ML20153D657

From kanterella
Jump to navigation Jump to search
Discusses 970317 Memo Which Expressed Dpv Re TS Trip Setpoints & Allowable Values for Instrumentation.Concludes That Regulations Not in Area & That Procedence on How Regulations Have Been Implemented to Support View
ML20153D657
Person / Time
Issue date: 07/24/1998
From: Collins S
NRC (Affiliation Not Assigned)
To: Callan L
NRC OFFICE OF THE EXECUTIVE DIRECTOR FOR OPERATIONS (EDO)
Shared Package
ML20153D328 List:
References
NUDOCS 9809250130
Download: ML20153D657 (2)


Text

- -.-- -._.-. -- -- .- -.-_-._.-.-_ --- . -- .- - - ----

~ ;.

p gsrecy 4

3 \ UNITED STATES

j

,j a

NUCLEAR REGULATORY COMMISSION WASHINGTON. D.C. SOA4M001

'.....* July 24, 1998 MEMORANDUM TO: L. Joseph Callan Cxecutive Director for Operations FROM: tor j Office of Nuclear Reactor Regulation

SUBJECT:

DFORING PROFESSIONAL VIEW AND DIFFERING PROFESSIONAL OPINION REGARDING TECHNICAL 4 SPECIFICATION SETPOINTS AND ALLOWABLE VALUES FOR INSTRUMENTATION s

in a memorandum dated March 17,1997, a differing professional view (DPV) was expressed regarding technical specifications (TS) trip setpoints (TSP) and Allowable Values (AV) for l instrumentation. A panel reviewed the concems addressed in the DPV and prepared a report which was provided to appropriate NRC staff in order to propose actions to address the panel's recommendations and the schedule for completing those actions in a memorandum dated October 31,1997.' NRR staff responsible for instrumentation and technical specifications along with senior NRR managers, reviewed the panel's recommendations and conducted furth< .

discussions with representatives from the Office of the General Counsel (OGC) and the individual who expressed the differing professional view. By memorandum dated June 22, 1998 (attached), staff documented completion of this review and expressed disagreement with the panel's conclusions and concems over implementation of the panel's recommendations, in the interim, a related differing professional opinion (DPO) was submitted based on concems over the extended period of time without resolut!on of this issue. In a memorandum dated June 4,1998, you returned this DPO to me for processing along with the still open DPV. You requested that I give this matter high priority and provide to you the action items and schedule that NRR deems necessary to close this issue.

I have carefully reviewed the concems, along with the recommendations of the DPV panel and the conclusions of the subsequent staff review. The DPV panelis of the opinion that the regulations require that the technical specifications (TS) 2nclude the TSP to meet the 10 CFR 50.36 requirement that the TS contain the limiting safety system settings (LSSS). The staff review documents the basis of disagreement with this view, concludes that the regulations are not clear in this area, and that precedence on how the regulations have been implemented support the view that the AV satisfies the requirement tnat the TS include the LSSS. In l addition, staff has expressed concems over the operability issues if the AV were to be removed I from the TS and replaced by the TSP. They have also indicated that it would require significent I resources on the parts of both the staff and industry to implement the panel's '

recommendations. Both the DPV panel and staff agree that there is not a safety issue, in that, with either approach, instrument settings would be adequately controlled. Finally, OGC has advised that, while use of the TSP would clearly satisfy the 10 CFR 50.36 requirement, it may  ;

be possible to justify the use of other values such as the AV if the staff is able to conclude from l a technical standpoint that the definition of LSSS is satisfed.

9809250130 990915 (O

PDR TOPRP EMWEST F C PDR b W bX$D l

. 1 L. Callan 2 July 24,1998 Given that there is not a safety issue; that the current system used in the Standard Technical Specifications (STS) and improved STS, which rely on either the AV alone or a combination of AV and TSP, is adequate to controlinstrumentation settings; and that significant staff and industry resources would be required to implement the recommended changes, the only -

remaining rationale for implementing the panel's recommendation would be based on the view that they are necessary to satisfy legal requirements. However, based on OGC review, it is not clear that the regulations or the corresponding regulatory history totally support the DPV panel view. I believe that the case presented by staff review (June 22,1998 memoj that AV satisfy the requirement that the TS include the LSSS is equally valid. Therefore, given no compelling safety or regulatory improvement, I do not believe that it is an appropriate use of either NRC or industry resources to implement the DPV panel's recommendations.

I consider the review cf this DPV by NRR to be concluded and intend to take no further actions based on this DPV. Because the subsequent DPO did not raise any additional technicalissues, only a question of timeliness, I also intend no further actions to address the DPO.

