05000327/LER-2011-001

From kanterella
Jump to navigation Jump to search
LER-2011-001, Both Trains of Control Room Air Conditioning Systems Inoperable
Sequoyah Nuclear Plant Unit 1
Event date: 02-15-2011
Report date: 04-15-2011
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident

10 CFR 50.73(a)(2)(v), Loss of Safety Function
3272011001R00 - NRC Website

I. PLANT CONDITION(S)

Unit 1 and Unit 2 were operating at 100 percent power.

II. DESCRIPTION OF EVENT

A. Event:

On February 15, 2011, at 0705 Eastern Standard Time (EST), Sequoyah Nuclear Plant (SQN) Unit 1 and 2 entered Technical Specification Limiting Condition for Operation (LCO) 3.0.3 due to both trains of control room air conditioning systems inoperable. Technical Specification 3.7.15, "Control Room Air-Conditioning System (CRACS)," Action b requires immediate entry into LCO 3.0.3 when both trains of control room air conditioning systems are inoperable. In this case, the "B" train Main Control Room (MCR) chiller [EDS Code VI] failed and "A" train MCR chiller was tagged out of service for scheduled maintenance. At SQN, the control room air conditioning systems are shared between Units 1 and 2. LCO 3.0.3 requires action to be initiated within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> to place the units in non-applicable Modes. In addition, the 1A-A Emergency Diesel Generator (EDG) [EDS Code EK], which supplies emergency power for the "A" train MCR chiller, was also inoperable for maintenance inspections and testing. With the 1A-A EDG and the "B" train MCR chiller inoperable, LCO 3.0.5 required action to be initiated within two hours to place the units in non-applicable Modes. Actions were expedited to return both trains of MCR chillers and the 1A-A EDG to service. At 1005 EST on February 15, 2011, the "A" train MCR chiller was returned operable status and LCO 3.0.3 was exited on both units. However, both units remained in Technical Specification 3.7.15 Action a, which required the remaining inoperable control room air conditioning system to be restored to operable status within 30 days. In addition, both units remained in LCO 3.0.5 because the 1A-A EDG and the "B" train MCR chiller remained inoperable.

The 1A-A EDG was returned operable at 1030 on February 15, 2011, following an operability evaluation of load swings that were identified during a surveillance test.

Both units exited LCO 3.0.5 at this time. The "B" train MCR chiller was returned to operable status at 1801 on February 15, 2011, and Technical Specification 3.7.15 Action a was exited for both units, following a technical evaluation and installation of a temporary jumper across an open temperature switch, which provides a start permissive for the chiller. Later investigation revealed that there was ruptured tubing internal to the temperature transmitter, which resulted in the open temperature switch.

B. Inoperable Structures, Components, or Systems that Contributed to the Event:

None.

C. Dates and Approximate Times of Major Occurrences:

Date Description February 14, 2011 2015 EST 1A-A EDG was removed from service for maintenance inspections. LCO 3.0.5 actions were not required at this time.

February 15, 2011 0459 EST A train MCR chiller was removed from service for scheduled maintenance.

February 15, 2011 0611 EST 1A-A EDG inoperable because of load swings identified during surveillance test.

February 15, 2011 0705 EST Unit 1 and 2 enter LCO 3.0.3 as directed by Technical Specification 3.7.15 Action b because "B" train MCR chiller failed, with "A" train MCR chiller inoperable because of scheduled maintenance. LCO 3.0.5 actions were required to be taken due to the inoperable 1A-A EDG and the "B" train MCR chiller.

February 15, 2011 1005 EST Unit 1 and 2 exit LCO 3.0.3 following "A" train MCR chiller returned to operable status after oil heatup from scheduled maintenance. Both units remain in LCO 3.0.5 due to 1A-A EDG, which supplies emergency power for the "A" train MCR chiller, inoperable while the "B" train MCR chiller remains inoperable.

February 15, 2011 1030 EST Unit 1 and 2 exit LCO 3.0.5 following an operability evaluation of EDG 1A-A load swings that were identified during a routine surveillance test. The load swings were determined to not affect the emergency mode of EDG operation.

February 15, 2011 1801 EST "B" train MCR chiller was returned to operable status and Technical Specification 3.7.15 Action a exited following a technical evaluation and installation of a temporary jumper across the open temperature switch.

D. Other Systems or Secondary Functions Affected:

No other systems or secondary functions were affected by this event.

E. Method of Discovery:

Control room personnel identified a failure of the "B" train MCR chiller. "A" train MCR chiller was inoperable because of scheduled maintenance.

F. Operator Actions:

Actions were expedited to return both trains of MCR chillers and the 1A-A EDG to service.

Sequoyah Nuclear Plant Unit 1 SEQUENTIAL

G. Safety System Responses:

No safety systems were actuated during this event.

