Text

Revision 7 to Manual of Emergency Events.
	ML033350073
Person / Time
Site:	San Onofre
Issue date:	11/25/2003
From:	Brown L; City of Anaheim, CA, City of Riverside, CA, San Diego Gas & Electric Co, Southern California Edison Co
To:	; Document Control Desk, Office of Nuclear Reactor Regulation
References
	Download: ML033350073 (109)
	v • d • e

Manual of Emergency Events Revision 7.

SONGS2/3 Please update your copy of the Manual of Emergency Events using the attached instructions, and direct questions regarding filing of sections to: CDM Controlled Manuals Desk (949) 368-9356 (PAX 89356).

Note 1: Attached Sections will replace entire sections within your copy.

REMOVE ENTIRE INSERT ENTIRE Revision 6 Revision 7 Filing Instructions Reviewed/Approved by:

(L ,/-c fJ, Ori ator Date Date Processor Date USNRC DIVISION OF TECH EP 123 INFO &DOCUMENT CONTROL MOEE 123 ONE WHITE FLINT NORTH OERP 123 11555 ROCKVILLE PIKE ROCKVILLE, MD 29852

- '5 Page lof I Ii)4-

SAN ONOFRE NUCLEAR GENERATING STATION MANUAL OF EMERGENCY EVENTS Revision 7.0 November 14, 2003 Southern California Edison Company San Diego Gas and Electric Company City of Anaheim City of Riverside

(This page intentionally blank)

Page ii SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS FOREWORD Protecting the health and safety of the public and plant workers is a primary concern in the design, maintenance and operation of San Onofre Nuclear Generating Station (SONGS). The SONGS nuclear reactors have been built with redundant safety systems to prevent the accidental release of radioactive material. A stringent quality control program ensures that plant structures and components are maintained to the highest standards. Detailed procedures govern the use of all plant systems and components. Highly-trained personnel maintain their qualifications through continuing training programs that combine formal classroom studies with hands-on practice.

As a final precaution, plans have been developed to safeguard the public in the event of an accident.

Emergency plans for San Onofre comply with guidance established by the Nuclear Regulatory Commission (NRC) and the Federal Emergency Management Agency (FEMA). The SONGS Emergency Plan provides a graded response to emergencies, dependent upon the severity level. Emergencies are categorized in the following classes, from least to most severe: Unusual Event, Alert, Site Area Emergency, and General Emergency.

There are various plant conditions that would fall into these emergency classes. The SONGS Emergency Plan identifies the plant conditions by a system of event codes. In an emergency, state and local authorities would receive notification that includes the emergency class and event code. This manual describes the plant conditions associated with each event code, identifies actions taken by plant operators, and indicates the potential, if any, for escalation of the emergency. Also included are a basic description of the nuclear power plant and background information about radiation. This material is intended to assist offsite personnel responding to an emergency at San Onofre.

SAN ONOFRE NUCLEAR GENERATING STATION Page iii

MANUAL OF EMERGENCY EVENTS (This page intentionally blank)

Page iv SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS TABLE OF CONTENTS SECTION TITLE PAGE

1.0 EMERGENCY CLASSIFICATION 1 1.1 EMERGENCY ACTION LEVELS (EALs) 1 1.2 EMERGENCY CLASS 1 1.3 EVENT CATEGORY 1 1.4 EVENT CODE 1 1.5 EMERGENCY NOTIFICATION 2 1.6 EVENT NOTIFICATION FORM (ENF) 2 1.7 OFFSITE AGENCIES NOTIFIED 2 1.8 OFFSITE RESPONSE TO NOTIFICATION 2 2.0 EVENT CODES 3 2.1 UNUSUAL EVENT 3 2.2 ALERT 21 2.3 SITE AREA EMERGENCY 43 2.4 GENERAL EMERGENCY 61

3.0 INTRODUCTION

TO THE SONGS NUCLEAR REACTORS 74 3.1 REACTOR COOLANT SYSTEM 74 3.2 PRESSURIZER 75 3.3 SECONDARY SYSTEM 75

U 3.4 PROTECTIVE BARRIERS 76 3.5 SAFETY INJECTION SYSTEM 76 3.6 SHUTDOWN COOLING SYSTEM 77 3.7 CHEMICAL AND VOLUME CONTROL SYSTEM 77 3.8 ELECTRICAL SUPPORT SYSTEMS 78 3.9 RADIOACTIVE WASTE SYSTEM 79 4.0 INFORMATION ABOUT RADIATION 96 4.1 MAKEUP OF MATERIAL 96 4.2 NATURAL BACKGROUND RADIATION 97 4.3 RADIOACTIVE MATERIALS IN NUCLEAR REACTORS 98 4.4 MEASURING RADIATION 98 4.5 RADIATION PROTECTION GUIDANCE 99 4.6 PHILOSOPHY OF RADIATION PROTECTION 99 GLOSSARY OF RADIOLOGICAL TERMS 101 SAN ONOFRE NUCLEAR GENERATING STATION Page v

MANUAL OF EMERGENCY EVENTS (This page intentionally blank)

Page vi SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS 1.0 EMERGENCY CLASSIFICATION 1.1 EMERGENCY ACTION LEVELS (EALs)

Specific conditions requiring declaration of an emergency have been identified to ensure accurate and timely response by emergency response organizations. These Emergency Action Levels are based on postulated accidents, equipment malfunctions and other conditions of potential degradation of plant safety. Emergency Action Levels (EALs) include objective criteria based on plant conditions.

1.2 EMERGENCY CLASS Emergency Action Levels are grouped into four emergency classes. The emergency class indicates the severity of the emergency, and determines the scope of response by station and offsite emergency response organizations. The Site Area Emergency class is not applicable for the ISFSI. The General Emergency class is not applicable for Unit 1 or the Independent Spent Fuel Storage Installation (ISFSI).

The classes, from least to most severe, are:

Unusual Event - Potential degradation of plant safety. No offsite response is required.

Alert - Actual or potential significant degradation of plant safety. Any release of radioactive material will be a small fraction of the Environmental Protection Agency (EPA) limits.

Site Area Emergency - Actual or likely failures of plant functions needed for protection of the public.

Any release of radioactive material is not expected to exceed EPA limits.

General Emergency - Actual or imminent substantial plant damage. A release of radioactive material can be expected to exceed EPA limits.

1.3 EVENT CATEGORY Specific EALs which constitute the four emergency classes are grouped into seven event categories.

Whereas emergency classes indicate the severity of an emergency, event categories indicate the type or nature of the emergency. The event categories are:

A. Uncontrolled Release of Radioactivity B. Loss of Reactor Coolant System (RCS) Inventory C. Core Degradation or Overheating D. Loss of Safety Equipment E. Disasters F. Security Contingency G. Miscellaneous 1.4 EVENT CODE An event which meets the criteria of an EAL is identified and referenced by an event code which includes the event category, the emergency class, and the EAL number. This event code indicates to station and offsite personnel the type, severity and specific plant conditions of a declared emergency. Event codes and the associated emergency conditions are listed in section 2 of this manual.

SAN ONOFRE NUCLEAR GENERATING STATION Page 1

MANUAL OF EMERGENCY EVENTS 1.5 EMERGENCY NOTIFICATION Verbal notification of the state and local authorities will be initiated within 15 minutes of the declaration of an emergency. This notification will be made to local authorities via the Yellow Phone System. The Govemor's Office of Emergency Services will be notified via the Blue Phone System. Message authenticity is assured by use of these dedicated phone circuits. Backup notification is made using the Pacific Bell Telephone System.

Notification to the NRC will be made immediately after notification to the state and offsite agencies and must be made within one hour. Notification is made via the Federal Telephone System.

1.6 EVENT NOTIFICATION FORM A printed Event Notification Form (ENF) message will be transmitted to state and local authorities within 30 minutes of emergency declaration. The form is transmitted to local authorities via the Yellow PhDne System and to state officials by FAX machine. Information provided on the ENF includes the event code, emergency class, meteorological data, radioactive release information, any protective action recommendation and the basis for such a recommendation.

1.7 OFFSITE AGENCIES NOTIFIED The following offsite agencies will be notified within 15 minutes of the declaration of an emergency:

Orange County

San Diego County

City of Dana Point

City of San Clemente

City of San Juan Capistrano

Marine Corps Base, Camp Pendleton

California Department of Parks and Recreation, Orange Coast District Office

California Highway Patrol

Governor's Office of Emergency Services 1.8 OFFSITE RESPONSE TO NOTIFICATION During an Alert, Site Area Emergency, or General Emergency, each of the primary offsite agencies will operate from an Emergency Operations Center (EOC) in their respective localities. Additionally, each of the primary offsite agencies will send a representative(s) to the Emergency Operations Facility for liaison purposes. The emergency response plans of the offsite agencies describe their respective responsibilities, authorities, capabilities and emergency functions, and are contained in three separate volumes titled 'Offsite Emergency Response Plans."

Page 2 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS 2.0 EVENT CODES This section of the manual lists event codes for the full spectrum of postulated emergencies and explains their meaning and significance. The descriptions following each event code indicate the associated plant condition, actions required to ensure plant safety or restore the plant to a safe condition, and any potential for escalation of the event.

2.1 UNUSUAL EVENT The Unusual Event classification is characterized by a potential degradation of the level of safety in the plant. No release of radioactive material requiring offsite response or monitoring is expected.

The primary purpose for this classification is to ensure that the plant operating staff takes appropriate actions such as assessment and verification and comes to a state of readiness to respond, should the condition become more significant. The Unusual Event classification also requires that state and local offsite authorities are informed of abnormal conditions at the San Onofre Nuclear Generating Station.

