ML18102A918: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
(One intermediate revision by the same user not shown)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:Appendix BROOKHAVEN NATIONAL LABORATORY DEPARTMENT OF ADVANCED TECHNOLOGY ENGINEERING TECHNOLOGY DIVISION TECHNJCAL EVALUATJON OF PUBLJC SERVJCE ELECTRJC AND GAS COMPANY (PSE&G) RESPONSES DATED JUNE 19. 1996 AND DECEMBER 2. 1996 TO NRC OFFJCE OF NUCLEAR REACTOR REGULATION REPORT "SAFE SHUTDOWN CAPABJLJTY REASSESSMENT FOR SALEM NUCLEAR GENERATJNG STATJON UNJTS 1 AND 2," DATED JANUARY 25. 1996 Prepared By: Prepared For: Revision J January 23, J 997 K. Sullivan U.S. Nuclear Regulatory Commission Office of Nuclear Reactor Regulation
{{#Wiki_filter:Appendix BROOKHAVEN NATIONAL LABORATORY DEPARTMENT OF ADVANCED TECHNOLOGY ENGINEERING TECHNOLOGY DIVISION TECHNJCAL EVALUATJON OF PUBLJC SERVJCE ELECTRJC AND GAS COMPANY (PSE&G)
: 1. Background By letter dated January 25, 1996, the NRC Office of Nuclear Reactor Regulation (NRR) forwarded its report "Safe Shutdown Capability Reassessment for Salem Nuclear Generating Station, Units 1 and 2," to the licensee, Public Service Electric and Gas (PSE&G). This evaluation incorporated the results of an independent assessment performed by Brookhaven National Laboratory (BNL), as documented in BNL Technical Evaluation Report (I'ER) dated November 9, 1995. The scope of the BNL evaluation concentrated on a review of the licensing basis of the Salem Nuclear Power Station with respect to Section m.G and L of Appendix R to 10 CFR 50. Specific issues evaluated by BNL during this review include: (1) The level of approval granted by NRR regarding the current alternative shutdown system design's reliance on the use of repairs to achieve and maintain safe shutdown capability; and (2) The licensee's assumptions and methodology pertaining to the plant's ability to cope with spurious equipment actuations that may occur as a result of fin'; damage in accordance with the guidance presented in Generic Letters 81-12 and 86-10; and (3) . PSE&G evaluation of staff concerns for the potential loss of alternative shutdown capability due to fire-induced circuit faults as described in Information Notice 92-18. As a result of an evaluation of the fire protection licensing basis of the Salem Nuclear Generating Station, the BNL TER concluded:
RESPONSES DATED JUNE 19. 1996 AND DECEMBER 2. 1996 TO NRC OFFJCE OF NUCLEAR REACTOR REGULATION REPORT "SAFE SHUTDOWN CAPABJLJTY REASSESSMENT FOR SALEM NUCLEAR GENERATJNG STATJON UNJTS 1 AND 2," DATED JANUARY 25. 1996 Revision J January 23, J997 Prepared By:        K. Sullivan Prepared For:        U.S. Nuclear Regulatory Commission Office of Nuclear Reactor Regulation
: 1. The post-fire alternative shutdown system design reliance on repair activities to achieve and maintain hot standby conditions, does not appear to have been accepted by NRR for use as a long-term compliance strategy.
 
