ML17309A655
| ML17309A655 | |
| Person / Time | |
|---|---|
| Site: | Ginna |
| Issue date: | 06/07/1999 |
| From: | Mecredy R ROCHESTER GAS & ELECTRIC CORP. |
| To: | Vissing G NRC (Affiliation Not Assigned), NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| References | |
| REF-GTECI-A-46, REF-GTECI-SC, TASK-A-46, TASK-OR TAC-M69449, NUDOCS 9906150159 | |
| Download: ML17309A655 (289) | |
Text
ROCHESTER GAS AND ELECTRIC CORPORATION
~89 EAST AVENUE, ROCHESTER, N.Y.14649-0001 Roben C.Mecredy Vice President Nuclear Operating Group June 7, 1999 U.S.Nuclear Regulatory Commission Document Control Desk Attn: Guy Vissing Project Directorate I-1 Washington, D.C.20555-0001
Subject:
Response to RAI Regarding Verification of Seismic Adequacy of Mechanical and Electrical Equipment (TAC No.M69449)R.E.Ginna Nuclear Power Plant Docket No.50/244
References:
A.Letter from Guy S.Vissing (NRC)to Dr.Robert C.Mecredy (RG&E)"Request f or Addit ional Inf ormation (RAI)Regarding the RE Ginna Nuclear Power Plant, Summary Report on the Verification of Seismic Adequacy of Mechanical and Electrical Equipment in Operating Reactors, dated January 31, 1997" (TAC No.M69449), dated 3/10/99 B.Letter from Robert C.Mecredy (RG&E)to Document Control Desk (NRC), dated January 31, 1997t"Resolution of Generic Letter 87-02, Supplement 1 and Generic Letter 88-20, Supplements 4 6 5".
Dear Mr.Vissing:
Enclosed are Rochester Gas Sc Electric's responses to NRC Request for Additional Information (RAI), reference A.Very ruly yours,Enclosures Robert C.Mecredy xc: gr.Guy S.Vissing (mail stop 8C2)Project Directorate I-1 Division of Reactor Projects-I/II Office of Nuclear Reactor Regulation U.S.Nuclear Regulatory Commission Washington DC 20555 Regional Administrator, Region I U.S.Nuclear Regulatory Commission 475 Allendale road King of Prussia, PA 19406 U.S.NRC Ginna Senior Resident Inspector J
RG&E Responses to NRC RAZ, 3/10/99 NRC RAZ a: Describe what reviews were performed to determine if any local operator actions required to safely shutdown the reactor(i.e., implement the SSEL)could be affected by potentially adverse environmental conditions (such as loss of lighting, excessive heat or humidity, or in-plant barriers resulting from the seismic event.Describe how the staffing was evaluated and describe the reviews which were conducted to ensure operators had adequate time and resources to respond to such events.RGSE Response a: During the SSEL development engineering personnel performed thorough plant walkdowns.
Those walkdowns identified several areas where seismic interactions could cause collateral damage which could complicate achieving, saf e shutdown.En the development of the SSEL the equipment outliers were characterized as Group A and Group B Outliers.Group A outliers consisted of equipment that could sustain a potential loss of function which normal proceduralized operator actions do not compensate for;Group B outliers consisted of equipment which could lose its preferred mode of operation or had the potential to mal-operate and require compersatory manual operator action-.The resolution process of the Group B outliers directly addressed the issues identified in this request for additional information.
RG&E developed a Group B outlier resolution plan which was chartered to examine: "The cumulative a f f ect of the losses of pre f erred modes of operation, and the subsequent manual operation of SSEL equipment, should be studied to examine the possibility of physical or procedural enhancements.
These studies may also include margin studies to aid in defining the priorities in which manual actions should be taken".An operations shift crew was detailed to work on the issue.The SSEL development engineer and the seismic engineer provided training delineating the SSEL development and the expected plant damage states.
The operations crew was then commissioned to perform plant walkdowns and table top discussions to validate the ability to achieve the desired equipment operations.
The engineering staff provided"analytical obstacles" that had to be defeated.These obstacles included: Debris fields Expected harsh environments Blocked/jammed doors Communication system failures Lighting failures Specifically the'operators were tasked to: 1)Verify the procedural set analyzed'n the SSEL was correct.2)Review the order in which equipment is operated and the time it takes to cascade to the SSEL equipment through procedural compliance.
3)Identify procedural weaknesses, i.e., identifying where doing things in the wrong sequence (from a priority standpoint) might lead to difficulties in achieving safe shutdown.4)Walkdown selected procedure steps.The walkdowns included time penalties incurred f rom working around earthquake induced damage.(i.e., block wall rubble, minor leaks, the need to use ladders, etc.)The outcome of the operator reviews revealed that the primary obstacle to achieving'safe shutdown was due to both direct and secondary damage incurred from intermediate building block wall failures'hen the operators were confronted with the plant damage state, (including potential hazardous environments) incurred from postulated failures in the building level which contains the steam'eader, they expected to experience delays which could hinder the achievement of safe shutdown.Accordingly, the impediments were resolved by per f orming an engineering modification to the affected wall panels which would preclude seismically-induced failure.Additionally the operators identified the need to provide additional procedural clarifications detailing expected seismically induced equipment losses and guidance as to how to mitigate those losses.The effects of the plant modifications along with the procedural enhancements were then reviewed to ensure that a normal operating shift compliment had sufficient resources and adequate time to achieve all actions necessary to safe shut down.The plant SSEL, revision 1, addresses.
the resolution of the Group A and Group B outliers and includes a description of how resolution was achieved.The table summarizing resolution of all USI A-46 outliers is provided in Enclosure 2.
NRC RAZ b: As part of the licensee's review, were any control room structures which could impact the operator's ability to respond to the seismic event identif ied?Such items might include but are not limited to: MCR ceiling tiles, non bolted cabinets, and non-restrained pieces of equipment (i.e., computer keyboards, monitors, stands, printers, etc.).Describe how each of these potential sources of interactions has been evaluated and describe the schedule for implementation of the final resolution.
NRC Response b: During the development of the Safe Shutdown Equipment List (SSEL)and subsequent SQUG walkdown of this equipment various seismic interactions were identified and resolved.The R.E.Ginna Nuclear Power Plant Control Room was determined to house ten major SSEL components.
Each component walkdown was documented in a Screening Evaluation Work Sheet (SEWS).A review of these SEWS revealed 7 out of the 10 components had at least one seismic interaction concern.These interactions included an unsecured cabinet, copier, step ladder, and air sampler.An unanchored
'ail box, miscellaneous storage cabinets, control room ceiling tiles, and adjacent masonry walls were also identified.
The seismic review team directed removal of identified seismic hazards, researched the control room ceiling evaluation, and documented the block wall qualifications.
The SRT confirmed hazard removal in July 1996 and documented equipment seismic acceptance on component SEWS.
NRC RAI c: Describe what reviews were performed to determine if any local operator actions were required to reposition"bad actor relays".For any such activities describe who adverse environmental conditions (such as loss of lighting, excessive heat or humidity, or in-plant barriers)resulting f rom the seismic event were analyzed and dispositioned.
Describe how staffing was evaluated and describe the xeviews which were conducted to ensure operators had adequate time and resources to respond to such events.RG&E Response c: RGEE performed a comprehensive evaluation of all relays associated with the SSEL (App.G of the January 31, 1997 submittal).
All relays which were defined as'low ruggedness'elays were modified or replaced, in accordance with the schedule provided in Enclosure 2.There are currently no'low ruggedness'elays associated with the Ginna Station safe shutdown methodology equipment, and therefore no local operator actions are credited for resetting such relays.
NRC RAI d: Describe which of the operator actions associated with resetting SSEL equipment affected by postulated relay chatter are considered to be routine and consistent with the skill of the craft.If not considered skill of the craft, what training and operational aids were developed to ensure the operators will perform the actions required to reset affected equipment?
RG6E Response d: As stated in response to RAI d, no local operator actions are credited for resetting relays in the Ginna Station safe shutdown methodology
.
NRC RAI e: Assume the alarms associated with the"bad actor relays" are expected to annunciate during the seismic event.Do the operators have to respond to those annunciators and review the annunciator response procedures associated with them for potential action?How would those additional actions impact the operators ability to implement the Normal, Abnormal, and Emergency Operating Procedures required to place the reactor in a safe shutdown condition?
RG&E Response e: This issue has previously been the subject of discussion between SQUG and the NRC, and has already been resolved.For completeness, we will summarize this resolution:
As described in EPRI Report NP-7148, Section 3.5.3, following an earthquake which causes a turbine and reactor trip, 50 to 100 or more alarms are expected to annunciate.
The operators will clearly be aware that the plant has tripped.Plant procedures and operator training require that operators response to the turbine trip and reactor scram by confirming the scram and trip and checking important levels, temperatures, pressures, flows, and electrical switching resulting from associated power transfers.
These confirmatory checks will take more than a minute to go through during which time the operators will be busy making these checks and not responding to specific alarms.The earthquake motion is assumed to last less than a minute and the causes of the spurious alarms will have gone away during this period while the operators are responding to the plant trip.As concluded in EPRI NP-7148, Section 3.5.3, p 3-12,"Accordingly, there appear to be no reasonable bases or evidence which would suggest that spurious alarms resulting from an earthquake may lead to abnormal operator responses.
Therefore, special operating procedures or relay evaluation actions to address potential spurious alarms are not considered warranted and relays af f ecting alarms need not be seismically adequate'~
" The NRC staff accepted the relay functionality review procedure summarized in GIP-2 and described in detail in EPRI NP-7148 (including the above conclusion) in Supplemental Safety Evaluation Report No.2 on GIP-2.Therefore, RGSE does not consider it necessary to perform any additional reviews of the effect spurious alarms caused by"low ruggedness" relays or other causes as a result of a seismic event.
NRC RAZ f: To the extent that Normal, Abnormal, and Emergency Operating Procedures were modified to provide plant staff with additional guidance on mitigating the A-46 Seismic Event, describe what training was required and provided to the licensed operators, non-licensed operators, and other plant.staff required to respond to such events.RGEE Response f: Only minimal changes were required for plant procedures to account for the effects of the A-46 Seismic Event.Because Ginna uses Alternative Shutdown post fire methodologies the RGEE staff was already familiar with ex-control room manipulations to achieve and maintain safe shutdown.The normal and abnormal operating procedures provided for all functional requirements necessary for post seismic safe shutdown.The SQUG driven procedure changes consisted of guidance steps added to procedure ER-SC.4, Earthquake Emergency Plan.For the most part, the additional guidance took the form of reminders-prompting the operators as to the expected worse case equipment losses and to the correct procedure and step which mitigates that loss.The procedure changes were reviewed by the Emergency Procedure Committee prior to submittal.
A training request (TWR 1998-0700)was included with the procedure change submittal.
The training department reviewed the change and determined tht read and acknowledge was the appropriate training method.To that end, the changes were reviewed by all operators, shift technical advisors and licensed instructors.
0 OUTLIER TABLE-INCLUDES AQS, GROUP B<Airy Rcv.4, 4/IS/99 DESCRIPTIOH Molor Conkd conbls C.O.Hand J Molor Conkd Cenbrs L and M REQUIRED FUN CTIOH Obhbde power>>ld dr cuit breakers plovld4 lsd¹ion OUTUER ISSUE These MCC'a aro Noor mounkrd and>>o 15 doop.Per the GIP anMCC naslbo 10 deep or be lop braced.A numb<
- >n 10 deep Ihsl saw ground motion onlho ord<<ol the SOUG Rel<<ence St>>ckum (0.5 g ZPA).Since U>>n, Ihe dhlabsso hss been expanded.SutUdent evidence b svsibtAe lo domonsVslo capacity above 0 2 g.Ground Va br MCC's bw in s such as Iheso.Anchorage c¹cubgons wore p<<to/mod using knockdowll tadors br bw conaolo strength, ossonUal relays and unknown anchor type.The reductbns were 0.15 x 0.75 x 0 0~0.3 (base aaowsbb)and N>>resuN was a malgh ot 1.19 whkhb consldersbb considering N>>reducUon taken lo mod U>>GIP aN<<la.N>><<nbedment dopgr shoukt bo v<<led and a boN Ughk>>ss check made.Tho Nn¹report br EWR 2013 stela N>>IN>>anchorage Ior MCCMhas a tsdord sat x 10.RESOLUTIOH PLAHlSCHEDULE Fhakzo doaxnordation ol capacNy h 1991.CATS R05S24 Verily emlxxknenl and boN Ughlness dudng 1997 lokrokng odago.II nocess>>y kalA modgk¹bn durhg 1999 RFO.RESOI.UTIOH DOCUMEHTS SNA Anelysb 93C2709 C022 Revbod SEWS 9/30/90 wore I9701247 and 19701240 vorlod<<at>>dnl<<lb and torque STATUS Embedn>>nta and lorquos accoptstdo.
Updated SEWS 3/17/90.OuWer ctoood.52/8YA 52/8YB 52/RTA 52/RT8 BUS 10 Rssdor Trip Breakers Tdp Roador and Reacbl Tdp Bypass Breakers Bus 10 SwNctlge>>tk>>10b adtscod ARB IRC10.The dssranco varies born 3/lPlo almost nN at exposed boN hoods.Bus 10 contains essonUal r obys so Oh conhgursUonb an htsrsdbn ouU>>r because ol N>>possibb lmpsd d U>>cstkl¹.The Roador Tdp breakers ION open (Raacbr'Tdp).They open onbss d DC power and bss ot MG setL Ho asckbb taNuro mode exbb kw UUO scenado.Bus 10 contak>>essenNal.chsUer senaRw relays.Tl>>concern b Ur¹rack lo rack Impacts c>>l cause relay chan<<.It b nol Nk¹y N>>t pdonUsl hUracts between Ihese est@>>ts.The reby cabhel b moulded at N>>ond ot BUS 10.BUS 10 b 100 bng, 50 deep, 70 IUgh and weighs about 150009.The leby cabhet ls 70 ION.24 deep and bng and weighs about 10009.Tt>>swNdlgear csbhot wiN nol dispbco much at aN abng Ks bng dimension and Iho rrNsy cabhel msy Impscl N bd wkh knb otloct.This b pul¹y a SQUG concern and oubkb ot N>>or'e barb.BCN cabhots bgoth<<dudng 1991 ro4olhg outage.CATS R05)I20 Need bU>>tusUtyhg acceptance (Dove WUsolvkN)F)
PCR 997435 DACE 97423 Docxansntagon provided by'I 2/7/99 0 WNaon to FNzshsool>>
OuWw cteood cola>>dod~wotdod cgp~ngbe.InstaN, ConUU¹~t I/gr.Upd¹ed SEWS 3/I 7/90.OutN<<C400ed OUTLIER TABLE-INCLUDES AM, GROUP 8 Rcv.4, 415/99 OESCRIP'TIOH Cunent LimNng Reacbls REQUIRED FUNCTION OUTUER ISSUE Two bliss.8>>SRT judged Q>>csbhots lo bo fakfy Qexibb I<8 Hr).Q>>lebre 1.5 x BS vs.Fbor spedrs wss used.The FRS exceeds 1.5 x BS.Hso.Ihe cabinet structure b quesbonsble due lo Ihe lsttbsd panelson the konl snd back.INTERQl ACCEPTASILITy Tho btticod (sknssr lo expanded rnolsi)pÃlob on Iho fmnt and back of rhe cabinets roquko additional anaiysb Io delormhe Ihe true cspacky ol tho cabinets, or Ihe sdditbn of skffonof S.Tho cspacky may nol qugo nleol 8>>current Rog.Gukb Ibor specks, bul woukf Ossify meal original design specks.RESOLUTIOH PLANISCNEOULE Perform arkQtbcud anslysb b dolormhe capscNy by snd of 1997.If modigcatbnb necessary Instal dudng I QQQ RFO CATS R05827 RESOLUTION DOCUKENTS S4A crdcrdagon No.92C2750C421 STATUS TEQOQA.I TE~I LT-50S RCS Loop A Ilot Leg Temp<<strxe Element RCS Loop B Cold Leg Temperature Ebmenl SIG A Wde Range Level Transmktsr RCS Hot Leg Temperature hdicatbn RCS Cold Leg T<<nperakxe hrgcason Requkedbr SG A Level Cables h BW trays Cabbs h BW Trays Cabbs in BW Trays Temperature hrgcsgon Is doskod lo monsoc cool down rates snd roscdr colo delta T's foc nskxsl drcubtbn.Shoukf bop A hdicabon be bat.loop lsmpocstures can be obtshodby msnusly resdhg 8>>rosbbnce ol other RTO's h 0>>RCS bop.The pcocess Invohies obtshhg ee proper measuring device.Iehg leads ln csbhets ln 0>>roby loom, takhg cesbtanc>>resdhgs and converlhg Ihose lo bmperstures.
Hthough Ihb ls a fskfy sfmpb procedure snd hss been perlom>>dh Q>>pssL 8 b nol s See TEROQA-I OQ>>r wide range level kxfbatbn dovbes are avagsbb, bul Q>>y have power hterdepond<<xkes Q>>t may make them suscoplibb d oQ>>r slngb fsgules.Shoukl 8 be necessary, S!G h wkle range level can be obtshed by msnusyy losdhg Q>>curronl loop sssodsled wtsi bop LT-505.This Irwotves obtshhg Q>>proper messurhg oquiprnonl.
ktgng leads In a cabhol h 8>>roby coom.taking a current measurement snd coclv<<thg Q>>t lo s bvol rosdhg.Although the process b slmpb, 8 b not a nonnsly ocoduco.P<<form addigonal anslysb d dotormhe cspadty of bbck wsQO.IPEEE anslysb showed adrstbnal capadty we4 above Q>>t reported durhg IE 801 I rosokrtbn.
Procedure&be QnaQzed In 1997.If n~bagons sre nscess<<y, they wNbe perfom>>d durhg 199Q RFO.CATS R05828 See TE~1 CATS RO5828 Same as TE~I CATS R05829 Rosokrson d hdude lakhg manual rosdhg NR ThfTC provides CR kxgcNon hdd al no bad lave unN ready d uso RTD reargngL change SSEL-hdd HR d SSEL ER-SCA Rev.4 SSEL Rev.1 change SSEL-hdd HR lo SSEL, ER-SCA Rav.4 Cen use SAFW Qow snd pressurizer presa have akeady changed FR's d OQow use SAFW Qow le GIPed.hdd SAFW Flow d SSEL SSEL Rev.I 423rgg PCN.ER-SCA Rev.I signed 2I tgrgg SSEL Rav.1 SEWS cpdetea requksrL CCVF OuNec closed Oaw WQeon PCH.SSEL Rav.1, ER-SCA OuNer cdeed Oave WQeon SSEL Rev.1 OwNer cdeod OUTLIER TABLE-INCLUOES AQB, GROUP B Rcv.8, ALIIS/99 BTRTA BIRTB Be&cry Racks A and 8 DC Power Cols lack dose Qtthg spscors between ceKS snd K>>anchorage ol the racks hr norpr south bade does nol meal Iho GIP requkon>>nts The be&cry racks moot Ihe crsrent design basis lor seismic boding in borh horizontal dkectbns.A modi&cstion lo meal GIP cntens Is h the design process snd wlK be cornfNeted no bter Ihsn Ihe nexl refuothg outage (1997).CATS R05830 PCR 99743d Iralsped mods.1997.Need now mod.hr lerpsr battodos.Buylnp qusK&ed rake: hstaK h 99 RFQ.w.o.'e 19702770.19702771~ohmtcapy quapped lacks h 1999.Sewa PT468 SIG A Pressure Transmitter SIG Pressure Invesligstion ol bbck wsÃs hr tt>>IPEEE showed ddiibonsl msrgn above Ihsl evslusled durhp IE BuNsth 80.11.This anstysts shows thol the wsNs are scceptsbh hr the original design spedrs snd possibly for 9>>crsrent R.Gukh a.Same ss TE<OQA.I CATS R05831 QusiKy wsl 97f-Nl DACE-QQ4lf qus8&ed 0>>wa8 K>>rehro removhp 9>>hlersdbn Westhghouso CRN-1 Relay Demand i GERS hr a8 states The relays noot 9>>demand based on Ihe orighsl pround spedrs Induding in csbhel smptt&cstbnhr sK operslnp slates ol Ihe relays.Thefebre they meet oul crÃront desipn basis.Analyze cobhet b dolanoho PCR 997431 sdusl demand.K mod.roqukod.Instep In IQQ7 RFQ.CATS R05832 Door opener 11IQT.Updeled SEWS 11$8.C4Qec closed 42I350SA 42I3505A Westhgtrouse CRN-IRshy Westhghouse Size 2 DC Motor Starter InM4 V3504 A and MS 4 V3505A Cabinet ampk&cstion unknown.outKer K i 1.8 Tho lrNsys meet Iho demand based on 9>>EÃlghst ground Analyze csbklet lo dotormho PCR QM3f spedrs.hdudhg h cabhel amf~tbn for aK operspnp actual demand.Nmod.req'4 states ol Ihe retsys.Therehre they meal oui current hstsK ln IQQ7 RFQ.desipn basta.CATS R05&32 Requke lurp>>r analysts lo detormhe cabhel amph&colon.
See Group 8 bebw waK ls Vstves sro Group 8 ouWers tbhck wa8)-soe rKscussbn hr Group 8 bobw and ln 9>>SSEL Report CATS R05838 W.O.I980IM3 Door esenor mode.Instaped 11$7.Updelod SEWS 11$8.Oufper chood KOIIDGA Kf X/DGB KO.A K4.8 AKsn Brarpey 200EOOZI A Relay POuer Brumr>>td 8739-In DGACP&83 A2 Relays DGBCP No Dais Need lo Invessgste
-ekher pel dots.tost robrys~replace Detennh~~dm wkh relays ol known ruggedness.
I~coopt or replace by 8>>ond ol K>>1997 RFQ Need lo Invesbgale
-either gel data.Iesl relays or replace Detennhe cspsdty snd ekher wkh relays ol known ruggedness.
replace by K>>end of 8>>1997 RFQ PCR 97432 Rebya rofNscod ,I II97.Updated relay oval.Shts 3I I yl98.DutKer dosed Relays replaced I IIQ7.Updated relay evsl Shts 3l1 yl98 Outger closed
OUTLIER TABLE-INCLUDES A~, GROUP B Rcv.4, 4II5/99 OSR A OSR-8 VFX.I.A VFX-I.B VFX-2.A VFX-2.8 Alen Brscley 200E400ZIA Rdays Alen Brscley 200E300Z IA Relays Alen Bradley 200E300Z IA Redye CaMe Trays In Accc.Sdg.EI.253 CaMe Trays No Osis Hanger A834 does nol meal lhe Lhv'ted hndythal Review requkemend due lo Ue bendhg momenl devehped h Ihe hodzondl member sl Qe lop ol the hanger Rsl spans between Ite anchors.Need lo Inveslgsle
-either gel data.leal rdsys or reptsce wlh rdsys ol known ruggechess.
Need lo InvesUgale
-erther gel data, leal rdays or repdca with rdsys of known ruggedness.
Need lo InvesUgste
-dther gel data.lest redye or replace wWr rdays of known ruggedness.
Upon further hvesegsgon and Inspeclon by p.Zebroskl and S.AnsgnoNs 9 was judged Qurt even U Qrd hangar wss lo be removed (fsl j, Ihere was su%dent support provided by~hangers lo mahtsh Qe ccarent configurseon.
Thd d an erdremdy congested area, wlh csbdkays brsnchhg snd dlopphg hh BUS Ie.Oetelmhe cspscly and dther accept or replace by 9>>end of the 1997 RFO Oelermhe cspsdty and elher sccepl or repdce by Ihe end of Ihe 1997 RFO Petennhe cspscly and eWer accept or repdce by 9>>end of Ihe 1997 RFO Fhslxe analysis and dther accepl or modify by Qe end ol ere 1997 RFO.CATS R05034 PCR 974I35 owG 33013-274e ohcE-974we Relays repdced 11IQ7.Updsdd rday evaL Shd 3IITIQe.Outgec dosed Rdays replaced 11I97.Updsdd redy eval.Shd 3ltylge.Outeec cheed Relays repdced t tl97.Updsisd rdsy eval.Stds 3l tylge.Outger cheed Suppod~nIINlcNnsnts Inetaled I II97.Ravded OSVS 4I3IQe.Ocdger dosed A82710 INT271 HOT CsMe Trays hhux.Sdg.El.271 CaMe Trays In InL Mdg.Chan Sde EI253 CaMe Trays In InL Sdg.Controled Sde E1271 Cable Trays In Inl Sdg.Contloaed Sde EI 271 12'cathe tray d supported on a bhck wae neld lo Ue Ird pool.Sock Wsl Problems and tray span~10'ue lo nisshg hortzontd suppon member CaNe were Inveslgaled as pit ol Qe bkck wal efhrt Csbds were Invesggded as part of 9>>bhck wal dhrt Cables were hvcrsUgsted as part of Ihe bhck wal effort See bhck wal clscceston In SSEL Report and Group 8 resok4on.CATS R05837 See bhck wal clscusslonh SSEL Report and Group 8 r esohthn.CATS R05937 See bkck wse discussion h SSEL Report and Group 8 resokrgon.
CATS R05037 See bhck wsl discus shn h SSEL Report snd Group 8 resoLAon.CATS R05837 ER-SCA Rev.4 SSEL Rev.1 ER-SCA Rev.4 SSEL Rev.1 ER.SCA Rev.4 SSEL Rev.1 ER SCA Rev.4 SSEL Rev.1 Procedures Iretsled Oudter closed OUTLIER TABLE-INCLUDES A46, GROUP B Rcv.4, 4/1509 3410 3411 SrGAKB Abnosphoric relic!valves VaNe musl Group B rema@dosed.Opens on LOOP.Musl nol FO.NC and FC on loss ol OC or IA See above.See above.tB 218'R Sourh ot waNs 2I.3I.4l.5l See above.W.O.19801843 See above W.O.19801643 Fbr wsl elF Qne PCR 96022 OA.CE.96095 ER-SC.4 Rev.4 SSEL REv.1 Fbr wal elF Ine PCR 96422 DMX-98495 ER.SC.4 Rev.4 SSEL REv.1 Proceduree and mode.InslaQed OuWer cleeed Pressurlror Healer See above.See above.See above.CATS lO R06966 Procedrre chango: PuQ Qrse ER.SC.4 Rev.4 SSEL Rev.1
OUTLIER TABLE-INCLUDES A46, GROUP 8 Rcv.4, 4II5/99 INT218 CLEAN INT298 Ct.EAN INT293HO 1 4813 4814 4M4 4773 5735 5738 5737 S738 3504A 3505A Cable Trays in Inl.txdg.Chan Sde Eb.278 d 298 and Conko8ed Sde EL.293 Turbhe Bldg.SW botsthn Vahre Turbhe Sdg.SW bobdon Valve Ak Condi8onhg SW botathn Valve Turbhe Sdg.SW bobthn Vahr~Ak Corrdrgonk~
SW bolaSon Valra SIG A d 8 Bhwdown Sample botadon Valves SIG A d 8 Bhwdown botsthn Vires SIG A d 8 Slesm Supply Valves lo TDAFW Pump Csbh trays Servhe Water Isobtion NO.Musl Chse.(b8 dosed on hss of DCalA)NO.Musl Chse.(bd dosed on loss of DC a IA Loss ol psfeenrad mode ol opera8on.See SSEL Report for r0scusston and detads.AOV on 3I4 Ine.Vahres loo dexhb.Csbhs were hvesttgsted as part ot the bhck waa elhrt See above.SOUG hdushn rube hr Ass spectfy 1 or larger ine.The Qne b Iskly wed supfxxkxf verthaly, bul Ihe vshre can put s kxshnal had on Qra pipe trat shoukl be evahabd lo meet Ihe htent of Oo cavaaL Thb b s new SQUG crtterb-Ihe cunsnl dcense basb does nol hcfude any such Qmk on pipe frne size.Ptpe sksss.See above.See above.IB 278'4 South ol wsss 2I,3I.4I, SI See bhck wsd rascusshn In SSEL Report snd Group 8 rasokrtion.
CATS R05837 W.O.19801843 P<<form Qme and modon skrr0ee~nd costlbene8t analysts h~vahsle posstbb ant tancenxrnts.
Compbte sturdes by end ol 1097.CATS ID R05837 See above.CATS ID R05837 CATS ID R08988 W.O.108044S4 00 RFO See above.CATS ID RN988 See above.W.O.19801843 F Une drrI278'4 PCft08022 ER-SC.4 Rev.4 SSEL Rev.1 SW Fhw cal.tA%-00007 ER.SC.4 Rev.4 SSEL Rev.1 AP-SW.1 PCR 08052 Rev.1 DA.CE-00-108 Rev 1 DUF 000071 ER SC.4 Rev,4 SSEL Rev.1 Flx wad st F dne PCR 08-022 DA CE.08495 ER SC.4 Rev.4 SSEL REv.1 Pro ceduras Iretaded OufQer closed Cortrpbis 1218 r,":~I PCR fe052 Rev.1 hataded valve opershf SEWS updafad Ougbr closed.
Attachment B Response to Fire IPEEE Questions Page 1 of 27 B.Fire It is unclear how room-to-room fire scenarios'were treated in the Ginna IPEEE analysis.Section 3.1 of the submittal indicates that fire areas were screened individually according to the FIVE[1]criteria (i.e, the area contains no Appendix R equipment, and a fire in the area would not cause a demand for safe shutdown)~This section also indicates that fire compartments were further screened if they had no credible potential for fire spreading to other fire compartments.
While the submittal indicates that the qualitative screening conformed with Phase I, of the FIVE methodology, fire propagation potential between fire compartments is reviewed in the FIVE methodology during the Fire Compartment Interaction Analysis (FCIA)~The submittal does not indicate that the FIVE FCIA criteria were used to determine if fire propagation between fire zones was possible.The submittal does provide qualitative criteria for grouping plant locations, but it is unclear that this approach has adequately treated room-to-room fire scenarios.
