ML050900181
| ML050900181 | |
| Person / Time | |
|---|---|
| Site: | Arkansas Nuclear  |
| Issue date: | 03/29/2005 |
| From: | Mallett B Division of Nuclear Materials Safety IV |
| To: | Forbes J Entergy Operations |
| References | |
| EA-03-016, FOIA/PA-2004-0277 IR-01-006 | |
| Download: ML050900181 (21) | |
Text
UNITED STATES NUCLEAR REGULATORY COMMISSION REGION IV 611 RYAN PLAZA DRIVE, SUITE 400 1 ';;',S 8'
ARLINGTON, TEXAS 76011.4005 EA 03-016 Jeffrey S. Forbes, Site Vice President Arkansas Nuclear One Entergy Operations, Inc.
1448 S.R. 333 Russeliville, AR 72801-0967
SUBJECT:
ARKANSAS NUCLEAR ONE, UNIT 1 - FINAL SIGNIFICANCE DETERMINATION FOR A WHITE FINDING AND NOTICE OF VIOLATION (NRC INSPECTION REPORT NO. 50-313/01-06;368/01-06)
Dear Mr. Forbes:
The purpose of this letter is to provide you with the final results of our significance
-determination for the preliminary greater than green finding identified in the subject inspection report as unresolved item 50-313;36810106-02. In a letter dated April 15, 2002, we provided Arkansas Nuclear One management with the results of our backfit panel which determined that for Fire Zones 98J and 99M Arkansas Nuclear One staff had implemented a fire protection strategy that did not meet 10 CFR Part 50, Appendix R, Sections Ill.G.2. Specifically, in lieu of ensuring that redundant trains of equipment and cables necessary for achieving hot shutdown were free of fire damage (as required by Section III.G.2), Arkansas Nuclear One staff credited local remote operator actions for mitigating the effects of fire damage. In that letter we re-characterized the finding as an apparent violation pending determination of its significance.
The finding was subsequently assessed using a Phase IlIl significance determination process, and was preliminarily determined to have a significance of greater than very low (greater than green). The bases for and the process used in reaching this preliminary significance determination was described in our letter to Mr. Craig G. Anderson, Vice President, Operations, Arkansas-Nuclear-One, dated March 25,-2003.
At Arkansas Nuclear One management's request, we conducted a regulatory conference on July 10, 2003. During this conference, Arkansas Nuclear One management and staff provided the results of a fire model analysis which Indicated the extent of fire damage that could occur in the event of a fire in the fire zones affected by the finding. In addition, Arkansas Nuclear One management and staff presented an assessment of the significance of the finding.
Subsequent to the regulatory conference, we requested additional information from Arkansas Nuclear Ond staff which was provided to us in letters dated August 11, 2003, and 4
November 21, 2003. In our final assessment of the risk of this finding, we considered the additional information provided to us at the regulatory conference and in these letters. As a intorma~~fl
~
)Isrerd wlas deletel infotatiOn in tlhan Tecreedom OtIntomai n
ac nce with the e
- Act, Folk-
Entergy Operation, Inc. result, the NRC has concluded that the finding has low to moderate increased importance to safety (white), which may require additional NRC inspections. A detailed discussion of the basis for this-conclusion is presented in Enclosure 2.
You have 30 calendar days from the date of this letter to appeal the NRC staff's determination of significance for the identified white finding. Such appeals will be considered to have merit only if they meet the criteria given in NRC Inspection Manual Chapter 0609, Attachment 2.
In addition, the NRC has determined that this finding is also a violation of 10 CFR Part 50, Section III.G.2, and is cited in the enclosed Notice of Violation. The circumstances surrounding the violation were described in detail in the subject inspection report and in our letter to Mr. Craig G. Anderson, Vice President, Operations, Arkansas Nuclear One staff dated April 15, 2002. In accordance with'the NRC Enforcement Policy, NUREG-1 600, the Notice of Violation is considered escalated enforcement action because it is associated with a white finding.
In the short term, we believe it is appropriate for you to continue compensatory measures for all fire zones affected by this finding. Potential options for long term action for this matter may include: (1) your staff Implements plant modifications to restore compliance with 10 CFR Part 50, Appendix R, Section III.G.2 or Section III.G.3; (2) your staff requests an exemption to those regulations, which Include r the NRC to reach a safe conclusion on the exemto reuet You are required to respond to this letter and should follow the Instructions specified in the enclosed Notice of Violation when preparing your response. The NRC will use your response, in part, to determine whether further enforcement action is necessary to ensure compliance with regulatory requirements.
Because plant performance for this issue has been determined to be in the regulatory response band, we will use the NRC Action Matrix to determine the most appropriate NRC response for this finding. We will notify you, by separate correspondence, of that determination.
Entergy Operation, Inc. In accordance with 10 CFR 2.790 of the NRC's uRules of Practice," a copy of this letter and its enclosure will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's document system (ADAMS). ADAMS is accessible from the NRC Web site at httD://www.nrc.-ov/readinc-rmladams.html (the Public Electronic Reading Room).
Sincerely, Bruce S. Mallett Regional Administrator Dockets: 50-313; 50-368 Licenses: DPR-51; NPF-6
Enclosures:
- 2. Evaluation of Safety Significance, Arkansas Nuclear One Fire Zone 99-M, Unit 1 4KV Switchgear Room 1A4 cc w/enclosures:
Senior Vice President
& Chief Operating Officer Entergy Operations, Inc.
