ML093270157

Initial Exam 2009-301 Draft Simulator Scenarios

ML093270157
Person / Time
Site:	Crystal River
Issue date:	11/18/2009
From:	Division of Nuclear Materials Safety II
To:	Progress Energy Co
References
50-302/09-301
Download: ML093270157 (104)

Text

AppendixD Appendix D Scenario Outline Form ES-D-1 ES-D-l Facility: Crystal River #3 Scenario No.: #1 (NRC 2009) Op-TestNo.:

Op-Test No.: 1 Examiners: Operators:

Ir,titial Conditions: The plant is at approximately 30% power.

Initial Turnover: The following equipment is OOS: DHP-IA (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />); MUP-IA MUP-1A (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />); RWP-I RWP-l (24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />); FWP-7 (32 hours3.703704e-4 days <br />0.00889 hours <br />5.291005e-5 weeks <br />1.2176e-5 months <br />). An emergency need for power exists.

Event Malf. Event Event No. No; No. Type**

Type Description 1 N/A R(RO) Manual power escalation. (OP-204)

FW-223/224-TE trend up. Requires startup ofFWP-IB and 2 1I C (RO or BOP) shutdown ofFWP-lA.

ofFWP-IA. (OP-605)

C (BOP) OPT major alarm. (OP-703)

( 3 2 C (SRO) SRO TS determination. (TS 3.8.1) 4 N/A . N (BOP) SP-32I, Page 1I of Enclosure 1. (SP-32I)

Perform SP-321, (SP-321) 5 3 .

I (BOP)

RM-A5G fails high. (AP-250)

I (RO) RC-I-LT1 RC-I-LTI fails low. (OP-50I) (OP-501) 6 4 I (SRO) SRO TS determination. (TS 3.3.17)

PZR steam space leak, RPS fails to actuate. [CT]

7 5 M (ALL)

(EOP-2)

MUV-586 fails closed, MUV-25 fails to open. [CT]

8 6 C (RO or BOP)

(EOP-3, EOP-13 Rules 1,2 & & 3) 9 7 C (RO or BOP) RCP-ID breaker will not open. [CT] (AI-505)

• • (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor 7/21/2009 7/2112009 Page 1 of ofl1 7:51 AM 200910utlineslSESINRC 2009 - SES #1 Scenario Outline NRC Form ES-D-l, Rev 2.docx F:\NRC - 2009\Outlines\SES\NRC

Narrative Summary NRC 2009 Scenario #1 The plant is at ~30%

"",30% power following initial loading of the main generator. The OAC/BOP will ofthe continue in OP-204 from step 4.1.26.

After power has increased (5 to 10%) FW temperature elements on the running FWBP rise. The other booster pump should be started, the running booster pump shutdown and maintenance called to investigate.

FWP-1A is secured an OPT major alarm will be received. The "A" ES 4160 bus will be After FWP-IA transferred transfelTed to thethe BEST. Two seconds after the transfer the OPT breaker will trip open. The SRO may direct the transfer from memory or may utilize OP-703, Plant Distribution System. Either way is acceptable. TS 3.8.1, Condition A, will be entered for one offsite circuit circuit inoperable. The BOP will perform SP-321, Enclosure 1.

When SP-321 is completed RM-A5G willfail will fail high. Entry conditions for AP-250, Radiation Monitor Actuation, are met. Only the monitor/meter has failed high. No automatic actions occur.

The Control Complex will be isolated and CC Emergency Recirc initiated.

While the BOP is performing actions of AP-250 RC-I-LTI RC-1-LT1 (PZR level control) transmitter will .

c

( fail low. This will require the OAC to take manual control ofMUV-31 and utilize OP-501 to select select a good instrument. TS 3.3.17 will be entered for loss of PAM instrumentation.

Following selection of ofRC-I-LT3 RC-1-LT3 for PZR level control a PZR steam stearn space leak occurs. RPS will not actuate on low pressure and the OAC must manually trip the reactor [CT]. reT]. The reactor trip will cause a larger leak that will lead to an ISCM event.

When HPI actuates MUV-586MUV -586 (HPI cross-tie valve) fails closed, MUV-25 MUV -25 will not open due to a normal source power failure. Alternate power source will be selected during the performance of EOP-3 [CT]. Since MUP-IC MUP-1C will experience a sheared shaft on start this action is critical to ensure sufficient HPI flow to the RCS. Entry into an "Alert" is required due to the loss of SCM.

When the loss of SCM occurs o'ccurs RCPs must be tripped within 1 minute [CT]. RCP-ID RCP-1D breaker will not open when commanded and the OAC/BOP must open breaker 3104 ("B" 6900V Rx Aux Bus feeder breaker).

Once incincore ore temps start lowering and the RCPs are secured this scenario may be terminated.

7/21/2009 7/2112009 Page 1 0[6 of 6 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Summary - Turnover Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test Op-TestNo.: No.: 1 Scenario No.: 1 Event No.: 1 Rev.: 0 Event

Description:

Manual power increase. Emergency need for power exists.

Time Position Applicant's Actions or Behavior

• Increase load with the ULD Station RO

• Adjusts load rate to 0.5%

• Monitor plant parameters .

SRO

• Direct power increase at 30% per hour

(

712112009 Page 1 of 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1 \SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: 2 Rev.: 0 Event

Description:

(Examiner Cue) After a 5% to 10% power escalation FW-223 & 224-TEs trend up indicating bearing problems on FWP-IA FWP-1A (MALF). This will require startup of ofFWP-FWP-IB and shutdown ofFWP-lA.

1B ofFWP-1A.

. Time Position Applicant's Actions or Behavior

• Recognize temperature increase on FWP-IA FWP-1A RO/BOP*.

RO/BOP' 0 Computer alarms only

• Direct SPO to investigate temperature rise

• Using OP-60S OP-605 direct the OAC in the startup ofFWP-lBofFWP-1B and BOP shutdown ofFWP:..lA ofFWP-1A

• Startup FWP-1B FWP-IB using OP-60S, OP-605, Section 4.4 o Procedure signed off offupup to Step 4.4.9 o Ensure flow path exists

( o Verify permit lights o Start FWP-1B FWP-IB o Direct SPO to locally stroke FWV-7 30% to 50% open OpenFWV-7 o Open FWV-7 RO o Stop FWP-6B FWV -48 to AUTO o Select FWV-48

• Secure FWP-IA FWP-1A using OP-60S, OP-605, Section 4.5 o Start FWP-6A o Open FWV-47 o Close FWV-8 o Stop FWP-IA FWP-1A

• Direct startup ofFWP-lB ofFWP-1B and shutdown ofFWP-lA ofFWP-1A SRO

• Notify maintenance to investigate temperature rise

(

712112009 7/2112009 Page 2 of of23 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES

1. 1 \sES #1 - 2009 NRC - Operator Actions Rev O.docx

II AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: 3/4 Rev.: 00 Event

Description:

(Examiner Cue) After FWP-IA FWP-1A is secured an OPT major alarm will be received [MALF]. The "A" ES 4160 bus will be transferred to the BEST. Two seconds after the transfer the OPT breaker will trip open. The SRO may direct the transfer from memory or may utilize OP-703, Plant Distribution System. Either way is acceptable. TS 3.8.1, Condition A, will be entered.

Time Position' Applicant's Actions or Behavior

• Announce/acknowledge alarm o (Q-8-3) "Offsite Pwr Source XFMR Major Alarm" BOP

• Reviews AR-702

• Notifies SRO of malfunction

• Recommends reducing the load on the transformer per AR directions

• Direct BOP actions from memory or per OP-703 o Select "Sync 3205" to ON position

( o Close breaker 3205 o Open breaker 3211 SRO o Select "Sync 3205" to OFF position

• Enters TS 3.8.1, Condition A, for one required Offsite circuit inoperable .

o Recognizes SP-321 is required to be completed within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> o Directs BOP to perform Enclosure 1, Page 1

• Assists BOP in diagnosing the failure RO

• Verifies the plant is stable

• Selects Sync switch to ON for breaker 3205

• Closes breaker 3205 BOP

• Matches target on breaker 3211

• Selects Sync switch to OFF and removes

• Performs SP-321, Enclosure 1, Page 1 o See next page

(

7/2112009 . Page 3 of23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1 \SES #1-

1. l\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 DATA SHEET I

( OFF-SITE TO ON-SITE BREAKER/POWER VERIFICATION 1.0 Mode 1 thru 4 Alignment (This Section does NOT apply in Modes 5 or 6) (NOeS 62810)

NOTE Testing of the batteries in the Switchyard is performed by Substation Maintenance. Batteries are considered operable unless CR-3 is notified otherwise.

1.1 CONTACT System Dispatcher and VERIFY 230kv switchyard voltage is between 238kv and 242kv 1.2 VERIFY that Q!l!y QDJy one of the following ES "A" 4160v feeder breakers is CLOSED and supplying power:

• 3205 Backup ES Transformer to ES "A" 4160v Bus OR

• 3211 Off-Site Power Source Transformer to ES "A" 4160v Bus (Preferred) 11.3

.3 VERIFY that Q!l!y QDJy one of the following ES "B" 4160v feeder breakers is CLOSED and supplying power:

• 3206 Backup ES Transformer to ES "B" 4160v Bus (Preferred)

OR

• 3212 Off-Site Power Source Transformer to 4160v ES "B" Bus

(

1.4 UTILIZING the Synch Scope, VERIFY power is available to ES 4160v Bus Supply Breakers:

a. 3205 Backup ES transformer to ES "A" 4160v Bus

b. 3206 Backup ES transformer to ES "B" 4160v Bus 1.5 UTILIZING the Synch Scope, VERIFY power is available to ES 4160v Bus Supply Breakers:

a. 3211 Off-Site Power Source Transformer toES "A" 4160v Bus

b. 3212 Off-Site Power Source Transformer to ES "B" 4160v Bus 1.6 VERIFY at least one 6900v Reactor Aux. Bus is energized

a. VERIFY "A" 6900v Bus Breaker 3101 or 3103 is closed and supplying power OR

b. VERIFY "B" 6900v Bus Breaker 3102 or 3104 is closed and supplying power 1 .7 1.7 VERIFY BEST Differential Relaying ES ES Buses CT Isolation switch closed 1.8 VERIFY BEST Ground Differential Relaying ES Buses CT Isolation switch closed 1.9 VERIFY 4160v Best Aux Bus Breaker 3237 is racked out

'VERIFY (TB 119) 1.10 VERIFY 4160v Best Aux Bus Breaker 3239 is closed (TB 119) 1.11 VERIFY 4160v Best Aux Bus Breaker 3239 Control Power Disconnect Breaker off (TB 119)

(

Section 1.0 Performed By: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Date: _ _ _ _ _ Time:. _ _ __

7/2112009 7/21/2009 Page4of23 Page 4 of 23 7:52AM 7:52 AM F:~C F:~NRC - 2009\SES\2009 NRC - SES ##1\SES 1\SES ##11 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Required Operator Actions Form ES-D-2

( Op-Test Op-TestNo.: No.: 1 Scenario No.: 1 Event No.: 5S Rev.: ° Event

Description:

(Examiner Cue) When SP-321 is completed RM-ASG RM-A5G will fail high

[MALFJ. Entry conditions for AP-2S0,

[MALF]. AP-250, Radiation Monitor Actuation, are met. Only the monitor/meter has failed high. No automatic actions occur. The Control Complex will be isolated and CC Emergep.cy EmergeJlcy Recirc initiated initiated..

Time Position Applicant's Actions or Behavior

• Recognize RM-ASG RM-A5G failure high alarms & indications 0 (H-2-1) "Atmospheric Radiation High" CREW 0 (H-2-2) "Atmospheric Monitor Warning"

• Radiation Monitor Panel indication BOP

• Observe RM-ASG RM-A5G radiation monitor

• Report to SRO that the monitor appears to be failed high

(

7/2112009 Page 5 of of23 23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES

1. l\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: S Rev.: 0 Event

Description:

(Examiner Cue) When SP-321 is completed RM-ASG will fail high

[MALFJ. Entry conditions for AP-2S0, Radiation Monitor Actuation, are met. Only the

[MALF].

monitor/meter has failed high. No automatic actions occur. The Control Complex will be Emerge~cy Recirc initiated.

isolated and CC Emergency Time Position Applicant's Actions or Behavior

• Directs BOP actions per AP-2S0, Radiation Monitor Actuation o Ensure Auto actions for affected radiation monitors

• The following dampers closed:

• AHD-17

• AHD-22

• AHD-12

• AHD-12D

• AHD-2C

• AHD-2E

• AHD-IC

• AHD-IE

• . The following damper open:

(

• AHD-3

• The following fans stopped:

• AHF-19A SRO

• AHF-19B

• AHD-17A

• AHF-17B

• The following fans stopped or slow speed:

• AHF-20A

• AHF-20B

• IF AHF-20A and 20B are stopped THEN ensure stopped:

• AHF-44A

• AHF-44B

• AHF-30 o Notify personnel of entry into AP-2S0 o Ensure proper radiation monitor operation o Notify HP and Chemistry o If alarm is not valid then perform corrective actions

• Depress "Hom "Horn Silence"

• Initiate repair efforts

• GO TO Enclosure S 7/2112009 7/21/2009 Page 6 of of23 23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #

1. l\SES #11 - 2009 NRC - Operator Actions Rev O.docx 1\SES #

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: S Rev.: 0 Event

Description:

(Examiner Cue) When SP-321 is completed RM-ASG will fail high

[lYIALF].

[1}1ALF]. Entry conditions for AP-2S0, Radiation Monitor Actuation, are met. Only the monitor/meter has failed high. No automatic actions occur. The Control Complex will be isolated and CC Emergency Recirc initiated.

Time Position Applicant's Actions or Behavior

• Execute AP actions in accordance with SRO directions o Ensure Auto actions for of affected radiation monitors

• Use of the "Control Complex HVAC Isolate/Reset" switches will be used to reposition the dampers

• The following dampers closed:

• AHD-17

• AHD-22

• AHD-12

• AHD-12D

• AHD-2C

• AHD-2E AHD-1C

• AHD-IC

( AHD-1E

• AHD-IE

• The following damper open:

• AHD-3

• The following fans stopped:

• AHF-19A BOP

• AHF-19B

• AHD-17A

• AHF-17B

• The following fans stopped or slow speed:

• AHF-20A

• AHF-20B

• IF AHF-20A and 20B are stopped THEN ensure stopped:

• AHF-44A

• AHF-44B

• AHF-30 o Notify personnel of entry into AP-2S0 o Ensure proper radiation monitor operation

• Ensure monitor energized

• Ensure switch in OPERATE position

• Ensure high alarm setpoint is set correctly

• Ensure Range switch is set to "1M"

• Observe trends on other monitors

( o Notify HP and Chemistry 7/2112009 Page 7 of 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario

, No.: 1 t

Event No.: 5 Rev.: ° Event

Description:

(Examiner Cue) When SP-321 is completed RM-A5G will fail high

[MALF]. Entry conditions for AP-250, Radiation Monitor Actuation, are met. Only the

[MALFJ.

monitor/meter has failed high. No automatic actions occur. The Control Complex will be isolated and CC Emergency Recirc initiated.

Time Position Applicant's Actions or Behavior 0 If alarm is not valid then perform corrective actions BOP

• Depress "Hom Silence"

• Initiate repair efforts

• GO TO Enclosure 5 SRO

• Directs BOP actions per Enclosure 5 of ofAP-250, AP-250, Radiation Monitor Actuation

(

7/2112009 Page 8 of 23 7:52 AM

1. 1 \SES #1 - 2009 NRC - Operator Actions Rev O.docx F:\NRC - 2009\SES\2009 NRC - SES #1\SES

I Appendix AppendixD D Reguired Operator Actions Required Form ES-D-2 Op-TestNo.:

Op-Test No.: 1 Scenario No.: 1 Event No.: 5 Rev.: 0 Event

Description:

(Examiner Cue) When SP-321 SP-32l is completed RM-A5G will fail high

[MALF]. Entry conditions for AP-250, Radiation Monitor Actuation, are met. Only the monitor/meter has failed high. No automatic actions occur. The Control Complex will be isolated and CC Emergency Recirc initiated.

Time Position Applicant's Actions or Behavior

• Execute AP actions (Enclosure 5) in accordance with SRO directions o IF alarm is NOT valid, AND radiation monitor can be reset, THEN reset monitor.

• Alarm monitor CANNOT be reset.

o Verify proper CC cooling.

• 0

• Perform EOP-14, Enclosure 17

• Establish CC Emergency Recirculation:

o Verify ES MCC 3AB is energized o If CC ventilation will be powered from a diesel, verify verify load is acceptable (Step is N/ N/A)A) o Align CC ventilation recirc:

(

• Select A and B Train Control Complex HVAC Isolate/Reset switches to "ISO" o Verify CC isolation dampers are closed:

BOP

• AHD-12 and AHD-12D

• AHD-2C andAHD-2Eand AHD-2E

• AHD-1C and AHD-1E o Ensure CC ventilation fans shutdown:

• AHF-19A and AHF-19B and AHF-17B

• AHF-17A andAHF-17B o Start 1 train of CC ventilation in emergency (starting B Train would be acceptable, but would complicate the restoration):

• Start AHF-18A

• Start AHF-19A o Verify AHF-54A still running o.

o Establish chemistry sampling ventilation:

• Start AHF-20A in slow

• Start AHF-44A

• Start AHF-30 o Assuming A Train was started, exit the enclosure 712112009 7/2112009 Page 9 of23 of 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test Op-TestNo.:lNo.: 1 Scenario No.: 1 Event No.: 6 Rev.: 0 Event

Description:

(Examiner Cue) During the performance of AP-250 AP-2S0 the selected PZR level transmitter will fail low [MALFJ.

[MALF]. Manual control ofMUV-31 of MUV-31 will be required and a good instrument will be selected using OP-501. OP-SOL ITS 3.3.17 will be entered for loss ofP AM instrumentation.

Time Position Applicant's Actions or Behavior

• • Announce/acknowledge alarms o

0 (K-3-2) "SASS Mismatch" o0 (I 1) "Pressurizer Level Low" will reflash (1-8-1) o0 Reviews AR-501 AR-S01 and AR-503 AR-S03

• • Monitors plant conditions RO , o0 MUV-31 opens fully o0 PZR SCR heater demand stations lock up (red and white

, lights on)

• • Selects MUV-31 control station to manual and lowers demand

• • May direct BOP to monitor alternate PZR level indication (RIP or computer) c

(

• • Assists the RO in diagnosing failure

• • Approves selection ofMUV-31of MUV-31 control station to hand

• • Enters ITS 3.3.17, Condition A, for one PZR level channel SRO inoperable

• • May enter ITS 3.4.8, Condition B, due to lost pressurizer heaters

• • Contacts work controls to initiate repair efforts

• Assists RO in diagnosing the failure BOP

• Assists RO in verifying the plant is stable

• Reviews alarms i

\

712112009 7/2112009 Page 10 of23 of 23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES

1. 1 \SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: 1 Event No.: 6 Rev.: 0 Event

Description:

(Examiner Cue) During the performance of AP-250 the selected PZR level transmitter will fail low [MALF]. Manual control of ofMUV-31 MUV -31 will be required and a good instrument will be selected using OP-50 1. ITS 3.3.17 will be entered for loss ofP OP-50l. AM of PAM instrumentation.

