ML103210019
| ML103210019 | |
| Person / Time | |
|---|---|
| Site: | Watts Bar  |
| Issue date: | 10/31/2010 |
| From: | Menard D Westinghouse |
| To: | Office of Nuclear Reactor Regulation |
| References | |
| WNP-AR-00180-WBT-NP, Rev 0 | |
| Download: ML103210019 (45) | |
Text
Attachment 2 TVA Letter Dated November 5, 2010 Description of Commitments and Requested Vendor Documents Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects, "Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System" (Nonproprietary), WNA-AR-001 80-WBT-NP, Revision 0, dated October 2010
- Westinghouse Westinghouse Non-Proprietary Class 3 Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System WNA-AR-00180-WBT-NP, Rev. 0 October 2010 APPROVALS Function Name and Signature Author Dennis N. Menard*
Principal Engineer, Operations Plant Safety Systems I Verifier Allen C. Denyer*
Principal Engineer, Operating Plant Safety Systems 1 Reviewer David R. Ellis, Jr.*
Project Manager, Common Q PAMS Approver Mesut B. Uzman*
Product Manager, Field Programmable Gate Array Platfornm Engineering &
Systems
- Electronically approved records are authenticated in the electronic document management system.
t 2010 Westinghouse Electric Company LLC All Rights Reserved
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System LIST OF CONTRIBUTORS Revision Name and Title 0 Jenna L. Tyger Technical Editor, Technical Communications Template Version 2.2 WNA-AR-00180-WBT-NP, Rev. 0 i Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REVISION HISTORY RECORD OF CHANGES Document Number Revision Author Description Completed WNA-AR-00180-WBT 0 Dennis Menard Initial Issue See EDMS WNA-AR-001 80-WBT-NP 0 Dennis Menard Added brackets to indicate See EDMS Proprietary information.
DOCUMENT TRACEABILITY & COMPLIANCE Created to Support the Following Document(s) Document Number Revision N/A OPEN ITEMS Item Description Status None.
WNA-AR-00180-WBT-NP, Rev. 0 ii Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System TABLE OF CONTENTS Section Title Page LIST O F CON TRIBU TO R S ................................................................................
REV ISIO N H ISTO RY ................................................................................................ ii TA B LE OF CON TEN TS ............................................................................................ ii LIST O F TABLES ...................................................................................................... iv LIST O F FIGU RE S ............................................................................................... iv A CRO N YM S AN D TRA D EM AR KS....................................................................... v GLO SSA RY O F TERM S ................. ..... ...................................... Vi REFEREN CES .......................................................................................................... vii SECTION 1 IN TRO DU CTION ................................................................................................... 1-1 1.1 PURPO SE ................................................................................................................... 1-1 1.2 SCOPE ....................................................................................................................... 1-1 SECTION 2 SY STEM D ESCRIPTION ..................................................................................... 2-1 2.1 SY STEM A RCH ITECTUR E ................................................................................ 2-1 2.2 SY STEM D ESCRIPTIO N ...................................................................................... .2-2 2.3 COMPARISON OF WB2 PAMS TO COMMON Q ................................................. 2-10 SECTION 3 FAILURE MODES AND EFFECTS ANALYSIS................................................... 3-1 SECTION 4 CO NCLU SION ....................................................................................................... 4-1 Rev. 00 iii Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP. Rev.
WNA-AR-00180-WBT-NP, iii Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (F'IFMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System TABLE OF CONTENTS (cont.)
LIST OF TABLES Table Title Pag*e Table 3-1 W B 2 PA M S FMEA ................................................................................................. 3-2 LIST OF FIGURES Figure Title Pag_,e Figure 2.1-1 PAMS Two Channel Block Diagram ......................................................................... 2-7 Figure 2.1-2 Relationship of Individual Systems for Watts Bar Unit 2 PAMS .......................... 2-8 Figure 2.2-1 Watts Bar PAMS BlockDiagram 2-9 2......................................
Rei~. 00 iv Westinghouse Non-Proprietary Class 3 WNA-AR-OO18O-WBT-NP. Rev.