P.O. Box 31995 Jackson, MS 39286-1995 Vice President Operations Support Entergy Operations, Inc.
P.O. Box 31995 Jackson, MS 39286-1995 Manager, Washington Nuclear Operations
---ABB-Cor-b-u-st-Engine-e-rin N-c-a.-- -
Power 12300 Twinbrook Parkway, Suite 330 Rockville, MD 20852 County Judge of Pope County Pope County Courthouse 100 West Main Street Russellville, AR 72801
Entergy Operation, Inc. Winston & Strawn 1400 L Street, N.W.
Washington, DC 20005-3502 Bernard Bevill Radiation Control Team Leader Division of Radiation Control and Emergency Management Arkansas Department of Health 4815 West Markham Street, Mail Slot 30 Little Rock, AR 72205-3867 Mike Schoppman Framatome ANP, Inc.
Suite 705 1911 North Fort Myer Drive Rosslyn, VA 22209
Entergy Operation, Inc. Electronic distribution by RIV:
Regional Administrator (BSM1)
DRP Director (ATH)
DRS Director (DDC)
Senior Resident Inspector (RWD)
Branch Chief, DRP/D (JAC)
Senior Project Engineer, DRP/D (NLS)
Staff Chief, DRPITSS (PHH)
RITS Coordinator (NBH)
Debby Jackson, OEDO RIV Coordinator (DAJ1)
ANO Site Secretary (VLH)
OEMAIL Jennifer Dixon-Herrity, OE Rani Franovich, NRR Victor Dricks Bill Maier ADAMS: 0 Yes 0 Publicly Available O No Initials:
O Non-Publicly Available 0 Sensitive 0 Non-Sensitive R:Vano\\2004\\anO1-06&03-12final Itr.wpd_
I Tip E BX-.B 3
Ek P4E B !
>,BB E 5
Sr ES) pE)
$FiRERS41W_1 1-ES t
INease/Imb LSmith JClark TPruett 1Howell
,Sanborn
=_rln I
02/19/2004 02/
/2004 02/ /2004 02/ /2004 02/19/2004
/
/2004 I~G ~
~
~
NI~3 DIA-3-MOV03 '
KSmith JDixon-Herrityl DChamberlain TPGwynn BSMallett
/
/2004
/ /2004
/ /2004
/ /2004
/ /2004
/
/2004 OFFICIAL RECORD COPY T=Telephone E=E-mail F=Fax
ENCLOSURE 1 NOTICE OF VIOLATION Nebraska Public Power District Docket No. 50-313 Arkansas Nuclear One License No. DPR-51 EA-03-01 6 During an NRC inspection conducted June 11 - 22, 2001, and July 2 - 13, 2001, a violation of NRC requirements was identified. In accordance with the "General Statement of Policy and Procedure for NRC Enforcement Actions," NUREG-1 600, the violation is listed below:
10 CFR 50.48, "Fire protection," Section (b) states, 'Appendix R to this part establishes fire protection features required to satisfy Criterion 3 of Appendix A to this part with respect to certain generic issues for nuclear power plants licensed to operate before January 1, 1979.... With respect to all other fire protection features covered by Appendix R, all nuclear power plants licensed to operate before January 1, 1979, must satisfy the applicable requirements of Appendix R to this part, including specifically the requirements of Sections III.G, III.J, and III.O."
10 CFR Part 50, Appendix R, Paragraph III.G.2 states, 'Except as provided for in paragraph G.3 of this section, where cables or equipment, including associated non-safety circuits that could prevent operation or cause maloperation due to hot shorts, open circuits, or shorts to ground, of redundant trains of systems necessary to achieve and maintain hot shutdown conditions are located within the same fire zone outside of primary containment, one of the following means of ensuring that one of the redundant trains is free of fire damage shall be provided:
- a.
Separation of cables and equipment and associated non-safety circuits of redundant trains by a fire barrier having a 3-hour rating. Structural steel forming a part of or supporting such fire barriers shall be protected to provide fire resistance equivalent to that required of the barrier;
- b.
Separation of cables and equipment and associated non-safety circuits of redundant trains by a horizontal distance of more than 20 feet with no intervening combustible or fire hazards. In addition, fire detectors and an -automatic fire suppression system shall be installed in the fire area; or
- c.
Enclosure of cable and equipment and associated non-safety circuits of one redundant train in a fire barrier having a 1-hour rating. In addition, fire detectors_
-ii-d an autonidtic fire suppression system shall be installed in the fire area....
10 CFR Part 50, Appendix R, Paragraph III.G.3 states, "Alternative or dedicated shutdown capability and its associated circuits, independent of cables, systems or components in the area, room or zone under consideration, shall be provided:
- a.
Where the protection of systems whose function is required for hot shutdown does not satisfy the requirement of paragraph G.2 of this section; or..."
Contrary to this requirement, in Fire Areas 98J and 99M in Arkansas Nuclear One, Unit 1, the licensee failed to ensure that cables and equipment of redundant trains of systems necessary to achieve and maintain hot shutdown conditions were free of fire damage by one of the means specified in 10 CFR Part 50, Appendix R, Paragraph III.G.2, or by alternative means specified in 10 CFR Part 50, Appendix R, Paragraph III.G.3.
This violation is associated with a white significance determination process finding (50-31 3;368/01 06-02).
