Nuclear NDE Audit Support: Holding the Evidence Chain Under Appendix B
Level III audit support for nuclear work supplies the technical authority an auditor asks for: a written practice that matches the referencing code, NDE procedures qualified and demonstrated as required, personnel certified against documented examinations and eye tests, and an evidence chain that survives sampling. Under 10 CFR 50 Appendix B and ASME Section XI, the finding almost always lands on records, not on technique.
Nuclear quality assurance is unusual in that the auditor is rarely trying to catch a bad examination. Appendix B is a programme standard, so the audit tests whether the programme controls the work: whether the procedure the technician used was the revision approved by the Level III, whether the equipment carried current calibration traceable to a national standard, whether the certification on file was issued after the examinations it claims, and whether a nonconformance raised two years ago was actually closed. An auditor samples backwards from a completed data sheet and follows every reference it makes. If any link in that chain is missing, the examination result is worthless regardless of how competently it was performed. That asymmetry is why a gap review before an audit takes far less effort than remediation after one, and why the Level III signature carries programme weight rather than personal opinion.
Source: Named sources: 10 CFR 50 Appendix B, Quality Assurance Criteria for Nuclear Power Plants and Fuel Reprocessing Plants, Criteria I through XVIII; 10 CFR 21, Reporting of Defects and Noncompliance; 10 CFR 50.55a; ASME NQA-1, Part I Requirements 2, 5, 7, 10, 12, 15, 16, 17 and 18; ASME BPVC Section XI, IWA-2300 and Mandatory Appendices VII and VIII; ASME BPVC Section V; ANSI/ASNT CP-189 and ASNT SNT-TC-1A as invoked by the employer written practice; EPRI commercial grade dedication guidance; NUPIC supplier audit practice.
| Audit question | Governing requirement | Evidence that satisfies it | Why it fails in practice |
|---|---|---|---|
| Is this the procedure the technician actually used? | NQA-1 Requirement 5, instructions, procedures and drawings | Controlled procedure at the revision current on the examination date, carrying the Level III approval | Revision approved after the examination date, or an uncontrolled copy in use in the field |
| Is this examiner certified for this method and level? | Employer written practice invoking SNT-TC-1A or ANSI/ASNT CP-189 | Certification record showing training hours, documented experience, examination scores and current vision test | Hours and experience recorded as totals that do not reconcile with the level claimed |
| Was the ultrasonic system demonstrated, not merely qualified? | ASME Section XI Mandatory Appendix VIII | Performance demonstration record covering the procedure, the equipment and the named examiner | A procedure qualified in house that was never put through a demonstration on flawed specimens |
| Was the instrument in calibration on that date? | NQA-1 Requirement 12, control of measuring and test equipment | Calibration certificate traceable to national standards, with block serial numbers recorded on the report | Reference blocks identified on the data sheet by workshop nickname rather than by serial number |
| Was this item procured as safety related? | 10 CFR 50 Appendix B Criterion VII and commercial grade dedication | Dedication package identifying critical characteristics and the method used to verify each one | A commercial item accepted on a certificate of conformance with no dedication performed |
| Was the finding closed, or only fixed? | NQA-1 Requirement 16, corrective action | Cause determination, extent of condition review, corrective action and an effectiveness check | The repair itself recorded as the corrective action, with no cause analysis behind it |
What an Appendix B audit is actually testing
10 CFR 50 Appendix B sets 18 criteria that together describe a quality assurance programme rather than a technical standard. Nothing in it tells you how to set an ultrasonic instrument or what a rejectable indication looks like. It tells you that activities affecting quality must be prescribed by documented procedures, performed by qualified people, verified by someone other than the person who did the work, recorded, and corrected when they go wrong. Every nuclear NDE finding traces back to one of those propositions.
The consequence for an NDT function is specific and often unwelcome. A technically excellent examination performed by a genuinely skilled examiner is worth nothing to the programme if the procedure revision cannot be pinned to the date, or if the certification on file was signed before the practical examination it references. The auditor is not questioning competence. The auditor is testing whether competence was controlled, and control is a documentary property.
This is why nuclear audit preparation is a different exercise from technical preparation, and why it is normally driven by a Level III rather than by a quality manager alone. The questions are documentary but the answers are technical: whether a procedure change was significant enough to require requalification is a judgement only a Level III can defend. That combination is the core of ASNT Level III consulting work in an audited environment.
The evidence chain, link by link
Start at the end, because that is where the auditor starts. A completed examination report names a component, a procedure and revision, an examiner, an instrument and its calibration state, reference blocks, a date, results and a disposition. Each of those is a claim, and each claim has a record behind it somewhere in the programme. The audit is the act of pulling on each thread until it either holds or comes away.
The procedure thread runs to the controlled document register, to the approval signature, to the qualification record for that procedure, and where Section XI applies, to the performance demonstration. The examiner thread runs to the certification file, and from there to training hours, documented experience by method, examination scores, the annual vision examination, and the written practice that authorises the whole scheme. The equipment thread runs to calibration certificates traceable to national standards and to the identification of reference blocks by serial number rather than by shop nickname.