WNA-AR-00180-WBT-NP, iv Westinghouse Non-Proprictary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System ACRONYMS AND TRADEMARKS Acronyms used in the document are defined in WNA-PS-000I6-GEN, "Standard Acronyms and Definitions" (Reference 6), or included below to ensure unambiguous understanding of their use within this document.
Acronym Definition AC 160 Advant Controller Series 160 AFIOO Advant Fieldbus 100 CET Core Exit Thermocouples CETMS Core Exit Thermocouple Monitoring System Common Q Common Qualified Platform D/P Differential Pressure FE Function Enable FMEA Failure Modes and Effects Analysis FPD Flat Panel Display HJTC Heated Junction Thermocouple ICCMS Inadequate Core Cooling Monitoring System MCR Main Control Room MTP Maintenance and Test Panel OM Operator's Module PAMS Post Accident Monitoring System PPS Plant Protection System RVL Reactor Vessel Level RVLMS Reactor Vessel Level Monitoring System SLE Software Load Enable SMM Subcooled Margin Monitor SPDS Safety Parameter Display System T/C Thermocouple TVA Tennessee Valley Authority WB2 Watts Bar Unit 2 WDT Watchdog Timer, located on AC 160 PM646A module Advantis a registered trademark of ABB Process Automation Corporation.
Microsoft and Windows are registered trademarks of Microsoft Corporation in the United States and/or other countries.
All other product and corporate names used in this document may be trademarks or registered trademarks of other companies, and are used only for explanation and to the owners' benefit, without intent to infringe.
WNA-AR-00180-WBT-NP, Rev. 0 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System GLOSSARY OF TERMS Standard terms used in the document are defined in WNA-PS-0001 6-GEN, "Standard Acronyms and Definitions" (Reference 6), or included below to ensure unambiguous understanding of their use within this document.
Term Definition None.
WNA-AR-00180-WBT-NP, Rev. 0 vi AWestinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System REFERENCES Following is a list of references used throughout this document.
- 1. WCAP-16097-P-A, Rev. 0, "Common Qualified Platform Topical Report," Westinghouse Electric Company LLC.
- 2. WCAP-16097-P-A, Rev. 0, "Common Qualified Platform Topical Report Post Accident Monitoring Systems," Appendix 1, Westinghouse Electric Company LLC.
- 3. WNA-DS-01617-WBT, Rev. I, "Post Accident Monitoring System - System Requirements Specification," Westinghouse Electric Company LLC.
- 4. ANSI/IEEE 352-1987, "IEEE Guide for General Principles of Reliability Analysis of Nuclear Power Generating Stations Safety Systems," American National Standards Institute/Institute of Electrical and Electronics Engineers, 1987.
- 5. 00000-ICE-30156, Rev. 07, "System Requirements Specification for the Common Q Post Accident Monitoring System," Westinghouse Electric Company LLC.
- 6. WNA-PS-00016-GEN, Rev. 5., "Standard Acronyms and Definitions," Westinghouse Electric Company LLC.
(Last Page of Front Matter)
WNA-AR-00180-WBT-NP, Rev. 0 vii Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 1 INTRODUCTION 1.1 PURPOSE WCAP-16097-P-A, "Common Qualified Platfori Topical Report Post Accident Monitoring Systems,"
(Reference 1), includes several system-specific Appendices. One of these, designated Appendix 1, applies to the Post Accident Monitoring System (Reference 2). It provides a generic Failure Modes and Effects Analysis (FMEA) for the standard solution. In their Safety Evaluation Report (SER), the United States Nuclear Regulatory Commission (USNRC) stated that this generic FMEA is acceptable as a model for such analysis, but that the licensee must prepare its plant-specific model for the design to be implemented and perform the FMEA for that application. This document contains the plant-specific FMEA for the Watts Bar Unit 2 (WB2) Post Accident Monitoring System (PAMS).
1.2 SCOPE This FMEA includes the equipment in the replacement PAMS and its supporting power supply. Sensors are included only to the extent of the effects of loss of their signals as inputs to the system.
This FMEA is done in accordance with the guidance provided in ANSI/IEEE Standard 352-1987.,
"IEEE Guide for General Principles of Reliability Analysis of Nuclear Power Generating Stations Safety Systems" (Reference 4).
