ML21294A404
| ML21294A404 | |
| Person / Time | |
|---|---|
| Site: | Callaway  |
| Issue date: | 10/21/2021 |
| From: | Ameren Missouri, Union Electric Co |
| To: | Office of Nuclear Reactor Regulation |
| Shared Package | |
| ML21294A393 | List:
|
| References | |
| ULNRC-06688 | |
| Download: ML21294A404 (15) | |
Text
ENCLOSURE 4
License Amendment Request
Callaway Unit No. 1 Renewed Facility Operating License NPF-30 NRC Docket No. 50 -483
Revise Technical Specifications to Adopt Risk-Informed Completion Times TSTF -505, Revision 2, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b"
Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
E4-1
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
1.0 INTRODUCTION
AND SCOPE
Nuclear Energy Institute (NEI) Topical Report NEI 06-09-A, Risk-Informed Technical Specifications Initiative 4b, Risk-Managed Technical Specifications (RMTS) Guidelines, Revision 0 (Reference [1]), as clarified by the NRC final safety evaluation (Reference [2]),
requires that the license amendment request (LAR) provide a justification for exclusion of risk sources from the Probabilistic Risk Assessment (PR A) model based on their insignificance to the calculation of configuration risk, and to discuss conservative or bounding analyses applied to the configuration risk calculation. Enclosure 4 addresses this requirement by discussing the overall generic methodology to identify and disposition such risk sources, and provides the Callaway Plant, Unit No. 1 (Callaway) specific results of the application of the generic methodology and the disposition of impacts on the Callaway Risk-Informed Completion Time (RICT) Program.
Section 3.0 presents the justification for excluding analysis of Other External Hazards from the Callaway PRA. The Callaway Internal Events, Internal Flooding, High Winds, Fire, and Seismic PRA models described within this LAR are the same as those described within the Callaway submittal regarding adoption of 10 CFR 50.69, Risk-Informed Categorization and Treatment of Structures, Systems and Components for Nuclear Power Reactors (Reference [3]).
Topical Report NEI 06-09-A does not provide a specific list of hazards to be considered in a RICT Program. However, non -mandatory Appendix 6 -A of the American Society of Mechanical Engineers (ASME) / American Nuclear Society (ANS) RA -Sa-2009 PRA Standard (hereafter ASME/ANS PRA Standard), Addenda to ASME/ANS RA-S-2008 Standard for Level 1/Large Early Release Frequency Probabilistic Risk Assessment for Nuclear Power Plant Applications (Reference [4]) provides a guide for identification of most of the possible external events for a plant site. Additionally, NUREG-1855, Guidance on the Treatment of Uncertainties Associated with PRAs in Risk-Informed Decision Making, Revision 1 (Reference [5]), also provides a discussion of hazards that should be evaluated to assess uncertainties in plant PRAs and support the risk-informed decision-making process. Table D-1 of Regulatory Guide 1.200 Revision 3 (Reference [6]) provides a list of external hazards to be considered in risk-informed applications. These hazards were reviewed for Callaway, along with a review of information pertaining to the site region and plant design to identify the set of external events to be considered and evaluated. The information from the Callaway Final Safety Analysis Report (FSAR) (Reference [7]) and the Callaway Other External Hazards Screening Assessment Notebook (Reference [8]) were reviewed. No new site-specific or plant-unique external hazards were identified through this review. The list of hazards from Table D-1 of Regulatory Guide 1.200 Revision 3 that were considered for Callaway are summarized in Table E4-1.
The scope of this enclosure is consideration of the hazards listed in Table E4-1 for applicability to Callaway. Listed external hazards are evaluated and screened as low risk in Section 3.0.
E4-2
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
2.0 TECHNICAL APPROACH
The guidance contained in NEI 06-09-A states that all hazards that contribute significantly to incremental risk of a configuration must be quantitatively addressed in the implementation of the RICT Program. The following approach focuses on the risk implications of specific external hazards in the determination of the risk management action time (RMAT) and RICT for the Technical Specification (TS) Limiting Conditions for Operation (LCO) selected as part of the RICT Program.
