ML20100N412

Control Sys Failures Evaluation Rept

ML20100N412
Person / Time
Site:	River Bend
Issue date:	10/31/1984
From:	Bennett D, Fujitani J, Slivinsky S GENERAL ELECTRIC CO.
To:
Shared Package
ML20100N394	List: ML20100N412 ML20100N414 RBG-19-488, Forwards Control Sys Failures Evaluation Rept & Common Sensor Failure Evaluation Rept, in Response to NRC Request for Addl Info.Ser Confirmatory Item 42 Closed Out
References
NUDOCS 8412130120
Download: ML20100N412 (61)

Text

{{#Wiki_filter:[. l^ p,,9 y ','j ) - d; h l' CONTROL SYSTEMS FAILURES EVALUATION REPORT 'I ) 1 OCTOBER 1984 PREPARED .) FOR I GULF STATES UTILITIES COMPANY .j RIVER BEND STATION l i ? PREPARED j BY 1 DR. S. H. SLIVINSKY D. E. BENNETT J. Y. FUJITANI 3 GENERAL ELECTRIC COMPANY, NUCLEAR ENERGY BUSINESS OPERATIONS j San Jose, California 95125 hi 1 3 Approved: i l [k % -.1 O A :A M. A. Snith, Manager - Regulatory Compliance Engineerinct i Nuclear Control and' Instrumentation Product Design Operation ) .~ ]), E. C. Eckert, Manager - Plant Transient Performance Engineering Nuclear Power Systems Engineering Department a Tufk', ,1 censing Engineer ,i C. L. l Safety and Licensing Operation .t 'i 8412130120 841123 [M ADOCK 05000458 PDR hj l.. 12-1933

of'_ $ c - LA I~ 1-3j' CONTENTS 1a ) PARAGRAPH PAGE ij 1.0 Purpose 1 2.0 Conclusions 1 y 3.0 Analysis Methodology 2 1 l 3.1 Define Bus Structure 2 4 3 3.2 Define Control Systems 2 i j 3.3 Identify Loads 3 3.4 Determine Critical Loads 4 3.5 Summarize Critical Loads 4 S 3.6 Analyze Combined Effects 4 .j 3.7 Compare Results to Chapter 15 4 l 3.8 Analyze Exceptions 4 9 3.9 Modify / Augment Chapter 15 5

)

If Necessary ?j 4.0 Bus Loss Summary Results and Chapter 15 Comparison 5 i 4

3 FIGURE 1 AC Bus Tree 8

i FIGURE 2 DC Bus Tree 4 9 j FIGURE 3 DC Bus Tree 10 (- ^ i APPENDIX A Bus Tables A-1 .i ),, APPENDIX B Elimination Criteria B-1

t APPENDIX C Load Tables C-1 2

i. 12-1933 4_ L

f i ]- a } j j CONTROL SYSTEMS FAILURES EVALUATION REPORT FOR THE RIVER BEND STATION f 1.0 PURPOSE The purpose of this evaluation report is to address the following } concerns: a Perform an analysis in response to the concern that the failures of i power sources for electrical signals to multiple control systems ' I could result in consequences outside the bounds of the River Bend j Final Safety Analysis Report (FSAR) Chapter 15 analyses and beyond the capability of operators or safety systems. Provide a positive demonstration that adequate review and analysis j has been performed to ensure that despite such failure, the River Bend Station FSAR Chapter 15 analyses are bounding, and no conse-quences beyond the capability of safety systems would result. 4 To reach these objectives, a comprehensive approach was developed to analyze the control systems capable of a f fecting reactor water level, l pressure or power in the River Bend plant. i 'i The contents of the report and the attachments were prepared by the .) General Electric Company

• for the Gulf States Utilities Company (GSU) j with a significant technical contribution from the Stone and Webster Engineering Corporation (SWEC).

2.0 CONCLUSION

S s i The information contained herein, supplemented by the existing FSAR Chapter 15 transient analyses, documents an evaluation of the River Bend Station for system interaction by electrical means. The conclusion of j this evaluation is that previously reported limits of ' minimum critical j power ratio (MCPR), peak reactor vessel and main steamline pressures, and peak fuel cladding temperature for the expected operational occurrence category of events would not be exceeded as a result of common power i source failures. Although transient category events have been postulated as a result cf this study, the net effects have been positively determined to be less severe than those of the o rigir.a l, conaervative, Chapter 15 i events. It should be noted that this study uses the event - consequence logic of the Chapter 15 analysis, but starts the logic chain from a t specific source (e.g., a single bus failure) rather t han a system condi-tion (e.g., feedwater pump trip). By approaching the study in this j manner, a great deal of confidence can be placed in the study conclusions. l The soundness of the total plant design is demonstrate d by its tolerance of the interactions identified in the process of performing the analysis.

• Additional GE technical contributors:

K. H. Pandya, E. D. Schrull,~ and L. K. i Stapleton. 12-1933 1 (

2 ! t,. } i E tj 3.0, ANALYSIS METHODOLOGY } The control systems failure analysis was conducted in the following manner j' by GE and SWEC. ACTIVITY ASSIGNED TO 4 ] DEFINE BUS STRUCTURE GE DEFINE CONTROL SYSTEMS GE & SWEC IDENTIFY LOADS GE & SWEC 1 DETERMINE CRITICAL LOADS GE & SWEC 3 SUMMARIZE CRITICAL LOADS GE i ANALYZE COMBINED EFFECTS GE COMPARE RESULTS TO CHAPTER 15 GE h ANALYZE EXCEPTIONS GE 1 j MODIFY / AUGMENT CHAPTER 15 IF NECESSARY GE 3.1 DEFINE BUS STRUCTURE t t Potential sources for system interaction by electrical means were esta-blished by formulating bus structure as follows: Bus trees (see Fi-gures 1, 2, and 3) were constructed using one-line diagram information to show power distribution from the highest level previously analyzed (loss 3 of offsite power) down to the lowest level of plant distribution (Motor Control Centers, instrument busses, etc.). 3.2 DEFINE CONTROL SYSTEMS I J The scope of control systems to be analyzed was established by first compiling a complete list of River Bend Station systems and subsystems. Next, the list was reviewed to confine the analysis to only those systems with the potential to a f fect reactor pressure, water level, or power. In order to ensure that al1 necessary systems were considered, specific elimination criteria were established as. basis for not analyzing systems further (see Appendix B). If there was any uncertainty as to whether or not a system met the criteria, it was retained for further analysis. Those systems that met the criteria for elimination were removed from the complete system list to produce the final list of control systems for analysis. This final list of systems to be reviewed by GE and SkIC follows: 12-1933 2 i

g s

,, a System Designators Systems

? t B21 Nuclear Boiler Process Instrumentation ] B33 Reactor Recirculation / Jet Pump 4 C11 Control Rod Drive / Reactor Manual Control } C33 Feedwater Control C51 Neutron Monitoring C85 Steam Bypass and Pressure Regulation D17 Process Radiation Monitoring E31 Leak Detection and Isolation G33 Reactor Water Cleanup 4-N64 Offgas i ARC Condenser Air Removal CCP Reactor Plant Component Cooling Water CCS Turbine Plant Component Cooling Water CNM Condensate BCS Bearing Cooling Water CRS Cold Reheat HRS Hot Reheat CWS Circulating Water DET Turbine Building Equipment Drains DER Reactor Building Equipment Drains DSM Moisture Separator Vents and Drains DSR Moisture Separator RHTR Vents and Drains DTM Turbine Building Miscellaneous Drains ESS Extraction Steam FWL FDW Pump and Drive Lube Oil FWR FDW Pump Recirculation IVS Feedwater GML Generator Leads Cooling GMC Generator Stator Cooling Water GMH Generator H2 and CO2 Purge HDH High-Pressure FDW Heater Drain HDL Low-Pressure FDW Heater Drain SAS Service Air j IAS Instrument Air GMO Generator Seal Oil MSS Main Steam 7 SLH FDW Heater Relief Drains and Vents SWP Service Water TMA Turbine Trips TMB Turbine Generator E.H. Fluid System TME Turbine Generator Glt.nd Seal and Exhaust TML Turbine Generator Lube Oil i-TMR Turbine Unit Runback TMS Turbine Generator Exhaust Hood Spray 3.3 IDENTIFY LOADS 1 ) The data base necessary to determine which electrical loads were to be analyzed, was identified as follows. A set of load tables comprised of all electrical loads of the control systems in Paragraph 3.2 was assembled by GE and SWEC, each providing information on the loads within their respective scope of supply. Each component (load) was listed with its a l 12'-1933 3 L

( c., ( 'r I power bus source, its unique Master Parts List number, circuit descrip-l tion, and failure mode on power loss with primary and secondary effects. i Samples of load system tables are included in Appendix A. 2 3.4 DETERMINE CRITICAL LOADS i I The analysis was performed by next sorting out the components (loads) whose failure has the potential to initiate events affecting reactor i pressure, water level, and power. The elimination criteria establithed earlier for the system list (Appendix B) was also used in the component review to determine which individual loads required further consideration j or could be deleted from the analysis. If there was any uncertainty as to whether or not a load met the elimination criteria it was retained for further analysis. The numerical code associated with an elimination '} criterion was assigned to each eliminated load in the load tables dis- 'j cussed in Paragraph 3.3. 3.5 SUMMARIZE CRITICAL LOADS 4 Non-critical loads were deleted from the load tables, and the remaining loads are grouped together by their common power busses. These tables are shown in Appendix C. 3.6 ANALYZE COMBINED EFFECTS d In performing the combined effects portion of the analysis, attention was given to the specific events treat (d in Chapter 15 of the FSAR. This ,j portion of the analysis provided the basis for determining the worst case combinations of load and system failures that are credible events consi-dering the interconnection by power distribution. Using the combined l.- effects at the lowest level bus as a starting point, the next higher bus was postulated to fail and the total effect of that failure analyzed. This process was continued up to the highest bus level. The combined effects at the lowest bus level are included in the Appendix C tables. l Worst case effects at the higher levels are summarized in Section 4. The j combined effects at intermediate bus levels less severe than their associ-a ated higher bus combined effects were analyzed but not included in Sec-l tion 4. The intermediate level combined effect analysis is formally represented in the higher bus analysis. j 3.7 COMPARE RESULTS TO FSAR CHAPTER 15 The consequences of all potential system interaction events initiated by electrical means were then compared to the results of FSAR Chapter 15. A s review of the informa tion in the Appendix C tables was conducted in the i course of developing the bus summaries of Section 4. At each bus level of i* the combined effects analysis, the review evaluated whether effects were { bounded by a specific Chapter 15 transient analysis or not. Section 4 i includes these evaluations considering the worst case effects. \\ I 3.8 ANALYZE EXCEPTIONS There, were no failure scenarios which were not bounded by the ESAR Chap-ter 15 transient analysis for the River Bend Station. I 12-1933 4

f s s e o jP e 5 l 3.9 MODIFY / AUGMENT FSAR CHAPTER 15 IF MECESSARY ~ Modification of FSAR Chapter 15 was not necessary in the River Bend Station analysis. 4.0 BUS LOSS

SUMMARY

RESULTS AND FSAR CHAPTER 15 COMPARISONS INPS-SWGIA (Figure 1) Loss of this bus will result in a loss of recirculation pumps A and B, 1 out of 3 feedwater pumps, 2 out of 3-50% normal service water pumps, 2 out of 3 condensate pumps, 2 out of 3 reactor plant component cooling water ' pumps, 1 out of 2-100% turbine generator EHC fluid pumps, and 2 out of J 4-25% circulating water pumps. In addition, there is a decrease in feed- } water heating due to a loss of hot water to the second and third point feedwater heaters, an inability to drain condensate from cooler conden-sers, and a choke-off of offgas flow. There is a decrease in main conden-ser vacuum, caused by the stoppage of offgas flow and loss of circulating water. The hot water loss to the heaters would also cause a heater drain pump trip. The combined overall effect of these losses is a trip of two recirculation pumps transient. The remaining two feedwater pumps provide sufficient flow, such that level 8 is reached which initiates a scram, turbine trip, i and feedwater pump trip. This event is bounded by the trip of two recir-culation pumps event analyzed in FSAR Chapter 15. t The loss of lower level, associated power buses will result in some of the following effects: loss of some reactor pressure and level signals and inability of the recirculating system to automatically follow system load. i The loss of Bus INPS-SWGIA envelopes these effects. INPS-SWGIB (Figure 1) j Loss of thi.1 us will result in the Icas of Recirculation Pumps A ard B, 2 1 out of 3 feedwater pumps, 1 of 3 normal service water pumps, 1 of 3 ) condensate pumps, 1 of 3 reactor plant component cooling water pumps, 1 of 0 2 turbine generator EHC fluid pumps, 2 out of 4 circulating water pumps, and the loss of the offgas condenser level and temperature signals. The feedwater flow reduction results in a water level decrease; a Level 3 trip initiates a scram. Locked feedwater control valves increase the proba-bility of tripping the third FW pumps, reaching low level faster. t The combined overall effect of these system losses is a trip of two feedwater pumps and a trip of two recirculation pumps. If Level 8 is reached, which is the unlikely scenario, this transient is bounded by the trip of two recirculation pumps event analyzed in FSAR Chapter 15. However, the most likely scenario is that water level decreases as .j described above, resulting in an event bounded by the loss of all Feed- .I water Flow event analyzed in FSAR Chapter 15. .1 -l 12-1933 5

