03-31-2005 | On April 10, 2004, with Unit 1 shutdown in Mode 5, the 12 Main Feedwater Isolation Valve, 1-FW-4517-MOV, failed to shut on Steam Generator Isolation Signals (SGIS) during performance of surveillance test procedures. Additional surveillance testing revealed the valve also would not operate upon receipt of a Containment Spray Actuation Signal ( CSAS).
Investigation and troubleshooting into the cause of the malfunction determined that a lead was terminated at the wrong location on the handswitch for 1-FW-4517-MOV. The handswitch, 1HS4517, is located on Control Panel 1CO3 in the Control Room. The improperly wired handswitch caused an open electrical circuit for the 1-FW-4517-MOV SGIS/CSAS functions.
The lead was relocated to the proper terminal and subsequent testing of 1-FW-4517-MOV was satisfactorily performed on April 10, 2004.
The improperly wired handswitch termination was the result of Human Performance errors, which directly challenged the operability of 1-FW-4517-MOV. Calvert Cliffs Nuclear Power Plant addressed an overall weakness in Human Performance with a site-wide initiative.
Procedure changes have also been implemented to allow the use of ring-tongue lugs when performing wire terminations on new or re-worked wiring during maintenance in control panels.
0 |
---|
LER-2005-001, Main Feedwater Isolation Valve Inoperability Due to Handswitch WiringDocket Number |
Event date: |
04-10-2004 |
---|
Report date: |
03-31-2005 |
---|
Reporting criterion: |
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
---|
3172005001R00 - NRC Website |
|
I.� DESCRIPTION OF EVENT On April 10, 2004, with Unit 1 shutdown in Mode 5, the 12 Main Feedwater Isolation Valve, 1-FW-4517-MOV, failed to shut on the "A" Steam Generator Isolation Signal (SGIS) during performance of Surveillance Test Procedure STP-O-56A-1. The valve also failed to shut on the "B" SGIS during the subsequent performance of STP-0-56B-1. Surveillance testing under STP-O-69-1 also revealed that the valve would not operate on receipt of a Containment Spray Actuation Signal (CSAS). Investigation and troubleshooting into the cause of the malfunction determined that a lead was terminated at the wrong location on the handswitch for 1-FW-4517- MOV. The handswitch for 1-FW-4517-MOV, 1HS4517, is located on Control Panel 1CO3 in the Control Room. The improperly wired handswitch caused an open electrical circuit for the 1-FW-4517-MOV SGIS/CSAS functions. Manual operation of 1-FW-4517-MOV via handswitch 1HS4517 was not compromised by this condition. The lead was relocated to the proper terminal and subsequent testing of 1-FW-4517-MOV was satisfactorily performed on April 10, 2004.
Further investigation determined that 1-FW-4517-MOV was last tested successfully on February 19, 2002, during the previous Unit 1 Refueling Outage. No other structures, components, or systems were inoperable at the start of this event that would have contributed to or influenced the event.
The main feedwater isolation valves (MFIVs) function, upon receipt of an SGIS or CSAS, to limit the inventory added to the steam generator following a high energy line break (HELB). Limiting the inventory to the steam generator provides protection by limiting the energy released to the Containment Building, thereby limiting containment pressure after an HELB. Closure of the MFIVs effectively terminates the addition of feedwater to an affected steam generator, limiting the mass and energy release for feedwater line or steam line breaks inside the Containment Building, and reducing cooldown effects for steam line breaks. The MFIVs close on receipt of an SGIS generated by low steam generator pressure and upon receipt of a CSAS. The wiring deficiency identified in this event challenged this safety function.
was not impacted by this event, as evidenced by the last successful completion of STP-O-56A-2 and STP-O-56B-2 on February 15, 2003.
II. CAUSE OF EVENT
The root cause of the improperly wired handswitch termination was Human Performance errors, which directly challenged the operability of 1-FW-4517-MOV. Specific contributors to the Human Performance aspect of this event are as follows:
1. A lack of proper application of Human Performance Event Free Tools ("Stop, Think, Act, and Review" Method, Peer Checks, and Independent Verification) prevented identification and restoration of the improperly wired lead in the correct location.
2. Supervision was not informed of the potential problem when the wire in question came out of the compression termination during earlier maintenance. This failure prevented supervision from providing direction or guidance at the time the error was first identified.
3. The initial error in the wiring was not detected because the Post-Maintenance Operational Test did not verify the CSAS/SGIS isolation function prior to returning the valve to service after the 2002 refueling outage.
4. The cluttered and congested layout of the wiring underneath Control Room Panel 1CO3 resulted in challenges to error free preventive and corrective maintenance when work was performed inside the panel.
