ML20058K580

Forwards Tia,Interpretation of Reporting Requirements - 93TIA006,re Multiple Failures of safety-related Components

ML20058K580
Person / Time
Site:	Wolf Creek
Issue date:	12/08/1993
From:	Collins S NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION IV)
To:	Carns N WOLF CREEK NUCLEAR OPERATING CORP.
References
TAC-M86339, NUDOCS 9312150318
Download: ML20058K580 (4)

Text

o . .- - - ~ .. - .-. . . .

b )

, ##fCu UNITED STATES -

/jk _ -

pg NUCLEAR REGULATORY COMMISSION'~ 'l REGION IV

.o 8 611 RY AN PLAZA DRIVE, SulTE 400  ;

<< [ AR LINGTON, TE XAS 760118064

• • • • • .DEC 8 1993 l

i Docket: 50-482 .

License: NPF-42 .;

I Wolf Creek Nuclear Operating Corporation ATTN: Neil S. Carns, President and  !

Chief Executive Officer i P.O. Box 411 Burlingten, Kansas 66839 ,

SUBJECT:

TASK INTERFACE AGREEMENT: INTERPRETATION OF REPORTING  ;

REQUIREMENTS - 93TIA006 (TAC NO. M86339) j i

The purpose of this letter is to provide for your information a copy of the l guidance recently issued by the Office of Nuclear Reactor Regulation in their

• Memorandum of November 2,1993, to Region IV (see enclosed). This guidance was provided in response to a Region IV request for interpretation of-  :

reporting requirements related to multiple failures of safety-related {

components that are identified during the performance of surveillance testing.

t We plan to implement this guidance during out future' inspections at your - -l facility. Should you have questions regarding this matter, please contact Tom  ;

Westerman of my staff at 817-860-8145.

l i

a l rector ivision of Reactor Safety _ .

4

Enclosure:

(as noted) ,

t cc w/ enclosure:

Wolf Creek Nuclear Operating Corp. ,

ATIN: Otto Maynard, Vice President  :

Plant Operations  :

P.O. Box 411  :

Burlington, Kansas 66839 Shaw, Pittman, Potts & Trowbridge .

ATTN: Jay Silberg, Esq.  !

2300 N Street, NW '

. Washington, D.C. 20037 l

[

9312150318 931200 W PDR P

ADOCK 05000482 fj PDR

'i

[g

Wolf Creek Nuclear Operating .

Corporation ,

i Public Service Commission ,

ATTN: C. John Renken  !

Policy & Federal Department P.O. Box 360 i Jefferson City, Missouri 65102  :

U.S. Nuclear Regulatory Commission ,

ATTN: Regional Administrator, Region III t 799 Roosevelt Road Glen Ellyn, Illinois 60137 l

Wolf Creek Nuclear Operating Corp.

ATTN: Kevin J. Moles Manager Regulatory Services P.O. Box 411 ,

Burlington, Kansas 66839 _

Kansas Corporation Commission  ;

ATTN: Robert Elliot, Chief Engineer Utilities Division i 1500 SW Arrowhead Rd.

• Topeka, Kansas 66604-4027  !

Office of the Governor i State of Kansas Topeka, Kansas 66612

^

Attorney General 1st Floor - The Statehouse Topeka, Kansas 66612 i

Chairman, Coffey County Commission Coffey County Courthouse ,

, Burlington, Kansas 66839-1798 Kansas Department of Haalth  !

and Environment Bureau of Air & Radiation ATTN: Gerald Allen, Public  :

Health Physicist 't Division of Environment Forbes Field Building 283  :

Topeka, Kansas 66620 t

t

. _~ . .

