ML17355A380
| ML17355A380 | |
| Person / Time | |
|---|---|
| Site: | Turkey Point  |
| Issue date: | 07/12/1999 |
| From: | NRC (Affiliation Not Assigned) |
| To: | |
| Shared Package | |
| ML17355A379 | List: |
| References | |
| GL-98-01, GL-98-1, NUDOCS 9907150065 | |
| Download: ML17355A380 (8) | |
Text
~ l gAS RECT (4
~o Cy 0
C O
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 2055&0001 AUDITREPORT BYTHE OFFICE OF NUCLEAR REACTOR REGULATION ON IMPLEMENTATIONOF GENERIC LETTER 98-01
'YEAR 2000 READINESS OF COMPUTER SYSTEMS AT NUCLEAR POWER PLANTS" DOCKET NOS: 50-250 AND50-251 LICENSE NOS: DPR-31 AND DPR-41 FLORIDAPOWER & LIGHTCOMPANY TURKEYPOINT PLANT UNITS 3 AND4 EXECUTIVE
SUMMARY
On the basis of the staffs assessment and evaluation of the Turkey Point Y2KReadiness Contingency Planning Program, the following observations were made:
.1.
Florida Power & Light Company (FPL/Ihe licensee) has a common Y2Kproject Implementation plan that establish'es the scope and control of the Y2Kcontingency planning at the Turkey Point Plant, Units 3 and 4. The Y2Kcontingency planning is comprehensive and Incorporates the major elements of the nuclear power Industry Y2Kguidance contained ln NEI/NUSMG 97-07 and NEI/NUSMG 98-07.
2.
The Turkey Point Y2Kprogram ls receiving appropriate management support and oversight.
3.
The schedule for completing the Y2Kreadiness contingency planning is tightly controlled, and the two units should be Y2Kready by June 30, 1999. However, by letter dated June 28, 1999, FPL informed the staff that the date for the two units to be Y2Kready is July 15, 1999.
9907i500b5 9907i2 PDR ADOCK 05000250 P
PDR Enclosure On May 18-20, 1999, the U. S. Nuclear Regulatory Commission (NRC) staff audited the Turkey Point Plant, Units 3 and 4, Year 2000 (Y2K)contingency plan activities. This audit addressed the contingency planning activities for six classes of plant systems, internal facilityrisks, external risks, and activities that integrated these contingency plans into a single overall plan. The basis forthis audit w'as provided in two nuclear industry'guidelines, Nuclear Energy Institute/Nuclear Utilities Software Management Group (NEI/NUSMG)97-07, "Nuclear UtilityYear 2000 Readiness," and NEI/NUSMG 98-07, "Nuclear UtilityYear 2000 Readiness Contingency Planning." The audit guidelines were piovided in a checklist format, 'Y2KReview Checklist for Contingency Planning," which was based on the NEI/NUSMG reports. Additionally, the audit addressed emergency diesel generator availability and equipment issues.
The audit team reviewed selected licensee documentation regarding the Turkey Point Y2Kreadiness program and conducted interviews with the cognizant licensee personnel.
The results of this audit and subsequent audits at other selected plants willbe used by the staff to determine the need for additional action, if'any, on Y2Kreadiness for nuclear power plants.
4 REPORT DETAILS
1.0 INTRODUCTION
On May 18-20, 1999, the NRC staff audited the Turkey Point 3 and 4 Y2Kcontingency plan activities..This audit addressed the contingericy planning activities for six classes of plant systems, internal facilityrisks, external risks, and activities that integrated these contingency plans into a single overall plan. The basis for, this audit was provided in two nuclear Industry guidelines, NEI/NUSMG 97-07, "Nuclear UtilityYear 2000 Readiness," and NEI/NUSMG98-07, "Nuclear UtilityYear 2000 Readiness Contingency Planning."
The audit guidelines were provided in a checklist format, 'Y2KReview Checklist for Contingency Planning," which was based on the NEI/NUSMG reports. Additionally, the audit addiessed emergency diesel generator availability and equipment issues.
2.0 PLANT SYSTEMS CONTINGENCYAUDITS The staff identified and reviewed. contingency plans addressing specific software applications and embedded components (SAECs) in six classes of plant systems: reactor protection system (RPS) and engineered safety features (ESFs), feedwater systems (FWSs) and balance of plant (BOP) systems, radiation monitoring systems (RMSs);- emergency notification systems (ENSs),
the plant piocess computer (PPC), and plant security systems (PSSs).
The results of these audits are discussed in the following sections.
