05000266/LER-2008-003

From kanterella
Jump to navigation Jump to search
LER-2008-003, Appendix R Fire Scenario Resulting In Safe Shutdown Required Capability Not Maintained
Point Beach Nuclear Plant
Event date: 07-16-2008
Report date: 05-11-2009
Initial Reporting
ENS 44351 10 CFR 50.72(b)(3)(ii)(B), Unanalyzed Condition
2662008003R01 - NRC Website

In June 2008 an inadequate cable [EllS=CBIL] separation condition was identified while performing an NFPA-805 applicability review. As a result of the inadequate cable separation, the potential was identified for a fire in fire area A23S, South Area of the Auxiliary Feedwater (AFW) room to propagate to fire area A24, Vital Switchgear (VSG) room. A fire in the South Area of the AFW room could cause a short circuit in a cable that traverses the AFW room and the VSG room, causing ignition of the cable. The Point Beach Nuclear Plant (PBNP) Safe Shutdown Analysis assumes a fire in a single fire area. Following further analysis, on July 16, 2008, plant engineering concluded that the inadequate cable separation created the potential for being unable to meet Appendix R safe shutdown capability. An 8-hour non-emergency report, EN 44351, was made in accordance with 10 CFR 50.72(b)(3)(ii)(B), as an event or condition that results in the nuclear power plant being in an unanalyzed condition that significantly degrades plant safety. A fire in areas A23S and A24, could cause three of the four AFW pumps [EIIS=P] to be unavailable, which does not meet the requirements for Appendix R safe shutdown capability for Unit 1. Compensatory measures were identified to address the situation. These measures consisted of area fire rounds already being performed, implementation of transient combustible controls and performance of thermography for insipient fire detection in the AFW pump rooms.

In August 2008 an extent of condition evaluation was performed which identified six (6) areas where an inadequate cable separation condition could potentially result in a loss of significant equipment in areas beyond that postulated in the initiating fire area. In March 2009 a detailed extent of condition evaluation was completed, including cable/fire initiator walkdowns, which confirmed the results of the August 2008 evaluation. The results of a risk significance evaluation completed on April 17, 2009, concluded that the risk significance of each of the inadequate cable separation conditions was less than the red finding threshold established in the NRC Reactor Oversight Program (ROP) process.

B. EVENT ANALYSIS

While performing reviews as part of the conversion to NFPA-805, Next Era Energy Point Beach, LLC (formerly FPL Energy Point Beach, LLC) determined that power cables to individual components that are fed from a 4 kV bus [EIIS=BU] located in the same fire area as the DC control power [EIIS=EJ] feed to the bus, would not clear a potential fault condition. Specifically, this cable routing configuration has both DC control and associated 4 kV power [EllS=EB] cables present in the same fire area without required fire protection features such as fire wrap and fire rated walls. This condition appears to be an original design feature in the plant that was not correctly analyzed in the existing safe shutdown analysis. This condition was identified during the transition to NFPA-805. Although this is a historical design issue, there were previous opportunities to identify the design discrepancy. The discrepancy was not recognized because of an incorrect assumption that the 4 kV breakers [EIIS=BKR] would trip on overcurrent without DC control power.

Following discovery of the condition, an extent of condition evaluation encompassing 71 fire areas was performed in August 2008. The review identified the DC control power for breakers that were located in the same fire area as the respective 4 kV power cables. It was then postulated that a fire in one of the fire areas could first disable the respective bus 125 V DC breaker control power and short circuit the associated power cable. With the loss of breaker control, the power cable protection would be defeated. The cable damage sequence assumed that secondary fires would occur electrically upstream of the fault location due to the _ _ _ _ cable-withstand rating being exceeded. The secondary fire location would be in a different location than the initial fire location, which could cause additional equipment to become unavailable.

The extent of condition evaluation performed in August 2008 identified six (6) areas where power cable protection could potentially become disabled and result in a loss of significant equipment in areas beyond that postulated in the initiating fire area. In March 2009 a detailed extent of condition evaluation was completed, including cable/fire initiator walkdowns, which confirmed the results of the August 2008 evaluation. The results of the risk significance evaluation completed April 17, 2009, concluded that each of the cable configurations of concern, as well as the aggregate of the cable configurations, was less than the red finding threshold established in the ROP process.

C. SAFETY SIGNIFICANCE

The safety significance of the reported condition is not high because the likelihood of occurrence is low. A fire would initially have to occur in area A23S (AFW pump room south). The room itself is equipped with fire detection sensors that automatically actuate the installed area halon suppression system. Area A23S has a low combustible loading.

