ML20138R632

Draft Review of Licensee & Applicant Responses to NRC Generic Ltr 83-28,(Required Actions Based on Generic Implications of Salem ATWS Events),Item 1.2..., Technical Evaluation Rept

ML20138R632
Person / Time
Site:	Millstone
Issue date:	11/06/1985
From:	SCIENCE APPLICATIONS INTERNATIONAL CORP. (FORMERLY
To:	NRC
Shared Package
ML20138R612	List: ML20138R611 ML20138R632
References
CON-NRC-03-82-096, CON-NRC-3-82-96 GL-83-28, TAC-53607, NUDOCS 8511180707
Download: ML20138R632 (18)

Text

_ _ _ _ _ - _ _ _ _ _ _ _ _

Enclosure 1 REVIEW 0F LICENSEE AND APPLICANT RESPONSES  :-

TO NRC GENERIC LETTER 83-28 (Required Actions Based on Generic Implications of.

Salem ATWS Events), Item 1.2

" POST-TRIP PEVIEW: DATA AND INFORMATION CAPABILITIES" FOR MILLSTONE NUCLEAR POWER STATION, UNITS 1, 2, AND 3 (50-245, 50, 336, 50-423)

Technical Evaluation Report Prepared by Science Applications International Corporation 1710 Goodridge Drive McLean, Virginia 22102 . . . . .

Prepared for U.S. Nuclear Regulatory Comission Washington, D.C. 20555 Contract No. NRC-03-82-096 i

I 1

0 4

8511180707 851106 PDR ADOCK 05000245 P PDR

. o FOREWORD This report contains the technical. evaluation of the Millstone Nuclear Power Station, Units 1, 2 & 3 response to Generic Letter 83-28 (Required Actions Based on Generic Implications of Salem ATWS Events) Item-1.2 " Post Trip Review: Data and Information Capabilities."

For the purposes of this evaluation, the review criteria, presented in part 2 of this report, were divided into five separate categories. These are:

~

1. The parameters monitored by the sequence of events and t'he' time history recorders,

2. The performance characteristics of the sequence of events recorders,

3. The performance characteristics of the time history recorders,

4. The data output format, and

._ 5. The long-term data retention capability for post-trip review -- -

material.

All available responses to Generic Letter 83-28 were evaluated. The plant for which this report is applicable was found to have adequately responded to, and met, categories 2 and 4.

The report describes the specific methods used to determine the cate-gorization of the responses to Generic Letter 83-28. Since this evaluation report was intended to apply to more than one nuclear power plant specifics regarding how each plant met (or failed to meet) the review criteria are not presented. Instead, the evaluation presents a categorization of the

. responses according to which categories of review criteria are satisfied and which are not. The evaluations are based on specific criteria (Section 2) derived from the requirements as stated in the generic letter.

o

• Wee p -& == *g ui 9,e s We, e e -

l 1

I TABLE OF CONTENTS Secticn . Page Introduction . . . . . . . . . . . . . . . . . . . . . . .'.. 1

1. Background . . . . . . . . . . . . . . . . . . . . . . . .- 2

2. Review Criteria . . . . ................. 3

3. Evaluation . . . . . .'. . . . . . . . . . . . . . . . . . 8

4. Conclusion . . . . . . . . . . . . . . . . . . . . . . . . 9 r

5. References . . . . . . . . . . . . . . . . . . . . . . . . 10 e ep's * * -

.g l

I 4

1 J

e i

0 A

-+. . . -

&= S- _"+- - W-s-d* O w1.W <p+ @ N Augu' 9 - + - "- -

~'

INTRODUCTION .

SAIC has reviewed the utili;y's response to Generic Letter 83-28, item 1.2 " Post-Trip Review: Data and Information Capability." The response (see references) contained sufficient information to determine that the data and information capabilities at these plants are acceptable in the following areas.

e The sequence-of-events recorder (s) performance charac-teristics.

