IR 05000302/1997007

From kanterella
Jump to navigation Jump to search

Insp Rept 50-302/97-07 on 970504-0607.Violations Noted. Major Areas Inspected:Operations,Maint,Engineering & Plant Support Re self-assessment Rept on Health Physics & Radiation Control Areas Access Control Program
ML20149G115
Person / Time
Site: Crystal River Duke Energy icon.png
Issue date: 07/07/1997
From:
NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION II)
To:
Shared Package
ML20149G084 List:
References
50-302-97-07, 50-302-97-7, NUDOCS 9707230012
Download: ML20149G115 (68)


Text

. . - - . . - . _ . . - - - . - . - . . - . _ . . - - . - . - . . - - _ _ _ . - . - _ _ .-....

.

U.S. NUCLEAR REGULATORY COMMISSION i

l REGION II i !

i

. Docket No: 50-302  ;

"

License No: DPR-72  !

-

i'

'

Report No: 50-302/97-07 l t

i .

, Licensee: Florida Power Corporation .i

,

Facility: Crystal River 3 Nuclear Station  !

!

!

Location: 15760 West Power Line Street ,

' Crystal River FL 34428-6708 r

,

Dates: May 4 through June 7, 1997

'

'

i Inspectors: S. Cahill Senior Resident Inspector T. Cooper, Resident Inspector S. Sanchez, Resident Inspector J. Blake,- Senior Project Manager, paragraphs M1.2, M1.3' M2.1-R. Caldwell, Resident. Inspector Farley l P. Fillion Reactor Inspector l M. Miller, Reactor Inspector.-paragraphs 07.2, El.3, E1.4, E L. Raghaven, Project Manager, NRR,-paragraph 0 R. Schin, Reactor Inspector, paragraphs E8,1 E8.2, 1 E8.3 E8.4. E8.5, E8.6, E M.' Thomas, Reactor Inspector, paragraphs 07.2.- 07.3,  !

E8.8, E8.9. E8.10 Approved by: K. Landis, Chief. Projects Branch 3 Division of Reactor Projects I

!

9707230012 970707 PDR ADOCK 05000302 G PM ,

__ _ _ __ - - - . _ - - ,_ ._ . - . _

l

. . .. . - - - - .-. .- . -- - - . - - = - . .. -.

f EXECUTIVE SUMMARY Crystal River 3 Nuclear Station NRC Inspection Report 50-302/97-07

'

This integrated inspection included aspects of licensee operations.

engineering, maintenance, and plant support. The report covers a 5-week period of resident ins)ection: in addition it includes the results of announced ins)ections )y 4 reactor inspectors from Region II and 1 project manager from 1R Ooerations Examples of management expectations not translated into procedural requirements and resultant operator performance were observed. Operations department ownership and control of the plant remains an issue but it is being adequately addressed by licensee management (Sections 01.1. 01.2 and 01.3).

Several deficiencies caused the inspectors to conclude that significant problems still exist in the licensee's clearance tagging process. An additional example of a pending violation was identified. An inadequate electrical clearance that could have resulted in a significant personnel injury was discovered by electricians prior to starting their work. Emphasis )

was placed on ensuring each tag was hung on the properly labelled componen '

but nnt on ensuring that clearances were accurate. Other examples where the l clearance procedure did not adequately delineate management expectations for ;

tagging and operation of. equipment were identified. (Section 01.2). j The licensee's tracking of containment )enetrations was a challenge to the ability to ensure containment closure w1en required and was considered a weakness. However, the successful performance of an unannounced drill was proactive and a good test of their ability to meet the containment closure requirements (Section 01.3).

A review of the Operator Workaround List identified that the licensee was appropriately prioritizing and scheduling items to be corrected (Section 03.1). l Operations ownership and cognizance of plant spaces, equipment, and processes remains a challenge to the licensee. However, licensee management was aggressively pursuing the causes of the problems in an effort to improve performance (Section 04.1).

Licensee self-assessment activities continued to be effective. The Nuclear Quality Assurance group identified several significant problems and licensee management remains committed to staffing them with diverse and talented . individuals (Section 07.1).

i There has been improvement in the corrective action process as compared to the

, 3rocess used before the Integrated Performance Assessment Process inspection.

l iowever, as indicated by the findings, there were still weaknesses in some l areas which warrant increased management attention (Section 07.2).

i

_ . _ ___.-- ___ _ - _ _ _ _ _ - . _ _ _ __ .__ _. . . _ .

'

A Violation (VIO 50-302/97-07-01) was identified for failure to follow Compliance Procedure CP-11 Several examples were noted where the program

'

was not being implemented with regard to timeliness of Precursor Card responses, training of individuals performing the functions of the Root Cause Team Leaders and Apparent Cause Evaluators, and grading of Precursor Cards (Section 07.2).

The initiation of PC 97-1515 and PC 97-1520 were positive reflections on the licensee's extent of condition programs (System Readiness Review and FSAR Review Project Team) which resulted in the identification of the SDBIs documented in these PCs (Sections 07.2 and E8.1).

,

'

The Nuclear Assurance Group in the Quality Programs Department has been active in identifying continued weaknesses and areas for improvement in the licensee's corrective action program and various other activities (Section 07.3).

The inspectors concluded, based on the review of the licensee's assessment and their own review of the licensee E0Ps, that adequate guidance did exist in the licensee's E0Ps to address the concerns of IN 97-06 Section 08.1).

The inspectors concluded that the licensee's corrective actions were good for Enforcement Action 95-126, Violations I. A and I.B. These violations involved operators not following procedures for makeup tank pressure and level and operators conducting unauthorized tests. The corrective actions, including actions to prevent recurrence of the violations, had been implemented. and were effective improvements (Sections 08.2, 08.3).

Maintenance A violation (VIO 50-302/97-07-02) was identified for inadequate Engineering oversight. Maintenance knowledge of the requirements, and Operations involvement with a hydrostatic test of emergency feedwater piping. The licensee did not have a comprehensive site policy or expectation for the content or performance of pre-job briefings (Section M1.1).

The licensee was pro-active in utilizing the maintenance outage time to complete the second 10-year Inservice Inspection requirements and completely updating the isometric drawing used for Inservice Inspection (Section M1.2).

The licensee's steam generator inspection program appeared good. The decision to baseline and inspect fully the Once Through Steam Generators, using the latest qualified eddy current techniques, was a sound technical decision (Section M1.3).

Weaknesses were displayed in the planning, preparation, and coordination for i the A train Emergency Feedwater cavitating venturi test. Improvements were l

noted in these facets of the B train testing. All acceptance testing for these parts of the functional test were met (Section M1.4).

The licensee's project to repair or replace the protective coatings inside the Reactor Building appeared to lack overall management and engineering l

_______ _ __ - _ _ _ _ _ _ _ _ _ _ _ _ ____ . _ _ - _ _ _ _ _ _ _ - _ _ - _ _ _ - _ _ - - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

3 I involvement. The project appeared to have a narrow focus on the re) air and replacement of the coatings. Identified problems associated with t1e project were as follows:

-

A program weakness was identified concerning the fact that three-year old procedures were implemented without an engineering and quality review to determine if requirements had changed during the interim (Section M2.1).

-

An Unresolved Item (URI 50-302/97-07-03) was identified concerning Reactor Building liner plate degradation that was painted over without inspection or analysis (Section M2.1).

-

An Unresolved Item (URI 50-302/97-07-04) was identified concerning the potential that Reactor Building ventilation ductwork may contain an unanalyzed, combustible burden in the form of oil (Section M2.1).

Enaineerina Some examples of excellent engineering support were observed but other I examples of poor support were included as parts of violations *n other areas j (Section El.1) l l

There was a weakness in the Corrective Action Program in that the engineering  !

Suspected Design Basis Issue (SDBI) evaluations were of poor quality. Three of three engineering SDBI evaluations reviewed had insufficient technical justifications to support the conclusions that there was not a reportable DB The engineering evaluations included incomplete determinations of the licensing and design bases and incorrect interpretations of NRC regulation The licensee's definition of a design basis issue was narrow and not consistent with NRC regulations. Additionally, engineering personnel performing SDBI evaluations were not trained in existing interpretations of the NRC regulations on reporting as published by the NRC in NUREG-1022 ,

(Section 07.2). l l

The licensee was implementing appropriate Low Temperature Overpressure Protection restrictions and was developing a permanent solution via a Technical Specification change (Section E1.2).

The inspectors concluded that the licensee was in the process of im)lementing i an effective program to meet the intent of Generic Letter 96-01. T1e onsite l contract engineer has been effective in reviewing, validating. and identifying i deficiencies. However, the Generic Letter 96-01 program had not been l completed at this time (Section E1.3). i The inspectors concluded that the licensee was in the process of implementing l an effective DC Power Failure Modes and Effects Analysis program. The l contractor implementing the program and the contractor reviewing the program had identified and resolved concerns in the Class 1E DC Power system in a sati factory manner. However, the Failure Modes and Effects Analysis program had not been completed at this time, and there were open Precursor Cards (Section E1.4).

l l

. . - . . . - . .- -- . - --- .-

l

The inspectors concluded that the licensee's engineering design basis :

(reportability) evaluation of Precursor Card 97-2026. Design Basis Concern Relative to Control Room Habitability Dampers, was of very poor quality. It included incorrect statements related to engineering calculations, shallow and improper analyses, incorrect interpretations of NRC requirements, and incorrect conclusions (Section E8.1).

The inspectors concluded that the licensee's corrective actions for two l violations were good. Corrective actions for Enforcement Action 95-126.

,

Violations I.D.2 and II. A. had been implemented, included actions to prevent I recurrence of the violation, and were effective improvements. These violations involved swapover of the Emergency Core Cooling System pumps and insufficient net positive suction head for the low pressure injection pump

(Sections E8.2 and E8.3).

The inspectors concluded that the licensee's corrective actions for EA 95-12 VIO I.C.1, had been implemented, included actions to prevent recurrence of the violation, and were effective improvements. The inspectors also concluded that the licensee's analyses and conclusions in resolving the questions addressed by URI 96-01-02 were good (Sections E8.4 and E8.5).

Plant Sucoort A degradation in radiation workers adherence to good radiation work practices !

and adherence to the applicable procedures resulted in a Non-Cited Violation !

(NCV 50-302/97-07-05). The licensee identified this trend and took strong '

corrective actions to address the issue; including developing and documenting management's expectations for radiation workers and assuring that all personnel were trained on the expectations and aware of the consequences for failure to meet these expectations (Section R1.1).

The inspectors reviewed the self-assessment report on health physics and radiation control areas access control program, and concluded that while some of the strengths identified seemed inappropriately classified, the observations and identified weaknesses were timely and self critical (Section R7.1).

A violation (VIO 50-302/97-07-06) was identified for inadequate corrective action regarding the use of an uninterruptible power supply unit in the ;

security central alarm station. Several loss of power events revealed a ,

security staff lack of familiarity with the operation and function of the uninterruptible )ower supply. Prior opportunities to address the inevitable degradation of t1e power supply batteries and the lack of a need for the uninterruptible power supply were not recognized by engineering or security personnel (Section S2.1).

l l

!

, j

.

5 -!

. -  :

The insp'ectors assessed the licensee's performance concerning the five areas of continuing NRC concern in--

'

!

'

the following paragraphs: the assessments are limited to the specific issues addressed in the respective  ;

paragraph ,

!

NRC AREA 0F CONCERN ASSESSMENT PARAGRAPH-

!

"

0 0 0 0 0 0 0 E E E E E E E -E E- E

<

3 4 7 7 7 8 8 1 1 8 8 8 8 8- 8 8 8  !

-

. . . . . . . . . .. . . . . . . .

1 1 1 2 3- 2 3 3 4 .1 2 -. 3 '4 5 6 7. 8 i

Management Oversight G A G A G G G G I' G G' G G G G G  ;

Engineering Effectiveness A A G G G I G G G 'G l Knowledge of Design Basis A G' A G G I G G G G  !

'

Compliance With Regulations A A G A G G G G A I G G G G G G G Operator Performance A A G G G G G G  ;

5 = Superior G = Good A = Adequate / Acceptable .I = Inacequate ,

,

Blank - Not Evaluated / Insufficient Information j

' .

.

,

Paragraph 03.1: Operator Workaround List ,

,

Paragraph 04.1: Operator Performance Ob'servations and Safety Culture Examples j

,

Paragraph 07.1: Licensee Self-Assessment Activities -

Paragraph 07.2: Corrective Action Program  ;

!

Paragraph 07.3: Quality Assurance Audits and Surveillances

, .

t Paragraph 08.2: Followup on EA 95-126. Violation I.A..Nine Instances Where Operators Violated Procedures

'

! for Makeup Tank Pressure / Level Control

'

i

i l

'

_ _ . _ _ _ _ _ _ _ _ _ _ _ _ . . . _ . _ _ _ _ _ . . _ _ _ _ . _ . _ . _ _ .

- _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . . _ . _ _ _ _

_ _ - - _ _ _ _ _

- . - _ . - _ _ _ -_ . _ _ _ - _ . _ _ _ _ _ _ - _ - _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ - _ _ _ _ - - _ - _ _ _ _ _ _ _ - - _ _ _ _ _ _ - _ _ _ - _ - _ _ _ _ _

Paragraph 08.3: Followup on EA 95-126. Violation'I.B. Conduct of Unauthorized Tests of Makeup Tank Without 10 CFR 50.59 Evaluation ,

Paragraph El.3: NRC Generic Letter 96-01. Testing of Safety-Related Logic Circuit Paragraph E1.4: DC System Failure Modes & Effects Analysis (FMEA).

Paragraph E8.1: Followup on URI 95-02-02. Control Room Habitability Envelope Leakage Paragraph E8.2: Followup on EA 95-126. VIO I.D.2: Swapover of ECCS Pumps' Suction from BWST (at five feet)

to Reactor Building Sump Was Inadequat Paragraph E8.3: Followup on EA 95-126. VIO II.A: E0Ps Allowed Single LPI Pump to Supply Two HPI Pump With Insufficient NPSH For LPI Pum Paragraph E8.4: Followup on EA 95-126. VIO I.C.1: Failure to Take Adequate Corrective Actions for Operator .

'

Concerns Regarding OP-1038. Curve 8. for Makeup Tank Pressure / Level Limit Paragraph E8.5: Followup on URI 96-01-02: Discrepancies in the High Pressure Injection System that do not Meet Design Basis Analysi '

Paragraph E8.6: Followup on EA 96-365. EA 96-465. EA 96-527. VIO A.5 (01052). USQ Involving a Decrease in the Reliability and an Increase in the Probability of Failure of EFP- Paragraph E8.7: Followu) on EA 96-365. EA 96-465. EA 96-527. VIO B (Example 1) (02013). Failure to Update ,

Applica)le Design Documents to Incorporate Design Informatio '

Paragraph E8.8: Followu) on EA 96-365. EA 96-465. EA 96-527. VIO B (Example 2) (02013). Failure to Include Applica)le Design Information in the Design Input Requirements for a Modificatio ;

L I

_ . _ _ _ _ _ _ _ _ __ _ - - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __

!

l

i Report Details Summary of Plant Status ,

,

The unit remained'in Mode 5 throughout the inspection period, continuing in l the outage that began on September 2. 1996. On May 28 the pressurizer steam <

bubble was collapsed and replaced with a nitrogen overpressure volume to support pending draindown of the reactor coolant system and steam generator inspections. The secondary side of both steam generators were comaletely drained this period to support main steam isolation valve refurbis1 ment. Work on several major physical modifications related to the licensee's restart i efforts continued this report period. These included Emergency Feedwater (EFW) cavitating venturis. EFW motor-operated cross-tie valve EFV-12, and .

overpressurization chambers for containment penetration isolations to address I concerns in NRC Generic Letter'96-06 Assurance of Equipment Operability and Containment Integrity During Design Basis Accident Conditions,  ;

,

L. Operations 01 Conduct of Operations 01.1 General Comments (71707)

Using Inspection Procedure 71707 the ins)ectors conducted routine reviews of ongoing plant operations whic1 included shift turnovers,

-

response to problems. log review, and review of clearance tagging processes. Significant observations are discussed in the following 1 paragraph The inspectors observed several Operations shift turnovers and concluded they were thorough. Turnover paperwork appeared complete and controlled. However, the briefings by the Shift Supervisors (SS00) were occasionally disjointed because the SSOD was briefing from the daily logs, which indicated a lack of 3 reparation to the inspector. Shift turnover was conducted after eac1 watchstation had individually turned over, which meant that one operator had to monitor the control boards and can not pay attention to the turnover. The licensee was considering changes to turnovers which included doing a shift briefing prior to individual turnover The inspectors reviewed the Operability Concern Resolution (OCR) book and determined the category of " Conditionally Operable /Potentially Inoperable" was a non-conservative method of determining operability.

'

Licensee management agreed and has taken initial steps to revise the process to ensure a clear operability determination and status would be -

made in future case )

An inspector observed the operators respond to a Non Nuclear

'

'

Instrumentation (NNI) Channel Y failure on May 13, 1997. The operators quickly entered Abnormal Procedure (AP) 582 Loss of NNI-Y, Revision and deliberately performed the required actions. Operators verified i what instrument indications were reliable and the effect of the lost indications. The pressurizer Power Operated Relief Valve (PORV) was

,

_ -- - -- --. - -* , -,.--o , yn

,, - - - - - -

- - . - - - - - - - - - . - - - - - . . . --

J

'

rendered inoperable by the failure, but appropriate steps were taken by the o)erators to compensate. The~ shift supervisor conducted a control L

'

room ]rief at an appro)riate oint in the event to ensure each operato was cognizant of all t1e prob ems and has plans to correct'them. The- ,

operators also took steps to protect the-remaining indications by stopping work'or blocking access to related areas. The ins)ector

.

'

concluded the operators did a very good job responding to t1e unexpected event, which was later determined to be caused by a faulty power supply-j circui 'The inspector followed up on a previously identified weakness regarding .

the unavailability of system prints and schematics .to. operators. The :

i licensee had taken significant action to allow operations personnel .

l . access to the computer drawing database. This enabled the operators to '

l research or print the latest revision of any drawing as well as access a larger inventory of drawing types. However, the licensee has not _

.

l l i delineated the use of these 3rints in any written guidance so control of l the prints and their accepta)1e uses have still not been resolved. The-licensee is considering additional changes.

l .The inspectors observed that operator log content was very diverse and l- depended largely on the individual logtaker. The inspector determined i from interviews with the operators that consistent expectations were- 1 i

either not known or not enforced. One example the inspector noticed was .l that the completion of Technical Specification surveillances _did not '

appear to be required to be logged, although some individuals did while '

some did not. As discussed in Sections 01.2 and 01.3, the inspectors  !

continue to observe further examples where management expectations are not translated into procedural requirements and resultant operator performanc ]

The inspectors determined from their above observations and from the .

specific issues discussed in the following paragraphs, that Operations

'

department ownership and control of the plant remained an issue, but it was being adequately addressed by licensee management. The inspectors concluded, that management's challenge was to instill a critical )

que.stioning attitude and desire to change in the Operations staf .2 Clearance Taaaina Problems

Insoection Scooe (71707) )

The inspectors reviewed the licensee's res)onse to further examples of l clearance tagging problems. The licensee las had an ongoing effort to l correct deficiencies in their clearance tagging system.in response to previously documented problems and violations. Although significant l management attention has been focused on the process, problems have .

L continued to occu !

l~ i f '

i l.

l l

-

.

- - -

_ _ - _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ . _ - _ . _ . _ _

l l

, Observations and Findinas On May 12 maintenance personnel were preparing to work on an air compressor motor when the original clearance order (97-05-064). written l by.0perations to support the work, was. determined to be inadequate l because it had omitted tagging the motor heaters. This had been noted

,

'

by a Chief Electrician during his pre-acceptance clearance walkdown. . He coordinated with the clearance Chief Nuclear Operator (CNO) to research

.and process an addendum to the clearance and add one red tag to the motor heater breaker. #5 on AC distribution panel (ACDP) 4. However, the CN0 then inadvertently wrote the addendum for breaker #15 which was

'

. approved by the Auxiliary Nuclear Shift. Supervisor (ANSS), and the tag was hung. The ANSS based his ap3roval on the need to tag the heaters and was not required to verify t1e adequacy of the clearance. The new tag was verified hanging in the correct )osition per. the clearance order (breaker #15 as written by the CNO) by t1e operator hanging the tag, a second operator verifying the first's work, a senior reactor operator (SRO), and a second Chief Electrician who would be overseeing the wor The SRO verification and the maintenance chief involvement were both short term corrective action requirements implemented for previous problems with hanging of clearances on incorrect components. The .

