ASNT Level III Audit Support for Power Generation Inspection Programmes

Who Audits a Power Generation NDT Programme, and Against What

Power generation attracts more audit attention than almost any other sector because the assets are large, the consequences of failure are public and the ownership structure usually puts several parties in a position to demand evidence. A plant owner audits its inspection contractors against the contract specification. A certification body audits the management system against ISO 9001, where clauses 7.2 on competence, 7.5 on documented information and 8.5.1 on control of production apply directly to NDT. Insurers and jurisdictional authorities examine boiler and pressure part records. Class societies audit marine and offshore generating assets. Nuclear operators face regulator and owner oversight against ASME Section XI in-service inspection programmes.

These audits differ in scope but converge on the same evidence. Almost every one of them will, at some point, pick an examination result and ask the programme to prove it. That is the common denominator, and it is why preparing for one audit type largely prepares for the others. The exception is regulatory audits with prescriptive record retention requirements, where the retention period itself becomes a finding.

What varies most is the auditor's technical depth. A quality system auditor may accept a certificate on its face; a technically qualified auditor will ask whether the procedure was qualified for the thickness range actually examined. Programmes that survive the first kind of audit and fail the second usually have well-organised documents describing a system that was not technically sound. Closing that gap is what ASNT Level III consulting is for — the technical authority to make the system correct, not only tidy.

What the Auditor Actually Samples

Experienced auditors do not read the manual first. They ask for a record produced in the field during the last outage — a single ultrasonic thickness reading on a superheater tube, one radiograph of a header stub weld, one replication site on a steam line — and work backwards from it. Who performed it? Show the certificate. Under which procedure, at which revision, in force on that date? Show the revision history. With which instrument, and what was its calibration status? Show the calibration record. On which component, at which location? Show the drawing reference and the datum convention. Where was the previous reading, and does the corrosion rate computed between them make physical sense?

This backwards sampling is efficient because it tests the whole system with one thread. A programme can have an immaculate quality manual and still fail at the second question. It also exposes the difference between records that exist and records that connect. Spreadsheets full of thickness values with no component identifier, no datum and no instrument reference are common, and they are worthless as evidence even when every number in them is accurate.

The second thing auditors sample is the boundary between permanent staff and contract labour. Outage work is done largely by contractors, and the question of how the site verified their competence against its own written practice is where documentation is thinnest. Expect the auditor to pick the technician who worked the fewest days on site.

The Evidence Chain That Must Hold

Five links have to be intact for any examination record to survive scrutiny. The person: certified in the method and level, under a named written practice, with training and experience documented and vision tested within the required interval. The procedure: written, qualified, revision-controlled, with essential variables that envelope what was actually done. The equipment: identified by serial number, calibrated within interval, with reference blocks and couplant recorded where the method requires it. The component: identified unambiguously against a drawing, with a datum convention that the next inspection can reproduce. The result: recorded against acceptance criteria drawn from the applicable code, with the disposition of any rejectable indication traceable to a repair record.

Break any one link and the record becomes an assertion. The most commonly broken link in power generation is the component link, because plant identification conventions evolve — tubes get replaced, panels get renumbered, drawings get superseded — and a reading taken against a superseded reference cannot be repeated. That is not a paperwork problem. It destroys the ability to compute a corrosion rate, which is the entire purpose of taking the reading.

Where an owner holds inspection history against asset geometry rather than against a filename, this problem largely disappears: the location is the model coordinate, not a description in a cell. That is the practical argument for putting inspection data onto digital twins of the asset — not visualisation, but a durable, unambiguous location reference that survives drawing revisions and staff turnover.

What the Level III Signs, and What the Level III Does Not

Under SNT-TC-1A the Level III is an employer-designated technical authority with defined responsibilities: establishing and approving the written practice, developing and qualifying NDT procedures, approving equipment and techniques, conducting or overseeing the examination and certification of Level I and Level II personnel, and providing technical adjudication where a procedure requires it. The Level III signs the written practice and its revisions, signs procedures and their qualification records, signs personnel certifications issued under the practice, and signs independent technical reviews.

There are things the Level III does not sign, and being clear about them in advance saves an argument during the audit. The Level III is not the API authorised inspector of record for a pressure vessel, tank or piping system — that role belongs to a certified individual acting for the owner-user under the relevant in-service code. The Level III is not a process safety management auditor and does not sign a PSM compliance report. The Level III does not certify the plant's quality management system, which is a certification body function.

Atlantis supplies the Level III technical authority function: written practice authorship and maintenance, procedure development and qualification, personnel examination and certification within the written practice, attendance to answer technical questions during audits, and independent review of examination data. We do not sell API 510, 570 or 653 inspector certification training and we do not act as the API inspector of record; where a client needs that role filled it must be sourced separately. Our own training offering covers NDT method training and certification to SNT-TC-1A and ISO 9712.

