Text

Initial Exam 2015-301 Final Simulator Scenarios
	ML15126A441
Person / Time
Site:	Sequoyah
Issue date:	05/06/2015
From:	; NRC/RGN-II
To:	; Tennessee Valley Authority
References
	Download: ML15126A441 (174)
	v • d • e

Appendix D Scenario Outline Form ES-D-1 Facility: Sequoyah Scenario No.: 3 Op Test No.: 2015-301 Examiners: Candidates: ATC SRO BOP Initial Conditions: 100% BOL, EOOS risk green, FT-1-3A is in MAINT BYPASS, RTS 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

Turnover: Maintain 100% power Critical Tasks CT-18 Manually isolates feed water flow into and steam flow from the ruptured SIG before a transition to ECA-3.1 occurs.

CT-19 Manually establish/maintain an RCS temperature so that transition from E-3 does not occur because the RCS temperature is in either of the following conditions:

. Too high to maintain < 60 degrees CET sub cooling .

OR

. RED path on PTS Status Tree CT-20 Manually depressurize RCS to meet and maintain SI termination criteria while in E-3 prior to exceeding 100% SIG dome level on the simulator during a SGTR of 430 gpm or less (TH05 9.15%).

Event Event Type Event Description No.

A small Steam Generator Tube Leak develops on the #1 SG; the ATC will (C) ATC 1 TH05A raise Charging flow to maintain Pressurizer Level on program. The SRO will (TS,C)SRO enter the RCS Leakage LCO.

The SGBD isolation valve fails to close; the BOP will manually isolate 2 RC13 (C)BOP/SRO SGBD flow by closing the SGBD flow control valve.

(R)ATC 3 The crew will reduce power in response to the SGTL.

(N}BOP/SRO TC10RLY2 The# 3 Heater Drain Tank level control valve fails open resulting in a 4 (C}BOP/SRO runback signal with a failure of the Main Turbine. The BOP will initiate a HD06A Main Turbine runback using the valve position limiter.

Following the manual runback, a malfunction causes the control rods (C)ATC continue to insert beyond the normal position, the ATC places control rods 5 RD17 (C,TS) SRO in manual using Immediate Operator Actions and will initiate emergency boration. The SRO enters the Rod Insertion Limit LCO.

The tube leak will degrade to a SGTR; the crew will trip the reactor, initiate 6 TH05A (M) ALL Safety Injection and enter E-0. The crew will transition to E-3 to, isolate and cool down the ruptured SG and depressurize the RCS.

The #1 SG Atmospheric Dump fails open when the reactor trips. The BOP 7 MS12A (C) BOP manually closes the Atmospheric Dump using prudent operator actions.

(N)ormal, (R)eactivity (l)nstrument, (C)omponent, (M)ajor 1

Appendix D Scenario Outline Form ES-D-1

SUMMARY

Event 1 -When directed by the lead examiner, SG Tube Leak develops on the #1 SG. The ATC will manually increase charging flow and subsequently isolate letdown using AOP-R.01 STEAM GENERATOR TUBE LEAK. The SRO will enter LCO 3.4.6.2.c Action a.

Event 2 - Blow down Isolation valve 15-44 fails to auto-isolate, the BOP will isolate Blow down flow by closing the SG Blow down Flow Control valve.

Event 3 - The crew will reduce power in response to the SGTL using AOP-C.03 RAPID SHUTDOWN OR LOAD REDUCTION.

Event 4 - When directed by the Lead Examiner, the# 3 Heater Drain Tank level control valve fails open resulting in a runback signal. The BOP initiates a Main Turbine runback using the valve position limiter using AOP-S.04 CONDENSATE OR HEATER DRAINS MALFUNCTION.

Event 5 - Following the manual runback, a malfunction causes the control rods continue to insert beyond the normal position; the ATC places control rods in manual using Immediate Operator Actions and AOP-C.01 ROD CONTROL SYSTEM MALFUNCTIONS to stop the excessive insertion. The SRO enters the Control Bank Rod Insertion Limit LCO. The ATC will initiate emergency boration to aid in compliance with the LCO.

Event 6 - The tube leak will degrade to a SGTR; the crew will trip the reactor, initiate Safety Injection and enter E-0, REACTOR TRIP OR SAFETY INJECTION. The crew will isolate and cool down the ruptured SG and depressurize the RCS using E-3, STEAM GENERATOR TUBE RUPTURE.