One of the cited criteria indicates that plant locations were grouped together when a physical barrier (not necessarily fire-rated) separates the subject locations from the rest of the plant and there is a significant time delay for fire propagation from the subject locations to other adjacent locations.
In addition, the submittal indicates that one consideration for determining the importance of a location was whether it contains a sufficient amount of combustible material that, if ignited, could potentially propagate to adjacent zones.The basis for making these judgements is not provided.Further, it is not clear that the analysis has adequately considered the potential that active fire barrier elements (e.g., normally open fire doors, ventilation dampers, etc)might fail to activate, or that passive fire barriers (e.g., various fire barriers both rated and unrated and barrier penetration seals)might be challenged by local concentrations of flammable materials.
Finally, it is not clear that the analysis has considered the potential for the spread of smoke and heat from one compartment to another in addition to the consideration of actual fire spread.Please clarify the bases used to assess the potential for cross-zone spreading of fire, heat, and smoke.Please provide an analysis for all fire areas of the effect on fire-induced core damage frequency (CDF)thatincludes consideration of the failure potential of active barrier components such as doors and dampers.Please provide an analysis of the potential for cross-zone fire propagation for high hazard areas such as the turbine building, diesel generator room, switchgear rooms, and lube oil storage areas thatincludes consideration of the potential to challenge passive fire barrier elements.I The requested information is contained in Appendices B (" Location Characteristics Table")and E (" Propagation Pathway Credibility Assessment")to the 1998 submittal.
While these appendices were never submitted to the NRC, selections from these Appendices have been extracted and included as Attachment B.1 to accompany the discussion provided below.The appendices in their entirety can be provided if required by the NRC..
Response to Fire IPEEE Questions Page 2 of 27 Appendix 8 develops a fire zone adjacency matrix for each fire zone to identify possible propagation pathways (Item 4 in the Location Characteristics Table[LCTj, e.g., as shown on page 8-3 of Attachment 8.1).Appendix E develops criteria to qualitatively screen the credibility of these propagation pathways (see Table E-2 beginning on page E-9 and its Supplement in Attachment 8.1 which lists the propagation scenarios developed for the initial fire zones).As an example, referring to Item 1 on page 8-3 of Appendix 8, there are two fire zones, ABB and ABM, within fire area ABBM.Six fire zones are listed as horizontally adjacent to these two zones in Item 4, along with the corresponding propagation pathways and barrier ratings.These are repeated in Table E-2 (see page E-9 of Appendix E), where they were evaluated with respect to fire propagation as discussed below.In the spatial interactions analysis, a propagation pathway was assumed to be credible if there is no automatic suppression system in the initial fire zone or in the adjacent fire zone AND at least one of the following criteria were satisfied:
1.There is a permanent opening between the fire zones;2.The fire duration of the combustible contents in the initial fire zone is greater than 75'/0 of the rating of the fire barrier (e.g., door, wall, etc.)separating the initial fire zone and its adjacent fire zones.'he first criterion is conservative because it does not consider the actual amount of combustible inventory, the location of the fire source, and the separation distance between the fire source and combustibles in the adjacent location(s).
The second criterion takes into consideration the potential failure of fire barriers (e.g., a fire door being left open), but requires a minimal amount of combustibles to provide a propagation path.The fire duration and barrier ratings for each fire zone are included under Items 2 and 4 in the LCT (see page 8-3).Table E-2 and Supplement indicate whether or not inter-zonal propagation satisfies Criterion 1 or 2, from above.'he FIVE FCIA permits screening out propagation between compartments, one of which may contain safe shutdown equipment, for~an of the following:
1.Boundary fire rating of at least two hours 2.Boundary fire rating of one hour with combustible loading in the exposing compartment
<8E+4 BTU/ft'the Ginna IPEEE, by screening for 75/o of this combustible loading, employs a more stringent criterion of<6E+4 BTU/ft')3.Very low combustible loading (<2E+4 BTU/ft')in the exposing compartment, with automatic fire detection present 4.Very Iow combustible loading (<2E+4 BTU/ft')in both the exposing and exposed compartment (regardless of presence of automatic detection) 5.Presence of automatic fire suppression above combustibles in exposing compartment.
The combustible inventory, listed under Item 2 in the LCT, denotes the maximum combustible loading within a fire zone allowed by procedure.
In reality, the actual inventory may be less than the maximum allowable amount.The second criterion suggests that if the combustible inventory fire severity is less than 75'/o of the barrier rating, then there will not be a propagation pathway between fire zones.In order to have a fire propagation pathway if the fire duration is less than 75'/0 of the barrier, the barrier must fail due to random failure (fail before the rated time on demand).Table E-2 and Supplement indicate whether or not the potential fire duration exceeds 75'/0 of the barrier rating.
Response to Fire IPEEE Questions Page 3 of 27 For the fire areas which met one of the two propagation criteria, the analysis considered multi-level fire propagation between locations.
Level-1 propagation involves one initial fire zone and fire zone(s)directly adjacent to it through a credible propagation pathway.Level-2 fire propagation involves one initial fire zone, the fire zone(s)directly adjacent to it, and the fire zone(s)that are adjacent to the Level-1 fire zone(s).At Level-2, the fire would have to propagate through two fire barriers, with the time required to burn through being at least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> (assuming each barrier is at least one-hour rated).The mean generic fire suppression time for most fires is 40 minutes (estimated by Sandia in Ref.5).A survey of past fire drills at Ginna indicates that the longest total duration of a drill was less than 50 minutes (see Table 3-12 of the 1998 submittal).
It is reasonable, then, to assume that the longest response time at Ginna (regardless of the location)is less than 50 minutes.Therefore, it is expected that the fire brigade will start fire-fighting efforts at the initial fire zone and the Level-1 locations, and respond to the Level-2 locations to start cooling the pathways between Level-1 and Level-2 locations.
Thus, the probability of a fire being allowed to propagate to Level-2 fire zones is negligible.
As a result, all propagation scenarios involving Level-2 propagation or higher were also screened from the analysis.Table E-2 and Supplement of Appendix E (see Attachment B.1)summarize the analyses of the potential for inter-zonal fire propagation for all Ginna fire zones.Included among these are high hazard areas such as the turbine building (TB), diesel generator rooms (EDG1A/B), switchgear rooms (distributed among the auxiliary building[ABM and ABO), turbine building, and screen house[SH]), turbine lube oil storage area (TO), and hydrogen storage area (H2).Review of Table E-2 and Supplement indicates that fire propagation to/from these zones was not considered credible since: (1)they did not meet either of the two screening criteria;or (2)they met at least one of the criteria, but fire propagation was still considered not credible for other reasons (see Notes in Table E-2 and Supplement).
'he LCT from Appendix B (also in Attachment B.1[see, e.g., pp.B-3 through B-5 and B-48))includes the following information in greater detail for these zones: 2.3.4 Fire and smoke hazards, as obtained from review of the Ginna Station Appendix R program information (Item 2);Fire protection features, i.e., the fire detection and suppression capabilities (Item 3);Adjacent fire zones (Item 4);Potential key equipment and their associated basic event impacted by fire or smoke hazards (Item 5);Potential raceways (conduit and cable tray)and their associated equipment/basic events impacted by fire or smoke hazards, where the cable trays associated with the safety equipment were identified from a database relating cables and conduit to the equipment served (Item 6);Notes taken during the two spatial interactions walkdowns (Item 7).As reported in Section 3.9.2 of the 1998 submittal, active fire barrier components at Ginna consist of fire doors and dampers.There are also penetration seals, considered to be passive barriers.Fire doors are inspected and maintained through station procedure FPS-15,"Fire Door Identification, Inspection and Maintenance," on a quarterly basis.The Response to Fire IPEEE Questions Page 4 of 27 procedure also lists all the fire doors and their locations.
To date, there have been no failures of fire doors that have not been promptly detected during these plant tours.Compensatory and corrective actions have been initiated as required.The accessible fire zones are also visited by plant personnel frequently (e.g., auxiliary operator and security rounds), and the plant personnel are trained to maintain fire doors closed.Therefore, it is unlikely that a fire door would be left open and uncorrected for an extended period of time.Engineering Work Request (EWR)4882 completed verification in 1991 that all plant fire dampers were installed and configured as designed (or provided for analyses where differences from qualified configurations existed).Fire damper operability is verified through station procedure PT-13.26,"Testing of Fire Dampers." Ten percent of the dampers are drop-tested yearly on a rotating basis so that all dampers are tested at least once every ten years.If any damper fails the drop test, an additional 10%are tested, for every failure.Fire dampers are inspected and maintained through station procedure M-103,"Inspection and Maintenance of Fire Dampers." Both procedures list all the fire dampers, their ratings, and their locations.
Adherence to these procedures assures that all fire dampers are present as configured and reduces the likelihood of a failure upon demand.EWR 4941 completed verification in 1991 that all plant fire penetration seals were installed and configured as designed (or provided for analyses where differences from qualiTied configurations existed).A database was developed and each seal was associated with an industry fire test.This database is updated annually in accordance with station procedures FPS-2.1,"Control and Verification of UFSAR and/or 10CFR50 Appendix R Fire Barriers," and FPS-2.2,"Control and Verification of Non-UFSAR and Non-10CFR50Appendix R Fire Barriers." Visual inspections are performed every 18 months for the UFSAR/10CFR50 penetration seals under FPS-2.1 and every 36 months for the non-UFSAR/non-10CFR50 penetration seals under FPS-2.2.Adherence to these procedures assures that all fire penetration seals are present as configured and reduces the likelihood of a failure upon demand.In summary, the potential for inter-zonal spreading of fire, heat and smoke was assessed using criteria derived from the FIVE FCIA, but considered more conservative.
For example, the"critical" combustible loading in the originating fire zone was reduced to 75%of the FIVE FCIA criterion.
The potential for inter-zonal propagation was examined for the high hazard areas, individually the turbine building (TB), diesel generator rooms (EDG1A/8), switchgear rooms (distributed among the auxiliary building[ABM and ABO], turbine building, and screen house[SH]), turbine lube oil storage area (TO), and hydrogen storage area (H2).Fire propagation to/from these zones was not considered credible.This is further supported by the fire protection testing program described earlier.
Response to Fire IPEEE Questions Page 5 of 27 2.The Ginna fire IPEEE submittal indicates that cable vtirap was credited in the quantitative assessments, but the treatment that was given is not clear and may have led to"double counting" of suppression effectiveness.
It is also not clear if this approach was used in the screening analyses as well.Section 3.3.4 (Assumption 2)indicates that"a probability of 0.15 was assigned to the failure of cable wrap to account for the probability that a fire is not suppressed within the one hour time frame associated with the fire rating of the cable wrap." This description implies that the modeling of the cable wrap failure implicitly credits fire suppression in the quantitative screening of fire zones that contain the wrap.In the detailed fire PRA evaluations, an additional independent credit for fire suppression efforts would result in double counting suppression efforts.Please indicate if fire suppression was credited in fire scenarios where cable wrap was independently credited as protecting critical cables.If there are any such scenarios, reevaluate the core damage frequency either (1)assuming that the 0.15 barrier failure probability fully credits suppression, or(2)assuming anindependent suppression credit and that the cable wrap fails with a probability of 1.0 for all fires lasting greater than one hour.Double-counting of cable wrap protection and fire suppression efforts did not occur in the IPEEE analysis.The factor of 0.15 is related to the failure to manually suppress the fire within the time that the cable wrap provides protection.
The 0.15 cable wrap failure probability represents the conditional probability that longer term manual suppression efforts, using fire hoses or extinguishers, fail to extinguish the fire prior to the damage of wrapped cables.If this occurs, the cable wrap is assumed failed with a probability
=1.0.In addition, if a fire area for which fire wrap was credited has insufficient combustible loading to support a fire duration of at least one hour, a 0.1 probability was assigned that such a loading might exist.If the fire area already had the sufficient loading, no adjustment was made.It is explicitly assumed that the installed fire sprinklers have failed to extinguish the fire (either automatic or manually actuated).
The analysis, therefore, did not apply double credit for fire sprinkler protection and cable wrap protection.
No significant dependencies were identified between the performance of manual suppression, using fire hoses or extinguishers, and the functioning of the installed fire sprinklers (including manual actuation of the sprinklers) as discussed in the response to RAI Question¹9, below.Therefore, no significant dependencies were identified to exist between the 0.15 cable wrap failure probability and the failure probability of installed fire sprinklers.
Finally, as described in the response to RAI Question¹8 below, the Fire IPEEE was resolved with the fire suppression system specifically modeled.As shown in Section 9.6.3.4 of Attachment B.3 (and Table 9-18), cable wrap failures were not risk significant.
Response to Fire IPEEE Questions Page 6 of 27 3.The 19 fire zones remaining after the qualitative and quantitative screening phases of the Ginna fire assessment were subjected to further detailed evaluation including the analysis of fire propagation and suppression.
Actual fire modeling using the FIVE methodology or other techniques was not performed.
Instead, probabilities for fire propagation were assigned based primarily upon physical separation of equipment.
However, it is not clear upon what basis these judgements were made.For example, in the analysis of the Auxiliary Building Operating Level (ABO, Page 3-14)"a 0.01 probability was assigned that a fire occurring in the vicinity would disable both CCW pumps, and a 0.99 probability was assigned that one CCW pump, in addition to one AC power electrical division, would be disabled." It is not clear that this assumption is well founded.The submittal states the two CCW pumps are located within nine feet of each other, and that there are cables in conduits in the area.Presumably, loss of the cables may lead to loss of the second pump.Further, the fact that the fire source appears to be the CCW pumps themselves, there would be a significant potential for large fires to occur.Given a large fire, nine feet of spatial separation would likely not prevent thermal damage to the second pump, its power cables, or its control cables.This is one specific example where the assumed damage probabilities may be optimistic.
For other fire areas, from the description of fire scenarios presented in the submittal, it appears that fires that are not suppressed were assumed to damage all the equipment in a fire zone.If the fire was suppressed, some level of damage was assumed to occur, and it appears that in many cases suppressed fires were assumed to damage just one electrical division.The submittal states that this is conservative since for many fire scenarios only a portion of components relying on the electrical division would be disabled.In general, this approach is acceptable if the critical set of components and cables are relatively far apart, and therefore, it will take a long time for a fire to damage them.On the other hand, if the key cables and components are close together, critical damage may occur before successful suppression.
Please provide a general description ofhow the fire damage assumed for each of the fire scenarios considered in the detailed analyses was determined.
Include a description of the criteria used to determine the radius of the damage caused by suppressed fires and the timing of component damage.Also indicate to what extent the actual location of critical cables and components was verified and considered in the damage assessment.
For suppressed fires,indicateif any time was assumed for the suppression of the fire andif this timeimpacted the assumed damage.For each fire scenario, the potential fire sources and critical cables and equipment were carefully examined.Fires were assumed to fail all equipment and cables in a fire zone unless the fire was suppressed or physical separation or barriers existed (i.e., a detailed analysis was performed).
The grounds upon which physical separation, barriers and fire suppression were credited in these detailed analyses as well as the justification for the extent of damage assumed, including considerations of timing and damage radii, are provided in the following discussion.
The discussion is presented in two parts: (1)postulation of damage to one electrical division for scenarios in which fire suppression succeeds, and (2)use of physical separation or barriers as justification for limiting damage of a zone's contents.
Response to Fire IPEEE Questions Page 7 of 27 1.Postulation of Dama e to One Electrical Division for Scenarios in which Fire Su ression Succeeds.Justification for postulating damage to one AC electrical train for scenarios in which fire suppression succeeds is provided as follows.Cables-Fire suppression credited for the protection of plant cables consisted of the automatic actuation of sprinklers as well as manual actuation of the sprinklers in the event that automatic actuation fails.For instances in which automatic actuation succeeds, sprinkler protection is postulated to commence prior to significant cable damage since the sprinkler head fuses melt at a temperature well below the damage and ignition temperatures'of the cable insulation.
Similarly, the successful manual actuation of sprinklers was postulated to commence prior to significant cable damage.A failure probability of 0.01 was assigned for the manual actuation when automatic actuation failed to reflect the potential delay of actuation prior to significant cable damage.This value takes into consideration the close proximity of the sprinkler actuators to the control room (within a two-minute response from the time a smoke alarm is received).
On this basis, fires were postulated to fail only the contents of one cable tray for scenarios in which sprinkler protection is successful.
By examining the inventories of cables routed in each cable tray in the applicable zones, the conditional core damage probabilities (CCDPs)associated with such damage were found to be bounded by the CCDP for the loss of one AC electrical train.b.Equipment-Fire zones containing multiple equipment trains were also evaluated.
Fire zone ABB (auxiliary building basement)-Sprinkler protection is provided for cables installed in the safety injection (Sl)pump area.Although fire scenarios in this area could disable both Sl pump trains, the loss of Sl in conjunction with the loss of cables for any cable tray in ABB results in CCDPs which are bounded by the CCDP for the loss of an entire AC power train.The assumption, therefore, for the loss of one AC power train is conservative.
Fire zone ABM (auxiliary building mezzanine)
-The only PSA-related components consist of two electrical buses that belong to a single AC power train, which was then assumed to fail.Fires igniting within the electrical bus cabinets were assumed not to damage cables in surrounding cable trays since flames would be contained within the sealed cabinets for a time sufficient for suppression to commence (that is, for the sprinkler head fuses to melt).Likewise, fires occurring outside of the buses were judged not to be capable of damaging the electrical buses prior to initiation of suppression.
Therefore, no credible fire scenario was identified which could damage the electrical buses and cables belonging to the opposite AC power train.The assumption for the loss of one AC power train is therefore valid.
Response to Fire IPEEE Questions Page 8 of 27 Fire zone AHR (air handling room)-The loss of all PSA-related components would cause only a reactor trip.In conjunction with the postulated loss of one cable tray, the CCDP for reactor trip is bounded by that for the loss of one AC power train.iv.Fire zone BR1A or BR18 (battery room A or 8)-The loss of all PSA-related components would cause the loss of only one AC power train, which was then assumed to fail.V.Fire zone IBN-1 (intermediate building north)-The loss of AFW Pumps A and B is credible.However, due to the multiple sources of feedwater not impacted by the fire (i.e., turbine-driven auxiliary feedwater pump, standby auxiliary feedwater pumps C and D, and main feedwater pumps A and 8), the loss of one AC power train assumed for the scenario is bounding.Use of Ph sical Se aration or Barriers as Justification for Partial Dama e of a Zone's Contents.As discussed in the 1998 IPEEE submittal and expanded upon where pertinent here, physical separation rationales were used in the detailed fire modeling for five fire zones.Auxiliary Building Operating Level (ABO)-Due to the nine-foot separation between the component cooling pumps installed in zone ABO, and a lack of intervening fixed combustibles (all cables in the area are routed in, conduit), a 0.01 probability was assigned that a fire occurring in the vicinity would disable both CCW pumps.This probability was based on the following considerations:
Since no intervening fixed combustibles exist between the two CCW pumps (control and power cables associated with each pump penetrate the floor from below directly adjacent to the pump they serve, and therefore do not travel near the other pump)and no fixed combustibles are installed in the broad vicinity of the pumps, two sources of combustion must be considered:
(1)the potential for the ignition of one CCW pump to damage the second CCW pump and (2)the potential for a transient combustible fire to damage both pumps.The ignition of one CCW pump was judged not to have the potential to cause damage to the second CCW pump based on the following grounds: No combustible material is installed on the outer surface of the pumps (all cables are installed in conduits)and therefore ignition of the second pump is not likely.The pumps are installed in a large, open area and therefore the heat from the ignited pump would be dissipated.
Response to Fire IPEEE Questions Page 9 of 27 The pump motors are relatively small, and therefore the heat generated by the ignition of one pump would be limited.The only lubricant utilized for the pumps is grease located within sealed gear boxes.This significantly reduces the likelihood for leakage of combustible material to the exterior of the pump, which eliminates the potential for a large pump lubricant spill, and also reduces the likelihood for combustion of lubricant of the second pump.A significant transient combustible fire was judged to be the only credible fire source that could disable both pumps.A very conservative apportionment of 0.01 of the total'fire initiation frequency for the zone was assigned for the occurrence of a transient fire failing both CCW pumps on the basis that: Transient combustibles comprise only one category of ignition sources present in the zone.The 0.01 factor addresses, in part, the probability that a transient combustible fire initiates the fire scenario (rather than some other ignition source), and that the fire occurs in the vicinity of the pumps (the pump area occupies less than three percent of the total floor area).Transient combustibles would normally be in this area only during pump maintenance.
The 0.01 factor also addresses, in part, the likelihood that the presence of significant transient combustibles within the vicinity of the pumps (such as a solvent spill)would not be detected within a relatively short period of time by the maintenance personnel, security personnel during hourly rounds, or plant operators during shift rounds.IV The Fire IPEEE was re-solved assuming that the CCW pumps always failed during a fire on the Auxiliary Building Operating Level (see response to RAI Question¹8).For this case, the fire CDF only increased by 8.8E-07/yr.
This limited increase is due to the small potential for the need for CCW in the short term.While CCW would be required to support RHR cooling, the plant can remain on AFW for a long period of time.Also, there is no real scenario by which a fire at this location could create a PORV LOCA requiring RHR in the shortterm.
b.Turbine Building Basement (TB-1)-Cables that supply offsite power to the 480V safeguards Buses 17 and 18 are routed in the turbine building basement near, and parallel to, the eastern wall.A review was performed of the location of potential fire sources.Most fire sources are not located near the cable runs.The primary fire source, the turbine lube oil reservoir and associated equipment, is located at the opposite end of the turbine building and is protected by a fire suppression system.Major lube oil piping Response to Fire IPEEE Questions Page 10 of 27 is also encased inside a guard pipe to collect leakage.The major portions of the hydrogen seal oil system are located toward the center of the turbine building, inside an enclosure with automatic fire doors and a fire suppression system.The most significant fire sources near the 480V safeguards bus cable runs are two of the condensate booster pumps and the four air compressors.
Based on this arrangement of significant fire sources in the zone, a seven percent likelihood was assigned that fires occurring in TB-1 will be in the proximity of the offsite power cables supplying Buses 17 and 18, or will be of sufficient magnitude to propagate to that portion of the zone.The cables supplying Buses 14 and 16 are also located near, and parallel to, the east wall of fire zone TB-1 and travel a total distance of only ten feet within the zone.One of the condensate booster pumps is located near these cables.The cables supplying Buses 17 and 18 are located more than 20 feet from those supplying Buses 14 and 16.Based on this arrangement, a three percent likelihood was assigned that fires occurring in TB-1 will damage the offsite power cables supplying Buses 14 and 16 in addition to those supplying Buses 17 and 18.All other fires occurring in the zone were postulated not to damage the offsite power cables.The justification for the use of the three percent and seven percent values is as follows.An area extending 10 feet on either side of the cable runs would comprise a little less than eight percent of the turbine building basement area.Based roughly on these physical dimensions, a ten percent likelihood was assigned that fires occurring in TB-1 would be in the proximity of these cables, and cause damage to them.The most critical length for failing all four safeguards buses, below the 4kV Buses 12A and 12B, comprises about 20 percent of this cable run length.Therefore, the ten percent was further divided into seven percent for the cables to the safeguards Buses 17 and 18, and three percent to cables for all four safeguards buses, including Buses 14 and 16.Reactor Containment Mezzanine (RC-2)-Fires with sufficient intensity to damage equipment located in RC-2, other than those involving ignition of combustibles related to a reactor coolant pump (RCP), were postulated to damage all equipment in the zone, with the exception that RCS circulation was assumed to remain functional.
This exception was made on the basis that no credible fire scenario was identified that could disable RCS forced circulation (i.e., both RCPs)and natural circulation (i.e., the pressurizer heaters and both shroud fans).Significant separation was identified between cables associated with these systems.In particular, the power and control cables for RCP A travel through the northwest quadrant of containment and those for RCP B travel through the southeast quadrant and are located over sixty feet apart.The pressurizer heater cables are located 24 feet from RCP B cables at the nearest point and over sixty feet from RCP A cables.The shroud fan control and power cables are located in close vicinity of RCP A cables but not those of RCP B cables.Therefore, for calculational purposes, RCP A and the shroud fans were arbitrarily selected as surviving this fire scenario.
I Response to Fire IPEEE Questions Page 11 of 27 Auxiliary Building Basement Level (ABB)-The auxiliary building basement was divided into three sections for the purpose of defining fire scenarios (the charging room is its own separate zone).The division was based on walkdown observations, cable routing, and examinations of plant layout drawings.The safety injection pump area contains most of the electrical cables present in ABB;unsuppressed fires occurring in this area were conservatively assumed to damage all equipment and cables in this area.Propagation of fire from rooms in the northern part to the adjacent safety injection and charging pump rooms was judged not to be credible based on the presence of relatively few combustibles and the enclosure of these northern rooms by concrete walls.iii.In the RHR pump area, the vital equipment and cables installed in this area are separated from the adjacent safety injection pump area by approximately 40 feet, and the RWST occupies most of the space at the interface of the two areas.Propagation of fire from this area to the adjacent Sl pump area was judged not to be credible.Screen House Operating Level (SH-2)-The PSA-related equipment installed in the screen house operating level consists of two 480-VAC safeguards Buses 17 and 18, and the four service water (SW)pumps.No electrical cables are installed on the operating floor;therefore, consideration of cable-related fires was not necessary.
Buses 17 and 18 are installed end-to-end (note: the cabinets are not installed back-to-back
-the short ends of the cabinets are adjacent).
'abinet fires that are significant enough to damage more than two bus compartments were assumed to disable both buses, which results in a loss of all SW.Cabinet fires that do not disable more than two bus compartments result in the loss of no more than two SW pumps;therefore, two SW pumps were conservatively assumed to be unavailable for such fires.For fire scenarios which involve the SW pumps (installed on the operating level), no credible fire scenario was identified that would disable more than two SW pumps.No intervening combustibles are installed between the SW pumps (only the pump'motors are present on this floor;no cables are present)and only one fixed combustible (a diesel-driven fire pump)is installed within 20 feet of the pumps.Therefore, three sources of combustion were considered to be credible: (1)the potential for the ignition of one SW pump to damage other SW pumps, (2)the potential for the diesel-driven fire pump to damage the SW pumps, and (3)the potential for a transient combustible fire to damage the pumps.
Response to Fire IPEEE Questions Page 12 of 27 1.SW pump fire-The ignition of one SW pump was judged not to have the potential to cause damage to other SW pumps because: No combustible material is installed on the outer surface of the pumps;therefore, ignition of the other pumps is not likely.Damage of other SW pumps would require radiative or convective heat transfer.The SW pumps are installed in a large, open area and therefore the heat from the ignited pump would be dissipated.
Only the SW pump motors are present on the operating level.Lubricant utilized for the pump motors is a small quantity of grease located within sealed bearings.This significantly reduces the likelihood for leakage of combustible material to the exterior of the pump, which eliminates the potential for a large pump lubricant spill, and reduces the likelihood for combustion of lubricant for neighboring SW pumps.Diesel fire pump fire-Two of the SW pumps are installed at distances of 8 and 16 feet from the diesel-driven fire pump (with the other two at 24 and 32 feet).A berm is installed to collect diesel fuel if spillage occurs and direct the spill to an outside sump.Therefore, a fire involving the diesel fuel (if no spraying of the fuel occurs)would be relatively confined.Conservatively, two SW pumps were postulated to be disabled because of the distance involved.Transient combustible fire-For the analysis, transient combustible fires were judged to be capable of damaging no more than two SW pumps.The bases for this are the same reasons described for the CCW pump in Section 2.a of this same response above (e.g., the pump area occupies less than 5%of the total floor area;transient combustibles would only be in the area during pump maintenance).
A sensitivity analysis was performed for the assumption that only two of the four SW pumps were impacted by a fire on the Screenhouse operating floor.A 0.001 probability was assigned that a fire would impact all four pumps on the following basis: Each SW pump occupies less than 5%of the total floor area The SW pumps are installed with a centerline separation of eight feet The only fixed combustible is diesel fuel oil which would have to spray 32 feet to reach all four SW pumps
Response to Fire IPEEE Questions Page 13 of 27~Transient combustibles would normally only be in the area during maintenance activities with personnel located nearby.There are also routine walk-throughs by security and plant operators.
The results of the sensitivity analysis indicate that the CDF only increases by 1.50E-7/yr.
This is due to the fact that Ginna Station can shutdown without SW and has procedures in place to do so.Basically, the plant can utilize the city water supply to plant hydrants to cool the DGs and provide a suction source to SAFW.This city water source has already been shown to be risk significant as described in Section 9.6.3.2 of Attachment B.3 (see response to RAI Question 48).Since there is sufficient basis to justify not assuming the loss of all 4 SW pumps, and the risk consequences are minimal using a conservati've scenario probability of 0.001, this analysis is considered acceptable.
Response to Fire IPEEE Questions Page 14 of 27 Transient combustible fires were not analyzed separately in the Ginna fire assessment.
The submittal states that during the development of the fire frequencies, transient combustibles were grouped with the type of component that was primarily damaged by or exposed to the fire.Thus, the submittal states that the impact and consequences of transient combustible fires are accounted for in the modeled component fires, and no separate evaluation of transient fires was necessary.
Based on the limited descripfion in the submiffal, it is unclear if the methodology accounts for transient fires at all crifical locafions in the plant.Specifically, it is unclear if a portion of the frequency of transient fires was accounted for in the evaluation of cable fires.Please provide a more defailed description of how the transient fire frequency was includedin the analysisincluding a description of how the frequency was parfifioned and the types of components assumed damaged or exposed to the fransient fires.If cables were notin the list of components damaged or exposed to the transient fires, provide a separate assessment of transient induced fire scenarios involving cables'in the unscreened fire zones containing cables.Appendices C (" Component/Location-Based Fire Ignition Frequency")and D (" Fire Frequency Apportionment")to the 1998 submittal detail the development of the fire ignition frequencies for the Ginna fire zones.Included in this process are fires due to transient combustibles, as extracted from the PLG generic fire database (proprietary).
While these appendices were never submitted to the NRC, selected portions of Appendices C and D have been extracted and included as Attachment B.2 to supplement the response to this que'stion.