Pursuant to the provisions of 10 CFR 2.201, Entergy Operations, Incorporated is hereby required to submit a written statement or explanation to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555 with a copy to the Regional Administrator, Region IV, and a copy to the NRC Resident Inspector at the facility that is the subject of this Notice of Violation (Notice), within 30 days of the date of the letter transmitting this Notice. This reply should be clearly marked as a "Reply to a Notice of Violations and should include: (1) the reason for the violation, or, if contested, the basis for disputing the violation or severity level, (2) the corrective steps that have been taken and the results achieved, (3) the corrective steps that will be taken to avoid further violations, and (4) the date when full compliance will be achieved. Your response may reference or include previously docketed correspondence, if the correspondence adequately addresses the required response. If an adequate reply is not received within the time specified in this Notice, an order or a Demand for Information may be issued as to why the license should not be modified, suspended, or revoked, or why such other action as may be proper should not be taken.
Where good cause is shown, consideration will be given to extending the response time.
If you contest this enforcement action, you should also provide a copy of your response, with the basis for your denial, to the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001.
Because your response will be made available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRC's document system (ADAMS), to the extent possible, it should not include any personal privacy, proprietary, or safeguards information so that it can be made available to the public without redaction. ADAMS is accessible from the NRC Web site at http://www.nrc.pov/readin-rm/adams.html (the Public Electronic Reading Room). If personal privacy or proprietary information is necessary to provide an acceptable response, then please provide a bracketed opyof yo-ur r-esponseth idetifie 1/2iinfdiriafion that should be protected and a redacted copy of your response that deletes such information. If you request withholding of such material, you must specifically identify the portions of your response that you seek to have withheld and provide in detail the bases for your claim of withholding (e.g., explain why the disclosure of information will create an unwarranted invasion of personal privacy or provide the information required by 10 CFR 2.790(b) to support a request for withholding confidential commercial or financial information). If safeguards information is necessary to provide an acceptable response, please provide the level of protection described in 10 CFR 73.21.
Dated this _th day of March 2004
ENCLOSURE 2 Evaluation of Safety Significance Arkansas Nuclear One Fire Zone 99-M Unit 1 4KV Switchgear Room 1A4 Summary of Conclusions On August 20, 2001, the NRC issued Inspection Report 50-313/01-06; 50-368/01-06, which discussed a finding concerning the acceptability of the licensee's use of operator actions to remotely operate equipment necessary for achieving and maintaining hot shutdown, in lieu of providing protection to cables associated with that equipment, as a method of complying with 10 CFR Part 50, Appendix R, Section III.G.2.
In a letter dated March 25, 2003, (ML0308500610) the NRC informed the licensee that the increase in core damage frequency was preliminarily determined to be in the range of 7E-6/year to 2E-5lyear. During the regulatory conference conducted on July 10, 2003, the licensee provided the results of their safety significance determination. The licensee concluded that the increase in core damage frequency was approximately 4.9E-7/year.
On February 13, 2004, Senior Reactor Analysts (SRAs) and Fire Protection Specialists in Region IV and the Office of Nuclear Reactor Regulation completed a review of the licensee's uPost-Fire Manual Action Feasibility Assessment: A Phase 3 Significance Determination Process (SDP) Evaluation at Arkansas Nuclear One Unit 1," dated July 3, 2003 (ML0318909200); the information provided to the NRC during the July 10, 2003, Regulatory Conference (ML031990085); the licensee's letter dated August 11, 2003, "Request for Additional Information Regarding the July 10,2003, Fire Protection Regulatory Conference,"
(ML0323104630); and the licensee's letter dated November 21, 2003, "Request for Additional Information Regarding the July 10, 2003, Fire Protection Regulatory Conference,"
(ML0334906860).
Based on the review, the SRAs determined that this finding has low to moderate increased importance to safety (white).
Determination of Safety Significance The SRAs and Fire Protection Specialists identified several areas of uncertainty affecting influential assumptions during the review of the licensee's SDP analysis. The uncertainties were grouped into four major categories which included: (1) the human reliability estimation model, (2) human reliability analysis assumptions, (3) the fire growth behavior model, and (4) the core damage frequency-calculational.methodology. The SRAs determined that.these _
areas of uncertainty, each of which is discussed below, would increase the safety significance of the finding.
Human Reliability Estimation Model The licensee utilized EPRI TR-000259, uAn Approach to the Analysis of Operator Actions in Probabilistic Risk Assessment," to determine the human reliability estimates of operator actions in the postulated fire scenarios. The SRAs noted that the principal use of the EPRI TR-000259 methodology was for developing human error probability estimates for human actions in "internal event" sequences which required recovery actions to be completed in the main control
room. The application of the methodology for fire events which required operator actions outside the control room is not consistent with the intended purpose of the document.
The SRAs acknowledged that the EPRI TR-000259 methodology may be adapted to evaluate error probability estimates for human actions in ex-control room activities. Notwithstanding the possibility to modify the methodology, the SRAs and Fire Protection Specialists determined that the licensee's SDP analysis derived optimistic human error probabilities for scenarios that relied on operations personnel to implement the provisions of their previous fire procedures. The analysis did not fully consider the negative effects of inadequate procedures, spurious actuations, unreliable instrumentation, and an unpredictable scenario affecting the ability of operations personnel to respond to a fire in Fire Zone 99-M. By not fully considering the limitations associated with the methodology, the licensee introduced uncertainty in the derivation of the human error probabilities. The resolution of this uncertainty would result in less optimistic human error probabilities and an increase in the core damage frequencies for each evaluated scenario.
