IR 05000373/2003004
ML033020492 | |
Person / Time | |
---|---|
Site: | LaSalle |
Issue date: | 10/27/2003 |
From: | Burgess B NRC/RGN-III/DRP/RPB2 |
To: | Skolds J Exelon Generation Co |
References | |
IR-03-004 | |
Download: ML033020492 (46) | |
Text
ber 27, 2003
SUBJECT:
LASALLE COUNTY GENERATING STATION, UNITS 1 AND 2 NRC INTEGRATED INSPECTION REPORT 05000373/2003004; 05000374/2003004
Dear Mr. Skolds:
On September 30, 2003, the U.S. Nuclear Regulatory Commission (NRC) completed an integrated inspection at your LaSalle County Generating Station, Units 1 and 2. The enclosed report documents the inspection findings which were discussed on October 7, 2003, with Mr. G. Barnes and other members of your staff.
The inspection examined activities conducted under your license as they relate to safety and compliance with the Commissions rules and regulations and with the conditions of your license.
The inspectors reviewed selected procedures and records, observed activities, and interviewed personnel.
Based on the results of this inspection, there were four self-revealed findings of very low safety significance, and one associated violation of NRC requirements. However, because the violation was non-willful, non-repetitive, and entered into your corrective action program, the NRC is treating this as a Non-Cited Violation in accordance with Section VI.A.l of the NRCs Enforcement Policy.
If you contest the Non-Cited Violation (NCV) in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001, with copies to the Regional Administrator, Region III; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC Resident Inspectors Office at the LaSalle County Generating Station. In accordance with 10 CFR 2.790 of the NRCs "Rules of Practice," a copy of this letter and its enclosures will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRCs document system (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).
Sincerely,
/ RA /
Bruce L. Burgess, Chief Branch 2 Division of Reactor Projects Docket Nos. 50-373; 50-374 License Nos. NPF-11; NPF-18
Enclosure:
Inspection Report 05000373/2003004; 05000374/2003004 w/Attachment: Supplemental Information
REGION III==
Docket Nos: 50-373; 50-374 License Nos: NPF-11; NPF-18 Report No: 05000373/2003004; 05000374/2003004 Licensee: Exelon Nuclear Generation Company Facility: LaSalle County Generating Station, Units 1 and 2 Location: 2601 N. 21st Road Marseilles, IL 61341 Dates: July 1 through September 30, 2003 Inspectors: D. Kimble, Senior Resident Inspector D. Eskins, Resident Inspector E. Brown, Project Manager - NRR M. Jordan, NRC Contractor D. Roberts, Technical Assistant - NRR J. Yesinowski, Illinois Emergency Management Agency Observers: D. Melendez, NRC Intern Approved by: Bruce L. Burgess, Chief Branch 2 Division of Reactor Projects Enclosure
SUMMARY OF FINDINGS
IR 05000373/2003004, 05000374/2003004; 07/01/03 - 09/30/03; Exelon Nuclear Generation
Company; LaSalle County Generating Station, Units 1 & 2; Maintenance Risk Assessments and Emergent Work Evaluation and Event Followup.
The inspection was conducted by resident inspectors, regional inspectors, inspectors on temporary assignment from NRC Headquarters - Nuclear Reactor Regulation, and a NRC contractor. The report covers a 3-month period of resident inspection. Four Green findings and one associated non-cited violation was identified. The significance of most findings is indicated by their color (Green, White, Yellow, Red) using Inspection Manual Chapter (IMC) 0609 Significance Determination Process (SDP). Findings for which the SDP does not apply may be "Green," or be assigned a severity level after NRC management review. The NRC's program for overseeing the safe operation of commercial nuclear power reactors is described in NUREG-1649, "Reactor Oversight Process," Revision 3, dated July 2000.
A. Inspector-Identified and Self-Revealed Findings
Cornerstone: Initiating Events
- Green.
A finding of very low safety significance was self-revealed following impromptu repairs to the control air for the Unit 2 motor-driven reactor feed pump (MDRFP) minimum flow valve. A maintenance supervisor, conducting what was supposed to have been only a pre-job investigative walkdown, conducted the actual repairs without any written work documents or procedures.
The majority of the cause for this finding relates to the cross-cutting area of human performance.
The finding was determined to be more than minor in that if left uncorrected, it would represent a more significant safety concern. The finding was determined to be of very low safety significance because maintenance supervisors actions did not result in an actual plant transient. (Section 1R13.2)
- Green.
A finding of very low safety significance was self-revealed following the unauthorized operation of station equipment by a plant engineer. The majority of the cause for this finding relates to the cross-cutting area of human performance.
The finding was determined to be more than minor in that if left uncorrected, it would represent a more significant safety concern. The finding was determined to be of very low safety significance because the engineers actions did not result in an actual plant transient. (Section 1R13.3)
Cornerstone: Mitigating Systems
- Green.
A finding of very low safety significance was self-revealed following the failure on the part of maintenance personnel to reinstall a required part during a March 2003 overhaul of the Unit 2 station air compressor (SAC). The majority of the cause for this finding relates to the cross-cutting area of human performance.
The finding was determined to be more than minor in that if left uncorrected, it would represent a more significant safety concern. The finding was determined to be of very low safety significance because the licensee was able to demonstrate in an engineering analysis that the SAC could be considered available and capable of operation for its mission time even with the subject part missing. (Section 1R13.1)
- Green.
A finding of very low safety significance was self-revealed involving the licensees failure to properly delineate what actions can be performed by plant personnel without having appropriate written procedures or instructions. This lack of delineation allowed an operator to attempt to remove dust from a circuit board by blowing on it, which resulted in a partial CO2 system actuation and the closure of the 0 emergency diesel generator (EDG) ventilation dampers. This rendered the 0 EDG inoperable and unavailable for the task of being able to complete its mission time. The majority of the cause for this finding relates to the cross-cutting area of human performance.
The finding was determined to be more than minor in that it had an adverse impact on the availability and capability of the 0 EDG, a mitigating system component. The finding was determined to be of very low safety significance because the licensee was able to demonstrate in an engineering analysis that the 0 EDG would automatically start and load with the fire dampers closed, and that the opposite trains EDG, the 1A EDG, could be made fully available from its surveillance test configuration in a short period of time. A Non-Cited Violation for failure to comply with 10 CFR 50, Appendix B, Criterion V, Instructions,
Procedures, and Drawings, was also identified by the inspectors.
(Section 4OA3.3)
Licensee-Identified Violations
No violations of significance were identified.
REPORT DETAILS
Summary of Plant Status
Unit 1 The unit began the inspection period operating at full power. On July 7, 2003, power was reduced to approximately 89 percent when several feedwater heaters isolated from the electrical transient that resulted from the Unit 2 scram. The unit returned to full power operation on July 8, 2003. On August 2, 2003, power was reduced to approximately 84 percent in response to the isolation of the 14B feedwater heater due to a failed normal drain valve.
Repairs were performed and the unit returned to full power operation on August 3, 2003. A planned power reduction to approximately 50 percent was performed on August 30, 2003, to facilitate control rod testing and pattern adjustments. The unit returned to full power operation on September 1, 2003. On September 14, 2003, power was reduced to approximately 88 percent in response to another isolation of the 14B feedwater heater. Repairs were accomplished and the unit returned to full power on September 16, 2003. Unit 1 remained at full power for the remainder of the inspection period.
