ML19345G182
| ML19345G182 | |
| Person / Time | |
|---|---|
| Issue date: | 02/28/1981 |
| From: | NRC OFFICE OF INSPECTION & ENFORCEMENT (IE) |
| To: | |
| References | |
| NUREG-0696, NUREG-696, NUDOCS 8103100410 | |
| Download: ML19345G182 (38) | |
Text
_
3 NUREG-0696 Functional Criteria for Emergency Response Facilities I
Final Report l
^ - ~ - ~ ^ -
X.
Manuscript Completad: December 1980 Date Published: February 1981 Division of Emergency Preparedness Office of Inspection and Enforcement U.S. Nuclear Regulatory Commission Washington, D.C. 20555 e,
hf D
I c
0' b
0 t
i J
ABSTRACT This report describes the facilities and systems to be used by nuclear power plant licensees to improve responses to emergency situations.
The facilities include the technical support center (TSC), onsite operational support center (OSC), and nearsite emergency operations facility (EOF), as well as a brief discussion of the emergency response function of the control room.
The data
}
systems described are the safety parameter display system (SPDS) ar.d nuclear data link (NDL).
Together, these facilities and systems make up the total emergency response facilities (ERFs).
Licenseas should follow the guidance provided both in this report and in NUREG-0654 (FEMA-REP-1), Revision 1 for design and implementation of the ERFs.
This document is being issued to establish criteria that the NRC staff intends to use in evaluating whether an applicant / licensee meets the requirements of 10 CFR 50, Appendix E, Article IV.E.8 and Appendix A, GDC 19.
It is not a substitute for the regulations, and compliance is not a requirement.
- However, the use of criteria different from those set forth herein will be accepted only if the substitute criteria provide a basis for determining that the above-cited regulatory requirements have been met.
1 iii
Contents Page ABSTRACT......................................................
iii 1.
INTRODUCTION...........................................
1 1.1 Background.........................................
I 1.2 Control Room..............................
2
- 1. 3 Emergency Response Facilities.......................
3 1.3.1 Technical Support Center................................
3 1.3.2 Operational Support Center...............
4 A
1.3.3 Emergency Operations Facility..........................
1.3.4 Safety Parameter Display System.........................
4 1.3.5 Nuclear Data Link.......................................
4 1.4 Activation and Use.............................................
5 1.5 Reliability....................................................
5 2.
TECHNICAL SUPPORT CENTER............................................
8 2.1 iunction.......................................................
8 2.2 Location.......................................................
9
- 2. 3 Staffing and Training......................................
9 2.4 Size...........
10 2.5 Structure......................................................
10 2.6 Habitability...................................................
11 2.7 Communications.................................................
11 2.8 Irstrumentation, Data System Equipment, and Power Supplies....
12 2.9 Te-hnical Data and Data System........
13 2.10 Records Availability and Management............................
15 3.
OPERATIONAL SUPPORT CENTER..........................................
15 3.1 Functions......................................................
15 3.2 Habitability...................................................
16 3.3 Communications.................................................
16 4.
EMERGENCY OPERATIONS FACILITY.......................................
16 4.1 Functions...........................................
16 4.2 Location, Structure, and Habitability.........................
17 19 4.3 Staffing and Training..........................................
4.4 Size...........................................................
19 20 4.5 Radiological Monitoring....................
4.6 Communications.................................................
20 v
Contcnts (continued)
Page 4.7 Instrumentation, Data System Equipment, and Power Supplies.....
21 4.8 Technical Data and Data System.................................
22 4.9 Records Availability and Management............................
23 S.
SAFETY PARAMETER DISPLAY SYSTEM.....................................
24 5.1 Function.......................................................
24 5.2 Location.......................................................
25 5.3 Size...........................................................
25 5.4 Staffing.......................................................
25 5.5 Display Considerations.........................................
26 5.6 Design Criteria................................................
26 6.
NUCLEAR DATA LINK...................................................
27 6.1 Function..................
27 I
6.2 Description..........................
28 6.3 NDL Interface..................................................
30 6.4 Environment....................................................
30 l
t 7.
ACQUISITION AND CONTROL OF TECHNICAL DATA...........................
31 7.1 Sources of Technical Data......................................
31 l
7.2 Acquisition of Data............................................
31 l
7.3 DAS Functi onal L imi tati ons.....................................
31 7.4 DAS Design, Verification, and Configuration Control...........
31
- 7. 5 DAS Reliability................................................
34 i
8.
EMERGENCY RESPONSE FACILITY INTEGRATION.............................
34 9.
VERIFICATION AND VALIDATION CRITERIA................................
35 10.
BIBLIOGRAPHY........................................................
36 FIGURES Figure 1 NDL System 0verview............................................
29 Figure 2 Example of a Functional Block Diagram of Data Flow Using Plant Process Computer...................................
32 Figure 3 Example of a Functional Block Diagram of Data Flow Without Using Plant Process Computer...........................
33 vi
4
^
Contents (continued)
Page TABLES Table 1 Transfer of Emergency Response Functions from the Control Room to the Technical Support Center and the Emergency Operations Facility..............................
6 Table 2 Relation of E0F Location to Habitability Requirements.........
18 vii
FUNCTIONAL CRITERIA FOR EMERGENCY RESPONSE FACILITIES 1.
INTRODUCTION The facilities and systems described in this report are to be used by nuclear power plant licensees to provide improved emergency response to accidents.
The facilities include the control room (CR), onsite technical support center (TSC), onsite operational support center (CSC), and nearsite emergency opera-tions facility (E0F).
The systems include the safety parameter display system (SPDS) and nuclear data link (NDL).
Although the SPDS and the NDL are not
" facilities," for ease of description these systems and the facilities (TSC, OSC, and EOF) will be referred to as the emergency response facilities (ERFs).
The TSC, EOF, and CR are required facilities specified by NRC regulations, 10 CFR 50, Appendix E, Article IV.E.8 and Appendix A, GDC 19.
Although not specifi-cally required by the regulations, in order to perform NRC's statuatory responsi-bility to protect the public health and safety in the event of a radiological incident at a nuclear power plant and as a result of lessons learned from the Three Mile Island accident, the SPDS and the NDL system are included to provide assurance that licensees and offsite authorities will have adequate information to perform their tasks in an optimum manner.
The OSC also is not specifically required by the regulations, but is needed to ensure that an adequate facility is provided for onsite emergency maintenance and for other support personnel to gather as a ready resource to support actions initiated by the CR.
Thus, the SPDS, NDL, and OSC are integrally related to the emergency response facilities required by the regulations, and are needed to ensure that their functions can be effectively performed during an emergency.
This document provides guidance on the functional criteria for the ERFs and on the integrated support these facilities will provide to the control room.
Design and implementation of the ERFs should also be integrated with the licensee's implementation of NUREG-0654 (FEMA-REP-1), Revision 1, " Criteria for Preparation and Evaluation of Radio-logical Emergency Response Plans and Preparedness in Support of Nuclear Power p
Plants."* The report also provides detailed criteria for emergency response and certain emergency planning elements necessary for designing these facilities.
1.1 Background
The accident at Three Mile Island led to studies performed both within and outside NRC that identified the need for extensive improvements in the response of management to accidents at nuclear power plants.
Some of the identified L
i 1 improvements include:
Establishing formal licensee, local, State, and Federal organizations to better manage and effectively coordinate emergency response support; i
Developing integrated emergency response facilities and data systems to aid in this management; i*
Providing for better information needed to assess conditions at a plant and its environs prior to, during, and following an accident; "For complete information on material referenced in this report, refer to the l
Bibliography (Section 10) at the end of the text.
l 1
1 m
'M Providing an improved capability by licensee and Federal organizations to provide recommendations to State and local authorities on actions protecting the public; and Providing transmission of more accurate information to Federal, State, and local emergency response organizations, and to the general public.
With respect to licensee activities and responsibilities, NRC has determined that the emergency response facilities and systems that will provide the neces-These facilities and sary improvements are the TSC, OSC, EOF, SPDS and NDL.
systems will operate as an integrated system to support the control room in the mitigation of the consequences of accidents and to enhance the licensee's These facilities and capability to respond to abnormal plant conditions.
systems will help to provide a graduated response capability that is dependent Severity conditions are classified into on the severity of an emergency.
emergency classes (in order of increasing severity) by NUREG-0654, Revision 1, Appendix 1 as follows:
(1) Notification of Unusual Event (2) Alert (3) Site Area Emergency (4) General Emergency
- 1. 2 Control Room The control room is the onsite location from which the nuclear power plant is operated.
It contains the instrumentation, controls, and displays for:
Nuclear systems, Reactor coolant systems, Steam systems, Electrical systems, Safety systems (including engineered safety features), and
{'
o Accident monitoring systems.
The control room is staffed by licensed reactor operators, the senior reactor operators, and a senior reactor operator designated as the shift supervisor.
Safe operation of the reactor and plant manipulations remain under the control of a licensed senior reactor operator, a reactor operator, or shift supervisor at all times.
During abnormal operating conditions, the complexity of licensee responsibili-ties increases significantly.
These responsibilities include actions taken to:
Diagnose the abnormal conditions; Perform corrective actions; Mitigate the abnormal conditions; Manage plant operations; Manage emergency response; Inform Federal, State, and local officials; Recommend public protective measures to State and local officials; Restore the plant to a safe condition; and Recover from the abnormal conditions.
2
Initially, t.he control room personnel must assume all of these responsibilities.
g
- 1. 3 Emergency Response Facilities In helping personnel in the control room to mitigate the consequences of accidents and respond to abnormal operating conditions, the emergency response facilities (ERFs) shall function during emergencies to provide the following services:
Help the rc3ctor operators determine the plant safety status; Relieve the reactor operators of peripheral duties and communications not directis related to reactor system manipulations; Prevent congestion in the control room; Provide assistance to the operators by technical personnel who have comprehensive plant data at their disposal; Provide a coordinated emergency response by both technical and management pEMonnel; Provide reliable communications between onsite and offsite emergency response personel; Provide a focal point for development of recommendations for offsite actions; and Provide relevant plant data to the NRC for its analysis of abnormal plant operating cor.ditions.
Many of the ERF functions will be performed through the use of one or more data systems that will gather, store, and process data for display in the con-trol room, TSC, EOF, and NRC Operations Center.
A partially or fully integrated ERF data system or separate data systems may be used to fulfill the ERF func-tions. A recent generation plant process computer is one data system that could be used to gather and process these data for display in the ERFs.
However, use of a process computer requires that it meet all of the criteria l
prescribed later in this document.
If it cannot meet these critaria, l
independent data systems must be installed.
The personnel designated for duty in the ERFs shall be trained to follow procedures specified in the licensee's emergency plan to ensure timely Detailed management plans, facility staffing, and task emergency response.
assignments of these emergency response personnel are site specific and shall be part of the licensee's emergency plan developed from the guidance provided by NUREG-0654, Revision 1.
1.3.1 Technical Support Center The technical support center (TSC) is an onsite facility located close to the l
control room that shall provide plant management and technical support to the l
reactor operating personnel located in the control room during emergency l
3 i
1
u W
i an 1
conditions.
It shall have technical data displays and plant records available 1
to assist in the detailed analysis and diagnosis of abnormal plant conditions
- 1 and any significant release of radioactivity to the environment.
The TSC
]
shall be the primary communications center for the plant during an emergency.
,1 A senior official, designated by the ifcensee, shall use the resources of the d
TSC to assist the control room operators by handling the administrative items, 1
technical evaluations, and contact with offsite activities, relieving them of these functions.
The TSC facilities may also be used for performing normal
!j functions, such as shift technical supervisor and plant operations / maintenance 9
analysis functions, as well as for emergencies.
p/
1.3.2 Operational Support Center The operational support center (OSC) is an onsite assembly area separate from the control room and the TSC where licensee operations support personnel shall report in an emergency. There shall be direct communications between the OSC hl and the control room and between the OSC and the TSC so that the personnel 1
reporting to the OSC can be assigned to duties in support of emergency I
operations.