Human Reliability Analysis Assumptions The licensee's human reliability analysis did not fully integrate several key assumptions, such as, operator responses, the timing of required actions, shift staffing, and the accessibility of plant equipment.
The licensee's simulator was used to evaluate the ability of operations personnel to respond to a fire in Fire Zone 99-M. The use of the simulator implies that a degree of fidelity and predictability exists in evaluating the response of plant systems to a fire. The SRAs and fire protection specialists from the Office of Nuclear Reactor Regulation-determined that fire scenarios are unpredictable and that it would be difficujltto specify when plant components, indications, and controls would be rendered inoperable, actuate to a non-conservative position, or provide an erroneous indication. Consequently, the use of data from simulator exercises to reflect a reduced likelihood that operations personnel will fail to implement critical tasks introduced an uncertainty into the derivation of the human error probabilities. The resolution of this uncertainty would likely result in less favorable human error probabilities and an increase in the core damage frequency for each evaluated scenario.
The SRAs and Fire Protection Specialists noted that the time available to execute successful actions was dependent on the plant response to a fire in Fire Zone 99-M. More time would be available if automatic actuations occurred at the onset of the event. If automatic actuations were successful then a longer duration for completing recovery actions for subsequent failures would be reasonable. However, some fire scenarios would involve conditions where automatic actuations of equipment have failed and operations personnel would be required to perform manual actions outside of the main control room. The time durations available for successful recovery actions in these scenarios would be short, and these short time windows may challenge the time frames assumed in the licensee's thermal hydraulic analyses. By not evaluating scenarios where automatic actuations failed at the onset of the event, the licensee may have introduced uncertainty in the derivation of human error probabilities. The resolution of this uncertainty would likely result in less favorable human error probabilities and an increase in the core damage frequency for each evaluated scenario.
The licensee's SDP analysis specified that there were 4 licensed operators, 1 shift engineer, 2 auxiliary operators, and 1 waste control operator. The licensee's SDP analysis assumed that sufficient staffing was available to complete all of the required actions. The SRAs and Fire Protection Specialists noted that: (1) a fire in Fire Zone 99-M would require several ex-control room equipment manipulations, (2) one licensed operator and the shift engineer would likely be involved in implementation of the emergency response organization procedures, and (3) one auxiliary operator and the waste control operator would be assigned to the fire brigade. The remaining personnel available to operate plant equipment would be 1 auxiliary operator and 2 licensed operators. The SRAs had previously compared the actions described in the licensee's alternate shutdown procedures to the actions required for a fire in Fire Zone 99-M and determined that most of the actions described in the alternate shutdown procedures would need to be completed. The SRAs noted that 4 operators were required to implement the alternate shutdown procedures; however, only 3 operators would be available for operating plant equipment during a fire in Fire Zone 99-M. The inconsistency in the staffing levels between the alternate shutdown procedures and the previous procedures for a fire in Fire Zone 99-M may have resulted in uncertainty in the derivation of the human error probabilities. The resolution of this uncertainty would likely result in less favorable human error probabilities and an increase in the core damage frequency for each evaluated scenario.
The licensee's SDP analysis specified that the accessibility for the steam admission valve from Steam Generator A to the 7A emergency feedwater turbine was difficult. Given the timing of events and the added stress from responding to a plant fire, access to this valve could be delayed or an operator could be injured attempting to gain access to the valve location.
Additionally, the licensee's SDP analysis identified that breakers would need to be operated in areas adjacent to the affected Fire Zone 99-M. The SRAs noted that the fire brigade's path to the fire area was through the adjacent switchgear room areas. Operations personnel could have difficulty manipulating circuit-breakers due to the need to don a breathing apparatus, decreased visibility due to smoke from Fire Zone 99-M, and obstructed access from fire fighting equipment. The accessibility to plant equipment may have resulted in the introduction of uncertainty in the derivation of human error probabilities. The resolution of this uncertainty would likely result in less favorable human error probabilities and an increase in the core damage frequency for each evaluated scenario.
Fire Growth Behavior Model The licensee's CFAST (Consolidated Fire and Smoke Transport) modeling of fire growth behavior for fire scenarios affecting cable trays located in Fire Zone 99-M was based on a fire source ignition at a height of 8 feet above the floor, which is representative of a fire on top of the switchgear cabinets. The SRAs and Fire Protection Specialists found that the licensee's fire modeling assumptions did not include air entrainment into the compartment for the fire scenarios with fire doors fully open; therefore, the licensee's fire modeling analysis showed the peak heat release rates and hot gas layer temperatures to be decreasing rapidly in all fire scenarios. Since air entrainment in all directions would be expected for a worst case fire scenario involving an elevated cable tray fire in Fire Zone 99-M, the non-consideration of this assumption in the licensee's CFAST model would lead to an under-prediction of fire growth behavior. This under-prediction contributes to the uncertainty associated with estimating the time to fire damage states. The resolution of this uncertainty would likely result in less optimistic times for executing feasible manual actions to successfully achieve safe shutdown of the plant in the postulated scenarios. This would result in an increase in the core damage frequency estimates for each evaluated scenario.
