ML20148P005

Rev 3 to PI-MP3-02, Review of Sys Design for Compliance W/ Design & Licensing Basis

ML20148P005
Person / Time
Site:	Millstone
Issue date:	06/23/1997
From:	Neri A, Querio, Raheja R SARGENT & LUNDY, INC.
To:
Shared Package
ML20148N977	List: ML20148N980 ML20148N988 ML20148P005 ML20148P013 ML20148P019 ML20148P027 ML20148P039 ML20148P049 ML20148P067
References
PI-MP3-02, PI-MP3-2, NUDOCS 9707010097
Download: ML20148P005 (26)

Text

- . . = _ _ _ .

j

14. .

l PROJECT INSTRUCTION

• ~"~*

7"* " INSTRUCTION PI-MP3-02 REV. 3 i

Client: Northeast Utilities Station: Millstone Unit 3 i

! Titla: REVIEW OF SYSTEM DESIGN FOR COMPLIANCE WITH THE DESIGN AND LICENSING BASIS h Safety-Related Non-Safety-Related Reviewed By: Approved By:

System Lead Programmatic O&M Lead Accident QA Engineer Internal Review Verification Team Lead Mitigation Committee Manager Lead Chairman

. m . . n - / / Date:02b77 hY hY- [f/Y "

hti $NYwsbhYEN%L '2%.&

D:scription

[ (/ / ],')

~

Il Rev.3 Revised PI to:

l

= Clarify the scope ofinterfacing system reviews l

= Clarify the scope of the Appendix R review i

I l

Page 1 of 19 9707010097 970627 PDR ADOCK 05000423 P ,

PM

4 .

v. ,

A; L PROJECT INSTRUCTION

)"" INSTRUCTION PI-MP3-02 REV. 3 l

1.0 PURPOSE 1

l This instruction establishes the requirements for the design review of systems included in the scope of the Independent Corrective Action Verification Program (ICAVP). The purpose of the design review is to verify the system design as l reflected on design output documents and design process documents is consistent with the plant's Design and Licensing Basis. Additionally, the design review will verify technical adequacy of design process documents. This review process in conjunction with the modification review process (PI-MP3-03) ,

l operating, maintenance and testing review process (PI-MP3-06) and plant '

configuration walkdowns (PI-MP3-05) will verify that the current as modified  !

system is capable of the functional requirements contained in the design and licensing basis documentation. ,

2.0 REFERENCE i

n 2.1 NRC Inspection Manual Procedure 93801, Safety System Functional Inspection 2.2 NRC Inspection Manual, Chapter 2535, Design Verification Programs

, 2.3 10CFR50.2, Definitions 2.4 NRC Confirmatory Order Establishing Independent Correction Action Verification Program - Millstone Nuclear Power Station, Units 1,2, and 3

2.5 NUMARC 90-12, Design Basis Program Guidelines 2.6 PI-MP3-06, Operations and Maintenance and Testing Procedures and Training Documentation Reviews 2.7 PI-MP3-07, Review of System Design for Compliance with the Design and Licensing Basis 2.8 PI-MP3-09, Preparation and Approval of Checklists l

l 2.9 PI-MP3-11, Discrepancy Report Submittal and Closure 2.10 PI-MP3-12, Project File Index i

Page 2 of 19

l .

, e

e. .

l PROJECT INSTRUCTION }'/ INSTRUCTION PI-MP3-02 REV. 3

\

2.11 CK-MP3-02 Series Checklists as follows:

CK-MP3-02-01 System Reference List CK-MP3-02-02 System Requirements List CK-MP3-02-03 Design Process Document Review Checklist CK-MP3-02-04.1 P&lD Review Checklist CK-MP3-02-04.2 Logic Diagram Review Checklist l

CK-MP3-02-04.3 Electrical Schematic Review Checklist i CK-MP3-02-05.1 Mechanical Component Review CK-MP3-02-05.2 Electrical Component Review

CK-MP3-02-05.3 l&C Component Review l C K-MP3-02-06 Topical Area Review l Note

Checklists used in the performance of this Pl are not included as attachments to the Pl. Checklists are prepared and l controlled as separate documents per PI-MP3-09.

l 1

3.0 DEFINITIONS 3.1 Accident Mitigation Systems Review Group (ARG)- The subgroup of the ICAVP Verification Team responsible for review of l critical characteristics of accident mitigation systems to ensure those systems can perform their required safety functions.

3.2 Operations & Maintenance and Testing Review Group (ORG)- The subgroup of the ICAVP Verification Team responsible for the review of the operating, maintenance and testing procedures, and training materials for the systems within the scope of the ICAVP.

l 3.3 System Review Group (SRG)- The subgroup of the ICAVP Verification Team responsible for performing an in-depth review of the design of the systems in the scope of the ICAVP.

l l 3.4 Configuration Review Group (CRG)- The subgroup of the SRG l Verification Team responsible for walkdowns to verify the current as-l built conditions are in conformance with the design output documents.

Page 3 of 19

4 x-y  :

( \

PROJECT **7"" /

INSTRUCTION PI-MP3-02 INSTRUCTION REV. 3 3.5 Design Bases - The information which identifies the specific functions to be performed by a structure, system or component of a facility, and the specific values or ranges of values chosen for controlling

' parameters as reference bounds for design. These values may be (1) restraints derived from generally accepted " state of the art" practices for achieving functional goals or (2) requirements derived from analysis of the effects of a postulated accident for which a structure, system or component must meet its functional goals (Reference 2.3).

