05000298/LER-2001-004

From kanterella
Jump to navigation Jump to search
LER-2001-004, Loss Of Both Offsite Power Sources Due To Lightning
Cooper Nuclear Station
Event date: 09-07-2001
Report date: 11-06-2001
Reporting criterion: 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
2982001004R00 - NRC Website

PLANT STATUS:

Cooper Nuclear Station (CNS) was in mode 1, Power Operation, at approximately 100 percent steady state power when the event occurred.

BACKGROUND:

The offsite power sources at CNS are a Startup Station Service Transformer (SSST) (EllS:EA/XFMR) which connects to the CNS 161 kilovolt (kV) switchyard (EIIS:FK) and the 345/161 kV, 300 megavolt-amp (MVA) "T2" auto-transformer (EIIS:FK/XFMR) connected to the 345 kV switchyard (EIIS:FK), and a separate Emergency Station Service Transformer (ESST) (EIIS:EA/XFMR) energized by a 69 kV line. The 161 kV switchyard is connected to one 161 kV line which terminates in a switchyard near Auburn, Nebraska, and the 345/161 kV, 300 MVA "T2" auto-transformer which connects to the CNS 345 kV switchyard. The 345 kV switchyard has five (5) lines which terminate in switchyards near Booneville, Iowa; Hallam, Nebraska; St. Joseph, Missouri; Fairport, Missouri, and Nebraska City, Nebraska. The emergency station service transformer is fed by a 69 kV line which is part of a subtransmission grid of another utility (Omaha Public Power District). If the Normal Station Service Transformer (EllS:EUXFMR) (powered by the main generator) is lost, the SSST, which is normally energized, will automatically energize 4160 volt buses 1A and 1B (EIIS:EA/BU) as well as their connected loads, including the critical buses. If the SSST fails to energize the critical buses (EllS:EA/BU), the ESST, which is normally energized, will automatically energize both critical buses. If the ESST were also to fail, the diesel generators (El IS:EK/DG) would automatically energize their respective buses to power essential loads.

EVENT DESCRIPTION:

On September 7, 2001, CNS declared both sources of offsite power inoperable. At 1750 Central Standard Time (CST) the preferred source of offsite power, the SSST, was declared inoperable as a result of a breaker (EllS:FIQBKR) malfunction and a malfunctioning relay (EIIS:FK/67RLY) in response to lightning striking a transmission line approximately seven miles from CNS. The malfunctioning breaker opened slowly allowing the fault current to conduct through the breaker longer than designed. As a result, a directional fault relay was damaged, or had a pre-existing defect, and actuated on a sensed fault current in a direction that should not have caused an actuation. This caused an isolation of the "T2" auto-transformer, by opening breakers disconnecting the preferred source of offsite power, and locking them out.

At 1754 CST CNS subsequently declared the emergency source, the ESST, of offsite power inoperable due to 69 kV sub-transmission system voltage perturbations. After declaring the emergency source inoperable, the transmission line supplying the emergency source tripped due to a lightning strike and was reclosed approximately forty-five seconds later.

The grid voltage improved at 1932 CST and CNS declared the emergency source operable. The emergency source was again declared inoperable at 2230 CST due to insufficient voltage. CNS placed a capacitor bank in service at a CNS substation to boost voltage and declared the emergency source operable at 2231 CST.

Inspection and testing of switchyard equipment supplying the preferred source continued through the night. The initial visual inspection and testing did not identify any damaged equipment. Protective relays were reset and the switchyard breakers were reclosed at 0550 CST on September 8, 2001. The preferred source was declared operable at 1045 CST on September 8, 2001. On September 11, 2001, a detailed review of the fault data concluded that the fault was not interrupted within the expected time that the breakers should have opened. On September 13, 2001, an internal inspection found damage in the breaker. On September 15, 2001, additional testing on the directional relay discovered the relay would actuate on a sensed fault in the wrong direction.

BASIS OF REPORT:

The loss of both offsite power sources is reportable as an "event or condition that could have prevented fulfillment of a safety function" under 10CFR50.73(a)(2)(v)(D).

CAUSE:

The root cause of this event was that CNS did not have standards, policies or administrative controls to ensure maintenance and testing of switchyard equipment is adequate to detect degradation of equipment important to offsite power prior to failure. Thus, the offsite power switching circuitry was vulnerable to perturbations and failure.

The breaker that malfunctioned had been tested five months prior to this event by Nebraska Public Power District Transmission and Distribution (NPPD T&D) technicians. The results of that test indicated that the breaker was slower than two other identical breakers of the same model and vintage tested the same day. The other two had similar opening and closing performances. The technicians performing the test were unsure of the test results and had no defined performance criteria to determine if the test results were acceptable. The test was performed with a new style of equipment that allowed the breaker to remain energized instead of requiring the breaker to be de-energized. There had been no performance criteria established for acceptable breaker opening or closing for this new test equipment. The test equipment recorded a "baseline" opening and closing performance for each breaker.

The previous test equipment and procedure had established performance criteria for opening and closing. The technicians noted that one breaker was slower than the others with the new equipment. The test results were not required to be transmitted to NPPD T & D engineers for evaluation or to the CNS switchyard engineer for trending.