(Last Page of Section 1)
WNA-AR-00180-WBT-NP, Rev. 0 1-1 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 2 SYSTEM DESCRIPTION 2.1 SYSTEM ARCHITECTURE The WB2 PAMS is described in WNA-DS-01617-WBT, "Post Accident Monitoring System - System Requirements Specification" (Reference 3). PAMS is a Class IE safety-related alarm and display system consisting of two independent trains of equipment (Trains A and B) which acquire and process two trains of inputs. The trains are physically separated and electrically isolated from each other. Each train of the WB2 PAMS comprises two Advant'*" Controller 160 (AC1 60) racks located in one cabinet. Figure 2.1-1 shows the configuration of the PAMS.
For each train, the primary AC 160 rack contains a processor that processes all incoming core exit thermocouple (CET), subcooled margin monitoring (SMM), and reactor vessel level (RVL) signals. The processor receives inputs from its input cards. The processor performs input processing and algorithms and sends the outputs to its output cards and over the Advant Fieldbus 100 (AF100) to the operator's module (OM) in the main control room (MCR) and the maintenance and test panel (MTP) located in the associated PAMS cabinet. The MTP has an Ethernet port that provides the capability to send data to the plant computer.
The OM is used to provide various display pages to the operator. The OM uses the flat panel display system (FPDS), which consists of a PC node box, an FPD with touch screen capability, a standard AF 100 communication interface for communication to the processor module, and a power supply.
The OM and MTP receive the signals to be displayed over the AF 100 from the PAMS processors.
The MTP doubles as a local operator display, and has additional capability for performing system maintenance. The WB2 PAMS allows setpoint changes and signal bypasses from both the OM and MTP.
The WB2 PAMS requirements have been built upon the generic system requirements for the Common Qualified platform (Common Q) Phase 3 PAMS specified in 00000-ICE-30156, "System Requirements Specification for the Common Q Post Accident Monitoring System" (Reference 5).
The general relationship of the individual systems for WB2 PAMS are described as follows and provided in Figure 2.1-2.
- The reactor vessel level monitoring system (RVLMS) monitors reactor vessel head differential pressure, lower range differential pressure, and dynamic range differential pressure to measure reactor coolant level in the vessel.
- The core exit thermocouple monitoring system (CETMS) monitors CET temperatures to detect and alarm inadequate core cooling (ICC) conditions.
- The SMM uses the representative CET temperature, reactor coolant system (RCS) pressure, and the maximum RCS hot leg temperature to calculate saturation margins.
WNA-AR-00180-WBT-NP, Rev. 0 2-1 Westinghouse Non-Proprietan, Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Each train of WB2 PAMS provides the combined functions of the inadequate core cooling monitoring system (ICCMS) (i.e,, SMM, CETMS, and RVLMS).
Figure 2.1-2 shows the functional relationship between the ICCMS components.
2.2 SYSTEM DESCRIPTION The WB2 PAMS, based on the application of the Class IE Common Q platform, will replace the existing ICCMS (ICCM-86). This digital-to-digital replacement will calculate subcooled margin and RVL, process core exit temperatures, and provide key data to the control room via the FPDS.
The WB2 PAMS provides safety grade processing of instruments used to detect the approach to, the existence of, and the recovery from an ICC event and display such information to the operator in the control room. The WB2 PAMS is based on the requirements in WCAP-16097-P-A, "Common Q Topical Report Post Accident Monitoring Systems," Appendix 1 (Reference 2) with one significant difference.
The WB2 PAMS is deploying a different design for RVL monitoring (reactor vessel level indication system [RVLIS]) from that described in the Common Q Topical Report. The Common Q Topical Report describes a RVLMS using the heated junction thermocouple (HJTC) technology. The WB2 PAMS will instead employ a RVL monitoring function based on the requirements and instrumentation used in Watts Bar Unit I (WB 1). The WB2 PAMS will monitor three reactor vessel differential pressure inputs to measure reactor coolant level in the vessel: upper range differential pressure, lower range differential pressure, and dynamic range differential pressure.
