Document: NUREG-0800
Document ID: cd35e91a-3d44-430c-9102-2c8a74c133ab
Document Type: srp
Title: SAFE SHUTDOWN SYSTEMS
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1602/ML16020A086.pdf
Revision Date: 2023-06
Chapter: 7
Section ID: 7.4
CFR Part: 
CFR Title: 

Content:
See SRP Appendix 7.1-B, Subsections 4.6 and 4.7 and SRP Appendix 7.1-C, Subsections 5.6 and 6.3. B. Use of digital systems, - See SRP Appendix 7.0-A, “Review Process for Digital Instrumentation and Control Systems,” and SRP Appendix 7.1-D. C. Periodic testing - See SRP Appendix 7.1-B, Subsection 4.10 and SRP Appendix 7.1-C, Subsections 5.7 and 6.5. D. Remote shutdown capability1 - Plant designs should provide for control in locations removed from the main control room that may be used for manual control and alignment of safe shutdown system equipment needed to achieve 1Shutdown remote from the control room is not an event analyzed in the accident analysis in Chapter 15 of the SAR. Specific scenarios have not been specified upon which the adequacy of shutdown capability remote from the control room is evaluated. However, smoke due to a fire in the control room has long been recognized as the type of event that could force the evacuation of the control room and result in a need to shut down remote from the control room. Regulatory Guide 1.189, “Fire Protection for Operating Nuclear Power Plants,” establishes the bases for safe shutdown with respect to fire protection. Specifically, fire damage limits as they impact on safe shutdown have been established therein. These limits do not require consideration of an additional, random, single failure in the evaluation of the capability to safely shut down as a consequence of fires. The evaluation of conformance to Regulatory Guide 1.189 is addressed in SRP Section 9.5.1. Therefore, the application of the single-failure criterion to remote shutdown is only applicable only to for other events that could cause the control room to become uninhabitable. These events would not result in consequential damage or unavailability of systems required for safe shutdown. 7.4-7 Revision 6 – August 2016 and maintain hot and cold shutdown. This control equipment should be capable of operating independently of (i.e., without