With the exception of possible assistance by local support groups such as fire departments or medical facilities, no response is necessary by offsite organizations for events within this classification. Upon declaration of an Unusual Event, notification of the State and local authorities will be initiated within approximately 15 minutes consistent with the need for other emergency action. Notification to the NRC of an Unusual Event will be made immediately after notification to the state and local agencies, but must be made within one hour.

Conditions which may constitute an Unusual Event classification are listed on the following pages.

RECOMMENDED OFFSITE PROTECTIVE ACTIONS: These events do not require offsite response.

SAN ONOFRE NUCLEAR GENERATING STATION Page 3

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. Al-1: Release of airborne radioactivity EVENT: A release of airborne radioactivity has occurred or is occurring which exceeds Federally Approved Operating Limits and results in a Total Effective Dose Equivalent (TEDE) of 0.2 mrem in a single hour at the Exclusion Area Boundary, as indicated by specified radiation monitor readings.

EXPLANATION: Radioactive airborne releases have two possible sources: System boundary failure loading to leakage and a system or administrative failure leading to an uncontrolled release of a Waste Gas Decay Tank.

Liquids from the Radwaste and Reactor Coolant Systems normally contain small amounts of radioactive gasses. Leakage from these system results in liberation of these radioactive gasses. Very small quantities of radioactive gas resulting from system leakage are routinely discharged to the atmosphere after being d luted with clean air. Such releases of radioactive gas are maintained below Federally Approved Operating Limits, as specified in San Onofre's Offsite Dose Calculation Manual (ODCM). The limits specified in the ODCM are specific to each isotope, are conditions of San Onofre's license to operate, and are reviewed and apprcved by the NRC. Radiation detection systems are installed in the plant vent stack ducting to detect abnormal radiation levels from discharged gasses.

A waste gas processing system is used to manage the concentration of radioactive gasses in the Radv aste and Reactor Coolant Systems. The waste gas processing system allows plant operators to remove radioactive gas from these liquid systems. The operators then use other components in the system to compress the gas and then store it in large tanks to allow the short lived isotopes to decay away. This system reduces the total quantity of gas discharged to the environment to a value As Low As is Reasonably Achievable. Once the gas has decayed, the long lived radioactive isotopes, now at a much lower concentration, are slowly released into the atmosphere in a controlled manner. The release system is closely monitored by installed radiation monitors. In the event that the alarm setpoint is exceeded, isolation valves close to terminate the release.

OPERATOR ACTION: Leakage is identified and stopped, and the release of the waste gas decay tank would be terminated.

POTENTIAL FOR ESCALATION: There is little or no potential for escalation from the waste gas deca:, tank release. A release due to system leakage could escalate if the leakage becomes worse or the concentration increases.

Page 4 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. A1-2: Release of radioactive liquid EVENT: A radioactive liquid release which exceeds Federally Approved Operating Limits for greater than 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , as indicated by specified radiation monitor readings.

EXPLANATION: The most likely source of the release would be the liquid Radwaste System. Liquids'from the Radwaste Tanks normally contain very small amounts of radioactivity. The liquids are routinely discharged to the ocean after first being processed through demineralizers, gas strippers, and then stored in hold-up tanks to allow the decay of short-lived radioactive isotopes. The liquids are diluted by cooling water systems before being discharged. All releases of liquid-borne radioactive material are maintained below Federally Approved Operating Limits, as specified in San Onofre's Offsite Dose Calculation Manual (ODCM)

The limits specified in the ODCM are specific to each isotope, are conditions of San Onofre's license to operate, and are reviewed and approved by the NRC. Radiation detection systems are installed in the discharge piping to detect abnormal radiation levels from discharged liquids. If these levels increase, a signal is sent to automatically shut the discharge valve stopping the release. In addition, automatic interlocks are provided to minimize the accidental discharge of highly radioactive liquids or liquids that have not been adequately diluted by the cooling water systems.

OPERATOR ACTION: Actions taken would be directed to terminate the release by closing appropriate valves and turning off the discharge pumps. Plant personnel would evaluate conditions to determine how much radioactivity was released and project further effects.

POTENTIAL FOR ESCALATION: This event has a very small potential for escalation.

SAN ONOFRE NUCLEAR GENERATING STATION Page 5

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. A1-3: Loss of Integrity of a Dry Storage Cask EVENT: Any incident which leads to or causes a loss of integrity of a Dry Storage Cask containing irrc.diated nuclear fuel.

EXPLANATION: An analysis of accidents was conducted during the licensing of the Dry Storage Casks used for interim storage of irradiated nuclear fuel at SONGS. The result of this analysis shows that there is no credible accident which would lead to a loss of integrity of the Dry Storage Cask. This event code was created in the event that an accident occurred which actually leads to a loss of integrity.

Spent nuclear fuel is required to be stored in the Spent Fuel Pools from the point it is removed from the reactor until the heat generated by the decay of the shorter lived radioactive isotopes has been reduced to levels that active cooling by water is no longer required. Most of the radioactive noble gasses, and all of the radioactive iodine, will have decayed to insignificant levels prior to any fuel assemblies being placed into Dry Storage Casks. The fuel in the Dry Storage Casks represents no potential for release to the environment in the postulated accidents. In the event that a Dry Storage Cask were somehow breached, an airborne release would only occur if the integrity of the fuel cladding was also breached. In the event that both of these barriers were lost, only small quantities of radioactive noble gas would be available for release.

OPERATOR ACTION: Operators would direct that the vicinity of the container be surveyed to validate that no release of radioactive material was occurring. Following an assessment of damage, a recovery plan would be developed.

POTENTIAL FOR ESCALATION: This event has a very small potential for escalation.

Page 6 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. 61-1: Reactor Coolant System leakage EVENT: A leak has developed in the Reactor Coolant System (RCS) which exceeds:

A. 10 gallons per minute (gpm) from an unidentified point B. 10 gpm "pressure boundary" leakage C. 25 gpm from an identified point in the system EXPLANATION: Several factors are used in determining the limits for leakage from the RCS and they must all be observed in order to allow operation of the plant. These limits are very small, on the order of several gallons per minute. Reactor coolant leakage of this magnitude is usually detected by means of radiation monitoring devices and RCS volumetric calculations. A likely source of leakage would be through valve stem packing or from leaking valve seats.

OPERATOR ACTION: The operators manipulate systems in an attempt to identify and isolate the leakage.

The reactor may be shut down to allow corrective maintenance to be performed.

POTENTIAL FOR ESCALATION: Plant system and building designs permit safe operation at these leak rates. Depending on the location of the leak, radioactive releases to the environment may not occur. In the event that leak rates increase or radioactive releases occur, alternate Emergency Action Levels prescribe additional measures, including reactor shut down.

SAN ONOFRE NUCLEAR GENERATING STATION Page 7

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. Cl-1: Uncontrolled depressurization of the secondary plant EVENT: A failure has occurred in the secondary system which has caused the steam pressure to drop rapidly to the Main Steam isolation setpoint.

EXPLANATION: The steam pressure in the Steam Generator varies inversely with the demand for steam by the turbine-generator and other secondary systems. A significant failure in the secondary system causes an increase in steam flow and resultant decrease in steam pressure. This increase in secondary steam demand causes the temperature of the Reactor Coolant System to decrease faster than the reactor can reheat it. The decrease in temperature reduces the RCS pressure faster than the pressurizer can maintain pressure causing Safety Injection System actuation at a preset low pressure setpoint.

A significant pressure loss in the secondary system could result from:

1. Steam line break

2. Main Steam relief valve failure

3. Cold water injected into the secondary side of a steam generator

4. Feedwater line break.

OPERATOR ACTION: The operators verify that all automatic actions of plant safety systems have taken place, isolate the steam leak, and maintain the plant in a stable and safe condition.

POTENTIAL FOR ESCALATION: The transient is safeguarded by various safety features designed into the plant. It would take a number of highly unlikely concurrent failures to escalate this condition to a higher emergency level.

Page 8 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. C1-2: Reactor Coolant System activity exceeds Technical Specification limits EVENT: The level of radioactivity in the Reactor Coolant System (RCS) exceeds Technical Specification limits for continued operation.

EXPLANATION: In order to insure that the RCS remains as clean as possible, routine samples are analyzed for unwanted radioactive and chemical impurities. These include particles resulting from normal wear and tear from the pumps and valves that have become radioactive. A rapid increase in the activity levels may also be an indication of a very small fuel element failure.

OPERATOR ACTION: The operators will shutdown the reactor in an orderly fashion.

POTENTIAL FOR ESCALATION: The Technical Specification limits are set conservatively enough that no offsite radiological consequences would be observed. Without further independent, simultaneous failures, there is little likelihood that this event would escalate to a higher level.

SAN ONOFRE NUCLEAR GENERATING STATION PPage 9

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. D1-1: Reactor shutdown due to loss of minimum required offsite power sources OR loss of standby diesel generators EVENT: Technical Specifications prohibit continued reactor operation with less than a minimum num her of offsite electrical power sources or onsite emergency diesel generators.

EXPLANATION: At SONGS, there are several independent sources of power available from the Southern California Edison and San Diego Gas and Electric Company systems. All AC power offsite could be temporarily interrupted only by very large catastrophes, such as major fires, earthquakes, or high wind3.

Each unit at SONGS has two emergency diesel generators which automatically start and supply power to vital system electrical loads if the normal AC power sources are lost. The capacity of each Diesel Generator is sufficient to supply power to one complete train of components required to maintain the plant in a safe, shut down condition.