. ._ e The output format of the recorded data. - - - - -

However, the data and information capabilities, as described in the submittal, either fail to meet the review criteria or provide insufficient information to allow determination of the adequacy .of the data and information capabilities in the following areas.

e The parameters monitored by both the sequence-of-events and time history recorders.

e The time history recorder (s) performance characteris-tics.

s The long-term data retention, record keeping, capa-bility.

o aye. -- -- . em. _ .-e.-e ame,- e,-e - - -

.-e ..w 4. e 4- - .- -

• *=-o--e 'W ger * 'm-- *e-m

1. Background On February 25, 1984, both of the scram circuit breakers at Unit 1 of the Salem Nuclear Power Plant failed to open upon an automatic reactor trip

~

signal from the reactor protection system. This incident occurred during the plant startup and the reactor was tripped manually by the operittor about 30 seconds after the initiation of the automatic trip signal. The failure of the circuit breakers has been determined to be related to the sticking of the under voltage trip attachment. Prior to this incident; on February 22, 1983; at Unit 1 of the Salem Nuclear Power Plant an automatic trip signal was generated based on steam generator low-low level during plant startup. I In this case the reactor was tripped manually by the operator almost coinci- )

dentally with the automatic trip. At that time, because the utility did not l' have a requirement for the systematic evaluation of the reactor trip, no investigation was performed to determine whether the reactor was tripped automatically as expected or manually. The utilities' written procedures

. ._ required only that the cause of the trip be determined and identified the --- -

responsible personnel that could authorize a restart if the cause of the trip is known." Following the second trip which clearly indicated the problem with the trip breakers, the question was raised on whether the circuit breakers had functioned properly during the earlier incident. The most useful source of information in this case, namely the sequence of events printout which would have indicated whether the reactor was tripped automatically or manually during the February 22 incident, was not retained after the incident. Thus, no judgment on the proper functioning of the trip 4

system during the earlier incident could be made.  ;

l Following these incidents; on February 28, 1983; the NRC Executive i Director for Operations (E00), directed the staff to investigate and report on the generic implications of these occurrences at Unit 1 of the Salem Nuclear Power Plant. The results of the staff's inquiry into the generic implications of the Salem Unit incidents is reported in NUREG-1000, " Generic Implications of ATWS Events at the Salem Nuclear Power Plant." Based on the results of this study, a set of required actions were developed and included in Generic Letter 83-28 which was issued on July 8,1983 and sent to all licensees of operating reactors, applicants for operating license, and construction permit holders. The required actions in this generic letter consist of four categories. These are: (1) Post-Trip Review (2)* Equipment

Classification and Vender Interface, (3) Post Maintenance Testing, and (4)

Reactor Trip System Reliability Improvements.

The first required action of the generic letter, Post-Trip R.aview, is the subject of this TER and consists of action item 1.1 " Program Description and Procedure" and action item 1.2 " Data and Information CapabiTity." In the next section the review criteria used to assess the adequacy of the utilities' responses to the requirements of action item 1.2 will be discussed.

2. Review Criteria The intent of the Post Trip Review requirements of Generic Letter 83-28 is to ensure that the licensee has adequate procedures and data and information sources to understand the cause(s) and progression of a reactor trip. This understanding should go beyond a simple identification of the ,

~"'

~

course of the event. It should include the capability to determine the root' cause of the reactor trip and to determine whether safety limits have been exceeded and if so to what extent. Sufficient information about the reactor trip event should be available so that a decision on the acceptability of a reactor restart can be made.

The following are the review criteria developed for the requirements of Generic Letter 83-28, action item 1.2:

The equipment that provides the digital sequence of events (SOE) record and the analog time history records of an unscheduled shutdown should pro-vide a reliable source of the necessary information to be used in the post trip review. Each plant variable which is necessary to determine the cause(s) and progression of the event (s) following a plant trip should be monitored by at least one recorder [such as a sequence-of-events recorder or a plant process computer for digital parameters; and strip charts, a plant process computer or analog recorder for analog (time history) variables].