't

Attachment:

As stated e

d t

l l

5 N ,

a

~

  • ueog e k UNITED STATES g g NUCLEAR REGULATORY COMMISSION

$ WASHINGTON. D.c. 30eeH001 i

QCiwy

..... June 22, 1998

' MEMORANDUM TO: Samuel J. Collins, Director Office of Nuclear Reactor Regulation fe .

FROM: Brian W. Sheron, Acting Associate Dire For Technical Review, NRR

/ ,

j Bruce A. Boger, Acting Associate Director For Projects, NRR

SUBJECT:

FOLLOW UP ACTIONS TO NRR AD HOC REVIEW PANEL ON DIFFERING PROFESSIONAL VIEW ON TECHNICAL l SPECIFICATION TRIP SETPOINTS AND ALLOWABLE VALUES FOR I INSTRUMENTATION I In a memorandum dated March 17,1997, a differing professional view (DPV) was expressed regarding Technical Specifications (TS) trip setpoints (TSPs) and Allowable Values (AVs) for instrumentation. A panel reviewed the concerns addressed in the DPV and provided a report which you forwarded to us in a memorandum dated October 31, 1997. In that memorandum, you requested that we provide the actions proposed to address the panel's recommendations and the schedule for completing those actions.

We have completed e review of the panel's recommended follow up actions regarding the DPV. In addition, we have met with the Office of the General Counsel (OGC), and they have indicated that the wording of applicable regulations and rulemaking history support the view that the TSPs corresponds to the limiting safety system settings (LSSS) which are required to be in the technical specifications (TS) as recommended by the DPV panel.

However, we have also met with members of the NRR technical staff responsible for instrumentation and for TS. Based on this integrated interface, we believe an alternate interpretation exists. Furthermore, the issue is of negligible safety significance and implementation of the recommendations would require extensive staff and industry resources. Moreover, we believe that current TS satisfy the Tequ!rements of 10 CFR 50.36 for the reasons discussed below.

We believe that the DPV panel and OGC, in developing their opinion applied more emphasis to the word " setting" in 10 CFR 50.36 than to the description of the LSSS as iguillag safety system settings. We further believe that the regulatory record is not clear and does not specifically identify either TSPs or AVs as the LSSS. The DPV Panel acknowledges that 10 CFR 50.36 could reasonably be read as allowing the use of either the TSPs or the AVs as the LSSS. Therefore, rather than trying to interpret an unclear regulatory record, we have focused on the precedent set by the staff in implementing this regulation. This history indicates that the staff intended AVs to be acceptable for the LSSS in TS.

Moreover, the current staff position as implemented in the improved Standard TS (iSTS) is ATTACHMENT w SC NfC/MQ. .-

i .

S. Collins 2 June 22,1998 to represent the LSSS as AVs in a single column format with the exception of the Westinghouse ISTS which includes both AVs and TSPs in a dual column format. OGC agrees that the regulatory record is not totally clear. The lack of clarity is further evidenced by the extensive discussions held by the DPV panel as well as discussions subsequent to the panel decision. Given the lack of a safety issue and the legal ambiguity, we believe that the appropriate decision should be influenced by operational issues associated with the TS and the impact on both industry and staff resources of any change.

More discussion of the NRR staff v?sw is presented in the attachment.

There are three important TS operationalissues with which the staff is concerned relative to the DPV pane!'s recommended follow up actions: (1) licensees with only TSPs in their TS have experienced issues in implementing setpoint methodologies and in complying with channel functional test and channel calibration TS requirements, (2) licensees with the single column AV format determine instrument channel operability and satisfy applicable safety limits based on AVs not TSPs, and (3) the assignment of the LSSS exclusively to TSPs is inconsiet,nt with setpoint methodologies that support the ISTS, the previous STS, current reguletory guidance, and previous industry standards. The currer,t ISA Standard, S67.041994, "Setpoints for Nuclear Safety Related instrumentation," which was referenced by the panel but has not been endorsed by the staff, allows the LSSS to be

, either AVs, TSPs, or both; this standard also allows the LSSS to be controlled by plant procedures.