Wolf Creek Nuclear Operating ,

Corporation bcc to DMB (IESI) bec distrib. by RIV:

J. L. Milhoan Resident Inspector Section Chief (DRP/A) DRSS-FIPS ,

Section Chief (RIII, DRP/3C) RIV File SRI, Callaway, RIII MIS System  ;

Lisa Shea, RM/ALF, MS: HNBB 4503 Project Engineer (DRP/A)

Section Chief (DRP/TSS) E. Adensan, NMSS 4 E4 i W. Reckley, NRR 13 HIS i

i i

}

r I RIV:C:ES* DD;DRS D:DR b ! M k dab TFWesterman A[Hobil/ ABB'e k [ / SJCc11 ins / f 12/2/93 h /jd b

\/5/h3 kkI/ _

• Previously Concurg/

e

~

["%g ]

i UNITED STATES f.;

• Q NUCLEAR REGULATORY COMMISSION

1. 1 )?' ' '

WASHINGTON. D.C. 21sb4001 November 2. 1993

\> * .". . . /  ;

MEMORANDUM FOR: Samuel J. Collins, Director Division of Reactor Safety  ;

Region IV FROM: Elinor G. Adensam, Assistant Director for Regions IV and V '

Division of Reactor Projects III/IV/V Office of Nuclear Reactor Regulation  ;

SUBJECT:

TASK INTERFACE AGREEMENT: INTERPRETATION OF REPORTING REQUIREMENTS - 93TIA006 (TAC NO. M86339)

In response to your request dated April 13, 1993, we have reviewed the  :

available guidance associated with the reporting requirements related to multiple failures of safety-related components that are identified during the performance of surveillance procedures. The specific examples cited in your questions regarded the outage surveillances related to primary or secondary safety relief valves and the discovery that the as-found "tpoints were outside the allowable technical specification setpoint too 'ances. Please ,

note that the Public Document Room (PDR) has been included on the distribution for this response. I Licensees were stated to have presented interpretations of the reporting rules -

(10 CFR 50.72/50.73) and the related guidance provided in NUREG-1022, which supported the conclusion that the discovery of sa0ty valve setpoint drift was .

not reportable. Specifically, question 2.3 of NUWEG-1022, Supplement 1 had l been used to argue that the condition was not reportable, because the  !

condition could be assumed to have occurred at the time of discovery. Another  ;

argument presented by licensees was stated to involve analyses or evaluations ~

which determined that the degraded setpoints d4d not result in the plant operating outside its design basis, and therefore supported a conclusion that i the condition was not reportable.

A review of 50.72 and 50.73 identifies several reporting criteria which might be relevant to the discovery of safety valves outside the setpoint tolerances given in the Technical Specifications. These criteria and a discussion of their applicability is provided in Enclosure 1.

The assessment can be summarized as follows:

- The use of question 2.3 to NUREG-1022, Supplement 1, is not appropriate to justify a decision to not report many conditions found during s refueling outage surveillances. Other guidance in Supplement 1 is clear l that if conditions are discovered during an outage, but are believed to .

have existed during operation, they are reportable so long as an l applicable threshold for reporting is reached.  !

l l

gWh5G9h' G f-

n  ;

Samuel J. Collins November 2, 1993 j

- A licensee may determine that a condition such as safety valve setpoint drift, does not constitute operation outside the design basis of the plant, and therefore not report such events in accordance with those criteria in 50.72 and 50.73. However, as discussed below, the condition may be reportable as a result of other criteria.

- 50.73(a)(2)(vii) is deemed the most relevant criterion for the reporting of primary or secondary safety valves found to be outside the acceptable .

setpoint tolerance. This is due to the fact that this criterion is based -'

on the train or channel level and does not require the loss of a safety function but only the inoperability of multiple channels of a s:.fety system. Some latitude might be given in light of the number of secondary safety valves; but, for most instances of setpoint drift, this criterion would result in the conditions being reportable. ,

- Note that we currently expect to include guidance along these lines in the forthcoming Revision 1 to NUREG-1022; if so, that specific guidance  :

should be consulted in the future in determining reportability.

j Elinor G. Adensam,-Assistant Director 3 for Regions IV and V [

Division of Reactor Projects III/IV/V Office of Nuclear Reactor Regulation

Enclosure:

i Criteria cc w/ enclosure:

W. Hodges, Region I A. Gibson, RegJon II G. Grant, Region III K. Perkins, Region V 4

l

ENCLOSURE ASSESSMENT OF VARIOUS REPORTING REQUIREMENTS FOR APPLICABILITY TO PRIMARY OR SECONDARY SAFETY VALVES FOUND OUTSIDE TECHNICAL SPECIFICATION ACCEPTABLE SETPOINT TOLERANCE BAND 50.72(b)(1)(ii) Any event or condition during operation that results in the 50.73(a)(2)(ii) condition of the nuclear power plant, including its ,

i principal safety barriers, being seriously degraded; or ,

results in the nuclear power plant being: '

(A) In an unanalyzed condition that significantly compromises plant safety; (B) In a condition that is outside the design basis of the plant; or l (C) In a condition not covered by the plant's operating and emergency procedures.