The SRAs and Fire Protection Specialists also found additional examples of assumptions in the licensee's CFAST model that would contribute to uncertainties in the fire modeling analysis results. These examples include the use of lower heat release rates for electrical cabinet fires (1 OOkW versus 500-1 OOOkW for energetic fires), higher hot gas layer temperature for cable damage (7001F versus 6250F for Thermoset cables), and a low flame spread rate (10 feet/hour) for energetic fires. Furthermore, the licensee used the CFAST code to analyze fire growth behavior of explosive (or energetic) fires. This application is beyond the capabilities of the CFAST code, and results in a less realistic approximation of fire growth behavior. The SRAs and Fire Protection Specialists concluded that the licensee's use of the CFAST code would result in more uncertainties of the fire modeling results. This would result in an increase in the core damage frequency estimates for each evaluated scenario.
Core Damage Frequency Calculational Methodology-The licensee's calculational methodology for estimating the core damage frequency value included an additional term to credit the explosion factor for the energetic fire scenarios.
However, this term was applied independently of the fire severity factor that was already included in the fire risk equation used in determining the core damage frequency estimate. The use of the explosion factor term resulted in "double counting" the credit for the fire severity effects of the fire scenario and lowered the core damage frequency estimates for the overall significance analysis. The removal of the explosive factor term from the calculational methodology would result in an increase in the core damage frequency estimates for each evaluated scenario.
The SRAs and Fire Protection Specialists noted that there was an optimistic assumption of manual suppression probability in one of the fire scenarios where the estimated time to fire damage to primary equipment targets was significantly shorter than the expected time for fire brigade arrival and response. This resulted in a lower failure probability estimate for manual suppression being used in the licensee's calculational methodology. In addition, the SRAs and Fire Protection Specialists also noted that there were uncertainties in the actual number of electrical cabinets and switchgear rooms used in the derivation of weighting factors for the fire ignition source frequency estimates. The resolution of these uncertainties would result in an increase in the core damage frequency estimates for each evaluated scenario.
The licensee's SDP analysis estimated the total increase in the Unit 1 core damage frequency was approximately 4.9E-7/year. The estimate was derived from a calculation of the increase in _
co-re idarmiage frequency for fire scenarios in Fire Zone 99-M (2.2E-7/year) and a qualitative assessment of core damage frequency increases due to fires in Fire Zone 1 OON (2.2E-7/year) and Fire Zone 104S (4.4E-8/year). Although not mentioned in the licensee's SDP analysis, there were 7 other fire zones in Unit 1 for which the licensee credits the use of manual operator actions in lieu of meeting the physical protection requirements of 10 CFR Part 50, Appendix R, Section III.G.2. If quantified, each of the fire zones would result in an increase in the core damage frequency.
Conclusions The licensee's SDP analysis did not fully evaluate several areas of uncertainty involving: (1) the human reliability estimation model, (2) human reliability analysis assumptions, (3) the fire growth behavior model, and (4) the core damage frequency calculational methodology. A more detailed quantitative analysis addressing these uncertainties would result in an increase in the core damage frequency associated with the failure to provide protection to cables and equipment necessary to achieve and maintain hot shutdown.
The NRC's original Phase 3 assessment determined that the range of estimated core damage frequencies was between 7E-6/year and 2E-5/year. The additional information provided in the licensee's SDP analysis was useful in determining that the finding should not be characterized as having greater than low to moderate safety significance (greater than white). The SRAs determined that a more detailed quantification of the uncertainties identified in the licensee's SDP analysis would provide results that are consistent with the original NRC Phase 3 SDP analysis. The licensee's input data used in the derivation of human error probabilities, the identification of affected plant equipment, and fire modeling assumptions; combined with the reviews completed by NRC analysts, provided sufficient information to conclude that the finding should be characterized as having low to moderate safety significance (white).
SERP Worksheet for SDP-Related Findings IMC 0609 Exhibit 4 of Att 1 SERP Date:
January 23, 2003 Cornerstone Affected and Proposed Preliminary Results:
This finding affects the Mitigating Systems Cornerstone, because it affects the objective to ensure the availability, reliability, and capability of systems that respond to an external event (fire) to prevent undesirable consequences. Specifically, the licensee's ability to achieve and maintain hot shutdown conditions in the event of a fire in Fire Areas 98J and 99M is affected by the lack of separation of redundant trains of safe shutdown systems in accordance with 10 CFR Part 50, Appendix R, Section Ill.G.2.
Licensee:
Entergy Operations, Inc.
Facility/Location:
Docket No(sl:
License No(s):
Inspection Report No:
Date of Exit Meeting:
Arkansas Nuclear One 50-313 and 50-368 DPR-51, NPF-6 2001-06 August 21, 2001-final exit meeting pending Issue Sponsor:
Meeting Members:
Issue Sponsor:
Technical Spokesperson:
Program Spokesperson:
OE Representative:
Dwight Chamberlain Dwight Chamberlain NRR Probabilistic Safety Assessment Office Branch NRR Inspection Program Branch Jennifer Dixon-Herrity A.' - -- ~Brief Des-cription ofIssud-e -- ~--
ANO Unit 1 fire zones for the diesel generator corridor (Fire Zone 98J) and the north electrical switchgear (Fire Zone 99M) room did not meet separation requirements for electrical cables associated with redundant trains of safe shutdown equipment. In addition, the licensee did not have adequate procedures for the manual actions necessary to achieve safe shutdown (Section 1 R05.3 of Reference 1).
