- Nuclear Power
- Nuclear Safety
- List of NPP
- Nuclear Accident
Posted by Energetic
There were two official explanations of the accident: the first, subsequently acknowledged as erroneous, was published in August 1986 and effectively placed the blame on the power plant operators. To investigate the causes of the accident the IAEA created a group known as the International Nuclear Safety Advisory Group (INSAG), which in its report of 1986, INSAG-1, on the whole also supported this view, based on the data provided by the Soviets and the oral statements of specialists. In this view, the catastrophic accident was caused by gross violations of operating rules and regulations. "During preparation and testing of the turbine generator under run-down conditions using the auxiliary load, personnel disconnected a series of technical protection systems and breached the most important operational safety provisions for conducting a technical exercise." The operator error was probably due to their lack of knowledge of nuclear reactor physics and engineering, as well as lack of experience and training. According to these allegations, at the time of the accident the reactor was being operated with many key safety systems turned off, most notably the Emergency Core Cooling System (ECCS), LAR (Local Automatic control system), and AZ (emergency power reduction system). Personnel had an insufficiently detailed understanding of technical procedures involved with the nuclear reactor, and knowingly ignored regulations to speed test completion.
The developers of the reactor plant considered this combination of events to be impossible and therefore did not allow for the creation of emergency protection systems capable of preventing the combination of events that led to the crisis, namely the intentional disabling of emergency protection equipment plus the violation of operating procedures. Thus the primary cause of the accident was the extremely improbable combination of rule infringement plus the operational routine allowed by the power station staff.
In this analysis of the causes of the accident, deficiencies in the reactor design and in the operating regulations that made the accident possible were set aside and mentioned only casually. Serious critical observations covered only general questions and did not address the specific reasons for the accident. The following general picture arose from these observations. Several procedural irregularities also helped to make the accident possible. One was insufficient communication between the safety officers and the operators in charge of the experiment being run that night. The reactor operators disabled safety systems down to the generators, which the test was really about. The main process computer, SKALA, was running in such a way that the main control computer could not shut down the reactor or even reduce power. Normally the reactor would have started to insert all of the control rods. The computer would have also started the "Emergency Core Protection System" that introduces 24 control rods into the active zone within 2.5 seconds, which is still slow by 1986 standards. All control was transferred from the process computer to the human operators.
This view is reflected in numerous publications and also artistic works on the theme of the Chernobyl accident that appeared immediately after the accident, and for a long time remained dominant in the public consciousness and in popular publications.
Human factors contributed to the conditions that led to the disaster. These included operating the reactor at a low power level—less than 700 MW—a level documented in the run-down test program, and operating with a small operational reactivity margin (ORM). Operating the reactor at this low power level was not forbidden by regulations, contradicting what Soviet experts asserted in 1986. However, regulations did forbid operating the reactor with a small margin of reactivity. However, "... post-accident studies have shown that the way in which the real role of the ORM is reflected in the Operating Procedures and design documentation for the RBMK-1000 is extremely contradictory," and furthermore, "ORM was not treated as an operational safety limit, violation of which could lead to an accident."
According to the INSAG-7 Report, the chief reasons for the accident lie in the peculiarities of physics and in the construction of the reactor. There are two such reasons:
Both views were heavily lobbied by different groups, including the reactor's designers, power plant personnel, and the Soviet and Ukrainian governments. According to the IAEA's 1986 analysis, the main cause of the accident was the operators' actions. But according to the IAEA's 1993 revised analysis the main cause was the reactor's design. One reason there were such contradictory viewpoints and so much debate about the causes of the Chernobyl accident was that the primary data covering the disaster, as registered by the instruments and sensors, were not completely published in the official sources.
Once again, the human factor had to be considered as a major element in causing the accident. INSAG notes that both the operating regulations and staff handled the disabling of the reactor protection easily enough: witness the length of time for which the ECCS was out of service while the reactor was operated at half power. INSAG’s view is that it was the operating crew's deviation from the test program that was mostly to blame. “Most reprehensibly, unapproved changes in the test procedure were deliberately made on the spot, although the plant was known to be in a very different condition from that intended for the test.”
As in the previously released report INSAG-1, close attention is paid in report INSAG-7 to the inadequate (at the moment of the accident) “culture of safety” at all levels. Deficiency in the safety culture was inherent not only at the operational stage but also, and to no lesser extent, during activities at other stages in the lifetime of nuclear power plants (including design, engineering, construction, manufacture and regulation). The poor quality of operating procedures and instructions, and their conflicting character, put a heavy burden on the operating crew, including the Chief Engineer. “The accident can be said to have flowed from a deficient safety culture, not only at the Chernobyl plant, but throughout the Soviet design, operating and regulatory organizations for nuclear power that existed at that time.”