Each PAMS train:
WNA-AR-00180-WBT-NP, Rev. 0 2-2 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Ii
]a~c 2-3 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev. 00 WNA-AR-OO18O-~VBT-NP, Rev. 2-3 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System I
Sa
.c qýý
+
4 i WNA-AR-00180-WBT-NP, Rev. 0 2-4 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System ac
+
I WNA-AR-00180-WBT-NP, Rev. 0 2-5 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System
[
Note Only the system trouble alarm contact output is used for WB2. All alarm digital outputs are sent to the plant computer over the digital datalink.
Figure 2.2-1. depicts the PAMS inputs and outputs in more detail.
WNA-AR-00180-WBT-NP, Rev. 0 2-6 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I.&C Projects for the Post Accident Monitoring System a,c Figure 2.1-1. PAMS Two Channel Block Diagram Rev. 00 2-7 Westinghouse Non-Proprietary Class 3 WNA-AR-OO18O-WBT-NP. Rev.
WNA-AR-00180-NVBT-NP, 2-7 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System ac Figure 2.1-2. Relationship of Individual Systems for Watts Bar Unit 2 PAMS 2-8 ~Vestinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rei'.
WNA-AR-00180-WBT-NP, Rev. 00 2-8 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System axc Figure 2.2-1. Watts Bar PAMS Block Diagram WNA-AR-00180-WBT-NP, Rev. 0 2-9 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System 2.3 COMPARISON OF WB2 PAMS TO COMMON Q The WB2 PAMS performs the inadequate core coolant monitoring (ICCM) functions defined in the generic Common Q PAMS Topical Report Appendix (Reference 2). The WB2 maintains the same failure responses defined in the Common Q PAMS implementation to the extent possible. The significant differences, from the FMEA standpoint, are:
" The WB2 PAMS includes the RVLIS as the vessel level monitoring system, rather than the HJTC described in Reference 5. This results in different Common Q power supply voltages as well as analog and digital inputs. The RVLIS uses three different differential pressure (D/P) inputs across the reactor vessel. These are:
- The distribution of modules within the primary and extension racks differs in some cases. For example, the Common Q implementation has an analog output module in the primary subrack for meter outputs and a separate output module in the extension rack to provide a variable power supply output to the HJTC heater power supplies. The PAMS 2 implementation does not use variable HJTC power supplies, and has two analog input (Al) modules in the primary subrack; one of which is used for RCS SMM, CET SMM, representative CET (TeRep), and RVL outputs.
The second analog output (AO) module is used for user-selectable analog outputs.
" In the WB2 PAMS, the analog input modules in the primary subrack are redundant, so that loss of either an entire module or a channel within a module will not result in loss of the process input.
WNA-AR-00180-WBT-NP, Rev. 0 2-10 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System
- The uses of the four Al modules in the extension rack differs somewhat. In the Common Q implementation, all inputs are used for CETs. In the WB2 implementation, the four extension rack Al modules are used for CETs, RVLIS capillary temperature, and cabinet temperature RTDs. CET inputs are dispositioned among the four Al modules such that loss of a single module will not result in less than the minimum CET complement for Train Operability.
" The types of I/O modules differ from the Common Q implementation. The WB2 Al modules are of the newer ,A687 and A1688 variety. These were unavailable when the original (Common Q)
PAMS was defined. These and other evolutionary changes are largely transparent in FMEA space.
(Last Page of Section 2)
WNA-AR-00180-NVBT-NP, Rev. 0 2-11 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 3 FAILURE MODES AND EFFECTS ANALYSIS The PAMS FMEA is a "Qualitative" evaluation, which identifies various failure modes which contribute to a system's unreliability. It is not a "Quantitative" reliability/availability analysis which produces calculated numerical values. The FMEA identifies significant single failures and their effects or consequences on the system's ability to perform its functions. The analysis contents and format satisfies Reg. Guide 1.70 requirements for inclusion in the plant's FSAR.
The PAMS is designed so that any single failure, in either channel, will not prevent proper monitoring, display and alarm action of the other PAMS channels, or inhibit operation of any other system, including the plant protection system (PPS), at the system level. The FMEAs for this system shows that no single failure will defeat more than one of the two redundant PAMS channels.
