ML092920129

Initial Exam 50-280,281/2009-301 Draft Simulator Scenarios

ML092920129
Person / Time
Site:	Surry
Issue date:	10/17/2009
From:	NRC/RGN-II
To:	Virginia Electric & Power Co (VEPCO)
References
50-280/09-301, 50-281/09-301
Download: ML092920129 (297)

Text

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO 1 Facility: Surry Scenario No.: 1 Op-Test No.: 2009-301 Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 is at 100% power and has been since the last refueling outage. All systems and crossties are operable with the following exception:

1-FW-P-2, Turbine Driven Auxiliary Feedwater Pump, is tagged out for governor valve maintenance. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.6.F.1 Clock.

Turnover:

Maintain Unit 1 at 100% power and prepare for the return to service of 1-FW-P-2 by the end of your shift.

The current PSA analysis for plant conditions is green on both units.

Event Malf. Event Event No. No. Type* Description 1 TBD I - RO/SRO Selected pressurizer level channel fails high requiring manual control of charging.

TS - SRO 2 TBD I - BOP/SRO Selected steam flow channel (B SG) requiring manual control of B MFRV.

TS - SRO 3 TBD C - All Loss of Isophase Bus Duct Cooling Fan, resulting in a ramp to 78% power at one percent per minute.

4 TBD M - All Main Generator Trip, which should result in an automatic turbine and reactor trip.

The reactor trip is complicated by a failure of the reactor to C - RO/SRO automatically trip. Manual action by the RO will be required.

5 TBD M - All Small Break Loss of Coolant Accident outside of containment (ECA-1.2).

The safety injection is complicated by a failure of two Phase 1 C - BOP/SRO isolation valves to automatically close.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor, (TS) Technical Specifications

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO 1 Surry 2009-301 Scenario #1 Event 1 The selected pressurizer level channel fails high. The RO should perform the immediate actions of 0-AP-53.00 (Loss of Vital Instrumentation / Controls) and take manual control of charging. The SRO should enter AP-53.00 and direct the RO to restore pressurizer level to normal and de-select the failed channel.

Verifiable Action: (RO) Take manual control of charging (pressurizer level control).

Technical Specification:

Table 3.7-1 item 9 OA #7 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />).

Event 2 1-MS-FT-MS-1484 fails high causing B MFRV to open and B SG level to go up. The BOP should take manual control of B MFRV. The SRO should enter 0-AP-53.00 (Loss of Vital Instrumentation / Controls) and direct the BOP to select redundant steam flow channel and return B MFRV to automatic.

Verifiable Action: (BOP) Take manual control of B MFRV.

Technical Specifications:

Table 3.7-1 item 17 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-2 item 1.e.1 OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-3 item 2.a (see table 3.7-2 for operability requirements)

Event 3 The A Isophase bus duct-cooling fan will trip and will not be able to be re-started. In accordance with the ARP, the team will ramp the unit to 78% power at 1%/minute and then continue to ramp at the normal ramp rate until generator amps are less than 14250. The SRO will implement 0-AP-23.00, Rapid Load Reduction.

Verifiable Actions: (RO) Utilize the control rods and boric acid during the ramp.

(BOP) Will operate the turbine during the load decrease.

Event 4 A main generator lockout will occur which will be complicated by a failure of the reactor to automatically trip. The team will initiate the actions of 1-E-0, Reactor Trip or Safety Injection.

Verifiable Actions: (RO) Manually trip the reactor.

Critical Task: [WOG E-0A] Manually trip the reactor within 1 minute of a valid reactor trip demand signal.

Actions required to accomplish:

Depress either reactor trip pushbutton

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO 1 Event 5 A Small Break Loss of Coolant Accident outside of containment (ECA-1.2) will initiate and the team should respond by initiating AP-16.00 (RCS Leakage) and manually initiating safety injection. The team will perform 1-E-0 and transition to 1-ECA-1.2 (LOCA Outside Containment).

The leak will be isolated by the actions of the ECA, and the team will exit to 1-E-1 (Loss of Reactor or Secondary Coolant).

The safety injection is complicated by a failure of two Phase 1 isolation valves to automatically close.

Verifiable Actions: (RO) Manually initiates safety injection.

(RO) Isolate leakage in accordance with ECA-1.2 (BOP) Secures either LHSI pump (BOP) Closes 1-CV-TV-150A and 1-CV-TV-150C Critical Task: [WOG E-1C] Trip all RCPs within 5 minutes of reaching RCP Trip and Miniflow recirc criteria (KOA).

Actions required to accomplish:

Trip 1-RC-P-1A Trip 1-RC-P-1B Trip 1-RC-P-1C Critical Task: [WOG ECA-1.2 A] Isolate the LOCA outside containment prior to actuation of RMT AND before transition out of ECA-1.2.

Actions required to accomplish:

Close 1-SI-MOV-1890C

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO 1 Initial 100% Power IC, MOL - Cycle 23. The unit has been at 100% power since the last refueling Conditions: outage.

Pre-load malfunctions:

o Disable automatic reactor trips o Disable auto close feature of 1-CH-MOV-1381 o Disable auto close feature of 1-CV-TV-150A and 1-CV-TV-150C Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-FW-P-2 tagged out for planned maintenance Turnover: Maintain full power operation. Unit 2 is at 100% power with all systems operable.

All systems and crossties are operable with the following exceptions:

1-FW-P-2 is tagged out for governor valve replacement- 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> T.S. 3.6 clock.

Event Malf. #s Severity Instructor Notes and Required Feedback RC4903 N/A Pressurizer level channel III fails high, resulting in manual control of 1 charging.

MS0803 N/A B Steam generator steam flow transmitter 1-MS-FT-484 fails low 2 resulting in manual control of feedwater to B steam generator.

GL0101 N/A Loss of Isolated Phase Bus Duct Cooling resulting in rapid load 3 reduction.

EL02 N/A Main Generator Lockout Trip resulting in turbine trip, but failure of 4

the reactor to trip.

5 Various N/A LOCA outside containment in safeguards valve pit area.

END After transition out of 1-ECA-1.2 (LOCA Outside Containment)

SHIFT TURNOVER INFORMATION OPERATING PLAN:

The Unit has been at 100% power since the last refueling outage.

1-FW-P-2 is tagged out for governor valve replacement- 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> T.S. 3.6 clock. Pump is expected to return to service in 40 hours4.62963e-4 days <br />0.0111 hours <br />6.613757e-5 weeks <br />1.522e-5 months <br />.

Unit 2 is at 100% Power with all systems and crossties operable.

Maintain full power operation.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 1 Page 6 of 66 Event

Description:

Pressurizer level channel III fails high.

Cue: By Examiner.

Time Position Applicants Action or Behavior RO Diagnoses failure of 1-RC-LI-1461 with the following indications/alarms:

Alarms:

1C-C8 PRZR HI LVL HTRS ON 1E-H3 RX TRIP CH 1 PRZR HI LVL Indications:

Charging flow will decrease VCT level will increase Pressurizer level (CH 1 and CH 2) will decrease All pressurizer heaters will energize In accordance with the immediate actions of AP-53.00 the RO will take manual control of pressurizer level control by placing 1-CH-FV-1122 in manual and raising flow to maintain program level (per AP-53.00).

SRO Enters 0-AP-53.00, Loss of Vital Instrumentation / Controls.

RO [1] VERIFY REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Verifies 1-RC-LI-1459, Pressurizer Level Channel 1, and 1-RC-LI-1460, Pressurizer Level Channel 2 are NORMAL.

RO [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Places 1-CH-FCV-1122 in manual and raises charging flow.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 1 Page 7 of 66 Event

Description:

Pressurizer level channel III fails high.

Cue: By Examiner.

SRO The team will hold a transient brief. During the brief the failure of 1-RC-LI-1461 will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

RO 3. VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%.

RO will identify that reactor power is less than 100%.

SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

PRZR Level Control, Step 12 RO The RO will identify that 1-RC-LI-1461 has failed high.

RO 12. CHECK PRZR LEVEL CONTROL CHANNELS - NORMAL a) Check PRZR LVL Instrumentation - NORMAL Determines Channel III Pressurizer Level indication has failed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 1 Page 8 of 66 Event

Description:

Pressurizer level channel III fails high.

Cue: By Examiner.

RNO Step 12.a:

Do the following:

RO 1) Place either of the following in MANUAL:

1-CH-FC-1122C, CHG FLOW CNTRL or 1-CH-LC-1459G, PRZR LEVEL CNTRL Verifies 1-CH-FCV-1122 is in manual control.

RO 2) Control PRZR level at program level.

Controls pressurizer level at program (~53%), a band may be given.

RO 3) Move PRZR LVL -CH SEL switch to defeat the failed channel.

Moves the pressurizer level channel selector switch to defeat the Channel III input into the level control system (position 1).

RO 4) Verify or place recorder 1-RC-LR-1459 on an operable channel.

Determines that recorder is trending an operable channel and no changes required.

SRO 5) Refer to Tech Spec 3.1.A.5 (if Pressurizer heaters de-energized), Table 3.7-1 Item 9, and Table 3.7-6 Item 13.

SRO determines that TS Table 3.7.1, Item 9 is applicable (72-hours to place the channel in trip). SRO determines that 3.1.A.5 is not applicable since pressurizer heaters did not deenergize and that Table 3.7-6 is met.

SRO 6) Refer to Attachment 3.

Evaluator Note: This ends the RNO actions and procedure continues at step 12b RO b) Verify Pressurizer Heaters - ENERGIZED.

RO c) Check letdown - IN SERVICE RO d) Check PRZR level control - IN AUTOMATIC SRO Determines that PRZR level control is in MANUAL and goes to RNO column

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 1 Page 9 of 66 Event

Description:

Pressurizer level channel III fails high.

Cue: By Examiner.

RO 12d- RNO -

1) Verify PRZR level restored to program Verifies or restores pressurizer level to program band (~53%)

2) Unsaturate 1-CH-LC-1459G, PRZR LEVEL CNTRL, as required.

RO may place 1-CH-LC-1459G in manual, adjust demand, and return the controller to automatic to unsaturated the controller.

3) Return 1-CH-FCV-1122 to AUTOMATIC by verifying or placing the following in AUTOMATIC:

1-CH-FCV-1122, CHG FLOW CNTRL or 1-CH-LC-1459G, PRZR LEVEL CNTRL Verifies or places 1-CH-LC-1459G and 1-CH-LCV-1122 in automatic control.

SRO 14. Review ( )-OPT-RX-001, reactor power calorimetric using PCS computer program, to determine operability of calorimetric and need to perform ( )-

OPT-RX-007, SRO/RO determines that OPT-RX-001 is not impacted and OPT-RX-007 will not need to be performed.

SRO 15. CHECK FAILED INSTRUMENT - IS A REGULATORY GUIDE 1.97 VARIABLE SRO directs STA to review Reg. Guide 1.97. The STA will report that 1-RC-LR-1461 is a Reg. Guide 1.97 component.

SRO 16. REVIEW CEP 99-0029, REG GUIDE 1.97 OPERABILITY, REPORTABILITY, AND ALTERNATE INDICATIONS SRO directs STA to review CEP 99-0029. The STA will report that the Reg.

Guide 1.97 only requires two channels of pressurizer level control and refers the SRO to TS Table 3.7-6.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 1 Page 10 of 66 Event

Description:

Pressurizer level channel III fails high.

Cue: By Examiner.

SRO 17. Review the following:

TS 3.7 VPAP-2802 TRM Section 3.3, Instrumentation SRO determines that TS Table 3.7.1, Item 9 is applicable (72-hours to place the channel in trip). SRO determines that 3.1.A.5 is not applicable since pressurizer heaters did not deenergize and that Table 3.7-6 is met.

SRO directs STA to review VPAP-2802 and TRM Section 3.3. The STA reports that he has completed his reviews; VPAP-2802 is not impacted, but the TRM is impacted. The STA reports that a 14-day clock to establish a fire watch and a 60-day return to service clock is in effect.

SRO 18. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION - EXISTS The team will identify that no additional failures exist, proceed to the RNO section, and this will direct the team to Step 20.

SRO 20. PROVIDE NOTIFICATIONS AS NECESSARY:

Shift Supervision OMOC STA (PRA determination)

I&C

- END -

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 2 Page 11 of 66 Event

Description:

B Steam Generator controlling Steam Flow channel failure.

Cue: By Examiner.

Time Position Applicants Action or Behavior Diagnoses failure 1-MS-FT-1484 with the following indications/alarms:

BOP Alarms:

1H-E6 STM GEN 1B FW> < STM FLOW 1F-D8 STM GEN 1B CH 4 FW<STM FLOW 1H-G6 STM GEN 1B LVL ERROR Indications:

Step decrease in 1B SG Steam Flow indication CH-III Decreasing feedwater flow to B SG SRO Enters 0-AP-53.00 LOSS OF VITAL INSTRUMENTATION / CONTROLS BOP [1] VERIFY REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL BOP identifies Channel IV indication for steam flow is NORMAL.

BOP [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION BOP takes manual control of B SG feed reg valve and increases demand (FF > SF) to restore level to program.

SRO The team will hold a transient brief. During the brief the failure of 1-MS-FT-1484 will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

RO 3. VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%.

RO will identify that reactor power is less than 100%.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 2 Page 12 of 66 Event

Description:

B Steam Generator controlling Steam Flow channel failure.

Cue: By Examiner.

SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

SG Steam Flow, Step 8 BOP The BOP will identify that 1-MS-FT-1484 has failed low.

SRO Caution prior to step 8 CAUTION: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

Team will monitor reactor power during FW flow adjustments.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 2 Page 13 of 66 Event

Description:

B Steam Generator controlling Steam Flow channel failure.

Cue: By Examiner.

BOP 8. CHECK STEAM GENERATOR LEVEL CONTROL INSTRUMENTS -

NORMAL Steam Pressure Steam Flow Feed Flow Steam Generator Level BOP Determines CH III Steam flow instrumentation for B SG is NOT normal.

Step 8- RNO IF the selected steam flow, steam pressure, or feed flow input to the SG Water Level Control system has failed, THEN do the following:

BOP a) Place the associated Feed Reg Valve in MANUAL.

Verifies B SG MFRV controller, 1-FW-FCV-1488, in manual BOP b) Control SG level at program level (44%, a band may be given).

Verifies B SG NR level is returning to program level.

RO c) Select the redundant channel for affected SG(s)

Selects Channel IV Steam Flow for B SG using two-position selector switch on Vertical Board 1-2 (applicant may also place the associated Feed Flow channel in Channel IV)

BOP d) WHEN SG level returned to normal, THEN place the Feed Reg Valve in AUTOMATIC.

When level restored to program (44%) BOP places feed reg valve controller in AUTOMATIC.

BOP IF SG Level Channel III has failed, THEN do the following:

Determines that no channel III level failure has occurred.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 2 Page 14 of 66 Event

Description:

B Steam Generator controlling Steam Flow channel failure.

Cue: By Examiner.

SRO Step 8- RNO (Continued)

Perform follow-up actions:

SRO a) Consult with Shift Manager on need to initiate ( )-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

If asked the Shift Manager will recommend not performing 1-OP-RP-001 at this time.

SRO b) Refer to the following Tech Spec 3.7 items:

Table 3.7-1, 12 and 17 Table 3.7-2, 1.c, 1.e, and 3.a Table 3.7-3, 2.a, and 3.a Determines the following Technical Specification LCOs:

Table 3.7-1 item 17 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-2 item 1.e.1 OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-3 item 2.a (see table 3.7-2 for operability requirements) c) Refer to Attachment 1.

d) IF no other instrumentation failure exists, THEN GO TO Step 14.

SRO 14. Review OPT-RX-001, Rx Power Calorimetric using PCS computer program, to determine operability of calorimetric and need to perform OPT-RX-007, Shift Average Power Calculation.

SRO/RO determines that OPT-RX-001 is impacted and OPT-RX-007 will need to be performed.

If it appears that the SRO/RO will take action to perform 1-OPT-RX-007, the Unit 2 Operator will state that he will have the fourth RO perform 1-OPT-RX-007.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 2 Page 15 of 66 Event

Description:

B Steam Generator controlling Steam Flow channel failure.

Cue: By Examiner.

SRO 15. CHECK FAILED INSTRUMENT - IS A REGULATORY GUIDE 1.97 VARIABLE (Go to Step 17 if not Reg. Guide 1.97)

SRO directs STA to review Reg. Guide 1.97. The STA will report that 1-MS-FT-1484 is a Reg. Guide 1.97 component.

SRO 16. REVIEW CEP 99-0029, REG GUIDE 1.97 OPERABILITY, REPORTABILITY, AND ALTERNATE INDICATIONS SRO directs STA to review CEP 99-0029. The STA will report that the Reg.

Guide 1.97 only requires one channel of Steam Flow indication per steam generator and no actions are required.

SRO 17. Review the following:

TS 3.7 VPAP-2802 TRM Section 3.3, Instrumentation Determines the following Technical Specification LCOs:

Table 3.7-1 item 17 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-2 item 1.e.1 OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-3 item 2.a (see table 3.7-2 for operability requirements)

SRO directs STA to review VPAP-2802 and TRM Section 3.3. The STA reports he has completed these reviews and there is no impact.

SRO 18. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION - EXISTS The team will identify that no additional failures exist, proceed to the RNO section, and this will direct the team to Step 20.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 2 Page 16 of 66 Event

Description:

B Steam Generator controlling Steam Flow channel failure.

Cue: By Examiner.

SRO 20. PROVIDE NOTIFICATIONS AS NECESSARY:

Shift Supervision OMOC STA (PRA determination)

I&C

- END -

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 17 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

Time Position Applicants Action or Behavior BOP Diagnoses trip of A Iso Phase Bus Duct Cooling Fan with the following indications/alarms:

Alarms:

1G-E5 GEN LEADS CLG TRBL Indications:

PCS Point T2817A trending up.

BOP NOTE: Computer point T2817A, GEN LEAD COOLING AIR TEMP, may be used to monitor duct temperature trend.

BOP may trend T2817A on the PCS.

1. SEND OPERATOR TO LOCAL ANNUNCIATOR PANEL

2. LOCALLY CHECK DROP - LOW AIR FLOW If contacted/dispatched, the field operator will report that low air flow is indicated for the A Isophase bus duct cooling fan.

NOTE:

Low air flow drop may be caused by low air flow, loss of power to the air flow switch(es), or failure of the air flow sensor(s).

Ammeters on the Bus Duct Cooling Fan breakers should be checked to determine fan status.

3. LOCALLY CHECK ISO BUS DUCT COOLING (IBDC) FANS - ONE OR MORE STOPPED 1-EP-F-1A, Breaker 1A2-2-1B 1-EP-F-1C, Breaker 1C2-2-1D Booth (cue) report no amps indicated on breaker 1A2-2-1B for 1-EP-F-1A, A Iso Bus Duct Cooling Fan and the breaker appears to be tripped.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 18 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

SRO CAUTION:

If one or more fan is inoperable, a unit ramp down to the self cooled rating of 14,250 amps should be initiated immediately.

Power should be reduced at the rate of 1% power per minute to 78%

power. Power reduction should continue from 78% power to 14,250 amps at the normal rate of 155 MWe/Hr.

4. ATTEMPT TO RESTART FAN:

BOP a) Locally check circuit breakers:

MCC 1A2-2-1B, GEN LEADS CLR PH A FAN MC 1C2-2-1D, GEN LEADS CLR PH C FAN Booth (cue) If directed, report the breaker for the A IBDC fan has tripped.

b) Try to start fan Team should not reset tripped breaker. If attempted, report that breakers trips immediately after reset.

c) Check fan running (check ammeters on breakers)

If asked the field operator reports zero amps on the A IBDC fan.

SRO RNO: Do the following

1) Initiate a ramp down to reduce generator amps to 14,250 amps in Accordance with 0-AP-23.00, RAPID LOAD REDUCTION.

Per previous caution, SRO should immediately initiate a ramp to 78% power at 1%/min per 0-AP-23.00. (AP-23.00 actions on pages 20-24)

2) GO TO Step 8.

SRO 8. INITIATE A WORK REQUEST TO REPAIR ANNUNCIATOR If SM or STA is contacted, they will accept the responsibility of writing a Work Request on the isolated phase bus duct fan.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 19 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

RO 9. CLEAR MCR ALARM BY LOCALLY USING 1-EP-HS-BDUC2, GEN BUS DUCT COOLING ANNUNCIATOR SIGNAL RESET SW Directs field operator to reset local alarm panel.

If contacted, the field operator will reset the local alarm panel and clear the annunciator in the MCR.

10. NOTIFY SHIFT SUPERVISOR

- END ARP - AP-23.00 CONTINUES ON NEXT PAGE

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 20 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

Time Position Applicants Action or Behavior SRO The team will hold a short transient brief. During the brief the failure of the Isophase cooling fan will be discussed along with the upcoming ramp.

If asked: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

0-AP-23.00, RAPID LOAD REDUCTION SRO CAUTION: Conservative decision-making must be maintained during rapid load reductions. Refer to Attachment 1 for trip criteria.

NOTE:

Actions that can be completed independently of preceding steps may be performed out of sequence as directed by the SRO.

When the Turbine is not being actively ramped, the REFERENCE and SETTER values must remain matched to prevent inadvertent ramp.

Governor Valve oscillations should be anticipated when ramping in IMP IN on Unit 1. ODM 49 has trigger points for switching to IMP OUT or Turbine Manual to stop the oscillations.

Pre-planned reactivity plans located in the Main Control Room will be used as guidance for ramping down to the desired power level.

The ramp rate in IMP OUT is nonlinear and therefore pre-planned reactivity plans based on IMP IN are not as accurate. However, total amounts of boration and dilution can be used as guidance.

RO 1. TURN ON ALL PRZR HEATERS

2. INITIATE PLANT LOAD REDUCTION AT 5%/MINUTE OR LESS:

BOP a) Verify turbine valve position - NOT ON LIMITER The turbine is NOT on the limiter.

RO b) Insert control rods in AUTO or MANUAL as necessary to maintain Tave and Tref within 5°F.

BOP c) Verify or place turbine in IMP IN or IMP OUT as determined by Shift Supervision

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 21 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

BOP Team can choose either IMP IN or IMP OUT d) Adjust SETTER to desired power level BOP e) Adjust LOAD RATE %/MIN thumbwheel to desired ramp rate (1%/minute)

BOP f) Initiate Turbine load reduction using OPERATOR AUTO (pushes the BOP GO button) g) Reduce Turbine Valve Position Limiter as load decreases The BOP will periodically reduce the limiter setpoint during the ramp.

SRO 3. CHECK EMERGENCY BORATION - REQUIRED The team will decide to emergency borate based on the Tave - Tref difference.

SRO NOTE: Step 4 or Step 5 may be performed repeatedly to maintain Tref and Tave matched Flux in band, and control rod position above the LO-LO insertion limit.

RO 4. PERFORM AN EMERGENCY BORATION IAW THE FOLLOWING:

a) Verify or raise CHG flow to greater than 75 gpm b) Transfer the in-service BATP to FAST c) Open ( )-CH-MOV-( )350 d) Monitor EMRG BORATE FLOW

( )-CH-FI-( )110 e) After required emergency boration, perform the following:

1) Close ( )-CH-MOV-( )350

2) Transfer the in-service BATP to AUTO

3) Restore Charging flow control to normal

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 22 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

RO 5. ESTABLISH A NORMAL BORATION TO MAINTAIN CONTROL ROD POSITION ABOVE THE LO-LO INSERTION LIMITS ATTACHMENT 4 Attachment 4 Boration instructions are on the last page of this event.

SRO NOTE:

If at any time plant conditions no longer require rapid load reduction, actions should continue at Step 35.

RCS Tave must be maintained less than or equal to 577°F and RCS pressure must be maintained greater than or equal to 2205 psig. Tech Spec 3.12.F.1 should be reviewed if either parameter is exceeded.

I & C should be contacted to provide assistance with adjusting IRPIs.

RO 6. CONTROL RAMP RATE TO MAINTAIN RCS PRESSURE GREATER THAN 2205 PSIG RO *7. CHECK LETDOWN ORIFICES - TWO IN SERVICE Evaluator note: two orifices will already be in service.

BOP 8. MONITOR STEAM DUMPS FOR PROPER OPERATION SRO 9. NOTIFY THE FOLLOWING:

Energy Supply (MOC)

Polishing Building Chemistry OMOC

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 23 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

SRO 10. EVALUATE THE FOLLOWING:

EPIP applicability The Shift Manager will review EPIPs for applicability. They are not applicable.

VPAP-2802, NOTIFICATIONS AND REPORTS, applicability SRO directs STA to review VPAP-2802. The STA reports that he has completed his review of VPAP-2802 and no notifications are required.

• 11. CHECK REACTOR POWER - HAS DECREASED MORE THAN 15%

SRO IN ONE HOUR Reactor power has NOT decreased more than 15% in one hour SRO 11 RNO GO TO STEP 13 No further actions are expected for this event.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 3 Page 24 of 66 Event

Description:

Loss of Isophase Bus Duct Cooling Fan Cue: By Examiner.

Attachment 4 of AP-23.00 Actions RO SRO provides RO a copy of Attachment 4.

1. Place the MAKE-UP MODE CNTRL switch in the STOP position.

2. Adjust 1-CH-YIC-1113 to desired total gallons.

3. Adjust 1-CH-FC-1113A to the desired flow rate.

4. Place the MAKE-UP MODE SEL switch in the BORATE position.

5. Place the MAKE-UP MODE CNTRL switch in the START position.

6. Verify proper valve positions.

7. Adjust boration rate using 1-CH-FC-1113A, as necessary.

8. WHEN boration is complete, THEN do the following. IF boric acid is to remain in the Blender to support ramping the Unit, THEN enter N/A.

a. Manually blend approximately 20 gallons to flush the boration path IAW Attachment 5, Manual Makeups

b. Enter N/A for the remaining steps in this attachment.

It is not anticipated that the team will utilize Attachment 5 during this scenario.

9. Place the MAKE-UP MODE CNTRL switch in the STOP position.

10. Verify controllers for Primary Grade water and Boric Acid are set correctly.

11. Place the MAKE-UP MODE SEL switch in the AUTO position.

12. Place the MAKE-UP MODE CNTRL switch in the START position.

13. Notify Shift Supervision of Blender status.

End Event #3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 4 Page 25 of 66 Event

Description:

Main Generator Lockout and Failure of Reactor to Trip Cue: By Examiner.

Team Diagnoses generator lockout and need to trip the reactor by:

Alarms:

1F-D1 GEN DIFF LOCKOUT REL TRIP - FIRST OUT Numerous primary and secondary alarms Indications:

Control rods inserting in AUTO.

Generator output breakers OPEN.

Reactor trip breakers CLOSED and reactor at power.

SRO Direct RO to perform the Immediate Actions of E-0, REACTOR TRIP OR SAFETY INJECTION RO may perform this actions without SRO direction.

RO [1] VERIFY REACTOR TRIP:

a) Manually trip reactor Pushes the reactor trip push buttons.

b) Check the following:

All Rods On Bottom light - LIT Reactor trip and bypass breakers - OPEN Neutron flux - DECREASING

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 4 Page 26 of 66 Event

Description:

Main Generator Lockout and Failure of Reactor to Trip Cue: By Examiner.

RO [2] VERIFY TURBINE TRIP:

a) Manually trip the turbine Pushes the turbine trip push buttons.

b) Verify all turbine stop valves - CLOSED c) Isolate reheaters by closing MSR steam supply SOV 1-MS-SOV-104 RO Closes 1-MS-SOV-104 d) Verify generator output breakers - OPEN (Time Delayed)

Opened on initiating event- no actions required.

RO [3] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 4 Page 27 of 66 Event

Description:

Main Generator Lockout and Failure of Reactor to Trip Cue: By Examiner.

RO [4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING (No)

SI annunciators - LIT A-F-3 SI INITIATED - TRAIN A (No)

A-F-4 SI INITIATED - TRAIN B (No) a) RNO - Check is SI is required or imminent as indicated by any of the following:

Low PRZR Pressure Identifies that pressurizer pressure is slowly recovering (or stable).

High CTMT Pressure Identifies that containment pressure is stable at about 10.5 psia High Steamline Differential Pressure Identifies that there is no steam line differential pressure.

High Steam Line Flow with Low Tave or Low Line Pressure Identifies no steam flow indicated and determines that SI is not required.

IF SI is NOT required, THEN GO TO 1-ES-0.1, REACTOR TRIP RESPONSE SRO SRO The team will hold a transition brief. During the brief it will be identified that the generator tripped for an unknown reason and that the reactor did not trip automatically.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Following the brief the team will transition to 1-ES-0.1. The team may dispatch personnel to investigate the cause of the generator lockout.

SRO SRO initiates 1-ES-0.1

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 4 Page 28 of 66 Event

Description:

Main Generator Lockout and Failure of Reactor to Trip Cue: By Examiner.

1-ES-0.1 RO 1. MONITOR RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F RCS temperature is trending to 547 °F 1-ES-0.1 BOP SRO may provide the BOP with Attachment 5 of 1-ES-0.1 for guidance on AFW control.

Actions are summarized below:

1. Maintain minimum AFW flow of 540 gpm with RCP(s) in service until one SG Narrow Range level is greater than 12%

2. Maintain minimum AFW flow of 350 gpm with NO RCPs running until one SG Narrow Range level is greater than 12%

3. When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50% by throttling AFW Isolation MOVs.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 4 Page 29 of 66 Event

Description:

Main Generator Lockout and Failure of Reactor to Trip Cue: By Examiner.

1-ES-0.1 BOP 2. CHECK FW STATUS a) Check RCS Average temperatures - LESS THAN 554°F b) Verify Feed Reg valves - CLOSED c) Close SG FW isolation MOVs 1-FW-MOV-154A 1-FW-MOV-154B 1-FW-MOV-154C BOP closed 1-FW-MOV-154A, B, C d) Check AFW pumps - RUNNING Motor Driven AFW pumps TD AFW pump- (Pump is tagged out- per initial conditions) e) Verify total AFW flow - GREATER THAN 540 GPM (350 W/O RCPs) f) Check emergency buses - BOTH ENERGIZED g) Control feed flow to maintain narrow range level between 22% and 50%.

RO 3. VERIFY CHARGING IN SERVICE BOP 4. CHECK CC SYSTEM STATUS:

a) Check SW to CC HXs - IN SERVICE b) Check CC pumps - AT LEAST ONE RUNNING End of Event 4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 30 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

Time Position Applicants Action or Behavior Evaluators note: Team may elect to initiate safety injection and re-enter 1-E-0 rather than perform AP-16.00, in accordance with the continuous action page of ES-0.1:

SI INITIATION CRITERIA Initiate SI and GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION, if EITHER condition listed below occurs, OR is imminent.

• RCS subcooling based on CETCs - LESS THAN 30°F

• Any automatic SI setpoint is exceeded:

• Low PRZR pressure

• High CTMT pressure

• High steamline differential pressure

• High steamline flow with low Tave or low line pressure Team Diagnoses RCS leak with the following indications/alarms:

Alarms:

RMA-D6 VENT STACK #2 PART ALERT / HI RMA-D7 VENT STACK #2 NORMAL RANGE GAS ALERT / HI 1B-F3 SFGDS AREA SUMP HI LVL 1E-F6(G6/H6) PRZR LO LVL CH 1 1C-D8 PRZR LO LVL Indications:

Charging Flow increasing Pressurizer level decreasing Pressurizer pressure decreasing After safety injection initiated, abnormal LHSI flow indication.

When received the Unit 2 Operator will report and silence the radiation monitor alarms associated with this event.

SRO Direct initiation of AP-16.00, EXCESSIVE RCS LEAKAGE SRO Note: If SI Accumulators are isolated, 1-AP-16.01, SHUTDOWN LOCA, should be used for guidance.

Note: RCS average temperature has a direct impact on pressurizer level.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 31 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

RO [1] MAINTAIN PRZR LEVEL Isolate Letdown Control Charging flow RO closes 1-CH-LCV-1460A and 1-CH-LCV-1460B and places charging in manual and attempts to maintain level at program (immediate action).

SRO The team will hold a short transient brief. The brief should establish the priority of addressing RCS leakage then end.

RO 2 VERIFY THE FOLLOWING PARAMETERS - STABLE OR INCREASING:

PRZR Level PRZR Pressure RCS Subcooling Identifies all parameters are decreasing and goes to step 2 RNO TEAM Step 2 RNO- GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION.

Team transitions to 1-E-0.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 32 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

Only the performance of the high level steps 1,2, and 3 are required:

RO [ 1 ] VERIFY REACTOR TRIP

[ 2 ] VERIFY TURBINE TRIP

[ 3 ] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED

[ 4 ] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING SI annunciators - LIT A-F-3 SI INITIATED - TRAIN A A-F-4 SI INITIATED - TRAIN B b) Manually initiate SI RO will manually initiate safety injection if an automatic safety injection has not occurred.

SRO The team will hold a transition brief. During the brief it will be identified that a LOCA outside containment has occurred and appears to be located in Unit One Safeguards.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are abnormal as indicated on vent-vent radiation monitors. He will also state that containment conditions and the electrical conditions are as you see them.

Following the brief the team will perform 1-E-0 and applicable attachments.

SRO/BOP 5. Initiate Attachment 1 (Attachment 1 actions contained on attachment 1 of this guide.)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 33 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

RO *6. CHECK RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F The team will identify that RCS temperature is decreasing. The team should attribute this to the injection of SI into the RCS and AFW flow to the SGs. It is acceptable for the team to enter the RNO portion of this step and perform the applicable steps (summarized below):

Stop dumping steam Reduce AFW flow to the SG Close MSTVs if cooldown continues

7. CHECK PRZR PORVs AND SPRAY VALVES:

RO a) PRZR PORVs - CLOSED b) PRZR spray controls Demand at Zero (or)

Controlling Pressure c) PORV block valves - AT LEAST ONE OPEN

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 34 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

SRO NOTE: Seal injection flow should be maintained to all RCPs.

• 8. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS Two or three Charging pumps will be running and flowing to the RCS.

b) RCS subcooling - LESS THAN 30°F [85°F]

RCS subcooling - time in event will dictate current subcooling- see note below c) Stop all RCPs d) RCS pressure - LESS THAN 1275 psig [1475 PSIG]

e) Close CHG pump miniflow recirc valves:

1-CH-MOV-1275A 1-CH-MOV-1275B 1-CH-MOV-1275C RNO for the step is to go to step 9.

[WOG E-1C] Trip all RCPs within 5 minutes of reaching RCP Trip and Miniflow recirc criteria (KOA).

This is a continuous action step and it is anticipated that conditions will be met for trip criteria during E-0 actions.

BOP 9. CHECK IF SGs ARE NOT FAULTED:

Check pressures in all SGs a) STABLE OR INCREASING AND b) GREATER THAN 100 PSIG BOP will observe a slightly decreasing trend on SG pressures. This will be attributed to the RCS cooldown. The team will not transition to 1-E-2.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 35 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

BOP 10. CHECK IF SG TUBES ARE NOT RUPTURED:

Condenser air ejector radiation - NORMAL SG blowdown radiation - NORMAL SG MS radiation - NORMAL TD AFW pump exhaust radiation - NORMAL SG NR Level - NOT INCREASING IN AN UNCONTROLLED MANNER TEAM TEAM should determine that no indications of a steam generator tube rupture exist.

RO 11. CHECK RCS - INTACT INSIDE CTMT

• CTMT radiation - NORMAL

• CTMT pressure - NORMAL

• CTMT RS sump level - NORMAL All containment indications will be NORMAL.

RO 12. CHECK RCS - HAS BEEN MAINTAINED INTACT OUTSIDE CTMT a) Radiation Monitors - NORMAL

• MGPI vent-vent

• Auxiliary Building Control Area b) Sump annunciators - NOT LIT

• VSP-F-4

• B-D-1

• B-D-2

• B-F-3 RO will identify that the MGPI vent-vent radiation monitor is in alarm and that annunciator B-F-3 is LIT.

SRO The SRO will go to the RNO step.

SRO 12 RNO. Determine cause of abnormal conditions. IF the cause is a loss of RCS inventory outside CTMT, THEN GO TO 1-ECA-1.2, LOCA OUTSIDE CONTAINMENT.

Team will transition to 1-ECA-1.2, LOCA Outside Containment.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 36 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

SRO The team will hold a short transient brief. The brief should establish the priority of addressing RCS leakage then end.

ECA-1.2 actions commence on following page.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 37 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

SRO ECA-1.2, LOCA OUTSIDE CONTAINMENT CAUTION: Depending on break location, higher than normal dose levels should be expected in the Auxiliary Building and the Safeguards after a LOCA outside CTMT.

RO 1. VERIFY PROPER VALVE ALIGNMENT:

a) Locally unlock and close the following breakers:

• 1H1-2N 8A for 1-SI-MOV-1890A

• 1J1-2E 8B for 1-SI-MOV-1890B

• 1H1-2N 9A for 1-SI-MOV-1890C RO will dispatch operator to energize the listed breakers.

b) LHSI to hot legs - CLOSED

• 1-SI-MOV-1890A

• 1-SI-MOV-1890B Evaluators note- both valves will be found in correct position.

c) SI accumulator test valves - CLOSED

• HCV-SI-1850A

• HCV-SI-1850B

• HCV-SI-1850C

• HCV-SI-1850D

• HCV-SI-1850E

• HCV-SI-1850F Evaluators note- all valves will be found in correct position.

d) Letdown isolation valves - CLOSED

• 1-CH-LCV-1460A

• 1-CH-LCV-1460B

• 1-CH-HCV-1200A

• 1-CH-HCV-1200B

• 1-CH-HCV-1200C

• 1-CH-TV-1204A

• 1-CH-TV-1204B Evaluators note- all valves will be found in correct position.

e) RCP seal return valve - CLOSED

• 1-CH-MOV-1381 Evaluators note- Valve failed to close when safety injection initiated, it should be closed at this time in accordance with attachment 1 of E-0 (BOP Function)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 1 Event No.: 5 Page 38 of 66 Event

Description:

LOCA outside of containment.

Cue: By Examiner.

RO 1. VERIFY PROPER VALVE ALIGNMENT (continued) f) Charging line isolation valve - CLOSED

• 1-CH-HCV-1310A RO will close 1-CH-HCV-1310A.

RO 2. TRY TO IDENTIFY AND ISOLATE BREAK:

a) Close LHSI to cold legs

• 1-SI-MOV-1890C RO will close 1-SI-MOV-1890C Evaluators Note: this will isolate the LOCA outside containment.

b) Check RCS pressure - INCREASING Critical Task: [WOG ECA-1.2 A] Isolate the LOCA outside containment prior to actuation of RMT AND before transition out of ECA-1.2.

Team will determine that RCS parameters are improving.

c) Place LHSI pumps in PTL d) Close LHSI pump suctions from RWST

• 1-SI-MOV-1862A

• 1-SI-MOV-1862B e) GO TO 1-E-1, LOSS OF REACTOR OR SECONDARY COOLANT END SCENARIO

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 39 of 66 SIMULATOR OPERATOR GUIDE Simulator Setup Initial Conditions:

Recall 100% IC and enter the following malfunctions or recall the IC 311 and implement TRIGGER #30 to activate all passive malfunctions. VERIFY Trigger #30 implemented.

