ML20211A637
| ML20211A637 | |
| Person / Time | |
|---|---|
| Issue date: | 08/17/1999 |
| From: | Bates A NRC OFFICE OF THE SECRETARY (SECY) |
| To: | |
| Shared Package | |
| ML20211A636 | List: |
| References | |
| FRN-64FR3791, RULE-PRM-50-65, RULE-PRM-50-67 NUDOCS 9908240093 | |
| Download: ML20211A637 (30) | |
Text
.
[7590-01-P]
NUCLEAR REGULATORY COMMISSION 10 CFR Pads 50 and 70
[ Docket No. PRM-50-67]
Nuclear Information and Resource Service; Petition for Rulemaking Denial
)
AGENCY:
Nuclear Regulatory Commission.
ACTION:
Petition for rulemaking; denial.
SUMMARY
- The Nuclear Regulatory Commission (NRC) is denying a petition for rulemaking (PRM-50-67) from the Nuclear information and Resource Service (NIRS). The petitioner requested that the NRC amend its regulations to require that nuclear facilities ensure the availability of backup power sources to power safety systems of reactors and other nuclear facilities in the event of a date-sensitive, computer-related incident resulting from a Year 2000 (Y2K) issue. The petitioner requested that NRC take this action to ensure that reliable backup sources of power are available in the event of a Y2K incident. The Commission agrees that maintaining reliable emergency power is important and has considered the petitioners request as part of its review of existing regulatory requirements and licensee actions to assure reliable emergency power during the Y2K transition. Based on this review, the Commission has determined that existing regulatory requirements, actions taken by the licensees to implement a pp 9908240093 990817 PDR PRM 50-65 PDR.
L systematic and structured Y2K readiness program adequately address Y2K issues, and NRC's D
oversight of the licensees' implementation of these programs provide reasonable assurance of adequate protection to public health and safety. Because the Commission has concluded that l
existing programs already address the petitioner's concem regarding availability of emergency power, the petition is denied.
ADDRESSES: Copies of the petition for rulemaking, the public comments received, and NRC's letters to the petitioners are available for public inspection or copying in NRC Public Document Room,2120 L Street, NW (Lower Level), Washington, DC, as well as on NRC's rulemaking web site at http://ruleforum.llni. gov.
4 FOR FURTHER INFORMATION CONTACT: Matthew Chiramal, Office of Nuclear Reactor Regulation, U.S. Nuclear Regulatory Commission, Washington, D.C. 20555-0001, telephone 301-415-2845, E-mail address mxc@nrc. gov, or Gary W. Purdy, Office of Nuclear Material i
Safety and Safeguards, U.S. Nuclear Regulatory Commission, Washington, D.C. 20555-0001, telephone 301-415-7897, E-mail address gwpi@nrc. gov.
l SUPPLEMENTARY INFORMATION:
Background
L l
NR' received three related petitions for rulemaking (PRM-50-65, PRM-50-66, PRM C 67), each dated December.10,1998, submitted by the NIRS conceming various aspects of Y2K 2
i l:
issues and nuclear safety. This petition (PRM-50-67) requested that NRC adopt regulations that would require facilities licensed by NRC under 10 CFR Paris 50 and 70 to provide reliable sources of backup power. The first petition (PRM-50-65) requested that NRC adopt regulations l
that would require facilities licensed by NRC under 10 CFR Parts 30,40,50, and 70 to be Y2K compliant. The second petition (PRM-50-66) requestad that NRC adopt regulations that would require facilities licensed by NRC under 10 CFR Part 60 to develop and implement adequate contingency and emergency plans to address potential system failures. Because of the nature of these petitions and the date-specific issues they address, the petitioner requested that the petitions be addressed on an expedited schedule.
l
- On January 25,1999, NRC published a notice of receipt of a petition for rulemaking in the Federa/ Register (64 FR 3789). It was available on NRC's rulemaking website and in the NRC 1
Public Document Room. The notice of receipt of a petition for rulemaking invited interested j
persons to submit comments by February 24,1999.
]
l The Petition 4
L i
i l
The petitioner requested that NRC adopt the following text as a rule:
'The Nuclear Regulatory Commission recognizes that date-sensitive computer programs, embedded chips, and other electronic systems that perform a major role in distributing, allocating, and ensuring electric power throughout the United States may be prone to failure beginning on January 1,2000. Loss of all l
l altemating current electricity from both the offsite power grid and onsite 3
4
4 emergency generators (commonly known as " station blackout") long has been identified by NRC as among the most prominent contributors to risk for atomic reactors.
(1) For these reasons, NRC requires of Part 50 and 70 licensees as of December 1,1999: (a) that all emergency diesel generators that provide backup power to nuclear licensees must be operational and remain operational; (b) that licensees 1
that cannot demonstrate full operational capabilities of all emergency diesel i
generators must close until such time that full operational capabilities of emergency diesel generators are attained; (c) that all licensees must have a 60-day supply of fuel for emergency diesel generators.
(2) Further, to ensure adequate protection of public health and safety, NRC requires that alllicensees under these sections must provide alternate means of backup power sufficient to assure safety. These may include, but are not limited to: solar power panels, wind turbines, hydroelectric power, biomass power, and other means of generating electricity. These additional backup systems must provide electricity directly to the licensee rather than to the broader electrical grid.
(3) Irradiated fuel pools are to be immediately classified as Class 1-E; backup power systems must be sufficient to provide cooling for such pools. Licensees which cannot demonstrate compliance with sections (1) and (2) must cease operations as of December 1,1999, until compliance with these sections is 4#
' Hair? * *)
i 4
4
1
[
The petitioner acknowledged that NRC has recognized the potential safety and environmental problems that could result if date-sensitive electronic systems fail to operate or L
provide false information. The petitioner asseded that NRC has required its licensees of reactor and major fuel cycle facilities to report by July 1,1999, on their programs to ensure compliance i
with Y2K issues.
i l
The petitioner discussed the " availability of electricity to power atomic reactor and other i
nuclear facility safety systems." The petitioner explained that electricity is required to operate
{
atomic reactor safety and cooling systems and that this electricity is provided by offsite sources 1
(overall an electrical grid). The petitioner commented that NRC has long recognized that the loss of all alternating current from both onsite and offsite systems, known generally as " station blackout," is the most important contributor to risk at most atomic reactors. The petitioner l
correctly noted that NRC has required licensees to have backup sources of onsite emergency power, normally multiple emergency diesel generators, capable of supplying the electricity necessary to operate essential safety systems.
l The petitioner asseded that the emergency diesel generators (EDGs) used at atomic reactors have proven unreliable and are often out of service. The petitioner claimed that the unprecedented condition posed by the Y2K problem, coupled with the demonstrated and ongoing failures of EDGs, constitutes reasonable doubt that EDGs can be relied on. Therefore, the petitioner believes that NRC should adopt regulations that require that licensees have all EDGs operational during the Y2K transition, that they have a 60-day supply of fuel as of December 1, 1999,~ and that licensed facilities that cannot meet these requirements be closed.
5 i
1 I
The petitioner discussed the likelihood and the potential consequences of a failure of all or a portion of the electric power grid in the United States. The petitioner recognized that the failure of all or a portion of the electrical grid as a result of Y2K issues is well beyond the scope of NRC's authority.- However, the petitioner stated that the extended failure of all or a portion of the electrical grid would place severe stress on the current EDG system of backup power supply and that the failure of EDGs at one or more reactor sites could result in extended station blackouts and nuclear catastrophes. The petitioner asserted that this possibility is well within the range of probabilities for which NRC routinely requires action by its licensees. The petitioner further asserted that reliance on unreliable EDGs is insufficient under these conditions. Therefore, the petitioner believes that it is essential that NRC take the regulatory action suggested in this petition on an expedited basis.
Public Comments on the Petition In response to the petition, NRC received 73 comment letters, which included i letter signed by 25 citizens of the State of Michigan,3 letters from nuclear associated industries,10 letters from utilities,14 letters from private c,rganizations, and 45 letters from private citizens.
l Fifty-six letters supported the petition, of which 41 were from private citizens,14 were
)
from private organizatione, including i from the NIRS and 1 signed by 25 individuals. The comments supporting the petition addressed the concern that diesel generators are unreliable l
and that a reliable electric power grid is needed.
i 6-
l
~
1 In some of the letters suppedag the petition, the authors included the following additional comments that provide information or requested action that was not contained in the petition.
l l
These comments noted that-j 1.
Y2K may increase the possibility of local, regional or widespread blackouts.
Losing all electric power to the station is called station blackout. EDGs, each capable of powering the entire plant, compensate for the loss of off-site electric power. Reliability of diesel generators is considerably lower than required and, moreover, one of two diesel generators is often out of service. Therefore, for Y2K, an additional source of backup power needs to be provided, and both EDGs should be operable with sufficient fuel on site to compensate for fuel delivery problems.
2.
In order to ensure that sufficient electric power is available during an extended loss of offsite power to safely shut down a nuclear plant and cool the spent fuel pool, enough diesel fuel should be available at the site for periods extendir.' from 60 days to 160 days to whatever the time period that offsite power is not av.aable.
I 3.
An additional power source or method should be available during power failure to provide makeup water to the spent fuel pool.
4.
On at least one occasion, a nuclear power plantlicensee falsified data relative to the reliability of EDGs. The concern is that other nuclear utilities may not provide reliable data for their EDGs to NRC.
7
l These comments are addressed specifically in the discussion of " Reasons for Denial."
