Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
IEC 62195: Supplementary Control Points for Nuclear Power Plants
Standard: IEC 62195:2000 — Nuclear power plants — Control rooms — Supplementary control points
Status: Withdrawn (replaced by IEC 60964 and related standards)
⚠️ Although IEC 62195 was officially withdrawn, its technical requirements for diverse/emergency control points remain embedded in modern nuclear plant designs and are still referenced in regulatory frameworks worldwide.
1. Purpose and Scope of IEC 62195
IEC 62195 establishes the functional requirements for supplementary control points (SCPs) in nuclear power plants — also referred to as diverse control rooms, emergency control rooms, or remote shutdown stations. The standard addresses the scenario where the main control room (MCR) becomes uninhabitable due to fire, toxic gas, radiation release, or seismic damage.
The standard applies to both new plant designs and, where practical, upgrades to existing facilities. Its core objective is to ensure that a plant can be brought to and maintained in a safe shutdown state from a physically and functionally independent location.
2. Key Technical Requirements
2.1 Functional Independence
The SCP must be functionally and physically separated from the main control room so that any event that disables the MCR does not simultaneously disable the SCP. This separation extends to:
- Cabling and routing: Separate cable trays, fire compartments, and penetration seals
- Ventilation: Independent HVAC with dedicated filtration and pressurization
- Power supply: Diverse backup power sources, typically from separate emergency diesel generators or batteries
- Instrumentation: Independent sensors and signal processing chains
2.2 Minimum Control and Indication Functions
The standard specifies the minimum set of controls and indications required at the SCP. These include:
| Function Category | Required Controls/Indications | Design Priority |
|---|---|---|
| Reactor Trip | Manual reactor trip pushbutton, rod position indication, neutron flux (wide range) | Critical |
| Reactor Cooling | RHR/CVC pump start-stop, flow indication, heat exchanger valve position | Critical |
| Containment Isolation | Isolation valve status, containment pressure, hydrogen concentration | Essential |
| SG/RPV Water Level | Narrow and wide range level indication, feedwater isolation | Critical |
| Electrical Systems | Bus voltage, breaker status, diesel generator start and load | Essential |
| Radiation Monitoring | Area radiation, process radiation, effluent radiation | Advisory |
| Fire Detection | Fire alarm panel, manual fire suppression initiation | Essential |
❌️ A common design deficiency identified in post-Fukushima reviews was the lack of sufficiently diverse SCP instrumentation that could remain functional under severe accident conditions (high temperature, high humidity, radiation).
2.3 Human Factors Engineering (HFE)
The SCP must be designed with a human factors approach tailored for emergency conditions. Operators at the SCP will be under extreme stress, potentially with limited staffing and communication. Key design considerations include:
- Minimum staffing: The SCP should be operable by a single operator for essential shutdown actions, with two-person capability for complex sequences
- Ergonomics: Panel layout, control reach, and display readability under emergency lighting
- Procedure integration: Step-by-step emergency operating procedures (EOPs) integrated into the panel design
- Communication: Diverse communication channels (wired, radio, satellite) independent of the MCR
3. Engineering Design Insights
The design of supplementary control points presents unique engineering challenges that differ fundamentally from main control room design:
Diversity vs. Redundancy: Traditional nuclear I&C relies on redundancy (multiple identical channels). The SCP demands diversity — different technology, different suppliers, different design principles — to ensure common-cause failure does not disable both the MCR and SCP simultaneously. For example, if the MCR uses digital displays, the SCP might use hardwired analog indicators.
Severe Accident Survivability: The SCP must remain functional beyond design-basis accident conditions. This means its equipment must be qualified for higher temperatures (up to 120-150°C in some scenarios), higher pressures, and significant radiation exposure. Environmental qualification per IEC 60780 is mandatory.
Testing and Maintenance: Unlike safety systems that are tested regularly, the SCP may sit dormant for years. The standard requires periodic testing that verifies full functionality without compromising the plant’s operating state. This includes loop checks, channel calibration, and integrated system tests during refueling outages.
💡 Key Insight: Modern digital I&C platforms with diverse backup (e.g., diverse actuation systems or DAS) have largely absorbed the SCP concept into a broader defense-in-depth architecture. The principle remains the same: ensure a diverse, independent means of safe shutdown always exists.
4. Frequently Asked Questions
Q1: Is IEC 62195 still applicable even though it has been withdrawn?
Yes. While the standard itself has been withdrawn, its technical requirements are largely incorporated into newer standards such as IEC 60964 (design of control rooms) and IEC 61227 (control room requirements). Regulators in many countries still reference IEC 62195’s SCP requirements in licensing basis documents.
Q2: What is the difference between a supplementary control point and a remote shutdown station?
A supplementary control point is a broader concept that includes but is not limited to remote shutdown capability. IEC 62195’s SCP is intended for scenarios where the main control room is completely uninhabitable, whereas a remote shutdown station typically handles scenarios where the MCR is inaccessible due to local hazards like smoke or fire.
Q3: How many operators are required at the SCP?
IEC 62195 recommends that the SCP be designed for minimum one-operator operation for essential shutdown actions, transitioning to a two-operator team for accident mitigation and long-term cooling. This is a significant reduction from the typical 4-5 person MCR crew, which itself poses human factors challenges.
Q4: Does IEC 62195 apply to small modular reactors (SMRs)?
Although the standard predates modern SMR designs, the principle of a diverse shutdown location applies even more strongly to SMRs, many of which rely on passive safety systems. The SCP concept is being adapted for SMR-specific needs, including multi-unit plants where one SCP might support multiple reactor modules.