Any one of those threads coming away in the auditor hand converts the examination result into an unverified assertion. The practical test a programme can run on itself is simple: take ten completed reports at random and reconstruct every reference without asking anyone to remember anything. Programmes that pass that test pass audits. Where an organisation has never had its examination records read cold by an outsider, independent inspection report validation is the fastest way to find out which thread is loose.
The written practice, and the codes that sit above it
The written practice is the employer own document describing how it qualifies and certifies NDT personnel. It is not optional and it is not boilerplate. It states which recommended practice or standard is being followed, defines the levels and their responsibilities, sets training and experience requirements by method and level, describes the examinations and their grading, sets the vision requirements and their frequency, and defines recertification intervals and the conditions for suspension or revocation.
In a nuclear context the written practice does not stand alone. ASME NQA-1 governs the surrounding quality programme, ASME Section XI governs inservice inspection of the components, and the contract or the licensing basis will specify which personnel qualification standard applies, most often ANSI/ASNT CP-189 or SNT-TC-1A depending on the vintage and the scope. A written practice that invokes a different standard from the one the contract requires is a finding waiting for an auditor, and it is a finding that took ten minutes to create and can take months to unwind across an existing certified population.
Building or rewriting the written practice is therefore not a formatting exercise. It has to reconcile the standard the contract invokes, the methods actually performed, the levels actually needed and the training records that already exist. Where an organisation is also building or refreshing its examiner population, the practice and the NDT training and certification programme should be designed together rather than sequentially, because the practice sets the hours and content the training has to deliver.
Procedure qualification, demonstration and the gap between them
Nuclear work draws a distinction that other industries can blur. Procedure qualification asks whether a written procedure, applied as written, produces the required detection and characterisation on representative material. Performance demonstration under ASME Section XI Mandatory Appendix VIII asks a harder question: whether the procedure, the specific equipment and the individual examiner, working as a system, can find and size flaws in specimens whose contents they do not know, to defined acceptance criteria for both detection and sizing accuracy.
Appendix VII covers the qualification of ultrasonic examination personnel and sits alongside that demonstration regime. The distinction matters commercially as well as technically. An organisation that has qualified its procedures internally and assumes it is ready for inservice inspection work will discover, usually late, that the demonstration requirement is a separate programme with its own specimens, its own administration and its own lead time.
The Level III role here is to keep the two straight in the documentation, so that a procedure that has been demonstrated says so with the demonstration record referenced, and a procedure that has only been qualified is not deployed where demonstration is required. Auditors read these two words carefully because the industry uses them loosely, and a procedure header that claims demonstration without a supporting record is a serious finding rather than a wording problem.
What the Level III signs, and what the Level III does not sign
The Level III signs the things that require technical authority: the written practice itself, NDE procedures and their revisions, procedure qualification records, examination question sets and their grading, personnel technical evaluations, and independent reviews of examination data. Within a scope defined by the employer, the Level III also approves the acceptance or rejection of examination results and rules on interpretation questions that a Level II is not authorised to settle.
The boundaries are as important as the scope, and a consultant who is vague about them is a liability in an audit. The Level III does not issue certifications on behalf of another employer; certification is the employer act, performed under the employer written practice, even where the Level III prepared and administered every examination. The Level III is not the Authorized Nuclear Inservice Inspector and does not perform that agency verification role. Atlantis is likewise not a process safety management auditor and is not the inspector of record for any statutory inspection regime.
Stating these limits plainly is not a disclaimer, it is part of the technical service. An auditor who finds a consultant signature in a place where only the owner or the authorised agency may sign has found a programme control failure regardless of how good the underlying technical work was. Keeping the certification files, procedure revisions and examination records in a controlled system rather than in personal folders is what makes those boundaries auditable, which is one of the practical reasons NDE functions move records into an inspection management system.
The findings that recur in nuclear NDE audits
Procedure revision control leads the list. The technician worked to revision 4, the register shows revision 5 approved a fortnight earlier, and nobody can establish which document was physically in the field. The fix is dull and effective: a controlled issue log, a field copy stamp, and a procedure header that carries the approval date in a place a photograph will capture.
Certification arithmetic comes second. Training hours and documented experience are recorded as totals rather than as dated entries by method, so an auditor cannot reconstruct how the individual reached the hours the practice requires for that level. The third recurring finding is the lapsed vision examination, normally an annual near vision acuity check to a defined standard and a colour or grey scale differentiation check at the interval the written practice sets. It is the easiest finding in the industry to prevent and one of the most frequently written.
The fourth is corrective action that is not corrective. A nonconformance is raised, the component is repaired and re-examined, and the record is closed. Under NQA-1 Requirement 16 that is a repair, not a corrective action: the programme still owes a cause determination, an extent of condition review asking where else the same failure could have occurred, and a check that the action taken actually worked. Auditors reopen these more often than any other closed record.
Commercial grade dedication and 10 CFR 21
A large share of nuclear procurement pain sits in the boundary between commercial items and safety related items. An item bought from a commercial supplier can be used in a safety related application only if it is dedicated: the critical characteristics that make it fit for that application are identified, and each one is verified by an accepted method such as special tests, source surveillance, supplier performance history or a survey of the supplier programme. A certificate of conformance on its own is not dedication and never has been.
