ML20140H671

From kanterella
Jump to navigation Jump to search
Provides Commission W/Staff Recommendation for Obtaining Reliability & Availability Data for Key Safety Sys
ML20140H671
Person / Time
Issue date: 05/07/1997
From: Callan L
NRC OFFICE OF THE EXECUTIVE DIRECTOR FOR OPERATIONS (EDO)
To:
References
SECY-97-101, SECY-97-101-R, NUDOCS 9705130220
Download: ML20140H671 (13)


Text

- - - - - - - - - - - - - - - - - - _ - - - - - - - - - - - - - -- _ -----

000oo00o0000000000000006

] /a%qg RELEASED TOTHE PDR AArb

? S  : Deo :

i 2

iE ~ date eeeeeeeeeeeees.. ......

initials l

,f 3 POLICY ISSUE (Notation Vote)

May 7, 1997 SECY-97-101 FOR: The Commissioners FROM: L. Joseph Callan Executive Director for Operations

SUBJECT:

PROPOSED RULE,10 CFR SECTION 50.76, " REPORTING RELIABILITY AND AVAILABILITY INFORMATION FOR RISK-SIGNIFICANT SYSTEMS AND EQUIPMENT" PURPOSE:

To provide the Commission with the staff's recommendation for obtaining reliability and availability data for key safety systems.

BACKGROUND:

From 1991 to 1994, the Nuclear Regulatory Commission actively pursued with industry a voluntary system to obtain the reliability data neaded for risk informed applications. These discussions were held first in meetings of a NRC/ industry task force that made recommendations to the Institute of Nuclear Power Operations (INPO) on revising the Nuclear Plant Reliability Data System (NPRDS) to obtein these data and later in meetings on a proposal by the Nuclear Energy Institute (NEI) that INPO's Safety System Performance Indicator (SSPI) data serve as a source of reliability and evailability data. No action was taken on the recommendations to modify NPRDS to provide data for probabilistic risk assessment (PRA) applications. After failing to achieve a mutually acceptable program for providing reliability and availability data, on October 19,1994, James M. Taylor approved 4

F

?

Contact:

NOTE: TO BE MADE PUBLICLY AVAILABLE WHEN Y

Dennis P. Allison, AEOD THE FINAL SRM IS MADE A7AILABLE (301)415-6835 k()dUtWJWN ,

L-y a ff g hef0/T1$4 l c&

/O \\\}\\\,\\\\\\\)$\h\\\f ca,oor" G ,W 9 M E X h uw

l The Commissioners the initiation of rulemaking to require that licensees submit reliability and availability data to l the NRC. In its directions to the staff in a staff requirements memorandum (SRM) dated l October 24,1995, responding to SECY-95-215 and a SRM dated June 28,1995, responding to SECY-95-129, the Commission (1) approved the proposed rule, and (2) stated that the staff should continue to work with industry on voluntary submittal of reliability data, under a program that will meet the needs of all parties. The proposed rule was published in the FederalRegister for public comment on February 12,1996; the draft regulatory guide was noticed for comment in the Federal Register on May 2,1996; and a public meeting was held on June 4,1996.

As discussed in the Statement of Considerations (SOC) for the proposed rule, the NRC needs a source of scrutable, plant-specific reliability and availability information to improve the'NRC's oversight capability with respect to public health and safety by focusing the NRC's regulatory process in a risk-informed manner. Plant-specific reliability and availability information would be used in plant-specific PRA models to develop indicators of plant performance that are more closely related to risk than those currently in use. Among i other benefits, these indicators would improve the process for selecting plants for focused l l attention at NRC senior management meetings. Plant-specific reliability and availability data also would be used to guide plant inspections towards more risk-significant systems and components where their level of performance may be of concern. Credible reliability and availability data, collected in a database available to both NRC and the industrt, would also be used by licensees to implement several aspects of risk-informed regulation. These include applications for plant-specific licensing actions (e.g., technical specification changes to address plant changes, risk ranking for graded quality assurance and risk-informed testing and inspection). In addition, the data would be useful to industry in the evaluation and goal setting activities of the maintenance rule and to the NRC in monitoring maintenance rule implementation. Other uses of data discussed in the SOC include: (1)

NRC staff reliability analyses of selected risk-significant systems and components, (2) prioritizing generic safety issues and deciding whether new requirements are warranted to resolve the issues, and (3) improvements to NRC's plant-specific accident sequence precursor analyses.