Event 7 - The #1 SG Atmospheric Dump fails open when the reactor trips. The BOP manually closes the Atmospheric Dump using prudent operator actions. (Credit sought for a post trip component malfunction for the BOP. The verifiable action is a Prudent Operator Action that only the BOP will perform.)

2

\ AppendixD Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time I Position I Applicant's Actions or Behavior Direct the Simulator Operator to initiate Event 3, #1 SG Tube Leak Indications available:

Annunciators:

O-M-12

O-XA-55-12A Window D-3, "1-RA-90-99A, CNDS VAC PMP LO RNG AIR EXH MON HIGH RAD"

O-XA-55-12A Window B-6, "1-RA-120A/121A, STM GEN BLDN LIQ SAMP MON HI RAD" (20 minutes later)

Indications available:

Deviations or unexpected indications on any of the following may indicate a steam generator tube leak:

1. Charging flow rises to maintain Pressurizer level.

2. Rise in makeup to VCT.

3. Rising activity on:

Condenser Vacuum Exhaust Radiation Monitor

SIG Slowdown Uquid Radiation Monitor

Main Steam line Monitor

4. SIG sample results indicating greater than or equal to 5 gallons per day (gpd) on any S/G.

1-RA-90-99A CNDS VAC PMP LO RNG AIR EXH MON HIGH RAD 1

\Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Position Applicant's Actions or Behavior

[1] CHECK 1-RR-90-99 rate meter and 1-RR-90-1 '19 on panel O-M-12 for indications of increased radiation.

NOTE Alarm validity may be determined based on absence of instrument malfunction alarm, indicated response of the rad monitor, and, if possible, other indications such as blowdown monitor {recognizing the difference in response time due to blowdown transport time).

[2] IF alann is valid, THEN NOTIFY RCL to perform i-CEM-068-'!37.5 Primary to Secondary Leakage via Steam Generators.

[3] IF alann is valid, THEN GO TO AOP-R.01, Steam Generator Tube Leak. [C.2]

Examiner Note: Several steps, notes, and cautions in the Annunciator response procedure do not apply to this failure. Only those that are applicable are listed in this event guide.

GOTO SECTION PAGE SRO High Secondary Radiation AND 2.1 4 Pressurizer level dropping OR Charging flow rising

i. MONITOR if Pressurizer level can be maintained:

a. CONTROL charging flow USING FCV-62-93 and FCV-62-89 A TC as necessary to maintain pzr level on program.

b. MONITOR pressurizer !eve! STABLE or RISING.

2

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time Position Applicant's Actions or Behavior

b. MONITOR pressurizer level ST ABLE b. PERFORM the folfowing:

or RISING.

l) ENSURE letdown isolated:

ATC

FCV-62-72 CLOSED

FCV-62-73 CLOSED

FCV-62-74 CLOSED Examiner Note: As the leak degrades, the ATC may take the RNO actions listed above; go to page 45 for additional details.

NOTE1 Appendix G (ICS Short Term Leak Rate Calculation) and/or Appendix H (Manual Leak Rate Calculation) can be used to estimate leak rate.

NOTE2 If letdown was isolated in Step 1, the leak rate may have exceeded the capacity of one CCP in the normal charging alignment (EAL 1.2.2P).

Examiner note; Appendix G starts on page 8

2. EVALUATE EPIP-1, Emergency Plan SRO Classification Matrix.

3. MONITOR VCT level:

MAINTAIN VCT level greater than 13%

ATC USING auto or manual makeup

CHECK VCT makeup capability adequate to maintain level.

4. MONITOR indications of leaking SIG:

CREW a. PERFORM Appendix E, Chemistry Notifications.

b. NOTIFY Radiation Protection to monitor Turbine Building and site environment:

CREW

Steam lines

S/G blowdown 3

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time Position Applicant's Actions or Behavior

c. IDENTIFY leaking S/G(s)

USING any of the following:

Unexpected rise in any SIG narrow range level OR

SIG sample results CREW OR

Radiation Protection survey of main steamlines and SIG blowdown lines OR

High radiation on any main steamline radiation monitor.

NOTE Time limits for shutdown in Step 5 (based on Chemistry Action Level 3 requirements in Appendix B) are more restrictive than Tech Specs.

5. INITIATE shutdown:

a. ANNOUNCE S/G tube leak on PA system.

b. CHECK reactor power greater than 50%.

c. INITIATE rapid shutdown USING AOP-C.03 WHILE continuing in this section.

d. ENSURE power reduced to less than 50% within one hour from initial indication of leak rate greater than or equal to 100 gpd.

e. ENSURE unit in Mode 3 within the following 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

NOTE If Tech Spec leakage limit (150 gallons per day of primary-to-secondary leakage through any S/G) is exceeded, initiating shutdown requires 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months NRC notification per NPG-SPP-03.5, Regulatory Reporting Requirements.