Each device used to record an analog or digital plant variable should be described in sufficient detail so that a determination can be made as to  ;

whether the following performance characteristics are met: l 3

l c -

.- ....,=..:- - . .

j

e Each sequence-of-events recorder should be capable of detecting and recording the sequence of events with a sufficient time discrimination capability to ensure that the time responses asso-ciated with each monitored safety-related system can be ascer-tained, and that a determination can be made as to whether the

' time response is within acceptable limits based on FSAR Chapter 15 Accident Analyses. The recommended guideline for the SOE time discrimination is approximately 100 msec. If current SOE recorders do not have this time discrimination capability the licensee or applicant should show that the current time discrimi-nation capability is sufficient for an adequate reconstruction of the course of the reactor trip. As a minimum this should include the ability to adequately reconstruct the accident scenarios pre-sented in Chapter 15 of the plant FSAR.

i e Each analog time history data recorder should have a sample inter- ,

. val small enough so that the incident can be accurately reconstructed following a reactor trip. As a minimum, the licensee or applicant should be able to reconstruct the course of the accident sequences evaluated in the accident analysis of the plant FSAR (Chapter 15). The recommended guideline for the sample interval is 10 sec. If the time history equipment does not meet this guideline, the licensee or applicant should show that the current time history capability is sufficient to accurately recon-strur.t the accident sequences presented in Chapter 15 of the FSAR.

e To support the post trip analysis of the cause of the trip and the proper functioning of involved safety related equipment, each analog time history data recorder should be capable of updating and retaining information from approximately five minutes prior to the trip until at least ten minutes after the trip.

. e The information gathered by the sequence-of-events and time l history data collectors should be stored in a manner that will allow for retrieval and analysis. The data may be retained in either hardcopy (computer printout, strip chart output, etc.) or in an accessible memory (magnetic disc or tape). This igformation should be presented in a readable and meaningful format, taking 4 .i

' ~ - - ' '

j . .

into consideration good human factors practices (such as those l outlined in NUREG-0700).

e All equipment used to record sequence of events and tirpe histcry j information should be powered from a reliable and non-interruptible power source. The power source used need not be safety related.

The sequence of events and time history recording equipment should monitor sufficient digital and analog parameters, respectively, to assure I

that the course of the reactor trip can be reconstructed. The parameters monitored should provide sufficient information to determine the root cause of the reactor trip, the progression of the reactor trip, and the response of the plant parameters and systems to the reactor trip. Specifically, all input parameters associated with reactor trips, safety injections and other safety-related systems as well as output parameters sufficient to record the '

- - proper functio'ning of these systems should be recorded for use in the post -"'

trip review. The parameters deemed necessary, as a minimum, to perform a post-trip review (one that would determine if the plant remained within its design envelope) are presented on Tables 1.2-1 and 1.2-2. If the appli-cants' or licensees' SOE recorders and time history recorders do not monitor all of the parameters suggested in these tables the applicant or licensee j should show that the existing set of monitored parameters are sufficient to ,

establish that the plant remained within the design envelope for the appro-

, priate accident conditions; such as those analyzed in Chapter 15 of the plant Safety Analysis Report.

Information gathered during the post trip review is required input for future post trip reviews. Data from all unscheduled shutdowns provides a valuable reference source for the determination of the acceptability of the

plant vital parameter and equipment response to future unscheduled shut-

!' downs. It is therefore necessary that information gathered during all post trip reviews be maintained in an accessible manner for the life of the plant.

5 C

,P 4 e m+

9 _y .

Table 1.2-1. PWR Parameter List SOE Time History Recorder Recorder Parameter / Signal ,,

x Reactor Trip -

(1) x Safety Injection x Containment Isolation (1) x Turbine Trip x Control Rod Position (1) x x Neutron Flux, Power x x Containment Pressure (2) Containment Radiation x Containment Sump Level (1) x x Primary System Pressure (1) x x Primary System Temperature (1) x ,

Pressurizer Level - - - - -

(1) x Reactor Coolant Pump Status (1) x x Pri.aary System Flow (3) Safety Inj.; Flow. Pump / Valve Status x MSIV Position x x Steam Generator Pressure (1) x x Steam Generator Level ,

(1) x x Feedwater Flow (1) x x Steam Flow (3) Auxiliary Feedwater System; Flow.

Pump /Value Status 1 x AC and DC System Status (Bus Voltage)  !

x Diesel Generator Status (Start /Stop, On/Off) l x PORV Position (1): Trip parameters (2): Parameter may be monitored by either an SOE or time history recorder.

(3): Acceptable recorder options are: (a) system flow recorded on an SOE recorder, (b) system flow recorded on a time history recorder, or (c) equipment status recorded on an SOE recorder.

l ~ ll ~

,..'T

, ~. . y~ .