The public comment periods ended on June 11,1996, and July 5,1996, for the rule and the regulatory guide, respectively. Many public comments were received. Major issues include assertions in industry comments that: (1) costs are undercstimated, (2) benefits are overestimated, (3) the rule would be overly burdensome, (4) the rule would be premature, and (5) the rule is not needed, in October 1996, INPO provided NRC a sample of SSPI data to evaluate a proposed l voluntary alternative to the rule, and a revised Memorandum of Agreement (MOA) between l INPO and the NRC was signed on December 24,1996 providing NRC with access to SSPI

{ data. The revised MOA describes how INPO would provide SSPI data to the NRC, and the procedures and circumstances under which NRC could disclose data outside the NRC. On January 30,1997, the staff met with NEl, INPO, and industry personnel to discuss its evaluation of the sample data. Aside from a few specific exceptions, the staff was unable 4

to make meaningful estimates of demand unreliability or operating failure rates from SSPI data. However, SSPI does provide information for estimating unavailability. In response to that meeting, industry proposed making modifications to the INPO Equipment Performance l

o The Commissioners and Information Exchange (EPIX) System to address icsues raised by the staff. This new system will replace the NPRDS. Attachment 3 provides a summary of the suitability of the data from the voluntary proposal for estimating reliability and availability related parameters, in a letter dated March 21,1997, Mr. Ralph Beedle'of NEl provided additional information including a program description for EPIX. The letter indicated industry's commitment to work with the NRC staff to ensure that data requirements are addressed in the most practical and efficient manner. In response to the issues identified at the January 30 meeting, EPIX would include additional information on demands and operating hours for key components in systems within the scope of SSPl.

The proposed voluntary alternative is based on the EPIX system which provides component failure and demand data for a broad scope of systems and the SSPI system which provides train unavailability data for systems within its scope. Attachment 1 provides a brief summary of the basic data that would be provided by industry under the voluntary alterncdve. The NRC staff would also use Licensee Event Reports (LERs) which provide actual and spurious demand data for engineered safety feature systems, monthly operating reports and other information to construct a more complete reliability database, available for general use. The staff has now completed its evaluation of the proposed voluntary alternative to the rule as modified by the March 21,1997, letter from NEl.

DISCUSSION:

The staff considered two primary questions. The first involves the question of whether the voluntary approach is capable of providing the needed data. The second involves consideration of what action should be taken with respect to the rulemaking. The following section discusses the advantages and disadvantages of the voluntary approach, it forms the basis for resolving the first question by discussing how the voluntary approach  !

would meet the Commission's goals. The next section discusses how the staff might proceed with respect to rulemaking in light of the advantages and disadvantages noted in the evaluation of the voluntary approach. ,

Staff Evaluation of the Voluntarv Acoroach in its evaluation, the staff considered a number of advantages and disadvantages of the i proposed voluntary alternative, including cost, schedule, and other factors discussed below. The most important factor was to determine whether the reliability and availability parameters required in PRA models and applications can be estimated using the data supplied by industry under the proposed voluntary alternative along with other information available to the NRC. Attachment 2 identifies the PRA parameters and associated data l

elements. Attachment 3 shows the additional work the staff would need to do to l construct a database that can be effectively used in risk applications. With the additional l efforts noted in Attachment 3, the staff concludes that these parameters can be e'stimated l and the NRC can construct a reliability database that reflects the parameters needed for

, effective. use in risk-informed applications. The NRC staff effort necessary to process the volunury data into a coherent reliability and availability database is estimated to be about the same as for collecting and processing data under the proposed rule. The Office of 1

n j l .

