ML17209B169

Forwards Response to Info Requested in 810218 Ltr Re post- TMI Requirements for Emergency Operations Facility.Util Established Five Level Hierarchy of Functions Essential to Effective Emergency Operations

ML17209B169
Person / Time
Site:	Saint Lucie
Issue date:	06/05/1981
From:	Robert E. Uhrig FLORIDA POWER & LIGHT CO.
To:	Eisenhut D Office of Nuclear Reactor Regulation
References
L-81-239, NUDOCS 8106090278
Download: ML17209B169 (30)

Text

REGULATOR NFORMATION DISTRIBUTION EM (RIDS)

ACCESSION NBR:8106090278 DOC DATE: 81/06/05 NOTARIZED: NO DOCKET' St. Lucia Planti Unit ii Florida

~

FACIL~:50 335 Power 8 Light Co. 05000335 AUTH ~ NAME AUTHOR AFFILIATION UHR IG R, E' p Florida Power & Light Co, RECIP NAME

~ RECIPIENT AFFILIATION EISENHUT'i'. Division of I icensing

SUBJECT:

Forwards response to info requested in 810218 ltr pe.Post TMI requirements for emergency operations facility,Util established five level hi,erarchyof functions essential to effective emergency operations.

DISTRIBUTION CODE: A046S COPIES RECEIVED-'LTR ENCL SIZE:

TITLE: Response to NUREG "0737/NUREG 0660 TMI Action Plan Rgmts (OL's)

NOTES:

RECIPIENT COPIES RECIPIENT COPIES ID CODE/blAME, LTTR ENCL ID CODE/NAME LTTR ENCL ACTION: CLARK iR ~ 05 7 7 INTERNAL: A/D C8C SYS 27 1 1 A/D CLS ENG= 22 1 A/D FOR TECH 32 1 1 A/D GEN PROJ 31 1.

A/D LICENS 16 1 1 A/D NKQ ENG 23 1 A/D OP REACT 15 1 A/D PLANT SYS25 1 A/D RAD PROT 26 1 1 A/D SAFETY AS17 DIRECTORS'SI 1 DEP DIRgDHFS 29 1 1 DIRgEM PREP 33 1 DIRECTOR g DE 21 1 1 DIRECTOR p DHF S28 1 DIREC TOR, DL 14 1 1 1 DIRECTORpDST 30 1 1 EMERG PREP DEV 1 IaE 12 2 2 OELD 0 OR ASSESS BR 18 3 3 P 1-RAD AS>IT BR 1 1 KEG F I LE 1 EXTERNAL: ACRS 34 16 16 INPOgJ ~ STEARNS LPDR 03 1 1 NSIC 04 TOTAL NUMBER OF COPIES REQUIRED: LTTR 53 ENCL 52

~ 0 tt I

~ E l"

P.O. BOX 529100 MIAMI,F L 33152

~rani A~

FLORIDA POWER & LIGHT COMPANY June 5, 1981 L-81-239 Office of Nuclear Reactor Regulation Attention: Mr. Darrell G. Eisenhut, Director Division of Licensing

'<t,'j 5th ~

U. S. Nuclear Regulatory Commission JUN 08 1981~ l0 Washington, D. C. 20555 Ui S, NUCLEAR REOULA'lORII

~

COLLMISS ON

Dear Mr. Eisenhut:

'4 Re St. Lucie Unit 1 Docket No. 50-335 Post TMI Requirements for the Emergenc 0 erations Facilit Please find attached our response to the information request of your letter dated'February 18, 1981.

Very truly yours, Robert E. Uhrig Vice President Advanced Systems 6 Technology REU/JEM/ras Attachment cc: Mr. James P. 'O'Reilly, Region II Mr. Harold F. Reis, Esquire Mr. S. Ramos, Region II SOOQSO 2 PEOPLE... SERVING PEOPLE

J I>> FACILITY CONCEPTUAL DESCRIPTION The Florida Power and Light Company has established a five level hierarchy of functions essential to effective emergency operations:

'unding

'ol1cy, Public Information, and Executive Government Liaison

'anagement, Resources, Technical Support, Public Health 6 Safety and on scene government liaison

'ay to day plant operation and maintenance

'ands-on minute-to-minute operation The FPL Emergency Organization is a strong line organization in which responsibility for each of these five functional areas is placed on a single person, with the exception that extensive funding responsibility is legally required to remain with the Board of Directors.

