ML071420431: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
 
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:Note: RG = Ray Gallucci JC = Jeff Circle SL = Steve Laur  
{{#Wiki_filter:Note: RG = Ray Gallucci
FPIP-0122 Expert Panel Review of  
        JC = Jeff Circle
Multiple Spurious Actuations
        SL = Steve Laur
  (1) 9.1. The expert panel
FPIP-0122 Expert Panel Review of Multiple Spurious Actuations
review may be the only one of
(1) 9.1. The expert panel review may be the only one of the three inputs (SSD
the three inputs (SSD analysis and internal events PSA reviews are the others) that can identify  
analysis and internal events PSA reviews are the others) that can identify
previously unknown or dismissed circuit fa
previously unknown or dismissed circuit failure combinations. The guidance from
ilure combinations. The guidance from  
RIS 2004-03 (note incorrect reference to RIS 2003-04) is intended for inspection
RIS 2004-03 (note incorrect reference to RIS 2003-04) is intended for inspection purposes and not as a limiting factor  
purposes and not as a limiting factor for fire PSA. The expert panel should
for fire PSA. The expert panel should  
consider combinations of >2 cables if the "3-4 circuit failures" are possible, as
consider combinations of >2 cables if the "3-4 circuit failu
well as intercable thermosets. (RG)
res" are possible, as  
(2) Att. 3, 1.2. Under Phase 2, while it is appropriate to discuss regulatory
well as intercable thermosets. (RG)  
guidance, note that the fire PSA is not limited in scope by regulatory guidance for
(2) Att. 3, 1.2. Under Phase 2, whil
MSOs (see above). (RG)
e it is appropriate to discuss regulatory guidance, note that the fire PSA is not limited in scope by regulatory guidance for MSOs (see above). (RG)  
(3) Att. 3, 1.2.1. In light of Duke's recent armored cable tests, you may want to
(3) Att. 3, 1.2.1. In li
remove the armored cable example under the second bullet. (RG)
ght of Duke's recent armored cable tests, you may want to  
(4) It would aid my understanding if the term "required cable" was defined,
remove the armored cable exam
similar to the RIS 2004-03 sentence: If damage to the circuits or cables under
ple under the second bullet. (RG)  
consideration would have a direct impact on the operation of equipment or
(4) It would aid my understanding if t
systems that are relied on to perform an essential shutdown function, the circuits
he term "required cable" was defined, similar to the RIS 2004-03 sentence:
and cables are considered "required circuits." (SL)
If damage to the circuits or cables under  
(5) Definition 3.10, "Risk Significant," is not about risk but likelihood. Since we
consideration would have a direct im
use risk as a defined term, I think they should change this to something like
pact on the operation of equipment or systems that are relied on to perform an ess
"Candidate Spurious Actuations" or delete the definition. (SL)
ential shutdown function, the circuits  
(6) In Section 9.3, there is no requirement for how much experience the
and cables are considered "required circuits." (SL) (5) Definition 3.10, "Risk Significant," is
"experts" need to have. Further, the quorum specifies a number of members, but
not about risk but likelihood. Since we  
does not ensure key individuals are present - for example, I would say that an
use risk as a defined term, I think they
electrical or I&C engineer who is very familiar with the plant wiring diagrams and
should change this to something like "Candidate Spurious Actuations" or delete the definition. (SL)  
schematics would be a "must" for any such meeting. (SL)
  (6) In Section 9.3, there is no r
(7) In Section 9.4 - I do not agree that no training is necessary. I would say that
equirement for how much experience the "experts" need to have. Fu
training on the definitions ("required cable;" "Bin 1," etc.) and on the meaning of
rther, the quorum specifies  
the criteria would be necessary. (SL)
a number of members, but  
(8) Section 3.10, Risk Significant.: Guidance is for selection of concurrent
does not ensure key individuals are present - for example, I  
multiple spurious actuations based on RIS-2004-03 classification of "most risk
would say that an electrical or I&C engineer who is very familiar with the plant wiring diagrams and  
significant". What are the actual criteria for that assessment? (JC)
schematics would be a "must" fo
r any such meeting. (SL)  
  (7) In Section 9.4 - I do  
not agree that no training is necessary. I would say that  
training on the definitions (" required cable;" "Bin 1," etc.) and on the meaning of  
the criteria would  
be necessary. (SL)  
  (8) Section 3.10, Risk Significant.: Guidance is for selection of concurrent  
multiple spurious actuations based on  
RIS-2004-03 classificati
on of "most risk significant". What are the actual  
criteria for that assessment? (JC)  
 