l The Commissioners l l

AEOD has budgeted this activity and in either case, would be responsible for its implementation.

l There are three significant advantages to the voluntary approach: (1) lower cost for industry, (2) earlier data availability, and (3) industry support. Much of the information in l EPIX (tracking component failures and estimating component demands) is designed to assist utilities in implementing the maintenance rule. Thus, the staff estimates a relatively low additional cost to licensees if the NRC accepts the voluntary alternative. On the other hand, imposition of a rule, even a rule that is redrafted to minimize costs based on what is now known about SSPI and EPIX, would involve substantially greater costs. The difference is estimated to have a present value on the order of $50 million.

Voluntary. data would be available earlier than data required by rule. Utilities began collecting data as of January 1,1997 to be put into EPIX when the software is available.

Voluntary data would be provided to NRC in early 1998. By contrast, the NRC would not receive data required by rule until mid-1999 at best (assuming six months to publish a final rule, six months to set up a program and begin collecting data, and one year to collect data for the first report). The voluntary alternative was proposed by industry representatives and would allow industry to use its preferred method of providing data and, thus, is considered to have industry support. Finally, the voluntary alternative is linked to the maintenance rule in that much of the data provided in EPIX has been designed to assist licensees in implementing the maintenance rule.

l 1

Also, under the voluntary proposal, data would be entered into a well-structured and efficient menu-driven database system that should provide more consistent failure reporting than previously (i.e., in NPRDS). In addition, the voluntary alternative would provide component level failure reports for many more components than would be covered by the rule.~ Among other advantcges of the increased number of failure reports is the larger population of data available for estimating common cause failure parameters which are a l key influence on risk for highly redundant systems and components.

l The NRC staff will participate in the EPIX users group and will work with INPO to develop a system that will meet NRC and industry's needs for reliability data now and in the future.

The voluntary approach is expected to evolve as industry and the staff gain more

! experience in risk-informed applications. By contrast, a rule would need to be complete at the onset, or require rulemaking to make changes as experience is gained with risk-informed applications.

Now that the industry has offered to provide much of the needed data on a voluntary basis, the justification for a rule would need to rest on the incremental benefits of a rule vs a voluntary approach (rather than the total benefits as was the case at the proposed rule stage).'

i At the proposed rule stage, the Office of Management and Budget stated that (1) the proposed rule was not

i. approved and (2) the NRC should address all of the public comments when it submits the final rule.

l L

l

0 l

  • The Commissioners The key disadvantages to the voluntary alternative relate to (1) less specific data than would be reported under the proposed rule and (2) less assurance of complete and l accurs% reporting.' information not currently specified in the EPlX system includes: (1) the number of valve-stroke tests vs valve-flow tests, (2) the number of EDG manual starts (and manual loads) vs automatic starts (and automatic loads) and (3) the number of return-to-service tests vs other tests. For components in systems outside the scope of SSPI, planned unavailable hours will not be provided2 In addition, running hours for some j components such as service water pumps and component cooling water pumps will be provided as one-time estimates. Although these data should be readily available, industry proposals have not included them in the voluntary approach.

Nonetheless, the staff has evaluated these limitations and has determined that methods are available to overcome these problems and to make meaningful and reasonable estimates of the basic ~ PRA parameters. Attachment 3 identifies the limitations in the voluntary data and compensatory measures. These would, necessarily, introduce some additional uncertainty and probably a conservative bias in some of the derived parameter estimates.

l The NRC would work with INPO and industry representatives to improve EPlX in the future

! as more risk-informed applications that use the data are undertaken.

NRC's assurance of the quality and completeness of the data would be somewhat limited with the voluntary approach in the past there have been performance problems with voluntary reliability data systems. However, the EPIX coupling to the maintenance rule and the highly structured nature of EPIX failure reporting provide some reason to expect a higher degree of completeness and accuracy in reporting.