: 2. The licensee's assumption of one spurious operation per fire event is inconsistent with established guidance disseminated by the staff and does not appear to satisfy the regulatory intent of Sections ill.G. and III.L of Appendix R to 10 CFR 50 .. 3. The licensee's evaluation and disposition of staff concerns described in IN 92-. 18 is inconsistent with established guidance.disseminated by the staff, and does not appear to satisfy the regulatory intent of Sections 111.G. and 111.L of Appendix R to 10 CFR 50.  
===1. Background===
. . I .,I . I On February 7, 1996, each of the issues described above was discussed in detail at a public meeting held between NRC, BNL and PSE&G representatives at NRC Headquarters, Rockville, Maryland.
By letter dated January 25, 1996, the NRC Office of Nuclear Reactor Regulation (NRR) forwarded its report "Safe Shutdown Capability Reassessment for Salem Nuclear Generating Station, Units 1 and 2," to the licensee, Public Service Electric and Gas (PSE&G). This evaluation incorporated the results of an independent assessment performed by Brookhaven National Laboratory (BNL), as documented in BNL Technical Evaluation Report (I'ER) dated November 9, 1995. The scope of the BNL evaluation concentrated on a review of the licensing basis of the Salem Nuclear Power Station with respect to Section m.G and L of Appendix R to 10 CFR 50. Specific issues evaluated by BNL during this review include:
(1)     The level of approval granted by NRR regarding the current alternative shutdown system design's reliance on the use of repairs to achieve and maintain safe shutdown capability; and (2)     The licensee's assumptions and methodology pertaining to the plant's ability to cope with spurious equipment actuations that may occur as a result of fin'; damage in accordance with the guidance presented in Generic Letters 81-12 and 86-10; and (3)   . PSE&G evaluation of staff concerns for the potential loss of alternative shutdown capability due to fire-induced circuit faults as described in Information Notice 92-18.
As a result of an evaluation of the fire protection licensing basis of the Salem Nuclear Generating Station, the BNL TER concluded:
: 1.     The post-fire alternative shutdown system design reliance on repair activities to achieve and maintain hot standby conditions, does not appear to have been accepted by NRR for use as a long-term compliance strategy.
: 2.       The licensee's assumption of one spurious operation per fire event is inconsistent with established guidance disseminated by the staff and does not appear to satisfy the regulatory intent of Sections ill.G. and III.L of Appendix R to 10 CFR 50..
: 3.       The licensee's evaluation and disposition of staff concerns described in IN 92-
              . 18 is inconsistent with established guidance.disseminated by the staff, and does not appear to satisfy the regulatory intent of Sections 111.G. and 111.L of Appendix R to 10 CFR 50.
I
    .,I
        . I On February 7, 1996, each of the issues described above was discussed in detail at a public meeting held between NRC, BNL and PSE&G representatives at NRC Headquarters, Rockville, Maryland.
At the meeting PSE&G characterized its perspective of each issue and described evaluations and design changes being implemented at Salem to address staff concerns.
At the meeting PSE&G characterized its perspective of each issue and described evaluations and design changes being implemented at Salem to address staff concerns.
By letter dated June 19,1996 PSE&G provided a formal response to the staff's January 25, 1996 report and issues discussed during the February 7, 1996 ineeting at NRC Headquarters.
By letter dated June 19,1996 PSE&G provided a formal response to the staff's January 25, 1996 report and issues discussed during the February 7, 1996 ineeting at NRC Headquarters. A review of this submittal determined that certain clarifications and additional information would be necessary in order to complete the review. Accordingly, by letter dated October 30, 1996, the staff forwarded a request for additional information (RAJ) to the licensee, and by letter dated December 2, 1996 the licensee provided its response. The following paragraphs provide the results of the BNL assessment of re...c:olutions proposed by PSE&G to address each of the issues described in the staff's Januai.--y 25, 1996 report.
A review of this submittal determined that certain clarifications and additional information would be necessary in order to complete the review. Accordingly, by letter dated October 30, 1996, the staff forwarded a request for additional information (RAJ) to the licensee, and by letter dated December 2, 1996 the licensee provided its response.
: 2. Evaluation of Issues 2.1             Alternative Shutdown System Design Reliance on the Use of Repairs to Achieve and Maintain Hot Shutdown Conditions 2.1.1 Discussion To provide assurance that cabling required for or associated with the alternative shutdown capability can be made to be physically and electrically separated (independent) from the affects of fire, alternative shutdown system designs typically incorporate the use of isolation/transfer switches. Once activated, these devices, which are located outside of the fire affected area, enable the control and/or monitoring of required shut.down systems to be transferred to an area of the plant that is independent (physically and electrically) of the fire affected area(s).
The following paragraphs provide the results of the BNL assessment of re...c:olutions proposed by PSE&G to address each of the issues described in the staff's Januai.--y 25, 1996 report. 2. Evaluation of Issues 2.1 Alternative Shutdown System Design Reliance on the Use of Repairs to Achieve and Maintain Hot Shutdown Conditions 2.1.1 Discussion To provide assurance that cabling required for or associated with the alternative shutdown capability can be made to be physically and electrically separated (independent) from the affects of fire, alternative shutdown system designs typically incorporate the use of isolation/transfer switches.
At Salem the alternative shut.down system design did not incorporate the use of isolation/transfer switches. In lieu of providing this capability, the licensee had developed abnormal operating procedures which direct operators to perform repair activities (e.g. cutting/lifting leads, installing jumpers, and fuse replacement) as necessary to isolate potentially affected circuits and establish local control and monitoring capability for required shut.down systems.
Once activated, these devices, which are located outside of the fire affected area, enable the control and/or monitoring of required shut.down systems to be transferred to an area of the plant that is independent (physically and electrically) of the fire affected area(s). At Salem the alternative shut.down system design did not incorporate the use of isolation/transfer switches.
Section m.G.l.b and m.L.5 of Appendix R to 10 CFR 50 establishes the criteria for cold shutdown system repairs. Repairs (e.g., cutting or lifting leads, installing jumpers, pulling and replacing fuses) of post-fire safe shutdown systems required for achieving and maintaining hot shutdown* or hot standby are not allowed.
In lieu of providing this capability, the licensee had developed abnormal operating procedures which direct operators to perform repair activities (e.g. cutting/lifting leads, installing jumpers, and fuse replacement) as necessary to isolate potentially affected circuits and establish local control and monitoring capability for required shut.down systems. Section m.G.l.b and m.L.5 of Appendix R to 10 CFR 50 establishes the criteria for cold shutdown system repairs. Repairs (e.g., cutting or lifting leads, installing jumpers, pulling and replacing fuses) of post-fire safe shutdown systems required for achieving and maintaining hot shutdown*
I During the initial licensing process for Salem Unit 2, the NRC had accepted the use of such repair actions on an interim basis during the plant's startup testing program. A May 1981 Safety Evaluation (SE) documents the staffs approval of this approach as a short-term temporary measure, with long-term compliance pending staff review of the licensee's compliance with Appendix R (Ref. :NUREG-0517, Supplement No.6, "Safety Evaluation Report Related to the Operation of Salem Nuclear Generating Station, Unit No. 2" and NRC's "Report on PSE&G Cable Separation Study," included as Attachment G to the May 1981 SER).                                                               -
or hot standby are not allowed.  
2.1.2 Evaluation In its June 16, 1982 submittal, the licensee informed the staff that Salem's alternative shutdown procedures do not require the use of electrical jumpers or pneumatic bypasses. In a subsequent Safety Evaluation Report (SER), dated May 31, 1983, the staff stated the following: "No repairs or modifications are required to effect hot or cold shutdown utilizing the alternate shutdown methods."
. I *
With regard to this statement, in its June 19, 1996 submittal, the licensee states: "PSE&G has interpreted this to refer to repairs in the fire zone and to exclude the replacement of fuses, the installation ofjumpers, and lifting of leads." In this submittal, PSE&G also requested the staff to revise the 1983 SER as fo11ows:
* During the initial licensing process for Salem Unit 2, the NRC had accepted the use of such repair actions on an interim basis during the plant's startup testing program. A May 1981 Safety Evaluation (SE) documents the staffs approval of this approach as a short-term temporary measure, with term compliance pending staff review of the licensee's compliance with Appendix R (Ref. :NUREG-0517, Supplement No.6, "Safety Evaluation Report Related to the Operation of Salem Nuclear Generating Station, Unit No. 2" and NRC's "Report on PSE&G Cable Separation Study," included as Attachment G to the May 1981 SER). -2.1.2 Evaluation In its June 16, 1982 submittal, the licensee informed the staff that Salem's alternative shutdown procedures do not require the use of electrical jumpers or pneumatic bypasses.
From:       "No repairs or modifications are required to effect hot or cold shutdown utilizing the alternate shutdown methods. "
In a subsequent Safety Evaluation Report (SER), dated May 31, 1983, the staff stated the following: "No repairs or modifications are required to effect hot or cold shutdown utilizing the alternate shutdown methods." With regard to this statement, in its June 19, 1996 submittal, the licensee states: "PSE&G has interpreted this to refer to repairs in the fire zone and to exclude the replacement of fuses, the installation of jumpers, and lifting of leads." In this submittal, PSE&G also requested the staff to revise the 1983 SER as fo11ows: From: To: "No repairs or modifications are required to effect hot or cold shutdown utilizing the alternate shutdown methods. " * "No repairs or modifications in the fire zone are required to attain hot standby utilizing the alternate shutdown methods. " The requested change in wording of this statement represents a significant change in the level of protection provided.
* To:        "No repairs or modifications in the fire zone are required to attain hot standby utilizing the alternate shutdown methods. "
Specifically, the staff was concerned that the proposed change could be interpreted as allowing the licensee to make repairs necessary to achieve and maintain hot shutdown in areas other than the fire affected area and allow repair activities in the fire affected zone as necessary to maintain hot shutdown conditions.
The requested change in wording of this statement represents a significant change in the level of protection provided. Specifically, the staff was concerned that the proposed change could be interpreted as allowing the licensee to make repairs necessary to achieve and maintain hot shutdown in areas other than the fire affected area and allow repair activities in the fire affected zone as necessary to maintain hot shutdown conditions. On this basis, the staff determined that the licensee's request to revise the Safety Evaluation Report was not acceptable.
On this basis, the staff determined that the licensee's request to revise the Safety Evaluation Report was not acceptable.
In its June 19, 1996 response, the licensee further states that it has initiated a design change to install isolation/transfer switches. PSE&G states that the installation of these devices will "eliminate the use ofjumpers as a method/or achieving and maintaining post-fire hot $tandby conditions," and "the design input for the change considered NRC guidance documents such as Generic Letter 81-12 and 86-:10.,,
In its June 19, 1996 response, the licensee further states that it has initiated a design change to install isolation/transfer switches.
In its response to the staff's October 30, 1996 request for additional information (Ref: PSE&G letter dated December 2, 1996), the licensee states that the post-fire safe shutdown analysis for normal shutdown from within the control room (where the tire analysis is governed by the requirements of Section III.G.2 of Appendix R to 10 CFR 50) does not employ any repair activities to achieve and maintain hot-standby conditions. With regard to the alternative shutdown capability, PSE&G states that pneumatic jumpers are not required to achieve and maintain post-tire hot-standby conditions and that design changes to install isolation/transfer switches will eliminate the need for repairs to electric circuits (e.g., electricaljumpers, lifting leads, and replacing fuses) in order to achieve and maintain post-fire hot-standby conditions. The licensee states that following the installation of proposed design changes, no repairs will be required to achieve and maintain hot-standby conditions when either normal shutdown systems controlled from the control room, or the alternative shutdown capability, controlled from the emergency control stations outside the control room, are used to accomplish post-fire safe shutdown conditions.
