ML17332A279: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
Line 16: Line 16:


=Text=
=Text=
{{#Wiki_filter:PRIORITY1ACCELERATEDRIDSPROCESSING)REGULATORYINFORMATIONDISTRIBUTIONSYSTEM(RIDS)ACCESSIONNBR:9409020190DOC.DATE:94/08/24NOTARIZED:NODOCKETFACIL:50-315DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATIONPFITZPATRICK,E.EIndianaMichiganPowerCo.(formerlyIndiana&MichiganEleRECIP.NAMERECIPIENTAFFILIATIONRUSSELL,W.T.DocumentControlBranch(DocumentControlDesk)R
{{#Wiki_filter:PRIORITY1ACCELERATED RIDSPROCESSING)
REGULATORY INFORMATION DISTRIBUTION SYSTEM(RIDS)ACCESSION NBR:9409020190 DOC.DATE:
94/08/24NOTARIZED:
NODOCKETFACIL:50-315 DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATION PFITZPATRICK,E.E IndianaMichiganPowerCo.(formerly Indiana&MichiganEleRECIP.NAME RECIPIENT AFFILIATION RUSSELL,W.T.
DocumentControlBranch(Document ControlDesk)R


==SUBJECT:==
==SUBJECT:==
Informsofrevisionto900221ltrinresponsetoRAIrepost-firesafeshutdownmethodologyatutil.Installingreflashcapabilityincontrolroomsiscancelled.DISTRIBUTIONCODE:A006DCOPIESRECEIVED:LTRENCLSIZE:TITLE:OR/LicensingSubmittal:FireProtection-AppR-GL-88-12NOTES:RECIPIENTIDCODE/NAMEPD3-1LAHICKMAN,JINTERNAL:NRR/DSSA/SPLBOC/LEDCR~FTL01EXTERNAL:NOACCOPIESLTTRENCL102211101111RECIPIENTIDCODE/NAMEPD3-1PDNUDOCS-ABSTRACTOGC/HDS2NRCPDRCOPIESLTTRENCL11111011D0CUENOTETOALL"RIDSRECIPIENTS:PLEASEHELPUSTOREDUCEWASTE!CONTACTTHEDOCUMENTCONTROLDESK,ROOMPl-37(EXT.504-2083)TOELIMINATEYOURNAMEFROMDISTRIBUTIONLISTSI'ORDOCUMENTSYOUDON'TNEED!TOTALNUMBEROFCOPIESREQUIRED:LTTR11ENCL"8  
Informsofrevisionto900221ltrinresponsetoRAIrepost-fire safeshutdownmethodology atutil.Installing reflashcapability incontrolroomsiscancelled.
'1I IndianaMichiganPowerCompanyP.O.Box16631Columbus,OH43216AEP:NRC:0692CUDonaldC.CookNuclearPlantUnits1and2DocketNos.50-315and50-316LicenseNos.DPR-58andDPR-74REVISIONOFPLANSTOINSTALLREFLASHCAPABILITYFORTHECONTROLROOMFIREANNUNCIATORPANELSU.S.NuclearRegulatoryCommissionDocumentControlDeskWashington,D.C.20555Attn:W.T.RussellAugust24,1994
DISTRIBUTION CODE:A006DCOPIESRECEIVED:LTR ENCLSIZE:TITLE:OR/Licensing Submittal:
FireProtection
-AppR-GL-88-12NOTES:RECIPIENT IDCODE/NAME PD3-1LAHICKMAN,J INTERNAL:
NRR/DSSA/SPLB OC/LEDCR~FTL01EXTERNAL:
NOACCOPIESLTTRENCL102211101111RECIPIENT IDCODE/NAME PD3-1PDNUDOCS-ABSTRACT OGC/HDS2NRCPDRCOPIESLTTRENCL11111011D0CUENOTETOALL"RIDSRECIPIENTS:
PLEASEHELPUSTOREDUCEWASTE!CONTACTTHEDOCUMENTCONTROLDESK,ROOMPl-37(EXT.504-2083)TOELIMINATE YOURNAMEFROMDISTRIBUTION LISTSI'ORDOCUMENTS YOUDON'TNEED!TOTALNUMBEROFCOPIESREQUIRED:
LTTR11ENCL"8  
'1I IndianaMichiganPowerCompanyP.O.Box16631Columbus, OH43216AEP:NRC:0692CU DonaldC.CookNuclearPlantUnits1and2DocketNos.50-315and50-316LicenseNos.DPR-58andDPR-74REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELSU.S.NuclearRegulatory Commission DocumentControlDeskWashington, D.C.20555Attn:W.T.RussellAugust24,1994


