ML090340728

Final Safety Analysis Report, Amendment 92, Sections 9.4, Air Conditioning, Heating, Cooling, and Ventilation Systems - 9.5.8 Diesel Generator Combustion Air Intake & Exhaust System

ML090340728
Person / Time
Site:	Watts Bar
Issue date:	12/18/2008
From:	Tennessee Valley Authority
To:	Office of Nuclear Reactor Regulation
References
Download: ML090340728 (380)

Text

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-1WATTS BARWBNP-89 9.4 AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4.1 Control Room Area Ventilation System9.4.1.1 Design BasesThe Control Building heating, ventilating, air-conditioning, and air cleanup systems are designed to maintain temperature and humidity conditions throughout the building for the protection, operation, and maintenance and testing of plant controls, and for the safe, uninterrupted occupancy of the main control room habitability system (MCRHS) area during an accident and the subsequent recovery period. Refer to Section 6.4 for further information regarding control room habitability and definition of MCRHS area. The main control room habit ability zone (MCRHZ) is designed to maintain a positive pressure relative to the outdoors and to the adjacent areas at all times, except during a tornado warning, to minimize air inleakage.The Control Building air-conditioned equipment areas and normally occupied personnel spaces are maintained in the range of 60°F minimum to 104°F maximum temperature during all modes of operation. The main control room (MCR) temperature and humidity controls are set at 75°F and 50% relative humidity, respectively, for comfort of the operators and protection of instruments during normal operation.The Control Building outside air intakes are provided with radiation monitors, and smoke detectors. Indicators are provided with the radiation monitors. MCR common annunciation is provided. Isolation of the MCRHZ occurs automatically upon the actuation of a safety injection signal from either unit or upon indication of high radiation, or smoke concentrations in the outside air supply stream to the building. The Control Building HVAC outside air intakes can also be isolated by closing the tornado dampers.

The tornado dampers are closed manually from the MCR during a tornado warning to protect the Control Building from tornado depressurization effects.Upon receipt of a signal for MCRHS area isolation, Control Room Isolation (CRI), the following conditions are automatically implemented:

(1)The Control Building emergency air cleanup fans operate to recirculate a portion of the MCRHS area air-conditioning system return air through the cleanup trains composed of HEPA filters and charcoal adsorbers.

(2)The Control Building emergency pressurizing air supply fan operates to supply a reduced stream of outside air to the MCR air-conditioning system to maintain the MCRHZ pressurized relative to outside and the adjacent areas. This fresh air is routed through the emergency air cleanup trains.

(3)The control room electrical board rooms (ERB) air handling units continue to draw outside air to maintain the lower floor spaces at atmospheric pressure.

(4)The exhaust fan in the toilet rooms is stopped, and double isolation dampers are closed.

9.4-2AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89 (5)The spreading room supply and exhaust fans are stopped and the operating battery room exhaust fan continues to run.

(6)Double isolation dampers in the spreading room supply duct and isolation dampers in the exhaust duct close.

(7)The Auxiliary Building elevation 757 shutdown board rooms pressurizing air supply fans are automatically de-energized.

(8)Double isolation valves close to isolate the normal pressurizing supply to the MCRHZ.MCRHZ isolation may be accomplished manually at any time by the control room operators.The following building air-conditioning and ventilating system components are each provided with two 100% capacity units. Each meets the single failure criterion, and automatic switchover is assured if one of the units fails. These systems include the:

(1)MCR air-conditioning system, water chillers, air handling units, and piping.

(2)Control Building emergency air cleanup supply fans and filter assemblies.

(3)Control Building emergency pressurizing air supply fans.The EBR air conditioning system is provided with two 100% capacity package water chillers and four 50% capacity air handling units with associated piping, valves, and controls. This system meets the single failure criterion, and automatic switchover is assured if one of the components fails.Double isolation dampers are provided in the exhaust ducts from the toilet and locker rooms exhaust fan at elevation 755 to the outdoors, in the normal pressurizing fresh air supply duct to the MCR, and in the supply duct from the spreading room supply fan. Two existing isolation valves, O-FCV-31-36 and O-FCV-31-37, in the fresh air supply duct to the spreading room remain closed and the outlet is blanked off.Fresh air for control room emergency pressurizing is taken from the outdoors from either of two intakes. One is the emergency air intake, located on the east end of the Control Building roof at elevation 775 and the other is connected to the fresh air intake on the roof at the west end of the Control Building. Both intakes are isolated during a tornado warning.All essential air-conditioning equipment, ventilating equipment, isolation dampers, and ducts are designed to withstand the safe shutdown earthquake (SSE). Nonessential components are seismically designed to the extent that they will not affect system operation if they should fail due to a seismic event. All air-conditioning and essential ventilating equipment are protected from the effects of a design basis tornado (Section 3.3.2), by isolation dampers located at all external openings to the Control Building. A AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-3WATTS BARWBNP-87concrete hood located over the air intake provides additional protection from the effects of tornado generated missiles. All air conditioning equipment necessary to ensure main control room habitability in the event of a flood is located in the Auxiliary and Control Buildings at elevations where the equipment remains functional during flooding up to the design basis flood elevation. The EBR air conditioning system is not required during a flood.Piping which could be a source of pipe whip (i.e., high energy lines) does not pass through areas containing essential control building air conditioning or air cleanup equipment. The equipment is also separated from and protected from potential sources of missiles and jet impingement which could adversely affect operation of the system.System and component quality group classification for the Control Building heating, ventilating, air conditioning and air cleanup systems is commensurate with the importance to safety of the function performed by the systems. For further discussion of quality group classification refer to Section 3.2.2.

9.4.1.2 System DescriptionThe Control Building heating, ventilating, air-conditioning, and air cleanup systems are shown on Figures 9.4-1, 9.4-2, and 9.4-3 and the logic and control on Figures 9.4-4, 9.4-4a, 9.4-5, 9.4-6, 9.4-7, 9.4-9, and 9.4-10 and consist of the following systems:

(1)Main control room air-conditioning system (2)Electrical board room air-conditioning system.

(3)Control Building emergency air cleanup system.

(4)Control Building emergency pressurizing system.

(5)Battery room ventilating system.

(6)Miscellaneous ventilating systems.The MCR air-conditioning system water chillers are located in the Auxiliary Building at elevation 737.0. The associated air handling units are located in the Control Building in the mechanical equipment room at elevation 755.0. The area served by this system includes the MCR, the relay room, the DPSO engineers shop, Control Building offices, the technical support center (TSC), conference rooms, kitchen, toilets, locker rooms, and the mechanical equipment room at elevation 755.0.The EBR air-conditioning system water chillers are located in the Control Building in the east mechanical equipment room at elevation 692.0. The associated air handling units are located in the west mechanical equipment room at elevation 692.0. Rooms served by this system include the battery board rooms, battery rooms, battery room exhaust fan room, the communications room, the secondary alarm station at elevation 692.0, and the computer and auxiliary instrument rooms at elevation 708.0.

9.4-4AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87The communications room located on elevation 692.0 has two nonsafety-related air conditioning units to supplement the electric board room air conditioning system. The units receive cooling water from the raw service water system. The units are provided with local controls.The MCR air conditioning system is provided with two 100% capacity package water chillers, two 100% capacity fan-coil type air handling units, and associated pumps, piping, ductwork, and controls.The EBR air conditioning system is provided with two 100% capacity package water chillers, four 50% capacity fan-coil type air handling units, and associated pumps, piping, ductwork, and controls.Approximately 36,000 cfm of conditioned air is supplied by either of the MCR air handling units to the MCR, and other rooms on elevation 755.0. Fresh air is drawn in from the air intake to replace that mechanically exhausted to the outdoors plus makeup for leakage in order to pressurize the MCRHZ. Approximately 36,400 cfm of conditioned air is supplied by either set of EBR air handling units to the rooms on elevation 692.0 and elevation 708.0. Fresh air is drawn in by the air handling units to replace that mechanically exhausted to the outdoors to maintain atmospheric pressure at these floors.During normal and CRI operating modes, all air, fresh and recirculated, is filtered by passing through an air handling unit containing a bank of filters. Filters associated with an inactive air handling unit are available for servicing.During normal operations, all fresh air supplied to the air conditioning systems is maintained above 60°F by a thermostatically controlled duct heater. Additional electric heaters are located in air supply ducts serving the battery board rooms at elevation 692.0; the auxiliary instrument and computer rooms at elevation 708.0; and the relay room, TSC, Control Building offices, conference rooms, toilets, locker room and kitchen at elevation 755.0. The above heaters are each thermostatically controlled to maintain room design conditions.During normal operation, air is exhausted from the Control Building by the toilet and locker room exhaust fan, a spreading room exhaust fan, and a battery room exhaust fan. The spreading room supply fan transfers air from the mechanical equipment room on Elevation 755.0 to the spreading room. The makeup air and pressurizing air is drawn into the Control Building by the operating MCR and EBR air handling units. The air supply quantity is manually preadjusted by balancing dampers, as required, to maintain a minimum 1/8-inch positive static pressure in the main control room and atmospheric pressure in the remainder of the building, except the spreading room which is manually preset at a slight negative pressure relative to outdoors. During accident conditions, double isolation valves automatically close to terminate the normal supply of fresh air to the MCRHZ. The EBR air handling units continue to draw a measured quantity of outside air to maintain the lower floors at approximately atmospheric pressure.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-5WATTS BARWBNP-90In the event of a single active failure which causes the MCRHZ pressure to drop below 1/8-inch water gage positive pressure, any of the four differential pressure indicating switches activate an alarm in the MCR. The control room operator provides corrective action in the normal operating mode and has the option of starting the standby air handling unit. If there is a single failure during the isolation mode, the differential pressure switches automatically start the standby emergency pressurizing fan and its associated air cleanup unit to maintain the pressure in the MCRHZ. The switches also activate an alarm in the MCR. The Control Building emergency air cleanup system is located within the mechanical equipment room at elevation 755. This system is provided with two 100% capacity emergency air cleanup fans, and two 100% capacity air cleanup filter assemblies arranged in two parallel 100% capacity fan-filter trains. Refer to Section 6.5 for further information related to the emergency air cleanup units.The emergency air cleanup system automatically operates upon an accident signal or upon indication of high radiation or smoke concentrations in the building fresh air supply. This system can also be manually started from the MCR at any time. During an accident, both of the emergency air cleanup supply fans are started. Controls are provided to permit the control room operators to shut down either one of the air cleanup units and to keep it as a backup. The backup unit automatically starts in the event the operating unit fails.During air cleanup system operation, a portion of the MCR air conditioning system return air is continuously routed through one or both of the air cleanup units and then to the system return air plenum. The cleaned air is thus recirculated to the MCR by the air-conditioning system. The system may be manually operated from the MCR at any time as required for periodic testing in accordance with the technical specifications filter testing program.The Control Building emergency air cleanup fans are ESF equipment and are connected to separate divisions of the emergency power system.

The MCRHZ is pressurized wi th cleaned outdoor air during operation of the control room emergency air cleanup system. The minimum positive 1/8-inch positive pressure of the MCRHS area relative to the outdoors and adjoining spaces minimizes the inleakage of unprocessed air during the emergency mode. Section 6.4.3 discusses the three modes of system operation. The control room emergency pressurization system is provided with two 100% capacity emergency pressurizing air supply fans located within the mechanical equipment room elevation 755. The fresh or pressurizing air is taken from either of two air intakes, one from the Control Building roof at Elevation 775 near the east end of the building and the other from the fresh air intake at the west end of the building. Each fan is duct-connected to an intake hood to provide two separate 100% capacity air supply systems. Air from each emergency intake is ducted to the associated emergency pressurizing fan. A cross-connection is provided just upstream of the fans (refer to Figure 9.4-1) which allows either emergency pressurization fan to draw air from either emergency air intake if necessary. The manual damper in the cross connection is normally in the locked closed position. The damper, which is 9.4-6AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89accessible from within the habitability area, is opened only if one of the emergency pressurizing fans has failed and contamination of the air intake associated with the non-failed fan is great enough to require air to be drawn from the other emergency intake. Determination of contamination level is discussed in Section 6.4.3.Emergency pressurization air supply discharges to the control room air-conditioning system return air upstream of the air cleanup filter assembly trains. The emergency pressurizing fans are the vaneaxial type with a capacity to deliver 711 cfm. These fans (one redundant) are ESF equipment and are connected to separate divisions of the emergency power system.Both emergency pressurizing fans are started by the same accident signal that starts the air cleanup units. The capability is provided to place either of the operating air cleanup units and the associated emergency pressurizing fans in the standby mode.

The standby components start automatically in the event of a failure of the operating air cleanup unit or its emergency pressurizing fan.The battery rooms ventilation system consists of two 100% capacity and one reduced capacity exhaust fans. The fans are located on the elevation 692.0 floor with the two 100% capacity fans located near the west end of the building and the other fan located in the east mechanical equipment room.Fire dampers provided in each room's air exhaust duct and air supply opening operate to isolate the room upon high temperature due to fire. The battery room ventilation system is required to operate at all times except during the design basis flood and during a 72-hour period following a fire. A standby fan automatically starts upon failure of the operating fan to produce airflow. The battery room fans are ESF equipment and are connected to the emergency power system. The reduced capacity exhaust fan C-B is normally unpowered, but can be manually started if needed to control hydrogen in the battery rooms.The spreading room is ventilated by one of two 100% capacity exhaust fans (one being on manual standby) located at the east end of the spreading room at elevation 729.0. One spreading room supply fan, located in the mechanical equipment room at elevation 755.0, supplies air from the mechanical equipment room. Because the spreading room is maintained at a slight negative pressure during normal operation, some air enters via leakage from the MCR and the electrical board room areas. The spreading room supply and exhaust fans are nonsafety-related and are not connected to the emergency power system. During control room isolation, the spreading room fans are automatically shut off and isolation dampers closed. The mechanical equipment room at elevation 755.0 is normally ventilated by the passage of air-conditioning system supply air from the system air handling unit. The mechanical equipment room at elevation 692.0 is ventilated at all times with air supplied by the EBR air-conditioning system supply and with air drawn through the room to the air-conditioning return air duct.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-7WATTS BARWBNP-89The kitchen, toilet, and locker rooms at elevation 755.0 are ventilated by exhausting a portion of the control room conditioned air through the rooms. The toilet and locker room exhaust fan is located in the elevation 755.0 mechanical equipment room and discharges directly to the outdoors.The toilet and locker rooms exhaust fan is nonsafety-related and is not connected to the emergency power system. During control room isolation the toilet and locker room exhaust fan is automatically shut down, and double isolation dampers close.Dampers used to isolate the MCR habitability area from the outside and from portions of the ventilation systems serving other areas of the Control Building are low leakage type dampers. They are heavy-duty dampers provided with resilient seals along the blade edges. These dampers close following detection of high levels of radiation, concentrations of smoke, or receipt of an isolation signal. Refer to Section 6.4 for further information regarding damper leakage.

9.4.1.3 Safety EvaluationThe Control Building air-conditioning systems are engineered safety features (ESF). Each pair of full-capacity (one redundant) water chillers and each redundant set of air handling units are served from separate trains of the emergency power system and from coordinated separate loops of the ERCW. Upon loss of offsite power, emergency power to the main control room and electrical board room chiller packages is automatically reestablished in sequence by the diesel generator in accordance with FSAR Table 8.3-3. The failure modes and effects analysis presented in Table 9.4-7 verifies the capability of the system to maintain acceptable environmental conditions within the Control Building during any mode of system operation following any single

active failure.All MCR equipment operates normally at an ambient temperature of 75°F. Abnormal excursions of short duration (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> or less) to 104°F maximum and 60°F minimum may occur without adverse effects on the equipment. At sustained temperatures above 104°F or below 60°F, failure rates for control room equipment may tend to rise somewhat and some instrumentation inaccuracies may arise. The full-capacity air-conditioning system redundancy discussed above, however, reduces the probability of over-temperature operations to acceptably small values. Loss of ventilation problems are discussed further in Section 3.11.4.The air cleanup equipment installed to purify air supplied to the MCR habitability zone during emergencies is classified as an ESF air cleanup system. Good general agreement with Regulatory Guide 1.52 standards for air cleanup equipment is achieved. Details on this compliance are given in Table 6.5-4.Each of the Control Building emergency air cleanup units consists of a bank of HEPA filter cells and a bank of carbon absorber modules. Test connections and appropriate instrumentation are also provided for each air cleanup unit. For further details refer to Section 6.4.4.

9.4-8AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89One Control Building air-conditioning system filter bank is provided on the air intake on each of the system air handling units. Each filter cell is rated for an initial resistance of 0.40 inch water gauge when clean, and filtering media should be replaced with new media upon an increase in resistance to 1.0 inch water gauge.For discussions on radioactivity dose levels and detection of airborne contaminants, refer to Section 12.4 and 12.3.4.Tornado dampers are provided to isolate the Control Building HVAC outside air intakes during a tornado warning. The isolation is provided upon damper closure during either normal system operation or Control Room Isolation. The loss of MCRHZ pressurization during this time will not result in contaminated air leaking into the MCRHZ since a LOCA is not postulated concurrent with a tornado.The only heating, ventilating, and air conditioning required in the Control Building in the event of a flood above plant grade is for the elevation 755.0 rooms, including the MCR.

The equipment used for this function includes the MCR air handling units, and the duct heater in the Control Building air supply duct. This equipment is located in the mechanical equipment room at floor elevation 755 of the Control Building and is consequently unaffected by the design basis flood. The water chillers serving the main control room air handling units are located in the Auxiliary Building at floor elevation 737 and are functional for floods up to the design basis flood level. Refer to Section 2.4.14 for additional discussion of the plant flood protection plan.9.4.1.4 Tests and InspectionThe Control Building air-conditioning systems are in continuous operation and are accessible for periodic inspection. The system is tested initially as part of the preoperational test program (Chapter 14.0). After maintenance or modification activities that affect a system function, testing is done to reverify the system or component operation.The building emergency pressurizing air supply fans and air cleanup assemblies are tested periodically. Details of the testing program for the air cleanup units are included in Section 6.5.Details of the radiation monitors are included in Section 11.4.

The battery rooms ventilating system is in continuous operation. The exhaust fans are accessible for periodic inspection. The air-conditioning system filter cells have their filtering media replaced when high differential pressure is observed.

9.4.2 Fuel Handling Area Ventilation System9.4.2.1 Design BasesThe fuel handling area ventilation system, a subsystem of the Auxiliary Building ventilating system, serves the fuel-handling area at elevation 757, the penetration AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-9WATTS BARWBNP-88rooms at elevation 757 and elevation 782, and the fuel, waste, and cask handling areas at elevation 729 and elevation 692.The system is designed to: (1) maintain acceptable environmental conditions for personnel access, operation, inspection, maintenance, and testing, (2) protect mechanical and electrical equipment and controls, and (3) limit the release of radioactivity to the environment during all weather conditions. The environmental control system is designed to maintain building temperatures between 60°F minimum and 104°F maximum.During accident conditions, the fuel handling area ventilation system is shut down and all environmental control is handled by the Auxiliary Building gas treatment system (ABGTS), described in Section 6.2.3. All ductwork, dampers, and grilles of the fuel handling area ventilation system essential to operation of the ABGTS are designed to Seismic Category I and Safety Class 2b requirements. Each fan is provided with a primary circuit breaker and a shunt trip isolation switch which is tripped by a signal of the opposite train from that for the primary circuit breaker to ensure that power is isolated from the fan. All other system components, including exhaust fans and remaining ductwork and dampers, are designed to Seismic Category I(L) requirements.To control airborne activity, ventilation air is supplied to clean areas, then routed to areas of progressively greater contamination potential. The fuel handling area is maintained at a slightly negative pressure to limit outleakage, and can be physically isolated from the outdoors in case of radiological contamination. To assure that the desired airflow is maintained under all conditions, the exhaust fans can be connected to an emergency power source.Air utilized to ventilate the fuel handling area, waste packaging, and cask shipping area is exhausted through the fuel handling area exhaust fans. An exhaust duct system from the waste packaging area and cask loading area is connected to a duct system around the periphery of the spent fuel pit and fuel transfer canal. Thus, exhaust air from the fuel handling area passes across the spent fuel pit forming an air curtain across the pool.Exhaust is provided by two 100% capacity fuel handling area exhaust fans. During normal operation one fan is in operation with the other on standby. Both fans discharge to the Auxiliary Building exhaust stack.An inlet damper furnished with each fuel handling area exhaust fan is used to regulate the volume of air exhausted as required to maintain a 1/4 inch negative pressure within the building. These dampers are automatically operated by static pressure controllers.During periods of high radiation in the fuel handling area or upon initiation of a containment isolation signal, or for high air temperature at the supply intake the Auxiliary Building supply and exhaust fans and the fuel handling exhaust fans are automatically stopped and low leakage dampers located in the ducts that penetrate the Auxiliary Building are closed. An isolation barrier is thus formed between the building 9.4-10AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89and the outdoor environment, and the Auxiliary Building gas treatment system is placed in service (see Section 6.2.3). The Auxiliary Building gas treatment system maintains the Auxiliary Building secondary containment enclosure less than a 1/4-inch water gauge negative pressure during these high radiation or accident periods. The two 100% capacity gas treatment system air cleanup trains are automatically energized. Such operations divert a reduced quantity of building air through the air cleanup units and discharge it into the Shield Building exhaust vent. This vent is located within the annulus space of the Reactor Building and extends to the top of the Reactor Building.The fuel-handling area ventilation system is located completely within Seismic Category I structures and all safety-related components are fully protected from floods and tornado-missile damage.

9.4.2.2 System DescriptionThe fuel-handling area ventilation system is shown on Figure 9.48, on logic Figures 9.49 and 9.4-10, and on control Figures 9.4-11 and 9.4-17.The fuel-handling area is supplied with outdoor air from the Auxiliary Building general ventilation air supply and exhaust system, described in Section 9.4.3. All supply air is passed through filters having a nominal efficiency of 85% based on the NBS atmospheric dust spot test. It is then ducted to clean areas of the fuel-handling area from where it flows to areas of progressively greater contamination potential before being exhausted through a duct system by the exhaust fans. The fuel-handling area exhaust fans are rated to 60,000 ft 3/min and these fans are capable of being connected to emergency power.The cask decontamination area on elevation 729 is ventilated by a separate supply fan which circulate air through the area when the decontamination room is in use. This air flow assures an acceptable environment for motor reliability and preservation.The supply fan provides 199 ft 3/min of ventilation air from the fuel-handling area general spaces. Air from the decontamination room is exhausted to the fuel-handling area exhaust duct work by a 450 ft 3/min exhaust fan. A moisture separator is located upstream of the exhaust fan to remove entrained water from the air stream.

9.4.2.3 Safety EvaluationA fuel handling accident is detected by the two gamma radiation detectors mounted above the fuel pool, which are interconnected as shown in Figure 9.4-12. The high radiation signals via redundant trains will then shut off the fuel handling and Auxiliary Building general exhaust fans and start the ABGTS, as shown in Figures 9.4-9 and 9.4-10. To accomplish its safety function following a fuel handling accident, the fuel handling area ventilation system must accomplish the following functions:

(1) Isolate the normal ventilation pathways between the spent fuel pool and the environment.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-11WATTS BARWBNP-88 (2)Filter the contaminants out of the air by the ABGTS before exhausting it to the environment.The two redundant radiation monitors (safety-related) located above the spent fuel pit assure that the accident is promptly detected and that a high radiation signal is provided to each ventilation train, even if one monitor fails. In addition, the Auxiliary Building radiation monitor (non-safety related) which monitors the Auxiliary Building exhaust vent is also capable of providing a high radiation signal to the MCR.A high radiation signal from either of the monitors located above the spent fuel pit causes the fuel handling area (FHA) and Auxiliary Building general exhaust fans to shut down and their associated dampers to close, as shown in Figures 9.4-9 and 9.4-10. Each of the two FHA exhaust fans have both train A and train B dampers, so failure of one train does not prevent isolation.These two monitors also start the Auxiliary Building gas treatment system upon detection of a high radiation signal in the Auxiliary Building spent fuel pool area. See Section 6.2.3 for a further analysis of the ABGTS.From the study of anticipated failure modes and the analysis of their associated effects, it has been determined that the safety-related portions of the system are capable of functioning in spite of the loss of any active component. See Tables 9.4-8, 9.4-8A, and 9.4-8B for a detailed failure modes and effects analysis (FMEA) on the Auxiliary Building (including fuel handling area) HVAC system.The Auxiliary Building supply inlets are located near ground level on each side of the building. The inlet area is of sufficient size to limit the incoming air velocity to approximately 500 fpm.During normal operation the fuel handling areas are continuously maintained at a slightly negative pressure relative to outdoors to minimize outleakage.During periods of high radiation or upon initiation of a containment isolation signal, the Auxiliary Building secondary containment enclosure, which includes the fuel handling areas, is maintained at a nominal 1/4-inch water gauge negative pressure by the ABGTS. All releases to the environment during this time are through the air cleanup trains of the ABGTS. See Sections 9.4.3 and 6.2.3 for further information.9.4.2.4 Inspection and TestingThe fuel handling area ventilation system is in continuous operation and is accessible for periodic inspection. The system is tested initially as part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is done to reverify the system or component operational/functional integrity.Details of the radiation monitors are included in Section 11.4.

See Section 6.2.3.4 for inspection and testing requirements for the ABGTS.

9.4-12AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87 9.4.3 Auxiliary and Radwaste Area Ventilation System9.4.3.1 Design BasesThe Auxiliary Building ventilating systems serve all areas of the Auxiliary Building including the fuel handling area (see Section 9.4.2) and the radwaste areas. Separate subsystems are utilized for the environmental control of the shutdown board rooms, auxiliary board rooms, and other miscellaneous rooms and laboratories. The ventilating systems also incorporate individual cubicle coolers to provide supplementary cooling to specific safety feature equipment.The Auxiliary Building ventilating systems are designed to: (1) maintain acceptable environmental conditions for personnel access, operation, inspection, maintenance and testing, and for protection of mechanical and electrical equipment and controls, and (2) limit the release of radioactivity to the environment during all weather conditions. The shutdown board, auxiliary control, and battery board rooms at elevation 757 and the auxiliary board and battery rooms at elevation 772 are c ooled by mechanical refrigeration to maintain the room temperatures within the range for which the equipment is environmentally qualified, to ensure that equipment and components are not exposed to environmental conditions that could degrade the operability of safety-related equipment. To control airborne activity, ventilation air is supplied to clean areas, then routed to areas of progressively greater contamination potential. Areas of the building which are subject to radioactive contamination are maintained at a slightly negative pressure to limit outleakage. In addition, the system has the capability of isolating the contaminated areas from the outdoors. All exhaust air is routed through a duct system, and is discharged past a radiation monitor and into the auxiliary building exhaust vent, except exhaust air from the shutdown board rooms, auxiliary control room, battery board rooms on elevation 757, and auxiliary board rooms, battery rooms, and transformer rooms on elevation 772.Upon indication of high radiation in the fuel handling area of the Auxiliary Building, high temperature in the Auxiliary Building air intake(s), or upon an isolation signal from either reactor unit, the auxiliary building supply and exhaust fans are automatically stopped and low leakage dampers located in the ducts which penetrate the Auxiliary Building are closed to complete the isolation barrier. Two 100% capacity gas treatment system filter trains consisting of air heaters, prefilters, HEPA filters and carbon absorbers, are automatically energized and a reduced quantity of building exhaust is diverted through the filter trains and discharged into the shield building exhaust vent (see Section 6.2.3). The exhaust vent is located within the annulus space of the Reactor Building and extends to the top of the Reactor Building.Upon indication of smoke in the Auxiliary Building air intake rooms (Units 1 and 2), the Auxiliary Building general ventilation air supply fans are automatically stopped and dampers closed.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-13WATTS BARWBNP-89The shutdown board room pressurizing supply fans, auxiliary board room pressurizing supply fans, shutdown transformer room exhaust fans, shutdown board room air handling units, auxiliary board room air handling units, air cooled condensing units, chillers, ABGTS fans and filter units, and associated ductwork are designed to Seismic Category I requirements. All other parts of this system, except as identified in Section 9.4.5.3.3, are designed to meet Seismic Category I(L) requirements.For safety-related portions of the system, components are designed to assure that a single active failure cannot result in the loss of a safety-related function. This is accomplished by using 100% redundancy where required as described in the following sections. The Auxiliary Building is structurally designed to resist damage by missiles, either internally or externally produced. Specific design consi derations for missile protection are also described in the following subsections.

9.4.3.2 System DescriptionThe Auxiliary Building ventilation systems are shown on Figures 9.4-13, to 9.4-16, on logic Figures 9.4-9 and 9.4-10, and on control Figures 9.4-11 and 9.4-17. The auxiliary and radwaste area ventilation systems consist of the following subsystems:

(1)Building air supply and exhaust system (general ventilation)

(2)Building cooling system (chilled water)

(3)Safety features equipment coolers (4)Shutdown board room air-conditioning system (5)Auxiliary board room air-conditioning system (6)Shutdown transformer room ventilation system (7)Miscellaneous ventilation and air-conditioning system (8)Auxiliary board room ventilation system.

9.4.3.2.1 Building Air Supply and Ex haust Systems (General Ventilation)The building air supply system filters 100% of outdoor air through a bank of filters for each of two mechanical equipment rooms located at opposite ends of the building at elevation 737.0. The filters have a nominal efficiency of 85% based on the NBS atmospheric dust spot test.During periods when the outdoor air temperature is below 40°F, hot water is supplied to the heating/cooling air intake coils to temper the incoming air. When outdoor air is above 60°F, chilled water is supplied to the heating/cooling air intake coils to increase the cooling capacity of ventilation air. Between outdoor air temperatures of 40-60°F, unconditioned air is supplied.

9.4-14AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89The air supply system utilizes four 50% capacity supply fans, two being located in each of the two mechanical equipment rooms at elevation 737.0. During normal operation, one fan in each equipment room is in operation with the other fan in the standby mode. Supply air is ducted to various clean or accessible areas of the Auxiliary Building from which it flows to areas of progressively greater contamination potential before being exhausted through a duct system by the building exhaust fans. In the event of a fuel-handling accident, radiation monitors in the vicinity of the spent fuel pool initiate an AB isolation signal which stops the building ventilation system and starts the ABGTS fans (see Section 9.4.2). The building supply air is provided by centrifugal fans located downstream of the heating/cooling coils. Each fan is rated at 100,000 cfm at 4.0 inch water gauge static pressure. These fans are not engineered safety features. The building supply filters are composed of two parallel banks. Each filter bank is rated at 85% efficiency based on NBS atmospheric dust spot tests.The general exhaust air from the Auxiliary Building is provided by four exhaust fans each rated at 50% of system capacity. These fans are controlled in blocks of two: one fan per unit is in operation with the remaining fan in the standby mode. These fans are located on the roof of the Auxiliary Building and discharge into the auxiliary building exhaust stack.An inlet damper in series with each auxiliary building exhaust fan is used to regulate the volume of air exhausted as required to maintain 1/4-inch water gauge negative pressure within the building with respect to the outside environment. The inlet dampers are automatically operated by static pressure controllers.Each of the centrifugal exhaust fans is rated at 84,000 cfm.

The isolation dampers and the ductwork between these dampers that make up part of the Auxiliary Building Secondary Containment Enclosure are designed to the requirements of Safety Class 2b and Seismic Category I. For the exhaust fans, the trip circuits for the primary circuit breaker and the shunt trip isolation switch arranged in series with the primary circuit breaker are designed as Class 1E. All other portions of this system are Seismic Category I(L).9.4.3.2.2 Building Cooli ng System (Chilled Water)The purpose of the building cooling system is to supplement the general ventilation system and to maintain temperatures at less than the design maximum in the general spaces of the Auxiliary Building. The cooling system consists of two 100% capacity packaged water chillers, two 100% capacity primary loop circulating pumps, two 100% capacity secondary loop circulating pumps, twelve heating/cooling coils, six fan-coil type air handling units, and associated piping, ductwork, and controls.Primary and secondary chilled water circulating loops are designed for mixing supply and return water to obtain a variable coil inlet temperature to minimize unnecessary heat removal. A primary loop pump provides circulation of water through the water AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-15WATTS BARWBNP-87chiller. The secondary loop pump circulates chilled water to air intake heating/cooling coils and also to the six air handling units located in various areas where ventilation air alone is not sufficient to maintain the maximum space temperature.The chilled water system is designed for manual startup with automatic mixing of primary and secondary loop flows by means of thermostatically controlled two-way control valves. Flow to heating/cooling coils and to air handling units is individually controlled at each terminal unit by three-way modulating control valves. The seasonal changeover from heating to cooling or from cooling to heating is done by the manual operation of system changeover valves located in the mechanical equipment rooms on elevation 737.0.9.4.3.2.3 Safety Feature Equipment CoolersThe safety feature equipment coolers are described in Section 9.4.5.3.9.4.3.2.4 Shutdown Board R oom Air-Conditioning SystemShutdown board rooms are located on elevation 757.0 of the Auxiliary Building with a firewall separating Units 1 and 2 equipment. The electrical boards for either unit can provide the service necessary for the safe shutdown of both plant units following an accident in either unit. Environmental control is maintained by four fan-coil units.Environmental control for the auxiliary control room is maintained by the SDBR air-conditioning system. The four SDBR air-conditioning units are arranged so that each shutdown board room and battery board room is cooled by either of two redundant (train A or B) fan-coil units. Both of these units are located in the respective reactor unit's mechanical equipment room. The air distribution system is arranged such that the auxiliary control room is cooled by two fan-coil units of the same train (i.e., units A-A and B-A or units C-B and D-B) located in the two separate equipment rooms. Four unit heaters provide heating as required to maintain the design ambient conditions. Each SDBR air-conditioning system is connected to an emergency power source as well as a source of cooling water that will be available under all conditions. Upon loss of offsite power, emergency power to both SDBR air-conditioning system chillers is automatically re-established in sequence by the diesel generator in accordance with FSAR Table 8.3-3. One of the two redundant chillers is normally operating and the other is in standby. The standby chiller starts if the operating chiller fails. The SDBR air-conditioning system is designed to meet Safety Class 2b and Seismic Category I requirements. Two 100% capacity pressurizing fans are each designed to maintain the SDBRs at a slight positive pressure with respect to the outdoors. Each of the two air-conditioning units and each of the two pressurizing air supply fans serving one set of SDBRs are powered by different power trains.Redundant tornado dampers are installed in the elevation 757 shutdown board room pressurizing supply fan ductwork which extends to elevation 772; this ductwork is designed for a pressure differential of 3 lb/inch

2. In addition, ductwork penetrating the 9.4-16AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-92elevation 757 personnel and equipment access rooms from the emergency gas treatment system and blowdown treatment rooms is designed for 3 lb/inch

2. Thus, the elevation 757 electrical equipment areas are protected from tornado-induced depressurization.

9.4.3.2.5 Auxiliary Board Rooms Air-Condi tioning SystemsThe auxiliary building electrical boards, located on floor elevation 772.0, are separated into two subareas per unit corresponding to Train A and Train B emergency power. Four separate air-conditioning systems are provided, one to serve each of the four board room subareas. Train B areas which contain both Train A and Train B electrical equipment are cooled by Train A and Train B air conditioning subsystems. Following an accident, the electrical boards in either subarea have the capability to support a safe shutdown of the unit. Because each subarea is served by attendant air-conditioning equipment sized to remove 100% of the heat produced by electrical equipment in that subarea, full redundancy is provided.The Train A air-conditioning equipment located within the elevation 772.0 mechanical equipment room and the Train B air-conditioning equipment located on the roof above are provided structural protection from environmental hazards, including tornado missiles, and floods. The system is also designed to meet Safety Class 2b and Seismic Category I requirements.Each board room air-conditioning system contains a refrigerant compressor, air-cooled condenser, fan-coil air handling unit with direct expansion cooling coils, two 100% pressurizing air supply fans, air supply distribution system and control and safety devices.Two 100%-capacity roof ventilator exhaust fans located on the roof of each of the four separate battery rooms on elevation 772.0 provide continuous ventilation to prevent the possible accumulation of dangerous hydrogen gas.The two 100%-capacity pressurizing air supply fans per air-conditioning system serve a twofold purpose. One is to replace a portion of air-conditioning system air exhausted through the battery room and the other is to pressurize the electrical board room to prevent infiltration of contaminated air. The mixture of this makeup air and board room return air is conditioned upon passing through the air handling unit.One pressurizing air supply fan and one battery room exhaust fan in each individual air-conditioning system are connected to Train A electric power, and the remaining fans are connected to Train B power. Control system interlocks provide simultaneous operation of the pressurizing air supply fan and battery room exhaust fan. The availability of this fan combination on either power train ensures continuous ventilation in each battery room regardless of operability of the direct-expansion air-conditioning equipment. In the event of air-conditioning system failure, pressurizing fan air is drawn through the normal board room supply ducts by the battery room exhaust fan.Condensing unit cooling air for the Train A air-conditioning system of each plant unit is routed from intakes located on the roof at elevation 786, through the condenser, and AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-17WATTS BARWBNP-92discharged through a roof-mounted exhaust housing. The Train B system condenser cooling air is drawn through an intake on the side of the equipment housing on the roof and is discharged through an exhaust opening atop the equipment housing.Each Train A and each Train B room air conditioning system air handling unit is designed to maintain the room temperature within the range for which the equipment is environmentally qualified. The minimum temperature is 50°F for the board rooms and the battery rooms. The maximum temperature for each room is 104°F. This ensures that the equipment and components are not exposed to environmental conditions that could degrade the operability of safety-related equipment.Dampers capable of withstanding pressure differentials between areas of the elevation 772.0 board rooms and mechanical equipment rooms and the outside environment under tornado conditions are located in the intake connections for each of the Train A air-cooled condensers. Each battery room exhaust fan has a damper capable of withstanding pressure differentials imposed by tornado conditions. The dampers are mounted below the fans at elevation 786.0. Small ventilation holes are provided in each damper frame between the exhaust fan and the damper to allow continuous venting of hydrogen gas even when the damper is closed. Each of these dampers is interlocked with its respective exhaust fan such that it will provide isolation of the fan when it is not operating. These dampers are locally operated and will automatically close when the exhaust fans are turned off upon tornado alert.The fifth vital battery room exhaust fans also have dampers capable of withstanding pressure differentials imposed by tornado conditions. The dampers are mounted below the Elevation 786.0 between the ceiling and the in-line fan.The fifth vital battery room is cooled by air which is drawn from the 480 Volt Board Room 1A through an opening in the common partition wall at the "T" Line and is exhausted directly to the outside. This configuration is similar to that of the four battery rooms discussed above, with the exception that the exhaust fans are in-line axial fans and are located in the room. The cooling system is designed to maintain temperatures in this room within the range of 50°F to 104°F, and for continuous venting of hydrogen gas.9.4.3.2.6 Shutdown Transforme r Room Ventilating SystemsThe shutdown transformers, located on elevation 772.0, are divided into two subareas with seven transformers in each subarea. These subareas are further divided into two enclosed areas with Train A emergency power routed to one transformer grouping and Train B emergency power to the other.Outside air enters each subarea through air intake structures located on the Auxiliary Building roof. Each roof-mounted exhaust ventilator is energized from the same train of the emergency power system that supplies power to the transformer for which it provides ventilation. Exceeding the temperature setpoints in a room automatically starts the exhaust fans, and open the air operated dampers in the two air intake structures. Manually starting the exhaust fans also opens the air-operated dampers in the two air intake structures.

9.4-18AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87When the outside air temperature decreases, exhaust fans in the individual transformer rooms are deactivated in staged series as determined by thermostatic control. As the room temperature increases above the predetermined control point, all exhaust fans are again activated in staged series. The shutdown transformer rooms' air is exhausted by electric motor-driven centrifugal-type roof ventilator fans. The motor-operated air intake dampers have the capability of being remote/ manually powered to the open position without regard to thermostatic control as a tornado alert provision.This ventilation system is designed to maintain the temperature in the transformer rooms within the range for which the equipment is environmentally qualified (32°F minimum and 104° maximum) to ensure that equipment and components are not exposed to environmental conditions that could degrade the operability of safety-related equipment. The system is designed to meet Safety Class 2b and Seismic Category I requirements.

9.4.3.2.7 Miscellaneous Ventilat ion and Air Conditioning SystemsThe control rod drive equipment room design temperature limits are maintained by two 100% capacity air-conditioning units located in each room. During normal operation, one of the air-conditioning units in each room is in operation with the other on standby. Each unit is automatically controlled by a self-contained thermostat. Electric unit heaters are located in each room to maintain the rooms at no less than 60°F during cold weather.The hot instrument shop's design temperature is maintained by a chilled water cooling coil which utilizes 100% makeup air to prevent the recirculation of any contaminants. The hot instrument shop exhaust is provided by a lab exhaust hood which is connected to the general building exhaust duct system.The sample room is ventilated by five lab hoods, each with an exhaust fan. Three fans are located on the Unit 1 side and two fans are located on the Unit 2 side. Air enters the sample room through doors with transfer grilles and back draft dampers. Each hood is provided with a separate exhaust fan and HEPA filter assembly. A differential pressure gauge is used to indicate the need for filter replacement. Each hood exhaust fan discharges into the general building exhaust system.The additional equipment building for Unit 1 is served by three air-conditioning units. The first cools the spaces on elevation 729.0, 740.5, and 752.0. The second cools elevation 763.5 and elevation 775.25. The third cools the equipment spaces on elevation 786.5. The Unit 1 additional equipment building air-conditioning units are each designed to cool the intake air with cooling water.The additional equipment building for Unit 2 is served by one air-conditioning unit.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-19WATTS BARWBNP-87The reactor building steam valve rooms each have an independent ventilation system consisting of two roof mounted exhaust fans. The fans draw outside ventilation air for room cooling through a wall opening near the floor. Winter-time space temperature control is maintained by inlet vanes which modulate airflow in response to a wall mounted thermostat.

9.4.3.3 Safety EvaluationFunctional analyses and failure modes and effects analyses have shown that the auxiliary and radwaste area ventilation system has the capabilities needed for normal operations and for accident mitigation. These are described in the sections that follow.

9.4.3.3.1 General Ventilation SystemA functional analysis of the general ventilation system shows that:

(1)Adequate ventilation is provided to achieve acceptable air flow patterns needed for airborne activity control. See Section 9.4.3.2.1.

(2)There are three different signals that will automatically cause the system to change from the normal operating mode to the accident mode. One of these is the Phase A containment isolation signal from either reactor unit. Another is the high temperature signal from the Auxiliary Building air intakes. The third signal is the high radiation signal from the fuel handling area radiation monitors. Either a Train A or a Train B signal from any of these sources will cause the system to change to the accident mode of operation.

(3)Ventilation fan operations cease and isolation dampers in the intake and exhaust ducting close in the accident mode of operation. Air flow patterns and air cleanup operations appropriate for accident mitigation during the accident mode of operation are established and maintained by the ABGTS. See Section 6.2.3 for further information.

(4)Another signal, smoke detection signal from the Auxiliary Building air intake, will shut down the supply fans and close the fan isolation dampers.The failure modes and effects analyses performed on safety related systems interfacing with the general ventilation system have shown that:

(5)During normal mode operations, substandard airflows are detected by a low flow sensor and this sensor signals the MCR for operators to start up the redundant fan(s). The redundant Auxiliary Building general ventilation fan is automatically started upon low flow detection of the operating fan.

(6)A failure of any one of the two radiation monitors above the spent fuel pool does not prevent a high radiation signal from being relayed to necessary isolation components.

9.4-20AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87 (7)A failure of the whole or any part of either Train A or Train B components to complete isolation does not prevent total isolation. Each supply and exhaust line to the environment is equipped with both Train A and Train B low leakage isolation dampers.

(8)Essential portions of the system remain functional after a seismic event because of their design to Seismic Category I requirements. Nonessential portions of the system and other systems located close to essential components and not designed to Seismic Category I standards are designed to Seismic Category I(L) standards to prevent their failure from precluding operation of essential system components.

(9)All essential isolation valves and their associated ductwork are located above the maximum flood level in a Seismic Category I building that is designed to resist damage by tornado missiles.

(10)A loss of offsite power causes closure of the isolation dampers by virtue of their fail-safe design (closed when unpowered). Preferred air flows will be maintained by the ABGTS.9.4.3.3.2 Building Cooling SystemThis system serves no safety-related function. The air handling units and their associated piping, valves, ductwork, and dampers are all designed to Seismic Category I(L) requirements to prevent their failure from endangering safety-related equipment.9.4.3.3.3 Safety Feature Equipment CoolersThis system is discussed in Section 9.4.5.3.9.4.3.3.4 Shutdown Board R oom Air-Conditioning SystemA functional analysis of the shutdown board room air-conditioning system shows that:

(1)During all modes of operation, the system will maintain adequate air temperatures to assure optimum operation of the safety-related equipment it serves. See Section 9.4.3.2.4.

(2)There are redundant pressurizing air supply fans serving each of the two subareas to maintain a slightly positive pressure in the shutdown board areas to minimize contaminated inleakage.The failure modes and effects analyses provided in Table 9.4-9 has shown that:

(1)During all operational modes, substandard cooling or pressurizing air flows are detected by local sensors and a corresponding warning is provided to the main control room.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-21WATTS BARWBNP-87 (2)A failure of one air handling unit initiates the startup and loading of the standby redundant unit.

(3)The failure of one of the two pressurizing air supply fans serving each shutdown board area is detected by local sensors and a signal is provided to activate the standby redundant fan.

(4)Essential portions of the system are designed to Seismic Category I standards to assure that they remain functional after a seismic event. Nonessential portions of this system and other systems located close to essential components are designed to Seismic Category I(L) requirements to prevent their failure from precluding operation of essential system components.

(5)All components of this system are located above the maximum probable flood level and are in a Seismic Category I building that is designed to resist damage by tornado missiles.

(6)Upon loss of offsite power, all essential functions of this system are powered by two trains of emergency electrical power.

9.4.3.3.5 Auxiliary Board Rooms Air-Condi tioning SystemA functional analysis of the auxiliary board rooms air-conditioning system shows that:

(1)During all modes of operation, the system maintains adequate air cooling to assure optimum operation of the safety-related equipment it serves. See Section 9.4.3.2.5.

(2)Two redundant pressurizing air supply fans serve each of the four subareas to maintain a slightly positive pressure in the subarea to minimize contaminated inleakage.

(3)The four battery rooms receive continuous ventilation air supplies to prevent any accumulation of hydrogen gas.The failure modes and effects analysis in Table 9.4-5 has shown that:

(1)During all operations, substandard cooling or pressurizing air flows are detected by local sensors and a corresponding warning is provided in the main control room.

(2)Failure of the air handling unit serving one of the two subareas per plant unit does not prevent the remaining subarea and its air handling unit from accomplishing all the safety-related functions of the auxiliary board area for that unit. Essential Train A electrical equipment located in the Train B 480V board rooms is spot cooled by the Train A HVAC system, assuring it's operability should the Train B HVAC system fail.

9.4-22AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87 (3)The failure of one of the two pressurizing air supply fans serving each of the four auxiliary board subareas is detected by local sensors and a signal is provided to activate the standby redundant fan.

(4)A battery room exhaust fan failure causes automatic activation of the standby exhaust fan and activates an alarm in the MCR. If the air supply to a battery room from the corresponding air handling unit is lost, air is provided by the associated pressurizing air supply fan.

(5)Essential portions of the system are designed to Seismic Category I standards to assure that they remain functional after a seismic event.

Nonessential portions of this system and other systems located close to essential components are designed to Seismic Category I(L) requirements to prevent their failure from precluding operation of essential system components.

(6)All components of this system are located above the maximum probable flood level and are in a Seismic Category I building that is designed to resist damage by tornado missiles.

(7)Upon a loss of offsite power, all essential functions provided by this system are powered by two trains of emergency electrical power.9.4.3.3.6 Shutdown Transfor mer Room Ventilating SystemA functional analysis of the shutdown transformer room ventilating system shows that adequate ventilation air flow is provided to the transformer rooms to maintain environmental conditions conducive to optimum transformer operation.The failure modes and effects analyses in Table 9.4-6 indicate that:

(1)Failure of one or more fans in each room is detected by temperature sensors located in the room. This failure warning allows operators to activate other available exhaust fans in the same room to replace the damaged unit(s).

(2)Loss of flow through one of the two intake structures serving each transformer room would be no safety concern since the second intake opening also opens (both intake structures open simultaneously).

(3)All required portions of this system are designed to Seismic Category I requirements to assure that they remain functional after a seismic event. Other components, and systems, located close to this system are qualified to either Seismic Category I or I(L) standards; therefore, their failure can not preclude operation of this system.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-23WATTS BARWBNP-87 (4)All components of this system are located above the maximum probable flood level and are in a Seismic Category I building that is designed to withstand the effects of tornado missiles. Where components are subject to tornado-generated missile damage, operator actions have been defined in the event of damage.

(5)In the event of a loss of offsite power, emergency electrical power is provided to the transformers and their associated exhaust fans. One of the two subareas serving each unit is provided with Train A power and the other with

Train B power.

9.4.3.3.7 Miscellaneous Ventil ation and Air-C onditioning SystemThese systems serve no safety-related functions; however, to guarantee proper operation of steam relief valves, the steam valve room exhaust fans modulate in response to a wall mounted thermostat to assure that room ambient temperatures do not fall below 80°F during the heating season. In the event extreme outside winter-time conditions still result in room temperatures falling below 80°F, the fans automatically shutdown. The air handling units, fans, and other system components are all designed to seismic Category I(L) requirements to prevent their failure from endangering safety related equipment.9.4.3.4 Inspection and Testing RequirementsThe auxiliary building environmental control systems are in continuous operation and are accessible for periodic inspection. See Section 14.2 for testing acceptance criteria.

The systems are tested initially as part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is done to reverify the system or component operation. See Sections 6.2.3.4 and 9.4.5.3.4 for inspection and testing requirements of the ABGTS and the ESF coolers.Details of the radiation monitors are discussed in Section 11.4.

9.4.4 Turbine Building Area Ventilation System9.4.4.1 Design BasesThe turbine building heating, cooling and ventilating systems are designed to maintain an acceptable building environment for the protection of plant equipment and controls; for the comfort and safety of operating personnel; and to allow personnel access for the operation, inspection, maintenance, and testing of mechanical and electrical equipment. The areas served by these systems are not considered potentially radioactive because the reactor is of the pressurized water type which does not normally produce radioactive steam. Potential sources of radioactivity were not, therefore, considered in establishing air flow paths, and the air flows are not monitored for radiation.

9.4-24AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87The building's environmental control systems are designed to maintain building temperatures between a minimum of 50°F and a maximum of 110°F, by use of forced ventilation, mechanical cooling, and heating systems.

9.4.4.2 System DescriptionThe building can be considered to contain four large rooms: El 755.0 turbine room, El 729.0 spaces, El 708.0 spaces, and elevation 685.5 spaces. See Figure 9.4-18. Because the El 755.0 floor is predominantly concrete and thus isolated from the floors below, the turbine building ventilation is provided by two separate systems. One system serves El 755.0 spaces, and the other system provides ventilation for the spaces on El 729.0 and El 708.0. Because the El 708.0 floor is predominantly grating, air supplied to El 708.0 spaces also provides ventilation for spaces on El 685.5.Both ventilation systems operate on the basis of mechanically supplying the required flow of outside air to spaces being ventilated, and exhausting the building air to outdoors.Each supply and exhaust fan is provided with a motor operated damper designed to automatically close when the fan is stopped, in order to prevent air back flow. Outside air is distributed to areas of heat concentration either by duct distribution systems or by induction using the negative pressure caused by operation of roof exhaust fans, through strategically located air intake openings.9.4.4.2.1 Elevation 755.0 VentilationThe ventilation system for elevation 755.

