ML21040A185

IP 71111.18 Plant Modifications

ML21040A185
Person / Time
Issue date:	03/31/2021
From:	Jeffrey Bream NRC/NRR/DRO/IRIB
To:
Jeffrey Bream, NRR/DRO/IRIB 610-337-5212
Shared Package
ML21035A234, ML21089A320	List:
References
CN 21-016, DC 21-004
Download: ML21040A185 (15)

Text

NRC INSPECTION MANUAL IRIB INSPECTION PROCEDURE 71111 ATTACHMENT 18 PLANT MODIFICATIONS Effective Date: 7/1/2021 PROGRAM APPLICABILITY: IMC 2515 A CORNERSTONES: Initiating Events Mitigating Systems Barrier Integrity INSPECTION BASES: See IMC 0308 Attachment 2 SAMPLE REQUIREMENTS Sample Requirements Minimum Baseline Completion Budgeted Range Sample Requirements Sample Type Section Frequency Sample Size Samples Hours 3 temporary Temporary 03.01 Annual and/or permanent Modifications modifications per 3 to 7 36 to 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> site (2 in 2022 samples per per site1 when SAMG site1 Update sample is Permanent applicable) 1 03.02 Annual 2 to 3 at 18 to 27 hours3.125e-4 days <br />0.0075 hours <br />4.464286e-5 weeks <br />1.02735e-5 months <br /> at Modifications 0F Vogtle Units 3 Vogtle Units 3 &

2 at Vogtle Units &4 4 3&4 SAMG Update 03.03 2022* 1

• NOTE: Inspectors have the flexibility to conduct a SAMG Update sample prior to 2022 if sites have completed actions associated with commitments as discussed in section 03.03 of this IP.

If a sample is desired prior to 2022, the Inspection Manual Coordinator in NRR/DRO/IRIB shall be contacted to ensure that the Reactor Program System (RPS) - Inspections is appropriately updated.

1 Also applicable to Vogtle Units 1 & 2 Issue Date: 3/31/21 1 71111.18

71111.18-01 INSPECTION OBJECTIVE 01.01 To verify that modifications have not affected the safety functions of important safety systems.

01.02 To verify that the design bases, licensing bases, and performance capability of risk significant SSCs have not been degraded through modifications.

01.03 To verify that modifications performed during increased risk-significant configurations do not place the plant in an unsafe condition.

01.04 To verify that a sites Severe Accident Management Guidelines (SAMGs) have been updated when either the Boiling Water Reactor Owners Group (BWROG) or the Pressurized Water Reactor Owners Group (PWROG) revise generic severe accident technical guidelines.

71111.18-02 GENERAL GUIDANCE NOTE: Potential issues regarding the impact that changes have on Emergency Preparedness and Security (including Cyber Security) should be raised and addressed under their respective Inspection Programs.

Regulatory Guide (RG) 1.187 Guidance for Implementation of 10 CFR 50.59, Changes, Test, and Experiments, states that Revision 1 of Nuclear Energy Institute (NEI) 96-07, Guidelines for 10 CFR 50.59 Evaluations provides methods that are acceptable to the NRC staff for complying with the provisions of 10 CFR 50.59. NEI has also published a NEI 96-07, Revision 1, Appendix E, Users Guide for NEI 96-7, Revision 1, Guidelines for 10 CFR 50.59 Implementation. However, NEI 96-07, Revision 1, Appendix E has not been reviewed or endorsed by the NRC. If needed, questions regarding potential 10 CFR 50.59 issues as a result of a licensees use of Appendix E can be raised with the DORL PM.

The review of the design aspects of the modification should focus on conformance to relevant design criteria, not the programmatic elements of licensee programs. See Table A, Inspection Guidance for Parameters Affected by Modification for additional guidance. Consider inspecting only those parameters which are significant for the particular modification being reviewed. Also, consider informing the Regional Senior Reactor Analyst if the plant modification added or deleted functions that could affect the plant specific significance determination process worksheets.

TABLE A - Inspection Guidance for Parameters Affected by Modification Affected Parameter Inspection Considerations Energy Needs Energy requirements supplied by supporting systems when required

• Electricity under accident/event conditions.

• Steam

• Fuel + Air Energy requirements of modified SSCs will not deprive other SSCs

• Air of required energy under accident/event conditions.

Issue Date: 3/31/21 2 71111.18

Affected Parameter Inspection Considerations Materials/replacement components are compatible with physical interfaces.

Material/replacement component properties serve functional requirements under accident/event conditions. This includes potential post LOCA debris sources and blockage mitigation.