Open the monitor window and add the following points to it:

ASP_AO_OFF = True DISA_CV150A_ACL= True DISA_CV150C_ACL= True V2GE5_RESET Enter the following MALFUNCTIONS:

Trigger Malfunction Delay Ramp Trigger Value Final Type RC4903- PRZR LEVEL XMTR 10 0 1 0 1 Manual CH 3 FAILURE (461)

MS0803- SG B STM FLOW 10 30 3 0 -1 Manual TRNSMTR MS-FT-484 FAILURE GL0101- IBDC FAN A 10 N/A 5 N/A N/A Manual SHEARED SHAFT EL02- MAIN GENERATOR 10 N/A 7 N/A N/A Manual DIFFERENTIAL LOCKOUT TRIP SI1601- FAIL CHECK VALVES 10 N/A 9 N/A N/A Manual SI-79 LOOP A SI1604- FAIL CHECK VALVE 10 N/A 9 N/A N/A Manual SI-241 LOOP A (LHSI)

SI1502- SI COLD LEG HDR 10 0 9 0 7.5 Manual LEAK UPSTRM MOV-SI-890C RD18- FAILURE OF AUTO 0 0 30 N/A N/A Pre-Load TRIP TO SCRAM RX CH59- Disable CH-MOV-381 AUTO closure 0 30 N/A N/A AUTO_DISABLE Pre-load

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 40 of 66 SIMULATOR OPERATOR GUIDE Enter the following REMOTE FUNCTIONS:

Trigger Remote Function Delay Trigger Ramp Remote Value Type Start Ramp (Auto or Value Time Manual)

MS_87- STEAM GENERATOR A 0 30 100 0 0 Pre-load STEAM SUPPLY TO FW-P-2 MS_120- STEAM GENERATOR B 0 30 100 0 0 Pre-load STEAM SUPPLY TO FW-P-2 MS_158- STEAM GENERATOR C 0 30 100 0 0 Pre-load STEAM SUPPLY TO FW-P-2 Enter the following MOV CONTROLS:

Trigger Override Delay Ramp Trigger Remote Type (Auto Value or Manual)

SIMOV890A_RACKIN- SI-MOV-1890A LHSI to 0 N/A 20 RACKIN Manual Th SIMOV890B_RACKIN- SI-MOV-1890B LHSI to 0 N/A 21 RACKIN Manual Th SIMOV890C_RACKIN- SI-MOV-1890C LHSI to 0 N/A 22 RACKIN Manual Th Enter the following EVENT TRIGGER:

EVENT Number Event Text Command 12 Simov890c<0.1 DMFSI1604

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 41 of 66 SIMULATOR OPERATOR GUIDE TRIGGER TYPE DESCRIPTION Pressurizer level channel III fails high, resulting in manual control of Manual 1 charging.

3 Manual B Steam generator steam flow transmitter 1-MS-FT-484 fails low resulting in manual control of feedwater to B steam generator.

5 Manual Loss of Isolated Phase Bus Duct Cooling resulting in rapid load reduction.

7 Manual Main Generator Lockout Trip resulting in turbine trip, but failure of the reactor to trip.

9 Manual LOCA outside containment in safeguards valve pit area.

20 Manual- Booth actions Energize 1-SI-MOV-1890A upon request.

21 Manual- Booth actions Energize 1-SI-MOV-1890B upon request.

22 Manual- Booth actions Energize 1-SI-MOV-1890C upon request.

30 PRELOAD Disable automatic reactor trip Disable auto closure of 1-CH-MOV-1381 MALFUNCTIONS Isolate steam to 1-FW-P-2 (tagged out)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 42 of 66 SIMULATOR OPERATOR GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components:

1-FW-P-2 Verify 1-RM-RI-112 aligned to A/C SG and 1-RM-RI-113 aligned to B SG (magnets).

Verify Ovation System operating.

Reset ICCMs.

Verify Component Switch Flags.

Verify Brass Caps properly placed.

Verify SG PORVs set for 1035 psig.

Verify Rod Control Group Step Counters indicate properly.

Verify Ovation CRT display Advance Charts the following charts:

Master chart advance switch Verify Turbine Thumb Wheel Settings @120 rpm/min and Position 6 Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset)

Verify all ARPs have been cleaned Verify CLEAN copies of the following procedures are in place:

AP-53.00 (2) AP-23.00 AP-16.00 (2) ARP 1G-E5 E-0 (2) ES-0.1 ECA-1.2 OP-CH-007 Reactivity Sheet OP-ZZ-002 Verify Reactivity Placard is current.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 43 of 66 SIMULATOR OPERATOR GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

Ask for and answer questions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 44 of 66 SIMULATOR OPERATOR GUIDE Conduct shift turnover:

Provide normal shift turnover materials reflecting the below initial conditions:

The initial conditions have Unit #1 operating steady state at 100% power with a current boron concentration of 750 ppm. All Unit #1 systems and crossties are operable with the following exception:

1-FW-P-2, Turbine Driven Auxiliary Feedwater Pump, is tagged out for governor valve maintenance. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.6.F.1 Clock.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to maintain 100% power on Unit #1.

The last shift performed three 30-gallon dilutions followed by manual make-ups.

When the team has accepted the shift, proceed to the Session Conduct Section.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 45 of 66 SIMULATOR OPERATOR GUIDE Session Conduct:

Ensure conditions in Simulator Set-up are established.

Ensure Trigger 30 is active prior to team entering the simulator.

Verify Exam Security has been established and ASP_AO_OFF = True.

EVENT 1 1-RC-LT-1461 Fails High When cued by examiner, implement Trigger #1.

Operations Supervisor/Management:

If contacted, will acknowledge the failure of 1-RC-LT-1461. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00.

If contacted, will take responsibility for writing the WR and CR.

STA:

If contacted, will acknowledge the failure of 1-RC-LT-1461. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If asked, the STA will report that 1-FW-LR-1461 is a Reg. Guide 1.97 component. The STA will also report that upon review of CEP 99-0029 only two channels of pressurizer level are required, so no actions for Reg. Guide 1.97 are required.

If asked, the STA will review VPAP-2802 and TRM Section 3.3. The STA will report that he has completed his review and this failure does not impact VPAP-2802, but the TRM is impacted. The STA will report that a 14-day clock to establish are fire watch is required and a 60-day return to service clock is required in accordance with the TRM. He will also state that the TRM does refer you to TS 3.7.6.

If contacted, will take responsibility for writing the WR and CR.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 46 of 66 SIMULATOR OPERATOR GUIDE If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Maintenance/ Work Week Coordinator:

If contacted, will acknowledge instrumentation failure and commence investigations and/or efforts to place the channel in trip.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 47 of 66 SIMULATOR OPERATOR GUIDE EVENT 2 Selected Steam Flow Channel Fails Low on B SG When cued by examiner, implement Trigger #3.

Operations Supervisor/Management:

If contacted, will acknowledge the failure of 1-MS-FT-1484. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00.

If contacted, will recommend to the team that channels remain as they are for now (i.e., do not perform 1-OP-RP-001 at this time).

If contacted, will take responsibility for writing the WR and CR.

STA:

If contacted, will acknowledge the failure of 1-MS-FT-1484. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If asked, the STA will report that 1-MS-FT-1484 is a Reg. Guide 1.97 component. The STA will also report that upon review of CEP 99-0029 that only one channel of SG steam flow is required per SG, so no actions for Reg. Guide 1.97 are required.

If asked, the STA will review VPAP-2802 and TRM Section 3.3 and report that he has completed his review and this failure does not impact these documents.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 48 of 66 SIMULATOR OPERATOR GUIDE Maintenance/ Work Week Coordinator:

If contacted, will acknowledge instrumentation failure and commence investigations and/or efforts to place the channel in trip.

Field Operators:

If contacted, field operators will report no issues at the MFRVs.

Unit 2:

If team directs performance of 1-OPT-RX-007, Shift Average Power Calculation, state that you will have the 4th RO perform the procedure.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 49 of 66 SIMULATOR OPERATOR GUIDE EVENT 3 Loss of Isophase Bus Duct Cooling Fan A When cued by examiner, implement Trigger #5.

Operations Supervisor/Management:

If contacted, will acknowledge the failure of the A Isophase Bus Duct Cooling Fan and the need to ramp at 1%/minute to 78% power and then at the normal ramp rate until generator amps are less than 14250 amps.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge entry into AP-23.00.

STA:

If contacted, will acknowledge the failure of the A Isophase Bus Duct Cooling Fan and the need to ramp at 1%/minute to 78% power and then at the normal ramp rate until generator amps are less than 14250 amps.

If asked, the STA will acknowledge the need to borate and use rods (will acknowledge the team review of OP-RX-010, if performed). If asked to perform the OP-RX-010 review, the STA will state that he is not able to at this time.

After directed, the STA will report that he has reviewed VPAP-2802 and no notifications were required.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 50 of 66 SIMULATOR OPERATOR GUIDE Field Operators:

If contacted, after 1 minute, field operators will report that the A Phase Low Air Flow drop is indicated for the A iso-phase bus duct cooling fan.

If contacted, the operator will report no amps are indicated on breaker 1A2-2-1B for 1-EP-F-1A (A Iso-phase Bus Duct Cooling Fans) and the breaker is tripped.

If contacted, the operator will acknowledge and reset the local alarm panel for the IBDC fan and clear the alarm in the MCR. This can be done with V2GE5_RESET on the monitor screen.

If contacted, if attempt to reset breaker is requested, report that breaker immediately trips when reset.

If contacted, the breaker (1C2-2-1D) for the C fan is closed with 17 amps indicated.

Maintenance/Work Week Coordinator:

If contacted, will acknowledge the failure and commence investigations.

If contacted, will acknowledge the requirements to sample the RCS.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 51 of 66 SIMULATOR OPERATOR GUIDE EVENT 4 Generator Lockout and Failure of the Reactor to Trip.

When cued by examiner, implement Trigger #7.

Operations Supervisor/Management:

If contacted, will acknowledge the generator trip and failure of auto reactor trip.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge entry into 1-E-0 and 1-ES-0.1.

If contacted, Unit Two has implemented AP-50.00.

STA:

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Field Operators:

If contacted, field operators will report no abnormal conditions at the generator or main transformers.

Maintenance/Work Week Coordinator:

If contacted, will acknowledge the failure and commence investigations. 3 Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 52 of 66 SIMULATOR OPERATOR GUIDE EVENT 5 LOCA Outside of Containment.

When cued by examiner, implement Trigger #9.

When requested by the team, implement triggers 20/21/22 for energizing SI MOVs.

Operations Supervisor/Management:

If contacted, will acknowledge the LOCA outside containment.

If contacted, will acknowledge entry into 1-E-0 and 1-ECA-1.2 STA:

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are abnormal based on Vent-Vent radiation monitor readings. He will also state that containment conditions and the electrical conditions are as you see them.

Field Operators:

If contacted, field operators will report sound of flow behind the safeguards valve pit door (if contacted prior to leak isolation). No sounds will be heard if 1-SI-MOV-1980C is closed.

If contacted, field operators will energize 1-SI-MOV-1890A/B/C utilizing triggers 20/21/22 respectively.

Maintenance/Work Week Coordinator:

If contacted, will acknowledge the failure and commence investigations.

Health Physics:

If contacted, will acknowledge leak in safeguards and restrict access.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 1 Page 53 of 66 SIMULATOR OPERATOR GUIDE Unit Two:

If asked, blowdown and air ejector RM readings are pre-event.

If requested, acknowledge RM alarms, and perform ARP actions.

Role play as other individuals as needed.

SCENARIO ENDS UPON TRANSITION OUT OF 1-ECA-1.2.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 Time Position Applicants Action or Behavior ATTACHMENT 1 OF E-0 BOP 1. VERIFY FW ISOLATION:

Feed pump discharge MOVs - CLOSED 1-FW-MOV-150A 1-FW-MOV-150B MFW pumps - TRIPPED Feed REG valves - CLOSED SG FW bypass flow valves - DEMAND AT ZERO SG blowdown TVs - CLOSED Identifies ALL blowdown trip valves OPEN and manually closes ALL blowdown trip valves.

BOP 2. VERIFY CTMT ISOLATION PHASE I:

Phase I TVs - CLOSED 1-CH-MOV-1381 - CLOSED 1-SV-TV-102A - CLOSED PAM isolation valves - CLOSED 1-DA-TV-103A 1-DA-TV-103B Operator will close 1-CV-TV-105A and 1-CV-TV-150C Operator will close 1-CH-MOV-1381 BOP 3. VERIFY AFW PUMPS RUNNING:

a) MD AFW pumps - RUNNING (Time Delayed) b) TD AFW pump - RUNNING IF NECESSARY

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 4. VERIFY SI PUMPS RUNNING:

CHG pumps - RUNNING LHSI pumps - RUNNING BOP 5. CHECK CHG PUMP AUXILIARIES:

CHG pump CC pump - RUNNING CHG pump SW pump - RUNNING BOP 6. CHECK INTAKE CANAL:

Level - GREATER THAN 24 FT Level - BEING MAINTAINED BY CIRC WATER PUMPS BOP 7. CHECK IF MAIN STEAMLINES SHOULD BE ISOLATED:

a) Check if ANY of the following annunciators - HAVE BEEN LIT E-F-10 (High Steam Flow SI)

B-C-4 (Hi Hi CLS Train A)

B-C-5 (Hi Hi CLS Train B)

Identifies annunciators not lit and goes to RNO.

a) RNO - IF annunciator E-H-10 (Hdr/Line SI) NOT LIT, THEN GO TO Step 8.

BOP *8. CHECK IF CS REQUIRED:

a) CTMT pressure - HAS EXCEEDED 23 PSIA Identifies pressure has not exceeded 23 or 17.7 psia and goes to step 10.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0

• 10. BLOCK LOW PRZR PRESS SI SIGNAL:

BOP a) Check PRZR pressure - LESS THAN 2000 psig b) Turn both LO PRZR PRESS & STM HDR/LINE P switches to block c) Verify Permissive Status light C LIT BOP may block the low pressurizer pressure SI signal depending on current RCS pressure.

BOP *11. BLOCK LOW TAVE SI SIGNAL:

a) Check RCS Tave - LESS THAN 543°F b) Turn both HI STM FLOW & LO TAVG OR LP switches to block c) Verify Permissive Status light F LIT BOP may block the low Tave SI signal depending on current RCS temperature.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 NOTE:

CHG pumps should be run in the following order of priority: C, B, A.

Subsequent SI signals may be reset by reperforming Step 12.

BOP 12. VERIFY SI FLOW:

a) HHSI to cold legs - FLOW INDICATED 1-SI-FI-1961 (NQ) 1-SI-FI-1962 (NQ) 1-SI-FI-1963 (NQ) 1-SI-FI-1943 or 1-SI-FI-1943A b) Check CHG pumps - THREE RUNNING c) Reset SI.

d) Stop one CHG pump and out in AUTO e) RCS pressure - LESS THAN 185 PSIG RNO: e) IF two LHSI pumps are running, THEN do the following:

1) Verify reset or reset SI.

2) Stop one LHSI pump and put in AUTO.

3) GO TO Step 13.

BOP 13. VERIFY TOTAL AFW FLOW - GREATER THAN 350 GPM [450 GPM]

RNO ACTIONS:

IF SG narrow range level greater than 12% [18%] in any SG, THEN control feed flow to maintain narrow range level AND GO TO Step 14.

IF SG narrow range level less than 12% [18%] in all SGs, THEN manually start pumps AND align valves as necessary.

IF AFW flow greater than 350 GPM [450 GPM] can NOT be established, THEN GO TO 1-FR-H.1, RESPONSE TO LOSS OF SECONDARY HEAT SINK.

BOP 14. CHECK AFW MOVs - OPEN BOP will identify that all AFW MOVS are not open and will read the RNO portion of this step and manually align valves as necessary.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 15. INITIATE SI VALVE ALIGNMENT IAW ATTACHMENT 2 Attachment 2 of 1-E-0 is contained in attachment 2 of this guide.

BOP 16. INITIATE VENTILATION ALIGNMENT AND AC POWER ALIGNMENT IAW ATTACHMENT 3 See attached copy of Attachment 3 - contained in attachment 3 of this guide.

Unit 2 Operator will state that Unit 2 is at 100% power (if asked)

Unit 2 will also accept responsibility to complete Attachment 3 if it is given to Unit 2 at the point where differential pressure indications are requested.

All MCR boundary indications will be reported at positive.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 Attachment 2 of 1-E-0 Time Position Applicants Action or Behavior ATTACHMENT 2 of 1-E-0 SRO NOTE: Components previously aligned by SI termination steps, must not be realigned by this Attachment.

ATTACHMENT 2 of 1-E-0 RO/BOP 1. Verify opened or open CHG pump suction from RWST MOVs.

1-CH-MOV-1115B 1-CH-MOV-1115D ATTACHMENT 2 of 1-E-0 RO/BOP 2. Verify closed or close CHG pump suction from VCT MOVs.

1-CH-MOV-1115C 1-CH-MOV-1115E ATTACHMENT 2 of 1-E-0 RO/BOP 3. Verify running or start at least two CHG pumps. (listed in preferred order) 1-CH-P-1C 1-CH-P-1B 1-CH-P-1A ATTACHMENT 2 of 1-E-0 RO/BOP 4. Verify opened or open HHSI to cold legs MOVs.

1-SI-MOV-1867C 1-SI-MOV-1867D ATTACHMENT 2 of 1-E-0 RO/BOP 5. Verify closed or close CHG line isolation MOVs.

1-CH-MOV-1289A 1-CH-MOV-1289B

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 Attachment 2 of 1-E-0 ATTACHMENT 2 of 1-E-0 RO/BOP

6. Verify closed or close Letdown orifice isolation valves.

1-CH-HCV-1200A 1-CH-HCV-1200B 1-CH-HCV-1200C ATTACHMENT 2 of 1-E-0 RO/BOP 7. Verify opened or open LHSI suction from RWST MOVs.

1-SI-MOV-1862A 1-SI-MOV-1862B ATTACHMENT 2 of 1-E-0 RO/BOP 8. Verify opened or open LHSI to cold legs MOVs.

1-SI-MOV-1864A 1-SI-MOV-1864B ATTACHMENT 2 of 1-E-0 RO/BOP 9. Verify running or start at least one LHSI pump.

1-SI-P-1A 1-SI-P-1B ATTACHMENT 2 of 1-E-0 RO/BOP 10. Verify High Head SI flow to cold legs indicated.

1-SI-FI-1961 1-SI-FI-1962 1-SI-FI-1963 1-SI-FI-1943 or 1-SI-FI-1943A Abnormal flow indication will exist to A Loop - Team may decide to align to Th injection to restore normal SI flow.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 Attachment 2 of 1-E-0 ATTACHMENT 2 of 1-E-0 RO/BOP 11. IF flow not indicated, THEN manually start pumps and align valves. IF flow NOT established, THEN consult with Shift Supervision to establish another high pressure injection flow path while continuing with this procedure.

Alternate SI to Cold legs Hot leg injection RO will either open 1-SI-MOV-1842, or align HHSI to Th. This will require local actions to energize the associated supply breakers.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFI CATION REVISION PAGE 61 1 of 5

1. Verify or place REFUEL SFTY MOD E switches in NORMAL.

2. Verify ventilation alignment lAW Tables 1 and 2.

TABLE 1 UNIT #1 VENTILATION PANEL EQUIPMENT MARK NUMBER STATUS 0 1-VS-F-4A & B OFF 0 1-VS-HV-1A& B OFF 0 1-VS-F-BA & B OF F 0 1-VS-F-9A & B GREEN 0 1-VS-F-59 GREEN 0 1-VS-F-6 OF F 0 1-VS-F-39 GREEN 0 1-VS-F-7A & B GREEN 0 1-VS-HV-5 GREEN 0 1-VS-F-56A & B GREEN 0 1-VS-F-40A & B GREEN 0 1-VS-HV-4 OFF 0 2-VS-F-40A or B RED 0 2-VS-HV-4 OFF

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER V ERIFI CATION REVISION PAGE 61 2 of 5 TABLE 2 VNTX PANEL EXPECTED MARK NUMB ER EQUIPM ENT RESPONSE NOT OBTAIN ED STATUS D a. AOO-VS-1 07A & B RED D a.Place AUX BLDG CENTRAL AREA MOD E AOD-VS-1 08 GREEN switch to FILTER.

D b. MOD-V S-1 00A&B RED D b.' Place MOO-VS-1 00A to FILTER.

AOD-VS-1 06 GR EEN

• Place MOO-VS-100B to FILTER.

D c. MOD-V S-200A & B GR EE N D c.

• Place MOO-VS-200A to UNFllTER.

AOD-VS-206 RED

• Place MOO-VS-200B to UN FllTER.

D d. AOD-VS-1 03A & B GR EE N D d.* Place AOO-VS-103A in UN FILTER.

AOD-VS-1 04 GR EE N

• Place AOO-VS-1038 in UNFI LTER.

• Place AOO-VS-104 in FILTER.

D e. AOO-VS-1 01A & B GR EE N D e.Place AOO-VS-1 01A and 101 Bin AOD-VS-1 02 GR EE N UNFILTER.

D f. AOD-VS-1 11A & B GR EEN D f.Place COMBIN E CONTAINM ENT EXHAUST in ISOLATE.

D g. AOD-VS-1 10 GREEN D g.Place AOO-VS-109A and 109B in FILTER.

D h. AOD-V S-1 12A& B GR EE N D h.* Place AOO-VS-112A in CLOS E.

• Place AOO-VS-112B in CLOS E.

D i. MOD-V S-58A & B RED D i.Start 1-VS-F-58A and 1-VS-F-58B.

1-VS-F-58A & B RED

3. Verify fi ltered exhaust flow: (as read on FI-VS-117A and FI-VS-117B)

D* Total flow - GR EATER THAN 32400 cfm AND D* Flow through each filter bank - LESS THAN 39600 cfm

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-0 3 AUXILIARY VENTILATION AND AC POWER V ERIFICATION REV ISION PAG E 61 3 of 5

4. Check all Station Service Buses - ENERGIZED. !E NOT, TH EN initiate 1-AP-10.07 , lOSS OF UN IT 1 POWER.

5. Check annunciator VSP-J2 - LIT.

6. Check Unit 1 RSST l Te time delay bypass light - LIT.

7. Verify stopped or stop 1-VS-AC-4.

8. Place 1-VS-43-VS103X, MeR ISOLATION switch to the OFF position.

9. Verify closed or close MeR isolation dampers.

D* 1-VS-MOO-103A D* 1-VS-MOO-103B D* 1-VS-MOO-103C D* 1-VS-MOO-103D

10. _ !E any MeR PDI on Unit 2 Vent Panel NOT indicating positive pressure, TH EN place the following switches to OPEN.

D* 1-V5-50V-322, EMERG AIR DUMP TO CONTROL RM D* 1-V5-50V-100, EMERG AIR DUM P TO C.R.

NOTE: The timer should be set for 50 minutes, minus the number of minutes since Safety Injection initiation .

11 . Set timer. WHEN 51 has been in progress for 50 minutes (when timer goes off), TH EN immediately periorm Step 18 to start one Emergency Supply Fan .

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFI CATION REVISION PAG E 61 4 of 5

12. Check readings on the following Differential Pressure Indicators - POSITIVE PRESSURE INDICATED.

D* PDI -VS-100, D.P. -U 1CRlU1TB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-101 , D.P. -U 1RRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-200 , D.P. -U2CRlU2TB (Unit 2 Turbine Ventilation Panel )

D* PDI -VS-20 1, D.P. -U2RRlU2TB (Unit 2 Turbine Ventilation Panel )

D* 1-VS-PDI -118 (Un it 1 Computer Room)

D* 1-VS-PDI -116 (Near Unit 1 Semi-Vital Bus)

D* 2-VS-PDI -215 (Un it 2 AC Room )

D* 2-VS-PDI -206 (Near Unit 2 Semi-Vital Bus )

13. !f any reading NOT positive, TH EN initiate Attachment 6 to secure MeR boundary fans .

14. Verify initiated or initi ate O-AP-SO.OO , OPPOSITE UNIT EMERGENCY.

15. Verify the following Me R and ESGR air conditioning equ ipment operating .!E. NOT, THEN start equipment within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> JAW the appropriate subsection of O-OP-VS-006, CONTROL ROOM AND RELAY ROOM VENTI LATION SYSTEM.

D* One Control Room chiller D* One Un it 1 Control Room AHU D* One Un it 2 Control Room AHU D* One Un it 1 ESGR AHU D* One Un it 2 ESGR AHU

16. _ !E. both of the following conditions exist, THEN verify that Load Shed is activated.

D* Unit 2 - SUPPLI ED BY RSST D* Unit 2 RCPs - RUNNING

17. !E. Load Shed is required and not activated, THEN initiate O-AP-10.10 , LOSS OF AUTO LOAD SHED.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY V ENTILATION AND AC POW ER V ERIFI CATION REV ISION PAG E 61 5 of 5 CAUTION: Only one Emergency Supply Fan must be started in the following step.

Chilled Water flow to the in-service Unit 1 MeR AHU must be throttled to at least 15 gpm when the Emergency Supply fan is started.

Chilled Water flow to the in-service Unit 2 MeR AHU must be throttled to at least 25 gpm when the Emergency Supply fan is started.

An Emergency Supply Fo n must not be slorted if the fi lter is wet.

18. WHEN 51 has been in progress for 50 minutes (when timer goes off), THEN immediately start ON E Emergency Supply Fa n JAW the following : (1-VS-F-41 or 2-VS-F-41 preferred)

a. lE 1-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104A, CO NT RM EMERG SUP MOD.

2. Start 1-VS-F-41.

b. lE 2-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, TH EN perform the following substeps.

1. Open 2-VS- MOD-204A, CO NT RM EMERG SUP MOD.

2. Start2-VS-F-41.

c. lE 1-VS-F-42, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104B, CO NT RM EMERG SUP MOD.

2. Start 1-VS-F-42.

d. lE 2-VS-F-42, CONT RM EMERG SUP FAN , will be used, TH EN perform the following substeps.

1. Open 2-VS- MOD-204B, CO NT RM EMERG SUP MOD.

2. Start 2-VS-F-42.

e. Adjust Chilled Water flow to MCR AHUs lAW Step 18 Caution.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Facility: Surry Scenario No.: 2 Op-Test No.: 2009-301 Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 is at 100% power and has been since the last refueling outage. All systems and crossties are operable with the following exception:

1-FW-P-2, Turbine Driven Auxiliary Feedwater Pump, is tagged out for governor valve maintenance. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.6.F.1 clock.

Additionally, thunderstorms and high winds are forecast for the area for the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. OC-21 is in effect and being coordinated by the desk SRO.

Turnover:

Maintain Unit 1 at 100% power and prepare for the return to service of 1-FW-P-2 by the end of your shift.

Last shift received annunciator 1A-A4 (ACCUM TK 1A Hi-Lo LVL) and verified Technical Specification compliance. A walkdown of the accumulator revealed a sample line drain valve leaking by which has been resolved. You are to fill the accumulator immediately after assuming the watch to normal operating level in accordance with 1-OP-SI-002, Safety Injection Accumulators. The current PSA analysis for plant conditions is green for both units.

Event Malf. Event Type* Event No. No. Description 1 TBD N- BOP/SRO Fill A Safety Injection Accumulator in accordance with 1-OP-SI-002.

2 TBD I- RO/SRO Selected turbine 1st stage impulse pressure channel III fails high, resulting in outward rod motion requiring placing rod control to TS- SRO manual.

3 TBD I- RO/SRO Pressurizer pressure control channel 1445 fails high resulting in pressurizer PORV 1-RC-PCV-1456 opening, requiring manual TS- SRO action to close.

4 TBD M- All A main steam trip valve spuriously closes resulting in reactor trip.

C - RO/SRO The reactor trip is complicated by the failure of the MSR steam line to isolate during the immediate actions of 1-E-0.

5 TBD M- All A main steam line faults in safeguards upstream of the main steam trip valve (unisolable).

The performance of 1-E-0 is complicated by a failure of the C - BOP/SRO blowdown trip valves to close automatically.

6 TBD M- All One motor driven auxiliary feedwater pump will trip, followed shortly by the loss of the remaining motor driven auxiliary feedwater pump.

This will result in a total loss of feed capability to the steam generators. Also, auxiliary feedwater crosstie from the opposite unit will be unsuccessful requiring restoration of main feedwater in accordance with 1-FR-H.1.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor, (TS) Technical Specifications Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Surry 2009- NRC Exam Scenario #2 Event #1 The operating team will fill the A safety injection accumulator to normal operating level in accordance with 1-OP-SI-002, Safety Injection Accumulators after assuming the watch. This evolution will be briefed prior to turnover. The unit supervisor will direct the BOP to perform these actions. Field operator(s) will support task performance as required.

Verifiable Action: (BOP) Numerous board manipulations as required to fill the A accumulator.

Event #2 First stage pressure transmitter (MS-PT-446) will fail high. This will result in outward rod motion which will be stopped by the RO placing rod control in MANUAL. The team will enter 0-AP-53.00 (Loss of Vital Instrumentation/Controls), place all main feedwater regulating valves in MANUAL and swap control to the unaffected 1st stage pressure transmitter. The team will restore rod control to automatic prior to exiting AP-53.00. The SRO will evaluate technical specifications.

Verifiable Actions: (RO) Place rod control in MANUAL due to outward rod motion.

Technical Specifications:

3.7-1 item 20.b & e - OA #13 (Verify permissive status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> in accordance with 1-OPT-RP-001, Check of Permissive Status Lights P-6, P7, P-8, and P-10).

3.7-2 item 1.e.1 - OA #20 (Place inoperable channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />).

Event #3 1-RC-PT-1445 will fail high causing 1-RC-PCV-1456 to open. The RO should close 1-RC-PCV-1456 and the SRO will direct entry into 0-AP-53.00 (Loss of Vital Instrumentation / Controls) and transition to AP-31.00 (Increasing or Decreasing RCS Pressure).

Verifiable Actions: (RO) Close 1-RC-PCV-1456.

Technical Specifications:

3.1.A.6 - Close associated block valve within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.

Event #4 A main steam trip valve spuriously closes resulting in reactor trip.

The reactor trip is complicated by the failure of the MSR steam line to isolate during the immediate actions of 1-E-0. Team will transition out of 1-E-0 to 1-ES-0.1 (Reactor Trip Response).

Verifiable Actions: (All) Manual reactor trip (or AUTO depending on team response).

(RO) Manual isolation of steam to the MSRs in accordance with 1-E-0 immediate actions, step 2 RNO.

2

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Event #5 There is an uncontrolled depressurization of the A steam generator due to unisolable steam leak inside the Main Steam Valve House. SRO should re-enter 1-E-0 and perform a safety injection.

The performance of 1-E-0 is complicated by the failure of the blowdown trip valves to close automatically.

Verifiable Actions: (BOP) Manual closure of blowdown trip valves in accordance with 1-E-0 Attachment 1, step 1.

(RO) Isolate the faulted steam generator in accordance with 1-E-0 Attachment 9.

Critical Task: [WOG E A] Isolate feed flow to and steam flow from the faulted S/G before RCS temperature is less than 400 degrees AND before transition out of E-2 AND within 30 minutes of the MSLB.

Actions required to accomplish:

Close 1-FW-MOV-151E Close 1-FW-MOV-151F Event #6 One motor driven auxiliary feedwater pump will trip, followed shortly by the loss of the remaining motor driven auxiliary feedwater pump. This will result in a total loss of auxiliary feed capability to the steam generators. Also, auxiliary feedwater crosstie from the opposite unit will be unsuccessful requiring restoration of steam generator level using main feedwater in accordance with 1-FR-H.1.

Verifiable Actions: (BOP) Establish heat sink with main feedwater pump flowing to intact SGs.

Critical Tasks: [WOG FR-H.1 - A] Establish heat sink with main feedwater pump flowing to intact SGs prior to two out of three SGs WR levels less then 7%.

Actions required to accomplish:

Reset Safety Injection Depress Feedwater Reset Pushbuttons Start 1-FW-P-1A or B Open 1-FW-MOV-150A or B Throttle open either the Main Feed Water Reg Valve or Main Feed Water Reg Valve Bypass Valve associated with the non-faulted steam generators 3

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Initial 100% Power IC, MOL - Cycle 23. The unit has been at 100% power since the last Conditions: refueling outage.

Pre-load malfunctions:

o Disable 1-MS-FCV-104 switch to OPEN.

o Disable auto-closure of all blowdown trip valves.

Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-FW-P-2 tagged out for planned maintenance Turnover: Maintain full power operation. Unit 2 is at 100% power with all systems operable.

When turnover complete, fill 1-SI-TK-1A to normal operating level iaw 1-OP-SI-002.

All systems and crossties are operable with the following exceptions:

1-FW-P-2 is tagged out for governor valve replacement- 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> T.S. 3.6 clock.

Event Malf. #s Severity Instructor Notes and Required Feedback 1 N/A N/A Fill A Safety Injection accumulator.

2 MS1401 N/A Impulse pressure channel III fails high.

3 RC4802 N/A Pressurizer pressure control channel 1445 fails high.

4 MS0901 N/A A Main Steam Trip Valve spuriously closes.

A main steam line fault upstream of main steam trip valve (in 5 MS0401 N/A Safeguards)

Loss of motor driven Auxiliary feedwater pump- loss of AFW 6 FW0701/FW0702 N/A capability.

4

SHIFT TURNOVER INFORMATION OPERATING PLAN:

The Unit has been at 100% power since the last refueling outage.

1-FW-P-2 is tagged out for governor valve replacement- 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> T.S. 3.6 clock. Pump is expected to return to service in 40 hours4.62963e-4 days <br />0.0111 hours <br />6.613757e-5 weeks <br />1.522e-5 months <br />.

Unit 2 is at 100% Power with all systems and crossties operable.

Maintain full power operation.

Fill 1-SI-TK-1A to normal operating level after assuming watch responsibilities.

5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 1 Page 6 of 79 Event

Description:

Fill 1-SI-TK-1A to normal operating level in accordance with 1-OP-SI-002.

Cue: When team ready.

Time Position Applicants Action or Behavior BOP Precautions and limitations of 1-OP-SI-002:

4.1 An increase in accumulator volume of 1% of tank volume (cumulative indicated level increase of 7.2%) from sources other than the RWST, requires a sample within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> to verify that boron concentration is in specification.

4.2 The desired accumulator level for normal operations is a minimum level of 70% on the highest channel of SI accumulator level indication. If an accumulator is being frequently filled due to leakage, it should normally be filled at 63% and filled to a level of 75%.

4.3 Accumulators should not be drained to account for RCS inleakage unless the Accumulator has been sampled.

4.4 One Accumulator may be isolated for a period not to exceed 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

4.5 The Administrative and Technical Specification limits for the Safety Injection Accumulators are as follows:

4.6 If the person performing the Admin Control function for 1-SI-26 or 2-SI-26 is to be stationed outside of the RCA, then they should check out the proper dosimetry prior to assuming Admin Control responsibilities.

4.7 The STA must be notified prior to adding or removing water from the RWST in the event that a leakrate is being performed. (Ref. 2.4.7)

RO will contact STA and report pending accumulator fill 6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 1 Page 7 of 79 Event

Description:

Fill 1-SI-TK-1A to normal operating level in accordance with 1-OP-SI-002.

Cue: When team ready.

BOP Section 5.1 - Filling Any Safety Injection Accumulator Notes prior to step 5.1.1:

Administrative control of 1-SI-32 and 1-SI-26 or 2-SI-26 must be assigned to two different operators.

Administrative control of 1-SI-32 is not required unless CTMT integrity is required.

Administrative control of 1-SI-26 or 2-SI-26 is not required unless the RCS is greater than or equal to 350°F / 450 psig.

BOP 5.1.1 Verify and maintain RWST level greater than 97%. IF RWST level is not or cannot be maintained greater than 97%, THEN the administrative control requirements of 1-SI-26 or 2-SI-26 are not met AND these valves must be closed and the administrative controls secured. (Reference 2.3.9)

RO verifies adequate RWST level exists for accumulator fill BOP /SRO 5.1.2 Notify Shift Supervision that the following valves will require administrative control.

1-SI-32, Hydro Test Pump Disch Isol to U-1 Accums, will be opened and administrative control will be required IAW Attachment 1.

1-SI-26, Hydro Test Pump Suct Isol from U-1 RWST, or 2-SI-26, Hydro Test Pump Suct Isol, will be opened and administrative control will be required IAW Attachment 3.

Evaluators note- team will be told that briefing of administrative controls already performed.

BOP 5.1.3 Verify open or open 1-SI-29, Hydro Test Pump Disch Isol.

5.1.4 Verify open or open 1-SI-27, Hydro Test Pump Suct Isol.

5.1.5 Close breaker 2A2-1-5A, Hydro Test Pump, for 1-SI-P-2.

7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 1 Page 8 of 79 Event

Description:

Fill 1-SI-TK-1A to normal operating level in accordance with 1-OP-SI-002.

Cue: When team ready.

BOP 5.1.6 IF Hydro Pump suction is desired from Unit 1 RWST, THEN perform the following. Otherwise, enter N/A.

a. Open 1-SI-26, Hydro Test Pump Suct Isol from U-1 RWST.

b. Verify closed or close 2-SI-26, Hydro Test Pump Suct Isol.

RO will direct hydro pump suction to be aligned to unit one.

BOP 5.1.7 IF Hydro Pump suction is desired from Unit 2 RWST, THEN perform the following. Otherwise, enter N/A.

a. Open 2-SI-26, Hydro Test Pump Suct Isol.

b. Verify closed or close 1-SI-26, Hydro Test Pump Suct Isol from U-1 RWST.

This step will not be performed.

BOP 5.1.8 Align discharge of 1-SI-P-2, HYDRO TEST PP, to Unit 1 Containment by unlocking and opening 1-SI-32, Hydro Test Pump Disch Isol to U-1 Accums.

BOP Notes prior to step 5.1.9:

Accumulators must NOT be cross-tied while filling is in progress. Two Accumulator Fill HCVs may be opened momentarily (under no circumstances for greater than one hour) while swapping the fill lineup from one Accumulator to another. (Reference 2.3.7, 2.3.8)

Accumulators may be cross-tied if the Reactor is not critical.

BOP 5.1.9 Open the selected ACCUM FILL ISOL VV. Check the valve(s) used.

HCV-1851A HCV-1851B HCV-1851C RO opens 1-SI-HCV-1851A.

BOP 5.1.10 Place HIC-947, ACCUMS MAKEUP-HYDRO TEST PP FLOW SETPT, to zero percent output.

BOP 5.1.11 Start 1-SI-P-2.

8

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 1 Page 9 of 79 Event

Description:

Fill 1-SI-TK-1A to normal operating level in accordance with 1-OP-SI-002.

Cue: When team ready.

BOP 5.1.12 Place HIC-947 to 5 percent output for 1 minute to allow pump to self-vent.

BOP 5.1.13 Adjust HIC-947 as desired to regulate pump capacity.

BOP Notes prior to step 5.1.14:

The accumulators should be filled to as close to 70% as possible, with 70% on the highest channel of accumulator level indication being the minimum level.

During accumulator recirculation, accumulator level may be cycled between the high and low level alarm setpoints.

BOP 5.1.14 WHEN Accumulators have reached desired levels, THEN place HIC-947 to zero percent output.

BOP 5.1.15 Wait 15 seconds for the speed changer motor to reduce speed.

BOP 5.1.16 Stop 1-SI-P-2.

BOP 5.1.17 Wait 60 seconds for the pump to stop.

BOP 5.1.18 Close the selected ACCUM FILL ISOL VV. Check the valve(s) used.

HCV-1851A HCV-1851B HCV-1851C BOP 5.1.19 Close and lock 1-SI-32.

BOP 5.1.20 Close the Hydro Pump suction valve opened in Step 5.1.6.a or 5.1.7.a.

____ 1-SI-26 OR ____ 2-SI-26 BOP 5.1.21 Open breaker 2A2-1-5A, Hydro Test Pump, for 1-SI-P-2.

9

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 1 Page 10 of 79 Event

Description:

Fill 1-SI-TK-1A to normal operating level in accordance with 1-OP-SI-002.

Cue: When team ready.

BOP /SRO 5.1.22 Notify Shift Supervision that Administrative Control of 1-SI-32 is no longer required.

BOP /SRO 5.1.23 Notify Shift Supervision that Administrative Control of 1-SI-26 or 2-SI-26 is no longer required.

BOP 5.1.24 Update the Unit 1 Narrative Log to indicate that Administrative Control of 1-SI-32 and 1-SI-26 or 2-SI-26 is no longer required.

END END END 10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 2 Page 11 of 79 Event

Description:

Impulse Pressure Channel III Fails High.

Cue: By Examiner.