1.3.3 Emergency Operations Facility i
The emergency operations facility (E0F management of overall licensee emergenc)y response (including coordination Federal, State, and local of ficials), coordination of radiological and environ-mental assessments, and determination of recommended public protective actions.
The E0F shall have appropriate technical data displays and plant records to assist in the diagnosis of. plant conditions to evaluate the potential or actual release of radioactive materials to the environment.
A senior licensee official in the E0F shall organize and manage licensee offsite resources to support the TSC and the control room operators.
1.3.4 Safety Parameter Display System The safety parameter display system (SPDS) provides a display of plant parameters from which the safety status of cperation uay be assessed in the centrol rocs, TSC, and EOF.
The primary function of the SPDS is to help operating personnel in the enntrol roon make quick assessments of plant safety status.
Duplication of the SPDS displays in the TSC and E0F will improve the exchange of information between these facilities and the control room and assist corporate and pl:nt management in the' decision-making process.
The SPDS shall be operated during normal operations and during all classes of emergencies.
The SPDS should have the flexibility to allow fe'.ure modificctions to be incorporated such as the capability to handle operator interaction and diagnostic analysis.
1.3.5 Nuclear Data Link The nuclear data link (NDL), a data transmission system, will be designed to send a set of variables from the plant to the NRC Cperations Center.
These data will be used for analyses by the NRC heacquarters technical support groups and NRC Executive Team.
The NDL will transmit information that will aid NRC in its role of providing advice and support to the nuclear power plant licensee, State and local authori;ies, and other Federal officials.
4
3 pr - +
, r 1.4 Activation and Use The activation and use of the ERFs shall be determined by the emergancy class and by the specific conditions surrounding an accident and shall be specified in the licensee's emergency plan.
As a minimum, within the unavailability criteria, the following conditions shall apply:
(1) The SPDS shall be operational during all plant operating conditions, including accidents.
(2) Activation of the onsite TSC and OSC is optional for a Notification of Unusual Event emergency class, and is required fcr Alert and higher classes.
(3) Activation of the nearsite EOF is optional for Notificatien of Unusual Event and Alert emergency classes, and is required for Site Area Emergency and General Emergency classes.
(4) Data shall be available for transmittal through the NDL during all plant operating conditiorx above cold shutdown.
Until the TSC, OSC, and EOF are activated, all functions of these facilities shall be performed in the control room. When the TSC is functional, emergency response functions, except direct supervision of reactor operations and manipula-tion of reactor system controls, shall shif t to the TSC.
Plant administration, technical support functions, and contact with offsite activities to assist the control room operators shall be performed in the TSC throushout the course of an accident.
The OSC chall provide 3 place for operations support persomel to be in direct communication with the control room and other operations managers for assignment to duties in su p ort of emergency operations. When the EOF i:
activated, the functions of providing overall emergency response management, monitoring and assessing radiological effluent and the environs, making offsite dose projections, providing recommendations to State and local officials, and coordinating with Federal officials will shift to the EOF.
See Table 1 for an outline of the transfer of emergency response functions from the control room to the TSC and EOF under the various emergency classes.
The level of staffing of the ERFs may vary according to the severity of the emergency condition.
The staffing criteria for each emergency class shall be fWy detailed in the licensee's emergency plan.
1.5 Reliability i
The data systems, instrumentation, and facilities of the ERFs shall be designed and constructed to provide a very high degree of reliability.
The reliability criteria for the ERF systems, instrumentation, and facilities shall be described in terms of unavailability.
This unavailability is specified in terms of an operational unavailability goal of 0.01 that is applicable to all ERFs when the reactor is above cold shutdown status.
This operational unavailability goal shall be defined in units of time as:
Downtime Operational unavailability = Operating time 5
~~
I i
t Table 1.
Transfer of Emergency Response Functions from the Control Room to the Technical Support Center and the Emergency Operations Facility Emergency Class Notification of Unusual Site Area General Emergency Response Functions Event Alert Emergency Emergency Supervision of reactor CR CR CR CR operations and manipulation of controls Management of plant operations CR(TSC)
TSC TSC TSC Technical support to reactor operations CR(TSC)
TSC TSC TSC Management of corporate CR(TSC, EOF)
EOF EOF emergency response resources Radiological effluent and environs monitoring, CR(TSC, EOF)
E0F EOF assessment, and dose projections Inform Federal, State and local emergency re,sponse CP(TSC, EOF)
EOF EOF organizations and make recommendations for public protective actions Event monitoring by NRC (CR)
TSC& EOF T5C& EOF regionalemergency response team Management of recovery operations CR(TSC, EOF)
EOF EOF Technical support of e
TSC TSC TSC recovery operations Note:.(CR),(TSC),
(or the performance o(EOF), or (TSC, EOF) indicates that activation of this facility f this function) is optional for the indicated emergency class.
- 0ne NRC individual also may be stationed in the control room.
6 r.
4 I
where:
Downtime = any length of time the data systems, instrumentation, or facilities are unavailable when the reactor is above cold shutdown status because of the following:
inability to perform its intended function; impaired ability to perform its intended function due to degraded circuits, equipment, power supplies, or instrumentation (this shall not include truly redundant equipment such as core thermocouples or computer peripherals);
unreliable performance due to the lack of adequate sensor data; and scheduled outages to perform preventive maintenance on instrumentation, equipment, power supplies, or sensors.
(The design of the systems and facilities shall be to limit these scheduled outages to no more than 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br /> per calendar quarter, and ERFs must be capable of becoming fully operational within 30 minutes during these outages.)
Operating time = any length of time the reactor is above cold shutdown status.
In addition to the operational criterion during reactor operation, the SPDS also has an unavailability goal while the reactor is in c.old shutdown status.
For cold shutdown status including the refueling mode, the specified unavaila-bility goal of the SPDS is 0.2.
This SPDS cold shutdown unavailability shall be defined in units of time as:
Downtime SPDS cold shutdown unavailability =
Cold shutdown time where:
Downtime = any length of time the SPDS data system, instrumentation, and power supplies are unavailable when the reactor is in cold shutdown status because of the following:
inability to perform its intended function; impaired ability to perform its intended function due to degraded circuits, instrumentation, or power supplies; unreliable performance due to the lack of sensor data; scheduled outages for preventive maintenance of instrumentation, power supplies, or sensors.
(The 7
r -m -
w I,
SPDS must be able to be made available within 30 minutes during such outages.)
Cold shutdown time = any lengtn of time the reactor is in a cold shutdown status and refueling mode.
l
\\
i The TSC, EOF, and NDL have no cold shutdown unavailability goals while the l
reactor is in cold shutdown status.
2.
TECHNICAL SUPPORT CENTER 2.1 Function The onsite technical support center (TSC) will provide the following functions:
Provide plant management and technical support to plant operations i
personnel during emergency conditions.
Relieve the reactor operators of peripheral duties and communications not directly related to reactor system manipulations.
Prevent congestion in the control room.
Perform EOF functions for the Alert Emergency class and for the Site Area Emergency class and General Emergency class until the EOF is i
functional.
l The TSC shall be the emergency operations work area for designated technical, engineering, and senior licensee management personnel; any other licensee-designated personnel required to provide the needed technical support; and a small staff of NRC personnel.
The primary role of NRC in the TSC will be to observe plant operation and provide advisory support to plant management. A senior licensee official shall uce the resources of the TSC to provide guidance and technical assistance to the operating supervisor in the control room.
However, all manipulations shall be performed by the control room licensed operators.
The TSC shall have facilities to support the plant management and technical personnel who will be assigned there during an emergency and will be the pri-mary onsite communications center for the plant during the emergency.
TSC personnel shall use the TSC data system to analyze the plant steady state and dynamic behavior prior to and throughout the course of an accident.
The results of this analysis will be used to provide guidance to the control room operating personnel in the managesent of abnormal conditions and in accident mitigation.
TSC personnel will also use the environmental and radiological information avail-able from the TSC data system to perform the necessary functions of the EOF when this facility is not operational.
The TSC also may be used to provide technical support during recovery operations following an emergency.
The TSC facilities may be used by designated operating personnel for normal daily operations as well as for training and emergency drills.
Use of the TSC facility during normal operation shall be limited to activities that will not l
degrade TSC preparedness to react to abnormal conditions or reduce TSC systems 8
I reliability. The shift technical advisor (STA) may use the TSC facilities in performing his duties during normal operating conditions in addition to using them during emergencies.
Lihenseeswhocannotmeetthecriteriaforlocation, size,andhabitability for the TSC must submit to NRC a request for an exception.
This request most include justification for the exception and an alternate proposal.
NRC will review requests for exceptions on a case-by-case basis.
2.2 Location The onsite TSC is to provide facilities near the control room for detailed analyses of plant conditions during abnormal conditions or emergencies by trained and competent technical staff.
During recent events at nuclear power plants, telephone communications between the facilities were ineffective in providing all of the necessary management interaction and technical information exchange.
This demonstrates the need for face-to-face communications between TSC and control room personnel.
To accomplish this, the TSC shall be as close as possible to the control room, preferably located within the same building.
The walking time from the TSC to the control room shall not exceed 2 minutes.
This close location will facilitate face-to-face interaction between control room personnel and the senior plant manager working in the TSC.
This proximity also will provide access to information in the control room that is not available in the TSC data system.
Provisions shall be ir.ade for the safe and timely movement of personnel between the TSC and the control room under emergency conditions.
These provisions shall include consideration of the effects of direct radiation and airborne radio-activity from inplant sources on personnel traveling between the two facilities.
Anticontamination clothing, respiratory protection, and other protective gear may be used to help protect personnel in transit.
The 2-minute travel time between the TSC and the control room does not include time required to put on any necessary radiological protective gear, but it does include the time required to clear any security checkpoints.
There should be no majo'r secur ty barriers between these two facilities other than access control stations for the TSC and control room.
2.3 Staffing and Training Upon activation of the TSC, designated personnel shall report directly to the TSC and achieve full functional operation within 30 minutes.
Activation of the TSC shall ensure that only designated operating personnel are in the control room during the emergency and that needed technical support will be provided without obstructing actual plant manipulations or overcrowding the control room.
The licensee-designated TSC staff shall consist of sufficient technical, engineer-ing, and senior designated licensee officials to provide the needed support to the control room during emergency conditions.
Consultants also may be designated by the licensee to augment utility resources in the TSC.
A senior designated licensee official shall coordinate activities in the TSC and interface with the control room, the OSC, and the E0F.
The level of staffing of the TSC may vary according to the severity of the emergency condition.
The staffing for each emergercy class shall be fully detailed in the licensee's emergency plan.
9 u
W 7
For the TSC to function effectively, TSC staff personnel must be aware of their responsibilities during an accident.
The licensee shall, therefore, develop training programs for these personnel.
In addition, to maintain proficiency, the TSC staff shall participate in TSC activation drills that shall be conducted periodically in accordance with the licensee's emergency plan.
Operating procedures and staff training in the use of data systems and instrumenta' ion shall contain guidance on the limitations of instrument readings including whether the information can be relied upon following such events as accidents resulting from earthquakes or the release of radiation.
2.4 Size i
i The TSC may be housed in a complex of directly adjacent areas.
It shall be large enough to provide:
j Working space, witNut crowding, for the personnel assigned to the TSC at the maximum level of occupancy (minimum size of working space provided shall be approximately 75 sq ft/ person);
Space for the TSC data system equipment needed to acquire, process, and display data used in the TSC; Sufficient space to perform repair, maintenance, and service of equipment, displays, and instrumentation; Space for data transmission equipment needed to transmit data originating in the TSC to other locations; Space for personnel access to functional displays of TSC data; Space for anhindered access to coamunications equipment by all TSC personnel who need communications capabilities to perform their functions; Space for storage of and/or access to plant records and historical data; and A separate room adequate for at least three persons to be used for private NRC consultations.
The TSC working space shall be sized for a minimum of 25 persons, including 20 persons designated by the licensee and five NRC personnel.
This minimum size shall be increased if the maximum staffing level specified by the licensee's emergency plan exceeds 20 persons.
f 2.5 Structure The TSC complex must be able to withstand the most adverse conditions reasonably expected during the design life of the plant including adequate capabilities for (1) earthquakes, (2) high winds (other than tornadoes), and (3) floods.
