  • leak detection and associated filtration and vent paths systems calibrated and functional
  • containment btn-up logic to be fully tested and available for service
• RCS hot performance, including:
  • garter spring location check (CANDU)
  • baseline data for creep measurement
• check reactor trip logic available
• reactivity control system tests:
  • check control rod withdrawal and insert speeds
  • rod position indication
  • protective interlocks and circuitry
  • liquid zone control function (CANDU)
  • ion chambers in service
  • chemical control of liquid poison addition within specifications
• reactor auxiliary systems (CANDU):
  • ventilation and heavy water vapor recovery system (fans, dampers, air coolers, dryers, temperature control, control logic, air flows and flow balancing, etc.)
  • end shield cooling system (flow, pumps and valves, venting, make-up system, chemical control, instrumentation, etc.)
  • calandria vault cooling system (pumps and valves, make-up system, chemical control, instrumentation, etc.)
  • annulus gas monitoring system (gas addition, piping, valves and associated instrumentation)
• power conversion system:
  • steam generators
  • steam expansion, restraint and operability tests
  • steam and feed water process lines
  • condensate and auxiliary feed water system
  • chemical treatment systems
  • turbine stop, control and intercept valves
  • steam dump, discharge and safety relief valves
  • steam extraction system
  • auxiliary feedwater flow measurement
  • condenser cooling water system
  • turbo generator and its auxiliaries (hydrogen cooling, seal and oil systems)
  • hydrogen leak detection system
  • turbine governing system
  • datum block readings
• radioactive waste capture, treatment and disposal systems:
  • liquid waste drainage systems available and activity/level monitoring in service
  • decontamination centre
  • liquid effluent segregation and storage system, treatment and disposal in service
  • solid waste handling and storage facilities in service for the level of waste anticipated
  • sampling and surveillance systems
• instrumentation and control systems in service:
  • main and secondary control rooms in service
  • emergency response center in service
  • pressurizer pressure and level control
  • bleed condenser pressure, temperature and level control (CANDU)
  • feed water flow control
  • steam generator pressure and level control
  • RCS pressure control, and flow and temperature monitoring
  • regulation and protection system
  • seismic instrumentation
  • failed fuel detection system
  • in-core flux monitoring and ion chamber instrumentation
  • calibration and neutron response check
  • detection of internal and external flooding conditions (CANDU)
  • control operator information system, programmable digital comparator system, radiation data acquisition system, fuel handling control system, etc.
  • sampling systems (light water, heavy water, steam, air)
• secondary control room tests:
  • verification of independent protection, control and monitoring
  • check of habitability and emergency procedures
• pressure testing of SSCs and overpressure protection devices per CAN/CSA N285.0-12, General requirements for pressure-retaining systems and components in CANDU nuclear power plants
• integrated testing of fuel handling and transfer system (CANDU)
• verification of proper operation of associated alarms and protective functions
• generic commissioning for systems to support first criticality
• other prerequisites that could be considered for this phase include:
  • availability and readiness of qualified personnel and SSCs important to safety, to ensure the reactor is ready for start-up
  • surveillance necessary to demonstrate proper operation of interlocks, set-points and other protective features
  • appropriate start-up monitoring instrumentation available to initiate automatic and manual reactor shutdown when necessary
  • field inspections made to ensure that the equipment is ready for testing, including inspection for proper fabrication and cleanliness
  • availability of communication tools and verification of their operability

Appendix C: Recommended Phase C Commissioning Tests

The following approach to critical and low-power tests, as applicable to the facility, should be used:

• testing of neutron detectors
• achievement of first criticality in a safe, controlled, predicable manner
• check of the regulating system's automatic control function
• confirmation of temperature coefficient of reactivity for reactor coolant systems (all reactor types) and moderator (CANDU)
• measurement of the combined reactivity worth of the zone control units (CANDU)
• determination of the reactivity worth of each mechanical absorber rod
• measurement of axial and radial flux distribution for defined configurations of reactivity mechanisms
• testing of reactor shutdown and control systems
• neutron and gamma radiation surveys
• confirmation of performance of the low-power neutronic instrumentation
• commissioning of emergency core cooling systems to the extent possible
• confirmation of critical poison concentration (if applicable)
• verification of efficiency of reactivity control and shut-off means
• verification that auxiliary feedwater/cooling pumps are available

Appendix D: Recommended Phase D Commissioning Tests

The following tests, as applicable to the facility, should be performed in the approach to full power:

• testing of neutron detectors
• performance of the following, at various power levels:
  • power manoeuvre tests as would be required during normal operation
  • reactor setback and stepback tests as would be required during normal operation (CANDU)
  • verification of channel flow (CANDU)
  • calibration of flux mapping detectors (CANDU)
  • calibration of neutron power versus thermal power
  • calibration of ion chambers and in-core flux detectors
  • dynamic response to load rejections, including turbine trip
  • verification of chemical and radiochemical control systems and sampling yield results within specification
  • verification that piping and component movement, vibrations and expansions are acceptable for safety systems
  • verification of performance of main plant control, reactor coolant system pressure control, steam generator level control, generator speed, steam pressure control, etc.
  • verification of performance of control room instrumentation and control systems (comparison of measured to monitored values, validate analogue and digital safety functions)
  • radiation surveys to verify shielding effectiveness
  • verification of performance of heating, ventilating and air conditioning systems
  • verification of shutdown capability of secondary control room
    
• performance of the following, at lower power levels:
  • thermal and control performance tests of nuclear steam plant and balance of plant systems
  • gaseous fission product / delayed neutron scan
  • atmospheric steam discharge valve capacity test (CANDU); power-operated relief valve and safety valve tests (all)
  • condenser vacuum test
  • digital control computer transfer of control test (CANDU)
  • generator run-up and overspeed tests
  • turbine stop valve / governor valve leak test
  • generator open-/short-circuit tests
  • generator voltage adjustment and reactive capability checks
  • automatic voltage regulation limit checks
  • generator synchronization to grid
  • dynamic response to single and multiple reactor coolant pump trips
  • steam generator moisture carry-over test
  • dual computer failure test (CANDU)
• performance of the following, at higher power levels:
• reactor coolant system boiling check (CANDU)
• crash cool rundown test
• testing of reactor shutdown and control systems
• duty changeover tests (condensate extraction pump, boiler feed pump, steam generator, de-aerator and condenser level control valves)
• test for loss of offsite / house power

Appendix E: Recommended Organizational Responsibilities

Commissioning organization

The responsibilities of the commissioning organization should include, but are not limited to, the following:

• planning the development of the commissioning program in advance, including detailed test sequences, time schedules and staffing requirements
• updating the commissioning program in light of experience in commissioning and as a result of design modifications
• establishing a procedure for the preparation, review and approval of test and other procedures
• ensuring that field visual aids (e.g., drawings, flow sheets), operating and maintenance instructions, commissioning procedures, formats for commissioning and test reports, reactor facility handover documents and submissions to the CNSC are available
• establishing a procedure for the systematic recording of reactor facility data for future use
• establishing a procedure to ensure that incidents and unexpected events during commissioning are handled and analyzed, so that the experience can be fed back to the designers and the operating organization
• verifying that SSCs have been satisfactorily installed and codified for proper identification
• ensuring that the prerequisites for the commissioning program have been satisfied and that pre-operational tests (such as system flushing, functional checks, logic checks, interlock checks and system integrity checks) have been completed
• ensuring that commissioning procedures comply with appropriate rules and regulations for security and safety, including radiological and environmental protection and nuclear, industrial and fire safety
• ensuring that systems are commissioned safely, and confirming that procedures are adequate
• implementing all tests in the commissioning program, including repeat testing of the systems that have been commissioned initially as partially installed
• making suitable arrangements for testing and maintaining systems (particularly safety-related items) for which responsibility has been accepted
• directing the operation of systems in the commissioning program and providing input for updating operational flow sheets, operating and maintenance instructions and procedures based on commissioning experience
• issuing commissioning test reports
• ensuring the CNSC has approved safety-related test results as necessary
• ensuring a process is in place to control the calibration of test and measurement equipment
• establishing a procedure to ensure that all participants in the commissioning process are suitably qualified and experienced
• ensuring the configuration control maintains consistency between the physical state of the installation and the test procedures and design requirements, and reporting any discrepancies to the relevant parties
• ensuring that design changes are requested, reviewed, implemented and re-tested when design criteria are not met or when they fall short
• establishing and implementing a system for controlling, recording and communicating temporary changes to reactor facility and equipment
• issuing test and completion certificates or their equivalent
• providing up-to-date baseline information to the operating organization
• informing the operating organization of any deficiency detected in commissioning tests, so corrective actions can be taken
• maintaining a record of limiting conditions in commissioning, and ensuring tests to be performed do not exceed these conditions
• ensuring that reactor facility performance is in accordance with the design intent, including all aspects of radiological and environmental protection, and nuclear, industrial and fire safety
• documenting that the commissioning program has been satisfactorily completed
• transferring the responsibility for operation and maintenance of commissioned systems and the reactor facility to the operating organization, using a system of relevant documents
• establishing and implementing procedures that ensure the orderly transfer of responsibilities for structures, systems and components from the construction organization to the commissioning organization, and from the commissioning organization to the operating organization
  establishing procedures for analyzing test results
• ensuring that any detected deviations are recorded, resolved and documented
• recording all commissioning feedback experience
• establishing a procedure in order to compile the lessons learned from commissioning activities and related corrective actions

