A batch of fabricated components may meet its dimensional specification and still be unsuitable for nuclear use if the material certificate cannot be traced, the approved process was not followed, or an inspector’s acceptance record is missing. Nuclear assurance examples are therefore not simply quality documents. They show, through objective evidence, that safety-significant work has been planned, controlled, checked and released by competent people.
For UK nuclear establishments and their supply chains, assurance must work in the workshop, on site, in design offices and across procurement. It must also withstand customer surveillance, internal audit and regulatory scrutiny. ISO 19443 provides a useful management-system framework, but certification alone does not demonstrate that controls are effective. The evidence must be proportionate to nuclear safety significance and consistently applied.
What nuclear assurance should demonstrate
Nuclear assurance is the confidence-building process used to establish that products, services and activities meet specified nuclear safety, quality and customer requirements. It is not a final inspection function that attempts to detect every problem after work is complete. Effective assurance is built into the work process: requirements are understood before work starts, hold points prevent unauthorised progression, records demonstrate what happened, and weaknesses are corrected at source.
The level of control depends on the item or activity. A safety-classified pressure-retaining component, for example, may require full material traceability, approved welding procedures, qualified welders, non-destructive examination, independent inspection and formal release. A low-consequence administrative service may need a lighter control plan. Applying the highest level of assurance to everything can create delay, paperwork and diluted focus. Applying too little control to a safety-significant activity creates an unacceptable evidential gap.
A sound management system defines who decides that level of control, how the decision is recorded and how requirements are flowed down through tiers of the supply chain. This is where ISO 19443 adds value beyond a generic ISO 9001 system: it strengthens nuclear safety culture, safety classification, counterfeit, fraudulent and suspect items controls, and the management of nuclear-specific customer requirements.
Nuclear assurance examples in operational use
1. Requirements flow-down to a specialist supplier
A principal supplier receives a purchase order for safety-related valve assemblies. Rather than forwarding only drawings and delivery dates, it issues a controlled procurement specification. This identifies applicable codes, safety classification, material requirements, inspection and test plan requirements, documentation deliverables, notification points, records retention periods and the customer’s right of access for surveillance.
The supplier acknowledges each requirement and records any exceptions before accepting the order. Where the work is subcontracted, the same requirements are flowed down without dilution. Assurance evidence includes the technical review, approved purchase order, supplier evaluation, order acknowledgement, inspection and test plan, and final manufacturing record pack. This demonstrates that the supply chain understood the nuclear requirements before manufacturing began, not after a nonconformance was discovered.
2. A graded inspection and test plan
An inspection and test plan, often referred to as an ITP, converts contract requirements into controlled stages of work. For a fabricated support, the plan may identify material receipt, cutting, fit-up, welding, dimensional inspection, coating, final inspection and despatch. Each stage states the acceptance criteria, responsible person, record required and whether work may proceed without witness or release.
The distinction between a review point, witness point and hold point matters. A hold point prevents the next stage until authorised release has been given. If a customer or nominated inspection body has a hold point before pressure testing, production cannot treat silence as approval unless the agreed notification rules permit it. Signed release records, with dates, identity of the inspector and applicable revision status, are essential assurance evidence.
3. Material traceability from receipt to installation
Traceability is often tested during audit because it exposes whether site and workshop controls are genuinely embedded. On receipt, material is checked against the purchase order and certificate of conformity. Heat numbers, batch numbers or unique identifiers are verified and retained on the goods-in record. Material is then marked, segregated where necessary and linked to cutting plans or traveller documentation.
A practical test is to select one installed item and trace it backwards to its certificate, inspection results, manufacturing route and approved design information. Then select a certificate and trace it forwards to every item made from that material. If identifiers are lost during cutting, transferred inaccurately or obscured by coating, the traceability chain fails. A digital system can improve retrieval, but only where its fields, permissions and revision controls are properly managed.
4. Control of design changes and configuration
A seemingly minor substitution can have nuclear safety implications. Changing a gasket material, replacing an obsolete instrument, altering a cable route or revising a calculation may affect performance, qualification, maintainability or the safety case. The assurance control is not merely a revised drawing. It is a documented change process that evaluates the impact, obtains the required technical and customer approvals, updates affected documents and communicates the revised configuration to those doing the work.
Useful evidence includes the change request, technical justification, risk assessment, design verification, approval record, revised document register and confirmation that superseded information was withdrawn. On site, this must connect to RAMS, work packs and briefings. A correctly approved change that is not communicated to the workforce remains a live operational risk.
5. Competence and authorisation for safety-significant work
Training records alone do not prove competence. An operative may hold a welding qualification, but the nuclear assurance question is whether they are authorised for the specific process, material, position, procedure and equipment in use. The same principle applies to inspectors, designers, quality engineers, radiation protection personnel and personnel undertaking independent verification.
An effective competence arrangement defines role requirements, checks qualifications and experience, records assessment where required and grants formal authorisation with clear limits. It also monitors continuing competence. For example, a visual welding inspector’s authorisation may require current certification, demonstrated knowledge of the applicable acceptance standard and periodic performance review. Competence matrices should identify gaps before mobilisation, not during a customer audit.
6. Nonconformance control and corrective action
A nonconformance report is a core assurance record, but its value depends on how it is used. Consider a machined item found outside tolerance. The item should be identified, controlled to prevent unintended use and assessed against the approved requirement. Any proposed concession or use-as-is decision must be technically justified and approved by the appropriate authority. Production pressure must not determine disposition.
Corrective action should then examine why the issue occurred. Was the wrong drawing revision available? Was measuring equipment out of calibration? Did the operator misunderstand an acceptance criterion? A meaningful investigation distinguishes the immediate error from the system weakness that allowed it. Actions should have owners, deadlines and effectiveness checks. Repeated recurrence after closure is evidence that the corrective action process is superficial.
7. Independent audit and management review
Internal audits provide assurance only when they test practice, not just procedure existence. An auditor should sample live jobs, interview personnel, verify records against the applicable contract requirements and follow a process end to end. For example, a procurement audit can trace a safety-related order from supplier approval through requirement flow-down, receipt inspection, certificate review and final release.
Audit findings need appropriate categorisation, timely correction and trend analysis. Management review should then consider recurring defects, overdue actions, supplier performance, competence risks, customer feedback and changes affecting the management system. This gives senior leaders evidence on whether nuclear safety and quality arrangements are performing, rather than a collection of isolated audit scores.
Turning examples into an assurance plan
The most useful nuclear assurance examples are those tied to a defined activity, safety significance and contractual requirement. A project assurance plan should set out the applicable standards, organisation chart, roles and independence, document-control arrangements, procurement controls, inspection regime, audit schedule, nonconformance process and records required for handover. It should also identify interfaces with the customer’s quality plan, safety case arrangements and site procedures.
Before work starts, organisations should conduct a focused gap analysis against ISO 19443, customer specifications and the planned scope of work. This reveals whether procedures are merely present or supported by trained personnel, practical records and demonstrable implementation. Evolution Safety Solutions can support this through ISO 19443 gap analysis, management-system implementation, internal audit and workforce competence development where an independent assessment is required.
The strongest assurance position is built before the first component is ordered or the first task is briefed. Establish the controls early, test them against real work, and retain evidence that lets a customer or auditor reach the same conclusion as the project team: the work was carried out correctly, by competent people, under controlled conditions.