1
B.
Statement of the Performance Deficiency As a method for complying with 10 CFR Part 50, Appendix R, Section III.G.2, the licensee credited the use of manual actions to locally operate equipment necessary for achieving and maintaining hot shutdown, in lieu of ensuring cables associated with that equipment were free of fire damage as required by 10 CFR Part 50, Appendix R, Section III.G.2. The licensee credited a symptom-based approach which relied on the operator's ability to detect each failure or mat-operation as it occurred and perform manual actions as necessary to mitigate the effects of the failure or mal-operation. Due to the number of components that may be affected as a result of fire and uncertainty regarding the timing and synergistic impact that potential failures may have on the operator's ability to accomplish required shutdown functions, the inspection team determined that the strategy for implementing manual actions to mitigate a postulated fire were inadequate (Reference 1).
C.
Significance Determination Basis
- 1.
Reactor Inspection for IE, MS, B cornerstones
- a.
Phase 1 screening logic, results and assumptions The team determined that a SDP Phase 2 analysis using MC 0609 Appendix F was required because the issue involved fire protection defense in depth function. (Reference 2).
- b.
Phase 2 Risk Evaluation Depending on the assumptions (made by the licensee and/or NRC staff), the results of the Phase 2 analysis could vary between Green and Red. Region IV determined that a SDP Phase 3 analysis was required and submitted TIA 01 TIA1 1 to NRR. (Reference 2)
The Phase 2 analysis was shown to be particularly sensitive to human recovery.
In addition, the baseline CDF changed significantly with revised heat release rates.
List dominant affected accident sequences by Initiator, In order of contribution, and each sequence's numerical contribution.
The SDP Phase 2 results, using conservative assumptions, for the finding pertaining to Fire Zone 98J resulted in 7 yellow sequences, 16 white sequences, and 5 green-next-to-white sequences. The SDP Phase 2 results for the finding pertaining to Fire Zone 99M resulted in 1 yellow, 15 white, and 0 green-next-to-white sequences. Optimistic assumptions (lower ignition frequency and additional credit for restoration of some functions) could result in a much lower significance determination for both fire zones. (Reference 2) 2
A table attached to the Phase 2 analysis summarizes the equipment affected in each fire zone. Multiple redundant trains of mitigating equipment were determined to be affected (main feedwater, high pressure injection, emergency AC power, and emergency feedwater). In reviewing the results of each sequence, it was concluded that the significance of the finding was attributed to a failure of emergency feedwater and feed and bleed capability, assuming no credit for operator recovery actions. (Reference 2) l List any pertinent assumptions under each initiator group (A risk analyst should review and verify that Phase 2 process was followed correctly and that the results are reasonable.)
A senior reactor analyst reviewed the Phase 2 results and determined that the assumptions involving the ignition frequency, operator recovery actions, fire severity factors, and fire suppression required detailed fire modeling of the affected areas and a human reliability analysis for the recovery actions. A complete discussion of the assumptions used in the Phase 2 analysis is provided in Reference 2.
Attach applicable Phase 2 Worksheets See Reference 2.
List any confirmatory checks made using licensee risk Information, SPAR model results, or other source of risk insights.
- 1.
A Revision 3i SPAR model has not been developed for ANO Unit 1.
- 2.
ANO Calculation 95-E-0066-01, Revision 2, "ANO-2 IPEEE P2 Values"
- 3.
ANO Calculation 95-E-0066-02, Revision 2, ANO-1 IPEEE P2 Values'
- 4.
- 5.
ANO Fire Hazards Analysis
- 6.
ANO White Paper regarding ignition source frequencies
- 7.
ANO Calculation 02-E-0004-01, 'Zone 99-M PSA Analysis for Operator Action SDP"
- 8.
ANO Calculation 02-E-0004-02, Zone 98-J PSA Analysis for Operator Action SDP"
- 9.
NRC Memorandum from E. W. Weiss to M. Reinhart, "Fire Hazard Analysis for Fire Zone 98-J, Emergency Diesel Generator Corridor and Fire Zone 99-M, North Electrical Switchgear-Roomi Arkansas Nuclear- -
One, Unit I (TAC No. MB2872)," dated May 28, 2002
- 10.
NRC Memorandum from E. W. Weiss to M. Reinhart, "Supplemental Fire Modeling for Fire Zone 98-J, Emergency Diesel Generator Corridor and Fire Zone 99-M, North Electrical Switchgear Room, Arkansas Nuclear One, Unit 1 (TAC No. MB2872)," dated July 18, 2002
- 11.
ANO Unit 1 and Unit 2 Updated Safety Analysis Reports Note any differences and an evaluation of their effect on this determination.
3
- 1.
The licensee used lower heat release rates (70-200 KW) in assessing the potential for fire damage in the affected fire zones. The licensee also utilized the FIVE methodology for the derivation of the fire duration and severity. Because the time to reach critical temperatures was more than 20 minutes, the licensee assumed that manual fire suppression would be successful. However, the licensee's PSA analysts did not credit manual suppression capability in the determination of the CCDP results. The lower heat release rate also resulted in a determination by the licensee that a fire in Fire Zone 99-M would not simultaneously affect the EFW and HPI functions. Source documents used by the licensee included the EPRI Fire PRA Implementation Guide (EPRI TR-1 05928), Methods of Quantitative Fire Hazards Analysis (EPRI TR-10043), and EPRI Report SU-105928, "Supplemental to EPRI Fire Implementation Guide (TR-1 05928)." (Reference 7)
- 2.
