DOE G 151.1-2, Technical Planning Basis

NOT MEASUREMENT SENSITIVE DOE G 151.1-2 7-11-07 TECHNICAL PLANNING BASIS Emergency Management Guide [This Guide describes suggested nonmandatory approaches for meeting requirements. Guides are not requirements documents and are not to be construed as requirements in any audit or appraisal for compliance with the parent Policy, Order, Notice, or Manual.] U.S. Department of Energy Washington, D.C. AVAILABLE ONLINE AT: INITIATED BY: www.directives.doe.gov National Nuclear Security Administration Office of Emergency Management i DOE G 151.1-2 7-11-07 DOE G 151.1-2, Technical Planning Basis Table of Contents 1. HAZARDS SURVEYS ....................................................................................................... 1-1 1.1 Introduction......................................................................................................................1-1 1.2 General Approach ............................................................................................................1-2 1.3 Describe the Facility and Identify its Hazards (Step 1) ...................................................1-2 1.4 Screen Hazardous Materials to Determine Need for a Hazards Assessment (Step 2) .....1-3 1.5 Identify Applicable Types of Emergency Events and Conditions (Step 3) .....................1-4 1.6 Qualitatively Describe Potential Impacts (Step 4)...........................................................1-6 1.7 Identify and Document the Applicable Planning and Preparedness Requirements (Step 5).............................................................................................................................1-6 1.8 Maintenance of Hazards Surveys.....................................................................................1-7 1.9 Hazards Survey Documentation ......................................................................................1-7 APPENDIX A. Hazardous Material Screening Process ..............................................A-1 APPENDIX B. Example Application of the Hazards Survey Guidance to a Hypothetical DOE Facility................................................................. B-1 2. HAZARDS ASSESSMENTS ............................................................................................. 2-1 2.1 Introduction......................................................................................................................2-1 2.2 General Approach ............................................................................................................2-3 2.3 Define and Describe Facility and Operations (Step 1) ....................................................2-5 2.4 Characterize the Hazardous Materials (Step 2)................................................................2-6 2.5 Select Scenarios for Analysis (Step 3).............................................................................2-7 2.5.1 Types of Events and Conditions to Be Considered..............................................2-8 2.5.2 Selection of a Spectrum of Scenarios.................................................................2-11 2.6 Analyze Scenarios (Step 4)............................................................................................2-15 2.6.1 Estimates of Source Terms.................................................................................2-15 2.6.2 Consequence Calculations .................................................................................2-18

2.6.3 Identify Recognition Factors..............................................................................2-22 2.6.4 Finalize Technical Planning Basis Scenarios.....................................................2-22 2.7 Document the Results of the Analysis (Step 5) .............................................................2-23 2.7.1 General Scenario Documentation Guidelines ....................................................2-23 2.7.2 Documented Basis for Emergency Action Levels (EALs) ................................2-24 2.7.3 Basis for Planned Protective Actions .................................................................2-27 2.7.4 EPHA Document as a Response Reference .......................................................2-28 2.7.5 EPHA Document Format ...................................................................................2-28 2.8 Special Topics................................................................................................................2-28 2.8.1 Smoke from Ordinary Structure Fires................................................................2-28 2.8.2 Explosives ..........................................................................................................2-29 2.8.3 Aggregations of Small Quantities of Hazardous Materials................................2-30 2.9 Using Safety Analysis Results in EPHAs......................................................................2-31 3. EMERGENCY PLANNING ZONES............................................................................... 3-1 3.1 Background......................................................................................................................3-1 3.2 General EPZ Concepts.....................................................................................................3-2 3.3 Developing Facility EPZs................................................................................................3-3 4. MAINTAINING HAZARDS SURVEYS AND HAZARDS ASSESSMENTS.............. 4-1 ii DOE G 151.1-2 7-11-07 5. USING HAZARD SURVEYS AND HAZARDS ASSESSMENTS................................ 5-1 5.1 Hazards Survey ................................................................................................................5-1 5.2 Emergency Planning Hazards Assessment (EPHA) ........................................................5-1 APPENDIX C. Facility and Site Boundary Guidelines............................................... C-1 APPENDIX D. Onsite Transportation Analysis..........................................................D-1 APPENDIX E. Malevolent Events.............................................................................. E-1 APPENDIX F. Consequence Thresholds.................................................................... F-1 APPENDIX G. Combustion Products and Toxicity in Hazards Assessments ............G-1 APPENDIX H. Example Application of the Hazards Assessment Methodology to a Hypothetical DOE Facility.................................................................H-1 1-1 DOE G 151.1-2 7-11-07 1. HAZARDS SURVEYS 1.1 Introduction

The purpose of this Chapter is to assist Department of Energy (DOE) and National Nuclear Security Administration (NNSA) field elements in complying with the DOE O 151.1C requirement that a hazards survey be prepared, maintained, and used for emergency planning purposes. The Order requires that emergency management efforts begin with the identification and qualitative assessment of the facility- or site-specific hazards and the associated emergency conditions that may require response, and that the scope and extent of emergency planning and preparedness at a DOE facility reflect these facility-specific hazards. The first step in the implementation of this “commensurate with hazards” approach to emergency management is a Hazards Survey. The Hazards Survey, which is based on an examination of the features and characteristics of the facility, identifies the generic types of emergency events and conditions (including natural phenomena such as earthquakes and tornadoes, wildland fires, and other serious events involving or affecting health and safety, the environment, and safeguards and security at the facility) and the potential impacts of such emergencies to be addressed by the DOE Comprehensive Emergency Management System. The Hazards Survey also identifies key components of the Operational Emergency Base Program that provide a foundation of basic emergency management requirements and an integrated framework for response to serious emergency events or conditions. Much of the information to be used in the Hazards Survey, and included in its documentation, should have already been collected in the course of meeting other DOE, NNSA, and Federal, State, tribal, and local authority requirements. For facilities involved in producing, processing, handling, storing, or transporting hazardous materials that have the potential to pose a serious threat to workers, the public, or the environment, the Hazards Survey provides a hazardous material screening process for determining whether further analysis of the hazardous materials in an Emergency Planning Hazards Assessment (EPHA) is required. This guidance is directed at operations and emergency management staff responsible for DOE and NNSA facilities at field offices, service centers, and operating contractor organizations. It is expected that emergency management staff will obtain support from site and facility management and from a variety of scientific and technical disciplines within their respective organizations to conduct and document the analyses described herein. Appendix A provides a recommended screening approach for radioactive and chemical hazardous materials. Appendix B illustrates the application of the suggested Hazards Survey method to a hypothetical facility and site. This guide cancels and supersedes DOE G 151.1-1, Volume 2, Hazards Survey and Hazards Assessments, dated 8-21-97. 1-2 DOE G 151.1-2 7-11-07 1.2 General Approach Every facility and activity on a DOE/NNSA site should be included in a documented Hazards Survey. Much of the information necessary to generate a Hazards Survey will already have been developed and documented in the course of meeting other DOE and Federal agency requirements relating to facility safety, occupational safety, environmental and effluent controls, and hazardous materials management. However, the intent of the Order will not be met by simply defining existing documents or analyses as the Hazards Survey document.

The Hazards Survey document should be a distinct document and should contain, or incorporate by reference, the information specified in this chapter. A tabular/matrix presentation can be used to efficiently summarize and document the survey information. The recommended steps in the Hazards Survey process are: Step 1 Briefly describe each facility and identify its hazards Step 2 Screen hazardous materials to determine the need for further analyses in a facility-specific quantitative EPHA. Step 3 Identify the generic types of emergency events and conditions that apply to each facility. Step 4 Qualitatively describe the potential health, safety, environmental, or national security impacts of the applicable emergencies. Step 5 Identify and document the applicable Base Program planning and preparedness requirements. A Hazards Survey may address one or more facilities. A single Hazards Survey document may even cover an entire site. The tabular/matrix presentation format is a particularly efficient method for documenting the survey information for a large number of facilities. 1.3 Describe the Facility and Identify its Hazards (Step 1) Each facility or activity covered by the Hazards Survey should be identified and a brief description of its operations provided. Any detailed descriptive information should be included by reference. Sufficient information to provide a general understanding of the facility and its associated hazards can be adequately presented in a table or matrix. This information should include: • A general characterization of the facility and its operations (e.g., office building, laboratory, warehouse); • The number of workers normally assigned; 1-3 DOE G 151.1-2 7-11-07 • Any special designations, such as: nuclear facility, radiological facility, hazardous waste site, Treatment, Storage, or Disposal (TSD) facility, etc.; and • Whether hazardous materials, other than standard office products and cleaning supplies, are used or stored in the facility. The use or storage of radioactive or chemical hazardous materials in the facility should be noted and described. Sources of information on hazardous materials include documents such as Basis for Interim Operations (BIO) and Safety Analysis Reports/Safety Assessment Documents/Documented Safety Analyses (SARs/SADs/DSAs), process safety management/risk management analyses documentation, and databases, such as, chemical and radioactive material inventories. In addition, facility walk-downs enable emergency management staff and hazards analysts to familiarize themselves first-hand with actual facility systems, processes, practices, equipment and, especially, material inventories. Periodic walk-downs can provide checks on the accuracy of documentation and material inventory databases and may identify additional hazards from by-products of chemical processes or potential accidental mixing interactions. If hazardous materials other than office products/cleaning supplies are identified, further screening should be done in accordance with Section 1.4 to determine whether a facility- specific quantitative EPHA is required. 1.4 Screen Hazardous Materials to Determine Need for a Hazards Assessment (Step 2)

Because of the myriad forms and quantities of hazardous materials in use throughout DOE/NNSA facilities and activities, the Comprehensive Emergency Management System provides the opportunity to use a screening process to reduce the number of hazardous materials quantitatively analyzed for emergency planning purposes. Use of the screening process described here is not intended to avoid analyses of hazardous materials that have the potential to harm workers or the public, but to allow emergency management resources to be focused on analyzing materials that, because of their quantity, toxicity and dispersibility, have the potential to harm people who are outside the immediate workplace where the materials are used or stored. The hazardous material screening process identifies inventories of specific materials in a facility/site or activity whose release could cause a hazard significant enough to warrant specific consideration in an Operational Emergency Hazardous Material Program. To determine whether a facility requires a quantitative analysis of its hazardous materials in an EPHA, the screening process must identify at least one hazardous material that requires further analysis. The results of the EPHA will then determine if the release of each identified material will cause a hazard significant enough to be included as part of the Hazardous Material Program planning basis. DOE O 151.1C requires a quantitative hazards assessment if the hazards survey screening process identifies specific hazardous materials and quantities that could produce impacts consistent with the definition of an Operational Emergency (OE). In general, an OE involving an uncontrolled release of a hazardous material must: immediately threaten or 1-4 DOE G 151.1-2 7-11-07 endanger those in close proximity of the event; have the potential for dispersal beyond the immediate vicinity of the release in quantities that threatens the health of onsite personnel or the public in collocated facilities, activities, and/or offsite; and have a potential rate of dispersal sufficient to require a time-urgent response to implement protective actions for workers and the public. All radioactive materials and chemicals with known or suspected toxic properties should be subjected to a hazardous material screening process, which identifies all hazardous materials in a facility/site or activity that are to be considered for further analysis in an EPHA. Some materials may be excluded from analysis in an EPHA based on use, form, dispersibility, or toxicity. Radioactive materials requiring further analysis include those listed in DOE-STD-1027-92 in quantities greater than Category 3 values. Chemicals assigned Health Hazard Ratings 0, 1, or 2 based on the handbook of the National Fire Protection Association (NFPA), NFPA 704, Standard System for the Identification of Hazardous Materials for Emergency Response, may be excluded from further EPHA analysis. With some exceptions for extraordinarily high toxicity, chemicals in quantities less than those that can be “easily and safely manipulated by one person,” also referred to as “laboratory scale” quantities, may be excluded from further analysis.

In accordance with DOE O 151.1C, Chapter III, 3.b(2)(d), the possibility that excluded materials “could initiate, through fires or explosions, the release of other hazardous materials must be considered.” Although fires and explosions are the most obvious examples, the release of other hazardous materials (e.g., materials with health hazard rating <3) that could cause temporary incapacitation of workers resulting in a process upset that releases a material with an NFPA health hazard rating = 3 or 4 should be considered in the analysis. The release of a material with a health hazard rating that in large quantities could pose an asphyxiation hazard to collocated workers should also be considered in the analysis. Appendix A provides a discussion of the hazardous material screening process and describes a recommended screening approach. If the screening process identifies at least one hazardous material requiring further quantitative analysis, the Hazards Survey should indicate that an EPHA is needed for that facility/site or activity. A description of the screening process and the results of its application should be provided in the Hazards Survey or supporting documents. 1.5 Identify Applicable Types of Emergency Events and Conditions (Step 3) The generic types of emergency events and conditions that may occur at each facility for which some level of planning and preparedness may be required should be identified and documented. Hazardous materials not specifically addressed in a quantitative EPHA should also be considered when identifying the emergency conditions. As a minimum, the following types of emergency conditions should be considered: • Structure fires and explosions; 1-5 DOE G 151.1-2 7-11-07 • Natural phenomena impacts (wind, tornados, flood, earthquake, wildfire, snow storms); • Environmental releases (of oil or other pollutants that degrade the environment); • Hazardous material (HAZMAT) releases; • Malevolent acts (hostage-taking, sabotage, armed assault, initiation of hazardous materials release); • Workplace accidents/mass casualty events (explosion, release of toxic fumes, high energy system failure); • Hazards external to the facility/site (e.g., hazardous materials in near-by facilities, transportation accidents, accidents involving utilities, etc.); and • Accidental criticality. The emergency condition of particular emphasis in the DOE/NNSA Comprehensive Emergency Management System is the release of hazardous materials. The inventories of materials in facilities will be subject to the screening process discussed above. If there is the possibility that a potential release may cause a classified OE, then an EPHA is required. If, on the other hand, the facility contains an aggregation of small quantities (i.e., less than screening thresholds) that may be released during large-scale destructive events, such as a fire or explosion in a laboratory, an aircraft crashing into a building, or an earthquake that collapses a structure, this should also be indicated in the Hazards Survey. A site may consider defining such events as categorized [but not classified] OEs, if it appears that the condition would meet all the aspects of an OE. The potential “HAZMAT” aspect of these destructive events may be used as a qualitative factor or criterion (i.e., without the support of detailed quantitative calculations of consequences) in defining specific OEs related to these events. However, even without the inclusion of this category, a site may be required to categorize such an event as an OE under one of the existing definitions contained in the Order.

Some types of emergency conditions will apply to nearly every facility (e.g., fires), while others will only apply to facilities that exceed a threshold inventory of some hazardous material or environmental pollutant or are located near other hazards. Site-specific potential hazards, such as flooding from a nearby dam failure, should be included in the list of potential emergencies to identify the facilities that are potentially threatened. Facility and site hazards can be identified by utilizing subject matter experts (SMEs), BIO reports, SARs/SADs/DSAs, Vulnerability Assessments (VAs), chemical and radioactive material inventory databases, etc. Also, Federal Emergency Management Agency (FEMA), National Weather Service (NWS), and insurance industry documents are all potential sources of information. 1-6 DOE G 151.1-2 7-11-07 Hazards originating outside the DOE facility and site that could impact the health and safety of onsite personnel or other DOE interests should be identified and examined. As a minimum, the Local Emergency Planning Committee (LEPC) should be consulted to identify nearby facilities having hazardous material inventories that could impact the DOE site. Railroads, highways, and other transportation arteries that pass through or near a DOE facility or site should be considered as possible locations of hazardous material transportation accidents. If the transportation artery is a known corridor for a particular hazardous substance, identify the substance, quantities, approximate shipment frequencies, and Protective Action Zone distance specified in the Department of Transportation (DOT) Emergency Response Guidebook (ERG). Protective Action Zone distances may need to be calculated for hazardous substances not covered by the ERG. Once this information is collected, determine whether specific arrangements should be made for protection of onsite personnel. As a minimum, if no specific information can be obtained, the transportation arteries should be identified as potential sources of hazards to onsite personnel. 1.6 Qualitatively Describe Potential Impacts (Step 4) Qualitatively describe the potential impacts of the emergency conditions identified in the previous step. These descriptions should relate the potential impacts to the different types of OEs identified in the Order. Consideration should be given to “cascade effects,” where the emergency condition can result in plausible disruption of response capabilities. For example, an earthquake could result in fires from downed power lines while rupturing fire mains. Following are examples of potential impacts of several emergency conditions: Facility Type Emergency Qualitative Description of Impact Condition Office building Structure fire Workers killed/injured by smoke inhalation and burns. Waste incinerator Earthquake Workers killed/injured/ trapped by building collapse; release of hazardous materials; contamination of facility and surroundings; spill of fuel oil into streams/wetlands. Onsite Transportation Collision Actual or potential release of hazardous materials; Activity exposures exceeding Protective Action Criteria (PACs). 1.7 Identify and Document the Applicable Planning and Preparedness Requirements (Step 5) Various Federal, state, and local regulations include requirements that pertain to planning and preparedness for emergencies. The Order recognizes these as Base Program requirements and directs that they be incorporated into the site emergency management programs. Emergency planners should correlate Hazards Survey results with the relevant planning and preparedness requirements from other Federal, state, or local regulations

1-7 DOE G 151.1-2 7-11-07 that apply to a particular facility, providing a summary of the required scope of emergency planning and preparedness at the site. Examples of possible Base Program planning and preparedness requirements are listed in the Order. When completed, the Hazards Survey should document and serve as a guide for assessing site compliance with a variety of DOE and non-DOE emergency planning and preparedness requirements that are integral parts of the Comprehensive Emergency Management System. 1.8 Maintenance of Hazards Surveys Hazards Surveys should be maintained to accurately reflect changes in the facility design, operations, safety features, inventories of hazardous materials, and features of the surrounding area. According to DOE O 151.1C, Hazards Surveys must be periodically reviewed and, as necessary, updated prior to significant changes to the facility/site or to hazardous material inventories, but not less than every 3 years. Examples of significant changes are those changes which result in an Unreviewed Safety Question (USQ), as defined in 10 CFR 830.3(a), or in an unreviewed safety issue for accelerator facilities, as defined in DOE O 420.2B. This definition also applies to non-nuclear facilities. Changes that result in a reduction of hazards with no adverse effect on safety or emergency preparedness or response may be included in the next scheduled review and update. The Hazards Survey can be effectively maintained through monitoring of existing administrative processes and tracking systems [e.g., Integrated Safety Management Systems (ISMS), hazardous material inventory systems, facility authorization basis documentation]. Although most generic types of emergency conditions identified in a Hazards Survey will remain unchanged throughout the useful life of a facility, the status of hazardous material inventories within a facility may be the most variable and critical. The hazardous material screening process provides the mechanism that examines facility hazardous material inventories to determine the need for an EPHA, both on a periodic basis and, as required, when notified of changes in operations and/or inventories. 1.9 Hazards Survey Documentation As noted in Section 1.2, a single Hazards Survey document may address multiple facilities and the results may be presented in any of several ways. The tabular/matrix presentation format is a particularly efficient method of summarizing and documenting the survey information for a large number of facilities. Using this approach, the Hazards Survey document can consist of brief descriptions of the facilities, types of hazards that apply, potential impacts of those hazards, applicable regulations, and other common information, followed by a table or matrix indicating which items apply to each facility. If the number of facilities is small, separate text section(s) can be devoted to each. For facilities with hazardous materials, the Hazards Survey document should identify the sources of inventory information and summarize the hazardous material screening methods and results. Sites are not expected to reproduce extensive texts from original sources to incorporate in the Hazards Surveys. Existing site documents or record systems, such as facility 1-8 DOE G 151.1-2 7-11-07

descriptions, building pre-fire plans, or hazardous material inventories, may be incorporated into the Hazards Survey by reference in the table or matrix. Hazardous material inventory information for a facility/site or activity should be documented to support the results of the hazardous material screening process. However, the inventory information need only be documented in the Hazards Survey to the extent necessary to indicate whether a quantitative EPHA is required. If an EPHA is required, then the results of the screening process for all materials in a facility/site or activity should be included in the EPHA. Otherwise, the screening results can be included as part of the supporting documentation for the Hazards Survey. Sites should ensure that EPHA documentation is reviewed for classified or unclassified controlled information prior to release, with particular emphasis on the quantity and location of hazardous materials (especially nuclear materials) and malevolent event scenarios associated with these materials. A-1 DOE G 151.1-2 7-11-07 APPENDIX A. Hazardous Material Screening Process A.1 Introduction The purpose of this appendix is to provide background information on hazardous material identification and to present a recommended approach for screening radioactive materials and hazardous chemicals. The hazardous material screening process is intended to identify specific hazardous materials and quantities that, if released in an uncontrolled manner, could produce impacts consistent with the definition of an OE involving the airborne release of a hazardous material. Specifically, the uncontrolled release of such a hazardous material would: • Immediately threaten or endanger those who are in close proximity; • Have the potential to disperse beyond the immediate vicinity of the release point and threaten the health and safety of onsite personnel or the public; and • Disperse at a rate that requires time-urgent response to implement effective protective actions for workers and the public. Of primary concern are hazardous materials that are highly dispersible and have high acute toxicity or high radio-toxicity. Adverse health effects, which “threaten or endanger” the health and safety of workers or the public, occur where the consequences of the release of a hazardous material approach or exceed the applicable Protective Action Criterion (PAC). Such materials include, but are not limited to ⎯ • Radioactive materials listed in DOE-STD-1027-92 Attachment 1, Table A-1. • Chemicals assigned a Health Hazard Rating of 3 or 4 based on NFPA 704, Standard System for the Identification of Hazardous Materials for Emergency Response. Some materials may be excluded from analysis in an EPHA based on use, form, dispersibility, or toxicity. The criteria specified in this appendix can be used to make definitive (yes-no) decisions on excluding materials from further consideration. The screening criteria are sufficiently conservative that it is unlikely that a substance screened out using those criteria could cause an OE. However, because the screening criteria are generic and do not reflect exactly the hazard associated with each individual substance, there may be facility-specific circumstances (e.g., specific release scenarios or mechanisms, large quantities of asphyxiates or cryogenic materials) recognized prior to application of the screening criteria, under which a particular substance that would otherwise be excluded from consideration using the criteria might cause impacts consistent with the OE definition. If, during the screening process, the facility/site or activity recognizes the existence of process conditions or release mechanisms that might exaggerate the impact of a particular substance, they may choose to analyze the material in an EPHA even though it could meet one of the stated criteria for exclusion.

A-2 DOE G 151.1-2 7-11-07 This appendix also recommends fixed minimum screening values for chemicals determined in accordance with the provisions of 29 CFR 1910.1450 and referred to as quantities that are “easily and safely manipulated by one person” (commonly referred to as “laboratory scale” quantities.) The Order allows sites to determine values locally, appropriate to the activities and operations at their facilities, but still satisfying the provisions expressed in the CFR. Specific values will be recommended in this appendix to demonstrate the intent of the Order. Use of those screening values will exclude from further consideration small quantities of most hazardous materials that, in practice, have little or no potential to cause impacts consistent with the general definition of OEs given in DOE G 151.1-4, Chapter 4, and the specific OE definition given above for the airborne release of hazardous materials. Using this screening process, any chemical or radionuclide, which is identified as a potential candidate for further analysis, should be examined in an EPHA. After further consideration and analysis of the specific quantities and release scenarios, some materials may be subsequently excluded from quantitative analysis in the EPHA. Hazardous materials that are not identified as candidates for analysis should be considered as possible initiators or promoters of a release of other toxic substances. The following sections contain background information on hazardous material screening requirements and methods and present recommended screening approaches for radioactive materials and hazardous chemicals. A.2 Radioactive Material Screening A.2.1 General Screening Discussion All radioactive materials are to be initially considered for possible analysis in an EPHA. However, DOE-STD-1027-92 allows exclusion of some materials for facility hazard categorization purposes and the Nuclear Regulatory Commission (NRC) provides for similar exclusions when determining the need for material licensee radiological contingency plans. Consistent with those precedents, the following materials may be excluded from consideration during the screening process: • Sealed radioactive sources that are engineered to pass the special form testing specified by the Department of Transportation (DOT) in 49 CFR 173.469 or testing specified by the American National Standards Institute (ANSI) standard, ANSI N43.6, Sealed Radioactive Sources - Classification. • Materials in solid form for which there is no plausible dispersal mechanism. • Materials stored in DOT Type B shipping containers with overpack, provided the Certificates of Compliance are current and the Certificates authorize the stored materials. A-3 DOE G 151.1-2 7-11-07 • Radioactive materials used in exempted, commercially available products as described in 10 CFR 30.11-30.19 (e.g., timepieces, illumination devices, thermostats, etc.). Small quantities of most radionuclides can be excluded from further consideration by the use of threshold screening quantities. DOE-STD-1027-92, Attachment 1, Table A-1, Category 3 threshold values were derived from the Reportable Quantities (RQs) developed by the Environmental Protection Agency (EPA) under the Comprehensive Environmental Response, Compensation, and Liability Act (CERCLA). Whereas the EPA based the RQs on a maximum individual dose of 0.5 rem (5m/Sv) by the most limiting exposure pathway, DOE applied a dose criterion of 10 rem (100 mSv), consistent with the EPA recommended dose limit for emergency workers engaged in “protecting valuable property.” Accordingly, DOE multiplied the limiting release values from the EPAs RQ background document by a factor of 20 (i.e., 10 rem/0.5 rem [100 mSv/ 5 mSv]) to arrive at the Category 3 radionuclide thresholds. DOE-STD-1027-92 allows for some exclusions and adjustments based on the material form and dispersiblity when applying Category 3 thresholds.

In a few circumstances, the chemical toxicity of a radioactive substance may actually be of greater health concern than the potential radiation dose. Because the DOE Category 3 radionuclide thresholds are based on radiation dose alone, chemical toxicity may need to be considered when applying the screening values to very low-specific-activity radionuclides (or mixtures) that are known to also be chemically toxic. For practical purposes, the concern is limited to uranium of low enrichment in the form of compounds that are relatively soluble in body fluids (such as nitrates, fluorides, and sulfates). Depending on the exact proportions of the different uranium isotopes, the chemical toxicity concern becomes dominant as the nominal enrichment (235U weight percent) decreases through the range from about 16 percent to 5 percent. [Cf. Stannard, J. N., Radioactivity and Health – A History, Chapter 2, IV. DOE/RL/01830-T59. Battelle Memorial Institute. 1988]. A.2.2 Recommended Screening Approach This section presents a recommended screening approach that embodies the general principles and considerations discussed previously in Section A.2.1. Figure A-1 shows the steps in the radioactive material screening process. From available process records and documentation, identify all radioactive materials stored, used or produced within the facility/site or activity. Some materials that do not represent the type or magnitude of hazard that is intended to form the technical basis for hazardous material emergency management programs should be excluded from further consideration, as follows: http:30.11-30.19 A-4 DOE G 151.1-2 7-11-07 Figure A-1. Radioactive Hazardous Material Screening Process License-Exempt Commercial Products. Radioactive materials used in license- exempted, commercially available products as described in 10 CFR 30.11-30.19 (e.g., timepieces, illumination devices, thermostats, etc.) should be categorically excluded from consideration. Non-Dispersible Materials. The degree to which a substance represents an acute airborne health hazard to humans is a major consideration in determining the need for further analysis in an EPHA. Sealed sources and other materials engineered to meet “special form” requirements may be excluded from consideration with documented justification. Materials in solid form that cannot be reduced to small particles (less than about 10 microns in diameter) by some plausible mechanism can be excluded from quantitative analysis because they cannot be suspended and transported in air. Materials stored in DOT Type B shipping containers with overpack may be excluded, if the Certificates of Compliance are current and authorize the specific materials stored. http:30.11-30.19 A-5 DOE G 151.1-2 7-11-07 Apply Threshold Screening Quantities. Compare facility allowable radioactive material inventories against Category 3 values in DOE-STD-1027-92, Attachment 1, Table A-1; exclude from further consideration quantities less that those thresholds. The DOE-STD-1027-92 Category 3 values should be used for initial hazards screening and when updating existing Hazards Surveys. Widely separated units of inventory can be considered separately for comparison to the screening list, even if the “facility” total exceeds the listed quantity. Only the quantity that could realistically be considered part of the Material-At-Risk (MAR) for a single release event should be compared to the screening quantity. The threshold screening quantities should not be used to eliminate from consideration very low-specific-activity substances such as depleted, natural or low- enriched uranium in soluble forms. For those materials, chemical -- not radiological -- toxicity may actually be the dominant concern.

If the physical properties of the material or the manner in which it is stored or packaged indicate that the respirable release fraction would be significantly lower than the value used in calculating the threshold screening quantity, those factors should be considered in the quantitative analyses of release consequences in the EPHA. When more than one radionuclide is present in the same location, it is appropriate to use the summation-of-radionuclide-threshold-ratios approach specified in DOE-STD-1027-92, Attachment 1. A quantitative hazards assessment is required if the sum of the fractions of all radionuclides subject to the same release event equals or exceeds one (1). A.3 Chemical Screening A.3.1 General Screening Discussion For any chemical, the overriding emergency management concern is the acute human toxicity of the substance by the airborne pathway (inhalation, dermal contact, absorption through eyes and mucosa, etc.). Hazardous chemicals with local impacts on workers in the immediate event scene (e.g., asphyxiation, frostbite) are not the primary concern of an emergency management system, but are among the hazards addressed by worker health and safety programs. The screening process examines potential chemical hazards and eliminates materials from further consideration if they are commonly found in public use, are not readily dispersed in the atmosphere, are not hazardous (toxic) to humans, or exist in limited quantities. For such materials, response to any accidental release should be within the management scope and technical capabilities of ordinary workplace safety and hazard control programs. It is not expected that the hazardous material conditions following such an accidental release would constitute a hazardous material (classifiable) OE, the basic definition of which suggests that outside technical support, planning and preparedness measures are needed to ensure an effective response [cf. DOE G 151.1-4, Chapter 4]. Chemicals that do not represent the type or magnitude of hazard that is intended to form the technical basis for hazardous material emergency management programs are excluded from further consideration, as follows: A-6 DOE G 151.1-2 7-11-07 Public Use. In general, materials should be eliminated as candidates for analysis if the materials are commonly available to and used by the general public. This includes any substance to the extent it is used for personal, family, or household purposes or is present in the same form and concentration as a product distributed for use by the general public (for example, bleach, motor oil, gasoline). Dispersibility. The degree to which a substance represents an acute airborne health hazard (toxic) to humans is a major consideration in determining the need for further analysis in an EPHA. Solids that cannot be reduced to small particles (less than about 10 microns in diameter) by some plausible mechanism can generally be excluded from quantitative analysis because they cannot be suspended and transported in air.

The volatility of a chemical (i.e., how readily it evaporates) is normally expressed as the vapor pressure (or partial pressure, if in a solution) at a given temperature. For liquid spills, the rate at which the substance becomes airborne increases with increasing vapor pressure and increasing pool surface area. As part of the creation of the Clean Air Act, the EPA was chartered to create a list of hazardous substances and thresholds to focus accidental release prevention efforts on those sources and substances that pose the most significant risks to the community. The EPA established a vapor pressure cut-off value of 10 millimeters (mm) of mercury (40 CFR 68.115) for chemicals to be listed. However, experience indicates that some substances with lower vapor pressures may represent a significant airborne source if the potential spill volume is sufficiently large. Accordingly, a value of 1 mm of mercury is recommended as the cut-off value for EPHA purposes. Substances with vapor pressures below this value pose little potential for air releases due to an accidental spill. Although focused on the liquid spill scenario, a vapor pressure below 1 mmHg at about 25oC can be used as a general criterion for excluding liquids from EPHA analysis. Human Health Hazard. The Occupational Safety and Health Administration (OSHA) hazard communication standard (29 CFR 1910.1200) requires that all chemicals in the workplace be labeled in a manner that warns of any hazards the chemical may present. The actual format and method of labeling is not specified, so there are several different formats in use. The NFPA hazard diamond is one such method. NFPA 704 specifies a system for identifying the hazards associated with materials. The NFPA hazard ratings can be used for initial screening to determine when the acute health affects of a chemical are severe enough to consider evaluation. Although the system was developed primarily to serve the needs of fire protection agencies, it is useful to anyone involved in the handling of potentially hazardous substances. The system identifies the hazards of a material in terms of three principal categories: “health,” “flammability,” and “instability.” It indicates the degree of severity by a numerical rating that ranges from four (4), indicating severe hazard, to zero (0), indicating no hazard. In general for each of the categories, levels 3 and 4 represent effects that are the most severe, have the longest lasting impacts, impact the largest area and/or involve the largest energy release. Chemicals without a health hazard rating should be retained for further consideration. For purposes of screening, therefore, any chemical with a health hazard rating of 0, 1, or 2 is presumed not to represent a significant toxic health hazard to A-7 DOE G 151.1-2 7-11-07 humans and may be excluded from further analysis. Any chemical assigned a health hazard rating of 3 based solely on cryogenic properties and the resulting frostbite hazard may likewise be excluded.

Quantity. Hazardous materials should be eliminated as candidates for analyses if the materials are stored and used only in small quantities. From the definitions in 29 CFR 1910.1450, Occupational exposure to hazardous chemicals in laboratories, “laboratory scale” means work with substances in which the containers, used for reactions, transfers, and other handling of substances are designed to be “easily and safely manipulated by one person.” The Order allows sites to determine values appropriate to the activities and operations at their facilities, but still satisfying the provisions expressed in the CFR. In general, about 5 gallons (19 L) of liquid or the corresponding weight of solid material (about 40 pounds [18 kg]) is the maximum that can be safely handled by one person. For compressed gases, cylinders with a full gross weight of 40 pounds (18 kg) will typically contain 10 pounds (4.5 kg) or less of most common toxic gases. Hence, it is consistent with the intent of the Order to screen out individual containers with capacities less than approximately 5 gallons (19 L) for liquids, 40 pounds (18 kg) for solids, or 10 pounds (4.5 kg) for compressed gases. Individual containers that are being used, and small numbers of such containers kept in ready storage within or very near an end-user facility, may be screened out. However, larger numbers of such containers (capacity totaling greater than about 5-10 times the applicable “laboratory scale” threshold) in warehouses or other storage locations should be examined closely before screening them out. In these situations, if there are plausible scenarios (excluding extreme malevolent acts and catastrophic release scenarios such as major fires, airplane crashes and building collapse) that could release the contents of multiple containers, the material should be retained for analysis. A one (1) pound (0.45 kg) threshold value is recommended for substances that, because of high acute toxicity and dispersibility, may represent an extraordinary toxic hazard beyond the local event scene. Those substances should include, but may not be limited to: chemical warfare nerve agents; any substance of similar toxicity [e.g., Acute Exposure Guideline Level (AEGL)-3, Emergency Response Planning Guideline (ERPG)-3, or Temporary Emergency Exposure Limit (TEEL)-3 values less than about 3 ppm] that has been “weaponized” or designed for efficient dispersal as a gas, vapor or aerosol; and, compressed gases with acute toxicity in the same range. The fact that a substance is flammable, combustible, or explosive is not by itself sufficient cause to analyze it in an EPHA. However, a substance should be considered a potential release initiator or promoter if it is combustible or capable of a violent chemical reaction that could cause or enhance the release of other hazardous materials with the ability to cause severe injury or death beyond the immediate vicinity of the release. If a substance meets the following conditions, its flammable or explosive properties should be noted for possible consideration in the EPHA as a factor potentially influencing the release of existing toxic materials: A-8 DOE G 151.1-2 7-11-07 • The substance is flammable or explosive and capable of a violent/energetic reaction (e.g., BLEVE, deflagration, explosion, etc.), and • The energy available in the substance could cause significant damage to facilities/equipment and disperse other substances stored or used in close proximity to it.