The appendices in their entirety can be provided to the NRC if required.There were 230 fire incidents retained from the PLG generic fire database for applicability as generic fires for Ginna.Of these 230, six (2.6%)could definitively be attributed to the presence of transient combustibles:
¹s 66, 73, 75, 77, 113, and 114 listed in Table C-2 of Appendix C (see Attachment B.2).Three of these occurred in the auxiliary building, and one each in the control room, diesel generator room, and turbine building, of other plants.These six fires were included among those assigned to their respective locations when generic fire frequencies were estimated for the Bayesian prior distribution.
These priors were subsequently combined with the Ginna-speciTic likelihood to yield the posterior fire ignition frequencies.
The extracted portions of Appendix C in Attachment B.2 discuss the treatment of the generic data prior to frequency analysis (e.g., grouping, assignment of unidentified plant events).Of the 14 fire events identified at Ginna Station as being applicable to the analysis (see Table C-3 in Attachment B.2), two (¹2-relay room and¹13-turbine building basement), could be attributed to transient combustibles.
As shown in Table C-4 (¹s 48 and 72), both of these were included among the plant-specific fires used in the Bayesian likelihood to generate the posterior fire frequency for these zones.Appendix D (see Attachment B.2)describes the frequency apportionment technique based on combustibles within each fire zone, including the table with the final assigned frequencies by zone and combustible.
Tables D-1 and D-2 in Attachment B.2 indicate that cable fires were apportioned for nearly every fire zone, including the five (auxiliary building, control room, diesel generator room, turbine building, and relay room, and their respective Response to Fire IPEEE Questions Page 15 of 27 sub-zones) mentioned above as specific sites of previous transient combustible fires at Ginna and other plants.Section 3.5 of the 1998 submittal discusses the types of components assumed to be damaged by or exposed to fire effects.These consist of power, control, and instrumentation cables (including hot shorting);
and all equipment modeled in the internal events PSA except for the following:
piping, tanks, check valves, and manual valves.The areas in which transient fires have historically occurred, either at Ginna or other plants, and in which transient fires were included among the Ginna ignition frequencies, possess all the types of equipment susceptible to fire effects as listed above.Therefore, these same types of components were assumed to be damaged by or exposed to the effects of transient combustible fires.Consequently, the frequency of transient fires from other plants and from Ginna is included in the fire frequencies for the various Ginna areas.Furthermore, the potential for transient fires was specifically evaluated in the fire scenarios where detailed analyses of critical locations were performed.
Examples are discussed in the response to RAI Question¹3.For all other areas, it was assumed that a fire affected all equipment within the area.Thus, there would be no additional effect on CDF from a transient fire in these areas.Finally, Section 9.6.3.1 of Attachment 8.3 indicates that only four fire initiators had high Risk Achievement Worth values,(i.e., RAW~10)with a Fussell-Vesely value<0.05 (i.e., these initiators do not contribute significantly to the CDF now, but would do so if they were assumed to occur more frequently).
a.FIDG1B10 (Fire in the DG Room B Cable Vault)-This room is normally closed off and requires a"confined space entry" permit to enter.Consequently, this area would not be expected to normally contain any transient combustibles.
FIOCR3-3 (Fire in the Control Room Which Only Fails One Electrical Train)-This area is always manned.Transient combustibles would normally be present during maintenance activities when even more personnel are in the Control Room.Since a generic transient combustible fire in this room was already assigned as discussed above, no further consideration is required.c.FIOOABO1 (Fire in the Auxiliary Building Operating Level)-A generic transient combustible fire was already assigned to this area as discussed above.The issue of a transient combustible failing both trains of CCW is described in the response to RAI Question¹3.FIOOAHR1 (Fire in the Air Handling Room)-This secured area only contains an air handling unit and MCC.Traffic in this area is limited to personnel working in or touring the room.Therefore, transient combustibles would only be present during maintenance activities for which personnel would be in the room.Consequently, further consideration of transient combustibles would not be expected to offer any more risk insights.
Response to Fire IPEEE Questions Page 16 of 27 Two fire zones (IBM-1 and IBS-1)are identified in the submittal which are not listed as being either qualitatively or quantitatively screened.Since the results of a detailed fire PRA evaluation for these fire zones are also not given in the submittal, the importance of these two fire zones is unknown.Pleaseindicateif these two fire zones were screened orsubjected to a detailed fire scenario evaluation.
Provide descriptions for any fire scenarios modeled for these fire zones and list the estimated core damage frequencies.
Table 3-2 in the 1998 submittal,"Fire Areas and Fire Zones of Ginna Nuclear Power Plant," lists the 64 fire zones subjected to the Phase 1 qualitative screening.
Both IBN-1 and IBS-1 are included, as parts of the Intermediate Building (IB)and ABI fire area.Table 3-4,"Frequency Allocation for Ginna," indicates the 48.fire zones which survived qualitative screening in Phase 1.Both IBN-1 and IBS-1 are indicated as survivors, for which a fire ignition frequency was estimated.
Table 3-6,"Quantitative Screening Results," indicates the 29 fire zones for which conservative estimates of their contribution to CDF fell below the Phase 2 quantitative screening cut-off threshold of 1E-6/yr.IBS-1 is included, with its CDF of 9.9E-8/yr.
IBN-1 is not, since it survived for detailed evaluation in Phase 3.Table 3-9,"Quantification Summary for Phase 3 Fire Scenarios," lists all scenarios subjected to detailed CDF evaluation, with their final CDF results.Zone IBN-1 is included, with three scenarios IBN-1-1, IBN-1-2, and IBN-1-3, and CDF estimates of 1.3E-8/yr, 6.2E-8/yr, and 2.1E-6/yr, respectively.
The Comments column in Table 3-9 summarizes each of these scenarios.
Table 3-10,"Phase 3 Fire Analysis Results Sorted by Contribution," indicates that fire zone IBN-1 contributes 3%to the overall fire CDF.Also, evaluations of both of these fire zones are described in the new fire results provided in Attachment B.3 (see response to RAI Question iti8).These results indicate slightly smaller contributions to CDF based on more detailed evaluation of required operator actions.
Response to Fire IPEEE Questions Page 17 of 27 6.NUREG-1407
[2], Section 4.2 and Appendix C, and GL 88-20, Supplement 4[3], request that documentation be submitted with the IPEEE submittal with regard to the FRSS[4]issues, including the basis and assumptions used to address these issues, and a discussion of the findings and conclusions.
NUREG-1407 also requests that evaluation results and potential improvements be specifically highlighted.
Control system interactions involving a combination of fire-induced failures and high probability random equipment failures were identified in the FRSS as potential contributors to fire risk.The issue of control systems interactions is associated primarily with the potential that a fire in the plant (e.g., the INCR)might lead to potential control systems vulnerabilities.
Given a fire in the plant, the likely sources of control systems interactions are between the control room, the remote shutdown panel, and shutdown systems.Specific areas that have been identified as requiring attention in the resolution of this issue include:(a)Electrical independence of the remote shutdown control systems: The primary concern of control systems interactions occurs at plants that do not provide independent remote shutdown control systems.The electrical independence of the remote shutdown panel and the evaluation of the level of indication and control of remote shutdown control and monitoring circuits need to be assessed.(b)Loss of control equipment or power before transfer: The potential for loss of control power for certain control circuits as a result of hot shorts and/or blown fuses before transferring control from the MCR to remote shutdown locations needs to be assessed.(c)Spurious actuation of components leading to component damage, loss-of-coolant accident (LOCA), or interfacing systems LOCA: The spurious actuation of one or more safety-related to safe-shutdown-related components as a result of fire-induced cable faults, hot shorts, or component failures leading to component damage, LOCA, or interfacing systems LOCA, prior to taking control from the remote shutdown panel, needs to be assessed.This assessment also needs to include the spurious starting and running of pumps as well as the spurious repositioning of valves.It does appear that the assessment has included this aspect of the concern.(d)Total loss of system function: The potential for total loss of system function as a result of fire-induced redundant component failures or electrical distribution system (power source)failure needs to be addressed.
Please describe your remote shutdown capabi%ty, including the nature and location of the shutdown station(s), as well as the types of control actions which can be taken from the remote panel(s).Describe how your procedures provide for transfer of control to the remote shutdown station(s).
Provide an evaluation of whether loss of control power could occur prior to transferring control to the remote shutdown location andidentify the risk contribution of these types of failures (if these failures are screened, please provide the basis for the screening).
Response to Fire IPEEE Questions Page 18 of 27 Safe shutdown is normally accomplished from the Control Room by utilizing the safe shutdown equipment along with other available equipment.
The plant EOPs are used in these instances.
Some operator actions are typically required to be taken outside the Control Room for shutdown and would also be expected as a result of fires in specific fire areas.This is the preferred shutdown method and is defined as"normal safe shutdown." If there is a fire in any fire area which has the potential to interfere with performing shutdown activities from the Control Room, the operators will proceed to the alternative shutdown stations as directed by Procedure AP-CR.1 (which is a"direct" entry procedure) and the ER.FIRE series of procedures.
For five Ginna Station fire areas, compliance with the provisions of Section III.G.2 of Appendix R cannot be effectively or economically achieved due to the existing plant configuration (i.e., shutdown in these areas cannot be effectively performed from the control room).These areas are: 2.3.4 5.Control Complex (CC)a.Control Room (CR)b.Relay Room (RR)c.Air Handling Room (AHR)Cable Tunnel (CT)Auxiliary Building Basement/Mezzanine (ABBM)Battery Room A (BR1A)Battery Room 8 (BR1B)For these areas, RG8 E has determined that the appropriate technical approach necessary to comply with Section III.G of Appendix R is to provide an alternative shutdown capability per the provisions of Section III.G.3.The alternative shutdown method establishes a coordinated series of operational and procedural manipulations of existing redundant safe shutdown systems.This method provides independent control stations for the equipment and systems normally controlled from the Control Room.The alternative shutdown method provides an additional means to ensure safe shutdown of the Ginna plant in the event of an unmitigated fire in any of these five fire areas of concern.Two types of alternative shutdown stations have been designated:
1.Primary Shutdown Stations-stations that would be manned continuously and provided with the necessary instrumentation and support functions to meet safe shutdown performance goals;and 2.Support Stations-stations with staffing requirements of a transient nature.These are discussed below.Staffing requirements impose a constraint on the location and features of the remote shutdown stations.The Code of Federal Regulations and Ginna Station procedures and Technical Specifications require that at least seven operators and a Shift Technical Advisor Response to Fire IPEEE Questions Page 19 of 27 (STA)be assigned to each operating crew when in Modes 1 through 4.Since two operators are assigned to the fire brigade and would not be available for the first hour, only five operators and the STA remain for plant shutdown.For fires requiring ex-control room activities, these five operators and the STA are typically dedicated as follows: Head Control Operator (HCO)-responsible for establishing auxiliary feedwater flow to at least one steam generator and monitoring associated process variables.
Control Operator (CO)-responsible for assuring makeup and pressure control of the reactor coolant system and isolating secondary systems.3.Control Room Foreman (CRF)-responsible for tripping and manually loading equipment of480V buses in the Screenhouse building and monitoring turbine-driven AFW.4.Auxiliary Operator (AO)-responsible for assisting the STA in establishing on-site power, verification of closure of pressure boundary and spurious operation valves, and assisting other operators in stabilizing the plant.5.Shift Technical Advisor (STA)-responsible for assuring the availability of on-site power, starting the DGs, and assisting the HCO in stabilizing the plant.6.Shift Supervisor (SS)-responsible for stripping some DC electrical loads and maintaining oversight.
The HCO and the CO are assigned to Primary Shutdown Stations when not performing other duties in support of their prime functions.
The Auxiliary Operator acts as a"rover" for the first hour.The STA and CRF are initially assigned to a Support Station and, upon completion of required actions, report back to the SS.These five operators and the STA would be augmented at the end of the first hour by the operators recalled as part of the accident recovery team.For a fire in any plant area, all required safe shutdown functions can be achieved and maintained either by use of protected plant equipment operated from the Control Room in the normal mode, or by the operation of required equipment from a designated Primary Shutdown or Support Station.For the majority of fires, safe shutdown can be accomplished from the Control Room.However, for the five specified fire areas, shutdown from the Control Room may not be possible.Because of this, certain remote plant locations have been designated as Primary Shutdown or Support Stations.These locations contain the necessary control and instrumentation to achieve and maintain the required safe shutdown functions.
A fire at these locations does not impair the achievement and maintenance of safe shutdown from the Control Room.These locations and the capabilities they provide are described as follows.1.Char in Pum Room Prima Station-Auxilia Buildin Basement a.Transfer switch to isolate control circuits of Charging Pump A Bus 14 power breakers from fire; Response to Fire IPEEE Questions Page 20 of 27 b.Independent VCT level and pressurizer level indication to local indicator panel;c.Independent Appendix R DC power source for the local indicators panel;d.Local start/stop switches to operate Charging Pump A from this location.2.Auxilia Feedwater Pum Area Prima Station-Intermediate Buildin North b.C.d.Independent RCS loop temperature', steam generator level, steam generator pressure, turbine-driven AFW flow, pressurizer pressure and level indication; Independent Appendix R DC power source for the local indicator panel;Local operation of TDAFW pump DC lube oil pump;Local source range monitor hookup.b.Local operation of DG A feeder breaker (52/EG1A1) and isolation of DC control power to control circuit;Local operation of Bus 12 feeder breaker (Bus 14 480V feed from 4160V distribution);
Transfer switch to isolate the control power to Bus 14 and supply Charging Pump A control circuit with alternative DC power;Manual stripping of all non-safe shutdown loads.Diesel Generator Area Su ort Station a.Transfer switches to isolate required Control Room control circuits (for DG A);b.Alternative local DG A start/stop speed and voltage control;c.Alternative DG A diagnostic instrumentation.
480V AC Bus 14 Su ort Station-Auxilia Buildin Batte Rooms A and B Su ort Station Operation of breakers at Main Fuse Cabinets A and B, and Main DC Distribution Panels A and B to: a.b.C.d.Verify required power supply to Turbine Building DC Distribution Panel;Verify required power supply to Auxiliary Building Distribution Panels A and B;Verify required power supply to DG A and B DC Distribution Panels;Align TSC diesel generator DC power supply to Main Fuse Cabinet A and/or B for long-term DC supply if necessary; Isolate DC control power to potential spurious operation components.
Motor Control Centers C and D Su ort Station-Auxilia Buildin Isolate motive power to potential spurious operation components.
Response to Fire IPEEE Questions Page 21 of 27 7.480V AC Bus 18 Su ort Station-Screenhouse b.Local operation of DG A feeder breaker (52/EG1A2) and isolation of DC control power to control circuit;Local operation of Bus 12 feeder breaker (Bus 18 480V feed from 4160V distribution) and isolation of DC control power to control circuit;Local operation of the feeder breaker for Service Water pump A and isolation of DC control power to control circuits.Valve Locations Various valves must be checked and verified closed in order to ensure primary system integrity and to preclude spurious operation of these valves affecting the achievement and maintenance of safe shutdown.These valves are listed in the ER-FIRE procedures.
Other valves located in the specific safe shutdown flow path for a particular safe shutdown system are verified open or closed by the operator before the operation of the system.All valves that must be verified open or closed, either to ensure normal system operation or to prevent a spurious operation, will have their associated power breakers (AC or DC)shut off prior to the manual operation.
Fire-induced failures (e.g., hot shorts, open circuits or shorts to ground)postulated to cause loss of control power prior to transferral to the remote shutdown location will not prevent operation nor cause mal-operation of the alternative or dedicated shutdown method.Such loss of control power or post-fire mal-operation is prevented by: 1.Isolation/transfer switches which electrically isolate the alternative shutdown circuits from the fire areas of concern;2.The de-energization of unnecessary DC and AC control and power circuits at various distribution panels and buses;3.The isolation of instrument air supply to potential spurious operation solenoid valves;4.The provisions for alternative shutdown electrical power from sources which will be electrically protected and coordinated; 5.The separation of the alternative shutdown circuits from the fire areas of concern by rated fire barriers and penetration seals.Operator actions that must take place locally in the event of Control Room evacuation to prevent core damage from fire were identified.
The ER.FIRE series of procedures were previously developed to guide the operators during alternative shutdown operations.
These procedures are entered directly from AP-CR.1 or in parallel to the EOPs.The fire procedures are as follows: 1.ER-FIRE.1-Alternate Shutdown for Control Complex Fire Response to Fire IPEEE Questions 2.ER-FIRE.2-Alternate Shutdown for Cable Tunnel Fire Page 22 of 27 3.ER-FIRE.3-Alternate Shutdown for Auxiliary Building Basement/Mezzanine Fire 4.ER-FIRE.4-Alternate Shutdown for Battery Room A Fire 5.ER-FIRE.5-Alternate Shutdown for Battery Room B Fire The procedures were reviewed as part of the Fire IPEEE with specific human events added to the fault tree models to reflect each action (see response to RAI Question¹8).The importances of these human actions are described in Section 9.6.3.2 of Attachment 8.3.As is evident from this attachment, several of th'e ER-FIRE activities were identified as being of high or medium risk significance.
The ability of the Primary Stations to provide necessary indication to perform the above actions was also specifically modeled, i.e., failure of power or indication to the Stations was assumed to prevent the operator action with a probability
=1.The cumulative contribution to the overall fire CDF from failure to locally perform these human actions is to increase the CDF by a factor of 11.3.(If all these failures are assumed not to occur[i.e., failure probability
=0], the CDF is reduced by 9.5%.)
Response to Fire IPEEE Questions Page 23 of 27 7.The submittal indicates that the"automatic fire detection and suppression systems at Ginna were assumed to be installed per design specifications, following the National Fire Protection Association (NFPA)and NRC guidelines." The submittal also states that fire protection systems were assumed to be maintained regularly and that generic failure rates were used in the analysis.It is not clear that these assumptions were verified.Piease verify that the automatic fire suppression systems at Ginna are, in fact, designed and maintained according to NFPA sfandards.
Ginna Station's fire protection systems were installed during three different periods: (1)with the original plant systems from 1966 to 1969, (2)beginning in 1979 with upgrades related to 10CFR50 Appendix A as a result of the Systematic Evaluation Program (SEP), and (3)finishing in 1985 with 10CFR50 Appendix R upgrades.Original plant fire suppression systems were designed utilizing codes and engineering judgement applicable in the 1966-1969 time frame.SEP-related suppression systems were designed by an A/E firm (Gilbert/Commonwealth, as per RG&E Engineering Work Request[EWR]1833)using applicable NFPA codes beginning in 1979 for guidance and engineering judgement regarding the hazards to be protected.
Plant fire detection and annunciation systems were designedby RG&E engineering personnel utilizing applicable NFPA codes for guidance and engineering judgement, as documented in EWR 1832.NRC SER's dated 2/14/79, 12/17/80, 2/6/81 and 6/22/81 document acceptability of installed systems and other plant fire protection features with respect to General Design Criterion 3.Appendix R suppression systems were designed by an A/E firm (Gilbert/Commonwealth, as per RG8E EWR 4139)using NFPA codes applicable in 1985 for guidance and engineering judgement regarding the hazards to be protected for additional areas identified to require improved capability.
Additional plant detection and annunciation systems were designed by RG8 E engineering personnel utilizing applicable NFPA codes for guidance and engineering judgement, as documented in EWR 4176.Separate NRC SER's dated 2/27/85 and 3/21/85 document acceptability of these installed systems and general compliance with III.G and III.L of Appendix R to 10CFR50.Plant fire protection systems are regularly tested and maintained as required by the applicable sections of the Ginna Station Technical Requirements Manual (i.e., tests previously required by technical specifications) and plant procedures.
Data on the operation of plant suppression and detection systems are included in analysis DA-ME-97-081 which reviewed six years of plant performance history, in order to justify extended surveillance intervals.
This was reviewed and accepted by NRC reviewers.
Therefore, due to the vintage of Ginna Station, the fire suppression systems were not designed to NFPA standards; however, as they have been modified, they have used NFPA standards for guidance.These systems, and their testing program, have been previously reviewed and approved by the NRC as documented above.As such, the impact of the assumption on the IPEEE as documented in the 1998 submittal is considered neglible.
0 Response to Fire IPEEE Questions Page 24 of 27 8.The Ginna fire IPEEE submittal identifies one plant improvement planned for implementation and five additional plant modifications that were being considered.
It is not clear if these improvements and modification were credited in the analysis, and whether or not the changes have been, or will be, implemented.
Please provide the currenf sfafus of these planned and proposed planf modifications andindicafe whefher or nof the changes have been creditedin fhe analysis.As discussed in Section 6 of the 1998 submittal, the following plant modification was planned and, therefore, credited in the analysis: "Fuses will be installed on control circuits routed in the screen house associated with the functioning of 4160 VAC circuit breakers 52/1 7SS and 52/1 8SS.The fuses will be designed to open if grounding occurs, as is postulated to occur for screen house fires, permitting the overcurrent protection function associated with circuit breakers 52/17SS and 52/18SS to remain intact." This modification was implemented on March 4, 1999, with the installation of two fuses in series each with the two circuit breakers, namely fuses FUMCB/XSH1-N and FUMCB/XSH1-P for 52/18SS, and fuses FUMCB/XSH2-N and FUMCB/XSH2-P for 52/1 7SS.The 1998 submittal also documented five additional plant modifications that were under consideration.
In response to several NRC questions, and the desirability to incorporate the Fire IPEEE into the Ginna Station Risk Monitor (i.e., EOOS), the fire analysis was re-performed.
This re-analysis maintained the previous fire frequencies and consequences (i.e., assumed fire-induced failures), but added models of the fire suppression systems and modeled required operator actions in more detail.The results of this re-analysis are presented in Attachment B.3.As shown in Sections 11.6.2 and 11.6.3 (see Attachment B.3), no vulnerabilities were identified, and none of the five plant modiTications identified in the 1998 submittal remain under consideration.
The basis for eliminating the need for these plant modifications was primarily removing unnecessary conservatism and appropriately crediting existing procedural actions.As such, no plant modifications are under consideration.
A procedural enhancement as discussed in Attachment B.3 was identiTied for commercial considerations only and is not required based on risk insights.
Response to Fire IPEEE Questions Page 25 of 27 9.Both manual actuation of automatic fire suppression systems and manual fire suppression were modeled for selected fire scenarios in the Ginna fire assessment.
In some scenarios, failure of automatic fire suppression, failure to manually initiate automatic suppression systems, and failure to manually suppress the fire were modeled.The submittal does not address the potential for dependent failure of both automatic and manual suppression systems (e.g., common mode failures related to a common water source)~Pleaseindicateif dependent failures between the automatic and manual suppression systems were consideredin the assignment of the suppression probabilities.
Also indicate if dependencies between the failure of personnel to manually initiate an automatic suppression system and failure of personnel to manually suppress a fire were considered.
Indicate if dependent failures that would cause the failure of an automatic suppression system to actuate and also prevent manually initiating the system were consideredin the analysis.The potential for dependent failures of systems and operator dependencies were considered and evaluated for the IPEEE.The discussion is presented in three parts: (1)considerations of potential dependencies between automatic and manual suppression systems, (2)considerations of potential dependencies between the failure of personnel to manually initiate automatic suppression systems and the failure of personnel to manually suppress a fire, and (3)considerations of potential dependencies between faults that cause automatic actuation to fail that would also prevent manual initiation of the system.1.No significant dependencies were found to exist between manual suppression efforts and installed suppression systems at Ginna Station.Although manual suppression efforts may utilize the fire water system, which is shared by the installed fire sprinklers, the unavailability of fire water was found to be insignificant relative to the failures of manual suppression and the fire sprinkler unavailability.
Fire water is supplied to the plant from three independent and redundant sources: city water provides one source (for plant hydrants), a diesel-driven fire pump supplying lake water provides a second source, and a motor-driven fire pump supplying lake water provides a third source (the pumps have independent suction lines, and actuation mechanisms).
The diesel-driven and motor-driven fire pumps, and their actuation systems, were specifically modelled, while the city water system was not.However, there are no dependencies between the plant fire pumps and city water system that could be impacted by a fire.Additionally, many fires can be suppressed manually using extinguishers (in fact, the experience data indicates most fires are manually suppressed with extinguishers).
This provides diverse equipment for fire suppression.
Smoke sensors that alert operators of the presence of fire operate independently of installed suppression systems.Due to the presence of multiple fire brigade personnel that dispatch in response to plant fires and the significant differences in the actions associated with manually initiating the installed fire sprinklers from the control room and manually suppressing the fire, no signiTicant dependencies were judged to exist between these two actions.Note that modeling of manual actuation of the fire sprinkler system was included for"early" suppression (within a few minutes), while other manual Response to Fire IPEEE Questions Page 26 of 27 suppression efforts are longer term, again providing a basis for independence.
Additionally, failure of smoke sensors, which would constitute a common cause failure of fire brigade dispatch, was examined.The smoke sensor circuits are designed such that a break in the circuit, or failure of a sensor, would not impact the remaining circuits and sensors.Also, such a failure will trigger an alarm indicating a circuit failure.Therefore, failure of the smoke sensors is significantly less likely than the combined failure probability for manual actuation of the sprinklers and manual suppression.
Finally, a review of the results presented in Attachment B.3 (see Section 9.6.3.4)shows that only failures of the fire brigade to extinguish a fire in the Control and Battery Rooms were of medium risk significance (none were high).These two rooms have no installed suppression system.3.Dependencies between the automatic sprinkler actuation system and the manual sprinkler actuation system were addressed by only allowing recovery of automatic actuation failures (i.e., start circuitry) vs.hardware failures of the diesel-driven and motor-driven fire pumps or sprinkler deluge valves.That is, the PSA explicitly modeled the manual actuation recoveries and accounted for any dependencies with the automatic actuation systems within the fault tree logic.It should be noted that the model did not specifically model the ability to cross-connect the city water system to the onsite system as this was assumed to be included within the human failure probability to extinguish the fire as discussed in the response to RAI Question¹1.
Response to Fire IPEEE Questions References Page 27 of 27 1.EPRI,"Fire-Induced Vulnerability Evaluation (FIVE)," EPRI TR-100370, April 1992.2.J.Chen, et al.,"Procedural and Submittal Guidance for the Individual Plant Examination of External Events (IPEEE)for Severe Accident Vulnerabilities," NUREG-1407, United States Nuclear Regulatory Commission, June 1991.3."Independent Plant Examination for External Events (IPEEE)for Severe Accident Vulnerabilities
-10CFR 50.54(f)," Generic Letter 88-20, Supplement No.4, United States Nuclear Regulatory Commission, June 1991.4.J.Lambright, et al.,"Fire Risk Scoping Study: Investigation of Nuclear Power Plant Fire Risk, Including Previously Unaddressed Issues," NUREG/CR-5508, prepared for the United States Nuclear Regulatory Commission, January 1989.5."User's Guide for a Personal-Computer-Based Nuclear Power Plant Fire Data Base," NUREG/CR-4586, prepared for the United States Nuclear Regulatory Commission, August 1986.
Response to Fire IPEEE Questions ATTACHMENT B.I EXTRACTS FROM APPENDICES B AND E TO THE I998 SUBMITTAL B.Location Characteristics Table All relevant plant information was assembled into a relational database using the software Microsoft ACCESS.The computer database imported existing plant information provided by the Ginna plant personnel and related each piece of plant information to the fire area and fire zones defined in this analysis.The information was then summarized into a set of location characteristics tables (LCT)for subsequent analyses.'n LCT was developed for each fire area within the control area of Ginna.Each LCT contains 7 items: Fire Area Description.
This section describes the fire zones within each fire area, the location and the floor area covered by the fire area.Fire/Smoke Hazards in this Fire Area.The information contained in this section was obtained from review of the Ginna Station Appendix R program information.
This section provides an estimate of the normal inventory of in-site and transient fire and smoke hazards.An estimate of the fire severity (in hours)is also included.The fire severity was obtained by dividing the fire loadings by the heat rate for Standard Exposure Fire (80,000 BTU/ft'-hr) established by the National Fire Protection Association.
Fire Protection Features in this Fire Area.This section describes the fire detection and suppression capabilities equipped in the fire area.This includes the primary and backup sup'pression system and the barrier rating of the fire area.The information included in this section was obtained from Reference 11 (Tier 1).Fire Zone'Adjacent to the Fire Zones in this Fire Area.This section lists the adjacent fire zones to the fire zones within the fire area.The adjacency information is essential in the development of fire propagation scenarios.
Potential Key Equipment and their Associated Basic Event Impacted by Fire/Smoke Hazards in this Fire Area.This section includes a list of plant components, within each fire zone in the fire area, that can be affected by fire and smoke hazards and whose failure can lead to an initiating event, or can impact the accident mitigation systems.Some of the components included in this section also act as fire ignition sources and fire hazards.Thus, each component was categorized to a component type for identification purpose.This information is also used in the consideration of the fire frequency apportionment analysis (see Appendix D).P:11 686'AGE.B.DOC/oc B-1 0
B-.Location Characteristics Table 6.Potential Raceway (Conduit and Cable Tray)and their Associated Equipment/Basic Event Impacted by Fire/Smoke Hazards in this Fire Area.This section provides a list of raceways in each of the zones in the fire area, Failure of the raceway can lead to the loss of the intended function of plant components (that are not within the fire zone)whose failure can lead to an initiating event, or can impact the accident mitigation systems.The cable trays associated with the safety equipment were identified from a database relating cables and conduit to the equipment served.This database resides at the Electrical Engineering Department of the Ginna Station and contains all cable tray information related to the Appendix R and fire PRA programs.The fire zone location of each cable tray was then identified by looking up the identification number of the cable trays and finding the fire zone location from the cable routing diagrams.7.Walkdown Notes.This section includes the notes taken during the two spatial interactions walkdowns.