The FMEA addresses all credible failures of the PAMS computers (e.g., communications failures, stalls, etc.), but not all possible causes of the failure condition. At the hardware interface level, the FMEA bounds all cases by considering the worst case effects at the computer module outputs.
The WB2 specific PAMS FMEA is provided in Table 3-1. This table is based on that one provided in the topical report Appendix (Reference 2).
As a general note, process signals are connected to the PAMS cabinets through input devices called termination modules. These devices are passive in nature and are not dealt with explicitly in the FMEA table. Rather, the effect of their failure would be the same as that of the analog input signal, which is included in the FMEA table.
WNA-AR-00180-WBT-NP, Rev. 0 3-1 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and EfTects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA a,c
-4 4 *I. + 4-4 4 I-J __________ _____________ J.________________________ -L 3-2 Westinghouse Non-Proprietary' Class 3
~VNA-AR-OO18O-WBT-NP, Rev.
WNA-AR-00180-W.BT-NP, Rev. 00 3-2 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-v r r T
-~ 4 1 4 + 1 4
_______ L .1. & 4
.4 4 I 4
- I 4 4 4 4 1 L _______________ 4_____________________ 1 _________________________________ .1.______________________________________ £ 3-3 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev.
WNA-AR-00180-WBT-NP, Rev. 00 3-3 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-+
- 4 t 1 t A J. & 4 +
4 4 4-
- 1 1-3-4 Westinghouse Non-Proprietary Class 3 WNA-AR-OO18O-WBT-NP~ Rev.
WNA-AR-00180-WBT-,NP, Rev. 00 3-4 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) ac
-4 4 9 1* 9
.4 9 +
- 3-s Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev.
WNA-AR-00180-WRT-NP, Rev. 00 3-5 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and EfTects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c 3-6 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev.
WNA-A.R-00180-WBT-NP, Rev. 00 3-6 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FM EA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-r r
-4. 4 4 + I 4.
I 4 + I +
J 4. 4 4 +
I J 3-7 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev.
WNA-AR-00180-WBT-NP, Rev. 00 3-7 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) ac
-r r 1 1
-~ + 4
- I L J. 4
-& + 4 I- 1
-4 + 4 4 1 1 I + I 4
_________ __________ L ______________ I _____________________ .I. _________________________ L 3-8 Westinghouse Non-Proprietary Class 3
~VNA-AR-OO18O-WBT-NP, Rev.
WNA-AR-00180-WBT-NP, Rev. 00 3-8 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
- r r I V
-~ .4. 4. 1 + I I
_______ L L 1. 4 4
-4 .4. 4. 4- + I I
+ F
-4 .4. 4 1 + I I L I ~. 1 4
-4 + I I + 1 I I I .1. 1 I
-4 + I I I
.4.__________ 1 1 .4._________________________ & _______________ A 3-9 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev.
WNA-AR-00180-WBT-NP, Rev. 00 3-9 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c I J. J. 4 4. 4
- 4. 4 4 I J. 4 4 4- 4
-+ I 4. 4. 9 4 4 4 4. 4 3-10 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP~
WNA-AR-00180-WBT-NP, Rev.Rev. 00 3-10 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-4. .L 4 1 & 4 4.
4
- I t 4 t 4 1 & 4 +
4 4 4 4 4 t 4 1 4 4 4.
.J. L I 3-11 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, Rev.
WNA-AR-00180-WBT-NP, Rev. 00 3-11 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-J 1 4 4 4 4 4
-4 I I I -t I 1 1 4 4 I. 4 4 4 4 I 1 I 4 4 I. 4 4 4 4 I' I I 3-12 Westinghouse Non-Proprietary Class 3 WNA-AR-O(i180-WBT-NP, WNA-AR-00180-WBT-NP, Rev.Rev. 00 3-12 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-r .- -r r
-& 1 .1. 4.