Time Position Applicants Action or Behavior RO Diagnoses failure of 1-MS-PT-446 with the following indications/alarms:

Alarms:

1G-F8- ROD BANK D WITHDRAWAL 1G-B5- COMPUTER PRINTOUT ROD CONT SYS Indications:

Outward control rod motion Impulse pressure channel III meter off-scale high In accordance with the immediate actions of AP-53.00 the RO will take the rod control mode selector switch to MANUAL to stop rod motion.

Evaluators note- attachment 5 of this guide contains ARP 1G-F8 actions.

SRO Enters 0-AP-53.00, Loss of Vital Instrumentation / Controls.

RO [1] VERIFY REDUNDANT INSTRUMENT CHANNEL(S)

INDICATION - NORMAL Verifies 1-MS-PI-1447, Turb 1st Stage Press, NORMAL.

RO [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Places ROD CONTROL MODE SEL SWITCH to MAN and verifies rod motion stops.

SRO The team will hold a transient brief. During the brief the failure of 1-MS-PI-1446 will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

11

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 2 Page 12 of 79 Event

Description:

Impulse Pressure Channel III Fails High.

Cue: By Examiner.

RO 3. VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%.

RO will identify that reactor power is less than 100%.

SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

Turbine First Stage Pressure, Step 9 RO The RO will identify that 1-MS-PI-1446 has failed high.

RO 9. CHECK TURBINE FIRST STAGE PRESSURE CHANNELS -

NORMAL RO will report 1-MS-PI-1446 failed high.

SRO Step 9 RNO- GO TO Attachment 2.

Attachment 2 of 0-AP-53.00 Caution and Note prior to step 1:

CAUTION: Delta flux must be monitored and maintained within band if rods have moved.

NOTE: Page 4 of this Attachment shows a one-line diagram of Turbine First Stage Pressure.

12

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 2 Page 13 of 79 Event

Description:

Impulse Pressure Channel III Fails High.

Cue: By Examiner.

Attachment 2 of AP-53.00 RO/BOP 1. IF the selected Turbine First Stage Pressure channel has failed, THEN do the following:

a. Verify or place the ROD CONT MODE SEL switch in MANUAL.

b. Select redundant Turbine First Stage Pressure channel IAW the following:

1. Verify or place STM DUMP CNTRL switch in OFF-RESET.

2. Verify or place ( )-CP-43-( )CP( )01, SUDDEN LOSS LOAD DEFEAT switch in DEFEAT position.

3. Verify or place Main Feed Reg Valves in MANUAL:

( )-FW-FCV-( )478, SG A FEED REG

( )-FW-FCV- ( )488, SG B FEED REG

( )-FW-FCV-( )498, SG C FEED REG

4. Verify or place TURB FIRST STAGE PRESS CH SEL switch to redundant channel.

RO will report rod control in MANUAL. RO or BOP will place dumps in OFF and 1-CP-43-1CP101 in DEFEAT. RO or BOP will place all feedwater regulating valves in MANUAL while other operator selects the redundant channel.

Attachment 2 of AP-53.00 SRO Caution prior to step 2.

CAUTION: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

Attachment 2 of AP-53.00 RO/BOP 2. Return affected components to normal position IAW Shift Supervision direction:

a. WHEN SG level returned to normal, THEN place Main Feed Reg Valves in AUTO:

( )-FW-FCV-( )478, SG A FEED REG

( )-FW-FCV- ( )488, SG B FEED REG

( )-FW-FCV-( )498, SG C FEED REG 13

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 2 Page 14 of 79 Event

Description:

Impulse Pressure Channel III Fails High.

Cue: By Examiner.

Attachment 2 of AP-53.00 SRO NOTE:

Unless there is evidence that a Turbine runback is imminent, the preferred alignment of the Steam Dump control system is ON in the Tave Mode.

If ( )-MS-PT-( )446 fails low, Steam Dump Demand will go to 100%,

but steam dumps will not open, since an arming signal (load reject or trip) is not present. If the steam dumps are not in Steam Pressure Mode following ( )-MS-PT-( )446 failing low and a load reject occurs, then all the steam dumps will open. AMSAC will not function six minutes after the failure.

If ( )-MS-PT-( )446 fails high, Steam Dump Demand will remain at 0%, and if a load reject signal is present, the dumps will not open (Steam Dump Tref is greater than Tave). However, if a trip signal does occur, the steam dumps will open as they now compare Tave to Tnoload.

If ( )-MS-PT-( )447 fails low, a load reject signal will develop, but the steam dumps will not open since there is no steam dump demand signal. However, the CP Bldg will be bypassed. The CP Bldg should be returned to service expeditiously to maintain secondary chemistry.

AMSAC will not function six minutes after the failure.

If ( )-MS-PT-( )447 fails high, the load reject arming signal is effectively defeated.

RO/BOP b. Return Steam Dumps to service IAW Shift Supervision direction.

1. Momentarily place STM DUMP MODE SEL switch in RESET.

2. Place STM DUMP CNTRL switch in ON.

3. Place ( )-CP-43-( )CP( )01, SUDDEN LOSS LOAD DEFEAT switch in NORMAL position.

4. IF ( )-MS-PT-( )447 has failed, THEN restore the CP Bldg as required.

a. Have the CP Bldg Operator open ( )-CP-AOV-( )22 in MANUAL.

b. Close ( )-CP-MOV-( )00.

c. Have the CP Bldg Operator slowly close ( )-CP-AOV-( )22 in MANUAL.

d. Place ( )-CP-AOV-( )22 in AUTOMATIC and adjust setpoint to 62 psid.

5. IF ( )-MS-PT-( )446 has failed low, THEN consult with Shift Manager for the need to place the STM DUMP MODE SEL switch in STEAM PRESSURE mode.

c. Return Rod Control to Auto IAW Shift Supervision direction.

1. Review appropriate ARP(s) to verify correct rod position. (for example, G-F-8)

2. Place the ROD CONT MODE SEL switch in AUTO.

14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 2 Page 15 of 79 Event

Description:

Impulse Pressure Channel III Fails High.

Cue: By Examiner.

Attachment 2 of AP-53.00

3. Perform follow-up actions:

a. Consult with Shift Manager on need to initiate ( )-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

b. Refer to the following Tech Spec 3.7 items.

Table 3.7-1, 20 (Refer to ( )-OPT-RP-001 - one hour clock) and Table 3.7-2, 1.e

c. Refer to VPAP-2802 for AMSAC inoperability.

d. IF no other instrumentation failure exists, THEN GO TO Step 14.

SRO will determine the following Technical Specifications required actions:

3.7-1 item 20.b & e - OA #13 (Verify permissive status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> in accordance with 1-OPT-RP-001, Check of Permissive Status Lights P-6, P7, P-8, and P-10).

3.7-2 item 1.e.1 - OA #20 (Place inoperable channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />).

Evaluators note- 1-OPT-RP-001 actions are contained in attachment 6 of this guide.

AP-53.00- Step 14 (Back in body of procedure)

SRO/RO 14. Review ( )-OPT-RX-001, reactor power calorimetric using PCS computer program, to determine operability of calorimetric and need to perform ( )-

OPT-RX-007, SRO/RO determines that OPT-RX-001 is not impacted and OPT-RX-007 will not need to be performed.

SRO 15. CHECK FAILED INSTRUMENT - IS A REGULATORY GUIDE 1.97 VARIABLE SRO directs STA to review Reg. Guide 1.97. The STA will report that 1-MS-PT-1446 is not a Reg. Guide 1.97 component.

RNO is to go to step 17.

15

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 2 Page 16 of 79 Event

Description:

Impulse Pressure Channel III Fails High.

Cue: By Examiner.

SRO 17. Review the following:

TS 3.7 VPAP-2802 TRM Section 3.3, Instrumentation SRO will determine the following Technical Specifications required actions:

3.7-1 item 20.b & e - OA #13 (Verify permissive status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> in accordance with 1-OPT-RP-001, Check of Permissive Status Lights P-6, P7, P-8, and P-10).

3.7-2 item 1.e.1 - OA #20 (Place inoperable channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />).

SRO directs STA to review VPAP-2802 and TRM Section 3.3. The STA reports that he has completed his reviews; VPAP-2802 is impacted by AMSAC, but the TRM is not impacted SRO 18. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION - EXISTS The team will identify that no additional failures exist, proceed to the RNO section, and this will direct the team to Step 20.

SRO 20. PROVIDE NOTIFICATIONS AS NECESSARY:

Shift Supervision OMOC STA (PRA determination)

I&C End End End 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 3 Page 17 of 79 Event

Description:

Pressurizer Pressure control channel 1-RC-PT-1445 fails high.

Cue: By Examiner.

Time Position Applicants Action or Behavior RO Diagnose the failure with the following indications:

Alarms:

1C-D7 PRZR PWR RELIEF LINE HI TEMP 1C-F8 PRZR HI PRESS 1C-F7 PRZR RELIEF TK HI PRESS 1D-H4 PRZR SFTY VV PWR RELIEF VV OPEN Indications:

Decreasing PRZR pressure 1-RC-PCV-1456 open light ON The following actions will be taken in accordance with AP-53.00:

Verifies PRZR pressure is low.

Places control switch for 1-RC-PCV-1456 to CLOSE.

SRO Enters 0-AP-53.00, Loss of Vital Instrumentation / Controls.

[1] VERIFY REDUNDANT INSTRUMENT CHANNEL (S)

RO INDICATION - NORMAL Verifies 1-RC-PI-1444 (RCS pressure) is indicating normally. Team may look at pressure on CETC or the RCS pressure protection channels.

[2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL RO CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Closes the Pressurizer PORV (1-RC-PCV-1456).

Although the SRO may not report it at this time, TS 3.1.A.6 is applicable.

17

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 3 Page 18 of 79 Event

Description:

Pressurizer Pressure control channel 1-RC-PT-1445 fails high.

Cue: By Examiner.

SRO The team will hold a transient brief. During the brief the failure of 1-RC-PI-1445 will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

RO 3. VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%.

RO will identify that reactor power, by T, is less than 100%.

SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

PRZR Pressure Control, Step 5 RO The RO will identify that 1-RC-PI-1445 has failed high.

RO 5. CHECK THE FOLLOWING INSTRUMENTS/CONTROLS -

AFFECTED Nuclear Instrumentation Pressurizer Pressure control SRO NOTE: RCS pressure decrease will cause a slight decrease in RCS Tave due to negative reactivity from the moderator pressure coefficient.

RO 6. CHECK PRZR SPRAY VALVE CONTROLLERS - NORMAL.

Spray Controllers are operating normally.

18

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 3 Page 19 of 79 Event

Description:

Pressurizer Pressure control channel 1-RC-PT-1445 fails high.

Cue: By Examiner.

SRO/RO CAUTION: Delta flux must be monitored and maintained within band if rods have moved.

7. GO TO THE APPROPRIATE ABNORMAL PROCEDURE

( )-AP-4.00, Nuclear Instrumentation Malfunction

( )-AP-31.00, Increasing or Decreasing RCS Pressure.

Team transitions to AP-31.00, Increasing or Decreasing RCS Pressure.

SRO Enters 1-AP-31.00, INCREASING OR DECREASING RCS PRESSURE SRO NOTE:

EPIPs may be applicable.

Attachment 1 may be referred to for a diagram of the pressure control system.

1. CHECK TURBINE LOAD - STABLE RO 2. CHECK RCS PRESSURE - DECREASING.

SRO CAUTION:

Decreasing RCS pressure will cause the OT T setpoint to decrease.

A Safety Injection may occur if the unit is not tripped prior to RCS pressure decreasing below 2100 psig.

NOTE:

PRZR PORV 1-RC-PCV-1455C should be declared inoperable if the Master Controller is placed in Manual.

RCS pressure decrease will cause a slight decrease in RCS Tave due to negative reactivity from the moderator pressure coefficient.

3. CHECK MASTER CONTROLLER RESPONSE - NORMAL FOR PLANT CONDITIONS 1-RC-PC-1444J RO Reports no issues with the master pressure controller.

19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 3 Page 20 of 79 Event

Description:

Pressurizer Pressure control channel 1-RC-PT-1445 fails high.

Cue: By Examiner.

RO *4. CHECK RCS PRESSURE - STILL DECREASING.

Reports RCS pressure is not decreasing.

RNO : GO TO Step 17 Team may answer this question as if no actions were taken in AP-53.00 (acceptable method). If so, the team will

5. Verify no pressure loss through the PRZR PORVs a) Close or verify close PRZR PORVs b) Close Block MOV to isolate any PORV which will not close or is leaking.

6. Turn on all PRZR Heaters

7. Verify Closed or close 1-CH-HCV-1311, Aux Spray Isolation.

8. Check Aux Spray Line - Leakage Suspected

8. RNO - GO TO STEP 10

10. Place Spray Valve Controllers in Manual and adjust demand to zero.

11. Check either of the following conditions:

o Either Spray Valve will not close o Either Spray valve is suspected of leaking

11. RNO - GO TO STEP 13

13. Check RCS Pressure - Stabilizing or increasing

14. GO TO STEP 17 SRO 17. NOTIFY THE FOLLOWING:

OM on call STA Instrument Shop SRO/RO 18. CHECK PRZR PORVS - EITHER INOPERABLE 1-RC-PCV-1455C 1-RC-PCV-1456 Reports that 1-RC-PCV-1456 is inoperable.

If the team placed the spray valves in manual, they may place them back in automatic control.

20

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 3 Page 21 of 79 Event

Description:

Pressurizer Pressure control channel 1-RC-PT-1445 fails high.

Cue: By Examiner.

RO 19. CLOSE BLOCK VALVE FOR INOPERABLE PORV 1-RC-MOV-1536 if 1-RC-PCV-1455C inoperable 1-RC-MOV-1535 if 1-RC-PCV-1456 inoperable Closes 1-RC-MOV-1535.

SRO SRO Exits 1-hour TS clock to close the associated block valve for an inoperable PORV (i.e., PORV is in manual)

BOP 20. MAINTAIN STABLE TURBINE LOAD UNTIL PRESSURE CONTROL SYSTEM IS RETURNED TO NORMAL SRO Determines applicable Technical Specifications:

LCO 3.12.F.2 if pressurizer pressure was less than 2205 psig.

LCO 3.1.A.6.b for PORV 1456 (close block valve w/in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />).

End End End 21

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 4 Page 22 of 79 Event

Description:

Main Steam Trip Valve Spurious Closure and Reactor Trip Cue: By Examiner.

Time Position Applicants Action or Behavior RO/BOP Diagnose the failure with the following indications:

Alarms:

1H-A8- STM LINE ISOL TRIP VVS CLOSED 1H-A2- T DEVIATION LOOP 1A > < LOOP 1B 1H-C2- T DEVIATION LOOP 1A > < LOOP 1C 1F-F5- STM GEN 1B CH 3 HI STM LINE FLOW 1F-F6- STM GEN 1C CH 3 HI STM LINE FLOW 1F-G5- STM GEN 1B CH 4 HI STM LINE FLOW 1F-G6- STM GEN 1C CH 4 HI STM LINE FLOW 1E-G10- STM GEN LO-LO LVL Indications:

Low steam flow on A S/G High steam pressure on A S/G Steam generator level alarms A Main Steam Trip Valve closed indication The SRO and/or RO will indicate a need to perform the immediate actions of 1-E-0, Reactor Trip or Safety Injection.

RO [1] VERIFY REACTOR TRIP:

a. Manually trip reactor Pushes the reactor trip push buttons.

b. Check the following:

All Rods On Bottom light - LIT Reactor trip and bypass breakers - OPEN Neutron flux - DECREASING 22

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 4 Page 23 of 79 Event

Description:

Main Steam Trip Valve Spurious Closure and Reactor Trip Cue: By Examiner.

RO [2] VERIFY TURBINE TRIP:

a. Manually trip the turbine Pushes the turbine trip push buttons.

b. Verify all turbine stop valves - CLOSED

c. Isolate reheaters by closing MSR steam supply SOV 1-MS-SOV-104 RO Observes that 1-MS-FCV-104A/B/C/D are still open and performs step 2c RNO actions:

c. RNO- IF reheater FCVs will NOT close, THEN close MSR steam supply MOVs.

RO Closes 1-MS-MOV-100A/B/C/D

d. Verify generator output breakers - OPEN (Time Delayed)

RO [3] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED 23

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 4 Page 24 of 79 Event

Description:

Main Steam Trip Valve Spurious Closure and Reactor Trip Cue: By Examiner.

RO [4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING SI annunciators - LIT A-F-3 SI INITIATED - TRAIN A A-F-4 SI INITIATED - TRAIN B a) RNO - Check is SI is required or imminent as indicated by any of the following:

Low PRZR Pressure Identifies that pressurizer pressure is slowly recovering (or stable).

High CTMT Pressure Identifies that containment pressure is stable at about 10.5 psia High Steamline Differential Pressure Identifies that there is no steam line differential pressure.

High Steam Line Flow with Low Tave or Low Line Pressure Identifies no steam flow indicated and determines that SI is not required.

SRO IF SI is NOT required, THEN GO TO 1-ES-0.1, REACTOR TRIP RESPONSE SRO The team will hold a transition brief. During the brief the failures associated with the Main Steam Trip Valve and Turbine will be discussed..

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Following the brief the team will transition to 1-ES-0.1. The team may dispatch personnel to investigate the main steam trip valve closure.

SRO SRO initiates 1-ES-0.1 24

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 4 Page 25 of 79 Event

Description:

Main Steam Trip Valve Spurious Closure and Reactor Trip Cue: By Examiner.

1-ES-0.1 SRO Note: If this procedure is being entered from 1-E-0, REACTOR TRIP OR SAFETY INJECTION, following a tube leak of less than 150 gpm, 1-AP-24.01, LARGE STEAM GENERATOR TUBE LEAK, should be used for guidance instead of this procedure.

RO 1. MONITOR RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F RCS temperature is trending to 547 °F 1-ES-0.1 BOP SRO may provide the BOP with Attachment 5 of 1-ES-0.1 for guidance on AFW control.

Actions are summarized below:

1. Maintain minimum AFW flow of 540 gpm with RCP(s) in service until one SG Narrow Range level is greater than 12%

2. Maintain minimum AFW flow of 350 gpm with NO RCPs running until one SG Narrow Range level is greater than 12%

3. When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50% by throttling AFW Isolation MOVs.

25

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 4 Page 26 of 79 Event

Description:

Main Steam Trip Valve Spurious Closure and Reactor Trip Cue: By Examiner.

1-ES-0.1 BOP 2. CHECK FW STATUS a) Check RCS Average temperatures - LESS THAN 554°F b) Verify Feed Reg valves - CLOSED c) Close SG FW isolation MOVs 1-FW-MOV-154A 1-FW-MOV-154B 1-FW-MOV-154C BOP closed 1-FW-MOV-154A, B, C d) Check AFW pumps - RUNNING Motor Driven AFW pumps TD AFW pump e) Verify total AFW flow - GREATER THAN 540 GPM (350 W/O RCPs) f) Check emergency buses - BOTH ENERGIZED g) Control feed flow to maintain narrow range level between 22% and 50%.

End End End 26

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 27 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

Time Position Applicants Action or Behavior Diagnoses the A SG is faulted with the following indications/alarms:

Alarms:

Team 1C-B8, PRZR LO PRESS 1H-A4, Tavg >< Tref DEVIATION 1A-F3, SI INITIATED TRAIN A 1E-H10, STM LINES & HDR HI DP Indications:

Steam flow on A SG will increase Steam line pressure will decrease on A SG RCS Pressure will decrease RCS Tave will decrease Safety Injection will actuate Other annunciators may also alarm as the transient continues.

SRO Transitions back to 1-E-0.

Only the performance of the high level steps 1,2, and 3 are required:

RO [1] VERIFY REACTOR TRIP

[2] VERIFY TURBINE TRIP

[3] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED

[4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING SI annunciators - LIT o A-F-3 SI INITIATED - TRAIN A o A-F-4 SI INITIATED - TRAIN B b) Manually initiate SI RO will manually initiate safety injection if an automatic safety injection has not occurred.

27

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 28 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

SRO Transient Brief The team will hold a transition brief. During the brief the steam line failure will be discussed.

If asked - the STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

SRO/BOP 5. Initiate Attachment 1 (Attachment 1 actions contained in attachment 1 of this guide.

SRO/BOP SRO may direct the RO to perform Attachment 9 of 1-E-0 for Faulted SG Isolation and AFW Control. This may or may not be initiated at any time during the performance of E-0. Attachment 9 actions are contained on attachment 4 of this guide.

28

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 29 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

RO *6. CHECK RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F The team will identify that RCS temperature is decreasing. The team should attribute this to the injection of SI into the RCS, AFW flow to the SGs, and the faulted SG and proceed to the RNO section of the step.

RO 6. RNO - IF temperature less than 547°F AND decreasing, THEN do the following:

a) Stop dumping steam.

b) IF cooldown continues, THEN control total feed flow.

Maintain total feed flow greater than 350 gpm [450 gpm]

until narrow range level greater than 12% [18%] in at least one SG.

If AFW was not isolated to the faulted SG with Attachment 9, the RO should isolate AFW to the faulted SG at this point.

c) IF cooldown continues, THEN close MSTVs.

The RO will close the main steam trip valves.

RO 7. CHECK PRZR PORVs AND SPRAY VALVES:

a) PRZR PORVs - CLOSED b) PRZR spray controls Demand at Zero (or)

Controlling Pressure c) PORV block valves - AT LEAST ONE OPEN 29

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 30 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

SRO NOTE: Seal injection flow should be maintained to all RCPs.

• 8. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS Two or three Charging pumps will be running and flowing to the RCS.

b) RCS subcooling - LESS THAN 30°F [85°F]

RCS subcooling will NOT be less than 30 °F RNO for the step is to go to step 9.

BOP 9. CHECK IF SGs ARE NOT FAULTED:

Check pressures in all SGs STABLE OR INCREASING AND GREATER THAN 100 PSIG BOP will observe a significant decrease in the steam pressure of A SG. It will not be stable or increasing and depending on when the team arrives at this step pressure may be less than 100 psig. The team will proceed to the RNO portion of this step.

9. RNO - IF any SG pressure decreasing in an uncontrolled manner OR is completely depressurized, THEN GO TO 1-E-2, FAULTED STEAM GENERATOR ISOLATION.

SRO The team will hold a transition brief. During the brief it will be identified that A SG is faulted, current isolation status of the faulted SG and that the team is transitioning to 1-E-2.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal with the exception of any previously identified alarms.

He will also state that containment conditions and the electrical conditions are as you see them.

30

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 31 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

SRO Initiate E-2, Faulted Steam Generator Isolation.

Evaluators note- it is not expected that the team will perform actions of 1-E these steps are included if diagnosis of FR-H.1 entry conditions are delayed.

SRO CAUTION:

At least one SG must be maintained available for RCS cooldown.

Any faulted SG or secondary break should remain isolated during subsequent recovery actions unless needed for RCS cooldown.

RO 1. CHECK MSTV AND BYPASS VALVE ON AFFECTED SG(s) -

CLOSED The RO will report that the MSTV and Bypass Valves are closed.

RO 2. CHECK IF ANY SG SECONDARY SIDE IS INTACT:

Check pressures in all SGs - ANY STABLE OR INCREASING RO will report that the B and C SGs are stable for plant conditions. An RCS cooldown may be in progress at this time and a discussion that the SG pressures are stable for plant conditions may ensue.

BOP 3. IDENTIFY FAULTED SG(S):

a) Check pressures in all SGs:

ANY SG PRESSURE DECREASING IN AN UNCONTROLLED MANNER OR ANY SG COMPLETELY DEPRESSURIZED Reports the A SG is faulted.

31

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 32 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

SRO CAUTION:

If the TD AFW pump is the only available source of feed flow, steam supply to the TD AFW pump must be maintained from at least one SG.

BOP 4. ISOLATE FAULTED SG(s):

Close AFW MOV(s)

BOP will close 1-FW-MOV-151E and 1-FW-MOV-151F.

Select the faulted SG AFW MOVs using the following switches:

o H TRAIN DISABLE SELECTOR SWITCH o J TRAIN DISABLE SELECTOR SWITCH Defeat the auto-open signal for the selected MOVs by placing the following key switches in the DISABLE SELECTED position:

o H TRAIN AUTO OPEN ENABLE SWITCH o J TRAIN AUTO OPEN ENABLE SWITCH BOP BOP will select the switches to defeat the automatic open feature of the A SG AFW MOVs.

Isolate MFW line:

a) Close SG FW isolation MOV(s)

Closes or verifies 1-FW-MOV-154A is closed.

b) Locally close feed REG bypass valve manual isolation valve(s):

1-FW-26 for SG A 1-FW-57 for SG B 1-FW-88 for SG C Directs a field operator to close 1-FW-26 in #1MER.

If directed, the field operator will close 1-FW-26 and report the status of the valve back to the MCR.

32

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 33 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

BOP 4. ISOLATE FAULTED SG(s): (Continued)

Locally close steam supply valve(s) to TD AFW pump:

1-MS-87 for SG A 1-MS-120 for SG B 1-MS-158 for SG C Determines that this action is not possible due to location of the steam line fault.

Close or verify closed SG PORV(s)

Close or verify closed SG blowdown TVs BOP Critical Task: [WOG E-2A] Isolate feed flow to and steam flow from the faulted SG before RCS temperature is less than 400°F is completed during the performance of this step, if it was not completed in Attachment 9 of 1-E-0.

Critical task (WOG E-2A) is completed when the A SG is isolated by closing 1-MS-TV-101A and 1-FW-MOV-151E/F.

BOP 5. CHECK ECST LEVEL - GREATER THAN 20%

Observes ECST indicator on vertical board is greater than 20%.

SRO 6. CHECK SECONDARY RADIATION:

a) Consult with TSC or SEM to determine if FAULTED SG should be aligned for sampling If contacted, the TSC will state that they do not desire to sample the Faulted SG.

b) Initiate periodic activity sampling of INTACT SGs IAW Attachment 1 RO/BOP c) Check unisolated secondary radiation monitors:

Main steamline TD AFW pump exhaust Condenser air ejector No indications of secondary radiation can be observed or are present.

d) Secondary Radiation - NORMAL No indications of secondary radiation can be observed or are present.

33

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 34 of 79 Event

Description:

Main Steam Line Fault in Safeguards Cue: By Examiner.

BOP 7. ADJUST INTACT SG PORVs TO LIMIT RCS HEATUP:

a) Determine required PORV pressure setting using Attachment 2 Will refer to Attachment 2 to determine desired intact SG PORV setpoint. If the PORVs were set utilizing Attachment 9 of 1-E-0, further adjustment may not be warranted.

b) Adjust intact SG PORVs pressure setting BOP will slowly lower the setpoint of the SG PORV. This can either be done in Manual or Automatic.

c) Stabilize RCS temperature by controlling SG PORV pressure setting BOP 8. CHECK IF SI FLOW SHOULD BE REDUCED:

a) RCS subcooling based on CETCs - GREATER THAN 30°F [85°F]

b) Secondary heat sink:

Total feed flow to INTACT SGs - GREATER THAN 350 gpm

[450 gpm]

OR Narrow range level in at least one intact SG - GREATER THAN 12% [18%]

c) RCS pressure - STABLE OR INCREASING d) PRZR level - GREATER THAN 22% [50%]

e) GO TO 1-ES-1.1, SI TERMINATION e)

End 1-E-2 actions 34

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 35 of 79 Event

Description:

Loss of Auxiliary Feedwater Flow to ALL Steam Generators Cue: By Transition to 1-E-2 and/or before SG NR levels >8% NR Time Position Applicants Action or Behavior Actions for FR-H.1 TEAM Upon transition to 1-E-2 or PRIOR TO SG levels exceeding 12% narrow range, the AFW Pumps will sequentially trip due to the harsh environment of safeguards (for 1-FW-P-3A/3B).

The trip of 1-FW-P-3A will be identified by a decrease in AFW flow and an annunciator indicating that the pump has tripped.

The trip of 1-FW-P-3B will be identified by a decrease in AFW flow and an annunciator indicating that the pump has tripped.

The SRO may ask Unit 2 to prepare for establishing AFW crosstie in accordance with AP-50.00 (Attachment 2).

The Unit 2 SRO will acknowledge the request (no actions performed). If asked again, he will state he is experiencing difficulty with his Unit and is not able to provide AFW at this time, but he is working to resolve the problem.

Depending on efficiency of procedure performance, the team will transition to FR-H.1 when the transition is made to E-2 or from Attachment 1 Step 13 RNO for low SG level with no AFW flow.

SRO CAUTION:

If total feed flow is less than 350 gpm [450 gpm] due to operator action, this procedure should NOT be performed.

Feed flow should NOT be reestablished to any faulted SG if a non-faulted SG is available.

RO 1. CHECK IF SECONDARY HEAT SINK IS REQUIRED:

a) RCS pressure - GREATER THAN ANY NON-FAULTED SG PRESSURE RO will report that RCS pressure is greater than the intact SGs b) RCS hot leg temperature - GREATER THAN 350°F RO will report that RCS hot leg temperature is greater than 350 °F.

35

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 36 of 79 Event

Description:

Loss of Auxiliary Feedwater Flow to ALL Steam Generators Cue: By Transition to 1-E-2 and/or before SG NR levels >8% NR SRO CAUTION: If WIDE RANGE level in any 2 SGs is less than 7% [22%]

OR PRZR pressure is greater than or equal to 2335 psig due to loss of secondary heat sink, RCPs should be tripped and Steps 11 through 18 should be immediately initiated for bleed and feed.

RO 2. TRY TO ESTABLISH AFW FLOW TO AT LEAST ONE SG:

a) Check SG blowdown TVs - CLOSED RO will report that all blowdown Trip Valves are closed.

RO/BOP b) Verify AFW MOVs - OPEN BOP will report that AFW MOVs to the faulted SG are closed, but that the AFW MOVs to the intact SGs are open. The team will NOT reopen the AFW MOVs to the faulted SG.

c) Check ECST - AVAILABLE Reports the ECST is available for use.

36

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 37 of 79 Event

Description:

Loss of Auxiliary Feedwater Flow to ALL Steam Generators Cue: By Transition to 1-E-2 and/or before SG NR levels >8% NR

2. TRY TO ESTABLISH AFW FLOW TO AT LEAST ONE SG: (Continued) d) Check AFW - AVAILABLE

1. Start AFW Pumps

2. check total flow to SGs- GREATER THAN 350 GPM [450 gpm]

Reports AFW is NOT available due to the failure of the AFW pumps.

d) RNO: IF minimum feed flow NOT established, THEN do the following:

1) Stop ALL RCPs.

Secures all of Unit 1s RCPs.

2) IF desired to transfer EDG 3 to Bus 2J to restore power to 2-FW-P-3B, THEN GO TO Attachment 2.

This is not desired as 2J is being supplied by off-site power.

If asked, respond as Unit 2 that 2J is being supplied by off-site power.

3) Have Unit 2 operator close Unit 2 AFW MOVs.

Asks Unit 2 to close the Unit 2 AFW MOVs.

If directed, report back as Unit 2 that Unit 2 AFW MOVs are closed.

4) Have Unit 2 operator open the following valves:

1-FW-MOV-160A 1-FW-MOV-160B Directs Unit 2 to open the auxiliary feedwater crosstie valves.

If directed, report back as Unit 2 that 1-FW-MOV-160A and B are open.

37

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 38 of 79 Event

Description:

Loss of Auxiliary Feedwater Flow to ALL Steam Generators Cue: By Transition to 1-E-2 and/or before SG NR levels >8% NR

2. TRY TO ESTABLISH AFW FLOW TO AT LEAST ONE SG: (Continued)

SRO 5) Have Unit 2 operator start AFW pump(s).

Directs Unit 2 to start AFW pumps.

If directed, report back as Unit 2 the requested number of pumps has been started. If no direction was given on how many pumps to start, only start the motor driven AFW pumps.

RO/BOP Team will identify that NO AFW flow is indicated on Unit One. Unit two will report low pump amps on running AFW pump and that they will investigate.

6) Control flow to restore narrow range level in at least one SG greater than 12% [18%].

Adjusts AFW flow, if needed, to raise level in at least one SG to greater than 12%.

7) WHEN narrow range level in at least one SG greater than 12% [18%], THEN RETURN TO procedure and step in effect.

8) IF minimum AFW flow NOT established, THEN try to locally restore AFW flow AND GO TO Step 3.

Team transitions to step 3 RO/BOP 3. TRY TO ESTABLISH MFW FLOW TO AT LEAST ONE SG:

a. Check CN system - IN SERVICE AND INTACT

b. Check MFW system - INTACT.

c. Reset FW isolation signal:

1) Reset both trains of SI if required

2) Push both FW isolation reset pushbuttons

d. Establish MFW flow:

1) Start one MFW pump

2) Manually or locally open appropriate feed pump discharge MOV

3) Control flow with SG FW bypass flow valve(s) OR feed REG valve(s) locally 38

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 2 Event No.: 5 Page 39 of 79 Event

Description:

Loss of Auxiliary Feedwater Flow to ALL Steam Generators Cue: By Transition to 1-E-2 and/or before SG NR levels >8% NR RO/BOP 4. CHECK SG LEVELS:

a. Narrow range level in at least one SG - GREATER THAN 12%

[18%]

a. RNO IF feed flow to at least one SG verified, THEN maintain flow to restore narrow range level to greater than 12% [18%]. IF flow NOT verified, THEN GO TO Step 5.

b. RETURN TO procedure and step in effect END END END SCENARIO #2 39

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 40 of 79 SIMULATOR OPERATOR GUIDE Simulator Setup Initial Conditions:

Recall 100% IC and enter the following malfunctions or recall the IC-312 and implement TRIGGER #30 to activate all passive malfunctions. VERIFY Trigger #30 implemented.

Drain 1-SI-TK-1A to low level alarm by opening si_73 (monitor screen) and opening 1-SI-HCV-1850A Open the monitor window and add the following points to it:

ASP_AO_OFF = True SI_73 SIP2_PWR_ON Enter the following REMOTE FUNCTIONS:

Trigger Remote Function Delay Trigger Ramp Remote Value Type Start Ramp (Auto or Value Time Manual)

MS_87- STEAM GENERATOR A 0 30 100 0 0 Pre-load STEAM SUPPLY TO FW-P-2 MS_120- STEAM GENERATOR B 0 30 100 0 0 Pre-load STEAM SUPPLY TO FW-P-2 MS_158- STEAM GENERATOR C 0 30 100 0 0 Pre-load STEAM SUPPLY TO FW-P-2 Enter the following Switch Overrides:

Trigger Override Delay Ramp Trigger Value Type (Auto or Manual)

MSSOV104_OPEN- STM TO MSR 1-MS-SOV-104 0 N/A 30 ON Preload OPEN 40

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 41 of 79 SIMULATOR OPERATOR GUIDE Enter the following MALFUNCTIONS:

Trigger Type Malfunction Delay Ramp Trigger Ramp Severity/Final Start/Value st MS1401- 1 STAGE PRSR TRNSMTR 10 30 sec 1 0 2 Manual MS-PT-446 FAILURE RC4802- PRZR PRESS CONT XMTR 10 0 3 0 1 Manual FAILURE (445)

MS0901- A MAIN STEAM TV FAILS 10 N/A 5 N/A N/A Manual SHUT MS0401- A MAIN STM LINE 10 60 sec 7 0 100 Manual RUPTURE BEFORE TRIP VV FW0701- AUX FW PUMP FW-P-3A 0 N/A 9 N/A N/A Manual TRIPS OVERCURRENT FW0702- AUX FW PUMP FW-P-3B 10 N/A 9 N/A N/A Manual TRIPS OVERCURRENT BD01- DISABLE BDTV100A AUTO 0 N/A 30 N/A N/A Preload CLOSURE BD02- DISABLE BDTV100B AUTO 0 N/A 30 N/A N/A Preload CLOSURE BD03- DISABLE BDTV100C AUTO 0 N/A 30 N/A N/A Preload CLOSURE BD04- DISABLE BDTV100D AUTO 0 N/A 30 N/A N/A Preload CLOSURE BD05- DISABLE BDTV100E AUTO 0 N/A 30 N/A N/A Preload CLOSURE BD06- DISABLE BDTV100F AUTO 0 N/A 30 N/A N/A Preload CLOSURE 41

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 42 of 79 SIMULATOR OPERATOR GUIDE TRIGGER TYPE DESCRIPTION Manual Impulse pressure transmitter 446 fails high 1

3 Manual Pressurizer pressure control channel 445 fails high.

5 Manual A Main Steam Trip Valve closes 7 Manual A Main Steam Line Fault in Safeguards 9 Manual Loss of motor driven AFW pumps 42

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 43 of 79 SIMULATOR OPERATOR GUIDE Verify the following control room setup:

NOTE- the rod control system reset pushbutton must be depressed after each run of this scenario-(PIGMB)

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components:

1-FW-P-2 Verify 1-RM-RI-112 aligned to A/C SG and 1-RM-RI-113 aligned to B SG (magnets).

Verify Ovation System operating.

Reset ICCMs.

Verify Component Switch Flags.

Verify Brass Caps properly placed.

Verify SG PORVs set for 1035 psig.

Verify Rod Control Group Step Counters indicate properly.

Verify Ovation CRT display Advance Charts the following charts:

Master chart advance switch Verify Turbine Thumb Wheel Settings @120 rpm/min and Position 6 Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset)

Verify all ARPs have been cleaned Verify CLEAN copies of the following procedures are in place:

OP-SI-002 AP-53.00 (2) AP-31 ARP 1G-F8 E-0 (2) ES-0.1 E-2 Reactivity Sheet OP-CH-007 OP-ZZ-002 FR-H.1 Verify Reactivity Placard is current.

43

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 44 of 79 SIMULATOR OPERATOR GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

Ask for and answer questions.

44

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 45 of 79 SIMULATOR OPERATOR GUIDE Conduct shift turnover:

Provide normal shift turnover materials reflecting the below initial conditions:

The initial conditions have Unit #1 operating steady state at 100% power with a current boron concentration of 750 ppm. All Unit #1 systems and crossties are operable with the following exception:

1-FW-P-2, Turbine Driven Auxiliary Feedwater Pump, is tagged out for governor valve maintenance. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.6.F.1 Clock.

Unit #2 is at 100% power with all systems and crossties operable.

The last shift performed three 30-gallon dilutions followed by manual make-ups.

Shift orders are to maintain 100% power on Unit #1.

Last shift received annunciator 1A-A4 (ACCUM TK 1A Hi-Lo LVL) and verified Technical Specification compliance. A walkdown of the accumulator revealed a sample line drain valve leaking by which has been resolved. You are to fill the accumulator immediately after assuming the watch to normal operating level in accordance with 1-OP-SI-002, Safety Injection Accumulators.

When the team has accepted the shift, proceed to the Session Conduct Section.

45

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 46 of 79 SIMULATOR OPERATOR GUIDE Session Conduct:

Ensure conditions in Simulator Set-up are established.

Ensure Trigger 30 is active prior to team entering the simulator.

Verify Exam Security has been established and ASP_AO_OFF = True.

EVENT 1 1-SI-TK-1A Fill iaw 1-OP-SI-002 Field Operators:

Aux Building: when asked about administrative controls, report that desk SRO has previously briefed you on requirements:

1-SI-32 admin control requirements (from 1-OP-SI-002):

a. The person assigned Administrative Control of 1-SI-32 understands that no other concurrent job responsibilities have been or shall be accepted during performance of this procedure.

b. The person assigned Administrative Control of 1-SI-32 understands the requirement to remain in the immediate vicinity of the valve at all times when 1-SI-32 is open.

c. The person assigned Administrative Control of 1-SI-32 understands that continuous communication capability shall be maintained with the Main Control Room at all times by use of either a Portable Radio, (primary method) or Gai-Tronics (secondary method).

d. The person assigned Administrative Control of 1-SI-32, understands that 1-SI-32 shall be closed within 30 seconds of notification from the Main Control Room.

e. The Main Control Room shall notify the operator who has assumed Administrative Control to close 1-SI-32 upon Safety Injection initiation to ensure that the time limit is not exceeded.

