ML17329A713: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:DonaldC.Cool<NuclearPlantUnits1tk2FailureModesandEffectAnalysis(FMEA)ProtectionSet1FoxboroSpec200ReactorProtectionandControlSystemReplacementProjectReportNumber2985-HEI-14,Rev.0~Sub'ect:ThisreportshalldocumenttheresultsofaFailureModesandEffectsAnalysis(FMEA)comparisonstudyperformedfortheDonaldC.CookReactorProtectionAndControlSystemUpgrade.ThisanalysisreflectstheinstallationofFoxboroSpec200/Spec200MicroequipmentutilizedtoreplacetheoriginalFoxboroHLineequipment.
{{#Wiki_filter:DonaldC.Cool<NuclearPlantUnits1tk2FailureModesandEffectAnalysis(FMEA)Protection Set1FoxboroSpec200ReactorProtection andControlSystemReplacement ProjectReportNumber2985-HEI-14, Rev.0~Sub'ect:
ThisreportshalldocumenttheresultsofaFailureModesandEffectsAnalysis(FMEA)comparison studyperformed fortheDonaldC.CookReactorProtection AndControlSystemUpgrade.Thisanalysisreflectstheinstallation ofFoxboroSpec200/Spec200Microequipment utilizedtoreplacetheoriginalFoxboroHLineequipment.


==References:==
==References:==
1.FoxboroDocument92-FM-02F;FMEA:D.C.CookNuclear,Spec200Configuration;October30,1992(AppendixA).2.FoxboroDocumentFM-502;FailureModesandEffectsAnalysis,Spec200/Spec200MicroForTheUpgradeOfTheReactorProtectionProcessInstrumentation;November16,1992(Appendix8).3.FoxboroDocument92-SA-50F;Study:A.E.P.D.C.CookNuclearReliabilitySpec200Configuration;August31,1992.4.FoxboroDocument92-SA-66F;Study:A.E.P.D.C.CookNuclearReliability"H"LineConfiguration;November17,1992.5.IEEEStd.352-1987;IEEEGuideforGeneralPrinciplesofReliabilityAnalysisofNuclearPowerGeneratingStationProtectionSystems.6.IEEEStd.577-1976;IEEEStandardRequirementsforReliabilityAnalysisintheDesignandOperationofSafetySystemsforNuclearPowerGeneratingStations.7.IEEEStd.279-1971;IEEEStandard:CriteriaforProtectionSystemsforNuclearPowerGeneratingStations.D.C.CookUnits1Ec2r2ReactorProtectionSystemReplacem=nt*Ep<...I92121u~+Pg~ping+PDRFailureModesandEffectsAnalysis(FMEA)ProtectionSet1Spec200EquipmentReportNumher2985-HEI-14Rev.0Pa<e1of10 8.SpecificationNo.DCC-IC-500-QCN;ReactorProtectionandControlInstrumentation;Revision0.9.HurstEngineeringReportNo.2985-HEI-06;PowerQualityEvaluation;Revision0.10.HurstEngineeringReportNo.2985-HEI-12;TemperatureandHumidityEffects;Revision0.11.HurstEngineeringReportNo.2985-HEI-02;GroundingIssues;Revision0.12.HurstEngineeringReportNo.2985-HEI-09;SupplementalCabinetHeatRiseTesting;Revision0.13.HurstEngineeringReportNo.2985-HEI-01;ResponseTimeEvaluation;Revision0.14.HurstEngineeringReportNo.2985-HEI-10;LithiumBatteryAnalysis;Revision0.15.HurstEngineeringReportNo.2985-HEI-13;IsolationEvaluation;Revision0.16.HurstEngineeringReportNo.2985-HEI-14;EMI/RFIEvaluation;Revision0.17.FoxboroDocumentFM-503;FailureModesandEffectsAnalysis,HLineForTheUpgradeOfTheReactorProtectionProcessInstrumentation;November23,1992(AppendixC).Issue:TheDonaldC.CookNuclearPlant,ReactorProtectionandControlSystemisbeingupgradedtoFoxboroSpec200/Spec200Microequipment.GeneralDesignCriteriaandtheDonaldC.CookNuclearPlantlicensingbasisrequirethatthequalityandtypesofinstrumentationprovidedareadequateforsafeandorderlyoperationofallsystemsandprocessesoverthefulloperatingrangeoftheplant.Protectionsystemsmustbedesignedforhighfunctionalreliability.Redundancyandindependencemustbesufficienttoassurethatnosinglefailureorremovalfromserviceofanycomponentorchannelofsuchasystemwillresultinlossoftheprotectionfunction.Thesystemshallbedesignedtofailintoasafestateorintoastateestablishedastolerableonadefinedbasis,forallcrediblefailuremodes.IEEE279,"CriteriaForProtectionSystemsForNuclearPowerGeneratingStations"requiresthatprotectionsystemsshall,withprecisionandreliability,automaticallyinitiateappropriateprotectiveactionwheneveraconditionmonitoredbythesystemreachesapresetlevel.Componentsandmoduleswhichcomprisetheprotectionsystemshallbeofaqualitythatisconsistentwithminimummaintenancerequirementsandshallhavelowfailurerates.D.C.CookUnits18c22ReactorProtectionSystemReplacementAEPCmcaFailureModesandEffectsAnalysis(FMEA)ProtectionSetISpec200EquipmentReportNumber2985-HEI-14Rev.0Page2of10 TheFMEAisaneffectivetoolinidentifyingsignificantfailuresandtheirconsequences.Itprovidesaqualitativereliabilityanalysisusedtolocatepossiblefailuresandidentifyproperprecautionsthatwillreducethefrequencyorconsequencesofsuchfailures.Aspartofthedesignprocess,acomparisonevaluationbetweentheoriginalFoxboroHLineequipmentandthenewFoxboroSpec200equipmentisbeingundertaken.ThisevaluationwilltaketheformofalimitedFMEAwhichdocumentstheProtectionSet1design.Thisanalysisrepresentsthe"Typical"protectionsetandisintendedtobeboundingforallfourprotectionsetchannels.ThegoalofthisevaluationistodocumentthatthenewSpec200equipmentisequivalenttotheoriginalHLineinstrumentationwithregardtofailuremodes,andthattheoriginallicensingbasisasdefinedintheDonaldC.CookFSARisvalid,applicableandbounding.~Scoe:ThescopeofthisFailureModesandEffectsAnalysis(FMEA)islimitedtotheDonaldC.CookNuclearPlant,ProtectionSet1,ReactorProtectionandControlSystem.Thedetailedanalysispresentedwithinthisreporthasbeenconfiguredtoprovideasystematicapproachtoevaluatesystemdesign.ThislimitedFMEAisconfinedtotheboundsoftheSpec200equipmentandisnotintendedtobeacomprehensiveprotectionsystemanalysis.ThisFMEAisrepresentativeofallfourprotectionsetsindesignphilosophyandoverallintent.TheanalysispresentedisintendedtodocumentthatthenewSpec200systemdesignisconsistentwiththeoriginalequipmentdesignbasis.ProtectionSets2,3,and4willbereviewedtovalidatethatthisFMEAisbounding.Thiswillbedocumentedbyseparatereportatalaterdate.Discussion:TheDonaldC.CookNuclearPlantReactorProtectionandControlSystemreplacementprojectwillreplaceandupgradetheoriginalFoxboroHLineinstrumentationwithFoxboroSpec200/Spec200Microequipment.Thistaskrepresentsasignificantdesignchangeeffortandrequiresextensiveanalysistoensurethattheprotectionsystemhasbeenconfiguredtomeetregulatoryguidance,andthattheplantlicensingbasisismaintained.TheFailureModesandEffectsAnalysis(FMEA)isatoolutilizedtoidentifycrediblefailuremodesandtheirconsequences.Byutilizingasystematicapproachinevaluatingthedesign,theprotectionsystemreliabilitycanbequantified.D.C.CookUnits1Ec,2ReactorProtectionSystemReplacementAEPfmccFailureModesandEffectsAnalysis(FMEA)ProtectionSet1Spec200EquipmentReportNumber2985-HEI-14Rev.0Page3of10 DescritionofChane:Theoriginalequipment,ReactorProtectionandControlInstrumentationwillbeupgradedduetosparepartsunavailability,obsolescence,andincreasingfailurerates.SpecificationNo.DCC-IC-500-QCNwasdevelopedtoprovidethetechnical,commercialandqualityassurancerequirementsnecessarytoimplementthereplacementproject.Theupgradewillinvolvecompletereplacementoftheprotectionsystemsignalprocessingelectronics,internalpowersupplies,testpanels,andassociatedhardware,locatedin27racks/cabinets.ThenewFoxboroSpec200/Spec200Microinstrumentationwillbeinstalledintheexistingracks/cabinets.TheSpec200equipmenthasbeenconfiguredtobefunctionallyidenticaltotheoriginalsystem.Assuch,thedesignbasis,protectiveactions,bypassandtestingfunctions,andoperationareessentiallyunchangedfromthatdescribedinChapter7oftheDonaldC.CookFSAR.TheSpec200systemutilizesa"modular"designapproach.PowerSupplies,Input,Output,SignalProcessingModulesandassociatedhardwareareinstalledindedicated"nest"locations.Theappropriatenumberofnestassembliesandpowersuppliesarearrangedintherack/cabinetandinterconnectedtoproducethedesiredloopconfiguration.TheSpec200Microisamicroprocessorbasedcontrolcardwhichcanbeconfiguredtoperformawidevarietyofoperations.Loopspecific"controlblocks"aredevelopedutilizingflexiblealgorithmswhichperformthedesiredcontrolactions.Alloutputsignalsareroutedthroughqualifiedisolationdevices.A+/-15VoltDCmulti-nestpowersupplyisinstalledineachracktoprovidesystempowerrequirements.FieldinterfaceattheinputtotheSpec200systemisprovidedbyinputmoduleswhichconvertthefieldsignal,andfunctionasbufferstoprotectthesystemagainstmalfunctions,aswellasprovidesomemeasureofnoiserejection.Eachinterfacemoduleisindividuallyfusedsuchthataccidentalshortcircuit,ortheconnectionofanincorrectvoltagepotential,willnotpropagatetoothersystemcomponents.A75VoltDCpowersupplyisprovidedineachracktopowermultipletransmitterloops.Theprotectionsystemhasbeenprovidedwithredundantmulti-nestandtransmitterlooppowersupplies.Asdescribedabove,eachrack/cabinetcontainsa+/-15VoltDCand75VoltDCpowersupply.Shouldtheprimarypowersupplyfail,theredundantsourceshavebeensizedtoprovideadequatesystempowerrequirements.The118VoltACregulatedfeedwhichenergizestheprotectionsetisparalleledtoeachrack/cabinet.D.C.CookUnits1K2ReactorProtectionSystemReplacementAEPfincaFailureModesandEffectsAnalysis(FMEA)ProtectionSet1Spec200EquipmentReportNumber2985-HEI-14Rev.0Page4of10