PA1886%GE-B.DOCIoc B-2 LOCATION CKQU).CTERISTICS TABLE~~FlRE AREA: ABBM 1.FIRE ZONES IN THIS FIRE AREA:'IRE ZONE ELEV (FT.)FIRE ZONE DESCRIPTION I BUILDING FLOOR AREA (SQ, FT.)ABB 23S 8 AUXILIARY BUILDING BASEMENT LEVEL 9590 ABM 253'UXILIARY BUILDING MEZZANINE LEVEL 10570 2.FIRE/SMOKE HAZARDS IN THIS FIRE AREA: FIRE ZONE COMBUSTIBLE LOADING (BTU)FIRE SEVERITY (HRS)AB8 8.150 22.819 6.1 min.17.1 min.3.FIRE PROTECTION FEATUIKS IN THIS FIRE AREA: FIRE ZONE FIRE DETECTION FEATURES FIRE SUPPRESSION FEATURES AB8 Smoke deiersors Preackon sprinkfers, manual I Smoke deleorors Manual 4.FIRE ZONE(S)ADJACENT TO THE FIRE ZONE(S)IN THIS FIRE AREA: j FIRE ZONE ADJACENT FIRE ZONE PATHWAY PATHWAY RATING (HOUR)ABB AB8 AB8 ASM ASM CHG RC-1 IBS4I RC-2 68-1 IBS.1 WALUOPEN WALL WALL WALL WALL 5.POTENTIAL KEY EQUIPMENT AND THEIR ASSOCIATED BASIC EVENT(S)IMPACTED BY FIRE/SMOKE HAZARDS IN THIS FIRE AREA: FIRE EQUIPMENT BASIC AFFECTED'VENT BASIC EVENT DESCRIPTION I ABB 1108 AB8 111 ABB 1120 AB8 313 I ABB 52/CSP1A ABB 52/CSP18 ABB 52/RHRP1A ABB 52/RHRP1A ABB 52/RHRP18 ABB 52/RHRP18!AB8 52/SIP 1 A ABB 52/SIP1A ABB 52/SIPI8 I ABB 52/SIP I 8 AB8 52/SIP I CI ABB 52/SIP 1 C2 AB8 624 AB8 625 ABB 8508 AB8 856 AB8 657A AB8 6578 ABB 8570 ABB 860A ABB 6608 CVAVP01108 CVAVP00111 CVAVC0112C CVMVX 0031 3 CSMPFSI02A CSMPF S1028 RRMPFAC01A RHMPFACOIA RHMPFAC018 RRMPFAC018 SNPFSIOIA SRMPFSIOIA SNPFSI018 SRMPFSIOI 8 SNPFS101C SRMPF SIOIC RRAVF00624 RRAVF00625 RRMVP0850A RRMVP06508 RHMVK00656 RRMVP0657A RRMVP 08578 RRMVP0657C CSMVP0660A CSMVP06608 AOV 1108 IN UNE FROM BA BLENDER TO CHARGING PUMP SUCTION FAILS TO OPEN (STDBY: AOV 111 IN LINE FROM RMW PUMPS TO BA BLENDER FAILS TO OPEN (STANDBY)AIR.OPERATED VALVE 112C FAILS TO CLOSE MOV 313 Fels to Close CONTAINMENT SPRAY PUMP PSI02A FAILS TO RUN (IN JECTION)CONTAINMENT SPRAY PUMP PSI028 FAILS TO RUM (IN JECTION)MOTOR.DRIVEN PUMP PACOIA FAILS TO RUM (RECIRC)RHR PUMPA(PACOIA)
FAILSTO RUN RHR PUMP 8 (PACOI 8)FAILS TO RUN MOTOR-DRIVEN PUMP PACOI8 FAILS TO RUN (RECIRC)PSOI A FAILS TO RUM PSIOI A FAILS TO RUN PSI018 FAILS TO RUN PS/018 FAILS TO RUN PSI01C FAILS TO RUN PSIOI C FAILS TO RUN FAILURE OF AOV 624 TO THROTTLE FLOW FAILURE OF AOV 625 TO THROTTLE FLOW MOTORS)PE RATE 0 VALVE 850A FAILS TO OPEN (RECIRC)MOTORAPERATED VALVE 6508 FAILS TO OPEN (RECIRC)MOTOR.OPERATED VALVE 856 TRANSFERS CLOSED (INJECTION)
MOTORS)PERATED VALVE 00656 PALS TO CLOSE (STANDBY)MOV 657A FAILS TO OPEN MOV 8578 FAILS TO OPEN MOV 857C FAILS TO OPEN MOTOR OPERATED VALVE 660A FAILS TO OPEN ON DEMAND (INJECTION)
MOTOR OPERATED VALVE 6608 FAILS TO OPEN ON DEMAND (INJECTION)
P816361RCE B.I.DOC/cc B-3 9/lb/93 12;IO;06 PM LOCATION CHARACTERISTICS TABLE FIRE AREA: ABBM~AB8 860C CSMVP0660C ABB 860D CSMVP06600 ABB MOTOR OPERATEO VALVE 6600 FAlLS TO OPEN ON DEMAND (INJECTION)
MOTOR OPERATED VALVE 8600 FAILS TO OPEN ON DEMAND (INJECTION)
MOTOR OPERATEO VALVE 896A FAILS TO CLOSE ON DEMAND (RECIRCULATION)
AB8 ABM I ABM ABM ABM LT.920 LT-921 4615 4616 4735 52/16 52/I 6SS 52/COP I 8 52/CF18 C RMVZ06968 CSLTLLT920 CSLTLLT921 SWMVC04615 SvvMVC04616 SWMVC04735 ACCBD16118 ACT1FSST16 ACCBN16168 ACC BN1613C MOTOR OPERATED VALVE 8968 FAILS TO CLOSE ON DEMAND (RECIRCULATION)
RWST LEVEL TRAN SMllTER LT.920 FAII.S LOW RWST LEVEL TRANSMllTER LT.921 FAILS LOW Soniice Water Header Isoladon MOV 4615 Fafs To Cisse On Demand Service Water Header Isola don MOV 4616 Pals To Close On Demand Service Water Header Isolation MOV 4735 Fels To Close On Demand Ac BREAKER 52/16 (BUS16/118)
FAILS TO OPERATE Fauk on 4160/480 VAC Bus 16 supply Transformer PXABSS016 Ac BREAKER 52/COP 18 (8 US 16/168)FAILS TO OPEN Ac BREAKER 52/CFI 8 (BUS16/13C)
FAILS TO OPEN ABii 52ICF1C ACCBN1614A Ac BREAKER 52/CFIC (BUS16/14A)
FAILS TO OPEN ABM ABM i ABM i ABM I ABM 52/CHPI 8 52/CHPI C 52/EG181 52/MCCD 52/MCCD 52/SFPPB ACCBN16158 ACCBN1615C ACCBD1611C DCCFRA188P ACCBRMCC ID ACCBN1617A Ac BREAKER 52/CHPI 8 (BUS16/158)
FAILS TO OPEN AC BREAKER 52/CHP1C (BUS16/15C)
FAILS TO OPEN OGB OUTPUT BREAKER 52/EG181 (BUS16/I 1c)FAILS TO OPERATE Fuse FUDCPDPA8018/2P Fails Opon (To MCC D)460 VAC MCCD Feeder Circuit Breaker 52/MCCO (8VS1 6/I 60)Trans/ors Open)Ac BREAKER 52/SFPPB (BUS16/17A)
FA!LS TO OPEN ASM 738A 7388 617 83/I 6 9704A CCMVP0738A CCMVP07358 CCMVK00617 DCREBBUSIB AFMVX9704A MOTOR4)PERATED VALVE 736A FAlLS TO OPEN MOTORS)P ERAT ED VALVE 7388 FAILS TO OPEN MOTOR4)P VALVE 817 TRAHSFERS CLOSED RELAY 83E/16 (BVS 16 Oc THROWOVF R)FAILS TO OEENERGIZE Motor operated valve 9704A fals to dose ABM ABM ABM ABM ABM ABM ABM I I ABM I ABM ABM ABM ABM ABM ABM I ABM ABM ABM ABM i ABM 97048 ACPDPAB10 ACPDPA811 ACPDPA812 ACPDPA813 BATP1 8 BUS16UV BUS16UV BUS16UV BUS16UV BUS16UV BUS16UV BUS16UV BVS16UV BUS16VV BUS16UV BUS16UV BUS16UV BUS16UV BVS16UV 8US16UV BUS16UV BUS16UV BUS16W BUS16VV BUS'l6UV BUS16UV BU S16UV BUS16UV BUS16UV BUS16UV AF MVX97048 AC82FOAB10 ACB2FOA811 AC82FOA812 AC82FOA813 CVMPAPCH38 UVREEOX316 WLCOBX46A UVLCDBX56A UVREEOX616 WLC D BX66A WLCDBX16A UVLCDX316A WLCOX416A WLCDX516A UVLCDX61 6A AFCTR78616 UVREEOX216 WLCOBX616 AFCTR07616 UVLCO BX36A UVREEOX116 UVREKOX416 WCFR16FV2 UVRE E BX316 UVREEBX216 WLCDBX316 UVLCDOX418 UVREEBX116 WREEBX516 UVLCDBX116 Motor operated valve 97048 fails lo doss LOCAL FAULT ON 460 VAC DIST PANEL ACPDPA810 TO PRZR PROPOR HEATER GROUP A1 LOCAL FAULT ON 460 VAC DIST PANEL ACPDPA811 TO PRZR PROPOR HEATER GROUP A2 LOCAL FAULT ON 490 VAC DIST PANEL ACPDPA812 TO PRZR BACKUP HEATER GROUP 81 LOCAL FAULT ON 490 VAC DIST PANEL ACPDPAB13 TO PRZR BACKUP HEATER GROUP 82 BORIC ACID MOTOR4)RIVEN PUMP PCH038 FAILS TO START Relay 27X3/16 faits lo energize RELAY 278X4/16 DRIVER (HEAT SINK ASSEMBLY¹2)GENERATES A SPURIOUS SIGNAL RELAY 278X5/16 DRIVER (HEAT SINK ASSEMBLY<<2)GENERATES A SPURIOUS SIGNAL Relay 27X6/16 fa¹s to energize RELAY 278X6/16 DRIVER (HEAT SINK ASSEMBLY<<2)GENERATES A SPURIOUS SIGNAL RELAY 27BXI/16 DRIVER (HEAT SINK ASSEMBLY¹2)GENERATES A SPURIOUS SIGNAL RELAY 27X3/16 DRIVER (HEAT SINK ASSEMBLY Nl)GENERATES A SPURIOUS SIGNAL RElAY 27X4/16 DRIVER (HEAT SINK ASSEMBLY Nl)GENERATES A SPURIOUS SIGNAL RELAY 27XS/16 DRIVER (HEAT SINK ASSEMBLY NI)GENERATES A SPURtOUS SIGNAL RELAY 27X6/16 DRIVER (HEAT SINK ASSEMBLY<<1)GENERATES A SPURIOUS SIGNAL CONTACT 27BX6/16 (3A)TRANSFERS OPEN Relay 27X2/16 fails to energize Relay 278x6/I 6 drtver (Hea\5'stk Assembly¹2)fails to energize CONTACT 27X6/16 (~)TRANSFERS OPEN RELAY 278X3/16 DRIVER (HEAT SINK ASSEMBLY¹2)GENERATES A SPURIOUS SIGNAL Retsy 27XI/16 fels lo onorgize BUS 16 UNDERVOLTAGE RELAY 27X4I16 TRANSFERS TO ENERGIZED Fuss N2 (FUARBI RC16/2 P)fails open (retay cabinet)Relay 278X3/I 6 faits lo oner gee Relay 27BX2/16 fails to energ'ce Relay 27BX3/I 6 driver (Heal Sink Assembly¹2)has to energce Relay 27x4/16 drive (Heal sink Assembly<<I)fails to energize Relay 278X1/16 fess lo energce Relay 278X5/I 6 lails to energcs Relay 278XI/I 6 driver (Heat Sink Assembly¹2)fails lo energize'I 4 P016¹NIICE.B I.DOC/oc B-4 9/Zz/9¹)2: lgi07 PM r.ocarroz CH~CxEIUSxrcS max,E UVRE EBX616 FIRE AREA:;ABBM ABM BUS16UV Retay 27BXB/I 6 fails to energize ABM BUS16UV ABM BUS16UV ABM BUS16UV ABLI BUS16W ABM BUS16VV ABM BUS16UV ABM BVS16UV ABM BUS16UV ABM BUS16UV ABM BVS16W ABM BVS16W ABM BVS16W ABM BVS16UV ABM BVS16UV ABM BVS16UV ABM BVS16W ABM BVS16UV ABM BUS16UV ABM BUS16W ABM BUS16UV ABM BUS16VV ABM BUS16UV ABM DCPDPA8018/02 ABM DCPDPABOIB/04 ABM DCPDPABOI8/05 ABM DCPDPCB038/19 ASM LT.112 ABM LT-139 ABM MCCJ ABM MCCM ABM PT-945 ABM PT.946 WLCOOX616 UVLCDOX516 WLCDOX316 WLCDBX516 UVLC DOX116 UVCFR16F U3 WLCDBX416 UVRE KBX316 UVLC D BX216 UVLC DOX216 UVLCOX116A WREKOX116 WREKBX616 VVREEBX416 UVREKBX416 UVREKBX116 VVREKOX616 WRE KOX516 UVRE EOX416 UVREKOX316 UVRE EOX516 UVREKBX516 DCCSRA1 BBX DCCF RA1 8 DN OCCFRA18EN DCBDFAUXDB CVLTD00112 CVLTD00139 ACCBRMCC1 J ACCBRMCC1M ES PTD PT945 ESPTDPT946 Relay 27X6/16 driver (Heat Sink Assembly¹I)fais to energize Relay 27XS/16 driver (Heat Sink Assembly<<I)tails to energize Relay 27X3/16 driver (Heat Sink Assembly<<1)fails to energize Relay 278X5/18 driver (Heat Sink Assembly¹2)faits to energize Rotay 27XI/18 drive (Heal Sink Assembly<<1)fails lo energize Fuse¹3 (F VARBIRC16/3-N) fails open (relay cabinel)Relay 278X4l16 driver (Heat Sink Assembly¹2)tails to energize BUS 16 UNDERVOLTAGE RELAY 27BX3/16 TRANSFERS TO ENERGIZED Relay 27BX2/I 8 driver (Heat Sink Assembly¹2)Ms to energtze Relay 27X2/1 6 drive (Host Sink Assembly¹I)tails to enorfjize RELAY 27X1/I 6 DRIVER (HEAT SINK ASSEMBLY¹1)GENERATES A SPURIOUS SIGNAL BUS 16 VNDERVOLTAGE RELAY 27X1/16 TRANSFERS TO ENERGIZED BUS 16 UNDERVOLTAGE RElAY 27BX6/16 TRANSFERS TO ENERGIZED Relay 278X4/16 fails to energize BUS 16 UNDERVOLTAGE RELAY 278X4/16 TRANSFERS TO ENERGIZED BUS 16 UNDERVOLTAGE RELAY 278X1/16 TRANSFERS TO ENERGIZED BUS 16 VNDERVOLTAGE RELAY 27X6l16 TRANSFERS TO ENERGIZED BUS 16 UNDERVOLTAGE RELAY 27XS/16 TRANSFERS TO ENERGIZED Relay 27X4/16 tais to energize BUS 16 UNDERVOLTAGE RELAY 27X3/16 TRANSFERS TO ENERGIZED Relay 27XS/16 tais to energize BUS 16 UNDERVOLTAGE RELAY 278XS/16 TRANSFERS TO ENERGIZED Disconnoa Swikcn OCPDPABOI 8/02 Transfers Open (To MCC 0)Fuse FUDCPDPABOI8/4N Fai/s Open (To Bus 18-Normal)Fuse FUDCPDPABOI BISH Fais Open (To Bus 14-Emergency)
Auxiliary Building DC Distribution Panel 8 (DCPDABOI 8)Local Faut VOLUME CONTROL TANK (VCT)LEVEL TRAN SMITTER LT-112 FAILS TO RESPOND VOLUME CONTROL TANK (VCT)LEVEL TRAN SMITTER LT.139 FAILS TO RESPOND 480 VAC MCCJ Feoder C'rcuit Breaker 52/MCCJ (MCCO/OSIcK)
Transfers Open 480 VAC MCCM Foeder Circuit Breaker 52/MCCM (MCCO/1 50)Transfers Open CONTAINMENT HIGH PRESSURE TRAN SMllTER PT-945 FAILS TO RESPOND ON DEMAND CONTAINMENT HIGH PRESSURE TRANSMllTER PT-946 FAILS TO RESPOND ON DEMAND 6.POTENTIAL RACEWAYS (CONDUITS AND CABLE TRAYS)AND THEIR ASSOCIATED EQUIPMENT/BASIC EVENT(S)IMPACTED BY FIRE/SMOKE HAZARDS IN THIS FIRE AREA: FIRE ZONE RACEWAY AFFECTED EQUIPMENT AFFECTED CABLE FUNCTION BASIC EVENT AFFECTED BASIC EVENT DESCRIPTION AB8 00702 AB8 C0702 AB8 C0702 AB8 C0703 BSOA P 480 VAC POWER RRMVPOBSOA MOTORS)PERATED VALVE 850A FAILS TO OPEN[RECIRC)85CA P 460 VAC POWER RRMVROBSOA MOTORS)P VALVE 850A TRANSFERS OPEN[RECIRCULATION)
BSCA P 480 VAC POWER RHMVR0850A MOTOR-OP VAI.VE 850A TRANSFERS OPEN (INJECTtON) 850A C 125 VOC CONTROL RRMVPOBSOA MOTOR.OPERATED VALVE 850A FAILS TO OPEN (RECIRC)C 125 VDC CONTROL RRMVR0850A MOTOR4)P VALVE BSOA TRANSFERS OPEN[RECIRCULATION)
AB8 C0703 AB8 C0735 BSOA C 125 VDC CONTROL RHMVR0850A MOTOR4)P VALVE 850A TRANSFERS OPEN (INJECTION[
857A P 480 VAC POWER RHMVR0857A MOTOR.OPERATED VALVE 857ATRANSFERS OPEN 857A P 480 VAC POWER RRMVP0857A MOV 857A FAlLS TO OPEN AB8 C0735 857A P 480 VAC POWER RRMVR0857A MOTORS)PERATED VALVE 857A TRANSFERS OPEN 857A C 125 VDC CONTROL RRMVP0857A MOV 857A FAILS TO OPEN AB8 CO/36 857A C 125 VDC CONTROL RRMVR0857A MOTOR.OPERATED VALVE 857A TRANSFERS OPEN 657A C 125 VDC CONTROL RHMVR0657A MOTOR.OPERATED VALVE 857A TRANSFERS OPEN I'.llaz6IRGE 8 I.DOC/oc 8-5 gr)5/gf/I itigi07 PM Pages B-6 through B-47 are similar and not included to reduce paper volume.
r.ocaYrON CIA CYmrSYrcS mar,K FIRE AREA: I ABM R3408 I ABM R3408 I ASM R3408 ABM R34$0 ABM R3412 ABM R3414 ABM R3689 ASM R3689 ABBM PT429 PT429 PT429 LT426 FT465 FT474 LT-921 LT-921 I ALARM/IND/CONT I ALARM/IND/CONT I ALARM/IND/CONT I INDICATION I RPS CHANNEL 2 (WHITE)I RPS CHANNEL 3 (BI.UE)ESPTDPT429 PRESSURIZER LOWPRESSURETRANSMITTER PT429 FAILS TO RESPOND ON DEMAND i EXPTLPT429 PRESSURIZER LOW PRESSURE TRANSMITTER PT429 FAILS LOW RCPTLPT429 PRESSURE TRANSMllTER PT429 FAILS LOW LT426 PRZR LVL XMTR i ESFTD00465 STEAM GENERATOR A FLOW TRANSMITTER FT 465 FAILS TO RESPOND I ESFTD00474 SG 8 STEAM FLOWTRANSMITTER FT474 FAILS j TO RESPOND CSLTDLT921 RWST LEVEL TRANSMffTER LT-921 FAILS TO RESPOND 1 CSLTLLT921 RWST LEVEL TRANSM(ITER LT-921 FAILS LOW I ABM R3969 t ABhl R3971 I ASM R3973 TE41081 LT427 PT430 RCLYDLM427 INSTRUMENT LOOP CURRENT REPEATFR LM 427 FAILS TO RESPOND I ALARM/IND/CONT I ALARM/IND/CONT ESPTDPT430 PRESSURIZER LOW PRESSURE TRANShliTTER PT430 FAILS TO RESPOND ON DEMAND C TE41081 TEMPERATURE ELEMENT FOR LOOP B COLD LEG I ASM R3973 ABM R3973 ASM R4086 ASM R4068, PT430 PT430 LT428A PT4208 I ALARM/IND/CONT I ALARhMND/CONT I INDICATION EXPTLPT430 PRESSURIZER LOW PRESSURE TRAN SM/ITER PT430 FAILS LOW RCPTLPT430 PRESSURE TRANSMllTER PT430 FAILS LOW LT428A PRZR LVL WIDE RANGE.XMTR PT4208 PRESSURE TRANSMITTER REACTOR COOLANT I SYSTEM INST LOOP 4208 I ABM R4360 P ABM R4369 ASM SAC0212A ASM SAC0212A ABM SAC0212A ABM SAC02$28 ABM SAC02$28 ABM SAC0214 ABM SAC0214 LT.505 LT.507 86198 86198 86198 86198 593 86168 C 125 VDC CONTROL RC<9$Spurious ope6ny olRCS head vent if kt corlunctiet with SVW90?C 125 VDC CONTROL IASVP86198 SOLENOID VALVE 86198 FAILS TO OPEN C 125 VDC CONTROL RCREB451AX RELAY PC451.X FAILS TO DEZNERGIZE C 125 VDC CONTROL IASVP86198 SOLENOID VALVE 86198 FAILS TO OPEN C 125 VDC CONTROL RCRE8451AX RELAY PC45$.X FAILS TO DE-ENERGIZE C 125 VDC CONTROL RC493 Spurious openiny of RCS head vent if in cojjuncten with SV492?C 125 VDC CONTROL IASVP86168 SOLENOID VALVE 86168 FAILS TO OPEN LT-505 STEAM GENERATOR EMSOIA WIDE RANGE I LEVEL TRANSMITTER C LT407 STEAM GENERATOR EMSOI8 WIDE RANGE LEVEL TRANSMITTER ABM SAC 0216 ABM SAC0216 591 C 125 VDC CONTROL C 125 VDC CONTROL RC491 Spurkxus openiny of RCS head vent it in conjunction with SV.5907 RC-593 Sptukus openksy of RCS head vent 8 in conjunct'en vrith SV-592?7.SPATIAL INTERACTIONS ANALYSIS WALKDOWN NOTES: FIRE ZONE ABB ABM WALKDOWN NOTES~3 51 pumps about 6'enter@enter (pheos A2.A3).2 CS pumps about S'eecreenter.
about ly'rom 51 pumps (phao Ae).Coeol panels south of 31 pumps (pleto AS).3 MOVs west of RWST on ehcr side of eoncrcte wall and I small pump (photo Ad).2 SFP cooling pumps near west stahwetl (phoe A7).RHR pueps in pit below, thh kvcl near wet stahwell with 5 cher pumps.PCs stored in rack jet ouuide charging pump cubicle.4/2/98 WD Sl peep abks in conduit.There 4 some rash in ans.Charging pumps in separatc cubkde with fire rated barricn.Heat racing on thc piping to Sl and cbg.No signitiaat combuwibles between RHR arcs on west cnd, and Sl wa.so fire In IIHR arcs unlikely to spread.Conduits to RHR room and pumps are very stpwatc.2 SW MOVs (9701 A, 970I8)ncw west sairwell, 3'pan (pheo AS).3 CCW MOVs (73SA, 73SB, 8 l7)southwcn of RWST, 6'part (photo Ap).4 CCW MOVs just teuidc conuinmcnt.
west of RWST (photo A IO).2 MOVs (S97, 89S)cwt of RWST.3'pan (phao A I I).2 SW MOVs near south wall, southeast of RWST (pheo AI2).Eery to cable tunnel (phaos A13, A l4).Cabl>>rays near ast stauwell, Cf II I (wrapped)and CT I I 0 (not wrapped)(phceo AI5).MCC IM, Bus l6.MCC ID.DC power abincts.2 small pumps near cwt stairwell.
4/2/PS WD Rotc thw the line listed on the fisc Response Phn diagram as H2 Is aciualty N2.At the Cf exit.there h a'smoke banicr (wbkh is sieyar to a fire banier, but is not qualified).
and the cables we sprayed for about 6'.There are spray shicMs on thc MCC and bus 16.The charcoal fdtcr unit h 5'rom bus ld, and is totally cncloscd with fire suppression.