PSE&G states that the installation of these devices will "eliminate the use of jumpers as a method/or achieving and maintaining post-fire hot $tandby conditions," and "the design input for the change considered NRC guidance documents such as Generic Letter 81-12 and 86-:10.,, In its response to the staff's October 30, 1996 request for additional information (Ref: PSE&G letter dated December 2, 1996), the licensee states that the post-fire safe shutdown analysis for normal  
2.1.3 ConcJusion For fire events which do not require implementation of the alternative shutdown capability, the licensee states that hot shutdown conditions can be achieved and maintained from the control room without repairs. For fire events requiring control room evacuation and implementation of the alternative shutdown capability, the licensee states that its proposed modifications (i.e., installation of isolation/transfer switches) will eliminate the need for repairs to achieve and maintain hot shutdown conditions. This approach provides an appropriate means of conforming to the requirements of Appendix R to 10 CFR 50, and is, therefore, acceptable.
... ' .. shutdown from within the control room (where the tire analysis is governed by the requirements of Section III.G.2 of Appendix R to 10 CFR 50) does not employ any repair activities to achieve and maintain hot-standby conditions.
2.2           Analysis As&llnptions Pertaining to the Plant's Ability to Cope with Fll'e-initiated Spurious Signals 2.2.1 Discussion During the period of May 17 through May 21, 1993, the NRC conducted an inspection of Salem Nuclear Power Plant for compliance with Sections III.G, J., L., and 0., of Appendix R to 10 CFR
With regard to the alternative shutdown capability, PSE&G states that pneumatic jumpers are not required to achieve and maintain post-tire hot-standby conditions and that design changes to install isolation/transfer switches will eliminate the need for repairs to electric circuits (e.g., electricaljumpers, lifting leads, and replacing fuses) in order to achieve and maintain post-fire standby conditions.
: 50. As a result of its review, the inspection team concluded that the licensee's analysis of the potential effect of fire-initiated spurious signals was not sufficiently conservative, to the extent that the analysis, and the resulting* post-fire shutdown methodology, assumed only one spurious actuation to occur as a result of fire in any area, regardless of the number, or operational significance, of unprotected circuits that may be susceptible to common-cause damage due to fire. *in response to the inspection team's concern, the licensee stated that this assumption was based on its interpretation of the NRC response provided to Question 5.3. lO(a) of Generic Letter 86-10, which states, in part: "The safe shutdown capti.bility should not be adversely affected by any one spurious actuation or signal resulting from afire in any plant area."
The licensee states that following the installation of proposed design changes, no repairs will be required to achieve and maintain hot-standby conditions when either normal shutdown systems controlled from the control room, or the alternative shutdown capability, controlled from the emergency control stations outside the control room, are used to accomplish post-fire safe shutdown conditions.
                      *~
2.1.3 ConcJusion For fire events which do not require implementation of the alternative shutdown capability, the licensee states that hot shutdown conditions can be achieved and maintained from the control room without repairs. For fire events requiring control room evacuation and implementation of the alternative shutdown capability, the licensee states that its proposed modifications (i.e., installation of isolation/transfer switches) will eliminate the need for repairs to achieve and maintain hot shutdown conditions.
* I<'
This approach provides an appropriate means of conforming to the requirements of Appendix R to 10 CFR 50, and is, therefore, acceptable.
The licensee's application of the single spurious actuation assumption was found to be applied in its evaluation of all fire areas. That is, this assumption was applied in the evaluation of fire areas requiring alternative shutdown capability as well as areas where it had determined that the level of protection provided was sufficient to ensure that one train of systems necessary to achieve and maintain hot shutdown conditions would remain free of fire damage (i.e., fire areas satisfying the separation and protection criteria of Section ID.G.2).
2.2 Analysis As&llnptions Pertaining to the Plant's Ability to Cope with Fll'e-initiated Spurious Signals 2.2.1 Discussion During the period of May 17 through May 21, 1993, the NRC conducted an inspection of Salem Nuclear Power Plant for compliance with Sections III.G, J., L., and 0., of Appendix R to 10 CFR 50. As a result of its review, the inspection team concluded that the licensee's analysis of the potential effect of fire-initiated spurious signals was not sufficiently conservative, to the extent that the analysis, and the resulting*
During the February 1996 meeting and in its October 1996 Request for Additional information (RAI) the staff informed PSE&G that its assumption of one spurious operation per fire event was inconsistent with established guidance and does not appear to satisfy regulatory intent ofill.G. and lli.L.
post-fire shutdown methodology, assumed only one spurious actuation to occur as a result of fire in any area, regardless of the number, or operational significance, of unprotected circuits that may be susceptible to common-cause damage due to fire. *in response to the inspection team's concern, the licensee stated that this assumption was based on its interpretation of the NRC response provided to Question 5.3. lO(a) of Generic Letter 86-10, which states, in part: "The safe shutdown capti.bility should not be adversely affected by any one spurious actuation or signal resulting from afire in any plant area."  
2.2.2 Evaluation Appendix R to 10 CPR 50 establishes fire protection features deemed necessary to provide reasonable assurance that one train of systems necessary to achieve and maintain hot shutdown conditions remains free of fire damage. On February 20, 1981 the NRC forwarded Generic Letter 81-12 (GL 81-12) to all reactor licensees with plants licensed to operate prior to January 1, 1979. With regard to the protection of syst&#xa3;:ms and equipment required for hot standby, GL 81-12 provides the following staff positions:
'
: 1) The equipment and systems used to achieve and maintain hot standby should be free of fire damage and capable of maintaining such conditions for an extended time period if equipment required to achieve and maintain cold shutdown is not available due to fire damage; and,
* I< The licensee's application of the single spurious actuation assumption was found to be applied in its evaluation of all fire areas. That is, this assumption was applied in the evaluation of fire areas requiring alternative shutdown capability as well as areas where it had determined that the level of protection provided was sufficient to ensure that one train of systems necessary to achieve and maintain hot shutdown conditions would remain free of fire damage (i.e., fire areas satisfying the separation and protection criteria of Section ID.G.2). During the February 1996 meeting and in its October 1996 Request for Additional information (RAI) the staff informed PSE&G that its assumption of one spurious operation per fire event was inconsistent with established guidance and does not appear to satisfy regulatory intent ofill.G. and lli.L. 2.2.2 Evaluation Appendix R to 10 CPR 50 establishes fire protection features deemed necessary to provide reasonable assurance that one train of systems necessary to achieve and maintain hot shutdown conditions remains free of fire damage. On February 20, 1981 the NRC forwarded Generic Letter 81-12 (GL 81-12) to all reactor licensees with plants licensed to operate prior to January 1, 1979. With regard to the protection of syst&#xa3;:ms and equipment required for hot standby, GL 81-12 provides the following staff positions:
: 2) Wiring, including power sources for the control circuit and equipment operation for the alternate shutdown method, must be independent of equipment wiring in the area to be avoided; and
: 1) The equipment and systems used to achieve and maintain hot standby should be free of fire damage and capable of maintaining such conditions for an extended time period if equipment required to achieve and maintain cold shutdown is not available due to fire damage; and, 2) Wiring, including power sources for the control circuit and equipment operation for the alternate shutdown method, must be independent of equipment wiring in the area to be avoided; and
: 3) Cabling required for or associated with the alternative method of hot shutdown for each fire area, must be physically separated by the equivalent of a three-hour rated fire barrier from the fire area.
: 3) Cabling required for or associated with the alternative method of hot shutdown for each fire area, must be physically separated by the equivalent of a three-hour rated fire barrier from the fire area.
As a result of its review of licensee submittals following the issuance of GL _ 81-12, t!ie staff developed and promulgated additional clarifying foformatiori
a As result of its review of licensee submittals following the issuance of GL _81-12, t!ie staff developed and promulgated additional clarifying foformatiori _ (Ref: Enclosure 1 .of _ NRC memorandum dated-March 22, 1982, from R. J. Mattson to D. G. Eisenhut). This document was forwarded to PSF.&G as Enclosure 3 of an NRC letter dated April 20, 1982. With regard to circuits of equipment whose spurious operation could affect the alternative safe shutdown capability, the clarification provided by the staff states that an adequate lever of protection may be achieved through implementation of one of the following methods:
_ (Ref: Enclosure 1 . of _ NRC memorandum dated-March 22, 1982, from R. J. Mattson to D. G. Eisenhut).
: 1. Provide protection for circuits of concern per Section ill.G.2 of Appendix R, or
This document was forwarded to PSF.&G as Enclosure 3 of an NRC letter dated April 20, 1982. With regard to circuits of equipment whose spurious operation could affect the alternative safe shutdown capability, the clarification provided by the staff states that an adequate lever of protection may be achieved through implementation of one of the following methods:  
: 2. Provide a means to isolate the equipment of concern from the fire area prior to the fire (an example of this approach is pre-fire strategies which de-energize equipment whose fire-initiated sJ>urious operation could adversely affect safe shutdown); or,
*
: 3. Provide electrical isolation that prevents spurious operation (e.g., isolation/transfer switch schemes); or                       .
* 1. Provide protection for circuits of concern per Section ill.G.2 of Appendix R, or 2. Provide a means to isolate the equipment of concern from the fire area prior to the fire (an example of this approach is pre-fire strategies which de-energize equipment whose initiated sJ>urious operation could adversely affect safe shutdown);
: 4. Provide a means to detect spurious operations and then procedures to defeat the maloi)eration of equipment (an example would be procedural guidance to establish manual control of a Motor Operator Valve that may spuriously operate as a result of a fire-induced failures in its control circuitry).
or, 3. Provide electrical isolation that prevents spurious operation (e.g., isolation/transfer switch schemes);
In April 1986, the staff issued Generic Letter 86-10, "Implementation of Fire Protection Program Requirements.". This document presents the Commission's position on certain specific issues in the form of responses to questions posed by the industry during a series of Regional Workshops on the implementation of NRC fire protection requirements at nuclear power plants. In Section 5 of this document, the NRC provides responses to specific questions related to Alternative and Dedicated Shutdown Capability. In Question 5.3.10 the staff is requested to define the plant transients that must be considered in the design of the alternative shutdown system. Inherent in the staff's response to this question, isthe expectation that potential spurious equipment operations have been identified, and a suitable method of protection, as required by regulatory criteria (Appendix R Sections III. G.1, ill.G.3, ill.L.3 and ill.L. 7); has been provided.
or . 4. Provide a means to detect spurious operations and then procedures to defeat the maloi)eration of equipment (an example would be procedural guidance to establish manual control of a Motor Operator Valve that may spuriously operate as a result of a fire-induced failures in its control circuitry).