'

clearance was accepted, and work was ready to commence when an electrician performed a routine check to ensure the motor was )

deenergized and discovered voltage was still present.on the'480 volt l motor heaters. The maintenance-crew stopped all work, consulted with !

the CNO, the first Electrical Chief, and the shift supervisor who then determined the wrong breaker had been tagged. Although four different individuals checked the tag hanging in the correct location per the clearance order, no individual checked or was required to check the CN0's work in writing the addendum for adequacy. Additionally, the breaker labelling in the ACDP did not give any information other than the breaker number, so the operators and electricians could not check that the tag was hanging on a breaker for the motor heaters without using a procedure or print as a reference. Consequently, the incorrect tag was not detected until the last possible barrier,.which was the good work practices of the electricians. The licensee initiated an immediate ;

-investigation and root cause evaluation under Precursor Card 97-204 !

' Licensee management appropriately recognized the significance of this

-

'

event and prioritized the investigation so that the results could be ;

reviewed within the week by the Corrective Action Review Board (CARB). i The licensee also immediately initiated a Night Order to require all new clearance orders to obtain a second review for adequacy and all operators hanging electrical tags to verify against the operating procedure breaker list that the breaker number on the clearance was the correct breaker for the load to be tagged. Compliance Procedure (CP)-

L 115. Nuclear Plant Tags and Tagging Orders. Revision 74, step 4.6.1. had allowed the CN0 to decide if a clearance was complex enough to warrant a .

second review for adequacy. This option was rarely exercised due to 1 Operations manpower limitations.

! The licensee's root cause and corrective action plan was presented to l CARB on May 16 and again on May 23 to address problems the licensee

__

, . _ _ _

_ _ _

. - . . . - -

,

t

!

I 4 noted on the first review. The inspector observed several other l l

'

problems after the CARB had a) proved the final report on the latter !

date. Several deficiencies t1e inspector considered pertinent to the l event were not addressed in the final report or questioned by the CARB including:

-

the unwritten practice by Operations of NOT routinely tagging heaters for electrical clearances unless motor removal was I specified:

,

-

a corrective action system precursor card (PC) was not generated !

after the original clearance was found to be inadequate by the '

first Electrical Chief and the CN0 because the clearance hadn't i been accepted yet:

-

inconsistencies between maintenance management's expectations and i requirements for pre-acceptance clearance walkdowns:

'

-

the involvement of two separate Electrical Chiefs in the pre- !

acceptance walkdowns:  !

-

an item cited as a contributing cause in the report that did not have any associated corrective actions to address i These items were appropriately dispositioned later by Operations management and the CARB after the inspector questioned the However, the items indicated a less than complete solution to the recognized problem and pointed out further inadequacies with CP-115. Violation 50-302/97-05-01, which described four other examples of failure to follow CP-115 was issued to the licensee on June 2. 1997. The inspectors considered this problem to be similar to those problems and considered that the scope of the licensee's pending corrective actions, which include a complete rewrite of CP-115, would be adequate to correct this example. Consequently, the inspectors consider this problem as an additional example of that violation. The licensee has agreed to address the above problem in their violation respons On May 15 the inspectors observed another problem in that two clearances in the "To Be Pulled" box in the Tagging Office were signed for release on May 10 and 11 respectivel Per procedure (CP-115) when the tagouts are released, the authorizing individual identifies the tag removal sequence and component repositioning based on the current plant conditions. The plant conditions that the authorized releaser assumed were no longer assured because the tag removal and repositioning for these tags would be at least 4 to 5 days after the signed releas Operations management indicated their expectation was that the tags be l

removed expeditiously, but there was no stated time requirement in CP-

115. This time delay, in conjunction with changing plant conditions, j could create the potential for personnel injuries or equipment damage.

I

. On May 21. during performance of EFW flow testing. the inspector observed that several red-tagged closed test boJndary valves were

-

-. __ _ _

. - _ _ _ _ _ _ . - _ ___

i l

l

'

leaking and had to be tightened to reduce the leaks. The inspector questioned the operators as to how they manipulated the red tagged valves and determined that the operators considered it acceptable to mani)ulate a tagged valve as long as it was in the tagged direction or

, if tle clearance was not accepted by the work organization._ The

!

inspector observed various minor differences in the operator's interpretations which the inspector attributed to the lack of guidance in CP-115 for this situation. The inspector also observed that Operations management's expectations were that red-tagged components were not to be manipulated. These expectations were neither formally

implemented nor carried out by the operators. PC 97-3478 was initiated to provide corrective action but one week later, on a subsequent EFW flow test, the inspector again observed that a shift supervisor stated that it was acceptable to tighten red-tagged valves as long as the clearance was not accepted by the work organization. Again, this was not the result of any written guidance. Operations management has since clearly defined their expectations that red-tagged components can not be manipulated and incorporated it into the pending Revision 75 of CP-11 The licensee has also identified more problems implementing CP-115. PC 97-3471 documented eight active clearances that had not been recertified to ensure they were still hanging correctly within the required 30 days. l PC 97-3469 documented a tag that was mislabelled for an "A" train '

component but was correctly hung on the "B" train component. It was found after it had been supposedly verified by two licensed operator Both of these PCs were graded as Level Cs and will receive apparent cause evaluation l c. Conclusions 1 The inspector concluded that the licensee's prioritization to ccmplete the motor heater tagging investigation quickly was a good initiative to correct significant problems in a timely manner. However, several deficiencies with that effort and other observations caused the l inspectors to conclude that significant problems still exist in the l licensee's tagging process. The existing revision of CP-115, Revision 74. does not adequately delineate management expectations for tagging I and operation of ecuipment. Plant labelling remains weak. Improper em)hasis was placec on ensuring each tag was hung on the properly la)elled component and not on ensuring that clearances were accurat Allowing CN0s to decide if a second review was required was inadequate and an example of inconsistent implementation and lack of verification of management expectations. The interpretation that a clearance was not valid until " accepted" was not conservative. The inspectors concluded l that consistently implementing Operations management expectations in the field remained a challenge to the licensee. The inspectors reviewed the changes in Revision 75 to CP-115 and will inspect implementation of the revisio This effort will be documented in a future repor I

._ _ _ . . - - - - . . - . . .,_ - _ .

f l

,

01.3 Containment Penetration Trackina

,

a. Insoection Scooe (71707)

The inspector reviewed the licensee's process for tracking and controlling containment penetration breaches in preparation for a l pending reactor coolant system (RCS) draindown evolutio b. Observations and Findinas The inspector observed that adecuate guidance existed to delineate when containment closure was requirec and that the SS00 was the responsible individual to ensure penetrations were closed when containment integrity l was required. However, the inspector observed that an active index of specifically which penetrations were open did not exist, nor was it l required. Therefore the SS00 was unable to state how many open

! penetrations existed in the containment at any given time. The inspector reviewed the procedural requirements contained in CP-115, l Nuclear Plant Tags and Tagging Orders, Revision 74, and observed that l the licensee utilized the clearance tagging system to identify and track i each open penetration. Each clearance holder that had a potential open

penetration was required to complete a Form 6 that delineated closure

!

plans. Although the penetration might not have been open at the time, all active clearances that had the potential to open a penetration were required to have this form in the containment penetration logbook. The inspector reviewed this book in the control room on May 26 and did not identify any penetrations that were open and did not have a form in the book. However, the inspectcr identified numerous administrative problems. An uncontrolled and inconsistently used index list was present in the front of the book. The licensee intended for this to be used to track penetrations open solely for leak rate testing but this i expectation was not documented, the log was not an accurate reflection

of open senetrations, and SSODs had various opinions on the use of it.

l The log lad numerous Form 6s for the same penetration because the licensee's system logs openings by containment penetration number only, so a single pipe penetration may have numerous openings, each with a Form 6. The form did not have a place to annotate where the opening

actually was but the inspector noted it was frequently handwritten below

'

the penetration number. The inspector also observed redundant Form 6s for the same penetration opening. some with altered guidance and

.

different aproval signatures. One single penetration had four separate

!

Form 6s. None of the extra forms presented a significant challenge to closing the penetration when required, but the inspector was concerned l that the licensee's system was uncontrolled and created the potential

'

for more than one penetration closure plan. Another penetration Form 6 had a note that stated Operations would close specific feedwater valves if they were installed in the system. The SSOD was unfamiliar with the details of this penetration which was later determined to be newly installed valves on the EFW cavitating venturis. The inspector was concerned if the guidance was adecuate to support closure of the penetration. The licensee revisec the Form 6 to clearly describe the closure pla .- __ _--_-_

The inspector physically inspected the open penetrations and observed that Form 6's were staged locally that differed from those in the control room log. Some of these differences included the responsible group for closure. The licensee addressed this concern by eliminating the local copies of the Form 6. making the control room copy a single controlled copy to eliminate the potential for numerous conflicting r copies. The inspector did observe that the penetrations did have generally good c msure plans and equipment was appropriately staged to close the penetratio The licensee also removed the uncontrolled index in the penetration log book but placed it in the back of the log book to ensure it was used for only leak rate test tracking. This and the other planned corrective actions were not permanent solutions in that they were not incorporated into any written guidance or changes to CP-115. The licensee was evaluating their program to ensure their expectations would be consistently implemente Licensee management initiated an unannounced drill on May 28 that simulated a loss of decay heat removal and required Operations to initiate containment closure. The inspector reviewed the results of the drill and observed that the requirement of closing containment within two and one half hours was easily met. Discrepancies were identified by the licensee's Quality Assurance auditor regarding labelling of staged equipment and penetrations, expired rigging, and cognizance of closure responsibility by groups other than Operations. Appropriate actions were taken to address each deficienc Conclusions The inspectors concluded that the licensee's tracking of containment penetrations was a challenge to the SSOD's ability to prioritize resources and ensure containment closure when required. The inspectors considered this a weakness. However, the licensee's res)onse to run an unannounced drill was proactive and a good test of the a]ility to meet the containment closure requirement Operations Procedures and Documentation 03.1 Doerator Workaround List (71707)

The inspector reviewed the licensee's workaround '.ist which is one of l the licensee's restart items. The licensee's d.:finition of a workaround is a " tolerated, but economically corre' tab'.c. practice or condition that negatively impacts transient response, or is caused by a procedure, process, or equipment not performing as designed or needed and additional work is required to achieve the necessary result." The licensee's list contained 25 items. 16 of which were firmly scheduled to be fixed before the licensee's scheduled restart date. Their goal was to reduce the number of open items to less than 7 3rior to startup which the inspector considered achievable. Several of t7e remaining items were beir.g evaluated and would likely be fixed prior to startup. The

- - _ _ _ _ _ - _ _ _ _

I l

inspector reviewed the items scheduled to remain after startup and did not identify any problems with the licensee's planned corrections or schedule. The inspector noted that each item was assigned to a single accountable individual and had a scheduled date for completion. The inspector also noted that the number of items on the licensee's list increased significantly from 11 in January of 1997. to the current 25 in Ma This was a result of a licensee effort to solicit any other potential workaround items from the operators to ensure they were tracked and corrected. This effort yielded numerous items, most of which were not workarounds. The ins)ector concluded this was a good effort by the licensee to ensure pro)lems affecting the operators were identified. The ins)ector did not identify any problems with the items on the list during tais preliminary inspectio The inspector issessed the licensee's performance, with respect to this restart-related issue, in the five NRC continuing areas of concern:

. Management Oversight - Good

. Engineering Effectiveness - Adequate

. Knowledge of the Design Basis - N/A

. Compliance with Regulations - Adequate

. Operator Performance - Adequate 04 Operator Knowledge and Performance 04.1 Operator Performance Observations and Safety Culture Examoles a. Insoection Scoce (71707)

The inspectors continued to review and document examples of Operations performance that were indicative of the o)erators questioning attitudes and safety culture. Licensee management 1as focused on improving performance in these area l b. Observations and Findinas An inspector observed a Justification for Continued Cperation (JCO) Book in the Control Room which had approximately 8 JCON identified. All of the JCO's were dated in 1989 and shift operators were not familiar with the reference and could not state whether any of the JCO's were active or resolved. The book had a disclaimer that it was not official and might not be current: however, it was in the reference book shelf in the ,

middle of the Control Room for anyone to review. The licensee removed I the book. Tne inspector was concerned that there was inaccurate and j uncontrolled information available to operator It was stated by Operations during a morring turnover that draining of the only full Once Through Steam Generator (OTSG) was not a Operations responsibility. It was to be conducted by the test director. During ;

the turnover operators asked questions that resulted in changing some of !

the planned tagging boundaries. The inspector considered this an !

example of poor Operations ownership and plannin I

l

)

I I

o

,

i i

Following an event at another similar ')lant, the licensee researched the method of level indication on their mace-up tank '(MUT) reference leg to

,- assess their vulnerability to a similar proble On May 5 and 9 the

! inspector observed members of plant operatirig management state the MUT used a dry reference leg. However, on May 7 and 14. the inspector-l observed members of Engineering state that the MUT used a filled, wet reference leg. The latter version _was correct. The inspector concluded

'

this was an example of )oor research into~a problem and poor-communications between Engineering and Operations.

.

Abnormally high decay heat closed cycle cooling pump 1B amps were cuestioned on a startup by operators on May.12. This resulted in ciscovery of problems-with a positioner on valve DCV-178. The inspecto .

'

concluded this was an example of a good questioning attitud The inspectors observed several examples of poor plant housekeeping that ;

indicated ownership of operating spaces by buildings operators still has I room to im) rov The examples included items such as duct tape on valve flanges, clairs and carts left in safety related areas, and unchocked equipment boxes.

l Conclusions i

l These observations' caused the inspectors to conclude that Operations ownership and cognizance of plant spaces, equipment, and processes l remains a challenge to the licensee. However, licensee management was

,

aggressively pursuing the causes of the problems in an effort to improve l performance.

,

l The inspector assessed the licensee's performance, with respect to this restart-related issue, in the five NRC continuing areas of concern:

l e Management Oversight - Adequate l * Engineering Effectiveness .- N/A

e Knowledge of the Design Basis - N/A

' Compliance _with Regulations - Adequate

. Operator Performance - Adequate 06 Operations Organization and Administration 06.1 The-following organizational changes were announced by Florida Power y Corporation (FPC):

. Effective May 5.1997 Mark Marano became the Director Nuclear-Site & Business Support. which combines the Director. Nuclear Operations Materials and Controls, and Director. Nuclear >

Operations Site Support. into one positio '

. As of May 20, 1997 Walter Pike was a) pointed Manager. Nuc kar i Regulatory Assuranc Ed Schrull, w1o was filling this position t

-, _- -_ _

, . ---y _ . p

. - . . .

.- . . - . -- - - - . ~ - . . - - - - - - . _ - - -

'

,

temporarily, remains in the Regulatory Assurance group as Supervisor,for restart commitment * Effective May 5, 1997.-Dave Kunsemiller was appointed Acting .

Manager. Nuclear Licensing. replacing Brian Gutherman, who will be in SRO Certification training-for the next six month . . Effective May 5,1997. John Lind was appointed Acting Directo '

Nuclear Operations Training, replacing Rolf Widell who will also be in certification training for the next six month Quality Assurance in Operations t 07.1 Licensee Self-Assessment Activities ,

t Insoection Scooe (71707. 40500).

'

L The inspectors reviewed various licensee self-assessment activities and corrective action process which included:

,

'

. routine reviews'of Nuclear Quality Assessments (NOA) activities _

and surveillance report findings:

l * observation of the NQA monthly Audit 97--04 exit interview and  !

review of the report: )

{

  • reviews of precursor cards entered in to the corrective action system; e observation of management CARB meetings:

e observations of a licensee Restart Panel meeting: ,

e observations of the licensee's Plant Review Committee meetings:

e observations of the licensee's Nuclear General Review Committee offsite review group meeting on May 1 Notable observations are discussed belo Observations and Findinas The inspector's review of NQA inspections identified that they continue l to be responsive to 'icensee-problems and requests by licensee

management to review suspected weak area NQA inspections have i

identified some significant findings including electrical switchyard battery and equipment degradation. Technical Specification surveillance scheduling into the 25% grace period, poor control by engineering ,

management of a corrective action backlog, and potential emergency

.

diesel generator surveillance preconditioning. The inspector observed

NQA auditors present for almost all significant licensee evolutions and concluded the NQA organization was appropriately planning their L

,

m-+ - r -www +- r.--- P g _-- = ry,y---y ,7 7 h'

discretionary inspections to review a broad spectrum of areas. The

. inspector reviewed pending NOA staff assignments and rotations with other site departments and concluded licensee management remains committed to staffing NOA with diverse and talented individual The inspector attended the Nuclear General Review Committee (NGRC)

meetings on May 14. 1997, and observed that the NGRC reviews ~were a benefit to the licensee. The Committee ap) eared knowledgeable, activ and the members demonstrated a desire for ligh standards. The Final Safety Analysis Report (FSAR)' requirements appeared to have been adequately met during the meeting. The NGRC sub-committees were thorough and appeared to provide adequate reviews of their areas. The overall board was relatively well focused, maintained their work scope and perspective, yet allowed for good cross-discussion of significant licensee issue Conclusions The inspectors concluded the licensee self-assessment activities were

' effectiv . i The inspector assessed the licensee's performance, with respect to this

,

restart-related issue in the five NRC continuing areas of concern

)

. Management Oversight - Good 1

. Engineering Effectiveness - N/A e Knowledge of the Design Basis - N/A e Compliance with Regulations - Good l

. Operator Performance - N/A

'

07.2 Corrective Action Proaram Insoection Scooe (40500) -!

I The scope of this inspection was to examine the problem identification ;

L portion of the licensee's corrective action program. This included i

!

reviewing licensee actions implemented to address weaknesses identified by the NRC during the Integrated Performance Assessment Process (IPAP) i inspection and documented in Inspection Report 50-302/96-20 !

Compliance Procedure CP-111. Processing Of Precursor Cards For .

Corrective Action Program. Revision 56. Las reviewed to determine the )

l requirements for the initiation, grading, evaluation, and tracking of ,

PC In' addition, selected PCs initiated during the time period from '

l- December 1996 to May 5,1997, were reviewed to verify that the PCs were '

being processed in accordance with the requirements of Procedure CP-11 A sample of PCs was reviewed to determine if the PCs were pro)erly

'

graded in accordance with Procedure CP-111. Selected Grade "3" PCs were reviewed by the inspectors to assess the adequacy of Engineering

! evaluations performed to determine if there were design basis issues :

associated with-the PCs. The )urpose of these Engineering evaluations :

. was to assist the 0)erations Slift Manager in making a determination as to whether or not t1e licensee was required, by 10 CFR 50.72 or 10 CFR

-. __ - -- -- . . . . .

._ _- . _ _ _ _ _ _ . . _ . - __ . _ . . _ __ _ _ _.