Materials/ Replacement Components Materials/replacement components are environmentally qualified for

• Material Compatibility application.

• Functional Properties

• Environmental Replacement components are seismically qualified for application.

Qualification

• Seismic Qualification Code and safety classification of replacement SSCs is consistent

• Classification with design bases.

Replacement schedule consistent with inservice/equipment qualification life.

New SSCs added to the plant have been reviewed for inclusion in the maintenance rule scope.

Sequence changes are bounded by accident analyses and loading on support systems are acceptable.

Timing SSC response time is sufficient to serve accident/event functional requirements assumed by design analyses.

• Sequence

• Response Time Modified SSC response time does not cause an unintended

• Duration interaction with other SSCs.

Equipment will be able to function for the duration required under accident/event conditions.

Heat removal requirements will be addressed by support systems Heat Removal under accident/event conditions.

Control Signals

• Initiation

• Shutdown Control signals will be appropriate under accident/event conditions.

• Control

• Logic / Interlocks Issue Date: 3/31/21 3 71111.18

Affected Parameter Inspection Considerations Equipment Protection

• Fire

• Flood Equipment protection barriers and systems have not been

• Missile compromised.

• High Energy Line Break

• Freeze Affected operation procedures and training have been identified and necessary changes are in process.

Operations Plant simulator has been updated as required.

Annunciator and alarm response updated as required.

Revised flowpaths serve functional requirements under Flowpaths accident/event conditions.

Pressure Boundary Pressure boundary integrity is not compromised.

Changes to ventilation boundaries do not increase risk of spreading contamination.

Ventilation Boundary Changes to ventilation boundaries do not adversely affect functionality of ventilation system under accident/event conditions.

Modified SSCs structural integrity acceptable for accident/event conditions.

Structural Modified SSCs structural effects upon attachment points acceptable.

Modified SSCs effect on seismic evaluations acceptable.

Process Medium

• Fluid Pressures Affected process medium properties will be acceptable for both

• Fluid Flowrates modified SSCs and unmodified SSCs under accident/event

• Voltages conditions.

• Currents Necessary Technical Specification (TS) changes have been identified and NRC approvals, if required, were obtained prior to Licensing Basis modification implementation.

• 10 CFR 50.59 Acceptable licensee conclusions for those modifications where evaluations in accordance with 10 CFR 50.59 were not performed.

Those failure modes introduced by the modification are bounded by Failure Modes existing analyses.

Issue Date: 3/31/21 4 71111.18

Probabilistic Risk Assessment (PRA)

• 10 CFR 50.69 The PRA model is appropriately updated to reflect plant

• TS Surveillance modifications.

Frequency Control Program (SFCP) Note: A regional senior reactor analyst (SRA) may be contacted if

• TS Risk-Informed support is needed.

Completion Time (RICT)

For each sample, conduct a routine review of problem identification and resolution activities using IP 71152, Problem Identification and Resolution.

Licensees implemented a voluntary industry initiative (ADAMS Accession No. ML19163A176) to address potential open phase condition concerns identified in Bulletin 2012-01, Design Vulnerability in Electric Power System (ADAMS Accession No. ML12074A115) that included either an automatic protection system or manual operator monitoring and actions. If available, licensee modifications to either the automatic protection systems or control room monitoring systems should be selected as samples. [C1]

71111.18-03 INSPECTION SAMPLES NOTES: (1) Inspectors shall use risk informed insights together with other factors, such as engineering analysis and judgment, and performance history, to determine which temporary and permanent modifications will be selected for review.

(2) NEI 96-07, Revision 1, Appendix E shall not be used by NRC staff in evaluating compliance with the provisions of 10 CFR 50.59.

Additonal guidance associated with 10 CFR 50.59 can be found in IMC 0335, Changes, Tests, and Experiements.

03.01 Temporary modifications.

a. Review the temporary modifications and associated 10 CFR 50.59 screening against the system design bases documentation, including Updated Final Safety Analysis Report (UFSAR) and Technical Specifications (TS). Verify that the modifications have not affected system operability/availability.

b. Verify that the installation of the temporary modifications (if accessible) are consistent with the modification documents. Also, if applicable, verify restoration of the temporary modification (if accessible).

c. Verify configuration control of the modification is adequate by verifying that the plant documents, such as drawings and procedures are updated including adequacy of operating and maintenance procedures.

d. Verify that temporary modifications are identified on Control Room drawings and appropriate tags are placed on equipment being affected by the temporary modifications.