Seventeen letters opposed the petition, including 4 from private citizens, 3 from nuclear associated industries, and 10 from utilities. Comments opposing the petition stated that onsite emergency electric power generators are already required to be maintained in a state of readiness and validated by periodic testing, fuel supplies are maintained at a level adequate to facilitate appropriate response / recovery actions, and the current regulations and license conditions are adequate to address the issue. One commenter used a specific facility as an example to demonstrate that in the highly unlikely event of a total loss of electrical power (meaning the loss of the electric grid and backup power) the conditions at that facility would not j
threaten public health and safety. Any potential adverse impacts would be limited to work areas and equipment within the facility, and there would be no catastrophic or significant loss of control or containment of nuclear material. That commenter indicated that the provision of a tertiary (meaning a secondary backup) source of electric power to its fuel facility, which would be independent of the broader electric grid, as would be required under PRM-50-67, is an unreasonable requirement that would force shutdown of the facility on December 1,1999, in the absence of any significant credible safety risk.
1 c
Reasons for Denial i
NRC is denying the petition because the Commission has determined that current NRC regulations and license conditions goveming power systems at Part 50 and 70 facilities provide reasonable assurance of adequate protection to public health and safety, and licensees are j
taking appropriate actions to provide reasonable assurance that Y2K problems will not adversely l
l h
8 L
4 i
affect the functionir$g of these power systems. The NRC is reviewing the licensees' implementation of these Y2K activities and will have sufficient time to take appropriate regulatory action if licensees' Y2K activities and programs are not properly implemented in a timely fashion.
NIRS does not explain why the licensees' Y2K activities and programs, and NRC's oversight of the licensees' implementation of these activities and programs, are inadequate such that the rule proposed by NIRS is necessary to provide reasonable assurance of adequate protection from Y2K-induced unavailability of onsite power systems.
NIRS' proposed rule contairted three separate requirements for Part 50 and Part 70 licensees: (1) operational demonstratio1 of EDGs and provision of a 60-day diesel fuel supply; (2) attemate means of backup power; and (3) classification of fuel pools as Class 1-E. Facilities that cannot demonstrate compliance with these requirements by December 1,1999, would be required to shut down until they could demonstrate compliance. The proposed requirements are addressed below for Part 50 power reactors, Part 50 decommissioning reactors, Part 50 non-power reactors, and Part 70 licensees in Sections I,11, Ill, and IV, respectively.
I.
Part 50 Nuclear Power Plants.
A.
Diesel Generator Operational Caoability and Sixtv-Dav Fuel Supolv Nuclear power plants must be protected against loss of offsite power (LOOP) by providing an onsite backup power system by either 10 CFR Part 50, Appendix A, General Design Criteria (GDCs) 17 and 18, or equivalent requirements in the plant's licensing basis. Most licensees rely
- upon diesel generators to provide onsite backup power, although there is at least one licensee 9
N l
' that relies'upon hydroelectric power All licensees have committed to provide an onsite supply of fuel to operate diesel generators; most commitments are for a 7-day supply. In addition, nuclear power plants are required by 10 CFR 50.63 to have the capability to withstand loss of all ac power (generally referred to as " station blackout" [SBO]) for an established period of time. As
- indicated in Section I.A.2 there is no reason to believe that Y2K would significantly affect the probability or duration of a LOOP and/or a SBO from that otherwise assessed in a licensee's coping analysis required by 10 CFR 50.63. To demonstrate that their plants can cope with SBO, I
i some licensees rely upon an attemale ac power source (s) (separate from the backup power
. system) that utilizes diesel generators or gas turbine generators.
1.
EDG Reliability NIRS claims that EDGs have proven to be unreliable, such that licensees should be required to demonstrate " full operational capability"' of EDGs that provide backup power. As j
i
. previously noted, backup onsite power is usually provided by diesel generators, which supply
)
electric power to the plant safety systems upon a LOOP. NRC regulations require that onsite electric power supplies'and the onsite electric distribution system have sufficient independence, redundancy, and testability to perform their safety functions assuming a single failure.
Furthermore, in accordance with their license conditions, all licensees are required to have backup electricity sources operational to supply safety-related equipment at all times independent of circumstances such as.Y2K-induced LOOP. The operation and maintenance of
' The NRC assumes that by " capability," NIRS actually means " reliability" because
" capability" normally refers to the ability of the emergency power system to power safety related electrical loads at the plant; whereas reliability normally refers to the actual performance of the I
system in terms of availability, which is what NIRS addresses in its petition.
10 l
~
diesel generators and other safety-related equipment necessary for the safe shutdown of the
- reactor are controlled by the plant technical specifications (TSs). The TSs are intended to ensure that sufficient power will be available to supply safety-related equipment at all times regardless of key Y2K dates. Moreover, the plant TSs require that immediate action be taken to restore I
inoperable diesel generators to operable status. The plant TSs require the diesel generators to be tested routinely in order to demonstrate their operability and their ability to supply power as needed.
NIRS did not present any information demonstrating that diesel generators are unreliable such that they should not be relied upon to provide backup power upon a LOOP. For each j
nuclear power plant, selected target diesel generator reliability values were established for plant-i specific coping analysis in accordance with the requirements of 10 CFR 50.63, the SBO rule.
Availability and reliability values are tracked by each licensee in accordance with the requirements of 10 CFR 50.65, the maintenance rule, and associated industry guidance.
i In the resolution of Generic Safety Issue B-56, " Diesel Generator Reliability," one of the options recommended by NRC staff was to revise the SBO rule to include specific requirements for demonstrating diesel generator reliability. However, in SECY-93-044,
- Resolution of Generic
> Safety issue B-56, Diesel Generator Reliability," dated March 25,1993, the Commission disapproved the revision to the SBO rule on the basis of the real progress made by the nuclear industry in improving the reliability of the diesel generators. NRC requirements and industry activities have resulted in a very high diesel generator reliability.' in 1993, the industry-wide average reliability of diesel generators was in excess of 98 percent. An Idaho National Engineering Laboratory study (INEL-95-0035, " Emergency Diesel Generator Power System
)
i 11
r Reliability: 1987-1993") of a number of nuclear power EDG reliability concluded that those plants with a 0.950 reliability target goal were actually demonstrating 0.987, and the plants with a 0.975 reliability target goal were actually demonstrating 0.985. The Commission stated that the industry should continue an aggressive program of maintenance as well as root cause analysis i
that will continue to offer assurance that diesel generator reliability will be maintained at a j
satisfactory levelin the future.
j i
l l
All licensees have implemented a maintenance monitoring program consistent with the maintenance rule, which became effective on July 10,1996. Licensees are required to monitor
' the performance of diesel generators against the established goals and to take appropriate corrective actions if the goals are not met. The maintenance rule requires that these goals be evaluated by the licensees at least every refueling cycle, not to exceed 2 years. To evaluate the
)
t.
process established by licensees to set goals and monitor them, and to verify that preventive maintenance has been effective for systems and components under the maintenance rule, NRC 1
staff conducted baseline inspections of all nuclear plants during 1996 -1998. At several plants, L
diesel generators were among the systems and components reviewed to verify that goals were i
l established and monitoring and trending were being performed. For pilot plants, diesel generators continue to be inspected and evaluated.using the risk-informed, performance-based inspection process, which is part of the NRC Oversight Baseline inspection Program. NRC staff will continue to assess the reliability of diesel generators at nuclear power plants to ensure that the reliability of diesel generators is maintained at levels specified by each licensee when it performed its plant-specific coping analyses for SBO.
i i
.12 y
)
Additionally, the scope of licensees' Y2K programs, including contingency planning, i9 covers the onsite power and other emergency power systems at the plant. NRC audits and reviews of licensee Y2K program activities to date have verified licensee consideration of these systems, and no associated Y2K issue relating to onsite power systems have been identifed.
The NRC does not believe, on the basis of current information from the North American Electric Reliability Council (NERC)', that availability of offsite power from the electrical grid is likely to be significantly affected by Y2K-induced problems. In its most recent reports issued on January 11 and April 30,1999, NERC states, " Transmission outages are expected to be minimal and outages that may occur are anticipated to be mitigated by reduced energy transfers established as part of the contingency planning process." Both reports indicate that the transition l,*.
through critical Y2K rollover dates should have a minimal impact on electric systems operations in North America and that widespread, long-term loss of the grid as a result of Y2K-induced events is not a credible scenario. Therefore, there is no reason to believe that Y2K would significantly affect the probability or duration of a LOOP and/or a SBO from that otherwise assessed in the licensee's coping analysis required by 10 CFR 50.63.
As discussed above, the diest,l generators and associated onsite power supply systems, being within the scope of licensees' Y2K readiness programs, will be Y2K ready prior to the Y2K transition, and no decrease in reliability of the diesel generators is expected. The information provided by NERC indicates that the likelihood of a LOOP is not expected to increase 8 NERC is an electric industry organization made up of 10 Regional Reliability Councils that account for nearly every bulk electric supply and delivery organization in the interconnections of North America.
NERC and its Regional Reliability Councils set operating and engineering standards for the reliability of electne systems in North America. In May 1998, U.S. Department of Energy requested NERC to facilitate the electric industry's Y2K effort.
J 13
)
significantly during Y2K transition. Based on these considerations, plus the ability of the plants to cope with a station blackout, the likelihood of an event that will jeopardize public health and safety is acceptably low.
One of the public comments received by NRC in response to the petition indicated a concem regarding falsification of EDG reliability data by licensees. This particular concem has been investigated and resolved as documented in an NRC memorandum dated December 20, 1993, from the Office of Investigations to the Region ll Regional Administrator, "Vogtle Electric Generating Plant: Alleged False Statements Regarding Test Results on Emergency Diesel Generators (Case No. 2-90-020R)." Falsification of EDG failure data by licensees is not considered by NRC as an industry-wide, generic occurrence. Such incidents, when identified, will continue to be treated by NRC on a case-by-case basis and appropriate actions will be taken in response.
2.