46

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 47 of 79 SIMULATOR OPERATOR GUIDE Service Building Inside Operator: SI-26 admin control requirements (from 1-OP-SI-002):

a. The person assigned Administrative Control of 1-SI-26 understands that no other administrative control actions have been or shall be accepted during performance of this procedure.

b. The person assigned Administrative Control of 1-SI-26 understands the requirement to remain accessible to the valve at all times when 1-SI-26 is open.

c. The person assigned Administrative Control of 1-SI-26 understands that continuous communication capability shall be maintained with the Main Control Room at all times by use of either a Portable Radio (primary method), or Gai-Tronics (secondary method).

d. The person assigned Administrative Control of 1-SI-26 understands that 1-SI-26 shall be closed within 10 minutes of notification from the Main Control Room. (Reference 2.3.9)

e. The Main Control Room shall notify the operator who has assumed Administrative Control to close 1-SI-26 upon Safety Injection initiation to ensure that the time limit is not exceeded.

f. If the person performing the Admin Control function for 1-SI-26 is to be stationed outside of the RCA, then they should check out the proper dosimetry prior to assuming Admin Control responsibilities.

47

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 48 of 79 SIMULATOR OPERATOR GUIDE Booth Operator:

1-SI Report valve open when requested- no actions required.

1-SI Report valve open when requested- no actions required.

2A2-1-5A Breaker- when requested to close breaker, set sip2_pwr_on to TRUE on monitor screen.

1-SI Report valve open when requested- no actions required.

1-SI set si_32 to 1.0 and report valve open.

Set back valves to previous condition when request made.

Desk SRO:

Will conduct brief for administrative controls of field operators.

48

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 49 of 79 SIMULATOR OPERATOR GUIDE EVENT 2 1-MS-PT-1446 fails high When cued by examiner, implement Trigger #1.

Operations Supervisor/Management:

If contacted, will acknowledge the failure of 1-MS-PT-1446. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00.

If contacted, will take responsibility for writing the WR and CR.

STA:

If contacted, will acknowledge the failure of 1-MS-PT-1446. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If asked, the STA will report that 1-MS-PT-1446 is not a Reg. Guide 1.97 component.

If asked, the STA will review VPAP-2802 and TRM Section 3.3. The STA will report that he has completed his review and this failure does impact VPAP-2802 for AMSAC, but the TRM is NOT impacted.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Maintenance/ Work Week Coordinator:

If contacted, will acknowledge instrumentation failure and commence investigations and/or efforts to place the channel in trip.

Role play as other individuals as needed.

49

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 50 of 79 SIMULATOR OPERATOR GUIDE EVENT 3 1-RC-PT-1445 fails high When cued by examiner, implement Trigger #3.

Operations Supervisor/Management:

If contacted, will acknowledge the failure of 1-RC-PT-1455. The individual(s) contacted will also acknowledge any TS LCOs (i.e., close associated block valve).

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge entry into AP-53.00 and AP-31.00.

STA:

If contacted, will acknowledge the failure of 1-RC-PT-1455. The individual(s) contacted will also acknowledge any TS LCOs (i.e., close associated block valve).

The STA will not confirm or deny any TS decisions.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Maintenance:

If contacted, will acknowledge the failure of 1-RC-PT-1455 and commence investigations.

Role play as other individuals as needed.

50

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 51 of 79 SIMULATOR OPERATOR GUIDE EVENT 4 A Main Steam Trip Valve Closure When cued by examiner, implement Trigger #5.

Operations Supervisor/Management:

If contacted, will acknowledge the closure of the A Main Steam Trip Valve and subsequent reactor trip.

If contacted, will acknowledge failure of 1-MS-SOV-104 to close from the main control room.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge entry into 1-E-0 and 1-ES-0.1.

STA:

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Field Operators:

If contacted, field operators will report no abnormal conditions at the main steam trip valve.

Maintenance/Work Week Coordinator:

If contacted, will acknowledge the failure and commence investigations.

Role play as other individuals as needed.

51

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 52 of 79 SIMULATOR OPERATOR GUIDE EVENT 5 A Main Steam Line Fault in Safeguards When cued by examiner, implement Trigger #7 Operations Supervisor/Management:

If contacted, will acknowledge the Steam Break and re-entry into 1-E-0 with safety injection actuated.

STA:

If contacted, will enter the control room and commence reviewing status trees and prepare for the transient brief.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Field Operators:

If directed, field operators will perform local manipulations.

If contacted, field operators will report that they are unable to gain access to Unit 1 Safeguards.

Unit 2 Operator:

If asked during the performance of 1-E-0, report that 2-SI-TV-202A and 2-SI-TV-202B are open.

Role play as other individuals as needed.

52

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 53 of 79 SIMULATOR OPERATOR GUIDE EVENT 6 Loss of Auxiliary Feedwater Flow SUPER IMPORTANT This event must be triggered BEFORE any steam generator narrow range level exceeds 12%. As a precaution, do not allow ANY narrow range level exceed 5% PRIOR TO INITIATING THIS FAILURE.

When team transitions to 1-E-2, or any SG NR level approaches 5% narrow range, implement Trigger #9 Operations Supervisor/Management:

If contacted, will acknowledge the failure of all Unit 1 AFW pumps.

If contacted, will acknowledge entry into FR-H.1 (E-2).

STA:

If contacted, will acknowledge the loss of all Unit 1AFW pumps.

The STA will walkdown the Unit 1 MCR and determine that a Red Path exists on Heat Sink and state that the Unit is in a red path on FR-H.1 to the Unit Supervisor.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

53

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 2 Page 54 of 79 SIMULATOR OPERATOR GUIDE Unit 2 Operator:

If asked prior to Unit 1 Securing Unit 1 RCPs, then acknowledge the request to establish AFW crosstie. If asked a second time, state that Unit 2 is experiencing difficulty and cannot provide AFW at this time, but we are working to resolve the issues.

When asked state that Bus 2J is powered from off-site power and Unit 2 does not need #3 EDG to power the bus.

When asked to close Unit 2 AFW MOVS, acknowledge the request, wait one minute, set U2 Target Flow Rate on the Unit 2 AFW Simulator Screen = 0 and then report that Unit 2 AFW MOVs are closed.

When asked to close 1-FW-MOV-160A and 1-FW-MOV-160B, acknowledge the request, take the switches on the Unit 2 AFW screen to open, and report that the valves are open when the red lights are out and green lights lit.

When asked to start Unit 2 AFW Pumps, acknowledge the request and ANNOUNCE and start 2-FW-P-3A and 2-FW-P-3B by taking the clicking on the 2-FW-P-3A and 2-FW-P-3B pump buttons and selecting Start. After both pumps are started, report this back to the SRO.

If asked state that Unit 2 AFW pump amps are at approximately 30 amps.

If asked report that you will dispatch an operator to investigate lack of AFW flow on Unit One.

Field Operators:

If contacted, field operators will report that they are unable to gain access to Unit 1 Safeguards.

If contacted, both motor driven AFW pump breakers have ground overcurrent trips present.

54

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 Time Position Applicants Action or Behavior ATTACHMENT 1 OF E-0 BOP 1. VERIFY FW ISOLATION:

Feed pump discharge MOVs - CLOSED 1-FW-MOV-150A 1-FW-MOV-150B MFW pumps - TRIPPED Feed REG valves - CLOSED SG FW bypass flow valves - DEMAND AT ZERO SG blowdown TVs - CLOSED Identifies ALL blowdown trip valves OPEN and manually closes ALL blowdown trip valves.

BOP 2. VERIFY CTMT ISOLATION PHASE I:

Phase I TVs - CLOSED 1-CH-MOV-1381 - CLOSED 1-SV-TV-102A - CLOSED PAM isolation valves - CLOSED 1-DA-TV-103A 1-DA-TV-103B BOP 3. VERIFY AFW PUMPS RUNNING:

a) MD AFW pumps - RUNNING (Time Delayed) b) TD AFW pump - RUNNING IF NECESSARY 55

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 4. VERIFY SI PUMPS RUNNING:

CHG pumps - RUNNING LHSI pumps - RUNNING BOP 5. CHECK CHG PUMP AUXILIARIES:

CHG pump CC pump - RUNNING CHG pump SW pump - RUNNING BOP 6. CHECK INTAKE CANAL:

Level - GREATER THAN 24 FT Level - BEING MAINTAINED BY CIRC WATER PUMPS BOP 7. CHECK IF MAIN STEAMLINES SHOULD BE ISOLATED:

a) Check if ANY of the following annunciators - HAVE BEEN LIT E-F-10 (High Steam Flow SI)

B-C-4 (Hi Hi CLS Train A)

B-C-5 (Hi Hi CLS Train B)

Identifies annunciators not lit and goes to RNO.

a) RNO - IF annunciator E-H-10 (Hdr/Line SI) LIT, THEN GO TO Step 7d.

d) Verify RWST crosstie valves - OPEN

• 1-SI-TV-102A

• 1-SI-TV-102B

• 2-SI-TV-202A

• 2-SI-TV-202B Unit Two will report that 2-SI-TV-202A and 2-SI-TV-202B are open e) Check RCS pressure - LESS THAN 185 PSIG BOP Step 7e RNO - Put both RMT mode transfer switches in REFUEL 56

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP *8. CHECK IF CS REQUIRED:

a) CTMT pressure - HAS EXCEEDED 23 PSIA Identifies pressure has not exceeded 23 or 17.7 psia and goes to step 10.

• 10. BLOCK LOW PRZR PRESS SI SIGNAL:

BOP a) Check PRZR pressure - LESS THAN 2000 psig b) Turn both LO PRZR PRESS & STM HDR/LINE P switches to block c) Verify Permissive Status light C LIT BOP may block the low pressurizer pressure SI signal depending on current RCS pressure.

BOP *11. BLOCK LOW TAVE SI SIGNAL:

a) Check RCS Tave - LESS THAN 543°F b) Turn both HI STM FLOW & LO TAVG OR LP switches to block c) Verify Permissive Status light F LIT BOP may block the low Tave SI signal depending on current RCS temperature.

57

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 NOTE:

CHG pumps should be run in the following order of priority: C, B, A.

Subsequent SI signals may be reset by reperforming Step 12.

BOP 12. VERIFY SI FLOW:

a) HHSI to cold legs - FLOW INDICATED 1-SI-FI-1961 (NQ) 1-SI-FI-1962 (NQ) 1-SI-FI-1963 (NQ) 1-SI-FI-1943 or 1-SI-FI-1943A b) Check CHG pumps - THREE RUNNING c) Reset SI.

d) Stop one CHG pump and out in AUTO e) RCS pressure - LESS THAN 185 PSIG RNO: e) IF two LHSI pumps are running, THEN do the following:

1) Verify reset or reset SI.

2) Stop one LHSI pump and put in AUTO.

3) GO TO Step 13.

BOP 13. VERIFY TOTAL AFW FLOW - GREATER THAN 350 GPM [450 GPM]

RNO ACTIONS:

IF SG narrow range level greater than 12% [18%] in any SG, THEN control feed flow to maintain narrow range level AND GO TO Step 14.

IF SG narrow range level less than 12% [18%] in all SGs, THEN manually start pumps AND align valves as necessary.

IF AFW flow greater than 350 GPM [450 GPM] can NOT be established, THEN GO TO 1-FR-H.1, RESPONSE TO LOSS OF SECONDARY HEAT SINK.

Depending on the efficiency of the operator performing this attachment, this step could be reached with AFW lost - if the team had not previously transitioned to FR-H.1, it could occur at this step.

58

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 14. CHECK AFW MOVs - OPEN BOP will identify that all AFW MOVS are not open and will read the RNO portion of this step and manually align valves as necessary.

BOP 15. INITIATE SI VALVE ALIGNMENT IAW ATTACHMENT 2 Attachment 2 of 1-E-0 is contained in attachment 2 of this guide.

BOP 16. INITIATE VENTILATION ALIGNMENT AND AC POWER ALIGNMENT IAW ATTACHMENT 3 See attached copy of Attachment 3 - contained in attachment 3 of this guide.

Unit 2 Operator will state that Unit 2 is at 100% power (if asked)

Unit 2 will also accept responsibility to complete Attachment 3 if it is given to Unit 2 at the point where differential pressure indications are requested.

All MCR boundary indications will be reported at positive.

59

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 Time Position Applicants Action or Behavior ATTACHMENT 2 of 1-E-0 SRO NOTE: Components previously aligned by SI termination steps, must not be realigned by this Attachment.

ATTACHMENT 2 of 1-E-0 RO/BOP 1. Verify opened or open CHG pump suction from RWST MOVs.

1-CH-MOV-1115B 1-CH-MOV-1115D ATTACHMENT 2 of 1-E-0 RO/BOP 2. Verify closed or close CHG pump suction from VCT MOVs.

1-CH-MOV-1115C 1-CH-MOV-1115E ATTACHMENT 2 of 1-E-0 RO/BOP 3. Verify running or start at least two CHG pumps. (listed in preferred order) 1-CH-P-1C 1-CH-P-1B 1-CH-P-1A ATTACHMENT 2 of 1-E-0 RO/BOP 4. Verify opened or open HHSI to cold legs MOVs.

1-SI-MOV-1867C 1-SI-MOV-1867D ATTACHMENT 2 of 1-E-0 RO/BOP 5. Verify closed or close CHG line isolation MOVs.

1-CH-MOV-1289A 1-CH-MOV-1289B 60

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 ATTACHMENT 2 of 1-E-0 RO/BOP

6. Verify closed or close Letdown orifice isolation valves.

1-CH-HCV-1200A 1-CH-HCV-1200B 1-CH-HCV-1200C ATTACHMENT 2 of 1-E-0 RO/BOP 7. Verify opened or open LHSI suction from RWST MOVs.

1-SI-MOV-1862A 1-SI-MOV-1862B ATTACHMENT 2 of 1-E-0 RO/BOP 8. Verify opened or open LHSI to cold legs MOVs.

1-SI-MOV-1864A 1-SI-MOV-1864B ATTACHMENT 2 of 1-E-0 RO/BOP 9. Verify running or start at least one LHSI pump.

1-SI-P-1A 1-SI-P-1B ATTACHMENT 2 of 1-E-0 RO/BOP 10. Verify High Head SI flow to cold legs indicated.

1-SI-FI-1961 1-SI-FI-1962 1-SI-FI-1963 1-SI-FI-1943 or 1-SI-FI-1943A ATTACHMENT 2 of 1-E-0 RO/BOP 11. IF flow not indicated, THEN manually start pumps and align valves. IF flow NOT established, THEN consult with Shift Supervision to establish another high pressure injection flow path while continuing with this procedure.

Alternate SI to Cold legs Hot leg injection 61

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFI CATION REVISION PAG E 61 1 of 5

1. Verify or place REFUEL SFTY MOD E switches in NORMAL.

2. Verify ventilation alignment lAW Tables 1 and 2.

TABLE 1 UNIT #1 VENTILATION PAN EL EQUI PMENT MARK NUMBER STATUS 0 1-VS-F-4A & B OFF 0 1-VS-HV-1A& B OFF 0 1-VS-F-BA & B OFF 0 1-VS-F-9A & B GR EE N 0 1-VS-F-59 GR EE N 0 1-VS-F-6 OF F 0 1-VS-F-39 GR EE N 0 1-VS-F-7A & B GR EE N 0 1-VS-HV-5 GR EE N 0 1-VS-F-56A & B GR EE N 0 1-VS-F-40A & B GR EE N 0 1-VS-HV-4 OFF 0 2-VS-F-40A or B RED 0 2-VS-HV-4 OFF 62

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER V ERIFICATION REV ISION PAG E 61 2 of 5 TABLE 2 VNTX PAN EL EXPECTED MARK NUMB ER EQUIPMENT R ESPONSE NOT OBTAINED STATUS D a. AOO-VS-1 07A & B RED D a.Place AUX BLDG CENTRAL AREA MOD E AOD-VS-1 08 GREEN switch to FILTER.

D b. MOD-VS-100A&B RED D b.' Place MOO-VS-1 00A to FI LTER.

AOD-VS-1 06 GR EE N

• Place MOO-VS-100B to FILTER.

D c. MOD-VS-200A & B GR EE N D c.

• Place MOO-VS-200A to UN FllTER.

AOD-VS-206 RED

• Place MOO-VS-200B to UN FllTER.

D d. AOD-VS-1 03A & B GR EE N D d.* Place AOO-VS-103A in UN FILTER.

AOD-VS-1 04 GR EE N

• Place AOO-VS-1038 in UNFI LTER.

• Place AOO-VS-104 in FILTER.

D e. AOO-VS-1 01A & B GR EE N D e.Place AOO-VS-101A and 101 B in AOD-VS-1 02 GR EE N UNFI LTER.

D f. AOD-VS-11 1A & B GR EE N D f.Place COMBIN E CONTAINM ENT EXHAUST in ISOLATE.

D g. AOD-VS-1 10 GR EE N D g.Place AOO-VS-109A and 109B in FI LTER.

D h. AOD-VS-1 12A& B GR EE N D h.* Place AOO-VS-112A in CLOS E.

• Place AOO-VS-112B in CLOS E.

D i. MOD-VS-58A & B RED D i.Start 1-VS-F-58A and 1-VS-F-58B.

1-VS-F -58A & B RED

3. Verify filtered exhaust flow: (as read on FI-VS-117A and FI-VS-117B)

D* Total flow - GR EATER THAN 32400 cfm AND D* Flow through each filter bank - LESS THAN 39600 cfm 63

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-0 3 AUXILIARY VENTILATION AND AC POWER V ERIFI CATION REV ISION PAG E 61 3 of 5

4. Check all Station Service Buses - ENERGIZED. !E NOT, THEN initiate 1-AP-10.07 , lOSS OF UN IT 1 POWER.

5. Check annunciator VSP-J2 - LIT.

6. Check Unit 1 RSST l Te time delay bypass light - LIT.

7. Verify stopped or stop 1-VS-AC-4.

8. Place 1-VS-4 3-VS103X, MeR ISOLATION switch to the OFF position.

9. Verify closed or close MeR isolation dampers.

D* 1-VS-MOO-103A D* 1-VS-MOO-103B D* 1-VS-MOO-103C D* 1-VS-MOO-103D

10. _ !E any MeR PDI on Unit 2 Vent Panel NOT indicating positive pressure, THEN place the following switches to OPEN.

D* 1-V5 -50V-322 , EMERG AIR DUMP TO CONTROL RM D* 1-V5-50V-100, EMERG AIR DUM P TO C.R.

NOTE: The timer should be set for 50 minutes, minus the number of minutes since Safety Injection initiation .

11 . Set timer. WHEN 51 has been in progress for 50 minutes (when timer goes off), THEN immediately perform Step 18 to start one Emergency Supply Fan .

64

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFI CATION REVISION PAG E 61 4 of 5

12. Check readings on the following Differential Pressure Indicators - POSITIVE PRESSURE INDICATED.

D* PDI -VS-100, D.P. -U 1CRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-101, D.P. -U1RRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-200 , D.P. -U2CRlU2TB (Unit 2 Turbine Ventilation Pa nel)

D* PDI -VS-20 1, D.P. -U2RRlU2TB (Unit 2 Turbine Ventil ation Pa nel)

D* 1-VS-PDI -118 (Un it 1 Computer Room)

D* 1-VS-PDI -116 (Near Unit 1 Semi-Vital Bus)

D* 2-VS-PDI -215 (Un it 2 AC Room )

D* 2-VS-PDI -206 (Near Unit 2 Semi-Vital Bus )

13. !f any reading NOT positive, THE N initiate Attachment 6 to secure MeR boundary fans .

14. Verify initiated or initiate O-AP-SO.OO , OPPOSITE UN IT EMERGENCY.

15. Verify the following Me R and ESGR air conditioning equ ipment operating.!E. NOT, TH EN start equipment within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> lAW the appropriate subsection of O-OP-VS-006, CONTROL ROO M AND RELAY ROOM VENTI LATION SYSTEM.

D* One Control Room chiller D* One Un it 1 Control Room AHU D* One Un it 2 Control Room AHU D* One Un it 1 ESGR AHU D* One Un it 2 ESGR AHU

16. _ !E. both of the following conditions exist, THEN verify that Load Shed is activated.

D* Unit 2 - SUPPLI ED BY RSST D* Unit 2 RCPs - RUNNING

17. !E. Load Shed is required and not activated, THEN initiate O-AP-10.10 , LOSS OF AUTO LOAD SHED.

65

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY V ENTILATION AND AC POW ER V ERIFI CATION REV ISION PAG E 61 5 of 5 CAUTION: Only one Emergency Supply Fan must be started in the following step.

Chilled Water flow to the in-service Unit 1 MeR AHU must be throttled to at least 15 gpm when the Emergency Supply fan is started.

Chilled Water flow to the in-service Unit 2 MeR AHU must be throttled to at least 25 gpm when the Emergency Supply fan is started.

An Emergency Supply Fan must not be started if the filter is wet.

18. WHEN 51 has been in progress for 50 minutes (when timer goes off), THEN immediately start ON E Emergency Supply Fa n JAW the following : (1-VS-F-41 or 2-VS-F-41 preferred)

a. lE 1-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104A, CO NT RM EMERG SUP MOD.

2. Start 1-VS-F-41.

b. lE 2-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, TH EN perform the following substeps.

1. Open 2-VS- MOD-204A, CO NT RM EMERG SUP MOD.

2. Start2-VS-F-41.

c. lE 1-VS-F-42, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104B, CO NT RM EMERG SU P MOD.

2. Start 1-VS-F-42.

d. lE 2-VS-F-42, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 2-VS- MOD-204B, CO NT RM EMERG SUP MOD.

2. Start 2-VS-F-42.

e. Adjust Chilled Water flow to MCR AHUs lAW Step 18 Caution.

66

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-E-0 Attachment 9 Time Position Applicants Action or Behavior ATTACHMENT 9 of 1-E-0 ATTACHMENT 9 of 1-E-0 **PART A**

This attachment can be performed at any time during 1-E-0. It is a pre-emptive RO action, so it is not required to be performed.

1. Verify SI is in progress. IF SI is NOT in progress, THEN return to procedure step in effect.

RO identifies that SI is in progress.

ATTACHMENT 9 of 1-E-0 **PART A**

RO/BOP 2. Verify running or start AFW Pumps, as necessary 1-FW-P-3A 1-FW-P-3B 1-FW-P identifies pump is tagged out ATTACHMENT 9 of 1-E-0 **PART A**

RO 3. Identify Faulted SG by one of the following conditions:

Any SG depressurizing in an uncontrolled manner Any SG completely depressurized RO with SRO concurrence identifies A SG as the faulted SG ATTACHMENT 9 of 1-E-0 **PART A**

RO CAUTION: At least one SG must be maintained available for RCS cooldown.

RO 4. Isolate the faulted SG(s) by performing the following:

a) Verify closed or close the faulted SG(s) MSTV SG A, 1-MS-TV-101A SG B, 1-MS-TV-101B SG C, 1-MS-TV-101C 67

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-E-0 Attachment 9 ATTACHMENT 9 of 1-E-0 **PART A**

RO b) Verify closed or close the faulted SG(s) AFW Isolation MOVs:

SG A, 1-FW-MOV-151E and 1-FW-MOV-151F SG B, 1-FW-MOV-151C and 1-FW-MOV-151D SG C, 1-FW-MOV-151A and 1-FW-MOV-151B RO will close 1-FW-MOV-151E and 1-FW-MOV-151F.

Critical task (WOG E-2A) is completed when the A SG is isolated by closing 1-MS-TV-101C and 1-FW-MOV-151A/B.

c) Verify closed or close the faulted SG(s) PORV:

SG A, 1-MS-RV-101A SG B, 1-MS-RV-101B SG C, 1-MS-RV-101C RO will identify that 1-MS-RV-101A is closed.

d) Select the faulted SG AFW MOVs using the following switches:

o H TRAIN DISABLE SELECTOR SWITCH o J TRAIN DISABLE SELECTOR SWITCH e) Defeat the auto-open signal for the selected MOVs by placing the following key switches in the DISABLE SELECTED position:

o H TRAIN AUTO OPEN ENABLE SWITCH o J TRAIN AUTO OPEN ENABLE SWITCH RO RO will select the switches to defeat the automatic open feature of the A SG AFW MOVs.

68

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-E-0 Attachment 9 ATTACHMENT 9 of 1-E-0 **PART A**

CAUTION: Feed flow should remain isolated to any faulted SG if intact SG(s) are available for heat sink.

5. Control Feed flow to the intact SGs IAW the following requirements:

Minimum AFW flow is 350 gpm [450 gpm] with SI initiated, until one SG Narrow Range level is greater than 12% [18%].

When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22%

and 50% by throttling AFW Isolation MOVs:

SG A, 1-FW-MOV-151E and 1-FW-MOV-151F SG B, 1-FW-MOV-151C and 1-FW-MOV-151D SG C, 1-FW-MOV-151A and 1-FW-MOV-151B RO will throttle AFW to the B and C SG as needed.

The RO should NOT perform Part B at this time - this ends attachment 9 actions 69

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 5 ARP- 1G-F8 - Rod Bank D Withdrawal NUMBER PROCEDURE TIT LE REVIS ION 13 1G-F8 ROD BANK D WITHDRAWAL PAGE 2 of 3 ACTION / EXPECTED RESPONSE RESPONS E NOT OBTAINED

1. VERI FY ALARM - ROD DEMAND POS ITION o Initiate a Work Request AND GO TO Step 8.

GREATER THAN OR EQUAL TO 228 STEPS ON CON TROL BANK D - GP 1 DEMAND POSTN

2. PUT ROD CONTROL MODE SEL SWITCH IN MANUAL

3. VERI FY ROD MOTI ON - STOPPED o GO TO l-E-O, REACTOR TRIP OR SAFETY INJECTION .

4. CH ECK BOTH CON TROL BANK D STEP Do the following:

COUNTERS - LE SS THAN OR EQUAL TO 230 ST EPS o a) Step rods out to make both Bank D Step Counters equal. (Group step counters must be equalized by stepp ing out only, to prevent Rod Group Sequence Error) o b) Reset Bank D Step Counters to 230 steps.

NOTE: Rods may have to be stepped in as many as two steps below the fully withdrawn position to clear Annunciator 1G-FB.

5. STE P CONTRO L BANK D RODS IN AS NECESSARY TO CLEAR lG-F8, ROD BANK D WI THDRAWAL

6. POSI T ION CONTROL BANK D RODS AS DETERMI N ED BY SHI FT SUPERV ISION NOTE: Both group step counters for Control Sank 0 should be the same before performing Step 7.

7. LOCALLY CHECK THE BANK OVERLAP o Notify Instrumentation Department.

COUNTER - AT 384 PLUS CURRENT CONTROL BANK D DEMAND POSI TI ON 70

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 5 ARP- 1G-F8 - Rod Bank D Withdrawal NUMBER PROCEDURE TITLE REV ISION 13 1G-F8 ROD BANK D WITHDRAWAL PAGE 3 of 3 ACTION ! EXPECTED RESPONSE RESPONSE NOT OBTAINED

8. NOTIFY SH IFT SUPERVISION

- END-71

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMINION 1-0 PT-RP-001 Surry Power Station Revision 6 Page4of11 2.4 Commitment Documents 2.4.1 CTS 1438. Revised PT's to require perfonnance prior to entry into the applicable mode.

2.4.2 PI 5 -2003 -3523, Tech Spec Amendment 228 not cOlTectly implemented Init Verif 3.0 INITIAL CONDITIONS

3. 1 Unit may be at any power level to pelf 01111 this OPT.

4.0 PRECAUTIONS AND LlMITATIONS 4.1 Shift Supervision shall be notified immediately if any acceptance critelia is not lllet or if any malflUlCtioll or abnonnal condition occurs.

5.0 SPECIAL TOOLS AND EQUIPMENT None 72

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMINION 1-0 PT-RP-001 Surry Power Station Revision 6 Page 5 of 11 Init Verif 6.0 INSTRUCTIONS

6. 1 Status Light Verification NOTE: Signoffs for this Subsection will be recorded in Attachment 1 and Attachment 2.

6.1. 1 Record actual power level in the Actual Power Level column on Attachment 1 and Attachment 2.

NOTE: If the recorded power level reading is between the upper and lower setpoints rhe status lights Illay be ON or OFF. Example: Power Range Instmments are reading 8% Power. On power increasing the compara tor trip can be set anywhere between 8 and 10% (P-IO light illuminated) and the reseT on power decreasing between 6 and 8% (P- lO light extinguished). Is rhe reading 8% increasing or 8% decreasing? If the setpoint was 8% power increasing and power has now drifted back down to 6%. then the P-IO light will still be illuminated. To accurately detennine the COlTect stams the exact setpoint would have to be known as well as the status of power increasing or decreasing. To eliminate this uncertainty. the determination ofPennissive Status Light condition will only be performed when Reactor Power is either above the upper setpoint or below the lower setpoint.

6.1.2 Using the Setpoints given in Attachment 1. detennine the COlTect status of the Pelmissive StaniS Lights. Initial in the Initials block to verify the proper status light condition and enter N/A in the Initials block for the non-applicable condition.

6.1.3 Using the Setpoints given in Attachment 2. detennine the COlTect status of the Pelmissive Computer Points. Initial in the Initials block to verify the proper Computer Point condition and enter N/A in the Initials block for the non-applicable condition.

73

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMINION 1-0PT-RP-001 Surry Power Station Revision 6 Page6of11 7.0 FOLLO\V-ON 7.1 A('Cephm ce C riteria 7.1. 1 iF the stated Acceptance Criteria are mer. THEN test shall be considered satisfactory.

Permissive Stanis Lights are ilhullillated or extinguished. as required on Attachment 1.

Permissive Computer Points are in the con-eet state as required on Attachment 2.

7.2 Follow-On Tasks 7.2. 1 IF test was satisfactory. THEN check SATISFACTORY AND enterN/A for substeps in Step 7.2.2.

Test Result: SA TISFACTORY UNSATI SFACTORY 7.2.2 IF test was unsatisfactory. THEN check UNSATISFACTORY AND perfonn the following:

a. Notify Shift Supervision.

b. Declare equipment inoperable. If penllissive staniS lights are illcolTecr.

declare Nuclear Instnullent Channel inoperable. IfPCS computer points are inconect do not declare channel inoperable.

c. Notify Supelvisor System Engineering.

d. Initiate Condition Report.

CRNo. _ _ _ _ __

74

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions

)MINION 1-0PT-RP -001 Irry Power Station Revision 6 Page 7 of 11 7.2.3 Personnel participating in perfonllance of this procedme shall initial, sign.

and print name below.

In itials Sig nature Printed Name 7.2.4 Notify Shift Supelvision aftest completion.

Comments: ______________________________

Completed by : _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ Date: _ _ __

Time: _ _ _ __

7.3 Review Comments: ______________________________

Reviewed by: _ _ _ _ _ _ ---.=""===;-______

Shift Supervision

_ Date: _ _ __

75

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMINION 1-0 PT-RP-001 Surry Power Station Revision 6 Page8of11 Forward original procedure to Engineering Testing.

Comments: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __

Reviewed by: ---------,=== ==co-- - - - - - - Date: _ _ __

System Engineer 7.4 Rt'('onls Submit original proc edure fo Station Rt'('onls ill accordance with approvt'd Admiuistnltivt' pro('edlll'{'s.

76

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMI NION 1-0 PT-RP-00 1 Surry Power Station Revision 6 Page 9 of 11 (Page 1 of 1)

Attachment 1 PERMISSIVE STATUS LIGHTS Permissive Actual Power Upper and Lower Status Light Status Light Signal Level Set points Description Condition Initials 112 N Is > lxlO- 1O P-6 NIS INT RGE B-3 P-6 (I ) NI Power amps > 1x1O- 1O% AMPS ILLUMINATED 2/2 N Is < 5xlO- 11 P-6 NIS INT RGE B-3 amps > 1x1O- 1O% AMPS EXTINGUISHED 212 Tmb Pwr < 8.8 %

P-i NIS PWR RGE AND B-2 P-7 (2) Tm b Power (5 3 psig)

TURE PWR < 10% ILLUMINATED and 314 N Is < 6 %

1/2 Tmb PWf > 10.0 %

P-i NIS PWR RGE AN D 8-2 (3) NI Power (5 6 psig)

TURE PWR < 10 % EXTINGUISHED or 2/4 NIs > 10%

P-8 NIS PWR RGE A-2 P-8 (3) NI Power 3/4 N Is < 31 %

< 35 % ILLUMINATED P-8 NIS PWR RGE A-2 2/4 N Is > 35 %

< 35 % EXTINGUISHED P- IO NIS PWR RGE A -3 P-lO (3) NI Power 2/4 N Is > 10%

> 10 % ILLUMINATED P- IO NIS PWR RGE A -3 3/4 NIs < 6%

> 10 % EXTINGUISHED (1) : As read on Intenllediate Range Nuclear Instnullentation. (NI- 1-35B and NI- 1-36B).

(2): As read on Turbine First Stage Pressure Instrumentation. (PI- 1-446 and PI- 1-447)

(3): As read on Power Range Nuclear Instnullentation. (NI-1-4 1B. NI-1-42B . NI- 1-43B and NI- 1-44B)

Completed by: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ Dare: _ _ __

77

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMI N ION 1-0 PT-RP-00 1 Surry Power Station Revision 6 Page 10 of 11 (Page 1 of 2)

Attachment 2 PERMISSIVE COMPUTER POINTS Permissive Actual Power Upper and Lower Computer Computer Point Computer Pt Signal Level Set points Point Description Status Initials 112 N Is > lxl O- lO N3 1 HIGH FL UX TRlP--

(I) NI Power N OO3 4D ON amps MANUAL BLOCK 2/2 N Is < 5xl O- 11 N3 1 HIGH FLUX TRlP--

P-6 amps

---

MANUAL BLOCK 1I2 NIs > lxl O- 1O N3 2 HIGH FL UX TRlP--

NOO3 5D ON amps MANUAL BLOCK 2/2 N Is < 5xl O- 11 N3 2 HIGH FL UX TRlP--

amps

---

MANUAL BLOCK 2/2 Turb Pwr NUCLEAR & TB PWR P- 7 (2) Tmb Power < 8 .8% (5 3 psig) YOOO3D ON RE TRP7PERM and 3/4 NIs < 6%

1/2 Turb PWT >

NUCLEAR & rn PWR (3) NI Power 10.0% (56 psig) YOOO3D OFF RE TRP7PERM or 2/4 NIs > 10%

P- 8 (3) NI Power 3/4 NIs < 3 1% F0499D RCL LO F PERt\1 P8 ON 2/4 NIs > 35% F0499D RCL LO F PERt\1 P8 OFF

( I ): As read Oil Intenllediate Range Nuclear Instmmentatioll . (NI- 1-35B and NI- 1-36B)

(2): As read Oil Turbine First Stage Pressme Instn llllentarioll. (PI- I -446 alld PI- I-447)

(3): As read Oil Power Range Nuclear IIlstnulleIltatioIl. (NI-1-4 1B. NI-1-42B . NI- 1-43B and NI-1-44B) 78

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 6 1-OPT-RP-001 Actions DOMINION 1-0 PT-RP-001 S urry Power Station Revision 6 Page 11of 11 (Page 2 of 2)

Attachment 2 PERMISSIVE COMPUTER POINTS Permissive Actual Power Upper and Lower Computer Computer Point Computer Pt Signal Level Setpoints Point Description Status Initials P- 1O CHAN. 1 -

( I) NI Power N I-4 1 > 10010 NOOI1D ON PARTIAL PERMISSIVE P- 1O CHAN. 1 -

NI-41 < 6% NOO I1D OFF PARTIAL PERMISSIVE P- 1O CHAN. 2 -

N I-42 > 10%) NOO 12D ON PARTIAL PERMISSIVE P- 1O CHAN. 2 -

P- lO NI-42 < 6% NOO 12D OFF PARTIAL PERMISSIVE P- 1O CHAN. 3 -

N I-43 > 10010 NOO 13D ON PARTIAL PERMISSIVE P- 1O CHAN. 3 -

NI-43 < 6% NOO 13D OFF PARTIAL PERMISSIVE P- 1O CHAN. 4-N I-44 > 10%) NOO 14D ON PARTIAL PERMISSIVE P- 1O CHAN. 4-NI-44 < 6% NOO 14D OFF PARTIAL PERMISSIVE (1): As read on Power Range Nuclear Instnullentatioll. (NI- 1-41B. NI- I-42B. NI- I-43 and NI- 1-44B)

Completed by: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ Da te: _ _ __

79

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #3 Facility: Surry Scenario No.: 3 Op-Test No.: 2009-301 Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 has been at 75% power for 3 days due to high vibrations on the A high-pressure heater drain pump. The B high-pressure heater drain pump has been placed in service and is currently being monitored by maintenance for proper operation. All systems and crossties are operable with the following exceptions:

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

1-SD-P-1A, A high-pressure heater drain pump, is tagged out for high pump vibrations.

Turnover:

Maintain Unit 1 at 75% power. The ramp to 100% power is scheduled for dayshift tomorrow. Support maintenance as required on 1-SI-P-1B repairs. The current PSA analysis for plant conditions is green for both units.

Event Malf. Event Type* Event No. No. Description 1 TBD I - BOP/SRO Power range nuclear instrument Channel 3 loses control power.

The selector switch that provides power range nuclear instrument TS - SRO input to the N-16 radiation monitors will fail to operate resulting in a loss of the N-16 monitors.

2 TBD TS - SRO Loop C RCS hot leg temperature element failure. Results in delta-T and Tave indication errors on C loop.

3 TBD C - RO/SRO A 20 - 25 gpm tube leak will develop on the B steam generator.

This event will result in a ramp to hot shutdown.

TS - SRO 4 TBD R - All Ramp offline due to steam generator tube leakage. The team will also have to restore letdown to service (isolated by AP-16.00 immediate actions) prior to or during the ramp.

5 TBD M - All The steam generator tube leak will develop into a large steam generator tube rupture (450 gpm), which will require the team to re-enter AP-16.00, then transition to 1-E-0 with safety injection required.

C- BOP/SRO The response to safety injection will be complicated by various ventilation system components failing to and the failure of one of the high head safety injection flow indicators.

6 TBD M - All During safety injection the containment instrument air supply will spuriously isolate resulting in a loss of containment instrument air.

The backup air supply for both pressurizer PORVs will fail to C- RO/SRO operate, rendering both inoperable. Combined with the loss of containment instrument air, this results in the inability to depressurize the RCS. The team will transition to ECA-3.3.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor, (TS) Technical Specifications Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #3 Event 1 PRNI N-43 will lose control power. The SRO will initiate 0-AP-53.00 (Loss of Vital Instrumentation / Controls, then transition to AP-4.00, Nuclear Instrumentation Malfunction and direct placing the failed channel in trip. The Power Range input to the N-16 Radiation Monitor will fail to the N-44 position as the selector switch will not function. The SRO will review Technical Specifications.

Verifiable Action: (BOP) Performs Attachment 1 to complete MCR portion of placing channel in trip.

Technical Specification:

Table 3.7-1. item 2 OA #2 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> and perform a quadrant power tilt once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />)

Table 3.7-1 items 5 & 6 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-1 item 20 OA 13 (no action for 1 NI failed).

3.12.D - determine quadrant power tilt once/day and after a power change of >10% or >30 of rod motion.

Event 2 The Loop C RCS hot leg temperature element will fail in the low direction. This will result in a lower than actual delta-T and Tave indication on C loop. The SRO will initiate 0-AP-53.00 (Loss of Vital Instrumentation / Controls and refer to the applicable Technical Specifications.

Technical Specifications:

3.7-1 item 5 and 6 - OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) 3.7-2 items 1.e.2 and 6 - OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) 3.7-3 item 2a (refer to 3.7.2.)

Event 3 A Steam generator tube leak (20 - 25 gpm) will develop on B SG while the unit is at power. The team will initiate AP-16.00 (Excessive RCS Leakage), associated ARPs (e.g. AE RM), and transition to AP-24.00 (Minor SG Tube Leak).

Verifiable Actions: (RO) Perform the immediate actions of AP-16.00.

Technical Specifications:

3.1.C.1.d - 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> to hot shutdown due to primary to secondary leakage

> 150 gpd.

