Investigations of inter-system common cause failures

Intra-system common-cause failures (CCF) are widely studied and addressed in existing PSA models, but the information and studies that incorporate the potential for inter-system CCF is limited. However, the French Safety Authority has requested that EDF investigate the possibility of common-cause failure across system boundaries for Flamanville 3 (an EPR design). Also, the modeling of inter-system CCF, or the proof that their impact is negligible, would satisfy Capability Category III for one of the requirements in the ASME/ANS PRA standard in the U.S. EDF and EPRI have been working on a method to assess when it is necessary to take into account inter-system CCF in a PSA model between 2008 and 2010. This method is based both on the likelihood of inter-system CCF and on its demonstrated potential impact on CDF (core damage frequency). This method was first applied on pumps in different systems of the 900 MWe series plants. The second application concerned the motor-operated valves across different systems, using the same PSA model. This second application helped us refine the method, which was not optimal when the number of concerned components is very large. Since then, the method has been successfully applied on the pumps and 10 kV breakers of the EPR power plant in Flamanville. This paper describes the method and the results obtained in some of these studies. All studies have shown either that components in different systems, when they were not already part of a common cause failure group in the model, are not susceptible to common causes of failure, or that the potential for inter-system common-cause failure is negligible regarding the overall risk. (authors)