Sixty-Day Fuel Supply NIRS' proposed rule would require each nuclea'r power plant licensee to have a 60-day onsite supply of fuel for diesel generators, as opposed to a 7-day fuel supply to which most licensees have committed. However, NIRS provided no technical basis why offsite power from the grid would not be reestablished within the 7-day period accommodated by existing onsite fuel supplies. Nor did NIRS explain why, should a LOOP continue for longer than 7 days, a licensee l
would be unable to resupply diesel fuel for a period of 60 days so that a 60-day fuel supply must
~
be maintained onsite. Commenters on the NIRS petition who suggested a requirement for a larger fuel supply (able to accommodate 160 days of operation without resupply) also did not 14
provide any technical bases for their recommendations. As stated previously, the likelihood or duration of a LOOP is not expected to be significantly affected by the Y2K issue.
Furthermore, the NRC licensees are taking appropriate actions to ensure that their plants will be able to cope with Y2K-induced LOOP durations longer than 7 days. As part of each plant's Y2K activities, each licensee is preparing a contingency plan, which includes obtaining diesel fuel and other necessary supplies to cope with Y2K-induced long-term LOOP events. As part of NRC's review of licensees' implementation of their Y2K programs, NRC will confirm that licensee Y2K programs address emergency power sources, arrangements for obtaining critical -
commodit!2s (e.g., EDG fuel oil) and other considerations for contingency planning identified in Nuclear Energy institute / Nuclear Utilities Software Management Group (NEl/NUSMG) 98-07,
" Nuclear Utility Year 2000 Readiness Contingency Planning, dated August 1998.
The capability of diesel generators and the adequacy of existing fuel supplies have been demonstrated at numerous plants during weather-induced interruptions of the power grid and other cases of LOOP from the grid. An example is the Turkey Point nuclear plant LOOP event during the August 1992 Hurricane Andrew when the diesel generators automatically picked up safety-related loads and maintained the plant for an extended period (over 6 days) during the recovery until site power was restored. NRC considers the current 7-day fuel capacity to be sufficient to operate diesel generators for longer than the time that it takes to replenish the onsite supply from outside sources. Accordingly, a rule requiring licensees to maintain sufficient fuel to operate their diesel generators for a 60-day period or longer is not necessary to provide reasonable assurance of adequate protection against Y2K-induced LOOP events. The regulation requires nuclear power plants to withstand LOOP events regardless of whether the I
15 I
LOOP is due to Y2K or other causes. The petitioner has not demonstrated that Y2K would significantly affect the probability or duration of loss of all attemating current power from that otherwise assumed in the licensee's coping analysis required by 10 CFR 50.63, and the licensees' coping analyses continue to be applicable during the period that NIRS claims would present'an increased susceptibility to a LOOP.
B.
Additional Altemate Means of Backuo Power
~
NIRS' petition requests NRC to require oil licensees to provide an attemate (second) means of backup power, such as solar power panels, wind turbines, hydroelectric power, and biomass power The petition also requests NRC to require that the attemate backup power j
i system provide electricity directly to the licensee rather than to the broader electrical grid.
1.
Need for Additional Backup Power Source i
l
+
As discussed in Section I.A.1 above, not only must licensees provide a source of backup power upon a LOOP, some licentees have provided an attemate ac power source in order to demonstrate that they are able to cope with a LOOP concurrent with a loss of onsite backup power (an SBO) for a specified duration. Thus, these licensees have three sources of power: (1) offsite power from two independent circuits; (2) onsite backup power from independent, redundant power supplies; and (3) attemate ac power. The NRC d >es not believe that the NIRS' proposal for a fourth source of power ("altemative backup power," in the words of NIRS) is
' necessary to provide reasonable assurance of adequate protection against Y2K-induced problems.
16
?
s
[q The petitioner does not explain why Y2K would affect diesel generators as a source of l-backup and/or attemate ac power, such that a source of power in addition to diesel generators is necessary to address SBO. The scope of the licensees' Y2K program covers both the onsite backup and the altemate ac power systems at nuclear power plants. Since 1996, NRC has been working with the nuclear industry and licensees of operating nuclear power plants in order to achieve Y2K readiness at all nuclear power plants. NRC has issued Information Notice (lN) 96-70, " Year 2000 Effect on Computer System Software," on December 24,1996; Generic Letter j
(GL) 98-01, " Year 2000 Readiness of Computer Systems at Nuclear Power Plants," on May 11, 1998; and GL 98-01, Supplement 1, " Year 2000 Readiness of Computer Systems at Nuclear Power Plants," on January 14,1999.
NRC issued IN 96-70 to alert nuclear power plant licensees of the Y2K problem. The information notice described the potential problems that nuclear power plant computer systems and software may encounter during and follow ng the transition into the year 2000 and how the Y2K issue may affect NRC licensees. IN 96-70 encouraged licensees to examine their uses of computer systems and software well before the year 2000 and suggested that licensees consider appropriate actions for examining and evaluating their computer systems for Y2K vulnerabilities.
in GL 98-01, NRC endorsed the guidance in the industry document issued by the NEl/NUSMG 97-07, " Nuclear Utility Year 2000 Readiness," when properly augmented in the area i
of risk management, contingency planning, and remediation of embedded systems, as one possible approach in implementing a plant-specific Y2K readiness program. In August 1998, NEl issued an industry document, NEl/NUSMG 98-07, which provided additional guidance in the area of intemal and extemal risk management and contingency planning. External events that should 17 L
L l-i l
. be considered for facility-specific contingency planning include electric grid / transmission /
distribution system events (e.g., a LOOP, grid instability and voltage fluctuations, load fluctuations and loss of grid control systems), loss of emergency plan equipment and services, loss of essential services, and depletion of consumables. The NRC considers the guidance in 1
NEl/NUSMG 98-07, when properly implemented, as an acceptable approach to mitigate and, l
manage Y2K-induced events that could occur on Y2K-critical dates.
l In GL 98-01, NRC requested that all operating nuclear power plant licensees submit written responses regarding their facility-specific Y2K readiness programs in order to obtain l
, confirmation that licensees are addressing the Y2K problem effectively. All licensees have i
responded to GL 98-01, stating that they have adopted plant-specific programs that are intended
,j.-
to make the plants Y2K ready by July 1,1999. GL 98-01 also requests a written response, no
~ later than July 1,1999, confirming that these facilities are Y2K ready, including contingency planning. Licensees who are not Y2K ready by July 1,1999, must provide a status report and schedule for the remaining work to ensure timely Y2K readiness.
i
(
l As part of its oversight of licensee Y2K activities, the NRC staff conducted sample audits of 12 plant-specific Y2K readiness programs. The objectives of the audits were as follows:
4 l
1.
To assess the effectiveness of licensee programs for achieving Y2K readiness l-and in addressing compliance with the terms and conditions of their license and NRC regulations and continued safe operation.
18
i 2.
To evaluate program implementation activities to ensure that licensees are on schedule to achieve Y2K readiness in accordance with GL 98-01 guidelines.
3.
To assess the licensee contingency planning for addressing risks associated with events resulting from Y2K problems.
NRC staff determined that this approach was an appropriate means of oversight of licensee Y2K readiness efforts because: (1) alllicensees had committed to the nuclear power industry Y2K readiness guidance (NEl/NUSMG 97-07) in their first response to NRC GL 98-01; and (2) the audit would verify that licensees were effectively implementing the guidelines. The j
sample of 12 licensees included large utilities such as Commonwealth Edison and Tennessee Valley Authority, as well as small single-unit licensees such as North Atlantic Energy (Seabrook) and Wolf Creek Nuclear Operating Corporation. NRC staff selected a variety of types of plants of
~
different ages and locations in this sample in order to obtain the necessary assurance that nuclear power industry Y2K readiness programs are being effectively implemented and that licensees are, on schedule to meet the readiness target date of July 1,1999, established in GL 98-01.
in late January 1999, NRC staff completed the 12 audits. On the basis of the audit observations, NRC staff has concluded that licensees are effectively addressing Y2K issues and are undertaking the actions necessary to achieve Y2K readiness in accordance with the GL 98-01 target date, although some plants will have some remediation, testing, and final certification scheduled for the fall 1999 outage. NRC staff did not identify any issues that would prevent
- these licensees from achieving readiness.
19 t
The NRC staff is not aware of any Y2K problems in nuclear power plant systems that directly affect actuation of safety functions, including the emergency onsite power splems.
Moreover, NRC audit results to date have not identified any associated residual Y2K problems with the emergency onsite power system and have confirmed the licensees' consideration of these systems. Also, the audits did not identify any Y2K problem in safety-related activation systems.
Additionally, the NRC's regional staff reviewed Y2K activities at all operating nuclear power plants to verify the status of licensee efforts to ensure that all plants will be able to function safely on January 1,20M. and beyond. These reviews: (1) verified that all NRC licensees have implemented Y2K progru cuvities; (2) evaluated the progress made to ensure that the.
j licensees are on schedule to achieve Y2K readiness; and (3) assessed license.es' contingency plans for addressing Y2K-related issues. The reviews were completed by July 1999.
I The NRC staff audited the contingency planning efforts of six licensee facilities. The audits at these facilities examined in hetail backup measures the utilities have in place to deal with possible Y2K problems, either on site or off site, that might affect plant operations. The 1
audits were conducted in May and June 1999, i
The reviews and audits will allow NRC staff to verify the progress of alllicensees and i
determine whether any regulatory action is needed. Information from the reviews will be used in i
conjunction with the status reports that NRC has required its nuclear power plant licensees to provide by July 1,1999. By July 1,1999, all licensees responded to GL 98-01, Supplement 1.
l.
20
g L
The responses indicated that 68 plants s're Y2K ready and 35 plants need to complete work on computer systems or devices after July 1,1999.