Unit 2 The unit began the inspection period operating at full power. On July 7, 2003, the unit scrammed when the B phase of the main power transformer disconnect failed and caused a trip of the main electrical generator (Sections 1R14.1, 1R20, and 4OA3.4). The unit was forced to enter cold shutdown to replace a leaking safety-relief valve (SRV), and did not return to power operation until July 12, 2003. Full power operation was achieved on July 16, 2003. On September 13, 2003, reactor power was reduced to the point-of-adding-heat and the main electrical generator taken off line to facilitate various short-duration planned maintenance activities. The main generator was placed back on line on September 14, 2003, and the unit returned to full power operation on September 18, 2003. Unit 2 remained at full power for the remainder of the inspection period.
REACTOR SAFETY
Cornerstones: Initiating Events, Mitigating Systems, Barrier Integrity, and Emergency Preparedness
1R04 Equipment Alignment
a. Inspection Scope
The inspectors performed a partial walkdown of the following equipment trains to verify operability and proper equipment lineup. These systems were selected based upon risk significance, plant configuration, system work or testing, or inoperable or degraded conditions.
- Unit 1 Reactor Core Isolation Cooling (RCIC)
- Unit 1 High Pressure Core Spray (HPCS)
The inspectors verified the position of critical redundant equipment and looked for any discrepancies between the existing equipment lineup and the required lineup.
b. Findings
No findings of significance were identified.
1R05 Fire Protection
a. Inspection Scope
The inspectors walked down the following risk significant areas looking for any fire protection issues. The inspectors selected areas containing systems, structures, or components that the licensee identified as important to reactor safety.
- Fire Zone 2B1, Unit 1 Rx Bldg - Elevation 820' 6"
- Fire Zone 2B2, Unit 1 Rx Bldg - Elevation 820' 6"
- Fire Zone 2D, Unit 1 Rx Bldg - Elevation 786' 6"
- Fire Zone 3B1, Unit 2 Rx Bldg - Elevation 820' 6"
- Fire Zone 3B2, Unit 2 Rx Bldg - Elevation 820' 6"
- Fire Zone 3D, Unit 2 Rx Bldg - Elevation 786' 6"
- Fire Zone 4E1, Unit 1 Auxiliary Equipment Room - Elevation 731'
- Fire Zone 4F2, Unit 2 Division 1 Essential Switchgear Room - Elevation 710'
- Fire Zone 5D2, Unit 2 Auxiliary Building, HPCS Switchgear Area - Elevation 687'
- Fire Zone 7B1, Unit 1 HPCS Diesel Generator Room - Elevation 710'
- Fire Zone 7B2, Unit 1 Division 1 Standby Diesel Generator Room -
Elevation 710'
- Fire Zone 7B3, Unit 1 Division 2 Standby Diesel Generator Room -
Elevation 710'
- Fire Zone 5A4, Cable Area - Elevation 749'
- Fire Zone 4D1-1, Unit 1 Division Cable Riser Aisle - Elevation 749'
- Fire Zone 4D3, Unit 1 Electrical Equipment Room - Elevation 749'
- Fire Zone 4D4, Unit 2 Electrical Equipment Room - Elevation 749'
- Fire Zone 2H2, Unit 1 Rx Bldg - HPCS Corner Room
- Fire Zone 2H4, Unit 1 Rx Bldg - RCIC/Low Pressure Core Spray (LPCS) Corner Room The inspectors reviewed the control of transient combustibles and ignition sources, fire detection equipment, manual suppression capabilities, passive suppression capabilities, automatic suppression capabilities, and barriers to fire propagation.
b. Findings
No findings of significance were identified.
1R11 Licensed Operator Requalification Program
a. Inspection Scope
The inspectors observed a training crew during evaluated simulator scenarios and reviewed licensed operator performance in mitigating the consequences of events. The scenarios were part of the crews periodic licensee requalification examination. Areas observed by the inspectors included: clarity and formality of communications, timeliness of actions, prioritization of activities, procedural adequacy and implementation, control board manipulations, command oversight, emergency plan execution, and group dynamics.
b. Findings
No findings of significance were identified.
1R12 Maintenance Effectiveness
a. Inspection Scope
The inspectors reviewed the licensee's handling of performance issues and the associated implementation of the Maintenance Rule (10 CFR 50.65) to evaluate maintenance effectiveness for the selected systems. The following system was selected based on being designated as risk significant under the Maintenance Rule, being in the increased monitoring (Maintenance Rule category a(1)) group, or due to an inspector identified issue or problem that potentially impacted system work practices, reliability, or common cause failures:
- Ongoing problems and ultimate failure of the 2A Master Trip Solenoid Valve (MTSV) on the Unit 2 main turbine The inspectors review included verification of the licensee's categorization of specific issues including evaluation of the performance criteria, appropriate work practices, identification of common cause errors, extent of condition, and trending of key parameters. Additionally, the inspectors reviewed the licensee's implementation of the maintenance rule requirements, including a review of scoping, goal-setting, performance monitoring, short-term and long-term corrective actions, functional failure determinations associated with the condition reports reviewed, and current equipment performance status.
b. Findings
No findings of significance were identified.
1R13 Maintenance Risk Assessments and Emergent Work Control
.1 Failure to Follow Mechanical Maintenance Procedure for Station Air Compressor
a. Inspection Scope
The inspectors reviewed the licensees work planning, evaluation of plant risk, risk management, scheduling, and configuration control for an overhaul of the Unit 2 station air compressor (SAC) in March 2003, and subsequent repair work in July 2003. The inspectors verified that the licensees control of the activity considered assessment of baseline and cumulative risk, management of plant configuration, control of maintenance, and external impacts on risk. In-plant activities were reviewed to ensure that the risk assessment for the work was complete and adequate, and that the assessment included an evaluation of external factors. Additionally, the inspectors verified that the licensee entered the appropriate risk category for the evolution.
b. Findings
Introduction:
A finding of very low safety significance (Green) was self-revealed following the failure on the part of maintenance personnel to install a required part (an O-ring) during a March 2003 overhaul of the Unit 2 SAC. The missing part ultimately caused the Unit 2 SAC to undergo an unplanned outage for repairs in July 2003.
Description:
In March 2003, the Unit 2 SAC underwent a routine overhaul. The SAC was returned to service at the completion of the maintenance activities and operated normally until July 7, 2003, when it tripped during a Unit 2 scram. A subsequent attempt to restart and load the SAC was unsuccessful, and on July 10, 2003, plant operators noted a water-oil mixture coming from the compressors 4th stage drain. Without knowing the source of this oil-water mixture, operations and engineering personnel, in coordination with the SAC vendor, determined that the compressor should be considered unavailable until repaired.
On July 18, 2003, the licensee began work on the Unit 2 SAC to investigate the problem. The licensees investigation revealed a missing plane bearing O-ring on the oil side of the SACs 4th stage, and that this critical bearing O-ring had been inadvertently left out during the previous overhaul. A compressor vendor representative was working with licensee mechanical maintenance personnel at the time of the overhaul and both parties failed to reinstall the plane bearing oil O-ring as required by the applicable maintenance procedure. The missing O-ring was made of a material known as Viton, and was installed to keep oil on one side of the bearing and prevent oil from passing to the air side of the compressors 4th stage. In addition to the Viton O-ring, the maintenance procedure called for the installation of two additional O-rings on the air side of the bearing, which the licensees investigation found were properly installed.
These O-rings were made of a material known as Buna-N, however, and were not designed for contact with the compressors synthetic lubricating oil.