Event 4 In accordance with AP-24.00, the team will ramp the unit to hot shutdown at 1%/minute. The SRO will implement 0-AP-23.00, Rapid Load Reduction.

Verifiable Actions: (BOP) Place letdown in service prior to the ramp.

(RO) Utilizes the control rods and boric acid during the ramp.

(BOP) Operate the turbine during the load decrease.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #3 Event 5 The steam generator tube leak will develop into a large steam generator tube rupture (450 gpm),

which will require the team to re-enter AP-16.00, then transition to 1-E-0 with safety injection required. The response to safety injection will be complicated by various ventilation system components failing to and the failure of one of the high head safety injection flow indicators.

Verifiable Actions: (RO) Perform the immediate actions of AP-16 and 1-E-0 (BOP) Securing ventilation components as required for safety injection Critical Task: [SPS E-1G] Secure one LHSI pump within 30 minutes of initiation of SI (KOA).

Actions required to accomplish:

Secure 1-SI-P-1A or B Critical Task: [WOG E-3A] Isolate feedwater flow into and steam flow from the ruptured SG before a transition to ECA-3.1 occurs (KOA).

Actions required to accomplish:

Close 1-FW-MOV-151C and D Close 1-MS-TV-101B Critical Task: [WOG E-3B] Cooldown the RCS to less than target CETC and stabilize temperature such that transition is not made to and ECA or FR based on RCS subcooling less than 30 °F or RCS temperature less than 455 °F (KOA).

Actions required to accomplish:

Operate Steam Dumps to cooldown at the maximum rate without overcooling the RCS.

Event 6 During Safety Injection the containment instrument air supply will spuriously isolate resulting in a loss of containment instrument air. The backup air supply for both pressurizer PORVs will fail to operate, rendering both inoperable. Combined with the loss of containment instrument air, this results in the inability to depressurize the RCS. The team will transition to ECA-3.3.

Verifiable Actions: (BOP) Dispatch operators to attempt to recover containment instrument air Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #3 Initial 75% Power IC, MOL - Cycle 23. The unit has been at 75% power for 3 days (equilibrium Conditions: xenon).

Pre-load malfunctions:

o Override N-16 selector switch to N-43 position.

o 1-SI-FI-1961 failed low.

o Disable 1-VS-F-8A/B and 11-VS-F-7A/B auto trip on SI function.

Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-SI-P-1B tagged out for planned maintenance o 1-SD-P-1A tagged out for high vibrations Turnover: Maintain unit at 75% power. Unit 2 is at 100% power with all systems operable.

All systems and crossties are operable with the following exceptions:

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

Event Malf. #s Severity Instructor Notes and Required Feedback 1 NI0703 N/A NI-43 loss of control power.

2 RC0703 N/A C Loop Thot RTD fails low.

3 RC2402 N/A B SG tube leak (20-25 gpm) 4 RC2402 N/A B SG tube leak develops into rupture.

Containment instrument air is lost and pressurizer PORV air bottle 5 Various N/A failure.

SHIFT TURNOVER INFORMATION OPERATING PLAN:

The Unit has been at 75% power for 3 days following loss of 1-SD-P-1A (high vibrations).

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

Unit 2 is at 100% Power with all systems and crossties operable.

Maintain 75% power operation.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 6 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

Time Position Applicants Action or Behavior Diagnose the failure with the following indications:

Alarms:

RO 1E-G5 NIS PWR RNG HI STPT CH 3 1G-C3 NIS PWR RNG LOSS OF DET VOLT 1G-C4 UPPER ION CHAMBER DEVIATION OR AUTO DEFEAT

<50%

1G-D4 LOWER ION CHAMBER DEVIATION OR AUTO DEFEAT

<50%

1G-G1 NIS PWR RNG HI FLUX ROD STOP 1G-E4 NIS PWR RNG CH AVG FLUX DEVIATION 1G-H1 NIS DROPPED ROD FLUX DECREASE >5% PER 2 SEC Indications:

NI-43 indicates off-scale low SRO Enters 0-AP-53.00 LOSS OF VITAL INSTRUMENTATION / CONTROLS RO [1] VERIFY REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL RO identifies N-41, 42, 44 are indicating normal.

BOP [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION No control function is affect and the team will proceed to the RNO section.

SRO Step 2 RNO- IF no control function is affected, THEN GO TO Step 4.

The team will advance to Step 4 of AP-53.00.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 7 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

SRO The team will hold a transient brief. During the brief the failure of NI-43 will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

NI Malfunction, Step 5 RO The RO will identify that NI-43 has failed low.

5. CHECK THE FOLLOWING INSTRUMENTS/CONTROLS -

AFFECTED RO Nuclear Instrumentation Pressurizer Pressure control RO Note prior to set 6 NOTE: RCS pressure decrease will cause a slight decrease in RCS Tave due to negative reactivity from the moderator pressure coefficient.

RO 6. CHECK PRZR SPRAY VALVE CONTROLLERS - NORMAL Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 8 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

SRO 5. GO TO THE APPROPRIATE ABNORMAL PROCEDURE AP-4.00, Nuclear Instrumentation Malfunction AP-31.00, Increasing or decreasing RCS Pressure Team transitions to AP-4.00, Nuclear Instrumentation Malfunction.

SRO Enters AP-4.00- Nuclear Instrumentation Malfunction.

AP-4.0 Actions RO 1. CHECK NI MALFUNCTION - POWER RANGE FAILURE AP-4.0 Actions RO/BOP 2. STABILIZE UNIT CONDITIONS AP-4.0 Actions RO 3. CHECK N FAILED RO will report that NI-44 is NOT failed- SRO will go to RNO column which directs the team to step 6.

AP-4.0 Actions RO 6. CHECK N FAILED RO will report NI-43 failed.

AP-4.0 Actions RO/BOP 7. PLACE 1-MS-43-N16, REACTOR POWER SOURCE, IN THE N44 POSITION (SWITCH LOCATED ON NI PROTECTION CHNL III CABINET)

RO/BOP will place N16 selector switch in the N44 position, after swapping they should notice that the N-16 monitors are still reading zero each. This condition may not be noticed, depending on the background indication prior to the failure.

If noticed, then team will notify craft personnel.

AP-4.0 Actions RO 8. CHECK POWER RANGE CHANNELS - ONLY ONE FAILED Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 9 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

AP-4.0 Actions SRO NOTE: Performance of Attachment 1 to place the failed Power Range Channel in trip requires I&C assistance for N-41, N-42, or N-43.

9. INITIATE ATTACHMENT 1 TO PLACE FAILED CHANNEL IN TRIP WITHIN 72 HOURS Note: Applicable actions from Attachment 1 begin on the following page.

AP-4.0 Actions RO 10. CHECK NI MALFUNCTION - INTERMEDIATE RANGE FAILURE

10. RNO - GO TO Step 19.

AP-4.0 Actions RO 19. CHECK NI MALFUNCTION - SOURCE RANGE FAILURE

19. RNO - GO TO Step 38.

AP-4.0 Actions SRO 38. NOTIFY THE FOLLOWING Instrument Shop OM on call Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 10 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

AP-4.00 Attachment 1 AP-4.0 Attachment 1 Actions (Normal Actions for BOP)

BOP ONE POWER RANGE CHANNEL INOPERABLE

1. Perform the following at the NIS panel within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

Comparator and Rate Drawer

a. Select the failed channel on the COMPARATOR CHANNEL DEFEAT switch.

b. Verify annunciator 1G-E4, NIS PWR RANGE CH AVG FLUX DEVIATION - NOT LIT.

Miscellaneous Control and Indication Panel

a. Select the failed channel on the ROD STOP BYPASS switch.

b. Verify annunciator 1G-G1, NIS PWR RNG HI FLUX ROD STOP

- NOT LIT.

c. Select the failed channel on the UPPER SECTION defeat switch.

d. IF Reactor power greater than 50%, THEN verify annunciator 1G-C4, UPPER ION CHAMBER DEVIATION OR AUTO DEFEAT

< 50% - NOT LIT. (annunciator will remain LIT if any Power Range channel less than 50%).

e. Select the failed channel on the LOWER SECTION defeat switch.

f. IF Reactor power greater than 50%, THEN verify annunciator 1G-D4, LOWER ION CHAMBER DEVIATION OR AUTO DEFEAT

< 50% - NOT LIT. (annunciator will remain LIT if any Power Range channel less than 50%)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 11 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

AP-4.0 Attachment 1 Actions (Normal Actions for BOP)

BOP NOTE: Annunciator NIS PWR RNG HI STPT (1E-E5, 1E-F5, 1E-G5, or 1E-H5) for the channel being placed in trip, NIS PWR RNG LOSS OF DET VOLT (1G-C3), and NIS DROPPED ROD FLUX DECREASE > 5% PER 2 SEC (1G-H1) will alarm when the instrument power fuses are pulled.

2. Place the failed Power Range channel in trip IAW the following:

a. At the Power Range drawer, remove the INSTRUMENT POWER fuses.

b. At the Power Range drawer, put the POWER RANGE TEST switch in the TEST position.

c. Verify annunciator 1G-H1, NIS DROPPED ROD FLUX DECREASE

> 5% PER 2 SEC - LIT.

d. Verify annunciator 1G-C3, NIS PWR RNG LOSS OF DET VOLT -

LIT.

e. IF Reactor power less than 10%, THEN verify annunciator 1E-D5, NIS PWR RNG LO STPT HI FLUX - LIT.

AP-4.0 Attachment 1 Actions (Normal Actions for BOP)

BOP 3. Remove the following PCS points for the failed channel from scan:

N-43, N0045A and N0046A The team may opt to have I&C remove these points from scan.

AP-4.0 Attachment 1 Actions (Normal Actions for BOP)

4. Have I&C place the OT T and OP T bistables for the failed channel in TRIP and verify the associated annunciators - LIT CHANNEL III BS-1-432B-1, Annunciator 1E-E7, RX TRIP CH 3 OP T LOOP 1C BS-1-432B-2, Annunciator 1G-H4, OVPWR T TURB RNBK &

ROD STOP CH 3 BS-1-432C-1, Annunciator 1E-E6. RX TRIP CH 3 OT T LOOP 1C BS-1-432C-2, Annunciator 1G-H3, OVTEMP T TURB RNBK &

ROD STOP CH 3 SRO will contact I&C to perform these steps, this will not occur during this scenario.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 12 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

AP-4.0 Attachment 1 Actions SRO 5. IF reactor power is greater than 75%, THEN do either a OR b below:

a) Determine the core quadrant balance using the incore movable detectors when any of the following occur.

Twelve hours have passed since the last core quadrant balance was performed.

A change in Reactor power level greater than 10%.

Control rod movement of greater than 30 inches (48 steps) b) Within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, reduce Reactor power to less than or equal to 75% of rated power, and within 78 hours9.027778e-4 days <br />0.0217 hours <br />1.289683e-4 weeks <br />2.9679e-5 months <br />, reduce the High Flux trip setpoints to less than or equal to 85% of rated power.

Outcome of this step will depend on the current power level at the time the team encounters this step. If power is 75% or below, no actions are required.

AP-4.0 Attachment 1 Actions SRO 6. IF Reactor power is less than or equal to 75%, and will remain there, THEN within 78 hours9.027778e-4 days <br />0.0217 hours <br />1.289683e-4 weeks <br />2.9679e-5 months <br />, reduce the High Flux trip setpoint to less than or equal to 85% of rated power.

Outcome of this step will depend on the current power level at the time the team encounters this step. If power is >75%, no actions are required.

AP-4.0 Attachment 1 Actions SRO 7. Refer to Tech Spec Table 3.7-1, Item 2, 5, 6, and 20.

Determines 3.7-1 items 2 and 5 are applicable (trip channel w/in 72 hr; restrict power to 75% and reduce trip setpoints to 85% or 12 hr QPTR)

SRO will determine the following Technical Specification limitations:

Technical Specification:

Table 3.7-1. item 2 OA #2 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> and perform a quadrant power tilt once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />)

Table 3.7-1 items 5 & 6 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-1 item 20 OA 13 (no action for 1 NI failed).

3.12.D - determine quadrant power tilt once/day and after a power change of >10% or >30 of rod motion.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 1 Page 13 of 80 Event

Description:

NI-43 control power failure.

Cue: By Examiner.

AP-4.0 Attachment 1 Actions SRO 8. Refer to Tech Spec 3.12.D.

Technical Specification:

3.12.D - determine quadrant power tilt once/day and after a power change of >10% or >30 of rod motion.

END END END EVENT 1 Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 2 Page 14 of 80 Event

Description:

C Loop Thot RTD failure Cue: By Examiner.

Time Position Applicants Action or Behavior Diagnoses failure of C Loop Thot with the following indications/alarms:

Team Alarms:

1H-B2 T DEVIATION LOOP 1B > < LOOP 1C 1H-B4 T AVG LOOP DEVIATION 1H-C2 T DEVIATION LOOP 1A > < LOOP 1C Indications:

C Loop Tave indication decrease C Loop Delta-T indication decrease C Over Temperature Delta-T Trip setpoint increase.

SRO Enters 0-AP-53.00 LOSS OF VITAL INSTRUMENTATION / CONTROLS RO [1] VERIFY REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL RO identifies individual loop Tave indications are normal BOP [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION No control function is affect and the team will proceed to the RNO section.

SRO Step 2 RNO- IF no control function is affected, THEN GO TO Step 4.

The team will advance to Step 4 of AP-53.00.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 2 Page 15 of 80 Event

Description:

C Loop Thot RTD failure Cue: By Examiner.

SRO The team will hold a transient brief. During the brief the failure of C Loop Thot will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

Loop Tave, Step 10 Loop T, Step 10 RO The RO will identify that Loop C Tave and Delta-T are affected.

SRO CAUTION: Delta flux must be monitored and maintained within band if rods have moved.

SRO NOTE: Depending on the instrumentation failure, the Tave input to the Steam Dumps may be invalid, causing the Steam Dumps to stay open longer or never open at all.

RO 10. CHECK LOOP/MEDIAN T/Tave - NORMAL a) Median Tave - NORMAL b) Loop TAVE / T - NORMAL RO will report Loop Tave and Delta-T are NOT normal Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 2 Page 16 of 80 Event

Description:

C Loop Thot RTD failure Cue: By Examiner.

Step 10b RNO b) Do the following:

RO/BOP 1) Verify T Recorder, ( )/TR-( )-412 is selected to an operable channel.

SRO 2) Refer to the following Tech Spec 3.7 items:

• Table 3.7-1, 5 and 6

• Table 3.7-2, 1.e, and 6

• Table 3.7-3, 2a SRO 3) Refer to Attachment 4.

SRO 4) IF no other instrumentation failure exists, THEN GO TO Step 14.

SRO will determine that the following Technical Specification actions apply:

Technical Specifications:

3.7-1 item 5 and 6 - OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) 3.7-2 items 1.e.2 and 6 - OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) 3.7-3 item 2a (refer to 3.7.2.)

SRO 14. Review OPT-RX-001, Rx Power Calorimetric using PCS computer program, to determine operability of calorimetric and need to perform OPT-RX-007, Shift Average Power Calculation.

SRO/RO determines that OPT-RX-001 is NOT impacted and OPT-RX-007 does not need to be performed.

SRO 15. CHECK FAILED INSTRUMENT - IS A REGULATORY GUIDE 1.97 VARIABLE (Go to Step 17 if not Reg. Guide 1.97)

SRO directs STA to review Reg. Guide 1.97. The STA will report this failure has no Reg. Guide 1.97 implications.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 2 Page 17 of 80 Event

Description:

C Loop Thot RTD failure Cue: By Examiner.

SRO 17. Review the following:

TS 3.7 VPAP-2802 TRM Section 3.3, Instrumentation Determines the following Technical Specification LCOs:

3.7-1 item 5 and 6 - OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) 3.7-2 items 1.e.2 and 6 - OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) 3.7-3 item 2a (refer to 3.7.2.)

SRO directs STA to review VPAP-2802 and TRM Section 3.3. The STA reports he has completed these reviews and there is no impact.

SRO 18. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION - EXISTS The team will identify that no additional failures exist, proceed to the RNO section, and this will direct the team to Step 20.

SRO 20. PROVIDE NOTIFICATIONS AS NECESSARY:

Shift Supervision OMOC STA (PRA determination)

I&C END END END EVENT 2 Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 18 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

Time Position Applicants Action or Behavior Team Diagnoses the failure with the following indications:

Alarms:

1C-B8 PRZR LO PRESS RM-G8 Air Ejector RM Alert / Failure (~2 minute delay)

RM-N8 SG Blowdown Radiation Monitor Alert/Failure alarm (~5 minute delay)

Indications:

Decreasing pressurizer level Increasing charging flow Air Ejector Counts increasing Unit 2 will silence Radiation Monitors and report the alarms to the Unit Supervisor. The Unit 2 operator will also perform the associated ARPs if so directed.

SRO Direct initiation of AP-16.00, EXCESSIVE RCS LEAKAGE SRO Note: If SI Accumulators are isolated, 1-AP-16.01, SHUTDOWN LOCA, should be used for guidance.

Note: RCS average temperature has a direct impact on pressurizer level.

RO [1] MAINTAIN PRZR LEVEL Isolate Letdown Control Charging flow RO closes 1-CH-LCV-1460A and 1-CH-LCV-1460B and places charging in manual and attempts to maintain level at program (immediate action).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 19 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

RO 2 VERIFY THE FOLLOWING PARAMETERS - STABLE OR INCREASING:

PRZR Level PRZR Pressure RCS Subcooling Identifies all parameters are stable or increasing SRO The team will hold a short transient brief. The brief should establish the priority of addressing RCS leakage then end.

RO 3. PLACE THE FOLLOWING COMPONENTS IN OFF:

CTMT Sump Pumps CTMT Vacuum Pumps SRO directs the RO to secure the pumps.

SRO Note: Shift Supervision and STA must remain informed of RCS leak rate for EPIP applicability.

RO *4. CHECK REACTOR TRIP - REQUIRED Leak Rate - GREATER THAN 50 GPM OR Adequate makeup not being provided by blender The RO determines that leakrate is <50 gpm. (Approximately 23 gpm).

Step 4 RNO GO TO Step 7 SRO transitions to step 7.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 20 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

BOP 7. CHECK SECONDARY RADIATION - NORMAL OR STABLE IF THERE IS PRE-EXISTING TUBE LEAK

• Air Ejector Rad Monitor

• SG Blowdown Rad Monitors

• Main Steam Line Rad Monitors

• Secondary sample

• N-16 Rad Monitors BOP identifies air ejector radiation NOT normal. If sufficient time has elapsed, the BOP will observe increasing trend on blowdown radiation monitor RI-RM-113.

Step 7 RNO Actions:

SRO Do the following:

a) Consult with Shift Manager.

b) IF Reactor trip NOT required, THEN initiate 1-AP-24.00, MINOR SG TUBE LEAK It is expected that the SRO will perform AP-24.00 as a higher priority procedure over AP-16 at this point. The SRO may delegate AP-16 actions to either the RO or BOP.

SRO initiates 1-AP-24.00 - AP-24.00 actions start on page 24 RO 8. CHECK RCS LEAK RATE - LESS THAN 10 GPM Identifies that RCS Leak Rate is greater than 10 gpm.

Step 8 RNO Actions:

a) Initiate Unit Shutdown IAW appropriate operating procedures b) Control charging flow and seal injection to maintain prz level c) Evaluate EPIP applicability Discusses requirement to reduce power level- AP-24.00 will require ramp also.

RO 9. CHECK UNIT CONDITIONS PRZR Level -STABLE OR INCREASING PRZR Pressure - STABLE OR INCREASING Tave - STABLE Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 21 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

RO 10. CHECK LETDOWN LEAK - INDICATED Annunciator 0-VSP-F4, AUX BLDG SUMP HI LVL - LIT Annunciator 1B-A3, CTMT SUMP HI LVL - LIT Aux Bldg radiation - HIGH CTMT radiation - HIGH Local Report of leak Leak rate decrease following isolation in Step 1 Abnormal Letdown flow indication prior to isolation in Step 1 Non-Regenerative HX tube leak - INDICATED CC Surge Tank level - INCREASING CC Activity - INCREASING RO/BOP will report that a letdown line leak is NOT indicated Step 10 RNO actions: GO TO Step 12 RO 12. CHECK RCS LEAKRATE WITH LETDOWN SECURED - REDUCED RO will report that leakrate remains even with letdown isolated.

Step 12 RNO actions:

Do the following:

a) Return letdown to service IAW the following, if desired:

Normal letdown, IAW 1-OP-CH-020, RETURNING LETDOWN TO SERVICE FOLLOWING AUTO OR MANUAL ISOLATION OR Excess letdown, IAW 1-OP-CH-006, SHIFTING LETDOWN b) GO TO Step 15.

SRO will direct BOP operator to obtain 1-OP-CH-020 and prepare for placing letdown in service. 1-OP-CH-020 actions are contained in attachment 5 of this gudie.

RO 15. VERIFY ALL RCP NUMBER 1 SEALS - INTACT SRO 16. NOTIFY THE FOLLOWING:

STA OM on call Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 22 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

RO/BOP 17. VERIFY ALL PRIMARY SAMPLING - SECURED SRO will assign operator to contact chemistry and verify no sampling in progress. Chemistry will report that NO sampling is in progress.

RO/BOP 18. NOTIFY HP TO TAKE AIR SAMPLES:

Containment Auxiliary Building Safeguards SRO will direct RO/BOP to discuss step with HP. HP will report that they will initiate sampling.

RO 19. CHECK PDTT INLEAKAGE RATE - NORMAL RO 20. CHECK PRT INLEAKAGE RATE - NORMAL BOP 21. CHECK CC SYSTEM:

CC Surge TK Level - STABLE OR DECREASING CC activity - NORMAL BOP 22. CHECK CTMT RADIATION - NORMAL CTMT Radiation Monitors CTMT Air Sample CTMT Sump level BOP 23. CHECK AUXILIARY BUILDING RADIATION - NORMAL Ventilation Vent Area Monitors Air Sample BOP 24. CHECK PDT INFLUENT - NORMAL a) Put PDTT pumps for both Units in OFF b) Verify PDT inleakage - ZERO c) Return PDTT pumps to normal Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 23 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

BOP 25. CHECK SAFEGUARDS VALVE PIT FOR LEAKS Air Sample Sump level BOP 26. CHECK RCS LEAK RATE:

Unidentified leakage - LESS THAN 1 GPM Step 26 RNO actions:

Do the following:

a) Continue efforts to identify and isolate leakage.

b) GO TO appropriate plant operating procedure for unit shutdown.

BOP 27. EVALUATE POTENTIAL FOR CC BACK-LEAKAGE INTO RCS FROM PREVIOUSLY IDENTIFIED TUBE LEAKAGE BOP 28. EVALUATE SOURCE OF LEAKAGE - UNIT OPERATION MAY CONTINUE IF NONE OF THE FOLLOWING EXISTS:

A non-isolable fault in an RCS component body, pipe well, vessel wall, or pipe weld END END END AP-16.00 Actions Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 24 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

AP-24.00, MINOR SG TUBE LEAK SRO Note: This is an OC-93 applicable procedure.

• 1. CHECK REACTOR TRIP - REQUIRED RNO

a. Initiate 0-AP-23.00, RAPID LOAD REDUCTION. (must be in HSD within six hours)

b. GO TO Step 4 SRO 4. CONSULT WITH OMOC ON THE NEED TO BYPASS THE POLISHER SRO contacts Shift Manager who will request that the CP building remain in service.

BOP 5. CHECK PCS (ERFCS, if not removed) POINTS USING GROUP 80 REVIEW OR MAIN STEAM P&ID:

R1RM204C, RI-MS-124 R1RM205C, RI-MS-125 R1RM206C, RI-MS-126 BOP 6. MONITOR TREND ON SG BLOWDOWN RADIATION MONITORS:

RI-SS-112 RI-SS-113 BOP 7. MONITOR TREND ON AIR EJECTOR RADIATION MONITOR:

RI-SV-111 SRO 8. CONSULT WITH OMOC AND HP ON NEED TO ALIGN CONDENSER AIR EJECTOR TO CTMT.

OMOC and HP will recommend that air ejector discharge remain aligned to containment.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 3 Page 25 of 80 Event

Description:

B SG tube leakage Cue: By Examiner.

Team 9. IDENTIFY AFFECTED SG(S)

Unexpected rise in any SG narrow range level High radiation from any SG MS line monitor High radiation from any SG Blowdown line High radiation from any SG sample High radiation from any SG N-16 monitor SRO/BOP identifies rising counts on the B SG Blowdown RM and B MS RM.

SRO 10. REFER TO TECH SPEC 3.6 FOR SG SECONDARY SIDE ACTIVITY LIMITS SRO determines that leakrate is in excess of Technical Specification 3.1 limits of 20 gpd, and that a 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to HSD applies.

BOP 11. MINIMIZE SECONDARY CONTAMINATION:

a) Locally shift Aux Steam to Unit 2 b) Reduce or terminate affected SG blowdown c) Locally close steam supply valve from affected SG to TDAFW pump 1-MS-120 for SG B d) Sample Turbine BLDG sumps for contamination and secure sump pumps as necessary (if sump pumps secured, initiate 0-OSP-PL-003, TURBINE BUILDING SUMP PUMP STATUS VERIFICATION)

SRO 12. PROVIDE NOTIFICATIONS:

HP STA OMOC END END END Event 3 Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 4 Page 26 of 80 Event

Description:

AP-23.00 ramp offline Cue: By Examiner.

0-AP-23.00, RAPID LOAD REDUCTION SRO CAUTION: Conservative decision-making must be maintained during rapid load reductions. Refer to Attachment 1 for trip criteria.

NOTE:

Actions that can be completed independently of preceding steps may be performed out of sequence as directed by the SRO.

When the Turbine is not being actively ramped, the REFERENCE and SETTER values must remain matched to prevent inadvertent ramp.

Pre-planned reactivity plans located in the Main Control Room will be used as guidance for ramping down to the desired power level.

The ramp rate in IMP OUT is nonlinear and therefore pre-planned reactivity plans based on IMP IN are not as accurate. However, total amounts of boration and dilution can be used as guidance.

1. TURN ON ALL PRZR HEATERS

2. INITIATE PLANT LOAD REDUCTION AT 5%/MINUTE OR LESS:

RO a) Verify turbine valve position - NOT ON LIMITER The turbine is NOT on the limiter.

BOP b) Insert control rods in AUTO or MANUAL as necessary to maintain Tave and Tref within 5°F.

c) Verify or place turbine in IMP IN or IMP OUT as determined by RO Shift Supervision Team can choose either IMP IN or IMP OUT BOP d) Adjust SETTER to desired power level BOP e) Adjust LOAD RATE %/MIN thumbwheel to desired ramp rate (1%/minute)

BOP f) Initiate Turbine load reduction using OPERATOR AUTO (pushes the white GO button)

BOP g) Reduce Turbine Valve Position Limiter as load decreases BOP The BOP will periodically reduce the limiter setpoint during the ramp.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 4 Page 27 of 80 Event

Description:

AP-23.00 ramp offline Cue: By Examiner.

SRO 3. CHECK EMERGENCY BORATION - REQUIRED The team will decide to emergency borate based on the Tave - Tref difference.

SRO NOTE: Step 4 or Step 5 may be performed repeatedly to maintain Tref and Tave matched Flux in band, and control rod position above the LO-LO insertion limit.

RO 4. PERFORM AN EMERGENCY BORATION IAW THE FOLLOWING:

a) Verify or raise CHG flow to greater than 75 gpm b) Transfer the in-service BATP to FAST c) Open ( )-CH-MOV-( )350 d) Monitor EMRG BORATE FLOW

( )-CH-FI-( )110 e) After required emergency boration, perform the following:

1) Close ( )-CH-MOV-( )350

2) Transfer the in-service BATP to AUTO

3) Restore Charging flow control to normal RO 5. ESTABLISH A NORMAL BORATION TO MAINTAIN CONTROL ROD POSITION ABOVE THE LO-LO INSERTION LIMITS ATTACHMENT 4 Attachment 4 Boration instructions are on the last page of this event.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 4 Page 28 of 80 Event

Description:

AP-23.00 ramp offline Cue: By Examiner.

SRO NOTE:

If at any time plant conditions no longer require rapid load reduction, actions should continue at Step 35.

RCS Tave must be maintained less than or equal to 577°F and RCS pressure must be maintained greater than or equal to 2205 psig. Tech Spec 3.12.F.1 should be reviewed if either parameter is exceeded.

I & C should be contacted to provide assistance with adjusting IRPIs.

RO 6. CONTROL RAMP RATE TO MAINTAIN RCS PRESSURE GREATER THAN 2205 PSIG RO *7. CHECK LETDOWN ORIFICES - TWO IN SERVICE Evaluator note: two orifices will already be in service.

BOP 8. MONITOR STEAM DUMPS FOR PROPER OPERATION SRO 9. NOTIFY THE FOLLOWING:

Energy Supply (MOC)

Polishing Building Chemistry OMOC SRO 10. EVALUATE THE FOLLOWING:

EPIP applicability The Shift Manager will review EPIPs for applicability. They are not applicable.

VPAP-2802, NOTIFICATIONS AND REPORTS, applicability SRO directs STA to review VPAP-2802. The STA reports that he has completed his review of VPAP-2802 and no notifications are required.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 4 Page 29 of 80 Event

Description:

AP-23.00 ramp offline Cue: By Examiner.

• 11. CHECK REACTOR POWER - HAS DECREASED MORE THAN 15%

SRO IN ONE HOUR Reactor power has NOT decreased more than 15% in one hour Step 11 RNO actions: GO TO Step 13 Attachment 4 of AP-23.00 Actions RO SRO provides RO a copy of Attachment 4.

1. Place the MAKE-UP MODE CNTRL switch in the STOP position.

2. Adjust 1-CH-YIC-1113 to desired total gallons.

3. Adjust 1-CH-FC-1113A to the desired flow rate.

4. Place the MAKE-UP MODE SEL switch in the BORATE position.

5. Place the MAKE-UP MODE CNTRL switch in the START position.

6. Verify proper valve positions.

7. Adjust boration rate using 1-CH-FC-1113A, as necessary.

8. WHEN boration is complete, THEN do the following. IF boric acid is to remain in the Blender to support ramping the Unit, THEN enter N/A.

a. Manually blend approximately 20 gallons to flush the boration path IAW Attachment 5, Manual Makeups

b. Enter N/A for the remaining steps in this attachment.

It is not anticipated that the team will utilize Attachment 5 during this scenario.

9. Place the MAKE-UP MODE CNTRL switch in the STOP position.

10. Verify controllers for Primary Grade water and Boric Acid are set correctly.

11. Place the MAKE-UP MODE SEL switch in the AUTO position.

12. Place the MAKE-UP MODE CNTRL switch in the START position.

13. Notify Shift Supervision of Blender status.

END END END Event 4 Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 30 of 80 Event

Description:

B SGTR Cue: By examiner Team Diagnoses the failure with the following indications:

Alarms:

1C-B8 PRZR LO PRESS 1C-D8 PRZR LO LVL RMA-A2 UNIT 1 MN STM ABC RAD MON ALERT/HI Indications:

Decreasing pressurizer level Unit 2 will silence Radiation Monitors and report the alarms to the Unit Supervisor. The Unit 2 operator will also perform the associated ARPs if so directed.

SRO Direct initiation of AP-16.00, EXCESSIVE RCS LEAKAGE SRO Note: If SI Accumulators are isolated, 1-AP-16.01, SHUTDOWN LOCA, should be used for guidance.

Note: RCS average temperature has a direct impact on pressurizer level.

RO [1] MAINTAIN PRZR LEVEL Isolate Letdown Control Charging flow RO closes 1-CH-LCV-1460A and 1-CH-LCV-1460B and places charging in manual and attempts to maintain level at program (immediate action).

RO 2 VERIFY THE FOLLOWING PARAMETERS - STABLE OR INCREASING:

PRZR Level PRZR Pressure RCS Subcooling Identifies all parameters are DECREASING Step 2 RNO Actions- GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 31 of 80 Event

Description:

B SGTR Cue: By examiner 1-E Reactor Trip or Safety Injection RO [1] VERIFY REACTOR TRIP:

a) Manually trip reactor Pushes the reactor trip push buttons.

b) Check the following:

All Rods On Bottom light - LIT Reactor trip and bypass breakers - OPEN Neutron flux - DECREASING RO [2] VERIFY TURBINE TRIP:

a) Manually trip the turbine Pushes the turbine trip push buttons.

b) Verify all turbine stop valves - CLOSED c) Isolate reheaters by closing MSR steam supply SOV 1-MS-SOV-104 Takes control switch for 1-MS-SOV-104 to CLOSE.

d) Verify generator output breakers - OPEN (Time Delayed)

RO [3] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 32 of 80 Event

Description:

B SGTR Cue: By examiner RO may manually initiate safety injection due to a previously identified leakrate in excess of a charging pump.

RO [4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING SI annunciators - LIT A-F-3 SI INITIATED - TRAIN A A-F-4 SI INITIATED - TRAIN B a) RNO - Check is SI is required or imminent as indicated by any of the following:

Low PRZR Pressure Determines that SI is imminent due to excessive RCS leakage.

RO manually initiates safety injection.

SRO The team will hold a transition brief. During the brief it will be identified that SI was initiated and the SGTL has degraded into a SGTR.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal with the exception of the previously identified alarms. He will also state that containment conditions and the electrical conditions are as you see them.

Following the brief the team will perform 1-E-0 and applicable attachments.

SRO/BOP 5. Initiate Attachment 1 (Attachment 1 actions contained in attachment 1 of this guide).

SRO/RO SRO may direct the RO to perform Attachment 10 of 1-E-0 for Ruptured SG Isolation and AFW Control. This may or may not be initiated at any time during the performance of E-0. Attachment 10 actions are contained in attachment 4 of this guide.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 33 of 80 Event

Description:

B SGTR Cue: By examiner RO *6. CHECK RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F The team will identify that RCS temperature is decreasing. The team should attribute this to the injection of SI into the RCS and AFW flow to the SGs. It is acceptable for the team to enter the RNO portion of this step and perform the applicable steps (summarized below):

Stop dumping steam Reduce AFW flow to the SG Close MSTVs if cooldown continues

7. CHECK PRZR PORVs AND SPRAY VALVES:

RO a) PRZR PORVs - CLOSED b) PRZR spray controls Demand at Zero (or)

Controlling Pressure c) PORV block valves - AT LEAST ONE OPEN SRO NOTE: Seal injection flow should be maintained to all RCPs.

• 8. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS Two or three Charging pumps will be running and flowing to the RCS.

b) RCS subcooling - LESS THAN 30°F [85°F]

RCS subcooling will NOT be less than 30 °F RNO for the step is to go to step 9.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 34 of 80 Event

Description:

B SGTR Cue: By examiner RO 9. CHECK IF SGs ARE NOT FAULTED:

Check pressures in all SGs a) STABLE OR INCREASING AND b) GREATER THAN 100 PSIG BOP will observe a slightly decreasing trend on SG pressures. This will be attributed to the RCS cooldown. The team will not transition to 1-E-2.

RO/BOP 10. CHECK IF SG TUBES ARE NOT RUPTURED:

Condenser air ejector radiation - NORMAL SG blowdown radiation - NORMAL SG MS radiation - NORMAL TD AFW pump exhaust radiation - NORMAL SG NR Level - NOT INCREASING IN AN UNCONTROLLED MANNER BOP should observe B SG NR level going up uncontrollably.

SRO RNO: GO TO 1-E-3, STEAM GENERATOR TUBE RUPTURE.

SRO The team will hold a transition brief. During the brief it will be identified that B SG is ruptured, current isolation status of the ruptured SG and that the team is transitioning to 1-E-3.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal with the exception of the previously identified alarms. He will also state that containment conditions and the electrical conditions are as you see them.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 35 of 80 Event

Description:

B SGTR Cue: By examiner Time Position Applicants Action or Behavior 1-E-3 Actions NOTE: Seal injection flow should be maintained to all RCPs.

• 1. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS RO will identify that two charging pumps are running.

b) RCS subcooling - LESS THAN 30°F [85°F]

RO will identify that RCS subcooling is greater than 30°F RNO is to go to step 2

2. IDENTIFY RUPTURED SG(s):

Unexpected rise in any SG narrow range level SRO OR High radiation from any SG MS line monitor OR High radiation from any SG blowdown line OR High radiation from any SG sample Crew should observe B SG NR level going up unexpectedly.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 36 of 80 Event

Description:

B SGTR Cue: By examiner SRO CAUTION:

If the TD AFW pump is the only available source of feed flow, steam supply to the TD AFW pump must be maintained from at least one SG.

At least one SG must be maintained available for RCS cooldown.

BOP 3. ISOLATE RUPTURED SG(s):

a) Adjust ruptured SG PORV controller setpoint to 1035 psig b) Check ruptured SG(s) PORV - CLOSED Valves may be cycling at setpoint - RNO actions are to verify proper operation.

c) Verify blowdown TVs from ruptured SG(s) - CLOSED d) Locally close steam supply valve(s) to TD AFW pump:

1-MS-120 for B SG e) Close ruptured SG(s) MSTV (B) 1-MS-120 may be already closed as per AP-24.00 Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 37 of 80 Event

Description:

B SGTR Cue: By examiner CAUTION: If any ruptured SG is faulted, feed flow to that SG should remain isolated during subsequent recovery actions unless needed for RCS cooldown.

BOP

• 4. CHECK RUPTURED SG LEVEL:

a) Narrow range level - GREATER THAN 12% [18%]

b) Stop feed flow to ruptured SG(s)

Partial completion of the critical task (WOG E-3A) to isolate the SG is accomplished by performance of this step if not previously accomplished.

c) Select the ruptured SG AFW MOVs using the following switches:

H TRAIN DISABLE SELECTOR SWITCH J TRAIN DISABLE SELECTOR SWITCH d) Defeat the auto-open signal for the selected MOVs by placing the following key switches in the DISABLE SELECTED position:

H TRAIN AUTO OPEN ENABLE SWITCH J TRAIN AUTO OPEN ENABLE SWITCH BOP Critical Task: [WOG E-3A] Isolate feedwater flow into and steam flow from the ruptured SG before a transition to ECA-3.1 occurs (KOA).

BOP CAUTION: Major steam flow paths from the ruptured SG should be isolated before initiating RCS cooldown.

5. CHECK RUPTURED SG PRESSURE - GREATER THAN 350 PSIG RO *6. BLOCK LOW PRZR PRESS SI SIGNAL:

a) Check PRZR pressure - LESS THAN 2000 PSIG b) Turn both LO PRZR PRESS & STM HDR/LINE DP switches to block c) Verify Permissive Status light C LIT Depending on RCS pressure the team will either block low pressure SI at this point, during the RCS cooldown, or identify that blocking was performed in E-0 Attachment 1.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 38 of 80 Event

Description:

B SGTR Cue: By examiner RO *7. BLOCK LOW TAVE SI SIGNAL:

a) Check RCS Tave - LESS THAN 543°F b) Turn both HI STM FLOW & LO TAVG OR LP switches to block c) Verify Permissive Status light F LIT d) Hold the STM DUMP CNTRL switch in BYP INTLK e) Verify Bypass Status light D LIT Depending on RCS temperature the team will either block low pressure SI at this point, during the RCS cooldown, or identify that blocking was performed in E-0 Attachment 1.

SRO CAUTION: Flow on each Main Steamline should be kept less than 1.0 x 1E6 PPH to prevent Main Steamline isolation during RCS cooldown with the Steam Dumps.

CAUTION: If no RCPs are running, RCS cooldown and depressurization may cause a false Integrity Status Tree indication on the ruptured loop. The cold leg indication on the ruptured loop should be disregarded until after the performance of Step 35.

