ML23304A354

From kanterella
Jump to navigation Jump to search
LLC Revision 1 to Standard Design Approval Application, Part 2, Chapter 8, Electrical Power
ML23304A354
Person / Time
Site: 05200050
Issue date: 10/31/2023
From:
NuScale
To:
Office of Nuclear Reactor Regulation
Shared Package
ML23306A033 List: ... further results
References
LO-151262
Download: ML23304A354 (1)


Text

NuScale US460 Plant Standard Design Approval Application

Chapter Eight Electric Power

Final Safety Analysis Report

Revision 1

©2023, NuScale Power LLC. All Rights Reserved COPYRIGHT NOTICE This document bears a NuScale Power, LLC, copyright notice. No right to disclose, use, or copy any of the information in this document, other than by the U.S. Nuclear Regulatory Commission (NRC), is authorized without the express, written permission of NuScale Power, LLC.

The NRC is permitted to make the number of copi es of the information contained in these reports needed for its internal use in connection with gen eric and plant-specific reviews and approvals, as well as the issuance, denial, amendment, transfer, renewal, modification, suspension, revocation, or violation of a license, permit, order, or regulation subject to the requirements of 10 CFR 2.390 regarding restrictions on public disclosure to the extent such information has been identified as proprietary by NuScale Power, LLC, copyright protection notwithstanding.

Regarding nonproprietary versions of these reports, the NRC is permitted to make the number of additional copies necessary to provide copies for public viewing in appropriate docket files in public document rooms in Washington, DC, and elsewhere as may be required by NRC regulations. Copies made by the NRC must include this copyright notice in all instances and the proprietary notice if the original was identified as proprietary.

NuScale Final Safety Analysis Report Table of Contents

TABLE OF CONTENTS

CHAPTER 8 ELECTRIC POWER....................................... 8.1-1 8.1 Introduction.................................................... 8.1-1 8.1.1 Utility Power Grid and Offsite Power System Description............ 8.1-1 8.1.2 Onsite Power Systems Description............................. 8.1-1 8.1.3 Design Bases.............................................. 8.1-2 8.2 Offsite Power System............................................ 8.2-1 8.2.1 Description................................................ 8.2-1 8.2.2 Analysis.................................................. 8.2-1 8.3 Onsite Power Systems........................................... 8.3-1 8.3.1 Alternating Current Power Systems............................. 8.3-1 8.3.2 Direct Current Power Systems................................. 8.3-4 8.3.3 References............................................... 8.3-11 8.4 Station Blackout................................................. 8.4-1 8.4.1 Station Blackout Analysis and Results........................... 8.4-1 8.4.2 Station Blackout Coping Equipment Assessment.................. 8.4-1 8.4.3 Station Blackout Procedures and Training........................ 8.4-1

NuScale US460 SDAA i Revision 1 NuScale Final Safety Analysis Report List of Tables

LIST OF TABLES

Table 8.1-1: Acceptance Criteria and Guidelines for Electric Power Systems......... 8.1-5 Table 8.3-1: Augmented Direct Current Power System Failure Modes and Effects Analysis............................................. 8.3-13 Table 8.3-2: Classification of Structures, Systems, and Components.............. 8.3-36

NuScale US460 SDAA ii Revision 1 NuScale Final Safety Analysis Report List of Figures

LIST OF FIGURES

Figure 8.3-1: High Voltage Alternating Current Elec trical Distribution System........ 8.3-39 Figure 8.3-2a: Medium Voltage Alternating Current Electrical Distribution System (Common Portion)........................................... 8.3-40 Figure 8.3-2b: Medium Voltage Alternating Current Electrical Distribution System (Module-Specific Portion)...................................... 8.3-41 Figure 8.3-3: Augmented Direct Current Power System (Common)................ 8.3-42 Figure 8.3-4a: Augmented Direct Current Power System (Module Specific).......... 8.3-43 Figure 8.3-4b: Augmented Direct Current Power System (Module Specific).......... 8.3-44 Figure 8.3-5: Normal Direct Current Power System............................ 8.3-45

NuScale US460 SDAA iii Revision 1 NuScale Final Safety Analysis Report Introduction

CHAPTER 8 ELECTRIC POWER

8.1 Introduction

8.1.1 Utility Power Grid and Offsite Power System Description

For the NuScale Power Plant US460 standard design, the offsite power system includes one or more connections to a transmission grid, micro-grid, or dedicated service load. The interface between the onsite alternating current (AC) power system and the offsite power system is at the point of common coupling where the plant switchyard and utility grid conductors are connected.

The NuScale Power Plant design does not dep end on onsite or offsite AC electrical power, including that from the transmission grid, for safe operation. Therefore, the availability of AC electrical power from an offsite power source does not impact the ability to achieve and maintain safety-related functions. A loss of voltage, degraded voltage condition, or other electrical transient on the nonsafety-related AC power systems does not have an adverse effect on the ability to achieve and maintain safe-shutdown conditions.

The design supports an exemption from General Design Criteria (GDC) 17 and 18.

As described in Section 8.3, the normal source of electrical power to the plant electrical loads is provided by the operating power module main generators rather than from an offsite transmission grid connection.

8.1.2 Onsite Power Systems Description

Onsite electrical power systems include the:

  • high voltage AC electrical distribution system (EHVS)
  • medium voltage AC electrical distribution system (EMVS)
  • low voltage AC electrical distribution system (ELVS)
  • augmented direct current (DC) power system (EDAS)
  • normal DC power system (EDNS)
  • backup power supply system (BPSS)

Onsite electrical power systems are nonsafety-related and non-Class 1E.

Section 8.3 provides more detail on the onsite power systems.