3.6 Design Output Documents - Controlled plant documents such as specifications, drawings, vendor drawings, datasheets, lists and databases (Reference 2.5).

3.7 Design Process Documents - Documents such as calculations, analysis, evaluations or other documented engineering activities that substantiate the final design (Reference 2.5).

3.8 Current Licensing Basis (CLB)- The set of NRC requirements applicable to a specific plant, and a licensee's written commitments for assuring compliance with and operation within applicable NRC

, requirements and the plant-specific design basis (including all modifications and additions to such commitments over the life of the '

license) that are docketed and are in effect. The CLB includes the )

NRC regulations contained in 10 CFR Parts 2,19,20,21,30,40,50, j

, 51, 55, 72, 73,100 and appendices thereto; orders; license conditions; exemptions, and Technical Specifications (TS). It also includes the plant-specific design basis information defined in 10 CFR 50.2 as documented in the most recent Final Safety Analysis Report (FSAR) l as required by 10 CFR 50.71 and the licensee's commitments j i remaining in effect that were made in docketed licensing l correspondence such as licensee responses to NRC bulletins, generic letters, and enforcement actions, as well as licensee commitments i documented in NRC safety evaluations or licensee event reports.

(Reference 2.7) 3.9 Verifier - The individual assigned to review engineering attributes within his area of responsibility.

Page 4 of 19

3 -

M PROJECT INSTRUCTION PI-MP3-02 INSTRUCTION REV. 3 ,

4.0 RESPONSIBILITIES 4.1 The Verification Team Manager shall be responsible for overall

, management of the Verification Team.

4.2 The SRG Lead shall be responsible for assigning the Lead Verifier for each system in the ICAVP scope and for overall coordination of the SRG effort.

4.3 The Lead Verifier shall be responsible for performing system reviews  !

for the attributes within his area of expertise and for assigning verifiers l with appr.opriate background for review of remaining attributes.

! . j 4.4 The Verifiers shall be responsible for performing reviews of engineering attributes within their area of expertise in accordance with this instruction.

5.0 PROCEDURE v, 5.1 General '

.The Nuclear Regulatory Commission (NRC) Confirmatory Order referenced in Section 2.0 of this PI requires Northeast Utilities (NU) to implement the ICAVP. The Confirmatory order also defines the scope of the ICAVP. Item 2 of the scope of the ICAVP described on page 13 's of the Confirmatory order requires the Licensee to verify the current 4 as-modified plant conditions against design basis and licensing basis documentation. This procedure describes one aspect of the process needed to perform the verification described above. Specifically, this procedure will determine if the current system design as reflected on design output documents and design process documents is consistent with the system design basis and licensing basis documentation. This review is not intended to verify the design basis as stated in the Licensing Basis Documentation is consistent with the Licensing Basis.

For example, a design basis consideration that may be described in the FSAR is that the system is designated a Quality Class 1 system in accordance with RG1.26. This review will verify the design of the system was performed to Quality Class 1 standards. This review will not verify that the Quality Class 1 designation was applied correctly l

per the guidelines of RG1.26. In other words, this procedure verifies the design basis requirement is properly incorporated in the design Page 5 of i9

~

l .

a sbI L PROJECT.

INSTRUCTION

["

INSTRUCTION PI-MP3-02 REV.3 l

and does not verify the design basis is in conformance with the licensing basis. Verification of conformance between licensing basis and design basis was performed by NRC prior to issuance of the l operating license. Changes subsequently issued will be reviewed in -

detail as part of the modification review process (PI-MP3-03).

L The systems to be included in the scope of the ICAVP program will be '

defined by the Nuclear Regulatory Commission. A meeting will be held with the NRC, NEAC and NU to finalize the boundaries of the selected systems and interfacing systems after the systems have been identified, in general, the systems boundary will be limited to l

the safety related portion of the selected systems. S&L's review of the vertical slice systems will address interfaces as follows:

. Mechanical Interfaces - S&L will review the interfacing system calculations to the extent needed to verify that the functions required to support the vertical slice review system were addressed in the design of the interfacing system. We will creview the interfacing systems drawings and procedures to the extent needed to verify the support functions are addressed.

This review will address both direct interfaces (those which - i interface with the selected systems pressure boundary) and indirect interfaces such as HVAC. This review will not include .

technical verification of the adequacy of the interfacing systems calculations, procedures or drawings. For example, if a vertical slice system requires support of a cooling water system, we will verify the cooling water system's hydraulic analysis, operating procedure, P&lD and piping drawings support the vertical slice system functional requirements.  !

. l&C Interfaces - l&C interfaces will be treated in a slightly different manner compared to mechanical interfaces section above. We will review input signals from interfacing systems through to its signal source to verify that the functions required to support the system i under review were addressed in the design of the interfacing I system. We will review the output l&C signals for the system under review through to the input point of the interfacing system. The extent of these reviews is described in Attachment 6.3. j

. Electrical Interfaces - Electrical interfaces will be treated in a slightly different manner A detailed review of the electrical distribution system from the motor control center or switchgear, Page 6 of 19

. ._- -~

A

6. .:

l PROJECT' INSTRUCTION * ]'f"" -

INSTRUCTION PI-iAP3-02 REV. 3 as applicable, to the load is included as part of the vertical slice system review. A load path review will be performed for the remainder of the electrical distribution system (diesel generator to switchgear or MCC). The extent of this review is described in Attachment 6.2. .