TheFoxborosystemhasbeenevaluatedforvariousoperationalandqualificationissueswhicharenotthesubjectofthisreport.Theseare:PowerQualityEvaluation(Reference&#xb9;9)TemperatureandHumidityEffects(Reference&#xb9;10)GroundingIssues(Reference&#xb9;11)CabinetHeatRiseEffects(Reference&#xb9;12)ResponseTimeEvaluation(Reference&#xb9;13)LithiumBatteryEvaluation(Reference&#xb9;14)VoltagetoCurrentCardIsolationEvaluation(Reference&#xb9;15)EMI/RFIEvaluation(Reference&#xb9;16)SstemInterfaces:TheprimaryProtectionSetinterfaceiswiththeReactorTripLogicchannelsandtheEngineeredSafeguardsSystem.Theprotectionchannelsalsointerfacewithorprovideinputtovariouscontrolsystems,RegulatoryGuide1.97readoutdevices,plantcomputersandannunciatorsystems.TheseinterfacesareidentifiedontheapplicablefunctionaldrawingsidentifiedinTable1ofthisdocument.FailttreModesandEffectsAnalysis~~AsstatedinSectionIVofthisdocument,thescopeofthisFMEAisconfinedtotheboundsoftheProtectionSet1,Spec200equipmentandisnotintendedtobeacomprehensiveprotectionsystemanalysis.TheFMEAwhichfollowshasbeenlimitedtothemajormodulesintheSpec200configuration.Ingeneral,thetechniquesofAppendixAofANSI/IEEEStd.352-1987,"IEEEGuideforGeneralPrinciplesofReliabilityAnalysesofNuclearPowerGeneratingStationSafetySystems"havebeenutilized.TheFMEAhasbeenassembledtoprovideasystematicapproachtoevaluatingtheoveralldesignandreliabilityoftheSpec200protectionsetinstrumentation.TheapplicablereferencedrawingsareidentifiedinTablesI&2ofthisdocument.TheformatoftheFMEAisasfollows;AppendixA:FoxboroDocumentNo.92-FM-02F;FMEA:A.E.P.D.C.CookNuclearSpec200Configuration.'hisAppendixidentitiesthemajorSpec200modulesutilizedfortripfunctionsintheReactorProtectionandControlSystemreplacementprojectandtheircrediblefailuremodeswhichwillbeconsideredinthisFMEA.D.C.CookUnitsl8;2ReactorProtectionSystetnReplacementAEPfinaaFailureModesandEffectsAnalysis(FMEA)ProtectionSetISpec200EquipmentReportNumber2985-HEI-14Rev.0Pae5of10 AppendixB:FoxboroDocumentNo.FM-502;FailureModesandEffectsAnalysis,Spec200/Spec200Micro.ThisAppendixprovidesthedetailedFMEAfortheProtectionSet1instrumentation.Thisanalysisincludesalltripfunctions,analogoutputfunctions,Spec200powersupplies,andpowerdistributionmodules.AppendixC:FoxboroDocumentNo.FM-503;FailureModesandEffectsAnalysis,HLine.ThisAppendixprovidesthedetailedFMEAfortheoriginalequipmentFoxboroHLineinstrumentation.Thisanalysisincludesalltripfunctionsandanalogoutputfunctions.Concltision:TheFMEAwhichhasbeenperformedontheSpec200/Spec200Microinstrumentationadequatelydocumentsthatthesystemhasbeendesignedtoprovideahighlevelofreliability.TheSpec200instrumentationhasbeenconfiguredtoinitiateprotectiveactionswithprecisionandreliabilityoverthefullrangeofoperation.Allprotectivefunctionshavebeendesignedtofailinthesafestateorintoastatewhichhasbeendefinedanddeterminedtobetolerable.TheFMEAhasidentifiedthosecrediblefailuremodeswiththehighestprobabilityofoccurrencewithregardtoindividualmoduleeffectsandoverallloopimpacts.Reviewoftheanalysishasnotidentifiedanydifferentsignificantfailuremodesthanthoseidentifiedfortheoriginalequipment.TheSpec200systemdesignisconsistentwiththatoftheoriginalequipmentFoxboroHLine.Operation,functionality,andinterfacesasdescribedinSection7oftheDonaldC.CookFSARareunchanged.WhiletheFMEAdoesnotspecificallyaddress"MethodofDetection"forthefailuremodesidentified,thedesignhasincorporatedthedetectiontechniqueswhichexistedfortheoriginalequipmentsystem.Additionally,theSpec200systemprovidesincreasedfailuredetectioncapabilitieswithalarmsthatareinitiateduponrack/cabinetpowersupplyfailureandSpec200Microcontrolcardfailure.Insummary,thenewProtectionSet1ReactorProtectionandControlSystemutilizingFoxboroSpec200/Spec200MicroinstrunientationhasbeendesignedtomeetregulatoryrequirementsandtheDonaldC.CookNuclearPlantspecificlicensingbasis.ThesystemhasincorporatedallfacetsofprotectionsystemdesignasspecifiedinIEEE279-1971.D.C.CookUnitsI42ReactorProtectionSystemReplacementAEPfniiaFailureModesandEffectsAnalysis(FMEA)ProtectionSetlSpec200EquipmentReportNumber2985-HEI-14Rev.0Pane6ofl0 0AsimilaranalysisshallbeperformedforProtectionSets2,3and4toensurethatthisisaboundingFMEA.Theseevaluationswillbedocumentedbyseparatereportatafuturedate.