f-s cc 1 e j i l The loss of lower level, associated power buses will result in some of the 2 following effects: loss of feedwater trip logic and activation of Recir- ] culation Pumps A and B low level signal. The loss of Bus INPS-SWG1B j envelopes these effects. 'i 1 ENS *SWGIA Safeguard Bus (DC) (Figure 2) 4 a The loss of this bus results in the loss of RHR and RCIC isolation relays, (', recirculation pump breaker control power, RHR and RWCU temperature moni-l tors, and a " half-isolation" (MSIVs). There are no combined effects resulting from these system losses, since -{ alternate logic is available. The loss of lower level safeguard and DC 1 busses is not anticipated due to redundant power sources. t IENS*SWG1B Safeguard Bus (DC) (Figure 3) I Loss of this bus results in closure of the inboard reactor water cleanup valves, a " half-scram", and a " half-isolation" (MSIVs). The combined effe;ts of this bus loss are to isolate the RHR Shutdown Cooling and RWCU systems. These system losses have no effect on the reactor parameters of vessel pressure, reactor power, and vessel water j level. The loss of lower level safeguard and DC busses is not anticipated { due to redundant power sources. 1 1 INNS-SW31A z The loss of this bus results in the loss of 2 (ICCS-PIA, PIC) out of 3-50% capacity turbine plant component cooling water pumps, 1 out of 2-100% capacity feedwater heater drain pumps in each heater train, and 1 out of 2 CRD drive water pumps. Loss of two third point heater drain pumps would cause one feedwater pump to trip on low suction and recirculation runback. Loss of two of three j turbine plant component cooling water pumps would result in a turbine trip i due to loss of generator stator cooling. s b INNS-SWG1B + ) The loss of this bus results in the loss of 1 (ICCS-PIB) out of 3-50% capacity turbine plant component cooling water pumps, 1 out of 2-100% capacity feedwater heater drain pumps in each heater train, and of 1 out j of 2 CRD drive water pumps, t j' Loss of two third point heater drain pump would cause one feedwater pump trip on low suction and recirculation runback. 4 I I, b 1 l') 't l 12-1933 6 1

c y 4 77 1NPS-SVGIA INNS-SWGIA INNS-SWG1B INPS-SWCIB l l l 1 -l l llNNS-SWGIC l l l l 1 l-06 16 04 03 05 07 23 22 34 33 '32 '21 l l l l l l l l l l l l l l l l l l1NNS-SWG2A INNS-SWC2Bl l l l l l l l l l llNJS-SWC2A INJS-SWC2B l l l l l. l l l l llNJS-SWG2C INJS-SWC2Dl l l l l' l 9 l l llNJS-SWG3C INJS-SWG3Dl l l l l l l l llNHS-MCC11A INhS-MCC11Bl l l -l l l l l l l l LSCA-PNL11A1 ISCA-PNLilBil l l l l l l l l ll l1NJS-SWG1J INJS-SWGlK l l l l l l I l l l 1 llNHS-MCCICI l l l l l l t l l l:NJS-SVGIN INJS-SVGIPl l l l 1 i l l l l l INHS-MCC18Bl l l l l l 1 l 1 1 ISCA-FNLl6Bll l 'l l l l l l l liNJS-SWCIL INJS-SWCIMI l l l l l l l llNHS-MCC8A l1NHS-MCCSC INHS-MCC8Bl l l l l l l l l l l LSCA-PNL8A1 l LSCA-PNL8C1 ISCA-PNL881l l l l l l l l l llNJS-SVGIG INJS-SWGlHl l l l l l l l ltNHS-MCcic llNHS-NCClJ INHS-NCCIHL l l l l l l l l LSCA-PNL1J1 ISCA-PNLlHil l l l l l l l1NJS-SVG10 INJS-SWGlal l l l l l llNHS-MCC18A 1 l l l l llSCi-PNLO3 l l l l l l1NJS-SWG1E INJS-SWGIF l l l l l l llNHS-MCCIA l llNHS-MCC4A INHS-MCC4Bl l INHS-MCC1B] l l l l l l_l l1NHS-MCCIC2 l l LSCA-PNL4A1 ISCA-PNL4Bij l INHS-MCCIDil l l l l l l1NHS-MCC4C INHS-MCC4Dl INHS-MCCID2l l l l l llNJS-SWGIA INJS-SVG1Bl l l l l llNRS-MCC2A l1NHS-MCC2C INHS-MCC2Dj INHS-MCC2Bl 1NHS-MCC2Fl l j l l1NHS-NCC2E l1SCA-PNL2A1 l LSCA-PN12C1 ISCA-PNL2Bll 1SCA-PNL2F1l 1 l l l t 1 l l1NJS-SWGIC INJS-SWG1D l l l llNHS-MCC20C INHS-MCC10Bl INHS-MCCIPl l l l Alternate Alt for RPS Bus Bl l ISCA-PNLIPil l l IBYS-SVG01A l Source Alternate Sourcel IBYS-SWG018 l 1 DC Source (Fig 2) l l l l DC Source (Fig 3) l l INJS-SWGIU l l INJS-SVG1V l l l llNHS-MCC20A l l l l1NHS-MCC10A2 l INHS-MCC20Dl l INHS-MCC20Bl l l l l1VBN-PNLO1A1 l l l llSCI-PNLDI l l l IVBN-PNLO1Bij l l l1 Nits-MCC10Al l llSC1-PNLO2 l Alternate l l l LSCA-PNfl0A2 llNHS-NCCIE Source l l l LSCA-PNLIE1 l l INJS-SWo?E 11NJS-SWC2F l l INJS-SWG2G IINJS-SWG2H l FIGlmE 1 AC BUS TREE 12-1933 7

ii f

g.- .3,.lIle 1 1 l' j . I IENS*SWGIA J '. I i

j l

l 1EJS*SWG2A a I I I I l l-l 1RPS-XRC10A1 f l l IEHS*MCC2G l 1NHS-MCC102A I Alternate 1 I I l l C71-S001A l l l 1EJS*SWG1A l 1 l l A 01A , l IENB* g l l CHGRIA l l 1,i i l l l 1 l l !125VDC BUS 1ENB*SWG01Al i T' l l' II i l l l.' Il l1ENB*PNLO2A l l l II I l l l l1ENB*PNLO3A l l l l l l 'l1EHS*MCC8A l 1EHS*MCC14A l .i ;: l I I I l l -l l Alternate U l i I I i: I I' l l I' 1BYS -l l l CHGRIA . 6.' l l l s S 1ENB*INV01A l L .l i l l IVBS*PNL01A l. ,1 l t IBYS-IBYS BAT 01A1 BAT 01A2 s I l 1 1 3 l 'l I i l l125VDC Bus IBYS-SWG01A l T I l I 3 I l I s' f. l1BYS-PNLO2A1 l1BYS-PNLO3A l1VBN-PNL01A1 4 l (See Fig 1) j a l. l1BYS-PNLO2A2. 9 f.i " f..

t.

1 FIGURE 2 o, SAFEGUARD AND DC BUS TREE "A" ~ qi1,. h( 12-1933 8 d 4 ~ l', 3 7., e

.; '~ w .e. 3 3 IENS*SWG1B 3* I i 1-1 I j. l l 1EJS*SWG2B j; ~ l l l l l Alternate l l .l l 1RPS-XRC10B1 1 l l l1EHS*MCC2H l l INHS-MCC102B i i l l l C71-S001B l F l l ( l l 1EHS*MCC2F L l ?~ l l l 1EJS*SWG1B { l l I i 1 l l l 1

)

l l IENB* IENB* l 1 l l CHGRIB BAT 01B l 1: l l l l l 1 l l l 1 l t l l l 125VDC BUS l IENB*SWG01B l j l l l l l l l l l 1ENB*PNLO3B l } l l 1EHS*MCC8B l 1EHS*MCC14B l [j e.jS l l l l l l l Alternate rf l 1ENB*1NV01B l i I l l j l l IVBS*PNLO1B .I l l bt 1 l IBYS - l-f l CHGRIBY !i!' t. 1 4 l \\ l IBYS-IBYS-6 l ~ BAT 01B1 BAT 01B2 1 l l 1 l l l f l l125VDC BUS 1BYS-SVG01B l j-1 I i l l l l IBYS-PNLO2B1 l 1BYS-PNLO3B l IVBN-PNLO1B1 j l (See Fig 1) l 1BYS-PNLO2b2 1 1 FIGURE 3 y o 1y SAFEGUARD AND DC BUS TREE "B" 1 1 l --12-1933 9 e u

t,- .5 j + 5 APTENDIX B 2 CRITERIA FOR ELIMINATION OF SYSTEMS AND COMPONENTS OF SYSTEMS FROM f CONTROL SYSTEMS FAILURE ANALYSIS 1 q Elimination i Criterion

• Basis a

fi NI Non-Electrical Components (i.e., mechanical and structural); however, associated functions that are electrically controlled, 3 or controlling (including signal input to electrical systems) I may be relevant to the analysis. N1 exemples are piping, tanks, o and turbines. A N2 Instrumentation with no direct or indirect controlling function } or passive input (such as a permissive) into control logic. 3 Instrumentation and other dedicated inputs to the process { computer, as well as the computer itself, may probably be l excluded. Operator actions as a result of indications are not considered control functions for the control systems failure j

analysis, i

N3 b Control systems and controlled components (pumps, valves) which have no direct or indirect interaction with reactor operation / l parameters. Examples are communications, most unit heaters and j controls, lighting controls, ventilation control systems for exterior building, machine shop equipment, refueling or mainten-ance equipment controls, etc. 3 N4 Control systems and controlled components (pumps, valves) that do interact or interface with reactor operating systems but which cennot affect the ' reactor parameters (water level, pres-sure or reactivity) either directly or indirectly. j N5 Systems or components which cannot affect reactor parameters 1 within 30 minutes of the loss of any power bus or combination j thereof. 4 a N6 Systems which are not used during normal power operation. For example, start-up, shutdown or refueling systems not used during normal power operation may be eliminated. N7 Electrical components involved in distribution, transformation or interruption of power; however, controls for these components _l' may need to be considered if loss of such control power may lead j' to failure of other electrical busses. 1 { N8 Safety systems, except for their responce to conditions brought 4 about by control systems failures. Example: A Level 3 scram will be assumed for a loss of feedwater event.

• In some cases, more than one of these criteria may apply.

~. 12-1933 B-1 + { l- ~

F ? h 1-79 3 9 s y - 4 4 1 .i '1 i 1 s. f, t A 'b I i i 4 't i; APPENDIX C e 4 j CONTROL SYSTEMS FAILURE e ANALYSIS C 2 i ti 4 I i ) L ) e t 1 I 1 i 9 f 1' l 12-1933

, 3 n. +,.c ' "i 4 APPENDIX C . l I,Y RIVER BEND CONTROL SYSTEMS Fall.URE ANALYSIS ' f, y 1 e COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFTECT EFFECT EFFECTS INPS-SWGIA CB06 INJS-SWGIU INHS-MCC10A2 ISCI-PNLot CCS - Turbine Plant IMWS - SOV132 - Valve fails closed. None. Loss of makeup component cooling water Turbine plant component water. cooling water surge tank makeup water valve. CCP - Reactor Plant IffWS - SOV134 - Valve fails closed. None. Loss of makeup Component Cooling Water Reactor plant component water. cooling water surge tank makeup water valve. DET - Turbine Building IDET - SOV17A,B,C Valves fail closed. None. Turbine building Equipment Drains IDET - 50V16A,B.C Valves fail open, sump pump flow diverted from condenser to liquid radwaste. WR - Feedwater Pump IEWR - SOV2A,B.C (W Valves fail open. Lower W pump ef ficiency. Lower W pump effi-Recirculation Min Flow Valves) ciency. WL - Feedwater Pump I WL - PS2A-C, PS12A-C Loss of W pump speed Unable to trip W pump on Unable to trip W pump Lube oil increaser and pump lube low lube oil pressure, on low lube oil oil pressure. pressure. SVH - Feedwater Heater ISVH - SOV45A,8; 46A,8; All valves fail open. All W beater and drain All W beater and drain Relief Drains and Vents 51A,8; 52A,B; 25A,B; coolers are vented to coolers are vented to 26A,B; 3tA,5; 32A,B; condenser and result in condenser and resulted 36A,B; 37A,8; 38A,8; incressed flow to in increased flow to thru 43A B. Start up condensers. condensers. vent valves for W beaters and drain coolers. NOTE: CB06 CONT *D ON SMEET C-14 INJS-SWGIU CONT'D ON SMEET C-6 12-153513 (C-1) Y, 'x k. 'h k b ( k -

• i APPEhdlX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS I

l COMPC.".M PRIMARY SECONDARY COMBINED ! BUS SYSTEM DESCRIPTION EFFECT EFETCT EFFECTS INMS-MCC10A2 ISCI-PNL01 C11 Control Rod Drive C11-K600 +24V DC Power Loss of power to alarms home. Activates alarms. (Cont'd) Supply Cll-N600, N652 C11-SRU1 Loss of power to matro None Loss of drive water C11-N007A-D flow indication. Cll-SRU2 Loss of power to matrs None. Loss of indication. C11-N009,8,11,5 Cll-SRU3 Loss of power to xatts Flow control valves Flow control valves Cll-N004 and controller F002A,B open. Unable F002A,B open. Unable C11-R600. to adjust flow during to adjust flow during accumulator charging and accumulator charging scram. and scram. Indicating CKT F002A,8 Loss of valve position None. indication. ISCI-PNLO2 ARC - Condensate Air IARC - SOV3A,3 air Valves fail closed. None. Removal removal pump suction valves IARC - SOVIA,B air Valves fail open.

None, ejector suction valves CNM - Condensate CNM - SOV43A,B,C Valves fail open.

