05000413/LER-2011-002

From kanterella
Jump to navigation Jump to search
LER-2011-002, Safety System Actuation of Auxiliary Feedwater due to Feedwater Isolation during Unit Shutdown
Catawba Nuclear Station, Unit 1
Event date: 04-23-2011
Report date: 06-22-2011
Reporting criterion: 10 CFR 50.73(a)(2)(iv)(A), System Actuation
4132011002R00 - NRC Website

BACKGROUND

This event is being reported under the following criterion:

10 CFR 50.73(a)(2)(iv)(A), for any event or condition that resulted in manual or automatic actuation of the PWR auxiliary or emergency feedwater system.

Catawba Nuclear Station Unit 1 is a Westinghouse four-loop Pressurized Water Reactor (PWR) [EllS: RCT].

The Auxiliary Feedwater (CA) System [El IS: BA] automatically supplies feedwater to the Steam Generators (SGs) to remove decay heat from the Reactor Coolant (NC) System [El IS: AB] upon the loss of Main Feedwater [El IS:SJ] (CF) System supply. The CA pumps [El IS: P] take suction from the Condensate Storage (CS) System [El IS: KA] and pump to the SG secondary side.

The CA System consists of two motor driven CA pumps and one steam turbine driven pump configured into three trains. Each of the motor driven pumps (MDPs) supplies 100% of the flow requirements to two of the four SGs, although each pump has the capability to be realigned to feed the other SGs. The turbine driven pump provides 200% of the flow requirements and supplies water to all four SGs. Each motor driven CA pump is powered from an independent Class 1 E power supply. The steam turbine driven CA pump receives steam from two Main Steam (SM) System [El IS: SB] lines upstream of the Main Steam isolation valves [El IS:SA]. Each of the steam feed lines will supply 100% of the requirements of the turbine driven CA pump. The SGs function as a heat sink for core decay heat, and the CA System is designed to supply sufficient water to the SGs to remove decay heat.

The CA System is capable of supplying feedwater to the SGs during normal unit startup, shutdown, and hot standby conditions. The motor driven CA pumps actuate automatically on SG water level Lo-Lo in 1 out of 4 SGs by the Engineered Safety Features Actuation System (ESFAS) [EllS:JE]. The MDPs also actuate on loss of offsite power, safety injection, ATWS (Anticipated Transients Without Scram) Mitigation System Actuation Circuitry (AMSAC) and trip of all CF pumps. The turbine driven CA pump actuates automatically on SG water level Lo-Lo in 2 out of 4 SGs and on loss of offsite power.

Technical Specification 3.7.5 governs the CA System. Limiting Condition of Operation 3.7.5 requires three CA trains to be operable in Modes 1, 2, and 3. In Mode 4 when the SGs are relied upon for heat removal, one motor- driven CA train is required to be operable. On April 23, 2011, when the event occurred, Unit 1 was in Mode 4 at 0% power operation. The 1B SG initiated a Lo-Lo water level signal at 0921 hours0.0107 days <br />0.256 hours <br />0.00152 weeks <br />3.504405e-4 months <br />, meeting the criteria for the actuation of the CA system MDPs to provide adequate decay heat removal. As a result, the 1A MDP promptly auto-started and provided flow in excess of what was needed to satisfy the decay heat removal for the SGs. The 1B MDP was removed from standby readiness and therefore did not automatically start, but remained available as it could have been manually started if required. The turbine driven pump was also removed from standby readiness but would not have been capable of performing its design function due to the lack of steam pressure at the time of the event. The CF system was subsequently restored, CA was secured, and the Unit was cooled down to Mode 5 where the CA System was no longer required.

EVENT DESCRIPTION

The isolation of the CF system occurred when valves [EIIS: V] 1CF-19 (1B1 High Pressure (HP) Heater Inlet Isolation) and 1CF-23 (1B2 HP Heater Inlet Isolation) were prematurely isolated through Removal and Restoration (R&R) 10-2709, which is a tagout package. The R&R is performed by the Nuclear Equipment Operator (NEO) once the Senior Reactor Operator (SRO) approves the tagout package and it has been released to the NEO for execution. The tagout must also be acknowledged by the Control Room Supervisor (CRS) prior to being executed.

(Some event times are approximate.) Date/Time Event 04/22/11 0225 Nightshift SRO approved R&R 10-2709.

04/22/11 —1915 Nightshift SRO provided R&R 10-2709 to the nightshift NEOs for walk down and preparation for the Pre-Job Brief (PJB). It was determined the tagout would require re-sequencing before being executed.

04/22/11 —2030 Nightshift NEOs took the R&R package to the CRS. The CRS acknowledged the R&R with the understanding that it would be re-sequenced prior to placement.

04/22/11 2100 Nightshift SRO decided not to complete R&R 10-2709 because it would require significant revision to be coordinated with a procedure which would isolate the 1A CF pump turbine. The approved R&R was left uncontrolled on the SRO's desk.

04/23/11 0045 1A CF pump turbine secured per station procedure.

04/23/11 —0600 Shift Turnover occurred. The R&R was not included in the written turnover but was verbally discussed among the SROs.

04/23/11 0811 Dayshift SRO did not conduct a formal PJB, but had a verbal discussion with the dayshift NEOs regarding R&R 10-2709, who then proceeded with the tagout.

04/23/11 0904 Turbine driven CA pump removed from service, entered in Technical Specification Action Item Log (TSAIL).

04/23/11 0906 1B MDP removed from standby readiness, entered in TSAIL.