~Arovals:PreparedBytlag'l~DateRevieweIf$$fZ.DateApprovedByDateD.C.CookUnits18c2ReactorProtectionSystemReplacetnentAEPlinaFailureMadesandEffectsAnalysis(FMEA)ProtectionSet1Spec200EquipmentReportNumber2985-HEI-14Rev.0Pae7of10 TableIDRAWINGLIST-FOXBOROSPFC200EUIPMENTFUNCTIONALDRAWINGNO.DESCRIPTIONFD-2101sh.IFD-2101sh.2FD-2101sh.3FD-2101sh.4FD-2101sh.5FD-2101sh.6FD-2102sh.IFD-2102sh.2FD-2102sh.3FD-2102sh.4FD-2103sh.IFD-2103sh.2FD-2103sh.3FD-2103sh.4FD-2104sh.IFD-2104sh.2FD-2104sh.3FD-2104sh.4PRESSURlZERPRESSUREPRESSURIZERLEVELREACTORCOOLANTFLOWLOOPI&2REACTORCOOLANTFLOWLOOP3&4STEAMGENERATOR2&3LEVELAUXILIARYFEEDWATERFLOWS/G//3Tave/DELTATLOOPIOVERTEMP/OVERPOWERDELTATSTATICGAINUNITWIDERANGEHOTLEGTEMPLOOP2&4STEAMFLOW/FEEDFLOWS/G//IPRESSURES/G//I&2STEAMFLOW/FEEDFLOWS/G//2LOWERCTMTPRESSUREMAINFEEDWATERSTARTUPFLOWTURBINEIMPULSEPRESSURES/GO'ISTEAMFLOW/FEEDFLOWS/GA'3PRESSURES/GP3&4STEAMFLOW/FEEDFLOWS/GA'4D.C.CookUnitsI&2ReactorProtectionSystentReplacementAEPfincaFailureModesandEffectsAnalysis(FMEA)ProtectionSetISpec200EquipmentReportNumber29SS-HEI-14Rev.0Pa"e8of10 0TableIcont.DRAWINGLISTFOXBOROSPEC200EUIPMENTDRAWINGNO.DESCRIPTIONRL-2101RL-2102RL-2103RL-2104PWR-2101PWR-2102PWR-2103PWR-2104RACKLOADING,PROTECTIONSETIRACKIRACKLOADING,PROTECTIONSETIRACK2RACKLOADING,PROTECTIONSETIRACK3RACKLOADING,PROTECTIONSETIRACK4POWERDISTRIBUTIONDRAWINGPROTECTIONSETIRACKIPOWERDISTRIBUTIONDRAWINGPROTECTIONSETIRACK2POWERDISTRIBUTIONDRAWINGPROTECTIONSETIRACK3POWERDISTRIBUTIONDRAWINGPROTECTIONSETIRACK4D.C.CookUnitsISc2ReactorProtectionSystemReplacementAEPfmaFailureModesandEffectsAnalysis(FMEA)ProtectionSetISpec200EquipmentReportNumber2985-HEI-14Rev.0Page9of10 Table2DRAWINGLIST-FOXBOROHLINEFUIPMFNTFUNCTIONALDRAWINGDESCRIPTIONCD-1Sh.ICD-1Sh.2CD-1Sh.3CD-1Sh.xCD-2Sh.I&2CD-2Sh.3CD-3Sh.ICD-3Sh.2CD-3SI1.3CD-3Sh.xCD-4Sh.1CD-4Sh.2CD-4Sh.3PRESSURIZERFLOW,LEVELANDPRESSUREPRIMARYCOOLANTFLOWSYSTEMSTEAMGENERATOR2&3LEVELS/G//3AUXILIARYFEEDWATERFLOWREACTORCOOLANTLOOP//1Tave&DeltaTREACTORCOOLANTWIDERANGEHOTLEGTEMPERATURELOOPS2&4S/G//ISTEAMFLOW,FEEDFLOW,PRESSURES/GiQSTEAMFLOW,FEEDFLOW,PRESSURECONTAINMENTPRESSURES/G//IMAINFEEDWATERSTARTUPFLOWS/G//3STEAMFLOW,FEEDFLOW,PRESSURES/G//4STEAMFLOW,FEEDFLOW,PRESSURETURBINEIMPULSEPRESSURED.C.CookUnitsI&2ReactorProtectionSystemReplacetnentAEPI'mrnaFailureModesandEffectsAnalysis(FMEA)ProtectionSetISpec200EquipmentReportNumber2985-HEI-I4Rev.0PaeIOof10}}
1.FoxboroDocument92-FM-02F; FMEA:D.C.CookNuclear,Spec200Configuration; October30,1992(Appendix A).2.FoxboroDocumentFM-502;FailureModesandEffectsAnalysis, Spec200/Spec200MicroForTheUpgradeOfTheReactorProtection ProcessInstrumentation; November16,1992(Appendix 8).3.FoxboroDocument92-SA-50F; Study:A.E.P.D.C.CookNuclearReliability Spec200Configuration; August31,1992.4.FoxboroDocument92-SA-66F; Study:A.E.P.D.C.CookNuclearReliability "H"LineConfiguration; November17,1992.5.IEEEStd.352-1987; IEEEGuideforGeneralPrinciples ofReliability AnalysisofNuclearPowerGenerating StationProtection Systems.6.IEEEStd.577-1976; IEEEStandardRequirements forReliability AnalysisintheDesignandOperation ofSafetySystemsforNuclearPowerGenerating Stations.
7.IEEEStd.279-1971; IEEEStandard:
CriteriaforProtection SystemsforNuclearPowerGenerating Stations.
D.C.CookUnits1Ec2r2ReactorProtection SystemReplacem=nt
*Ep<...I92121u~+P g~ping+PDRFailureModesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumher2985-HEI-14 Rev.0Pa<e1of10 8.Specification No.DCC-IC-500-QCN; ReactorProtection andControlInstrumentation; Revision0.9.HurstEngineering ReportNo.2985-HEI-06; PowerQualityEvaluation; Revision0.10.HurstEngineering ReportNo.2985-HEI-12; Temperature andHumidityEffects;Revision0.11.HurstEngineering ReportNo.2985-HEI-02; Grounding Issues;Revision0.12.HurstEngineering ReportNo.2985-HEI-09; Supplemental CabinetHeatRiseTesting;Revision0.13.HurstEngineering ReportNo.2985-HEI-01; ResponseTimeEvaluation; Revision0.14.HurstEngineering ReportNo.2985-HEI-10; LithiumBatteryAnalysis; Revision0.15.HurstEngineering ReportNo.2985-HEI-13; Isolation Evaluation; Revision0.16.HurstEngineering ReportNo.2985-HEI-14; EMI/RFIEvaluation; Revision0.17.FoxboroDocumentFM-503;FailureModesandEffectsAnalysis, HLineForTheUpgradeOfTheReactorProtection ProcessInstrumentation; November23,1992(Appendix C).Issue:TheDonaldC.CookNuclearPlant,ReactorProtection andControlSystemisbeingupgradedtoFoxboroSpec200/Spec200Microequipment.
GeneralDesignCriteriaandtheDonaldC.CookNuclearPlantlicensing basisrequirethatthequalityandtypesofinstrumentation providedareadequateforsafeandorderlyoperation ofallsystemsandprocesses overthefulloperating rangeoftheplant.Protection systemsmustbedesignedforhighfunctional reliability.
Redundancy andindependence mustbesufficient toassurethatnosinglefailureorremovalfromserviceofanycomponent orchannelofsuchasystemwillresultinlossoftheprotection function.
Thesystemshallbedesignedtofailintoasafestateorintoastateestablished astolerable onadefinedbasis,forallcrediblefailuremodes.IEEE279,"Criteria ForProtection SystemsForNuclearPowerGenerating Stations" requiresthatprotection systemsshall,withprecision andreliability, automatically initiateappropriate protective actionwheneveracondition monitored bythesystemreachesapresetlevel.Components andmoduleswhichcomprisetheprotection systemshallbeofaqualitythatisconsistent withminimummaintenance requirements andshallhavelowfailurerates.D.C.CookUnits18c22ReactorProtection SystemReplacement AEPCmcaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-14 Rev.0Page2of10 TheFMEAisaneffective toolinidentifying significant failuresandtheirconsequences.