Consistent with NUREG-1855, Revision 1, external hazards may be addressed as follows:
- 1. Screening the hazard based on a low frequency of occurrence,
- 2. Bounding the potential impact and including it in the decision-making, or
- 3. Developing a PRA model to be used in the RMAT/RICT calculation.
The overall process for addressing external hazards considers two aspects of the external hazard contribution to risk.
- The first is the contribution from the occurrence of beyond design basis conditions, e.g., winds greater than design, seismic events greater than design-basis earthquake (DBE), etc. These beyond design basis conditions challenge the capability of the systems, structures, and components (SSCs) to maintain functionality and support safe shutdown of the plant.
- The second aspect addressed is the challenges caused by external conditions that are within the design basis, but still require some plant response to assure safe shutdown (e.g., high winds or seismic events causing loss of offsite power, etc.). While the plant design basis assures that the safety-related equipment necessary to respond to these challenges are protected, the occurrence of these conditions nevertheless cause a demand on these systems that in and of itself presents a risk.
2.1 Hazard Screening
The first step in the evaluation of the external hazard is screening based on an estimation of a bounding core damage frequency (CDF) for beyond design basis hazard conditions. An example of this type of screening is reliance on the NRCs 1975 Standard Review Plan (SRP)
(Reference [9]) which is acknowledged in the NRCs Individual Plant Examination of External Events (IPEEE) procedural guidance ( Reference [10]) as assuring a bounding CDF of less than 1E-06 per year for each hazard. The bounding CDF estimate is often characterized by the likelihood of the site being exposed to conditions that are beyond the design basis limits and an
E4-3
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
estimate of the bounding conditional core damage probability for those conditions. If the bounding CDF for the hazard can be shown to be less than 1E-06 per year, then beyond design basis challenges from the hazard can be screened and do not need to be addressed quantitatively in the RICT Program.
The basis for this is as follows:
- The overall calculation of the RICT is limited to an incremental core damage probability (ICDP) of 1E-05.
- The maximum time interval allowed for the RICT is 30 days.
- If the maximum CDF contribution from a hazard is <1E-06 per year, then the maximum ICDP from the hazard is <1E-07 (1E-06/year
- 30 days/365 days/year).
- Thus, the bounding ICDP contribution from the hazard is shown to be less than 1% of the permissible ICDP in the bounding time for the condition. Such a minimal contribution is not significant to the decision in computing a RICT.
The Callaway hazard screening analysis from the IPEEE (Reference [11]) has been replaced with an updated screening analysis for external hazards (Reference [8]) to reflect current site conditions. The results are discussed in Section 3.0, and show that all events listed in Table E4-1 can be screened for Callaway, except for seismic and high wind events, which are addressed by site-specific PRAs.
2.2 Hazard Analysis for CDF Contribution
There are two options in cases where the bounding CDF for the external hazard cannot be shown to be less than 1E -06 per year. The first option is to develop a PRA model that explicitly models the challenges created by the hazard and the role of the SSCs i ncluded in the RICT Program in mitigating those challenges. This approach was used for the seismic and high winds hazards. The second option for addressing an external hazard is to compute a bounding CDF contribution from the hazard.
2.3 Evaluation of Bounding Large Early Release Frequency (LERF) Contribution
The RICT Program requires addressing both core damage and large early release risk. When a comprehensive PRA does not exist, the LERF considerations can be estimated based on the relevant parts of the internal events LERF analysis. This can be done by considering the nature of the challenges induced by the hazard and relating those to the challenges considered in the Internal Events PRA. This can be done in a realistic manner or a conservative manner. The goal is to provide a representative or bounding conditional large early release probability (CLERP) that aligns with the bounding CDF evaluation.