==DearMr.Russell:==
==DearMr.Russell:==
ThepurposeofthisletteristorevisepreviousinformationsubmittedFebruary21,1990,(AEP:NRC:0692BT),inresponsetoaSeptember14,1989,NRCRequestforAdditionalInformation(RAI),regardingpost-firesafeshutdownmethodologyatDonaldC.CookNuclearPlant.Onpage13,ofAttachment1,ofAEP:NRC:0692BT,wecommittedtoinstall"detectionsystemreflashcapabilityinthecontrolrooms",andindicatedthatthis"modificationisbeingdevelopedwithatargetcompletionbyDecember1991."ThecommitmentwasnotrequiredbytheRAIbut,atthattime,wasbelievedtobeadesirableenhancement.OnDecember2,1991,wesubmittedAEP:NRC:0692BY,andnotedthereinthatthefirealarmreflashprojecthadtoberescheduledforcompletionbyDecember31,1994,duetothecomplexityoftheproject.Afterextensivereview,wehaveconcludedthatthecostofinstallingreflashcapabilitywillnothaveacommensuratesafety.benefit,-andmaynotbetechnicallydesirable.Thisconclusionwasbasedonoperatorinterviews,firealarmsystemwalkdowns,reviewoftheFireProbabilisticRiskAssessment(PRA),reviewoftheDetailedControlRoomDesignReview(DCRDR),engineeringevaluationsofthefireannunciatorpanels,andareviewoffiredetectioncorrectiveandpreventivemaintenanceprocedures.Attachment1tothisletterprovidesdetailedjustificationtosupportcancellingthereflashmodification.QOUAg9409020190'F40824PDRADOCK05000315.F.,PDR Mr.W.T.Russell-2-AEP:NRC:0692CUInaddition,thisisaCostBeneficialLicensingAction(CBLA).ThelifetimecostsavingsassociatedwiththisCBLAareapproximately$2,421,000,asdetailedinAttachment2.Sincerely,E.E.FitzpatrickVicePresidentcadAttachmentscc:A.A.BlindG.CharnoffJ.B.MartinNFEMSectionChiefNRCResidentInspector-BridgmanJ.R.Padgett ATTACHMENT1TOAEP:NRC:0692CUREVISIONOFPLANSTOINSTALLREFLASHCAPABILITYFORTHECONTROLROOMFIREANNUNCIATORPANELS Attachment1toAEP:NRC:0692CUPage1DuringaNovember1989meetingwithNRRandRegionIIIstaffatCookNuclearPlant,themaintenanceandsurveillanceofourTechnicalSpecification(T/S)3/4.7.10,"FireRelatedAssemblies,"wasdiscussed.Amiscellaneousissuewasdiscussedregardjngfirealarmsystemcircuitsupervision.Duringthisdiscussi'on,NRCstaffinquiredifthealarmsystemhada"reflash"capability.InresponsetotheNRCinquiry,weindicatedthatreflashcapabilitywouldbeinstalled.OnFebruary21,1990,wesubmittedAEP:NRC:0692BT,inresponsetoNRCRequestforAdditionalInformationregardingpost-firesafeshutdownmethodology.Onpage13ofAttachment1,wecommittedtoinstall"detectionsystemreflashcapabilityinthecontrolrooms"andindicatedthatthis"modificationisbeingdevelopedwithatargetcompletionbyDecember1991."OnDecember.2,1991,wesubmittedAEP:NRC:0692BYandnotedthereinthatthefirealarmreflashprojectwouldberescheduledforcompletionbyDecember31,1994,duetothecomplexityoftheproject.Inaccordancewithourcommitmenttoinstallreflashonthecontrolroomfirepanels,aplantmodification(12-PM-1015)wasopened.Thisplantmodificationwassubsequentlyclosedwhenitwasrealizedthatthescopeofworkwassignificantlymoreresourceintensivethaninitiallyenvisionedandwouldrequireacorporate(AEPSC)designchange.Subsequentreviewsandevaluationshavenowdeterminedthatreflashcannotbeinstalledforthefirepanelsforlessthanaminimumcostofapproximately$2,421,000(1993dollars,forbothunitsexcludingthesimulator).ThefireannunciatorpanelsintheCookNuclearPlantcontrolroomshaveasimpleoperatingsequenceconsistentwiththerestofthecontrolroomannunciatorpanels.Whentheinputtoanannunciatordropchangesfromnormaltoabnormal,thedropwillbegintoflashandsoundanaudiblealarm.Theoperatoracknowledgesthealarmbypushingtheassociateddrop(whichisalsoapushbuttonswitch)whichsilencestheaudiblealarmandresultsinastanding(solid)visualalarm.Whentheconditionclears,thelightwillflashagain,alongwithanaudiblesignal,untilthedropis'epressed.TheCookNuclearPlantcontrolroomannunciatorsystemwasdesignedtoprovideplantmonitoringfunctionsandtoaddresshumanfactorsconcerns.Thiswasachieved,inpart,bytheutilizationofsharedalarmpointinputs(multi-inputdrops).Thisenableseachdroptoacceptmultipleprocesssignalstoprovidenecessaryinformationwithoutdistractingoperatorswith Attachment1toAEP:NRC:0692CUPage2redundantor"low-level"information.Ingeneral,multiplealarmpointinputsarelogicallygroupedbysystemfunctionand/orphysicallocation(e.g.,fireprotectionalarmsforallfourreactorcoolantpumpsaregroupedtogetherontooneannunciatordrop).Whenthefirstabnormalconditionoccurs,thealarmpointcanreturntonormalonlyafterallassociatedinputconditionshavereturnedtonormal.Subsequentabnormalconditionswouldnot"reflash"thatalarmpointwhileapreviousabnormalconditionstillexists.CookNuclearPlantutilizesmulti-input:dropsinaccordancewithNUREG-0700andtheAEPsystemcontrolroomdesignphilosophy.Multi-input:alarmswithoutreflashareusedifthequantity,sequenceorcombinationofalarminputsdoesnotchangethepriorityofthealarm,theidentityofthealarmconditionisavailableatalocalpaneloronahardcopyprintout(orstatuslight),anditdoesnotsignificantlyaffectthenatureoforthetimerequiredtoimplementtheinitialcorrectiveactioninresponsetothealarmcondition.Unitcontrolroomfireannunciatorpanelsconsistof150drops.Drop¹41,labeledFIRE,isareddrop(firstpriorityalarm)andwasdesignedtoclearlyindicateactuationoffireprotectionsystems.Thisdropisonlyenergizedinconjunctionwithanotherdropwhichidentifiestheactuatingequipmentortosignalthattheothercontrolroomhasreceivedtheirdrop¹41alarm.Otherfirepaneldropsareeitherred(firstpriorityalarm)indicatingsystemactuation,amber(secondpriority)forabnormalconditions,orwhite(thirdpriority)whichalsoindicatesyst:emtrouble.Theannunciatorresponseproceduresindicatetheareasand/orequipmentassociatedwitheachdrop.Formulti-inputdropswhichmonitoralargenumberofzones,theproceduresrequirethat,iftheannunciatororfiredetectionzonelightremainsilluminated,thentheoperatormustmonitorthestatuslightsatthetopofthefireprotectionpanelonceperhour(administratively,onceper30minutes)forotheralarms.Thestatuslightstelltheoperatorwhichfireprotectionzonehastheabnormalcondition.Therequirementtomonitor-thefirepanelisreiteratedinthe"StandingFireDetectionAlarm"datasheetwhichisusedtodocumentandtrackstandingalarmsona30minutefrequency.Inaddition,standingalarmsassociatedwithTechnicalSpecificationrequireddetectorslocatedoutsideofcontainmentrequirehourlyfirewatchpatrolstoinspecttheaffectedzone(s).Detectorslocatedinsidecontainmenthavedifferentparameter