Issue Date: 3/31/21 5 71111.18

e. Review post-installation test results to confirm that the tests are satisfactory and the actual impact of the temporary modifications on the permanent systems and interfacing systems have been adequately verified by test. Also, if applicable, review planned testing after removal of the temporary modifications.

Specific Guidance Preference should be given to reviewing modifications as they occur and that occur during at power operations or increased shutdown risk configurations. Selected temporary modifications may include jumpers, lifted leads, temporary systems, repairs, design modifications and procedure changes which can introduce changes to plant design or operations. Although the focus of this inspection is on active modifications, inspectors may choose to review a recently removed temporary modification for adequate restoration and testing. See Table B, Sample Selection of Temporary Modifications for additional guidance.

TABLE B - Sample Selection of Temporary Modifications Cornerstone Inspection Objective Risk Priority Example Mitigating Identify temporary Temporary Use of alternate Systems modifications which modifications which material when specified could affect the design could affect the design replacement parts are basis or the functional bases and functional not available capability of plant capability of interfacing mitigating systems systems During outages:

Temporary electrical Emphasize power to equipment modifications which required to minimize affect high safety shutdown risk significant Maintenance Rule SSCs/functions or Alternate water sources modifications which for equipment cooling or affect SSCs/functions fire protection of with high PRA rankings equipment required to minimize shutdown risk Barrier Integrity Identify temporary Multiple temporary Temporary changes to modifications which modifications to a single containment isolation could affect the design system or train, motor operated valve basis or the functional especially during designs.

capability of outages containment or reactor During outages:

coolant system Temporary Temporary power boundaries modifications which improperly routed into require operator containment when the workarounds ability to establish containment integrity is still required.

Issue Date: 3/31/21 6 71111.18

Modifications to one system may also affect the design bases and functioning of interfacing systems. In addition, similar modifications to several systems could introduce potential for common cause failures that affect plant risk. For temporary modifications, identification of temporary modifications on drawings and at placement of appropriate tags for equipment being affected by the temporary modification should make operators aware of their impact on the operation of plant equipment and components. The review of the installation (and, if applicable, the restoration from a temporary modification) ensures that the impact on the operation of other equipment is what is expected and previously analyzed, and to verify all other unexpected effects were subsequently evaluated with the results being there is no significant impact on the safe operation of plant or equipment.

The review of the post-installation test results is to ensure that the parent system remains operable and that its safety function has not been impaired. Licensees often use existing procedures, such as surveillance procedures, for post-modification testing. Although performance of existing procedures may have been reviewed by inspectors for other inspectable areas, inspectors should consider the appropriateness of using the existing procedures for validating the modification (as opposed to simply confirming continued operability).

03.02 Permanent modifications.

a. Review the design adequacy of the modification.

b. Verify that modification preparation, staging, and implementation does not impair the following:

(1) In-plant emergency/abnormal operating procedure actions (2) Key safety functions (3) Operator response to loss of key safety functions

c. Verify that post-modification testing will maintain the plant in a safe configuration during testing.

d. Verify that post-modification testing establishes operability.

e. (Optional) Verify that design and licensing documents have either been updated or are in the process of being updated to reflect the modifications. Verify that significant plant procedures are updated to reflect the effects of the modification prior to being used.

Specific Guidance Preference should be given to reviewing modifications as they occur and that occur during at power operations or increased shutdown risk configurations. Selected permanent modifications may include permanent plant changes, design changes, set point changes, procedure changes, aging management changes, equivalency evaluations, suitability analyses, calculations, and commercial grade dedications. See Table C, Sample Selection of Permanent Modifications for additional guidance.

Issue Date: 3/31/21 7 71111.18

TABLE C - Sample Selection of Permanent Modifications Cornerstone Inspection Objective Risk Priority Examples Initiating Events Modifications that Modifications to reactor increase the likelihood coolant pressure of initiating events boundary Modifications to switchyard or feedwater controls Mitigating Modifications which Modification of reactor Systems affect building drain system

• protection against external events such as Replacement of a low Verify modifications fire, weather, and pressure safety injection have maintained system flooding system injection valve availability, reliability,

• risk-significant design with a valve of a and functional features and different design capability. assumptions

• functionality of Modification to Class 1E mitigating systems used DC power supplies during risk-significant accident sequences Barrier Integrity Modifications which Modification of affect fuel cladding, personnel access hatch reactor coolant system, seal or containment Modification to post accident containment heat removal systems If an optional document and procedure updating review is conducted, examples of design documents which could be affected by modifications are: UFSAR, drawings, supporting calculations and analyses, plant equipment lists, vendor manuals, and PRA models. Examples of significant plant procedures which could be affected by modifications are normal, abnormal, alarm response, and emergency operating procedures, SAMGs, testing and surveillance procedures, and licensed operator training manuals.