None. condensate pump went valve CNN - SOVil4 - Conden-Valve fails open. Coaden-Low condensate flow Feedwater pumps trip. sate min flow recirc sate flow to condenser. resulting in feedwater Recirc flow runback, valve pump trips on low suction scram, pressure. ICNN - SOV119 - Valve fails closed. None. Condensate Demin bypass valve DSM - Moisture Separator IDSM - SOV75A,B Valves fail closed. Loss of hot water supply Vents and Drain IDSM - SOV78A,8 Valves fail open. to third point heaters ' This loss plus the loss of supply from second Moisture separator Loss of normal and backup and loss of some feed-point beater (see HDL drain receiver normal level control for moisture water heating, on C-4) would cause the and high water level separator drain receiver, third pt htr drain control valves pumps to trip on low level. The loss of the pumps result in loss of e l % of FW flow and l cause FW pump trip - see CIRt above. 12-153513 (C-2) b? ~

. oc APPENDIX C RIVER BEND CONTROL SYSTEMS TAIL 11RE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED Bt3S SYSTEM DESCRIPTION EFFECT EFFECT EITECTS t ISCI-PLN02 DSR - Moisture Separator IDSR - SOV65A,B. Valves fail closed. Loss of hot water supply Loss of hot water (Cont'd) Reheater Vents and Drains IDSR - SOV68A,B. Valves fail open. to first pt bester and supply to firet pt Reheater drain receiver Loss of normal and backup loss of some FW beating, heater and loss of scas normal and high water level control for reheater FW beating. level control valves. drain receiver. DTM - Turbine Building ITMB-PS-3TM-S10lPS4,5 All extraction line drain Extrastion steam line to Decrease main condenser Miscellaneous Drains Turbine tripped signal valves open to condenser. first, third, and fourth vacuum. i expansion. (EHC emer-pt heaters. Drains open gency trip system fluid to condenser. pressure $,1000 psig). Moisture separator shell None. pocket drain valves open. IDTM-SOV41AB, 35AB, Main steam control drain Main steam leads drain Slight decrease in 32AB, 118AB (1st, 3rd, valves open. Crossaround through valves as well as feedwater heating. 4th pt heaters, and line control valves open. restricting orifices and steam seal evap and results in slight de-radwaste reboiler). crease in feedwater heating. Extraction line drain Crossaround line to 2nd pt None - Main steam auto-valves. heate drain control valve natically backs up extrac-open. Extraction steam to tion steam. steam seal evap and rad-waste reboiler iso valves close. 1DTM-SOVX187, 189 SOVX velves fail open and Loss of drain receiver Loss of soec feedwater IDTM-SCVYl87, 189 SOVY valves fail closed. bot water supply to 4th heating. Radwaste reboiler and Causes hot water supply to pt htr. Results in steam seal evaporator fourth pt heaters to drain decrease in 4th pt drain normal and high to condenser. heater output. Loss of water level control some feedwater heating. valves. IDTM-SOV12AB, main steam header drain bypass valve IUTM-SOV5AB, turbine bypass chest drain valve IDTM-50V222, Radwaste reboiler vest valve All valves fail closed Nome. IDTM-50V223 steam seal (valves moraally closed). evaporator vest valve. 12-153513 (C-3) E I" ' - a '? 5

~ ; *, ' APPENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALTSIS CortPOWENT PRI!1 ART SECONDART COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFITCTS ISCI-PNLO2 ESS - Extraction Steam 1ESS-SOV34A,5; 24A,5; Futraction line return None. (Cont'd) System - 23A,5; 16A,B; 115, 116. valves clappers swing (1st - 4th pt Estrac-freely for 1st through tion steam line 4th pt htra and radwaste isolation valves.) reboiler and steam seat evap. HDR - High Pressure INDK-SOV6A,3; 26AB SOV6AB close - causes loss Loss of some feedwater Loss of some feedwater Feedwater Heater Drain 1st pt to 2nd pt htr of hot water supply to 2nd heating. Reactivity beating. Reactivity drain and 1st pt hte pt htr. SOV26AB opens and

increase, increase, drain to condenser.

drains 1st pt htr to condenser. HDL - Low Pressure IMDL-SOVSAR - 2nd pt Valve closes - Loss of hot Loss of feedwater heating See DSit Sh C-2. Feedwater Heater Drala to 3rd pt heater drain water to 3rd pt htrs. 2nd capability from 3rd pt 1HDL-SOV25AB, 24AB, pt, 3rd pt, 4th pt, and htr. Loss of feedwater 23AB, 22AB hte drain 5th pt htrs drain to con-fros 3rd pt heaters. 50V-20AB - 1rd pt htr denser 3rd pt htr pump pump recire valve. recirc valve opens. TMB - Turbine Generator 1?tB-NF-171tl.2 turbine Loss of EMS (electro-None. . Fluid System sen EN fluid unit hydraulic system) electric heater fan. heater fans. TMS - Turbine Generator Turbine exhaust hood Loss of turbine trip signal None. Exhaust Hood Spray high temp. on high turbine exhaust hood temp. C51 - TI? Calibration H13-P607 - 120V power Loss of TIP (Traversing None. System Incore Probe) calibration function. B21 - Nuclear Boiler 821-TC33 - Sta line Valve opens - results in None. Process Instrumentation inboard drata line loss of steam. 321-F069 - Sta line Valve closes - valve None. outboard desia line normally closed. 821-F071 - Sta line Valve opens - results None. downstream drain in loss of steam. N64 Offgas Control Power supply (PSIA,5) Loss of process information Ncne for M64-E602A,5, I620, and actuation of alares. K610 Transformers TIA,5 System principal functions Becorders N64-5602, not affected. 613. 12-153583 (C-4) (( ?';}Tl j' ~ i . ? l 2

_)

• e APFENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED Bt's SYSTEM DESCRIPTION EFFECT EFTICT EFFECTS ISCI-PNLO2 N64 Offgas Control N64-F063 bypass line Valve closes - Loss of None (Cont'd)-

air seal valve. bypass line air seal. N64-F003A.B recombiner Valve remains closed. None air purge valve. N64-F010A,B preheater Valve opens - Unable to Excessive consumption of Excessive consumption vslve. close valve nuclear steam, of nuclear stene N64-F016AB condenser Valve remains /goes closed. Offgas condenser fills Turbine trip and scrae drain valve. with water and chokes off offgas process flow. Back pressure on SJAE increases causing a decrease in main conden-ser vacuum. Loss of con-denser vacuum below trip point will trip turbine. N64-F034AB cooler Cooler condensate drain Unable to drain conden-Turbine trip and scram condenser drain valve. valves remain /goes closed sate from cooler conden-sers B010A,B. Will even-tually choke off process flow and trip turbine. N64-F023 holdup line Valve closes None - Flow too low to drain valve. have any immediate effect. N64-F054 Prefilter Valve closes - unable to Would eventually choke Turbine trip anJ scree inlet drain valve drain condensate off offgas flow. N64-F053A,B Adsorber Valve remains in open Unable to control process train discharge valve position. flow. N64-F045, F062 Adsorber Valves remain in closed None. train bypass valve position. N64-F060 Offgas Valves remain in open Unable to isolate offgas Delayed turbine trip discharge to vent position. on high radiation. N64-F032A,8 Cooler Valve A remains open, B Process gas with high condenser inlet valve goes open. moisture content will pass through separator D010B and saturate pre-filters and dryers faster N64-F028A,3 Recombiner Valve A reesias closed, None. May result in standby flow purge Valve B gees closed, accumulation of Na is the

valves, inactive loop due to loss of air purge flow.

12-153583 (C-5) f, 5 h 4

O APPENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SECONDARY CottBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS s 1"JS-SWC10 (Cont'd from C-1) INES-MCC10Al ISCA-PNL10A2 MSS - Main Steam IHRS-PS124 Pressure Loss of reheat steam iso-None - Loss of moisture switch lation (IMSS-MOV111, 112) separator drain receiver upon less than 101 turbine backup level ccatrol. No load. effect on normal control. 1 HRS-P5125 Pressure None None - loss of reheater switch drain receiver backup level control. INMS-MCCIE ISCA-PNLIEl Gt01 - Generator Hydrogen IGMH-SOV101 Hydrogen Valve fails closed. Hydro-None - If long ters will and.CO2 supply shutoff valve gen pressure decreases. cause turbine runback or Low pressure alare. trip. CB452 TMB - Turbine Generator ITMB-HTPM-1A Turbine Loss of I of 2 100% capa-None. EHC Fluid System generator EHC fluid pump city pumps. Redundant pump starts automatically. INHS-MCC20A IVBN-PNLOIAI B21 Nuclear Boiler B21-R643 Recorder Loss of recorder functions None - Loss of data only Process Instr Sys B21-N601A Temp metr Loss of "A" steaaline temp None - Loss of data only measurement. B21-N601B Temp metr Loss of "3" steamline temp None - Loss of data only measurement. B21-N602A Temp xetr Loss of "A" feedwater flow None - Loss of data only B21-N602C Temp metr temp seasurenest. B21-N602B Temp metr Loss of "B" feedwater flow None - Loss of data only B21-N602D Temp metr temp seasurement. 833 - Reactor Recircula-B33-R604 Temp recorder Loss of recorder function. None. tion System A and B recirc loop temp recording. 533-R601 Temp recorder Loss of recorder function. None. A and B..rcirc pump motor temp recording. LCIA-1 Power supply Loss of "A" recire loop HPU None - Recire flow control (HPU) logic controller (Hydraulic Power Unit) I valve F060A locks up at and ind. Modicoa I/O and 2 power and functions. powes failare position, module #1, 2, 3, 4, and 6. 12-153513 (C-6)

• ,p APPENDII C RIVER BEND CONTROL SRTEMS FAILURE ANALYSIS o

COMPONENT PRIMARY SECONDARY COMBINED 2 BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS IVBN-PNL01A1 833 - Reactor Recircula-PSIA e24 VDC Power sup-Loss of "A" recire loop. None - Loss of NPU 1 and (Cont'd) tion System (CONT *D) ply of for modicon I/O NPU 1 and 2, flow control ' 2 logic and flow control module #5 and rectre fune, logic and signals, signals and ability to flow analog coat eqaip valve position and speed, operate in lead following is rack 1 (R13-P634). loop flow rate inputs. mode. D003A HPU servos I Loss of HPU servo I and 2 None - Inability to load and 2 power and functions. follow. PS2A +24 VDC Power sup-Loss of output power. ply for: SRU3 (Signal Resistor Loss of input power - Loss ' Initiation of ATWS recirc Initiation of ATWS Unit) of output signals, pumps 533-C001A,3 trip. recire pumps 333-C001A,B trip. 321-N05sA Press untr Loss of reactor press sig. None - Loss of data. -N058F Press unte Loss of reactor press sig. None - Loss of data. 321-N099A Level untr Loss of reactor level sig. None - 14ss of data. -N099F Level astr Loss of reactor level sig. None - Loss of data. Instrument power for: B21-N658A Press Ind/Sw Reacter pressure ind ATWS trip signal. Recirc pump 533-C001A,3 downscales. trips. A two recire -N658F Press Ind/Sw Reactor pressure ind ATWS trip signal. pump trip transicat downscales. occurs. 321-N6994 Level Ind/Sw Reactor level ind ATWS trip signal. downscales. -N699F Level Ind/Sw Reator level ind ATWS trip signal. downscales. C11 Control Rod Drive - Rod gang drive cabinet. Loss of power output. None. Rod ~ -trol and P653 power supply Information System (+5 VDC). -EJM01 thru 13 and all Loss of rod motion control None - Loss of rod control BCUs power. for reactor power change. -F007A thru 007D Loss of power to Mone - Valves fait closed. stabilizing valves stabilizing valves. Cooling header flow reduced. 12-153588 (C-7) ~ N fi[ f f( [ f _+ y,

5 APPENDIX C RIVER REND CONTROL SYSTDIS FAILURE ANALYSIS COMPONENT PRIMARY SECONDMtY COMRINED RUS SYSTEM DESCRIPTION EFTECT EFFECT EFFECTS 1 IVBN-PNLotAl C51 Neutron Monitoring - H13

• d.1 Power supplies Loss of power and signals Inability to properly Increase is reactor (Cont'd)

Power Range P' 320 VDC for: APRM cms A&E, moottor reactor neutrea. power. Va4J +15 VDC

1. Indications flux using APM Chamaels PS23 +5 VDC

2. Recorder and coup inputs A and E analog signals.

(Used for process rad

3. Annunciators (Other neutrea moeitering monitor "A" analog

4. Logic circuits and chamaels available.

signals below) relays Scram trip channels not

5. Recirc flow rate ref affected.) Recirculation setpoint flow control valves goes

6. Isolator AR6 to man open.

7. APRM A for recirc Loss of power and signals None - (SRM & IRN channels for: SRM CH A and IRM not used during reactor CHs A&E, power operatica).

1. Indications

2. Recorder and comp inputs

3. Annunciators

4. Logic circuits and relays

5. Isolators AR6 and AR7 H13-P671 Power supplies Loss of power and signals None - Inability to PS22 120 VDC for: APRM CH C&G, properly monitor reactor VR20 +15 VDC

1. Indications neutron fluz using APRM PS23 +5 VDC

2. Recorder a4 coup inputs Channels C and G analog (Also used for process

3. Annunciators signals. (Other neutron rad monitor "C" analog

4. Logic circuits and coattoring channels signals below).

relays available. Scras trip

5. Recire flow rate ref channels not affected.)

setpoint

6. Isolator AR6 Loss of power and signals None - (SRM & 1RM for: SRM CH A and IRM channels not used during*

CRs C&G, reactor power operatioa).

1. Indications

2. Recorder and coup inputs

3. Annunciatoss

4. Logic circuits and

. relays

5. Isolators AR6 and AP7 12-15350 (C-s)

I fk k k f..~ y

APPDS11 C RIVER Bf.ND CONTROL STITDES TAILIRE ANALYSIS CottPOWENT PR114tf SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFTECTS IVBN-PELO1A1 D17 Process Radiation Power s-pplies Loss of output power. Loss None - laability to (Cont'd) !Laitoring M13-P669 of asia steam line "A" soaitor asia steam line PS23 (Cost'd) 120 VDC radiation monitor analog "A" analog signals. Trip +5 VDC sissals and indications. and isolation signal not Located as part en Actuates annunciators: affected. power range monitor am

1. Main steam line Div 1&2

panel, high-high radiation or inop.

2. Main stese line "A* high-radiation.

B13-P671 Loss of main steae lir.e "C" None - Isability to PS23 (Cont'd) i20 VDC radiataos monitor scalog monitor main steme line +5 VDC signals and indications. "C" analog signals. Trip Located as part of actaates aar.unciators: and isolation signal not power range monitor.

1. ! lain steam line Div 1&2 affected.

high-high radiation er inop.

2. ! lain steam line "C" high radiation.

