READOS / Ideas / CHAPTER 9

Nuclear power: fission, reactor safety and decisions that last for generations

How nuclear fission became a source of electricity, why reactor safety relies on defence in depth, what Three Mile Island, Chernobyl and Fukushima taught, and Australia's place in the story.

11 min read · Chapter 9 of 16

9 of 16

Few technologies have moved from discovery to large-scale use as quickly as nuclear fission, and few have carried such strong hopes and fears. Within twenty years of the discovery that uranium atoms could split, reactors were generating electricity, and within a few more decades nuclear power supplied a substantial share of electricity in many industrial countries. A single fuel load could run a large power station for many months with no greenhouse gas emissions from generation. Yet nuclear power also brought the possibility of severe accidents, radioactive waste that must be managed for thousands of years, links with weapons and some of the most expensive and delayed construction projects in history.

Nuclear power is therefore an unusually clear case study in decisions with very long consequences. A reactor ordered today may be designed for a life of sixty years or more, decommissioning takes decades, and some of its waste remains hazardous for far longer than any human institution has existed. Its safety philosophy, built around multiple independent layers of protection, has influenced high-hazard industries generally. Its accidents show how technical faults, human factors and organisational weaknesses combine.

This article traces, in general terms, how nuclear power developed, how reactors work and are kept safe, what major accidents taught, the economics and waste questions, and Australia’s particular position, and draws out lessons for decisions with long lives and serious consequences. It is a general historical overview and takes no position on current energy policy.

From discovery to chain reaction

In late 1938, the German chemists Otto Hahn and Fritz Strassmann found that bombarding uranium with neutrons produced barium, a much lighter element. Lise Meitner and Otto Frisch explained the result: the uranium nucleus had split, or fissioned, releasing a large amount of energy. Scientists soon realised that fission also released additional neutrons, which could split further nuclei in a chain reaction.

In December 1942, a team led by Enrico Fermi achieved the first controlled, self-sustaining chain reaction in a pile of graphite and uranium at the University of Chicago. The work was part of the wartime effort that produced nuclear weapons, and the military origins of nuclear technology have shaped its politics ever since.

Electricity from fission

After the war, attention turned to generating power. An experimental reactor in Idaho produced the first electricity from nuclear energy in 1951. A reactor at Obninsk in the Soviet Union began supplying a grid in 1954. Calder Hall in England, opened in 1956, is often described as the first nuclear power station to produce electricity on a commercial scale, and Shippingport in the United States followed in 1957. Nuclear propulsion also went to sea, and by the mid-1950s a nuclear-powered submarine was operating.

How a reactor works

A nuclear power reactor is, in essence, a source of heat for a steam cycle much like that in a coal-fired station:

  • Fuel, usually uranium in ceramic pellets sealed in metal tubes, sustains a controlled chain reaction.
  • A moderator, such as water or graphite, slows neutrons so they are more likely to cause fission in many reactor designs.
  • Control rods absorb neutrons, allowing operators to regulate or stop the reaction.
  • A coolant, such as water or gas, carries heat from the core to produce steam, which drives turbines.

Most reactors in operation today are light-water reactors, cooled and moderated by ordinary water, either pressurised to prevent boiling or allowed to boil in the core. Other designs use heavy water, gas or liquid metal.

One feature is crucial to safety. Even after the chain reaction stops, the radioactive decay of fission products continues to generate heat, at first several per cent of full power and declining over days and weeks. That decay heat must be removed, or the fuel will overheat and be damaged. Many serious accidents have been, at their core, failures to remove decay heat.

Defence in depth

Reactor safety is built on defence in depth: multiple independent layers, so that if one fails, others prevent harm.

  • Physical barriers: the fuel pellet, the fuel cladding, the reactor vessel and coolant system, and the containment building.
  • Design features: inherent tendencies of the reactor to slow down as it heats, and redundant, diverse cooling systems.
  • Automatic protection: systems that shut the reactor down when parameters go outside safe limits.
  • Operator training and procedures for normal operation and emergencies.
  • Emergency planning for the surrounding area.