Once the systems and boundaries have been identified, the following tasks shall be performed in order to determine if the system's design is consistent with the plant's design and licensing basis:

a. Document Retrieval & Review

b. Identification of System Requirements

c. Technical Review of Design Process Documents

d. Upper Tier Drawing Review

e. Component Review

f. Topical Review

g. Reconciliation of Design vs. Design & Licensing Basis

h. Discrepancy Report Preparation and Closure

i. Final Report Preparation The detailed instructions for performing these tasks are provided in  !

the subsections 5.2 through 5.11 below. References 2.1,2.2 and 2.4 were used to develop these instructions. Attachment 6.1 is a flow chart illustrating the system review process. .

I l

5.2 Document Retrieval & Review 5.2.1 Since there may be duplication between documents required by the  ;

various review groups, the following division of responsibility has been established L

5.2.1.1 The SRG shall gather, as a minimum, the following licensing and design bases documents and system specific documents:

i

a. Design & Licensing Basis Documents (Applicable Sections 1 Only) a.1 NRC Regulations l a.2 Technical Specifications j a.3 Updated Safety Analysis Report l

a.4 NRC Safety Evaluation Report a.5 MP3 Commitments to NRC included in Docketed Correspondence Page 7 of 19

, 1 N. - <

t$h PROJECT INSTRUCTION PI-MP3-02 INSTRUCTION -

REV. 3 a.6 Design Basis Documentation Package (DBDP)

I

b. System Specific Documents j b.1 Engineering Calculations (Mech, Elect, Struct, I&C and Piping 1 Analysis) l b.2 Equipment Procurement Specifications - j b.3 Modification Packages b.4 System Descriptions b.5 Equipment List b.6 Ertvironmental and Seismic Qualification Reports b.7 Findings and corrective actions identified by NU during the implementation of their Configuration Management Plan (CMP) 5.2.1.2 The ORG Shall gather, as a minimum, the documents listed below:

a. Operating Procedures including Emergency Operating Procedures

b. Maintenance Procedures

c. Surveillance Test Procedures v ,

d. Vendor Manuals

e. System Training Procedures

f. Necessary Support and/or Related Procedures

g. Operational Data Needed To Support Review of Design Process Documents 5.2.1.3 The CRG shall gather, as a minimum, the following system specific drawings:

a. P&lDs

b. Logic Drawings ~

c. Electrical Schematics  ;

d. Piping Drawings

e. Electrical Single Line Drawings

f. Panel Wiring Drawings

g. Cable Routing Drawings and Databases

h. Pipe Support Drawings I. Structural Equipment Mounting Details

j. General Arrangement / Equipment Location Drawings

k. Instrument Location Drawings I. Zone Maps (Environment / Fire Protection, etc).

Page 8 of 19

49 . "

F PROJECT lNSTRUCTION PI-MP3-02 l l

INSTRUCTION

1. @ REV. 3 5.2.2 ' Design and Licensing Basis documents are available in the S&L lCAVP Library. System specific documents shall be obtained from NU. Requests for documentation from NU shall be submitted in accordance with subsection 3.1 of PI-MP3-01.

5.2.3 Once the documents have been gathered, each group shall complete the applicable section of the System Reference List (SRL). Checklist l l CK-MP3-02-01 and an Access Database shall be used to develop the l SRL.

i 3

, 5.2.4 The Lead Verifier from the SRG, CRG and ORG shall be responsible for ensuring, the SRL is prepared per checklist CK-MP3-02-01.

l

-5.2.5 Each member of the ORG, SRG and CRG assigned to review the system shall study the documentation to become as familiar as  :

possible and achieve an in-depth understanding of the system as it l u

relates to their area of expertise. Each member shall also review the i findings and corrective actions that resulted from NU's CMP. S&L -

rshall not duplicate findings identified by the NU CMP. **

5.2.6 If the need for additional documents is identified during the review process, these documents shall be requested in accordance with subsection 5.2.2 of this Pl.

5.2.7 Updates to the SRL shall be made in the same manner as initial input.

5.2.8 The SRG Lead shall file a hardcopy of the completed SRL in accordance with PI-MP3-12.

5.3 Identification of System Reauirements 5.3.1 The SRG shall review the licensing and design basis documents to identify the functional, performance, and other design requirements for the system being reviewed. ,

5.3.2 The SRG Lead .shall assign a Lead Verifier for each of the systems  ;

being reviewed. The Lead Verifier shall be from the related discipline l (Mechanical for Mechanical System, Electrical for Electrical System,

etc). The SRG Lead shall also assign verifiers from other disciplines l as needed to support the system review process.

Page 9 of 19

__ _ _ ~ _ . . _ .. _ _ _ _ ___ _ _ _ _ _ _ _ _ _ _ _ _

/

! PROJECT INSTRUCTION PI-MP3-02 L INSTRUCTION 'f"~ REV. 3 l 5.3.3 The Verifier (s) shall review the Licensing and Design Basis Documerits for the system being reviewed to identify design, performance and functional requirements. Each requirement shall be entered into the System Requirements List. Checklist (Checklist CK-MP3-02-02) shall be used to develop the System Requirements l Checklist.

