Document: NUREG-0800
Document ID: fe8ec6c2-e960-404c-854f-55c77bde1672
Document Type: srp
Title: NUREG-0800
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML2400/ML24005A077.pdf
Revision Date: 2024-05
Chapter: 7
Section ID: 7
CFR Part: 
CFR Title: 

Content:
against vulnerabilities include, but are not limited to, the following:  The applicant eliminated CCF vulnerabilities from further consideration through any of the methods below, either alone or in combination: – using diversity within the DI&C system (section B.3.1.1) – using testing (section B.3.1.2) – using alternative approaches (section B.3.1.3) – for SSCs of lower or lowest safety significance, using a qualitative assessment and failure analysis (section B.3.1.4)  The applicant mitigated consequences of CCF vulnerabilities using one or more of the measures in section B.3.2.  The applicant analyzed consequences of CCF vulnerabilities and found them to remain within the acceptance criteria defined in the FSAR or the LAR for the limiting events applicable to the proposed DI&C system (section B.3.3).  The applicant assessed the risk of CCF vulnerabilities using a risk-informed approach and applied design techniques, prevention measures, or mitigation measures commensurate with the risk significance of the postulated CCF (section B.3.4). If the applicant used multiple strategies to address CCF vulnerabilities in different portions of a system, then the reviewer should evaluate the applicant’s analysis of the CCF vulnerabilities in each portion and identify how each method was applied. For example, in one portion of the system, the applicant might eliminate a CCF from further consideration, while in another portion, the applicant might mitigate the CCF vulnerability using diverse I&C systems. Spurious Operation as a Result of Common-Cause Failure The evaluation of potential spurious operations is an important part of the overall D3 assessment for a proposed DI&C system, to ensure that spurious operations do not lead to events with unacceptable consequences. BTP 7-19-18 Revision 9 — May 2024 Although a spurious operation is not always anticipated, it can be detected, because this type of failure is normally self-announcing through