Thc mini-purge AOV CIV has no local operator, but has lire wrap above the valve.Stalnvcyt betwccn (toes have fue water sprays to prcv<<e lire spread bcrween f)ours.I".IldgdtRGB B.I.DDC/oc r B-48 9/21/yg l2:$0:23 PM LOCATION CHAIR CTEMSTICS TABLE FIRE AREA: ABI 1.FIRE ZONES IN THIS FIRE AREA: I FIRE ZONE ELEV (FT.)FIRE ZONE DESCRIPTION BUILDING FLOOR AREA (SQ.FT.)IBN4 I IBN.1 IBN.2 271'UXILIARY BUILDING OPERATING LEVEL INTERMEDIATE BUILDING SUB.BASEMENT NORTH 253'INTERMEDIATE BUILDING BASEMENT LEVEL NORTH 278 4 INTERMEDIATE BUILDING MEZZANINE LEVEL NORTH IB IB IB 12740 3570 3570 I ION 3 298'INTERMEDIATE BUILDING UPPER LEVEL NORTH 315'INTERMEDIATE BUILDING TOP LEVEL NORTH IB IB 3570 I IBS4 IBS.1 IBS.2 23T 271'NTERMEDIATE BUILDING SVB BASEMENT SOUTH INTERMEDIATE BUILDING BASEMENT LEVEL SOUTH 9/TERMEDIATE BUILDING MEZZANINE LEVEL SOUTH IB IB IB 2325 232$2385 IBS.3 293'NTERMEDIATE BUILDING TOP LEVEL SOUTH IB 2325 N2 271'ITROGEN STORAGE BUILDING NS 430 2.FIRE/SMOKE HAZARDS IN THIS FIRE AREA: FIRE ZONE COMBUSTIBLE LOADING (BTU)FIRE SEVERITY (HRS)6.700[I 8N4 0 5.Omit IB N.l I s IBM.2 IBM.3 I~IBNA I IBS4 189-1 I 8 9.2 IBS4 N2 74,286 1,214 4.693 12,340 20.470 4.101 55.7 mrk 0.9 mn.3.5 mh.9.3 mia 15.6 m'n.15.4 m'n.3.1 mitk 3.FIRE PROTECTION FEATURES IN THIS FIRE AREA: FIRE ZONE FIRE DETECTION FEATURES FIRE SUPPRESSION FEATURES I ABO I IBN4 I IBM-1 IBN.2 IBN4 ISN'T IBS4 IBS.1 IBS-2 IBS4 Smoke deteaore 4.HM ZONE(S)ADJACENT TO THE~i ZONE(S)IN THIS FIRE AREA: FIRE ZONE ADJACENT FIRE ZONE PATHWAY PATHWAY RATING (HOUR)ABO ABO AB0 IBN4 IBN4 IBN 1 IBN.I IBN.1 PBI666IRCE 8 I.DOC/oe RC.3 98-2 IBS 2 IBS4 RC-1 IBS.I CT RC-2 B-50 WALL WALL WALL WALL WALL OPEN WALL OPEN WALL WALL 9/28/96 l2:IO:23 PM
LOCATION CHARACTERISTICS TABLE FIRE AREA: ABI IBN.I IBN.I TG.1 WALUDOOR WALUD OCR IBM.1 IBM.2 SB.IH6 None WALUDOOR 1864)IBS4)IBS 1 IBS 1 185-1'BS-1 IBS.1 IBS.2 IBS-2 IBS 2 IBS.2 1864 IBM4)RC 1 IBN'I RC-2 SB.IHS 681 IBM.2 ABO RCQ 682 OPEN WALL WALL OPEN WALL WALL WALUDOOR WALI.OPEN WALL WALL WALL OPEN AGO WALL N2 3 5.POTENTIAL KEY EQUIPMENT AND THEIR ASSOCIATED BASIC EVENT(S)IMPACTED BY FIRE/SMOKE HAZARDS IN THIS FIRE AREA: AGO 350 AGO, 4734 CVMVN03350 SWMVC04 734 FIRE EQUIPMENT BASIC AFFECTED EVENT BASIC EVENT DESCRIPTION MOTOR%PE RATED VALVE 350 FAILS TO OPEN Sonics Water Header Isolation MOV 4734 Fails To Close On Demand ABO 52/14 ABO 52/I4SS ABO 52/ABEF IG ABO 52/CCPIA ABO 52/CCP1A ABO 52/CCPI 8 ABO 52/CFIA ABO 52CFIO ABO 52CHPIA ABO 52/EGIA1 AGO 52/MCCC ABO 52/MCCC ABO 52/MCCC ABO 63/14 ABO 6$MCCC AGO 9704A ABO BATP I A AGO BATPI A ABO GATP I 8 ABO BUS14UV ACCBD14168 ACT1FSST14 ACC 8 N1421A CCMPFPUMPA ACCBN1423A CCMPFPUMPB ACCBN1423C ACCBN1420C ACC 8 N14238 ACCBD1416C DCCFR422NR DCCFRA1ABN ACCBRMCCI C DCREBBUS14 DCREE66MCC ACCBRML10A CVMPAPCH3A CVMPAPCH3A CVMPAPCH38 UVREKOX614 AC BREAKER 52/14 (BUS14/188)
FAILS TO OPERATE Feud On 4160 I 460 VAC Bus 14 supply Transformer PXABSS014" AC BREAKER 52/ABEF1G (BUS14/21A)
FAILS TO OPEN MOTOR-DRIVEN PUMP PACO2A FAILS TO RUM AC BREAKER 52/CCP'IA (8US14/23A)
FAILS TO OPEN MOTOR47RIVEN PUMP PACO28 FAILS TO RUN AC BREAKER 52/CF1A (BUS14/23C)
FAILS TO OPEN AC BREAKER 52/CF1D (BUS14/20C)
FAILS TO OPEN AC BREAKER 52ICHP1A (BUS14/238)
FAILS TO OPEN DG A OUTPUT BREAKER 52/EGIA1 (BUS14/I BC)FAlLS TO CLOSE FUSE FUBUS14/2243 FAILS OPEN (RECIRCULATION)
Fuse FUDCPDPABOIA/2N Faib Open (To MCC C)4mvAc MCCC Feeder Circuit Breaker 52/MCCC (GUSI4/22C)
T/ansfors Open RELAY 636/14 (BUS 14 DC THROV/OVER)
FAlLS TO DEENERGIZE RELAY 66/MCCC FAILS TO ENERGIZE BREAKER 52/9704A MCCL POS I J TRANSFERS OPEN BORIC ACID MOTORNRIVEMPUMP PCH03A FAlLS TO START BORIC ACID MOTORS)RIVEN PUMP PCH03A FAILS TO START BORIC ACID MOTORS)RIVEN PUMP PC H038 FAILS TO START BUS 14 UNDERVOLTAGE RELAY 27X6/14 TRANSFERS TO ENERGIZED ABO BUS14UV'REEOX414 Relay 27X4/14 fails lo energize ABO BUS14UV ABO BUS14UV ABO BUS14UV ABO BUS14UV ABO BUS14UV ABO BUS14W ABO BUS14UV ABO GUS14W ABO BUS14UV ABO BUS14UV UVREEBX514 WREEOX314 UVREEBX114 WREEOX214 UVRE 6 BX314 UVREEBX414 UVREEOX514 UVREEBX614 UVRE KOX114 UVRE KOX314.Relay 27BXS/14 fats lo energize Relay 27X3/14 laBs lo energize Relay 276XI/14 fads to energize Relay 27X2/14 faas lo enorgce Relay 278X3/I 4 fails lo energize Relay 278X4/14 lads to energize Relay 27X5/14 fails to energiZO Relay 278X6/14 fails to enorpco BUS 14 UNDERVOLTAGE RELAY 27XI/I 4 TRANSFERS TO ENERGIZED BUS 14 UNDERVOLTAGE RELAY 27X3/14 TRANSFERS TO ENERGIZED Phldd61RGE.B I.DOC/oc B-5)g/26/gd 12;10:24 PM e
FIRE AREA: ABO BUS14UV ABO BUS14W UVLC OX514A UVREKBX114 RELAY 27X5/14 DRIVER (HEAT SINK ASSEMBLY¹I)GENERATES A SPURIOUS SIGNAL BUS 14 UNDERVOLTAGE RELAY 278X1/14 TRANSFERS TO ENERGIZED LOCATION CHAjRACTERISTICS TABLE ABI ABO ABO ABO BUS1<<W BUS14UV BUS14UV BUS14W 8US14UV BUS14UV BOS14OV BUS14UV UVI.CDOX214 AFCTR78614 AFCTR70614 UVREKDX414 UVREKBX614 uvLc ogx314 UVLC014 5<<2 UVREKBX314 Relay 27X2/I 4 driver (Heal Sink Assembly<<I)tails to energize CONTACT 278X6/I 4 TRANSFERS OPEN CONTACT 27X6/14 (1-2)TRANSFERS OPEN BUS 14 UNDE RVOLTAGE RElAY 27X4/I 4 TRANSFERS TO ENERGIZED BUS 14 UNDERVOLTAGE RE(AY 278X6/I 4 TRANSFERS TO ENERGIZED Relay 27x3/14 diver (Hast sink Assembly¹I)fails lo energize BUS 14 UNDERVOLTAGE SOLID STATE SWITCH¹2 FAILS TO GENERATE A SIGNAL BUS 14 UNDE RVOLTAGE RE(AY 278X3/I 4 TRANSFERS TO EN ERG tZED AB0 BUS14UV 8US14UV BUS14UV BUS14W BUS'14UV BUS14UV Bus14uv AiiD BUSI4W BUS14UV UVCFR14FU3 OVREEOX614 UVLCOOX1 14 WLC DOX514 UVREKBX514 WLCDBX214 UVLCOBX34A WLCDBX314 UVLCOBX14A
.Fuse<<3 (F UARA1RC14/3-N) fails open (relay cabinet)Relay 27x6/14 fah to energize Relay 27xl/14 driver (Hast Sink Assembly¹1)fails lo energize Relay 27XS/14 driver (Heat Sink Assembly¹1)fails lo energize BUS 14 UNDERVOLTAGE RE(AY 278X5/14 TRAN SF ERS TO ENERGIZED Relay 278X2/1 4 driver (Hast Sink Assembly¹2)fsiis to oner gtte RELAY 278X3/14 DRIVER (HEAT SINK ASSEMBLY¹2)GENERATES A SPURIOUS SIGNAL Relay 278X3/14 driver (Heal Sink Assembly¹2)faas lo energize RELAY 278X1/14 DRIVER (HEAT SINK ASSEMBLY¹2)GENERATES A SPURIOUS SIGNAL i ABO ABO ABO ABO ABO ABO ABO ABO ABO ABO ABO ABO ABO IBN I IBM.1 I8M.1 IBN.I ISN 1 BUS14UV BUS14UV BUS14UV BUS14UV BUS14W BUS14uv BUS14UV BUS14W BUS14UV BUS14uv BUS14UV BUS14UV BUS14W Bustcw BUS14UV BUS14UV Bus14uv BUS14UV BUS14UV DCPDPAB01A/02 DCPDPA801A/04 DCPDPAB01A/05 DCPDPC803A/19 MCCH MCCL PIO617 RMWP1ARMWP1A RMWP I 8 TAFPACOP TAFPACOP 4007 4008 4013 4027 UVLCOX614A UVLCOOX414 UVLC 0 8X114 WREKBX414 WREKOX514 UVLCDX414A UVLC D BX614 UVLCDX314A WREEBX214 UVLCDOX614 uvLcox114A WLC 014 S<<1 UVCFR14FU2 UVREEOX114 UVLCDBX64A UVLCOBX54A UVLCOBX514 UVLCDBX44A UVLCDBX414 DCCSRA1ABX DCCFRA1ADM DCCFRA1AEN DCBDFAUXDA ACCBRMCC1H ACCBRMCC11.
CCPCOPC617 CVMPFPCHSA CVMPFPCHSA CVMPF PC H68 CVMPFPCH88 ACCBRPOL10 ACCBRPOL10 AF MV004007 AF MV004006 SWMVP04013 SWMVP 04027 SWMVP04028 RELAY 27X6/14 DRIVER (HEAT SINK ASSEMBLY¹1)GENERATES A SPURIOUS SIGNAL Relay 27X4/14 driver (Heat Sink Assembly<<1)fails to energize Relay 278XI/I 4 driver (Heal Sink Assembly¹2)fails to energize BUS 14 UNDERVOLTAGE RElAY 278X4/I 4 TRANSFERS TO ENERGIZED BOS 14 ONDERVOLTAGE RE(AY 27XS/14 TRANSFERS TO FNERGIZED RELAY 27X4/14 DRIVER (HEAT SINK ASSEMBLY¹1)GENERATES A SPURIOUS SIGNAL Relay 278X6/14 driver (Heal Sink Assemb/y¹2)fails to energize RELAY 27X3/1 4 DRIVER (HEAT SINK ASSEMBLY¹1)GENERATES A SPURIOUS SIGNAL Relay 27BXZ/I 4 fels lo energize ReLvy 27X6/1 4 driver (Heat Sink Assembly¹I)fsib to energize RELAY 27X1/14 DRtVER (HEAT SINK ASS EMB'LY¹1)GENERATES A SPURIOUS SIGNAL BUS 14 UNDERVOLTAGE SOLID STATE SWITCH¹1 FAlLS TO GENERATE A SIGNAL Fuse<<2 (FUARAI Rc f 4/2+)fats open (relay cabinet)Relay 27X1/14 faih to energize RELAY 278X6/14 DRIVER (HEAT SINK ASSEMBLY<<2)GENERATES A SPURIOUS SIGNAL RElAY 27BXS/1 4 DRIVER (HEAT SINK ASSEMBLY¹2)GENERATES A SPURIOUS SIGNAL Relay 278XS/I 4 driver (Hest Sink Assembly<<2)fails lo energize RElAY 278X4/14 DRIVER (HEAT SINK ASSEMBLY¹2)GEHERATES A SPURIOUS SIGNAL Relay 278X4/I 4 driver (Heat Sink Assombly<<2)faits lo energize D'sccnnect Swlch DCPDPA801 A/02 Transfors Open (To MCC C)Fuse FUDCPDPA801A/4N Fails Open (To Bus 14-Norma/)Fuse FUDCPOPABOI/VSM Fats Open (To Bus 16-Emergency)
Aux/I ary Buikl'ng OC Distribution Panel A (DCPDPABOIA)
Local Fauk 480 VAC MCCH Feeder Cucuit Breaker 52/MCCH (MCCC/05MM)
Transfers Open 460VAC MCCL Feeder Cyciiit Breaker 52/MCCL (MCCC/113)
Transfers Open PRESSURE INDICATING COMTROLLER PS4117 FAILS TO RESPOND Motor~i pump PCHOSA (RMU Pump A)faits lo run MotcrMIvan pump PCH08A (RMU Pump A)fails lo n<<I Motor~pump PCH068 (RMU Pump 8)fags to nst Motor~i pump PCHOSB (RMU Pump 8)fess to nat AC BREAKER MCCC/02H TRANSFERS OPEN AC BREAKER MCCC/02H T/IANSFERS OPEN Motor operated valve 4007 tails lo I/vottta flow Motor operated valve 4008 tails to I/vottle liow Motor operated valve 4013 fazs lo open Meter operated valve 4027 tais to open Motor operated valve 4028 fats lo open~r~~'I I".'ll 6161RCE 8 I, DOC/oc a-sr 9/zsrga Izil(kts PM LOCATION CHARACTERISTICS TABLE FIRE AREA: I 8N.I 4324 j IBM.l 4324 ABl SWSVP04 324 Sc¹enoid valve 4324 fath lo open SWPSR02094 D/ferentbl pressure swlch DPS.2094 fels lo respond IBN 1 IBN.1 IBN.1 IBN I IBN-1 t I 8N.I!IBM.1 j tBN.1 IBN.I ISN.1 IBN.1 IBN I IBN.1 1 I IBM-1 IBM.1 IBN.1 IBN.1 IBN.1 I 8N.I I 8N.1 IBN I IBM 1 IBN.I IBM.1 IBN I 4325 4326 4326 4614 4733 52/MAFP I A 52/MAFP18 FT-2001 PTAS PTAS PT<78 PT<78 PTAS PT<82 PT<82 PT<83 SWPSR02084 SWSVP04 325 SWPSR02085 SWSVP 04326 SWMVC04614 SWMVC 04663 SWMVC 04664 SWMVC04 733 AFMPF PAF I A AFMPFPAFI 8 IAAVK05392 AFFTDF200$
AFFTDFT2002 ESPTDPT468 EXPTLPT468 ESPTDPT469 EXPTLPT469 ESPTDPT478 EXPTLPT478 EXPTLPT479 ESPTDPT479 ESPTDPT482 EXPTLPT482 ESPTDPT483 EXPTLPT483 Dfferenthl pressure switch DPS 2084 fels to respond Solenoid vahe 4325 faih to open Dtfferendal pressure switch DPS.2085 fels to respond Solenoid vahe 4328 lails lo open Senrice Water Header Isolation MOV 461 4 Faib To Cbse On Demand Senrice Water Header Isolation MOV 4663 Faih To Cbse On Demand Senrice Water Header Isolation MOV 4664 Faih To Close On Demand Service Water Header Iso'Iaticn MOV 4733 Faib To Cbse On Demand AFWMotcr4)rivsn Pump 1A fath to nst AFW Motcr4)riven Pump 18 fels to nst AlR4)PERATED VALVE 5392 TRANSFER CLOSED Rcw tarlsrtlitler FT 2001 fels to respcnd Fbw transmitter FT.2002 fels lo respond SG A LOW PRESSURE TRANSMITTER PT~FAILS TO RESPOND ON DEMAND SG A LOW PRESSURE TRANSMITTER PT~FAILS LOW SG A LOW PRESSURE TRANSMITTER PTAS FAILS TO RESPOND ON DEMAND SG A LOW PRESSURE TRANSMllTER PT~S FAILS LOW SG 8 LOW PRESSURE TRANSMITTER PT<78 FAILS TO RESPOND ON DEMAND SG 8 LOW PRESSURE TRANSMITTER PT&78 FAILS LOW SG 8 LOW PRESSURE TRANSMITTER PT<79 FAILS LOW SG 8 LOW PRESSURE TRANSMITTER PTAS FAILS TO RESPOND ON DEMAND SG A LOW PRESSURE TRANSMITTER PT<82 FAILS TO RESPOND ON DEMAND SG A LOW PRESSURE TRANSMITTER PT<82 FAILS LOW SG 8 LOW PRESSURE TRANSMITTER PT&83 FAILS TO RESPOND ON DEMAND SG 8 LOW PRESSURE TRANSMITTER PTAS FAILS LOW Sl TRAIN A EXREKOOOC1 CONTAINMENT ISOLATION SIGNAL MASTER RELAY C1 SPURIOUSLY ENERGIZES IBM-1 IBN.2 IBN.2 IBN.2 IBM-2 IBM.2 IBN-2 IBS.2 IBS-2 IBS.2 IBS-2 TAOP 3410 3411 35t6 3517 PT.948 PT.S49 PT.950 DCCSRT1 BNX MSRVP03410 MSRVP03411 MSMVP3504A MSMVP3505A MSAVXIL)516 MSAVX03517 ESPTDPTS47 ESPTDPT948 ESPTDPTS49 ESPTDPT950 Disconnect Svvtch DCPDPTB01 8/I 3 Transfers Open po TDAFW Pump Oi Pump)ARV 3410 FAILS TO OPEN{STANDBY)ASt4)P ERATE0 VALVE 3411 FAILS TO OPEN (ARV A)lA¹cr operated valve 3504A fels to open Motor operated valve 3505A faih to open MSIV 3516 Faib to Close MSIV3517 Faib to Close CONTAINMENT HIGH PRESSURE TRANSMITTER PT-947 FAILS TO RESPOND ON DEMAND CONTAINMENT HIGH PRESSURE TRANSMITTER PT-948 FAILS TO RESPOND ON DEMAND CONTAINMENT HIGH PRESSURE TRANSMITfER PT-S49 FAILS TO RESPOND ON DEMAND CONTAINMENT HIGH PRESSURE TRANSMITTER PT-950 FAILS TO RESPOND ON DEMAND 6.POTENTIAL RACEWAYS (CONDUITS AND CABLE TRAYS)AND THEIR ASSOCIATED EQUIPMENT/BASIC EVENT(S)IMPACTED BY FIRE/SMOKE HAZARDS IN THIS FIRE AREA: FIRE ZONE RACEWAY AFFECTED EQUIPMENT AFFECTED CABLE FUNCT)ON BASIC EVENT AFFECTED BASIC EVENT DESCRIPTION AB0'BO AH 00201 9632A P 120 VAC POWER SWAVN9632A Ale)PERATEO VALVE 9632A FAILS TO OPEN C 120 VAC CONTROI.SWAVN9632A Ale)PERATED VALVE 9632A FAILS TO OPEN C 120 VAC CONTROL SVAVN9632A Ale)PERATED VALVE 9632A FAILS TO OPEN AHC0219 P 480 VAC POWER HVMFFAFFIA MOTOR4)RIVENFANAFFOIA FAILS TO RUN AB0 AHC0220 C0544 0 120 VAC CONTROL HVMFFAFF1A MOTOM>RIVEN FAN AFFOIA FAILS TO RUN BATP1A C 125 VDC CONTROL CVMPAPCH3A BORIC ACID MOTORS)RIVEN PUMP PCH03A FAILS TO START AB0 I AB0 t AB0)AGO CO546 BATP1A BATP I A BATP1A TAP PAC OP P 480 VAC POWER C 125 VDC CONTROl.C 125 VDC CONTROL P 480 VAC POWER CVMPAPCH3A BORIC ACID MOTOR-DRIVENPUMP PCH03A FAILS TO START CVMPAPCH3A BORIC ACID MOTOR.DRIVEN PUMP PCH03A FAILS TO START CVMPAPCH3A BORIC ACID MOTOR.DRIVEN PUMP PCH03A FAILS TO START ACCBRPOLI0 AC BREAKER MCCC/02H TRANSFERS OPEN PB16SNIcGE.B I.DOC/oc B-53 S/25/Sa 12: 10:24 PM 0
LOCATION CHARACTERISTICS TABLE FXRE AREA: I ABO C0591 i ABO Ciiii I ABO C0644 ABI TAFPACQP CVTA1.BYCA I IND/125 VDC CONTROL P 460 VAC POWEIl P 480 VAC POWER ACCBRPOLIO IBT6FCVTA2 DCBCFOOOOA AC BREAKER MCCC/02H TRANSFERS OPEN tr>>trument Bus B (IBPDPCBBW)
Cor>>tant Votlage Transformer CVTAI Fs9s Battery Charger A (BYCA)No Output ABO C0687 MCCH P 480 VAC POWER DCCFRC3ACN Fuse FUDCPDPCB03A/CN Fails Open (To MCC H)!ABO C0687 ABO CO690 ABO C0690 MCCH 516 516 P 480 VAC POWER P 480 VAC POWER P 480 VAC POWER ACCBRMCCIH RCMVPQ0516 RCMVKQ0516 480 VAC MCCH Feeder Ckctit Breaker 52/MCCH (MCCC/05MM)
T/ar>>fora Open MOTOR.OPERATED VALVE 516 FAILS TO OPEN MOTOR.OPERATED VALVE 516 TRANSFERS CLOSED ABO CQ692 ABQ CQ692 ABO CQ694 516 516 516 C 125 VDC CONTROL RCMVP00516 C 125 VDC CONTROL RCMVP00516 C 125 VDC CONTROL RCMVK00516 MOTO R4)PE RATED VALVE 518 FAILS TO OPEN MOTOR.OPERATED VALVE 51 6 TRANSFERS CLOSED MOTOR47PERATED VALVE 516 FAILS TO OPEN 516 C 125 VDC CONTROL RCMVKQQ516 MOTOR43PERATED VALVE 516 TRANSFERS CLOSEDAB0 CQ697 ABO CO697 ABO CQ698 ABO C0698 ABO CQ699 AGO C0702 ABO C0702 ABO C0702 ABO C0703 ABO C0703 ABO C0703 ABO C0704 AGO C0704 ABO C0704 ABO COT07 AGO C0708 ABO C0710 ABO C0713 ABO C0713 ABO C0713A ABO C0713A ABO COT t5 ABO C0715 ABO C0717 ABO C0717 4616 4616 4616 4616 4616 4007 4007 720 720 720 P 480 VAC POWER SWMVC04618 P 480 VAC POWER SWMVK04616 C 125 VDC CONTROL SWMVK04818 C 125 VDC CONTROL SWMVC04616 C 125 VDC CONTROL SWMVK04616 C 125 VDC CONTRO!.'WMVC04816 P 480 VAC POWER P 480 VAC POWER RHMVR0850A P 480 VAC POWER C 125 VDC CONTROL RRMVR0850A C 125 VDC CONTROL RHMVR0850A C 125 VDC CONTROL RRMVP0850A C 125 VDC CONTROL RRMVP0850A C 125 VDC CONTROL RRMVR0850A P 480 VAC POWER AF MVD04007 C 125 VDC CONTROt.AFMVD04007 C 125 VDC CONTROL AFMVD04007 P 480 VAC POWER RRMVQ00720 P 480 VAC POWER RCS-720 P 480 VAC POWER RRMVQ00720 P 480 VAC POWER RCS.720 C 125 VDC CONTROl.RRMVQ00720 C 125 VDC CONTROL'RCS.720 C 125 VDC CONTROL RRMVQ00720 C 125 VDC CQNTROL RCS.720 C 125 VDC CONTROL RHMVR0850A Selvhe Water Header Itohtion MOV 4616 Fess To Close On Demand Service Water Header isolation MOV 461 6 Transfers Chsod Se/vhe Water Header Isotsthn MOV 481 8 Transfers Ck>>ed Servhe Water Header lactation MQV 461 8 Fails To Chse On Domsnd Service Water Header Itokttian MOV 461 6 Transfers Ck>>ed Service Water Header Isolation MOV 4616 Fails To Close On Der/land MOTOR 47PERATEO VALVE 850A FAILS TO OPEN[RECIRC)MOTOR47P VALVE 850A TRANSFERS OPEN[INJECTION]
MOTOR47P VALVE 850A TRANSFERS OPEN[RECIRCULATION)
MOTOR47P VALVE 850A TRANSFERS OPEN[RECIRCULATION]
MOTORNP VALVE 850A TRANSFERS OPEN[INJECTION)
MOTO RAPE RATED VALVE 850A FAILS TO OPEN[RECIRC)MOTOR47P VALVE 850ATRANSFERS OPEN[INJECTION]
MOTORAPERATED VALVE 85CA FAlLS TO OPEN[RECIRC)'MOTOR47P VALVE 850A TRANSFERS OPEN (RECIRCULATION)
Motor operated valve 4007 faib to th/ottle Qow Motor operated valve 4007 fails to th/ottte now Motor operated vshe 4007 fails to throttle fhw MOV 720 FAILS TO OPEN ISLOCA evaluation MOV 720 FAILS TO OPEN ISLOCA evaluation MQV 720 FAILS TO OPEN ISLOCA evsk/sthn MOV 720 FAILS TO OPEN ISLOCA ovaiuathn ABO C0720 ABO C0720 P 480 VAC POWER P 480 VAC POWER RCS 700 RRMVQOQTOQ ISLOCA ovahstion MOV 700 FAILS TO OPEN ABO C0720A ABO C072QA ABQ C0722 ABO C0722 ABO CQ724 ABO CQT24 P 480 VAC POWER RCS.700 P 480 VAC POWER RRMVQQQT QO C 125 VDC CONTROL'RMVQQOTOO C 125 VDC CONTROL RCS 700 C 125 VDC CONTROL RRMVQQO700 RCS 700 C 125 VDC CONTROL ISLOCA evaluation MQV 700 FAILS TO OPEN MOV 700 FAILS TO OPEN ISLOCA evaluation MOV 700 FAILS TO OPEN ISLOCA evaiuathn~7[": I'/~.I P816SChltCE B-I.DOC/oc
[)-54 9/JS/98>>:10:25 PM Pages B-55 through B-80 are similar and not included to reduce paper volume.
t LOCATION CHAI&.CTERISTICS TABLE RE AREA:~IBN.2 G11 89 ABI 3517 C 125 VDC CONTROL MSAVX03517 MSIV 3517 Fags to Close IBM 2 G1191 IBN.2 G 1192 IBM-2 G1193 IBN 2 G1194 IBM.2 G1195 IBN-2 G1197 IBN.2 G1 198 IBN-2 G1199 IBM.2 G 1200 I 8N-2 G1201 3517 3517 3517 3517 3517 351 6 3516 3516 3516 3516 C 125 VDC CONTROL MSAVX03517 C 125 VDC CONTROL MSAVX03517 C 125 VDC CONTROL MSAVX03517 C 125 VDC CONTROL MSAVX03517 C 125 VDC CONTROL MSAVX03517 C 125 VDC CONTROL MSAVX03516 C 125 VDC CONTROL MSAVX03516 C 125 VDC CONTROl MSAVX03516 C 12$VDC CONTROI.MSAVX03$16 C 125 VDC CONTROL MSAVX03516 MSIV 351 7 Falis to Cbse MSIV 351?Fails to Close MSIV 3517 Faib to Close MSIV 3517 Fags to Close MSIV 3517 Fails to Cbse MSIV 351 6 Fails to Close MSIV 3516 Faih to Cbse MSIV3516Faits to Close MSIV 3516 Fails lo Close MSIV 351 6 Faiis to Cbse IBN-2 R1279A IBN.2 R1279A IBN4 E0032 PT<68 PT~B C 125 VOC CONTROI/POWER ESPTDPT488 EXP TLPT468 SG A LOW PRESSURE TRANSMllTER PT<88 FAILS TO RESPOND ON DEMAND SG A LOW PRESSURE TRANSMITTER PT<68 FAlLS LOW Motor operated valve 3505A fels to open IBS 1 C0472 IBS I C0473 IBS I G0339 IBS.1 l0642 LT-2022A 52IABEFIG INDICATION AFLTD2022A C 125 VDC CONTROL ACCBN1421A 52/CTP 0 120 VAC CONTROL AFMPFPCD04 52/CTP C 125 VDC CONTROL AFMPFPCD04 Condensate Transfer Pump PCD04 fails to tun Ccndensate Transfer Pump PCD04 fails lo run Condensate Storage Tank A level ttansmber LT-2022A fags to respond AC BREAKER 52/ABEFIG(BUSI421A)
FAILS TO OPEN I 8S.1 R0940 I 8S.1 R0984 IBS 1 R3178 PT-947 5737 I AIARhMNOIC 0NT I ANALOG SIGNAL ESPTDPT948 ESPTDPT947 MSAVX05737 CONTAINMENT HIGH PRESSURE TRAN SMIITER PT-948 FAILS TO RESPOND ON DEMAND CONTAINMENT HIGH PRESSURE TRANSMITTER PT.947 FAILS TO RESPOND ON DEMAND AOV5737 Fagsto Close I BS.1 R3176 I 8S.1 R3183 I 8S-1 R3183 IBS 1 R3184 i 8S.1 R31 85 IBS.1 R3186 IBS 1 R3187 IBS I R3188 IBS I R3189 IBS.1 R3192 IBS 1 R3192 IBS.I R3193 IBS 1 R3193 IBS.I R3194 IBS 1 R3194 I 8S.1 R3194 I 8S-1 R3194 IBS.I R3520 IBS.1 R3521 5736 573$5735 5736 5736 5736 5737 5738 5735 5736 5735 5736 5737 5738 LT-2022A LT-20228 MSAVX05738 C 125 VDC CONTROL MSAVX0573$
C 125 VDC CONTROL MSAVX05736 C 125 VDC CONTROL MSAVX05735 C 12$VDC CONTROL MSAVX05735 C 12$VDC CONTROL MSAVX05735 C 125 VDC CONTROI.MSAVX05736 C 125 VDC CONTROL MSAVX05736 C 125 VDC CONTROL MSAVX05736 MSAVX05737 MSAVX05738 C 125 VDC CONTROL MSAVX0$735 C 12$VDC CONTROL MSAVX05736 C 125 VDC CONTROI.MSAVX05735 C 125 VDC CONTROI.MSAVX05736 C 125 VDC CONIROI.MSAVX05737 C 125 VDC CONTROt.MSAVX05738 AFLTD2022A AF LTD 20228 AOV 5738 Fails to Cbse AOV 5735 Faih to Cbse AOV 5736 Fats lo Cbse AOV 5735 Fats lo Close AOV 5735 FaiB to Close AOV 5735 Fats to Close.AOV 5736 Fats to Cbse AOV 5738 Fags to Close AOV 5736 Fails to Close AOV 5737 Fags to Close AOV 5738 Fags to Close AOV 5735 Fails to Cbse AOV 5736 Fails lo Cbse AOV 5735 Fails lo Close AOV 5736 Faib to Close AOV 5737 Frets to Close AOV 5738 Fats to Cbse condensate storage Tank A level transmkter LT-2022A fats lo respond Condensate Storage Tantt 8 ktvet uansmber LT-20228 fals to tespond IBS.2 L0642 I 8S.2 L0643 52/AB8F I G 52/AB 8F I G C 125 VDC CONTROI.C 12$VDC CONTROL ACCBN1421A ACCBN1421A AC BREAKER 52/ABEFIG (BUS1421A)
FAILS TO OPEN AC BREAKER 52/ABEF IG (BUS1421A)
FAILS TO OPEN 7.SPATIAL INTERACTIONS ANALYSIS WALKDOWN NOTES: FIRE ZONE WALKDOWN NOTES ABO 2 RMW pumps, I monitor tank pump, 2 WCT pumps ncv south wall (photo AI6).MCC IC near east stairwell (photo AI7).Boric acid tntttfet pumps ln cubicle with gntiag above.MCC IE near nonh wall.But!4 can of RWST.Waur cunain at suinvcll to ABM.4nlgg WD But l4 it fcd frets level below.Standby AFW cables in conduit above bus and MCCs.Charging swapover de power twhch is in the Bus l4.ABO 2 CCW pumps jun south of middt>>of toom (photos A I, Alt).Containmcte penetration cooling fast jun west of RWST (photo Alp).Water curtain st ttakwelt to ABht~entgg WD CCW pump ctblcsnre in coaduh coming up from Aeor below.and very separated from any othet cables or fire sources.Some protective clothing stored about l2'way.p tt666IRGE B-I,DOC/oc B-81 gngtpg I2:tg:35 PM LOCATION CHARACTEMSTICS TABLE FIRE AREA: ABI ABO Typical smoke detector (photo A20)appmximatcly l2'IS'p from Roor.Spent foci pool.I 4/2/98 Wo 02 and H2 lines For rtcombiners are separated from all ssfmy cquipmcnt and nor a ptoblem for lire.IBN4 IBN I t t I IBN 2 enegwo did not walkdown.No safety eriYical equipmcnt, except TDAFW lube oil piping, which would not be damaged by Cire I T-D AFW PumP.2 M D AFW PumPs (photo By), 8'pan, about 30'rom T-D AFW pump.2 A/C chiller wast pumps (Photo BS).3'Part.2 A/C chitkrs (Photo B6).S'pat.Several MOVs.Reactor trip breakers at north wall In norrhcast eomcr of building.CRD M4)acts in nonheast corner of building.4/2/98 WD large Aood drain to ensure fire sprinkkr wsta would not carne Bond.Sprin'klcrs over TDAFW and associated lube oil.Some Instr.Cables wrapped near cable tunnel area.SigniCicant amount of cabk.MG sets and cabinets and Rx trip breakers are bciow cridcal cabks.but the deluge system k in cabks.Rod control eabineu have spray shield 2'ver top, which would also tend m shieM cables as if ln a tray with a bonom.Cables arc about 6'bove spray shield.and ceiling k about IS'igher.Mini purge CIV OK (AOV.no manual operator).
