On March 28, 2003, at approximately 3:48 p.m., with the plant in cold shutdown for a refueling outage, the Division 2 standby service water ( SSW) system automatically initiated. The cause of this event was a low pressure condition in the reactor plant closed cooling water system induced by an error during system realignment using the system operating procedure. This event is being reported in accordance with 10CFR50.73(a)(2)(iv) as an event that caused the automatic initiation of an emergency service water system. The SSW system responded as designed to the low pressure signal. Cooling water flow was restored to the spent fuel pool cooling heat exchangers shortly after initiation of the event. Thus, this event was of minimal significance. |
REPORTED EVENT
On March 28, 2003, at approximately 3:48 p.m., with the plant in cold shutdown for a refueling outage, the Division 2 standby service water (SSW) system automatically initiated. The cause of this event was an error during system realignment using the system operating procedure. This event is being reported in accordance with 10CFR50.73(a)(2)(iv) as an event that caused the automatic initiation of an emergency service water system.
INVESTIGATION and CAUSAL ANALYSIS The error occurred during the realignment of the "B" loop of the CCP system. The CCP system normally serves the spent fuel pool cooling (SFC) system heat exchangers (**CLR**) in addition to other loads. The SFC heat exchangers can be isolated from the CCP system and supplied by either the normal service water (SWP) system or the safety-related SSW system. At the start of the realignment, the "B" SFC heat exchanger was being supplied by the SWP system. It was planned to restore the alignment to being supplied by CCP.
The system operating procedure for the CCP system is written such that the desired realignment can be performed while maintaining pressure in both the CCP and SWP systems above the trip setpoint of pressure switches designed to automatically initiate the SSW system. The format of the procedure directs sequential operation of the valves (i.e., the SWP return valve is closed first, followed by closure of the SWP supply valve). However, an inappropriate decision was made to start the supply valve (**V**) moving in the closed direction before a fully closed indication was received on the return valve. This resulted in a system configuration that caused the CCP header pressure to decrease to the SSW automatic initiation setpoint.
The root cause of this event was determined to be an inadequate peer check by the Control Room Supervisor (CRS). With the many tasks being completed in the Control Room, the CRS did not afford his concentrated attention to the sensitive task of re- aligning the Service Water System. Factors contributing to the procedure implementation error were investigated. A contributing cause of this event is the loss of the oversight function by the Senior Reactor Operator assigned as CRS. The CRS stepped out of his oversight role when he became a peer-checker for the service water realignment. There was no other oversight or peer checker available due to the outage workload. The team did not regard this evolution as sensitive or risky, and decided to continue the task to completion. This led to the procedural non-compliance that directly caused the initiation of SSW. Additional causal factors were, (1) the pre-job brief was not conducted with the personnel conducting the task, and, (2) procedural place keeping was less than adequate, in that the CRS directed the operator to continue to the next step in the procedure prior to ensuring the SWP return valve indicated fully closed.
The SSW system responded to the CCP low pressure signal as designed. Subsequent procedure steps were performed shortly thereafter to open the CCP valves supplying the SFC heat exchangers. Using the appropriate abnormal operating procedures, the SSW system was shut down and returned to its standby configuration approximately 74 minutes after the event.
CORRECTIVE ACTION TO PREVENT RECURRENCE
1. A briefing on the event, including a discussion of the human performance aspects, was held during subsequent control room shift turnovers.
2. A simulator training scenario for this event will be developed for licensed operator requalification training.
PREVIOUS OCCURRENCE EVALUATION
Inadvertent actuations of the standby service water system have been previously reported in LER 50-458/01-003-00 (event date 9/24/01) and LER 50-458/99-006-00 (event date 4/6/99). Both these events involved test procedures not related to the operation being conducted on 3/28/03, thus, they are not considered events of similar cause.
SAFETY SIGNIFICANCE
The SSW system responded as designed to the low pressure signal. CCP cooling water flow was restored to the SFC heat exchangers shortly after the initiation of the event.
Thus, this event was of minimal significance.
(NOTE: Energy Industry Component Identification codes are annotated as (**XX**).)
|
---|
|
|
| | Reporting criterion |
---|
05000397/LER-2003-010 | | | 05000528/LER-2003-001 | Pressurizer Safety Valve As-Found Lift Pressure Outside of Technical Specification Limits | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000277/LER-2003-001 | | | 05000282/LER-2003-001 | | | 05000301/LER-2003-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000261/LER-2003-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000251/LER-2003-001 | Channel Failure of Qualified Safety Parameter Display System | | 05000316/LER-2003-001 | Unit 2 Shutdown In Accordance With Technical Specification 3.8.1.1, A.C. Sources, Action b | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000324/LER-2003-001 | Main Steam Line Drain Isolation Valve Local Leak Rate Test Failures | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000352/LER-2003-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000353/LER-2003-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000397/LER-2003-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000364/LER-2003-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000529/LER-2003-001 | Reactor Trip with Loss of Forced Circulation Due to Failed Pressurizer Main Spray Valve | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000278/LER-2003-001 | | | 05000305/LER-2003-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000331/LER-2003-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000313/LER-2003-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000352/LER-2003-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000301/LER-2003-002 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000305/LER-2003-002 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000316/LER-2003-002 | Supplemental LER for Unit 2 Reactor Trip due to Instrument Rack 24 Volt Power Supply Failure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000458/LER-2003-002 | | 10 CFR 50.73(a)(2)(v)(c) | 05000348/LER-2003-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000341/LER-2003-002 | Automatic Reactor Shutdown Due to Electric Grid Disturbance and Loss of Offsite Power | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000261/LER-2003-002 | | | 05000285/LER-2003-002 | 4 | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000397/LER-2003-002 | | | 05000499/LER-2003-002 | Safety Injection Actuation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000440/LER-2003-002 | Reactor Scram as a Result of a Loss of Off-site Power | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(iii) | 05000400/LER-2003-002 | 1 O OF 3 3 | | 05000266/LER-2003-002 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000250/LER-2003-003 | Unescorted Access Inappropriately Approved Due to Falsified Pre-Access Information | | 05000261/LER-2003-003 | | 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor | 05000219/LER-2003-003 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000247/LER-2003-003 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000530/LER-2003-003 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000331/LER-2003-003 | | | 05000529/LER-2003-003 | SOURCE RANGE MONITOR INOPERABLE DURING CORE RELOAD | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000440/LER-2003-003 | Unrecognized Diesel Generator Inoperability During Mode Changes | | 05000348/LER-2003-003 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000482/LER-2003-003 | REACTOR PROTECTION SYSTEM ACTUATION AND REACTOR TRIP DUE TO FEEDWATER ISOLATION VALVE CLOSURE | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000301/LER-2003-003 | | | 05000302/LER-2003-003 | Reactor Coolant System Pressure Boundary Leakage Limit Exceeded Due To Pressurizer Instrument Tap Nozzle Cracks | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000382/LER-2003-003 | RCS Pressure Boundary Leakage Due to Primary Water Stress Corrosion Cracking (PWSCC) | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000397/LER-2003-003 | | 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(iv), System Actuation | 05000458/LER-2003-003 | | 10 CFR 50.73(a)(2)(v)(c) | 05000454/LER-2003-003 | Licensed Maximum Power Level Exceeded Due to Inaccuracies in Feedwater Ultrasonic Flow Measurements | | 05000282/LER-2003-003 | | | 05000346/LER-2003-014 | Steam Feedwater Rupture Controls System Re-Energizes in a Blocked Condition | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|