NOTE: RCP trip criteria does NOT apply after initiation of an operator controlled cooldown.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 39 of 80 Event

Description:

B SGTR Cue: By examiner

8. INITIATE RCS COOLDOWN:

RO/SRO a) Determine required core exit temperature (ONE TIME):

Based on current ruptured SG pressure the RO will determine the CETC temperature following the impending cooldown.

b) Place Steam Dump Mode Select switch in Steam Pressure mode BOP c) Dump steam to main condenser from from intact SG(s) at maximum rate BOP will manually increase demand on the Steam Dump Controller until demand is at least 25% (full open demand signal to cooldown steam dumps) or 1E6 lbm/hr is reached.

d) Check CETCs - LESS THAN REQUIRED TEMPERATURE The first time this is read, CETC temperatures will not be less than the required temperature. The SRO will proceed to the RNO portion of this step and continue in the procedure. Step 8e and 8f will be performed once CETCs are less than the required temperature in accordance with the RNO of step 8d.

e) Stop RCS cooldown f) Maintain CETCs - LESS THAN REQUIRED TEMPERATURE Partial completion of the critical task (WOG E-3B) to cooldown the RCS is accomplished during this step.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 40 of 80 Event

Description:

B SGTR Cue: By examiner BOP

• 9. CHECK INTACT SG LEVELS:

a) Any narrow range level - GREATER THAN 12% [18%]

b) Check emergency buses - BOTH ENERGIZED c) Control feed flow to maintain narrow range level between 22% and 50%

SRO Caution: If any PRZR PORV opens because of high PRZR pressure, the PORV must be verified closed or isolated after pressure decreases to less than 2335 psig.

RO *10. CHECK PRZR PORVs AND BLOCK VALVES:

a) Power to PRZR PORV block valves - Available b) PRZR PORVs - CLOSED c) PORV block valves - AT LEAST ONE OPEN RO will report that only one PORV block valve is open.

RO 11. RESET BOTH TRAINS OF SI SI will either be reported as previously reset or it can be reset again.

RO 12. RESET CLS:

a) Check CTMT pressure - HAS EXCEEDED 17.7 psia Containment pressure has not exceeded 17.7 psia, the RNO has the team proceed to Step 13.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 41 of 80 Event

Description:

B SGTR Cue: By examiner RO 13. VERIFY INSTRUMENT AIR AVAILABLE:

a) Check annunciator B-E NOT LIT b) Check at least one CTMT IA compressor - RUNNING 1-IA-C-4A or 4B c) Verify 1-IA-TV-100 - OPEN RO will report 1B-E6 is not LIT, a containment instrument air compressor is running, but 1-IA-TV-100 is CLOSED. This will send the team to C RNO Step 13c RNO actions: Open valve 1-IA-TV-100.

RO will attempt to open 1-IA-TV-100, but will not be successful. SRO may align turbine building instrument air to containment (in accordance with ARP-1B-F6) but that will not be successful.

BOP/RO 14. ALIGN CONDENSER AIR EJECTOR TO CTMT:

a) Verify the following:

1-SV-TV-102 - OPEN 1-SV-TV-103 - CLOSED b) Open the following valve:

1-SV-TV-102A The BOP will open 1-SV-TV-102A.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 42 of 80 Event

Description:

B SGTR Cue: By examiner SRO CAUTION: RCS pressure should be monitored. If RCS pressure decreases in an uncontrolled manner to less than 250 psig [400 psig], one LHSI pump must be manually restarted to supply water to the RCS.

RO 15. CHECK IF LHSI PUMPS SHOULD BE STOPPED:

a) Check LHSI pumps - Any running with suction aligned to RWST b) RCS pressure - GREATER THAN 250 PSIG [400 PSIG]

c) Stop LHSI pumps and put in AUTO The RO will stop the final remaining LSHI pump.

RO 16. Check if RCS Cooldown should be stopped a) Check CETCs - LESS THAN REQUIRED TEMPERATURE b) Stop RCS Cooldown c) Maintain CETCs - LESS THAN REQUIRED TEMPERATURE Cooldown the RCS to < target CETCs and stabilize temperature such that transition is not made into an ECA or FR procedure based on RCS subcooling 30 °F or RCS temp , 455 °F (KOA)

BOP 17. CHECK RUPTURED SG(s) PRESSURE - STABLE OR INCREASING BOP should report that ruptured SG pressure is stable or increasing.

RO 18. CHECK RCS SUBCOOLING BASED ON CETCs - GREATER THAN 50°F [105°F]

RO will report that subcooling is greater than 50 °F.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 5 Page 43 of 80 Event

Description:

B SGTR Cue: By examiner

19. DEPRESSURIZE RCS TO MINIMIZE BREAK FLOW AND REFILL PRZR:

RO a) Check normal spray - AVAILABLE RCP C AND 1-RC-PCV-1455B - BOTH AVAILABLE AND RCPs A and B AND 1-RC-PCV-PCV-1455A - BOTH AVAILABLE Team will determine that spray is not available due to loss of containment instrument air.

Step 19a RNO actions: GO TO step 20.

E-3 actions continue in next section.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 6 Page 44 of 80 Event

Description:

ECA-3.3 Cue: Inability to reduce RCS pressure.

SRO CAUTION: The PRT may rupture if a PRZR PORV is used for RCS depressurization. Rupturing the PRT may result in abnormal containment conditions.

CAUTION: Cycling of the PRZR PORV should be minimized.

NOTE: The upper head region may void during RCS depressurization if the RCPs are not running. This will result in a rapidly increasing PRZR level.

RO 20. DEPRESSURIZE RCS USING PRZR PORV TO MINIMIZE BREAK FLOW AND REFILL PRZR:

a) PRZR PORV - AT LEAST ONE AVAILABLE b) Open one PRZR PORV until any of the following conditions satisfied:

PRZR Level - greater than 69% (or)

RCS Subcooling based on CETCs less than 30°F (or)

Both of the following exist:

1) RCS Pressure - less than Ruptured SG pressure (and) 2)PRZR level - greater than 22%

Attempts to open either pressurizer PORV, but neither will operate.

Step 20a RNO actions- GO TO 1-ECA-3.3, SGTR WITHOUT PRESSURE CONTROL.

SRO The team will hold a transition brief. During the brief it will be identified that RCS pressure control is not available and the team will transition to 1-ECA-3.3.

1-ECA-3.3 Actions RO 1. CHECK RUPTURED SG(S) NARROW RANGE LEVEL - LESS THAN 75% [73%]

RO will either report that B SG Level is greater than 75%.

Step 1 RNO actions - GO TO Step 6 Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 6 Page 45 of 80 Event

Description:

ECA-3.3 Cue: Inability to reduce RCS pressure.

RO 6. CHECK IF SI CAN BE TERMINATED:

a) Check RCS subcooling based on CETCs - GREATER THAN 30°F

[85°F]

RO will identify that RCS subcooling is greater than 30°F.

b) Check secondary heat sink:

Total feed flow to SGs - GREATER THAN 350 GPM [450 GPM]

AVAILABLE OR Narrow range level in at least one intact SG - GREATER THAN 12% [18%]

c) Check RVLIS indication - GREATER THAN VALUE FROM TABLE RO will identify that RVLIS Full Range is Greater than 63%.

d) Check any ruptured SG narrow range level - INCREASING IN AN UNCONTROLLED MANNER OR OFFSCALE HIGH BOP will identify that B SG Level is Off-Scale High.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 3 Event No.: 6 Page 46 of 80 Event

Description:

ECA-3.3 Cue: Inability to reduce RCS pressure.

RO 7. STOP ALL BUT ONE CHG PUMP AND PUT IN AUTO RO will secure one of the running charging pumps RO 8. ISOLATE HHSI TO COLD LEGS:

a) Verify the following:

1) CHG pump suctions from RWST - OPEN 1-CH-MOV-1115B 1-CH-MOV-1115D

2) Check CHG pump miniflow recirc valves - OPEN 1-CH-MOV-1275A 1-CH-MOV-1275B 1-CH-MOV-1275C 1-CH-MOV-1373 b) Close HHSI to Cold Leg:

1-SI-MOV-1867C 1-SI-MOV-1867D 1-SI-MOV-1842 END END END - Event is terminated upon reduction of SI flow (i.e. Step 7 of ECA-3.3).

END SCENARIO Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Simulator Setup Initial Conditions:

Recall 75% IC and enter the following malfunctions or recall the IC 313 and implement TRIGGER #30 to activate all passive malfunctions. VERIFY Trigger #30 implemented.

Close the following MOVs:

1-SI-MOV-1864B 1-SI-MOV-1885B 1-SI-MOV-1885C Start 1-SD-P-1B and secure 1-SD-P-1A Set the following EVENT - Event #9 - Event- MS2: MS-TV-101B Closed Open the monitor window and add the following points to it:

ASP_AO_OFF = True SET vsps118a_stuck=true SET vsps111a_stuck=true Enter the following MALFUNCTIONS:

Trigger Type Malfunction Delay Ramp Trigger Ramp Severity/Final Start/Value NI-0703- LOSS OF INSTR PWR TO 10 N/A 1 N/A N/A Manual POWER RNG CHNL N43 RC0703- LOOP 3 NAR RNG THOT 10 0 3 0 -1 Manual INST/RTD FAIL(432A)

RC2402- STEAM GENERATOR B 10 5 5 0 2.5 Manual TUBE RUPTURE minute CA04- CNTMNT INSTRUMENT AIR 0 0 9 0 25 AUTO HEADER LEAK TRIGGER SI0601- SI FLOW TRNSMTR SI-FT- 0 0 30 0 -2 Preload 961 FAILURE Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Enter the following REMOTE FUNCTIONS:

Trigger Remote Function Delay Trigger Ramp Remote Value Type Start Ramp (Auto or Value Time Manual)

CA RCP007- BOTTLE AIR 0 9 2000 5 1.0 Auto PRESSURE FOR RC-PCV-456 (0.0- minutes Trigger 2000 psig)

CA RCP008- BOTTLE AIR 0 9 2000 5 1.0 Auto PRESSURE FOR RC-PCV-455 (0.0- minutes Trigger 2000 psig)

SDP1A_BKRPOS- SD-P-1A BKR 0 30 N/A N/A RACK_OUT Preload 15B6 CUBICLE POSITION SIP1B_BKRPOS- SI-P-1B BKR 0 30 N/A N/A RACK_OUT Preload 14J3 CUBICLE POSITION Enter the following Switch Overrides:

Trigger Override Delay Ramp Trigger Value Type (Auto or Manual)

RM_N16_SEL_NI43- RM N16 NI43 SELECTED 0 N/A 30 ON Preload RM_N16_SEL_NI44- RM N16 NI44 SELECTED 0 N/A 30 OFF Preload TVIA100_CLOSE- TV-IA-100 CLOSE 0 N/A 9 ON Auto Trigger TVIA100_OPEN- TV-IA-100 OPEN 0 N/A 9 OFF Auto Trigger Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Enter the following MOV Control:

Trigger Type Override Delay Trigger Remote Value (Auto or Manual)

SIMOV863B_RACKIN- MOV-SI-863B B LHSI 0 30 RACKOUT Preload Pump to ALT HHSI SIMOV864B_RACKIN- MOV-SI-864B B LHSI 0 30 RACKOUT Preload Pump to Cold Legs SIMOV885B_RACKIN- SI-MOV-1885B LHSI 0 30 RACKOUT Preload Recirc Pump B SIMOV885C_RACKIN- SI-MOV-1885C LHSI 0 30 RACKOUT Preload Recirc Pump B TRIGGER TYPE DESCRIPTION Manual NI43 control power failure 1

3 Manual C Loop Thot RTD fails low 5 Manual B SG tube leakage - 23 gpm 7 Manual MANUAL UPDATE OF TUBE LEAK TO TUBE RUPTURE 9 Manual Loss of containment IA on SI initiation.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components:

1-SI-P-1B 1-SI-MOV-1864B 1-SI-MOV-1863B 1-SI-MOV-1885B 1-SI-MOV-1885C 1-SD-P-1A Verify 1-RM-RI-112 aligned to A/C SG and 1-RM-RI-113 aligned to B SG (magnets).

Verify Ovation System operating.

Reset ICCMs.

Verify Component Switch Flags.

Verify Brass Caps properly placed.

Verify SG PORVs set for 1035 psig.

Verify Rod Control Group Step Counters indicate properly.

Verify Ovation CRT display Advance Charts the following charts:

Master chart advance switch Verify Turbine Thumb Wheel Settings @120 rpm/min and Position 6 Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset)

Verify all ARPs have been cleaned Verify CLEAN copies of the following procedures are in place:

AP-53.00 (2) AP-23.00 AP-16.00 (2) ECA-3.3 E-0 AP-24.00 E-3 AP-4.00 OP-CH-007 Reactivity Sheet OP-ZZ-002 Verify Reactivity Placard is current.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

Ask for and answer questions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Conduct shift turnover:

Provide normal shift turnover materials reflecting the below initial conditions:

Initial Conditions: Unit 1 has been at 75% power for 3 days due to high vibrations on the A high-pressure heater drain pump. The B high-pressure heater drain pump has been placed in service and is currently being monitored by maintenance for proper operation. All systems and crossties are operable with the following exceptions:

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

1-SD-P-1A, A high-pressure heater drain pump, is tagged out for high pump vibrations.

Maintain Unit 1 at 75% power. The ramp to 100% power is scheduled for dayshift tomorrow. Support maintenance as required on 1-SI-P-1B repairs. The current PSA analysis for plant conditions is green for both units.

Current RCS boron is: 853 ppm Unit #2 is at 100% power with all systems and crossties operable.

The last shift performed three 30-gallon dilutions followed by manual make-ups.

When the team has accepted the shift, proceed to the Session Conduct Section.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Session Conduct:

Ensure conditions in Simulator Set-up are established.

Ensure Trigger 30 is active prior to team entering the simulator.

Verify Exam Security has been established and ASP_AO_OFF = True.

EVENT 1 NI-43 loss of control power When cued by examiner, implement Trigger #1 Operations Supervisor/Management:

If contacted, will acknowledge the failure of N-43. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00 and AP-4.00.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge that N-16 monitors are inoperable, due to failure to align to NI-44.

STA:

If contacted, will acknowledge the failure of N-43. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If contacted, will take responsibility for writing the WR and CR.

If directed, will contact reactor engineering.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE I&C/Work Week Coordinator:

If contacted, will acknowledge instrumentation failure and commence investigations and/or efforts to place the channel in trip for NI-43.

If contacted, will acknowledge that N-16 monitors are inoperable, due to failure to align to NI-44.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE EVENT 2 C Loop Thot Failure When cued by examiner, implement Trigger #3 Operations Supervisor/Management:

If contacted, will acknowledge the failure of C Loop Thot RTD. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00.

If contacted, will take responsibility for writing the WR and CR.

STA:

If contacted, will acknowledge the failure of C Loop Thot RTD failure. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

I&C/Work Week Coordinator:

If contacted, will acknowledge instrumentation failure and commence investigations and/or efforts to place the channel in trip.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE EVENT 3 Steam Generator Tube Leak into B Steam Generator When cued by examiner, implement Trigger #5.

Operations Supervisor/Management:

If contacted, will acknowledge RCS leakage into the B SG (if informed). Will also acknowledge any TS information (time permitting) and information related to radiation monitors alarming.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge entry into AP-16.00 and the initiation of AP-24.00.

If asked, OMOC will recommend that air ejector discharge remain aligned to containment.

If asked, OMOC will not recommend bypassing the CP building at this time.

Unit 2 Operator:

When radiation alarms sound on the radiation alarm panel, silence the alarms when directed and report the alarm to the Unit 1 SRO.

If directed perform the associated RM ARP without leaving the confines of the Unit 2 control area. If actions or verifications are required on the Unit 1 side, inform the Unit 1 SRO of the need for an operator to complete the ARP.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE STA:

If contacted, will acknowledge the RCS leakage into the B SG.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal with the exception of the previously identified radiation monitor alarms. He will also state that containment conditions and the electrical conditions are as you see them.

RP:

If asked, HP will recommend that air ejector discharge remain aligned to containment Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE EVENT 4 AP-23.00 Ramp Operations Supervisor/Management:

If contacted, will acknowledge the requirement to ramp the unit due to technical specification requirement.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge entry into AP-23.00.

STA:

If contacted, will acknowledge the requirement to ramp the unit due to technical specification requirement.

If asked, the STA will acknowledge the need to borate and use rods (will acknowledge the team review of OP-RX-010, if performed). If asked to perform the OP-RX-010 review, the STA will state that he is not able to at this time.

After directed, the STA will report that he has reviewed VPAP-2802 and no notifications were required.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE Maintenance:

If contacted, will acknowledge the ramp and support as required.

If contacted, will acknowledge the requirements to sample the RCS.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE EVENT 5 SGTL on B SG Degrades into a SGTR When cued by the evaluator- revise the degradation of RC2402 from 2.5 to 50.

BOOTH: The current degradation of RC2402 is 2.5. Increase the degradation to 50 with no delay and no ramp.

Operations Supervisor/Management:

If contacted, will acknowledge the fact that the tube leak on the B SG has degraded into a tube rupture. Will also acknowledge entry into E-0, the subsequent SI and the need to go to E-3.

If contacted, will acknowledge the isolation of B SG (if informed).

STA:

If asked, will report that he will calculate the time to B fill, time permitting.

If contacted, will enter the control room and commence reviewing status trees and prepare for the transient brief (items are reported as you see them or previously reported).

Field Operators:

If directed, field operators will perform local manipulations (e.g., close 1-MS-120)

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page of 80 SIMULATOR OPERATOR GUIDE EVENT 6 ECA-3.3 This event will automatically occur when the B MSTV closes actuated.

Operations Supervisor/Management:

If contacted, will acknowledge the fact that 1-IA-TV-100 has closed and cannot be opened.

If contacted, will brief operators to assume admin control of turbine building IA to containment.

Field Operators:

If directed, will report that attempts to align outside air to containment were unsuccessful. (either key will not unlock lock, or valves are stuck- since they may attempt various methods to restore containment IA).

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 Time Position Applicants Action or Behavior ATTACHMENT 1 OF E-0 BOP 1. VERIFY FW ISOLATION:

Feed pump discharge MOVs - CLOSED 1-FW-MOV-150A 1-FW-MOV-150B MFW pumps - TRIPPED Feed REG valves - CLOSED SG FW bypass flow valves - DEMAND AT ZERO SG blowdown TVs - CLOSED BOP 2. VERIFY CTMT ISOLATION PHASE I:

Phase I TVs - CLOSED 1-CH-MOV-1381 - CLOSED 1-SV-TV-102A - CLOSED PAM isolation valves - CLOSED 1-DA-TV-103A 1-DA-TV-103B BOP 3. VERIFY AFW PUMPS RUNNING:

a) MD AFW pumps - RUNNING (Time Delayed) b) TD AFW pump - RUNNING IF NECESSARY Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 4. VERIFY SI PUMPS RUNNING:

CHG pumps - RUNNING LHSI pumps - RUNNING 1-SI-P-1B is tagged out and not in service.

BOP 5. CHECK CHG PUMP AUXILIARIES:

CHG pump CC pump - RUNNING CHG pump SW pump - RUNNING BOP 6. CHECK INTAKE CANAL:

Level - GREATER THAN 24 FT Level - BEING MAINTAINED BY CIRC WATER PUMPS BOP 7. CHECK IF MAIN STEAMLINES SHOULD BE ISOLATED:

a) Check if ANY of the following annunciators - HAVE BEEN LIT E-F-10 (High Steam Flow SI)

B-C-4 (Hi Hi CLS Train A)

B-C-5 (Hi Hi CLS Train B)

Identifies annunciators not lit and goes to RNO.

BOP a) RNO - IF annunciator E-H-10 (Hdr/Line SI) NOT LIT, THEN GO TO Step 8.

BOP *8. CHECK IF CS REQUIRED:

a) CTMT pressure - HAS EXCEEDED 23 PSIA Identifies pressure has not exceeded 23 or 17.7 psia and goes to step 10.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0

• 10. BLOCK LOW PRZR PRESS SI SIGNAL:

BOP a) Check PRZR pressure - LESS THAN 2000 psig b) Turn both LO PRZR PRESS & STM HDR/LINE P switches to block c) Verify Permissive Status light C LIT BOP may block the low pressurizer pressure SI signal depending on current RCS pressure.

BOP *11. BLOCK LOW TAVE SI SIGNAL:

a) Check RCS Tave - LESS THAN 543°F b) Turn both HI STM FLOW & LO TAVG OR LP switches to block c) Verify Permissive Status light F LIT BOP may block the low Tave SI signal depending on current RCS temperature.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 NOTE:

CHG pumps should be run in the following order of priority: C, B, A.

Subsequent SI signals may be reset by reperforming Step 12.

BOP 12. VERIFY SI FLOW:

a) HHSI to cold legs - FLOW INDICATED 1-SI-FI-1961 (NQ) 1-SI-FI-1962 (NQ) 1-SI-FI-1963 (NQ) 1-SI-FI-1943 or 1-SI-FI-1943A b) Check CHG pumps - THREE RUNNING c) Reset SI.

d) Stop one CHG pump and out in AUTO e) RCS pressure - LESS THAN 185 PSIG RNO: e) IF one LHSI pump running, THEN GO TO Step 13.

BOP identifies that 1-SI-FI-1961 has failed based on individual loop flows as compared to header flow.

BOP 13. VERIFY TOTAL AFW FLOW - GREATER THAN 350 GPM [450 GPM]

RNO ACTIONS:

IF SG narrow range level greater than 12% [18%] in any SG, THEN control feed flow to maintain narrow range level AND GO TO Step 14.

IF SG narrow range level less than 12% [18%] in all SGs, THEN manually start pumps AND align valves as necessary.

IF AFW flow greater than 350 GPM [450 GPM] can NOT be established, THEN GO TO 1-FR-H.1, RESPONSE TO LOSS OF SECONDARY HEAT SINK.

Evaluators note: actions taken in this step will depend on teams alignment of AFW flow prior to reaching this step.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 14. CHECK AFW MOVs - OPEN BOP will identify that all AFW MOVS are not open and will read the RNO portion of this step and manually align valves as necessary.

BOP 15. INITIATE SI VALVE ALIGNMENT IAW ATTACHMENT 2 Attachment 2 of 1-E-0 is contained in attachment 2 of this guide.

BOP 16. INITIATE VENTILATION ALIGNMENT AND AC POWER ALIGNMENT IAW ATTACHMENT 3 See attached copy of Attachment 3 - contained in attachment 3 of this guide.

Unit 2 Operator will state that Unit 2 is at 100% power (if asked)

Unit 2 will also accept responsibility to complete Attachment 3 if it is given to Unit 2 at the point where differential pressure indications are requested.

All MCR boundary indications will be reported at positive.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 Time Position Applicants Action or Behavior ATTACHMENT 2 of 1-E-0 SRO NOTE: Components previously aligned by SI termination steps, must not be realigned by this Attachment.

ATTACHMENT 2 of 1-E-0 RO/BOP 1. Verify opened or open CHG pump suction from RWST MOVs.

1-CH-MOV-1115B 1-CH-MOV-1115D ATTACHMENT 2 of 1-E-0 RO/BOP 2. Verify closed or close CHG pump suction from VCT MOVs.

1-CH-MOV-1115C 1-CH-MOV-1115E ATTACHMENT 2 of 1-E-0 RO/BOP 3. Verify running or start at least two CHG pumps. (listed in preferred order) 1-CH-P-1C 1-CH-P-1B 1-CH-P-1A ATTACHMENT 2 of 1-E-0 RO/BOP 4. Verify opened or open HHSI to cold legs MOVs.

1-SI-MOV-1867C 1-SI-MOV-1867D ATTACHMENT 2 of 1-E-0 RO/BOP 5. Verify closed or close CHG line isolation MOVs.

1-CH-MOV-1289A 1-CH-MOV-1289B Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 ATTACHMENT 2 of 1-E-0 RO/BOP

6. Verify closed or close Letdown orifice isolation valves.

1-CH-HCV-1200A 1-CH-HCV-1200B 1-CH-HCV-1200C ATTACHMENT 2 of 1-E-0 RO/BOP 7. Verify opened or open LHSI suction from RWST MOVs.

1-SI-MOV-1862A 1-SI-MOV-1862B ATTACHMENT 2 of 1-E-0 RO/BOP 8. Verify opened or open LHSI to cold legs MOVs.

1-SI-MOV-1864A 1-SI-MOV-1864B - power tagged out - valve closed.

ATTACHMENT 2 of 1-E-0 RO/BOP 9. Verify running or start at least one LHSI pump.

1-SI-P-1A 1-SI-P-1B - power tagged out ATTACHMENT 2 of 1-E-0 RO/BOP 10. Verify High Head SI flow to cold legs indicated.

1-SI-FI-1961 1-SI-FI-1962 1-SI-FI-1963 1-SI-FI-1943 or 1-SI-FI-1943A RO/BOP identifies that 1-SI-FI-1961 has failed based on individual loop flows as compared to header flow.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 ATTACHMENT 2 of 1-E-0 RO/BOP 11. IF flow not indicated, THEN manually start pumps and align valves. IF flow NOT established, THEN consult with Shift Supervision to establish another high pressure injection flow path while continuing with this procedure.

Alternate SI to Cold legs Hot leg injection Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMBER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFICATION REVISION PAGE 61 1 of 5

1. Verify or place REFUEL SFTY MOD E switches in NORMAL.

2. Verify ventilation alignment lAW Tables 1 and 2.

TABLE 1 UNIT #1 VENTILATION PANEL EQUIPMENT MARK NUMBER STATUS 0 1-VS-F-4A & B OFF 0 1-VS-HV-1A& B OF F 0 1-VS-F-BA & B OF F 0 1-VS-F-9A & B GREEN 0 1-VS-F-59 GREEN 0 1-VS-F-6 OF F 0 1-VS-F-39 GREEN 0 1-VS-F-7A & B GREEN 0 1-VS-HV-5 GREEN 0 1-VS-F-56A & B GREEN 0 1-VS-F-40A & B GREEN 0 1-VS-HV-4 OF F 0 2-VS-F-40A or B RED 0 2-VS-HV-4 OF F Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POW ER V ERIFICATION REV ISION PAG E 61 2 of 5 TABLE 2 VNTX PANEL EXP ECTED MARK NUMB ER EQUIPM ENT RESPONS E NOT OBTAINED STATUS D a. AOO-VS-1 07A & B RED D a.Place AUX BLDG CENTRAL AREA MOD E AOD-VS-1 08 GREEN switch to FILTER.

D b. MOD-V S-100A& B RED D b.' Place MOO-VS-1 00A to FI LTER.

AOD-VS-1 06 GR EE N

• Place MOO-VS-100B to FILTER.

D c. MOD-VS-200A & B GR EE N D c.

• Place MOO-VS-200A to UN Fll TER.

AOD-VS-206 RED

• Place MOO-VS-200B to UNFllTER.

D d. AOD-VS-1 03A & B GR EE N D d.* Place AOO-VS-103A in UN FILTER.

AOD-VS-1 04 GR EE N

• Place AOO-VS-1038 in UNFI LTER.

• Place AOO-VS-104 in FI LTER.

D e. AOO-VS-1 01A & B GR EE N D e.Place AOO-VS-101A and 101 B in AOD-VS-1 02 GR EE N UNFI LTER.

D f. AOD-VS-1 11A & B GR EE N D f.Place COMB INE CONTAINM ENT EXHAUST in ISOLATE.

D g. AOD-VS-110 GR EE N D g.Place AOO-VS-109A and 109B in FI LTER.

D h. AOO-V S-1 12A& B GR EE N D h.' Place AOO-VS-112A in CLOS E.

• Place AOO-VS-112B in CLOS E.

D i. MOD-V S-58A & B RED D i.Start 1-VS-F-58A and 1-VS-F-58B.

1-VS-F -58A & B RED

3. Verify filtered exhaust flow: (as read on FI-VS-117A and FI-VS-117B)

D* Total flow - GR EATER THAN 32400 cfm AND D* Flow through each filter bank - LESS THAN 39600 cfm Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-0 3 AUXILIARY VENTILATION AND AC POW ER V ERIFICATION REV ISION PAG E 61 3 of 5

4. Check all Station Service Buses - ENERGIZED. !E NOT, TH EN initiate 1-AP-10.07 , lOSS OF UNIT 1 POWER.

5. Check annunciator VSP-J2 - LIT.

6. Check Unit 1 RSST l Te time delay bypass light - LIT.

7. Verify stopped or stop 1-VS-AC-4.

8. Place 1-VS-43-VS103X, MeR ISOLATION switch to the OFF position.

9. Verify closed or close MeR isolation dampers.

D* 1-VS-MOO-103A D* 1-VS-MOO-103B D* 1-VS-MOO-103C D* 1-VS-MOO-103D

10. _ !E any MeR PDI on Unit 2 Vent Panel NOT indicating positive pressure, TH EN place the following switches to OPEN.

D* 1-V5-50V-322, EMERG AIR DUMP TO CONTROL RM D* 1-V5-50V-100, EMERG AIR DUM P TO C.R.

NOTE: The timer should be set for 50 minutes, minus the number of minutes since Safety Injection initiation .

11 . Set timer. WHEN 51 has been in progress for 50 minutes (when timer goes off), THEN immediately periorm Step 18 to start one Emergency Supply Fan.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFI CATION REVISION PAG E 61 4 of 5

12. Check readings on the following Differential Pressure Indicators - POSITIVE PRESSURE INDICATED.

D* PDI -VS-100, D.P. -U 1CRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-101, D.P. -U1RRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-200 , D.P. -U2CRlU2TB (Unit 2 Turbine Ventilation Pa nel)

D* PDI -VS-20 1, D.P. -U2RRlU2TB (Unit 2 Turbine Ventil ation Pa nel)

D* 1-VS-PDI -118 (Un it 1 Computer Room)

D* 1-VS-PDI -116 (Near Unit 1 Semi-Vital Bus)

D* 2-VS-PDI -215 (Un it 2 AC Room )

D* 2-VS-PDI -206 (Near Unit 2 Semi-Vital Bus )

13. !f any reading NOT positive, THE N initiate Attachment 6 to secure MeR boundary fans .

14. Verify initiated or initiate O-AP-SO.OO , OPPOSITE UN IT EMERGENCY.

15. Verify the following Me R and ESGR air conditioning equ ipment operating.!E. NOT, TH EN start equipment within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> lAW the appropriate subsection of O-OP-VS-006, CONTROL ROO M AND RELAY ROOM VENTI LATION SYSTEM.

D* One Control Room chiller D* One Un it 1 Control Room AHU D* One Un it 2 Control Room AHU D* One Un it 1 ESGR AHU D* One Un it 2 ESGR AHU

16. _ !E. both of the following conditions exist, TH EN verify that Load Shed is activated.

D* Unit 2 - SUPPLI ED BY RSST D* Unit 2 RCPs - RUNNING

17. !E. Load Shed is required and not activated, THEN initiate O-AP-10.10 , LOSS OF AUTO LOAD SHED.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY V ENTILATION AND AC POWER V ERIFI CATION REV ISION PAG E 61 5 of 5 CAUTION: Only one Emergency Supply Fa n must be started in the following step.

Chilled Water flow to the in-service Unit 1 MeR AHU must be throttled to at least 15 gpm w hen the Emergency Supply fan is started.

Chilled Water flow to the in-service Unit 2 MeR AHU must be throttled to at least 25 gpm when the Emergency Supply fan is started.

An Emergency Supply Fa n must not be started if the filter is wet.

18. WHEN 51 has been in progress for 50 minutes (when timer goes off) , THEN immediately start ON E Emergency Supply Fa n JAW the following : (1-VS-F-41 or 2-VS-F-41 preferred)

a. lE 1-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104A, CO NT RM EMERG SU P MOD.

2. Start 1-VS-F-41.

b. lE 2-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 2-VS- MOD-204A, CO NT RM EMERG SU P MOD.

2. Start2-VS-F-4 1.

c. lE 1-VS-F-42, CONT RM EMERG SUP FAN , will be used, TH EN perform the following substeps.

1. Open 1-VS- MOD-104B, CO NT RM EMERG SU P MOD.

2. Start 1-VS-F-42.

d. lE 2-VS-F-42, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 2-VS- MOD-204B, CO NT RM EMERG SU P MOD.

2. Start 2-VS-F-42.

e. Adjust Chilled Water flow to MCR AHUs lAW Step 18 Caution.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-E-0 Attachment 10 ATTACHMENT 10 of 1-E-0 This attachment can be performed at any time during 1-E-0. It is a pre-emptive action, so it is not required to be performed.

BOP 1. Verify SI is in progress. IF SI is NOT in progress, THEN return to procedure step in effect.

RO identifies that SI is in progress.

ATTACHMENT 10 of 1-E-0 BOP 2. Identify Ruptured SG by one of the following conditions:

Unexpected rise in any SG Narrow Range level High radiation from any SG MS line monitor High radiation from any SG Blowdown line RO with SRO concurrence identifies B SG as the ruptured SG ATTACHMENT 10 of 1-E-0 BOP 3. Verify running or start AFW Pumps, as necessary 1-FW-P-3A 1-FW-P3B 1-FW-P-2 ATTACHMENT 10 of 1-E-0 BOP 4. When ruptured SG Narrow Range level is greater than 12%, then isolate feed flow to ruptured SG by closing SG AFW Isolation MOVs:

SG B, 1-FW-MOV-151C and 1-FW-MOV-151D RO closes 1-FW-MOV-151C/D when SG level is greater than 12% Narrow Range.

Partial completion of the critical task (WOG E-3A) to isolate the SG is accomplished by performance of this step.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-E-0 Attachment 10 ATTACHMENT 10 of 1-E-0 BOP 5. Select the ruptured SG AFW MOVs using the following switches:

H TRAIN DISABLE SELECTOR SWITCH J TRAIN DISABLE SELECTOR SWITCH BOP ATTACHMENT 10 of 1-E-0

6. Defeat the auto-open signal for the selected MOVs by placing the following key switches in the DISABLE SELECTED position:

H TRAIN AUTO OPEN ENABLE SWITCH J TRAIN AUTO OPEN ENABLE SWITCH ATTACHMENT 10 of 1-E-0 BOP CAUTION: At least one SG must be maintained available for RCS cooldown.

7. Locally close steam supply valve to the TD AFW pump:

1-MS-120 BOP directs field operator to close 1-MS-120.

The field operator will acknowledge the requirement to close 1-MS-120. The field operator will later report that 1-MS-120 is closed.

Partial completion of the critical task (WOG E-3A) to isolate the SG is accomplished by performance of this step.

ATTACHMENT 10 of 1-E-0 BOP 8. Control Feed Flow to the SG IAW the following requirements:

Minimum AFW flow is 350 gpm with SI initiated, until one SG Narrow Range level is greater than 12%

When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22%

and 50%.

o SG A, 1-FW-MOV-151E and 1-FW-MOV-151F o SG C, 1-FW-MOV-151A and 1-FW-MOV-151B Critical Task: [WOG E-3A] Isolate feedwater flow into and steam flow from the ruptured SG before a transition to ECA-3.1 occurs (KOA).

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-OP-CH-020 Actions Time Position Applicants Action or Behavior BOP Obtains a copy of 1-OP-CH-020 BOP reviews the procedure and may provide the SRO a brief on his intended actions.

Initial Conditions:

3.1 Verify Normal Letdown is not in service.

3.2 Verify Excess Letdown is not in service.

Precautions and Limitations:

4.1 Letdown Ion Exchangers should be initially bypassed when Letdown is returned to service to avoid a temperature or Boron transient. This bypass may not be necessary when Letdown has been out of service for a short duration.

4.2 To make certain that the design flow of 60 gpm will not be exceeded, the Cation Bed Demin will not be in service when putting in Normal Letdown.

4.3 Letdown Pressure Control Valve, 1-CH-PCV-1145, shall be fully open before an orifice isolation valve is opened.

4.4 Valve 1-CC-TCV-103 shall be monitored for proper operation as soon as letdown flow is established.

BOP reviews and initials applicable sections.

5.1 Placing Letdown in Service Following Auto or Manual Isolation CAUTION: To make certain that the design flow of 60 gpm will not be exceeded, the Cation Bed Demin will not be in service when putting in Normal Letdown.

BOP 5.1.1 Verify removed or remove the Cation Bed Demin from service IAW 1-OP-CH-012.

From the initial conditions, recalls that the Cation Bed is NOT in service.

BOP 5.1.2 Verify PRZR level is greater than 14.4 percent on selected channels.

Identifies that pressurizer level is approximately 53%

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-OP-CH-020 Actions 5.1.3 Verify Annunciator 1C-E8, PRZR LO LVL HTRS OFF &

LETDOWN ISOL, is NOT LIT.

Identifies that 1C-E8 is not lit.

5.1.4 Verify or place at least one CC pump is in service.

Identifies that at least on CC pump is in service.

5.1.5 Verify closed or close all of the following valves.

1-CH-LCV-1460A, LETDOWN LINE ISOL 1-CH-LCV-1460B, LETDOWN LINE ISOL 1-CH-HCV-1200A, LETDOWN ORIFICE ISOL 1-CH-HCV-1200B, LETDOWN ORIFICE ISOL 1-CH-HCV-1200C, LETDOWN ORIFICE ISOL Closes or verifies closed the valves listed above.

5.1.6 Verify open or open both of the Letdown Line Trip valves.

1-CH-TV-1204A, LETDOWN LINE I/S TV 1-CH-TV-1204B, LETDOWN LINE O/S TV 5.1.7 Verify or adjust 1-CH-PCV-1145, LETDOWN LINE PRESS CNTRL, setpoint as required. (Approximately 5.0 for 300 psig) 5.1.8 Verify or place 1-CH-PCV-1145, LETDOWN LINE PRESS CNTRL, in MAN and OPEN (0% demand).

Places 1-CH-PCV-1145 in manual and reduces demand to 0%.

5.1.9 Verify or place 1-CH-TCV-1143, LETDOWN LINE DIVERT, in the DIVERT position. Enter N/A if Shift Supervision determines that IXs are to remain in service.

SRO directs or RO requests to leave 1-CH-LCV-1143 in its current position, as the IXs will remain in service. RO will N/A this step.

5.1.10 Verify or place 1-CH-HCV-1244, DEBOR DEMINS DIVERT, in the NORMAL position. Enter N/A if Shift Supervision determines that IX is to remain in service.

SRO directs or RO requests to leave 1-CH-HCV-1244 in its current position, as the IXs will not be placed in service. RO will N/A this step.

5.1.11 Verify or place 1-CH-LCV-1115A, VCT LEVEL DIVERT, in AUTO and is aligned to the VCT (red light LIT).

Verifies 1-CH-LCV-1115A is in AUTO and the associated red light is lit.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-OP-CH-020 Actions NOTE: Flashing in the Non-Regen Heat Exchanger is indicated by unstable letdown flow as indicated on 1-CH-FI-1150.

5.1.12 Initiate Normal Charging and Letdown by performing the following substeps.

a. Open 1-CH-FCV-1122, CHG FLOW CNTRL, and establish a charging flow of greater than or equal to 45 gpm as indicated on 1-CH-FI-1122A, CHG LINE FLOW.

Raises demand on 1-CH-FCV-1122 to establish approximately 45-gpm charging flow.

b. Open both of the following Letdown Line Isolation valves.

1-CH-LCV-1460A, LETDOWN LINE ISOL 1-CH-LCV-1460B, LETDOWN LINE ISOL Opens both letdown isolation valves.

NOTE: If RCS pressure is low, both 60 gpm orifices and all three may need to be placed in service.

NOTE: The 45 gpm orifice should normally be placed in service first.

NOTE: Care must be taken to ensure letdown flow does not exceed 125 gpm.

Alarm setpoint for 1D-F4, LO PRESS LETDOWN LINE HI FLOW, is 130 gpm.

c. Open one of the following valves and place the control switch in AUTO.

1-CH-HCV-1200A, LETDOWN ORIFICE ISOL 1-CH-HCV-1200B, LETDOWN ORIFICE ISOL 1-CH-HCV-1200C, LETDOWN ORIFICE ISOL Opens 1-CH-HCV-1200A and places control switch in AUTO.

d. Verify 1-CH-FI-1150, LETDOWN LINE FLOW, indicates proper flow rate based on orifice placed in service.

e. Verify 1-CC-TCV-103, NRHX OUTLET TEMP CNTRL, is controlling in AUTO as indicated by output demand.

f. Verify 1-CH-TI-1144, NON-REGEN HX OUTLET TEMP, is at approximately 100°F.