E4-4
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
The incremental large early release frequency (ILERF) is then computed as:
ILERFHazard = ICDFHazard
- CLERPHazard
2.4 Risks from Hazard Challenges
Given the selection of an estimated bounding CDF and LERF, the analysis approach must assure that the RICT Program calculations reflect the change in CDF and LERF caused by out-of-service equipment. The above steps address the direct risks from damage to the facility from external hazards. While the direct CDF contribution from beyond design basis hazard conditions can be shown to be non-significant without a full PRA, there may be risks that are related to the fact that some external hazards can cause a plant challenge even for hazard severities that are less than the design basis limit. For example, depending on the site, external floods can challenge the availability of normal plant heat removal mechanisms.
The approach to be taken in this step is to identify the plant challenges caused by the occurrence of the hazard within the design basis and evaluate whether the risks associated with these events are either already considered in the existing PRA model or they are not significant to the risk. Section 3.0 provides an analysis of the representative external hazards for Callaway.
3.0 EVALUATION OF EXTERNAL EVENT CHALLENGES
This Section provides an evaluation of Other External Hazards. The results of the assessment of these hazards is provided in Table E4-1. Table E4-2 provides the summary criteria for screening of the hazards listed in Table E4-1.
3.1 Hazard Screening
The Callaway Other External Hazards: Screening Assessment Notebook (Reference [8])
provides an assessment of risk to the Callaway Plant associated with Other External Hazards.
This notebook (Reference [8]) documents additional analyses that have been done since the IPEEE to provide updated risk assessments of various hazards, such as aircraft impacts, industrial facilities and pipelines, and external flooding (Reference [8]).
Table E4-1 reviews the bases for the evaluation of these hazards, identifies any challenges posed, and identifies any additional treatment of these challenges, if required. Table E4-2 provides the criteria applied in the progressive screening process used in this assessment. The conclusions of the assessment, as documented in Table E4-1, assure that the hazard either does not present a design-basis challenge to Callaway, or is adequately addressed in the PRA.
E4-5
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
3.2 Impacts to RICT
In the application of RICTs, a significant consideration in the screening of external hazards is whether particular plant configurations could impact the decision on whether a particular hazard that screens under the normal plant configuration and the base risk profile would still screen given the particular configuration. The external hazards screening evaluation for Callaway has been performed accounting for such configuration-specific impacts. The process involves several steps.
As a first step in this screening process, hazards that screen for one or more of the following criteria (as defined in Table E4-2) still screen regardless of the configuration, as these criteria are not dependent on the plant configuration.
- The occurrence of the event is of sufficiently low frequency that its impact on plant risk does not appreciably impact CDF or LERF. (Criterion C2)
- The event cannot occur close enough to the plant to affect it. (Criterion C3)
- The event which subsumes the external hazard is still applicable and bounds the hazard for other configurations. (Criterion C4)
- The event develops slowly, allowing adequate time to eliminate or mitigate the hazard or its impact on the plant. (Criterion C5)
The next step in the screening process is to consider the remaining hazards (i.e., those not screened per the above criteria) to consider the impact of the hazard on the plant given particular configurations for which a RICT is allowed.
The following hazards are screened for configurations, using criteria other than C2 - C5, as discussed above. Configurations involving SSCs associated with LCOs in scope of the RICT program do not have an impact from these hazards:
- Ice Cover and Low Winter Temperature
- Lightning
- Release of Chemicals
- Soil Shrink
- Aircraft Accidents, Meteorites, and Turbine Missiles Therefore, all of the non-modeled hazards remain screened for all RICT configurations.
E4-6
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-1 presents the results of the external hazards screening analysis for Callaway.
Table E4-2 presents the progres sive screening approach for addressing external hazards. A detailed description of the external events screening and evaluation process in presented in Reference [8].