The guidance of GL 86-10 is design basis transient criteria for determining the capacity and capability of the alternative shutdown system and its application is based on the system being physically and electrically independent of the fire area of concern and that hot shorts, shorts to ground, and open circuits in associated circuits will not prevent the operation of safe shutdown equipment. In order for the alternative shutdown capability to perform its design function, the shutdown equipment that it relies on must be capable of performing its function once it has been electrically isolated from the control room or the cable sprea~ing room.
In April 1986, the staff issued Generic Letter 86-10, "Implementation of Fire Protection Program Requirements.".
The licensee's assumption that only one spurious actuation would occur as a result of any fire is not consistent with th~ regulatory requirements of Appendix R to 10 CFR 50 and guidance established by the staff in Generic Letter 81-12, and its subsequent clarification' which WaS forwarded to the licensee as Enclosure 3 of NRC letter dated April 20, 1982.
This document presents the Commission's position on certain specific issues in the form of responses to questions posed by the industry during a series of Regional Workshops on the implementation of NRC fire protection requirements at nuclear power plants. In Section 5 of this document, the NRC provides responses to specific questions related to Alternative and Dedicated Shutdown Capability.
In its June 19, 1996 response the licensee states that it has reanalyzed all fire areas where the single spurious actuation assumption was applied. For areas other than those requiring alternative shutdown capability, this evaluation concluded that because the cabling in each application either met separation requirements, was adequately protected, or its function for the component(s) served would not lead to spurious actuation, dependence on the single spurious actuation assumption was no longer necessary. With regard to its application of the single spurious actuation assumption in areas requiring an alternative shutdown capability, in its December 1996 response PSE&G states that it has re-evaluated alternative shutdown systems necessary to achieve and maintain hot standby conditions, and as a result of this review, has initiated design modifications to provide isolation/transfer capability for components necessary to* satisfy post-fire, alternative shutdown, functions. The specific components provided with isolation/transfer switches are depicted in the following tables:
In Question 5.3.10 the staff is requested to define the plant transients that must be considered in the design of the alternative shutdown system. Inherent in the staff's response to this question, isthe expectation that potential spurious equipment operations have been identified, and a suitable method of protection, as required by regulatory criteria (Appendix R Sections III. G .1, ill.G.3, ill.L.3 and ill.L. 7); has been provided.
SALEM UNIT 1 EQUIPMENT                             SALEM UNIT l EQUIPMENT I AFW Room Cooler                                 2 AFW Room Cooler I I Charging pump aux lube oil pump                 21 Charging pump aux lube oil pump 11 Charging pump room cooler                       21 Charging pump room cooler 1I Chiller                                         21 Chiller JI Chilled Water Pump                             21 Chilled Water Pump 1I Service Water Intake Vent Fan                   21 Service Water Intake Vent Fan 11 Component Cooling Room Cooler                   21 Component Cooling Room Cooler 12 Charging Pump Aux Lube Oil Pwnp                 22 Charging Pump Aux Lube Oil Pump 12 Charging Pump room Cooler                       22 Charging Pump room Cooler 12 Chiller                                         22 Chiller 12 Chilled Water Pump                               22 ChiJJed Water Pump 12 Service Water Intake Vent Fan                   22 Service Water Intake Vent Fan I2 Component Cooling Room Cooler                   22 Component Cooling Room Cooler I3 Charging Room Cooler                           23 Charging Room Cooler 13 Service Water Intake Vent Fan                   23 Service Water Intake Vent Fan 13 ChiUer                                           23 Chiller 14 Service Water Intake Vent Fan                   24 Service Water Intake Vent Fan ICVI39         11 and 12 Charging pump mini-flow   2CVl39         21 and 22 Charging pump mini-flow isolation valve                                   isolation valve 1CV140         11 and 12 Charging pump mini-flow   2CV140         21 and 22 Charging pump mini-flow isolation valve                                     isolation valve ICV40 Charging pump suction from VCT isolation     2CV40 Charging pump suction from VCT isolation valve                                               valve ICV41 Charging pump suction from VCT isolation     2CV41 Charging pump suction from VCT isolation valve                                               valve 1CV68 Charging Pump discharge to REGEN HX           2CV68 Charging Pump discharge to REGEN HX isolation valve                                     isolation valve ICV69 Charging Pump discharge to REGEN HX           2CV69 Charging Pump discharge to REGEN HX isolation valve                                     isolation valve SALEM UNIT 1 EQUIPMENT                                     SALEM UNIT l EQUIPMENT JPR6         Pressurizer relief stop valve                 2PR6         Pressurizer relief stop valve IPR?       Pressurizer relief stop valve                 2PR7         Pressurizer relief stop valve JSJJ       *Charging pump suction from RWST               2SJJ         Charging pump suction from RWST isolation valve                                             .isolation valve JSJ12       BIT isolation valve                           2SJJ2         BIT isolation valve JSJJ3       BIT Isolation valve                           2SJJ3         BIT Isolation valve ISJ2         Charging pump suction from RWST               2SJ2         Charging pwnp suction from RWST isolation valve                                             isolation valve JSW26 Non-nuclear Service Water Isolation Valve             2SW26         Non-nuclear Service Water Isolation Valve By facsimile dated 12/6/96, (From: B. Thomas, PSE&G, To: L. Olshan, NRC) PSE&G infonned the staff that Unit 2 valves lister! above have been provided with isolation/transfer switches. In addition, the following*Unit 2 valves will have isolation/transfer switches installed by the end of the next refueling outage:
The guidance of GL 86-10 is design basis transient criteria for determining the capacity and capability of the alternative shutdown system and its application is based on the system being physically and electrically independent of the fire area of concern and that hot shorts, shorts to ground, and open circuits in associated circuits will not prevent the operation of safe shutdown equipment.
21SJ44           2 I SI CONTMT swnp isolation valve 22SJ44             22 SI CONTMT swnp isolation valve 2CC30             CCW System cross-tie valve 2CC31             CCW System cross-tie valve 21SW21             Diesel Generator Header Isolation Valve 2JSW22             Service Water Header Isolation Valve 21SW23             Service Water Header Crossover Valve 22SW21             Diesel Generator Header Isolation Valve 22SW22             Service Water Header Isolation Valve 22SW23             Service Water Header Crossover Valve 22SW20             Service Water Header Isolation Valve The design for motor-operated valves (MOV's) at Salem utilizes 230Y AC motor control centers (MCC's). Each MCC contains pans which hold the control circuitry for an MOY. Within each pan are such items as the main contactors, thermal overload (TOL) relay, auxiliary relay, control fuses, and field wiring terminal blocks. The typical MOY transfer circuit scheme utilizes two switches and two valve position indicating lights mounted within the pan. The first switch isolates wiring routed from the MCC to the fire area(s) of concern, inserts new fuses into the control circuit, and provides permissives to operate the MOY via the second switch. The second switch serves as an operate switch to open or close the valve. For motors, such as room coolers, one switch and one indicating light are used. The switch performs the function of isolating wiring routed from the MCC to the fire area(s) of concern, inserting new fuses into the control circuit, inserting an indicating light into the control circuit (to identify operation in the remote shutdown mode) and operating the motor.
In order for the alternative shutdown capability to perform its design function, the shutdown equipment that it relies on must be capable of performing its function once it has been electrically isolated from the control room or the cable room. The licensee's assumption that only one spurious actuation would occur as a result of any fire is not consistent with regulatory requirements of Appendix R to 10 CFR 50 and guidance established by the staff in Generic Letter 81-12, and its subsequent clarification' which WaS forwarded to the licensee as Enclosure 3 of NRC letter dated April 20, 1982. In its June 19, 1996 response the licensee states that it has reanalyzed all fire areas where the single spurious actuation assumption was applied. For areas other than those requiring alternative shutdown
2.2.3 Conclusion The licensee has reanalyzed fire areas where the single spurious actuation assumption was applied.
* capability, this evaluation concluded that because the cabling in each application either met separation requirements, was adequately protected, or its function for the component(s) served would not lead to spurious actuation, dependence on the single spurious actuation assumption was no longer necessary.
For areas other than those requiring an alternative shutdown capability, this re-evaluation has determined that because t:1e cabling in each application either met separation requirements, was adequately protected, or its function for the component(s) served would not lead to spurious actuation, dependence on the single spurious actuation assumption was no longer necessary. With regard to areas where fire may require implementation of the alternative shutdown capability, PSE&G has initiated design modifications to provide isolation/transfer capability for components necessary to satisfy post-fire, alternative shutdown, functions.
With regard to its application of the single spurious actuation assumption in areas requiring an alternative shutdown capability, in its December 1996 response PSE&G states that it has re-evaluated alternative shutdown systems necessary to achieve and maintain hot standby conditions, and as a result of this review, has initiated design modifications to provide isolation/transfer capability for components necessary to* satisfy post-fire, alternative shutdown, functions.
The licensee's evaluation, in conjunction with its proposed modifications to provide electrical isolation from areas requiring an alternative shutdown capability, provide assurance that potential fire-induced spurious operations that could adversely affect the post-fire shutdown capability have been appropriately identified, evaluated and dispositioned. The licensee's approach satisfies Appendix R to 10 CFR 50 and is, therefore, acceptable.
The specific components provided with isolation/transfer switches are depicted in the following tables:
* 2.3           PSE&G Evaluation and Disposition or Staff Concerns Regarding The Potential for Loss or Remote Shutdown Capability Following a Control Room Fire. (Infonnation Notice (IN) 92-18) 2.3.1 Discussion On February 28, 1992 the NRC Office of Nuclear Reactor Regulation (NRR) issued Information Notice (IN) 92-18 to alert licensees of conditions that could result in a loss of ability to maintain the reactor in a safe shutdown condition in the event of a control room fire. Specifically, IN 92-18
* SALEM UNIT 1 EQUIPMENT SALEM UNIT l EQUIPMENT I AFW Room Cooler 2 AFW Room Cooler I I Charging pump aux lube oil pump 21 Charging pump aux lube oil pump 11 Charging pump room cooler 21 Charging pump room cooler 1 I Chiller 21 Chiller JI Chilled Water Pump 21 Chilled Water Pump 1 I Service Water Intake Vent Fan 21 Service Water Intake Vent Fan 11 Component Cooling Room Cooler 21 Component Cooling Room Cooler 12 Charging Pump Aux Lube Oil Pwnp 22 Charging Pump Aux Lube Oil Pump 12 Charging Pump room Cooler 22 Charging Pump room Cooler 12 Chiller 22 Chiller 12 Chilled Water Pump 22 ChiJJed Water Pump 12 Service Water Intake Vent Fan 22 Service Water Intake Vent Fan I 2 Component Cooling Room Cooler 22 Component Cooling Room Cooler I 3 Charging Room Cooler 23 Charging Room Cooler 13 Service Water Intake Vent Fan 23 Service Water Intake Vent Fan 13 ChiUer 23 Chiller 14 Service Water Intake Vent Fan 24 Service Water Intake Vent Fan ICVI39 11 and 12 Charging pump mini-flow 2CVl39 21 and 22 Charging pump mini-flow isolation valve isolation valve 1CV140 11 and 12 Charging pump mini-flow 2CV140 21 and 22 Charging pump mini-flow isolation valve isolation valve ICV40 Charging pump suction from VCT isolation 2CV40 Charging pump suction from VCT isolation valve valve ICV41 Charging pump suction from VCT isolation 2CV41 Charging pump suction from VCT isolation valve valve 1CV68 Charging Pump discharge to REGEN HX 2CV68 Charging Pump discharge to REGEN HX isolation valve isolation valve ICV69 Charging Pump discharge to REGEN HX 2CV69 Charging Pump discharge to REGEN HX isolation valve isolation valve  
                                                    - IO-
*
 
