12-19-2005 | order, a shift manager recognized that the isolation used for this activity affected the Emergency Core Cooling Systems ( ECCS) due to impacts on the associated'Emergency Service Water ( ESW) pump start logic. This maintenance work had already been approved for implementation; however, the compensatory measures planned for the EFT maintenance were determined to be inadequate and the work was put on hold prior to implementation. On October 18, 2005 during the extent of condition review for the issue, it was determined that a similar condition had previously existed. The impact on ECCS during the previous isolation was not recognized or evaluated in advance and resulted in a plant configuration control error.
The root cause evaluation for the event determined that management and supervision did not provide the necessary direction and oversight of isolation activities to ensure expectations were clear, appropriate resources were applied, and roles and responsibilities in the isolation preparation/approval, work order impact, and work order approval processes were clear. |
---|
Description In April of 2004, a non-compliance with 10 CFR 50 Appendix R cable [EIIS Component Code CBL] separation requirements was identified as an operable but non-conforming condition. A subsequent July 2004 evaluation resulted in the initiation of a modification to correct the condition. Engineering performed an installation impact assessment and determined that only the Emergency Filtration Train (EFT) [EIIS System Code BH] and Control Room Ventilation (CRV) [EIIS System Code VI] system Technical Specifications (TS) would be impacted during installation of the modification. During a February 2005 management challenge board meeting, a decision was made to implement part of this modification during the 2005 Refueling Outage (RFO) and the remainder online. The decision to complete part of this work online was based on 2005 RFO resource availability and the premise that the installation only impacted the EFT and CRV systems. Isolation, installation, and preoperational testing procedures were prepared by design engineering and approved by operations/system engineering in September of 2005. The modification was installed, pre-operational testing completed, and the systems restored in October 2005.
On October 17, 2005, during a review of an unassociated planned EFT maintenance work order, a shift manager recognized that the isolation used for this activity affected the Emergency Core Cooling Systems (ECCS) [EIIS System Code BO] due to impacts on the associated Emergency Service Water (ESW) [EIIS System Code BI] pump [EIIS Component Code P] starting logic. This work had already been approved for implementation; however, the compensatory measures planned for the EFT maintenance were determined to be inadequate and the work was put on hold prior to implementation.
On October 18, 2005 during the extent of condition review for this issue, it was determined that a similar condition had previously existed. The impact on ECCS during the previous isolation to support modification work was not recognized or evaluated in advance and resulted in a plant configuration control error. The opening of the breaker [EIIS Component Code BKR] for support of the modification work resulted in a loss of the auto-start feature of the #13 ESW pump. The ESW pump was required to support the operability of the ECCS room cooler and required for the operability of the division 1 Core Spray (CS) [EIIS System Code BM] and Residual Heat Removal (RHR) [EIIS System Code BO] pumps.
Although the automatic start function was unavailable, the pump could have been manually started from the control room with the isolation in place. Having both the division 1 CS and RHR pumps inoperable at the same time placed the plant in a 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> shutdown action statement. A review of the event determined that the breaker was open for 32 hours3.703704e-4 days <br />0.00889 hours <br />5.291005e-5 weeks <br />1.2176e-5 months <br /> on October 3 and for 28 hours3.240741e-4 days <br />0.00778 hours <br />4.62963e-5 weeks <br />1.0654e-5 months <br /> on October 10, 2005, resulting in exceeding a Technical Specification action statement.
Event Analysis
Since the above event was a condition prohibited by the plant's technical specification, it is reportable under 10 CFR 50. 73(a)(2)(i)(B), "Operation or Condition Prohibited by Technical Specifications." There was no corresponding 10 CFR 50.72 notification required for this event.
The event is not classified as a safety system functional failure.
Safety Significance
The ESW system supports component cooling requirements for two basic functions. First, each train of the ESW system provides cooling to the corresponding train of the CRV system. Second, the ESW system supports various ECCS pumps by providing room cooling for the High Pressure Coolant Injection (HPCI) [EllS System Code BJ], CS and RHR system pumps, as well as motor bearing cooling to both CS pumps and two of the four RHR pumps. The risk analysis model does not consider the ECCS room and motor cooling dependencies on ESW to be necessary for the CS, HPCI, and RHR systems to be successful in performing their safety functions. Since the ECCS pumps are assumed to be capable of performing their safety functions without the need for either motor or room cooling, the risk significance of failure to automatically start the ESW pump is negligible. Failure of the CRV cooling function has no impact on the likelihood of core damage.
The Probabilistic Risk Assessment (PRA) group performed an evaluation for significance. The risk impact incurred by defeating the automatic start circuitry for #13 ESW pump was of low significance ( 1.0 E-06/yr difference in Core Damage Frequency).