The fact that a chemical reacts with other substances is not by itself sufficient cause to analyze it in an EPHA. If an energetic reaction involving substance A could cause the release of hazardous material B, then the reaction should be considered as a potential initiator during the analysis of substance B. If an identified reaction creates an acute inhalation hazard as a by-product and if the quantity created could be a significant hazard beyond the immediate vicinity of the event, then the reaction and its by-product should be considered for analysis in the EPHA. If a substance meets the following test, its chemically reactive properties should be noted for possible consideration in the EPHA, as the source of a toxic release: • The substance will react with other chemicals or materials used or stored in the same location, and • The reaction could be sufficiently energetic to cause significant damage to facilities/equipment and disperse other toxic substances stored or used in close proximity to it, or • The reaction products are toxic and pose an acute airborne hazard. NOTE: The initial identification of potential chemical reactions could be made using the Chemical Reactivity Worksheet developed at the Office of Response and Restoration, National Ocean Service (NOS)/National Oceanic and Atmospheric Administration (NOAA) in cooperation with the Chemical Emergency Prevention and Preparedness Office of the EPA. For chemicals not listed in the Chemical Reactivity Worksheet database, information from the MSDS, SAX’s Dangerous Properties of Industrial Materials, project documentation, and other available sources can be used to determine potential interactions. Application of the Worksheet has some limitations. For example, there is no way to adjust the results to account for specific chemical form, quantity, or concentration, and reaction by-products are not explicitly identified. As a result, some potential reactions identified by the Worksheet may require additional investigation to determine if they are possible, to identify the toxic airborne by-products, and to estimate the resulting consequences. Additional information on the limitations and possible misapplications of reactivity worksheets can be found in the article titled Use and Misuse of Chemical Reactivity Worksheets, published in the September/October 2006 Journal of Chemical Health and Safety. A brief statement of the rationale for the application of these exclusions should be included in the Hazards Survey or EPHA to document which materials were considered and excluded. The possible effect of such materials as an initiator or promoter of a A-9 DOE G 151.1-2 7-11-07 release (for example, due to their combustible, explosive or corrosive properties) of other more hazardous material should still be considered. A.3.2 Recommended Screening Approach This section discusses a recommended facility/site or activity chemical screening approach that embodies the general principles and considerations discussed previously in Section A.3.1. Figure A-2 shows the steps in the recommended screening process, as applied to a single chemical. All chemicals with known or suspected toxic properties should be subjected to screening. Facility chemical inventory records, permits, licenses, shipping/receiving records, Technical Safety Requirements (TSRs), process standards and equipment specifications and any other relevant sources should be used to identify such materials and the maximum quantities of each.

Chemicals should be excluded from further consideration if they do not represent the type or magnitude of hazard that is intended to form the technical basis for hazardous material emergency management programs, as follows: Public Use. Eliminate from further consideration any material that is commonly available to and used by the general public, if the formulation and concentration is the same as for products that are distributed without significant restrictions to the public. Examples include cleaning products, bleach, motor oil, gasoline, and pesticides not designated “restricted use” by the EPA. Dispersibility. Eliminate from further consideration any material that does not present an airborne exposure hazard due to its physical form or other factors. Materials may be eliminated if they meet one of the following tests: • The substance is a solid at normal temperatures and does not contain or include a significant fraction of small particles (less than about 10 microns in diameter) that can readily be suspended in air. • No plausible release mechanism/process is identified by which a large fraction of a solid material can be reduced to small particles (less than about 10 microns in diameter) to be suspended and transported in air. • The substance is a liquid that exhibits a vapor pressure (or partial pressure of a hazardous material in a solution) of less than 1 mmHg at about 25 degrees C. A-10 DOE G 151.1-2 7-11-07 Figure A-2. Chemical Hazardous Material Screening Process These tests should be applied to a substance as it exists under normal conditions of use or storage (i.e., temperature, pressure, particle size, concentration, etc.). The dispersiblity determination should not assume any energetic or dispersive event/condition unless it results from the inherent qualities of the material (such as pyrophoric properties) or process conditions (for example, liquid pumped at high pressure that could, in event of a leak, produce aerosol-sized droplets). To ensure that the dispersibility tests are applied DOE G 151.1-2 A-11 (and A-12) 7-11-07 correctly, the storage and use conditions may need to be determined (by physical inspection, document review, or other means) during the screening process. Any reactive properties that could result in a substance being converted from a non-dispersible to dispersible state should also be understood before screening it out. Human Health Hazard. Materials that have been assigned a NFPA health hazard category rating (or a health hazard rating assigned locally using the criteria published in NFPA 704) 0, 1, or 2 are presumed to not represent significant toxic health hazards to humans. Such materials do not have toxic properties of the type that need to be considered in a quantitative EPHA. Materials that have no assigned value for the health hazard rating should be analyzed in the EPHA, if they exceed the small quantity thresholds discussed below. Quantity. Unit quantities (individual containers) smaller than those “easily and safely manipulated by one person” (i.e., “laboratory scale” quantities) should not be analyzed quantitatively in an EPHA. As used here, containers with capacities of no more than 5 gallons (19 L) for liquids, 40 pounds (18 kg) for solids, or 10 pounds (4.5 kg) for compressed gases are defined as being “easily and safely manipulated by one person.” Individual containers that are being used, and small numbers of such containers kept in ready storage within or very near an end-user facility, may be screened out. As previously noted, a one (1) pound (0.45 kg) threshold value should be used for substances that, because of high acute toxicity (i.e., AELG-3, ERPG-3, or TEEL-3 < 3 ppm) and dispersibility, may represent an extraordinary toxic hazard beyond the local event scene.

B-1 DOE G 151.1-2 7-11-07 APPENDIX B. Example Application of the Hazards Survey Guidance to a Hypothetical DOE Facility B.1 Introduction The purpose of this appendix is to illustrate the application of the Hazards Survey guidance described in the main body of DOE G 151.1-2. Section 1.2 describes the steps of a suggested approach to conducting a facility Hazards Survey. The steps were described quite briefly and in sufficiently general language that they could be applied to a broad variety of facility types. An example application of the approach is presented in this appendix. This appendix is presented in the format of a Hazards Survey Document for a single operating area of a hypothetical DOE site, prepared in accordance with the suggested methodology. Numbered sections (i.e., 1, 2, 2.1, etc.) are parts of the example Hazards Survey Document. The format and content of the example application, presented in the following pages, should be viewed as an acceptable means of meeting the Hazards Survey requirement of DOE O 151.1C and documenting its results. The main sections of the example Hazards Survey are: 1. INTRODUCTION 2. SCOPE 3. HAZARDOUS MATERIAL SCREENING 4. SUMMARY B-2 DOE G 151.1-2 7-11-07 B.2 Example Hazards Survey 123 Area Hazards Survey 1. Introduction This report documents the Hazards Survey for facilities in the 123 Area of the DOE Erlenmeyer Site. The Hazards Survey was conducted in accordance with the DOE Emergency Management Guide (EMG), DOE G 151.1-2, Hazards Surveys and Hazards Assessments, Chapter 1, to fulfill the DOE O 151.1C requirement that a Hazards Survey be conducted to identify the conditions to be addressed by the comprehensive emergency management program. 2. Scope 2.1 Site Description The Erlenmeyer Site is described in Section 3 of the Site Comprehensive Emergency Plan. The 123 Area is described in Section 3.2.2 of that document. 2.2 Facilities Covered This Hazards Survey covers all facilities and operations within the 123 Area. Included are research and development laboratories, warehouses, utility services, and administrative offices. The facilities and the results of the survey are presented in Table 2-1. 3. Hazardous Material Screening Hazardous material screening for the 123 Area facilities was conducted in accordance with the DOE G 151.1-2, Appendix A. Table 3-1 summarizes the information sources used to determine the hazardous material status of each facility. Each item or unit of radioactive material and potentially toxic chemical encountered on the facility inventory records or during the walk- down was evaluated using the screening guidelines from DOE G 151.1-2, Appendix A, Section A.2 or A.3, as applicable. Radioactive items or quantities were eliminated from further consideration (screened out) if they were: • Part of a license-exempt commercial product, • In a solid, non-dispersible form, or • In a quantity less than the DOE-STD-1027-92 Category 3 value. A chemical was eliminated from further consideration if: B-3 DOE G 151.1-2 7-11-07 • It was generally available without restriction to the public in the same form/size, • It was not dispersible, • The health hazard rating was 2 or less, or • The quantity was less than the applicable “laboratory scale” value (5 gallons [19 L] for liquids, 40 pounds [18 kg] for solids, 10 pounds [4.5 kg] for gases).

Based on hazardous material inventory information sources listed in Table 3-1, only the ABC Facility and Building 152 (Water Treatment Plant) are determined to have hazardous material inventories that require quantitative analysis. No hazardous biological agents or toxins are used or stored in any facility within the 123 Area. The screening processes for facilities found to contain hazardous materials are summarized in Tables 3-2 and 3-3. The results of the screening found that the following substances should be quantitatively analyzed in an EPHA: Building 152 Chlorine (facility total = 600 pounds/272 kilograms) ABC Facility Heat source Pu-238 (facility total = 10 kg (4.9E+15 Bq) Anhydrous hydrogen fluoride (facility total = 1320 lbs/600 kg) Methyl Ethyl Badstuff (275 gallons/[1041 L]) NOTE: Facilities are advised to list materials screened out, which are perceived as being “high visibility” or of special interest to the site, facility or public, and to give the specific reasons for the decisions. Examples include plutonium, beryllium and any substance previously analyzed in an EPHA that is being screened out using the most recent guidance. A complete list of the materials considered and the basis for the screening disposition of each should be included or referenced in the survey. 4. Summary As a result of the qualitative Hazards Survey documented in Table 2-1, facilities in the 123 Area can be grouped according to their emergency potential as detailed below. 4.1 Facilities Having Potential for OEs Requiring Classification Based on hazardous material inventory information sources listed in Table 3-1, the ABC Facility and the Building 152 (Water Treatment Plant) are determined to have the potential for OEs that would be classified as Alert, Site Area Emergency, B-4 DOE G 151.1-2 7-11-07 or General Emergency. Quantitative EPHAs are required for these facilities. The EPHA for the ABC Facility is documented in (reference) and for Building 152 in (reference). Because of the potential for OEs requiring classification, the planning and preparedness requirements of DOE O 151.1C, Chapter IV, apply to the ABC Facility, Building 152, and the site as a whole. The Erlenmeyer Site Emergency Plan, ERL-EM-0001, provides for comprehensive and integrated site planning, preparedness, and response for all potential emergency conditions involving the release of hazardous materials on the site. The site plan and implementation procedures, together with the Building/Facility Emergency plans and procedures for the ABC Facility and Building 152, address each of the planning, preparedness, and response requirements of DOE O 151.1C, Chapter IV. 4.2 Facilities Having No Potential for OEs Requiring Classification The following facilities are determined to have the potential only for events or conditions that would be categorized as OEs not requiring classification in accordance with the criteria of DOE O 151.1C, Chapter V. The organization component listed is responsible for maintaining planning and preparedness in accordance with the applicable requirements identified in Table 2-1 and for making specific provisions for timely recognition and reporting of OEs originating in or affecting the facility. Building Number Responsible Organization and Organization Code 101 Craft Services (SL40) 102 Emergency Services (SE55) 103, 104, 106, 108, 109 XYZ Operations (TK41) 113, 151, 152 Site Utilities Engineering (TZ30) 114 ABC Operations (TK44) 117, 118, 121 PQR Laboratory Operations (MX72) 999 Contract Services (CZ00)

B -5 D O E G 151.1-2 7-11-07 Table 2-1. 123 Area Hazards Survey Summary Bldg ID Type/Use Occupancy (total/other than ground floor) Special Conditions/ Designations Hazardous Materials Emergency Conditions a Potential Impacts Applicable Requirements 101 Craft shop 12/0 Haz. waste satellite collection point Paints, solvents, lubricants 1. Structure fire/explosion 2. Natural phenomena 3. Environmental release 5. Malevolent acts 7. Workplace accident 8. External hazards 1,2,5,7,8 - Worker death/injury. 3 -Pollution of water­ way Occupational Safety and Health Administration (OSHA) Employee notification & evac. plan; 40 CFR 117 notification of release to waters 102 Fire Station 8/0 Buried natural gas main ~30m west None 1. Structure fire/explosion 2. Natural phenomena 5. Malevolent acts 7. Workplace accident 8. External hazards 1,2,5,7,8 - Worker death/injury OSHA Employee notification & evac. plan 103 104 108 109 114 117 Offices, modular 24/0 (each) No None 1. Structure fire/explosion 2. Natural phenomena 5. Malevolent acts 8. External hazards 1,2,5,8 - Worker death/injury OSHA Employee notification & evac. plan 106 113 118 121 Offices, multistory 45/20 60/30 45/15 90/48 No None 1. Structure fire/explosion 2. Natural phenomena 5. Malevolent acts 8. External hazards 1,2,5,8 - Worker death/injury OSHA Employee notification & evac. plan ABC Laboratory process 140/50 TSD Facility Radioactive materials Toxic chemicals 1. Structure fire/explosion 2. Natural phenomena 3. Environmental release 4. Haz. Mat. release 5. Malevolent acts 6. Workplace accident 7. External hazards 1,2,5,7,8 - Worker death/injury 3 - Pollution of water-way 4 - Onsite & offsite personnel death/injury OSHA Employee notification & evac. plan; 40 CFR 302 reporting; 40 CFR 355 reporting; 40 CFR 117 notification of release to waters Table 2-1. 123 Area Hazards Survey Summary (cont’d) Bldg ID Type/Use Occupancy (total/other than ground floor) Special Conditions/ Designations Hazardous Materials Emergency Conditions a Potential Impacts Applicable Requirements 999 Offices, multistory 310/150 No None 1. Structure fire/explosion 2. Natural phenomena 5. Malevolent acts 8. External hazards 1,2,5,8 - Worker death/injury OSHA Employee notification & evac. plan 151 River water pump station No routine occupancy No None 1. Structure fire/explosion 2. Natural phenomena 5. Malevolent acts 7. Workplace accident 8. External hazards 1,2,5,7,8 - Worker death/injury OSHA Employee notification & evac. plan 152 Water treatment plant No routine occupancy No Water treatment chemical (chlorine) 1. Structure fire/explosion 2. Natural phenomena 4. Haz. Mat. Release 5. Malevolent acts 7. Workplace accident 8. External hazards 1,2,5,7,8 - Worker death/injury OSHA Employee notification & evac. Plan a Descriptions of emergency conditions are taken from DOE G 151.1-2, Section 1.5, where: 1= Structure fires and explosions; 2 = Natural phenomena impacts; 3 = Environmental releases; 4 = Hazardous material releases; 5 = Malevolent acts; 6 = Workplace accidents; 7 = External hazards. D O E G 151.1-2 B -6 7-11-07 B -7 D O E G 151.1-2 7-11-07 Table 3-1. Sources of 123 Area Hazardous Material Inventory Information Building Hazardous Material Inventory Information Sources 101 Site Hazardous Material Inventory and Tracking System (MITS), 6/5/06. Facility walk-through on 6/23/06. 102 MITS, 6/5/06. Facility walk-through on 6/23/06.

103, 104, 108, 109, 114, 117 MITS, 6/5/06. Facility walk-through on 6/23/06. 106, 113, 118, 121 MITS, 6/9/06. Facility walk-through on 6/24/06. ABC MITS, 6/4/06. ABC Hazards Assessment dated 1/05 and supplement dated 7/06. MWUPPPP Process safety assessment dated 5/05. Facility walk-through on 6/22/06. 999 MITS, 6/11/06. Facility walk-through on 6/19/06. 151 MITS, 6/4/06. Facility walk-through on 6/19/06. 152 MITS, 6/4/06. Bldg 152 Hazards Assessment dated 4/05. Facility walk-through on 6/19/06. B -8 D O E G 151.1-2 7-11-07 Table 3-2. 123 Area Chemical Screening Summary Bldg ID Type/Use Hazardous Chemical(s) Public Use Dispersible NFPA Health Hazard Category Less than Laboratory Scale Quantity? Analyze in EPHA? Notes 101 Craft Shop Paints Solvents Lubricants Adhesives Yes N/A N/A N/A No Commercial products that are used and stored in formulations and quantities commonly available to and used by the general public. 102 Fire Station Pesticides Herbicides Yes N/A N/A N/A No Used to control mice and eliminate weeds. Commercial products used and stored in formulations and quantities commonly available to and used by the general public. 103 104 108 109 114 117 106 113 118 121 999 Offices, modular & multistory Janitorial Supplies (Dry/Liquid) Yes N/A *N/A N/A No Commercial products used and stored in formulations and quantities commonly available to and used by the general public. D O E G 151.1-2 7-11-07 B -9 Table 3-2. 123 Area Chemical Screening Summary (cont’d) Bldg ID Type/Use Hazardous Chemical(s) Public Use Dispersible NFPA Health Hazard Category Less than Laboratory Scale Quantity? Analyze in EPHA? Notes ABC Laboratory process Anhydrous Hydrogen Fluoride No Yes 4 No Yes Stored in sealed steel pressure cylinders containing 100 kg (220 lb) each. Maximum inventory allowed 6 cylinders. Dimethylfor­ mamide No Yes Not Rated Yes No Used as a solvent for small-scale resin production. Typically 1 – 2 gallons in inventory. Therefore, less than laboratory scale. Isopropyl Alcohol No Yes 1 Yes No NFPA health hazard rating less than 2. Used for cleaning, total quantity typically less than 1 gallon. Therefore, less than laboratory scale. Methyl Ethyl Badstuff No Yes 4 No Yes Used in plastic production. Received and handled in 55-gal steel drums, which hold 256 kg (564 lb). Maximum inventory is 5 drums. 152 Water treatment plant Chlorine No Yes 3 No Yes Used for water purification. Stored in 150-lb cylinders of liquefied compressed gas. Typical inventory is 4 cylinders. ABC Laboratory process Cs-137 No No 6.0E+01 No No 100 mCi sealed source that is part of densitometer instrumentation used for testing components within Process Number-2. The source has met sealed source testing requirements specified in ANSI N43.6. Pu-238 No Yes 6.2E-01 Yes Yes Used as the heat source in the manufacture of prototype thermal-electric generators in Process Number-2. Maximum inventory allowed in the facility is 10 Kg (1.3E+05 Ci). Tritium Yes N/A 1.6E+04 N/A No Facility exit signs containing tritium. Typical source strength ~0.5 Ci (~20 GBq)/sign. NRC License-exempt per 10 CFR 30.19. B -10 D O E G 151.1-2 7-11-07 Table 3-3. 123 Area Radiological Screening Summary Bldg ID Type/Use Radioactive Material(s) License Exempt Dispersible DOE-STD-1027-92 Cat 3 Threshold (Ci) Exceeds Threshold? Analyze in EPHA? Notes ABC Laboratory process Cs-137 No No 6.0E+01 No No 100 mCi sealed source that is part

of densitometer instrumentation used for testing components within Process Number-2. The source has met sealed source testing requirements specified in ANSI N43.6. Pu-238 No Yes 6.2E-01 Yes Yes Used as the heat source in the manufacture of prototype thermal- electric generators in Process Number-2. Maximum inventory allowed in the facility is 10 Kg (1.3E+05 Ci). Tritium Yes N/A 1.6E+04 N/A No Facility exit signs containing tritium. Typical source strength ~0.5 Ci (~20 GBq)/sign. NRC License-exempt per 10 CFR 30.19. 2-1 DOE G 151.1-2 7-11-07 2. HAZARDS ASSESSMENTS 2.1 Introduction The purpose of this Chapter is to assist DOE and NNSA field elements in complying with DOE O 151.1C whenever a facility-specific quantitative assessment of the potential release of hazardous materials is required. A hazards assessment must be performed for a facility/site or activity when at least one hazardous material requiring quantitative analysis is identified through the hazardous material screening process conducted as part of the Hazards Survey. The Order requires special planning and preparedness for DOE emergency management programs that need to respond to emergency events or conditions involving the unplanned release of hazardous materials. The scope and extent of these programs will be based on facility-specific hazards through a “commensurate with hazards” approach. The first step in the implementation of this approach for hazardous materials is the quantitative analysis of potential emergencies in an EPHA. EPHAs involve the application of rigorous hazards analysis techniques that provide sufficient detail to assess a broad spectrum of postulated events or conditions involving the potential release of hazardous materials and to analyze the resulting consequences. The screening process and the analysis of identified hazardous materials in a facility/site or activity determine the potential for producing an OE classified as an Alert, Site Area Emergency, or General Emergency. If a potential classifiable OE associated with a facility/site or onsite activity is identified, an Operational Emergency Hazardous Material Program needs to be developed and maintained that establishes additional, more detailed emergency management program requirements than those imposed by the Operational Emergency Base Program. The EPHA performs three roles in a DOE emergency management program. First, by summarizing the processes and systems associated with the hazardous materials, together with the nature and magnitude of the hazards, the EPHA provides the technical planning basis for determining the necessary plans/procedures, personnel, resources, equipment, and analyses [e.g., determination of an Emergency Planning Zone (EPZ)] that comprise the Operational Emergency Hazardous Material Program. Second, the documented EPHA provides an archival record of the data, assumptions, and methods used in developing the technical planning basis for the program; it also reflects the reasoning used to modify the program in response to changes in operations and hazards. The documented EPHA should enable an emergency management program to survive the inevitable turnover of hazards assessment personnel without the loss of continuity that can result from uncertainty about past analyses and decisions. Third, the EPHA performs a key readiness assurance role by providing clear and convincing evidence that facility- specific hazards are well understood by the responsible emergency management planners, and that, if used correctly, the EPHA represents a valid technical foundation for developing an emergency management program that is “commensurate with hazards.”

2-2 DOE G 151.1-2 7-11-07 Of particular importance in performing hazards assessments, especially for sites with multiple facilities, is consistency in the selection and application of analysis techniques, hazardous material release scenarios, and the assumptions and input data used in consequence calculations. A recommended approach for ensuring consistency is to standardize and document ground rules and criteria prior to performing the hazards assessment analyses. The selection and subsequent documentation of EPHA release criteria and analysis techniques, beforehand, ensures both consistency between EPHAs for common scenarios and analyses and consensus among diverse site functions. An effective method for accomplishing consistency and for ensuring consensus among diverse disciplines involved with the EPHAs is through interaction and coordination with a broad scope of interested facility and/or site functions, including operations, programs, Safeguards and Security (S&S), safety, fire protection, and authorization basis and emergency management analysts. Most sites, especially those with multiple facilities, can benefit from the issuance of a formal site-wide procedure for performing hazards assessments. Such a procedure should specify standard analysis methods, inputs, and criteria for performing the hazards assessment analyses, as well as a step-by-step hazards assessment approach and documentation standard that will ensure consistency among the site’s EPHAs. This documented procedure can also streamline the required DOE review and approval process for revised and updated EPHAs, which should significantly decrease the time required to implement approved changes in emergency plans and procedures and emergency response tools [e.g., Emergency Action Levels (EALs)], based on updated and approved EPHAs. To the maximum extent possible, the hazards assessment process should make use of facility description and accident scenarios from SARs/SADs/DSAs, consequence assessment methods used during emergency response, and existing hazardous materials inventories maintained for other purposes. Information available from sources such as SARs/SADs/DSAs, BIO documents, Probabilistic Risk Assessments (PRAs), VAs, Fire Hazard Analyses (FHAs), Environmental Impact Statements (EISs), and other documents that address facility/site or activity hazards or potential consequences may be used to ensure consistency of basic input data. The analyses contained in these sources should be used with caution, however, because the assumptions and methodology applicable to their intended purposes may not be fully compatible with emergency management planning needs. When scheduling EPHA preparation, the schedules for the preparation, review and update of other safety and regulatory compliance documents should be considered. Integrating the EPHA effort with these schedules can increase preparation efficiency and reduce cost. Where possible, the same release parameters and analyses techniques may be used to minimize the differences between the EPHAs and safety/authorization-basis analyses. In order to advance the level of understanding and the capability of performing integrated hazards analysis, a handbook was developed by DOE to emphasize the efficiencies and advantages associated with integrating the numerous hazard analysis methodologies performed under various requirements. This handbook, DOE-HDBK-1163-2003, 2-3 DOE G 151.1-2 7-11-07

Integration of Multiple Hazard Analysis Requirements and Activities, focuses on data exchange among the various analysis methodologies under multiple standards and requirements, where applicable. It is the intention of the handbook to promote further discussion and hands-on experience in encouraging the concept of the integration of hazards analysis. The hazards assessment process for emergency management discussed in this guide promotes this concept of analysis integration. The guidance in this Chapter is directed at operations and emergency management staff responsible for DOE and NNSA facilities at field offices, service centers, and operating contractor organizations. It is expected that emergency management staff will obtain support from site and facility management and from a variety of scientific and technical disciplines within their respective organizations as they conduct and document the analyses described herein. Appendix C provides specific guidance related to the practical definition of “facilities,” “facility boundaries,” and “site boundaries” for use in developing DOE emergency management programs. Appendix D addresses the necessary modifications of the hazards assessment guidance when applying the methodology to onsite transportation activities. Appendix E addresses the development of malevolent event scenarios for the analysis of potential hazardous material releases. Appendix F contains guidance on selecting consequence criteria, computing time-weighted average concentrations, and using the chemical mixture methodology. Appendix G provides backup analysis and documentation supporting guidance related to the treatment of toxic combustion products in EPHA analyses. Appendix H illustrates the application of the suggested hazards assessment method to a hypothetical facility and site. 2.2 General Approach DOE Emergency Management System policy and Order require that hazardous material emergency management programs are responsive to the full range (spectrum) of potential hazardous material release scenarios, including applicable hazardous material types, release magnitudes, and initiating events. The term “release” is used here to mean, primarily, an airborne release. The airborne release pathway typically represents the most time-urgent situation and requires a rapid, coordinated, emergency response on the part of the facility, collocated facilities, and surrounding jurisdictions to protect workers, the public, and the environment. Releases to aquatic and ground pathways, although a matter of serious concern in terms of potential environmental and long-term public health consequences, in most instances do not have the same time urgency as the airborne release. When a release to an aquatic or ground pathway could have a near-term effect on the workers or the public (e.g., through a community water supply), then it should be considered in the hazards assessment. For a single facility (or activity), there may be hundreds of different possible hazardous material release scenarios. To address this range of possibilities, facilities should develop and document a technical planning basis for the facility-specific emergency management program consisting of a manageable number of systematically selected and realistically analyzed release scenarios to represent a spectrum of severity and initiators. The purpose 2-4 DOE G 151.1-2 7-11-07

of this Chapter of the EMG is to provide guidance that will address the process for conducting and documenting the selection and quantitative analysis of potential release scenarios associated with the hazardous materials identified by the Hazards Survey screening process. The recommended steps in the EPHA process are the following: Step 1 Define and describe the facility and operations. Step 2 Characterize the hazardous materials. Step 3 Select scenarios for analysis. Step 4 Analyze scenarios - Estimate source term, - Calculate consequences, - Identify recognition factors, and - Finalize technical planning basis scenarios. Step 5 Document the results of the analysis. Although the basic steps of the process should be accomplished and documented in the order presented, within any given step of the process, there is substantial leeway within which the unique features of the facility, operations, and site can be accommodated. The EPHA should address factors such as initiating events, contributing events, accident mechanisms, equipment or system failures, engineered safety system failures, source terms, material release chemistry and characteristics, environmental transport and diffusion, emergency event or condition observable indicators, exposure considerations, and health effects. Conservative consequence calculations should be performed for the purposes of event classification, initial protective action determinations, response decision-making, and special planning (e.g., collocated facilities, special offsite populations, EPZ determination). The results of the hazards assessment are to be used to determine the EPZs for each facility and site, as well as the emergency classification and initial protective actions for each analyzed event. The observable indicators, or recognition factors, of each analyzed event or condition are identified for use as event classification criteria (i.e., EALs). EPHAs should be prepared and documented in a manner that permits critical review of the analyses and results and, if necessary, reconstruction by independent analysts. However, detailed descriptions of the methods, assumptions, and models need not be included if they are documented elsewhere and referenced (e.g., site-wide procedure for EPHAs). In the remainder of this chapter, the steps in the EPHA process will be discussed. Sections 2.3 and 2.4 address the facility description and the characterization of the hazardous materials associated with the facility, respectively. The selection and analysis 2-5 DOE G 151.1-2 7-11-07 of a spectrum of scenarios is covered in Sections 2.5 and 2.6. Finally, Section 2.7 provides guidance related to documentation requirements for EPHAs. The treatment of several special hazards in the EPHA is discussed in Section 2.8, and Section 2.9 provides guidance on using other sources of safety basis information to accomplish the steps in the EPHA process. 2.3 Define and Describe Facility and Operations (Step 1) A clear, accurate, and unambiguous written and schematic description of the facility, activity, or operation that represents the scope of the EPHA should be provided. This description should provide sufficient detail to support the identification, location, and characterization of all hazards and their potential consequences. For many facilities, the descriptions of the facility and its operations from current SARs/SADs/DSAs or environmental reports should serve this purpose and may be briefly summarized and incorporated by reference.

In some cases, the boundaries of the facility and operations in question will have been previously defined (e.g., by a security boundary or fence). Facility “definitions” used for SAR/SAD/DSA purposes may be applicable. However, the boundaries should be reexamined with the objectives of the EPHA in mind. Sites may group their facilities, activities, and hazards in any of several ways for hazards assessment purposes. Several structures or component units with a common or related purpose may be defined as single “facility,” such as a waste tank farm consisting of a number of units of approximately the same nature and purpose under common management and operational control. On the other hand, a group of dissimilar buildings, operations, and equipment, such as a research reactor with its associated cooling tower, fuel handling and waste storage buildings, laboratory, and hot machine shop may also be considered as one facility for purposes of the hazards assessment. Finally, all the hazards within a single building or structure containing several tenant activities or units, such as process lines, hot cells, or hazardous material storage may be analyzed and documented as one facility, even though the tenant activities have little in common, technically or organizationally. Additional guidance on facility definition is presented in Appendix C. The written facility description should include general information related to the site mission, operations, and physical characteristics, including an assessment of the site exposure to external and natural phenomena hazards. It should include the location of the facility relative to other facilities on the same site, the site boundaries, the nearest public access locations, and transportation networks, such as highways, railroads, and rivers. Particular attention should be paid to including facility specific information critical to understanding and reconstructing the consequence calculations and to information necessary to aid emergency planners in using the analysis results to develop other emergency management program elements. This information should include, but not necessarily be limited to: descriptions and physical parameters for facility containment/ confinement systems; potential leak paths and release points; protective/mitigative systems or features; technical, physical or administrative limits on use/storage of hazardous materials; and, installed process monitors, alarms and/or detection systems. 2-6 DOE G 151.1-2 7-11-07 2.4 Characterize the Hazardous Materials (Step 2) After the facility hazards have been screened, information that describes and quantifies the identified hazards should be assembled and documented to support the development of scenarios and analysis of possible releases. During this step, some substances originally retained for analysis during the Hazards Survey screening may be eliminated from the EPHA scope based on a better understanding of their properties and quantities. In this respect, another level of hazard screening may actually take place as part of the characterization activity. The characterization of both radioactive and chemical hazardous materials should include the following information: • The maximum quantity of the material in appropriate units (pounds or kilograms, curies or becquerels) and its storage or process locations.

• A description of the conditions under which the material is stored or used, including process systems or containers that hold the material and barriers that may impact its release or dispersion, such as shipping containers, buildings, berms, sumps, or catch basins. Where applicable, security and access controls for the storage and use locations should be identified. • The properties of the material that are needed for determination of source term and consequence analysis, such as the physical form and chemical characteristics of the material (e.g., solid, liquid, gaseous, particle size, flammability, chemical reactivity, density), radiological characteristics, and the temperature and pressure conditions under which it is stored, processed, used, or transported. • A description of engineered controls, safeguards, or safety systems designed to prevent or mitigate a hazardous material release. These may include both automatic and manually activated mitigative systems (e.g., fire sprinklers, filters, scrubbers, isolation dampers), as well as passive mitigative features and engineered geometry or configuration controls for fissionable materials. Instruments and systems that would detect actual or potential emergency conditions should be identified. • A description of administrative controls that would prevent or mitigate the initiation of a hazardous material release, such as limits on the total quantity of a material in a single place or container, or restrictions on where certain materials can be used or stored. For criticality accidents, the “inventory” of interest is the total yield of gaseous and volatile fission products from the postulated criticality event(s). Analyses of these postulated criticality events would generally be available in the facility SAR, SAD, or DSA. Where the material consists of a reactor core or irradiated fuel containing mixed fission products, the relevant factors that define the radiotoxicity of the mixture (e.g., enrichment, burn-up, age) should be analyzed and the case that produces the largest 2-7 DOE G 151.1-2 7-11-07 impact selected. The actual isotopic composition of the mixture used for consequence calculations can then be included as an appendix and referenced. For those facilities having a documented vulnerability analysis, the identified targets may include both hazardous materials and essential parts of the system of barriers, controls, and protection features that keep them in a safe condition. The target list is a potential source of information regarding both the quantity of certain hazards and the conditions under which they are stored, handled, and used. Other materials and hazard sources, such as flammable or explosive materials, energy sources, and non-toxic hazardous materials (i.e., NFPA health hazard rating < 3), should also be included in the characterization. The potential for these materials/hazards initiating releases of radioactive or chemically toxic materials contributing to the dispersal of those materials, degrading the effectiveness of safety systems, incapacitating workers causing a process upset, or posing an asphyxiation hazard to collocated workers, should be considered. Available information concerning the reactive properties of the hazardous materials should be assessed and the possibility of interactions between substances considered. 2.5 Select Scenarios for Analysis (Step 3)

The objective of this step in the hazards assessment process is to select, for detailed analysis, potential release scenarios associated with the hazardous materials characterized in Step 2. These analysis cases will ultimately represent a spectrum of possible scenarios that will serve as the technical planning basis for the facility/site or activity emergency management program. The specific scenarios/cases to be analyzed in the EPHA should be chosen through a systematic examination of: • All the hazardous materials in the facility; • Primary barrier(s) that maintain each material in a safe condition • Modes by which each primary barrier could fail • Initiating events or conditions that could cause barrier failure modes • Release conditions associated with the failure mode or the initiating event, including pathways and mitigation devices through which the substance could be released to the environment Applicable combinations of the hazardous materials in the facility and potential scenario characteristics will define a set of analysis cases, where each release scenario will be represented by combinations of the following four terms: • Hazardous material [MAR] 2-8 DOE G 151.1-2 7-11-07 • Failure mode • Initiating event or condition • Release condition(s) This process of developing potential scenarios by constructing combinations of these four parameters will ultimately lead to a complete listing of the applicable cases. The next section introduces a recommended minimum set of event or condition types to be considered for analyzing hazardous material releases. A systematic approach for developing a manageable number of representative scenarios for each hazardous material in a facility is introduced in Section 2.5.2. 2.5.1 Types of Events and Conditions to Be Considered A set of events and conditions should be postulated and analyzed that represents the full spectrum of possible initiators and severity levels involving releases of hazardous materials that could affect workers, the public, or the environment. A spectrum of potential events ranging from low-consequence, high-probability events to high- consequence, low-probability events, including those considered to be beyond-design­ basis, should be postulated and realistically analyzed. The spectrum of events and conditions analyzed should include those exclusively affecting onsite personnel, as well as those also affecting the offsite public. Analysis of a spectrum of events does not mean analysis of every imaginable event. The goal is to create a comprehensive picture of the types of events and a range of associated consequences that could occur at a facility. This comprehensive picture of events and consequences will then serve as the basis for emergency response planning. The Hazards Survey described in Chapter 1 identifies the types of emergency events and conditions and the potential impacts of such emergencies to be addressed by the DOE emergency management program for the facility. If facilities have sufficient quantities of hazardous materials, some of those types of emergencies (e.g., accidents, natural phenomena, fires) will have the potential to cause the airborne release of hazardous materials with significant health and safety consequences outside the facility. Thus, the Hazards Survey for a facility provides an initial set of potential release events and initiators to be considered for analysis.