!

l l

! 50.73. to report the issues to the NR The ins)ectors reviewed quality assurance (QA) assessments and audits performed ]y the Nuclear Quality l

! Assurance group in the Quality Programs Department. The inspectors also '

! interviewed selected plant personnel to ascertain their views on the PC

! proces ,

'

b. Observations and Findinas Corrective Action Program Imorovements and Procedure Revisions The NRC performed an IPAP inspection in July 1996 and identified weaknesses in the licensee's corrective action program. The licensee issued Revision 55 to CP-111. which addressed some of the weaknesses identified during the IPAP inspection. The current program, corresponding to Revision 55 of CP-111, went into effect November 2 . Revision 56 to Procedure CP-111 went into effect on February 25, 1997. The main differences between the current program and the old arogram (prior to Revision 55 of CP-111). were summarized as follow hen a problem was identified under the old program, it would be written on a P If the PC was determined to involve a significant problem, the PC would be upgraded to a problem report (PR). If the PC was determined to involve a minor problem, it would remain a PC. The licensee determined (and the NRC concluded during the IPAP inspection) that this system would often introduce unacceptable time delays in addressing significant aroblems. Under the current program, the licensee eliminated t1e PR system and established a singled graded PC syste All problems identified on a PC are now being processed, from initiation to closure, as a P Also, the old program did not lend itself to timely and consistent review and evaluation of the various problems. The current program utilized a precursor card screening committee (PCSC) which met daily to grade the PCs into one of four grades (A-D), with each grade invokin different time goals and levels of attention. Although not defined in Procedure CP-111, most of the major departments had representation on the PCS The inspectors discussed the makeup of the PCSC with licensee personnel who stated that the PCSC would not conduct business unless all chairs were fille Suspected design basis issues were now being tracked by management against a 10-day allowed review tim Another improvement was the establishment of a CARB, which was comprised of senior site managers (Directors) who meet to review root cause determinations and corrective action plans for Grades "A" and "B" PC In addition, training and qualifications requirements were established for persons performing root cause evaluations for Grades "A" and "B" PCs and apparent cause summary reports for Grade "C" PC At the time of this inspection, the licensee had prepared and approved, but not yet implemented, Revision .57 to CP-111 to further improve the corrective action progra Licensee personnel indicated that this

_ _ _

_ _ _ . _ _ . . _ . _ _ . _ _ _ _ - _ _ _ _ . _- _ - ___ ___.

l  ;

!

,

o l

l  !

latest revision had not gone into effect because they were in the process of providing training to plant personnel on Revision 5 The ,

inspectors reviewed Revision 57 and noted that improvements in the  ;

process included, but.were not limited to, the following.

i e- Established the goal and ex)ectation that, to'the extent  !

l 3ractical., that'PCs'should 3e presented to the Nuclear Shift :

! ianager (NSM) within the same shift that the problem is-  :

'

identified. There was no time goal. specified in Revision 56 for presenting'a PC to the NSM, In fact. Revision 56. implied that-,

l, for problems determined to be not urgent by-the initiator, the PCs

! could be mailed to the NSM. The inspectors observed that, in r

'

general. PCs~were being reviewed by the PCSC'on the work day ~ .

following the initiation date given on the car . Reduced the time allowed for develo) ment of corrective action

. plan Request for extensions to t1e allowed time must be approved by a board of manager * Added Grade C Precursor Cards to the ones having corrective _ action implementation tracked by the Nuclear Safety Assessment Tea (NSAT).

. Added more definite requirements for determining extent of L condition and corrective actions to prevent recurrence for Grade C_

"

Precursor Card Another improvement to the process that was-in the implementation stages was the transition to a more sophisticated software for the data bas This improvement would provide for better tracking and trending capabilities and would allow generation of reports not currently -

available, such as a summary of all PCs written against a syste During further~ review of Revisions 56 and 57_to Procedure CP-111 the inspectors noted the following observations which were brought to the  ;

attention of licensee managemen j e- The word "should" was used.often throughout the procedure, and in some of those instances, it appeared that "shall" would have been ,

the more appropriate word to use. The inspectors discussed this 1 observation with licensee management who indicated that the management expectation which had been communicated to pinnt

<

personnel was that "should" would be treated the same as "shall" during procedure usag i

!

! i

!

i

!

!

. , .. .

-, j

i

. The procedure did not provide clear guidance with regard to the l NSM signing and dating the PC to provide a record of the NSM's

! review. This observation also applied to the SSOD signing and dating PCs to indicate the SS0D's review for operability when required. The inspectors noted some examples where there was more than one working day after the initiation date before the PCs were reviewed by the PCSC. The inspectors were unable to determine when these PCs (that took more than one work day to reach the PCSC) were reviewed by the NSM because the NSM initialed on the PCs to indicate the NSM review but did not provide the date of the revie Precursor Card Review The inspectors reviewed a small sample (15) of Grade "C" PCs initiated during the December 1996 through April 1997 time period. The inspectors selected the sample to include the work of as many organizational groups (assigned as responsible PC manager or owner) as possible. Ten organizational units were represented. The original intent was to review only closed status PCs. However, the final sample included thirteen PCs that had been closed and two PCs that were still ope The files for the sample of 15 Grade "C" PCs were obtained and reviewed for the attributes of problem statement clarity, immediate corrective actions (C/A), reporting requirements, grading, cause determination, definition of C/As including restart issue screening, and timelines Observations related to the sample of Grade "C" PCs are summarized belo C/A Times PC N Oroanization (Days) Observations 97-0038 Design Eng * Comments discussed belo Modifications 57 **

97-0046 Maintenance 22 **

97-0697 Maintenance 23 * Not all problems had corresponding CAs. Some CAs lacked specificity and dat Systems Eng *

97-0700 Design Eng * Time for completion of apparent cause extended to June 27, 199 Planning 10 *

97-0723 Outage Mg *CAs lack specificity and date 97-0767 Maintenance 10 None 97-0784 Licensing 0 None 97-0786 Procurement 23 None 97-0800 Operations -

Non Time for completion of apparent cause extended to June 27. 199 ;

i

^ lt~

l l

'

L 15 97-0867 Design Eng CAs not explicitly' state Security- 8 Apparent cause given was ;

actually restatement of '

problem rather than cause.

l

-

97-2360- 0perations 11 ** CAs were not complete, i

'

- * Indicates the Apparent Cause Evaluator (ACE) had not received th l training (required by procedure CP-111).for the task he performed.

L ** Indicates neither the ACE nor the approving Responsible PC Manager ,

j (or designee) had received the training required by Procedure CP-11 With regard to the time allowed for preparing the apparent cause summary

- and the corrective actions for a Grade "C" PC (refer to column labeled

"C/A Time" in above summary), CP-111 specified 15 calendar days plus 5 days review time. The procedure (Steps 4.6 and 4.11) provided for . l extensions to the time, as long as a record of the extension request was included in the file for the PC. These procedural requirements were contained in Steps 4.6, 4.11 and Table 2. Event-Reporting Timetabl The-extensions.for five of the PCs (97-0039. 0046, 0697, 0786 and 0867).

were in violation of those )rocedural requirements in that the 20-days (total time) specified in C)-111 was exceeded and there was no record of'

any extension requests in the file. Based on the statistics of the sample size, the inspectors concluded that this problem-was extensiv )

l The inspectors noted that a contributor to the.PC timeliness problem was the inconsistent information that was being provided to the responsible PC manager regarding the allowable timc to respond to a Grade "C" P Some Grade "C" PCs were transmitted with a note which allowed 20 working days for the response, while others were transmitted with a note which allowed 20 calendar days for the response. The correct time was 20 ,

calendar days as specified in Procedure CP-111. The licensee stated '

l that they were aware of timeliness problems. The timeliness problem was ,

identified during OA Audit 97-04 where a PC was initiated by OA to

'

i l

address this problem (97-2754), with the recommendation that the PC be graded'an "A." The inspectors noted that the PC was given a Grade "B" by the PCSC. The inspectors informed the licensee that these timeliness I problems were examples of failure to follow Procedure CP-111 that ,

represented a violation of 10 CFR 50, Appendix B, Criterion l Instructions Procedures and Drawings. Two additional sets of examples l will be discussed in the following paragraphs within this sectio (

Therefore, this issue will be identified as the first example of VIO 50- i

! 302/97-07-01, Failure to Follow Procedure CP-111 for the Pr cessing of ,

Precursor Cards.

'

Precursor Card 97-0038. which involved two spring can hangers on small l bore piping, had three notes in the. form of questions written on the card. One of the questions was: "Was there an operability concern?" l Answers to these questions were not documented in the apparent cause !

L . summary or corrective actions for this PC. The inspectors learned that l such notes may be written on a PC at the PCSC meeting or at a later i

stage. As far as the inspectors could determine, operability of the 1

! questionable hangers had not been addressed in any other documented

l i

.., . _ , _ ,_ . . . _ . _ _ ,. _

_,- - _ _ , -

. - _ - _ _ _ - - _ _ _ _ _ - - _ _ - _ . - - _ _ _

16  :

for This circumstance raised the question regarding the' status of -

notes written on PCs,'as this matter was not covered by the procedur A representative uf the NSAT indicated that this question would be reviewed further.

i l Step 4.10.1.1 and Enclosure 8 of CP-111 required that' documentation to l ensure traceability of closure, along with due dates, shall be included withtheapparentcausesummaryforaGradeCprecursorcard. As noted in the review summary above, four of the PC files were weak in complying with these procedural requirements. In three of these four cases. the ,

person preparing the apparent cause summary was not "gualified" in accordance with CP-111. There appeared to be a correlation between the -

,

. Weak apparent cause summaries and the lack of apparent cause training of l the individuals performing the evaluations. The inspectors concluded l that the exam 31es represented a weakness in the PC process in that- i continued lac ( of specificity in the corrective action statement could i l -lead to an identified deficiency not being adequately corrected in a l l timely manne These examples were discussed with licensee management I who. indicated'that the specific PCs in question would be reviewed and 1 additional actions taken as necessary..

,

Personnel Trainino and Qualifications Step 3.2.5.1 of Procedure CP-111 stated that the ACE must be qualifie which included receiving ap]arent cause training and performing ACE

! functions at least yearly t1ereafter. During the review of the Grade

"C" PCs listed above, the inspectors noted that individuals performing the ACE function for nine of the fifteen PCs were not qualified in that they had not received the apparent cause training. Also, for three of these nine PCs, neither the ACE nor the approving Responsible PC Manager

'had received the apparent cause trainin Also, the inspectors j

'

identified one case where the Root Cause Team (RCT) Leader for a Grade

"B" PC (97-0052) was not fully qualified to perform the function of a RCT Leader in that the individual had not received all-the specified training. Step 3.2.11 of Procedure CP-111 stated that the NSAT was responsible for maintaining the list of qualified RCT Leaders. Step ,

'

4.3.2.1.4 of Procedure CP-111 further stated that the PCSC will  !

designate a qualified RCT Leader for Grade "B" RCTs. The inspectors reviewed the list of qualified RCT Leaders and noted this individual was listed as not being fully qualified. The inspectors discussed this

,

issue with licensee management who stated that the decision was made to l use individuals who had not been fully trained to perform the ACE and <

RCT Leader functioris, in part. to address the PC backlogs. Licensee

,

management further. stated that.they considered the intent of CP-111 was

'

being met as long as the approving Responsible PC Manager had received L the ACE training. The inspectors noted that this was not always the

case. Licensee management also stated that a fully qualified RCT Leader

! from the NSAT particioated in the root cause evaluation for the Grade

"B" PC in cuestion. however, the inspectors noted that the Grade "B" PC did not incicate that there were other participants besides the RCT

Leader. The inspectors informed the licensee that using non qualified .

" individuals to perform the functions of the RCT Leaders and the ACES for L

, , - , , . ,. - ---n, e --

r-

Grades "B" and "C" PCs was another example of failure to follow Procedure CP-11 This item will be identified as the second example of VIO 50-302/97-07-01. Failure to Follow Procedure CP-111 for the Processing of Precursor Card Precursor Card Grading The inspectors identified that one of the PCF functions was to review the PCs daily and grade each PC in accordance with Enclosure 3. PC Grading Guidance, of Procedure CP 111. The grades available for the PCs were A. B. C. and 0, with "D" having the least significance. The guidance stated that "when the applicability of a higher grading is uncertain, be conservative and presume it is applicable. Defaulting to a higher grade with subsequent downgrading, demonstrates a higher level of safety sensitivity, than defaulting to a lower grade. ." The guidance for Grades "A" and "B" PCs stated there was significant consequences for safety and equipment damage. Grade "C" guidance stated that there was moderate consequence for some reduction in safety and minor equipment damage. Grade "D" guidance stated there was low or no consequence for minor or no equipment damage and no reduction in safet The inspectors reviewed a printout of the 2978 PCs that were initiated from January 1.1997, to May 5.1997, in order to select a sample of PCs for detailed examination. Of the 2978 PCs. 656 were graded as "C" and 2245 were graded as "D". The remaining PCs were graded as "B" The inspectors reviewed 578 PC summaries from the printout to determine if the grading was within the PC grading guidance of Procedure CP-111. The inspectors selected 79 PCs for a detailed examination against the grading guidance. Of the 79 PCs examined. 72 were graded "D." The inspectors did not have any questions regarding the seven PCs reviewed that were graded either "B" or "C." However, for a number of the Grade

"D" PCs examined, the guidance listed in Enclosure 3 of CP-111 indicated that the PCs should have been graded as a "C." These PCs met some portion of the guidance for grade "C" PCs. These grade "C" guidance areas were: 1) some reduction in safety. 2) equipment damage. 3)

unavailable fire protection equipment. 4) minor spills or spread of radioactive material and 5) calculation errors. Step 4.3.2.1.1 of Procedure CP-111 stated that the PCSC was to grade each PC in accordance with Enclosure 3 of Procedure CP-111. Several examples of these D level PCs and the applicable grading criteria for a C level are as follows:

. PC 97-0296. Calculations - discrepancies between the breaker trip setting on drawings, calculations, and the breakers in the fiel There would be some reduction in safety if the breaker trip setting were not set properly. Grade "C" guidance - some reduction in safet * PC 97-0376. Potential design basis reeuirement to test fire pump house ventilation equipment such as solenoids for the damper Failures of the solenoids may prevent the damper from opening and prevent the diesel driven pump from operating as designed. This l

PC met example 15 of the Grade "C" guidance - Unavailable fire protection equipmen . PC 97-0624, Appendix R Valve FSV-638 had its yoke broken while closing. This valve was a fire protection valve. This PC met example 15 of the Grade "C" guidance - Unavailable fire protection equipmen !

. PC 97-1540. Relief Valves MUV-137 and MUV-139 should be added to Inservice Test (IST) program since they may be needed to protect i the MUT from overpressur Grade "C" guidance - some reduction in l safet . PC 97-1671. Flush of Valve MUV-191 may have caused spread of contamination and high dose rate needs nipple welded ori. This PC met example 13 of the Grade "C" guidance - dinor spills or spread of radioactive materia * PC 97-1871. Unanalyzed Emergency Diesel Generator (EGDG)-1A l loading scenario during Loss of Coolant Accident / Loss of Offsite !

Power (LOCA/ LOOP) caused by loss of DC powe This may be an i equipment reliability issue that affects the EDG and emergency ;

feedwater pum This PC met the Grade "C" guidance - some I reduction in safet l In discussions with the inspectors, licensee management personnel stated that a management decision was made to grade certain PCs as "D" instead of "B" or "C" because the ]roblems in these PCs were considered to be additional examples of ]ro]lems that had already been evaluated in special categories, suc1 as FSAR Discrepancies. Technical Specifications Discrepancies. Enhanced Design Basis Document (EDBD) Discrepancies, and l Design Basis Issues. Therefore, there was no need to make them Grade '

"B" or "C" since these PCs were just examples of the other special categories and would be tracked accordingly. The inspectors could not verify that any of the specific Grade "D" PCs reviewed had been downgraded due to the PC being tracked in one of these special areas, in that there was no documented justification included in any of the PCs to indicate whether the PCs had been downgraded or not. The inspectors verified that some of the grade "D" PCs were assigned to other ,

departments and s]ecial groups such as Nuclear Operations Engineerin Nuclear Plant Tec1nical Support. System Readiness Review Group, and Design Basis Document Group, for evaluation and corrective action. The inspectors expressed concern that some Grade "D" PCs were not being processed in accordance with the guidance in CP-111. In addition, the inspectors also noted that Grade "D" PCs were not required to be tracked for apparent cause and common cause identification and corrective

, action. The inspectors informed the licensee that the above six l examples of improper grading of PCs was another example of failure to i

follow procedure CP-111. This item will be identified as the third example of VIO 50-302/97-07-01. Failure to Follow Procedure CP-111 for the Processing of Precursor Cards.

- _ - . ...- - . ... . - . - ~ ... - - . --

e . - . ~ - - . . - - . . -

[

l

!

$

,

- Personnel Interviews The inspectors _ interviewed several individuals within operations to -  :

'

. ascertain their views on the PC system. The operations personnel indicated that, in general.-the PC system was an effective method for

. identifying problems. There was one comment made during the interviews regarding the lack of feedback being provided to PC originators. Some.

, of the individuals indicated that there should be more feedback provided l to the PC originator regarding what actions were being taken to the PC-l rather.than the statement that the PC had been entered in the database l for trending. This comment appeared to apply to Grade I'D". PCs which ,

included'a generic response to the PC originators thanking them fo ,

l' submitting the PC. The Grade "D" generic response also informed the PC originator that the PC was graded a."D" by the PCSC which indicated that

'

no apparent cause evaluation was necessary and the information was being entered in the PC database for statistical trending. The-inspectors discussed this comment with licensee personnel who indicated that this comment would be addressed with the implementation of Revision 57 to -

l Procedure CP-111. .which will require a written response for Grade "D" PCs. The inspectors also noted that a similar comment had been

-

,

identified by 0A during interviews of craft personnel. 0A wrote a PC l (97-1311) on this issue and the PCSC graded the PC as a "C." l l

. Observations and Findinas (Susoected Desian Basis Issue Evaluations)

l The inspectors selected three PCs for review which had been classified ( by the licensee as being suspected Jesign basis issues (SDBIs). These PCs were classified as Grade "B" PCs in accordance with licensee

-

Procedure CP-111 because the PCs were being considered as SDBI The inspectors reviewed the PCs to assess-the quality and the adequacy of the SDBI evaluations performed by Nuclear Operations Engineering (NOE).

Two of the PCs (97-1515 and 97-1520) are discussed below. The third PC 1

'

(97-2026) is discussed in paragraph E8.3 of this inspection re) or During-review of the PCs and the associated NOE evaluations, t1e inspectors made the following observation PC 97-1515 Waste Disposal Components not Seismic Class I per the FSAR/EDBD This PC involved seismic classification discrepancies for several i components in the waste disposal (WD) system. These discrepancies were j identified during the System Readiness Review (SRR) performed by the -

- licensee for the WD system. The PC identified a potential design discrepancy and indicated that the WD system components were not -l

- seismically qualified as stated in the FSAR. FSAR Section !

!. Structural Design Classification, paragraph 5.1.1.1.i. stated that the L WD system tanks. pumps, and other components were designated as seismic Class I.- These components were also designated as seismic Class I in FSAR Table 11-5 and the CR-3 Enhanced Design Basis Document (EDBD). The PC requested that N0E evaluate the discreaancies identified in the PC to

! determine if CR-3 was meeting its design ) asis for the WD system.

l-L ,

l t

, .w.-- , s y----- . .. ,, ,,.-3,,..-.,.-.e i c , - .m, - - - - - , .-,--4 e.- , , -

The NOE evaluation for this PC, dated April 7, 1997, concluded that the seismic design discrepancies did not constitute a design basis issu ,

The bases for the N0E determination included the followin l

"

. .the defined conditions will not result in systems, structures or components being rendered incapable to perform their safety function in preventing or mitigating design basis events." j e- Regulatory Guide (RG) 1.143. Design Guidance for Radioactive Waste l Management Systems. Structures, and Components Installed in Light- I Water-cooled Nuclear Power Plants, indicated that systems handling !

radioactive materials in liquids need not be seismically designe . RG 1.143 stated that gaseous radwaste systems should be ;

seismically qualified. However, the N0E evaluation stated that i the lack of seismic design for the CR-3 waste gas piping

'

associated with the waste gas decay tank (WGDT) and waste gas surge tank (WGST) did not constitute a design basis issue provided i the established radioactivity limit for the tanks was not exceede A Florida Power Corporation (FPC) letter to the NRC dated June 16. 1982, established the radioactivity limi . Simultaneous failure of the piping associated with the WGST and

, WGDT was not assumed based on earthquake experience data for small bore piping. Further, the actual piping accelerations associated with low frequency systems at 5% damping would be significantly less and not a credible failure mode for simultaneous failure . The N0E evaluation stated that the design basis for the WGDT was to ensure radiation doses resulting from a postulated WGDT rupture accident would be within 10 CFR 100 limits, as discussed in FSAR Chapter 14.2. The ins)ectors concluded that none of the above statements demonstrated design ] asis compliance and found several problems with the above determinations as discussed belo . The licensee's position as to what constituted a design basis issue was narrow and not fully consistent with the regulation This position was defined in licensee Procedure CP-111. Processing of Precursor Cards for Corrective Action Program and was being implemented by N0E during the preparation of SDBI evaluation The inspectors noted that 10 CFR 50.34(b) requires that the FSAR

"

. .shall include information that describes the facility, presents the design bases..." Accordingly, the information l included in FSAR Section 5.1.1.1. FSAR Section 11.2, and FSAR Table 11-5 regarding the WD system would constitute the design basis for the WD system component . RG 1.143 was not included or referenced in the FSAR and therefor the applicability of the RG to the CR-3 licensing and design bases had not been established. Accordingly, the basis for the lack of l

l l

l

_.. _ . _ . _ _ _ _ _ _ _ _ _ _ __ _ _ _ . _ _ . _ _ ~ _ _

t l

L  ;

21; r L

seismic qualification of the liquid WD systems components was not i clea !