, Note: The System Requirements Checklist shall be developed l- electronically using an Access Database. Checklist CK-MP3-02-02 l provides the instructions for using the database.

5.3.'4 The Verifier (s) shall as a minimum, perform a review of the following documenic in order to develop the system requirements checklist:

a. FSAR

b. SER

c. Technical Specifications

d. Licensing Commitments contained in docketed correspondence (from NU's Licensing Commitment List)

e. Dssign Criteria Documents (including NSSS Vendor documents)

f. Design Basis Document Package (only those documents contained in the DBDP which are plant controlled documents or correspondence shall be considered valid for the purpose of defining system requirements).

The review of the FSAR for functional, performance and design requirements shall focus on the following system specific and area topics as a minimum.

a. Applicable Regulatory Guides

b. Conformance to the Standard Review Plan

c. TMI Action Items l d. Design of Structures, Components, Equipment and Systems (Chapter 3),

l

e. Engineered Safety Features (Chapter 6).

f. l&C (Chapter 7)

g. Electrical Power (Chapter 8)

h. System Design (Chapter 4,5,9 or 10 as applicable.).

! i. Accident Analysis (Chapter 15) c j. Human Factors Engineering (Chapter 18) i l

l Page 10 of 19

r

? *.'.

g h<

L PROJECT O"~ INSTRUCTION PI-MP3-02 INSTRUCTION- l' REV. 3 L k. Fire Protection j This review shall define functional, performance and design l requirements related to the following system specific topics:

a. . Mechanical Design

b. Electrical Design

c. l&C Design .

d. Structural Design

e. Piping Design (including identification of postulated break

. locations.)

l f. Equipment Qualification (limited to seismic and environmental qualification of system components, does not include verification of seismic response spectra or environmental parameters.)

The review shall also define requirements for the vertical slice systems related to the following topical areas:

o; a. Hazards including pipe whip, jet impingement, missiles and

. flooding,

b. Station Blackout

c. Appendix R Safe Shutdown Analysis.

i l 5.3.5 The ORG shall identify and enter operating, maintenance and testing requirements into the System Requirements Checklist per Pl-MP3-06.

The ARG shall enter critical characteristics required for accident mitigation identified per PI-MP3-07 into the system requirement checklist. Entries shall be per this procedure.

5.3.6 Each entry into the system requirements list shall be independently reviewed by a verifier form the same group and discipline. The Verifier (s) performing the independent review shall review each entry for accuracy with the source document. Review shall be performed in accordance with CK-MP3-02-02.

5.3.7 The independent Verifier (s) and/or the Verifier (s) who initially prepared the systems requirements checklist shall initiate a DR for any conflicting requirement identified during the review of the Design and Licensing Basis documentation. The DR shall be processed in accordance with Section 5.10 of this procedure.

i-I L .

! Page 11 of 19 l

. . _ _ _. _ . _ _ _ . _ . _ _ _ _ . _ . _ . _ . - .~_ . .

D., .

i O* "

L PROJECT <

INSTRUCTION PI-MP3-02 l lNSTRUCTION # REV.3 5.3.8 The SRG or ORG Lead, as Applicable, will review each entry into the Systems Requirements Checklist for completeness. This review shall be performed per Checklist CK-MP3-02-02. The SRG Lead shall distribute the checklist to the project file in accordance with PI-MP3-12,

l. 5.4 Technical Review of Desian Process Documents F T l 5.4.1 The SRG shall perform a detailed review of applicable design process

!- documents to verify technical adequacy and that the conclusions of the calculations support the system requirements.

5.4.2 Applicable design process documents shall include

-

L

a. Mechanical calculations (hydraulic calculations, component sizing calculations, design pressure and temperature calculations,' NPSH calculations, etc.

b. Electrical calculations (load calculations, voltage drop, etc.)

c. I&C calculations (setpoint calculations) -.

d. Structural calculations (equipment mounting, pipe supports, cable tray supports, conduit supports, etc.)

e. Piping Analysis l f. EQ/SQ Reports The review of interfacing system calculations to the extent described in Section 5.1 of this Project Instruction shall be included in the i scope of this section.

5.4.3 Checklist CK-MP3-02-03 shall be used to document the design  ;

process document review. The applicable subject specific checklists  ;

l from PI-MP3-03 shall also be used in conjunction with ,

C K-MP3-02-03. ~

I l

5.4.4 The Verifier (s) shall review the adequacy of the following attributes:

I a. Numerical Accuracy - The numerical aspects and mathematical i

operations shall be error free. The number of significant figures shall be consistent with the input data, assumptions and design

methodology. Transposed or transferred numbers are correct.

f i

r Page 12 of 19

. . \

i

/

4$k l PROJECT INSTRUCTION

• ~""}yf" INSTRUCTION PI-MP3-02 {

REV.3

b. Modeling Accuracy - Analytical models shall be consistent with  ;

the degree of accuracy of the input data, assumptions and '

design methodology.

l 1

c. Assumptions and Engineering Judgment - Assumptions and  ;

engineering judgment shall be consistent with the design approach and methodology.

d. Design inputs - Design inputs shall be based on the latest controlled design documents.