The public' availability of SSPI data (unavailability data) are covered by the December 24, 1996, MOA. The EPIX data are expected to be handled in a similar manner as NPRDS data  ;

covered by the MOA That is, the plant-specific raw data provided by industry would be I publicly available only in specific circumstances such as a need to publish data in connection with a regulatory decision. However, analysis results, such as generic and plant specific equipment reliability estimates, based on the data can be made publicly available.  ;

l l l Staff Considerations Relatino to Rulemaking _

The staff considered several possible approaches with respect to rulemaking. These included (1) rejecting the voluntary approach and proceeding with rulemaking, (2) accepting the voluntary approach with different actions relating to rulemaking and (3) continuing discussion of the voluntary approach.

- The Commission could completely reject the industry's proposad voluntary approach and go forward with the currently proposed rule, it should be recognized that the proposed rule provides a good definition of the data elements that are needed but does not t

8 EPIX provides failures, estimated demands and unplanned unavailable hours, for structures, systems and j components determined to be of high safety significance in implementing the maintenance rule, but does not provide planned unavailable hours.

{

l , -- - - - , . - - - .- - - - --

r l

! The Commissioners l encompass the full set of high safety significant systems as defined during implementation of the maintenance rule. A variation would be to include data for additional systems before completion of rulemaking. This modification might require another round of public comment. Among other things, proceeding with rulemaking would delay the flow of reliability information that we expect to obtain from the voluntary approach, on the order of ,

1-2 years if the currently proposed rule is issued essentially as is or 2-3 years if the rule is  ;

modified to such a degree that another round of public comment is warranted. l The Commission could accept the industry's proposed voluntary approach, withdraw the proposed rule, evaluate the data as it accumulates, and work with industry to make improvernents over time. An alternative would be acceptance of the voluntary approach on an interim basis, without withdrawing the proposed rule. If, after a 2-3 year trial period,

! it is found that there are serious shortcomings in the voluntary approach, then the proposed rule would be revisited and converted to a final rule. This was considered but l rejected because it was felt that there would be little salvage value to the proposed rule.

l Undoubtedly any new rule would be so different in tone and content that it would be

)

necessary to, in essence, start over and renotice the rule. Any required rulemaking is I expected to be focused on the shortcomings experienced, and not on the predominant areas where the voluntary approach would be working.

Lastly, there is an option to reopen the discussions with industry. Under this option tho l Commbion would neither accept nor reject the industry's proposed voluntary approach or i tha rulemaking option. Instead, NRC staff would continue to interact with NEl and INPO to remedy some of the shortfalls discussed in the evaluation of the voluntary approach, such as the need for work-arounds. This option was not pursued because the staff thought it would get a reasonable flow of vitalinformation in a timely manner under the voluntary industry approach. The staff also believes that, as it works with the data, shortfalls and obvious inadequacies can be discussed with industry and changes and improvements can be obtained, i

l RESOURCES:

As previously stated, the NRC staff effort necessary to process the data into a coherent reliability and availability database is estimated to be about the same as Sr collecting and processing data under the proposed rule. AEOD's FY 1997 budget and FY 1998 budget l request include sufficient resources to implement the actions discussed in this paper.

[ Resources for FY 1999 and beyond will be addressed during the upcoming budget l formulation process.

COORDINATION:

The Office of the General Counsel (OGC) has no legal objection to this paper. The Office

of the Chief Financial Officer has no resource-related objection to this paper. The Office of l

the Chief information Officer has reviewed this paper for information technology and information management implications and concurs.

i

-- . .. ~ - . . .- . . ... - . -. - ..

The Commissioners RECOMMENDATIONS:

. The staff recommends that the Commission accept the voluntary approach proposed by l NEl. The main advantages of the voluntary alternative (i.e., the cost, schedule, and industry support), outweigh the disadvantages. As stated in the NEl letter of March 21, 1997, "Given the evolving nature of industry data needs, continued dialogue with and feedback from NRC and industry users are essentialin assuring the dynamic nature of EPIX as it effectively meets its specified needs.... The industry is committed to working with the

NRC staff to ensure that data requirements are addressed in the most practical and l efficient manner." The staff would continue to work cooperatively with INPO and industry representatives to improve the content of this voluntary data in the future. The staff plans to negotiate appropriate revisions to the MOA to include EPIX data.