Time Position Applicant's Actions or Behavior

• • Directs RO to transfer PZR level signal to unaffected channel per OP-501, Step 4.7.2 o0 Determine proper operating channel

• o0 Select control switch to proper operating channel

. SRO 0o o0 Generate a work request NotifY Reactor Engineer to consider impact on plant heat Notify balance

• • May review SRO checklist for unplanned equipment status change

• Executes actions per SRO and OP-50 OP-5011 to select alternate signal C

( source

• Step 4.7.2 0 Determines proper operating channel 0 Selects control switch to proper operating channel RO

• Selects RC-1MS to LT3-Y LT3-Y 0 Generates a work request (BOP) 0 Notifies Reactor Engineer to consider impact on plant heat balance (BOP)

• MUV-31 to automatic Returns MUV-31

• Returns PZR heater demand station to automatic control

" BOP

• BOP may assist with OP-501

(

7/2112009 7/21/2009 Page 11 of23 of 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES

1. I\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Op-TestNo.: Scenario No.: 1 Event No.: 7 Rev.: 0 Event

Description:

(Examiner Cue) Following selection ofRC-1-LT3 ofRC-I-LT3 for PZR level control a PZR steam space leak occurs [MT]. AP-520 may be entered but there will be little time to perforn1 perfornl any actions. RPS will not actuate on low pressure and the RO must manually trip the reactor leT].

[CT]. The reactor trip will cause the steam leak to rise and will lead to an ISCM event.

Time Position Applicant's Actions or Behavior

• Diagnose RCS leak oRCS pressure lowering o All heaters energized o (H-1-1) "Gamma Radiation High" o (H-I-2)

(H-1-2) "Gamma Monitor Warning" o (H 1) "Atmospheric Radiation High" (H-2-1) o (H-2-2) "Atmospheric Monitor Warning"

• IfRx trip criteria is given by SRO, notifies SRO when trip criteria is reached and Trips the Rx leT] [CT]

RO

• When the Rx is tripped, performs EOP-02 Immediate Actions o Depress Rx Trip pushbutton o Verifies CRD groups 1 thru 7 fully inserted

( o Verifies NIs indicate Rx is shutdown o Depress Turbine Trip pushbutton o Verifies all TVs TVs and GV GVss are closed

• Re-performs EOP-02 Immediate Actions as directed by SRO

• When EOP-02 Immediate Actions are completed, performs symptom scan along with BOP and SRO.

7/2112009 7/21/2009 Page 12 of23 7:52AM 7:52 AM F:\NRC F:INRC - 2009\SES\2009 20091SESl2009 NRC - SES #1\SES

1. 1ISES #1 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: 7 Rev.: 0 Event

Description:

(Examiner Cue) Following selection ofRC-1-LT3 for PZR level control a PZR steam space leak occurs [MT]. AP-520 may be entered but there will be little time to perfom1 any actions. RPS will not actuate on low pressure and the RO must manually trip the perform reactor leT].

reT]. The reactor trip will cause the steam leak to rise and will lead to an ISCM event.

. Time Position Applicant's Actions or Behavior

• Assists the ROIBOP RO/BOP in diagnosing failure

• Direct RO/BOP to quantify the leakage

• Should provide RO with Rx trip criteria based upon RCS and/or RB pressure

• TS 3.4.12, Condition A, is now applicable

• Enters and directs actions of AP-520, Loss ofRCS Coolant or Pressure

• Should direct manual Reactor trip due to uncontrolled lowering ofRCS pressure SRO

• When Rx is tripped, enters EOP-02 and ensures RO performs EOP-02 Immediate Actions.

• Verifies EOP-02, Immediate Actions C

(

• Directs formal Symptom Scan with RO and BOP 0 Check for Station Black Out 0 Check for Inadequate Sub Cooling Margin 0 Check for Inadequate Heat Transfer 0 Check for Excessive Heat Transfer 0 Check for OTSG Tube Rupture

• Attempts to quantify leak rate

• Perform actions of AP-520 as directed by SRO 0 Notify Personnel

• PA announcement

• SPOIPPO SPO/pPO contacted via radio 0 Verify OTSG leakage has not increased

• Checks RM-A12 BOP

• Checks RM-G25, RM-G26, RM-G27, & & RM-G28 RM:'G28 for mcrease increase 0 Concurs significant increase in RCS leakage exists 0 Assist in determination of leak location

• When the Rx is tripped, depresses the global alarm silence pushbutton.

(

• When EOP-02 Immediate Actions are completed, performs symptom scan along with RO and SRO.

7/21/2009 712112009 Page 13 J3 of23 7:52AM 7:52 AM F:WRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: 8 Rev.: 0 Event

Description:

(Automatic Parameter Cue) Following the reactor trip the PZR steam stearn space leak rises. HPI will automatically actuate. MUV-25 normal source power failure occurs concunent with MUV-586 MUV-586 failing as is [MALF]. Alternate power source must be selected leT].

Time Position Applicant's Actions or Behavior

• Steam Stearn space leak will depressurize the RCS outside the post trip window.

oRCS pressure will lower and cause an ES actuation wi11lower CREW o EFW actuation o Loss of adequate SCM c

(

7/2112009 Page 14 of23 of 23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #l\SES

1. 1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: 8 Rev.: 0 Event

Description:

(Automatic Parameter Cue) Following the reactor trip the PZR steam space l~ak rises. HPI will automatically actuate. MUV-25 le'ak MUV -25 normal source power failure occurs concunent with MUV-586 failing as is [MALF]. Alternate power source must be selected

[eT].

Time Position Applicant's Actions or Behavior

• • Directs BOP/RO to perform EOP-13, EOP-l3, Rule 1 o0 When RCP-ID breaker doesn't open, ensures 6900 V Aux Bus 3B is de-energized o0 Direct actions ofEOP-3, Loss of SCM Perform Rule 1

• Stop all RCPs within 1 minute

• Manually actuate ES

• Depress "ISCM" pushbuttons for EFIC channels

• Ensure Tincore is selected on SPDS o0 Notify personnel of entry into EOP-3 o0 Directs RO/BOP to notify PPO to perforin perfortn EOP-14 EOP-I4

. Enclosure 2 o0 Verify proper HPI discharge flowpath exists

( ,

• Verifies MUV-23, MUV-24, MUV-25, MUV-26, MUV-586, and MUV-587 open SRO

• Select the "B" source for MUV-25 to ON o0 Ensure at least 1 HPI train is properly aligned

• Verifies MUV-73 and MUV-58 are open.

• Verifies at least 1 MUP running with required cooling pumps

• Verifies MUP recirc valves MUV-53 and MUV-257 are closed

• Verifies all HPI recirc to sump valves MUV-543, MUV-544, MUV-545 and MUV-546 closed

• Verifies Makeup and Seal Injection isolation valves MUV-596, MUV-18 MUV-I8 and MUV-27 closed o0 Ensure at least 1 letdown isolation valve is closed, MUV -567 or MUV-49 o0 Ensure DHV-3 is closed o0 Verify EFW is operating and flow is controlled

. ** Recognizes Emergency Plan entry (not required to classify)

(

7/2112009 712112009 Page 15 of23 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES

1. I\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 c

( Op-Test No.: 1 Scenario No.: 1 Event No.: 8 Rev.: 0 Event

Description:

(Automatic Parameter Cue) Following the reactor trip the PZR steam stearn space leak rises. HPI will automatically actuate. MUV-25 normal source power failure occurs concurrent concun-ent with MUV-586 failing as is [MALF]. Alternate power source must be selected

[CT].

Time Position Applicant's Actions or Behavior

• Ensures ES equipment is properly aligned

• Performs EOP-13, Rule 1, JSCM ISCM o Trip RCPs in less than 1 minute since loss of ASCM

• When RCP-IDRCP-1D breaker doesn't open, opens (ensures open) breaker 3104 to de-energize the 6900 V Aux Bus 3B o Depress "HPJ "HPI MAN ACT" push buttons on Trains A and B o Depress "RB ISO MAN ACTUATION" push buttons on Trains A and B o Depress "I "ISCM" SCM" push buttons for EFIC channels A and B o Ensure Tincore is selected on SPDS

• • Verifies all ES components are operating via the actuation light

( indications (green) for ES actuated equipment.

o Recognizes MUV-586 still closed.

o Attempt to open MUV-586 MUV -586 (not successful) o Recognizes loss of power to MUV -25 MUV-25 o Notifies SRO of malfunction with MUV-586 and MUV-25 o Notify personnel of entry into EOP-3 BOP/RO o Directs RO/BOP to notify PPO to perform EOP-14 Enclosure 2 o Verify proper HPI discharge flowpath exists

• Verifies MUV-23, MUV-24, MUV-25, MUV-26, MUV MUV-586,-586, and MUV 587 open

• Selects the "B" source for MUV-25 MUV-25 to ON (CT) o Ensures at least 1 HPI HPJ train is properly aligned

• Verifies MUV-73 MUV -73 and MUV MUV-58

-58 are open.

• Verifies at least 1 MUP running with required cooling pumps

• Verifies MUP recirc valves MUV MUV-53 MUV-257

-53 and MUV -257 are closed

• Verifies all HPI recirc to sump valves MUV-543, MUV-544, MUV MUV-545

-544, MUV -545 and MUV-546 MUV -546 closed

• Verifies Makeup and Seal Injection isolation valves MUV-596, MUV-18 and MUV-27 closed

( o Ensures at least 111etdown letdown isolation valve is closed, MUV-567 or MUV-49 MUV-49 7/2112009 Page 16 of 23 of23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #l\SES

1. 1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 1 Event No.: 8 Rev.: 0 Event

Description:

(Automatic Parameter Cue) Following the reactor trip the PZR steam space leak rises. HPI will automatically actuate. MUV-25 normal source power failure occurs concun~ent with MUV-586 failing as is [MALF]. Alternate power source must be selected concun'ent leT].

Time Position Applicant's Actions or Behavior 0 Ensures DHV-3 is closed BOP/RO BOPIRO 0 Verifies EFW is operating and flow is controlled

.*

• Uses EOP-13, Rule 3 c

(

7/2112009 Page 17 of of23 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #l\SES

1. 1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 1 Event No.: 9 Rev.: 0 Event

Description:

(Automatic Parameter Cue) RCP-1D will not trip (MALF) on the loss of SCM. The 6900V bus must be de-energized. (CT)

I Time Position Applicant's Actions or Behavior

.*

• Loss of SCM 0 Trip all RCPs

, RO/BOP 0 RCP-1D will not trip 0 Breaker closed light "LIT" (red)

SRO

• May direct the RO to perform actions to stop RCP-1D

• Secures RCP-1D 0 Opens breaker 3104 to de-energize 6900V Aux Bus 3B.

RO/BOP ROIBOP 0 RCP-ID RCP-1D de-energizes All RCPs tripped within 1 minute from the loss of (c~ 0 adequate SCM (CT)

Scenario may be terminated when incore temperatures start lowering and all Reps are secured.

7/2112009 Page 18 of of23 23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES#1

1. 1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 1, LOSS OF SCM c

• _ !E < 1 min has elapsed since losing adequate SCM, THEN immediately stop all RCPs RCPs..

.' IF RCPs were NOT stopped ** _ Progress toward a maximum within 1 min, allowable plant cooldown to THEN ensure all operating RCPs achieve CFT and LPI flow as soon remain running until ~ any of the as possible.

following exist:

SCM is restored flow > 1400 gpm in LPI flow>

each injection line.

• Manually actuate ES. ES ..

• Depress II"HPI ACT II H PI MAN ACT"

( push buttons on Trains A and and B.

• Depress IIRB "RB ISO MAN ACTUATION II push buttons on ACTUATION" Trains A and B.

• __!E IF LPI has NOT actuated, AND RCS PRESS ~ 300 psig, THEN depress IILPI"LPI MAN ACTII ACT" push buttons on Trains A and B.

• IIISCM II push buttons Depress "ISCM" for EFIC channels A and B.

• • Tincore. is selected on Ensure Tincore, SPDS.

7/2112009 7/21/2009 Page 19 of23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES

1. l\SES #1 - 2009 NRC - Operator Actions Rev O.docx

II AppendixD Appendix D Required Operator Actions Form ES-D-2 RULE 2, HPI CONTROL 2,HPI

• _ !E. !E HPI has actuated, 1 Obtain SRO concurrence to THEN bypass <ilr Qr reset bypass or reset ES.

ES actuation.

2 Bypass or reset ES actuation:

Auto Manual

• Open MUP recirc prior to

• _ !E !E. recirc to MUT is desired, throttling HPI flow THEN open MUP recirc to MUT valves:

< 200 gpm/pump.

11_ MUV-53 1_ MUV-257 MUV-257II I

• • _ !E IF recirc to RB sump is desired, THEN open HPI recirc to sump valves:

- MUV-543 - -MUV-544

(

- MUV-545

- MUV-546

• • _ !E IF adequate SCM exists based,

• _ Prevent exceeding NDT NOT limit on Tincore, THEN throttle HPI to maintain

• _ !E !E. OTSG isolated for TRACC, required conditions. THEN maintain RCS PRESS

< 1000 1 000 psig.

• _ !E !E. PTS, SGTR, or dry OTSG exists, THEN maintain minimum adequate SCM.

IF adequate SCM can be maintained with wit'h 1 HPI pump,

• • Ensure running HPI pump is aligned to MUT.

AND stopping second HPI pump is desired, THEN stop 1 HPI pump.

7/2112009 Page 20 of 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 RULE 3, EFW/AFW CONTROL

• Ensure available OTSGs are at or trending toward required "LLL" > 20 in level. "NAT CIRC" > 70%

"ISCM" > 90%

• IF manual control of EFW flow 1 Obtain SRO concurrence to place is desired, EFIC in manual.

THEN establish manual EFIC control. 2 Control EFW to maintain required EFW flow and OTSG level.

3 _ IE EFW flow is NOT controlled, THEN depress EFIC channels A and B "MANUAL PERMISSIVE" push buttons and close affected EFW block valve.

(

• _ IE adequate SCM does NOT 20TSGs 2 OTSGs > 280 gpm in 1 line exist, to each OTSG AND level in available OTSGs EFW is NOT at or trending toward 10TSG > 470 gpm in 1 line IIISCM "ISCM" level, II to 1 OTSG THEN establish manual required 20TSGs > 250 gpm to flow. < 300 gpm/OTSG AFW 1 OTSG 10TSG > 450 gpm to

< 600 gpm

• _ IE adequate SCM exists,

• Do not allow OTSG level to lower.

THEN throttle flow to prevent OTSG PRESS from lowering

( > 100 psig below desired PRESS.

7/2112009 of23 Page 21 of 23 7:52AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 c RULE 4, PTS

• • __ I.E IF any of the following exist:

• Throttle HPI flow to minimize adequate SCM.

Tincore < 400°F, AND cooldown rate

• Throttle LPI flow to minimize exceeds ITS limit adequate SCM.

RCPs off, ** _ PTS is applicable until an AND HPI flow fiow exists Engineering evaluation has been completed.

THEN perform required PTS actions.

(

7/2112009 7121/2009 Page 22 of 23 7:52 AM 7:52AM SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx F:\NRC - 2009\SES\2009 NRC - SEt;

I AppendixD Appendix D Required Operator Actions Form ES-D-2 RULE 7, PZR LEVEL CONTROL 1 IF PZR level is < PZR level PZR Level Band band, Rx at power> 20% 200 in to 240 in THEN restore PZR level.

Rx at power:::; 20% 1 20 in to 200 in 120 Rx tripped 50 in to 120 in

• Cycle appropriate BWST to MUP valve to maintain MUT level ~ :2: 55 in:

11_ MUV-73 11_* 1_ MUV-58 I

• Close MUV-49 2 !E.

I.E PZR level does NOT recover, 1_ Open MUV-24 THEN establish manual HPI flow. 2 _ Notify SSO to evaluate

( Emergency Plan entry.

3 _ _ I.E IF PZR level does NOT recover, THEN start second MUP and required cooling pumps.

[Rule 5, Diesel Load Control]

4 _ _ I.E IF PZR level does NOT recover, THEN open additional HPI valves.

5 _ _ !E.

I.E PZR level does NOT recover, THEN close MUP to MUT recircs:

11_ MUV-53 [ - MUV-257 [I 3 !E.

I.E PZR level recovers,

• _ !E. I.E adequate SCM exists, THEN restore normal PZR AND letdown is desired, conditions. THEN CONCURRENTLY PERFORM EOP-14, Enclosure 4,

[Rule 2, HPI Control] Letdown Recovery (if accessible).

\

7/21/2009 7/2112009 Page 23 of23 7:52AM 7:52 AM F:\NRC - 2009\SES\2009 NRC - SES #1\SES #1 - 2009 NRC - Operator Actions Rev O.docx

AppendixD Appendix D Scenario Outline Form ES-D-1 ES-D-l Facility: Crystal River #3 Scenario No.: #2 (NRC 2009) Op-TestNo.:

Op-Test No.: 1 Examiners: Operators:

Initial Conditions: The plant is in Mode 2 at approximately 2% power.

Turnover: The following equipment is OOS: MUP-1B (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />). Maintain this power level until you are relieved. Thunderstorms are predicted for Citrus and Levy counties.

Event M'alf.

Malf. Event Event No. No. Type* Description I (BOP)

(BOP) RC-3A-PT3 (ES Channell) fails low. (OP-S07) 1 1 I (SRO) SRO TS determination. (TS 3.3 .S)

C (BOP) 2 2 Condenser tube leak. (AP-604)

C (SRO)

PZR level controller fails low. Manual level control 3 3 I (RO)

(~. required. (AI-SOO)

(

CFT boron concentration low. (Chemistry call) 4 N/A N(SRO)

N (SRO)

SRO TS determination. (TS 3.S.1)

S 4 C (BOP) MUV-2S8 spurious closure. (AI-SOO) 6 S C(RO)

C (RO) RCP-1A seal failure. (OP-302, AP-S4S)

OTSG tube leak on the "B" OTSG which will 7 6 M(ALL)

M (ALL) require a reactor trip. (EOP-6) 8 7 C(RO) Manual Rx trip pushbutton failure. (EOP-6) [CT]

9 8 C (RO or BOP) EOP-13) [CT]

"A" MUP bearing fails. (EOP-6, EOP-B)

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor 7/2112009 AppendixD F:\NRC - 2009\Outlines\SES\NRC 2009 - SES #2 Scenario Outline NRC NRCFonn Form ES-D-l, Rev O.docx

Narrative Summary NRC 2009 Scenario #2 Plant is initialized in Mode 2 at approximately 2% power. This power level should be maintained until the crew is relieved. Thunderstorms are predicted for Citrus and Levy counties.