CSS Steam Bypass Reg Sys Power supplies: Less of power output. None - A15-LISPS PS11 122 WC provides redundant 212 124 VDC current sharing opera-tion with PS21 and PS22 power supplies. PS1 (AR10Z102) 215 VDC Loss of power output and None - startup signal not startup signal for system ased at power levels. "A*. PS2 (AR10Z102) 215 VDC Loss of power output turb None - systen "B" load interface. Amp "A" in-demand and turbine flow operative and signals for signal available. sys "A" load demand and tarb flow ref and flow demand lost. PSI (AR10Z105) 115 VDC Loss of power output and None - Loss of recirc sys loed da===d error signal automatic load flowing if to the recirc systos. recirc contro11ec is is l auto. Otherwise no effect. Daable te load follow. i l l 1 1 i 12-153553 (C-9) ( h I f 4

. e,. { APPD ele C RIVER BDID CONTROL SYSTDIS FAILARE ANALYSIS l j Co m rulanRY SEcoNonRY Conslan ! BCs SYSTEM LESCRIPTION EFFECT EFFECT EFFECTS l IVBN-PNICIAI CSS - Steam Rypass Res F001-1 Tast open sol less cf power to walves. Nese. (Cont'd) Sys (Coat'd) valve. Backup power available to F002-1 Fast opea sol open valves. --Ur %,. I$ 5 Rus Switching Unit Power fallare, transfers None. M -P637. to bus "B" power. E31 Leak Detection Sys Sump relays and logic Actuation power lost to None - Isability to l cirraits N13-P632 relays and timers, perform drywell e p ip E10 Relay B605 and R606 drata sup fill and pump-Kit Relay R605 and 3606. out operatieas. K12 Belay R'35 and 3606 K13 Relay R607 and R613 None - Isability to II4 Relay 3607 and 3610 perform containment epip E15 Relay 3607 and R610 drain sump fill and pump-out operations. E19 Relay R601 and 3602 None - Isability to E20 Belay R601 and R602 perform containment area E21 Belay 3601 and 3602 drain rump fill and pump-out operations. 3613A Ind switch Loss of power to 9613A ind None - Actuates annunci-switch. 50234 flow astr. ator for refueling bellous NO23A-1 preamplifier. leakage. AT12 Analog isolator Loss of signal frea Nome - RWCll talet flow AT13 Analog isolator E605A main cond flow and ind C33-N600 signal lost. assembly E602A recirt suction flow. Actuate low pump flow annunciator. t 12-1535ss (C-10) 2 5 s r

r APPD SIE C l i RIVER SDS CDer!30L SYSTEMS T2.IIIRE AEALYSIS f COMroWENT PRIMARY SECDISART CatSIIED i l ses systts osseminios E m cr m Kcr arracTs l 1EEE-P5T.DIA1 G33 Reacter Eater Cleas=p Cleanup pump logic Loss of relay power inki-Nome - operation not (Cent'd) circuit K4 and atS bits starting piampa,

affected, relays.

) Power supply R6et +24 VDC for: l 53C1 (Sianal Resistor Catt) R610 Flow seter Loss of reactor bottos None. hea3 drain flow tedicator. R600 Press meter 1 mss of regenerative heat None. each inlet press indication. l 3606 R/M control Loss of controller eatpat Wome - Velve F033 closes. I station to K001 I/O coeverter preventing amis cand===*r blowdous operations. 1 No effect, not ased dar-ing reacter power 1 operation. 14ss of output power for: 9611 Decorder Beactor recire and cost some. rod drive water dissolved R W A Alara maits 02 recording ad high None. 36065 Alare units dissalved 0 teacentration j alarms inoperative, l R601 Decorder Filter denia influent some. conductivity recording h602A Alare units and high/ low conductivity None. Bi602: Alars saits alarms inoperative. B603 Secorder Titter deele effluent None. i conductivity recording and 56034 Alarm unit highflow alarms inoper-None. 3603B tiare unit etime. 3604 Seceeder Ceedmasate storece water Bene. conductivity recordies and uses Aless unit hish/ law atares temper-ative. 12-1535:e (C-11) 5 (( [ f } } "5 -y ( ;

APPEND!I C RITIR BEND COIITBOL SYSTE!tS FAILt5tE ANALYSIS CCetPCNUIT PR DenRT SEco maat COISIMD sts SYSTUt DESCRIPTICII EFIICT EFTECT ET."ECTS ( 1Y35-P5LO1A1 C33 - Reactor W ter Loss power to: l (Cent'd) Clesany (Cast *d) i 3600 Alere unit cleanup sys talet flew h - Emes of BK5 flem I ki/lew alare tripe piamps from pumps C301AEB. CDCIA&R er inhibits pump 5eme, flev est needed for startup. reacter power operaties. R613 Recorder Jet pump total flow and None. [ reactor care plate D/P recording inoperative. l CTI1 Powr Supply 24V Loss of output power for recorder chart & pee drive. R611 Recorder CRD 03 Chart and pea drive None. Sectre 03 Chart & pes None. drive. R601 Recorder Filter is conductivity None. drive. R603 Secorder Filter out condectivity Bone. drive. 96C4 Becorder CST coedmetivity drive. None. Loss of eetput power for Nome, recording less recorder chart & pen only. drive. C51A-5602A Recorder SR!! A log comat rate Nome, recording less drive. ealy. 0 1A-36023 Recorder SE:t 8 log count rate Nome, recording loss

• drive.

ealy. C51A-k603A Secorder 1Rt and APtit Ch A/E output Mome, recording loss drive. only. ~ C51A-h6438 Secorder int and APRfl Ch 5/F eutpet Kone, recording lose i drive. esly. i Q 14-3643C Recorder INE and Afst Ch C/G eetpet

h. socording lo o

drive, only.

12-153518 (C-12) i e y-e

O APPENDIX C l 'CivER SEND COIITBOL STSTEMS FOIL 13tr AmALYS13 COMPOIEENT PRIMARY Sgrm na8T CCMBINED BCS SYSTEM ELSCRIFTION EFFECT EF7YCT EFFECTS IT35-P5LO1A1 G33 - Beacter E ter Q 11-1603D Recorder IRS and APlut Ch D/E output Note

• Recording lose (Coat'd)

Cleanup (Qmt'd) drive. only. C518-3614 Decereer Sectre flow loop A/B 5eme - Recording loss eatpat drive. only. C33-B607 Recorder Feedwater/ steam total flew None - Recording loss I drive. caly. C33-36Cs Recorder 5 arrow / upset RFV level Sone - Recording loss drive. only. I C33-R609 Decorder Turb Ist stage and reactor None - Recording loss pressure drive. only. 321-5615 Recorder Fuel zone Rrv level drive. Ecoe - Recording loss only. B21-3622 Recorder Feedwater turbidity drive. Nome - Recording lose l

only,

? l CCP - Reactor Flaat ICCP-PT127 Fress autr Loss of ante start sisaal None - Control room alarm j Ccepenest Cooling W ter to idle CCP pump and less low CCP press. i System of header press indication. No etfeet on plaat operations. ICCP-LT120 Level metr Loss of CCP surge task Nome - CCP surge taak low level ind for makeup water. level alarm actuated. No etfect on plaat operations. CCS - Tarbtae Flaat-ICCS-FT116 Press matr Loss of press sisaal. Sooe - Low header pressure Coeling Eter Systee Initiation of auto start for CCS pump. ICCS-LT113 Level user Make up water valve some - CCS sarse tank low closes. level alarm actuated. Make up water lost. Det r*==te System IClet-PT704 Press user Loss of feedwater pump None - Only low FW M -708 Press astr section press indicaties section pressare alase -79C Press astr and low preseare trip actuated. (ESDS) eperaties. 12-1535:e (C-13) [T 1

AprE MIX C [ RIVER SEND CONTROL SYSTDIS F;ILL1tE AhALYSIS i ConrosiENT FRIMARY SECO SARY COM51RD 305 SYSTDI DESCRIPT10E EFFECT ETTICT EFTECTS ITBN-P51.01A1 Clet Camdensate System IClet-F164 Flow meer Loss of feedwater pump Nome - Caly low W pump (Cost *d) (Coat'd) (ES64) suction flow indication suction flew ataru and low flow alarm and actuated. cost operation Loss of reactor recirc fass of reacter rectre Eass of reactor rectre rumback upea low FW flow. rumback upoa low FW rumback signal on low flow. EW pump suction flee. I None - Loss of FM-SOV2A l sia flow valve control sig aal. No ef fect as plaat operation. ESS - Estraction Steae 1.55-F0T111 D/P Intr Emss of 3rd pt extraction Nome - Low diff pressure Systes steam to maia steam diff indicator in control room press signal actaated. It0U111 and 112 valves fail to close. Close os low 3rd pt extraction steam to mais steam A/P. Loss of main steam sapply for radweste reboiler and steam seat evaporator. !ISS - !!aia Stema System 1!I55-FT134,3 Tiow Inte less of 2nd stage air Nome - Iow 2nd stage air ejector steam flow signal. ejector steam flow alarm actuated. Air ejector suction valve opens. T M - Tarbine Generater ITM-10837-1T!IBH06 Eigth turbine sea load. None - Loss of turbine EI Fluid Systen Kaad Sissal Intr Signal alars and loss of rumback signal to 701

signal, upos removal of one string '

of low press beaters. C306 (Coat'd from C-1) 11US-5 6 CW5 - Circulating Water ICW5-FWIBA Coeling Loss of I of 8 fans. None - Loss of 4 of 8 tower fas faas. No short term effects. i ICE-FW18C Coeling Less of 1 of 8 fans. Neme. teuer fan ICW-Felat Caeling Emes of 1 et 8 fans.

Neee, teuer fan l

ICW-FW18G Cooling Esos of 1 of 8 fame. None. teuer fem i l 12-153588 (C-14)

APPENDIX C RIVER BEND COST 20L SYSTEMS FilLCRE ANALYSIS I COMPunENT PRIMARY SEccNDARY COMBINED 3CS SYSTEM DESCRIPTION EFFI'T EFTECT EFTECTS C304 (Coat'd) 15JS-5WG2G CWS - Circalatta8 Water ICWS-FNIDA Coolin8 Loss of I of 8 fans. None - Iass of 4 of 8 tower faa fans. No short term effects. ICWS-FNIDC Cooling Loss of I of 8 fans. None. tower faa ICWS-FNIDE Cooling Loss of 1 of 8 fans. None. tower faa ICkS-FNIDG Coeling Loss of I of 8 fans. None. tower faa C314 C%M - Condensate ICMM-IIA Condensate Loss of I of 3 50% capa-Recirculation flow rus-Loss of 2 of 3 condes-pump city pumps. back on loss of two sate pumpa. l condensate pumps and Recirculation fisw l C115 c m - Cr4Jessate 10Rt-FIC Coadcasate Less of 1 of 3 50% capa-feedwater pumps trip os rumback. pump city pumps. Iow suction. Feedwater pumps trip on l loss of suction. l C312 FWS - Feedwater Systes ifWS-FIA Feedwater pump Loss of I of 3 IV pumps. Water level decrease results is recire I flow rumback. l CRIS 11JS-SLGIA INNS " SCC 2E hlCS - Reactor hter IECS-PSA Beactor water None - Backup pump None. Cleanup cleanup Lwhash puso. IUCS-P5B available. i C33 - Reactor Eter G33-F 07 - Reges heat Valve fail as is - Valve Nane. Cleanup (3 6 ) each bypass valve. moraally closed. C33-F031 - Drain flow Valve fail as is - Valve None. orifice bypass (blow-normally closed. dows) walve. B33 - Recirculatio4 B33-D003A oil pumps Iass of hydraulic power in N m - Flow control valve System and fan meters subloop loop "A*. 833-F060A locks up 1&2. IMS-IICC2A 321 - Nuclear Boiler 321-F001 Beactor head Loss of valve control and None - valve mores 11y vest valve position indicaties valve. closed. Fail as is. 12-153518 (C-15)

O APPEND 1K C CIVER BEND CONTROL SYSTEMS FAIL 11BE ANALYSIS COMPOWENT PRIMARY SECONDART COMB 1mED BCS SYSTEM CESCRIPT10% EFTECT EFFECT EFFECTS INJS-SWIA (Cont'd) INES-m a R33 - Beacter 333-F023A Rectre loop Loss of valve control and None - valve normally (Cost'd) Becirculation "A" section valve. position indication. epen. Unable to close Valve fails as is, off recirc loop "A*. 333-F067A Recire loop Loss of valve control and Nome - valve normally "A" discharge block position indication. opea. Unable to close valve. valve fails as is, off recirc loop "A". C33 - Reactor Wter C33-F132 RWCU Section Loss of valve control and None - valve normally Cleanup Line Valve. position indication. opes. Valve fails as is. C33-F106 RWCU Suction Loss of valve control and None - valve normally from recirc loop "B*. rosition indication. opea. Valves fail as is. ISCA-PNL2A1 G33 - Reactor Wter C33-F033 Blowdown flow 14ss of valve control. None - act used during Cleanup control valve. Valves fail closed. normal operation. G33-50C3 Temp mstr Loss of regen and None. nonregen heat exchanger process temp. CB06 CCP - Reacter Plant ICCP-PIA CCP Pump "A". Loss of I of 3 50% capa-None - Auto startup of None. Compoecat Cooling E ter city pumps. idle pump. Loss of 2 of 3 pups causes auto start of C307 1CCP-FIC CCP Pump "C". Loss of I of 3 50% capa-hae - Auto startup of the standby service city pumps. idle pump. water sys pumps and isolate CCP heat exchangers from SWP. This results in loss of cooling to the rectre pumps and trips CRD j Pumps. 15MS-MCC2C C33 - Reactor Wter C33-F046 RWCU drain to Loss of valve control None. Cleanup mais condenser valve. Valve fail as is. 321 - Nuclear railer 321-F020 Sta line labd Loss of valve control Nome - Fot used during draia valve. Valve mereelly claoed. assasi power operettes. C51 Startup Baage Det C51-S001A,B C.D.E.F.C. Loss of detector drive Ecw. Drive Cent Sys E.J.L,5 Noter medale. power. ISCA-FML2C1 C51 Startup Bange E22-P004120 VAC Lees of control power for Nees. Det Drive Coat Sys detector drives. 12-1535 e (C-16) A

