ML18011A665

Response to Request for Additional Information License Amendment Request to Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times.

ML18011A665
Person / Time
Site:	Calvert Cliffs
Issue date:	01/11/2018
From:	Jim Barstow Exelon Generation Co
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
Download: ML18011A665 (78)

Text

200 Exelon Way Kennett Square, PA 19348 www.exeloncorp.com 10 CFR 50.90 January 11, 2018 U.S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555-0001 Calvert Cliffs Nuclear Power Plant, Units 1 and 2 Renewed Facility Operating License Nos. DPR-53 and DPR-69 NRC Docket Nos. 50-317 and 50-318

Subject:

Response to Request for Additional Information License Amendment Request to Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b."

References:

1. Letter from David Helker (Exelon Generation Company, LLC) to U.S.

Nuclear Regulatory Commission, "License Amendment Request to Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b," dated February 25, 2016 (ADAMS Accession No. ML16060A223).

2. Letter from James Barstow (Exelon Generation Company, LLC) to U.S. Nuclear Regulatory Commission, "Supplement - License Amendment Request to Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b," dated April 3, 2017 (ADAMS Accession No. ML17094A591).

3. Letter from Michael Marshall, U.S. Nuclear Regulatory Commission, to Bryan Hanson, Exelon Generation Company, LLC, "RESPONSE REQUESTED: [Final] RAIs on CCNPP Risk-Informed Completion Time LAR (MF7415 AND MF7416; L-2016-LLA-0001)," dated November 13, 2017 (ADAMS Accession No. ML17304A941).

Response to Request for Additional Information License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 January 11, 2018 Page 2 By letter dated February 25, 2016 (ADAMS Accession No. ML16060A223) (Reference 1),

as supplemented by letter dated April 3, 2017 (ADAMS Accession No. ML17094A591)

(Reference 2), Exelon Generation Company, LLC (Exelon) submitted a License Amendment Request (LAR) proposing to modify the Calvert Cliffs Nuclear Power Plant (CCNPP), Units 1 and 2 Technical Specification (TS) requirements to permit the use of risk-informed completion times (RICTs) in accordance with Technical Specification Task Force (TSTF) Traveler - 505, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b.

The NRC staff reviewed the information provided that supports the proposed amendment and identified the need for additional information in order to complete their evaluation of the amendment request (Reference 3). The NRC letter provided 60 days for the response to request for additional information (RAI). to this letter provides a restatement of the RAI questions followed by our responses. Attachment 2 provides a revised set of TS markups in response to the RAI questions which supersedes the previous set of TS markups provided in Exelon's supplement letter dated April 3, 2017 (Reference 2). Enclosure 1 provides a list of revised Required Actions to corresponding PRA functions specific to the electrical TS included in the RICT Program. Enclosure 2 provides supplemental information for the response to RAI 5a.

Exelon has reviewed the information supporting a finding of no significant hazards consideration, and the environmental consideration, that were previously provided to the NRC in Attachment 1 of the Reference 1 letter. Exelon has concluded that the information provided in this response does not affect the bases for concluding that the proposed license amendment does not involve a significant hazards consideration under the standards set forth in 10 CFR 50.92. In addition, Exelon has concluded that the information in this response does not affect the bases for concluding that neither an environmental impact statement nor an environmental assessment needs to be prepared in connection with the proposed amendment.

There are no regulatory commitments in this response.

In accordance with 10 CFR 50.91, "Notice for public comment; State consultation,"

paragraph (b), Exelon is notifying the State of Maryland of this application for license amendment by transmitting a copy of this letter and its attachments to the designated State Official.

Response to Request for Additional Information License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 January 11, 2018 Page 3 If you have any questions or require additional information, please contact Glenn Stewart at 610-765-5529.

I declare under penalty of perjury that the foregoing is true and correct. Executed on the 11th day of January 2018.

Respectfully, JamQB= ~

Director - Licensing and Regulatory Affairs Exelon Generation Company, LLC Attachments:

1. Response to Request for Additional Information Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b."

2. Proposed Technical Specifications Changes (Markups)

Enclosures:

1. List of Revised Required Actions to Corresponding PRA Functions

2. Supplemental Information for Response to Question Sa cc: USNRC Region I, Regional Administrator USNRC Project Manager, CCNPP USNRC Senior Resident Inspector, CCNPP S. T. Gray, State of Maryland

ATTACHMENT 1 License Amendment Request Calvert Cliffs Nuclear Power Plant, Units 1 and 2 Docket Nos. 50-317 and 50-318 Response to Request for Additional Information Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b."

Response to Request for Additional Information Attachment 1 License Amendment Request Page 1 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 By letter dated February 25, 2016 (ADAMS Accession No. ML16060A223) (Reference 1), as supplemented by letter dated April 3, 2017 (ADAMS Accession No. ML17094A591) (Reference 2), Exelon Generation Company, LLC (Exelon) submitted a License Amendment Request (LAR) proposing to modify the Calvert Cliffs Nuclear Power Plant (CCNPP), Units 1 and 2 Technical Specification (TS) requirements to permit the use of risk-informed completion times in accordance with Technical Specification Task Force (TSTF) Traveler - 505, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b.

The NRC staff reviewed the information provided that supports the proposed amendment and identified the need for additional information in order to complete their evaluation of the amendment request (Reference 3). Below is a restatement of the questions followed by our responses.

RAIs (1) Fact and Observation 4-21 related to supporting requirement [SR] LE-GS was written because the peer review team could not find documentation on the limitations of the large early release frequency (LERF) analysis that could impact different applications.

Identify the specific limitations in the LERF analysis for this application.

Response

No specific limitations in the LERF analysis have been identified.

In response to F&O 4-21, the LERF results have been reviewed and modeling improvements made to remove LERF conservatisms. Sensitivity analyses have been performed on potential conservatisms and significant uncertainty cases. The dominant LERF cutsets were reviewed to ensure that remaining conservatisms did not skew results.

The PRA Uncertainty Assessment Notebook was updated to document the review and any limitations. The updated analysis has been reviewed for specific limitations of the LERF analysis that could impact the TSTF-505 application, and no specific limitations in the LERF analysis have been identified.

(2) The LAR references a tornado methodology reviewed by the NRC staff as described in a letter from the NRC dated May 1, 1995 (ADAMS Accession No. ML17304A020). LAR Enclosure 4, Section 4, explains that bounding core damage frequency (CDF) values for tornado-generated missile events of less than SE-06/year and bounding LERF values of less than SE-07/year were calculated for Calvert Cliffs, Units 1 and 2. The most limiting CDF and LERF increases associated with structures, systems, and components (SSCs) unavailability are applied to the risk-informed completion time (RICT) evaluations, except for five TS limiting conditions for operation (LCOs) conditions. In the revised Enclosure 4 submitted in the supplement dated April 3, 2017, the licensee states in Section 4 that for the five conditions:

... additional analyses or restrictions will be required during RICT implementation, in the unlikely event a RICT evaluation is performed for any of those LCOs. For example, entering an extended completion time may be precluded during time periods with severe weather forecasts, or a bounding penalty factor may be applied.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 2 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

a. The letter dated May 1, 1995, referenced a methodology for "evaluating the need for tornado-generated missile barriers." It appears that this referenced approach only considered exposed emergency diesel generator (EOG) components and it does not consider the scope of SSCs within the RICT program.

Estimating extended completion times is a different application than evaluating the need for barriers. Therefore, justify that the proposed approach for estimating the tornado risk in the RICT program is bounding and accounts for various uncertainties such as plant configuration, variations in missile distribution around the site, seasonal changes in tornado frequencies, etc. Alternatively, provide a bounding or conservative estimate using other qualitative or quantitative approaches to quantify or justify screening the risk associated with tornadoes.

Response

A penalty factor of 5E-6/year and 5E-7/year for CDF and LERF respectively, which reflects several conservatisms as described below, is used in screening the risk associated with tornadoes. This is considered to represent a bounding mean estimate for purposes of RICT calculations.

Since the approval of the methodology in the 1995 referenced letter, the methodology has been applied to other SSCs at CCNPP, including several of those considered in the RICT program. The current licensing basis, as reflected in the UFSAR, is based on a similar tornado missile model, but uses the site-specific PRA to estimate the risk associated with exposed SSCs with greater level of detail than the original analysis in 1995. Table 5A-5 of the UFSAR shows that the CDF due to SSCs exposed to tornado missiles is less than 5E-7/year.

The PRA model used to support Table 5A-5 of the UFSAR includes the potential for all exposed SSCs to be failed by tornado missiles, as well as random failures and maintenance alignments. The PRA integrates the effect of tornado missile failures to estimate CDF and LERF. Since specific configurations can be evaluated in the PRA, it is reasonable to conclude that the current model is adequate for estimating the tornado missile risk while SSCs are unavailable.

The PRA model used to support Table 5A-5 of the UFSAR is not used to directly calculate the risk of each specific configuration that could be potentially encountered in the RICT program. Rather, it is used to determine a conservative increase in tornado risk due to SSCs being unavailable. The results are used to provide a penalty factor (an increase in CDF) that applies to all RICT calculations, even when there is only a negligible, or no, increase in tornado risk as a result of the configuration. The PRA model used to develop the penalty factor is the same as the licensing basis model, with the exception that an increased tornado frequency is used. A conservative tornado frequency is used for the penalty factor determination, more than twice the frequency used for the UFSAR calculations, as noted below.

Additional factors, such as missile distribution around the site, are accounted for in the conservative analysis of tornado missile-induced failure probabilities. The methodology

Response to Request for Additional Information Attachment 1 License Amendment Request Page 3 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 does not have the granularity to distinguish the impact of specific missile distributions throughout the site and their impact on target hit and damage probabilities. However, target damage probability and frequency are relatively conservative as compared to similar targets at other sites, as determined by TORMIS simulations; further details are provided in the table below in response to part b. of this question. There is no intent to account for seasonal variations in tornado frequency. As a point of reference, neither RG 1.200 nor the current PRA standard (ASME/ANS RA-Sb-2013) provide any requirements for seasonal based wind hazard analyses (WHA).

The tornado hazard frequency used in this application includes the following conservatisms.

• The primary conservatism is that the tornado frequency is calculated for tornadoes of any speed greater than or equal to 65 mph. At wind speeds below approximately 100 mph, it is unlikely that tornado missiles of any consequence to nuclear power plant SSCs are created. However, no distinction in wind speed is made in the calculation of tornado missile risk; all tornado wind speeds are considered in the frequency of SSCs being damaged by tornado missiles.

• Three sets of tornado frequencies are provided in NUREG/CR-4461, Rev. 2 (Reference 4) for the region around CCNPP (so-called 1°, 2°, and 4° boxes). The highest mean frequency for CCNPP is for the 2° box, in Appendix A. This is the value used for the tornado frequency for the bounding calculation.

As a sensitivity, the 95th percentile values provided in NUREG/CR-4461 for the 1°, 2°,

and 4° boxes surrounding CCNPP were also examined. The 95th percentile values from the 2° box are the highest. If the 2° box 95th percentile tornado frequencies were used, the calculated increase in tornado CDF would be 1.4 times higher than the increase using mean values. Thus, the increase in tornado CDF would go from 3.0E-6/year to 4.2E-6/year for Unit 1 and from 4.3E-6/year to 6.0E-6/year for Unit 2.

Therefore, it is concluded that the penalty factor of 5E-6/year, which reflects several conservatisms as described above, can be considered to represent a bounding mean estimate for purposes of RICT calculations.

b. The LAR states that certain unprotected SSCs are assumed to fail during a tornado event with a probability of 1.0, and other unprotected SSCs are assumed to fail based on a calculated missile strike probability. It also appears that there is another group of SSCs (e.g., main steam safety valves and atmospheric dump valves vent stacks) that are assumed to be hit but not failed.

Explain how the generic GDF increase estimates of 3.0E-6/year for Unit 1 and 4.3E-6/year for Unit 2 are calculated by discussing the adjustment performed in the probabilistic risk assessment (PRA) model to estimate the risk of tornado events and the basis for assigning failure rates to different SSCs. Justify why the estimated generic GDF increase is considered bounding for all possible plant configurations expected during the application of a RICT. Alternatively, provide a bounding or conservative estimate of the tornado risk using other quantitative or qualitative approaches to quantify or justify screening the risk associated with tornadoes.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 4 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

Response

As stated in the RAI, failure probabilities for exposed SSCs are binned into three categories in the PRA:

• Assumed to fail during a tornado event with a probability of 1.0. Examples include the 0C diesel generator (DG) and the switchgear heating, ventilation and air conditioning (HVAC) system.

• Failure based on missile strike probability. This includes most targets, such as EDG exhaust stacks, turbine driven auxiliary feedwater (TD AFW) exhaust pipes, service river water (SRW) expansion tank, etc.

• Failure based on missile strike probability, accounting for an estimated failure probability given a tornado missile strike. This is only applied to the array of 16 main steam safety valves (MSSVs) and 2 atmospheric dump valves (ADVs) on the Auxiliary Building roof. A tornado missile strike to any part of the array of 16 MSSV and 2 ADV vent stacks is assumed to have a 1 in 10 chance of crimping enough stacks to fail the steam generator decay heat removal function. This is conservative, considering that the number of valves is much greater than the number required for decay heat removal, the spacing of the exhaust pipes, their size, and the fact that they are elevated, reducing the likelihood that large energetic missiles would strike the targets.

