RAMI analysis of the ITER Central Safety System

ITER is the first worldwide international project aiming to design a facility to produce nuclear fusion energy. The technical requirements of its plant systems have been established in the ITER Project Baseline. In the project, the Reliability, Availability, Maintainability and Inspectability (RAMI) approach has been adopted for technical risk control to help aid the design of the components in preparation for operation and maintenance. A RAMI analysis was performed on the conceptual design of the ITER Central Safety System (CSS). A functional breakdown was prepared in a bottom-up approach, resulting in the system being divided into 2 main functions and 20 sub-functions. These functions were described using the IDEF0 method. Reliability block diagrams were prepared to estimate the reliability and availability of each function under the stipulated operating conditions. Initial and expected scenarios were analyzed to define risk-mitigation actions. The inherent availability of the ITER CSS expected after implementation of mitigation actions was calculated to be 99.80% over 2 years, which is the typical interval of the scheduled maintenance cycles. This is consistent with the project required value of 99.9 ± 0.1%. A Failure Modes, Effects and Criticality Analysis was performed with criticality charts highlighting the risk level of the different failure modes with regard to their probability of occurrence and their effects on the availability of the plasma operation. This analysis defined when risk mitigation actions were required in terms of design, testing, operation procedures and/or maintenance to reduce the risk levels and increase the availability of the main functions.