Attachment1toAEP:NRC:0692CUPage3monitoringrequirementssuchasmonitoringcontainmentairtemperatures.Also,certaindrops,suchasdrop¹94"REACTORCOOLANTPUMPFIREORABN,"simultaneouslyannunciateabnormalconditionsontheir'ssociatedsystempanel.Forexample,afireconditionilluminatingdrop¹94willhaveanassociatedalarmonthereactorcoolantpump(RCP)panel(locatedinthecontrolroom)indicatingthespecificaffectedRCP.ThecontrolroomoperatorsaretrainednottotoleratestandingalarmsandfaulteddetectorcircuitsarepromptlyrepairedandwellmaintainedunderacomprehensivesurveillanceandmaintenancescheduleinaccordancewithTechnicalSpecifications.Standingabnormalalarmsaretrackedonadailybasisbymanagementandactionistakentokeepthenumberofstandingalarmstoaminimum.PlantproceduresandTechnicalSpecificationsrequirethatfirewatchesbeestablishedforinoperableequipmentandsystemsthatcouldaffectthesafetyoftheplant.Theutilizationoflocalfireindicating/controlpanelsbyfirewatchpersonnelprovidesaddedassurancethatthoseareaswhicharemonitoredbymulti-inputdropsinthecontrolroomarebeingadequatelysurveyedtoprecludepotentialmaskingofabnormalfireprotectionconditions.TheDetailedControlRoomDesignReview(DCRDR)examinedallmulti-inputdropsandtheannunciatorresponseprocedurestodetermineifreflashand/orprintoutcapabilitywouldbeneededoradvantageous.TheconclusionoftheDCRDRwasthatnoreflashofmulti-inputalarmswasrequiredandthatthebenefitsofreflashwouldnotbecostjustified.Irrespectiveofthisconclusion,aneffortwasmadeduringtheDCRDRtoaddresstheneedtoaddalarmstothePlantProcessComputer(PPC)inlieuofsplittingmulti-inputalarmsorinstallingreflashcircuitsand,itwasconcludedthataddingalarmstothePPCwouldnot,ingeneral,beofvaluebasedonoperationsproceduresandtheoverallcontrolroomannunciatordesign.Inconclusion,theintegrateduseofthecontrolroomfirepanelalongwiththeassociatedstatus.lights,thelocalfireannunciatorpanels,theannunciatorresponseprocedures,andothercontrolroomannunciatorpanels,providesthenecessaryinformationtoidentitydifferentalarmsignalsassociatedwithmulti-inputdrops.Inaddition,thecomprehensivesurveillance Attachment1toAEP:NRC:0692CUPage4andmaintenanceofdetectorcircuitsandthelowprobabilityofautomaticdetectionsystemfailure,furthersupportstheconclusionthatreflashcapabilitywillnothaveasignificantplantsafetybenefit.IBaseduponthesereviews,theinstallationofreflashcapabilityforthecontrolroomfireannunciatorpanelsclearlywillnotprovideasignificantreductioninplantrisk.Inaddition,installationofreflashcapabilityisnotrequiredforcompliancewith10CFRPart50AppendixR,forlicensingcommitmentspursuanttoNFPAcompliance,orforcompliancewiththeguidanceprovidedinAppendixAtoBTPAPCSB9.5-1andourresponsetotheBTPdatedJanuary31,1977.Tosupport'heaboveevaluations,wehavealsoreviewedtheresultsoftheIndividualPlantExaminationofExternalEvents(IPEEE)FireAnalysiscompletedinApril1992.Basedontheresultsofthisevaluation,itisconcludedthatreflashcapabilitywillnotimpacttheresultsofthefireProbabilisticRiskAssessment(PRA).InstallationofreflashcapabilitywillnotreducethefireinducedcontributiontocoredamagefrequencyforCookNuclearPlant.Finally,inaccordancewith10CFR50.59andtheguidanceprovidedinNSAC-125,anunreviewedsafetyquestiondeterminationwasperformed.Itwasconcluded,therein,thatcancellationofthereflashmodificationwillnotconstituteanunreviewedsafetyquestionper10CFR50.59(a)(2),nordoesitconstituteasignificanthazardtothehealthandsafetyofthepublic.
Thepurposeofthisletteristorevisepreviousinformation submitted February21,1990,(AEP:NRC:0692BT),
ATTACHMENT2TOAEP'NRC'0692CUCOSTBENEFICIALLICENSINGACTION(CBLA)REVISIONOFPLANSTOINSTALLREFLASHCAPABILITYFORTHECONTROLROOMFIREANNUNCIATORPANELS
inresponsetoaSeptember 14,1989,NRCRequestforAdditional Information (RAI),regarding post-fire safeshutdownmethodology atDonaldC.CookNuclearPlant.Onpage13,ofAttachment 1,ofAEP:NRC:0692BT, wecommitted toinstall"detection systemreflashcapability inthecontrolrooms",andindicated thatthis"modification isbeingdeveloped withatargetcompletion byDecember1991."Thecommitment wasnotrequiredbytheRAIbut,atthattime,wasbelievedtobeadesirable enhancement.
~~IAttachment2toAEP:NRC:0692CUPage1RegulatoryRequirement:AcommitmentwasmadeinAEP:NRC:0692BTandAEP:NRC:0692BY,toinstallreflashcapabilityforthecontrolroomfireannunciatorpanels.IEffectofRequirement:Installationofreflashcapabilityforthecontrolroomfireannunciatorpanelswillmakethesepanelsinconsistentwiththeothercontrolroompanels,andmayresultinahumanfactorsconcern.Additionally,reflashcapabilitywillnotresultinasignificantreductionofplantfirerisk.RationaleforRegulatoryChange:Theavailabilityoffireprotectiondefense-in-depthmeasuresensuresplantfiresafety.Thesedefensemeasuresincludethewidespreaduseoffiredetectionandfixedsuppressionsystemsthroughouttheplant,theavailabilityofmanualfiresuppressionequipment,e.g.,portableextinguishersandhosestations,theexistenceofatrainedplantfirebrigade,andthegenerallylowfireloadingspresentthroughouttheplant.BasedonthejustificationprovidedinAttachment1anddefense-in-depthstrategies,installationofreflashwillnotprovideareductioninplantfireriskcommensuratewiththecost.ApproximateCostofRequirement:Theminimumcosttoinstallreflashcapabilityforthecontrolroomfirepanelsis$2,421,000(1993dollars).Thiscostdoesnotincludeanysoftwarechanges,seismicsupportsforcable/conduitrouting,modificationstothesimulator,orreplacementofwindowdropboxes.  