Itprovidesaqualitative reliability analysisusedtolocatepossiblefailuresandidentifyproperprecautions thatwillreducethefrequency orconsequences ofsuchfailures.
Aspartofthedesignprocess,acomparison evaluation betweentheoriginalFoxboroHLineequipment andthenewFoxboroSpec200equipment isbeingundertaken.
Thisevaluation willtaketheformofalimitedFMEAwhichdocuments theProtection Set1design.Thisanalysisrepresents the"Typical" protection setandisintendedtobeboundingforallfourprotection setchannels.
Thegoalofthisevaluation istodocumentthatthenewSpec200equipment isequivalent totheoriginalHLineinstrumentation withregardtofailuremodes,andthattheoriginallicensing basisasdefinedintheDonaldC.CookFSARisvalid,applicable andbounding.
~Scoe:ThescopeofthisFailureModesandEffectsAnalysis(FMEA)islimitedtotheDonaldC.CookNuclearPlant,Protection Set1,ReactorProtection andControlSystem.Thedetailedanalysispresented withinthisreporthasbeenconfigured toprovideasystematic approachtoevaluatesystemdesign.ThislimitedFMEAisconfinedtotheboundsoftheSpec200equipment andisnotintendedtobeacomprehensive protection systemanalysis.
ThisFMEAisrepresentative ofallfourprotection setsindesignphilosophy andoverallintent.Theanalysispresented isintendedtodocumentthatthenewSpec200systemdesignisconsistent withtheoriginalequipment designbasis.Protection Sets2,3,and4willbereviewedtovalidatethatthisFMEAisbounding.
Thiswillbedocumented byseparatereportatalaterdate.Discussion:
TheDonaldC.CookNuclearPlantReactorProtection andControlSystemreplacement projectwillreplaceandupgradetheoriginalFoxboroHLineinstrumentation withFoxboroSpec200/Spec200Microequipment.
Thistaskrepresents asignificant designchangeeffortandrequiresextensive analysistoensurethattheprotection systemhasbeenconfigured tomeetregulatory
: guidance, andthattheplantlicensing basisismaintained.
TheFailureModesandEffectsAnalysis(FMEA)isatoolutilizedtoidentifycrediblefailuremodesandtheirconsequences.
Byutilizing asystematic approachinevaluating thedesign,theprotection systemreliability canbequantified.
D.C.CookUnits1Ec,2ReactorProtection SystemReplacement AEPfmccFailureModesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumber2985-HEI-14 Rev.0Page3of10 DescritionofChane:Theoriginalequipment, ReactorProtection andControlInstrumentation willbeupgradedduetosparepartsunavailability, obsolescence, andincreasing failurerates.Specification No.DCC-IC-500-QCN wasdeveloped toprovidethetechnical, commercial andqualityassurance requirements necessary toimplement thereplacement project.Theupgradewillinvolvecompletereplacement oftheprotection systemsignalprocessing electronics, internalpowersupplies, testpanels,andassociated
: hardware, locatedin27racks/cabinets.
ThenewFoxboroSpec200/Spec200Microinstrumentation willbeinstalled intheexistingracks/cabinets.
TheSpec200equipment hasbeenconfigured tobefunctionally identical totheoriginalsystem.Assuch,thedesignbasis,protective actions,bypassandtestingfunctions, andoperation areessentially unchanged fromthatdescribed inChapter7oftheDonaldC.CookFSAR.TheSpec200systemutilizesa"modular" designapproach.
PowerSupplies, Input,Output,SignalProcessing Modulesandassociated hardwareareinstalled indedicated "nest"locations.
Theappropriate numberofnestassemblies andpowersuppliesarearrangedintherack/cabinetandinterconnected toproducethedesiredloopconfiguration.
TheSpec200Microisamicroprocessor basedcontrolcardwhichcanbeconfigured toperformawidevarietyofoperations.
Loopspecific"controlblocks"aredeveloped utilizing flexiblealgorithms whichperformthedesiredcontrolactions.Alloutputsignalsareroutedthroughqualified isolation devices.A+/-15VoltDCmulti-nest powersupplyisinstalled ineachracktoprovidesystempowerrequirements.
Fieldinterface attheinputtotheSpec200systemisprovidedbyinputmoduleswhichconvertthefieldsignal,andfunctionasbufferstoprotectthesystemagainstmalfunctions, aswellasprovidesomemeasureofnoiserejection.
Eachinterface moduleisindividually fusedsuchthataccidental shortcircuit,ortheconnection ofanincorrect voltagepotential, willnotpropagate toothersystemcomponents.
A75VoltDCpowersupplyisprovidedineachracktopowermultipletransmitter loops.Theprotection systemhasbeenprovidedwithredundant multi-nest andtransmitter looppowersupplies.
Asdescribed above,eachrack/cabinetcontainsa+/-15VoltDCand75VoltDCpowersupply.Shouldtheprimarypowersupplyfail,theredundant sourceshavebeensizedtoprovideadequatesystempowerrequirements.
The118VoltACregulated feedwhichenergizes theprotection setisparalleled toeachrack/cabinet.D.C.CookUnits1K2ReactorProtection SystemReplacement AEPfincaFailureModesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumber2985-HEI-14 Rev.0Page4of10
 
