5.1General description
IAEA Safety Guide NS-G-1.5 [29] includes the combination of human induced events within the group of the man-made external hazards as a result of a common initiating event, as a product of events (like, e.g. explosion with release of hazardous gases, fire and smoke generation, aircraft crash induced missiles, vibrations or explosions of aircraft fuel). Domino effects shall also be considered (like, e.g. storage tank explosion induced by a pool fire).
IAEA Safety Standard NS-R-1 [30] cautions about the combination of individual events evaluation to ensure some rationale justifying the particular combination: for instance, a random combination of events may represent an extremely unlikely scenario such as to motivate its disregarding in the probabilistic safety analysis.
Probabilistic evaluations should be carried out, for the definition of suitable combinations for the plant design and for the subsequent risk assessment, between external events and internal accidents, addressing both their potential correlation and their resulting probability. In any case, combinations of two or more individual events should be carefully analysed with account taken of the dependence or independence of the events. In an accidental scenario, independent events can be assimilated to simultaneous events (for non-simultaneous events, but occurring before the effects of the previous event completely ceased, sometimes, by simplification, it is conservatively considered that the subsequent events will occur at the worst moment for the facility safety): the probability that the events will occur in such conditions that their effects will be cumulated is related to the duration of each event. The probability that the events occur in combination is equal or less than the product of the probability of each event.
Expert judgement and probabilistic methods can be used for the selection and relative credible estimation of event combinations that should be thoroughly analysed in order to select the anticipated operational occurrences and the mitigation actions to be taken into account in the plant design or to be included in the risk assessment. At present, the technology is not always available for precisely assessing the numerical probabilities that a given level of severity of an effect is exceeded in each separate event or by a combination of events. However, in absence of best estimated methods, conservative values should be estimated for these probabilities.
5.2Data needs
The approaches to estimate the frequency of combination of external events are applicable by using explicit site and plant specific data, as well as accident statistics relative to trucks, trains, shipments and aircraft and data on traffic accidents involving fires, explosions and toxic releases. As well, industrial facilities and hazardous material pipes shall be considered.
5.3Initiating events
Combination of external events shall be identified based on a comprehensive hazard analysis. All foreseeable combination of external hazards, including the potential for human induced events to affect directly or indirectly the safety of the plant shall be identified and their effects on relevant SSCs important to nuclear safety shall be evaluated.
The design of a facility shall include due consideration of those natural and human induced external events (i.e. events of origin external to the facility) combination that have been identified in the site evaluation process. In addition to natural external events (including meteorological, hydrological, geological and seismic events), human induced external events arising from nearby industries and transport routes shall be addressed.
For man-made and aircraft crash hazards, credible combinations have been identified and they include:
-
consequential hazards are additional hazards that are induced by the initial hazard, and include the initiation of additional off-site hazards, or induce other failures on the plant, which could result in missiles, explosions, fires, flooding, and chemical releases that could further exacerbate the plant failures, or inhibit the mitigation of the initial hazards examples are given by external explosion and aircraft crash initiating an external fire, aircraft crash producing airborne missiles, transport impact causing an oil spill, etc.
-
correlated hazards are hazards that do or can occur at the same time with some degree of dependency ; an example would be an aircraft crash that would impair the fire rating of the building, then aggravated by the kerosene fire.
-
coincidental hazards are multiple, randomly occurring events that could affect the site simultaneously. The frequency of two or more independent unusual external events occurring simultaneously is considered to be extremely low (implausible).
In order to simplify the assessment, it is suggested in [31] to split the combination assessment into three stages. The first stage is to identify the plausible off-site hazard combinations. The second stage is to identify the potentially induced on-site failure/hazards. A final stage is to identify the potential additional induced failure that could be induced by the possible hazards identified in the second phase.
5.4Reference to known methods
IAEA includes requirements on combined hazards and safety analysis in [18]: the problem is the lack of detailed guidance on this issue and the fact that combinations of events are frequently screened out from analysis. Expert judgement is used for the identification of extreme hazards combination probability, for instance adopting a matrix method with expert panel aimed on identification of critical combinations for given plant design. Document [32] proposes, in the fashion of qualitative analysis, some risk assessment methods applicable to external hazard combination depending on the frequency, effects on the plant and accident scenario:
-
risk assessment based on the hazard frequency or hazard impact analysis: the minimum hazard level which may have impact on the plant is established ; the frequency of external hazards combinations which exceeds this level is quantitatively evaluated based on a conservative analysis ; if the result indicates that such a frequency is below a reference screening-out value, this combination of hazard shall be determined to pose no significant risk of core damage however, it has to be noted that the severity of combinations of hazards can be higher than the severity of each individual hazard taken separately ;
-
safety margin evaluation: a safety margin evaluation is performed when it is necessary to take into account all accident scenarios after an external hazard has impacted the plant ; when the hazard frequency evaluation is difficult to perform or when the uncertainty associated with the frequency is significantly high, it is considered appropriate to evaluate the safety margin of external hazard against core damage risk ;
-
Core Damage Frequency (CDF) evaluation: the Conditional Core Damage Probability (CCDP) of the plant caused by the combination of hazards is quantitatively evaluated by assessing the effects of the combination on the occurrence of the initiating events which may lead to core damage and the effects of the combination on the loss of SSCs requested to mitigate the effects of these initiating events (“fragility” assessment) ; then, the calculated CCDP is multiplied by the frequency of the external hazard combination exceeding the hazard level at which the plant may be affected to determine the CDF.
Within the recently held OECD Workshop on PSA OF NATURAL EXTERNAL HAZARDS INCLUDING EARTHQUAKE Prague, Czech Republic, June 17th-20th 2013 [33], some approaches aimed at the combinations of hazards topic are proposed, which are likely to apply to the present case.
In particular the paper presented by L. Burgazzi, ENEA, Italian National Agency for New Technologies, Energy and Sustainable Economic Development, titled “Implementation of PSA models to estimate the probabilities associated with external event combination” shows how, in the light of the Fukushima accident, correlated hazards are of special interest in PSA for external hazards [34]. Thus, a mathematical method for modelling correlations was proposed in the presentation and an illustrative example was presented. The method is based on joint probability distributions and covariance matrices.
A systematic method aimed at identifying important hazard combinations and associated dependencies among PSA initiating events was presented by S. Sperbeck from GRS in his presentation titled “Recent research on natural hazards PSA in Germany and future need” [33]. During the discussion, it was also suggested that, given the multiplicity of potential combinations, such an analysis should be carried out in a systematic manner (e.g. by matrix of possible external events combinations).
Finally the workshop pointed out the identification of correlations between external hazards as another important point. The combinations of simultaneous or successive external hazards may result in increased loadings on SSCs or they may simultaneously endanger diverse safety systems. Formal mathematical methods to treat the probabilities of correlated hazards are available but the quantification of the model parameters is a big challenge, due to the scarcity of data.
Share with your friends: |