Table 1.2-2. BWR Parameter List SOE Time History Recorder Recorder Parameter /I Signal x Reactor Trip .

x Safety Injection l x Containment Isolation x Turbine Trip I

x Control Rod Position x (1) x Neutron Flux, Power x (1) Main Steam Radiation (2) Containment (Dry Well) Radiation x (1) x Drywell Pressure (Containment Pressure)

(2) Suppression Pool Temperature x (1) x Primary System Pressure

,_ x (1) x Primary System Level . . . .

x MSIV Position x (1) Turbine Stop Valve / Control Valve Position Turbine Bypass Valve Position x

! x Feedwater Flow x Steam Flow (3) Recirculation; Flow, Pump Status x (1) Scram Discharge Level x (1) ,

Condenser Vacuum

- x AC and DC System Status (Bus Voltage)

(3)(4) Safety Injection; Flow. Pump / Valve Status x Diesel Generator Status (On/Off, Start /Stop)

(1):Tripparameters.

(2): Parameter may be recorded by either an SOE or time history recorder.

(3.): Acceptable recorder options are: (a) system flow recorded on an SOE recorder, (b) system flow recorded on a time history recorder, or l (c) equipment status recorded on an SOE recorder.

(4): Includes recording of parameters for all applicable systems from the following: HPCI, LPCI, LPCS, IC, RCIC.

• i

=:- n- - - .-.

- - - : --- --=:- - - -

1 . .

l i

3. Evaluation I The parameters identified in part 2 of this report as a part of the j

, review criteria are those deemed necessary to perform an adequate post-trip i review. The recording of these parameters on equipment that meets the i guidelines of the review criteria will result in a source of infbrmation l that can be used to determine the cause of the reactor trip and the plant response to the trip, including the responses of important plant systems. l The parameters identified in this . submittal as being recorded by the i sequence of events and time history recorders do not correspond to the parameters specified in part 2 of this report. i The review criteria require that the equipment being used to record the l I sequence of events and time history data required for a post-trip review meet certain performance characteristics. These characteristics are j intended to ensure that, if the proper parameters are recorded, the record-

~'

ing equipment will provide an adequate source of information for an effec ~

4 tive. post-trip review. The information provided in this submittal does not indicate that the tim'e history equipment used would meet the intent of the i performance criteria outlined in part 2 of this report. Information i

supplied in the submittal does indicate that the SOE equipment meets the i performance criteria specified in part 2 of this report.

i i The data and information recorded for use in the post-trip review l l should be output in a format that allows for ease of identification and use  ;

of the data to meet the review criterion that calls for information in a readable and meaningful format. The information contained in this submittal indicates that this criterion is met.

I The data and information used during a post-trip review should be retained as part of the plant files. This information could prove useful during future post-trip reviews. Therefore, one criterion is that infor-mation used during a post-trip review be maintained in an accessible manner j for the life of the plant. The information contained within this submittal j does not indicate that this criterion will be met.

i 1

1 i

e . _

4. Conclusion The information supplied in response to Generic Letter 83-28 indicates ,

that the currant post-trip review data and information capabil.ities are adequate in the following areas:

i j 1. The recorded data is output in a readable and meaningful format.

2. The sequence of events recorders meet the minimum performance q characteristics.

The information supplied in response to Generic Letter 83-28 does not indicate that the post-trip review data and information capabilities are

adequate in the following areas

,

? 1. Based upon the information contained in the submittal, all of the

- - parameters specified in part 2 of this report that should be ~"'

recorded for use in a post-trip review are not recorded.

t

2. Time history recorders, as described in the submittal, do not meet the minimum performance characteristics.

3. The data retention procedures, as described in the submittal, may not ensure that the information recorded for the post-trip review is maintained in an accessible manner for the life of the plant.

! It is possible that the current data and information capabilities at this

! nuclear power plant are adequate to meet the intent of these review

! criteria, but were not completely described. Under these circumstances, the I

licensee should provide an updated, more complete, description to show in

more detail the data and information capabilities at this nuclear power

{ plant. If the information provided accurately represents all current data

and information capabilities, then the licensee should show that the data and information capabilities meet the intent of the criteria in part 2 of j this report, or detail future modifications that would enable the licensee I to meet the intent of the evaluation criteria.