-~ + + + I
- 4. 4- 4 t I T
- 4. 1 4- + I 3-13 Westinghouse Non-Proprietary Class 3 WNA-AR-00180-WBT-NP, WNA-AR-00180-WBT-NP, Rev.Rev. 00 3-13 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System Table 3-1. WB2 PAMS FMEA (cont.) a,c
-, + I I 4 I 4 (Last Page of Section 3)
WNA-AR-00180-WBT-NP, Rev. 0 3-14 Westinghouse Non-Proprietary Class 3
Nuclear Automation Failure Modes and Effects Analysis (FMEA)
Watts Bar 2 NSSS Completion Program I&C Projects for the Post Accident Monitoring System SECTION 4 CONCLUSION The plant-specific WB2 PAMS configuration provides substantially the same fault tolerance as compared to the standard Common Q solution described in Reference 2. Because the PAMS consists of two independent channels, no single failure will defeat the PAMS function. Furthermore, many failures will degrade the operation of one of the channels, but leave a subset of the functionality available to the operator.
(Last Page of Section 4)
WNA-AR-00180-WBT-NP, Rev. 0 4-1 Westinghouse Non-Proprietary Class 3
Attachment 3 TVA Letter Dated November 5, 2010 Description of Commitments and Requested Vendor Documents Application For Withholding Proprietary Information From Public Disclosure, WNA-AR-00180-WBT-P, Revision 0, "Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects, Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System," (Proprietary), CAW-10-2999, dated October 29, 2010
eW estinghouse Nuclear P.O. Box Services 355 Electric Company Westinghouse Pittsburgh, Pennsylvania 15230-0355 USA U.S. Nuclear Regulatory Commission Direct tel: (412) 374-4643 Document Control Desk Direct fax: (412) 374-3846 Washington, DC 20555-0001 e-mail: greshaja@westinghouse.com Proj letter: WBT-D-2579 CAW- 10-2999 October 29, 2010 APPLICATION FOR WITHHOLDING PROPRIETARY INFORMATION FROM PUBLIC DISCLOSURE
Subject:
WNA-AR-00180-WBT-P, Rev. 0, "Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects, Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System" (Proprietary)
The proprietary information for which withholding is being requested in the above-referenced report is further identified in Affidavit CAW- 10-2999 signed by the owner of the proprietary information, Westinghouse Electric Company LLC. The affidavit, which accompanies this letter, sets forth the basis on which the information may be withheld from public disclosure by the Commission and addresses with specificity the considerations. listed in paragraph (b)(4) of 10 CFR Section 2.390 of the Commission's regulations.
Accordingly, this letter authorizes the utilization of the accompanying affidavit by Tennessee Valley Authority.
Correspondence with respect to the proprietary aspects of the application for withholding or the Westinghouse affidavit should reference this letter, CAW- 10-2999, and should be addressed to J. A. Gresham, Manager, Regulatory Compliance and Plant Licensing, Westinghouse Electric Company LLC, P.O. Box 355, Pittsburgh, Pennsylvania 15230-0355.
Very truly yours, J. A. Gresham, Manager Regulatory Compliance and Plant Licensing Enclosures
CAW- 10-2999 AFFIDAVIT COMMONWEALTH OF PENNSYLVANIA:
ss COUNTY OF ALLEGHENY:
Before me, the undersigned authority, personally appeared J. A. Gresham, who, being by me duly sworn according to law, deposes and says that he is authorized to execute this Affidavit on behalf of Westinghouse Electric Company LLC (Westinghouse), and that the averments of fact set forth in this Affidavit are true and correct to the best of his knowledge, information, and belief:
J. A. Gresham, Manager Regulatory Compliance and Plant Licensing Sworn to and subscribed before me this 29th day of October 2010 0 NotayPbi COMMONWEALTH OF PENNSYLVANIA Notarial Seal Cynthia Oleskv, Notary Pubic Manor Boro, Westmoreland County My Commson Expires July 16, 2014 Member. Pennsylvanla Assodation of Notaries
2 CAW-10-2999 (1) I am Manager, Regulatory Compliance and Plant Licensing, in Nuclear Services, Westinghouse Electric Company LLC (Westinghouse), and as such, I have been specifically delegated the function of reviewing the proprietary information sought to be withheld from public disclosure in connection with nuclear power plant licensing and rule making proceedings, and am authorized to apply for its withholding on behalf of Westinghouse.
(2) 1am making this Affidavit in conformance with the provisions of 10 CFR Section 2.390 of the Commission's regulations and in conjunction with the Westinghouse Application for Withholding Proprietary Information from Public Disclosureaccompanying this Affidavit.
