ML20058M000

From kanterella
Jump to navigation Jump to search
Safety Evaluation Denying Licensee Response to Station Blackout Rule.Staff Recommends That Licensee Reevaluate Areas of Concern Identified in SER
ML20058M000
Person / Time
Site: Byron  Constellation icon.png
Issue date: 08/06/1990
From:
Office of Nuclear Reactor Regulation
To:
Shared Package
ML20058K167 List:
References
NUDOCS 9008090171
Download: ML20058M000 (9)


Text

__ _ . _ _ _ _ _ . _ _ _ _ .

f ( UNITED STATES NUCLEAR REGULATORY COMMISSION -

, g wAssewoTow. o. c. rosas i NME2

% a . . . + /, ,

SAFETY EVALUATION BY THE OFFICE OF NUCLEAR REACTOR REGULATION ,

RELATING TO STATION BLACKOUT COMMONWEALTH EDIS0N COMPANY j BYRON STATION, UNIT NOS. 1 AND 2 DOCKET NOS. STN S0-454 AND STN 50-455 1.0 INTR 000CT!_0NN l

l On July 21,.1988, the Code of Federal Regulations 10 CFR Part 50, was amended to include a new Section 50.63, entitled " Loss of All Alternating Current Power,"(StationBlackout). Thestationblackout(SBO)rulerequires.thateach light-water-cooled nuclear power plant be able to withstand and recover from an .

SB0 of specified duration, requires licensees to submit information as defined l in 10 CFR Part 50.63 and requires licensees to provide a plan and schedule for I con-formance to the,SB0 rule. The SB0 rule further requires that the baseline I

assumptions, analysis and related information be available for NRC review. d Guidance for conformance to the rule is provided by: (1) Regulatory Guide:(RG)

-1.155, " Station Blackout," (2) NUMARC 87-00, " Guidelines and Technical Bases

, for NUMARC Initiatives Addressing Station Blackout at Light Water Reactors,"

l- and(3)NUMARC87-00,"Su l t l Questions / Answers and, Major _ Assumptions,"

~ dated December 27,1989(ppemenaissued to the industry by NUMARC January 4,1990). l L TofacilitatetheNRCstaff's(hereafterreferredtoasstaff)reviewoflicensee l responses to the SB0 rule, the staff endorsed two generic response formats. One ,

I. response format is for use by plants proposing to use an Alternate.AC (AAC) power source and the other format is for use by plants proposing an AC independent response. The generic response formats provide the staff with a summary of the results from the licensee's analysis of the plant's SB0 coping capability. The licensees are expected to verify the accuracy of the results and maintain docu-mentation that supports the stated results. Compliance to the SB0 rule is veri-fied by a review of the licensee's submittal, an audit review of the supporting I documentation as deemed necessary, and possible followup.NRC inspections to en-sure that the licensee has implemented the appropriate hardware and/or procedure modifications that will be required to comply with the SB0 rule.

$ The Byron Station has proposed using existing emergency diesel generators (EDGs) as an AAC power source and has submitted its response in the applicable generic

, response format. The licensee's original response was provided by a letter from l M. H. Richter (Comonwealth Edison) to T. E. Murley (HRC) dated April 17, 1989.  !

i In addition, the licensee provided a response to the NUMARC 87-00 Supplemental )

l. 1 l
  • Nuclear Management and Resources Council, Inc. ]

l 9008090171 900806 ADOCK 05000454 PDR .;

P PDC l


iii-... - - - . . . . . . .

i Questions 1990. The /licensee Answersresponses by a letterwere fromreviewed M. H. Richter to T. E.Applications by Science Nurley- dated March 29,l Internationa Corporation (SAIC)undercontracttotheNRC. The results of the review are documented by a SAIC Technical Evaluation Report (TER), SAIC-89/1640, " Byron Station Units 1 and 2 Station Blackout Evaluation," dated June 14, 1990 (Attachment No. 1).

2.0 EVAL.UATION After reviewing the licensee's SB0 submittal and the SAIC TER, the staff concurs with the conclusions es-identified in the SAIC TER (refer to Attachment No. I for details of the review). Based on this review, the staff findings and recom-mendations are summarized as follows.

2.1 Station Blackout Duration The licensee has calculated a minimum acceptable station blackout duration of 4-hours based on an offsite power design characteristic group of "P1," an Emergency AC configuration group "C," and an EDG reliability target of .95.

After reviewing the available information in the licensee's submittal, RG 1.155, NUMARC 87-00 and SAIC's TER, the staff agrees with the licensee's evaluation of a 4-hour SB0 coping duration.

