#1284 1980 · US Nuclear Regulatory Commission · Energy and nuclear power
After Three Mile Island, regulators stopped licensing reactor operators on written exams
the problem
Operators who passed every written test still misread the instruments and shut off cooling during a real accident
background
On March 28, 1979, operators at the Three Mile Island Unit 2 reactor near Harrisburg, Pennsylvania misread a stuck-open relief valve and a misleading instrument reading, and manually shut off emergency core cooling water during a real loss-of-coolant event, turning a manageable malfunction into a partial meltdown.
Every operator on shift that night held a valid license, earned mainly through written exams on plant systems and thermodynamics — tests that had never once put a candidate in front of a simulated version of the exact failure they later faced for real.
what everyone would do
Tighten the written exam further — add more questions on thermodynamics and plant systems, the same instrument that had already certified every operator on shift the night of the accident.
what they saw
Investigators saw the operators knew the textbook material and still acted on the wrong instinct under pressure — a written test measures memorized knowledge, not the rehearsed reflex the job actually demands.
the move
In March 1980 the NRC's Harold Denton letter mandated that reactor and senior reactor operator licensing require hands-on qualification on a full-scale control-room simulator running realistic accident scenarios, not just a written exam, formalized that November in NUREG-0737, with the written passing grade also raised to 80 percent.
why it works
A full-scale simulator reproduces the actual failure sequence closely enough that an operator's response under it predicts their response to the real thing, because the pressure, the instrument readings, and the time constraint are all faithfully recreated — a written exam can only test recalled knowledge, never the pressured judgment call that knowledge has to survive contact with.
the payoff
Plants built $18-million simulators to test operators on the exact failure that caused the accident, now a permanent license requirement.
where it breaks
Simulator training only transfers if the simulated scenarios are updated to cover failure modes regulators have actually seen or can anticipate; a simulator that only rehearses the last accident, not the next one, gives operators false confidence in scenarios nobody thought to build.
what came after
Simulator-based licensing is now standard at every US nuclear plant and was adopted internationally, and the shift from purely written testing to realistic hands-on failure simulation is credited as one of the accident's most durable safety legacies, still shaping how safety-critical operators are certified today.
references
- [1]Chronology of Significant Events in Operator Licensing Since Three Mile IslandUS Nuclear Regulatory Commission, 2009nrc.gov
- [2]Nuclear Worker TrainingUnion of Concerned Scientists, 2011blog.ucs.org