Initiating events and failure mechanisms considered in the hazards assessment should include traditionally defined “accidents,” as well as events arising from external causes and malevolent acts. Scenarios should be included that represent both the success and the failure of control measures and engineered safety systems (e.g., containment systems, fire suppression systems, filters, administrative controls, safeguards and security systems). A minimum set of events is recommended for analyzing hazardous material releases identified as candidates for a hazards assessment. The events that are appropriate to the specific facility should be selected from the following groups: 2-9 DOE G 151.1-2 7-11-07 1. “Accident” Events: • Fire • Explosion • Loss of confinement or containment (i.e., spill or atmospheric release) • Process upsets • Criticality • Onsite transportation accidents “Accident” event initiators include failure causes such as corrosion, manufacturing defects, malfunctioning equipment or control systems, interaction of reactive materials, external impact, incapacitation of workers, and procedural or human error. (The analysis of onsite transportation accidents is addressed in Appendix D). 2. Natural Phenomena Events: • Earthquakes • Tornadoes • Lightning and Hail • Floods • Winter Storms Most natural phenomena events to be analyzed can be selected from the SAR/SAD/DSA (if available) for the facility. Typically, two events are defined for each type of natural phenomenon - DBE used to determine safety control systems, as well as an “extreme,” beyond-DBE, considered “incredible” in SAR/SAD/DSA analysis. Both events are derived from historical data. If no SAR/SAD/DSA is available, the event(s) can be obtained directly from historical data for the region. 3. External Events: • Wildland fires • Aircraft crash • Offsite transportation accidents • Offsite commercial facility or utility accidents 2-10 DOE G 151.1-2 7-11-07 External events have the potential to be the initiating event for the onsite release or loss of control of hazardous material, either directly or by disruption of operations or processes onsite. Historical data can provide information on the susceptibility of the area to wildland fires and potential aircraft sizes can be determined from experience with aircraft operating in the vicinity. A review of road, river, and railway transportation networks near the site boundary (or through the site) provides indications of potential hazardous material transport accidents. In addition, nearby commercial facilities or utilities (e.g., chemical plants, pipelines, water treatment plants) may contain hazardous materials that pose a threat to facilities onsite. 4. Malevolent Events: • “Minor” Scenario • “Moderate” Scenario • “Extreme” Scenario Malevolent events (e.g., vandalism, sabotage, terrorism), including the use of explosives or flammable material, are possible hazardous material release initiators within the scope of the emergency planning and the EPHA. Appendix E provides guidance on the selection of malevolent event scenarios.

High-probability, low-consequence events should be addressed in facility emergency plans (and in EPHAs) because of their potential impacts on workers in the affected facility and those nearby. Both malevolent events, which are seldom analyzed in SARs/SADs/DSAs, and beyond-DBEs should also be included in the EPHA. “Extreme” malevolent events and beyond-DBEs typically represent the upper end of the consequence spectrum for which prompt recognition and response may be essential to the mitigation of both the event and its health and safety consequences. Emergency management represents the “last line of defense” in protecting workers and the public, and, hence, emergency events or conditions should not be excluded from EPHA analysis, based solely on calculated occurrence probabilities or designation as “incredible” or “beyond extremely unlikely”. Some catastrophic events (e.g., a dam failure that floods an entire site, meteor strike, nuclear detonation) may be candidates for exclusion from emergency management planning, not simply based on a probability criterion, but on the grounds that the consequences of the initiating event will effectively overwhelm or negate the planned initial (early) phase response to any resulting release of hazardous materials. In such circumstances, the initiating event itself and its immediate safety implications become the overriding priority and focus of any initial response activities. For such events, mitigation of which is expected to be well beyond any site’s response capabilities, the principal function of the local (site/field element) emergency management component is to recognize the occurrence and initiate earliest possible notifications of DOE Headquarters and others. Those notifications may best be initiated by declaring an OE classified as a General Emergency. However, it is neither necessary nor useful to attempt DOE G 151.1-2 2-11 7-11-07 a quantitative analysis of the hazardous material consequences of such catastrophic events in the EPHA to provide a consequence estimate as the basis for the emergency classification. General criteria for the classification of catastrophic events can be included in site EAL procedures or higher-level management directives based on a qualitative assessment of the type and magnitude of events and expected consequences. 2.5.2 Selection of a Spectrum of Scenarios A process consisting of the following sequence of steps is an acceptable method for selecting a spectrum of scenarios related to the hazardous materials in the facility: identify MAR(s) in the facility; identify primary barrier(s); select failure mode(s); identify initiating event(s); and identify release condition(s). This selection process is described in detail below. A. Identify MAR(s) in Facility The selection process begins by identifying the hazardous substances at each location within the facility. Each quantity or unit of a hazardous substance is the Material-at-Risk (MAR), as that term is used in DOE-HDBK-3010-94 (and discussed in Section 2.6, below), for one or more possible release scenarios. Examples of MARs include: • Nitric acid in an outdoor storage tank • Radioactive liquid in a waste processing system • Chlorine in a cylinder attached to a gas manifold • Solid radioactive waste in a waste accumulation area A facility can contain one or multiple MARs. In some instances, the MAR for an event affecting the entire facility (e.g., earthquake, fire) might include all the material located in the facility. This will be addressed in the discussion of the source terms in Section 2.6.

B. Identify Primary Barrier(s) The physical or administrative features that maintain the hazardous substance in a safe condition should be identified for each MAR. The primary barrier is generally the one physically nearest to the material. In the case of gaseous or liquid materials, the tank, cylinder, process piping, or other container is usually the primary barrier. For materials that are prevented from being released by their own structure or physical form, that form or structure can be regarded as the primary barrier. C. Select Failure Mode(s) Failure modes are the ways in which the primary barrier might lose its integrity or its ability to perform the function of controlling or confining the hazardous material. Failure modes should be selected that are applicable to the primary barrier for the particular MAR being addressed. The following are examples of failure modes of the primary 2-12 DOE G 151.1-2 7-11-07 barrier that might apply to the MAR examples given above and the types of release that might be produced: • Puncture (of the nitric acid tank, causing spill of liquid) • Fatigue crack (in the pipe carrying pressurized radioactive liquid, causing spray leak) • Impact fracture (of the chlorine cylinder stop valve, venting a pressurized gas) • Combustion (of solid radioactive waste material, releasing contaminants) For radioactive materials, identification of the failure modes is necessary to make use of the source term information from DOE-HDBK-3010-94. It also helps align the EPHA consequence calculations with authorization basis safety analyses, a key element in the integration of facility hazards analyses. See DOE-HDBK-1163-2003, Integration of Multiple Hazard Analysis Requirements and Activities for guidance on this subject. Selecting failure modes and their size/degree is also an initial step in modeling chemical releases using calculation methods such as those described in EPA 550-B-99-009, Risk Management Program Guidance for Offsite Consequence Analysis. The first and most important failure mode to be identified for each MAR is the one that produces the bounding (largest possible) source term, either in terms of total amount of material released or the rate of release to the environment. For facilities covered by authorization basis safety analyses, this case is likely to correspond to an analyzed bounding event (DBE or Beyond-DBE). Using the earlier MAR and failure mode examples, reasonable bounding source terms might correspond to the following cases: • Spill of the entire contents of the nitric acid on a flat surface at the highest average daily temperature, producing the largest expected evaporative (airborne vapor) source; • Spray from a pipe crack of the size that will produce the maximum mass release rate of respirable-size aerosol droplets, continuing for a time corresponding to the expected duration of the liquid transfer operation; • Release of the entire contents of a chlorine cylinder over a period of 15 minutes (the averaging time used for comparison with the applicable exposure criterion); and • Burning of the entire contents of a waste accumulation area, with release of the bounding fraction (from DOE-HDBK-3010-94) of the largest amount of radioactive material expected to be in the waste material.

Once the bounding release is identified, one or more additional cases may be needed to adequately represent the range of possibilities. If the consequences of the bounding case are below the threshold for classification at the Alert level, there is little reason to analyze additional cases because any smaller releases will also fall below the threshold for DOE G 151.1-2 2-13 7-11-07 classification. However, this may only become evident when final consequence calculations are performed. The following represents a set of failure modes that might apply to a nitric acid tank: • Puncture (or crack) low on the tank, which would produce an evaporative source limited by the area of the confinement curb/berm • Puncture/crack at a higher level, which would produce splash/spray source of aerosols, in addition to the evaporative source • Overturning/toppling, such that all or most of the tank contents end up outside the curb, producing a larger evaporation surface and source The choice of the spectrum of sizes or degrees of failure (modes) that will apply to the MAR under consideration is the key to the selection approach. If this initial selection of the “spectrum” of failure modes is done carefully and methodically, based on a clear understanding of the features/characteristics of the primary barrier and the MAR, then the spectrum of selected scenarios that is the final product of the process will provide a solid foundation/basis for emergency planning. The results of this step include combinations of MAR and failure mode for each MAR and its associated failure modes identified in the facility. D. Identify Initiating Event(s) The next step in the process is to identify initiating events/conditions that could apply to each failure mode (i.e., cause the failure). The analyst should postulate a range of initiators applicable to the specific facility/site or activity, starting with the guidance presented in Section 2.5.1 and identifying those that could produce the failure mode under consideration. (Malevolent event initiators should not be considered at this time, but will be addressed in accordance with the guidance in Appendix E.) In addition, the analysis should indicate whether a specific failure mode would be exclusively or most likely associated with a particular initiating event or condition, OR, conversely, if that particular release could NOT result from a certain event/condition. Examples of initiating events that might be considered include: fire, explosion, loss of electrical power, material/manufacturing defect, operator error, and natural phenomena impacts. (Cf. Section 2.5.1) For example, a “puncture” failure of the nitric acid tank might result from impact by a truck or forklift, which, in turn, might be attributed to human error. The puncture might also be caused by a natural phenomenon (wind-driven missile) or an external event (gas explosion in a nearby facility). This step associates one or more initiating events or conditions with the failure mode under consideration. This step results in a set of failure modes (for a particular MAR), each associated with one or more initiating event(s) or condition(s), that is, combinations of MAR, failure mode, and initiating event. The next step identifies the last parameter(s), which 2-14 DOE G 151.1-2 7-11-07 represents factors that influence the release of the material to the environment (i.e., outside the facility/building). E. Identify Release Condition(s)

Events or conditions that could influence the progression of the scenarios identified above, or alter the magnitude or nature of the associated consequences, should be identified in this step. These events or conditions, referred to as release conditions, represent the status or functional condition of structures and mitigation systems consistent with the impact/influence of the chosen initiating event. These release conditions can affect the magnitude, rate or location (elevated vs. ground level) of the release to the environment. For example, failure of fire suppression systems to activate following initiation of a fire would change the event progression. Likewise, different levels of combustible loading in a given area might increase or decrease the magnitude of the fire. Either or both release conditions might affect the degree of damage to the facility or quantity of hazardous material released. In the nitric acid tank example, an installed curb or berm may limit the size of the spill and hence the evaporative source. The release rate will depend on whether, for the particular initiating event under consideration, the curb/berm can be expected to limit the pool surface area. Whereas puncture of the tank by one event (missile) might reasonably be expected to spill the contents within the curb/berm, thereby limiting the pool surface area and evaporative source, a seismic event might overturn (topple) the tank, causing all or part of the liquid to spill outside the curb where it could spread out and evaporate from a larger surface area. If the operation of an engineered feature can be determined at the time of an event, then the performance of the mitigation feature (and the resulting source term mitigation) is known. If the ultimate release to the environment accounting for the mitigation is sufficiently different from any other analyzed case, then separate analysis cases should be identified that represent the performance and the non-performance of the mitigation function. For bounding events that correspond to a safety basis DBE, the performance of the design features that were credited in that analysis can often be determined from the SAR/SAD/DSA, and additional analysis cases can be constructed that take into account different degrees of mitigation. For example, a filtered ventilation exhaust via an elevated release point will reduce consequences from a release inside a building by removing part of the airborne aerosol and allowing greater dispersion of the plume before it encounters a ground level receptor. If the spray leak discussed above occurs inside a building and the ventilation exhaust function is maintained, one source term (and release point) would apply. If the exhaust system does not operate and the structure is damaged, a second case would have to be identified in which the release occurs at ground level and is unfiltered. If the exhaust system does not operate but the structure remains intact, a third case may even be needed to represent attenuation of the source term by static confinement. DOE G 151.1-2 2-15 7-11-07 The identification of release conditions is the final step in the selection of a spectrum of scenarios for analysis. The set of release scenarios (or cases) selected for detailed analysis will consist of combinations of MAR, failure mode(s), identified initiating event(s), and, finally, identified release condition(s) that may influence the location or magnitude of the release. The next step (Step 4) involves the analysis of each release scenario/case [i.e., MAR-failure mode-initiating event-release condition(s) combination] to characterize the release to the environment by producing an estimate of the source term, calculating the consequences, and identifying recognition factors (if available) for each scenario.

2.6 Analyze Scenarios (Step 4) Once the full range of possible releases has been identified and representative cases selected in accordance with the preceding sections, each case should be analyzed and the potential consequences should be calculated to determine the areas potentially affected and the need for personnel protective actions. In addition, the analysis includes the identification of recognition factors for each scenario and the development of a final set of technical planning basis scenarios using the previous analyses of consequences and recognition factors. This step in the hazards assessment process consists of the following analysis components: • Estimate source term • Calculate consequences • Identify recognition factors • Finalize technical planning basis scenarios Methods and models used to calculate consequences should be documented such that the analyses and their results can be critically reviewed and, if necessary, reconstructed by independent analysts. Detailed descriptions of the methods, assumptions, and models (e.g., dispersion models, dose codes, or other complex calculation methodologies) need not be included in the EPHA if they are documented elsewhere and appropriately referenced. 2.6.1 Estimates of Source Terms The source term (i.e., release to the environment) associated with MAR primary barrier failure mode(s), initiating event(s), and release condition(s) should be calculated. For each possible failure mode of the primary barrier (for example, puncture, corrosion/ oxidation, explosive shattering), the release fraction or release rate values from the DOE source term handbook, DOE-HDBK-3010-94. can be used to estimate the amount of radioactive material that would become airborne. Selection of failure mode and size are implicit in the modeling choices that need to be made to calculate chemical releases using 2-16 DOE G 151.1-2 7-11-07 methods such as those described in EPA 550-B-99-009, Risk Management Program Guidance for Offsite Consequence Analysis. Radiological Source Terms. After failure modes have been identified for the primary barrier or containment system associated with each hazardous material, a quantitative estimate of the source term, the amount ultimately released (or rate of release) to the environment, can be developed using the method described in DOE-HDBK-3010-94. The source term is defined as follows: ST = MAR x DR x ARF x RF x LPF Or ST = MAR x DR x (ARR x t) x RF x LPF Where: ST = Source Term (Ci or Bq) MAR = Material-at-Risk (Ci or Bq) DR = Damage Ratio (fraction) ARF = Airborne Release Fraction ARR = Airborne Release Rate (fraction/hour) t = Release Duration (hours) RF = Respirable Fraction LPF = Leak Path Factor (fraction) Material-at-Risk (MAR). For each initiating event, develop a quantitative estimate of the Material-at-Risk (MAR), the amount of material available to be acted on by a given physical stress. The maximum inventory that may be affected by the initiating event is typically used to represent the MAR. For a given analysis, the MAR will be based on factors such as the type and magnitude of the initiating event, the spatial distribution (separation) of the inventory, and administrative controls. For example, consider a facility with a process line producing items that are placed in shipping containers and then transferred to a shipping/receiving area. The MAR for an event affecting the entire facility (for example, a catastrophic earthquake) might include all the material in the process line, all the product in shipping containers still within the process area, and all the product material stored in the shipping/receiving area. The MAR for an explosion in the process line might be the maximum quantity allowed by administrative controls for that process. The MAR for a handling mishap involving a single shipping container might be either the physical capacity or the licensed maximum contents for that type of container.

Damage Ratio (DR). The Damage Ratio is the fraction of the MAR impacted by the actual conditions under evaluation. The DR is usually estimated based on engineering DOE G 151.1-2 2-17 7-11-07 analysis of the response of the materials involved to stresses of the type and level generated by the event. The DR value will depend on the specific initiating event and the definition of MAR for that event/condition. In the example above, if the MAR for a handling mishap involving a single shipping container were defined as the contents of one container, the DR for a puncture of that single container would be one (1). On the other hand, if the MAR is defined to include all the material in “n” shipping containers subject to handling mishaps, the DR for an event that punctures a single container is 1/n. DOE-HDBK-3010-94 provides information on DRs for various phenomena. Airborne Release Fraction (ARF). The ARF is the fraction of material suspended in air following physical stress from a specific event. For events of short duration, the ARF is a fraction of the material affected (i.e., of the MAR times DR). For processes that act continuously over a period of time to suspend aerosols (such as aerodynamic entrainment or resuspension) a release rate is required to estimate the consequences. Airborne Release Rates (ARRs) are based on measurements over an extended period of time from a particular mechanism. Recommended ARF and ARR values are published in DOE­ HDBK-3010-94 for a variety of release phenomena. Respirable Fraction (RF). The Respirable Fraction is the fraction of the airborne material that can be inhaled and thereby contribute to the radiation dose to an exposed person. The RF is commonly defined as the mass fraction of the airborne material that is in the form of particles of 10 micron Aerodynamic Equivalent Diameter (AED) and smaller. However, applying the source term equation to materials such as radioactive noble gases that do not produce their effect by the inhalation pathway requires that a somewhat more general definition of the RF be used. For such materials, DOE-HDBK-3010-94 recommends the ARF value of 1.0 for condensable and noncondensable gases. All materials in the gaseous state can be transported and inhaled; therefore, an RF value of 1.0 is assumed for analysis purposes. Leak Path Factor (LPF). The Leak Path Factor quantifies the combined effects of any secondary barriers and other mitigating features. In the case of material aerosolized or vaporized inside a glovebox within a building, the LPF represents the fraction of the total aerosol or vapor that is ultimately released to the environment through exhaust filters, door seals, and other leakage paths. Realistic values should be used in developing the LPF for the particular event. To determine the overall LPF, the effectiveness of individual barriers and mitigating features should be estimated. For example, exhaust filters may have a rated or tested efficiency of 99.95 percent for the first stage and 99 percent efficiency for subsequent stages. The building walls may be assumed to be intact in some scenarios with all the release through the filters, while other scenarios may involve damage to the walls, resulting in part of the release being unfiltered. The methods described in EPA 550-B-99-009, Risk Management Program Guidance for Offsite Consequence Analysis, Appendix D, may be used to represent the effect of building confinement.

DOE-HDBK-3010-94 provides Airborne Release Fractions (ARFs), Respirable Fractions (RFs), and Airborne Release Rates (ARRs) applicable to many types of releases. The 2-18 DOE G 151.1-2 7-11-07 bounding ARF, RFs, and ARRs listed in the DOE-HDBK-3010 are normally most appropriate for use in hazards assessments. Accident-specific ARF, RF and ARR values derived in other safety documents can also be used in the hazards assessment. If no specifically applicable values can be found, the final release fraction values for Hazard Category 2 cited in DOE-STD-1027, Attachment 1, may be used to represent the ARFxRF. Chemical Source Terms. The conceptual approach embodied in the source term equations presented above for radioactive materials can also be applied to chemicals. However, no compendium of values for ARF, ARR, and RF currently exists and it will be necessary to derive values for these parameters from material properties using basic physical and chemical principles. EPA 550-B-99-009, Risk Management Program Guidance for Offsite Consequence Analysis, contains useful information on modeling a number of different toxic gas and liquid release phenomena. Alternatively, any of several computer codes can be used to determine chemical source terms and to model their transport and dispersion. Many of the available models are described in Directory of Atmospheric Transport and Diffusion Consequence Assessment Models, FCM-I3-1999, Office of the Federal Coordinator for Meteorological Services and Supporting Research (OFCMSSR), March 1999, available at: http://www.ofcm.gov/atd_dir/pdf/frontpage.htm. Chemical source terms for reaction product formation (e.g., two chemicals spilling and mixing) are normally determined by manual calculation using conservative assumptions regarding the rate and completeness of the reaction. Models or analysis techniques used to develop chemical source terms should be documented and the justification for their use provided. 2.6.2 Consequence Calculations After all identified combinations of MAR, failure mode(s), initiator(s), and release condition(s) have been considered and the associated source terms recorded, the consequences of each release scenario/case, for which a source term has been estimated, should then be calculated and recorded. Methods and Models for Consequence Calculations. The consequences of hazardous material releases should be estimated using models and calculation methods that are most appropriate to the material released and to the physical characteristics of the site and its atmospheric dispersion conditions, and, if applicable, hydrologic dispersion conditions. Generally, the consequence assessment models used for emergency planning and response purposes at the facility should be used to conduct this hazards assessment. The selection of dispersion and consequence models should be justified in the EPHA for each facility. Specifically, the applicability of the model to the release mode, the site geographic features, and atmospheric conditions typically experienced at the site should be described. The results of any experimental verification or validation of the models should be cited as well as any known limitations or sources of inaccuracy. The model capabilities with regard to factors such as plume buoyancy, dense gas effects, building wake, surface roughness, gravitational settling, and dry deposition should be described. http://www.ofcm.gov/atd_dir/pdf/frontpage.htm DOE G 151.1-2 2-19

7-11-07 As previously indicated, a listing of available codes is provided in Directory of Atmospheric Transport and Diffusion Consequence Assessment Models. The following modeling recommendations are provided as guidance to consequence analysts: • Use of a straight line Gaussian model as the atmospheric dispersion portion of the code is acceptable in most cases for emergency planning. • Dose Conversion Factors (DCFs) and exposure parameters embedded in radiological computer codes should be verified to ensure that they are consistent with the desired results [e.g., total effective dose equivalent (TEDE) or committed effective dose equivalent (CEDE)]. DCFs from current International Commission on Radiological Protection (ICRP) publications should be used for consequence calculations. The same DCFs should be used to calculate onsite (worker) and offsite (public) doses for the EPHA (see Appendix F). • If computer codes are used to calculate chemical consequences, inputs and model choices representing the release (source term) should be selected to ensure that the output (predicted concentration) values are consistent with the criteria against which they will be compared (15 minute time-weighted average concentration). See Appendix F for additional guidance on selecting consequence criteria and computing time-weighted average concentrations. • For chemical mixtures and concurrent releases of different substances, the consequences should be assessed using the SCAPA default methodology for analysis of airborne exposures to mixtures (see Appendix F). Concurrent releases should only be analyzed if a plausible scenario exists by which quantities of different substances, each exceeding a laboratory scale threshold discussed in Appendix A, could be released from the same location at the same time. Concurrent releases of dissimilar substances that, because of separation by distance or physical barriers, could result only from extreme malevolent acts or catastrophic events (such as major fires, airplane crashes, severe natural phenomena impacts, and building collapse) need not be analyzed. • If a significant waterborne pathway exists (i.e., potential for a spill into a waterway with a downstream public water supply intake), site-specific calculation of downstream concentrations over a range of spill volumes should be performed. Dispersion Conditions For EPHA Calculations. At least two sets of dispersion conditions should be considered in computing consequence versus distance for each source term: • Conservative Conditions. The first case of an assumed ground level release should correspond to the 95 percent worst-case relative concentration (X/Q) based on an appropriate wind speed and stability combination for the particular site. If such a determination has not been made for the site, default to a wind speed of 1 m/sec (measured at a height of 10 meters) and Stability Class F to approximate the 95th percentile X/Q. 2-20 DOE G 151.1-2 7-11-07 For an elevated release, the conservative condition may need to be determined by trial. In general, the conservative condition should be the combination of stability class and wind speed that results in the ground level consequence exceeding the Protective Action Criterion (PAC) at the greatest distance from the source. However, if the PAC is not exceeded at ground level, the conservative condition should be that which produces the highest consequence to a ground level receptor. If the dispersion condition meeting the above criterion occurs significantly less than 5 percent of the time at the source location, a less severe combination of wind speed and stability that might be expected approximately 5 percent of the hours in a year may be selected for the conservative case.

• Average Conditions. The second case should approximate a typical set of conditions for the site, such as the average wind speed and most prevalent Stability class averaged over the compass sectors. If such information is not available, D stability and 4.5 m per second wind speed are acceptable assumptions. Consequences calculated using the selected conservative dispersion condition should be used to develop EALs and default (i.e., pre-planned) initial protective actions and to determine the size of the EPZ. Use of direction-specific atmospheric dispersion factors for these purposes is strongly discouraged. Consequences calculated using average dispersion conditions are for general reference and response planning purposes only. The “typical” or “average” results are used in conjunction with the “conservative” case results to provide perspective on the risk associated with each scenario. These results may be useful in offsite planning discussions with local authorities and as a resource for emergency response personnel. In general, the use of real-time meteorological conditions as a factor in determining event classification and initial protective actions is not encouraged. Doing so requires a sophisticated understanding of the local atmospheric transport/dispersion environment, as well as accurate information on current meteorological conditions and a high degree of confidence in the forecast. It also complicates, and potentially lengthens, the decision processes. The need for reliable real-time weather information and on-call meteorological expertise, together with the added complexity of the decision process, make such an approach unsuitable for reaching timely, conservative and anticipatory classification and protective action decisions as required by DOE emergency management policy. Consequence Calculations for EPHAs. Consequences of each radiological and chemical release should be calculated and summarized in the form of a graph or table that gives the dose (TEDE) or concentration (the highest 15-minute time-weighted average concentration) versus distance, extending out to a distance beyond which PACs [i.e., (Protective Action Guides (PAGs) for radioactive materials; and AEGLs, ERPGs, or TEELs for chemicals] are exceeded (Cf. Appendix F). These summarized results can then be used to estimate consequences at receptor locations relevant to each facility, including the facility boundary and nearest site boundary. This data can be used during a response to estimate (interpolate) consequence values at other locations rapidly. DOE G 151.1-2 2-21 7-11-07 Consequences at the facility boundary and nearest site boundary are used for determining the emergency classification and developing EALs corresponding to each analyzed event. In addition to calculating consequences at specific receptors, the maximum distances at which consequences exceed the applicable PAC are used to develop default (i.e., pre­ planned) initial protective actions. Maximum distances at which consequences exceed the PACs and Thresholds for Early (acute) Lethality (TELs) (Cf. Appendix F) are both considered in developing EPZs. The distances at which PACs and TELs might be exceeded under the most severe credible accident conditions are important considerations in defining the EPZ. Consequences at Receptors of Interest. Calculation of consequences at key receptors provides the emergency planner with essential parameters that impact classification decisions and protective action determinations.

Facility Boundary. Conceptually, the facility boundary is the line of demarcation between the facility, together with its immediate vicinity, and the remainder of the site. The consequences at the facility boundary distance are used to distinguish between events that have only a local impact (i.e., on the facility occupants and associated workers at or near the scene of the event) and events that impact areas of the site outside the immediate vicinity of the affected facility. For purposes of determining the appropriate emergency class for postulated hazardous material releases, a distance of 100 m should be used to represent the facility boundary. Other considerations in defining the facility boundary are discussed in Appendix C. For determining which release scenarios warrant declaration of an Alert, the analyses should estimate the doses and concentrations at the facility boundary or within the facility boundary at about 30 m from the point of release, depending on the specific criteria selected for defining the Alert for all facilities at the site (Cf. DOE O 151.1C). Other Onsite Receptors. Other onsite receptor locations of interest should be identified for each facility, including: • Adjacent facilities with significant occupancy; • Protected area boundaries; • Any locations accessible to the general public, such as roads, visitor centers, parking lots; commercial (non-DOE/NNSA) facilities and operating areas on the site; and • Emergency response facilities, such as Emergency Operations Centers (EOCs), evacuation staging areas, medical aid stations, or fire stations. Site boundary. The site boundary receptor is the nearest location to the facility where DOE does not have full ownership and control over access to the property. An event that may produce consequences exceeding a PAC at or beyond the site boundary is to be classified as General Emergency because of the need for full involvement of offsite authorities in the protective response. In some cases, it may be reasonable to treat onsite 2-22 DOE G 151.1-2 7-11-07 locations that are accessible to the general public, such as roads, visitor centers, parking lots, or non-DOE (commercial) facilities, as site boundary receptors. Additional considerations in defining site boundary receptors are discussed in Appendix C. Other Offsite Receptors. These include locations or facilities that represent specific emergency planning/response problems or issues, such as schools, hospitals, nursing homes, prisons, industrial complexes, evacuation routes, major transportation facilities, EOCs, and concentrations of population. Offsite receptors relevant to the ingestion exposure pathway should include dairy farms, orchards, truck farms, and public water supply intakes. 2.6.3 Identify Recognition Factors While identifying and analyzing potential release scenarios and their consequences, any means or recognition factors (i.e., observable indicators) by which an analyzed scenario or a distinct variation of it might be detected and recognized should be recorded. These recognition factors may include such things as direct human observation of the initiating event or the barrier failure, effluent monitoring instrument readings, physiological effects experienced by persons exposed to the hazardous material, or building (structure) damage expected to cause failure of the barrier (such as roof collapse on a building with contaminated ventilation ducts and filters). To the degree possible, the analyst should record the level or value for each indication that would be associated with the analyzed scenario (such as the specific reading on a pressure gage or observed liquid level in a tank). Many hazardous material releases will be first identified and recognized by outward indications of the “initiating event.”

Although the analysis and documentation of recognition factors is completed only after the source term estimate and consequence calculations are done for the final set of scenarios, the validity of the observables (as indicators for specific scenarios) will have been examined to some degree during the process of scenario selection. Recording the results of that examination as it is being done can eliminate the need to repeat the effort during the final phase of the scenario analysis. For each analyzed scenario (i.e., for each combination of MAR, failure mode, initiating event, and release condition), recognition factors should be identified, if available. DOE G 151.1-4, Chapter 4, provides further guidance on the nature of the recognition factors and how they are used in developing EALs. 2.6.4 Finalize Technical Planning Basis Scenarios The final step in the analysis involves the exclusion of scenarios that represent nearly duplicate consequences or no unique observable indicators that allow them to be distinguished from another case. This review process causes each possible combination of MAR, barrier failure mode, initiating event and release condition(s), including the consequences and recognition factors, to be actively considered and then either retained as part of the technical planning basis or discounted. In general, a case would be retained if: DOE G 151.1-2 2-23 7-11-07 1. The consequences are sufficiently different from other case(s) that it would be classified at a different level, AND 2. The recognition factors are sufficiently different that the case could be reliably classified at a level different from other case(s) (i.e., the case could be distinguished from other analyzed cases within a short time after occurrence). In other words, all of the scenarios might not be unique in terms of the key emergency management characteristics, namely, the consequences and the recognition factors. If two scenarios were not distinguishable using observable indicators, then the one with the most severe consequences would be selected. On the other hand, if two cases have nearly the same consequences, then only one need be included in the planning basis. The general or specific reasons for discounting cases (or groups of cases) should be recorded for future reference. If the selection of analysis cases is done by applying the above tests to each possible combination of MAR, failure mode, initiator, and release condition(s) at the time the case is conceived in the logical sequence of steps of the methodology, then it may not be necessary to describe and tabulate the entire set of combinations. Many combinations could conceivably be eliminated as the step-by-step process is accomplished using the criteria described above. The approach described in this section lends itself to this modification for the experienced analyst or as the analyst becomes more experienced with the process and analysis results. Using either approach, however, the analyst should arrive at the same final set of analyzed scenarios. 2.7 Document the Results of the Analysis (Step 5)

In documenting EPHA results, it is necessary to consider the different uses of the information developed by the hazards assessment process. The emergency planning and preparedness staff will use the information to create emergency plans and response procedures that are commensurate with the analyzed hazards. As the facilities and hazards evolve over time, future planners (and future hazards assessment analysts) will need to maintain and update the EPHA, plans, and preparedness elements. The emergency management staff may be called upon to explain and defend the hazards assessment process and results to their own management or to evaluators, both internal and external. The documented EPHA should provide solid and convincing evidence that the emergency management program is based on a thorough understanding of the facility- specific hazards. 2.7.1 General Scenario Documentation Guidelines Each analyzed scenario should be documented in enough detail that, if necessary, the consequence calculations can be modified or recreated later by someone who does not have access to the original analyst or the supporting non-report documentation 2-24 DOE G 151.1-2 7-11-07 (e.g., notes, printouts). Scenario information needed to explain, reconstruct, and revise the analysis should include: • A brief narrative containing key facts that define each scenario, such as the location, the hazardous material, initiating event (including size or magnitude) and any contributing or mitigating factors. If applicable, the origin of the scenario (SAR/SAD/DSA section, hazards analysis, etc.) should be identified. • Any assumptions (explicit or implicit) that enable or support the analyses. • The source terms, including the SAR/SAD/DSA scenarios (if any) to which they correspond. If applicable, values for the MAR, DR, LPF, ARF/ARR, and RF should be recorded, along with the bases for their selection. • Release characteristics (such as effective height, duration, building wake effects, stack exit velocity, plume buoyancy) and reasons for making the necessary modeling choices. • Atmospheric transport and exposure model inputs (such as wind speed measurement height, surface roughness, sampling time, exposure pathways, dose conversion factors) and the bases for their selection. • The consequences of the release at distances and locations of interest. 2.7.2 Documented Basis for Emergency Action Levels (EALs) Background. Frequently, the emergency planning staffs develop facility EALs, in concert with facility personnel. Because the analyst(s) responsible for producing the EPHA may not be available to contribute to EAL development, the documented hazards assessment should include all the information needed by the planning staff to construct an integrated set (system) of EALs covering the full range of possible facility emergencies. In addition to factual information and descriptions (from the facility description and hazard characterization sections) and the calculated consequences of postulated events, analysts should document their reasoning and insights. Of particular importance to EAL development are analyst insights and conclusions regarding similarities and differences between the analyzed scenarios, the features or elements that comprise each scenario, the outward indications and the consequences associated with those scenarios. For example, the analyst might note that the same event occurring in two different locations (and thus, involving different MAR or different degrees of mitigation) will have very different consequences. If the analyst further determines that there are indications by which one variation of the scenario might be promptly distinguished from the other at the time of occurrence, the two events can be placed in different emergency classes for planning purposes. However, if the analyst determines that there would be no timely, reliable means of distinguishing between the two scenario variations, that conclusion should be documented as part of a rationale for conservatively applying the higher classification to both events.