* SALEM UNIT 1 EQUIPMENT SALEM UNIT l EQUIPMENT JPR6 Pressurizer relief stop valve 2PR6 Pressurizer relief stop valve IPR? Pressurizer relief stop valve 2PR7 Pressurizer relief stop valve JSJJ *Charging pump suction from RWST 2SJJ Charging pump suction from RWST isolation valve .isolation valve JSJ12 BIT isolation valve 2SJJ2 BIT isolation valve JSJJ3 BIT Isolation valve 2SJJ3 BIT Isolation valve ISJ2 Charging pump suction from RWST 2SJ2 Charging pwnp suction from RWST isolation valve isolation valve JSW26 Non-nuclear Service Water Isolation Valve 2SW26 Non-nuclear Service Water Isolation Valve By facsimile dated 12/6/96, (From: B. Thomas, PSE&G, To: L. Olshan, NRC) PSE&G infonned the staff that Unit 2 valves lister! above have been provided with isolation/transfer switches.
cautions licensees of the potential for a control room fire to cause an electrical short circuit between normally energized conductors and conductors associated with the control circuitry of motor-operated valves (MOYs) required to achieve post-fire safe shutdown conditions from outside the main control room. Such an event could cause the valve to spuriously actuate. Due to the electrical location of the circuit fault, the MOY torque and limit switches would be ineffective in stopping valve operation.
In addition, the following*Unit 2 valves will have isolation/transfer switches installed by the end of the next refueling outage: 21SJ44 2 I SI CONTMT swnp isolation valve 22SJ44 22 SI CONTMT swnp isolation valve 2CC30 CCW System cross-tie valve 2CC31 CCW System cross-tie valve 21SW21 Diesel Generator Header Isolation Valve 2JSW22 Service Water Header Isolation Valve 21SW23 Service Water Header Crossover Valve 22SW21 Diesel Generator Header Isolation Valve 22SW22 Service Water Header Isolation Valve 22SW23 Service Water Header Crossover Valve 22SW20 Service Water Header Isolation Valve  
Additionally, thermal overload protection has been *bypassed at many facilities. Given these a
*
conditions, there is potential for a fire-initiated spurious valve actuation to result in mechanical damage sufficient to prevent reactor operators from manually operating the valve.
* The design for motor-operated valves (MOV's) at Salem utilizes 230Y AC motor control centers (MCC's). Each MCC contains pans which hold the control circuitry for an MOY. Within each pan are such items as the main contactors, thermal overload (TOL) relay, auxiliary relay, control fuses, and field wiring terminal blocks. The typical MOY transfer circuit scheme utilizes two switches and two valve position indicating lights mounted within the pan. The first switch isolates wiring routed from the MCC to the fire area( s) of concern, inserts new fuses into the control circuit, and provides permissives to operate the MOY via the second switch. The second switch serves as an operate switch to open or close the valve. For motors, such as room coolers, one switch and one indicating light are used. The switch performs the function of isolating wiring routed from the MCC to the fire area(s) of concern, inserting new fuses into the control circuit, inserting an indicating light into the control circuit (to identify operation in the remote shutdown mode) and operating the motor. 2.2.3 Conclusion The licensee has reanalyzed fire areas where the single spurious actuation assumption was applied. For areas other than those requiring an alternative shutdown capability, this re-evaluation has determined that because t:1e cabling in each application either met separation requirements, was adequately protected, or its function for the component(s) served would not lead to spurious actuation, dependence on the single spurious actuation assumption was no longer necessary.
At the time of the May 1993 Appendix R compliance inspection the licensee expressed its opinion that since in its view the conditions described in Information Notic~ 92-18 were not credible, no further evaluation was performed. However, during a June 3, 1993 telephone conference between the iicensee and the staff the licensee committed to provide a formal response to the concerns described in the Information Notice.
With regard to areas where fire may require implementation of the alternative shutdown capability, PSE&G has initiated design modifications to provide isolation/transfer capability for components necessary to satisfy post-fire, alternative shutdown, functions.
2.3.2 Evaluation By letter dated October 26, 1993, the licensee forwarded its response in a document titled:
The licensee's evaluation, in conjunction with its proposed modifications to provide electrical isolation from areas requiring an alternative shutdown capability, provide assurance that potential fire-induced spurious operations that could adversely affect the post-fire shutdown capability have been appropriately identified, evaluated and dispositioned.
  ".Engineering Evaluation of SGS 1&2 Control Room Evacuation for Fire Induced MOY Hot Shorts as Discussed in NRC Information Notice 92-18", dated August 20, 1993. The evaluation identified a total of 65 valves as being specifically addressed within the Salem Control Room evacuation procedure and Safe Shutdown Analysis. As a part of its evaluation the schematics and wiring diagrams for all 65 valves were reviewed to determine which cables associated with the valves were routed in areas where control room evacuation may be required due to fire (i.e., the Control Room, Relay Room, or Ceiling of the 4iiOY Switchgear Room). Of the 65 valves evaluated, 51 were found to be susceptible to the hot short conditions described in the Information Notice. However, the evaluation was found to conclude: *due to system/component redundancies, at SGS 1&2. failure of any one (emphasis added) of these valves would not preclude a post-fire safe shutdown condition.
The licensee's approach satisfies Appendix R to 10 CFR 50 and is, therefore, acceptable.
* The licensee's disposition of this concern was found to be predicated on its interpretation of staff guidance contained in Generic Letter 86-10. Specifically, the licensee had assumed that the evaluation of post-fire alternative shutdown capability need only consider one spurious valve actuation, irrespective of the number or post-fire shutdown significance of the potentially affected circuits. This interpretation was then extended to its evaluation of staff concerns described in IN 92-18. This led the licensee to conclude,. without providing any furth~r technical justification~ that only one of the 51 potentially affected valves would spuriously actuate.
* 2.3 PSE&G Evaluation and Disposition or Staff Concerns Regarding The Potential for Loss or Remote Shutdown Capability Following a Control Room Fire. (Inf onnation Notice (IN) 92-18) 2.3.1 Discussion On February 28, 1992 the NRC Office of Nuclear Reactor Regulation (NRR) issued Information Notice (IN) 92-18 to alert licensees of conditions that could result in a loss of ability to maintain the reactor in a safe shutdown condition in the event of a control room fire. Specifically, IN 92-18 -IO-  
During the February 7, 1996 meeting, the licensee described a design change to preclude mechanical valve damage by reinstalling the previously bypassed thermal overload (TOL) protection on MOV's.
*
;  "~
* cautions licensees of the potential for a control room fire to cause an electrical short circuit between normally energized conductors and conductors associated with the control circuitry of motor-operated valves (MOYs) required to achieve post-fire safe shutdown conditions from outside the main control room. Such an event could cause the valve to spuriously actuate. Due to the electrical location of the circuit fault, the MOY torque and limit switches would be ineffective in stopping valve operation.
  ~-
Additionally, thermal overload protection has been *bypassed at many facilities.
f In its letter dated June 19, 1996, the licensee stated that this modification eliminates the concerns of IN 92-18 for Salem and that the thermal overload protection for these MOVs had been installed.
Given these conditions, there is a potential for a fire-initiated spurious valve actuation to result in mechanical damage sufficient to prevent reactor operators from manually operating the valve. At the time of the May 1993 Appendix R compliance inspection the licensee expressed its opinion that since in its view the conditions described in Information 92-18 were not credible, no further evaluation was performed.
In its October 30, 1996 request for additional information the staff requested the licensee to demonstrate that the methodology and criteria for assuring that the TOL protection is sized properly and that it will adequately protect the subject MOVs from mechanical damage (e.g., deep seating and binding of the valve). In addition, the staff requested PSE&G to describe the typical isolation transfer circuit scheme for these MOvs* and confirm that the tripping of the TOL protection devices does not render the subject MOVs inoperable and that once electrically isolated from the fire area of concern that they can be operated remotely from emergency control stations outside the control room.
However, during a June 3, 1993 telephone conference between the iicensee and the staff the licensee committed to provide a formal response to the concerns described in the Information Notice. 2.3.2 Evaluation By letter dated October 26, 1993, the licensee forwarded its response in a document titled: ".Engineering Evaluation of SGS 1&2 Control Room Evacuation for Fire Induced MOY Hot Shorts as Discussed in NRC Information Notice 92-18", dated August 20, 1993. The evaluation identified a total of 65 valves as being specifically addressed within the Salem Control Room evacuation procedure and Safe Shutdown Analysis.
In its December 1996 response, the licensee states that all safety related motor-operated valves (MOV's) at Salem have thermal overload relays in their circuitry which are designed to protect the power feed to the MOV while providing maximum protection of the valve operator motor. The methodology for determining thermal overload sizing takes into account the voltage and ambient temperature variations when plotting protection points for current at twice nominal torque and locked rotor withstand characteristics. The thermal overloads are sized to ensure that the MOVs will not spuriously trip while providing the maximum am0unt of motor protection. Upon further review of the TOL design change for mechanical valve damage, PSE&G noted that the TOLs for several valves have marginal values for motor torque capability at full voltage versus the valve assembly torque limit. The valves identified by this review which are required to achieve hot-standby are as follows: CV40; CV41; CV68; CV69; CV139; CV140; PR6; PR7; SJI; SJ2; SJI3; and SW26. Also identified by this review were several valves whose TOL do not fully provide valve motor protection. These valves are as follows: CC30, CC31, SW21, SW22, SW23, 12/22SW20, and 14/24SW20.
As a part of its evaluation the schematics and wiring diagrams for all 65 valves were reviewed to determine which cables associated with the valves were routed in areas where control room evacuation may be required due to fire (i.e., the Control Room, Relay Room, or Ceiling of the 4iiOY Switchgear Room). Of the 65 valves evaluated, 51 were found to be susceptible to the hot short conditions described in the Information Notice. However, the evaluation was found to conclude:  
The licensee states that it has initiated design changes to modify the circuits of the above referenced valves. Specifically, the control circuits of these valves will be modified to prevent hot-shorts from .
*due to system/component redundancies, at SGS 1 &2. failure of any one (emphasis added) of these valves would not preclude a post-fire safe shutdown condition.
bypassing the torque and limit switches by electrically relocating the switches between the control room and MCC as recommended by the staff in Information Notice 92-18.
* The licensee's disposition of this concern was found to be predicated on its interpretation of staff guidance contained in Generic Letter 86-10. Specifically, the licensee had assumed that the evaluation of post-fire alternative shutdown capability need only consider one spurious valve actuation, irrespective of the number or post-fire shutdown significance of the potentially affected circuits.
2.3.3 Conch1sion Based on the above, the licensee's stated methodology for resolving concerns identified in Information Notice 92-18, is directed at preventing mechanical damage to required MOVs by
This interpretation was then extended to its evaluation of staff concerns described in IN 92-18. This led the licensee to conclude,.
_reinstalling_the previo1,1sly bypassed thermal overload (fOL) protection on MOV~. Where reliance on thermal overload protection was found to provide insufficient protection, the licensee has initiated modifications which will prevent hot-shorts from bypassing MOV torque and limit switches as recommended by the staff in Information Notice 92-18. Should valves spuriously actuate, operators would establish local control, and manual positioning of the MOV would not be precluded. This approach conforms to the requirements of Appendix R to IO CFR 50 and is therefore, acceptable.
without providing any technical that only one of the 51 potentially affected valves would spuriously actuate. During the February 7, 1996 meeting, the licensee described a design change to preclude mechanical valve damage by reinstalling the previously bypassed thermal overload (TOL) protection on MOV's.  
.I)
'-; f *
    ~
* In its letter dated June 19, 1996, the licensee stated that this modification eliminates the concerns of IN 92-18 for Salem and that the thermal overload protection for these MOVs had been installed.
    ~
In its October 30, 1996 request for additional information the staff requested the licensee to demonstrate that the methodology and criteria for assuring that the TOL protection is sized properly and that it will adequately protect the subject MOVs from mechanical damage (e.g., deep seating and binding of the valve). In addition, the staff requested PSE&G to describe the typical isolation transfer circuit scheme for these MOvs* and confirm that the tripping of the TOL protection devices does not render the subject MOVs inoperable and that once electrically isolated from the fire area of concern that they can be operated remotely from emergency control stations outside the control room. In its December 1996 response, the licensee states that all safety related motor-operated valves (MOV's) at Salem have thermal overload relays in their circuitry which are designed to protect the power feed to the MOV while providing maximum protection of the valve operator motor. The methodology for determining thermal overload sizing takes into account the voltage and ambient temperature variations when plotting protection points for current at twice nominal torque and locked rotor withstand characteristics.
        "f
The thermal overloads are sized to ensure that the MOVs will not spuriously trip while providing the maximum am0unt of motor protection.
: 3. OveraU Summary As a result of its evaluation of the fire protection licensing basis of the Salem Nuclear Generating Station, the staff concluded in its report dated January 25, 1996:
Upon further review of the TOL design change for mechanical valve damage, PSE&G noted that the TOLs for several valves have marginal values for motor torque capability at full voltage versus the valve assembly torque limit. The valves identified by this review which are required to achieve hot-standby are as follows: CV40; CV41; CV68; CV69; CV139; CV140; PR6; PR7; SJI; SJ2; SJI3; and SW26. Also identified by this review were several valves whose TOL do not fully provide valve motor protection.
: 1. The post-fire alternative shutdown system design reliance on repair activities to achieve and maintain hot s.tandby conditions, does not appear to have been accepted by NRR for use as a long-term compliance strategy.
These valves are as follows: CC30, CC31, SW21, SW22, SW23, 12/22SW20, and 14/24SW20.
: 2. The licensee's assumption of one spurious operation per fire event is inconsistent with established guidance disseminated by the staff and does not appear to satisfy the regulatory intent of Sections ill.G. and ill.L of Appendix R to 10 CFR 50.
The licensee states that it has initiated design changes to modify the circuits of the above referenced valves. Specifically, the control circuits of these valves will be modified to prevent hot-shorts from . bypassing the torque and limit switches by electrically relocating the switches between the control room and MCC as recommended by the staff in Information Notice 92-18. 2.3.3 Conch1sion Based on the above, the licensee's stated methodology for resolving concerns identified in Information Notice 92-18, is directed at preventing mechanical damage to required MOVs by _reinstalling_the previo1,1sly bypassed thermal overload (fOL) protection on Where reliance on thermal overload protection was found to provide insufficient protection, the licensee has initiated modifications which will prevent hot-shorts from bypassing MOV torque and limit switches as recommended by the staff in Information Notice 92-18. Should valves spuriously actuate, operators would establish local control, and manual positioning of the MOV would not be precluded.
: 3. The licensee's evaluation and disposition of staff concerns described in IN 92-18 is inconsistent with established guidance disseminated by the staff; and does not appear to satisfy the regulatory intent of Sections 111.G. and III.L of Appendix R to 10 CFR 50.
This approach conforms to the requirements of Appendix R to IO CFR 50 and is therefore, acceptable.
To resolve these issues i!: a manner consistent with established staff guidance, the licensee has performed engineering evaluations and, where necessary, has developed and scheduled additional plant modifications necessary to bring the plant into compliance.
"f .I) '. , ., *
                                                            }}
* 3. OveraU Summary As a result of its evaluation of the fire protection licensing basis of the Salem Nuclear Generating Station, the staff concluded in its report dated January 25, 1996: 1. The post-fire alternative shutdown system design reliance on repair activities to achieve and maintain hot s.tandby conditions, does not appear to have been accepted by NRR for use as a long-term compliance strategy.
: 2. The licensee's assumption of one spurious operation per fire event is inconsistent with established guidance disseminated by the staff and does not appear to satisfy the regulatory intent of Sections ill.G. and ill.L of Appendix R to 10 CFR 50. 3. The licensee's evaluation and disposition of staff concerns described in IN 92-18 is inconsistent with established guidance disseminated by the staff; and does not appear to satisfy the regulatory intent of Sections 111.G. and III.L of Appendix R to 10 CFR 50. To resolve these issues i!: a manner consistent with established staff guidance, the licensee has performed engineering evaluations and, where necessary, has developed and scheduled additional plant modifications necessary to bring the plant into compliance. }}