III. CAUSE OF THE EVENT

A. Immediate Cause:

The immediate cause of the "B" train MCR chiller failure was a ruptured air supply line in a temperature transmitter on the chiller control circuit.

B. Root Cause:

The root cause was identified as inadequate preventative maintenance.

Preventative maintenance procedures did not include the inspection of the internal tubing of the temperature transmitter.

C. Contributing Factor:

None.

IV. ANALYSIS OF THE EVENT

Initially, the 1A-A EDG and was removed frOrn service for maintenance inspections. The "A" train MCR chiller was also removed from service for scheduled maintenance. The failure of "B" train MCR chiller caused both units to enter LCO 3.0.3 as directed by Technical Specification 3.7.15 Action b for both trains of control room air conditioning systems being inoperable. Both units were in LCO 3.0.3 for three hours until the "A" train MCR chiller could be restored to operable status from scheduled maintenance.

Both units remained in LCO 3.0.5 at this time because the 1A-A EDG and the "B" train MCR chiller was inoperable. The 1A-A EDG was inoperable pending a prompt operability evaluation of load swings that were identified during surveillance testing. The prompt operability evaluation determined that the load swings did not affect the emergency mode of EDG operation, the 1A-A EDG was declared operable, and both units exited LCO 3.0.5.

The "B" train MCR chiller failed because of a ruptured air supply line to a temperature transmitter on the chiller control circuit. This caused a temperature switch to fail open, which prevented operation of the chiller. The cause was determined to be an inadequate preventative maintenance procedure. The preventative maintenance procedure did not have instructions to inspect the temperature transmitter internal air tubing.

The loss of MCR air conditioning for the short period of time in this event was of minimal safety significance. In the unlikely event a train of MCR air conditioning could not be restored, NA calculations demonstrate that more than 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br /> exist before the main control room would reach its maximum allowable temperature during summer conditions.

In addition, shutdown of both units can be accomplished from the backup control room.

The backup control room is located outside the main control room and is supplied by a different air-conditioning system that was available during the time both MCR air conditioning systems were unavailable.

The condition of both trains of control room air conditioning systems inoperable is reportable per 10 CFR 50.73(a)(2)(i)(B), as any operation or condition which was prohibited by Technical Specifications. Both trains of control room air conditioning systems being inoperable is also a condition that could have prevented the fulfillment of the safety function in accordance with 10 CFR 50.73(a)(2)(v)(D).

V. ASSESSMENT OF SAFETY CONSEQUENCES

Based on the above "Analysis of The Event," this event did not adversely affect the health and safety of plant personnel or the general public.

VI. CORRECTIVE ACTIONS

A. Immediate Corrective Actions:

The immediate corrective action was to re-establish MCR air conditioning by returning the "A" train MCR chiller to service. The "B" train MCR chiller was returned to service with a technical evaluation to bypass the failed temperature switch. The "B" train MCR chiller temperature transmitter was later repaired by replacing the ruptured tubing.

B. Corrective Actions to Prevent Recurrence:

Corrective actions will be implemented to ensure there are preventative maintenance instructions in place to perform the required tubing inspections on the "B" train MCR chiller temperature transmitter. Preventative maintenance instructions were verified to be in place to perform the required tubing inspections on the "A" train MCR chiller temperature transmitter. A review of tubing applications in ventilation systems will be conducted to ensure adequate preventative maintenance instructions are in place to prevent other tubing failures.

VII. ADDITIONAL INFORMATION

A. Failed Components:

The failed component was a ruptured tube internal to a temperature transmitter from Johnson Controls Inc., model number T-5002-201.

B. Previous LERs on Similar Events:

A review of previous reportable events for the past three years identified that SQN reported under LER 2008-002-01 a failure of the "B" train MCR air handling unit in conjunction with planned maintenance on EDG 1A-A. The cause of the LER 2008-002-01 event was that the risk associated with swapping the MCR air conditioning units while the 1A-A EDG was inoperable was not adequately addressed.

In this event the failure of the "B" MCR chiller was caused by component failure that was not associated with swapping the units. The 2008 event did not have the same underlying cause, so the corrective actions would not have prevented this event.

C. Additional Information:

A Problem Evaluation Report was written in 2003 to document age related tubing failures at SQN. The corrective actions revised several preventative maintenance (PM) procedures to incorporate tubing inspections. The PM procedure revisions did not include the internal tubing inspections "B" train MCR chiller temperature transmitter. If these inspections had been added to the PM procedure for the "B" train MCR chiller, this event may have been prevented. The PM procedures in the scope of the Problem Event Report will be reviewed to determine that they include all required tubing inspections.

D. Safety System Functional Failure:

This event resulted in a safety system functional failure in accordance with 10 CFR 50.73(a)(2)(v).

E. Unplanned Scram with Complications:

This event did not result in an unplanned scram with complications.

VIII. COMMITMENTS

None.