TheFoxborosystemhasbeenevaluated forvariousoperational andqualification issueswhicharenotthesubjectofthisreport.Theseare:PowerQualityEvaluation (Reference
&#xb9;9)Temperature andHumidityEffects(Reference
&#xb9;10)Grounding Issues(Reference
&#xb9;11)CabinetHeatRiseEffects(Reference
&#xb9;12)ResponseTimeEvaluation (Reference
&#xb9;13)LithiumBatteryEvaluation (Reference
&#xb9;14)VoltagetoCurrentCardIsolation Evaluation (Reference
&#xb9;15)EMI/RFIEvaluation (Reference
&#xb9;16)SstemInterfaces:
TheprimaryProtection Setinterface iswiththeReactorTripLogicchannelsandtheEngineered Safeguards System.Theprotection channelsalsointerface withorprovideinputtovariouscontrolsystems,Regulatory Guide1.97readoutdevices,plantcomputers andannunciator systems.Theseinterfaces areidentified ontheapplicable functional drawingsidentified inTable1ofthisdocument.
FailttreModesandEffectsAnalysis~~AsstatedinSectionIVofthisdocument, thescopeofthisFMEAisconfinedtotheboundsoftheProtection Set1,Spec200equipment andisnotintendedtobeacomprehensive protection systemanalysis.
TheFMEAwhichfollowshasbeenlimitedtothemajormodulesintheSpec200configuration.
Ingeneral,thetechniques ofAppendixAofANSI/IEEE Std.352-1987, "IEEEGuideforGeneralPrinciples ofReliability AnalysesofNuclearPowerGenerating StationSafetySystems"havebeenutilized.
TheFMEAhasbeenassembled toprovideasystematic approachtoevaluating theoveralldesignandreliability oftheSpec200protection setinstrumentation.
Theapplicable reference drawingsareidentified inTablesI&2ofthisdocument.
TheformatoftheFMEAisasfollows;AppendixA:FoxboroDocumentNo.92-FM-02F; FMEA:A.E.P.D.C.CookNuclearSpec200Configuration.'his Appendixidentities themajorSpec200modulesutilizedfortripfunctions intheReactorProtection andControlSystemreplacement projectandtheircrediblefailuremodeswhichwillbeconsidered inthisFMEA.D.C.CookUnitsl8;2ReactorProtection SystetnReplacement AEPfinaaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-14 Rev.0Pae5of10 AppendixB:FoxboroDocumentNo.FM-502;FailureModesandEffectsAnalysis, Spec200/Spec200Micro.ThisAppendixprovidesthedetailedFMEAfortheProtection Set1instrumentation.
Thisanalysisincludesalltripfunctions, analogoutputfunctions, Spec200powersupplies, andpowerdistribution modules.AppendixC:FoxboroDocumentNo.FM-503;FailureModesandEffectsAnalysis, HLine.ThisAppendixprovidesthedetailedFMEAfortheoriginalequipment FoxboroHLineinstrumentation.
Thisanalysisincludesalltripfunctions andanalogoutputfunctions.
Concltision:
TheFMEAwhichhasbeenperformed ontheSpec200/Spec200Microinstrumentation adequately documents thatthesystemhasbeendesignedtoprovideahighlevelofreliability.
TheSpec200instrumentation hasbeenconfigured toinitiateprotective actionswithprecision andreliability overthefullrangeofoperation.
Allprotective functions havebeendesignedtofailinthesafestateorintoastatewhichhasbeendefinedanddetermined tobetolerable.
TheFMEAhasidentified thosecrediblefailuremodeswiththehighestprobability ofoccurrence withregardtoindividual moduleeffectsandoverallloopimpacts.Reviewoftheanalysishasnotidentified anydifferent significant failuremodesthanthoseidentified fortheoriginalequipment.
TheSpec200systemdesignisconsistent withthatoftheoriginalequipment FoxboroHLine.Operation, functionality, andinterfaces asdescribed inSection7oftheDonaldC.CookFSARareunchanged.
WhiletheFMEAdoesnotspecifically address"MethodofDetection" forthefailuremodesidentified, thedesignhasincorporated thedetection techniques whichexistedfortheoriginalequipment system.Additionally, theSpec200systemprovidesincreased failuredetection capabilities withalarmsthatareinitiated uponrack/cabinetpowersupplyfailureandSpec200Microcontrolcardfailure.Insummary,thenewProtection Set1ReactorProtection andControlSystemutilizing FoxboroSpec200/Spec200Microinstrunientation hasbeendesignedtomeetregulatory requirements andtheDonaldC.CookNuclearPlantspecificlicensing basis.Thesystemhasincorporated allfacetsofprotection systemdesignasspecified inIEEE279-1971.
D.C.CookUnitsI42ReactorProtection SystemReplacement AEPfniiaFailureModesandEffectsAnalysis(FMEA)Protection SetlSpec200Equipment ReportNumber2985-HEI-14 Rev.0Pane6ofl0 0Asimilaranalysisshallbeperformed forProtection Sets2,3and4toensurethatthisisaboundingFMEA.Theseevaluations willbedocumented byseparatereportatafuturedate.~Arovals:
PreparedBytlag'l~DateRevieweIf$$fZ.DateApprovedByDateD.C.CookUnits18c2ReactorProtection SystemReplacetnent AEPlinaFailureMadesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumber2985-HEI-14 Rev.0Pae7of10 TableIDRAWINGLIST-FOXBOROSPFC200EUIPMENTFUNCTIONAL DRAWINGNO.DESCRIPTION FD-2101sh.IFD-2101sh.2FD-2101sh.3FD-2101sh.4FD-2101sh.5FD-2101sh.6FD-2102sh.IFD-2102sh.2FD-2102sh.3FD-2102sh.4FD-2103sh.IFD-2103sh.2FD-2103sh.3FD-2103sh.4FD-2104sh.IFD-2104sh.2FD-2104sh.3FD-2104sh.4PRESSURlZERPRESSUREPRESSURIZER LEVELREACTORCOOLANTFLOWLOOPI&2REACTORCOOLANTFLOWLOOP3&4STEAMGENERATOR 2&3LEVELAUXILIARY FEEDWATER FLOWS/G//3Tave/DELTATLOOPIOVERTEMP/OVERPOWER DELTATSTATICGAINUNITWIDERANGEHOTLEGTEMPLOOP2&4STEAMFLOW/FEEDFLOWS/G//IPRESSURES/G//I&2STEAMFLOW/FEEDFLOWS/G//2LOWERCTMTPRESSUREMAINFEEDWATER STARTUPFLOWTURBINEIMPULSEPRESSURES/GO'ISTEAMFLOW/FEEDFLOWS/GA'3PRESSURES/GP3&4STEAMFLOW/FEEDFLOWS/GA'4D.C.CookUnitsI&2ReactorProtection SystentReplacement AEPfincaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber29SS-HEI-14 Rev.0Pa"e8of10 0TableIcont.DRAWINGLISTFOXBOROSPEC200EUIPMENTDRAWINGNO.DESCRIPTION RL-2101RL-2102RL-2103RL-2104PWR-2101PWR-2102PWR-2103PWR-2104RACKLOADING,PROTECTION SETIRACKIRACKLOADING,PROTECTION SETIRACK2RACKLOADING,PROTECTION SETIRACK3RACKLOADING,PROTECTION SETIRACK4POWERDISTRIBUTION DRAWINGPROTECTION SETIRACKIPOWERDISTRIBUTION DRAWINGPROTECTION SETIRACK2POWERDISTRIBUTION DRAWINGPROTECTION SETIRACK3POWERDISTRIBUTION DRAWINGPROTECTION SETIRACK4D.C.CookUnitsISc2ReactorProtection SystemReplacement AEPfmaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-14 Rev.0Page9of10 Table2DRAWINGLIST-FOXBOROHLINEFUIPMFNTFUNCTIONAL DRAWINGDESCRIPTION CD-1Sh.ICD-1Sh.2CD-1Sh.3CD-1Sh.xCD-2Sh.I&2CD-2Sh.3CD-3Sh.ICD-3Sh.2CD-3SI1.3CD-3Sh.xCD-4Sh.1CD-4Sh.2CD-4Sh.3PRESSURIZER FLOW,LEVELANDPRESSUREPRIMARYCOOLANTFLOWSYSTEMSTEAMGENERATOR 2&3LEVELS/G//3AUXILIARY FEEDWATER FLOWREACTORCOOLANTLOOP//1Tave&DeltaTREACTORCOOLANTWIDERANGEHOTLEGTEMPERATURE LOOPS2&4S/G//ISTEAMFLOW,FEEDFLOW,PRESSURES/GiQSTEAMFLOW,FEEDFLOW,PRESSURECONTAINMENT PRESSURES/G//IMAINFEEDWATER STARTUPFLOWS/G//3STEAMFLOW,FEEDFLOW,PRESSURES/G//4STEAMFLOW,FEEDFLOW,PRESSURETURBINEIMPULSEPRESSURED.C.CookUnitsI&2ReactorProtection SystemReplacetnent AEPI'mrna FailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-I4 Rev.0PaeIOof10}}

