ML17320A193

NRC Public Meeting, Treatment of Mitigating Strategies in Risk Informed Decision Making

ML17320A193
Person / Time
Site:	Palo Verde
Issue date:	11/15/2017
From:	Powell M - No Known Affiliation
To:	Office of Nuclear Reactor Regulation
Schwab A
Shared Package
ml17312a356	List: ML17320A146 ML17320A193 ML17320A200 ML17320A201
References
Download: ML17320A193 (35)

Text

Palo Verde Use of NEI 16-08 & NEI 16-06 NRC Public Meeting - Treatment of Mitigating Strategies in Risk Informed Decision Making November 15,2017 Michael Powell, Director Fukushima & Strategic Initiatives

Palo Verde Generating Station Example Risk Evaluation Using NEI 16-08

Example Risk Evaluation Using NEI 16-08 Deploying Portable 4160V Diesel Generators During A Safety Related Diesel Outage

.I Description Benefit Summary The purpose of this strategy is to use FLEX diesel Risk reduction; Maintenance can be performed generators to provide a redundant source of while maintaining a green risk window. This 4160V ac power to either of the emergency strategy will be reflected in the PRA model used for busses during evolutions the site's configuration risk management.

where defense-in-depth to the Medium Voltage ac safety function is challenged, such as a diesel generator outage. The 4160V ac portable generators and the cables to attach to the permanent plant. This strategy will support the 4160V ac electrical distribution system and be used to provide defense-in-depth to the station blackout generator when a safety related diesel is out of service. This will be reflected in the PRA model used for the site's configuration 3 risk management

Example Risk Evaluation Using NEI 16-08 Feasibility Assessment Element Description Summary Portable equipment necessary to employ the 2MW 4160V ac Identification of all equipment necessary for portable generators includes the generators themselves and the implementation including permanently installed cables connecting the generators to the plant. Permanently equipment installed equipment necessary for implementation includes transfer switches and supply breakers for the 4160V ac busses.

Identify important attributes of the strategy {e.g. pre deployment of equipment, plant modifications,or Generators are required to be pre-deployed and connected procurement of additional portable equipment) that based on timing requirements. Plant modifications exist and all need to be established prior to the implementation of hardware has already been procured.

the strategy.

Generator, cables, and electrical breaker performance capability Is the equipment adequate to meet the proposed has been verified to be sufficient for necessary loads. Existing strategy? overcurrent protection in the circuit was determined to be sufficient.

Identify any power supply or fuel requirements Refueling of the generator diesel fuel is required every 12hours.

The equipment is pre-deployed and connected to meet necessary time requirements. The system time window is one Can the equipment be deployed, installed, and hour. The necessary actions are proceduralized, uncomplicated operated in time to perform the function?

and crews are briefed at the start of each shift. Hard Cards are pre-staged for easy to use proceduralized compliance.

4

Example Risk Evaluation Using NEI 16-08 Are the conditions within the design capabilities Yes. Both the portable cables and installed of any support components such as permanent plant cables are capable of handling the hoses,piping,or valve connections? current and output of the portable generators.

If conditions are outside of equipment performance requirements,is there any basis Not applicable, everything is within equipment

{e.g.,margin) to support the use during these performance requirements.

conditions?

Yes. Deployment paths are located near the Do connection points and routing paths exist to connection points and routing of the temporary cables connect the equipment into the system being is "skill of the craft". Cables can be routed without supported?

interfering with other plant activities.

Identify other required system considerations None.

(e.g. valve alignments, b ack pressure).

Identify required suction sources {e.g. tank levels/capacity, water quality, and need for None.

strainers).

Permanent plant instrumentation exists in the control room to monitor the electrical output of the portable Identify required instrumentation and control to generators once they are connected to the plant.

ensure the functionality of the equipment.

Local instrumentation exists on the portable generators to monitor their operation.

IIf the portable equipment cannot fully meet the functional requirements, can it be utilized to Not applicable.

5 provide additional margin that may be beneficial?

Example Risk Evaluation Using NEI 16-08 Engineering Analysis Element Description Summary Identify specific engineering Overcurrent protection has been evaluated and documented in an documentation references and engineering work order (EWO). Justification for the Equipment Out of Service analysis methodologies (e.g., (EOOS) model changes has been evaluated and documented in the MAAP, RETRAN, GOTHIC, CENTS, engineering work order as well. EOOS model and battery depletion calculations). impact and the incorporation of the 4160V ac portable generators into the PRA model have been evaluated in the EWO.

Are the equipment f lowrates Not applicable and pressures adequate?

Identify the timing for specific The equipment is pre-deployed and connected to meet necessary time operator actions required to requirements. The system time window is one hour. The necessary actions are implement. proceduralized, uncomplicated and crews are briefed at the start of each shift.

The portable EDG is only being credited to mitigate internal events.

Identify the required mission times Therefore, a m ission time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is assumed consistent with normal PRA practices.