A key challenge is common-cause failure: a single event, such as a flood, fire or design error, that defeats several layers at once. Much safety engineering effort goes into separating, diversifying and protecting the layers so they do not share weaknesses.

Three accidents

Three Mile Island, 1979

At Three Mile Island in Pennsylvania, a valve stuck open after a minor fault, allowing coolant to escape. Instruments gave operators a misleading picture, and they reduced cooling water flow, believing the reactor had too much water. Part of the core melted. Very little radioactive material escaped to the environment, but the accident transformed the industry’s approach to operator training, control room design, instrumentation and the sharing of operating experience. It showed that human factors and the design of information displays are as important as hardware.

Chernobyl, 1986

At Chernobyl in Ukraine, then part of the Soviet Union, operators conducting a test at low power, with safety systems disabled, triggered a rapid power surge in a reactor design with dangerous characteristics at low power. The reactor exploded and burned, releasing large quantities of radioactive material across Europe. Workers and emergency responders died from acute radiation exposure, a large area was evacuated and the long-term health consequences have been studied and debated since. Chernobyl exposed the danger of designs with unstable behaviour, of a weak safety culture and of secrecy.

Fukushima Daiichi, 2011

In March 2011, a massive earthquake and tsunami struck Japan. The reactors at Fukushima Daiichi shut down automatically when the earthquake hit, but the tsunami flooded the site and knocked out power supplies and backup generators needed to run cooling systems. Without cooling, decay heat damaged the cores of three reactors, hydrogen explosions damaged buildings and radioactive material was released. Large areas were evacuated. The accident was a textbook common-cause failure: one external event defeated several layers of protection that had been located where the same flood could reach them. It led to reassessments of external hazards and emergency power arrangements worldwide.

Economics and construction

Nuclear power stations have low fuel costs but very high construction costs, long build times and financing costs that rise with every year of delay. Where countries built many reactors to standardised designs, such as France in the 1970s and 1980s, construction became more predictable, and nuclear power came to supply around 70% of France’s electricity. Where each project was effectively a first of a kind, overruns and delays were common, and several projects in Western countries in recent decades have run far over budget and schedule.

Decommissioning, the dismantling of a reactor at the end of its life and the management of its materials, takes decades and must be funded during the plant’s operating life.

Waste that outlasts institutions

Spent nuclear fuel is highly radioactive at first and remains hazardous for many thousands of years. Most spent fuel is stored in cooling pools and then in dry casks at reactor sites. The preferred long-term solution internationally is a deep geological repository, where waste is placed in stable rock hundreds of metres underground, and Finland has led the development of such a repository for spent fuel. Designing for timescales longer than recorded history raises unusual questions: how to ensure that future societies understand what is buried and why it must not be disturbed.

Beyond electricity

Nuclear technology is used far more widely than in power stations. Radioisotopes produced in research reactors and accelerators are used to diagnose and treat disease, sterilise medical supplies, measure the thickness and density of materials in manufacturing, inspect welds and castings by radiography and trace the movement of water and pollutants. Industrial gauges containing small sealed sources are common in mining and processing plants. Each use brings its own licensing, handling and disposal obligations, and businesses that use such equipment need to know where the sources are and who is responsible for them.

Australia’s position

Australia has no nuclear power stations, and federal legislation prohibits approval of nuclear power plants. It does, however, have a long involvement with nuclear technology. Australia holds the world’s largest known uranium resources and is a significant uranium exporter. The OPAL research reactor at Lucas Heights in Sydney, operated by the Australian Nuclear Science and Technology Organisation, produces radioisotopes for nuclear medicine and supports research and industry. Australia has also agreed to acquire nuclear-powered submarines. Whether nuclear power should have a role in Australia’s future electricity supply is a matter of ongoing public debate, and this article does not take a position on it.