The licensees investigation concluded that with the Viton O-ring missing and the compressor running, differential air pressure kept oil from migrating to the air side of the compressors 4th stage and from coming into contact with the Buna-N O-rings.
However, when the compressor was secured, oil could come into contact with the Buna-N O-rings and cause degradation. The licensee further concluded that during the brief period following the compressors trip on July 7, 2003, to the discovery of an oil-water mixture coming from the 4th stage drain on July 10, 2003, synthetic oil was allowed to come into contact with the Buna-N O-rings, which began the degradation process.
Repairs to the Unit 2 SAC were completed and the compressor returned to service on July 23, 2003. Inspectors reviewing the issue questioned the licensees initial claims that the Unit 2 SAC could be considered available even without the Viton O-ring in place. The licensees assessment was largely based upon the fact that the two Buna-N O-rings that were in place in the compressors 4th stage were intact, showed little to no signs of deterioration, and could, therefore, be relied upon to prevent oil intrusion into the 4th stage air side for some reasonable period of time. The inspectors noted that the licensees analysis lacked the necessary degree of rigor to support such a claim.
Further, the inspectors also noted that the licensee had discarded the two Buna-N O-rings removed from the SAC, contrary to work package requirements that called for their retention for additional analysis, making substantiation of the licensees claims concerning their physical condition somewhat difficult.
Following receipt of the inspectors concerns, the licensee revised their availability analysis to include, among other items, signed statements by all maintenance personnel who saw the two Buna-N O-rings regarding their intact condition, and a written statement from the compressor vendor attesting to the ability of the compressor to run for a period of time even without the Viton O-ring installed on the 4th stage.
Analysis:
A licensee performance deficiency associated with this issue was identified by the inspectors. Specifically, licensee personnel who conducted the Unit 2 SAC overhaul in March 2003 failed to follow the steps in applicable maintenance procedure that called for the installation of the compressors 4th stage plane bearing Viton O-ring. In determining the initial significance of this finding, the inspectors concluded that it was more than minor and that a Phase 1 SDP was warranted in accordance with the guidance provided in NRC IMC 0612, Appendix B, Issue Screening.
Inspectors determined that the finding was more than minor in that if left uncorrected, it would represent a more significant safety concern. The inspectors reasoned that, in general, the failure to follow established maintenance procedures for risk-significant components, such as the Unit 2 SAC, would ultimately lead to reduced component availability, reliability, and capability. In this case specifically, the SAC vendor had indicated to the licensee that without the Viton and Buna-N O-rings, or with badly damaged or degraded O-rings, the SAC would probably experience failure after just minutes of operation. Additionally, the SAC vendor indicated that even just missing the Viton O-ring, the SAC probably would only be able to operate for a month before Buna-N O-ring failure would occur, which would lead to the ultimate failure of the SAC.
In evaluating the Phase 1 SDP in accordance with IMC 0609, Appendix A, Significance Determination of Reactor Inspection Findings for At-Power Situations, the inspectors used the mitigating systems cornerstone path due to the impact that the loss of a SAC has on the licensees probabilistic risk assessment (PRA) model. Because the licensee was able to demonstrate that even without the 4th stage Viton O-ring that the compressor was available and capable of operation for perhaps a month or so, the inspectors determined the finding to be a design or qualification deficiency confirmed not to result in loss of function per NRC Generic Letter 91-18, Revision 1, Information to Licensees Regarding NRC Inspection Manual Section on Resolution of Degraded and Nonconforming Conditions. As a result, the finding was assessed to be of very low safety significance (Green) and within the licensees response band, and a Phase 2 SDP was determined to not be required. The licensee had entered this issue into their corrective action program as Condition Reports (CRs) 169572, 169572 and 170044.
(FIN 05000373/2003004-0; 05000374/2003004-01)
.2 Repairs Performed on Plant Equipment Without Written Procedures or Work Control
Documents
a. Inspection Scope
The inspectors reviewed the licensee's work planning, evaluation of plant risk, risk management, scheduling, and configuration control for the repairs to the Unit 2 motor-driven reactor feed pump (MDRFP) minimum flow valve control air on September 13, 2003. The inspectors verified that the licensee's control of the activity considered assessment of baseline and cumulative risk, management of plant configuration, control of maintenance, and external impacts on risk. In-plant activities were reviewed to ensure that the risk assessment for the work was complete and adequate, and that the assessment included an evaluation of external factors.
Additionally, the inspectors verified that the licensee entered the appropriate risk category for the evolution.
b. Findings
Introduction:
A finding of very low safety significance (Green) was self-revealed following impromptu repairs to the control air for the Unit 2 MDRFP minimum flow valve.
A maintenance supervisor conducting what was supposed to have been only a pre-job investigative walkdown conducted the actual repairs without any written work documents or procedures.
Description:
On September 13, 2003, during a Unit 2 down power, the Unit 2 MDRFP minimum flow valve (2FW008) remained open at 50 percent when given a demand signal to close. An instrument maintenance first line supervisor (FLS) was notified by the shift manager to investigate the valve position and prepare a work order to potentially fix the unexpected condition.
The issue was identified at approximately 0300 on September 13, 2003, and operations personnel in the control room stated that it was their desire to have any necessary repair efforts take place in the near-term while the Unit 2 MDRFP was still operating in parallel with one of the units two turbine-driven reactor feed pumps (TDRFPs). In this configuration, any inadvertent positioning or cycling of the 2FW008 valve would have little or no affect on the plant. Once power was sufficiently low enough, the operating schedule called for removal of the last parallel TDRFP and operation on the MDRFP alone. In this configuration, inadvertent cycling or positioning of the 2FW008 valve during maintenance could have initiated a potentially significant reactor level transient.
The FLS was unable to obtain the necessary support to enter the heater bay during the midnight shift. Operations personnel, realizing that the window for operating with a TDRFP in parallel with the MDRFP was closing, pressed the FLS to enter the heater bay for his inspection again at 0650. In interviews with the inspectors, operations personnel admitted that this request put undo time pressure on the FLS, and potentially contributed to his actions.
The FLS entered the Unit 2 heater Bay with a work planner for an observation of the 2FW008 valve to assure work order instructions would accurately depict the cause of failure mode. However, the FLS failed to contact the control room to inform the on-watch operators of the entry as required by plant procedures. The FLS performing what was intended to be a non-intrusive inspection inadvertently leaned on a section of control air tubing near an air regulator and the 2FW008 valve repositioned to fully closed. At this point, not having been properly briefed on the plant configuration, the FLS believed that further inadvertent repositioning of the 2FW008 was probable and would potentially result in a plant transient if repairs to the control air tubing were not made immediately. As a result, the FLS decided on his own initiative to perform an on-the-spot repair by tightening up a loose control air fitting for the 2FW008 valve without any work control documents or written instructions. In the control room, on-watch operations personnel noticed the unplanned repositioning of the 2FW008 valve and investigated. The FLS was directed to report to the shift manager for debriefing.
Inspectors reviewing this issue on September 15-16, 2003, discussed the sequence of events with licensee management. During this series of interviews, the inspectors identified that the licensee had failed to fully document the impromptu repair work performed by the FLS. Specifically, the licensee had not documented the post-maintenance test (PMT), which involved a full-stroke exercise test of the 2FW008 valve, in the work documentation package that was developed following the repair. The licensee documented the PMT and issued a NRC-identified condition report.