Although BPSS capability is included, non-reliance on AC power eliminates the need for an alternate AC power source to me et the station blackout (SBO) coping requirements. An evaluation of SBO is provided in Section 8.4.

NuScale US460 SDAA 8.1-1 Revision 1 NuScale Final Safety Analysis Report Introduction

8.1.3 Design Bases

Safety-related loads do not rely on AC or DC power systems to perform their associated safety functions. Operator ac tion is not relied upon to achieve and maintain safe shutdown. Safety-related systems do not require onsite or offsite power systems to actuate, and their continued operation relies on natural mechanisms based on fundamental physical and thermody namic principles (e.g., gravity; natural circulation; convective, radiative, and conductive heat transfer; condensation; and evaporation).

A loss of voltage or degraded voltage conditi on on the electrical power systems does not adversely affect the performance of plant safety-related functions.

The design does not include Class 1E AC or DC power systems as defined in Institute of Electrical and Electronics Engineers (IEEE) Std. 308-2001.

The design uses the EDAS to support post-accident monitoring and to preclude inadvertent emergency core cooling syst em actuation. Section 8.3.2 contains additional information on the EDAS desi gn. Refer to Chapter 15 for additional information on the consideration of EDAS unavailability in the plant safety analyses.

8.1.3.1 Offsite Power System

The design bases for the offsite power system, if provided, are site-specific and are described in Section 8.2.

8.1.3.2 Onsite Power Systems

The EDAS is designed as a non-Class 1E system. Its functions are nonsafety-related and not risk-significant. The EDAS is designed to support important plant loads, as described in Section 8.3.2.

The EDNS is designed as a non-Class 1E system. Its functions are nonsafety-related and not risk-significant. The EDNS batteries are designed to provide DC power and AC power (via inverters) after a loss of power to the battery chargers, after which the on-site standby power sources restore AC power to the EDNS battery chargers.

The EHVS is designed as a non-Class 1E system. Its functions are nonsafety-related and not risk-significant. It is designed with the capability for operation in island mode (Section 8.3.1). The EHVS equipment is physically separated from safety related circuits and is not located near safety-related components.

The EMVS is designed as a non-Class 1E system. Its functions are nonsafety-related and not risk-significant. The circuits are physically separated from safety circuits throughout the plant, and EMVS equipment is not located near safety-related components.

NuScale US460 SDAA 8.1-2 Revision 1 NuScale Final Safety Analysis Report Introduction

The ELVS is designed as a non-Class 1E system. Its functions are nonsafety-related and not risk-significant.

The BPSS is designed to provide electrical power to the plant when AC power is not available. The BPSS is a non-Class 1E system. Its functions are non-safety related and not risk-significant. The backup diesel generators are designed to automatically start on a loss of plant switchyard power and to be manually connected to provide backup AC power to the affected loads.

8.1.3.3 Regulatory Requirements and Guidance

Table 8.1-1 summarizes the extent to which the design of the electric power systems conforms to relevant Nuclear Regulatory Commission requirements and guidance. Conformance with regulatory cr iteria and general design criteria is summarized in Section 1.9 and Section 3.1, respectively. Electrical systems are designed in accordance with the requirements and guidance with exceptions or clarifications noted below.

  • Electrical systems conform to GDC 2, GDC 4, and GDC 5 to the extent described in Section 8.3.1 and Section 8.3.2. As described in Section 3.1, the design supports an exemption from GDC 17, GDC 18, and GDC 33.
  • Compliance with principal design criteria in lieu of GDC 34, 35, 38, 41, and 44 is described in Section 3.1.4. The principal design criteria do not include requirements for electric power systems.

Section 8.3.1 addresses the electrical penetration assembly electrical design requirements. Section 3.8.2 and Section 6.2.1 address the mechanical integrity requirements of GDC 50.

  • The design does not rely on pressurizer heaters to establish and maintain natural circulation in shutdown conditi ons. Accordingly, the design supports an exemption from the 10 CFR 50.34(f)(2)(xiii) (TMI Item II.E.3.1) requirement to provide pressurizer heater power supply and associated motive and control power interfaces to establish and mainta in natural circulation in shutdown conditions.
  • The design does not include pressurizer relief valves or pressurizer relief block valves. Therefore, 10 CFR 50.34(f)(2)(xx) (TMI Item II.G.1) requirements to provide emergency power sources and qualified motive and control power connections for such valves are not technically relevant. The design supports an exemption from the portions of the rule that require vital power buses for pressurizer level indicators.
  • NuScale electrical systems are not pr otection systems and do not perform safety-related functions; therefore, these systems are not required to conform to 10 CFR 50.55a(h).
  • The design conforms to the requirements of 10 CFR 50.63 for a light water reactor to have the capability to withstand an SBO for a specified duration and recover from an SBO as defined in 10 CFR 50.2. Additional details regarding conformance with 10 CFR 50.63 are described in Section 8.4.

NuScale US460 SDAA 8.1-3 Revision 1 NuScale Final Safety Analysis Report Introduction

  • NUREG-0737 includes guidance related to TMI Item II.E.3.1 (codified in 10 CFR 50.34(f)(2)(xiii)), and TMI Item II.G.1 (codified in 10 CFR 50.34(f)(2)(xx)). As described above, the NuScale design supports exemptions from portions of these regulations and other portions are not technically relevant. Therefore, the associated guidance of NUREG-0737 is not applicable to the NuScale design.
  • Portions of NUREG/CR-0660 relevant to the NuScale electrical systems are considered as reference only, consistent with NuScale DSRS Section 8.1.

Conformance with TMI items, including those addressed in this NUREG, is described in Section 1.9.