]

e. Methodology - The method shall be appropriate for the purpose ,

and scope of the calculation. 1 Note: During the review of design process documents, operational data, where available, shall be used to confirm calculation assumptions and/or conclusions.

5.4.5 The Verifier (s) shall note any comments identified during the review on i the Design Process Document Review Checklist (CK-MP3-02-03). I 5.4.6 The Verifier (s) shall evaluate the comments to determine if they affect !

the conclusion of the Design Process Document. The evaluation shall  !

be documented on the Design Process Document Review Checklist (CK-MP3-02-03).

5.4.7 The Verifier (s) shall indicate on the checklist coversheet (CK-MP3 03) whether the conclusions are acceptable with comments or unacceptable, and shall sign and date the coversheet.

5.4.8 For acceptable with comments or unacceptable dispositions, the Verifier shall generate a Discrepancy Report per subsection 5.10 of ,

this Pl. The Verifier (s) shall also evaluate the unacceptable l disposition for impact on other docur.ients that may use the conclusion as input. The Verifier (s) shall consult other SRG members while evaluating the impact.

l l Note: Calculation results are typically used as input in other l documents. If a Discrepancy is identified which affects the result of l the calculation, it is important to define where those results were used and evaluate those documents for impact. The review should be done Page 13 of 19

Y, d!d .

PROJECT; INSTRUCTION

' Nf*" '

INSTRUCTION PI-MP3-02 REV. 3 ilU l

. prior to generating a Discrepancy Report so that the Discrepancy l Report describes the full extent of the condition.

J l

g 5.4.9 The Lead . Verifier shall verify the checklists have been pr.operly -

completed, indicate his concurrenca with signature and date, and shall compile and file the design process document review checklists prepared by the Verifier (s) to the project file in accordance with l PI-MP3-12.

i 5.5 Upoer Tier Document Review l-5.5.1 The SRG shall perform a functional review of the upper tier drawings as one of the steps necessary to verify the system is capable of l performing required functions as described in the design and licensing basis. This review includes the vertical slice system -

drawings as well as interfacing system drawings to the extent described in Secticn 5.1. The SRG shall also perform a technical l:

review of the drawings to verify conformance to design calculations and classification criteria.

5.5.2 The Verifier (s) shall utilize drawing review checklists CK-MP3-02-4.1,

-4.2, -4.3 for the review of the P&lDs, logic diagrams and electrical drawings-(i.e. schematics, single lines and instrument loop diagrams), respectively. These checklists define the attributes to be reviewed. In general, review attributes will include flow paths, l interlocks, automatic actuations, permissives, redundancy and separation, safety classification, component sizes, pressure class, overpressure protection, adequacy of interfacing system tie-ins, etc.

The review is not intended to identify drafting or style errors.

l 5.5.3 The Verifier (s) shall note any comments on the applicable checklists L (CK-MP3-02-4.1, -4.2, -4.3).

5.5.4 Upon completion of the review, the Verifier (s) shall sign and date the coversheet of the applicable checklists.

5.5.5 The Verifier (s) shall generate a Discrepancy Report per Subsection 5.10 of this PI for any discrepancies not previously identified by the NU CMP.

t

! 5.5.6 The Lead Verifier shall verify the checklists have been properly

i. completed, indicate his concurrence with signature and date, and shall Page 14 of 19

_~. . . _ - _ . _ _ . _ _ _ . _ _ _ . _ _ _ . . _ . . _ _ _ _ _ . _ _ ._ _

<d j N "  !

! ' PROJECT D IN'STRUCTION PI-MP3-02

. INSTRUCTION 'y

. REV.3 1

compile and file all drawing review checklists prepared by the

Verifier (s) in the project file per PI-MP3-12.

5.6 Component Review 4

5.6.1 The SRG shall perform a detailed review of system components. This review shall verify the design data included in the design and licensing basis, the vendor drawings, the procurement specifications, equipment

~ list and calculations are consistent. 1 5.6.2 The scope of this review shall include all major mechanical, electrical and I&C components.  !

5.6.3 Detailed component checklists are included in the CK-MP3-02-05 series checklists. These checklists verify attributes such as classification, design conditions, operating conditions, functional  !

requirements, applicable .; odes and standards, performance requirements, and qual!(ication requirements, etc.

u

.x s 5.6.4 The Verifier (s) shall complete individual Component Review ,

Checklists (CK-MP3-02-05 series) for each component within the scope of review. Discrepancies noted shall be indicated in the appropriate blocks on the ct.ecklists.

5.6.5 Upon completion of the review, the Verifier (s) shall' sign and v. ate the checklists.

5.6.6 The Verifier (s) shall generate a Discrepancy Report in accordance with Subsection 5.8 of this PI for any discrepancies not previously identified by the NU CMP.

5.6.7 The Lead Verifier shall verify the checklists have been properly completed, indicate his concurrence with signature and date, and shall file all completed checklists in the project file per PI-MP3-12.