Discussion: The applicability of these criteria is determined by an evaluation of the situation by the licensee. Upon i determining that the setpoints were outside the allowable j range of the-technical specifications, the licensee would be i expected to follow the required actions of the technical  !

specifications and assess the plant condition in regards to i equipment operability and required corrective actions. .

Guidance related to the evaluation of degraded and l nonconforming conditions is provided by Generic Letter .  ;

91-18. As stated in the second draft of NUREG-1022, Revision 1, it is expected that licensees may use '

engineering judgement and experience in determining whether  :'

a condition meets these reporting criteria. The ability of a licensee to justify that a given condition is neither unanalyzed nor outside the design basis is dependent on the ,

as-found condition of the equipment and the degree of analyses performed.

50.72(b)(2)(i) Any event, found while the reactor is shut down, that, had it been found while the reactor was in operation, would have resulted in the nuclear power plant, including its principal i safety barriers, being seriously degraded or being in an unanalyzed condition that significantly compromises plant ,

safety. '

Discussion: The arguments are very similar to those above and again can ,

support either a reportable or non-reportable conclusion based on the licensee's assessment of the significance of the condition. However, this criterion was intended to capture potential problems which might be discovered only during refueling outage surveillances. Question 7.10 in NUREG-1022, Supplement 1, is considered relevant guidance in regard to the reportability of equipment found to be inoperable during outage surveillances. ,

Juestion 2.3 of NUREG-1022, Supplement 1, and the second draft of NUREG-1022, Revision 1, state that failures should -

be assumed to occur at the time of discovery unless there is firm evidence to believe otherwise. It seems appropriate to classify setpoint drift as a mechanism which would occur some time (usually indeterminable) during the period between calibration and subsequent surveillance unless some factor, such as an extended outage or testing conditions, could be identified as a likely cause. If testing conditions or >

other causes are identified such that reporting is deemed i unnecessary, the licensee would still be expected, under other programs and regulatory requirements, to evaluate the adequacy of the surveillance program to ensure that the activity is ensuring the operability of the safety valves or other components. A voluntary report may still be useful as a means of distributing the information related to the problem and its cause to the industry. Please note that although question 2.3 may be deemed an insufficient reason to determine safety valve drift is not reportable, the licensee may determine that the significance (see above) of the condition does not satisfy the reporting threshold. .f 50.72(b)(2)(iii) Any event or condition that alone could have prevented the 50.73(a)(2)(v) fulfillment of a safety function of structures or systems R that are needed to:

(A) Shut down the reactor and maintain it in a safe shutdown condition, (B) Remove residual heat, (C) Control the release of radioactive material, or (D) Mitigate the consequencas of an accident.

Discussion: The second draft of NUREG-1022, Revision 1, provides safety valve drift as an example of a common mode problem which may be reportable under this criterion. The example was added to the case described in Information Notice 85-27 which dealt with multiple inoperable control rods. Although certain occurrences of multiple safety valve drift problems should be determined to be reportable under this criterion, it should not be assumed that all cases of one or more safety valves exceeding the technical specification tolerance band need be reportable in accordance with this criterion. As in the previously discussed reporting criteria, the licensee's engineering judgement should determine if the condition could have prevented the fulfillment of a safety function. Candidates for reporting include those cases in which the setpoints of_ multiple -

safety valves could have resulted in exceeding the l associated system's design pressure. If experience or engineering judgement can reasonably estimate the maximum

4

.i drift which might occur and determine that the safety function would be maintained, the licensee can determine that the condition is not reportable.