2.2 Alternate AC (AAC) Power Source The licensee has proposed an AAC power source to operate systems necessary for the required SB0 coping duration and recovery therefrom.

2.2.1 GeneralStaffPositiononfitPowerSources Thedefinitionin10CFR550.2,)RG1.155andNUMARC87-00,defineAACpowersource in terms of four attributes: (1 connections to the offsite or the onsite AC

_ power systems (2) minimum potential for common cause failure with offsite power or the onsite emergency AC power sources, (3) timely availability, and (4) re-quired capacity and reliability. More specifically, in regard to the fourth attribute, the SB0 rule reads as follows:

"(4) Has sufficient capacity and reliability for operation of al,1 systems required for coping with station blackout and for the time required to bring and maintain the plant in safe shut-down(non-designbasisaccident)."

In view of the variety of types, capacities and capabilities of power sources proposed as AAC sources by various licensees, the statf has characterized pro-posed AAC power sources as being either optimum, fully capable, or partially capable. This characterization, which relates only to the capacity attribute cited above, was necessary in order to facilitate the staff review of licensee

responses to the SB0 rule. It does not invalidate or revoke any of the require-ments or guidance applicable to AAC power sources.

An optimum AAC power source design is one that is capable of powering, simul-

~ taneously, both safety trains of normal safe shutdown systems and equipment.

Such a design, following actuation of the AAC source, would provide completely re-dundant normal safe shutdown capability during an SBO, and recovery there-from, from the main control room.

A fully capable AAC power source design is one that is capable of powering at least one complete safety train of normal safe shutdown systems and equipment.

This includes decay heat removal, battery charging, HVAC (heating, ventilation and air conditioning), erergency lighting, and the associated controls and instrumentation. Thus, although redundant capability is not available, a fully capable AAC source would enable attainment of safe shutdown during an SBO, and recovery therefrom, from the main control room.

A minimally capable AAC power source design is one that is not capable of powering all (or any) normal safety train related safe shutdown equipment; but, it is capable of powering specific equipment that, in conjunction with extensive manual operator actions both inside and outside of the control room, is critical for attaining safe shutdown during an SBO. Appendix R diesels proposed as an AAC source are examples of minimally capable AAC sources. With this design, oper-ability of the main control room could not be assured unless-the batteries were sized to operate for the SB0 duration, or battery charging capability was provided by the AAC source.

2.2.1.1 EDGs Used as AAC Power Sources ,

The guidance on the use of existing emergency diesel generators (EDGs) as-AAC power sources is documented in the station blackout rule 10 CFR-650.63, RG1.155,PositionC.3.3.5,andNUMARC87-00(Section2.3.1(3)). This guidance is further explained in NUMARC 87-00 Supplemental Questions and Answers dated December 27, 1989, under questions 3.4 and B.3. The station blackout rule states:

"At multi-unit sites, where the combination of emergency ac power sources exceeds the minimum redundancy requirements for safe shut-down (non-DBA) of all units, thc remaining emergency ac power sources may be used as alternate ac power sources provided they meet the applicable requirements."

The rule statement requires minimum redundancy. This means that in order to qualify as an AAC source, there must be an EDG available in the non-blackout l

(NB0) unit that is in addition to the number of EDGs required to meet the minimum EDGpower loss of offsite redundancy 1.00P)(requirement event. Thus, for thepowering EDG's inaanormal safe two unit siteshutdown with for a two dedicated EDG's per unit would not qualify as AAC sources because the two EDGs per unit just meet the minimum redundancy requirement, i.e., there is no excess EDG.

t L-___-___-_-_-_-___-_______-_--____-__-______-__-_-__-_-__-_-_--_

However, there ara some plants at two unit sites which just meet minimum re-dundancy but where each EDG is of sufficient capacity to fully power all the normal LOOP loads of the NB0 unit, and also has sufficient excess capacity for powering the required safe shutdown loads of the SB0 unit. In recogni-tion of the existence of this type of situation, the staff has interpreted the excess EDG redundancy requirement of the SB0 rule to allow EDGs just meeting the minimum EDG redundancy requirements, to qualify as AAC sources on the basis of excess capacity, provided the other applicable requirements for AAC sources c e also met.