(9)  Section 9.1 Background.  Circuit Analysis.:  Focuses the expert panel on
reviewing "high risk", potential two cable failures per scenario.  There may be
combinations that are ov
erlooked using that approach.  Has the licensee
considered other means to achieve this goal? (JC)
FPIP-0202  Fire PRA Co
mponent Selection 
(1)  9.2.2.  Ensure that initiators, although not mapped to specific basic events in
the internal events PSA, cannot be caused by equipment failures that would
otherwise have been excluded from mapping
if such equipment were fire
affected.  E.g., if an autom
atic turbine (reactor) trip could be caused by a fire-
induced faulty signal on some instrument (s) that would not normally be part of
the internal events PSA, ensure that such instrument(s) is identified as potentially
relevant for fire-induced turbine (reactor) trip. (RG)
(2)  9.3.  Again, do not limit inclusion of an SSEL component only to those whose
fire-induced failure would
affect mitigation capability - include any that could
induce initiators. (RG)
(3)  9.4.6.  RAW is only one measure of
risk importance.  Fussell-Vesely (F-V) should also be considered, and the list of potentially risk-significant components
should be drawn from the uni
on of the two sets. (RG)
(4)  9.4.7.  In conjunction with above , assign an "L" only if both RAW and F-V indicate low risk-significance. (RG)
(5)  In section 9.4, plan to star
t equipment list
with SSEL and non-App R
equipment that has the potential to be highly risk significant. This is fine as it's a
start. Curious to know how they intend to establish risk significance prior to doing
the analysis. Note that this is a Standard issue. General assumptions regarding
existence of highly redundant trains c
ould be an approach, but the procedure
doesn't say. Curious to know licensees thoughts, as it may be relevant to our


resolution of this issue in the Standard.  
(9) Section 9.1 Background. Circuit Analysis.: Focuses the expert panel on
(6) 9.4.7 says cannot have a fire induc
reviewing "high risk", potential two cable failures per scenario. There may be
ed Large Break LOCA. For a BWR, we have identified inspection findings, i.e. potential spuriously multiple stuck open  
combinations that are overlooked using that approach. Has the licensee
MSRVs, which could be a large break LO
considered other means to achieve this goal? (JC)
CA. I presume this can occur with a PWR. Right?  
FPIP-0202 Fire PRA Component Selection
  (7) Section 9.1, Overview: Is ther
(1) 9.2.2. Ensure that initiators, although not mapped to specific basic events in
e any guidance on the need to reconcile internal event PRA components whic
the internal events PSA, cannot be caused by equipment failures that would
h might have been screened out on low  
otherwise have been excluded from mapping if such equipment were fire
probability such as flow diversion paths? (JC)  
affected. E.g., if an automatic turbine (reactor) trip could be caused by a fire-
   