The emergency organization is headed up by the Emergency Control Officer, a Vice President, who has been assigned responsibility for Policy, Public Information and Governmental Liaison at the executive level. Accident management, resources, technical support and public health and safety are the responsibility of the Recovery Manager, a Senior Operating Manager. The Plant Manager is relieved of administrative details and 1s respons1ble for day to day operations and maintenance of the unit in trouble. The Nuclear Plant Supervisor, commonly called the Shift Supervisor, remains responsible for minute-to-m1nute operations with assistance from the Technical Support Center.

jJ('0l 4, A

'4 4

4IC ~ I (I ~ 4vgl IIBIII4 14 II4 4

4l44>4 4 . h 44 l I Ii

,I I SIN L4 4~>

k 4 4

When an emergency is declared, the Nuclear Plant Supervisor as Emergency Coordinator notifies the Emergency Control Officer who then mobilizes the emergency organization to the extent he deems advisable. Until the Emergency Operations Facility is manned, the Emergency Control Officer directs emergency operations from the Power Resources Management Area of the General Office.

The Emergency Operations Facility would be functional within approximately an hour after the decision to activate it. The Recovery Manager is the EOF Director and is the line officer in command of emergency and recovery operations. Within the policy set by the Emergency Control Officer, the Recovery Manager is responsible for command and control decisions for the emergency and recovery.

1 ~ TECHNICAL SUPPORT CENTER The Technical Support Center (TSC) will be located in a 1924 square foot room adjacent to the Control Room. Desks and office space will be provided for the NRC, and sanitary facilities will be available.

p

2. EMERGENCY OPERATIONS FACILITY The EOF will be located in a 2500 square foot area adjacent to but separate from the cafeteria in the General Office in Miami. This area can be isolated from other company operations and the public.

The Recovery Manager will command the EOF and when notified by the Recovery Manager, designated managers with responsibility for the following functional areas will either be stationed or respresented in the EOF.

Operations Engineering Radwaste Health Physics Personnel Security Nuclear Analysis Scheduling Procurement Accounting Administration Licensing State-County Coordination In addition, public information and governmental af fairs managers will be represented.

Desk space will also be provided for State of Florida and NRC representatives in the EOF and adjacent private offices are set aside for their exclusive use.

An area in clear view of the data displays will be set aside with a conference table so that progress of the accident can be observed, discussions held, and rapid decisions made.

Power to the General Of fice Building is normally supplied from the FPL distribution system. If power is not available from the distribution system, power is furnished by standby gas turbines which are capable of supplying all the EOF's requirements.

The General Office Building has kitchen facilities so that complete meals can be provided when the EOF is manned.

3. SATELLITE EMERGENCY OPERATIONS FACILITY In mid-1982, the Project Management, Engineering, and Construction departments will be relocated to a new facility at Juno Beach, Flordia. The Juno Beach facility will also serve as a corporate training center.

One of the training rooms in the Juno Beach facility will be arranged to permit rapid conversion to a Satellite Emergency Operation Facility (SEOF).

This room has about 790 square Eeet. Data displays will be provided and the SEOF will be staffed by engineering and construction personnel required to assist in the accident diagnosis, management and recovery. An adjacent room has been set aside for the NRC.

By convening technical personnel at the Juno Beach SEOF rather than either plant site or the General Office, mobilization time will be reduced from several hours to about one hour. An emergency generator will provide essential services in the event of loss of normal power.

4. EOF COMMUNIATIONS The General Of fice telephone system is a Centrex exchange. Exclusive tie lines are provided to division offices, power plants and the Juno Beach Facility. In addition, dedicated private telephone lines are provided to each TSC, Control Room and Plant Manager's office.

