05000254/LER-2005-001, Re 4160 Volt Relaying and Metering Single Failure Vulnerability

Re 4160 Volt Relaying and Metering Single Failure Vulnerability

ML051030184
Person / Time
Site:	Quad Cities
Issue date:	04/01/2005
From:	Tulon T Exelon Generation Co, Exelon Nuclear
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
SVP-05-023 LER 05-001-00
Download: ML051030184 (6)

LER-2005-001, Re 4160 Volt Relaying and Metering Single Failure Vulnerability

Event date:
Report date:
Reporting criterion:	10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(v), Loss of Safety Function
2542005001R00 - NRC Website

text

Exelkrn.

Exelon Generation Company, LLC www.exeloncorp.com Nuclear Quad Cities Nuclear Power Station 22710 206'W Avenue North Cordova. IL 61242-9740 April 1, 2005 SVP-05-023 U. S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, D.C. 20555 Quad Cities Nuclear Power Station, Units 1 and 2 Facility Operating License Nos. DPR-29 and DPR-30 NRC Docket Nos. 50-254 and 50-265

Subject:

Licensee Event Report 254/05-001, "4160 Volt Relaying and Metering Single Failure Vulnerability" Enclosed is Licensee Event Report (LER) 254/05-001, "4160 Volt Relaying and Metering Single Failure Vulnerability," for Quad Cities Nuclear Power Station.

This report is submitted in accordance with the requirements of the Code of Federal Regulations, Title 10, Part 50.73(a)(2)(ii)(B), which requires reporting of any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degraded plant safety, and Part 50.73 (a)(2)(i)(B), which requires the reporting of any operation or condition that was prohibited by the plant's Technical Specifications.

Should you have any questions concerning this report, please contact Mr. W. J. Beck at (309) 227-2800.

Respectfully, T/{othy J. Tulon Rte Vice President Quad Cities Nuclear Power Station cc:

Regional Administrator - NRC Region IlIl NRC Senior Resident Inspector-Quad Cities Nuclear Power Station

• 62%

It NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 0630/2007 (6.2004) the NRC may digits/characters for each block) conduct or sponsor, and a person Is not required to respond to, the

3. PAGE Quad Cities Nuclear Power Station, Unit 1 05000 254 1 OF 5

4. TITLE 4160 Volt Relaying and Metering Single Failure Vulnerability

5. EVENT DATE

6. LER NUMBER

7. REPORT DATE

8. OTHER FACILMES INVOLVED SEQUENTIAL REV I

FACILU7Y NAME DOCKET NUMBER MONTH DAY YEAR YEAR NUMBER NO.

MONTH DAY YEAR Quad Cities Nuclear Power Station, Unit 2 05000265 FACILITY NAME DOCKET NUMBER 02 03 2005 2005 - 001 -

00 04 01 2005 N/A 05000 NIA

9. OPERATING MODE ll.THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR§: (Check all that apply) o 20.2201(b) 0 20.2203(a)(3)(i) 0 50.73(a)(2)(i)(C) a 50.73(a)(2)(vii) 1 0 20.2201(d)

D 20.2203(a)(3)(ii) 0 50.73(a)(2)(ii)(A) 0 50.73(a)(2)(viii)(A) 0 20.2203(a)(1) 0 20.2203(a)(4)

El 50.73(a)(2)(ii)(B) 0 S0.73(a)(2)(viii)(B) 0 20.2203(a)(2)(i) 0 50.36(c)(1)(i)(A) a 50.73(a)(2)(iii) 0 50.73(a)(2)(ix)(A)

10. POWER LEVEL 0 20.2203(a)(2)(ii) 0 50.36(c)(1)(ii)(A) 0 60.73(a)(2)(iv)(A)

E 50.73(a)(2)(x)

O 20.2203(a)(2)(iii) 0 50.36(c)(2) 0 50.73(a)(2)(v)(A) 0 73.71 (a)(4) o 20.2203(a)(2)(iv) 0 50.46(a)(3)(ii) 0 50.73(a)(2)(v)(B) 0 73.71(a)(5) 085%

0 20.2203(a)(2)(v) 0 50.73(a)(2)(i)(A) 0 50.73(a)(2)(v)(C) 0 OTHER 0 20.2203(a)(2)(vi) 0 50.73(a)(2)(i)(B) 0 50.73(a)(2)(v)(D)

Specify In Abstract below I

"Prn rn~ ~nrmRA 12.LICENSEE CONTACT FOR THIS LER FACILITY NAME

,.TELEPHONE NUMBER (Include Area Code)

Wally Beck, Regulatory Assurance Manager (309) 227-2800CAS YTMICMOET MANU-REPORTABLE

CAUSE

SYSTEM ICOMPONENT MANU-REPORTABLE

CAUSE

SYSTEM COMPONENT FACTURER TO EPIX FACTURER TO EPIX

14. SUPPLEMENTAL REPORT EXPECTED

15. EXPECTED MONTH DAY YEAR SUBMISSION E YES (If yes, complete 15. EXPECTED SUBMISSION DATE) 02 NO DATE ABSTRACT (Limit to 1400 spaces. I.e., approximately 15 single-spaced typewritten lines)

On February 3, 2005, at 1819 hours0.0211 days <br />0.505 hours <br />0.00301 weeks <br />6.921295e-4 months <br /> (CST), with Unit 1 at approximately 85 percent power and Unit 2 at approximately 85 percent power, Quad Cities Engineering personnel confirmed that a single failure vulnerability existed on 4160 Volt Relaying and Metering transformers on both units. The single failure vulnerability defeated the independence of the offsite alternating power supplies.