  • The radioactivity limit for the WD system tanks specified in FPC's June 16. 1982, letter (less than or ecual to 39,000 Curies in each '

tank) did not constitute a licensing /cesign basis.. Accordingly, the lack of seismic qualification for the gaseous WD system as stated in the FSAR'could be a design basis issue. In additio dispositioning the lack _of seismic design for the WGST and WGDT as not constituting a design basis issue " .provided compliance with the inventory limit is maintained" was inconclusive and ope No -

E

'

action was taken to determine whether the radioactivity limit (specified in the June 16, 1982, letter) in the WGDT had been '

f- exceede * The engineering judgement related to simultaneous failures of *

piping and actual piping accelerations at damaing values higher

'

than the design values, was not relevant to t1e determination of design basis compliance and was not adequately supporte . The FSAR Section (14.2.2.8) referenced in the N0E response to the PC did not provide the design basis for the WGDT, but described the analysis performed to show that if a WGDT were to rupture, the 10 CFR 100 limits would not be exceeded. The design basis for the-WGDT stated in the N0E response was not consistent with the design '

l basis for the WGDT stated in FSAR Sections 5.1.1.1 and 11'. These two FSAR Sections indicated that the design basis for the WGDT and the related piping (Seismic Class I) was to maintain their functional integrity during and after a seismic even * The N0E res)onse to the PC did not attempt to address the ,

historical Jasis for the seismic classification of the camponents, the current FSAR and EDBD specification, or the anomalies with the licensee's configuration management data base and the design drawings (302-series flow diagrams).

PC 97-1520 Unknown if Reactor Building Pressure Sensing Lines Meet Requirements of Regulatory Guide 1.11 This PC involved a question of whether the design of the reactor building (RB) pressure sensing lines was in compliance with NRC Regulatory Guide (RG) 1.11, Instrument Lines Penetrating Primary Reactor Containment. This issue was identified by the licensee's FSAR Review Project Team. The.PC stated that, in response to an NRC question FPC was required to 3rovide design details in the FSAR demonstrating compliance with RG 1.11.. FSAR Section 5.3.1. did not provide the required design details for the RB pressure sensing lines, i The NOE evaluation dated April 7, 1997, concluded that this was not a l design basis issue (DBI). The inspectors had several concerns with this conclusion as follow _ _ . . .- -. ,. - -

- .-.----- -- - - - . - - - - - - - - -

_

!

,

i

{

e lhe N0E evaluation stated that deviations from design values such '

as those identified in the FSAR or Enhanced Design Basis Document .

! -(EDBD) may or may not constitute a DBI. It further stated that a '

" condition should only be considered a DBI if the deviation prevents the SSC from accomplishing its functional goals." This position as to what constituted a DBI was consistent with 3rocedure CP-111. However, this definition was incomplete-in that-it did not include all design related. aspects of the reportability requirements of 10 CFR 50.34, 50.72, and 50.7 . .

~

e .The NOE conclusion further stated that the lack of any ,

correspondence

"

between the NRC and FPC on this topic since 1973 is i

... strong indication that the issue was resolved" is not an-adequate basis for the determination that the issue is not a DB Lack of regulatory correspondence does not constitute a licensing i basi . The NOE conclusion statement that the " design meets all the )

criteria outlined in Containment Isolation Topical Design Basis i Document" did not have a regulatory basis for determining a DBI in '

that the Containment'Isol.ation To)ical Design Basis Document was not part of the licensing design Jasi . Further, the engineering evaluation did not make a positiv determination as to whether the design of the RB pressure sensing line was consistent with NRC RG 1.1 . The inspectors reviewed the RB pressure sensing line design and discussed the'SDBI evaluation with NOE personnel. The inspectors concluded that the design of the RB pressure sensing line was not consistent with RG 1.11. RG 1.11 stated that there-should.be a containment isolation valve located jr* outside the containment that was automatically or remotely operated. The licensee's design included no automatically or remotely operated containment isolation valve. It did include a locked open manual valve ,

located just outside the containment and then about 20 feet of l piping to the instrument cabinet, which contained several valve i

. The engineering evalJation did not address whether the 1 approximately 20 fee *, of pressure sensing lines outside of  !

containment were seismically designed. Subsequent review during this inspection found that one drawing indicated the lines were ;

seismically designed, another drawing indicated they were not. and I the Configuration Management Information System indicated they ;

were no .- The inspectors could not readily determine if the licensee was <

committed to RG 1.11. The licensee's Quality Assurance Program, as stated in the FSAR Chapter 1, did not include a commitment to

RG 1.11. However. licensing personnel stated that the Quality i

! Assurance Program did not include a complete listing of RGs to which the licensee was committe _ ._ _ ~ . . . _ _

. _ _ _ _ _ . _ _ _ _ . _ . _ _ . _ . . . _ . _ . _ . _ . _ . _ _ _ _ _ _

p

..

L ;

23

. Engineering personnel who performed the SDBI evaluations-were not

, trained in existing interpretations of NRC regulations on.

I reporting as published in NUREG-102 The inspectors.found that there was insufficient information in the N0E'

evaluations or available at. the end of the inspection to conclude l whether the issues described in PC 97-1515 and PC 97-1520 were DBIs or L were reguired to be reported to the NRC. The inspectors discussed the ;

i- NOE-e w uations with licensee personnel who acknowledged the inspectors'

L - findings. Licensee personnel indicated that these two PCs would be '

' reopened and re-evaluated as SDBIs. In addition, licensee personnel further indicated that all of the other PCs previously evaluated as SDBIs and determined not to be DBIs would be.re-evaluate .

!

' Conclusions Based on findings and observations from review of the PC samples, the .

'

inspectors concluded that there has been noted improvement in the corrective action 3rocess as compared to the process used before the IPAP inspection. iowever, as indicated by the above findings, there l

_w ere still programmatic problems in evaluating design basis issues which l

'may lead to-incorrect reportability determinations and weaknesses in i oiber areas which warrant increased' management attention. The program j was still undergoing changes. Other assessments of.the program included '

the followin * Improvement was.noted.in the timeliness with regard to the review I of. issues for suspected design basis issues, evaluation for -

operability and reportabilit .- Problem statement and clarity, immediate corrective actions, and !

cause determination were goo j

,

-. No problems were identified regarding reportabilit . Several examples were noted where the program was not being

' implemented with regard to. timeliness of PC responses, training of individuals performing the functions of the RCT Leaders and ACES, and grading of PCs. A violation was identified for failure to i follow procedure CP-111 for the examples,

.

e The lack of training appeared to have contributed to some weak definition of corrective action statements, i e ~ PC screening for restart was initiated some time after the current l program was implemented. Later PCs were screened for restart as i evidenced by a. stamp on the PC and observed by the inspectors during attendance at a PCSC. meeting. Licensee personnel indicated that earlier PCs would be re-reviewed for restar ;

,

e There was a weakness in the Corrective Action Program in that the engineering SDBI evaluations were of poor quality. Three of three !

., . -- - , .

_ .._ _. _ _ _ . . . . _ _ _ . _ . _ _ . _ _ . _ . _._ _ _- .

.

L 1 l 24 engineering SDBI evaluations reviewed (for PCs 97-1515 and 97-1520 discussed in this paragraph above and for PC 97-2026 discussed in paragraph E8.3 of this inspection report) had insufficient l technical. justifications to support the conclusions that there was

[ not a reportable DBI. The engineering evaluations included '

!

incomplete determinations of. the licensing and design bases and incorrect interpretations.of NRC regulations. The licensee's definition of a design basis issue was narrow and not consistent .;

l- with NRC regulations. Additionally, engineering personnel performing SDBI evaluations were not trained in existing interpretations of the NRC regulations on reporting as published by the NRC in NUREG-102 * The initiation of PC 97-1515 and PC 97-1520 were positive

< reflections on the licensee's ' extent of condition' programs (SRR and .FSAR Review Project-Team) which resulted in the identification

.the SDBIs documented in these PC The inspectors assessed the licensee's performance, relative to this issue, in the five areas of continuing NRC concern: l l  !

! * Management 0versight - Adequate  !

  • - Engineering Effectiveness - Inadequate  !

. Knowledge of the Design Basis - N/A

  • Compliance with Regulations - Inadequate <

. Operator Performance - N/A )

07.3 Quality Assurance Audits and Surveillances  ! Insoection Scooe (40500)

The inspectors reviewed selected audits and surveillances performed by the Nuclear Quality Assurance group in the Quality Programs Department (0PD). These audits and surveillances were performed on various corrective action program activities, Observations and Find 1nas j

!

The inspectors noted that the OPD had performed four audits and 63 quality programs surveillances (OPS) since January 1997. The inspectors reviewed the following audit and OPS reports: l

. Audit 97-02, Problem Identification, Problem Resolution, and  ;

Restart Readiness:

L * OPS-97-0015. Evaluation of Category "C" Precursors:  !

l i * OPS-97-0018, Assess the NSM Screening of PCs for Reportability and L Operability; and  ;

!

L '* QPS-97-0024. Restart Item Identification and Tracking

l'

.- _

.. .

. _ _ . _ ._4 - _ . . . - . _ . . _ . . . _ . . _ . _ _ _ _ _ _ . _ . - _ _ _

f

.During Audit 97-02, the OPD issued 28.PCs (2 Grade "B". 13 Grade "C".

and 13 Grade "D").. Some of the findings from the audits and OPS reports concluded the following '

a t

.- There had been untimely completion of PC corrective action step . There were numerous deficiencies in the implementation, definition, and development of processes to trend and monitor performance of.the current corrective action progra ;

o p e' The restart program continued to be ineffective in communication of issues and expectation * The current PC process did not assure that documentation was )

maintained for the resolution'of Grade "C" PC ]

.,

l Conclusions-l

.The inspectors concluded that the OPD has been active in identifying continued weaknesses and areas for improvement in the licensee's corrective action program and various other activitie The inspectors assessed the licensee's aerformance, relative to this issue. -in the five areas of continuing 1RC concern:

e Management Oversight - Good

! e Engineering Effectiveness - N/A e Knowledge of the Design Basis - N/A e Compliance with Regulations - Good

. Operator Performance - N/A 08 Miscellaneous Operations Issues 08.1 Review of NRC Information Notice 97-06. Weaknesses in Plant Soecific Emeraency 0)eratina Procedures for Refillina the Secondary Side of Dry Once Throua l Steam Generators Insoection Scooe (92901)

Information Notice (IN) 97-06 was issued March 4. 1997. documenting a concern where an OTSG is isolated and allowed to become dry prior to or during RCS cooldown. .The inspectors reviewed the licensee's assessment of the emergency operating procedures (EOP) and their adequacy for addressing these concerns, Observations and Findinas The concern of the IN was if an OTSG were isolated and allowed to become L dry, then thermal communication between the tubes and the shell of the

"

dry OTSG would become highly degraded. Given that forced RC flow was occurring, the tubes will remain at thermal equilibrium with the R However.. the shell would cool via ambient losses. If the tube

. - - . , . - , .. . , . - - .- -

> .. . . . _ _ ~.. - . _ . ~ . _ _ _ _ . _ _ _ . . _ _ _ . . . _ _ .

i

temperature is held constant, the shell would eventually become cooler-than the tubes. This situation would place the OTSG tubes in '

l- com)ression, possibly leading to excessive loads on the tubes. The IN L emplasizes the need for emergency operating procedures containing

_ guidance for refilling OTSGs s

On May 19, 1997, the licensee and a contractor completed reviews of the IN and related industry guidance to verify that the existing E0Ps

. adequately addressed the concerns raised in both documents.

l

.

The conclusion of the reviews was that the existing E0Ps did contain adequate guidance to address the IN concerns. The level restoration was t l accomplished prior to transitioning from excessive primary to secondary heat transfer guidance to subsequent cooldown guidance. The conclusions

' reached were that expeditious recovery of dry OTSGs coupled with OTSG tube to shell delta temperature control guidance, enhanced the E0P ability to control tube to shell delta temperatures for the situations  !

discussed in the ins. The licensee concluded that to address this ,

issue, no changes were necessary in the existing E0P The inspectors reviewed the licensee's E0Ps to assess their capability and guidance for dealing with the situations addressed in the IN. E0P-5, . Excessive Heat Transfer, states that if OTSG level < 12.5 inches then the operators are to refer to Enclosure 3 Dry 0TSG Recovery, which provides detailed instructions for refilling a dry OTSG. Several E0Ps address controlling tube-to-shell delta temperature within limits  ;

established in the EOPs. E0P-6, Steam Generator Tube Ru)ture. E0P- '

LOCA Cooldown, E0P-9, Natural Circulation Cooldown, and E0P-10. Post-Trip Stabilization, all provide guidance for maintaining delta temperature within limit Conclusions The inspectors concluded, based on the review of.the licensee's assessment and their own review of the licensee E0Ps, that adequate guidance did exist in the licensee's E0Ps to address the concerns of IN 97-0 No further actions were required as a result of this issu .2 (Closed) EA 95-126. VIO I.A. Nine Instances Where Ooerators Violated Procedures for Makeuo Tank Pressure / Level Control Insoection Scooe (92903)

This violation involved violations of three different operating procedures, on numerous occasions, and also involved essentially all of the licensed operators at the )lant. The inspectors followed up on the licensee's corrective actions )y reviewing procedure changes, training 4 records, modification packages, inspecting conditions in the plant, and I interviewing operator l

!

'l i

~, ,. ,, . - . . _ _ -_ _ _ _ , . ,

b. Observations and Findinas Procedures and modifications reviewed by the inspectors included:

-

AI-500. Conduct of 0]erations Operations Department Organization and Administration, Rev. 92, dated March 11, 1997;

-

AI-501 Conduct of Nuclear Plant Operations Assessments, Rev. 9, dated April 19, 1996:

-

0!-05. Log Keeping, Rev. 2, dated September 16, 1996:

-

01-09, Operations Procedures, Rev. 6. dated November 14. 1996:

-

01-12, Investigation of Abnormal Events. Rev. 1 dated July 1, 1996:

-

01-31, Self Checking and Questioning Attitude, Rev. O, dated December 15. 1995:

-

0I-32. Operations Mentor Program. Rev. O. dated March 10, 1997: !

-

01-42. Operations Work Control Supervisor Position. Rev. O dated September 30, 1996

-

OP-103B, Curves 8A and 8B. Max. Makeup Tank (MUT) Operating l Pressure vs. Level. Rev. 17. dated October 18, 1996: l l

-

AR-403, Annunciator Response, PSA H Annunciator Response. Rev. 26. I dated October 28, 1996: Event Point 1064. MUT Level High/ Low; and

-

MAR 95-01-07-02. Increase MUT High Level Alarm and Install Computer Pre-Alarm, dated September 6. 199 The inspectors verified that the licensee restored adequate operating margins for makeup tank pressure and level control by:

. revising the makeup tank overpressure curve, creating a separate operating alarm curve and limit curve, and labeling the curve better:

. increasing the makeup tank high level alarm; and

. installing a computer pre-alar The inspectors also verified that the licensee took actions to improve the questioning attitude of operators on shift by implementing the Event-Free Operations Program which included:

. establishment of expectations for human performanc . use of tools for human performance improvement,

l

e use of the Stop. Think. Act. Review (STAR) self-checking technique, e use of peer checking and communication protocol, and

. use of performance assessments and tracking and trending human performanc In addition, the inspectors verified that the licensee strengthened expectations and procedures governing alarm response by:

. revising administrative procedures, and e training operator Also, the inspectors verified that the licensee took actions to strengthen management oversight of control room activities by:

. adding an additional management position to focus solely on-shift operation + establishing a management mentor program for SR0 . initiating operator investigations of abnormal event . implementing a self-assessment program in the operations departmen . initiating and trending operating shift performance indicator and e creating a SRO certified work controls position, which was to be fully staffed on the day shift. However, the inspector found that the position was staffed only about 80% of the time on weekday shifts. The ANSS stated that, when the work controls position was not manned, there was a noticeable large increase in traffic into the control room and increase in work for the NSS and ANS The individual staffing the work controls position stated that there were only two individuals assigned to the position, that they had been also assigned several other duties, and that between them they could only man the position about 80% of the time. The ANSS stated that the NSS and ANSS were su) posed to be spending time in the plant with the plant operators. Jut could not do so when the work controls position was not staffe c. Conclusions The inspectors concluded that the licensee's corrective actions included actions to prevent recurrence of the violation had been implemented, and were effective improvements. EA 95-126. VIO I.A is close . . .. __ ._ __ _ _ _ _. _ .- _ _ _ _ _ _

,

r e

29 i t

The inspectors assessed the licensee's performance, relative to

. corrective' actions for this violation, in the five areas of continuing NRC concern:

  • Management Oversight - Good

. Engineering Effectiveness - Good

  • Knowledge of the Design Basis - Good

. Compliance with Regulations - Good

. Operator Performance - Good -

08.3 (Closed) EA 95-126. VIO I.B. Conduct of Unauthorized Tests of Makeuo Tank Without 10 CFR 50.59 Evaluation Insoection Scooe-(92903)

J

'

This violation involved operators conducting unauthorized tests of makeu) tank level and pressure and also involved additional examples of -

l

'

unautlorized tests conducted by operators. The inspectors followed up on the licensee's corrective actions by reviewing procedure changes, training records, and internal correspondence: inspecting conditions in the plant; and interviewing operator Observations and Findinas In addition to the procedures reviewed above.for EA 95-126, VIO I;A, the inspector reviewed the following procedures: i

-

AI-400C, New Procedures and Procedure Change Process, Rev, 1 dated March 31, 1997

-

CP-213, Preparation of a Safety Assessment and Unreviewed. Safety Question Determination (10 CFR 50,59 Safety Evaluation), Rev. 1, dated April 4, 199 The inspectors verified that the licensee strengthened management expectations and on-shift leadership by:

. . revising procedures to provide more guidance to control room I l personnel as to what constitutes an infrequently performed test or

! evolution, including a checklist:

L e revising procedures to better address shift supervisor authority:

l L

  • creating an administrative procedure to provide additional l guidance to operations personnel for procedure use: and

! i j e making several personnel rotations within the Operations '

Department.

i The inspectors also verified that the licensee conducted training to l address lessons learned from this violation, including procedure changes

' '

- - --,- . . - -_ _

. _ . _ . _ _ _ _ _ .--_ . _ - _ . . _ . _ ~ . _ . _ . _ . _ _ . _ . .

'

and the Event Free Operations Progra The training specifically addressed:  ;

.

e shift supervisor authority,

. avenues for resolving issues, e 'importance of maintaining operational-~~11mits, and e correct methods for performing normal evolutions, unusual evolutions, and tests.

i

.

'

L In addition, the inspectors verified that the licensee provided for l additional management oversight of control room activities by: adding management oversight and operations support personnel, e improving log keeping, standards, and practices.

L * establishing a mentor program for Nuclear Shift Supervisors and targeted future-Nuclear Shift Supervisors to improve communications with senior managemen . clarifying standards for self-checking and _ procedure compliance,

,

e adding new talent into operations and allowing licensed personnel to move into other parts of the organizatio . using self assessments and precursors by operations, and 1

)

e developing and using shift performance indicators, Conclusions The inspectors concluded that the licensee's corrective actions included actions to prevent recurrence of the violation, had been implemented, and were effective improvements. EA 95-126. VIO I.B is close .

The inspectors assessed the licensee's performance, relative to .

corrective actions for this violation, in the five areas of continuing l NRC concern:

. Management Oversight - Good

. Engineering Effectiveness - N/A e Knowledge of the Design Basis - Adequate R e Compliance with Regulations - Good .

. Operator Performance - Good  !

.

i l

!