The SSC missile-induced failure frequencies used for the tornado missile penalty factor are provided in the table below. For comparison purposes, failure frequencies for similar components at two other plants with TORMIS analyses, are provided, based on TORMIS failure probabilities from Appendix A of NEI 17-02, Rev. 1 (Reference 5). The comparison values are taken from Tables A-3, A-6, and A-7 of NEI 17-02, and were multiplied by the tornado frequency for CCNPP to provide a meaningful comparison.

As seen from this table, comparable SSCs at other sites have lower failure frequencies (based on TORMIS simulation results), than are used in the CCNPP analysis. This provides indication that the failure frequencies used in the CCNPP tornado missile analysis are conservative.

Damage Area Frequency Target (sq. ft.) (/year)

Calvert Cliffs Targets Condensate Storage Tank (CST) (11 or 21) 3000 6.8E-06 Fuel Oil Storage Tank (FOST) 11 2900 6.5E-06 Refueling Water Storage Tank (RWST) 6200 1.4E-05 Emergency Diesel Generator (EDG) (1B, 2A, or 2B) 530 2.7E-06 Turbine Driven Auxiliary Feedwater (TD AFW) Exhaust Pipe 123 6.5E-07 2 Atmospheric Dump Valve (ADV) Exhaust Pipes 58 3.0E-07 16 Main Stem Safety Valves (MSSV) + 2 ADV Exh Pipes 430 2.2E-07 1 Intake Structure Hatches 485 2.5E-06

Response to Request for Additional Information Attachment 1 License Amendment Request Page 5 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 Damage Area Frequency Target (sq. ft.) (/year)

Service River Water (SRW) Tank 698 3.5E-06 NEI 17-02 TORMIS Targets Plant X CST 3200 1.2E-06 Plant Y RWST 3800 2.2E-07 Plant Y EDG A 150 1.4E-08 Plant X TD AFW Exhaust Pipe 315 5.0E-07 Plant Y SG PORV and Exhaust Pipe 65 1.2E-07 Plant X Pump House Roof 750 8.7E-09 Plant X Service Water Piping 470 1.7E-09 Notes:

1 - This damage frequency includes a factor of 0.1, to account for the very low likelihood that a missile strike will crimp enough of the exhaust pipes to prevent adequate SG heat removal. Without this factor, the damage frequency would be 2.2E-6/year.

For these reasons, and those stated in the response to part a. of this RAI, CDF and LERF penalties of 5E-6/year and 5E-7/year, respectively, due to tornado missiles, are considered conservative. To place the CDF penalty in perspective, consider the following:

1. The mean frequency of a tornado striking CCNPP with wind speeds greater than 100 mph is approximately 6E-5/year, based on the data provided in Table 6-1 of NUREG/CR-4461 Rev. 2 (Reference 4). 100 mph is chosen as the wind speed at which tornado missiles could be generated with the possibility of damaging components such as EDG exhaust stacks, AFW steam exhaust stacks, MSSV exhaust stacks, and tanks. In fact, this is a low wind speed estimate for failures of many such SSCs, since most targets are elevated and missiles that could damage those targets (e.g., utility poles) are unlikely to be elevated or travel at a sufficient speed to damage such equipment.

2. The most damaging tornadoes (EF4 and EF5) are relatively rare in the vicinity of Calvert Cliffs. The 10-6/year exceedance frequency wind speed is 167 mph (per Table 6-1 of NUREG-4461, Rev. 2).

3. If a conservative assumption is made that the Conditional Core Damage Frequency (CCDP) for tornado wind speeds greater than 167 mph is 1.0, when any equipment is unavailable, then:

• This would result in a CDF of 1E-6/year, for wind speeds greater than 167 mph.

• Conservatively assume the 1E-6/year CDF is a CDF (i.e., the base tornado risk with all equipment available is 0).

• Therefore, 4E-6/year of the planned penalty factor (5E-6 planned - 1E-6 due to wind speeds above 167 mph) would be from tornado strikes between 100

- 166 mph.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 6 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

• Given the frequency of all tornadoes between 100 - 166 mph is approximately 6E-5/year (6E-5/year - 1E-6/year ~ 6E-5/year), the CCDP would need to be about 7E-2, in order for the CDF to be 4E-6/year (conservatively assuming CDF = CDF).

• TORMIS data from Tables A-3, A-6, and A-7 of NEI 17-02 shows that the damage probability given missile strikes from F2 and F3 tornadoes (equivalent to EF2 and EF3 tornado wind speeds) are very low. Some examples are:

Tornado Missile Target Damage Damage Probability for Probability for F2/EF2 F3/EF3 Tanks (RWST, CST) 6.0E-5 to 7.0E-4 3.7E-4 to 3.0E-3 EDG stacks 2.6E-5 2.5E-4 TD Exhaust Pipe 0 3.4E-6 SG PORV and Exhaust Pipe 1.4E-3 2.5E-3 All the individual target missile damage probabilities are less than 1E-2 for these lower speed tornadoes. Therefore, given a tornado with wind speeds less than 166 mph, the CCDP due to tornado missiles is expected to be less than 1E-2, even with equipment unavailable.

Therefore, using realistic tornado hazard frequencies and assuming conservative CCDPs, it is shown that the 5E-6/year penalty factor for CDF is conservative. This is expected, given the conservative nature of the analysis used to estimate the tornado missile risk associated with unavailable SSCs. Particularly, the conservative tornado strike frequency used, and the fact that a majority of the tornado hazard frequency is associated with low wind speed tornadoes, that have a small likelihood of generating damaging missiles.

c. Explain what additional analyses would be performed and what circumstances or criteria would trigger the need for additional analyses or restrictions for the five LCO conditions excluded from the tornado RICT evaluations.

Response

Upon entering the LCO, for the applicable tornado RICT evaluations, a higher penalty factor will be applied in lieu of performing additional analysis.

This question refers to the five LCOs listed on page E4-8 of the April 3, 2017 supplement to the TSTF-505 LAR. Specifically, they are:

• 3.3.4.B Two ESFAS Modules or Measurement Channels Inoperable

• 3.7.4.A CST inoperable (CST 12 only)

• 3.8.4.A One Battery Inoperable and Reserve Battery Available

• 3.8.4.B One DC Channel Inoperable

• 3.8.9.C One DC Distribution Subsystem Inoperable (Bus 11/21 only)

Response to Request for Additional Information Attachment 1 License Amendment Request Page 7 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 LCO 3.7.4.A CST inoperable is being deleted from the RICT Program in response to RAI 7. Per Table E1-2, the RICT for LCO 3.3.4.B is limited by its front stop, so the additional risk from tornado missiles would not change the RICT. The other three LCOs have relatively short RICTs based on the risk from internal and/or fire events. The tornado missile risk is at least 100 times less than the CDF/LERF from the sum of internal and fire events. Therefore, the additional risk will have a small to negligible impact on the RICT. However, in order to account for uncertainties associated with the tornado missile risk for these configurations, CDF and LERF penalty factors of 5E-5/year and 5E-6/year, respectively, will be applied in the calculation of the RICT for any of these five LCOs. This is a factor of 10 higher than the normal penalty factor, and nearly 2 times the tornado missile risk with CST 12 unavailable, which has the highest CDF and LERF from tornado missiles (3E-5/year and 2E-6/year, respectively).

(3) Enclosure 4 states that the baseline 1.1 E-6/year seismic GDF contribution and corresponding seismic LEAF contribution will be added to the configuration specific delta GDF and delta LEAF from the internal and fire initiating events contributions. The LAR clarifies that the baseline seismic PRA risk conservatively assumes that all SSC seismic induced failures are correlated (i.e., if one train fails all trains fail). The LAA further states that:

... if one were to assume no correlation at all in the seismic failures, then the

[baseline] seismic risk would be lower than the risk predicted by a fully correlated model, but the change in risk using the uncorrelated model with a redundant piece of important equipment out of service would be equivalent to the level predicted by the correlated model.

Assuming full correlation between SSCs, the LAR continues that:

... the conditional core damage frequency given a seismic event will remain unaltered whether equipment is out of service or not. Thus, the risk increase due to out of service equipment cannot be greater than the total SCDF [seismic core damage frequency] estimated by the bounding method ...

For the SSCs within an LCO during an extended RICT, full correlation will not result in any seismic contribution to change the RICT because seismic-induced failure would fail all operable and inoperable SSCs. However, it is unclear why full correlation among SSCs not within the LCO could not contribute greater than the baseline seismic risk because those SSCs will be at risk of failure from a seismic event but would otherwise be operable. The importance of the SSCs not within the LCO might be increased by the inoperable SSCs within the LCO.

Clarify how the proposed approach, of adding the baseline seismic risk to the configuration-specific internal and fire risk increases, appropriately captures any configuration-specific seismic risk increase for the RICT calculation.

Response

There is no configuration-specific seismic model or basis for assessment available, and as a result the bounding seismic penalty approach has been applied.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 8 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 As noted in Enclosure 4 of Reference 1, there is not a current RG 1.200 Rev. 2 compliant seismic PRA model available for CCNPP. For this reason, available information regarding the limiting (low) high confidence of low probability of failure (HCLPF) potentially leading to core damage or large early release has been used to estimate a seismic CDF and seismic LERF. This process combines this limiting HCLPF with the re-evaluated seismic hazard for CCNPP, assuming that failure of the limiting HCLPF component always leads to core damage.

There are several sources of conservatism inherent in this approach. One is that the seismic contribution to delta risk for the RICT calculation for any configuration is taken as the full seismic plant CDF / LERF. That is, for the purpose of any RICT calculation, delta-seismic CDF is assumed to be equal to the estimated seismic CDF from the convolution of the seismic hazard curve with the limiting HCLPF. A related conservatism is that the full annual seismic frequency is applied to the seismic contribution for all RICT calculations, regardless of the duration of the RICT. Since the maximum duration for a RICT is limited to the 30-day backstop, the estimated seismic CDF is roughly 12 times the contribution applicable during any RICT. The presumption of the limiting HCLPF leading directly to seismic core damage means that any other failures, whether related to components in an LCO or not, and whether treated as correlated or not, are not required for the calculation of seismic CDF (i.e., their HCLPFs would be greater than or equal to the limiting HCLPF), and these would not increase the estimated seismic CDF (which is conservatively treated as seismic delta CDF for the RICT calculations).

In other words, full correlation among SSCs not within the LCO would not contribute to the Delta CDF greater than the baseline seismic risk. The Delta CDF associated with SSCs within the LCO is calculated based on the limiting HCLPF, which can be used a surrogate for the potential risk increase of the SSCs not within the LCO (i.e., the HCLPF of the SSCs not within the LCO would have HCLPFs greater than or equal to the limiting HCLPF).

(4) LCO 3.8.1.c specifies constraints regarding power supply to the control room emergency ventilation system (CREVS) and control room emergency temperature system (CRETS),

requiring that the opposite unit's offsite circuit and EOG that supply power to the CREVS and CRETS be operable. Condition 3.8.1.G is in the scope of the RICT program. This condition applies to one required LCO 3.8.1.a offsite circuit that provides power to the CREVS and CRETS inoperable and the required LCO 3.8.1.c offsite circuit inoperable.

The LAR does not describe how the CREVS and CRETS systems are modeled in the PRA.

Unavailable equipment that is excluded from the PRA but affects the functionality can result in an over-estimate of the RICT.

a. Explain how the CREVS and CRETS systems are modeled in the PRA.

Response

Equipment that is used to recirculate the air within the control room envelope is shared between CREVS and CRETS. CREVS equipment that is used to recirculate the air within the control room envelope, such as fans and dampers, are included in the PRA in support of the CRETS function. CREVS-only components, such as post-LOCI

Response to Request for Additional Information Attachment 1 License Amendment Request Page 9 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 (Loss-of-Coolant Incident) filters, are not included. The CREVS function is not explicitly modeled in the PRA as it does not directly mitigate a core damage or large early release event. If radiological controls are needed, then it is presumed that a release has already occurred, and thus would not impact CDF or LERF calculations.

A non-safety related chiller system is also modeled to support the control room HVAC system.

b. Describe how the inoperability of the power supplies to the CREVS and CRETS systems impacts the risk estimates.

Response

The power supplies to CREVS and CRETS are modeled in the PRA. The power supplies include one power supply from each unit powered from offsite sources with diesel generator backup. Loss of power to the CREVS/CRETS system would fail the Control Room HVAC function modeled in the PRA. The cascading impact on the loss of CR HVAC is described in question c. below.

c. Describe and justify how any cascading impacts on other systems that may result from inoperability of CREVS and CRETS are captured in the risk estimates.

Response

Loss of control room envelope cooling can affect the operability and availability of equipment in the control room and the cable spreading room. Loss of this function is modeled to have the effect of increasing the failure rate of 120VAC and 125VDC instruments and controls in the cable spreading room. For the control room, degradation of the 125VDC system is used as a conservative surrogate for control room instrumentation degradation.

An analysis was performed to show that loss of Control Room HVAC system is not expected to cause abandonment by operation staff of the control room due to high temperature, over the PRA mission time.