NIRS presents no information or argument why these actions by the licensees, the nuclear industry, and NRC 'are not sufficient to ensure that onsite back up and alternate ac power systems will not be adversely affected by Y2K-induced problems.
2.
Specific Backup Power Sources Proposed by NIRS The petitioner's proposed attemative backup power sources, such as solar and wind, are not reliable backup power sources because of their undependability under unpredictable weather conditions or because they are limited by the amount of powerthey can generate. Additional
+
- comments received by the NRC in response to the petition also suggested the requirement for altemate power. The petitioner does not provide sufficient technical information to demonstrate -
l; that thase additional attemative backup power sources would add more reliability than current
- backup power sources. Therefore, most of the sources of alternative backup power that are included in NIRS' proposed rule would not constitute an acceptable alternative source of backup power with the same level of availability and capability as diesel generators.
C.
Soent Fuel Pool Class 1E Classification and Backuo Power l-The proposed rule would require all Part 50 licensees to immediately classify irradiated
- (spent) fuel pools as Class 1-E and provide sufficient backup powe to provide cooling to these
- pools.' Because Class 1-E is an electric system classification, the NRC assumes that the 21 l.
L.:
C
. petitioner intends the rule to require that the backup power supply for spent fuel pool cooling j
' systems be classified as Class 1-E.
l l
The petitioner does not explain why classification of the electric power system for spent
- fuel pool cooling systems as Class 1-E is necessary to protect spent fuel pools against a Y2K-induced LOOP. The Class 1-E classification addresses design and quality assurance (QA) requirements for manufacture and installation of electrical system components. Most of these l
systems are based upon analog controls and, therefore, are not subject to Y2K problems.
Furthermore, simple reclassification of the electrical power system by itself would not appear to have any direct effect on minimizing Y2K-induced loss of power necessary for spent fuel cooling.
Rather, an evaluation of the power system for Y2K susceptibility is necessary, which is what licens$ees have committed to implement. Thus, it is unclear howthe requested requirements in the NIRS petition would provide assurance that Y2K problems will not prevent electrical power systems from performing their necessary safety functions. The NRC concludes that a rule
)
l change is not necessary since licensees are alresay directly addressing spent fuel pool cooling i-as part of their Y2K programs.
I j
Furthermore, the NRC does not agree that a backup source of electrical power for spent j
)
j fuel cooling is necessary at nuclear power plants in order to provide reasonable assurance of i
adequate protection. At most operating nuclear power plants, the emergency onsite power system can directly supply electric power to its spent fuel pool cooling systems. At those plants i
at which the spent fuel cooling system is not directly connected to the emergency onsite power system, the capability exists 'of connecting the cooling system to the emergency onsite power system. Requir'ng a backup (testiary) source of electrical power is not justified in view of the le;igth of time between loss of spent fuel cooling and the point at which there is a significant 22 L'
L
i a
,s threat to integrity of the spent fuel rods. A licensee is required to keep the spent fuel pool filled to a level more than' 23 feet above the top of the fuel rods and, generally, the water temperature in
~ the pool is to be maintained below 140 4. For a typical pool with a capacity of about 400,000 L
gallons and a worst case heat load causing 50 gpm of water loss as a result of evaporation, it would take about 3 days for the pool level to drop to the top of the fuel racks. This estimate does i
not include the heat-up time of 3 to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for the pool water to increase from 140 4 to 212 4.
This scenario assumes a total loss of all ac electric power and that no corrective actions are
' taken for 3 days in response to the decreasing water level in the spent fuel pool. For a typical L heat load (non-refueling), the time to uncovering of the spent fuel pool would be around 2 weeks,
-again assuming that no make-up water is added to the pool. Upon loss of water shielding, the radiation levels above the pool would increase. Assuming LOOP and failure of onsite emergency
.I power sources, the only action necessary would be to provide make-up water to the spent fuel pool. The existing plant operating / emergency procedures provide for initiation of make-up water to the pool upon detection of low level. At many plants, the make-up water supply is provided by
. a plant safety system. Upon loss of all ac power, make-up water from any tource, such as fire hoses supplied by diesel-driven fire pumps, can be used to maintain the required water level in the pool. -In light of the substantial period of time available for a licensee to take mitigative i
. actions upon loss of spent fuel pool electrical power, the NRC concludes that providing an additional backup source of power is not warranted at any operating nuclear power plant.
1 11.
Pan 50 Decommissioning Nuclear Power Plants.
i l
. There are 21 permanently shutdown nuclear power plants which have been shut down for 1more than a year. Six of these facilities have removed all spent fuel from the site. Therefore, 23 l
4
o l,
there are only 15 decommissioning power plants to which the proposed requirements in the petition would potentially apply.
Spent fuel pool cooling and support systems may be configured differently for decommissioning plants than for operating reactors due to the reduced need for decay heat removal at decommissioning plants. As decay heat loads drop, utilities are able under 10 CFR 50.59 to remove equipment from service once it no longer is needed to provide its safety function. At some plants there is no need for forced circulation to remove heat from the pool as adequate heat loss to ambient keeps the pool at an acceptable temperature. After a period of decay in the spent fuel pool, the heat load from spent fuel is significantly reduced as short-lived fission products decay. Consequently, the potential for boiling is reduced and the time available for the licensee to take mitigative action is greater. With the exception of Zion and Big Rock Point, more than three years has elapsed since any fuel was irradiated in the reactor at any of the nuclear power plants currently undergoing decommissioning.
The reasons discussed in Section I.C above regarding why electrical systems need not be classified Class 1-E for spent fuel pools at operating nuclear power plants also apply equally to decommissioning nuclear power plants. As previously noted, requiring a backup source of electrical power is not justified in view of the length of time between loss of spent fuel cooling and the point where there is a significant threat to integrity of the spent fuel rods. Upon loss of all ac power, make-up water from any source, such as fire hoses supplied by diesel-driven fire pumps, j
can be used to maintain the required water level in the pool.
In view of the long time period available for the licensee to respond to loss of power to the L
spent fuel pool cooling system and the relative simplicity of mitigative actions, the requirements 24 f
l
r i
proposed by NIRS with respect to spent fuel pool electrical system reclassification and the provision of alternative power are notjustified.
111.
Part 50 Non-Power Reactor Licensees.
l Non-power reactors operate at power levels ranging from 250 KWt to 2 MWt, and they operate at low temperatures. Any non-power reactor in operation on January 1,2000, can be readily shut down manually using emergency procedures and existing shutdown systems. These reactors have passive safety features and generally do not require power to shut down and dissipate decay heat. Accordingly, NRC regulations do not currently require Part 50 non-power reactors to provide a backup power source NIRS did not present any information or rationale why Part 50 non-power reactors must provide an " alternate" source of backup power to address Y2K losses of power. In particular, i
NIRS did not address the fact that these facilities are not required to have a backup power source because power is not required to shut down and maintain these facilities in a safe-shutdown condition. In the absence of any rationale in support of the proposed requirement, the Commission concludes that there is no basis for adopting the proposed requirement for Part 50 non-power reactor licensees.
IV.
Part 70 Licensees l
To alert major Part 70 licensees of the Y2K problem, NRC issued Information Notice (lN) l 96-70 in December 1996, and IN 98-30 in August 1998. In IN 96-70, NRC staff described the 25 l
i l'
L potential Y2K problems, encouraged licensees to examine their uses of computer systems and j
software well before the year 2000, and suggested that licensees consider appropriate actions to examine and evaluate Pwir computer sy' stems for Y2K vulnerabilities. In IN 98-30, NRC staff provided definitions of "Y2K ready" and "Y2K compliant," encouraged licensees to contact I
. vendors and test their systems for Y2K problems, and described elements of a Y2K readiness program.
~
in orderto gather Y2K information regarding materials and major fuel cycle facilities, NRC
- formed a Y2K Team within the Office of Nuclear Material Safety and Safeguards (NMSS) in 1997. From September through December 1997, this NMSS Y2K Team visited a cross-section of materials licensees and fuel cycle facilities and conducted Y2K interviews. Each licensee or 4
b'-
facility visited by the team indicated that it was aware of the Y2K issue and was in various stages of implementing its Y2K readiness program.
On June 22,1998, the NRC siaff issued Generic Letter (GL) 98-03, "NMSS Licensees' and Certificate Holders' Year 2000 Readiness Programs," requested major Part 70 licensees to inform NRC of the status of their Y2K readiness programs. In GL 98-03, the NRC staff requested all major Phrt 70 licensees to submit by September 20,1998, written responses regarding their facility-specific Y2K readiness program in order to confirm that they were addressing the Y2K problem effectively. All licensees responded to GL 98-03 by stating that they had adopted a i
facility-specific Y2K readiness program, and the scope of the program included identifying and, where appropriate, remediating embedded systems, and provided for risk management and the development of contingency plans. GL 98-03 also requested a written response, no later than December 31,1998, which confirmed that these facilities were Y2K ready or provided a status 26 1
In
.h
p l
report of work remaining to be done to become Y2K ready, including completion schedules. All 1
licensees provided a second response to GL 98-03, which provided reports of work to be done, i
i including completion schedules. Furthermore, following the second response, NRC requested a third written response, no later than July 1,1999, which would confirm that these facilities were 1
Y2K ready or would provide an updated status report.
l Between September 1997 and October 1998, the major fuel cycle facilities were also asked Y2K questions during other inspections. On the basis of these Y2K inspections, the licensees were aware of the Y2K problem and were adequately addressing Y2K issues. There have been no identified risk-significant Y2K concems for major Part 70 licensees.
4 NIRS presents no information or argument why these above-mentioned actions by the licensees and NRC are not sufficient to address Y2K problems and provide reasonable assurance of adequate protection during the transition from 1999 to 2000.