Revision as of 08:32, 29 June 2018

DC Cook Nuclear Plant Units 1 & 2 Failure Modes & Effect Analysis (FMEA) Protection Set 1 Foxboro Spec 200 Reactor Protection & Control Sys Replacement Project.
ML17329A713
Person / Time
Site: Cook  American Electric Power icon.png
Issue date: 12/16/1992
From:
AMERICAN ELECTRIC POWER SERVICE CORP.
To:
Shared Package
ML17329A705 List:
References
2985-HEI-14, 2985-HEI-14-R, 2985-HEI-14-R00, NUDOCS 9212180073
Download: ML17329A713 (11)


Text

DonaldC.Cool<NuclearPlantUnits1tk2FailureModesandEffectAnalysis(FMEA)Protection Set1FoxboroSpec200ReactorProtection andControlSystemReplacement ProjectReportNumber2985-HEI-14, Rev.0~Sub'ect:

ThisreportshalldocumenttheresultsofaFailureModesandEffectsAnalysis(FMEA)comparison studyperformed fortheDonaldC.CookReactorProtection AndControlSystemUpgrade.Thisanalysisreflectstheinstallation ofFoxboroSpec200/Spec200Microequipment utilizedtoreplacetheoriginalFoxboroHLineequipment.

References:

1.FoxboroDocument92-FM-02F; FMEA:D.C.CookNuclear,Spec200Configuration; October30,1992(Appendix A).2.FoxboroDocumentFM-502;FailureModesandEffectsAnalysis, Spec200/Spec200MicroForTheUpgradeOfTheReactorProtection ProcessInstrumentation; November16,1992(Appendix 8).3.FoxboroDocument92-SA-50F; Study:A.E.P.D.C.CookNuclearReliability Spec200Configuration; August31,1992.4.FoxboroDocument92-SA-66F; Study:A.E.P.D.C.CookNuclearReliability "H"LineConfiguration; November17,1992.5.IEEEStd.352-1987; IEEEGuideforGeneralPrinciples ofReliability AnalysisofNuclearPowerGenerating StationProtection Systems.6.IEEEStd.577-1976; IEEEStandardRequirements forReliability AnalysisintheDesignandOperation ofSafetySystemsforNuclearPowerGenerating Stations.

7.IEEEStd.279-1971; IEEEStandard:

CriteriaforProtection SystemsforNuclearPowerGenerating Stations.

D.C.CookUnits1Ec2r2ReactorProtection SystemReplacem=nt

  • Ep<...I92121u~+P g~ping+PDRFailureModesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumher2985-HEI-14 Rev.0Pa<e1of10 8.Specification No.DCC-IC-500-QCN; ReactorProtection andControlInstrumentation; Revision0.9.HurstEngineering ReportNo.2985-HEI-06; PowerQualityEvaluation; Revision0.10.HurstEngineering ReportNo.2985-HEI-12; Temperature andHumidityEffects;Revision0.11.HurstEngineering ReportNo.2985-HEI-02; Grounding Issues;Revision0.12.HurstEngineering ReportNo.2985-HEI-09; Supplemental CabinetHeatRiseTesting;Revision0.13.HurstEngineering ReportNo.2985-HEI-01; ResponseTimeEvaluation; Revision0.14.HurstEngineering ReportNo.2985-HEI-10; LithiumBatteryAnalysis; Revision0.15.HurstEngineering ReportNo.2985-HEI-13; Isolation Evaluation; Revision0.16.HurstEngineering ReportNo.2985-HEI-14; EMI/RFIEvaluation; Revision0.17.FoxboroDocumentFM-503;FailureModesandEffectsAnalysis, HLineForTheUpgradeOfTheReactorProtection ProcessInstrumentation; November23,1992(Appendix C).Issue:TheDonaldC.CookNuclearPlant,ReactorProtection andControlSystemisbeingupgradedtoFoxboroSpec200/Spec200Microequipment.

GeneralDesignCriteriaandtheDonaldC.CookNuclearPlantlicensing basisrequirethatthequalityandtypesofinstrumentation providedareadequateforsafeandorderlyoperation ofallsystemsandprocesses overthefulloperating rangeoftheplant.Protection systemsmustbedesignedforhighfunctional reliability.

Redundancy andindependence mustbesufficient toassurethatnosinglefailureorremovalfromserviceofanycomponent orchannelofsuchasystemwillresultinlossoftheprotection function.

Thesystemshallbedesignedtofailintoasafestateorintoastateestablished astolerable onadefinedbasis,forallcrediblefailuremodes.IEEE279,"Criteria ForProtection SystemsForNuclearPowerGenerating Stations" requiresthatprotection systemsshall,withprecision andreliability, automatically initiateappropriate protective actionwheneveracondition monitored bythesystemreachesapresetlevel.Components andmoduleswhichcomprisetheprotection systemshallbeofaqualitythatisconsistent withminimummaintenance requirements andshallhavelowfailurerates.D.C.CookUnits18c22ReactorProtection SystemReplacement AEPCmcaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-14 Rev.0Page2of10 TheFMEAisaneffective toolinidentifying significant failuresandtheirconsequences.