6. EVALUATE the following Tech Specs SRO for applicability:

4

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time Position Applicant's Actions or Behavior

3.4.6.2, Operational Leakage

3.7. 1.4, Secondary Coolant Activity LIMITING COl'IDmCN FOR OPERATION

a. Ne PRESSURE BOUNDARY LEAKAGE.

b. 1 GPM UNIDHffiFiED LEAKAGE.

c. 1511 gallons per day of prmary-to-secoodary leakage 1hrough any ooe stea,'!1 generator. and

d. 10 Gf'M IDENTIFIED LEAKAGE from 1he Read.a Coolant Sys,!em.

APPLICABILITY: MODES 1, 2, 3 a!ld4 ACTION:

a. With any PRESSURE BOUNDARY LEAKAGE or with primary-lo-secondary leakage oot wim!o ilmits, ~ in at feast HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months an<! in COLD SHUTDOWN within IM followlng 30 hoors.

7. MINIMIZE Spread of contamination:

a. IF tube leak identified on S/G #1 AND S/G #4 is intact, THEN PERFORM the following to isolate TDAFW steam supply from S/G #1:

1) EVALUATE [CTS] LCO 3.7.1.2 or

[ITS] LCO 3.7.5.

CREW

2) CLOSE FCV-1-15.

3) ENSURE FCV-1-16 OPEN.

b. PERFORM EA-0-3, Minimizing Secondary Plant Contamination.

C. EVALUATE staffing TSC and OSC to obtain assistance.

5

\Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time Position Applicant's Actions or Behavior

3. 7.1.2 Three auxiliary feedwator trains shall be OPERABLE:

Af'PLICAt!ILIJY: MODES *1. 2. arid 3, MODE4when steam generator is relied upon for heal removal.

~

a. With one AFW !rain inoperable in MOOE 1. 2. or 3, res!orn the inoperable AFW train to OPERABLE status vtithin 12 hottr$ or be In HOT STANDBY within the next S hours and in HOT SHUTOOVVN within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

Examiner note alarm 1-RA-120A/121A STM GEN BLDN LIQ SAMP MON HI RAD provides the BOP with a cue to perform actions for event 4. See below for details.

Panel 1-M-12 1-RA-120A/121A STM GEN BLON LIQ SAMP MON HI RAO Probable A. High radioactivity in SIG blowdown system due to SIG tube leak.

Cause:

Corrective ["1] ENSURE [1-FCV-15-441 CLOSED to isolate release.

Action:

BOP Dispatches operator to locally close [1-FCV-15-44)

Examiner Note: the crew continues with AOP-R.01 6

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time Position Applicant's Actions or Behavior

d. IF SIG blowdown is aligned to the river.

THEN TERMINATE S/G Blowdown to river:

1) ENSURE FCV-15-43 SIG blowdown flow control CLOSED.

2) DISPATCH operator to perform EA-15-1, Realigning SIG Blowdown to Cond DI.

3) CHECK blowdown valves for leaking S/G CLOSED.

4) WHEN EA-15-1 completed AND blowdown flow is desired.

THEN a) ALIGN S/G blowdown isol valves as necessary.

b) ADJUST FCV-15-43 to establish desired blowdown flow.

e. WHEN notified by TSC or Chemistry to bypass Condensate DI, THEN DISPATCH AUO to bypass polishers on affected unit: [Cond DI Bldg]

Unit 1 Only:

PLACE 1-HS-14-3, Condensate BOP Polisher Bypass Valve to OPEN.

Unit 2 Only:

PLACE 2-HS-14-3, Condensate Polisher Bypass Valve to OPEN.

f. REFER TO Appendix C, Contingency Plan for Control and Processing of Large Volumes of Contaminated Water. [C.5]

7

I Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time I Position I Applicant's Actions or Behavior APPENDIX G ICS SHORT TERM LEAK RATE CALCULATION CAUTIONS

VCT makeup, boration, or dilution will result in inaccurate results.

This calculation does NOT include correction for RCS temperature changes.

Changes in RCS T-avg may result in inaccurate results.

1. VERIFY CCP suction aligned to VCT. 0

2. SELECT "NSSS AND BOP" screen on !CS. 0

3. SELECT "SHORT TERM LEAK RATE." 0 NOTE Time interval selected must be at least 1 minute. Calculation results will not be obtained until the specified time interval elapses. Longer time intervals will provide more accurate results but will delay the initial results.