OnDecember2,1991,wesubmitted AEP:NRC:0692BY, andnotedthereinthatthefirealarmreflashprojecthadtoberescheduled forcompletion byDecember31,1994,duetothecomplexity oftheproject.Afterextensive review,wehaveconcluded thatthecostofinstalling reflashcapability willnothaveacommensurate safety.benefit,-andmaynotbetechnically desirable.
Thisconclusion wasbasedonoperatorinterviews, firealarmsystemwalkdowns, reviewoftheFireProbabilistic RiskAssessment (PRA),reviewoftheDetailedControlRoomDesignReview(DCRDR),engineering evaluations ofthefireannunciator panels,andareviewoffiredetection corrective andpreventive maintenance procedures.
Attachment 1tothisletterprovidesdetailedjustification tosupportcancelling thereflashmodification.
QOUAg9409020190
'F40824PDRADOCK05000315.F.,PDR Mr.W.T.Russell-2-AEP:NRC:0692CU Inaddition, thisisaCostBeneficial Licensing Action(CBLA).Thelifetimecostsavingsassociated withthisCBLAareapproximately
$2,421,000, asdetailedinAttachment 2.Sincerely, E.E.Fitzpatrick VicePresident cadAttachments cc:A.A.BlindG.CharnoffJ.B.MartinNFEMSectionChiefNRCResidentInspector
-BridgmanJ.R.Padgett ATTACHMENT 1TOAEP:NRC:0692CU REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELS Attachment 1toAEP:NRC:0692CU Page1DuringaNovember1989meetingwithNRRandRegionIIIstaffatCookNuclearPlant,themaintenance andsurveillance ofourTechnical Specification (T/S)3/4.7.10, "FireRelatedAssemblies,"
wasdiscussed.
Amiscellaneous issuewasdiscussed regardjng firealarmsystemcircuitsupervision.
Duringthisdiscussi'on, NRCstaffinquiredifthealarmsystemhada"reflash" capability.
InresponsetotheNRCinquiry,weindicated thatreflashcapability wouldbeinstalled.
OnFebruary21,1990,wesubmitted AEP:NRC:0692BT, inresponsetoNRCRequestforAdditional Information regarding post-fire safeshutdownmethodology.
Onpage13ofAttachment 1,wecommitted toinstall"detection systemreflashcapability inthecontrolrooms"andindicated thatthis"modification isbeingdeveloped withatargetcompletion byDecember1991."OnDecember.2,1991,wesubmitted AEP:NRC:0692BY andnotedthereinthatthefirealarmreflashprojectwouldberescheduled forcompletion byDecember31,1994,duetothecomplexity oftheproject.Inaccordance withourcommitment toinstallreflashonthecontrolroomfirepanels,aplantmodification (12-PM-1015) wasopened.Thisplantmodification wassubsequently closedwhenitwasrealizedthatthescopeofworkwassignificantly moreresourceintensive thaninitially envisioned andwouldrequireacorporate (AEPSC)designchange.Subsequent reviewsandevaluations havenowdetermined thatreflashcannotbeinstalled forthefirepanelsforlessthanaminimumcostofapproximately
$2,421,000 (1993dollars,forbothunitsexcluding thesimulator).
Thefireannunciator panelsintheCookNuclearPlantcontrolroomshaveasimpleoperating sequenceconsistent withtherestofthecontrolroomannunciator panels.Whentheinputtoanannunciator dropchangesfromnormaltoabnormal, thedropwillbegintoflashandsoundanaudiblealarm.Theoperatoracknowledges thealarmbypushingtheassociated drop(whichisalsoapushbuttonswitch)whichsilencestheaudiblealarmandresultsinastanding(solid)visualalarm.Whenthecondition clears,thelightwillflashagain,alongwithanaudiblesignal,untilthedropis'epressed.
TheCookNuclearPlantcontrolroomannunciator systemwasdesignedtoprovideplantmonitoring functions andtoaddresshumanfactorsconcerns.
Thiswasachieved, inpart,bytheutilization ofsharedalarmpointinputs(multi-input drops).Thisenableseachdroptoacceptmultipleprocesssignalstoprovidenecessary information withoutdistracting operators with Attachment 1toAEP:NRC:0692CU Page2redundant or"low-level" information.
Ingeneral,multiplealarmpointinputsarelogically groupedbysystemfunctionand/orphysicallocation(e.g.,fireprotection alarmsforallfourreactorcoolantpumpsaregroupedtogetherontooneannunciator drop).Whenthefirstabnormalcondition occurs,thealarmpointcanreturntonormalonlyafterallassociated inputconditions havereturnedtonormal.Subsequent abnormalconditions wouldnot"reflash" thatalarmpointwhileapreviousabnormalcondition stillexists.CookNuclearPlantutilizesmulti-input:
dropsinaccordance withNUREG-0700 andtheAEPsystemcontrolroomdesignphilosophy.
Multi-input:
alarmswithoutreflashareusedifthequantity, sequenceorcombination ofalarminputsdoesnotchangethepriorityofthealarm,theidentityofthealarmcondition isavailable atalocalpaneloronahardcopyprintout(orstatuslight),anditdoesnotsignificantly affectthenatureoforthetimerequiredtoimplement theinitialcorrective actioninresponsetothealarmcondition.
Unitcontrolroomfireannunciator panelsconsistof150drops.Drop¹41,labeledFIRE,isareddrop(firstpriorityalarm)andwasdesignedtoclearlyindicateactuation offireprotection systems.Thisdropisonlyenergized inconjunction withanotherdropwhichidentifies theactuating equipment ortosignalthattheothercontrolroomhasreceivedtheirdrop¹41alarm.Otherfirepaneldropsareeitherred(firstpriorityalarm)indicating systemactuation, amber(secondpriority) forabnormalconditions, orwhite(thirdpriority) whichalsoindicatesyst:emtrouble.Theannunciator responseprocedures indicatetheareasand/orequipment associated witheachdrop.Formulti-input dropswhichmonitoralargenumberofzones,theprocedures requirethat,iftheannunciator orfiredetection zonelightremainsilluminated, thentheoperatormustmonitorthestatuslightsatthetopofthefireprotection panelonceperhour(administratively, onceper30minutes)forotheralarms.Thestatuslightstelltheoperatorwhichfireprotection zonehastheabnormalcondition.