If this failure occurred during a Loss of Coolant Accident, the Residual Heat Removal Service Water system pumps may not have been able to be start within the required ten minutes.

The single failure vulnerability was removed on February 4, 2005, at 0152 hours0.00176 days <br />0.0422 hours <br />2.513228e-4 weeks <br />5.7836e-5 months <br />, and the affected plant equipment was declared operable.

The root cause of this event was determined to be an existing latent design deficiency.

The corrective action to prevent reoccurrence is currently in place in the Configuration Change procedures used to install new designs at Quad Cities Nuclear Power Station.

NRC FORM 366(6.2004)

PRINTED ON RECYCLED PAPER NRC FORM 366 (6-2004)

PRINTED ON RECYCLED PAPERU.S. NUCLEAR REGULATORY COMMISSION (7-2001)

LICENSEE EVENT REPORT (LER)

TEXT CONTINUATION FACILITY NAME (1)

DOCKET NUMBER (2)

LER NUMBER 6 PAGE (3)

YEAR SEQUENTIAL REVISION Quad Cities Nuclear Power Station Unit 1 05000254 NUMBER NUMBER 2005 001 00 2of 5 (If more space Is required, use additional copies of NRC Form 366A)(17)

PLANT AND SYSTEM IDENTIFICATION

General Electric -

Boiling Water Reactor, 2957 Megawatts Rated Core Thermal Power Energy Industry Identification System (EIIS) codes are identified in the text as [XX].

EVENT IDENTIFICATION 4160 Volt Relaying and Metering Single Failure Vulnerability A.

CONDITION PRIOR TO EVENT

Unit: 1.

Event Date: February 3, 2005 Event Time: 1819 hours0.0211 days <br />0.505 hours <br />0.00301 weeks <br />6.921295e-4 months <br />

- Reactor Mode: 1 Mode Name: Power Operation PowerLevel: 085%

'Unit: 2 Event Date: February 3, 2005 Event Time: 1819 hours0.0211 days <br />0.505 hours <br />0.00301 weeks <br />6.921295e-4 months <br /> Reactor Mode: 1 Mode.Name: PowerOperation Power Level: 085%

Power Operation (1) -

Mode switch in the RUN position with average reactor coolant temperature at any temperature.

B.

DESCRIPTION OF EVENT

On January 27, 2005, Crystal River Unit 3 reported to the NRC, in Event Notification 41362, a design deficiency in a common metering circuit such that a postulated single failure would result in the loss of all offsite and onsite AC power to both divisions of safety related distribution buses.

The initial Quad Cities' reviews focused on a spurious ground on the common circuitry.

These initial reviews identified that grounds would not have an adverse impact on the circuitry.

Similar reviews were conducted at other Exelon sites.

On February 1, 2005, LaSalle Station identified that its circuitry was vulnerable to a single failure vulnerability that was due to spurious open circuits (Event Notification 41366).

Quad Cities Nuclear Power Station expanded the review of the design for an open circuit single failure vulnerability.

On February 3, 2005, at 1819 hours0.0211 days <br />0.505 hours <br />0.00301 weeks <br />6.921295e-4 months <br /> (CST), with Unit 1 at approximately 85 percent power and Unit 2 at approximately 85 percent power, Quad Cities Engineering personnel confirmed that a single failure vulnerability existed on 4160 Volt Relaying and Metering transformers associated with the Unit Auxiliary Transformers (UATs) (XFMR] and Reserve Auxiliary Transformers (RATs) on both units.

Although the Relaying and Metering transformers were fully functional at that time, failure of the Relaying and Metering transformers circuitry could have caused the neutral overcurrent relay to trip and lock out the main, reserve and cross-tie feed breakers. These combined protective relay trips would have acted to trip and lock out the circuit breakers supplying electrical feeds to Buses 13 (23) and 14 (24)

[EA], essentially isolating these buses from their normal and emergency powerU.S. NUCLEAR REGULATORY COMMISSION (7-2001)

LICENSEE EVENT REPORT (LER)

TEXT CONTINUATION FACILITY NAME (1)

DOCKET NUMBER (2)

LER NUMBER (6)

PAGE (3)

YEAR.

SEQUENTIAL REVISION Quad Cities Nuclear Power Station Unit 1 05000254 NUMBER NUMBER 2005 001 00 3 of 5 (If more space Is required, use additional copies of NRC Form 366A)(17) sources.