Analysis:
Inspectors reviewing this event determined that several licensee performance deficiencies were present. First, licensee personnel failed to properly coordinate the 2FW008 repair effort among the workgroups involved. Poor interface between the operations, maintenance, and radiological protection groups created a situation in which each group had a different picture of the problem and the urgency associated with its correction. This led to placing undo time pressure on the FLS to conduct his pre-job inspection. Second, the inspectors identified multiple examples of licensee personnel failing to follow established plant procedures. Examples of this type of performance deficiency included: the FLS failure to contact the control room prior to entering the heater bay as required by procedure; the FLS failure to obtain proper work control documents prior to performing a repair on the 2FW008 control air line; and the failure of licensee maintenance personnel to fully document the work performed, specifically the PMT, until questioned by the inspectors.
In determining the initial significance of this finding, the inspectors concluded that it was more than minor and that a Phase 1 SDP was warranted in accordance with the guidance provided in NRC IMC 0612, Appendix B, Issue Screening. With respect to this finding, the inspectors determined that the performance of repairs on the 2FW008 valve, a potentially risk-significant component, without proper work control documents or written instructions represented a finding that if left uncorrected would be a more significant safety concern under the initiating events cornerstone of reactor safety.
The inspectors evaluated the Phase 1 SDP in accordance with IMC 0609, Appendix A, Significance Determination of Reactor Inspection Findings for At-Power Situations, using the initiating events cornerstone path. The finding was determined not to be a contributor to the likelihood of a primary or secondary system loss of coolant accident (LOCA) initiator. Further, the inspectors determined that there was no contribution from the finding to both the likelihood of a reactor trip and the likelihood that mitigating equipment would not be available. Finally, the inspectors determined that the finding was not associated with the likelihood of a fire or any type of flooding. As a result, the inspectors determined that the finding was of very low safety significance (Green), within the licensees response band, and that a Phase 2 SDP was not required. The licensee had entered this finding into their corrective action program as CRs 175632 and 176438.
(FIN 05000373/2003004-02; 05000374/2003004-02)
.3 Unauthorized Operation of Plant Equipment
a. Inspection Scope
The inspectors reviewed the licensee's work planning, evaluation of plant risk, risk management, scheduling, and configuration control for a design walkdown by site engineering with contractor engineering personnel for a planned sudden pressure relay (SPR) modification of the Unit Auxiliary Transformer (UAT) and the Main Power Transformer (MPT). The inspectors verified that the licensee's control of the activity considered assessment of baseline and cumulative risk, management of plant configuration, control of maintenance, and external impacts on risk. In-plant activities were reviewed to ensure that the risk assessment for the work was complete and adequate, and that the assessment included an evaluation of external factors.
Additionally, the inspectors verified that the licensee entered the appropriate risk category for the evolution.
b. Findings
Introduction:
A finding of very low safety significance (Green) was self-revealed following the unauthorized operation of station equipment by a plant engineer.
Description:
On September 12, 2003, a plant engineer performing a design walkdown with contractor engineers for the SPR modification of the UAT and MPT inadvertently bumped the SPR cutoff switch on the Unit-1 UAT, moving it from the on to the off position. This removed SPR protection from the UAT and actuated an alarm annunciator in the control room.
Without any verbal or procedural instructions to do so, the engineer immediately repositioned the SPR cutoff switch to the on position to restore the protective relaying for the UAT. Operations personnel responding to the control room alarm verified that the SPR cutoff switch had been properly repositioned, and the matter of the engineer acting without appropriate authorization to manipulate plant equipment was referred to plant management for action.
Analysis:
Inspectors reviewing this event determined that a licensee performance deficiency existed in that the plant engineer had operated station equipment without any authority to do so. In determining the initial significance of this finding, the inspectors concluded that it was more than minor and that a Phase 1 SDP was warranted in accordance with the guidance provided in NRC IMC 0612, Appendix B, Issue Screening.
Industry experience indicates that restoration of switches or controls at a nuclear plant are activities that can result in a myriad of problems if not properly controlled and proceduralized. With respect to this finding, the inspectors determined that the unauthorized and uncontrolled restoration of plant equipment by the station engineer represented a finding that if left uncorrected would be a more significant safety concern under the initiating events cornerstone of reactor safety. Specifically, even though in this instance the consequences of the engineers actions did not adversely impact the plant, this would not be the case in any number of situations where plant personnel would restore switches or controls without appropriate procedures and instructions.
In evaluating the Phase 1 SDP in accordance with IMC 0609, Appendix A, Significance Determination of Reactor Inspection Findings for At-Power Situations, the inspectors used the initiating events cornerstone path. The finding was determined not to be a contributor to the likelihood of a primary or secondary system loss of coolant accident (LOCA) initiator. Further, the inspectors determined that there was no contribution from the finding to both the likelihood of a reactor trip and the likelihood that mitigating equipment would not be available. Finally, the inspectors determined that the finding was not associated with the likelihood of a fire or any type of flooding. As a result, the inspectors determined that the finding was of very low safety significance (Green), within the licensees response band, and that a Phase 2 SDP was not required. The licensee had entered this issue into their corrective action program as CR 175557.
(FIN 05000373/2003004-03;05000374/2003004-03)
.4 Miscellaneous Maintenance and Work Activities
a. Inspection Scope
The inspectors reviewed and observed emergent work and the planning for risk significant maintenance activities. The following specific samples were included:
- Emergent troubleshooting and repair of the Unit 1 reactor manual control system
- Emergent repairs to the 345 kV switchyard during forced outage L2F37
- Emergent replacement of the 2C SRV during L2F37
- Use of a vendor supplied temporary station air compressor for online risk management
- Recovery actions for 2 stuck traversing incore probes (TIPs) on Unit 2
- Containment Isolation Valve 2BF33-F345A troubleshooting and repair
- Emergent repairs to inboard seal leak on Unit 2 Motor Driven Reactor Feed Pump The inspectors also reviewed the licensee's evaluation of plant risk, risk management, scheduling, and configuration control for these activities in coordination with other scheduled risk significant work. The inspectors verified that the licensee's control of activities considered assessment of baseline and cumulative risk, management of plant configuration, control of maintenance, and external impacts on risk. In-plant activities were reviewed to ensure that the risk assessment of maintenance or emergent work was complete and adequate, and that the assessment included an evaluation of external factors. Additionally, the inspectors verified that the licensee entered the appropriate risk category for the evolutions.
b. Findings
No findings of significance were identified.
1R14 Operator Performance During Non-Routine Plant Evolutions and Events
.1 Unit 2 Reactor Scram with Loss of Normal Heat Sink
a. Inspection Scope
Inspectors responded to the station following a scram on Unit 2 on the evening of July 7, 2003. Because the scram had resulted from an electrical transient in the stations 345 kV switchyard, there were several complications associated with the event.
The most significant complication involved the tripping of all three circulating water pumps for Unit 2, which resulted in the loss of the units condenser as a heat sink. As a result, the inspectors observed operator performance in the control room for several hours during the post-scram recovery and stabilization of the unit to evaluate the personnel response to the trip, and to determine if the response was appropriate to the event and in accordance with procedures, training, and regulatory requirements.
b. Findings
No findings of significance were identified.
.2 Response to Unit 2 A Recirc Flow Control Valve (FCV) Reactivity Excursion
a. Inspection Scope
The inspectors examined operations crew response to a small unplanned reactivity excursion on Unit 2 on July 27, 2003. During the early morning hours, operators received a control room alarm indicating that a hydraulic isolation valve for the A reactor recirculation FCV had drifted off its open seat. The ensuing hydraulic imbalance on the FCV operator caused the FCV to move from 74 percent open to 77 percent open, which resulted in reactor power increasing from 100 percent to 100.77 percent for 21 minutes. The inspectors reviewed operator performance for the event and the post-transient recovery and stabilization of the unit to evaluate the personnel response to the transient, and to determine if the response was appropriate to the event and in accordance with procedures, training, and regulatory requirements.
b. Findings
No findings of significance were identified.