Soon after turnover is complete RC-3A-PT3 (ES Channell pressure transmitter) will fail low.

one,ES channel an actuation will not occur. HPI and LPI bistables will trip Since this trips only one.ES in ES Cabinet 1 and the block loading alarms will be received. TS 3.3.5, Condition A, and TS 3.3.17,

, Condition A, should be entered. The CRS will direct the BOP to place ES Channell Channel 1 in the trip condition per OP-507, Operation of ofthe the ES, RPS and ATWAS Systems.

After the ES channel has been tripped a small condenser tube leak occurs. AP-604, Waterbox Tube Failure, will be entered and CWP-1A secured.

When the actions of AP-604 are complete the PZR level controller will fail low. This will require manual PZR level control for the remainder of the scenario. Insertion of the failure during the actions ofAP-604 is recommended due to the lengthy time it takes to recognize the malfunction (5 to 10 minutes).

Chemistry reports the monthly CFT sample results are 2656 ppmB for the CFT-1A and 2250 ppmB for CFT-1B. The SRO will enter ITS 3.5.1, Condition A, with actions to restore concentration to within limits in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

(

Once the ITS determination is completed MUV-258 will close (RCP-1A CBO isolation valve).

The BOP will open the valve with SRO concurrence. Thirty seconds later RCP-1A will experience 1st and 2 nd nd stage seal failures. OP-302, RCP Operation, will direct securing the RCP immediately.

Following the shutdown ofRCP-1A an OTSG tube leak (40 gpm) on the "B" OTSG will occur and the reactor will be tripped per EOP-6, OTSG Tube Rupture. This will meet the criteria to enter an Unusual Event. Following the trip the tube leak will rise to 155 gpm.

The manual Rx trip pushbutton will not work. Breakers 3305 and 3312 must be opened. [CT]

A bearing will fail on MUP-1A. MUP-1 MUP-1C C and its cooling water pumps must be started [CT].

This scenario may be terminated when normal makeup flow is restored and a plant cooldown/depressurization has been started.

7/2112009 Page 1 of7 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Summary - Turnover Rev O.docx

II Appendix AppendixD D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 2 Event No.: 1 Rev.: 0 Event

Description:

(Examiner Cue) Soon after turnover is complete RC-3A-PT3 (ES Channell pressure transmitter) will fail low [MALF]. Since this trips only one ES channel an actuation will not occur. HPI and LPI bistables will trip in ES Cabinet 1 and the block loading alarms will be received. TS 3.3.5, Condition A, and TS 3.3.17, Condition A, should be entered. The CRS will direct the BOP to place ES Channell in the trip condition per OP-507, Operation of the ES, RPS and ATWAS A TWAS Systems.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarms o (J-2-1) "RCS Pressure Low-Low" o (C-1-1) "RC 1 High Pressure Bistable Trip" o (C-1-2) "RC 4 Low Pressure Bistable Trip" RO/BOP o Multiple block loading alarms o Reviews AR-502

• Verifies the plant is stable

• Notifies SRO of failure c(

• Assists the RO/BOP in diagnosing the failed pressure transmitter SRO

• Enters TS 3.3.5, Condition A, for one ES Channel inoperable

• Contacts work controls to initiate repair efforts

• Assists RO in diagnosing the failed pressure transmitter

• Assists RO in verifying the plant is stable BOP

• Reviews alarms

• HPI and LPI bistables are tripped in ES Actuation Verifies HPI*

Channel Cabinet 1

• Reviews AR-301 and AR-303

• Directs the BOP to place ES Channell Channel 1 to the tripped condition per OP-507 o Verify the operable channels are not bypassed SRO o Place channel in tripped condition o Select "Test Operate" position of the "Pressure Test Module" o Verify annunciator alarms

( o Verify proper ES status panel lights are on for Trains A & B 7/2112009 Page 1 of17 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 2 Event No.: 1 Rev.: 0 Event

Description:

(Examiner Cue) Soon after turnover is complete RC-3A-PT3 (ES Channell pressure transmitter) will fail low [MALF]. Since this trips only one ES channel an actuation will not occur. HPI and LPI bistables will trip in ES Cabinet 1 and the block loading alarms will be received. TS 3.3.5, Condition A, and TS 3.3.17, Condition A, should be entered. The CRS will direct the BOP to place ES Channell in the trip condition per OP-507, Operation ofthe of the ES, RPS and ATWAS Systems.

Time Position Applicant's Actions or Behavior

• Executes actions per SRO and OP-507, Section 4.1, to place ES Channell1 in the tripped condition Channel o Verifies the other two ES channels are not tripped BOP

• o0 Selects the "Pressure Test Module" on Channel Channell1 to the "Test Operate" position o Verifies multiple annunciator alarms o Verifies proper ES status panel lights are ON

(

(

7/2112009 712112009 Page 2 of 17 7:54AM F:\NRC - 2009\SES\2009 #2\SES #2 2009 NRC Operator Actions Fonn 2009\8E8\2009 NRC - SES #2\8E8 Form E8-D-2 ES-D-2 Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

(

Op-TestNo.: 1 Scenario No.: 2 Event No.: 2 Rev.: 0 Event

Description:

(Examiner Cue) After the ES channel has been tripped a small condenser tube leak occurs [MALF]. AP-604, Waterbox Tube Failure, will be entered and CWP-IA secured.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarm o (H-2-8) "Sec Sample System Alarm" o Reviews AR AR-403

-403

• Notifies SRO of alarm and to refer to CP-138 BOP

• Notifies Secondary Chemistry to investigate

• Determines affected waterbox o Using SS-141-CIR determines that leak is in the "A" waterbox o Point A - CE-2 rising

• • Assists the BOP in diagnosing problem

(( ** Directs BOP actions per AR-403 SRO

• • Refers to CP-138

• • Evaluates entry into AP-604, Waterbox Tube Failure BOP ** Notifies SRO when CE-2 exceeds 10 /lmho/cm flmho/cm

• Directs BOP actions per AP-604 o Notify chemistry o Notify personnel of entry into AP-604 o Notify SPO to perform Enclosure 1 o Determines no power reduction required SRO o Stops CWP-IA o Notify SPO to close ARV-47 o Notify chemistry ofCWP shutdown o Opens ARV-56 and ARV-57 o Notifies SPO to close MSV-24 o Refers to OP-204 7/2112009 7/21/2009 Page 3 of 17 7:54AM 7:54 AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 2 Event No.: 2 Rev.: 0 Event

Description:

(Examiner Cue) After the ES channel has been tripped a small condenser tube leak occurs [MALF]. AP-604, Waterbox Tube Failure, will be entered and CWP-IA secured.

Time Position

• Applicant's Actions or Behavior

• Performs actions as directed by the SRO o Notifies chemistry o Notifies personnel of entry into AP-604 o Notifies SPO to perform Enclosure 1 BOP 0 Stops CWP-IA o Notifies SPO to close AR V -4 7 ARV-47 o Notifies chemistry of CWP shutdown o Opens ARV-56 and ARV-57 o Notifies SPO to close MSV-24

(

(

7/2112009 Page 4 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form Fonn ES-D-2 Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 2 Event No.: 3 Rev.: 0 Event

Description:

(Examiner Cue) When the actions of AP-604 are complete the PZR level controller will fail low [MALF]. This will require manual PZR level control for the remainder of the scenario. Insertion of the failure during the actions of AP-604 is recommended due to the lengthy time it takes to recognize the malfunction (5 to 10 minutes).

• , Time Position Applicant's Actions or Behavior

• Recognize RC-OOI-LIC RC-OOl-LIC failure low o Lowering PZR level with no rise in controller demand RO 0 Take manual control of level controller

• Maintain manual PZR level control during the remainder of the scenano

• Acknowledge failure ofPZR level controller SRO

• Directs RO to maintain level lAW IAW with OP-I03A, OP-l 03A, Curve 5

• Contacts work controls to initiate repair efforts .

(

(

7121/2009 7/2112009 Page 5 of of17 17 7:54AM 7:54 AM F:~C - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions FOnTI F:)NRC Form ES-D-2 Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-TestNo.: 1 Scenario No.: 2 Event No.: 4 Rev.: 0 Event

Description:

(Examiner Cue) After the actions for RM-A5G RM-ASG failure are complete the selected PZR level transmitter will fail low [MALFJ. [MALF]. Manual control of MUV-31 will be required and a good instrument will be selected using OP-50l. OP-SO 1.

Time Position Applicant's Actions or Behavior

• Chemistry reports monthly CFT sample results are 2656 26S6 ppmB CFT -lA and 22S0 for CFT-IA 2250 ppmB for CFT CFT-IB-IB SRO

• Enters TS 3.S.1, 3.5.1, Condition A, with actions to restore concentration to within limits in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

(

(

7/2112009 Page 6 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 2 Event No.: 5/6 Rev.: 0 Event

Description:

(Examiner Cue) Once the TS determination is completed MUV-258 will close [MALFJ (RCP-1A CBO isolation valve). The BOP will open the valve with SRO concunence. Thirty seconds later RCP-1A will experience 1st and 2nd nd stage seal failures

[MALFJ. OP-302, RCP Operation, will direct securing the RCP immediately.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarms o (H-4-5) "RCP Seal Bleed Off High"

• Recognizes MUV -258 has closed BOP

• Reports failure to SRO

• Reviews AR-403 o Maximum of 5 minutes to reopen the valve

• Requests permission to open the valve

• Opens MUV-258

• Assists BOP in diagnosing the failure

( SRO

• Directs BOP to open MUV-258

• Announce/acknowledge alarms o (1-4-4)

(I-4-4) "RCP "Rep Seal Upper Stage Temp High" RO/BOP

• Reviews AR-501

• Notifies SRO of failure

• Assists the RO/BOP in diagnosing the failure

• Directs the BOP to check the RCP Seal Data recorders*

• Enters OP-302, RCP Operation

• Directs the BOP to:

o Monitor RCP seal conditions SRO* 0 Verify proper service water, seal injection flows and temperatures o Ensure CBO valve for affected pump is open

• Determines to immediately trip RCP-1A due to high seal stage temperature and differential pressure:::: 2100 psig

• Directs the RO/BOP to trip RCP-1A 712112009 7/2112009 Page 7 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 2 Event No.: 5/6 Rev.: 0 Event

Description:

(Examiner Cue) Once the TS determination is completed MUV-258 MUV-258 will close [MALF] (RCP-IA(RCP-1A CBO isolation valve). The BOP will open the valve with SRO nd concun-ence. Thirty seconds later RCP-IA RCP-1A will experience 1st and 2nd stage seal failures

[MALF]. OP-302, RCP Operation, will direct securing the RCP immediately.

Time Position Applicant's Actions or Behavior

• Assist in diagnosing alarms

• Determines that seal outlet temperatures are> 200 degrees and BOP seal differential pressure is > 2100 psig

• Perform additional actions as directed by the SRO

• Enters AP-545, Plant Runback o Directs the BOP to:

• Notify personnel of entry into AP-545

• Ensure nan-ow range Tc is selected to RCP-IB RCP-1B

• Ensure nan-ow range RCS pressure control is selected to

(( "A" RCS loop

• Ensure lift oil pump running

• Ensure regulating rod index is within insertion limits SRO o Directs the RO to:

• Ensure MFW flows are re-ratioing (very little change due to low power level)

• Ensure RCS pressure is stable

• Ensure Rx power is less than maximum based on FWPs

• Ensure delta Tc stabilizes

• Ensure vital plant parameters are approaching stability

• Maintain imbalance within limits

• Verify rods are within 6.5% of their group average height 7/2112009 of 17 Page 8 of17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Fonn ES-D-2 Rev O.docx

I Appendix AppendixD n Required Operator Actions Form ES-D-2

(

Op-TestNo.:

Op-Test No.: 1 Scenario No.: 2 Event No.: 5/6 Rev.: 0 Event

Description:

(Examiner Cue) Once the TS determination is completed MUV-258 will close [MALF] (RCP-IA CBO isolation valve). The BOP will open the valve with SRO nd concurrence.

concun-ence. Thirty seconds later RCP-IA will experience 1st and 2nd stage seal failures

[MALF]. OP-302, RCP Operation, will direct securing the RCP immediately.

Time Position

• Applicant's Actions or Behavior

• Perform actions as directed by the SRO o Ensure MFW flows are re-ratioing (very little change due to low power level) o Ensure RCS pressure is stable o Ensure Rx power is less than maximum based on FWPs RO 0o Ensure delta Tc stabilizes o Ensure vital plant parameters are approaching stability

• Verifies PZR level, Tave and MS Hdr Pressure are normal o Maintain imbalance within limits o Verify rods are within 6.5% of their group average height

(

• • Perform actions as directed by the SRO o Notify personnel of entry into AP-545 o Ensure narrow nan-ow range Tc is selected to RCP-IB

• Selects TT3 on RC-5A-MS2 o Ensure narrow nan-ow range RCS pressure control is selected to "A" RCS loop BOP

• Verifies RCS pressure control is selected to "A" loop in SASS cabinets o Ensure lift oil pump running

• Verifies RCP-3A is running o Ensure regulating rod index is within insertion limits

• Refers to OP-I03D OP-103D 7/2112009 Page 9 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form Fonn ES-D-2 Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

((

Op-TestNo.:1 Op-Test No.: 1 Scenario No.: 2 Event No.: 7/8 Rev.: 0 Event

Description:

(Examiner Cue) When the plant is stabilized, or following the shutdown of Rep-lA, a 40 gpm OTSG tube leak develops on the "B" OTSG [MALF]. This will meet the RCP-1A, criteria to enter an Unusual Event. Once diagnosed EOP-6, OTSG Tube Rupture, will be entered. The manual Rx trip pushbutton will fail [MALF] requiring breakers 3305 and 3312 to be opened. [CT] [eT} Following the Rx trip the tube leak will increase to 155 gpm.

Time Position Applicant's Actions or Behavior

• Direct RO/BOP ROIBOP actions per EOP-6, OTSG Tube Rupture o Maintain PZR level (Rule 7, attached) o If PZR level is < 100 in then trip the reactor IfPZR o Notify personnel o Determine affected OTSG o Close MSV MSV-56 -56 o Maintain DFT level between 8 and 11 feet o Concurrently perform EOP-14, Enclosure 17 o Notify SPO to concurrently perform EOP-14, Enclosure 6 c( o Notify SPO to concurrently perform EOP-14, Enclosure 1 o Trip the reactor

• Manual Rx trip pushbutton will fail SRO

• Breakers 3305 and 3312 must be opened o Verify control rod groups inserted o Verify NIs indicate Rx is shutdown o Verify MSSVMSSVss are closed o Verify CC cooling running in emergency mode o Select PZR heaters to off o Maintain adequate SCM

• Start RCS depressurization

• Fully open Spray valve

• Control HPI

• Rule 2 & Rule 7 (attached) o Start RCS boration o Start RCS cooldown within normal limits using both OTSGs c_(

7/2112009 7/21/2009 Page 10 of17 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form Fonn ES-D-2 Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Op-TestNo.:1 Scenario No.: 2 Event No.: 7/8 Rev.: 0 Event

Description:

(Examiner Cue) When the plant is stabilized, or following the shutdown of RCP-1A, a 40 gpm OTSG tube leak develops on the "B" OTSG [MALF]. This will meet the criteria to enter an Unusual Event. Once diagnosed EOP-6, OTSG Tube Rupture, will be entered. The manual Rx trip pushbutton will fail [MALF] requiring breakers 3305 and 3312 to be opened. [CT] Following the Rx trip the tube leak will increase to 155gpm. 155 gpm.

Time Position Applicant's Actions or Behavior

• • Execute EOP actions in accordance with SRO directions o0 Maintain PZR level per Rule 7 (attached)

, ** Close MUV-49 MUV-49

• • Open MUVMUV-24 -24

, ** Open MUV-73 MUV-73 o0 Notify NotifY personnel o0 Determine affected OTSG

• • "B" is affected OTSG o0 Close MSV-56 o0 Maintain DFT level between 8 and 11 feet o0 Concurrently perform EOP-14, Enclosure 17

( o0 Notify SPO to concurrently perform EOP-14, Enclosure 6 NotifY SPO to concurrently perform EOP-14, Enclosure 1I o0 Notify o0 Trip the reactor

• • Adjust MS Hdr Pressure setpoint to 46

• • Manual Rx trip pushbutton will fail

• • Breakers 3305 and 3312 must be opened [CT]

RO/BOP VerifY control rod groups inserted o0 Verify VerifY NIs indicate Rx is shutdown o0 Verify

• • Monitor PR and IR NIs VerifY MSSV o0 Verify MSSVss are closed

, ** Checks steam safety valve monitor o0 Verify CC cooling running in emergency mode

, o0 Select PZR heaters to off o Maintain adequate SCM

• Start RCS depressurization

• Fully open Spray valve

• Control HPI

• Rule 2 & & Rule 7 (attached) o Start RCS boration

• Ensure at least 1 post-filter in service

• Open CAV-60, start CAP-1A or 1B l

• Start RCS cooldown within normal limits using both OTSGs F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

(

Op-Test No.: 1 Scenario No.: 2 Event No.: 9 Rev.: 0 Event

Description:

(Examiner Cue) A bearing will fail on MUP-IA [MALF]. MUP-IC and its cooling water pumps must be started [CT] *.

• , Time Position Applicant's Actions or Behavior

• Direct RO/BOP actions for loss of running MUP

• Rule 7, PZR Level control o Close MUV-49 MUV -49 o Ensure MUV-58 open SRO o Start required cooling water pumps for affected MUP o Start ES selected MUP

• May use OP-402, Section 4.6 to start MUP-IC MUP-l C (either way is acceptable)

• • Execute EOP actions in accordance with SRO directions

• • Rule 7, PZR Level control o Ensure MUV-58 open o Check closed MUV MUV-49 -49 o Start required cooling water pumps for affected MUP RO/BOP.

• Starts RWP-3B

• Starts DCP-IB o Start ESselected ES selected MUP [CT]

• Starts MUP-IC MUP-l C o Maintain PZR level Scenario may be terminated when makeup flow is restored and a plant cooldown/depressurization started.

7/2112009 7/21/2009 Page 120f17 12 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( RULE 1, LOSS OF SCM

• _ IE

!E < 1 min has elapsed since losing adequate SCM, THEN immediately stop all RCPs.

