Document: NUREG-0800
Document ID: 1d92e471-c01d-4c3b-8f23-e871a9de6e62
Document Type: srp
Title: describes the general procedures to be followed in reviewing any instrumentation and control
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML0525/ML052500505.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7.1
CFR Part: 
CFR Title: 

Content:
w methods for each topic. Major design considerations that should be emphasized in the review of I&C for the safe shutdown systems are identified below. Shutdown remote from the control room is not an event analyzed in the accident analysis in Chapter 15 of the SAR. 1 Specific scenarios have not been specified upon which the adequacy of shutdown capability remote from the control room is evaluated. However, smoke due to a fire in the control room has long been recognized as the type of event which could force the evacuation of the control room and result in a need to effect safe shutdown remote from the control room. Branch Technical Position CMEB 9.5.-1 establishes the bases for safe shutdown with respect to fire protection. Specifically, fire damage limits as they impact on safe shutdown have been established therein. These limits do not require consideration of an additional random single failure in the evaluation of the capability to safely shut down as a consequence to fires. The evaluation of conformance to the BTP is addressed in SRP Section 9.5.1. Therefore, the application of the single-failure criterion to remote shutdown is only applicable for other events which could cause the control room to become uninhabitable. These events would not result in consequential damage or unavailability of systems required for safe shutdown. Rev. 4. — June 1997 SRP 7.4-5 • The review confirms that I&C required for safe shutdown (where appropriate based on their safety function): – Provides the required redundancy, – Meets the single-failure criterion, – Provides the required capacity and reliability to perform intended safety functions on demand, – Provides the capability to function during and after design-basis events such as earthquakes and anticipated operational occurrences, – Provides the capability to operate with onsite electric power available (assuming offsite power is not available) and with offsite electric power available (assuming onsite power