Three CRT displays of plant parameters will be available in the EOF. Computer terminals, teletype and facsimile equipment and access to the State LGR and HRS radio networks will also be provided. In addition, the private office that has been set aside for the NRC will have telephone communications specified by the NRC staff as well as normal Bell telephone service.

The FPL General Office Communication Center is near the EOF and has capabilities for TWX, Facsimile and FPL Telenet. It will be manned 24 hours per day during an emergency.

5. NEARSITE SUPPORT CENTER At each plant a Nearsite Support Center (NSC) will be established for support of post-accident recovery operations. The NSC is not required for accident diagnosis nor mitigation and therefore may not be habitable during the accident.

The NSC is available to the state as a close-in communication and staging area for monitoring teams. The NSC can also be used as a briefing area for small groups of press representatives. The Turkey Point NSC is in the Backfit

Cons truction Of fice Building and the St. Lucie NSC is in the Unit 2 Construction Office Building. Each NSC will have about 1500 square feet set aside for NRC & FEMA. Each NSC will contain ENS and HPS telephone and LGR and HRS radios.

6. PRESS Facilities have been provided to accommodate the news media. The Nearsite Support Center can be used to brief small groups of reporters. Larger facilities are available if needed for regular briefings of media representatives. Arrangements have been made for use of the Homestead National Guard Armory at Turkey Point, and the Jensen Beach Holiday Inn at St. Lucie.

In addition, the General Office has a 1200 square foot auditorium that may be used for press briefings.

7 ~ STATE OF FLORIDA In the event of an accident at Turkey Point, the Metropolitan Dade County Emergency Operations Center would be the command center for state and county efforts. This center is only four miles from the FPL EOF and 20 miles from Turkey Point.

In the event of an accident at St. Lucie, the South Florida Area EOC at Jupiter would be the state command center. This center is only 10 miles from our Juno Beach facility but 35 miles from St. Lucie. In either case, local monitoring teams would be directed from the State of Florida Mobile Emergency

'I

~

A l

l

IO

~

Radiological Laboratory (MERL). This van, operated by the State Division of Health and Rehabilitative Services, is headquartered in Orlando, and would be immediately deployed to the accident site. In the *ase of Turkey Point, power and communication connections have been provided at our Florida City Substation and for St. Lucie at our White City Substation. Communications with the MERL is by telephone and two radio channels, both of which will be accessible from the Miami EOF, Juno Beach SEOF and each NSC.

8. TRANSPORTATION The Miami General Office is equipped with a helicopter landing pad on the roof. Dedicated landing pads are also located at each plant site and the Juno Beach facility. These facilities are now utilized routinely for transporting executives and engineers from the General Office to the plant sites. Our experience has been that there are on the average, only 3 to 4 days a year when weather would prevent using these facilities. Shuttle surface vehicles will be provided for non priority transportation and messenger service and to j

substitute for the helicopter Wn inclement weather. In addition to the shuttle vehicles, there will be daily company mail service between Juno Beach I

and the General Office and,there is now a daily private messenger service serving Turkey Point, St. Lucie and the General Office daily.

9.

SUMMARY

& CONCLUSION Based on our experience with emergencies we are convinced that the best results are obtained when command and control are centralized both organizationally and geographically, and when there is a minimum amount of disruption of technical employees'outine and working locations.

By locating the EOF in the Miami General office we can satisfy these conditions and enhance emergency response by:

1. Providing rapid mobilization and prompt response.

2. Eliminating habitability problems and uncertainty accompanying decisions as to use of alternate sites.

3. Enhancing personnel training, Travel time can be devoted to training and more frequent sessions can be scheduled.

4. Enhancing data systems testing and maintenance. Testing will be done by users without excessive travel time.

5. Enhanced communications. The General Office communiation systems are used and tested daily.

6. Interaction with the corporate organization will be on a personal basis, not by telephone.

1 II

~

ADDITIONAL INFORMATION The following responses are numbered to correspond. to the specific additional information requests in the NRC February 18, 1981 letter. (Generic Letter 81-10)