OPERATOR ACTION: The reactor will trip on a loss of all offsite power. The operators will carry out the required actions of a reactor trip using AC power supplied by the emergency diesel generators. As off 3ite power becomes available, the operators will transfer the electrical load to the normal sources of power and shut down the diesel generators.

Loss of both emergency diesel generators has no effect on the safety status of the reactor if offsite power is available. However, the operators will begin an orderly shutdown of the reactor as a precaution and take steps to return the diesel generators to operability.

POTENTIAL FOR ESCALATION: This event could escalate to an Alert if all offsite AC power is lost and both emergency diesel generators on either unit fail to start and load properly.

Page 10 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. D1-2: Loss of most or all Control Room annunciators with alternate plant alarm Indications available EVENT: The unplanned loss of most or all Control Room annunciators for greater than 15 minutes, and backup alarm indications are available.

EXPLANATION: Control Room annunciators are visual and audible indicators which aid operators in determining plant status. These annunciators are typically the first indication of unplanned plant activity, and are monitored at all times by operators. If these annunciators become unavailable, a dedicated Plant Monitoring System (PMS) computer will provide information of these plant alarms.

OPERATOR ACTION: The operators will continue to monitor plant conditions utilizing the PMS computer until Control Room annunciators are repaired.

POTENTIAL FOR ESCALATION: If a plant transient occurs or if backup alarm indications become unavailable, this event would escalate to an Alert.

SAN ONOFRE NUCLEAR GENERATING STATION Page 11

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. D1-3: Loss of RCS heat removal capability EVENT: Loss of Reactor Coolant System (RCS) heat removal capability for greater than 10 minutes clue to inoperability of the Shutdown Cooling System AND inoperability of the Steam Generators.

EXPLANATION: This event applies when the reactor is shutdown. The Shutdown Cooling System is utilized to cool down the RCS when the RCS temperature is below 3500 F by circulating the reactor coolant through dedicated heat exchangers.

The Steam Generators are used for reactor heat removal when the RCS temperature is above 200OF ty removing steam through the steam dump valves to the main condenser. The steam can be dumped to atmosphere if necessary.

The inoperability of both of these methods would prevent placing and maintaining the reactor in a cold shutdown condition.

OPERATOR ACTION: The operators would attempt to maintain stable reactor coolant temperatures until the required systems were returned to operability.

POTENTIAL FOR ESCALATION: If the plant were shutdown and if RCS temperature increased above 2000 F due to the loss of heat removal capability, this event would escalate to an Alert.

Page 12 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS :

UNUSUAL EVENT NO. El-1: Fire which threatens vital or safety related equipment EVENT: Fire which affects or is adjacent to areas and structure containing vital, safety related, safe-shutdown equipment, or licensed radioactive material, and which is not extinguished within 15 minutes of control room notification or verification of a Control Room alarm.

EXPLANATION: A fire in these areas could damage systems that are necessary for the safe operation of the plant, or lead to the uncontrolled airborne release of licensed radioactive material. To mitigate this potential, a fire fighting crew is maintained onsite at all times.

OPERATOR ACTION: Onsite fire fighting personnel will be dispatched to combat the fire.

POTENTIAL FOR ESCALATION: If the fire damages key safety, vital or safe-shutdown systems, the event could be escalated to an Alert or Site Area Emergency. If the fire leads to the uncontrolled release of licensed radioactive material, the event would be classified by Emergency Action Levels in the Uncontrolled Release of Radioactivity Event Category Tabs (A-tabs).

SAN ONOFRE NUCLEAR GENERATING STATION Page 13

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. E1-2: Earthquake EVENT: An earthquake which causes activation of the most sensitive seismic alarm in the Control RoDm.

EXPLANATION: Any time a seismic alarm is activated, the plant operating staff is required to inspect the plant for possible damage.

The plant is designed to withstand the largest credible earthquake for the area surrounding the plant site.

OPERATOR ACTION: The operating staff would inspect the plant for possible damage.

POTENTIAL FOR ESCALATION: If the earthquake, or subsequent shocks, result in ground movement greater than 0.33 g the event level would be upgraded to an Alert. If an earthquake were to cause dam age to plant equipment necessary for the safe operation of the reactor, higher levels of classification based on the loss of equipment could apply.

Page 14 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. E1-3: Natural disaster causing inoperability of a plant safety system-EVENT: The National Weather Service (NWS) issues a hurricane warning and San Onofre is in the projected path, or the NWS issues a tornado warning and a tornado is observed touching down in the protected area or the Independent Spent Fuel Storage Installation, or the National Oceanic and Atmospheric Administration (NOAA) has issued a tsunami warning and the predicted wave height is calculated to be greater than the 30 foot seawall.

OR Storm flooding or severe wind which causes inoperability of any safety system to the extent that reactor shutdown has been initiated as specified by the applicable Technical Specification.

EXPLANATION: Any large amount of uncontrolled water onsite, due to rain, tsunami, or the destructive forces of a tornado or severe hurricane impacting the site can result in damage to equipment necessary for safe operation of the plant.

All credible sources of water and the likelihood of a tornado or severe hurricane impacting the plant site have been considered in the design of the plant.

OPERATOR ACTION: The operators would assess the situation and take the required actions necessary to repair damage to the plant.

POTENTIAL FOR ESCALATION: The potential for this event and escalation to a higher emergency level is highly unlikely because of the design features of the plant. If the conditions worsened such that the capability to achieve or maintain cold shutdown is lost, the emergency condition would be upgraded to an Alert.

SAN ONOFRE NUCLEAR GENERATING STATION Page 15

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. E1-4: Manmade disaster causing inoperability of a plant safety system EVENT: Technical Specifications require a reactor shutdown due to the inoperability of plant safety systems as a result of a manmade disaster such as an aircraft crash or missile impact, train derailment, explosion, or release of toxic or flammable material.

EXPLANATION: An aircraft has crashed, a missile (flying object) has impacted, a train has derailed, cr an explosion has occurred which has affected operability of required key safety systems within the plant. In the case of a toxic gas release, the location of the fumes can preclude access for plant personnel. With flammable gas, there is the danger of fire or an explosion, or both.

OPERATOR ACTION: The operators will assess the situation to determine the impact on plant operations.

The fire fighting personnel, first aid teams, and damage control teams would be activated as required.

POTENTIAL FOR ESCALATION: The potential for this event and escalation to a higher emergency level is highly unlikely because of the design features of the plant. If the conditions worsened such that the capability to achieve or maintain cold shutdown is lost, the emergency condition would be upgraded to an Alert.

Page 16 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. Fl-1: Security threat EVENT: The Nuclear Regulatory Commission or the Security Shift Commander/Security Leader reports a security threat, attempted entry, or attempted sabotage.

EXPLANATION: This event includes any of the following conditions:

a. A credible threat to attack the Unit 2/3 protected or vital area, the Unit 1 Fuel Storage Building, or the Independent Spent Fuel Storage Installation ISFSI has been received.

b. A credible threat to bomb the Unit 2/3 protected or vital are, the Unit 1 Fuel Storage Building, or the ISFSI has been received.

c. A non-explosive sabotage attempt, to include tampering or unauthorized manipulation of vital area safety equipment or security-related safeguards equipment, for the purpose of sabotage or for gaining undetected or unauthorized entry into the Unit 2/3 protected or vital area, the Unit 1 Fuel Storage Building, or the ISFSI, has been confirmed.

d. An attempt to introduce prohibited items (such as firearms, explosives or unauthorized incendiary devices) into the Unit 2/3 protected or vital area, the Unit 1 Fuel Storage Building, or the ISFSI, for the purpose of sabotage or disruption of plant activities has been discovered.

e. Tampering with the protected area perimeter intrusion detection system (IDS) (e.g., E-fields, microwaves, and protected area entry card-readers) or the vital area IDS (e.g., vital area card-readers, portal locking hardware, or intrusion alarm mechanisms) for the purpose of gaining undetected or unauthorized access to the protected or vital area has been confirmed.

f. NRC notifies SONGS that a credible threat of attack by surface vehicle bomb(s) has been received, and that short-term contingency measures to protect against a surface vehicle bomb threat must be implemented within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

g. A confirmed security event with the actual or potential loss of level of safety of the ISFSI.

OPERATOR ACTION: The operators will assess the situation, notify offsite personnel and agencies, and take action to keep the plant in a safe condition.

POTENTIAL FOR ESCALATION: If the security force notifies the Shift Manager that there is an ongoing security compromise, the emergency level may be increased to an Alert.

SAN ONOFRE NUCLEAR GENERATING STATION Page 17

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. G1-1: Plant conditions warrant emergency notification of onsite and offtite authorities OR event criteria met except for mode applicability.

EVENT: Plant conditions warrant increased awareness and emergency notification of plant personnel and local, state, or federal offsite authorities OR plant conditions meet the criteria of an Alert or higher emergency action level, except for mode applicability, and no other emergency action level applies.

EXPLANATION: This event allows the Shift Manager to declare an Unusual Event and notify key plant and offsite personnel of conditions in the plant not covered by any of the other specific Emergency Action Levels.

This event would also be declared if the conditions for an Alert, Site Area Emergency or General Emergency existed except for mode applicability (there are six operational modes defined in Tech Specs; Mode 1 is power operations, Mode 6 is refueling operations), and no other emergency action level applies.

An example of such a condition specific to Unit 1 would be an ongoing, uncontrolled loss of Spent Fuel Pool inventory to below Tech Spec levels.