In addition to the above PRA analysis, the second division of ESW/ECCS was fully operable in accordance with technical specifications.
Cause
The root causes for the event were:
1. Management and supervision did not provide the necessary direction and oversight of complex activities and work management processes to ensure expectations were clear and that appropriate resources were applied.
2. Roles and responsibilities in the isolation preparation/approval, work order impact, and work order approval processes are unclear.
Corrective Action The following interim actions were taken by the station after the event:
1. Operations issued a memorandum to communicate management expectations for development of isolations by operations personnel.
2. A senior experienced Senior Reactor Operator has been assigned as the Work Control Manager, specifically to enhance the isolation development and approval process.
3. Only Operations Department personnel are authorized to prepare isolations.
4. The station added a requirement in the tagging program to review the isolation during preparation for the need to conduct a technical review.
The following corrective actions will be completed and tracked in the station corrective action program:
1. The station will revise the isolation, work impact, and work approval processes to consolidate requirements, clarify expectations, and eliminate redundancy.
2. The station will strengthen the training/qualification of isolation preparers and approvers.
3. The station will improve management oversight and tracking of isolation related issues.
4. The station will revise the roles and responsibilities of individuals involved with isolations, including interactions when technical reviewers are necessary.
Failed Component Identification N/A
Previous Similar Events
A review found previous events related to isolation errors:
1. Condition Report 02009465 — Adverse trend with respect to identifying proper technical specification limiting conditions of operation entry and exit requirements for work activities.
One of the causal factors for CR 02009465 was behavioral in nature. The causal factor in the root cause report states, "Management and staff are demonstrating inappropriate behaviors by reviewing and approving work activities without fully understanding the technical aspects of the situation and not sufficiently challenging the information.
2. LER 2005-03 — Loss of shutdown cooling. The LER identified one of the contributing causes as Operations instructions not requiring impact statements on all work packages. The implication is that reviews of certain work packages were not rigorous enough to correctly identify all of the plant impacts for a given activity. One of the corrective actions for this root cause was to strengthen procedural requirements for the use of impact statements for work orders.
3. LER 2005-05 — Unexpected trip of # 16 Bus. The root cause was determined to be site directives which do not contain detailed responsibilities and actions that must be performed to accomplish the task of preparing and reviewing a Post Maintenance Test. Part of the corrective actions resulted in strengthening administrative processes to deal with these types of complex evolutions.
In the three previous Monticello events, the common outcome was strengthening requirements. For example, in the case of LER 2005-03, a corrective action strengthened the requirements for impact statements for work orders.
|
---|
|
|
| | Reporting criterion |
---|
05000328/LER-2005-001 | Unit 2 Reactor Trip Following Closure of Main Feedwater Upon Inadvertent Opening of Control Breakers | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000388/LER-2005-001 | DDegradation of Primary Coolant Pressure Boundary due to Recirculation Pump Discharge Valve Bonnet Vent Connection Weld Flaw | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000423/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000455/LER-2005-001 | Unit 2 Automatic Reactor Trip Due to Low Steam Generator Level resulting from a Software Fault on the Turbine Control Power Runback Feature | | 05000370/LER-2005-001 | Automatic Actuation of Motor Driven Auxiliary Feedwater Pumps During Outage | | 05000244/LER-2005-001 | Failure of ADFCS Power Supplies Results in Plant Trip | | 05000247/LER-2005-001 | 0Technical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by an Inoperable Auxiliary Component Cooling Water Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000529/LER-2005-001 | REACTOR HEAD VENT AXIAL INDICATIONS CAUSED BY DEGRADED ALLOY 600 COMPONENT | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000336/LER-2005-001 | | | 05000266/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000269/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000289/LER-2005-001 | | | 05000293/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000298/LER-2005-001 | Reactor Scram due to Reactor Level Transient and Inadvertent Rendering of High Pressure Coolant Injection Inoperable | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000331/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000315/LER-2005-001 | Reactor Trip Following Intermediate Range High Flux Signal | | 05000316/LER-2005-001 | Reactor Trip from RCP Bus Undervoltage Signal Complicated by Diesel Generator Output Breaker Failure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000317/LER-2005-001 | Main Feedwater Isolation Valve Inoperability Due to Handswitch Wiring | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000323/LER-2005-001 | TS 3.4.10 Not Met During Pressurizer Safety Valve Surveillance