Operating organization

The responsibilities of the operating organization should include, but are not limited to, the following:

• overseeing the commissioning program (including compliance monitoring activities)
• being qualified to participate as early as possible in the commissioning activities
• satisfying itself that the transferred systems comply with specified performance requirements, the design intent and safety and regulatory requirements
• accept responsibility (operational, maintenance and safety as per operating limits and conditions) for the transferred systems
• increasing competency in the methods of operation of the reactor facility
• carrying out operation and maintenance with competent and duly authorized staff using approved techniques to meet the needs of the commissioning program (RD/GD-210, Maintenance Programs for Nuclear Power Plants provides more detailed requirements for maintenance programs)
• establishing and implementing a procedure for the systematic recording of reactor facility data generated by the commissioning tests
• maintaining reactor facility design and configuration control over the commissioning phase up to the start of operating life of the facility; this also includes maintaining the safety analysis report current and
• participating in a safety assessment when necessary
• assisting with design modifications to rectify design deficiencies and produce complete documentation of the modification, including requalification tests
• recording all operating experience feedback and associated lessons learned
• establishing and implementing appropriate emergency arrangements

Construction organization

The responsibilities of the construction organization should include, but are not limited to, the following:

• ensuring that structures, systems and components have been built and installed in accordance with design requirements and specifications
• making suitable arrangements for surveillance, preservation and maintenance to prevent deterioration after installation (construction) is complete, and before the handover
• providing, for use as baseline data, as-built documentation of installation construction and test reports, highlighting design changes and concessions
• ensuring that configuration control is maintained and that the affected systems' design basis documentation - including the final safety analysis report - has been updated to reflect any design changes and concessions
• transferring the installed systems to the commissioning organization using a system of reactor facility handover documents
• ensuring the clearance of remaining open points conditioning the acceptance of the transfer
• correcting deficiencies in construction and installation that were detected during commissioning
• assisting the commissioning organization in resolving construction-related issues

Other participants in commissioning activities

The responsibilities of the other participants, such as designers, manufacturers and supporting technical organizations in the commissioning activities, should be specified in the appropriate contracts. The following responsibilities should be considered:

• co-operating with relevant parties engaged in commissioning activities by means of active participation when required
• providing specialist knowledge, expertise and relevant experience from reactor facilities already commissioned
• providing support for evaluation and assessment of tests results including any deviation
• providing baseline data and all necessary information
• providing a safety assessment when necessary
• participating in the analysis of discrepancies and unexpected events
• devising modifications in order to rectify design deficiencies, and providing complete documentation (including requalification tests) of the modifications

Appendix F: Recommended Interface Arrangements

Interfaces between construction and commissioning organizations:

• procedures for transferring structures, systems and components (SSCs) from construction to commissioning
• procedures for isolating reactor facility portions transferred to commissioning from the part remaining under construction
• prerequisites for the start of the commissioning program and the start of system commissioning
• special precautions necessary for the commissioning of partly installed systems
• procedures for performing work on systems under commissioning

Interfaces between commissioning and operating organizations:

• provisions in the definition of role, functions and delineation of responsibilities of operating and commissioning organizations before transfer of SSCs for operation
• procedures for transferring SSCs, the unit and the facility for operation
• methods of identifying special technical, operational or staffing restrictions necessary as a result of partial completion of a construction or commissioning activity
• baseline data derived from commissioning, such as the issuing of formal test reports and a statement of the existing radiological conditions
• changes in responsibility for safety, depending on considered commissioning milestones and performed transfers to operation, including the nomination of responsible persons
• modifications to the reactor facility and to the procedures
• availability of as-built drawings, instructions and procedures for operating and maintaining the systems and the reactor facility
• conditions for access of personnel, with consideration given to delineation between systems already in operation and those being tested
• control of temporary procedures and equipment available during commissioning but not appropriate to normal operation; e.g., special start-up instrumentation or duplicate safety keys and authorization for the use of jumpers and vetoes
• the implementation of operating and maintenance requirements for SSCs as each system is transferred to the operating organization
• provision of sufficient opportunity for the operating personnel to become trained in, and familiar with, operating and maintenance techniques for the reactor facility
• procedures for radiological zone mapping, monitoring (including personal dose recording) and radiation protection
• training in radiological safety and authorization of commissioning personnel to work in the controlled area
• reassessment of routine operating and maintenance instructions and procedures in light of experience gained in commissioning
• development and implementation of measures for emergency preparedness and response
• training in required areas for nuclear security
• development and implementation of procedures for nuclear security, including access control, alarm assessment and response
• during commissioning, the recording of information that could have implications for decommissioning, and subsequent handover of these records to the operating organization (this information could include records of spills or other unusual occurrences with potential long-term effects)