EDG Reliability and Fuel Suoolv The requirements proposed in the NIRS petition would require that: (1) all EDGs that provide backup power be operational and (2) licensees have a 60-day supply of fuel for EDGs or the facility would be shut down. The petitioner indicated these requirements are necessary to protect public health and safety. However, there are no Part 70 licensees required to have EDGs in order to provide backup power to protect public health and safety. In the event of the loss of electric power in Part 70 facilities, processing stops and there is no need for electric power to L
maintain a safe condition. There are some Part 70 licensees who have independent power f
27
l-sources in order to meet physical protection (PP) requirements. These licensees are also 1
l required to have contingency plans for PP (e.g., augmented guard force) in the event of loss of independent power. Based on the above discussion, the 60-day fuel supply requirement is also not needed for Part 70 licensees to prowde reasonable assurance of adequate protection to public health and safety.
. )
\\
The petitioner does not provide sufficient technicalinformation to demonstrate that Part 70 licensees must shut down if they do not have EDGs providing backup power or must have a 60-day fuel supply for EDGs.
Additional Alternate Means of Backuo Power NIRS asserted that NRC must require licensees to provide alternate means of backup j
power (e.g., solar power panels, wind turbines, hydroelectric power, biomass power). As stated above, it is not necessary for Part 70 licensees to have backup power in order to shutdown to a safe condition. Also, Part 70 licensees who are required to have independent power sources to meet PP requirements have contingency plans to meet the loss of the back-up power. Further, the petitioner does not provide sufficient technical information to demonstrate that these altemative back-up power sources are needed to to provide reasonable assurance of adequate protection to public health and safety.
28
i i
Back-un Power Suoniv for Spent Fuel Pool Coolina System
. The proposed rule in the NIRS petition requests NRC to require that all licensees immediately classify irradiated fuel pools as Class 1-E, and provide sufficient back-up power to provide coohng to these pools Because Class 1-E is an electric system classification, the NRC staff assumes that the petitioner intends the rule to apply to the back-up power supply for spent i
fuel pool cooling systems. Although some Part 70 licensees have irradiated fuel at their facilities, these facilities do not store large quantities of irradiated fuel. The irradiated fuel is used for research and development or educational purposes. If the irradiated fuelis stored in a pool, the heat generated from the fuel would be minimal and would not require a pool cooling system.
Ihe petitioner provides no technical justification to support the proposal that spent fuel j
- pools be immediately classified as Class 1-E. The regulatory action requested by NIRS is not required for Part 70 licensees.
Conclusion l
Existing NRC requirements, licensee commitments, and licensee activities and programs are sufficient to cope with losses of power, including those losses of offsite power that could be caused by Y2K problems. NIRS has not presented any information either that existing requirements and licensee commitments are inadequate to address losses of power due to Y2K problems, such that the requirements proposed in NIRS' petition are necessary to provide l
reasonable assurance of adequate protection to public health and safety. Accordingly, the l
Commission denies the petition.
29 l
l
4 Dated at Rockville, Maryland, this l7 day of
[6m
.1999.
i Far the Nuclear Regulatory Commission.
f&
EA Andrew L Bates Acting Secretary of the Commission.
8 0
30
F dI6k 1
UNITED STATES l
j NUCLEAR REGULATORY COMMISSION
(
e wAsmNOToN, D.C. 200E-ONI s
/
July 19, 1999 MEMORANDUM TO: William D. Travers Executive Director for Operations FROM:
Na hihector Office of Nuclear Reactor Regulation
SUBJECT:
PRELIMINARY REPORT ON NUCLEAR POWER PLANT YEAR 2000 READINESS Thb memorandum provides the staffs preliminary report on nuclear power plant (NPP) year 2000 (Y2K) readiness. The report integrates the results of regional staff reviews (conducted at cach NPP site during the April-June 1999 period) with the initial Headquarters staff review of licensee responses to Generic Letter (GL) 98-01, Supplement 1, " Year 2000 Readiness of Computer Systems at Nuclear Power Plants." Additional review and followup activities are continuing; a final report is expected in the form of a NUREG and will be issued by August 31, 1999. This preliminary report, as well as the final NUREG, will be placed in the Public Document Room and on the NRC's Y2K Web site.
Regional staff reviews of licensee Y2K activities were conducted at each NPP site during the
]
April-June 1999 period following the guidance of Temporary Instruction 2515/141," Review of i
Ycar 2000 (Y2K) Readiness of Computer Systems at Nuclear Power Plants." The reviews were conducted to verify that licensee Y2K programs and processes were being implemented consistent with the industry guidance in Nuclear Energy Institute / Nuclear Utilities Software Management Group (NEl/NUSMG) 97-07, " Nuclear Utility Year 2000 Readiness," and NEl/NUSMG 98-07, ' Nuclear Utility Year 2000 Readiness Contingency Planning," both of which h va been found acceptable by the staff. Because of the timing of the regional reviews, there were instances in which licensee activities had not progressed sufficiently for the NRC staff to conclude that all activities were being implemented in accordance with industry guidance.
On the basis of its review of the 103 operating power plant Y2K programs, the staff concludes that licensees for 89 nuclear power plants have implemented Y2K programs consistent with industry guidance. As described in the report, the staff has identified 14 plants at which a followup review will be conducted to provide a high level of confidence that licensee Y2K activities have been implemented consistent with industry guidance. Licensees for 10 of the 14 plants reported that they had completed their Y2K readiness activities by July 1,1999. The followup onsite reviews are expected to be completed by August 13,1999.
As reported in Press Release 99-138, issued on July 7,1999, the NRC received responses to GL 98-01, Supplement 1, from licensees for all 103 operating nuclear power plants indicating i
that there are no Y2K-related problems that directly affect the performance of safety systems.
CONTACT:
M. Waterman, NRR/DE 415-2818 ENCLOSURE 4 9(
n 2-t'.
. W. D. Trev:rs Licensees for 68 of the 103 plants reported that all their computer systems a eN components that support plant operations are "Y2K ready."
Uoonsee reports also indicated that to be fully Y2K ready, licensees for 35 plan additional work to complete on a few non-safety systems or components. Thes provided scheduled completion dates for their plants. Of these 35 pl components that could affect power generation (e.g., digital feedwater con ht performance monitonng systems). The remaining 17 plants have syste do not affect power generation (e.g., plant simulators and administrative sy maintenance activities). None of the remaining work in the 35 plants affects 999, is plant to shut down safely, if necessary. Typically, completion of Y2K wo i
necessary because of a scheduled plant outage in the fall of 1999 or because if waiting for delivery of a replacement component. The staff is committed the completion of the remaining Y2K items at each of these 35 plants.
If, by September 30, Alllicensees are expected to be Y2K ready before December 31,1999.
31,1999 - January 1, 2000, transition, NRC will ta of shutdown orders,if warranted.
Attachment:
Preliminary Report -
1 I
- o i
i ar i
PRELIMINARY REPORT ON NUCLEAR POWER PLANT I
YEAR 2000 READINESS July 16,1999 i
j
Contact:
Michael E. Waterman Electrical & Instrumentation and Controls Branch Division of Engineering Office of Nuclear Reactor Regulation ATTACHMENT
\\t*
CONTENTS-
~>.
ii Executive Summary............
1
1.0 INTRODUCTION
2.0 BACKGROUND
3 3.0 REVIEW AND INTEGRATION APPROACH
.3 3.1 Site Review Methodology.......
.4 3.2 Integration Process..
5 4.0 NRC Y2K REVIEW RESULTS AND FOLLOWUP ACTIONS
..6 5.0 PRELIMINARY CONCLUSIONS.
Tables 7
1 Plants Requiring Tl 2515/141 Followup Reviews 2 Plants With One or More Systems and Components That
.8 Could Affect Plant Operations 3' Plants With Systems and Components That 10 Do Not Affect Plant Operations
... 12 4' Plants Reporting Y2K Readiness on July 1,1999.
i e
e PRELIMINARY REPORT ON NUCLEAR POWER PLANT YEAR 2000 READINESS July 16,1999 Executive Summary This report integrates the results of the staff's onsite Year 2000 (Y2K) readiness reviews of 103 nuclear power plants (NPPs) and licensee responses to Generic Letter (GL) 98-01, Supplement 1, " Year 2000 Readiness of Computer Systems at Nuclear Power Plants." The onsite reviews were based on acceptance criteria developed from the staff-accepted industry guidance provided in Nuclear Energy Institute / Nuclear Utilities Software Management Group (NEl/NUSMG) 97-07, " Nuclear Utility Year 2000 Readiness," and NEl/NUSMG 98-07, " Nuclear Utility Year 2000 Readiness Contingency Planning."
On the basis of the staffs onsite reviews of licensee Y2K readiness activities at the 103 operating U.S. NPPs, the staff concludes that the licensees for 89 of the 103 NPPs have followed Y2K programs that are consistent with industry guidance. By August 13,1999, the staff will conduct followup reviews of the remaining 14 plants to verify that licensee Y2K readiness activities are consistent with staff-accepted industry guidance.
Licensee responses to GL 98-01, Supplement 1, indicate that licensees for 68 nuclear power plants have achieved Y2K readiness as of July 1,1999, Of the remaining 35 operating NPPs, licensees for 18 plants have yet to achieve Y2K readiness for digital systems or components that could affect' plant operations. None of these systems or components are part of the safety systems designed to shut down a reactor or activate systems and components required for accident mitigation. Each of these plants has a small number of incomplete items; typically, the licensee is awaiting delivery of a replacement component or a scheduled outage in the fall of 1999. The staff will verify completion of the remaining activities for all 35 plants as Y2K readiness activities are completed. All NPPs are expected to be Y2K ready before the transition from 1999 to 2000.