Emergency power from the Emergency Diesel Generators (EDGs) [EK] would have been available to safety related Buses 13-1 (23-1) and 14-1 (24-1) [EB], but the Residual Heat Removal Service Water (RHRSW) system [BI], which is fed from Buses 13 (23) and 14 (24), would have remained without a power source.

If this failure occurred during a Loss of Coolant Accident, then the RHRSW pumps may not have been able to start within the required ten minutes.

These events were promptly reported to the NRC in accordance with 10CFR50.72(b)(3)(v)(B), "Any event or condition that at the time of discovery could have prevented the fulfillment of the safety function of structures or systems that are needed to remove residual heat,, and 10CFR50.72(b)(3)(ii)(B), "Any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degrades plant safety."

Subsequent investigations have since revealed that there was not a potential loss of safety function as a result of these events.

The single failure vulnerabilities were removed on February 4, 2005, at 0152 hours0.00176 days <br />0.0422 hours <br />2.513228e-4 weeks <br />5.7836e-5 months <br />, and the affected equipment was declared operable.

These events are being reported in accordance with:

10 CFR 50.73(a)(2)(ii)(B), "Any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degraded plant safety," as the single failure vulnerabilities defeated the single failure design of plant systems, and 10 CFR 50.73(a)(2)(i)(B), "Any operation or condition which was prohibited by the plant's Technical Specifications,, as the single failure vulnerability rendered Technical Specification equipment inoperable for a period of time that exceeded Technical Specification Required Action Times.

C.

CAUSE OF EVENT

The root cause of these events was determined to be an existing latent design deficiency. Additionally, this design deficiency was not identified in design reviews performed for subsequent modifications, which allowed the systems to continue to be deficient for a common single failure.

The original design met the engineering standard practice of the time (the late 1960's and early 1970's) and was designed prior to the issuance of many of the IEEE standards related to nuclear power stations.

This design can also be found in non-nuclear facilities of similar vintage.

The initial design contained the above described single failure vulnerability.

The purpose of interconnecting the transformers was to obtain power readings from the UAT / RAT for totalization.

These meters were a precursor to the revenue metering of today, and were used for internal utility accounting purposes.

The transformers used for the totalizer were not required to be as accurate as those used for revenue metering. The preferred practice was to use separate transformers for metering and relaying; however, it was not uncommon, due to space limitations, cost, or retrofits, to use relaying transformers for metering and to interconnect them in this configuration.U.S. NUCLEAR REGULATORY COMMISSION (7-2001)

LICENSEE EVENT REPORT (LER)

TEXT CONTINUATION FACILITY NAME (1)

DOCKET NUMBER (2)

LER NUMBER (6 PAGE (3)

YEAR.

i SEQUENTIAL I REVISION Quad Cities Nuclear Power Station Unit 1 05000254 NUMBER NUMBER 2005 001 00 4 of 5 (If more space Is required, use additional copies of NRC Form 366A)(17)

Quad Cities has performed reviews of and modifications to the plant's electrical distribution system since initial operation.

An evaluation of these opportunities that could have previously discovered the above described single failure vulnerabilities concluded that the discovery was unlikely.

D.

SAFETY ANALYSIS

The safety significance of the event is minimal. The single failure to which the 4160 Volt Relaying and Metering transformers associated with the UATs and RATs on both units were vulnerable is not a typical or likely failure mode, and has not occurred historically at Quad Cities.

Therefore, the consequences of this event had minimal impact on the health and safety of the public and reactor safety.

E.

CORRECTIVE ACTIONS

The Corrective Action to Prevent Recurrence-is currently in place in the Configuration Change procedures used to install new designs at Exelon facilities.

Separation and Station Single Point Vulnerability reviews and failure mode and effect conditions are part of the preparation' and review process contained in existing Exelon procedures. The existing Exelon Human Performance Technical Rigor Standards would also mitigate this situation.

Immediate Corrective Actions

Temporary modifications were installed to eliminate the single failure vulnerability on both units.

Corrective Actions to be completed:

A permanent modification to the circuitry to eliminate the single failure vulnerability will be designed and installed.

The AC, DC, and EDG systems will be reviewed for latent design deficiency conditions similar to this event.

This event will be reviewed as part of a briefing/discussion to raise awareness of common circuits and the potential to affect more than one train of equipment.

A description of this event will be included in continuing engineering training to raise awareness of common circuits and the potential to affect more than one train of equipment.U.S. NUCLEAR REGULATORY COMMISSION (7-2001)

LICENSEE EVENT REPORT (LER)

TEXT CONTINUATION FACILITY NAME (1)

DOCKET NUMBER (2) lER NUMBER (6 PAGE (3)

YEAR.

SEQUENTIAL REVISION Quad Cities Nuclear Power Station Unit 1 05000254 NUMBER NUMBER 2005 001 00 5of5 (If more space Is required, use additional copies of NRC Form 366A)(17)

F.

PREVIOUS OCCURRENCES

A review of Quad Cities Nuclear Power Station LERs identified no similar events.

G.

COMPONENT FAILURE DATA

There were no component failures associated with this issue.