• _ IE !E RCPs were NOT stopped

• _ Progress toward a maximum within 1 min, within allowable plant cooldown to THEN ensure all operating RCPs achieve CFT and LPI flow as soon remain running until .§.QY any of the as possible.

following exist; SCM is restored

_ flow > 1400 gpm in LPI flow>

each injection line.

c

(

Manually actuate ES. Depress "HPI MAN ACT" push buttons on Trains A and B.

• • Depress "RB ISO MAN ACTUATION" push buttons on Trains A and B.

• _ _!E IE LPI has NOT actuated, AND RCS PRESS:::; 300 psig, THEN depress "LPI MAN ACT" push buttons on Trains A and B.

• Depress "ISCM" push buttons for EFIC channels A and B.

• Ensure Tincore is selected on

( SPDS.

7/2112009 Page 13 of17 of 17 7:54AM F:\NRC -0 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

II AppendixD Appendix D Required Operator Actions Form ES-D-2

( RULE 2, HPI CONTROL

• __ lE IF HPI has actuated, 1 Obtain SRO concurrence to THEN TH EN bypass or reset bypass or reset ES.

ES actuation.

• 2 Bypass or reset ES actuation:

Auto Manual

• Open MUP recirc prior to

• _ !E lE recirc to MUT is desired, throttling HPI flow THEN open MUP recirc to MUT valves:

< 200 gpm/pump.

11_ MUV-53 1_ MUV~25711 MUV~LVI II

• _ !E lE recirc to RB sump is desired, THEN open HPI recirc to sump valves:

( - MUV-543 - -MUV-544

- MUV-545 - MUV-546

• _ !E lE adequate SCM exists based,

• _ Prevent exceeding NOT limit on Tincore, THEN throttle HPI to maintain

• _ !E lE OTSG isolated for TRACC, required conditions. THEN TH EN maintain RCS RCS* PRESS

< 1000 psig.

• _ !E lE PTS, SGTR, or dry OTSG exists, THEN maintain minimum adequate SCM.

SCM .

• __ lE IF adequate SCM can be

• _ Ensure running HPI pump is maintained with 1 HPI pump, aligned to MUT.

AND stopping second HPI pump

( is desired, THEN stop 1 HPI pump.

7/2112009 Page 14 of 17 of17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Fonn Form ES-D-2 Rev O.docx

I Appendix D Required Operator Actions Form ES-D-2

( RULE 3, EFW/AFW CONTROL

• • Ensure available OTSGs are at "LLL" > 20 in or trending toward required level. "NAT CIRC" > 70%

"ISCM" > 90%

• IF manual control of EFW flow 1 Obtain SRO concurrence to place is desired, EFIC in manual.

THEN establish manual EFIC control. 2 Control EFW to maintain required EFW flow and OTSG level.

3 _!E EFW flow is NOT controlled, THEN depress EFIC channels A and B "MANUAL PERMISSIVE" push buttons and close affected

( EFW block valve.

• _ !E adequate SCM does NOT 2 OTSGs > 280gpm in 1 line exist, to each OTSG AND level in available OTSGs EFW is NOT at or trending toward 10TSG > 470 gpm in 1 line "ISCM" level, to 1 OTSG THEN establish manual required 20TSGs > 250 gpm to flow. < 300 gpm/OTSG gpmlOTSG AFW 10TSG > 450 gpm to

< 600 gpm

• _ !E adequate SCM exists,

• Do not allow OTSG level to lower.

THEN throttle flow to prevent OTSG PRESS from lowering

(( > 100 psig below desired PRESS.

712112009 7/21/2009 Page 15 of 17 7:54 AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

(

RULE RULE4,PTS 4, PTS

• _ IE !E ~any of the following exist:

• Throttle HPI flow to minimize adequate SCM.

Tincore < 400°F, AND cooldown rate

• Throttle LPI flow to minimize exceeds ITS limit adequate SCM.

RCPs off,

• PTS is applicable until an AND HPI flow exists Engineering evaluation has been completed.

perform ,required PTS THEN perform.required actions.

(

7/2112009 712112009 Page 160f17 16 of 17 7:54AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

II Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 7, PZR LEVEL CONTROL 1 IF PZR level is < PZR level PZR Level Band band, Rx at power> 20% 200 in to 240 in TH EN restore PZR level.

Rx at power ::s 20% 120 in to 200 in Rx tripped 50 in to 120 in

• Cycle appropriate BWST to MUP valve to maintain MUT level 2: 55 in:

MUV-73 MUV-58

• Close MUV-49 2 IE PZR level does NOT recover, 1 Open MUV-24 THEN establish manual HPI flow. 2 Notify SSO to evaluate

( Emergency Plan entry.

3 _ IE PZR level does NOT recover, THEN start second MUP and required cooling pumps.

[Rule 5, Diesel Load Control]

4 _ IE PZR level does NOT recover, THEN open additional HPI valves.

5 _ IE PZR level does NOT recover, THEN close MUP to MUT recircs:

MUV-53 MUV-257 3 IE PZR level recovers,

• _ IE letdown is desired, THEN restore normal PZR THEN CONCURRENTLY PERFORM conditions. EOP-14, Enclosure 4, Letdown Recovery (if accessible).

[Rule 2, HPI Control]

(

7/

71f 1/2009 l12009 Page 17 of 17 7:54AM 7:54 AM F:\NRC - 2009\SES\2009 NRC - SES #2\SES #2 2009 NRC Operator Actions Form ES-D-2 Rev O.docx

AppendixD Appendix D Scenario Outline Form ES-D-l ES-D-1

(

Facility: Crystal River #3 Scenario No.: #3 (NRC 2009) Op-Test No.: 1 Examiners: Operators:

Initial Conditions: ~ 90% power.

The plant is at ::::;

Turnover: The following equipment is OOS: MUP-1B MUP-IB (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />); FWP-7 (4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />);

MSV-55 (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />). "A" RPS channel in bypass due to the failure low of RC-4A-TE2 (2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />).

Event No. I~~~'II Malf.

No.

Event Type

• Type* I Event Description I C (BOP) CIV-34 fails closed (air failure). (OP~417) 1 1 C (SRO) SRO TS determination. (TS 3.6.3)

EF-98-LT fails low.

2 2 I (SRO)

SRO TS determination. (TS 3.3.17)

( CDP-IA magnetic coupling failure. Power CDP-1A 3 3 , C (RO) decrease to approximately 65%.

(AP-510,OP-603)

Turbine automatic control failure at ~ 80%.

at::::;

4 4 C (BOP)

(AP-510) 5 5 M (ALL) "B" OTSG steam leak. (EOP-2, AI-505) AI-50S) 6 6 C (BOP) MFLI trips both MFWPs. (EOP-l3,(EOP-13, Rule 3) 7 7 C (BOP) (AI-505) [CT]

DCP-IB fails to start. (AI-50S)

DCP-1B

• 88 Loss of all feedwater. Initiate HPIIPORV HPI/PORV cooling.

8 C (RO or BOP)

(EOP-4) [CT]

Loss of ASCM. Secure Reactor Coolant Pumps.

9 N/A C (RO or BOP)

(EOP-l3, Rule 1) [CT]

(EOP-13,

• • (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

(

7121/2009 7/21/2009 Page 1 of 1 Appendix D F:\NRC - 2009\Outlines\SES\NRC 2009 - SES #3 Scenario Outline NRC Form ES~D-l,Rev ES~D-1,Rev O.docx

Narrative Summary NRC 2009 Scenario #3

(

Plant is initialized at 90% power for turbine valve testing. MUP-IB, MUP-1B, FWP-7 and MSV MSV-55-55 are OOS. RPS Channel "A" is bypassed due to the failure of RC-4A-TE2.

Soon after turnover CIV-34 will fail closed. Actions to secure CIP-3A,starting CIP-3B and swapping Cavity Cooling fans are required. TS 3.6.3, Condition C, should be addressed with actions to isolate the flowpath within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

Once TS actions are completed EF EF-98-LT LT (EFT level) fails low and TS 3.3 3.3.17

.17 is addressed.

Condition A should be entered with the action to restore the channel to operable status within 30 days.

Following the failure of.EF-98-LT of,EF-98-LT the magnetic coupling on CDP-IA CDP-1A experiences a control circuit failure. Power must be lowered quickly so that MFW booster pump suction is not lost.

AP-510, Rapid Power Reduction, will be entered and power reduced to about 65%. At about AP-5IO, 80% power automatic control of the turbine will be lost. The crew must recognize this failure and take manual control of the turbine for the remainder of the down power.

OTSG develops a steam leak. Plant shutdown is started with After the plant is stabilized the "B" OTSGdevelops manual. SGIRx the Turbine in manuaL SG/Rx Master station may also be taken to manuaL manual. After the reactor is tripped the steam leak increases and "B" OTSG is isolated. When MFLI is actuated both the "A" and "B" MFWPs will trip due to a failure of the EFIC FWP trip logic circuitry.

(

DCP-1B fails to start resulting in a loss of cooling to DHP-IB, DCP-IB DHP-1B, RWP-3B and MUP-IC.MUP-1 C. The "B" train DC cooled equipment must be secured and MUP-I MUP-1 C either secured or placed on SW cooling [eT].

reT].

EFP-2 will stop supplying EFW when the "B" OTSG depressurizes. EFP-3 will trip due to a mechanical failure. EFP-I EFP-1 breaker will not close when demanded. EOP-4, Inadequate Heat Transfer, will be entered based on symptoms of inadequate primary to secondary heat transfer or loss of all main and emergency feedwater. HPIIPORV HPI/PORV cooling must be established leT]. [eT]. An ALERT condition will exist when HPVPORV HPIIPORV cooling is started.

If a loss of ASCM condition exists the RCPs must be secured within 1 minute [eT].

This scenario may be terminated when HPIIPORV HPI/PORV cooling is established and incore inc ore temperatures are starting to lower.

712112009 7/2112009 Page 1 of6 7:58 AM 7:58AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Summary - Turnover Rev O.docx

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 3 Event No.: 1 Rev.: 0 Event

Description:

(Examiner Cue) Soon after turnover CIV-34 will fail closed [MALF].

Actions to secure CIP-3A, starting CIP-3B and swapping Cavity Cooling fans are required. TS 3.6.3, Condition C should be addressed with actions to isolate the flowpath within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarm:

o (C-2-14) "SW ISO Valve Air Failure"

• Reviews AR-303 BOP

• Diagnoses failure o CIV-34 CIV-34 green light ON

• Informs SRO of air failure to CIV -34

• Recommends swapping Cavity Cooling fans and pumps

• • Assists BOP in diagnosing CIV-34 CIV -34 failure

• • Directs the BOP to swap Cavity Cooling fans and pumps lAW OP-417

( SRO ** Enters TS 3.6.3, Condition C

• • Contacts Work Control to initiate repair efforts

• • May review the SRO checklist for unplanned equipment status

• changes

• • Swaps Cavity Cooling fans and pumps lAW OP-417, Section 4.9.2 o Stops AHF AHF-2A -2A o Stops CIP-3A BOP o0 Closes CIV-35 o Opens CIV -40 o Opens CIV-41CIV -41 o Starts CIP-3B o Starts AHF-2B 7/2112009 Page 1 of of18 18 7:59 AM 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: 3 Event No.: 2 Rev.: 0 Event

Description:

(Examiner Cue) EF-98-LT (EF tank level) fails low. (MALF) TS 3.3.17 entry required.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarm (H-7 -1) "EF Tank Level Low-Low" o (H-7-1) o Reviews AR AR-403

-403 RO/BOP 0 Notes that EF-98-LIl is failed low while EF-99-LIl still indicates proper EFT level indicates o Informs SRO of instrument instrument failure o May dispatch SPO to ensure no leak at EFT-2

• Evaluates TS 3.3.17 for applicability. Enters Condition A. (has to use Basis to determine)

• May evaluate TS 3.3.18 for applicability. No entry required.

SRO * (has to use Basis to determine.)

• Contacts Work Control to initiate repair efforts

(

• May review SRO checklist for unplanned equipment status change

(

7/2112009 Page 2 of 18 of18 7:59 AM 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-TestNo.:

Op-Test No.: 1 Scenario No.: 3 Event No.: 3/4 Rev.: 0 Event

Description:

(Examiner Cue) After TS determination the magnetic coupling on CDP-IA experiences a control circuit failure. [MALF]. Power must be decreased quickly so that MFW booster pump suction is not lost. AP-510, AP-5IO, Rapid Power Reduction, will be entered and power reduced to about 65%. At about 80% power automatic control of the turbine will be lost.

[MALF]. The crew must recognize this failure and take manual control of the turbine for the remainder of the power decrease.

Time Position Applicant's Actions or Behavior

,

• Announce/acknowledge Announcel acknow ledge alarms o (N-2-2) "Cond Pump A Uncoupled"

, o (N-1-5)

(N-I-5) "Hotwell Level High/Low"

• Diagnoses failure o Large decrease in condensate flow RO/BOP o DFT level lowering o Low motor current on CDP-IA

• May attempt to increase demand on CDP-IA

• Reviews AR-602

(

• Notifies SRO of malfunction

• Recommends reducing power

• • Acknowledges receipt of alarms

• • Assists RO/BOP in diagnosing CDP failure

• • Enters AP-51 0, Rapid Power Reduction

• • Directs RO/BOP actions per AP-51 0 o Adjust Load Rate to desired setpoint o Set Unit Load Demand to "10"

, 0o Notify personnel of entry into AP-51 AP-5IO0 SRO 0o Maintain PZR level (Rule 7, attached) o Notify Chemistry of power change o Verify Imbalance within limits o When power is < 80% notify SPO to ensure MS is supplying AS o Maintain DFT level between 8 and 11 feet o If IfMBVs MBV s close, then ensure MBV MBVss remain closed o Verify Aux Transformer is not supplying any bus 7/2112009 Page 3 of of18 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 3 Event No.: 3/4 Rev.: 0 Event

Description:

(Examiner Cue) After TS determination the magnetic coupling on CDP-IA experiences a control circuit failure. [MALF]. Power must be decreased quickly so that MFW booster pump suction is not lost. AP-510, Rapid Power Reduction, will be entered and power reduced to about 65%. ),...t ~t about 80% power automatic control of the turbine will be lost.

[MALF]. The crew must recognize this failure and take manual control of the turbine for the remainder

, of the power decrease.

Time Position Applicant's Actions or Behavior

• Perform actions as directed by the SRO per AP-510 o Adjust Load Rate to desired setpoint o Set Unit Load Demand Demandto to "10" RO o Verify Imbalance within limits o Maintain DFT level between 8 and 11 feet o IfMBVs .

If MBV s close, then ensure MBVs MBV s remain closed

• Perform actions as directed by the SRO per AP-510 AP-51 0 o Notify personnel of entry into AP-51O AP-51 0

( o Maintain PZR level (Rule 7, attached) o Notify Chemistry of power change BOP o When power is < 80% notify SPO to ensure MS is supplying AS o Maintain DFT level between 8 and 11 feet o Verify Aux Transformer is not supplying any bus

• • RO/BOP in diagnosing turbine failure Assists ROIBOP

• • Directs BOP to take manual control of the turbine and maintain header pressure as power lowers

• Directs the RO to continue the down power with the SG/RX Master station in Manual SRO

• RO/BOP to stabilize plant parameters at approximately Directs ROIBOP 65%

• Contacts Work Control to initiate repair efforts

• May review SRO checklist for unplanned equipment status change 711112009 Page 4 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

II Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: 3 Event No.: 3/4 Rev.: 0 Event

Description:

(Examiner Cue) After TS determination the magnetic coupling on CDP-IA experiences a control circuit failure. [MALF]. Power must be decreased quickly so that MFW booster pump suction is not lost. AP-510, Rapid Power Reduction, will be entered and power reduced to about 65%. At about 80% power automatic control of the turbine will be lost.

[MALF]. The crew must recognize this failure and take manual control of the turbine for the remainder of the power decrease.

Time Position Applicant's Actions or Behavior

• • Recognizes turbine failure to lower demand

• • Announce/acknowledge alarms o0 (0-3-4) "Turb Throttle Press High/Low" (possible)

(N 4) "Turb EHe on o0 (N-6-4) on Manual" BOP o0 (K-6-2) "Unit Master In Track"

• ** Manually reduces turbine to maintain header pressure

• • Continues manual control until power reduction is completed

, (approximately 65%)

• • Stabilizes plant parameters

(

• • Recognizes turbine failure to lower demand

• • May take manual control of the SG/RX Master station

• • Continues power reduction with the Turbine and/or SG/RX RO station( s) in Manual Master station(s)

• • Stops power decrease at 60% to 70% power

• • Monitors DFT level

• • Stabilizes plant parameters

(

7/2112009 Page 5 of 18 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

II Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-TestNo.:

Op-Test No.: 1 Scenario No.: 3 Event No.: 5/6 Rev.: 00 Event

Description:

(Examiner Cue) After the plant is stabilized the "B" OTSG develops a steam leak [MT]. Plant shutdown is started with the Turbine and/or SG/Rx Master stations in manual.

After the reactor is tripped the steam leak rises and the "B" OTSG is isolated. When MFLI is actuated both the "A" and "B" MFWPs will trip due to a failure of the EFIC FWP trip logic circuitry [MALF].

Time Position Applicant's Actions or Behavior CREW. ** Recognize indications of a steam leak in the IB

• Announce/acknowledge alarms o0 (F-3-2) Aux Bldg Fire Alert BOP ** Reviews AR-401

• • Notifies SRO of failure

• • Directs SPO to investigate

• Assists the ROIBOP RO/BOP in diagnosing the failure

(

• AP-51 0, Rapid Power Reduction May re-enter AP-510,

• May direct RO/BOP actions per AP-51 0 o Adjust Load Rate to desired setpoint o Set Unit Load Demand to "10"

• Should direct RO to use SG/Rx master station and BOP to use the turbine or BOP to use the turbine only SRO o Notify personnel of entry into AP-510 o Maintain PZR level (Rule 7, attached) o Notify Chemistry of power change o Maintain Imbalance within limits o When power is < 80% ensure MS is supplying AS (N/A) (N/A)

• Maintain DFT level between 8 and 11 feet

• Directs the RO to trip the reactor prior to 4 psig RB pressure

• Assist in diagnosing alarms RO

• Starts plant shutdown

• Perform additional actions as directed by the SRO c

7/2112009 Page 6 of 18 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: 3 Event No.: 5/6 Rev.: 00 Event

Description:

(Examiner Cue) After the plant is stabilized the "B" OTSG develops a steam

[MTJ. Plant shutdown is started with the Turbine and/or SGIRx Master stations in manual.

leak [MT].