III. ANALYSIS OF EVENT
This event is reportable in accordance with the following:
10 CFR 50.73(a)(2)(i)(B); "Any operation or condition which was prohibited by the plant's Technical Specifications.
Technical Specification 3.7.15, Main Feedwater Isolation Valves (MFIVs), Limiting Condition for Operation (LCO) states, "Two MFIVs shall be OPERABLE." Condition A of this Technical Specification allows one or more MFIVs to be inoperable for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> while in Modes 1, 2, or 3. Condition B then requires action to reach Mode 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and Mode 4 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The inability of 1-FW-4517-MOV to close on a SGIS caused the valve to be inoperable from June 16, 2002 until Unit 1 was shutdown and entered Mode 4 on April 10, 2004 for refueling. Unit 1 exceeded the LCO for inoperable MFIVs 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> after entering Mode 3 on June 16, 2002 at 0021 hours2.430556e-4 days <br />0.00583 hours <br />3.472222e-5 weeks <br />7.9905e-6 months <br />.
The safety function of the MFIVs is to provide isolation of the main feedwater flow in the event of a HELB upstream of the main steam isolation valves or downstream of the MFIVs. This function can still be maintained by other components in the Main Feedwater System in the event of a challenge to MFIV operability. While these components are not typically credited in the Updated NRC FORM 366AU.S. NUCLEAR REGULATORY COMMISSION (1-2031) CALVERT CLIFFS, UNIT 1 05000 317 2005 -�001�-�00 04 o P 005 Final Safety Analysis accident analyses, they can be credited when considering safety function operability. Specifically, the main feedwater regulating valves will ramp closed upon a reactor trip signal. The main feedwater bypass valves will open and allow a small (approximately 3.8% of full flow) amount of flow. Additionally, the steam generator feed pumps will be isolated from steam pressure by the main steam isolation valves and will receive a trip signal from SGIS. This combination of additional valve operation and the loss of motive force to the steam generator feed pumps ensures that the safety function of main feedwater flow isolation is maintained. A probabilistic risk assessment of this event determined that the failed automatic closure of 1-FW-4517-MOV would increase the Unit 1 core damage frequency approximately 1.5E-08 per year (very low safety significance).
No significant safety consequences resulted from this event. At no time during the period of inoperability did the lack of automatic closure of 1-FW-4517 result in a challenge to plant operations or safety limits.
IV. CORRECTIVE ACTIONS
A. Calvert Cliffs Nuclear Power Plant addressed an overall weakness in Human Performance with a site-wide initiative. This initiative included the creation of a group of interdepartmental procedures addressing specific Human Performance attributes. Specific tools and verification practices were put in place in an effort to reverse the declining trend observed site wide in Human Performance. Additional controls and expectations were implemented to improve pre job briefings and post-job critiques. A direct result of these initiatives has been a site wide improvement in human performance, as noted by both NRC and Institute of Nuclear Power Operations evaluation results.
B. The Human Performance Procedures also have established the expectation that workers stop and notify supervision when off-normal or unexpected conditions arise.
C. Industry best practices have been benchmarked and incorporated into site procedures for functional testing.
D. Procedure changes have been implemented to allow the use of ring-tongue lugs when performing wire terminations on new or re-worked wiring during maintenance in control panels.
V. ADDITIONAL INFORMATION
A. Component Identification IEEE 803 IEEE 805 Component EIIS Function System ID Main Feedwater Isolation Valve ISV SJ (1-FW-4517-MOV) Main Feedwater Header Check Valve VLV SJ (1-CKVFW-130) 12 Feedwater to Steam Generator HS SJ Isolation Valve Handswitch (1HS4517) Condensate and Feedwater PL JL Control Panel (1CO3) Main Steam Isolation Valve ISV SB Steam Generator Feed Regulating Valve FCV SJ Steam Generator Feed Regulating FCV SJ Bypass Valve Steam Generator Feedwater Pump P SJ
B. Previous Occurrences
No other previous similar events have occurred within the past three years.
|
---|
|
|
| | Reporting criterion |
---|
05000328/LER-2005-001 | Unit 2 Reactor Trip Following Closure of Main Feedwater Upon Inadvertent Opening of Control Breakers | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000388/LER-2005-001 | DDegradation of Primary Coolant Pressure Boundary due to Recirculation Pump Discharge Valve Bonnet Vent Connection Weld Flaw | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000423/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000455/LER-2005-001 | Unit 2 Automatic Reactor Trip Due to Low Steam Generator Level resulting from a Software Fault on the Turbine Control Power Runback Feature | | 05000370/LER-2005-001 | Automatic Actuation of Motor Driven Auxiliary Feedwater Pumps During Outage | | 05000244/LER-2005-001 | Failure of ADFCS Power Supplies Results in Plant Trip | | 05000247/LER-2005-001 | 0Technical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by an Inoperable Auxiliary Component Cooling Water Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000529/LER-2005-001 | REACTOR HEAD VENT AXIAL INDICATIONS CAUSED BY DEGRADED ALLOY 600 COMPONENT | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000336/LER-2005-001 | | | 05000266/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000269/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000289/LER-2005-001 | | | 05000293/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000298/LER-2005-001 | Reactor Scram due to Reactor Level Transient and Inadvertent Rendering of High Pressure Coolant Injection Inoperable | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000331/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000315/LER-2005-001 | Reactor Trip Following Intermediate Range High Flux Signal | | 05000316/LER-2005-001 | Reactor Trip from RCP Bus Undervoltage Signal Complicated by Diesel Generator Output Breaker Failure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000317/LER-2005-001 | Main Feedwater Isolation Valve Inoperability Due to Handswitch Wiring | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000323/LER-2005-001 | TS 3.4.10 Not Met During Pressurizer Safety Valve Surveillance Testing Due to Random Lift Spread | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000333/LER-2005-001 | Inoperable Offsite Circuit In Excess of Technical Specifications Allowed Out of Service Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000352/LER-2005-001 | Loss Of Licensed Material In The Form Of A Radiation Detector Calibration Source | | 05000353/LER-2005-001 | Core Alterations Performed With Source Range Monitor Alarm Horn Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000362/LER-2005-001 | Emergency Diesel Generator (EDG) 3G003 Declared Inoperable Due to Loose Wiring Connection on Emergency Supply Fan | | 05000263/LER-2005-001 | | | 05000456/LER-2005-001 | Potential Technical Specification (TS) 3.9.4 Violation Due to Imprecise Original TS and TS Bases Wording | | 05000454/LER-2005-001 | Failed Technical Specification Ventilation Surveillance Requirements During Surveillance Requirement 3.0.3 Delay Period | | 05000282/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000286/LER-2005-001 | Plant in a Condition Prohibited by Technical Specifications due to Error Making Control Room Ventilation System Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000400/LER-2005-001 | Reactor Auxiliary Building Emergency Exhaust System Single Failure Vulnerability | | 05000395/LER-2005-001 | Emergency Diesel Generator Start and Load Due To A Loss Of Vital Bus | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000382/LER-2005-001 | RCS Pressure Boundary Leakage Due to Primary Water Stress Corrosion Cracking of a Pressurizer Heater Sleeve | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000305/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2005-001 | Reactor Coolant System Leakage Detection Instrumentation Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000266/LER-2005-002 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000255/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-002 | Missing Taper Pins on CCW Valve Cause Technical Specification Required Shutdown | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000370/LER-2005-002 | Ice Condenser Lower Inlet Door Failed Surveillance Testing | | 05000353/LER-2005-002 | High Pressure Coolant Injection System Inoperable due to a Degraded Control Power Fuse Clip | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000263/LER-2005-002 | | | 05000454/LER-2005-002 | One of Two Trains of Hydrogen Recombiners Inoperable Longer Than Allowed by Technical Specifications Due to Inadequate Procedure | | 05000244/LER-2005-002 | Emergency Diesel Generator Start Resulting From Loss of Off-Site Power Circuit 751 | | 05000362/LER-2005-002 | Emergency Containment Cooling Inoperable for Longer than Allowed by Technical Specifications | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000247/LER-2005-002 | DTechnical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by Gas Intrusion from a Leaking Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000265/LER-2005-002 | Main Steam Relief Valve Actuator Degradation Due to Failure to Correct Vibration Levels Exceeding Equipment Design Capacities | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000286/LER-2005-002 | • Entergy Nuclear Northeast Indian Point Energy Center 450 Broadway, GSB P.O. Box 249Entergy Buchanan. NY 10511-0249 Tel 914 734 6700 Fred Dacimo Site Vice President Administration July 5, 2005 Indian Point Unit No. 3 Docket Nos. 50-286 N L-05-078 Document Control Desk U.S. Nuclear Regulatory Commission Mail Stop O-P1-17 Washington, DC 20555-0001 Subject:L Licensee Event Report # 2005-002-00, "Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure." Dear Sir: The attached Licensee Event Report (LER) 2005-002-00 is the follow-up written report submitted in accordance with 10 CFR 50.73. This event is of the type defined in 10 CFR 50.73(a)(2)(iv)(A) for an event recorded in the Entergy corrective action process as Condition Report CR-IP3-2005-02478. There are no commitments contained in this letter. Should you or your staff have any questions regarding this matter, please contact Mr. Patric W. Conroy, Manager, Licensing, Indian Point Energy Center at (914) 734-6668. Sincerely, 4F-/t R. Dacimo Vice President Indian Point Energy Center Docket No. 50-286 NL-05-078 Page 2 of 2 Attachment: LER-2005-002-00 CC: Mr. Samuel J. Collins Regional Administrator — Region I U.S. Nuclear Regulatory Commission U.S. Nuclear Regulatory Commission Resident Inspector's Office Resident Inspector Indian Point Unit 3 Mr. Paul Eddy State of New York Public Service Commission INPO Record Center NRC FORM 3660 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB NO. 3150-0104 EXPIRES: 06/30/2007 (6-2004) Estimated burden per response to comply with this mandatory collection request 50 hours.RReported lessons teamed are incorporated into the licensing process and fed back to Industry. Send comments regarding burden estimate to the Records and FOIA/Privacy Service Branch (T-5 F52), U.S. Nuclear Regulatory Commission, Washington, DC 29555-0001, or by InternetLICENSEE EVENT REPORT (LER) e-mail to Infocoilectsenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-l0202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person Is not required to respond to, the Information collection. 1. FACIUTY NAME 2. DOCKET NUMBER 3. PAGE INDIAN POINT 3 05000-286 10OF06 4. TITLE Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000287/LER-2005-002 | Unit 3 trip with ES actuation due to CRD Modification Deficiencies | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000336/LER-2005-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|