0 consists of two mechanical air supply systems, one on the north side and the other on the south, free-air-intake openings on the east and west walls, and exhaust fans on the elevation 820.0 roof. Total air exhausted is 570,000 cfm, whereas only 206,000 cfm is mechanically supplied through supply ducts. The remaining 364,000 cfm is drawn through the east and west free-air-intake openings by the negative pressure created by the operation of exhaust fans. 9.4.4.2.2 Elevation 729.0 and Elevation 708.0 VentilationThe elevation 729.0 and elevation 708.0 ventilation system consists of two mechanical air supply systems, one on the north side and the other on the south, and exhaust fans on the elevation 755.0 roof. A total of 412,000 cfm is exhausted, and a total of 412,000 cfm outside air is supplied.9.4.4.2.3 Cold Weathe r Building PressurizationDuring cold weather, all supply and exhaust systems can be isolated by closing the motor operated dampers to conserve heat. However, the two supply fans serving north elevation 708.0 floor may be operated at half speed since two hot water heating coils located in the supply duct connected to each of these fans heat the incoming air. With no exhaust fan running, the operation of these two supply fans will pressurize the entire Turbine Building to prevent infiltration of cold outside air.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-25WATTS BARWBNP-87 9.4.4.2.4 Miscellaneous Ventilating SystemsThe three toilet rooms and three janitor's closets are each ventilated by roof-mounted, roof-ventilator type exhaust fans. Plant air enters each room through a louvered door and is exhausted into the main room. The lubricating oil purification room at elevation 708.0 is ventilated by a centrifugal fan mounted on the room wall, which discharges to the outdoors by means of a duct routed to a basement exhaust housing. A fire damper, mounted in the exhaust opening, and the room firedoor are designed to shut off all airflow in case of fire.The elevator machinery room at elevation 708.0 is ventilated by a wall-exhauster type fan. The lubricating oil dispensing room at elevation 708.0 is ventilated by a wall-exhauster type fan. A fire damper mounted in the exhaust opening and the room's firedoor are designed to shut off all airflow in case of fire.9.4.4.2.5 CoolersFan-coil type raw water cooled cooling units have been installed throughout the Turbine Building to supplement the building ventilation system during peak cooling load conditions. Each cooling unit consists of a centrifugal fan and its motor, and a finned tube type water coil through which raw cooling water is circulated and over which air is passed and cooled.Space coolers located on different elevations help prevent concentration of heat produced by various plant equipment by recirculating air in their immediate vicinities and so establishing the desired airflow patterns.Pump coolers located in areas where miscellaneous turbine building pumps dissipate large amounts of heat, are each designed to remove heat produced by its pump to maintain maximum ambient temperature at 110°F.9.4.4.2.5.1 Space CoolersSpace coolers are located on elevation 729.0, elevation 708.0, and elevation 685.5 floors. A thermostat located near the return airflow to each cooler controls a solenoid valve on the raw cooling water supply line to each coil and the cooler fan. The solenoid valve and the fan on each cooler are interlocked to operate together.

9.4.4.2.5.2 Pump CoolersPumps and the fans of the coolers assigned to them are interlocked to run simultaneously. However, raw cooling water to each cooling coil can be turned off and on manually to conserve water during off time. These coolers are not controlled thermostatically.

9.4.4.2.6 Building Heating SystemThe building heating system serves the Turbine Building and the air preheating coils belonging to the auxiliary building general ventilation system.

9.4-26AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89The heating system is a high-temperature hot water, closed, forced-circulation loop. The system consists of two 100% capacity water circulating pumps, two 70% capacity steam to water heat exchangers, tanks, heating coils, space and unit heaters, nitrogen pressurization, demineralized water makeup, chemical treatment, controls, and supply and return water distribution piping. Steam is normally taken from the turbo-generator cold reheat cycle during operation of either unit, or is taken from the plant auxiliary boiler during plant shutdown or when both units are operating at less than 55% power. The heating system heat exchangers, pumps, and tanks are located at elevation 729.0 along the north end of Unit 2.The heating system is designed to maintain the Turbine Building at a minimum temperature of 50°F with both units shutdown and a 13°F outdoor temperature. Heat is distributed by thermostatically controlled hot water unit and space heaters strategically located throughout the Turbine Building and by hot water heating coils mounted in the north elevation 708.0 air supply ducts. See Figures 9.4-19 and 9.4-20.Fresh air may be supplied (136,000 cfm for plant) through the north elevation 708.0 air supply ducts. The hot water heating coils mounted in the ducts heat the incoming air.The auxiliary building air preheating portion of the heating system consists of a secondary forced-circulation loop system for each plant unit containing two pumps and a 3-way temperature control valve. The valve is thermo-statically controlled to supply outdoor air heated to approximately 60°F.

9.4.4.3 Safety EvaluationThe turbine building ventilating and heating systems are designed to assure their reliable operation during normal plant operation and are not safety related. The free air intake dampers, located along the east and west walls of the elevation 755.0 turbine room are designed to close if a power failure occurs. There is no safety related equipment located in their immediate vicinity. 9.4.4.4 Inspection and Testing RequirementsThe Turbine Building environmental control systems are in continuous operation and are accessible for periodic inspection. 9.4.5 Engineered Safety Feature Ventilation SystemsThe function of the engineered safety features ventilation systems is to provide a suitable and controlled environment for engineered safety feature components during normal plant operation, during adverse environmental transients, and following design basis accidents.

9.4.5.1 ERCW Int ake Pumping Station 9.4.5.1.1 Design BasesThe essential raw cooling water (ERCW) and the high pressure fire protection (HPFP) pump area at Elevation 741 and the raw cooling water and cooling tower makeup pump AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-27WATTS BARWBNP-87area at Elevation 728 are open to the outside environment and are therefore cooled by natural convection. The ERCW and HPFP pump area, the electrical equipment room, and the 100% redundant mechanical equipment rooms are the only areas containing safety-related equipment. The nature of the ventilation system in the ERCW and HPFP pump area provides assurance that a single active failure cannot result in loss of the ERCW and HPFP system functional performance capabilities.The mechanical and electrical equipment rooms heating and ventilation systems are not safety-related. Their primary function is to maintain the room temperatures within the maximum and minimum design values during normal plant operation. Operator action is taken to periodically monitor the Intake Pumping Station mechanical and electrical equipment rooms space temperatures to ensure that the maximum and minimum design values are not exceeded. The ERCW and HPFP pump areas may experience a maximum ambient air temperature of 120°F when the surrounding outside air is 95°F. Since they are exposed to the outside environment the pumps and their associated equipment are designed to withstand low ambient air temperatures. Electrical and mechanical equipment rooms are individually ventilated during normal operation to limit the room temperatures to a maximum of 104°F when the entering outside air temperature is 95°F. Low temperature conditions are maintained approximately 50°F during normal operation by means of thermostatically controlled electric duct heaters and unit heaters and above 32°F during ab normal conditions by periodic temperature monitoring and providing supplemental heating, as necessary. Because the intake pumping station contains no sources of potential radioactivity, there are no safety-related airflow directions that must be maintained and no required radiation monitors.The intake pumping station is a Seismic Category I structure that is protected from the threats of tornado missiles and floods. A grid-type roof system is utilized to provide both missile protection and allow natural ventilation to the ERCW and HPFP pump area. The roof is composed of a series of horizontal 'I' beams rotated 45° about their longitudinal axes. The beams are supported by steel members which are in turn supported by concrete walls. The grillage is designed to meet Seismic Category I(L) requirements. The heating and ventilation equipment, ductwork, dampers, supply and exhaust fans, duct heater, and unit heater serving the electrical equipment and the mechanical equipment rooms meet Seismic Category I(L) requirements.

9.4.5.1.2 System DescriptionThe intake pumping station heating and ventilating systems for the electrical and mechanical equipment areas are shown in Figure 9.4-21. The pump areas are cooled by natural convection.The electrical equipment room and mechanical equipment rooms are individually ventilated by separate ventilation systems. Each system is provided with 100%

capacity supply and exhaust fans. The supply fan delivers air through a short vertical 9.4-28AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89duct which encases the duct heater, a motor operated isolation damper, and a discharge grille. Two electric unit heaters are provided in each room. The duct heater and the unit heaters are thermostatically controlled. Periodic temperature monitoring is necessary to ensure that the equipment room temperatures are maintained within design limits. Equipment room space temperatures are monitored during all plant conditions. Ventilation fans are shut down during subfreezing outdoor temperatures, and portable electric heaters and power generators are utilized as necessary during potential loss of heating to prevent freezing conditions in the equipment rooms. Non-essential cooling loads are manually shut down as necessary to maintain the space temperatures within design limits if ventilation is not available.

9.4.5.1.3 Safety EvaluationA failure modes and effects analysis has shown that the intake pumping station ventilation systems have the capabilities needed for normal operations, abnormal, and accident conditions. The intake pumping station ventilation systems are not classified as safety-related. However, operator actions are taken to periodically monitor room temperatures, provide supplementary heating, shutdown fans, or shed nonsafety-related heat loads, as necessary, to maintain room temperatures between the minimum and maximum design values. The systems are also designed to maintain their structural integrity during a seismic event to not damage safety-related equipment in their vicinity.The analysis of the ventilation system shows that:

(1)Adequate flow-through ventilation is provided for the ERCW and HPFP pump area by natural convection during all credible environmental conditions.

(2)Adequate heating and forced air ventilation are provided to each mechanical equipment room and electrical equipment room to maintain acceptable temperatures during normal operation.

Compensatory actions are taken during abnormal or accident conditions, as needed. See Section 9.4.5.1.2 and Table 9.4-2.The failure modes and effects analysis, as shown in Table 9.4-2, indicates that:

(1)Natural ventilation in the ERCW pump area can be maintained during all environmental conditions, including tornadoes, earthquakes, and floods. A structural failure of the grillage roof will not prevent adequate ventilation air from reaching each operating pump.

(2)During normal operating conditions, the failure of supply or exhaust fans in a mechanical or electrical equipment room will not result in environmental degradation that will prevent the operation of any safety-related equipment, since the temperatures are monitored and operator actions are taken, as necessary.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-29WATTS BARWBNP-899.4.5.1.4 Inspection an d Testing RequirementsThe ERCW intake pumping station ventilating and heating system is accessible for periodic inspection and testing.

9.4.5.2 Diesel Ge nerator Buildings 9.4.5.2.1 Diesel Generator Building 9.4.5.2.1.1 Design BasesThe Diesel Generator Building ventilating system is required to operate to maintain plant safety in the event of a loss of offsite power due to a plant accident or natural disaster, including tornado, earthquake, flood, or fire.The diesel units are redundant and are each served by a separate ventilation system consisting of two 50% capacity exhaust fans. Each ventilation system maintains a proper environment for the operation of safety-related components. Each diesel engine room ventilation subsystem consists of two room exhaust fans and one generator and electrical panel cooling fan. One diesel generator exhaust fan automatically starts upon diesel startup. The second exhaust fan starts when the upper setpoint of a temperature switch mounted in the air exhaust room is reached or on low flow of the first fan. The generator and electrical panel cooling fan can start along with either exhaust fan. The temperature switches mounted in the air exhaust room monitor the temperature of the air as it leaves the diesel generator room. Each switch may actuate its respective room exhaust fan upon detection of high diesel generator room temperature conditions or may deenergize its respective fan, as necessary, in order to maintain the diesel generator room exhaust temperature between 50°F and 120°F. All three fans automatically stop if the diesel generator room carbon dioxide fire suppression system is activated. Switches for manual operator action are provided to override the carbon dioxide system interlocks and start fans, open dampers to restore ventilation and fulfill the safety function if the carbon dioxide is activated by a failure in the carbon dioxide or fire detection systems.The toilet room is ventilated by a manually controlled fan. The electrical board rooms, lube oil storage room, and fuel oil transfer room are ventilated by manually controlled fans at all times except when their respective carbon dioxide fire suppression systems are activated. The muffler rooms are ventilated as required to remove heat during warm weather. Muffler room exhaust fans are manually operated from hand switches located on the electrical board that serves the particular fan, or start along with the diesel when in the auto mode.Fire dampers are provided in each air supply and exhaust opening to the diesel generator room, electrical board room, lube oil storage room, and oil-transfer room. Motor-operated dampers located at the air intake to each diesel generator room are automatically opened whenever either of the exhaust fans starts. All fans except for the generator and electrical panel cooling fans are equipped with motor-operated 9.4-30AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89shutoff dampers which close when their associated fan is not operating. Similarly, all relief vents are provided with motor operated shutoff dampers except the electrical board room intake vents which are provided with fire dampers instead.A backdraft damper is installed in the duct between the air intake room 1A-A and the carbon dioxide storage room in order to prevent carbon dioxide backflow into the diesel generator air intake room in the event of a carbon dioxide system rupture.Each diesel generator unit room and electrical board rooms are separately ventilated in order to limit average room temperatures to a design maximum of 120°F and 110°F respectively when outdoor air entering the room is 95°F and the diesel generator is in operation. Remaining areas of the Diesel Generator Building are ventilated to maintain maximum air temperatures within design limits. Personnel comfort conditions are maintained as required during low outside temperatures by means of thermostatically controlled electric unit heaters. Battery areas are ventilated by the operation of the diesel generator room exhaust fans. There is not a separate battery area ventilation system. The diesels are started up and load-tested at least every 31 days. Whereas, the calculations show that it takes considerably longer for Hydrogen accumulation to reach the limit of 2% by volume. The diesel generator room exhaust fans are interlocked with the diesels; therefore, they are operated at least once every 31 days with the testing of their respective diesels. In addition, the exhaust fans operate whenever their room thermostats call for cooling, as described in Section 9.4.The generator for each engine room is supplied with outside air and the electrical control panels within the engine rooms are forced ventilated to assure adequate cooling.Because the Diesel Generator Building contains no sources of potential radioactivity, there are no safety-related airflow directions that must be maintained and no required radiation monitors.The Diesel Generator Building is a Seismic Category I structure that is designed to withstand the effects of tornado missiles and flood. The diesel generator room exhaust fans, the generator and electrical panel cooling fans, electrical board room exhaust fans, and all associated ductwork, fittings and dampers are located within the building and are designed to meet Safety Class 2b and Seismic Category I requirements. The portions of these systems, located on the roof of the building, are protected against missile damage by missile shields. These fans, their associated controls, and motor-operated dampers are connected to emergency power. The use of concrete air intake and exhaust hoods provides additional protection from the effects of missiles.

9.4.5.2.1.2 System DescriptionThe Diesel Generator Building heating and ventilating system is shown on Figures 9.4-22, -23, -24, -24A and 9.4-25. Two diesel generator room exhaust fans, and one electrical board room exhaust fan are located in the air exhaust room at elevation 760.5 for each of the four diesel generator units. These fans discharge to the outdoors. One generator and electrical panel cooling fan is located within each diesel generator room.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-31WATTS BARWBNP-89Fresh air is introduced through each air intake room and drawn to the corresponding diesel generator room. The generator and electrical panel cooling fan draws air from the room intake vicinity for distribution to the generator air intake and to the electrical panel. Following absorption of the heat load in the room the air is drawn into the air exhaust room by the room exhaust fan(s) and is discharged through the air exhaust hood.Each battery area is ventilated by its respective diesel generator room exhaust fan (see Section 9.4.5.2.1.1 for a detailed description). Each of the electrical board rooms is ventilated by a centrifugal exhaust fan which delivers a design flow rate of 2,850 ft 3/min. The fan draws air into the board room through its associated electrical board room intake vent.Other building exhaust fans provide individual ventilation for the lubricating oil storage room, fuel oil transfer room, carbon dioxide storage room, toilet room, and muffler

rooms.The thermostatically controlled electric unit heaters located within the diesel generator rooms are designed to maintain the 50°F minimum temperature. Electric unit heaters in the equipment access corridor, storage rooms, radiation shelter rooms, and toilet room are designed to maintain normal temperature within these areas at not less than 40°F.Thermostats in the diesel generator air exhaust rooms are designed to automatically stop all operating diesel generator room exhaust fans upon a drop in room exhaust air temperature to below 60°F, and to automatically start the exhaust fans upon a room temperature rise to 80°F. The thermostats will also start the standby exhaust fan during diesel generator operation, when the room exhaust air temperature exceeds 80°F.9.4.5.2.1.3 Sa fety Evaluation A functional analysis and a failure modes and effects analysis have shown that the Diesel Generator Building ventilation system has the capabilities needed for normal operations and for accident mitigation. The functional analysis shows that:

(1)Adequate ventilation is provided to achieve acceptable airflow patterns and environmental conditions for optimum equipment operation during all operational modes. See Section 9.4.5.2.1.1.

(2)The battery area is adequately ventilated (except for system shutdown after a CO 2 system actuation signal) to prevent hydrogen buildup in the diesel generator room.The failure modes and effects analysis, as shown in Table 9.4-4, confirms that:

9.4-32AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-88 (1)During diesel generator operation, low air flows through the fans serving the diesel generator room and generator and electrical panels is detected by a flow sensor. The failure will annunciate in the MCR.

(2)The lack of a dedicated battery hood exhaust fan prevents forced air circulation past the batteries. However, during the monthly testing of the diesel generator, the diesel room exhaust fans start automatically and the dampers in the diesel room exhaust opening open for adequate airflow to pass through the diesel generator room to prevent a buildup of hydrogen gas above 2% by volume.

(3)A failure of an electrical board room exhaust fan, and the resulting heat buildup in the room to above 110°F, may cause loss of the associated diesel generator. The redundant train diesel generator provides power to safely shut down the unit.

(4)Essential portions of this system remain functional during and after a seismic event because of their design to Seismic Category I requirements. Nonessential portions of this system and other systems located close to essential components are designed to Seismic Category I(L) requirements to prevent their failure from precluding operation of essential system components.

(5)During flooding conditions, all essential components of this system will remain functional because they are located above the maximum possible

flood level.

(6)During tornadoes, the essential components of the system remain functional because they are located in a Seismic Category I structure that is designed to resist damage by tornado missiles. For tornado depressurization mitigation, intake, and exhaust dampers are opened to assist in pressure equalization.

(7)Upon loss of offsite power, each diesel generator provides emergency electrical power to its associated ventilation components. All are connected to their respective diesel generator engineered safety power supply, so operation of a diesel generator assure power to the corresponding fans.

9.4.5.2.1.4 Test s and InspectionsThe diesel generator building ventilating and heating systems are accessible for periodic inspection. This system is tested initially as part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is performed as necessary to reverify the system or component operation. See section 14.2 for testing acceptance criteria.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-33WATTS BARWBNP-899.4.5.2.2 Additional Diesel Generator Building (Not required Unit 1 operation) 9.4.5.2.2.1 Design BasesThe additional diesel generator building ventilating system is required to be operable to maintain the C-S D.G. operable when the C-S D.G. is substituted for any of the four original D.G. units. The diesel unit is served by an independent ventilation system. Each subsystem of the ADGB ventilation system maintains a proper environment for the operation of safety-related components, and/or provides personnel comfort.The additional diesel engine room ventilation subsystem consists of two room exhaust fans.One diesel generator room exhaust fan automatically starts upon diesel startup. The second exhaust fan starts when the upper setpoint of a temperature switch mounted in the air exhaust room is reached, or on low flow of the first fan. The temperature switches mounted in the air exhaust room monitor the temperature of the air as it leaves the diesel generator room. These switches may actuate either room exhaust fan upon detection of high diesel generator room temperature conditions or may deenergize either fan, if necessary, in order to maintain the diesel generator room exhaust temperature between 50°F and 120°F.The janitor closet is ventilated by a manually controlled exhaust fan. The 6.9kV board room, 480V Auxiliary Board Room and pipe gallery, fire protection room, corridor, fuel oil transfer pump room, fuel oil transfer room and transformer room are ventilated by manually controlled fans. The muffler room is ventilated as required to remove heat during warm weather. Muffler room exhaust fan is manually operated from hand switches located on the electrical board that serves the particular fan, or start along with the diesel when in the auto mode.Three types of dampers are used in the diesel generator ventilation system. Fire dampers, provided in each air supply and exhaust openings to the 6.9kV board room, 480V auxiliary board room, pipe gallery, fire protection room, corridor, transformer room, and fuel oil transfer pump room, automatically close upon detection of a fire. The motor-operated damper located at the air intake to the additional diesel generator room is automatically opened whenever either of the exhaust fans starts. All fans except for the 480V auxiliary board room exhaust fan and fuel oil transfer room exhaust fan are equipped with motor operated shutoff dampers which close when their associated fan ceases operating.The additional diesel generator room, the 480-volt board room and 6.9kV board room are ventilated to maintain room temperatures less than or equal to design maximum of 120°F when outdoor air entering the room is 95°F and the diesel generator is in operation. Remaining areas of the additional Diesel Generator Building are ventilated using the method of room volume changes. Minimum environmental temperatures are maintained as required during low outside temperature by means of thermostatically controlled electric unit heaters when the transformer and 6.9kV board room and the 480V auxiliary board room exhaust fans are shut down.

9.4-34AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89Because the additional Diesel Generator Building contains no sources of potential radioactivity, there are no safety-related airflow directions that must be maintained and no required radiation monitors.The additional Diesel Generator Building is a Seismic Category I structure that is designed to withstand the effects of tornado missiles and flood. The additional diesel generator room exhaust fans, the 480V auxiliary board room exhaust fan, transformer and 6.9 kV board room exhaust fan, and all associated ductwork, fittings, and dampers are located within the building and are designed to meet Safety Class 2b and Seismic Category I requirements. These fans, their associated controls, and motor-operated dampers are connected to emergency power. The use of concrete air intake and exhaust hoods provides additional protection from the effects of missiles. The 480V Auxiliary Board Room air intake vent, which is mounted on the roof of the building, is not protected against damage by tornado-generated missiles. However, provisions have been made for operator action to restore ventilation cooling to the board room in the event of a tornado warning when the Additional Diesel Generator Unit has been aligned to replace one of the four Diesel Generator Units.

9.4.5.2.2.2 System DescriptionThe additional diesel generator building heating and ventilating systems are shown on Figures 9.4-22A through 9.4-22C. Two diesel generator room exhaust fans, one fuel oil transfer room exhaust fan, one transformer and 6.9kV room exhaust and one 480 V auxiliary board room exhaust fan are located in the air exhaust room at elevation 760.5 for the additional diesel generator unit. These fans discharge to the outdoors.Fresh air is introduced through the air intake room and drawn into the corresponding diesel generator room. Following absorption of the heat load in the room the air is drawn into the air exhaust room by the room exhaust fan(s) and is discharged through the air exhaust hood.The 480V auxiliary board room is ventilated by a centrifugal fan which draws air from the outside through the roof mounted air intake. The transformer and 6.9kV board rooms are ventilated by a centrifugal fan which draws air from the air intake room.Other building exhaust fans provide individual ventilation for the janitor closet, fuel oil transfer pump room, and muffler room.The thermostatically controlled electric unit heaters located within the diesel generator room are designed to maintain 50°F minimum temperature. Electric unit heaters located within the corridor, 480 V auxiliary board room, 6.9kV board room, pipe gallery, transformer room, and fire protection room are designed to maintain normal temperature within these areas at not less than 40°F.Thermostats in the diesel generator air exhaust room are designed to automatically stop all operating diesel generator room fans upon a drop in room exhaust air temperature to below 60°F, and to automatically start the exhaust fans upon room temperature rise to 80°F. The thermostats also start the standby exhaust fan, during diesel generator operation, when the room exhaust air temperature reaches 80°F.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-35WATTS BARWBNP-87 9.4.5.2.2.3 Safety EvaluationA functional analysis and a failure modes and effects analysis have shown that the additional diesel generator building ventilation system has the capabilities needed for normal operations and for accident mitigation. The functional analysis shows that:

(1)Adequate ventilation is provided to achieve acceptable airflow patterns and environmental conditions for optimum equipment operation during all operational modes. See Section 9.4.5.2.2.1.The failure modes and effects analysis, as shown in Table 9.4-4 indicates that:

(1)During diesel generator operation, low air flows through the fans serving the diesel generator room are detected by a flow sensor. The failure will annunciate in the MCR.

(2)A failure of an electrical board room exhaust fan, and the resulting heat buildup in the room to above 104°F, may cause loss of the respective diesel generator. The redundant train diesel generator provides power to safely shut down the unit.

(3)Essential portions of this system remain functional during and after a seismic event because of their design to Seismic Category I requirements. Nonessential portions of this system and other systems located close to essential components are designed to Seismic Category I(L) standards to prevent their failure from precluding operation of essential system components.

(4)During flooding conditions, all essential components of this system remain functional because they are located above the maximum possible flood level.

(5)During tornadoes, all essential components of the system remain functional because they are in a Seismic Category I structure that is designed to resist damage by tornado missiles. The 480v Auxiliary Board Room air intake vent, which is mounted on the roof of the building, is not protected against damage by tornado-generated missiles. However, provisions have been made for operator action to restore ventilation cooling to the board room in the event of a tornado warning when the Additional Diesel Generator Unit has been aligned to replace one of the four Diesel Generator Units. During a tornado warning, the system intake and exhaust dampers are opened to assist in pressure equalization to prevent system damage due to tornado depressurization.

(6)When the additional diesel generator is substituted for any one of the normally aligned units it provides emergency electrical power to its associated ventilation components. All are connected to additional diesel generator engineered safety power supply, so operation of the additional diesel generator assures power to the corresponding fans.

9.4-36AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87 9.4.5.2.2.4 Test s and InspectionsThe Additional Diesel Generator Building ventilating and heating systems are accessible for periodic inspection. This system is tested initially as part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is performed, as necessary, to reverify the system or component operation.9.4.5.3 Auxiliary Building Sa fety Features Equipment Coolers 9.4.5.3.1 Design BasesThe auxiliary building safety features equipment coolers are designed to maintain acceptable environmental conditions for (1) personnel access, operation, inspection, maintenance and testing and (2) the protection of safety-related mechanical and electrical equipment and controls. The system utilizes fan/coil type safety-related air cooling units. Air cooling units are provided for the following rooms and areas:

(1) Residual heat removal pump room (2)Safety injection pump room (3)Containment spray pump room (4)Centrifugal charging pump room (5)Reciprocating charging pump room*

(6)Unit 1 auxiliary feedwater and component cooling water pumps area (7)Unit 2 auxiliary feedwater and boric acid transfer pumps area (8)Component cooling water booster and spent fuel pool pumps area (9)Emergency gas treatment system filter room (10)Elevation 692.0 penetration rooms (11)Elevation 713.0 penetration rooms (12)Elevation 737.0 penetration rooms (13)Pipe chases*Not safety-related All air coolers listed above, except the reciprocating charging pump coolers (indicated with an asterisk), are engineered safety features equipment and are provided with coordinated emergency power and ERCW water sources (see Sections 8.3 and 9.2). Pumps 1 through 5 in the above list are each located in a separate room with their corresponding cooler. Safety-related pump rooms are paired with a 100% redundant AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-37WATTS BARWBNP-89room containing another pump/cooler set. Pumps and equipment listed in Items 6 through 13 are each provided with two 100% coolers in the room/area with one kept on standby. In addition to the above coolers, this system includes two 100% emergency exhaust fans, one safety-related and the other nonsafety-related, in each turbine-driven auxiliary feedwater pump room. Each of these fans is capable of providing the required air flow in the room for the volume changes method of cooling. Rooms and areas containing safety feature equipment are ventilated by airflows induced by the building ventilation exhaust subsystem during normal plant operation and when equipment is not required to operate. All air cooling units are thermostatically controlled to automatically operate upon room temperature rise above the setpoint. Air cooling units for pumps 1 through 4 will automatically start to provide the necessary additional cooling in the space whenever their associated pumps are operated. All other coolers for engineered safety feature equipment will automatically start on an Auxiliary Building isolation signal. A thermostat, located near the return airflow to each cooler, allows the cooler to remain in operation until the low limit temperature setpoint is reached. The cooling water valve and fan are interlocked to operate together for all coolers, except for the residual heat removal and centrifugal charging pump rooms, whose cooling water valves are electrically disconnected in the open position due to 100 CFR 50 Appendix R considerations. The safety features equipment ventilation system is designed to maintain temperatures within the range for which the equipment is environmentally qualified, to ensure that equipment and components are not exposed to environmental conditions that could degrade the operability of safety-related equipment.All components of this system, including air cooling units, fans, ductwork, dampers, valves, and grilles, are designed to meet Seismic Category I and Safety Class 2b requirements. The system is completely enclosed in a Seismic Category I structure that is designed against flood and tornado missile threats.

9.4.5.3.2 System DescriptionThe Auxiliary Building safety feature coolers are shown on Figures 9.4-10, 9.4-13, 9.4-14, 9.4-16, 9.4-26, and 9.4-27. The individual coolers are listed below:NumberRHR Pump Room 4 Safety Injection Pump Room 4 Containment Spray Pump Room 4 Centrifugal Charging Pump Room 4 Reciprocating Charging Pump Room 2 Unit 1 Auxiliary Feedwater and Component Cooling Water Pumps 2

9.4-38AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89The turbine-driven auxiliary feedwater pump rooms are normally cooled by the auxiliary building general ventilation system. For emergency ventilation, two roof ventilator type exhaust fans are located on the roof of each room, venting into the general spaces of the Auxiliary Building. One of the two fans per room is designed to operate on 115v, 60 Hz ac emergency power while the other is designed for 115V dc station vital battery power. The ac-powered fan is nonsafety-related and the dc-powered fan is safety-related. Both fans in each room are thermostatically controlled to automatically operate upon room temperature rise above 95°F. The dc powered fan also automatically runs upon pump start. Each fan is rated at 1200 cfm and designed to circulate a sufficient quantity of building air through their rooms to limit the maximum temperature rise to approximately 20°F above ambient.

9.4.5.3.3 Safety EvaluationA functional analysis and failure modes and effects analysis have shown that the Auxiliary Building safety features coolers have the capabilities needed for normal operations and for accident mitigation. These are described in the paragraphs that follow.A functional analysis of the system shows that:

(1)Adequate ventilation is provided during normal operations by the auxiliary building general ventilation system. When the applicable equipment is operating, the safety features equipment area and turbine-driven auxiliary feedwater pump room fans provide adequate temperature control to assure reliable equipment operation.

(2)The containment isolation Phase A signal, high radiation in the spent fuel pool area, and high air temperature in the Auxiliary Building air intake provide for a two-train isolation signal for the Auxiliary Building. Isolation of the general ventilation system, described in Section 9.4.3, results in the disruption of normal airflow patterns.Unit 2 Auxiliary Feedwater and Boric Acid Treatment Pumps 2Emergency Gas Treatment Room 2Component Cooling Water Booster and Spent Fuel Pool Pumps 2Pipe Chases 4Unit 1, elevation 692.0 Penetration Room 2 Unit 2, elevation 692.0 Penetration Room 2 Elevation 713.0 Penetration Rooms 4 Elevation 737.0 Penetration Rooms 4Number AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-39WATTS BARWBNP-90 (3)After the building is isolated from the environment, airflow patterns and air cleanup operations appropriate for accident mitigation during the accident mode of operation are established and maintained by the ABGTS, as described in Section 6.2.3.The failure modes and effects analysis, as shown in Table 9.4-3, indicates that:

(1) The safety-related radiation monitors in the Auxiliary Building refueling area provide redundant signals, for isolation of the Auxiliary Building.

(2)Each ESF pump space is cooled by an ESF cooler. During accident conditions, cooling of the safety features equipment is provided by the safety features equipment coolers. In the event of failure of one cooler, its corresponding redundant cooler is available to assume the required cooling load.(3)During all modes of operation, a fan failure in the turbine-driven auxiliary feedwater pump room causes the thermostatically operated standby fan to assume the ventilation load.

(4)Failure of any portion of th is system as the result of a seismic event is prevented by use of only Seismic Category I components in this system and Seismic Category I or I(L) components in nearby systems.

(5)During the accident mode of operations, emergency electrical power is provided to the ESF pumps and their corresponding coolers or fans. In the event one emergency power train fails, the essential safety-related functions of the system are accomplished by the redundant parts of the system powered by the remaining power train.

(6)Water is supplied to each cooler from the ERCW system described in Section 9.2.1. Failure of one ERCW supply train, and the resulting failure of the coolers supplied by that train, will not prevent the redundant coolers, supplied by a different ERCW train from supporting shutdown of the reactor unit.9.4.5.3.4 Inspection an d Testing RequirementsThe Auxiliary Building safety features coolers are designed to be available for continuous operation and are accessible for periodic maintenance. The system is tested initially as part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is done to reverify the system or component operation. See Section 14.2 for testing acceptance criteria.

9.4.6 Reactor Building Purge Ventilating System9.4.6.1 Design BasesThe reactor building purge ventilating system is designed to maintain the environment in the primary and secondary containment within acceptable limits for equipment operation and for personnel access during inspection, testing, maintenance, and 9.4-40AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-89refueling operations; and to provide a filtration path for any outleakage from the primary containment to limit the release of radioactivity to the environment.The purge function of the reactor building purge ventilating system is not a safety-related function. However, the filtration units are required to provide a safety-related filtration path following a fuel-handling accident.The design bases include provisions to:

(1)Supply fresh air for breathing and contamination control when the primary containment or ann ulus is occupied.

(2)Exhaust primary containment and annulus air to the outdoors whenever the purge air supply system is operated.

(3)Clean up containment exhaust during normal operation by routing the air through HEPA-carbon filter trains before release to the atmosphere to keep releases well below 10 CFR 20 limits and to comply with 10 CFR 50 Appendix I.

(4)Provide a reduced quantity of ventilating air to permit occupancy of the instrument room during reactor operation. The provisions for 1, 2, and 3 above will apply.

(5)Assure closure of primary and secondary containment isolation valves following accidents which result in the initiation of a containment ventilation isolation signal.

(6)Assure closure of the system air intake dampers, which form part of the ABSCE (see Section 6.2.3.2.1), upon receipt of a signal for Auxiliary Building isolation.Items 5 and 6 above are safety-related functions.

The primary containment penetrations for the ventilation supply and exhaust subsystems are designed to primary containment structural standards. These are discussed in detail in Section 6.2.4.The containment purge system is sized to maintain an acceptable working environment within the containment during all normal operations. The system has the capabilities to provide a filtration path for outleakage from the primary containment, and clean up containment atmosphere following a design basis accident.The controls are designed to have simultaneous starting and stopping of the matching supply and exhaust equipment and to initiate an automatic shutdown and isolation upon receipt of the containment ventilation isolation signal. In addition, purge air supply fans will shut down and the ABSCE isolation dampers in purge air supply ducts will close on an ABI signal.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-41WATTS BARWBNP-87The containment purge air exhaust cleanup equipment assures that activity released inside containment from a refueling accident or a LOCA and prior to containment isolation, is processed through both HEPA filters and carbon adsorbers before release to the atmosphere. Fuel handling operations inside the primary containment are constrained by the operability requirement for the containment purge air clean-up units contained in the plant technical specifications.The primary containment purge ventilating system components are designed or qualified to meet Seismic Category I requirements, except all purge ductwork within the containment, up to the inboard isolation valves, and the supply air ductwork from the downstream flange of the ABSCE isolati on dampers to the upstream flange of the Shield Building isolation valves, which are designed to meet Seismic Category I(L) requirements. The above safety-related equipment was purchased in compliance with Quality Assurance procedures.The primary containment exhaust is monitored by redundant fast response radiation detectors which provide automatic containment purge system isolation upon detecting the setpoint radioactivity in the exhaust air stream. The containment purge isolation valves automatically close upon the actuation of a containment ventilation isolation signal whenever the primary containment is being purged during normal operation or upon manual actuation from the main control room.The system air supply and exhaust ducts are routed through the secondary containment to several primary containment penetrations. Two air supply locations are provided for each of the upper and lower compartments and one for the instrument room. Air is supplied to areas of low potential radioactivity and is allowed to flow to the air pickup exhaust points in areas of higher potential radioactivity. The air pickup points, located to exhaust air from the lower compartment and instrument room, also provide an air sweep across the surface of the refueling canal.

9.4.6.2 System DescriptionThe reactor building purge ventilating system is shown schematically in Figures 9.4-28 to 9.4-30. One complete and independent reactor building purge ventilating system is provided for each unit.This ventilating system provides mechanical ventilation of the primary containment, the instrument room located within the containment, and the annulus or secondary containment located between the Containment and Shield Building. The system is designed to supply fresh air for breathing and contamination control to allow personnel access for maintenance and refueling operations. The exhaust air is filtered to limit the release of radioactivity to the environment.During power operation, cooling of the reactor building upper compartment, lower compartment, and control rod drive mechanisms is accomplished by the air cooling systems discussed in Section 9.4.7. The annulus is normally maintained at a negative pressure by the annulus vacuum control subsystem of the emergency gas treatment system as discussed in Section 6.2.3.

9.4-42AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-90The containment upper and/or lower compartments are purged with fresh air by the reactor building purge system before occupancy. The annulus can be purged with fresh air during reactor shutdown or at times when the annulus vacuum control system of the emergency gas treatment system is shut down. The instrument room is purged with fresh air during operation of the reactor building purge system or is separately purged by the instrument room purge subsystem.Each purge system consists of two trains, each designed to provide 50% of the capacity required for normal operation. Each train contains an air supply fan, an air exhaust fan, a cleanup filter unit, containment isolation valves, system air flow control valves, and all necessary ductwork. The system also includes single air supply distribution and air exhaust collection subsystems as well as an instrument room supply fan and an instru ment room exhaust fan.The purge air supply fans are located in the penetration room at elevation 737.0 in the Auxiliary Building. Filtered fresh air, heated when required, is taken from the Auxiliary Building air supply systems located in the mechanical equipment rooms at elevation 737.0. These centrifugal fans have a total system flowrate requirement of 22,949

ft 3/min.The filtered air is discharged to the outdoors by means of the Shield Building exhaust vent located in the annular space of the Reactor Building and extending through the roof of the Reactor Building. The purge air exhaust fans are centrifugal type and belt-driven, with a combined flow of 22,949 ft 3/min. The air cleanup units are described in Section 6.5.1.Annulus purging air is taken from system ducts and routed through the annulus. The air supply and exhaust duct openings are located approximately 180° apart for maximum ventilation.To permit personnel access to the instrument room during reactor operation or during purge system shutdown, the room can be purged by the instrument room purge subsystem fans. These supply and exhaust fans are located alongside the main system supply and exhaust fans and use the main system ducts and one of the filter trains. Butterfly valves are positioned to allow only the instrument room to be served.Each purge system containment penetration is provided with both inboard and outboard air-operated isolation butterfly valves designed for minimum leakage in their closed position. A similar type of valve is mounted in each purge supply and exhaust air opening for the annulus, and in each of the main supply and exhaust ducts located exterior to the Shield Building. The purge air supply line is provided with two air-operated isolation dampers in series for ABSCE isolation. Each of the above butterfly valves and the intake dampers are designed to fail closed and are normally closed during purge system shutdown. See Section 6.2.4 for more on the containment isolation system.The single air supply duct serving the two purge air supply fans and the instrument room supply fan is provided with two isolation dampers. These dampers are air operated, normally closed, failed closed dampers which close automatically on receipt AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-43WATTS BARWBNP-90of auxiliary building isolation or high radiation in refueling area signals. These dampers establish the boundary for the auxiliary building secondary containment enclosure. See Section 6.2.3.Since the annulus is maintained at a 5-inch water gauge negative pressure by the annulus vacuum control system, the annulus portion of the purge system ducts is maintained at the negative pressure by four 1/2-inch leakoffs. This arrangement is designed to prevent containment contamination leakage from escaping through the purge system ducts into the Auxiliary Building.The purge function of the reactor building purge ventilation system is not a safety-related function. However, the filtration units are required to provide a safety-related filtration path following a fuel-handling accident. The primary containment isolation valves and intermediate piping of the RBPVS are designed in accordance with ANS safety class 2A; other portions are designated ANS safety class 2B except the purge fans, all purge ductwork within the containment, purge supply air ductwork from the ABSCE boundary, fire protection, and drain piping. The instrument room purge subsystem is not an engineered safety feature, and credit for a LOCA or a fuel-handling accident is not claimed.Containment ventilation isolation signals automatically shut down the fan systems and isolate the purge systems by closing their respective dampers and butterfly valves. Each primary containment purge system isolation butterfly valve is designed for fail safe closing within 4 seconds of receipt of a closure signal for penetrations X-4, X-5, X-6, X-7, X-9A, X-9B, X-10A, X-10B, X-11, and X-80. The purge containment isolation valve locations and descriptions are given in Table 6.2.4-1. Each valve is provided with an air cylinder valve operator, control air solenoid valve, and valve position indicating limit switches.Smoke detectors, located in the Auxiliary Building air intake and the general ventilation supply ducts, shut down the purge air supply and the incore instrument room purge supply fans and their isolation dampers.

9.4.6.3 Safety EvaluationFunctional analyses and failure modes and effects analysis have shown that the reactor building purge ventilating system meets the containment isolation requirements. The filtration units and associated exhaust ductwork provide a safety-related filtration path following a fuel-handling accident.A functional analysis of the system shows that:

(1)During normal operation, adequate fresh air is provided for breathing and for contamination control when the primary or secondary containment (annulus) is occupied.

(2)Primary and secondary containment exhaust air is cleaned up during normal operations and following a fuel handling accident.

9.4-44AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87 (3)Purge supply and exhaust fan operations cease and isolation dampers in the intake and exhaust ducting close when the system is in the accident mode of operation.

(4)Three signals automatically cause the system to change from the normal purge mode to the accident isolation mode. These signals, including the high radiation signal from the radiation monitors located in the purge air exhaust ductwork, initiate a containment ventilation isolation signal.The failure modes and effects analyses show that:

(1)Two filtration exhaust paths are provided to assure that particulate releases are within 10CFR100 guidelines following a fuel-handling accident and prior to closure of the associated isolation valves.

(2)Each purge supply and exhaust line is equipped with two primary containment isolation valves, each connected to different control and power trains. Failure of one train does not prevent the remaining isolation valve from providing the required isolation capability.

(3)Essential portions of the system remain functional after a seismic event because of their design to Seismic Category I requirements. Nonessential portions of the system and other systems located close to essential components and not designed to Seismic Category I standards are designed to meet Seismic Category I(L) requirements to prevent their failure from precluding operation of essential safety-related equipment.

(4)All essential equipment is located above the maximum possible flood level in a Seismic Category I building that is designed to resist tornado missiles.

(5)A loss of offsite power causes closure of the isolation valves. 9.4.6.4 Inspection and Testing RequirementsBefore power operation, tests are conducted to assure that the reactor building purge ventilation system performs as designed. The system is tested initially as part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is done to reverify the system or component operation. Purge system containment penetration isolation valves are tested for inplace closing speed and leak tested in the closed position to comply with the requirements of 10 CFR 50, Appendix J. The inspection and testing of these valves is discussed in Section 6.2.4.Details of the testing program for the air-cleanup units are included in Section 6.5.

Automatic shutdown and isolation of the primary and secondary containment ventilation purge systems upon containment isolation are confirmed periodically.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-45WATTS BARWBNP-879.4.7 Containment Air Cooling System 9.4.7.1 Design Bases The containment air cooling systems are designed to maintain acceptable temperatures within the reactor building upper and lower compartments, reactor well, control rod drive mechanism (CRDM) shroud, and instrument room for the protection of equipment and controls during normal reactor operation and normal shutdown. The instrument room is mechanically cooled to permit personnel access during normal reactor operation.

The lower compartment air co oling system, together with operation of the CRDM air cooling system, is designed to maintain a maximum air temperature of 120°F in most lower compartment spaces during normal reactor operation. These spaces include the steam generator and pressurizer compartments, the space below the reactor vessel, the space around the reactor vessel, the spaces around the reactor vessel nozzles and supports and the upper reactor cavity we ll space around the CRDM shroud. Four 33-1/3% capacity fan coil assemblies are provided to allow three or less to operate during reactor normal operation with one or more on standby. During upset, emergency, and faulted plant conditions which result in the plant being in a hot standby condition for an extended period of time, a minimum of two lower compartment cooler fans operate to recirculate air in the lower compartment spaces. See Section 6.2.2.1 for detailed information.The CRDM air cooling system is designed to operate during normal reactor operation in conjunction with the lower compartment air cooling system to maintain a maximum air temperature within the upper reactor cavity of 120°F and to route all of the reactor well air through the CRDM shroud to mainta in a maximum air temperature of 185°F. The CRDM air cooling system consists of four 50% capacity fan-coil assemblies combined into two subsystems. In each of the two subsystems one fan-coil assembly is normally operating, with the second in standby. Air drawn through the CRDM shroud is cooled by the active fan-coil assemblies to approximately 120°F and discharged into the lower compartment of the Reactor Building.The lower compartment air cooling system manual dampers are adjusted to provide sufficient air flow through the reactor well to maintain a maximum air temperature of 120°F. When additional cooling in the lower compartment is required, an arrangement of dampers allows either or both standby CRDM fan-coil assemblies to operate to recirculate and supplement the lower compartment cooling system capacity.The upper compartment air cooling system is designed to maintain the upper compartment at a maximum temperature of 110°F during normal reactor operation. Four 33-1/3% capacity fan-coil assemblies are provided to allow three or less assemblies to operate with one or more on standby during normal reactor operation.The reactor building instrument room is cooled during normal reactor operation and shutdown by either of two 100% capacity air conditioning systems. Each system is designed to automatically maintain the room air temperature at a maximum temperature of 75°F. Each system consists of a fan-coil unit located within the 9.4-46AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87instrument room, a water-chilling condensing unit and chilled water pump located in the Auxiliary Building, and the connecting chilled water piping, including containment penetration valves.The heat sink for each lower compartment, upper compartment, and control rod drive mechanism air cooling fan-coil assembly, and for each instrument room air cooling system condensing unit, is the essential raw cooling water system.The lower compartment cooling units and control rod drive mechanism air cooling fan-coil assemblies are energized from the emergency power system upon loss of offsite power; however, these components are not required to operate during LOCA conditions. Two of the four lower compartment cooling unit fans are required, but all four are started after 1.5 to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> from the detection of a MSLB accident to recirculate air in the lower compartment dead-ended spaces. This is a safety function of the lower compartment cooling units' fans.

9.4.7.2 System DescriptionThe containment air cooling system flow scheme is shown in Figure 9.4-28. The system's control scheme is shown in Figures 9.4-30 and 9.4-31 and the logic scheme in Figures 9.4-29 and 9.4-32 through 9.4-34. The containment air cooling system is composed of four subsystems as follows:

(1)Lower Compartment Air Cooling (2)Control Rod Drive Mechanisms (CRDM) Air Cooling (3)Upper Compartment Air Cooling (4)Reactor Building Instrument Room Air Cooling9.4.7.2.1 Lower Compar tment Air Cooling SystemThe four lower compartment air cooling fan-coil assemblies are located in two annular concrete chambers around the periphery of the lower compartment at floor elevation 716. Each fan-coil assembly consists of a plenum, eight air cooling coils, vaneaxial fan, backdraft damper, instruments, and controls. These fan-coil assemblies are supplied water from the plant ERCW system. A cooling water throttling valve for each assembly is automatically controlled by a temperature indicating controller which utilizes an input from a thermocouple mounted in the assembly's return air supply and set to control the containment air temperature at 120°F (maximum). The ERCW system is described in Section 9.2.1.Lower compartment air passes directly to each active fan-coil assembly where it is cooled and supplied through a common duct distribution system to the lower compartment spaces. The system is designed for three of the four fan-coil assemblies to operate together, with one on standby. The cooled air is supplied directly to each steam-generator compartment, pressurizer compartment, letdown heat exchanger room, main lower compartment space, and to the space below the reactor vessel.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-47WATTS BARWBNP-87The system is designed for two of four units to recirculate air through the lower containment and equipment compartments anytime there is a loss of normal containment cooling following any non-LOCA design basis event which results in a hot standby condition. The lower compartment cooling system is not required to operate after a LOCA. See Section 6.2.2.1 for detailed information.9.4.7.2.2 Control Rod Drive Mechanisms Air Cooling System The four CRDM air cooling fan-coil assemblies are located in the main lower compartment space at floor elevation 702.78. Each assembly consists of a plenum, three air cooling coils, two vaneaxial fans, in series, assembly isolating motor-operated damper, instruments, and controls. Each fan-coil assembly is designed to cool the CRDM shroud to 185°F with water from the plant ERCW system. A cooling water throttling valve for each assembly is automatically controlled by a temperature indicating controller which utilizes an input from a thermocouple mounted in the cooled air discharge to the lower compartment. The four CRDM air cooling fan-coil assemblies are divided into two pairs. One fan-coil assembly in each pair is normally operated and the two normally operating assemblies together exhaust a total of 62,500 cfm of air from the CRDM shroud during normal reactor operation. Reactor well air exiting the shroud is cooled by the fan-coil assemblies and discharged into the lower compartment spaces.9.4.7.2.3 Upper Compartment Air Cooling SystemThe four upper compartment air cooling fan-coil assemblies are located within the upper compartment at Elevation 801.69. Fan-coil assemblies consist of plenums, air cooling coils, vaneaxial fans, instruments, and controls. They are designed to maintain the upper compartment temperature at a maximum of 110°F with water from the plant ERCW system. A cooling water throttling valve for each assembly is automatically controlled by a temperature indicating controller which utilizes an input from a thermocouple mounted in the return air supply. A portion of the upper containment air is continuously recirculated and cooled by the upper containment fan-coil assemblies. The system is designed for three of the four assemblies to operate together with one on standby. 9.4.7.2.4 Reactor Building Inst rument Room Air Cooling SystemThe instrument room air cooling system consists of two 100% capacity air conditioning systems. Each system consists of a serviceable, packaged water chilling unit and chilled water pump located in the auxiliary building penetration room at elevation 692, a fan-coil unit with air supply duct located in the reactor building instrument room, connecting chilled water piping with double containment penetration isolation valves, and all necessary and customary control and indicating devices. Chiller condensers are cooled by ERCW.The chilled water penetrations through the containment, numbered X64, X65, X66, and X67, are each provided with two isolation valves, one located inside and one located 9.4-48AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-90outside containment for each penetration. These 2-inch valves are pneumatic-motor operated and are designed to fail closed.9.4.7.2.5 Controls and Instrumentation Operation of each fan-coil unit (lower compartment, upper compartment, CRDM, and instrument room) is indicated in the MCR. The upper compartment cooling system standby unit automatically starts when pressure differential to two of the four coolers is below the setpoint, or upon compartment high temperature signal. The lower compartment cooling system standby unit automatically starts when airflow is below the setpoint in two of the four fans. The CDRM cooling system standby unit automatically starts when the pressure differential is below the setpoint in any of the operating fans. The instrument room standby cooler automatically starts when airflow is below the setpoint in the operating cooler. Air temperature is continuously monitored to evaluate system performance for each of the four cooling systems. Safety-related temperature elements are mounted near the intake side air stream of each lower compartment cooler with direct read-out in the MCR. These temperature indicators are used by the operators as input for manual initiation of the air return fans and the containment spray system to maintain lower compartment temperature within limits during events in which the ERCW supplied coils are inoperable.