(3) I have personal knowledge of the criteria and procedures utilized by Westinghouse in designating information as a trade secret, privileged or as confidential commercial or financial'information.
(4) Pursuant to the provisions of paragraph (b)(4) of Section 2.390 of the Commission's regulations, the following is furnished for consideration by the Commission in determining whether the information sought to be withheld from public disclosureshould be withheld.
(i) The information sought to be withheld from public disclosure is owned and has been held in confidence by Westinghouse.
(ii) The information is of a type customarily held in confidence by Westinghouse and not customarily disclosed to the public. Westinghouse has a rational basis for determining the types of information customarily held in confidence by it and, in that connection, utilizes a system to determine when and whether to hold certain types of information in confidence. The application of that system and the substance of that system constitutes Westinghouse policy and provides the rational basis required.
Under that system, information is held in confidence if it falls in one or more of several types, the release of which might result in the loss of an existing or potential competitive advantage, as follows:
(a) The information reveals the distinguishing aspects of a process (or component, structure, tool, method, etc.) where prevention of its use by any of
3 CAW-10-2999 Westinghouse's competitors without license from Westinghouse constitutes a competitive economic advantage over other companies.
(b) It consists of supporting data, including test data, relative to a process (or component, structure, tool, method, etc.), the application of which data secures a competitive economic advantage, e.g., by optimization or improved marketability.
(c) Its use by a competitor would reduce his expenditure of resources or improve his competitive position in the design, manufacture, shipment, installation, assurance of quality, or licensing a similar product.
(d) It reveals cost or price information, production capacities, budget levels, or commercial strategies of Westinghouse, its customers or suppliers.
(e) It reveals aspects of past, present, or future Westinghouse or customer funded development plans and programs of potential commercial value to Westinghouse.
(f) It contains patentable ideas, for which patent protection may be desirable.
There are sound policy reasons behind the Westinghouse system which include the following:
(a) The use of such information by Westinghouse gives Westinghouse a competitive advantage over its competitors. It is, therefore, withheld from disclosure to protect the Westinghouse competitive position.
(b) It is information that is marketable in many ways. The extent to which such information is available to competitors diminishes the Westinghouse ability to sell products and services involving the use of the information.
(c) Use by our competitor would put Westinghouse at a competitive disadvantage by reducing his expenditure of resources at our expense.
4 CAW- 10-2999 (d) Each component of proprietary information pertinent to a particular competitive advantage is potentially as valuable as the total competitive advantage. If competitors acquire components of proprietary information, any one component may be the key to the entire puzzle, thereby depriving Westinghouse of a competitive advantage.
(e) Unrestricted disclosure would jeopardize the position of prominence of Westinghouse in the world market, and thereby give a market advantage to the competition of those countries.
(f) The Westinghouse capacity to invest corporate assets in research and development depends upon the success in obtaining and maintaining a competitive advantage.
(iii) The information is being transmitted to the Commission in confidence and, under the provisions of 10 CFR Section 2.3 90; it is to be received in confidence by the Commission.
(iv) The information sought to be protected is not available in public sources or available information has not been previously employed in the same original manner or method to the best of our knowledge and belief.
(v) The proprietary information sought to be withheld in this submittal is that which is appropriately marked in WNA-AR-00 180-WBT-P, Rev. 0, "Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects, Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System," (Proprietary) dated October 2010, for submittal to the Commission, being transmitted by Tennessee Valley Authority letter and Application for Withholding Proprietary Information from Public Disclosure, to the Document Control Desk. The proprietary information as submitted by Westinghouse is that associated with Watts Bar Unit 2 Post Accident Monitoring System and may be used only for that purpose.
5 CAW-10-2999 This information is part of that which will enable Westinghouse to:
(a) Provide similar information to customers for the safe operation of the Post Accident Monitoring Systems and support licensing for these systems.
Further this information has substantial commercial value as follows:
(a) Westinghouse plans to sell the use of similar information to its customers for purpose of failure modes and effects.
(b) Westinghouse can sell support and defense of licensing of the system.
(c) The information requested to be withheld reveals the distinguishing aspects of a methodology which was developed by Westinghouse.