The NRC used higher heat release rates (200-500 KW) and the CFAST model to assess fire duration and fire severity. Consequently, the time to reach critical temperatures was quicker and the likelihood for success of manual suppression capabilities was reduced. Additionally, the heat release rates would result in an increased likelihood that both the EFW and HPI functions would be affected by a fire in Zone 99-M. Several additional source documents were listed in the fire hazards analysis completed by NRR. (References 10 and 11)
- c.
Phase 3 Analysis (if necessary)
Concisely address each of the analysis aspects that follow.
PRA tools used:
- 1.
NRR completed a fire hazards analysis using the CFAST model.
(References 10 and 11)
- 2.
NRR requested that the licensee provide additional information involving the ignition frequencies and the CCDP for a fire with and without operator recovery actions. (References 7, 8, and 9)
- 3.
INEEUEXT-99-0041, "Revision of the 1994 ASP HRA Methodology (Draft)," January 1999, was used to complete a human reliability screening analysis for the manual operator actions. (Reference 13).
- 4.
A qualitative assessment of similarly affected areas was completed.
Based on the assessment, the analysts determined that the added risk from the remaining fire areas may warrant an increase in the final SDP result from White to Yellow. (Reference 14)
Affected sequences:
4
Multiple redundant trains of mitigating equipment were determined to be affected (main feedwater, high pressure injection, emergency AC power, and emergency feedwater). In reviewing the results of each sequence, it was concluded that the significance of the finding was attributed to a failure of emergency feedwater, and feed and bleed capability, assuming no credit for operator recovery actions.
Influential assumptions:
- 1.
The human error probability for successful recovery of failed equipment due to the symptomatic operator response to a fire in the affected areas and the large number of operator actions. (Reference 13)
- 2.
The heat release rate associated with the fire and corresponding failure probability associated with manual fire suppression. (References 7, 10, and 11)
Sensitivity of results to each Influential assumption:
- 1.
Lowering the human error probability directly impacts the CCDP portion of the CDF calculation. Several sensitivity analyses were completed using a wide spectrum of HEP values. Additionally, the NRC analysts noted that the licensee's HRA values were derived for a non-fire event.
Therefore, the NRC analysts increased the base HEP values for the affected recovery actions. The net increase in the CDF can then be attributed to the failure to provide adequate alternate shutdown procedures for a fire in Zone 99-M.
- 2.
A reduction in the heat release rate would extend the time required to reach critical temperatures. An extension in the time to reach critical temperatures to beyond 20 minutes would result in fewer affected components and lower the failure probability for manual fire suppression.
Contributions of greatest uncertainty factors and Impact on assumptions:
An uncertainty analysis was not completed. Descriptions of the influential factors affecting the analysis are described above. The reference documents also include additional assumptions and limitations.
Previous similar analyses: N/A Proposed preliminary or final color: Yellow.
A wide spectrum of sensitivity analyses were completed by requesting that the licensee calculate CCDP values which corresponded to various combinations of HEPs. The analysts determined that the calculated increase in CDF for Fire Zone 99-M was in the range of 7E-6 to 2E-5. The analyst qualitatively determined that an additional Increase in the CDF was warranted due the existence of additional fire zones at the facility which also credited the use of 5
operator recovery actions. The increase in the CDF from these additional fire zones warranted a proposed significance determination of Yellow. (References 14 and 15)
- 2.
All Other Inspection Findings (not IE, MS, B cornerstones): NONE D.
Proposed Enforcement.
- a.
Regulatory requirement not met.
10 CFR 50.48, Section (b) and 10 CFR Part 50, Appendix R, Sections III.G.2, Ill.G.3, and lll.L.
- b.
Proposed citation.
During an NRC triennial fire protection inspection conducted on June 11 - 15, 2001, at Arkansas Nuclear One, Unit 1, the following violation of NRC requirements was identified. Note that ANO-1 was licensed prior to January 1, 1979; therefore, was required to meet 10 CFR Part 50, Appendix R, Section Il.G.
10 CFR 50.48, uFire protection," Section (b) states, "Appendix R to this part establishes fire protection features required to satisfy Criterion 3 of Appendix A to this part with respect to certain generic issues for--
nuclearpowerplants licensed to operate before January 1, 1979.... With respect to all other fire protection features covered by Appendix R, all nuclear power plants licensed to operate before January 1, 1979, must satisfy the applicable requirements of Appendix R to this part, including specifically the requirements of Sections Ill.G, 11W.J, and IlO.'
10 CFR Part 50, Appendix R, Paragraph IIL.G, "Fire protection of safe shutdown capability," states,
- 1.
'Fire protection features shall be provided for structures, systems, and components important to safe shutdown. These features shall be capable of limiting fire damage so that:
- a.
One train of systems necessary to achieve and maintain hot shutdown conditions from either the control room or emergency control station(s) is free of fire damage; and
- b.
Systems necessary to achieve and maintain cold shutdown from either the control room or emergency control station(s) can be repaired within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.
- 2.