ST. LUCIE UNIT 1 INDXVIDUALTASK FUNCTIONS Staff Functions Plant Position Title TSC Supervisor Operations Superintendent or his alternate Communication Support Staff Offsite Dose Assessment Chemistry Supervisor Radiological Surveys Health Physics Supervisor Chemistry/Radiochemistry ., Chemistry Supervisor Technical Support/Repairs and Shift Technical Advisor Corrective Action Department Supervisor Maintenance Superintendent Quality Control Supervisor Radiation Protection Actions Health Physics Supervisor (In-Plant)

Support staff will be called in as needed by their supervisors. Personnel called in to perform emergency response functions are expected to arrive at their designated emergency response facility within a 45 minute to 90 minute time frame (after notification from the plant).

h (2) The Safety Assessment System will provide the Safety Parameter Display System (SPDS) display and all other data required in the Control Room, Technical Support Center (TSC) and Emergency Offsite Facility (EOF).

(See Attachment B for detailed generic description of the display system for the SPDS.

The TSC will have at least two color CRT's, a data logger and a console. The equipment shall receive data needed in the TSC to analyze plant conditions without interrupting the plant operation. It will be possible to access any Regulatory Guide 1.97 input data and the high level display (SPDS) in all modes of operation. The operation of the TSC equipment will not degrade performance of any Safety System equipment or displays. The quality and accuracy of the instruments used will be of the same design as used for SPDS in the Control Room.

The overall system reliability shall be designed to achieve an unavailability goal of 0.01 during all operations above cold shut down.

(3) A conceptual design for the TSC power supply is presently being developed. There are several possible power sources being considered but the final decision has not been made at this time. FPL will meet the intent of requirements set forth in NUREG-0696.

(4) The SPDS portion of the TSC display system is explained in Sectin 3.0 of the Generic Conceptual Design of the Safety Assessment System attached. In addition, the data system will have all available variables specified in Regulatory Guide 1.97 Rev 2. "Instrumentation For Light Water Cooled Nuclear Power Plant to Access Plant and Environs Conditions During and Following an Accident." Data display system and 10

C 1 M

<<M <<<<ha II M I << <<

I" h I W, h I M

~ h M l "~

C M', h W I IIW O' ~ <<f Ml IL M,JI MM M h h-. 'l=

Elf I 1 MME M ~ . I *

'I", ll+ 1<<'IA 1, 1 4 (W. W<<l I ~ M<< ' III W h II M,fill

print out devices shall be adequate to provide TSC personnel unhindered access to sufficient data to perform their assigned tasks. The TSC display will include plant system variables, radiological variables, meteorological information and offsite radiological information. Trend graph and time history capability will be provided. Selected control wire diagrams and as built drawings will be'supplied.

(5) Data transmission between TSC and the Control Room will be via RS-232 or equivalent link with appropriate error checking.

(6) The Safety Assessment System will be capable of transmitting all the TSC data and meteorological data to the EOF. The EOF shall be provided with facilities for data acquisition, display and evaluation of radiological,'eteorological and plant data to determine offsite protective measures. It will have all the SPDS functions, and all other data available in the Technical Support Center.

h<<C << ~ I, lh

g. << ~ I I h h III I I~

C .<<C '

il ~ '4 <<( II ~ l

'Ihli h<<, C )- .C h I II hh<< l I'<< I I I II Ih h 0 .'I hh I ( I <<Jl

~

8 .C.', 'CC

<< I <<

h'

SAFETY ASSESSMENT SYSTEM GENERIC CONCEPTUAL DESIGN DESCRIPTION EOR SAFETY PARAMETER DISPLAY 1.0 GENERAL CONSIDERATIONS The Safety Assessment System (SAS) meets the requirements of the Safety Parameter Display System (SPDS). This report describes that portion of the SAS which meets the SPDS requirements of NUREG-0696. It provides a centralized, flexible, computer-base data and display system to assist control room personnel evaluating the safety status of the plant. This assistance is accomplished by providing the operator and other Emergency Response Facilities (ERFs) a high-level graphical display containing a minimum set of key plant parameters representative of the plant safety status.

All data displayed by the SAS is validated by comparing redundant sensors, checking the value against reasonable limits, calculating rates of change, and/or checking temperature versus pressure curves.

