05000334/LER-2011-002, Regarding Failure to Comply with Technical Specifications 3.7.5 Due to the Inoperability of Two Trains of the Auxiliary Feedwater System
| ML11362A386 | |
| Person / Time | |
|---|---|
| Site: | Beaver Valley |
| Issue date: | 12/20/2011 |
| From: | Harden P FirstEnergy Nuclear Operating Co |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| L-11-393 LER 11-002-00 | |
| Download: ML11362A386 (6) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(v), Loss of Safety Function |
| 3342011002R00 - NRC Website | |
text
FENOC Beaver Valley Power Station NP.O.
Box 4 FirstEnergy Nuclear Operating Company Shippingport, PA 15077 Paul A. Harden 724-682-5234 Site Vice President Fax: 724-643-8069 December 20, 2011 L-1 1-393 10 CFR 50.73 ATTN: Document Control Desk U. S. Nuclear Regulatory Commission Washington, DC 20555-0001
SUBJECT:
Beaver Valley Power Station, Unit No. 1 Docket No. 50-334, License No. DPR-66 LER 2011-002-00 Enclosed is Licensee Event Report (LER) 2011-002-00, "Failure to Comply with Technical Specifications 3.7.5 Due to the Inoperability of Two Trains of the Auxiliary Feedwater System." This event is being reported in accordance with 10 CFR 50.73(a)(2)(i)(B).
There are no regulatory commitments contained in this submittal. Any actions discussed in this document that represent intended or planned actions are described for the NRC's information, and are not regulatory commitments.
if there are any questions or if additional information is required, please contact Mr. Darin M. Benyak, Manager, Regulatory Compliance at 724-682-4284.
Sincerely, Paul.
Hre4 Enclosure - BVPS Unit 1 LER 2011-002-00 C:
Mr. W. M. Dean, NRC Region I Administrator Mr. D. I. Spindler, NRC Senior Resident Inspector Ms. N. S. Morgan, NRR Project Manager INPO Records Center (via electronic image)
Mr. L. E. Ryan (BRP/DEP) 1 7--
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB NO. 3150-0104 EXPIRES 10/31/2013 (10-2010)
, the NRC may not conduct or [sponsor, and a person is not required to respond to, the information collection.
- 3. PAGE Beaver Valley Power Station Unit Number 1 05000334 1 OF 5
- 4. TITLE Failure to Comply with Technical Specifications 3.7.5 Due to the Inoperability of Two Trains of the Auxiliary Feedwater System
- 5. EVENT DATE
- 6. LER NUMBER
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED MONTH DAY YEAR YEAR SEQUENTIAL REV MONTH DAY YE FACILITY NAME DOCKET NUMBER NUMBER NO None CILITY NAME DOCKET NUMBER 12 13 2010 2011
- - 002 -
00 12 20 2011
- 9. OPERATI DE
- 11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)
Dl 20.2201(b)
El 20.2203(a)(3)(i) 0l 50.73(a)(2)(i)(C)
El 50.73(a)(2)(vii)
El 20.2201(d)
[El 20.2203(a)(3)(ii)
El 50.73(a)(2)(ii)(A)
L] 50.73(a)(2)(viii)(A)
El 20.2203(a)(1)
[I 20.2203(a)(4)
[:] 50.73(a)(2)(ii)(B)
El 50.73(a)(2)(viii)(B)
[I 20.2203(a)(2)(i)
El 50.36(c)(1)(i)(A)
El 50.73(a)(2)(iii)
[1 50.73(a)(2)(ix)(A)
- 10. POWER LEVEL [1 20.2203(a)(2)(ii)
[] 50.36(c)(1)(ii)(A)
El 50.73(a)(2)(iv)(A)
El 50.73(a)(2)(x)
E3 20.2203(a)(2)(iii)
[I 50.36(c)(2)
El 50.73(a)(2)(v)(A)
El 73.71(a)(4) 1 00 L 20.2203(a)(2)(iv)
El 50.46(a)(3)(ii)
LI 50.73(a)(2)(v)(B)
LI 73.71(a)(5)
El 20.2203(a)(2)(v)
E] 50.73(a)(2)(i)(A)
El 50.73(a)(2)(v)(C)
[
OTHER Specify in Abstract below or in El 20.2203(a)(2)(vi) 0 50.73(a)(2)(i)(B)
Ej 50.73(a)(2)(v)(D)
Energy industry identification system (EIIS) codes are identified in the text using the format [XX].