After the reactor is tripped the steam leak rises and the "B" OTSG is isolated. When MFLI is actuated both the "A" and "B" MFWPs will trip due to a failure of the EFIC FWP trip logic

[MALF].

circuitry [MALFJ.

t Time Position Applicant's Actions or Behavior

• Maintains header pressure with Turbine in Manual BOP

• Perform additional actions as directed by the SRO

• Trips the reactor when directed

• Perform first pass of ofEOP-2 EOP-2 Immediate Actions from memory o Depress the Rx trip pushbutton o Verify CRD groups 1 through 7 are fully inserted RO o Verify NIs indicate Rx is shutdown o Depress Main Turbine trip pushbutton o Verify TV TVss and GV GVss are closed

(

• Perform second pass ofEOP-2 Immediate Actions with SRO direction

• Direct RO actions per EOP-2 o Depress the Rx trip pushbutton o Verify CRD groups 1 through 7 are fully inserted SRO o Verify NIs indicate Rx is shutdown o Depress Main Turbine trip pushbutton o Verify TV TVssandand GVGVss are closed

• Directs BOP to determine failed OTSG and isolate

• Depresses Global Silence pushbutton

• Isolates the "B" OTSG BOP

• Recognizes that both MFWPs tripped when MFLI was actuated

• Notifies SRO of ofloss loss of both MFWPs 7/2112009 Page 7 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

II AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 3 Event No.: 5/6 Rev.: 00 Event

Description:

(Examiner Cue) After After the plant is stabilized the "B" OTSG develops a steam leak [MT]. Plant shutdown is started with the Turbine and/or SGIRx SG/Rx Master stations in manual.

After the reactor is tripped the steam leak rises and the "B" OTSG is isolated. When MFLI is actuated both the "A" and "B" MFWPs will trip due to a failure of the EFIC FWP trip logic circuitry [MALF].

Time Position Applicant's Actions or Behavior

• • Perform symptom scan o0 Station Blackout o0 Inadequate SCM o0 Inadequate Heat Transfer CREW o0 Excessive Heat Transfer o0 SG Tube Rupture

• ** Determine that no symptoms are evident, continue in EOP-2

• • Recognize that Rule 2, HPI Control and Rule 3, EFW Control

, are in effect (attached)

(( RO/BOP ROIBOP ** Perform actions as directed by the SRO l

7/2112009 Page 8 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 3 Event No.: 7 Rev.: 0 Event

Description:

(Automatic Parameter Cue) DCP-IB fails to start [MALF] resulting in a loss of cooling to DHP-IB, RWP-3B. MUP-IC must be secured or placed on SW cooling [CT].

DHP-IB and RWP-3B may also be secured.

Time Position Applicant's Actions or Behavior

• Perform Rule 2, HPI Control (attached) o Bypass or Reset ES actuation o Open MUP recirc valves prior to throttling < 200 gpm/pump gpmJpump

• Determine that DCP-IB failed to start o (D-5-6) "BS/DH "BSIDH PumpB Pump B DC Flow Low" BOP o Amber light remains on for DCP-IB on "B" ES Status Panel

• Attempt to start DCP-IB

• Notify SRO of offailure failure o Secures MUP-l MUP-IC reT]

C OR places on SW cooling feT]

• May note time when RCPs must be secured

• Directs BOP to:

( o Attempt start ofDCP-lB SRO o0 Secure DC cooled equipment o Shutdown MUP-l MUP-IC C or place on SW o Stop RCPs within 30 minutes due to loss of CBO flow

(

712112009 7/2112009 Page 9 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 3 Event No.: 8/9 Rev.: 00 Event

Description:

(Automatic Parameter Cue) EFP-2 will stop supplying EFW when the "B" OTSG depressurizes. EFP-3 will trip due to a mechanical failure [MALF]. EFP-l breaker will not close when demanded. EOP-4, Inadequate Heat Transfer, will be entered based on symptoms of inadequate primary to secondary heat transfer or loss of all main and emergency feedwater. HPIIPORV HPI/PORV cooling must be established [CT]. An ALERT should be declared HPIIPORV cooling is started. Once adequate SCM is lost RCPs must be secured when HPI/PORV within 1 minute [CT] .*

Time Position Applicant's Actions or Behavior

• Perform Rule 3, EFW Control (attached)

• Recognize EFP~2EFP-2 flow decrease (isolation of"B" OTSG)

• Recognize loss of EFP-3 ofEFP-3 RO/BOP o (H-8-3) "EFP 3 Start Failure" o NoEFWflow o Green light on control handle

• Notifies SRO of malfunction

(

l 7121/2009 7/2112009 Page 10 ofl8 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I[ AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: 3 Event No.: 8/9 Rev.: 00 Event

Description:

(Automatic Parameter Cue) EFP-2 will stop supplying EFW when the "B" OTSG depressurizes. EFP-3 will trip due to a mechanical failure [MALF]. EFP-l breaker will not close when demanded. EOP-4, Inadequate Heat Transfer, will be entered based on symptoms of inadequate primary to secondary heat transfer or loss of all main and emergency feedwater. HPIIPORV HPI/PORV cooling must be established [CT]. An ALERT should be declared when HPIIPORV HPI/PORV cooling is started. Once adequate SCM is lost RCPs must be secured within 1 minute [CT].

Time Position Applicant's Actions or Behavior

• Enters EOP-4 and directs RO/BOP actions o Notify personnel o Verify EFW or AFW pumps running

• Directs closure ofEFIC and AFW control valves

• Directs RO or BOP to concurrently perform EOP-14, Enclosure 7 o Notify PPO to perform EOP-14, Enclosure 2 o Adjust MUV-31 setpoint to 100 inches (use Rule 7) o Record initial Tincore temp o Minimize RCS pressure rise

(

• PZR spray, PZR heaters, HPI flow o Reduce running RCPs to 1 per loop o Waits at step 3.13 until any of the following occur:

• RCS pressure approaches NDT limit

• PORV automatically opens

• RCS pressure is  :::: 2400 psig is:::::

o Determines HPIIPORV HPI/PORV cooling is required SRO 0o Actuates HPI

• IfMUP-IC If MUP-1 C cooling water has not been swapped to SW then MUP-IC MUP-1C must be secured o Ensure proper HPI alignment o Ensure HPI recirc valves to sump closed o Establish HPI PORV cooling

• Ensure RCV RCV-ll -11 is open and open PORV o Select all PZR heaters to OFF o Reduces RCPs to only 1 running o Ensure PZR spray valve in AUTO

• Should recognize entry into an Alert condition.

• Directs RCP shutdown shutdown based on either of the following: [CT]

o Within 1 minute of Loss of ASCM o If incore inc ore temp rises:::: 50 0 F above initial value in EOP-4 rises::::: 50°

• Goes to EOP-8B, HPI Coo1down Cooldown

(

7/21/2009 Page 11 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

II Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 3 Event No.: 8/9 Rev.: 00 Event

Description:

(Automatic Parameter Cue) EFP-2 will stop supplying EFW when the "B" OTSG depressurizes. EFP-3 will trip due to a mechanical failure [MALF]. EFP-l EFP-1 breaker will not close when demanded. EOP-4, Inadequate Heat Transfer, will be entered based on symptoms of inadequate primary to secondary heat transfer or loss of all main and emergency HPIIPORV cooling must be established reT].

feedwater. HPI/PORV leT]. An ALERT should be declared HPIIPORV cooling is started. Once adequate SCM is lost RCPs must be secured when HPI/PORV within 1 minute [eT].

• , Time Position Applicant's Actions or Behavior

• Performs actions directed by the SRO o Notify personnel o Verify EFW or AFW pumps running

• Closes EFIC and AFW control valves

• Concurrently performs EOP-14, Enclosure 7 o Notify PPO to perform EOP-14, Enclosure 2 o Adjust MUV-31 setpoint to 100 inches o Record initial Tincore temp o Minimize RCS pressure rise

• PZR spray, PZR heaters, HPI flow

( o Reduce running RCPs to 1 per loop o Waits at step 3.13 until any of the following occur:

• RCS pressure approaches NDT limit

• PORV automatically opens

• RCS pressure is 2: ~ 2400 psig RO/BOP 0 Concurs that HPIIPORV cooling is required o Actuates HPI

• IfMUP-IC IfMUP-1C cooling water has not been swapped to SW then MUP-l MUP-1C C must must be secured o Ensures at least 1 train of HPI is properly aligned o Ensures HPI recirc valves to sump closed o When at at least 1 train of HPI flow is established opens PORV feT] leT]

o Selects all PZR heaters to OFF o Reduces RCPs to one o Ensures PZR spray valve in AUTO

• • Performs Rep shutdown based on either of the following:

leT]

reT]

o Within 1 minute of Loss of ASCM inc ore temp rises 2:

o If incore ~ 50° F above initial value in EOP-4 l(

7/21/2009 7/2112009 Page 12 of 18 7:59AM 7:59 AM F:\NRC - 2009\SES\2009 NRC - SE~ #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test Op-TestNo.: No.: 1 Scenario No.: 3 Event No.: 8/9 Rev.: 00 Event

Description:

(Automatic Parameter Cue) EFP-2 will stop supplying EFW when the "B" OTSG depressurizes. EFP-3 will trip due to a mechanical failure [MALF]. EFP-l EFP-I breaker will not close when demanded. EOP-4, Inadequate Heat Transfer, will be entered based on symptoms of inadequate primary to secondary heat transfer or loss of all main and emergency feedwater. HPI/PORV HPIIPORV cooling must be established [CT]. An ALERT should be declared HPIIPORV cooling is started. Once adequate SCM is lost RCPs must be secured when HPI/PORV within 1 minute [CT].

Time Position Applicant's Actions or Behavior

• Performs EOP-14, Enclosure 7 o Verifies EFP-3 is not running and goes to Step 7.6 o Verifies EFP-2 is not running and goes to Step 7.8

. ROIBOP RO/BOP o Verifies EDG A is not supplying A ES bus o Verifies EFP-l EFP-I is available o Ensures EFP-I EFP-l is running

• Notifies SRO ofEFP-l ofEFP-1 failure to start per Enclosure 7

{

\ Scenario may be termihated terminated when HPIIPORV HP/IPORV cooling is established and incore temperatures are lowering.

(

7/2112009 712112009 Page 13 of of18 18 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 1, LOSS OF SCM

_ LE IF < 1 min has elapsed since losing adequate SCM, THEN immediately stop all RCPs.

• • __ LE IF RCPs were NOT stopped

• _ Progress toward a maximum plant within 1 min, cooldown to achieve CFT and LPI THEN ensure all operating RCPs flow as soon as possible.

remain running until any of the following exist:

SCM is restored

_ flow > 1400 gpm in LPI flow>

each injection line.

• Manually actuate ES.

• Depress "HPI MAN ACT" c( push buttons on Trains A and B.

• _ Depress "RB ISO MAN ACTUATION" push buttons on Trains A and B.

• _ !.E LE LPI has NOT actuated, AND RCS PRESS::;;

PRESS::; 300 psig, THEN depress "LPI MAN ACT" push buttons on Trains A and B.

• _ Depress "ISCM" push buttons for EFIC channels A and B.

• • Ensure Tincore is selected on l SPDS.

7/21/2009 7/2112009 Page 14 140f18 of 18 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 2, HPICONTROL 2,HPI CONTROL

• _ !E HPI has actuated, 1 Obtain SRO concurrence to TH THEN EN bypass or reset bypass or reset ES.

ES actuation.

2 Bypass or reset ES actuation:

Auto Manual

• • _ Open MUP recirc prior to

• _ !E recirc to MUT is desired, throttling HPI flow THEN open MUP recirc to MUT valves:

< 200 gpm/pump.

MUV-53 MUV-L..,JI MUV-2 II

• _ !E recirc to RB sump is desired, THEN open HPI recirc to sump valves:

MUV-543

- - -MUV-544

(( - MUV-545 - MUV-546

• _ !E adequate SCM exists based,

• Prevent exceeding NDT limit on Tincore, THEN throttle HPI to maintain

• _ !E OTSG isolated for TRACC, required conditions. THEN maintain RCS PRESS

< 1000 psig.

• _ !E PTS, SGTR, or dry OTSG exists, THEN maintain minimum adequate SCM.

• _ !E adequate SCM can be ** Ensure running HPI pump is maintained with 1 HPI pump, aligned to MUT.

M UT.

AND stopping second HPI pump is desired, THEN stop 1 HPI pump.

7/21/2009 7/2112009 Page 15 of 18 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 3, EFW/AFW CONTROL

• . Ensure available OTSGs are at or trending toward required "LLL" > 20 in level. "NAT CIRC" > 70%

"ISCM" > 90%

• IF manual cont'rol cont"rol of EFW flow 1 Obtain SRO concurrence to place is desired, EFIC in manual.

THEN establish manual EFIC control. 2 Control EFW to maintain required EFW flow and OTSG level.

3 _ IE EFW flow is NOT controlled, THEN depress EFIC channels A and B "MANUAL PERMISSIVE" push buttons and close affected EFW block valve.

(

• __ IE IF adequate SCM does NOT 2 OTSGs > 280 gpm in 1 line exist, to each OTSG AND level in available OTSGs EFW is NOT at or tr~nding toward 10TSG 1 OTSG > 470 gpm in 1 line "ISCM" level, to 1 OTSG THEN establish manual required 20TSGs > 250 gpm to flow. < 300 gpm/OTSG AFW 10TSG 1 OTSG > 450 gpm to

< 600 gpm

• __ IE IF adequate SCM exists,

• Do not allow OTSG level to lower.

THEN TH EN throttle flow to prevent OTSG PRESS from lowering

> 100 psig below desired PRESS.

712112009 Page 16 of 18 . 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 I

(

RULE4,PTS

• _ !E !f ~any of the following exist:

• Throttle HPI flow to minimize adequate SCM.

Tincore < 400°F, AND cooldown rate

• Throttle LPI flow to minimize exceeds ITS limit adequate SCM.

RCPs off, ** _ PTS is applicable until an AND HPI flow exists Engineering evaluation has been completed.

THEN perform required PTS actions.

c c.

7/2112009 Page 17 of 18 7:59AM F:\NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 7, PZR LEVEL CONTROL

( 1 IF PZR level is < PZR level PZR Level Band band, Rx at power power> > 20 20%% 200 in to 240 in TH EN restore PZR level.

THEN Rx at power:::;

power:::: 20% 1 20 in to 200 in Rx tripped 50 in to 120 1 20 in

• Cycle appropriate BWST to MUP valve to maintain MUT level 2: 55 in:

11_ MUV-73 1_ MUV-58 I

• M UV -49 Close MUV-49 2 IE

!E PZR revel level does NOT recover, 1_ Open MUV-24 THEN establish manual HPI flow. 2 _ Notify SSO to evaluate Emergency Plan entry.

(

3 _ IE PZR level

!E does NOT recover, THEN start second MUP and required cooling pumps.

[Rule 5, Diesel Load Control]

4 _ IE PZR

!E level does NOT recover, THEN open additional HPI valves.

5 _ IE PZR

!E level does NOT recover, THEN close MUP to MUT recircs:

MUV-53 MUV-257 MUV-3 IE PZR

!E level recovers, ** __ !E IF letdown is desired, THEN restore normal PZR THEN CONCURRENTLY PERFORM conditions. EOP-14, Enclosure 4, Letdown Recovery (if accessible).

[Rule 2, HPI Control]

7/2112009 712112009 Page 18 of 18 of18 7:59AM F:~NRC - 2009\SES\2009 NRC - SES #3\SES #3 - 2009 NRC - Operator Actions Rev 0 .docx F:\NRC

AppendixD Appendix D Scenario Outline Form ES-D-l

( Facility: Crystal River #3 Scenario No.: 4 (NRC 2009) Op-Test No.:_l_

Examiners: Operators:

Initial Conditions: The plant is*at is at 100% power.

Turnover: The following equipment is OOS: MUP-IA (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />). Severe thunderstorms are predicted for Citrus and Levy counties.

Event No. I~~~'II Malf.

No.

Event Type**

Type I Event Description CF-2-LT4 fails low (CFT level transmitter).

1 1 I (SRO)

SRO TS determination. (TS 3.5.1) 2 2 C(RO)

C (RO) RHV-4 closes. (AP-510) 3 N/A N (BOP) Swap Unit buses to Startup transformer. (AP-510)

(AP-51 0)

( Dropped rod with automatic runback continuing I (RO) 4 3 through setpoint. (AP-545, AP-504, AI-505)

I (SRO)

SRO ITS determination. (ITS 3.1.4)

Electrical generator hydrogen leak resulting in 5 4 R(RO) manual turbine trip. (AP-660)

"A" OTSG steam stearn leak in the RB following the 6 5 M (ALL) turbine trip. Manual MFLI required. (EOP-2, EOP-5) [CT]

EFV-58 fails as is, EFV-14 fuse blows. (EOP-13, 7 6 C (RO or BOP)

Rule 3) [CT] leT]

MUV MUV-73 -73 fails to open remotely. (EOP-13, Rule 2) 8 7 C (RO or BOP)

[CT]

• • (N)ormal, (R)eactivity, (I)nstrument, (C)omponent,(M)ajor (C)omponent, (M)ajor

(

\

6/9120095:27 AM 6/9/20095:27 Page 1 of 1 FonnES-D-1 Form ES-D-l F:\NRC - 2009\Outiines\SES\NRC 2009\Outlines\SES'NRC 2009 - SES #4 Scenario Outline NRC Fonn Form ES-D-l, Rev l.docx

(

Narrative Summary NRC 2009 Scenario #4 The plant is at 100% power. Severe thunderstonnsthunderstorms are predicted for Citrus and Levy counties.

Soon after turnover is complete CF-2-LT4 (CFT level transmitter) fails low. TS 3.5.1, CFT .

Operability, will be referred to but the SRO should detennine determine that the other CFT level instrument satisfies the TS requirement. (SP-300, Sequence 59)

RHV-4 (IV-4) will fail closed. Per OP-204, Power Operations, unit load must be reduced to:S 75% power within 15 minutes. The SRO will enter AP-51 0, Rapid Power Reduction, and reduce reactor power.

Following the power reduction control rod 2-4 drops into the core. AP-545, Plant Runback, will be entered. The automatic runback will occur as designed but will not stop at setpoint (60%

reactor power). The RO, at a minimum, must take the SGIRx SG/Rx Master control station to manual.

The RO will probably perfonn perform the Immediate Actions of AP-504, Integrated Control System Failure and take multiple ICS stations to hand. When the plant is stabilized OP-504, Integrated Control System, will be used to return stations to automatic. The SG/Rx Master control station must remain in manual. ITS 3.1.4, Condition A, should be addressed.

After ICS stations are returned to automatic (may not be returned to automatic if malfunction cannot be diagnosed) a hydrogen leak will occur on the main generator. The SRO may enter AP-510, Rapid Power Reduction, dependent on current power level, to reduce reactor power below the

( anticipatory reactor trip setpoint (41 % power) and trip the main turbine. AP-660, Turbine Trip, should be concurrently performed.

perfonned. Alternatively the SRO may elect to trip the reactor at this point. This option is allowable and will not detract from the scenario.