Y J p l APPENDIX C t i Elm BEND CONTROL SYSTEMS F*.!LCRE ANALYSIS C0ftPOWENT FRIFIARY SECONDARY COMB 11ED 305 SYSTEM CESCRIPTION EFFECT EITECT EFFECTS ISCA-PNL2C1 C51-1060 Traversing Statrol 4 - Drive mech Unable to calibrate APRN None. (Coat'd) lacore Probe Calib Sys C51-J001D. INPS-SWGIA (Coat'd) C3c4 INJS-ShCIE 15ES-MCC4A ISCA-P%L4A1 D17 - Process Radiation D17-J013 Offgas post Caable to soaitor of fgas -- None. Monitoring treataeat sample panel alternate monitoring by P1 and P2 vacum pumps. plant exhaust duct monitor. Annunciator actuated. D17-J013 Reater Loss of heating. None. D17-J013 Purge solenoid Loss of calibration None. valves. capability. 564 - Offgas %64-N012A Mydrogen Loss of "A" H2 analyzer Wone - alternate analyser analyzer operation "B" m i!able. INES-NCCtA ARC - Coadcaser Air 1A#C-P2A Condenser air Camble to establish vacuum Nose - not used during Femval System removal recirculation during startup. power cparation. seal pump 15HS-MCC1C2 I%T. - Teedwater Pump and II%1-P5A Feedwater pump Loss of backup pump. None - shaft driven oil Drive Labe Oil gear increases aux oil Actuation of control room pump IIL1-P44 normally in pump annunciator. use not affected. CML - Generator Leads 1GML-111 1 sol phase bus Loss of faa power and None - backup faa Coeling dact cooling faa motor operation. Indication la 1GML-Th2 available. control room. 15HS 'tJCC&C N64 - Ofigas 564-5001A Heater Loss of power to temp hone if sys "A" in opera-transformer controller 564-R002A. tion. If sys "B" is operating, will not main-tain sys "A" temp high enough to allow switching to sys "A*. N64-2001 Clycel cooler Loss of 1 of 3 aschines None - 68 & 6C machines refrigeraties sech 64 available. N64-2001 Glycol cooler Emes of I of 3 pumps Nome - 75 & 7C pumps coedeemer pump available. 12-li35 s (C-17) t I. f,e ~ f ~

e AFFDDIE C RIVER BDS CONTROL SYSTDIS TAILI:RE Al84 LYSIS CONF 0NENT PRIMARY SECONDARY COMBINED j ECS SYSTDI DESCRIPTION EFFECT EFFECT EFTECTS CET04 (Cont'd) IMus-HCC4C 364 - Offees N64-2002A Dryer beater Camble to regenerate Home - alternate trais (Cr.at'd) trata *A" trais "A* dryer M64-D030A. "B" available. 364-2002A Regenerator Unable to cool er regener-Nome - alternate trois blomer "A", train "A* ate dryer 364-D030A if "B" available. trata "A" is met process-ing. 564-Z003 Control power Unable to regenerate None. If traia "A" is in traia "A". SVOSA inlet valve. Fails operation er la standby as is. SV15A outlet valve fails as is. SV09A and 14A regeneration valves fail closed. SV164 fatis opes. 564 - Offaas N64-3012A Vault less of one of two Nome - backup amit refrigeration mait cosyressors. capable of maintaining compressor INVT-CIA. vault temp. l Ir.IS-Sucts ABC - Coedesser Air IARC-FIA - Coed air Cannot establish condenser Nome - act ased during l Bemoeal removal pump motor.

vacum, normal operation.

SJAE need aerustly. IAS - Instrument Air IIAS-CIA - Instrument less of 1 of 3 compressors Nome - two compressors air compresser. moraally la load /maload j mode. Seestaing one la auto standby. 1 sus-st J ISCA-F5L1J1 CSS - Tarbine Flaat ICCS-SOT 13A.B.C All valves fait open to None. Camponest Coeling nieter -50V31A,3 C allev cooling water to circulate contiamously, i 1NG-5CCIG IAS - Iastament Air IIAS-DETIA lastruest Loss of ese of two 1001 Nome - Dryer IIAS-DRY 13 Air Dryer. capacity dryers. available 12-153588 (C-18) -i [ < - -h f

' '.N, AFFD GEI C RIMR BOS CDWTROL SiSTDE FAILM &aarTSIS '~ l CorrosENT FRIMARY SECOMWtf COISIMD M:s SYSTDI MSCR FTICE EFFECT EFFECT EFTECTS CBe6 (Cent'd) IEJS-stele i M en Emes of volve centret Wome - Desseerative ever-l 13CI-FIEa3 M!t - Turbine Smildies IM E-SOF128 Sel valve Valve fatto cleeed erstee rebeiler and weste j iniscellaneese trains 1stle-Sot 129 Set valve valve fails cleoed evaporator better drata i 13TM-50T2M Set valve valve fails closed receiver draias diverted 11mt-50T207 Sol valve Talve fails closed to radweste. 1DTM-50t2C4 Sel walve Valve fails open 1N:15-50V205 Set valve Yalve fails spea 15FS-ShCIA (Cast'd) Caa5 15JS-ShE2A CWE - Cired.las Water ICW5-M 1AA Loss of 4 of S fans in the Nome - four backap fame ICW5-n TAC Tae, cooling associated cooling tower. reesta available. ICME-N IAE tower. ICts-M 1AG 15JS-ShE2C 0 5 - Circulattag Water ICMS-FWICA Esse of 4 of S fans in the Nome - fear backup fame 1Chs-FWICC Tao, coelias assectated coettag tower. remeia available. ICW5-FWICE tower. ICMS-FW1CC 1525-SmC3C 1EEE-3CC11A ISCA-75L11A1 BCS - Bearing Coeltag IBCS-FIA Pg bearing Laos of pg indicaties la Bene - backup pump train Water System cooling water. control room. available. 19CS-51RIA Strainer Loss of one of two Bene - bacht? puey beeries cooling water, strainers. strainer available. t [ ran ts25-Shcu 13ES-5CC1C1 1ET - Turbine Building IDET-FIC Fump, turbine Eass of one of two fall Meee - puey IDET-FLT Egaipenet Smay buildias egaip semp. capacity p g. available, j Centret rose Ladicaties. l IDET-FIE Puey, tsrbine Less of ese of two in11 some - pump 1DET-FIB baiteias egnsp sg. capacity pumpe. available. Centret seem ledicaties. l l i l 12-153588 (C-M) l ?

l AFFUEIZ C 11111R SOD CDETROL SYST1255 FAILERE A5ALYSIS CteronENT FSIMARY SECONDARY CottB111ED BCS STSm1 DESCRIFTION E FTECT EFFECT E M CTS CSC3 (Cast *d) 15ES-L*_'*1C1 M - Feedwater Pump and IM-FIA Feedwater pump Lass of ese of two AC eil None - backup AC pump Loss of both AC pumps (Cast *d) Drive labe 011 and eil pump. pumpe. I M -F2A and DC pump Seckup DC pump 1Ft4.-F3A IfvL-F3A available. available. IfE-F2A Feedwater pump Less of one sf two AC eil None - backup DC pump and ama eil y g. p g s. available (IIE-F3A). 15JS-5".CIL [ 15It$ "5CCIA l CII - Centrol Red Drive IC11-F003 Fressure Camble to adjust drive None - valve remains is I Rydraalic centrol valve cecling water flew last position ISCA-F51AAI 133 - Beacter 1333-F001A LPEG "A" ats Caabte to operate recirc None - not used at in11 Secirculaties System egaA,eest and weltage sys "A" at law speed. power. regulater. C1335 133 - Beecter 1533-5001A LDIG "A" Camble te operate recire None Becirculattaa Systes drive motor. sys "A" at low speed. IX!tS-TCSC ISCA-f1EISCI C11-1360 - Castrel Red IC11-C001A Ana mil pump Caanet start hyd pump None - direct coupled Rydraalic System C11-C001A if aan oil pump labe oil pump provides est operating. lubrication during aermal operaties.

CR37 l 15NS-SWC A Sie? - Service Eater ISW-F1A Service water Less of ese of three 50%

Aaanariated is control less of two of three l pep capacity pumps ammunciated race. 50% capacity pumps. l in CR. Standby service water l pumps SnlF-F2A,B.C D iShir-FIC Service water Lass of we of three 50% aaaaaciated in centrol available. Less of pump capacity pues assanciated room. cooling to turbine in CR. plaat component heat

• eschanger results is a turbine trip.

CWS - Circulating inster ich5-FIA Circulattag Less of 25% of cire water less of some condenser Loss of 5C% capacity water pg capacity. vacuum. will result la turbine Amanciated in G. trip ea low condesser vacuum. ICME-FIC Circulating Lees of 25% of circ unter Lees of some condenser water pump capacity. vacuum. Anamaciated in G. G13 333 - Becirculaties 1833-CBS1A Decire p g Lees of pump A. Feedmeter flew decreases. Reector peuer decroseee. Syst e P g coeste deum to step. 12-113588 (C-28) i ) J

APP!JDII C RIER BEm CONTROL SYSTEMS FAI1ERE ANALY3IS 9 j Cit 1POWENT Pkimaaf sgmaaY C0!S1HED j StS SYSTEM DESCRIPTION EFTECT EFFECT FFTECTS I Isrs-sw is C322 1ES-5WC2R CW5 - Circalating h ter System FY1AB Coeling temer Faa motive power lost:

Nome, fee Control rose light indication.

W IAD Coeling tower Control rose light L,me. fan indacattua. Four backup fans remain operable. M1AF Cooling tower Control roce light None. fas indication. H 1AR Coeling tower Control room light Rome. faa indication. 1525-SWG2D CW5 - Circulating Enter Systes FBICS Coeling tower Fan estive power lost: None. faa Control race light indication. N ICD Cooling tower Control room light None. fan indication. Four backup fans remain operable. p1CF Cooling tower control roes light None. faa indication. I DI G Cooling tower Control room light hos.e. l fas indication. 105-SW3D BCS - Bearing Coeling IM S-5CC115 Systee F15 Searing cooling Pump motive power lost. None, bactop pump water pump Control room light available indication. 15CA-P511131 STRIB Strainer Strainer disabled, control Nome, backup strainer roce light indication. and backwash and flush-Backwash and flash ing pump trala available. l function lost. f C321 Cat ICMD-PIB Coadmanete Imos of I of 3 501 Bene. ymy capecity pumpe. 12-1535 e (C-21) i l l ? i. f j h 2

i V y APPEND 11 C RIWR BDiD C04TRCL SYSTEMS FAILURE ANALYSIS l CQtPCNENT PRIMARY SECONDARY COMBINED SCS SYSTEM DESCRIPTICW iTTECT EFFECT EFFECTS- ! 15PS-ShCIS (Cent'd) C323 l IMus-Sid;23 CMS - Circulating Water FIS Circ water pump Pump disabled. Loss of 25% of circulat-50% condesser cooling l Control room sanunciated. aq e.ter flow. water flow lost results l Main turbine condenser la loss of condenser i vacaua lost, actuating vacuun'and turbine trip ala rms. actuation and eventual scram. FID Circ water pump Pump disabled. Loss of 25% of cire water Control room annunciated. flcw. Main turbine l condenser vacuum lost, actuating alara. SWP - Service Water PIB Normal service Pump disabled. I.oss of 50% capacity water pump Control room annunciated. pump. I of 3 pumps. C334 11JS-ShCIM 15HS-HCCSB ISCA-P5L8BI Cll - Control Red Drive Aux eil pump for CC Loss of pump operation. Noce, not required for pump C0013 power operation, only I for pump startup. IXJS-SbCIP 15BS-MCC188 ISCA-PNLISBl WCS - Reactor Water SOV101 Solenoid valve Loss of valve operation Ncee - Valve fails closed. Cleanup for receiving tank Required for power backwash. operation. SOV102 Solenoid valve Loss of valve operation None - Valve fails closed. for receiving taak Required for power backwash. operation, 50V103 Solenoid valve Loss of valve operation None - Valve fails closed. for receiving taak Required for power backwash. operation. 50V110 Seleeeld valve Loss of valve operation Nome - Valve fails closed. for receiving taak Required for peuer bactuesh. eperation. CB30 333 - Becirculaties 333-Ceelt Becirc pug Imse of P g A. Pump Feeduster flew decreenes. Beactor power decreases. l System coasts ecum to step. l12-153588 (C-22)

s APPENDIX C RIVER BEMD CDhTROL SYSTDtS FAILl3E ANALYSIS 1 COMPONEh! PRIMARY SECONDARY COMBINED BCS SYSTDI DESCRIPTION EFTECT EITECT EITECTS 4

• 1SCA-PNLigBI ECS - Reactor Water SOVIT! Solenoid valves Loss of valve operation None - Valve fails closed.

(Cost *d) Cleanup (Cont'd) for receiving taak Required for power backwash. operation.

INPS-ShC13 (Cont'd)

CR33 I'.JS-SW ID IAS - Instrumeat Instrument air Loss of I s,f 3 instrument None. Compressed Air System compressor IAS-CIC. air compressors. One standby air compressor is available to supply air demand. 15HS-NCCIP DET - Turbine Building Turbine building Unable to pump TKIA sump None - Possible estreme Equipment Drains equipmrat sump pumps fluid to condenser hotwell high sump level alarm is IDET-PIA and IDET-PID. or liquid raduaste system. control room. ISCA-PS11Pt DET - Turbine Equipment Conductivity instru-Loss of ability to transait None - Loss cf aatcoatic Draia Sumps ments for sump TKIA high conductivity signal diversion of fluid from and TKIC; IDET-CITS135 for sumps IA and IC. sumps IA and IC from and I U -CITS137. Instruments fail low scale. condenser hotwell to liquid radwaste upon high conductivity la discharge. CB32 1EIS-SWGIT C'!L - Generator Leads 1GML-III2 Isolated None - backup fan IGML-TN1 None. Cooling phase bus duct cooling available. Aan of trouble faa. in CR. IMHS-MCCIS ARC - Condenser Air IARC-P2R Condenser air None - not used during None. Removal removal recirculation normal operation. ~ seal water pump. 40TE: C334 continued on sheet C-29 12-15350 (C-23) ..{f N ' ;' f ! 'h

g 1 APPElmII C RIVER BEIS CONTROL SYSTDts Fall.12E ANALYSIS .,4~' = COMPONENT PRIMARY SECONDARY COMBINED

905 SYSTE*t DESCRIPTION EFFECT EFFECT EFFECTS

-INJS-SliCIF (Cont'd) i INHS-NCCIDI PbL - Feedater Pump and IM-Plc Feedwater pump Nome - backup AC or DC - None. "h Drive Lube oil norms 1 meia oil pump. pumps starts automatically on low oil pressure. IM-PIB Feedwater pump Same as above. None. normal main oil pump. DET - Turbine Building IDET-PIF Turbine bids None - other full capacity None. Equipment Drain equipment sump pue:p. pump PIC available. IDET-PIB Turbine bids None - full capacity pump None. equipment sump pump. PIE available, INES-MCCID2 IvL - Feedwater Pump and IM-P5C Feedwater pump Nor.e pump used for None. Drive Lube Oil gear increaser aux oil startup and not used pump. during normal operation. .j IM-P2R Feedwater pump None - DC pump starts on

None, pump aus oil pump.