CONDITIONS PRIOR TO OCCURRENCE Unit 1: Mode 1 at 100 percent power There were no systems, structures, or components that were inoperable at the start of the event that contributed to the event other than as described below.
DESCRIPTION OF EVENT
On October 21, 2011, during the review of a clearance to be used to support maintenance on the "B" Auxiliary Feedwater (AFW) [BA] Train relay 62-AFPB [RLY] at Beaver Valley Power Station Unit Number 1 (BVPS-1), Operations personnel identified that the Train "B" AFW flow throttle valves [HCV] auto-open feature would be disabled as a result of the planned maintenance activities which could impact AFW system operability. A determination was then completed regarding the operability status of the "B" Train AFW flow throttle valves during this planned maintenance activity. This evaluation determined that the "B" Train AFW flow throttle valves would be inoperable while the auto-open feature is disabled even though the valves were in the open position. The removal of the auto-open signal to these flow throttle valves would remove the ability to meet Surveillance Requirement (SR) 3.7.5.3 and requires the AFW "B" Train Supply Header flow throttle valves to be declared inoperable. SR 3.7.5.3 requires periodic verification that each automatic AFW valve that is not secured in position actuates to the correct position on an actual or simulated actuation signal. Based on this information, a review of past performances of the relay calibration procedure for the "A" and "B" AFW trains was conducted to determine if Technical Specification (TS) 3.7.5 titled "Auxiliary Feedwater (AFW) System" Required Actions were previously not met within the past three years during the performance of this relay calibration procedure. The "A" Train relay calibration performed on December 13, 2010 (described in more detail below) was identified on November 4, 2011, as a previously performed plant maintenance activity that may have resulted in non-compliance with the Required Actions of TS 3.7.5.
On December 13, 2010, BVPS-1 "A" Train motor driven Auxiliary Feedwater (AFW) system pump (1 FW-P-3A) [P] was removed from service and declared inoperable at 0339 hours0.00392 days <br />0.0942 hours <br />5.605159e-4 weeks <br />1.289895e-4 months <br /> to perform maintenance.
Technical Specification 3.7.5 Condition B for one AFW Train being inoperable was entered due to removal of 1 FW-P-3A from service. The "B" Train motor driven AFW pump (1 FW-P-3B) [P] remained Operable throughout this event. The turbine driven AFW pump (1 FW-P-2) [P] remained aligned to the "A" train supply header as required by TS 3.7.5 Required Action B. 1. This Required Action applies when both supply headers are Operable.
During the period of time when 1 FW-P-3A pump was inoperable and the 1 FW-P-2 pump was aligned to the "A" supply header, the automatic open signal timing circuit for the Train "A" AFW flow throttle valves was de-energized as part of a clearance to perform a calibration on relay 62-AFPA [RLY]. The automatic open signal timing circuit for the Train "A" AFW flow throttle valves was de-energized at 0950 hours0.011 days <br />0.264 hours <br />0.00157 weeks <br />3.61475e-4 months <br /> on December 13, 2010, and was re-energized at 1642 hours0.019 days <br />0.456 hours <br />0.00271 weeks <br />6.24781e-4 months <br /> on December.13, 2010. Therefore, the automatic open signal was defeated on the Train "A" AFW flow throttle valves for approximately 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and 52 minutes. When the Train "A" automatic open signal timing circuit was de-energized, one additional train of AFW was rendered inoperable. The 1 FW-P-3A pump was previously inoperable due to planned maintenance activities and the 1 FW-P-2 pump became inoperable due to it being aligned to the inoperable
Train "A" AFW flow throttle valves. TS 3.7.5 Condition D for two AFW trains being inoperable was not recognized nor applied when the automatic open signal timing circuit for the Train "A" AFW flow throttle valves were de-energized. As a result, the required action of TS 3.7.5 Condition D to place the plant in Mode 3 within the following six hours was not met. BVPS-1 remained at approximately 100 % power during the 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and 52 minutes that the automatic open signal to the AFW flow throttle valves was defeated.
