05000298/LER-2011-001

From kanterella
Jump to navigation Jump to search
LER-2011-001, Both Loops of Residual Heat Removal Inoperable Results in Loss of Safety Function
Cooper Nuclear Station
Event date: 01-18-2011
Report date: 03-14-2011
Reporting criterion: 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat
Initial Reporting
ENS 46563 10 CFR 50.72(b)(3)(v)(B), Loss of Safety Function - Remove Residual Heat, 10 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
2982011001R00 - NRC Website

PLANT STATUS

Cooper Nuclear Station (CNS) was in Mode 1, Power Operations, at 100% power at the time of discovery.

BACKGROUND

Emergency Core Cooling Systems (ECCS) [EllS: BJ, BM, BO] are designed to limit fuel clad temperature over the complete spectrum of possible break sizes in the reactor coolant pressure boundary including the design basis break which is defined as the complete and instantaneous circumferential rupture of the largest pipe connected to the reactor vessel with displacement of the ends so that blowdown occurs from both ends.

The Low Pressure Coolant Injection (LPCI) [EllS: BO] system is one of four systems that make up the ECCS. LPCI provides protection to the core for the case of a large break in the reactor coolant pressure boundary when level cannot be maintained and reactor vessel rapidly depressurizes. Protection extends to a small break in which the High Pressure Coolant Injection [EllS: BJ] system is unable to maintain reactor water level and the Automatic Depressurization System [EllS: RV] has operated to lower reactor vessel pressure. LPCI is one operational mode of the Residual Heat Removal (RHR) [EllS: BO] system.

The RHR system provides core cooling, in conjunction with other ECCS sub-systems and also provides containment cooling as required during abnormal operational transients and postulated accidents.

The Reactor Recirculation system [EMS: AD] provides a variable coolant flow to the reactor core for adjusting reactor power level.

EVENT DESCRIPTION

On January 17, 2011,.at 11:37 Central Standard Time (CST), Plant Management Information System (PMIS) data point N829 indicated that Reactor Recirculation Pump "A" Discharge valve (RR-MO-53A) had closed. This data point indicates valve "closed" if the electrical control power circuit were open-circuited, or if the valve were actually less than full open.

On January 18, 2011, at 00:16 CST, RHR Loop "B" of LPCI was declared inoperable for planned maintenance.

On January 18, 2011, at approximately 16:40 CST, during a panel walk down, an operator discovered the open position indication light for RR-MO-53A was de-energized. Investigation found the socket resistor for the bulb damaged, and the bulb had blown with signs of overheating. Further investigation found the fuses for the 250 VDC control power circuit for RR-MO-53A open-circuited, which prevents RR-MO-53A from closing if needed to support RHR "A" LPCI injection. Upon determination that control power for RR-MO-53A had been lost, RHR "A" was declared inoperable for the LPCI function at 17:31 CST.

As specified by Required Action for Technical Specification Limiting Condition of Operation (LCO) 3.5.1, Condition H, two or more low pressure ECCS injection/spray subsystems inoperable for reasons other than Condition A, LCO 3.0.3 must be immediately entered. LCO 3.0.3, was entered immediately and CNS Procedure 2.1.4.1 was entered at 18:25 CST to initiate a plant shutdown.

Troubleshooting found a failed light socket which apparently caused the fuses to open. At 18:38 CST, the electricians replaced the control power fuses and RR-MO-53A indication on PMIS changed state from indicating "closed" to "open.

The indicator bulb was removed for examination and evidence preservation. The damaged resistor and socket were left in place pending eventual repair and replacement. The socket was inspected and the bulb was not replaced due to the potential damage that exists on either the socket or the resistor. There is no bulb in the socket at this time and Operations is monitoring an alternate indication.

On January 18, 2011, at 19:15 CST, RHR Loop "A" of LPCI was declared operable due to the replacement of fuses and satisfactory completion of Post Maintenance Testing and LCO 3.0.3, along with CNS Procedure 2.1.4.1, was exited. No power reduction occurred.

BASIS FOR REPORT

This event is being reported as an event or condition that could have prevented the fulfillment of the safety function of structures or systems that are needed to remove residual heat per 10 CFR 50.73(a)(2)(v)(B). CNS also reported this event per Event Notification (EN) 46563, as an eight-hour report. The EN described the blown control power fuse as a 125 VDC fuse. The blown control power fuse is actually a 250 VDC fuse.

SAFETY SIGNIFICANCE

The design interlock to automatically close RR-MO-53A on a LPCI injection signal is intended to ensure LPCI flow to the Reactor Pressure Vessel in the event of a pipe break located in the suction line of the Reactor Recirculation pump. The potential safety consequences are low, due to the low likelihood of occurrence of a Reactor Recirculation suction line break during the time the condition existed and the ECCS defense in-depth designed to respond to such design basis pipe breaks. RHR Loop "A" of LPCI remained able to provide injection flow for all other pipe break and accident/transient scenarios. This event resulted in a negligible increase to the core damage frequency reflected in the base model of the CNS Probabilistic Risk Assessment.

CAUSE

The root cause of this event was that no significant barriers existed when the event occurred in the RR-MO-53A power control power circuitry that could have provided prompt indication to operators that the starter circuit had become inoperable.

With barriers in place to indicate that the starter circuit had become inoperable, then the planned maintenance on RHR Loop "B" would have been postponed and RHR Loop "B" would have been operable.

CORRECTIVE ACTION

Checks of N829 for RR-MO-53A open indication were conducted twice per shift until the procedure was revised to include the shiftly verification.

The following remaining corrective action to prevent recurrence is being tracked in the Corrective Action Program:

  • Upgrade PMIS program so that there is a third line alarm for the RR-MO-53A and B valves to indicate power loss to the starter circuit.

PREVIOUS EVENTS

There have been no events reported in the last three years related to a failed indicator light socket.