(5) The NRC Final Safety Evaluation (SE) for Topical Report (TR) Nuclear Energy Institute (NEI) 06-09, "Risk-Managed Technical Specifications (RMTS} Guidelines" (ADAMS Accession No. ML071200238), approved and provided limitations and conditions for use of the TR. Section 4.0, Item 6, of the SE requires that the licensee provide the plant-specific total CDF and LERF to confirm that these are less than 1 E-4/year and 1 E-5/year, respectively. This is consistent with the risk acceptance guidelines in Regulatory Guide (RG) 1.17 4, "An Approach for Using Probabilistic Risk Assessment in Risk-Informed Decisions on Plant-Specific Changes to the Licensing Basis" (ADAMS Accession No. ML100910006). The LAR makes several commitments to complete certain plant modifications and actions prior to implementation of the RICT program. LAR Attachment 5 lists National Fire Protection Association (NFPA) 805 plant modification commitments that resolve fire protection issues and states that Calvert Cliffs will implement the modifications "prior to use of the RICT Program on each unit." LAR Enclosure 9 explains that calculation of some pipe break frequencies in the internal flooding PRA was based on an older method than other

Response to Request for Additional Information Attachment 1 License Amendment Request Page 10 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 break frequencies in the internal flooding PRA and identifies this as a key source of uncertainty. An entry in LAR Enclosure 9, Table E9-1 states, "Prior to implementation of the RICT program, the internal flood model will be updated so that the model consistently uses the newer methodology."

The NRC staff considers the following as potential implementation activities:

• Complete NFPA 805 plant modification commitments that resolve fire protection issues as discussed in Attachment 5 of the LAR.

• Update pipe break frequencies in the internal flooding PRA as discussed in Enclosure 9 of the LAR.

• Confirm that the total CDF and LERF are less than 1 E-4/year and 1 E-5/year, respectively.

a. Provide a list of activities (i.e., implementation items) that are credited as part of the approval of the request to implement a RICT program that needs to be completed before implementation of the RICT program.

Response

At the time of submittal, the following credited activities were stated as planned to be completed before implementation of the RICT program:

1. On a per unit basis, installation of the plant modifications necessary to reduce internal fire risk, as described in Attachment 5 of the LAR.

2. Update of the pipe rupture frequencies in the internal events/internal flooding model, as described in Table E9-1 of Enclosure 9 of the LAR.

3. Using the updated baseline risk models from activities 1 and 2 above, perform a confirmation that the plant-specific total CDF and LERF remain less than 1E-4/year and 1E-5/year, respectively. The activity will be performed consistent with the analysis provided in Enclosure 5 of the LAR.

These items have now been completed as described below:

1. All committed NFPA 805 physical modifications have been completed.

2. The update of pipe rupture frequencies of activity 2 has been completed. This was determined to represent a PRA model upgrade. The upgrade involved an industry methodology new to the Calvert PRA model. A focused-scope peer review was conducted on this model upgrade in January 2017. The focused-scope peer review was conducted against ASME/ANS RA-Sa-2009 - Addenda to ASME/ANS RA-S-2008, Standard for Level1/Large Early Release Frequency Probabilistic Risk Assessment for Nuclear Power Plant Applications. The focused-scope peer review was performed using the process in NEI 05-04, Rev.

3, Process for Performing Internal Events PRA Peer Reviews Using the ASME/ANS PRA Standard. An updated assessment consistent with Enclosure 2 of the LAR and addressing the results of the January 2017 focused-scope peer review concludes that the CCNPP internal events PRA, including internal

Response to Request for Additional Information Attachment 1 License Amendment Request Page 11 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 flooding, continues to be of adequate technical capability to support the TSFT-505 program. The finding from the January 2017 focused-scope peer-review is included in a table in Enclosure 2. The table includes the status of disposition of that finding, and an assessment concluding that there is no impact on the CCNPP RICT program.

3. It has been confirmed that the updated plant-specific total CDF and LERF remain less than 1E 4/year and 1E 5/year, respectively, using the updated baseline risk models reflecting activities 1 and 2 above and consistent with the analysis provided in Enclosure 5 of the LAR.

b. Describe the mechanism(s) to ensure that the activities (i.e., implementation items) provided in response to RAI Sa will be completed before implementation of the RICT program.

Response

The items in part a. above have been completed, and therefore, do not require any mechanism to ensure the activities are completed.

(6) LAR Enclosure 8 describes the process that will be used to translate the baseline PRA models into the configuration risk management program (CRMP) models to be used in the RICT program. The description implies that the CRMP model has not yet been developed and, furthermore, the translation process itself does not appear to be fully developed.

Specifically, some expected adjustments or changes to the baseline model are not identified, such as:

• integration of the internal events, internal flooding, and fire PRA models;

• use of a plant availability factor for determining the average annual risk that would not be applicable to configuration-specific risk;

• adjustments to allow user-specified configurations (e.g., train alignments) that apply to specific configurations that are different from the average configurations modeled in the PRA;

• accounting for the bounding seismic and tornado-generated missile risk contributions; and

• modeling of equipment that is in the RICT program but not in the PRA, such as containment airlocks.

a. Summarize the translation process. Include discussion of the five modeling adjustments cited above.

Response

The RICT CRMP model is developed in a manner similar to the current Maintenance Rule (a)(4) on-line risk assessment model. The current on-line risk assessment model does not include Fire PRA modeling, which will be included in the RICT model.

The internal events and internal flooding PRA models are integrated into a single fault tree model. The fire PRA model is a separate model based upon the internal

Response to Request for Additional Information Attachment 1 License Amendment Request Page 12 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 events model, but with changes to reflect responses to fires, such as added fire initiators, fire human actions, and hot-short split-fraction events. In the RICT CRMP model, the fire PRA and the internal events/internal flood CDF and LERF results will be calculated separately, then the results are combined with the fixed contributions from Seismic and high winds.

The base fault tree model contains a capacity factor basic event. Consistent with the Maintenance Rule (a)(4) model, this event is set to 1 for the on-line risk assessment model.

The base fault tree model contains test/maintenance events to represent the fraction of time a train or component is out-of-service for maintenance. Consistent with the Maintenance Rule (a)(4) model, these events are set to 0 to create a zero-maintenance model. These events, or surrogates, are then adjusted to 1 (true) to reflect the specific plant configuration model. In addition, the base fault tree model contains equipment/train alignment events. In the base model, these alignment events are set to their average alignment (e.g., pump A is in service 50% of the time). Depending on the specific plant configuration being modeled, these average alignment events are adjusted to 0 or 1 based on the actual plant configuration.

The CRMP model will include the bounding delta-CDF/LERF values for the respective seismic and tornado-generated missile risk contributions, and these contributions will be combined with the configuration-specific internal events and fire model results.

Where applicable, the surrogate event(s) as described in Enclosure 1 of the LAR (Reference 1) are used for the RICT calculation. Those events are set to true/failed in the same way as the events for an explicitly modeled component or train, and the plant configuration evaluated and the RICT and RMAT determined.

b. Summarize all changes made to the baseline PRA model to produce the CRMP model and how it is assured that these changes are appropriate and comprehensive.

Response

As noted in the response to 6a, the RICT CRMP PRA model will be built in a manner similar to the Maintenance Rule (a)(4) on-line risk model. The current on-line risk model currently includes internal events and internal flood initiators. The RICT CRMP model will also include fire PRA.

The following changes are made to the baseline PRA model:

• The capacity factor basic event, RCF, is set to 1.0.

• Test and Maintenance Events are set to 0.00, to create the zero-maintenance model.

• The base fault tree is restructured to improve performance speed. The changes are reviewed and quantified to assure model fidelity is maintained.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 13 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 The same changes are made to the Fire PRA model.

As part of the model rollout, the updated RICT CRMP model is re-quantified for each functional equipment group out-of-service, and then the results are reviewed, by a qualified analyst, to assure the results are appropriate, and any unexpected results are dispositioned.

(7) In the letter dated April 3, 2017, the licensee supplemented its original LAR to remove from the list of requested TS changes those TS actions related to loss of function. Loss of function conditions are those TS conditions with insufficient TS operable equipment to meet the specified safety function of the system.

Based on the design success criteria listed in LAR Table E1-1, it appears that the following LCO conditions represent a loss of function:

• 3.4.1 10.A, "One pressurizer safety valve inoperable"

• 3.4.11.B, "One PORV inoperable and not capable of being manually cycled"

• 3.4.11.C, "One block valve inoperable"

• 3.4.11.D, "Two PORVs inoperable and not capable of being manually cycled"

• 3.4.11.E, "Two block valves inoperable"

• 3.6.6.B, "One or more penetration flow paths with two containment isolation valves inoperable" (only applicable to penetration flow paths with two containment isolation valves and not a closed system)

• 3.6.6.D, "Two containment cooling trains"

• 3.7.2.A, "One MSIV inoperable in mode 1"

• 3.7.4.A, "CST inoperable"

• 3.7.15.A, "One or more MFIVs inoperable" Additionally, based on descriptions in the TS Bases, it appears that the following LCO condition represents a loss of function:

• 3.5.1.B, "One SIT inoperable for other reasons than boron."

For this condition, the TS Bases state that three safety injection tanks (SITs) are required to reach the core during a loss-of-coolant accident (LOCA) and that the design-basis analysis assumes that the contents of one tank spills through the break. Therefore, one inoperable SIT would be a loss of function. The TS Bases further state that "if the contents of fewer than three tanks are injected during the blowdown phase of a LOCA, the ECCS acceptance criteria[ ... ] could be violated."

For each of the 11 LCO Conditions listed above, either:

a. Confirm and describe how all design-basis functions are met when entering any of the conditions listed above;

b. Remove the proposed RICT; or

c. Compare the design-basis success criteria parameter values with the PRA success criteria parameter values, explain how the RICT is consistent with the new constraint

Response to Request for Additional Information Attachment 1 License Amendment Request Page 14 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 proposed in TS 5.5.18.d, and justify how defense in depth and safety margins are maintained if the design basis will not be met during the RICT.

Response

A proposed RICT will be removed from the following LCO Conditions as identified above:

• 3.4.10.A, One pressurizer safety valve inoperable,

• 3.4.11.B, One PORV inoperable and not capable of being manually cycled,

• 3.4.11.C, One block valve inoperable,

• 3.4.11.D, Two PORVs inoperable and not capable of being manually cycled,

• 3.4.11.E, Two block valves inoperable,

• 3.5.1.B, One SIT inoperable for other reasons than boron.

• 3.6.3.B One or more penetration flow paths with two containment isolation valves inoperable (only applicable to penetration flow paths with two containment isolation valves and not a closed system),

• 3.6.6.D, Two containment cooling trains,

• 3.7.2.A, One MSIV inoperable in mode 1,

• 3.7.4.A, CST inoperable,

• 3.7.15.A, One or more MFIVs inoperable.

Note that the question indicates 3.6.6.B but this should be 3.6.3.B as listed in the above response. See the attached revised TS markups in Attachment 2 (note that a full set of revised TS markups is provided for completeness which supersedes the set of TS markups provided in Exelon's supplement letter dated April 3, 2017 (Reference 2)).

(8) Instrumentation is generally not modeled in detail in PRAs and is often modeled as a single, generic basic event representing all trains or channels. The LAR did not provide discussion on the PRA modeling for many of the LCO conditions pertaining to instrumentation that are proposed in the scope of the RICT program, or provided only a brief summary for others.

a. For each condition in TS 3.3 proposed in the scope of the RICT program, describe how it is modelled in the PRA. If the TS condition/TS Required Action covers multiple functions, such as in the case of engineered safety features actuation system instrumentation, describe each one individually. If there are different types of models (e.g., multiple channel basic events versus a single combined basic event) that are used for different instrumentation, explain all the different models.

Response

RPS Instrumentation (LCOs 3.3.1/3.3.3)

The CCNPP RPS PRA system fault tree modeling is detailed. The fault tree model includes the four RPS bistable trip units and associated instrument measurement channels. A basic event represents when an individual RPS trip channel is in bypass.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 15 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 Each trip path includes six logic matrix relays. These relays are modeled separately.

The four trip path relays, K1 through K4, are modeled. When these relays are de-energized (i.e., tripped), it trips two trip circuit breakers (TCBs). The eight trip circuit breakers are modeled separately. The TCB trip configuration logic is modeled consistent with plant design to result in depowering the Control Element Drive Mechanisms (CEDMs).

Manual trip is also modeled. Actuation of the two adjacent pushbutton switches on the control panel causes trip circuit breakers to open resulting in depowering of all CEDMs.

ESFAS Instrumentation, Including Diesel Start (LCOs 3.3.4/3.3.5/3.3.6)

The CCNPP ESFAS PRA system fault tree is modeled in detail for the ESFAS actuation functions:

Safety Injection Actuation Signals Containment Spray Actuation Signals Containment Isolation Signals Shutdown Sequencer Signals Recirculation Actuation Signals Steam Generator Isolation Signals Undervoltage blocking and sequencing signals Auxiliary Feedwater Actuation Signals The model includes the four sensor modules and associated instrument measurement channels for the actuation functions. For example, for a undervoltage trip signal, the bus UV relays are modeled. Basic events represent when a sensor channel is in bypass. Basic events are used to represent blocking logic failures for applicable signals.

The model includes detailed modeling of the two ESFAS actuation channels. The modeling includes actuation relays, modules, and power supplies.

Where provided, manual initiation of the actuation channel is modeled.