Therequirement tomonitor-thefirepanelisreiterated inthe"Standing FireDetection Alarm"datasheetwhichisusedtodocumentandtrackstandingalarmsona30minutefrequency.
Inaddition, standingalarmsassociated withTechnical Specification requireddetectors locatedoutsideofcontainment requirehourlyfirewatchpatrolstoinspecttheaffectedzone(s).Detectors locatedinsidecontainment havedifferent parameter Attachment 1toAEP:NRC:0692CU Page3monitoring requirements suchasmonitoring containment airtemperatures.
Also,certaindrops,suchasdrop¹94"REACTORCOOLANTPUMPFIREORABN,"simultaneously annunciate abnormalconditions ontheir'ssociated systempanel.Forexample,afirecondition illuminating drop¹94willhaveanassociated alarmonthereactorcoolantpump(RCP)panel(locatedinthecontrolroom)indicating thespecificaffectedRCP.Thecontrolroomoperators aretrainednottotoleratestandingalarmsandfaulteddetectorcircuitsarepromptlyrepairedandwellmaintained underacomprehensive surveillance andmaintenance scheduleinaccordance withTechnical Specifications.
Standingabnormalalarmsaretrackedonadailybasisbymanagement andactionistakentokeepthenumberofstandingalarmstoaminimum.Plantprocedures andTechnical Specifications requirethatfirewatchesbeestablished forinoperable equipment andsystemsthatcouldaffectthesafetyoftheplant.Theutilization oflocalfireindicating/control panelsbyfirewatchpersonnel providesaddedassurance thatthoseareaswhicharemonitored bymulti-inputdropsinthecontrolroomarebeingadequately surveyedtoprecludepotential maskingofabnormalfireprotection conditions.
TheDetailedControlRoomDesignReview(DCRDR)examinedallmulti-input dropsandtheannunciator responseprocedures todetermine ifreflashand/orprintoutcapability wouldbeneededoradvantageous.
Theconclusion oftheDCRDRwasthatnoreflashofmulti-input alarmswasrequiredandthatthebenefitsofreflashwouldnotbecostjustified.
Irrespective ofthisconclusion, aneffortwasmadeduringtheDCRDRtoaddresstheneedtoaddalarmstothePlantProcessComputer(PPC)inlieuofsplitting multi-inputalarmsorinstalling reflashcircuitsand,itwasconcluded thataddingalarmstothePPCwouldnot,ingeneral,beofvaluebasedonoperations procedures andtheoverallcontrolroomannunciator design.Inconclusion, theintegrated useofthecontrolroomfirepanelalongwiththeassociated status.lights,thelocalfireannunciator panels,theannunciator responseprocedures, andothercontrolroomannunciator panels,providesthenecessary information toidentitydifferent alarmsignalsassociated withmulti-input drops.Inaddition, thecomprehensive surveillance Attachment 1toAEP:NRC:0692CU Page4andmaintenance ofdetectorcircuitsandthelowprobability ofautomatic detection systemfailure,furthersupportstheconclusion thatreflashcapability willnothaveasignificant plantsafetybenefit.IBaseduponthesereviews,theinstallation ofreflashcapability forthecontrolroomfireannunciator panelsclearlywillnotprovideasignificant reduction inplantrisk.Inaddition, installation ofreflashcapability isnotrequiredforcompliance with10CFRPart50AppendixR,forlicensing commitments pursuanttoNFPAcompliance, orforcompliance withtheguidanceprovidedinAppendixAtoBTPAPCSB9.5-1andourresponsetotheBTPdatedJanuary31,1977.Tosupport'he aboveevaluations, wehavealsoreviewedtheresultsoftheIndividual PlantExamination ofExternalEvents(IPEEE)FireAnalysiscompleted inApril1992.Basedontheresultsofthisevaluation, itisconcluded thatreflashcapability willnotimpacttheresultsofthefireProbabilistic RiskAssessment (PRA).Installation ofreflashcapability willnotreducethefireinducedcontribution tocoredamagefrequency forCookNuclearPlant.Finally,inaccordance with10CFR50.59 andtheguidanceprovidedinNSAC-125, anunreviewed safetyquestiondetermination wasperformed.
Itwasconcluded, therein,thatcancellation ofthereflashmodification willnotconstitute anunreviewed safetyquestionper10CFR50.59(a)(2),
nordoesitconstitute asignificant hazardtothehealthandsafetyofthepublic.
ATTACHMENT 2TOAEP'NRC'0692CU COSTBENEFICIAL LICENSING ACTION(CBLA)REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELS
~~IAttachment 2toAEP:NRC:0692CU Page1Regulatory Requirement:
Acommitment wasmadeinAEP:NRC:0692BT andAEP:NRC:0692BY, toinstallreflashcapability forthecontrolroomfireannunciator panels.IEffectofRequirement:
Installation ofreflashcapability forthecontrolroomfireannunciator panelswillmakethesepanelsinconsistent withtheothercontrolroompanels,andmayresultinahumanfactorsconcern.Additionally, reflashcapability willnotresultinasignificant reduction ofplantfirerisk.Rationale forRegulatory Change:Theavailability offireprotection defense-in-depth measuresensuresplantfiresafety.Thesedefensemeasuresincludethewidespread useoffiredetection andfixedsuppression systemsthroughout theplant,theavailability ofmanualfiresuppression equipment, e.g.,portableextinguishers andhosestations, theexistence ofatrainedplantfirebrigade,andthegenerally lowfireloadingspresentthroughout theplant.Basedonthejustification providedinAttachment 1anddefense-in-depth strategies, installation ofreflashwillnotprovideareduction inplantfireriskcommensurate withthecost.Approximate CostofRequirement:
Theminimumcosttoinstallreflashcapability forthecontrolroomfirepanelsis$2,421,000 (1993dollars).
Thiscostdoesnotincludeanysoftwarechanges,seismicsupportsforcable/conduit routing,modifications tothesimulator, orreplacement ofwindowdropboxes.  
-RJJg}}
-RJJg}}