1 The TSC need not meet seismic Category I criteria or be qualified as an engi-neered safety feature (ESF).
Normally, a well engineered str ucture will provide 10
I i
Winds and floods with a an adequate capability to withstand earthquakes.
100 year-recurrence frequency are acceptable as a design basis.
Existing 1
buildings may be used to house the TSC complex if they satisfy the above minimum criteria.
2.6 ' Habitability Since the TSC is to provide direct management and technical support to the control room during an accident, it shall have the same radiological habitability as the control room under accident conditions. TSC personnel shall be protected from radiological hazards, including direct radiation and airborne radioactivity from inplant sources under accident conditions, to the same degree as control room personnel.
Applicable criteria are specified in General Design Criterion 19; Standard Review Plan 6.4; and NUREG-0737, " Clarification of TMI Action Plan Requirements," Item II.B.2.
The TSC ventilation system shall function in a manner comparable to the con-trol room ventilation system.
The TSC ventilation system need not be seismic Category I qualified, redundant, instrumented in the control room, or automat-ically activated to fulfill its role.
A TSC ventilation system that includes high-efficiency particulate air (HEPA) and charcoal filters is needed, as a minimum.
Sufficient potassium iodide shall be provided for use by TSC and control room personnel. The capacity of the installed TSC ventilation filter system shall be independent of these thyroid-blocking provisions.
To ensure adequate radiological protection of TSC personnel, radiation monitor-ing systems shall be provided in the TSC.
These monitoring systems may be composed of installed monitors or portable monitoring equipment dedicated to the TSC. These systems shall continuously indicate radiation dose rates and airborne radioactivity concentrations inside the TSC while it is in use during These monitoring systems shall include local alarms with trip an emergency.
levels set to provide early warning to TSC personnel of adverse conditions that Detectors shall be able to distinguish may affect the habitability of the TSC.
the presence or absence of radiciodines at concentrations as low as 10 7 microcuries/cc.
Equipment that protects personnel shall be provided in the TSC for the staff who must travel between the TSC and the control room or the EOF under adverse radiological conditions.
Protective equipment also shall be provided to allow TSC personnel to continue to function during the presence of low-level airborne radioactivity or radioactive surface contamination.
Anticontamination clothing and respiratory protective gear are examples of equipment that shall be provided.
l i
This equipment shall be properly maintained to assure availability during an emergency.
If the TSC becomes uninhabitable, the TSC plant management function shall be transferred to the control room.
2.7 Communications The TSC will be the primary onsite communications center for the nuclear power plant during an emergency.
It shall have raliable voice communications to the control room, the OSC, the E0F, and the NRC.
The primary function of this voice 11
communication system will be plant management communications and the immediate exchange of information on plant status and operations.
Provisions for com-munications with State and local operations centers also shall be provided in the TSC to provide early notification and recommendations to offsite author-ities prior to activation of the EOF.
The TSC voice communications facilities shall include means for reliable primary and backup communication.
The TSC voice communications may include private 7
telephones, commercial telephones, radio networks, and intercommunication systems as appropriate to accomplish the TSC functions during emergency operating con-ditions.
Existing licensee comminications systems may be used if the systems can be demonstrated to be reliable under emergency conditions and if they are adequate to meet the added TSC requirements.
The licensee shall provide a means for TSC telephone access to commercial telephone common-carrier services that bypasses any onsite or local offsite telephone switching facilities that may be susceptible to loss of power during emergencies.
The licensee shall ensure that spare commercial telephone lines to the plant are available for use by the TSC during emergencies.
The TSC voice communications equipment shall include:
Hotline telephone (located in the NRC consultation room) on the NRC I
emergency notification system (ENS) to the NRC Operations Center; 1
Dedicated telephone (located in the NRC consultation room) on the i
NRC health physics network (HPN);
Dedicated telephones for management communications with direct access to the control room, the OSC, and the E0F; Dial telephones that provide access to onsite and offsite locations; Intercommunications systems between work areas of the TSC, if needed for the TSC functional performance or if the TSC is comprised of separate functional areas; and Communications to licensee mobile monitoring teams and to State and local operations centers prior to E0F activation.
The TSC communication system shall also include designated telephones (in addition to the ENS and HPN telephones) fur use by NRC personnel.
The licensee shall provide at least two dial telephone lines for such NRC use when the TSC is activated..The licensee shall also furnish the onsite access facilities
{
and cables to the NRC for the ENS and HPN telephones.
Facsimile transmission capability between the TSC, the EOF, and the dRC Opera-tions Center shall lso be provided.
2.8 Instrumentation, Data System Equipment, and Power Supplies Equipment shall be provided to gather, store, and display data needed in the TSC to analyze plant conditions.
The data system equipment shall perform these 12
g functions independent of actions in the control room and without degrading or TSC instrumentation data interfering with control room and plant functions.
system equipment and power supplies need not meet safety signals to safety system equipment or displays, suitable isolation shall be requirements.
provided in accordance with GDC 24 to ensure that the TSC systems will degrade performance of the safety system equipment or displays.
The TSC electrical equipment load shall not degrade the capability or relia Circuit transients or power-supply failures of any safety-related power source.
and fluctuations shall not cause a loss of any stored data vital to the TSC Sufficient alternate or backup power sources shall be provided to maintain continuity of TSC functions and to immediately resume data acqu functions.
storage, and display of TSC data if loss of the primary TSC power sources occu The total TSC data system reliability shall be designed to cold shutdown as described in Section 1.5.
The plant data processor (plant process computer) may provide, if stringent conditions are met, the TSC data system functions or may have data for the In either case, the performance of the plant system transmitted through it. data processor and its related instrumen In addition, the computa-when determining the TSC data system unavailability.
tional capacity and data throughput of the plant processor must be sufficient to accommodate the combined computational and input-output loads of the T TSC system and the other functions being performed by the plant processor.
data processed through the plant data processor shall be continuously av to the TSC with the same reliability and accuracy required of a data system Use of the designed to operate independently from the plant data pro TSC or the security of the scftware used to process TSC data.
The SPDS display equipment used in the TSC need not be seismically qualifie it need only meet the TSC data system equipment reliabili factors engineering with consideration for both operating and maintenance criteria.
personnel.
2.9 Technical Data and Data System The TSC technical data system shall receive, store, process, and display infor mation acquired from different areas of the plant as needed to perform the The data available for display in the TSC must enable the plant management, engineering, and technical personnel assigned there to aid th function.
control room operators in handling emergency conditions.
provide access to accurate and reliable information sufficient to determin Plant steady-state operating conditioes prior to the accident.
Transient conditions producing the initiating event, and l
13
F 7
A i
4 Plant systems dynamic behavior throughout the course of the j
accident.
i 9
i The TSC data system may be used for:
Reviewing the accident sequence, Determining appropriate mitigating actions, t
Evaluating the extent of any damage, and Determining plant status during recovery operations.
k' 4
The data set available to the TSC data system must be complete enough to permit accurate assessment of the accident without interference from the control room i;
emergency operation.
As a minimum, the set of Type A, B, C, D, and E variables L
specified in Regulatory Guide 1.97, Revision 2, " Instrumentation for Light-Water-h, Cooled Nuclear Power Plants to Assess Plant and Environs Conditions During and f
Following an Accident," shall be available for display and printout in the TSC.
(?
In addition, all sensor data and calculated variables not specified in Reg.
Guide 1.97 but included in the data sets for the SPDS for the EOF, or for transmission to offsite locations shall be available
. display.
The accuracy I
of the data displayed shall not be significantly less than the accuracy of comparable data displayed in the control room.
The time resolution of data acquisition shall be sufficient to provide data without loss of information during transient conditions.
The time resolution for each sensor signal will depend on the potential transient behavior of the variable being measured.
The TSC data displays of Reg. Guide 1.97 variables shall meet the criteria for TSC data but need not meet the Reg. Guide 1.97 design and qualification criteria for display of those variables in the control room.
Data storage and recall capability shall be provided for the TSC data set. At least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of pre-event data and 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> of post-event data shall be recorded.
The sample frequency shall be chosen to be consistent with the use of the data.
Capacity to record at least two weeks of additional post-event data with reduced-time resolution shall ba provided.
Archival data storage and the capability to transfer data betw4
'ctive memory and archival data storage without interrupting TSC data
'sition and displays shall be provided for all TSC data.
A sufficient number of data isplay and printout devices shall be provided in the TSC to allow all TSC personnel to perform their assigned tasks with unhin-dered access to data.
The TSC displays shall include, but not be limited to, alphanumeric and/cr graphical representations of:
Plant systems variables, In plant radiological variables, Meteorological information, and Offsite radiological information.
Trend information display and time-history display capability is needed in the TSC to give the TSC personnel a dynamic view of the plant status during abnormal 14
, p.-
The TSC displays shall be designed so that callup, manip-operating conditions.
The TSC data display ulation, and presentation of data can be easily performed.
formats shall present information so that it can be easily understood by the TSC personnel performing analyses.
The $PDS shall also be displayed in the TSC.
This duplication will improve the l
If the SPDS exchange of information between the control room and the TSC.
system in the control room is composed of multiple display units, multiple displays must also be provided in the TSC.
2.10 Records Availability and Management The TSC shall have a complete and up-to-date repository of plant records and procedures at the disposal of TSC personnel to aid in their technical analysis In particular, up-to-date as-built and evaluation of emergency conditions.
drawings of the plant systems are needed to diagnose sensor data, evaluate data inconsistencies, and identify and counteract faulty plant system elements.
The TSC personnel shall.have ready access to up-to-date records, operational specifications, and procedures that include but are not limited to:
j Plant technical specifications, L
Plant operating procedures, i
Emergency operating procedures, Final Safety Analysis Report, Plant operating records, Plant operations reactor safety committee records and reports, Records needed to perform the functions of the EOF when it is not operational, and up-to-date, as-built drawings, schematics, and diagrams showing:
Conditions of plant structures and systems down to the compcoent level, and In plant locations of these systems.
All of the above records shall be available in the TSC in current form when this facility is fully implemented. These records will be updated as necessary to ensure currency and completeness.
The method of storage and presentation of the TSC records shall ensure ease of access under emergency conditions.
3.
OPERATIONAL SUPPORT CENTER t
j 3.1 Functions I
The operational support center (OSC) is an onsite area separate from the con-i trol room and the TSC where licensee operations support personnel will assemble in an emergency. The OSC shall:
Provide a location where plant logistic support can be coordinated l
during an emergency, and i
15
7 Restrict control room access to those support personnel specifically requested by the shift supervisor.
When the OSC is activated, it shall be supervised by licensee operations manage-ment personnel designated in the licensee's emergency plan to perform these functions.
3.2 Habitability i
No specific habitability criteria are established for the OSC.
If the OSC habitability is not comparable to that of the control room, the licensee's emer-3 gency plan shall include procedures for evacuation of OSC personnel in the event of a large radioactive release.
These procedures also shall include provisions for the performance of the OSC functions by essential support personnel from other onsite locations.
- 3. 3 Communications The OSC shall have direct communications with the control room and with the TSC sc that the personnel reporting to the OSC can be assigned to duties in support of emergency operations.
The OSC communications system shall consist of one dedicated telephone extension to the control room, one dedicated tele-phone exten:::on to the TSC, and one dial telephone capable of reaching onsite and offsite locations, as a minimum.
Direct voice intercommunications and/or reliable direct radio communications may be used to supplemert these telephone communication links.
4.
EMERGENCY OPERATIONS FACILITY 4.1 Functions The emergency operations facility (E0F) is a licensee controlled and operated offsite support center.
The EOF will have facilities for:
Management of overall licensee emergency response, Coordination of radiological and environmental assessment, Determination of recommended public protective actions, and Coordination of emergency response activities with Federal, State, and local agencies.
c When the EOF is activated, it shall be staffed by licensee, Federal, State, local and other emergency personnel designated by the emergency plan to perform y
these functions.
It shall be the location where the licensee provides overall 0
management of licensee resources in response to an emergency having actual or potential environmental consequences.