Glossary

anticipated operating occurrence (AOO)

An operational process deviating from normal operation that is expected to occur once or several times during the operating lifetime of the reactor facility but which, in view of the appropriate design provisions, does not cause any significant damage to items important to safety or lead to accident conditions.

commissioning

Activities intended to demonstrate that installed systems, structures and components and equipment perform in accordance with their specifications and design intent before they are put into service.

commissioning documentation

The plans, instructions, procedures, drawings, reviews, records, reports, and the like, which together describe the commissioning of a system or the integrated reactor facility.

commissioning report

A report written on completion of a logical group of commissioning activities to record results, assess compliance with the acceptance criteria, record actions taken to rectify any deficiencies.

commissioning tests

Testing to demonstrate that structures, systems and components perform within their design specifications.

construction

The process of procuring, manufacturing and assembling the components, carrying out civil work, installing and maintaining components and systems, and performing associated tests.

design-basis accident (DBA)

Accident conditions against which a reactor facility is designed according to established design criteria, and for which the damage to the fuel and the release of radioactive material are kept within authorized limits.

hold point

A commissioning activity that requires approval of the designated authority in order for commissioning to proceed.

integrated system validation

An evaluation, using performance-based tests, to determine whether an integrated system's design (i.e. hardware, software and personnel element) meets performance requirements and supports the facility's safe operation.

licensee

The organization authorized by a licence from the Canadian Nuclear Safety Commission to build and operate a reactor facility in accordance with specified requirements. The licensee has the overall responsibility and controlling authority to oversee the safe and satisfactory completion of the reactor facility design, procurement, manufacturing, construction, commissioning and operation, and decommissioning.

licensing basis

A set of requirements and documents for a regulated facility or activity comprising:

• the regulatory requirements set out in the applicable laws and regulations
• the conditions and safety and control measures described in the facility's or activity's licence and the documents directly referenced in that licence
• the safety and control measures described in the licence application and the documents needed to support that licence application

management system

A set of interrelated or interacting elements (system) for establishing an organization's policies and objectives and enabling the objectives to be achieved efficiently and effectively. These elements include the structure, resources, and processes. Personnel, equipment, and organizational culture, as well as the documented policies and processes, are parts of the management system. The organization's processes have to address the totality of organization's requirements as established in, for example, IAEA safety standards and other international codes and standards.

nuclear power plant (NPP)

A nuclear facility consisting of any fission-reactor installation that has been constructed to generate electricity on a commercial scale.

operation

All activities performed to achieve the purpose for which a facility was constructed. For nuclear power plants, this includes maintenance, refuelling, in-service inspection and other associated activities.

reactor facility

Any fission reactor as described in the Class I Nuclear Facilities Regulations, including structures, systems and components:

• that are necessary for shutting down the reactor, ensuring that it can be kept in a safe shutdown state
• that may contain radioactive material and that cannot be reliability isolated from the reactor
• whose failure can lead to a limiting accident for the reactor
• that are tightly integrated into the operation of the nuclear facility
• that are needed to maintain security and safeguards

regulatory hold point

A commissioning activity that requires approval of the Canadian Nuclear Safety Commission in order for commissioning to proceed.

small reactor

A reactor with a power level of less than approximately 200 megawatts thermal (MWt) that is used for research, isotope production, steam generation, electricity production or other applications.

structures, systems and components (SSCs)

A general term encompassing all of the elements (items) of a facility or activity that contribute to protection and safety. Structures are the passive elements: buildings, vessels, shielding, etc. A system comprises several components, assembled in such a way as to perform a specific (active) function. A component is a discrete element of a system. Examples are wires, transistors, integrated circuits, motors, relays, solenoids, pipes, fittings, pumps, tanks, and valves.

References

1. Canadian Standards Association (CSA), N286-12, Management system requirements for nuclear facilities, 2012.
2. Canadian Nuclear Safety Commission, RD/GD-210, Maintenance Programs for Nuclear Power Plants, 2012.
3. International Atomic Energy Agency, NS-G-2.9, Commissioning for Nuclear Power Plants: Safety Guide, 2003.
   
