Strategies and criteria for risk-based configuration control

A configuration, as used here, is a set of component operability or statuses that define the state of a nuclear power plant. Risk-based configuration control is the management of component configurations using a risk perspective to control risk and assure safety. If the component configurations that have high risk implications do not occur then the risk from the operation of nuclear power plants would be minimal. The control of component configurations, i.e., the management of component statuses, so that the risk from components being unavailable is minimized, becomes difficult because the status of a standby safety system component is often not apparent unless it is tested. In this paper, we discuss the strategies and criteria for risk-based configuration control in nuclear power plants. In developing these strategies and criteria, the primary objective is to obtain more direct risk control but the added benefit is the effective use of plant resources. Implementation of such approaches can result in replacement/modification of parts of Technical Specifications. Specifically, the risk impact or safety impact of a configuration depends upon four factors: (1) The configuration components which are simultaneously down (i.e., inoperable); (2) the backup components which are known to be up (i.e., operable); (3) the duration of time the configuration exists (the outage time); and (4) the frequency at which the configuration occurs. Risk-based configuration control involves managing these factors using risk analyses and risk insights. In this paper, we discuss each of the factors and illustrate how they can be controlled. The information and the tools needed in implementing configuration control are also discussed. The risk-based calculation requirements in achieving the control are also delineated. 4 refs., 4 figs., 1 tab