The turbine trip will cause a steam leak on the "A" OTSG inside the reactor building. RB pressure will start rising and a manual reactor trip should be initiated (if not already actuated) prior to reaching 4 psig in the RB. EOP-2, Vital System Status Verification, will be entered and a symptom scan perfonned.

performed. EOP-5, Excessive Heat Transfer, should be entered. Once the steam leak is confinned confirmed a MSLI and MFLI will be perfonned. performed. The MFLI will not work automatically and the operator must manually perfonn perform the actions (CT).

EFIC will actuate from the HPI signal. The operator will recognize excessive EFW flow to the "A" OTSG through EFV-58. Rule 3 will be in effect and the operator will attempt to isolate flow by taking EFIC to manual and closing EFV EFV-14-14 (block valve). The block valve will stroke partially in the closed direction and then the motor power fuse will blow. The operator must secure EFP-3 (CT) to stop EFW flow to the OTSG.

When the ES actuation occurs MUV MUV-73 -73 will not open from the MCB and MUP-l MUP-1C C will not start.

The operator must monitor MUT level and either have MUV MUV-73 -73 manually opened in the field, MUV-62 powered up and opened from the control room or secure MUP-IB MUP-1B (CT) prior to the MUT going empty. MUP-IB MUP-1B is the only available MUP .

(l~

, terminated any time after actions to minimize subcooling margin have been This scenario may be tenninated t<fken.

7/2112009 Page 10f6 1 of 6 8:02AM F:\NRC - 2009\SES\2009 NRC - SES #4\sES

1. 4\SES #4 2009 NRC - Summary - Turnover Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-TestNo.:

Op-Test No.: 1 Scenario No.: 4 Event No.: 1 Rev.: 00 Event

Description:

(Examiner Cue) Soon after turnover is complete CF-2-LT4 (CFT level

[MALF]. TS 3.5.1, CFT Operability, will be referred to but the SRO transmitter) fails low [MALFJ.

should determine that the other CFT level instrument satisfies the TS requirement.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarm o (E-8-4) "CF Tank B Level High/Low" BOP

• Refers to AR-305

• of level transmitter failure Notifies SRO oflevel

• • Assists the BOP in diagnosing the failed level transmitter

• ** Should review TS 3.5.1 o Determines alternate CFT level instrument satisfies this TS

, requirement SRO o May use SP-300, Sequence 59

• • Contacts Work ContactsW ork Control to initiate repair efforts

( ** May review SRO checklist for unplanned equipment status change

(

7/2112009 712112009 Page 1 of21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 4 Event No.: 2 Rev.: 00 Event

Description:

(Examiner Cue) After the CFT TS actions are addressed RHV-4 RHV -4 (IV-4)

(IV-4) will fail closed. [MALF] Per OP-204, Power Operations, unit load must be reduced to ::::  ::::. 73% power within 15 minutes. The SRO will enter AP-51 0, Rapid Power Reduction, and reduce reactor power.

Time Position Applicant's Actions or Behavior

• • Announce/acknowledge alarm

, o 0 (K-2-2) ICS NNI Trouble o

0 Event Point 1116 AULD Trouble o

0 Review AR-503 o

0 Event Point 0041 Reheat Steam Non-Return Valve Trip BOP

• Informs CRS of alarms

• Informs CRS that Intercept Valve 4 is closed (computer alarm)

• • May report power above 2609 MWth

• May review OP-204 Limits and Precautions

• Notifies CRS that maximum power level is 73%

(

• Acknowledges receipt of alarms

• • Assists RO/BOP ROIBOP in diagnosing failure

• Enters AP-51 0, Rapid Power Reduction

• Directs RO/BOP actions per AP-51O AP-510 o0 Adjust Load Rate to desired setpoint o0 Set Unit Load Demand to "10"

• 0 Notify personnel of entry into AP-51O AP-510 o0 Maintain PZR Level (Rule 7, attached)

, SRO 0 Notify Chemistry of power change o0 Verify Imbalance within limits o0 When power is < 80% notify SPO to ensure MS is supplying AS o0 Maintain DFT level between 8 and 11 feet

• IfMBVs close, then ensure MBVs remain closed

• • Directs RO/BOP to stabilize plant parameters at approximately 73% power 7/2112009 Page 2 of 21 8:03 AM 8:03AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 4 Event No.: 2 Rev.: 00 Event

Description:

(Ex<mliner (Examiner Cue) After the CFT TS actions are addressed RHV-4 (IV-4) will fail closed. [MALF] Per OP-204, Power Operations, unit load must be reduced to :s  :::: 73% power within 15 minutes. The SRO will enter AP-51 0, Rapid Power Reduction, and reduce reactor power.

Time Position Applicant's Actions or Behavior

• • Perform actions as directed by the SRO per AP-51 0 o Adjust Load Rate to desired setpoint o Set Unit Load Demand to "10" o Verify Imbalance within limits RO o Maintain DFT level between 8 and 11 feet o If MBVs close, then ensure MBVs remain closed

• Stops power reduction at about 73% power

• Stabilizes plant parameters

• Perform actions as directed by the SRO per AP-51 0

( o Notify personnel of entry into AP-51O AP-510 o Maintain PZR level (Rule 7, attached) o Notify Chemistry of power change BOP o When power is < 80% notify SPO to ensure MS is supplying AS o Maintain DFT level between 8 and 11 feet o Transfer Unit loads to the Startup Transformer

• Goes to OP-204, Power Operations SRO

• Directs BOP actions per OP-204 BOP

• Perform actions as directed by the SRO per OP-204

((

7/2112009 712112009 Page 3 of 21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Op-TestNo.: Scenario No.: 4 Event No.: 3 Rev.: 00 Event

Description:

(Normal Evolution) Swap Unit buses to Startup Transformer per EOP-14, Enclosure 23.

Time Position Applicant's Actions or Behavior

• Direct BOP to perform EOP-14, Enclosure 23, shutdown SRO Electrical Lineup

• Align A 6900V bus to the Startup transformer o Select Auto Transfer 3103 to Manual o Close breaker 3103 o Open breaker 3101

• Align A Unit 4160V bus to the Startup transformer o Select Auto Transfer 3203 to Manual o Close breaker 3203 o Open breaker 3201 BOP

(

• Align B 6900V bus to the Startup transformer o Select Auto Transfer 3104 to Manual o Close breaker 3104 o Open breaker 3102

• Align B Unit 4160V bus to the Startup transformer o Select Select Auto Transfer 3204 to Manual, o Close breaker 3204 o Open breaker 3202 7/2112009 Page4of21 Page 4 of 21 8:03AM 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 c

Op-Test No.: 1 Scenario No.: 4 Event No.: 4 Rev.: Rev;: 00 Event

Description:

(Examiner Cue) Once the plant is stable control rod 2-4 drops into the core.

(MALF) AP-545, Plant Runback, will be entered. The automatic ronback runback will occur as designed but will not stop at setpoint (60% reactor power) (MALF). The RO, at a minimum, SG/Rx Master control station to manual. The crew will probably enter AP-504.

must take the SGIRx When the plant is stabilized OP-504, Integrated Control System, will be used to return stations to automatic. The SG/Rx SGIRx Master control station must remain in manual. TS 3.1.4, Condition A, should be addressed.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarms o (K-4-2) Asymmetric Rod Runback o (K-6-2) Unit Master in Track o (K-5-3) FW Limited by Reactor (1-2-3) CRD Out Inhibit o (J-2-3)

RO o (1-2-4)

(J-2-4) CRD Asymmetric Alarm

• Observes the following:

( o Control rod 2-4 inserted into the core o Runback in progress

• Notifies SRO of dropped control rod and ronback runback occurring as expected

• Acknowledges dropped rod and runback ronback in progress

• Enters AP-545, Plant Runback

• Directs RO/BOP actions per AP-545 o Ensures plant ronback runback is in progress o Directs notification of plant personnel o Ensures RCS pressure is stable SRO o Ensures reactor power :s 60% power o Ensures vital plant parameters approaching stability o Notifies Reactor Engineer o Verifies quadrant power tilt is within limits o Notifies Chemistry of power change o Ensures rod index within insertion limits o Verifies adequate SDM exists o Verifies imbalance within limits

(,

7/2112009 Page 5 of 21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-TestNo.:

Op-Test No.: 1 Scenario No.: 4 Event No.: 4 Rev.: 00 Event

Description:

(Examiner Cue) Once the plant is stable control rod 2-4 drops into the core.

(MALF) AP-545, Plant Runback, will be entered. The automatic runback will occur as designed but will not stop at setpoint (60% reactor power) (MALF). The RO, at a minimum, must take the SG/Rx Master control station to manual. The crew will probably enter AP-504.

When the plant is stabilized OP-504, Integrated Control System, will be used to return stations to automatic. The SGIRx SG/Rx Master control station must remain in manual. TS 3.1.4, Condition A, should be addressed.

Time Position Applicant's Actions or Behavior BOP

• Monitors plant parameters

• Monitors plant runback

• Notifies SRO that Main Block Valves are closing (unexpected)

• Once MBVs are closed may take the following ICS stations to hand per AP-504.

o Both FW Loop Master Stations o Both FW pump Stations

(( RO o RxDiamond o Rx Demand Station Station o Condensate Master Station

• SG/Rx Master to Hand is the only required station to stop the power reduction

• Announces current reactor power

• Stabilizes plant parameters

• Controls RCS pressure o Spray o PZR heaters BOP o Utilizes Rule 7, PZR Level Control (attached)

• May place CD Pump Master in Hand

• Assists RO with stabilizing plant parameters l

7/2112009 of21 Page 6 of 21 8:03AM 8:03 AM F:lNRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-Test Op-TestNo.:No.: 1 Scenario No.: 4 Event No.: 4 Rev.: 00 Event

Description:

(Examiner Cue) Once the plant is stable control rod 2-4 drops into the core.

(MALF) AP-545, Plant Runback, will be entered. The automatic runback will occur as designed but will not stop at setpoint (60% reactor power) (MALF). The RO, at a minimum, must take the SG/Rx SGIRx Master control station to manual. The crew will probably enter AP-504.

When the plant is stabili~ed OP-504, Integrated Control System, will be used to return stations to automatic. The SG/Rx Master control station must remain in manual. TS 3.1.4, Condition A, should be addressed.

Time Position Applicant's Actions or Behavior

• • Ensures OAC and BOP actions are in progress

• • Monitors progress via SPDS

• • Maintains overview of plant conditions and directs plant trip if SRO limits are closely approached.

• • Once the plant is stable, holds a mini brief to ensure all crew members understand plant status

• • Contacts Work Control to initiate repair efforts

( ** Diagnose ICS failure CREW ** If unable to diagnose failure then ICS stations should remain in Ifunable hand

• • Direct RO/BOP to return ICS stations to automatic lAW IAW OP-504, Integrated Control System SRO ** Addresses TS 3.1.4, Condition A

• • Addresses TS 3.1.5, Condition A

• • May address TS 3.1.7, Condition A

• ICS stations are returned to "Auto" in accordance with OP-504 RO/BOP (BOP will normally assist by reading OP-504)

(

7/2112009 Page 7 of21 8:03AM 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 4 Event No.: 5 Rev.: 00 Event

Description:

(Examiner (Ex<m1iner Cue) After ICS stations are returned to automatic, if applicable, a hydrogen leak will occur on the main generator. (MALF) (MAL F) The SRO will probably enter AP-510, AP-51O, Rapid Power Reduction, to reduce reactor power below the anticipatory reactor trip setpoint (41 % power) and trip the main turbine. AP-660, Turbine Trip, should be concurrently performed. Dependent upon power level and status ofICS of ICS stations the SRO may elect to manually trip the reactor once the hydrogen leak is confirmed. This action is allowable and will not detract from the scenario.

Time Position Applicant's Actions or Behavior

• Recognize generator hydrogen pressure decreasing

• Announce/acknowledge alarms o Generator Hydrogen Pressure (Computer Point G200)

RO/BOP o (0-5-9) Hydrogen Panel Alarm

• Direct SPO to investigate hydrogen leak

• Notify SRO of generator hydrogen pressure decrease

• Acknowledges receipt of alarms

(

• Assists RO/BOP in diagnosing failure

• Dependent upon the current power level additional power decrease to trip the turbine may not be needed

• Enters AP-5I0, AP-510, Rapid Power Reduction

• Direct RO/BOP actions per AP-5l o Adjust Load Rate to desired setpoint

° AP-51 0 SRO o Set Unit Load Demand to "10" o Notify personnel of entry into AP-51O AP-510 o Maintain PZR Level (Rule 7, attached) o Notify Chemistry of power change o Verify Imbalance within limits o Maintain DFT level between 8 and 11 feet

• Directs BOP to trip the turbine when reactor power is below the anticipatory reactor trip setpoint (41 % power).

f

\

7/2112009 Page 8 of21 of 21 8:03AM 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test Op- Test No.: 1 Scenario No.: 4 Event No.: S 5 Rev.: 00 Event

Description:

(Examiner Cue) After ICS stations are returned to automatic, if applicable, a hydrogen leak will occur on the main generator. (MALF) The SRO will probably enter AP-Sl 0, AP-51O, Rapid Power Reduction, to reduce reactor power below the anticipatory reactor trip setpoint (41 (41% % power) and trip the main turbine. AP-660, Turbine Trip, should be concurrently performed. Dependent upon power level and status of ICS stations the SRO may elect to manually trip the reactor once the hydrogen leak is confirmed. This action is allowable and will not detract from the scenario.

Time Position Applicant's Actions or Behavior

• Perform actions as directed by the SRO per AP-51AP-Sl 0 o Adjust Load Rate to desired setpoint o Set Unit Load Demand to "10" o Verify Imbalance within limits RO

• o Maintain DFT level between 8 and 11 feet

• • Continues power reduction until within the capability of the

, (~20%

TBVs (::::: 20% reactor power)

• • Stabilizes plant parameters

((\

• • Perform actions as directed by the SRO per AP-Sl AP-51 0 o Notify personnel of entry into AP-51 AP-SI0 0

BOP o0 Maintain PZR level (Rule 7, attached) o Notify Chemistry of power change o Maintain DFT level between 8 and 11 feet

• Enters AP-660, Turbine Trip

• Direct BOP actions per AP-660 o Depress Main Turbine trip push button o Ensures TV sand s and GV s are closed o Ensures RCS pressure is stable SRO o Notify personnel of entry into AP-660 0

• o0 Ensures MS header pressure between 870 and 900 psig o Ensures main generator output breakers are open o Shutdown main generator o Ensures plant conditions stabilize o Maintain PZR level

(

7/2112009 7/21/2009 Page 9 of of21 21 8:03AM 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: 4 Event No.: 5 Rev.: 00 Event

Description:

(Examiner Cue) After ICS stations are returned to automatic, if applicable, a hydrogen leak will occur on the main generator. (MALF) The SRO will probably enter AP-510, AP-51O, Rapid Power Reduction, to reduce reactor power below the anticipatory reactor trip setpoint (41 % power) and trip the main turbine. AP-660, Turbine Trip, should be concurrently performed. Dependent upon power level and status ofICS of ICS stations the SRO may elect to manually trip the reactor once the hydrogen leak is confirmed. This action is allowable and will not detract from the scenario .

Time Position Applicant's Actions or Behavior

• • Perform actions as directed by the SRO per AP-660 o Depress Main Turbine trip push button o Ensure TVs TVsand and GVsare GVs are closed o Ensure RCS pressure is stable o Notify personnel of entry into AP-660 o Ensure MS header pressure between 870 and 900 psig BOP o Ensure main generator output breakers are open

• Breakers 1661 & 1662 o Shutdown main generator

((~

• Open field breaker

• Select voltage regulator to "OFF" o Ensure plant conditions stabilize o Maintain PZR level 7/21/2009 7/2112009 Page 100[21 10 of21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-TestNo.:

Op-Test No.: 1 Scenario No.: 4 Event No.: 6 Rev.: 00 Event

Description:

(Automatic Parameter Cue) The turbine trip will cause a steam leak on the "A" OTSG (MALF) inside the reactor building. (MT) RB pressure will start rising and a manual reactor trip should be initiated prior to reaching 4 psig in the RB. EOP-2, Vital System Status Verification, will be entered and a symptom scan performed. EOP-5, Excessive Heat Transfer, should be enteted. Once the steam leak is confirmed a MSLI and MFLI will be performed. The MFLI will not work automatically (MALF) and the operator must manually perform the actions (CT).

Time Position Applicant's Actions or Behavior

• Recognize indications of a steam leak in the RB o Alarms CREW o0 RB pressure and temperature increase o No NoRMRM-A6-A6 increase o No loss ofRCS inventory

• Announce/acknowledge alarms o (B-2-5) RB Fan A Condensate High o (E-2-5) RB Fan B Condensate High BOP o (E-3-2) Reactor Bldg Temp High

• Monitors RB pressure, temperature and sump level

• Verifies no increase in RM-A6

• Verifies no loss of RCS inventory 7/2112009 Page 11 of of21 21 8:03AM 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2

( Op-TestNo.: 1 Scena~ioNo.: 4 ScenatioNo.: Event No.: 6 Rev.: 00 Eyent

Description:

(Automatic Parameter Cue) The turbine trip will cause a steam leak on the "A" OTSG (MALF) inside the reactor building. (MT) RB pressure will start rising and a manual reactor trip should be initiated prior to reaching 4 psig in the RB. EOP-2, Vital System Status Verification, will be entered and a symptom scan performed. EOP-5, Excessive Heat Transfer, should be entered. Once the steam leak is confirmed a MSLI and MFLI will be performed. The MFLI will not work automatically (MAL (MALF) F) and the operator must manually perform the actions (CT).

Time Position A~plicant' s Actions or Behavior Applicant's

• Acknowledges receipt of alarms

• Assists the RO/BOP in diagnosing the failure

• Directs the RO to trip the reactor prior to 4 psig RB pressure

• Enters EOP-2, Vital System Status Verification

• Direct RO actions per EOP-2 o Depress the Rx trip pushbutton

• o Verify CRD groups 1 through 7 are fully inserted o Verify NIs indicate Rx is shutdown

(

\

. SRO o Depress Main Turbine trip pushbutton o Verify TVsand GV s are closed

• Direct formal Symptom Scan with RO and BOP o Check for Station Black Out o Check for Adequate Sub Cooling Margin o Check for Inadequate Heat Transfer o Check for Excessive Heat Transfer o Check for OTSG Tube Rupture

• Directs BOP to determine faulted OTSG and isolate

• When the Rx is tripped, performs EOP-2, Immediate Actions, from memory o Depresses Rx Trip pushbutton o Verifies Groups 1 thru 7 rod inserted RO 0 Verifies NIs indicate Rx is shutdown o Depress Turbine Trip pushbutton o Verifies all TV sand GV s are closed

• Re-performs EOP-2, Immediate Actions, as directed by SRO

(

7/2112009 Page 12 of 21 of21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: 4 Event No.: 6 Rev.: 00 Event

Description:

(Automatic Parameter Cue) The turbine trip will cause a steam leak on the "A" OTSG (MALF) inside the reactor building. (MT) RB pressure will start rising and a manual reactor trip should be initiated prior to reaching 4 psig in the RB. EOP-2, Vital System Status Verification, will be entered and a symptom scan performed. EOP-5, Excessive Heat Transfer, should be* be entered. Once the steam leak is confirmed a MSLI and MFLI will be performed. The MFLI will not work automatically (MALF) and the operator must manually perform the actions (CT).