Hl lines are not Cilkd to H2 recomblner eonuol panel.and are in a area separated by block wall from AFW pumps.Main rxcam header, main taeam valves, safety valves, T.D AFW pump MOVs.IBN 3 (IBNC 4/2/98 WD Atmos.relief valves and MSIVs not by Cue sources.ARV is AOV.but with manual operator as well.Block vaive is manual.TDP steam supply valve are MOV.H2 piping in southwest k separated by block wall, and k not valved in during normal opetadon.cneg wo not walked down, No sa(ety cnYieal cquipmem.4neg wo not walked down.No eritkal safety equipment for Cire ipeee.IBS4)4/2/98 WD iot wal'kcd down.No critical safmy cquipmerx for Cire ipeee IBS.I 4/2/98 WD H2 lines are not lilted to H2 recomb'mer control panel.and are in a arcs sepamtcd by block wall from AFW pumps.IBS.2 IBS.3 Ng 4/2/98 WD H2 lines are valved ouh and are In a vea separated by block wall from renh arcs, 2 Intermediate buiMing exhaust fans, 3 auxiliary buiMing exhaust fans, containmcnt purg<<supply fans.P:t1686tRGB B.I.DOC/oc B-82 pngeg l2:IOt35 FM
LOCATION CH~czzmSnCS mar,E FIRE AREA: EDGlA 1.FIRE ZONES IN THIS FIRE AREA: , FIRE ZONE ELEV (FT.)FIRE ZONE DESCRIPTION I BUILDING FLOOR AREA (SQ.FT)EDGIA4 244'DIESEL GENERATOR 1A CABLE VAULT EDGIA-1 I 253'DIESEL GENERATOR ROOM 1A DG 1265 EOG1A-X 244'DIESEL GENERATOR CABlE AREA DG 2.FIRE/SMOKE HAZARDS IN THIS FIRE AREA: FIRE ZONE (EDG1A4 I EOGIA-1 COMBUSTIBLE LOADING (BTU)42 mich 45.2 min.FIRE SEVERITY (HRS)3.FIRE PROTECTION FEATURES IN THIS FIRE AREA: (FIRE ZONE FIRE DETECTION FEATURES EGG IA4 EDGI A-1 FIRE SUPPRESSION FEATURES 4.PIRE ZONE(S)ADJACENT TO THE PIRE ZONE(S)IN THIS FIRE AREA: I FIRE ZONE!EDGIA4 EDG I A.l EDG1A.1 EGG I A.l EDG I A-X ADJACENT FIRE ZONE EDGI A-1 EDGI 8-I TO TB I EDG1A4 PATHWAY OPEN WALL WALL WALUDOOR PATHWAY RATING (HOUR)EDGI A4 EDGI A-X FIRE EQUIPMENT BASIC BASIC EVENT AFFECTED EVENT DESCRIPTION
- EOG1A.1 ADFOI A I HVMCNDDOIA OG A ROOM FAN AIR.OPERATED DAMPER AODOIA FAILS TO OPEN 5.POTENTIAL KEY EQUIPMENT AND THEIR ASSOCIATED BASIC EVENT(S)IMPACTED BY FIRE/SMOKE HAZARDS IN THIS FIRE AREA
- EDG1A.1 ADF018 (EOG1A.1 DCPOPC803A/07
- RRRKER..SENER ER~~~I~i~': NRRKRRR RRRMREERKE IRRQKRERRNR RHiQKRKEKK RRRQRERRFRR
- ~is gPggiig RXK'M]EM&K'0 KK3K]KEK9&KK3
SUMMARY
AND CONCLUSION)
OF THE GINNA PSA r.ocAYrON Cm,IU nmarSxrCS vox,E FIRE AREA:Phl6265RCE B L.DOC/oc 8-406 9/22IN l2:22;S2 Phl GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-1 9.0 9.6 LEVEL 1 RESULTS Internal Fire Results Similar to the internal events PSA, the internal fire results were assessed with respect to sensitivities and importance measures.The results are summarized below.9.6.1 Internal Fire Results The total core damage frequency (CDF)due to internal fire is 3.3E-5/yr.
The listing of the top 50 (and ties)of the final cutsets is shown in Table 9-14 (note-these account for 43%of the CDF due to internal fire).A summary of the fire scenarios contributing at least 5.0%to the fire CDF is provided below.9.6.1.1 Control Room Fires Among the final cut sets, the largest contribution to the fire CDF (19.8%)comes from ignition of a fire in the Control Room's main control board and any two electrical cabinets that subsequently requires Control Room evacuation due to a significant loss of instrumentation and control (FIOCR3-1 and FACR-MCB).
Thirty-five cabinets are installed in the Control Room in addition to the main control board cabinets.The total ignition frequency for a fire in the Control Room of 5.1E-3/yr (Ref.164)was apportioned such that I/50~of the frequency was assigned for the ignition of any one cabinet and 15/50~'f the frequency was assigned for the ignition of the main control board cabinets, based on the relative sizes of each.The ignition frequency is therefore (15/50+2/50)*(5.1E-3/yr)
=1.7E-3/yr.
This is considered to be a transient which does not result in conditions for Safety Injection (SI)(AAAATRAN SIN), nor does it cause a station blackout (NOSBO).Since there is no automatic suppression in the Control Room (FSAASUPPXX), only manual suppression by the Fire Brigade is possible.This is assumed to fail with a probability'f 0.03 (FSHFDCR-3-X).
Each of the dominant cut sets leading to core damage includesone of the following:
Non-fire-induced failure of the Technical Support Center (TSC)Diesel Generator (DG)to start or run (DGDGATSCXX or DGDGFTSCXX);
Unavailability of the turbine-driven Auxiliary Feedwater (TDAFW)Pump due to: (1)its train being out for test and maintenance (AFTMOTDAFW), (2)failure to correctly restore its train to service after test and maintenance (AFHFLTDAFW), or (3)non-fire-induced failures of its components (AFMMOTDAF W);Spurious opening of SG A Blowdown Isolation AOV 5738 due to hot shorting of its control cable (MSHSF05738) while the TDAFW train injection line to SG B is out of service for test and maintenance (AFTMTDAFWB);
Any of the following fire-induced human errors: Failure to locally open discharge MOV 3996 from and steam supply MOV 3505A to the TDAFW Pump, per the attachments to the ER-FIRE Procedures (FSHFDAFWXX);
Failure to align TSC DC power supply to Battery B for the TDAFW pump, per the attachments to the ER-FIRE Procedures (FSHFDDCPWR);
Failure to locally operate PORV 430, per the attachments to the ER-FIRE Procedures (FSHFDPORVS);
S GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION I PAGE 9-2 Failure to employ alternate AFW/Steam Generator (SG)instrumentation aAer Control Room indication has been lost (FSHFDCROM2);
Failure to find alternative cooldown paths (specifically the TDAFW steam lines)(FSHFDREC03), aAer non-fire-induced failure of nitrogen bottles to supply SG A Atmospheric Relief Valve (ARV)3411 (MSMMN2BOTA).
9.6.1.2 Turbine Building Fires The next largest contribution among the final cut sets to the fire CDF (14.7%)arises from ignition of fires in the Turbine Building, at specific locations on the Mezzanine and Basement Levels.These are discussed below.The larger contribution (9.6%)from fires in the Turbine Building arises from ignition of a fire in Bus Cabinet 11A/12A or 11B/12B at the Mezzanine Level (FIOTB2-1 and FATB-2-2).
The total ignition frequency for these cabinets is 1.2E-2/yr (Ref.164).There is no automatic suppression, and manual suppression, even if successful, was assumed not to extinguish the fire within the affected cabinet in time to prevent accident progression (FSAASUPPOK).
This is followed by a loss of AC Train A (ACTRAINA) as a direct result of the fire.These particular events lead to two sets of scenarios characterized by: (1)a transient without station blackout (NOSBO), but with a small LOCA (SLO);and (2)a transient with station blackout (SBO).Each set is discussed below.Transients without Station Blackout, but with a Small LOCA.In these scenarios, a small LOCA occurs after the loss of Main Feedwater (MFW)(as supplied by AC Buses 11 and 12)when PORV 430 fails to reseat after steam relief(RCRZT00430) and its motor-operated block valve (516)has no AC power.The dominant cut sets leading to core damage include coincident events among the following:
Unavailability of RHR train B due to its being out of service for test or maintenance (RHTMOOOOOB);
Non-fire-induced failure to open of MOV 738B to supply Component Cooling Water (CCW)to Residual Heat Removal (RHR)Heat Exchanger (HX)B (CCMM00738 8);Human mispositioning of CCW throttling isolation valve 780B on the outlet side of RHR.HX B (CCHFL0780B).
Transients with Station Blackout.In this scenario, the loss of all offsite power following the reactor trip (ACLOPRTALL) causes loss of AC Train B (ACTRAINB) when the fire forces an interlocked feeder breaker to Bus 16 to fail to open, thereby preventing DG B from connecting to Bus 16.With the assumed unavailability of the TDAFW train due to its being out for test and maintenance (AFTMOTDAFW), core damage results.
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-3 The smaller contribution (5.1%)from fires in the Turbine Building arises from ignition of a fire in the vicinity of the power supply cables to AC Buses 14, 16, 17, or 18 at the Basement Level (FIOTB1-1 and FATB-1-1).
The total ignition frequency for combustibles in this location is 1.4E-3/yr (Ref.164).This is considered to be a transient initiating event which does not result in conditions for SI (AAAATRANSIN), but involves a station blackout (SBO).Non-fire-induced failure of DG A to run (DGDGF0001A) occurs.(As above, the fire itself forces an interlocked feeder breaker to Bus 16 to fail to open, which prevents DG B from connecting to Bus 16.)Although automatic suppression is available(Suppression Systems S24 through S27), the one in the immediate vicinity of the fire is assumed to fail (FSAASUPPXX).
This is assumed to fail power cables to the affected AC bus from DG B.Each of the dominant cut sets leading to core damage includes failure of one of the following automatic sprinkler systems, specifically the one in the immediate vicinity of the fire: 1.Spray S24 (Turbine Condenser Pit vicinity)(FSXXXTR768);
2.Spray S25 (Generator Hydrogen Seal vicinity)(FSXXXTR769);
3.Spray S26 (Turbine Island vicinity)(FSXXXTR770);
4.Spray S27 (Main Turbine Oil Reservoir vicinity)(FSXXXTR771).
9.6.1.3 Battery Room Fires The next largest contribution among the final cut sets to the fire CDF (11.8%)arises from ignition of fires in Battery Rooms A and B (FIBR1A-3 and FABR1A;FIBRIB-3 and FIBR1B).Each room contains batteries, battery chargers, inverters, cables, and transformers.
The total ignition frequency for each room is 6.9E-3/yr (Ref.164), assuming fire can occur in any one of these combustibles.
Since there is no automatic suppression in the Battery Rooms (FSAASUPPXX), only manual suppression by the Fire Brigade is possible.This is assumed to fail with a probability of 0.03 (FSHFDBR1A3 and FSHFDBR1B3).
It is further assumed that the fire has spread beyond its initial source (probability
=0.1)prior to suppression (FSASPROP01).
Each Battery Room is discussed separately below.Battery Room A.Fire in this room, which contributes 6.8%to the fire CDF, is considered to be a transient which does not result in conditions for Sl (AAAATRANSIN), nor does it cause a station blackout (NOSBO).Each of the dominant cut sets leading to core damage includes one of the following:
Non-fire-induced failure of the TSC DG to start or run (DGDGATSCXX or DGDGFTSCXX);
Unavailability of the TDAFW Pump due to: (1)its train being out for test and maintenance (AFTMOTDAFW), or (2)non-fire-induced failures of its components (AFMMOTDAFW);
Human failure to align TSC DC power supply to Battery B for the TDAFW pump, per the attachments to the ER-FIRE Procedures (FSHFDDCPWR).
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION I PAGE 9-4 b.Salary Room B.Fire in this room, which contributes 5.0%to the fire CDF, is considered to be a transient which induces a station blackout (SBO).The fire itself fails AC Train B.Each of the dominant cut sets leading to core damage includes one of the following which prevents AC Train A from being powered: l.2.Unavailability of DG A due to test or maintenance (DGTM00001A);
Loss of AC Motor Control Center (MCC)H when feeder circuit breaker 52/MCCH transfers open due to a cable wrap failure (ACWPFMCC1H) that occurs once the fire duration reaches one hour (FSAAFIREIH);
Loss of AC MCC H when disconnect switch,DCPDPCB03A/03 transfers open due to a cable wrap failure (DCWPFC3ACX) that occurs once the fire duration reaches one hour (FSAAFIRE I H).9.6.2 Internal Fire Sensitivity AnalysisAs described in Section 9.3.1, sensitivity analyses were performed for eight types of basic events within the internal events PSA models (i.e., human errors, test and maintenance, common cause failures, initiating events, MOVs, AOVs, DGs, and pumps).Since the fire analysis used the same fault tree models and event trees as the internal events PSA, only the new basic events need to be assessed.Also, every cut set contains a similar fire initiating event(vs.the internal events PSA which addressed LOCAs, steam line breaks, reactor trips).As such, no sensitivity was performed on the fire initiators.
Therefore, of the eight basic event types, only human errors were considered.
However, another category, hot-short-induced failures, was also addressed.
Both are discussed below.9.6.2.1 Human Errors Two sensitivity studies were performed with respect to human errors.First, all human errors were set to"false" (i.e., all were assumed to be performed successfully).
As a result, the fire CDF decreased by 69%to a value of 1.0E-S/yr, indicating a large sensitivity of the accident sequences to human reliability failure rates.The decreases in the contributions from the dominant scenarios were as follows.For the dominant Control Room fires (FIOCR3-1 and FACR-MCB), the contribution to fire CDF dropped by 99.2%.This indicates that these Control Room fire scenarios essentially are totally dependent on successful human intervention.
This is evident from the description in Section 9.6.1.1.Nearly all Control Room fire scenarios are conditional upon failure of manual suppression (FSHFDCR-3-X).
For the dominant Turbine Building fires (FIOTB2-1 and FATB-2-2;FIOTB1-1 and FATH-1-1), the contribution to fire CDF dropped by 30.5%.Therefore, the dependence of these Turbine Building fire scenarios upon successful human intervention was much less pronounced that those for the Control Room, as one might expect.For the Turbine Building Mezzanine fires, recall from Section 9.6.1.2 that manual suppression, even if successful, was assumed not to extinguish the fire in time to prevent accident progression (FSAASUPPOK).
For the Turbine Building Basement fires, only automatic suppression was available, and this was assumed to fail (FSAASUPPXX).
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-5 For the dominant Battery Room fires (FIBR1A-3 and FABR1A;FIBR1B-3 and FIBR1B), the contribution to fire CDF dropped by 87.2%, nearly as much as for the Control Room.As for the Control Room, most Battery Room fire scenarios (see Section 9.6.1.3)are conditional upon failure of manual suppression (FSHFDBRIA3 and FSHFDBR1B3) since no automatic suppression exists.The second sensitivity study on human errors involved setting all human errors to"true," equivalent to assuming that humans always erred.The fire CDF increased by a factor of 1.48E+4 to a value of 0.494/year as a result.This indicates that successful human intervention is very important to prevent core damage from fires and that humans are considered to be highly reliable in performing the required actions.9.6.2.2 Hot-Short-Induced FailuresThe sensitivity of the fire CDF to spurious energization/de-energization of control and power cables due to hot shorting was also assessed in a manner similar to that for human errors.When all hot short failures were set to"false" (i.e., assuming no hot shorts occurred), the fire CDF decreased by only 6.0%to a value of 3.15E-5/yr.
The effect on the dominant accident scenarios was similarly small.This indicates that hot-short-induced failures are a small contributor to the fire CDF.A review of Section 9.6.1 indicates only one contribution among the dominant scenarios, that arising from MSHSF05738 for the Control Room fires.When all hot short failures were set to"true," equivalent to assuming that they always occurred, the fire CDF increased by 61%to a value of 5.41E-S/yr.
This relatively modest increase indicates, again, that hot shorts are a small contributor to the fire CDF, but that their conditional probability of occurrence (many assumed to be 0.1)is already fairly high.9.6.2.3 Internal Fire Truncation Limit Evaluation As a final sensitivity study, the truncation limit was evaluated with respect to its impact on the final results.This was performed by generating Figure 9-14 which shows the contribution of the cut sets in each"decade" (e.g., 1E-6/yr, 1E-7/yr, etc.)to the final fire CDF.Figure 9-14 indicates that the CDF contained in each decade initially rises, peaking at 1.11E-5/yr in the third decade (1E-7/yr to 1E-8/yr), then decreases rapidly over the last two decades.The cut sets whose frequencies are>1E-9/yr contribute over 93%to the final CDF.Also, as noted on the figure, over 76%of the total number of cut sets have frequencies in the last decade (1E-9/yr to 1E-10/yr);
however, these contribute less than 7%to the final CDF.Consequently, further reduction of the truncation limit should not significantly impact the CDF estimation.
9.6.3 Importance Analysis As described in Section 9.3.2, two types of importance measures were generated for most basic events contained in the final cutsets: (1)Fussell-Vesely (F-V), and (2)Risk Achievement Worth (RAW).These importance measures were combined as follows: a.If the F-V value is z 0.05 at the system level (z 0.005 at the component level)and the RAW a 10 at the system level (a 2 at the component level), then the system or component will be identified as being"high" risk significant.
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-6 b.If the F-V value is z 0.05 at the system level (z 0.005 at the component level)or the RAW a 10 at the system level (a 2 at the component level), then the system or component will be identified as being"medium" risk significant.
c.If the F-V value is<0.05 at the system level (<0.005 at the component level)and the RAW<10 at the system level (<2 at the component level), then the system or component will be identified as being"low" risk significant.
The F-V and RAW importance measures were generated for fire initiating events, human errors, test and maintenance activities, fire modeling assumptions, and on a system and component basis.Each of these is described below in detail.Included within these discussions is a reference to a table and figure containing the specific F-V and RAW values.The table is self-explanatory; however, additional information with respect to the figure is necessary to ensure correct interpretation.
In order to provide a visual depiction of the risk profile associated with various events modeled within the Ginna Station PSA, the F-V and RAW importance measures were plotted against one another.In this manner, it can be easily identified which events are ofhigher risk than others.For example, all human error F-V and RAW values plotted are on Figure 9-16.A"cross-hair" was provided on the figure for F-V values equal to 0.005 (vertical line)and RAW values equal to 2 (horizontal line).Any event to the left of the F-V.line or below the RAW line is not risk significant with respect to that specific importance measure.However, an event to the left of the F-V line but above the RAW line is risk significant with respect to RAW only.Similarly, an event to the~ri ht of the F-V line but below the RAW line is risk significant with respect to F-V only (e.g., FSHFDREC03).
Events which are to the right of the F-V line and above the RAW line are risk significant with respect to both importance measures (e.g., FSHFDDCPWR).
In summary, an event in the upper left hand corner or lower right hand corner is of medium risk significance.
An event in the upper right hand corner is of high risk significance while events in the lower left hand corner are of low risk significance.
Further insights can also be obtained by which"corner" a given event is in as described below: An event in the upper left hand corner is generally of high reliability; consequently, the event did not contribute significantly to the final CDF.However, if the component were to fail, the impact on the final CDF would be significant.
Typically, this corner contains passive components, highly redundant systems, or events which are easily performed by operators.
An event in the lower right hand corner is typically of lower reliability than is justified by the fault tree model.That is, the event contributes to the final CDF;however, if the event were assumed to always fail, it is not expected to further affect the final results.Generally, this is due to the fact that the event's failure probability is already close to 1.0 such that increasing its value to 1.0 would not have much of an effect on the CDF.It should be noted that an event's failure probability may have been a conservative value selected by the PSA analyst due to limited data and is not necessarily reflective of the specific component history.If so, this is noted in the descriptive text below.
0 GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION I PAGE 9-7 c.An event in the upper right hand corner contributes significantly to the final results and would significantly affect the CDF if it were assumed to always fail.Therefore, this event is very important with respect to the risk profile.d.An event in the lower left hand corner does not contribute to the final result, and even if it were assumed to fail with a probability of 1.0, would not significantly impact the CDF.9.6.3.1 Internal Fire Initiating Events The importance measures for the internal fire initiating events are listed in Table 9-15 and displayed in Figure 9-15.The following three events are of high importance:
Fire in Zone CR-3 (Control Room)Fire in Zone BR1A (Battery Room A)Fire in Zone TB1-1 (Turbine Building Basement)Each contributed a 5.0%to the fire CDF (F-V a 0.05), as discussed in Section 9.6.1;and if the initiator were assumed to be"true," it would raise the fire CDF by a factor a 10 (RAW a 10).Two events are of medium importance based on an F-V value a 0.05: a.FIOTB2-1 Fire in Zone TB2-1 (Turbine Building Mezzanine) b.FIBR1B-3 Fire in Zone BR1B (Battery Room B)Both were discussed in Section 9.6.1.Four events are of medium importance based on a RAW value a 10: a.FIDG1B10 b.FIOCR3-3 c.FIOOABO I d.FIOOAHRI Fire in Zone EDGIB-0 (DG Room B Cable Vault)Fire in Zone CR-3 (Control Room)(Fails Division A only)Fire in Zone ABO (Auxiliary Building Operating Level)Fire in Zone AHR (Air Handling Room)While none of these contributes at least 5.0%to the fire CDF, each, if assumed to be"true," would increase the fire CDF by a factor of at least 10.These could be of concern if the combustible loadings, and therefore the fire ignition frequencies, in the zones were to increase, e.g., via presence of transient combustibles.
9.6.3.2 Human Errors The importance measures for the human errors are listed in Table 9-16 and displayed in Figure 9-16.Excluded are the following two groups of"human errors:" a.Latent human errors associated with test and maintenance activities, which have been included with the test and maintenance activities in Section 9.6.3.3.
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-8 b.Failures to manually suppress fires, which have been included with the modeling assumptions in Section 9.6.4.4.For the human errors included in this section, the following 11 events are of high importance:
g.AFHFDALTTD h.FSHFDCROM1 J~k RCHFDRHRSB AFHFDBLOWD SWHFDSTART a.FSHFDCROM2 b.FSHFDDCPWR c.AFHFDSAFWX d.FSHFDPORVS e.AFHFD CITY W f.FSHFDAFWXX Failure to employ alternate AFW/SG instrumentation aAer Control Room indication has been lost Failure to align TSC DC power supply to Battery B for the TDAFW pump, per the attachments to the ER-FIRE Procedures Failure to correctly align Standby AFW (SAFW)Failure to locally operate PORV 430, per the attachments to the ER-FIRE Procedures Failure to use city fire water for SAFW, per Procedure ER-AFW.1 Failure to locally open discharge MOV 3996 from and steam supply MOV 3505A to the TDAFW Pump, per the attachments to the ER-FIRE Procedures Failure to provide cooling to the TDAFW pump lube oil from the diesel-driven Fire Service Water (SW)pump Failure to use alternate instrumentation for natural circulation when Control Room indication is lost Failure to rapidly depressurize the primary system to the level for initiating RHR, or failure to use AFW in the long term Failure to isolate SG blowdown locally Failure to start a SW pump.Each contributed a 0.5%to the fire CDF (F-V a 0.005);and if the event were assumed to be"true," it would raise the fire CDF by a factor a 2 (RAW a 2).Four actions ([a],[b],[d], and[f])were discussed in Section 9.6.1.Four of the other human errors appear in ([e]and[g])or near ([c]in 852 and[i]in 857)the top 50 cut sets.Of the remaining three human errors, FSHFDCROM1 appears in cut sets containing several different initiators; SWHFDSTART appears in cut sets where the initiator is a fire in the West Transformer Yard;and AFHFDBLOWD appears in cut sets similar to those discussed in Section 9.6.1.1 resulting from Control Room fire initiator FIOCR3-1, where an SG blowdown isolation AOV spuriously opens due to a hot short (in this case, AOV 5737 instead of AOV 5738).Finally, all actions but[d]and[k]are directly tied to AFW or SAFW.All human errors of medium importance arose solely due to an F-V value a 0.005.None had RAW values a 2 (other than the ones of high importance).
The six human errors of medium importance are as follows: RCHFDPLOCA b.FSHFDREC03 c.DGHFDCITYW Failure to close the block valve corresponding to an open PORV within three minutes Failure to find alternative cooldown paths (specifically the TDAFW steam lines)(discussed in Section 9.6.1.1)Failure to connect city water to DG cooling per Procedure ER-DG (appearing in the top 50 cut sets)
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION I PAGE 9-9 d.CVHFDSUCTN e.HVHFDSAFWB FSHFDDGAXY Failure to locally open the suction line from the Reactor Water Storage Tank (RWST)to the charging pumps upon loss of Instrument Air (IA)(appearing in the top 50 cut sets)Failure to recover cooling to the SAFW Room for long-term protection of the SAF W pumps (appearing in cut sets containing the initiator FIDG1B10, discussed in Section 9.6.3.1)Failure to strip Bus 18 loads and locally close the breaker for DG A, per the attachments to the ER-FIRE Procedures (appearing in cut set 861 containing initiator FIBRI B-3, discussed in Section 9.6.1.3).9.6.3.3 Test and Maintenance Activities The importance measures for the unavailabilities due to test and maintenance activities are listed in Table 9-17 and displayed in Figure 9-17.Note that these include latent human errors associated with test and maintenance activities, as discussed in Section 9.6.3.2.The following eight events are of high importance:
a.AFTMOTDAFW b.RHTM00000B c.AFTMMAFSGB d.AFHFLTDAFW e.DGTM00001A CCHFL0780B g.AFHFLOAFWB h.AFHFLSAF WB Unavailability of the TDAFW Pump due to its train being out for test and maintenance Unavailability of RHR train B due to its being out of service for test or maintenance Unavailability of motor-driven AFW Train B to SG B due to its being out of service for test or maintenance Failure to correctly restore the TDAFW pump train to service after test and maintenance Unavailability of DG A due to test or maintenance.
Human mispositioning of CCW throttling isolation valve 780B on the outlet side of RHR HX B Failure to restore AFW Motor-Driven Pump Train B to service after test and maintenance Failure to restore SAFW Pump Train D to service aAer test and maintenance.
Each contributed a 0.5%to the fire CDF (F-V a 0.005);and if the event were assumed to be"true," it would raise the fire CDF by a factor a 2 (RAW a 2).Five of the events ([a],[b],[d],[e], and[f])were discussed in Section 9.6.1.AFTMMAFSGB appears in the cut sets among the top 50 which result from a fire in the Auxiliary Building Basement.These cut sets also contain the event AFMMOTDAFW, discussed in Section 9.6.1.1, and represent similar types of scenarios.
AFHFLOAFWB and AFHFLSAFWB appear in cut sets containing different initiators.
These cut sets also contain either of the events AFMMOTDAFW or AFTMOTDAFW, discussed in Section 9.6.1.1, and represent similar types of scenarios.
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-10 All unavailabi1ities due to test and maintenance activities of medium importance arose solely due to an F-V value a 0.005.None had RAW values x 2 (other than the ones of high importance).
The seven of medium importance are as follows: a.AFTMTDAFWB b.CVTMCHPMPA c.AFTMTDAFWA d.DGTM00001B e.AFTMSAFSGB f.AFTMSAFSGA g.AFTMMAFSGA Unavailability of the TDAFW train injection line to SG B due to it being out of service for test and maintenance (discussed in Section 9.6.1.1)Unavailability of Charging Pump A due to test and maintenance Unavailability of the TDAFW train injection line to SG A due to it being out of service for test and maintenance (appearing in cut sets containing FIOTB2-1, discussed in Section 9.6.1.2)Unavailability of DG B due to test or maintenance (appearing in cut sets containing several different initiators)
Unavailability of SAFW Train D injection line to SG B due to it being out of service for test and maintenance (appearing with its sister event AFTMSAFSGA in cut sets containing several different initiators)
Unavailability of SAFW Train C injection line to SG A due to it being out of service for test and maintenance (appearing with its sister event AFTMSAFSGB in cut sets containing several different initiators)
Unavailability of motor-driven AFW Train A to SG A due to its being out of service for test or maintenance (appearing in cut sets containing the initiator FIOBR1B-3, discussed in Section 9.6.1.3).Observe that RHTMOOOOOB and DGTM00001A are of high importance, while their counterparts RHTMOOOOA and DGTM00001B are of low and medium importance, respectively.
The differences arise from the difference between initiating events.For fires in the West Transformer Yard (FIOOTYW1), there is a direct loss of offsite power.If DG B is unavailable (including its being out of service for test and maintenance, DGTM00001B), core damage results if RHR Train A is also unavailable (including its being out of service for test and maintenance, RHTMOOOOOA).
Likewise, if DG A is unavailable (including its being out of service for test and maintenance, DGTM00001A), core damage results if RHR Train B is also unavailable (including its being out of service for test and maintenance, RHTMOOOOOB).
Thus, equal contributions to the fire CDF arise from the four events due to fire in the West Transformer Yard.However, contributions from RHTMOOOOB and DGTM00001A also arise from fires on the Turbine Building Mezzanine Level (FIOTB2-1) and fires in Battery Room B (FIOBR1B-3), respectively due to the consequences of these fires (see Section 9.6.1).Since both of these fire initiators are ofhigh importance (see Section 9.6.3.1), the contributions to the fire CDF from RHTMOOOOB and DGTM00001A are increased over those from their counterparts RHTMOOOOA and DGTM00001B.
Thus, their importances become high.
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-11 9.6.3.4 Modeling Assumptions The importance measures for the modeling assumptions are listed in Table 9-18 and displayed in Figure 9-18.Note that these include failures to manually suppress fires, as discussed in Section 9.6.3.2.None of the modeling assumptions are of high importance.