1 ii j
1.0 INTRODUCTION
staff review of licensee responsts to GL 98-01, d
t
' ~ This report integrates the initial Hea quar ers Supplement 1, " Year 2000 Readiness of Computer Systems at Nuclea results of regional staff reviews conducted at each NPP site during the Ap Addshonal review and followup activities are continuing; a final report is be This preliminary report, as well as the
' form of a NUREG and will be issued by August 31,1999. final N
' site.-
Regional staff reviews of licensee Y2K activities were conducted at each April-June 1999 period following the guidance of Temporary Instruction of Year 2000 (Y2K) Readiness of Computer Systems consistent with the industry guidance in NEl/NUSMG 97-07 and NEl/NUSMG which have been found acceptable by the staff, Addit l t d roblems l 1, from licensees of all 103 operating NPPs indicating t
. regarding Y2K readiness have been incorporated into in this report.
fNRC Section 2.0," Background," summarizes the nature of the Y2K problem, the history o f
activities related to resolution of this problem in the nuclear power industry, and the activities conducted by the staff to verify that licensees will be Y2K ready Section 3.0, " Review and Integration Approach," describes the methodolog lt f
staff to perform the 66 NPP onsite reviews of licensee Y2K activities and int the site reviews with the responses to GL 98-01, Supplement 1. Section 4.0
- Results and Followup Actions," summarizes the results of NRC staff review program activities and the licensee responses to GL 98-01, Supplement
" Preliminary Conclusions," describes preliminary staff conclusions regard 4
U.S. NPPs;
2.0 BACKGROUND
The Y2K computer problem pertains' to the potential for date-related pro a software system or an embedded digital component. These problems include representing the year properly, not recognizing lea rather than 2000, which could cause some computer systems to malfunction. A system or an embedded component that is dete ent L into, and between the years 1999 and 2000. A software system or an embed that is determined to be "Y2K ready" performs its functions correctly, although component is not Y2K compliant.
In NPP safety systems and plant operations systems that use software components, the Y2K problem could cause an event such as a plant t 1--
e
=
L
' that either report post-sh'utdown' plant status or that support emergency data collection L
capabilities. Additionally, to the extent that a Y2K deficiency could cause an NPP trip or transient, the resulting loss of electrical generation could introduce an electrical distribution grid instability and a resulting loss of offsite power. Y2K issues can also affect plant support or
~
- admirustrative systems. Most NPP safety systems are analog systems and, consequently, are f
not affected by Y2K issues.
Since 1996, the NRC has been working with NPP licensees to ensure that NPP systems are Y2K ready before 2000. To ensure that senior level management at operating U.S. NPPs were aware of the Y2K issue, the NRC issued information Notice (lN) 96-70, " Year 2000 Effect on Computer System Software," on December 24,1996. In IN 96-70, the staff described the potential problems that nuclear facility computer systems and software might encounter during the transition from 1999 to 2000. The NRC sent copies of this information notice to all U.S. NPP licensees, fuel cycle facility licensees, and nuclear materials licensees.
In 1997, the NEl took the lead in developing industry-wide guidance for addressing Y2K issues in the nuclear power industry and, with cooperation from the Nuclear Utility Software Management Group (NUSMG), issued NEl/NUSMG 97-07. Subsequently, NEl and NUSMG issued NEl/NUSMG 98-07. In Generic Letter (GL) 98-01 and its supplement, the NRC accepted the guidance provided in NEl/NUSMG 97-07 and NEl/NUSMG 98-07 as appropriate methodologies for addressing Y2K readiness in NPPs.
In GL 98-01, the NRC requested all helders of operating licenses for NPPs to inform the NRC of
- steps they were taking to ensure that computer systems will function properly by 2000. All licensees responded to GL 98-01, stating that an NRC-accepted program (NEl/NUSMG 97-07 and NEl/NUSMG 98-07) had been adopted, the program addressed both safety-related and non-safety-related systems and components, and the plants would be Y2K ready by 2000. GL 98-01 also required the licensees to confirm that their plants would be Y2K ready, including contingency planning, no later than July 1,1999. Licensees not Y2K ready by July 1,1999, were required to provide a status report, including completion schedules for work remaining to be done, to confirm their plants would be Y2K ready by 2000.
Beginning in mid-1998, the NRC audited 12 Y2K progroms at different NPP sites. The staff did not identify any Y2K issues that would preclude the audPed licensees from achieving Y2.K readiness..The information obtained during these audit 6 and from other licensees and industry
]
groups indicated that significant Y2K problems do not exist in those NPP systems that affect the ability to safely operate and shut down NPPs. Howevor, licensees have discovered Y2K problems in non-safety (but nevertheless important) computer-based systems, such as security computers, control room display systems, engineering software, control systems, radiation monitoring systems, emergency response systems, and ccmmunic:ti:n: systems.
The NRC issued S0pplement i to GL 98-01 in January 1999. The scope of this supplement is i
broader than the scope of the original GL 98-01. The supplemental request for information, which was voluntary and also due by July 1,1999, expanded the scope of the reporting l
- requirements to include systems that are not addressed by the plant license and NRC regulations but are necessary for continued plant operations.
i
~ #
i
)
in M:rch 1999, tha NRC cxpand:d its scope of Y2K readin:ss program reviews to include all operating NPP sit:s. Thes] 66 sita r;vi;ws, covtring 103 NPPs, w:re compl:tsd by Jun3 i
1999. As described in Section 4.0, the staff evaluated the reviews and is scheduling followup reviews for selected plants that had not sufficiently completed Y2K readiness preparations 1 time of the site reviews.
During May and June 1999, the staff also conducted six detailed audits of licensee contin planning activities. In these audits, the staff reviewed approximately 15 to 20 licensee and component contingency plans, contingency plans for internal facility risks, contingency plans for external risks, and the integrated contingency plan (typically, in the 66 onsite the staff reviewed 6 contingency plans for software or components). The acceptance criteria fo these audits were the same as the acceptance criteria used in the 66 NPP onsite reviews.
By July 1,1999, the staff had received responses to GL 98-01, Supplement 1, from licen all 103 operating NPPs. As described in Section 4.0, the staff reviewed these responses and integrated the results of these reviews with the results of the staffs onsite reviews of licensee Y2K readiness programs.
3.0 REVIEW AND INTEGRATION APPROACH This section describes the methodology used by the NRC staff to conduct Y2K reviews at each of the 66 NPP sites comprising the 103 operating NPPs and the integration of those review results with the licensee responses to GL 98-01, Supplement 1.
3.1 Site Review Methodology The NRC conducted reviews at each NPP site. These reviews addressed 452 acceptance criteria (Tl 2515/141, A*rpendix A) that were based on guidance provided in NEl/NUSMG 9 and NEl/NUSMG 98-07. A checklist format was used to ensure that the reviews w conducted consistently at each NPP site. Additional guidance for completing the checklists was provided to NRC reviewers in training sessions and in telephone calls between the reviewe and NRC Headquarters staff.
The checklist is divided into three major areas of Y2K readiness acceptance criteria: (1) planning and initial assessment, (2) detailed assessment, and (3) contingency planning. The three major areas are further subdivided into more specific areas of acceptance criteria, whi are shown in the following list:
Planning and initial Assessment Management Planning Documentation implementation Plans e
Initial Assessment.
p A
.?"
l Detailed Assessment'-
. System / Component Detailed Assessment t System / Component Remediation
- e' System / Component Testing and Validation 4-System / Component Notification I
Contmgency Planning -
System / Component Contingency Planning l
l Contingency Planning for intamal Facility Risks -
Contmgency Planning for Extemal Risks Integrated Contingency Planning
' To review detailed assessment activities, the staff selected a system or a component from each of the following six plant system classes:
1 Reactor Protection System / Engineered Safety Features System (including emergency diesel generators)
Feedwater System / Balance of Plant Systems -
Radiation Monitoring Systems Emergency Notification Systems.
Plant Process Computer Systems t
Plant Security Systems One syster6 or component from each of these system / component classes was reviewed during each NPP onsite review. The one exception to this approach occurred in several of the older plants in which no digital systems or components are used in the reactor protection system or the engineered safety features systems (i.e., there are no potential Y2K vulnerabilities in these systems because the systems use only analog technology). These six classes of plant systems were chosen to ensure that any system or component could be reviewed by the NRC dunng the plant onsite review, thereby allowing the staff to assess the full scope of each licensee's Y2K readiness program.
3.2 Integration Process The integration process to develop an overall perspective of licensee Y2K readiness involved a three-step process. The first step involved staff onsite reviews of licensee Y2K readiness activities during the April-June 1999 period using the acceptance criteria checklist described in Section 3.1, above. The second step involved a review of licensee GL 98-01, Supplement 1, responses, all of which were received from the licensees by July 1,1999. The final step involved integration of the results of the first two steps to determine licensee Y2K readiness and the need for regulatory followup actions. The results of the third step are discussed in Section 4.0.'
In the first step, the NRC staff reviewed Y2K readiness programs and implementation progress l at each of the 66 NPP sites comprising the 103 operating NPPs. Because of the timing of the l
onsite reviews, the staff expected to identify instances of incomplete Y2K readiness. Each l
~
review involved discussions with the licensee's Y2K technical staff and reviews of licensee i !
~
E_
documents cnd work prcctices. To cnsura consist:ncy in the rsvi:ws, the staff d veloped ccceptrnce crit:ris in tha form of a 452-qu:stion chicklist, which is described in S:ction 3.1.
These checklists were completed by NRC staff reviewers and forwarded to the Headqu;rters i
l staff for evaluation and integration with the licensee responses to GL 98-01, Supplement 1. The staff's onsite review activity'was documented in routine Resident inspector reports.