  • SECY-90-016 pertains to evolutionary advanced light water reactor (ALWR) designs and is not directly applicable to passive plant designs. As a passive ALWR design, the NuScale electrical sy stem design conforms to the passive plant guidance of SECY-94-084, Section F.
  • SECY-91-078 pertains to evolutionary ALWR designs and is not directly applicable to passive plant designs. As a passive ALWR design, the NuScale electrical system design conforms to the passive plant guidance of SECY-94-084, Section G.
  • The evaluation of NuScale electrical systems under the regulatory treatment of nonsafety systems (RTNSS) process is described in Section 19.3.

NuScale US460 SDAA 8.1-4 Revision 1 NuScale Final Safety Analysis Report Introduction

NuScale US460 SDAA 8.1-5 Revision 1 NuScale Final Safety Analysis Report Introduction

NuScale US460 SDAA 8.1-6 Revision 1 NuScale Final Safety Analysis Report Introduction

NuScale US460 SDAA 8.1-7 Revision 1 NuScale Final Safety Analysis Report Introduction

NuScale US460 SDAA 8.1-8 Revision 1 NuScale Final Safety Analysis Report Introduction

NuScale US460 SDAA 8.1-9 Revision 1 NuScale Final Safety Analysis Report Introduction

NuScale US460 SDAA 8.1-10 Revision 1 NuScale Final Safety Analysis Report Offsite Power System

8.2 Offsite Power System

8.2.1 Description

The offsite power system includes connections to a transmission grid, micro-grid, or dedicated service load. The boundary between the onsite alternating current (AC) power system and the offsite power system is at the point of common coupling where the plant switchyard and utility grid conductors are connected. The switchyard is part of the high voltage AC electrical distribution system (Section 8.3.1).

The passive design of the plant does not rely on AC power and does not require an offsite power system to perform safety-related or risk-significant functions.

Accordingly, the NuScale design supports an exemption from GDC 17 and GDC 18.

Therefore, this section provides the relevant regulatory framework, but the acceptance criteria within the Design Specific Review Standard are not applicable to the NuScale design as there are no Class 1E power distribution systems.

During normal operations with at least one NuScale Power Module operating, the associated turbine generator is the source of power to the onsite AC power system as described in Section 8.3.1. A single turbine generator has sufficient capacity to meet the maximum expected total auxiliary AC load requirements for up to six NuScale Power Modules such that excess power is supplied to the offsite power system if one or more turbine generators are operating.

If provided, offsite power is the primary source for plant startup. The plant has the capability to start up and operate independently from the offsite power system in island mode as discussed in Section 8.3.1.

8.2.2 Analysis

8.2.2.1 Analysis of Offsite Power System Conformance with Regulatory Framework

This section describes the extent to which the design of the offsite power system conforms to NRC requirements and guidance.

General Design Criteria 17

The NuScale design supports an exempti on from the GDC 17 requirements for an offsite power system as described in Section 3.1.2. The passive design of the plant does not rely on an offsite power system to ensure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences or to maintain core cooling or containment integrity in the event of postulated accidents, as discussed in Section 15.0.0. In addition, the offsite power system is not relied upon to provide power for risk-significant functions.

NuScale US460 SDAA 8.2-1 Revision 1 NuScale Final Safety Analysis Report Offsite Power System

General Design Criteria 18

As described above, the NuScale design supports an exemption from GDC 17.

Accordingly, the design supports an exemption from the GDC 18 inspection and testing requirements (Section 3.1.2).

General Design Criteria 33

The NuScale design supports an exemption from GDC 33, as described in Section 3.1.4.

General Design Criteria 34, 35, 38, 41, and 44

The plant design complies with a set of principal design criteria in lieu of these GDC, as described in Section 3.1.4. The principal design criteria do not include requirements for electric power systems.

10 CFR 50.63

The NuScale Power Plant conformance with 10 CFR 50.63 is described in Section 8.4.

Regulatory Guide 1.218

Regulatory Guide 1.218 provides guidance for monitoring the condition of cables that have been determined to fall within the scope of the maintenance rule (10 CFR 50.65). As discussed in Section 17.6, this is not applicable.

Branch Technical Position 8-3

The performance of grid stability studies is site-specific, but is not required because the plant does not rely on offsite power as described in Section 8.2.1.

Branch Technical Position 8-6

Branch Technical Position (BTP) 8-6 addresses the adequacy of offsite system voltages to Class 1E (safety-related) loads. The offsite power system does not supply power to Class 1E loads and does not support safety-related functions.

Accordingly, BTP 8-6 is not applicable to the offsite power system.

Branch Technical Position 8-9

The BTP 8-9 addresses the effects of tr ansmission grid open-phase conditions as identified in NRC Information Notice 2012-03 and NRC Bulletin 2012-01. This guidance involves protection from a common cause AC power failure due to open phase conditions in the offsite power sources that are credited for GDC 17 and the effect on onsite safety-related buses and safety-related loads. The offsite power system does not support safety-related function s. In addition, failures of the offsite power system, including open phase conditions or a station blackout, do not prevent the operation of safety-related functions.

NuScale US460 SDAA 8.2-2 Revision 1 NuScale Final Safety Analysis Report Offsite Power System

If the offsite power system is supplying power to the onsite AC power system, the electrical isolation between the augment ed DC power system and equipment with safety-related functions, which is described in Section 7.1.2, ensures that the open phase conditions described in BTP 8-9 would not prevent the performance of safety-related functions.

Regulatory Guide 1.32

Regulatory Guide 1.32 addresses design criteria for safety-related power systems. The plant does not rely on an offs ite power system to support or perform safety functions. Accordingly, Regulatory Guide 1.32 is not applicable to the offsite power system.

Regulatory Guide 1.68

Conformance with Regulatory Guide 1.68 is described in Section 14.2.