Although discussed in the various drafts and revisions of NUREG-1022, it warrants repeating that the primary motivation behind evaluating plant conditions such as safety valve drift should be to ensure safety and only secondarily to determine reportability. If engineering assessments identify a problem and determine that plant equipment was not and reasonably could not be rendered inoperable by a phenomenon such as setooint drift, the licensee can then also justify a determination that the condition is not reportable. Voluntary reports are appreciated if the licensee feels the information might be helpful to others.

The staff should, as always, be cautious in recommending that a !icensee make a " voluntary" report.

50.73(a)(2)(vi) Events covered in paragraph (a)(2)(v) of this section may include one or more procedural errors, equipment failures, and/or discovery of design, analysis, fabrication, construction, and/or procedural inadequacies. However, individual component failures need not be reported pursuant to this paragraph if redundant equipment in the same system d w=s operable and available to perform the required safety I function.

Discussion: (See above) 50.73(a)(2)(vii) Any event where a single cause or condition caused at least one independent train or channel to become inoperable in multiple systems or two independent trains or channels to become inoperable in a single system designed to:

(A) Shut down the reactor and maintain it in a safe shutdown condition, (B) Remove residual heat, (C) Control the release of radioactive material, or (D) Mitigate the consequences of an accident.

Discussion: This criterion may be the most relevant to the specific example of safety valves found outside the technical specification tolerance band. As stated in the second draft of NUREG-1022, Revision 1, the reporting threshold for this part of 10 CFR 50.73 is lower than for other parts since it is at the train or channel level rather than the system and function levels. Valves found outside the technical specification setpoint tolerance band can reasonably be considered to have been inoperable during operation unless a licensee determines that testing is not representative of conditions during operation (see item 50.72(b)(2)(i)). This

t criterion was developed with general consideration given to the normal two train design level of redundancy. Given that most plants can satisfy pressure relief requirements with several main steam safety valves unavailable, a rigid interpretation of this criterion regarding the secondary safety valves (i.e., any case with more than one safety valve outside the tolerance band) may be overly conservative. However, the licensees are considered to have the weakest argument if they determine that this criterion is not applicable, and therefore the condition is not '

reportable, when finding multiple safety valves outside the acceptable range.

50.73(a)(2)(i.8) Any operation or condition prohibited by the plant's technical specifications.

Discussion: Available guidance regarding operability and technical specification requirements generally have licensees enter the allowed outage time and associated action statements upon discovery of equipment inoperability unless a definite time of inoperability can be established. Technical

• specifications are considered satisfied provided the allowed outage time and associated action statements are satisfied.

Therefore, provided that licensees restore compliance prior I to returning to power operation, reporting of safety valve drift in accordance with this criterion would not be necessary. However, it is expected that upon identification of a problem such as safety valve setpoint drift, licensees should take actions to prevent recurrence or pursue a change in the technical specification requirements (such as increasing the acceptable tolerance rtnge of the setpoints). <

If a licensee determines, through indcstry experience, information from a vendor, or self assessments,- that a component may be inoperable during operation, app.opriate actions should be taken in accordance with the tech 7ical specifications (reduce power or shutdown). This reporting criterion may be applicable if a licensee f ails to satisfy the required action or can determine that a limiting condition of operation had not been satisfied for longer than the allowed outage time following a specific cause for a component becoming inoperable. ,

i i

I WolfCreekNuclearOperating Corporation i bcc to DMB (IE51) s bec distrib. by RIV: s J. L. Hilhoan Resident Inspector Section Chief (DRP/A) DRSS-FIPS ,

Section Chief {RIII, DRP/3C) RIV file  ;

SRI, Callaway, RIII MIS System '

Lisa Shea, RM/ALF, MS: MNBB 4503 Project Engineer (DRP/A)

Section Chief (DRP/TSS) E. Adensan, NMSS 4 E4 W. Reckley, NRR 13 HIS i

l l

f 1

i RIV:C:ES* DD$RS D:DRP w M k D TFWesterman Adlo 11/ AB6'e k @ / SJCcllins f 12/2/93 h /Jd

• Previously Concur g

\ / /k3 kkI/M[

b 140070 1

,