The calibration procedure for relay 62-AFPA was also performed in 2005 while BVPS-1 was in Mode 1.
The automatic open signal timing circuit was inoperable for a period of approximately 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> and 19 minutes during the relay maintenance activities. The TS condition for two AFW trains being inoperable was not recognized nor applied when the automatic open signal timing circuit for the Train "A" AFW flow throttle valves were de-energized with the 1 FW-P-3A pump inoperable due to maintenance activities, and the 1 FW-P-2 pump aligned to the "A" AFW Supply Header. The time period where the automatic open signal timing circuit was inoperable did not result in non-compliance with the AFW TS Required Actions for two inoperable AFW trains which required the plant to be in Mode 3 within six hours. A review of previous performances of calibration procedure for relays 62-AFPA and 62-AFPB found no other instances where Technical Specifications 3.7.5 Required Actions were not met. This review was performed from 2005 to the time of this event.
CAUSE OF EVENT
During the clearance preparation for the December 13, 2010 Train "A" AFW system maintenance activities, Work Task documents identified that Work Group Clearance, 1WG-24-REL-001, would remove the Auto-Open feature for the "A" train AFW flow throttle valves, MOV-1 FW-1 51 B, D and F [HCV]. This information was identified on the clearance "Cautions" section. Plant personnel did not recognize that removal of the auto-open feature for these valves would render these valves inoperable. The Train "A" AFW flow throttle valves, MOV-1 FW-1 51 B, D, and F, remained energized and in their full-open positions. With these valves being in the full-open, normal system alignment, and desired accident mitigation automatic initiation position, the AFW flow throttle valve operability was not questioned and the preventive maintenance task was allowed to proceed. The 1 FW-P-2 pump is normally lined up to the "A" AFW Supply Header and remained in that configuration when the 1 FW-P-3A pump was removed from service. It was not recognized during these clearance activities that with 1 FW-P-2 pump aligned to the "A" Train AFW Supply Header, the 1 FW-P-2 pump was inoperable based on the removal of the auto-open feature for the "A" train AFW flow throttle valves. With the 1 FW-P-2 pump inoperable along with the 1 FW-P-3A pump, only one AFW train remained operable.
The Apparent Cause of this event was the lack of knowledge/correct interpretation of the auto-open feature and its impact on operability by the on-shift crew tasked with approving and issuing the clearance for posting. This was not recognized by the two Senior Reactor Operators or the Shift Technical Advisor on duty at the time of this event. The clearance was approved for posting based on an assessment of the impact on the AFW System following removal of the auto-open feature, not on the loss of the auto-open feature and its impact on the valves' operability.
ANALYSIS OF EVENT
The AFW System automatically supplies feedwater to the Steam Generators (SGs) [SG] to remove decay heat from the Reactor Coolant System [AB] upon the loss of normal feedwater supply. The design basis of the AFW System is to supply water to the SGs to remove decay heat and other residual heat by delivering at least the minimum required flow rate to the SGs. In addition, the AFW System must supply enough makeup water to replace the SG secondary inventory lost as the unit cools to Mode 4 conditions. Sufficient AFW flow must also be available to account for flow losses such as pump recirculation and line breaks.
The flow path from the primary plant demineralized water storage tank [KC] to the SGs consists of individual supply lines to each of the three AFW pumps. Each motor driven AFW pump is connected to its train related supply header. In addition, the turbine driven pump can be aligned to either the Train "A" or "B" supply header, though it is normally aligned to the "A" Train supply header. The Train "A" and "B" supply headers branch out to each of the three SG feedwater lines via three normally open AFW flow throttle valves per train. These AFW flow throttle valves are motor operated valves that fail in the "as is" position on a loss of power. The normal system alignment for the AFW flow throttle valves is the full open position. These AFW flow throttle valves are manually modulated from the control room by plant operators in order to maintain the desired SG level following system initiation on an Engineered Safety Features Actuation System (ESFAS) [JE] signal. The individual Train "A" and "B" supply header flow paths are then combined downstream of the AFW flow throttle valves into one common feedwater line injection header for each of the three SGs. The AFW flow throttle valves receive an automatic full open signal for approximately 30 seconds following an AFW pump start as a result of the closure of an auxiliary contact on the motor driven AFW pump breaker or as a result of a limit switch on one of the two steam supply trip valves to the turbine driven AFW pump not being in the full closed position. The AFW System actuates automatically on the following TS 3.3.2 ESFAS signals: 1) SG water level - low low, 2) Undervoltage -RCP bus (turbine driven AFW pump only), 3) Safety injection, and 4) Trip of all running MFW pumps (motor driven AFW pumps only).