DOE G 151.1-2 2-25 7-11-07 All relevant facts and analysis results, including the analysts’ insights, interpretations, and conclusions should be summarized in an “EAL logic” section that provides essential information needed by the planning staff to develop and maintain facility EALs. The EAL logic should be a concise presentation of the rationale by which the results of the representative analysis cases can be used to create EALs to classify the full range of possible emergency conditions. The EAL logic is the documented link (or “bridge”) between the EPHA results and the EAL statements. Information Requirements. Much of the information needed to support development of EALs is not directly utilized or produced in the process of selecting scenarios and calculating consequences. Therefore, it will not necessarily be completely captured and documented during those steps of the hazards assessment effort. In order for analysts to recognize and preserve key information, they should understand how the products of their efforts would ultimately be used to develop EALs and other elements of the emergency management program. Following are specific types of information that analysts should recognize and preserve for later use in constructing the EAL logic. • Any means (indications) by which an analyzed scenario or a distinct variation of it might be detected and recognized. Examples include noise, direct visual observation, instrument readings, alarms, and physiological effects on exposed people. To the degree possible, the analyst should record the level or value for each indication that would be associated with the analyzed scenario (such as the specific reading on a pressure gage or observed liquid level in a tank). • The timeliness and certainty with which each indication would/could be recognized at the time of, or shortly following, onset of the scenario. The analyst should record whether a particular indication would or might (and under what conditions) be associated with the analyzed scenario. Indications that would not be available within minutes of an occurrence (such as results of laboratory analysis of samples) should be noted. The analyst should understand that while any indications of the analyzed event/condition may be useful to the planners developing EALs, indications that are prompt, unambiguous, and reliably associated with the event/condition will be most useful. • Any other events or conditions that would have the same consequences, or for which the consequences can be inferred or extrapolated from the results of an analyzed scenario. Consider, for example, an earthquake-induced building collapse scenario, the source term for which is largely attributable to the crushing of contaminated ventilation ducts and filters. The analyst should recognize that any other event causing major damage to the structure would affect the same MAR (material in ducts and filters), produce the same failure mode (shaking/crushing) and the same status/functional condition of mitigative features (direct release to atmosphere). The analyst might reasonably conclude that any event involving building collapse or major structure damage would be modeled using about the same parameter values and assumptions used for the earthquake case, thereby yielding the same consequences. Accordingly, the analyst should conclude that the consequences of building/roof 2-26 DOE G 151.1-2 7-11-07

collapse due to high wind or snow/ice buildup would be about the same as for the earthquake, and that the earthquake consequence calculation adequately “represents” that type of initiator and portion of the severity spectrum. By identifying different events/conditions expected to produce source terms that are similar or proportional to those from an analyzed scenario, a small number of carefully chosen representative analyses can provide suitable bases for classifying events across the full spectrum of possible initiating events and severity. Documentation Approach. The EAL logic should be arranged according to event types sometimes termed “recognition categories” that are used to organize EALs in the facility classification procedure. The event type/recognition category is a short descriptive title or name (such as “fire/explosion,” “process upsets” or “natural phenomena”) that leads the user of the classification procedure directly to the most applicable EALs, based on the most obvious characteristics of the event/condition. See DOE G 151.1-4, Chapter 4, for suggested EAL groupings. For each event type the analyst should briefly describe the kinds of events and conditions that make up the event type/recognition category. For example, the “process upsets” event type is usually defined to include events caused by equipment failures, material defect, personnel error, control system failure and loss of power, and so forth. The analyst should then list the scenarios of that type that were analyzed in the hazards assessment and the classification that is indicated by the calculated consequences. Beginning with the highest classification indicated for any analyzed scenario, the analyst should discuss briefly each of the analyzed scenarios that yielded that classification. Compare and contrast the scenarios with respect to factors such as: • MAR • Type and magnitude of the initiating event(s) • Values of the other parameters that comprise the source term (DR, ARF/ARR, RF, LPF) • Release pathway and mitigation features • Time progression of events leading to a release • Indications by which the event, as well as similar events with higher or lower consequences, could be detected and recognized, including any limitations on the usefulness of those indications as EALs. Because this discussion is the heart of the documented EAL logic, it should describe the features of each analyzed scenario and what portion of the event spectrum it represents. Events of higher or lower classification involving the same material (MAR) or type of initiating event should be noted. After the EAL “basis” statement is developed (as described below), the discussion should be reviewed and modified as necessary to make DOE G 151.1-2 2-27 7-11-07 sure that the “basis” statement follows logically from information presented in the discussion. The analyst should describe the events/conditions of each particular type that require declaration of this emergency class. These descriptions may take several different forms. They may be very specific to a particular analyzed event (such as, “spill of more than about X gallons of acid”), they may broadly specify an entire group of events that should be classified at the same level (“any fire in X Building that is not declared controlled within 10 minutes of initial recognition”) or they may be expressed in terms of an indication that warrants the emergency declaration without reference to the cause (“release to the environment equal to or greater than X Becquerels per second”).

For each such description, the analyst should provide a succinct “basis” statement that summarizes the information, insights and inferences that support the recommended classification. The basis statement should refer to the facts and insights presented in the “discussion.” The basis statements and “discussion” should provide the planning staff with a clear and logical argument for selecting EALs to classify emergencies at each level. 2.7.3 Basis for Planned Protective Actions As detailed in DOE G 151.1-4, Chapter 7, planned (or “default”) initial onsite Protective Actions (PAs) and offsite Protective Action Recommendations (PARs) associated with each EAL should be based on several factors, including: 1. The type of hazardous material involved (radioactive, chemical) 2. The affected area and population characteristics (onsite, offsite, time needed for warning and evacuation) 3. Available options for protective actions (practicality of evacuation, suitability of structures for sheltering, effectiveness of ad hoc measures) 4. The nature of the release implied by the EAL (in progress or imminent, short or long duration, ground level or elevated) Beyond the documentation suggested earlier in this chapter, little additional information from the hazards assessment process is needed to specifically support development of planned protective actions. The type of hazardous material that would be involved in a particular event should be obvious from the facility description, hazard characterization, and event scenarios. The affected area and population characteristics will come from the results of the consequence calculations, specifically, the distance at which the PAC will be exceeded under adverse dispersion conditions. The available options for protective actions will be determined by the planning staff based on their knowledge of the affected area and population and the locations and types of structures available for sheltering. 2-28 DOE G 151.1-2 7-11-07 In item 4 above, much of the information implied will also be obvious to the planners based on facility descriptions and hazards assessment scenarios. However, the hazards assessment analyst should take care to document any scenario-specific information that will help correlate potential EALs (i.e., the indications by which an actual or potential release would be recognized) with scenario factors that should be considered when selecting planned protective actions. The use of scenario information to develop optimum EAL-specific pre-planned protective actions is discussed in the DOE G 151.1-4, Chapter 7, Protective Actions and Reentry. 2.7.4 EPHA Document as a Response Reference In the early phases of response to a real event, emergency personnel will often utilize the EPHA document in an attempt to understand the event and possible consequences. With scenario information and consequences summarized, the document should serve as a useful tool for initial consequence assessment efforts. Features and information that are particularly useful in this regard include: • The analyzed scenarios identified using short, descriptive names • Tabulated consequences of each scenario at key receptor locations • Graphic or other similar presentations of scenario consequences vs. distance under conservative (adverse) and average (typical) dispersion conditions, including the distances at which the PAC and TELs would be exceeded 2.7.5 EPHA Document Format

The EPHA document should either stand alone as the technical planning basis or incorporate by reference other documented analyses, descriptions, explanations, or justifications. If the latter format is used, the EPHA document should contain all results necessary for directly meeting the emergency management program planning requirements, as would be presented in a standalone version. If the results of a facility EPHA are included in a site-wide EPHA document, the same documentation of the facility EPHA should be totally included in the site-wide version or fully referenced. A site-wide EPHA document should contain all results necessary for directly meeting the emergency management program planning requirements for each facility covered. 2.8 Special Topics 2.8.1 Smoke from Ordinary Structure Fires Any structure fires will produce toxic products of incomplete combustion or by-products from the burning of structural materials, preservatives, refrigerants, paint, and so forth. Although fires in office buildings or industrial facilities that do not contain large inventories of hazardous materials may be categorized as OEs, if they result in significant DOE G 151.1-2 2-29 7-11-07 structural damage with suspected personnel injuries or death, they should not be classified on the basis of the “incidental” hazardous material release. To determine if a hazards assessment is needed to analyze the release of toxic materials from fires, the results of any formal FHA conducted to meet the requirements of DOE O 420.1B, or the professional judgment of fire protection staff (as may be documented in a building fire pre-plan or run plan) should be considered. If the FHA results or the fire protection staff’s assessment suggests that protective actions beyond those normally applied to structure fire response will be needed, the toxic material release should be addressed in an EPHA. (Cf. Appendix H) 2.8.2 Explosives In general, the blast, missile and burn hazards posed by conventional explosives (and certain other materials like natural gas and propane) are outside the scope of the Hazardous Material emergency management program specified in DOE O 151.1C. Any analysis of hazards from conventional explosives should focus on blast, missile and burn hazards, not the potential airborne release of toxic chemicals. Analysis and planning for those hazards should be done in the context of the facility/site Fire Protection program or other safety programs. Fires involving or threatening conventional explosives should be regarded as imminent blast/missile hazards. Results of research by the National Institutes of Standards and Technology (NIST) and the U.S. military, as well as Department of Defense (DoD) standards and DOT emergency response guidance clearly indicate that the toxicity hazards from burning explosives are no greater than for many common materials used in structures and furniture and that hazards associated with blast and fragments should dominate the emergency planning concerns for explosives. (Cf. Appendix H) Based on the above information, conventional (chemical) explosives should be addressed in the following manner: 1. In general, safety/emergency planning for any conventional explosives should be based on the blast and missile hazards and not on the potential for airborne release of toxic chemicals. Any fire involving an explosive should be treated as an imminent blast/missile hazard and the necessary safety measures for the blast/missile hazard implemented.

2. An explosive should be analyzed as a dispersible toxic chemical hazard in an EPHA only if it is used or stored in a form (such as a powder or liquid) that represents a plausible air-dispersible source of the substance. If an explosion has occurred and there is no potential for another, the most significant safety impacts (blast, shock, missiles) will already have ended and therefore will not be mitigated by the same kinds of protective actions and response measures that are usually applied to hazardous material emergencies (evacuation, sheltering). 2-30 DOE G 151.1-2 7-11-07 2.8.3 Aggregations of Small Quantities of Hazardous Materials The release of inventories of multiple small quantities of like or unlike hazardous materials (all below the “laboratory scale” threshold) poses an analysis problem in hazards assessments for some DOE/NNSA facilities. A simultaneous release of these quantities of hazardous materials from the same facility or location requires a destructive or energetic event (e.g., fire, explosion, earthquake, structure collapse.) Although such destructive events have the potential to breach multiple containers, the assessment of the impacts resulting from a simultaneous release producing additive effects beyond the local event scene is particularly difficult to quantify because of spatial and temporal separation of individual unit releases, inhibition of the release by structure or rubble, reduction through various release conditions (e.g., scrubbing by fire sprinklers), and other factors. The uncertainties associated with consequence estimates for these events will be very large and analyses using conventional models and assumptions add little to understanding the hazard. In addition, quantitative analyses are not needed for development of event recognition criteria (EALs) because destructive events necessary to release multiple small quantities are readily recognized by persons most likely to be affected by those releases (i.e., workers in the immediate area and first responders). Conservative, worst-case analyses for simultaneous releases of multiple small quantities cause expenditure of resources on hazards and scenarios of minimal significance and provide little or no useful information to improve planning or response. The following steps represent a reasonable approach for addressing aggregations of small quantities of like or unlike hazardous materials, each of which is below the “laboratory scale” threshold, in DOE/NNSA emergency management programs. The approach may also be applied to fires that are judged by local fire protection establishment to have the potential for “extraordinary” emissions of toxic combustion products (see Section 2.8.1). 1. In the Hazards Survey, recognize and document the “HAZMAT” aspect of possible destructive events involving multiple small quantities of hazardous materials. Building emergency plans and pre-fire plans are the appropriate vehicles for identifying and planning responses to destructive events that would have major, direct human health and safety impacts (blast, burns, entrapment, etc.) and for which hazardous materials in modest quantities would be of secondary concern. Throughout the non-DOE emergency management community such events are routinely managed using standard fire and HAZMAT response methods.

2. Define certain destructive events (large fire, structure collapse, etc.) to be OEs if it appears that the condition would meet all aspects of the OE definition. The potential “HAZMAT” aspect of a destructive event may be used as a qualitative factor (i.e., without resorting to quantitative calculations of impact) in defining certain events as OEs. Quantitative analyses of concurrent releases of small quantities (all below the “laboratory scale” threshold) are typically not warranted because the cost and effort involved in accurately modeling accident phenomenology on a small scale and the limited DOE G 151.1-2 2-31 7-11-07 geographic area that could be affected do not add value to the planning and response process. 2.9 Using Safety Analysis Results in EPHAs To the extent practicable and available, the hazards and accident analysis results from current facility SARs/SADs/DSAs should be used to ensure consistency of the emergency technical planning basis with the facility authorization basis. Careful consideration to use of safety analysis information can both enhance the quality of the EPHA and greatly reduce the effort required for its preparation. Facility/Process Description. The written description of the facility, processes, hazardous materials and controls can generally be incorporated, in full or in abbreviated form, to provide the most credible and technically sound basis for the EPHA. Properties of hazardous materials (such as concentration, vapor pressure, or unit dose) used for the safety analysis may be adopted for the EPHA without further justification. Hazards Identification and Analysis. The Hazards Analysis that forms the basis for SAR/SAD/DSA accident selection should be a primary reference for facility hazards identification. The rigorous analysis techniques used for facility/process hazards identification, such as Failure Modes and Effects Analysis (FMEA) or Hazards and Operability Studies (HAZOPs), will often yield a lengthy and detailed list of potential hazards and accidents, along with a qualitative assessment of their consequences. From that list, a few (discussed above) are selected for analysis in the SAR/SAD/DSA to provide the technical justification for engineered and/or administrative controls to prevent or mitigate the hazard. Many of the hazards and accidents identified in the Hazards Analysis will therefore not be addressed in the SAR/SAD/DSA accident analysis section. Events having only non-radiological consequences, those that do not have significant consequences outside the facility, and events that are similar to but with lower consequences than the bounding event of a given type are among those unlikely to receive detailed analysis in the SAR/SAD/DSA. In order for the EPHA to represent the full spectrum of hazards and event severity, hazards identified by the SAR/SAD/DSA Hazards Analysis process (but not addressed in the accident analysis) should be selected for inclusion in the EPHA as needed to fill out the range of potential hazards, consequence/severity levels, and event types.

Accident Analysis. The scenarios and corresponding source terms analyzed in current facility safety analysis documents should be incorporated into the EPHA if consistent with emergency planning requirements and needs. DCFs and exposure parameters embedded in radiological computer codes should be verified to ensure consistency between emergency management and SAR/SAD/DSA results. The SAR/SAD/DSA scenarios will typically represent the maximum or “bounding” event of a given type. If possible, information from the SAR/SAD/DSA discussion or supporting documents can be used to develop variations of the bounding scenario that have different consequences, indications, or initiating events. Results of existing analysis may be incorporated by reference or, under some circumstances, the consequences of newly postulated scenarios 2-32 DOE G 151.1-2 7-11-07 may be derived from the results of existing analyses (e.g., by adjusting for different source terms). The following examples demonstrate variations in SAR/SAD/DSA scenarios that can provide additional EPHA scenarios without further extensive analysis. Example 1: The SAR/SAD/DSA calculates the source term for a release to the environment that is mitigated by an isolation system. A second (unmitigated release) case can be inferred from the credited performance characteristics of the isolation system. The unmitigated case would provide a second point on the severity spectrum. The second case will provide information that is most useful for event recognition and classification if response personnel would be able to determine the isolation status at the time of an event. Example 2: The SAR/SAD/DSA calculates the design-basis fire source term by using the largest of the MAR values associated with several different process areas that are separated by rated fire barriers. Additional cases representing fires in other process areas holding less MAR may be inferred by scaling the source terms for the different MAR values. A catastrophic fire scenario, such as could be attributed to an aircraft crash or extreme malevolent act, might be represented by a source term based on the MAR total for the structure. 3-1 DOE G 151.1-2 7-11-07 3. EMERGENCY PLANNING ZONES 3.1 Background The DOE Comprehensive Emergency Management System requires the integration of emergency management programs for both radioactive and non-radioactive hazardous materials. Consistent with this approach, an EPZ concept that integrates protective action planning related to all potential hazardous material releases is endorsed as a planning tool. The EPZ is an area within which the facility/site should support the local, state, and/or tribal authorities in planning and preparedness activities to protect people living and working there. Among these activities are: identification of response organizations; establishment of effective communications to notify the public and the responsible authorities within the EPZ; development of public information and education materials; training and provision of equipment for offsite emergency workers; identification of predetermined response actions; and development and testing of response procedures. DOE facilities are subject to EPA emergency management requirements for non­ radioactive hazards. It is DOE policy that emergency management for DOE/NNSA nuclear facilities should be consistent with the requirements of the NRC related to radioactive hazards to the extent practicable. Basic planning and response principles, as well as the NRC and EPA requirements and their bases, are considered as background for the guidance provided in this chapter.

The NRC and FEMA have established EPZ requirements for commercial power reactors. The analysis that led to the establishment of the standard radioactive plume exposure and ingestion pathway planning zones for large, domestic power reactors is documented in NUREG-0396/EPA 520/1-78-016. The report concluded that a 10-mile (16 km) plume exposure (airborne) pathway EPZ was adequate because: 1. Projected doses from the traditional design-basis accidents would not exceed PAG levels outside the EPZ; 2. Projected doses from most core melt sequences would not exceed PAG levels outside the EPZ; 3. For the worst case core melt sequences, “immediate life-threatening doses” would generally not occur outside the EPZ; and 4. Detailed planning within the EPZ would provide a substantial base for expansion of response efforts in the event that this proved necessary. These criteria were developed using the higher PAG levels then in effect (5-rem [50 mSv] whole body, 25-rem [250 mSv] thyroid dose) and are also satisfied relative to the current lower PAG values (1-rem [10 mSv] whole body, 5-rem [50 mSv] thyroid). The 50-mile ingestion pathway planning zone was largely based on a judgment that the 3-2 DOE G 151.1-2 7-11-07 likelihood of exceeding ingestion pathway PAG levels at that distance was comparable to the likelihood of exceeding plume exposure pathway PAG levels at 10 miles (16 km). The EPA has published guidance that leads to the determination of a vulnerable zone for non-radioactive hazards. This zone is described by the EPA as the area that may be subject to concentrations of an airborne, Extremely Hazardous Substance (EHS), following an accidental release, at levels that could cause irreversible acute health effects or death to human populations within the area. The EPA guidance defines the vulnerable zone in terms of the distance at which a “level of concern (LOC)” would be exceeded because of a release of the hazardous material under severe (conservative) dispersion conditions. A LOC is defined as the concentration of an EHS in air above which there may be serious irreversible health effects or death because of a single exposure for a relatively short time period. LOCs are identified in the EPA guidance for the EHSs listed in 40 CFR 355, Appendix A. The vulnerable zone was developed for use by community emergency planners in evaluating the risk of and planning for response to hazardous material releases. Because of differences in both the impact (concentration) criteria and the methods used, the vulnerable zone does not directly correspond to the EPZ concepts developed for DOE facilities. In the following sections, an EPZ methodology is recommended for DOE facilities that uses the underlying NRC/FEMA/EPA bases for the radioactive plume exposure (airborne) pathway EPZ and incorporates planning for both radioactive and non­ radioactive hazardous material releases. 3.2 General EPZ Concepts The designation of an EPZ and the related detailed planning and preparedness activities are not intended to ensure complete protection of all persons who might be affected by the largest conceivable hazardous material release under the most severe meteorological conditions. The EPA Manual of Protective Action Guides and Protective Actions for Nuclear Incidents, EPA 400-R-92-001, May 1992, states, “It is not appropriate to use the maximum distance where a PAG might be exceeded as the basis for establishing the boundary of the EPZ for a facility.”

In addition, those responsible for establishing the geographic extent of any facility EPZ should note that a larger EPZ does not necessarily provide better protection of the population than a smaller one: • For a given wind speed, the elapsed time between initiation of a hazardous material release and the onset of consequences at a receptor location is directly proportional to the distance between the source and receptor. Hence, the greater the distance from the source, the more time will be available to carry out protective actions. • If distance (and available time) is great enough, ad hoc protective actions will be approximately as effective in reducing health impacts as those actions that have been planned and prepared for in detail. As the effectiveness of a preplanned protective action approaches that of an ad hoc action, the efficiency of planning/preparedness 3-3 DOE G 151.1-2 7-11-07 efforts (expressed in terms of reduced health impacts per unit investment in planning/preparedness) approaches zero. • Because resources available for protective action planning and preparedness are always limited, use of those resources should be concentrated in the geographic areas where the greatest reduction in health impact per unit expenditure can be achieved. In some cases, specifically the most severe release conditions, protective actions may be needed in areas outside the EPZ. Therefore, the EPZ should be sufficiently large that the planning and preparedness for actions within the defined EPZ provide authorities with a reasonable basis for extending their preplanned response activities to areas outside the EPZ, if warranted by the actual conditions. 3.3 Developing Facility EPZs An EPZ associated with a particular DOE facility or site is an area within which government and facility managers determine that special planning and preparedness efforts are warranted as a means of apportioning preparedness resources to the areas where they are most needed. As a matter of practical necessity, the EPZ should be developed in cooperation with the responsible local, State, and Tribal authorities, since each has a statutory responsibility to protect its citizens. Facility EPZs may be based on risk criteria agreed upon by State and local authorities. Risk-based methods of prioritizing emergency planning and preparedness efforts provide assurance that resources are dedicated to the proper areas and issues. However, such methods require a major investment in a comprehensive Probabilistic Risk Assessment (PRA) for the facility. Facilities for which a PRA has already been prepared, or is in progress, may choose to use the results to establish their EPZs in cooperation with local and State authorities. For those facilities that do not choose the risk-based approach, the EPZ should include as a minimum the area where people would be at risk of death or severe injury from the severe releases under severe meteorological conditions. It may also include part of the area where protective actions would be warranted for the same release and meteorological conditions. Hence, the EPZ for each facility should be based on objective analyses of the spectrum of hazards associated with that facility, not on arbitrary factors such as historical precedent or distance to the site boundary. The results of the consequence calculations described in Section 2.6, geographical and jurisdictional factors, as well as other factors detailed in this guidance can be used to define the facility EPZ.

Following the underlying rationale for establishing the EPZ for commercial nuclear reactors, the integrated EPZ for DOE facilities, which is based on the spectrum of potential radioactive and chemical hazardous material releases, should be of sufficient size that: 3-4 DOE G 151.1-2 7-11-07 a. Protective actions are not likely to be required beyond the EPZ for most analyzed events (i.e., consequences from most analyzed events are not likely to exceed PACs outside the EPZ); b. Measures taken within the EPZ would provide for substantial reduction in early lethality for all analyzed events (i.e., consequences from all analyzed events would not exceed TELs outside the EPZ); and c. Planning efforts within the EPZ provide a substantial basis for expansion of response efforts beyond the EPZ, if necessary. d. The maximum EPZ for any DOE or NNSA facility/site should not exceed a nominal radius of 10 miles (16 kilometers). The following steps provide a methodology for developing a candidate, technically defensible plume exposure pathway EPZ for DOE/NNSA facilities that implements the basic characteristics of the integrated EPZ as given above. 1. If the results of consequence calculations, done in accordance with Section 2.6, indicate no OE higher than an Alert classification, then an EPZ need not be defined for the facility. 2. From the results of consequence calculations, done in accordance with Section 2.6, determine the maximum distance at which a TEL would be exceeded for the most severe analyzed release (excluding those, which result from extreme malevolent acts discussed in Appendix E) under severe meteorological conditions. This distance, the smallest EPZ radius that should be considered, is denoted EPZMIN. 3. Next, determine the maximum distance at which a PAC would be exceeded for the most severe analyzed potential release (excluding those that are “beyond-design­ basis” natural phenomena events or which result from extreme malevolent acts discussed in Appendix E) under severe meteorological conditions. This distance, the maximum EPZ radius that should be considered, is denoted EPZMAX. 4. If EPZMAX is greater than 10 miles (16 kilometers), then the EPZMAX is set equal to 10 miles (16 kilometers). The value for the EPZ is within the limits EPZMIN to EPZMAX. 5. Within the limits of the largest and smallest EPZ radii, EPZMIN to EPZMAX, consider other factors and adjust size and shape in accordance with the following principles: • The full spectrum of emergencies that contribute to facility/site offsite risk should be considered. Even if a comprehensive PRA has not been done, local knowledge of the probability or risk contribution of the most severe analyzed event relative to the other events that comprise the balance of the facility/site risk may be used in a semi-quantitative way to determine whether the EPZ size should be closer to the maximum or minimum values as determined in Steps 1-4, described above: 3-5 DOE G 151.1-2 7-11-07 – If the most severe analyzed release would result from a single failure event or is believed to have a relatively high probability of occurrence, an EPZ radius closer to the maximum than the minimum value should be selected. – If the probability of the most severe analyzed release is judged to be extremely low or if it contributes a minor fraction of the total offsite risk from site emergencies, an EPZ radius closer to the minimum than the maximum value is indicated.

• The hazards judged to contribute most heavily to the offsite risk should be considered, as follows: – If the hazard is radiological, an EPZ radius closer to the minimum than the maximum value should be selected because of the wide margin (a factor of greater than 100) between the thresholds for protective action and early lethality. – If the hazard is non-radiological, an EPZ radius closer to the maximum than the minimum value should be selected because of the narrower margin (typically a factor of 3 to 10) between the concentration thresholds for protective action and lethality (as defined in Appendix F), and the potential for severe irreversible effects resulting from exposure to concentrations between the protective action and lethality thresholds. • The definition of an EPZ is meaningful only if significant planning and preparedness measures are implemented within it. This commitment and the responsibility to expend resources planning and preparing for the protection of people should be factored into EPZ size. The planning and preparedness activities that the facility/site should expect to support on behalf of the population within the EPZ include the following: – Identification of responsible onsite and offsite emergency response organizations and the mechanisms for activating their services. – Establishment of effective communication networks to notify the public within the EPZ and the responsible authorities promptly. – Development and delivery of public information and education materials to ensure timely and correct response to warnings. – Implementation of training programs and provision of equipment for offsite emergency workers. – Identification of predetermined response actions. – Development and testing of response procedures. 3-6 DOE G 151.1-2 7-11-07 • The cost of implementing an EPZ is usually directly related to the geographic size of the EPZ. If creating a larger EPZ means that scarce resources are allocated to the protection of people who are at minimal risk, a larger EPZ may actually be less effective at mitigating overall risk to the population than a smaller one. • If distance from the source and the time available to respond are great enough, protective actions carried out on an ad hoc basis will be approximately as effective in reducing risk as those actions that have been planned and prepared in detail. Also, planning and preparedness for the EPZ will provide a basis for more effective response activities outside the EPZ if conditions should warrant. • The EPZ should conform to the physical and jurisdictional realities of the site and surrounding area. • The EPZ size should give confidence that planning and preparedness will be sufficiently flexible and detailed to deal with a wide range of types and magnitudes of emergency conditions. Four significant considerations that cannot be readily stated as quantitative guidance are presented below in the form of questions to be used as “tests of reasonableness” for the proposed EPZ size. – Is the EPZ large enough to provide a credible basis for extending response activities outside the EPZ if conditions warrant? – Is the EPZ large enough to support an effective response at and near the scene of the emergency (i.e., to preclude interference from uninvolved people and activity, to facilitate onsite protective actions, to optimize on-scene command, control, and mitigation efforts)? – Is the EPZ likely to meet the expectations and needs of offsite agencies?

– What enhancement of the facility and site preparedness stature would be achieved by increasing the size of the EPZ? What resources, costs, and liabilities might a larger EPZ engender? Would a larger EPZ result in a large increase in preparedness without correspondingly large increases in cost or other detriment? As a last consideration, ensure that the underlying rationale for establishing the integrated EPZ for DOE facilities (a. through d., page 3-4 above) is generally satisfied for the EPZ determined from Steps 1-5. Document the consideration of each of the tests and any adjustments made to the EPZ. The resulting EPZ and its bases provide the beginning point for discussions with Tribal, State, and local authorities. Where several facilities are located in close proximity to one another and the nature of the hazards is the same at each, the largest impact from an event at any of the facilities may be used to define the EPZ for the entire area. Though it is possible that under certain conditions (e.g., major earthquake) releases from several facilities might occur at the same time with consequences that are additive, the EPZ size should not be based on DOE G 151.1-2 3-7 (and 3-8) 7-11-07 concurrent events at separate facilities. Where a number of individual facilities and activities are located in close proximity to one another, a composite EPZ for the group of facilities or the entire site should be defined to simplify communications and offsite interactions. Also, the EPZ for a site should not be extended beyond the site boundary solely on the basis of potential consequences of a transportation accident, if the transportation activity is comparable (in terms of materials, quantities, and mode of shipment) to that normally conducted on public routes. Finally, the planning process should recognize and provide for the need to refine the initial default protective actions and carry out protective actions in limited portions of the EPZ for specific events or conditions. Dividing the EPZ into sectors by direction and radial distance and using natural or jurisdictional boundaries to define protective action zones are suggested ways to assist offsite authorities by providing a finer planning and response structure. 4-1 DOE G 151.1-2 7-11-07 4. MAINTAINING HAZARDS SURVEYS AND HAZARDS ASSESSMENTS Hazards Surveys and EPHAs should be maintained so that they accurately reflect changes in the facility design, operations, safety features, inventories of hazardous materials, and features of the surrounding area. In the absence of other overriding requirements on the mechanics of this maintenance process, the following guidelines should be applied. • Hazards Surveys and EPHAs should be reviewed and, as necessary, updated at least every 3 years, and prior to significant changes to the facility/site or to hazardous material inventories. For example, significant changes are those changes which would result in an unreviewed safety question for nuclear facilities, as defined in 10 CFR 830, or in an unreviewed safety issue for accelerator facilities, as defined in DOE O 420.2B. If the change reduces hazards with no adverse effect on safety or emergency preparedness and response, the modifications may be performed at the next scheduled review and update.

• Maintenance of the Hazards Surveys and EPHAs should be monitored through existing administrative processes and commitment tracking systems. A reliable, efficient, and timely method for tracking changes in facility/site or activity operations or processes that involve hazardous materials (e.g., introduction of new materials, new uses, changes in inventories, modification of material environments) should be established and maintained for each facility/activity. • The method for tracking changes in facility/site or activity operations or processes that involve hazardous materials should allow sufficient transition time for emergency management personnel to review the EPHA and modify plans or procedures, as necessary, to account for changes in the hazardous material situation. • Methods for tracking changes in facility/site or activity operations may include regular access to current site-wide inventory records, special notification procedures for operation or process changes, and/or active involvement of emergency management personnel in the facility/site or activity ISMS. The method can also be linked to the USQ process, which identifies changes in the safety basis of the facility/site or activity. • Changes in the facility/site or activity safety analysis reports, probabilistic risk assessments, vulnerability assessments, fire hazard analyses, environmental impact statements, and other documents that address facility/site or activity hazards or potential consequences should be integrated with maintenance of the EPHA. • The review schedule should be specified in the Emergency Readiness Assurance Plan (ERAP). Reviews should be coordinated and planned to take maximum advantage of other required periodic safety reviews, such as the annual Superfund Amendments and Reauthorization Act hazardous material inventory, nuclear facility safety reviews, 4-2 DOE G 151.1-2 7-11-07 required by 10 CFR 830.202 and 830.204, and reviews required by 40 CFR 122, National Pollutant Discharge Elimination System (NPDES) or other permit processes. Reviews should be done whenever significant changes to facility, process, or materials inventory occur. For example, significant changes are those changes that would result in an USQ for nuclear facilities, as defined in 10 CFR 830.3(a), or in an unreviewed safety issue for accelerator facilities, as defined in DOE O 420.2B. • Transitory hazards, such as short-duration storage of large quantities of hazardous materials or the short-term assembly and testing of nuclear explosive devices, may be covered in several ways. If an EPHA exists for the facility, the EPHA and associated emergency planning documents can be updated. For ease of maintenance and to avoid duplication of effort, the test plans or other controlling safety documents for such transitory hazards may be configured to serve as temporary addenda to the site and/or facility emergency plans. Another option is to issue a special abbreviated assessment that contains a description of the activity or operation and its expected duration, discussion and results of the hazards screening and characterization, scenario descriptions, consequence calculations, and EALs. • Major changes in offsite or onsite population or in transportation features of the site and environs, such as the construction of major facilities or new highways, should also cause the EPHA to be reviewed.

