. OMB No: 3150-0009 NRCB 91-01 UNITED STATES NUCLEAR REGULATORY COMMISSION OFFICE OF NUCLEAR MATERIAL SAFETY AND SAFEGUARDS WASHINGTON, D.C. 20555 October 18, 1991 NRC BULLETIN 91-01: REPORTING LOSS OF CRITICALITY SAFETY CONTROLS Addressees All fuel cycle and uranium fuel research and development licensees. Purpose This bulletin requests that addressees inform the Commission of their criteria and procedures that assure the prompt evaluation and reporting of the degradation of any controlled parameters used to prevent nuclear criticality to licensee management and the immediate reporting to the Commission of any significant degradation of such controls as required by 10 CFR 20.403(a). A written response to this bulletin is required. Background On October 3, 1990, all licensees who possess more than a critical mass quantity of special nuclear material were informed of the need for management attention to the establishment and maintenance of their nuclear criticality safety program (Information Notice No. 90-63, attached). That Notice referred to previous Information Notice No. 89-24, dated March 6, 1989, also on the subject of criticality safety. The Commission needs assurance that proper attention is being addressed to these important criticality concerns. Also, licensees must assure that significant degradation of any controls used to prevent criticality is promptly reported to management, and as required by 10 CFR 20.403(a)(1), to the Commission, to assure that appropriate actions are taken to prevent further system degradation. Description of Circumstances In May 1991, a process upset occurred in the solvent extraction portion of a uranium recycle unit of a fuel manufacturing operation. The process upset caused the accumulation of enriched uranium in favorable geometry tanks in a waste processing area. When these tanks filled, their uranium contents were transferred, in some instances without sample measurement, to an unfavorable geometry tank waste accumulation tank, and then to a second, unfavorable geometry waste treatment tank. Although the upset was observed by operators late on an evening shift, the process was not shut down until around 5:30 the next morning, when measurements indicated high uranium concentrations in the favorable geometry tanks. A high concentration of uranium was measured in the waste treatment tank at 7:00 a.m. 9110180125 . NRCB 91-01 October 18, 1991 Page 2 of 5 Licensee management was made aware of the incident later that morning, and a technical evaluation/recovery team was established. The NRC was notified of the incident around 3:45 p.m. that day. A criticality incident did not occur, but the margin of safety was reduced. The licensee removed the excess uranium from the waste treatment tank over a period of several days using centrifuge techniques. The licensee's investigation team concluded that there were several areas of operational control which were significant contributors to the incident, including: (1) failure to always follow procedures or inadequate procedures; (2) insufficient supervision and/or technical support of operations; (3) lack of adequate overchecks/audits on conformance with criticality safety control requirements; and (4) inadequate records systems. The Commission's investigation is reported in NUREG-1450. Discussion of Safety Significance Because of the above event and knowledge of similar circumstances at other licensed activities, the Commission is concerned that there may be insufficient attention by licensees to the need for internal reporting and prompt evaluation of failures of controlled parameters related to criticality safety. The Commission is also concerned that licensees may not have procedures in place to assure compliance with the requirements under 10 CFR 20.403 to report immediately to the Commission any significant failure of criticality safety controls. As discussed in the appendix to this bulletin, several controls may be used to maintain a controlled parameter for preventing a criticality excursion. If substantial control over a controlled parameter is lost, the event should be reported to the Commission. Following are specific examples of events related to criticality control that should be reported to the Commission immediately: 1. Complete loss of a controlled parameter. 2. Substantial degradation of a controlled parameter. 3. Failure of a controlled parameter previously identified by the Commission or the licensee's criticality safety specialists as requiring reporting upon failure. 4. Determination that a criticality safety analysis was deficient in evaluating actual plant conditions and necessary controlled parameters were not established. . NRCB 91-01 October 18, 1991 Page 3 of 5 5. An unusual event or condition for which the severity and remedy are not readily determined. Reports of such events must be made to the NRC Operation Center, which is staffed 24 hours per day, and to the appropriate Regional Administrator. Some types of events, though not warranting reporting to the Commission, nevertheless merit attention within the licensee's own organization, particularly by the criticality safety specialists. The Commission intends that all events involving degradation of criticality controls be reported for evaluation within the licensee's organization. Since some events which can occur in process systems and their relative importance to criticality safety cannot be determined before the event, criteria are needed in order to make the judgment as to whether the event should be reported to the Commission as required by 10 CFR 20.403(a). Each recipient of this bulletin, therefore, should assure that as to the extent of degradation, licensees are encouraged to report to the Commission. If initial indications of an event do not seem to warrant Commission notification, but further developments prove it to be more serious, the Commission should be immediately notified at that point. Addressees are also reminded that all necessary corrective actions must be taken promptly, regardless of any reporting action. Reports to the Commission do not require that corrective actions be completed prior to reporting. Requested Action Addressees are requested to evaluate their criticality safety criteria and procedures, modify them as appropriate to assure that events involving degradation of controls will be promptly evaluated and reported to licensee management and NRC as appropriate, and provide a description of their criteria and procedures to NRC. In completing this evaluation, licensees should include the following: 1. Based on your current analyses of criticality safety, and any further criticality analyses that may be necessary for this determination, identify and examine each individual controlled parameter whose failure could contribute to a decrease in criticality control. For each individual controlled parameter, determine whether or not degradation of the system of controls would constitute a significant loss of effectiveness. Loss of a single controlled parameter should be considered to have occurred upon total failure or substantial degradation of the control. 