Revision as of 08:08, 29 June 2018

Revises 900221 Submittal in Response to NRC 890914 RAI Re post-fire Safe Shutdown Methodology at Plant.Reflash Mod Cancelled.Detailed Justiification to Support Cancelling Reflash Mod Encl
ML17332A279
Person / Time
Site: Cook  American Electric Power icon.png
Issue date: 08/24/1994
From: FITZPATRICK E
INDIANA MICHIGAN POWER CO. (FORMERLY INDIANA & MICHIG
To: RUSSELL W T
NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
AEP:NRC:0692CU, AEP:NRC:692CU, NUDOCS 9409020190
Download: ML17332A279 (12)


Text

PRIORITY1ACCELERATED RIDSPROCESSING)

REGULATORY INFORMATION DISTRIBUTION SYSTEM(RIDS)ACCESSION NBR:9409020190 DOC.DATE:

94/08/24NOTARIZED:

NODOCKETFACIL:50-315 DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATION PFITZPATRICK,E.E IndianaMichiganPowerCo.(formerly Indiana&MichiganEleRECIP.NAME RECIPIENT AFFILIATION RUSSELL,W.T.

DocumentControlBranch(Document ControlDesk)R

SUBJECT:

Informsofrevisionto900221ltrinresponsetoRAIrepost-fire safeshutdownmethodology atutil.Installing reflashcapability incontrolroomsiscancelled.

DISTRIBUTION CODE:A006DCOPIESRECEIVED:LTR ENCLSIZE:TITLE:OR/Licensing Submittal:

FireProtection

-AppR-GL-88-12NOTES:RECIPIENT IDCODE/NAME PD3-1LAHICKMAN,J INTERNAL:

NRR/DSSA/SPLB OC/LEDCR~FTL01EXTERNAL:

NOACCOPIESLTTRENCL102211101111RECIPIENT IDCODE/NAME PD3-1PDNUDOCS-ABSTRACT OGC/HDS2NRCPDRCOPIESLTTRENCL11111011D0CUENOTETOALL"RIDSRECIPIENTS:

PLEASEHELPUSTOREDUCEWASTE!CONTACTTHEDOCUMENTCONTROLDESK,ROOMPl-37(EXT.504-2083)TOELIMINATE YOURNAMEFROMDISTRIBUTION LISTSI'ORDOCUMENTS YOUDON'TNEED!TOTALNUMBEROFCOPIESREQUIRED:

LTTR11ENCL"8

'1I IndianaMichiganPowerCompanyP.O.Box16631Columbus, OH43216AEP:NRC:0692CU DonaldC.CookNuclearPlantUnits1and2DocketNos.50-315and50-316LicenseNos.DPR-58andDPR-74REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELSU.S.NuclearRegulatory Commission DocumentControlDeskWashington, D.C.20555Attn:W.T.RussellAugust24,1994

DearMr.Russell:

Thepurposeofthisletteristorevisepreviousinformation submitted February21,1990,(AEP:NRC:0692BT),

inresponsetoaSeptember 14,1989,NRCRequestforAdditional Information (RAI),regarding post-fire safeshutdownmethodology atDonaldC.CookNuclearPlant.Onpage13,ofAttachment 1,ofAEP:NRC:0692BT, wecommitted toinstall"detection systemreflashcapability inthecontrolrooms",andindicated thatthis"modification isbeingdeveloped withatargetcompletion byDecember1991."Thecommitment wasnotrequiredbytheRAIbut,atthattime,wasbelievedtobeadesirable enhancement.

OnDecember2,1991,wesubmitted AEP:NRC:0692BY, andnotedthereinthatthefirealarmreflashprojecthadtoberescheduled forcompletion byDecember31,1994,duetothecomplexity oftheproject.Afterextensive review,wehaveconcluded thatthecostofinstalling reflashcapability willnothaveacommensurate safety.benefit,-andmaynotbetechnically desirable.