All displays of the SAS have been carefully designed by persons with plant operating experience and evaluated against human factors design criteria. The concepts used in the SAS design will be verified using data recorded from a similar power plant simulator. The intent of the SAS is to present to the control room personnel a few easily understandable displays which use color coding and pattern recognition techniques to indicate off-12

j

'I

, L JIC AUJ a it~ '

I JI ,I

The SAS will be operable during normal and abnormal plant operating conditions. The SAS will operate during all SPDS required modes of plant operation. The normal operation mode will encompass all plant conditions at or above normal operating pressure and temperature. When the reactor coolant system is intentionally cooled below normal operating values, the operator will select the Heatup-Cooldown mode which alters the limit checking algorithm for the key parameters. An additional mode may be provided to address concerns of cold shutdown plant conditions.

2.0 DISPLAY HARDWARE LOCATIONS AND OPERATION The SPDS portion of the SAS may be implemented on a CRT located in an area of the control room visible to the control room operator and the Senior Reactor Operator. This CRT contains the high-level display from which the overall safety status of the plant may be assessed. A dedicated function button panel allows the operator to select any of the high level displays and p

various supporting displays at any time.

The SAS has been designed such that control room personnel can utlize its features without requiring additional operations personnel.

The SAS displays will be provided to other ERFs such as the Technical Support Center and Emergency Operations Facility.

13

~ >". a 3.0 DISPLAY CONTENTS The primary display consists of bar graphs of selected parameter values, digital status indicators for important safety system parameters and digital values. The parameters indicated by bar graphs and digital values include:

RCS pressure, RCS temperature, pressurizer level, steam generator levels and steam generator pressures. Status indicators are provided for containment environment and secondary system radiation. Reactor vessel level (if available), core exit temperature, amount of subcooling and containment radiation are indicated by digital values.

In addition, there is a message area for an appropriate secondary display providing information related to off-normal value or event detection.

I'he bar graphs indicate wide-range values and if a parameter is outside its normal range the bar color will change. The direction (increasing or decreasing) of change is indicted by an arrow.

'p During normal operation, the message area will be used to display average power, reactor core average temperature, data, time, and unit time.

These messages may be displaced by higher priority messages as required.

Trend graph groups of selected related parameters, showing the last thirty minutes of plant operation are available.

14

s~~ 's 4.0 HUMAN FACTORS CONSIDERATIONS Human factors engineering and industrial design techniques have been effectively combined in accord with established man-machine interface design requirements to maximize system effectiveness, reduce training and skill demands, and minimize operator error.

The CRT color graphic formats and functional key board designs have been developed through an interdisciplinary team of senior operational, human factors, industrial design and computer interface personnel.

Minimum use of color, combined with simplified format throughout the CRT presentation, have been key design features to provide both normal and off-normal pattern recognition. The operator, who is the end user, has been directly involved from the conception to insure that man-machine interface goals of SAS have been satisfied. The human factor engineering standards and testing verification methods which have been used are consistent with accepted practices.

5+0 VERIFICATION AND VALIDATION The SAS is implemented on a digital computer system. The display software that controls the sensor data, key parameter construction and display formats +has . been developed under strict verification and validation. The functional specification of the software was started 18 months ago by a technical committee comprising members from several utilities and their consultants. The functional specifications are being transformed into a

~ -r I H I

design specification. Reviews of the design specification will assure conformance of the SPDS portion of SAS to those functions discussed in NUREG&696.

During the course of software 'development, a set of static test cases will be developed which test the key features of each software module.

Furthermore, static system test cases will be developed and used to verify the correct operability of the total system. A set of dynamic test cases will be generated by recording nuclear simulator data on magnetic tape from a number of different plant transients which test the dynamic behavior of the system under "real" conditions. A design review that compares these test results to the original functional and design specifications will be performed. A selected number of the static test cases will be "frozen" such that they could be used to verify future changes to the software. In summary, verification and validation is addressed and designed into the SAS software from the beginning to provide a highly reliable product and a mechanism for identifying and controlling future changes.

16

'll '4