Time Position Applicant's Actions or Behavior

• ** Perform symptom scan o

0 Station Blackout o

0 Inadequate SCM

• o 0 Inadequate Heat Transfer o

0 Excessive Heat Transfer CREW o0 SG Tube Rupture

• • Determine that Excessive Heat Transfer symptom exists and enters EOP-5, Excessive Heat Transfer

• • Recognize that Rule 2, HPI Control and Rule 3, EFW Control C

( are in effect (attached)

• Depresses Global Silence pushbutton

• Isolates the "A" OTSG (CT)

• Recognizes that MFLI did not occur and performs the following:

0 Selects close FWV-31 0 Selects close FWV-30 BOP 0 Selects close FWV-36 0 FWV -28 Selects close FWV-28 0 Selects close FWVFWV-14 -14

• 0 Trips FWP-2A

.*

• Notifies SRO ofMFLI automatic isolation failure

(

7/21/2009 7/2112009 Page 13 of21 8:03 AM F:\NRC - 2009\SES\2009 F:INRC 20091SESl2009 NRC - SES #4\SES

1. 4ISES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

(

Op-Test Op- Test No.: 1 Scenario No.: 4 Event No.: 7 Rev.: 00 Event

Description:

(Automatic Parameter Cue) EFIC will actuate from the HPI signal. The operator will recognize excessive EFW flow to the "A" OTSG through EFV-58. Rule 3 will be in effect and the operator will attempt to isolate flow by taking EFIC to manual and closing EFV-14 (block valve). The block valve will stroke partially in the closed direction and then the motor power fuse will blow. [MALF] The operator must secure EFP-3 (CT) to stop EFW flow to the OTSG.

Time Position Applicant's Actions or Behavior

• Enters EOP-5, Excessive Heat Transfer

• Direct RO/BOP actions per EOP-5 o Isolate affected OTSGs Ii Depress MSLI and MFLI push buttons

• Ensure FW sources and leak paths are closed

• If any affected EFIC control valve fails to close then select Manual Permissive and close the associated block valve.

o Ensure ES equipment is properly aligned

(

• IfRBIC has actuated and adequate SCM exists, then stop all RCPs SRO o Maintain PZR level (Rule 7, attached) o Notify personnel of entry into EOP-5 o IfRCS temp remains < 532 00 F then start RCS boration o Ensure proper MSLI and MFLI o Notify Chemistry to sample for tube leakage o Verify proper CC cooling o Ensure level in available OTSG trending to correct level o Minimize RCS temperature changes o Minimize RCS pressure changes o Verify OTSG tube leakage ::s :s 1 gpm o Ensure MSR HP bundle isolation valves are closed o Bypass ES if permit exists o Maintain minimum adequate SCM

(

7121/2009 7/21/2009 Page 14 of21 8:03AM 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2 Op-Test Op-TestNo.: No.: 1 Scenario No.: 4 Event No.: 7 Rev.: 00 Event

Description:

(Automatic Parameter Cue) EFIC will actuate from the HPI signal. The operator will recognize excessive EFW flow to the "A" OTSG through EFV-58. Rule 3 will be in effect and the operator will attempt to isolate flow by taking EFIC to manual and closing EFV-14 EFV-14 (block valve). The block valve will stroke partially in the closed direction and then the motor power fuse will bklw. [MALF] The operator must secure EFP-3 (CT) to stop EFW flow to the OTSG.

Time Position Applicant's Actions or Behavior

• Performs Rule 3, EFW/AFW Control

• Attempts to close EFV EFV-58 -58

• Determines that EFW flow is not controlled and depresses "Manual Permissive" on both channels

• Selects close EFV -14

• Recognizes that EFV-14 did not fully close o Amber light only o Flow indication on EF-25-FIl

• • Requests permission from SRO to secure EFP-3

(

• • Secures EFP-3 (CT)

• Ensure ES equipment is properly aligned If RBIC has actuated and adequate SCM exists, then stop all o IfRBIC RCPs RO/BOP.

• • Maintain PZR level (Rule 7, attached)

• Notifies personnel of entry into EOP-5

• IfRCS temp remains < 532 00 F then start RCS boration

• Ensures proper MSLI and MFLI

• • Notify Chemistry to sample for tube leakage

• Verify proper CC cooling

• Minimizes RCS temperature changes

• • Minimizes RCS pressure changes

• Verifies OTSG tube leakage :s ~ 1 gpm

• Ensures MSR HP bundle isolation valves are closed

• • Maintains minimum adequate SCM o PZR Spray o PORV 7/1112009 7111/2009 Page 15 of 21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I AppendixD Required Operator Actions Form ES-D-2 Op-Test No.: 1I Scenario No.: 4 Event No.: 8 Rev.: 00 Event

Description:

(Automatic Parameter Cue) When the ES actuation occurs MUV-73 will not open from the MCB. (MALF) The operator must monitor MUT level and either have MUV MUV-73

-73 manually opened in the field or secure MUP-IB (CT) prior to the MUT going empty.

Time Position Applicant's Actions or Behavior

• Directs the RO/BOP to ensure all ES equipment is properly SRO aligned

• Perfonns Performs Rule 2, HPI Control (attached)

• Verifies all ES components are operating via the actuation light indications (green) for ES actuated equipment.

o Recognizes MUV-73 still closed o Attempts to open MUV-73 manually o Recognizes MUP-IC MUP-I C is not running RO/BOP o Attempts to start MUP-l MUP-IC C o Notifies SRO of malfunction with MUV-73 and MUP-IC o Directs PPO to manually open MUV-73 MUV-73

( o Monitors MDT MUT level

• Secures MUP-IB, opens MUV MUV-73

-73 (or opens MUV MUV-62)

-62) prior to loss of suction (CT)

Scenario may be terminated any time after actions to minimize subcooling margin have been taken.

7/21/2009 7121/2009 Page 16 of 21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2 RULE 1, LOSS OF SCM

• _ !E < 1 min has elapsed since losing adequate SCM, THEN immediately stop all RCPs.

• _ !E RCPs were NOT stopped

• _ Progress toward a maximum plant within 1 min, cooldown to achieve CFT and LPI THEN ensure all operating RCPs flow as soon as possible.

remain running until any of the following exist:

SCM is restored LPI flow> 1400 gpm in each injection line.

• Manually actuate ES.

• Depress "HPI MAN ACT"

( push buttons on Trains A and B.

• _ Depress "RB ISO MAN ACTUATION" push buttons on Trains A and B.

• _!E LPI has NOT actuated, AND RCS PRESS s; ~ 300 psig, THEN depress "LPI MAN ACT" push buttons on Trains A and B.

• Depress "ISCM" push buttons for EFIC channels A and B.

• Ensure Tincore is selected on SPDS.

7/2112009 Page 17 of 21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev I.docx

I Appendix D Required Operator Actions Form ES-D-2 RULE2,HPICONTROL

(

• _ J£ HPI has actuated, 1 Obtain SRO concurrence to THEN bypass or reset bypass or reset ES.

E$'.

ES actuation.

• 2 Bypass or reset ES actuation:

Auto Manual

• Open MUP recirc prior to

• _ J£ recirc to MUT is desired, throttling HPI flow THEN open MUP recirc to MUT valves:

< 200 gpm/pump.

11_ MUV-53 1_ MUV-257 MUV-257II

• _ J£ recirc to RB sump is desired, .

THEN open HPI recirc to sump valves:

- MUV-543 - -MUV-544

( MUV-545 MUV-546

• _ J£ adequate SCM exists based,

• _ Prevent exceeding NDT NOT limit on Tincore, THEN throttle HPI to maintain

• _ J£ OTSG isolated for TRACC, required conditions. THEN maintain RCS PRESS

< 1000 psig.

psig .

• _ J£ PTS, SGTR, or dry OTSG exists, THEN maintain minimum adequate SCM.

• _ J£ adequate SCM can be

• _ Ensure running HPI pump is maintained wit,hwit)1 1 HPI pump, aligned to MUT.

AND stopping second HPI pump is desired, THEN stop 1 HPI pump.

7/2112009 Page 18 of21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx I.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 RULE 3, EFW/AFW CONTROL

• Ensure available OTSGs are at or trending toward required "LLL" > 20in level. "NAT CIRC" > 70%

"ISCM" > 90%

• IF manual control of EFW flow 1 Obtain SRO concurrence to place is desired, EFIC in manual.

THEN establish manual EFIC control. 2 Control EFW to maintain required EFW flow and OTSG level.

3 _!E.

_!.E EFW flow is NOT controlled, THEN depress EFIC channels A and B "MANUAL PERMISSIVE" push buttons and close affected EFW block valve.

(

• _ !E.  !.E adequate SCM does NOT 2 OTSGs > 280 gpm in 1 line exist, to each OTSG AND level in available OTSGs EFW is NOT at or trending toward 1 OTSG 10TSG > 470 gpm in 1 line "ISCM" level, to 1 OTSG THEN establish manual manual required 20TSGs > 250 gpm to flow. < 300 gpm/OTSG AFW 1 OTSG > 450 gpm to

< 600 gpm

• _ !E.  !.E adequate SCM exists,

• Do not allow OTSG level to lower.

THEN throttle flow to prevent OTSG PRESS from lowering

> 100 psig below desired PRESS.

7/2112009 Page 19 of21 8:03 AM F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2 RULE 4, PTS

• _ IE any of the following exist:

• Throttle HPI flow to minimize adequate SCM.

Tincore < 400°F, AND cooldown rate

• Throttle LPI flow to minimize exceeds ITS limit adequate SCM.

RCPs off,

• PTS is applicable until an AND HPI flow exists Engineering evaluation has been completed.

THEN perform required PTS actions.

(

(

7/2112009 712112009 Page 20 of of21 21 8:03 AM F:INRC F:\NRC - 20091SESI2009 2009\SES\2009 NRC - SES #4ISES

1. 4\SES #4 2009 NRC - Operator Actions Rev l.docx

I[ Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 7, PZR LEVEL CONTROL 1 IF PZR level is < PZR level PZR Level Band band, Rx at power> 20% 200 in to 240 in THEN restore PZR level.

Rx at power ~ :S 20% 1 20 in to 200 in 120 Rx tripped 50 in to 120 120 in

• Cycle appropriate BWST to MUP valve to maintain MUT level level:::::

2: 55 in:

11_ MUV-73 1_ MUV-58 I

• Close MUV-49 2 !E lE PZR level does NOT recover, 1 Open MUV-24 THEN establish manual HPI flow. 2 _ Notify SSO to evaluate

( Emergency Plan entry.

3 _'__ !E lE PZR level does NOT recover, THEN start second MUP and

• required cooling pumps.

[Rule 5, Diesel Load Control]

4 _ !E lE PZR level does NOT recover, THEN open additional HPI valves.

5 _ !E lE PZR level does NOTNOT recover, THEN close MUP to MUT recircs:

11_ MUV-53 1_ MUV-257 MUV-257II 3 !E lE PZR level recovers,

• _ !E lE letdown is desired, THEN restore normal PZR THEN CONCURRENTLY PERFORM conditions. EOP-14, Enclosure 4, Letdown Recovery (if accessible).

[Rule 2, HPI Control]

t 7/j1l2009 7/ 1l2009 Page 21 of21 F:\NRC - 2009\SES\2009 NRC - SES #4\SES #4 2009 NRC - Operator Actions Rev l.docx 8:03AM 8:03 AM

AppendixD Appendix D Scenario Outline Form ES-D-1

(

Facility: Crystal River #3 Scenario No.: Spare (NRC 2009) Op-TestNo.: ~

Examiners: Operators:

Initial Conditions: The plant is at 100% power.

power .

Turnover: The following equipment is OOS: DHP-1A (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />); MUP-1A (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />) and

~WP-1 (24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />). Severe thunderstorms are predicted for Citrus and Levy counties.

Event Malf. Event Event No. No. Type

• Type* Description C (BOP) MUP-1B sheared shaft. (OP-402) 1 1 C (SRO) SRO ITS determination. (ITS 3.5.2) 2 NA N (BOP) Restore Seal Injection, Letdown and PZR level. (OP-402)

C (BOP) AHF -1A high vibration, then trip. (OP-417) SRO TS AHF-1A 3 2 C (SRO) determination. (TS 3.6.6)

( 4 3 R(RO) 40 gpm "A" OTSG tube leak. Rapid power reduction. (EOP-6) 5 4 I (RO) ULD station fails "as is" during power decrease. (OP-504) 6 N/A N (BOP) Transfer buses to Startup Transformer. (EOP-14)

Two MSIVs close at 70% power I manual reactor trip (AI-505, 7 5 M{RO)

EOP-2) [CT]

One TV and one GV fail to close when Rx tripped requiring

-8

'8 6 C(RO)

C (RO) closure of remaining two MSIVs. (EOP-2) [CT]

9 7 M (ALL) Tube leak increases to 330 gpm when the Rx is tripped. (EOP-6)

RCV-14, PZR spray valve failed closed requiring use ofPORV to 10 8 C (RO or BOP) reduce SCM. (EOP-6)

• • (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor 7/2112009 Page 1 of 1 . Appendix D AppendixD F:\NRC - 2009\Outlines\SES\NRC 2009 - SES SPARE Scenario Outline NRC Form ES-D-l, Rev l.docx

Narrative Summary NRC 2009 Spare Scenario

(

Plant is initialized at 10Q%

lOQ% power. Severe thunderstorms are predicted for Citrus and Levy counties .

Soon after turnover is complete MUP-1B MUP-lB will experience a sheared shaft. OP-402, Makeup and Purification System, will be used to start MUP-l MUP-1C. C. Section 4.6, System Restoration after MU Pump Trip, is a much easier section to use for this failure, however use of Section 4.S, MU Pump Transfer, is allowable. The crew should start MUP-lC MUP-1C and restore PZR level, Seal Injection and Letdown. ITS 3.S.2, Condition A, should be addressed.

AHF-lA will experience high vibration due to a failing After the plant has been stabilized AHF-1A bearing. The fan will trip after one minute ifnot already secured. TS 3.6.6, Condition C, will be OP-4l7, Containment Operating Procedure, will be used to select AHF entered. OP-417, AHF-lC

-1 C for ES start.

After AHF-lC AHF-1C is selected for ES start and TS actions are addressed a 36 gpm SGTR develops on the "A" OTSG. Crew diagnoses the tube leak using MS line monitor increase, RM-A12 RM-Al2 indication and RCS leak rate determination. EOP-6 will be entered and a power reduction commenced.

At approximately 9S% power ULD station output will fail "as is". The RO will diagnose the

( problem and receive permission from the SRO to lower power in manual using the SGIRX SG/RX master station.

A1 approximately 70% power two MSIVs close (opposite OTSGs). A manual reactor trip is Aot:

required per AI-SOS (CT). Immediate actions ofEOP-2 are performed. During the Immediate Actions, one TV and one GV will be found open. The RO will have to close the remaining two MSIVs (CT). The Immediate Actions will then be verified and a symptom scan performed.

perfomied. Due to the trip the SGTR increases to ~ 330 gpm. After the symptom scan is performed the SRO should return to the beginning ofofEOP-6 EOP-6 and start a plant cooldown and depressurization.

Since all MSIV s are closed TBV s are lost requiring steaming to atmosphere. Emergency Plan upgrade should be recognized but classification is not required.

When RCS depressurization is attempted RCV-14 RCV-l4 (spray valve) fails to open. Crew should use the PORV to decrease sub cooling margin.

subcooling The scenario may be terminated when SCM is minimized and a plant cooldown has commenced.

(

7/21/2009 7/2112009 Page 110f6 of6 8:03AM F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Summary - Turnover Rev 1.docx l.docx

I Appendix D Required Operator Actions Form ES-D-2 Qp-Test No.: 1 Scenario No.: Spare 1/2 Event No.: 112 Rev.: 0 Event

Description:

(Examiner Cue) Soon after turnover is complete MUP-IB will experience a sheared shaft. (MALF) OP-402, Makeup and Purification System, will be used to start MUP-1C. Section 4.6, System Restoration after MU Pump Trip, is a much easier section to use for this failure, however use of Section 4.5, MU Pump Transfer, is allowable. The crew should start MUP-IC MUP-IC and restore PZR level, Seal Injection and Letdown. ITS 3.5.2, Condition A, should be addressed.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarms o (B-6-2) Makeup PP B Gear Oil Press Low o (H-5-7) RC Pump Seal Flows High/Low BOP

• Informs SRO of the following:

o Auto-start ofMUP-5B o Low current indication on MUP-IB (~30%) (~ 30%)

o Seal injection flow indication at 0 gpm o Makeup flow indication at 0 gpm c(

• Acknowledges receipt of alarms

• Directs BOP to secure MUP-IB

• May direct BOP to isolate letdown SRO

• for MUP-IB opened May direct BOP to have DC knife switch forMUP-IB

• MUP-IC Directs BOP to start MUP-I C lAW OP-402, Makeup and Purification System

• Addresses ITS 3.5.2, Condition A, and declares MUP-IB inoperable 7/2112009 Page 1 of of15 15 Appendix D AppendixD F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Fonn Form ES-D-2 Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: Spare Event No.: 112 Rev.: 0 Event

Description:

(Examiner Cue) Soon after turnover is complete MUP-lBMUP-1B will experience a sheared shaft. (MALF) OP-402, Makeup and Purification System, will be used to start MUP-1C. Section 4.6, System Restoration Restoration after MU Pump Trip, is a much easier section to use for this failure, however use of Section 4.5, MU Pump Transfer, is allowable. The crew should start MUP-IC MUP-lC and restore PZR level, Seal Injection and Letdown. ITS 3.5.2, Condition A, should be addressed.

