05000397/LER-2003-003
Docket Number | |
Event date: | |
---|---|
Report date: | |
Reporting criterion: | 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function |
3972003003R00 - NRC Website | |
Event Description
On May 21, 2003, Columbia Generating Station (Columbia) was in Mode 5 (refueling) with the reactor head removed, the reactor cavity flooded to greater than or equal to 22 feet above the top of the reactor pressure vessel flange, and the fuel pool gates removed. At approximately 1155 PDT, an isolation of Residual Heat Removal (RHR) shutdown cooling (SDC) occurred. RHR SDC subsystem A was operating in the shutdown cooling mode and RHR SDC subsystem B was out of service for planned maintenance. In addition, operators were making preparations to remove RHR SDC subsystem A from service to support scheduled testing activities requiring a suspension of shutdown cooling.
The SDC isolation was caused by an isolation of RHR-V-9, a containment isolation valve in the common suction line for both RHR SDC subsystems. Closure of RHR-V-9 subsequently tripped RHR SDC pump 2A (RHR-P-2A).
The isolation occurred during performance of planned maintenance in control room panel H13-P622.
A maintenance team was assigned to repair the B4 lug terminal wire on relay MS-RLY-K72A (K72A) in cabinet H13-P622 under a planned work order. This relay is part of the Recirculation System Sample Isolation Valve logic. After a pre-job brief, the technicians went to the Control Room to walk- down the job. They peer-checked the location of the relay, noted the style of lug required and obtained a lug from stores. After returning from stores the technicians once again peer-checked the location of the relay. Believing they had identified the proper relay, they proceeded with the work. The technicians checked the voltage on the relay (zero volts) and after a final peer-check; they removed the B4 wire from the relay, cut off the old lug, replaced it, and re-installed the wire. After the technicians lifted the wire from the B4 terminal, operators observed RHR-P-2A had tripped.
An investigation by the technicians, their supervisor, and the control room staff determined the technicians had worked on the wrong relay. The correct relay as identified in the work order, was relay MS-RLY-K72A. However, the technicians had lifted the B4 wire on relay MS-RLY-K72 (K72).
Both relays are located in control room panel H13-P622, and "A" is the only distinct identifier differentiating the two relays.
Removing the B4 wire on relay K72 disrupted the daisy-chained neutral associated with relay MS-RLY- K29 (K29). This relay is normally energized. Opening the neutral to K29 relay caused it to de- energize resulting in a Nuclear Steam Supply Shutoff System (NSSSS) inboard isolation signal (group 6) which closed RHR-V-9.
Operators noticed RHR-P-2A had tripped and at 1155 PDT declared the required shutdown cooling subsystem inoperable. They then entered Technical Specification (TS) Required Actions 3.9.8.A, 3.9.8.B.1, 3.9.8.B.2, 3.9.8.B.3, 3.9.8.B.4, 3.9.8.C.1, and 3.9.8.C.2. Within approximately ten minutes the neutral wire was reconnected to contact B4 on K72. After verifying no other spurious actuation signals were present which would cause RHR-V-9 to close, Control Room Operators reset the NSSSS logic, opened RHR-V-9, and declared RHR SDC subsystem A operable at 1226 PDT.
26158 R2
Cause of Event
The root causes of this event were the failure of the technicians to seek verification and validation that the proper relay was being worked and less than adequate labeling of the relays inside control room cabinet H13-P622.
Both technicians performing the work assumed no similarly named relays existed in cabinet H13-P622.
The technicians identified relay K72 in the cabinet as the correct relay and fell into a mindset this was the correct relay during subsequent checks. The technicians fell into this mindset due to the similar location and inconsistent labeling of the two relays.
Relay K72 is labeled such that it is much easier to identify. This relay is labeled with a paper label reading "MS-RLY-K72". The paper label is located on the relay itself and easy to locate and read when the cabinet is opened. This relay is also labeled with a small paper sticker as "K72". This smaller label is deeper inside the cabinet near the base of the relay. Relay K72A is more difficult to identify. It is lower in the cabinet (below eye level) and no label exists on the relay itself. Relay K72A has a small paper sticker label, reading "K72A" located near the base.