4. ENTER desired time interval for calculation. 0

5. START calculation by performing the following:

a. Click on START button. 0

b. Depress <F3> key. 0

6. IF time permits.

THEN INITIATE Appendix H (Manual Leak Rate Calculation) to validate ICS calculation results. 0 NOTE 1 Once started. the calculation will run for 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months or until stopped. Results will automatically update each minute.

NOTE2 To determine if leak has been isolated (e.g. after isolating letdown). calculation should be stopped and then restarted.

7. IF desired to stop leak rate calculation, THEN PERFORM the following:

a. Click on STOP button. D

b. Depress <F3> key. D

c. IF desired to restart leak rate calculation.

THEN REPEAT Steps 4 through 6. D 8

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 1/2 Event

Description:

Steam Generator Tube leak SGBD Isolation Valve Failure.

Time I Position I Applicant's Actions or Behavior APPENOIXH MANUAL LEAK RATE CALCULATION NOTE This appendix assumes RCS temperature is approximately constant

[1] IF CCP suction is aligned to VCT ANO VCT makeup, boration, and dilution are NOT in progress, THEN PERFORM the following calculation:

VCT LEVEL (%) PZR LEVEL (%) TIME(min)

INITIAL FINAL CHANGE [a] [b] [c]

lriositive for level reduction\ (positive for level reductionl VCT Level Conversion VCT level change conversion Time Change VCTLevel factor Rate of Change (posrtive for level lowering)

% x 20gal/% + min gpm subs!ep [a] above substep [c] above [d]

Pressurizer Level Conversion Pressurizer level Pzr Level conversion Time Change change factor Rate of Change (posi!ive for level lowering)

% x 62gal/% min gpm substep [b] above substep [c] above [eJ Leak Rate Calculation VCT Level Pzr Level RCS Leak Rate Rate of Change Rate of Change substep [d] above

+

substep [e] above

= gpm NOTE Calculation in Step [2] assumes charging and letdown now remain constant dunng data interval Due to potential errors in charging and letdown now indication, this method is less accurate than Step [1].

[21 IF VCT makeup, boration, or dilution is in progress OR CCP suction is aligned to RWST THEN PERFORM the following calculation:

INITIAL FINAL PZR Level Time Char in Flow Letdown Flow Total RCP Sea! Return Flow Pressurtur Level Conversion Pressurizer level conversIDn Time Change Pzr Level Rate at Change change factor (positive for level rising)

_s_te_p_(-oj_a_b_ov_e_

x 62 gal/% + min = gpm step [b] above ft]

Leak Rate Calculation Charging Flaw Seal Return Pzr Level lnstmment error FIO'N Rate of Change correction factor RCS leak Rate

+ 3gpm = gpm

-s~te_p_(=f]~a~b-ov_e_

step [c) above step [dJ above step [e] above 9

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Position Applicant's Actions or Behavior 1_ ENSURE crew has been briefed on reactivity SRO management expectations USING Appendix A_

APPENDIX A REACTIVITY MANAGEMENT BRIEFING NOTE This appendix should be used in additron to event-based brief.

[1] ENSURE crew has been briefed on the following:

Reason for Rapid Shutdown or load Reduction

load Reduction Rate:- - - -

Desired final power level:_ __

Reactivity Management expectations:

Unit Supervisor shall concur with all reactivity manipulations

Ensure reactor responding as expected using diverse indications

Tavg-Tref Mismatch requirements:

3°f control band

5°f reactor trip criteria

Crew focus will be on reducing power in a controlled and conseivative manner.

OATC wm monitor rod insertion limits and AFD limit

Boration source: _ _ _ __

Crew wm monitor reactor trip and turbine trip criteria using App. B

CRO will stop secondary plant equipment using App. C.

Termination Criteria (conditions requiling Reactor Trip, Turbine Trip, or condition no longer requiring rapid load reduction):

10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction

~*

.. *~ I Position I Applicant's Actions or Behavior 2_ MONITOR reactor/turbine trip NOT required USING Appendix B. Reactor and Turbine CREW Trip Critetia. (two extra copies provided for UOs) 3_ CHECK VAL VE POSITION Lll'vllT light CREW DARK on EHC paneL [M-2]

Examiner note: Appendix B reactor and turbine trip criteria see page 24 NOTE: Step 4 should be handed off to opposite unit or extra operator {if availabfe }.