An obvious approach to implement the panel's recommendations would be to list TSPs in a single column format in the instrumentation function tables in the TS. We believe this is c not appropriate because it would neither ensure control of setpoints, margins, and

uncertainties sufficient to satisfy setpoint methodologies, nor would it provide for operability determination consistent with approved setpoint methodologies, national consensus standards, and 10 CFR 50.36. As a minimum, AVs provide TS operability criteria; this approach is cons' stent with the ISTS. An option that would both meet this operebility requirement and address the DPV recommendations would be a two column TS format containing both TSPs and AVs. This option would control operability criteria not just by plant procedures but by the TS as required by 10 CFR 50.36. TS Surveillance Requirements for channel functional tests and channel ceBbration would assure that the operability criteria were satisfied. To ensure that instrumentation settings were left within the TSP tolerance, the TS could explicitly require resetting an instrument within the TSP tolerance in the event the as-found setting was outside the tolerance. .

l While the option of requiring a two-column format with both AVs and TSPs in TS might be viewed as optimal because it would address both TS operability and the DPV panel recommendations, it would represent a backfit for plants that have relocated TSPs from the TS. This option would require significant staff and industry resources to implement;it could not be justified based on safety; and it would not be required to meet the requirements of 10 CFR 50.36 for the LSSS. Thus, the only compelling argument to l pursue this option would be a compliance backfit based solely on an interpretation of 10 1 CFR 50.36 that TSPs are required by regulation to be included in the TS.

1 ATTACHMENT b__.__- . _ _ _ _ _ _ _ _ _ _ - _ _ _. . _ _ _ __ . -

S. Collins 3 June 22, 1998 l

As discussed above and further elaborated upon in the attachment, we do not believe that the regulations or the supporting regulatory history clearly support the OGC view or the differing professional view. We believe that an equally valid case can be made that AVs satisfy the requirement that the TS include LSSS. Therefore, we do not believe that it is an oppropriate use of either NRC or industry resources to implement the DPV panel's recommendations.

In summary, the staff believes the current approach to implementing the 10 CFR 50.36 requirement for LSSS by means of AVs is acceptable and can continue to be applied to the TS conversions to the ISTS. However, the staff does and will allow a two-column format with both TSPs and AVs es an option to licensees who prefer this approach.

Attachment:

As stated e

ATTACHMENT

j As stated in 10CFR 50.36,"Each applicant for a license authorizing operation of a production or utilization facility shall include in his application proposed technical specifications in accordance with the requirements of this section." Additionally,10 CFR 50.36 requires that a," summary statement of the bases or reasons for such specification, other than those covering administrative controls, shall also be included in the application, but shall not become part of the technical specifications. The technical specification will be derived from the analysis and evaluation included in the safety analysis report and may include such additional technical specifications as the commission finds appropriate.'

Among the items to be included in the technical specifications (TS) according to 10CFR 50.36 are safetylimits, limiting safety system settings (LSSS), limiting conditions for operation (LCO) and surveillance requirements.

Safety limits for nuclear reactors are limits upon important process variables that are found necessary to reasonably protect the integrity of certain of the physical barriers that guard against the uncontrolled release of radioactivity. Further, should a safety limit be exceeded 3

the reactor must be shut down and the licensee must notify the commission, review the i matter, and record the results of the review including the cause of the condition and the I corrective action taken to preclude recurrence.

1 .

The LSSS are settings for automatic protective devices related to those variables having  ;

significant safety functions. Two points about the LSSS are made, (1) where an LSSS is i specified for a variable on which a safety limit has been placed, the setting must be so

, chosen that the automatic protective action will correct the abnormal situation before a l 1

j safeQ limit is exceeded, and (2) if during operation, it is determined that the automatic I safety system does not function as required, the licensee shall take appropriate action.

l An LCO is the lowest functional capability or performance level of 6quipment required for )

safe operation of the facility. When an LCO is not met, the licensee must shut down the i reactor or follow any remedial action permitted by the technical specifications until the condition can be met.

Surveillance requirements are requirements relating to test, calibration, or inspection to assure that the necessary quality of systems and components is maintained, that the facility operation will be within safety limits, and that the limiting conditions of operability will be met.

, As can be seen from the above, the requirement for an ' Allowable Value" (AV)is not specifically required by 10 CFR 50.36 and it would appear, therefore, not to be necessary to include an AV

^

in the TS. In fact, the definition for an AV is not specifically stated in TS whether they are

" custom", standard, or the more recent improved standard technical specifications (ISTS).

However,10 CFR 50.36 also does not specifically define or require a 'tdp setpoint" (TSP)  !

The purpose of this discussion is to show that although the term

  • Allowable Value"is not t specifically defined in 10 CFR50.36 or in TS, by choosing AVs to specify LCOs for controlling  !

channel operabi!ity and as LSSS for preserving applicable safety limits, the requirements of 10 CFR 50.56 are met. The discussion will also show that although TSPs play an integral part of Attachment i

i m

I c

i operating within the LSSS, it is more reasonable when writing TS to select AVs to specify LCOs rather than TSPs. What is important is that TS provide appropriate limits consistent with  ;

staff approval oflicensee's various setpoint programs.