Thisconclusion wasbasedonoperatorinterviews, firealarmsystemwalkdowns, reviewoftheFireProbabilistic RiskAssessment (PRA),reviewoftheDetailedControlRoomDesignReview(DCRDR),engineering evaluations ofthefireannunciator panels,andareviewoffiredetection corrective andpreventive maintenance procedures.

Attachment 1tothisletterprovidesdetailedjustification tosupportcancelling thereflashmodification.

QOUAg9409020190

'F40824PDRADOCK05000315.F.,PDR Mr.W.T.Russell-2-AEP:NRC:0692CU Inaddition, thisisaCostBeneficial Licensing Action(CBLA).Thelifetimecostsavingsassociated withthisCBLAareapproximately

$2,421,000, asdetailedinAttachment 2.Sincerely, E.E.Fitzpatrick VicePresident cadAttachments cc:A.A.BlindG.CharnoffJ.B.MartinNFEMSectionChiefNRCResidentInspector

-BridgmanJ.R.Padgett ATTACHMENT 1TOAEP:NRC:0692CU REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELS Attachment 1toAEP:NRC:0692CU Page1DuringaNovember1989meetingwithNRRandRegionIIIstaffatCookNuclearPlant,themaintenance andsurveillance ofourTechnical Specification (T/S)3/4.7.10, "FireRelatedAssemblies,"

wasdiscussed.

Amiscellaneous issuewasdiscussed regardjng firealarmsystemcircuitsupervision.

Duringthisdiscussi'on, NRCstaffinquiredifthealarmsystemhada"reflash" capability.

InresponsetotheNRCinquiry,weindicated thatreflashcapability wouldbeinstalled.

OnFebruary21,1990,wesubmitted AEP:NRC:0692BT, inresponsetoNRCRequestforAdditional Information regarding post-fire safeshutdownmethodology.

Onpage13ofAttachment 1,wecommitted toinstall"detection systemreflashcapability inthecontrolrooms"andindicated thatthis"modification isbeingdeveloped withatargetcompletion byDecember1991."OnDecember.2,1991,wesubmitted AEP:NRC:0692BY andnotedthereinthatthefirealarmreflashprojectwouldberescheduled forcompletion byDecember31,1994,duetothecomplexity oftheproject.Inaccordance withourcommitment toinstallreflashonthecontrolroomfirepanels,aplantmodification (12-PM-1015) wasopened.Thisplantmodification wassubsequently closedwhenitwasrealizedthatthescopeofworkwassignificantly moreresourceintensive thaninitially envisioned andwouldrequireacorporate (AEPSC)designchange.Subsequent reviewsandevaluations havenowdetermined thatreflashcannotbeinstalled forthefirepanelsforlessthanaminimumcostofapproximately

$2,421,000 (1993dollars,forbothunitsexcluding thesimulator).

Thefireannunciator panelsintheCookNuclearPlantcontrolroomshaveasimpleoperating sequenceconsistent withtherestofthecontrolroomannunciator panels.Whentheinputtoanannunciator dropchangesfromnormaltoabnormal, thedropwillbegintoflashandsoundanaudiblealarm.Theoperatoracknowledges thealarmbypushingtheassociated drop(whichisalsoapushbuttonswitch)whichsilencestheaudiblealarmandresultsinastanding(solid)visualalarm.Whenthecondition clears,thelightwillflashagain,alongwithanaudiblesignal,untilthedropis'epressed.

TheCookNuclearPlantcontrolroomannunciator systemwasdesignedtoprovideplantmonitoring functions andtoaddresshumanfactorsconcerns.

Thiswasachieved, inpart,bytheutilization ofsharedalarmpointinputs(multi-input drops).Thisenableseachdroptoacceptmultipleprocesssignalstoprovidenecessary information withoutdistracting operators with Attachment 1toAEP:NRC:0692CU Page2redundant or"low-level" information.

Ingeneral,multiplealarmpointinputsarelogically groupedbysystemfunctionand/orphysicallocation(e.g.,fireprotection alarmsforallfourreactorcoolantpumpsaregroupedtogetherontooneannunciator drop).Whenthefirstabnormalcondition occurs,thealarmpointcanreturntonormalonlyafterallassociated inputconditions havereturnedtonormal.Subsequent abnormalconditions wouldnot"reflash" thatalarmpointwhileapreviousabnormalcondition stillexists.CookNuclearPlantutilizesmulti-input:

dropsinaccordance withNUREG-0700 andtheAEPsystemcontrolroomdesignphilosophy.

Multi-input:

alarmswithoutreflashareusedifthequantity, sequenceorcombination ofalarminputsdoesnotchangethepriorityofthealarm,theidentityofthealarmcondition isavailable atalocalpaneloronahardcopyprintout(orstatuslight),anditdoesnotsignificantly affectthenatureoforthetimerequiredtoimplement theinitialcorrective actioninresponsetothealarmcondition.

Unitcontrolroomfireannunciator panelsconsistof150drops.Drop¹41,labeledFIRE,isareddrop(firstpriorityalarm)andwasdesignedtoclearlyindicateactuation offireprotection systems.Thisdropisonlyenergized inconjunction withanotherdropwhichidentifies theactuating equipment ortosignalthattheothercontrolroomhasreceivedtheirdrop¹41alarm.Otherfirepaneldropsareeitherred(firstpriorityalarm)indicating systemactuation, amber(secondpriority) forabnormalconditions, orwhite(thirdpriority) whichalsoindicatesyst:emtrouble.Theannunciator responseprocedures indicatetheareasand/orequipment associated witheachdrop.Formulti-input dropswhichmonitoralargenumberofzones,theprocedures requirethat,iftheannunciator orfiredetection zonelightremainsilluminated, thentheoperatormustmonitorthestatuslightsatthetopofthefireprotection panelonceperhour(administratively, onceper30minutes)forotheralarms.Thestatuslightstelltheoperatorwhichfireprotection zonehastheabnormalcondition.