In the second step, NRC staff reviewed licensee responses to GL 98-01, Supplement 1. In responding to GL 98-01, Supplement 1, licensees provided the expected completion date of j
their Y2K readiness program and, if the completion date was later than July 1,1999, the licensee's schedule for completing Y2K readiness activities. Licensee responses to GL 98-01, Supplement 1, are available in the PDR.
in the third step, the NRC staff reviewed the acceptance criteria checklists prepared by the NRC staff reviewers and integrated the results of these reviews with the licensee responses to GL 98-01. The results of this integration process are provided in the following section.
4.0 NRC Y2K REVIEW RESULTS AND FOLLOWUP ACTIONS l
The staff compared the results of the acceptance criteria checklist assessments from the onsite reviews with the licensee responses to GL 98-01, Supplement 1, to identify areas requiring additional staff followup actions and reviews. All licensees were following the NRC-approved industry guidance and, at the time of the staff's site review. 89 NPPs were sufficiently complete reviews were closed. Even though the Tl was closed, in some cases, (17 that the Tl 2515/141 NPPs) a licensee had not completed all Y2K activities at the time of the staff's onsite review (some reviews were conducted in April and early May). For example, the licensee may not ha completed remediation of a plant system or a component, or may not have completed some aspect of contingency planning activities at the time of the staff's review. However, the staff found that sufficient work had been completed in related Y2K activity areas such that the staff had a high level of confidence that the unreviewed activities would be completed consistent w industry guidelines. Because the overall implementation progress at the NPP was close to complete, these NPPs will not receive followup reviews.
Fourteen NPPs had not sufficiently completed Y2K activities at the time of the site review. The staff concluded that these licensees were following the industry guidance but that a followup review would be appropriate before closing Tl 2515/141. Table 1 lists the 14 plants that will receive followup reviews by August 13,1999.- Licensee responses to GL 98-01, Supplement 1, reported that 10 of these 14 plants were Y2K ready.
Responses to GL 98-01, Supplement 1, indicated that licensees for 35 of the 103 operating
- NPPs have additional work to complete on a few non-safety computer systems or devices in order to be fully Y2K ready. The licensees provided scheduled completion dates for these plants. Tables 2 and 3 list the NPPs that licensees reported were not Y2K ready on July 1 1999, the latest scheduled completion dates for Y2K-related activities, the systems requiring Y2K remediation, and the reason for the delay. Typically, completion of Y2K work after July 1, 1999, is necessary because of a scheduled plant outage in the fall of 1999 or because the licensee is waiting for delivery of a replacement ccmponent.
e i
Of the 35 NPPs that were not Y2K ready on July 1,1999,18 plants have systems or components that could affect plant operations, for example, digital feedwater controls and core performance monitoring systems (see Table 2). The remaining 17 plants have systems or components that do not affect plant operations, for example,' plant simulators and administrative systems that track maintenance activities (seeTable 3).. None of the remaining work at the 35 NPPs affects the ability of a plant to shut down safely, if necessary. The staff will verify completion of the remaining Y2K items at each of the 35 NPPs.
Table 4 lists the 68 plants that have been reported as Y2K ready in the licensee responses to GL 98-01 Supplement 1.
5.0 PRELIMINARY CONCLUSIONS On the basis of the results of the staff's Y2K site reviews of the 103 operating NPPs and the licensees' responses to GL 98-01, Supplement 1, the following preliminary conclusions are
~
provided:
1.
Alllicensees are following the staff-approved industry guidance of NEl/NUSMG 97-07 and NEl/NUSMG 98-07 to address the Y2K issue. At the time of the staff's initial review, licensees for 89 NPPs had implemented Y2K programs consistent with industry guidance.
The staff will conduct followup reviews of the remaining 14 NPPs (see Table 1) to review Y2K-related activities that could not be addressed during the Y2K site reviews conducted by the staff in the April - June 1999 review period.
2.
Eighteen NPPs reported systems and/or components that had not been replaced or remediated by July 1,1999, and could affect plant operations (see Table 2). The staff will verify completion of the remediation activities for these systems and components as they are completed.
3.
Seventeen NPPs reported systems and/or components that had not been replaced or remediated by July 1,1999, and do not affect plant operations but require Y2K remediation (see Table 3). The staff will verify completion of the remediation activities for these systems and components as they are completed.
As of July 1,1999,68 plants have reported being Y2K ready (see Table 4). All licensees 4.
are expected to be fully Y2K ready before the transition from 1999 to 2000.
The results of the staff reviews will be incorporated into the staff's final NUREG report of licensee Y2K readiness activities, which should be issued by August 31,1999. _
Table 1 Plants Requiring Tl 2515/141 Followup Reviews NRC Areas to Be Reviewed During Followup Plant Region Detailed Assessment, Contingency Planning Beaver Valley 1 and 2 i
Detailed Assessment, Contingency Planning 1
Indian Point 2*
Three Mile island 1 1
Detailed Assessment Detailed Assessment, Contingency Plannirig i
Vermont Yankee ll Contingency Planning Summer
- Detailed Assessment, Contingency Planning Prairie Island 1 and 2*
lli IV Contingency Planning Arkansas 1 and 2*
Detailed Assessment, Contingency Planning IV Cooper
- Detailed Assessment, Contingency Planning IV Grand Gulf
- Detailed Assessment, Contingency Planning IV River Bend
- f IV Contingency Planning Waterford*
- Plants reporting Y2K Ready as of July 1,1999
. i
4 ecna t n p o y
ei a
ct cla le ala D
ets ro n
it t
n t
t t
t si n
n n
n g
f e
,l e
e e
e n
n d
ya d
d d
d it r n n
n n
n s
o n
ef i
s n
e v
e e
e e
n e
i d p
p p
p o
t a
o p
len e
e e
e it d
e it e
R ia d
da d
d d
d ia e
t d
e r,
e e
e e
d a
e g
og g
g g
g e
rg a
m a
d in a
a a
a m
t t
nt t
t t
t e
h e
u e s u
u u
u e
t e
n T
R O
Vt O
O O
O R
I s
tn 9~
9 9
9 9
9 9
9 9
e n
9 9
9 9
9 9
9 9
9 n
o
/
/
/
/
/
/
/
/
/
0 0
2 0
1 6
9 0
1 i
e 3
3 2
3 3
1 2
3
/
o t
p et
/
/
/
/
/
/
/
/
9 9
1 9
1 0
2 0
9 l
m pa 1
1 1
1 1
o mD C
o s
C dnno ai t sar me ep tsO dn yt n
a Sn o
m r e a
g i
el t
es m
e rP a
t a in m
m e
t u e r
o i
s t
t d
pl o
e s
y e
Mc e
mr mi s
e t
t y
s m
s t
e m
ot eo m
s lo r
n s
l y
o m me y
r m
f of e
cn s
ets e
t e
sm e
r eA R
gu y
t g
n t sy g
t t
et n
n s
t nd nl sy s
i n
o sys ir g
if it f
r o
c ys y
u l
y Ol n
de ai s
o c
s a
o s
c m
ic yt it n
t ho r
i ma a g
ee a
lo it a
n dr n
i iC n
r e
lu rl t
i nm it t s
a W
q i
df u
r v r
o o
o oo ap et t
t t
r e
t ee n
aisa m
o s
mt a a y
l dc r
e namss o
c s
d dnl it s
l s
R u
e n
nn i t r