The postulated fire must first directly impact control power cables associated with panel D11, (125 V DC Control Panel) which contains the 125 V DC control power for the protective features for breakers on buses 1A03 (Unit 1 4.16 kV Bus Switchgear) and 1A05 (Unit 1 4.16kV Safeguards Bus Switchgear) one of which is breaker 1A52-58, (Power to 1X13 Station Service Transformer), the normally energized power supply to transformer 1X13 (Unit 1 Station Service Transformer). For the postulated fire to damage equipment in another fire area, control power for the 1X13 supply breakers must be lost first, prior to any associated power cable damage. The postulated fire is in area A23S, the AFW pump room on elevation (El). 8' of the Control Building. Control cables in the room are assumed damaged first, prior to power cable damage. The control cables go to the Dll panel, which is located on El. 26' in the Cable Spreading room. Since the assumed fire is located in area A23S, and AFW pumps 1P29 (Turbine-Driven Auxiliary Feedwater Pump) and P38A (Electric-Driven Auxiliary Feedwater Pump) are located in area A23S, Appendix R requires the assumption that 1P29 and P38A capability is lost.

The postulated fire is also assumed to migrate through cable raceways, resulting in short circuit faults in power cables supplying transformer 1X13. This causes electric current draw in excess of cable withstand rating in the 1X13 supply cable because the control power for the protective features was lost when power panel D11 control cable was damaged. With current values greater than cable withstand ratings, a secondary fire is assumed to start in area A24 (4160 V Vital Switchgear Room). The loss of control power must occur prior to the fire-induced power cable overcurrent condition thus preventing automatic protective features from actuating.

The postulated secondary fire in area A24, which is equipped with fire detection equipment that automatically initiates a halon suppression system and is an area with a moderate combustible loading, is conservatively assumed to damage auxiliary feedwater pump P38B (Electric-Driven Auxiliary Feedwater Pump), thus making the pump unavailable to satisfy an Appendix R Safe Shutdown function.

NRC FORM 366A U.S. NUCLEAR REGULATORY COMMISSION (9-2007) If this unique sequence of events occurred, the Unit 1 Auxiliary Feedwater pumps (1P29, P38A and P38B), credited for satisfying an Appendix R required Safe Shutdown function, would not be available.

In August 2008 an extent of condition evaluation was performed to identify similar configurations where equipment power cables and DC control cables associated with a single 4kV breaker were located within the same fire area. Six (6) areas were identified where power cable protection could potentially become disabled and result in a loss of significant equipment in areas beyond that postulated in the initiating fire area. In March 2009 a detailed extent of condition evaluation was completed, including cable/fire initiator walkdowns, which confirmed the results of the August 2008 evaluation. A risk significance evaluation was completed April 17, 2009 to determine whether any of the cable configurations of concern exceeded the threshold to be considered a red finding. The evaluation used a conservative screening approach, in lieu of the Significant Determination Process (SDP) contained in the Reactor Oversight Program (ROP), to identify potential secondary fire conditions where more detailed analysis and/or additional compensatory measures may be required. The results of the risk significance evaluation concluded that the configurations of concern were less than the red finding threshold for risk significance and may be resolved in accordance with the alternate methods established in NFPA-805.

D. CAUSE

The cause of the event is a historical design issue that was identified during the transition to NFPA-805.

Although this is a historical design issue, there were previous opportunities to identify the design discrepancy. The discrepancy was not recognized because of an incorrect assumption that the 4 kV breakers would trip on overcurrent without DC control power.

E. CORRECTIVE ACTIONS

A detailed extent of condition evaluation was completed in March 2009 which confirmed that there are six (6) areas where power cable protection could potentially become disabled and result in a loss of significant equipment in areas beyond that postulated in the initiating fire area. The results of a risk significance evaluation completed on April 17, 2009, concluded that none of the cable configurations of concern resulted in a risk significance in excess of the red finding threshold established in the ROP process.

When the aggregate risk significance was considered for the various configurations combined, the outcome was also a risk significance less than the red finding threshold.

Upon identifying the cable configurations of concern, twice-per-shift fire rounds were already being conducted in areas A23S (Auxiliary Feedwater Pump Room South), A24 (4160 V Vital Switchgear Room), A23N (Auxiliary Feedwater Pump Room North), A30 (Cable Spreading Room), A71 (Diesel Generator Building B Train), A01-A (Auxiliary Building, El. 8' and below) and A01-E (Turbine Building and South Service Building), thus addressing the reported condition, as well as the 5 additional areas from the extent of condition evaluation. Additional guidance for enhanced transient combustibles and hot work controls was also implemented.

Thermography of equipment in the affected zones was started in early August 2008 and completed during the first week of September. The purpose for the thermography was the early identification of equipment problems which could cause a fire in a fire area. The scope of the thermography included 12 transformers, NRC FORM 366A U.S. NUCLEAR REGULATORY COMMISSION (9-2007) 111 pieces of equipment, such as electric motors and pumps, and 198 electrical cable enclosures such as control panels, distribution panels and switchgear. Only two instances of unexpected conditions were identified. Both were minor and are documented in the corrective action program. With the detailed identification of affected equipment complete and the development of inspection routes, thermography continues to be performed in the affected areas on a weekly basis. Plant modifications, as required, will be made as part of the transition to NFPA-805 to correct cable routing deficiencies.

F. SIMILAR OCCURENCES

Charging Pump Capability," dated August 8, 2005.

Nonconservative Technical Specification for Degraded Voltage Time Delay Relay Settings," dated November 11, 2005.

Valves," dated September 10, 2007.