induced faulty signal on some instrument(s) that would not normally be part of
FPIP-0104, Safe Shutdown Equi
the internal events PSA, ensure that such instrument(s) is identified as potentially
pment List and Fault Tree Logics
relevant for fire-induced turbine (reactor) trip. (RG)
  (1) Item 4.1.8: Why is the shutdown
(2) 9.3. Again, do not limit inclusion of an SSEL component only to those whose
engineer directed to have fault tree database files be revised by individuals familiar with IRRAS/
fire-induced failure would affect mitigation capability - include any that could
MAR-D text files since Progress Energy uses CAFTA?  
induce initiators. (RG)
Note that the name IRRAS has been SAPHIRE for the last
(3) 9.4.6. RAW is only one measure of risk importance. Fussell-Vesely (F-V)
14 years. (JC)  
should also be considered, and the list of potentially risk-significant components
(2) Section 9.1.2, Safe Shutdown Co
should be drawn from the union of the two sets. (RG)
mponent Selection Criteria, Item 17: Shouldn't guidance on interlocking circuitry should also include CWDs (or  
(4) 9.4.7. In conjunction with above, assign an "L" only if both RAW and F-V
elementaries) which will m
indicate low risk-significance. (RG)
odel the actual transmitters
(5) In section 9.4, plan to start equipment list with SSEL and non-App R
and their associated power  
equipment that has the potential to be highly risk significant. This is fine as it's a
supplies? An important interaction might be overlooked if only P&IDs  
start. Curious to know how they intend to establish risk significance prior to doing
("instrument schematics") were employed. (JC)  
the analysis. Note that this is a Standard issue. General assumptions regarding
(3) Attachment 1 on Fluid System Modeling Rules: Assuming that this is set up  
existence of highly redundant trains could be an approach, but the procedure
for modular fault trees however, there is  
doesn't say. Curious to know licensees thoughts, as it may be relevant to our
no key to the module to
resolution of this issue in the Standard.
p gates. It might be cryptic for licensee personnel to use. (JC)
(6) 9.4.7 says cannot have a fire induced Large Break LOCA. For a BWR, we
have identified inspection findings, i.e. potential spuriously multiple stuck open
MSRVs, which could be a large break LOCA. I presume this can occur with a
PWR. Right?
(7) Section 9.1, Overview: Is there any guidance on the need to reconcile
internal event PRA components which might have been screened out on low
probability such as flow diversion paths? (JC)
 
FPIP-0104, Safe Shutdown Equipment List and Fault Tree Logics
(1) Item 4.1.8: Why is the shutdown engineer directed to have fault tree
database files be revised by individuals familiar with IRRAS/MAR-D text files
since Progress Energy uses CAFTA? Note that the name IRRAS has been
SAPHIRE for the last 14 years. (JC)
(2) Section 9.1.2, Safe Shutdown Component Selection Criteria, Item 17:
Shouldnt guidance on interlocking circuitry should also include CWDs (or
elementaries) which will model the actual transmitters and their associated power
supplies? An important interaction might be overlooked if only P&IDs
("instrument schematics") were employed. (JC)
(3) Attachment 1 on Fluid System Modeling Rules: Assuming that this is set up
for modular fault trees however, there is no key to the module top gates. It might
be cryptic for licensee personnel to use. (JC)
}}
}}

Latest revision as of 06:58, 23 November 2019

First Handout for April 19, 2007 Clarification Call Concerning Shearon Harris Transition to NFPA 805
ML071420431
Person / Time
Site: Harris Duke Energy icon.png
Issue date: 04/19/2007
From:
NRC/NRR/ADRA/DRA/AFPB
To:
References
RIS-04-003
Download: ML071420431 (3)


See also: RIS 2004-03

Text

Note: RG = Ray Gallucci

JC = Jeff Circle

SL = Steve Laur

FPIP-0122 Expert Panel Review of Multiple Spurious Actuations

(1) 9.1. The expert panel review may be the only one of the three inputs (SSD

analysis and internal events PSA reviews are the others) that can identify

previously unknown or dismissed circuit failure combinations. The guidance from

RIS 2004-03 (note incorrect reference to RIS 2003-04) is intended for inspection

purposes and not as a limiting factor for fire PSA. The expert panel should

consider combinations of >2 cables if the "3-4 circuit failures" are possible, as

well as intercable thermosets. (RG)

(2) Att. 3, 1.2. Under Phase 2, while it is appropriate to discuss regulatory

guidance, note that the fire PSA is not limited in scope by regulatory guidance for

MSOs (see above). (RG)

(3) Att. 3, 1.2.1. In light of Duke's recent armored cable tests, you may want to

remove the armored cable example under the second bullet. (RG)

