Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
CSA N290.9-19: Requirements for the Safe Design of CANDU Nuclear Power Plant Control Centres
A Comprehensive Guide to Human Factors Engineering and Control Room Design for Nuclear Safety
Scope and Application
CSA N290.9-19, titled Requirements for the safe design of CANDU nuclear power plant control centres, establishes mandatory design criteria for both new control centres and major modifications to existing ones in CANDU (Canada Deuterium Uranium) reactor facilities. Published by the CSA Group, this standard is part of the N-series of nuclear standards recognized by the Canadian Nuclear Safety Commission (CNSC).
The standard applies to the main control room (MCR), supplementary control room (SCR), and remote shutdown panels. Its primary goal is to ensure that control centre design follows a structured human factors engineering (HFE) process, thereby minimizing human error and optimizing overall plant safety. The scope includes all life-cycle phases—from concept design through detailed engineering, commissioning, operation, and decommissioning—but focuses primarily on the design verification and validation activities that occur before the control centre is placed into service.
CSA N290.9-19 aligns with international practices (e.g., IEC 60964, NUREG-0711) but is tailored specifically to CANDU technology and the Canadian regulatory context. It is intended for use by designers, licensees, system integrators, and regulatory reviewers involved in control centre projects for nuclear power plants.
Tip: Apply HFE principles from the earliest design stages. Early integration of human factors reduces costly rework and improves control room usability.
Technical Requirements
The standard defines a comprehensive set of technical requirements centred on the human factors engineering program. Key areas include:
Human Factors Engineering Program
A documented HFE program must be established, covering team composition, management of human performance issues, and a systematic analysis of operator tasks. The program must include provisions for HFE verification and validation (V&V).
Control Room Staffing and Layout
Requirements address the number of operators, their roles, and the physical arrangement of consoles, panels, and shared displays. Workspace dimensions, sight lines, and lighting are specified to support effective teamwork and situational awareness.
Alarm Management
Alarm systems must be designed according to a prioritization scheme, with clear definitions for alarm states, filtering capabilities, and suppression logic. The standard prohibits nuisance alarms and mandates testing of alarm response over a full range of plant conditions.
Information Display and Controls
All human–system interfaces (HSIs) must be consistent in navigation, color coding, and labeling. The use of digital displays must follow guidelines for visual density, refresh rates, and resolution. Controls must be clearly identified and arranged to prevent unintentional activation.
Environmental Conditions
Temperature, humidity, noise, and vibration levels inside the control room are regulated to maintain operator comfort and performance. Emergency lighting and communication systems are also covered.
| Design Phase | Key HFE Activities | Acceptance Criteria |
|---|---|---|
| Conceptual Design | Function allocation, task analysis, staffing assessment | Operator roles clearly defined, automation rationale documented |
| Detailed Design | HSI prototyping, walkthroughs, heuristic evaluation | All human factors issues resolved, design meets usability targets |
| Integration & V&V | Integrated system validation using full-scope simulator | Operator performance measures within acceptable limits |
| Commissioning & Operation | Initial testing, operator training, configuration management | Control centre stable, training complete, documentation up-to-date |
Caution: Over‑automation can degrade operator situation awareness. The standard requires a clear rationale for automation levels and provisions for manual override.
Implementation Highlights
Effective implementation of CSA N290.9-19 requires a systematic, iterative design process. Below are key aspects to consider:
Verification and Validation (V&V)
The standard mandates both verification (confirming design meets specifications) and validation (confirming operators can safely and effectively perform tasks). Validation must be conducted using a high-fidelity, full-scope simulator under representative scenarios, including upset and accident conditions. Any discrepancies found must be documented and corrected before the control centre is placed in service.
Management of Change
When modifying an existing control centre, a formal process must be followed to evaluate human factors impacts. Changes to software, hardware, procedures, or staffing levels trigger an HFE reassessment. This ensures that cumulative changes do not erode safety margins.
Integration with Other Standards
CSA N290.9-19 does not stand alone. It works in concert with other CSA N-series standards (e.g., CSA N286 for management systems, CSA N290.0 for general nuclear safety) and with CNSC regulatory documents. Coordinating these requirements avoids duplication of effort and ensures a consistent safety case.
Success: Organizations that adopt a structured HFE program often report improved operator performance, fewer design changes, and smoother regulatory reviews.
Compliance and Certification
Demonstrating conformance to CSA N290.9-19 is essential for regulatory acceptance in Canada. The CNSC expects licensees to either comply directly with this standard or provide an equivalent level of safety through a documented defence. Key compliance considerations include:
- Audits and Assessments: Regular internal and third‑party audits should verify that HFE processes are being followed and that design outputs match the validated criteria.
- Documentation: All HFE analyses (e.g., task analysis, human error analysis, alarm philosophy) must be maintained as part of the plant’s design basis documentation. A traceability matrix linking requirements to design features is recommended.
- Regulatory Submissions: For new builds or major upgrades, the safety case should explicitly address how each clause of CSA N290.9-19 is satisfied. The CNSC may request supplementary information on topics such as human reliability analysis or control room staffing.
Non‑compliance risks: Failure to follow the HFE design process can result in operator errors, license restrictions, costly retrofits, and in extreme cases, shutdown orders from the regulator.
Complying with CSA N290.9-19 ensures a human‑centred approach to control centre design, thereby enhancing nuclear safety and operational efficiency. For the latest version of the standard and official interpretation, refer to the CSA Group. © 2026.
Q: What is the relationship between CSA N290.9-19 and IEC 60964?
A: Both standards address control room design using human factors principles. CSA N290.9-19 is specifically written for CANDU reactors and references Canadian regulatory expectations. IEC 60964 provides general requirements for nuclear power plant control rooms. The two are harmonized in many areas, but CSA N290.9-19 includes additional CANDU‑specific provisions, such as requirements for supplementary control rooms and remote shutdown panels.
A: Both standards address control room design using human factors principles. CSA N290.9-19 is specifically written for CANDU reactors and references Canadian regulatory expectations. IEC 60964 provides general requirements for nuclear power plant control rooms. The two are harmonized in many areas, but CSA N290.9-19 includes additional CANDU‑specific provisions, such as requirements for supplementary control rooms and remote shutdown panels.
Q: Does CSA N290.9-19 apply to control room upgrades in existing plants?
A: Yes. The standard applies to both new control centres and significant modifications to existing ones. A graded approach is allowed: the scope of HFE activities should be proportional to the magnitude of the change. Even minor upgrades (e.g., replacing a display system) should undergo at least a human factors review to ensure usability is not degraded.
A: Yes. The standard applies to both new control centres and significant modifications to existing ones. A graded approach is allowed: the scope of HFE activities should be proportional to the magnitude of the change. Even minor upgrades (e.g., replacing a display system) should undergo at least a human factors review to ensure usability is not degraded.
Q: How does the standard address operator workload and situation awareness?
A: CSA N290.9-19 requires that workload be assessed using validated tools (e.g., task load index) during both design and validation. Situation awareness is supported by specifying alarm management strategies, information display architectures, and control room layouts that keep operators informed without overwhelming them. The standard also mandates that staffing levels be justified by a formal task analysis.
A: CSA N290.9-19 requires that workload be assessed using validated tools (e.g., task load index) during both design and validation. Situation awareness is supported by specifying alarm management strategies, information display architectures, and control room layouts that keep operators informed without overwhelming them. The standard also mandates that staffing levels be justified by a formal task analysis.
Article compiled based on CSA N290.9-19 (2019 edition). Last updated: February 2026.