Loss of voltage to the 4KV busses is modeled, the UV sensor modules are modeled, and a UV signal is modeled for each of the sites four safety-related diesel generators. Isolation of the 4KV applicable bus is modeled (failure of a required breaker to open or close as needed fails the diesel generator function to that bus). The diesel start function is also modeled explicitly.

b. Clarify how each of the models will be changed to model the impact of an inoperable channel and justify why the modelling is correct or will conservatively bound the RICT calculation.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 16 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

Response

Because the channels are explicitly modeled, they are set to failed in the PRA models for the RICT calculation. This is the same as the approach for other explicitly modeled components. Because the channels are explicitly modeled there is no need to consider whether the calculation is bounding.

(9) In addition to consideration of risk-significant SSCs, LAR Enclosure 12, Section 3, states that "several areas of uncertainty in the internal events and fire PRAs will be considered in defining configuration-specific risk management actions (RMAs) when entering a RICT."

LAR Enclosure 9 identifies two fire event uncertainty issues: configurations in which automatic fire suppression in the cable spreading room or switchgear room are important and configurations in which transient combustibles and hot work are important. LAR Tables E9-1 and E9-4 also identify modeling of human failure events as a key uncertainty that requires RMAs. Table E9-4 indicates that uncertainty will be addressed during the development of RMAs. Enclosure 12 discusses the development of RMAs. This enclosure repeats the guidance in NEI 06-09, Revision 0-A, "Risk-Informed Technical Specifications Initiative 4b, Risk-Managed Technical Specifications (RMTS) Guidelines" (ADAMS Accession No. ML12286A322), that RMAs are required when the risk management action time (RMAT) thresholds will be, or are, exceeded. Enclosure 12 also states that "Enclosure 9 identifies several areas of uncertainty in the internal events and fire PRAs that will be considered in defining configuration-specific RMAs when entering a RICT."

a. Please provide an overview of the procedure or process for developing configuration-specific RMAs for each RICT.

Response

As described in Enclosure 12 of Reference 1, RMA development for a particular RICT addresses the three areas noted in NEI 06-09-A. The CCNPP protected equipment program identifies equipment that should be protected to ensure that the minimum required equipment remains available to support the plant. Protected equipment is clearly posted to limit work on or manipulation of the protected equipment. This would include, for example, the remaining train of a 2-train system, or that trains required support systems such as power or cooling. The RMAs arising from consideration of fire risk in online maintenance will be included in the RICT RMAs. These minimize potential initiators whose mitigation is impacted by the out-of-service equipment. The PRA results for the RICT will be used to determine whether additional RMAs should be considered. Also, RMAs such as limiting activities that could trigger certain initiators (for example, limiting activities in the switchyard if an EDG RICT was entered), or briefing operator crews on the appropriate procedure, to increase the success likelihood of the operator action would be considered. Additionally, if the RICT entry is emergent and the extent of condition for the remaining equipment is not yet known, or the potential for common cause failure has not yet been fully determined, RMAs would be developed specifically to address the potential loss of function if an event would occur.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 17 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

b. Please explain how that process will systematically evaluate the potential impact of uncertainties such as those discussed above into the identification and development of the configuration-specific RMAs.

Response

Areas of uncertainty noted in the RAI will be systematically addressed through the processes described in response to RAI 9a. For example, uncertainty related to transient combustibles and hot work may be addressed by imposing transient combustible/hot work controls as is done already in the online fire risk management program under the Maintenance Rule. Human failure event uncertainty is addressed as above by the review of procedures and shift briefings.

(10) While the guidance in NEI 06-09 states that no common cause failure (CCF) adjustment is required for planned maintenance, the NRC approval of NEI 06-09 is based on RG 1.177, Revision 1, "An Approach for Plaint-Specific, Risk-Informed Decisionmaking: Technical Specifications" (ADAMS Accession No. ML100910008), as indicated in the NRC SE to NEI 06-09. Specifically, Section 2.2 of the NRC SE for NEI 06-09 states that "Specific methods and guidelines acceptable to the NRC staff are also outlined in RG 1.177 for assessing risk-informed TS changes." Further, Section 3.2 of the NRC SE states that compliance with the guidance of RG 1.17 4 and RG 1.177, which provides an acceptable method for implementing specific regulations, is achieved by evaluation using a comprehensive risk analysis, which assesses the configuration-specific risk by including contributions from human errors and CCFs.

The guidance in RG 1.177, Section 2.3.3.1, states that "CCF modeling of components is not only dependent on the number of remaining inservice components, but is also dependent on the reason components were removed from service (i.e. whether for preventative or corrective maintenance)." In relation to CCF for preventive maintenance, the guidance in RG 1.177, Appendix A, Section A-1.3.1.1, states:

If the component is down because it is being brought down for maintenance, the CCF contributions involving the component should be modified to remove the component and to only include failures of the remaining components (also see Regulatory Position 2.3.1 of Regulatory Guide 1.177).

According to RG 1.177, if a component from a CCF group of three or more components is declared inoperable, the CCF of the remaining components should be modified to reflect the reduced number of available components in order to properly model the as-operated plant.

a. Explain how CCFs are included in the PRA model (e.g., with all combinations in the logic models as different basic events or with identification of multiple basic events in the cutsets).

Response to Request for Additional Information Attachment 1 License Amendment Request Page 18 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

Response

In the CCNPP PRA models, common cause failures are modeled as separate basic events in the fault tree model, with common cause combinations in the fault tree as different basic events.

b. Explain how the quantification and/or models will be changed when, for example, one component from a CCF group of three or more components is removed for preventative maintenance and describe how the treatment of CCF either meets the guidance in RG 1.177 or meets the intent of this guidance when quantifying a RICT.

Response

Common cause grouping is not dynamically changed during configuration risk analyses when a component is removed from service for preventive maintenance.

This is appropriate in that the component, though not out of service for a reason subject to common cause failure, remains a participant in the common cause events for the remainder of the component operation.

(11) According to Section A-1.3.2.1 of Appendix A of RG 1.177, when a component fails, the CCF probability for the remaining redundant components should be increased to represent the conditional failure probability due to CCF of these components in order to account for the possibility that the first failure was caused by a CCF mechanism. When a component fails, the calculation of the plant risk, assuming that there is no increase in CCF potential in the redundant components before any extent of condition evaluation is completed, could lead to a non-conservative extended completion time calculation, as illustrated by inclusion of the guidance in Appendix A of RG 1.177. Much of the discussion in Appendix A describes how configuration-specific risk calculations should be performed.

In Section 3.2 of the NRC SE for NEI 06-09, the NRC staff stated that compliance with the guidance of RG 1.17 4 and RG 1.177, which provides an acceptable method for implementing specific regulations, is achieved by evaluation using a comprehensive risk analysis, which assesses the configuration-specific risk by including contributions from human errors and CCFs.

The limitations and conditions in Section 4.0 of the SE for NEI 06-09 state that the NRC staff interprets NEI 06-09 as requiring consideration of additional RMAs due to the potential for increased risks from CCF of similar equipment whenever the redundant components are considered to remain operable, but the licensee has not completed the extent of condition (or more correctly extent of cause) evaluations.

The requirement to consider additional RMAs prior to the completion of the extent of cause evaluation was included by the NRC staff in the SE for NEI 06-09 as an additional measure to account for the increased potential that the first failure was caused by a CCF mechanism. However, no exception to the RG 1.177 guidance was taken in the calculation of the RICT with regard to the quantification of the unresolved potential for CCF before the extent of cause evaluation is complete. The NRC staff interprets that the combined guidance in RG 1.177 and NEI 06-09 could be met with the following actions:

Response to Request for Additional Information Attachment 1 License Amendment Request Page 19 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

• When, prior to exceeding the front stop, there is a high degree of confidence based on the evidence collected there is no CCF mechanism that could affect the redundant components, the RICT calculation may use nominal CC factor probability.

• If a high degree of confidence cannot be established that there is no CCF that could affect the redundant components, the RICT shall account for the increased possibility of CCF. Accounting for the increased possibility of CCF shall be accomplished by one of the two methods below. If one of the two methods below is not used, the TS front stop shall not be exceeded.

• The RICT calculation shall be adjusted to numerically account for the increased possibility of CCF in accordance with RG 1.177, as specified in Section A-1.3.2.1 of Appendix A of the RG. Specifically, when a component fails, the CCF probability for the remaining redundant components shall be increased to represent the conditional failure probability due to CCF of these components in order to account for the possibility the first failure was caused by a common cause mechanism.

• Prior to exceeding the front stop, the licensee shall implement RMAs not already credited in the RICT calculation that target the success of the redundant and/or diverse SSCs of the failed SSC, and, if possible, reduce the frequency of initiating events that call upon the function(s) performed by the failed SSC. Documentation of RMAs shall be available for NRC review.

a. Confirm and describe how that treatment of CCF in the case of an emergent failure either meets the guidance in RG 1.177 or meets the intent of this guidance, together with the NEI 06-09 guidance when quantifying a RICT.

Response

As described in Enclosure 12 of Reference 1, if the extent of condition for an emergent failure is not known, RMAs targeting the impact of a potential common cause failure will be developed and implemented addressing impacted initiators and supporting the success of redundant or diverse SSCs. These RMAs would not be part of the quantification of the RICT. This meets the intent of the second alternative described in the RAI for addressing common cause failure.

b. Update the TS administrative section to include the guidance on treatment of CCFs in the RICT program.

Response

The following, based on TSTF-17-01, "Response to NRC Questions on TSTF-505-A, 'Provide Risk-informed Extended Completion Times', (Reference 6) is proposed to be added to the Risk Informed Completion Time Program description in TS 5.5.18:

d. If the extent of condition evaluation for inoperable structures, systems, or components (SSCs) is not complete prior to exceeding the Completion Time,

Response to Request for Additional Information Attachment 1 License Amendment Request Page 20 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 the RICT shall account for the increased possibility of common cause failure (CCF) by either:

1. Numerically accounting for the increased possibility of CCF in the RICT calculation; or

2. Risk Management Actions (RMAs) not already credited in the RICT calculation shall be implemented that support redundant or diverse SSCs that perform the function(s) of the inoperable SSCs, and, if practicable, reduce the frequency of initiating events that challenge the function(s) performed by the inoperable SSCs.

See the attached TS markups in Attachment 2.

(12) In the proposed changes to TS Administrative Section 5.5.18, the constraint currently states:

When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

The parallel limitations from the NRC SE for NEI 06-09 are:

When a RICT is being used, any plant configuration change within the scope of the CRMP must be considered for the effect on the RICT.

Revise the constraint to clearly identify which configuration changes will be considered for the effect on the RICT, as, for example:

When a RICT is being used, any change to the plant configuration, as defined in NEI 06-09, Appendix A, must be considered for the effect on the RICT.

Response

As indicated above, the constraint in TS 5.5.18 is revised to state the following:

When a RICT is being used, any change to the plant configuration, as defined in NEI 06-09-A, Appendix A, must be considered for the effect on the RICT.

(13) NEI 06-09, Revision 0-A, references Nuclear Management and Resources Council (NUMARC) 93-01, Revision 3, "Industry Guideline for Monitoring the Effectiveness of Maintenance at Nuclear Power Plants," and RG 1.182, "Assessing and Managing Risk Before Maintenance Activities at Nuclear Power Plants," as providing support for the risk-managed TSs guidelines. Specifically, the limits established for entry into a RICT and for RMA implementation are consistent with the guidance of NUMARC 93-01, endorsed by RG 1.182, as applicable to plant maintenance activities. The current NUMARC 93-01 version is Revision 4A. RG 1.182 has been withdrawn and its subject matter is included in Revision 3 of RG 1.160, "Monitoring the Effectiveness of Maintenance at Nuclear Power Plants."

Response to Request for Additional Information Attachment 1 License Amendment Request Page 21 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 State whether the latest version of NUMARC 93-01 and appropriate sections of RG 1.160 will be referenced and used in the RICT program.

Response

The latest version of NUMARC 93-01 and RG 1.160 are used at CCNPP and will be referenced and used in the RICT program.

(14) The LAR, as supplemented, includes a RICT for LCO Condition 3.6.6.A, "One containment spray train inoperable," and Condition 3.6.6.B, "One containment cooling train inoperable."

As stated in LAR Table E1-1, the function of the containment spray system is to provide containment atmosphere cooling and limit post-accident pressure increase and iodine removal. The function of the containment cooling system is to provide containment atmosphere cooling. The SE for NEI 06-09 states that a RICT can be applied to SSCs that are either modeled in the PRA, or whose impact can be quantified using conservative or bounding approaches.

LAR Table E1-1 states that "SSCs are modeled consistent with the TS scope and so can be directly evaluated using the CRMP tool" and that "The success criteria in the PRA are consistent with the design basis criteria," but did not provide any description of the PRA modeling for these systems.

Describe how containment spray and containment cooling systems are modeled in the PRA and how a RICT based on CDF and LERF can be quantitatively determined for these systems.

Response

Both systems are explicitly modeled in the CCNPP PRA and can be numerally quantified for impact on CDF and LERF.

The top events for containment spray system are the two containment spray headers. The modeling includes system components, such as pumps, valves, and heat exchangers, and system dependencies, such as electrical and cooling water systems. The PRA success criteria for the containment spray system is one of two headers.

The top events for the containment air recirculation and cooling system are the four containment air coolers. The modeling includes system components, such as coolers, fans, and valves, and system dependencies, such as electrical and cooling water systems.

The PRA success criteria for the containment air recirculation and cooling system is two of four air coolers.