• The hazardous material emergency potential associated with facilities undergoing decommissioning or remediation will decline and become static as the process nears completion. The review and maintenance effort may then be substantially reduced without detriment to the emergency management program by creating a single documented hazards assessment covering a number of facilities of the same general hazard profile and inactive (non-operational) status. • The results of each review should be documented and reported to the management responsible for facility operations and emergency preparedness. If a review identifies no significant changes in facility, process, or potential emergency consequences, a finding to that effect should be documented. • If the review identifies significant changes, they should be documented and reported. The report should address (1) the possible effects on the adequacy of facility and site emergency plans, (2) any temporary compensatory measures that are being considered or implemented, and (3) a schedule for updating the analysis, reporting the results, and proposing any needed changes to the site's emergency planning or response program. 5-1 DOE G 151.1-2 7-11-07 5. USING HAZARD SURVEYS AND HAZARDS ASSESSMENTS 5.1 Hazards Survey It is expected that DOE facilities already meet most Base Program planning requirements through building fire preplans, building evacuation plans, building warden systems, employee emergency notification systems, onsite medical and security plans, and mutual aid agreements with offsite organizations. The Hazards Surveys identify the generic types of emergencies applicable to the facility. From these emergencies, potential OEs can be identified and categorization criteria developed to ensure that the prompt notification requirement for OEs is met. DOE G 151.1-4, Chapter 4, provides guidance on categorization of OEs that do not require classification. Existing site-specific Occurrence Reporting and EAL procedures provide a framework within which the categorization requirement can be implemented. Using the results of the Hazards Survey, the “Notification” element of the site emergency management program should be reviewed and responsibility assigned for completing the 30-minute notifications of OEs not requiring classification. Some sites assign the responsibility for all notifications to a single “Notification Center,” whereas others split the responsibilities for occurrence and emergency reporting. If the responsibility is split, reporting of OEs not requiring classification should be assigned to the organizational entity currently responsible for reporting emergencies that are classified as Alert and higher. The Hazards Survey process will involve the review of facility programs already in place to meet Federal, State, and local requirements related to worker health and safety, environmental protection, and hazardous materials reporting. It is not suggested that emergency management departments assume increased responsibility and authority for ensuring compliance with the Resource Conservation and Recovery Act (RCRA), CERCLA, NPDES, and OSHA requirements. However, the Hazards Survey and its periodic updates, as a minimum, should serve as an internal quality assurance check on compliance with those regulations. Facility/site management may find it useful to incorporate the Hazards Survey process into its program of internal oversight and compliance monitoring for hazardous materials, environmental protection, and worker safety regulations.

5.2 Emergency Planning Hazards Assessment (EPHA) Since 1991, DOE emergency management orders have incorporated the concept of tailoring requirements to specific hazards through the “commensurate with hazards” approach. The approach begins with a complete understanding of the emergency situations that could impact DOE facilities/sites or activities, followed by analyses of the resultant hazards to workers, the public, and the environment. Based on completed EPHAs, the requirements in the current Order (i.e., DOE O 151.1C) are tailored to 5-2 DOE G 151.1-2 7-11-07 develop an emergency management program (e.g., plans, tools, training, response, resources) that addresses the unique hazards and operating environment of each facility or activity and consists of the following program elements: program administration, training and drills, exercises, readiness assurance, emergency response organization, offsite response interfaces, emergency facilities and equipment, emergency categorization and classification, notifications and communications, consequence assessment, protective actions and reentry, emergency medical support, emergency public information, and termination and recovery. Examples of the use of the EPHA output to develop selected program elements are provided below. • Training and Drills. The Training and Drills program, ranging from “general employee training” to Emergency Response Organization (ERO) Manager training should be customized around the EPHA and the Hazardous Waste Operations and Emergency Response (HAZWOPER) programs and their associated program elements. • Exercises. The EPHA provides a ready source of scenarios and source terms for use in developing facility-specific drills and exercises. • Emergency Response Organization (ERO). The nature and severity of the events analyzed in the EPHA should provide the basis for both on-shift and on-call ERO staffing. Required staffing levels and expertise for functions such as consequence assessment and emergency medical support are directly determined by the hazards present at the facility/site. • Offsite Response Interfaces. In addition to identifying the offsite parties to whom prompt emergency notifications should be made, the EPHA should be used to define needs for specialized offsite support, such as ambulances, medical facilities and personnel, hazardous materials response teams, firefighting support, and public affairs interfaces. • Emergency Facilities and Equipment. The nature and potential for release of the hazards analyzed in the EPHA should dictate many of the specifications for facilities and equipment. Overall facility and site emergency potential will help define general needs, such as communications equipment and EOC size, while specific hazards may indicate need for specialized equipment, such as protective clothing, portable monitoring instruments, decontamination supplies, consequence assessment models, HAZMAT response vehicles and supplies, and facility data acquisition systems. • Classification. The EPHA provides the quantitative relationships between hazardous material airborne release events and their consequences, as well as the event descriptions and indications that serve as event classification criteria, the EALs. • Notification and Communications. For facilities subject to hazardous material OEs requiring classification, the potentially affected areas, the impacts of hazardous DOE G 151.1-2 5-3 (and 5-4) 7-11-07

material releases, and the time available to respond will determine the functional requirements for notification systems, procedures, and staff. The need for rapid warnings, notifications, and requests for assistance will determine the required level of sophistication and reliability in communications systems. • Consequence Assessment. The source terms and consequence calculations required for the EPHA will establish the performance requirements for emergency response consequence assessment models and/or methods. Specifically, the response models and methods need to be suitable for the specific hazardous materials addressed by the EPHA over the range of possible release and transport conditions. The EPHA document, or a summary of scenario data and consequences, should be available to responders as a ready source of data on each facility's hazardous material inventory and potential release scenarios. • Protective Actions and Reentry. The EPHA consequence calculation results should be used directly to determine initial, pre-planned (default) onsite PAs and offsite PARs that are specific to each analyzed condition and EAL. • Emergency Medical Support. The hazards analyzed in the EPHA will define the emergency medical support needs, including special preparations such as decontamination supplies; chelating, neutralizing and blocking agents; and medical staff training in treatment of victims exposed to specific hazardous substances. • Emergency Public Information (EPI). The hazards analyzed in the EPHA and the extent of their impacts will determine the content and geographic coverage of the EPI program. Information will be required on topics such as the nature of the potential hazards, the notifications and communications systems, and protective action plans (e.g., evacuation routes, guidelines for sheltering in place). Other uses of the EPHA results include: • Verification and monitoring of facility hazardous material inventories. • Confirmation of or input to the authorization basis safety analysis. • Recommendations for minimizing or segmenting hazardous materials inventories. • Identification and ranking of hazardous material targets to reduce risk and consequences associated with potential malevolent events. • Inputs to the fire pre-planning and hazardous material spill prevention/cleanup plans. • Assessing the capability of instruments and effluent monitors to quantify emergency releases. • Identification of facility and/or procedures changes that would help prevent or mitigate the events analyzed. C-1 DOE G 151.1-2 7-11-07 APPENDIX C. Facility and Site Boundary Guidelines C.1 Introduction The Order defines the OE Alert classification in terms of releases of hazardous materials to the environment for which it is expected that the radiation dose or concentration in air (of other hazardous materials) is expected to exceed either “10 percent of the applicable PAC … at or beyond the facility boundary” or “the applicable PAC … at or beyond 30 meters from the point of release to the environment.” The terms “releases” and “environment” clearly indicate that the Order intends the consequence criteria to apply only to exposures outside structures or enclosures. For purposes of emergency planning and classification, the maximum consequences to a hypothetical individual at ground level outside a structure are to be calculated. The hypothetical individual will be standing at a distance of 30 m from the point of any ground-level release to the environment or at the point of maximum ground-level impact (in terms of radiation dose or concentration) for any elevated release.

As used in the Order, the term “facility boundary” denotes a line of separation between the facility (and its immediate environs) and the remainder of the site. The “facility boundary” discussed in this guidance is intended only for use in hazardous material emergency planning and analysis. It is not intended to correspond to the exclusion zone normally established by the on-scene Incident Commander for a fire response. Implicit in the DOE Order emergency class definitions and discussion is the assumption that DOE facilities are located within larger tracts (sites) over which DOE has access control authority. There is a logical progression in severity from events that affect the facility but not the larger site (Alert), to those that affect the site outside the facility but not offsite areas (Site Area Emergency), to those that affect offsite areas (General Emergency). This progression reflects the assumption that a buffer of DOE-controlled land exists between each DOE facility and the site boundary. Some DOE facilities may not have this buffer, and the relationship between facility boundary, site boundary and the emergency classes should be carefully considered when defining facility boundaries and determining the emergency classes that best describe facility events. C.2 Selection of Facility Boundary Distance For emergency planning purposes, several structures or component units with a common or related purpose may constitute a single facility. On the other hand, a complex of dissimilar buildings, processes, and equipment may be considered as a single facility if they are physically adjacent, under common management, and contribute to a common programmatic mission. To promote consistency of event classification, a standard “analysis radius” of 100 m should be used to represent the facility boundary receptor for all facilities. Using the same facility boundary analysis radius for all facilities ensures that the relationship C-2 DOE G 151.1-2 7-11-07 between emergency class and consequences is consistent throughout the DOE/NNSA complex. In a few cases, it may be useful to define a “facility” to include the entire fenced security area that surrounds the structures or activities of interest. If the facility boundary is defined in this way, the minimum distance to the facility boundary from the likely release point(s) should be used as the analysis radius for all consequence calculations. This approach is reasonable if it leads to selection of an analysis radius of at least 100 m, but less than about 200 m, and the security area is small with respect to the size of the site (i.e., distance to the facility boundary is short with respect to the site boundary distance). C.3 Definition of Site Boundaries In general, the perimeter enclosing the area where DOE has the responsibility for implementing protective actions will be the site boundary. DOE facilities occupied by vendors or contractors with which agreements have been reached regarding emergency notification and protective action responsibilities should be considered “onsite” for purposes of analysis and event classification. However, there are several possible situations that could require adjustments to achieve overall consistency with the intent of DOE Orders and with sound emergency management principles.

• If the general public can gain unescorted access to areas of the DOE site, such as public highways or visitor centers, those areas should be considered as “offsite” for purposes of emergency class definition, unless it is ensured that those areas can be evacuated and access control established within about one (1) hour of any emergency declaration. • Any non-DOE facility or activity located within a DOE site may be considered as “offsite” for purposes of emergency class definition. The potential effect on the non- DOE facility of a hazardous material emergency originating at a DOE facility may necessitate the type of coordinated response characteristic of a General Emergency. D-1 DOE G 151.1-2 7-11-07 APPENDIX D. Onsite Transportation Analysis D.1 Introduction Planning and preparedness for transportation-related hazardous material emergencies on DOE or NNSA sites should be an integral part of the site comprehensive emergency management program. Successful integration requires that the approach to hazard identification, analysis, and the application of the results be consistent with the process used for fixed-facility EPHAs. The purpose of this appendix is to provide specific guidance on the analysis of hazardous material transportation activities on DOE/NNSA sites and the use of the analysis results in emergency management programs. This appendix is applicable only to onsite transportation activities involving between- facility transfers of hazardous materials. Non-DOE (commercial) shipments of hazardous materials to, from, or across the site are governed by DOT regulations and specifications for commercial hazardous materials transport and do not require a Hazard Survey or Hazards Assessment. Also exempt from the Hazards Survey/Hazards Assessment requirements is inter-facility transport of hazardous materials that complies with all DOT regulations and specifications applicable to the movement of those same materials over public transportation arteries. Protective actions (i.e., applicable “Initial Isolation” and “Protective Action” distances) for emergencies involving these shipments on DOE/NNSA sites should be determined by information in the DOT ERG, using the substance ID number and Guide number. Analysis requirements for DOE or NNSA shipments moving on or off the site will also depend on the governing DOT regulations and specifications. However, these DOE/NNSA shipments are not covered by this appendix. The onsite transportation of hazardous materials not exempted by the above criteria may be addressed either in the EPHAs for fixed-facilities with which the materials are associated or in a stand-alone site transportation hazards assessment. In either case, a Hazards Survey of transportation activities is required. The screening process conducted as part of the Hazards Survey effort identifies those hazardous materials involved in onsite transportation activities that require quantitative assessment. If the quantitative analysis of site transportation hazards is documented in one or more of a site’s fixed- facility EPHA or in the site’s Transportation Safety Document, the transportation Hazards Survey should identify and reference the specific EPHA documents or Transportation Safety Document section in which specific transportation hazards are addressed. D.2 Hazards Survey The Hazards Survey for onsite transportation activities should follow the general steps outlined in Section 1.2, with the following clarifications:

D-2 DOE G 151.1-2 7-11-07 Identify and briefly describe each facility (Step 1). Instead of “facilities,” it is the onsite hazardous material “transportation activities” that should be identified and briefly described. The description of each identified transportation activity need only include a brief characterization of the hazardous substance(s) involved, the origin, destination, and mode/method of transport. Screen hazardous materials to determine need for a quantitative EPHA (Step 2). In general, hazardous materials in transport are vulnerable to the same types of release and dispersal events/conditions considered in fixed-facility hazards assessments (e.g., fire, spill, breach of containers). Therefore, screening of transportation hazards should follow the process outlined in Appendix A. Any onsite shipment of hazardous material in a quantity exceeding the applicable screening quantity needs to be quantitatively analyzed in an EPHA to provide the technical planning basis for response. Identify the generic types of emergency events and conditions that apply (Step 3). The only type of emergency event that need be identified is “release/loss of control over hazardous materials.” Identify the types of potential impacts of the applicable emergencies (Step 4). The only potential impacts of the identified types of emergencies that need be identified are “exposure of people to radioactive or other hazardous substances” and “environmental damage/degradation.” Identify and document the applicable Base Program planning and preparedness requirements (Step 5). List any Federal, State or local planning/preparedness requirements that apply specifically to the transportation of hazardous materials on the site. Such requirements may include: • Driver certification/training on emergency notification and response; • Vehicle specifications for certain cargos; • Means for notifying site authorities in the event of an accident; • Notification of site authorities prior to specific shipments entering the site; • Safety/security escorts or route control; • Emergency management oversight of specific shipments; and D-3 DOE G 151.1-2 7-11-07 • DOT standards for placards, labels and manifests. D.3 Hazards Assessment Repetition should be avoided by consolidating material that applies to all site transportation activities (site description, methodology, etc.) in a single document section, then devoting a separate Chapter or annex to the quantitative analyses of each particular transportation activity. The quantitative hazards assessment for onsite transportation activities should follow the general steps outlined in Section 2.2, with the following clarifications: Define and describe the facility and operations (Step 1). The definition and description should be specific to each particular transportation operation involving hazardous material quantities in excess of the applicable screening threshold quantity. The “definition” statement should give the scope of the particular analysis in unambiguous terms. For example: “This analysis addresses the transport of solid radioactive waste generated by the decommissioning activities in the ____ Area to the _____solid waste burial ground.” At a minimum, the “description” of the activity should include: • The hazardous substance(s) being transported (Examples: sulfur dioxide gas, low- level radioactive waste from laboratory operations);

• General packaging type or container information (Examples: 55 gallon drums, DOT spec 3AL2015 gas cylinders); • Mode of transport or type of vehicle used (Examples: 2000 gallon tanker truck, enclosed van) • Onsite route(s) used, including any restrictions (Example: Building 340 to Central Waste Management, via Hazel Street and Route 4. Daylight only) • Any other controls or restrictions applicable to this shipment type (Example: Driver to notify Security 60 minutes before departure. Speed limit of 35 mph to be observed) Characterize the hazardous materials (Step 2). As in fixed-facility analyses, the hazardous material characterization should include those facts and information necessary to support the quantitative assessment of release consequences. Specifically: • The common name, CAS number, and concentration of hazardous chemicals; D-4 DOE G 151.1-2 7-11-07 • Radionuclide(s) and concentration, specific activity or unit dose (i.e., dose-per-unit­ intake); • Properties related to release potential and dispersibility (e.g., vapor pressure, boiling point, particle size); • Typical and maximum (if known) quantities in each package and shipment; and • Packaging or container information that will help define DR and LPF for different accident types (e.g., cardboard cases of glass bottles, 55 gallon drums, special shipping containers). Select and analyze emergency events and conditions (Step 3). The events and conditions that could lead to the release of hazardous materials in transport may be different from those selected for fixed-facility analyses. The following release events should be considered, as applicable: • Puncture of one or more individual packages/containers during handling; • Energetic impact of container(s) during collision (crush, rupture); • Involvement of the entire shipment in fire; • Detonation/deflagration of materials (if applicable); • Spill of dry materials; and • Spill/venting of tanker contents (liquids and pressurized gases). One or more releases of each applicable type should be analyzed. For a given type of event, only the bounding event need be analyzed if it is determined that there would be no way to distinguish between different release magnitudes at the time of the event (for example, the number of packages breached in a crash followed by fire). Estimate the consequences (Step 4). In general, the calculation models and approaches used for fixed-facility analyses are appropriate for transportation analyses. However, because transportation accidents may occur anywhere on the travel route, distances from the point of release to key receptors are not fixed. Consequences of each postulated release should therefore be calculated at 30 m, 100 m, and several other distances extending out to the maximum distance at which the PAC would be exceeded under the “conservative” dispersion conditions. Transportation event releases to the atmosphere should be modeled using a “standard” or “open country” terrain factor unless the transportation route is entirely within a built-up DOE G 151.1-2 D-5 (and D-6) 7-11-07 area of the site where the “urban” terrain factor better represents the local dispersion environment. Document the results of the analyses (Step 5).

The results of the consequence calculations should be documented in a manner that makes them useful for interpolating the consequences of actual events at specific locations. Tabular or graphic representations of the data can be very useful to responders for determining the area potentially affected by a release and for executing protective actions. The distance at which the PAC will be exceeded for each scenario should be clearly identified. If an event occurs and the distance to the site boundary or other “public” receptor location) is within the distance at which the PAC will be exceeded, classification as a General Emergency is indicated. E-1 DOE G 151.1-2 7-11-07 APPENDIX E. Malevolent Events E.1 Introduction Malevolent events (e.g., vandalism, sabotage, terrorism), including the use of explosives or flammable material, are potential initiators of hazardous material releases within the scope of emergency planning. In contrast to the randomness of initiators associated with accidents, natural phenomena and other external events, a malevolent, intelligent initiator can determine where to place explosives or start fires and/or how to use site systems and equipment to deliberately initiate or exacerbate emergency events or conditions. Such premeditated, even suicidal, malevolent events can maximize the impact of a release of hazardous material ranging from use-denial by contamination to serious harm to workers or the public. The objective of this appendix is to provide guidance for selecting the set of malevolent events to be included in the technical planning basis to ensure that a range of potential releases from malevolent events are reflected in the emergency management program. Not all inventories of hazardous materials have to be evaluated with malevolent event initiators and not all potential malevolent events in a facility have to be analyzed and included in the planning basis or in the set of EALs. In many cases, malevolent event scenarios will produce releases and consequences similar to those that could be caused by accidental, natural phenomena, or other external initiating events. Identifying a malevolent event as a potential initiator does not necessarily mean that a separate detailed analysis of that scenario is needed. For example, an explosion and fire that releases a hazardous material from a storage location might be postulated to result from an aircraft or vehicle crash. However, if nearly the same level of damage and resulting source term might also be caused by an act of sabotage involving an explosion and fire in the same location, the malevolent event might simply be considered a second initiator for the same basic fire/explosion condition. In that case, there need be no explicit component in the EAL that reflects the cause of the initiator, because the recognition indicator is the explosion/fire itself, not whether the initiator is an accident or malevolent event. The selection and analysis of malevolent events, which represents the final step in the development of the technical planning basis, can benefit from the cooperative involvement of facility and site experts representing a broad scope of interested functions, including Operations, programs, S&S, and safety, in addition to emergency management analysts. Of particular importance is the cooperation and active assistance of S&S personnel, who provide essential expertise for interpreting the current Departmental Design Basis Threat (DBT) policy as it is applied to the specific facility.

An additional benefit of the hazards assessment process is the possibility of revealing opportunities to decrease the likelihood or magnitude of potential malevolent events by implementing active or passive security measures or modifying facility features or procedures. The responsible S&S staff should be made aware of this potentially valuable E-2 DOE G 151.1-2 7-11-07 byproduct and the hazards assessment analysts should be encouraged to identify such opportunities for improvements. A general approach is presented in the next section for selecting malevolent events to incorporate in the planning basis for an emergency management program. This selection of malevolent event scenarios is intended to follow the completed selection and analyses of scenarios that represent the technical planning basis for the emergency management program based on events from Groups 1, 2 and 3 [Cf. DOE G 151.1-2, Sections 2.5 – 2.6]. E.2 Scenario Selection The first step in the selection of malevolent events involves the identification of potential threats to each facility involving the dispersal of hazardous materials. Emergency planning analysts should consider any facility with significant quantities of hazardous materials as a potential target of malevolent action. The current Departmental DBT should be consulted for the characterization/description, capabilities, resources, and intent of potential threats that might be applicable to each facility and its associated hazards. Based on these potential threats, candidate malevolent event scenarios ranging from minor to extreme severity should be developed. Associated with this range of scenarios should be estimates of event initiator capabilities (e.g., explosive capability, flammable material availability, intrusion/disruption capabilities, etc.) that will provide necessary failure modes and source term estimates associated with potential hazardous material releases. If a facility VA is available, analyzed release scenarios should be considered candidates for inclusion in the spectrum events for emergency planning purposes, either as separate analysis cases or by comparison with other cases already analyzed. The next step in the malevolent event selection process involves applying the malevolent event scenarios to the respective hazardous material facilities and determining the resulting source terms. The estimated malevolent event source terms are then compared with source terms for identified accidental, natural phenomena, or other external initiator scenarios. Where the source term and subsequent dispersal of a potential malevolent event compare closely to other analyzed scenarios, additional quantitative analysis of the malevolent event is not necessary. Any observable indicators uniquely associated with these malevolent event scenarios, however, should be documented for use in EAL development. Malevolent event scenarios with consequences close to other types of scenarios, but having no unique observable indicators, will not appear separately in the EAL set. For example, if a release can be attributed to an accident (e.g., corrosion, human error) or to a malevolent event scenario (e.g., deliberate tampering with controls), and detection of the release itself is the only observable indicator, then a unique malevolent event EAL will not be added to the set of EALs.

Malevolent event scenarios, whose resulting consequences differ significantly from other types of scenarios analyzed, should be analyzed quantitatively, documented, and included in the technical planning basis. [Note that extreme malevolent events (i.e., events within the DBT that result in consequences that exceed the largest release from other initiators) are treated separately in Section E.3, below.] Unique indicators for those malevolent DOE G 151.1-2 E-3 (and E-4) 7-11-07 events should be documented and will become the basis for stand-alone EAL statements. Denoting the malevolent cause of the initiator (e.g., malevolent event involving an explosion) is usually not necessary, since the initiator (e.g., explosion) will become the recognition indicator for the associated EAL. For all malevolent events added to the technical planning basis and EAL set, initial onsite PAs and, as required, offsite PARs should be developed. E.3 Extreme Malevolent Events Special consideration should be given to extreme malevolent event scenarios, which are within the constraints of the DBT and result in consequences that exceed the largest release from other scenarios. Facility VAs may provide a representative extreme malevolent event scenario(s), with the associated calculation of potential release consequences. This scenario will also represent an extreme malevolent event for emergency planning purposes. However, the analyst should ensure that the source term and the transport/dispersion parameters and meteorological assumptions used in the VA analysis are consistent with those used in calculations for emergency planning. If the parameters used in the VA calculations are not consistent, then the consequences should be recalculated using the same MAR but with emergency planning assumptions. [Cf. DOE G 151.1-2, Section 2.6] If a VA is not required for the facility, then consequences from postulated extreme malevolent event scenarios within the DBT (as identified by emergency planners in collaboration with site security professionals) will be analyzed following emergency planning guidance. Sites and facilities are not expected to include these extreme malevolent events in the technical planning basis or in determining the EPZ. However, recognizing that such events may require response measures that exceed site and EPZ planning and could require the involvement of multi-jurisdictional and even State and Federal response authorities, these events should be part of the site-wide EAL set to ensure prompt recognition. In addition, as is the case for all events included in the EAL set, initial onsite PAs and offsite PARs should be developed for these analyzed extreme malevolent events. The key to response for scenarios whose consequences extend beyond the EPZ is that planning efforts within the EPZ provide a substantial basis for expansion of response efforts beyond the EPZ, if necessary, as more accurate information on the nature of the event and its potential consequences become available. F-1 DOE G 151.1-2 7-11-07 APPENDIX F. Consequence Thresholds F.1 Introduction The purpose of this Appendix is to provide additional guidance regarding the definition and use of the terms: Protective Action Criteria (PACs), Protective Action Guide (PAG), Acute Exposure Guideline Level (AEGL), Emergency Response Planning Guideline (ERPG), Temporary Emergency Exposure Limit (TEEL), and Threshold for Early Lethality (TEL), as consequence thresholds for hazardous material effects.

The Order specifies the consequences of an actual or potential hazardous material release as a key determinant of the emergency class. The PAGs published by the Environmental Protection Agency (EPA) are specified as the applicable consequence thresholds for radiological exposures. The AEGL-2 published by the EPA, the ERPG-2 published by the American Industrial Hygiene Association (AIHA), and the TEEL-2 developed by DOE are identified, in order of preference, as the corresponding consequence thresholds for chemical hazards. The Order does not address the limitations of these standards or describe the precise manner in which they are to be used for hazards assessments and emergency planning. Section 2.6, DOE G 151.1-2, directs the user to calculate the consequences of hazardous material releases at several locations and compare the results with the applicable threshold in order to determine the appropriate emergency class. The user is also directed to calculate the maximum distance at which PACs and TELs would be expected and to use those distances in determination of Emergency Planning Zones (EPZs). F.2 Protective Action Criteria (PACs) PAC is the general term for the level of hazardous material impact that, if observed or predicted, indicates action is needed to prevent or limit exposure of people to the hazard. “PAC” is used for both radiological and non-radiological consequence criteria in DOE facility emergency planning and response. F.2.1 Radiological PAC DOE O 151.1C specifies that the PAGs published by the EPA in its Manual of Protective Action Guides and Protective Actions for Nuclear Incidents (EPA 400-R-92-001) should be used for comparison with exposures resulting from radiological releases to determine the appropriate emergency classification. These PAGs are intended to apply only to projected doses resulting from exposures to airborne releases of radioactive materials during the early phase of an emergency. The pathways considered include the external gamma and beta dose from direct exposure to airborne and deposited material and the committed dose to internal organs from inhalation of radioactive material. The projected dose value for initiating protective actions (evacuation or sheltering) specified in Table 2.1 of EPA-400 is 10 to 50 mSv (1 to 5 rem), where the projected dose F-2 DOE G 151.1-2 7-11-07 represents the sum of the effective dose equivalent (EDE) resulting from exposure to external sources and the 50-year committed effective dose equivalent (CEDE) from all significant inhalation pathways during the early phase. The sum of the EDE and CEDE is the Total Effective Dose Equivalent (TEDE). The PAG values for committed dose equivalent to the thyroid and the skin are 50 to 250 mSv (5 to 25 rem) and 500 to 2500 mSv (50 to 250 rem), respectively. The terms “PAG” and “EPA Protective Action Guides” used in the Order should be interpreted as follows: • A projected dose equivalent of 10 mSv (1 rem) TEDE to reference man, where the projected TEDE is the sum of the EDE from exposure to external sources and the CEDE from inhalation during the early phase; or • A projected committed dose equivalent (CDE) to the adult thyroid of 50 mSv (5 rem); or • A projected CDE to the skin of 500 mSv (50 rem). EPA 400-R-92-001 states that for planning purposes, “... it will usually be convenient to assume that the early phase will last for four days.” However, it also states that the assumed time of exposure to deposited materials may depend on “... unique characteristics of some facilities or situations...” and that exposure pathways contributing less than 10 percent of the dose in the early phase need not be considered.

External exposure to deposited materials may be excluded from the early phase dose projection if the exposure for a period equal to the estimated EPZ evacuation time (or a maximum of four days) can be shown to contribute less than 10 percent of the TEDE. If no official prior estimate of EPZ evacuation time exists, an estimate may be developed and documented within the EPHA. Facilities having substantive and persuasive arguments for using other protective action threshold values may propose values that are specific to their radioactive material holdings and operations. Requests for exemption from the Order requirement should be submitted in accordance with the procedure specified in the Order. Any exemption request should be supported by an analysis that addresses the four principles that form the basis for the selection of the EPA PAG values and the other considerations utilized in the selection process, as discussed in Appendix C of the EPA 400-R-92-001. For ingestion pathway exposure, the U.S. Food and Drug Administration (FDA) has issued recommended PAGs that correspond to the “intervention levels of dose” consensus values set by international organizations (FDA 1998). Those PAGs are 5 mSv (0.5 rem) for CEDE or 50 mSv (5 rem) committed dose equivalent to an individual tissue or organ, whichever is more limiting. The FDA also recommended Derived Intervention Levels (DILs) corresponding to the PAGs for several groups of radionuclides. DILs corresponding to the ingestion pathway PAGs may be derived locally according to the F-3 DOE G 151.1-2 7-11-07 FDA recommendations for specific radionuclides, foodstuffs, and animal feeds of interest. F.2.2 Non-radiological PAC DOE O 151.1C specifies that AEGL-2, promulgated by the EPA; ERPG-2, published by the American Industrial Hygiene Association (AIHA); and TEEL-2, developed by DOE are to be used, in order of preference, as PACs for non-radioactive hazardous materials. AEGLs are guideline levels for once-in-a-lifetime, short-term (not repeated chronic) exposures to airborne concentrations of acutely toxic chemicals. These exposure limits are intended to protect most individuals in the general population, including those that might be particularly susceptible to the toxic effects of the chemicals. However, certain individuals could experience effects at concentrations below the corresponding AEGLs. AEGL-1, -2 and –3 values are being developed for each of five exposure periods, ranging from 10 minutes to eight hours. AEGLs are first published as “proposed” in the Federal Register for a review and comment period. Following resolution of relevant issues raised through public review, the values are classified as “interim.” The interim values are available for use, as deemed appropriate, on an interim basis by Federal and state regulatory agencies and the private sector. When concurrence by the National Research Council AEGL Subcommittee is achieved, the AEGL values are published as “final.” Final AEGL values may be used on a permanent basis by all Federal, state and local agencies and private organizations. Within the ERPG system, three biological reference values are defined for each material as follows: • ERPG-1 is the maximum airborne concentration below which it is believed that nearly all individuals could be exposed for up to 1 hour without experiencing other than mild transient adverse health effects or perceiving a clearly defined objectionable odor.