Iow oil pressure. IM-PSB Feedwater pump None - not used during None. gear increaser aus oil normal operation. pump. .i l l IIML-P2C Teedwater pump None - DC pump starts on None. I aus oil pump low oil pressuse. l INHS-MCC48 i ISCA-PN14B1 D17 - Process Rad Noa D17-J014 Offgas post-Loss of vacuum pump and

None, treatment vial sampler. sample cor. trol valves.

Ua 61e to obtain sample.. D17-J034 Offgas Loss of vacuum pump and None. combination pretreat sample control valves. Unable to get grab sample sample panel, Loss of heater. Plate out of lines increases. h2-153553 (C-24) i l f h )' ? { i J!'

r 'n ~ N'- ' a APPENDIX C. ' RIVER BEND CONTROL SYSTEMS FAILL1tE ANALYSIS. Y COMPONENT PRIMARY SECONDARY. COMBINED ' BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS ' ISCA-PNL4BI (Cont'd) N64 - Offgas N64-N0128 Hydrogen Loss of one of two None - Sys A available. analyzer. ~~ independent sys activate ^- ann. N64-K026A,B ffV/I. Loss of absorber temp None. monitoring. N64-NO33A,8 Flow Loss of train A & B Autlet None - total flow on FR transmitter. flow monitoring. N64-R620. N64-N029 Temp Unable to monitor vault Neue. transmitter. inlet air temp. N64-N013 Temp Unable to monitor outlet

None, transmitter.

temp of moisture separa-tors A & B. N64-N014 Temp Loss of refrigeration None - temp availab1e if" ' ~ transmitter. vault outlet air tes.p TIC R037AB. rrcording. N64-N015 Temp Unable to record glycol None - temp available on traassitter. , tank outlet temp (TRS-TIC 17B & 18B. ,Rf30). 1;64-F051A,B Absorber Valves remain open. None - valves normally train gas cooler inlet open. valves N64-F05tc,D Absorber Valve goes open. Flow None - Increase in process train gas cooler bypass divided between cooler and gas temp to charcoal valves bypass line. absorbers. N64-F011, N64-N062 Unable to recond absorber None. (Flow transmitters). column discharge flow on recorder FR-620. N64-PS2 Power supply N64-R035-1 Activate absorber coluna None. Alarm N64-R036-1 disch flow alarms. N64-N0ll-1 Loss of absorber colums None.

1. II N64-N062-1 discharge flow signal to FR620.

N64-AR6 Ind/sep Loss of absorber columa None. discharge flow indication. 4 12-1535 s (C-25) t i f s I f h*, ( t ;,;

i8 APPENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS ISCA-PNL4BI (Cont'd) N64 - Offgas N64-K024AB Power supply Loss af process level and Offgas fills with water Turbine trip and scraa. N64-SRU3, R005AB, temp signal of the offgas and chokes-off process N008AB, ARS, SRU4, condenser. Valves flow. Back pressure on R006-1 N64-F016AB go/ remain SJAE increases and closed. results in a decrease in-main condenser vacuum. and results in a turbine trip. N64-N009-1 Temp Loss of of fgas condenser None. transmitter outlet temp. N64-F007A,B Preheater None - normally open None. inlet drain valve valves fail open. N64-F029 Holdup line None - normally open

None, drain loop seal disch valves fail open.

valve. N64-F044 Cooler None - normally open. None. condenser drain loop valves fail open. seal disch valve. N64-N063-1 Temp xatr Loss of of fgas condenser None. cooling water disch temp. N64-F048 Prefilter None - normally open valve None. inlet drain loop seal fails open. disch valve. N64-K002A, K003A MV/I Loss of catalytic recom-None. converter biner inlet and outlet process temp. N64-R002A Temp None - heater not used None. controller. Voltage during normal operations. control for recombiner heater. . Used in standay. N64-K0025, K003B MV/I Less of catalytic recom-None. converter biner inlet and outlet process temp. N64-R0028 Temp None - used in standby None. controller. Voltage

only, control for recombiner beater.

12-1535:e (C-26) k 'l 'l

a 0-1 APPENDIX C RWER BEND CONTROL SYSTEMS FAILLltE ANALYSIS, C0HPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFFCT EFFECTS t 'INJS-SVGIF (Cont'd) INHS-MCC4D N64 - Offgas N64-Z001 Glycol cooler Loss of I of 3 refrig None - alternate refrig None - more than one refrig machine 68.

machines, machines 6A and 6C machine (2) required available, for 12 hours per 72 hours of regeneration.

N64-Z001 Glycol cooler Loss of I of 3 refrig None - alternate refrig refrig machine 6C.

machines, machines 6A and 6B available.

N64-2001 Glycol cooler Loss of one of three None - alternate pumps None - more than one condenser glycol pump glycol pumps. 7A and 7B available. pump (2) required 12 7C. for hours per 72 hours of regeneration. N64-ZC01 Glycol cooler Loss of one of three None - alternate pumps condenser glycol pump glycol pumps 7A and 7C available. 7B. N64-B012B Vault refrig Loss of one of two vault None - alternate refrig. unit control power. temp control sys. unit B021A available. N64-ZOO 2B Dryer heater Unable to regenerate train None - not used during train B. B. processing offgas. N64-ZC02B Regenerator Unable to regenerate train None - not used during blower B. B. processing offgas. N64-Z003 Cas dryer Unable to regenerate. None - not used during control power train B Inlet valve SV04B and processing offgas. outlet valve SVISB remain in last position, regener-ation valves SV14B and SV09B fail close, SV168 fails open. N64-S001B Heater Loss of heater power to None - unable to switch t rans fo rmer temp controller N64-R002B. process to train B if None if Sys B in operation. train A in operation. No Unable to maintain temp if effect if train B in 5 in standby. operation. N64-B0125 Vault refrig Loss of one of two vault None - alternate unit unit refrigeration units. N64-B012A available. l12-153513 (C-27) - ' Y. k-i' h 1 ', ? f

q. APPENDIX C e RIVER BEND CONTFOL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS ~ i CB32 (Cont'd) INJS-SWGIB CCP - Reactor Plant ICCP-PIB Reactor plant Loss of I of 3 half capa-None, remaining CCP pumps Component Cool Water camp cool wtr pump. city pumps. Pump disabled. ICCP-PIA and Plc can meet Annunciator actuated. 100% cooling water demand. i B33 - Reactor Recirc LFMG set "B" actor. Loss of LFMG set "B". No None. No effect at full Water LFMG Set "B" effect at full power power operation. Used operation, for recirc loop B flow control below 25% power. G33 - Reactor Water G33-C001B Reactor Loss of 50% reactor water Loss of water cleanup Cleanup water cleanup pump "B" cleanup capacity. No capacity is annunciated. 4 effect unless reactor water quality was borderline. 4 INHS-MCC2B B21 - Nuclear Boiler B21-F002 Head vent Loss of valve control and None. System valve. position. No effect. V1v normally closed. G33 - Reactor Water G33-F100 Recirs loop Valve power lost. Fails None, valve is normally Cleanup (RWCU) "A" cleanup valve, open. open. G33-F101 Bottom head None. Valve fails as is, None. drain valve. i.e., closed. G33-F042 Regen heat None. Valve fails as is, None. exchanger outlet valve. i.e., opan. i G33-F044, Cleanup None. Valve fails as is, None. filter demin bypass i.e., closed. valve 1 ISCA-PNL2B1 C51 - TIP Calibration Statrol, TIP drive / Loss of calib function None. APRM encoder. l B33 - Reactor Recirc LFMG Set B - panel No effect at full power. None. Wa'er LFMG Set "B" lights, space heaters, Recirc system cannot Auxiliaries voltage reg. operate below 25% power. INMS-NCC2D B33 - Reactor Recire B33-F067B Recire loop None. Valve normally None. Water Systen "B" pump disch block open. Would not be able valve. to isolate pump. B33-F023B 1ecirc loop None None. "B" pump suction valve. t 12-1535 s (C-28) t i i I

~ APPENDIX C RIVER BEND rONTROL SYSTEMS FATLURE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT-EFFECT EFFECTS INHS-MCC2D G33 - Reactor Water G33-F035 Drain to rad-None. Valve fails as is, None. (Cont'd) Cleanup waste valve. i.e., closed. B21 - Nuclear Boiler B21-F005 ifend vent Loss of valve coat and None. System valve. position incication. No + effect. Valve normally closed. INHS-MCC2F G33 - Reactor Water IWCS-P5B Reactor water None. Backup pump avail-None. Cleanup (RWCU) cleanup backwash pump able. G33-F104 Water cleanup None. Valve fails as is, None. heat exchanger bypass i.e., normally closed, valve. System cannot be used during b;t sbutdown. B33 - Recirculation B33-D0038 HPU oil pump Loss of Loop "B" hydraulic. None - Flow control valve System and fan motors, power and valve coctrol. IG3-F060B locked in last subloop 1&2. position. ISCA-PNL2F1 CSI - TIP Calibration Statrol 1, 2, and 3 None. None. ] System CB34 (Cont *d from C-23) INJS-SWGl.3 ARC - Condenser Air IARC-PIB Condenser air Cannot establish condenser " Disabled" indication in Removal removal pump. vacuum on startup. No control room, effect at normal operation. Air ejectors maintain vacuum. IAS - Instrument Air IIAS-CIB Instrument Loss of one of three air " Disabled" annunciation System air compressor, compressors. Normally two in control room. compressors run in load / unload mode and one in auto standby. In worst case (loss of bus INPS-SWCIB) two compressors will be out of service. INHS-MCClH ISCA-PNLlH1 DET - Turbine Building IDET-CITS136. Loss of auto diversion of Nona. Equipment Drains high conductivity water from tank TKlB. No effect. Water will be cycled into cond. 12-1535 s (C-29) t I b 4

m e. APPENDIX C ^ RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS a COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRTPTION EFFECT EFFECT EFFECTS ISCA+PNL1H1 IAS - Instrument Air IIAS-DRYlB Instrument Loss of one of two air " Disabled" indication. (Cont'd) System air dryer. dryers. No effect. Standby dryer IIAS-DRY 1A accomplishes function. INPS-SWCIB (Cont'd) CB21 INJS-SVGIV ITMB - Turbine Generator ITMB-HFPM-B Turbine Pump disabled, annunciated None - loss of I out of 2 EH Fluid System gen, EH fluid pump in control roca. 100% capacity pumps. Redundant pump starts automatically. INHS-MCC20BI IVBN-PNL01Bt B21 - Nuclear Boiler B21-K615 Power Supply: Process Instr R622 Recorder Loss of recording IV None. R615 Recorder turbidity, RPV level. N606 Alarm units Loss of elect' power alarm. None. SRU2: TBTT 15 xatr, Loss of IV turbidity

None, signal and comp input B21-NA007.

SRUl Loss of RPV level: None. iiO27 RPV level xatr. Ind shutdown rgn. Redundant indication available. R605 RPV level ind. Ind shutdown rgn. None. N044C RPV level xatt. Ind fuel zone rgn. None. N044D RPV level xatr. Ind fuel zone rgn. None. R610 RPV level ind. Ind fuel zone rgn. None. MV/I Converters Loss of RPV temp: None. K616 RPV bead ftange Indication to R643. None. t temp. K617 RPV bottom head Indication to R643. None. temp. 4 K618 Shell Floor Temp. Indication to R643. (1) Worct case is assumed, i.e., loss of IRTS-INV01B with bus loss 12-1535 s (C-30) ,h \\ 4 a +*f a a e e

.j; APPENDIX C i .e.'. RIVER BEND CONTROL SYSTEMS FAILliRE ANALYSIS CONPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS + I N -PNL0181 B21'- Nuclear Boiler K620 bottom head Drain Indication to R643 None. (Cont'd) Process Instrument temp. (Cont'd) g ra Unit A "648 Loss of elect pwr RPV temp low annunciation None. N649 Loss of elect pwr RPV temp low annunciation N650 Loss of elect pwr RPV temp low annunciation N652 Loss of elect pwr RPV temp low annunciation Indicator R008 Temp Loss of steamline drain None. temp.reasurements downscale. 833 - Reactor Recire Sys B33-K606 Power supply Loss of jet pump flow xate None. Loss of jet pump. Jet Pump Instr Sys for SRUI,2,3,4,9 signals and information. flow information. Does not affect reactor operation. B33-R613 Recorder core Loss af jet pump flow xatr None. D/P - flow, signals and information. B33-K608A-D Loss of jet pump flow xatr None. -K609 JPI-20 signals and information. Square root convs B33-K610A-D Summers Loss of jet pump flow xatr None. -K611A,8 Summers signals and information. -K614A,B Summers No controlling action -K612 Sussers affected. -K613 Sususers Temp xmtrs - Rtd Loss of recirc pump suc-None. chassis 21 tion water temp eignals/ ~ B33-N601A indications to computer -N601B system. -N601C -N601D 12-153513 (C-31)

_~ o. APPENDIX C 1 RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SELONDARY COMBINED BUS SYSTEM EESCRIPTION EFFECT EFFECT EFFECTS IVBN-PNL0131 "B33 - Reactor Recircula-833-K600 Power supply (Cont'd) tion Jet Pump Instrument' for: System SRUI Loss of recire pump seal