(15) In Section 4.0, "Limitations and Conditions," of the NRC staff SE to NEI 06-09, the staff stated:

As part of its review and approval of a licensee's application requesting to implement the RMTS, the NRC staff intends to impose a license condition that will explicitly address the scope of the PRA and non-PRA methods approved by the NRC staff for use in the plant-specific RMTS program. If a licensee wishes to change its methods, and the change is

Response to Request for Additional Information Attachment 1 License Amendment Request Page 22 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 outside the bounds of the license condition, the licensee will need NRC approval, via a license amendment, of the implementation of the new method in its RMTS program.

Propose a license condition limiting the scope of the PAA and non-PAA methods to what is approved by the NRC staff for use in the plant-specific RMTS program. For example:

The risk assessment approach, methods, and data shall be acceptable to the NRC, be based on the as-built, as-operated, and maintained plant; and reflect the operating experience at the plant. Acceptable methods to assess the risk from extending the completion times must be PAA methods accepted as part of this license amendment, or other methods currently approved by the NRC for generic use. If a licensee wishes to change its methods and the change is outside the bounds of this license condition, the licensee will need prior NRC approval, via a license amendment.

Response

In lieu of a license condition, the following items are proposed to be added to the RICT Program in TS Section 5.5.18 to address this issue:

e. A RICT must be calculated using the PRA and non-PRA methods approved by the NRC, including internal events, internal floods, and fire PRA. Changes to these PRA and non-PRA methods require prior NRC approval. The PRA maintenance and upgrade process will validate that changes to the PRA models used in the RICT program follow the guidance in Appendix 1-A of ASME/ANS RA-Sa-2009, "Standard for Level 1/Large Early Release Frequency Probabilistic Risk Assessment for Nuclear Power Plant Applications."

f. A report shall be submitted following each PRA upgrade and associated peer review, and prior to using the upgraded PRA to calculate a RICT. The report shall describe the scope of the upgrade.

See the attached TS Markups in Attachment 2.

(16) LCO 3.8.4, "DC Sources-Operating," requires that four channels of direct current (DC) electrical sources shall be operable. Condition A is applicable when one DC channel is inoperable due to an inoperable battery and the reserve battery is available.

The LAA proposes to add the option of either applying the existing front stop completion time or applying a RICT for Required Action A.1. Required Action A.1 requires replacement of an inoperable battery with reserve battery. In general, the RICT program applies to required actions that restore a component to operable status, place an instrument channel in the tripped position, or isolate a containment penetration path with an inoperable isolation valve.

Please provide a justification, including a discussion of the effects on defense in depth and safety margins, for applying a RICT to a non-restorative action (i.e., the action directs replacement of the battery with the reserve battery instead of returning the normal battery to operable status).

Response to Request for Additional Information Attachment 1 License Amendment Request Page 23 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

Response

LCO 3.8.4, DC Sources Operating, Condition A, addresses one DC channel inoperable due to an inoperable battery. Since the reserve battery is a fully qualified and tested replacement for the inoperable battery, the DC channel is restored to Operability once the reserve battery is connected to the affected DC channel. The Condition is exited once the reserve battery is connected. Therefore, Condition A does restore the Operability of the DC channel.

CCNPP has 5 station batteries that can perform equivalent functions. They are described in UFSAR Table 8-10, Ratings and Construction of Station Batteries. A Note to the table identifies that Battery 01 (the reserve battery) can be a replacement for any of the other four batteries and must be able to handle any of the load cycles shown. The Note goes on to say that Battery 01 is tested using a unique load cycle that incorporates the largest discharge of any of the station batterys time intervals. Therefore, it is tested in a manner to allow it to be a fully qualified replacement for any battery.

(17) In Attachment 2 of the LAA, the licensee proposed to use the RICT program for the following Calvert Cliffs current TS conditions:

TS LCO Conditions in LAR, Attachment 2 (current TS) 3.8.1 A One required LCO 3.8.1.a offsite circuit inoperable 3.8.1 B. One LCO 3.8.1.b DG inoperable 3.8.1 G. Two required LCO 3.8.1.a offsite circuits inoperable OR One required LCO 3.8.1.a offsite circuit that provides power to the CREVS and CRETS inoperable and the required LCO 3.8.1.c offsite circuit inoperable 3.8.1 H. One required LCO 3.8.1.a offsite circuit inoperable AND One LCO 3.8.1.b DG inoperable 3.8.4 A. One DC channel inoperable due to an inoperable battery and the reserve battery available 3.8.4 B. One DC channel inoperable for reasons other than Condition A 3.8.7 A. One required inverter inoperable 3.8.9 A. One or more AC electrical power distribution subsystems inoperable 3.8.9 B. One or more AC vital bus subsystem(s) inoperable 3.8.9 C. One DC electrical power distribution subsystem inoperable In Enclosure 1 of the LAR, Table E1-1, "In Scope TS/LCO Conditions to Corresponding PRA Functions," and Table E1-2, "In Scope TS/LCO Conditions RICT Estimate," provide the PRA functions and the RICT estimates, respectively, for the following TS conditions:

Response to Request for Additional Information Attachment 1 License Amendment Request Page 24 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 TS LCO Conditions in LAR, Tables E1-1 and E1-2 3.8.1 A. One offsite power source inoperable 3.8.1 B. One DG inoperable 3.8.1 G. Two offsite power sources inoperable or Offsite source and EDG to CREV/CRETs power supply 3.8.1 H. One offsite power source AND One DG inoperable 3.8.4 A. One battery inoperable and the reserve battery available 3.8.4 B. One DC channel inoperable 3.8.7 A. One inverter inoperable 3.8.9 A. One AC distribution subsystem inoperable 3.8.9 B. One or more AC vital subsystems inoperable 3.8.9 C. One DC distribution subsystem inoperable The staff notes that the above TS conditions in Attachment 2 (first RAI table) of the LAR are different from the TS conditions in Table E1-1 and E-2 (second RAI table) of the LAR.

Provide a discussion on this discrepancy, or revise LAR Tables E1-1 and E1-2 for the correct electrical power systems TS conditions, as provided in the Calvert Cliffs current TSs.

Response

See attached Enclosure 1, Table E1-1 and E1-2 excerpts with the modified description of the LCO Condition as specified in the current TS.

(18) NEI 06-09, Revision 0-A, states that RMAs and compensatory actions for significant components should be predefined to the extent practicable in plant procedures and implemented at the earliest appropriate time in order to maintain defense in depth.

Moreover, the NRC staff's SE for NEI 06-09, Section 4.0, states that a licensee's LAR adopting the NEI 06-09 initiative will describe the process to identify and provide compensatory measures and RMAs during extended completion times and provide examples of compensatory measures or RMAs.

In the LAR dated February 25, 2016, Enclosure 12, "Risk Management Action Examples,"

the licensee provided an example of RMAs that may be considered during the RICT program entry for an inoperable.

a. Provide similar examples of RMAs that assure a reasonable balance of defense in depth is maintained for the proposed electrical power systems TS 3.8.1, Conditions A, G, and H; TS 3.8.4, Conditions A and B; TS 3.8.7, Condition A; and TS 3.8.9, Conditions A, B, and C.

Response

Each of the TS conditions is listed below with example RMAs for that condition.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 25 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 3.8.1.A - One required LCO 3.8.1.a offsite circuit inoperable The required offsite circuits consist of the electrical path from the offsite circuit down to the onsite 4kV ESF bus, including the intermediate transformers, busses and voltage regulators. The RMAs taken will vary depending on the cause of the LCO entry. Entry into the LCO would be for any component(s) that would limit the units connection between its safety related 4kV busses and the offsite electrical grid (e.g., removal of 2 of 3 high lines, P-13000-1 13kV service transformer, or a feeder breaker to one of the 13kV service busses). RMAs include:

• Prohibit any elective maintenance on the following systems:

o SMECO offsite source line o Remaining 500kV offsite circuits o All onsite EDGs o Any part of the AFW system o Any components in the switchyard o Any electrical component from the switchyard down to the safety related 4kV busses.

• Protect equipment as directed by OP-AA-108-117, "Protected Equipment Program."

o This includes all the above listed systems

• Contact the TSO (Transmission System Operator) prior to entering the condition to verify grid stability and that protective barriers are in place at the Waugh Chapel switchyard.

o TSO will be contacted periodically to verify status of grid

• Evaluate weather forecast prior to entering the condition to ensure favorable conditions exist for the entire length of the expected OOS window.

o Shift Crew will evaluate the weather forecast for changes on a per shift basis.

• Prohibit trip sensitive activities and activities that could result in a plant transient.

• Brief Shift crews on EOP and AOP responses to loss of offsite power.

• Pre-stage material for work as appropriate.

3.8.1.G - Two required LCO 3.8.1.a offsite circuits inoperable OR One required LCO 3.8.1.a offsite circuit that provides power to the CREVS and CRETS inoperable and the required LCO 3.8.1.c offsite circuit inoperable

• Execute RMAs as stated for 3.8.1.A above.

• Protect fully powered CRETS/ CREVS train as directed by OP-AA-108-117.

• Hold additional Shift crew briefs on a loss of ventilation.

3.8.1.H - One required LCO 3.8.1.a offsite circuit inoperable AND One LCO 3.8.1.b DG inoperable Execute the Diesel Generator RMAs from the original LAR, Enclosure 12, and the RMAs from 3.8.1.A above. Protect equipment on division with operable EDG.

The Diesel Generator RMAs from Enclosure 12 of Reference 1 are:

Response to Request for Additional Information Attachment 1 License Amendment Request Page 26 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

• Contact the Transmission System Operator (TSO) to determine the reliability of offsite power supplies prior to entering a RICT, and implement RMAs during times of high grid stress conditions, such as during high demand conditions.

• Evaluate weather conditions for threats to the reliability of offsite power supplies.

• Defer elective maintenance in the switchyard, on the station electrical distribution systems, and on the main and auxiliary transformers associated with the unit.

• Defer planned maintenance or testing that affects the reliability of the operable DGs and their associated support equipment. Defer planned maintenance activities on station blackout mitigating systems.

• Protect equipment as directed by OP-AA-108-117.

• Defer planned maintenance or testing on redundant train safety systems. If testing or maintenance activities must be performed, a review of the potential risk impact will be performed.

• Implement 10 CFR 50.65(a)(4) fire-specific RMAs associated with the affected DG.

• Brief the on-shift operations crew concerning the unit activities, including any compensatory measures established, and review the appropriate emergency operating procedures for a Loss of Offsite Power.

3.8.4.A - One DC channel inoperable due to an inoperable battery and the reserve battery available The action would be to align the reserve battery to the DC bus with the inoperable battery at which time the LCO would be exited since the reserve battery is fully qualified as a replacement for the normally aligned battery. If alignment is not possible then entry into TS 3.8.4.B would be required.

3.8.4.B - One DC channel inoperable for reasons other than condition A If related to a battery take the RMAs from the original LAR:

• Commence immediate actions to restore the inoperable battery to an operable status.

• Protect equipment as directed by OP-AA-108-117.

o This protection would include prohibiting all elective maintenance on any Vital AC or DC bus and its associated support equipment.

• Take any required Fire 10 CFR 50.65(a)(4) actions

• Brief Shift crews on required actions per associated Abnormal Operating Procedures (AOPs) and emergency Operating Procedures (EOPs) with emphasis on the required response to major loads lost.

• Pre-stage materials for work activity 3.8.7.A - One required inverter inoperable

• Align the associated vital AC bus to the Inverter Backup Bus to restore to service.

• Take any fire a4 actions

Response to Request for Additional Information Attachment 1 License Amendment Request Page 27 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

• Protect equipment under the predetermined protection scheme database as directed by OP-AA-108-117.

• Brief Shift crews on required actions per associated AOPs and EOPs for loss of a vital AC bus.

• Pre-stage materials for work activity 3.8.9.A - One or more AC electrical power distribution subsystems inoperable

• Protect remaining AC power distribution subsystems, per OP-CA-108-117, "Calvert Cliffs Site Specific Protected Equipment Guidance."

• Prohibit any elective maintenance on ALL safety related AC distribution subsystems.

• Take the required actions per AOP for loss of AC distribution subsystem. This would include the direction to cross tie busses as appropriate for risk significant equipment.

• Pre-stage material for work activity and ensure parts availability for any contingent work 3.8.9.B - One or more AC vital bus subsystem(s) inoperable

• Protect remaining AC and DC vital bus subsystems, per OP-CA-108-117.

• Minimize activities on equipment powered by remaining AC vital bus

• Prohibit any elective maintenance on ALL vital AC and DC distribution subsystems.

• Take the required actions per AOP for loss of Vital AC distribution subsystem.

This would include the direction to cross tie busses as appropriate for risk significant equipment.

• Prohibit trip sensitive activities and activities that could result in a plant transient.

• Take any maintenance a4 fire risk RMAs

• Pre-stage materials for work activity 3.8.9.C - One DC electrical power distribution subsystem inoperable

• Protect remaining AC and DC power distribution subsystems, per OP-CA-108-117.

• Prohibit any elective maintenance on ALL vital AC and DC distribution subsystems.

• Take the required actions per AOP for loss of Vital DC distribution subsystem.

This would include the direction to cross tie busses as appropriate for risk significant equipment.

• Prohibit trip sensitive activities and activities that could result in a plant transient.

• Take any maintenance a4 fire risk RMAs

• Pre-stage materials for work activity

b. Provide similar examples of RMAs that include the use of additional equipment for the proposed electrical power systems TS 3.8.1, Conditions A, G, and H; TS 3.8.4, Conditions A and B; TS 3.8.7, Condition A; and TS 3.8.9, Conditions A, B, and C.