Issue Date: 3/31/21 8 71111.18

03.03 SAMG Update (If applicable)

Verify that site SAMGs are updated when the BWROG or PWROG revise generic severe accident technical guidelines.

Specific Guidance Licensees have provided commitments that site SAMGs will be updated to future revisions of the BWROG or PWROG generic severe accident technical guidelines, and that the SAMGs will be integrated with other emergency response guideline sets and symptom-based Emergency Operating Procedures, and validated, using the guidance in accordance with processes outlined in NEI 14-01, Emergency Response Procedures and Guidelines for Beyond Design Basis Events and Severe Accidents. NEI 14-01, Revision 1 was issued in February 2016 (ML16224A619). Section 3.2 of NEI 14-01 discusses that the the main highlights of the site specific SAMG update process are document development, verification, and validation.

Document development entails the licensee assessing the site specific applicability of each strategy presented in the generic severe accident technical guidelines. The licensee should assess the impact of any deviations from the generic severe accident technical guidelines. The licensee verification process should confirm that any referenced equipment, user-aides, supplies, etc. in the updated site specific SAMGs are actually available. The licensee validation process should demonstrate that the updated site specific SAMGs provides the instructions necessary to implement the guidance (i.e. can operators, technicians, etc. actually follow the document). Table top exercises are one way that the licensee may validate site specific SAMG updates.

Licensees have committed to such actions within 2 refueling outages or 3 years (whichever time period is greater) of the publication date of new BWROG or PWROG generic severe accident technical guidelines. The PWROG issued new severe accident technical guidelines in February 2016 (Revision 0), while the BWROG issued a Revision 4 to severe accident technical guidelines guidance in June 2018. A list of the original licensee commitment letters can be found in an Enclosure to a NRC letter titled Reactor Oversight Process Changes to Address Severe Accident Management Guidelines with Enclosure containing Commitment Letters by Site (ML16032A029).

71111.18-04 REFERENCES IP 71111.17T, Evaluations of Changes, Tests, and Experiments IP 71152, Problem Identification and Resolution IMC 0335, Changes, Tests, and Experiments IMC 2515, Light-Water Reactor Inspection Program - Operations Phase 10 CFR 50.59, Changes, tests, and experiments.

Issue Date: 3/31/21 9 71111.18

NRC Regulatory Guide 1.187, Guidance for Implementation of 10 CFR 50.59, Changes, Test, and Experiments, Nov 2000 (ML003759710).

NEI 96-07, Revision 1, Guidelines for 10 CFR 50.59 Evaluations, Nov 2000 (ML003771157).

NEI 14-01, Revision 1, Emergency Response Procedures and Guidelines for Beyond Design Basis Events and Severe Accidents, Feb 2016 (ML16224A619).

Reactor Oversight Process Changes to Address Severe Accident Management Guidelines with Enclosure containing Commitment Letters by Site (ML16032A029).

RIS 2016-03, 10 CFR 50.59 Issues Identified in NRC's San Onofre Steam Generator Tube Degradation Lessons Learned Report, April 2016. (ML15196A575) 10 CFR 50.69, Risk-Informed Categorization and Treatment of Structures, Systems and Components for Nuclear Power Reactors.

END Issue Date: 3/31/21 10 71111.18

Attachment 1 - Revision History for IP 71111.18 Commitment Accession Description of Change Description of Comment Resolution Tracking Number Training Required and Closed Feedback Number Issue Date and Completion Form Accession Change Notice Date Number (Pre-Decisional, Non-Public Information)

ML073050453 New procedure. Combined contents of N/A 01/31/08 No N/A IP 71111.17A and IP 71111.23 into IP 71111.18 CN 08-005 N/A ML082670330 Revise to include consideration of GS -191 issue No N/A 10/31/08 related to potential sump blockage. Editorial.

CN 08-031 N/A ML101320542 Changed the minimum sample requirement from 3 No N/A 12/21/10 temporary and 1 permanent modification reviews to 3 CN 10-028 to 7 temporary and/or permanent modifications (feedback form 71111.18-1475).