Safety Significance
This event posed no threat to the health and safety of the public or plant personnel.
At the time the SDC isolation occurred, Columbia was in a refueling outage with the vessel head removed and reactor water level greater than 22 feet above the reactor vessel flange. These conditions provide a large heat sink for core cooling and adequate time for the restoration of RHR SDC or initiation of an alternate method of decay heat removal. RHR SDC was restored in approximately 31 minutes by reconnecting the wire at the B4 terminal of K72 and resetting the NSSSS logic that isolated RHR-V-9.
If the cause of the RHR-V-9 isolation signal had not been quickly discovered, Abnormal Procedure, ABN-RHR-SDC-LOSS, "Loss of Shutdown Cooling" provides instructions to restore (manually) RHR shutdown cooling prior to the system being unable to perform its intended safety function.
Coincidently, the unplanned isolation of RHR-V-9 occurred as Control Room Operators were preparing for scheduled testing activities requiring a suspension of shutdown cooling. Therefore, the following TS Actions were in place at the time of the event:
1. � Technical Specification 3.9.8 requires one RHR SDC subsystem shall be operable and in operation in Mode 5 with irradiated fuel in the RPV and water level greater than or equal to 22 feet above the top of the RPV flange. A Note in TS 3.9.8 allows the required SDC subsystem to be removed from operation for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> per 8-hour period. This note is intended to recognize continuous or intermittent operation of one RHR SDC subsystem can maintain reactor coolant temperature. If the required RHR SDC subsystem is inoperable, TS 3.9.8, Action A.1 requires verification that an alternate method of decay heat removal is available within one hour. If not verified within one hour, then the following actions are required immediately; no irradiated fuel assemblies are 26158 R2 26158 R2 DOCKET (2) LER NUMBER (6) FACILITY NAME (1) being loaded into the reactor (Action B.1), secondary containment is operable (Action B.2), both trains of standby gas treatment are operable (Action B.3), and all required secondary containment penetrations flow paths have isolation capability (Action B.4). Since TS 3.9.8 Actions B.1 through B.4 were pre- established, Operators conservatively assumed the TS Actions were required, and documented these actions were complete.
2. � TS 3.9.8, Action C.1 and C.2 require verification of reactor coolant circulation by an alternate method and monitoring reactor coolant temperature within one hour respectively. This Completion Time requirement was not exceeded. RHR SDC subsystem A was declared operable in approximately 31 minutes, and reactor coolant circulation (natural circulation) was verified approximately 32 minutes after the isolation of RHR-V-9. Reactor coolant temperature was 75.6 degrees Fahrenheit.
This event is reportable in accordance with 10 CFR 50.73 (a)(2)(v)(B).
Corrective Actions
The neutral wire was reconnected to contact B4 on relay K72. After verifying no other spurious actuation signals were present which would cause RHR-V-9 to close, operators reset the NSSSS logic, opened RHR-V-9, and declared RHR SDC subsystem A operable.
Further Corrective Actions The technicians involved in this event were counseled on expectations for equipment identification and self-checking. This event has also been shared with maintenance personnel. This event will also be presented to the Maintenance, Health Physics, Chemistry, Engineering, and Operations Training Assessment Groups to consider its inclusion into future training.
A standard instruction format for locating relays is being developed (i.e., includes the Equipment Piece Number (EPN), cabinet, device designator, and cabinet drawing).
Labeling standards will be reviewed for components in electrical panels and adjusted as necessary.
Previous Similar Events
There have been no reported isolations of RHR SDC in the past 5 years. A similar event did occur on June 8, 2001 when isolation of the RHR suction outboard isolation valve occurred during planned maintenance. However, this event was determined to not be reportable under 10 CFR 50.72 or 73 reporting requirements.