If NO operator is available, notifications should be performed concurrently wrth subsequent steps (when time permits).

4. ENSURE following personnel notified of rapid shutdown or load reduction: [C.1]

Balancing Authority (Load Coordinator)

(75"1-7547)_

CREW

Chemistry

Radiation Protection

Plant Management CREW Makes notifications as required.

NOTE: Boration volumes and ftowrates listed in this procedure are recommendations and may be adjusted as necessary_

5. INITIATE boration:

a. CHECK rod control AVAILABLE:

ATC

Control Bank D rods capable of being moved

NO dropped or misaligned rods in Control Bank D.

11

Appendix D Required Operator Actions Form ES-0-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction e Position Applicant's Actions or Behavior

b. CHECK Control Bank D group position b. IF performing shutdown or power greater than 200 steps. reduction following turbine runback.

THEN ATC 1) PERFORM Appendix G. Partially Restoring Control Bank D Following Turbine Runback.

2) DO NOT CONTINUE UNTIL Appendix G has been completed.

5. c. CHECK boration capability from BAT AVAILABLE.

d. DETERMINE recommended boration volume from BAT:

-800 gal to reduce power from 100% to 20%

OR

1O gal for each 1 % power reduction (from current power level}

OR

volume provided by Rx Engineering (data sheet or reactivity control plan).

5. e. DETERMINE recommended boration flowrate from table below or from Reactor Engineering:

LOAD REDUCTION BORATION SRO RATE(o/o/min) FLOWRATE

'1% -15 gpm 2% --30 gpm 3% -45 gpm 12

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Position Applicant's Actions or Behavior

f. ENSURE concurrence obtained from ATC STA for boration volume and flolNfate.

g. CHECK status of charging and g. IF auto VCT makeup capability is letdown: needed due to RCS leakage or loss of letdovm,

normal letdown flow THEN ESTABLISHED

1) INITIATE emergency boration ATC

charging flow control HlC-62-93A USING Appendix I.

in AUTO.

2) GO TO Substep 5.J

-=--

(AER column}.

h. DETERMINE if normal boration will be used:

ATC

desired load reduction rate is less than 4q'(i per minute

time is available for normal boration.

L INITIATE normal boration A TC USING Appendix H.

Examiner note: Appendix H Actions are listed in the following steps.

APPENDIX H NORMAL BORATlON

£1] RECORD desired boration volume and ftowrate:

A TC Volume (gal)

FJowrate (gpm) 13

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Applicant's Actions or Behavior

[3] PLACE [HS-62-1406] Makeup mode selector switch in BORATE position.

NOTE Boric Acid controller setting is twice the desired flow rate.

Maximum Boric Acid flow is --45 gpm.

[4] ADJUST [FC-62-139] BA flow controller setpoint ATC for desired flow rate.

[7] ENSURE boric acid transfer pump aligned to blender ATC ln FAST speed.

[8] IF desired boric acid flow rate NOT obtained, THEN ADJUST one or both of the following as necessary:

ATC

[FC-62-1391 BA flow controller D

recirculation valve for BAT aligned to blender. D ATC [9] ENSURE desired boric acid flow indicated on Fl-62-139. D

[10] RECORD time when boration flow established: D ATC Time:

[11] WHEN required boric acid volume has been added AND control rods are above low-low insertion limit, ATC THEN PERFORM the following:

14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time Position Applicant's Actions or Behavior

[a] PLACE [HS-62-140AJ, Makeup Control to STOP position. D

[b] ENSURE [FC-62-142], Primary Water to Blender Flow ATC Controller in AUTO with dial indicator set at 35%.

[c] ADJUST [FC-62-1391, Boric Acid Flow Controller to ATC desired blend solution USING Tl-44 Boron Tables.

APPENDIX I EMERGENCY BORATION

[11 RECORD desired boration volume and flowrate:

ATC Volume (gal)

[2] ENSURE boric acid transfer pump aligned to blender ATC in FAST speed.

15

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction

[4] RECORD the following:

A TC Boration flow: _ _ _ _ __

A TC [5] NOTIFY Unit Supervisor when boration flow established.

[SJ IF Unit Supervisor directs changing boration flowrate, THEN RECORD the following:.

ATC Boration flow: _ _ _ _ __

Time:

Examiner Note: The crew continues actions to lower plant power using AOP-C.03 RAPID SHUTDOWN OR LOAD REDUCTION here.

5. iNmATE boration:

J. CONTROL boration flow as required to inject desired boric acid volume.

CAUTION: If borating from the RWST, Turbine Load Reduction Rate greater than 2% per minute could result in violating Rod Insertion Limit.