• ERPG-2 is the maximum airborne concentration below which it is believed that nearly all individuals could be exposed for up to 1 hour without experiencing or developing irreversible or other serious health effects or symptoms that could impair their abilities to take protective action. • ERPG-3 is the maximum airborne concentration below which it is believed that nearly all individuals could be exposed for up to 1 hour without experiencing or developing life-threatening health effects. ERPGs have been issued for approximately 130 chemicals as of 2006, and about 185 interim and final AEGLs have been published. Because there are no approved ERPG or final AEGL values for many hazardous chemicals of particular interest to DOE and its operations, the Chemical Exposures Working Group of the DOE Emergency Management Issues Special Interest Group (EMI SIG), Subcommittee on Consequence F-4 DOE G 151.1-2 7-11-07 Assessment and Protective Action (SCAPA), developed and published a method for determining alternative planning values. The system of alternative values, termed Temporary Emergency Exposure Limits (TEELs), includes three biological reference values (TEEL-1, -2 and -3) for each substance, each with a definition similar to the corresponding ERPG value. TEEL values and the development methodology are disseminated for use within DOE via the DOE Chemical Safety web site: http://www.eh.doe.gov/chem_safety//teel.html. DOE facilities/sites or activities in need of PAC values for other substances should request that SCAPA develop and publish the TEELs. TEEL requests are submitted via the SCAPA website http://www.orau.gov/emi/scapa/index.htm. Future requests for TEELs should be for chemicals that are used in sufficient quantities that could result in an Operational Emergency. In the event that PAC values cannot be obtained using the TEEL methodology, users may select from one of the sets of chemical exposure guidelines issued by other agencies that are sometimes used as emergency planning criteria. These include the short-term public emergency guidance levels (SPEGLs) and emergency exposure guidance levels (EEGLs) developed by the National Research Council, and the LOCs published jointly by the EPA, FEMA, and DOT. To determine whether a chemical consequence exceeds PAC, the highest time-weighted average (TWA) concentration predicted or measured for any 15-minute period (i.e., the maximum or peak 15-minute TWA concentration) should be compared to the PAC. For exposure periods of less than 15 minutes, concentrations for comparison with the guidelines may be calculated over a shorter time period (e.g., the exposure duration). Some consequence assessment dispersion codes will calculate the desired maximum 15-minute average concentration directly, by allowing the analyst to specify the averaging period. To determine the average concentration manually, the following formula can be used. C1T1 + C2T2 + . . .+ CnTn E CnTn TWA = -------------------------------- = ----------- T1 + T2 + . . . + Tn E Tn Where: C = Concentration (ppm or mg/m3), and T = Time period of exposure (min) It is not recommended that individual time intervals less than 1 minute be used in the numerator of the above formula for calculating the TWA. For the peak 15-minute TWA, the 15-minute period of maximum exposure (concentration) is selected and input (as 15 one-minute segments) into the above formula. For exposure periods of less than 15 minutes, the product of CxTx may equal zero during the exposure period. These “zero” results may be factored into the 15-minute average or the use of a shorter

http://www.orau.gov/emi/scapa/index.htm http://www.eh.doe.gov/chem_safety//teel.html F-5 DOE G 151.1-2 7-11-07 averaging duration, such as the actual exposure period, may be warranted depending on the acute toxicity of the chemical of interest and the peak concentration observed. For purposes of applying the Order emergency class definitions, the term PAC should be interpreted to mean the following: A 15-minute TWA concentration of the substance in air that equals (in order of preference) the Final or Interim AEGL-2 (60-minute), the ERPG-2, or TEEL-2 value for that substance; if none of these values is available, an alternative concentration criterion may be selected in accordance with this guidance. F.3 Threshold for Early Lethality (TEL) Chapter 3, DOE G 151.1-2, specifies use of the maximum distance at which facility emergency consequences could exceed a TEL as one element in the determination of EPZ size. In general, early lethality is equated with deterministic processes (i.e., a threshold of exposure exists below which the effect is not observed and the severity of the effect is related to the dose or exposure). As used here, the early lethality threshold applies to the general population and is intended to approximate the level of dose or exposure at which the sensitive groups within any large population would begin to show an increase in mortality. The definitions below are intended only for use in the facility hazards assessment process. For purposes of conducting facility hazards assessments, the term “TEL” should be interpreted as follows. For radioactive releases, the TEL is: A projected dose (TEDE) of about 100 rem (1 Sv) to reference man, where the projected TEDE is the sum of the EDE from exposure to external sources and the CEDE from inhalation during the early phase. The using 100 rem (1 Sv) TEDE as an approximation of the TEL is conservative. Radiation effects studies have estimated a 5 percent risk of early fatality following a 140 rem (1.4 Sv) acute dose, with a smaller, indeterminate risk expected for lower doses. Little if any risk of early fatality would be associated with a TEDE equal to 100 rem (1 Sv), if the dose were received over a period of time from radioactive material taken into the body. For chemical releases, the TEL is A projected 15-minute average concentration of the substance in air that equals (in order of preference) the Final or Interim AEGL-3 (60 minute), the ERPG-3, or TEEL-3 value for that substance. If none of these values is available, an alternative concentration criterion may be selected in accordance with this guidance. F-6 DOE G 151.1-2 7-11-07 F.4 Chemical Mixtures For chemical mixtures and concurrent releases of different substances, consequences should be assessed using the Mixture Methodology “Hazard Index” approach recommended by the SCAPA Chemical Mixtures Working Group (Craig, et al., 1999). A brief explanation of this approach and the published journal article are available on the SCAPA website, http://www.orau.gov/emi/scapa/index.htm, under Health Code Numbers (HCNs). An EXCEL workbook that automates the implementation of the approach is also available on the SCAPA website. Concurrent releases should be analyzed if a plausible scenario exists by which quantities of different substances, each exceeding a laboratory scale threshold discussed in Appendix A, could be released from the same location at the same time. Concurrent releases of dissimilar substances that, because of separation by distance or physical barriers, could result only from extreme malevolent acts or catastrophic events (such as major fires, airplane crashes, severe natural phenomena impacts, and building collapse) need not be analyzed.

http://www.orau.gov/emi/scapa/index.htm G-1 DOE G 151.1-2 7-11-07 APPENDIX G. Combustion Products and Toxicity in Hazards Assessments G.1 Introduction The DOE Emergency Management system provides for analysis of hazards and hazard- specific planning to prevent or reduce negative impacts on people and the environment. Of paramount concern is the prevention of death, injury and serious near-term health effects in populations that may be exposed to hazardous material releases originating from DOE facilities/sites or activities. To ensure that DOE/NNSA hazardous material identification and screening approaches remain consistent with the historical and policy bases of the DOE Orders and with current Federal, State and local emergency management requirements and practices, this appendix clarifies how certain toxic hazards should be assessed and the results used in emergency planning and response. G.2 Background DOE hazardous material emergency planning and response requirements were originally specific to the radiological hazards posed by weapons materials production and research activities. In the early 1980’s, the requirements were modified to bring them generally into alignment with NRC emergency preparedness regulations that applied to commercial nuclear power reactors and radioactive material facilities. The DOE Orders were further revised in 1991 to place toxic chemicals on a par with radioactive materials for purposes of analysis, planning and response. As with the earlier modifications, the 1991 changes helped align DOE requirements with regulations being implemented by other Federal agencies, including the EPA, DOT, and Department of Labor (DOL). Throughout their evolution to the present date, the DOE Order requirements were (and continue to be) primarily intended to apply to toxic substances that, if released to the atmosphere, could pose an imminent health hazard to persons beyond the immediate vicinity of the release. The process of determining whether a substance should be considered a “hazardous material” for DOE emergency management purposes is complicated somewhat by the fact that many very ordinary and ubiquitous substances are, in fact, toxic to humans or have other hazardous properties under specific conditions of exposure or misuse. In addition, other substances that are generally regarded as hazardous for one specific reason may have several different hazardous properties. [Note: Gasoline is a classic example. It is acutely toxic by ingestion and inhalation, environmentally destructive, highly flammable, explosive (when vaporized), and contains a known human carcinogen (benzene). Flammability dominates the safety/handling concerns and it is generally excluded from the domain of hazardous material emergency planning under DOE O 151.1C.] Finally, burning almost anything will produce combustion products that meet the basic definition of “hazardous material” as that term is used in the context of emergency planning. In recent years, it has become apparent that by taking certain passages from G-2 DOE G 151.1-2 7-11-07 DOE Orders and guidance documents in isolation and interpreting them narrowly, many commonplace substances can be deemed “hazardous materials” and almost any fire can be considered a “hazardous material emergency.” However, that kind of narrow and selective interpretation is not consistent with DOE emergency management policy and the intent of the Order. G.3 Chemical Explosives

As part of their weapons development and research missions, several DOE facilities and activities store, process or dispose of chemical explosives in substantial quantities. Beyond the obvious danger from inadvertent explosions, some chemical explosives are also acutely toxic if inhaled or taken into the body by other routes. Most chemical explosives are solids with low vapor pressures at ambient temperatures and therefore do not conform to the general definition of a “dispersible” toxic substance upon which the DOE emergency management requirements are based. Historically, the toxic effects have been observed only in persons involved in directly handling or fabricating the materials without adequate workplace environmental controls or personal protective equipment. Accordingly, chemical explosives are not normally considered “dispersible” toxic substances requiring analysis and hazardous material emergency planning. Another aspect of the hazard associated with chemical explosives is the production of toxic combustion products when they burn. Many explosives burn readily in air and open burning is, in fact, a common disposal method for surplus explosives. Several DOE activities have recognized the potential hazard posed by the combustion products and attempted to quantify it as a basis for emergency planning. Using combustion yield data derived from theoretical studies and field experiments, the amount of nitrogen oxides and other toxics produced by burning of explosives can be calculated. Taken as a potential airborne source, the toxics associated with combustion of a few pounds of TNT, RDX or any of several other commonly used explosives can exceed applicable PAC at significant distances, implying that categorization and classification as OEs may be required. However, it is established fact that many other materials used in building construction, furniture and fabrics produce copious amounts of toxics if burned. Therefore, the question: Is there any rational basis for applying the “hazardous material emergency” definition to fires involving explosives and not to other “ordinary” fires that represent equal or greater toxic sources? In an attempt to answer this question, the following section examines the toxic hazard from “ordinary” fires and compares it with that produced by burning explosives. G.4 Toxic Release Comparison Any structure fire will produce toxic products of combustion from the burning of structural materials, preservatives, refrigerants, paint, plastics, and so forth. Dangerous concentrations of carbon monoxide, hydrogen cyanide, hydrogen chloride, oxides of nitrogen, and various organics can be expected in the vicinity of even the most “ordinary” structure fire and profound respect for the toxic properties of all smoke is a guiding principle of modern firefighting and Incident Command practice. The position of the fire protection community is made perfectly clear in the NFPA Fire Protection Handbook, G-3 DOE G 151.1-2 7-11-07 which concludes its discussion on smoke toxicity (Section 3, Chapter 1) with the following unambiguous statements: Combustion products produced in a fire are always toxic and extremely hazardous to life safety, AND Smoke, even of “average” toxicity is still very toxic.

To quantitatively assess whether the toxic releases from burning of explosives was substantially different from what might be expected from an “ordinary” structure fire, data on the combustion yield of toxics for different materials was sought from a variety of sources. The yield of various products depends greatly on the combustion conditions (temperature, surface area, excess oxygen, etc.) under which the fuel is burned, and the yield under bench-top experiment conditions may be much different than would be typical in a real-world fire condition. In April 2003, the National Institute of Standards and Technology (NIST) published Technical Note 1453, Smoke Component Yields from Room-Scale Fire Tests. The report presented the methodology and results for a series of room-scale fire tests conducted by the NIST Building and Fire Research Laboratory to produce data on the yields of toxic products in fires. The combustibles examined in the tests included a sofa made of upholstered cushions, particleboard bookcases with a laminated finish, polyvinyl chloride (PVC) sheet, and household electrical cable. The report gave results in terms of yields (gram of toxicant per gram of fuel) for each of several highly toxic substances, including HCN and HC1. The yield values were based on analysis of the exhaust smoke stream in both the pre-flashover and post-flashover phases. The pre- and post-flashover HCN and HC1 yield values for the sofa, bookcase and electrical cable are presented in Table 25 of the NIST report and summarized in Table G-1. The higher yield values for each gas and fuel are shaded. Nearly all of common explosives are nitrogen-rich compounds and the toxic combustion products are primarily NO and NO2. Because the yield of NO was not reported in the NIST room fire tests and the NO2 results were reported only as “less than” values, HCN and HC1 yields from the test fuels were used to represent smoke toxicity in this comparison. First, the amounts of NO2, HCN and HCl needed to produce a 15-minute average concentration equal to the ERPG-2/TEEL-2 value at various distances were calculated using EPIcode, version 2.0 (under conditions of 1 m/s, F stability and a 4 m by 10 m “surface area source”, simulating release from a fire in a trailer or small building). Table G-1. Yields of Hydrogen Cyanide and Hydrogen Chloride from NIST Room Fire Tests (grams of combustion product/grams of test fuel) Gas Fire Stage Sofa Bookcase Cable HCN Pre-flashover 3.5E-3 ± 50% 4.6E-4 ± 10% 6.3E-4 ± 50% Post-flashover 1.5E-2 ± 25% 2.5E-3 ± 45% 4.0E-3 ± 30% HCl Pre-flashover 1.8E-2 ± 30% 2.2E-3 ± 75% 6.6E-3 ± 35% Post-flashover 6.0E-3 ± 35% 2.2E-3 ± 65% 2.1E-1 ± 15% G-4 DOE G 151.1-2 7-11-07 Table G-2 presents the results of the EPIcode trials in which the amount of toxic gas needed to produce a concentration equal to applicable ERPG-2/TEEL-2 at 100 m, 800 m, and 1600 m were calculated. Table G-2. Amounts of Toxic Gases Needed to Exceed Applicable ERPG-2 Value at Various Distances Gas ERPG-2 (ppm) *Q (100m) (kg) *Q(800m) (kg) *Q(1600m) (kg) HCN 10 0.33 5 15 NO2 15 0.85 14 38 HCl 20 0.9 14.4 42 *Q(___m) = amount (kg), if released under the specified conditions, will produce 15-minute average concentration equal to the applicable ERPG-2 value at the specified distance.

Using the bounding values for combustion yields for the three test fuels from Table G-1 (sofa cushions, book cases and electrical cable) and four common explosives (TNT, RDX, TATB and HMX), the amount of each substance that would need to be burned in 15 minutes to release that amount of the particular toxic gas was calculated. The values of Y (combustion yield) used for explosives are “burn emission factors” provided by the Pantex Plant (Environmental) Regulatory Compliance Department, which has developed a spreadsheet to calculate emissions from HE detonation and combustion. The emission factors are used to document the compliance with environmental permits for the Pantex Firing Sites and Burning Grounds. The spreadsheet value for “oxides of nitrogen” was used to calculate a yield of nitrogen dioxide. This is a conservative approach because NO2 is more toxic than NO. The amount of combustible substance is given by the following equation: Mcomb = MTox /Y Where Mcomb = Mass of the combustible required to produce toxic release of MTox MTox = Mass of toxic gas necessary to produce 15-minute average concentration equal to the ERPG-2 value at the specified distance Y = Combustion yield of the toxic gas (mass of combustion product/mass of fuel) For this comparison, the values of Q(100m) from Table G-2 are used to represent MTox. The masses of combustibles thus calculated correspond to the amount of each substance that would have to be burned in a period of 15 minutes or less to yield enough of the particular toxic gas to produce a concentration just equal the applicable ERPG-2 value at 100 m under the specified release and atmospheric transport conditions. Table G-3 presents the calculated values of Mcomb for the three test fuels used in the NIST experiment and the four common explosives. G-5 DOE G 151.1-2 7-11-07 Table G-3. Mass of Combustibles to Produce a 15-Minute Average Concentration of Specified Toxic Gases Equal to ERPG-2 at 100 meters Combustible Toxic Gas Q(100m)(kg) Y Value Mcomb (kg) Sofa HCN 0.33 1.5E-2 22 HCl 0.9 1.8E-2 50 Bookcase HCN 0.33 2.5E-3 132 HCl 0.9 2.2E-3 409 Electrical cable HCN 0.33 4.0E-3 82.5 HCl 0.9 2.1E-1 4.3 TNT* (explosive) NO2 0.85 6.62E-2 12.8 RDX (explosive) NO2 0.85 2.12E-2 40 TATB (explosive) NO2 0.85 4.27E-2 19.9 HMX (explosive) NO2 0.85 2.10E-2 40.5 *Although little if any TNT is currently used in DOE weapons programs, it is included here for comparison because it is the most oxygen-deficient of common explosive compounds and therefore produces the highest yield of nitrogen oxides. When the values in the final column are viewed as an index of combustion toxicity (lower values mean higher toxic impact per unit mass of combustible), it can be seen that ordinary household electrical cable (the insulation and sheathing of which is primarily polyvinyl chloride) is by far the worst actor in this group, its combustion products having about 3 times the toxic impact of the worst explosive (TNT) on a burned-weight basis. Based on HCN alone, the polyurethane sofa cushions are about equal to the next worst explosive (TATB). On a pound-for-pound basis, the particleboard bookcases have about 10 to 30 percent the toxic yield of the explosives. From this small sampling alone, it can be seen that the constituents of “ordinary” smoke are indeed extremely toxic, and that the toxic impact of gases generated by burning explosives is of the same order of magnitude as for several of the mundane articles used in the NIST test.

G.5 Other Hazards and Planning Considerations The most obvious hazard from explosives is the blast or shock wave produced by an explosion or detonation. Although many explosives will burn evenly if unconfined, explosion should always be considered a possibility. In addition to the blast/shock effects, flying objects (missiles) may also be propelled outward from the explosion at high speeds and hazardous objects, such as rounds of ammunition, and fragments of explosive may be spread over a wide area. Having been subjected to the effects of a blast, such unexploded materials may be very sensitive to shock, friction, or temperature change, and therefore dangerous to personnel. As introduction to the topic of “Effects of Explosions and Permissible Exposures”, DOD 6055.9 STD, DOD Ammunition and Explosives Safety Standards, (Chapter 2) states: “In the assessment of the hazard associated with a given situation, the principal effects of the explosive output to be considered are blast pressure, primary and secondary fragments, thermal hazards, and chemical agent hazards.” “Chemical agent hazards” refers not to G-6 DOE G 151.1-2 7-11-07 the intrinsic chemical toxicity of the explosives but to chemical warfare agents, such as nerve gas or blister agents contained in munitions that also include an explosive charge. The standard describes the expected damage and injury from blast and fragments and specifies storage separation and other controls for munitions based on those specific effects and the quantity of explosive. (Note: At least one DOE activity has used the DOD standard to specify facility-specific setback and emergency withdrawal distances for the protection of firefighters and others against blast and fragments.) The DOT ERG provides first responders with information on the specific or generic hazards of the materials involved in a transportation incident and recommendations for protecting themselves and the public. Guide number 112 applies to all explosive groups except 1.4 (no blast potential). Guide 112 uses the highest degree of typographical emphasis (all capitals, bolded) to identify the chief potential hazard associated with such shipments, specifically: “MAY EXPLODE AND THROW FRAGMENTS 1600 METES (1 MILE) OR MORE IF FIRE REACHES CARGO.” In case of fire, Guide 112 goes on to recommend that responders NOT fight the fire when the fire reaches the cargo, but to isolate and evacuate the area out to a distance of 1600 meters (for heavily encased explosive) in all directions. Although the Guide states that fire “. . . may produce irritating, corrosive and/or toxic gases,” it clearly represents blast and fragments as the dominant hazards. In addition, the firefighting guidance section of Guide 112 makes it clear that if fire reaches the cargo, explosion should be considered imminent. G.6 Summary All fires produce dispersible toxic substances. Toxic impacts from combustion of commonplace materials like particleboard, polyurethane foam and polyvinyl chloride appear comparable to impacts from burning the same weight of explosives. If explosives are singled out as “hazardous material release” hazards when burned, then many other substances (including diesel fuel and rubber tires) could likewise be analyzed and brought under the hazardous material emergency planning program based on the toxicity of their combustion products. Selective reading of certain parts of DOE O 151.1C and Chapter 2, DOE G 151.1-2, can lead to even the most “ordinary” fires being characterized as DOE hazardous material release events. However, DOE emergency management does not exist in isolation. The DOE definitions and conventions regarding what is and is not a hazardous material emergency need to be consistent with established Federal, State, local and industry programs and standards and with the historical roots of hazardous material emergency management, in general.

The toxic impact of smoke from “ordinary” fires is currently managed through standard fire fighting and Incident Command practices. Trained firefighters and Incident Commanders understand that: a) all smoke is toxic, b) exposure to well-defined smoke plumes should be avoided, by response personnel and others, and c) protection of nearby people is an express responsibility of the Incident Command organization. In addition, fires tend to be energetic events, announced by flames, smoke, fire alarms, sirens, the arrival of fire apparatus and the attendant actions of firefighters. Smoke itself tends to give direct visual and olfactory evidence of its presence and relative concentration, allowing firefighters and others to avoid exposure or remove themselves from areas of G-7 DOE G 151.1-2 7-11-07 highest concentration. These facts contrast starkly with the picture of a silent, unnoticed threat from airborne radioactive materials or toxic chemicals that forms the doctrinal basis for current hazardous materials emergency management practice. At this time, there is no compelling evidence that exposure to toxics in smoke from ordinary fires is a significant source of human health risk that is not being adequately managed by firefighting and Incident Command practices, or that application of hazardous material models, planning criteria and response practices to ordinary fires would do anything to enhance protection of workers and the public. For military personnel and transportation emergency planners, blast and fragments are the hazards of greatest concern from explosives, and any fire that involves or threatens explosives should be treated as an imminent explosion. As with numerous other hazardous substances, the toxicity of combustion products is recognized but is clearly of secondary concern and is not a prominent consideration in planning for emergencies. G.7 Conclusions 1. Fires in buildings or facilities that do not contain large inventories of hazardous materials may need to be categorized as OEs if they result in significant structural damage with suspected personnel injuries or death (DOE O 151.1C, Chapter V). However, even if they are categorized as OEs, “ordinary” fires should not be classified on the basis of “incidental” releases of hazardous materials (combustion products, etc.). If a documented Fire Hazards Analysis or an assessment by a qualified fire protection engineer suggests that there is an extraordinary toxic release potential and that protective actions beyond those normally implemented for structure fires will be needed, the toxic material release should be addressed in an EPHA. 2. In general, the blast, missile and burn hazards posed by conventional explosives (and certain other materials like natural gas and propane) are outside the scope of the Hazardous Material emergency management program specified in DOE O 151.1C. Any analysis of hazards from conventional explosives should focus on blast, missile and burn hazards, not the potential airborne release of toxic chemicals. Analysis and planning for those hazards should be done in the context of the facility/site Fire Protection program or other safety program(s). Fires involving or threatening conventional explosives should be regarded as imminent blast/missile hazards. The chemical toxicity of explosive residue and combustion products will be of secondary concern compared to the inherent blast and missile hazard and can be adequately managed by trained Incident Commanders using standard and accepted firefighting and HAZMAT response practices.

3. An explosive should be analyzed as a dispersible toxic chemical hazard only if it is used or stored in a form (such as a powder or liquid) that represents a plausible air- dispersible source of the substance. 4. If an explosion has occurred and there is no potential for another, the most significant safety impacts (blast, shock, missiles) will already have ended and therefore will not be mitigated by the same kinds of protective actions and response measures G-8 DOE G 151.1-2 7-11-07 (evacuation, sheltering, etc.) that are usually applied to hazardous material release emergencies. However, the distribution of unexploded material and items around the vicinity of an explosion is analogous to the situation existing after a chemical or radiological release (i.e., hazardous contamination requiring control of personnel access, planned reentry and recovery actions, and response by specialized support personnel). Accordingly, as a means of facilitating response, individual facilities and sites may choose to classify OEs involving actual or potential explosions that could distribute explosive materials outside the immediate vicinity of the explosion. The classification should be at a level that is consistent with the size of the affected area and the resources that will be needed to deal with the consequences. H-1 DOE G 151.1-2 7-11-07 APPENDIX H. Example Application of the Hazards Assessment Methodology to a Hypothetical DOE Facility H.1 Introduction The purpose of this appendix is to illustrate the application of an integrated approach to conducting a facility EPHA suggested in the main body of DOE G 151.1-2, Sections 2.3­ 2.7, which describe the steps of a suggested approach for conducting a facility Emergency Planning Hazards Assessment (EPHA). The approach was described quite briefly and in sufficiently general language that it could be applied to a broad variety of facility types. An example application of the approach is presented in this appendix. This appendix is presented in the format of an EPHA document for a hypothetical DOE facility and site, prepared in accordance with the suggested methodology. Numbered sections (i.e., 1.1, 1.2, etc.) are parts of the example EPHA document. The format and content of the example application, presented in the following pages, should be viewed as an acceptable means of meeting the EPHA requirement of DOE O 151.1C and documenting its results. The table of contents for the example EPHA is given below. 1. INTRODUCTION 2. SITE, FACILITY AND PROCESS DESCRIPTION 3. HAZARD CHARACTERIZATION 4. SCENARIO SELECTION 5. ANALYSIS OF SCENARIOS 6. EMERGENCY PLANNING ZONE (EPZ) 7. EMERGENCY ACTION LEVEL (EAL) BASIS 8. MAINTENANCE/REVIEW OF THIS HAZARDS ASSESSMENT H-2 DOE G 151.1-2 7-11-07 H.2 Example EPHA EMERGENCY PLANNING HAZARDS ASSESSMENT FOR THE ABC FACILITY 1. Introduction This report documents the EPHA for the ABC Facility located on the DOE XYZ Site. The facility-specific EPHA was conducted in accordance with DOE guidance to fulfill the DOE O 151.1C requirement to provide the technical basis for facility emergency planning efforts. 2. Site, Facility and Process Description Detailed descriptions of the ABC Facility and the XYZ Site are found in Sections 2 and 3, respectively, of the ABC Facility Documented Safety Analysis (Reference ). The following summary is derived from that description. NOTES:

1. It is not intended that the facility and site description section be voluminous. If suitable facility and site descriptions are not available for reference, a maximum of 5 to 10 pages of text plus 2-4 maps or figures showing the facility and site layout should suffice for most facilities. If a reasonably complete and current facility and site description is available in a published Safety Analysis Report (SAR), Safety Assessment Document (SAD), Documented Safety Analysis (DSA) or similar document, it should be introduced by reference and summarized as shown here. 2. The site description should include a brief description of the climate, geography, hydrology, seismology, and land use on and near the site. 3. After the analysis of release scenarios (Section 5) and the Emergency Action Level basis (Section 7) are completed, this section of the Hazards Assessment document should be reviewed and expanded as necessary to describe any features and systems that are significant to the analyses (engineered protective features, ventilation system flow rates, filter efficiencies, etc.) or to the detection and recognition of the releases (monitoring instruments and alarms). 2.1 Facility Mission The ABC Facility is a chemical and materials engineering laboratory that provides a diversified capability for chemical processing and materials engineering studies involving radioactive materials and other hazardous materials. Among the activities in progress are development of treatment processes for hazardous wastes and fabrication of prototype thermal-electric generators _________________________________________________________________ _________________________________________________________________ _________________________________________________________________ H-3 DOE G 151.1-2 7-11-07 powered by long-lived radioisotopes. The ABC Facility is operated by (operating contractor) for the DOE. 2.2 Location The ABC Facility is located in the southeast part of the 123 Area of the DOE's XYZ Site. The 123 Area is a limited access area of about 200 hectares (500 acres) located about 10 km (6 miles) north of Anytown. Figure 2-1 shows the location of the ABC Facility with respect to the other facilities in the 123 Area and the immediate surrounding area. Figure 2-2 shows the location of XYZ Site and approximate distances to cities and towns in the region. 2.3 Facility Description For purposes of this EPHA, the ABC Facility consists of the main ABC Building and the ABC Vent Stack (both described the DSA) plus the ABC Warehouse Annex and office trailers ABC1 through ABC6. The entire facility is within a protected area, defined by the security boundary fence shown in Figure 2-1. Figure 2-1. Location of the ABC Facility in the 123 Area (Local area map showing facility, security boundary, adjacent facilities and occupancy, receptors of interest identified in Section 6, and site boundary.) [Map not included in this document.] Figure 2-2. Location of the XYZ Site (Map showing location of the site with respect to the State, towns, and offsite receptors identified in Section 6.) [Map not included in this document.]

NOTE: The hypothetical facility in this example illustrates the inclusion of several ancillary structures as part of the “facility” for purposes of the EPHA. In the case of both the warehouse and the office trailers this is judged to be reasonable because the ancillary structures are: (1) physically close to the main building, (2) within the same protected area fence, (3) directly in support of the facility mission (storage for equipment and materials used routinely in the main building and office space for facility staff), and (4) under the responsibility of the same functional (line) organization and building manager. There is another major facility only 75 m away within the same protected area, and for purposes of this EPHA, the facility boundary is defined as a 100-m radius from the point of H-4 DOE G 151.1-2 7-11-07 release. See Appendix C of the guidance for additional discussion of facility boundaries. The ABC Building is a 62-m × 70-m (200-ft × 240-ft) two-story structure (with partial basement and third floors) constructed of insulated steel panels on a structural steel frame. The foundation is poured, reinforced concrete. The roof is gravel-finished, class II, 20-year built-up roofing. The building was constructed in 1964 and was designed to the requirements of the Uniform Building Code. The ABC Stack is a 2-m diameter, 60-m (195 ft) tall reinforced concrete stack, located 30 m north of the northeast corner of the ABC Building proper. Ventilation exhaust fans in the basement of the building exhaust through a tunnel to the stack. A 2.4-m × 4-m concrete block structure at the base of the stack houses the stack effluent sampling and air flow measuring instruments. The ABC Warehouse Annex is a 10-m × 30-m steel frame and panel single-story structure (5 m eave height) built on a concrete floor slab. It is located inside the protected area adjacent to the southeast corner of the ABC Building proper. Its primary use is the receipt and storage of materials and equipment used in the ABC Building operations. Among the materials and equipment normally stored there are industrial chemicals and gases, packaged samples of hazardous waste for use in process testing, shipping casks used for transporting radioactive material specimens and packaged low level and mixed waste awaiting transportation to disposal sites. Office trailers ABC1 through ABC6, clustered near the southwest corner of the building, are of conventional modular (mobile) home frame construction on concrete-block foundations. Of the approximately 80 offices in the trailers, about half are assigned to employees directly associated with the ABC Building operations. The office trailers are served by the ABC Building fire alarm and public address/announcing systems. The protected area security fence shown on Figure 2-1 encloses the ABC Facility as well as two adjacent facilities, a radio-metallurgical laboratory, and the 123 Area water treatment plant. Entry for both personnel and vehicles to the protected area is gained by way of the central access portal, which is manned full- time by site security forces. Persons entering through the central access portal require valid identification with a special access authorization and are screened for weapons or prohibited articles. Once inside the protected area, a key card is required to gain access to the ABC Building, the warehouse annex, or office trailers.

Figure 2-1 shows the facilities and other features of the 123 Area, including the number of persons normally present during working hours and off hours. The nearest site boundary, and hence, the point closest to the ABC Facility where members of the public can gain uncontrolled access, is the near bank of the Big H-5 DOE G 151.1-2 7-11-07 River, 500 m to the east. The nearest public road access is a parking lot 350 m to the southwest. The potential effects of natural phenomena and external hazards on the ABC Facility are described and analyzed in Section of reference (the DSA). The ABC Facility is a Category 2 nuclear facility 2.4 Processes and Operations NOTE: For purposes of illustration, this section describes two separate hypothetical processes that involve hazardous materials. The processes described are not intended to resemble any specific operations carried out at DOE sites. The example is intended to illustrate the possibility of two or more basically different types of operations coexisting in the same facility and being treated in one facility Hazards Assessment. Process Number 1 (Non-radiological). Process number 1 involves the development and testing of methods for treating hazardous waste to reduce its volume and facilitate its storage and disposal. Specifically, soil and building materials contaminated with polychlorinated biphenyls (PCBs) and heavy metals are used to develop and demonstrate the treatment processes. The process begins with the receipt of samples of contaminated materials packaged in 208-L (55-gal) steel drums with plastic liners at the ABC Warehouse Annex. The containers are inspected and stored in the warehouse until needed as feed material for the development process. Typically, 12 to 30 drums containing 50 to 150 kg (110 to 330 lb) of soil, concrete, brick, wallboard, lumber, and insulation material are stored in the warehouse at any time. These materials contain from 100 to 5000 parts per million (ppm) by weight of PCBs and up to 2000 ppm of lead and cadmium. The waste material is transported, one drum at a time, into Room 101 of the ABC Building. There, the drums are opened in a ventilation booth and emptied on a sorting conveyer where the contents are characterized. The sorting conveyer carries the material into a rotating drum incinerator. The incinerator, fueled by propane gas, heats the material to 1000°C for 60 minutes, destroying all PCBs and other organic contaminants. The off-gas from the incinerator is passed through HEPA filters and scrubbed prior to being released to the environment by way of the building main stack. After cooling to 200°C, the solid residue from the incinerator is passed through a grinder that reduces it to particles of 5 mm or less in size. The residue then is injected into a continuous mixer with various prepolymers, catalysts, and stabilizers and extruded as durable, high-density plastic shapes suitable for landfill disposal or other use. H-6 DOE G 151.1-2 7-11-07 A detailed description and material flow diagram for Process No. 1 is in reference _____. Process Number 2 (Radiological). Process number 2 involves the fabrication and testing of prototype thermal-electric generators powered by Pu-238, a long- lived radioisotope. The process begins with the receipt of plutonium nitrate solution. The nitrate solution is received in 1-L bottles in large shipping containers and subjected to receipt inspection and assay in another facility. The bottles are then transferred directly to the ABC Building storage vault, Room 109.

As needed, the nitrate solution is removed from the storage vault to Cell 1, where it is converted to an oxide powder by the MAGIC process. The powder is then calcined, blended, pressed with a binder, and granulated in Cell 2. The granulated material is then pressed into pellets and sintered in Cell 3. The sintered pellets are transferred to the grinding and inspection glovebox in Room 110, where they are ground to final dimensions, weighed, and visually inspected for defects. The finished pellets then are transferred to the RTG fabrication area, Room 111, where they are incorporated into RTG assemblies. The assemblies, of various designs, may contain from 4 to 800 g of Pu-238 pellets each. Following fabrication, the RTGs are transferred to the RTG test laboratory, Room 115, where they are subjected to a variety of mechanical, thermal and electrical performance tests. First, the electrical output of the RTG is measured and compared to design performance specifications. Then, the device is subjected to the temperature extremes (24 hours in a 300°C oven followed by 24 hours in a liquid nitrogen bath), vibration (10 × gravity at 20 Hertz for 24 hours), impact (equivalent to being dropped on concrete 8000 times from a height of 10 m), and penetration (equivalent to being struck by 12 armor-piercing 7.62-mm bullets). If the electrical performance of a device is satisfactory after the tests, it is placed under long-term evaluation, where the output is monitored under a variety of expected operating conditions for up to 5 years. Devices that fail one or more of the physical integrity or performance tests are disassembled and the Pu-238 pellets recovered for reuse. A detailed description and material flow diagram for Process No. 2 is in reference __. 3. Hazard Characterization The screening process described in the ABC Facility Hazards Survey (ref.) identified two substances that exceeded the screening thresholds. They are anhydrous hydrogen fluoride and Pu-238. H-7 DOE G 151.1-2 7-11-07 3.1 Anhydrous Hydrogen Fluoride Anhydrous hydrogen fluoride (HF) is an extremely hazardous substance used in Process No. 2. It is received and handled in sealed steel pressure cylinders containing 100 kg (220 lb) each when full. Inventory. The maximum quantity of HF in the facility at any time is six full cylinders containing 600 kg (1320 lb). Of these six cylinders, four cylinders (400 kg) are located within the warehouse and two cylinders (200 kg) are located in the operating gallery outside Cell 1. Properties of HF. HF is a nearly colorless, fuming liquid or gas with a pungent irritating odor. It is perceptible by smell above about 0.04 ppm. The boiling point of HF at 1 atmosphere is 19.5°C (67.1°F). HF is highly reactive and attacks glass, concrete, certain metals, natural rubber, and many organics. HF itself is not flammable but in its concentrated form it can attack certain metals and release explosive hydrogen gas. It is hygroscopic, forming an acid solution when it reacts with water and releasing large amounts of heat. Water contamination of pressurized containers or piping systems can permit formation of an acid solution with subsequent acid attack on metals and generation of hydrogen. The 60-minute AEGL-1, -2 and -3 values for HF are 1, 24 and 44 ppm, respectively.

Conditions of Storage and Use. The inventory in the warehouse is limited to four cylinders by the number of specially designed storage racks to which the full cylinders are bolted. One cylinder at a time is removed from the storage rack and transported by forklift into the ABC Building, where it is bolted to a storage rack outside Cell 1 and connected to the manifold serving Process No. 2. A second full cylinder is kept connected to the same manifold, ready to be placed in service when the on-line cylinder is empty. The inventory limits are maintained by a combination of engineered means (i.e., limited by the number of special storage racks for the cylinders) and facility procedures, which permit HF cylinders to be stored only in the special storage racks. Each cylinder stop valve has an integral orifice that limits the flow rate to 2.1 kg per minute (35 g/s) with the valve fully open. The warehouse is open to the atmosphere much of the time. Although heated in the winter to keep temperatures above the freezing point, the building is cooled only by the use of roof ventilators. Except during inclement weather, one or both of the large roll-up doors (located at the north and south ends of the building) is normally open during working hours to facilitate access. When one or both of the large doors are open, the building provides no appreciable confinement of a gas or vapor release. However, if both doors are closed, the structure will provide a mitigation factor of 0.55 for any releases into the building. This mitigation factor, as suggested by EPA 550-B-99-009, applies to the release of gases or vapors inside the building (i.e., release rate to the environment is 0.55 times the release rate into the building). H-8 DOE G 151.1-2 7-11-07 The Cell 1 operating corridor is part of ventilation Zone B of the ABC Building. It is maintained at 19-22°C and 40-60% relative humidity by the building heating, ventilating, and air conditioning (HVAC) system. The volume of the operating corridor is 375 m3, and it is exhausted by way of the Zone B exhaust system at a rate of 12 m3 per minute. The Zone B exhaust is filtered through two stages of HEPAs. The Cell 1 exhaust flow passes through a cell exhaust prefilter (single HEPA) then through two stages of Zone A HEPA filters before it is discharged to the building stack. 3.2 Plutonium The heat-source plutonium received at the ABC Building contains about 90% plutonium 238 with small fractions of other isotopes, and has an average alpha specific activity of 4.9 E+11 Bq/g (13.2 Ci/g) of plutonium. Plutonium-238 (Pu-238) is an alpha-emitting radionuclide with a half-life of 87.7 years. Its high specific activity, 6.3 E+11 Bq/g (17.1 Ci/g) makes it very useful as a long-lived heat source for thermal-electric generating devices. The material is received as a nitrate solution and converted to oxide pellets before being incorporated into generating devices. Plutonium dioxide produced from this material contains 88.1% Pu by weight. For dose calculation purposes, source terms given in mass units (mg) are represented as Pu-238 oxide with an average specific activity of 4.3 E+11 Bq/g (11.6 Ci/g) of oxide. Inventory. The maximum inventory of plutonium allowed in the ABC Building under the current Authorization Basis is 10 kg or 4.9 E+15 Bq (1.3 E+5 Ci). The Technical Safety Requirements (TSRs) further limit the quantities in each location as follows.