NOTE: If two additional orifices will be placed in service at this time, only one may be placed in service at a time and flow rates must be allowed to stabilize before the third orifice is placed in service.

5.1.13 IF additional orifices are desired at this time, THEN place additional Letdown Orifices(s) in service IAW the following substeps. Otherwise, enter N/A.

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-OP-CH-020 Actions SRO directs or RO requests placing two letdown orifices in service (45 gpm and 60 gpm).

a. Open and place in AUTO the following Letdown Orifice Isolation valves, as required.

____ 1-CH-HCV-1200A, LETDOWN ORIFICE ISOL

____ 1-CH-HCV-1200B, LETDOWN ORIFICE ISOL

____ 1-CH-HCV-1200C, LETDOWN ORIFICE ISOL

b. Verify 1-CH-FI-1150, LETDOWN LINE FLOW, indicates correct flow for orifices in service.

5.1.14 Slowly close 1-CH-PCV-1145 to obtain letdown line pressure between 300 psig and 350 psig as indicated on 1-CH-PI-1145, and then place in AUTO.

Slowly increases demand on 1-CH-PCV-1145 until letdown pressure indicates approximately 300 psig.

5.1.15 Verify Letdown parameters are normal for existing plant conditions and that there are no signs of flashing in the letdown system. Adjust charging flow as required.

5.1.16 IF Ion Exchangers are NOT in service, THEN return Letdown Ion Exchangers to service IAW 1-OP-CH-011. Otherwise, enter N/A.

5.1.17 Manipulate charging flow as required for existing plant conditions.

Adjusts charging flow to return pressurizer level to program, but does not decrease it such that letdown flashes.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Facility: Surry Scenario No.: 4 Op-Test No.: 2009-301 Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 is at 100% power and has been since the last refueling outage. All systems and crossties are operable with the following exception:

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

Turnover:

Maintain Unit 1 at 100% power. Support maintenance as required on 1-SI-P-1B repairs. The current PSA analysis for plant conditions is green for both units.

Event Malf. Event Type* Event No. No. Description 1 TBD N - RO/SRO Fill the PRT to normal operating level in accordance with 1-OP-RC-011 (PRT Operations) 2 TBD I - BOP/SRO Channel III of steam generator level will fail high on A S/G. BOP will assume and maintain manual level control of A main feed TS - SRO regulating valve.

3 TBD TS - SRO Bus 1H 480v will fault resulting in the H train of ESF components.

This will result in no available LSHI pumps and place the unit in a 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown.

C - All Team will commence a unit shutdown due to electrical failure in accordance with AP-23.00 (Rapid Load Reduction).

4 TBD M - All The #1 seal will fail on 1-RC-P-1A. The team will enter AP-9.00 (RCP Abnormal Conditions) and trip the reactor and secure 1-RC-P-1A.

C - BOP/SRO On the reactor trip one motor driven auxiliary feedwater pump will fail to auto-start (will start manually).

5 TBD M - All Following the reactor trip and stabilization, RCS leakage will develop and increase to a SBLOCA.

The team will return to E-0 and upon initiation of safety injection, C - RO/SRO both HHSI to Tc valves will fail to operate, requiring the team to establish another source of HHSI flow to the core. Additionally, no LHSI pumps will be available and require entry into ECA-1.1, Loss of Emergency Recirculation.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor, (TS) Technical Specifications Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Surry 2009- NRC Exam Scenario #4 Event #1 The operating team will fill the pressurizer relief tank to normal operating level in accordance with 1-OP-RC-011, PRT Operations, after assuming the watch. This evolution will be briefed prior to turnover. The unit supervisor will direct the RO to perform these actions.

Verifiable Action: (RO) Manipulation of PRT fill valve to obtain desired level.

Event #2 The A SG controlling level channel fails high, causing actual SG level to go down. The BOP will take manual control of A SG Main Feed Regulating Valve (MFRV). The SRO should enter 0-AP-53.00 and review Technical Specifications. A SG level deviations will occur on subsequent ramp of unit (Event 4).

Verifiable Action: (BOP) Place A MFRV in manual.

Technical Specification:

Table 3.7-1 item 12 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-2 item 3.a. OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-3 item 3.a OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Event #3 A fault will occur on the 1H 480v load distribution center. Since these components have control power supplied from station 125v DC, light indication will be available for all affected components.

This event is complicated by the unavailability of 1-SI-P-1B, since now neither LHSI pump is available. The SRO should implement 1-AP-10.07, Loss of Unit One Power, and review Technical Specifications.

Due to technical specification requirement to shutdown the unit, the SRO will implement 0-AP-23.00, Rapid Load Reduction and commence a ramp to hot shutdown.

Verifiable Actions: (RO) Utilizes the control rods and boric acid during the ramp.

(BOP) Will operate the turbine during the load decrease.

Technical Specification:

3.0.1 -- 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown due to inability to comply with section 3.3.

3.0.1 - 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown due to inability to comply with section 3.16 2

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Event #4 The #1 seal will fail on 1-RC-P-1A, A Reactor Coolant Pump, as indicated by high seal leak-off flow. The team will enter AP-9.00 (RCP Abnormal Conditions) and trip the reactor and secure 1-RC-P-1A. On the reactor trip one motor driven auxiliary feedwater pump will fail to auto-start (will start manually).

Verifiable Actions: (RO) Manually trip the reactor (BOP) Secure 1-RC-P-1A and close the associated seal leak-off isolation valve.

(BOP) Start 1-FW-P-3A, Auxiliary Feedwater Pump Event #5 Following the reactor trip and stabilization, RCS leakage will develop inside containment and increase to a SBLOCA. The team will return to E-0 and upon initiation of safety injection, both HHSI to Tc valves will fail to operate, requiring the team to establish another source of HHSI flow to the core. As RCS pressure decreases, RCP trip criteria will be met, thus requiring the RCPs to be tripped.

Following the completion of 1-E-0 the team will transition to 1-E-1 and then to 1-ECA-1.1 due to the loss of both LHSI pumps.

Verifiable Actions: (RO) Manually initiate safety injection and trip the RCPs (RO) Manually align safety injection to flow HHSI system to core.

Critical Task: [WOG E-0I] Manually align an alternate Safety Injection Flow path from at least one charging pump before RCS subcooling is less than 30

°F (PSA).

Actions required to accomplish:

Opens 1-SI-MOV-1842 or Aligns HHSI flow to the hot leg Critical Task: [WOG E-1C] Trip all RCPs within 5 minutes of reaching RCP Trip and Miniflow recirc criteria (KOA).

Actions required to accomplish:

Trip 1-RC-P-1A Trip 1-RC-P-1B Trip 1-RC-P-1C 3

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Initial 100% Power IC, MOL - Cycle 23. The unit has been at 100% power since the last Conditions: refueling outage.

Pre-load malfunctions:

o Disable 1-SI-MOV-1867D switch and auto open feature o Set 1-SI-MOV-1867C to thermal on opening o Disable autostart of 1-FW-P-3A o Drain PRT to low level alarm.

Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-SI-P-1B tagged out for planned maintenance Turnover: Maintain full power operation. Unit 2 is at 100% power with all systems operable.

When turnover complete, fill the PRT to normal operating level in accordance with 1-OP-RC-011, PRT Operations.

All systems and crossties are operable with the following exceptions:

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

Event Malf. #s Severity Instructor Notes and Required Feedback 1 N/A N/A Fill the PRT to normal operating level.

2 FW1303 N/A Channel III level transmitter failure (high) on A SG 3 EL1201 N/A Loss of 1H 480v emergency bus and unit power reduction.

4 RC1201 N/A #1 seal failure on 1-RC-P-1A 5 RC04 N/A Seal failure develops into SBLOCA (with no recirc capability).

4

SHIFT TURNOVER INFORMATION OPERATING PLAN:

The Unit has been at 100% power since the last refueling outage.

1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

Unit 2 is at 100% Power with all systems and crossties operable.

Maintain full power operation.

Fill the PRT to normal operating level after assuming watch responsibilities.

5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 1 Page 6 of 72 Event

Description:

Fill the PRT to normal operating level in accordance with 1-OP-RC-011.

Cue: When team ready.

Time Position Applicants Action or Behavior RO Precautions and limitations of 1-OP-RC-011:

4.1 Extreme care must be used when the N2 transfer valves are being opened.

The large P between the PRT and the N2 makeup source can generate a very high flow rate.

4.2 The Process Vent and Vent Vent radiation monitors must be watched closely when PRT vent/purge flow is being established.

4.3 If using an SI Accumulator as the nitrogen source for the PRT, SI Accumulator pressure will decrease. To prevent making the SI Accumulator inoperable, pressure must be maintained above the 600 psia limit specified in Tech Spec 3.3.A.2 when the Accumulator is required to be operable.

4.4 The hose used in Subsections 5.7 and 5.8 to vent the PRT to the Overhead should be stainless steel flex braid rated for at least 150 psig.

4.5 HP must be notified concerning the status of the PRZR PORVs to account for the additional gas from the RCS if the PORVs are open. (Reference 2.4.2) 4.6 To assure accurate accounting of discharged radioactivity, Health Physics personnel must periodically sample Vent-Vent or Process Vent as appropriate during the release of a PRT. HP must be notified prior to the start OR reinitiation of such a release (Reference 2.4.1).

4.7 If the PRT gas sample indicates Xe-133 activity greater than or equal to 5 x 10-2 Ci/ml, the release shall be made to the Overhead Gas System.

4.8 If any unisolated leakage path exists into the PRT, the release shall be made to the Overhead Gas system.

4.9 Values for PRT pressure drop in Subsection 5.6 may not be exceeded.

These limits ensure Hydrogen concentration in the Process Vent remains below the 4% flammability limit.

4.10 Large changes in PRT level can result in an undesirable atmosphere in the PRT gas space due to PG O2 off-gassing as PRT temperature changes. (Reference 2.4.7) 6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 1 Page 7 of 72 Event

Description:

Fill the PRT to normal operating level in accordance with 1-OP-RC-011.

Cue: When team ready.

RO 5.1.1 Compare PRT parameters with the following table.

RO determines that level is low.

RO 5.1.2 Based on present conditions, perform the required subsection to adjust PRT parameters. () Enter N/A for the subsections that will not be performed.

Based on low level, RO determines that subsection 5.2 needs to be performed.

RO Note prior to step 5.2.1:

NOTE: Large changes in PRT level can result in an undesirable atmosphere in the PRT gas space due to PG O2 off-gassing as PRT temperature changes. (Reference 2.4.7)

RO 5.2.1 Notify the STA that the Unit 1 PRT will be filled.

7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 1 Page 8 of 72 Event

Description:

Fill the PRT to normal operating level in accordance with 1-OP-RC-011.

Cue: When team ready.

RO 5.2.2 Record initial PRT level. ____________ %

Enter N/A if filling PRT to support venting / purging evolutions.

RO 5.2.3 Open 1-RC-TV-1519A, PRZR RELIEF TK PRI GRADE WTR OTSD TRIP VV.

RO 5.2.4 Verify closed or close 1-RC-HCV-1523, PRT DRAIN.

RO 5.2.5 Open 1-RC-HCV-1519B, PRT MAKEUP, to fill the PRT.

RO Note prior to step 5.2.6:

NOTE: When the Unit is in CSD or RSD, the PRT may be filled to 95% to assist in venting/purging the PRT to the Vent/Vent or Process Vent System.

RO 5.2.6 WHEN the desired level is reached, THEN close 1-RC-HCV-1519B.

RO 5.2.7 Record final PRT level. ____________ %

Enter N/A for Steps 5.2.7 and 5.2.8 if PRT was filled to support multiple venting / purging evolutions.

RO 5.2.8 IF PRT level increased by 5% or greater, THEN notify Chemistry to sample PRT gas space. Otherwise, enter N/A. (Reference 2.4.7)

RO 5.2.9 At the direction of Shift Supervision, close 1-RC-TV-1519A.

Otherwise, enter N/A.

END END END EVENT 1 8

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 2 Page 9 of 72 Event

Description:

A steam generator level channel III (controlling) fails high.

Cue: Evaluators cue Time Position Applicants Action or Behavior BOP Diagnoses channel failure with the following indications/alarms:

Alarms:

1H-A5 STM GEN 1A HI LVL 1H-G5 STM GEN 1A LVL ERROR 1F-C10 STM GEN 1A HI LVL CH 3 Indications:

1-FW-FCV-1478 respond to level channel failure by closing in automatic SRO Enters 0-AP-53.00, Loss of Vital Instrumentation / Controls.

RO [1] VERIFY REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Verifies Channel I and II are NORMAL.

BOP [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION BOP takes manual control of A SG feed reg valve and increases demand (FF > SF) to restore level to program.

SRO The team will hold a transient brief. During the brief the failure of 1-FW-LI-1476 will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

RO 3. VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%.

RO will identify that reactor power, by T, is less than 100%.

9

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 2 Page 10 of 72 Event

Description:

A steam generator level channel III (controlling) fails high.

Cue: Evaluators cue SRO NOTE:

Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 14.

• 4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP.

SG NR Level, Step 8 RO The RO will identify that 1-FW-LT-1476 has failed high.

BOP Caution prior to step 8:

CAUTION: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 2 Page 11 of 72 Event

Description:

A steam generator level channel III (controlling) fails high.

Cue: Evaluators cue BOP 8. CHECK STEAM GENERATOR LEVEL CONTROL INSTRUMENTS -

NORMAL Steam Pressure Steam Flow Feed Flow Steam Generator Level Determines CH III Steam Generator Level instrumentation for A SG is NOT normal.

Step 8. RNO IF the selected steam flow, steam pressure, or feed flow input to the SG Water Level Control system has failed, THEN do the following:

SRO Determines that none of the listed instruments are affected and continues in the RNO column.

BOP IF SG Level Channel III has failed, THEN do the following:

a) Place the associated Feed Reg Valve in MANUAL.

b) IF manual control of Feedwater is inoperable, THEN do the following:

(Not Applicable)

1) Control SG level with Feedwater Isolation MOVs.

2) Consult with the Shift Manager concerning the need to place the MFRV on the jack.

c) Control SG level at program level.

d) Main Feed Reg Valve Bypass Valves may be used for fine control of SG level.

11

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 2 Page 12 of 72 Event

Description:

A steam generator level channel III (controlling) fails high.

Cue: Evaluators cue Step 6. RNO (Continued)

Perform follow-up actions:

SRO a) Consult with Shift Manager on need to initiate ( )-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

SRO b) Refer to the following Tech Spec 3.7 items:

Table 3.7-1, 12 and 17 Table 3.7-2, 1.c, 1.e, and 3.a Table 3.7-3, 2.a, and 3.a SRO SRO should determine the follow Technical Specification implications for this failure:

Technical Specification:

Table 3.7-1 item 12 OA #6 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-2 item 3.a OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)

Table 3.7-3 item 3.a OA #20 (place channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />) c) Refer to Attachment 1.

SRO d) IF no other instrumentation failure exists, THEN GO TO Step 14.

SRO SRO 14. Review OPT-RX-001, Rx Power Calorimetric using PCS computer program, to determine operability of calorimetric and need to perform OPT-RX-007, Shift Average Power Calculation.

If the FRV bypass valves are manipulated, the `SRO/RO determines that OPT-RX-001 is impacted and OPT-RX-007 will need to be performed.

If it appears that the SRO/RO will take action to perform 1-OPT-RX-007, the Unit 2 Operator will state that he will have the fourth RO perform 1-OPT-RX-007.

12

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 2 Page 13 of 72 Event

Description:

A steam generator level channel III (controlling) fails high.

Cue: Evaluators cue SRO 15. CHECK FAILED INSTRUMENT - IS A REGULATORY GUIDE 1.97 VARIABLE (Go to Step 17 if not Reg. Guide 1.97)

SRO directs STA to review Reg. Guide 1.97. The STA will report that 1-FW-LT-1476 is a Reg. Guide 1.97 component.

SRO 16. REVIEW CEP 99-0029, REG GUIDE 1.97 OPERABILITY, REPORTABILITY, AND ALTERNATE INDICATIONS SRO directs STA to review CEP 99-0029. The STA will report that Reg. Guide 1.97 only requires one channel of SG Level indication per steam generator and no actions are required.

SRO 17. Review the following:

TS 3.7 VPAP-2802 TRM Section 3.3, Instrumentation SRO directs STA to review VPAP-2802 and TRM Section 3.3. The STA reports he has completed these reviews and there is no impact.

SRO 18. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION - EXISTS The team will identify that no additional failures exist, proceed to the RNO section, and this will direct the team to Step 20.

SRO 20. PROVIDE NOTIFICATIONS AS NECESSARY:

Shift Supervision OMOC STA (PRA determination)

I&C END END END EVENT 2 13

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 14 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue Time Position Applicants Action or Behavior TEAM Identifies power loss based on the following alarms:

Alarms:

1K-G5 480V EMERG BUS 1H NORM SUP AUTO TRIP Indications:

PCS indication of no voltage present on 1H 480v bus.

PCS indication of 1H supply breaker OPEN 14H-1 At this point the SRO may direct enter 1-AP-10.07 (Loss of Unit One Power) or perform the ARP 1K-G5.

ARP 1K-G5 BOP 1. CHECK BREAKER(S) - OPEN 15H7 14H1 14H15 ARP 1K-G5 BOP 2. CHECK BREAKER(S) - OPENED FOR PLANNED EVOLUTION Step 2 RNO actions- GO TO step 4.

ARP 1K-G5 BOP 4. CONTACT ELECTRICIANS TO DETERMINE CAUSE OF BREAKER MALFUNCTION SRO SRO may elect to contact electricians directly, or have one RO or Desk SRO perform this task.

ARP 1K-G5

5. ATTEMPT TO RESTORE 480V BUS IAW 1-AP-10.07, LOSS OF UNIT 1 POWER SRO enters AP-10.07 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 15 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue ARP 1K-G5 BOP 6. PROVIDE NOTIFICATIONS AS NECESSARY:

OMOC STA Shift Supervision Electrical Department SRO The team will hold a transient brief. During the brief the loss of 1H 480v emergency bus will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

At this point the SRO may call a 6/30 (T.S. 3.0.1) clock due to inoperability of 1-SI-P-1B (tagged out) and 1-SI-P-1A not having a power supply.

Technical Specification:

3.0.1 -- 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown due to inability to comply with section 3.3.

3.0.1 - 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown due to inability to comply with section 3.16 The SRO will make a determination during the following steps that a unit shutdown will be required (after report that bus is faulted). The team would then be expected to enter AP-23.00 (Rapid Load Reduction) at which point AP-10.07 may be delegated to a RO or placed on hold to allow both ROs to be engaged in the ramp. AP-23.00 actions immediately follow AP-10.07 actions in this guide.

1-AP-10.07 SRO Notes prior to step 1:

NOTE:

If both units are affected, local actions should be coordinated.

If the Semi-Vital Bus is not energized, it may be necessary to start the third Condensate Pump and reduce turbine load.

The AAC Diesel Generator will automatically start if an undervoltage occurs on Transfer Buses D and F.

This is an OC-93 applicable procedure.

With Degraded Voltage or Undervoltage on 2J Bus, or a loss of Unit 2B DC Bus, Breaker 15J3 will not close automatically, except with a valid Unit 1 SI signal.

EPIPs may be applicable.

15

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 16 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 1-AP-10.07 BOP 1. CHECK UNIT - BLACKOUT HAS OCCURRED Transfer Buses D and F - DEENERGIZED AND All Station Service Buses - DEENERGIZED Step 1 RNO actions: GO TO step 37 1-AP-10.07 BOP 37. CHECK THE FOLLOWING BREAKERS - ANY OPEN:

15D1 OR 15F1 OR 15H8 OR 15J8 Step 37 RNO actions:

IF any 480V Emergency Bus deenergized, THEN GO TO Step 52.

IF all 480V Emergency Buses energized, THEN GO TO Step 71.

1-AP-10.07 SRO Note prior to step 52:

NOTE: If two CHG pump CC pumps or two CHG pump SW pumps are running, one pump should be secured and placed in AUTO.

1-AP-10.07 RO 52. CHECK CHG PUMP AUXILIARIES:

CHG pump CC pump - RUNNING CHG pump SW pump - RUNNING 1-AP-10.07 BOP 53. CHECK SEMI-VITAL BUS - POWER HAS BEEN INTERRUPTED Step 53 RNO actions: GO TO step 56 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 17 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 1-AP-10.07 RO 56. VERIFY IA SYSTEM ANNUNCIATORS - NOT LIT:

1B-E6, IA LO HDR PRESS/IA COMPR 1 TRBL 1B-G5, INST AIR DRYER TRBL 1B-E5, SA COMPR TRBL 1B-F5, CTMT INST AIR COMPR TRBL 1-AP-10.07 RO 57. VERIFY UNIT CONDITIONS a) PRZR level - STABLE b) PRZR pressure - STABLE c) RCS TAVE - STABLE 1-AP-10.07 BOP

58. VERIFY VENTILATION FANS - OPERATING

• Auxiliary BLDG Central

• Safeguards 1-AP-10.07 BOP Note prior to step 59:

NOTE: Any MCR Chiller that was operating prior to the loss of power will have tripped and the compressor will not automatically restart. The Chiller must be shutdown and then restarted IAW 0-OP-VS-006, Control Room and Relay Room Ventilation System.

1-AP-10.07 BOP 59. VERIFY THE FOLLOWING MCR VENTILATION EQUIPMENT -

OPERATING:

One Control Room Chiller (Two Control Room Chillers if SI initiated on either unit AND any MCR or ESGR temperature indicator greater than 84°F)

One Unit 1 Control Room AHU One Unit 2 Control Room AHU One Unit 1 ESGR AHU One Unit 2 ESGR AHU 1-AP-10.07 BOP 60. VERIFY CRDM FANS - THREE RUNNING 17

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 18 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 1-AP-10.07 SRO Cautions prior to step 61:

CAUTION:

If a HI-HI CLS has occurred on Unit 1, 1-FC-P-1A must not be started on EDG 1 if 1-CS-P-1A is running.

If a HI-HI CLS has occurred on Unit 2, 1-FC-P-1B must not be started on EDG 2 if 2-CS-P-1A is running.

1-AP-10.07 RO 61. CHECK SFP COOLING - EITHER PUMP RUNNING 1-FC-P-1A, 1H1-2N2A 1-FC-P-1B, 2H1-2S10B 1-AP-10.07 BOP 62. VERIFY AFW MOVS - BOTH TRAINS ENERGIZED 1-AP-10.07 RO 63. VERIFY BORIC ACID ALIGNMENT:

One Tank in service One BATP in service 1-AP-10.07

64. VERIFY CVCS HEAT TRACING PRIMARY AND BACKUP PANELS -

ALL ENERGIZED Primary panels 2A1, 2A2, and 2A3 - powered from 1H 480V Bus 1-AP-10.07 RO Note prior to step 65:

NOTE: The N-16 and MGPI Radiation Monitors are powered from Breaker 1H1-1-4B2 or 2H1-1-2D-2 depending on the position of throw-over switch 1-EP-TRS-DB-101 located near MCC 1H1-1.

18

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 19 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 1-AP-10.07 BOP 65. CHECK RADIATION MONITORS - OPERABLE No sample pump deenergized No flow faults No monitors deenergized Annunciator 1A-C3, N-16 TROUBLE - NOT LIT Annunciator 0-RMA-C5, PROCESS VENT RAD MON TRBL - NOT LIT Annunciator 0-RMA-D5, VENT STACK #2 RAD MON TRBL - NOT LIT 1-AP-10.07 BOP Note prior to step 66:

NOTE: The CTMT Particulate and Gas Rad Monitor skids are powered from 1MR1A, Breaker 43, which is supplied from 480V MCC 1C1-2. These monitors are required to comply with Tech Spec 3.1.C.1.

1-AP-10.07 BOP 66. LOCALLY CHECK CTMT PARTICULATE AND GAS RAD MONITOR -

OPERABLE (SKID/SAMPLE PUMP ENERGIZED) (IF MCC 1C1-2 CONFIRMED TO BE DEENERGIZED, NO NEED TO CHECK LOCALLY) 1-AP-10.07 RO 67. VERIFY SW SUPPLY MOVS - ALL ENERGIZED 1-AP-10.07 SRO 68. CHECK TECH SPEC LCOS:

Tech Spec 3.16 SRO will determine that the following technical specification actions apply:

Technical Specification:

3.0.1 -- 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown due to inability to comply with section 3.3.

3.0.1 - 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> clock to hot shutdown due to inability to comply with section 3.16 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 20 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 1-AP-10.07 BOP 69. CHECK 4160V EMERGENCY BUS 1H - ENERGIZED FROM OFFSITE POWER 15F1 - CLOSED 15H8 - CLOSED 1-AP-10.07 TEAM Caution and Notes prior to step 70:

CAUTION: Shift Supervision should direct the loading of EDG 3 to 1J or 2J Emergency Bus to best support plant recovery.

NOTE:

The RSS transformer cooling fans, heaters, and load tap changer controls are powered from 1J1-1-3B2 or 2J1-1-4A2 depending on position of the throwover switch near 1-SA-TK-2 in Unit 1 Turbine BLDG basement.

The switch shall be aligned to an energized bus.

Until the throwover switch is aligned to an energized bus, the RSST load tap changers are inoperable. Tech Spec 3.16.B.2 should be reviewed for required actions.

1-AP-10.07 BOP 70. CHECK AC EMERGENCY BUS 1J - ENERGIZED FROM OFFSITE POWER 15D1 - CLOSED 15J8 - CLOSED 1-AP-10.07 BOP 71. CHECK ANY STATION SERVICE BUS - DEENERGIZED:

15A1 and 15A2 - OPEN OR 15B1 and 15B2 - OPEN OR 15C1 and 15C2 - OPEN Step 71 RNO actions:

IF ANY 480V Station Service Bus deenergized, THEN GO TO Step 77.

IF ALL 480V Station Service Buses are energized, THEN GO TO Step 90.

20

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 21 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 1-AP-10.07 SRO 90. NOTIFY THE FOLLOWING:

OMOC STA Electrical Foreman End 1-AP-10.07 0-AP-23.00, RAPID LOAD REDUCTION SRO CAUTION: Conservative decision-making must be maintained during rapid load reductions. Refer to Attachment 1 for trip criteria.

NOTE:

Actions that can be completed independently of preceding steps may be performed out of sequence as directed by the SRO.

When the Turbine is not being actively ramped, the REFERENCE and SETTER values must remain matched to prevent inadvertent ramp.

Pre-planned reactivity plans located in the Main Control Room will be used as guidance for ramping down to the desired power level.

The ramp rate in IMP OUT is nonlinear and therefore pre-planned reactivity plans based on IMP IN are not as accurate. However, total amounts of boration and dilution can be used as guidance.

RO 1. TURN ON ALL PRZR HEATERS 21

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 22 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 0-AP-23.00, RAPID LOAD REDUCTION

2. INITIATE PLANT LOAD REDUCTION AT 5%/MINUTE OR LESS:

BOP a) Verify turbine valve position - NOT ON LIMITER The turbine is NOT on the limiter.

RO b) Insert control rods in AUTO or MANUAL as necessary to maintain Tave and Tref within 5°F.

BOP c) Verify or place turbine in IMP IN or IMP OUT as determined by Shift Supervision Team can choose either IMP IN or IMP OUT BOP d) Adjust SETTER to desired power level BOP e) Adjust LOAD RATE %/MIN thumbwheel to desired ramp rate (1%/minute)

BOP f) Initiate Turbine load reduction using OPERATOR AUTO (pushes the white GO button)

BOP g) Reduce Turbine Valve Position Limiter as load decreases The BOP will periodically reduce the limiter setpoint during the ramp.

0-AP-23.00, RAPID LOAD REDUCTION SRO 3. CHECK EMERGENCY BORATION - REQUIRED The team will decide to emergency borate based on the Tave - Tref difference.

22

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 23 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 0-AP-23.00, RAPID LOAD REDUCTION SRO NOTE: Step 4 or Step 5 may be performed repeatedly to maintain Tref and Tave matched Flux in band, and control rod position above the LO-LO insertion limit.

RO 4. PERFORM AN EMERGENCY BORATION IAW THE FOLLOWING:

a) Verify or raise CHG flow to greater than 75 gpm b) Transfer the in-service BATP to FAST c) Open ( )-CH-MOV-( )350 d) Monitor EMRG BORATE FLOW

( )-CH-FI-( )110 e) After required emergency boration, perform the following:

1) Close ( )-CH-MOV-( )350

2) Transfer the in-service BATP to AUTO

3) Restore Charging flow control to normal 0-AP-23.00, RAPID LOAD REDUCTION RO 5. ESTABLISH A NORMAL BORATION TO MAINTAIN CONTROL ROD POSITION ABOVE THE LO-LO INSERTION LIMITS ATTACHMENT 4 Attachment 4 Boration instructions are on the last page of this event.

0-AP-23.00, RAPID LOAD REDUCTION SRO NOTE:

If at any time plant conditions no longer require rapid load reduction, actions should continue at Step 35.

RCS Tave must be maintained less than or equal to 577°F and RCS pressure must be maintained greater than or equal to 2205 psig. Tech Spec 3.12.F.1 should be reviewed if either parameter is exceeded.

I & C should be contacted to provide assistance with adjusting IRPIs.

RO 6. CONTROL RAMP RATE TO MAINTAIN RCS PRESSURE GREATER THAN 2205 PSIG 23

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 24 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue 0-AP-23.00, RAPID LOAD REDUCTION RO *7. CHECK LETDOWN ORIFICES - TWO IN SERVICE Evaluator note: two orifices will already be in service.

0-AP-23.00, RAPID LOAD REDUCTION BOP 8. MONITOR STEAM DUMPS FOR PROPER OPERATION 0-AP-23.00, RAPID LOAD REDUCTION SRO 9. NOTIFY THE FOLLOWING:

Energy Supply (MOC)

Polishing Building Chemistry OMOC 0-AP-23.00, RAPID LOAD REDUCTION SRO 10. EVALUATE THE FOLLOWING:

EPIP applicability The Shift Manager will review EPIPs for applicability. They are not applicable.

VPAP-2802, NOTIFICATIONS AND REPORTS, applicability SRO directs STA to review VPAP-2802. The STA reports that he has completed his review of VPAP-2802 and no notifications are required.

0-AP-23.00, RAPID LOAD REDUCTION SRO *11. CHECK REACTOR POWER - HAS DECREASED MORE THAN 15%

IN ONE HOUR Reactor power has NOT decreased more than 15% in one hour Step 11 RNO actions: GO TO Step 13 AP-23.00 actions continue next at 70% power- the next event will occur prior to reaching this power level.

24

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 3 Page 25 of 72 Event

Description:

Loss of 1H 480v Emergency Bus Cue: On Evaluators Cue Attachment 4 of AP-23.00 Actions RO SRO provides RO a copy of Attachment 4.

1. Place the MAKE-UP MODE CNTRL switch in the STOP position.

2. Adjust 1-CH-YIC-1113 to desired total gallons.

3. Adjust 1-CH-FC-1113A to the desired flow rate.

4. Place the MAKE-UP MODE SEL switch in the BORATE position.

5. Place the MAKE-UP MODE CNTRL switch in the START position.

6. Verify proper valve positions.

7. Adjust boration rate using 1-CH-FC-1113A, as necessary.

8. WHEN boration is complete, THEN do the following. IF boric acid is to remain in the Blender to support ramping the Unit, THEN enter N/A.

a. Manually blend approximately 20 gallons to flush the boration path IAW Attachment 5, Manual Makeups

b. Enter N/A for the remaining steps in this attachment.

It is not anticipated that the team will utilize Attachment 5 during this scenario.

9. Place the MAKE-UP MODE CNTRL switch in the STOP position.

10. Verify controllers for Primary Grade water and Boric Acid are set correctly.

11. Place the MAKE-UP MODE SEL switch in the AUTO position.

12. Place the MAKE-UP MODE CNTRL switch in the START position.

13. Notify Shift Supervision of Blender status.

25

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 26 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue Time Position Applicants Action or Behavior RO Diagnoses 1-RC-P-1A seal failure with the following indications/alarms:

Alarms:

1C-A4 RCP 1A SEAL LEAKOFF HI FLOW Indications:

Seal leakoff flow for 1-RC-P-1A at top of scale of recorder.

Decreasing Pressurizer level Increasing charging flow ARP 1C-A4 BOP/RO 1. CHECK NUMBER 1 SEAL LEAKOFF - GREATER THAN 5 GPM 1-CH-FR-1190 (Pen 1 - Red)

ARP 1C-A4 SRO 2. INITIATE 1-AP-9.00, RCP ABNORMAL CONDITIONS ARP 1C-A4 BOP 3. PROVIDE NOTIFICATIONS AS NECESSARY:

OMOC STA Shift Supervision System Engineering SRO The team will hold a transient brief. During the brief the indications on 1-RC-P-1A seal condition will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

26

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 27 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-AP-9.00 Caution and Note prior to step 1:

SRO CAUTION: An RCP with high or low seal leakoff should be secured immediately (within 5 minutes) after a manual Reactor trip if any Attachment 2 parameter is continuously increasing or at Action level.

NOTE: Attachment 5 lists PCS points which may be used to monitor RCP performance.

This is an OC-93 applicable procedure.

SRO hands attachment 2 to BOP for monitoring. Attachment 2 items are immediately following AP-9 actions below.

1-AP-9.00 RO *1. VERIFY SEAL INJECTION - FLOW INDICATED 1-AP-9.00 RO Cautions prior to step 2:

CAUTION:

Total No. 1 Seal leakoff is the total of the indicated leakoff from No. 1 Seal and calculated No. 2 Seal leakoff.

Number 2 Seal leakoff rate should be determined by the difference between PDTT inleakage rate before (from previously calculated 1-OPT-RC-10.0) and after the increase in Number 2 Seal leakoff.

27

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 28 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-AP-9.00 RO *2. VERIFY SEAL LEAKOFF - WITHIN NORMAL OPERATING RANGE IAW ATTACHMENT 1 1-CH-FR-1190 Step 2 RNO Actions:

IF affected RCP is NOT running, THEN GO TO Step 10.

IF affected pump is running, THEN do the following:

a) IF Number 1 Seal leakoff is low, AND is caused by high Number 2 Seal leakage, THEN GO TO Step 16.

PDTT Level - INCREASING o Gallons (U0911) o Percent (Y4020A)

Standpipe Level - HI ALARM IN b) IF seal leakoff is less than 0.8 gpm, THEN GO TO Step 14.

c) IF seal leakoff is between 0.8 gpm and 1.0 gpm, THEN GO TO Step 16.

d) IF Total No. 1 seal leakoff is greater than 6.0 gpm, THEN assign Admin Control IAW Attachment 6 AND GO TO Step 38.

e) IF seal leakoff is between 5.0 gpm and 6.0 gpm, THEN assign Admin Control IAW Attachment 6 AND GO TO Step 6.

SRO will direct attachment 6 admin control to be assigned to field operator. If requested, the Desk SRO will perform this function.

Summary of attachment 6: Operator is assigned admin control of 1-RC-P-1A feeder breaker, so that if the pump could not be stopped from the control room, it would be tripped locally. Attachment 4 of this guide contains attachment 6 of AP-9.00.

28

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 29 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-AP-9.00 SRI Cautions prior to step 38:

CAUTION:

An RCP should be secured for low seal leakoff (less than 0.8 gpm) within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> if Attachment 2 parameters are stable.

An RCP should be secured for high seal leakoff using the following time limits:

1) If RCP Seal leakoff has increased to greater than 8 gpm AND leakoff is confirmed by corresponding changes in seal return temperature or pump bearing temperature, then the Reactor must be tripped, and the RCP secured immediately (within five minutes).

2) Stop the RCP within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> if Total No. 1 seal leakoff flow is greater than 6 gpm and Attachment 2 parameters are stable.

An RCP with high or low seal leakoff should be secured immediately (within 5 minutes) after a manual Reactor trip if any Attachment 2 parameter is continuously increasing or at Action level.

The two criteria bolded above will be driving the reactor to be tripped and 1-RC-P-1A to be secured.

1-AP-9.00 RO 38. CHECK UNIT STATUS - ON LINE 1-AP-9.00 SRO 39. REMOVE UNIT FROM SERVICE IAW SS DIRECTION:

GOP-2 Series Operating Procedures OR 1-E-0, REACTOR TRIP OR SAFETY INJECTION OR 0-AP-23.00, RAPID LOAD REDUCTION Due to above CAUTION, 1-E-0 will be implemented.

It is important that actions in 1-AP-9.00 continue following the reactor trip, at least the isolation of seal leakoff.

1-AP-9.00 BOP Caution prior to step 40:

If an immediate (within 5 minutes) RCP trip was performed due to high or low seal leakoff, the RCP SEAL LKOFF ISOL VV should be closed within five minutes after pump trip.

29

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 30 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-AP-9.00 RO 40. TRIP AFFECTED RCP IAW SS DIRECTION 1-AP-9.00 RO 41. CLOSE THE AFFECTED RCP SEAL LEAKOFF ISOLATION VALVE AS NECESSARY:

PP A/HCV-1303A, RCP A PP B/HCV-1303B, RCP B PP C/HCV-1303C, RCP C 1-AP-9.00 RO 42. CHECK THERMAL BARRIER CC FLOW ON AFFECTED RCP - IN SERVICE 1-AP-9.00 SRO 43. PROVIDE NOTIFICATIONS AS NECESSARY:

OMOC STA Shift Supervision 1-AP-9.00 attachment 2 actions are given on following page.

1-E-0 actions commence two pages down.

30

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 31 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-AP-9.00 - ATTACHMENT 2 BOP 31

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 32 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue Time Position Applicants Action or Behavior 1-E-0 RO [1] VERIFY REACTOR TRIP:

a) Manually trip reactor b) Check the following:

All Rods On Bottom light - LIT Reactor trip and bypass breakers - OPEN Neutron flux - DECREASING 1-E-0 RO [2] VERIFY TURBINE TRIP:

a) Manually trip the turbine Pushes the turbine trip push buttons.

b) Verify all turbine stop valves - CLOSED c) Isolate reheaters by closing MSR steam supply SOV 1-MS-SOV-104 RO d) Verify generator output breakers - OPEN (Time Delayed) 1-E-0 RO [3] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED 32

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 33 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-E-0 RO [4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING SI annunciators - LIT A-F-3 SI INITIATED - TRAIN A A-F-4 SI INITIATED - TRAIN B a) RNO - Check is SI is required or imminent as indicated by any of the following:

Low PRZR Pressure Identifies that pressurizer pressure is slowly recovering (or stable).

High CTMT Pressure Identifies that containment pressure is stable at about 10.5 psia High Steam line Differential Pressure Identifies that there is no steam line differential pressure.

High Steam Line Flow with Low Tave or Low Line Pressure Identifies no steam flow indicated and determines that SI is not required.

IF SI is NOT required, THEN GO TO 1-ES-0.1, REACTOR TRIP RESPONSE SRO This brief may be delayed until 1-RC-P-1A is secured and seal leak-off isolated.

SRO The team will hold a transition brief. During the brief it will be identified that the 1-FW-P-3A failed to auto-start.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Following the brief the team will transition to 1-ES-0.1.

33

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 34 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue SRO SRO initiates 1-ES-0.1 1-ES-0.1 RO 1. MONITOR RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F RCS temperature is trending to 547 °F 1-ES-0.1 BOP SRO may provide the BOP with Attachment 5 of 1-ES-0.1 for guidance on AFW control.

Actions are summarized below:

1. Maintain minimum AFW flow of 540 gpm with RCP(s) in service until one SG Narrow Range level is greater than 12%

2. Maintain minimum AFW flow of 350 gpm with NO RCPs running until one SG Narrow Range level is greater than 12%

3. When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50% by throttling AFW Isolation MOVs.

34

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 4 Page 35 of 72 Event

Description:

Failure of #1 seal on 1-RC-P-1A Cue: On Evaluators Cue 1-ES-0.1 BOP 2. CHECK FW STATUS a) Check RCS Average temperatures - LESS THAN 554°F b) Verify Feed Reg valves - CLOSED c) Close SG FW isolation MOVs 1-FW-MOV-154A 1-FW-MOV-154B 1-FW-MOV-154C BOP closed 1-FW-MOV-154A, B, C d) Check AFW pumps - RUNNING Motor Driven AFW pumps TD AFW pump If not yet started, 1-FW-P-3A will be started at this point.

e) Verify total AFW flow - GREATER THAN 540 GPM (350 W/O RCPs) f) Check emergency buses - BOTH ENERGIZED g) Control feed flow to maintain narrow range level between 22% and 50%.