Immediate corrective actions included responding to the unplanned power change and restoration of offsite power sources. CNS switchyard equipment was inspected for damage and tested. The directional fault relay that malfunctioned was functionally tested in accordance with guidance provided in the vendor manual after the event. This testing did not include polarized fault simulation. The directional relay passed the limited functional testing that was initially performed. The emergency offsite AC source was declared operable at 1932 CST. The preferred offsite AC was declared operable at 1045 CST on September 8, 2001.

On September 11, 2001, a review of the recorded fault data concluded that fault was not interrupted within the expected time that the breakers should have opened. Communications between NPPD T & D engineers, T & D test technicians and the CNS switchyard engineer concerning an apparent breaker slow opening time discovered the unevaluated test data indicating slow performance of one of the breakers. On September 13, an internal inspection found damage in the breaker. On September 15, additional testing on the directional fault relay discovered that the relay would actuate on a sensed fault in the wrong direction. A new relay was tested and installed. The breaker was repaired, has been tested and is returned to service.

SAFETY SIGNIFICANCE:

During this event the station remained on AC power supplied by the CNS generator through the Normal Transformer.

Both diesel generators were operable and could have started and supplied essential loads if required.

The Core Damage Probability (CDP) of the conditions associated with unavailability of the Startup and Emergency Transformers was approximately 3x10' greater than the baseline CDP for the same period. The threshold for risk significance is 10' greater than baseline CDP. Therefore, the condition is considered to have low risk significance.

CORRECTIVE ACTIONS:

A. Immediate Corrective Actions - to correct the condition (Note: All have been completed) 1. Restore ESST to service. (Correct Condition - Loss of emergency source of offsite power) 2. Restore T2 Auto-transformer and SSST to service. (Correct Condition - Loss of preferred source of offsite power) Subsequently, restart Reactor Recirculation Motor Generator Set A and raise power to 100%. (Correct Condition - Resume normal power operation) Immediate Corrective Actions - to prevent recurrence and bound the condition (Note: All have been completed) 3. Retest protective relays for auto-transformer. (Corrective Action to prevent recurrence - Loss of preferred source of offsite power) 4. Evaluate 69 kV subtransmission system response. (Corrective Action to bound the extent of condition - Loss of emergency source of offsite power) 5. Change test process for the directional fault relay testing. (Corrective Action to bound the extent of condition and prevent recurrence - Loss of preferred source of offsite power) 6. Inspect and repair breaker 1602. (Corrective Action to prevent recurrence - Loss of preferred source of offsite power) B. Long Term Corrective Actions 1. Determine acceptance criteria for breaker testing using Kelman test equipment. (To be completed by 03/01/2002) 2. Identify the standards, policies, and administrative controls (SPAC) for maintenance and testing of the 161 kV breakers. Review the SPAC for maintenance and testing of the 161kV breakers. Prepare appropriate procedure change requests. Implement SPAC changes to eliminate inadequacies in the detection of breaker degradation prior to failure that could lead to loss of offsite power. (To be completed by 03/01/2002) 3. Inventory the CNS switchyards to identify major equipment important to offsite power in order to review switchyard standards, policies and administrative controls. (To be completed by 04/01/2002) 4. Identify the standards, policies, and administrative controls for maintenance and testing of the major equipment to offsite power. Review the SPAC for maintenance and testing of the switchyard equipment. Prepare appropriate procedure change requests. Implement SPAC changes to eliminate inadequacies in the detection of breaker degradation prior to failure that could lead to the loss of offsite power. (To be completed by 06/30/2002)

PREVIOUS EVENTS

There has not been a previous reportable event of a simultaneous loss of both sources of offsite power.

ATTACHMENT 3 LIST OF REGULATORY COMMITMENTS Correspondence Number: NLS2001097 The following table identifies those actions committed to by the District in this document.

Any other actions discussed in the submittal represent intended or planned actions by the District. They are described for information only and are not regulatory commitments.

Please notify the NL&S Manager at Cooper Nuclear Station of any questions regarding this document or any associated regulatory commitments.

COMMITMENT

COMMITTED DATE

OR OUTAGE

Determine acceptance criteria for breaker testing using Kelman test equipment.

03/01/2002 Identify the standards, policies, and administrative controls (SPAC) for maintenance and testing of the 161 kV breakers.

Review the SPAC for maintenance and testing of the 161 kV breakers. Prepare appropriate procedure change requests.

Implement SPAC changes to eliminate inadequacies in the detection of breaker degradation prior to failure that could lead to a loss of offsite power.

03/01/2002 Inventory the CNS switchyards to identify major equipment important to offsite power in order to review switchyard standards, policies, and administrative controls.

04/01/2002 Identify the standards, policies, and administrative controls (SPAC) for maintenance and testing of the major equipment to offsite power. Review the SPAC for maintenance and testing of the switchyard equipment. Prepare appropriate procedure change requests. Implement SPAC changes to eliminate inadequacies in the detection of breaker degradation prior to failure that could lead to the loss of offsite power.

06/30/2002