OPERATOR ACTION: The operators' actions will be as required to place the plant in a safe operating condition.

POTENTIAL FOR ESCALATION: If the situation deteriorates to the level which warrants the activation of the Emergency Response Facilities and recall of emergency response personnel, the event level would be upgraded to an Alert.

Page 18 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. G1-2: Reactor shutdown due to Technical Specification noncompliance AND plant conditions warrant emergency notification of offsite authorities EVENT: Plant conditions require reactor shutdown in accordance with Technical Specifications AND emergency notification of local or state authorities is warranted.

EXPLANATION: This event allows the Shift Manager to declare an Unusual Event and notify offsite personnel of conditions that require a reactor shutdown due to specific Technical Specification criteria.

OPERATOR ACTION: The operators will shutdown the reactor as required by Technical Specifications.

POTENTIAL FOR ESCALATION: There is no potential for escalation.

SAN ONOFRE NUCLEAR GENERATING STATION Page 19

MANUAL OF EMERGENCY EVENTS UNUSUAL EVENT NO. G1-3: Failure to shut down the reactor within Technical Specification Action Statement time limits.

EVENT: The operators are unable to place the reactor in the required operating mode as dictated by Technical Specifications time limits.

EXPLANATION: If any one or a combination of safety systems are determined to be not fully operational, a time limit is imposed for continued plant operation while those systems are repaired. The plant is shutdown as a precautionary measure if the systems are not restored to normal operating condition in the required time.

These rules are designed to keep the plant in the safest possible operating state.

OPERATOR ACTION: The operators would shutdown the plant and notify repair personnel to restore the systems to operability.

POTENTIAL FOR ESCALATION: This event by itself has no potential for escalation.

Page 20 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS 2.2 ALERT An Alert is declared at SONGS when events are in progress or have occurred which involve substantial degradation of the level of safety at the plant. During an ALERT, any radioactive material released is expected to be limited to small fractions of the Environmental Protection Agency's Protective Action Guideline exposure levels. An Alert requires response by the augmentation of the on shift emergency organization and constitutes the lowest level where offsite emergency response may be anticipated.

Notification of state and local offsite agencies shall commence within 15 minutes after declaration of an Alert. Notification to the NRC of an Alert will be made immediately after notification to the state and offsite agencies and must be made within one hour.

SONGS general actions for an Alert are summarized as follows:

1. Assess the plant conditions and respond to these conditions following established plant procedures.

2. Promptly inform state and local authorities of the Alert status and the reason for the Alert within 15 minutes of the declaration of an Alert condition. -

3. Dispatch onsite radiological monitoring teams if required.

4. Make offsite dose projections and provide these to offsite agencies if any radiological releases exceed Federally Approved Operating Limits.

5. Provide periodic updates on plant status to offsite authorities.

6. Escalate to a higher class of emergency if the situation warrants.

7. Close out or reduce the emergency class if appropriate. Verbally summarize the situation to offsite authorities followed by a written summary within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months of the close-out or class reduction.

RECOMMENDED bFFSITE PROTECTIVE ACTIONS: Precautionary beach evacuation will be recommended for an Alert if a concurrent accident-related release of airborne radioactive material were to occur.

SAN ONOFRE NUCLEAR GENERATING STATION Page 21

MANUAL OF EMERGENCY EVENTS ALERT NO. A2-1: Release of airborne radioactivity EVENT: A release of airborne radioactivity has occurred or is occurring which exceeds Federally Approved Operating Limits and results in a Total Effective Dose Equivalent (TEDE) dose of 2 mrem in a single hcur at the Exclusion Area Boundary, as indicated by specified radiation monitor readings.

EXPLANATION: Radioactive airborne releases have two possible sources: System boundary failure leading to leakage and a system or administrative failure leading to an uncontrolled release of a Waste Gas Decay Tank.

Liquids from the Radwaste and Reactor Coolant Systems normally contain small amounts of radioactive gasses. Leakage from these system results in liberation of these radioactive gasses. Very small quantities of radioactive gas resulting from system leakage are routinely discharged to the atmosphere after being diluted with clean air. Such releases of radioactive gas are maintained below Federally Approved Operating Li -nits, as specified in San Onofre's Offsite Dose Calculation Manual (ODCM). The limits specified in the ODCM are specific to each isotope, are conditions of San Onofre's license to operate, and are reviewed and approved by the NRC. Radiation detection systems are installed in the plant vent stack ducts to detect abnormal radiation levels from discharged gasses.

A waste gas processing system is used to manage the concentration of radioactive gasses in the Radwaste and Reactor Coolant Systems. The waste gas processing system allows plant operators to remove radioactive gas from these liquid systems. The operators then use other components in the system to compress the gas and then store it in large tanks to allow the short lived isotopes to decay away. This system reduces the total quantity of gas discharged to the environment to a value As Low As is Reasonably Achievable. Once the gas has decayed, the long lived radioactive isotopes, now at a much lower concentration, are slowly released into the atmosphere in a controlled manner. The release system is closely monitored by installed radiation monitors. In the event that the alarm set point is exceeded, isolation valves close to terminate the release.

OPERATOR ACTION: System leakage is identified and stopped, and the release of the waste gas decay tank would be terminated.

POTENTIAL FOR ESCALATION: There is little or no potential for escalation from the waste gas decay tank release. A release due to system leakage could escalate if the leak rate or the concentration of the gas were to increase.

Page 22 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. A2-2: Release of radioactive liquid EVENT: A radioactive liquid release which exceeds 10 times the Federally Approved Operating Limits for greater than 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , as indicated by specified radiation monitor readings.'

EXPLANATION: The most likely source of the release would be the liquid Radwaste System. Liquids from the Radwaste Tanks normally contain very small amounts of radioactivity. The liquids are routinely discharged to the ocean after first being processed through demineralizers, gas strippers, and then stored in hold-up tanks to allow the decay of short-lived radioactive isotopes. The liquids are diluted by cooling water systems before being discharged. All releases of liquid-borne radioactive material are maintained below Federally Approved Operating Limits, as specified in San Onofre's Offsite Dose Calculation Manual (ODCM)

The limits specified in the ODCM are specific to each isotope, are conditions of San Onofre's license to operate, and are reviewed and approved by the NRC. Radiation detection systems are installed in the discharge piping to detect abnormal radiation levels from discharged liquids. If these levels increase, a signal is sent to automatically shut the discharge valve stopping the release. In addition, automatic interlocks are provided to minimize the accidental discharge of highly radioactive liquids or liquids that have not been adequately diluted by the cooling water systems.

OPERATOR ACTION: Actions taken would be directed to terminate the release by closing appropriate valves and turning off the discharge pumps. Plant personnel would evaluate conditions to determine how much radioactivity was released and project further effects.

POTENTIAL FOR ESCALATION: This event has a very small potential for escalation.

SAN ONOFRE NUCLEAR GENERATING STATION Page 23

MANUAL OF EMERGENCY EVENTS ALERT NO. A2-3: High Area Radiation Monitor readings EVENT: The loss of control of radioactive material inside the plant resulting in an unplanned high indication on a specified Area Radiation Monitor AND verified by local survey to be indicating 1000 times normal radiation levels.

EXPLANATION: Movement and storage of radioactive materials is controlled and only performed in specific areas of the plant. It is possible that while movement of radioactive material is in progress a container may be dropped or a radioactive source can become separated from its shielding. If this occurs near one of the specified Area Radiation Monitors, an alarm for that area may be received.

Alarms on these monitors could also be indicators of system malfunction. In such an event, the area monitor alarms would be leading indicators to other indications of system malfunction.

OPERATOR ACTION: Plant personnel would investigate the high radiation problem and initiate corrective action.

POTENTIAL FOR ESCALATION: When the alarm is solely due to proximity to solid radioactive materials, there is no potential for escalation. When the alarm is a leading indicator of a system malfunction, the situation may escalate to higher levels of classification as indicated on other system monitors.

Page 24 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. A2-4: High plant area airborne radioactivity levels EVENT: An unplanned plant area iodine or particulate airborne concentration greater than 1000 times the Derived Air Concentration as determined by Health Physics survey.

EXPLANATION: The most likely causes for this event would be a leak from the Radwaste System or a small primary system leak. Liquids from the Radwaste System and the Reactor Coolant System contain small amounts of radioactivity which, if released to the atmosphere, could present an airborne contamination problem.

OPERATOR ACTION: Actions would be directed toward minimizing the release by closing appropriate valves, shutting down pumps, or taking other actions as required. Plant personnel would evaluate the best methods for cleanup of the affected areas.

POTENTIAL FOR ESCALATION: Limited, but could possibly escalate to a Site Area Emergency depending on the concentration and type of radioactive material being released.

SAN ONOFRE NUCLEAR GENERATING STATION Page 25

-I MANUAL OF EMERGENCY EVENTS ALERT NO. A2-5: Spent Fuel handling accident EVENT: Spent fuel handling accident causing the release of radioactivity and resulting in a high radialion condition on specified radiation monitors.

EXPLANATION: A spent fuel assembly is highly radioactive and could be damaged during transfer from the reactor to the spent fuel storage pool or while being loaded into a spent fuel cask. Internal plant ventilation systems are monitored for high levels of airborne radioactivity, and will initiate actions to preclude a release of airborne radioactive material to the environment in the event of damage to a spent fuel assembly.

OPERATOR ACTION: The operators would investigate the problem and take corrective action.

POTENTIAL FOR ESCALATION: Limited, depending upon the amount of damage at the Units 2 or 3 Spent Fuel Pool (SFP). No potential for escalation exists at Unit 1 SFP primarily due to the decayed fuel stored.