Except as provided for in paragraph G.3 of this section, where cables or 6
equipment, including associated non-safety circuits that could prevent operation or cause maloperation due to hot shorts, open circuits, or shorts to ground, of redundant trains of systems necessary to achieve and maintain hot shutdown conditions are located within the same fire area outside of primary containment, one of the following means of ensuring that one of the redundant trains is free of fire damage shall be provided:
- a.
Separation of cables and equipment and associated non-safety circuits of redundant trains by a fire barrier having a 3-hour rating.
Structural steel forming a part of or supporting such fire barriers shall be protected to provide fire resistance equivalent to that required of the barrier;
- b.
Separation of cables and equipment and associated non-safety circuits of redundant trains by a horizontal distance of more than 20 feet with no intervening combustible or fire hazards. In addition, fire detectors and an automatic fire suppression system shall be installed in the fire area; or
- c.
Enclosure of cable and equipment and associated non-safety circuits of one redundant train in a fire barrier having a 1-hour rating. In addition, fire detectors and an automatic fire suppression system shall be installed in the fire area;...
- 3.
Alternative or dedicated shutdown capability and its associated circuits, independent of. cables, systems or components in the area, room or zone under consideration, shall be provided:
- a.
Where the protection of systems whose function is required for hot shutdown does not satisfy the requirement of paragraph G.2 of this section; or...'
Contrary to the above, in Fire Zones 98J and 99M in Unit 1, the licensee failed to ensure that cables of redundant trains of systems necessary to achieve and maintain hot shutdown conditions were free of fire damage by one of the means specified in 10 CFR Part 50, Appendix R, Paragraph III.G.2, or by alternative means specified in III.G.3.
Specifically, in Unit 1, Fire Zone-98J1the-licenseb did not erisure that cabies associated with redundant trains of the following equipment necessary to achieve and maintain hot shutdown were free of fire damage, and did not provide alternative shutdown capability:
control cables for emergency diesel generators; control cables for emergency diesel generator lock-out relays and output breakers; control cables for emergency feedwater system pumps; 7
control cables for service water system valves to emergency diesel generator jacket water cooling; a
control cables for service water system pumps and valves; make-up system pumps and valves; control cables for steam generator atmospheric dump and block valves; and control cables for pressurizer emergency relief and block valves.
In addition, in Unit 1, Fire Zone 99M, the licensee failed to ensure that cables associated with redundant trains of the following equipment necessary to achieve and maintain hot shutdown were free of fire damage, and did not provide alternative shutdown capability:
power and control cables for service water system pumps; emergency diesel generator output breaker 4KA; control cables for emergency diesel generator output breaker 4KB; control and instrument cables for emergency feedwater system pumps; control cables for emergency feedwater system valves; power and control power cables for make-up system pumps.
- c.
Historical precedent. None E.
Determination of Follow-up Review
-For White findings propose whether HQs (NRR and/or OE) should review final determination letter before issuance. (For greater than White findings review and concurrence by NRR and OE is required as discussed in Section 4b.)
HQ should review the final determination letter before issuance.
F.
References
- 1.
NRC Inspection Report 50-313; 368/01-06 dated August 20, 2001 (ML012330501)
- 2.
Task Interface Agreement - Request for Risk Determination of Fire Protection Findings at Arkansas Nuclear One, Unit 1 (01TIAI1), dated September 10, 2001 (ML012530361)
- 3.
ANO Calculation 95-E-0066-01, Revision 2, "ANO-2 IPEEE P2 Values"
- 4.
ANO Calculation 95-E-0066-02, Revision 2, ANO-1 IPEEE P2 Values"
- 5.
- 6.
ANO FIRE Hazards Analysis
- 7.
ANO White Paper regarding Ignition Source Frequencies 8
- 8.
ANO Calculation 02-E-0004-01, "Zone 99-M PSA Analysis for Operator Action SDP"
- 9.
ANO Calculation 02-E-0004-02, Zone 98-J PSA Analysis for Operator Action SDP"
- 10.
NRC Memorandum from E. W. Weiss to M. Reinhart, "Fire Hazard Analysis for Fire Zone 98-J, Emergency Diesel Generator Corridor and Fire Zone 99-M, North Electrical Switchgear Room, Arkansas Nuclear One, Unit 1 (TAC No. MB2872)," dated May 28, 2002 (ML012330501)
- 11.
NRC Memorandum from E. W. Weiss to M. Reinhart, "Supplemental Fire Modeling for Fire Zone 98-J, Emergency Diesel Generator Corridor and Fire Zone 99-M, North Electrical Switchgear Room, Arkansas Nuclear One, Unit 1 (TAC No. MB2872)," dated July 18,2002 (ML021990405)
- 12.
ANO Unit 1 and Unit 2 Updated Safety Analysis Reports
- 13.
NRC analyst human reliability screening analysis (RIV S:\\DRS\\PRA\\.ANO\\99M FIRE ANALYSIS\\FIRE HRA.WPD)
- 14.
NRC analyst qualitative assessment of remaining fire zones in Unit 1 and Unit 2 (RIV S:\\DRS\\PRAVANO\\99M FIRE ANALYSIS\\ANO MATRIX.WPD)
- 15.
NRC analyst sensitivity analysis for Fire Zone 99-M (RIV S:\\DRS\\PRAVANO\\99M FIRE ANALYSIS\\SENSITIVITY ANALYSIS.WPD and RIV S:\\DRS\\PRA\\.ANO\\99M FIRE ANALYSIS\\ANO SDP CALC DATA.XLS) 9