1R15 Operability Evaluations
a. Inspection Scope
The inspectors reviewed the technical adequacy of the following operability evaluations to determine the impact on Technical Specifications (TS), the significance of the evaluations, and to ensure that adequate justifications were documented.
- Missing nut for snubber MS04-2870S load pin
- Degraded fire barrier for Unit 2 Division 2 125 Volt Direct Current (Vdc) battery room
- Broken main steam safety/relief valve (MSSRV) set screws
- Unit 2 Division 2 Residual Heat Removal Service Water Low Pressure Alarms
- Unit 1 RCIC suction line pressure pulses Operability evaluations were selected based upon the relationship of the safety-related system, structure, or component to risk.
b. Findings
No findings of significance were identified.
1R16 Operator Workarounds
.1 Routine Review of Operator Workarounds (OWAs) and Operator Challenges (OC)s)
a. Inspection Scope
The inspectors reviewed the following Operator Workarounds and Operator Challenges:
- WA353 and WA354; Unit 1 and Unit 2 reactor recirculation pump trips due to instrument ringing
- OC321; Unit 1 multiple Residual Heat Removal (RHR) service water keep fill failures The inspectors reviewed the potential of each workaround or challenge to impact the operators ability to respond to transient and off-normal events and conditions.
b. Findings
No findings of significance were identified.
.2 Semiannual Review of Operator Workaround and Operator Challenge Cumulative
Effects
a. Inspection Scope
The inspectors performed a semiannual review of the cumulative effects of operator workarounds and operator challenges. The inspectors reviewed the cumulative effects of workarounds and challenges on the reliability, availability, and potential for the improper operation of systems. Additionally, reviews were conducted to determine if the workarounds and challenges could increase the possibility of an initiating event, affect multiple mitigating systems, or impact the operators ability to respond to accidents or transients.
b. Findings
No findings of significance were identified.
1R17 Permanent Plant Modifications
a. Inspection Scope
The inspectors reviewed the ongoing permanent replacement of existing emergency diesel generator (EDG) air dryers with a more modern model. The inspectors verified that the design basis, licensing basis, and performance capability of risk significant systems were not degraded by the installation of the modification. The inspectors also verified that the modifications did not place the plant in an unsafe configuration. The design adequacy of the modification was verified by performing a review, or partial review, of the modifications impact on plant electrical requirements, material requirements and replacement components, response time, control signals, equipment protection, operation, failure modes, and other related process requirements.
b. Findings
No findings of significance were identified.
1R19 Post Maintenance Testing (PMT)
a. Inspection Scope
The inspectors selected the following post maintenance activities for review. Activities were selected based upon the structure, system, or component's ability to impact risk.
- 2C SRV post replacement leak test
- Unit 2 Division 2 125 Vdc battery cell replacement PMT
- Unit 2 station air compressor 4th stage oil leak repair PMT
- 2E12-F018C, 2C RHR pump minimum flow bypass manual valve
- Unit 2 motor driven feed pump mechanical seal leak repair PMT
- Standby Gas Treatment (SBGT) wide range gas monitor erratic indication repair PMT The inspectors verified by witnessing the test or reviewing the test data that post maintenance testing activities were adequate for the above maintenance activities. The inspectors reviews included, but were not limited to, integration of testing activities, applicability of acceptance criteria, test equipment calibration and control, procedural use and compliance, control of temporary modifications or jumpers required for test performance, documentation of test data, TS applicability, system restoration, and evaluation of test data. Also, the inspectors verified that maintenance and post maintenance testing activities adequately ensured that the equipment met the licensing basis, TS, and Updated Final Safety Analysis Report (UFSAR) design requirements.
b. Findings
No findings of significance were identified.
1R20 Outage Activities
a. Inspection Scope
The inspectors evaluated outage activities for an unscheduled outage that began with the Unit 2 scram on July 7, 2003, and ended on July 12, 2003. The inspectors reviewed activities to ensure that the licensee considered risk in developing, planning, and implementing the outage schedule.
The inspectors observed or reviewed the reactor shutdown and cooldown, outage equipment configuration and risk management, electrical lineups, selected clearances, control and monitoring of decay heat removal, control of containment activities, startup and heatup activities, and identification and resolution of problems associated with forced outage L2F37.
b. Findings
No findings of significance were identified.
1R22 Surveillance Testing
a. Inspection Scope
The inspectors selected the following surveillance test activities for review. Activities were selected based upon risk significance and the potential risk impact from an unidentified deficiency or performance degradation that a system, structure, or component could impose on the unit if the condition were left unresolved.
- 0 EDG monthly test run
- Unit 1 RCIC steam line isolation high temperature and flow instrument calibration
- Unit 1 Division 1 Residual Heat Removal (RHR) Service Water (SW) quarterly pump and valve inservice test
- Unit 1 reactor vessel high water level 8 main turbine/feedwater pump trip functional test
- Unit 1 main steam line high flow isolation calibration
- Unit 1 B EDG monthly test run The inspectors observed the performance of surveillance testing activities, including reviews for preconditioning, integration of testing activities, applicability of acceptance criteria, test equipment calibration and control, procedural use, control of temporary modifications or jumpers required for test performance, documentation of test data, Technical Specification applicability, impact of testing relative to performance indicator reporting, and evaluation of test data.
b. Findings
No findings of significance were identified.
1R23 Temporary Plant Modifications
a. Inspection Scope
The inspectors reviewed a temporary modification for a single-cell charge on cell 9 of the Unit 2 Division 2 125 Vdc station battery. The inspectors reviewed the safety screening, design documents, UFSAR, and applicable Technical Specifications to determine that the temporary modification was consistent with modification documents, drawings, and procedures. The inspectors also reviewed the post installation test results to confirm that tests were satisfactory and the actual impact of the temporary modification on the permanent system and interfacing systems were adequately verified.
b. Findings
No findings of significance were identified.
1EP6 Drill Evaluation
a. Inspection Scope
The resident inspectors reviewed a licensee training drill using the plant simulator, Technical Support Center (TSC), and Operations Support Center (OSC) to evaluate drill conduct and the adequacy of the licensees critique of performance to identify weaknesses and deficiencies. The inspectors selected a drill that the licensee had scheduled as providing input to the Drill/Exercise NRC Performance Indicator. The inspectors observed the classification of events, notifications to off-site agencies, protective action recommendation development, and drill critiques. Observations were compared to the licensees observations and corrective action program entries. The inspectors verified that there were no discrepancies between observed performance and performance indicator reported statistics. The drill scenario observed resulted in a site area emergency classification.
b. Findings
No findings of significance were identified.
OTHER ACTIVITIES
4OA1 Performance Indicator Verification
Cornerstones: Mitigating Systems, Barrier Integrity
.1 Mitigating Systems and Barrier Integrity Performance Indicator Verification
a. Inspection Scope
The inspectors reviewed Licensee Event Reports (LERs), licensee data reported to the NRC, plant logs, and NRC inspection reports to verify the following performance indicators for both units:
- Safety system unavailability - emergency Alternating Current (AC) power
- Safety system unavailability - high pressure injection system
- Safety system unavailability - heat removal system
- Safety system unavailability - residual heat removal system
- Reactor Coolant System Identified Leak Rate The inspectors verified that the licensee accurately reported performance as defined by the applicable revision of Nuclear Energy Institute Document 99-02, Regulatory Assessment Performance Indicator Guideline. Data from July 2002 through June 2003 was examined.
b. Findings
No findings of significance were identified.