None, water press signals /

indication to recorders. SRU2 Loss of recire pump diff None. press signals and indications to recorders. B33-PS2B Power supply Loss of reactor level and Two recirc pump Recire pumps for SRU4 press signals. ATWS tr'ge transient. B33-C001A,B tripped. B21-N6998 recirc pumps C001A and Reactor power level -N6588 C001B. Level and press decreases. Reactor -N699E inds downscale. Redundant screw. -N658E inds available. B33-LClB-1 Power Recire flow control valve None - HPU-B loop 1&2 supply - modicon logic (F0608) control lost. inoperable. FCV inaper-control I/O modules #1 Remains at failure posi-able, recirc loop "B" flow thru 6. tion, will not load follow, remains at failed rate. Lose recire loop B flow control. B33-D003 HPU-B loops Lose loop 1&2 servos. . None - HPU-B loop 1&2 1&2 servos inoperable. FCV inoper-Lose flux estimator able, recire loop "B" flow indication on pal H13-680. remains at failed rate. Lose recirc loop B flow control. C33 - Feedwater (FW) Reactor high level Loss of trip logic power, None, redundant logic B Control Sys trip logic "A". I out of 2 (\\) trip of FW available. pump and main turbine Level 3 setpoint, Loss of setdown logic power None, used during startup-setdown logic, and setdown capabilities. only. DS 3 level signal Loss of level signal None. failure indicator. failure indication power. 12-153513 (C-32)

f. y f

i ?( f' y

O L-M s, APPENDIE C ? RIVER BEND CONTROL SYSTEMS FAlLlW. ANALYSIS. 4. COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT- -EFFECT EFFECTS. 6 .IVAN-PNL0181 C33 - Feedwater (FW), F001A Flow coat valve : Loss of control signal ~None. .(Cont'd) Control Sys: control signal failure failure logic power, locks interlock logic FW control valve F001A. .IFWSA20. F001B Flow coat valve. Loss of control signal None. control signal failure failure logic power, locks 'interlod logie up W control valve F001B. IfvSB20. F001C Flow coot valve Loss of control signal None. Control signal failure failure logic power locks interlock logic circuit up W cont valve F001C. lWSC20. Reactor level channel Loss of channel availabil-

None, availability logic ity logic power limits auto circuit IFWSN20.

mode level to "A" level signal. " Level out-of-service" indicators inoperative. K611 Power supply for: K605A Sq rt converters Loss of poser for steam Steam vs W flow mismatch Flow control valves A. K605B Sq rt converters flow control signals. "A", runs W flow back, 'B, and C lock up and K605C Sq rt converters "B", and "C" indications decreasing reactor maintain W flow. De. downscale, inventory. creased recirc flow causes reactor pwr K606B Sq rt converters Loss of power for FW flow; Steam vs W flow mismatch level decrease result-signal "B" indications increases FW flow and ing in increasing water downscale. reactor inventory. level. Sustained increase in level K6078 Alarm unit Annunciators for valve Signal failure interlock results in level 8 control signal failure. locks up F001B FW flow

• trip.

control valve'at failet position and flow rate. K626A Alare unit Reactor low level trips A Rectre pumps A and B K626B Alare unit and B actuated. transferred to LFMG set power. 12-1535 s (C-33) 1 af ',

W APPENDIX C '(. RIVER BEND CONTROL SYSTEMS FAILIRE ANALYSIS COMPCNENT PRIMARY SECONDARY COMBlhTD r Bt'S SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS IVBN-PNLolB1 C33 - Feedwater Control K648A Alarm unit Low "A", "B", "C", and "D" None. (Cont'd) K648B Alarm unit steam line flow annuncia-K648C Alare unit . tors actuated in NH proc K648D Alare unit inst sys. K611 Power supply for: K650-1 Alarm unit Reactor water level signal None. K650-2 Alarm unit' failure ann actuated K649 Dynamic comp Loss of FW control lag Would run W to max flow Would run RW to max lead signal. if controller set for flow if controller set reverse; to sin flow if for reverse; to sin controller set for flow if controller set

direct, for direct.

K613-1 M/A station Loss of W flow control Locks up valve F001B at Locks up valve F001B at K613-2 M/A station signal to valve F001B. failure flow position failure flow position K613-3 M/A station and rate. and rate. SRU1 Loss of steam flow signals Steam vs W flow mis-None, decreasing water A, B, and C and power for match, runs back FW pumps level precluded by W xatrs C33-N003A,B,C. and flow. Steam flow flow control' valve signals /inds downscale. lockup and decreasing reactor power level. K612 Power supply for: K605A Sq rt converter Loss of power and signals W flow control valves Reactor water level K616 Summer for 3 element W flow F001A,B,C lock up at increases with R600-1-3 St pt station

control, signal failure position.

decreases in reactor R601A-1-3 Bias M/A sta pawer level. K607A Alarm unit W cont valve F001A signal Valve F001A locks up at, Reactor water level failure aan actuated. signal failure position. increases with decreases in reactor power level. K624A Alare unit High reactor water level None. aan actuated. K602 1-3 setyt M/A Startup set pt bias None. station inoperative. 12-153588 (C-34) $4.'9 9 ($ ,f pf , ( h

APPENDIX C RIVER BEND CONTROL SYSTEMS FAIL 1;RE ANALYSIS ~ COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS IVBN-PNLO1B1 C33 - Feedwater Control K612 Power supply for: (Cont'd) SRU2 Loss of power to and signal Loss of "D" steam line None, water level from: Flow signal mismatch runs decrease precluded by N003D STM fl xatr back W flow. Loss of W flow control valve NO37 Press xatr turbine first stage press lockup and reactor N008 Press xatr and reactor press sigr.als power level decrease. to R609 recorder. SRU4 Loss of power to and Water level signal None, same as above. signal from: failure ann actuated. N004A Rx lev xatr. "A" reactor level causing "A" reactor level indicator downscales. TW causing indicator down-flow increase. scales. FW flow increase. N005 Rx press xate. Loss of Rx press signal None. to recire. Wide range press ind downscale. N002A IV fl matr. "A" FV flow signal None, water level downscales causing FW-vs-increase is limited by steam flow mismatch to W flow control valve increase W flow. lockup. K613 power supply for: Loss of power signals for: K602 Summer Summing IV flows 7J vs steam flow mismatch None, water level K602 Summer Totaling IV flow increases or decreases control change is K603 Summer Totaling FW flow IV flow depending on IV precluded by FW flow K605D Sq rt converter

• D" steam line flow signal control flow bias setting control valve lockup lost.

and degree of mismatch. and decreasing reactor power level. R600-1 St pt M/A sta Loss of IV flow control Signal failure interlock Reactor water level R600-2 St pt M/A sta signal to valve F001C. locks up F001C valve at increases with R600-3 St pt M/A sta failed position and flow decreases in reactor rate. power level. K653 Proportional delay Loss of IV flow. Post None during reactor unit scram setpoint adjustment. operation or if IV pumps shut down. 12-153583 (C-35) ?f I ,; t l' ' t

t' APPENDIX C ? RIVER BEND CONTROL SYSTEMS FAIIIRE ANALYSIS .si + ~~ y COMPONENT PRIMARY SECONDARY COMEINED mS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS' IVBN-PNLOlBI C33 - Feedwater Control K607C Alare unit ' Signal failure and Signal failure interlock None. (Cont'd) actuation. locks up F001C valve at failed position.' K618A Alarm unit Low IN flow "A" trip Recirc pumps A and B Reactor power level transferred to LFMG set decreases. K618B Alarm unit Low TV flow "B" trip power, recire. flow recire pump speed transfer decreases, actuated. K613 power supply for: K635 Alare unit Loss of power / signals. None. Reactor high/ low water level ann actuated. K636 Alare unit Reactor high press ann

None, actuated.

K659-3 Alare unit Rx water level signal

None, failure ann actuated.

R607 Recorder ampl Loss of FW and steam flow None - FW and steam flow signals. inds downscale. R608 Rec amplifier Loss of Rx level sig. None - Rz level indicator l downscales. R609 Rec amplifier Loss of turbine flow and None - Turbine flow and reactor press signals. RA press signals and inds downscale. C85 - Steam Bypass and Power supplies: Press Reg Sys PS21 122 VDC Inpat/ output power lost. None - LISPS (A15) provides redundant cur-PS22 124 VDC Input / output poser lost. rent operation from PSil and PS12 power supplies. PSI (AR20Z102) 115 VDC Input / output power lost. None, startup sig not Startup signal for system used at power levels. "B" lost. 2-153583 (C-36) }) k v, ty e kv ?

7: APPENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPOhT.NT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION FFTECT EFFECT EFFECTS 8 IVBN-PNL0181 C85 - Steam Bypass and PS2 (AR20Z102) 115 VDC Input / output power lost. None, redundant "A" (Cont'd) Press Reg Sys Turb interface amps "B" power supplies provided. and signals lost. "B" loop load demand, turb flow ref and flow demand signals lost. F001-1 Fast open sol Lose alt power for valves

None, valve only. Primary valve power F002-1 Fast open sol not affected.

valve A25 Bus switching unit Loss of switching for alt None, primary power not fast open sol valve power. affected. Loss of power to A13 indicator panel. C51 - Neutron Monitoring H13-P670 pauel power Loss of power and signals None - Inability to pro-supplies for APRM Ch 8 and F: perly monitor reactor PS22 120 VDC

1. Indications.

neutron flux using APRM PS25 +24 VDC

2. Recorder and computer Ch B and F.

Other chan-VR20 115 VDC inputs. nels available. Channel PS23 120 VDC, +5 VDC

3. Annunciators.

trips not affected. AR6 Isolator

4. Logic circuits and relays.

5. Flow rate ref.

For SRM Ch 8 and IRM Ch B None, SRM and IRM Ch B and F: and F not used during

1. Indications.

power operation. . 2. Recorder and computer inputs.

3. Annunciators.

4. Logic circuits and relays.

5. Isolators AR6 and ART.

9 12-153583 (C-37) i y r '. i e

.t APPENDIK C , ; e, RIVER BEND CONTROL SYSTEMS FAILL*RE ANALYSIS e COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS 3 IVBN-PNLolBI C51 - Neutron Monitoring H13-P672 Panel Loss of power and signals None - Inability to pro-(Cont'd) Power supplies for APRM Ch D and H: perly monitor reactor PS22 120 VDC

1. Indications, neutron flux using APRM PS25 +24 VDC

2. Recorder and computer Chs D&M. Other channels VR20 115 VDC inputs.

available.- Channel trips PS23 120 VDC. +5 VDC

3. Annunciators, not affected.

~ AR6 Isolator

4. Logic circuits and relays.

5. Flow rate ref.

For SRM Ch D and IRM Ch D&H None - SRM and IRM Chs

1. Indications.

D&H not used during

2. Recorder and computer power operation.

inputs. 3.' Annunciators

4. Logic circuits and relays.

5. Isolators AR6 and AR7.

D17 - Process Radiation Power supply PS23 Loss of output power. None - Loss of analog Monitor 120 VDC +5 VDC located Loss of analog output signal indicators and in H13-P670 power range signal: annunciators only. Iso-monitor panel for:

1. Main steam line "B" rad lation trip circuit not Main steam radiation monitor indicator affected.

nonitor downscales.

2. Div 3&4 high-high rad or inop annunciator actuated.

3. Main steam line "B" high rad annunciator actuated.

4 12-1535 s (C-34) t i I,

• If F

s APPENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS + COMPONENT PRIMARY SECONDARY COMB!hED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS IVBN-PNLOlB1 D17 - Process Radiation' PS23 120 VDC +5 VDC Loss of analog output -None - Toss of analog (Cont'd) Manitor located in H13-P672 signal signal indicators and power range monitor

1. Main steam line "D" rad annunciators only. Iso-panel for main steam non indicator lation trip circuit not line "D" radiation downscales, affected.

monitor

2. Div 3&4 high-high rad or inop ann actuated.

3. Main steam line D high rad ann actuated.

Cs21 (Cont'd) IUS-SWC2F CWS - Circulating Water Systen FNIBB Cooling tower Loss of fan power disables None - Four remaining None - Decreasing fan fan. cooling tower fans are reactor power level - FNIBD Cooling tower Loss of fan power disables able to keep circulating scram precludes turbine fan

fan, water temp cool, except trip on loss of conden-FNIBF Cooling tower Loss of fan power disables during hottest weather ser vacuum.

fan fan. when condenser vacc o j FNIBM Cooling tower Loss of fan power disables may decrease. ~4 fan fan. IN.TS-SWG2H FNIDS Cooling tower Loss of fan power disables None - Four remaining fan fan. cooling tower fans are FNIDD Cooling tower Loss of fan power disables able to keep circulating fan fan. water temp cool, except DilDF Cooling tower Loss of fan power disables during hottest weather fan

fan, when condenser vacuum FNIDH Cooling tower Loss of fan power disables may decrease.

fan fan. e h 12-153583 (C-39) [ h,, f]' j f I [k i ff-h-

h APPENDIX C 6. RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SECONDARY COMblNED BCS SYSTEM DESCRIPTION EFTECT EFFECT EFFECTS 1 ENS *SWCIA IEJS*SWGIA 1ENR*SWGIAI IENB*PNLO3A B33 - Reactor C001A/B Recirc pumps Breaker control power lost, None - Division 2 trip Recirculation 3A/B Circuit breaker unable to trip breaker ca available. TC-1 (RPT) RPT trip. IENB*PNLC2A-E21 - Low Pressure Core PSI /PS2 Power supplies Output poser lost for: None - Trips valves F093A Spray Power to Cll-N602A,C 26 trip unit files scram and F104A closed. Trips t discharge vol trip, level ist stage turbine pres-indication lost. sure. Initiates rod block. IERS*McC8A8 IVBS*PNLOIA E31 - Leak Detection N612A thru N627A Temp Loss of RWCU area temp Isolate RWCU outboard Isolate RWCU and RHR 6 and diff temp switches monitoring and temp trips. isolation valves outboard isolation G33-F004, F034, F039, valves. Trip one of and F054. two isolation logic for NSIVs and main steam N600A, N608A, 5410A, Loss of RHR equipment area Isolate RNR outboard iso-line drains. j N611A Temp and diti temp monitoring and temp lation valves E12-F008, temp switches trips. F025, F040, and F075AB. N604A and N605A temp Loss of main steam line Trip one of two isola-and diff temp switches pipe tunnel temp monitor-tion logic for NSIVs and ing and temp trips. main steam line drains. N602A and N603A Temp Loss of RCIC Div 1 equip-Unable to isolate RCIC. and diff temp switches ment area temp monitoring. Div 2 RCIC isolation available. N604E and N605E Temp Loss of RCIC Div 1 main Unable to isolate RCIC. and diff temp switches steam tunnel temp Div 2 RCIC isolation monitoring. available. Relay logic Unable to isolate RCIC on Isolate RWCU and RHR Div i logic. outboard isolation i valves. Trip one of two isolation logic for NSIVs and main steam line drains. a (1) 14s3 cf the lower level bus is not anticipated when the AC bus is lost. The AC bus is listed to show the primary source of pomer. Analysis shows wkst happens if the lower level bus is lost. 12-153513 (C-40) P ; ~ ~~ =" {.