The NRC's basic position on the use of EDGs as AAC power sources on the basis of excess capacity is that such excess capacity should not be attained by load shed-ding in the non-blackout (NBO) unit which results in a degradation of its normally available safe shutdown capability for the LOOP condition. Any actions that

l. would add to the burden of operators that are already in a high stress environ-l ment, such as load switching or disablement of information readouts or alarms 1 in the control room, are considered to be a degradation of normal safe shutdown l capability for LOOP in the NB0 unit. The staff position is, therefore, that l l the normal equipment compliment should remain available with adequate EDG l capacity for use should it become necessary. The NB0 unit should have the cap-l ability for hot shutdown / hot standby forced cooling, cooldown and depressuriza-tion as required.. While additional events are not explicitly being postulated, .

it is not prudent to diminish the capability of the NB0 unit to mitigate problems should they arise. It is not in the interest of safety to reduce the capability to handle various eventualities in one unit for the purpose of meeting the SB0 rule in another unit. Each unit must meet the SB0 rule on its own merits without reducing another unit's capability to respond to its own potential problems.

Therefore, a multi-unit site with the dedicated EDGs just meeting the minimum redundancy requirement-but not having the excess capacity defined above for qualifying as an AAC source does not meet the SB0 rule AAC source option require-  !

ments. Further measures are required such as a separate AAC source or a coping analysis which shows the plant can cope with and recover from SB0 for the required L duration.

l 2.2.1.2 Connectability of AAC Power Sources e

The basic criteria governing the connectability of an AAC power source are l- l L

contained not connected in 10 to,CFR 50.2 or the offsite (the AACemergency onsite source should AC power be connectable systems ; 10to,)but CFR normally l 50.63 (SB0 should not assume a concurrent single failure or design basis accident); and in Appendix A of 10 CFR 50 (the single failure criterion and the independence requirements apply to the NB0 unit). Therefore, in a one unit l site, as a minimum, an AAC source need only be connectable to one set of safe shutdown equipment, regardless of whether that equipment is part of a safety train or not, or whether the AAC source is an excess redundancy EDG, or an independent power source.

i However, at a two (or more) unit site where the EDGs meet the AAC source excess redundancy criterion, one intertie circuit between units is acceptable provided it is separately connectable to each safety (EDG) bus in both units. This follows from the application of the above criteria and the assumptions that must be taken that an SB0 can occur in either unit, and that the single failure in the NB0 unit can be on either one of its EDGs or on its respective safety bus.

2.2.2 Proposed AAC Power Source The Byron Station is a two unit site with two dedicated EDGs per unit. The proposed AAC power source for the blacked out unit is a cross-tied EDG from the NB0 unit. There are two manual cross-ties between the units. One manual crosstie exists between Division 11 of Unit I and Division 21 of Unit 2.

The second manual cross-tie exists between Division 12 of Unit 1 and Division 22 of Unit 2.

The licensee's submittal states that the EDG/AAC source is available within 10 minutes of the onset of the SB0 event, and has sufficient capability to provide power for safe shutdown of both units for a 4-hour SB0 duration. The licensee's submittal did not specifically denote any equipment to be load shed in order to achieve this EDG capability.

However,- during a teleconference on February 26, 1990, the licensee stated that the auxiliary feedwater (AFW) motor driven pump and the component cooling water pumps will not be powered from the EDG of the NB0 unit in order to conserve cap-acity-in the EDG for qualifying it as an AAC for the blacked-out unit. In addition, the licensee stated that a load management scheme will be implemented in order to power the needed equipment for safe shutdown operation of the blacked-out unit and NB0 unit. The staff'has reviewed the licensees proposed actions and find that they do not conform to the guidance on the use of existing EDGs on the basis of excess capacity as an AAC power source as docu-mented in'10 CFR 550.63; RG 1.155, Position C.3.3.5; NUMARC 87-00, Section 2.3.1(3); and NUMARC 87-00, Supplemental Questions and Answers, dated December 27, 1989.

After reviewing the SAIC TER and the licensee's proposed actions for crediting existing NB0 units EDGs as an AAC source, the staff has determined that the pro-posed AAC source does not meet the requirements of 10 CFR 550.63.

Recommendation: The licensee should undertake further measures such as pro-viding a separate AAC power source or a coping analysis which shows that the plant can cope with, and recover from, an SB0 for the required duration inde-pendent of AC power.

2.3. Station Blackout Coping Capability 2.3.1 Condensate Inventory for Decay Heat Removal sis and shown that sufficient water is available The in thelicensee hasstorage condensate performed tank analy(CST) to provide decay heat removal for a 4-hour SB0 duration.

l 1

After reviewing the licensee's submittal and the SAIC TER, the staff agrees with the licensee's assessment that the plant has adequate condensate inventory for a 4-hour SB0 duration. In addition, the excess inventory available in the CST is available for SB0 recovery.