._ _ _ _ _ , _ __ _ _ - . _ . _ _ _ __ , _ . .

._ - .. . - . _ _ .._ - . _ . _ _ _ _ __ . _ , _ . _ _ _ _ . __

i

l IL. Maintenance L M1- Conduct of Maintenance M1.1 Emeraency Feedwater Cavitatino Venturi Hydrostatic Test L

l- Insoection Scooe (62707)

.

E The inspector reviewed the preparations and observed the performance.of .

i hydrostatic testing of the newly installed EFW cavitating venturis performed under Modification Approval Record (MAR) 96-10-02-0 . Observations and Findinas The inspector reviewed Maintenance Procedure (MP) 137. System

'

Hydrostatic Pressure Testing. Revision 28, which was a generic test procedure contained within MAR 96-10-02-01 to perform the hydrostatic test. Enclosures 2 and 3 of the MP delineated specific test boundaries, pressures, relief valves, water quality, instrumentation, and hold tim '

l -The inspector verified the test parameters were appropriate and l- incorporated the ANSI B31.1.0 1967 construction code and ASME Section XI j code requirements. The test was scheduled to be performed by a contract maintenance crew on May 7. The. inspector attended the morning planning and scheduling meeting and 0)erations morning shift turnover meeting  :

that day and observed that t1e test was not discussed in any detail at either meeting and was not part of any planned-SS00 brief. However, a licensed operator at turnover questioned the test boundaries and water sources. Only a single set of boundary valves separated-the test portion of EFW from the nearly full OTSGs. The Operations Manager further questioned the consequences if these boundary valves leaked by, pressurizing the OTSGs. The only individual cognizant of the test at the meeting was the clearance CN0 and he was unable to answer these cuestions so the SSOD suggested that the maintenance crew needed to come ciscuss the test with the operators. The inspector determined from discussions with the operators that a briefing of this sort for Operations was neither required nor routinely expected unless the evolution had direct impact on Operations. The inspector also determined from the discussions that this briefing would not have happened if the operator had not raised the questions she did, and it was not required to be done per the MAR or MP-13 The inspector attended the briefing in the Operations break room later that morning. The maintenance crew and foreman were present to brief the NSM, SS00, and clearance chief. No other individuals from Operations were present, and no individuals from Engineering were present. Although the test was performed under an engineering MAR. it was considered a maintenance activity so the Modifications Engineer overseeing the MAR was not involved. The inspector had to recuast that l

music playing in the break room be turned off because it was cifficult to hear the brief comments. The maintenance foreman discussed the

,

already established test boundaries and general plans and asked if the l Operations individuals had any questions. The inspector observed the i

!

. -. . ~_ , - -_ - - - -. -- .- - -

._ . _ _ . _ _ _ _ _ _ _ _ _ _ ._ _ . . ._

g

,

I l

meeting was very informal and did not have any prescribed format or content. The SS00 had a copy of Operations Instruction (0I) 1 Evolution Briefings. Revision 5. and asked the maintenance foreman to address items in the Pre-job. Briefing Checklist in the OI. The foreman

'

stated that the maintenance crew had already done their own pre-job brief and that he was unfamiliar with the existence or content of the 01-14 checklist, but that he would attempt tho answer the checklist items. Although 01-14 directed an "SSOD Pre-job Briefirg" occur for l infrequent tests. it was not clear on exactly what this entailed and who l was responsible for preparing the brief and conducting it. The

remainder of the " briefing" consisted of the SSOD asking the foreman the generic questions from the checklist and the foreman attempting to

'

respond. The inspector observed that many of the questions were not adequately addressed since they required preparation to answer and that i i the discussion focused on personnel safety and did not address specific

!

hydrostatic test requirements.

'

At the end of the brief, the maintenance crew stated they were ready to fill and vent the system and commence the test. At this  ;

inspector questioned how the specific Operations Manager' point for s concerns the

, pressurizing the OTSGs were going to be addressed. The SSOD and maintenance crew agreed that if they observed excess water being pumped into the system to maintain test pressure, that could indicate leakage past the boundary valves and they would notify operations to monitor the OTSGs. However, what constituted excess leakage was never defined so the inspector concluded the concern was not adequately addressed. The inspector then questioned other test boundaries and how leakage past boundary valves was considered. The maintenance crew stated that they ,

had either double valve protection or extremely thick blank flanges at '

all the other boundaries. However, the inspector observed that the second valves used for this lineup were not part of the planned clearance tagout and created the potential for hydrostatically testing ,

adjacent and unmonitored systems. This could occur if the first boundary valve leaked by because the portion of pipe between the two valves was water solid. The inspector determined that the maintenance crew was not aware of this concern, and the adjacent piping had not been analyzed to ensure it would withstand hydrostatic pressure and would not '

be monitored during the test for leakage. The inspector determined the clearance written to support the test by Operations was inadequate because it merely incorporated the test boundaries suggested by engineering on the Enclosure 3 form in MP-137. Neither the enclosure or the clearance considered the effect on adjacent systems. Step 4.2.2 of MP-137 required components and system piping not under test to be vented or monitored during the test. The inspector determined that the engineers who had determined the scope of the test boundaries had not coordinated with the Operations clearance authors to ensure these concerns were im)1emented. Although several Jortions of adjacent piping

! were discovered ay the licensee to be vented ay other portions of the l clearance hung for the original venturi installation. it had not been

, planned to support the test. Although the clearance CN0 considered this l adequate, the NSM recognized that the licensee had not adequately l

. ~ ,.- . -. -- . . - - - - -- - - . --.-. . . - . .

,

!-

33
prepared for the evolution and stopped the tes He initiated j corrective action. document PC 97-311 ,l

'

! Criterion 9,. Appendix B,10 CFR 50, Control of Special Processes.

! recuires that processes such as nondestructive testing are controlled  :

-

anc accomplished by qualified personnel using qualified procedures in i accordance with applicable codes, standards, specifications, criteria,

<

and other special requirements- The inspectors concluded the licensee's

.

failure to plan adequately and control adequately the hydrostatic tes i which involved several licensee disciplines, was a violation of this '

t requirement. Specifically, under Operations.-the lack of a clear

briefing requirement or routine briefing expectation was inadequate

!- Operations involvement with a safety-related plant test performed by ,

another group. The addendum to clearance Engineering Change Order (ECO).

, 97-04-026 issue'd for the. test was inadequate because it did not *

incorporate requirements for protecting adjacent systems. Under i Engineering, the completed MP-137 Enclosure 3. System Test Requirements,

"

did not incorporate requirements for protecting adjacent systems, and

the lack of engineering presence or involvement with the 31anned j performance of the test was inadequate oversight. Under iaintenance.
the maintenance crew performing the test procedure did not recognize or  :

, understand the requirements for protecting adjacent systems. These items are identified as VIO 50-302/97-07-02, Inadequate Planning and i Controlling of Hydrostatic Testing.

o .

PC 97-3110 was graded as a Level C, requiring an apparent cause j evaluation, and was assigned to the Maintenance department. Maintenance performed an investigation and implemented corrective actions which included revising MP-137 and discussing the problem with all maintenance

'

j personnel, The PC was then closed on May 20. The ins)ector did not

'

identify any problems'with the specific actions taken Jut noted that the investigation and actions focused solely on the maintenance issues so the Operations and Engineering problems were not addressed by PC 97-3110 or any other PC Additionally, the Maintenance department developed more extensive pre-job checklists contained in their. Nuclear Maintenance Manual, a manually controlled solely within maintenance and not-distributed throughout the site. The inspector. considered this would i only further com)ound the problem observed when the maintenance foreman 1 4 was unaware of tie Operations department's briefing checklist from 01-1 ,

The licensee's short term corrective actions addressed the above concerns and the test was completed satisfactorily on May 12. However, an attempt on May 11 was aborted when the test pressure was questioned  ;

by Operations personnel. The originally prescribed test pressure of '

1760 psig, or 110% of a design pressure of 1600 psig, was determined to be inadequate since the system experienced pressures of approximately 2000 psig during EFW pump overspeed testing. The test pressure was changed to 2150 psig on the basis of an analysis in Request for

'

Engineering Assistance (REA)97-050 The inspector verified this pressure was within the code requirements and did not identify any other concern ,, _ _ _ . _ , _ _ __ _ . _ _ _ _ _ _ . _

_ _ . _ . _ . . _ ._ _ _ __-.._ _ ._ _ . _ _ . . _ _ . ._ . - . . . _ _ . - . .

i '

34 Conclusions The inspector concluded the Engineering oversight Maintenance knowledge of the requirements, and Operations involvement with this test was inadequate considering the hydrostatic test was only separated by one valve from a full OTSG' considered operable as a shutdown decay heat removal option. Licensee management didn't recognize the lack of oversight. until .it was revealed by questioning of the inspector. The inspector also' concluded the licensee did not have a comprehensive site-Jolicy or expectation for the content or performance of pre-job

-

ariefing '

i

' M1~. 2 Inservice Insoection (ISI)

L IDSDection Scooe (737s3)

'

The in gector reviewed program plans and documentation related to the .

conduct of ISI Inspection activities during the ongoing maintenance outag Observations and Findinds

.

Crystal River 3 was in the final months of the second 10-year ISI lL interval. The interval was scheduled to be completed on March 14, 1997.

'

but the-licensee was taking advantage of the provisions in IWA-2430 of ASME Section XI which allowed for the extension of an ISI interval for outages which exceed six-months. The third.10-year ISI interval would start approximately six months after restart from the current maintenance outag The licensee's ISI staff was taking advantage of the ongoing maintenance i outage to correct and complete the second ten-year ISI inspection i program. Prior to the past refueling outage (Spring 1996), the licensee

established a contract to assess the ISI program independently. The l project included a detailed review of all required inspections, which identified a number of mistakes and omissions in the licensee's ISI L progra The licensee's ISI staff was also using this time to review completely and revise the isometric piping drawings used in the ISI inspection program and to add these drawings to the plant controlled drawings so that they would be updated when modifications are made to the piping ,

system The inspector reviewed the final assessment report from the ISI review contractor, which was issued in June 1996, and reviewed corrective o actions which have been taken to date. This included a review of

documentation pertaining to ir.opections which would have been missed during- the second.10-year ISI interval . Plans for completing all

[ required inspections during current maintenance outage were also

reviewe ,,-a.--- w ,e e ,w -- - ~ -

.- - ..

35 Conclusions The licensee was pro-act1, in utilizing the maintenance outage time to complete the second 10-year ISI requirements and completely updating the isometric drawing used for IS M1.3 Once Throuah Steam Generator Insoections Insoection Scooe (50002)

Through discussions with the licensee, the inspector reviewed preparations and plans for inspection of the OTSGs during the current maintenance outage, Observations and Findinas The last eddy current (EC) inspection of the OTSGs occurred during the Spring 1996 refueling outage. NRC inspections of the licensee's OTSG activities during that outage were reported in inspection reports 50-302/96-03 and 50-302/96-0 The inspector reviewed the current status of the OTSG program and observed preparations for the EC inspections which were planned for this maintenance outage. The licensee was planning to conduct a comprehensive " baseline" inspection of the OTSGs. using established, state-of-the-art. EC equipment and technique The inspector also discussed the licensee's plans for a OTSG management document which included a six-year plan for OTSG maintenance and ,

inspection activitie )

! Conclusions

.

The licensee's steam generator ins)ection program appeared goo The l decision to baseline and inspect t1e OTSGs fully, using latest qualified !

eddy current techniques, was a sound technical decisio !

Hl.4 Emeraency Feedwater Cavitatina Venturi. Modification Functional Testina l l Insoection Scooe (61726. 92902) l l

l l The inspectors witnessed the post-modification functional testing for i the emergency feedwater cavitating venturi installation. The tests !

inspected during this period included tests of the two individual train Observations and Findinas The inspectors reviewed licensee test procedure (TP) MAR 96-10-02-0 TP#2. A - Train EFW Flow Verification. Revision 0 and Revision 1. prior to the performance of the functional test. The original revision was approved on May 16, 1997. by the Plant Review Committee (PRC) prior to I

- _ _ . . _ . - . _ _ _ . _ _ _ . . . , _ _ _ _ _ _ _ _ _ _ _ . _ . _ _ .

.

=36-the verification and validatio On May 19, 1997, it was identified i that Revision 0 had used preliminary instrument. error numbers in the i acceptance criteria. When the final numbers were calculated, on May 2 '

1997, they differed from the ]reliminary numbers, n a ssitating a revision to the 3rocedure. T1e inspectors had atteW the original PRC -

and noted that tie test engineer presenting the original procedure _.had L .not informed the PRC that preliminary numbers were being used. The

'

revision of the procedure was approved by the PRC on May 20, 199 During the review of the procedure, on May 19, 1997, the inspector noted that while the procedure required that calibration be verified for test l equipment; in places, permanently installed instrumentation was being used to obtain test values. The procedure did not require that these

. instruments be verified to be in calibration. The inspector discussed ,

this with the SRO assigned to perform the test. During the pre-job !

briefing, the SRO stated that operations had verified that all permanently installed instrumentation used during the test was in calibratio ,

During the second PRC review, the PRC noted that the safety evaluation performed for the test procedure neglected to identify this evolution as a test or infrequently )erformed evolution. The PRC directed

.

f (- engineering to modify. tie evaluation to'be accurate.

l On May 20, 1997, the inspectors attended the pre-job br'iefing for the test of the A train cavitating venturies. This briefing was conducted

'

by the SR0 scheduled to be the Nuclear Shift Supervisor (NSS) on the day of the test. The SR0 assured that all personnel involved and needed to

, complete the testing were present during the briefing. After a brief l description of the test by the test engineer the SRO discussed '

additional items needed to be completed prior to beginning the test.

l The SR0 assigned the task to verify the installed instrumentation was in L calibration, informed engineering to supply operations with the last

pump curve taken on the emergency feedwater pump.' for comparison, and the SR0 directed electrical maintenance to perform a Megger of the pump l

motor, since it had been idle.since September. 1996. These initiatives taken by the operations SR0 were proactive: however, the fact that they

,

had not been considered prior to the )re-job briefing was'of concern to

! the inspectors. Certain aspects of t1e preparation for the test were

, not thorough, necessitating procedural revision late in the process and l additional preparations being taken by operations, which were outside of originally scheduled action The test was performed on May 21, 1997. The inspectors witnessed the test from the main control room, from the pump area, and from the data collection point. The test results were satisfactory, with all acceptance criteria met. The engineers verified the emergency feedwater

, pump curve was not significantly affected by the modification.

[ Weaknesses were noted during and after the performance of the tes The licensee directed the plant operators to tighten down on leaking red-tagged valves which is discussed further in Section 01.2.

l l

,-

- -- - - - - - . . - - .-. -. - .. - - .~ .-- - - - . _- - -. ~.

1 '

]

Two valves. SUV-39 and FWV-163. which were manipulated during the -

performance of the test, ner jed to be restored-to a closed position following the. test. Howev . the test procedure'did not direct operations to. restore the valves to a closed position. Valve FWV-163 was required to be closed for containment-integrity considerations.

, The SDT-1,' secondary drain tank. level.was high'at the'beginning of the

'

. tes Leaks on the secondary side significantly increased levels in the 1

!

tan Even though the licensee was aware that secondary side leaks were probable, the licensee's planning did not verify sufficient volume was available in SDT-1 for significant leak j The test for train B cavitating venturi, MAR 96-10-02-01,TP#1,8~-

Train EFW Flow Verification, Revision 1, was performed on May 30, 199 During the pre-job briefing, a non-licensed operator questioned whether ;

anyone had checked levels in SDT-1. When checked, it was again found that the tank was essentially full. Water had to be processed and the l tank level reduced prior to the beginning of the B train functional test. The test of the B train EFW cavitating venturi was successfu '

with the resulting data meeting all acceptance criteri I l

- Conclusions Weaknesses were displayed in the planning, preparation, and coordination for the A train EFW cavitating venturi test. Improvements were noted in these facets of the B train testing. All acceptance testing for these parts of the functional test were met. The final test of the integrated system performance will be inspected in a. future inspection repor M2 Maintenance and Material Condition of Facilities and Equipment M2.1 Reactor Buildina (RB) Coatinas Insoection Scooe (62700)

The inspector reviewed arocedures and documentation, and observed work activities involved wit 1 the removal and replacement of protective coatings inside the R bservations and Findincs The inspector reviewed the following documents associated with the repair and replacement of protective coatings inside the RB:

Document No./Rev./Date Titie/Sub1ect R0-3147., Revision Requirement Outline Painting and December 2, 1993 Protective Coatings MP-139A, Revision 1 Application of Protective Coatings for November 24, 1993 Reactor Building _(Inside)

. .

-.

_. _ _ . __ _ _ _ _ _ .. _ _ _ . _ _ _ _ _ _ _._ _ _ _. _ _ _

,

i

$

l p

I- 38 Document No./Rev./Date Title /Sub.iect PlasiteS Technical Bulletin Plasite* 9028M1 & 9028M2 Masonry &

902 Concrete Filler-Sealer *

January 1984 OCS-97-001 Quality Control Surveillance Report April 17, 1997 QCS-97-003 Quality Control Surveillance Report ,

May 8, 1997 Precursor Card 97-2042. May RB liner was prepped and re-coated  ;

12, 1997 without the required Section XI inspection Precursor Card 97-3243. May Personnel Hatch Door was prepped and l 13. 1997 re-coated without required Section XI l inspections l The inspector noted that the two major control documents for the RB l coating repairs and replacement were about three years old when the-

current Reactor Building coating project was started in December 1996- .

(MP-139A. Revision 14, was pre)ared November 24, 1993. with an effective *

-

date of January 10. 1994, and U-3147. Revision 4, was dated December ). The inspector noted that. since the issue of the current revisions to these two documents, and prior to the start of the current i project, the " Maintenance Rule" became effective (July 10. 1996) and '

the " Containment Rule" had been issued. (September 6.1996). Both of these rules could have impacted the work being done. During review of I documentation and discussions with licensee 3ersonnel, the inspector l found no evidence that these procedures had Jeen subjected to an- l engineered or quality review to determine if any requirements had changed in the three years. This lack of' review was considered to be a l program weakness in the area of maintenance implementatio During walk-through inspections of the coating. work in the R8 the inspector noted evidence of degradation of the containment liner plate on the 95-foot level. at' the junction of the toriconical segment of the liner plate and the concrete floor. The coating on the %-inch thick '

liner plate had degraded in several spots, and there was visual evidence of localized rusting of the liner plate. (The licensee was apparently not fully aware of NRC Information Notice 97-10. Liner Plate Corrosion in Concrete Containments. issued March 13. 1997, which provided  ;

information concerning this type of problem.)

!

l The inspector also noted that the area of RB liner plate that was the j subject of PC 97-2042. (it had been prepped and re-coated without

'

i I required ASME Section XI inspections) was the toriconical section of J

! liner plate, abutting the concrete floor, in the vicinity of the in-core l l instrumentation tubes. An inspection of the plate surface adjacent to

the concrete showed irregularities symptomatic of surface degradation, i to a height of about four-inches above the floo The degradation

!

!

,

-

_ , _ , _ _ __ - , _ .

- - - - - - - . - - . - - . - - - . ~ . . - . - - _.- - -

?

! 39 appeared to be general areas of pitting or wastage, but it was hard to i tell how severe the wall loss was because the area had already been re- '

coated. The NRC identified degradation of the RB liner plate material i: was identified as an unresolved item (URI) pending the licensee's- l l

'

evaluation of the severity of the problem. This will be identified as URI 50-302/97-07-03, Reactor Building Liner Plate Degradatio During the general walk-through inspection of the containment the inspector-noted evidence of oil on walls and equipment: especially on L and around Heating, . Ventilation and Air Conditioning (HVAC) ductwo'r (The oil was apparently the result of significant leakage from.one' of  !

the Reactor Coolant Pumps ~ during past operation.) Of-particular note  ;

was evidence that oil had come from a duct-top. vent, at the end of a ,

long horizontal run. on the highest elevation of the ductwor ,

Based on this' observation, the inspector raised a cuestion about how -

much oil was still in RB HVAC ductwork. When askec , the licensee informed the inspector that, at the time of the inspection, the licensee was only planning.to clean the exterior and the vents, and had no plans to inspect or clean the interior of the RB HVAC ductwork. The-issue of '

a potential unknown quantity of combustible materials inside of the  !

ductwork was expressed as a concern to the licensee during the. exit meeting on May 23, 1997. The licensee was informed.that the inspector i would identify the condition of the RB HVAC ductwork as an unresolved i item, URI 50-302/97-07-04, Unanalyzed Combustible Burden in Reactor i Building HVAC Ductwor !