Table E4-1. External Hazards Screening
Screening Result External Screened? Screening Hazard (Y/N) Criterion Comment (Note a)
Airports, military installations, and flight corridors have been considered. There are Aircraft Impact Y PS4 three low-altitude airways and three high-altitude airways that pass near the plant. A bounding analysis of aircraft impact associated with these airways results in a CDF < 1E-6/yr.
Avalanche Y C3 Not applicable to the site because of climate and topography.
Service Water and Essential Service Water systems include traveling water screens and Biological Y C5 backwash strainers to prevent intake of Events foreign matter. These design features would provide sufficient time to detect and mitigate the hazard.
Coastal The site is not in proximity to any ocean or Erosion Y C3 large body of water; therefore, costal erosion is not an applicable hazard.
Drought Y C1, C5 Plant design eliminates drought as a concern.
In addition, this event is slowly developing.
External flooding is incorporated into High Tide, Lake Level, or River Stage, Seiche, External Flood Y C1, C3 Tsunami, Storm Surge, and Waves. Local Intense Precipitation (LIP) was analyzed and shown to be within the plant design basis.
See also Precipitation, Intense
E4-7
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-1. External Hazards Screening
Screening Result External Screened? Screening Hazard (Y/N) Criterion Comment (Note a)
Extreme Callaway possesses a High Winds PRA that Winds and N/A N/A addresses this hazard.
Tornadoes Fog Y C4 Negligible impact on the plant. Implicitly included in air, land, and water transportation.
Limited occurrence and bounded by other events, primarily loss of offsite power (LOOP),
Forest Fire Y C1, C3, C4 for which the plant is designed. Not applicable to site due to limited vegetation and inability of hazard to propagate into Protected Area.
Limited occurrence and bounded by other Frost Y C1, C4 events for which the plant is designed. Frost impacts covered under ice and snow hazards.
Limited occurrence and bounded by other events for which the plant is designed.
Hail Y C4 Consequences of this hazard are bounded by a loss of offsite power (LOOP), which is included in the Internal Events PRA weather -
induced LOOP frequency.
Plant is designed for this hazard. Associated High Summer Y C1, C5 plant trips have not occurred and are not Temperature expected. In addition, this event is slowly developing.
The site is not in proximity to any oceans or High Tide Y C3 lakes, and is not susceptible to flooding by rivers. This hazard is not applicable due to the site location.
Hurricane Callaway possesses a High Winds (HW) PRA (Tropical Y C4 that addresses this hazard, thus it screens Cyclone) using C4. Note: The HW PRA screens hurricane winds using C3.
E4-8
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-1. External Hazards Screening
Screening Result External Screened? Screening Hazard (Y/N) Criterion Comment (Note a)
Ice Cover Y C1 Plant is designed for freezing temperatures, which are infrequent and short in duration.
The only industrial or military facility within 5 miles of the site is Mertens Quarry, located 4.5 miles northwest of the site. The amount Industrial or of explosive material required to potentially Military Facility Y C3 damage the plant is significantly greater than Accident the amount that would ever be stored at a quarry. Therefore, industrial or military facility accidents cannot occur close enough to the plant to affect it.
Internal Flood N/A N/A Callaway possesses an Internal Flooding PRA that addresses this hazard.
The site is located on a plateau, and there is Landslide Y C3 no significantly higher ground within 5 miles.
The topography of the site precludes this hazard.
Lightning strikes causing loss of offsite power or turbine trip are contributors to the initiating Lightning Y C1 event frequencies for these events. However, other causes are also included. The impacts are no greater than already modeled in the Internal Events PRA.
Low Lake The plant is designed for such events, and Level or River Y C1, C5 their impacts are slow to develop.
Water Level Low Winter Y C1 Extended freezing temperatures are rare, the Temperature plant is designed for such events.
Meteorite / The frequency of meteorites greater than Satellite Y PS4 100 lb striking the plant is around 1E-8/yr and Strikes corresponding satellite impacts is around 2E-9/yr.