2.1 RPS/ESF SAEC Contin en Plans
'I The staff identified and reviewed three contingency plan packages in this class of plant systems:
AMSAC CPU B (licensee package number Y2K-093-001) Westinghouse Eagle 21 Protection
,System (licensee package numbers Y2K-041-003 and Y2K-049-002), and Emergency Bus Load Sequencer (Licensee package number Y2K-024-001). The staff found these contingency plans to be consistent with the guidance in NEI/NUSMG 97-07 and NEI/NUSMG 98-07.
2.2 FWS/BOP SAEC Contin en Plans The staff identified and reviewed tw'o contingency plan packages in this class of plant systems:
Boric Acid Blend Totalizer for Boric Acid (licensee package number Y2K-046-002), and Boric Acid Blend Totalizer for Primary Water (licensee package number Y2K-046-007). The staff found these contingency plans to be consistent with the guidance in NEI/NUSMG 97-07 and NEI/NUSMG 98-07.
2.3 RMSSAEC Contin enc Plans The staff reviewed five contingency plan packages in this class of plant systems:
Containment AirMonitor 4V36 Control Room Indication (licensee package number Y2K-067-002), Radiation Monitor Spent Fuel Pool Vent Stack (licensee package number Y2K-067-003), Mass Flow Transmitter for Containment AIrMonitor 4V36 (licensee package number Y2K-067-009), PRMS SPING/4 Control Cabinet (C212) (licensee package number Y2K-067-012), and Data Acquisition Module for Main,Steam Radiation Monitor RAD-6426 (licensee package number Y2K-067-014). The staff found these contingency plans to be consistent with the guidance in NEI/NUSMG 97-07 and NEI/NUSMG 98-07.
2.4 ENS SAEC Contin en Plans The staff reviewed the contingency. plans for the emergency sirens.
The emergency sirens are controlled b'y local government agencies, which have contingency plans in place for alternate strategies in the eyent the sirens do not operate.
Consequently, the licensee does not have responsibility for these sirens other than to perform maintenance operations.
The local governments are using the contingency plans currently used for hurricanes and other events that could disable the remotely controlled sirens.
The staff found this approach to be acceptable.
2.5 'PCSAEC Contin enc Plans The staff identified and reviewed four contingency plan packages in this class of plant systems:
QSPDS ICCS Plasma Display A 8 B (licensee package number Y2K-041-002), reactor coolant pump Tern'perature Recorders (licensee package number Y2K-041-001), Health Physics Computer System (tracked under a separate pioject folder), and ERDADS (Emergency
Response
Data Acquisition and Display System) (licensee package number Y2K-095-001). The staff found these contingency plans to be consistent with the guidance in NEI/NUSMG 97-07 and NEI/NUSMG 98-07.
2.6 PSS SAEC Contin enc Plans The staff identified and reviewed one contingency plan package in this class of plant systems:
Plant Security Computer System (licensee package number Y2K-SEC-001). The staff found this contingency plan to be consistent with the guidance in NEI/NUSMG 97-07 and NEI/NUSMG 98-07.
2.7 Contin en Plannin Mana ement In the area of Contingency Planning Management, the staff determined that licensee Y2K activities were consistent with NEI/NUSMG 98-07.
2.8 Internal Faciii Risk Contin en Plans In the areas of Contingency Planning for Internal Facility Risks, Event Analyses for Internal Facility Risks, Risk Management for Internal Facility,Risks, and Verification for Internal Facility Risks, the staff determined that licensee Y2Kactivities were consistent with El/NUSMG 98-07.
2.9 External Risk Contin en Plans In the areas of Risk Identification for External Risks, Event Analysis for External Risks, Risk Notification, MiTigation Strategy Selection, and Verification for External Risks, the staff determined that licensee Y2Kactivities were consistent with NEI/NUSMG 98-07.
2.10 Inte ratedContin en Plans In the areas of integrated Y2KContingency Plan Development and Integrated Y2KContingency Plan Content, the staff determined that licensee Y2Kactivities were consistent with NEI/NUSMG 98-07.
3.0 ADDITIONALISSUES
~
In addition to the contingency planning areas addressed by the Y2Kcontingency planning checklist, the staff reviewed the issues discussed in the following sections.
3.1 Assumed Duration of Loss of Offsite Power The licensee is part of the Florida Reliability Coordinating Council (FRCC) grid, which has a total capacity of 34 GW, of which 4 GW is generated by nuclear plants. The licensee states that the FRCC 'goal for restoring power to the grid is 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. The licensee's target for restoring nuclear power is 10 miriutes; however, it has generally taken about 30 minutes to restore power. The FRCC nuclear units have first priorityfor restarting.