.2 Data Submission Issue
a. Inspection Scope
The inspectors performed a review of the performance indicator data submitted by the licensee for the period between July 2002 through June 2003 for any obvious inconsistencies prior to its public release in accordance with IMC 0608, Performance Indicator Program.
b. Findings
No findings of significance were identified.
4OA2 Identification and Resolution of Problems
Cornerstones: Initiating Events, Mitigating Systems, Barrier Integrity, and Emergency Preparedness
.1 Routine Review of Identification and Resolution of Problems
a. Inspection Scope
As part of the inspections discussed in the previous sections of this report, the inspectors verified that the licensee entered the problems identified during the inspection into their corrective action program. Additionally, the inspectors verified that the licensee was identifying issues at an appropriate threshold and entering them in the corrective action program, and verified that problems included in the licensees corrective action program were properly addressed for resolution. Attributes reviewed included: complete and accurate identification of the problem; that timeliness was commensurate with the safety significance; that evaluation and disposition of performance issues, generic implications, common causes, contributing factors, root causes, extent of condition reviews, and previous occurrences reviews were proper and adequate; and that the classification, prioritization, focus, and timeliness of corrective actions were commensurate with safety and sufficient to prevent recurrence of the issues.
b. Findings
No findings of significance were identified.
4OA3 Event Follow-up
Cornerstones: Initiating Events and Mitigating Systems
.1 (Closed) Licensee Event Report (LER) 05000373/2003-001-00: Enforcement Discretion
Required to Repair Division 2 125 Vdc Battery Charger.
(Closed) Unresolved Item (URI)05000373/2003003-01; 05000374/2003003-01:
Emergent Repairs to Unit 1 Division 2 125 Vdc Battery Charger and Associated Notice of Enforcement Discretion (NOED).
On April 7, 2003, plant operators noted that the Division 2 125 Vdc battery voltage and current on Unit 1 was oscillating. Voltage oscillations of approximately 1-2 Vdc and current oscillations of approximately 30 Amperes were observed. Following troubleshooting, the licensee concluded that up to 3 circuit cards needed to be replaced in the battery charger in an attempt to rectify the problem. Further, the licensee estimated that approximately 12 additional hours beyond the technical specifications allowed 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> outage time would be required to facilitate the replacement and testing of the cards.
The licensee verbally requested that the NRC exercise discretion not to enforce compliance with the actions required by Technical Specifications (TS) 3.8.4, DC Sources - Operating, and TS 3.8.7, Distribution Systems - Operating, on April 9, 2003. Specifically, the licensee requested that the 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> TS allowed outage time be extended by 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> to facilitate battery charger card replacement and testing without entry into a shutdown action statement on Unit 1. The licensee based this request on their assessment that the risk associated with potentially subjecting the plant to a shutdown transient was greater than the essentially no net increase in risk associated with allowing the allowed outage time extension and the unit to remain in operation at power during the battery charger card replacement. The licensee followed their verbal request with a written submittal on April 11, 2003.
On April 9, 2003, the NRC verbally granted the NOED in accordance with the guidance in NRC IMC 9900, Technical Guidance, Operations - Notices of Enforcement Discretion. The NRC Region III staff followed up this verbal authorization with a letter to the licensee dated April 14, 2003, Notice of Enforcement Discretion for Exelon Generation Company Regarding LaSalle County Station, Unit 1 (NOED 03-3-004).
The licensee declared the Unit 1 Division 2 125 Vdc battery charger inoperable and began card replacement following verbal approval of the NOED on April 9, 2003.
Repairs to the battery charger were completed early in the morning on April 10, 2003, and the battery charger was declared operable by the licensee. This action terminated the NOED. The duration of battery charger inoperability under the NOED was 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> and 25 minutes.
The inspectors reviewed the subject LER and the licensees associated root cause report for the NOED. No findings of significance were identified. The licensee has entered this issue into their corrective action program under CRs 152752, 153262, 153326, 153428 and 157008. Corrective actions taken by the licensee appeared to be adequate.
.2 (Closed) Licensee Event Report 05000373/2003-003-00: Reactor Core Isolation
Cooling High Steam Flow Isolation Differential Pressure Switches Failed Due to Torn Diaphragm.
On July 7, 2003, during the performance of Technical Specification Surveillance LIS-RI-101, Unit 1 RCIC Steam Line High Flow Isolation Calibration, differential pressure switch 1E31-N013AA failed its diaphragm integrity test. The licensee halted the surveillance, and the switch was replaced. Performance of the surveillance subsequently was resumed, and on July 10, 2003, differential pressure switch 1E31-N013BA also failed its diaphragm integrity test.
In each case, the licensee determined the cause of the failure to have been a rupture of the Kapton diaphragm in the Static O-Ring (SOR, Inc.) differential pressure switch, a known performance issue with these switches. As part of the corrective actions, the licensee replaced the failed switches. Additionally, the licensee is presently in the process of identifying and qualifying a replacement for the switches to address the known performance and design issues.
The inspectors reviewed the licensees investigation report for the issue, which concluded that with both divisions of the RCIC steam line high flow isolation inoperable at the same time, the RCIC equipment room area and differential temperature instrumentation were still operable and would have closed the steam supply line isolation valves in the event of a break or leak. No findings of significance were identified. The licensee had entered this issue into their corrective action program under CR 167082. Corrective actions taken and planned by the licensee appeared to be adequate.
.3 (Closed) Licensee Event Report 05000373/2003-002-00; 05000373/2003-002-01:
1A and 0 Diesel Generators Inoperable Simultaneously Due to Inadvertent Partial CO2 Actuation.
a. Inspection Scope
The inspectors reviewed LER 05000373/2003-002-00, 1A and 0 Diesel Generators Inoperable Simultaneously Due to Inadvertent Partial CO2 Actuation, and the licensees supplemental report, LER 05000373/2003-002-01, to verify that the cause of the event on April 23, 2003, was properly identified and that corrective actions were appropriate.
The inspectors reviewed plant logs and other data to verify that equipment performed as required and that plant procedures were appropriately implemented.
b. Findings
Introduction:
A self-revealing finding of very low safety significance (Green) was identified involving the licensees failure to properly delineate what actions can be performed by plant personnel without having appropriate written procedures or instructions. Associated with this finding was a Non-Cited Violation for failure to comply with 10 CFR 50, Appendix B, Criterion V, Instructions, Procedures, and Drawings.
Description:
On April 23, 2003, a partial 0 Diesel Generator (DG) CO2 Suppression System actuation occurred while the 1A DG was inoperable for a scheduled surveillance. The partial CO2 system actuation resulted in the closure of the 0 DG ventilation dampers, which rendered the 0 DG inoperable.
During the course of the noon shift on April 23, 2003, a non-licensed operator (NLO)assigned to take rounds on Unit 1 observed an anomalous condition associated with an intermittent trouble alarm at the Unit 1 Main Fire Panel (1FP04JA) located in the Auxiliary Electric Equipment Room (AEER). The NLO first observed this alarm at approximately 1700 hours0.0197 days <br />0.472 hours <br />0.00281 weeks <br />6.4685e-4 months <br />, and a brief investigation at that time revealed the alarm condition was associated with the 0 DG CO2 suppression system. The NLO informed the Unit 1 Nuclear Station Operator (NSO), a licensed reactor operator, of the condition.