Are the electrical power requirements satisfied (e.g., Yes, engineering calculations have been done to ensure requirements are voltage, amps and f' requency)? satisfied, they are included in the Engineering Work Order.

Can adequate temperature limits be Not applicable met?

Is adequate volume and quality of water available? Not applicable 6

Example Risk Evaluation Using NEI 16-08 The portable generators are deployed on seismic pads.

Can expected environmental parameters They have been purchased to operate in an for the equipment functionality support external environmental temperature of 130F. No other the strategy?

environmental factors need to be considered.

Is there a refueling plan being Refueling of the generator is required as the fuel will last implemented to meet the mission time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. A procedure exists for refueling the portable the strategy? equipment 7

Example Risk Evaluation Using NEI 16-08 Staffing and Training Assessment Element Description Summary Does the execution of the strategy impact No. This strategy provides a backup source of ac power as a the ability of operators to perform their contingency for loss of normal ac power. No additional actions are dedicated duties (e.g. safe shutdown required by operators unless an event occurs which requires the use of actions,Fire Brigade response,and local/offsite communications)? the portable generator .

The connections are bolted and have torque requirements so What other work groups or departments maintenance is required to make the connections. The fire department (e.g.,engineering, maintenance,security) directed by operators can perform the actions? is needed to perform the refueling of the portable diesel generator when i t is operating.

How many personnel are necessary Two auxiliary operator are required,one to start both diesels and one to to perform the actions? rack in the transfer switch.

Does running portable equipment need to Does not need to be staffed continuously. Consumption rates need to be staffed continuously? f not,at what be verified periodically so that sufficient time is available for refueling.

periodicity do rounds, refueling,etc. need to be performed? The tank holds 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> of fuel.

Does the execution of the strategy affect the staffing of the other units on site? s No. And the strategy cannot be implemented at multiple units additional staffing required to implement because there are only two 4160V ac generators available.

8 the strategy for multiple units?

Example Risk Evaluation Using NEI 16-08 Can pre-deployment reduce staffing The diesels are being pre-deployed to meet the time requirements for requirements when the strategy is needed to their use as a backup to the station blackout (SBO) generators.

be executed?

Can supplemental personnel be utilized to augment site personnel during the Not applicable.

execution of the strategy?

No changes to the formal training program are required. Existing training on the use of the portable diesels for accident mitigation is Are there any changes to training sufficient for this application. However, shift lead briefs to each programs required to be implemented?

oncoming operating crew are necessary to maintain a heightened awareness of the short time to start the portable diesel generators if needed.

9

Example Risk Evaluation Using NEI 16-08 Addressing Unintended Consequences Element Description Summary No, sufficient overcurrent protection and breaker protection is Can the strategy create the potential to provided in the circuit to prevent the portable generator from tripping cause a reactor scram?

the plant.

Can the strategy create the potential for No, sufficient overcurrent protection and breaker protection is inadvertent actuation or failure of a system? provided in the circuit.

Does the implementation of the strategy No, because of the way the equipment is connected to the prevent the successful operation of normally plant,normal equipment is unaffected by the operation of the portable required permanently installed plant equipment.

equipment?

No, the strategy is not in the EOPs, but in an operations maintenance Does the equipment meet the scoping procedure, referred to from an alarm response procedure (ARP).

requirements of 10CFR50.65(b) (i.e., The Also,because of the overcurrent protection breakers, a failure of the Maintenance Rule)? portable equipment cannot cause failure of the safety related equipment,or cause a plant trip.

Can the implementation of the strategy This is not FLEX equipment or B.5.b equipment,so those programs impact compliance with plant programs (e.g., are not impacted. They are not located in a fire area (they are FLEX program, 8.5.b,Appendix R, and NFPA- outside) and the combustible fuel could not cause damage to any 805, barrier control)? other plant equipment.

Can the implementation of the strategy No, security barriers and security access are unaffected by the pre-impact the effectiveness of the physical deployment of the portable diesel generators .

10 security plan?

Example Risk Evaluation Using NEI 16-08 Are there digital controls on the portable There are digital controls,they are not considered as critical equipment that could impact cyber security?If digital assets.

so, how was that addressed?

No. There is no special access or egress, no special Does the implementation of the strategy impact requirement for use of the generators,or impact on staffing the site emergency plan? of e-plan personnel. No Emergency Action Levels are affected by deployment of the portable diesel generators .

11

NEI 16-06 Evaluation Process 12

Backup Information -

Example Risk Reduction Evaluation Using NEI 16-06

• Two 2MW 4160VAC portable generators deployed and connected to 4160VAC FLEX distribution box 3

2MW 4.16KV Temporary Generators 14

2MW 4.16KV Temporary Generators 15

4.16KV Bus FLEX Connection 16

NEI 16-06 Evaluation Example Criteria Evaluation 5.1.2 - Function Applicability The function met by the portable generators is restoration of a single Class 1E 4160V AC bus given a loss of power to the bus.

