ML17332A279

From kanterella
Revision as of 08:08, 29 June 2018 by StriderTol (talk | contribs) (Created page by program invented by StriderTol)
Jump to navigation Jump to search
Revises 900221 Submittal in Response to NRC 890914 RAI Re post-fire Safe Shutdown Methodology at Plant.Reflash Mod Cancelled.Detailed Justiification to Support Cancelling Reflash Mod Encl
ML17332A279
Person / Time
Site: Cook  American Electric Power icon.png
Issue date: 08/24/1994
From: FITZPATRICK E
INDIANA MICHIGAN POWER CO. (FORMERLY INDIANA & MICHIG
To: RUSSELL W T
NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
AEP:NRC:0692CU, AEP:NRC:692CU, NUDOCS 9409020190
Download: ML17332A279 (12)


Text

PRIORITY1ACCELERATED RIDSPROCESSING)

REGULATORY INFORMATION DISTRIBUTION SYSTEM(RIDS)ACCESSION NBR:9409020190 DOC.DATE:

94/08/24NOTARIZED:

NODOCKETFACIL:50-315 DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATION PFITZPATRICK,E.E IndianaMichiganPowerCo.(formerly Indiana&MichiganEleRECIP.NAME RECIPIENT AFFILIATION RUSSELL,W.T.

DocumentControlBranch(Document ControlDesk)R

SUBJECT:

Informsofrevisionto900221ltrinresponsetoRAIrepost-fire safeshutdownmethodology atutil.Installing reflashcapability incontrolroomsiscancelled.

DISTRIBUTION CODE:A006DCOPIESRECEIVED:LTR ENCLSIZE:TITLE:OR/Licensing Submittal:

FireProtection

-AppR-GL-88-12NOTES:RECIPIENT IDCODE/NAME PD3-1LAHICKMAN,J INTERNAL:

NRR/DSSA/SPLB OC/LEDCR~FTL01EXTERNAL:

NOACCOPIESLTTRENCL102211101111RECIPIENT IDCODE/NAME PD3-1PDNUDOCS-ABSTRACT OGC/HDS2NRCPDRCOPIESLTTRENCL11111011D0CUENOTETOALL"RIDSRECIPIENTS:

PLEASEHELPUSTOREDUCEWASTE!CONTACTTHEDOCUMENTCONTROLDESK,ROOMPl-37(EXT.504-2083)TOELIMINATE YOURNAMEFROMDISTRIBUTION LISTSI'ORDOCUMENTS YOUDON'TNEED!TOTALNUMBEROFCOPIESREQUIRED:

LTTR11ENCL"8

'1I IndianaMichiganPowerCompanyP.O.Box16631Columbus, OH43216AEP:NRC:0692CU DonaldC.CookNuclearPlantUnits1and2DocketNos.50-315and50-316LicenseNos.DPR-58andDPR-74REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELSU.S.NuclearRegulatory Commission DocumentControlDeskWashington, D.C.20555Attn:W.T.RussellAugust24,1994

DearMr.Russell:

Thepurposeofthisletteristorevisepreviousinformation submitted February21,1990,(AEP:NRC:0692BT),

inresponsetoaSeptember 14,1989,NRCRequestforAdditional Information (RAI),regarding post-fire safeshutdownmethodology atDonaldC.CookNuclearPlant.Onpage13,ofAttachment 1,ofAEP:NRC:0692BT, wecommitted toinstall"detection systemreflashcapability inthecontrolrooms",andindicated thatthis"modification isbeingdeveloped withatargetcompletion byDecember1991."Thecommitment wasnotrequiredbytheRAIbut,atthattime,wasbelievedtobeadesirable enhancement.

OnDecember2,1991,wesubmitted AEP:NRC:0692BY, andnotedthereinthatthefirealarmreflashprojecthadtoberescheduled forcompletion byDecember31,1994,duetothecomplexity oftheproject.Afterextensive review,wehaveconcluded thatthecostofinstalling reflashcapability willnothaveacommensurate safety.benefit,-andmaynotbetechnically desirable.