04/23/11 0908 Valve 1CF-19 indicated closed.

04/23/11 0911 Valve 1CF-23 indicated closed.

04/23/11 0915 The NC System cooldown rate decreased due to loss of feedwater to the 1B SG. Control room recognized loss of feedwater and determined that both CF heater inlet valves were closed.

04/23/11 0916 SG 1B level deviation alarm received. Control room entered the procedure for loss of SG feedwater.

04/23/11 0921 The 1A CA pump auto-started on 1B SG Lo-Lo level.

04/23/11 1009 Valves 1CF-19 and 1CF-23 are opened.

04/23/11 1026 Control room returned the feedwater control system to automatic.

04/23/11 1038 The 1A CA pump was secured.

04/23/11 1334 Unit 1 entered Mode 5 Operation.

CAUSAL FACTORS

The following Root Causes were determined in conjunction with this event:

Root Cause 1: Inadequate Operations organization work control and release process guidance resulted in Operations executing a work activity prematurely that isolated feedwater and subsequently caused the auto-start of the 1A CA pump.

Basis: Current Operations procedures do not provide sufficient guidance for the control of tagouts that have been approved for execution. Detail was not included which specified how deferred tagouts were to be managed. As a result, R&R 10-2709 remained in the approved state and in the work flow process even though plant conditions did not support placing the R&R.

Root Cause 2: Incomplete Operations supervisory review of the R&R and failure to conduct an adequate PJB led to the R&R being placed prior to proper plant conditions being established.

Basis: The dayshift SRO took the approved R&R and set in motion its placement by assigning the task to NEOs with only informal instructions. The SRO made the assumption that the plant conditions were appropriate for placing the R&R. A cursory review of the R&R by the SRO would have indicated that 1B feedwater valves were in the tagout and would isolate all feedwater. Inadequate oversight occurred in the SRO not performing a detailed review of the tagout and also not performing a PJB in accordance with Station protocol. A dayshift PJB was required because the R&R extended beyond a shift change and new personnel were assigned. Had a detailed R&R review been performed, the SRO would have realized that the R&R could not be placed as written and the event would not have occurred. Had a formal PJB or Task Preview been performed, the 1B feedwater isolation on a 1A tagout would very likely have been discovered which would also have prevented the loss of feedwater event.

CORRECTIVE ACTIONS

Immediate:

1. Isolated valves 1CF-19 and 1CF-23 were opened and the CF System restored. The CA System was secured.

2. In progress activities were reviewed to determine if they were being performed per the schedule. No other issues were identified.

Interim:

1. Station and Operations management performed observations of Operations' PJBs.

2. More stringent approval requirements were established in order to perform an R&R package that deviated from the outage schedule.

3. Interim Operations guidance was established to notify the work execution SRO if a R&R package cannot be performed and is to be delayed due to problems encountered.

Planned:

1. Revise appropriate Operations procedures to include that the work execution SRO is to be informed if the R&R package cannot be performed and is to be delayed due to problems that were encountered. Also the procedure will specify that if the plant cannot be configured to allow work based upon current plant condition, then the work must be deferred. It will direct the individual to return the R&R to "reviewed" status until plant conditions can support the R&R, or to discard the R&R package completely. Also, the more rigorous approval requirements for R&R packages will be proceduralized.

2. Incorporate lessons learned from this event into operator training.

There are no NRC commitments contained in this LER.

SAFETY ANALYSIS

Catawba Nuclear Station Unit 1 has a total of four SGs. The CA System is composed of three diverse trains, two MDPs with different power sources and a turbine driven pump. The CA System provides decay heat removal in the event that CF is unavailable. The CA MDPs actuate on SG water level Lo-Lo on 1 out of 4 SGs, while the turbine driven pump will actuate on SG water level Lo-Lo in 2 out of 4 SGs.

The 1B SG initiated a Lo-Lo water level signal on 4/23/11 at 0921, meeting the criteria for the actuation of the CA system MDPs to provide adequate decay heat removal for the conditions of Unit 1 at that time. In Mode 4, Technical Specifications only require 1 train of CA to be operable. As required, the 1A MDP promptly auto-started and provided flow in excess of what was needed to satisfy the decay heat removal for the SGs. Further, the 1B MDP, although not started, was also available. The CF system was subsequently restored, CA was secured, and the Unit was cooled down to Mode 5 where the CA System was no longer required.

NO

In conclusion, this event is considered to be of low safety significance. The 1B SG had a Lo-Lo water level, and the 1A MDP actuated as required to provide adequate flow. There was additional defense in depth available had the 1A CA pump not been able to perform as required. Further, normal feedwater was subsequently restored, and the Unit continued cooldown to Mode 5.

This event was of no significance with respect to the health and safety of the public.

ADDITIONAL INFORMATION

Within the previous three years, there have been no Station Licensee Event Report (LER) events involving the actuation of the CA System. Further, the tagging process has not led to an inappropriate isolation and safety system actuation in the past three years. This event is therefore considered to be non-recurring.

Energy Industry Identification System (EllS) codes are identified in the text as [EllS: XX]. This event is not considered reportable to the Equipment Performance and Information Exchange (EPIX) program. This event is not considered to constitute a Safety System Functional Failure. This event only involved the actuation of the CA System. It was determined through the extent of condition review that the condition described in this LER did not extend to the other trains of CA or the other Unit of operation. There was no release of radioactive material, radiation overexposure, or personnel injury associated with the event described in this LER.