9.4.7.3 Safety EvaluationThe lower compartment cooling fans are operated to recirculate air through the lower containment and equipment compartments anytime there is a loss of normal containment cooling following any non-LOCA design basis event resulting in the reactor in a hot standby condition. This is a safety function. Otherwise, the containment air cooling systems are not required for maintenance of temperature limits within the primary containment in the event of an accident, and therefore, are not engineered safety features. However, the reactor containment penetration valves for the instrument room air-conditioning chilled water system have a Nuclear Safety Class designation in accordance with ANS Safety Class 2A.The capability of assuring containment ambient temperature levels and the anticipated degradation of equipment performance if temperature levels are exceeded are discussed in Section 3.11. To prevent damage to adjacent safety related equipment necessary for the plant safe shutdown, upper compartment and CRDM air cooling assemblies, instrument room fan-coil units, water cooled condenser portions of the instrument room water chillers, ductwork and duct supports, and chilled water piping and pipe supports are designed and installed to Seismic Category I(L) requirements, and the lower compartment cooling units (excluding cooling coils), fans, ductwork, and duct supports are designed to Seismic Category I requirements.

9.4.7.4 Test and In spection RequirementsAir-cooling assemblies and their temperature-controlling devices which are located within the containment are tested prior to reactor operation and are generally accessible for inspection only during unit shutdown. The system is tested initially as AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-49WATTS BARWBNP-89part of the preoperational test program. After maintenance or modification activities that affect a system function, testing is done to reverify the system or component operations. Instrument room fan-coil units, control devices, and containment-isolation chilled-water valves are accessible for periodic inspection. Water-chilling equipment, pumps, and all essential electrical starting and switchover controls located in the Auxiliary Building are available for periodic inspection.Instrument room chilled-water containment-isolation valve testing and inspection requirements are discussed in Section 6.2.4.9.4.8 Condensate Demineralizer Waste Evaporator Building Environmental Control System (Not require d for Unit 1 operation)9.4.8.1 Design BasisThe Condensate Demineralizer Waste Evaporator Building (CDWEB) environmental control system (ECS) is designed to supply an acceptable ventilation airflow to the CDWEB continuously. Separate air conditioning systems provide the capability for heat removal as necessary. This ECS is designed to maintain building temperatures below 105°F when the outside temperature is 95°F.The ventilation supply and exhaust systems maintain the building at a slight negative pressure.Heat is supplied by electric space heaters where required. These heaters are designed to maintain the building at 50°F or higher. Heating requirements are based on an outside temperature of 15°F.Supply and exhaust ductwork is designed in accordance with SMACNA Low Pressure Duct Standard.

Airflow is from areas of lower radioactivity potential to areas of greater radioactivity potential. Exhaust air is monitored for excessive radioactivity levels.Fire dampers are used to prevent the spread of fire between the CDWEB and the waste package area of the Auxiliary Building.

9.4.8.2 System Description The CDWEB ECS is shown on Figures 9.4-16 and 9.4-8.Air induced by the CDWEB supply fan from the Waste Package Area supply duct is used for building ventilation. The ventilation air is supplied to areas of low radioactivity potential and migrates by naturally induced flow paths to progressively higher areas of contamination.The CDWEB ventilation exhaust fan exhausts air from the area with highest contamination potential and directs it to the fuel handling area exhaust system where it is passed through a radiation monitoring station prior to its release to the atmosphere.

9.4-50AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87The CDWEB utilizes one speed ventilation fans. The fans are manually controlled and operate continuously. Additionally, separate air conditioning recirculation systems serve the potentially contaminated areas and the moderately contaminated areas.

9.4.8.3 Safety EvaluationNo nuclear safety-related systems or components are located in the CDWE Building. Therefore a single failure within the environmental control system will not affect nuclear safety.9.4.8.4 Inspection and Testing RequirementsThe CDWEB ECS is tested initially to assure that design criteria have been met. Continued satisfactory operation demonstrates the system capability.

9.4.9 Postaccident Sampling Facility Environmental Control System9.4.9.1 Design BasisThe postaccident sampling facility environmental control system (PASFECS) provides heating, and ventilation during normal plant operations and training activities. In addition, heating, ventilation, and control of airborne radiological contamination is provided during postaccident acquisition and testing of samples. This is accomplished through pressurization of the sampling areas by the ventilation system which induces air from areas of lesser to areas of greater contamination potential. The system is designed to maintain acceptable environmental conditions (60°F minimum and 104°F maximum). The PASFECS has redundant isolation capability in all ductwork which interfaces with the auxiliary building gas treatment system (ABGTS) or penetrates the auxiliary building se condary containment enclosure (ABSCE).

9.4.9.2 System DescriptionThe PASFECS is shown on Figure 9.4-35 (Flow Diagram 47W866-15), Figure 9.4-36 (Logic Diagram 47W611-31-9), and Figure 9.4-37 (Control Diagram 47W610-31-9).

The PASFECS consists of a ventilati on subsystem (PASFVS), a heating and cooling subsystem (PASFHCS), and a radiological gas treatment subsystem (PASFGTS).

9.4.9.2.1 PASFVSDuring normal plant operation, ventilation air is supplied to the facility via the auxiliary building general ventilation system and an auxiliary supply fan. Exhaust air is ducted directly to the auxiliary building general ventilation system.During postaccident conditions or sampling operations, the normal supply and exhaust systems are isolated and ventilation air is taken directly from the outside at a point on the roof of the unit 1 additional equipment building. Both the unit 1 and unit 2 systems share this common intake. A supply fan provides air to the sampling side of the facility in response to a differential pressure controller. Air is drawn from both the sample and valve gallery areas by the PASFGTS exhaust fan and routed to the exhaust duct AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-51WATTS BARWBNP-87downstream of the ABGTS air cleanup unit. The sampling area is maintained at a positive pressure with respect to atmosphere while the valve gallery is kept at a negative pressure with respect to the sample side.

9.4.9.2.2 PASFHCSIn the normal mode of operation, supply air taken from the auxiliary building general ventilation system has already been tempered and no additional heating or cooling is required. In the postaccident mode, incoming air is preheated in response to a duct mounted temperature switch. No cooling is provided in this mode.

9.4.9.2.3 PASFGTS The radiological gas treatment subsystem consists of one HEPA/charcoal-type air cleanup unit located just upstream of the exhaust fan. Air supplied to the facility during postaccident conditions or sampling operations is processed through the air cleanup unit prior to being discharged to the atmosphere.

9.4.9.3 Safety EvaluationThe PASFECS is not a nuclear safety related system; however, the isolation valves and duct which interface with the ABGTS and ABSCE are designed to meet Seismic Category I requirements. These valves are also backed (by Class 1E power). All remaining portions of the system are designed to Category I(L) requirements.9.4.9.4 Inspection and Testing RequirementsThe PASFECS is pretested initially to assure that design criteria requirements have been met and periodically thereafter.

Air cleanup units are designed and tested per the requirements of NRC Regulatory Guide 1.140. Preoperational tests provide data for the initial balance of the system and verification of design flow rates. Manufactured components are tested in accordance with applicable standards for the components.

9.4-52AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-63Table 9.4-1 DELETED (DELETED)

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-53WATTS BARWBNP-87Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Page 1 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS WINTER1All components of the Intake Pumping Station Ventilation System. Electrical Equipment Room and Mechanical Equipment Rooms A or B.Provide heating during the winter.Total loss of heating Electrical failure (Loss of power)SurveillanceTotal loss of the heating system resulting in room temperatures

lower than design value.None. See Remarks.1) Room temperature is verified once a shift.2) Supplemental heating is provided if necessary to maintain the space temperatures above 32°F. SUMMER#COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS 9.4-54AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-872All components of the Intake Pumping Station Ventilation System; Electrical Equipment Room or Mechanical Equipment Room A

or BProvide ventilation cooling during the SummerLoss of all Supply and Exhaust Fans concurrent with operation of a Unit Heater

0-HTR-30-715 or -716 in the Electrical Equipment

Room Electrical and/or mechanical

failure Surveillance Room temperatures higher than design value.None. See Remarks1) Room temperature is verified once a shift.2) If the room temperatures are above 104°F, Operator ensures that the duct heaters and unit heaters are "OFF" and that the supply and exhaust fans are operational.

If the fans are non-operable, non-essential loads are shed if necessary to maintain the room temperatures at less than 130°F.Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Continued) (Page 2 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-55WATTS BARWBNP-873All components of the Intake Pumping Station Ventilation System; Electrical Equipment Room or Mechanical Equipment Room A

or BProvide ventilation cooling during the SummerOperation of Supply and Exhaust Fans, 0-FAN-30-714A

& -714B, concurrent with operation of Duct Heater 0-HTR-30-714 in the Electrical Equipment Room. Total loss of ventilation in the Mechanical Equipment

Rooms.Electrical and/or mechanical

failureSurveillanceAdditional heat added to the space. Room temperature will be higher than design

value.None. See Remarks1) Room temperature is verified once a shift.2) If the room temperatures are above 104°F, Operator ensures that the duct heaters and unit heaters are "OFF" and that the supply and exhaust fans are operational.Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Continued) (Page 3 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS 9.4-56AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-874All components of the intake Pumping Station Ventilation System: Electrical Equipment Room, or Mechanical Equipment Room A or BProvide ventilation cooling during the SummerLoss of all Supply and Exhaust Fans concurrent with operation of a Unit Heater 0-HTR-30-710 or -711 in

Mechanical Equipment Room AElectrical and/or mechanical

failureSurveillance Room temperatures higher than design value.None. See Remarks1) Room temperature is verified once a shift.2) If the room temperatures are above 104°F, Operator ensures that the duct heaters and unit heaters are "OFF" and that the supply and exhaust fans are operational.

If the fans are non-operable, non-essential loads are shed if necessary to maintain the room temperatures at less than 130°F.Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Continued) (Page 4 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-57WATTS BARWBNP-875All components of the Intake Pumping Station Ventilation System; Electrical Equipment Room or Mechanical Equipment Room A or BProvide ventilation cooling during the SummerOperation of Supply and Exhaust Fans, 0-FAN-30-708A

& -708B, concurrent with operation of Duct Heater 0-HTR-30-708 in

Mechanical Equipment Room A. Total loss of ventilation in the Electrical Equipment Room and Mechanical Equipment Room B.Electrical and/or mechanical

failureSurveillanceAdditional heat added to the space. Room temperature will be higher than design

value.None. See Remarks1) Room temperature is verified once a shift.2) If the room temperatures are above 104°F, Operator ensures that the duct heaters and unit heaters are "OFF" and that the supply and exhaust fans are operational.Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Continued) (Page 5 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS 9.4-58AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-876All components of the intake Pumping Station Ventilation System: Electrical Equipment Room, or Mechanical Equipment Room A or BProvide ventilation cooling during the SummerLoss of all Supply and Exhaust Fans concurrent with operation of a Unit Heater 0-HTR-30-712 or -713 in

Mechanical Equipment Room BElectrical and/or mechanical

failureSurveillance Room temperatures higher than design value.None. See Remarks1) Room temperature is verified once a shift.2) If the room temperatures are above 104°F, Operator ensures that the duct heaters and unit heaters are "OFF" and that the supply and exhaust fans are operational.

If the fans are non-operable, non-essential loads are shed if necessary to maintain the room temperatures at less than 130°F.Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Continued) (Page 6 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS 9.4-59WATTS BARWBNP-877All components of the Intake Pumping Station Ventilation System; Electrical Equipment Room or Mechanical Equipment Room A or BProvide ventilation cooling during the SummerOperation of Supply and Exhaust Fans, 0-FAN-30-709A

& -709B, concurrent with operation of Duct Heater 0-HTR-30-709 in

Mechanical Equipment Room B. Total loss of ventilation in the Electrical Equipment Room and Mechanical Equipment Room A.Electrical and/or mechanical

failureSurveillanceAdditional heat added to the space. Room temperature will be higher than design

value.None. See Remarks1) Room temperature is verified once a shift.2) If the room temperatures are above 104°F, Operator ensures that the duct heaters and unit heaters are "OFF" and that the supply and exhaust fans are operational.Table 9.4-2 FAILURE MODES AND EFFECTS ANALYSIS INTAKE PUMPING STATION VENTILATION SYSTEM (Continued) (Page 7 of 7)

1. COMPONENT IDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILURE DETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS 9.4-60AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS WATTS BARWBNP-87THIS PAGE INTENTIONALLY BLANK AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-61WATTS BAR WBNP-91Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 1 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks11-PMCL-30-180-ASafety Injection Pump 1A-A Cooler (Train A)Provides cooling air to SI Pump 1A-A RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; auto-start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-176-A fully open (1-ZS-67-176).

Fan motor running light on

MCC.Loss of cooling to SIP 1A-A room with the potential for loss of SIP 1A-

A.None. Train B SI Pump is not affected by the failure of Train A pump room cooler, and is 100%

redundant to Train A pump.See Remark #

3.1. Train A and Train B pump/cooler sets are in separate rooms. Review of schematics for the Train A and B coolers shows the trains to be independent. The cooler automatically starts upon high temperature on 1-TS-30-180-A or SI Pump 1A-A start; and, manually by local handswitch 1-HS-30-180.2. The Cooler Fan and the flow control valve 1-FCV-67-176-A are interlocked to operate together.3. Train B equipment is located in SIP Room 1B. Failure of the Train A equipment, will not adversely impact Train B SI pump operation.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-62WATTS BAR WBNP-8721-PMCL-30-179-BSafety Injection Pump 1B-B Cooler (Train B)Provides cooling air to SI Pump 1B-B RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; auto-start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-182 fully open (1-ZS-67-182).

Fan motor running light on

MCC.Loss of cooling to SIP 1B-B room with the potential for loss of SIP 1B-

B.None. Train A SI Pump is not affected by the failure of Train B pump room cooler, and is 100%

redundant to Train B pump.See Remark #

3.1. Train A and Train B pump/cooler sets are in separate rooms. Review of schematics for the Train A and B coolers shows the trains to be independent. The cooler automatically starts upon high temperature on 1-TS-30-179-B or SI Pump 1B-B start; and, manually by local handswitch 1-HS-30-179.2. The Cooler Fan and the flow control valve 1-FCV-67-182 are interlocked to operate together.3. Train A equipment is located in SIP Room 1A. Failure of the Train B equipment will not adversely impact Train A SI pump operation.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 2 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-63WATTS BAR WBNP-9131-FCV-67-176-AEssential Raw Cooling Water Flow Control Valve for the Safety Injection

System Pump 1A-A Cooler.Provides flowpath for cooling water from the ERCW Header 1A to the cooler for Pump 1A-AFails to open, stuck closedMechanical failure; Opening signal failureStatus monitor light in MCR (1-ZS-67-176)Loss of cooling water to SIP 1A-A pump room cooler

with the potential for loss of SIP 1A-

A.None. Train B SI Pump is not affected by the failure of Train A pump room cooler, and is 100%

redundant to Train A pump.1-FCV-67-176-A FCV fails open on loss of power or air.41-FCV-67-182-BEssential Raw Cooling Water Flow Control Valve for the Safety Injection

System Pump 1B-B Cooler.Provides flowpath for cooling water from the ERCW Header 1B to the cooler for Pump 1B-BFails to open, stuck closedMechanical failure; Opening signal failureStatus monitor light in MCR (1-ZS-67-182)Loss of cooling water to SIP 1B-B pump room cooler

with the potential for loss of SIP 1B-

B.None. Train A SI Pump is not affected by the failure of Train B pump room cooler, and is 100%

redundant to Train B pump.1-FCV-67-182-B FCV fails open on loss of power or air.51-PMCL-30-175-AResidual Heat Removal Pump 1A-A Cooler (Train A).

Provides cooling air to RHR Pump 1A-A Room.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A Power failure; Auto-start signal failure; Operator error (handswitch placed in wrong position).Fan motor running light on MCC.Loss of cooling water to RHR Pump 1A-A Room cooler with the potential loss of RHR Pump 1A-A.None. Train B RHR Pump is not affected by the failure of Train A Pump Room Cooler and is 100% redundant to Train A Pump.Train A and Train B RHR pump/cooler sets are in separate rooms. Review of the schematics for the Train A and Train B coolers shows the trains to be independent. The cooler is started automatically upon high temperature at 1-TS-30-175-A, or RHR Pump 1A-A start; Manually by local handswitch 1-HS-30-175.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 3 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-64WATTS BAR WBNP-8761-PMCL-30-176-BResidual Heat Removal Pump 1B-B Cooler (Train B)Provides cooling air to RHR Pump 1B-B RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; auto-start signal

failure; Operator error (handswitch placed in wrong position)Fan motor running light on MCC.Loss of cooling to RHR Pump 1B-B Room

with the potential loss of RHR 1B-B.None. Train A RHR Pump is not affected by the failure of Train B Pump Room Cooler, and is 100%

redundant to Train A pump.Train A and Train B RHR pump/cooler sets are in separate rooms. Review of the schematics for the Train A and Train B coolers shows the trains to be independent. The cooler started automatically upon high temperature at 1-TS 176-B or RHR Pump 1B-B start; Manually by

local handswitch 1-HS-30-176.71-FCV-67-188-AEssential Raw Cooling Water Flow Control Valve for the Residual Heat Removal System Pump 1A-A Cooler.Provides flowpath for cooling water from the ERCW Header to the cooler for RHR Pump 1A-A.See 'remarks' columnSee 'remarks' column.See 'remarks' column.See 'remarks' column.See 'remarks' column.1-FCV-67-188-A has been electrically disconnected due to App. 'R' interaction to keep the valve permanently open.81-FCV-67-190-BEssential Raw Cooling Water Flow Control Valve for the Residual Heat Removal System Pump 1B-B Cooler.Provides flowpath for cooling water from the ERCW Header to the cooler for RHR Pump 1B-B.See 'remarks' columnSee 'remarks' columnSee 'remarks' columnSee 'remarks' columnSee 'remarks' column1-FCV-67-190-B has been electrically disconnected due to App. 'R' interaction to keep the valve permanently open.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 4 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-65WATTS BAR WBNP-8791-PMCL-30-177-AContainment Spray Pump 1A-A Cooler (Train

A)Provides cooling air to CS Pump 1A-A RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-start

signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-184-A (1-ZS-67-184). Fan motor running light on MCC.Loss of cooling to CSP 1A-A Room with the potential for loss of CSP 1A-A.None. Train B Pump is not affected by the failure of Train A pump/cooler, and is 100%

redundant to Train A pump.Equipment includes fan and motor.Train A and Train B CS pump/cooler sets are in separate rooms. Review of the schematics for the Train A and B coolers shows the trains to be independent. The cooler is started automatically upon high temperature at 1-TS-30-177-A or CS Pump 1A-A start; manually by local handswitch 1-HS-30-177.The cooler and the flow control valve 1-FCV-67-184-A are interlocked to operate together.101-PMCL-30-178-BContainment Spray Pump 1B-B Cooler (Train

B)Provides cooling air to CS Pump 1B-B RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-start

signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-186-B (1-ZS-67-186). Fan motor running light on MCC.Loss of cooling to CSP 1B-B Room with the potential for loss of CSP 1B-B.None. Train A Pump is not affected by the failure of Train B pump/cooler, and is 100%

redundant to Train B pump.Equipment includes fan and motor.Train A and Train B CS pump/cooler sets are in separate rooms. Review of schematics for the Train A and B coolers shows the trains to be independent. The cooler is started automatically upon high temperature at 1-TS-30-178-B or CS Pump 1B-B start; manually by local handswitch 1-HS-30-178.The cooler and the flow control valve 1-FCV-67-186-B are interlocked to operate together.111-FCV-67-184-AEssential Raw Cooling Water Flow Control Valve for the Containment Spray System Pump 1A-A Cooler.Provides flowpath for cooling water from the ERCW Header to the cooler for CS Pump 1A-A.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-184).Loss of cooling to CSP 1A-A room with the potential for loss of CSP 1A-A.None. Train B CS Pump is not affected by the failure of Train A pump room cooler, and is 100%

redundant to Train A pump.1-FCV-67-184-A fails to the open position on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 5 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-66WATTS BAR WBNP-87121-FCV-67-186-BEssential Raw Cooling Water Flow Control Valve for the Containment Spray System Pump 1B-B Cooler.Provides flowpath for cooling water from the ERCW Header to the cooler for CS Pump 1B-B.Fails to open, stuck closed.Mechanical failure; Opening

signal failure. Status monitor light in MCR (1-ZS-67-186).Loss of cooling to CSP 1B-B room with the potential for loss of CSP 1B-B.None. Train A CS Pump is not affected by the failure of Train B pump room cooler, and is 100%

redundant to Train B pump.1-FCV-67-186-B fails to the open position on loss of power or air.131-PMCL-30-183-ACentrifugal Charging Pump 1A-A Cooler (Train A).Provides cooling air to CC Pump 1A-A Room.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-start

signal failure; Operator error (handswitch placed in wrong position).Fan motor running light on MCC.Loss of cooling to CC pump 1A-A Room

with the potential for loss of CC

Pump 1A-A.

None. Train B CC pump is not affected by the failure of Train A pump/cooler, and is 100%

redundant to Train A pump.Equipment includes fan and motor.Train A and Train B pump/cooler sets are in separate rooms. Review of schematics for the train A and B coolers shows the trains to be independent. The cooler automatically starts upon high temperature at 1-TS-30-183-A, or pump 1A-A start; Manually by local handswitch 1-HS-30-183.141-PMCL-30-182-BCentrifugal Charging Pump 1B-B Cooler (Train B).Provides cooling air to CC Pump 1B-B RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-start

signal failure; Operator error (handswitch placed in wrong position)Fan motor running light on MCC.Loss of cooling to CC pump 1B-B Room

with the potential for loss of CC pump 1B-B.

None. Train A CC pump is not affected by the failure of Train B pump/cooler, and is 100%

redundant to Train B pump.Equipment includes fan and motor.Train A and Train B pump/cooler sets are in separate rooms. Review of schematics for the Train A and B coolers shows the trains to be independent. The cooler automatically starts upon high temperature at 1-TS-30-182-B or pump 1B-B start; Manually by local handswitch 1-HS-30-182.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 6 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-67WATTS BAR WBNP-87151-FCV-67-168-AEssential Raw Cooling water Flow Control Valve for the centrifugal Charging Pump Room 1A-A Cooler.Provides flowpath for cooling water from the ERCW Header to the cooler for CC Pump 1A-A.See 'Remarks' columnSee 'Remarks' columnSee 'Remarks' columnSee 'Remarks' columnSee 'Remarks' column1-FCV-67-168-A is electrically disconnected to keep the valve permanently open.161-FCV-67-170-BEssential Raw Cooling water Flow Control Valve for the centrifugal Charging Pump Room 1B-B Cooler.Provides flowpath for cooling water from the ERCW Header to the cooler for CC Pump 1B-B.See 'Remarks' columnSee 'Remarks' columnSee 'Remarks' columnSee 'Remarks' columnSee 'Remarks' column1-FCV-67-170-B is electrically disconnected to keep the valve permanently open.171-PMCL-30-190CCS and Aux.

FW Pump Cooler

1A-A.Provides cooling air to the CCS and Aux. FW pumps space.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-162-A (1-ZS-67-162). Indicating light on MCC for fan motor running.Loss of redundancy in providing cooling air for CCS and Aux FW pumps space.None.The standby Train B Cooler B-B is available to start on high temperature (1-TS 190B-A) and is 100%

redundant to the Train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature sensed by 1-TS-30-190A-A. In standby mode, the cooler will start upon high temperature at 1-TS-30-190B-A.

Cooler fan motor and 1-FSV-67-162-A are interlocked to open 1-FCV-67-162-A for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 7 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-68WATTS BAR WBNP-87181-PMCL-30-191-ACCS and Aux. FW Pump/Cooler

1B-BProvides cooling air to the CCS and Aux. FW pumps space.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-164-B (1-ZS-67-164). Indicating light on MCC for fan motor running.Loss of redundancy in providing cooling air for CCS and Aux.

FW pumps space.None. The standby Train A Cooler A-A is available to start on high temperature (1-TS 191B-B) and is 100%

redundant to Train B cooler.The cooler automatically starts upon Train B ABI signal or high temperature sensed by 1-TS 191A-B. In standby mode, the cooler will start upon high temperature at 1-TS-30-191B-B.

Cooler fan motor and 1-FSV-67-164-B are interlocked to open 1-FCV-67-164 for ERCW Supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.191-FCV-67-162-AEssential Raw Cooling Water Flow Control Valve for the CCS and Aux.

FW Pump Cooler 1A-A.Provides flowpath for cooling water from the ERCW Header to the Cooler for Pump 1A-

A.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (or 1-ZS-67-162).Loss of redundancy in providing cooling to CCS and Aux FW Pump space.

None. Train B pump space cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the train A pump space cooler.1-FCV-67-162-A fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 8 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-69WATTS BAR WBNP-87201-FCV-67-164-BEssential Raw Cooling Water Flow Control Valve for the CCS and Aux.

FW Pump Cooler

B-B.Provides flowpath for cooling water from the ERCW Header to the Cooler for Pump B-

B.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (or 1-ZS-67-164).Loss of redundancy in providing cooling to CCS and Aux FW Pump space.

None. Train A pump space cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump space cooler.1-FCV-67-164-B fails open on loss of power or air.212-CLR-30-200-AEGTS Cooler 2A-AProvides cooling air to the EGTS RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 2-FCV-67-336 (2-ZS-67-336). Fan motor running light on MCC.Loss of redundancy in providing cooling air for the EGTS Room.None. The standby Train B Cooler is available to start on high temperature (2-TS 207A-B) and is 100%

redundant to Train A cooler.The cooler automatically starts upon Train B ABI signal. In standby mode, the cooler will start upon high temperature at 2-TS-30-200A-A. Cooler fan motor and 2-FSV-67-336-A are interlocked to open 2-FCV-67-336 for ERCW supply on cooler start. Review of the schematics for the coolers A-A nd B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 9 of 29)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-70WATTS BAR WBNP-87222-CLR-30-207-B EGTS Cooler A-AProvides cooling air to the EGTS RoomFails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 2-FCV-67-338 (2-ZS-67-338). Fan motor running light on MCC.Loss of redundancy in providing cooling air for the EGTS Room.None. The standby Train A Cooler is available to start on high temperature at 2-TS-30-200A-A and is 100%

redundant to Train B cooler.The cooler automatically starts upon Train B ABI signal. In standby mode, the cooler will start upon high temperature at 2-TS-30-207A-B. Cooler fan motor and 2-FSV-67-338-B are interlocked to open 2-FCV-67-338 for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.232-FCV-67-336Essential Raw Cooling Water Flow Control Valve for the

EGTS Room

Cooler A-A.Provides flowpath for cooling water from the ERCW Header to

the A-A cooler for the EGTS Rooms.Fails to open, stuck closed.Mechanical failure; signal

failure.Status monitor light in MCR (2-ZS-67-336)Loss of redundancy in providing cooling to EGTS room.

None. Train B Pump cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump room cooler.2-FCV-67-336 fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 10 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-71WATTS BAR WBNP-87242-FCV-67-338Essential Raw Cooling Water Flow Control Valve for the

EGTS Room Cooler B-BProvides flowpath for cooling water from the ERCW Header to

the B-B cooler for the EGTS Rooms.Fails to open, stuck closed.Mechanical failure; signal

failure.Status monitor light in MCR (2-ZS-67-338).Loss of redundancy in providing cooling to EGTS room.

None. Train A Pump cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump room cooler.2-FCV-67-338 fails open on loss of power or air.250-PMCL-30-192-ACCS TB Booster and Spent Fuel

Pit Pump Cooler

A-AProvides cooling air to the CCS TB Booster and Spent Fuel Pit Cooler Space.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-213-A (1-ZS-67-213) Fan motor running light on MCC.Loss of redundancy in providing cooling air for CCS TB Booster and Spent Fuel Pit Cooler Space None.The standby Train B Cooler A-A is available to start on high temperature (0-TS 193B-B) and is 100%

redundant to the Train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature at 0-TS-30-192A-A. In standby mode, the cooler will start upon high temperature at 0-TS-30-192B-A. Cooler fan motor and 1-FSV-67-213-A are interlocked to open 1-FCV-67-213-A for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 11 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-72WATTS BAR WBNP-87260-PMCL-30-193-BCCS TB Booster and Spent Fuel

Pit Cooler A-AProvides cooling air to the CCS TB Booster and Spent Fuel Pit Cooler B-B space.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-215-B (1-ZS-67-215). Fan motor running light on MCC.Loss of redundancy in providing cooling air for CCS TB Booster and Spent Fuel Pit Cooler space.

None. The standby Train A Cooler A-A is available to start on high temperature (1-TS 192B-A) and is 100%

redundant to the Train B cooler.The cooler automatically starts upon Train B ABI signal or high temperature at 0-TS-30-193A-B. In standby mode, the cooler will start upon high temperature at 0-TS-30-193B-B. Cooler fan motor and 1-FSV-67-215-B are interlocked to open 1-FCV-67-215-B for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.271-FCV-67-213-AEssential Raw Cooling Water Flow Control Valve for the CCS TB Booster and Spent Fuel

Pit Cooler A-AProvides flowpath for cooling water from the ERCW Header to the Cooler A-

A.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-213)Loss of redundancy in providing cooling air to CCS TB Booster and Spent Fuel Pit Coolers space.

None. Train B Pump area cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump area cooler.1-FCV-67-213-A fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 12 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-73WATTS BAR WBNP-87281-FCV-67-215-BEssential Raw Cooling Water Flow Control Valve for the CCS TB Booster and Spent Fuel

Pit Cooler A-AProvides flowpath for cooling water from the ERCW Header to the Cooler B-

B.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-215)Loss of redundancy in providing cooling air to CCS TB Booster and Spent Fuel Pit Coolers space.

None. Train A Pump area cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump area cooler.1-FCV-67-215-A fails open on loss of power or air.290-BKD-31-2956CCS TB Booster and Spent Fuel

Pit Pump Cooler A-A Backdraft DamperProvides flowpath for cool air flow from Cooler A-A to common discharge headers to room.Fails to open (stuck closed).Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck closedLoss of redundancy in providing cooling air to room.None. The standby Train B cooler will start upon high temperature on 0-TS-30-193B-

B.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 13 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-74WATTS BAR WBNP-87Protects standby Cooler A-A from reverse air flow from running cooler B-B.Fails to backseat (stuck open) when Train B Cooler B-B is running.Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck open.NoneNonePotential loss of, or diminished, air cooling from both trains. The consequences of the diversion of cooling air flow through standby cooler are possible damage to the Train A motor and motor premature trip. Automatic switchover to the standby Train A cooler, if it is experiencing reverse rotation due to damper not backseating could, upon demand, fail the motor due to overload. Therefore neither train cooler would be available to perform the system function. For this reason, the damper will be periodically checked for correct position.300-BKD-31-2957CCS TB Booster and Spent Fuel

Pit Pump Cooler B-B Backdraft DamperProvides flowpath for cool air flow from Cooler B-B to common discharge headers to room.Fails to open (stuck closed).Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck closed.Loss of redundancy in providing cooling air to room.None. The standby Train A cooler will start upon high temperature on 0-TS-30-192B-

A.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 14 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-75WATTS BAR WBNP-91Protects standby Cooler B-B from reverse air flow from running cooler A-A.Fails to backseat (stuck open) when Train A Cooler A-A is running.Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck open.NoneNonePotential loss of, or diminished, air cooling from both trains. The consequences of the diversion of cooling air flow through standby cooler are possible damage to the Train B motor and motor premature trip. Automatic switchover to the standby Train B cooler, if it is experiencing reverse rotation due to damper not backseating could, upon demand, fail the motor due to overload. Therefore neither train cooler would be available to perform the system function. For this reason, the damper will be periodically checked for correct position.312-PMCL-30-184-AAFW and BAT Cooler Fan A-A Provides cooling air to the AFW and BAT spaceFails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 2-FCV-67-217 (2-ZS-67-217). Fan motor running light on MCC.Loss of redundancy in providing cooling air for AFW and BAT Space None. The standby Train B Cooler B-B is available to start on high temperature (2-TS 185B-B) and is 100%

redundant to train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature at 2-TS-30-184A-A. In standby mode, the cooler will start upon high temperature at 2-TS-30-184B-A. Cooler fan motor and 2-FSV-67-217-A are interlocked to open 2-FCV-67-217 for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 15 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-76WATTS BAR WBNP-87322-PMCL-30-185-BAFW and BAT Cooler Fan B-B Provides cooling air to the AFW and BAT spaceFails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 2-FCV-67-219 (2-ZS-67-219). Fan motor running light on MCC.Loss of redundancy in providing cooling air for AFW and BAT Space None. The standby Train A Cooler A-A is available to start on high temperature (2-TS 184B-A) and is 100%

redundant to train A cooler.The cooler automatically starts upon Train B ABI signal or high temperature at 2-TS-30-185A-B. In standby mode, the cooler will start upon high temperature at 2-TS-30-185B-B. Cooler fan motor and 2-FSV-67-219-B are interlocked to open 1-FCV-67-219 for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.332-FCV-67-217Essential Raw Cooling Water Flow Control Valve for the AFW and BAT Cooler A-AProvides flowpath for cooling water from the ERCW Header to the Cooler for Pump A-

A.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (2-ZS-67-217)Loss of redundancy in providing cooling to AFW and BAT Space.None. Train B Pump room cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump room cooler.2-FCV-67-217 fails open on loss of power or air.342-FCV-67-219Essential Raw Cooling Water Flow Control Valve for the AFW and BAT Cooler B-BProvides flowpath for cooling water from the ERCW Header to the Cooler for Pump B-

B.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (2-ZS-67-219)Loss of redundancy in providing cooling to AFW and BAT Space.None. Train A Pump room cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump room cooler.2-FCV-67-219 fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 16 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-77WATTS BAR WBNP-87352-BKD-31-2952Aux FW and BAT Pump Cooler A-A Backdraft DamperProvides flowpath for cool air flow from Cooler A-A to common discharge header to room.Fails to open (stuck closed).Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck closedLoss of redundancy in providing cooling air to room.None. The standby Train B cooler will start upon high temperature on 2-TS 185B-B.Protects standby Cooler A-A from reverse air flow from running cooler B-B.Fails to backseat (stuck open) when Train B Cooler B-B is running.Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck open.NoneNonePotential loss of, or diminished, air cooling from both trains. The consequences of the diversion of cooling air flow through standby cooler is possible damage to the Train A motor and motor premature trip.

Automatic switchover to the standby Train A cooler, if it is experiencing reverse rotation due to damper not backseating could, upon demand, fail the motor due to overload. Therefore, neither train cooler would be available to perform the system function. For this reason, the

damper will be periodically checked for correct position.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 17 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-78WATTS BAR WBNP-91362-BKD-31-2953Aux FW and BAT Pump Cooler B-B Backdraft DamperProvides flowpath for cool air flow from Cooler B-B to common discharge header to room.Fails to open (stuck closed).Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck closedLoss of redundancy in providing cooling air to room.None. The standby Train A cooler will start upon high temperature on 2-TS 184B-A.Protects standby Cooler B-B from reverse air flow from running cooler A-A.Fails to backseat (stuck open) when Train A Cooler A-A is running.Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck open.NoneNonePotential loss of, or diminished, air cooling from both trains. The consequences of the diversion of cooling air flow through standby cooler is possible damage to the Train B motor and motor premature trip.

Automatic switchover to the standby Train B cooler, if it is experiencing reverse rotation due to damper not backseating could, upon demand, fail the motor due to overload. Therefore, neither train cooler would be available to perform the system function. For this reason, the

damper will be periodically checked for correct position.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 18 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-79WATTS BAR WBNP-91371-CLR-30-201 Pipe Chase Cooler Fan 1A-AProvides cooling air to the pipe chase.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-342-A (1-ZS-67-342). Fan motor running light on MCC.Loss of redundancy in providing cooling air for the Pipe Chase.None. The standby Train B Cooler Fan 1B-B is available to start on high temperature (1-TS-30-202B-B) and is 100% redundant to Train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature at 1-TS 201A-A. In standby mode, the cooler will start upon high temperature at 1-TS-30-201B-A. Cooler fan motor and 1-FSV-67-342-A are interlocked to open 1-FCV-67-342-A for ERCW supply on cooler start.

Review of the schematics for the coolers A-A nd B-B shows their independence.381-CLR-30-202-BPipe Chase Cooler Fan 1-B-BProvides cooling air to the pipe chase.Fails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-standby start signal

failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-344-B (1-ZS-67-344). Fan motor running light on MCC.Loss of redundancy in providing cooling air for the Pipe Chase.None. The standby Train A Cooler Fan 1A-A is available to start on high temperature at 1-TS-30-201B-A and is 100% redundant to Train B cooler.The cooler automatically starts upon Train B ABI signal or high temperature at 1-TS 202A-B. In standby mode, the cooler will start upon high temperature at 1-TS-30-202B-B. Cooler fan motor and 1-FSV-67-344-B are interlocked to open 1-FCV-67-344-B for ERCW supply on cooler start.

Review of the schematics for the coolers A-A and B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 19 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-80WATTS BAR WBNP-91391-FCV-67-342-AEssential Raw Cooling Water Flow Control Valve for the Pipe Chase Cooler

1A-AProvides flowpath for cooling water from the ERCW Header to the Cooler

1A-A.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-342)Loss of redundancy in providing cooling air to the Pipe Chase.None. Train B Pump room cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump room cooler.1-FCV-67-342 fails open on loss of power or air.401-FCV-67-344-BEssential Raw Cooling Water Flow Control Valve for the Pipe Chase Cooler

1B-BProvides flowpath for cooling water from the ERCW Header to the Cooler

1B-B.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-344)Loss of redundancy in providing cooling air to the Pipe Chase.None. Train A Pump room cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump room cooler.1-FCV-67-344 fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 20 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-81WATTS BAR WBNP-87411-BKD-31-2925Pipe Chase Cooler 1A-A Backdraft DamperProvides flowpath for cool air flow from Cooler

1A-A to Pipe Chase Header.Fails to open (stuck closed).Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck closedLoss of redundancy in providing cooling air to Pipe Chase.

None. The standby Train B cooler will start upon high temperature on 1-TS-30-202B-

B.Protects standby Cooler 1A-A from reverse air flow from running cooler 1B-B.Fails to backseat (stuck open) when Train A Cooler 1B-B is running.Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck open.NoneNonePotential loss of, or diminished, air cooling from both trains. The consequences of the diversion of cooling air flow through standby cooler is possible damage to the Train A motor and motor premature trip. Automatic switchover to the standby Train A cooler, if it is experiencing reverse rotation due to damper not backseating could, upon demand, fail the motor due to overload. Therefore, neither train cooler would be available to perform the system function. For this reason, the damper will be periodically checked for correct position.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 21 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-82WATTS BAR WBNP-87421-BKD-31-2927Pipe Chase Cooler 1B-B Backdraft DamperProvides flowpath for cool air flow from Cooler

1B-B to Pipe Chase Header.Fails to open (stuck closed).Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck closedLoss of redundancy in providing cooling air to Pipe Chase.

None. The standby Train A cooler will start upon high temperature on 1-TS-30-201B-

A.Protects standby Cooler 1B-B from reverse air flow from running cooler 1A-A.Fails to backseat (stuck open) when Train B Cooler 1A-A is running.Mechanical failureLocal position indicator attachment on the damper would indicate if damper was stuck open.NoneNonePotential loss of, or diminished, air cooling from both trains. The consequences of the diversion of cooling air flow through standby cooler is possible damage to the Train B motor and motor premature trip. Automatic switchover to the standby Train B cooler, if it is experiencing reverse rotation due to damper not backseating could, upon demand, fail the motor due to overload. Therefore, neither train cooler would be available to perform the system function. For this reason, the damper will be periodically checked for correct position.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 22 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-83WATTS BAR WBNP-91431-CLR-30-186-APenetration Room Cooler Fan 1A-A (Train

A)Provides cooling air to Penetration Room (El 692)Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-start

signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-346-A fully open (1-ZS-67-346).

Fan motor running light on

MCC.Loss of cooling to Penetration Room (El 692)

with the potential for loss of room equipment.

None. The standby Train B Cooler B-B is available to start on high temperature (1-TS 187B-B) and is 100%

redundant to Train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature at 1-TS-30-186A-A. In standby mode, the cooler will start upon high temperature at 1-TS 186B-A. Cooler fan motor and 1-FSV-67-346-A are interlocked to open 1-FCV-67-346-A for ERCW supply on cooler start. Review of the schematics for the coolers A-A nd B-B shows their independence.441-CLR-30-187-BPenetration Room Cooler Fan 1B-B (Train

B).Provides cooling air to Penetration Room (El 692)Fails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-start

signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV-67-348-B fully open (1-ZS-67-348).

Fan motor running light on

MCC.Loss of cooling to Penetration Room (El 692)

with the potential for loss of room equipment.None. The standby Train A Cooler A-A is available to start on high temperature at 0-TS-30-186B-A and is 100%

redundant to Train B cooler.

The cooler automatically starts upon Train B ABI signal or high temperature at 1-TS-30-187A-B. In standby mode, the cooler will start upon high temperature at 1-TS 187B-B. Cooler fan motor and 1-FSV-67-348-B are interlocked to open 1-FCV-67-348-B for ERCW supply on cooler start. Review of the schematics for the coolers A-A nd B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 23 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-84WATTS BAR WBNP-91451-FCV-67-346-AEssential Raw Cooling Water Flow Control Valve for the Penetration Room (El. 692)

Cooler 1A-AProvides flowpath for cooling water from the ERCW Header to the Cooler for the Penetration Room Space.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-346)Loss of redundancy in providing cooling to Penetration Room (El. 692) space.

.None. Train B Pump room cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump room cooler.1-FCV-67-346-A fails open on loss of power or air.461-FCV-67-348-BEssential Raw Cooling Water Flow Control Valve for the Penetration Room (El. 692)

Cooler 1B-BProvides flowpath for cooling water from the ERCW Header to the Cooler for the Penetration Room Space.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-348)Loss of redundancy in providing cooling to Penetration Room (El. 692) space.None. Train A Pump room cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump room cooler.1-FCV-67-348-B fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 24 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-85WATTS BAR WBNP-91471-CLR-30-196Penetration Room Cooler Fan 1A-A (Train

A).Provides cooling air to Penetration Room (El 713)Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-start signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV 350-A fully open (1-ZS-67-350).

Fan motor running light on MCC.Loss of cooling to Penetration Room (El 713)

with the potential for loss of room equipment.None. The standby Train B Cooler B-B is available to start on high temperature (1-TS 197B-B) and is 100%

redundant to Train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature (1-TS-30-196A-A). In standby mode, the cooler will start upon high temperature at 1-TS 196B-A. Cooler fan motor and 1-FSV-67-350-A are interlocked to open 1-FCV-67-350-A for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.481-CLR-30-197Penetration Room Cooler Fan 1B-B (Train

B).Provides cooling air to Penetration Room (el 713)Fails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-start signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV 352-B fully open (1-ZS-67-352).

Fan motor running light on MCC.Loss of cooling to Penetration Room (El 713)

with the potential for loss of room equipment.None. The standby Train A Cooler A-A is available to start on high temperature (1-TS 196B-A) and is 100%

redundant to Train B cooler.The cooler automatically starts upon Train B ABI signal or high temperature at 1-TS-30-197A-B. In standby mode, the cooler will start upon high temperature at 1-TS 197B-B. Cooler fan motor and 1-FSV-67-352-B are interlocked to open 1-FCV-67-352-B for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 25 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-86WATTS BAR WBNP-91491-FCV-67-350-AEssential Raw Cooling Water Flow Control Valve for the Penetration Room (El 713)

Cooler 1A-A.Provides flowpath for cooling water from the ERCW Header to the Cooler for the Penetration Room Space.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-350)Loss of redundancy in providing cooling to Penetration Room (El 713)

Space None. Train B Pump room cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump room cooler.1-FCV-67-350 fails open on loss of power or air.501-FCV-67-352-BEssential Raw Cooling Water Flow Control Valve for the Penetration Room (El 713)

Cooler 1B-BProvides flowpath for cooling water from the ERCW Header to the Cooler for the Penetration Room Space.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-352)Loss of redundancy in providing cooling to Penetration Room (El 713)

Space.None. Train A Pump room cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump room cooler.1-FCV-67-352 fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 26 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-87WATTS BAR WBNP-91511-CLR-30-194-APenetration Room Cooler Fan 1A-A (Train

A).Provides cooling air to Penetration Room (El 737)Fails to start, fails while running; Spuriously stops.Mechanical failure; Train A power failure; Auto-start signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV 354-A fully open (1-ZS-67-354).

Fan motor running light on MCC.Loss of cooling to Penetration Room (El 737)

with the potential for loss of room equipment.None. The standby Train B Cooler B-B is available to start on high temperature (1-TS 195B-B) and is 100%

redundant to Train A cooler.The cooler automatically starts upon Train A ABI signal or high temperature at 1-TS-30-194A-A. In standby mode, the cooler will start upon high temperature at 1-TS 194B-A. Cooler fan motor and 1-FSV-67-354-A are interlocked to open 1-FCV-67-354-A for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.521-CLR-30-195-BPenetration Room Cooler Fan 1B-B (Train

B).Provides cooling air to Penetration Room (el 737)Fails to start, fails while running; Spuriously stops.Mechanical failure; Train B power failure; Auto-start signal failure; Operator error (handswitch placed in wrong position)Status monitor light in MCR for 1-FCV 356-B (1-ZS-67-356).

Fan motor running light on MCC.Loss of cooling to Penetration Room (el 737)

with the potential for loss of room equipment.None. The standby Train A Cooler A-A is available to start on high temperature (1-TS 194B-A) and is 100%

redundant to Train B cooler.The cooler automatically starts upon Train B ABI signal or high temperature at 1-TS-30-195A-B. In standby mode, the cooler will start upon high temperature at 1-TS 195B-B. Cooler fan motor and 1-FSV-67-356-B are interlocked to open 1-FCV-67-356-B for ERCW supply on cooler start. Review of the schematics for the coolers A-A and B-B shows their independence.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 27 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-88WATTS BAR WBNP-91531-FCV-67-354-AEssential Raw Cooling Water Flow Control Valve for the Penetration Room (El 737)

Cooler 1A-A.Provides flowpath for cooling water from the ERCW Header to the Cooler for the Penetration Room Space.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-354)Loss of redundancy in providing cooling to Penetration Room (El 737)

Space None. Train B Pump room cooler is not affected by the failure of Train A pump room cooler, and is 100%

redundant to the Train A pump room cooler.1-FCV-67-354-A fails open on loss of power or air.541-FCV-67-356-BEssential Raw Cooling Water Flow Control Valve for the Penetration Room (El 737)

Cooler 1B-BProvides flowpath for cooling water from the ERCW Header to the Cooler for the Penetration Room Space.Fails to open, stuck closed.Mechanical failure; Opening signal failure.Status monitor light in MCR (1-ZS-67-356)Loss of redundancy in providing cooling to Penetration Room (El 737)

Space.None. Train A Pump room cooler is not affected by the failure of Train B pump room cooler, and is 100%

redundant to the Train B pump room cooler.1-FCV-67-356 fails open on loss of power or air.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 28 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-89WATTS BAR WBNP-9055Backdraft Dampers 1-BKD-31-2998 1-BKD-31-2999 1-BKD-31-3000 1-BKD-31-3001 1-BKD-31-3002 1-BKD-31-3003 1-BKD-31-3004 1-BKD-31-3005 1-BKD-31-3006 1-BKD-31-1790 1-BKD-31-3078 1-BKD-31-5093 1-BKD-31-3088 1-BKD-31-3087 1-BKD-31-3080 1-BKD-31-4001Backseat to stop flow of hot air developed due to a HELB in the pipe chase from adjacent rooms and maintains a

mild environment

in rooms adjacent to pipe chase.Fails to backseat (Stuck Open)Mechanical FailureSee Remark #2 See Remark #2 1. Backdraft dampers 1-BKD-31-1790 and 1-BKD-31-5093 exist so that a backdraft damper is provided in every connection from the pipe chase to an adjacent room, and determined that the single failure of a backdraft damper (to close), when normal HVAC continues to operate, will not result in a severe environment in the room with the failed backdraft damper.

2. The ABI Signal does not automatically isolate the normal HVAC System during a HELB. As a result, the HELB in the pipe chase will not result in isolation of normal HVAC. Thus, proper air flow is maintained.

As a result, the single failure of any

of the listed backdraft dampers will have no effect on the system or the plant.Table 9.4-3 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: SAFETY FEATURE EQUIPMENT COOLERS (Sheet 29 of 29

)Item No.ComponentFunctionFailure Mode Potential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-90WATTS BAR WBNP-87Table 9.4-3A FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: TURBINE DRIVEN AUXILIARY FEEDWATER PUMP ROOM VENTILATION (Sheet 1 of 2)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks11-FAN-30-214Turbine-driven Auxiliary Feedwater

Pump Room Ventilation Fan 125V DcProvides cooling to the TDAFW

Pump RoomFails to start; Fails while running; Spuriously stopped.Mechanical failure; Temperature sensing failure; TDAFW Pump start signal failure.No direct method of detection.See Remark # 2Loss of cooling air/ventilation to the TDAFW Pump Room from the safety-related dc fan.Loss of all cooling/ventilation to the TDAFW Pump Room during loss of all ac (LOAC).See Remarks # 3 and

41. The dc fan is intended to mitigate the effects of station blackout on the TDAFW Pump Room ventilation.

During DBEs the TDAFW provides backup to the two 50% motor-driven AFW pumps. As such its operation during DBEs would imply a single failure to have already occurred; therefore, postulation of the failure of this fan is not required.2. Local temperature indication.3. In the event of loss of all ac the TDAFW Pump cooling is entirely dependent on the dc fan.4. The dc fan starts automatically by either TDAFW pump start, or high temperature sensed by 1-TS-30-214. It can also be started manually.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-91WATTS BAR WBNP-8721-BKD-30-3035Backdraft DamperProvides suction air flow path to the operating dc exhaust fanSpuriously closedMechanical failureLocal position indicators or damper.See Remark # 2Loss of cooling /ventilating for TDAFW Pump Room from dc fan.See Remark #1 1. During the loss of all ac, there will be no cooling/ventilating capability for TDAFW Pump room, with the possibility for loss of the TDAFW Pump. A non-safety, non-seismic, non- 1E ac fan is present in the room. TDAFW is the backup for the motor-driven FW and is required to operate upon failure of motor-driven FW. Thus, postulation of this failure is not required.