SECY 94-084 and SECY 95-132

Section 3.2 describes the SSC classification process, which did not identify safety-related loads for the offsite power system. Section 17.4 describes the methodology to establish risk-significance of SSC, which did not identify risk-significant loads for the offsite power system. The process for evaluating SSC against the RTNSS criteria is described in FSAR Section 19.3.

The lack of safety-related and risk-significant AC loads and the 72-hour SBO coping capability of the passive NuScale design as described in Section 8.4 obviate the need for an alternate AC power source or a safety-related emergency diesel generator, consistent with SECY 94-084 Parts F and G, which are confirmed in SECY 95-132.

NuScale US460 SDAA 8.2-3 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

8.3 Onsite Power Systems

Onsite power systems provide power to the plant loads during all modes of plant operation. The onsite power systems include al ternating current (AC) power systems and direct current (DC) power systems. The plant safety-related functions are achieved and maintained without reliance on electrical powe r; therefore, neither the AC power systems nor the DC power systems are safety-related (Class 1E). The onsite power systems do not perform any risk-significant functions.

The nonsafety-related onsite AC power systems are described in Section 8.3.1. The nonsafety-related DC power systems are described in Section 8.3.2. Structures, systems, and components (SSC) classification methodology is provided in Section 3.2.

8.3.1 Alternating Current Power Systems

8.3.1.1 System Description

The onsite AC power systems distribute AC power to the onsite DC power systems (through battery chargers) and to the plant AC electrical loads during startup and shutdown, normal operation, and off-normal conditions. The NuScale Power Plant does not use nor include an emergency onsite AC power system.

The onsite AC power systems are shared among the NuScale Power Modules (NPMs), and include the following:

  • normal power distribution system high voltage AC electrical distribution system (EHVS) with nominal bus voltage of 13.8 kV and 345 kV switchyard (Figure 8.3-1) medium voltage AC electrical distribution system (EMVS) with nominal bus voltage of 4.16 kV (Figure 8.3-2a and Figure 8.3-2b) low voltage AC electrical distribution system (ELVS) with nominal bus voltage of 480 V
  • backup power supply system (BPSS) (Section 8.3.1.1.1)

The normal source of onsite AC electrical power is from the operating NPM turbine generators through the EHVS, the EMVS, and the ELVS. The EHVS contains the switchyard, which is connected to the offsite transmission grid, a micro-grid, or both, as described in Section 8.2.

If the NPMs are not operating, power to the plant loads is supplied from either the offsite power system or the BPSS, which consists of two backup diesel generators (BDGs) connected to the EMVS.

Island mode is a capability that allows operation of the NPMs without an offsite AC power supply. In island mode, the plant turbine generators independently provide power to onsite AC loads. Island mode is a nonsafety-related and non-risk-significant design feature that is not credited to meet regulatory criteria.

NuScale US460 SDAA 8.3-1 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

For a plant that is connected only to a micro-grid or a dedicated service load, island mode represents a normal operating condition with one or more turbine generators providing power to the onsite and offsite AC loads. For a NuScale plant that is normally connected to an offsite power supply via a transmission grid, island mode represents a temporary operat ing condition until the grid operability is restored.

8.3.1.1.1 Backup Power Supply System

The principal function of the nonsafety-related BPSS is to provide electrical power to the plant when the normal sources of AC power are not available.

The BDGs provide backup electrical power to the augmented DC power system (EDAS) and selected loads from various plant systems via connection to the EMVS. The BPSS is also capable of providing backup electrical power to loads supporting beyond design basi s accident mitigation and performing a black start to recover from a total shutdown of all turbine generators without reliance on an external transmission grid. The BPSS delivers backup power to heating, ventilation, and air conditioni ng systems serving the battery and associated charger rooms to avoid prolonged periods of high ambient temperature. Other systems and equipment loads include select nonsafety-related, non-risk-significant loads that provide asset protection and operational flexibility.

The BDGs and associated equipment ar e designed to Seismic Category III requirements. The BDGs are independent and separated from each other to provide assurance that a fire or explosion in one BDG does not prevent operation of the other BDG.

8.3.1.2 Design Evaluation

8.3.1.2.1 Containment Electrical Penetration Assemblies

The design of electrical penetration assemblies (EPAs) conforms to General Design Criterion (GDC) 50. This section describes the electrical design requirements for EPAs as they relate to compliance with GDC 50. The containment system, including EPAs, can accommodate the calculated pressure and temperature conditions resulting from a loss-of-coolant accident in accordance with GDC 50 as described in Section 6.2.1. The mechanical design requirements for EPAs are described in Section 3.8.2. The environmental qualification requirements for EPAs are described in Section 3.11.2.

The electrical penetration assemblies are designed in accordance with Institute of Electrical and Electronics Engineers (IEEE) Standard 317-1983 (Reference 8.3-9) as endorsed by Regulatory Guide (RG) 1.63. The EPAs are provided with external circuit protection per Section 5.4 of IEEE Standard 741-1997 (Reference 8.3-10), which is consistent with the 1986 version endorsed by RG 1.63 with the following clarifications.

NuScale US460 SDAA 8.3-2 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

Self-limiting circuits are those circuits that use EPAs, are not equipped with protection devices, and are supported by analysis that determines that the maximum fault current in these circuits would not damage the penetration if that current is available indefinitely. For these circuits, consideration of special protection devices is not required. For circuits that are not self-limiting, primary and backup protective devices are prov ided. Electrical penetration assemblies are designed to withstand the maximum available fault and overload currents for the time sufficient for operation of backup devices in case of failure of the primary protection devices.

Circuits contained in some of the EPAs support safety-related functions and are classified as Class 1E. Protection devices for non-Class 1E circuits using EPAs are not required to be treated as Class 1E.

As described in Section 7.1.2, divisional separation for Class 1E circuits is in accordance with Reference 8.3-6, which is endorsed by RG 1.75, Physical Independence of Electric Systems.