9

_ __.- - . 7 . -= 3 ... . _ : :,.p . :..:.; :~ =-L --. % 4. - . -

., _ 7_;_ , . _ _

REFERENCES NRC Generic Letter 83-28. " Letter to all licensees of: operating reactors, applicants for operating license, and holders of construction permits regarding Required Actions Based on Generic Implications of Salem ATWS Events." July 8, 1983.

NUREG-1000 Generic Implications of ATWS Events at the Salem Nuclear Power Plant, April 1983.

Letter from W.G. Counsil, Northeast Utilities, to D.G. Eisenhut, NRC, dated November 8,1983 Accession Number 8311280050 in response to Generic Letter 83-28 of July 8,1983, with attachments.

120-day Response Information for Millstone Unit 1.

120-day Response Information for Millstone Unit 2.

120-day Rsponse Information for Millstone Unit 3.

Response to Items 2.1 (Vendor Interface), 2.2.1.1, 2.2.1.2, 2.2.1.4, 2.2.1.5, 2.2.1.6, 2.2.2, 4.2.3, 4.2.4, and 4.5.3.

Letter from W.G. Counsil, Northeast Utilities, to D.G. Eisenhut, NRC, dated March 16, 1984, Accession Number 8404020147, transmitting additional information in response to Generic Letter 83-28 of July 8 ,

1983, with attachments.

Generic Letter 83-28 Response Millstone Unit No.1, dated March 1984.

Generic Letter 83-28 Response, Millstone Unit No. 2, dated March 1984.

Generic Letter 83-28 Response, Millstone Unit No. 3, dated March 1984.

10

= _ _

Enclosure 2 SUPPORTING DOCUttENT FOR TELECON '

t1111 stone 1 and 2 .

1. Parameters recorded: Unsatisfactory See attached table for discrepancies.

2. SOE recorders performance characteristics: Satisfactory Millstone 1: plant process computer - 2msee time discrimination, non-interruptible power supply Panalarm Model 120 SER - 1.06msee time discrimination, non-interruptible power supply 5; .. Millstone 2: plant process computer - 8 msec time discrimination with ~

non-interruptible power supply; 1st alarm printout (redundant) -

• ~" '

3. Time history recorders performance characteristics: Unsatisfactory Millstone 1: plant' computer - NSSS parameter recorded every 5 secs for the period from 5 minutes pre-trip to 5 minutes post-trip, BOP parameters recorded every 30 secs for the period from 10 minutes pre-trip to 10 minutes post-trip Millstone 2: plant computer - sample interval of 1.5 min for 5 to 1 min pre-trip, 15 sec for 1 min pre-trip to 5 min post-trip

4. Data output format: Satisfactory SOE: both plants output includes time and event descriptor Analog: Millstone 1 - output includes time and parameter value and sensor ID -

l Millstone 2 - output includes time and parameter value and  !

name \

l

5. Data retention capability: Unsatisfactory 1 Length of time data is retained is not specified.

t

• l l

. il l

- ,e -w- m wa .em,- --e-- + em -

l Millstone 1 Desirable BWR Parameters for Post-Trip Review (circled parameters are not recorded)

SOE Time History Recorder Recorder Parameter / Signal ,,

x Reactor Trip -

x Safety Injection x Containment Isolation x Turbine Trip l x Control Rod Position x (1) x, Neutron Flux, Power x (1)

• Main Steam Radiation (2) .

Containment (Dry Well) Radiation x (1) @ Drywell Pressure (Containment Pressure)

@ Suppression Pool Temperature x (1) x Primary Syste:n Pressure

' ~ " ' '

.x (1) ,x Primary System level x MSIV Position x Turbine Stop Valve / Control Valve Position 8x(1)

• Turbine Bypass Valve Position x Feedwater Flow x Steam Flow (3) Recirculation; Flow. Pump Status

@(1) Scram Discharge Level

, @(1) Condenser Vacuum x AC and DC System Status (Bus Voltage)

(3)(4) Safety Injection; Flow. Pump / Valve Status x Diesel Generator Status (On/Off.