Findings That Recur Across Power Generation Sites

The most persistent finding is a written practice that does not match reality. Typically it cites SNT-TC-1A while the certification files evidence CP-189, or it names a Level III who left the organisation two revisions ago, or it describes a training and experience matrix that nobody applied when the last technicians were certified. This is a single-document problem with a multi-site blast radius, because every certificate issued under an invalid practice is questionable.

Second is vision testing. SNT-TC-1A requires near-distance acuity examination annually and colour contrast differentiation at defined intervals, and the records are held by whoever administers them, which in a contractor-heavy environment is often nobody the site can reach. An overdue vision test on an examiner who interpreted radiographs during the outage is a finding that reaches every film that examiner read.

Third is procedure drift. A procedure is qualified, then revised — a different couplant, a wider thickness range, a new instrument family, a changed scanning pattern — without requalification against the changed essential variables. Fourth is calibration gaps around the outage window, where an instrument's calibration expired mid-outage and the readings taken after that date have no supporting status. Fifth is the disposition trail: a rejectable indication recorded, a repair carried out, and no record linking the repair back to the original indication or evidencing the re-examination afterwards.

Boiler and Pressure Part Traceability Through an Outage

Boiler inspection produces the highest data volume and the weakest traceability of any activity on a power plant. In a three to six week outage a team may take tens of thousands of thickness readings across waterwall panels, superheater and reheater elements, economiser coils, headers and connecting piping, plus weld examinations on pressure part replacements and creep damage assessment by replication on high-temperature components. Almost all of it is taken on scaffold, under time pressure, on components that are visually identical and distinguishable only by elevation, row and tube number.

The determining decision is made before the outage starts: how a location is identified and how a reading is tied to it. Sites that fix a datum convention — panel, elevation, tube number, clock position, distance from a permanent feature — and enforce it at data capture can compute meaningful wastage rates at the next outage. Sites that let each contractor use its own convention accumulate data that cannot be compared with anything, which means the whole exercise has to be repeated to establish a trend.

Pressure part replacement adds a second traceability stream: material certificates for the new tubing or header, welding procedure and welder qualification records under ASME Section IX, examination of the new welds, heat treatment where required, and the repair or alteration record under the National Board Inspection Code where jurisdictional. That package must be assembled during the outage, because reconstructing it afterwards from vendor emails is a well-known way to fail an audit. Holding it as structured records against each component, rather than as a folder per outage, is the case for a proper inspection data management system.

Gap Review Before the Audit Versus Remediation After a Finding

A gap review is run the way an auditor would run it and deliberately in advance of one. It samples records backwards from the field, tests each link in the chain, and produces a prioritised register: what would be written as a major nonconformance, what would be a minor, what would be an observation, and what is defensible but untidy. Because it is voluntary, the findings can be fixed in whatever order makes engineering sense, and the fixes can be structural — one written practice, one qualified procedure set, one certification register — rather than targeted at a specific complaint.

Remediation after a finding is a different exercise under different constraints. The corrective action must address the specific nonconformance as written, demonstrate root cause analysis, show correction of the immediate instance and of anything else affected, and be verified within a deadline set by the auditing body. Extent-of-condition review is usually mandatory, which means every other record produced under the same defective control has to be examined. That is how a single overdue vision test becomes a review of an entire outage's radiographic interpretation.

The difference in effort is not marginal. A gap review is a scoped engagement; remediation is open-ended because its scope is defined by how far the defective condition spread. The uncomfortable arithmetic is that the review that would have found the problem is a fraction of the extent-of-condition exercise alone. Where an audit is scheduled, running the review at least one quarter ahead leaves room to requalify procedures and re-examine personnel rather than only writing explanations.

How Audit Support Is Delivered on the Day

Technical audit representation is a specific and limited role: answering technical questions on the written practice, procedure qualification, personnel certification and examination results, so that a site quality manager is not asked to defend a shear wave technique or a replication acceptance judgement. The Level III speaks to what is in the documents, states plainly where a document does not support a claim, and does not negotiate scope on the client's behalf. Auditors respond well to a technical authority who concedes a genuine gap quickly and defends a sound position with a reference.

Preparation matters more than performance. Before the audit, the evidence needs to be assembled in the order an auditor will sample it — records first, then the chain behind each one — rather than in the order the filing system happens to use. Certification files, procedure qualification records and calibration histories should be retrievable in minutes. Where a link is known to be weak, the position on it should be decided in advance: fix it, or be ready to explain the compensating control.

After the audit, the useful output is not the closure letter but the pattern. Findings repeat across sites and across years because their root causes are structural — no named Level III, no revision control, no competency verification for contract labour, no datum convention. Fixing the structure once removes a whole class of future findings. To discuss a gap review, written practice ownership, procedure qualification or independent data review for a generating asset, request a consultation or write to info@atlantisndt.com.

Request a consultation