5.7 Topical Area Reviews 5.7.1 The SRG shall perform a review of the following topical areas:

a. Hazards including pipe whip, jet impingement, missiles and flooding Page 15 of 19

- - - . - . . . - . - - . - . - - . . . .. - . -.. .- - . . _ - . - ~ . -

F e:~ "

PROJECT *I INSTRUCTION Fi l-MP3-02 INSTRUCTION REV.3 L

b. Station Blackout l

c. Appendix R Safe Shutdown Analysis 5.7.2 The Verifier shall document the review of topical areas using -

checklist CK-MP3-02-06. This review shall verify the following:

l

a. That the pipe whip and jet impingement effects of postulated breaks in the vertical slice system have been analyzed.

b. That potential missiles from the vertical slice system have been evaluated.

l c. That the flooding analysis considers the vertical slice system's '

contribution to area flood levels. .

d. The vertical slice system components, if credit for operation was taken in the station blackout coping assessment, are capable of l performing the required functions. .

e. The vertical slice _ system has been adequately addressed in the '

Appendix R Analysis if credit for system operation was taken in the safe shutdown analysis. This includes a routing check of the vertical slice system's cabling required for the safe shutdown analysis.

f. In addition, one fire zone will be selected which includes one vertical slice system's cabling required for the safe shutdown l- analysis. All associated circuits in common enclosures with the j vertical slice system's cabling will be reviewed to confirm that l- these associated circuits meet the Fire Protection Evaluation l Report Section 6.3.1.3. Step 1 statement " Safety-related and l- nonsafety-related circuits are routed in their own separate L raceways and properly applied protective devices a,re included

j. in all Millstone 3 power and control circuits; thus, this failure mode would not surface."

5.7.3 Upon completion of the review, the Verifier (s) shall sign and date the

applicable portion of the checklists.

Page 16 of 19 E _- _ - . _ . _ . _ -_ __

O l ,

l PROJECT INSTRUCTION /

7*" INSTRUCTION PI-MP3-02 REV. 3 I

l i

5.7.4 The Verifier (s) sha:! generate a Discrepancy Report in accordance with subsection 5.10 of tnis PI for any discrepancies not 'previously identified by the NU CMP.

5.7.5 The Lead Verifier shall verify the checklist has been properly  :

completed, indicate this concurrence with signature and date, and j shall file all completed checklists in the project file per PI-MP3-12.  !

5.8 Reconciliation of Desian vs. Desian and Licens:na Basis 5.8.1 The SRG will complete the verification of the system design versus the design and licensing basis documentation. The verification shall be completed by dispositioning each requirement on the System Requirements Checklist (Checklist CK-MP3-02-02).

5.8.2 Where applicable, the Verifier (s) shall identify on the System Requirements Checklist, the design process documents which verify the restraints imposed by the system requirement are not exceeded. ,

The Verifier (s) shall either indicate the design process document either supports the requirement or describe any deficiencies.  ;

5.8.3 The Verifier (s) shall identify on the System Requirements Checklist, .

the design output documents related to the system requirement. The

. Verifier shall indicate whether the technical requirements contained in the design output documents are consistent with the system i requirements or shall identify the discrepancy,'

5.8.4 The Verifier (s) shall complete the dispositions in the System i Requirements Checklist, using the Access Database in accordance i

with CK-MP3-02-02.

L 5.8.5 Dispositions to the system requirements shall be independently l- reviewed by a Verifier from the same group and discipline. The >

independent review shall be in accordance with CK-MP3-02-02.

5.8.6 The Verifier (s) shall generate a Discrepancy Report in accordance with Subsection 5.10 of this Pl for any discrepancies not previously i

!' identified in Subsection 5.4,5.5, and 5.6 of this procedure.

l 5.8.7 The SRG Lead shall review the dispositions in the systen1 require-  !

ments checklist (CK-MP3-02-02) for completeness and technical-

• accuracy. The SRG Lead shall notify the ARG Lead that either all ,

1 1

Page 17 of 19 t

-i.

b PROJECT INSTRUCTION """}h"" INSTRUCTION PI-MP3-02 REV. 3 critical characteristics for accident mitigation systems have been satisfied or he shall identify which are not.

5.8.8 The Lead Verifier shall file a hardcopy of the completed checklist in the project file per PI-MP3-12.

5.9 SRG Suoport for ORG Procedure Review Process

• 5.9.1 During the implementation of the Procedure Review Process described in PI-MP3-06, the ORG will highlight e'i perforrnance parameters including operating ranges and/or lir. itations described in the procedures. These parameters will be sut,mitted to the SRG for verification via checklist CK-MP3-06-10. The ORG may also identify operating modes which are not explicitly identified in the system requirements checklist. The ORG will submit these modes

' to the SRG for review via checklist CK-MP3-06-10 to verify the design and analysis support operation in this mode.

5.9.2 The SRG Lead Verifier or assigned Verifier shall review these parameters to ensure they are correct. The Verifier shall complete the CK-MP3-06-10 checklist by identifying the basis for the parameter, F correct, and/or preparation of a DR per Section 5.10 i of this procedure for incorrect parameters. Once all parameters have been reviewed the Verifier shall sign and date checklist CK-MP3-06-10 and shall return the completed checklist to the ORG.

5.9.3 The SRG will review any operating modes submitted by the ORG per checklist CK-MP3-06-10. The SRG Verifier shall review the mode to ensure it is within the system's design basis. The SRG Verifier shall enter his conclusions on checklist CK-MP3-06-10, sign and date the checklist and return it to the ORG. If the evaluated mode is outside the system's design basis, the SRG Verifier shall prepare a

, DR per Section 5.10 of this procedure.