8.3.1.2.2 Onsite Alternating Current Power System Conformance with Regulatory Framework

This section describes the extent to which the design of the main onsite AC power system, including the EHVS, the EMVS, the ELVS, and the BPSS, conforms to Nuclear Regulatory Commission (NRC) requirements and guidance. As such, the information in this section provides clarification for the associated entries in Table 8.1-1. Table 8.3-2 identifies SSC classifications for EHVS, EMVS, ELVS, and BPSS.

General Design Criterion 2

The onsite AC power system does not contain SSC that are required to function in the event of natural phenomena. Nonsafety-related SSC with the potential for adverse seismic interaction with Seismic Category I SSC are designed to Seismic Category II requirements so that their failure does not affect the ability of safety-related SSC to perform their intended functions.

General Design Criterion 4

The onsite AC power system does not contain SSC required to function under adverse environmental conditions associated with postulated accidents, including a loss-of-coolant accident. The nonsafety-related AC power system SSC are designed to operate within the environmental conditions associated with normal operation, maintenance, and testing. Failure of the onsite AC power system components does not introduce adverse environmental conditions that would affect the ability of safety-related SSC to perform their intended functions.

NuScale US460 SDAA 8.3-3 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

General Design Criterion 5

The onsite AC power systems are shared among NPMs. Failures affecting the onsite AC power systems do not affect the ability to achieve and maintain NPM safety functions, including the assumption that a design basis event occurs in one NPM.

General Design Criterion 50

The electrical design requirements for electrical penetration assemblies comply with GDC 50 as described in Section 8.3.1.2.1.

10 CFR 50.63

The NuScale design conformance with 10 CFR 50.63 is described in Section 8.4.

8.3.2 Direct Current Power Systems

8.3.2.1 System Description

The onsite DC power systems include the EDAS and the normal DC power system (EDNS). These systems are described in the following sections.

8.3.2.1.1 Augmented Direct Current Power System

The EDAS comprises two DC subsystems that provide a continuous, failure-tolerant source of 125 Vdc power to assigned plant loads during normal plant operation and for a specified mini mum duty cycle following a loss of AC power. The EDAS-common (EDAS-C) plant subsystem serves plant common loads that have functions that are not specific to a single NPM. These functions include main control room (MCR) emergency lighting and post-accident monitoring (PAM) information displayed in the MCR. The EDAS-module-specific (EDAS-MS) plant subsystem consists of separate and independent DC electrical power supply systems, one for each NPM.

The EDAS-MS consists of four power channels and EDAS-C consists of two power divisions. The EDAS-MS and EDAS-C are capable of providing uninterrupted power to their loads. The EDAS-MS channels A and D have a specified minimum battery duty cycle of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, and EDAS-MS channels B and C have a specified minimum battery duty cycle of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. The EDAS-C power divisions have a specified minimum battery duty cycle of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. The 24-hour battery duty cycle of EDAS-MS channels A and D is specified to preclude unnecessary ECCS valve actuation for a minimum of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> following a postulated loss of AC power, unless a valid ECCS actuation signal is received (Section 6.3.2 contains addit ional information on ECCS operation).

The 72-hour battery duty cycle for EDAS-MS channels B and C and EDAS-C provides a minimum of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> of DC electrical power for MCR normal and emergency lighting and certain equipment supporting PAM. These EDAS-MS

NuScale US460 SDAA 8.3-4 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

and EDAS-C functions are not credited to meet the acceptance criteria for design basis event analyses in Chapter 15.

Figure 8.3-3, Figure 8.3-4a, and Figure 8.3-4b provide simplified one-line diagrams of the EDAS-C and EDAS-MS subsystems, respectively, and show the demarcation between the EDAS and the Class 1E instrumentation and controls equipment served by the EDAS-MS.

The source of electrical supply to the EDAS-C and EDAS-MS battery chargers is the ELVS.

Each common plant subsystem division contains one battery, two independent and redundant battery chargers, and one DC distribution panel assembly. Each distribution panel assembly consists of a fused disconnect switch, breakers, relays, metering, associated interconnections, and supporting structure.

Each EDAS-C battery charger is designed to supply electrical power to its connected loads while simultaneously recharging its associated battery from the design minimum charge state to 95 percent of full charge within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Upon a loss of power to battery chargers, both Division I and Division II EDAS-C batteries are capable of supplying connected plant loads for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. The batteries are described further below.

The EDAS-MS for an NPM provides electrical power for the MPS and other loads associated with that NPM. The EDAS-MS contains four power channels for each module. Power channels A and C are a part of EDAS Division I.

Power channels B and D are a part of EDAS Division II. Each power channel contains one battery, one battery charger, and one DC distribution panel assembly. Each distribution panel assembly consists of a bus, fused disconnect switch, tie breaker, breakers, relays, metering, associated interconnections, and supporting structures.

The EDAS-MS battery chargers normally supply power to plant loads in addition to maintaining the batteries fully charged. Upon a loss of power to all battery chargers, the bus and connected loads remain energized directly from the parallel connection with the batteries. Each EDAS-MS power channel charger is sized to carry 100 percent of the divisional DC bus loading during normal plant operation. In the event of a loss of a charger for maintenance or equipment failure, the divisional power channels can be connected together with the functional battery charger providing power to the divisional loads while maintaining connected batteries on float charge. Each EDAS-MS battery is sized with sufficient ca pacity to provide power to ECCS Hold Mode loads for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. The EDAS-MS channel B and channel C are designed with additional capacity to provide battery power to PAM-only mode loads for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />; PAM-only mode is described in Section 7.0.4.