There are eight of medium importance, solely due to an F-V value a 0.05.None had RAW values a 10.The eight modeling assumptions of medium importance are as follows: a.FSHFDCR-3-X b.FACR-MCB c.FSASPROP01 d.FADIVA e.FATB-2-2 FSHFDBR1A3 g.FABR1A h.FALOSP-R Failure of the Fire Brigade to manual suppress a Control Room fire Tag representing equipment assumed failed by ignition of a fire in the Control Room's main control board and any two electrical cabinets that subsequently requires Control Room evacuation due to a significant loss of instrumentation and control Tag representing assumption that fire spread beyond its initial source prior to suppression Tag representing equipment assumed failed by loss of AC Electric Power Division A due to fire Tag representing equipment assumed failed by ignition of a fire in Bus Cabinet 11A/12A or 11B/12B at the Turbine Building Mezzanine Level Failure of the Fire Brigade to manual suppress a fire in Battery Room A Tag representing equipment assumed to be failed by ignition of a fire in Battery Rooms A Tag representing equipment assumed to be failed by a recoverable loss of offsite power due to a fire.All of the above are discussed in Section 9.6.1 except for[d]and[h].The tagging event FADIVA appears in cut sets containing several different initiators and appears in the top 50 cut sets.The tagging event FALOSP-R appears in cut sets resulting from a fire in the West Transformer Yard (FIOOTYWI), which has been discussed in the previous section.9.6.3.5 Systems The importance measures for the systems are listed in Table 9-19 and displayed in Figure 9-19.The following nine systems are of high importance:
a.FSW b.AC c.AFW d.CCW e.DG SAFW g.RC h.RHR Fire Service Water AC Power Auxiliary Feedwater Component Cooling Water Diesel Generator Standby AFW Reactor Coolant Residual Heat Removal i.SW Service Water
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-12 Each contributed 2 5.0%to the fire CDF (F-V z 0.05);and if the all the events associated with they system were assumed to be"true," it would raise the fire CDF by a factor a 10 (RAW a 10).A review of Section 9.6.1 indicates that initiators, tags, flags, and events associated with all nine of these systems except SAFW and SW are directly mentioned among the dominant scenarios.
Similar items from the SAFW and SW systems appear in (SAFW)or near (SW, in cut set 853)the top 50 cut sets, as well as being discussed in Sections 9.6.3.2 and 9.6.3.3.The front-line systems FSW, AFW, SAFW, RC, and RHR serve either to mitigate the fire or reduce the likelihood of resulting core damage.The support systems AC, CCW, DG, and SW provide required functions, such as electric power or component cooling, to these and other critical front-line systems.All systems of medium importance arose solely due to a RAW value z 10.None had F-V values z 0.05 (other than the ones of high importance).
The seven of medium importance are as follows: a.b.C.d.e.f.DC IB HVAC ESFAS MS UV CVCS 125-VDC Power 120-VAC Instrument Bus Heating, Ventilation, and Air-Conditioning Engineered Safeguards Features Actuation Main Steam Undervoltage Chemical Volume and Control.These are characteristically reliable and redundant systems, requiring minimal human action for their operation.
9.6.3.6 Components I The importance measures for the components are listed in Table 9-20 and displayed in Figure 9-20.The following 21 components are of high importance:
a.b.C.d.e.f.AFMMOTDAFW DGDGFTSCXX RCRZT00430 AFMMSAFWPD SWCXXSUCTN.
FSXXXTR803 g.RCRZT0431C h.AFCCAFWSTR m.ACMMMCC01D i.FSDGAPFP01 j.DGDGFASCXX DGMMASTART 1.CCMM00738B Non-fire-induced failure of the TDAFW pump Non-fire-induced failure of the TSC DG to run Non-fire-induced failure of PORV 430 to reseat after steam relief Non-fire-induced failure of SAFW Pump Train D Non-fire-induced total failure of common SW/FSW suction Non-fir-induced failure of the Relay Room Halon Suppression System (S08)Non-fire-induced failure of PORV 431C to reseat after steam relief Non-fire-induced common cause failure (CCF)of all three AFW pumps to start Non-fir-induced failure of the diesel-driven FSW pump to start Non-fire-induced failure of the TSC DG to start Non-fir-induced failure of DG A to start due Non-fir-induced failure to open of MOV 738B to supply CCW to RHR HXB Non-fir-induced failure of MCC D GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 9-13 q.r.s.t.u.AFMMMDFP1B RHMMACO I BA DGCCOOORUN TLCCFMATWS DGCCOSTART n.AFMMSGBINJ o.DGMMBRKR14 p.TLCCFBRKRF Non-fire-induced failure of AFW Train B injection line to SG B Non-fire-induced failure of DG A supply breaker to Bus 14 to close Non-fire-induced failure to SCRAM due to electrical failure of the Reactor Trip Breakers (RTBs)Non-fire-induced failure of motor-driven AFW Pump Train B Non-fire-induced failure of the RHR Pump B to start Non-fire-induced CCF ofboth DGs to run Non-fire-induced failure to SCRAM due to mechanical failures Non-fire-induced CCF of both DGs to start.Each contributed a 0.5%to the fire CDF (F-V a 0.005);and, if the event were assumed to be"true," it would raise the fire CDF by a factor a 2 (RAW a 2).Several ([a],[b],[c],[j], and 1])were discussed in Section 9.6.1.All of the remaining, except the two related to SCRAM failures ([p]and[t]), are associated with systems of high importance as discussed in Section 9.6.3.5.TLCCFBRKRF and TLCCFMATWS are pertinent to ATWS scenarios, one of which appears as cut set¹59, another as cut set¹76.The ATWS events are caused by electrical and mechanical failures to trip the reactor following a loss of offsite power with fire-induced failures of the PORVs to provide necessary primary system relief.
Cutsets with Descriptions Report@FIRE1=3.34E-05 Inputs Description Rate Exposure Probability FIOCR3-1 AAAATRANSIN DGDGFTSCXX FACR-MCB FSAASUPPXX FSHFDCR-3-X NOSBO FZOOORC3 AAAATRANSIN FARC-3 FSAASUPPOK FSCORR0003 FSH FDCROi~l2 NOSBO FIOCR3-1 AAAATRANSIN AFTHOTDAFW FACR-MCB FSAASUPPXX FSHFDCR-3-X NOSBO FIOTB2-1 ACTRAINA FATB-2-2 FSAASUPPOK NOSBO RCHVD00516N RCRZT00430 RHTHOOOOOB SLO TLSTRANS FIOCR3-1 AAAATRANSIN AFHMOTDAFW FACR-MCB FSAASUPPXX FSHFDCR-3-X NOSBO Fire in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TSC biesel Generator fails to run 1.25E-03 CR-HCB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone RC-3 FLAG-Transient Initiating Event Which Do Not Result in SI Conditions RC-3 Tag FLAG-Fire Suppression successful or N/A CORRECTION FACTOR FOR RECOVERY OF CONTROL ROOM INDICATION FOR CNMT FIRE Ops fail to use alternate AFW/SG instrumentation when Control Room indication NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SZ Conditions TDAFW Pump Train out-of-service for maintenance CR-MGB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-2 (Scenario 1 and 2)Failure of AC Train A (tagging event)TB-2-2 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT Motor-Operated Valve 516 Is Not Closed Due To PORV Leakage PORV PCV-430 Fails To Reseat After Steam Relief 5.00E-03 ,TRAIN B OOS FOR MAINTENANCE SMALL LOCA SEQUENCE TAGGING EVENT TAGGING EVENT TO IDENTIFY TL S TRANS SEQUENCES Fire, in Zone CR-3 (Scenario 1 and 2)FLAG I-Transient Initiating Event Which Do Not Result in SZ Conditions Failure of TDAFW pump train components CR-MCB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room NO STATiON BLACKOUT TAGGING EVENT 0.0 1.0 24.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 1.0 0.1 los0.0 1.0 0.0 1.0 0.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 0.0 1.0 1.53E-06 1.338-06 1.06E-06 7.26E-07 6.47E-07 C: I CAF TA-WWEWFIRESIFIRESENS.
CUT Page 1 0
s Description Rate Exposure Probability 10 FIBR1A-3 AAAATRANSIN DGDGFTSCXX FABRlA FSAASUPPXX FSASPROP01 FSHFDBRIA3 NOSBO FIOCR3-1 AAAATRANS IN FACR-MCB FSAASUPPXX FSHFDAFWXX FSHFDCR-3-X NOSBO FIOCR3-1 AAAATRANSIN FACR-tjCB FSAASUPPXX FSHFDCR-3-X FSHFDDCPWR NOSBO FIOCR3-1 AAAATRANSIN FACR-MCB FSAASUPPXX FSHFDCR-3-X FSHFDPORVS NOSBO FIOTB1-5 ACAZDLOSPl ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB DGTtj00001A FATB-1-3 FSAASUPPOK SBO FIBRIA-3 AAAATRANSIN AFTMOTDAFW FABRlA FSAASUPPXX FSASPROP01 FSHFDBR1A3 IBAABUSCMX NOSBO 03 8 of ation)Fire in Zone BR1A (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TSC Diesel Generator fails to run 1.25E-BRlA Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BRlA-3 NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 1'nd 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCB Tag FLAG'-Fire Suppression fails HCO fails to locally open MOV 3996 and MOV 3505A per Attach 3 of ER-FIRE Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCB Tag FLAG-Pire Suppression fails Fire Brigade fail to manually suppress fire in Control Room Failure to align TSC DC supply to Battery B for TDAFW pump per Attachment NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room Operators/I&C fail to perform ER-FIRE.1 Attachment 9 (PORV 430 local oper NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-2 (Scenario 5)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A UNAVAILABLE DUE TO TESTING OR MAINTENANCE TB-1-3 Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT Fire in Zone BR1A (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TDAFWI Pump Train out-of-service for maintenance BR1A Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BR1A-3 FLAG-Instrument Bus C on Normal Supply NO STATION BLACKOUT TAGGING EVENT 0.0 1.0 24.0 1.0 1.0 0.1 0.0 1.0 0.0 1.0 1.0 1.0 0.0 0.0 1.0 0.0 1.0 1.0 1.0 0.0 ER-FO.O 1.0 0.0 1.0 1.0 1.0 0.0 0.0 1.0 0.0 0.4 0.1 0.0 1.0 1.0-0.0 1.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 O.l 0.0 1.0 1.0 6.21E-07 5.10E-07 5.10E-07 5.10E-07 4.42E-07 4.31E-07 C: tCAF7A-WWEWFIRES\FIRESENS.CUT Page 2
Description Rate Exposure Probability 12 13 15 16 FIOTB2-3 ACAZDLOSP1 ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB AFTt40TDAFW FATB-2-3 FSAASUPPOK SBO FIOCR3-3 AAAATRANSIN DGDGFTSCXX FACR-HCB FSAASUPPXX FSASPROP01 FSHFDCR-3-X NOSBO FIOTB2-1 ACTRAINA CCMM00738B FATB-2-2 FSAASUPPOK NOSBO RCHVD00516N RCRZT00430 SLO TLSTRANS FIBR1A-3 AAAATRANSIN AFHt40TDAFW FABR1A FSAASUPPXX FSASPROP01 FSHFDBR1A3 IBAABUSCHX NOSBO FIOCR3-1 AAAATRANSIN FACR-MCB FSAASUPPXX FSHFDCR-3-X FSHPDCROM2 NOSBO Fire in Zone TB-2 (Scenario 3)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)TDAFW Pump Train out-of-service for maintenance TB-2-3 Tag FLAG-Fire Suppression successful or N/A STATiON BLACKOUT SEQUENCE TAGGING EVENT Fire in Zone CR-3 (Scenario 3)FLAG i-Transient Initiating Event Which Do Not Result in SI Conditions TSC Diesel Generator fails to run 1.25E-03 CR-HCB Tag FLAG-Fire Suppression fails Fire pxopagates beyond initial source Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-2 (Scenario 1 and 2)Failuxe of AC Train A (tagging event)HOV 738B PAILS TO OPEN TB-2-2 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT Motor-Operated Valve 516 Is Not Closed Due To PORV Leakage PORV PCV-430 Fails To Reseat After Steam Relief 5.00E-03 SMALIn, LOCA SEQUENCE TAGGING EVENT TAGGING EVENT TO IDENTIFY TL S TRANS SEQUENCES Fire in Zone BR1A (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Failure of TDAPW pump train components BR1A Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BR1A-3 FLAG-Instrument Bus C on Normal Supply NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCB Tag FLAG-Fire Suppression fails Fire brigade fail to manually suppress fire in Control Room Ops fail to use alternate AFW/SG instrumentation when Control Room indication NO STATION BLACKOUT TAGGING EVENT 0.0 0.4 0.1 0.0 1.0 1.0 0.0 1.0 1.0 1'.0 0.0 1.0 24.0 1.0 1.0 0.1 0.0 1.0 0.0 1.0 0.0 1.0 1.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 0.1 0.0 1.0 1.0 0.0 1.0 1.0 1.0 0.0 los0.0 1.0 3.31E-07 3.06E-07 2.70E-07 2.63E-07 2.55E-07 C: tCAF TA-WtNEWFI RES lFIRESENS.
CUT Page 3
In s Description Rate Exposure Probability 17 18 19 20 21 FZOCR3-1 AAAATRANS IN DGDGATSCXX FACR-MCB FSAASUPPXX FSHFDCR-3-X NOSBO FIOCR3-3 AAAATRANSIN AFTMOTDAFW FACR-MCB FSAASUPPXX FSASPROP01 FSHFDCR-3-X NOSBO FIBR1A-3 AAAATRANSIN FABR1A FSAASUPPXX FSASPROP01 FSHFDBRlA3 FSHFDDCPWR NOSBO FIOTB1-3 ACTRAINA FAD IVA FSAASUPPOK NOSBO RCMVD00516N RCRZT00430 RHTMOOOOOB SLO TLSTIVglS FIBR1B-3 ACAZDLOSPl ACTRAINA ACTRAINB DGTM00001A FABR1B FSAASUPPXX FSASPROP01 FSHFDBRZB3 SBO Fire.in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TSC Diesel Generator fails to START 4.88E-03 CR-f<CB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fixe in Zone CR-3 (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TDAFW Pump Train out-of-service for maintenance CR-MCB Tag FLAG~Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone BR1A (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions BR1A Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BR1A-3 Failure to align TSC DC supply to Battery B for TDAFW pump per Attachment 8 NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-1 (Scenario 3 and 4)Failure of AC Train A (tagging event)DIVA Tag FLAG 4 Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT Motor-Operated Valve 516 Is Not Closed Due To PORV Leakage PORV PCV-430 Fails To Reseat After Steam Relief 5.00E-03 TRAIN B OOS FOR t4AINTENANCE SMALL LOCA SEQUENCE TAGGING EVENT TAGGING EVENT TO IDENTIFY TL S TRANS SEQUENCES Fire in Zone BR1A (Scenario 3 and 4)Failure to Restore Offsite Power Within 1 Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A UNAVAILABLE DUE TO TESTING OR ttAINTENANCE BRlB Tag FLAG-Fixe Suppression fails Fire propagates beyond initial source Fire Blrigade fail to manually suppress fire in Battery Zone BR1B-3 STATION BLACKOUT SEQUENCE TAGGING EVENT 0.0 1.0 1.0 1.0 1.0 0.0 1.0 0.0 1.0 0.0 1.0 1.0 0.1 0.0 1.0 0.0 1.0 1.0 1.0 0.1 0.0 of ER-FO.O 1.0 0.0 1.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 1.0 0.0 0.4 1.0 1.0 0.0 1.O 1.0 O.l 0.0 1.0 2.49E-07 2.12E-07 2.07E-07 1.93E-07 1.84E-07 C:tCAF TA-WINEWFIRESIRRESENS.CUT Page 4
tr s Description Rate Exposure Probability 22 23 25 FIOTB2-3 ACAZDLOSP1 ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB AFMMOTDAFW FATB-2-3 FSAASUPPOK SBO SBOCORR007 FIOOORR3 AAAATRANSIN DGDGFTSCXX FARRX FSAASUPPXX FSASPROP01 FSHFDRROOH FSXXXTR803 NOSBO FIOTB1-5 ACAZDLOSP1 ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB DGHFDCITYW FATB-1-3 FSAASUPPOK SBO UVBUS17 UVBUS18 FIOTB2-1 ACTRAINA CCHFL0780B FATB-2-2 FSAASUPPOK NOSBO RCMVD00516N RCRZT00430 SLO TLS TRANS OW MORE TIME Conditions 1.25E-03 1.00E-03 5.00E-03 Fire in Zone TB-2 (Scenario 3)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)Failure of TDAFW pump train components TB-2-3 Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT SBO CORRECTION FACTOR II7-TDAFW RUN FAILURES DURING SBO ALL Fire'in Zone RR (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI TSC Diesel Generator fails to run RR Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually extinguish fire in relay room Relay Room Halon System S08 Inoperable NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-2 (Scenario 5)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)Operators fail to connect city water to DG cooling per ER-DG TB-1-3 Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT UV on Bus 17 Tagging Event UV on Bus 18 Tagging Event Fire in Zone TB-2 (Scenario 1 and 2)Failure of AC Train A (tagging event)CCW THROTTLING VALVE 780B HISPOSITIONED TB-2-2 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT Motor-Operated Valve 516 Is Not Closed Due To PORV Leakage PORV PCV-430 Fails To Reseat After Steam Relief SMALL LOCA SEQUENCE TAGGING EVENT TAGGI)IG EVENT TO IDENTIFY TL S TRANS SEQUENCES 0.0 0.4 0.1 0.0 1.0 1.0 0.0 1.0 1.0 1.0 0.9 0.1 1.0 24.0 1.0 1.0 0.1 0.0 24.0 1.0 0.0 0.4 0.1 0.0 1.O 1.0 0.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 1.0 1.0 1.0 1.0 1.0 1.78E-07 1.77E-07 1.76E-07 1.74E-07 C:tCAF7A-WWEWFIRES)FIRESENS.CUT Page 5
s Description Rate Exposure Probability 26 27 28 29 30 FIDG1B10 AAAATRANSIN AFHFDCITYW AFTHOTDAFW FAEDG1B-0 FSAASUPPOK NOSBO UVBUS17 UVBUS18 FIOCR3-1 AAAATRANSIN AFHFLTDAFW FACR-MCB FSAASUPPXX FSHFDCR-3-X NOSBO FIOTB2-1 ACTRAINA FATB-2-2 FSAASUPPOK NOSBO RCHVD00516N RCRZT00430 RHHHAC01BA SLO TLS TRANS FIOCR3-1 AAAATRANSIN FACR'-HCB FSAASUPPXX FSHFDCR-3-X FSHFDREC03 MSMHN2BOTA NOSBO FIOTB1-5 ACAZDLOSP1 ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB DGDGF0001A FATB-1-3 FSAASUPPOK SBO SBOCORR006 0.0 1.0 0.0 0.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 1.0 1.0 1.0 1.O 0.0 1.0 1.0 0.0 1.0 1.0 1.0 0.0 0.1 0.0 1.0 0.0 0.4 0.1 0.0 1.0 1.0 24.0 1.0 1.0 1.0 OFFSITE PWR0.3 5.00E-03 1.25E-03 Fire in Zone EDG1B-0 FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Operators fail to use city fire water for SAFW per ER-AFW.1 TDAFW Pump Train out-of-service for maintenance EDG1B-0 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT UV on Bus 17 Tagging Event UV on Bus 18 Tagging Event Fire in Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Faildre to restore TDAFW pump train to service post test/maintenance CR-MCB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-2 (Scenario 1 and 2)Failure of AC Train A (tagging event)TB-2-2 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT Motor-Operated Valve 516 Is Not Closed Due To PORV Leakage PORV PCV-430 Fails To Reseat After Steam Relief RHR PUMP B (PAColB)FAILS TO START SHALL LOCA SEQUENCE TAGGING EVENT TAGGING EVENT TO IDENTIFY TL S TRANS SEQUFNCES Fire fn Zone CR-3 (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-HCB Tag/FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room Failure to find alternative cooldown paths (TDAFW steam lines)NITROGEN BOTTLES FAIL TO SUPPLY ARV 3411 NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-2 (Scenario 5)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A FA1LS TO RUN TB-1-9 Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT SBO CORRECTION FACTOR tt6-DG RUN TIME FAILURES ALLOW)1 HR TO RESTORE 1.71E-07 1.53E-07 1.48E-07 1.46E-07 1.32E-07 C tCAFTA-WWEWFIREStFIRESENS.CUT Page 6
Description Rate Exposure Probability 31 32 33 35 FIOCR3-3 AAAATRANSIN AFMMOTDAFW FACR-MCB FSAASUPPXX FSASPROP01 FSHFDCR-3-X NOSBO FIOOORR3 AAAATRANSIN AFTMOTDAFW FARRX FSAASUPPXX FSASPROP01 FSHFDRROOM FSXXXTR803 NOSBO FIOOABB1 AAAATRANSXN ACTRAINA AFMHOTDAFW AFt 1MSAFWPD AFTMHAFSGB FADXVA FSAASUPPOK NOSBO FIOCR3-1 AAAATRANSIN AFTHTDAFWB FACR-MCB FSAASUPPXX FSHFDCR-3-X MSHSF05738 NOSBO FIOOABO1 ACAZDLOSP1 ACCORR0003 ACHSF00016 ACTRAINA ACTRAINB AFTMOTDAFW CCAACCPMPB FAABO FSAASUPPOK SBO SFAARPAC7B 0.0 1.0 0.0 1.0 1.0 0.1 0.0 1.0 0.1 1.0 0.0 1.0 1.0 0.1 0.0 24.0 1.0 0.0 1.0 1.0 0.0 0.0 0.0 1.0 1.0 1.0 0.0 1.0 0.0 1.0 1.0 0.0 0.1 1.0 0.0 0.4 0.1 1.00E-03 to transfe0.1pen 1.0 1.0 0.0 0.5 1.0 1.0 1.0 1.0 Fire in Zone CR-3 (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Failure of TDAFW pump train components CR-HCB Tag FLAG-Fire Suppression fails Fire propagates beyond initial'source Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone RR (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TDAFW Pump Train out-of-service for maintenance RR Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually extinguish fire in relay room Relay Room Ha)on System S08 Inoperable NO STATION BLACKOUT TAGGING EVENT Fire in Zone ABB (Scenario 1 and 2)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Failure of AC Train A (tagging event)Failure of TDAFW pump train components Failure of SAFW Pump 1D Train MOTOR DRIVEN AFW TRAIN B TO B S/G O.O.S DUE TO T/M DIVA Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT Fire jn Zone CR-3 (Scenario 1 and 2)FLAG-Transient Xnitiating Event Which Do Not Result in SI Conditions TDAFW Pump Train injection line to S/G B out-of-service for maintenance CR-MCB Tag FLAG-Fire Suppression fails Fire Brigade fail to manually suppress fire in Control Room Hot short causes AOV 5738 to fail to close NO STATION BLACKOUT TAGGING EVENT Fire in Zone ABO (Scenario 1 and 2)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR RECOVERY OF HOT SHORT LOOP EVENTS Hot short causes 480 VAC Bus 16 feeder circuit breaker 52/16 (BUS16/11B)
Failure of AC Train A (tagging event)Failure of Train B (tagging event)TDAFW Pump Train out-of-service for maintenance FLAG]CCW PUMP B IS ALXGNED TO RUN ABO Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT FLAG-SFP Pump B Running 1.29E-07 1.23E-07 1.14E-07 1.13E-07 1.11E-07 C: tCAF TA-WWEWFIRES tFIRESENS.
CUT IF F I Description Rate Exposure Probability 36 37 38 39 FIBRlB-3 ACAZDLOSP1 ACTRAINA ACTRAINB ACWPFMCC1H FABR1B FSAAFIRElH FSAASUPPXX FSASPROP01 FSHFDBRlB3 SBO FIBR1B-3 ACAZDLOSP1 ACTRAINA ACTRAINB DCWPFC3ACX FABR1B FSAAFIRE1H FSAASUPPXX FSASPROP01 FSHFDBRIB3 SBO FIOSH2-1 ACHSF00014 ACTRAINA FASH-2-R FSAASUPPOK NOSBO RCMVD00516N RCRZT00430 RHTMOOOOOB SLO TLSTRANS FIOTB2-1 ACAZDLOSP1 ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB AFTMOTDAFW FATB-2-2 FSAASUPPOK SBO 1.10E-07 0.0 0.4 1.0 1.0 t0.2ra 1.0 O.l 1.0 0.1 0.0 1.0 0.0 0.4 1.0 1.0 (Mccc/osMM) nsfer open 1.10E-07 open (to MCC 0.2 1.0 0.1 1.0 0.1 0.0 1.0 0.0 1.09E-07)to transfeo.lpen 1.0 1.0 1.0 1.0 1.0 1.0 0.0 1.O 1.0 0.0 0.4 0.1 0.0 1.0 1.0 0.0 1.0 1.0 1.0 5.00E-03 1.07E-07 Fire in Zone BR1A (Scenario 3 and 4)Failure to Restore Offsite Power Within 1 Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)Cable wrap failure causes 480 VAC MCCH feeder circuit breaker 52/MCCH BR1B Tag FLAG-Special multiplier to indicate fire duration>1 hr (prob~O.l)FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BRlB-3 STATION BLACKOUT SEQUENCE TAGGING EVENT Fire u.n Zone BR1A (Scenario 3 and 4)Failure to Restore Offsite Power Within 1 Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)Cable wrap failure causes disconnect switch DCPDPCB03A/03 to transfers BR1B Tag FLAG-Special multiplier to indicate fire duration>1 hr (prob=0.1)FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BR1B-3 STATION BLACKOUT SEQUENCE TAGGING EVENT Fire in Zone SH-2 (Scenario 1 and 2)Hot short causes 480 VAC Bus 14 feeder circuit breaker 52/14 (BUS14/18B Failure of AC Train A (tagging event)SH-2-R Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT'-Motox-Operated Valve 516 Is Not Closed Due To PORV Leakage PORV PCV-430 Fails To Reseat After Steam Relief TRAIN B OOS FOR MAINTENANCE SMALL LOCA SEQUENCE TAGGING EVENT TAGGING EVENT TO IDENTIFY TL S TRANS SEQUENCES Fire in Zone TB-2 (Scenario 1 and 2)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)TDAFW Pump Train out-of-service for maintenance TB-2-2 Tag FLAG$Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT C tCAF7A-WWEWFIRESU IRESENS.CUT Page 8
tr s Description Rate Exposure Probability 40 4l42 FIOTB2-3 ACAZDLOSP1 ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB AFHFDALTTD FATB-2"3 FSAASUPPOK SBO UVBUS17 UVBUS18 FIDGlB10 AAAATRANSIN AFHFDCITYW AFMMOTDAFW FAEDG1B-0 FSAASUPPOK NOSBO UVBUS17 UVBUS18 FIOOABB3 AAAATRANS IN CVAACHPMPB CVAACHPMPC CVTMCHPMPA FAABB-3 FSAASUPPXX FSHFDAUXBB FSXXXTR746 NOSBO FIOCR3-3 AAAATRANSIN FACR-MCB FSAASUPPXX FSASPROP01 FSHFDAFWXX FSHFDCR-3-X NOSBO FIOCR3-3 AAAATRANSIN FACR-MCB FSAASUPPXX FSASPROP01 FSHFDCR-3-X FSHFDDCPWR NOSBO Fire in Zone TB-2 (Scenario 3)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip Failure of AC Train A (tagging event)Failure of Train B (tagging event)OPERATORS FAIL TO PROVIDE COOLING TO TDAFW LUBE OIL FROM D1ESEL FIRE PUMP TB-2-3 Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT UV on Bus 17 Tagging Event UV oh Bus 18 Tagging Event Fire in Zone EDGIB-0 FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Operators fail to use city fire water for SAFW per ER-AFW.1 Failure of TDAFW pump train components EDG1B-0 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT UV on Bus 17 Tagging Event UV on Bus 18 Tagging Event Fire in Zone ABB (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions FLAG-CHARGING PUMP B RUNNING FLAG-CHARGING PUMP C RUNNING TEST OR MAINTENANCE RENDERS CHARGING PUMP A UNAVAILABLE ABB-3', Tag FLAG'-Fire Suppression fails Fire Brigade fail to manually extinguish fire in Aux Bldg Basement Sprinkler S01 Inoperable (Aux Bldg Basement Cable Trays-SI Pump)l.OOE-03 NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCB Tag FLAG-Fire Suppression fails Fire propagates beyond initial source HCO fails to locally open MOV 3996 and MOV 3505A per Attach 3 of ER-FIRE Fire Brigade fail to manually suppress fire in Control Room NO STATION BLACKOUT TAGGING EVENT Fire in Zone CR-3 (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCh Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Control Room Failure to align TSC DC supply to Battery B for TDAFW pump per Attachment 8 NO STATION BLACKOUT TAGGING EVENT 0.0 0.4 0.1 0.0 1.0 1.0 0.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 0.0 0.0 1.0 1.0 1.0 1.0 1.0 0.0 1.0 0.6 0.6 0.1 1.0 1.0 0.0 24.0 1.0 0.0 1.0 1.0 1.0 0.1 0.0 0.0 1.0 0.0 1.0 1.0 1.0 0.1 0.0 of ER-FO.O 1.0 1.06E-07 1.05E-07 1.03E-07 1.02E-07 1.02E-07 C:tCAF TA-WtNEWFIREStFIRESENS.CUT Page 9
s Description Rate Exposure Probability 45 FIOCR3-3 AAAATRANSIN FACR-MCB FSAASUPPXX FSASPROP01 FSHFDCR-3-X FSHFDPORVS NOSBO FIOOABB3 AAAATRANSIN CVHFDSUCTN FAABB-3 FSAASUPPXX FSHFDAUXBB FSXXXTR746 NOSBO FIBRIA-3 AAAATRANSIN DGDGATSCXX FABR1A FSAASUPPXX FSASPROP01 FSHFDBR1A3 NOSBO FIOTB1-1 ACAZDLOSP1 ACTRAINA ACTRAINB DGDGF0001A FATB-1-1 FSAASUPPXX FSXXXTR768 SBO SBOCORR006 FIO'gBl-l.