The NSO informed the NLO that the condition had been identified the previous week, and that a Condition Report (CR) had been written. Additionally, the NLO was also informed that electrical maintenance personnel had investigated the issue but were unable to precisely identify the specific deficiency.
The NLO went on to discuss the issue with the Operations Field Supervisor (FS), a licensed senior reactor operator. The FS told the NLO that he had also heard of this problem occurring in the previous week, and told the NLO that at this time he should continue on with his rounds and follow up later to verify that a CR and Work Request (WR) had been written.
The NLO continued with the Unit 1 rounds and at 1830 hours0.0212 days <br />0.508 hours <br />0.00303 weeks <br />6.96315e-4 months <br /> was in the vicinity of the 0 DG room and decided to inspect the local CO2 fire suppression cabinet to determine if it could be the cause of the intermittent 0 DG CO2 suppression system alarm. There was no communication between the NLO and either the control room or operations shift supervision regarding this decision. As a result, the NLO was unaware that during the 11/2 hours since his discussions with the NSO and the FS that conditions in the plant had changed and that the 1A DG had been rendered inoperable due to a routine surveillance test.
With the control room unaware of his actions, the NLO began to inspect the local CO2 fire suppression cabinet. After inspecting the outside of the control cabinet and determining that no unusual indications were present, the NLO opened the CO2 suppression system control panel door to visually inspect the interior of the panel. In an attempt to gain a better view of the circuit boards in the interior of the cabinet, the NLO attempted to remove some of the dust present by blowing on the circuit boards.
Immediately thereafter, the 0 DG CO2 suppression system fire alarm and a partial CO2 suppression system actuation occurred. The partial CO2 suppression system actuation closed dampers in the 0 DG ventilation support system, which rendered the 0 DG inoperable.
At 1848 hours0.0214 days <br />0.513 hours <br />0.00306 weeks <br />7.03164e-4 months <br />, a fire alarm was received in the control room for the CO2 system partial actuation in the 0 DG Room. Operators entered the stations abnormal operating procedure for actuation of the fire protection system and dispatched the fire brigade to the scene. The fire brigade determined that there was no fire approximately 10 minutes into the event. However, due to personal safety concerns associated with the potential for the Unit 1 DG rooms having been flooded with CO2, the fire brigade commander restricted access to the Unit 1 DG rooms. Once it was confirmed that there was no CO2 in the DG Rooms, operating personnel were able to enter 1A DG room and place the DG control switch in STANDBY. With this, the 1A DG was restored to an operable status at 1952. The total time that the 0 and 1A DGs were inoperable simultaneously was 64 minutes.
Due in large part to the nature and location of the fire dampers that shut in the 0 DG ventilation system, the licensee did not restore the 0 DG to an operable status until April 25, 2003. Scaffolding had to be erected to access some dampers, and certain one-time-use parts on the dampers had to be replaced. However, the licensee had determined that the isolation of the fire dampers for the 0 DG ventilation system did not render the DG incapable of starting or loading on demand if necessary. Additionally, the licensee determined that the 0 DG would have been available to carry the associated Division 1 bus for sufficient time to have permitted the licensee to recover the 1A DG from its scheduled surveillance test had this been necessary. Thus, the licensee determined that the event was of very low safety significance, despite the fact that with the fire dampers shut the 0 DG was incapable of carrying its rated load for its rated mission time without overheating.
Analysis:
Inspectors reviewing this event determined that a licensee performance deficiency was present in that the licensee had failed to properly delineate what actions personnel could take in the plant without the benefit of written instructions or procedures. In determining the initial significance of this finding, the inspectors concluded that it was more than minor and that a Phase 1 SDP was warranted in accordance with the guidance provided in NRC IMC 0612, Appendix B, Issue Screening.
Specifically, the inspectors found that in failing to adequately delineate what actions personnel could take in the plant without the benefit of written instructions or procedures that the licensee had given tacit approval for the NLOs action, which was the direct cause of the loss of availability of the 0 DG. Further, the inspectors determined that this loss of 0 DG availability had a direct effect on the objective for the mitigating systems cornerstone of reactor safety, which is to ensure the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences.
In evaluating the Phase 1 SDP in accordance with IMC 0609, Appendix A, Significance Determination of Reactor Inspection Findings for At-Power Situations, the inspectors determined that the finding did not constitute a design or qualification deficiency.
Further, the inspectors determined that there was not a loss of safety function for any complete system, nor a loss of safety function for any one train of a safety system for greater than its Technical Specification allowed outage time. Additionally, the inspectors determined that the finding did not involve any non-Technical Specification trains or systems designated as risk-significant, or involve any seismic, fire, flooding, or severe weather initiating events. As a result, the inspectors determined that the finding was of very low safety significance (Green), within the licensees response band, and that a Phase 2 SDP was not required.
Enforcement:
Table 3.2-1 of the licensees UFSAR indicates that all components of the DG ventilation systems are subject to the requirements of 10 CFR 50, Appendix B.
Criterion V, Instructions, Procedures, and Drawings, of this appendix states that activities affecting quality shall be prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accomplished in accordance with these instructions, procedures, or drawings. Contrary to this requirement, the licensee failed to delineate in any written instructions, procedures, or drawings any requirements regarding what actions the NLO could take in the course of investigating the anomalous condition associated with the intermittent trouble alarm at the Unit 1 Main Fire Panel. This lack of formal guidance allowed the NLO to attempt to remove dust from circuit boards by blowing on them, an action which ultimately rendered the 0 DG inoperable and unavailable.
The licensee had entered this issue into their corrective action program as CR 155441.
Because the licensee has entered the issue into their corrective action program and the finding is of very low safety significance, the violation of 10 CFR 50, Appendix B, Criterion V is being treated as a NCV, consistent with Section VI.A of the NRC Enforcement Policy. (NCV 05000373/2003004-04; 05000374/2003004-04)
.4 (Closed) Licensee Event Report 05000374/2003-003-00: Unit 2 Scram Due to Main
Power Transformer B Phase Disconnect Switch Failure.
On July 7, 2003, the Unit 2 main power B phase disconnect in the 345 kV switchyard catastrophically failed, resulting in an electrical short to ground. Protective relaying tripped the main electrical generator, and the reactor scrammed on generator load rejection as designed.
The failure in the switchyard occurred at the mechanical connection portion (beaver tail and contact finger) of the B phase disconnect switch, and resulted in the disintegration of a significant portion of the disconnect switch, rigid bus, and standoff insulator. The licensees root cause evaluation could not determine a root cause for the event.
However, based on visual inspections of the failed components and industry operating experience information, the licensee postulated two possible causes for the event.
In the first scenario, high gusty winds, up to 60 mph, preceding the event accelerated an existing misalignment of the switch contacts and resulted in an increased resistance between the beaver tail to jaw fingers connection. This resulted in elevated temperatures that in turn increased the resistance and caused additional heating. The licensee postulated that eventually the temperature rose to the point where the contact parts began to melt and created an air gap between them. Arcing then began and the connection progressed to a thermal runaway condition and catastrophically failed.
The second scenario is one in which the insulator structurally failed. The top half of the insulator, still connected to the disconnect, began to fall. This caused the disconnect switch beaver tail and jaw finger to separate. With an air gap created, arcing began and the jaw fingers and bus connection melted allowing the insulator to fall to the ground.