RO 3. VERIFY CHARGING IN SERVICE BOP 4. CHECK CC SYSTEM STATUS:

a) Check SW to CC HXs - IN SERVICE b) Check CC pumps - AT LEAST ONE RUNNING 35

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 36 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue Time Position Applicants Action or Behavior Evaluators note: Team may elect to initiate safety injection and re-enter 1-E-0 rather than perform AP-16.00, in accordance with the continuous action page of ES-0.1:

SI INITIATION CRITERIA Initiate SI and GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION, if EITHER condition listed below occurs, OR is imminent.

• RCS subcooling based on CETCs - LESS THAN 30°F

• Any automatic SI setpoint is exceeded:

• Low PRZR pressure

• High CTMT pressure

• High steamline differential pressure

• High steamline flow with low Tave or low line pressure Team Diagnoses RCS leak with the following indications/alarms:

Alarms:

1B-A3 CTMT SUMP HI LVL 1E-F6(G6/H6) PRZR LO LVL CH 1/2/3 1C-D8 PRZR LO LVL Containment radiation monitor alarms (various)

Indications:

Charging Flow increasing Pressurizer level decreasing Pressurizer pressure decreasing When received the Unit 2 Operator will report and silence the radiation monitor alarms associated with this event.

36

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 37 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue 1-AP-16.00 Note: If SI Accumulators are isolated, 1-AP-16.01, SHUTDOWN LOCA, should SRO be used for guidance.

Note: RCS average temperature has a direct impact on pressurizer level.

[1] MAINTAIN PRZR LEVEL RO Isolate Letdown Control Charging flow RO closes 1-CH-LCV-1460A and 1-CH-LCV-1460B and places charging in manual and attempts to maintain level at program (immediate action).

SRO The team will hold a short transient brief. The brief should establish the priority of addressing RCS leakage then end.

RO 2 VERIFY THE FOLLOWING PARAMETERS - STABLE OR INCREASING:

PRZR Level PRZR Pressure RCS Subcooling Identifies all parameters are decreasing and goes to step 2 RNO TEAM Step 2 RNO- GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION.

Team transitions to 1-E-0.

37

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 38 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue 1-E-0 Only the performance of the high level steps 1,2, and 3 are required:

RO [ 1 ] VERIFY REACTOR TRIP

[ 2 ] VERIFY TURBINE TRIP

[ 3 ] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED

[ 4 ] CHECK IF SI INITIATED:

a) Check if SI is actuated:

LHSI pumps - RUNNING SI annunciators - LIT A-F-3 SI INITIATED - TRAIN A A-F-4 SI INITIATED - TRAIN B b) Manually initiate SI RO will manually initiate safety injection if an automatic safety injection has not occurred.

SRO The team should have identified that no HHSI flow exists and hold a short transient brief. The need to align HHSI flow should be discussed, then the brief terminated.

Following the brief, it is expected that the SRO will give attachment 1 to the BOP and attachment 2 to the RO to align SI flow. Attachment 2 steps are contained on attachment 2 of this guide.

SRO/BOP 5. Initiate Attachment 1 (Attachment 1 actions contained on attachment 1 of this guide.)

38

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 39 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue RO *6. CHECK RCS AVERAGE TEMPERATURE STABLE AT 547°F OR TRENDING TO 547°F The team will identify that RCS temperature is decreasing. The team should attribute this to the injection of SI into the RCS and AFW flow to the SGs. It is acceptable for the team to enter the RNO portion of this step and perform the applicable steps (summarized below):

Stop dumping steam Reduce AFW flow to the SG Close MSTVs if cooldown continues

7. CHECK PRZR PORVs AND SPRAY VALVES:

RO a) PRZR PORVs - CLOSED b) PRZR spray controls Demand at Zero (or)

Controlling Pressure c) PORV block valves - AT LEAST ONE OPEN SRO NOTE: Seal injection flow should be maintained to all RCPs.

• 8. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS Two or three Charging pumps will be running and flowing to the RCS.

b) RCS subcooling - LESS THAN 30°F [85°F]

RCS subcooling will NOT be less than 30 °F RNO for the step is to go to step 9.

39

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 40 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue BOP 9. CHECK IF SGs ARE NOT FAULTED:

Check pressures in all SGs a) STABLE OR INCREASING AND b) GREATER THAN 100 PSIG BOP will observe a slightly decreasing trend on SG pressures. This will be attributed to the RCS cooldown. The team will not transition to 1-E-2.

BOP 10. CHECK IF SG TUBES ARE NOT RUPTURED:

Condenser air ejector radiation - NORMAL SG blowdown radiation - NORMAL SG MS radiation - NORMAL TD AFW pump exhaust radiation - NORMAL SG NR Level - NOT INCREASING IN AN UNCONTROLLED MANNER TEAM TEAM should determine that no indications of a steam generator tube rupture exist.

RO 11. CHECK RCS - INTACT INSIDE CTMT

• CTMT radiation - NORMAL

• CTMT pressure - NORMAL

• CTMT RS sump level - NORMAL All containment indications will be ABNORMAL.

SRO Step 11 RNO actions: GO TO 1-E-1, LOSS OF REACTOR OR SECONDARY COOLANT.

SRO The team will hold a transient brief. During the brief the SBLOCA will be discussed.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are abnormal for unit one containment. He will also state that containment conditions and the electrical conditions are as you see them.

40

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 41 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue SRO 1-E-1, Loss of Reactor or Secondary Coolant 1-E-1 Actions RO 1. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS b) RCS subcooling - LESS THAN 30°F [85°F]

c) Stop all RCPs c) d) RCS pressure - LESS THAN 1275 PSIG [1475 PSIG]

e) Close CHG pump miniflow recirc valves:

1-CH-MOV-1275A 1-CH-MOV-1275B 1-CH-MOV-1275C 1-E-1 Actions BOP 2. CHECK IF SGs ARE NOT FAULTED:

Check pressures in all SGs:

STABLE OR INCREASING AND GREATER THAN 100 PSIG 1-E-1 Actions BOP *3. CHECK INTACT SG LEVELS:

a) Narrow range level - GREATER THAN 12% [18%]

b) Check emergency buses - BOTH ENERGIZED c) Control feed flow to maintain narrow range level between 22% and 50%

41

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 42 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue 1-E-1 Actions BOP 4. CHECK IF SG TUBES ARE NOT RUPTURED:

Condenser air ejector radiation - NORMAL SG blowdown radiation - NORMAL SG main steam radiation - NORMAL TD AFW pump exhaust radiation - NORMAL SG NR Level - NOT INCREASING IN AN UNCONTROLLED MANNER 1-E-1 Actions SRO CAUTION: If any PRZR PORV opens because of high PRZR pressure, the PORV must be verified closed or isolated after pressure decreases to less than 2335 psig.

RO *5. CHECK PRZR PORVs AND BLOCK VALVES:

a) Power to PRZR PORV block valves - AVAILABLE b) PRZR PORVs - CLOSED c) PRZR PORV block valves - AT LEAST ONE OPEN 1-E-1 Actions RO *6. CHECK IF SI FLOW SHOULD BE REDUCED:

a) RCS subcooling based on CETCs - GREATER THAN 30°F [85°F]

a) RNO - GO TO Step 7 b) Secondary heat sink:

Total feed flow to INTACT SGs - GREATER THAN 350 GPM

[450 GPM]

OR Narrow range level in at least one intact SG - GREATER THAN 12% [18%]

c) RCS pressure - STABLE OR INCREASING c) RNO - GO TO Step 7.

42

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 43 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue 1-E-1 Actions RO *7. CHECK IF HI HI CLS INITIATED:

CS pump(s) - RUNNING OR Any Hi Hi CLS annunciator - LIT Step 7 RNO actions: GO TO step 14.

1-E-1 Actions SRO CAUTION: RCS pressure should be monitored. If RCS pressure decreases in an uncontrolled manner to less than 250 psig [400 psig], one LHSI pump must be manually restarted to supply water to the RCS.

RO *14. CHECK IF LHSI PUMPS SHOULD BE STOPPED:

a) Check RCS pressure: a)

1) Pressure - GREATER THAN 250 PSIG [400 PSIG]

2) Pressure - STABLE OR INCREASING

2) RNO - GO TO Step 15 1-E-1 Actions RO 15. CHECK RCS AND SG PRESSURES:

Check pressure in all SGs - STABLE OR INCREASING Check RCS pressure - STABLE OR DECREASING 1-E-1 Actions BOP 16. CHECK IF EDGs CAN BE STOPPED:

a) Verify AC emergency buses - ENERGIZED BY OFFSITE POWER b) Reset both trains of SI if necessary b) c) Stop any unloaded EDGs IAW Attachment 1 43

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 44 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue 1-E-1 Actions RO 17. VERIFY INSTRUMENT AIR AVAILABLE:

a) Check annunciator B-E NOT LIT b) Check at least one CTMT IA compressor - RUNNING 1-IA-C-4A or 1-IA-C-4B c) Verify 1-IA-TV-100 - OPEN 1-E-1 Actions RO 18. INITIATE EVALUATION OF PLANT STATUS:

a) Verify at least one train of cold leg recirculation capability:

1) Train A - AVAILABLE 1-SI-P-1A 1-SI-MOV-1863A 1-SI-MOV-1885A and D 1-SI-MOV-1860A 1-SI-MOV-1862A 1-CH-MOV-1115B and D

2) Train B - AVAILABLE 1-SI-P-1B 1-SI-MOV-1863B 1-SI-MOV-1885B and C 1-SI-MOV-1860B 1-SI-MOV-1862B 1-CH-MOV-1115B and D a) RNO - IF cold leg recirculation capability can NOT be verified, THEN GO TO 1-ECA-1.1, LOSS OF EMERGENCY COOLANT RECIRCULATION.

The team will transition to 1-ECA-1.1 at this point.

44

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 45 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue 1-ECA-1.1, Loss of Emergency Coolant Recirculation SRO CAUTION:

If emergency coolant recirculation capability is restored, return to the procedure and step in effect.

If suction source is lost to any SI or spray pump, the pump should be stopped.

Maintain greater than or equal to 150 gpm total AFW flow when feeding two or less Steam Generators with the TD AFW pump operating. Methods that may be used to comply with this restriction:

1) Increasing total AFW flow to greater than 150 gpm

2) Feeding ALL Steam Generators

3) Securing the TD AFW Pump NOTE:

Attachment 2 provides a graph of the minimum amount of RCS makeup flow required to remove decay heat.

If procedure has been entered due to CTMT sump blockage, FRs should NOT be implemented until directed.

The minimum containment sump level for manual restart of LHSI pump suction is 6.0 ft.

RO 1. CHECK EMERGENCY COOLANT RECIRCULATION EQUIPMENT -

AVAILABLE a) Check the following pumps - AVAILABLE:

1-SI-P-1A AND 1-CH-P-1A, B, or C a) RNO - GO TO Step 2.

45

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 46 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue RO 2. TRY TO RESTORE THE REDUNDANT FLOW PATH FROM THE CTMT SUMP TO THE RCS a) Check the following pumps - AVAILABLE:

1-SI-P-1B AND 1-CH-P-1A, B, or C a) RNO - GO TO Step 3.

RO 3. RESET BOTH TRAINS OF SI RO 4. PUT RMT MODE TRANSFER SWITCHES IN THE REFUEL MODE RO *5. CHECK RWST LEVEL - GREATER THAN 6%

RO 6. ESTABLISH ONE TRAIN OF SI FLOW:

a) Check CHG pumps - ONLY ONE RUNNING a) RNO - IF both LHSI pumps stopped due to CTMT Sump blockage, THEN - do either of the following:

IF RWST crosstie unavailable, THEN GO TO Step 7.

OR IF RWST crosstie available, THEN do the following:

1) Implement FRs as necessary.

2) GO TO Step 33.

IF CTMT Sump blockage has NOT occurred, THEN start or stop CHG pumps to establish only one pump running.

46

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009-301 Scenario No.: 4 Event No.: 5 Page 47 of 72 Event

Description:

SBLOCA Cue: On Evaluators Cue

6. ESTABLISH ONE TRAIN OF SI FLOW (continued):

b) Place non-running CHG pumps in PTL b) c) RCS pressure - LESS THAN 250 PSIG [400 PSIG]

d) Check LHSI pumps - ONLY ONE RUNNING d) RNO - IF sump blockage has NOT occurred, THEN start or stop LHSI pumps to establish only one pump running.

e) Implement FRs as necessary e) f) GO TO Step 8 f)

CAUTION: Operation of an OSRS pump without the associated CS pump could cause cavitation as indicated by fluctuating amperage.

NOTE: If CLS can NOT be reset, local breaker operation will be required to stop CS and ISRS pumps.

8. CHECK RECIRCULATION SPRAY SYSTEM:

a) Check for EITHER of the following:

Any CS pump - RUNNING OR REQUIRED OR RWST level - LESS THAN 20%

If RWST level is greater than 20% the team will GO TO Step 10

10. MAKE UP TO RWST USING 1-OP-CS-004, REFUELING WATER STORAGE TANK MAKEUP, WHILE CONTINUING WITH THIS PROCEDURE END END END SCENARIO #4 47

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 48 of 72 SIMULATOR OPERATOR GUIDE Simulator Setup Initial Conditions:

Recall 100% IC and enter the following malfunctions or recall the IC 314 and implement TRIGGER #30 to activate all passive malfunctions. VERIFY Trigger #30 implemented.

Close 1-RC-TV-1519A Close the following MOVs:

1-SI-MOV-1864B 1-SI-MOV-1885B 1-SI-MOV-1885C Enter the following EVENT TRIGGER- Event #29 - Event- SI4: SI Train A actuated.

Open the monitor window and add the following points to it:

ASP_AO_OFF = True Enter the following REMOTE FUNCTIONS:

Trigger Remote Function Delay Trigger Ramp Remote Value Type Start Ramp (Auto or Value Time Manual)

SIP1B_BKRPOS- SI-P-1B BKR 0 30 N/A N/A RACK_OUT Preload 14J3 CUBICLE POSITION Enter the following Switch Overrides:

Trigger Override Delay Ramp Trigger Value Type (Auto or Manual)

MOV867D_OPEN - HHSI TO RCS COLD LEG VV 0 N/A 30 OFF Pre-load (OPEN) 48

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 49 of 72 SIMULATOR OPERATOR GUIDE Enter the following MALFUNCTIONS:

Trigger Type Malfunction Delay Ramp Trigger Ramp Severity/Final Start/Value FW1303- A S/G NAR RNG XMTR 10 0 1 0 1 Manual LT-476 CH-3 FAILS EL1201- LOSS OF 480v 10 N/A 3 N/A N/A Manual EMERGENCY SWITCHGEAR 1H RC1201- FAILURE OF RCP-A SEAL 10 5:00 5 0 100 Manual

1. 1 RC04- RCS LEAK NONISOLABLE 10 0 7 0 100 Manual (0-1200 GPM)

FW49- DISABLE AFWP3B AUTO 0 N/A 30 N/A N/A Pre-load START SI35- DISABLE SI-MOV-867D AUTO 0 N/A 30 N/A N/A Pre-load OPEN SI4801 - MOVSI867 Thermals 0 N/A 29 N/A N/A Auto on SI Enter the following MOV Control:

Trigger Type Override Delay Trigger Remote Value (Auto or Manual)

SIMOV863B_RACKIN- MOV-SI-863B B LHSI 0 30 RACKOUT Preload Pump to ALT HHSI SIMOV864B_RACKIN- MOV-SI-864B B LHSI 0 30 RACKOUT Preload Pump to Cold Legs SIMOV885B_RACKIN- SI-MOV-1885B LHSI 0 30 RACKOUT Preload Recirc Pump B SIMOV885C_RACKIN- SI-MOV-1885C LHSI 0 30 RACKOUT Preload Recirc Pump B 49

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 50 of 72 SIMULATOR OPERATOR GUIDE TRIGGER TYPE DESCRIPTION Manual Channel III of steam generator level will fail high on A S/G.

1 3 Manual Loss of 1H 480v emergency bus.

5 Manual Failure of 1-RC-P-1A #1 Seal 7 Manual SBLOCA 29 AUTO on SI 1-SI-MOV-1867C breaker thermals 50

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 51 of 72 SIMULATOR OPERATOR GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components:

1-SI-P-1B 1-SI-MOV-1864B 1-SI-MOV-1863B 1-SI-MOV-1885B 1-SI-MOV-1885C Verify 1-RM-RI-112 aligned to A/C SG and 1-RM-RI-113 aligned to B SG (magnets).

Verify Ovation System operating.

Reset ICCMs.

Verify Component Switch Flags.

Verify Brass Caps properly placed.

Verify SG PORVs set for 1035 psig.

Verify Rod Control Group Step Counters indicate properly.

Verify Ovation CRT display Advance Charts the following charts:

Master chart advance switch Verify Turbine Thumb Wheel Settings @120 rpm/min and Position 6 Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset)

Verify all ARPs have been cleaned Verify CLEAN copies of the following procedures are in place:

AP-53.00 AP-23.00 AP-16.00 ECA-3.3 E-0 1-AP-10.07 ECA-1.1 1-OP-RC-011 AP-9.00 OP-CH-007 Reactivity Sheet OP-ZZ-002 Verify Reactivity Placard is current.

51

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 52 of 72 SIMULATOR OPERATOR GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

Ask for and answer questions.

52

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 53 of 72 SIMULATOR OPERATOR GUIDE Conduct shift turnover:

Provide normal shift turnover materials reflecting the below initial conditions:

Unit 1 is at 100% power and has been since the last refueling outage. All systems and crossties are operable with the following exception:

• 1-SI-P-1B, B low head safety injection pump, is tagged out for motor PMs. 62 hours7.175926e-4 days <br />0.0172 hours <br />1.025132e-4 weeks <br />2.3591e-5 months <br /> remain in the 72-hour Technical Specification 3.3.B.3 clock. Repairs are scheduled to be complete in 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br />.

Current RCS boron is: 750 ppm Unit #2 is at 100% power with all systems and crossties operable.

The last shift performed three 30-gallon dilutions followed by manual make-ups.

Shift orders are to maintain 100% power and fill the PRT to normal operating level in accordance with 1-OP-RC-011 after assuming the watch.

When the team has accepted the shift, proceed to the Session Conduct Section.

53

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 54 of 72 SIMULATOR OPERATOR GUIDE Session Conduct:

Ensure conditions in Simulator Set-up are established.

Ensure Trigger 30 is active prior to team entering the simulator.

Verify Exam Security has been established and ASP_AO_OFF = True.

EVENT 1 Fill of PRT No support actions are required for this evolution.

EVENT 2 1-FW-LT-1476 (Channel III SG Level Transmitter) Fails HIGH When cued by examiner, implement Trigger #1.

Operations Supervisor/Management:

If contacted, will acknowledge the failure of 1-FW-LT-1476. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00.

If contacted, will take responsibility for writing the WR and CR.

STA:

If contacted, will acknowledge the failure of 1-FW-LT-1476. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If asked, the STA will report that 1-FW-LT-1476 is a Reg. Guide 1.97 component. The STA will also report that upon review of CEP 99-0029 that only one channel of SG level indication is required per SG, so no actions for Reg.

Guide 1.97 are required.

If asked, the STA will review VPAP-2802 and TRM Section 3.3 and report that he has completed his review and this failure does not impact these documents.

If contacted, will take responsibility for writing the WR and CR.

54

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 55 of 72 SIMULATOR OPERATOR GUIDE If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Maintenance:

If contacted, will acknowledge instrumentation failure and commence investigations and/or repair efforts.

Field Operators:

If contacted, field operators will report no issues at the MFRVs.

Unit 2:

If team directs performance of 1-OPT-RX-007, Shift Average Power Calculation, state that you will have the 4th RO perform the procedure.

Role play as other individuals as needed.

55

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 56 of 72 SIMULATOR OPERATOR GUIDE EVENT 3 Loss of 1H 480v Emergency Bus When cued by examiner, implement Trigger #3.

Operations Supervisor/Management:

If contacted, will acknowledge the loss of 1H 480v emergency bus. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-10.07.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge ramp off-line in accordance with AP-23.00.

STA:

If contacted, will acknowledge loss of 1H 480v emergency bus. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Maintenance:

If contacted, after 10 minutes report that the 1H 480v bus appears to be grounded. Efforts to repair will take 12-24 hours, depending on amount of damage to bus when opened up.

Field Operators:

If contacted, field operators will breaker 14H-1 tripped with a bell lockout and a faint acrid smell. No smoke or fire is noted.

Role play as other individuals as needed.

56

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 57 of 72 SIMULATOR OPERATOR GUIDE EVENT 4 1-RC-P-1A #1 Seal Failure When cued by examiner, implement Trigger #5.

Operations Supervisor/Management:

If contacted, will acknowledge the seal problems on 1-RC-P-1A. The individual(s) contacted will also acknowledge entry into AP-9.00.

If contacted, will take responsibility for writing the WR and CR.

If contacted, will acknowledge need to trip reactor and secure the RCP.

If contacted, will brief field operator for AP-9.00 admin control. This attachment is included in this guide for reference (attachment 4 of this guide).

STA:

If contacted, will take responsibility for writing the WR and CR.

If the team has a transient brief: The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Field Operators:

If contacted, field operators will report to the MCR for briefing if US decides to perform this function.

Role play as other individuals as needed.

57

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2009 Scenario No.: 3 Page 58 of 72 SIMULATOR OPERATOR GUIDE EVENT 5 Small Break LOCA When cued by examiner or team has completed step 2 of ES-0.1 implement trigger 7.

Operations Supervisor/Management:

If contacted, will acknowledge the transition to back to 1-E-0 and then 1-E-1 and finally to ECA.1,1.

If contacted, will take actions to make-up to Unit 1 RWST.

Field Operators:

Will make preparations to make-up to Unit 1 RWST when directed.

Will secure EDGs upon request - no actions required.

The scenario will end upon direction to make-up to Unit 1 RWST.

58

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 Time Position Applicants Action or Behavior ATTACHMENT 1 OF E-0 BOP 1. VERIFY FW ISOLATION:

Feed pump discharge MOVs - CLOSED 1-FW-MOV-150A 1-FW-MOV-150B MFW pumps - TRIPPED Feed REG valves - CLOSED SG FW bypass flow valves - DEMAND AT ZERO SG blowdown TVs - CLOSED BOP 2. VERIFY CTMT ISOLATION PHASE I:

Phase I TVs - CLOSED 1-CH-MOV-1381 - CLOSED 1-SV-TV-102A - CLOSED PAM isolation valves - CLOSED 1-DA-TV-103A 1-DA-TV-103B BOP 3. VERIFY AFW PUMPS RUNNING:

a) MD AFW pumps - RUNNING (Time Delayed) 1-FW-P-3B requires manual start.

b) TD AFW pump - RUNNING IF NECESSARY 59

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 4. VERIFY SI PUMPS RUNNING:

CHG pumps - RUNNING LHSI pumps - RUNNING No LHSI pumps are available at this step.

BOP 5. CHECK CHG PUMP AUXILIARIES:

CHG pump CC pump - RUNNING CHG pump SW pump - RUNNING BOP 6. CHECK INTAKE CANAL:

Level - GREATER THAN 24 FT Level - BEING MAINTAINED BY CIRC WATER PUMPS BOP 7. CHECK IF MAIN STEAMLINES SHOULD BE ISOLATED:

a) Check if ANY of the following annunciators - HAVE BEEN LIT E-F-10 (High Steam Flow SI)

B-C-4 (Hi Hi CLS Train A)

B-C-5 (Hi Hi CLS Train B)

Identifies annunciators not lit and goes to RNO.

a) RNO - IF annunciator E-H-10 (Hdr/Line SI) NOT LIT, THEN GO TO Step 8.

60

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP *8. CHECK IF CS REQUIRED:

a) CTMT pressure - HAS EXCEEDED 23 PSIA Identifies pressure has not exceeded 23 or 17.7 psia and goes to step 10.

• 10. BLOCK LOW PRZR PRESS SI SIGNAL:

BOP a) Check PRZR pressure - LESS THAN 2000 psig b) Turn both LO PRZR PRESS & STM HDR/LINE P switches to block c) Verify Permissive Status light C LIT BOP may block the low pressurizer pressure SI signal depending on current RCS pressure.

BOP *11. BLOCK LOW TAVE SI SIGNAL:

a) Check RCS Tave - LESS THAN 543°F b) Turn both HI STM FLOW & LO TAVG OR LP switches to block c) Verify Permissive Status light F LIT BOP may block the low Tave SI signal depending on current RCS temperature.

61

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 NOTE:

CHG pumps should be run in the following order of priority: C, B, A.

Subsequent SI signals may be reset by reperforming Step 12.

BOP 12. VERIFY SI FLOW:

a) HHSI to cold legs - FLOW INDICATED 1-SI-FI-1961 (NQ) 1-SI-FI-1962 (NQ) 1-SI-FI-1963 (NQ) 1-SI-FI-1943 or 1-SI-FI-1943A b) Check CHG pumps - THREE RUNNING c) Reset SI.

d) Stop one CHG pump and out in AUTO e) RCS pressure - LESS THAN 185 PSIG RNO: e) IF two LHSI pumps are running, THEN do the following:

RNO: e) IF one LHSI pumps are running, THEN GO TO Step 13.

Rules of usage on substep 12.e sent the performer to step 13.

BOP 13. VERIFY TOTAL AFW FLOW - GREATER THAN 350 GPM [450 GPM]

RNO ACTIONS:

IF SG narrow range level greater than 12% [18%] in any SG, THEN control feed flow to maintain narrow range level AND GO TO Step 14.

IF SG narrow range level less than 12% [18%] in all SGs, THEN manually start pumps AND align valves as necessary.

IF AFW flow greater than 350 GPM [450 GPM] can NOT be established, THEN GO TO 1-FR-H.1, RESPONSE TO LOSS OF SECONDARY HEAT SINK.

Evaluators note: actions taken in this step will depend on teams alignment of AFW flow prior to reaching this step.

62

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 1 Attachment 1 of 1-E-0 BOP 14. CHECK AFW MOVs - OPEN RNO ACTIONS:

Manually align valves as necessary.

Evaluators note: actions taken in this step will depend on teams alignment of AFW flow prior to reaching this step.

BOP 15. INITIATE SI VALVE ALIGNMENT IAW ATTACHMENT 2 Attachment 2 of 1-E-0 is contained in attachment 2 of this guide. This should have been completed at this time by the RO.

BOP 16. INITIATE VENTILATION ALIGNMENT AND AC POWER ALIGNMENT IAW ATTACHMENT 3 See attached copy of Attachment 3 - contained in attachment 3 of this guide.

Unit 2 Operator will state that Unit 2 is at 100% power (if asked)

Unit 2 will also accept responsibility to complete Attachment 3 if it is given to Unit 2 at the point where differential pressure indications are requested.

All MCR boundary indications will be reported at positive.

63

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 Time Position Applicants Action or Behavior ATTACHMENT 2 of 1-E-0 SRO NOTE: Components previously aligned by SI termination steps, must not be realigned by this Attachment.

ATTACHMENT 2 of 1-E-0 RO/BOP 1. Verify opened or open CHG pump suction from RWST MOVs.

1-CH-MOV-1115B 1-CH-MOV-1115D ATTACHMENT 2 of 1-E-0 RO/BOP 2. Verify closed or close CHG pump suction from VCT MOVs.

1-CH-MOV-1115C 1-CH-MOV-1115E ATTACHMENT 2 of 1-E-0 RO/BOP 3. Verify running or start at least two CHG pumps. (listed in preferred order) 1-CH-P-1C 1-CH-P-1B 1-CH-P-1A ATTACHMENT 2 of 1-E-0 RO/BOP 4. Verify opened or open HHSI to cold legs MOVs.

1-SI-MOV-1867C 1-SI-MOV-1867D Evaluators note: 1-SI-MOV-1867D will not open and 1-SI-MOV-1867C will have no power.

ATTACHMENT 2 of 1-E-0 RO/BOP 5. Verify closed or close CHG line isolation MOVs.

1-CH-MOV-1289A 1-CH-MOV-1289B 64

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 ATTACHMENT 2 of 1-E-0 RO/BOP

6. Verify closed or close Letdown orifice isolation valves.

1-CH-HCV-1200A 1-CH-HCV-1200B 1-CH-HCV-1200C ATTACHMENT 2 of 1-E-0 RO/BOP 7. Verify opened or open LHSI suction from RWST MOVs.

1-SI-MOV-1862A 1-SI-MOV-1862B ATTACHMENT 2 of 1-E-0 RO/BOP 8. Verify opened or open LHSI to cold legs MOVs.

1-SI-MOV-1864A 1-SI-MOV-1864B ATTACHMENT 2 of 1-E-0 RO/BOP 9. Verify running or start at least one LHSI pump.

1-SI-P-1A 1-SI-P-1B No LHSI pumps are available at this time.

ATTACHMENT 2 of 1-E-0 RO/BOP 10. Verify High Head SI flow to cold legs indicated.

1-SI-FI-1961 1-SI-FI-1962 1-SI-FI-1963 1-SI-FI-1943 or 1-SI-FI-1943A No Flow will be indicated.

65

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 2 1-E-0 Attachment 2 ATTACHMENT 2 of 1-E-0 RO/BOP 11. IF flow not indicated, THEN manually start pumps and align valves. IF flow NOT established, THEN consult with Shift Supervision to establish another high pressure injection flow path while continuing with this procedure.

Alternate SI to Cold legs Hot leg injection RO will either open 1-SI-MOV-1842, or align HHSI to Th. This will require local actions to energize the associated supply breakers.

66

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMBER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFICATION REVISION PAGE 61 1 of 5

1. Verify or place REFUEL SFTY MOD E switches in NORMAL.

2. Verify ventilation alignment lAW Tables 1 and 2.

TABLE 1 UNIT #1 VENTILATION PANEL EQUIPMENT MARK NUMBER STATUS 0 1-VS-F-4A & B OFF 0 1-VS-HV-1A& B OF F 0 1-VS-F-BA & B OF F 0 1-VS-F-9A & B GREEN 0 1-VS-F-59 GREEN 0 1-VS-F-6 OF F 0 1-VS-F-39 GREEN 0 1-VS-F-7A & B GREEN 0 1-VS-HV-5 GREEN 0 1-VS-F-56A & B GREEN 0 1-VS-F-40A & B GREEN 0 1-VS-HV-4 OF F 0 2-VS-F-40A or B RED 0 2-VS-HV-4 OF F 67

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER V ERIFICATION REV ISION PAG E 61 2 of 5 TABLE 2 VNTX PAN EL EXPECTED MARK NUMB ER EQUIPMENT R ESPONSE NOT OBTAINED STATUS D a. AOO-VS-1 07A & B RED D a.Place AUX BLDG CENTRAL AREA MOD E AOD-VS-1 08 GREEN switch to FILTER.

D b. MOD-VS-100A&B RED D b.' Place MOO-VS-1 00A to FI LTER.

AOD-VS-1 06 GR EE N

• Place MOO-VS-100B to FILTER.

D c. MOD-VS-200A & B GR EE N D c.

• Place MOO-VS-200A to UN FllTER.

AOD-VS-206 RED

• Place MOO-VS-200B to UN FllTER.

D d. AOD-VS-1 03A & B GR EE N D d.* Place AOO-VS-103A in UN FILTER.

AOD-VS-1 04 GR EE N

• Place AOO-VS-1038 in UNFI LTER.

• Place AOO-VS-104 in FILTER.

D e. AOO-VS-1 01A & B GR EE N D e.Place AOO-VS-101A and 101 B in AOD-VS-1 02 GR EE N UNFI LTER.

D f. AOD-VS-11 1A & B GR EE N D f.Place COMBIN E CONTAINM ENT EXHAUST in ISOLATE.

D g. AOD-VS-1 10 GR EE N D g.Place AOO-VS-109A and 109B in FI LTER.

D h. AOD-VS-1 12A& B GR EE N D h.* Place AOO-VS-112A in CLOS E.

• Place AOO-VS-112B in CLOS E.

D i. MOD-VS-58A & B RED D i.Start 1-VS-F-58A and 1-VS-F-58B.

1-VS-F -58A & B RED

3. Verify filtered exhaust flow: (as read on FI-VS-117A and FI-VS-117B)

D* Total flow - GR EATER THAN 32400 cfm AND D* Flow through each filler bank - LESS THAN 39600 cfm 68

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-0 3 AUXILIARY VENTILATION AND AC POW ER V ERIFICATION REV ISION PAG E 61 3 of 5

4. Check all Station Service Buses - ENERGIZED. !E NOT, TH EN initiate 1-AP-10.07 , lOSS OF UN IT 1 POWER.

5. Check annunciator VSP-J2 - LIT.

6. Check Unit 1 RSST l Te time delay bypass light - LIT.

7. Verify stopped or stop 1-VS-AC-4.

8. Place 1-VS-43-VS103X, MeR ISOLATION switch to the OFF position.

9. Verify closed or close MeR isolation dampers.

D* 1-VS-MOO-103A D* 1-VS-MOO-103B D* 1-VS-MOO-103C D* 1-VS-MOO-103D

10. _ !E any MeR PDI on Unit 2 Vent Panel NOT indicating positive pressure, TH EN place the following sw itches to OPEN.

D* 1-V5-50V-322, EMERG AIR DUMP TO CONTROL RM D* 1-V5-50V-100, EMERG AIR DUM P TO C.R.

NOTE: The timer should be set for 50 minutes, minus the number of minutes since Safety Injection initiation .

11 . Set timer. WHEN 51 has been in progress for 50 minutes (when timer goes off), THEN immediately perform Step 18to start one Emergency Supply Fan.

69

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHM ENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY VENTILATION AND AC POWER VERIFI CATION REVISION PAG E 61 4 of 5

12. Check readings on the following Differential Pressure Indicators - POSITIVE PRESSURE INDICATED.

D* PDI -VS-100, D.P. -U 1CRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-101, D.P. -U1RRlUHB (Unit 2 Turbine Ventilation Panel)

D* PDI -VS-200 , D.P. -U2CRlU2TB (Unit 2 Turbine Ventilation Pa nel)

D* PDI -VS-20 1, D.P. -U2RRlU2TB (Unit 2 Turbine Ventil ation Pa nel)

D* 1-VS-PDI -118 (Un it 1 Computer Room)

D* 1-VS-PDI -116 (Near Unit 1 Semi-Vital Bus)

D* 2-VS-PDI -215 (Un it 2 AC Room )

D* 2-VS-PDI -206 (Near Unit 2 Semi-Vital Bus )

13. !f any reading NOT positive, THE N initiate Attachment 6 to secure MeR boundary fans .

14. Verify initiated or initiate O-AP-SO.OO , OPPOSITE UN IT EMERGENCY.

15. Verify the following Me R and ESGR air conditioning equ ipment operating.!E. NOT, TH EN start equipment within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> lAW the appropriate subsection of O-OP-VS-006, CONTROL ROO M AND RELAY ROOM VENTI LATION SYSTEM.

D* One Control Room chiller D* One Un it 1 Control Room AHU D* One Un it 2 Control Room AHU D* One Un it 1 ESGR AHU D* One Un it 2 ESGR AHU

16. _ !E. both of the following conditions exist, THEN verify that Load Shed is activated.

D* Unit 2 - SUPPLI ED BY RSST D* Unit 2 RCPs - RUNNING

17. !E. Load Shed is required and not activated, THEN initiate O-AP-10.10 , LOSS OF AUTO LOAD SHED.

70

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 3 1-E-0 Attachment 3 NUMB ER ATIACHMENT TITLE ATIACHMENT 1-E-O 3 AUXILIARY V ENTILATION AND AC POW ER V ERIFI CATION REV ISION PAGE 61 5 of 5 CAUTION: Only one Emergency Supply Fa n must be started in the following step.

Chilled Water flow to the in-service Unit 1 MeR AHU must be throttled to at least 15 gpm w hen the Emergency Supply fan is started .

Chilled Water flow to the in-service Unit 2 MeR AHU must be throttled to at least 25 gpm when the Emergency Supply fan is started .

An Emergency Supply Fa n must not be started if the filter is wet.

18. WHEN 51 has been in progress for 50 minutes (when timer goes off) , THEN immediately start ON E Emergency Supply Fa n JAW the following : (1-VS-F-41 or 2-VS-F-41 preferred)

a. lE 1-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104A, CO NT RM EMERG SU P MOD.

2. Start 1-VS-F-41.

b. lE 2-VS-F-4 1, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 2-VS- MOD-204A, CO NT RM EMERG SU P MOD.

2. Start2-VS-F-41.

c. lE 1-VS-F-42, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 1-VS- MOD-104B, CO NT RM EMERG SU P MOD.

2. Start 1-VS-F-42.

d. lE 2-VS-F-42, CONT RM EMERG SUP FAN , will be used, THEN perform the following substeps.

1. Open 2-VS- MOD-204B, CO NT RM EMERG SU P MOD.

2. Start 2-VS-F-42.

e. Adjust Chilled Water flow to MCR AHUs lAW Step 18 Caution.

71

Appendix D Required Operator Actions Form ES-D-2 Simulator Guide Attachment 4 1-AP-9.00 Admin Control NUMBE R ATIACHM ENT TITLE ATIACHMENT 1-AP-900 6 ADM INISTRATIVE CONTROl OF LOCAL TRIPPING OF REVISION PAGE ReP BREAKE RS

" 1 01 1 Perform a pre-job bfie~rJg OOIIerirJg the IoIiDYlirJg reqLiremenls lor estabHshing AdmirlistraUve Control 01 Reactor Croant Pump Bfea~er tocaltripping a) The person assigned AdminislraUve Control 01 Reactor Coolant Pulllfl B'ea~er Iocal lrippirJg understands Ihat no othef coocooefll job responsHlilities have tJeen Of shall be accepted during perfoonaoce 01 this procedure b) The person assigned AdministraUve Control 01 Reactor Coolant Pulllfl B'ea~er Iocal lrippirJg lXldefstands ttle requirement to remain avaitable al all Urnes when RCP seallea ~on is greater lhan 4 (JlOl

_ c ) The person assigned Administrative Control 01 Reactor Coolant Pulllfl B'ea~er Iocal lrippirJg understands that coolin uous communicaUon capalJi1ity sha ll be ma inlairled with !he Main Control Room al all Umes by use 01 eilher a Portable Radio, (primary method) Of Gai-Tronics (secondary mettlod )

d) The person assigned AdministraUve Control 01 Reactor Coolant Pulllfl B'ea~er Iocal lrippirJg undefstands that \\Ihenever a fire in !he Main Control Room or lhe Emergency Switchgear Room OCClJ'S. he/she ts to report to the Normal SWitchgear Room immediately e) The pe!SOO assigned Admini strali'le Control 01 ReaclOf CooIanI POOlP Bfea~er Ioca l lripping, lXldefstands that ReaclOf Coolant POOlp Bfea ~er locailrippirJg sha ll be accompiished lAW O-f'CA- 1500. Local Circuit Bfea~ef Operalion, upon Notification IraTI !he Main Control R~.

_ I) The Ma in Conlrol Room shall ootity lhe operalorwho has assumed AdrrinislraUve Control to perform ReaclOf Coolant Pulllfl Bre a~ef Iocat tripping Mlen Reactor Coclant Pump brea ~ers cannot be opened /rom lhe Main Control Room 10 ensure lhal the time li mit is not exceeded.

2 Reaxd!he name ol the pe!SOO assigrled Adminislrative Control 01 Reactor :00001 Pump Bfea~er IocailrippirJg in the Unit 1 Namllive Log.

72