A designated senior licensee official will manage licensee activities in the EOF to support the designated official i
in the TSC and the senior reactor operator designated the shift supervisor in the control room.
Facilities shall be provided in the EOF for the acquisition, display, and evalu-ation of all radiological, meteorological, and plant system data pertinent to determine offsite protective measures. These facilities will be used to evaluate the magnitude and effects of actual or potential radioactive releases from the 16
-w
l 4
plant and to determine offsite dose projections.
Facilities used in performing i
essential E0F functions must be located within the E0F complex.
However, supple-mental calculations and analytical support of E0F evaluations may be provided from facilities outside the EOF.
The licensee also may use the EOF as the post-accident recovery management center.
The licensee shall use the E0F to coordinate its emergency response activities Licensee with those of local, State, and Federal agencies, including the NRC.
l personnel in the EOF will use the evaluations of offsite effects to make pro-tective action recommendations for the public to State and local emergency 1
response agencies.
State and local agencies will be responsible for implementing emergency response actions involving the general public.
The State and local agencies may operate from the E0F or trom their own control centers at other locations, dependent Col-upon the site-specific provisions of the emergency plan at each plant.
location of offsite authorities at the EOF for the purpose of offsite dose estimation is encouraged.
At the licensee's option, the EOF rtay be a location for information dissemina-tion to the public via the news media by designated spokespersons in accordance with the licensee's emergency plan.
Provisions to allow periodic briefings of a press pool at the E0F should als be made.
Actual use of this provision would depend on specific accident conditions and the emergency plan of the licensee.
The licensee shall provide normal industrial security for the E0F complex during normal operating conditions.
This protection is required to ensure EOF activa-tion readiness for an emergency by the exclusion of unauthorized persons.
After the E0F is activated, security protection shall be upgraded to restrict access to those personnel assigned to this facility.
Any location provided in the EOF for news media briefings shall be outside of the controlled access area.
j l
To maintain a proper level of readiness, the EOF shall be activated periodically for training and for emergency preparedness exercises as specified in the licensee's emergency plan. The E0F facility may be used by designated licensee personnel for normal daily operations as well as for training and exercises.
Use of the E0F during normal operations shall be limited te activities that will not degrade E0F activation, operations, or reliab lity.
o 4.2 Location, Structure, and Habitability 6
The location of the EOF, and whether a backup facility is required, should consider the following factors:
Whether the location provides optimum functional and availability characteristics for carrying out the licensee functions specified for the EOF (i.e., overall strategic direction of licensee onsite and support operations, determination of public protective actions to be recommended by the licensee to offsite officials, and coordi-nation of the licensee with Federal, State, and local organizations).
Whether the E0F functions would be interrupted during radiation releases for which it was necessary to recommend protective actions for the public to offsite officials.
17
t t
i It is strongly recommended that the EOF location be coordinated with State and local authorities to improve the relationship between the licensee and offsite organizations.
The habitability criteria for the EOF determined by its location are given in Table 2 below.
Table 2.
Relation of EOF Location to Habitability Criteria E0F Criteria Item Distance within Distance at or beyond Needed 10 mi of the TSC 10 mi of the TSC1 Structure Well engineered for Well engineered for 2
2 design life of plant design life of plant Protection factor 3
>5 None Ventilation Isolation with HEPA4 None protection filters (no charcoal)
Backup EOF 5 Located within 10 None to 20 mi of the TSC Specific Commission approval is required for E0F locations beyond 20 miles 1
of the TSC.
For these cases, provisions must include arrangements to locate the NRC staff closer to the reactor.
2 As an example of "well engineered," refer to the Uniform Building Code.
In addition, it must be able to withstand adverse conditions of high winds (other than tornadoes) and floods. Winds and floods with a 100 yr recurrence frequency are acceptable for a design basis.
3 Protection factor is defined in terms of the attenuation of 0.7 MeV gamma radiation.
As a minimum, the protection factor only applies to those areas of the EOF in which dose assessments, communications, and decisionmaking take place.
l Ventilation system shall function in a manner comparable to the control 4
room and TSC systems; but need not be seismic Category I qualified, redundant, instrumented, or automatically activated.
Need not be a separate, dedicated facility, but, when activated, shall provide 5
continuity of dose prediction and decisionmaking functions by arranging for portable backup equipment.
No special provisions for protection factors or ventilation protection are needed.
Licensees who cannot meet the requirements of size and habitability for the EOF must submit to NRC a request for an exceptim..
This request must include justification for the exception and an alternate proposal.
NRC will review I
requests for exceptions on a case-by-case basis.
18
4.3 Staffing and Training The EOF shall be staffed to provide the overall management of licensee resources and the continuous evaluation and coordination of licensee activities during and after an accident.
Upon EOF activation, designated personnel shall report directly to the EOF to achieve full functional operation within I hour.
A senior management person designated by the licensee shall be in charge of all licensee activities in the EOF.
The E0F staff will include personnel to manage the licensee onsite and offsite radiological monitoring, to perform radiological evaluations, and to interface with offsite officials.
The EOF staff assignments shall be part of the licensee's emergency plan.
The specific number and type of personnel assigned to the ECF may vary according to the emergency class.
The staffing for each emergency class shall be fully detailed in the licensee's emergency plan.
Operating procedures and staff training in the use of data systems and instrumentation shall contain guidance on the limitations of instru-mentation including whether the information can be relied upon following serious accidents.
In order to function effectively, the E0F staff personnel must be aware of their responsibilities during an accident.
To maintain proficiency, the EOF staff shall participate in E0F activation drills, which shall be conducted periodically in accordance with the licensee's emergency plan.
These drills shall include operation of all facilities that will be used to perform the EOF functions, including any support facilities located outside the EOF.
4.4 Size The E0F auilding or building complex shall be large enough te provide the following:
Working space for the personnel assigned to the E0F as specified in the licensee's emergency plan, including State and local agency per-sonnel, at the maximum level of occupancy without crowding (minimum size of working space provided shall be approximately 75 sq ft/ person);
Space for EOF data system equipment needed to transmit data to other locations; Sufficient space to perform repair, maintenance, and service of equip-ment, displays, and instrumentation; Space for ready access to communications equipment by all EOF personnel who need communications capabilities to perform their functions; Space for ready access to functional displays of E0F data; Space for storage of plant records and historical data or space for means to readily acquire and display those re ords; and Separate office space to accommodate at least five NRC personnel during periods that the E0F is activated for emergencies.
19
w The EOF working space shall be sized for at least 35 persons, including 25 persons designated by the licensee, 9 persons from NRC, and 1 person from FEMA.
This minimum size shall be increased if the maximum staffing levels specified i
in the licensee's emergency plan, including representatives from State and local agencies, exceed 25 persons.
4.5 Radiological Monitoring To ensure adequate radiological protection of EOF personnel, radiation moni-toring systems shall be provided in the E0F.
These monitoring systems may be composed of installed monitors or dedicated, portable monitoring equipment.
These systems shall continuously indicate radiation dose rates and airborne radioactivity concentrations inside the E0F while it is in use during an emergency.
These monitoring systems shall include local alarms with trip levels set to provide early warning to E0F personnel of adverse conditions that may affect the habitability of the E0F.
Detectors to distinguish the presence or absence of radioiodines at concentrations as low as 10 7 microcuries/cc shall be provided.
4.6 Communications The E0F shall have reliable voice communications facilities to the TSC, the control room, NRC, and State and local emergency operations centers.
The normal communication path between the E0F and the control room will be through the l
TSC.
The primary functions of the E0F voice communications facilities will l
be:
l E0F management communications with the designated senior licensee I
manager in charge of the TSC, Communications to manage licensee emergency response resources, Communications to coordinate radiological monitoring, 1
Communications to coordinate offsite emergency response activities, and Communications to disseminate information and recommended protective actions to responsible government agencies.
The EOF voice communications facilities shall include reliable primary and back-up means of communication.
Voice communications may include private telephones, commercial telephones, radio networks, and intercommunications systems as appro-priate to accomplish the EOF functions during emergency conditions.
Existing licensee communications systems may be used if the systems can be demonstrated to be reliable under emergency conditions and if they are adequate to meet the added EOF criteria.
The licensee shall provide a means for E0F telephone access to commercial telephone common-carrier services that bypasses any local telephone switching facilities that may be susceptible to loss of power during emergencies.
The licensee shall ensure that spare commercial telephone lines to the plant are available for use by the E0F during emergencies.
The E0F voice communications equipment shall include:
20
E Hotline telephone (located in the NRC office space) on the NRC emer-gency notification system (ENS) to the NRC Operations Center; Dedicated telephone (located in the NRC office space) on the NRC health physics network (HPN);
Dedicated telephones for management communications with direct access to the TSC and the control room; Dial telephones reserved for EOF use to provide access to onsite and offsite locations; Intercommunications systems between work areas of the E0F, if needed, for E0F functional performance or if the EOF is comprised of separato functional areas or separate buildings; Radio communications to licensee mobile monitorir;g teams; i
Communications to State and local operations centers; and Communications to facilities outside the E0F used to provide supple-mental support for EOF evaluations.
The EOF communication system shall also include designated telephones (in addi-tion to the ENS and HPN telephones) for use by NRC personnel.
The licensee shall provide at least three dial telephone lines for such NRC use while the EOF is activated.
The licensee shall also furnish the access facilities and cables to the NRC for the ENS and HPN telephones.
Facsimile tra'nsmission capability between the EOF, the TSC, and the NRC Opera-tions Center shall be provided.
4.7 Instrumentation, Data System Equipment, and Power Supplies l
Equipment shall be provided to gather, store, and display data needed in the E0F to analyze and exchange information on plant conditions with the design 3ted senior licensee manager in charge of the TSC.
The E0F data system equipment shall perform these functions independently from actions in the control room and without degrading or interfering with control room and plant functions.
I I
EOF instrumentation, data system equipment, and power supplies need not meet safety grade or Class 1E criteria. When signals to the EOF are received from sensors providing signals to safety system equipment or displays, suitable isolation in accordance with GDC 22, 23, and 24 shall be provided to ensure that the EOF systems cannot degrade performance of the safety system equipment of displays.
l l
The E0F electrical equipment load shall not degrade the capability or reliability l
of any safety-related power source.
Circuit transients or power supply failurcs l
and fluctuations shall not cause a loss of any stored data vital to the E0F functions.
The total E0F data system shall be designed to achieve an operational unavail-ability goal of 0.01 during all plant operating conditions above cold shutdewn as described in Section 1.5.
l 21
1 l
The plant data processor (plant process coirputer) may provide, if stringent conditions are met, the EOF data system functions or may have data for the E0F system transmitted through it.
In either case, the performance of the plant data processor and its related instrumentation and equipment shall be included when determining the EOF data systam unavailability.
In addition, the computa-tional capacity and data throughput of the plant processor must be sufficient to accommodate the combined computational and input-output loads of the E0F system and the other functions being performed by the plant processor.
EOF data processed through the plant data processor shall be continuously available to the EOF with the same reliability and accuracy required of a data system designed to operate independent of the plant data processor.
Use of the plant data processor shall not degrade the integrity of data supplied to the E0F or the security of the software used to process E0F data.
The SPDS display equipment used in the E0F need not be seismically qualified and shall meet only the E0F data system equipment reliability and performance criteria.
This display is necessary for licensee corporate management and the NRC Regional Director to communicate more easily with the TSC or the control room and to have a better understanding of the plant status.
The design of the EOF data system equipment shall incorporate human-factors engineering with consideration for both operating and maintenance personnel.
4.8 Technical Data and Data System The EOF technical data system will receive, store, process and display informa-tion sufficient to perform assessments of the actual and potential onsite and offsite environmental consequences of an emergency condition.
Data providing information on the general condition of the plant also shall be available for display in the E0F for utility resource management.
The EOF data set shall incluoe radiological, meteorological, and other environ-mental data as needed to:
Assess environmental conditions, Coordinate radiological monitoring activities, and Recommend implementation of offsite emergency plans.
As a minimum E0F data set, sensor data of the Type A, B, C, D, and E variables specified in Reg. Guide 1.97, Revision 2, and of those meteorological variables specified in proposed Revision 1 to Regulatory Guide 1.23, " Meteorological Measurements Programs in Support of Nucl2ar Power Plants," and in NUREG-0654, Revision 1. Appendix 2, shall be available for display in the E0F.
