DIN EN 60965:2017-02

Control rooms are required when the conditions in the main control room are no longer within the operational design basis, so that the main control room is no longer available. Possible causes are a fire in the control room, penetration of smoke or dangerous atmosphere into the main control room, serious damage to the main control room or its cables so that their safety functions can no longer be exercised, general destruction of the control room area or general failure of the technical systems of the control rooms. The supplementary control point shall be equipped with means for reactor shutdown and for achieving and ensuring safe switched off state of the plant without connection to the main control point. The supplementary control points are not intended, however, to exercise all other plant control and monitor functions which are usually carried out in the main control room. The standard establishes requirements for the supplementary control points provided to enable the operating staff of nuclear power plants to shut down the reactor and maintain the plant in a safe shut-down state in the event that control of the safety functions can no longer be exercised from the main control room, due to unavailability of the main control room or its facilities. It also establishes requirements for the selection of functions, the design and organisation of the human-machine interface, and the procedures which shall be used systematically to verify and validate the functional design of the supplementary control points. The responsible committee is Subcommittee DKE/UK 967.1 "Leittechnik für kerntechnische Anlagen" ("Instrumentation and control of nuclear facilities") of the DKE (German Commission for Electrical, Electronic and Information Technologies) at DIN and VDE.