-1

c. Conclusions L The licensee's project to repair and replace the protective coatings' i l inside the Reactor Building appeared to lack overall management and

! engineering involvement. The project appeared to hhe a narrow focus on the repair and re)lacement of the coatings. Identified problems:

l~ associated with t1e project were as follows:

  • A program weakness was identified concerning the fact that three-year old procedures were impleriented without an engineering of quality review to determine if requirements had changed during the p interim.

l . An Unresolved Item was identified concerning Reactor Building liner plate degradation that was painted over without inspection or analysi . An Unresolved Item was identified concerning the potential that Reactor Building' ventilation ductwork may contain an unanalyzed.

1 combustible burden in the form of oi J I

!

!  ;

!

,

_ _ _ _ _ _ - . - __ _ - . _ - _ ,

[. ,

40 .

J1L Enoineerina

'

El Conduct of Engineering El.1 General Comments (37551) L On the evening of June 5,1997. EGDG 1A was being run per. the operating procedure to support test data gathering when a governor oil fitting ,

leak was discovered. The EGDG was shut down; a precursor card was'

initiated and Technical Support system engineering contacted to sup) ort

.

l investigation of the problem. By early the next morning, June 6 t1e L fitting had been repaired: the failed fitting had been sent to a ( laboratory to be analyzed for failure mode, and the IB EGDG had been .

l evaluated to ensure a similar problem would not present an operability ;

L concern. .The system engineers had documented the above actions in a

thorough written action plan which also evaluated the necessary post-l maintenance testing required, initiated industry searches for similar failures, and documented maintenance history on the failed portion of

!

the system. The failure was determined to be due to fatigue, and an REA was generated to modify the fitting lines from copper to stainless i

steel. The inspectors considered these actions to be an exam)le of !

'

l excellent and timely support by Engineering to Operations. T1e licensee exhibited good sensitivity to maintain shutdown plant power source

'

availability above requirements considering one of the offsite power source lines was out of service for maintenance.

,  !

'

A similar example of good sup) ort by Engineering to Operations was observed by the inspector on iay 12 and 13. When operators questioned abnormal amperage indication on a Decay Heat Closed Cycle Cooling (DC)

pump start and generated PC 97-2044 system engineering coordinated with Operations and quickly developed a troubleshooting plan per MP-531- .

Troubleshooting Plant Equipment, Revision 9. This effort quickly

, revealed problems'with a DC system valve (DCV-178) positioner and allowed corrective maintenance and operability determinations to be done in a timely manner. Again, the inspectors considered this good engineering support and good sensitivity for maintaining needed shutdown plant equipment, i

However, the inspectors also observed examples of poor engineering support and involvement as discussed in Section M1.1 regarding the EFW hydrostatic test and Section S2.1 regarding support to Security for alarm station power supply failures. These examples were cited as parts of violations for each of those problem .

El.2 Low Temoerature Ove'roressure Protection (LTOP) Comoensatorv Actions l

l Insoection Scooe (37551. 61726)

l

'

The inspectors reviewed the implementation of the licensee's LTOP

.

commitments contained in letter 3F0497-05 dated April 7, 199 i l'

, ,

y.-.-r,.,_.___ _ . . , .

_ . _ _ _ _ _ _ _ _ .

.

I i

'

L 41 l

' Observations and Findinas ,

'

l In a letter dated February 4. 1997, the staff requested the licensee l accelerate ~their planned schedule and submit a proposed LTOP Technical l l . Specification (TS) within 60 days due to the extended plant shutdown and L current applicability of LTOP actions. The licensee's current LTOP l

requirements are only administrative controls. The licensee responded ,

,

in the April 7 letter and committed to submit a TS change request by l September 18. 1997. The licensee also committed to restrict RCS.

'

!- pressure administratively to a maximum of 100 psig and revise the l pressurizer PORV setpoint by May 23. 199 These actions were i t considered acceptable by the staff. The inspector verified the license '

l issued Short Term Instruction 97-011 on April 5.1997, to limit pressure L to 100 psig. The inspector verified RCS pressure was maintained below )

l this limit and that operators were aware of-the reason for the I requirement and its source. The inspector also noted this commitment I

. prevents a reactor coolant pump start and therefore a plant startup'so i the TS will need to be resolved prior to these. occurring. The inspector also verified the licensee performed Surveillance Procedure 132, i Engineered Safeguards Channel Calibration. Revision 35 on May 23 to lower the PORV low setpoint to 454 psig. In letter 3F0697-23 dated June 6.1997, the licensee confirmed to the staff that they had met their commitments and revised their commitment to submit a TS change f.om September 18 to July 16. 1997. The licensee will base the change on 15 Effective Full Power Year (EFPY) pressure-temperature curves and ;

will work on a long term solution based on 32 EFPY curve _ Conclusions

.

The licensee was implementing appropriate LTOP restrictions and was l

developing a permanent solution via a TS change

'E1.3 NRC Generic Letter 96-01. Testina of Safety-Related Loaic Circuits , Insoection Scooe (37550)

Generic Letter 96-01. issued January 10. 1996. requested that all l operating nuclear power reactors take the following actions to address l problems with testing of safety-related logic circuits:

  • Compare electrical schematic drawings and logic diagrams for the reactor protection system. EDG load shedding and sequencing. and actuation logic for the engineered safety features systems against plant surveillance test procedures to ensure that all portions of the logic circuitry, including the parallel logic, interlock bypasses and inhibit circuits. are adequately covered in the i surveillance procedures to fulfill the TS requirements. This l review should also include relay contacts. control switches, and i other relevant electrical components within theses system utilized in the logic circuits performing a safety function.

I

. .- - - - . . . -..

. .. ._._ _ _ _ _ _ _ _.._._ _._ _ _-. _ .. _ _ ___ _ _. _ ._

.

L  ;

-

l

.

!. * Modify the surveillance procedures as necessary for complete

- testing to comply with technical specification The initial GL 96-01 inspection was conducted March 17-21, 1997, and documented in NRC Inspection Report 50-302/97-01. During this inspection, the inspectors continued to examine the licensee *s actions '

relative to the testing of TS safety-related logic circuits described in GL 96-0 Observations and Findinas

The inspector verified that all the initial offsite work had been  !

completed in a satisfactory manner, and all the initial "GL 96-01 Review l XXXX System Functional Boundary Documents" had been submitted for review i and validation. In addition, all initial review and validation had been l completed in a satisfactory manner by the onsite engineer except for the i l Reactor Protection System review which was in progress. Not all work.

l 'was completed and there were eight open items identified on PCs. The j l open PCs need to be resolved and corrective action implemented where ,

required. These open PCs ware PC 97-0054. PC-97-0057. PC 97-1516. PC  !

97-2036. PC 97-2677. PC 97 797. PC 97-2798, and PC 97-341 l The following items for the GL 96-01 program had not been completed at the time of this inspection:

. Reactor Protection System review and validation by the license * Licensee closure of the eight open PCs identified above.

l

  • Submittal of the final GL 96-01 Report by the contracto * Final review, approval. and closure by the licensee of all GL 96-01 document !

.1 Conclusions I I The inspector concluded that the licensee was in the process of implementing an effective program to-meet the intent of GL 96-01. The i onsite contract engineer has been effective in reviewing, validating.

l and identifying deficiencies. The GL 96-01 program had not been completed at this time. The inspectors assessed the licensee's'

performance, with respect to the licensee's response to GL 96-01, in the five areas of continuing NRC concern:

. -Management Oversight - Good

. Engineering Effectiveness - Good

. Knowledge of the Design Basis - Good ,

t- e Compliance with Regulations - Good

e Operator Performance - N/A

l

,., . _ _ . . . . . . . - . - -_ _ __ ., . -.

. .

_ . _ _ _ _ . . _ - . ~ _ . . . __ _ _ _ . . _ . . __ ___ . m._ _ .

!

o s 43 1 El.4 DC System Failure Modes & Effects Analysis (FMEA_), Insoection Sco.p_e (37550)- l

,

The licensee's letter, 3F1096-22, dated October 28, 1996, discussed l Crystal River Unit 3's forced outage and other safety concerns. Several of the ccncerns or issues identified by the licensee were failure modes of safety systems. In this. letter, the licensee stated'the letter's purpose was to inform the NRC of the plans to address these issues prior to restarting the plant. There were eight concerns (issues) identified.

l Concern 7 Failure Modes and Effects Analysis of Loss of DC Power was i one the issues. The licensee stated that DC Power FMEA, including evaluation of system interactions, would.be performe j The licensee initiated an engineering project that addressed the DC r Power FMEA. The scope of the 3roject was to perform a FMEA for a s)ecific accident scenario of _0CA/ LOOP / Loss of DC safety-related powe T1e FMEA included a detailed systems interaction evaluation to

- understand the impact that equipment / component failures would have on redundant safety systems. The scope of the DC Power FMEA included the l 22 systems that were powered from the safety-related Class 1E 125/250VDC l system. Also included was the 120VAC Vital Bus powered from the Class--

1E inverter The DC'P' ower FMEA 3roject was managed by a licensee engineering manage The licensee *s arclitect/ engineer (AE) was contracted to perform the l

detailed FMEA. A different independent engineering firm was contracted to AE'pe formIn s wor a third partyareview addition, of thefirm third major methodology and results was contracted of the to support ,

both of the other contractors as needed. Guidelines in Institute of l Electrical and Electronic Engineers (IEEE) Standard 352-1987 were used 'l for the FMEA. The inspectors reviewed the licensee's FMEA program and documentation to determine if the licensee's plans in Letter 3F1096-22 and the guidelines in IEEE Standard 352-1987 were implemented in a satisfactory manne Observations and Findinas The inspectors reviewed the procedure. C' lass.1E DC Power Distribution System Failure Modes and Effects Analysis Methodology Document (FMEA Document), Revision 1 dated December 24, 1996, and verified that it was adequate to provide recuirements for the DC Power FMEA program. The  ;

FMEA Document addressec the scope, boundaries, design inputs technical j approach, electrical review guidelines, list.of systems, documentation required, and acceptance criteri .

The documentation and review required for each of the 22 systems from the contractors included: 1) initial FMEA review by the AE, 2) initial I third party review by a different engineering firm, 3) AE response to

! third party review comments, 4) third party accepts AE's resolution, 5)

! 1 through 4 sent to the licensee for review and comments. and 6) final

[ report issued. The inspector reviewed and verified that the

. - _ _ _ - - . __ . . _ . _ .

J

_ _ . . _ - _ . ~ _. _. _. _ _. _ _ _ _ _ ._,_ _ _._.. _ _ _

, ^

44 documentation for 1) through 5) was completed in a satisfactory manne In addition, the inspector. reviewed all the electrical drawings (E amentary Diagrams) for the Reactor Building Spray System. 208-009: 4

Reactor Coolant System. 208-047
and the Feedwater System. 208-032 and verified that all Class 1E DC components were included in the system FMEA. The inspector verified that all third party comments were

! satisfactorily resolved. However, not all work had been completed and ,

eleven open items on PCs remain to be addressed. The eleven open PCs were PC 97-238. PC 97-294. PC 97-487. PC 97-491, PC 97-492. PC 97-135 PC 97-1353. PC 97 1870. PC 97-1871. PC 97-2468, and PC 97-248 The following open items for the DC Power FMEA had not been completed at l

the time of this inspection:

. The-Class 1E 120VAC Vital Bus FMEA had not been complete * Closure of the eleven open PCs identified abov '

. Final submittal by the AE.

! . Final review, approval, and closure by the licensee of all DC Power FMEA reports.

Conclusions The inspectors concluded that the licensee was in the process of 5 l implementing an effective DC Power FMEA program. The contractor ,

'

implementing the FMEA and the contractor reviewing the FMEA had identified and resolved-concerns in the Class 1E DC Power system in a satisfactory manner. .The FMEA had not been completed at this time. .The inspectors. assessed the licensee's performance, with respect to this DC l Power FMEA program in the five areas of continuing NRC concern:

'

i l * Management Oversight - Good 1

!- * Engineering Effectiveness - Good

. Knowledge of the Design Basis - Good

. Compliance with Regulations - Adequate

. Operator Performance .N/A E8 Miscellaneous Engineering Issues E8.1 (Ocen) URI 95-02-02. Control Room Habitability Envelooe Leakaae Insoection Scooe (92903)

The inspectors reviewed an engineering design basis (re)ortability)

evaluation of an. issue described in PC 97-2026. Design 3 asis Concern Relative to Control Room Habitability Dampers.

,

,,, . _ . , -. . - _ , , . . , . . ~ . +

i i

i i 1

b. Observations and Findinas The licensee had written PC 97-2026 on April 11. 1997, in response to an NRC inspector's concern. The PC stated: " Differential pressures assumed by FPC across habitability boundary dampers have recently been questioned by a Region II NRC inspector. These assumptions, if found to be in error, may affect conclu; ions reached in the following FPC 1 calculations and documents previously provided to the NRC: 186-0003.

l Rev. 8: I92-0011. Rev. 1: 3F0687-16 dated 6/30/87: and 3F0588-10. dated 5/23/88. The NRC has observed that different pressure values are used to calculate in/out leakage through the supply and exhaust dampers which are only a few feet apart in the same duct. The concern is that 0.7" w.g. of positive pressure (as assumed at AHD-2) may exist at AHD-1 instead of 1.0" w.g. negative pressure as assumed. This could result in a creater value for unfiltered inleakage than is presently assumed and may impact operator dose analyses."

The PC recommended that engineering evaluate the valid 1ty of the design I

assumptions in the calculations in question. A note on the PC stated that the NSM requested that, on completion of the engineering design basis evaluation, the results be reviewed for operability and reportabilit The inspectors reviewed the engineering evaluation response to the P The evaluation was dated May 6. 1997: had been ap] roved by an engineering supervisor: and had gone through the 3recursor Card Screening Committee. However, the inspectors noted that the evaluation contained several deficiencie . The engineering evaluation incorrectly stated that Calculation 192-0011. Rev. 1. calculated control room ventilation system 3ressure at damper AHD-1 to be 0.11 inches w.g. positiv iowever, the value in the calculation was actually 0.11 inches w.g. negativ . The engineering evaluation incorrectly stated that the assumed value in the calculation of 1.0 inches w.g. negative (in place of the 0.11 inches) at damper AHD-1 was conservative and did not lead to any nonconservative errors in the control room dose rate calculation. Thc inspectors noted that the assumption of a more negative value for the pressure at damper AHD-1 resulted in higher calculated inleakage through AHD-1. higher filtered leakage, lower unfiltered leakage in the control room dose "e calculation, and lower calculated dose to the operators. The assumption of a more negative value for ventilation system pressure at damper AHD-1 was therefore actually nonconservative. In addition the inspectors noted that the calculation for pressure at AHD-1 was incorrect in that it failed to include a baffle plate that had been installed in the ventilation duct. at the cooling coils. to prevent moisture carryover and wetting of the control room ceiling. The inspectors noted that inclusion of this baffle in the calculation would l

likely result in a positive value for the pressure at AHD-1 and a substantial increase in calculated operator dos . The engineering evaluation incorrectly st6ted that FPC has met the intent of the commitment to the NRC that the Control Room recirculation air mode system shall be single-failure proof or have compensatory actions proceduralize The evaluation stated that the system was not single-failure proof. but that compensatory measures were provided in E0P-3, AP-513, and AP-25 Those actions were that operators were required to verify thd the dampers were close In the event that one was not closed, operators would contact the technical support center (TSC) for assistance per EM-102. The en luation further stated that the dampers could be accessed and closed by personnel staffing the TSC. The inspector noted that contacting the TSC for assistance does not constitute having compensatory actions proceduralize Also. it could take the licensee up to one hour to man the TSC during an event. The inspector noted that the licensee had no instructions or equipment (1 e., ladders, tools) staged for repairing dampers or otherwise sealing the leakage paths. The inspector further noted that existing procedures for toxic gas directed operators to don self-contained breathing apparatus (SCBAs) and to stop the control room ventilation return fan, AHF-19, to reduce the inleakage of air in the event that any of the control room isolation dampers did not close. However, the procedures for an engineered safeguards (ES) or high radiation l actuation of the control room emergency ventilation system gave no !

similar guidance to operators. A licensed operator who was !

interviewed stated that he would not want to don SCBAs because they would interfere with performing the E0Ps, but stopping AHF-19 might be a good action to tak . The engineering evaluation incorrectly stated that the issue was !

not reportable because the control complex habitability envelope (CCHE) does not represent a " principal safety barrier," and a damper failure which creates a breach in the envelope does not represent a condition which "alone could have prevented the fulfillment of a safety function." The inspector noted that the licensee in the past has recognized that breaches of the CCHE, including damper failures, can result in being outside the design basis of the plant and being in a condition prohibited by the T Such conditions have in the past been reported by the license The inspectors discussed these issues with a group of engineering and licensing personnel, who then stated that they better understood the inspectors' concerns and would redo the analysi c. Conclusions The inspectors concluded that the licensee's engineering design basis (reportability) evaluation of PC 97-2026, Design Basis Concern Relative

'

to Control Room Habitability Dampers, was of very poor quality. It l

l

included incorrect statements related to engineering calculations.

l shallow and improper analyses, incorrect interpretations of NRC l requirements, and incorrect conclusion The inspectors assessed the licensee's performance, relative to this engineering design basis (reportability) evaluation, in the five areas l of continuing NRC concern:

. Management Oversight - Inadequate

. Engineering Effectiveness - Inadequate ,

e Knowledge of the Design Basis - Inadequate '

. Compliance with Regulations - Inadequate

. Operator Performance - N/A E8.2 .LC]osed) EA 95-126. VIO I.D.2: Swacover of ECCS Pumos' Suction from BWST (at five feet) to Reactor Buildina Sumo Was Inadeauate Insoection Scope (92903)

This violation involved an inadequate engineering evaluation of an E0P step. That E0P step directed operators to swap over manually the emergency core cooling system (ECCS) pumps' suction from the borated water storage tank (BWST) to the reactor building sump at a BWST level of five fee However, a BWST level of five feet was insufficient to ensure that all of the ECCS pumas would not be damaged by air entrainment from vortexing in t1e BWST. Also, the licensee had no official design calculation to support the swap over level of five fee An internal engineering memorandum was inappropriately used to support the swap over level of five fee ,

1 _bservations and Findinas The inspectors reviewed the licensee's response to this violation, interviewed licensee engineering and operations personnel, and reviewed !

the following procedures ,

-

E0P-07. Inadequate Core Cooling, Rev. 3. dated August 30. 1996:

-

E0P-08. LOCA Cooldown. Rev. 4. dated August 30, 1996: l l

-

AI-400F. New Procedures and Procedure Change Processes for E0P l APs. and VPs. Rev. 1. dated August 30, 1996: 1

-

AI-300. Plant Review Committee Charter. Rev. 40. dated March 27, 1997:

-

CP-213. Preparation of a Safety Assessment and Unreviewed Safety l Question Determination (10 CFR 50.59 Safety Evaluation), Rev. ;

dated April 4. 1997: and '

l

-

NL-08. Control of Crystal River Unit 3 FSAR, Rev. 6 dated l September 17, 1996 l l

l

i

!