All data that are available for display in the TSC, including data transmitted from the plant to NRC, shall be part of the EOF data set.
The accuracy of data in the EOF must be consistent with the data accuracy needed to perform the E0F functions.
The accuracy of data displays in the E0F shall be equivalent to that for the data displayed in the TSC.
The time resolution of data requisition shall be sufficient to provide data without loss of infor-mation during transient conditions.
The time resolution required for each sensor signal shall depend on the potential transient behavior of the variable being measured.
The E0F data displays of Reg. Guide 1.97 variables shall meet the criteria for EOF data but need not meet the design and qualification criteria in Reg. Guide 1.97 for display of those variables in the control room.
22
Data storage capability shall be provided for the E0F data set.
At least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of pre-event data and 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> of post event data shall be recorded.
The sample frequency shall be chosen to be consistent with the use of the data.
Capacity to record at least two weeks of additional post-event data with reduced time resolution shall be provided.
Archival data storage and the capability to transfer data between active merory and archival data storage without inter-rupting E0F data acquisition and displays shall be provided for all E0F data.
A sufficient number cf data display devices shall be provided in the E0F to allow all E0F personnel to perfore: their assigned tasks with unhindered access to alphanumeric and/or graphical representations of:
Plant systems variables, In plant radiological variables, Meteorological information, and Offsite radiological information.
Trend-information display and time-history display capability is required in the E0F to give EOF personnel a dynamic view of plant systems, radiological status, and environmental status during an emergency.
The EOF displays shall be designed so that callup, manipulation, and presentation of data can be easily performed.
The displays shall be partitioned to facilitate the retrieval of information by the different functional groups in the EOF.
This may be accom-plished with either separate display units or by logically separated informa-tion display pages available en a callup basis at each data display unit.
The E0F data display formats shall present information so that it can be easily understood by the EOF persor.rel operating the system.
If display capabilities for news media briefings are provided in the EOF, these displays shall be separated physically from the EOF functional displays.
Human-factors engineering shall be incorported in the design of the EOF.
The SPDS shall also be displayed in the E0F.
This duplication will provide licensee management and NRC representatives information about the current reactor systems status and will facilitate communications among the control room, TSC, and EOF.
If the SPDS system in the control room is composed of multiple display units, multiple displays must also be provided in the E0F.
4.9 Records Availa:
ity and Management The EOF shall have ready access to up-to-date plant records, prceedures, and emergency plans needed to exercise overall management of licensee emergency response resources.
The E0F records shall include, but shall not be limited to:
Plant technical specifications, Plant operating procedures, Emergency operating procedures, Final Safety Analysis Report, Up-to-date records related to licensee, State, and local emergency
)
response plans, Offsite population distribution data, Evacuation plans, Environs radiological monitoring records, and Licensee employee radiation exposure histories.
23
v and up-to-date drawings, schematics and diagrams showing:
Conditions of plant structures and systems down to the component level and In plant locations of these systems.
These records shall either be stored and maintained in the ECF (such as hard copy or microfiche) or shall be readily available via transmittal to the E0F from another records storage location.
The method of storage and presentation of the EOF records shall ensure ease of access under em e gency conditions.
The records available to the E0F shall be completely updated as necessary to ensure currency and completeness.
5.
SAFETY PARAMETER DISPLAY SYSTEM 5.1 Function The purpose of the safety parameter display system (SPDS) is to assist control room personnel in evaluating the safety status of the plant.
The SPDS is to provide a continuous indication of plant parameters or derived variables repre-sentative of the safety status of the plant.
The primary function of the SPDS is to aid the operator in the rapid detection of abnormal operating conditions.
The functional criteria for the SPDS presented in this section are applicable for use only in the control room.
It is recognized that, upon the detection of an abnormal plant status, it may be desirable to provide additional information to analyze and diagnose the cc.ase of the abnormality, execute corrective actions, and monitor plant response as secondary SPDS functions.
As an operator aid, the SPDS serves to concentrate a minimum set of plant param-eters from which the plant safety status can be assessed.
The grouping of param-eters is based on the function of enhancing the operator's capability to assess plant status in a timely manner without surveying the entire control room.
However, the assessment based on SPDS is likely to be followed by confirmatory surveys of many non-SPDS control room indicators.
Human-factors engineering shall be incorporated in the various aspects of the SPDS design to enhance the functional effectiveness of control room personnel.
The design of the primary or principal display format shall be as simple as possible, consistent with the required function, and shall include pattern and coding techniques to assist the operator's memory recall for the detection and recognition of unsafe operating conditions.
The human-factored concentration of these signals shall aid the operator in functionally comparing signals in the assessment of safety status.
All data for display shall be validated where practicable on a realtime basis as part of the display to control room personnel.
For example, redundant sensor data may be compared, the range of a parameter may be compa.ed to predetermined limits, or other quantitive methods may be used to compare values. When an unsuccessful validation of data occurs, the SPDS shall contain means of identi-fying the impacted parameter (s).
Operating procedures and operator training in the use of the SPDS shall contain information and provide guidance for the 24
=
y i
i resolution of unsuccessful data validation.
The objective is to ensure that the SPDS presents the most current and accurate status of the plant possible
~;
and is not compromised by unidentified faulty processing or failed sensors.
The SPDS shall be in operation during normal and abnormal operating conditions.
I.
The SPDS shall be capable of displaying pertinent information during steady-state and transient conditions.
The SPDS shall be capable of presertir.g the magnitudes and the trends of parameters or derived variables as necessary to f
allow rapid assessment of the current plant status by control room personnel.
The parameter trending display shall contain recent and current magnitudes of the parameter as a function of time.
The derivation and presentation of param-F eter trending during upect conditions is a task that may be automated, thus freeing the operator to interpret the trends rather than generate them.
Display of time derivatives of the parameters in lieu of trends to both optimize operator-process communication and conserve space may be acceptable.
The SPDS may be a source of inform + ion to other systems, and the functional criteria of these systems shall state the required interfaces with the SPDS.
J Any interface between the SPDS and a safety system shall be isolated in accordance with the safety system criteria to preserve channel independence a
and ensure the integrity of the safety system in the case of SPDS malfunction.
g Design provisions shall be included in the interfaces between the SPDS and i
nonsafety systems to ensure the integrity of the SPDS upon failure of
[
nonsafety equipment.
t A qualification program shall be established to demonstrate SPDS conformance a
to the functional criteria of this document.
5.2 Location ~
The SPDS shall be located in the control room with additional SPDS displays provided in the TSC and the E0F.
The SPDS may be physically separated from the normal control board; however, it shall be readily accessible and visible to the shift supervisor, control room senior reactor operator, shift technical advisor, and at least one reactor operator from the normal operating area.
If l
the SPDS is part of the control board, it shall be easily recognizable and readable.
- 5. 3 Size The SPDS shall be of such size as to be compatible with the existing space in the control area.
The SPDS display shall be readable from the emergency operating station of the control room senior reactor operator.
It shall not interfere with normal movement or with full visual access to other control room operatir.g systems and displays.
\\
5.4 Staffing l
The SPDS shall be of such design that no operating personnel in addition to the normal control room operating staff are required for its operation.
25 L
7 5.5 Display Considerat',ons The display shall be responsive to transient and accident sequences and shall be sufficient to indicate the status of the plant.
For each mode of plant operation, a single primary display format designed according to acceptable human-factors principles (a limited number of parameters or derived variables and their trends in an organized display that can be readily interpreted by an operator) shal be disp.3yed, from which plant safety status can be inferred.
It is recognized that it may be desirable to have the capability to recall additional data on secondary formats or displays.
The primary display may be individual plant parameters or may be composed of a number of parameters or derived variables giving an overall system status.
The basis for the selection of the minimum set of parameters in the primary display shall be documented as part of the design.
The important plant functions related to the primary display while the plant is generating power shall include, but not be limited to:
Reactivity control Reactor core cooling and heat removal from primary system Reactor coolant system integrity Radioactivity control Containment integrity The SPDS may consist of several display formats as appropriate to monitor and present the various parameters or derived variables.
For each plant operating mode, these formats may either be automatically displayed or manually selected by the operator to keep control room operating personnel informed.
Flexibility to allow for interaction by the operator is desirable in the display designs.
Also, where feasible, the SPDS should include some audible notification to alert personnel of an unsafe operating condition.
The SPDS need not be limited to the previously stated functions.
It may include other functiont that aid operating personnel in evaluating plant status.
It is desirable that the SPDS be sufficiently flexible to allow for future incorporation of advanced diagnostic concepts and evaluation techniques and systems.
The il sensors and signal conditioners (such as preamplifiers, isolation devices, etc.)
shall be designed and qualified to meet Class IE standards for those SPDS param-ll eters that are also used by safety systems.
Furthermore, sensors and signal lj conditioners for those parameters of the SPDS identical to the parameters specified
' j within Reg. Guide 1.97 shall be designed and qualified to the criteria stated in Reg. Guide 1.97.
For SP]S application, it is also acceptable to have Class IE t
qualified devices from the sensor to a post-accident-accessible location, such ij as outside containment, and tnen non-1E devices from containment to the display (or processor) on the presumption t W these components can be repaired or replaced in an accident environment.
'e processing and display devices of the SPDS shall be of proven high quali( and reliability.
26
The function of the SPDS is to aid the operator in the interpretation of tran-sients and accidents.
This function shall be provided during and following all events expected to occur during the life of the plant, including earthquakes.
To achieve this function, the display system shall not only take adequate account of human factors--the man machine interface--but shall also be sufficiently duratile to function during and after earthquakes.
Because of current technology, it may not be possible to satisfy these criteria within one SPDS system.
From an operational viewpoint, it is preferred that only one display system be used for evaluating the safety status of the plant.
One display system simpli-fies the man machine interface and thus minimizes operator errors.
- However, in recognition of the restraints imposed by current technology, an alternative is to design the overall SPDS function with a primary and a backup display system:
(1) the primary SPDS display would have high performance and flexibility and be human factored but need not be seismically qualified; and (2) the backup display system would be operable during and following earthquakes, such as the normal control room displays needed to comply with Reg. Guide 1.97.
The display system (or systems) provided for the SPDS function shall be capable of function-ing during and following all desigr. basis events for the plant.
In all cases, both the primary SPDS display and the backup SPDS seismically qualified portion of the display shall be sufficiently human factored in its design to allow the control room operations staff to perform the safety status assessment task in a timely manner.
Dependence on poorly human-engineered
- lass IE seismically qualified instruments that are scattered over the control board, rather than concentrated for rapid safety status assessment, is not acceptable for this function.
An acceptable approach would be to concentrate the seismically qualified display into one segment of the control board.
The dynamic loading limitations of the SPDS design shall be defined and incor-porated into the training program.
The control room operations staff shall be provided with sufficient information and criteria to allow for performance of an operability evaluation of SPDS if an earthquake should occur.
The SPDS as used in the control room shall be designed to an operational unavail-ability goal of 0.01, as defined in Section 1.5 of this document.
The cold shutdown unavailability goal for the SPDS during the cold shutdown and refueling modes for the reactor shall be 0.2, as defined in Section 1.5.
Technical specifications shall be established to be consistent with the unavail-ability design goal of the SPDS and with the compensatory measures provided during periods when the SPDS is inoperable.
Operation of the plant with the SPDS out of service is allowed provided that the control board is sufficiently human factored to allow the operations staff to perform the safety status assessment task in a timely manner.
Dependence on poorly human-engineered instruments that are scattered over the control board rather than concentrated for rapid safety status assessment is not acceptable for this function.
6.
NUCLEAR DATA LINK 6.1 Function When a significant incident occurs at a nuclear power plant, the NRC will acti-vate the Executive Team (ET) at the NRC Operations Center to oversee the agency 27 m
l response.