ACAZDLOSP1 ACTRAINA ACTRAINB DGDGF0001A FATB-1-1 FSAASUPPXX FSXXXTR769 SBO SBOCORR006 1.00E-03 Fire in Zone CR-3 (Scenario 3)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions CR-MCB Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Control Room Operators/IRC fail to perform,ER-FIRE.1 Attachment 9 (PORV 430 local operation)
NO STATION BLACKOUT TAGGING EVENT Fire in Zone ABB (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions Operators Fail to Manually Open Suction Line Upon Loss of IA ABB-9 Tag FLAG.-.Fire Suppression fails Fire Brigade fail to manually extinguish fire in Aux Bldg Basement Sprinkler Sol Inoperable (Aux Bldg Basement Cable Trays-SI Pump)1.OOE-03 NO STATION BLACKOUT TAGGING EVENT Fire in Zone BRlA (Scenario 3 and 4)FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TSC Diesel Generator fails to START 4.88E-03 BR1A Tag FLAG-Fire Suppression fails Fire propagates beyond initial source Fire Brigade fail to manually suppress fire in Battery Zone BRlA-3 NO STATION BLACKOUT TAGGING EVENT Fire in Zone TB-1 (Scenariol and 2)Failure to Restore Offsite Power Within.l Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A FAILS TO RUN 1.25E-03 TB-1-1 Tag FLAG-Fire Suppression fails Spray S24 Inoperable (Turbine Condenser Pit)STATION BLACKOUT SEQUENCE TAGGING EVENT SBO CORRECTION FACTOR t)6-DG RUN TIME FAILURES ALLOW)1 HR TO RESTORE OFFSITE Fire in Zone TB-1 (Scenariol and 2)Failure to Restore Offsite Power Within 1 Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A FAILS TO RUN 1.25E-03 TB-1-1 Tag FLAG-Fire Suppression fails Sprayf S25 Inoperable (Generator Hydrogen Seal)1.00E-03 STATION BLACKOUT SEQUENCE TAGGING EVENT SBO CORRECTION FACTOR tt6-DG RUN TIME FAILURES ALLOW)1 HR TO RESTORE OFFSITE 0.0 1.0 1.0 1.0 0.1 0.0 0.0 1.0 0.0 1.0 0.0 1.0 1.0 0.0 24.0 1.0 0.0 1.0 1.0 1.0 1.0 0.1 0.0 1.0 0.0 0.4 1.0 1.0 24.0 1.0 1.0 24.0 1.0 PWR0.3 0.0 0.4 1.0 1.0 24.0 1.0 1.0 24.0 1.0 PWR0.3 1.02E-07 1.02E-07 1.01E-07 8.95E-08 8.95E-08 C:tCAF TA-WWEWFIREStFIRESENS.CUT Page 10 50 51 52 53 In s FIOTB1-1 ACAZDLOSPl ACTRAINA ACTRAINB DGDGF0001A FATB-1-1 FSAASUPPXX FSXXXTR770 SBO SBOCORR006 FIOTB1-1 ACAZDLOSP1 ACTRAINA ACTRAINB DGDGF0001A FATB-1-1 FSAASUPPXX FSXXXTR771 SBO SBOCORR006 FIDGlB10 AAAATRANSIN AFHFDSAFWX AFTHOTDAFW FAEDG1B-0 FSAASUPPOK NOSBO UVBUS17 UVBUS18 FXOOORR6 AAAATRANSIN ACTRAINA AFHMSAFWPD FADIVA FSAASUPPOK NOSBO SWCXXSUCTN FIOTB1-5 ACAZDLOSPl ACLOPNOSI2 ACLOPRTALL ACTRAINA ACTRAINB DGHHASTART FATB-1-3 FSAASUPPOK SBO Description Fire in Zone TB-1 (Scenariol and 2)Failure to Restore Offsite Power Within 1 Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A FAILS TO RUN TB-1-1 Tag FLAG-Fire Suppression fails Sprinkler S26 Inoperable (Turbine Island)STATION BLACKOUT SEQUENCE TAGGING EVENT SBO CORRECTION FACTOR tt6-DG RUN TIME FAILURES ALLOW Fire in Zone TB-1 (Scenariol and 2)Failu're to Restore Offsite Power Within 1 Hour Failure of AC Train A (tagging event)Failure of Train B (tagging event)DIESEL GENERATOR KDG01A FAILS TO RUN TB-1-1 Tag FLAG-Fire Suppx'ession fails Spray S27 Inoperable (Main Turbine Oil Reservoir)
STATXON BLACKOUT SEQUENCE TAGGING EVENT SBO CORRECTION FACTOR N6-DG RUN TIME FAILURES ALLOW Fixe in Zone EDG1B-0 FLAG-Txansient Initiating Event Which Do Not Result OPERATORS FAIL TO CORRECTLY ALIGN SAFW TDAFW Pump Train out-of-service for maintenance EDG1B-0 Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGXNG EVENT UV on Bus 17 Tagging Event UV on Bus 18 Tagging Event Fire in Zone RR (Scenario 6)FLAG-Transient Initiating Event Which Do Not Result Failure of AC Train A (tagging event)Failure of SAFW Pump 1D Train DIVA Tag FLAG-Fire Suppression successful or N/A NO STATION BLACKOUT TAGGING EVENT TOTAL FAILURE OF COMMON SW/FIRE WATER SUCTION Fire in Zone TB-2 (Scenario 5)Failure to Restore Offsite Power Within 1 Hour CORRECTION FACTOR FOR NO SI CONDITION Loss of All Off-Site Power Following Reactor Trip, Failuxte of AC Train A (tagging event)Failure of Train B (tagging event)FAXLURES OF D/G A TO START TB-1-3 Tag FLAG-Fire Suppression successful or N/A STATION BLACKOUT SEQUENCE TAGGING EVENT Rate Exposure 1.25E-03 1.00E-03 1 HR TO RESTORE OFFSITE 1.25E-03 1.00E-03 0.0 0.4 1.0 1.0 24.0 1.0 1.0 24.0 1.0 PWR0.3 0.0 0.4 1.0 1.0 24.0 1.0 1.0 24.0 1.0 in SI Conditions in SI Conditions 0.0 1.0 0.0 0.0 1.0 1.0 1.0 1.O 1.0 0.0 1.0 1.0 0.0 1.0 1.0 1.0 0.0 0.0 0.4 0.1 0.0 1.0 1.0 0.0 1.0 1.0 1.0 1 HR TO RESTORE OFFSITE PWR0.3 Probability 8.95E-08*8.95E-OS 8.90E-OS 8.76E-08 8.71E-OS C:tCAF TA-WINEWFIREStFIRESENS.CUT Page 11 e
¹I s Description Rate Exposure Probability 55 FIDG1B10 AAAATRANSIN AFTrlOTDAFW FAEDG1B-0 FSAASUPPOK FSHFDCRON2 NOSBO UVBUS17 UVBUS18 Fire in Zone EDG1B-0 FLAG-Transient Initiating Event Which Do Not Result in SI Conditions TDAFW Pump Train out-of-service for maintenance EDG1B-0 Tag FLAG-Fire Suppression successful or N/A Ops fail to use alternate AFW/SG instrumentation when Control Room indication NO STATION BLACKOUT TAGGING EVENT UV on Bus 17 Tagging Event UV on Bus 18 Tagging Event 0.0 8.57E-08 1.0 0.0 1.0 1.0 loso.o 1.0 1.0 1.O Report Summary: Filename: C:>CAFTA-VNNEWFIRES(FIRESENS.CUT Print date: 6/18/99 2:47 PM Not sorted Printed the first 55 C:tCAF TA-WWEWFIREStFIRESENS.
C U7 Page 12 0
l~~s: L+i~i s: L+im iiigif II I QDG~MEDXH s~s-I I I~I I g~gi~l It'I I It'II I RE%IX'EI~I
~i.giif ll I I~RK LKEX~Zl~!K521XHMKK~it~i~~IEl EKE RE cgiQQI IKeEMSI~I I~~~e.'~~~~~,~~,~~,~I~'~'I~I~@~i LKi~opmtt~i LC~II l$I I>>.s~I)++igiggg~i)+gg
~'iml~~i LE~is EIcIm s i~:~giiiJQg+ig s gQQ~I~~C~~~st~l~~l s s s~~/I~I.I~~II LH~i LEl I~I I alii/I S~~st~tl IK?EZMWXZRH I=~/I~I I-~i~i~I~ILKIII Qgglg~l+KHXHLKIQ mmXImma I3KMILKII'I HZXZI~HKEQKKH~i~i~g~i.~@~i~s s:--~i~iggg jig~I~II~~~.:~t I I I I~~QI~IKK~+I i s~:~gxgiQI ggi1m s s I.LKII!/@i s SSI=~i~s Si S RMI It'LED RXZI LED~MZI~l~lgttf~~tm gge~cl 1 I~I I I~~~i~-RKKK)m=.KHLE
~@iigg~~i~~i LEQigiif~i~ij s s s-~~if~QQig~~
Riam&~mKQIXRI~
s:.~g~sgf ggig I s~-L3+sgiiJ+~i
~ss-~~i~i~~i~]
s I s--~ggs~ig+QQig~ic
~.'~~~,~
~'~RRE1 RRR1ER5 NERVESOKER
%ERE%REKERHNQ RSRSRI RRINRRI." RI1lRI---RRIRRSI~mSSmm-.RKKRRRKRRt RRZSREKEXHRE Kl~-RN lRRRRRIII RREWREERRSR
.KRRNRNt'EKRmjR5 RERRRNC NRKRQNR RKRRRRREECRR RRiR45RKERER FiaRPie NRREENR RZEEKERE IRRSNR1IRI
.RRKERSSE-~RQQKIW" mmNI NRRHEE KK}RKl%5 REREEKl-~SRERlm~~SRSSHI~RuzuamsmmR.
NISEI.RRQEZKRR RCIRRIC mml RIRR\
~~I~'I~~~~~;-REER~I~~~I I~ggtgggigiig
~~ERR g~i~~~~~ii giggg RRSRRRRKCERR
'~~I grig/~.ERIIR RERCEX&RCRCEElRl-
~~~\\~~Qgg~i~~I i~~Ii~~~.::~II:~II geiig~i~II i]]ii]: RPEERRE RRRIERlLK' RSRRRI: NEREELR'ERRmm%}: 8!RREEÃlI~I~II]~I~I" RRRlERiR ERICH RRR%" ERRE~egQi)~i~Ii~I~I gp~\~'~~'~I\~RRKSM%REER I~I~~mls%
~~I 0~~I~~,~II I~is~is II I I I~II~II%B3XZKKZiZi~
II I~I~SI glgl~I I is I I I I~~is~is~I I II~~I II~ll I is si Qg~s I~I I~~~~~~~~~~~~~~~I,~~j~~~~~II~ll~I~I I I I~gpss~is lc+giif~I.~~~BR18E1XZf~
I~I~I I~I~~j~'i I'~~is~is IK~I~~j~4 I II~I'I I I II~~is~is Igiiii~i IS I I I I'KHlKKM II I~~I I~IHW&XHK~~KKSBZXH~j~~I I I I I I I I I~~I~~+II~si IEKI~I!~I I I II ii~I~je I I~~I I~-~I I I I I~~~'~t I~I~
II I~~t~~'i i g+giif ss ssQc~ig~.-.t~'~~'II'~~~~I I~I I I I I'~I I I I I~'II le II I I I~')~II~~~I~~t~'~~0~'~.'~II II'II I I I I S S Ii~i~i~i i~~i~i~~~I I I I~~:~~~(sit/~is gggim~I~Klsllgigigg+giif~l
~II I~I~I~+Kiss:gigigP+I
~~I I I t I~ii gigiggsSig~
I IS I I I~I I s ss~~i]~II I~~'~~~t'\'I I I~~~ll I I I~I~~I~I'~~II s ll~I~~t~II I S I I~...~I~I~I I~~~~~t~~.~~I~~l I~~I I~
~~~~~a~~~
~~~I~~~Il~~~I I I'~~~~~~~~'I~I~',I~~~II~I'~~~~'RH%B~ll~I~'~'~I I I I I~~~~Is~<'~>>Ii~~~<~'~~~~~~<]~~s I I~K]gi]i i~s~~I~I<~<I]m]~<<]
I>>~IXX']KHKIH
~~I>>.-~<s<~g~~~~~I~~<~I~]K]~BRRiRSE%!
~.~KSREHXS~i~QQsag~.s I~]~I~~~.~~<]I~~~-~.'Qgj:QsggQ<
~~is/.~~&HXHKHX3~9
~i~<~KXHKKHM~EE9
~~KKHKKHX'H~EKH
"~HXHERHXHWHK9 RES%8~~I~<)~I~I~<.]gggggif
~.s pggi'f QQJgiiJ I~s~giif~s I~I.:~KH~I~I~~ggii'g~i~n
~~~~I I~~~I'KEY~I~<~ggg i gggpg~g~]EHXH.~~~~~~~~~'~~~~'~~~~'~~'~~~'~~~~~~~~~~~~~~~~'~;~~~~.;~~~~~~~~N~~m.~~~~I I~~~s~<~~~~'~~'~I~~.~~~~~~I~.~I~~'~~~~~I~'<~
~I~~I~I~~~t~t~I I~~I I~~'~~I~~~IS~I t~I~~~I~~~~'~'~~I~I~~~'I't~~~~~~t'I~~~~'UXB~ggiif~i I~I.~I ggggIJ~KKQ%2&EH~i+/~I~~REKH I.I'I I atm~~'~~I I.i~~t I~I I~~I'.I I~~~~~~Qg~~~I I I~~~tf~)@~I..~I~I~f~IQgiiig I~g~tQ<iiig MEZXZKKHM~~I~I~%ZHKM~f aH%8HMKI~XCKRKKf~f
'EXZKKl&KI
..~i~~~.~XZCKHXZ~i I~~tggiiig~ggiJ
/xiii.f~~I~gg-~I~i~/~geiig~i'~ggt~i~I~~~i~~i./~I MHHKHHKE~Z~KKH
~3%2RKHK~2t I.<ggggf~~I~t~+gggaf~t.I I~t~gg~~t';~~I~~~I~I\I~~~~.'~~~~~~~~.t~~~t t t~~I~'~~'~~~~~'~~~~~~~t~MKHXQ'~~I t~~~~~~~I I I~~
~~~~'~~O~~~~~>~i~~I I.'~~'~~~~~I~.i Hei'~Hii~~~4~'~e~~'~~~~e H>>m~ps>e~o-I i I I e~i~i~;.~I I I+gii%J i f~e~I~I~~>~S I~: s I~~s~.1>~.\~I~~~~I~I I I I~g~~l f~~~s>~gggjQiig~.I I~Bf~~~>~.~~'I~fosigg~~~g~i~i I foii~~~ggiifggfgiig
~I~~>.f.~LKHZKKM~HIRUHK~RH EKH1~~H3HlRHHK HKKE>~WKEfolef K2IZEB~M9EKSHfXKHM
~~~~~~>~>~g o.~;~~sf~i~I~~s~I~IT>ff f>sf~i~~ggg I~~'EHX'ZREHK~f
"~K'3iE1M~Ifmf RXHXHKHK&lE KKEKMBR~KXHHEHK D~QKK1iK~~EHKREHR e I~g~i~s I.I~~~s~>g~i~ED>
i~~~>~i(~>~I~~>~i.~m WKHKfHKM~f
~I'&iEKiEfKIIIH~KIII
~s~I~~~>lKlem~xlef
~~ilfsiig~>1
~~I>~lletrf ggiitg~fm I i~K>>m~~~I~~~~i~i I~~~~~~>~.~Klefm~s~WKZ3Zf RHXH~HK~HXBBXBXB>~
~~~~>f~s~i Qgjlgiif~I i~mi I~~.~fKLlff>>f I~I'I~I~EHl~i..s~~,.~BBK>m~.~~~~~~'~~~~~e~~~'e~~'~~~~~e~~~~~e i~~~~~~~~~~~~~~~i~~~s~~~~~~'~~~~~~~~'~~'~~~'~~~s~~~~~~,'.',:~~~'~~~I~~~~~~~.i'
~~~~~o~'~~~~o~'ggj~ie~~~I~'o~~~1~~'~~~'~~'~~~~~~~~~'~~~~e~O~~'~~~~~~~~~~~~~~'1~'~~I~~~~~'~~~~~'~o~'~~i~i~ggg I I~..~~i~i MKHKKRHM~KKH i~KSKKEKH~I
~~I~KHI~i~e I~'I I~I~~~..~Qig~ggg~~~-~I'~I I MKImRKEEH~KI
~I.~:~~i~i I-I I:~~i)~e I~XHREIX'H~H
~EIXZHKKH I~Qe~i~~I~I~, I~:.~is~i I'MZHKBEKHHE~
HK3HBHK~NKIXHKHXH~I
~I~iQFiiig~ggif
~~I~ii~if MXlHKRXHXH~HEH i~XHRKHm~H~ZBKIBEHHH~
~i~~i~i i~KXH HBIX3 i~i~I MKHRKEESXH~H
%KHKJERZ&ESH
%IXI IRKHXHRWHK RBHXZKKKWHH
~HKHEEXIH~KSH N!83KREZXH~I
~HHeeHHHH~
~.~.~~e~i~~i.~I~gggXIHRQiiH~~i ii~~a~i.~i i Ni~iig~i~ggif
~~I i~~~~~i, gggggif~~MKHX~ZKEKH~H KEEHHKH~%KQXH'WKH NRBZ3'i I~I~~-KKimHHXH&EKH O I~i~i~i~~: I I~ggQi I I~HCIHHHHB~
I I~~i~i
t~I II I~~I;~lee'~~~I~I KKKBEE~~I~~~~~~.~i~i~~~~~~~~~I~~~~~~~'~~~~t~~t I'1~~~t~~~~I I~~~~~KEEHR fRBEGZX~~~~~I I~~.~~~~I 1 I~~~~~I I I'~te~I~~~~~I~~~i~igmzteme.
~gg~I-I I~.~t]~~i.~i~mRHKZ~tie]
~~I~~KB&X&BR~~BKEIBHBS~
'HKHI KHBX~i.i~~H%BBB&H&~
~HXB&HHKX~
~BKQ~]~i~I I.~[eg I~~i~Nxiiig~i]1~~>>~II.~~I>>~KHK]KEEK~I
~>>]m~i.~ig I-~i.~~t~HX~ZKKEK~H~KK3
~&BKH&&BKH~
EBB&&&&EBB~
~1~1.~~~~~~&KB&&&XX~
.~1~>>.xiii g~~i.~HHKHEH~EKH
.M2EEK EXXON~]~IQQig~>>~.~~i~&H&&HXZI~~~I~~I RKEHKf~]~~'~~+~If I.~]mggggig I~~i~.~~~~1~~~~~>>~~'I~~1~~~~~~~~~t~~~~~~~~~~~~~~~'~'~~~~~~I~'~~~'~t'~~~~~'~~1~~~~'1~~t~'~~~.t.~~~-~~~~~~~~~
0~4 I~I I Ii I~~3.p~~~II I~os o II I~.C~~Wr~II I~II I~WI@Q~'~gP,+44"j:-'<4~(r k c~~~E I II II FIGURE 9-15.FIRE INITIATOR IMPORTANCES 1000 100 Ff Pcql 8 I c3 FXoTS I-I r ioGKr-I 10 QX~ABkI p~gRg FIooABoI~I=I SABA-5 FXo I GP-I~~~~~~0.00 0.01 0.02 0.03 0.04 0.05 0.06 0.07 0.08 0.09 0.10 0.11 0.12 0.13 0.14 0.15 0.16 0.17 0.18 0.19 0.20 F-V FIGURE 9-16.HUMAN ERROR IMPORTANCES 28 26~I-5(I I=PCS H2 22 20 18 16 14 12 10 8~4-Li 3 u-cu-d~X.Vl)Q=0~AFHFD5AF4/X
~P'5 I~PP PC Ph/fZ.~~10~i gcf{FPPLock F5HFDfZ.EC~>
-F-V (x 1E-3)100 1000 FIGURE 9-17.TEST AND MAINTENANCE IMPORTANCES 10.ApHpLf PAFN pFTgoY phF w.ccHFLo'l&g
~PFHF~AFW Q'AFISFI SAFWB , gHTNooocc 8 0'0 pCfg~~~'(g y AFTNNAFS6 6.AFTHmyt=.HB
-';-.-..=,:+FTH CPAFWA)P4 C><-?c>~<S.CV'THGHP~Pp, AFT4sAFs&B PFTHGAFSGA,1AFTgHAFScrA 0.00 0.01 0.02 0.03 0.04 0.05 0.06..0.07 0.08 0.09 0.10 0.11 0.12 0.13 0.14 0.15 0.16 F-V FIGURE 9-18.MODELING ASSUMPTION IMPORTANCES 12 10>>~~~~~a~~~oooo~Fs I]Fp gR IAQ~q 5 gi~>0l~~FAN@-a-z'ApzvA 0.00 0.05 0.10 F-V 0.15 0.25 FlGURE 9-19.SYSTEM IMPORTANCES
'I0000.Ac'FSW AFH 1000~RC 100.WAc GSFA5 SAF'I CCW 10.gV MFw.CVC5 10 F-V (x 1E-3)100 1000 FlGURE 9-20.COMPONENT lMPORTANCES 10000 TLCCFBATWS 1000 cd&eb A f+1 0~V 0.TLCCF8PKK,F ACHHMKolD.SACS>(s(XYA 100 10~~AF~.bFCCAFblSTR.
~FCC PH.m,hFCCF'~ISA,~F4 o~qO 0~Q, 6++~~~~C~~T+~~lC OQ46P6AT5cxg.
~Hg&QIH J.pg~~g~g W~F'o~lA, gc~vvcnsi sW AFHHGAFuJF'l7 gCRZTDc'~Iso
~Af-MNoYPAFQ.P6 D6FTScXy.gC,HVD~GtC Q 0.00 0.01 0.02 0.03 0.04 0.05 0.06 0.07 0.08 0.09 0.10 0.11 0.12 0.13 F-V e
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 11-1 1 1.0
SUMMARY
AND CONCLUSION 11.6 Internal Fire Summary The final calculated CDF due to internal fires for Ginna Station is 3.338E-05/yr.
Figure 11-4 illustrates how each location contributes to this value.Over 80%of the contribution arises from three locations:
(1)Control Building (42.4%), (2)Turbine Building (25.5%), and (3)Auxiliary Building (12.2%).Fires in these locations and significant human errors and systems are described below.Control Buildin The Control Building includes the Control Room, Battery Rooms, Relay Room, and Air Handling Room.Section 9.6.1 discussed the dominant scenarios arising from fires in the Control and Battery Rooms.When all possible Control Room fire scenarios are considered, the total contribution to the fire CDF for the Control Room becomes 23.8%.The largest single contribution (19.8%)arises from ignition of a fire in the Control Room's main control board and any two electrical cabinets that subsequently requires Control Room evacuation due to a significant loss of instrumentation and control.When all possible Battery Room fire scenarios are considered, the total contribution to the fire CDF for the Battery Room becomes 11.8%.The largest single contribution (6.8%)arises from ignition of a fire in Battery Room A.When all possible Relay Room fire scenarios are considered, the total contribution to the fire CDF for the Relay Room becomes 6.4%.The largest single contribution (3.0%)arises from ignition of a fire in any of the Relay Room electrical cabinets, assumed to damage all associated cables and equipment and necessitate Control Room evacuation.
The contribution from the Air Handling Room fire scenarios is minimal (0.4%).Turbine Buildin The Turbine Building contains three levels-Basement, Mezzanine, and Operating Levels.Section 9.6.1.2 discussed the dominant scenarios arising from fires at the Basement and Mezzanine Levels.When all possible Turbine Building fire scenarios are considered, the tofal contribution to the CDF for the Turbine Building becomes 25.5%, with 13.8%arising from fires on the Mezzanine Level and 11.7%from fires on the Basement Level.There is essentially no contribution from fires on the Operating Level.The largest single contributions arise from ignition of a fire in 4160V Bus 11A/12A or 11B/12B at the Mezzanine Level (9.6%)and ignition of a fire in the vicinity of the power supply cables to 480V Buses 14, 16, 17, or 18 at the Basement Level (5.1%).Auxilia Buildin The Auxiliary Building contains three levels-Basement, Mezzanine, and Operating Levels.When all possible Auxiliary Building fire scenarios are considered, the total contribution to the CDF for the Auxiliary Building becomes 12.2%, with 5.7%arising from fires on the Basement Level, 3.6%arising from fires on the Mezzanine Level, and 2.9%from fires on the Operating Level.The largest single contribution from a Basement Level fire (3.0%)arises from ignition of a fire in an electrical cabinet in the vicinity of the Safety Injection (SI)pumps, disabling all three SI pumps.The largest single contribution from a Mezzanine Level fire (2.2%)arises from ignition of a fire in cables which 0
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 11-2 interface with the Cable Tunnel, all of which are assumed to be vital.The largest single contribution from an Operating Level fire (2.8%)arises from ignition of a fire in components located near Component Cooling Water (CCW)or Reactor Makeup Water (RMW)equipment, disabling both CCW pumps and the RMW equipment.
Human Errors As discussed in Section 9.6.3.2, the human errors contributing the most to the fire CDF are the following (contributions included in parentheses):
C.d.e.f.Failure to employ alternate AFW/SG instrumentation after Control Room indication has been lost (13.1%)Failure to align TSC DC power supply to Battery B for the TDAFW pump, per the attachments to the ER-FIRE Procedures (3.6%)Failure to correctly align Standby AFW (SAFW)(3.0%)Failure to locally operate PORV 430, per the attachments to the ER-FIRE Procedures (2.2%)Failure to use city fire water for SAFW, per Procedure ER-AFW.1 (2.2%)Failure to locally open discharge MOV 3996 from and steam supply MOV 3505A to the TDAFW Pump, per the attachments to the ER-FIRE Procedures (2.2%).All but action[d]are directly tied to operation of AFW or SAFW.~Sstems As discussed in Section 9.6.3.5, the systems contributing the most to the fire CDF are: (1)Fire Service Water (FSW)(58.7%), (2)AC Power (52.4%), and (3)AFW (37.1%).Each of these three systems also had the potential to increase the fire CDF by a factor>2500 if all equipment associated with the system were assumed to be failed (Risk Achievement Worth).Two of these (FSW and AFW)are front-line systems which serve either to mitigate the fire or reduce the likelihood of resulting core damage.The third (AC Power)is a support system which provides required electric power to these and other critical front-line systems.1 1.6.1 Unique and Important Safety Features The internal events PSA identified three attributes that helped to reduce the calculated CDF at Ginna Station: a.Standby Auxiliary Feedwater (SAP W)System;b.Limited requirements for ventilation due to"open" building design;c.Service Water (SW)System design (i.e., common header for all four SW pumps).As shown in Section 9.6.3.5, both the SAF W and SW systems are considered of high importance with respect to the fire CDF.SAFW serves as a backup to normal AFW to provide decay heat removal, and is located in a separate building.This design attribution was shown to be very important with respect to fire mitigation due to the potential of a fire to fail all three AFW pumps located in the Intermediate Building.SW is a GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 11-3 support system which provides required component cooling to critical front-line systems.Although all four SW pumps are located in a common area of the Screenhouse, no credible fire scenario was identified that would disable more than two SW pumps because: (1)no intervening combustibles are installed between the SW pumps (only the pump motors are present on this floor;no cables are present);(2)the SW pumps are installed with a centerline separation of eight feet;and (3)only one fixed combustible (a diesel-driven fire pump)is installed within 20 feet of the pumps.Furthermore, Ginna Station can shutdown without SW for non-LOCA scenarios and has procedures in place to do so.Basically, the plant can utilize the city water supply to plant hydrants to cool the DGs and provide a suction source to SAFW.The ability to perform these actions was identified as being of high risk-significance.
The design of the SW system utilizing a single header was not a significant consideration for fire-related risk.The lack of a need for ventilation is based on the limited use of compartments or rooms to protect and separate various equipment trains.This, in turn, created fire issues since multiple trains could be affected by the same fire.However, location-specific suppression systems help to reduce the likelihood of a fire growing large enough to affect multiple trains.In the end, no specific vulnerability was discovered with respect to this"open" design.1 1.6.2 Vulnerabilities One of the major objectives of Generic Letter 88-20 (Ref.7)was to identify potential plant vulnerabilities.
Using the definition of vulnerability provided in the internal events PSA (Section 11.0), no items were identified as vulnerable due to the effects of fire.However, the PSA did identify a fire scenario in the DG B Vault (fire zone EDG1B-O), located beneath the DG B Room, in which both trains of AC electric power could be affected.Basically, a worst-case fire could fail the B electrical train (Buses 16 and 17)and fail offsite power and all control power to Bus 18 of the A electrical train (DG A would still remain available).
This, in turn, would result in the loss of all SW.While the scenario was not risk-significant due to the low ignition frequency of a fire in this location and the available plant procedures to handle a loss of SW, ACTION Report 99-948 was generated to evaluate the scenario.The result of the ACTION Report was to recommend consideration of procedural changes to instruct plant personnel to manually close the required Bus 18 breakers to prevent leaving the plant in a Station Blackout condition.
These procedural changes are being evaluated on the basis of commercial considerations and not as a defined vulnerability.
They are expected to be implemented by November 1999.11.6.3 Changes Made to the Facility Based on the insights obtained from the internal fire evaluation, no changes have been made to or proposed for Ginna Station.
GINNA STATION PSA FIRE IPEEE FINAL REPORT REVISION 1 PAGE 11-4 FIGURE 11K.CONTRIBUTIONS TO FIRE CDF BY LOCATION Intermediate Building 12%Control Building 42.2%Cable Tunnel 0.8%Tech Sup port Center 0.1%Screenhouse 3 1%Containment 43%DG Rooms r~4 6%Transformer Yard 58%Auxiliary Building 12 2%Turbine Building 255