Page 26 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. A2-6: Steam line break with primary to secondary leak EVENT: A steam line break or uncontrolled steam release as determined by rapid Main Steam System depressurization AND either greater than 10 gpm primary to secondary Steam Generator leakage OR a valid steam line radiation monitor indication.

EXPLANATION: The main steam line transports steam necessary to operate the turbine-generator. A primary to secondary leak could allow radioactive materials present in the RCS to enter the secondary steam system through a steam generator. With a break in the steam line, this material could be released to the environment.

OPERATOR ACTION: The operators would verify proper response of plant safety systems following automatic reactor trip followed by cooldown and depressurization of the RCS to prevent further leakage.

POTENTIAL FOR ESCALATION: Not likely; would depend on the radioactivity levels of the reactor coolant leaking from the primary to the secondary systems. If high enough, this event could escalate.

SAN ONOFRE NUCLEAR GENERATING STATION Page 27

MANUAL OF EMERGENCY EVENTS ALERT NO. B2-1: Reactor Coolant System leakage EVENT: Reactor Coolant System (RCS) leakage greater than 50 gpm but less than the makeup capacity of the charging system.

EXPLANATION: Reactor coolant could leak from a number of sources, such as through valve stem packing, failed welds, or from a crack in the primary system piping. This leakage would be to the containment building. RCS leakage greater than 50 gpm but less than the makeup capacity of the charging system would not affect RCS pressure and automatic Safety Injection System actuation would not occur.

The containment building is designed to minimize the leakage of RCS to the atmosphere.

OPERATOR ACTION: The operators will shutdown the reactor and commence a plant cooldown. RGS water inventory would be maintained by the charging pumps. The operators will attempt to isolate the eak as soon as possible.

POTENTIAL FOR ESCALATION: If the leakage increases beyond the charging pump capacity, this Event will escalate to a Site Area Emergency.

Page 28 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. B2-2: Steam Generator Tube Leakage EVENT: Steam Generator Tube Leakage greater than the available charging pump capacity.

EXPLANATION: During normal operation non-radioactive gasses are vented from the secondary system. A steam generator tube leak provides a pathway for reactor coolant to exit the primary system and enter the secondary system. If the tube leakage were to occur during normal operation a release of radioactive noble gas and iodine above the Federally Approved Operating limits could occur. Equipment is in place to reduce the release of radioactive iodine.

OPERATOR ACTION: The operators will shutdown the reactor and commence a plant cooldown. The operators will identify which steam generator is affected and attempt to isolate steam flow from the affected generator. Isolation of the affected steam generator will stop the release of radioactive material.

POTENTIAL FOR ESCALATION: If a loss of offsite power occurs, intentional venting of the Steam Generator to atmosphere may be necessary to continue cooldown of the reactor core, causing the normal low level radioactivity of the RCS to be released to the environment. If this event occurs, the emergency level may be increased to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 29

MANUAL OF EMERGENCY EVENTS ALERT NO. C2-1: Fuel cladding failure EVENT: Severe fuel cladding failure verified by Reactor Coolant System (RCS) analysis indicating RCS activity corresponding to 1%failed fuel.

EXPLANATION: Sampling of the RCS is performed on a routine basis to verify fuel cladding integrity. If a defect in fuel cladding developed, it would be possible for fission products to leak into the RCS. A substantial increase in fission product activity in the RCS would indicate a fuel cladding failure.

OPERATOR ACTION: The operators would shutdown and cooldown the reactor and take necessary actions to purify the reactor coolant.

POTENTIAL FOR ESCALATION: Concurrent loss of core cooling capability would lead to an escalation to Site Area Emergency. With no compromise to the core cooling or other safety related systems, the potential for escalation is unlikely.

Page 30 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-1: Loss of all offsite and onsite AC power EVENT: Loss of all offsite power AND the loss of operability of both emergency diesel generators AND the buses remain de-energized for greater than 5 minutes.

EXPLANATION: At SONGS, there are several independent sources of offsite electrical power available to operate the plant from the Southern California Edison and San Diego Gas and Electric Company systems.

Backup sources of AC power for each unit are supplied by two emergency diesel generators and by batteries which supply vital AC buses through DC to AC inverters. If all offsite power were lost and both emergency diesel generators failed to operate, the batteries would be able to supply sufficient power to operate the essential plant systems necessary to maintain the plant in a safe condition until normal sources of power could be restored.

All AC power onsite and offsite could be temporarily interrupted only by very large catastrophes, such as major fires, earthquakes, or high winds.

OPERATOR ACTION: The reactor will trip on a loss of all offsite power. The operators will carry out the required actions to ensure that the plant is maintained in a safe condition until normal power is restored and a cooldown is commenced. I POTENTIAL FOR ESCALATION: If the loss of all power sources continued for more than 15 minutes, this event would escalate to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 31

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-2: Loss of all vital DC power EVENT: Loss of all vital DC power for greater than 5 minutes, confirmed by specified Control Room indications.

EXPLANATION: The loss of DC power would affect some valve and breaker controls associated with the following loads:

key plant safety systems

emergency lighting The 125 volt DC power system consists of 4 independent buses each with redundant power sources. The two sources of power are batteries and AC buses via AC to DC inverters. The most probable event causing a loss of vital DC power would be a short or fire in a DC bus panel.

OPERATOR ACTION: The operators ensure that the reactor is shutdown and maintained in a safe condition. Actions are taken to reestablish DC power.

POTENTIAL FOR ESCALATION: If the loss of vital DC continued for more than 15 minutes, this event would escalate to a Site Area Emergency.

Page 32 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-3: Loss of most or all Control Room Annunciators with the loss of backup alarm indications or plant conditions become unstable EVENT: An unplanned loss of most or all Control Room annunciators occurs AND either backup alarm indications from the Plant Monitoring System (PMS) computer are inoperable OR plant conditions are unstable.

EXPLANATION: The alarm and annunciator panels provide the operator with visible and audible alarms when various plant systems or equipment operate abnormally or change status. If this condition is combined with the loss of alternate indications from the Plant Monitoring System computer or if plant transients occur causing the plant to be unstable, the plant is shutdown until all systems are repaired.

OPERATOR ACTION: The operators ensure that the reactor is safely shutdown using local indications where possible. Actions are taken to reestablish power to the annunciators.

POTENTIAL FOR ESCALATION: If the loss of the Control Room annunciators continues, plant conditions became unstable, and alternate alarm indications (PMS) become unavailable all at the same time, this event would escalate to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 33

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-4: Control Room evacuation EVENT: Control Room evacuation is required AND control of shutdown systems is established locally or at the remote shutdown panel within 15 minutes.

EXPLANATION: The reactor plant is normally controlled by operators in the Control Room. If the Con rol Room were to become uninhabitable for any reason, such as a fire or smoke, provisions have been made to provide auxiliary control of the reactor from remote locations.

OPERATOR ACTION: Prior to leaving the Control Room, the operators would shut down the reactor. If this is not possible, the operators would shut down the reactor at local control panels and monitor the plant condition at the remote shutdown panel. Control Room accessibility would be reestablished as soon as possible.

POTENTIAL FOR ESCALATION: If the Control Room is evacuated and control of shutdown systems s NOT established locally or at the remote shutdown panel within 15 minutes, this event would escalate to a Site Area Emergency.

Page 34 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-5: Failure of reactor to trip EVENT: The Reactor Protection System, (RPS), fails to complete a reactor trip and manual reactor trip is successful.

EXPLANATION: When certain plant operating parameter set points are exceeded, the Reactor Protection System will automatically initiate signals to shutdown the reactor. If this shutdown signal does not result in a reactor trip, operators can initiate a manual reactor trip signal.

OPERATOR ACTION: The operators will take actions necessary to safely achieve reactor shutdown.

POTENTIAL FOR ESCALATION: In the event that both an automatic trip signal and an effort to manually trip the reactor fail, this event would escalate to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATIONg Page 35

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-6: Loss of adequate shutdown margin EVENT: Loss of adequate shutdown margin while the reactor is in hot or cold shutdown, or in a refuel ng condition.

EXPLANATION: There are a number of means available to ensure that once the reactor is shutdown, it will remain shutdown by a conservative margin. One means of keeping the reactor shutdown is through th 3 use of boron which slows the fission process in the reactor. Excessive dilution of the Reactor Coolant System boron concentration could decrease the reactor shutdown margin below the Technical Specification requirements.

OPERATOR ACTION: The operators would reestablish the required reactor shutdown margin.

POTENTIAL FOR ESCALATION: If the cause of the decrease in shutdown margin is not found and corrected and Reactor Coolant System temperature were to increase abnormally, this event could escalate to a Site Area Emergency.

Page 36 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. D2-7: Loss of heat removal capability EVENT: Inoperability of the Steam Generators or the Shutdown Cooling System resulting in an uncontrolled Reactor Coolant System (RCS) temperature increase to greater than 2000 F OR inability to maintain or reduce RCS temperature to less than or equal to 2000F.

EXPLANATION: Cooling the reactor coolant from its operating temperature to less than 2000 F requires the operation of two systems. The steam generators are used for reactor heat removal when the RCS temperature is above 2000 F by removing steam through the steam dump valves to the main condenser. The steam can be dumped to atmosphere if necessary.

The Shutdown Cooling System is utilized when the RCS temperature is below 3500 F by circulating the reactor coolant through dedicated heat exchangers.

The inoperability of either of these methods would prevent placing the reactor in a cold shutdown condition.