Table 9.4-3A FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: TURBINE DRIVEN AUXILIARY FEEDWATER PUMP ROOM VENTILATION (Sheet 2 of 2)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-92WATTS BAR WBNP-91 AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-93WATTS BARWBNP-89 Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 1 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS1Fire damper in Air Intake Room 0-30-603 for Train 1A-A 0-30-604 for Train 2A-A, 0-30-605 for Train 1B-B, and 0-30-606 for Train 2B-BFire Barrier between Air Intake Room

and Diesel Gen RoomOpen during fireClosed during other modes of operationMechanical failureMechanical (fusible link)

failureSee Remarks Diesel Gen. Room exhaust

fan low flow alarm in Main Control Room from fans air flow switches FS 447 or FS-30-451 for Train 1A-A, and FS-30-449 or FS-30-453 for Train 1B-B FS-30-448 or FS 452 for Train 2A-A FS-30-450 or FS-30-454 for Train 2B-BSee RemarksNone (See Remarks)See Remarks None(See Remarks)Single failures of HVAC System need not to be postulated as being concurrent with fire.Redundant train diesel generator system is started by operator

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-94WATTS BARWBNP-912Motor-operated intake dampers to Diesel Gen. Room 1-FC0-30-443-A for Train 1A-A, 1-FC0-30-445-B for Train 1B-B, 2-FCO-30-444-A for Train 2A-A, 2-FCO-30-446-B for Train 2B-BTo prevent air flow when associated diesel generator exhaust fans are deenergizedClosed (see note in remarks)

Spurious CO 2 system actuationMechanical failureDampers are spring-loaded to open upon power loss.

However, CO 2 actuation signal can close them.

Diesel Gen. Room exh fan low flow alarm in Main Control Room. From air flow switches FS-30-447 or FS 451 for Train 1A-A, FS-30-449 or FS-30-453 for Train 1B-B FS-30-448, 452 for 2A-A and FS-30-450, 454 for 2B-B.Loss of ventilation of

associated safety train

Diesel Gen Room.None (See Remarks)Redundant train diesel generator system is started by operator

• If closed due to spurious CO2 system actuation operator can verify and reopen damper.NOTE:These dampers to be open by handswitches 1-HS-30-447B & 1-HS 451B for Train 1A-A 1-HS-30-449B & 1-HS 453B for Train 1B-B, 2-HS 30-448B and 2-HS 452B, for Train 2A-A, 2-HS-30-450B,& 2-HS-30-454B for Train 2B-B and reset the temp.

switches 1-TS-30-447A, -

447B, -451A, and -451B for Train 1A-a, 1-TS 449A, -449B, -453A, & -

453B for Train 1B-B, 2-TS-30-448A, -448B, -

452A & -452B for Train 2A-A, 2-TS-30-450A, -

450B, -454A & -454B for Train 2B-B, when tornado watch or warning is declared by National Weather Service for this area.Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 2 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-95WATTS BARWBNP-893Fire barrier between Diesel Generator Room

& Air Exhaust Room 0-30-607 for Train 1A-A, 0-30-609 for Train 1B-B, 0-30-608 for Train 2A-A, 0 610 for Train 2B-BFire Barrier between Diesel Gen Room and Air Intake RoomOpen during fireClosed during other modes of operation Mechanical failureMechanical (fusible link)

failureSee Remarks Diesel Gen Room exh fan low flow alarm in Main Control Room from fan air flow switches FS-30-447 or FS-30-451See RemarksLoss of ventilation of

associated safety train

Diesel Gen Room.See Remarks None(See Remarks)Single failures of HVAC System need not to be postulated as being concurrent with fire.Redundant train diesel generator system is started by operatorFor Train 1A-A and FS-30-449 or FS-30-453 for Train 1B-B, FS-30-448 or FS 452 for Train 2A-A, and FS 450 or FS-30-454 for Train 2B-BTable 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 3 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-96WATTS BARWBNP-894Diesel Generator Room exhaust fans 1-FAN 447 1-FAN-30-451 for Train 1A-A, 1-FAN-30-449 1-FAN-30-453 for Train 1B-B, 2-FAN-30-448 2-FAN-30-452 for Train 2A-A, and 2-FAN-30-450, 2-FAN-30-454 for Train 2B-BProvide ventilation air Fails to start; stops

• Spurious C02 system actuation Electrical, Mechanical Diesel Gen Room exh fan low flow alarm in Main Control Room. (Refer to Figure 9.4-25)

From air flow switches FS 447 or FS-30-451 for Train 1A-A FS-30-449 or FS-30-453 for Train 1B-BLoss of adequate ventilation for maintenance of design temperatureNoneRedundant train diesel generator system is started by operator

• Operator can verify if not result of fire, reopen fire dampers and start exhaust fans from handswitchesFails to stop on low temp ElectricalFS-30-448 or FS-30-452 for Train 2A-A, and FS 450 or FS-30-454 for Train 2B-BSurveillanceDrop in DG Room tempNoneRedundant train diesel generator system is available.Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 4 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-97WATTS BARWBNP-915Motor-operated discharge dampers of diesel generator room exhaust fans 1-FCO-30-447 for Fan 1, 1-FCO-30-451 for Fan 2, Train 1A-A and 1-FCO-30-449 for Fan 1 1-FCO-30-453 for Fan 2,Train 1B-B, 2-FCO-30-448 for Fan 1, 2-FCO-30-452 for Fan 2,Train 2A-A 2-FCO-30-450 for Fan 1 ,

2-FCO-30-454 for Fan 2, Train 2B-BTo prevent air flow when associated diesel generator exhaust fan

is deenergizedClosed during associated exhaust fan operation (see note in remarks)MechanicalLoss of power (dampers fail as-is)Diesel Gen Room exh fan low flow alarm in Main Control

Room From air flow switches FS 447 or FS-30-451 for Train 1A-A, and FS-30-449, or FS-30-453For Train 1B-B and FS-30-448, FS-30-452; for Train 2A-A FS-30-450 FS-30-454 for Train 2B-BLoss of proper ventilation control for maintenance of environmental required temp None(See Remarks)Redundant train diesel generator system is started by operatorNOTE:See Note in Remarks for Item #2Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 5 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-98WATTS BARWBNP-896Fire dampers of Elec. BD Rooms intake vent 0 595 0-30-596 0-30-597 0-30-598Fire Barrier between Elec. BD Room &

outsideOpen during fireClosed during other modes of operationMechanical failureMechanical failureSee RemarksSurveillance & Maintenance(See Notes in Remarks)See RemarksLoss of ventilation of

associated Elec. BD Room and rise of space temp.

(See Remarks)See Remarks None(See Remarks)Single failures of HVAC System need not to be postulated as being concurrent with fire.Redundant train diesel generator system is started by operator7Fire dampers of Elec. BD Rooms exhaust 0-30-599 0-30-600 0-30-601 0-30-602Fire Barrier between Elec. BD Rooms & Air Exh RoomsOpen during fireClosed during other modes of operationMechanical failureMechanical failureSee RemarksSurveillance & Maintenance(See Notes in Remarks for Item

1. 6)See RemarksLoss of ventilation of

associated Elec. BD Room and rise of space temp.

(See Remarks)See Remarks None(See Remarks)Single failures of HVAC System need not to be postulated as being concurrent with fire.Redundant train diesel generator system is started by operatorTable 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 6 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-99WATTS BARWBNP-898Electric BD Room exhaust fans 1-FAN-30-459 for Train 1A-A, 1-FAN-30-461 for Train 1B-B, 2-FAN-30-460 for Train 2A-A, 2-FAN-30-462 for Train 2B-BProvide ventilation air Fails to start; stops

• Spurious CO2 system actuationOperates during winter Electrical, Mechanical Operator action not performed per site operating procedure (Section 2.2)Surveillance & Maintenance (See Note in Remarks for Item

1. 6)Loss of ventilation of

associated Elec. BD Room and rise of space temp Decrease of space temp.

below freezingNone (See Remarks)None (See Remarks above)Redundant train diesel generator system is started by operator

• If failures resulted from spurious actuation of the CO2 system, operator can verify and restart the fans from hand switches.Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 7 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-100WATTS BARWBNP-899Motor-operated discharge damper of Elec. BD Room exhaust fans 1-FCO-30-459 for Train 1A-A, 1-FCO-30-461 for Train 1B-B, 2-FCO-30-460 for Train 2A-A, 2-FCO-30-462 for Train 2B-BTo prevent air flow when associated Elec. BD Room exhaust fan

is deenergiizedClosed during associated exhaust fan operationMechanical Surveillance & MechanicalLoss of ventilation of

associated Elec. BD Room and rise of space temp.None (See Remarks)Redundant train diesel generator system is started by operatorNOTE:These dampers are to be open by handswitches 0-HS-30-459B or 0-HS-30-459C for Train 1A-A, and 0-HS-30-461B or 0-HS-30-461C for Train 1B-B, 0-HS-30-460B or 0-HS-30-460C for Train 2A-A and 0-HS-30-462B or 0-HS-30-462C for Train 2B-B when tornado watch or warning is declared by National weather service for this area.Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 8 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-101WATTS BARWBNP-89Generator & Electrical Panels ventilation fans 1-FAN-30-491 for Train 1A-A, 1-FAN-30-493 for train 1B-B, 2-FAN-30-492 for Train 2A-A, 2-FAN-30-494 for Train 2B-BProvide ventilation for elec. panel &

to generator

inlet Fails to start; stops Electrical MechanicalLow air flow alarm in Main Control Room via air flow switches FS-30-491 for Train 1A-A, FS-30-493 for Train 1B-B, FS-30-492 for Train 2A-A, FS-30-494 for Train 2B-BLoss of ventilation of

associated elec. panel & to generator inlet None(See Remarks)Redundant train diesel generator system is started by operator11Filters for elec panel ventilation air supply1-FLT-30-491 for Train 1A-A, 1-FLT-30-493 for Train 1B-B, 2-FLT-30-492 for Train 2A-A, 2-FLT-30-494 for Train 2B-B Filter the ventilation air supplied to elec panelClogged Accumulation of dirtSurveillance & MaintenanceRise of temp in the elec panel due to reduced supply of vent

air None(See Remarks)Redundant train diesel generator system is started by operatorTable 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 9 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-102WATTS BARWBNP-89 12 Class 1E AC power Provide Class 1E AC power to safety related portions of the diesel generator building ventilation system Loss or inadequate

power Electrical Indication and alarms in Main Control Room Loss of power to diesel generator

building ventilation system safety-related equipment None (See Remarks)

Redundant train diesel generator system is available for the plant safe shutdown13Class 1E power to instrumentation and control1-FLT-30-491 for Train 1A-A 1-FLT-30-493 for Train 1B-B 2-FLT-30-492 for Train 2A-A 2-FLT-30-494 for Train 2B-BProvide Class 1E power to safety-related portions of the diesel generator building ventilation system Loss or inadequate

powerElectricalIndication and alarms in main control roomLoss of control of the diesel generator ventilation system safety related equipment None(See Remarks)Redundant train diesel generator system is available for the plant safe shutdown.Table 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 10 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-103WATTS BARWBNP-8914Non-safety heaters 1-HTR-30-471, 1-HTR-30-472

for Diesel Gen.

1A-A Room and 1-HTR-30-473, 1-HTR-30-474 for Diesel Gen. 1B-B Room 2-HTR-30-475, 2-HTR-30-476 for diesel gen. 2A-A Room and 2-HTR-30-477, 2-HTR-30-478 for diesel gen. 2B-

B RoomProvide heating during winter normal operationOn during summer LOCA operationOff during winter conditionsSpurious failure ElectricalSurveillance & MaintenanceSurveillanceIncrease of Diesel Gen.

Room & Air Exh. Room temp. above environmental design conditionsDrop in Diesel Gen Room temp None. (See Remarks)NoneRedundant train diesel generator system is available for the plant safe shutdownSame as above15Nonsafety heaters 1-HTR-30-487 for 480V BD Room 1-

A-A, 1-HTR-30-489 for 480V BD Room 1B-B, 2-HTR-30-488 for 480V BD Room 2A-A, 2-HTR-30-490 for 2B-B RoomProvide heating during winter normal operationOn during summer LOCA operationOff during winter operationSpurious failure ElectricalSurveillance & Maintenance (See Note in Remarks for Item

1. 6)Increase 480V BD Room temp. above environmental design conditionsDrop in 480V board room temp.None. (See Remarks)Redundant train diesel generator system is available for the plant safe shutdownTable 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 11 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-104WATTS BARWBNP-89 Note:1. Refer to TVA Calculation No. EPM-RKK-121290, "Additional Diesel Generator Building Hy drogen Concentration and Dilution Vent ilation."16Nonsafety heaters 0-HTR-30-479 0-HTR-30-480 0-HTR-30-481 0-HTR-30-482 for the Pipe GalleryProvide heating during winter normal operationOff during winter operationElectrical Surveillance & MaintenanceDecrease in Pipe Gallery Room temp

below environmental design conditionsNone(See Remarks)Minimum temperature in pipe gallery is calculated to be 36.3 o F.17Toilet Room exhaust fan 0-FAN-469Provide cooling and ventilation for the toilet and corridor Fails to start; stops Electrical MechanicalSurveillance & MaintenanceLoss of adequate ventilation for maintenance of design tempNoneMaximum temperature in corridor is calculated to be

120 o FTable 9.4-4 FAILURE MODES AND EFFECTS ANALYSIS DIESEL GENERATOR VENTILATION SYSTEM (Sheet 12 of 12)

1. COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFFAILUREDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-105WATTS BAR WBNP-92Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 1 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks11-AHU-31-461-AAir Handling Unit 1A-A for 480 V Board Room 1A and Battery Room I (Train A)Provides cooling air supply to 480 V Board Room 1A Battery Room I, and to Train A equipment in Board Room 1B, and Train B press fan, Fifth Vital

Battery Rm. (FVBR)Fails to run; Fails while running Mechanical failure; Train A

power failure; Control signal

failure; Temperature control sensing failure at 1-TS 441A; low flow control sensing failure at 1-FS 460; Operator error (handswitch 1-HS-31-461B in wrong position)

Hardware related failures; i.e., motor burns out, fan drive

belt failures, loss of refrigerant to the Cooling Coil, and/or

restricted air flow path.Annunciation of 480 V Board Room 1A HVAC System abnormal for 1-FS-31-460 closed on low flow from AHU 1A-AIndicating lights in MCR (1-HS 461A). Motor running light on MCC.No indication in MCR of a low temperature sensing failure other than indication that the AHU is not running.Loss of capability to provide cooling air to 480 V Board Room 1A and Battery Board Room I and partial loss of cooling to FVBR.None; See Remarks1. Failures of the cooling coil, fan, motor, and filter are enveloped by the failure of the

AHU.2. The Condenser 1A-A and Compressor 1A-A are interlocked to automatically stop or start with the AHU 1A-A stop or start.3. Board Room 1B and Battery Room II provide the redundancy.4. Operator actions are defined to deal with loss of train A cooling5. Battery Room 1 and FVBR can be exhausted from the pressurizing fan supply air to provide hydrogen ventilation.

Prepared calculations indicate that sufficient cooling is still available to assure the battery rooms remain below the maximum temperature limits.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-106WATTS BAR WBNP-8921-ACU-31-475-BAir Handling Unit 1B-B for 480 V Board Room 1B and Battery Room II (Train B)Provides cooling air supply to 480 V Board Room 1B Battery Room

IIFails to run; Fails while running Mechanical failure; Train B

power failure; Control signal

failure; Temperature control sensing failure at 1-TS 447A; low flow control sensing failure at 1-FS 476; Operator error (handswitch 1-HS-31-475B in wrong position)Annunciation of 480 V Board Room 1B HVAC System abnormal for 1-FS-31-476 closed on low flow from AHU 1B-BIndicating lights in MCR (1-HS-31-475-A). Motor running light on MCC.No indication in MCR of a low temperature sensing failure other than indication that the AHU is not running.Loss of capability to provide cooling air to 480 V Board Room 1B and Battery Board Room IIBattery Room II will continue to be ventilated.

The pressurizing fan will supply air to the battery room through the AHU

duct.The pressurizing fans are cooled by the air they supply.None; See Remarks1. Failures of the cooling coil, fan, motor, and filter are enveloped by the failure of the

AHU.2. The Condenser 1B-B and Compressor 1B-B are interlocked to automatically stop or start with the AHU 1B-B stop or start.3. Board Room 1A and Battery Room I provide the redundancy.4. Press. fans are not required to mitigate the effects of a DBE.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 2 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-107WATTS BAR WBNP-8932-ACU-31-461-AAir Handling Unit 2A-A for 480 V Board Room 2A and Battery Room III(Train A)Provides cooling air supply to 480 V Board Room 2A Battery Room III, and to Train A equipment in Board Room 2B, and Train B

press fanFails to run; Fails while running Mechanical failure; Train A

power failure; Control signal

failure; Temperature control sensing failure at 2-TS 441A; low flow control sensing failure at 2-FS 460; Operator error (handswitch 2-HS-31-461B in wrong position)Annunciation of 480 V Board Room 2A HVAC System abnormal for 2-FS-31-460 closed on low flow from AHU 2A-AIndicating lights in MCR (2-HS-31-461-A). Motor running light on MCC.No indication in MCR of a low temperature sensing failure other than indication that the AHU is not running.Loss of capability to provide cooling air to 480 V Board Room 2A and Battery Board Room III.Battery Room III will continue to be ventilated.

The pressurizing fan will supply air to the battery room through the AHU

duct.The pressurizing fans are cooled by the air they supply.None; See Remarks1. Failures of the cooling coil, fan, motor, and filter are enveloped by the failure of the

AHU.2. The Condenser 2A-A and Compressor 2A-A are interlocked to automatically stop or start with the AHU 2A-A stop or start.3. Board Room 2B and Battery Room IV provide the redundancy.4. Press. fans are not required to mitigate the effects of a DBE.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 3 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-108WATTS BAR WBNP-8942-ACU-31-475-BAir Handling Unit 2B-B for 480 V Board Room 2B and Battery Room IV (Train B)Provides cooling air supply to 480 V Board Room 2B Battery Room

IVFails to run; Fails while running Mechanical failure; Train B

power failure; Control signal

failure; Temperature control sensing failure at 2-TS 447A; low flow control sensing failure at 2-FS 476; Operator error (handswitch 2-HS-31-475B in wrong position)Annunciation of 480 V Board Room 2B HVAC System abnormal for 2-FS-31-476 closed on low flow from AHU 2B-BIndicating lights in MCR (2-HS-31-461-A). Motor running light on MCC.No indication in MCR of a low temperature sensing failure other than indication that the AHU is not running.Loss of capability to provide cooling air to 480 V Board Room 2B and Battery Board Room IVBattery Room IV will continue to be ventilated.

The pressurizing fan will supply air to the battery room through the AHU

duct.The pressurizing fans are cooled by the air they supply.None, See Remarks1. Failures of the cooling coil, fan, motor, and filter are enveloped by the failure of the

AHU.2. The Condenser 2B-B and Compressor 2B-B are interlocked to automatically stop or start with the AHU 2B-B stop or start.3. Board Room 2A and Battery Room III provide the redundancy.4. Press. fans are not required to mitigate the effects of a DBE.51-COND-31-290-A Air Cooled Condenser Unit 1A-AProvides refrigerant to AHU 1A-AFails to run; Stops while running Mechanical failure; Train A

power failure; Start signal

failure.Motor running light on MCCLoss of cooling to 480 V Board Room 1A The Battery Room I will be ventilated by the air supply from the Pressurizing Fan to provide Hydrogen ventilation.None1. Failure of the condenser envelopes failure of its fan, coils and motor.2. The condenser is interlocked to automatically start or stop with the AHU and compressor start or stop.3. The condenser is interlocked to automatically open 1-FSV-31-290 when running and close it when stopped.4. Board Room 1B and Battery Room II provide the redundancy.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 4 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-109WATTS BAR WBNP-8961-COND-31-289-B Air Cooled Condenser Unit 1B-BProvides refrigerant to AHU 1B-BFails to run; Stops while running Mechanical failure; Train B

power failure; Start signal

failure.Motor running light on MCCLoss of cooling to 480 V Board Room 1B The Battery Room II will be ventilated by the air supply from the Pressurizing Fan to provide Hydrogen ventilation.None1. Failure of the condenser envelopes failure of its fan, coils and motor.2. The condenser is interlocked to automatically start or stop with the AHU and compressor start or stop.3. The condenser is interlocked to automatically open 1-FSV-31-289 when running and close it when stopped.4. Board Room 1A and Battery Room I provide the redundancy.72-COND-31-290-A Air Cooled Condenser Unit 2A-AProvides refrigerant to AHU 2A-AFails to run; Stops while running Mechanical failure; Train B

power failure; Start signal

failure.Motor running light on MCCLoss of cooling to 480 V Board Room 2A The Battery Room III will be ventilated by the air supply from the Pressurizing Fan to provide Hydrogen ventilation.None1. Failure of the condenser envelopes failure of its fan, coils and motor.2. The condenser is interlocked to automatically start or stop with the AHU and compressor start or stop.3. The condenser is interlocked to automatically open 2-FSV-31-290 when running and close it when stopped.4. Board Room 2B and Battery Room IV provide the redundancy.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 5 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-110WATTS BAR WBNP-8982-COND-31-289-B Air Cooled Condenser Unit 2B-BProvides refrigerant to AHU 2B-BFails to run; Stops while running Mechanical failure; Train A

power failure; Start signal

failure.Motor running light on MCCLoss of cooling to 480 V Board Room 2B The Battery Room IV will be ventilated by the air supply from the Pressurizing Fan to provide Hydrogen ventilation.None1. Failure of the condenser envelopes failure of its fan, coils and motor.2. The Condenser is interlocked to automatically start or stop with the AHU and compressor start or stop.3. The condenser is interlocked to automatically open 2-FSV-31-289 when running and close it when stopped.4. Board Room 2A and Battery Room III provide the redundancy.91-FCO 290Exhaust Damper for

ACU 1A-AProvides exhaust flow path for Condensing Unit 1A-AFails to open (stuck closed)Mechanical failureIndicating lights in MCR (1-ZS-31-290)Loss of cooling in 480 V Board Room 1A-ANone1. Interlocked with Condensing Unit 1A-A via 1-FSV-31-290 to automatically open on ACU start.2. A review of the Control Air flow diagrams shows that nonsafety control air is supplied to both 1-FC0-31-290 and 289.3. The exhaust damper is air operated and fails open upon loss of air or Train A power.4. Board Room 1B and Battery Room II provide the redundancy.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 6 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-111WATTS BAR WBNP-91101-FCO 289Exhaust Damper for

ACU 1B-BProvides exhaust flow path for Condensing Unit 1B-BFails to open (stuck closed)Mechanical failureIndicating lights in MCR (1-ZS-31-289)Loss of cooling in 480 V Board Room 1B-BNone1. Interlocked with Condensing Unit 1B-B via 1-FSV-31-289 to automatically open on ACU start.2. A review of the Control Air flow diagrams shows that nonsafety control air is supplied to both 1-FC0-31-290 and 289.3. The exhaust damper is air operated and fails open upon loss of air or Train B power.4. Board Room 1A and Battery Room I provide the redundancy.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 7 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-112WATTS BAR WBNP-89112-FCO 290Exhaust Damper for

ACU 2A-AProvides exhaust flow path for Condensing Unit 2A-AFails to open (stuck closed)Mechanical failureIndicating lights in MCR (2-ZS-31-290)Loss of cooling 480 V Board Room 2A-ANone1. Interlocked with Condensing Unit 2A-A via 2-FSV-31-290 to automatically open on ACU start.2. A review of the Control Air flow diagrams shows that nonsafety control air is supplied to both 2-FC0-31-290 and 289.3. The exhaust damper is air operated and fails open upon loss of air or Train A power.4. Board Room 2B and Battery Room IV provide the redundancy.122-FCO 289Exhaust Damper for

ACU 2B-BProvides exhaust flow path for Condensing Unit 2B-B.Fails to open (stuck closed).Mechanical failureIndicating lights in MCR (2-HS-31-289Loss of cooling 480 V Board Room 2B-BNone1. Interlocked with Condensing Unit 2B-B via 2-FSV-31-289 to automatically open on ACU start.2. A review of the Control Air flow diagrams shows that non-safety control air is supplied to both 2-FCO-31-290 and 289.3. The exhaust damper is air operated and fails open upon loss of air or Train B power.4. Board Room 2A and Battery Room III provide the redundancy.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 8 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-113WATTS BAR WBNP-92111-FAN-31-462-APressurizing Supply Fan 1A1-A (Train

A)Provides pressurizing air flow to 480 V Board Room 1A Battery Room I and partial makeup air to the Fifth Vital Battery Room.Fails to start; Fails

while running Failure to stop when Train B fan starts.Mechanical failure; Train A

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (1-HS-31-462 A). Locally, 1-HS 462B. ANN 19-9 low flow from Press.

FansIndicating lights in MCR (1-HS 462A).Loss of redundancy in pressurizing air supply to 480 V Board Room 1A and Battery Room I and

VLow flow on 1-FS-31-463-B will automatically stop Fan 1A1-A and Battery Board Room Exhaust fan 1A1-A and, will automatically start Fan 1A2-B and Battery Room Exhaust fan 1A2-

B.(See Remark #2.)Overpressurization of 480 V Board Room 1A.(See 'Remarks')None (See 'Remarks')None (See 'Remarks')1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 1A1-A is interlocked with Battery Board Room I Exhaust Fan 1A2-B and 480 V Room 1A Fan 1A2-B such that when Fan 1A1-A is in auto-standby, low flow on either of the 1A2-B Fans will start 1-FAN-31-462-A and stop 1-FAN-31-463-B.3. A review of the schematics establishes the separation and redundancy of the train A and B fans. The loss of nondivisional train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 1A and Mechanical Equipment Room 1A. Battery room I will not be overpressurized without second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 9 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-114WATTS BAR WBNP-92121-FAN-31-463-BPressurizing Supply Fan 1A2-B (Train

B)Provides pressurizing air flow to 480 V Board Room 1A Battery Room I and partial makeup air to the Fifth Vital Battery

RoomFails to start; Fails

while running Failure to stop when Train A fan starts.Mechanical failure; Train B

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (1-HS-31-463 A). Locally, 1-HS 463B. ANN 19-9 low flow from Press.

FansIndicating lights in MCR (1-HS 463A).Loss of redundancy in pressurizing air supply to 480 V Board Room 1A and Battery Room I and

VLow flow on 1-FS-31-462-A will automatically stop Fan 1A2-B and Battery Board Room Exhaust fan 1A2-B and, will automatically start Fan 1A1-A and Battery Room Exhaust fan 1A1-

A.(See Remark #2.)Overpressurization of 480 V Board Room 1A.(See 'Remarks')None (See 'Remarks')None (See 'Remarks')1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 1A2-B is interlocked with Battery Board Room I Exhaust Fan 1A1-A and 480 V Room 1A Fan 1A1-A such that when Fan 1A2-B is in auto-standby, low flow of either of the 1A1-A Fans will start 1-FAN-31-463B and stop 1-FAN-31-462A.3. A review of the schematics establishes the separation and redundancy of the Train A and B fans. The loss of nondivisional train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 1A and Mechanical Equipment Room 1A. Battery room I will not be overpressurized without a second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 10 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-115WATTS BAR WBNP-92131-FAN-31-478-APressurizing Supply Fan 1B1-A (Train

A)Provides pressurizing air flow to 480 V Board Room 1B Battery Room II and partial makeup air to the Fifth Vital Battery Room Fails to start; Fails

while running Failure to stop when Train B fan starts.Mechanical failure; Train B

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (1-HS 478A). Locally, 1-HS-31-478B ANN 19-11 low flow from Press.

FansIndicating lights in MCR (1-HS 478A).Loss of redundancy in pressurizing air supply to 480 V Board Room 1B and Battery Room IILow flow on 1-FS-31-477-B will automatically stop Fan 1B1-A and Battery Board Room Exhaust fan 1B1-A and, will automatically start Fan 1B2-B and Battery Room Exhaust fan 1B2-

B.

(See Remark #2.)Overpressurization of 480 V Board Room 1B.(See 'Remarks')None (See 'Remarks')None (See 'Remarks')1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 1B1-A is interlocked with Battery Room I Exhaust Fan 1B-A and 480 V Room 1B pressurizing Fan 1B2-B such that when Fan 1B1-A is in auto-standby, low flow on either of the 1B2-B Fans will start 1-FAN-31-478-A and stop 1-FAN-31-477-B.3. A review of the schematics establishes the separation and redundancy of the Train A and B fans. The loss of nondivisional train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 1B and Mechanical Equipment Room 1B. Battery room I will not be overpressurized without second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 11 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-116WATTS BAR WBNP-92141-FAN-31-477-BPressurizing Supply Fan 1B2-B (Train

B)Provides pressurizing air flow to 480 V Board Room 1B and Battery Room II and partial makeup air to the Fifth Vital Battery RoomFails to start; Fails

while running Failure to stop when Train A fan starts.Mechanical failure; Train B

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (1-HS 477A). Locally, HS-31-477B ANN 19-11 low flow from Press.

FansIndicating lights in MCR (1-HS 477A-B).Loss of redundancy in pressurizing air supply to 480 V Board Room 1B and Battery Room IILow flow on 1-FS-31-478-A will automatically stop Fan 1B2-B and Battery Room Exhaust

fan 1B2-B and, will automatically start Fan 1B1-A and Battery Room Exhaust fan 1B1-A.(See Remark #2.)Overpressurization of 480 V Board Room 1B.(See 'Remarks')None (See 'Remarks')None (See 'Remarks')1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 1B2-B is interlocked with Battery Room II Exhaust Fan 1B2-B and 480 V Room 1B pressurizing Fan 1B1-A such that when Fan 1B2-B is in auto-standby, low flow on either of the 1B1-A Fans will start 1-FAN-31-477-B and stop 1-FAN-31-478-A.3. A review of the schematics establishes the separation and redundancy of the Train A and B fans. The loss of non-divisional train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 1B and Mechanical Equipment Room 1B. Battery room II will not be overpressurized without a second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 12 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-117WATTS BAR WBNP-89171-FAN-31-287-AExhaust Fan 1A1- A for

Battery Room 1 (Train A).Exhausts air from Battery Room 1 to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train A

power failure;

spurious low flow signal.Local indicating light for Damper 1-FCO-31-287-A closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room

1.On low flow from pressurizing or Exhaust Fan 1A1-A, the Train B Pressurizing Fan 1A2-B and the Exhaust Fan 1A2-B will automatically start. Damper 1-FCO-31-288-B will open.None.1. Interlocked with Pressurizing Fan 1A1-A such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans. 181-FAN-31-288-BExhaust Fan 1A2-B for

Battery Room 1 (Train B).Exhausts air from Battery Room 1 to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train B

power failure;

spurious low flow signal.Local indicating light for damper 1-FCO-31-288-B closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room

1.On low flow from Pressurizing or Exhaust Fan 1A2-B, the Train A Pressurizing Fan 1A1-A and the Exhaust Fan 1A2-B will automatically start. Damper 1-FCO-31-287-A will open.None.1. Interlocked with Pressurizing Fan 1A2-B such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans. Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 13 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-118WATTS BAR WBNP-89191-FAN-31-285-AExhaust Fan 1B1-A for Battery II (Train A)Exhausts air from Battery Room II to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train A

power failure;

spurious low flow signal.Local indicating light for damper 1-FCO-31-285-A closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room II.On low flow from Pressurizing or Exhaust Fan 1B1-A, the Train B Pressurizing Fan 1B2-B will automatically start.

Damper 1-FCO-31-286-A will open.None.1. Interlocked with Pressurizing Fan 1B1-A such that the Exhaust Fan starts and stops whtn the Pressurizing Fan starts.2. A review of the schematics restablishes the independance of the Train A and B fans.

1. Interlocked with Pressurizing Fan 1B2-B such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans. 201-FAN-31-286-BExhaust Fan 1B2-B for

Battery Room II (Train B).Exhausts air from Battery Room II to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train B

power failure;

spurious low flow signal.Local indicating light for Damper 1-FCO-31-286-B closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room II.On low flow from pressurizing or Exhaust Fan 1B2-B, the Train A Pressurizing Fan 1B1-A and the Exhaust Fan 1B1-A will automatically start. Damper 1-FCO-31-285-B will open.None.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 14 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-119WATTS BAR WBNP-91212-FAN-31-462-APressurizing Supply Fan 2A1-A (Train

A)Provides pressurizing air flow to 480 V Board Room 2A Battery Room IV.Fails to start; Fails

while running Failure to stop when Train B fan starts.Mechanical failure; Train A

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (2-HS-31-462-A). Locally, 2-HS 462B. ANN 19-9 low flow from Press.

FansIndicating lights in MCR (2-HS 462A).Loss of redundancy in pressurizing air supply to 480 V Board Room 2A and Battery Room IVLow flow on 2-FS-31-463-B will automatically stop Fan 2A1-A and Battery Board Room Exhaust fan 2A1-A; and, will automatically start Fan 2A2-B and Battery Room Exhaust fan 2A2-

B.See Remark #2.Overpressurization of 480 V Board Room 2A.See 'Remarks' column None None1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 2A1-A is interlocked with Battery Board Room I Exhaust Fan 2A2-B and 480 V Room 2A Fan 2A2-B such that when Fan 2A1-A is in auto-standby, low flow on either of the 2A2-B Fans will start 2-FAN-31-462-A and stop 2-FAN-31-463-B.3. A review of the schematics establishes the separation and redundancy of the Train A and B fans. The loss of non-division train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 2A and Mechanical Equipment Room 2A. Battery room IV will not be overpressurized without second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 15 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-120WATTS BAR WBNP-91222-FAN-31-463-BPressurizing Supply Fan 2A2-B (Train

B)Provides pressurizing air flow to 480 V Board Room 2A Battery Room IV.Fails to start; Fails

while running Failure to stop when Train A fan starts.Mechanical failure; Train B

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (2-HS-31-463-A). Locally, 2-HS 463B ANN 19-9 low flow from Press.

FansIndicating lights in MCR (2-HS 463A).Loss of redundancy in pressurizing air supply to 480 V Board Room 2A and Battery Room IVLow flow on 2-FS-31-462-A will automatically stop Fan 2A2-B and Battery Board Room Exhaust fan 2A2-B and, will automatically start Fan 2A1-A and Battery Room Exhaust fan 2A1-

A.See Remark #2.Overpressurization of 480 V Board Room 2A.See 'Remarks' column None None1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 2A2-B is interlocked with Battery Board Room IV Exhaust Fan 2A1-A and 480 V Room 2A Fan 2A1-A such that when Fan 2A2-B is in auto-standby, low flow on either of the 2A1-A Fans will start 2-FAN-31-463-B and stop 2-FAN-31-462-A.3. A review of the schematics establishes the separation and redundancy of the Train A and B fans. The loss of non-division train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 2A and Mechanical Equipment Room 2A. Battery room IV will not be overpressurized without second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 16 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-121WATTS BAR WBNP-91232-FAN-31-478-APressurizing Supply Fan 2B1-A (Train

A)Provides pressurizing air flow to 480 V Board Room 2B Battery Room III.Fails to start; Fails

while running Failure to stop when Train B fan starts.Mechanical failure; Train A

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short in control wiring; Operator error.Indicating lights in MCR (2-HS-31-478-A). Locally, 2-HS 478B. ANN 19-9 low flow from Press.

FansIndicating lights in MCR (2-HS 478A).Loss of redundancy in pressurizing air supply to 480 V Board Room 2B and Battery Room IIILow flow on 2-FS-31-477-A will automatically stop Fan 2B1-A and Battery Board Room Exhaust fan 2B1-A and, will automatically start Fan 2B2-B and Battery Room Exhaust Fan 2B2-

B.See Remark #2.Overpressurization of 480 V Board Room 2B.See 'Remarks' column None None1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 2B1-A is interlocked with Battery Board Room III Exhaust Fan 2B2-B and 480 V Room 2B Fan 2B2-B such that when Fan 2B1-A is in auto-standby, low flow on either of the 2B2-B Fans will start 2-FAN-31-478-A and stop 2-FAN-31-477-B.3. A review of the schematics establishes the separation and redundancy of the train A and B fans.

The loss of non-division train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 2B and Mechanical Equipment Room 2B. Battery room III will not be overpressurized without second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 17 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-122WATTS BAR WBNP-91242-FAN-31-477-BPressurizing Supply Fan 2B2-B (Train

B)Provides pressurizing air flow to 480 V Board Room 2B Battery Room III.Fails to start; Fails

while running Failure to stop when Train A fan starts.Mechanical failure; Train B

power failure; Control signal

failure; Operator error (handswitch in wrong position)Spurious low flow signal; Hot short control wiring; Operator error.Indicating lights in MCR (2-HS-31-477-A). Locally, 2-HS 477-B. ANN 19-11 low flow from Press.

FansIndicating lights in MCR (2-HS 477A).Loss of redundancy in pressurizing air supply to 480 V Board Room 2B and Battery Room IIILow flow on 2-FS-31-478-A will automatically stop Fan 2B2-B and Battery Board Room Exhaust fan 2B2-B and, will automatically start Fan 2B1-A and Battery Room Exhaust fan 2B1-

A.See Remark #2.Overpressurization of 480 V Board Room 2A.See 'Remarks' column None None1. Fan is controlled by locally mounted stop-start push button stations in conjunction with auto-start switches in

MCR.2. Pressurizing Fan 2B2-B is interlocked with Battery Board Room III Exhaust Fan 2B1-A and 480 V Room 2B Fan 2B1-A such that when Fan 2B2-B is in auto-standby, low flow on either of the 2B1-A Fans will start 2-FAN-31-477-B and stop 2-FAN-31-478-A.3. A review of the schematics establishes the separation and redundancy of the train A and B fans. The loss of non-division train associated power supply for the separation relay will not prevent the switchover from a failed pressurizing fan to the standby fan.Insignificant increase in air flow to 480 V Board Room 2B and Mechanical Equipment Room 2B. Battery room III will not be overpressurized without second

failure.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 18 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-123WATTS BAR WBNP-89252-FAN-31-287-AExhaust Fan 2A1- A for

Battery Room IV (Train A).Exhausts air from Battery Room IV to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train A

power failure;

spurious low flow signal.Local indicating light for Damper 2-FCO-31-287-A closure.

Motor running light on MCC.

Local indicating light for damper 2-FCO-31-288-A closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room IV.On low flow from pressurizing or Exhaust Fan 2A1-A, the Train B Pressurizing Fan 2A2-B and the Exhaust Fan 2A2-B will automatically start. Damper 2-FCO-31-288-B will open.None.1. Interlocked with Pressurizing Fan 2A1-A such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans. 262-FAN-31-288-BExhaust Fan 2A2-B for

Battery Room IV (Train B).Exhausts air from Battery Room IV to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train B

power failure;

spurious low flow signal.Loss of redundancy in exhausting Battery Room IV.On low flow from Pressurizing or Exhaust Fan 2A1-B, the Train A Pressurizing Fan 2A1-A and the Exhaust Fan 2A1-A will automatically start. Damper 2-FCO-31-287-A will open.None.1. Interlocked with Pressurizing Fan 2A2-B such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans. Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 19 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-124WATTS BAR WBNP-89272-FAN-31-285-AExhaust Fan 2B1-A for Battery III (Train A).Exhausts air from Battery Room III to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train A

power failure;

spurious low flow signal. Local indicating light for damper 2-FCO-31-285-A closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room III.On low flow from Pressurizing or Exhaust Fan 2B1-A, the Train B Pressurizing Fan 2B2-B and the Exhaust Fan 2B2-B will automatically start. Damper 2-FCO-31-286-A will open.None.1. Interlocked with Pressurizing Fan 2B1-A such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans.282-FAN-31-286-BExhaust Fan 2B2-B for

Battery Room III (Train B).Exhausts air from Battery Room III to prevent hydrogen build-up.Fails to start; Fails

while running.Mechanical failure; Train B

power failure;

spurious low flow signal.Local indicating light for Damper 2-FCO-31-286-A closure.

Motor running light on MCC.Loss of redundancy in exhausting Battery Room III.On low flow from pressurizing or Exhaust Fan 2B2-B, the Train A Pressurizing Fan 2B1-A and the Exhaust Fan 2B1-A will automatically start. Damper 2-FCO-31-285-B will open.None.1. Interlocked with Pressurizing Fan 2B2-B such that the Exhaust Fan starts when the Pressurizing Fan starts and stops when the Pressurizing Fan stops.2. A review of the schematics establishes the independence of the Train A and B fans. Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 20 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-125WATTS BAR WBNP-89291-FCO-31-287-ATornado Damper (Exhaust Fan 1A1-A.)Provides air flow to Exhaust Fan 1A1-A in Battery Room I.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (1-ZS-31-287-A).Loss of redundancy in exhausting Battery Room

I.Low flow from 1A1-A Fans will automatically stop the fan from Train A, start Train B Press. Fan 1A2-B and Exhaust Fan 1A2-B which will open 1-FCO-31-288-B.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room I Exhaust Fan 1A1-A. A review of the schematics establishes the independence of the control of the Damper 1-FCO-31-288-B.301-FCO-31-288-BTornado Damper (Exhaust Fan 1A2-B)Provides air flow to Exhaust Fan 1A2-B in Battery Room I.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (1-ZS-31-288-B).Loss of redundancy in exhausting Battery Room

I.Low flow from 1A2-B Fans will automatically stop the fan from Train B, start Train A Press. Fan 1A1-A and Exhaust Fan 1A1-A which will open 1-FCO-31-287-A.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room I Exhaust Fan 1A2-B. A review of the schematics establishes the independence of the control of the Damper 1-FCO-31-287-A and 1-FCO-31-288-B.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 21 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-126WATTS BAR WBNP-89311-FCO-31-285-ATornado Damper (Exhaust Fan 1B1-A)Provides air flow to Exhaust Fan 1B1-A in Battery Room II.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (1-ZS-31-285-A).Loss of redundancy in exhausting Battery Room II.Low flow from 1B1-A Fans will automatically stop the fan from Train A, start Train B Press. Fan 1B2-B and Exhaust Fan 1B2-B which will open 1-FCO-31-286-B.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room II Exhaust Fan 1B1-A. A review of the schematics establishes the independence of the control of the Damper 1-FCO-31-286-B.321-FCO-31-286-BTornado Damper (Exhaust Fan 1B2-B).Provides air flow to Exhaust Fan 1B2-B in Battery Room II.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (1-ZS-31-286-B).Loss of redundancy in exhausting Battery Room II.Low flow from 1B2-B Fans will automatically stop the fan from Train B, start Train A Press. Fan 1B1-A and Exhaust Fan 1B1-A which will open 1-FCO-31-285-A.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room II Exhaust Fan 1B2-B. A review of the schematics establishes the independence of the control of the Damper 1-FCO-31-285-A and 1-FCO-31-286-B.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 22 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-127WATTS BAR WBNP-89332-FCO-31-287-ATornado Damper (Exhaust Fan 2A1-A).Provides air flow to Exhaust Fan 2A1-A in Battery Room IV.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (2-ZS-31-287-A).Loss of redundancy in exhausting Battery Room IV.Low flow from 2A1-A Fans will automatically stop the fan from Train A, start Train B Press. Fan 2A2-B and Exhaust Fan 2A2-B which will open 2-FCO-31-288-B.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room IV Exhaust Fan 2A1-A. A review of the schematics establishes the independence of the control of the Damper 2-FCO-31-287-A and 2-FCO-31-288-B.342-FC0-31-288-BTornado Damper (Exhaust Fan 2A2-B.Provides air flow to Exhaust Fan 2A2-B in Battery Room IV.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (2-ZS-31-288-B).Loss of redundancy in exhausting Battery Room IV.Low flow from 2A2-B Fans will automatically stop the fan from Train B, start Train A Press. Fan 2A1-A and Exhaust Fan 2A1-A which will open 2-FCO-31-287-A.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room IV Exhaust Fan 2A2-B. A review of the schematics establishes the independence of the control of the Damper 2-FCO-31-287-A and 2-FCO-31-288-B.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 23 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-128WATTS BAR WBNP-92352-FCO-31-285-ATornado Damper (Exhaust Fan 2B1-A).Provides air flow to Exhaust Fan 2B1-A in Battery Room III.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (2-ZS-31-285-A).Loss of redundancy in exhausting Battery Room III.Low flow from 2B1-A fans will automatically stop the fan from Train A, start Train B Press. Fan 2B2-B and Exhaust Fan 2B2-B which will open 2-FCO-31-286-B.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room III Exhaust Fan 2B1-A. A review of the schematics establishes the independence of the control of the Damper 2-FCO-31-285-A and 2-FCO-31-286-B.362-FCO-31-286-BTornado Damper (Exhaust Fan 2B2-B).Provides air flow to Exhaust Fan 2B2-B in Battery Room III.Spuriously closes.Mechanical failure; Hot short in control

wiring; Operator error (handswitch placed in wrong position).Mechanical Equipment Room damper status lights (2-ZS-31-286-B).Loss of redundancy in exhausting Battery Room III.Low flow from 2B2-B fans will automatically stop the fan from Train B, start Train A Press. Fan 2B1-A and Exhaust Fan 2B1-A which will open 2-FCO-31-285-A.None.Damper is motor operated, and fails as is. Automatically controlled to open by Battery Room III Exhaust Fan 2B2-B. A review of the schematics establishes the independence of the control of the Damper 2-FCO-31-285-A and 2-FCO-31-286-B.350-FAN-31-493A-AFifth Vital Battery Supply Fan 1A1-A.N/AN/AN/AN/A N/A N/AAbandoned in place.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 24 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-129WATTS BAR WBNP-92360-FC-31-487A Battery Room V Intake Fan 1A1-A Hydramotor Controller.