3.2 Switch ard Batte and Circuit Breaker Auxiliaries Two separate battery backups control separate parts of the switchyard. These backups are capable of restoring the switchyard within the required response time.
3.3 Staffin Durin Roilover The licensee used the hurricane staffing plans to estimate the required staffing levels forthe Y2K.
rollover. -The staffing was modified to reduce emphasis, on transmission lines and to increase emphasis on operations.
The licensee intends to staff an extra 40 to 60 people at each site during the Y2KI oilover. The staff willwork in two 12-hour shifts. The relief shift willreport for
'work without prior notification from the plant. The licensee has considered alternate staffing plans. The Nuclear Information Systems Group willstaff the plant 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> from Friday through Sunday to handle any infrastructure problems.
3.4 Y2KProcedures The Y2Kcontingency procedures willbe approved using the existing plant procedure approval process.
There are special procedures for non-plant systems, such as the passport system (work control).
4 3.5 Internal and External Communications Contin encies The licensee assumes in the contingency planning that telecommunications willbe available.
There are a variety, of redundant means for communicating in case the normal system is inoperable.
There are three satellite systems available, which are all Y2Kcompliant. These systems were implemented as a result of Hurricane Andrew, because communications were not available after the hurricane.
As stated in Section 3.3, plant staffing willbe automatic.
The shifts have been Identified and will report forwork without being called (negative callback).
ENS sirens are maintained by the Power Delivery Unit (PDU). The county is responsible for activating the sirens, although the licensee is responsible for maintaining the system. Although not part of the Nuclear Division, the PDU uses quality control procedures.
The emergency sirens are redundantly powered and activated and use a battery system with ac charging. The sirens have a feedback system to give report on the operability of the sirens.
There is a silent test capability that allows the siren to be tested at 20,000 Hz; however, the sirens are tested at fullvolume once a quarter, and silently at least biweekly. The licensee maintains the software that controls the sirens.
This software was made Y2Kready to allow it to print the correct dates of actuation.
The sirens originally reported the date as 1980 when the clock was rolled over. The software is not required to operate the sirens; it is used for obtaining feedback Information. The sirens are radio-activated and are mounted 50 feet above the ground. Sirens report by exception, such that a failed siren reports the failure before the siren receives its next scheduled test. The sirens are electronic rather than mechanical and produce 123 dB at 1600 watts and 100 feet.
The manual backup forthe sirens consists of route notification by the local law enforcement agency.
The sirens emit a siren wail and a voice notification and may operate for up to 7 days without ac power (20 days of operation are possible).
The sirens were used during Hurricane Andrew.
Asiren contingency plan forY2Kevents was not developed because the existing contingency plan addresses siren failures. Sirens may be remotely monitored for temperature, battery voltage, and status.
The licensee replaces the batteries; it does not contract out this task. Extra batteries are available, but they are not on the critical supplier's list because the licensee has a large supply of batteries and batteries are also available through numerous local retail outlets.
The sirens are priontizedin the same manner as the sirens of hospitals and critical users.
Ofthe two helicopters used for response to inclement weather, one is used for siren observation.
Sirens may be activated from the helicopter. The licensee has extensive experience with the effect of lightning and hurricanes on siren operability.
3.6 Use of AR Rela sinthe Emer en Power stem AR-D relays are used with the emergency diesel generators.
The licensee is familiarwith the relay issue at Seabrook in which a relay failed during a periodic diesel generator test. The licensee has determined that a similar problem does not exist at Turkey Point.
3.7 Partici ation in the North American Electric Reliabili Council Drill NERC on Se tember9 1999 The licensee willparticipate in the NERC drillon September 9, 1999.
3.8 NRC Communications Contin enc Plan forthe Year 2000 Rollover The licensee is familiarwith the NRC Communications Contingency Plan.
~8'
~
' 3, ~
Security systems are included in the licensee's contingency plans.
3.10 Remediated stems Classificatio Some remediated systems are not mission-critical systems.
Those systems that are mission critical and that have been remediated are addressed in the contingency plans.
3.11
~Trsinln The training plans have been identified and the training schedules are included in the contingency plans.
4.0 CONCLUSION
S On the basis of the results obtained during the NRC contingency audit, the staff concludes that the licensee's contingency planning activities for Turkey Point Units 3 and 4 are acceptable.
Principal Contributors: Michael E. Waterman, NRR Barry S. Marcus, NRR
'I
~ >
'I II