Start /Stop)

(1): Trip parameters.

(2): Parameter may be recorded by either an SOE or time history recorder.

(3): Acceptable recorder options are: (a) system flow recorded on an SOE recorder, (b) system flow recorded on a time history recorder, or (c) equipment status recorded on an SOE recorder.

(4): Includes recording of parameters for all applicable systems from the following: HPCI, LPCI, LPCS, IC, RCIC.

~

Millstone'2 Desirable PWR Parameters for Post-Trip Review (circled parameters are not recorded)

SOE Time History Recorder Recorder Parameter / Signal i

. l Reactor Trip -  !

Safety Injection Containment Isolation  ;

(1) Turbine Trip (1)l control Rod Position (1) x Neutron Flux, Power

@ Containment Pressure j Containment Radiation

@ Containment Sump Level

(1)@ x Primary System Pressure

] (1) x x Primary System Temperature

• ~ "

(1) x Pressurizer Level

(1) Reactor Coolant Pump Status l (1) @ Primary System Flow Safety Inj.; Flow. Pump / Valve Status '

i MSIV Position x Steam Generator Pressure

(1) x Steam Generator Level (1) x Feedwater Flow x Steam Flow

_ (1)Qx Q3 Auxiliary Feedwater System; Flow.

Pump /Value Status AC and DC System Status (Bus Voltage) j 8x x Diesel Generator Status (Start /Stop, i On/Off)

@ PORY Position (1): Trip parameters '

]'

(2): Parameter may be monitored by either an SOE or time history recorder.

(3): Acceptable recorder options are: (a) system flow recorded on an SOE

! recorder (b) system flow recorded on a time history recorder, or (c) l equipment status recorded on an SOE recorder.

4 c

, , . . . - - . . ..a,*%.e.-, e ea - = = - , -

~

1. D IT EO c N

1. 5 ? 'r

• ' _ _ , '_ 'Y" '

O] #D*' " ' Y' *

• { " ' ' * { _

l l

Millstone 3 J

1. Parameters recorded: Unsatisfactory See attached table for discrepancies.

2. SOE recorders performance characteristics: Satisfactory Plant process computer: 4 msec time discrimination with a non-inter-ruptible power supply

3. Iime history recorders performance characteristics: Unsatisfactory Plant process computer: the following sample intervals and durations apply Sample Interval Corresponding Duration 1 min 5-1 mi.nute prior to trip 10 sec 1 min-10 sec prior to trip 2 sec 10 sec prior to 10 sec post-trip 10 sec 10-120 sec post-trip 1 min 2-10 min post-trip Strip charts are also used, but minimal information supplied.

4. Data output format: Satisfactory SOE: time, sensor ID, and event descriptor are among output.

Analog: time, parameter value, and sensor ID are provided among output

5. Data retention capability: Unsatisfactory Data is retained but for an unspecified period.

o 4

I l

Desirable PWR Parameters for Post-Trip Review (circled parameters are not recorded)

SOE Time History Recorder Recorder Parameter / Signal ..

~

x Reactor Trip l (1) x Safety Injection

@ Containment Isolation I (1)x Turbine Trip l

@ Control Rod Position l (1) x Neutron Flux, Power

@ Containment Pressure Containment Radiation

@ Containment Sump Level (1) x Primary System Pressure (1) x Primary System Temperature , _,

, (1) Pressurizer Level (1) Reactor Coolant Pump Status I

(1) x Primary System Flow Safety Inj.; Flow. Pump / Valve Status

, MSIV Position x Steam Generator Pressure 3 (1) x Steam Generator Level

, (1) x Feedwater Flow l , (1) x Steam Flow l @ Auxiliary Feedwater System; Flow.

1 Pump /Value Status j x AC and DC System Status (Bus Voltage) x Diesel Generator Status (Start /Stop, l On/Off) l

@ PORY Position 1

i (1): Trip parameters (2): Parameter may be monitored by either an SOE or time history recorder. '

(3): Acceptable recorder options are: (a) system flow recorded on an SOE l recorder, (b) system flow recorded on a time history recorder, or (c)

} equipment status recorded on an SOE recorder.

I '

j c- ~

I

. _ _ - = . . - . -

- -- - l