E4-9
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-1. External Hazards Screening
Screening Result External Screened? Screening Hazard (Y/N) Criterion Comment (Note a)
There are no pipelines or tank farms within Pipeline Y C3 5 miles of the site. Pipelines are not close Accident enough to significantly impact plant structures.
Precipitation, Y C1 Under very conservative assumptions no Intense critical SSC elevations are reached.
Release of The plant is operated and designed for such Chemicals Y C1 events. No control room habitability problems from Onsite from the potential release of hazardous Storage chemicals have been identified.
The Missouri River is strictly managed and highly regulated. It is extremely improbable River that naturally occurring or man-made Diversion Y C1, C5 diversions would be allowed to continue unchecked or uncontrolled. Even so, the plant is designed for such events, and their impacts are slow to develop.
There are no recorded instances of sandstorms affecting Callaway county or any Sandstorm Y C1, C3 neighboring counties. The plant is designed for such events. Also, a procedure instructs operators to replace filters before they become inoperable.
Site is not located near any bodies of water Seiche Y C3 for which seiche flooding would apply. Onsite reservoirs and spray ponds are designed for seiches.
Seismic N/A N/A Callaway possesses a Seismic PRA that Activity addresses this hazard.
E4-10
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-1. External Hazards Screening
Screening Result External Screened? Screening Hazard (Y/N) Criterion Comment (Note a)
The event damage potential is less than other events for which the plant is designed.
Consequences of this hazard are bounded by Snow Y C1, C4 a loss of offsite power (LOOP), which is included in the Internal Events PRA weather -
induced LOOP frequency. Potential flooding impacts covered under external floodi ng.
Soil Y C1 The potential for this hazard is low at the site, Shrink-Swell the plant design considers this hazard.
The site is not located near any large bodies Storm Surge Y C3 of water for which storm surge flooding would apply. This hazard is not applicable to the site because of location.
Toxic gas covered under release of chemicals Toxic Gas Y C4 in onsite storage, industrial or military facility accident, and transportation accident.
Road and highway, railroad, and water transport cannot occur close enough to the plant to affect it. Water transport collisions Transportation C1, C3, C4, with intake structure are of lesser potential Accidents Y C5 damage than the events for which the plant was designed, and would provide sufficient time to respond. Aviation and pipeline accidents covered under those specific categories.
The site is not located near any large bodies Tsunami Y C3 of water for which tsunami flooding would apply. This hazard is not applicable to the site because of location.
E4-11
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-1. External Hazards Screening
Screening Result External Screened? Screening Hazard (Y/N) Criterion Comment (Note a)
The event is of equal or lesser damage Turbine-potential than the events for which the plant Generated Y C1, PS4 has been designed and the core damage Missiles frequency, calculated using a bounding or demonstrably conservative analysis, has a mean frequency <1E -6/yr.
Volcanic The site is not located near any active Activity Y C3 volcano. This hazard is not applicable to the site because of location.
The plant design considers this hazard. Water Waves Y C1 levels in the UHS retention pond after wave run-up do not reach the critical water level.
Note a - See Table E4-2 for descriptions of the screening criteria.
E4-12
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-2. Progressive Screening Approach for Addressing External Hazards
Event Criterion Source Comments Analysis Initial C1. Event damage potential NUREG/CR-2300 Preliminary is < events for which plant is Screening designed. ASME/ANS Standard RA-Sa-2009 C2. Event has lower mean NUREG/CR-2300 frequency and no worse consequences than other ASME/ANS Standard events analyzed. RA-Sa-2009
C3. Event cannot occur NUREG/CR-2300 close enough to the plant to affect it. ASME/ANS Standard RA-Sa-2009 C4. Event is included in the NUREG/CR-2300 definition of another event.
ASME/ANS Standard RA-Sa-2009 C5. Event develops slowly, ASME/ANS Standard allowing adequate time to eliminate or mitigate the threat.