The BDGs provide additional capability to preserve battery capacity during the time when normal AC power to the battery chargers is not available by

NuScale US460 SDAA 8.3-5 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

supplying 480 Vac input power to the battery chargers via connection to the EMVS to supply the connected loads and recharge the batteries.

The EDAS is a non-Class 1E power system and is non-risk-significant.

Augmented design, qualification, and quality assurance (QA) provisions are applied to the EDAS as described throughout Section 8.3.2. Table 8.3-2 identifies SSC classifications for EDAS.

An evaluation of EDAS component fail ures is provided in Table 8.3-1. The evaluation does not assume that each component single failure occurs concurrently with the unavailability of the redundant EDAS channel (EDAS-MS) or EDAS division (EDAS-C). The results demonstrate the reliability of the system to perform its functions and that failures in the EDAS do not prevent safety-related functions from being achieved and maintained.

An evaluation of the EDAS reliability was performed. Using the generic failure probabilities from Section 19.1.4, the EDAS supports the mission requirements.

The EDAS and equipment is designed to allow testing online or offline during normal operation. The batteries and battery chargers can be isolated from the rest of the subsystem for testing. Local and remote indications in the control room ensure the ability for continuously monitoring the batteries, battery chargers, and DC buses during test conditions.

The battery monitor system (BMS) provides continuous monitoring of EDAS battery parameters indicative of battery performance.

The EDAS provides DC power only to DC loads. Therefore, inverters are not required or included in the EDAS design.

The EDAS operates ungrounded. Therefore, there are no connections to ground from either the positive or negative legs of the EDAS batteries or chargers. An ungrounded DC system ensures system reliability and availability in the event one of the system legs becomes grounded. The EDAS includes ground fault detection devices and relays consistent with the recommendations of IEEE Standard 946-2020 (Reference 8.3-5).

Physical separation is achieved by installing equipment in different rooms that are separated by 3-hour fire barriers. The EDAS-MS Division I cables (channels A and C) and raceways are routed separately from EDAS-MS Division II cables (channels B and D) and raceways. Similarly EDAS-C Division I cables and raceways are routed separately from EDAS-C Division II cables and raceways. Although EDAS el ectrical power is not required to achieve a safe shutdown, this separation ensures that equipment in one fire area rendered inoperable by fire, smoke, hot gases, or fire suppressant does not affect the availability of the redundant equipment located in another fire area. The fire protection features and analyses are described in Section 9.5.1.

The EDAS-MS equipment is shown on Figure 8.3-4a and Figure 8.3-4b.

NuScale US460 SDAA 8.3-6 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

EDAS equipment that provides backup power is designed to Seismic Category I standards as discussed in Section 3.7 and Section 3.10.

Augmented Direct Current Power System Batteries

Each EDAS battery comprises valve-regulated lead-acid (VRLA) type cells connected in series to generate 125 Vdc. The EDAS includes augmented design provisions for batteries. The batteries are designed and installed per IEEE Std. 1187-2013. Maintenance and testing is performed in accordance with IEEE Std. 1188-2005(R2010) with 2014 amendment. The batteries are sized per IEEE Std. 485-2020. Instrumentation, indication, and alarms conform with IEEE Std. 946-2020, IEEE Std. 1491-2012, IEEE Std. 1187-2013, and IEEE 1188-2005.

8.3.2.1.2 Normal Direct Current Power System

The EDNS is a non-Class 1E DC power system classified as nonsafety-related and non-risk-significant. Table 8.3-2 identifies SSC classifications for EDNS. The EDNS does not serve safety-related loads, and it does not have safety-related functional requirements during plant startup, normal operation, shutdown, or abnormal operation.

The EDNS is shared among the NPMs and provides both DC power and AC power (through inverters) to nonsafety-related loads that support functions related to investment protection and power generation (i.e., the loads that are part of plant permanent nonsafety systems). A simplified layout of the EDNS is shown in Figure 8.3-5.

8.3.2.2 Design Evaluation

8.3.2.2.1 Onsite Direct Current Power System Conformance with Regulatory Framework

This section describes the extent to which the design of the onsite DC power systems, including the EDAS and the EDNS electrical equipment, conforms to NRC requirements and guidance. As such, the information in this section provides clarification for the associated entries in Table 8.1-1.

General Design Criterion 2

The EDNS is not required to function in the event of natural phenomena events. The EDNS structures, systems, and components with the potential for adverse seismic interaction with Seismic Category I SSC are designed to Seismic Category II requirements so that t heir failure does not affect the ability of safety-related SSC to perform their intended functions. The EDAS is augmented to comply with GDC 2 requirements for increased reliability and availability. The EDAS structures, systems, and components are located in Seismic Category I areas of the plant, specifically in the Reactor Building and in areas of the Control Building (CRB) that are designed to withstand the

NuScale US460 SDAA 8.3-7 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

effects of and function following natural phenomena such as earthquakes, tornadoes, hurricanes, floods, and externally-generated missiles.

The EDAS structures, systems, and components are further augmented by applying design, qualification, and QA prov isions typically applied to Class 1E DC power systems using a graded approach. The graded approach is reflected in the EDAS design, qualification, and QA provisions detailed in this Chapter and the Quality Assurance Program Description. Augmented DC power system SSC that provide back up DC electrical power meet Seismic Category I standards per Reference 8.3-14.

General Design Criterion 4

The EDAS complies with GDC 4 requirements. The EDAS design accommodates the effects of environmental conditions by applying augmented provisions for the design, qualification, and QA typically applied to Class 1E DC power systems using a graded approach. The graded approach is reflected in the EDAS design, qualification, and QA provisions detailed in this Chapter and the Quality Assurance Program Description. The EDAS is located in a mild environment as defined in 10 CFR 50.49(c), such that it is not subject to the requirements of 10 CFR 50.49. The physical locations of the EDAS-MSs and EDAS-C within the Reactor Building and the CRB, respectively, provide the EDAS with prot ection from dynamic effects, including the effects of missiles, pipe whipping, and discharging fluids.