Thisconclusion wasbasedonoperatorinterviews, firealarmsystemwalkdowns, reviewoftheFireProbabilistic RiskAssessment (PRA),reviewoftheDetailedControlRoomDesignReview(DCRDR),engineering evaluations ofthefireannunciator panels,andareviewoffiredetection corrective andpreventive maintenance procedures.

Attachment 1tothisletterprovidesdetailedjustification tosupportcancelling thereflashmodification.

QOUAg9409020190

'F40824PDRADOCK05000315.F.,PDR Mr.W.T.Russell-2-AEP:NRC:0692CU Inaddition, thisisaCostBeneficial Licensing Action(CBLA).Thelifetimecostsavingsassociated withthisCBLAareapproximately

$2,421,000, asdetailedinAttachment 2.Sincerely, E.E.Fitzpatrick VicePresident cadAttachments cc:A.A.BlindG.CharnoffJ.B.MartinNFEMSectionChiefNRCResidentInspector

-BridgmanJ.R.Padgett ATTACHMENT 1TOAEP:NRC:0692CU REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELS Attachment 1toAEP:NRC:0692CU Page1DuringaNovember1989meetingwithNRRandRegionIIIstaffatCookNuclearPlant,themaintenance andsurveillance ofourTechnical Specification (T/S)3/4.7.10, "FireRelatedAssemblies,"

wasdiscussed.

Amiscellaneous issuewasdiscussed regardjng firealarmsystemcircuitsupervision.

Duringthisdiscussi'on, NRCstaffinquiredifthealarmsystemhada"reflash" capability.

InresponsetotheNRCinquiry,weindicated thatreflashcapability wouldbeinstalled.

OnFebruary21,1990,wesubmitted AEP:NRC:0692BT, inresponsetoNRCRequestforAdditional Information regarding post-fire safeshutdownmethodology.

Onpage13ofAttachment 1,wecommitted toinstall"detection systemreflashcapability inthecontrolrooms"andindicated thatthis"modification isbeingdeveloped withatargetcompletion byDecember1991."OnDecember.2,1991,wesubmitted AEP:NRC:0692BY andnotedthereinthatthefirealarmreflashprojectwouldberescheduled forcompletion byDecember31,1994,duetothecomplexity oftheproject.Inaccordance withourcommitment toinstallreflashonthecontrolroomfirepanels,aplantmodification (12-PM-1015) wasopened.Thisplantmodification wassubsequently closedwhenitwasrealizedthatthescopeofworkwassignificantly moreresourceintensive thaninitially envisioned andwouldrequireacorporate (AEPSC)designchange.Subsequent reviewsandevaluations havenowdetermined thatreflashcannotbeinstalled forthefirepanelsforlessthanaminimumcostofapproximately

$2,421,000 (1993dollars,forbothunitsexcluding thesimulator).

Thefireannunciator panelsintheCookNuclearPlantcontrolroomshaveasimpleoperating sequenceconsistent withtherestofthecontrolroomannunciator panels.Whentheinputtoanannunciator dropchangesfromnormaltoabnormal, thedropwillbegintoflashandsoundanaudiblealarm.Theoperatoracknowledges thealarmbypushingtheassociated drop(whichisalsoapushbuttonswitch)whichsilencestheaudiblealarmandresultsinastanding(solid)visualalarm.Whenthecondition clears,thelightwillflashagain,alongwithanaudiblesignal,untilthedropis'epressed.

TheCookNuclearPlantcontrolroomannunciator systemwasdesignedtoprovideplantmonitoring functions andtoaddresshumanfactorsconcerns.

Thiswasachieved, inpart,bytheutilization ofsharedalarmpointinputs(multi-input drops).Thisenableseachdroptoacceptmultipleprocesssignalstoprovidenecessary information withoutdistracting operators with Attachment 1toAEP:NRC:0692CU Page2redundant or"low-level" information.