cs i u y
d r
c ey aoeooe r
r o t
fi m o
h nepm c
o s
n s
gd sppt e
ny u is a
o at ss an r
i m
n a
m nayss u t
e t
e o
seep a
ai l
t p
r nmr g m
s it ir P
e r
i t
oct m
w mr g
c c
it t
r r o
y neecc c e
f e an u
le a yin r
ic a
u en r
c t i n
r 2
s it i nyyo d
o r
c cn o
s r
r s si n
e a ni r
y e
f epera e
h p
e nn e
S oh m eeg a
f e
nr n
e t
l eygt p
p o
b mp sggn la o
dt n
ib een e
e n
i pn et a
n dt rt s
t a
sr rd ei t o n
eee T
n r
n n ef amsmme it t
r r
r a
a t s ig ot ola ia u
i aml o
o a
r PAaEEt D
T FSEP C
C lp l
r tce f
2 f
2 a
d d
n d
n 1
a lu a
k 1
o 1
a c
n t
e t
n y
o a
a le P
1 y
k h
e n
e 2
lo t
l la k
P h
a e
s V
iw n
n C
ic c
r k
le m
c C
2 c
r o
y r
e e
s o
a lb le e
e it t
v n
t n
s m
p m
o y
a u
l o
ia e
r in ra o
B B
C C
D F
H iL M
S i
I n
c io e
t a
la lp la e
t r s sn omK t
i e2 n
t t
t y
n n
st Y e
re a
e e
t s d
d d
c yf d
n n
es o n
le r
e o
j D
e e
ot n p
t n
p r n o
e e
pe e e
n p
r o
cd d
o f
it g
a d
d g s n e
mn n
id e
e in ee g
eid o
e g
g ol p a
t o
a a
gs e t
sn t
s a
a m
h e
e u
u nb d u
ye t
t T
R R
O O
Ooi O
Sp n
s tn 9
n 9
e
/
n o
0 o) e 3
9 9
9 it
/
9 9
9 9
9 pd et
/
9 9
9
/
1
/
l me pa 1
/
/
1 o u mD 1
6 3
2 3
/
/
n 3
/
/
0 0
0 Ci o
/
0 1
1 1
t C
1 dn 1
1 no ac s (s m
mn eo m
e t
t i e
m s
st t
y ya n
s e
s r
m Se o
y t
s s
g i
ep t
y e
nt m
m m*
m s
ik s rO a
i o
d e
em o
cy e
r l
t a
m Mn e
t t
t e
r a s s
s
- st lame t
r r a m
y g
y ys mn oP e
s msy m*d ets o
n lo t
s l
e ei e gs emntsy c
mrk et R
g t
t t
n sng seays s
y e uc r
nc g
yi ytsgs a yr t sa t
r n Oe n
ir f
o soi ynyt so sor n
s r
o r
a rt ypt f
i l t l
r dr e n s xn er c sia oio o
htA it r
ni eo utet t
r r olp o
t e i
n t
r u
l i
o t on tntois et uv o
it pu n t
Wd q
n nisa pn r n a mo u
e m
o i
mpe l
oa t
m ciodn lu mi noc c
i omm c e s o R
e s
c o
d oi mrepm t f t
n eno e urt i
o n cal coip n
r n c
r cn nC s
o m
a a ai ane e ss a
i a cu it e
ed u sy q a
s t
t P
e m
wma wnt mr g st sn n a l
t a
r q eie r
u n
t doirb d a p a yi ee ibl t
r cr r ee o ug e
l r
r cn c
2 s
o m
u nn r cn p
edma ni o
ef v ea oper y
f o
er a
r e i
e S
e f
t r
nn pel ee e cygt u
f pr s e t
l laoo b
p pn ah t
u n
l l
t t rt t
ivl amla la o it ss n ef a
a a
i t
neen n c r
eb i
r g
a r
igree at e
t l i e e
f T
ir r
igou o
tce ffa 2
d 1
lu dn d
e o
a n
e c
2 3
a k
t 1
ls n
a tn m
m s
a o
o a
I a
h t
e Y
l t
t x
li t
t t
s P
o o
e B
B 1
T M
n m
o e
h h
m h
e m
s t
e t
c c
e u
r y
r a
a l
o h
e S
P P S
S T
V e
e a
lI
n, o
s' it y
a n
a o
d l
i n
ll e
ag t
D a
a t
n c
si t
nt ro i
n s
eis n
n fi f
it n
o io e
gt,e io o
d t
t t
t n n n
n t
n n
a o
mda nn ae e io it o
a e
o t
t nt c
n m
s n
it n
mn ia ia e
e a
e ia ea e ioo h
t c
r t it pa d
d m
c e
m d
agm laa n otp e
e e
lp e
e wne laf is vc ic gl a
R lp me os s i ee m
m lp t ilp r
t t
f e
I R
St i In e e ec e
e v
Dda R
R Im R
m em 9
9 9
9 9
9 9
9 9) s e
n 9
9 9
9 9
9 9
9 9 9
/
/
/
/
/
/
/
/
/
s o
0 1
5 9
0 1
1 59 e
1 i
/
t 3
3
/
1 2
3
/
3 1 7 h
e
/
/
et
/
/ /
t 8
/
/
/
8 0
0 2
0 9
0 7 7 n
l t
pa a
1 1
1 1
1
(
e h
mD ra T
o p
s C
t in n
e e
t n
a d
os t
pn n
e mio m
e m
h m
e t
ot e
e a
t c
s t
n Cr s
n s
s o
n n
la e
y e
y m
d p s
l s
s d
s m
e m
e aO o
nm ie a
e n
t t
t t
s e
i t
e e y
t t
e e v
m s
t s n a
ms u
o e
y ms s
lp t
r n
ma m
i t
s ey e e
o d
ey s
is s
m g
r r
eP e
gse l
s r
r r
y g
t tst m
at a o
e s
e n at a u
c n
f t
n si n
w p
s n
w p
lo yc m
m mfo yc e
a et m
is a et k
m a
Se R
m mfo e
d tr r
e es o
w f
s a f
h es n
gt t
t A g
ng s
d o
n t
ng c
s s
m n
oa s
y n
c i e oa s e
iWt y
e s
s a
k r i
o r
it n e n
cu s
in e v
t t
t aa c i
i sN u
i aa c n
n w
as g
mmo a
ih t
s no q
mmo m
it t
e o
r o n
r o
r r
t r
r t
d p
aD
,e osp r
a nx ir osp s
t R
f n o
e oe n
n in o
f n t
ioi m
w it it i ioi im h
l n
n P
a t
o s
i k la g
r l
a n n
st k t
a o
b o
o st u
3 m
a a c n
f c i m
ic c
d c
r s
see m
a i
o l
a yph s
t r
n r
i t e
i see a
i f
e t
e s
yph is m
la a
aid a
h o c c
a l
t l
b y
h o c T
S pr y n
c ic r
u a ig h ait g
e c
pr y is ic a
e qr y
d t
g n
l e
n hai i
n o
e lee lo lt l
u h
i r
r n
l lt le u a
acc ia ng o
g nn o
acc p
9 r
r nn r
eue h
9 eue t
en om m
oo o
h ns h ns t
eee ink ee a
ss e
lt
/
t i eee a
5 n
t t
c t
r r it it it l
a a e s e
ee e
a iiit e
1 t t y
t
/
SSS P
Mt Ms S
PP M
SSS H
7 r
no e
3 e
d s
n 2
2 2
n 2
e a
k d
d c
2 a
n n
d i
t e
a a
n l
n y
P e
1 e
1 it 2
k h
a a
rr s
a e
1 s
k n
r h
w lP e
e F
h e
o n
C a
e n
c s
n B
o A
y ic o
r C
o u
c n
a is h
e y
u L
le w
m v
r s
r q
e t
t r
o C.
o y
e e
t o
a B
C D
D N
O P
S S
T r
9 4
ya le t
D ne n
r d o
n t
io f
t e
n a
n p
e t
o e
m n
s d e
e a
e c
m e
g R
a la le p
p tu e
m O
R I
9 9 *)
9 s
n 9
99 9
es
/
/
o 9
5 9 1
e
/
/
3 h
it 2
1 1
/
t e
/
1 0
n
/
et 0
7
/
1 e
l t
pa 1
7 r
mD a
(
a h
p T) o n
C i
sde e
tn t
u e
a nin d
ot e
pn m
h o
t mc e
t n
o(
s o
Cs m
s d
y n
e do n
e t
m t
t n
ni o
s t
e e le a a t
y t
p i
a s
ms s r m
ey e e
mp d
e g
r o
i r
s at a c
etO e
tu n
n w
s st m
p et a nf a
yn e
m m
mr o w
Sa R
me o
es l
t c
ngs m
hP g
e s it n
sy e
oa s e
t t
in e t
Wc mys v
t i
sf u
e s a i
aa c i
r e
i t
s a
mmo r
r r
ih f
t nA q
syta t
t at R
sp o
is osp e
yadr t
l f n n a
t gis a in n
ioi s et o
l i -
h P N s
m s a t k t
3 o m
indn lu r r o d
cr c ie e
's eD e
oepim a
s e
yph t
t t t
ss s
b y
omr g ic ho c a
l i
s ne e c
pr y i
a S
m a yin s
ai d
t y
h r
T a
n r cn h
lt ;u a
p acc i
na ni 9
oper eue 9
i ygt h
h ns
/
tiat rt la eee t
5 een df a
e i i it 1
aaml t t
/
RSEP H
SSS 7
no e
4 es d
n n
e a
c 3
il t
h n
t iw t
a n
l io r
P P
a n
2 B
o y
m e
s ce t
k t
l le r
a e
a u
S T
W T
m
Table 4 Plants Reporting Y2K Readiness on July 1,1999 Plant Name NRC Region Calvert Cliffs 1 and 2 i
Fitzpatrick l
Ginna l
Indian Point 2 -
1 Indian Point 3 i
Limerick 1 1
Millstone 2 and 3 I
Nine Mile Point 1 and 2 I
Pilgrim i
Seabrook i
Susquehanna 1 and 2 i
Brunswick 2 11 Catawba 1 and 2 11 Crystal River 3 11 Farley 1 11 Harris 11 Hatch 1 and 2 11 McGuire 1 and 2 11 North Anna 1 11 Oconee 1,2 and 3 11 Robinson 2 11 Summer 11 Surry 1 and 2 11 Vogtle 1 and 2 11 Braidwood 1 and 2 lil Byron 1 and 2
~lli Dresden 2 and 3 Ill Duane Amold lli Fermi 2 Ill Kewaunee til LaSalle 1 and 2 III Palisades ill Point Beach 1 and 2 Ill m
Tably 4 Plants RIporting Y2K Raidin2ss on July 1,1999 Ill Prairie Island 1 and 2 111 Quad Cities 1 and 2 IV Arkansas 1 and 2 IV Callaway IV Cooper IV Fort Calhoun IV Grand Gulf IV Palo Verde 1,2 and 3 IV River Bend IV San Onofre 2 and 3 IV Waterford 3 IV Washington Nuclear 2 IV Wolf Creek s
L
[
]
l CONGRESSIONAL CORRESPONDENCE SYSTEM
)
DOCUMENT PREPARATION CHECKLIST This check list is to be submitted with each document (or group of Os/As) sent for processing into the CCS.
BRIEF DESCRIPTION OF DOCUMENT (S) Mns. 04ew A4 du
'1.
y 2.
TYPE OF DOCUMENT X CORRESPONDENCE HEARINGS (Os/As) 3.
DOCUMENT CONTROL _X SENSITIVE (NRC ONLY)
X NON-SENSITIVE 4.
CONGRESSIONAL COMMITTEE AND SUBCOMMITTEE (if applicable)
Congressional Committee
(
Subcommittee 5.
SUBJECT CODES (A) i (B)
(
(C) 6.
SOURCE OF DOCUMENTS (A) 5520 (DOCUMENT NAME (B)
SCAN (C)
ATTACHMENTS (D)
OTHER 7.
SYSTEM LOG DATES (A)f[/9/19 ' DATA OCA SENT DOCUMENT TO CCS (B)
DATE CCS RECEIVED DOCUMENT i
(C)
DATE RETURNED TO OCA FOR ADDITIONAL INFORMATION (D)
DATE RESUBMITTED BY OCA TO CCS (E)
DATE ENTERED INTO CCS BY
.'(F)