(4) It would aid my understanding if the term "required cable" was defined,

similar to the RIS 2004-03 sentence: If damage to the circuits or cables under

consideration would have a direct impact on the operation of equipment or

systems that are relied on to perform an essential shutdown function, the circuits

and cables are considered "required circuits." (SL)

(5) Definition 3.10, "Risk Significant," is not about risk but likelihood. Since we

use risk as a defined term, I think they should change this to something like

"Candidate Spurious Actuations" or delete the definition. (SL)

(6) In Section 9.3, there is no requirement for how much experience the

"experts" need to have. Further, the quorum specifies a number of members, but

does not ensure key individuals are present - for example, I would say that an

electrical or I&C engineer who is very familiar with the plant wiring diagrams and

schematics would be a "must" for any such meeting. (SL)

(7) In Section 9.4 - I do not agree that no training is necessary. I would say that

training on the definitions ("required cable;" "Bin 1," etc.) and on the meaning of

the criteria would be necessary. (SL)

(8) Section 3.10, Risk Significant.: Guidance is for selection of concurrent

multiple spurious actuations based on RIS-2004-03 classification of "most risk

significant". What are the actual criteria for that assessment? (JC)

(9) Section 9.1 Background. Circuit Analysis.: Focuses the expert panel on

reviewing "high risk", potential two cable failures per scenario. There may be

combinations that are overlooked using that approach. Has the licensee

considered other means to achieve this goal? (JC)

FPIP-0202 Fire PRA Component Selection

(1) 9.2.2. Ensure that initiators, although not mapped to specific basic events in

the internal events PSA, cannot be caused by equipment failures that would

otherwise have been excluded from mapping if such equipment were fire

affected. E.g., if an automatic turbine (reactor) trip could be caused by a fire-

induced faulty signal on some instrument(s) that would not normally be part of

the internal events PSA, ensure that such instrument(s) is identified as potentially

relevant for fire-induced turbine (reactor) trip. (RG)

(2) 9.3. Again, do not limit inclusion of an SSEL component only to those whose

fire-induced failure would affect mitigation capability - include any that could

induce initiators. (RG)

(3) 9.4.6. RAW is only one measure of risk importance. Fussell-Vesely (F-V)

should also be considered, and the list of potentially risk-significant components

should be drawn from the union of the two sets. (RG)

(4) 9.4.7. In conjunction with above, assign an "L" only if both RAW and F-V

indicate low risk-significance. (RG)

(5) In section 9.4, plan to start equipment list with SSEL and non-App R

equipment that has the potential to be highly risk significant. This is fine as it's a

start. Curious to know how they intend to establish risk significance prior to doing

the analysis. Note that this is a Standard issue. General assumptions regarding

existence of highly redundant trains could be an approach, but the procedure

doesn't say. Curious to know licensees thoughts, as it may be relevant to our

resolution of this issue in the Standard.

(6) 9.4.7 says cannot have a fire induced Large Break LOCA. For a BWR, we

have identified inspection findings, i.e. potential spuriously multiple stuck open

MSRVs, which could be a large break LOCA. I presume this can occur with a

PWR. Right?

(7) Section 9.1, Overview: Is there any guidance on the need to reconcile

internal event PRA components which might have been screened out on low

probability such as flow diversion paths? (JC)

FPIP-0104, Safe Shutdown Equipment List and Fault Tree Logics

(1) Item 4.1.8: Why is the shutdown engineer directed to have fault tree

database files be revised by individuals familiar with IRRAS/MAR-D text files

since Progress Energy uses CAFTA? Note that the name IRRAS has been

SAPHIRE for the last 14 years. (JC)

(2) Section 9.1.2, Safe Shutdown Component Selection Criteria, Item 17:

Shouldnt guidance on interlocking circuitry should also include CWDs (or

elementaries) which will model the actual transmitters and their associated power

supplies? An important interaction might be overlooked if only P&IDs

("instrument schematics") were employed. (JC)

(3) Attachment 1 on Fluid System Modeling Rules: Assuming that this is set up

for modular fault trees however, there is no key to the module top gates. It might

be cryptic for licensee personnel to use. (JC)