Latest revision as of 04:19, 3 February 2020

Technical Evaluation of Public Service Electric & Gas Co Responses Dtd 960619 & 1202 to NRR Rept, 'Safe Shutdown Capability Reassessment for Salem Nuclear Generating Station Units 1 & 2.'
ML18102A918
Person / Time
Site: Salem  PSEG icon.png
Issue date: 01/23/1997
From: Sullivan K
Public Service Enterprise Group
To:
NRC (Affiliation Not Assigned)
Shared Package
ML18102A916 List:
References
NUDOCS 9703210009
Download: ML18102A918 (14)


Text

Appendix BROOKHAVEN NATIONAL LABORATORY DEPARTMENT OF ADVANCED TECHNOLOGY ENGINEERING TECHNOLOGY DIVISION TECHNJCAL EVALUATJON OF PUBLJC SERVJCE ELECTRJC AND GAS COMPANY (PSE&G)

RESPONSES DATED JUNE 19. 1996 AND DECEMBER 2. 1996 TO NRC OFFJCE OF NUCLEAR REACTOR REGULATION REPORT "SAFE SHUTDOWN CAPABJLJTY REASSESSMENT FOR SALEM NUCLEAR GENERATJNG STATJON UNJTS 1 AND 2," DATED JANUARY 25. 1996 Revision J January 23, J997 Prepared By: K. Sullivan Prepared For: U.S. Nuclear Regulatory Commission Office of Nuclear Reactor Regulation

1. Background

By letter dated January 25, 1996, the NRC Office of Nuclear Reactor Regulation (NRR) forwarded its report "Safe Shutdown Capability Reassessment for Salem Nuclear Generating Station, Units 1 and 2," to the licensee, Public Service Electric and Gas (PSE&G). This evaluation incorporated the results of an independent assessment performed by Brookhaven National Laboratory (BNL), as documented in BNL Technical Evaluation Report (I'ER) dated November 9, 1995. The scope of the BNL evaluation concentrated on a review of the licensing basis of the Salem Nuclear Power Station with respect to Section m.G and L of Appendix R to 10 CFR 50. Specific issues evaluated by BNL during this review include:

(1) The level of approval granted by NRR regarding the current alternative shutdown system design's reliance on the use of repairs to achieve and maintain safe shutdown capability; and (2) The licensee's assumptions and methodology pertaining to the plant's ability to cope with spurious equipment actuations that may occur as a result of fin'; damage in accordance with the guidance presented in Generic Letters 81-12 and 86-10; and (3) . PSE&G evaluation of staff concerns for the potential loss of alternative shutdown capability due to fire-induced circuit faults as described in Information Notice 92-18.

As a result of an evaluation of the fire protection licensing basis of the Salem Nuclear Generating Station, the BNL TER concluded:

1. The post-fire alternative shutdown system design reliance on repair activities to achieve and maintain hot standby conditions, does not appear to have been accepted by NRR for use as a long-term compliance strategy.
2. The licensee's assumption of one spurious operation per fire event is inconsistent with established guidance disseminated by the staff and does not appear to satisfy the regulatory intent of Sections ill.G. and III.L of Appendix R to 10 CFR 50..
3. The licensee's evaluation and disposition of staff concerns described in IN 92-

. 18 is inconsistent with established guidance.disseminated by the staff, and does not appear to satisfy the regulatory intent of Sections 111.G. and 111.L of Appendix R to 10 CFR 50.

I

.,I

. I On February 7, 1996, each of the issues described above was discussed in detail at a public meeting held between NRC, BNL and PSE&G representatives at NRC Headquarters, Rockville, Maryland.

At the meeting PSE&G characterized its perspective of each issue and described evaluations and design changes being implemented at Salem to address staff concerns.

By letter dated June 19,1996 PSE&G provided a formal response to the staff's January 25, 1996 report and issues discussed during the February 7, 1996 ineeting at NRC Headquarters. A review of this submittal determined that certain clarifications and additional information would be necessary in order to complete the review. Accordingly, by letter dated October 30, 1996, the staff forwarded a request for additional information (RAJ) to the licensee, and by letter dated December 2, 1996 the licensee provided its response. The following paragraphs provide the results of the BNL assessment of re...c:olutions proposed by PSE&G to address each of the issues described in the staff's Januai.--y 25, 1996 report.

2. Evaluation of Issues 2.1 Alternative Shutdown System Design Reliance on the Use of Repairs to Achieve and Maintain Hot Shutdown Conditions 2.1.1 Discussion To provide assurance that cabling required for or associated with the alternative shutdown capability can be made to be physically and electrically separated (independent) from the affects of fire, alternative shutdown system designs typically incorporate the use of isolation/transfer switches. Once activated, these devices, which are located outside of the fire affected area, enable the control and/or monitoring of required shut.down systems to be transferred to an area of the plant that is independent (physically and electrically) of the fire affected area(s).

At Salem the alternative shut.down system design did not incorporate the use of isolation/transfer switches. In lieu of providing this capability, the licensee had developed abnormal operating procedures which direct operators to perform repair activities (e.g. cutting/lifting leads, installing jumpers, and fuse replacement) as necessary to isolate potentially affected circuits and establish local control and monitoring capability for required shut.down systems.

Section m.G.l.b and m.L.5 of Appendix R to 10 CFR 50 establishes the criteria for cold shutdown system repairs. Repairs (e.g., cutting or lifting leads, installing jumpers, pulling and replacing fuses) of post-fire safe shutdown systems required for achieving and maintaining hot shutdown* or hot standby are not allowed.

I During the initial licensing process for Salem Unit 2, the NRC had accepted the use of such repair actions on an interim basis during the plant's startup testing program. A May 1981 Safety Evaluation (SE) documents the staffs approval of this approach as a short-term temporary measure, with long-term compliance pending staff review of the licensee's compliance with Appendix R (Ref. :NUREG-0517, Supplement No.6, "Safety Evaluation Report Related to the Operation of Salem Nuclear Generating Station, Unit No. 2" and NRC's "Report on PSE&G Cable Separation Study," included as Attachment G to the May 1981 SER). -

2.1.2 Evaluation In its June 16, 1982 submittal, the licensee informed the staff that Salem's alternative shutdown procedures do not require the use of electrical jumpers or pneumatic bypasses. In a subsequent Safety Evaluation Report (SER), dated May 31, 1983, the staff stated the following: "No repairs or modifications are required to effect hot or cold shutdown utilizing the alternate shutdown methods."

With regard to this statement, in its June 19, 1996 submittal, the licensee states: "PSE&G has interpreted this to refer to repairs in the fire zone and to exclude the replacement of fuses, the installation ofjumpers, and lifting of leads." In this submittal, PSE&G also requested the staff to revise the 1983 SER as fo11ows:

From: "No repairs or modifications are required to effect hot or cold shutdown utilizing the alternate shutdown methods. "

  • To: "No repairs or modifications in the fire zone are required to attain hot standby utilizing the alternate shutdown methods. "

The requested change in wording of this statement represents a significant change in the level of protection provided. Specifically, the staff was concerned that the proposed change could be interpreted as allowing the licensee to make repairs necessary to achieve and maintain hot shutdown in areas other than the fire affected area and allow repair activities in the fire affected zone as necessary to maintain hot shutdown conditions. On this basis, the staff determined that the licensee's request to revise the Safety Evaluation Report was not acceptable.