Testing Due to Random Lift Spread | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000333/LER-2005-001 | Inoperable Offsite Circuit In Excess of Technical Specifications Allowed Out of Service Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000352/LER-2005-001 | Loss Of Licensed Material In The Form Of A Radiation Detector Calibration Source | | 05000353/LER-2005-001 | Core Alterations Performed With Source Range Monitor Alarm Horn Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000362/LER-2005-001 | Emergency Diesel Generator (EDG) 3G003 Declared Inoperable Due to Loose Wiring Connection on Emergency Supply Fan | | 05000263/LER-2005-001 | | | 05000456/LER-2005-001 | Potential Technical Specification (TS) 3.9.4 Violation Due to Imprecise Original TS and TS Bases Wording | | 05000454/LER-2005-001 | Failed Technical Specification Ventilation Surveillance Requirements During Surveillance Requirement 3.0.3 Delay Period | | 05000282/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000286/LER-2005-001 | Plant in a Condition Prohibited by Technical Specifications due to Error Making Control Room Ventilation System Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000400/LER-2005-001 | Reactor Auxiliary Building Emergency Exhaust System Single Failure Vulnerability | | 05000395/LER-2005-001 | Emergency Diesel Generator Start and Load Due To A Loss Of Vital Bus | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000382/LER-2005-001 | RCS Pressure Boundary Leakage Due to Primary Water Stress Corrosion Cracking of a Pressurizer Heater Sleeve | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000305/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2005-001 | Reactor Coolant System Leakage Detection Instrumentation Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000266/LER-2005-002 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000255/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-002 | Missing Taper Pins on CCW Valve Cause Technical Specification Required Shutdown | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000370/LER-2005-002 | Ice Condenser Lower Inlet Door Failed Surveillance Testing | | 05000353/LER-2005-002 | High Pressure Coolant Injection System Inoperable due to a Degraded Control Power Fuse Clip | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000263/LER-2005-002 | | | 05000454/LER-2005-002 | One of Two Trains of Hydrogen Recombiners Inoperable Longer Than Allowed by Technical Specifications Due to Inadequate Procedure | | 05000244/LER-2005-002 | Emergency Diesel Generator Start Resulting From Loss of Off-Site Power Circuit 751 | | 05000362/LER-2005-002 | Emergency Containment Cooling Inoperable for Longer than Allowed by Technical Specifications | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000247/LER-2005-002 | DTechnical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by Gas Intrusion from a Leaking Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000265/LER-2005-002 | Main Steam Relief Valve Actuator Degradation Due to Failure to Correct Vibration Levels Exceeding Equipment Design Capacities | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000286/LER-2005-002 | • Entergy Nuclear Northeast Indian Point Energy Center 450 Broadway, GSB P.O. Box 249Entergy Buchanan. NY 10511-0249 Tel 914 734 6700 Fred Dacimo Site Vice President Administration July 5, 2005 Indian Point Unit No. 3 Docket Nos. 50-286 N L-05-078 Document Control Desk U.S. Nuclear Regulatory Commission Mail Stop O-P1-17 Washington, DC 20555-0001 Subject:L Licensee Event Report # 2005-002-00, "Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure." Dear Sir: The attached Licensee Event Report (LER) 2005-002-00 is the follow-up written report submitted in accordance with 10 CFR 50.73. This event is of the type defined in 10 CFR 50.73(a)(2)(iv)(A) for an event recorded in the Entergy corrective action process as Condition Report CR-IP3-2005-02478. There are no commitments contained in this letter. Should you or your staff have any questions regarding this matter, please contact Mr. Patric W. Conroy, Manager, Licensing, Indian Point Energy Center at (914) 734-6668. Sincerely, 4F-/t R. Dacimo Vice President Indian Point Energy Center Docket No. 50-286 NL-05-078 Page 2 of 2 Attachment: LER-2005-002-00 CC: Mr. Samuel J. Collins Regional Administrator — Region I U.S. Nuclear Regulatory Commission U.S. Nuclear Regulatory Commission Resident Inspector's Office Resident Inspector Indian Point Unit 3 Mr. Paul Eddy State of New York Public Service Commission INPO Record Center NRC FORM 3660 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB NO. 3150-0104 EXPIRES: 06/30/2007 (6-2004) Estimated burden per response to comply with this mandatory collection request 50 hours.RReported lessons teamed are incorporated into the licensing process and fed back to Industry. Send comments regarding burden estimate to the Records and FOIA/Privacy Service Branch (T-5 F52), U.S. Nuclear Regulatory Commission, Washington, DC 29555-0001, or by InternetLICENSEE EVENT REPORT (LER) e-mail to Infocoilectsenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-l0202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person Is not required to respond to, the Information collection. 1. FACIUTY NAME 2. DOCKET NUMBER 3. PAGE INDIAN POINT 3 05000-286 10OF06 4. TITLE Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000287/LER-2005-002 | Unit 3 trip with ES actuation due to CRD Modification Deficiencies | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000336/LER-2005-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|