Regulatory Guide 1.153

(Draft Issued as DG-1042) Revision 1, Criteria for Safety Systems

ML003740022
Person / Time
Issue date:	06/30/1996
From:	Office of Nuclear Regulatory Research
To:
References
RG-1.153 Rev 1
Download: ML003740022 (4)

U.S. NUCLEAR REGULATORY COMMISSION REGULATORYRevision I June 1996 GUIDEOFFICE OF NUCLEAR REGULATORY RESEARCH REGULATORY GUIDE 1.153 (Draft was issued as DG-1042) CRITERIA FOR SAFETY SYSTEMSA. INTRODUCTION Appendix A, "General Design Criteria for Nuclear Power Plants," to 10 CFR Part 50, "Domestic Licensing of Production and Utilization Facilities," contains, in part, requirements for the design, reliability, qualification, and testability of safety systems. 1 The following General Design Criteria2 are applicable to the power, instrumentation, and control portions of nuclear power plant safety system Criterion 2, "Design Bases for Protection Against Natural Phenomena," requires systems important to safety to be designed to withstand the effects of natural phenomena without loss of capability to perform their safety function Criterion 4, "Environmental and Dynamic Effects Design Bases," requires systems important to safety to be designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accident IThe term "safety systems" is synonymous with "safety-related" systems. The general design criteria cover structures, systems, and components "important to safety." The scope of this guide is, however, limited to "safety systems," which are a subset of "systems important to safety." 2For the full text of the applicable General Design Criteria, see Appendix A to 10 CFR Part 50.USNRC REGULATORY GUIDES Regulatory Guides are issued to describe and make available to the public such information as methods acceptable to the NRC staff for implementIng specific parts of the Commission's regulations, techniques used by the staff In evaluating specific problems or postulated accidents, and data needed by the NRC staff in Its review of applications for permits and licenses. Regulatory guides are not substitutes for regulations, and compliance with them Is not required. Methods and solutions different from those set out in the guides will be acceptable if they provide a basis for the findings requisite to the issuance or continuance of a permit or license by the Commissio This guide was Issued after consideration of comments received from the public. Comments and suggestions for Improvements in these guides are encouraged at all times, and guides will be revised, as appropriate, to accommodate comments and to reflect new information or experience.* Criterion 5, "Sharing of Structures, Systems, and Components," requires that certain structures, systems, and components important to safety not be shared among nuclear power units unless it can be shown that such sharing will not significantly impair their ability to perform their safety function "* Criterion 10, "Reactor Design," requires protection systems to be designed with margins to ensure that fuel design limits are not exceede "* Criterion 12, "Suppression of Reactor Power Oscillations," requires protection systems to be designed to prevent or detect and suppress power oscillations that can result in conditions exceeding fuel design limit

• Criterion 13, "Instrumentation and Control," requires that instrumentation be provided to monitor variables and systems over their anticipated ranges for normal operation, anticipated operational occurrences, and accident conditions to assure adequate safety. Appropriate controls must be provided to maintain variables and systems within prescribed operating range Criterion 15, "Reactor Coolant System Design," requires that the reactor coolant system and associated auxiliary, control, and protection systems be designed with sufficient margin to ensure that the design conditions of the reactor coolant pressure boundary are not exceeded during anyWritten comments may be submitted to the Rules Review and Directives Branch, DFIPS, ADM, U. S, Nuclear Regulatory Commission, Washington, DC 20555-000 The guides are issued in the following ten broad divisions: 1. Power Reactors 6. Products 2, Research and Test Reactors 7. Transportation 3. Fuels and Materials Facilities 8. Occupational Health 4. Environmental and Siting 9. Antitrust and Financial Review 5. Materials and Plant Protection 10. General Single copies of regulatory guides may be obtained free of charge by writing the Office of Administration, Attention: Distribution and Services Section, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; or by fax at (301)415-226 Issued guides may also be purchased from the National Technical Information Service on a standing order basis. Details on this service may be obtained by writing NTIS, 5285 Port Royal Road, Springfield, VA 2216 condition of normal operation, including anticipated operational occurrence

