Hazard Analysis for Managing Risk in Nuclear Plant Digital Instrumentation and Control Systems

摘要

This paper presents selected results from an investigation of the use of various hazard and failure analysis methods to help manage risk by revealing potential vulnerabilities in digital instrumentation and control (I&C) systems before they are put into operation. The study looked at six approaches, ranging from well-established practices to novel methods still transitioning from academic demonstrations to practical, realistic applications. It developed step-by-step procedures and worked examples, applying each of the methods to sample problems based on actual cases to assess the methods for effectiveness, range of applicability and practicality of use by nuclear plant engineers and their suppliers. The paper highlights results from one of the novel methods investigated, Systems Theoretic Process Analysis (STPA), developed by researchers at the Massachusetts Institute of Technology (MIT), under the heading of Systems-Theoretic Accident Model and Processes (STAMP).