N/A N/A N/AN/A N/AAbandoned in place.370-FCO-31-483-ATornado Damper for intake Fan 1A1-A Fifth Vital Battery Room.N/AN/AN/AN/AN/A N/AAbandoned in place in "closed" position.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 25 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-130WATTS BAR WBNP-92380-FAN-31-493B-AFifth Vital Battery Room Exhaust Fan 1B1-A.Provides exhaust from Battery Room Fails to run; Fails while running.Mechanical failure; Train A power failure; Auto-start signal failure.ANN 19-8 for low flow from intake fan or exhaust fan from either train.Motor running light on MCC.Loss of redundancy in exhausting Battery Room

V.The Train B fan is available to provide exhausting of Battery Room V, and will automatically start on low flow sensed in Train A s exhaust duct.None. (See 'Remarks')The fifth Vital Battery is housed in its own separate room, and functions as a spare to any of the four vital batteries during periodic testing and maintenance or cell failure during operation. The two trains of the ventilation system are 100%

redundant. o . Upon low flow from Train A exhaust fan, the opposite train fans will start automatically and its dampers will open. Auto-start of the standby train is independent of the other train. Schematic diagrams were reviewed and it was determined that control from the opposite train flow element does not violate separation of redundant train.390-FCO-31-485-ATornado Damper for exhaust Fan 1B1-A Fifth Vital Battery Room.Provides flow path for exhaust from Exhaust Fan 1B1-AFails to open (stuck closed);

Spuriously

closes.Mechanical failure; Train A power failure; Operator error.Local control station indicating lights.Loss of redundancy in providing exhaust flowpath.None. The Train B exhaust fan and its associated dampers are automatically controlled to start/open upon low flow from the operating exhaust fan.Damper is solenoid actuated to fail closed upon loss of Train A power.Interlocked to automatically open upon exhaust Fan 1B1-A start.400-FAN-31-496AFifth Vital Battery Room supply Fan 1A2-B.N/AN/AN/AN/AN/AN/AAbandoned in place.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 26 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-131WATTS BAR WBNP-92410-FC-31-488A-B Battery Room V Intake Fan 1A2-B Hydramotor Controller.N/AN/AN/AN/A N/AAbandoned in place.420-FCO-31-484-BTornado Damper for Intake Fan 1A2-B Fifth Vital Battery Room.N/AN/AN/AN/AN/A N/AAbandoned in place.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 27 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-132WATTS BAR WBNP-92430-FAN-31-496BFifth Vital Battery Room Exhaust Fan 1B2-B.Provides exhaust form Battery Room V for ventilation.Fails to run; Fails while running.Mechanical failure; Train B

power failure; Auto-start signal failure.ANN 19-8 for low flow from intake fan or exhaust fan from either train.Motor running light on MCC.Loss of redundancy in exhausting Battery Room

V.The Train A fan is available to provide exhausting of Battery Room V, and will automatically start on low flow sensed in Train B exhaust duct.None. (See Remarks)The fifth Vital Battery is housed in its own separate room, and functions as a spare to any of the four vital batteries during periodic testing and maintenance or cell failure during operation. The two trains of the ventilation system are 100%

redundant. . Upon low flow from Train B exhaust fan, the opposite train fans will start automatically and its dampers will open. Auto-start of the standby train is independent of the other train. Schematic diagrams were reviewed and it was determined that control from the opposite train flow element does not violate separation of redundant train.440-FCO-31-486-BTornado Damper for exhaust Fan 1B2-B Fifth Vital Battery Room.Provides flowpath for exhaust from Exhaust Fan 1B2-B.Fails to open (stuck closed);

Spuriously

closes.Mechanical failure; Train B power failure; Operator error.Local Control Station indicating lightsLoss of redundancy in providing exhaust flowpath.None. The Train A exhaust fan and its associated damperis automatically controlled to start/open upon low flow from the operating exhaust fan.Low flow switch FS-31-492-B turns on the redundant fan pair (supply/exhaust) Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 28 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-133WATTS BAR WBNP-89471-BKD-31-2502Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 1A1-A when Fan 1A2-B is running.Fails to backseat.Mechanical failure; Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None.1. ANN low flow. Indicating lights of Fan 1A2-B running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.481-BKD-31-2503Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 1A2-B when Fan 1A1-A is running.Fails to backseat.Mechanical failure.Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None. 1. ANN low flow. Indicating lights of Fan 1A1-A running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 29 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-134WATTS BAR WBNP-89492-BKD-31-2502Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 2A1-A when Fan 2A2-B is running.Fails to backseat.Mechanical failure. See Remark #1.Local position indicators on damper.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None.1. ANN low flow. Indicating lights of Fan 2A2-B running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.502-BKD-31-2503Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 2A2-B when Fan 2A1-A is running.Fails to backseat.Mechanical failure.Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None. 1. ANN low flow. Indicating lights of Fan 2A1-A running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 30 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-135WATTS BAR WBNP-89511-BKD-31-2520Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 1B1-A when Fan 1B2-B is running.Fails to backseat.Mechanical failure. Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None.1. ANN low flow. Indicating lights of Fan 1B2-B running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.521-BKD-31-2521Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 1B2-B when Fan 1B1-A is running.Fails to backseat.Mechanical failure.Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None. 1. ANN low flow. Indicating lights of Fan 1B1-A running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 31 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-136WATTS BAR WBNP-89532-BKD-31-2520Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 2B1-A when Fan 2B2-B is running.Fails to backseat.Mechanical failure. Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None.1. ANN low flow. Indicating lights of Fan 2B2-B running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.542-BKD-31-2521Back Draft DamperPrevents flow of air through Pressurizing Supply Fan 2B2-B when Fan 2B1-A is running.Fails to backseat.Mechanical failure.Local position indicators on damper.See Remark #1.Loss of pressurizing air to rooms served by the fan. Bypass flow through the standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

This would result in the total loss of the pressurizing fan and its paired Battery Room exhaust fan and damper.See Remark #2.None. 1. ANN low flow. Indicating lights of Fan 2B1-A running in MCR. Local indication of damper status resulting from potential low flow from fan(s).2. Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective fan.Table 9.4-5 FAILURE MODES AND EFFECTS ANALYSIS FOR ACTIVE FAILURES SUBSYSTEM: AUXILIARY BOARD ROOMS AIR CONDITIONING SYSTEM (Sheet 32 of 32)

Item No.ComponentFunctionFailure Mode Potential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-137WATTS BAR WBNP-87Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 1 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS11-FAN-30-244F-AExhaust FanExhausts air from 480V Transformer Room 1A.Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train A power failure; Temperature control sensing failure;

Control signal failure.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of four fans.None.None.None.1. The four (4) exhaust fans (3 safety- related) in 480V Transformer Room 1A are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 1A and 1B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-362.5. Any two of the three safety related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-138WATTS BAR WBNP-8721-FAN-30-244G-AExhaust FanExhausts air from 480 V Transformer Room

1A. Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train A power failure; Temperature control sensing failure;

Control signal failure.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of four fans.None.None.None.1. The four (4) exhaust fans (3 safety-related) in 480 V Transformer Room 1A are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 1A and 1B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-362.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped. In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 2 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-139WATTS BAR WBNP-8731-FAN-30-244H-AExhaust FanExhausts air from 480 V Transformer Room

1A.Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train A power failure; Temperature control sensing failure;

Control signal failureControl signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of four fans.None.None.None.1. The four (4) exhaust fans (3 safety-related) in 480 V Transformer Room 1A are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 1A and 1B, containing redundant electrical equipment, are independent of each other.4. Room Temperature is indicated on Local Panel L-362.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped. In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 3 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-140WATTS BAR WBNP-87 4 51-FAN-30-244J Exhaust Fan(Non-safety)1-FAN-30-248E-BExhaust FanExhausts air from 480 V Transformer Room

1AExhausts air from 480 V Transformer Room

1B.Spuriously runs.Fails to run; Fails while running.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Mechanical failure; Train B power failure; Temperature control sensing failure;

Control signal failure.Indicating lights on MCC for fan motor running.Motor running light on MCC.None.See Remark

1. 2.Loss of one of three fans.None.See Remark #2.None.1. This fan is electrically separate from the 1E circuit for the three safety-related fans.2. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit.1. The three (3) exhaust fans (3 safety-related) in 480 V Transformer Room 1B are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 1A and 1B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-368.5. Any two of the three safety related fans can provide adequate air to ventilate the room.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 4 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-141WATTS BAR WBNP-87 5 61-FAN-30-248E-B(cont'd)Exhaust Fan1-FAN-30-248F-BExhaust FanExhausts air from 480 V Transformer Room

1B.Spuriously runs.Fails to run; Fails while running.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Mechanical failure; Train B power failure; Temperature control sensing failure;

Control signal failureIndicating lights on MCC for fan motor runningMotor running light on MCC. None.Loss of one of three fans.None.None.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit.1. The three (3) exhaust fans (3 safety-related) in 480 V Transformer Room 1B are interlocked to automatically start/stop in staged series by thermostatic control. 2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 1A and 1B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-368.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 5 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-142WATTS BAR WBNP-87 6 71-FAN-30-248F-B(cont'd)Exhaust Fan1-FAN-30-248G-BExhaust Fan Exhausts air from 480 V Transformer Room

1B.Spuriously runs.Fails to run; Fails while running.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Mechanical failure; Train B power failure; Temperature control sensing failure;

Control signal failureIndicating lights on MCC for fan motor runningMotor running light on MCC.None.Loss of one of three fans.None.None.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit.1. The three (3) exhaust fans (3 safety-related) in 480 V Transformer Room 1B are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 1A and 1B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-368.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 6 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-143WATTS BAR WBNP-87 7 81-FAN-30-248G-B(cont'd)Exhaust Fan 1-FCO-30-244A and -244BIntake DampersPermits flow of air supply from air intake to 480 V Transformer Room 1A.Spuriously runs.Spuriously closes; Fails to open.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Mechanical failure; Auto-open signal failure; Hot short in

control wiring.Indicating lights on MCC for fan motor runningMCR indicating lights 1-ZS 244A and -

244B).None.Loss of redundancy in intake air supply. 100%

redundant intake damper can supply sufficient air.None.None.See Remark #3.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit.1. Both intake dampers are interlocked to automatically open when any of the four (4) exhaust fans are either automatically or manually started.2. Dampers fail open upon loss of control air or Train A power to 1-FSB-30-244A and -244B.3. 1-FSV-30-244A and -244B and the air pressure regulators, 1-PREG-30-244A and -

244B, that regulate the air pressure to these FSVs are Q-Listed as Quality- related, not safety-related. Failure of the air regulators either by blockage or sticking full open will not impact the capability of the damper to open. Failure of the solenoid to de-energize to close the damper is included in the mechanical failure mode of the damper.The nonsafety-related solenoid is properly isolated in the 1E circuit.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 7 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-144WATTS BAR WBNP-87 9 101-FCO-30-248A and -248BIntake Dampers.2-FAN-30-250E-AExhaust FanPermits flow of air supply from air intake to 480 V Transformer Room 1B.Exhausts air from 480 V Transformer Room

2A.Spuriously closes; Fails to open.Fails to run; Fails while running.Mechanical failure; Auto-open signal failure; Hot short in

control wiring.Mechanical failure; Train A power failure; Temperature control sensing failure;

Control signal failureMCR indicating lights (1-ZS-30-248A and -248B).Motor running light on MCC.Loss of redundancy in intake air supply.100% redundant intake damper can supply sufficient air.Loss of one of three fans.None.See Remark #3.None.1. Both intake dampers are interlocked to automatically open when any of the three (3) exhaust fans are either automatically or manually started.2. Dampers fail open upon loss of control air loss or Train B power to 1-FSV-30-248A and -

248B.3. 1-FSV-30-248A and -248B and the air pressure regulators, 1-PREG-30-248A and -

248B, that regulate the air pressure to these FSVs are Q-Listed as Quality- related, not safety-related. Failure of the air regulators either by blockage or sticking full open will not impact the capability of the damper to open.Failure of the solenoid to de-energize to close the damper is included in the mechanical failure mode of the damper.The nonsafety-related solenoid is properly isolated in the 1E circuit.1. The three (3) exhaust fans (3 safety-related) in 480 V Transformer Room 2A are interlocked to automatically start/stop in staged series by thermostatic control, 2-TT-30-250.2. The inlet dampers are interlocked to automatically open when any fan is running.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 8 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-145WATTS BAR WBNP-87102-FAN-30-250E-A(cont'd)Exhaust FanSpuriously runs.Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Indicating lights on MCC for fan motor running.None.None.3. Schematics have been reviewed and it was determined that rooms 2A and 2B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-368.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 9 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-146WATTS BAR WBNP-87112-FAN-30-250F-AExhaust FanExhausts air from 480 V Transformer Room

2A.Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train A power failure; Temperature control sensing failure;

Control signal failure Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of three fans.None.None.None.1. The three (3) exhaust fans (3 safety-related) in 480 V Transformer Room 2A are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 2A and 2B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-368.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 10 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-147WATTS BAR WBNP-87122-FAN-30-250G-BExhaust FanExhausts are from 480 V Transformer Room 2A.Fails to run; Fails while running.Spuriously runs.Mechanical Failure; Train A power failure; Temperature control sensing failure;

Control signal failure Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of three fans.None.None.None.1. The three (3) exhaust fans (3 safety-related) in 480 V Transformer Room 2A are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 2A and 2B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-368.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation on one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 11 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-148WATTS BAR WBNP-87132-FAN-30-246F-BExhaust FanExhausts air from 480 V Transformer Room

2B.Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train B power failure; Temperature control sensing failure;

Control signal failureControl signal failure; Temperature control sensing failure; Hot short in control wiringMotor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of three fans.None.None.None.1. The four (4) exhaust fans (3 safety-related) in 480 V Transformer Room 2B are interlocked to automatically start/stop in staged series by thermostatic control, 2-TT-30-246.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 2A and 2B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-362.5. Any two of the three safety-related fan can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 12 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-149WATTS BAR WBNP-87142-FAN-30-246G-BExhaust FanExhausts air from 480 V Transformer Room

2B.Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train B power failure; Temperature control sensing failure;

Control signal failure Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of four fans.None.None.None.1. The four (4) exhaust fans (3 safety-related) in 480 V Transformer Room 2B are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 2A and 2B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-362.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 13 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-150WATTS BAR WBNP-87152-FAN-30-246H-BExhaust FanExhausts air from 480 V Transformer Room

2B.Fails to run; Fails while running.Spuriously runs.Mechanical failure; Train B power failure; Temperature control sensing failure;

Control signal failure Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Motor running light on MCC.Indicating lights on MCC for fan motor running.Loss of one of four fans.None.None.None.1. The four (4) exhaust fans (3 safety-related) in 480 V Transformer Room 2B are interlocked to automatically start/stop in staged series by thermostatic control.2. The inlet dampers are interlocked to automatically open when any fan is running.3. Schematics have been reviewed and it was determined that rooms 2A and 2B, containing redundant electrical equipment, are independent of each other.4. Room temperature is indicated on Local Panel L-362.5. Any two of the three safety-related fans can provide adequate air to ventilate the room.1. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped. In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 14 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-151WATTS BAR WBNP-87 16 172-FAN-30-246J Exhaust Fan 2B4-B.

(Non-safety)2-FCO-30-246A and -246BIntake DampersExhausts air from 480 V Transformer Room

2BPermits flow of air supply from air intake to 480 V Transformer Room 2B.Spuriously runs.Spuriously closes; Fails to open.

Control signal failure; Temperature control sensing failure; Hot short in control

wiring.Mechanical failure; Auto-open signal failure; Hot short in

control wiring.Indicating lights on MCC for fan motor running.MCR indicating lights (2-ZS-30-246A and -246B).None.See Remark

1. 2.Loss of redundancy in intake air supply.100% redundant intake damper can supply sufficient air.None.See Remark #2.None.See Remark #3.1. This fan is electrically separate from the 1E circuit for the three safety-related fans.2. In the event that the room temperature drops below its minimum temperature, which is controlled by a thermostat, all fans are stopped.

In the event of spurious operation of one fan, the ambient room temperature will not cause the transformers to operate at conditions below

their design limit. 1. Both intake dampers are interlocked to automatically open when any of the four (4) exhaust fans are either automatically or manually started.2. Dampers fail open upon loss of control air or Train B power to 2-FSV-30-246A and -246B.3. 2-FSV-30-246A and -246B and the air pressure regulators, 1-PREG-30-246A and -246B, that regulate the air pressure to these FSVs are Q-Listed as Quality- related, not safety-related.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 15 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-152WATTS BAR WBNP-87Failure of the air regulators either by blockage or sticking full open will not impact the capability of the damper to open.Failure of the solenoid to de-energize to close the damper is included in the mechanical failure mode of the damper.The nonsafety-related solenoid is properly isolated in the 1E circuit. Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 16 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-153WATTS BAR WBNP-87182-FCO-30-250A and -250BIntake Dampers.Permits flow of air supply from air intake to 480V Transformer Room 2A.Spuriously closes: Fails to open.Mechanical failure; Auto-open signal failure; Hot short in

control wiring.MCR indicating lights (2-ZS-30-250A and -250B). Loss of redundancy in intake air supply.100% redundant intake damper can supply sufficient air.None.See Remark #3.1. Both intake dampers are interlocked to automatically open when any of the three (3) exhaust fans are either automatically or manually started.2. Dampers fail open upon loss of control air or Train A power to 1-FSV-30-250A and -250B.3. 1-FSV-30-250A and -250B and the air pressure regulators, 1-PREG-30-250A and -

250B, that regulate the air pressure to these FSVs are Q-Listed as Quality- related, not safety-related.Failure of the air regulators either by blockage or sticking full open will not impact the capability of the damper to open.Failure of the solenoid to de-energize to closed the damper is included in the mechanical failure mode of the damper.The nonsafety-related solenoid is properly isolated in the 1E circuit.Table 9.4-6 Failure Modes and Effects Analysis for Active Failures Subsystem: 480 V Shutdown Transformer Room Ventilation (Sheet 17 of 17)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODEPOTENTIALCAUSEMETHOD OFDETECTION EFFECT ON SYSTEM EFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-154WATTS BAR WBNP-87Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 1 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS1ATornado Damper0-FCO-31-32Isolation of Train A supply air normal (west) intake during tornado

eventFails to close during tornado event-Mechanical failure

-Electrical

failureStatus indication in Control Room via Limit Switch ZS-31-32None. (See remarks.)NoneRedundant Train B Tornado Damper O-FCO-31-33 powered from Train B and installed in series accomplished isolation during tornado event1BTornado Damper0-FCO-31-34Isolation of Train B supply air normal (west) intake during tornado

eventFails to close during tornado event-Mechanical failure

-Electrical

failureStatus indication in Control Room on Panel 1-M-9 via Limit Switch ZS-31-34None. (See remarks.)NoneRedundant Train B Tornado Damper O-FCO-31-35 powered from Train B and installed in series accomplished isolation during tornado event2ATornado Damper0-FCO-31-33Isolation of Train A supply air normal (west) intake during tornado

eventFails to close during tornado event-Mechanical failure

-Electrical

failureStatus indication in Control Room on Panel 1-M-9 via Limit Switch ZS-31-33None. (See remarks.)NoneRedundant Train A Tornado Damper O-FCO-31-32 powered from Train A and installed in series accomplished isolation during tornado event2BTornado Damper0-FCO-31-35Isolation of Train B supply air normal (west) intake during tornado

eventFails to close during tornado event-Mechanical failure

-Electrical

failureStatus indication in Control Room on Panel 1-M-9 via Limit Switch ZS-31-35None. (See remarks)NoneRedundant Train A Tornado Damper O-FCO-31-33 powered from Train A and installed in series accomplished isolation during tornado event3AIsolation Damper0-FCO-31-1See remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis isolation damper all controls are disconnected and the damper is locked in fully open position3BIsolation Damper0-FCO-31-2See remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis isolation damper all controls are disconnected and the damper is locked in fully open position4AFlow Control Damper 0-FCO-31-1ASee remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis flow control damper all controls are disconnected and the damper is locked in fully open

position AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-155WATTS BAR WBNP-874BFlow Control Damper 0-FCO-31-2ASee remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis flow control damper all controls are disconnected and the damper is locked in fully open

position 5APressurization Fan A-ASee remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis pressurization fan is disconnected and abandoned in place5BPressurization Fan B-BSee remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis pressurization fan is disconnected and abandoned in place6ABackdraft Damper0-31-2097See remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis backdraft damper is locked in open position6BBackdraft Damper0-31-2098See remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis backdraft damper is locked in open position7Isolation Valve0-FCV-31-3Isolates Main Control Room Habitability Zone (MCRHZ) from outside makeup air supplyOpen (during CRI)-Mechanical failure

-Control failureStatus indication in Control Room Panel 1-M-9 via Limit Switch ZS-31-3NoneSee RemarksNoneRedundant safety Train B Isolation Valve installed in series will close to provide isolation8Isolation Valve0-FCV-31-4Isolates MCRHZ from outside makeup air supplyOpen (during CRI)-Mechanical failure

-Control failureStatus indication in Control Room Panel 1-M-9 via Limit Switch ZS-31-4None(See Remarks)NoneRedundant safety Train A Isolation Valve installed in series will close to provide isolationTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 2 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-156WATTS BAR WBNP-879Fire Damper0-ISD-31-3934To maintain fire barrier integrity between Mechanical Equip.

Room Floor El 755.0' and Spreading Room El. 729.0' during fireOpen during fire (see remarksFusible link failure (see remarks)-Mechanical-Mechanical (fusible link failure)See remarks Surveillance and Maintenance (see remarks)See remarksNone (see remarks)See remarksNone (see remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link is to be installed10Isolation Valve0-FCV-31-37See remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis valve controls are disconnected11Isolation Valve0-FCV-31-36See remarksSee remarksSee remarksSee remarksSee remarksSee remarksThis valve controls are disconnected12Fire Damper0-ISD-31-3938To maintain fire barrier integrity between Spreading Room El.

729.0' & Unit 1 Aux.

Instr. Room El. 708.0' during fireOpen during fire (see remarks)Fusible link failure (see remarks)-Mechanical-Mechanical (fusible link failure)See remarksNone. See remarksSee remarksNone. (See remarks)See remarksNone (see remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link is to be installed12A0-XS-31-179To detect smoke in the Control Building Pressurization Fan IntakeSpurious actuation of smoke detector-Electrical failure SurveillanceAnnunciation in MCR of CRI signalSee remarksNone (see remarks)Upon activation of air intake smoke detectors a CRI is initiated.

Operator action will determine if the smoke detector activation was spurious and if so return system to normal operationTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 3 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-157WATTS BAR WBNP-8712B0-XS-31-183To detect smoke in the Control Building Pressurization Fan IntakeSpurious actuation of smoke detector-Electrical failure SurveillanceAnnunciation in MCR of CRI signalSee remarksNone (see remarks)Upon activation of air intake smoke detectors a CRI is initiated.

Operator action will determine if the smoke detector activation was spurious and if so return system to normal operation13Fire Damper0-ISD-31-3931Maintain fire barrier between Control Bldg.

roof and Main Control Room in case of fire on the roof at the east emergency air intakeOpen during fire (see remarksClosed during CRISee remarks-Mechanical (fusible link)See remarksLoss of Control Room Press. Diff. Common Alarm through switches 0-PDS-31-1B, -2B, 3B & -

4B in Control RoomSee remarksLoss of Control Room pressurization due to loss of emergency press. fan air flow path through east emerg. air intakeSee remarks NoneSingle failures of HVAC system need not to be postulated as being concurrent with fireControl Bldg. Press. Diff. switches 0-PDS-31-1A, 2A, -3A & -4A start redundant Control Bldg.

emergency press. fan A-A with its outdoor air intake (west)14Tornado Damper0-FCO-31-21Isolation of emergency outdoor air intake for Emergency Press Fan B-B during Tornado EventFails to close during Tornado

Event-Mechanical failure

-Electrical

failureStatus indication via Limit Switch ZS-31-21None. See remarksNoneRedundant Train B Tornado Damper 0-FCO-31-22 powered from Train B and installed in series accomplishes isolation during Tornado Event15Tornado Damper0-FCO-31-22Isolation of east emergency outdoor air intake for Emergency Press Fan B-B during Tornado EventFails to close during Tornado

Event-Mechanical failure

-Electrical

failureStatus indication via Limit Switch ZS-31-22None. See remarksNoneRedundant Train A Tornado Damper 0-FCO-31-21 powered from Train A and installed in series accomplishes isolation during Tornado EventTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 4 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-158WATTS BAR WBNP-8716AIsolation Damper0-FCV-31-6Isolates Emergency Pressurization Fan A-A from normal outdoor air intake (west) supply air Closes during Emerg. Press. fan A-A operationFails to close during standby operation-Mechanical failure.

-Electrical

& aux.

control air

failure-Mechanical failureThe Loss of Control Room Press. Diff.

Common Alarm through switches 0-PDIS-31-1A, -

2A, -3A & -4A and status indication in Control Room on Panel 1-M-9 via Limit Switch ZS-31-6The Loss of Control Room Press. Diff.

Common Alarm through

switches 0-PDS-31-1A, -

2A, 3A & -4A and status indication in Control Room on Panel 1-M-9 via Limit Switch ZS-31-6Loss of air flow through Emerg.

Press. Fan A-AMay reduce the outside air supply and cause loss of pressurizationNone (see remarks)None (see remarks)Redundant Train B emerg. press. Fan B-B starts upon signal from the Control Room Press. Diff.

switches 0-PDI-31-1B, -2B, -3B and -4BSame as aboveTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 5 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-159WATTS BAR WBNP-8716BIsolation Damper0-FCV-31-5Isolates Emerg. Pressurization Fan B-B from emerg. outdoor air intake (east) supply air Closes during Emerg. Press. Fan B-B operationFails to close during standby operation-Mechanical failure.

-Electrical

& aux.

control air

failure-Mechanical failureThe Loss of Control Room Press. Diff.

Common Alarm through

switches 0-PDS-31-1B, -

2B, -3B & -4B and status indication in Control Room on Panel 1-M-9 via Limit Switch ZS-31-5The Loss of Control Room Press. Diff.

Common Alarm through

switches 0-PDS-31-1B, -

2B, 3B & -4B and status indication in Control Room via Limit Switch ZS-31-5Loss of air flow through Emerg.

Press. Fan B-BMay reduce the outside air supply and cause loss of pressurizationNone (see remarks)None (see remarks)Redundant Train A emerg. press. Fan A-A starts upon signal from the Control Room Press. Diff.

switches 0-PDI-31-1A, -2A, -3A and -4ASame as above17AControl Bldg. Emergency Air

Press. Fan A-APressurize Main Control Room Habitability Zone (MCRHZ) during CRI-Fail to start-Stops-Mechanical failure

-Electric failure

-Control failureThe Loss of Control Room Press. Diff.

Common Alarm through Switches 0-PDS-31-1A, -

2A, 3A & -4A in Control

RoomLoss of Control Room pressurization due to loss of air flow path through Train ANoneThe Control Room Press. Diff.

Switches 0-PDS-31-1B, -2B, -3B and -4B start the Control Bldg.

redundant Train B Emergency Air Press. Fan B-B17BControl Bldg.Emergency Air

Press. Fan B-BPressurize Main Control Room Habitability Zone (MCRHZ) during CRI-Fails to start

-Stops-Mechanical failure

-Electrical

failure

-Control failureThe Loss of Control Room Press. Diff.

Common Alarm through

switches 0-PDS-31-1B, -

2B, 3B and 4B in Control

RoomLoss of Control Room pressurization due to loss of air flow path through Train BNoneThe Control Room Press. Diff.

Switches 0-PDS-31-1A, -2B, -3A and -4A start the Control Bldg.

redundant Train A Emergency Air Press. Fan A-ATable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 6 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-160WATTS BAR WBNP-8718AFire Damper 0-ISD-31-4608To prevent a fire or smoke from entering the Control Bldg.

Emergency Air Cleanup Unit A-AOpen during fireClosed during CRI-Mechanical failure-Mechanical failure (fusible link)See remarksLoss of Control Room Press. Diff. Common Alarm through Switches 0-PDS-31-1A, -2A, 3A & -

4A in Control RoomSee remarksLoss of air flow through the Train A Air Cleanup Unit and loss of

MCR pressurizationSee remarks NoneSingle failures of HVAC system need not to be postulated as being concurrent with fireThe Control Room Press. Diff.

Switches 0-PDS-31-1B, -2B, -3Band -4B start redundant Train B Air Cleanup Unit with its Fan B-B.

(Existing dual fusible link is left in place)18BFire Damper 0-ISD-31-3958To prevent a fire or smoke from entering the Control Bldg.

Emergency Air Cleanup Unit B-BOpen during fireClosed during CRI-Mechanical failure-Mechanical failure (fusible link)See remarksLoss of Control Room Press. Diff. Common Alarm through Switches 0-PDS-31-1B, -2B, -3B &

-4BSee remarksLoss of air flow through the Train B Air Cleanup Unit and loss of

MCR pressurizationSee remarks NoneSingle failures of HVAC system need not to be postulated as being concurrent with fireThe Control Room Press. Diff.

Switches 0-PDS-31-1A, -2A, -3Aand -4A start redundant Train A Air Cleanup Unit with its Fan A-A.

(Existing dual fusible link is left in place)Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 7 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-161WATTS BAR WBNP-8719AIsolation DamperFCO-31-8Isolation of Emergency Air Cleanup Unit A-AClosed during operation of Emergency Air Cleanup Unit Fan

A-AOpen during standby-Mechanical failure

-Electrical

& Aux Control Air Failure-Mechanical failure

-Electrical

failureIn Control Room Loss of Control Room Press. Diff. Common Alarm through

Switches 0-PDS-31-1A,

-2A, -3A and -4A and Damper Status Indication via Limit Switch ZS-31-8Damper Status Indication via Limit Switch ZS-31-8Loss of air flow path for Emergency Air.

Cleanup Unit Fan A-A and loss of MCR pressurizationAir flow path is open through Air Cleanup Unit during standbyNone. (See remarks)None. (See remarks)The Control Room Press. Diff.

Switches 0-PDS-31-1B, -2B, -3B and -4B start redundant Train B Fan B-B with its emerg. air cleanup unitPressurization Air is still adequately filtered and Control Room Pressurization is still maintained19BIsolation DamperFCO-31-7Isolation of Emergency Air Cleanup Unit B-BClosed during operation of Emergency Air Cleanup Unit Fan

B-BOpen during standby-Mechanical failure.

-Electrical

& Aux Control Air Failure-Mechanical failure

-Electrical

failureIn Control Room Loss of Control Room Press. Diff. Common Alarm through

Switches 0-PDS-31-1B,

-2B, -3B and -4B and Damper Status Indication via Limit Switch ZS-31-7Damper Status Indication via Limit Switch ZS-31-7Loss of air flow path for Emergency Air.

Cleanup Unit Fan B-B and loss of MCR pressurizationAir flow path is open through Air Cleanup Unit during standbyNone (See remarks)None (See remarks)The Control Room Press. Diff.

Switches 0-PDS-31-1A, -2A, -3A and -4A start the Control Bldg.

redundant Train A Fan A-A with its emerg. air cleanup unitPressurization Air is still adequately filtered and Control Room Pressurization is still maintainedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 8 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-162WATTS BAR WBNP-8720AControl Bldg. Emergency Air Cleanup Unit A-A Filters potentially contaminated outside air prior to MCRHZ

during CRIBlocked-Dirty filtersLoss of Control Room Press. Diff. common Alarm through Switches 0-PDS-31-1A, -2A, -3A, and -4AReduced or no air flow through emergency air cleanup unit and loss of

MCR pressurization None. (See Remarks)Control Room Press. Diff.

Switches 0-PDS-31-1B, -2B, -3B and

-4B start redundant Train B Emerg. Air Cleanup Unit Fan B-B20BControl Bldg. Emergency Air Cleanup Unit B-B Filters potentially contaminated outside air prior to introducing it into MCRHZ during CRIBlocked-Dirty filtersLoss of Control Room Press. Diff. common Alarm through Switches 0-PDS-31-1B, -2B, -3B, and

-4BReduced or no air flow through emergency air cleanup unit and loss of

MCR pressurizationNone. (See remarks)Control Room Press. Diff.

Switches 0-PDS-31-1A, -2A, -3A and

-4A start redundant Train A Emerg. Air Cleanup Unit Fan A-A21AControl Bldg. Emergency Air Cleanup Unit A-ADraws recirc. and outside air through air cleanup unit during CRI-Fails to start-Stops-Mechanical failure

-Electrical

failureLoss of Control Room Press. Diff. common Alarm through Switches 0-PDS-31-1A, -2A, -3A, and

-4ALoss of air flow path through Train A and loss of MCR pressurizationNone Control Room Press. Diff.

Switches 0-PDS-31-1B, -2B, -3B and

-4B start redundant Train B Emerg. Air Cleanup Unit Fan B-B21BControl Bldg. Emergency Air Cleanup Unit B-BDraws recirc. and outside air through air cleanup unit during CRI-Fails to start-Stops-Mechanical failure

-Electrical

failureLoss of Control Room Press. Diff. common Alarm through Switches 0-PDS-31-1B, -2B, -3B, and

-4BLoss of air flow path through Train B and loss of MCR pressurizationNoneControl Room Press. Diff.

Switches 0-PDS-31-1A, -2A, -3A and

-4A start redundant Train A Emerg. Air Cleanup Unit Fan A-ATable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 9 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-163WATTS BAR WBNP-8722AFire Damper0-ISD-31-3935Fire barrier at the Control Bldg. Emerg. Air Cleanup Unit (ACU)

Fan A-A discharge.

(Prevents fire spreading downstream of the Fan A-A)Open during fireClosed during CRI-Mechanical failure-Mechanical failure.

(fusible link)See remarksThe Loss of Control Room Press. Diff. Common Alarm through Switches 0-PDS-31-1A, -2A, -3A, and

-4ASee remarksLoss of air flow through the Train A ACU and loss of

MCR pressurizationSee remarksNone. (See remarks)Single failure of HVAC system need not to be postulated as being concurrent with fireThe Control Room Press. Diff.

Switches 0-PDS-31-1B, -2B, -3B, and -4B start Redundant Train B Emerg. Air Cleanup Unit with its Fan B-B22BFire Damper0-ISD-31-3936Fire barrier at the Control Bldg. Emerg. Air Cleanup Unit (ACU)

Fan B-B discharge.

(Prevents fire spreading downstream of the Fan B-B)Open during fireClosed during CRI-Mechanical failure-Mechanical failure (fusible link)See remarksThe Loss of Control Room Press. Diff. Common Alarm through Switches 0-PDS-31-1B, -2B,

-3B, and -4bSee remarksLoss of air flow through the Train B ACU and loss of

MCR pressurizationSee remarksNone. (See remarks)Single failure of HVAC system need not to be postulated as being concurrent with fireThe Control Room Press. Diff. Switches 0-PDS-31-1A, -2A, -3A, and -4B start Redundant Train A Emerg. Air Cleanup Unit with its Fan A-

ATable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 10 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-164WATTS BAR WBNP-8723Fire Damper 0-XFD-31-75Fire barrier between Conference Room and Technical Support CenterOpen during fireClose during other modes of operation-Mechanical failure

-Electrical

failure-ETL Link failureSee remarksSurveillance and MaintenanceSee remarksMay result in overheating of Technical Support CenterSee remarksNone (see remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireThese areas are not essential for safe shutdown24Fire Damper 0-XFD-31-83Fire barrier between Relay Room and Main Control RoomOpen during fireClose during other modes of operation-Mechanical failure

-Electrical

failure-ETL Link failure See RemarksSurveillance and MaintenanceSee RemarksNone. (See remarks)See remarksNone. (See remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireThe transfer opening with fire Damper 0-XFD-31-153 provides alternate return air flow path25Fire Damper0-XFD-31-153Fire barrier between Relay Room and Main Control RoomOpen during fireClose during other modes of operation-Mechanical failure

-Electrical

failure-ETL Link failure See RemarksSurveillance and MaintenanceSee RemarksNone. (See remarks)See remarksNone. (See remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.This fire damper has two ETL Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 11 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-165WATTS BAR WBNP-8726 Fire Damper0-XFD-31-99To prevent smoke or fire from the Shift Eng Office and Conference Room from being introduced into the air recirculation system.Open during fire.Closed during other modes of operation.-Mechanical failure

-Electrical

failure-ETL link failure.

See remarks.Surveillance and Maintenance. See remarks.May result in overheating of Shift Eng Office and Conference Room.See remarks.None. (See remarks).Single failure of HVAC system need not to be postulated as being concurrent with fire.These areas are not essential for safe shutdown.27AIsolation Damper 0-FCO-31-12Isolate Main Control Room (MCR) Air Handling Unit (AHU) A-A during standby or maintenance.Close during Air Handling Unit A-A operation.Open during standby operation.-Mechanical failure

-Electrical

failure-Mechanical failure

-Electrical

&

-Auxiliary

Control Air

FailureAnnunciation in MCR of MCR Air Conditioning Safety train switchover, via Switches O-PDS 161, O-FS-31-84 & O-TS-31-88BLoss of air flow path through

AHU A-A.None (see remarks).None (see remarks).Redundant AHU B-B starts on low air flow signal from AHU A-A via Flow Switch FS-31-84.Backdraft Damper 0-31-2105 prevents backflow.Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 12 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-166WATTS BAR WBNP-8727BIsolation Damper 0-FCO-31-11Isolate Main Control Room (MCR) Air Handling Unit (AHU) B-B during standby or maintenance.Close during Air Handling Unit B-B operation.Open during standby operation.-Mechanical failure

-Electrical

failure-Mechanical failure

-Electrical

&

-Auxiliary

Control Air

FailureAnnunciation in MCR of MCR Air Conditioning Safety train switchover, via Switches O-PDS 186, O-FS-31-94 & O-TS-31-89BLoss of air flow path through

AHU B-B.None (see remarks).None (see remarks).None (see remarks).Redundant AHU A-A starts on low air flow signal from AHU A-A via Flow Switch FS-31-94.Backdraft Damper 0-31-2104 prevents backflow.28AModulating Damper 0-FCO-31-82Modulates the air flow through cooling coil and bypass to maintain the temperature at thermostat O-TE-31-82 (Ref. 5.18)

[1] setpoint.Closed (coil section).Spurious modulation.-Mechanical failure

-Control Air

failure-Control failureAnnunciation in MCR of MCR Air Conditioning Safety train switchover, via Switches O-PDS 161, O-FS-31-84 & O-TS-31-88BAir bypasses the cooling coil and increase of space temperature.Space temperature is not maintained at thermostat setting.None (see remarks).None (see remarks).Temp. Switch TS-31-88B start the redundant AHU B-B upon high return temp.Temp. Switch TS-31-88B start the redundant AHU B-B upon high return temp.Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 13 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-167WATTS BAR WBNP-8728BModulating Damper 0-FC0-31-91Modulates the air flow through cooling coil and bypass to maintain the temperature at thermostat O-TE-31-91 (Ref. 5.18)

[1] setpoint.Closed (coil section).Spurious modulation.-Mechanical failure

-Control Air

failure-Control failureAnnunciation in MCR of MCR Air Conditioning Safety train switchover, via Switches O-PDS 186, O-FS-31-94 & O-TS-31-89BAir bypasses the cooling coil and increase of space temperature.Space temperature is not maintained at thermostat setting.None (see remarks).None (see remarks).Temp. Switch TS-31-89B start the redundant AHU A-A upon high return temp.Temp. Switch TS-31-89B start the redundant AHU A-A upon high return temp.Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 14 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-168WATTS BAR WBNP-8729AMain Control Room Air Handling Unit A-A-Filter-Cooling Coil-Humidifier-Fan Filters the airCools the supply air to maintain design temperature in the

MCRHZProvides moisture to maintain the design relative humidity in MCRHZ during normal operation modeCirculates the airClogged Cooling coil tube break or crack No humidificationHumidification Control Valve fails open-Fails to start

-StopsFails to stop or, starts-Accumulation of dirt-Mechanical failure-Steam Boiler failure

-Steam Control Valve closes

-Mechanical

failure

-Electrical

failure-Mechanical failure

-Electrical

failure-Mechanical failure

-Electrical

failureSurveillance (PDI-31-87) and Maintenance (Ref.

5.18)[1] and Annunciation in MCR Air Conditioning Safety Train Switchover via Switches O-PDIS 161, O-FS-31-84 & O-TS-31-88BAnnunciation in MCR Air conditioning Safety Train Switchover via Switches O-PDIS-31-161, O-FS-31-84 & O-TS-31-88BMoisture Indicator MI-31-176 on Panel L-629Moisture Indicator MI-31-176 on Panel L-529Annunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches O-PDIS 161, O-PS-31-84 & O-TS-31-88BReduced Air flow may result in rise of space temperatureTemperature increase in the

MCRHZDecrease of Relative HumidityNoneLoss of air flow through AHU A-

ANone (see remarks)

NoneNone (see remarks)

NoneNone (see remarks)None (see remarks)Surveillance (PDI-31-87) & Maintenance of filters in accordance with maintenance procedures. Either Temp. Switch 0-TS-31-88B or Flow Switch O-FS-31-84 starts redundant Air Handling Unit B-BRedundant AHU B-B starts upon signal from AHU A-A high temperature switch O-TS-31-88BMaintenance of the relative humidity is not required for safe shutdown of plantMCR moisture level will not exceed design requirementsRedundant AHU B-B starts upon signal from AHU A-A Air flow Switch FS-31-84When both AHU are operating the common ductwork static pressure does not exceed 6 inches W.G. safety-related duct design pressureTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 15 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-169WATTS BAR WBNP-87-Electrical failureAnnunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches O-PDIS 161, O-FS-31-84 & O-TS-31-88BIncreased pressure in duct29BMain Control Room Air Handling Unit B-B-Filter-Cooling Coil Filters the airCools the supply air to maintain design temperature in the

MCRHZClogged Cooling coil tube break or crack-Accumulation of dirt-Mechanical failure Surveillance (PDI-31-97) and Maintenance (Ref.

5.18)[1] and Annunciation in MCR Air Conditioning Safety Train Switchover via Switches O-PDIS 186, O-FS-31-94 & O-TS-31-89BAnnunciation in MCR Air conditioning Safety Train Switchover via Switches O-PDIS-31-186, O-FS-31-94 & O-TS-31-89BReduced Air flow may result in rise of space temperatureTemperature increase in the

MCRHZNone (see remarks)

NoneSurveillance (P DI-31-97) & Maintenance of filters in accordance with maintenance procedures. Either Temp. Switch O-FS-31-94 starts redundant Air Handling Unit A-ARedundant AHU A-A starts upon signal from AHU B-B high temperature switch O-TS-31-88BTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 16 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-170WATTS BAR WBNP-87-Humidifier-FanProvides moisture to maintain the design relative humidity in MCRHZ during normal operation modeCirculates the air No humidificationHumidification Control Valve fails open-Fails to start

-StopsFails to stop or, starts-Steam Boiler failure

-Steam Control Valve closes

-Mechanical

failure

-Electrical

failure-Mechanical failure

-Electrical

failure-Mechanical failure

-Electrical

failure-Electrical failureMoisture Indicator MI-31-201 on Panel L-530Moisture Indicator MI-31-201 on Panel L-530Annunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches O-PDIS 186, O-PS-31-94 & O-TS-31-89BAnnunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches O-PDIS 186, O-FS-31-94 & O-TS-31-89BDecrease of Relative HumidityNoneLoss of air flow through AHU A-

AIncreased pressure in ductNone (see remarks)

None None (see remarks)None (see remarks)Maintenance of the relative humidity is not required for safe shutdown of plantMCR moisture level will not exceed design requirementsRedundant AHU A-A starts upon signal from AHU B-B Air flow Switch FS-31-94When both AHU are operating the common ductwork static pressure does not exceed 6 inches W.G. safety-related duct design pressureTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 17 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-171WATTS BAR WBNP-8730ABackdraft Damper0-BKD-31-2105Prevent backflow from AHU B-B through AHU A-A when on standbyFails to openFails to close (AHU A-A on Standby)- Mechanical Failure- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover via Switches 0-PDIS-31-161, 0-FS-31-84, and O-TS-31-88BLoss of flow through AHU A-ANone (See Remarks)None (See Remarks)

NoneRedundant AHU B-B start upon signal from AHU A-A Air Flow Switch FS-31-84Isolation Damper 0-FCO-31-12 prevents the backflow30BBackdraft Damper 0-BKD-31-2104Prevent backflow from AHU A-A through AHU B-B when on standbyFails to openFails to Close (AHU B-B on Standby)- Mechanical Failure- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover via Switches O-PDIS-31-186, O-FS-31-94, and 0-TS-31-89BLoss of air flow through AHU B-BNone (See Remarks)None (See Remarks)

NoneRedundant AHU A-A starts upon signal from AHU B-B Air Flow Switch FS-31-94Isolation Damper 0-FCO-31-11 prevents the backflowTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 18 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-172WATTS BAR WBNP-8731Fire Damper0-XFD-31-98To prevent smoke spreading to Conference Room, Shift Eng. Office, Lockers, Toilet, and KitchenOpen during fireClose during other modes of operation- Mechanical Failure

- Electrical

Failure- ETL Link Failure See RemarksSurveillance and MaintenanceSee RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system used to be postulated as being concurrent with fireThis fire damper has two ETL links32Fire Damper 0-XFD-31-86Fire barrier between Relay Room and Main Control RoomOpen during fireClose during other modes of operation- Mechanical Failure

- Electrical

Failure- ETL Link Failure See RemarksSurveillance and MaintenanceSee RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system used to be postulated as being concurrent with fireThis fire damper has two ETL LinksTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 19 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-173WATTS BAR WBNP-8733Fire Damper0-ISD-31-4402Prevent fire spreading to Conference RoomOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksLoss of supply air to room See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireMaintenance of the room design temperature is not essential to the Control Building Safety Function34Fire Damper0-ISD-31-4404Prevent fire spreading to NRC OfficeOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksLoss of supply air to room See Remarks See RemarksSingle failures of HVAC system need not to be postulated as being concurrent with fireMaintenance of the room design temperature is not essential to the Control Building Safety Function35Fire Damper0-ISD-31-76Fire barrier to Technical Support Center (TSC)Open during fireClose during other modes for operation-Mechanical Failure-Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksLoss of supply air to the room See Remarks See RemarksSingle failures of HVAC system need not to be postulated as being concurrent with fire.Maintenance of the room design temperature is not essential to the Control Building Safety Function36AMCR Water Chiller A-ACooling of Chilled Water-Fails to start

-Stops-Mechanical Failure

-Electrical

FailureAnnuniciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches 0-PDIS 161, 0-FS-31-84 & 0-TS-31-88BIncrease in chilled water temperature NoneRedundant MCR Air Conditioning Train B is started by any of Switches 0-PDIS-31-161, 0-FS-31-84 & 0-TS-31-88BTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 20 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-174WATTS BAR WBNP-8736BMCR Water Chiller B-BCooling of Chilled Water- Fails to start- Stops- Mechanical Failure

- Electrical

FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover via Switches 0-PDIS-31-186, 0-FS 94 and 0-TS-31-89BIncrease in chilled water temperature NoneRedundant MCR Air Conditioning Train A is started by any of Switches 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-88B37AMCR Chilled Water Circulation

Pump A-ACirculate the chilled water- Fails to start- StopsLeakage through seals- Mechanical Failure

- Electrical

Failure- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover via Switch 0-PDIS-31-161Annunciation in MCR of MCR Air Conditioning Safety Train switchover

via Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88BLoss chilled water flowDecrease of water content in the system None NoneRedundant MCR Air Conditioning Train B is started by any of Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88BRedundant MCR Air Conditioning Train B is started by any of Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88BTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 21 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-175WATTS BAR WBNP-8737BMCR Water Chiller B-BCirculate the chilled water- Fails to start- StopsLeakage through seals- Mechanical Failure

- Electrical

Failure- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover via Switch 0-PDIS-31-186Annunciation in MCR of MCR Air Conditioning Safety Train switchover

via Switches 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-89BLoss of chilled water flowDecrease of water content in the system None NoneRedundant MCR Air Conditioning Train A is started by any of Switches 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-89BRedundant MCR Air Conditioning Train A is started by any of Switches 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-89B38ACheck Valve 0-CKV-31-2193Prevents reverse flowStuck closedStuck open- Mechanical Failure- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover

via Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88BLoss of chilled water flowNone None NoneRedundant MCR Air Conditioning Train B is started by any of Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88BThe subsystem has only one pump. Check valve is preventing backflow during maintenanceTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 22 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-176WATTS BAR WBNP-8738BCheck Valve 0-CKV-31-2235Prevents reverse flowStuck closedStuck open- Mechanical Failure- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches 0-PDIS-31-186, O-FS-31-94, and 0-TS-31-89BLoss of chilled water flowNone (See Remarks)None NoneRedundant MCR Air Conditioning Train B is started by any of Switches 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-89BThe subsystem has only one pump. Check valve is preventing backflow during maintenance39Chilled Water PipingProvide chilled water system flow pathPipe break or crack- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover

via Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88B for Train A and 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-89B for Train B.Decrease of water content in the system None NoneRedundant MCR air conditioning subsystems are started by any of the associated switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88B for Train A and 0-PDIS-31-186, 0-FS-31-96, and 0-TS-31-89B for Train B40Chilled Water System Manual Shut-off ValvesProvides shut-offs- Leakage- Mechanical FailureAnnunciation in MCR of MCR Air Conditioning Safety Train switchover

via Switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88B for Train A and 0-PDIS-31-186, 0-FS-31-94, and 0-TS-31-89B for Train B.Decrease of water content in the system NoneRedundant MCR air conditioning subsystems are started by any of the associated switches 0-PDIS-31-161, 0-FS-31-84, and 0-TS-31-88B for Train A and 0-PDIS-31-186, 0-FS-31-96, and 0-TS-31-89B for Train BTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 23 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-177WATTS BAR WBNP-8741Fire Damper 0-ISD-31-3978Fire barrier between Central Alarm Station Room and Communications RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link is installed42Fire Damper 0-ISD-31-2037Fire barrier between Communications Room and Mechanical Equipment Room 692.0-C10Open during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceNone (See Remarks)None (See Remarks)None (See Remarks)None (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link to be installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 24 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-178WATTS BAR WBNP-8743Fire Dampers (2) 0-ISD-31-2038 and 0-ISD-31-3951Fire barrier between Communication Room and Mechanical Equipment Room 692.0-C10 and Communication Room and corridor, respectivelyOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link is installed44Fire Damper (2) 0-ISD-31-4617 and 0-ISD-31-3941Fire barrier between corridor and Mechanical Equipment Room 692.0-C2Open during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksNone (See Remarks)See Remarks See RemarksSingle failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link to be installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 25 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-179WATTS BAR WBNP-8745Fire Damper 2-ISD-31-2058Fire barrier and isolation between Unit 2 Auxiliary Instrument Room and Computer RoomOpen during fireClosed during other modes of operation- Mechanical Failure

- Electrical

Failure- Fusible Link Failure See RemarksSurveillance and MaintenanceSee RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire. See Item 69B for CO 2 system spurious actuationAdditional independent fusible link is installed46Fire Damper 0-ISD-31-3968Fire barrier between Computer Room and Unit 1 Auxiliary Instrument RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link FailureSee Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireFire damper has two independent fusible links installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 26 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-180WATTS BAR WBNP-8747Fire Damper (2) 0-ISD-31-3957Fire barrier and isolation between Computer Room and Unit 1 Auxiliary Instrument RoomOpen during fireClosed during other modes of operation- Mechanical Failure

- Electrical

Failure- Fusible Link FailureSee Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Same as above. See Item 69B for CO 2 system spurious activation.Additional independent fusible link to be installed48Fire Dampers (3) 1-ISD-31-3958, 1-ISD-31-3959, and 1-ISD-31-3961Isolation of the Unit 1 Auxiliary Instrument RoomOpen during fireClosed during other modes of operation- Mechanical Failure

- Electrical

Failure- Fusible Link FailureSee RemarksSee Remarks None (See Remarks)See RemarksNone (See Remarks)Same as above. See Item 69B for CO 2 system spurious actuationAdditional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 27 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-181WATTS BAR WBNP-8749Fire Damper 0-ISD-31-4297Prevent spreading of fireOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link FailureSee Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link is installed50Backdraft Damper 0-BKD-31-2086See RemarksSee RemarksSee RemarksSee RemarksSee RemarksSee RemarksThis backdraft damper is not required since the air flow can be controlled by Bolancing Damper 0-31-2087 and is locked in open positionTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 28 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-182WATTS BAR WBNP-8751Fire Damper 0-ISD-31-3971To maintain fire barrier integrity between Unit 1 Auxiliary Instrument Room Elev. 708.0 and Mechanical Equipment Room 692.0-C2, Elev. 692.0Open during fire (See Remarks)Fusible link failure (See Remarks)- Mechanical Failure Mechanical (fusible link

failure)See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireThis fire damper has two independent fusible linksTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 29 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-183WATTS BAR WBNP-8752AIsolation Damper 0-FCO-31-30Isolate Electrical Board Room AHUs A-A and B-B while on standbyClose during AHUs A-A and B-A operationOpen when AHUs are on standby- Mechanical Failure

- Electrical

Failure- Mechanical Failure

- Electrical and Auxiliary

Control Air

FailureAnnunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and -123, and 0-TS-31-150BLoss of air flow path through AHUs A-A and

B-A None (See Remarks)NoneNone (See Remarks)Redundant Train B AHUs C-B and D-B start on low air flow signal from AHUs A-A and B-A Air Flow Switches FS-31-117 or FS-31-123Backdraft dampers 0-31-2001A and 0-31-2001B prevents backflowTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 30 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-184WATTS BAR WBNP-8752BIsolation Damper 0-FCO-31-31Isolate Electrical Board Room AHUs C-B and D-B while on standbyClose during AHUs C-B and D-B operationOpen when AHUs are on standby- Mechanical Failure

- Electrical

Failure- Mechanical Failure

- Electrical and Auxiliary

Control Air

FailureAnnunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches 0-PDIS-31-241, 0-FS-31-126 and -154, and 0-TS-31-157BLoss of air flow path through AHUs C-B and

D-B None (See Remarks)NoneNone (See Remarks)Redundant Train A AHUs A-A and B-A start on low air flow signal from AHUs C-B and D-B Air Flow Switches FS-31-126 or FS-31-154Backdraft Dampers 0-31-3972 and 0-31-3973 prevents backflow53AModulatingDampers (2) 0-FCO-31-335 &

0-FCO-31-336Modulates the air flow through cooling coil and bypass of AHU's A-A &

B-A to maintain the temperature at thermostat setpointOpenSpurious modulation- Mechanical Failure

- Control Air

Failure- Control FailureAnnunciation in MCR of MCR Air Conditioning Safety Train

Switchover

[1]Air bypasses the cooling coil and results in increase of space temperatureSpace is not maintained at set temperatureNone (See Remarks)None (See Remarks)Temperature Switch TS-31-150B starts the redundant AHUs upon Temp. Element TE-31-150B sensing high return air temperatureSame as aboveTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 31 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-185WATTS BAR WBNP-8753BModulating Dampers (2) 0-FCO-31-337 and 0-FCO-31-338Modulates air flow through cooling coil and bypasses of AHUs C-B and D-B to maintain the temperature at thermostat setpointOpenSpurious modulation- Mechanical Failure

- Control Air

Failure- Control FailureAnnunciation in MCR of MCR Air Conditioning Safety Train Switchover via Switches 0-PDIS-31-241, 0-FS-31-126 and -154, and 0-TS-31-157BAir bypasses the cooling coil and results in increase of space temperatureSpace is not maintained at set temperatureNone (See Remarks)None (See Remarks)Temperature Switch TS-31-157B starts the redundant AHUs upon Temp. Element TE-31-157B sensing high return air temperatureSame as aboveTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 32 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-186WATTS BAR WBNP-8754AElectrical Board Rooms (EBR) Air Handling Units (AHU) A-A and

B-A- Filters- Cooling Coil- Humidifier- Fan Filters the airCools the supply airProvides moisture to maintain the design Relative Humidity in EBR spaces during normal operation modeCirculates the airCloggedCooling coil tube break or crackNo humidification- Fails to start

- Stops- Fails to stop or start Accumulation of dirt- Mechanical Failure- Steam Boiler Failure

- Steam Control Valve Closes

- Mechanical

Failure

- Electrical

Failure- Mechanical Failure

- Electrical

FailureElectrical Failure Surveillance PDI-31-121 (Reference 5.19)[1] and Maintenance and Annunciation in MCR of

EBR Air Conditioning Safety Train Switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and -123, and 0-TS-31-150BAnnunciation in MCR of EBR Air Conditioning Safety Train Switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and -123, and 0-TS-31-150BMoisture Indicator MI-31-231 on Local Panel L-523Annunciation in MCR of EBR Air Conditioning Safety Train Switchover via Switches O-PDIS-31-117 and -123 and 0-TS-31-150BReduced air flowTemperature increases in the EBR space None (See Remarks)Loss of air flow through AHU Increased pressure in ductNone (See Remarks)None (See Remarks)