Itprovidesaqualitative reliability analysisusedtolocatepossiblefailuresandidentifyproperprecautions thatwillreducethefrequency orconsequences ofsuchfailures.

Aspartofthedesignprocess,acomparison evaluation betweentheoriginalFoxboroHLineequipment andthenewFoxboroSpec200equipment isbeingundertaken.

Thisevaluation willtaketheformofalimitedFMEAwhichdocuments theProtection Set1design.Thisanalysisrepresents the"Typical" protection setandisintendedtobeboundingforallfourprotection setchannels.

Thegoalofthisevaluation istodocumentthatthenewSpec200equipment isequivalent totheoriginalHLineinstrumentation withregardtofailuremodes,andthattheoriginallicensing basisasdefinedintheDonaldC.CookFSARisvalid,applicable andbounding.

~Scoe:ThescopeofthisFailureModesandEffectsAnalysis(FMEA)islimitedtotheDonaldC.CookNuclearPlant,Protection Set1,ReactorProtection andControlSystem.Thedetailedanalysispresented withinthisreporthasbeenconfigured toprovideasystematic approachtoevaluatesystemdesign.ThislimitedFMEAisconfinedtotheboundsoftheSpec200equipment andisnotintendedtobeacomprehensive protection systemanalysis.

ThisFMEAisrepresentative ofallfourprotection setsindesignphilosophy andoverallintent.Theanalysispresented isintendedtodocumentthatthenewSpec200systemdesignisconsistent withtheoriginalequipment designbasis.Protection Sets2,3,and4willbereviewedtovalidatethatthisFMEAisbounding.

Thiswillbedocumented byseparatereportatalaterdate.Discussion:

TheDonaldC.CookNuclearPlantReactorProtection andControlSystemreplacement projectwillreplaceandupgradetheoriginalFoxboroHLineinstrumentation withFoxboroSpec200/Spec200Microequipment.

Thistaskrepresents asignificant designchangeeffortandrequiresextensive analysistoensurethattheprotection systemhasbeenconfigured tomeetregulatory

guidance, andthattheplantlicensing basisismaintained.

TheFailureModesandEffectsAnalysis(FMEA)isatoolutilizedtoidentifycrediblefailuremodesandtheirconsequences.

Byutilizing asystematic approachinevaluating thedesign,theprotection systemreliability canbequantified.

D.C.CookUnits1Ec,2ReactorProtection SystemReplacement AEPfmccFailureModesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumber2985-HEI-14 Rev.0Page3of10 DescritionofChane:Theoriginalequipment, ReactorProtection andControlInstrumentation willbeupgradedduetosparepartsunavailability, obsolescence, andincreasing failurerates.Specification No.DCC-IC-500-QCN wasdeveloped toprovidethetechnical, commercial andqualityassurance requirements necessary toimplement thereplacement project.Theupgradewillinvolvecompletereplacement oftheprotection systemsignalprocessing electronics, internalpowersupplies, testpanels,andassociated

hardware, locatedin27racks/cabinets.

ThenewFoxboroSpec200/Spec200Microinstrumentation willbeinstalled intheexistingracks/cabinets.

TheSpec200equipment hasbeenconfigured tobefunctionally identical totheoriginalsystem.Assuch,thedesignbasis,protective actions,bypassandtestingfunctions, andoperation areessentially unchanged fromthatdescribed inChapter7oftheDonaldC.CookFSAR.TheSpec200systemutilizesa"modular" designapproach.

PowerSupplies, Input,Output,SignalProcessing Modulesandassociated hardwareareinstalled indedicated "nest"locations.

Theappropriate numberofnestassemblies andpowersuppliesarearrangedintherack/cabinetandinterconnected toproducethedesiredloopconfiguration.

TheSpec200Microisamicroprocessor basedcontrolcardwhichcanbeconfigured toperformawidevarietyofoperations.

Loopspecific"controlblocks"aredeveloped utilizing flexiblealgorithms whichperformthedesiredcontrolactions.Alloutputsignalsareroutedthroughqualified isolation devices.A+/-15VoltDCmulti-nest powersupplyisinstalled ineachracktoprovidesystempowerrequirements.

Fieldinterface attheinputtotheSpec200systemisprovidedbyinputmoduleswhichconvertthefieldsignal,andfunctionasbufferstoprotectthesystemagainstmalfunctions, aswellasprovidesomemeasureofnoiserejection.

Eachinterface moduleisindividually fusedsuchthataccidental shortcircuit,ortheconnection ofanincorrect voltagepotential, willnotpropagate toothersystemcomponents.

A75VoltDCpowersupplyisprovidedineachracktopowermultipletransmitter loops.Theprotection systemhasbeenprovidedwithredundant multi-nest andtransmitter looppowersupplies.

Asdescribed above,eachrack/cabinetcontainsa+/-15VoltDCand75VoltDCpowersupply.Shouldtheprimarypowersupplyfail,theredundant sourceshavebeensizedtoprovideadequatesystempowerrequirements.

The118VoltACregulated feedwhichenergizes theprotection setisparalleled toeachrack/cabinet.D.C.CookUnits1K2ReactorProtection SystemReplacement AEPfincaFailureModesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumber2985-HEI-14 Rev.0Page4of10

TheFoxborosystemhasbeenevaluated forvariousoperational andqualification issueswhicharenotthesubjectofthisreport.Theseare:PowerQualityEvaluation (Reference

¹9)Temperature andHumidityEffects(Reference

¹10)Grounding Issues(Reference

¹11)CabinetHeatRiseEffects(Reference

¹12)ResponseTimeEvaluation (Reference

¹13)LithiumBatteryEvaluation (Reference

¹14)VoltagetoCurrentCardIsolation Evaluation (Reference

¹15)EMI/RFIEvaluation (Reference

¹16)SstemInterfaces:

TheprimaryProtection Setinterface iswiththeReactorTripLogicchannelsandtheEngineered Safeguards System.Theprotection channelsalsointerface withorprovideinputtovariouscontrolsystems,Regulatory Guide1.97readoutdevices,plantcomputers andannunciator systems.Theseinterfaces areidentified ontheapplicable functional drawingsidentified inTable1ofthisdocument.

FailttreModesandEffectsAnalysis~~AsstatedinSectionIVofthisdocument, thescopeofthisFMEAisconfinedtotheboundsoftheProtection Set1,Spec200equipment andisnotintendedtobeacomprehensive protection systemanalysis.

TheFMEAwhichfollowshasbeenlimitedtothemajormodulesintheSpec200configuration.

Ingeneral,thetechniques ofAppendixAofANSI/IEEE Std.352-1987, "IEEEGuideforGeneralPrinciples ofReliability AnalysesofNuclearPowerGenerating StationSafetySystems"havebeenutilized.

TheFMEAhasbeenassembled toprovideasystematic approachtoevaluating theoveralldesignandreliability oftheSpec200protection setinstrumentation.

Theapplicable reference drawingsareidentified inTablesI&2ofthisdocument.