Location kg Bq Room 109 (vault) 3 1.5E+15 Cell 1 2 9.8E+14 Cell 2 1 4.9E+14 Cell 3 1 4.9E+14 Room 110 1 4.9E+14 Room 111 1 4.9E+14 Room 115 1 4.9E+14 Properties of Plutonium. The material is received and stored as a 200 g/L nitrate solution. It is then converted to PuO2 powder and pellets in a series of steps. The density, particle size distribution, and solubility characteristics of the oxide at each stage of the process are detailed in section of reference (the facility DSA). Conditions of Storage and Use. All process areas authorized for plutonium storage and handling in the ABC Building are within ventilation Zone B. These process areas are maintained at negative pressure with respect to adjoining office H-9 DOE G 151.1-2 7-11-07 and service areas and are exhausted through two stages of HEPA filtration to the building stack. The Zone A exhaust system maintains a negative pressure (with respect to Zone B) in the shielded cells and glove boxes where plutonium conversion and pellet preparation are carried out. The exhaust air from each glovebox or shielded cell passes through an individual cell/glove box preliminary HEPA filter prior to being exhausted to the stack through the two stages of Zone A HEPA filters. The nitrate solution is received for storage in 1-L plastic bottles sealed in metal cans (for physical protection during handling). The cans are not opened until the nitrate solution is needed in the conversion process. At that time, they are removed one at a time and transferred into Cell 1 by way of a transfer lock. Inside Cell 1, the bottles are removed from the can and opened using remote manipulators, and the contents are emptied into the process feed tank. The oxide powder produced in Cell 1 is placed in steel cans and sealed with tape. The cans are then bagged out of Cell 1 and into Cell 2 for the calcining, blending, pressing, and granulation steps. The granulated material is again sealed in steel cans, and bagged out of Cell 2 and into Cell 3, where the pellet press and sintering furnace are located. The sintered pellets are sealed in cans, bagged out of Cell 3, and into the grinding and inspection glovebox in Room 110. The finished pellets then are sealed in cans, bagged out of the grinding and inspection glovebox, and into one of the assembly gloveboxes in Room 111. When RTG assemblies are completed, the finished units, containing 4 to 800 g of oxide pellets each, are decontaminated, surveyed, and removed from the assembly gloveboxes for testing. In addition to the protected area security controls described previously, only specifically authorized workers are permitted access to the Pu processing areas within the ABC Building. Card-key and/or biometric entry controls on each room ensure that only authorized workers gain access to these areas. 4. Scenario Selection This section details the selection of scenarios for quantitative analysis. The selection process involves a systematic examination of ⎯ • Each quantity or unit of a hazardous material in each storage or use location (a particular MAR); • The primary barrier that contains the material in that location; • Failure modes that apply to that barrier; • Initiating events or conditions that could cause barrier failure by each mode; and H-10 DOE G 151.1-2 7-11-07 • Release pathways, mitigation systems and other features that would or could modify the consequences of a given primary barrier failure.

NOTE: For purposes of illustration, only parts of the scenario selection process for the hypothetical facility are presented here. The italicized text explains the reasoning and illustrates documentation of scenario selection, which is then summarized in the tables. Analysts should document their selection process in sufficient detail that reviewers and later analysts can follow the reasoning and revise the selection as conditions change. Whereas the hazards survey may simply identify a substance as requiring quantitative analysis, the substance may actually exist in several different locations within the facility. As a starting point in the selection of release scenarios, each location should be considered individually with regard to quantity of material, number of individual containers, barrier failure modes and initiators, mitigative features, and other factors that bear on the release potential or consequences. In Tables 4-1a and 4-1b, the analysis of HF in the warehouse and plutonium in Cell 1 are used to illustrate the scenario selection process. Separate tables should be used to summarize the analysis of each identified hazardous material in its various use and storage locations. The following discussion explains Table 4-1a and illustrates how the scenario selection reasoning process can be documented. Column 1: Material At Risk (MAR). The material in a particular location may constitute different quantities of Material at Risk depending on the initiating event and release scenario. For any given scenario, the MAR and Damage Ratio (DR) are interdependent (see Section 2.6). In this hypothetical case, the most obvious choice of MAR to be considered first is the quantity contained in one full container. Other MAR choices that will be considered in succession are the quantity contained in the number of containers (2) that could be subject to a plausible simultaneous failure time and the total quantity (4 cylinders) stored in the warehouse at any given time and thereby subject to more destructive events. Column 2: Primary Barrier. For each MAR, the primary barrier is the physical feature or control that contains the material or keeps it in a safe condition. In the case of HF cylinders in storage, the primary barrier is the cylinder itself (including the cylinder stop valve). Because the HF is only stored in the warehouse (not dispensed into other containers or connected to any process system piping) this same definition of the primary barrier will apply to each of the other MAR choices (multiple cylinders). Column 3: Failure Mode. The mode or manner in which the primary barrier fails can affect the quantity of material released, the rate of release, the degree or type of mitigation that applies, and/or the pathway by which the material makes its way out into the environment. DOE G 151.1-2 H-11 7-11-07 Selecting a suitably broad set of failure modes for analysis is key to creating a hazards assessment that represents the full range (or spectrum) of possible releases. The failure modes that apply will vary depending on the properties of the hazardous substance and the nature of the primary barrier. The analyst should begin by identifying all the possible failure modes that might apply, and then consider each one in turn. Upon closer examination, any given failure mode may be found to represent the same portion of the event severity spectrum as one that has previously been considered. In that case, a single failure mode with multiple causes (initiating events) can be used to represent a particular segment of the event spectrum, both with regard to severity and causation. The following discussion addresses the identification of failure modes applicable to this hypothetical example:

• The most obvious failure mode to be considered is a puncture or fracture (i.e., a “hole” in the cylinder) that simply releases the contents without addition of energy that affects dispersal of the material. • A second obvious mode is opening the cylinder stop valve. The same total quantity of material is released, as in the puncture/fracture mode, but the orifice, which is integral to the valve, limits the rate of release (the critical parameter for purposes of consequence predictions). • For any barrier that contains a liquid or compressed gas, overpressure should be considered as a possible failure mode. Overpressure may stress the barrier beyond its yield strength, producing an abrupt failure and near-instantaneous release of the cylinder contents. This mode of failure might occur without warning (carbon steel HF cylinders have reportedly ruptured from overpressure after years of storage due to production of hydrogen gas by reaction of the HF with iron) or as a result of overheating by fire. A fire in this location would be expected to affect all the cylinders in the warehouse, in addition to degrading the building integrity and possibly enhancing dispersion of the release. Therefore, the overpressure failure mode will be considered separately from the simple puncture/fracture. • Corrosion should also be considered as a possible failure mode, particularly for substances like HF that are extremely reactive. A corrosion failure might produce a release varying from a small leak to an abrupt near-instantaneous release. In any case, the contents of the cylinder would be released without addition of energy or damage to the structure that would affect dispersal of the material. Accordingly, corrosion need not be considered as a distinct failure mode, but as one of several possible initiators associated with the puncture/fracture or overpressure modes. Column 4: Initiating Event. The initiating event that produces a particular failure mode may also influence the performance of structures or systems that modify the release. The initiator may also be a key to recognition of an actual or potential release. H-12 DOE G 151.1-2 7-11-07 • External impacts (such as by a moving forklift, a falling object or any kind of missile) are obvious initiators for puncture or fracture of a container. Corrosion is another initiator of this type of failure, one that is not likely to be observed directly. • In this hypothetical case, a handling mishap (such as dropping a cylinder or crushing in a hydraulic lift) is postulated. This event is very similar to the generic “external impact” event, but with one important difference – a handling mishap would almost certainly be observed directly by the staff performing the operation. If the handling mishap produced any observed leakage, the occurrence of that “initiating event” could provide a solid basis for inferring a release of the entire contents of the cylinder(s) involved. • The only plausible initiator for opening of the stop valve on a cylinder in the warehouse is human action (operator error or deliberate). Stating the initiating event in this manner recognizes that the event would produce the same release and consequences, regardless of whether there was malevolent intent on the part of the person who operated the valve. • Buildup of hydrogen gas produced by reaction of HF with iron has reportedly caused the abrupt failure of HF cylinders. The phenomenon has been observed only with carbon steel cylinders and only after long periods of storage (~15-25 years).

• High temperature is another plausible initiator for overpressure failure. Ambient temperatures in the warehouse do not to exceed 120° F even in the hottest weather with the most restricted ventilation flow. This is far below the temperature at which cylinder failure would be expected. Accordingly, fire would be necessary to produce cylinder overpressure and failure. Column 5: Release from Primary Barrier. This is the quantity released (or the release rate) as a result of a particular MAR, barrier failure mode and initiating event. In this case, any puncture or fracture of a cylinder would ultimately release the entire contents of the cylinder. Depending on the size and shape of the penetration, the temperature, and other factors, the release duration may range from near instantaneous to many hours. In general, it will not be possible to quantify the rate of release or stop the release once the breach has occurred. • The maximum (and expected) contents of a full cylinder will be 100 kg. Although the release rate may be limited by the vaporization rate, the consequence estimates for all scenarios involving failure of the cylinder itself will be based on an assumed release of the entire amount in 15 minutes. • For scenarios involving the open stop valve, the release rate is limited to 35 g/s by the valve orifice. The toxic effects of the HF release might disable the person who opened the valve and drive other personnel from the area, preventing them from taking action to shut the valve. Thus, the entire DOE G 151.1-2 H-13 7-11-07 contents of a full cylinder could be released, but the orifice limits the release rate. Column 6: Conditions of Release. The amount ultimately released to the environment, the rate of release, and mitigation features, controls or structures may influence the location or elevation. The effect or influence of these features, controls or structures may vary, depending on the particular initiating event. The important factors to be considered are mitigation of the source (as by filtration, or scrubbing, fallout or plateout) reduction of the release rate (as by holdup in a structure), and enhanced dispersion (as by releasing the material in a building wake or from an elevated release point). Two basically different conditions of release will apply to each of the postulated releases. • If either or both of the warehouse roll-up doors are open, or if the initiating event causes significant structural damage, the building is expected to provide no mitigation. The release is assumed to be more or less direct to the atmosphere approximately at ground level. Use of a building wake correction to model the consequences is justified. • The second condition of release that would apply is where the roll-up doors are shut. The building offers significant mitigation if the doors are shut and it would be possible, at the time of an event, to quickly determine if they are shut. The release is by various building leak paths but is still considered (conservatively) to be at ground level. Accordingly, building wake correction is used in the dispersion calculations.

Column 7: Release Designation. “Release designation” is a label or shorthand notation for the set of source term characteristics that will be used to calculate consequences at various receptors. In this example, “HF-1” represents a ground level release of 100 kg HF over a period of 15 minutes (111 grams/second) from the warehouse building wake (minimum cross section of 10 m wide by 5 m high). During the process of formulating release scenarios, the analyst may recognize that several different releases will have to be modeled identically. However, assigning a different release designation to each one helps ensure that insights regarding the different recognition factors are recorded for use in developing EALs. Column 8: Notes. The analyst should record any information that will help users and future analysts understand the analysis and results. From Table 4-1a, it can be seen that releases designated HF-1, -3, -7 and -9 are the same (111 g/s at ground level). Likewise, HF-2, -4, -8 and -10 are the same (61 g/s). Accordingly, the full spectrum of possible releases for this MAR in this location can be represented by only four different source terms -- 111, 61, 35 (HF-5) and 19 (HF-6) grams per second. Because all the releases would be modeled the same (ground level in the building wake), a single calculation of H-14 DOE G 151.1-2 7-11-07 consequences at receptors of interest might be done and the results scaled to represent each of the other releases. Having completed a methodical examination of all release possibilities for a single cylinder, the analyst should then apply the same method and reasoning to other amounts and forms of the same material that might be found in the same location. In this example, it would be reasonable to examine an MAR consisting of the maximum number of HF cylinders (4) expected or permitted in the warehouse. The following discussion explains Table 4-1b and illustrates how the scenario selection reasoning process can be documented. Column 1: Material At Risk. The first MAR to be considered is the airborne plutonium oxide powder in the cell atmosphere. For purposes of this example, the maximum steady-state aerosol concentration is given as 20 mg/m3. Column 2: Primary Barrier. The primary barrier to release of the plutonium oxide aerosol is the cell ventilation system, which maintains the cell pressure negative with respect to surrounding areas and filters the cell atmosphere through multiple HEPA filters before discharging it to the environment. Column 3: Failure Mode. Since maintenance of negative cell pressure is essential to control over the aerosol, the first failure mode to be considered is overpressure, i.e., increase of cell pressure above that in the surrounding spaces with resulting expulsion of contaminated air into those spaces. Column 4: Initiating Event. The Zone A HVAC exhaust fans provide the motive power to maintain cell pressure below that of the surrounding spaces. • Loss of the Zone A exhaust fans is the first initiating event considered. • A second initiating event that could produce the cell overpressure condition is a failure of the cell exhaust damper pneumatic controller (e.g., failure of the return spring or seizure of the actuator shaft. This could cause the pressure in the cell to increase above the operating corridor. • A flash fire or other energetic event in the cell could produce a pressure transient, temporarily raising cell pressure above that in the corridor and possibly damaging the cell exhaust preliminary filter.

Column 5: Release from Primary Barrier. • Loss of the exhaust fans will result in an increase in the cell pressure, followed by migration of contaminated cell air to the operating corridor and other nearby spaces due to temperature changes and wind pressures on the building. For purposes of this example, a release of 80 mg of respirable DOE G 151.1-2 H-15 7-11-07 aerosol from the cell over a period of 8 hours is cited (such source term values are commonly available from safety analysis documents). • With a maximum airborne dust loading of 20 mg/m3 (reference _), failure of the cell exhaust damper is projected to cause a pressure reversal lasting 45 minutes (reference ). The predicted airborne release to the operating corridor is 200 mg of respirable PuO2 powder. • A flash fire is projected to produce a pressure transient lasting no more than 4 seconds (reference__) and discharge an estimated 40 mg of respirable plutonium oxide powder into Zone B. • If the pressure transient caused by the flash fire damages the cell exhaust preliminary HEPA filter (the initial filter in the cell exhaust stream, preceding the two-stage Zone A HEPA filter bank) a pulse of 800 mg of plutonium aerosol will challenge the Zone A filters (reference___), in addition to the 40 mg released to the operating corridor. H -16 D O E G 151.1-2 7-11-07 Table 4-1a. Hydrogen Fluoride – Warehouse MAR Primary Barrier Failure Mode Initiating Event Release from Primary Barrier Conditions of Release Release Designation Notes Contents of single cylinder (100 kg) Cylinder Puncture /fracture External impact (by forklift or missile, structure collapse, etc.), corrosion 100 kg Doors open -- release direct to atmosphere at ground level in building wake. HF-1 Structure offers little or no confinement. Consequences modeled as 15-minute release of 100 kg (111 g/s) at ground level. Doors closed. Mitigated release at ground level in building wake. HF-2 Structure mitigates release rate by factor of 0.55. Consequences modeled as 0.55 times the HF-1 rate (61 g/s) at ground level. Handling mishap (drop/crush) 100 kg Direct to atmosphere at ground level in building wake HF-3 Same consequences as HF-1 Doors closed. Mitigated release at ground level in building wake. HF-4 Same consequences as HF-2 Cylinder stop valve opened Human action/error 100 kg at 35 g/s Direct to atmosphere at ground level in building wake. HF-5 Cylinder caps should mandatory in warehouse to prevent this failure mode. Consequences modeled as ground level release at 35 g/s. Doors closed. Mitigated release at ground level in building wake. HF-6 Consequences modeled as ground level release at 19 g/s. D O E G 151.1-2 H -17 7-11-07 Table 4-1a. Hydrogen Fluoride – Warehouse (cont’d) MAR Primary Barrier Failure Mode Initiating Event Release from Primary Barrier Conditions of Release Release Designation Notes Overpressure Hydrogen buildup 100 kg Direct to atmosphere at ground level in building wake. HF-7 Same consequences as HF-1. Rotation of inventory to preclude storage for extended periods (~`years) will effectively prevent this failure mode. 100 kg Doors closed. Mitigated release at ground level in building wake. HF-8 Release is 0.55 x HF-7. Same consequences as HF-2 High temperature (fire) 100 kg Direct to atmosphere at ground level in building wake. HF-9 Same consequences as HF-1. Although fire is involved in cylinder failure, ground level release is most likely because of building confinement and wake effects.

Doors closed. Mitigated release at ground level in building wake. HF-10 Release is 0.55 x HF-9. Same consequences as HF-2. Ground level release is likely because of building confinement and wake effects. H -18 D O E G 151.1-2 7-11-07 Table 4-1b. Plutonium – Cell 1 MAR Primary Barrier Failure Mode Initiating Event Release from Primary Barrier (Respirable) Conditions of Release Release Designation Notes Airborne powder (20 mg/m3) Cell ventilation system/filters Overpressure Loss of HVAC exhaust fans 80 mg To corridor, then to atmosphere at ground level in building wake. Pu-1 Building leakage of 4 mg over 8 hrs. Source term basis from DSA section xx.x.x.1: MAR=2000 mg, DR=0.08, ARF=1, RF=0.5, LPF=0.05. Pneumatic controller failure 200 mg To corridor, filtered by zone B exhaust, elevated release. Pu-2 5E-4 mg released from 60 m stack. Source term basis from DSA section xx.x.x.2: MAR=2000 mg, DR=0.2, ARF=1, RF=0.5, LPF=2.5.E-6 200 mg To corridor, then to atmosphere at ground level in building wake Pu-3 Zone B exhaust not working. Bldg leakage of 10 mg over 8 hrs. Source term basis from DSA section xx.x.x.3: MAR=2000 mg, DR=0.2, ARF=1, RF=0.5, LPF=0.05. Flash fire 40 mg To corridor, filtered by zone B exhaust, elevated release. Pu-4 1E-4 mg released from 60 m stack. Source term basis from DSA section xx.x.x.4: MAR=2000 mg, DR=0.04, ARF=1, RF=0.5, LPF=2.5E-6. D O E G 151.1-2 H -19 7-11-07 Table 4-1b. Plutonium – Cell 1 (cont’d) MAR Primary Barrier Failure Mode Initiating Event Release from Primary Barrier (Respirable) Conditions of Release Release Designation Notes 40 mg To corridor, then to atmosphere at ground level in building wake Pu-5 Zone B exhaust not working. Bldg leakage of 2 mg over 8 hrs. Source term basis from DSA section xx.x.x.5: MAR=2000 mg, DR=0.04, ARF=1, RF=0.5, LPF=0.05. 40 mg to corridor 40 mg filtered by Pu-6 2.1E-3 mg released 800 mg challenges Zone B HEPA, from 60 m stack. Zone A HEPA 800 mg filtered by Zone A HEPA. Stack release. Source term basis from DSA section xx.x.x.6: MAR=4200 mg, DR=0.4, ARF=1, RF=0.5, LPF=2.5E-6. 40 mg to corridor, Pu-7 Zone B exhaust not then to atmosphere working. Bldg leakage at ground level in of 2 mg over 8 hrs bldg wake. 800 mg (ground level) plus 2E­ filtered by Zone A 3 mg from stack. HEPA, to stack. Source term basis from DSA section xx.x.x.7, -Ground Level: MAR=200 mg, DR=0.4, ARF=1, RF=0.5, LPF=0.05. -Stack: MAR=4000 mg, DR=0.4, ARF=1, RF=0.5, LPF=2.5E-6. H-20 DOE G 151.1-2 7-11-07 Column 6: Conditions of Release. • To minimize the reverse pressure differential and cell out-leakage, the Zone B fans that exhaust the operating corridor and other occupied areas are programmed to stop upon loss of the Zone A exhaust fans. If the Zone B exhaust fans stop, the expected leak path is from the corridor to the environment at ground level through door seals and other penetrations. • If the Zone B exhaust fans continue to operate, the release into the operating corridor would be exhausted to the environment via the Zone B exhaust filters and the elevated release point (stack). • If the flash fire pressure transient fails the cell preliminary exhaust filter and the Zone B exhaust fans continue to run, both releases would be filtered through two stages of HEPA filters (40 mg through Zone B, 800 mg through Zone A) with LPF of 2.5E-6 and exhausted via the stack.

• If the Zone B exhaust fans were not running, the 800 mg aerosol pulse would be filtered through two stages of Zone A HEPA filters with LPF of 2.5E-6 and exhausted via the stack. The 40 mg discharged to the operating corridor would be mitigated only by the building confinement, with the release occurring via door seals and penetrations at ground level. Column 7: Release Designation. The releases are designated Pu-1–7. Column 8: Notes. Here the analyst notes the essential features of the source term – the amount of material released to the environment, the rate or duration of the release, and the release height or location. In contrast with the HF example treated in Table 4-1a, it is seen from Table 4-1b that a range of different plutonium source terms could result from the same failure mode, depending on the initiating event and conditions of release. Each one is different, although the difference is slight, in some cases. In order of increasing magnitude, they are: Pu-4 1E-4 mg stack release Pu-2 5E-4 mg stack release Pu-6 2.1E-3 mg stack release Pu-5 2 mg ground level release Pu-7 2 mg ground level release plus 2E-3 mg from stack Pu-1 4 mg ground level release Pu-3 10 mg ground level release 5. Analysis of Scenarios Utilizing the source term information developed previously, the scenarios identified in Section 4 are analyzed here to determine the consequences at various DOE G 151.1-2 H-21 7-11-07 receptors. The indications (recognition factors) that might enable each scenario to be detected and recognized at or shortly after occurrence are also identified and recorded. 5.1 Calculation Models Consequences of the events and conditions identified in Section 4 were estimated using two primary computational models. The Chemical Model was used to calculate the dispersion of non-radioactive hazardous material, while the Radiological Model was used for radiological dose calculations. The Software Giant Company developed the Chemical Model for use in hazardous material emergency planning and response. Its features are documented in Reference . It makes use of a straight-line Gaussian dispersion model and (brief summary of the model features, applicability, and limitations). The Radiological Model was developed by the Operating Contractor for use in *radiological emergency planning for the XYZ Site operations. It is documented in reference and (brief summary of the model features, applicability, and limitations). Consequences of each release were calculated for both “severe” and “typical” dispersion conditions. As recommended by the Emergency Management Guide for sites lacking actual 50th and 95th percentile dispersion values based on local weather observation, the following values for dispersion parameters were used: Severe Wind speed: 1.0 m/s Stability Class: F Inversion (mixing) height: 200 m Typical Wind speed: 4.5 m/s Stability Class: D Inversion (mixing) height: None (no inversion) 5.2 Receptor Locations Consequences at several receptor locations were calculated. With the calculation models used, 30 m is the minimum distance at which a concentration or dose projection can be made. It is recognized that there are great uncertainties associated with predicting dispersion over short distances, particularly in the vicinity of large structures. As recommended in the DOE G 151.1-2, consequences are calculated at 30 m and 100 m. The consequences at 30 m are used to determine the lower threshold of the Alert classification while the second

H-22 DOE G 151.1-2 7-11-07 distance is used to define the “facility boundary impact” for purposes of distinguishing between the Alert and Site Area Emergency classes. Other Onsite Receptors. Other onsite receptors were defined as follows. OS-1: Building 999, 300 m SE, occupied by 1200 persons during working day. OS-2: Main parking lot, 350 m SW, which is accessible to the general public in cars, is used for evacuation staging area for the site. OS-3: Highway 101, 870 m W. Accessible to general public, crosses the site. OS-4: Area fire station and Emergency Control Center, 1200 m NW. OS-5: Facility LNM, 3.5 km N. Over 2500 people during working day, 275 people during off hours. Site Boundary Receptors. The distances to the site boundary receptors in each of the 16 compass sectors are as follows. SB-N 12 km SB-S 3.5 km SB-NNE 4.2 km SB-SSW 3.9 km SB-NE 2.0 km SB-SW 5.0 km SB-ENE 0.7 km SB-WSW 6.3 km SB-E 0.5 km SB-W 8.9 km SB-ESE 0.9 km SB-WNW 11.2 km SB-SE 1.1 km SB-NW 15.1 km SB-SSE 2.4 km SB-NNW 12.9 km The calculated consequences at the minimum site boundary distance (0.5 km) are used to assign an emergency class to each postulated event. Other offsite receptors. Other offsite receptors have been defined at points of interest. These include the two nearest residences, the nearest school, an industrial park where some 4000 persons are employed, the State Home in Wheresville, and the communities of Anytown and Ong. These are abbreviated as follows. OFF-R1: Nearest residence, 2.1 km SSE. OFF-R2: Next nearest residence, 3.1 km SE. OFF-SCH: Anytown elementary school, 6.5 km S. OFF-IND: Industrial park, 5.5 km S. OFF-ANY: Anytown town center, 8.0 km S. OFF-WHR: Wheresville State Home, 15.2 km SE. OFF-ONG: Ong town center, 12 km SW. DOE G 151.1-2 H-23 7-11-07 5.3 Consequences and Recognition Factors The consequences and recognition factors associated with each of the releases identified in Tables 4-1a and 4-1b, together with the implied emergency class, are summarized in Tables 5-1a and 5-1b. In Tables 5-2a and 5-2b, the consequences at a range of receptor distances under both severe and typical dispersion conditions are summarized for use in planning and response. Table 5-1a. HF Release Consequences* and Recognition Factors Release Desig. Consequences (ppm) at PAC/TEL Distance (m)** Class Recognition Factors 100 m 500 m HF-1 810 63 920/640 GE Cylinder impact + observed HF leakage + warehouse door(s) open HF-2 450 35 620/430 GE Cylinder impact + observed HF leakage + warehouse doors closed HF-3 810 63 920/640 GE Cylinder drop/crush +observed HF leakage + warehouse door(s) open HF-4 450 35 620/430 GE Cylinder drop/crush +observed HF leakage + warehouse doors closed HF-5 260 21 320/220 SAE Stop valve opened + observed HF leakage + warehouse door(s) open HF-6 140 11 330.180 SAE Stop valve opened + observed HF leakage + warehouse doors closed HF-7 810 63 920/640 GE Observed HF leakage + warehouse door(s) open HF-8 450 35 620/430 GE Observed HF leakage + warehouse doors closed HF-9 810 63 920/640 GE Fire in warehouse + warehouse door(s) opened or structure breached HF-10 450 35 620/430 GE Fire in warehouse + warehouse door(s) closed * At 1 m/s wind speed, Stability Class F ** PAC is 24 ppm (60 min. AEGL-2). The TEL is 44 ppm (60 min. AEGL-3), 15-minute average

concentrations. Analysis. In accordance with the Emergency Management Guide, a scenario should be retained as part of the emergency planning basis if the consequences are sufficiently different from other cases that it would be classified at a different level, and the recognition factors are sufficiently different that the case could be reliably distinguished from other analyzed cases within a short time after occurrence. From Table 5-1a, the following observations can be made: • The recognition factors associated with the releases designated HF-1 through HF-10 provide very limited bases on which to discriminate between events of different severity. Classification at the SAE level is justified only if the leak can be positively attributed to an open cylinder stop valve. In all other cases, classification as General Emergency is indicated. • Status of the warehouse doors (open or shut) is not relevant to emergency classification. H-24 DOE G 151.1-2 7-11-07 Accordingly, the spectrum of possible single-cylinder releases from HF stored in the warehouse can be represented by quantitative analysis of two ground-level releases: 35 g/s (representing HF-5 and HF-6) and 111 g/s (representing all the others). Table 5-1b. Radiological Release Consequences* and Recognition Factors Release Desig. Consequences (rem) at PAC/TEL Distance (m)** Class Recognition Factors 30 m 100 m 500 m Pu-1 25 10 1.3 600/<30 GE Loss of Zone A & Zone B exhaust for extended time (>1 hr) Pu-2 <E-4 <E-4 <E-4 N/A <Alert Cell 1 pressure exceeds operating corridor pressure + Zone B exhaust function intact Pu-3 64 25 3.2 1100/<30 GE Cell 1 pressure equals or exceeds corridor pressure for >x min. + Zone B exhaust function lost Pu-4 <E-4 <E-4 <E-4 N/A <Alert Fire or explosion in Cell 1 + Zone B exhaust function intact Pu-5 13 5.1 0.65 370/<30 SAE Fire/explosion in Cell 1 + Zone B exhaust function lost Pu-6 <E-4 <E-4 <E-4 N/A <Alert Fire/explosion in Cell 1 + breach of cell exhaust filter Pu-7 13 5.1 0.65 370/<30 SAE Fire/explosion in Cell 1 + breach of Zone A cell exhaust filter + Zone B exhaust function lost. * At 1 m/s wind speed, Stability Class F ** PAC is 1 rem. TEL is 100 rem (TEDE) Analysis. From Table 5-1b, the following observations can be made: • As long as the Zone B exhaust remains operating, any aerosol release from the cell to the operating corridor will be filtered and discharged to the environment from the elevated release point. Radiological consequences outside the facility will be minimal. • All the releases producing significant consequences outside the facility are by unmonitored pathways (i.e., building leakage). Hence, those events will need to be recognized on the basis of HVAC system status and other conditions in the facility, rather than effluent monitor readings. • If the Zone A HEPA filters remain intact, breach of the Cell 1 preliminary exhaust filter by a pressure pulse is not a significant factor. Any event in which both the preliminary filter and the Zone A HEPAs are damaged would be recognized and classified based on elevated effluent monitor readings. Accordingly, the spectrum of plutonium aerosol releases from Cell 1 can be represented by quantitative analysis of two ground-level releases: 2 mg (representing Pu-5 and Pu-7) and 10 mg (representing Pu-1 and Pu-3). All the other scenarios were shown to have consequences well below the threshold for emergency classification.

Table 5-2a. HF Release Consequences at Various Distances, Severe and Typical Dispersion Conditions Release Designation Wind speed & Stability Concentration (PPM) at distance – km (miles) Distance (km) to: Facility Boundary 0.10 (0.06) 0S-2 (Bldg 999) 0.30 (0.18) Site Boundary 0.50 (0.30) OS-3 (Highway) 0.87 (0.53) OS-4 (Fire Station) 1.2 (0.73) OFF-R1 (Residence) 2.1 (1.3) OFF-R2 (Residence) 3.1 (1.9) OFF-SCH (School) 6.5 (4.0) TEL* PAC* HF-1 1 m/s, F 810 140 63 26 16 7.3 4.3 1.7 0.64 0.92 4.5 m/s, D 45 6.5 2.6 1.0 <1 <1 <1 <1 0.09 0.16 HF-2 1 m/s, F 450 79 35 14 8.9 4.0 2.4 1.0 0.43 0.62 4.5 m/s, D 25 3.4 1.6 <1 <1 <1 <1 <1 0.07 0.11 HF-3 1 m/s, F 810 140 63 26 16 7.3 4.3 1.7 0.64 0.92 4.5 m/s, D 45 6.5 2.6 1.0 <1 <1 <1 <1 0.09 0.16 HF-4 1 m/s, F 450 79 35 14 8.9 4.0 2.4 1.0 0.43 0.62 4.5 m/s, D 25 3.4 1.6 <1 <1 <1 <1 <1 0.07 0.11 HF-5 1 m/s, F 260 45 21 8.3 5.1 2.3 1.4 <1 0.22 0.32 4.5 m/s, D 14 2.1 <1 <1 <1 <1 <1 <1 0.05 0.07 HF-6 1 m/s, F 140 25 11 4.5 2.8 1.3 <1 <1 0.18 0.33 4.5 m/s, D 7.7 1.1 <1 <1 <1 <1 <1 <1 0.03 0.05 HF-7 1 m/s, F 810 140 63 26 16 7.3 4.3 1.7 0.64 0.92 4.5 m/s, D 45 6.5 2.6 1.0 <1 <1 <1 <1 0.09 0.16 HF-8 1 m/s, F 450 79 35 14 8.9 4.0 2.4 1.0 0.43 0.62 4.5 m/s, D 25 3.4 1.6 <1 <1 <1 <1 <1 0.07 0.11 HF-9 1 m/s, F 810 140 63 26 16 7.3 4.3 1.7 0.64 0.92 4.5 m/s, D 45 6.5 2.6 1.0 <1 <1 <1 <1 0.09 0.16 HF-10 1 m/s, F 450 79 35 14 8.9 4.0 2.4 1.0 0.43 0.62 4.5 m/s, D 25 3.4 1.6 <1 <1 <1 <1 <1 0.07 0.11 * PAC is 24 ppm (60 min. AEGL-2) and TEL is 44 ppm (60 min. AEGL-3), 15 minute average concentrations. D O E G 151.1-2 H -25 7-11-07 H -26 D O E G 151.1-2 7-11-07 Table 5-2b. Radiological Release Consequences at Various Distances, Severe and Typical Dispersion Conditions Concentration (PPM) at distance – km (miles) Distance (km) to: OS-4 Facility 0S-2 Site OS-3 (Fire OFF-R1 OFF-R2 OFF-SCH Release Wind Speed Boundary (Bldg 999) Boundary (Highway) Station) (Residence) (Residence) (School) Designation & Stability 0.10 (0.06) 0.30 (0.18) 0.50 (0.30) 0.87 (0.53) 1.2 (0.73) 2.1 (1.3) 3.1 (1.9) 6.5 (4.0) TEL* PAC* Pu-1 1 m/s, F 10 2.7 1.3 0.57 0.36 0.16 0.095 0.037 <0.03 0.60 4.5 m/s, D 0.82 0.17 0.077 0.031 0.018 <0.01 <0.01 <0.01 <0.03 0.08 Pu-2 1 m/s, F <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 N/A N/A 4.5 m/s, D <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 N/A N/A Pu-3 1 m/s, F 25 6.8 3.2 1.4 0.9 0.50 0.24 0.093 <0.03 1.1 4.5 m/s, D 2.0 0.42 0.19 0.078 0.045 0.021 <0.01 <0.01 <0.03 0.06 Pu-4 1 m/s, F <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 N/A N/A 4.5 m/s, D <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 N/A N/A Pu-5 1 m/s, F 5.1 1.4 0.65 0.28 0.18 0.08 0.05 0.018 <0.03 0.37 4.5 m/s, D 0.41 0.085 0.038 0.016 <0.01 <0.01 <0.01 <0.01 N/A N/A Pu-6 1 m/s, F <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 N/A N/A 4.5 m/s, D <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 <0.01 N/A N/A Pu-7 1 m/s, F 5.1 1.4 0.65 0.28 0.18 0.08 0.05 0.018 <0.03 0.37 4.5 m/s, D 0.41 0.085 0.038 0.016 <0.01 <0.01 <0.01 <0.01 N/A N/A *PAC is 1 rem. TEL is 100 rem (TEDE) DOE G 151.1-2 H-27 7-11-07 6. The Emergency Planning Zone The EPZ is an area within which the Hazards Assessment results indicate a need for specific and detailed planning to protect people from the consequences of hazardous material releases. As specified in the Emergency Management Guide, the choice of EPZ is to be based on an objective analysis of the hazards associated with a facility and not on arbitrary factors such as historical precedent or distance to the site boundary. In this section, the results of the consequence calculations presented in Section 5 are used to develop a proposed ABC Facility EPZ, in accordance with the method outlined in Section 3.3 of the guidance.