,

The inspectors verified that the licensee had established a focussed E0P group in 1995, headed by a former design engineering manager who had received a senior reactor operator's license and that group was still intact. The inspectors also verified that the process for writing and revising E0Ps had been revised to require system engineering and design engineering reviews. The new E0P revision process also proceduralized l requirements for validation of E0P changes assuring correct technical criteria and human factors are included. Also, the procedure change screening process included a review of the FSAR for applicability to 10 CFR 50.59 safety evaluation In addition, the inspectors verified that E0P-07 and E0P-08 had been revised to include a higher swapover point from BWST suction to reactor ouilding sump (at 15 feet in the BWST), and that swapover level was appropriately supported by engineering calculations. Also, the licensee had completed a review of the FSAR, in February 1997, to ensure that FSAR information was correctly incorporated into plant procedure Further, the licensee had undertaken an E0P Enhancement Plan with a scheduled completion of November 21, 1997: prior to the restart from the current outag Conclusions The inspectors concluded that the licensee's corrective actions had been implemented, included actions to prevent recurrence of the violation, I and were effective improvement EA 95-126, VIO I.D.2 is close )

i The inspectors assessed the licensee's performance, relative to l corrective actions for this violation, in the five areas of continuing l NRC concern:

. Management Oversight - Good

. Engineering Effectiveness - Good

. Knowledge of the Design Basis - Good

. Compliance with Regulations - Good

. Operator Performance - Good E8.3 (Closed) EA 95-126. VIO II.A: E0Ps Allowed Sinole LPI Pumo to Suoolv Two HPI Pumos. With Insufficient NPSH For LPI Pumo Insoection Scoce (92903)

This. violation involved an inadequate engineering evaluation of an E0P step. That E0P step directed operators, under certain circumstances during post loss-of-coolant-accident operation, to align one low pressure injection (LPI) pump to take suction from the reactor building sump and discharge to two high pressure (HPI) pumps. However, this alignment would have resulted in inadequate NPSH for the LPI pump.

i

. _ . _ . _ _ _ _ _ . _ _ _ . __ . _ _ _ _ _ _ _ . . _ . _ . _ . _ . _ _ . _

l

!

I 49  !

b, Obse~rvations and Findinas

! The licen.see's corrective actions were essentially the same as for EA L

!

.95-126 VIO I.D.2. In addition, the inspectors verified that E0P-07'and !

E0P-08 had been revised to preclude operation of two HPI pumps supplied >

from a single LPI pum c. Conclusions l The. inspectors concluded that the licensee's corrective actions ha'd been '

, implemented, included actions to prevent recurrence of the violation.

l and were effective improvements- EA 95-126 VIO II.A is close .  :

The inspectors assessed the licensee's performance, relative to

-

'

corrective actions for'this violation, in the five areas of continuing NRC concern:

. Management Oversight -. Good

! * Engineering Effectiveness - Good l

  • Knowledge of the. Design Casis - Good

. Compliance with Regulations - Good

. Operator Performance - Good l (Closed) EA 95-126. VIO I.C.1: Failure to Take Adecuate Corrective Actions for 00erator Concerns Recardino OP-1038. Curve 8. for Makeuo Tank Pressure / Level ~ Limits.

.

a. Insoection Scooe (92903)

This violation involved inadequate corrective action for a Problem

!

Report where operators identified a concern with the accuracy of OP-1038._ Curve Curve 8 was the makeup tank. overpressure limit curv The licensee's engineering review of the o)erators' concern failed to

, identify promptly the significant errors-tlat were.present in Curve 8 and in the calculations that were the basis for the curve. As a result,

-

alant operations using the curve were frequently outside the desig ,

Jasis'of the facility. The inspectors followed up on the licensee's corrective actions for this violatio b. Observations and Findinas The inspectors reviewed the licensee's response to this violation, interviewed licensee engineering and operations personnel, and reviewed the following procedures:

-

AI-1700, Conduct of Nuclear Engineering and Projects Rev. O.

,

dated December 9, 1996:

i-l

-

NEP-213. Design Analysis / Calculations. Rev. 9. dated June 26, l 1995:

)

!

,

i:

L ,_ ,_ ,

_ __ _ _ . _ _ - - _ _ _ _ _ _ . . _ . - . _ _ _ _ _ _ _ . _ _ _ . . _

-

Nuclear Operations Engineering Standard OES-1; Design Review Board :

Expectations, Policies, and Practices: Rev. 1, dated March 11,

, 1997:

!

l-

-

01-9, Operations Procedures, Rev. 0., dated December 13, 1995:.and

-

0AP-27, Tracking / Trending System, Rev. 14, dated May 30, 1997;

,

l .The inspectors verified that the licensee had improved process controls

'

.for interdepartmental and interdisciplinary: interfaces. The process used by design engineers to produce calculations had been revised to require joint reviews with operations and. system engineering personnel, Also, independent third party review of . selected design calculations was

'

being performed. The inspectors reviewed the third party review of'tw modifications and 'related calculations. These third 3 arty reviews had identified no significant errors in the calculations aut did include some interesting comment l The inspectors . iso verified that the licensee had strengthened management oversight of design activities, including enhanced processes ,

and personnel changes The licensee had implemented and-continued to '

use a management single point of contact (issue manager) for important technical issues. Also, the licensee had im)lemented an interdisci alinary Design- Engineering Review Board (DERB)-to review !

design worc for technical accuracy and adherence to requirunents. The )

DERB was reviewing approximately 90% of all safety-related modifications being installed during the current outage, including all complex or multi-disciplinary modifications. In addition, the licensee established i an Engineering Programs Group to focus on longer duration technical  ;

issue J

!

In addition, the inspectors verified that the licensee had strengthened !

expectations for engineering and operations personnel. Personnel involved in the violation had been counselled. - Also, expectations had been communicated to all engineering personnel in "all hands" meetings and to supervisory personnel under joint signature of the engineering director and plant manager. An engineering representative was attending the operations morning turnover meeting to promote increased attention to operations' issues by engineering management. Both Design Engineering and Systems Engineering had required reading books that contained many pertinent )ieces of information, such as guidance on 10 CFR 50.59 evaluations. T1e engineering Event-Free 0]erations Program no longer. tracked performance trends and human errors; lowever, the Quality Programs group planned to begin trending Precursor Cards and had addressed that in procedure OAP-27. Tracking / Trending System, Rev. 14, l dated May 30, 199 The inspectors also verified that operators had participated in seminars

!

'with the operations manager, during requalification training at the '

. Training
Center, regarding communication strategies and methods to prevent " cockpit isolation." Also, these philosophies had been

-

proceduralized in operations instruction . . . _ . - _ - - _ - . - - _ . .. ._,

. -- - - . - . - - - - - - - - - - . . . - _ - . - . - - --

l l

!

51 Conclusions -

I The inspectors concluded that the licensee's: corrective actions had been l implemented included actions to prevent recurrence of the violation, L and were effective improvements. EA 95-126. VIO I.C.1 is closed.

e The inspectors assessed the. licensee's performance, relative to corrective actions.for this violation, in the five areas of continuing

'

NRC concern:

e Management Oversight - Good .

e Engineering Effectiveness - Good'. ..

e Knowledge of the Design Basis - Good e Compliance with Regulations - Good o Operator Performance - Good E8.5 (Closed) URI 96-01-02: Discreoancies in the Hiah Pressure In.iection System that do not Meet Desian Basis Analysis

! Insoection Scooe (92903)  :

This unresolved item was opened for further review of two issues that had been addressed in Problem Report 96-035; E0P Project Review Uncovers l '

Discrepancy in FSAR Single Failure Analysis. The two' issues were:

1) Testing the HPI automatic actuation system matrix. The concern

.

'

was that relays 3MUV-23x (AY), 3MUV-24X (AZ), 3MUV-25X (Z) and 3MUV-26X (AA) were not being tested bimonthly as part of the HPI automatic actuation system logic, as required by ITS 3. ) Loss of ES signal to the respective side HPI valves. The concern was that, on loss of a vital battery, the ES signal to the respective side HPI valves would be lost as well as the )ower to the valve operators, and this was not considered in the :SA Observations and Findinas The inspectors reviewed Problem Report 96-035', the licensee's response to the PR including a root cause evaluation, related TS, LER 96-007-0 HPI Line Break with Loss of Battery Could Result in Operator Reliance on Instrumentation Inadequate for Accident. Drawing B-208-041. Sheets MU-19 through 22 showing the HPI automatic actuation system matrix, and l Surveillance Procedure SP-457. Refueling Interval ECCS Response to a j Safety Injection Test Signa :

,

The licensee concluded that Relays 3MUV-23x (AY). 3MUV-24X (AZ), 3MUV-  ;

l 25X (Z) and 3MUV-26X (AA) were not part of the HPI automatic actuation l system logic, but instead were part of the end devices (HPI injection valves). Therefore, bimonthly testing per ITS 3.3.7 was not required.

. The relays were tested in SP-447 and SP-457A on a refueling interval, as

'

required. The inspectors verified the licensee's analysis and' concurred  ;

j with the licensee's conclusion.

f I

i

..- - _

.- , , , ,-, ,- . - -

, _ _ . _ _ _ ~ _ _ . _ _ _ _ _ . - . - _ _ _ _. _ - _ . _ _ ..

-

L I

l L  :

I

'

The licensee concluded that, on loss of a vital battery, the ES signal L to the respective-side HPI valves would be lost as well as the power to L the valve-operators. However, this design was correct By procedure,

.on loss'of a vital battery, o)erators are directed to' switch-power to i the valve control logic, whic1 allows them to control.the HPI injection

, valves manually, to obtain power from the other train. The inspectors t L verified the licensee's; analysis and concurred with the licensee's

! conclusio ,

, Conclusions The inspectors concluded that the licensee's analyses and conclusions in-resolving the questions. addressed by this URI were good. URI 96-01-02 is close ,

i The inspectors assessed the licensee's performance, relative to

' corrective actions for this violation, in the five areas of continuing NRC concern:

e Management Oversight - Good e Engineering Effectiveness - Good

.

e Knowledge of the Design Basis - Good

! e Compliance with Regulations , Good i e Operator Performance - Good

'

E8.6 (00en) EA 96-365. EA 96-465. EA 96-527. VT0 A.5 (01052). US0 Involvina a Decrease in the Reliability and an increase in the Probability of Failure of EFP-2 Insoection Scooe (92903)

- This violation involved the licensee *s implementation of a modification which removed the automatic open signal from valve ASV-204, which was-one of. the automatic steam supplies to the turbine driven emergency feedwater pump (EFP-2). The modification resulted in an unreviewed safety question (US0) due to a decrease in the. reliability and an

. increase .in the arobability of failure of EFP-2. The inspectors followed up on t1e licensee's corrective actions specified in their response to this VIO dated April 11, 1997.

, Observations and Findinas The resolution of this item was being tracked under licensee restart item R-4-A. The licensee established the Safety Analysis Group to perform independent reviews. These reviews also included 10 CFR 50.59 safety evaluations. The licensee had issued a revision to Compliance Procedure CP-213. Preparation of a Safety Assessment and Unreviewed ,

Safety Question Determination (10 CFR 50.59 Safety Evaluation). This l revision to the procedure became effective April 4, 1997, and was the controlling procedure.for.the licensee's 50.59 safety evaluation i process. The 3rocedure was being used'by all organizational units at l l

Crystal River Jnit 3 (CR-3). Training on Procedure CP-213 had been

.. . . . _ . . _ . .

- _ , _ ___

j

.- _ . _ . ._ ._ ___.___________ _ . . . . _ . _ _

b l

, 53 l

,

provided to members of the Safety Assessment Group and other engineering and plant-personnel.

l L The licensee had prepared modification approval record (MAR) 96-11-01-01 i

'

-to re-install the automatic open signal to Valve ASV-204. This MAR had

.

not been implemented at the time of this inspection. but was scheduled *

l to be implemented in late June 1997.

l- The NRC will assess-the adequacy of Procedure CP-213 the effectiveness-of the corrective actions and the quality of recently completed 50.59 safety-evaluations during an upcoming inspection of the licensee's 50.59 -

safety evaluation and USQ determination proces L

, Conclusion

!

'

The inspector concluded that the licensee had completed some of the corrective actions specified in the VIO response for this item. The adequacy and effectiveness of the corrective actions will be reviewed further during an upcoming NRC inspection of the licensee's 50.59 safety evaluation proces ,

'

The inspectors assessed the licensee's performance. relative to the corrective actions for this ' violation, in the five areas of continuing l NRC concern: i

!

e Management Oversight - Good-l e Engineering Effectiveness - N/A

'

e Knowledge of the Design Basis - N/A e Compliance with Regulations - Good-e Operator Performance - N/A E8.7 (Ooen) EA 96-365. EA 96-465. EA 96-527. VIO B (Examole 1) (02013).

Failure to Uodate ADolicable Desian Documents to Incoroorate Desian Information- Insoection Scooe (37550. 92903)

E This violation involved the licensee's failure to u)date the Final Safety Analysis Report'(FSAR). the Enhanced Design 3 asis Document ,

(EDBD). and the Improved Technical Specifications (ITS) Bases with )

'

regard to operation of EFP-2 for certain accident scenarios. The '

inspector followed up on the licenseets corrective actions by reviewing procedure changes, training records, internal licensee correspondence,

.and interviewing engineering personne Observations and Find 1nas  ;

,

The inspector noted that some of the corrective actions being l implemented to address this VIO were being tracked under licensee l restart items OP-6 and OP-7. The ins)ector reviewed some of the actions i addressed under restart item OP-6. T1ese corrective actions included changes to the following Nuclear Engineering Procedures (NEPs):

l -

l t

- _ . . . . . x- . . , . .. . . m. . . . . .__ - _ - - - . , _ _ . ,

-

NEP-104 Interface Design Control

-

NEP-210. Modification Approval Record

-

NEP-211. Commercial Grade Design Control

-

NEP-212. Processing of Modification Projects by Nuclear Projects

-

NEP-213. Design Analysis / Calculations j

-

NEP-222. Qualification for Equipment in the Scope of 10 CFR 50.49

-

NEP-224. Emergency Diesel Generator Load Calculations )

-

NEP-234. Station Blackout l

-

NEP-253. Preparation and Control of a Document Change Notice

-

NEP-254. Plant Equipment Equivalency Replacement Evaluation '

-

NEP-261. Design Verification Changes to the above procedures included, but were not limited to, the incorporation of Procedure CP-213 requirements, additional guidance !

regarding design inputs. and guidance regarding prompt revision to

'

design basis documents following implementation of a plant modificatio The inspector noted that changes to additional engineering procedures and )lant administrative procedures had not been completed at the time of t11s inspection. In addition, training of engineering personnel on the changes to the various NEPs had not been completed. Since some of the modifications had been implemented, the applicable design basis documents had not been u) dated. Licensee completion of the remaining corrective actions will 3e reviewed during a subsequent NRC inspection.

c. Conclusions The inspector concluded that all of the licensee's corrective actions for this violation had not been completed at the time of this inspection. This item remains open and will be reviewed further during subsequent NRC inspection The inspector assessed the licensee's performance, relative to corrective actions for this violation, in the five areas of continuing NRC concern:

e Management Oversight - Good e Engineering Effectiveness - N/A e Knowledge of the Design Basis - N/A e Compliance with Regulations - Good e Operator Performance - N/A

.

l l

l E8.8 (Ooen) EA 96-365. EA 96-465. EA 96-527. VIO B (Examole 2) (02013).

l Failure to Include Aoolicable Desian Information in the Desian Inout l Reauirements for a Modification Insoection Scooe (92903)

This violation involved a failure to include design basis information in the design input requirements for the MAR which disabled the automatic opening of Valve ASV-20 The inspector followed up on the licensee's corrective actions by reviewing procedure changes training records, internal licensee correspondence, and interviewing engineering personne Observations and Findinas The inspector noted that some of the corrective actions being implemented to address this VIO were being tracked under licensee restart items OP-6 and OP-7. The inspector reviewed some of the actions which included the actions discussed in paragra)h E8.Y of this repor In addition to the programmatic changes made, t1e licensee had also prepared MAR 96-11-01-01 to re-install the automatic o)en signal to valve ASV-204. This MAR had not been implemented at tie time of this inspection, but was scheduled to be implemented in late June 199 Also, applicable design basis documents had not been updated because all of the modifications had not been implemented. The inspector further noted that all of the training related to the corrective actions for this violation had not been completed. Licensee completion of the remaining corrective actions will be reviewed during a subsequent NRC inspectio Conclusions The inspector concluded that all of the licensee's corrective actions for this violation had not been completed at the time of this inspection. This item remains open and will be reviewed further during subsequent NRC inspection The inspector assessed the licensee's performance, relative to the corrective actions for this violation, in the five areas of continuing NRC concern:

e Management Oversight - Good e Engineering Effectiveness - N/A e Knowledge of the Design Basis - N/A e Compliance with Regulations - Good e Operator Performance - N/A

-

. -

I

'

IV. Plant Sucoort I

R1 Radiological Protection and Chemistry (RP&C) Controls R1.1 Radiation Protection Issues l

a. Insoection Scone (92904)  :

The inspectors reviewed a number of issues involving radiation protection issues identified recently by the license b. Observations and Findinas l

On April 11, 1997, the Manager of Radiation Protection issued a memorar.dum to all licensee personnel stating that three events had occurred when personnel entered the radiation control area (RCA) without dosimetry or without being signed onto a Radiation Work Permit (RWP). l The memorandum also discussed an event in which evidence was identified

'

of personnel consuming food and beverage inside the RCA. This

~

memorandum stated management expectations for workers when working in the RCA and outlined potential disciplinary actions that would be taken for personnel failing to meet these expectation During the next several months, more examples of licensee employees failing to adhere to either the licensee procedures or the management expectations were identified. During the inspection period, five individuals entered the RCA without properly activating their electronic alarming dosimeter (EAD), or else leaving the EAD in the reader at the entry point when logging in. One of these workers entered a posted high radiation area, contrary to procedural . requirements for entering those areas. One worker was observed entering the RCA area at the exit point to perform cleaning, without logging onto a RWP. One person was observed exiting and entering the RCA. by crossing the rope barriers on the berm. Several instances occurred where individuals exited dress out areas and left their EADs at the step off pad The licensee performed a review of these events and determined that the culpable personnel were not contract outage personnel, as they had surmised but were primarily experienced, permanent plant ]ersonnel for the most part. A Health Physics Self-Assessment done by tie licensee during this report Seriod as discussed in Section R7.1, discusses some

of these issues as Jeing symptomatic of bad radiation work habits.

! complacency, and Door communications of expectations by management.

l On May 29. 1997, the manager of Radiation Protection issued a memorandum addressed to all managers and directors. In this memorandum, the statement was made that unescorted access to the RCA is granted based u)on being a qualified radiation worker. The licensee stated that w1enever an individual fails to adequately perform as a radiation worker, their qualifications for unescorted access is brought into question. As a result, when a radiation worker violates procedural

!