TheformatoftheFMEAisasfollows;AppendixA:FoxboroDocumentNo.92-FM-02F; FMEA:A.E.P.D.C.CookNuclearSpec200Configuration.'his Appendixidentities themajorSpec200modulesutilizedfortripfunctions intheReactorProtection andControlSystemreplacement projectandtheircrediblefailuremodeswhichwillbeconsidered inthisFMEA.D.C.CookUnitsl8;2ReactorProtection SystetnReplacement AEPfinaaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-14 Rev.0Pae5of10 AppendixB:FoxboroDocumentNo.FM-502;FailureModesandEffectsAnalysis, Spec200/Spec200Micro.ThisAppendixprovidesthedetailedFMEAfortheProtection Set1instrumentation.

Thisanalysisincludesalltripfunctions, analogoutputfunctions, Spec200powersupplies, andpowerdistribution modules.AppendixC:FoxboroDocumentNo.FM-503;FailureModesandEffectsAnalysis, HLine.ThisAppendixprovidesthedetailedFMEAfortheoriginalequipment FoxboroHLineinstrumentation.

Thisanalysisincludesalltripfunctions andanalogoutputfunctions.

Concltision:

TheFMEAwhichhasbeenperformed ontheSpec200/Spec200Microinstrumentation adequately documents thatthesystemhasbeendesignedtoprovideahighlevelofreliability.

TheSpec200instrumentation hasbeenconfigured toinitiateprotective actionswithprecision andreliability overthefullrangeofoperation.

Allprotective functions havebeendesignedtofailinthesafestateorintoastatewhichhasbeendefinedanddetermined tobetolerable.

TheFMEAhasidentified thosecrediblefailuremodeswiththehighestprobability ofoccurrence withregardtoindividual moduleeffectsandoverallloopimpacts.Reviewoftheanalysishasnotidentified anydifferent significant failuremodesthanthoseidentified fortheoriginalequipment.

TheSpec200systemdesignisconsistent withthatoftheoriginalequipment FoxboroHLine.Operation, functionality, andinterfaces asdescribed inSection7oftheDonaldC.CookFSARareunchanged.

WhiletheFMEAdoesnotspecifically address"MethodofDetection" forthefailuremodesidentified, thedesignhasincorporated thedetection techniques whichexistedfortheoriginalequipment system.Additionally, theSpec200systemprovidesincreased failuredetection capabilities withalarmsthatareinitiated uponrack/cabinetpowersupplyfailureandSpec200Microcontrolcardfailure.Insummary,thenewProtection Set1ReactorProtection andControlSystemutilizing FoxboroSpec200/Spec200Microinstrunientation hasbeendesignedtomeetregulatory requirements andtheDonaldC.CookNuclearPlantspecificlicensing basis.Thesystemhasincorporated allfacetsofprotection systemdesignasspecified inIEEE279-1971.

D.C.CookUnitsI42ReactorProtection SystemReplacement AEPfniiaFailureModesandEffectsAnalysis(FMEA)Protection SetlSpec200Equipment ReportNumber2985-HEI-14 Rev.0Pane6ofl0 0Asimilaranalysisshallbeperformed forProtection Sets2,3and4toensurethatthisisaboundingFMEA.Theseevaluations willbedocumented byseparatereportatafuturedate.~Arovals:

PreparedBytlag'l~DateRevieweIf$$fZ.DateApprovedByDateD.C.CookUnits18c2ReactorProtection SystemReplacetnent AEPlinaFailureMadesandEffectsAnalysis(FMEA)Protection Set1Spec200Equipment ReportNumber2985-HEI-14 Rev.0Pae7of10 TableIDRAWINGLIST-FOXBOROSPFC200EUIPMENTFUNCTIONAL DRAWINGNO.DESCRIPTION FD-2101sh.IFD-2101sh.2FD-2101sh.3FD-2101sh.4FD-2101sh.5FD-2101sh.6FD-2102sh.IFD-2102sh.2FD-2102sh.3FD-2102sh.4FD-2103sh.IFD-2103sh.2FD-2103sh.3FD-2103sh.4FD-2104sh.IFD-2104sh.2FD-2104sh.3FD-2104sh.4PRESSURlZERPRESSUREPRESSURIZER LEVELREACTORCOOLANTFLOWLOOPI&2REACTORCOOLANTFLOWLOOP3&4STEAMGENERATOR 2&3LEVELAUXILIARY FEEDWATER FLOWS/G//3Tave/DELTATLOOPIOVERTEMP/OVERPOWER DELTATSTATICGAINUNITWIDERANGEHOTLEGTEMPLOOP2&4STEAMFLOW/FEEDFLOWS/G//IPRESSURES/G//I&2STEAMFLOW/FEEDFLOWS/G//2LOWERCTMTPRESSUREMAINFEEDWATER STARTUPFLOWTURBINEIMPULSEPRESSURES/GO'ISTEAMFLOW/FEEDFLOWS/GA'3PRESSURES/GP3&4STEAMFLOW/FEEDFLOWS/GA'4D.C.CookUnitsI&2ReactorProtection SystentReplacement AEPfincaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber29SS-HEI-14 Rev.0Pa"e8of10 0TableIcont.DRAWINGLISTFOXBOROSPEC200EUIPMENTDRAWINGNO.DESCRIPTION RL-2101RL-2102RL-2103RL-2104PWR-2101PWR-2102PWR-2103PWR-2104RACKLOADING,PROTECTION SETIRACKIRACKLOADING,PROTECTION SETIRACK2RACKLOADING,PROTECTION SETIRACK3RACKLOADING,PROTECTION SETIRACK4POWERDISTRIBUTION DRAWINGPROTECTION SETIRACKIPOWERDISTRIBUTION DRAWINGPROTECTION SETIRACK2POWERDISTRIBUTION DRAWINGPROTECTION SETIRACK3POWERDISTRIBUTION DRAWINGPROTECTION SETIRACK4D.C.CookUnitsISc2ReactorProtection SystemReplacement AEPfmaFailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-14 Rev.0Page9of10 Table2DRAWINGLIST-FOXBOROHLINEFUIPMFNTFUNCTIONAL DRAWINGDESCRIPTION CD-1Sh.ICD-1Sh.2CD-1Sh.3CD-1Sh.xCD-2Sh.I&2CD-2Sh.3CD-3Sh.ICD-3Sh.2CD-3SI1.3CD-3Sh.xCD-4Sh.1CD-4Sh.2CD-4Sh.3PRESSURIZER FLOW,LEVELANDPRESSUREPRIMARYCOOLANTFLOWSYSTEMSTEAMGENERATOR 2&3LEVELS/G//3AUXILIARY FEEDWATER FLOWREACTORCOOLANTLOOP//1Tave&DeltaTREACTORCOOLANTWIDERANGEHOTLEGTEMPERATURE LOOPS2&4S/G//ISTEAMFLOW,FEEDFLOW,PRESSURES/GiQSTEAMFLOW,FEEDFLOW,PRESSURECONTAINMENT PRESSURES/G//IMAINFEEDWATER STARTUPFLOWS/G//3STEAMFLOW,FEEDFLOW,PRESSURES/G//4STEAMFLOW,FEEDFLOW,PRESSURETURBINEIMPULSEPRESSURED.C.CookUnitsI&2ReactorProtection SystemReplacetnent AEPI'mrna FailureModesandEffectsAnalysis(FMEA)Protection SetISpec200Equipment ReportNumber2985-HEI-I4 Rev.0PaeIOof10