Although the inclusion of LSSS in the TS is a requirement of 10 CFR 50.36, the relationship of LSSS to safety limits, LCOs, AVs, TSPs, setpoint methodologies, standards, and regulatory j guides continues to be the subject of debate within the nuclear power industry. The assignment i of the LSSS to a single TS variable and associated setpoint methodology is difficult to resolve for a variety of reasons. Among these reasons is a lack of national consensus setpoint standards during the early years of the nuclear power industry and the various unique and not entirely compatible setpoint methodologies originally provided by NSSS suppliers and . l contractors. These variations, together with various staff requirements and interpretations i resulted in various TS instrumentation requirements, TS formats, LSSS interpretations,  ;

operability determinations, and at times excessive LER generation.

Recently, OGC was asked to provide an opinion as to whether the term," Limiting Safety System Settings" as used in 10CFR 50.36(c)(1)(ii) refers only to manually adjusted TSPs or whether LSSS can be interpreted as embracing AVs which are derived from the TSP and analyticallimit instrument channel uncertainty evaluation. The OGC discussion of the LSSS,

" Meaning of Limiting Safety System Settings in CFR 50.36," dated March 16,1998, referenced the guidance document supporting the original 10 CFR 50.36 rule. Although the evaluation by OGC concluded that the LSSS are the TSPs, it is the staff's opinion that the TSPs were not the LSSS as originally implemented. The staff's opinion is based on the implementation of the

' custom

  • TS, previous STS (circa 1980), ISTS (1992), and reviews of setpoint standards development up to the current industry standard revision. The OGC evaluation stressed that LSSS were " settings"; however, the staff considt . he word " limiting
  • to be just as significant.

As pointed out in the OGC evaluation, the origir. ording for the LSSS was " Maximum Safety System Setting? This was subsequently change M

  • Lim: ting Safety System Settings
  • for the final rule, The reason given for the change was wat safety limits, safety limit settings, and conditions of operation can be limited at either upper or lower bounds and therefore the word

' limiting" was more appropriate, in other words, LSSS are the ' limiting" safety system settings or the maximum / minimum settings that safety system settings may have and continue to satisfy the safety limits. The guidance document supporting the initial issuance of 10 CFR 50.36 also states that,"The licensee is free to coerate with any safety system settina within the limitina yalua."

Based on OGCs review of the 10CFR 50.36(c)(1)(ii) and original 50.36 rule making, it was their opinion that contrary to the ISTS single-column AV format that assigns the LSSS to AVs, the LSSS are represented by the TSPs since they are considered the instrument " settings". The staff considered the reasoning behind OGC's op!nion and agrees that the inclusion of the TSPs in the technical specification could have some benefit. The staff does not believe, however, that a single setpoint column TS with only the TSPs can be implemented without significant l confusion and impact on licensees because such an approach would not include necessary limits on parameters. To successfully implement the DPV panet/OGC format, the staff .

concludes that a two column approach with AVs and TSPs would be necessary. Furthermore, I I

Attachment L _ _- -- , - _ , _ . - . -- ._ _-.

O 3

the staff believes that a single column TS utilizing AVs can be successfully implemented and still meet the requirements of 50.36 as discussed below.

The DPV panel stated, "The panel found these concems primarily administrative in nature (i.e.,

related to compliance with 50.36) and do not adversely affect the safe operation of reactors that are subject to TS requirements that do not include TSPs." In addition *. . . the panel found that the issues identified during these discussions and deliberations do not adversely affect the safe operation of reactors due to TS requirements associated with those issues." Given this general conclusion, the question arises: If the panel recommendation is to be implemented as stated, is a licensee required to add TSPs to the TS? Again. OGC reviewed this question and determined that backfitting would be required if the agency adopted the position that the LSSS i

be defined as the TSPs and only the TSPs. Although the safety significanoe was determined to be minimal by the panel, the adoption of the panel's recommendation in conjunction with OGCs opinion would require a compliance backfit for those licensees that previously assigned the LSSS to the AVs. This includes those licensees who have converted to the ISTS.

Operating experience c... owed a need for guidance on the selection of instrument setpoints (pressure, differential pressure, flow, level, temperature, power, radiation, time delay) used to initiate automatic protective actions and alarms. The lack of a national consensus standard on setpoint methodology led to the development of Regulatory Guide (RG) 1.105 Rev.1. This RG 1 was an attempt by the staff to describe an acceptable method to ensure that instrument setpoints in systems important to safety were initially within and remained within specified limits.