Once this happened the bus bar sagged downward further allowing the bus to arc to ground. The licensee could not determine the cause of this structural failure, but has sent the remnants of the destroyed components off for further analysis.
A potential third scenario did exist based on reports by security personnel on site that the switchyard had been struck by lightning. Although there were severe thunderstorms in the area on the night of the event, the licensee ruled out this scenario based on meteorological data from weather sources that indicated that no lightning strikes were present in the vicinity of the plant at the time of the event. However, based upon their experience and assessment of the component remnants, the initial impressions of licensee line mechanics who conducted the repairs on the damaged switchyard components were that the components had been struck by lightning. Thus, inspectors in reviewing this event have not entirely dismissed a lightning strike as a possibility due to conflicting evidence involved.
The electrical disturbance that caused the reactor scram also tripped the three Unit 2 circulating water pumps. This complicated crew response to the scram in that the main condenser was lost as a heat sink. While attempting to stabilize the plant and recover lost systems, coordination of plant pressure and reactor vessel level by the operating crew was weak, and the reactor protection system (RPS) automatically initiated four additional times on reactor low level (Level 3, +11 inches) due to the shrink and swell effects from the crews cycling of safety relief valves (SRVs). The additional scrams resulted in added contamination of the Unit 2 scram discharge volume, to the extent that the licensee was forced to erect a significant amount of lead shielding around the contaminated piping and components and post the vicinity as a high radiation area.
Despite the fact that the inspectors determined the weak coordination of plant pressure and reactor vessel level by the operating crew to constitute a licensee performance deficiency, the consequences were determined to be of only minor significance in accordance with NRC IMC 0612, Appendix B, Issue Screening.
The inspectors reviewed the licensees investigation reports for the event, which concluded that the event and related issues were of low safety significance. No findings of significance were identified by the inspectors. The licensee had entered this event into their corrective action program under CRs 166562 and 166691. Corrective actions taken and planned by the licensee appeared to be adequate.
4OA4 Cross-Cutting Issues
.1 Human Performance
Several of the findings described elsewhere in this report had as the majority of their causes various human performance deficiencies.
- A finding described in Section 1R13.1 involved the failure of licensee maintenance personnel to follow the work instructions delineated in their procedure for the overhaul of the Unit 2 station air compressor. In so doing, the maintenance personnel left an O-ring out during the reassembly of the compressors 4th stage, which ultimately rendered this risk-significant component unavailable.
- A finding described in Section 1R13.2 involved multiple failures on the part of licensee personnel to follow established plant procedures during repair efforts for the Unit 2 motor-driven reactor feed pump minimum flow valve.
- A finding described in Section 1R13.3 involved the manipulation of plant devices by a station engineer without authorization and contrary to established plant procedures regarding the operation of plant equipment and components.
- A finding described in Section 4OA3.3 involved an operator causing an emergency diesel generator to be rendered inoperable because he attempted to blow some dust off of a circuit board and inadvertently caused a short. The licensee had given tacit approval for this action by not adequately delineating in plant procedures and instructions that this impromptu action was incongruous, and that such activities require appropriate written procedures and instructions to ensure the maintenance of appropriate levels of quality and safety.
- A minor finding in Section 4OA3.4 involved the failure of plant operators to properly coordinate the control of reactor vessel and pressure following a Unit 2 scram with loss of normal heat sink.
As can be seen from the above descriptions of each issue, the majority of these human performance deficiencies were procedure compliance/procedure use and adherence related. In each of the findings described in Section 1R13, had the personnel involved followed existing plant procedures and instructions, it is likely that the occurrences never would have taken place. The finding in Section 4OA3.3 is also procedure related, but in this case it is a failure on the part of the licensee to adequately delineate instructions in plant procedures that is at the center of the finding.
4OA6 Meetings
.1 Exit Meeting
The inspectors presented the inspection results to Mr. G. Barnes and other members of licensee management on October 7, 2003. The licensee acknowledged the findings presented. The inspectors asked the licensee whether any materials examined during the inspection should be considered proprietary. No proprietary information was identified.
ATTACHMENT:
SUPPLEMENTAL INFORMATION
KEY POINTS OF CONTACT
Licensee
- G. Barnes, Site Vice President
- S. Landahl, Plant Manager
- T. Connor, Design Engineering Manager
- D. Czufin, Site Engineering Director
- L. Dausin, System Engineering Supervisor
- D. Enright, Operations Director
- S. Fatora, Chemistry, Radwaste, and Environmental Manager
- F. Gogliotti, System Engineering Manager
- G. Kaegi, Regulatory Assurance Manager
- J. Rappeport, Nuclear Oversight
- W. Riffer, Emergency Planning Manager
- C. Wilson, Station Security Manager
- M. Wolfe, Health Physicist
Nuclear Regulatory Commission
- P. Hiland, Acting Deputy Director, Division of Reactor Projects
- B. Burgess, Chief, Reactor Projects Branch 2
Attachment
LIST OF ITEMS OPENED, CLOSED, AND DISCUSSED
Opened
- 05000373/2003004-01 FIN Failure to install O-ring on Unit 2 station air compressor as
- 05000374/2003004-01 required by applicable maintenance procedure.
(Section 1R13.1)
- 05000373/2003004-02 FIN Repairs performed on plant equipment without written
- 05000374/2003004-02 procedures or work control documents. (Section 1R13.2)
- 05000373/2003004-03 FIN Manipulation of plant equipment by a staff engineer without
- 05000374/2003004-03 operations authorization or any written instructions.
(Section 1R13.3)
- 05000373/2003004-04 NCV Failure to properly delineate what actions can be performed
- 05000374/2003004-04 by plant personnel without having appropriate written procedures or instructions results in inoperable and unavailable EDG. (Section 4OA3.3)
Closed
- 05000373/2003003-01 URI Emergent Repairs to Unit 1 Division 2 125 Vdc Battery
- 05000374/2003003-01 Charger and Associated NOED (Section 4OA3.1)
- 05000373/2003-001-00 LER Enforcement Discretion Required to Repair Division 2 125 Vdc Battery Charger (Section 4OA3.1)
- 05000373/2003-003-00 LER Reactor Core Isolation Cooling High Steam Flow Isolation Differential Pressure Switches Failed Due to Torn Diaphragm (Section 4OA3.2)
- 05000373/2003-002-00 LER 1A and 0 Diesel Generators Inoperable Simultaneously
- 05000373/2003-002-01 Due to Inadvertent Partial CO2 Actuation (Section 4OA3.3)
- 05000374/2003-003-00 LER Unit 2 Scram Due to Main Power Transformer B Phase Disconnect Switch Failure (Section 4OA3.4)
- 05000373/2003004-01 FIN Failure to install O-ring on Unit 2 station air compressor as
- 05000374/2003004-01 required by applicable maintenance procedure.
(Section 1R13.1)
- 05000373/2003004-02 FIN Repairs performed on plant equipment without written
- 05000374/2003004-02 procedures or work control documents. (Section 1R13.2)
- 05000373/2003004-03 FIN Manipulation of plant equipment by a staff engineer without
- 05000374/2003004-03 operations authorization or any written instructions.
(Section 1R13.3)
Attachment
- 05000373/2003004-04 NCV Failure to properly delineate what actions can be
- 05000374/2003004-04 performed by plant personnel without having appropriate written procedures or instructions results in inoperable and unavailable EDG. (Section 4OA3.3)
Discussed
None.
Attachment