16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Position Applicant's Actions or Behavior

6. INITIATE load reduction as follows:

a. ADJUST load rate to desired value:

beti.veen 1% and 4% per minute if borating via FCV !38 OR BOP

beti.veen 1% and 3"/., per minute if borating via normal boration (App. H)

OR

2°/o per minute if borating from RWST.

b. ADJUST setter for desired power level:

DESIRED RECOMMENDED BOP RX POWER LEVEL SETTER VALUE 20% or less 15

6. C. VERIFY boration flow established.

BOP

d. INITIATE turbine load reduction by depressing GO pushtJutton.

e. CONTROL turbine load reduction BOP as necessary to reduce power to desired leveL 17

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Applicant's Actions or Behavior

7. MONITOR T-avg!T-refmismatch:

a. CHECK T-refindication a. PERFORM the following:

AVAILABLE.

1) MONITOR Program T-avg for current reactor power USING Tl-28 Figure 3 or ICS (NSSS f BOP. Program Reactor Average Temperature).

2) USE program T-avg in place of T-ref.

3) MAINTAIN T-avg \'Athin 3°F of program T-avg USING manual roo ATC control.

4) ADJUST turbine load rate ns necessary.

5) IF mismatch between T-avg and program value CANNOT be maintained less than 5"F, THEN TRIP lhe reactor and GO TO E-0, Reactor Trip or Safety Injection.

7. b. MONITOR automatic rod control b IF auto rod control is functional maintaining T-avg1T-ref mismatch AND situation allows slowing down less than 3°F load reduction.

THEN PERFORM the following:

1) REDUCE turbine load rate to allow auto rod control to restore T-avg!T-ref mismatch_

2) WHEN T REF T AUCT HIGH LOW alarm (M-5A, C-6) is clear, THEN RESTORE turbine load rate to desired value IF any of the following conditions met:

auto rod control NOT functional OR

turbine load rate adjustment is NOT effective in reducing mismatch OR

situation does NOT allow slowing down load reduction, THEN RESTORE T-avg to within 3°F of T-ref USING manual rod control as necessary.

IF T-avg/T-ref mismatch CANNOT be maintained less than 5°F, THEN TRIP the reactor and GO TO E-0, Reactor Trip or Safety Injection.

18

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Position I Applicant's Actions or Behavior

8. MONITOR automatic control of BOP MFW pump speed AVAILABLE.

9. STOP secondary plant equipment BOP USING Appendix C, Secondary Plant Equipment.

Examiner Note: Appendix C, Secondary Plant Equipment starts at page 25.

NOTE: lf lEFM thermal power (U2118) is inoperable, rod insertion limit curve must be raised by 3 steps. Rod insertion limit afarms and ICS display are NOT automatically adjusted when lEFM is inoperable.

JO. MONITOR control rods above CREW low-low insertion limit USING ICS orCOlR NOTE: Initiating plant shutdown required by Tech Specs requires 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months NRC notification per NPG-SPP-03.5, Regulatory Reporting Requirements.

11. EVALUATE Tech Specs/TRM for appficability:

3.2.1, Axial Flux Difference CREW

3.1.1.1, Shutdown Margin

3.1.3.6, Rod Insertion Limits

TRM 3.1.2.2, Boration Flowpaths

3.5.5, RWST .

12. EVALUATE EPIP-l, Emergency Plan CREW Initiating Conditions Matrix.

19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Position Applicant's Actions or Behavior

13. PERFORM the following to reduce boron concentration difference between pzr and RCS loops:

a. CHECK at least one normal spray valve AVAILABLE.

ATC

b. ENSURE at least one backup heater group ENERGIZED.

c. ENSURE spray valve(s) responds to control RCS pressure.

14. WHEN reactor power change exceeds 15% within one hour, THEN NOTIFY Chemistry to initiate sampling as required by the following:

CREW

O-Sl-CEM-000-050.2

O-Sl-CEM-030-407.2

O-Sl-CEM-030-4*15.0.

20

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Position I Applicant's Actions or Behavior

15. MONITOR if turbine load reduction can be stopped:

a_ CHECK the following conditions met:

reactor shutdown is NOT needed

turbine shutdown is NOT needed

turbine load at desired power level

{further !oad reduction NOT needed}

b_ ENSURE turbine load reduction STOPPED.