OPERATOR ACTION: The operators would attempt to maintain stable reactor coolant temperatures until the cooldown systems are returned to operability.

POTENTIAL FOR ESCALATION: If RCS temperature increases above 3500 F due to the loss of heat removal capability, this event would escalate to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 37

MANUAL OF EMERGENCY EVENTS ALERT NO. E2-1: Earthquake EVENT: An earthquake recording greater than 0.33g ground acceleration.

EXPLANATION: SONGS nuclear reactors are designed to withstand greater than the maximum earthquakes expected in this area. The function of the required plant systems will not be impaired for a safe reactor shutdown.

OPERATOR ACTION: Following a confirmed earthquake, the operators would evaluate plant conditicns and shutdown the reactor if required. A thorough inspection of the plant would be made to determine the extent of any damage.

POTENTIAL FOR ESCALATION: This event could escalate to a Site Area Emergency if significant damage to key plant safety systems were to occur.

Page 38 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. E2-2: Natural disaster causing loss of ability to achieve or maintain cold shutdown EVENT: A natural disaster including hurricane, tornado, tsunami, earthquake or flooding causing loss of the ability to achieve or maintain cold shutdown conditions.

EXPLANATION: The major threat to SONGS from a natural disaster would be water or structural damage to support systems necessary for the operation of heat removal systems.

The containment buildings and the diesel generator buildings are designed to be watertight and withstand winds up to 100 mph.

OPERATOR ACTION: The operators would evaluate plant conditions and shutdown the reactor if required.

A thorough site inspection would be made to determine the extent of damage.

POTENTIAL FOR ESCALATION: If damage occurred to safety systems necessary to maintain the plant in a hot shutdown condition, the event could escalate to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 39

MANUAL OF EMERGENCY EVENTS ALERT NO. E2-3: Manmade disaster causing loss of ability to achieve or maintain cold shutdown EVENT: Any manmade disaster including fire, explosion, aircraft or missile impact, or toxic or flammable gas release causing loss of the ability to achieve or maintain cold shutdown conditions.

EXPLANATION: Damage to onsite buildings or equipment due to a manmade disaster could result in the loss of safety or support systems necessary to achieve or maintain cold shutdown conditions. An example would be a fire in both 4160 volt switchgear rooms simultaneously. Although unlikely, the loss of both 4160 volt buses could impair the operators' ability to cool the reactor.

OPERATOR ACTION: The operators would evaluate plant conditions and shutdown the reactor if necessary. A thorough plant inspection would be made to determine the extent of damage.

POTENTIAL FOR ESCALATION: If damage occurred to safety systems necessary to achieve or maintain the plant in a hot shutdown condition, the event could escalate to a Site Area Emergency.

Page 40 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS ALERT NO. F2-1: Ongoing security compromise EVENT: The Shift Commander/Security Leader reports an ongoing security compromise.

EXPLANATION:* An ongoing security compromise could result in damage to safety systems necessary to maintain safe plant conditions at SONGS and includes any of the following conditions:

a. A bomb is discovered within the Unit 2/3 protected or vital area or the Unit 1 Fuel Storage Building.

b. -An intruder has been confirmed in the Unit 2/3 protected or vital area or the Unit 1 Fuel Storage Building.

c. Discovery of non-explosive prohibited items such as firearms, or unauthorized incendiary devices inside the protected or vital area, for the purpose of sabotage, has been confirmed.

d. An adversary force has assaulted the site, but has not attempted to or succeeded in penetrating the protected area perimeter. The adversary force has taken hostages and is barricaded in the owner controlled area.

e. A forceful assault on the protected or vital area by an adversary force is imminent.

f. A bomb or unauthorized explosive device explodes within the protected area or vital area, or a fire or explosion of suspicious origin occurs, with willful intent to damage vital area safety or security safeguards equipment.

g. An act of sabotage has damaged or destroyed Unit 2/3 vital area safety equipment or security safeguards equipment or Unit 1 Fuel Handling Building equipment required to maintain Spent Nuclear Fuel in a safe storage mode, but the security force maintains control of the protected area perimeter.

h. An adversary force has attacked the site and has succeeded in penetrating the protected area perimeter. The adversary force has taken hostages and is barricaded within the protected area or vital area, but the security force maintains control of the protected area perimeter.

OPERATOR ACTION: The operators would shutdown the reactor as required. SONGS security forces would be dispatched to regain security of the plant site.

POTENTIAL FOR ESCALATION: If control of the plant could not be maintained by SONGS security forces, the event could escalate to a Site Area Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 41

MANUAL OF EMERGENCY EVENTS ALERT NO. G2-1: Degradation of safety EVENT: Plant conditions indicate a significant trend leading to a degradation of safety.

EXPLANATION: Conditions in the plant indicate a degradation of safety not covered by other event criteria.

An example of such a condition specific to Unit 1 would be an uncontrolled loss of Spent Fuel Pool (SF P) inventory to below the lowest piping penetration of the SFP.

OPERATOR ACTION: The operators would take appropriate actions to mitigate the event and maintain the plant in a safe condition.

POTENTIAL FOR ESCALATION: Dependent upon the event.

Page 42 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS 2.3 SITE AREA EMERGENCY A Site Area Emergency is declared at SONGS when events involve actual or likely failure of plant systems needed for the protection of the public. Conditions which would lead to a Site Area Emergency at the Independent Spent Fuel Storage Installation are not possible due to the extended time the spent fuel has had to decay.

Any radioactive material released is expected to be limited to below the Environmental Protection Agency's Protective Action Guideline exposure levels. Although emergency actions involving members of the public may not be necessary, offsite emergency response organizations should be mobilized and ready to implement protective measures. Notification of state and offsite emergency organizations shall commence within 15 minutes after declaration of a Site Area Emergency. Notification to the NRC of a Site Area Emergency must be made immediately after notification to the state and offsite agencies and will be made within one hour.

SONGS general actions for a Site Area Emergency are summarized as follows:

1. Assess the plant conditions and respond to these conditions following established plant procedures.

2. Promptly inform state and local authorities of the Site Area Emergency status and the reason for the Site Area Emergency within 15 minutes of the declaration of a Site Area Emergency condition.

3. Warn people to evacuate the beach areas, if not previously performed.

KJ 4. Assemble site personnel in preparation to evacuate if the situation warrants.

5. Dispatch onsite and precautionary offsite radiological monitoring teams if required.

6. Provide periodic meteorological assessments, dose estimates, and dose projections to offsite authorities.

7. Provide periodic plant status updates to offsite authorities.

8. Escalate to a higher class of emergency if the situation warrants.

9. Close out or reduce the emergency class if appropriate. Verbally summarize the situation to offsite authorities followed by a written summary within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months of the close-out or class reduction.

RECOMMENDED OFFSITE PROTECTIVE ACTIONS: The Emergency Coordinator will recommend offsite protective actions as warranted by plant conditions. In all Site Area Emergencies, an evacuation of the State Beach will be recommended.

SAN ONOFRE NUCLEAR GENERATING STATION Page 43

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. A3-1: Release of airborne radioactivity EVENT: A release of radioactivity resulting in the following projected or measured dose rates at the Exclusion Area Boundary (EAB):

(1) 50 mrem/hr TEDE for 1/2 hour (2) 250 mrem/hr Thyroid Committed Dose Equivalent (CDE) for Y2 hour (3) 2500 mrem/hr Thyroid Committed Dose Equivalent (CDE) for 2 minutes OR Either of the following doses are measured or projected at the EAB for the duration of the release:

(1) 50 mrem TEDE (2) 500 mrem Thyroid CDE OR Dose projections cannot be made because meteorological data are not available, and the release resul s in specified monitor indications.

EXPLANATION: This condition does not relate to any specific initiating event. Instead, it provides gereral criteria to insure that a Site Area Emergency is declared if significant amounts of radioactive materials Eare released, regardless of the cause. This condition would be determined by utilizing installed radiological instrumentation to predict dose rates at the EAB, or by actual measurements taken at the EAB.

OPERATOR ACTION: The operators would take actions necessary to reduce the release of airborne radioactivity. Plant personnel would determine the amount and level of airborne activity and perform projected offsite dose calculations.

POTENTIAL FOR ESCALATION: If the source of airborne radioactivity cannot be stopped or sufficiertly reduced, this event could escalate to a General Emergency.

Page 44 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. A3-2: Spent fuel pool water level decrease exposing Irradiated fuel.

EVENT: An uncontrolled decrease in spent fuel pool water level exposing irradiated fuel as indicated by a spent fuel pool low level alarm in the Control Room AND a Spent Fuel Building high radiation alarm.

EXPLANATION: The Units 2/3 spent fuel pools, located in the Units 2/3 Spent Fuel Buildings, are constructed of reinforced concrete, lined with stainless steel, and filled with water that provides shielding and cooling for the spent nuclear fuel.

If a leak were to occur in one of the spent fuel pools the fuel in the pool could become exposed. Failure to keep the spent fuel covered and cooled by water could result in damage to the fuel and a release of radioactive gas to the fuel handling building.

OPERATOR ACTION: The operators would take action to isolate the leak and establish makeup water to refill the spent fuel pool. Health Physics personnel would survey the area and determine the radiation levels.

POTENTIAL FOR ESCALATION: If the spent fuel pool cannot be filled sufficiently and damage to the spent fuel occurs, this event could escalate to a General Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 45

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. A3-3: Steam line break with primary to secondary leak EVENT: A steam line break or uncontrolled steam release as determined by:

(1) rapid Main Steam System depressurization AND (2) greater than 50 gpm primary to secondary leakage OR 2 mrem/hr indicated on a Main Steam Line Radiation Monitor OR the most recent RCS chemical analysis indicates dose equivalent 1-131 greater than 1 microcurie per gram of coolant.