Supported loads are the same as those supported by a single Station Blackout Generator (SBOG) per the documented engineering evaluation.

17

NEI 16-06 Evaluation Example Criteria Evaluation 5.1.3 - Equipment Capability An evaluation was performed by Design Engineering to evaluate the electrical capability of the portable generators to ensure they could meet the PRA mission as defined by the evaluation. Initial fueling of the DGs provides approximately 9 hours1.041667e-4 days <br />0.0025 hours <br />1.488095e-5 weeks <br />3.4245e-6 months <br /> of operation, with additional fuel provided by a portable truck under control of the Fire Department. The Fire Department is continuously present at the station and is notified by a step in 40MT-9ZZ01.

18

NEI 16-06 Evaluation Example 19

NEI 16-06 Evaluation Example Criteria Evaluation 5.2.2 - Reliability, Testing and Equipment Reliability Engineering Maintenance Template (ERET) documents the engineering basis for the Palo Verde FLEX program testing and maintenance.

20

NEI 16-06 Evaluation Example 21

NEI 16-06 Evaluation Example Criteria Evaluation 5.3 - Time Availability and Margin A Human Reliability Assessment (HRA) assessment is documented in an Engineering Evaluation (EE), which demonstrates that the available time (75 mins) is adequate to support employing the portable generators, given that they are initially staged and connected to the FLEX distribution box. There is 15 min of margin based on the HRA.

22

NEI 16-06 Evaluation Example 23

NEI 16-06 Evaluation Example 24

NEI 16-06 Evaluation Example Criteria Evaluation 5.4.3 - Staffing and Human Reliability Assessment (HRA)

Communications assessment which is documented in the Engineering Evaluation (EE) demonstrates that there are available staff, and their ability to communicate is adequate to employ the portable generators. The HRA is based on operations input.

25

NEI 16-06 Evaluation Example 26

NEI 16-06 Evaluation Example Criteria Evaluation 7.1 - Initiating Events An Engineering Evaluation (EE) documents that the portable generators can be modeled as a backup to the Station Blackout Generators (SBOGs). The connection of the portable generators to the class 1E bus requires closure of a manual transfer switch and breaker. All temporary equipment associated with the use of the portable generators is outside safety related structures. Postulated fires from the temporary generators have been evaluated and found to not impact safety related equipment.

27

NEI 16-06 Evaluation Example Criteria Evaluation 7.2 - Accident Sequence Modeling An Engineering Evaluation (EE) documents that the portable generators can be modeled as backup to the Station Blackout Generators (SBOGs).

28

NEI 16-06 Evaluation Example Criteria Evaluation 7.3 - Success Criteria An Engineering Evaluation (EE) documents that the portable generators can be modeled as backup to the Station Blackout Generators (SBOGs) with the same success criteria.

29

NEI 16-06 Evaluation Example Criteria Evaluation 7.4 - System Analysis An Engineering Evaluation (EE) documents that the portable generators can be modeled as backup to the Station Blackout Generators (SBOGs). The postulated Equipment failures associated with use of the portable generators were all evaluated and found to be very small compared to the human reliability failure contribution.

30

NEI 16-06 Evaluation Example Criteria Evaluation 7.5 - Human Reliability An Engineering Evaluation (EE) documents that the Human Reliability Assessment (HRA). The Assessment HRA to start and align the portable generators was determined to have a mean value of 0.3 using the EPRI HRA calculator. As the random failure rates are dominated by the magnitude of the HRA, it was decided for modeling simplicity to group the generators, transfer switches, and human action in a single undeveloped event with a value of 0.56. The 0.5 value includes margin to account for the uncertainty associated with both the random failures and the HRA.

31

NEI 16-06 Evaluation Example Criteria Evaluation 7.6 - Data Analysis An Engineering Evaluation (EE) documents a quantitative analysis of vendor and industry reliability data pertaining to the portable generators. The failure rates selected for equipment (e.g., portable generators, switches, breakers) were taken from the NRC Reliability and Availability Data System (RADS). The failure rate of the portable generators were assumed to be consistent with station blackout (SBO) diesel generators. The equipment failure rates combined were all very small compared to the calculated human reliability analysis failure probability.

32

NEI 16-06 Evaluation Example Criteria Evaluation 7.7 - Quantification An Engineering Evaluation (EE) documents uncertainties associated with the system modeling of the portable generators via sensitivity analyses. The failure rates and their corresponding error factors were determined by data analysis and HRA. The highest error factor for basic events bounded by the undeveloped event is 4.2, which is associated with the fail-to-run failure rate. A single undeveloped event set at 5E-1 was used in the EOOS model to capture the equipment random failure rates, the HRA, and a safety factor to address uncertainties.

33

NEI 16-06 Evaluation Example 34

NEI 16-06 Evaluation Example

Conclusion:

The 2MW 4160VAC portable generators deployed and installed meet the evaluation criteria in NRC Regulatory Issue Summary 2008-15 and NEI 16-06 in order to credit in configuration risk assessments.

35