CREW c_ WHEN control rods are above the low-low insertion limit, THEN ENSURE boration flow STOPPED.

d_ NOTIFY Chem lab to sample RCS for boron concentration_

e. MAINTAIN T-avg 11.Jithin 3°F ofT-ref USING one of the following:

AUTO or MANUAL rod control OR

dilution or boration USING O-S0-62-7 OR

additional turbine load reduction .

21

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time Position Applicant's Actions or Behavior

15. f. CHECK reactor power greater than 50%.

g. DETERMINE Tech Spec AFD limits for current power level USING ICS (Primary Mimics, Doghouse Display) or COLR

h. CHECK AFD within Tech Spec hmits on at least three operable power range NIS channels.

1. JF AFD is outside target band, THEN INITIATE O-Sl-NUC-000-044.0, Axial Flux Difference.

15_ J. INITIATE performance of O-Sl-OPS-092-078.0, Power Range Neutron Flux Channel Calibration By Heat Balance Comparison.

k. CHECK C-7 LOSS OF LOAD INTERLOCK (M-4A windO'w E-5J DARK.

NOTE: Time in core life, expected Xenon changes, and planned power changes should be considered when evaluating need for boration or dilution.

If dilution is required, Reactor Engineering Data Sheet provides recommended dilution volume for first hour foUowing downpower.

22

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction II l~li"me_~ 1: -Pos"iti"on I Applicant's Actions or Behavior L CONSULT Reactor Engineering and STA regarding nl control and compensating for Xe changes_

m_ PERFORM the following as necessary to control fl.I and maintain T-avg on program:

IN1TIATE boration or dilution as necessary USING O-S0-62-7, Boron Concentration Control OR

ADJUST control rod position as necessary_

15_ n_ CHECK at least one normal pzr spray valve OPERABLE o_ DETERMINE appropriate procedure based upon power level and cause of rapid shutdown:

Other applicable AOP OR

O-G0-5, Normal Power Operation (if greater than approximately 30% power)

OR

O-G0-4, Power Ascension from Less than 5% to 30% Power (if less than approximately 30%)

P- GO TO appropriate plant instruction_

Examiner Note: When the crew has sufficiently reduced power the Lead Examiner may go to the next event starting at page 32.

23

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction 1

....,,., I Position I Applicant's Actions or Behavior APPENDIX B REACTOR AND TURBINE TRIP CRITERIA REACTOR TRIP CRITERIA TURBINE TRIP CRITERIA Turbine trip required or imminent Turbine vibration exceecling 'l4 mils with reactor power greater than P-9 (50%) with one of the following:

Uncontro!led rod movement which CANNOT be

higl-i vibration on multiple bearings stopped by placing rods in fV1ANUAl (AOP-co1} OR loss of S/G level control:

abnormal noise/vibration apparent level dropping or rising toward trip setpoint and level CANNOT be restored (AOP-S.01}

More than one dropped rod (AOP-c.01 l T-avg/T-ref mismatch CANNOT be maintained less than 5°F (refer to Step 7 or App_ E) 2: 30% turbine load: < 30% turbine load:

Condenser Pressure > 2.7 psia AND CANNOT Condenser Pressure > 'I. 72 psi a be restored within 5 minutes (AOP-s.021 (AOP-S.02)

Any automatic reactor trip setpoint reached Any automatic turbine trip setpoint reached OR automatic trip imminent: OR automatic trip imminent

Turbine trip above P-9 (50%)

High Stator Cooling Water temp 90"'C

Safety injection OR Stator DiP '12 psig below non-nal

Power Range high flux 109%

Both l'vlFPT's tripped

Power Range flux rate +/- 5% in 2 seconds

low Auto Stop Oil pressure 45 psig

Pressurizer high level 92%

High SIG level 81% narrow range

Pressurizer pressure low *1970 psig

Main Turb Bearing Oil low pressure 7 psig

Pressurizer pressure high 2385 psig

Thrust Bearing Oil high pressure 60 psig

RCS low flow 90%

Turbine Overspeed 1980 rpm

RCP undervoltage 5.022 kilovolts

loss of EHC pressure

RCP underfrequency 56.0 Hz

Unit 1 Onlv:

OTL'iT '115% (variable) Generator Circuit Breaker (GCB) tripped OR 5001<\/ bkrs 5034 and 5038 tripped_

OPLlT '108.7% (variable)

Unit 2 Only:

SIG low level *10_7% [15% EAMJ Generator Circuit Breaker (GCB) tripped

SSPS general warning in both trains OR 16'1kV bkrs 924 and 928 tripped.