4. Canadian Standards Association, (CSA) N285.0-12, General requirements for pressure-retaining systems and components in CANDU nuclear power plants, 2012.
5. Canadian Nuclear Safety Commission, G-278, Human Factors Verification and Validation Plans, 2003.
6. Canadian Nuclear Safety Commission, G-323, Ensuring the Presence of Sufficient Qualified Staff at Class I Nuclear Facilities - Minimum Shift Complement, 2007.

Additional Information

1. Canadian Nuclear Safety Commission (CNSC), RD-360, Life Extension for Nuclear Power Plants, 2008.
2. CSA, N287.7-08, In-service examination and testing requirements for concrete containment structures for CANDU nuclear power plants, 2008.
3. CSA, N293-95, Fire protection for CANDU nuclear power plants, 1995.
4. International Atomic Energy Agency (IAEA), NS-G-2.3, Modifications to Nuclear Power Plants: Safety Guide, 2001.
5. IAEA, SS-2/2, Safety of Nuclear Power Plants: Commissioning and Operation, 2011.
6. IAEA, GS-R-3, The Management System for Facilities and Activities, 2006.
7. IAEA, GS-G-3.1, Application of the Management System for Facilities and Activities, 2006.
8. IAEA, GS-G-3.5, The Management System for Nuclear Installations, 2009.
9. IAEA, NS-G-2.2, Operating Limits and Conditions and Operating Procedures for Nuclear Power Plants, 2000.
10. IAEA, GS-R-2, Preparedness and Response for a Nuclear or Radiological Emergency, 2002.
11. IAEA, GS-G-2.1, Arrangements for Preparedness for a Nuclear or Radiological Emergency, 2007.
12. Atomic Energy Control Board (AECB), R-7, Requirements for Containment Systems for CANDU Nuclear Power Plants, 1991.
13. AECB, R-8, Requirements for Shutdown Systems for CANDU Nuclear Power Plants, 1991.
14. AECB, R-9, Requirements for Emergency Core Cooling Systems for CANDU Nuclear Power Plants, 1991.
15. CNSC, RD-334, Aging Management for Nuclear Power Plants, 2011.
16. CNSC, RD-204, Certification of Persons Working at Nuclear Power Plants, February 2008.
17. CNSC, S-296, Environmental Protection Policies, Programs and Procedures at Class I Nuclear Plants and Uranium Mines and Mills, 2006.
18. CNSC, G-225, Emergency Planning at Class I Nuclear Facilities and Uranium Mines and Mills, 2001.
19. American Society of Mechanical Engineers (ASME), NQA-1-2008, Quality Assurance Requirements for Nuclear Facility Applications, 2008.
20. ASME, NQA-1a-2009, Addenda to ASME NQA-1-2008: Quality Assurance Requirements for Nuclear Facility Applications, 2009.
21. Bristish Standards Institution, OHSAS 18001:2007, Occupational Health and Safety Management Systems - Requirements, 2007.

CNSC Regulatory Document Series

Facilities and activities within the nuclear sector in Canada are regulated by the Canadian Nuclear Safety Commission (CNSC). In addition to the Nuclear Safety and Control Act and associated regulations, there may also be requirements to comply with other regulatory instruments such as regulatory documents or standards.

Effective April 2013, the CNSC's catalogue of existing and planned regulatory documents has been organized under three key categories and twenty-five series, as set out below. Regulatory documents produced by the CNSC fall under one of the following series:

• 1.0 Regulated facilities and activities
• Series 1.1 Reactor facilities
  • 1.2 Class IB facilities
  • 1.3 Uranium mines and mills
  • 1.4 Class II facilities
  • 1.5 Certification of prescribed equipment
  • 1.6 Nuclear substances and radiation devices
• 2.0 Safety and control areas
• Series 2.1 Management system
  • 2.2 Human performance management
  • 2.3 Operating performance
  • 2.4 Safety analysis
  • 2.5 Physical design
  • 2.6 Fitness for service
  • 2.7 Radiation protection/li>
  • 2.8 Conventional health and safety
  • 2.9 Environmental protection
  • 2.10 Emergency management and fire protection
  • 2.11 Waste management
  • 2.12 Security
  • 2.13 Safeguards and non-proliferation
  • 2.14 Packaging and transport
• 3.0 Other regulatory areas
• Series 3.1 Reporting requirements
  • 3.2 Public and Aboriginal engagement
  • 3.3 Financial guarantees
  • 3.4 Commission proceedings
  • 3.5 Information dissemination

Note: The regulatory document series may be adjusted periodically by the CNSC. Each regulatory document series listed above may contain multiple regulatory documents. For the latest list of regulatory documents, visit the CNSC's Web site at nuclearsafety.gc.ca/regulatory-documents.