1 i ,

. Jog ph Callan Execctive Director l for Operations l l Attachments:

' 1. Brief Summary of Data to be Provided by Industry Under the Voluntary Approach

2. Identification of PRA Parameters and Associated Data Elements

! 3. Evaluation of Reliability and Availability Information Commissioners' comments or consent should be provided directly to the Office ,

of the Secretary by COB Frfday, May 23, 1997. j Commission Staff Office comments, if any, should be submitted to the Commissioners l NLT Friday, May 16, 1997, with an information copy to the Office of the Secretary.

l If the paper is of such a nature that it requires additional review and comment, the Commissioners and the Secretariat should be apprised of when comments may be expected.

f DISTRIBUTION:

! Commissioners OGC OPA OCA

! CIO CFO EDO SECY l

l

l o' ]

1 I

BRIEF

SUMMARY

OF BASIC DATA PROVIDED BY INDUSTRY UNDER THE VOLUNTARY APPROACH I Data Needed Data Provided for Systems Data Provided for Other U in SSPI Scope Systems of "High Safety-Significance" Under the l Maintenance Rule Failures Failures provided Failures provided l

Demands - Test Estimated average test Estimated average total demands demands (one-time l estimate)

Demands - Non-Test Counted non-test demands j

! i I

Demands by Type Not broken down into types Not broken down into types

! beyond test vs non-test at all l

l Run Times Actual operating hours Estimated average operating i hours (one-time estimate) i Unplanned Unavailability Unplanned une.vailable time Unplanned unavailable time for each repair 2 for each repair Planned Unavailability Planned unavailable hours for No '

train for each month (from SSPl)

Unavailability Due to Unavailable hours for each EPIX provides unolanned Support System train for each month (from unavailable times directly SSPI) for components in support systems, but not planned unavailable hours  !

Concurrent Unavailability Ability to screen for No significant occurrences u

i Unless otherwise noted, data are provided by EPIX on a component basis.

2 From time of failure d!secvery to time of return to service.

Attachment 1

= l l

l 0

l IDENTIFICATION OF PRA PARAMETERS AND ASSOCIATED DATA ELEMENTS l The followino PRA eauations indicate the carameters that need to be estimated: 1 1

  • Equation for the total unavailability of standby equipment.

Or = go + % A.t, + U I l

where: q. = demand failure probability (failure to start or change stato)

% A,t, = equipment unavailability due to failure from environmental stresses U = equipment unavailability due to out of service for repair or maintenance t, = test interval i

  • For operating equipment such as pumps, EDGs, or control valves, a term is added to  !

the equation to represent failure during the mission time O(t) = 1 - e *"""'

l where: A(r) = the running, or operating, failure rate l t(m) = the mission time Data from a reliability database are needed to estimate go, A,, U, and A(r). The terms t, and t(m) are unique for each application, and are determined by plant operations and design characteristics.

To estimate go, the number of failures to start or change state (N,) and the number of demands on the component to start or change state (No) are needed, q, = N, / N, To estimate A., the number of failures due to environmental stresses (N ,)

and the component on-line time (t ) are needed.

A, = N,, / t, To estimate U, the planned outage time (ty), the unplanned outage time (to), and the component time on-line it.) are needed.

U = (t + to)/t, To estimate A(r), the number of failures during operation, or while running (Ng), and the accumulated run time (t,) are needed.

A(r) = Nn / t, 1 Attachment 2

o ,

l EVALUATION OF RELIABILITY AND AVAILABILITY INFORMATION i r

The followina table indicates the kinds of efforts needed to compensate for weaknesses in the voluntary data in estimatina PRA l oarameters  ;

PRA PARAMETERS AVAILABILITY UNDER VOLUNTARY POSSIBLE WORK-AROUNDS ,

APPROACH' ,

N,(The number of PRA Available in EPIX on a component basis, No work-arounds needed.  ;

failures, needed as the including the speciHc type of demand numerator to estimate q ) associated with the failure.

