Resolution of Generic Safety Issues: Item A-47: Safety Implications of Control Systems (Rev. 1) ( NUREG-0933, Main Report with Supplements 1–35 )

DESCRIPTION

Nuclear power plant instrumentation and control systems are composed of safety-related protection systems and non-safety-related control systems. The safety-related protection systems are designed to satisfy the General Design Criteria identified in Appendix A to 10 CFR 50. They are used in part to trip the reactor when certain plant parameters exceed allowable limits and to protect the core from overheating by actuating emergency core cooling systems. Non-safety-related control systems are used to maintain the plant within prescribed pressure and temperature limits during shutdown, startup, and normal power operation. The non-safety-related control systems are not relied on to perform any safety functions during or following postulated transients or accidents. They are used, however, to control plant processes that could have an impact on plant dynamics. This issue was originally identified in NUREG-0371² and was later determined to be a USI in NUREG-0705.⁴⁴

CONCLUSION

The purpose of USI A-47 was to perform an in-depth review of the non-safety-related control systems and to assess the effect of control system failures on plant safety. To this end, tasks were established to identify potential control system failures that, either singly or in selected combinations, could cause overpressure, overcooling, overheating, overfilling, or reactivity events. The staff concluded from its investigations that certain actions should be taken to enhance safety in LWRs and recommended that plants: (1) provide systems to protect against reactor vessel/steam generator overfill events and to prevent steam generator dryout; (2) include in their plant procedures and their Technical Specifications provisions to periodically verify the operability of these systems; and (3) modify selected emergency procedures to ensure safe plant shutdown following a small-break LOCA. Most plants already have substantial design protection against control system failures. The recommended safety improvements would apply to those plants for which additional or enhanced protection is warranted.

The staff's technical findings were published in NUREG-1217¹²⁴⁷; the regulatory analysis associated with the resolution of this issue was published in NUREG-1218.¹²⁴⁸ The Commission was informed of the staff's resolution in SECY-89-255¹²⁴⁹ and Generic Letter 89-19¹²⁵⁰ was later issued to licensees. Thus, this issue was RESOLVED and new requirements were established.¹²⁵¹

REFERENCES

0002. NUREG-0371, "Task Action Plans for Generic Activities (Category A)," U.S. Nuclear Regulatory Commission, November 1978. 0044. NUREG-0705, "Identification of New Unresolved Safety Issues Relating to Nuclear Power Plant Stations," U.S. Nuclear Regulatory Commission, March 1981. 1247. NUREG-1217, "Evaluation of Safety Implications of Control Systems in LWR Nuclear Power Plants," U.S. Nuclear Regulatory Commission, June 1989. 1248. NUREG-1218, "Regulatory Analysis for Resolution of USI A-47," U.S. Nuclear Regulatory Commission, July 1989. 1249. SECY-89-255, "Unresolved Safety Issue A-47, `Safety Implications of Control Systems,'" U.S. Nuclear Regulatory Commission, August 23, 1989. [8908250318] 1250. Letter to All Licensees of Operating Reactors, Applicants for Operating Licenses and Holders of Construction Permits for Light Water Reactor Nuclear Power Plants from U.S. Nuclear Regulatory Commission, "Request for Action Related to Resolution of Unresolved Safety Issue A-47, `Safety Implication of Control Systems in LWR Nuclear Power Plants' Pursuant to 10 CFR 50.54(f) - Generic Letter 89-19,'" September 20, 1989. [8909200223] 1251. Federal Register Notice 54 FR 36922, "Issuance and Availability of NUREG-1217, `Evaluation of Safety Implications of Control Systems in LWR Nuclear Power Plants—Technical Findings Related to USI A-47,' and NUREG-1218, `Regulatory Analysis for Resolution of USI A-47,'" September 5, 1989.