EXPLANATION: The main steam lines transport steam from the Steam Generators to the turbine-generator.

With primary to secondary leakage, radioactivity enters the steam lines and is released through the break in the main steam line. The amount of the radioactive release and the necessity for offsite protective action would depend upon the level of RCS activity and the size of the steam line break.

OPERATOR ACTION: The operators would verify proper response of plant safety systems following automatic reactor trip followed by cooldown and depressurization of the RCS to prevent further leakage.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely unless a concurrent failure in fuel cladding integrity occurs. Concurrent fuel element failures could cause escalation to a General Emergoncy based on the level of release of radioactive material.

Page 46 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. B3-1: Reactor Coolant System leakage greater than charging pump capacity EVENT: Reactor Coolant System(RCS) leakage greater than the available charging pump capacity.

EXPLANATION: A reactor coolant leak of this magnitude would require a significant breach in RCS integrity. The Safety Injection System (SIS) would be activated to maintain RCS water inventory and shutdown the plant.

OPERATOR ACTION: The operators would shutdown the reactor, commence a plant cooldown, and ensure proper operation of the SIS to keep the reactor core covered with water to prevent core damage.

POTENTIAL FOR ESCALATION: Due to the redundant safety systems provided in the plant, escalation is unlikely. However, if the core could not be kept covered AND if there were also a possibility of a loss of containment integrity, this event could escalate to a General Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 47,

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. B3-2: Steam Generator tube leakage with release to atmosphere EVENT: Steam generator tube leak greater than available charging pump capacity with concurrent release of steam to atmosphere for greater than 30 minutes from a pathway other than the condenser air ejectcr exhaust filter.

EXPLANATION: Excess steam is normally directed to the condenser where radioactive noble gas and iodine are removed and released through the condenser air ejector. During a Steam Generator Tube Rupture accident a charcoal filter is used to reduce the radioactive iodine in this release path. If, during such an emergency, the condenser air ejector becomes unavailable or a breach occurs in the secondary system, releases directly to the atmosphere would occur. Releases from a pathway other than the condenser air ejector are unfiltered pathways to the environment. This breach of the secondary system coupled with a primary to secondary leak could allow the normally low levels of radioactive iodine present in the Reactbr Coolant System to be released to the environment.

OPERATOR ACTION: Operators will trip the reactor and commence a controlled cooldown. The operators will attempt to isolate the affected steam generator and may open the Atmospheric Dump Valve of the unaffected generator to cool down the plant.

POTENTIAL FOR ESCALATION: Due to the redundant safety systems provided in the plant, escalaticn is unlikely, However, if the core is uncovered due to an independent incident causing significant fuel failure, this event would escalate to a General Emergency.

Page 48 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. C3-1: Degraded core with possible loss of coolable core geometry.

EVENT: A degraded core with possible loss of coolable geometry is identified based on:

(1) determination of inadequate core cooling AND RCS activity analysis indicates greater than 1% fuel element failure.

OR (2) high containment radioactivity levels.

OR (3) elevated radiation levels outside containment.

EXPLANATION: Fuel assemblies are arranged in the reactor core in an orderly geometric pattern.

Distortion of this orderly arrangement could block reactor coolant flow through the core. If the coolant flow was reduced significantly, fuel rods could overheat and be damaged. The core geometry could be disturbed by structural failure of core components but would more likely be caused by uncovering the core, as a result of a loss of coolant accident. Without water to cool the core, the subsequent overheating could lead to severe fuel damage and possible fuel melt inside the core.

OPERATOR ACTION: The operators will ensure that the reactor has been shutdown and that adequate core cooling is achieved.

POTENTIAL FOR ESCALATION: Due to the redundant safety systems provided in the plant, escalation is unlikely. However, if the core cannot be kept cooled AND if there is also a possibility of a loss of containment integrity, this event could escalate to a General Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION Page 49

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-1: Loss of all offsite and onsite AC power EVENT: Loss of all offsite power AND the loss of operability of both emergency diesel generators ANI) the buses remain de-energized for greater than 15 minutes.

EXPLANATION: At SONGS, there are several independent sources of offsite electrical power availatle to operate the plant from the Southern California Edison and San Diego Gas and Electric Company systemns.

Backup sources of AC power for each unit are supplied by two emergency diesel generators and by batteries which supply vital AC buses through DC to AC inverters. If all offsite power were lost and both emergency diesel generators failed to operate, the batteries would be able to supply sufficient power to operate essential plant systems necessary to maintain the plant in a safe condition until normal sources of power could be restored.

All AC power onsite and offsite could be temporarily interrupted only by very large catastrophes, such as major fires, earthquakes, or high winds.

OPERATOR ACTION: The reactor will trip on a loss of all offsite power. The operators will carry out the required actions to ensure that the plant is maintained in a safe condition until normal power is restored and a cooldown is commenced.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

Page 50 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-2: Loss of all vital DC power EVENT: Loss of all vital DC power for greater than 15 minutes, confirmed by specified Control Room indications.

EXPLANATION: The loss of DC power would affect some valve and breaker controls associated with the following loads:

key plant safety systems

emergency lighting The 125 volt DC power system consists of 4 independent buses each with redundant power sources. The two sources of power are batteries and AC buses via AC to DC inverters. The most probable event causing a loss of vital DC power would be a short or fire in a DC bus panel.

OPERATOR ACTION: The operators ensure that the reactor is shutdown and maintained in a safe condition. Actions are taken to reestablish DC power.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

SAN ONOFRE NUCLEAR GENERATING STATION PPage 51

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-3: Loss of most or all Control Room Annunciators with the lo ss of alternate plant alarm indications AND plant conditions are unstable EVENT: Loss of most or all Control Room annunciators with backup alarm indications from the Plant Monitoring System (PMS) computer inoperable AND plant conditions unstable.

EXPLANATION: The alarm and annunciator panels provide the operator with visible and audible alarms when various plant systems or equipment operate abnormally or change status. If this condition is corr bined with the loss of alternate indications from the Plant Monitoring System (PMS) and if a plant transient occurs causing the plant to be unstable, the plant is shutdown until all systems are repaired.

Annunciators provide the operators the most immediate indications of abnormal operating conditions. The loss of these indications, coupled with the loss of backup methods, reduce the effectiveness of operators to monitor plant status and, therefore, hamper response to abnormal plant conditions.

OPERATOR ACTION: The operators would ensure that the reactor is safely shutdown and action is taken to return the plant to a stable and controlled condition. Immediate steps would also be taken to reestablish operability of the annunciators.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

Page 52 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-4: Control Room evacuation EVENT: The Control Room has been evacuated AND control of shutdown systems has NOT been established locally or at the remote shutdown panel within 15 minutes.

EXPLANATION: The reactor plant is normally controlled by operators in the Control Room. If the Control Room were to become uninhabitable for any reason, provisions have been made to provide auxiliary control of the reactor from remote locations. If local control at the remote stations is not established within 15 minutes, unstable plant conditions could exist without plant personnel being fully aware of the status of the reactor.

OPERATOR ACTION: The operators would take necessary actions to establish control at the remote shutdown panel as soon as possible. Control Room accessibility would be reestablished as soon as possible.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

SAN ONOFRE NUCLEAR GENERATING STATION Page 53

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-5: Failure of reactor to trip EVENT: The Reactor Protection System, (RPS), fails to complete a reactor trip and manual reactor trip is unsuccessful.

EXPLANATION: When certain plant operating parameter set points are exceeded, the RPS will automatically initiate signals to shutdown the reactor. If automatic reactor trip signals are unsuccessful, operators will initiate a manual trip signal. If both shutdown signals do not result in a reactor trip, additional safety systems can be utilized to safely shutdown the reactor. An example would be the injection of a boric acid solution to the reactor coolant to stop the nuclear chain reaction. However, due to the increased time where the reactor is critical with parameters outside normal range, the potential for fuel damage is increased.

OPERATOR ACTION: The operators will take actions necessary to safely achieve reactor shutdown and control of key plant systems.

POTENTIAL FOR ESCALATION: Potential for escalation is unlikely.

Page 54 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-6: Loss of adequate shutdown margin EVENT: Loss of adequate shutdown margin while the average reactor coolant temperature is greater than 3500 F.

EXPLANATION: The amount of reactivity in a reactor determines the rate of nuclear fission. Fissionable nuclear fuel represents positive reactivity. Boron dissolved in the reactor coolant and the control rods represent negative reactivity, since they remove neutrons from the chain reaction through absorption.

When the reactor is at operating temperature, whether critical or not, the operators must always be able to shut it down, and/or maintain it shut down. The ability to shut down, or maintain the reactor shutdown, is called the shutdown margin. Situations where sufficient shutdown margin is not available represent unsafe operation of the plant. Examples of this condition would be a system failure which results in the inability to add boron to the reactor coolant system, or not having the control rods withdrawn far enough such that they can add sufficient negative reactivity to stop the nuclear chain reaction when inserted.

OPERATOR ACTION: The operators would reestablish the required reactor shutdown margin and shut down the reactor if required.

POTENTIAL FOR ESCALATION: Without concurrent failures there is no potential for escalation.

SAN ONOFRE NUCLEAR GENERATING STATION Page 55

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. D3-7: Loss of heat removal capability EVENT: Inoperability of Steam Generators or Residual Heat Removal/Shutdown Cooling System resulting in an uncontrolled Reactor Coolant System (RCS) temperature increase to greater than 350cF OR the inability to maintain or reduce RCS temperature to less than or equal to 3500 F.