• Criterion 17, "Electric Power Systems," requires electric power systems to be provided to permit functioning of structures, systems, and components important to safet Criterion 18, "Inspection and Testing of Electric Power Systems," requires that electric power systems important to safety be designed to permit periodic inspection and testing of such systems for operability and functional performanc "* Criterion 20, "Protection System Functions," requires a protection system to sense accident conditions and initiate operation of systems important to safety to ensure that acceptable fuel design limits are not exceede "* Criterion 21, "Protection System Reliability and Testability," requires the protection system to be designed with high functional reliability and inservice testability. This criterion also requires redundancy and independence sufficient to provide protection against single failures and loss of redundancy, except where justified, in the event equipment is removed for service. On-line testing is require Criterion 22, "Protection System Independence," requires that the effects of natural phenomena, normal operation, maintenance, testing, and postulated accident conditions on redundant channels not result in loss of the protection function. Functional diversity or diversity in component design and principles of operation must be used to the extent practical to prevent loss of the protection functio " Criterion 23, "Protection System Failure Modes," requires that the protection system be designed to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of energy, or postulated adverse environments are experience "* Criterion 24, "Separation of Protection and Control Systems," requires separation of protection and control systems to the extent that failure of any single control system component or channel, or failure or removal from service of any single protection system component or channel that is common to the control and protection systems, leaves intact a system satisfying all reliability, redundancy, and independence requirements of the protection system. Interconnection of the protection and control systems is to be limited to ensure that safety is not significantly impaired."* Criterion 25, "Protection System Requirements for Reactivity Control Malfunctions," requires that the protection system be designed to ensure that specified acceptable fuel design limits will not be exceeded for any single malfunction of the reactivity control system "* Criterion 29, "Protection Against Anticipated Operational Occurrences," requires that protection and reactivity control systems be designed to be highly reliable in accomplishing their safety functions in the event of anticipated operational occurrence "* Criteria 34, "Residual Heat Removal"; 35, "Emergency Core Cooling"; 38, "Containment Heat Removal"; 41, "Containment Atmosphere Cleanup"; and 44, "Cooling Water," require suitable redundancy, interconnections, and isolation capabilities to ensure that, for onsite and for offsite electric power system operation, the safety function can be accomplishe "* Criteria 37, "Testing of Emergency Core Cooling System"; 40, "Testing of Containment Heat Removal System"; 43, "Testing of Containment Atmosphere Cleanup Systems"; and 46, "Testing of Cooling Water System," require designs to permit periodic functional testing of these systems, the operability and performance of the active components of the system, and the operability of each of these systems as a whole, including the full operational sequence that brings each system into operatio "* Criterion 54, "Piping Systems Penetrating Containment," requires redundancy, reliability, and performance capabilities that reflect the importance to safety of isolating these systems. Capability for periodic testing is also require In addition, 10 CFR 50.55a, "Codes and Standards," requires in paragraph (h) that protection systems meet the requirements set forth in IEEE Std 2791971 (ANSI N42.7-1972), "Criteria for Protection Systems for Nuclear Power Generating Stations."3 Further, 10 CFR 50.49, "Environmental Qualification of Electric Equipment Important to Safety for Nuclear Power Plants," requires that a program be established for qualifying safety-related electric equipment, nonsafety-related electric equipment whose failure under postulated environmental conditions could prevent satisfactory accomplishment of its safety functions, and certain post-accident monitoring equipmen This guide describes a method acceptable to the NRC staff for complying with the Commission's regula3Copies may be obtained from the Institute of Electrical and Electronics Engineers Service Center, 445 Hoes Lane, Piscataway, NJ 08855.1.153-2 tions with respect to the design, reliability, qualification, and testability of the power, instrumentation, and control portions of safety systems of nuclear plant The Advisory Committee on Reactor Safeguards has been consulted concerning this guide and has concurred in the regulatory positio The information collections mentioned in this regulatory guide are covered by the requirements of 10 CFR Part 50, which were approved by the Office of Management and Budget, approval number 31500011. The NRC may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a currently valid OMB control numbe B. DISCUSSION IEEE Std. 603-1991, "Criteria for Safety Systems for Nuclear Power Generating Stations,"'3 was prepared by the Safety Systems Working Group SC 6.3 of the IEEE Nuclear Power Engineering Committee, and it was approved by the IEEE Standards Board on June 27, 1991. A correction sheet was issued on January 30, 199 IEEE Std. 603-1991 establishes minimum functional and design requirements for the power, instrumentation, and control portions of safety systems for nuclear power plant Section 1.2 of IEEE Std. 603-1991 references IEEE/ANS 7.4.3.2-1982. Revision 1 to Regulatory Guide 1.152, "Criteria for Digital Computers in Safety Systems of Nuclear Power Plants," endorses the 1993 version, IEEE Std. 7-4.3.2-1993, "Standard Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations." Thus, Revision I to Regulatory Guide 1.152 constitutes an acceptable method of meeting the regulatory requirements for digital computer It should be noted that Section 5.8.1 of IEEE St references IEEE Std. 497-1981, "IEEE Standard Criteria for Accident Monitoring Instrumentation for Nuclear Power Generating Stations." In this area, Revision 3 of Regulatory Guide 1.97, "Instrumentation for Light-Water-Cooled Nuclear Power Plants To Assess Plant and Environs Conditions Dur-ing and Following an Accident," provides an acceptable method to meet the regulations for accident monitoring instrumentatio C. REGULATORY POSITION Conformance with the requirements of IEEE St , "Criteria for Safety Systems for Nuclear Power Generating Stations" (including the correction sheet dated January 30, 1995), provides a method acceptable to the NRC staff for satisfying the Commission's regulations with respect to the design, reliability, qualification, and testability of the power, instrumentation, and control portions of the safety systems of nuclear power plant Section 3 of IEEE Std. 603-1991 references several industry codes and standards. If a referenced standard has been incorporated separately into the Commission's regulations, licensees and applicants must comply with that standard as set forth in the regulatio If the referenced standard has been endorsed in a regulatory guide, the standard constitutes a method acceptable to the NRC staff of meeting a regulatory requirement as described in the regulatory guide. If a referenced standard has been neither incorporated into the Commission's regulations nor endorsed in a regulatory guide, licensees and applicants may consider and use the information in the referenced standard if appropriately justified, consistent with current regulatory practic D. IMPLEMENTATION The purpose of this section is to provide information to applicants and licensees regarding the NRC staff's plans for using this guid Except in those cases in which an applicant or licensee proposes an acceptable alternative method for complying with specified portions of the Commission's regulations, the methods described in this guide will be used in the evaluation of submittals in connection with applications for construction permits and operating licenses. It will also be used to evaluate submittals from operating reactor licensees who voluntarily propose to initiate system modifications if there is a clear nexus between the proposed modifications and this guidance.VALUE/IMPACT STATEMENT A draft Value/Impact Statement was published with the draft of this guide, Task DG-1042, when it was published for public comment in November 199 No changes were necessary, so a separate value/impact statement for this final guide has not been prepared. A copy of the draft Value/Impact Statement is available for inspection or copying for a fee in the Commission's Public Document Room at 2120 L Street NW., Washington, DC, under Task DG-1042.1.153-3 FIRST CLASS MAIL POSTAGE AND FEES PAID USNRC PERMIT NO. G-67OFFICIAL BUSINESS PENALTY FOR PRIVATE USE, $300