2.3.2 Class IE Battery Capacity The licensee did not submit battery capacity u sessment based on the assumptions p that: (1)theAAC p an SB0 event, and2)theAACpowersourcewillpoweronedivisionofClass-IE (power source is available within 10 minutes of the onset of L' battery chargers. However, based upon the staff review, the licensee's proposed

. AAC power source does not meet the requirements of 10 CFR 550.63. Therefore, the staff does not agree with the licensee's conclusion that battery assessment is not required.

Recommendation: The licensee is required to conduct an assessment to verify that the battery has sufficient capacity to power all normal battery-backed monitoring and electrical systems and controls for the required SB0 duration and recovery therefrom, or provide battery charging from an independent AAC power source.

2.3.3 Compressed Air The licensee did not address the compressed air system in his submittal on the basis that a 10 minute AAC power source would be available. In the telephone I conversation on February 26, 1990, the licensee stated that no air operated I

valves will be relied upon to cope with the SBO. The auxiliary feedwater (AFW) valves, atmospheric dump valves (ADVs) and main steam safety relief valves (MSSVs) are relied upon for decay heat removal during an SBO. TheADV's(a L total of four, two ADV's per division) are electro-hydraulically operated valves with manual backup capability.

After reviewing the licensee's proposal and the SAIC TER, the staff agrees with SAIC's assessment that the licensee does not have an AAC source that meets the requirements of the SB0 rule (see~Section 2.2.2 above) to power the ADVs needed for decay heat removal.

Recommendation: The licensee should provide an acceptable AAC source that meets the SB0 rule and provides means for powering the ADV's from the control room, or provide alternate means for achieving decay heat removal during an SB0 event. Whatever method is chosen, the licensee should simulate the. proposed 3rocedure and provide the appropriate operator training to ensure the decay Teat removal can be adequately maintained.

2.3.4 Effects of Loss of Ventilation The licensee stated in their SB0 submittal, that the AAC power source will power the HVAC systems that serve the dominant areas of concern (DAC). As a result, the licensee did not submit a loss of ventilation assessment. NUMARC 87-00 and NUMARC supplemental questions and answers (issued by NUMARC on January 4,1990) provide guidance to the licensee for the determination of DACs. The licensee

has referenced the NUMARC guidance and has stated that the HVAC systems that serve the DACs will be powered by the AAC source. However, based on staff assessment and SAIC TER, the proposed AAC power source (i.e., NB0 EDGs) does not meet the SB0 rule requirements. Unless a separate AAC source is provided which powers the HVAC of DACs, the SB0 equipment operability cannot be assured.

Recommendation: The licensee should provide an independent.AAC source that provides HVAc systems that serve the DACs or provide an analysis that verifies the operability of SB0 equipment will not be degraded for the required SB0 duration and recovery therefrom.

2.3.5 Containment Isolation The licentee did not address the containment integrity in its submittal. The licensee stated that: (1) the AAC of the onset of an SB0 event, and 2) (power source the AAC power is source available haswithin 10 minutes sufficient capacity and the capability to power the appropriate containment isolation valves (CIVs). However, the proposed AAC power source does not qualify as an AAC power source. Unless a separate AAC power source is provided which provides power to the CIVs, the appropriate containment integrity cannot be assured during an SB0 event.

Recommendation: The licensee should provide an acceptable AAC power source that provides power to the needed CIVs or provide alternate means to assure appropriate containment integrity for the required SB0 duration.

2.3.6 Reactor Coolant Inventory The licensee has stated that the AAC power source will power the necessary make-u) systems to maintain adequate reactor coolant system (RCS) inventory to ensure t1at the core'is covered for the required SB0 coping duration. However the proposed AAC source does not qualify as an AAC source, and therefore, the licensees statement that AAC power source will power the necessary make-up sys-tems to maintain adequate RCS inventory is not relevant.

Recommendation: The licensee should provide an independent AAC power source of sufficient capacity and capability to provide power to the make-up systems to maintain adequate RCS inventory or provide an assessment that there will be adequate RCS inventory to ensure continued core cooling for the required SB0 duration and, recovery therefrom.

2.4 Procedures and Training The licensee has stated that the appropriate procedures have been reviewed and modified. Furthermore, the licensee has stated that the changes will meet the guidelines of NUMARC 87-00 and will be implemented one year after the issuance of this SER.

Although the licensee has completed appropriate procedures, additional procedures may be(see source required depending)upon Section 2.2.2 issue. the licensee's proposed resolution of the AAC power

The proposed procedure modifications indicated above were not reviewed but the staffexpectsthelicenseetomaintainandimplementtheseproceduresIncludingany others that may be required as part of the revised response to ensure an appro-priate response to an SB0 event. Althoughpersonneltrainingrequirementsforan SB0 response were not specifically addressed by the licensee s submittal, the staff expects the licensee to implement the appropriate training to ensure an effective response to the 5B0.