Time Position Applicant's Actions or Behavior

• Performs OP-402, Section 4.6

• o0 Closes MUV MUV-16 -16 o Closes MUV-31 o Closes MUV-50 .

o Closes MUV-51 o Observes RCP parameters o Directs the PPO to energize MUV -62 and MUV -69 o Closes MUV MUV-58 -58 o Closes MUV-69 o Opens MUV-62 BOP

( o Opens MUV-73 o Starts MUP-4C o Starts DCP-1B DCP-IB o Starts RWP-3B o Starts MUP-1C MUP-l C o Places MUP-4C to auto o Restores makeup and letdown flow o Slowly re-establishes Seal Injection flow o Directs the PPO to de-energize MUV-62 and MUV-69 o Notifies SRO to review Tech Specs

• Once the plant is stable, holds a mini brief to ensure all crew members understand plant status SRO

• Contacts Work Control to initiate repair efforts

• May review the SRO checklist for unplanned equipment status changes

((

7/2112009 7/21/2009 Page 2 of 15 AppendixD F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Fonn Form ES-D-2 Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: Spare Event No.: 3 Rev.: 0 Event

Description:

(Examiner Cue) After the plant has been stabilized AHF-1AAHF -1 A will experience high vibration due to a failing bearing [MALF]. The fan will trip after one minute if not already secured. TS 3.6.6, Condition ConditionC, C, will be entered. OP-417, Containment Operating Procedure, will be used to select AHF -1 C for ES start.

Time Position Applicant's Actions or Behavior

• Announce/acknowledge alarms o (B-2-4) "RB Fan A Vibration High" o Reviews AR-302 BOP *

• Notifies SRO of malfunction

• May attempt to reset alarm

• May recommend securing fan

• May direct BOP to secure AHF-1A

• Directs BOP to start AHF-1C using OP-417

• Enters TS 3.6.6, Condition C, for one required containment

( SRO cooling train inoperable inoperable

• Contacts Work Control to initiate repair efforts

• May review SRO checklist for unplanned equipment status change

• Uses OP-417, Section 4.7, to perform the following:

o Notifies PPO to seal closed SWV-36 o Selects AHF-1C using the "RB Fan ES A Select" switch in ES Act Relay Cabinet 4D BOP o Notifies SRO to review TS 3.6.6 o Notifies PPO to seal open SWV-105 o Ensures open SWV-39 and SWV-45 AHF -1 C o Starts AHF-1C 7/2112009 Page 3 of15 of 15 Appendix D AppendixD F:\NRC - 2009\SES\2009 NRC - SES SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: Spare Event No.: 4 Rev.: 0 Event

Description:

(Examiner Cue) After AHF -1 C is selected for ES start and TS actions are addressed a 36 gpm SGTR develops on the "A" OTSG [MALF]. Crew diagnoses the tube leak using MS line monitor increase, RM-AI2 RM-A12 indication and RCS leak rate determination. EOP-6 will be entered and a power reduction commenced.

Time Position

• Applicant's Actions or Behavior

• Announce/acknowledge alarms (H-I-5) "MN Stm Line AlB High Rad Monitor Fail" o (H-1-5)

• Diagnoses OTSG tube leak o RM-G27 in HilHi Hi/Hi alarm BOP o Mismatch between makeup and letdown o SPDS shows RM-G27 at 100 GPD o MonitorsRM-Al2 MonitorsRM-A12

• Perform leak rate calculation

• Assists BOP with diagnosing tube leak

• Monitors SPDS

( RO

• Verifies PZR level is being maintained

• Performs backup leak calculation

• Assist RO/BOP in diagnosing the tube leak.

• Enters EOP-06 if leakage is reported> 1GPM and directs RO/BOP actions ROIBOP o Maintains PZR level, Rule 7 (attached) o Directs adjustment of ICS load rate o Directs adjustment of Unit Load Master to 10 SRO o Directs RO to trip Rx ifPZR level goes < 100" o Direct BOP to make a PA announcement, inform SPO/pPO of SPO/PPO ofEOP-06 EOP-06 entry o Verifies affected OTSG o Directs closure ofMSV-55

• Recognize E-plan entry conditions are met (not required to classify at this time)

((

7/2112009 Page 4 of 15 Appendix D AppendixD F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form Fonn ES-D-2 Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: Spare Event No.: 4 Rev.: 0 AHF -1 C is selected for ES start and TS actions are Event

Description:

(Examiner Cue) After AHF-IC addressed a 36 gpm SGTR develops on the "A" OTSG [MALF]. Crew diagnoses the tube leak using MS line monitor increase, RM-A12 indication and RCS leak rate determination. EOP-6 will be entered and a power reduction commenced.

Time Position Applicant's Actions or Behavior

• Perform actions as directed by the SRO per EOP-6 o Make PA announcement, inform SPO/PPO SPO/PPO of EOP-06 BOP entry o Verifies affected OTSG MSV-55

• Closes MSV-55

• Perform actions as directed by the SRO per EOP-6 o Maintains PZR level, Rule 7 (attached)

RO of ICS load rate o Adjusts ofICS o Adjusts Unit Load Master to 10

(

712112009 7/2112009 Page 5 of 15 Appendix AppendixD D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 1 Scenario No.: Spare Event No.: 5/6 Rev.: 0 Event

Description:

(Examiner Cue) Power reduction is started per EOP-6. Initially the ULD station will be used for the power power reduction. The ULD station output will fail "as is" at approximately 95% power [MALF]. The RO will diagnose the problem and receive permission from the SRO to decrease power in manual using the SGIRX SG/RX master station. BOP will transfer Unit buses to the Startup Startup Transformer.

Time Position Applicant's Actions or Behavior

• Directs ROIBOP actions lAW EOP-6

• Assists RO in diagnosing ULD failure

• Directs RO to continue the power reduction with the SG/RX SGIRX Master in Hand o When power is < 80% notify SPO to ensure MS is supplying SRO AS o Maintain DFT level between 8 and 11 feet o Verify Aux Transformer is not supplying any bus

• Directs BOP to perform EOP-14, Enclosure 23 o Concurrently performs EOP-14, Enclosure 17 c(

• Perform actions as directed by the SRO per EOP-6

• At approximately 95% power recognizes power reduction is not in progress when plant quits responding

• Informs the SRO of failure RO

• Takes SG/RX master to hand and continue power reduction

• Monitors oRCS Tave o "A" and "B" FW flows o Turbine Setter/Reference SetlerlReference

• Maintains DFT level between 8 and 11 feet

• Performs EOP-14, Enclosure 23

• o0 Selects AUTO Transfer switches for breakers 3103, 3203, 3104 and 3204 to Manual 31 03/opens breaker 3101 o Closes breaker 3103/opens BOP o Closes breaker 3203/opens breaker 3201 o Closes breaker 3104/opens breaker 3102 o Closes breaker 3204/opens breaker 3202

(.

7/2112009 Page 6 of 15 Appendix D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form Fonn ES-D-2 Rev l.docx

II* Appendix D Required Operator Actions Form ES-D-2

(

Op-TestNo.:

Op-Test No.: 1 Scenario No.: Spare Event No.: 7/8/9 Rev.: 0 Event

Description:

(Examiner Cue) At approximately 70% power 2 MSIVs close [MT] which requires a manual reactor trip (CT). The SGTR increases to approximately 330 gpm (triggered by the reactor trip). When the Rx is tripped, one TV and one GV do not close, [MALF]

requiring the closure of the remaining two MSIV MSIVs. cool down commences per EOP-

s. (CT) Plant cooldown TBVs are unavailable due to MSIV closure.

6. TBVs Time Position Applicant's Actions or Behavior

• Announces and responds to alarms o (H-5-3) "Main Steam Iso Vlv Air Failure" SVlISV2 lights flashing intermittently o SVl/SV2

• Announce MSIV closures as they occur

• Manually trips the reactor due to the closure of of22 MSIVs (CT)

• Performs Immediate Actions ofEOP-2 from memory o Depress Rx Trip pushbutton RO o Verify Groups 1-7 fully inserted o Verifies NIs indicate the Rx is shutdown o Depresses Turbine Trip pushbutton o Verifies all TVsands and GV s Closed

• Notes 1 TV and 1 GV NOT closed

• Closes the remaining two MSIVs (CT)

• Report failure of 1 TV and 1 GV to close

• Report completion of EOP-02 Immediate Actions

• Perform EOP-02 Immediate Action verification with SRO 7/2112009 Page 7 of 15 Appendix D AppendixD F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Fonn Form ES-D-2 Rev l.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Op-TestNo.: Scenario No.: Spare Event No.: 7/8/9 Rev.: 0 Event

Description:

(Examiner Cue) At approximately 70% power 2 MSIVs close [MT) [MT] which requires a manual reactor trip (CT). The SGTR increases to approximately 330 330gpm

.gpm (triggered by the reactor trip). When the Rx is tripped, one TV and one GV do not close, [MALF)

[MALF]

requiring the closure of the remaining two MSIVs. (CT) Plant cooldown commences per EOP-

6. TBVs TBVs are unavailable due to MSIV closure.

Time Position Applicant's Actions or Behavior

• Performs Symptom Scan 0 Station Blackout Verifies No Station 0 Verifies No Inadequate Subcooling Margin

• 0 Verifies No Inadequate Heat Transfer 0 Verifies No Excessive Heat Transfer 0 Verifies Increased OTSG Tube Leakage I

• Diagnoses rise in OTSG tube leakage

• Informs SRO of increased leakage

• Performs follow-up actions ofEOP-6 0 Maintains PZR level level per Rule 7 (attached)

• Open MUV-58

(

• Close MUV-49 RO/BOP ROIBOP

• Open MUV-24

• Open MUV-23, 25, and 26 if necessary

• Close MUV-53 and 257 if necessary 0 Verifies MSSVs MSSV s are closed

• Controls OTSG pressure using ADV s 0 Check closed MSV-55 0

Verifies proper CC cooling

• Places CC ventilation in emergency recirc

• Verifies CC chiller running 0 MUV -31 to 100 inches Sets MUV-31

• 0 Selects all PZR heaters to "Off' 0 Bypasses ES ifif a permit exists

(

7/2112009 Page 8 of 15 AppendixD F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx I.docx

I AppendixD Appendix D Required Operator Actions Form ES-D-2

( Op-Test No.: 1 Scenario No.: Spare Event No.: 7/8/9 Rev.: 0 Event

Description:

(Examiner Cue) At approximately 70% power 2 MSIVs close [MT] which requires a manual reactor trip (CT). The SGTR increases to approximately 330 gpm (triggered by the reactor trip). When the Rx is tripped, one TV and one GV do not close, [MALF]

requiring the closure ofthe of the remaining two MSIVs. (CT) Plant cooldown commences per EOP-

6. TBVs are unavailable due to MSIV closure.

Time Position Applicant's Actions or Behavior Almlicant's

• ** Enters EOP-2 and verifies Immediate Actions are complete

. o0 Rx Trip pushbutton depressed o0 Group 1-7 rods inserted o0 NIs indicate Rx sutdown o0 Turbine Trip pushbutton depressed o0 All TVs and GV closed (One TV and one GV not closed)

• Verifies all MSIVs are closed

• • Directs Symptom scan o0 Verifies No Station Blackout o0 Verifies No Inadequate Subcooling Margin o0 Verifies No Inadequate Heat Transfer

• c

(

o0 Verifies No Excessive Heat Transfer o0 Verifies Increase OTSG tube leakage and transitions to EOP-06

• • Assist ROs in diagnosing rise in OTSG tube leakage SRO ** Transitions to beginning ofEOP-6 and directs ROs actions o0 Maintains PZR level per Rule 7 (attached)

• Open MUV-58

• Close MUV-49

• OpenMDV-24

• Open MUV-24

• Open MUV-23, 25, and 26 if necessary

. ** Close MUV-53 and 257 if necessary o0 Verifies MSSVs are closed

• Controls OTSG pressure using ADVs o0 Directs closure ofMSV-55 o0 Verifies MSSVs are closed o0 Verifies proper CC cooling o0 Select all PZR heaters to "Off' o0 Bypass ES if a bypass permit exists

• • Recognizes E-plan actions need to be taken (HPI valve open, steaming to atmosphere with a tube leak) 7/2112009 Page 90fI5 9 of 15 Appendix D AppendixD l.docx F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev I.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 C Op-Test No.: 1 Op-TestNo.: Scenario No.: Spare Event No.: 10 Rev.: 0 Event

Description:

When RCS pressure reduction is required per EOP-06, RCV-14 (spray valve) fails to open [MALF]. gUidance is provided to use the PORV to minimize SCM.

[MALF). Procedural guidance

• Time Position Applicant's Actions or Behavior

• Attempts to open RCV-14 to minimize SCM as directed o Diagnoses failure of RCV -14 to open.

• Cycles the PORV to minimize SCM as directed

• Controls SCM within band

• Controls HPI HPJ flow, Rule 2 (attached)

ROIBOP RO/BOP

• Starts of RCS boration ofRCS o Ensures post-filter(s) in service o Opens CAV -60 CAP-1A or 1B o Starts CAP-IA IB

• Starts RCS cooldown within normal limits on both OTSGs using ADVs

• • Directs ROs to maintain minimum subcooling margin with a

((, target value of 15 degrees (will probably give a band to maintain of 10 to 20 degrees)

. o Directs RO to open RCV-14 per EOP-6

• Assists in diagnosing RCV-14 failure SRO o Directs RO to minimize SCM by opening the PORV o Directs RO to control HPI HPJ flow

• • Directs start of ofRCS RCS boration

• • Directs start ofRCS cooldown with both OTSGs

. Scenario may be terminated when SCM is minimized and a plant cooldown has commenced.

7/2112009 of1S Page 10 of15 AppendixD F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2 RULE 1, LOSS OF SCM

• _ !E < 1 min has elapsed since losing adequate SCM, THEN immediately stop all RCPs.

• _ !E RCPs were NOT stopped

• _ Progress toward a maximum within 1 min, allowable plant cooldown to THEN ensure all operating RCPs achieve CFT and LPI flow as soon remain running until any of the as possible.

following exist:

SCM is restored

_ LPI flow -> 1400 gpm in each injection line.

• Manually actuate ES.

• Depress "HPI MAN ACT"

( push buttons on Trains A and B.

• Depress "RB IISO SO MAN ACTUATION" push buttons on Trains A and B.

• _ !E LPI has NOT actuated, PRESS :s; 300 psig, AND RCS PRESS:::;

THEN depress "LPI MAN ACT" push buttons on Trains A and B.

• ' Depress "ISCM" push buttons for EFIC channels A and B.

• • Ensure Tincore is selected on SPDS.

7/2112009 Page 11 of 15 AppendixD Appendix D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2 RULE 2, HPI CONTROL

• _ !E HPI has actuated, 1 Obtain SRO concurrence to TH EN bypass or reset THEN bypass or reset ES.

ES actuation.

2 Bypass or reset ES actuation:

Auto Manual

• Open MUP recirc prior to

• _ !E recirc to MUT is desired, throttling HPI f~ow THEN open MUP recirc to MUT valves:

< 200 gpm/pump.

MUV-53 MUV-257 MUV-25

• _ !E recirc to RB sump is desired, THEN open HPI recirc to sump valves:

- MUV-543

- -MUV-544

( MUV-545 MUV-546

• _ !E adequate SCM exists based,

• _ Prevent exceeding NOT limit on Tincore, THEN throttle HPI to maintain

• _ !E OTSG isolated for TRACC, required conditions. THEN maintain RCS PRESS

< 1000 psig.

• _ !E PTS, SGTR, or dry OTSG exists, THEN maintain minimum adequate SCM.

• _ !E adequate SCM can be

• _ Ensure running HPI pump is maintained with 1 HPI pump, aligned to MUT.

AND stopping second HPI pump is desired, THEN stop 1 HPI pump.

7/2112009 Page 12 ofl5 of 15 Appendix D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Fonn Form ES-D-2 Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2 RULE 3, EFW/AFW CONTROL

• Ensure available OTSGs are at or trending toward required "LLL" > 20 in level. "NAT CIRC" > 70%

"ISCM" > 90%

• IF manual control of EFW flow 1 _ Obtain SRO concurrence to place is desired, EFIC in manual.

m;;mual EFIC THEN establish msmual control. 2 Control EFW to maintain required EFW flow and OTSG level.

3 _ IE EFW flow is NOT controlled, THEN depress EFIC channels A and B "MANUAL PERMISSIVE" push buttons and close affected EFW block valve.

(

• _ IE adequate SCM does NOT 2 OTSGs > 280 gpm in 1 line exist, to each OTSG AND level in available OTSGs EFW is NOT at or trending toward 10TSG > 470 gpm in 1 line "ISCM" level, to 1 OTSG establiSh manual required THEN establish 20TSGs > 250 gpm to flow. < 300 gpm/OTSG AFW 1 OTSG 10TSG > 450 gpm to

< 600 gpm

• _ IE adequate SCM exists,

• Do not allow OTSG level to lower.

THEN throttle flow to prevent OTSG PRESS from lowering

> 100 psig below desired PRESS.

7/21/2009 712112009 Page 13 of 15 Appendix AppendixD D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form Fonn ES-D-2 Rev l.docx

I Appendix AppendixD D Required Operator Actions Form ES-D-2

{

\.

RULE 4, PTS

• _ lE  !.E ~

any of the following exist:

• Throttle HPI flow to minimize adequate SCM.

_ Tincore < 400°F, AND cooldown rate

• Throttle LPI flow to minimize exceeds rrs limit adequate SCM.

RCPs off,

• _ PTS is applicable until an AND HPI flow exists Engineering evaluation has been completed.

THEN perform required PTS actions.

(

(

7/2112009 Page 14 of 15 Appendix D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx

I Appendix D Required Operator Actions Form ES-D-2 RULE 7, PZR LEVEL CONTROL 1 IF PZR level is < PZR level PZR Level Band band, Rx at power> 20% 200 in to 240 in THEN restore PZR level.

Rx at power::;

power :S 20% 1 20 in to 200 in 120 Rx tripped 50 in to 120 in

• Cycle appropriate BWST to MUP valve to maintain MUT level 2: 2': 55 in:

11_ MUV-73 1_ MUV-58 I

• Close MUV-49 2 !E. PZR

!E level does NOT recover, 1 Open MUV-24 THEN establish manual HPI flow. 2 _ Notify SSO to evaluate Emergency Plan entry.

(

3 _ !E.

IF PZR level does NOT recover, THEN start second MUP and required cooling pumps.

[Rule 5, Diesel Load Control]

4 _ !E.

IF PZR level does NOT recover, THEN open additional HPI valves.

5 _ !E PZR

!E. level does NOT recover, THEN close MUP to MUT recircs:

MUV-53 MUV-257 3 !E.

!E PZR level recovers, ** _

_ !E.

IF adequate SCM exists, THEN restore normal PZR AND letdown is desired, conditions. THEN CONCURRENTLY PERFORM EOP-14, Enclosure 4,

[Rule 2, HPI Control] Letdown Recovery (if accessible).

(

7/2112009 Page 15 of 15 Appendix D F:\NRC - 2009\SES\2009 NRC - SES Spare\NRC 2009 SES Spare Operator Actions Form ES-D-2 Rev l.docx