The ET for reactor events consists of the Director of the NRC response (Chairman or designated alternate), the Executive Director for Operations, the 3
Director cf the Office of Inspection and Enforcement, and the Director of the k
Office of Nuclear Reactor Regulation. When the ET is activated, the Regional J
Director and Regional support staff leave immediately for the affected site, and a headquarters technical support group is called in to provide assistance to the ET and to NRC site personnel.
1 The primary role of each of these components of the NRC Incident Response Pro-j gram is to monitor the event, independently evaluate the situation, provide 4
advice and assistance to the licensee and offsite authorities, and inform 1
officials and the general public about the radiological conditions on site and around the facility and the physical condition of facility.
e s
Until the Regional Director (or other designated senior NRC official) arrives 3
at the site, the NRC Operations Center must carry out the roles described above.
When the Regional Director or other designated senior NRC official arrives at the site, it is contemplated that responsibility for managing the NRC operations in and around the plant will be transferred to that individual at the site (i.e., NRC Director of Site Operations).
After the responsibility for managing the NRC site operations has been trans-ferred to the Director of Site Operations, the headquarters technical support groups will provide direct support to him by continuing to evaluate informa-p tion provided by site personnel.
In addition, certain key decisions, particu-t t
larly those relating to recommendations for actions affecting the general public
[
and those involving changes in the NRC's role in responding to the accident, 9
may remain with the Director of the NRC response.
The NRC role will not extend to any manipulation of nuclear power plant controls nor will it normally include directing licensee actions.
However, in extreme cases, NRC may direct that f;
certain operations be performed by the licensee at the nuclear plant.
In such an unlikely situation, it is expected that any direction from NRC would be provided to licensee management from the Director of Site Operations after his a
arrival onsite or from the Director of NRC response (Chairman or designated k
alternate) prior to that time.
(A more detailed description of the manner in which NRC will respond to significant incidents can be found in NUREG-0728, l
" Report to Congress:
NRC Incident Response Plan," and in NUREG-0730, " Report h
y L
to Congress on the Acquisition of Reactor Data for the NRC Operations Center".)
j To fulfill these functions of providing support, NRC must have reliable and timely data from the nuclear power plant.
This will be obtained through a l
nuclear data link (NDL), a data transmission system designed to send a l
specified set of variables from the plant to the URC Operations Center.
6.2 Description i
The nuclear data link (NDL) processes and transmits certain reactor process U
i variables,' and radiological and site meteorological data from each operating nuclear power plant to the NRC Operations Center.
The NDL system is comprised 4
of a data acquisition system, an NDL terminal (both of which are-located on 4
site), and an Operations Center system at NRC headquarters.
Figure 1 shows a block diagram of how the NDL could be connected to the emergency response data acquisition system and is explained in the following paragraphs.
l 6
28-y L
I' m
v e
~_
l R
E T
e N
E l
C F
S N
O I
S T
N R
A E
R IO T
E T
U P
A P
O M
C O
P R
C O
N
[L rLf>L S
N O
ITACK w
I N x e
NI i
E U L v
r T
M e
I v
S M
O F
F O
O C
me t
4j s
E y
T I
S S
L N
D L
O A
N LNI 1
c D M N
e R
r E
u E
T T
ig I
F S
R O
TCA E
N R
O M I
D Y
Q S C
A s \\ '
i i,
M O
I R
F i
i,
l t
!lllI'l
The data a:quisition system (DAS) acquires data for the variables listed in I
Reg. Guide 1.97, Rev. 2, and Reg. Guide 1.23 and also may include other site-specific variables for transmission to the TSC, E0F, and SPDS as determined by the licensee.
The DAS also has Reg. Guide 1.97 data available to be transmitted to the NRC Operations Center over the NDL and to vendors and State or local authorities over other data links.
Reg. Guide 1.97 information currently lists approximately 60 variables, depending on whether a PWR or BWR facility is being considered.
The DAS performs multiplexing of incoming signals and conversion of raw data into engineering units.
The data are scaled and time tagged appro-priately and converted into a standardized, digital format for transmission.
Sensor sampling by the DAS and data transmission to the NDL terminal must occur at intervals of not greater than one minute.
The analog-to-digital conversion performed on the input data transmitted shall have 12-bit resolution.
Each reading shall be time tagged.
A data-access approach discussed in Appendix E of NUREG/CR-1451 may be used i
for transients. With that approach, the peak value and time integral of the
(
transient are captured, digitized, formatted, and transmitted at one-minute
[
intervals.
I An NDL terminal at the plant may accept data from the DAS and transmit it to i;
the NRC Operations Center.
The terminal would handle the communications protocol j
as well as error detection and correction.
The NDL terminal hardware and soft-a ware would be a standardized unit specified by the NRC.
Specification for this unit would be developed as a part of the NDL system design.
J The Operations Center system makes data obtained from the licensee facility available for viewing in the NRC Operations Center.
Facilities for retention i
of data will exist at the NRC Operations Center.
The Operations Center sub-i 1
system, as presently envisioned, will include a general purpose computer that is capable of receiving data from any plant.
Video data terminals, printers, magnetic memory storage, and miscellaneous peripherals will comprise the bal-ance of the equipment at the NRC Operations Center.
The peripherals provide the man-machine interface to access and display numerical and graphical repre-sentations of parametric data and provide data storage capabilities.
The com-puter may be used to maintain a file of current data from each reactor site.
1 When an incident occurs, long-term data retrieval and storage begins in the l
NRC Operations Center.
Stored data from at least a 2-week period shall be t
available for recall and display, as well as for analysis and verification by NRC personnel.
i 6.3 NDL Interface The interface between the data acquisition system and the NDL will require the use of a common communications protocol, to be defined later.
6.4 Environment The DAS and the NDL interface shall meet the same environmental specifications that apply to the onsite technical support center.
Power supply for the acquisition system and formatting equipment shall be high-reliability non-Class 1E power that is backed by battery power to eliminate momentary interruptions.
30
The licensee is responsible 'or the correction of any failure that results in degraded plant data being delivered to the NDL communications link at the speci-fied intervals.
7.
ACQUISITION AND CONTROL OF TECHNICAL DATA i
7.1 Sources of Technical Data i
Parameters specified in Reg. Guide 1.97, Rev. 2, and Reg. Guide 1.23 shall be provided to the data acquisition system (DAS).
Isolation devices are needed for all signal interfaces with safety systems to prevent interference, degrada-tion, or damage to any element of the safety system as specified in General Design Criterion 24, " Separation of Protection and Control Systems," and IEEE Standard 279-1971, Section 4.7, " Control and Protection System Interaction."
The signals may be provided at a control room interface or input connecticn to the process control computer.
These inputs shall not be processed by a software-programmable device, or any device controlled indirectly by software, before entering the DAS except for data received in accordance with Reg. Guide 1.23.
j 7.2 Acquisition of Data Examples of data acquisition and distribution systems are shown in Figures 2 and 3 of this document.
The configuration in Figure 3 is the anticipated data i
acquisition system that will be implemented.
If the conditions of Se: tion 2.8 are met, the configuration shown in Figure 2 could be acceptable.
A?1 inputs that interface with safety system signals must be isolated by an isolation device prior to connection to the DAS.
7.3 DAS Functional Limitations The DAS must not be subject to external demands for processing or services that I
could degrade the needed reliability under accident conditions and must not be interrupted, delayed, or in any way impeded or degraded in its function by any I
such external demands or software installation or c'1anges in any plant equip-ment. The only exception is the system's internal calibration and self-diagnostic routines.
Output data from the DAS must be consistent with readings observed by the operators in the control room.
To achieve this objective, verification and validation tests shall be performed to assure correlation of data obtained from each source.
7.4 DAS Design, Verification, and Configuratfor. Control L
Because the data acquisitien system may be the basic source of data for all of the emergency facilities, its hardware and software configurations and changes shall be verified for reliability.
Tests to demonstrate and evaluate the integrity of software and the integrated system are needed.
These tests should be performed with the system operating continuously on live input signals in addition to satisfactory performance of static and dynamic test cases.
1 31 s
Sth&On EachAst f MOM 04Saf t LOCAfeONE vg EAf t TV SAf tf f Systaus.
SYSI: ee ssGN ALE 5+ Gnat &
'$AfftvGA4DE_
CATA ntG GuaDE t 23 i*
esotAfras J
CONTROL 3OOM PLANT PROCET.S COMPUTEh PL ANT PROCIES E#'A'I PLANT Da.IA SV$f tM D6 SPLAY Ev5ftM 1
1 1
1, EAfE FY PAAAMtf 4 A
,o,,
De&PLAv$
e utnGar eCY Rt6 Posse SACILITaf' DATA SVSTEM g
g l
1 W
_________I DG MET DATA wDL DATA TECHNICAL SUPPORT A G 123 CENTER A Dosa sm AM l
sPOs Assamaur l
DISPL A v $
i NOL I
T$C TI""
fumCTIOhAL Ds5PLAv5 AND Mo'"o't M l
1 I
PLANT SOUNDARY l
l i
i 1
1 E ME RGE NCY l
58h50A &#G4ALS t-OPE R ATIONS
'"0" O' ' 58 ' 8 Spos FACitsiv L"^ ** 5 D.sn av5 h
e i
I"O I DF hRC eta'f t AGC'eCet s PubCTIONAL Di&PLAf 5 OPE A A f EONS C4Nf t A LEAL AGt hCets 46 Figure 2. Example of a Functional Block Diagram of Data Flow Using Plant Process Computer.
... l
w i
st"8sOR s80=Ats PROM Oms 878 LOCAf 908ss ME f t omotOG4C AL leOm saf tTV SAf tfv SYSTEMS DAT A mf G GusOE 123 systtu $8Gasats ssGmats
^
r
'*'SAft17 GRADE esO& Atoms i-CONTROL ROOM PLAsuf pnOCis$
PLA8st PROCESS COMPuff e steceeen COMPUTEm DesetAvs Daf A sy syt e eg,c,,,,,33,, ceteists,
EMERGimCT tesPOmst f a d*#
g,,,q DAT A ACouettTme. stonAct.
l SAFETV PARAMEYt2 AND ** KessessG OfsPthV system vw-DetrtA vs 1
1
_ _.. _ _ _ 4 l
MGT DATA NDL DATA l
" $E#,3 W
'N '"
TECHNICAL SUPPORT Asst ssut et l
W CENTER spos g
0:srtava l
mot finMinat l
tsC AND MODEW g
FumCTION AL DesPLAvs i
I I
i
. PLANT BOUNDARY e'
i I
""0" * *L 8 l
ms' E ME RGE NCY i
4 OCA OPE R ATIONS g,og g
FACILITY oesPtavs W NDons smC E Op s% Aft AGthCits puencisONAL Disptavs OrtnAvposes LOCAL AGeseCets Ct este n 60Penenop Figure 3. Example of Functional Block Diagram Flow Without Using Plant Process Computer.
i i
The following are the primary criteria for qualification of changes in the DAS:
}
(1) The original development and subsequent changes are to be performed in accordance with documented quality assurance procedures that are to be available for review by the NRC staff.
(2) The original software and subsequent modifications are to be subjected to static and dynamic test programs to verify performance.
Once the system j
becomes operational, all subsequent software changes and modifications must undergo static and dynamic tests to verify performance.
After the performance has been verified, the software may be transferred to the DAS in accordance with an approved DAS update procedure.
1 These types of criteria were used to ensure software reliability in Position j
19 of NUREG-0308, " Safety Evaluation Report Related tc Operation of Arkansas j
Nuclear One, Unit 2," Rev. 1 and supplements.
The criteria for qualification of the OAS describe the changes on DAS operation
)
and its effect on compatibility with the NOL.
Records shall be kept of the f
f, date a particular change was implemented.
- 7. 5 DAS Reliability f
i The data acquisition system shall provide data access for the SPDS, TSC, and i
EOF, as well as the NOL.
Therefore, high DAS reliability is paramount to achieve accurate and dependable information on a continued basis. A moderate amount i
of excess capacity and the capability to expand modularly should be included i
to allow modest increases in parameter monitoring without serious impact on the system.
}
8.
EMERGEW JNSE FACILITY INTEGRATION During emergency conditions, it is essential that there be a continuous high i
level of interaction and communications among key personnel in the control room,
{
emergency response facilities, and NRC to ensure that all emergency actions are fully understood and coordinated.