5.10 Discrepancy Report Preparation and Closure 5.10.1 Discrepancy Reports for discrepant conditions identified during the system review process shall be prepared and processed in accordance with PI-MP3-11. Discrepancy reports shall not be initiated for findings already identified by NU during implementation of the CMP.

Page 18 of 19

{k PROJECT INSTRUCTION

• '* /['* "

s INSTRUCTION PI-MP3-02 REV. 3 5.10.2 Review of NU dispositions for the Discrepancy Reports generated during the review cycle shall be in accordance with PI-MP3-11.

5.11 Final Report 5.11.1 The Lead Verifier shall draft a final report summarizing the results of the system review.

5.11.2 The report format shall be determined by the Verification Team Manager.

5.11.3 The report shall be reviewed and approved by the VT Lead, VT Manager and IRC prior to external distribution.

6.0 ATTACHMENTS 6.1 ICAVP Process Flowchart, " System Review" (1 page) 6.2 Scope of Electrical Support System Review (3 pages) 6.3 Scope of l&C Interfacing Signal Review (1 page) i i

3-Page 19 of 19

Identify Syst:ms in ICAVP !

Scops Pl-MP3-02, REV. 2 ICAVP PROCESS FLOWCHART - ATTACHMENT 6.1 ,

SYSTEM REVIEW NRC i

?

Define / Review System Boundaries NRC/NEAC/NU/SRG v

Gather Design & Licensing Basis Documents & Design Output Documents SRG,CRG,ORG 1

l v l Prepare System Reference I List SRG,CRG,ORG v v

/

Distribu;e Define System Design &

System Reference Licensing Basis / Prepare / craicai List for Use System Requirement List a  :

'[\ %'g*'g*"*y PlW3M SRG SRG \

x x

v N v v v v s 1 y Submit Des /Lic. Perform Functional Perform Component Perform Detailed Basis List to R'eview Perform Topical Area Calc Review Review for ORG for Use P&lD/ Logics / Electrical Review nsls e (M/E/l/ Piping Analysis Diagrams & EQ/SQ Rept.)

,, a id /

SRG SRG Cales/ Specs i SRG SRG SRG h i v $ E v

Disposition System ,

Requirements List

, Disposition of .

Critmal ,N SRG

• l

• 'characteristes /-

toARG

, N ,f' Were discrepancies ' -No---

identified?,

I Yes Y-Process Discrepancy Reports l (PI-MP3-11) l SRG l v

I Y

Prepare Review Report i

e mamvemc vevi .onopopo23 ein vsd so n.s w oi22PM l SRG {:

i  !

. i PI-MP3-02, Rnv. 3 Attachment 6.2 i Page 1 of 3 Scope of Electrical Support System Review This verification will consist of identifying the buses that feed all the components l (including indirect l&C signal input components (See Attachment 6.3]) used in l l the systems under review and determine the " load-time' profile for these l components. The " path" from these buses are to be identified up to the l electrical onsite source (i.e. diesel-generator, battery & charger, inverter, etc.) ,

This is explained in Pages 2 and 3 of this Attachment. The loading time profile  ;

on each bus for the components of the system under review shall be verified for the calculations that use this information as input. The bus voltage will also be identified from the voltage drop calculations to verify that the correct bus voltage was used to determine voltago drop to the components of the system under review.

Once the loads are verified, the load carrying components in the " path" will be checked for design sizing based on the total operating load of the bus as shown in the bus loading calculations. Loading for components of systems not under '

review will be accepted (without verification) as shown in the bus loading calculations as input. Coordination of protective devices (relays, breakers, fuses, etc.) for the " paths" required to supply the components of the systems  !

4 under review will.be verified to confirm acceptable coordination and that the required bus operating loading is addressed.

The onsite source load-time profile will be checked to determine that the source input is properly included for the components of the systems under review (including transient loading) . The overall source sizing will also be checked against total loading of the source, however, verification of other systems loading will not be done but simply accepted as input. In addition, the battery charger (or inverter) and its continuous loading profile will be similarly checked to confirm the size, that the " path" is complete to the diesel-generator, and load profile matches or envelopes the diesel-generator loading input from the charger (inverter).

If the system under review has components credited for Appendix R/ Safe shutdown use, verify that the electrical support system components (equipment and cabling) in the " path" to the onsite source are not affected by fires in the fire l zones which are identified as needing the components of the system under review for safe shutdown during the postulated fire.

When all of the systems under review have been identified, along with most of the components that are fed from MCCs, two MCCs with non-duplicate load components will be selected for review of all design sizing and coordination for all loads on these two MCCs. The load input from other systems not under review will not be verified, but the design of the MCC will be verified baced on the component input.

AC SYSTEM SUPPORT M. V. SWGR _ _

1)Dc n 1)Dc n 1)De n

-+ - ELEC SYSTEM SUPPORT REVIEW ,

l +RLY lIRLY

- l- RLY FOR MECH. SYSTEM.

PART OF MECH. SYSTEM REVIEW ,

wo APP] ICA[)l l [ It.1 tibillG RLO* MIS S/R D.G.