NoneNone (See Remarks)None (See Remarks)Surveillance (PDI-31-120 and -121) and maintenance of filters in accordance with maintenance procedures. Either Temp. Switch 0-TS-31-150B of Flow Switches 0-FS-31-117 and -123 starts redundant AHUs C-B and D-BRedundant AHUs C-B and D-B starts upon signal from AHUs A-A and B-A High Temp Switch TS-31-150BMaintenance of the relative humidity is not required for safe shutdown of plantRedundant AHUs C-B and D-B starts upon signal from AHUs A-A or B-A Air Flow Switches FS-31-117 or FS-31-123When both AHUs are operating, the common ductwork static pressure does not exceed 6 inches W.G. safety-related duct design pressureTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 33 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-187WATTS BAR WBNP-87Annunciation in MCR of EBR Air

Conditioning Safety Train Switchover via Switches 0-PDIS-31-211, O-FS-31-117 and

-123, and 0-TS-31-150B55ABackdraft Dampers (2) 0-BKD-31-2001A and 0-BKD-31-2001BPrevent backflow from Train B AHUs through Train A air handling units when on standbyFails to openFails to close (AHUs A-A and B-A on standby)- Mechanical Failure- Mechanical FailureAnnunciation in MCR of EBR Air

Conditioning Safety Train Switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and 0-TS-31-150BLoss of air flow through AHUs

A-A and B-A None (See Remarks)None (See Remarks)

NoneRedundant AHUs C-B and D-B starts upon signal from AHUs A-A or B-A Air Flow Switches FS-31-117 and FS-31-123, respectivelyIsolation Damper 0-FCO-31-30 prevents the backflowTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 34 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-188WATTS BAR WBNP-8755BBackdraft Dampers (2) 0-BKD-31-3972 and 0-BKD-31-3973Prevent backflow from Train A AHUs through Train B air handling units when on standbyFails to openFails to close (AHUs C-B and D-B on standby)- Mechanical Failure- Mechanical FailureAnnunciation in MCR of EBR Air

Conditioning Safety Train Switchover via Switches 0-PDIS- 241, 0-FS-31-126 and

-154, and 0-TS-31-157BLoss of air flow through AHUs

A-A and B-A None (See Remarks)None (See Remarks)

NoneRedundant AHUs A-A and B-A starts upon signal from AHUs C-B or D-B Air Flow Switches FS-31-126 and FS-31-154, respectivelyIsolation Damper 0-FCO-31-31 prevents the backflow56Fire Damper 0-ISD-31-3942 Fire barrier between Mechanical Equipment Room 692.0-C2 and 250V Battery Room #1Open during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installed57Fire Damper 0-ISD-31-3943Fire barrier between 250V Battery Room #1 and 250V Battery Board Room #1Open during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and maintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 35 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-189WATTS BAR WBNP-8758Fire Damper 0-ISD-31-3944Fire barrier between 250V Battery Board Room #1 and 250V Battery Board Room #2Open during fireClosed during other modes of operation- Mechanical failure- Fusible Link Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installed59Fire Damper 0-ISD-31-3947 Fire barrier between 250V Battery Board Room #2 and 250V Battery Room #2Open during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See Remarks See RemarksSingle failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 36 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-190WATTS BAR WBNP-8760Fire Damper 0-ISD-31-3948Fire barrier between 250V Battery Room #2 and 24V and 48V Battery RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See RemarksNone (See Remarks)See Remarks None (See Remarks)See Remarks See RemarksSingle failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installed61Fire Damper 0-ISD-31-3949 Fire barrier between 24V and 48V Battery Room and 24V and 48V Battery Board and Charge RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See Remarks See RemarksSingle failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 37 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-191WATTS BAR WBNP-8762Fire Damper 0-ISD-31-3950Fire barrier between 24V and 48V Battery Board and Charge Room and Central Alarm Station RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See Remarks See RemarksSingle failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installed63Fire Dampers (2) 0-ISD-31-3976 and 0-ISD 3977Fire barrier between Central Alarm Station Room and Communication RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See Remarks See RemarksSingle failures of HVAC systems need not to be postulated as being concurrent with fireAdditional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 38 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-192WATTS BAR WBNP-8764Fire Damper 0-ISD-31-3970Fire barrier between Unit 1 Auxiliary Instrument Room and the Mechanical Equipment Room 692.0-C2Open during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC systems need not to be postulated as being concurrent with fireThis fire damper has two independent fusible links65Fire Damper 0-ISD-31-3969 Fire barrier between Unit 1 Auxiliary Instrument Room and Computer RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireFire damper has two independent fusible links installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 39 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-193WATTS BAR WBNP-8766Fire Damper 2-ISD-31-3955Fire barrier between Computer Rooms and Unit 2 Auxiliary Instrument RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Same as above. See Item 69B for CO 2 system spurious actuationAdditional independent fusible link is installed67Fire Damper 0-ISD-31-4296Prevents spreading fireOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and MaintenanceSee Remarks None (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireAdditional independent fusible link is installed68Fire Damper 0-ISD-31-3956 Fire barrier between Unit 1 Auxiliary Instrument Room and Computer RoomOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire. See Item 69B for CO 2 system spurious failureAdditional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 40 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-194WATTS BAR WBNP-8769AFire Damper 1-ISD-31-3960Provide isolation of Unit 1 Auxiliary Instrument Room during CO 2 fire extinguishingOpen during fire- Mechanical FailureSee RemarksSee RemarksSee RemarksSingle failures of HVAC system need not to be postulated as being concurrent with fire. See Item 69B for CO 2 system spurious failure. This fire damper has CO 2 actuator without fusible linkSee Item 69B for CO 2 system spurious failure69BFire Damper2-ISD-31-2058 2-ISD-31-3955 0-ISD-31-3956 0-ISD-31-3657 1-ISD-31-3958 1-ISD-31-3959 1-ISD-31-3960 1-ISD-31-3961Provide isolation of Unit #1 and Unit #2 Auxiliary Instrument Rooms and Computer Room during CO 2 fire extinguishing.Closed during a spurious actuation of the CO 2 system- Electrical FailureAnnunciation in MCR following a

CO 2 discharge Surveillance and MaintenanceLoss of cooling in Unit #1 and Unit #2 Auxiliary Instrument Rooms and Computer RoomNonePlant can be shut down from Auxiliary Control Room70AEBR Water Chiller A-ACooling of chilled water- Fails to start- Stops- Mechanical Failure- Electrical FailureAnnunciation in MCR of EBR Air

Conditioning Safety Train Switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and O-TS-31-150BIncrease in chilled water temperatureNoneRedundant EBR air conditioning subsystem is started by any of Switches 0-PDIS-31-211, 0-FS-31-117 and -123, and 0-TS-31-150BTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 41 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-195WATTS BAR WBNP-8770BEBR Water Chiller B-B Cooling of chilled water- Fails to start- Stops- Mechanical Failure- Electrical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDIS-31-241, 0-FS-31-126 and

-154, and 0-TS-31-157BIncrease in chilled water temperatureNoneRedundant EBR air conditioning subsystem is started by any of Switches 0-PDIS-31-241, 0-FS-31-126 and -156, and 0-TS-31-157B71AEBR Chilled Water Circ. Pump A-ACirculate the chilled water- Fails to start- StopsLeakage through seals- Mechanical Failure- Electrical Failure- Mechanical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switch 0-PDIS-31-211Annunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and 0-TS-31-150BLoss of chilled water flowDecrease of water content in the system None NoneRedundant EBR air conditioning Train B is started by any of Switches 0-PDIS-31-211, 0-FS-31-117 and -123, and 0-TS-31-150BSame as aboveTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 42 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-196WATTS BAR WBNP-8771BEBR Chilled Water Circ. Pump B-BCirculate the chilled water- Fails to start- StopsLeakage through seals- Mechanical Failure- Electrical Failure- Mechanical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switch 0-PDIS-31-241Annunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDIS-31-241, 0-FS-31-126 and

-154, and 0-TS 157BLoss of chilled water flowDecrease of water content in the system None NoneRedundant EBR air conditioning Train A is started by any of Switches 0-PDIS-31-241, 0-FS-31-126 and -154, and 0-TS-31-157BSame as above72ACheck Valve 0-CKV-31-2307Prevent reverse flowStuck closedStuck open- Mechanical Failure- Mechanical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and 0-TS-31-150BLoss of chilled water flow None None NoneRedundant EBR air conditioning Train B is started by any of Switches 0-PDIS-31-211, 0-FS-31-117 and -123, and 0-TS-31-150BThe subsystem has only one pump. Check valve prevents backflow during maintenanceTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 43 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-197WATTS BAR WBNP-8772BCheck Valve 0-CKV-31-2364Prevent reserve flowStuck closedStuck open- Mechanical Failure- Mechanical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDI 241, 0-PS-31-126 and -154 and 0-TS-31-157BDecrease of water content in the system None None NoneRedundant EBR air conditioning Train A is started by any of switches 0-PDIS-31-241, 0-FS-31-126 and -154, and 0-TS-31-157B.The subsystem has only one pump. Check valve prevents backflow during maintenance.73Chilled Water PipingProvide chilled water system flow pathPipe break or crack- Mechanical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and 0-TS-31-150B for Train A, and 0-FS-31-241, 0-FS-31-126 and

-154, and 0-TS-31-157B for Train B.Decrease of water content in the systemNoneRedundant EBR air conditioning subsystem is started by any of Switches 0-PDIS-31-177 and

-123, 0-TS-31-150B for Train A, and 0-PDIS-31-241, 0-FS-31-126 and -154, and 0-TS-31-157B for Train BTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 44 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-198WATTS BAR WBNP-8774Chilled Water System manual shut-off valvesProvide Shut-Offs- Leakage- Mechanical FailureAnnunciation in MCR of EBR air

conditioning safety train switchover via Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and 0-TS-31-150B for Train A, and 0-PDIS-31-241, 0-FS-31-126 and

-154, 0-TS-31-157B for Train BDecrease of water content in the systemNoneRedundant EBR Air Conditioning Subsystems are started by any of the associated Switches 0-PDIS-31-211, 0-FS-31-117 and

-123, and 0-TS-31-150B for Train A, and 0-PDIS-31-241, 0-FS-31-126 and -154, and 0-TS-31-157B for Train B75Fire Dampers (3) 0-ISD-31-2013 0-ISD-31-2018 0-ISD-31-2029Fire barrier between Battery Board Rooms and CorridorOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.76Fire Dampers (3)0-ISD-31-2010 0-ISD-31-2021 0-ISD-31-2028Fire barrier between Battery Rooms and CorridorOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 45 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-199WATTS BAR WBNP-8777Fire Damper 0-ISD-31-2024Fire barrier between 24V and 48V Battery Room and 250V Battery Room #2Open during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.78Fire Damper 0-ISD-31-2019Fire barrier between 250V Battery Room #2 and 250 Battery Board Room #2Open during fireClose during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.79Fire Damper 0-ISD-31-3945Fire barrier between 250V Battery Board Room #2 and 250V Battery Board Room #1Open during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 46 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-200WATTS BAR WBNP-8780Fire Damper 0-ISD-31-2012Fire barrier between 250V Battery Board Room #1 and 250V Battery Room #1Open during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.81Fire Damper 0-ISD-31-2007Fire barrier between Battery Room #1 and Mechanical Equipment Room 692.0-C2Open during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fire.Additional independent fusible link is installed.82ABattery Room Exhaust Fan A-ABattery rooms exhaust to prevent hydrogen buildup- Fails to start-Stops- Mechanical Failure- Electrical FailureAlarm in MCR via Airflow Switch 0-FS-31-402Loss of battery rooms exhaustNone (See Remarks)Redundant Battery Exhaust Fan B-B starts on Low Air Flow signal from Fan A-A Air FLow Switch 0-FS-31-40282BBattery Room Exhaust Fan B-BBattery rooms exhaust to prevent hydrogen buildup- Fails to start-Stops- Mechanical Failure- Electrical FailureAlarm in MCR via Airflow Switch 0-FS-31-401Loss of battery rooms exhaustNone (See Remarks)Redundant Battery Exhaust Fan A-A starts on Low Air Flow signal from Fan B-B Air Flow Switch 0-FS-31-401Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 47 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-201WATTS BAR WBNP-8783ABackdraft Damper 0-BKD-31-2163Prevents backflowFails to openFails to close- Mechanical Failure- Mechanical FailureAlarms in MCR via Airflow Switch 0-FS-31-402Loss of airflow path through Exhaust Fan

B-BNone (See Remarks)None (See Remarks)

NoneRedundant Battery Exhaust Fan B-B starts on Low Air Flow signal from Fan A-A Air Flow Switch 0-FS-31-402Isolation Damper 0-FCO-31-28 prevents backflow83BBackdraft Damper 0-BKD-31-2162Prevents backflowFails to openFails to close- Mechanical Failure- Mechanical FailureAlarms in MCR via Airflow Switch 0-FS-31-401Loss of airflow path through Exhaust Fan

B-BNone (See Remarks)None (See Remarks)

NoneRedundant Battery Exhaust Fan A-A starts on Low Air Flow signal from Fan B-B Air Flow Switch 0-FS-31-401Isolation Damper 0-FCO-31-29 prevents backflow84AIsolation Damper0-FC0-31-28Isolates Fan A-A when on standbyClose during Fan A-A operationOpen when Fan A-A is on Standby- Mechanical Failure- Electrical Failure- Mechanical Failure- Electrical FailureAlarm in MCR via Airflow Switch 0-FS-31-402Damper Status Indication on Panel 1-M-9 in MCR via Limit Switch ZS 28Loss of Airflow Path through Exhaust Fan A-

ANone (See Remarks)NoneNoneRedundant Battery Exhaust Fan B-B starts on Low Air Flow signal from Fan A-A Air Flow Switch 0-FS-31-0-402.Backdraft Damper 0-31-2163 will prevent backflow through fan.Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 48 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-202WATTS BAR WBNP-8784BIsolation Damper0-FC0-31-29Isolates Fan B-B when on standbyClose during Fan B-B operationOpen when Fan B-B is on Standby- Mechanical Failure- Electrical Failure- Mechanical Failure- Electrical FailureAlarm in MCR via Airflow Switch 0-FS-31-401Damper Status Indication on Panel 1-M-9 in MCR via Limit Switch ZS 29Loss of Airflow Path through Exhaust Fan A-

ANone (See Remarks)NoneNoneRedundant Battery Exhaust Fan A-A starts on Low Air Flow signal from Fan B-B Air Flow Switch 0-FS-31-0-401.Backdraft Damper 0-31-2163 will prevent backflow through fan.85Fire Damper0-ISD-31-3940Fire Barrier between Mechanical Equipment Room 692.0-C2 and Unit #1 Aux. Instr. Rm 708.0 C1Open during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as concurrent with fire.Additional independent fusible link is installed86Fire Damper0-ISD-31-3939Fire Barrier between Unit #1 Aux. Instr.

Room 708.0 C1 and Spreading RoomOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as concurrent with fire.Additional independent fusible link is installedTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 49 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-203WATTS BAR WBNP-8787Fire Damper0-ISD-31-3932Fire Barrier between Spreading Room and

MCRHZOpen during fireClose during other modes of operation- Mechanical Failure- Fusible Link Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as concurrent with fire.Additional independent fusible link is installed88Tornado Damper0-FC0-31-14Isolation during Tornado EventFails to close during Tornado Event- Mechanical Failure- Electrical FailureStatus Indication in Equip. Rm. via Limit Switch ZS-31-14None (See Remarks)NoneRedundant Tornado Damper 0-FC0-31-13 powered from Train B and installed in series accomplishes isolation during Tornado Event89Tornado Damper0-FC0-31-13Isolation during Tornado EventFails to close during Tornado Event- Mechanical Failure- Electrical FailureStatus Indication in Equip. Rm. via Limit Switch ZS-31-13None (See Remarks)NoneRedundant Tornado Damper 0-FC0-31-14 powered from Train A and installed in series accomplishes isolation during Tornado Event90Spreading RoomSupply FanSupply of Ventilation Air to Spreading RoomFails to Stop on CRI signal- Electrical FailureNone (See Remarks)NoneIsolation Dampers 0-FC0-31-9 & 10 are closed during CRI and no air is supplied to Spreading Room90ASpreading RoomSupply Fan and Isolation Damper 0-FC0-31-10 or 0-FC0-31-9Fan: Supply ventilation air to spreading room dampers: Provide isolation of MCRHZ from spreading roomFailure of the nonsafety related fan to stop concurrent with failure of one of the

two dampers failing to close on a CRI signal- Mechanical Failure- Electrical Failure Surveillance and Maintenance for fan.

Status indication in MCR on Panel 1-M-9 for dampers.None (See Remarks)NoneAmount of outleakage generated by this failure will not increase the total MCRHZ outleakage beyond the maximum allowable make-up air quantity. Therefore, the positive pressure of 1/8" wg minimum is maintained even under this failure conditionTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 50 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-204WATTS BAR WBNP-8791Isolation Damper0-FC0-31-10Isolation of MCRHZ from Spreading RoomOpen during CRI- Mechanical Failure- Electrical FailureStatus Indication in MCR on Panel 1-M-9 via Limit Switch ZS-31-10None (See Remarks)NoneRedundant Safety Train B Isolation Valve 0-FC0-31-9 installed in series will be closed during CRI to provide isolation92Isolation Damper0-FC0-31-9Isolation of MCRHZ from Spreading RoomOpen during CRI- Mechanical Failure- Electrical FailureStatus Indication in MCR on Panel 1-M-9 via Limit Switch ZS-31-9None (See Remarks)NoneRedundant Safety Train A Isolation Valve 0-FC0-31-10 installed in series will be closed during CRI to provide isolation93Fire Damper0-ISD-31-3933Fire barrier between Mechanical Equipment Room and Spreading RoomOpen during fireClose- Mechanical Failure- Mechanical Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone (See Remarks)Single failures of HVAC system need not to be postulated as being concurrent with fireSpreading Room ventilation is isolated during CRI94Spreading RoomExhaust Fans (2-100%) A-A & B-BExhaust of Spreading RoomFails to stop during CRI- Electrical FailureNone (See Remarks)None (See Remarks)Isolation Dampers 0-FC0-31-9 and 0-FC0-31-10 are closed

during CRI95Isolation Dampers 0-FC0-31-25 for Fan A-A and 0-FC0-1-26 for Fan

B-BIsolation of Spreading Room from outsideOpen during CRI- Mechanical Failure- Electrical FailureStatus Indication in MCR on Panel 1-M-9 via Limit Switches ZS-34-25 & ZS 26None (See Remarks)NoneThe fans are stopped during CRI96Backdraft Damper 0-BKD-31-2152Prevent backflow to Spreading RoomOpen during CRI- Mechanical FailureSurv eillance and MaintenanceNone (See Remarks)NoneIsolation Dampers 0-FC0-31-25 and 0-FC0-31-26 are closed

during CRITable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 51 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-205WATTS BAR WBNP-8797Fire Damper0-ISD-31-3953Fire barrier between Spreading Room and Turbine RoomOpen during fireClosed during other modes of operation- Mechanical Failure- Mechanical Failure See Remarks Surveillance and Maintenance See RemarksNone (See Remarks)See RemarksNone Single failures of HVAC system need not to be postulated as being concurrent with fireSpreading Room ventilation is isolated during CRI98Tornado Damper0-FC0-31-24 (Train B)Isolation during Tornado EventFails to close during Tornado Event- Mechanical Failure- Electrical FailureStatus Indication in Mech Equip Room via Limit Switch ZS-31-24None (See Remarks)NoneRedundant Tornado Damper 0-FC0-31-23 powered from Train A and installed in series accomplishes isolation during Tornado Event99Tornado Damper0-FC0-31-23 (Train A)Isolation during Tornado EventFails to close during Tornado Event- Mechanical Failure- Electrical FailureStatus Indication in Mech Equip Room via Limit Switch ZS-31-23None (See Remarks)NoneRedundant Tornado Damper 0-FC0-31-24 powered from Train B and installed in series accomplishes isolation during Tornado Event100Toilet & Locker Room Exhaust FanProvide exhaust of toilets and lockersFails to stop during CRI- Electrical FailureSurveillance and MaintenanceNone (See Remarks)NoneIsolation Dampers 0-FC0-31-16 and -17 will close during CRI and prevent exhaust air flow during CRI100AToilet & Locker Room Exhaust Fan & Isolation Damper 0-FC0 17 or 0-FC0-31-16Fan: Provides exhaust of toilets & lockers.

Dampers: Provide isolation of MCRHZ from outside during CRIFailure of the nonsafety related fan to stop concurrent with failure of one of the

two dampers failing to close on a CRI signal- Mechanical Failure- Electrical FailureMaintenance for fan. Status indication in MCR on Panel 1-M-9 for dampersNone (See Remarks)NoneAmount of outleakage generated by this failure will not increase the total MCRHZ outleakage beyond the maximum allowable make-up air quantity. Therefore, the positive pressure of 1/8" wg minimum is maintained even under this failure conditionTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 52 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-206WATTS BAR WBNP-87101Isolation Damper0- FC0-31-17Isolation of MCRHZ during CRI from outsideOpen during CRI- Mechanical Failure- Electrical FailureStatus Indication in Control Room on Panel 1-M-9 via Limit Switch ZS 17None (See Remarks)None Redundant Safety Train B Isolation Damper 0-FC0-31-16 will be closed during CRI102Tornado Damper0-FC0-31-16Isolation of MCRHZ during CRI from outsideOpen during CRI- Mechanical Failure- Electrical FailureStatus Indication in Control Room on Panel 1-M-9 via Limit Switch ZS 16None (See Remarks)NoneRedundant Safety Train A Isolation Damper 0-FCO-31-17 will be closed during CRI103Tornado Damper0-FC0-31-18 (Train B)Isolation of MCRHZ during Tornado EventFails to close during Tornado Event- Mechanical Failure- Electrical FailureStatus Indication via Limit Switch ZS 18None (See Remarks)NoneRedundant Tornado Damper 0-FC0-31-15 powered from Train A and installed in series accomplishes isolation during Tornado Event104Tornado Damper0-FC0-31-15 (Train A)Isolation of MCRHZ during Tornado EventFails to close during Tornado Event- Mechanical Failure- Electrical FailureStatus Indication via Limit Switch ZS 15None (See Remarks)Redundant Tornado Damper 0-FC0-31-18 powered from Train B and installed in series accomplishes isolation during Tornado Event105AEmergency Power to Train AProvide power to the Control Building HVAC System Train APower Train A fails- Mechanical Failure (Diesel Generator

Failure)

- Electrical Failure Alarm/indication in MCRLoss of Train A Control Building HVAC SystemsNone (See Remarks) Redundant Safety Train B Control Building HVAC System with its Train B electrical power is available105BEmergency Power to Train BProvide power to the Control Building HVAC System Train BPower Train B fails- Mechanical Failure (Diesel Generator

Failure)

- Electrical Failure Alarm/indication in MCRLoss of Train B Control Building HVAC SystemsNone (See Remarks)Redundant Safety Train A Control Building HVAC System with its Train A electrical power is available Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 53 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-207WATTS BAR WBNP-87106AAuxiliary Control Air System Train AProvide safety related control air to Train A valves, dampers and instruments Loss of Auxiliary Air System Train A- Mechanical Failure- Electrical Failure Alarm/indication in MCRLoss of Train A Control Building HVAC SystemsNone (See Remarks)Redundant Safety Train B Control Building HVAC System with its Train B electrical power is available106BAuxiliary Control Air System Train BProvide safety related control air to Train B valves, dampers and instruments Loss of Auxiliary Air System Train B- Mechanical Failure- Electrical Failure Alarm/indication in MCRLoss of Train B Control Building HVAC SystemsNone (See Remarks)Redundant Safety Train A Control Building HVAC System with its Train A electrical power is availableTable 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 54 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-208WATTS BAR WBNP-87107Roof ventilators 1-FAN-30-912, -913,

-916, -917 & -918 on Board 1A1-FAN-30-909, -910, -911, & -915 on Board 1B2-FAN-30-912, -913, -916, -917 & -

918 on Board 2A2-FAN-30-909, -910, -911, -914, & -

915 on Board 2BNorth El 755 Supply Fan 1, 1-FAN-30-924 on Board 1ASouth El 755 Supply Fan 1, 1-FAN-30-921 on Board 1BNorth El 755 Supply Fan 2, 2-FAN-30-924 on Board 2AProvide Turbine Building El 755' ventilation- Loss of power to Board 1A- Loss of power to Board 1A- Loss of power to Board 1A- ElectricalSurveillance and maintenanceSurveillance and maintenanceSurveillance and maintenanceNone (See Remarks)None (See Remarks)None (See Remarks)None None NoneLoss of power to Board 1A stops five roof ventilators and north supply Fan 1, and results in operation of 15 roof ventilators @

28,500 cfm each and north supply Fan 2 @ 68,000 cfm and 2 south supply fans @ 35,000 cfm each resulting in lower than atmospheric pressure (68,000 +

2x35,000 - 15X28,500 = -289,500 cfm)Loss of power to Board 1B stops five roof ventilators and south supply Fan 1, and results in operation of 15 roof ventilators @

28,500 cfm each and 2 north supply fan @ 68,000 cfm each and one South supply fan @

35,000 cfm resulting in lower than atmospheric pressure (2x68,000 cfm + 35,000 - 15X28,500 cfm = -

256,500 cfm)Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 55 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-209WATTS BAR WBNP-87 Note:1. Refer to TVA Calculation No. PI-639.South El 755 Supply Fan 2, 2-FAN-30-921 on Board 2BLoss of power to Board 1B and 2B stops 10 roof vents and 2 south supply fans and results in operation of 10 roof vents @

28,500 cfm each and 2 north supply fans @ 35,000 cfm each resulting in lower than atmospheric pressure (2x68,000 cfm 28,500 = -149,000 cfm)Table 9.4-7 Failure Modes and Effects Analysis Control Building HVAC (Sheet 56 of 56)ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIAL CAUSEMETHOD OFFAILURE DETECTIONEFFECT ON SYSTEMEFFECT ONPLANTREMARKS AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-210WATTS BARWBNP-91 Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 1 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks11-FAN-30-103Aux. Bldg. General Supply Fan 1A-A and associated

isolation Dampers 1-FCO-30-86,

-87, -106 and -

107.Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of supply air to the Aux. Bldg. after an

ABI signal.Fan fails to stop and one damper fails to close during an ABI emergency.Fan: Spurious operation, ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for Fan 1A running indicating lights in MCR for damper.Increased in-leakage within the ABSCE.Potential loss of the required negative pressure level within the ABSCE. Potential loss of duct/damper pressure integrity.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.3.If the additional in-leakage through the fan/damper disturbs the system to a point that one ABGTS filtration unit cannot maintain the design negative pressure level, the standby ABGTS filtration unit will start in order to handle the additional in-leakage and to maintain the required negative pressure level.4.Pressure differential across the duct/damper assembly is acceptable.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-211WATTS BAR WBNP-9121-FAN-30-103Aux. Bldg. General Supply Fan 1A-A and ABGTS Exhaust Fan A-A or B-BSupply fan to stop and to remain stopped during DBE's. To prevent flow of supply air to the Aux. Bldg.

by stopping on an ABI signal.

ABGTS Fan operates to maintain a negative pressure

in the ABSCE relative to the outside environment.

Supply fan fails to stop; spuriously operates. One ABGTS fan fails to start or fails to run.For Supply Fan: spurious operation, ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).For ABGTS Fan: Mechanical failure, train power failure, train signal failure.Indicating lights in the MCR.Increase in in-leakage within the ABSCE.Potential loss of the required negative pressure level within the

ABSCE. Loss of redundancy in the

ABGTS.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.

Therefore, the only failure having a potential effect on the safety functions of the Aux. Bldg. HVAC system is spurious operation or failure to stop.2.One operating ABGTS filtration unit can handle the additional in-leakage.32-FAN-30-105Aux. Bldg. General Supply Fan 2B-B and associated

isolation Dampers 2-FCO-30-21, -

22, -108,

-109.Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of supply air to the Aux. Bldg. after an

ABI signal.Fan fails to stop and one damper fails to close during an ABI emergency.Fan: Spurious operation, ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for Fan 2B running indicating lights in MCR for damper.Increased in-leakage within the ABSCE.Potential loss of the required negative pressure level within the ABSCE. Potential loss of duct/damper pressure integrity.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.3.If the additional in-leakage through the fan/damper disturbs the system to a point that one ABGTS filtration unit cannot maintain the design negative pressure level, the standby ABGTS filtration unit will start in order to handle the additional in-leakage and to maintain the required negative pressure level.4.Pressure differential across the duct/damper assembly is acceptable. Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 2 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-212WATTS BAR WBNP-9142-FAN-30-105Aux. Bldg. General Supply Fan 2B-B and ABGTS Exhaust Fan A-A or B-BSupply fan to stop and to remain stopped during DBE's. To prevent flow of supply air to the Aux. Bldg.

by stopping on an ABI signal.

ABGTS Fan operates to maintain a negative pressure

in the ABSCE relative to the outside environment.

Supply fan fails to stop; spuriously operates. One ABGTS fan fails to start or fails to run.For Supply Fan: spurious operation.

ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).For ABGTS Fan: Mechanical failure, train power failure, train signal failure.Indicating lights in the MCR.Increase in in-leakage within the ABSCE.Potential loss of the required negative pressure level within the

ABSCE. Loss of redundancy in the

ABGTS.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.

Therefore, the only failure having a potential effect on the safety functions of the Aux. Bldg. HVAC system is spurious operation or failure to stop.2.One operating ABGTS filtration unit can handle the additional in-leakage.51-FAN-30-102Aux. Bldg. General Supply Fan 1B-B and associated

isolation Dampers 1-FCO-30-86, -

87, -106 and -107Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of supply air to the Aux. Bldg. after an

ABI signal.Fan fails to stop and one damper fails to close during an ABI emergency.Fan: Spurious operation, ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for Fan 1B running indicating lights in MCR for damper.Increased in-leakage within the ABSCE.Potential loss of the required negative pressure level within the ABSCE. Potential loss of duct/damper pressure integrity.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.3.If the additional in-leakage through the fan/damper disturbs the system to a point that one ABGTS filtration unit cannot maintain the design negative pressure level, the standby ABGTS filtration unit will start in order to handle the additional in-leakage and to maintain the required negative pressure level.4.Pressure differential across the duct/damper assembly is acceptable. Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 3 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-213WATTS BAR WBNP-9161-FAN-30-102Aux. Bldg. General Supply Fan 1B-B and ABGTS Exhaust Fan A-A or B-BSupply fan to stop and to remain stopped during DBE's. To prevent flow of supply air to the Aux. Bldg.

by stopping on an ABI signal.

ABGTS Fan operates to maintain a negative pressure

in the ABSCE relative to the outside environment.

Supply fan fails to stop; spuriously operates. One ABGTS fan fails to start or fails to run.For Supply Fan: spurious operation.

ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).For ABGTS Fan: Mechanical failure, train power failure, train signal failure.Indicating lights in the MCR.Increase in in-leakage within the ABSCE.Potential loss of the required negative pressure level within the

ABSCE. Loss of redundancy in the

ABGTS.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.

Therefore, the only failure having a potential effect on the safety functions of the Aux. Bldg. HVAC system is spurious operation or failure to stop.2.One operating ABGTS filtration unit can handle the additional in-leakage.72-FAN-30-104Aux. Bldg. General Supply Fan 2A-A and associated

isolation Dampers 2-FCO-30-21, -

22, -108 and -109Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of supply air to the Aux. Bldg. after an

ABI signal.Fan fails to stop and one damper fails to close during an ABI emergency.Fan: Spurious operation, ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for Fan 2A-A running indicating lights in MCR for damper.Increased in-leakage within the ABSCE.Potential loss of the required negative pressure level within the ABSCE. Potential loss of duct/damper pressure integrity.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.3.If the additional in-leakage through the fan/damper disturbs the system to a point that one ABGTS filtration unit cannot maintain the design negative pressure level, the standby ABGTS filtration unit will start in order to handle the additional in-leakage and to maintain the required negative pressure level.4.Pressure differential across the duct/damper assembly is acceptable. Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 4 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-214WATTS BAR WBNP-9182-FAN-30-104Aux. Bldg. General Supply Fan 2A-A and ABGTS Exhaust Fan A-A or B-BSupply fan to stop and to remain stopped during DBE's. To prevent flow of supply air to the Aux. Bldg.

by stopping on an ABI signal.

ABGTS Fan operates to maintain a negative pressure

in the ABSCE relative to the outside environment.

Supply fan fails to stop; spuriously operates. One ABGTS fan fails to start or fails to run.For Supply Fan: spurious operation.

ABI or RAD detection high temperature signal failure, hot short in control wiring.

Operator error (handswitch placed in wrong position).For ABGTS Fan: Mechanical failure, train power failure, train signal failure.Indicating lights in the MCR.Increase in in-leakage within the ABSCE.Potential loss of the required negative pressure level within the

ABSCE. Loss of redundancy in the

ABGTS.None. See Remarks.1.Supply fan is not safety- related but is required to stop running during a DBE.

Therefore, the only failure having a potential effect on the safety functions of the Aux. Bldg. HVAC system is spurious operation or failure to stop.2.One operating ABGTS filtration unit can handle the additional in-leakage.91-FAN-30-159Aux. Bldg. General Exhaust Fan 1A-A and associated

isolation Dampers 1-FCO-30-160,-

161Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of unfiltered exhaust air from Aux. Bldg.

to outside, after an

ABI signal.One damper fails to close during an ABI emergency.

(exhaust fan is shutdown see remark 1).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for dampers.None. See remarks.None. See Remarks.1.Exhaust fan is not safety- related but is required to stop runnin during a DBE.

Fan motor is equipped with safety-related redundant breakers.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.

Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 5 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-215WATTS BAR WBNP-91102-FAN-30-274Aux. Bldg. General Exhaust Fan 2A and associated dampers 2-FCO-30-271, -

272Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of unfiltered exhaust air from the Aux.

Bldg. to outside, after an ABI signal.One damper fails to close during an ABI emergency.

(Exhaust fan is shutdown see remark 1).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for dampers.None. See remarks.None. See Remarks.1.Exhaust fan is not safety- related but is required to stop running during a DBE.

Fan motor is equipped with safety-related redundant breakers.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.

111-FAN-30-162Aux. Bldg. General Exhaust Fan 1B and associated dampers 1-FCO-30-166, -

167Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of unfiltered exhaust air from the Aux.

Bldg. to outside, after an ABI signal.One damper fails to close during an ABI emergency.

(Exhaust fan is shutdown see remarks).Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in MCR for damper.None. See remarks.None. See Remarks.1.Exhaust fan is not safety- related but is required to stop running during a DBE.

Fan motor is equipped with safety-related redundant breakers.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.

Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 6 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-216WATTS BAR WBNP-91122-FAN-30-278Aux. Bldg. General Exhaust Fan 2B and associated dampers 2-FCO-30-275, -

276Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of unfiltered exhaust air from the Aux.

Bldg. to outside, after an ABI signal.One damper fails to close during an ABI emergency.

(Exhaust fan is shutdown see remark 1).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in the MCR.

None. See remarks.None. See Remarks.1.Exhaust fan is not safety- related but is required to stop running during a DBE.

Fan motor is equipped with safety-related redundant breakers.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.

130-FAN-30-136Fuel Handling Area Exhaust Fan A-A and associated dampers 0-FCO-30-137, -138Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of unfiltered exhaust air from the Aux.

Bldg. to outside, after an ABI signal.One damper fails to close during an ABI emergency.

(Exhaust fan is shutdown see remark 1).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in the MCR.

None. See remarks.None. See Remarks.1.Exhaust fan is not safety- related but is required to stop running during a DBE.

Fan motor is equipped with safety-related redundant breakers.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.

Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 7 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-217WATTS BAR WBNP-91140-FAN-30-139Fuel Handling Area Exhaust Fan B-B and associated dampers 0-FCO-30-140, -141Fan to stop and remain stopped during DBE's.

Dampers to close and remain closed during DBE's to prevent flow of unfiltered exhaust air from the Aux.

Bldg. to outside, after an ABI signal.One damper fails to close during an ABI emergency.

(Exhaust fan is shutdown see Remark 1).

Damper: Mechanical failure, control wiring or contact failures.

Handswitch failure to spring return from open to A-Auto.Indicating lights in the MCR for damper.None. See remarks.None. See Remarks.1.Exhaust fan is not safety- related but is required to stop running during a DBE.

Fan motor is equipped with safety-related redundant breakers.2.The fan and isolation dampers separately receive independently trained ABI or RAD detection signals.Table 9.4-8 Failure Modes and Effects Analysis for Active Failures Subsystem: Auxiliary Building General Ventilation (Sheet 8 of 8)Item No.Component IdentificationFunctionFailure ModePotential CauseMethod of DetectionEffect on System Effect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-218WATTS BAR WBNP-87Table 9.4-8a A Failure Modes And Effects Analysis for Active Failures for Components Common to the Aux Bldg Hvac Subsystem (Sheet 1 of 2)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks1Auxiliary Building Isolation (ABI) signal Train A.Deenergizes solenoid valves to close associated dampers; stops AB

general ventilation fans; starts various ESF room coolers.Signal fails.Spurious signal.Train A vital ac bus failure; Relay VKA 1 failure; Train A

initiating signal (Phase A containment isolation, high rad in refueling area)

failure.Operator error, spurious initiating signal (initiating signals listed above.)MCR indiation of only one train of ABGTS fan starting and one train of ABSCE dampers

closing.None.Loss of redundancy in ABSCE isolation and ESF coolers actuation.Unnecessary isolation of ABSCE, initiation of ESF coolers and startup of ABGTS.None.None.Train A and Train B ABI initiating signals are derived from independent (train separated) qualified devices.2Auxiliary Building Isolation (ABI) signal Train B.Deenergizes solenoid valves to close associated dampers; stops AB

general ventilation fans; starts various ESF room coolers.Signal fails.Spurious signal.Train B vital ac bus failure; Relay VKB1 failure; Train B initiating signal (Phase A containment isolation, high rad in refueling area)

failure.Operator error, spurious initiating signal (initiating signals listed above.)MCR indiation of only one train of ABGTS fan starting and one train of ABSCE dampers

closing.None.Loss of redundancy in ABSCE isolation and ESF coolers actuation.Unnecessary isolation of ABSCE, initiation of ESF coolers and startup of ABGTS.None.None.Train A and Train B ABI initiating signals are derived from independent (train separated) qualified devices.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-219WATTS BAR WBNP-873Train A Emergency Power.Provides Class 1E diesel-backed power supply to active components of Train A of AB HVAC subsystems.Loss of or inadequate voltage.Diesel generator failure; bus fault (Train A); Operator error.Alarm and indication in MCR.Loss of redundancy in safety-related HVAC system.None.Redundant Train B HVAC system available.4Train B Emergency Power.Provides Class 1E diesel-backed power supply to active components of Train B of AB HVAC subsystems.Loss of or inadequate voltage Diesel generator failure; bus fault (Train B); Operator error.Alarm and indication in MCR.Loss of redundancy in safety-related HVAC system.None.Redundant Train A HVAC system available.Table 9.4-8a A Failure Modes And Effects Analysis for Active Failures for Components Common to the Aux Bldg Hvac Subsystem (Sheet 2 of 2)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-220WATTS BAR WBNP-87Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 1 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks1Intake opening (one for each of two dampers in each Transformer

Room).Provides air supply intake to 480V Transformer Room 1A, 1B, 2A, and

2B.BlockageMechanical Failure. Foreign

Object.-----------------Loss of Redundancy in providing air supply.Redundant intake opening will supply sufficient air to the room.NoneRedundant openings are provided.2Refrigerant Piping and Valves for Chiller or

Condensing UnitProvides flowpath for refrigerant from Chiller to AHU and back to Chiller.LeakageCracksNo direct indication of leakage.Loss of effectiveness of one Chiller and associated AHUs redundant loop.

Opposite Train Chiller and AHUs are independent and

remain available.None31-ISD-31-3923 Fire DamperIn the return air flowpath from pipe chase to Penetration Room at El. 713, and to Penetration Room at El. 692 and Pipe Chase Coolers.Spuriously closes.Mechanical failure of fusible link.No direct indication of fusible link failure.Loss of Redundancy in damper controlNoneSee Remark #2.1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Fire Dampers 1-ISD-31-3923 and 1-ISD-31-3925 are installed with redundant fusible links such that the single failure of one fusible link will not cause the failure of the fire damper to permit air flow.3.Failure of 1-ISD-31-3923 to remain open envelopes the failure of 1-ISD-31-3925.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-221WATTS BAR WBNP-8741-ISD-31-3801Fire DamperIn the supply air flowpath to pipe chase from Penetration Room at El. 692.Spuriously closes.Mechanical failure of fusible link.No direct indication of fusible link failure.Loss of redundancy in damper control.NoneSee Remark #2.1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.The Fire Damper 1-ISD-31-3801 is installed with redundant fusible links such that the single failure of one fusible link will not cause the failure of the fire damper to permit air flow.50-ISD-31-4619Fire DamperIn the flowpath for cooling air from AHU line coming through the 6.9kV Shutdown Board Room A into the 480V Shutdown Board Room 1B, and then into the Battery Board Room 1.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.Loss of cooling/ventilating air to Train B 480V Shutdown Board Room 1B and Train A

Battery Board

Room 1.Possible temperature and presure deviation from design conditions in 480V Shutdown Board Room 1B, 6.9 kV Shutdown Board Room A and Battery Board Room 1.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.Temperature variation in 6.9kV Shutdown Board Room A will be detected at inlet to AHU indicated on L-551 or L-537.4.The effect of the failure of 0-ISD-31-4618, -2733, -4620, or -4621 is enveloped by the failure of 0-ISD-31-4619.5.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 2 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-222WATTS BAR WBNP-8760-ISD-31-4623Fire DamperIn the flowpath for cooling air from AHU line coming through the 6.9kV Shutdown Board Room B into the 480V Shutdown Board Room 2A, and then into the Battery Board Room IV.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.Loss of cooling/ventilating air to Train A 480V Shutdown Board Room 2A and Train B

Battery Board Room IV.Possible temperature and pressure deviation from design conditions in 480V Shutdown Board Room 2A, 6.9kV Shutdown Board and Battery Room IV.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.A temperature variation in 6.9kV Shutdown Board Room B will be detected at Inlet to AHU indicated on L-538 or L-540.4.The effect of the failure of 0-ISD-31-4622, -2785, -4624, or -4625 is enveloped by the failure of 0-ISD-31-4623.5.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 3 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-223WATTS BAR WBNP-8770-ISD-31-2757Fire DamperIn the flowpath for pressurizing the 6.9kV Shutdown Board Room A from Mechanical Equipment Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.

None.See Remark #4.NoneSee Remark #4.1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Fire damper is closed and latched.3.No flow on discharge of fans detected.4.The Pressurizing Fans are designed to stop during a DBE, and are not required to mitigate the effects of the DBE.

80-ISD-31-2814Fire DamperIn the flowpath for pressurizing the 6.9kV Shutdown Board Room B from Mechanical Equipment Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.

NoneRemark #4.NoneSee Remark #4.1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Fire damper is closed and latched.3.No flow on discharge of fans detected.4.The Pressurizing Fans are designed to stop during a DBE, and are not required to mitigate the effects of the DBE.

Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 4 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-224WATTS BAR WBNP-8790-ISD-31-2720Fire DamperIn the flowpath for cooling air from AHU line coming through the 6.9kV Shutdown Board Room A to the

Auxiliary Control Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.Partial loss of cooling air to Auxiliary Control

Room.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.The effects of the failure of 0-ISD-31-2725, -2723, -2726,

-2721, or -2728 are enveloped by the effects of 0-ISD-31-2720 failure.4.The Auxiliary Control Room functions as the alternate control room in the event that the main control room becomes uninhabitable from fire or release of gases from non-DBE.5.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 5 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-225WATTS BAR WBNP-87100-ISD-31-2771Fire DamperIn the flowpath for cooling air from AHU line coming through the 6.9kV Shutdown Board Room B to the

Auxiliary Control Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.Partial loss of cooling air to Auxiliary Control

Room.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.The effects of the failure of 0-ISD-31-2777, -2779, -2774,

-2772, or -2775 are enveloped by the effects of 0-ISD-31-2771 failure.4.The Auxiliary Control Room functions as the alternate control room in the event that the main control room becomes uninhabitable from fire or release of gases from non-DBE.5.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 6 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-226WATTS BAR WBNP-87110-ISD-31-2713Fire DamperIn the flowpath for cooling air to Battery Board Room II from AHU

line coming through the 6.9kV Shutdown Board Room A to the

Auxiliary Control Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.Loss of pressurizing and cooling air to Train B Battery Board Room

II.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Normally open damper.

3.The effects of the failure of 0-ISD-31-2715 are enveloped by the effects of 0-ISD-31-2713 failure.4.Fire damper has dual fusible links.120-ISD-31-2780Fire DamperIn the flowpath for cooling air to Battery Board Room III from AHU

line coming through the 6.9kV Shutdown Board Room B to the

Auxiliary Control Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.Loss of pressurizing and cooling air to Train B Battery Board Room III.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.The effects of the failure of 0-ISD-31-2782 are enveloped by the effects of 0-ISD-31-2780 failure.4.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 7 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-227WATTS BAR WBNP-87130-ISD-31-2759Fire DamperIn the flowpath for air from 6.9kV Shutdown Board Room A to AHU intake in Mechanical Equipment Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.Possible temperature rise in 6.9kV Shutdown Board

Room A. Pressure rise in 6.9kV Shutdown Board

Room A.See Remark #3.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.Temperature rise in 6.9kV Shutdown Board Room A detected at inlet to AHU indicated on L-551 or l-537.4.Fire damper has dual fusible links.140-ISD-31-2815Fire DamperIn the flowpath for air flow from 6.9kV Shutdown Board Room B to AHU intake in Mechanical Equipment Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.Possible temperature rise in 6.9kV Shutdown Board Room B. Diminished suction to AHU.

Pressure rise to 6.9kV Shutdown Board

Room B.See Remark #3.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Damper normally open.

3.Temperature rise in 6.9kV Shutdown Board Room B detected at inlet to AHU indicated on L-538 or l-540.4.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 8 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-228WATTS BAR WBNP-87151-ISD-31-2516Fire DamperIn the flowpath for AHU 1A-A discharge cooling air flow to 480V Board Room 1A and Battery Room

I.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.Battery Room I can be exhausted.Diminished air flow for providing pressurizing and cooling air supply to the 480V Board Room 1A and Battery

Room I.See Remark #2.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Failure of this damper envelopes the failures 1-ISD-31-2525 or -2526.3.Indicating lights in MCR of ACU and AHU 1A-A running (1-HS-31-461-A). Low flow from AHU 1A-A (1-FS-31-460-

A) ANN 7-57.4.Fire damper has dual fusible links.162-ISD-31-2516Fire DamperIn the flowpath for AHU 2A-A discharge cooling air flow to 480V Board Room 2A and Battery Room IV.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.Battery Room IV can be exhausted.Diminished air flow for providing pressurizing and cooling air supply to the 480V Board Room 2A and Battery Room IV.See Remark #2.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Failure of this damper envelopes the failures 2-ISD-31-2525 or -2526.3.Indicating lights in MCR of ACU and AHU 2A-A running (2-HS-31-461-A). Low flow from AHU 2A-A (2-FS-31-460)

ANN 7-57.4.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 9 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-229WATTS BAR WBNP-87171-ISD-31-2504Fire DamperIn the flowpath for Pressurizing Fans discharge air flow to 480V Board Room 1A.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #2.Battery Room I can be exhausted.Diminished air flow for providing pressurizing air to the 480V Board

Room 1A.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of Pressurizing Fans running.

182-ISD-31-2504Fire DamperIn the flowpath for Pressurizing Fans discharge air flow to 480V Board Room 2A.Spuriously closes.Mechanical failure of the fusible link.No direct indication of damper closing.See Remark #2.Battery Room IV can be exhausted.Diminished air flow for providing pressurizing air supply to the 480V Board Room 2A.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of Pressurizing Fans running.

191-ISD-31-2515Fire DamperIn the flowpath for suction air flow to AHU 1A-A for 480V Board Room 1A and Battery Room I.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #2.Battery Room I can be exhausted.Loss of air flow for providing pressurizing air to the 480V Board Room 1A and Battery Board Room I.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of ACU and AHU 1A-A running (1-HS-31-461-A). Low flow from AHU 1A-A (1-FS-31-460).3.Damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 10 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-230WATTS BAR WBNP-87202-ISD-31-2515Fire DamperIn the flowpath for suction air flow to AHU 2A-A for 480V Board Room 2A and Battery Room IV.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #2.Battery Room I can be exhausted.Loss of air flow for providing pressurizing air to the 480V Board Room 2A and Battery Board Room IV.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of ACU and AHU 2A-A running (2-HS-31-461-A). Low flow from AHU 2A-A (2-FS-31-460).3.Damper has dual fusible links.211-ISD-31-2518Fire DamperIn the flowpath for AHU 1B-B discharge cooling air flow to 480V Board Room 1B and Battery Room II.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.Battery Room I can be exhausted.Loss of air flow for providing pressurizing and cooling air supply to the 480V Board Room 1B and Battery

Room II.See Remark #2.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Failure of this damper envelopes the failure of 1-ISD-31-2523.3.Indicating lights in MCR of ACU and AHU 1B-B running (1-HS-31-475-B). Low flow from AHU 1B-B (1-FS-31-476)

ANN 7-92.4.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 11 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-231WATTS BAR WBNP-87222-ISD-31-2518Fire DamperIn the flowpath for AHU 2B-B discharge cooling air flow to 480V Board Room 2B and Battery Room III.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #3.Battery Room III can be exhausted.Diminished air flow for providing pressurizing and cooling air supply to the 480V Board Room 2B and Battery Room III.See Remark #2.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Failure of this damper envelopes the failure of 2-ISD-31-2523.3.Indicating lights in MCR of ACU and AHU 2B-B running (2-HS-31-475-B). Low flow from AHU 2B-B (2-FS-31-476)

ANN 7-92.4.Fire damper has dual fusible links.231-ISD-31-2519Fire DamperIn the flowpath for Pressurizing Fans discharge air flow to 480V Board Room 1B.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #2.Battery Room II can be exhausted.Diminished air flow for providing pressurizing air supply to the 480V Board Room 1B.See Remark #2.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of Pressurizing Fans running.

Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 12 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-232WATTS BAR WBNP-87242-ISD-31-2519Fire DamperIn the flow path for Pressurizing Fans discharge air flow to 480V Board Room 2B.Spuriously closes.Mechanical failure of the fusible link.No direct indication of damper closing.See Remark #2.Battery Room III can be exhausted.Diminished air flow for providing pressurizing air to the 480V Board

Room 2B.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of Pressurizing Fans running.