The foregoing emergency response facilities (ERFs) are developed to function i
as an integrated system.
The licensee's ERFs shall.be designed to provide i
coordinated support to the control room during emergency operating conditions.
These facilities shall be integrated into the licensee's emergency plan at each site to facilitate coordination with State and local emergency response facilities.
l The systems design of the ERFs shall ensure that the following functional criteria l
if each facility are satisfied:
Ii The operation of any system or subsystem within the licensee's ERFs shall not degrade the performance or reliability of any reactor safety or control system or of any safety related displays in the control room.
Actions in the control room and operation of control room systems shall not degrade or interfere with the functional operation of ERF systems.
34
Normal operation of any system or subsystem in the ERFs shall not degrade or interfere with the functional operation of other systems in those facilities.
The DAS hardware and software shall be protected against unauthorized manipulation of or interference with input signals, data processing, data storage, and data output.
The ERF data system may be a fully or partially integrated data processing system serving all emergency response facilities and systems.
Alternatively, the ERF data system may be comprised of multiple data processing units serving individual f
parts of the ERFs or providing separate functions.
Regulatory Guide 1.97, Revision 2, establishes criteria for a cident monitoring instrumentation to be displayed in the control room.
The minimum data set that shall be available for display and use in the TSC and EOF shall include the i.
following:
Type A, B, C, 0, and E variables specified in Reg. Guide 1.97; Meteorological variables specified in Reg. Guide 1.23 and NUREG-0654, Revision 1, Appendix 2; and Variables displayed by the SPDS.
The acquisition and transmission of data of Reg. Guide 1.97 variables to the TSC and EOF need not meet the Reg. Guide 1.97 design and qualification criteria y
for display of that data in the control room.
Signals for ERF systems may be received from sensors providing signals to safet3 related systems.
Suitable isolation devices must be used to ensure that the ERF systems cannot degrade performance of the reactor safety systems.
The ERF data systw.ms need not be safety grade systems beyond the device previding isolation from safety rslated systems.
9.
VERIFICATION AND VALIDATION CRDiRIA The design, devclopment, qualification, and installation of the SPDS, TSC, EOF, and NDL facilities and systems shall be independently verified and validated by qualified personnel other than the original designers and developers.
The independent verification and validation of these facilities are needed to pro-vide assurance that highly reliable and available systems will be implemented for all plant facilities.
The licensee's quality assurance organization may l
be used for the verification and validaticn program if it meets the independence criteria and is technically capable of performing these functions.
Because the SPDS, TSC, and E0F are important elements in the capability of a nuclear power plant to respond to an emergency, limiting conditions for opera-tion in the plant technical specifications shall be established to specify l
35 u
7 i
1 I
i j
compensating actions to be taken by the licensee when the SPDS, TSC, and E0F i
are not operational.
Reportable outage periods under the technical specifica-3 tion shall include a report on compensatory measures, such as additional staf-j fing, taken during the time the SPDS, TSC, EOF, or NDL is not operational.
4 The plant technical specifications shall include surveillance requirements to i
determine the operability of the ERFs.
The SPDS, TSC, OSC, EOF, and NOL facili-I
?
ties shall be designed to provide for periodic testing to diagnose and recognize component degradation and systems malfunct'.on.
i 10.
BIBLIOGRAPHY l
1.
Letter from H. R. Denton, NRC, to All Operating Nuclear Power Plants,
Subject:
Discussions of Lessons Learned Short-Term Reouirements, dated j
October 30, 1979.*
2.
Letter from D. G. Eisenhut, NRC, to All Operating Ncclear Power Pl M s, l
Subject:
NRC Nuclear Data Link (NDL), dated March 12, 1980.*
4 1
3.
Letter from D. G. Eisenhut, NRC, to All Power Reactor Licensees,
Subject:
1' Clarification of NRC Site Requirements for Emergency Response Facilities at Each Site, dated April 25, 1980.*
4.
U.S. Nuclear Regulatory Commission, " Safety Evaluation Renort Related to Operation of Arkansas Nuclear One, Unit 2," USNRC Report NUREG-0308, November 1977, Supplement 1, March 1978.
(Available from NTIS only.)
5.
U.S. Nuclear Regulatory Commission, "TMI-2 Le: sons Learned Task Force Status Report and Short-Term Recommendations," USNRC Report NUREG-0578, July 1979.**
6.
U.S. Nuclear Regulatory Commission, "TMI-2 Lessons Learned Task Force Final Report," USNRC Report NUREG-0585, August 1979.**
7.
U.S. Maclear Regulatory Commission, " Criteria for Preparetion and Evelua-tion of Radiological Emergency Response Plans and Preparedness in Support of Nulcear Power Plants," USNRC Report NUREG-0654, Rev. 1, 'lovember 1980.***
i 8.
U.S. Nuclear Regulatory Comniission, "NRC Action Plan Developed as a Result of the TMI-2 Accident," USNRC Report NUREG-0660, Vols. 1 and 2, May 1980.***
9.
U.S. Nuclear Regulatory Commission, " Report to Congress:
NRC Incident Response Plan," USNRC Report NUREG-0728, September 1980.**
10.
U.S. Nuclear Regulatory Commission, " Report to Congress on the Acquisition of Reactor Data for the NRC Operations Center," USNRC Report NUREG-0730, September 1980.**
36 i
a
m
/
11.
U.S. Nuclear Regulatory Commission, " Clarification of TMI Action Plan Requirements," USNRC Report HUREG-0737, Novenher 1980.***
12.
U.S. Nuclear Regulatory Comission, " Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants - LWR Edition," USNRC Report NUREG-75/087 Section 6.4, " Habitability Systems," Rev. 1.
(Available from NTI$ only.)
13.
U.S. Nuclear Regulatory Commission, " Conceptual and Programmatic Framework for the Proposed Nuclear Data Link," prepared by Sandia National Laboratories, USNRC Report NUREG/CR-1451, April 1980.**
14.
U.S. Nt. clear Regulatory Commission, Regulatory Guide 1.23, " Meteorological Measurement Prog:ams in Support of Nuclear Power Plants," proposed Revision 1.t 15.
U.S. Nuclear Regulatory Commission, Regulatory Guide 1.97, "Instrumentatioa for Light-Water-Cooled-Nuclear Power Plants to Assess Plant and Environs Condit: ens During and Following an Accident," Revision 2.t 16.
10 CFR Part 50, General Design Criterion 19, " Control Room."*
17.
10 CFR Part 50, General Design Criterion 24, " Separation of Protection and Control Systen.."*
- Available in the NRC Public Document Room for inspection and copying for a fee.
- Available for purchase from the NRC/GPO Sales Program, U.S. Nuclear Regulatory Commission, Washington, DC 20555, and the National Technical Information Service, Springfield, VA 22161.
- Available free upon written request to the Division of Tectrical Information and Document Control, U.S. Nuclear Regulatary Comission, Washington, DC 20555.
tavailable from the NRC/GP0 Sales Program, U.S. Nuclear Regulatory Commission, Washingtcn, DC 20555, Attention: Regulatory Guide Account.
37
N C eOm M5 L'.S. NUCLE A2 CE!ULATORY COMMISSION BIBLIOGRAPHIC DATA SHEET NUREG-0696 4 TITLE AND SUBTITLE (Add Volume No., of apprcproser1
- 2. (Leave blaski Functional Criteria for Emergency Response Facilities
- 3. RECIPIENT'S ACCESSION NO.
! E AUTl89R(S)
- 5. DATE REPORT COMPLETED Safety Data Integration Group l YEAR umm February 14A1
- 9. PERFORMING ORGANIZATION NAME AND MAILING ADDRESS (/nclude Esp Codel DATE REPORT ISSUED Safety Data Integration Group l Q^"
" ~
F >b m
R U. S. Nuclear Regulatory Comission Washingotn, D. C.
20555
- 8. (Leave Nank)
- 12. SPONSORING ORGANIZATION NAME AND M AILING ADDRESS (include I.,3 Code /
- 0. PROJE CT/T ASK/WORf i) NIT N O.
Office of Inspection and Enforcement U. S. Nuclear Regulatory Commission
- 11. CONTRACT NO.
ushington, D. C.
20555
- 13. TYPE OF REPORT PE RIOD COVE RED (/nclusive dams)
Technical Report
- 15. SUPPLEMENTARY NOTES
- 14. (Leave Naik) i
- 16. ABSTR ACT 000 words or lessf This report describes the facilities and systems to be used by nuclear power plant l
licensec.; to improve responses to emergency situations. The facilities include the
+
Technical Support Centcr (TSC), Onsite Operational Support Center (0SC), and Nearsite Emargenc.y Operations facility (EOF), as well as a brief discussion of the emergency response function of the control room. The data systems described are the Safety Parameter Display System (SPDS) and Nuclear Data Link (NDL). Together, these facilities and systems make up the total Emergency Response Facilities (ERFs).
Licensees should follow the guidance provided both in this repurt and in NUREG-0654 (FEMA-REP-1), Revision 1, for design and implementation of the ERFs.
- 18. AVAILABILITY STATEMENT
- 13. SECURITY CLASS (This report /
- 21. NO. OF PAGES Unclassified Unlimited
'DS'cTaEIfi$88'*'#*#
"i"' '
RRC FORW 335 (7 77)
Ls'
4 ^, h s' aa --
[', [3, # ~l#{, {.,e,,
' ' h'
'~
jb f,,)
4,a b sk.
Y 4
- 'P
~
,'u),,
4 te s
.p' y
K.s c. o.g..f b y $. x. Q a M,pQ l'.afr%,, sY.. ;.k. ;J, ?Q ff, Q,u', &'.".,f:
L '3,Q.,e Q'. q: -
,,,g y-1-
e
- r, pA
,g.,,
g s
,.,r.
3
- n f 7. -)m, >,. uw gQ lC g, g : g 'M 9 V';*,'f,: _,*
s
..., o,w u.
a - -..
').XD,/ U.NtapetTuS STafee. 7 9 :mh.*N
- O' U M '
s
- ( J,N,, T^-
yW4wct.ama aseva.aroav comessessee ph[dW'WM.SMW pM/b S,4
-il 7
'M g :'?. ? @ @
.M--
.d,
. m
$7, <!,,
~ WASHINGTON,9, C. amaea ', j. f9. :.;,r j L, i..e, w, ($s..m::.@, a, " n vp-Q d
{
]
< ~
r t
e
~
~
n w:,,. a I ~[,
O h
[h
,.J
- )
MY AM &$50 Pggg pAgg MFgggg(y g y,
3 y
5,,
r,,
- NALTv Foa Paivare use7ssee M% bMCD t
- C '
- f ::' ~m\\ "'* ""cL* An aroucarony
. g< \\., t,.
e,. N..,r.v.g.,n y( f. ; z. ;e%'y y x.y;C '
c o **wssoa.e
. x q y,n
. y.x -
v-s wy.
~.
4 d
. r aT se
- we.
a ;v
- .. e;,,. y#,, )g r., p.
5 4
g-E,.
u4g u
4
.l k c;'A
'a
- *. i%..
s s
_ k' v
- &e yd.
-e./
,ay,9.,., j, r
,T+ p _. - >
e g,,
4
%p'.#;A y.
1 %,,<,9 4;,. p ! N J.a,
- q f, s
,s
', n t
V
.e e
a J*
s.
s,
. I". f., y+;,
i.,. ',,
sy<
s y: :, -
3 s
_ 2 c
< %((.,f * *, s P '. 6. ' " f go.g
- J,f ed_ z y' p.*,,3 o',
j
_9 ;,- y [ g'"f,,.
.,p
",,t f
[
w.s7
, q '. f [?j.
' y n.
- ' _. j' ; 8
- b, ;t ~* -.. * ',' w[ ' i f d,, ;.,,
,fy fy
~. -
.',.,,,go,
.a.',
- 3..% ( $, 6. ' g.9. )7 l.
I y 'E DP P$ j l.