Therequirement tomonitor-thefirepanelisreiterated inthe"Standing FireDetection Alarm"datasheetwhichisusedtodocumentandtrackstandingalarmsona30minutefrequency.

Inaddition, standingalarmsassociated withTechnical Specification requireddetectors locatedoutsideofcontainment requirehourlyfirewatchpatrolstoinspecttheaffectedzone(s).Detectors locatedinsidecontainment havedifferent parameter Attachment 1toAEP:NRC:0692CU Page3monitoring requirements suchasmonitoring containment airtemperatures.

Also,certaindrops,suchasdrop¹94"REACTORCOOLANTPUMPFIREORABN,"simultaneously annunciate abnormalconditions ontheir'ssociated systempanel.Forexample,afirecondition illuminating drop¹94willhaveanassociated alarmonthereactorcoolantpump(RCP)panel(locatedinthecontrolroom)indicating thespecificaffectedRCP.Thecontrolroomoperators aretrainednottotoleratestandingalarmsandfaulteddetectorcircuitsarepromptlyrepairedandwellmaintained underacomprehensive surveillance andmaintenance scheduleinaccordance withTechnical Specifications.

Standingabnormalalarmsaretrackedonadailybasisbymanagement andactionistakentokeepthenumberofstandingalarmstoaminimum.Plantprocedures andTechnical Specifications requirethatfirewatchesbeestablished forinoperable equipment andsystemsthatcouldaffectthesafetyoftheplant.Theutilization oflocalfireindicating/control panelsbyfirewatchpersonnel providesaddedassurance thatthoseareaswhicharemonitored bymulti-inputdropsinthecontrolroomarebeingadequately surveyedtoprecludepotential maskingofabnormalfireprotection conditions.

TheDetailedControlRoomDesignReview(DCRDR)examinedallmulti-input dropsandtheannunciator responseprocedures todetermine ifreflashand/orprintoutcapability wouldbeneededoradvantageous.

Theconclusion oftheDCRDRwasthatnoreflashofmulti-input alarmswasrequiredandthatthebenefitsofreflashwouldnotbecostjustified.

Irrespective ofthisconclusion, aneffortwasmadeduringtheDCRDRtoaddresstheneedtoaddalarmstothePlantProcessComputer(PPC)inlieuofsplitting multi-inputalarmsorinstalling reflashcircuitsand,itwasconcluded thataddingalarmstothePPCwouldnot,ingeneral,beofvaluebasedonoperations procedures andtheoverallcontrolroomannunciator design.Inconclusion, theintegrated useofthecontrolroomfirepanelalongwiththeassociated status.lights,thelocalfireannunciator panels,theannunciator responseprocedures, andothercontrolroomannunciator panels,providesthenecessary information toidentitydifferent alarmsignalsassociated withmulti-input drops.Inaddition, thecomprehensive surveillance Attachment 1toAEP:NRC:0692CU Page4andmaintenance ofdetectorcircuitsandthelowprobability ofautomatic detection systemfailure,furthersupportstheconclusion thatreflashcapability willnothaveasignificant plantsafetybenefit.IBaseduponthesereviews,theinstallation ofreflashcapability forthecontrolroomfireannunciator panelsclearlywillnotprovideasignificant reduction inplantrisk.Inaddition, installation ofreflashcapability isnotrequiredforcompliance with10CFRPart50AppendixR,forlicensing commitments pursuanttoNFPAcompliance, orforcompliance withtheguidanceprovidedinAppendixAtoBTPAPCSB9.5-1andourresponsetotheBTPdatedJanuary31,1977.Tosupport'he aboveevaluations, wehavealsoreviewedtheresultsoftheIndividual PlantExamination ofExternalEvents(IPEEE)FireAnalysiscompleted inApril1992.Basedontheresultsofthisevaluation, itisconcluded thatreflashcapability willnotimpacttheresultsofthefireProbabilistic RiskAssessment (PRA).Installation ofreflashcapability willnotreducethefireinducedcontribution tocoredamagefrequency forCookNuclearPlant.Finally,inaccordance with10CFR50.59 andtheguidanceprovidedinNSAC-125, anunreviewed safetyquestiondetermination wasperformed.

Itwasconcluded, therein,thatcancellation ofthereflashmodification willnotconstitute anunreviewed safetyquestionper10CFR50.59(a)(2),

nordoesitconstitute asignificant hazardtothehealthandsafetyofthepublic.

ATTACHMENT 2TOAEP'NRC'0692CU COSTBENEFICIAL LICENSING ACTION(CBLA)REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELS

~~IAttachment 2toAEP:NRC:0692CU Page1Regulatory Requirement:

Acommitment wasmadeinAEP:NRC:0692BT andAEP:NRC:0692BY, toinstallreflashcapability forthecontrolroomfireannunciator panels.IEffectofRequirement:

Installation ofreflashcapability forthecontrolroomfireannunciator panelswillmakethesepanelsinconsistent withtheothercontrolroompanels,andmayresultinahumanfactorsconcern.Additionally, reflashcapability willnotresultinasignificant reduction ofplantfirerisk.Rationale forRegulatory Change:Theavailability offireprotection defense-in-depth measuresensuresplantfiresafety.Thesedefensemeasuresincludethewidespread useoffiredetection andfixedsuppression systemsthroughout theplant,theavailability ofmanualfiresuppression equipment, e.g.,portableextinguishers andhosestations, theexistence ofatrainedplantfirebrigade,andthegenerally lowfireloadingspresentthroughout theplant.Basedonthejustification providedinAttachment 1anddefense-in-depth strategies, installation ofreflashwillnotprovideareduction inplantfireriskcommensurate withthecost.Approximate CostofRequirement:

Theminimumcosttoinstallreflashcapability forthecontrolroomfirepanelsis$2,421,000 (1993dollars).

Thiscostdoesnotincludeanysoftwarechanges,seismicsupportsforcable/conduit routing,modifications tothesimulator, orreplacement ofwindowdropboxes.

-RJJg