text
Xcel Energy@
March 28, 2014 U.S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555-0001 Monticello Nuclear Generating Plant Docket 50-263 Renewed Facility Operating License No. DPR-22 Monticello Nuclear Generating Plant 2807 W County Road 75 Monticello, MN 55362 L-MT-14-028 10 CFR 50.73 LER 2013-007-01 "Unanalyzed Condition Due to Inadequate Flooding Procedures" A supplement to the Licensee Event Report (LER) for this occurrence is attached.
Summary of Commitments This letter contains no new commitments and no revisions to existing commitments.
Karen D. Fili Site Vice President, Monticello Nuclear Generating Plant Northern States Power Company-Minnesota Enclosure cc:
Regional Administrator, Region Ill, USNRC Project Manager, Monticello Nuclear Generating Plant, USNRC Resident Inspector, Monticello Nuclear Generating Plant, USNRC
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 01131/2017 (02-2014)
, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
YEAR 2013
- 6. LER NUMBER I
SEQUENTIAL I NUMBER 007 REV NO.
01 2
- 3. PAGE OF 4
Prior to discovery of the condition Monticello Nuclear Generating Plant (MNGP) was in Mode 1 at 98%
power. On August 28, 2013, Northern States Power Minnesota (NSPM) was notified of the NRC's final significance determination for a finding involving the failure to maintain a procedure addressing all of the effects of an external flooding scenario. Specifically, NSPM failed to maintain flood Procedure A.6, "Acts of Nature," for MNGP such that it could support the timely implementation of flood protection activities within the 12-day timeframe credited in the design basis as stated in the Updated Safety Analysis Report (USAR).
Licensee Event Report (LER) 2013-003-01, "Inadequate External Flooding Procedure," provides an analysis of the issues related to the flooding deficiencies previously reported to the NRC.
This LER (2013-007) is focused on the issues, causes and corrective actions related to the preliminary NRC finding issued on June 11, 2013, and as finalized on August 28, 2013. The NRC identified a Yellow finding with substantial safety significance and associated apparent violation of Technical Specification 5.4.1 for the licensee's failure to maintain a flood plan to protect the MNGP from external flooding events (a probable maximum flood (PMF)).
NSPM did not maintain an adequate flood plan consistent with the USAR because the necessary flood mitigation actions could not be completed in the time required. The resultant flood waters could negatively impact much of the station's accident mitigation equipment.
The finding is not a current safety concern. On February 15, 2013, actions were completed to reduce the flood mitigation plan timeline to less than 12 days by developing an alternate plan for flood protection features, pre-staging equipment and materials, improving the quality of the Procedure A.6, and preplanning work orders necessary to carry out Procedure A.6 actions. This is no longer considered an unanalyzed condition.
EVENT ANALYSIS
This event is reportable in accordance with 10 CFR 50.73(a)(2)(ii)(B) as an unanalyzed condition that significantly degraded plant safety. This event is also reportable in accordance with 10 CFR 50.73(a)(2)(i)(B) (multiple safety systems potentially unable to respond to a PMF event) as a condition prohibited* by the plant's Technical Specifications.
Finally, this event is also reportable in accordance with 10 CFR 50. 73(a)(2)(v)(A), (B), (C) and (D), 10 CFR 50.73(a)(2)(vii) (for at least one train in multiple systems) and 10 CFR 50.73(a)(2)(ix)(A) (for two or more trains in different systems) as an event or condition that as a result of a single cause could have prevented the fulfillment of the safety function of structures or systems that are needed to:
Shut down the reactor and maintain it in a safe shutdown condition; Remove residual heat; Control the release of radioactive material; or Mitigate the consequences of an accident.
SAFETY SIGNIFICANCE
MNGP is required to be protected from flooding as described in the licensing basis. The procedural inadequacies affected the ability to protect the site during a PMF event. Since there has been no external flood approaching the PMF elevation, there were no adverse consequences to the health and safety of the public or the plant and its personnel as a result of the identified deficiencies. The root cause investigation did not identify any additional risks to the health and safety of the public resulting from this event.
CAUSE
After receipt of the finding, NSPM performed a RCE and identified the following root cause:
Management did not ensure proper validation of the external flooding mitigation strategy design bases commensurate with safety significance which led to non-conservative decisions.
The contributing causes were that management:
Had not provided the adequate guidance for appropriate screening of modifications and procedure revisions related to infrequent activities planned or anticipated.
Had not ensured self-and independent assessments of station's external flood mitigation activities to assess performance and to identify areas of improvement.
Had not reinforced Corrective Action Program behaviors required for a low threshold for identifying issues related to external flood mitigation.
Did not consistently consider valid technical input from individuals.