Lessons for engineers and businesses

Some decisions last for generations

Reactor lives, decommissioning and waste span decades or millennia. Decisions with very long consequences deserve explicit consideration of end-of-life costs, future obligations and how knowledge will be kept.

Layers of protection must not share weaknesses

Fukushima’s backup systems failed together because they were exposed to the same flood. Backup systems in any business should be separated from the hazards that disable the primary systems.

Information design matters

At Three Mile Island, misleading indications contributed to wrong decisions. Dashboards, alarms and reports should show people what they need to know when it matters.

Standardisation reduces cost and risk

Repeating proven designs made construction more predictable. Standard designs and repeatable processes reduce cost and error in any field.

Safety culture is decisive

Chernobyl showed what happens when rules are bypassed to complete a task. Culture, not just equipment, determines whether safeguards work.

Fund the end at the beginning

Decommissioning must be paid for during operation. Many business assets also have end-of-life costs, such as remediation, disposal or data migration, that should be planned and funded early.

A worked example

This is an illustrative example. The business and figures are hypothetical.

A small manufacturer keeps its server equipment, network switch and backup generator in the same ground-floor plant room, close to a stormwater drain. The owner considers the arrangement safe because there is a backup generator and backups of all data.

After reading about Fukushima, the owner asks a simple question: what single event could disable both the systems and their backups? A heavy storm that floods the plant room would stop the servers and the generator together, and the local backup drive sits on the same shelf as the server.

The business moves the server equipment to a first-floor cabinet, raises the generator on a plinth, adds an automatic off-site backup and tests a restore. The changes cost about $9,000. A flood that destroyed the equipment and data would have stopped invoicing and production scheduling for at least a week, at an estimated cost several times higher, and might have lost records that could not be recreated.

How this applies to a small Australian business

  • Identify single events that could defeat several protections at once, such as fire, flood or power loss.
  • Separate backups from primary systems physically and logically.
  • Design dashboards and alarms so people can understand the situation quickly.
  • Plan and fund end-of-life costs for equipment, sites and data.
  • Standardise designs and processes that are repeated.
  • Build a culture in which safeguards are not bypassed to get work done.

Common mistakes

  • Counting backups without checking what disables them.
  • Ignoring end-of-life obligations until they arrive.
  • Treating every project as unique when a standard approach would do.
  • Assuming that low-probability events will not happen during the life of a long-lived asset.

Frequently asked questions

What is decay heat, and why does it matter? It is the heat produced by radioactive decay of fission products after a reactor stops. It must be removed for days and weeks after shutdown, which is why cooling systems and their power supplies are critical.

Why are nuclear projects so often late and over budget? Large, complex, highly regulated projects with first-of-a-kind designs, long supply chains and high financing costs are prone to delay. Standardised designs and experienced construction teams reduce the risk.

Questions to ask

  • Which of our decisions will still have consequences in twenty or fifty years?
  • What single event could disable both our primary systems and their backups?
  • Do our dashboards and alarms help people make the right decision under pressure?
  • What end-of-life costs are we not yet planning for?
  • Where do people feel pressure to bypass safeguards to finish a task?

Bringing it together

Nuclear fission moved from discovery in 1938 to electricity within two decades and became a major source of low-emission power in several countries. Its safety rests on defence in depth and the removal of decay heat, and its accidents at Three Mile Island, Chernobyl and Fukushima taught lessons about human factors, unstable designs, safety culture and common-cause failure. High construction costs, long timelines, decommissioning and waste make it a study in long-lived decisions, and Australia’s position remains a subject of public debate. The learning curves and zero fuel cost and engines after steam articles describe other paths in the same energy story. For any business, the lessons are to plan for the whole life of decisions, separate protections from shared hazards, design information for people under pressure and protect the culture that makes safeguards work.


Source: KEVOS editorial notes. Examples and figures in this article are illustrations. This article is a general historical overview and does not take a position on energy policy.

Part of How Engineering Shaped Industry: Power, Networks and the Modern Era in KEVOS® READOS.