This reaches NDT more often than people expect. Couplant, reference blocks, calibration standards, film and digital imaging systems, transducers and even software can carry critical characteristics when the examination they support is safety related. The dedication package has to name those characteristics and show how each was verified, and the auditor will ask who made that determination and on what technical basis.
10 CFR 21 sits on top of the whole arrangement. Where a deviation or failure to comply could create a substantial safety hazard, evaluation and reporting obligations follow, with defined timescales, and the obligation reaches suppliers and consultants as well as licensees. A supplier that has never mapped its own scope against 10 CFR 21 applicability is exposed in a NUPIC style joint utility audit, where procurement documents and dedication packages are examined as closely as the technical records.
Gap review before the audit versus remediation after a finding
A gap review runs the audit method on your own programme, in your own time, with nothing at stake. Records are sampled and traced backwards, the written practice is read against the invoked standard, personnel files are reconciled, procedures are checked for revision integrity and demonstration status, and the corrective action log is tested for real closure. Everything found is yours to fix quietly, and the fix can be the right one rather than the fast one.
Remediation after a finding is a different animal. The finding is on the record, the response is time bound, and the corrective action itself will be audited for effectiveness at the next cycle. Worse, findings compound: an auditor who discovers one procedure revision failure expands the sample, and an expanded sample in a programme with systemic record weakness produces a cluster of findings that can escalate to a programme level concern and, for a supplier, to removal from an approved vendor list.
The asymmetry is why mature nuclear suppliers schedule an independent technical review ahead of every significant audit cycle rather than reacting to the audit letter. If an audit is scheduled and you want the sampling done on your records first, request a consultation with the scope, the invoked standards and a representative set of examination reports available for review.
Audit representation on technical questions
During the audit itself, the value of a Level III sitting on the client side is narrow and real. Auditors ask technical questions that a quality representative can only answer by fetching someone, and the delay itself creates the impression of a programme that does not understand its own work. A Level III present in the room answers the interpretation question, produces the correct record, and where the auditor is mistaken about a code requirement, says so with the clause open on the table.
The discipline is to represent the technical position without arguing the programme position. A consultant who disputes findings on behalf of the client damages the client. A consultant who clarifies what the code actually requires, identifies where the record exists, and concedes cleanly where it does not, shortens the audit and narrows the findings to the ones that are genuinely there.
Afterwards, the same technical authority is what turns a finding into a defensible response: cause determination that a reviewer will accept, an extent of condition review that is honest about scope, and a corrective action that changes the mechanism rather than the symptom. That work belongs to the same person who read the records before the audit, which is the argument for engaging technical authority as a continuing relationship rather than as an emergency call.
What does an Appendix B auditor actually sample?
Backwards from completed work. The auditor picks a finished examination record and asks for everything it depends on: the procedure at the revision used on that date, the qualification of that procedure, the certification of the technician who signed it, the calibration status of the instrument and blocks, the material and configuration examined, and the disposition of any indication recorded. Ten records sampled this way test almost every one of the 18 criteria at once.
Can an outside Level III certify our NDT personnel?
No, and this is the most common misunderstanding in the whole arrangement. Certification is an act of the employer, issued under the employer written practice, and the certificate carries the employer name. An outside Level III may be named in that written practice, may prepare and administer the general, specific and practical examinations, may grade them, and may provide the technical services the standard requires. The employer signs the certification. Buying certificates from an agency is not certification.
How does performance demonstration differ from procedure qualification?
Procedure qualification establishes that a written procedure produces the required result under controlled conditions. Performance demonstration under ASME Section XI Appendix VIII goes further: the procedure, the equipment and the individual examiner are tested together as a system against flawed specimens whose contents the examiner does not know, with pass criteria for detection and sizing. A procedure that is qualified on paper but has never been demonstrated does not satisfy the inservice inspection requirement.
Which nuclear NDE findings recur most often?
Four dominate. Procedure revision control, where the technician used a revision that was superseded or not yet approved. Certification arithmetic, where documented training hours or experience do not support the level claimed. Lapsed annual vision examinations, which are trivial to fix and appear in audit after audit. And corrective action closure, where a nonconformance was answered with a repair rather than with a cause analysis and an extent of condition review.
What does a pre-audit gap review cover?
It reproduces the audit method on your own records before anyone external does. A sample of completed examination reports is traced back through procedures, qualifications, certifications and calibration records; the written practice is read against the code the contract invokes; the personnel files are checked for the arithmetic that has to add up; and the corrective action log is tested for genuine closure. The output is a findings list with the evidence gap named, not a general opinion.
Who signs off the inservice inspection records?
The owner is responsible for the inservice inspection programme and its summary report, and the Authorized Nuclear Inservice Inspector from an accredited agency performs the independent verification role that ASME Section XI defines. An NDT Level III providing technical authority signs procedures, approves examination results within the scope of the written practice, and issues independent review opinions. Those are different signatures with different legal weight, and no consultant should blur them.