Ingeneral,multiplealarmpointinputsarelogically groupedbysystemfunctionand/orphysicallocation(e.g.,fireprotection alarmsforallfourreactorcoolantpumpsaregroupedtogetherontooneannunciator drop).Whenthefirstabnormalcondition occurs,thealarmpointcanreturntonormalonlyafterallassociated inputconditions havereturnedtonormal.Subsequent abnormalconditions wouldnot"reflash" thatalarmpointwhileapreviousabnormalcondition stillexists.CookNuclearPlantutilizesmulti-input:

dropsinaccordance withNUREG-0700 andtheAEPsystemcontrolroomdesignphilosophy.

Multi-input:

alarmswithoutreflashareusedifthequantity, sequenceorcombination ofalarminputsdoesnotchangethepriorityofthealarm,theidentityofthealarmcondition isavailable atalocalpaneloronahardcopyprintout(orstatuslight),anditdoesnotsignificantly affectthenatureoforthetimerequiredtoimplement theinitialcorrective actioninresponsetothealarmcondition.

Unitcontrolroomfireannunciator panelsconsistof150drops.Drop¹41,labeledFIRE,isareddrop(firstpriorityalarm)andwasdesignedtoclearlyindicateactuation offireprotection systems.Thisdropisonlyenergized inconjunction withanotherdropwhichidentifies theactuating equipment ortosignalthattheothercontrolroomhasreceivedtheirdrop¹41alarm.Otherfirepaneldropsareeitherred(firstpriorityalarm)indicating systemactuation, amber(secondpriority) forabnormalconditions, orwhite(thirdpriority) whichalsoindicatesyst:emtrouble.Theannunciator responseprocedures indicatetheareasand/orequipment associated witheachdrop.Formulti-input dropswhichmonitoralargenumberofzones,theprocedures requirethat,iftheannunciator orfiredetection zonelightremainsilluminated, thentheoperatormustmonitorthestatuslightsatthetopofthefireprotection panelonceperhour(administratively, onceper30minutes)forotheralarms.Thestatuslightstelltheoperatorwhichfireprotection zonehastheabnormalcondition.

Therequirement tomonitor-thefirepanelisreiterated inthe"Standing FireDetection Alarm"datasheetwhichisusedtodocumentandtrackstandingalarmsona30minutefrequency.

Inaddition, standingalarmsassociated withTechnical Specification requireddetectors locatedoutsideofcontainment requirehourlyfirewatchpatrolstoinspecttheaffectedzone(s).Detectors locatedinsidecontainment havedifferent parameter Attachment 1toAEP:NRC:0692CU Page3monitoring requirements suchasmonitoring containment airtemperatures.

Also,certaindrops,suchasdrop¹94"REACTORCOOLANTPUMPFIREORABN,"simultaneously annunciate abnormalconditions ontheir'ssociated systempanel.Forexample,afirecondition illuminating drop¹94willhaveanassociated alarmonthereactorcoolantpump(RCP)panel(locatedinthecontrolroom)indicating thespecificaffectedRCP.Thecontrolroomoperators aretrainednottotoleratestandingalarmsandfaulteddetectorcircuitsarepromptlyrepairedandwellmaintained underacomprehensive surveillance andmaintenance scheduleinaccordance withTechnical Specifications.

Standingabnormalalarmsaretrackedonadailybasisbymanagement andactionistakentokeepthenumberofstandingalarmstoaminimum.Plantprocedures andTechnical Specifications requirethatfirewatchesbeestablished forinoperable equipment andsystemsthatcouldaffectthesafetyoftheplant.Theutilization oflocalfireindicating/control panelsbyfirewatchpersonnel providesaddedassurance thatthoseareaswhicharemonitored bymulti-inputdropsinthecontrolroomarebeingadequately surveyedtoprecludepotential maskingofabnormalfireprotection conditions.

TheDetailedControlRoomDesignReview(DCRDR)examinedallmulti-input dropsandtheannunciator responseprocedures todetermine ifreflashand/orprintoutcapability wouldbeneededoradvantageous.

Theconclusion oftheDCRDRwasthatnoreflashofmulti-input alarmswasrequiredandthatthebenefitsofreflashwouldnotbecostjustified.

