how a reactor works - thinkreliability...fukushima daiichi nuclear power station units 1-3 producing...

14
Fukushima Daiichi Copyright ThinkReliability 1 Cause Mapping Problem Solving • Incident Investigation • Root Cause Analysis • Risk Mitigation March 2016 Angela Griffith, P.E. [email protected] www.thinkreliability.com Office 281-412-7766 Houston, TX Fukushima Daiichi Root Cause Analysis Case Study ® Copyright 2016 ThinkReliability How a Reactor Works Nuclear chain reaction produces heat, which makes steam and turns turbine Chain reaction stopped by inserting control rods Heat continues to be produced by decay of unstable isotopes

Upload: others

Post on 24-Aug-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 1

Cause MappingProblem Solving • Incident Investigation • Root Cause Analysis • Risk Mitigation

March 2016

Angela Griffith, [email protected] 281-412-7766Houston, TX

Fukushima DaiichiRoot Cause Analysis

Case Study

®

Copyright 2016 ThinkReliability

How a Reactor WorksNuclear chain reaction produces heat, which makes steam and turns turbine

Chain reaction stopped by inserting control rods

Heat continues to be produced by decay of unstable isotopes

Page 2: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 2

Levels of containment

First: Fuel pellets & fuel rods

Second: Reactor pressure vessel & primary system

Third: Reactor building/ components

PRIMARY:

SECONDARY:

Reactor CoolingNormal cooling system: pumps driven by electric motors

Auxiliary cooling system: Unit 1: Isolation condenser (large tank of water)Units 2-6: Reactor core isolation cooling (RCIC) system powered by steam/ battery

Emergency core cooling system: seawater pumps

Page 3: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 3

Power Supply

External power from grid

Backup power from diesel generators

Emergency power from batteries

Timeline – Day 1 (March 11, 2011)

14:46 Earthquake magnitude 9.0

- Damaged equipment causes loss of all off-site electrical power

- Reactors shut down automatically

- Diesel generators start up automatically in all 6 units

Page 4: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 4

Timeline – Day 1

15:17 Unit 1 isolation condenser manually started

Units 2-3 pressure limited by automatic safety relief valves

14:50 Units 2-3 RCIC manually activated

Unit 1 isolation condenser manually shut down due to pressure/ temperature decrease (consistent w/ procedure)

Timeline – Day 115:41 Tsunami (height at plant ~50’)

- Seawater pumps destroyed

- Loss of power from ALL diesel generators for units 1-5

- damaged generators

- damaged electrical dist. sys.

- Unit 1 batteries flooded

Page 5: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 5

Timeline – Day 2 (March 12)15:36 Hydrogen explosion at unit 1

11:01 Hydrogen explosion at unit 3

Timeline – Day 4 (March 14)

Timeline – Day 5 (March 15)

6:00 Hydrogen explosion in unit 4

6:14 Hydrogen explosion at unit 2

Timeline – Day 8 (March 18)

Incident elevated to level 5 of 7 on IAEA scale (later raised to 7)

Offsite power restored to units 1& 2

Timeline – Day 10 (March 20)

Offsite power restored to units 3 & 4

Timeline – Day 16 (March 26)

Page 6: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 6

Step 1. Define the ProblemWhat Problem(s)

When Date

Different, unusual, unique

Where Unit, area, equipment

Task being performed

Impact to the Goals

Worker Safety

Environmental

Regulatory

Production/ Schedule

Labor/ Time

This incident

Frequency

Public Safety

Customer Service

Earthquake, tsunami, hydrogen explosionsSee timeline9.0 magnitude earthquake, 50’ tsunamiFukushima Daiichi nuclear power stationUnits 1-3 producing power; 4-6 shut down

No radiological health effects~1,600 deaths attributed to evacuation2 operators drowned; 16 injuredRelease of 940,000 terraBq radiation~150,000 evacuated (20-30 km evac zone)Rolling blackoutsIAEA level 7 disasterComplete loss of power from nuclear plantsResponse, cleanup, investigation