7 1-APPENDIX C RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EITECT EFFECT EITECTS 6 IVBS*PNL01A E31 - Leak Detection K600 Power supply Loss of: (Cont'd) RWCU diff flow monitoring RWCU isolation RWCU isolation RHR flow monitoring Loss of RHR A flow Loss of RHR A flow control . control Standby liquid control None tank level and pump pressure Loss of annunciators None R608, R611 Temp Loss of area temp recording None recorder AT3 Isolators Loss of annunciators None AT13 Isolator power Loss of computer signals None supply AT12 isolator 18YS-SVCotAt B33 - Reactor C001A Recirc pump Breaker control power lost, None, at normal power IBYS-PNLO2Al Recirculation 5A Circuit breaker unable to trip breaker on level. Alternate ATWS. Loss of vibration breakers available to monitoring. trip pump. IBYS-PNLO2A2 B33 - Reactor Pump A Breakers 3A and Loss of normal breaker None - alternate trips Recirculation 4A (TC-2) indication control for Pump A. available. and control D17 - Process Radiation Inverter K699A Offgas Offgas post treat hi rad Close offgas charcoal Monitoring Post Treat Monitor trip. bypass valves. K601A IBYS-PNLO3A E33 - Reactor LFMG Breaker IA None - at 100% lower None. Recirculation control, relay logic unable to transfer to low and protecting relay speed. Loss of MG set protection. t (1) Losa af the lower level bus is not anticipated when the AC bus is lost. The AC bus is listed to show the primary source of power. Analysis shows what happens if the lower level bus is lost. 12-15350 (C-41) $ f' f' i, T E

g-

APPENDIX C i

RIVER BEND CONTROL SYSTEMS FAILIJRE ANALYSIS COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS 8 IENSiSWGIA (Cont'd) IEJS'SWG2A IMIS-NCC-102At C71-P001 C51-1080 Power Range and R13-P699 Div 1 Power Loss of APRM Ch A&E. Loss Rod block. RPS half Rod block. RPS half C51-1070 Startup Range Supplies of SRM Ch A. Loss of IRM scraa. Loss of APRM scram. Recire flow Neutron Monitoring System Ch A&E. signal to recire flow increase to man flow. ~ control. Recirc valves Increase in reactor go full open for max power. recire flow. H13-P671 Div 3 Power Loss of APRM Ch COC Loss Rod block. RPS half Supplies of SRM Ch C. Loss of IRM scram. Ch C&G. D17-1050 - Process Steam Line Rad Monitor Main steam line bi rad trip Trip one of two isola-Trip one of two isola-Radiation Monitoring "C" (D17-K610C) of logic "C" tion logic for M3IVs tion logic for MSIVs and main steam line and main steam line drains. drains. Sta Line Rad Monitor A Main steam line hi rad trip Trip one of two isola-1 (D17-K610A) of logic "A" tion logic for MSIVs and MSL drains. E31-1050 - Leak Detection E31-N605C Temp Sw Trip of temp sensor Trip one of two isola-System -N604C Temp Sw M2C tion logic for MSIVs and i Meter Module, Relay MSL drains. Logic IEHS*MCC2G B21 - Nuclear Boiler Feedwater Inlet Shutoff Loss of valve control None. None. Process Instrumentation Valve B21-F065A,B 1 I ILNS*SVGIB J IEJS*SVGiB IBYS-SVG018 IBYS-PNLO2B1 B33 - Reactor C001B Recirc pump 5B Breaker control power lost None, alternate circuit None. Recirculation circuit breaker unable to trip breaker on breaker trips available RPV low level or high to trip pump. pressure (ATWS). Loss of vibration monitoring. IBYS-PLN02B2 B33 - Reactor Pump B Breakers 3B and Loss of normal breaker None, alternate trips None. Recirculation 4B (TC-2) indication control for Pump B. available. and control (1) Los3 cf the lower level bus is not anticipated when the AC bus is lost. The AC bus is listed to show the primary source of power. Analysis shows what happens if the lower level bus is lost. 12-153583 (C-42) i t (L { r **

.l 6 APPENDIK C RIVER BEND CONTROL SYSTEMS FAILURE ANALY31S 5 COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS IBYS-PNL02B2 D17 - Process Radiation Inverter K6998 offsas Offgas post treat hi rad None - Close offgas char-(Cont'd) Monitoring post treat monitor trip. Loss of offgas coal bypass valves. (D17-K601B). Power pretreat and carbon bed sup,o17.0{-K614). vault rad monitoring. IBYS-PNLO3B B33 - Reactor LING "B relay logic Loss of transfer capability. None. Recirculation acd protecting relaying and MG set protection. LDtG Breaker IB control None at 100% power unable

None, to transfer to low speed.

Loss of MG set protection. IENS*MCC881 IVBS*PNLO18 E31 - Leak Detection N6128 thru N627B Temp Loss of RWCU area temp Isolate RWCU inboard iso-Isolate RWCU and RHR and diff temp switches monitoring and temp trips. lation valves G33-F001, inboard isolation F028. F040, and F053. valves. Trip one of two isolation logic for N600B, N6088 N6108, Loss of RER equipment area Isolate RHR inboard iso-MSIVs and main steam N6118 Temp and diff temp monitoring and temp lation valves E12-F009, line drains. temp switches trips. F049, and F060AB. N604B and N605B Temp Loss of main steam line Trip one of two isolation and diff temp switches pipe tunnel temp monitoring logic for MSIVs and main and temp trips. steam line drains. N602A and N603A Temp Loss of RCIC Div 2 equip-Unable to isolate RCIC. and ditf temp switches ment area temp monitoring. Div 1 RCIC isolation available. N604F and N605F Temp Loss of RCIC Div 2 main Unable to isolate RCIC. and ditf temp switches steam tunnel temp Div 1 RCIC isolation monitoring. available Relay Logic Unable to isolate RCIC on Isolate RWCU and RHR Div 2 logic. inboard isolation valves.' Trip one of two isola-tion logic for MSIVs and main steam line drains. (1) Iosi cf the lower level bus is not anticipated when the AC bus is lost. The AC bus is listed to show the primary source of power. Analysis shows what happens if the lower level bus is lost. 12-153519 (C-43) { ( t 4 ~ b

r-s .I. APPENDIX C l

. l_ *]

I-RIVER BEND CONTROL SYSTEMS FAILURE ANALYSIS . ~A COMPCNENT PRIMARY SECONDARY-COMBINED l BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS i l IVBS*PNLolB E31 - Leak Detection K600 Power supply Loss of: (Cont'd) ( RWCli dif f flow monitoring. RWCU isolation. RWCU isolation. l RHR flow monitoring. Loss of RMR 8 flow Loss of RHR B flow ~~ control. control. Loss of annunciator. None. R609 Indicator switch Loss of *rywell air cooler

None, drain flew indication.

AT6, 7, and 9 isolator Loss of anr. nciators. None. B21 - Nuclear Boiler Feedwater inlet check None. Scienoid deenergi-None. Process Instrumentation valves 821-F032A,B zation causes negligible restriction of flow. IENB*SWG0181 IENB*PNLO3B B33 - Reactor C001A/B Recirc Loss of RPT breaker control None. Div 1 trip avail-Recirculation Pumps 4A/B Circuit power. Unable to trip able. Breaker TC-1 (RPT) pump. ( IEJS*SVG2B INHS-MCC102B1 C71-S001B C51-1070 - Startup Range H13-P670 Div 2 SRM/IRM Loss of SRM/IRM Ch B, IRM Rod block RPS half scraa. Rod block. RPS half Neutron Monitoring Power Supplies Ch F. scras. H2-P672 Div 3 SRM/IRM Loss of SRM/IRM Ch C, IRN Rod block RPS half scrae. Trip of one of two Power Supplies Ch G. isolation logic for MSIVs and main steam line drain. C51-1080 - Power Range H13-P670 Div 2 Power Loss of APRM Ch B&F. Loss Rod block RPS half scram., Neutron Monitoring Supplies of Recirc Flow Ref B&F. H13-P672 Div 4 Power Loss of APRM Ch D&H. Loss Rod block RPS half scras. l Supplies of Recirc Flow Ref D&H. E31-1050 - Leak N605D, N604D M2D, and Loss of temp monitoring. Trip one of two isolation Detection System Relay 14 sic Temp trips. logic for MSIVs and main steam line drain. l l(1) Los3 af the lower level bus is not anticipated when the AC bus is lost. The AC bus is listed to show the primary source of power. Analysis shows what happens if the lower level bus is lost. !!2-153513 (C-44) h i.

n ~ .1, APPENDIX C RIVER BEND CONTROL SYSTEMS FAILL1tE ANALYSIS ,'1 ~ COMPONENT PRIMARY SECONDARY COMBINED BUS SYSTEM DESCRIPTION EFFECT EFFECT EFFECTS i C71-S001B D17-1050 - Process Steam Line Radiation Main steam line hi rad trip RPS half scram. Trip one RPS half scras. Trip (Cont'd) Radiation Monitoring Monitor B&D (K610B and B&D. of two isolation logic . one of two isolation K610D) for MSIVs and main steam logic for NSIVs and line drain, main steam line drain. lEMS*MCC2H B21 - Nuclear Boiler Main Steam Shutoff Loss of valve control. None. Process Instrumentation Valves B21-F098A-D LEKS *MCC2F B21 - Nuclear Boiler Main Steam Line Drain Loss of valve control. None. Process Instrumentation Valves B21-F085, F086 INNS *SWGIA Cll - Control Rod Drive Cll-C001A CRD Drive Unable to move rods with None. Water Pump "A" the rod control system. HDL - Low Pressure IKDL-PIA, 3rd Point Loss of condensate from If incoming valves are Loss of condensate from Feedwater Heater Drain Heater Drain Pump 3rd point heater. closed. 3rd point heating 3rd point heaters Train "A" Meater level increase is lost. This results in train A and B. Feed-opens drain valve to loss of feedwater heating water pump trip on low condenser. A further and an increase in suction recirc transfer increase in level would reactivity and power. to LFMG. Reduction in result in closure of power. the incoming drain valves from the 2nd point beater and moisture separator drain receiver. IKDL-Plc 3rd Point Loss of condensate from If incoming valves are Heater Drain Pump 3rd point heater, closed. 3rd point Train "B" Heater level increase heating is lost. This opens drain valve to results in loss of feed-condenser. A further water heating and an increase in level would increase in reactivity result in closure of and power. of incocing drain valves from the 2nd point heater and moisture separator drain receiver. CCS - Turbine Plant ICCS-PIA Turbine Plant Loss of one of three 50% None. Standby pump Loss of two of three Component Cooling Water Component Cooling capacity pumps. starts automatically. CCS pumps. Increasing Water Pump stator cooling tempera-ture causes turbine INNS *SWGlc CSS - Turbine Plant ICCS-FIC Turbine Plant Loss of one of three 501 None. Standby pump runback. A further Component Cooling water Component Cooling capacity pimps. starts autoestically, increase in temperature Water Pump results is a turbine trip. 12-153510 (C-45) } I .j f'{;' 4f, I 1

a ' ~ yk >- APPENDIX C '. 5. IIIVER BEND CONTROL SYSTEMS FAILL1tE ANALYSIS a- , 6 ;. ' COMPONENT PRIMARY SECONDARY COMalNED BUS SYSTEM DESCRIPTION EITECT EFTECT ' EFFECTS 8 INNS *SWCIS Cll - Control Rod Drive Cll-C001B CRD Drive Unable to move rods with None. W ter Pump "B" the rod control system. EL - Low Pressure IMDL-PIB, 3rd Point Loss of condensate from If incoming valves are Loss of condensate free Feedwater Beater Drain Heater Drain Pump 3rd point heater. . closed. 3rd point heating ~ 3rd point heaters Train "A" Nester level increase is lost. This results in train A and B. Feed-opens drain valve to loss of feedwater beating water pump trip on low condenser. A further and an increase in suction recirc transfer increase in level would reactivity and power. to LFMG. Reduction in result in closure of power. the incoming drain valves from the 2nd point beater and moisture separator drain receiver. IMDL-PID 3rd Point Ioss of condensate from If incoming v.lves are-If incoming valves are Heater Drain Pump 3rd point beater, closed, 3rd point closed, 3rd point Train "B" Heater level increase heating is lost. This heating is lost. This opens drain valve to results in loss of feed-results in loss of condenser. A further water heating and as feedwater heating and ) increase in level would increase in reactivity an increase in reac-result in closure of and power. tivity and power. of incoming drain valves from the 2nd I point beater and moisture separator drain

receiver, j

CCS - Turbine Plant ICCS-PIB Turbine Plant Loss of one of three 501 None. Standby pump l i Component Cooling Wter Component Cooling' capacity pumps. starts automatically. j W ter Pump ] e i e 12-153513 (C-M) b 5f{ f.*?'l

h

. ' l$ . ( i ..}}