In its June 19, 1996 response, the licensee further states that it has initiated a design change to install isolation/transfer switches. PSE&G states that the installation of these devices will "eliminate the use ofjumpers as a method/or achieving and maintaining post-fire hot $tandby conditions," and "the design input for the change considered NRC guidance documents such as Generic Letter 81-12 and 86-:10.,,

In its response to the staff's October 30, 1996 request for additional information (Ref: PSE&G letter dated December 2, 1996), the licensee states that the post-fire safe shutdown analysis for normal shutdown from within the control room (where the tire analysis is governed by the requirements of Section III.G.2 of Appendix R to 10 CFR 50) does not employ any repair activities to achieve and maintain hot-standby conditions. With regard to the alternative shutdown capability, PSE&G states that pneumatic jumpers are not required to achieve and maintain post-tire hot-standby conditions and that design changes to install isolation/transfer switches will eliminate the need for repairs to electric circuits (e.g., electricaljumpers, lifting leads, and replacing fuses) in order to achieve and maintain post-fire hot-standby conditions. The licensee states that following the installation of proposed design changes, no repairs will be required to achieve and maintain hot-standby conditions when either normal shutdown systems controlled from the control room, or the alternative shutdown capability, controlled from the emergency control stations outside the control room, are used to accomplish post-fire safe shutdown conditions.

2.1.3 ConcJusion For fire events which do not require implementation of the alternative shutdown capability, the licensee states that hot shutdown conditions can be achieved and maintained from the control room without repairs. For fire events requiring control room evacuation and implementation of the alternative shutdown capability, the licensee states that its proposed modifications (i.e., installation of isolation/transfer switches) will eliminate the need for repairs to achieve and maintain hot shutdown conditions. This approach provides an appropriate means of conforming to the requirements of Appendix R to 10 CFR 50, and is, therefore, acceptable.

2.2 Analysis As&llnptions Pertaining to the Plant's Ability to Cope with Fll'e-initiated Spurious Signals 2.2.1 Discussion During the period of May 17 through May 21, 1993, the NRC conducted an inspection of Salem Nuclear Power Plant for compliance with Sections III.G, J., L., and 0., of Appendix R to 10 CFR

50. As a result of its review, the inspection team concluded that the licensee's analysis of the potential effect of fire-initiated spurious signals was not sufficiently conservative, to the extent that the analysis, and the resulting* post-fire shutdown methodology, assumed only one spurious actuation to occur as a result of fire in any area, regardless of the number, or operational significance, of unprotected circuits that may be susceptible to common-cause damage due to fire. *in response to the inspection team's concern, the licensee stated that this assumption was based on its interpretation of the NRC response provided to Question 5.3. lO(a) of Generic Letter 86-10, which states, in part: "The safe shutdown capti.bility should not be adversely affected by any one spurious actuation or signal resulting from afire in any plant area."
  • ~
  • I<'

The licensee's application of the single spurious actuation assumption was found to be applied in its evaluation of all fire areas. That is, this assumption was applied in the evaluation of fire areas requiring alternative shutdown capability as well as areas where it had determined that the level of protection provided was sufficient to ensure that one train of systems necessary to achieve and maintain hot shutdown conditions would remain free of fire damage (i.e., fire areas satisfying the separation and protection criteria of Section ID.G.2).

During the February 1996 meeting and in its October 1996 Request for Additional information (RAI) the staff informed PSE&G that its assumption of one spurious operation per fire event was inconsistent with established guidance and does not appear to satisfy regulatory intent ofill.G. and lli.L.

2.2.2 Evaluation Appendix R to 10 CPR 50 establishes fire protection features deemed necessary to provide reasonable assurance that one train of systems necessary to achieve and maintain hot shutdown conditions remains free of fire damage. On February 20, 1981 the NRC forwarded Generic Letter 81-12 (GL 81-12) to all reactor licensees with plants licensed to operate prior to January 1, 1979. With regard to the protection of syst£:ms and equipment required for hot standby, GL 81-12 provides the following staff positions:

1) The equipment and systems used to achieve and maintain hot standby should be free of fire damage and capable of maintaining such conditions for an extended time period if equipment required to achieve and maintain cold shutdown is not available due to fire damage; and,
2) Wiring, including power sources for the control circuit and equipment operation for the alternate shutdown method, must be independent of equipment wiring in the area to be avoided; and
3) Cabling required for or associated with the alternative method of hot shutdown for each fire area, must be physically separated by the equivalent of a three-hour rated fire barrier from the fire area.

a As result of its review of licensee submittals following the issuance of GL _81-12, t!ie staff developed and promulgated additional clarifying foformatiori _ (Ref: Enclosure 1 .of _ NRC memorandum dated-March 22, 1982, from R. J. Mattson to D. G. Eisenhut). This document was forwarded to PSF.&G as Enclosure 3 of an NRC letter dated April 20, 1982. With regard to circuits of equipment whose spurious operation could affect the alternative safe shutdown capability, the clarification provided by the staff states that an adequate lever of protection may be achieved through implementation of one of the following methods:

1. Provide protection for circuits of concern per Section ill.G.2 of Appendix R, or
2. Provide a means to isolate the equipment of concern from the fire area prior to the fire (an example of this approach is pre-fire strategies which de-energize equipment whose fire-initiated sJ>urious operation could adversely affect safe shutdown); or,
3. Provide electrical isolation that prevents spurious operation (e.g., isolation/transfer switch schemes); or .
4. Provide a means to detect spurious operations and then procedures to defeat the maloi)eration of equipment (an example would be procedural guidance to establish manual control of a Motor Operator Valve that may spuriously operate as a result of a fire-induced failures in its control circuitry).

In April 1986, the staff issued Generic Letter 86-10, "Implementation of Fire Protection Program Requirements.". This document presents the Commission's position on certain specific issues in the form of responses to questions posed by the industry during a series of Regional Workshops on the implementation of NRC fire protection requirements at nuclear power plants. In Section 5 of this document, the NRC provides responses to specific questions related to Alternative and Dedicated Shutdown Capability. In Question 5.3.10 the staff is requested to define the plant transients that must be considered in the design of the alternative shutdown system. Inherent in the staff's response to this question, isthe expectation that potential spurious equipment operations have been identified, and a suitable method of protection, as required by regulatory criteria (Appendix R Sections III. G.1, ill.G.3, ill.L.3 and ill.L. 7); has been provided.

The guidance of GL 86-10 is design basis transient criteria for determining the capacity and capability of the alternative shutdown system and its application is based on the system being physically and electrically independent of the fire area of concern and that hot shorts, shorts to ground, and open circuits in associated circuits will not prevent the operation of safe shutdown equipment. In order for the alternative shutdown capability to perform its design function, the shutdown equipment that it relies on must be capable of performing its function once it has been electrically isolated from the control room or the cable sprea~ing room.

The licensee's assumption that only one spurious actuation would occur as a result of any fire is not consistent with th~ regulatory requirements of Appendix R to 10 CFR 50 and guidance established by the staff in Generic Letter 81-12, and its subsequent clarification' which WaS forwarded to the licensee as Enclosure 3 of NRC letter dated April 20, 1982.

In its June 19, 1996 response the licensee states that it has reanalyzed all fire areas where the single spurious actuation assumption was applied. For areas other than those requiring alternative shutdown capability, this evaluation concluded that because the cabling in each application either met separation requirements, was adequately protected, or its function for the component(s) served would not lead to spurious actuation, dependence on the single spurious actuation assumption was no longer necessary. With regard to its application of the single spurious actuation assumption in areas requiring an alternative shutdown capability, in its December 1996 response PSE&G states that it has re-evaluated alternative shutdown systems necessary to achieve and maintain hot standby conditions, and as a result of this review, has initiated design modifications to provide isolation/transfer capability for components necessary to* satisfy post-fire, alternative shutdown, functions. The specific components provided with isolation/transfer switches are depicted in the following tables:

SALEM UNIT 1 EQUIPMENT SALEM UNIT l EQUIPMENT I AFW Room Cooler 2 AFW Room Cooler I I Charging pump aux lube oil pump 21 Charging pump aux lube oil pump 11 Charging pump room cooler 21 Charging pump room cooler 1I Chiller 21 Chiller JI Chilled Water Pump 21 Chilled Water Pump 1I Service Water Intake Vent Fan 21 Service Water Intake Vent Fan 11 Component Cooling Room Cooler 21 Component Cooling Room Cooler 12 Charging Pump Aux Lube Oil Pwnp 22 Charging Pump Aux Lube Oil Pump 12 Charging Pump room Cooler 22 Charging Pump room Cooler 12 Chiller 22 Chiller 12 Chilled Water Pump 22 ChiJJed Water Pump 12 Service Water Intake Vent Fan 22 Service Water Intake Vent Fan I2 Component Cooling Room Cooler 22 Component Cooling Room Cooler I3 Charging Room Cooler 23 Charging Room Cooler 13 Service Water Intake Vent Fan 23 Service Water Intake Vent Fan 13 ChiUer 23 Chiller 14 Service Water Intake Vent Fan 24 Service Water Intake Vent Fan ICVI39 11 and 12 Charging pump mini-flow 2CVl39 21 and 22 Charging pump mini-flow isolation valve isolation valve 1CV140 11 and 12 Charging pump mini-flow 2CV140 21 and 22 Charging pump mini-flow isolation valve isolation valve ICV40 Charging pump suction from VCT isolation 2CV40 Charging pump suction from VCT isolation valve valve ICV41 Charging pump suction from VCT isolation 2CV41 Charging pump suction from VCT isolation valve valve 1CV68 Charging Pump discharge to REGEN HX 2CV68 Charging Pump discharge to REGEN HX isolation valve isolation valve ICV69 Charging Pump discharge to REGEN HX 2CV69 Charging Pump discharge to REGEN HX isolation valve isolation valve SALEM UNIT 1 EQUIPMENT SALEM UNIT l EQUIPMENT JPR6 Pressurizer relief stop valve 2PR6 Pressurizer relief stop valve IPR? Pressurizer relief stop valve 2PR7 Pressurizer relief stop valve JSJJ *Charging pump suction from RWST 2SJJ Charging pump suction from RWST isolation valve .isolation valve JSJ12 BIT isolation valve 2SJJ2 BIT isolation valve JSJJ3 BIT Isolation valve 2SJJ3 BIT Isolation valve ISJ2 Charging pump suction from RWST 2SJ2 Charging pwnp suction from RWST isolation valve isolation valve JSW26 Non-nuclear Service Water Isolation Valve 2SW26 Non-nuclear Service Water Isolation Valve By facsimile dated 12/6/96, (From: B. Thomas, PSE&G, To: L. Olshan, NRC) PSE&G infonned the staff that Unit 2 valves lister! above have been provided with isolation/transfer switches. In addition, the following*Unit 2 valves will have isolation/transfer switches installed by the end of the next refueling outage:

21SJ44 2 I SI CONTMT swnp isolation valve 22SJ44 22 SI CONTMT swnp isolation valve 2CC30 CCW System cross-tie valve 2CC31 CCW System cross-tie valve 21SW21 Diesel Generator Header Isolation Valve 2JSW22 Service Water Header Isolation Valve 21SW23 Service Water Header Crossover Valve 22SW21 Diesel Generator Header Isolation Valve 22SW22 Service Water Header Isolation Valve 22SW23 Service Water Header Crossover Valve 22SW20 Service Water Header Isolation Valve The design for motor-operated valves (MOV's) at Salem utilizes 230Y AC motor control centers (MCC's). Each MCC contains pans which hold the control circuitry for an MOY. Within each pan are such items as the main contactors, thermal overload (TOL) relay, auxiliary relay, control fuses, and field wiring terminal blocks. The typical MOY transfer circuit scheme utilizes two switches and two valve position indicating lights mounted within the pan. The first switch isolates wiring routed from the MCC to the fire area(s) of concern, inserts new fuses into the control circuit, and provides permissives to operate the MOY via the second switch. The second switch serves as an operate switch to open or close the valve. For motors, such as room coolers, one switch and one indicating light are used. The switch performs the function of isolating wiring routed from the MCC to the fire area(s) of concern, inserting new fuses into the control circuit, inserting an indicating light into the control circuit (to identify operation in the remote shutdown mode) and operating the motor.

2.2.3 Conclusion The licensee has reanalyzed fire areas where the single spurious actuation assumption was applied.

For areas other than those requiring an alternative shutdown capability, this re-evaluation has determined that because t:1e cabling in each application either met separation requirements, was adequately protected, or its function for the component(s) served would not lead to spurious actuation, dependence on the single spurious actuation assumption was no longer necessary. With regard to areas where fire may require implementation of the alternative shutdown capability, PSE&G has initiated design modifications to provide isolation/transfer capability for components necessary to satisfy post-fire, alternative shutdown, functions.

The licensee's evaluation, in conjunction with its proposed modifications to provide electrical isolation from areas requiring an alternative shutdown capability, provide assurance that potential fire-induced spurious operations that could adversely affect the post-fire shutdown capability have been appropriately identified, evaluated and dispositioned. The licensee's approach satisfies Appendix R to 10 CFR 50 and is, therefore, acceptable.

  • 2.3 PSE&G Evaluation and Disposition or Staff Concerns Regarding The Potential for Loss or Remote Shutdown Capability Following a Control Room Fire. (Infonnation Notice (IN) 92-18) 2.3.1 Discussion On February 28, 1992 the NRC Office of Nuclear Reactor Regulation (NRR) issued Information Notice (IN) 92-18 to alert licensees of conditions that could result in a loss of ability to maintain the reactor in a safe shutdown condition in the event of a control room fire. Specifically, IN 92-18

- IO-

cautions licensees of the potential for a control room fire to cause an electrical short circuit between normally energized conductors and conductors associated with the control circuitry of motor-operated valves (MOYs) required to achieve post-fire safe shutdown conditions from outside the main control room. Such an event could cause the valve to spuriously actuate. Due to the electrical location of the circuit fault, the MOY torque and limit switches would be ineffective in stopping valve operation.

Additionally, thermal overload protection has been *bypassed at many facilities. Given these a

conditions, there is potential for a fire-initiated spurious valve actuation to result in mechanical damage sufficient to prevent reactor operators from manually operating the valve.

At the time of the May 1993 Appendix R compliance inspection the licensee expressed its opinion that since in its view the conditions described in Information Notic~ 92-18 were not credible, no further evaluation was performed. However, during a June 3, 1993 telephone conference between the iicensee and the staff the licensee committed to provide a formal response to the concerns described in the Information Notice.

2.3.2 Evaluation By letter dated October 26, 1993, the licensee forwarded its response in a document titled:

".Engineering Evaluation of SGS 1&2 Control Room Evacuation for Fire Induced MOY Hot Shorts as Discussed in NRC Information Notice 92-18", dated August 20, 1993. The evaluation identified a total of 65 valves as being specifically addressed within the Salem Control Room evacuation procedure and Safe Shutdown Analysis. As a part of its evaluation the schematics and wiring diagrams for all 65 valves were reviewed to determine which cables associated with the valves were routed in areas where control room evacuation may be required due to fire (i.e., the Control Room, Relay Room, or Ceiling of the 4iiOY Switchgear Room). Of the 65 valves evaluated, 51 were found to be susceptible to the hot short conditions described in the Information Notice. However, the evaluation was found to conclude: *due to system/component redundancies, at SGS 1&2. failure of any one (emphasis added) of these valves would not preclude a post-fire safe shutdown condition.

  • The licensee's disposition of this concern was found to be predicated on its interpretation of staff guidance contained in Generic Letter 86-10. Specifically, the licensee had assumed that the evaluation of post-fire alternative shutdown capability need only consider one spurious valve actuation, irrespective of the number or post-fire shutdown significance of the potentially affected circuits. This interpretation was then extended to its evaluation of staff concerns described in IN 92-18. This led the licensee to conclude,. without providing any furth~r technical justification~ that only one of the 51 potentially affected valves would spuriously actuate.

During the February 7, 1996 meeting, the licensee described a design change to preclude mechanical valve damage by reinstalling the previously bypassed thermal overload (TOL) protection on MOV's.

"~

~-

f In its letter dated June 19, 1996, the licensee stated that this modification eliminates the concerns of IN 92-18 for Salem and that the thermal overload protection for these MOVs had been installed.

In its October 30, 1996 request for additional information the staff requested the licensee to demonstrate that the methodology and criteria for assuring that the TOL protection is sized properly and that it will adequately protect the subject MOVs from mechanical damage (e.g., deep seating and binding of the valve). In addition, the staff requested PSE&G to describe the typical isolation transfer circuit scheme for these MOvs* and confirm that the tripping of the TOL protection devices does not render the subject MOVs inoperable and that once electrically isolated from the fire area of concern that they can be operated remotely from emergency control stations outside the control room.

In its December 1996 response, the licensee states that all safety related motor-operated valves (MOV's) at Salem have thermal overload relays in their circuitry which are designed to protect the power feed to the MOV while providing maximum protection of the valve operator motor. The methodology for determining thermal overload sizing takes into account the voltage and ambient temperature variations when plotting protection points for current at twice nominal torque and locked rotor withstand characteristics. The thermal overloads are sized to ensure that the MOVs will not spuriously trip while providing the maximum am0unt of motor protection. Upon further review of the TOL design change for mechanical valve damage, PSE&G noted that the TOLs for several valves have marginal values for motor torque capability at full voltage versus the valve assembly torque limit. The valves identified by this review which are required to achieve hot-standby are as follows: CV40; CV41; CV68; CV69; CV139; CV140; PR6; PR7; SJI; SJ2; SJI3; and SW26. Also identified by this review were several valves whose TOL do not fully provide valve motor protection. These valves are as follows: CC30, CC31, SW21, SW22, SW23, 12/22SW20, and 14/24SW20.

The licensee states that it has initiated design changes to modify the circuits of the above referenced valves. Specifically, the control circuits of these valves will be modified to prevent hot-shorts from .

bypassing the torque and limit switches by electrically relocating the switches between the control room and MCC as recommended by the staff in Information Notice 92-18.

2.3.3 Conch1sion Based on the above, the licensee's stated methodology for resolving concerns identified in Information Notice 92-18, is directed at preventing mechanical damage to required MOVs by

_reinstalling_the previo1,1sly bypassed thermal overload (fOL) protection on MOV~. Where reliance on thermal overload protection was found to provide insufficient protection, the licensee has initiated modifications which will prevent hot-shorts from bypassing MOV torque and limit switches as recommended by the staff in Information Notice 92-18. Should valves spuriously actuate, operators would establish local control, and manual positioning of the MOV would not be precluded. This approach conforms to the requirements of Appendix R to IO CFR 50 and is therefore, acceptable.

.I)

~

~

"f

3. OveraU Summary As a result of its evaluation of the fire protection licensing basis of the Salem Nuclear Generating Station, the staff concluded in its report dated January 25, 1996:
1. The post-fire alternative shutdown system design reliance on repair activities to achieve and maintain hot s.tandby conditions, does not appear to have been accepted by NRR for use as a long-term compliance strategy.
2. The licensee's assumption of one spurious operation per fire event is inconsistent with established guidance disseminated by the staff and does not appear to satisfy the regulatory intent of Sections ill.G. and ill.L of Appendix R to 10 CFR 50.
3. The licensee's evaluation and disposition of staff concerns described in IN 92-18 is inconsistent with established guidance disseminated by the staff; and does not appear to satisfy the regulatory intent of Sections 111.G. and III.L of Appendix R to 10 CFR 50.

To resolve these issues i!: a manner consistent with established staff guidance, the licensee has performed engineering evaluations and, where necessary, has developed and scheduled additional plant modifications necessary to bring the plant into compliance.