Progressive PS1. Design basis hazard ASME/ANS Standard Screening cannot cause a core damage accident. RA-Sa-2009
PS2. Design basis for the NUREG-1407 Not utilized herein event meets the criteria in the because NRC 1975 Standard Review ASME/ANS Standard conformance to the Plan (SRP). RA-Sa-2009 SRP does not guarantee that the CDF is less than 1x10-6 per year.
E4-13
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
Table E4-2. Progressive Screening Approach for Addressing External Hazards
Event Criterion Source Comments Analysis PS3. Design basis event NUREG-1407 mean frequency is < 1E-5/yr and the mean conditional ASME/ANS Standard core damage probability is RA-Sa-2009
< 0.1.
PS4. Bounding mean CDF is NUREG-1407
< 1E-6/yr.
ASME/ANS Standard RA-Sa-2009 Detailed Screening not successful. NUREG-1407 PRA PRA needs to meet requirements in the ASME/ANS Standard ASME/ANS PRA Standard. RA-Sa-2009
4.0 CONCLUSION
S
Based on this analysis of external hazards for Callaway, no additional external hazards need to be added to the existing PRA model. Both seismic and high winds external hazards are currently modeled in the Callaway PRA. The evaluation concluded that all other hazards either do not present a design-basis challenge to Callaway, the challenge is adequately addressed in the PRA, or the hazard has a negligible impact on the calculated RICT and can be excluded.
The ICDP/ILERP acceptance criteria of 1E-05/1E-06 will be used within the RICT Program framework to calculate the resulting RICT based on the total configuration-specific delta CDF/LERF attributed to Internal Events, Internal Flooding, Internal Fire, Seismic, and High Winds delta CDF/LERF values.
E4-14
Enclosure 4 Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PRA Models
- 5. REFERENCES
[1] Nuclear Energy Institute (NEI) Topical Report (TR) NEI 06 -09, "Risk-Informed Technical Specifications Initiative 4b, Risk-Managed Technical Specifications (RMTS) Guidelines,"
Revision 0 -A, October 12, 2012 (ADAMS Accession No. ML12286A322).
[2] Letter from Jennifer M. Golder (NRC) to Biff Bradley (NEI), "Final Safety Evaluation for Nuclear Energy Institute (NEI) Topical Report (TR) NEI 06 -09, "Risk-Informed Technical Specifications Initiative 4b, Risk-Managed Technical Specifications (RMTS) Guide lines,"
May 17, 2007 (ML071200238).
[3] Letter (ULNRC -06550) from Union Electric to the NRC, "Application to Adopt 10 CFR 50.69, Risk-Informed Categorization and Treatment of Structures, Systems and Components for Nuclear Power Reactors," dated Octobe r 30, 2020 (ML20304A455).
[4] ASME/ANS RA-S-2009, Addenda to ASME/ANS RA -S-2008, "Standard for Level 1/Large Early Release Frequency Probabilistic Risk Assessment for Nuclear Power Plant Applications," February 2009.
[5] NUREG-1855, "Guidance on the Treatment of Uncertainties Associated with PRAs in Risk-Informed Decision -making," USNRC, Revision 1, March 2017.
[6] NRC Regulatory Guide 1.200, "Acceptability of Probabilistic Risk Assessment Results for Risk-Informed Activities," Revision 3, December 2020.
[7] Callaway Energy Center Final Safety Analysis Report (FSAR), Rev. OL -24b, October 2020.
[8] PRA-OEH-ANALYSIS, "Other External Hazards: Screening Assessment Notebook,"
Revision 000, Update 8.
[9] NUREG-75/087, "Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants, LWR Edition," 1975.
[10] NUREG-1407, "Procedural and Submittal Guidance for the Individual Plant Examination of External Events (IPEEE) for Severe Accident Vulnerabilities," U.S. Nuclear Regulatory Commission, April 1991 (ADAMS Accession No. ML063550238).
[11] Callaway Plant IP EEE, June 30, 1995.
E4-15