I L

. . .. -, . - - - ..- -- - - - .~.- - - _ - - .- - - - - - -

requirements, the licensee will remove the person's thermoluminescent dosimetry (TLD) and suspend a'ccess to the RCA. The memorandum 3rovided a list-of' actions that would result in permanent RCA denial. T1e majority of these actions involve willful disregard of requirements; however, one of the criterion was repetitive failure by an individual to -

follow radiological practices. The manager of radiation protection made the statement.in the memorandum that no remediation for RCA access would be allowed for individuals meeting the above criterio The May 29. 1997, memorandum also discussed types of actions that would result in temporary RCA access denial: these included: failure to log into the access control _ system properly, failure to have required-dosimetry in the RCA, violation of RWPs. failure to control' a locked high radiation barrier, violation of radiological postings, and improper radiological work practices. The minimum requirements for an individual to regain RCA access were also outlined. The memorandum also stated that additional disciplinary measures would be imposed by station management, depending upon the severity of the event and the individuals total work recor The licensee required that all station 3ersonnel be trained on this policy. The inspectors verified that t1is training has been accomplishe Licensee Procedure, RSP-101, Basic Radiological Safety Informati 7 and Instructions for Radiation Workers, Revision 23, )rovided basic requirements for radiation workers. Step 3.4.2 _imits and Precautions, required that any entry into a RCA be authorized via an RWP. Step 3.4.13. Entrance to a High Radiation Area, stated that any entry to a high radiation area would be controlled by issuance of a RWP and that any personnel entering a high radiation area would have radiation dose monitoring, such as a radiation monitoring device, which continuously indicated the radiation dose rate in the area, an integrating alarm dosimeter (IAD), which alarmed when a preset integrated dose or dose rate was received, or a qualified Health Physics technician with a radiation dose rate monitoring device. These identified issues were examples of failure to follow Procedure RSP-101. However, the licensee has taken corrective measures to prevent recurrence, including establishing and documenting expectations for radiation workers and ,

training all personnel in these expectations. Consistent with Section VII.B.1 of the NRC Enforcement Policy, this licensee-identified and corrected violation was treated as a Non-Cited Violation NCV 50-302/97-07.05, Failure to Follow Procedure for Access to a Radiation Control Area, Conclusions A degradation in radiation workers adherence to good radiation work practices and adherence to the applicable procedures was noted. The licensee identified this trend and took strong corrective actions to address the issue: these actions included developing and documenting management's expectations for radiation workers and assuring that all u

I personnel were trained on the expectations and aware of the consequences for failure to meet these expectation R Quality Assurance in RP&C Activities R7.1 Health Physics Self-Assessment (CRSA 97-03)

a. Insoection Scoce (71750)

The ins ector reviewed the licensee's self-assessment in the area of health hysics and RCA access control progra b. Observations and Findinas The licensee's self-assessment included reviews of industry experienc precursor card, field observations and interviews, and-a third party verification of the radiation work permit program. As a result of the self-assessment, thirteen PCs were issued. Four of these were to document identified strengths. The inspectors reviewed the strengths identified in the self-assessment and concluded that characterizing .

several of thes'e findings as strengths and issuing PCs to document them may have been inappropriate. The fact that personnel were aware that when questions exist on the meaning of an RWP they were to discuss the subject with health physks technicians, was an appropriate response, but not necessarily a matter to be distinguished as a strengt Th'e licensee noted weaknesses in general work practices, specifically, frisking problems and dress out problems. These weaknesses were-noted throughout the plant employee population. The self-assessment concluded that these acts were symptomatic of bad radiation work habit complacency and poor communications of expectations. The assessor noted that health physics technicians were also noted performing some of these practices and that it would be unrealistic to expect the radiation 4 worker perform to a higher. standard than the health physics )

organizatio j c. Conclusions The inspectors reviewed the self-assessment report and concluded that while some of the strengths identified seemed inappropriately classified, the observations and identified weaknesses were timely and self critica S1 Conduct of Security and Safeguards Activities S1.1 Loss of Protected Area Alarm Zones (71750) ,

On May 30, 1997, work on the perimeter intrusion detection system was being conducted by maintenance technicians. The security operator disabled the affected security zone alarms and a guard was posted per ,

procedure to allow the maintenance to be performed. However, the t security operator failed to reenable the zone when the technician and w .. .. . , - . . . . . - -

_. - . . - . -.- - - . - . - . - - -. ... - - - - . - . . . - -

L 59 guard in' formed him that the work was. complet Consequently, the zone ;

.did 'not have alarm capability and was not properly compensated for ap3roximately two hours until it was discovered and reenabled by a su) sequent operator. The licensee determined the event was reportable-to the NRC per 10 CFR 73.71, made a one hour phone report, and was  ;

developing written Licensee Event. Report (LER) 97-S02. The inspector will evaluate the adequacy of licensee's actions during their review of the LE ,

S2 Status of Security Facilities and Equipment

$2.1 Tbmocrary loss of Power to Central Alarm Station Eauioment and Subseauent Reolacement of an Uninterruotible Power Suoolv Unit , Insoection Scoce (71750)

,

The inspector reviewed the licensee's resolution of problems previously ,

-documented in NRC Inspection Report (IR) 50-302/97-0 The inspector  !

reviewed security logs. Security Information Reports,. precursor. cards, a problem re) ort, and-procedure PM-134. Testing of Security Systems Alternate power Sources, Revision 13. The inspectors attended meetings l that discussed actions to replace an uninterruptible power supply (UPS)

l unit in the central alarm station (CAS). The inspectors also observed  ;

l activities during the replacement of the UPS uni l Ob'servations and Findinas

'A' problem report (PR 96-0270) and precursor card (PC 96-3573) written by-

, security in July 1996 documented a problem during a routine transfer of ( primary power to alternate power on the "C" inverter (VBIT-1C). - This i transfer caused degradation of security camera coverage on eight cameras

. covering the protected area intrusion detection system. The PR stated

'

.

that, historically, when the "C' vital bus was transferred' from VBIT-1C

to VBTR-4C-(vital bus transformer) and back..there had been " minor l problems" noted by security. These minor problems were related to

-

I l

degradation of the picture quality on the security-television monitor No apparent cause was determined for the vital bus transfer problem:

nevertheless, a corrective action plan was developed. The corrective actions were to monitor the equipment during the next scheduled-l transfer, analyze the data collected during the next transfer, develop

-

an action plan to resolve any abnormalities identified from the collected data, and inform security personnel to notify Operations as soon as possible after a similar type problem was identified. By l September 1996, two of the four corrective actions had been completed.

l These were: informing security personnel to notify Operations and .

connecting equipment to the vital bus for monitorin !

L On January 22, 1997, a transfer of primary power to alternate power on l the "C" inverter (VBIT-1C) was performed. This transfer caused i degradation of security camera coverage and required intensive posting l

of security officers, similar to the July 30, 1996, even PC 97-0618 i l

I g

_ _ __ ._ _ ._ _ ._

was written by security documenting this event and was assigned to the Operations Department with a grade level "D" The power transfer was done to troubleshoot a problem with VBIT-1C. A blown fuse was identified as the root cause for the problem and replaced. When Operations transferred power back to the primary source (VBIT-1C),

security camera picture quality was restored (self-corrected). However, for three days security was required to post extra oersonnel in the l areas affected by the poor picture quality. Althougl Operations )

initiated the transfer causing the camera degradation, the cause of the problem was not an Operations issue, and any subsequent investigation and corrective action should have been done by Maintenance or Engineering. However, as of May 30. PC 97-0618 was still open and still assigned to Operations. The inspector considered this to be poor assignment and implementation of corrective action. Operations initiated a transfer of PC 97-0618 to another departmen ,

i The next series of events occurred on April 17, 1997, and was related to a UPS unit in the CAS: however, the events began with a power transfer evolution. The power transfer evolution was a troubleshooting effort by j electrical maintenance personnel to support the resolution of the 1 security camera picture quality problem. The security camera picture quality problem was resolved, but a new problem was identified when an l unexpected power loss to the CAS workstations and intelligent i multiplexer (IMUX-2) occurred when power was transferred between the i alternate and primary power sources (for additional details refer to NRC IR 50-302/97-05). Power was lost two more times that day as a result of l operation of the UPS that was not understood by the CAS operator It was not until the inspector questioned several maintenance and security personnel that action was taken by security to attempt to understand and provide guidance to alarm station operators on the purpose and function of the CAS UPS unit and to prevent another similar loss of CAS and IMUX-2 power. On April 30, written instructions were provided via a Security Information Report, to CAS operators on the frequency of monitoring the UPS indication lights and what to do when certain indicator lights were lit or flashin Long term corrective actions were also being evaluated by Engineerin On May 14 at 03:18 a.m.. power was again unexpectedly lost to the CAS workstations and IMUX-2. After electricians discovered and replaced a blown fuse in the CAS 2 Distribution Panel, the CAS workstations and IMUX re-powered. At a) proximately 0800 hours0.00926 days <br />0.222 hours <br />0.00132 weeks <br />3.044e-4 months <br />, power was agd n unexpectedly lost to tie CAS workstations and IMUX-2. From this time until the replacement of the CAS UPS on May 16. security was pre-posting personnel because it was determined that the UPS was tripping approximately every three hours and three minutes. Precursor Card 97-3312 was written by security documenting the event and was assigned to Engineering with a grade level "C" The apparent cause for this PC was due on June 4. 199 In December 1995, the secondary alarm station (SAS) had its UPS removed by Field Change Notice (FCN) 5. Security UPS#2 Removal, of MAR 88-03-04-m

.

_ _ _ . _ _ _ . _ _ _ _ . _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ . _ . _

l

,

25 Security Upgrade - IMUX and Perimeter Installation. Battery -

swelling due to o~ld age was identified as the root cause for this UPS failure, but an extent of condition was not considered for the UPS in the CAS. A preventive maintenance (PM) program for the CAS and SAS UPS ( units was not in place, nor was one considered for the CAS UPS once the

SAS UPS battery swelling problem was identified.

l The Engineering evaluation.for the April 17 events determined that the CAS UPS could not handle the quickness of a power transfer (on the order of milliseconds) and therefore must either be removed or replace Engineering determined.that replacement of the unit would be the best short term option. Another need for an expeditious solution was because the UPS unit was tripping every three hours and required security to post various locations throughout the plant and test several vital area doors and alarms each time power was temporarily lost to the CAS workstations and IMUX- Plans to remove the UPS were pursued in parallel with plans for !

replacement. Three state-of-the-art UPS units were ordered with specifications that would assure these units would handle the power transfer. The reason three UPS units were ordered were in case Engineering determined that the SAS UPS units would need to be put back in. The CAS UPS was replaced and satisfactorily tested on May 16, 199 l Engineering is still evaluating whether to remove the CAS UPS or re-

!

install the SAS UPS unit l c. Conclusions The inspectors concluded that security failed to understand their equipment and elevate to the proper level their concern with the l malfunctioning of their equipment. Also. engineering failed to consider 1 the extent of condition when it was identified that the SAS UPS batteries had swollen due to old age. In addition,' consideration was

, not given to establishing a PM program to maintain the UPS units adequately. These examples of inadequate corrective action are considered a violation of NRC requirements. The violation will be tracked as VIO 50-302/97-07-06. Inadequate Corrective Action For Use of an Uninterruptible Power Supply Unit in the Security Central Alarm Statio S6 Security Organization and Administration S6.1 Effective June 2,1997. Fred Marcussen became the new Security Manager, reporting to Mark Marano. Director, Nuclear Site and Business Suppor Dave Watson, who has been the Security Manager _since October 1996, will

.

remain in the Security organization in a senior staff positio l

i I

i l

I L _j

_- - . . - - . - . - - --. .

.

l l l

l l . 62 I-L. Manaaement Meetinas X1 Exit Meeting Summary y The inspection scope and findings'were summarized on May 9. May 23 and June 9, 1997. Proprietary information is not contained in this report, Dissenting comments were not received from the licensee, l X3 Hanagement Meeting Summary ,

'

X3.1 A meeting was held at the Region II office in Atlanta on May 8, 199 The purpose of the meeting was Engineering - Extent of Condition

,

'

requested by the NRC. A separate meeting summary was issued on May 15, 199 X3.2 A meeting was held at the Region II office in Atlanta on May 9,199 The purpose of the meeting was to discuss items related to restart. A separate meeting summary was issued on May 14, 199 PARTIAL LIST OF PERSONS CONTACTED l Licensees l

l R. Anderson, Senior Vice President Nuclear Operations

'

J Baumstark, Director Quality. Programs l

'

J. Campbell, Assistant Plant Director, Maintenance and Radiation Protection J. Cowan. Vice President Nuclear Production R. Davis, Assistant-Plant Director. Operations and Chemistry l

'

R. Grazio,' Director, Nuclear Regulatory Affairs G. Halnon Assistant Plant Director. Nuclear Safety B. Hickle, Director, Nuclear Plant Operations J. Holden. Director, Nuclear Engineering and Projects l D. Kunsemiller, Manager Nuclear Licensing i

M. Marano, Director, Nuclear Site and Business Support

!

W.-Pike Manager Nuclear Regulatory Assurance

! -NRC l J. Blake Sr. Project Manager, Maintenance., Region II (May'19 through 23, i 1997)'

l R..Caldwell. Resident Inspector. Farley (May 12 through 16, 1997)

P. Fillion, Reactor Inspector, Region II (hoy 5 through 9. 1997)

P. Harmon, Reactor Engineer. Region II (June 2 through 6, 1997)

G. Hopper, Reactor Engineer, Region t! (June 2 through 6, 1997)

J. ilunter, Budget &~ Financial Analyst,. %gion II (May 15. 1997)

K. La,1 dis. Branch Chief, Region II (May 5 through 6, 1997) .

M. Miller, Reactor Inspector, Region II (May 5 through 9. May 19 through 23, l

. June 2 through 6, 1997)

! L. Raghavan, Project Manager, NRR (May 14 through 15. May 28, 1997)

! R. Schin. Reactor Inspector, Region II (May 5 through 9. May 19 through 23, )

June 2 through 6, 1997) ,

l Steiner, Reactor Engineer, Region II (June 2 through 4, 1997)

E l

- _ _ - . . _ . . . . _ _ . _ . _ . _ _ _ _ _ _ _ _ _ . - . _ - - - . . . _ . _ _

l

o .

l 63 ,

M. Thomas, Reactor Inspector Region II (May 5 through 9. June 2 through 6, 1997)

R._Zimmerman. Associate Director, Projects NRR (May 28, 1997)

'

INSPECTION PROCEDURES USED

.IP 37550: Engineering  !

IP 37551: Onsite Engineering- 1 IP 40500: Effectiveness of Licensee Controls in Identifying. Resolving and Preventing Problems .

IP 50002: Steani Generators i l IP 61726: Surveillance Observations IP 62700: Maintenance Implementation

'

IP 62707: Conduct of Maintenance IP 71707: Plant Operations-IP 71750: Plant Support Activities IP 73753: Inservice Inspection IP 92901: Followup - Operations  !

-IP 92902: Followup - Maintenance '

IP 92903: Followup - Engineering IP 92904: Followup - Plant Support l ITEMS OPENED, CLOSED, AND DISCUSED Ocened )

Tvoe Item Number Status Descriotion and Reference VIO 50-302/97-07-01 Open Failure to Follow Procedure CP-111 for the Processing of Precursor Cards. (paragraph 07.2)

VIO 50-302/97-07-02 Open Inadecuate Planning and Controlling of Hycrostatic Testing. (paragraph M1.1 ) .

URI 50-302/97-07-03 Open Reactor Building Liner Plate

'

Degradation. (paragraph M2.1)

URI 50-302/97-07-04 Open Unanalyzed Combustible Burden in Reactor Building HVAC Ductwork, (paragraph M2.1)

VIO 50-302/97-07-06 Open Inadequate Corrective Action For Use of an Uninterruptible Power Supply Unit in the Security Central Alarm Station. (paragraph S2.1)

,

i

-

-. . -- -. - - -- .. - . - . .- . .

!- 64 Closed Tvoe Item Number Status Descriotion and Reference EA 95-126 VIO Closed Nine Instances Where Operators

.'

Violated Procedures for Makeup Tank Pressure / Level Control. (paragraph 08.2)

EA 95-126, VIO Closed Conduct of Unauthorized Tests of Makeup Tank Without 10 CFR 50.59 Evaluation. (paragraph 08.3)

EA 95-126 VIO I.D.2 Closed Swapover of ECCS Pumps' Suction from BWST (at five feet) to Reactor Building Sump Was Inadequat (paragraph E8.2)

EA 95-126. VIO II.A Closed E0Ps Allowed Single LPI Pump to Supply Two HPI Pumps, With Insufficient NPSH For LPI Pum (paragraph E8.3)

EA 95-126 VIO I.C.1 Closed Failure to take adequate corrective actions for Operator concerns regarding OP-103B, Curve 8. for Makeup Tank Pressure / Level Limit (paragraph E8.4)

URI 96-01-02 Closed Discrepancies in the High Pressure Injection System that do not meet Design Basis Analysis. (paragraph E8.5)

NCV 50-302/97-07-05 Closed Failure to Follow Procedure for Access to a Radiation Control Are l (paragraph R1.1)  !

l

'

Discussed T._yp_e

.

Item Number Status Descriotion and Reference ;

VIO 50-302/97-05-01 Open Failure To Follow Equipment Tagging l Control Procedural Requirement !

(paragraph 01.2)

]

URI 50-302/95-02-02 Open Control Room Habitability Envelope l Leakage. (paragraph E8.1) j l

t l

l j

l

.

-

_ . . . __ __ . . ._ _ ~. ._ _ __

l'

l l

l I

EA 96-365. 96-46 Open US0 Involving a Decrease in the (01052) Reliability and an Increase 96-52 VIO A.5 in the Probability of Failure of EFP-2 (paragraph E8.6)

EA 96-365.96-465 Open Failure to Update Applicable Design 96-527. VIO B Documents to Incorporate Design Ex. 1 (02013) Information (paragraph E8.7)

EA 96-365.96-465 Open Failure to Include Applicable Design 96-527. VIO B Information in the Design Input Ex. 2 (02013) Requirements for a Modification (paragraph E8.8)

LIST OF ACRONYMS USED AC - Alternating Current ACDP - AC Distribution Panel ACE - Apparent Cause Evaluator AE - Architect / Engineer i AI - Administrative Instruction '

ANSS - Assistant Nuclear Shift Supervisor ,

AP - Abnormal Procedures ,

ASME - American Society of Mechanical Engineers j BWST - Borated Water Storage Tank 1 CARB - Corrective Action Review Board  ;

CAS - Central Alarm Station  !

CCHE - Control Complex Habitability Envelope CFR - Code of Federal Regulations CN0 - Chief Nuclear Operator  !

CP - Compliance Procedure CREVS - Control Room Emergency Ventilation System i CR3 - Crystal River Unit 3 DBI - Design Basis Issue DC - Decay Heat Closed Cycle Cooling EA - Enforcement Action EAD - Electronic Alarming Dosimeter EC - Eddy Current ECCS - Emergency Core Cooling System ECO - Engineering Change Order ECCS - Emergency Core Cooling System EDBD - Enhanced Design Basis Document EDG - Emergency Diesel Generator EFP - Turbine Driven Emergency Feedwater Pump EFW - Emergency Feedwater E0P - Emergency Operating Procedure ES - Engineered Safeguards FCN - Field Change Notice FMEA - Failure Modes and Effects Analysis FPC - Florida Power Corporation FSAR - Final Safety Analysis Report GL - Generic Letter

.

_

_ _ _ ._ __ . _ _ _ . _ _ _ - - . ___ . _ _ _ _ _ _ _ _

e 66 HPI - High Pressure Injection HVAC - Heating Ventilation and Air Conditioning IAD - Integrating Alarm Dosimeter IEEE - Institute of Electrical and Electronic Engineers IFI - Inspection Followup Item IN - Information Notice INPO - Institute for Nuclear Power Operations IPAP - Integrated Performance Assessment Process IR - Inspection Report ISI - Inservice Inspection IST - Inservice Test JC0 - Justification for Continued Operation LER - Licensee Event Report LOCA - Loss of Coolant Accident LOOP - Loss of Offsite Power

-

LPI - Low Pressure Injection i

LTOP - Low Temperature Overpressure Protection MAR - Modification Approval Record .

MP - Maintenance Procedure MUT - Make-up Tank NCV - Non-cited Violation NEP - Nuclear Engineering Procedure NGRC - Nuclear General Review Committee NNI - Non Nuclear Instrumentation NOE - Nuclear Operations Engineering NOV - Notice of Violation N0A - Nuclear Quality Assessments NRC - Nuclear Regulatory Commission NRR - Office of Nuclear Reactor Regulation NSAT - Nuclear Safety Assessment Team NSM - Nuclear Shift Manager NSS - Nuclear Shift Supervisor OCR - Operability Concerns Resolution ,

OI - Operating Instruction OTSG - Once Through Steam Generator PC - Precursor Card PCSC - Precursor Card Screening Committee PM - Preventive Maintenance PORV - Power Operated Relief Valve

,

PR - Problem Report .

PRC - Plant Review Conmittee 0A - Quality Assurance ,

OPD - Quality Programs Department OPS - Quality Programs Surveillances

! RB - Reactor Building RCA - Radiologically Controlled Area RCS - Reactor Coolant System RCT - Root Cause Team l

'

REA - Request for Engineering Assistance RG - Regulatory Guide i RP&C - Radiological Protection and Chemistry RWP - Radiation Work Permit I

,-

. . . . . .- - - .. - . - - . - - . - - .

l SAS - Secondary Alarm Station SCBA - Self-Contained Breathing Apparatus SDBI - Suspected Design Basis Issue SER - Safety Evaluation Report ,

SP - Surveillance Procedure l SR0 - Senior Reactor Operator l SRR' - System Readiness Review SSOD - Shift Supervisor on Duty STAR - Stop,.Think, Act, Review TLD - Thermoluminescent Dosimetry i

TP - Test Procedure l TS - Technical Specification 1 TSC - Technical Su) port Center UPS - Uninterruptiale Power Supply

URI - Unresolved Item VIO - Violation I l WD - Waste Disposal System I

'

WGDT - Waste Gas Decay Tank j WGST - Waste Gas Surge Tank

!  !;

l

'

,

l l

,

l l

i

.

f i

L