-MLCil. SYSIEM lOADirJG ACCOtitJill) l i sti

' 'M --OPERATING VOL IAGl' RANGl GifOlltJI)ltlG (10t411 & SWil M) -

L Otlll* Sl / Ilit; l* Roll CllVL GI IlitlG t.titslelitt4Allini i e 6 v)DC PATH (OVERLOAD. FAUl I.1II C I Ollli' 9

-APP. R ltJLI til)Lo L.V. SWGR [ PROTECTION)

- SAFE SilUIDOwil itJCLUDEO e -SAFE SHUIDOWN SUPPORI It1Ci lllll D

- CABI E SillflG (IRAY.FIRESTOP.AlAB.)

f)DC )DC FOR MECH SYSTEM

r -APP. R ANALYSIS itiCillDLD I OR

-VOLI DROP (POWLR & COrilROI ) -H '

MECH SYSTEM

-PROIEClivi. SLillrJGS S/R -ALL RELATED SYSTEM COMPOf4LNIS lill

\ M FROM SAME SOURCE (OlVISION)

- OPERAlltJG VOl IAGL HAtJGE cOuPOrnni i O ~ j

" {

")

CONT 3H) J) s/R '"

= a> 'v LOAD eaE S/R

• E3

< C.V. DISTR o!g 1

wa-,a J

~

.q.

s/n 'utsc PNL s

1, CONTROL DC SYSTEM SUPPORT AC - ,

I BAT CllRG T _

1 l 1 M. V. SWGR

= '

> ELEC SYSTEM SUPPORT REVIEW PART OF MECH SYSTEM REVIEW <

FOR MECH SYSTEM '

~ DC CONT API'lICAul L LICLNSING REO'MENTS _ i -MECH SYSTEM CONTROL LOADING L QUIPMEl1I RATINGS I ACCOUNTED FOR

-APP R INCLUDED (INCLUDING TIMING / REPETITION)

SAI f SilufDOWil INCLUDED L V. SWGR -DISTR. VOLT DROP TO BUS /SWGR Caul L SIZltlG (INCLUDING TRAY- '

.. -PROTECTIVE SETTINGS COORDINATION i1RF SiOP. DUCI AMBIEt1T) __ FOR PATH I volIAGI I)Rol' (Cl< l) (OVERLOAD, FAULT, ELEC. EQUIP l

' DC CONI l 'Ho ll .C ilVL SL I litlGS s PROTECTION) y y ., i VOI l AGE RAtJGE 1 r

l -SAFE SHUTDOWN SUPPORT INCL UDED E E E  :

u E3 couPoisi ni c.o.

FOR MECH SYSTEM '

-APP. R ANALYSIS INCLUDED FOR S. ,b S/R

< PANEL __ SOL MECH SYSTEM .a y

} -ALL RELATED SYSTEM COMPONENTS - '

RLY CONTACT FED FROM SAME SOURCE (DMSION)

SOL

PI-MP3-02 Rev. 3 Attachment 6.3 Pagel of 2 l Scope ofInarumentation and Control Interface System Review l There are three categories ofinterfacing I&C signals which will be included in the review. These include: ,

1. Indirect input signals

2. Direct input signals

3. . Output signals Indirect Inouts l

Indirect I&C input signals are those signals which originate in another system and input into the system under review by first passing through another system (i.e. RPS). Indirect input signals will be treated as though they are a part of the system boundary, as follows:

Review includes 100% review as described in this PI for the vertical slice system, except that only dissimilar channels of each process variable will be reviewed.

Review also includes walkdown of all channels for one (1) selected process variable per PI-MP3-05.

. The other system the indirect signal passes through will be treated as a black box. Review will only include a' document review of the signal path as it appears on logic diagrams, and schematics. This review wili verify signal parameters, divisional source, setpoint, range and accuracy. Setpoint and loop accuracy calculations will be reviewed for technical adequacy for the affected instrumentation. Wiring diagrams will not be reviewed for the Reactor Protection (Solid State Protection) panels / cabinets.

Direct Inouts l Direct I&C input signals are those signals which originate in another system and input directly

- into the system under review without passing through another system. For direct I&C input signals, the review includes the interfacing system instrument signal paths to their signal source to verify that the functions required to support the vertical slice review were addressed in the design of the 'nterfacing system. The review includes the signal path as it appears on interfacing system P& ids, logic diagrams, and schematics. This review will verify signal parameters, divisional source, setpoint, range and accuracy. Setpoint and loop accuracy calculations will be reviewed  !

for technical adequacy for the affected instrumentation.

)

I Qutput Signals l 1 Output signals are those signals which originate in the vertical slice system and output to the interfacing system. This review includes the I&C output signals from the vertical slice system i through to the input point (usually up to the control relay; or in the case of an analog signal, up to and including the signal isolator) of the interfacing system. The review includes the signal path as

)

j it appears on interfacing system P&lDs, logic diagrams, and schematics. This review will verify

]

I

. - . . . . . . . . . . - . . . - .. .- - - - - - - ~ - - .-- - . - - . - ._... - . - - . - ..

\

PI-MP3-02 Rev 3 Attachment 6.3 Page2 of 2 signal parameters, divisional source, setpoint, range and accuracy. Setpoint and loop accuracy calculations will be reviewed for technical adequacy for the affected indtmmentation.

If the interfacing system I&C signal inputs or outputs are covered by the vertical slice review of another system included in the review then the review of the affected instrumentation will not be

duplicated.

9 l

J i

)

J s,

i i

d 4

4

\.

- _ _ _ , _