Response to Request for Additional Information Attachment 1 License Amendment Request Page 28 of 28 Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318

Response

At the current time CCNPP does not plan to use additional equipment for RICT RMAs.

If the station chooses to do so in the future any additional equipment would be reviewed to ensure that it would effectively support the associated function for the plant and would be controlled under the plant temporary change process that is used for routine maintenance and outage activities.

References

1. Letter from David Helker (Exelon Generation Company, LLC) to U.S. Nuclear Regulatory Commission, "License Amendment Request to Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b," dated February 25, 2016 (ADAMS Accession No.

ML16060A223).

2. Letter from James Barstow (Exelon Generation Company, LLC) to U.S. Nuclear Regulatory Commission, "Supplement - License Amendment Request to Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b," dated April 3, 2017 (ADAMS Accession No. ML17094A591).

3. Letter from Michael Marshall, U.S. Nuclear Regulatory Commission, to Bryan Hanson, Exelon Generation Company, LLC, "RESPONSE REQUESTED: [Final] RAIs on CCNPP Risk-Informed Completion Time LAR (MF7415 AND MF7416; L-2016-LLA-0001)," dated November 13, 2017 (ADAMS Accession No. ML17304A941).

4. NUREG/CR-4461, Tornado Climatology of the Contiguous United States, Revision 2, February 2007.

5. NEI 17-02, "Tornado Missile Risk Evaluator (TMRE) Guidance Document," Revision 1, September 2017.

6. Technical Specifications Task Force (TSTF) Letter TSTF-17-01, "Response to NRC Questions on TSTF-505-A, 'Provide Risk-informed Extended Completion Times', dated September 27, 2017.

ATTACHMENT 2 License Amendment Request Supplement Calvert Cliffs Nuclear Power Plant, Units 1 and 2 Docket Nos. 50-317 and 50-318 Response to Request for Additional Information Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b."

Proposed Technical Specification Changes (Markups)

Completion Times 1.3 1.3 Completion Times The Completion Time clock for Condition A does not stop after Condition B is entered, but continues from the time Condition A was initially entered. If Required Action A.1 is met after Condition B is entered, Condition B is exited and operation may continue in accordance with Condition A, provided the Completion Time for Required Action A.2 has not expired.

---

.:..

IMMEDIATE When "Immediately" is used as a Completion Time, the COMPLETION TIME Required Action should be pursued without delay and in a controlled manner.

CALVERT CLIFFS - UNIT 1 1. 3-14 Amendment No. 322

~ALVERT CLIFFS - UNIT 2 Amendment No. 300

Insert 1 EXAMPLE 1.3-8 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One A.1 Restore subsystem ?days subsystem to OPERABLE inoperable. status. OR In accordance with the Risk Informed Completion Time Program B. Required B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> Action and associated AND Completion Time not met. B.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> When a subsystem is declared inoperable, Condition A is entered. The 7 day Completion Time may be applied as discussed in Example 1.3-2. However, the licensee may elect to apply the Risk Informed Completion Time Program which permits calculation of a Risk Informed Completion Time (RICT) that may be used to complete the Required Action beyond the 7 day Completion Time. The RICT cannot exceed 30 days. After the 7 day Completion Time has expired, the subsystem must be restored to OPERABLE status within the RICT or Condition B must also be entered.

The Risk Informed Completion Time Program requires recalculation of the RICT to reflect changing plant conditions. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after the plant configuration change, whichever is less.

If the 7 day Completion Time clock of Condition A has expired and subsequent changes in plant condition result in exiting the applicability of the Risk Informed Completion Time Program without restoring the inoperable subsystem to OPERABLE status, Condition B is also entered and the Completion Time clocks for Required Actions B.1 and B.2 start.

If the RICT expires or is recalculated to be less than the elapsed time since the Condition was entered and the inoperable subsystem has not been restored to OPERABLE status, Condition B is also entered and the Completion Time clocks

for Required Actions 8.1 and B.2 start. If the inoperable subsystems are restored to OPERABLE status after Condition B is entered, Conditions A and B are exited, and therefore, the Required Actions of Condition B may be terminated.

RPS Instrumentation-Operating 3.3.1 3.3 INSTRUMENTATION 3.3.1 Reactor Protective System (RPS) Instrumentation-Operating LCO 3.3.1 Four RPS bistable trip units, associated measurement channels, and applicable automatic bypass removal features for each Function in Table 3.3.1-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.1-1.

ACTIONS

---

------------- -----------N OTE------- ------------- ------------- ----

Separate Condition entry is allowed for each RPS Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one RPS bistable bistable trip unit in trip unit or bypass or trip.

associated measurement channel AND inoperable except for Condition C (excore A.2.1 Restore affected 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> channel not bistable trip unit calibrated with and associated incore detectors). measurement channel to OPERABLE status.

OR A.2.2 Place affected 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> bistable trip unit in trip.

CALVERT CLIFFS - UNIT 1 3.3.1-1 No. 227 CALVERT CLIFFS - UNIT 2 201

RPS Instrumentation-Operating 3.3.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One or more Functions B.1 Place one affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two RPS bistable bistable trip unit in trip units or bypass and place the associated other affected measurement channels bistable trip unit in inoperable except for trip.

Condition C (excore channel not AND calibrated with i ncore detectors) . B. 2 Restore one affected bistable trip unit and associated measurement channel to OPERABLE status.

c. One or more Functions C.1 Perform SR 3.3.1.3. 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> with one or more power range excore OR channels not calibrated with the C.2 Restrict THERMAL 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> incore detectors. POWER to < 90% RTP.

CALVERT CLIFFS - UNIT 1 3.3.1-2 Amendment No. 276 CALVERT CLIFFS - UNIT 2 Amendment No. 253

RPS Instrumentation-Operating 3.3.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. One or more Functions 0.1 Disable bypass 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one automatic channel.

bypass removal feature inoperable. OR D.2.1 Place affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> bistable trip units in bypass or trip.

AND D.2.2.1 Restore automatic 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> bypass removal ~

-..

feature and affected bistable trip unit to OPERABLE status.

OR D.2.2.2 Place affected 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> bistable trip unit in ~

~

trip.

lo CLC.c..oC""J.o..J\.u.- wi+lv +k R\.~~

\ I'\ fa ("IV'.~ do Co M.~ l ~""'- \!)("\ \ i /'V\ (L.

?ro'3 rCA..CY'.

CALVERT CLIFFS - UNIT 1 3.3.1-3 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

RPS Instrumentation-Operating 3.3.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME E. One or more Fun ct i ans E.1 Disable bypass 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two automatic channels.

bypass removal feature channels OR inoperable.

E. 2.1 Pl ace one affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> bistable trip unit in bypass and place the other in trip for each affected trip Function.

E.2.2 Restore one automatic 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> bypass removal feature and the -l('\ o.a.o r-d oR OJ\c.t.... w \ {.L affected bistable trip unit to OPERABLE +\-.a.... 'R \~k.. \ "fu~e..c\

status for each Co~l~-ti.of\ li°ML affected trip Function. \)C"'OJ l"'o...""'

CALVERT CLIFFS - UNIT 1 3. 3.1-4 Amendment No. 276 CALVERT CLIFFS - UNIT 2 Amendment No. 253

RPS Logic and Trip Initiation 3.3.3 3.3 INSTRUMENTATION 3.3.3 Reactor Protective System (RPS) Logic and Trip Initiation LCO 3.3.3 Six channels of RPS Matrix Logic, four channels of RPS Trip Path Logic, four channels of reactor trip circuit breakers (RTCBs), and four channels of Manual Trip shall be OPERABLE.

APPLICABILITY: MODES 1 and 2, MODES 3, 4, and 5, with any RTCBs closed and any control element assemblies capable of being withdrawn.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One Matrix Logic A.1 Restore Matrix Logic 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> channel inoperable. channel to OPERABLE status.

B. One channel of Manua 1 B.1 Open the affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Trip, RTCBs, or Trip RTCBs.

Path Logic inoperable in MODE 1 or 2.

C. One channe 1 of Manua 1 C.1 Open all RTCBs. 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> Trip, RTCBs, or Trip Path Logic inoperable in MODE 3, 4, or 5.

o~

~QC.C..0 ("-G\ (l,J'\<'...L. W \ {-L +\.....2

'R\.!::>~ \C'\tor-M~ Co~\t.,~Of\

T\N\e... ?~ ro. .cy, CALVERT CLIFFS - UNIT 1 3.3.3-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

ESFAS Instrumentation 3.3.4 3.3 INSTRUMENTATION 3.3.4 Engineered Safety Features Actuation System (ESFAS) Instrumentation LCO 3.3.4 Four ESFAS sensor modules, associated measurement channels, and applicable automatic block removal features for each Function in Table 3.3.4-1 shall be OPERABLE.

APPLICABILITY: MODES l, 2, and 3.

ACTIONS

---

----------------- ---NOTE------ ----------------- --------------

Separate Condition entry is allowed for each ESFAS Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place affected sensor 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one ESFAS sensor module in bypass or module or associated trip.

measurement channel inoperable. AND A.2.1 Restore affected 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> sensor module and associated measurement channel to OPERABLE status.

A. 2. 2 Pl ace affected sensor 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> module in trip.

oR

~a...c.c.or-d.o..(\CJl... W\~ -+k R\5"

\r\(2o~ Co~\~-h_of"\llM'L CALVERT CLIFFS - UNIT 1 3.3.4-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

ESFAS Instrumentation 3.3.4 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One or more Functions B.1 Place one sensor 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two ESFAS sensor module in bypass and modules or associated place the other measurement channels sensor module in inoperable. trip.

AND B.2 Restore one sensor module and associated measurement channel to OPERABLE status.

j~M

c. One or more Functions C.1 Disable affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with the automatic sensor block module.

block removal feature of one sensor block OR module inoperable.

C.2 Place affected sensor 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> block module in bypass.

CALVERT CLIFFS - UNIT 1 3.3.4-2 Amendment No. 276 CALVERT CLIFFS - UNIT 2 Amendment No. 253

ESFAS Instrumentation 3.3.4 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME One or more Functions D.1 Disable affected I

D. 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with the automatic sensor block modules.

block removal feature of two sensor block OR modules inoperable.

D.2.1 Place one affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> sensor block module in bypass and disable the other for each affected ESFAS Function.

AND D.2.2 Restore one automatic 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> block removal feature) o~ - -

and the associated 1 ~~r-d~c.J...~l~

sensor block module ' +tu...~\~\:. \ C\~r-Mt.d to OPERABLE status C.0M.~\~~O"' \i'Mt...

for each affected ,

ESFAS Function. \ ~r<:Xj r-o..""'

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND E.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> CALVERT CLIFFS - UNIT 1 3.3.4-3 Amendment No. 276 CALVERT CLIFFS - UNIT 2 Amendment No. 253

ESFAS Logic and Manual Actuation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Engineered Safety Features Actuation System (ESFAS) Logic and Manual Actuation LCO 3.3.5 Two ESFAS Manual Actuation or Start channels and two ESFAS Actuation Logic channels shall be OPERABLE for each ESFAS Function specified in Table 3.3.5-1.

APPLICABILITY: According to Table 3.3.5-1.

ACTIONS

---

NOTE-------------------------------------

Separate Condition entry is allowed for each ESFAS Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One Auxiliary A.1 Restore affected Feedwater Actuation Auxiliary Feedwater System Manual Start Actuation System channel or Actuation Manual Start channel l(\ 0.C.C..O t"d O.J'\ c:..a... w t +.\.....

Logic channel and Actuation Logic +iv... ~\~" \ (\ .fcNY\t..d inoperable. channel to OPERABLE (oMpl~-tiOI"\ l\M<...

status.  ?~ro.J'V' B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition A AND not met.

B.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> CALVERT CLIFFS - UNIT 1 3.3.5-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

ESFAS Logic and Manual Actuation 3.3.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME

c. One or more Functions C.1 Restore affected 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> with one Manual Manual Actuation Actuation channel or channel and Actuatio Actuation Logic Logic channel to channel inoperable OPERABLE status.

except Auxiliary C.0M~l~~o" l~Mt....

Feedwater Actuation System. ?ro~r-o..M D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition C AND not met for one Manual Actuation D.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> channel.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition C AND not met for one Actuation Logic E.2 Be in Mode 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> channel.

CALVERT CLIFFS - UNIT 1 3.3 . 5-2 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

DG-LOVS 3.3.6 3.3 INSTRUMENTATION 3.3.6 Diesel Generator (DG)-Loss of Voltage Start (LOVS)

LCO 3.3.6 Four sensor modules and measurement channels per DG for the Loss of Voltage Function, four sensor modules and measurement channels per DG for the Transient Degraded Voltage Function, and four sensor modules and measurement channels per DG for the Steady State Degraded Voltage Function shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS

---

------------NOTE----- ------------------------- -------

Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place sensor module 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one sensor in bypass or trip.

module or associated measurement channel AND per DG inoperable.

A.2.1 Restore sensor module 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> and associated measurement channel to OPERABLE status.

OR A.2.2 Place the sensor 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> module in trip.

CALVERT CLIFFS - UNIT 1 3.3.6-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

DG-LOVS 3.3.6 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One or more Functions B.1 Enter applicable 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two sensor Conditions and modules or associated Required Actions for measurement channels the associated DG per DG inoperable. made inoperable by DG-LOVS instrumentation.