Only one other level 7 disaster in history

$60B

$200B$15B

$>275B

Public Safety Goal Impacted

150,000 evacuated

Release of radiation to

environment

Step 2. Analysis (Cause Map)

Loss of containment

~1,600 deaths

Page 7: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 7

First: Fuel pellets & fuel rods

Second: Reactor pressure vessel & primary system

Third: Reactor building/ components

PRIMARY:

SECONDARY:

Levels of containment

Cause Mapping®

Release of radiation to

environment

Loss of containment (structures)

Hydrogen explosions

Buildup of hydrogen

Damage to fuel

Loss of containment

(fuel)

AND

Damage to fuelIncreased heat of reactor fuel

Page 8: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 8

Cause Mapping®

Increased heat of reactor fuel

Residual (decay) heat

Consequence of normal plant

operation

Lack of cooling for reactor

AND

Reactor CoolingNormal cooling system: pumps driven by electric motors

Auxiliary cooling system: Unit 1: Isolation condenser (large tank of water)Units 2-6: Reactor core isolation cooling (RCIC) system powered by steam/ battery

Emergency core cooling system: seawater pumps

Page 9: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 9

Power Supply

External power from grid

Backup power from diesel generators

Emergency power from batteries

Cause Mapping®

Lack of cooling for reactor

Normal cooling lost

Off-site power lost

Damage from earthquake

Auxiliary cooling lost

Diesel generators shut

down

Flooded by tsunami

AND

Loss of batteries

Limited life

AND

Emergency cooling lost

Off-site power lost

Damage from earthquake

AND

Seawater pumps not

working

Flooded by tsunami

AND

Page 10: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 10

From the National Diet of Japan Report

the “accident at the Fukushima Daiichi Nuclear Power Plant cannot be regarded as a natural disaster. It was a profoundly manmade disaster – that could and should have been foreseen and prevented.”

From the IAEA Report

“A major factor that contributed to the accident was the widespread assumption in Japan that its nuclear power plants were so safe that an accident of this magnitude was simply unthinkable.”

Page 11: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 11

Design Basis Accidents

Accident scenarios designed to represent the most severe credible accident

Fukushima design basis earthquake = 8.0

Design basis tsunami = 5.7 meters

ANS Report

“A risk-informed regulatory approach would have identified the existing design bases as deficient. Although addressing low-probability events is very difficult, a risk-informed treatment for natural-phenomenon hazards is necessary.”

Page 12: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 12

Lessons Learned

“A severe event anywhere in an industry has severe consequences everywhere in that industry.”

– Dr. William Corcoran, Ph.D., P.E.

Lessons Learned

Assessment of natural hazards:- Sufficiently conservative- Re-evaluated periodically- Must consider potential for

occurrence in combination- Use national & international

experience

Page 13: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 13

Lessons Learned

Defense in depth:- Remains valid- Must be strengthened at all levels- Focus on prevention AND

mitigation- Instrumentation/ control systems

MUST remain operable

Lessons Learned

Beyond Design Basis Accidents:- Cooling systems must function- Containment must be reliable- Management provisions must be

comprehensive, well-designed, and up to date

- Include training, exercises & drills

Page 14: How a Reactor Works - ThinkReliability...Fukushima Daiichi nuclear power station Units 1-3 producing power; 4-6 shut down No radiological health effects ~1,600 deaths attributed to

Fukushima Daiichi

Copyright ThinkReliability 14

Current Status

Temp & radioactive release stable (cold shutdown)

Containment:Equipment to install ice wall in placeInflow of water limited to 150 tons/ day770 m wall between facility & ocean

Removal:~10% of cleanup work doneRobots searching site failing due to exposure

Decontamination:10M yd3 soil & debris removedOutdoor radiation <2mSv/year

Cause MappingProblem Solving • Incident Investigation • Root Cause Analysis • Risk Mitigation

March 2016

Angela Griffith, [email protected] 281-412-7766Houston, TX

Fukushima DaiichiRoot Cause Analysis

Case Study

®

Copyright 2016 ThinkReliability