6.1 Applying the EMG Guidance to Choice of Emergency Planning Zone Radius NOTE: The following discussion is based only on the example analysis results reflected in Tables 5-1a and 5-1b and follows, point by point, the methodology outlined in Section 3.3 of the guidance. Is an EPZ required? Analysis: The results tabulated in Tables 5-1a and 5-1b indicate several emergency conditions that would be classified as Site Area Emergency or General Emergency. Therefore, an EPZ needs to be defined for the facility. Minimum EPZ radius. Analysis: Table 5-1a indicates a TEL could be exceeded for releases HF-1, -3, -7 and -9 at a distance of 640 m under severe meteorological conditions. Therefore, 640 m is the smallest EPZ radius that will be considered (EPZMIN). Maximum EPZ radius. Analysis: Table 5-1b indicates a PAC could be exceeded for release Pu-3 at distance of 1.1 km under severe meteorological conditions. Therefore, 1.1 km is the largest EPZ radius that will be considered (EPZMAX). Is EPZMAX greater than 10 miles (16 km)? Analysis: EPZMAX is less than 10 miles. Use of other factors to adjust size and shape of EPZ. • Hazards judged to contribute most heavily to offsite risk. Analysis: The contribution of the HF releases to the total offsite risk has not been calculated. However, because only non-radiological release scenarios produced consequences exceeding the lethality threshold offsite, it will be assumed that the H-28 DOE G 151.1-2 7-11-07 HF releases contribute significantly to the total offsite risk. Accordingly, an EPZ radius closer to the maximum than the minimum is justified. • Commitment and responsibility for planning and preparedness in EPZ. Analysis: Approximately half of the land area between (0.39 miles) 0.64 km and (0.68 miles) 1.1 km of the ABC Facility is offsite and is within areas for which the site has been carrying out planning and preparedness activities for some years, primarily because of the hazards arising from operation of other facilities that are now shut down. Thus, most of the cost of implementation of the larger EPZ has already been expended (sirens on the river, mutual aid arrangements with offsite response agencies, public information program for nearby residents). This consideration weighs in the direction of selecting the larger EPZ radius, because the site is already supporting a range of preparedness measures and is committed to continuing that support. • Cost of implementing the EPZ. Analysis: Regardless of whether the larger or smaller EPZ radius is selected, additional expenditures to protect the population within the EPZ will be minimal. Because there are no permanent residents within the (0.39 miles) 0.64 km radius, there is no close-in population who might be better protected by concentrating use of the available planning/preparedness resources. Therefore, this consideration weighs in the direction of selecting the larger EPZ radius. • Plume transit time and effectiveness of ad hoc protective actions. Analysis: The area within the larger EPZ radius would be subject to plume impacts within 10-20 minutes, even at very low wind speeds. Even under the best of conditions, this would not be enough time to carry out, on an ad hoc basis, protective measures for the nearest residents. In addition, the population in the area is dispersed and often transient (farm workers, fishermen). Planning and preparedness will require continued attention if notifications and implementation of protective actions are to be timely and effective. Therefore, this consideration weighs in the direction of the larger EPZ radius.

• Conformance to physical and jurisdictional realities. Analysis: Both the 0.64- and 1.1-km radii extend across the site boundary and into the surrounding county. In the NNE, NE, and ENE sectors, the (0.68 miles) 1.1-km radius coincides approximately with the site boundary. In the ESE and SE it coincides approximately with Fish Hatchery Road, and in the SSE, S, and SSW sectors, it coincides approximately with East-West Road, the main county road that parallels the river. There are no other significant physical or jurisdictional features between the 0.64- and 1.1-km radii that are logical choices of EPZ. Therefore, an EPZ based on a radius of approximately (0.68 miles) 1.1 km could DOE G 151.1-2 H-29 7-11-07 be defined in terms of physical features and jurisdictional boundaries over approximately half of its circumference. 6.2 Preliminary Conclusion Based on this analysis, it is concluded that a nominal radius of about (0.68 miles) 1.1 km surrounding the ABC Facility should be defined as the EPZ for that facility. Various parts of the boundary can be approximated by sections of the site boundary and county roads. 6.3 Tests of Reasonableness The EPZ size should give confidence that planning and preparedness will be sufficiently flexible and detailed to deal with a wide range of types and magnitudes of emergency conditions. Four significant considerations that cannot be readily stated as quantitative guidance are presented in the form of questions to be used as “tests of reasonableness” for the proposed EPZ size. • Is the EPZ large enough to provide a credible basis for extending response activities outside the EPZ if conditions warrant? Analysis: The preliminary EPZ takes in approximately 3.2 km2 of Granola County. Regular planning interactions and exercises will provide a reasonable expectation that response actions can be successfully extended to other areas of the county, if necessary. To the NNE, NE, and ENE, the preliminary EPZ boundary follows the jurisdictional boundary between the site and Rutabaga County. Rutabaga County is a party to the Tri-County Mutual Aid Agreement and portions of the county are included within the EPZs for other site facilities. Thus, a planning relationship exists that will serve as a basis for extending response actions into the county for an ABC Facility emergency if conditions warrant. • Is the EPZ large enough to support an effective response at and near the scene of the emergency (i.e., preclude interference from uninvolved people and activity, facilitate onsite protective actions, optimize on-scene command and control and mitigation efforts)? Analysis: Other facilities on the XYZ Site are well separated from the 123 Area. The preliminary EPZ encompasses the entire 123 Area and the major road intersections and access routes by which the public could gain access to the site. For these reasons, uninvolved people or activities should not hinder emergency response teams. • Is the EPZ likely to meet the expectations and needs of offsite agencies? Analysis: The preliminary EPZ makes use of natural or jurisdictional boundaries that are reasonable boundaries. The expectations and needs of offsite agencies are H-30 DOE G 151.1-2 7-11-07 not likely to be a factor because the jurisdictions affected by the EPZ definition have been involved in joint planning for emergencies with the site for over 30 years.

• What enhancement of the facility and site preparedness stature would be achieved by increasing the size of the EPZ? What resources, costs, and liabilities might a larger EPZ engender? Would a larger EPZ result in a significant increase in preparedness without correspondingly large increases in cost or other detriment? Analysis: Increasing the size of the EPZ would entail significant costs and resources because area population begins to increase significantly beyond the (0.68 miles) 1.1-km radius. Existing county comprehensive emergency plans and warning/notification processes provide reasonable assurance that ad hoc response measures in the surrounding areas would have a high likelihood of success. Increasing the size of the EPZ would also be inconsistent with the overall reduction in the level of site risk that is resulting from shutdown of operations and facilities. 6.4 Final Conclusion The proposed EPZ for the ABC Facility should include the area within a nominal (0.68 miles) 1.1-km radius of the facility, approximated by the site boundary in the NNE, NE, and ENE sectors, Fish Hatchery Road in the ESE and SE sectors, and East-West Road in the SE, SSE, S, and SSW sectors. 7. Emergency Action Level (EAL) Basis NOTE: This section should be used to document the correlation of the consequence assessment with the requirements to classify events and take protective actions where and when appropriate. Tables 5-1a-b present summary correlations; however, additional documentation of the rationale for specific EALs, automatic protective actions, etc., may be needed. Documenting the “technical basis” ensures that when changes in the facility operation, response capability, and other conditions occur, the impact on event classes, EALs, and protective action planning can be addressed in a consistent and orderly manner. An example correlation section is presented below. The hazardous materials described in Section 3 might be released and dispersed through a number of different processes. Using the approach recommended in the DOE G 151.1-2, those materials were characterized with regard to location, the barriers and/or qualities that keep them from being released, and the failure modes and mechanisms that applied to those barriers or qualities. Initiating events or conditions that could lead to barrier failure by each mode were then identified, and release scenarios were developed for a range of possible severity levels. The different scenarios and the range of possible releases from each scenario were then examined to determine how release of different types and magnitudes might DOE G 151.1-2 H-31 7-11-07 be distinguished from one another. A set of scenarios that spanned the range of possible release types and severity was then developed. A number of the scenarios are similar or identical to events analyzed in the SAR/SAD/DSA while others are conceived and analyzed here to fill out the emergency planning basis. Table 7-1 summarizes the process described above and the scenarios analyzed in this section. The scenarios are presented in groups that are consistent with the Recognition Categories/Groups and subgroups used in the XYZ Site emergency categorization/classification procedures. They are: • Facility Events – Fire – Explosion – Process upsets/Loss of Confinement • Natural Phenomena/External Events – Earthquake – High Wind/Tornado – Aircraft Crash • Security Event – Bomb Threat/Explosive Device – Sabotage – Armed Intruder/Hostage Situation

NOTE: Table 7-1 presents the full suite of results only for the particular MAR units and locations treated in example Sections 4 and 5. H -32 D O E G 151.1-2 7-11-07 Table 7-1. Summary of Hazardous Materials, Release Potential and Event Scenarios Material at Risk Specific Locations “Primary Barrier” “Failure Mode” Initiating Events/Scenarios Analyzed Events Hydrogen Fluoride (cylinder) Warehouse Cylinder + stop valve Puncture/fracture Handling mishap (drop/crush) Structure collapse Missile impact Forklift impact - Cylinder puncture/fracture with building closed. - Cylinder puncture/fracture, building open Cylinder stop opened Operator error Malevolent act - Cylinder stop opened, building open - Cylinder stop opened, building closed Overpressure High temperature (fire) Hydrogen buildup - Fire in warehouse, building intact - Fire in warehouse, building breached Plutonium powder Cell 1 Cell filters & exhaust system Overpressure Loss of HVAC exhaust Pneumatic controller failure Flash fire - Loss of all HVAC exhaust - Cell pressure control lost, Zone B exhaust operating - Cell pressure control lost, Zone B exhaust not operating - Flash fire/cell pressure transient, Zone B exhaust operating - Flash fire/cell pressure transient, Zone B exhaust not operating - Flash fire/cell pressure transient, breach of cell exhaust prefilter DOE G 151.1-2 H-33 7-11-07 7.1 Facility Events Note: This recognition group typically includes all emergencies that are specific to the facility in their nature and consequences. For purposes of this example, it includes the subgroups of Fire, Explosion, and Process Upsets. 7.1.1 Fire This recognition sub-group includes events and conditions that would be most likely (or exclusively) detected and recognized on the basis of observed flame, smoke, heat, or output from detectors (e.g., heat sensors, smoke detectors) that sense one or more of these indications. General Emergency The only analyzed scenario in this subgroup that would warrant classification as a General Emergency involves overpressure failure of a hydrogen fluoride cylinder in the warehouse. A fire in the warehouse could result in the overheating of a full cylinder leading to overpressure failure. Discussion: The number of HF cylinders in the warehouse at the time of the fire and the status of the warehouse doors are both immaterial because even the mitigated release from a single cylinder produces consequences that exceed the PAC at the nearest site boundary. Whether or not a cylinder would actually fail in a fire depends on a number of factors including the intensity and duration of fire and proximity of the cylinder to the fire. A full cylinder exposed to direct heating in a pool fire would not be expected to fail for at least X minutes (reference__). Accordingly, a less intense fire or one of shorter duration should not produce cylinder failure. This provides a basis for discriminating between fires that do and do not pose a real threat of HF cylinder failure. A fire that is controlled or extinguished in significantly less than X minutes will not pose a threat of HF cylinder failure, nor will a fire that does not involve the area of the warehouse (chemical storage bay) where HF is stored. Because of the potential for severe (life-threatening) consequences within a short time (minutes) of release, the limited information that actually will be available during a fire event should be interpreted conservatively to classify any warehouse fire and trigger the appropriate response actions.

Conditions that should be classified as General Emergency are: • Fire in the warehouse lasting more than (X-n) minutes that involves or threatens the chemical storage bay. Basis: Directly exposing a cylinder to flame for X minutes may cause overpressure failure with consequences exceeding the XYZ site General Emergency criterion. A fire that involves or threatens the chemical storage H-34 DOE G 151.1-2 7-11-07 bay for a period of time approaching X minutes should therefore be considered to represent imminent failure of any HF cylinder(s) stored therein. • Warehouse fire that is not declared controlled within Y minutes of initial alarm or detection. Basis: A fire that is not extinguished or controlled while it is in the incipient stage is much more likely to expand to major proportions. The ability of observers and firefighters to verify the exact location and threat to HF cylinders will also decrease with increasing fire size and intensity. Given the severe consequences of an HF release and the need for rapid action to minimize those impacts, any fire that progresses beyond the incipient stage should conservatively be assumed to threaten the entire warehouse and be classified accordingly. Site Area Emergency The only analyzed scenarios within this subgroup that warrant classification as Site Area Emergency result from a flash fire/explosion in Cell 1. (Note: Because this event will most likely be recognized based on the cell pressure transient, it will also need to be considered as part of the “process upset” subgroup.) A Site Area Emergency declaration is also appropriate for any severely degraded safety condition that is a precursor to a major release that would be classified as a General Emergency. Discussion: The postulated flash fire associated with solvents or other flammables in Cell 1 could produce a pressure pulse that temporarily (~seconds) raises the cell pressure above that in the operating corridor. As analyzed in the DSA (reference ___), this event could expel up to 40 mg of respirable plutonium oxide aerosol into the corridor. If the Zone B exhaust system continues to operate, the exhaust from the corridor will be filtered prior to release to the environment and consequences will be nil. The effects of failure of the cell exhaust prefilter are completely mitigated by the main Zone A HEPA filter. Depending on the duration and magnitude of the pressure pulse, the amount of aerosol expelled may range from zero to the calculated maximum of 40 mg. However, the amount of material expelled to the corridor or the environment cannot be quantitatively measure and should therefore be inferred from the occurrence of a cell pressure transient, evidence of radioactive contamination in the corridor, and the duration of the loss of Zone B exhaust function. Condition that should be classified as a Site Area Emergency is: • Fire/explosion causing a pressure transient in Cell 1 that produces evidence of plutonium contamination in the operating corridor, with concurrent loss of Zone B exhaust function for more than X minutes. DOE G 151.1-2 H-35 7-11-07

Basis: It is very possible that a flash fire/explosion would expel no plutonium at all into the corridor. Because a significant amount of time (~30 minutes- several hours) would be required for the subsequent migration of that activity out to the environment, it is reasonable to require confirmation that some release from the cell has occurred before classifying the event. The Zone B exhaust should be lost for an extended period in order for contamination in the corridor atmosphere to leak out by way of door seals and penetrations (reference ___). On loss of Zone B exhaust, the building would be evacuated, so alarming of an operating corridor CAM (remote indication of which would be seen at the Central Alarm Station) would be the only reliable indication of contamination spread outside the cell. Alert None of the analyzed scenarios within this subgroup were shown to warrant classification as Alert. An Alert declaration is also appropriate for any severely degraded safety condition that is a precursor to a major release that would be classified as a Site Area Emergency. 7.1.2 Explosion No explosion scenarios were explicitly analyzed. However, a significant explosion in the warehouse could have the effect of breaching one or more HF cylinders, either by the explosive shock wave or by impact of a blast-driven missile. General Emergency The source term and consequences of breaching an HF cylinder by explosive shock or missile would be the same as for the analyzed case of cylinder puncture/fracture. An explosion could result from any of several causes, including a chemical reaction involving incompatible materials, a flammable gas (propane) leak, sabotage, or rupture of a high-pressure system or gas cylinder. In any case, an explosion would be recognized on the basis of sound, visible damage, and ancillary alarms (i.e., fire alarms from broken sprinkler pipes, security alarms). Rupture of an HF cylinder itself from buildup of hydrogen gas would also probably be perceived by nearby personnel as an explosion. Condition that should be classified as a General Emergency is: • Explosion in the warehouse that involves or threatens the chemical storage bay. Basis: If detonated on or very near an HF cylinder, the explosive shock from even a few ounces of high explosive could fracture the cylinder and release its contents. A larger explosion at greater distance from a cylinder could easily propel missiles into it causing the same effect. Immediately after an H-36 DOE G 151.1-2 7-11-07 explosion, it may be impossible to access the area to assess damage due to debris and an unstable structure. Accordingly, an actual explosion in close proximity to an HF cylinder(s) should be equated to an actual cylinder breach until proven otherwise. Site Area Emergency Depending on the reaction rate, the in-cell energetic event discussed under “fire” above might be perceived as an explosion. The bases for classifying that event are developed in Section 7.1.1.2. A Site Area Emergency declaration is also appropriate for any severely degraded safety condition that is a precursor to a major release that would be classified as a General Emergency. Alert None of the analyzed scenarios within this subgroup were shown to warrant classification as Alert. An Alert declaration is also appropriate for any severely degraded safety condition that is a precursor to a major release that would be classified as a Site Area Emergency. 7.1.3 Process Upsets

This recognition sub-group includes events/conditions that would most likely be recognized on the basis of facility process indications (such as pressure, temperature, vessel levels, effluent alarms, radiation monitors, and ventilation system status) or operational conditions or status that can be directly observed (such as misoperation of equipment or a spill of toxic material). General Emergency The analyzed scenarios within this subgroup that warrant classification as General Emergency are puncture/fracture of an HF cylinder due to handling mishap or corrosion, and plutonium releases from Cell 1, due to either: a) concurrent loss of both Zone A and Zone B exhaust fans, or b) loss of Zone B exhaust concurrent with malfunction of the Cell exhaust damper pneumatic controller. Conditions that should be classified as General Emergency are: • Observed leakage of HF from a cylinder that cannot be attributed to an open cylinder stop valve. Basis: Any cylinder leak that is not limited by the cylinder stop valve orifice can be expected to ultimately discharge the entire contents of the cylinder. The leak rate will be unregulated and should therefore be assumed sufficient to produce the highest toxic impact that was analyzed (100 kg released in 15 minutes). Whether or not the leak can be associated with a handling mishap or other impact is not relevant because a leak could develop spontaneously due to corrosion of the cylinder. DOE G 151.1-2 H-37 7-11-07 • Loss of both Zone A and Zone B exhaust fans for more than X/2 hours. Basis: Loss of both Zone A and Zone B exhaust fans for an extended period of time will result in leakage of plutonium aerosol from the Cell 1 atmosphere to the operating corridor, thence to the outside atmosphere. Analysis shows (reference___) that the release over a period of X hours following failure of both sets of exhaust fans would produce consequences that exceed the criterion for classification as General Emergency. If both Zone A and Zone B exhausts fail and there is not high confidence that one or both will be restored within about X/2 hours, a General Emergency declaration should be made in anticipation of the predicted release. • Loss of Cell 1 pressure control that expels contamination into the operating corridor concurrent with loss of Zone B exhaust fans for more than X/2 hours. Basis: Failure of the exhaust damper controller could pressurize Cell 1 for up to N minutes (before operator action could correct the condition) and plutonium aerosol would be expelled into the operating corridor. If the Zone B exhaust fans are not operating, part of the contamination will ultimately leak to the environment by way of exterior door seals and penetrations. Analysis shows (reference___) that building leakage over a period of X hours following failure of Zone B exhaust fans would produce consequences that exceed the criterion for classification as General Emergency. Unless there is high confidence that Zone B exhaust fans can be restored within about X/2 hours, a General Emergency declaration should be made in anticipation of the predicted release if contamination is confirmed in the operating corridor following a Cell 1 pressure transient of more than ~Z seconds. Site Area Emergency The only analyzed scenario within this subgroup that warrants classification as Site Area Emergency is a release of HF that is limited by the cylinder stop valve orifice. A Site Area Emergency declaration is also appropriate for any severely degraded safety condition that is a precursor to a major release that would be classified as a General Emergency.

Conditions that should be classified a Site Area Emergency are: • Release of HF from cylinder by way of an open or damaged cylinder stop valve. Basis: This is the analyzed case. The release rate is limited to 35 g/s by the integral orifice. Status of the warehouse doors is irrelevant because the consequences of the mitigated release are still above the SAE threshold. H-38 DOE G 151.1-2 7-11-07 • Loss of both Zone A and Zone B exhaust fans for more than about X/4 hours or loss of Zone B exhaust fans for that amount of time following a Cell 1 pressure transient. Basis: Analysis shows (reference___) that the release over a period of X hours following failure of exhaust fans would produce consequences that exceed the criterion for classification as General Emergency. If the loss lasts for more than a few minutes (as might be expected due to a simple power outage) an extended interruption becomes more and more likely. After a few minutes, contamination will spread into normally-occupied areas of the building and the staff will have been evacuated, further limiting the ability to either monitor the situation or take action to restore the exhaust function. This is a significantly degraded safety condition. A Site Area Emergency declaration is warranted to mobilize response resources and commence notifications in anticipation of a major release. Alert None of the analyzed scenarios within this subgroup were shown to warrant classification as Alert. An Alert declaration is also appropriate for any severely degraded safety condition that is a precursor to a major release that would be classified as a Site Area Emergency. 7.2 Natural Phenomena and External Events Severe natural phenomena may affect several facilities on the XYZ Site at once, leading Site authorities to make emergency declarations on the basis of a general reduction in the level of safety. The analysis presented here is based only on actual or potential damage to the ABC facility and does not consider the effects of the natural phenomena on other facilities, infrastructure or emergency response capabilities. NOTE: This recognition group typically includes emergencies that derive from causes or initiators that are not specific to a particular facility. For purposes of this example, it includes the subgroups of Earthquake, High Wind/Tornado, and Aircraft Crash. 7.2.1 Earthquake A seismic analysis of the ABC Building (reference___) concluded that the structure would withstand horizontal accelerations and vertical acceleration up to 0.20 g without sustaining damage that would compromise the confinement characteristics of the Cells and associated ventilation systems. At accelerations greater than 0.24 g, moderate structural damage to the building exterior panels may occur and continued operation of the ventilation systems is not assured. Major structure damage, including partial roof collapse will probably occur at accelerations in excess of 0.32 g horizontal. The warehouse is expected to DOE G 151.1-2 H-39 7-11-07 withstand accelerations of 0.24 g without serious damage to the steel building frame. However, storage racks and shelves would probably collapse and the exterior doors would likely become unusable. General Emergency

No earthquake damage scenarios were explicitly analyzed. The likely response of the structure and HVAC systems suggests that a General Emergency condition may exist following accelerations above 0.24 g. However, because the radiological release will develop fairly slowly (over several hours) an immediate classification decision based on the earthquake itself is not necessary to ensure an effective response. Any General Emergency classification should be based on the status of the exhaust systems. Site Area Emergency Condition that should be classified as a Site Area Emergency is: • Earthquake that produces ground acceleration in excess of 0.24 g horizontal or vertical in the vicinity of the ABC Facility. Basis: This is a seriously degraded safety condition. Latent damage may not be apparent for some time, structures and components that have been weakened may fail in aftershocks, and the reliability and capacity of support systems (e.g., fire suppression, instrumentation) may be degraded. A Site Area Emergency declaration activates all possible facility and Site response resources to assist in damage assessment and enhances readiness to deal with other problems if and when they develop. Alert Condition that should be classified as an Alert is: • Earthquake that is felt by most personnel in/near the ABC Facility that causes minor damage, such as breaking of windows or overturning of bookcases. Basis: This declaration is entirely precautionary. Because the seismic response of aging systems, structures and components can not be easily predicted, prudence dictates that any detectable earthquake causes activation of staff and resources to assess possible safety degradation. 7.2.2 High Wind/Tornado Sustained wind speeds of 145 km/h (90 mph) or more exceed the structure design standard for XYZ Site. Engineering analysis indicates that the effect of such winds on the ABC Building or Warehouse would likely be limited to damaged wall panels, doors or roof deck. However, partial structural collapse cannot be ruled out. H-40 DOE G 151.1-2 7-11-07 General Emergency Because it is highly questionable whether wind damage to the building could ever cause a significant breach of a Cell, loss of HVAC exhaust systems, or damage to HF cylinders, any General Emergency declaration should be based on observed damage to a Cell, HVAC equipment or HF cylinder(s). Accordingly, no General Emergency EALs based solely on wind speed or structural damage are needed. Site Area Emergency Condition that should be classified as a Site Area Emergency is: • A high wind or tornado that causes severe structure damage to the ABC Building or Warehouse (structural framework partly or completely collapsed, or walls and/or roof blown out). Basis: As with the earthquake, latent damage to the critical components and systems may not be apparent for some time. Structures and components that have been weakened may fail later. Reliability and capacity of support systems may be degraded. The SAE declaration activates all possible facility and Site response resources to assist in damage assessment and mitigation, and enhances readiness to deal with other problems if and when they develop. Alert An Alert declaration is appropriate if winds exceed the velocity at which minor, but potentially safety-significant damage to structures and utilities (serving the ABC Facility) occurs. Condition that should be classified as an Alert is:

• High winds causing minor damage to the ABC Building or Warehouse, such as blowing out of wall or roof panels or missile/debris penetration of the exterior walls. Basis: This declaration is entirely precautionary. When structures begin to fail due to wind loading, the continued integrity of those structures cannot be assumed. Loss of wall or roof panels may subject safety-related equipment within to wind loading and debris/missile impact they may not be designed to withstand. Activation of staff and resources to assess any possible degradation in safety is in order. 7.2.3 Aircraft Crash Crash of an aircraft into a structure that houses hazardous materials is an extremely unlikely, but possibly very destructive event. Depending on the size of DOE G 151.1-2 H-41 7-11-07 the aircraft, its fuel load, and the location, angle and speed of impact, the consequences may vary from nil to major. In accordance with XYZ Site hazards assessment and emergency planning policy, aircraft crashes are addressed here for classification purposes. The crash of a heavy aircraft into the ABC Building or Warehouse could produce partial or complete collapse of the structure, with fire also likely. A fire caused by the residual aircraft fuel could damage cell exhaust fans, ducts and filters in the ABC Building. Fire in the Warehouse could also cause overpressure failure of HF cylinders. Fire would greatly complicate any damage assessment and response by limiting the access of facility personnel. Crash of a light aircraft, similar to that used to conduct radiological surveillance and monitor wildlife on the site, would be unlikely to cause major damage to any substantial structure. General Emergency Condition that should be classified as a General Emergency is: • Aircraft crash that causes major fire and/or severe structure damage to the ABC Building or Warehouse (structural framework partly or completely collapsed, or walls and/or roof blown out). Basis: Either the complete loss of Zone A and Zone B exhaust systems or major fire that could produce airborne releases of plutonium from exhaust ducts or filters may cause the General Emergency consequence criterion to be exceeded. If on-shift personnel are able to assess the condition of Cells and the associated ventilation equipment within a short time after the crash, the actual damage can be factored in to the classification decision (see the Site Area Emergency discussion below). Site Area Emergency Condition that should be classified as a Site Area Emergency is: • An aircraft crash that causes severe structure damage to the ABC Building or Warehouse (structural framework partly or completely collapsed, or walls and/or roof blown out) but no major fire exists. Basis. Latent damage to the components and systems may not be apparent for some time as with earthquake and wind damage. Structures and components that have been weakened may fail later. Reliability and capacity of emergency systems may be degraded. The SAE declaration activates all possible facility and site response resources to assist in damage assessment and mitigation, and enhances readiness to deal with other problems if and when they develop. H-42 DOE G 151.1-2 7-11-07 Alert In keeping with XYZ Site emergency classification policy, any aircraft crash in the access controlled area surrounding a hazardous material facility is to be classified as an Alert. Condition that should be classified as an Alert is:

• Aircraft crash within the ABC limited area. Basis: This declaration is entirely precautionary. Crash of an aircraft may start fires or require emergency responders to enter areas that are controlled for radiological purposes. Assessment of the effects of the crash, rescue of survivors, retrieval of victims and communications with civil authorities will place unusual demands on facility personnel, security and fire/rescue resources. An Alert declaration will activate staff and resources to meet those needs as well as to assess any possible degradation in safety continuously. 7.3 Security Contingencies 7.3.1 Bomb Threat/Explosive Device Actual or threatened detonation of an explosive device in the ABC Facility may warrant classification if there is potential for the dispersal of radioactive material or toxic chemicals. Several events analyzed in Section 5 have consequences similar to those that might be caused by an explosive device or bomb. The postulated impact failure of an HF cylinder scenario would warrant classification as a General Emergency. The loss of both Zone A and B exhaust systems might result from an explosion, as could the flash fire/explosion in Cell 1. If a bomb is found or threatened in a particular location, it should be assumed that any hazardous material in that location would be released/ dispersed by the explosion. General Emergency Declaration of a General Emergency is warranted if the bomb/explosive device could credibly cause radiological or toxic chemical consequences approaching the PAC at the nearest site boundary. Condition that should be classified as a General Emergency is: • Discovery or detonation of a confirmed explosive device in the ABC ventilation equipment room or in the Warehouse. Basis: Detonation (or discovery) of an explosive device where it would damage or destroy both Zone A and B exhaust fans means the condition analyzed in Section 5 may have occurred (or be imminent). Declaration of a General Emergency is appropriate. Likewise, detonation (or discovery) of an DOE G 151.1-2 H-43 7-11-07 explosive device where it would damage an HF cylinder means the release of the HF may have occurred (or be imminent). Site Area Emergency Condition that should be classified as a Site Area Emergency is: • Discovery of a confirmed explosive device in or near an ABC facility or structure containing significant quantities of hazardous materials. Basis: Detonation or discovery of an explosive device where it would disperse hazardous materials represents a serious degradation of safety. Both malevolent intent and the means to maximize any potential hazardous material release should be assumed. Even though the hazardous material consequences may be unknown or minor, declaration of a Site Area Emergency is appropriate in this circumstance to mobilize resources necessary to assess and mitigate the hazards. Alert Discovery or credible threat of an explosive device anywhere in the vicinity of the ABC facility structures should be regarded as indication of a degraded safety and security situation, even if the device is not in a location where it would disperse radioactive material. Condition that should be classified as an Alert is: • Unplanned detonation, discovery or credible threat of an explosive device anywhere in the ABC access controlled Area that is not classified as Site Area Emergency or General Emergency.

Basis: Discovery of an explosive device in close proximity to hazardous material facilities should be interpreted as an attempt to disperse radioactive material. If discovered in any other location, it should be assumed that the device is intended to destroy something or create a diversion that might ultimately have a negative affect on the control over radioactive material or other hazards. 7.3.2 Sabotage Sabotage is intentional damage to facilities, equipment or materials. Sabotage may have the effect of releasing hazardous materials to the environment or degrading the level of control over those materials. If release occurs or is imminent due to an act of sabotage, the event would be classified in accordance with its estimated actual consequences. Otherwise, the discovery of a confirmed act of sabotage may warrant classification at the Alert level if it adversely affects control over hazardous materials. H-44 DOE G 151.1-2 7-11-07 General Emergency Not applicable. Site Area Emergency Not applicable. Alert Sabotage that damages or impairs the control over hazardous material but does not result in its actual or imminent release should be classified at the Alert level. Condition that should be classified as an Alert is: • Any act of destruction, damage or misoperation involving facility equipment, systems or materials that reduces the level of safety or control over hazardous materials. Basis: This classification assures rapid activation of the assessment and mitigative resources needed for full examination of the safety status of the facility and to discover and repair or compensate for any damage caused by the saboteur. 7.3.3 Hostage Situation/Armed Intruder If an overt threat to a specific facility or hazardous material inventory exists, the event should be classified consistent with the potential consequences of the most conservative release scenario involving that material. Otherwise, the discovery of an armed intruder or a hostage situation may warrant classification at the Alert level if it adversely affects control over hazardous materials. General Emergency Not applicable. Site Area Emergency Not applicable. Alert Any armed intruder or hostage situation that impairs or threatens the control over hazardous material but does not result in its actual or imminent release should be classified at the Alert level. Condition that should be classified as an Alert is: DOE G 151.1-2 H-45 (and H-46) 7-11-07 • Discovery of an armed intruder, or hostage situation in the ABC access controlled area that reduces the level of safety or control over hazardous materials. Basis: This classification assures rapid activation of the security, assessment and mitigative resources needed to monitor the safety status of the facility and to repair or compensate for any damage 8. Maintenance and Review of this Hazards Assessment The Operating Contractor Manager of Emergency Planning is responsible for ensuring that this Hazards Assessment is regularly reviewed and maintained current. The review requirement and schedule is spelled out in the Site Emergency Readiness Assurance Plan, Section __. Acronyms EAL Emergency Action Level EPZ Emergency Planning Zone HEPA High-Efficiency Particulate Air HF Hydrofluoric Acid HVAC Heating, Ventilating, and Air Conditioning PCB Polychlorinated Biphenyls RTG Radioisotopic Thermal-electric Generator

1. HAZARDS SURVEYS 1.1 Introduction 1.2 General Approach 1.3 Describe the Facility and Identify its Hazards (Step 1) 1.4 Screen Hazardous Materials to Determine Need for a Hazards Assessment (Step 2) 1.5 Identify Applicable Types of Emergency Events and Conditions (Step 3) 1.6 Qualitatively Describe Potential Impacts (Step 4) 1.7 Identify and Document the Applicable Planning and Preparedness Requirements (Step 5) 1.8 Maintenance of Hazards Surveys 1.9 Hazards Survey Documentation APPENDIX A. Hazardous Material Screening Process A.1 Introduction A.2 Radioactive Material Screening A.3 Chemical Screening APPENDIX B. Example Application of the Hazards Survey Guidance to a Hypothetical DOE Facility B.1 Introduction B.2 Example Hazards Survey 2. HAZARDS ASSESSMENTS 2.1 Introduction 2.2 General Approach 2.3 Define and Describe Facility and Operations (Step 1) 2.4 Characterize the Hazardous Materials (Step 2) 2.5 Select Scenarios for Analysis (Step 3) 2.6 Analyze Scenarios (Step 4) 2.7 Document the Results of the Analysis (Step 5) 2.8 Special Topics 2.9 Using Safety Analysis Results in EPHAs 3. EMERGENCY PLANNING ZONES 3.1 Background 3.2 General EPZ Concepts 3.3 Developing Facility EPZs 4. MAINTAINING HAZARDS SURVEYSAND HAZARDS ASSESSMENTS 5. USING HAZARD SURVEYS AND HAZARDS ASSESSMENTS 5.1 Hazards Survey 5.2 Emergency Planning Hazards Assessment (EPHA) APPENDIX C. Facility and Site Boundary Guidelines C.1 Introduction C.2 Selection of Facility Boundary Distance C.3 Definition of Site Boundaries APPENDIX D. Onsite Transportation Analysis D.1 Introduction D.2 Hazards Survey D.3 Hazards Assessment APPENDIX E. Malevolent Events E.1 Introduction E.2 Scenario Selection E.3 Extreme Malevolent Events APPENDIX F. Consequence Thresholds F.1 Introduction F.2 Protective Action Criteria (PACs) F.3 Threshold for Early Lethality (TEL) F.4 Chemical Mixtures APPENDIX G. Combustion Products and Toxicity in Hazards Assessments G.1 Introduction G.2 Background G.3 Chemical Explosives G.4 Toxic Release Comparison G.5 Other Hazards and Planning Considerations G.6 Summary G.7 Conclusions APPENDIX H. Example Application of the Hazards Assessment Methodology to a Hypothetical DOE Facility H.1 Introduction H.2 Example EPHA