OR B.2.1 Place one sensor 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> module in bypass and the other sensor module in trip.

AND B.2.2 Restore one sensor 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />

~

module and associated measurement channel to OPERABLE status.

c. One or more Functions C.1 Restore at least two 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with more than two sensor modules and sensor modules or associated associated measurement channels measurement channels to OPERABLE status.

inoperable.

O'R Jf\ ru:c.on:ia..nu.... WI~ +k 'R\sk,_

lt'\-Q,~ Co""{)k-h01' \1 ('NL.

\)m~,GVM-CALVERT CLIFFS - UNIT 1 3.3.6-2 Amendment No. 276 CALVERT CLIFFS - UNIT 2 Amendment No. 253

ECCS - Operating 3.5.2 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS) 3.5.2 ECCS - Operating LCO 3.5.2 Two ECCS trains shall be OPERABLE.

APPLICABILITY: MODES 1 and 2, MODE 3 with pressurizer pressure ~ 1750 psia.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One or more trains A.1 Restore train(s) to inoperable. OPERABLE status.

At least 100% of the CoM~\t..~0(\ T1M4l.

ECCS flow equivalent to a single OPERABLE 1>ro~ '°'"""

ECCS train available.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND B.2 Reduce pressurizer 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> pressure to

< 1750 psia.

CALVERT CLIFFS - UNIT 1 3.5.2-1 Amendment No. 260 CALVERT CLIFFS - UNIT 2 Amendment No. 237

Containment Air Locks 3.6.2 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.2 Lock an OPERABLE door 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> closed in the affected air lock.

B.3 --------NOTE -------

Air lock doors in high radiation areas may be verified locked closed by administrative means.

Verify an OPERABLE Once per 31 days door is locked closed in the affected air lock.

c. One or more C.l Initiate action to Immediately containment air locks evaluate overall inoperable for containment leakage reasons other than rate per LCO 3.6.1.

Condition A or B.

AND C.2 Verify a door is 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> closed in the affected air lock.

AND C.3 Restore air lock to 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> OPERABLE status.

CALVERT CLIFFS - UNIT 1 3.6.2-4 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

Containment Isolation Valves 3.6.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME A. -------- NOTE -------- A. I Isolate the affected hours Only applicable to penetration flow paths with two penetration flow path OR by use of at least one closed and

-

f t\ O..CC.OrOo.t\c..ii.... WI~

containment isolation 4-\...L. ?.\~~ \ !\f'or-rM.d de-activated valves and not a automatic valve, Co~\t,.,""0(\ \\M(...

closed system. closed manual valve, '"?t"OS,~

blind flange, or check valve with flow One or more through the valve penetration flow secured.

paths with one containment isolation valve inoperable.

A.2 --------NOTE -------

Isolation devices in high radiation areas may be verified by use of administrative means.

Verify the affected Once per 31 days penetration flow path for isolation is isolated. devices outside containment AND Prior to entering MODE 4 from MODE 5 if not performed within the previous 92 days for isolation devices inside containment CALVERT CLIFFS - UNIT 1 3.6.3-2 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

Containment Spray and Cooling Systems 3.6.6 3.6 CONTAINMENT SYSTEMS 3.6.6 Containment Spray and Cooling Systems LCO 3.6.6 Two containment spray trains and two containment cooling trains shall be OPERABLE.

APPLICABILITY: MODES 1 and 2.

MODE 3, except containment spray is not required to be OPERABLE when pressurizer pressure is < 1750 psia.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One containment spray A.1 Restore containment 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> train inoperable. spray train to OPERABLE status.

B. One containment B.1 Restore containment 7 days cooling train cooling train to inoperable. OPERABLE status.

c. -------- NOTE -------- C.1 Verify LCO 3.7.8, 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Not applicable when "CREVS," is met.

second containment spray train AND intentionally made inoperable. C.2 Restore at least one 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />

---

containment spray train to OPERABLE Two containment spray status.

trains inoperable.

CALVERT CLIFFS - UNIT 1 3.6.6-1 309 CALVERT CLIFFS - UNIT 2 287

AFW System 3.7.3 3.7 PLANT SYSTEMS 3.7.3 Auxiliary Feedwater (AFW) System LCO 3.7.3 Two AFW trains shall be OPERABLE.

---

NOTE-------------- --------------

AFW trains required for OPERABILITY may be taken out of service under administrative control for the performance of periodic testing.

APPLICABILITY: MODES 1, 2, and 3.

ACTIONS

---

NOTE----- --------------------------------

LCO 3.0.4.b is not applicable.

CONDITION REQUIRED ACTION COMPLETION TIME A. One steam-driven AFW A.1 Align remaining 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> pump inoperable. OPERABLE steam-driven pump to automatic initiating status.

AND A.2 Restore steam-driven 7 days pump to OPERABLE status.

\l'){:brM~ CoM.~\t...~Of\ \iMt...

~~jr-euw--

CALVERT CLIFFS - UNIT 1 3.7.3-1 Amendment No. 304 CALVERT CLIFFS - UNIT 2 Amendment No. 282

AFW System 3.7.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One motor-driven AFW B.1 Align standby steam- 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> pump inoperable. driven pump to automatic initiating status.

B.2 Restore motor-driven 7 days pump to OPERABLE status .

c. Two AFW pumps C.1 Align remaining 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> inoperable. OPERABLE pump to automatic initiating status.

AND C.2 Verify the other 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> unit's motor-driven AFW pump is OPERABLE.

AND C.3 Verify, by 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> administrative means, the cross-tie valve to the opposite unit is OPERABLE.

AND C.4 Restore one AFW pump 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> to OPERABLE status.

QL

\I'\ 0..C..C..OC'c\ o..t\U... w '~+ls_ ~\~\c..

Co~ le....hof'. Ti Me... ~~ \Q..M CALVERT CLIFFS - UNIT 1 3.7.3-2 Amendment No. 304 CALVERT CLIFFS - UNIT 2 Amendment No. 282

AFW System 3.7.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. One AFW train D.1 Restore AFW train to inoperable for OPERABLE status.

reasons other than Condition A, B, or C.

E. Required Action and E.1 Be in MODE 3.

associated Completion Time of Condition A, AND B, C, or D not met.

E.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> F. Two AFW trains F.1 --------NOTE -------

inoperable. LCO 3.0.3 and all other LCO Required Actions requiring MODE changes are suspended until one AFW train is restored to OPERABLE status.

Initiate action to Immediately restore one AFW train to OPERABLE status.

CALVERT CLIFFS - UNI T 1 3.7.3-3 Amendment No. 304 CALVERT CLIFFS - UNIT 2 Amendment No. 282

CC System 3.7.5 3.7 PLANT SYSTEMS 3.7.5 Component Cooling (CC) System LCO 3.7.5 Two CC loops shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CC loop A. l --------NOTE -------

inoperable. Enter applicable Conditions and OR Required Actions of ll'\ ~C..C..OrdOJ\CL Wt~

LCO 3.4.6, 11 RCS +k "'R\~~ lnfu~

Loops--MODE 4, 11 for C.OM.~lcho" T~Me...

shutdown cooling made 'Proc"j r-a...NV\-

inoperable by CC.

Restore CC loop to OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition A AND not met.

B.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> CALVERT CLIFFS - UNIT 1 3.7.5-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

SRW 3.7.6 3.7 PLANT SYSTEMS 3.7.6 Service Water (SRW) System LCO 3.7.6 Two SRW subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One SRW heat A.1 Isolate flow to one 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> exchanger inoperable. of the associated containment cooling units.

---

NOTE -------

Enter applicable Conditions and Required Actions of LCO 3.6.6, "Containment Spray and Cooling Systems, 11 for one containment cooling train made inoperable by the heat exchanger.

---

ANO A.2 Restore heat 7 days exchanger to operable status.

CALVERT CLIFFS - UNIT 1 3.7.6-1 Amendment No. 230 CALVERT CLIFFS - UNIT 2 Amendment No. 206

SRW 3.7.6 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One SRW subsystem B.1 --------NOTE -------

inoperable. Enter applicable Conditions and Required Actions of LCO 3. 8 .1, AC II I I'\ O...CC..O r-c\ ().J\C..C- w l 4-tv Sources--Operating, 11 +kt- 'R \~ k. \ I'\ fbrN\u!

for diesel generator Ul "'fl\ e...,\,. Of\ lL Me_

made inoperable by SRW. \:>l'""OCJ \°'1'M-Restore SRW subsystem 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> to OPERABLE status.

c. Required Action and C.1 Be in MOOE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition A AND or B not met.

C.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.6.1 -------------------NOTE-------------------

Isol ation of SRW flow to individual components does not render SRW inoperable.

Verify each SRW manual, power-operated, and In accordance automatic valve in the flow path servicing with the safety-related equipment, that is not Surveillance locked, sealed, or otherwise secured in Frequency position, is in the correct position. Control Program CALVERT CLIFFS - UNIT 1 3.7.6-2 Amendment No. 314 CALVERT CLIFFS - UNIT 2 Amendment No. 292

SW 3.7.7 3.7 PLANT SYSTEMS 3.7.7 Saltwater (SW) System LCO 3.7.7 Two SW subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One SW subsystem A.1 -------NOTES-------

inoperable. 1. Enter applicable Conditions and Required Actions of LCO 3.8.1, 11 AC Sources-Operating," for emergency diesel generator made inoperable by SW System.

2. Enter application Conditions and Required Actions of LCO 3.4.6, 11 RCS Loops-MODE 4, for 11 shutdown cooling made inoperable by SW System.

---

Restore SW subsystem 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> to OPERABLE status.

CALVERT CLIFFS - UNIT 1 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

ADVs 3.7.18 3.7 PLANT SYSTEMS 3.7.18 Atmospheric Dump Valves (ADVs)

LCO 3.7.18 Two ADV lines shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 when steam generator is being relied upon for heat removal.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required ADV line A. l Restore ADV line to 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> inoperable. OPERABLE status.

B. Two ADV lines B.l Restore one ADV line 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> inoperable. to OPERABLE status.

c. Required Action and C.l Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND C.2 Be in MODE 4 without 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> reliance upon steam generator for heat removal.

CALVERT CLIFFS - UNIT 1 3.7.18-1 Amendment No. 311 CALVERT CLIFFS - UNIT 2 Amendment No. 289

AC Sources-Operating 3.8.1 ACTIONS

---

------------NOTE------ ------------------------- ------

LCO 3.0.4.b is not applicable to DGs.

CONDITION REQUIRED ACTION COMPLETION TIME A. One required A.1 Perform SR 3.8.1.1 or 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> LCO 3.8.1.a offsite SR 3.8.1.2 for circuit inoperable. required OPERABLE AND offsite circui ts.

Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter AND A.2 Deel are required 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> from feature(s) with no discovery of no offsite power offsite power to available inoperable one train when its redundant concurrent with required feature(s) inoperability of is inoperable. redundant required feature(s)

AND A.3 Restore required 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> offsite circuit to OPERABLE status.

OR CALVERT CLIFFS - UNIT 1 3.8.1-2 Amendment No. 304 CALVERT CLIFFS - UNIT 2 Amendment No. 282

AC Sources-Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.4.2 Perform SR 3.8.1.3 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for OPERABLE DG(s).

AND B.5 Restore DG to 14 days OPERABLE status. .....

~

c. Required Action and C.1.1 Restore both DGs on 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> associated Completion the other unit to Time of Required OPERABLE status and Action B.1 not met. OC DG to available status.

OR C.1.2 Restore DG to OPERABLE status.

I" o...c..c.or-da...t'\ll:.IL. w \-\-h. -\-h ~l~~

\ " f'o r- "'<-0.

? f'OCJr"a.JV'\

CALVERT CLIFFS - UNIT 1 3.8.1-4 Amendment No. 304 CALVERT CLIFFS - UNIT 2 Amendment No. 282

AC Sources-Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME G. Two required G.l Declare required 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> from LCO 3.8.1.a offsite feature(s) inoperable discovery of circuits inoperable. when its redundant Condition G required feature(s) concurrent with OR is inoperable. inoperability of redundant One required required LCO 3.8.1.a offsite feature(s) circuit that provides power to the CREVS AND and CRETS inoperable and the required G.2 Restore one required 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> LCO 3.8.1.c offsite offsite circuit to circuit inoperable. OPERABLE status.

H. One required ----------- NOTE------------

LCO 3.8.1.a offsite Enter applicable Conditions circuit inoperable. and Required Actions of LCO 3.8.9, when Condition H is entered with no AC power source to any train.

One LCO 3.8.1.b DG inoperable.

H.1 Restore required 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> offsite circuit to OPERABLE status.

H.2 Restore OG to OPERABLE status.

I" <:A.C. c..or-d.ci...A~ """' ,+k ~ R "~~

\t"\ \!ci-M'!..0 ~""P\e_-\,._o'°'* l1Me..

?'°j rOJ't' CALVERT CLIFFS - UNIT 1 3.8.1-8 Amendment No. 274 CALVERT CLIFFS - UNIT 2 Amendment No. 251

DC Sources-Operating 3.8.4 3.8 ELECTRICAL POWER SYSTEMS 3.8.4 DC Sources-Operating LCO 3.8.4 Four channels of DC electrical sources shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One DC channel A.1 Replace inoperable 4 hours inoperable due to an battery with reserve inoperable battery battery.

and the reserve battery available.