2.5 Proposed Modifications .

! The licensee response to an SB0 does not include proposed modifications to plant equipment. However, in view of the following staff positions as documented in j this SER some modifications may be required: (1) the proposed AAC source does i

notmeettherequirementsof10CFR550.63,(2) the capacity for the normal battery-backed monitoring and electrical system controls in the control room has not been assessed for the required duration of an SB0 and recovery the -

from, (3) the operability of the SB0 equipment located in the dominant r a of concern (con-trol room, auxiliary electrical equipment room and misce. .cous equipment rooms, essential service water cubical, containment air recirculation fans, charging pump cubical, auxiliary feedwater pump area, diesel generator room, battery room, etc.) has not been assessed due to the loss of ventilation, (4) assessment has not been done to show that there will be adequate RCS inventory to maintain core cooling, and (5) containment integrity has not been assessed for all appropriate containment isolation valves.

Recommendation: The licensee should provide a full description including the nature and objectives of the required modifications to m e the SB0 rule and a proposed schedule for implementation. ,

2.6 Quality Assurance (QA) and Technical Specifications (TS) l The licensee did not provide any information regarding QA programs and TS for SB0 equipment. However, the licensee has stated that all SB0 equipment is covered by the normal QA program and TS.

I Furthermore, TS for the SB0 equipment are currently being considered generically by the NRC in the context of the Technical Specification Improvement Program

! and remains an oren item at this time. However, the staff would expect that the plant procedures will reflect the approariate testing and surveillance requirements.to. ensure the operability of tie necessary SB0 equipment. If the staff later determines that a TS regarding the SB0 equipment is warranted, the 1 licensee will be notified of the implementation requirements.

Recommendation: The licensee should verify that the SB0 equipment is covered by an appropriate QA program consistent with the guidance of RG 1.155. Further, this evaluation should be documented as part of the package supporting the SB0 rule response.

2.7 EDG Reliability program The licensee stated that the EDG reliability program for Byron Station, Unit Hos.

I and 2, is being planned consistent with the guidance of RG 1.155, Section 1.2,

)

and NUMARC 87-00, Appendix D. It is the sta.ff's position that an EDG reliability program should be developed in at.ccr M ce with the guidance of RG 1.155, Section 1.2. If an EDG reliability program currently exists, the program should be evaluated and adjusted in accordance with RG 1.155, 2.8 Scope of Staff Review Thestationblackoutrule(10CFR50.63)requireslicenseestosubmita response containing specifically defined information. It also requires utili-ties to have baseline assumptions, analyses and related information used in their coping evaluation available to NRC. Thestaffanditscontractor(SAIC) did not perform a detailed review of the proposed procedure modifications which are scheduled for later implementation after the modifications that could result from the staff recommendations in this SER. Therefore, based on our review of the licensee SB0 submittal and FSAR, we have identified the following areas for focus in any follow-up inspection or assessmers that may be under-taken by the NRC to further verify conformance with the SB0 rule,

a. The correctness of the EDG reliability data in accordance with RG 1.155, Position 1.2.
b. The preparation an/ the implementation of the plant SB0 procedures in accordance with RG 1.155, Position 3.4, and NUMARC 87-00, Section 4.
c. The requirement for operator staffing and training to follow the' identified actions in the SB0 procedures.
d. Quality Assurance programs as applicable to SB0 equipment,
e. Actions taken pertaining to the specific recommendations noted in the SER.

Additional areas may be identified following staff review of licensee's revised response to the SB0 rule.

3.0 CONCLUSION

S Based on the staff's review of the licensee's submittals and the SAIC TER, the staff finds that the Byron Station does not conform with the SB0 rule and the guidance of R.G. 1.155, and therefore recommends that the licensee reevaluate the areas of concern that have been identified in this SER. Guidance for the licensee to review and implement the staff's recommendations is provided in RG 1.155, NUMARC 87-00 and the supplementary guidance (NUMARC 87-00, Supple-mentary Questions / Answers; NUMARC 87-00, Major Assumptions) dated December 27, 1989, which was issued to the industry by NUMARC on January 4,1990. The staff's concerns that are identified in this SER should be addressed by the licensee, and a revised response submitted to the NRC within 60 days. The licensee is expected to ensure that the baseline assumptions of NUMARC 87-00 are applicable to the Byron plant. Also, the licensee is expected to document all analyses and related information, and verify that these are available for i NRC review.

_ _