251-ISD-31-2517Fire DamperIn the flowpath for suction air flow to AHU 1B-B for 480V Board Room 1B and Battery Room II.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #2.Battery Room II can be exhausted.Loss of air flow for providing pressurizing air to the 480V Board Room 1B and Battery

Room II.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of ACU and AHU 1B-B running (1-HS-31-475A). Low flow from AHU 1B-B (1-FS-31-476)

ANN 7-92.3.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 13 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-233WATTS BAR WBNP-87262-ISD-31-2517Fire DamperIn the flowpath for suction air flow to AHU 2B-B for 480V Board Room

2B.Spuriously closes.Mechanical failure of fusible link.No direct indication of damper closing.See Remark #2.Battery Room III can be exhausted.Loss of air flow for providing pressurizing and cooling air to the 480V Board Room 2B and Battery Room III.None1.Damper closing is not a mitigating function for any DBE and is considered in the Appendix R analysis.2.Indicating lights in MCR of ACU and AHU 2B-B running (2-HS-31-475A). Low flow from AHU 2B-B (2-FS-31-476)

ANN 7-92.3.Fire damper has dual fusible links.271-ISD-31-3783Fire DamperIn the flowpath to TDAFW Pump Room dc Fan.Spuriously closes.Mechanical failure of fusible link.No direct indication of failure in MCR.Loss of DC fan for cooling TDAFW Pump

Room.None1.Damper closing is not a mitigating function for any DBE and is not within the scope of this FMEA.2.The nonsafety ac fan is available to cool the TDAFW

Pump Room.3.During loss of all ac, there will be no cooling/ventilating capability for the TDAFW Pump Room and loss of the TDAFW pump is possible.4.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 14 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-234WATTS BAR WBNP-87281-ISD-31-3780Fire DamperIn the flowpath from General Area 692 to TDAFW

Pump Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of failure in MCR.Reduced air flow into TDAFW below adequate amounts for exhaust through the two emergency exhaust fans.None1.Damper closing is not a mitigating function for any DBE and is not within the scope of this FMEA.2.Potentially diminished cooling/ventilating capability for the TDAFW Pump Room.3.Fire damper has dual fusible links.291-ISD-31-3967Fire DamperIn the air flow path from General Area 692 to TDAFW

Pump Room.Spuriously closes.Mechanical failure of fusible link.No direct indication of failure in MCR.Reduced air flow into TDAFW.None1.Damper closing is not a mitigating function for any DBE and is not within the scope of this FMEA.2.With both emergency fans operating during a DBE, there exists the possibility of diminished capability to ventilate the TDAFW Pump Room.3.Fire damper has dual fusible links.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 15 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-235WATTS BAR WBNP-8730Ductwork in the Auxiliary Building Gen. Vent and A/C subsystems.Provides containment for air flow path and controlled distribution and exhausting of cooling/ventilating air.LeakageCracks-----------------Minimal localized reduction of negative pressure and minimized effect on temperature of areas.NoneOnly small cracks are postulated due to seismic qualification of ductwork. Most of air leaking from flow path will enter the areas for which it is intended.Loss of fluid (air) is not a concern since the system is in the same fluid.Table 9.4-8b Failure Modes and Effects Analysis for Auxiliary Building HVAC Subsystem Passive Failures (Sheet 16 of 16)Item No.ComponentFunctionFailure ModePotential CauseMethod ofDetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-236WATTS BAR WBNP-91Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 1 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks10-CHR-31-36/2-AChilled Water Package A-A (Train A)

Provides chilled water to Train A

AHUs.Fails to start; Fails while running.

Mechanical failure; Train A power failure; Control

signal failure from 0-PDIS-31-101-A; 0-FS-31-43-A; 0-FS-31-38-A; 0-TS-31-40B-A; and O-TS-31-48B-A.Annunciator of Shutdown Board Room HVAC System A-A Abnormal.

Indicating lights in MCR (0-HS-31-400A).

Compressor running

light on MCC.Loss of Redundancy.

NoneSee Remark #3.1.Equipment includes CW pump and motor and compressor and motor.

2.Control of the CWCP, 0-PMP 36/1-A, and AHUs A-A and B-A is interlocked with Chiller A-A.

3.The system design intent is such that loss of one chiller results only in the loss of redundancy in providing chilled water for cooling Unit 1 and Unit 2 Shutdown Board Rooms. The redundant train chiller serves AHUs C-B and D-B. Chiller A-A will stop automatically and Chiller B-B will start automatically on:

Low DP at Circulating Water Cooling Pump for Chiller A-A.

T > Setpoint at air inlet to Train A AHUs.

Low air flow at AHU A-A or B-A.

4.A review of the schematics establishes the separation and redundancy of the train A and B units. The loss of nondivision train associated power supply for the separation relay will not prevent the switchover from a failed unit to the redundant unit.

AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-237WATTS BAR WBNP-87 1(cont0-CHR-31-36/2-AChilled WaterPackage A-A (Train A) (cont'd)Reduction of cooling capacityLoss of refrigerant; Chiller freeze up; Control signal

failure.Inlet temperature indication on L-551 or L-538 for AHU air intake in 6.9 kV Shutdown Board

Room.See remark #1.Loss of redundancy in cooling air flow.See remark #3.None, See remark #3. Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 2 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-238WATTS BAR WBNP-9120-CHR-31-49/2-BChilled Water Package B-B (Train B)

Provides chilled water to Train B

AHUs.Fails to start; Fails while running Mechanical failure; Train B power failure; Control

signal failure from 0-PDIS-31-131-B, 0-FS-31-51-B, 0-FS-31-57-B, 0-TS-31-60B-B, 0-TS-31-52B-B.Annunciation of Shutdown Board Room Hvac System B-B Abnormal.

Indicating lights in MCR (0-HS-31-49A).

Compressor running

light on MCC.Loss of RedundancyNone, See remark

1. 31.Equipment includes CW pump & motor and compressor & motor.

2.Control of the CWCP, 0-PMP 49/1-B, and AHUs C-B and D-B is interlocked with Chiller B-B.

3.The system design intent is such that loss of one chiller results only in the loww of redundancy in providing chilled water for cooling Unit 1 and Unit 2 Shutdown Board Rooms. The redundant train dchiller seves AHUs A-A and B-A. Chiller B-B will stop automatically and Chiller A-A will start automatically on:

Low DP at Circulating Water Cooling Pump for Chiller B-B.

T > Setpoint at air inlet to Train B AHUs.

Low air flow at AHU C-B or D-B.

4.A review of the schematics establishes the separation and redundancy of the train A and B units. The loss of nondivision train associated power supply for the separation relay will not prevent the switchover from a failed unit to the redundant unit.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 3 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-239WATTS BAR WBNP-87 2(cont0-CHR-31-49/2-BChilled Water Package B-B (Train B) (cont'd)Reduction of cooling capacity.Loss of refrigerant; chiller freeze up; Control signal

failure.Inlet temperature indication on L-540 or L-537 for AHU air intake in 6.9 kV Shutdown Board

Room.See remark #1.Loss of redundancy in cooling air flow.None, See remark #3.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 4 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-240WATTS BAR WBNP-9130-AHU-31-45 Air Handling Unit A-A (Train A)Provides cooling air to maintain required temperatures for Shutdown Board Rooms safety-related equipment on the Unit 1

side.Fails to start; Fails while running.Fails to stop or starts while unit C-B is operating.

Mechanical Failure; Train A power

failure.Electrical FailureAnnunciation of Shutdown Board Room HVAC System A-A Abnormal.

Indicating lights in MCR (0-HS-31-400A-A). AHU A-A running

light on MCC.Annunciation in the MCR.Loss of redundancy in cooling air to Unit 1 side Shutdown Board rooms.Increased pressure in supply duct.None. Redundant Train B Chiller B-B and AHU C-B on Unit 1 side will automatically start on:$Low DP at Circulating Water

Cooling Pump.$Low Air flow at AHU A-A or$T > Setpoint at inlet to Train A

AHU.None (See Remarks)Review of the schematics establishes that the AHUs A-A and C-B (on Unit 1 side) are independent.AHU A-A is interlocked to automatically start on Chiller A-A start.Either train of AHUs (Train A AHUs A-A and B-A or Train B AHUs C-B and D-B) is capable of providing cooling air to the Aux. Control Room.When both Air Handling Units are operating the common ductwork static pressure does not exceed 6 in.

wg. duct design pressure.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 5 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-241WATTS BAR WBNP-9140-AHU-31-44 Air Handling Unit B-A (Train A)Provides cooling air to maintain required temperatures for Shutdown Board Rooms Safety-related equipment on the Unit 2

side.Fails to start; Fails while running.Fails to stop or starts while unit D-B is operating.

Mechanical Failure; Train A power

failureElectrical FailureAnnunciation of Shutdown Board Room HVAC System A-A Abnormal.

Indicating lights in MCR (0-HS-31-400A-A). AHU B-A running

light on MCC.Annunciation in the MCR.Loss of redundancy in cooling air to Unit 2 side Shutdown Board rooms.Increased pressure in supply duct.None.Redundant Train B Chiller B-B and AHU D-B on Unit 2 side will automatically start on:$Low DP at Circulating Water

Cooling Pump.$Low Air flow at AHU B-A or$T > Setpoint at inlet to Train A

AHU.None (See Remarks)Review of the schematics establishes that the AHUs B-A and D-B (on Unit 2 side) are independent.AHU B-A is interlocked to automatically start on Chiller A-A start.Either train of AHUs (Train A AHUs A-A and B-A or Train B AHUs C-B and D-B) is capable of providing cooling air to the Aux. Control Room.When both Air Handling Units are operating, the common ductwork static pressure does not exceed 6 in.

wg. duct design pressure.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 6 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-242WATTS BAR WBNP-9150-AHU-31-55Air Handling Unit C-B (Train B)Provides cooling air to maintain required temperatures for Shutdown Board Rooms safety-related equipment on the Unit 1

side.Fails to start; Fails while running.Fails to stop or starts while unit A-A is operating.

Mechanical Failure; Train B power

failure.Electrical FailureAnnunciation of Shutdown Board Room HVAC System B-B Abnormal.

Indicating lights on MCR (0-HS-31-49A-B). AHU C-B running

light on MCC.Annunciation in the MCR.Loss of redundancy in cooling air to Unit 1 side Shutdown Board rooms.Increased pressure in supply duct.None.Redundant Train A Chiller A-A and AHU A-A on Unit 1 side will automatically start on:$Low DP at Circulating Water

Cooling Pump.$Low Air flow at AHU C-B or$T > Setpoint at inlet to Train B

AHU.None (See Remarks)Review of the schematics establishes that the AHUs A-A and C-B (on Unit 1 side) are independent.AHU C-B is interlocked to automatically start on Chiller B-B start.Either train of AHUs (Train A AHUs A-A and B-A or Train B AHUs C-B and D-B) is capable of providing cooling air to the Aux. Control Room.When both Air Handling Units are operating, the common ductwork static pressure does not exceed 6 in.

wg. duct design pressure.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 7 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-243WATTS BAR WBNP-9160-AHU-31-61Air Handling Unit D-B(Train B)Provides cooling air to maintain required temperatures for Shutdown Board Rooms safety-related equipment on the Unit 2

side.Fails to start; Fails while running.Fails to stop or starts while unit B-A is operating.

Mechanical Failure; Train B power

failureElectrical FailureAnnunciation of Shutdown Board Room HVAC System B-B Abnormal.

Indicating lights in MCR (0-HS-31-49A-B). AHU D-B running

light on MCC.Annunciation in the MCR.Loss of redundancy in cooling air to Unit 2 side Shutdown Board rooms and 480V Shutdown Board Room Unit

2 side.Increased pressure in supply duct.None.Redundant Train A Chiller A-A and AHU A-A on Unit 2 side will automatically start on:$Low DP at Circulating Water

Cooling Pump.$Low Air flow at AHU D-B or$T > Setpoint at inlet to Train B

AHU.None (See Remarks)Review of the schematics establishes that the AHUs B-A and D-B (on Unit 2 side) are independent.AHU D-B is interlocked to automatically start on Chiller B-B start.Either train of AHUs (Train A AHUs A-A and B-A or Train B AHUs C-B and D-B) is capable of providing cooling air to the Aux. Control Room.When both Air Handling Units are operating, the common ductwork static pressure does not exceed 6 in.

wg. duct design pressure.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 8 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-244WATTS BAR WBNP-91 7 80-PMP-31-36/1-AChilled Water Package A-A Cooling Water Circulating Pump0-PMP-31-49/1-BChilled Water Package B-B Cooling Water Circulating Pump Provides water to the Water Chiller

A-A loop.Provides water for to the Water Chiller B-B

loop.Fails to start; Fails while running.Fails to start; Fails while running.

Mechanical failure; Train A power failure; Control signal failure; start

signal failure; operator error (handswitch placed in wrong position).

Mechanical failure; Train B power failure; Control signal failure; start

signal failure; operator error (handswitch placed in wrong position).Annunciator 2-113 for 0-PDIS-31-101-A.

Indicating lights for 0-HS-31-400A in MCR.

Chilled water Temperature and Pressure indication on L-541.Annunciator 2-120 for 0-PDIS-31-131-B.

Indicator lights for 0-HS-31-49A in MCR.Chilled Water Temperature and Pressure indication on L-542.Loss of redundancy in supplying cooling air to the Shutdown Board Rooms of both units.Loss of redundancy in supplying cooling air to the Shutdown Board Rooms of both units.None.Redundant Train B Chiller B-B will automatically start on Lo DP at the

pump and will provide cooling water to AHUs C-B and D-B.None.Redundant Train A Chiller A-A will automatically start on Lo DP at the

pump and will provide cooling water to AHUs A-A and B-A.Control of 0-PMP-31-36/1-A is interlocked with Chiller A-A to automatically start after chiller start. Review of the control and schematic diagrams establishes the redundancy and independence of the Train A and Train B pumps.0-PMP-31-49/1-B is interlocked to automatically start after Chiller B-B start. Review of the control and schematic diagrams establishes the redundancy and independence of the Train A and Train B pumps.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 9 of 26)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-245WATTS BAR WBNP-87 9 10TCV-31-112Temperature Control Valve for AHU A-A.0-TCV-31-108Temperature Control Valve for AHU B-A.

Provides control of

water temperature to AHU A-A from Chiller A-

A by regulating the flow of chilled water to AHU.

Provides control of

water temperature to AHU B-A from Chiller A-

A by regulating the flow of chilled water to AHU.Spuriously bypass too much flow.Spuriously bypass too much flow.Mechanical failure; Control Air failure; Sensor failure.

Mechanical failure; Control Air failure; Sensor failure.See Remark #1.See Remark #1.Potential loss of redundancy of Train A Chiller A-A

and AHU A-A resulting in air temperature rise in Shutdown Board Room.Potential loss of redundancy of Train A Chiller A-A

and AHU B-A resulting in air temperature rise in Shutdown Board Room.None.Redundant Train B Chiller B-B and associated AHUs C-B and D-B can provide cooling air supply.See Remark #2.

None.Redundant Train B Chiller B-B and associated AHUs C-B and D-B can provide cooling air supply.See Remark #2.1.Local indication on L-551 of inlet air temperature to AHU A-A.2.Temp. rise in Shutdown rooms > Setpoint will automatically cause Train A Chiller with AHUs A-A and B-A to stop, and Train B with AHUs C-B and D-B to start.3.The temperature control valves for the AHUs are served by the Aux. Air Supply. The trains are separate.1.Local indication on L-538 of inlet air temperature to AHU B-A.2.Temp. rise in Shutdown rooms > Setpoint will automatically cause Train A Chiller with AHUs A-A and B-A to stop, and Train B with AHUs C-B and D-B to start.3.The temperature control valves for the AHUs are served by the Aux. Air Supply. The trains are separate.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 10 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-246WATTS BAR WBNP-87 11 120-TCV-31-142Temperature Control Valve for AHU C-B.0-TCV-31-138Temperature Control Valve for AHU D-B.

Provides control of

water temperature to AHU C-B from Chiller B-

B by regulating the flow of chilled water to AHU.

Provides control of

water temperature to AHU D-B from Chiller B-

B by regulating the flow of chilled water to AHU.Spuriously bypass too much flow.Spuriously bypass too much flow.

Mechanical failure; Control Air failure; Sensor failure.

Mechanical failure; Control Air failure; Sensor failure.See Remark #1.See Remark #1.Potential loss of redundancy of Train B Chiller B-B and AHU C-B resulting in air temperature rise in Shutdown Board Room.Potential loss of redundancy of Train B Chiller B-B and AHU D-B resulting in air temperature rise in Shutdown Board Room.None.Redundant Train A Chiller A-A and associated AHUs

A-A and B-A can provide cooling air supply.See Remark #2.

None.Redundant Train A Chiller A-A and associated AHUs

A-A and B-A can provide cooling air supply.See Remark #2.1.Local indication on L-537 of inlet air temperature to AHU C-B.2.Temp. rise in Shutdown rooms > Setpoint will automatically cause Train B Chiller with AHUs C-B and D-B to stop and Train A with AHUs A-A and B-A to start.3.The temperature control valves for the AHUs are served by the Aux. Air Supply. The trains are separate.1.Local indication on L-540 of inlet air temperatures to AHU D-B.2.Temp. rise in Shutdown rooms > Setpoint will automatically cause Train B Chiller with AHUs C-B and D-B to stop and Train A with AHUs A-A and B-A to start.3.The temperature control valves for the AHUs are served by the Aux. Air Supply. The trains are separate.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 11 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-247WATTS BAR WBNP-87130-BKD-31-2706Backdraft DamperPrevents backflow of cooling air through standby AHU C-B when AHU A-A is running.Provides flow path for air flow from

AHU.Fails to backseatFails to open (Stuck closed)

when AHU C-B is running (Train B)

Mechanical failure.

Mechanical failure.See Remark #1.Local position indicators on the

damper will indicate if damper is stuck open.

See Remark #2.See Remark #2.A) Loss of cooling air to room served by the AHUB) Bypass flow through the standby unit can cause standby fan to rotate in reverse. Due to loss of cooling to room. Standby unit is required to start but may fail as a result of motor overload to overcome the reverse rotation.

C) This would result in the total loss of cooling air in the Shutdown Board RoomsLoss of redundancy in cooling air flow from Shutdown Board Room.

None.None.Low flow from AHU

will automatically initiate Train "A" chiller and AHUs.1.Indirect indication of functional failure of AHU; MCR indication of AHU A-A and B-A motors running; local indication on L-551 of high inlet temp. to AHU A-A.2.Plant operations have an administrative procedure to verify that the damper is closed following the shutdown of its respective AHU.1.Normally opens when AHU is running.2.Indirect indication of functional failure of AHU; local indication on L-537 of inlet temperature to AHU C-B.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 12 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-248WATTS BAR WBNP-87140-BKD-31-2761Backdraft DamperPrevents backflow of cooling air through standby AHU D-B when AHU B-A is running.Provide flow path for air flow from

AHU.Fails to backseat.Fails to open (Stuck closed)

when AHU D-B is running (Train B)

Mechanical failure.

Mechanical failureSee Remark #1.Local position indicators on the

damper will indicate if damper is stuck open when the fan is idle.See Remark #2.A) Loss of cooling air to room served by the AHU.B) Bypass flow through the standby unit can cause standby fan to rotate in reverse. Due to loss of cooling to room, Standby unit is required to start but may fail as a

result of motor overload to overcome the reverse rotation.

C) This would result in the total loss of cooling air in the Shutdown Board Rooms.Loss of redundancy in cooling air flow from Shutdown board Room.

None.None.Low flow from AHU will automatically initiate Train "A" Chiller and AHUs.1.Indirect indication of functional failure of AHU; MCR indication of AHU B-A and A-A motors running; local indication on L-538 of high inlet temperature to AHU B-A.2.Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective AHU.1.Normally opens when AHU is running.2.Indirect indication of functional failure of AHU; local indication on L-540 of inlet temp. to AHU D-B.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 13 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-249WATTS BAR WBNP-87150-BKD-31-2705Backdraft DamperPrevents backflow of cooling air through standby AHU

A-A when AHU C-B is running.Provide flow path for air flow from

AHU.Fails to backseat.Fails to open (Stuck closed)

when AHU A-A is running.Mechanical failure.

Mechanical failure.See Remark #1. Local position indicators on the

damper will indicate if damper is stuck open.See Remark #2.A) Loss of cooling air to room served by the AHU.B) Bypass flow through the standby unit can cause standby fan to rotate in reverse. Due to loss of cooling to room, Standby unit is required to start but may fail as a

result of motor overload to overcome the reverse rotation.

C) This would result in the total loss of cooling air in the Shutdown Board Rooms.Loss of redundancy in cooling air flow from Shutdown Board Room.

None.None.Low flow from AHU will automatically initiate Train B Chiller and AHUs.1.Indirect indication of functional failure of AHU; MCR indication of AHU C-B and D-B motors running;

local indication on L-537 of inlet temperature to AHU C-B.2.Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective AHU.1.Normally opens when AHU is running.2.Indirect indication of functional failure of AHU; local indication on L-551 of inlet temperature to AHU A-A.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 14 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-250WATTS BAR WBNP-87160-BKD-31-2760Backdraft DamperPrevents backflow of cooling air through standby AHU

B-A when AHU D-B is running.Provide flow path for air flow from

AHU.Fails to backseat.Fails to open (Stuck closed)

when AHU B-A is running.Mechanical failure.

Mechanical failure.See Remark #1. Local position indicators on the

damper will indicate if damper is stuck open.See Remark #2.A) Loss of cooling air to room served by the AHU.B) Bypass flow through the standby unit can cause standby fan to rotate in reverse. Due to loss of cooling to room, Standby unit is required to start but may fail as a

result of motor overload to overcome the reverse rotation.

C) This would result in the total loss of cooling air in the Shutdown Board Rooms.Loss of redundancy in cooling air flow from Shutdown Board Room.

None.None.Low flow from AHU

will automatically initiate Train "B" chiller and AHUs.1.Indirect indication of functional failure of AHU; MCR indication of AHU D-B and C-B motors running;

local indication on L-540 of inlet temperature to AHU D-B.2.Plant operations has an administrative procedure to verify that the damper is closed following the shutdown of its respective AHU.1.Normally opens when AHU is running.2.Indirect indication of functional failure of AHU; local indication on L-538 of inlet temperature to AHU B-A.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 15 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-251WATTS BAR WBNP-87170-FAN-31-62-A Pressurizing Air Supply Fan B-A Provides pressur-ization to maintain 6.9kV Shutdown Board Room at slightly positive pressure with respect to atmosphere. Fails to start, fails while running.Fails to stop.

Mechanical failure; Train A power failure; Control signal failure.

Mechanical failure; Hot short in control wiring; Control signal failure; CIS Phase A Control signal failure.CRI Control Room Isolation signal -

Train A fails.Indicating lights in MCR (1-HS-31-62A) and CISP indicating lights in MCR (1-HS-31-62A).Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-62A).Loss of redundancy in providing pressurization to 6.9 kV Shutdown Board Room.See Remark #1.See Remark #2.

None.After trip due to lo suction flow to Fan A-A, the redundant Train B Fan D-B will automatically start.See Remark #2.1.The pressurizing fans are not required to mitigate the effects of a

DBE.2.Fans can be restarted after reset after Phase A CIS from Unit 1.

Review of the schematics establishes the separation and independence of the Train A and Train B fans.1.Fans can be stopped via HS-31-62 A or B.2.Over pressurization of 6.9 kV Shutdown Board Room A.Differential pressure switches will alarm if the P is not adequate and start standby CB emergency pressurizing fan during CRI mode.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 16 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-252WATTS BAR WBNP-87180-FAN-31-67-B Pressurizing Air Supply Fan C-B Provides pressuri-zation to maintain 6.9 kV Shutdown Board Room at slightly positive pressure with respect to atmosphere. Fails to start, fails while running.Fails to stop.

Mechanical failure; Train B power failure; Control signal failure.

Mechanical failure; Hot short in control wiring; Control signal failure; CIS Phase A Control signal failure.CRI Control Room Isolation signal -

Train A fails.Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-67A).Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-67A).Loss of redundancy in providing pressurization to 6.9 kV Shutdown Board Room.See Remark #1.See Remark #2.

None.After trip due to lo suction flow to Fan C-B, the redundant Train A Fan A-A will automatically start.See Remark #2.1.The pressurizing fans are not required to mitigate the effects of a

DBE.2.Fan can be restarted after reset after Phase A CIS from Unit 1.

Review of the schematics establishes the separation and independence of the Train A and Train B fans.1.Fans can be stopped via HS-31-67 A or B.2.Over pressurization of 6.9 kV Shutdown Board Room A.Differential pressure switches will alarm if the P is not adequate and start standby CB emergency pressurizing fan during CRI mode. Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 17 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-253WATTS BAR WBNP-91190-FAN-31-64-A Pressurizing Air Supply Fan A-A Provides pressuri-zation to maintain 6.9 kV Shutdown Board Room at slightly positive pressure with respect to atmosphere.Fails to start, fails while running.Fails to stop.

Mechanical failure; Train A power failure; Control signal failure.

Mechanical failure; Hot short in control wiring; Control signal failure; CIS Phase A Control signal failure.CRI Control Room Isolation signal -

Train A fails.Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-64A).Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-64A).Loss of redundancy in providing pressurization to 6.9 kV Shutdown Board Room.See Remark #1.See Remark #2.

None.After trip due to lo suction flow to Fan B-A, the redundant Train B Fan C-B will automatically start.See Remark #2.1.The pressurizing fans are not required to mitigate the effects of a

DBE.2.Fan can be restarted after reset after Phase A CIS from Unit 1.

Review of the schematics establishes the separation and independence of the Train A and Train B fans.1.Fans can be stopped via HS-31-64 A r B.2.Over pressurization of 6.9 kV Shutdown Board Room B. MCR testing will ensure that there is no over pressurization with fans running at full capacity.Differential pressure switches will alarm if the P is not adequate and start standby CB emergency pressurizing fan during CRI mode.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 18 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-254WATTS BAR WBNP-87200-FAN-31-68-B Pressurizing Air Supply Fan D-B Provides pressur-ization to maintain 6.9 kV Shutdown Board Room at slightly positive pressure with respect to atmosphere.Fails to start, fails while running.Fails to stop.

Mechanical failure; Train B power failure; Control signal failure.

Mechanical failure; Hot short in control wiring; Control signal failure; CIS Phase A Control signal failure.CRI Control Room Isolation signal -

Train A fails.Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-68A).Indicating lights in MCR and CISP indicating lights in MCR (1-HS-31-68A).Loss of redundancy in providing pressurization to 6.9 kV Shutdown Board Room.See Remark #1.See Remark #2.

None.After trip due to lo suction flow to Fan D-B, the redundant Train A Fan B-A will automatically start.See Remark #2.1.The pressurizing fans are not required to mitigate the effects of a

DBE.2.Fan can be restarted after reset after Phase A CIS from Unit 1.

Review of the schematics establishes the separation and independence of the Train A and Train B fans.1.Fans can be stopped via HS-31-68 A or B.2.Over pressurization of 6.9 kV Shutdown Board Room B. MCR testing will ensure that there is no over-pressurization with fans running at full capacity.Differential pressure switches will alarm if the P is not adequate and start standby CB emergency pressurizing fan during CRI mode.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 19 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-255WATTS BAR WBNP-87210-BKD-31-2756Permits airflow to Pressurizing Fan C-B.Isolates idle Fan C-B from running Fan

A-A.Fails to open (when Fan C-B is running).Fails to backseat.

Mechanical failure.

Mechanical failure.See Remark #1.Local position indicators on damper.See Remark #1. Local position indicators on damper.No air flow to fan C-B. Loss of redundancy in providing pressurizing air flow to Shutdown Board Rooms.Lo flow at FS-31-66 will be detected and automatically start fan A-A.See Remark #2.A) Loss of cooling air to room served by the fan.

None.Train A Fan A-A will supply the pressurizing air.

None.See Remarks #2.1.Indicating lights of Fan C-B powered and running (HS-31-67A) in MCR and CISP.2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.1.MCR and CISP indication of Fan A-A powered and running (HS 64A).2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 20 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-256WATTS BAR WBNP-91220-BKD-31-2755Backdraft DamperPermits airflow to Pressurizing Fan B-A.Isolates idle Fan B-A from running Fan

D-B.Fails to open (When Fan B-A is running).Fails to backseat.

Mechanical failure.

Mechanical failure.See Remark #1.Local position indicators on damper.See Remark #1.Local position indicators on damper.No air flow to fan B-A. Loss of redundancy in providing pressurizing air flow to Shutdown Board Rooms. Lo flow at FS-31-63 will be detected and automatically start fan D-B.See Remark #2.A) Loss of cooling air to room served by the fan.

None.Train B Fan D-B will supply the pressurizing air.

None.See Remark #2.1.Indicating lights of Fan B-A powered and running (HS-31-64A) in MCR and CISP.2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.1.MCR and CISP indication of Fan C-B powered and running (HS 67A).2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 21 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-257WATTS BAR WBNP-91230-BKD-31-2812Backdraft DamperPermits airflow to Pressurizing Fan A-A.Isolates idle Fan A-A from running Fan

C-B.Fails to open (When Fan BAA is running).Fails to backseat.

Mechanical failure.

Mechanical failure.See Remark #1.Local position indicators on damper.See Remark #1.Local position indicators on damper.No air flow to fan A-A. Loss of redundancy in providing pressurizing air flow to Shutdown Board Rooms. Lo flow on FS-31-65 will be detected and automatically start Fan C-B.See Remark #2.

A) Loss of cooling air to room served by the Fan.

None.See Remark #2.

None.See Remark #2.1.Indicating lights of Fan A-A powered and running (HS-31-62A) in MCR and CISP.2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.1.MCR and CISP indication of Fan C-B powered and running (HS 67A).2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 22 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-258WATTS BAR WBNP-91240-BKD-31-2811Backdraft DamperPermits airflow to Pressurizing Fan D-B.Isolates idle Fan D-B from running Fan

B-A.Fails to open (when Fan D-B is running).Fails to backseat.

Mechanical failure.

Mechanical failure.See Remark #1. Local position indicators on damper.See Remark #1.Local position indicators on damper.No air flow to fan D-B. Loss of redundancy in providing pressurizing air flow to Shutdown Board Room. Lo flow at FS-31-69 will be detected and automatically start fan B-A.See Remark #2.A) Loss of cooling air to room served by the Fan.

None.Train A Fan B-A will supply the pressurizing air.

None.See Remark #2.1.Indicating lights of Fan D-B powered and running (HS-31-68A) in MCR and CISP.2.The functioning of the Pressurizing Fans is not required for mitigating the effects of a DBE.1.MCR and CISP indication of Fan B-A powered and running (HS 62A).2.The functioning of the Pressurizing Fans is not required for mitigating the effects of DBE.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 23 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-259WATTS BAR WBNP-91251-FCO-31-291-ATornado Damper Train A Provides suction flow path for the Unit 1 6.9 kV Shutdown Board Room Pressurizing Fans.Provides suction flow path for the Train A 480 V Board Room Pressurizing Fan and AHU during non-tornado operations.Spuriously Closes (no tornado).Spuriously closes (no tornado).

Mechanical failure; Operator error (handswitch placed in wrong position).

Mechanical failure, operator error (handswitch placed in wrong position).Indicating lights in MCR (0-HS-31-34-A).

Mechanical Equipment Room indication. Locally, 1-ZS-31-291 status indication.Indicating light in MCR (0-HS-31-34-A).

Mechanical Equipment Room indication. Locally, 1-ZS-31-291 status indication.Loss of suction to Shutdown Board Room Press. fans on Unit 1 side.

Loss of pressurization of 6.9 kV Shutdown Board Room A.See Remark #2.Loss of Train A cooling and pressurizing to 480 V Board Room 1A and Battery Room

1.See Remark #2.

None.See Remark #2.See Remark #2.1.Fails as is. Normally open.2.Pressurizing fans are not required to mitigate the effects of a DBE.1.The damper 1-FCO-31-291 serves both the Shutdown Board Room and the Auxiliary Board Rooms subsystems as noted for this function.2.480 V Board Room 1B and Battery Room II provide the redundancy.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 24 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-260WATTS BAR WBNP-91 26 272-FCO-31-291-ATornado Damper Train A 0-FCO-31-276-ATornado Damper Train A Provides suction flow path for the Unit 2 6.9 kV Shutdown Board Rooms Pressurizing Fans.Provides suction flow path to the Train A 480 V Board Room Pressurizing fan and AHU during non-tornado operations.

Provides suction flow path to the Shutdown Board Rooms Pressurizing Fans on the

Unit 1 side during non-tornado operations.Spuriously Closes(no tornado)Spuriously Closes(no tornado)Spuriously Closes(no tornado)

Mechanical failure; Operator error (handswitch placed in wrong position).

Mechanical failure; Operator error (handswitch placed in wrong position).

Mechanical failure; Hot short in electrical supply.Indicating lights in MCR (0-HS-31-32-A).

Mechanical Equipment Room indication. Locally, 2-ZS-31-291 status indication.Indicating lights in MCR (0-HS-31-32-A).

Mechanical Equipment Room indication. Locally, 2-ZS-31-291 status indication.Indicating light in MCR (0-HS-31-34-A).

Mechanical Equipment Room indication. Locally, 0-ZS-31-276 status indication.Loss of suction to Shutdown Board Room Press. fans on Unit 2 side.

Loss of pressurization of 6.9 kV Shutdown Board Room B.See Remark #2.Loss of Train A cooling and pressurizing to 480 V Board Room 2A and Battery Room IV.See Remark #2.Loss of suction to Shutdown Board Room Press. fans on Unit 1 side.

Loss of pressurization function to 6.9 kV Shutdown Board

Room A.None.See Remark #2.See Remark #2.

None. See Remark #2.1.Fails as is. Normally open.1.The damper 2-FCO-31-291 serves both the Shutdown Board Rooms and the Auxiliary Board Rooms subsystems as noted for this function.2.Board Room 2B and Battery Room III provide the redundancy.1.Fails as is. Normally open.2.Pressurizing fans are not required to mitigate the effects of a DBE.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 25 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-261WATTS BAR WBNP-91 28 29 300-FCO-31-275-BTornado Damper Train B0-FCO-31-278-ATornado DamperTrain A0-FCO-31-277-BTornado Damper Train B Provides suction flow path to the Shutdown Board Rooms Pressurizing Fans on the

Unit 1 side during non-tornado operations.

Provides suction flow path to the Shutdown Board Rooms Pressurizing Fans on the

Unit 2 side during non-tornado operations.

Provides suction flow path to the Shutdown Board Rooms Pressurizing Fans on the

Unit 2 side during non-tornado operations.Spuriously Closes(no tornado).Spuriously Closes(no tornado)Spuriously Closes (no tornado)

Mechanical failure; Hot short in electrical supply.

Mechanical failure; Hot short in electrical supply.

Mechanical failure; Hot short in electrical supply.Indicating lights in MCR (0-HS-31-35-B).

Mechanical Equipment Room indication. Locally, 0-ZS-31-275 status indication.Indicating lights in MCR 0-(HS-31-32-A).

Mechanical Equipment Room indication. Locally, 0-ZS-31-278 status indication.Indicating lights in MCR (0-HS-31-33-B).

Mechanical Equipment Room indication. Locally, 0-ZS-31-277 status indication.Loss of suction due to Shutdown Board Room Press. fans on Unit 1 side. Loss of pressurization function to 6.9 kV Shutdown Board

Room A.Loss of suction due to Shutdown Board Room Press. fans on Unit 2 side. Loss of pressurization function 60 6.9 kV Shutdown Board

Room B.Loss of suction due to Shutdown Board Room Pressurization fans on Unit 2 side. Loss of pressurization function to 6.9 kV Shutdown Board

Room B.None.See Remark #2.

None.See Remark #2.

None.See Remark #2.1.Fails as is. Normally open. Motor operated valve.2.Pressurizing fans are not required to mitigate the effects of a DBE.1.Fails as is. Normally open.2.Pressurizing fans are not required to mitigate the effects of a DBE.1.Fails as is. Normally open.2.Pressurizing fans are not required to mitigate the effects of a DBE.Table 9.4-9 Failure Modes and Effects Analysis Subsystem: Shutdown Board Room Air Conditioning and Ventilation (Sheet 26 of 26

)Item No.ComponentFunctionFailure ModePotential CauseMethod of DetectionEffect on SystemEffect on PlantRemarks AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-262WATTS BAR WBNP-91THIS PAGE INTENTIONALLY BLANK AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMS9.4-263WATTS BARWBNP-63Table 9.4-10 Deleted by Amendment 56

9.4-264AIR CONDITIONING, HEATING, COOLING, AND VENTILATION SYSTEMSWATTS BARWBNP-63Table 9.4-11 Deleted by Amendment 56 AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-265WATTS BAR WBNP-91Figure 9.4-1 Powerhouse, Control Building Units 1 & 2 Flow Diagram for Heating, Ventilating, and Air Conditioning Air Flow

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-266WATTS BAR WBNP-91Figure 9.4-2 Powerhouse Units 1 & 2 Flow Diagram for Air Conditioning Chilled Water AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-267WATTS BAR WBNP-91Figure 9.4-3 Powerhouse, Control Building Units 1 & 2 Flow Diagram for Air Conditioning Chilled Water AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-268WATTS BAR WBNP-91Figure 9.4-4 Powerhouse, Control Building Units 1 & 2 Electrical Control Diagram Air Conditioning AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-269WATTS BAR WBNP-91Figure 9.4-4a Control Building Units 1 & 2 Electrical Air Conditioning Control Diagram - Chilled Water AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-270WATTS BAR WBNP-91Figure 9.4-5 Control Building units 1 & 2 Electrical Air Conditioning Control Diagram - Chilled Water AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-271WATTS BAR WBNP-91Figure 9.4-6 Control Building Units 1 & 2 Electrical Logic Diagram Air Conditioning System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-272WATTS BAR WBNP-91Figure 9.4-7 Control Building Units 1 & 2 Electrical Logic Diagram Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-273WATTS BAR WBNP-91Figure 9.4-8 Powerhouse Units 1 & 2 Auxiliary Building Flow Diagram, Heating, and Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-274WATTS BAR WBNP-91Figure 9.4-9 Auxiliary Building Units 1 & 2 Electrical Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-275WATTS BAR WBNP-91Figure 9.4-10 Auxiliary Building Units 1 & 2 Electrical Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-276WATTS BAR WBNP-91Figure 9.4-11 Powerhouse Units 1 & 2 for Containment Ventilation Sytem Control Diagram AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-277WATTS BAR WBNP-89Figure 9.4-12 Powerhouse Units 1 & 2 Electrical Control Diagram for Radiation Monitoring System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-278WATTS BAR WBNP-91Figure 9.4-13 Powerhouse Units 1 & 2 Auxiliary Building Flow Diagram for Heating, Cooling, and Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-279WATTS BAR WBNP-91Figure 9.4-14 Auxiliary Building Units 1 & 2 Flow Diagram for Heating, Cooling, and Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-280WATTS BAR WBNP-92Figure 9.4-15 Powerhouse Units 1 & 2 Auxiliary Building Flow Diagram for Heating, Ventilation and Air Conditioning Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-281WATTS BAR WBNP-91Figure 9.4-16 Powerhouse Units 1 & 2 Auxiliary Building & Additional Eqpt Bldg Flow Diagram for Heating, Cooling & Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-282WATTS BAR WBNP-91Figure 9.4-17 Powerhouse Units 1 & 2 Electrical Control Diagram for Containment Ventilating System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-283WATTS BAR WBNP-91Figure 9.4-18 Turbine Building Units 1 & 2 and Control Flow Diagram for Heating and Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-284WATTS BAR WBNP-89Figure 9.4-19 Powerhouse Units 1 & 2 Flow Diagram Building Heating AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-285WATTS BAR WBNP-89Figure 9.4-20 Powerhouse Unit 2 Flow Diagram Building Heating AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-286WATTS BAR WBNP-91Security Information Withheld under 10CFR 2.390(d)(1)

[s5]SECURITY SENSITIVEFigure 9.4-21 Pumping Stations Units 1 & 2 Mechanical Heating and Ventilating[e5]

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-287WATTS BAR WBNP-91Figure 9.4-22 Diesel Generator Building Units 1 & 2 Flow and Control Diagram for Heating, Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-288WATTS BAR WBNP-89Figure 9.4-22a Additional Diesel Generator Building Units 1 & 2 Flow and Control Diagram for Heating and Ventilating Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-289WATTS BAR WBNP-89Figure 9.4-22b Additional Diesel Generator Building Units 1 & 2 Electrical Logic Diagram for 5th Diesel Generator Ventilator S ystem AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-290WATTS BAR WBNP-91Security Information Withheld under 10CFR 2.390(d)(1)

[s5]SECURITY SENSITIVEFigure 9.4-22c Additional Diesel Generator Building Mechanical Heating and Ventilating[e5]

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-291WATTS BAR WBNP-91Security Information Withheld under 10CFR 2.390(d)(1)

[s5]SECURITY SENSITIVEFigure 9.4-23 Diesel Generator Building Mechanical Heating and Ventilating[e5]

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-292WATTS BAR WBNP-91Security Information Withheld under 10CFR 2.390(d)(1)

[s5]SECURITY SENSITIVEFigure 9.4-24 Diesel Generator Building Mechanical Heating and Ventilating[e5]

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-293WATTS BAR WBNP-91Figure 9.4-24a Diesel Generator Building Mechanical Heating and Ventilation AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-294WATTS BAR WBNP-91Figure 9.4-25 Diesel Building Units 1 & 2 Electrical Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-295WATTS BAR WBNP-91Figure 9.4-26 Powerhouse Unit 1 Electrical Control Diagram for Containment Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-296WATTS BAR WBNP-91Figure 9.4-27 Powerhouse Unit 1 Electrical Control Diagram for Containment Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-297WATTS BAR WBNP-91Figure 9.4-28 Reactor Building Units 1 & 2 Flow Diagram for Heating and Ventilation Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-298WATTS BAR WBNP-89Figure 9.4-28a Powerhouse Reactor Building Unit 2 Flow Diagram Heating & Ventilation Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-299WATTS BAR WBNP-91Figure 9.4-29 Powerhouse Unit 1 Electrical Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-300WATTS BAR WBNP-91Figure 9.4-30 Powerhouse Unit 1 Electrical Control Diagram for Containment Ventilating System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-301WATTS BAR WBNP-89Figure 9.4-30 Powerhouse Unit 2 Electrical Control Diagram Containment Ventilating System (Sheet A)

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-302WATTS BAR WBNP-89Figure 9.4-30 Powerhouse Unit 1 Electrical Control Diagram Containment Ventilating System (Sheet B)

AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-303WATTS BAR WBNP-91Figure 9.4-31 Powerhouse Unit 1 Electrical Control Diagram for Containment Ventilating System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-304WATTS BAR WBNP-91Figure 9.4-32 Powerhouse Unit 1 Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-305WATTS BAR WBNP-91Figure 9.4-33 Powerhouse Unit 1 Electrical Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-306WATTS BAR WBNP-91Figure 9.4-34 Powerhouse Unit 1 Electrical Logic Diagram for Ventilation System AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-307WATTS BAR WBNP-91Figure 9.4-35 Powerhouse Post-Accident Sampling System Unit 1 Flow Diagram for Heating, Ventilating and Air Conditioning Air Flow AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-308WATTS BAR WBNP-91Figure 9.4-36 Auxiliary Building Units 1 & 2 Electrical Post-Accident Sampling System Logic Diagram AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-309WATTS BAR WBNP-91Figure 9.4-37 Auxiliary Building Units 1 & 2 Electrical Post-Accident Sampling Control Diagram AIR CONDITIONING, HEATING, COOLING AND VENTILATION SYSTEMS9.4-310WATTS BAR WBNP-91THIS PAGE INTENTIONALLY BLANK OTHER AUXILIARY SYSTEMS 9.5-1WATTS BARWBNP-92 9.5 OTHER AUXILIARY SYSTEMS 9.5.1 Fire Protection SystemThe WBN Fire Protection Program is described in the WBN Fire Protection Report.[2][3][4][5] For interface with a auxiliary feedwater system, see Section 10.4.9.

9.5.1.1 Deleted by Amendment 87 9.5.1.2 Deleted by Amendment 87

9.5.1.3 Deleted by Amendment 87

9.5.1.4 Deleted by Amendment 87

9.5.1.5 Deleted by Amendment 87

9.5.2 Plant Communications System 9.5.2.1 Design BasesInterplant and/or Offsite SystemsThe design basis for interplant and/or offsite communications is to provide dependable systems to ensure reliable service during normal plant operation and emergency conditions.The primary interplant offsite communications systems are microwave radio, fiber optics circuits, telephone systems and radio systems.See Section 9.5.2.3 for a general description of each system. Intraplant Communications The design basis for the intraplant communications is to provide sufficient equipment of various types such that the plant has adequate communications to start up, continue safe operation, or shutdown safely.The primary intraplant communications systems are the TSS telephone system, intercomss, sound powered telephones, two-way VHF cellular radios, VHF radio paging, codes (code call is not used), alarms (accountability/evacuation and fire/medical), and paging.See Section 9.5.2.2 for a general description of each system.

9.5.2.2 General Descripti on Intraplant CommunicationsThe plant communications systems are installed and maintained by TVA with the exception of the cellular radio system which is maintained by the cell radio provider. The following paragraphs describe the basic functions of the intraplant communications systems.

9.5-2OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92 Telephone SystemTelephone Switching System (TSS) - A TSS is installed to provide primary 2-way voice communications and data transmission throughout the Watts Bar Nuclear Plant as well as access to offsite circuits. TThe Node 1 and Node 2 TSSs are powered from separate 48V dc systems. Each 48V system consists of battery chargers, a regulating power board, and a 48V battery. Each battery charger is capable of assuming the total load for its respective Node. The selected charger provides 48V dc to its TSS with the battery available as needed. Each battery is sized to carry the load at full capacity for 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> without the chargers. The Node 1 chargers are powered by dual ac voltage sources supplied from train A and train B diesel-backed boards. The Node 2 chargers are powered by dual ac voltage sources. The main source is the construction sub-station, and the other is from the telephone diesel generator unit.

OTHER AUXILIARY SYSTEMS 9.5-3WATTS BARWBNP-90Sound-Powered Telephone SystemsWPlant Operation Systems - The primary purpose of these systems is to provide communications for maintenance and operations personnel. There are 7 separate systems provided for each unit.Backup Control Center System - The primary purpose of this sound powered system is to pr ovide alternative communications between the auxiliary control room and other stations which must be manned to shutdown the reactor if the MCR is abandoned. This system consists of two completely redundant subsystems. Each subsystem is wired directly and independently of all other communications systems. Wiring routes avoid the spreading room, unit control rooms, and auxiliary instrument rooms. Sound-powered equipment and circuits are provided in the Diesel Generator Buildings, the 480V ac shutdown board rooms, the 6.9 kV ac shutdown board rooms, and the auxiliary control room.Health Physics System - The primary purpose of this sound powered telephone system is to provide an alternate communications link between the health physics office and the MCR. A direct dedicated circuit is provided between the health physics office and the Unit control room (physically on the electrical control area desk).Diesel Building to Main Control Room - The primary purpose of this sound powered telephone system is to provide an alternat e communications link between the Diesel Generator Building and main control room. A direct dedicated circuit is provided between the shielded waiting room in the Diesel Generator Building and the MCR at the diesel generator control panel.Closed-Circuit Television Portable closed circuit television systems are provided, when necessary, for remotely viewing radwaste packaging operation, refueling operations, area and equipment surveillance, and maintenance activities. Codes, Alarms, and Paging SystemThe codes, alarms, and paging (CAP) system is one system that combines assembly and accountability alarm, fire and medical emergency alarm, and paging. Control logic, tone generation, and power and signal distribution equipment is located in the communications room with speakers with solid-state amplifier as end devices located throughout the plant. All alarms are controlled from the MCR. The assembly/accountability and paging alarms are also controllable from the auxiliary control room. Paging may be accessed from selected TSS telephones. Paging may also be accessed by paging handsets in the main and auxiliary control room.The CAP system operational priority sequence is fixed by relay logic as follows:

(1)Site Assembly alarm (2)Fire and medical emergency alarm (3)Paging 9.5-4OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92 Paging can be advanced to a higher priority in emergencies by using the evacuation alarm control unit cancel push button.Design consideration has been given to increase system reliability with the following features provided:

(1)Redundant operating centers.

(2)Three separate tone generator units.

(3)Two physically separate power distribution networks with approximately half of the amplifier-speaker units in each area of the plant fed from each fuse panel via alarm-type fuses.

(4)Redundant chargers are used and can be switched into service as required.

(5)DC supervision of each individual audio pair.

(6)Isolation of evacuation alarm actuating devices.

(7)Electrical separation of amplified-speakers in each area into two circuits such that adequate coverage can be maintained in the event of one circuit failure.Radio SystemOnsite Radio Paging System - The primary purpose of this system is to provide onsite paging of key plant personnel. This system, is accessible from the TSS telephone system.Inplant VHF Radio System - The primary purpose of this system is to provide voice communications throughout the plant for plant operations and maintenance personnel.

This system consists of several repeaters, numerous remote control units, and portable VHF radios. One or more repeaters may be used by the fire brigade for communications during a fire emergency. Nuclear Security personnel also have access to these repeaters as an alternative to the Nuclear Security Radio System.Inplant Cellular Radio System - The primary purpose of this system is to provide voice communications throughout the plant and owner controlled property for use by operations and maintenance personnel. The system consists of a cell site, remote interface unit (to interface with the inplant distributed antenna system), and cell radio/phones. Nuclear Security and Fire Operat ions also have access to this system.

9.5.2.3 General Descri ption Interplant SystemMicrowave RadioMicrowave circuit provides access to the power system control center (PSCC). Redundant 24V dc-dc converters supplied from the 48V dc telephone power system are installed for the exclusive use of this microwave circuit.

OTHER AUXILIARY SYSTEMS 9.5-5WATTS BARWBNP-92 Fiber Optic CircuitThe fiber optic circuit provides high speed digital communication connecting major communication centers and administrative offices through TVA. This fiber optic circuit is integrated into the 161kV insulated shield wire. Electro-optical interface and channel equipment are located in Telecommunications Node 2 Building.Telephone System Commercial Telephone Service - Public telephone service is provided to all TSS telephones with proper class of service, to pay telephones, and to dedicated data circuits.Emergency Notification System (ENS) - The primary purpose of this telephone circuit is to provide a direct circuit from Watts Bar Nuclear Plant to the NRC in the event of a serious emergency as well as ongoing information on plant system, status and parameters at the nuclear plant reactor. A dedicated telephone line that is independent of the public telephone switching network is provided for the NRC.Health Physics Network (HPN) - The primary function of this telephone circuit is to report directly to the NRC on radiological and meteorological conditions as well as assessment of trends and the need for protective measures on-site and off-site. A dedicated telephone line that is independent of public telephone switching network is provided for the NRC.Transmission & Power Supply - The primary purpose of this system is to provide communications for Transmission & Power Supply engineers, but it may also be used by plant operations personnel during emergencies. This system is capable of contacting local mobile units and other TVA power generating facilities.Nuclear Security Radio - The primary purpose of this system is to provide effective communications between all Nuclear Security officers. Emergency Radio Communication System - This system is integrated with inplant repeater system for coordination with field monitoring teams and other personnel.Sheriffs' Radio - The primary purpose of this system is to provide communications between Nuclear Security officers and the Meigs and Rhea County sheriffs. 9.5.2.4 EvaluationThe following evaluation is intended to establish adequacy and redundancy of the plant communications systems design.Interplant Systems There are four basic types of plant-to-offsite communications: micr owave radio, fiber optics circuits, radio, and telephone systems. The availability of these systems during or after an emergency is enhanced by the fact that each enters the plant via different means.