Issue Date: 3/31/21 Att1 - 1 71111.18

Commitment Accession Description of Change Description of Comment Resolution Tracking Number Training Required and Closed Feedback Number Issue Date and Completion Form Accession Change Notice Date Number (Pre-Decisional, Non-Public Information)

N/A ML15208A031 Revisions are made in order to: (1) ensure that No ML15208A095 11/13/15 security related issues identified as a result of 71111.18-1851 CN 15-024 changes are raised so that they may be considered ML15306A013 under the Security Inspection Program; (2) ensure 71111.18-2063 that there is awareness that changes to aging ML15306A015 management programs associated with 10 CFR 71111.18-2110 54.21(d) are within scope of this IP; and (3) ensure ML15306A017 that there is awareness that NEI 96-07, Revision 1, 71111.17T-2145 Appendix E has not been reviewed or endorsed by ML15306A011 the NRC.

Feedback forms incorporated into this revision:

71111.17-2145.

Feedback forms reviewed but not incorporated:

71111.18-1851, 2063, and 2110.

Issue Date: 3/31/21 Att1 - 2 71111.18

Commitment Accession Description of Change Description of Comment Resolution Tracking Number Training Required and Closed Feedback Number Issue Date and Completion Form Accession Change Notice Date Number (Pre-Decisional, Non-Public Information)

N/A ML16138A284 Revisions are made to: No ML16146A057 ML16306A185 11/17/16 (1) Provide oversight of licensee commitments to 71111.18-2212 CN 16-031 consider Severe Accident Management Guidelines ML16188A244 (SAMGs) within plant configuration management processes in order to ensure that the SAMGs reflect changes to the facility over time. Additional background information can be found in SRM SECY-15-0065 (ML15239A767) and a February 23, 2016 letter from the NRC to NEI (ML16032A029). The February 23, 2016 letter, which also references the SRM, is added to the References section.

(2) Address use of mandatory and discretionary language concerns and recommendations found in OIG-16-A-12 (ML16097A515).

N/A ML18176A157 Revisions are made to: None ML18179A041 11/19/18 (1) Provide oversight of licensee commitments to CN 18-039 update site specific SAMGs when the PWROG/BWROG issues revised generic severe accident technical guidelines. Additional background information can be found in SRM SECY-15-0065 (ML15239A767) and a February 23, 2016 letter from the NRC to NEI (ML16032A029). (2) Conform to new IP format requirements found in IMC 0040 (ML18003A122).

Issue Date: 3/31/21 Att1 - 3 71111.18

Commitment Accession Description of Change Description of Comment Resolution Tracking Number Training Required and Closed Feedback Number Issue Date and Completion Form Accession Change Notice Date Number (Pre-Decisional, Non-Public Information)

N/A ML19070A127 The following changes were made: 1) Sample None N/A. Document issued 04/01/19 Requirements revised to indicate SAMG Update final without formal CN 19-011 sample required in 2022. Inspectors have flexibility comment period.

to sample earlier if desired. 2) Guidance on optional Regional Technical document review associated with section 03.02.e Support contacts was in incorrect section, so it was relocated to informed of IP revision appropriate guidance section (editorial change). 3) prior to issuance.

Specific guidance on SAMG Updates is revised to discuss location of licensee SAMG commitment letters.

N/A ML19197A103 The following changes were made: 1) add guidance None ML19210C940 11/26/19 to consider plant modification changes to PRA for CN 19-038 sites that have adopted provisions of 10 CFR 50.69, TS SFCP, or TS RICT. 2) Current Note in General Guidance states that Potential issues regarding the impact that changes have on Emergency Preparedness and Security should be raised and addressed under their respective Inspection Programs. Note is revised to reiterate that Cyber Security issues fall under the Security Inspection Program.

N/A ML20238B974 Revisions are made to add inspection samples None ML20239A739 10/05/20 specifically for Vogtle 3 & 4 as identified in SECY CN 20-046 0050, Planned Revisions To The Baseline Inspection Program For The AP1000 Reactor Design, (ML20058F491).

Issue Date: 3/31/21 Att1 - 4 71111.18

Commitment Accession Description of Change Description of Comment Resolution Tracking Number Training Required and Closed Feedback Number Issue Date and Completion Form Accession Change Notice Date Number (Pre-Decisional, Non-Public Information)

C1 ML21040A185 Revised to incorporate Commission direction in None ML21040A186 SRM-SECY- 3/31/21 SRM-SECY-16-0068 to update the ROP to provide 16-0068 CN 21-016 periodic oversight of the industrys Open Phase Condition initiative Issue Date: 3/31/21 Att1 - 4 71111.18