N. (The number of valid For components in the CSPI reporting scope, Work-around for SSPI scope components .[

demands, needed as the EPIX will contain total component level involves obtaining further breakdown of demand [

denominator to estimate q,) demands partitioned as " test" (estimated) type data by-and "non-test" (counted). -

estimating test demands from Tech Specs IST requirements and other requirements estimating actual and spurious demands from LERs comparing with demands in EPIX [

For components not in SSPI scope, EPIX will Work-around for non-SSPI components involves contain component level demands, not estimating demands as above, and comparing partitioned by type, and estimated once. with EPIX estimates. t t

N,,(the number of PRA Failures available in EPIX on a component No work-arounds needed.

failures due to basis using cause coding and supplemental  :

environmental stress, descriptions needed as the numerator to t estimate A,)

t t, (Component standby The plant state is recorded for all failures in No work-arounds needed.  !

on-line time, needed to EPIX. Other sources available to the NRC  ;

estimate component failure (e.g. monthiy operating reports) provide the rate, A,) plants' operational states.

i  !

1 Attachment 3

PRA PARAMETERS AVAILABILITY UNDER VOLUNTARY POSSIBLE WORK-AROUNDS APPROACH t,,,(Component planned For components in SSPI scope, train level For components in SSPI scope, no work-around outage time, needed to planned outage time is recorded. EPIX needed.

estimate companent outage contains identifiers that relate components to unavailability, U) SSPI trains.

i For components not in the SSPI scope, For components not in the SSP! scope, the work-planned outage time is not available in EPIX around is to develop estimates of planned  ;

or SSPl. outage time considering information such as:  ;

planned outage of other systems

- surveying plant practices

- relationship of planned and unplanned outages

- fraction of unplanned demands that occur during planned outages t, (Component unplanned EPIX contains this information on a No work-around needed.

outage time, needed to component basis, for all components of estimate component outage interest. (in addition SSPI contains train unavailability, U) level unplanned outage time.)

t, (Support system outage SSPI contains train cutages due to support No work-arounds are needed.

time, used to estimate system failures or ouaiges, for the systems outage unavailability, U) in the SSPI scope.

EPIX provides failures and unplanned The work-around is to estimate planned outages outages directly for risk significant support (as discussed above under t,,).

systems outside the SSPI scope.

2

I t

PRA PARAMETERS AVAILABILITY UNDER VOLUNTARY POSSIBLE WORK-AROUNDS

APPROACH N,,(Number of component EPIX contains component level failures No work-arounds are needed.  ;

failures during component recorded against the discovery method, operation, needed to including those discovered while running, for estimate the component all components of interest. ,

operating failure rate, A(r)) ,

t,(Operating time for EPIX contains component level operating For SSPI-scope components, no work-arounds  !

rotating equipment and time, counted for components in the SSPI needed.

control valves, needed to scope. j estimate the component i operating failure rate, A(r))

1 For non-SSPI components, EPIX provides For non-SSPI coiiwients, the staff will use i one-time estimates of operating time. information from LERs and testing information ,

(Tech Spec, IST) and operating failure rate data i from similar components. The estimates are i expected to contain more uncertainty than the

, counted values discussed above.  !

l i

3  !

I

.e a PRA PARAMETERS AVAILABILITY UNDER VOLUNTARY POSSIBLE WORK-AROUNDS APPROACH Concurrent train unavailable SSPI currently collects unavailable hours on For SSPI-scope trains, no work-arounds are hours a monthly basis. For the systems in SSPI needed.

scope, this provides sufficient information to identify potential concurrent outages for further investigation.

~

For Non-SSPl systems, EPIX does not For non-SSPl components, concurrent .

directly provide component or train unavailable hours cannot be estimated since concurrent outage information. planned maintenance outages are not recorded in EPIX. Some instances will meet LER reporting requirements.

4

' ~ " - ' ' -

_ _ _ _ _ _ _ _ _ - . _ _ _ - _ _ _ _ _ _ _ _ _ _ - - _