B. One DC channel B.1 Restore DC channel to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> i noperab 1e for OPERABLE status.

reasons other than Condition A.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />

-

o~

It'\ c>.c.c.or-do.t\ (..\... w \ ~ --\-k ~'~~

c.o~~ \(..."""O~"'"l"lMe... \:>ro~ r'~

CALVERT CLIFFS - UNIT 1 3.8.4-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

Inverters-Operating 3.8.7 3.8 ELECTRICAL POWER SYSTEMS 3.8.7 Inverters-Operating LCO 3.8.7 Four inverters shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required inverter A.1 --------NOTE -------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.8.9, "Distribution Systems-Operating11 with any vital bus de-energized.

Restore inverter to OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND B. 2 Be i n MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> CALVERT CLIFFS - UNIT 1 3.8.7-1 Amendment No. 227 CALVERT CLIFFS - UNIT 2 Amendment No. 201

Distribution Systems-Operating 3.8.9 3.8 ELECTRICAL POWER SYSTEMS 3.8.9 Distribution Systems-Operating LCO 3.8.9 The AC, DC, and AC vital bus electrical power distribution subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TI ME A. One or more AC A.1 Restore AC electrical 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> electrical power power distribution ,

~

distribution subsystems to subsystems OPERABLE status.

inoperable.

B. One or more AC vital B.1 Restore AC vital bus 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> bus subsystem(s) subsystems to i noperab 1e. ""',

OPERABLE status.

c. One DC electrical C.1 Restore DC electrical 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> power distribution power distribution Ar subsystem inoperable. ,,

subsystem to OPERABLE status.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND D.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> CALVERT CLIFFS - UNIT 1 3.8.9-1 Amendment No. 304 CALVERT CLIFFS - UNIT 2 Amendment No. 282

Programs and Manuals 5.5 5.5 Programs and Manuals inleakage, and assessing the CRE boundary as required by paragraphs c and d respectively.

5.5.18 5.5.19 Surveillance Frequency Control Program This program provides controls for Surveillance Frequencies. The program shall ensure that Surveillance Requirements specified in the Technical Specifications are performed at intervals sufficient to assure the associated Limiting Conditions for Operation are met.

a. The Surveillance Frequency Control Program shall contain a list of Frequencies of those Surveillance Requirements for which the Frequency is controlled by the program.

b. Changes to the Frequencies listed in the Surveillance Frequency Control Program shall be made in accordance with NEI 04-10, "Risk-Informed Technical Specifications Initiative Sb, Risk Informed Method for Control of Surveillance Frequencies," Revision 1.

c. The provisions of Surveillance Requirements 3.0.2 and 3.0.3 are applicable to the Frequencies established in the Surveillance Frequency Control Program.

CALVERT CLIFFS - UNIT 1 5.5- 19 Amendment No. 320 CALVERT CLIFFS - UNIT 2 Amendment No. 298

Insert 2 5.5.18 . Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09, Revision O, "Risk-Managed Technical Specifications (RMTS) Guidelines." The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODE 1, and 2;

c. When a RICT is being used, any change to the plant configuration, as defined in NEI 06-09-A, Appendix A, must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after the plant configuration change, whichever is less.

3. Revising the RICT is not required if the plant configuration change would lower plant risk and would result in a longer RICT.

d. If the extent of condition evaluation for inoperable structures, systems, or components (SSCs) is not complete prior to exceeding the Completion Time, the RICT shall account for the increased possibility of common cause failure (CCF) by either:

1. Numerically accounting for the increased possibility of CCF in the RICT calculation; or

2. Risk Management Actions (RMAs) not already credited in the RICT calculation shall be implemented that support redundant or diverse SSCs that perform the function(s) of the inoperable SSCs, and, if practicable, reduce the frequency of initiating events that challenge the function(s) performed by the inoperable SSCs.

e. A RICT must be calculated using the PAA and non-PAA methods approved by the NRC, including internal events, internal floods, and fire PRA. Changes to these PRA and non-PRA methods require prior NRC approval. The PRA maintenance and upgrade process will validate that changes to the PRA models used in the RICT program follow the guidance in Appendix 1-A of ASME/ANS RA-Sa-2009, "Standard for Level 1/Large Early Release Frequency Probabilistic Risk Assessment for Nuclear Power Plant Applications."

f. A report shall be submitted following each PAA upgrade and associated peer review, and prior to using the upgraded PRA to calculate a RICT. The report shall describe the scope of the upgrade.

ENCLOSURE 1 License Amendment Request Supplement Calvert Cliffs Nuclear Power Plant, Units 1 and 2 Docket Nos. 50-317 and 50-318 Response to Request for Additional Information Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b."

List of Revised Required Actions to Corresponding PRA Functions

Response to Request for Additional Information Enclosure 1 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 List of Revised Required Actions to Corresponding PRA Functions Table E1-1: In Scope TS/LCO Conditions to Corresponding PRA Functions Proposed TS LCO SSCs Covered by SSCs Function Covered Design Success PRA Success Comments Condition TS LCO Modeled by TS LCO Criteria Criteria Condition in PRA Condition 3.8.1.A Two qualified Yes Provide power from One qualified One qualified SSCs are modeled One required LCO circuits between offsite transmission circuit between circuit between the consistent with the 3.8.1.a offsite circuit the offsite network to onsite the offsite offsite transmission TS scope and so can inoperable transmission Class one buses. transmission network and the be directly evaluated network and the network and the onsite 1E AC using the CRMP onsite 1E AC onsite 1E AC Electrical Power tool.

Electrical Power Electrical Power Distribution Distribution Distribution System.

The success criteria System. System.

in the PRA are consistent with the design basis criteria.

3.8.1.B Four EDGs. Two Yes Provide power to One of two diesel One of two diesel SSCs are modeled One LCO 3.8.1.b per unit. safety related buses generator (DGs) generator (DGs) consistent with the DG inoperable when offsite power to capable of capable of TS scope and so can them is lost. supplying one supplying one train be directly evaluated train of the onsite of the onsite Class using the CRMP.

Class 1E AC 1E AC Electrical Electrical Power Power Distribution The success criteria Distribution System.

in the PRA are System consistent with the design basis criteria.

E1-1

Response to Request for Additional Information Enclosure 1 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 List of Revised Required Actions to Corresponding PRA Functions Table E1-1: In Scope TS/LCO Conditions to Corresponding PRA Functions Proposed TS LCO SSCs Covered by SSCs Function Covered Design Success PRA Success Comments Condition TS LCO Modeled by TS LCO Criteria Criteria Condition in PRA Condition 3.8.1.G See LCO Condition 3.8.1.A Two required LCO 3.8.1.a offsite circuits inoperable OR One required LCO 3.8.1.a offsite circuit that provides power to the CREVS and CRETS inoperable and the required LCO 3.8.1.c offsite circuit inoperable 3.8.1.H See LCO Condition 3.8.1.A & 3.8.1.B One required LCO 3.8.1.a offsite circuit inoperable AND One LCO 3.8.1.b DG inoperable E1-2

Response to Request for Additional Information Enclosure 1 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 List of Revised Required Actions to Corresponding PRA Functions Table E1-1: In Scope TS/LCO Conditions to Corresponding PRA Functions Proposed TS LCO SSCs Covered by SSCs Function Covered Design Success PRA Success Comments Condition TS LCO Modeled by TS LCO Criteria Criteria Condition in PRA Condition 3.8.4.A DC batteries Yes Ensure availability of Primary or Primary or reserve SSCs are modeled One DC channel required DC power reserve battery for battery for each consistent with the inoperable due to to shut down the each channel. channel. Three of TS scope and so can an inoperable reactor and maintain Three of four four channels. be directly evaluated battery and the it in a safe condition channels. using the CRMP.

reserve battery available The success criteria in the PRA are consistent with the design basis criteria.

3.8.4.B DC batteries, Yes Ensure availability of One of two One of two SSCs are modeled One DC channel battery chargers, required DC power chargers for each chargers for each consistent with the inoperable for cabling and to shut down the channel. Primary channel. Primary or TS scope and so can reasons other than controls reactor and maintain or reserve battery reserve battery for be directly evaluated Condition A it in a safe condition for each channel. each channel. using the CRMP.

Three of four Three of four channels. channels. The success criteria in the PRA are consistent with the design basis criteria.

E1-3

Response to Request for Additional Information Enclosure 1 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 List of Revised Required Actions to Corresponding PRA Functions Table E1-1: In Scope TS/LCO Conditions to Corresponding PRA Functions Proposed TS LCO SSCs Covered by SSCs Function Covered Design Success PRA Success Comments Condition TS LCO Modeled by TS LCO Criteria Criteria Condition in PRA Condition 3.8.7.A Four inverters per Yes Provide AC power to Three of four Three of four SSCs are modeled One required unit. vital buses inverters inverters consistent with the inverter inoperable TS scope and so can be directly evaluated using the CRMP.

The success criteria in the PRA are consistent with the design basis criteria.

3.8.9.A Two divisions Yes Provide power to One of two AC One of two AC SSCs are modeled One or more AC safety related distribution distribution consistent with the electrical power equipment. systems systems TS scope and so can distribution be directly evaluated subsystems using the CRMP inoperable tool.

The success criteria in the PRA are consistent with the design basis criteria.

E1-4

Response to Request for Additional Information Enclosure 1 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 List of Revised Required Actions to Corresponding PRA Functions Table E1-1: In Scope TS/LCO Conditions to Corresponding PRA Functions Proposed TS LCO SSCs Covered by SSCs Function Covered Design Success PRA Success Comments Condition TS LCO Modeled by TS LCO Criteria Criteria Condition in PRA Condition 3.8.9.B Four vital AC Yes Provide AC power to Two of four vital Two of four vital AC SSCs are modeled One or more AC buses RPS and ESFAS AC buses. buses consistent with the vital bus TS scope and so can subsystem(s) be directly evaluated inoperable using the CRMP.

The success criteria in the PRA are consistent with the design basis criteria.

3.8.9.C Four DC Yes Ensure availability of Three of four DC Three of four DC SSCs are modeled One DC electrical distribution trains required DC power electrical power electrical power consistent with the power distribution to shut down the distribution distribution TS scope and so can subsystem reactor and maintain subsystems subsystems be directly evaluated inoperable it in a safe condition. using the CRMP tool.

The success criteria in the PRA are consistent with the design basis criteria.

E1-5

Response to Request for Additional Information Enclosure 1 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 List of Revised Required Actions to Corresponding PRA Functions Table E1-2: In Scope TS/LCO Conditions RICT Estimate RICT Proposed TS/LCO Condition Estimate1,2 3.8.1.A One required LCO 3.8.1.a offsite circuit inoperable 30 days 3.8.1.B One LCO 3.8.1.b DG inoperable 30 days 3.8.1.G Two required LCO 3.8.1.a offsite circuits inoperable OR one required LCO 3.8.1.a offsite circuit that provides power to the CREVS and CRETS inoperable and the required LCO 3.8.1.c offsite circuit inoperable 16 days 3.8.1.H One required LCO 3.8.1.a offsite circuit inoperable AND one LCO 3.8.1.b DG inoperable 10 days 3.8.4.A One DC channel inoperable due to an inoperable battery and the reserve battery available 2 days 3.8.4.B One DC channel inoperable for reasons other than Condition A 15 hour1.736111e-4 days <br />0.00417 hours <br />2.480159e-5 weeks <br />5.7075e-6 months <br />s4 3.8.7.A One required inverter inoperable 12 days4 3.8.9.A One or more AC electrical power distribution subsystems inoperable 4 days 3.8.9.B One or more AC vital bus subsystem(s) inoperable 12 days4 3.8.9.C One DC electrical power distribution subsystem inoperable 15 hour1.736111e-4 days <br />0.00417 hours <br />2.480159e-5 weeks <br />5.7075e-6 months <br />s4 Note that the associated footnotes remain unchanged.

E1-6

ENCLOSURE 2 License Amendment Request Supplement Calvert Cliffs Nuclear Power Plant, Units 1 and 2 Docket Nos. 50-317 and 50-318 Response to Request for Additional Information Revise Technical Specifications to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b."

Supplemental Information for Response to Question 5a

Response to Request for Additional Information Enclosure 2 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 A focused-scope peer review was conducted in January 2017 to review an upgrade made to portions of the PRA that address accidents initiated by internal floods. The supporting requirements (SRs) were assessed against Capability Category II.

One Finding F&O was identified as listed in the table below.

E2-1

Response to Request for Additional Information Enclosure 2 License Amendment Request Adopt Risk Informed Completion Times TSTF-505 Docket Nos. 50-317 and 50-318 Finding from January 2017 Focused-Scope Peer Review F&O ID SR Topic Finding/Observation Status Disposition Impact to TSTF-505 Implementation IFFS-01 IFEV-B1 Internal The Internal Flood Notebook assembled Open The Internal Flood This is a IFEV-B2 Flooding in performing the upgrade to the internal notebook was updated documentation flood PRA was judged not to satisfy the to improve issue. The technical requirement that it document the documentation. adequacy was not internal flood-induced initiating events in a manner that facilitates PRA questioned.

applications, upgrades, and peer review. Essential inputs to the Not an issue for calculation of flood frequencies RICT calculations.

associated with pipe ruptures is distributed among a variety files, some of which are not formally stored with other PRA information. Reconstructing the initiating frequencies was impossible without the assistance of members of the IFPRA team.

E2-2