2. Any list of methods of control, such as indicated in the appendix, should be considered from the point of view of importance to maintaining its associated controlled parameter. The possibility of combinations of loss of more than one control should be considered; i.e., are some controls likely to fail simultaneously and what is the level of significance of such an occurrence? . NRCB 91-01 October 18, 1991 Page 4 of 5 3. Whenever an event occurs in which criticality safety controls do not function entirely as expected, a management-established reporting system should ensure that proper levels of licensee management will be promptly informed. This reporting system will allow plant and safety management to evaluate the significance of a criticality event precursor and to take appropriate action. Significant loss of control may dictate activation of the Emergency Plan during the evaluation and recovery activities. Reporting Requirements Within 90 days of the receipt of this bulletin, pursuant to 10 CFR 70.22(d), each recipient shall provide the Commission with a statement describing its reporting criteria and management implementation procedures for evaluation and reporting related to loss of criticality safety controls which meet the requirements of 10 CFR 20.403(a). The statement should indicate the means whereby responsible licensee management will be made aware of any relevant failures, the criteria used by licensee management to determine the importance of those failures to criticality safety, and the related reporting levels. The statement should also indicate how the determination will be made that a controlled parameter is sufficiently degraded such that any Emergency Plan procedures will be activated and indicate how the implementation of these procedures for reporting will be documented. Implementing procedures and documentation will be reviewed during NRC inspection. The written reports required above shall be submitted to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, D.C. 20555. In addition, a copy shall be submitted to the appropriate Regional Administrator. The reporting requirements for reports in response to this bulletin are covered by OMB clearance number 3150-0009, which expires May 31, 1994. The estimated average number of burden hours is 80 person hours per licensee response, including those needed to assess the new recommendations, search data sources, gather and analyze the data, and prepare the required letters. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to the Information and Records Management Branch, Division of Information Support Services, Office of Information Resources Management, U.S. Nuclear Regulatory Commission, Washington, DC 20555, and to the Paperwork Reduction Project (3150-0009), Office of Information and Regulatory Affairs, NEOB-3019, Office of Management and Budget, Washington, DC 20503. On November 19, 1991, the Commission will sponsor a workshop concerning reporting of criticality safety events. The location for the workshop will be announced as soon as arrangements can be made. . NRCB 91-01 October 18, 1991 Page 5 of 5 If you have questions about this matter, please contact one of the technical contacts listed below. Richard E. Cunningham, Director Division of Industrial and Medical Nuclear Safety Office of Nuclear Material Safety and Safeguards Technical contacts: George H. Bidinger, NMSS (301) 492-0683 Robert E. Wilson, NMSS (301) 492-0126 A. Thomas Clark, NMSS (301) 492-3424 Attachments: 1. Information Notice No. 90-63, "Management Attention to the Establishment and Maintenance of a Nuclear Criticality Safety Program" 2. Appendix - Principals of Criticality Safety 3. List of Recently Issued NMSS Bulletins 4. List of Recently Issued NRC Bulletins . Attachment 2 NRCB 91-01 October 18, 1991 Page 1 of 1 APPENDIX PRINCIPALS OF CRITICALITY SAFETY The basic tenet of nuclear criticality prevention is that at least two, unlikely, independent, and concurrent changes in process conditions must occur before a criticality accident is possible. This is the so-called "double contingency" principle in ANSI/ANS-8.1-1983. Controls or systems of controls are used to limit process variables in order to maintain safe operating conditions. A list of these typical controls is presented below. The analysis for criticality safety should identify the multiple scenarios by which nuclear criticality can occur. Then controlled parameters and their supporting methods of control must be established to prevent each scenario. A defense-in-depth of two or more controlled parameters is necessary to make criticality unlikely, thereby satisfying the double contingency principle. If a controlled parameter is lost or is substantially degraded, the special nuclear material could threaten to cause exposures to radiation or release of radioactive materials as described in 10 CFR Part 20.403(a) and should be reported immediately to the Commission. Several controls may be involved in maintaining a controlled parameter. For example, a large tank used to receive process solution containing a fissile material might use Raschig rings for one control parameter and concentration limits for another. Both parameters may have several related controls to assure that their loss is highly unlikely. The Raschig rings may be inspected before and after installation, both as to boron content and volume fill level. There may be several controls on concentration, such as initial feed preparation, in-line monitors, and sampling and analysis. The product of all the controls combined provide the "highly unlikely" character of the failure of the controlled parameters. STANDARD CONTROLLED PARAMETERS AND TYPICAL SUPPORTING CONTROLS Controlled Parameters Typical Supporting Controls � Favorable Geometry - Configuration control - Periodic examination (Quality Assurance) - Spacing � Use of Poisons - Configuration control - Neutron absorption measurement - Periodic examination and analysis - Concentration � Mass - Batch size weighing, sampling and analysis - Volume and density measurements � Concentration - Dual sampling and dual analysis - On-line monitoring � Automatic Engineered - Temperature Systems - Pressure - Moisture .
Page Last Reviewed/Updated Thursday, March 29, 2012