Irrespective ofthisconclusion, aneffortwasmadeduringtheDCRDRtoaddresstheneedtoaddalarmstothePlantProcessComputer(PPC)inlieuofsplitting multi-inputalarmsorinstalling reflashcircuitsand,itwasconcluded thataddingalarmstothePPCwouldnot,ingeneral,beofvaluebasedonoperations procedures andtheoverallcontrolroomannunciator design.Inconclusion, theintegrated useofthecontrolroomfirepanelalongwiththeassociated status.lights,thelocalfireannunciator panels,theannunciator responseprocedures, andothercontrolroomannunciator panels,providesthenecessary information toidentitydifferent alarmsignalsassociated withmulti-input drops.Inaddition, thecomprehensive surveillance Attachment 1toAEP:NRC:0692CU Page4andmaintenance ofdetectorcircuitsandthelowprobability ofautomatic detection systemfailure,furthersupportstheconclusion thatreflashcapability willnothaveasignificant plantsafetybenefit.IBaseduponthesereviews,theinstallation ofreflashcapability forthecontrolroomfireannunciator panelsclearlywillnotprovideasignificant reduction inplantrisk.Inaddition, installation ofreflashcapability isnotrequiredforcompliance with10CFRPart50AppendixR,forlicensing commitments pursuanttoNFPAcompliance, orforcompliance withtheguidanceprovidedinAppendixAtoBTPAPCSB9.5-1andourresponsetotheBTPdatedJanuary31,1977.Tosupport'he aboveevaluations, wehavealsoreviewedtheresultsoftheIndividual PlantExamination ofExternalEvents(IPEEE)FireAnalysiscompleted inApril1992.Basedontheresultsofthisevaluation, itisconcluded thatreflashcapability willnotimpacttheresultsofthefireProbabilistic RiskAssessment (PRA).Installation ofreflashcapability willnotreducethefireinducedcontribution tocoredamagefrequency forCookNuclearPlant.Finally,inaccordance with10CFR50.59 andtheguidanceprovidedinNSAC-125, anunreviewed safetyquestiondetermination wasperformed.

Itwasconcluded, therein,thatcancellation ofthereflashmodification willnotconstitute anunreviewed safetyquestionper10CFR50.59(a)(2),

nordoesitconstitute asignificant hazardtothehealthandsafetyofthepublic.

ATTACHMENT 2TOAEP'NRC'0692CU COSTBENEFICIAL LICENSING ACTION(CBLA)REVISIONOFPLANSTOINSTALLREFLASHCAPABILITY FORTHECONTROLROOMFIREANNUNCIATOR PANELS

~~IAttachment 2toAEP:NRC:0692CU Page1Regulatory Requirement:

Acommitment wasmadeinAEP:NRC:0692BT andAEP:NRC:0692BY, toinstallreflashcapability forthecontrolroomfireannunciator panels.IEffectofRequirement:

Installation ofreflashcapability forthecontrolroomfireannunciator panelswillmakethesepanelsinconsistent withtheothercontrolroompanels,andmayresultinahumanfactorsconcern.Additionally, reflashcapability willnotresultinasignificant reduction ofplantfirerisk.Rationale forRegulatory Change:Theavailability offireprotection defense-in-depth measuresensuresplantfiresafety.Thesedefensemeasuresincludethewidespread useoffiredetection andfixedsuppression systemsthroughout theplant,theavailability ofmanualfiresuppression equipment, e.g.,portableextinguishers andhosestations, theexistence ofatrainedplantfirebrigade,andthegenerally lowfireloadingspresentthroughout theplant.Basedonthejustification providedinAttachment 1anddefense-in-depth strategies, installation ofreflashwillnotprovideareduction inplantfireriskcommensurate withthecost.Approximate CostofRequirement:

Theminimumcosttoinstallreflashcapability forthecontrolroomfirepanelsis$2,421,000 (1993dollars).

Thiscostdoesnotincludeanysoftwarechanges,seismicsupportsforcable/conduit routing,modifications tothesimulator, orreplacement ofwindowdropboxes.

-RJJg