Public disclosure of this proprietary information is likely to cause substantial harm to the competitive position of Westinghouse because it would enhance the ability of competitors to provide similar analytical reports and licensing defense services for commercial power reactors without commensurate expenses. Also, public disclosure of the information would enable others to use the information to meet NRC requirements for licensing documentation without purchasing the right to use the information.
The development of the technology described in part by the information is the result of applying the results of many years of experience in an intensive Westinghouse effort and the expenditure of a considerable sum of money.
In order for competitors of Westinghouse to duplicate this information, similar technical programs would have to be performed and a significant manpower effort, having the requisite talent and experience, would have to be expended.
Further the deponent sayeth not.
PROPRIETARY INFORMATION NOTICE Transmitted herewith are proprietary and/or non-proprietary versions of documents furnished to the NRC in connection with requests for generic and/or plant-specific review and approval.
In order to conform to the requirements of 10 CFR 2.390 of the Commission's regulations concerning the protection of proprietary information so submitted to the NRC, the information which is proprietary in the proprietary versions is contained within brackets, and where the proprietary information has been deleted in the non-proprietaryversions, only the brackets remain (the information that was contained within the brackets in the proprietary versions having been deleted). The justification for claiming the information so designated as proprietary is indicated in both versions by means of lower case letters (a) through (f) located as a superscript immediately following the brackets enclosing each item of information being identified as proprietary or in the margin opposite such information. These lower case letters refer to the types of information Westinghouse customarily holds in confidence identified in Sections (4)(ii)(a) through (4)(ii)(f) of the affidavit accompanying this transmittal pursuant~to 10 CFR 2.390(bXl).
COPYRIGHT NOTICE The reports transmitted herewith each bear a Westinghouse copyright notice. The NRC is permitted to make the number of copies of the information contained in these reports which are necessary for its internal use in connection with generic and plant-specific reviews and approvals as well as the issuance, denial, amendment, transfer, renewal, modification, suspension, revocation, or violation ofa license, permit, order, or regulation subject to the requirements of 10 CFR 2.390 regarding restrictions on public disclosure to the extent such information has been identified as proprietary by Westinghouse, copyright protection notwithstanding. With respect to the non-proprietary versions of these reports, the NRC is permitted to make the number of copies beyond those necessary for its internal use which are necessary in order to have one copy available for public viewing in the appropriate docket files in the public document room in Washington, DC and in local public document rooms as may be required by NRC regulations if the number of copies submitted is insufficient for this purpose. Copies made by the NRC must include the copyright notice in all instances and the proprietary notice if the original was identified as.proprietary.
Tennessee Valley Authority Letter for Transmittal to the NRC The following paragraphs should be included in your letter to the NRC:
Enclosed are:
.I copies of WNA-AR-00 180-WBT-P, Rev. 0, "Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects, Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System" (Proprietary)
- 2. - copies of WNA-AR-00 180-WBT-NP, Rev. 0, "Nuclear Automation Watts Bar 2 NSSS Completion Program I&C Projects, Failure Modes and Effects Analysis (FMEA) for the Post Accident Monitoring System" (Non-Proprietary)
Also enclosed is the Westinghouse Application for Withholding Proprietary Information from Public Disclosure CAW-10-2999, accompanying Affidavit, Proprietary Information Notice, and Copyright Notice.
As Item 1 contains information proprietary to Westinghouse Electric Company LLC, it is supported by an affidavit signed by Westinghouse, the owner of the information. The affidavit sets forth the basis on which the information may be withheld from public disclosure by the Commission and addresses with specificity the considerations listed in paragraph (b)(4) of Section 2.390 of the Commission's regulations.
Accordingly, it is respectfully requested that the information which is proprietary to Westinghouse be withheld from public disclosure in accordance with 10 CFR Section 2.390 of the Commission's regulations.
Correspondence with respect to the copyright or proprietary aspects of the items listed above or the supporting Westinghouse affidavit should reference CAW- 10-2999 and should be addressed to J. A. Gresham, Manager, Regulatory Compliance and Plant Licensing, Westinghouse Electric Company LLC, P.O. Box 355, Pittsburgh, Pennsylvania 15230-0355.