The "A" train AFW supply header throttle valves remained in their normal system arrangement of being in the full open position during this event which is the initial accident assumption position. The Updated Final Safety Analysis Report (UFSAR) safety analysis assumptions that rely on AFW flow to the SGs therefore continued to be met while the automatic open signal was defeated on the Train "A" flow throttle valves assuming no additional single failure. An additional single failure is not required to be postulated because the unit had entered the TS for an inoperable motor driven AFW pump. The Train "B" AFW motor driven pump and supply header flow throttle valves remained Operable during this event. The ability of the plant operators to fully open the "A" train AFW flow throttle valves and control AFW flow to the SGs from the Control Room was not affected during this event. The "A" train motor driven AFW pump and the relay circuit for the automatic opening of the "A" Train supply header flow throttle valves were removed from service per plant procedures. No adverse conditions were found during these December 13, 2010, AFW system maintenance activities that would have resulted in this plant equipment being otherwise declared inoperable.
The plant risk associated with the BVPS-1 preventative maintenance activities performed on the "A" train AFW system on December 13, 2010, is considered to be very low. This is based on the analyzed plant configuration risk, and that the "A" train AFW flow throttle valves remained open and were fully capable of being operated from the control room during the maintenance activities. Therefore, the safety significance of the event was very low.
This event is reportable per 10 CFR 50.73(a)(2)(i)(B) (Operations or Condition prohibited by TS) due to two trains of AFW being inoperable for greater than six hours while the plant was operating in Mode 1. As a result, the Required Action of TS 3.7.5 Condition D to place the plant in Mode 3 within six hours of two AFW trains being inoperable was not met.
This event is not reportable per 10 CFR 50.72 or other 10 CFR 50.73 criteria based on the turbine driven AFW pump and the Train "B" motor driven AFW pump remaining capable of performing their intended safety function(s) assuming no additional single failure. Two motor driven AFW pumps (or one motor driven AFW pump and one turbine driven AFW pump) are required to supply sufficient flow to the SGs to remove core decay heat based on the limiting design basis that assumes AFW flow to the SGs.
CORRECTIVE ACTIONS
- 1. A notation was added in the Clearance Program Equipment Database for 4KVS-1AE-1E16 and 4KVS-1DF-1F16 to indicate that when relays 62-AFPA and 62-AFPB are de-energized, the respective train Auxiliary Feedwater Valves are inoperable.
- 2. This event will be reviewed by the Operations Training Committee to determine the best method to provide training regarding the recognition of the valve operability in a future Licensed Operator Training Session. This will include the causes of this event, reinforcement of the intent of Surveillance Requirement 3.0.1 and needed improvements in the clearance process and template generation.
Completion of the above and other corrective actions are being tracked through the BVPS corrective action program.
PREVIOUS SIMILAR EVENTS
A review of previous BVPS LERs for approximately the previous three years determined that there was one LER that involved a similar event.
BVPS-1 LER 2009-001-00, "Surveillance Test Inadvertently Violates Technical Specification 3.6.1 for Containment Operability."
The cause cited was less than adequate change management in revising the performance mode of the test. Narrow focus by the procedure preparers, review organizations and end users on the most obvious TS requirement resulted in a failure to identify a more limiting TS requirement.
LER 2009-001-00 involved not recognizing the procedure's effect on a second TS requirement, which could have been understood by the procedure performers. This event involves a different plant system and was caused by a lack of knowledge/correct interpretation of the auto-open feature and its impact on operability.
CR 2011-04934