The Reactor and Control Building HVAC systems provide EDAS structures, systems, and components with ventilati on including cooling, heating, humidity control, and hydrogen dilution in accordance with Reference 8.3-7, Reference 8.3-8, and Reference 8.3-12. The BPSS delivers backup power to heating, ventilation, and air conditioni ng systems serving the battery and associated charger rooms to avoid prolonged periods of high ambient temperature.

The EDAS batteries are environmentally qualified per Reference 8.3-13.

General Design Criterion 5

As shown on Figure 8.3-4a and Figure 8.3-4b, the EDAS-MS is not shared among NPMs. Specifically, portions of the EDAS that supply electrical power to the MPS are not shared. Each NPM is provided with a dedicated EDAS-MS.

Sharing of the EDAS-C is shown on Figure 8.3-3. A postulated loss of power or power fluctuation on the EDAS-C would not result in adverse interactions among NPMs, and would not impair the performance of safety-related functions necessary to achieve and maintain safe shutdown of the NPMs.

A failure in the EDNS system does not impair the ability to achieve and maintain NPM safety-related functions.

NuScale US460 SDAA 8.3-8 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

General Design Criterion 50

The electrical design requirements for electrical penetration assemblies comply with GDC 50 as described in Section 8.3.1.2.1.

10 CFR 50.63

The design conformance with 10 CFR 50.63 is described in Section 8.4.

Regulatory Guide 1.68

The EDAS preoperational testing is performed as part of the Initial test program described in Section 14.2.12.

Regulatory Guide 1.75

The onsite electric DC power systems do not perform safety-related functions and do not contain Class 1E circuits. Therefore, the DC electric power systems are outside the scope of RG 1.75 and IEEE Std 384-1992, which specify criteria for establishing and maintaining electrical independence of safety-related equipment and circuits. Notwithstanding, the physical separation, electrical independence, and identification criteria of RG 1.75 and IEEE Std. 384-1992 are applied to the EDAS as an augmented quality provision.

8.3.2.2.2 Electrical Power System Calculations and Distribution System Studies for Direct Current Systems

The following information describes the calculations and studies that are developed for the DC power systems. The calculations are performed using the Electrical Transient Analyzer Program computer software (Reference 8.3-3).

The EDAS and EDNS load-flow analyses are performed in accordance with IEEE 485-2020 and IEEE 946-2020.

Short-circuit analyses are performed for the EDAS-MS and EDAS-C subsystems. These analyses are performed in accordance with IEEE Standard 946-2020 (Reference 8.3-5) and IEEE Standard 242-2001 (Reference 8.3-2) methodologies.

The DC equipment is sized using the methodologies in Reference 8.3-2, Reference 8.3-4, Reference 8.3-5, and Reference 8.3-11.

Equipment protection and coordination studies are performed in accordance with Reference 8.3-2, Reference 8.3-5, and Reference 8.3-11.

The EDAS battery chargers supplied by the ELVS provide electrical isolation between the AC power system and the EDAS.

NuScale US460 SDAA 8.3-9 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

The EDAS is isolated from the NMS and MPS by Class 1E isolation devices that are described in Section 7.0.4 and Section 7.1.2. Electrical isolation of safety-related loads from the DC power systems ensures that variations in voltage, frequency, and waveform (harmonic distortion) in the DC power systems do not degrade the performance of safety-related systems.

8.3.2.2.3 Grounding

The EDAS power supply system is operated ungrounded. Neither the positive nor the negative leg is grounded during normal operation. Therefore, a connection to ground on either the positive or negative leg does not change the DC system voltage; it is only referenced to ground at that point. However, structures and components of the EDAS are connected to the station ground grid to provide personnel and equipment protection.

The EDAS design incorporates ground detection features to identify when a connection to ground occurs on either the positive or negative leg of the DC system.

8.3.2.3 Inspection and Testing

Augmented Direct Current Power System

Periodic inspection and testing is performed on the EDAS for operational, commercial, and plant investment protection purposes.

The EDAS is designed to permit appropria te periodic inspection and testing to assess the operability and functionality of the systems and the condition of their components. Specifically, the EDAS design allows for removing portions of the system from operation without affecting continued operation of the plant.

Protection devices are capable of being tested, calibrated, and inspected.

Preoperational tests are conducted to confirm battery capacity and verify proper operation of the EDAS. These tests are within the scope of the initial test program described in Section 14.2.

8.3.2.4 Instrumentation and Controls

The MCR and remote monitoring and control of certain onsite DC power system components is provided by the plant control system and the module control system.

The EDAS includes provisions for indication of system status in the main control room. Indication readouts and alarms are provided in accordance with Reference 8.3-1, Reference 8.3-5, Reference 8.3-7, and Reference 8.3-8.

Each EDAS-C and EDAS-MS battery has a battery monitor connected that provides continuous monitoring of EDAS battery performance characteristics, including temperature deviations, discharges, and voltage excursions that exceed predefined tolerances.

NuScale US460 SDAA 8.3-10 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

8.3.3 References

8.3-1 Institute of Electrical and Electronics Engineers, IEEE Guide for Selection and Use of Battery Monitoring Equipment in Stationary Applications, IEEE Standard 1491-2012, Piscataway, NJ.

8.3-2 Institute of Electrical and Electronics Engineers, "IEEE Recommended Practice for Protection and Coordination of Industrial and Commercial Power Systems (IEEE Buff Book)," IEEE Standard 242-2001, Piscataway, NJ.

8.3-3 Electrical Transient Analyzer Program [Computer Program]. (2016). Irvine, CA: Operation Technology, Inc.