EXPLANATION: Cooling the reactor to 3500 F requires the operation of the steam generators by removing steam through the steam dump valves to the main condenser. The steam can be dumped to atmosphere if necessary.

The Residual Heat Removal/Shutdown Cooling System is utilized when the RCS temperature is below 350 0 F by circulating the reactor coolant through dedicated heat exchangers.

The inoperability of both of these methods prevent the ability to place the reactor in a cold shutdown condition.

OPERATOR ACTION: The operators would take the necessary actions to restore the capability of eitter system.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

Page 56 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. E3-1: Natural disaster causing loss of hot shutdown capability.

EVENT: A natural disaster, including earthquake, hurricane, tornado, tsunami, or flooding causing the loss of the ability to achieve or maintain hot shutdown.

EXPLANATION: The major threat to SONGS from a natural disaster would be damage to support systems necessary for the operation of heat removal systems. This could be caused by water damage due to flooding, structural damage due to earthquake, or damage resulting in the partial or complete loss of electrical power.

The buildings at SONGS housing key safety systems are designed to be watertight, withstand winds up to 100 mph, and withstand the greatest possible seismic disturbance predicted to occur in this region.

OPERATOR ACTION: The operators would evaluate plant conditions and shutdown the reactor if required.

A thorough site inspection would be made to determine the extent of damage.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

SAN ONOFRE NUCLEAR GENERATING STATION Page 57

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. E3-2: Manmade disaster causing loss of hot shutdown capability EVENT: Any manmade disaster, including fire, explosion, aircraft or missile impact, or toxic or flammable gas release causing the loss of the ability to achieve or maintain hot shutdown conditions.

EXPLANATION: Damage to onsite buildings or equipment due to a manmade disaster could result in the loss of safety or support systems necessary to achieve or maintain cold shutdown conditions. An example would be a fire in both 4160 volt switchgear rooms simultaneously. Although unlikely, the loss of both 4160 volt buses could impair the operators' ability to cool the reactor.

OPERATOR ACTION: The operators would evaluate plant conditions and shutdown the reactor if necessary. A thorough plant inspection would be made to determine the extent of damage.

POTENTIAL FOR ESCALATION: The potential for escalation is unlikely.

Page 58 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. F3-1: Imminent loss of physical control of the Unit 2/3 protected area or the Unit 1 Fuel Handling Building EVENT: The Shift Commander/Security Leader reports the imminent loss of physical control of the Unit 2/3 protected area or the Unit 1 Fuel Handling Building and includes the following condition: (1) a forceful assault on the Unit 2/3 protected area barrier occurs, or has occurred, and has succeeded in penetrating the protected area perimeter and is continuing in the protected or vital area; or (2) a forceful attack on the Unit 1 perimeter boundary by an adversary force has succeeded in penetrating the boundary and is continuing toward the Unit 1 Fuel Handling Building with the assumption that the adversary force's target is the spent nuclear fuel stored in the Unit 1 Fuel Handling Building.

EXPLANATION: A loss of physical control of the plant could result in damage to safety systems necessary to maintain safe plant conditions at SONGS.

OPERATOR ACTION: The operators would shut down the reactor and maintain the plant in a safe condition. Security forces would take necessary actions to regain control of the plant.

POTENTIAL FOR ESCALATION: If loss of physical control of the plant were to occur, this event would escalate to a General Emergency.

SAN ONOFRE NUCLEAR GENERATING STATION5 Page 59

MANUAL OF EMERGENCY EVENTS SITE AREA EMERGENCY NO. G3-1: Major failures of plant functions EVENT: Plant conditions indicate likely major failures of plant functions needed for protection of the public.

EXPLANATION: Conditions in the plant indicate a degradation of safety not covered by other event criteria.

OPERATOR ACTION: The operators would take appropriate actions to mitigate the event and maintain the reactor in a safe condition.

POTENTIAL FOR ESCALATION: Dependent upon the event.

Page 60 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS

"-' 2.4 GENERAL EMERGENCY A General Emergency will be declared at SONGS based on the occurrence of events which involve actual or imminent substantial core degradation with the potential for loss of containment integrity. It is possible that a lesser emergency has been declared, emergency measures taken, and due to a deterioration in plant conditions, the event has been upgraded to a General Emergency. Conditions which would lead to a General Emergency at Unit 1 or the Independent Spent Fuel Storage Installation (ISFSI) are not possible due to the extended time the spent fuel has had to decay.

The General Emergency classification includes actual or imminent events for which offsite protective actions will be needed. In consideration of the lead time necessary to implement offsite protective actions, notifications to offsite authorities must be made immediately after declaration of a General Emergency. Notification of state and local offsite emergency organizations shall commence within 15 minutes of the declaration of a General Emergency. Notification to the NRC of a General Emergency will be made immediately after notification to the state and local offsite agencies and must be made within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

SONGS general actions for a General Emergency are summarized as follows:

1. Assess the plant conditions and respond to these conditions following established plant procedures.

2. Promptly inform state and local authorities of the General Emergency status and the reason for the General Emergency within 15 minutes of the declaration of a General Emergency condition.

3. Warn people to evacuate the beach areas, if not previously performed.

4. Evacuate unnecessary personnel from the SONGS Site. Current meteorological data will be used to determine the proper evacuation routes.

5. Dispatch onsite and precautionary offsite radiological monitoring teams if they are not already in the field.

6. Provide periodic meteorological assessments, dose estimates, and dose projections to offsite authorities.

7. Provide recommended offsite protective actions to offsite authorities as information becomes available.

8. Provide periodic plant status updates to offsite authorities.

9. Escalate to a higher class of emergency if the situation warrants.

10. Close out or reduce the emergency class if appropriate. Verbally summarize the situation to offsite authorities followed by a written summary within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months of the close-out or class reduction.

RECOMMENDED OFFSITE PROTECTIVE ACTIONS: In a General Emergency, an evacuation of all sectors of the Emergency Planning Zone to 10 miles normally will be recommended. If there were circumstances which would inhibit timely evacuation, such as flooding or severe earthquake damage, or the termination of an in-progress release is imminent, sheltering may be recommended. If there is an airborne release containing radioactive iodine, a recommendation for members of the public to take Potassium Iodide to minimize exposure to the thyroid will be issued.

SAN ONOFRE NUCLEAR GENERATING STATION PPage 61

MANUAL OF EMERGENCY EVENTS DISCUSSION: Postulated General Emergencies will be described in this section. Unlike the previous accident classes, these accidents cannot be caused by a single, specific initiating event. Instead, t key are a result of the potential consequences of multiple events which were described individually in previous sections. These resulting conditions are:

Release of airborne radioactive materials for which the projected or measured dose rate at the Exclusion Area Boundary is greater than 1000 mrem TEDE or greater than 5000 mrem Thyroid CDE for the duration of the release.

Loss of two of the three barriers between the fuel in the reactor and the environment, togeter with a potential loss of the third barrier (the three barriers are, in order: fuel cladding, Reactor Coolant System and the containment building).

Control of the plant lost to an outside party.

The plant is in a condition such that releases of large amounts of radioactive material are possible within a short time period or significant fuel damage is possible.

Specific actions would depend on the various events that caused the General Emergency. Nevertheless, the following actions apply to all General Emergencies:

1. Fire fighting personnel, first aid and/or rescue teams are notified as needed.

2. Offsite authorities are notified of the General Emergency and the corresponding plant status.

Offsite actions, such as evacuation or shelter, are recommended depending on the circumstances surrounding the event. Potassium Iodide for members of the general public may also be recommended. Certain incidents, such as a sudden single release of radioactive material, may dictate shelter rather than evacuation. An evacuation would not be appropriate while a short-lived radioactive plume was passing over the area being evacuated. This could result in exposing the moving population to more radiation than if they had stayed at home with their doors and windows shut.

3. If radiation levels in and around the site were to exceed predetermined levels non-essential personnel onsite and on the beach near the site would be instructed to leave.

4. Onsite and offsite radiation monitoring teams would be dispatched.

It is important to understand that, even if a General Emergency (the most severe and unlikely accident) has occurred, the public is not necessarily in any danger. For example, declaration of a General Emergency does not necessarily indicate that a massive release of radioactivity has or will likely occur.

The emergency classifications are designed to ensure an adequate and timely response to different degrees of emergency in order to minimize public risk. Hence, the declaration of a General Emergency ensures that the highest degree of emergency response has been initiated.

Page 62 SAN ONOFRE NUCLEAR GENERATING STATION

MANUAL OF EMERGENCY EVENTS GENERAL EMERGENCY NO. A4-1: Release of airborne radioactivity EVENT: A radioactive release occurs for which the dose measured or projected to be at the Exclusion Area Boundary:

(1) 1000 mrem TEDE OR (2). 5000 mrem Thyroid CDE EXPLANATION: This condition does not relate to any specific initiating event. It is designed to ensure that a General Emergency is declared if significant amounts of radioactive materials are released, regardless of the cause.

OPERATOR ACTION: The operators would take necessary actions to reduce the release of airborne radioactivity. Plant personnel would determine the amount and level of airborne activity, generate offsite dose projections and promptly relay this information to authorities.

SAN ONOFRE NUCLEAR GENERATING STATION Page 63

MANUAL OF EMERGENCY EVENTS GENERAL EMERGENCY NO. B4-1: Loss of Coolant Accident (LOCA) with loss of 2 of 3 fission product barriers with the potential loss of the third barrier EVENT: For LOCA sequences: