A Review of Criticality Accidents A Review of Criticality Accidents
A Review of Criticality Accidents A Review of Criticality Accidents
A Review of Criticality Accidents A Review of Criticality Accidents
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Monitoring could take the form <strong>of</strong> visual inspections,<br />
physical cleanings, radiation emission measurements,<br />
etc. <strong>Criticality</strong> control and fissile material<br />
accountability are important issues and <strong>of</strong>ten<br />
mutually supportive.<br />
• Operations personnel should know how to respond<br />
to foreseeable equipment malfunctions or<br />
their own errors. Hasty and inappropriate responses<br />
to process malfunctions have led to more<br />
than one accident. This underscores several issues:<br />
first, the need for operator understanding <strong>of</strong> the<br />
concept <strong>of</strong> criticality and <strong>of</strong> the importance <strong>of</strong> the<br />
particular criticality controls for the process at<br />
hand; second, the importance <strong>of</strong> care and thoroughness<br />
in determining credible abnormal conditions<br />
for analysis; and third, the importance <strong>of</strong> having<br />
considered responses to unplanned conditions.<br />
• Operations personnel should be trained in the<br />
importance <strong>of</strong> not taking unapproved actions<br />
after an initial evacuation. Reentry, except perhaps<br />
in lifesaving situations, should be undertaken<br />
only after the accident evolution has been technically<br />
evaluated, thoroughly understood, and<br />
planned actions have been approved. During one<br />
accident, unapproved reentry into the accident site<br />
and without adequate understanding <strong>of</strong> the criticality<br />
hazard, followed by impulsive actions, led to a<br />
loss <strong>of</strong> life. In a second accident, significant exposures<br />
occurred from an ineffective and ill considered<br />
reentry and only chance prevented a fatality.<br />
• Readouts <strong>of</strong> radiation levels in areas where accidents<br />
may occur should be considered. Knowledge<br />
<strong>of</strong> radiation levels in evacuated areas has<br />
proved valuable in planning recovery actions. Many<br />
<strong>of</strong> the accidents involved power histories that extended<br />
from minutes to many hours. In two cases,<br />
the accident termination process involved hands on<br />
intervention at times <strong>of</strong> expected minimal exposures.<br />
The successes <strong>of</strong> these interventions were<br />
based on detailed knowledge and understanding <strong>of</strong><br />
the excursion history and its expected behavior.<br />
• Operations involving both organic and aqueous<br />
solutions require extra diligence in understanding<br />
possible upset conditions if mixing <strong>of</strong> the<br />
phases is credible. Obscure process conditions and<br />
unplanned chemistry have led to at least four accidents.<br />
• Operations personnel should be made aware <strong>of</strong><br />
criticality hazards and be empowered to implement<br />
a stop work policy. This awareness should<br />
come from a mix <strong>of</strong> formal and informal training.<br />
These include classroom, on–the–job from immediate<br />
supervision, and discussions with criticality<br />
66<br />
staff. Lack <strong>of</strong> understanding <strong>of</strong> criticality hazards<br />
has contributed to several accidents and to exacerbated<br />
consequences.<br />
• Operating personnel should be trained to understand<br />
the basis for and to adhere to the requirement<br />
for always following procedures. Lack <strong>of</strong><br />
adherence to available procedures, either inadvertently<br />
or knowingly, has been a major contributor to<br />
several accidents.<br />
• Hardware that is important to criticality control<br />
but whose failure or malfunction would not necessarily<br />
be apparent to operations personnel,<br />
should be used with caution. Operational oversights<br />
such as failure to actuate valves per requirements<br />
have led to accidents. Duplicate hardware<br />
controls, strict procedural controls with multiple<br />
checks on operator actions, and diligent maintenance<br />
may be appropriate.<br />
• <strong>Criticality</strong> alarms and adherence to emergency<br />
procedures have saved lives and reduced exposures.<br />
Most <strong>of</strong> the 22 accidents involved excursions<br />
that were not terminated after a single burst. Prompt<br />
detection and immediate evacuation <strong>of</strong> personnel<br />
within several meters <strong>of</strong> the accident have been<br />
significant in saving lives and limiting exposures.<br />
Lessons <strong>of</strong> Supervisory, Managerial, and<br />
Regulatory Importance<br />
• Process supervisors should ensure that the operators<br />
under their supervision are knowledgeable<br />
and capable. Several accidents could have<br />
been avoided or the consequences lessened had<br />
supervisors been more aware <strong>of</strong> the routine actions<br />
<strong>of</strong> operators in performing their tasks. It is one<br />
thing to have written procedures that are intended to<br />
be followed in order to provide for safe operations.<br />
It is another that these procedures are understood<br />
and being followed as intended. Supervisors might<br />
ask themselves periodically, “When was the last<br />
time I saw the job being performed properly?”<br />
• Equipment should be designed and configured<br />
with ease <strong>of</strong> operation as a key goal. More than<br />
one accident, including the accident in Japan might<br />
have been avoided if operators had been provided<br />
user-friendly equipment.<br />
• Policies and regulations should encourage self–<br />
reporting <strong>of</strong> process upsets and to err on the side<br />
<strong>of</strong> learning more, not punishing more. At least<br />
one accident and attendant fatality were caused by a<br />
supervisor’s excessive concern for bringing a process<br />
back within required limits before it was discovered<br />
by management. Improvised operations<br />
were performed without accompanying awareness<br />
<strong>of</strong> the criticality hazards.