An emergency core cooling system is provided with a hybrid safety system composed of an active safety system and a static safety system for ensuring the safety against a severe natural phenomenon such as a giant earthquake and a mega hurricane. An emergency core cooling system for a boiling water reactor includes four safety divisions in total: three safety divisions for an active safety system having a high pressure reactor core cooling system, a low pressure reactor core cooling system, a residual heat removal system, and an emergency diesel generator; and one safety division for a static safety system having an isolation condenser, a gravity drop reactor core cooling system, and a static containment vessel cooling system.