Did not provide adequate guidance in Fleet Procedures for performing Operating Experience Evaluations (OEE) for significant regulatory issues such as Level 1 and 2 Institute of Nuclear Power Operations (INPO) Event Reports (IERs) and NRC Red and Yellow Findings.
A contributing cause was also identified that individual contributors did not perform proper verification/validation of external flooding mitigation strategy design bases commensurate with safety significance which contributed to non-conservative decisions.
CORRECTIVE ACTION
Corrective Actions to Prevent Recurrence (CAPRs) identified in the RCE include the following to correct the identified root cause:
Revise the Leadership Training Program Description to include delivery of a case study for the continual reinforcement of behaviors and attributes associated with ensuring proper validation of MNGP design bases.
Create a formal engineering program to manage MNGP External Flood Mitigation to ensure proper validation of the external flooding strategy design bases.
Clarify in appropriate station documents, including, but not limited to, the USAR, external flooding section of Procedure A.6, and Design Bases Document for External Flooding, that the PMF antecedent conditions are required to be assumed present and that actions to mitigate a PMF must be preplanned.
Revise Procedure A.6, Section 5.0 to be an 8000 Series Special procedure. Control as an Infrequently Performed Test or Evolution (I PTE).
4 Other corrective actions are identified in the RCE to address contributing causes, the extent of condition and the extent of cause. Effectiveness reviews have been established to ensure adequate review of the results of the corrective actions are achieved.
PREVIOUS SIMILAR EVENTS
On November 26, 1990, the site identified, in a LER, that there were procedural inadequacies with the external flooding procedure related to protective measures for the Emergency Diesel Generator Fuel Oil Transfer House. The LER was supplemented April 24, 1991 with additional detail, including the cause of the event, which was procedural inadequacy.
On September 30, 2013, the site identified in a LER, that there were inadequacies in the Procedure A.6, "Acts of Nature," to protect the site from a Probable Maximum Flood (PMF). The root cause for this event was determined to be: Station personnel incorrectly understood the 1980 NRC Safety Evaluation Report licensing basis to allow time for preparation of a detailed flood plan based on the presence of identifiable preconditions required for a Probable Maximum Flood (PMF) as stated in USAR, Appendix G. This misunderstanding was institutionalized through inclusion of this position in station documentation.
|
|---|
|
|
| | | Reporting criterion |
|---|
| 05000263/LER-2013-000-08, Both Secondary Containment Access Doors Briefly Opened Simultaneously | Both Secondary Containment Access Doors Briefly Opened Simultaneously | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-001, E SRV Low-Low Set Tailpipe Dp Root Valve Found Closed | E SRV Low-Low Set Tailpipe Dp Root Valve Found Closed | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(i)(8) 10 CFR 50.73(a)(2)(ii)(8) | | 05000263/LER-2013-002, Regarding Essential Bus Transfer During 2R Transformer Testing | Regarding Essential Bus Transfer During 2R Transformer Testing | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-003-02, Regarding Inadequate External Flooding Procedure | Regarding Inadequate External Flooding Procedure | 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-003-01, Regarding Inadequate External Flooding Procedure | Regarding Inadequate External Flooding Procedure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-003, Regarding Inadequate External Flooding Procedure | Regarding Inadequate External Flooding Procedure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-004, Loss of Normal Off-Site Power as a Result of Switch Gear Fault | Loss of Normal Off-Site Power as a Result of Switch Gear Fault | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-005, Transmittal of LER 13-005-00 for Monticello Regarding Discovered Vulnerability in Safeguards System | Transmittal of LER 13-005-00 for Monticello Regarding Discovered Vulnerability in Safeguards System | | | 05000263/LER-2013-006-01, Regarding Unanalyzed Condition for Emergency Diesel Generator Fuel Oil Pumps Train Separation | Regarding Unanalyzed Condition for Emergency Diesel Generator Fuel Oil Pumps Train Separation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-006, Regarding Unanalyzed Condition for Emergency Diesel Generator Fuel Oil Pumps Train Separation | Regarding Unanalyzed Condition for Emergency Diesel Generator Fuel Oil Pumps Train Separation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-007-02, Regarding Unanalyzed Condition Due to Inadequate Flooding Procedures | Regarding Unanalyzed Condition Due to Inadequate Flooding Procedures | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-007-01, Regarding Unanalyzed Condition Due to Inadequate Flooding Procedures | Regarding Unanalyzed Condition Due to Inadequate Flooding Procedures | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System | | 05000263/LER-2013-007, Regarding Unanalyzed Condition Due to Inadequate Flooding Procedures | Regarding Unanalyzed Condition Due to Inadequate Flooding Procedures | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2013-008-01, Regarding Both Secondary Containment Access Doors Briefly Opened Simultaneously | Regarding Both Secondary Containment Access Doors Briefly Opened Simultaneously | |
|