9.5-6OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92 The redundancy of the communications systems is of further significance. The microwave and fiber optics equipment design employs redundancy both in the channelizing and in the RF circuitry. The microwave system is powered from a battery-battery charger system through parallel-connected, redundant dc-dc converters. Each charger is fed from two separate ac sources, and each battery is capable of operating its system for a minimum of three hours without chargers. The major electronic portions of the microwave are housed in the communications room which is located in the Control Building (Node 1). This building is a Seismic Category I structure.The commercial telephone lines are terminated in Bell Hut and extend to Node 1 and 2 and from there to instruments located throughout the plant via the TSS. Local central office lines are available in the control room in the event of the loss of the TSS. The Transmission & Power Supply radio have no components in the communications room and, therefore, would not be affected by the total destruction of this room. The Nuclear Security and Sheriffs RCUs in the Secondary Alarm Station (SAS) would be affected by the total destruction of the communication room and would be inoperable. Hand held radios would still be available to communicate from the SAS. The emergency radio communications system, however, depends on equipment in the communications room and would be inoperative. All of the VHF radio systems are powered by battery- and/or diesel-backed ac sources and would remain operative following loss of offsite power. Refer to Figure 9.5-19 for availability of interplant communications during various postulated conditions. Intraplant System The automatic telephone equipment is one of the primary systems is designed so that failures in individual switches or lines do not interrupt service. However, such failures are annunciated and repairs are made promptly. The main (Node 1) switching equipment for this system is located in the communications room which is in a Seismic Category I building. Communication between TSS phones within seismic Category I buildings is through Node 1. In times of emergency, the TSS can be programmed to limit access only to key people to ensure that they will always have telephone service. The codes, alarms (assembly/accountability) and paging system is designed for survivability with the following features:

(1)Duplicate operating locations: one in the main control room and the other in the auxiliary control room. Isolation of the duplicate controls is provided in the communications room.

OTHER AUXILIARY SYSTEMS 9.5-7WATTS BARWBNP-92 (2)Three tone generator consoles powered from two separate sources: (a)The operating console is normally aligned to the A source.(b)A standby console which automatically is inserted upon power failure of the operating console. The standby console is normally aligned to the B source. It may also be manually switched at any time.(c)A third console which may be manually substituted for either of the other consoles.(3)Plug-in features: (a)The tone generators are solid-state plug-in devices.(b)The amplifier in the speaker unit is solid-state, easily unplugged and replaced.(4)The power-leads to each speaker-amplifier are fused and annunciated.

(5)The signal-leads to each speaker-amplifier are supervised with dc while idle. Any occurrence which causes a short of the signal-leads will cause the fuse to blow and annunciate. The rest of the units will function normally with single or multiple open-circuited signal-leads to individual speaker-amplifiers.

(6)There are two sources of 24V dc power distributed to the speaker- amplifiers and approximately half in each area of the plant are supplied from each source. Each source is quite reliable since it is supplied from chargers which are backed up by batteries capable of supplying the load for three hours.The failure of the TSS equipment will not impair the use of the paging equipment from the local stations located at the unit operator's desk or the auxiliary control room.The sound-powered telephone systems are completely independent of power, each other, and all other systems provided. As long as a complete metallic path exists between instruments, communications can be maintained since the instruments supplied with these systems are very rugged and will successfully withstand high shocks, negligence, and abuse. If permanently installed wires are rendered unusable for any reason, a temporary pair of wires can be used with the sound-powered

instruments.Neither the Inplant VHF Radio System nor the Inplant Cellular Radio System have any components in the communications room and, therefore, would not be affected by the total destruction of this room. The Onsite Radio Paging System, however, depends on equipment located in the communications room and would be inoperative. The Inplant VHF Radio System, the Cellular Radio System, and the Onsite Radio Paging System are powered by battery- and/or diesel-backed ac sources and would remain operative following loss of offsite power.

9.5-8OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92Refer to Figure 9.5-19 for availability of intraplant communications during various postulated conditions.9.5.2.5 Inspection and TestsThe two communication systems are covered by Special Performance Tests(SPT-251-02 and SPT-252-02):

(1)The sound-powered telephone systems provided for the backup control center, health physics office, and Diesel Building shielded room; OTHER AUXILIARY SYSTEMS 9.5-9WATTS BARWBNP-89 (2)The codes, alarms, and paging system.All systems are carefully installed and checked for proper operation initially by construction forces. Routine maintenance is performed by operating personnel on a regular basis and includes such items as checking for proper switch operation, checking for proper operating levels, visual inspection, etc.The most comprehensive testing, however, results from the heavy daily usage of the equipment and the subsequent reports of any of the users. Individual power failures in the equipment are annunciated.9.5.3 Lighting Systems9.5.3.1 Design BasesThere are three basic lighting systems in the plant designated as follows: normal, standby, and emergency. These systems are designed in accordance with TVA design guides and standards which use the recommendations of the Illuminating Engineering Society of North America as their basis, and good engineering practice to provide the required illumination necessary for safe conduct of plant operations and under normal conditions to make the plant personnel as comfortable as possible.The normal lighting system is designed to economically provide the amount and quality of illumination to meet normal plant operations and maintenance requirements.The standby lighting system upon loss of the normal lighting system, provides adequate illumination for the safe shutdown of the reactor and the evacuation of personnel from vital areas of the plant if the need should occur. It forms an integral part of the normal lighting requirements but is fed from an entirely independent source.The emergency lighting system is composed of two separate systems: (1) The 125V dc lighting system, which is designed to provide immediately the minimum illumination level in areas vital to the safe shutdown of the reactor for the period required for diesel loading or upon loss of ac auxiliary power for the duration of capacity of the 125V vital dc batteries and (2) an individual eight-hour battery pack network, which is used to supplement the 125V dc emergency lighting to provide emergency lighting in areas that must be manned for safe shutdown; and for access and egress to and from fire areas, which meet the requirements of 10CFR50, Appendix R, III.J. Other battery pack units are provided for building egress for personnel safety purposes.

9.5-10OTHER AUXILIARY SYSTEMS WATTS BARWBNP-929.5.3.2 Description of the Plant Lighting SystemAll plant lighting systems have the following features in common: adequate capacity and rating for the operation of the loads connected to the systems, independent wiring and power supply, overcurrent protection for conductor and equipment using nonadjustable inverse time circuit breakers, copper conductor with 600-volt insulation run in metal raceways.The insulated cable used inside the primary containment areas is resistant to nuclear radiation and chemical environmental conditions in this area.

OTHER AUXILIARY SYSTEMS 9.5-11WATTS BARWBNP-90The plant lighting system consists of three basic schemes, the first of which is the normal lighting. This system is for general lighting of the plant: the major power supply is through two alternate feeders from the 6.9kV common boards A and B to selective and interrupter switch and 3-phase 6900-120/208-volt ac transformers, feeding a lighting board. These lighting boards are located in the Turbine and Auxiliary Buildings of the main plant. Other lighting boards in the Service Building, Office Buildings, gatehouse, etc., are fed from 480V boards through 3-phase 480-120/208V ac transformers. These lighting boards feed the normal lighting cabinets, designated by the prefix LC___, distributed throughout the main plant. In the MCR, alternate rows of fixtures or alternate fixtures are fed from different lighting boards to prevent total blackout in a particular area in case of failure of one of the other lighting boards or cabinets.The second system is the standby lighting, which forms a part of the normal lighting requirements and is normally energized at all times. This system is fed from 480V Reactor MOV boards 1A2-A, 1B2-B, 2A2-A, and 2B2-B to 3-phase 480-120/208V ac transformers to each standby lighting cabinet, designated by the prefix LS___ . The Reactor MOV boards have a normal and alternate ac power supply and in event of their failure are fed from the standby diesel generators. The cable feeders to the standby cabinets located in the Seismic Category I structure are routed in redundant raceways and the fixtures are dispersed among the normal lighting fixtures.The third lighting system is referred to as the emergency system. It consists of two systems as described in Section 9.5.3.1. The 125V dc emergency lighting system is electrically held in the off position until a power failure occurs on the associated standby lighting systems. Then the emergency lighting cabinets, designated by the prefix LD___, are automatically energized from the 125V dc vital battery boards. This system is an essential supporting auxiliary system for the ESF, and the cable feeders to the LD cabinets are routed on the redundant ESF cable tray system or in conduit. The fixtures are incandescent type and are dispersed among the normal and standby fixtures with alternate emergency fixtures being fed from redundant power trained LD cabinets.The individual eight-hour battery pack emergency lighting system is automatically held in the de-energized state until loss of the normal ac supply. A charger monitors battery voltage and charges on fast rate when necessary. Solid-state circuits continually monitor both ac and dc current. The transfer switch circuit instantly connects lamps to battery on ac failure and disconnects them when normal power is restored. In some cases, the lamp heads are mounted remote from the units to obtain adequate light distribution.9.5.3.3 Diesel Generato r Building Lighting SystemThe Diesel Generator Building lighting cabinets are fed through 480-208/120V 3-phase local lighting transformers, which in turn are fed from the diesel 480V auxiliary boards respectively. Each of these auxiliary boards has dual feeders from the 480V shutdown boards during normal operation. In the event of an ac power failure to the 480V shutdown boards, the diesel should start within the prescribed time to provide the 480V ac power requirements for the safe shutdown of the plant through the standby feeders 9.5-12OTHER AUXILIARY SYSTEMS WATTS BARWBNP-89to the 480V shutdown boards, thus supplying power again to the Diesel Generator Building lighting transformers. Each diesel generator unit has a lighting cabinet which supplies the normal lighting for that unit. Low-level lighting required for maintenance or operating procedures and ingress/egress in the event of loss of normal lighting is supplied from fixtures with a self-contained battery and inverter charger and also individual eight-hour battery pack lighting units. 9.5.3.4 Safety Related Func tions of the Lighting SystemsThe lighting system is adequate for the operation and evacuation of the plant to the extent that the supports for the components of the system, that are located in areas of Seismic Category I structures containing safety-related equipment are qualified to prevent failure that could impair the functioning of any safety-related plant feature.Lighting systems are classified as non-safety related. However, due to their functions, standby and emergency lighting systems shall be of a high reliability design so as to ensure necessary illumination in areas of the plant needed for operation of safe shutdown equipment and in access and egress routes thereto.

OTHER AUXILIARY SYSTEMS 9.5-13WATTS BARWBNP-929.5.3.5 Inspection and Testing RequirementsFollowing the complete installation of a lighting system, it will be tested and inspected and short circuits, grounding of potential conductors, other faults, etc. will be eliminated and damaged or nonoperable fixtures replaced or repaired. The operation of the lighting system shall be observed during the initial and periodic testing of the normal and alternate feeder systems and during the 125V dc emergency power tests to the various boards from which these emergency lighting systems are fed. Maintenance and relamping of the normal and standby lighting systems shall be according to routine plant operating procedures.The 125V dc emergency lighting system shall be tested periodically by tripping the holding coil circuit fed from the LS standby cabinet, thus closing the feeder circuit to the LD emergency cabinet. A written record of dates and results of these tests shall be maintained by plant personnel responsible for these tests.The individual eight-hour battery pack lighting units will be tested periodically to ensure that the lamps are operational in according with routine plant procedures.9.5.4 Diesel Generator Fuel Oil Storage and Transfer System9.5.4.1 Design BasisThe diesel generator fuel oil system provides independent storage and transfer capacity to supply the four diesel generator units operating at continuous ratings with No. 2 Fuel Oil for a period of seven days without replacement. References to the Fifth or Additional Diesel have been deleted in Sections 9.5.4 through 9.5.8. Figure 8.3-1A is retained for information. The buildings are Seismic Category I structures and will withstand the affects of tornadoes, credible missiles, floods, rain, snow, or ice, as defined in Chapter 3, Section 3.3, 3.4, and 3.5.The design code requirements for the system are as follows:

(1)Diesel Generator Building 7-day fuel oil storage tanks - Code for Unfired Pressure Vessels, ASME Section VIII. Division I.

(2)Piping from the 7-day fuel oil storage tanks to the interface with the skid-mounted diesel generator unit fuel oil piping - Boiler and Pressure Vessel Code, ASME Section III, Class 3 (Per NFPA Code 30-1973).Skid mounted piping and components for the fuel oil system were designed, manufactured and installed in accordance with ANSI B31.1. This subsystem performs a primary safety function and is supported to Seismic Category I requirements. The scope of this work was done to meet 10CFR50, Appendix B quality assurance requirements. Future modifications performed on this subsystem piping are required to meet the intent of ASME Section III, Class

3.

9.5-14OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92 (3)Remaining piping, valves, pumps, and associated equipment - Power Piping Code, ANSI B31.1-1973.The 7-day diesel fuel oil storage tanks are designed for embedment within the Diesel Generator Building foundation. The fuel oil day tanks are skid-mounted on the diesel generator units. The diesel fuel oil system for the diesel generator units meets the single failure criterion. That portion of the system from the 7-day storage tanks to the diesel generator units meets Seismic Category I requirements. The remainder of the system within the Diesel Generator Building meets Seismic Category I (L) requirements.

9.5.4.2 System DescriptionThe flow diagram of the diesel generator fuel oil system is shown in Figure 9.5-20. The control and logic diagrams are shown in Figures 9.5-21 and 9.5-22, respectively.The diesel generator fuel oil system consists of four 7-day embedded storage tank assemblies, one assembly for each diesel generator unit, with their associated day tanks, pumps, valves, and piping. The 7-day tanks are embedded in the Diesel Generator Building substructure and have a capacity of approximately 70,248 gallons of fuel for each diesel generator unit. The fuel day tanks (one per diesel engine) are mounted to the diesel engine skid and were supplied by the diesel generator vendor. These tanks have a capacity of approximately 550 gallons.Level transmitters are provided on the 7-day storage tank assemblies to provide the following functions:

(1)Provide local fuel level indication.

(2)Annunciate an alarm in the MCR when the fuel level approaches a seven-day supply.(3)Annunciate an alarm in the MCR on high level above the pump shut-off setting.(4)Provide an interlock with the outside transfer pump at the yard storage tanks to shut off the pump automatically on high level of any of the four 7-day tanks which is being filled. Provide a high level interlock with the DG transfer pump in the DG Building when transferring fuel to fill any of the 7-day tanks from another 7-day tank within that building. Interlocks are not provided when using the DG transfer pump to transfer fuel to any other tanks. A truck fill connection, condensate sump suction connection, and inspection dipstick gauge manholes are provided for each 7-day storage tank assembly. The vents to the atmosphere on all tank assemblies, with the exception of the skid-mounted day tanks, are provided with double fire screens to prevent an outside spark from entering the assemblies and igniting the gases within. The National Fire Code (NFC) does not require flame arrestors for Class 2 combustible liquid storage tank vents. Therefore, in order to facilitate the installation of missile protection devices, the skid mounted fuel OTHER AUXILIARY SYSTEMS 9.5-15WATTS BARWBNP-89oil day tank vent lines are not flame-proofed. However, the open vent lines are shielded from the atmosphere and equipped with bird screens. All tank connections and vents are above maximum flood elevation. That portion of the 7-day fuel oil tank vent above the roof level is encased in reinforced concrete for missile protection.Two skid-mounted, electric motor driven, 15 gpm fuel oil transfer pumps, powered from the 480V diesel auxiliary boards (See Figure 8.3-32), are provided for each generating unit to transfer fuel from the 7-day storage tank assembly to the two skid-mounted day tanks of each generating unit. Each of these pumps supplies fuel to both day tanks.Two sets of level switches are provided for each day tank and associated transfer pumps to maintain day tank level. An additional set of level switches provide both Main Control Room (MCR) and Auxiliary Control Room (ACR) alarms to indicate high and low fuel oil level in the day tanks.From each day tank, fuel is supplied to the diesel injectors by a diesel engine driven pump. An electric motor-driven fuel pump is provided as a backup for the engine driven fuel pump. Separate suction and discharge lines serve each pump. Each pump has a suction strainer and dual element fuel filters are provided at each pump discharge. Additional filters at the inlet and outlet of each fuel injector protect the working parts of the injector. Pressure gauges are provided on both sides of the dual element fuel filters to provide a means of determining filter pressure drop. Pressure switches are provided between the fuel pumps and the dual element filters and between the final filters and the fuel injectors. The pressure switches provide ACR and MCR alarms on low pressure. Maintenance procedures call for periodic changing of filters and surveillance test runs verify the cleanliness of these filters.Screens are provided in the suction lines of the Diesel Generator Building transfer pumps which transfer the fuel from the yard storage tank to the 7-day storage tanks. The 7-day tanks are sloped to collect water and sediment at the low end and can be "dip leg" pumped as necessary. The fuel storage and transfer system is protected against the entry of rain water, and the day tanks and 7-day tanks are not harmed by flood waters. Each shipment of No. 2 diesel fuel oil can be sampled prior to pumping to the yard tanks. Samples collected may be used for analyses to verify site specific criteria prior to offloading the tanker and to ensure contractual requirements are met if necessary. Shipments of diesel fuel can be held in the yard tanks until the specified criteria are met and the fuel oil is transferred to one of the 7-day storage tanks or the fuel is burned in the auxiliary boilers. If necessary the fuel is discarded. Sampling and analyses of fuel oil that is transferred to or stored in the 7-day storage tanks is completed in accordance with Technical Specifications.The 7-day storage tanks are inspected in accordance with the Technical Specifications.

9.5-16OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92The methods for maintaining acceptable levels of fuel quality for the standby diesel generators at Watts Bar Nuclear Plant meet the guidelines set forth by NRC Regulatory Guide 1.137, Revision 1, except for pressure testing required by Section C1.e which was accepted by SER Supplement 5, Section 9.5.4.1 and exceptions to C2, given as follows: (a)C2.a the reference year of ASTM D 975 used is 1990 or later revision instead of the year 1977 which is specified in the Regulatory Guide.(b)C2.b methods for water and particle detection in fuel oil prior to transferring fuel oil to supply tank is specified in the Technical Specifications.(c)C2.b analytical results to be completed after transfer of fuel to supply tanks are completed within time frames given in the Technical Specifications instead of the listed 2 weeks.(d)C2.c fuel oil samples are collected using applicable ASTM method specified in the Technical Specifications instead of the listed ASTM D 270.A transfer pump located adjacent to the yard fuel oil storage tanks provides the following functions:

(1)Transfer fuel oil from a tank truck to either of two yard fuel oil storage tanks.

(2)Transfer fuel oil from either yard fuel oil storage tank to the other.

(3)Transfer fuel oil from either yard fuel oil tank to any of the four7-day fuel oil storage tank assemblies.

(4)Reject fuel oil from either yard fuel oil tank through a reject connection in the yard.Seismically qualified fuel oil transfer pumps are also located in the Diesel Generator Building.The Diesel Generator Building fuel oil transfer pump allows fuel oil to be transferred from any one of the 7-day fuel oil storage tanks in the Diesel Generator Building to any other 7-day fuel oil storage tanks in the Diesel Generator Building or either yard storage tank.

9.5.4.3 Safety EvaluationWith a 7-day supply of diesel fuel in each tank assembly, and each assembly embedded in the concrete substructure of a Seismic Category I building and separated by 18 inches of concrete, the diesel generator units are assured of a sufficient fuel supply for any of the conditions discussed in Section 9.5.4.1. The diesel generator fuel oil tank assemblies, piping, and pumps are so arranged that malfunction or failure of either an active or passive component associated with the source of supply for any one OTHER AUXILIARY SYSTEMS 9.5-17WATTS BARWBNP-92diesel generator unit does not impair the ability of the other sources to supply fuel oil to the other units. Each diesel generator is aligned so as to be able to supply power to its own auxiliaries so that a single failure can not result in loss of more than one diesel generator unit. The system thus meets the requirements of the single failure criterion.Automatic carbon dioxide fire protection is provided in the Diesel Building fuel oil transfer pump room and the four rooms housing the diesel generator units.A corrosion allowance is provided in the design wall thickness for the Diesel Generator Building 7-day fuel oil storage tanks. The interiors of the tanks were coated for added corrosion protection. The fuel oil piping and fittings within the Diesel Generator Building have ample corrosion allowance, having been designed per the codes noted in Section 9.5.4.1, and will operate at a pressure considerably below the maximum allowable for the schedule of pipe and fittings used.It is expected that additional fuel oil beyond that stored onsite can be procured and delivered to the plant site within a reasonable period of time since:

(1)The plant site is served by a railroad spur owned by TVA. The yard transfer pump is provided for transferring fuel oil from a tank car to either of the two fuel oil tanks in the yard, or directly to the diesel fuel oil storage tank

assemblies.

(2)State Route 68 provides vehicle access to the site and intersects: State Route 58 and Interstate 75 (I-75) east of the site and State Route 29 (US 27) west of the site. State Routes 29 (US 27) and 58 pass within 10 miles of the site and I-75 within 30 miles of the site. These thoroughfares provide year round access (extreme weather conditions could interrupt traffic flow for short periods of time) to both Chattanooga and Knoxville. With access to both of these major cities it would be very unlikely that tanker truck deliveries would be interrupted for any significant period of time, even in periods of extreme weather conditions.

(3)If rail or road transportation is unavailable, barge or tanker delivery can be accepted at the dock area on the west bank of the Tennessee River near the plant site. A failure modes and effects analysis for the diesel generator fuel oil storage and transfer subsystem is presented in Table 9.5-2.9.5.4.4 Tests and InspectionsThe engine-mounted, motor and engine-driven fuel oil transfer pumps and day tanks were functionally tested in the vendor's shop in accordance with the manufacturer's standards to verify the performance of the diesel generator units and accessories. The fuel oil transfer pumps in the yard and Diesel Generator Building were tested in the manufacturer's factory to verify their performance. The 7-day fuel oil storage tanks were tested with compressed air to 20 psig prior to shipment to the plant site.

9.5-18OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92The entire diesel fuel oil system is flushed with oil and is functionally tested at the plant site in accordance with Chapter 14.0. The diesel fuel oil system will be periodically tested to satisfy the Technical Specifications.

9.5.5 Diesel Generato r Cooling Water System9.5.5.1 Design BasesA closed-loop circulating water cooling system is furnished for each engine of the four tandem diesel generator units housed within the Diesel Generator Building. The system maintains the temperature of the diesel engine within a safe operating range, under all load conditions, and maintains the coolant pre-heat during stand-by conditions. The heat sink for this system is the ERCW system which, flows through the tube side of the skid-mounted heat exchangers. See Section 9.2.1 for discussion of the ERCW system.The diesel generator skid-mounted cooling water piping and components between the skid interface connection and the engine interface are vendor supplied, safety-related, ANSI B31.1, Seismic Category I with the exception of the cooling water heat exchangers which are ASME Section III, Class 3. All modifications to the skid-mounted diesel generator cooling water system piping are performed to meet the intent of ASME Section III, Class 3 (TVA Class C).These buildings are designed to Seismic Category I requirements, and are designed to withstand the effects of tornadoes, credible missiles, hurricanes, floods, rain, snow, or ice as defined in Chapter 3 (Sections 3.3, 3.4, and 3.5).

9.5.5.2 System DescriptionEach cooling system includes a pump, heat exchanger expansion tank, and all accessories required for a cooling loop. (See Figure 9.5-23.)To preclude long term corrosion or organic fouling the engine cooling water system requires de-ionized water with a corrosion inhibitor. The water chemistry is maintained in conformance with the engine manufacturer's recommendations, Electromotive Division of Generel Motors Corporation MI 1748. The closed-loop engine cooling water is circulated through the shell side of each skid-mounted heat exchanger by two diesel-engine shaft-driven pumps. Jacket water immersion heaters are provided for each engine to maintain the jacket water within the vendor recommended temperature range in order to reduce thermal stresses and assure the fast starting and load accepting capability of the diesel generator units in performing their required safety function.Temperature switches are used to control the immersion heater and to annunciate on high or low jacket water temperature. For temperature switch set points, see Figure 9.5-23. Jacket water flows through the lubrication oil cooler by thermosyphon action when the diesel generators are idle. An electric motor driven lubrication oil circulation pump, powered from the 480V diesel auxiliary board, is also provided for each engine to OTHER AUXILIARY SYSTEMS 9.5-19WATTS BARWBNP-92circulate the lubrication oil through the lubrication oil cooler, which is warmed by the engine jacket water, and return the oil to the engine sump. The jacket water immersion heaters are controlled by thermostats, and the lubrication oil circulation pumps run continuously when the engine is not running. This recirculation ensures the lube-oil temperature is maintained at 85°F (minimum) during the standby mode. (See Figures 8.3-33, -33A, -33B, -33C, and -35.)Each diesel generator unit is provided with two closed engine cooling water loops (one for each engine), for which the heat sink is provided by the ERCW system. (Refer to Section 9.2.1). The ERCW flows through the tube side of the skid-mounted heat exchangers.

9.5.5.3 Safety EvaluationThe cooling water is supplied to the heat exchangers of each diesel generator unit through redundant headers of the ERCW system. The system isolation valves are so arranged as to provide the capability to isolate either cooling source in the event of a component malfunction or excessive leakage from the system. Refer to Figures 9.2-1 and 9.2-4A. These valves are powered from the 480V diesel auxiliary board and closure signals for these valves are manually initiated (See Figures 8.3-33, -33A, -33B, -33C, and -35.) Therefore a malfunction (single failure of a component) or loss of one cooling water source can not jeopardize the function of a diesel generator unit. Both the non-skid-mounted air-start piping and fire protection piping located in the vicinity of the diesel generator cooling water system are designed to Seismic Category I(L) to ensure that no seismic event will degrade the functional capability of the diesel generator cooling water system. A failure modes and effects analysis for the diesel generator cooling water system is presented in Table 9.5-2.9.5.5.4 Tests and InspectionsThe ERCW system within the Diesel Generator Building is hydrostatically tested in accordance with the requirements of ASME Section III and is functionally tested in accordance with Chapter 14.0. System components are accessible for periodic inspections during operation. The skid-mounted diesel generator cooling water system components are inspected and serviced as specified in the scheduled maintenance program for the Watts Bar Nuclear Plant diesel generator units.9.5.6 Diesel Generator Starting System9.5.6.1 Design BasesEach diesel engine is equipped with an independent pneumatic starting system to provide reliable, automatic starting of the engines. See Figure 9.5-24. The diesel starting air system components are housed with their respective diesel generator units within the diesel generator rooms in the Diesel Generator Building.The supply headers from each air compressor to the isolation check valve on its skid-mounted accumulator are designed to Seismic Category I(L) requirements. The 9.5-20OTHER AUXILIARY SYSTEMS WATTS BARWBNP-89supply headers from each loadless start device to the isolation check valve and the normally closed bypass valve at the skid-mounted accumulator are designed to Seismic Category I requirements.The diesel generator skid-mounted starting air system piping and components are vendor supplied, safety-related, ANSI B31.1, Seismic Category I. All modifications to the skid-mounted starting air system piping are required to be performed to meet the intent of ASME Section III, Class 3 (TVA Class C).

9.5.6.2 System DescriptionEach diesel engine has two pairs of air starting motor units (hence, there are four pairs per diesel generator unit). A minimum of two pairs of air start motors are needed to start the diesel generator unit. A set of two skid-mounted air accumulators is provided for each diesel engine; four accumulators per diesel generator unit.The accumulators are designed in accordance with the ASME Boiler and Pressure Vessel Code,Section VIII. Each set of accumulators is sized for a compressed air storage capacity sufficient to start the diesel generator unit five times without recharging. Each set of accumulators is equipped with pressure gauges, drains, shutoff valves, safety relief valves, check valves, instrumentation, and controls.Two 480V ac motor-driven compressors supply compressed air to each of the two sets of accumulators for each diesel generator unit. Controls for the compressors have been designed for automatic start-stop operation. Manual test-start selector switches are also provided for each compressor. Pressure switches are provided on each air starting system for actuating low air pressure alarms both in the MCR and ACR (see Figure 9.5-25A, -25B, and -25C).To prevent moisture and rust accumulation in the air starting system, a fully automatic heatless air dryer has been installed between the air compressor and the accumulators. The air dryer unit contains dual desiccant drying chambers which are alternately cycled through drying and regeneration cycles, a forced air after cooler, and associated cycle and fan controls. One chamber of the desiccant dryers is on stream at all times. Moisture traps are also located downstream of the dryers to collect any residual moisture. The two air storage systems for each diesel generator unit provide redundancy so that a single failure will not jeopardize the design starting capacity of the system.

OTHER AUXILIARY SYSTEMS 9.5-21WATTS BARWBNP-92 9.5.6.3 Safety EvaluationAll equipment necessary to start the diesels upon receipt of a start signal is Seismic Category I.The diesel air start system is classified as quality group D. Section B of Regulatory Guide 1.26 discusses quality groups A through D and generally the types of equipment falling in each group. Section B also discusses systems and components not covered by groups A-D. Examples of these non-covered items are provided in Regulatory Guide 1.26 and include instrument and service air systems, auxiliary support systems and diesel engines. Part NA-1130,Section III of the ASME code states that drive system and other accessories are not part of the code. Regulatory Guide 1.26 states that non-covered items should be designed, fabricated, erected, and tested to quality standards commensurate with the safety functions performed. As a quality group D system, it is considered to meet quality standards commensurate with the safety function performed.The piping for the air start system is designed to minimize rust accumulation in the system. Moisture is accumulated at the low points in the system and removed by administrative blowdown procedures. ASME Section III, Class 3 soft-seated check valves are provided downstream of the air accumulators. A strainer is also provided in the air start piping system upstream of the air start motors which prevents carry over of oil or rust, etc., to the motors. An oil mist type lubricator located in the air start system piping downstream of the line strainer and before the air start motors, provides lubrication for the motors. The typical arrangement for each engine is a strainer and lubricator for each pair of air start motors. The diesel starting air system is shown in Figures 9.5-25A, 25B, and 25C. A failure modes and effects analysis for the diesel generator starting air system is presented in Table 9.5-2.9.5.6.4 Tests and InspectionsThe entire diesel generator starting system is functionally tested in accordance with Chapter 14.0. The system is periodically tested to verify its ability to function as part of the diesel generator unit to satisfy the Technical Specification requirements. Under normal standby conditions, the diesel generator starting system is maintained and inspected at intervals as prescribed in the plant maintenance instructions for the diesel generator units.

9.5.7 Diesel Engine Lubrication System9.5.7.1 Design BasesThe diesel engine lubrication system for each diesel engine shown in Figure 9.5-26 (this figure depicts the diesel lube oil system for Diesel Generator 1A-A which is representative of the other three diesel generator sets), is a combination of four subsystems: the main lubricating subsystem, the piston cooling subsystem, and the scavenging oil subsystem and the motor-driven circulating pump, and soak back pump system.

9.5-22OTHER AUXILIARY SYSTEMS WATTS BARWBNP-87The main lubricating subsystem supplies oil under pressure to the various moving parts of the diesel engine. The piston cooling subsystem supplies oil for piston cooling and lubrication of the piston pin bearing surfaces. The scavenging oil subsystem supplies the other systems with cooled and filtered oil. Oil is drawn from the engine sump by the scavenging pump through a strainer in the strainer housing located on the front side of the engine. From the strainer the oil is pumped through oil filters and a cooler. The filters are located on the accessory racks of the engines. The oil is cooled in the lubricating oil cooler (as shown in Figure 9.5-27) by the closed circuit cooling water system in order to maintain proper oil temperature during engine operation. During standby, the lube-oil temperature is maintained at 85°F or greater by the closed cooling-water system.The required quality of oil is maintained by scheduled maintenance of strainers, separators, and filters and by oil changes in accordance with the engine manufacturer's owner's group recommendation.A crankcase pressure detector assembly is provided to cause the engine to shut down in case the normal negative crankcase pressure changes to a positive pressure. This is accomplished by relieving the oil pressure to the engine governor. The crankcase pressure detector shutdown device is operative only during diesel generator testing; see Section 8.3.1.1 under the heading, "Standby Diesel Generator Operation."An overspeed mechanism is provided to shut down the engine by stopping the injection of fuel into the cylinders should the engine speed become excessive. The piping and components for the skid-mounted diesel engine lubrication system are vendor supplied, safety-related, ANSI B31.1, Seismic Category I. All modifications to the skid-mounted diesel engine lubrication system are performed to meet the intent of ASME Section III, Class 3 (TVA Class C).

OTHER AUXILIARY SYSTEMS 9.5-23WATTS BARWBNP-92 9.5.7.2 System DescriptionThe system is a combination of four separate systems. The four systems are the main lube oil system, piston cooling system, scavenging oil system, and the motor-driven circulating pump and soak-back pump system. Each system has its own pump. The main lube oil pump and piston cooling oil pump, although individual pumps, are both contained in one housing and are driven from a common shaft and are the helical gear type. The main lubricating, piston cooling, and scavenging oil pumps are driven from the accessory gear train at the front of the engine. The auxil iary system has a circulating oil pump and a soak-back oil pump driven from electric motors mounted on the side of engine base. All pumps are mounted on the engines, skid, or Diesel Generator Building floor.The main lube oil system supplies oil under pressure to the majority of the engine moving parts. The piston cooling system supplies oil for piston cooling lubrication of the piston pin bearing. The scavenging oil system supplies the other systems with cooled, filtered oil.In the operation of these systems, oil is drawn from the engine sump by the scavenging oil pump through a strainer in the strainer housing. From the strainer, the oil is pumped through the oil filter and the lube oil cooler. The cooler absorbs heat from the jacket water to maintain proper operating temperature during standby operation. The oil then flows to the strainer housing to supply the main lubricating and piston cooling pumps. After being pumped through the engine, the oil returns to the engine sump to be recirculated.To enhance the reliability of and to minimize wear due to automatic fast starting, each DG has an auxiliary lube oil system driven by two electric motors. The motors drive two pumps, each of which has a separate function. A soak-back pump draws oil from the engine sump and pumps it through the accessory rack-mounted auxiliary turbocharger lube oil filter and through the head of the engine-mounted turbocharger oil filter into the turbocharger bearing area. The auxiliary turbocharger oil filter purifies the oil supplied to the turbocharger. A relief valve allows oil to be bypassed to the circulating pump system when the outlet pressure exceeds 75 psig.The soak-back system has a two-fold job. It prelubes the turbocharger bearing area so that the bearing will be fully lubricated when the engine receives a start signal requiring rated speed and application of rated load within a matter of seconds. It also removes residual heat from the turbocharger bearing area upon engine shutdown.

9.5-24OTHER AUXILIARY SYSTEMS WATTS BARWBNP-89The lube oil circulating pump draws oil from the engine sump and pumps it through a check valve, in-line wye strainer, main lube oil filter, lube oil cooler, and returns it to the engine sump through the strainer housing. This system also serves to continuously prelube the lower portion of the engine. The main engine oil galley stays full and the camshaft area is supplied through a separate exterior line. The pump operates continuously. The water jacket immersion heater heats the engine cooling water which circulates through the lube oil cooler. As the oil is circulated through the cooler (operating as a heater) it is warmed.A backup DC lube oil pump provides lube oil to the turbocharger in case the AC pump fails.Low lube oil pressure alarms are located in the MCR and in the ACR. Lube oil low alarm pressure varies with engine operating conditions.At rated speed, the engine shuts down if lube oil pressure drops below setpoint during non-accident conditions. There are no other interlocks on this system.

OTHER AUXILIARY SYSTEMS 9.5-25WATTS BARWBNP-92 9.5.7.3 Safety EvaluationEach engine crankcase sump contains a sufficient volume of lubricating oil, ample for at least 7 days of diesel generator unit full' load operation without requiring replenishment. The established oil consumption rate is 0.83 gallons per hour. An additional standby oil reserve is stored within the plant's power stores to replenish the engines for longer periods of operation and to "top off" the engines after their periodic test operations as specified in the Techn ical Specifications.

A failure modes and effects analysis for the diesel generator lube oil system is presented in Table 9.5-2.9.5.7.4 Test and InspectionsThe diesel generator lubricating oil system is functionally tested in accordance with Chapter 14.0. The diesel generator lubricating oil system components are inspected and serviced as specified in the scheduled maintenance program for the Watts Bar diesel generator units. The inspection and service of the lubricating oil systems include visual checking for, and the correction of, oil leakage. This program sets overall standards and testing instructions to qualify the lubricating oil for use in the diesel generator engines.9.5.8 Diesel Generator Combustion Air Intake and Exhaust System9.5.8.1 Design BasesEach diesel engine associated with each of the tandem diesel generator units is equipped with an independent combustion air intake and exhaust subsystem. The four subsystems for the plant are housed in physically separated rooms within the Diesel Generator Building. Each of the four diesel generator subsystems has a dedicated air intake and exhaust system.The Diesel Generator Building is designed to Seismic Category I requirements, and is designed to withstand the effects of tornadoes, credible missiles, hurricanes, floods, rain, snow, and ice as defined in Sections 3.3, 3.4, and 3.5. The combustion air intake and exhaust piping, filters, and silencers are so arranged in the individual rooms for each diesel generator unit that a malfunction or failure of any system component associated with any single unit will not impair the operation of the remaining three units. The air intake and exhaust systems thus meets the requirements of the single failure criterion. The piping and components for the diesel generator combustion air intake and exhaust system are designed in accordance with ANSI B31.1, Seismic Category I.

9.5.8.2 System DescriptionsThe general arrangement of the diesel generator combustion air intake and exhaust systems is shown in Figure 8.3-1. The flow diagrams are shown in Figures 9.5-29 and 9.5-30. Each diesel generator combustion intake and exhaust subsystem includes but not limited to an air intake filter, air intake silencers, and piping of the air intake subsystem from the air intake to its connection to the engine; and an exhaust silencer and piping of the exhaust subsystem from its connection to the engine to a point just above the Diesel Generator Building roof level where the exhaust exits to the atmosphere. As shown in Figure 8.3-1, the major components of the diesel generator combustion air and exhaust system are housed within the Diesel Generator Building 9.5-26OTHER AUXILIARY SYSTEMS WATTS BARWBNP-92which provides protection from missiles, snow, and ice. That portion of the exhaust subsystems exposed above the roof level is short and below the parapet level to reduce the vulnerability to tornado missiles. Drain holes are provided at appropriate points to expel any rainfall that enters the exhaust piping.

9.5.8.3 Safety EvaluationThe diesel generator combustion air intake and exhaust systems are designed to function before, during, and after a SSE, to ensure that a seismic event will not degrade the combustion air intake and exhaust systems to the point that the function of a diesel generator unit is jeopardized.An analysis of diesel generator exhaust recirculation utilizing a model developed by Halitsky[1] for transverse jet plumes, established that the exhaust plume will be carried well above the level of the air intakes and thus will not degrade the intake air. The diesel generator units can withstand a concentration of 20% carbon dioxide (by volume) in the intake air stream and continue to function at rated, full-load power. The redundancy and separation of the four intake and exhaust subsystems are discussed in Section 9.5.8.1. The protection against missiles, snow, rainfall, and ice are discussed in Section 9.5.8.2. A failure modes and effects analysis for the Diesel Generator Building ventilation intake and exhaust subsystems is presented in Table 9.4-4. A failure modes and effects analysis for the diesel generator combustion air intake and exhaust systems is presented in Table 9.5-2.

OTHER AUXILIARY SYSTEMS 9.5-27WATTS BARWBNP-919.5.8.4 Tests and InspectionAfter installation the entire diesel generator combustion air intake and exhaust system is functionally tested on the plant site in accordance with Chapter 14.0.Each diesel generator combustion air intake and exhaust subsystem is periodically tested to verify its ability to function as part of the diesel generator unit testing in accordance with Technical Specifications.Under normal standby conditions, the diesel generator combustion air intake subsystem is inspected at intervals as prescribed in the plant maintenance instructions for the diesel generator units. These inspections include the air intake filter oil level, oil viscosity, and sludge accumulation.The diesel generator combustion air exhaust silencer has a continuous drain to remove any water which may accumulate due to condensation or rain.REFERENCE (1)James Halitzky, 'A Method for Estimating Concentrations in Transverse Jet Plunes.' Air and Water Pollution Int. J., Pergamon Press. 1966, Vol. 10, pp. 821-843 (2)Letter to NRC dated February 5, 1992, "Watts Bar Nuclear Plant (WBN) - Submittal of TVA Fire Protection Report." (3)Letter to NRC dated June 15, 1995, "Wa tts Bar Nuclear Plant (WBN) - Fire Protection Report (FPR) Revision (TAC M63648)." (4)Letter to NRC dated September 28, 1995, "Watts Bar Nuclear Plant (WBN) - Submittal of Fire Protection Report (FPR) Revision 4 (TAC M63648)." (5)Letter to NRC dated October 1995, "Watts Bar Nuclear Plant (WBN) - Submittal of Fire Protection Report (FPR) Revision 5 (TAC M63648)"

9.5-28OTHER AUXILIARY SYSTEMS WATTS BARWBNP-52 Table 9.5-1 Delet ed by Amendment 52 OTHER AUXILIARY SYSTEMS9.5-29WATTS BAR WBNP-87Table 9.5-1 Failure Modes and Effects Analysis of the Standby Diesel Generator Auxiliary Systems (Sheet 1 of 4)

ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIALCAUSEMETHOD OF FAILURE DETECTION EFFECT ON SYSTEM EFFECTON PLANTREMARKS1Fuel oil system from 7-day tank forward to engine on any one of four diesel generator sets in standby

service.Forward fuel to injectors of respective engines.Delivers insufficient quantity of fuel to engines.Passive failures such as tank ruptures or piping leaks, clogging of strainers or injectors. See Note 2 in Remarks.

Also, failure of instrumentation to provide proper signal to pumps and controls.Control room indication of failure of diesel generator set to start or shuts down.None: Remaining three diesel generators furnish 100%

standby power required by plant.None1. Fuel oil systems of each diesel generator set are completely independent of each other.2. Due to redundant pumps and valving arrangements within each DG FO system, single active failures that disable the system are not credible.

OTHER AUXILIARY SYSTEMS9.5-30WATTS BAR WBNP-872Starting air system from diesel generator skid-mounted air

accumulator inlet check valve forward to the air starting motors on any one of eight engines in standby

service. Crank engine to start diesel generator set.Either one of two sets of cranking systems fails to crank engines.Active failure of any one pneumatic valve or air start motor that would prevent all four air motors of one of two engines to engage and crank diesel generator set, or passive failure due to leakage of air from the accumulator or piping in one of the two cranking systems.Also, failure of instrumentation to provide start signal or failure providing a false signal.

Control room indication of failure of diesel generator to start.None; Duplicate air start system on other engine in the diesel generator set is capable of providing 100%

cranking power for both engines in the diesel generator set.NoneEach one of two engines in a diesel generator set includes a cranking system independent of its mate or of the other diesel generator sets.Table 9.5-1 Failure Modes and Effects Analysis of the Standby Diesel Generator Auxiliary Systems (Sheet 2 of 4)

ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIALCAUSEMETHOD OF FAILURE DETECTION EFFECT ON SYSTEM EFFECTON PLANTREMARKS OTHER AUXILIARY SYSTEMS9.5-31WATTS BAR WBNP-87 3 4Lube oil system of any one of eight engines in standby

service.Jacket cooling water system and heat exchanger of any one of eight engines in standby

service.Lubricate engine wearing surfaces and maintain proper piston temperature of respective engine.Provide cooling for lube oil coolers, cylinder liner and heads and turbocharger aftercoolers of respective engine.Insufficient lube oil flow or oil temperature exceeds limits.Fails to maintain correct engine temperature.Failure of any one pump or passive failure such as system leakage or filter clogging.Active failure of either pump, thermostatic control valve or immersion water heater, or passive failure of piping or heat exchanger pressure boundary.Control room indication of shutdown of affected diesel generator set.

Control room indication of high engine coolant temperature in affected engine

requiring shutdown of diesel generator

set.None; Remaining three diesel generator sets are capable of furnishing 100% of the required plant standby power.None; Remaining three diesel generator sets are capable of furnishing 100% standby power required by plant.None NoneLube oil system of each individual engine is separate and independent of all others.Jacket cooling water system of each individual engine is separate and independent of all others.Table 9.5-1 Failure Modes and Effects Analysis of the Standby Diesel Generator Auxiliary Systems (Sheet 3 of 4)

ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIALCAUSEMETHOD OF FAILURE DETECTION EFFECT ON SYSTEM EFFECTON PLANTREMARKS OTHER AUXILIARY SYSTEMS9.5-32WATTS BAR WBNP-87 5 6Combustion air intake system from intake filter through silencer and flexible connection up to turbocharger inlet on any one of eight engines in standby

service.Exhaust system from turbocharger through expansion joint and silencer on any one of eight engines in service. Direct filtered air to turbocharger.Provide path for exhaust.Insufficient or unfiltered air flow to respective engine.Restricts flow.Passive failure of either filter silencer or flexible connection that would either restrict air flow or induct unfiltered air into engine.Passive failure of silencer.Control room indication of engine misfunction or shut down.

Control room indication of engine malfunction or shut down.None; Remaining three diesel generator sets are capable of furnishing 100% of standby power required by plant.None; Remaining three diesel generator sets are capable of furnishing 100% of standby power required by plant.None NoneCombustion air intake system of each individual engine is separate and independent of all others.Exhaust system on each individual engine is separate and independent of all others.Table 9.5-1 Failure Modes and Effects Analysis of the Standby Diesel Generator Auxiliary Systems (Sheet 4 of 4)

ITEM NO.COMPONENTIDENTIFICATIONFUNCTIONFAILURE MODE POTENTIALCAUSEMETHOD OF FAILURE DETECTION EFFECT ON SYSTEM EFFECTON PLANTREMARKS Other Auxiliary Systems9.5-33WATTS BAR WBNP-87Figure 9.5-1 Deleted by Amendment 87 Other Auxiliary Systems9.5-34WATTS BAR WBNP-87Figure 9.5-2 Deleted by Amendment 87 Other Auxiliary Systems9.5-35WATTS BAR WBNP-87Figure 9.5-3 Deleted by Amendment 87 Other Auxiliary Systems9.5-36WATTS BAR WBNP-87Figure 9.5-4 Deleted by Amendment 87 Other Auxiliary Systems9.5-37WATTS BAR WBNP-87Figure 9.5-5 Deleted by Amendment 87 Other Auxiliary Systems9.5-38WATTS BAR WBNP-87Figure 9.5-6 Deleted by Amendment 87 Other Auxiliary Systems9.5-39WATTS BAR WBNP-87Figure 9.5-7 Deleted by Amendment 87 Other Auxiliary Systems9.5-40WATTS BAR WBNP-87Figure 9.5-8 Deleted by Amendment 87 Other Auxiliary Systems9.5-41WATTS BAR WBNP-87Figure 9.5-9 Deleted by Amendment 87 Other Auxiliary Systems9.5-42WATTS BAR WBNP-87Figure 9.5-10 Deleted by Amendment 87 Other Auxiliary Systems9.5-43WATTS BAR WBNP-87Figure 9.5-11 Deleted by Amendment 87 Other Auxiliary Systems9.5-44WATTS BAR WBNP-87Figure 9.5-12 Deleted by Amendment 87 Other Auxiliary Systems9.5-45WATTS BAR WBNP-87Figure 9.5-13 Deleted by Amendment 87 Other Auxiliary Systems9.5-46WATTS BAR WBNP-87Figure 9.5-14 Deleted by Amendment 87 Other Auxiliary Systems9.5-47WATTS BAR WBNP-87Figure 9.5-15 Deleted by Amendment 87 Other Auxiliary Systems9.5-48WATTS BAR WBNP-87Security Information Withheld under 10CFR 2.390(d)(1)

[s5]SECURITY SENSITIVEFigure 9.5-16 Watts Bar Nuclear Plant - Plant-to-Offsite Communications[e5]

Other Auxiliary Systems9.5-49WATTS BAR WBNP-90Security Information Withheld under 10CFR 2.390(d)(1)

[s5]SECURITY SENSITIVEFigure 9.5-17 Watts Bar Nuclear Plant - Intraplant Communications[e5]

Other Auxiliary Systems9.5-50WATTS BAR WBNP-90Figure 9.5-18 Deleted Other Auxiliary Systems9.5-51WATTS BAR WBNP-63Figure 9.5-19 Watts Bar Nuclear Plant-Communications Equipment Availability Other Auxiliary Systems9.5-52WATTS BAR WBNP-89Figure 9.5-20 Yard, Powerhouse, and Diesel Generator Building Units 1 & 2 Flow Diagram Fuel Oil Atomizing Air & Steam Other Auxiliary Systems9.5-53WATTS BAR WBNP-89Figure 9.5-20a Additional Dsl Gen Bldg Units 1 & 2 Flow Diagram Fuel Oil Atomizing Air & Steam Other Auxiliary Systems9.5-54WATTS BAR WBNP-89Figure 9.5-20b Diesel Generator Building Unit 2 Flow Diagram Fuel Oil Atomizing Air & Steam Other Auxiliary Systems9.5-55WATTS BAR WBNP-89Figure 9.5-21 Powerhouse Units 1 & 2 Electrical Control Diagram for Fuel Oil System Other Auxiliary Systems9.5-56WATTS BAR WBNP-89Figure 9.5-22 Powerhouse Units 1 & 2 Electrical Logic Diagram for Fuel Oil System Other Auxiliary Systems9.5-57WATTS BAR WBNP-70Figure 9.5-23 Schematic Diagram -Jacket Water System With Heat Exchanger Other Auxiliary Systems9.5-58WATTS BAR WBNP-89Figure 9.5-24 Diesel Generator Building Unit 1 Flow Diagram for Diesel Starting Air System Other Auxiliary Systems9.5-59WATTS BAR WBNP-89Figure 9.5-24a Additional Diesel Gen Bldg Unit 1 & 2 Flow Diagram Diesel Starting Air System Other Auxiliary Systems9.5-60WATTS BAR WBNP-88Figure 9.5-25 Deleted by Amendment 88 Other Auxiliary Systems9.5-61WATTS BAR WBNP-88Figure 9.5-25a Diesel Generator Building Unit 1 Electrical Control Diagram Dsl Stg Air Sys DG 1B-B Other Auxiliary Systems9.5-62WATTS BAR WBNP-88Figure 9.5-25b Diesel Generator Building Unit 1 Electrical Control Diagram Dsl Stg Air Sys DG 2A-A Other Auxiliary Systems9.5-63WATTS BAR WBNP-88Figure 9.5-25c Diesel Generator Building Unit 1 Electrical Control Diagram Dsl Stg Air Sys DG 2B-B Other Auxiliary Systems9.5-64WATTS BAR WBNP-88Figure 9.5-25d Diesel Generator Building Unit 1 Electrical Control Diagram Dsl Stg Air Sys DG OC-S Other Auxiliary Systems9.5-65WATTS BAR WBNP-57Figure 9.5-26 Schematic Diagram Lube Oil System Other Auxiliary Systems9.5-66WATTS BAR WBNP-57Figure 9.5-27 Diesel Engine Lubrication System Other Auxiliary Systems9.5-67WATTS BAR WBNP-41Figure 9.5-28 Deleted by Amendment 41 Other Auxiliary Systems9.5-68WATTS BAR WBNP-41Figure 9.5-29 Diesel Air Intake Piping Schematic Other Auxiliary Systems9.5-69WATTS BAR WBNP-41Figure 9.5-30 Diesel Exhaust System Piping Schematic Other Auxiliary Systems9.5-70WATTS BAR WBNP-87Figure 9.5-31 Deleted by Amendment 87Watts Bar FSAR Section 9.0 Auxiliary Systems