- _ ; / 4,.._,,. -. t.y {c'",,
. v y 9,%,,
,,.s'
,,)
,, g.,, ' _, ~
g
,~.A% *,,/. -,.g, mts r. p }r. c, y d6, N.m. a-
- As
. s s.
ge
- 3, a,, s..;5 y,.
,. ~,. ;
, y p,.., - i-,
- e, *,
u, C.
e,, e,.,
t
.,4 u
_,,a a#..* u,, g,,,a,, y /.,
.,, +
my w
t
,4 p '.Q g 9,
,q,, L' ? y.
,,j ', .
,a'
(
s
. M37g '.(h
,,k';*/ ' t, o,.,.(
5 s w
- 3.,q,
v' 5 g..
a wa Q,,. <*i. w Q j,'.',y, Q [o,f a, A..,.~.. %s'. y :.,9- - * )., g]s
+
A 's
-g q yp y, [ q T & fg.,Ls,,:y,y,
,a, i
1 4.-
w.,..
.m
- m,, s..e 1
m.
- - 4
.; 3 w,. - -.,
2
-,, w
.c,.--~.
y:
3
[
/,
'~-
h..#... ' '
Te
- t M*
).
"+
8
[b-
.., k w.,.
, m
.. y, <..
(' J,
,. ff '
A.
^
N i
k ..m.,l t,. +u. wv,...
n_,.. ; /
c 4
- n. y. w e+ w, a, m,, + Q. %m, ~- ', a n. w.. a w n.2.o.
y,r
=,..
w
,n x
~~,m,,e 9,- A
.a t *,,. +, y
..p-7,> g u.
~#
- p A-
,,., s,.* i ' y ',a, 4
- g 6'..,.4, 4, -
4'
)'
E,.,
~
, - ?Y..
3-o e ue f
e.>,*
t E
^'
R.
,* 3 e
f ~ *. e,, s O
yh.
l**'
i,>n w Ce ' - 4,. w,.,,(,2 f i gp,, *s *Q. ^" (, ' ' A,' s._ 'g.} %y
,, ~.4
~
- ' ot
..y 1
s m ; > l,.,1 C
v q
n,
,% % Q 'f f.,{:=/g -*) (, l>
, D:5 %
f Q.f,' f.,fl j~ { t;
,,.g.s f8l m.,e,4 j
- w we.,
'").*
a
.l8..*,a 4
e
.y ' h.
w O
,I' P
9a. a ^, )', /,
f,',
+
- e as.4 d b,.r @,..
.*L 1 c.'s,
. -.'-*r...
c,,,,,p,9'*.
~
a' c
ese
,,N 3 h I' [
- ) J,,
g'
, -(' : - " ~* '
~=
(
[ *'
,- l+k.
s t.*.
- M,
- ^
.t
/
,7 s.
r, 2
.,icl; f Jrj
.-sw
.*f*
\\
a w w.
so
.g..
R.'.h'
,,,, a"5'*; h N y ' "[-. () s
,, [
- h. 3,. r k4a'aJ.*
, j ' ".'. k, e
,,a
" -* f,
'U,.t..
r-
. f; ; Y
,,c ', '. *
(,,y.
.... s,.. v ",
t.
?,
p
~3
. ~
s s'
+(n.-.y s w ;,o, g')n *>. 9 s s'.
- m 4 s s
, ;.,,,si-.t: jg r g L
a
- 5 i
C
,p4A
,(
.g-M..r u., -
.w,r' e & m.,.M..,, q 1,
, J, 6 L,.
v*.
e, A,., '
y.
A _
g s
.~.
.n,p e.
-s
-..,, y-as gr r
4
( [.4,..
if,*
,,. an g
c
[t
-,%',t%
_ 4c..3,,
,a,,,,
- 7..
r"f-
-6'.
_ +
-%).
s f
t.
7.,.
,.~. '. *.' - -.),i T. *,
,y c Ay__ s,*
e s t
a
- .,Q I
7'.
p.
3 7 3.'[y,' #. 4
- 3,(*
.*E
[..
y
- '9=.
,* ;1 J e 3
e
)
- s,.,.\\.,' [ ' 4,Y,p,
','.:y
',, 6 's
,.t t,
,P p
p "r
h
, f,' ] i.
', '.g \\, ',6 J
V i
.,s n
'. h -
('
eY e
[ li 4<
.[.
\\.
A J,
.g><
p h-*q%m**> -i. p y
- Q W,9 Y. 7,->,-
...~
C, s
, e...
'p., t a, A,.
w..
e, - u..
.t-.
s.
m} f
",2.s,.x a d- - 3.Ww 99 7,;w a.
w.
.d f es*
p.
fs, ~
a e
aAn j
n"
. a. 3
.J-i.
m e
+
,ay.%
s.' pp' m.a..p'py'4*
my,,. ;,
,S ' w.., hy* g
.o
'hl
" 3%" - /x--n w, t i.. < >. * * ' ' *--. >
R V
a,~ s x
m, '. /. g., - D ',
- c,, t ; -(
c,
~
1,
. c
. I'.
c
.. s 3, *./a w" l
~.
gy..
t
= % <
,. * - +
'.'4
,.d s
.t
-z sy a,
%' w 'e i m 3 1,
. g
- /
J t
%, rlm,.... ) f.,; 4 'p. P N s. I r3.,.,f g
2
~i
- ~t
+
.,,,p sc w,
s#
.>s
.,r
-,,y**
-, 1 *.3 rjq-
,7 A. f.
-, -f.
4 fge i
y 3
3 p
.J.
.'f i, * 's :
,.,o
.u+,'.
s-L as -
~,-
s c-e n
q, w.s
- f
.k
-g I~ *. h *
I
'-/ s
, ^
y
- y 1,
M-
,9*
9 e @,
W.a C.
q J. s
-f q}+4 ) b,,, e.
s.
m
-4
. 4
-'-W v
o ts y
g-
,',' y g
- rsr, p,
W d,,.*.%
ys
(,
.r c i
- 5
- ,, y' ie,f', ' ~,s
, A, -' v e. r O'
t I? %. oW ',- (I...y,W "" g.. @
q,
,. - *.+
J
(
"(
'.
- g A6 ls}. y i i.f,f y.r?', ?,
J,g.. '.,,%
L;4-%g 3<n.. p -
a f '.
- .3 1
s-
%'.',_*.e O
(13 7
m
- b&
- -f-#O'
-.t'-
~,
.y,*
e.e 3
-c.;
. t
g,*
+*
m
..g' 6
,s, y
,e,. - -
f.
3, y yw
+
3 n,,
s a p
b*-
- r
. r s
,~r.
T.-.
_O
} m*4
^u 6
s g
v.]' ; ~
e-s
. t.-
y 4'.
e r
s e3_-
p q.
.n.
v..
e >
^
c.
+ l*
,l
?
~>
[++-]hl~
,c,s.
.r y M t'
?r %
, k. f '
.> 2.
me
$:l.
t
=
\\
,e
, " ets e4
+
t,
?%s m
..p.,
1...
tc
,"f 4
- , Q s.. '
,.a
.~ g
. g 3, *, c C/3 e,
+
s.3,
-a 7
g 4
. Yh*, / '
. %V~
+,#4 *,J
'. %i u,*
4
' {. 1 r - 1.
4 1,
%, p.,s : i
'[
$7 s-J8a-Q,,.
-.,.,t, a +. p,.
- 1 3
s,. 7
~
- s.,
s s.%-. x 4
',i k,
'[l' 0
g e
. N, j',. g-p, *e' 1 eW';
V.
n./
9 l
-4'<
"% c%, l.g ~, _
y eg :e p
- .M y'y
- p
+ -,
-^,
E s
a 1
n. ?, ' N dQ Q 5 %,[l.y 4,,.
.G Q_,',
.,,l[',
r,
- s e
e-
,.r.-
,a
.{. *ll 4-4' f ' '
l_.
y 1,
ye '.
I '8 y '
~.'y 7,
$ J.,. n,. i{4h,1 M +
- 4
- d+
. 'J ' * $ h -.
.. "...v.. y S' ' }'
- ' K 9.
O,,
I n C,7. m.e th,n - t w A. - s, {d *: -
- 3. e.. =<' ".
- e
(
4 m
W
- q
^R
.4 e,
.j, 9 (p,t
.i.,
y w.
c ea. -g.
a
,..,c:
+
.. = 7 r' e.s ? < *, ~-; 'r*. g., n 4, -
i
.d',C..,
.s, u.-
.e u. "' * *L
&, f.,,,,5
.. e
'%',,' %,' r _
-s',.4.
h; e., y H e' s,,, ',,..,.,
s.
M iw s t
a r...,.
,,er
. -(:g g..w.
e 6
.** _+
s.t,. '+
, s %.
y,' * * -,
V,Aw.~s y{,.
A c,,
r
- 3 e
,,s._
n
. f',a
,d._'
, - N a. y}g y, f. t 8
...J.
s / a, f.
t* e
,I '. ' ;+g :.. 9-:
^#.-A
%,,, r, i y
<p:
t r ~
n 4
s.t
^. 'L..,y. a.,*tw
- g m
s o
,5:
s.
V *
)
y_,..
? ~ ;,q w,J^
f 3, s*[r
, ~
a e
hy $ " '. j,';,
. d ? ),ue-f_.-*da,p
..(
bt
'E C. % 4.g4'.
1 Y
r#
. -j i g
-22.
e-
-:...,- e aar,4 g
,b-e 4)y
?
q j
.6 y
.s,.'*%.
-v-y A$ IE '
,I$
l*l R.Q
. j, lo.e
. m p - 3(0 o,%
u.
em.. w,-
M p. ? 4.3.a r,3.
n.9,,,-* /.{' ;.
~Mt i.
- M'+f
,w, y.'. 4.j:h,, +.QijA,;.g v ~..l;g, ',., )-.,; / N *, ' i g Q '-
m
, t M, s
' ' 7:4
.n,,
~.
q.
,y.
e ;ey
- 9.,,*,~-
y o,:., A,, g.y ry x ;-ne y,g 24.,m. : < o ;-
e.*4 s,s.m z c s, cj:p -s n. J*,cl.,,
- m, p%
h., '
I.-
,r,-
a,,
r w,e.6 g.,
.s.,.
f y
-s,
. _ ; 4g.
.c N
,V'x
. ~ ~,
,p-r
-s, o
l
. s 3 ) r.,.h 7
- 1 j '.s
,y y"b
'f
. s 5
'Ie
- * -.,h h. f, nh *
..Nm
$
- Q/
. *h g, *g]' *
],I'F'S 't } ',. y
, f"'
3gf.,
'. ' #kg Y
4 3t
.,'s'*
".~*4,-
j D, *,f a
. g '#
b*wf'4
'p4e
- I a y O.
M pf,-+ g,p',
- V g.
'f g a h,, { {9-'.h,,'
(;
g
'e
-y f '.' k 'e 3 _. g y ' a -.,.-. sa
- [,,
i a
Q
- bv +. '
g
, +, -
- < F, &
s CD
_.. p m + ;,..
,esy O.. C L 'c',,
+
&,cc; ~} $s(y,'.,e%gt, m ; -,. %,
. '.c.
- 4. r s
- c. A', s
- g.n ~ Q 4
a.
a
,, 4'
.~
. ~ - e
-m.(, -
e n,,W f.' g t S. g W
,. 3 ~.e M..y. ! ;g ' ' t.s..~,en \\ y:s, ? -
.h_..
,s
~
4%
s,,*
m y*gj g, d_s.
'u _ f ( ',y,.,.,ng
.s q
s,y.-a r, ag.,,.3.,.e. ' y &,, g. s, '.
j ' ;;p h,
@A.. f tp.
G is,.. '.
u l %_)c % g.*...n en-
<s y 2+gw l
1.'
.,3.. _ ",.,.
[
. 4 v s w
... g.u,.
A,u.,m
.u
,. f
...r r'r w Q;. v..
x,. o.
p, p[. ~i.,.<
\\,
w
- \\,
s e'
+'..i.g.a,.
- 4;,
,e,. 8 *T i,
' 't, C-
.q; L~s. y ;.,.;,
,-7b-m.'-+9'WeM9
- -*997#T P
9-W
G T-L-
.we
_W.e-,-w4% w 4