8.3-4 Institute of Electrical and Electronics Engineers, "IEEE Recommended Practice for Sizing Lead-Acid Batteries for Stationary Applications," IEEE Standard 485-2020, Piscataway, NJ.

8.3-5 Institute of Electrical and Electronics Engineers, "IEEE Recommended Practice for the Design of DC Auxiliary Power Systems for Generating Stations," IEEE Standard 946-2020, Piscataway, NJ.

8.3-6 Institute of Electrical and Electronics Engineers, "IEEE Standard Criteria for Independence of Class 1E Equipment and Circuits," IEEE Standard 384-1992, New York, NY.

8.3-7 Institute of Electrical and Electronics Engineers, "IEEE Recommended Practice for Installation Design and Installation of Valve-Regulated Lead-Acid Batteries for Stationary Applications," IEEE Standard 1187-2013, New York, NY.

8.3-8 Institute of Electrical and Electronics Engineers, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Valve-Regulated Lead-Acid (VRLA) Batteries for Stationary Applications," IEEE Standard 1188-2005, New York, NY.

8.3-9 Institute of Electrical and Electronics Engineers, "IEEE Standard for Electrical Penetration Assemblies in Containment Structures for Nuclear Power Generating Stations," IEEE Standard 317-1983, New York, NY.

8.3-10 Institute of Electrical and Electronics Engineers, "IEEE Standard Criteria for the Protection of Class 1E Power Systems and Equipment Nuclear Power Generating Stations," IEEE Standard 741-1997, New York, NY.

8.3-11 Institute of Electrical and Electronics Engineers, IEEE Guide for the Protection of Stationary Battery Systems, IEEE Standard 1375-1998, Piscataway, NJ.

NuScale US460 SDAA 8.3-11 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

8.3-12 Institute of Electrical and Elec tronics Engineers, IEEE/ASHRAE Guide for the Ventilation and Thermal Management of Batteries for Stationary Applications, IEEE Standard 1635-2012, New York, NY.

8.3-13 Institute of Electrical and Electronics Engineers, IEEE Standard for Qualifying Class 1E Equipment for Nuclear Power Generating Stations, IEEE Standard 323-2003, New York, NY.

8.3-14 Institute of Electrical and Electronics Engineers, IEEE Recommended Practice for Seismic Qualification of Class 1E Equipment for Nuclear Power Generating Stations, IEEE Standard 344-2013, New York, NY.

NuScale US460 SDAA 8.3-12 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-13 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-14 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-15 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-16 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-17 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-18 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-19 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-20 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-21 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-22 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-23 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-24 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-25 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-26 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-27 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-28 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-29 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-30 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-31 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-32 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-33 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-34 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-35 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-36 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-37 Revision 1 NuScale Final Safety Analysis Report Onsite Power Systems

NuScale US460 SDAA 8.3-38 Revision 1

NuScale Final Safety Analysis Report Station Blackout

8.4 Station Blackout

A station blackout (SBO) is a complete loss of offsite and onsite alternating current (AC) power concurrent with a turbine trip and t he unavailability of onsite emergency AC power.

As described in Section 8.3, the NuScale Power Module (NPM) design does not rely on onsite or offsite AC power for the performanc e of safety-related functions during a design basis event. As a result, emergency onsite AC power is not included in the design.

The SBO duration for passive plant designs is 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> pursuant to Nuclear Regulatory Commission policy provided by SECY-94-084 and SECY-95-132 and the associated staff requirements memoranda. Passive plants are required to demonstrate safety-related functions can be performed without reliance on AC power for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> after the initiating event.

8.4.1 Station Blackout Analysis and Results

The SBO does not pose a significant challenge to the plant, which does not rely on AC power for performing safety functions. A safe and stable shutdown is automatically achieved and maintained for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> without operator actions. The anticipated operational occurrence and long-te rm cooling acceptance criteria applied in the analyses presented in Chapter 15 demonstrate the acceptance criteria of 10 CFR 50.63 are met. The short-term NPM response to the SBO event is bounded by the transient results presented in Section 15.2.6. The transition to emergency core cooling system and long-term cooling in the SBO event is bounded by the long-term cooling analyses described in Section 15.0. As discussed in Section 9.2.5, the ultimate heat sink is capable of passive cooling for all modules for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> under accident conditions, which is bounding for the SBO event. For the SBO event, the emergency core cooling system actuates as designed, with no single failure. The water level in the reactor pressure vessel remains stable above the top of the active fuel.

8.4.2 Station Blackout Coping Equipment Assessment

The equipment described in Sections 9.2.5, 15.0, and 15.2.6, which is relied upon to meet 10 CFR 50.63, is passive, safety-related, and environmentally qualified. Design bases accident conditions bound the SBO environment.

The control room remains habitable for the duration of the SBO event using the control room habitability system. The control room instrumentation to monitor the event mitigation and confirm the status of reactor cooling, reactor integrity, and containment integrity remains available. The control room habitability system is described in Section 6.4.

8.4.3 Station Blackout Procedures and Training

Training and procedures to mitigate an SBO event are implemented in accordance with Section 13.2 and Section 13.5. The SBO mitigation procedures address SBO response (e.g., restoration of onsite standby power sources), AC power restoration (e.g., coordination with transmission system load dispatcher), and severe weather guidance (e.g., identification of site-specific actions to prepare for the onset of severe

NuScale US460 SDAA 8.4-1 Revision 1 NuScale Final Safety Analysis Report Station Blackout

weather such as an impending tornado), as applicable. Restoration from an SBO event is contingent upon AC power being made available from the offsite power system (if provided) or the backup power supply system, which are described in Section 8.2 and Section 8.3.

NuScale US460 SDAA 8.4-2 Revision 1