The RG notes that the most frequent abnormal occurrence reports submitted between January 1972 and June 1973 involved drift of protective instrument setpoints outside TS limits. The single most prevalent reason for a parameter being outside TS limits was the fact that the TS allowed insufficient or no margin between the setpoint and the " technical specification limit

  • to account for instrument inaccuracies, vibration, or minor calibration variation.

RG 1.105, Rev.1 defines various terms including ' technical spec /fication lim /f' stating that it was the limit prescribed as a license condition on an important process variable for safe operation. However, there is no clear discussion as to the relationship of LSSS to fechnical specification limits. There is no discussion about LSSS being defined as TSPs. And there is no discussion of the concept of an AV. However, the RG does explain,"the setpoints should be established with sufficient margin between the technical specification limit for the process variable and the nominal trip setpoint to a!!ow for (a) the inaccuracy of the instrument (b) uncertainties in the calibration, and (c) instrument drift that could occur during the interval between calibrations." Based on a review of " custom

  • TS formats and the discussions and resulting positions taken in the RG, the technical specification lim!t as refere:eed by the RG was to be the limit prescribed as a license condition. [ italics added to quotations for emphasis.)

Regulatory position 6 of RG 1.105, Rev.1 states that the assumptions -the minimum margin with respect to the LSSS, drift rate, and the relationship of drift rate to testing intervaWd in selecting the setpoint values are to be documented. The actual assignment of LSSS to particular variables is not stated. However, the implication that the TSPs' relationships to the LSSS be defined and that sufficient margin be provided between the setpoints and the technical Attachment L

. i

.' t 4 l l

specification limits implies that the TSPs were not required to be the LSSS. Alth249b

  • technical soecification limit" is not a 10 CFR50 36 term it can be seen from RG 1.105. Rev.1 and the ' custom" TS that the LSSS were not soecifically intended to be or assioned to the TSPs. Based on the above. the LSSS and the TSPs were not considered identical and the TSPs by themselves were not considered the LSSS. I I

The staff believes that the DPV panel and OGC applied more emphasis to the word " setting'  !

than to the description of the LSSS as hm&ag safety system settings. The development of 1 10 CFR50.36 and " custom' TS does not support the opinion that the TSPs chosen by the licensee must be included in the TS. The lim /t/ng values are the values to be listed in the TS.

However, in the initial STS, the staff provided a means to document the TSPs. The reason for i this was to more fully monitor licensees' drift assumptions over surveillance intervals to better i control TSP values. Subsequently, with the development of the ISTS single column AV format, the staff again documented the AVs as the ' limiting

  • settings which if exceeded the licensee l

{

must take appropriate action. The TSPs would be set by the licensee consistent with the j assumptions used to develop channel uncertainty allowances. Obviously the licensee should establish the TSPs conservatively with respect to the AVs such that safety and operability limits

{

would not be exceeded except on rare occasions. In other words the TSPs must be set such '

that they are bounded by the limiting values (i.e., AVs) consistent with the setpoint calculations.

One relaxation associated with the ISTS format is that instrument performance criteria may not be as well controlled within the TS. In developing ISTS, instrument performance was recognized as a programmatic objective appropriately left to the licensee and not required to be in the TS. From a TS point of view, as long as the trip function criteria are met (the channel trips within the AVs/LSSS) the channelis operable. The perfom1ance parameters of the channel with respect to the setpoint calculation and uncertair.ty assumptions are documented during surveillance (per IEEE 338 and RG 1.118) or inspection and are evaluated by the i licensee. j l

The staff's position is that the TSPs are not the limiting values with respect to TS and that a j single column format specifying the AVs as the LSSS is acceptable to control parameter values '

such that operability is maintained and safety limits are not be exceeded. The sta?.' believes '

this position is supported by the 10 CFR50.36 rulemaking documentation and a review of I

' custom

  • TS developed per the guidance of 10 CFR50.36 shortly after it was issued. The staff's opinion is that a single-column format, with only the TSPs, based on current setpoint  ;

methodology would require revisions to TS, setpoint methodologies, Regulatory Guides, i industry guidance and standards with a potential loss of operating margin and with no l improvement in safety. The DPV panel concurred that the safety significance of not including the TSPs in the TS was minimal. It is the staff's opinion, therefore, that the ISTS single-column i AV format is an acceptable and preferable implementation of the requirements of 10 CFR50.36.

l Attachment l