24

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction II 11m1e 1 Position I Applicant's Actions or Behavior APPENDIXC SECONDARY PLANT EQUIPMENT

[1] ENSURE plant announcement(s) made on the following:

starting rapid shutdown (or load reduction) due to (reason)

stopping secondary plant equipment 0 NOTE 1 !f reactor power will be reduced below 50%, AUO should be on station at #3 heater drain tank (if possible) when 60% power is reached.

NOTE2 Dispatching of AUO in Steps [2] and [3] may be performed out of sequence.

[2] IF reactor power will be reduced below 50%,

THEN DISPATCH AUO with Appendix J (Unit 1) or K (Unit 2) to #3 Heater Drain Tank. 0

[3] IF one MFP will be shutdown using this appendix, THEN DISPATCH AUO to OPEN MFWP recirc manual Isolation valve for MFWP to be removed from service: {NIA valves NOT opened}

UNIT MFWP VALVE LOCATION OPEN 'I/

1 1A *t-VLV-3-576 TB eL 706, Northeast comer of tA condenser D 1B 1-VLV-3-577 TB el. 706, Northeast comer of tA condenser D 2 2A 2-VLV-3-576 TB eL 706, Southeast comer of 2A condenser 0 2B 2-VLV-3-577 TB eL 706, Solllheast comer of2A condenser D 25

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Position I Applicant's Actions or Behavior APPENDIX C

[4] IF BOTH of the following conditions are met

power is being reduced as directed by AOP-s.0*1 (Main Feedwater Malfunctions) or AOP-S.04 (Condensate or Heater Drain Malfunctions)

leaving secondary pumps in service is desired, THEN

---=---

GO TO Step [8]. LJ

[5] WHEN turbine impulse pressure is approximately 30% or less.

THEN PERFORM the foHowing:

[a] ENSURE one Cond Oemin Booster Pump STOPPED. D

[b] ENSURE associated suction valve CLOSED:

CONO DEMIN SUCTION VALVE CLOSED..J BOOSTER PUMP A FCV-2-290 D OR B FCV-2-285 D OR c FCV-2-230 D 26

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Po * * : \-,....:~:::ant's Actions or Behavior

[6] WHEN turbine impulse pressure is approximately 70-75%,

THEN PERFORM the following:

[a] ENSURE one Condensate Booster Pump STOPPED. 0

[b] ENSURE associated CBP suction valve CLOSED:

CONDENSATE BOOSTER PUMP SUCTION VALVE CLOSEO-..J A FCV-2-94 0; OR B FCV-2-87 0 OR c FCV-2-81 0

[c] PERFORM applicable procedure to adjust seal injection water pressure on stopped CSP to prevent water intrusion in oil:

(may be assigned to another operator or delayed if necessary)

1-S0-213-1 Section 7 -2 0 OR

2-S0-213-1 Section 7.3 0 27

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Position I Applicant's Actions or Behavior

[7] WHEN turbine impulse pressure is approximately 65% or less, THEN PERFORM the following:

[a} STOP remaining two Cond Demin Booster Pumps simultaneously. D

[b] ENSURE suction valves CLOSED:

COND DENHN BOOSTER PUMP SUCTION VALVE CLOSED ...J A FCV-2-290 D B FCV-2-285 D' c FCV-2-280 D

[cJ STOP one No_ 3 Heater Drain pump_

[d] STOP one No_ 7 Heater Drain pump_

28

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Position I Applicant's Actions or Behavior APPENDIXC

[S] IF reactor power will be maintained greater than 50%,

THEN GO TO Notes prior to Step [11]. D

~

CAUTION Isolation of all three intermediate heater strings could occur if turbine is tripped prior to fully opening LCV-S-105A and 8 using Appendix K or L

[9] WHEN reactor power is less than 60%

AND AUG with Appendix K (Unit 1) or L (Unit 2) is on station at #3 Heater Drain Tank, THEN PERFORM the following:

[a] STOP #3 Heater Drain Tank Pumps. D

[bl NOTIFY AUO to perform App. K (Unit 1) or App. L (Unit 2),

Fully Opening #3 Heater Drain Tank Bypass Valves. D

[c] CLOSE isolation valves from #3 Htr Drain Pumps to heater strings:

VALVE DESCRIPTION CLOSED--/

FCV-6-108 Htr Drain Tk Pump 3 to Htr String A D FCV-6-109 Htr Drain Tk Pump 3 to Htr String B D FCV-6-110 Htr Drain Tk Pump 3 to Htr String C D 29

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction 11' 11'1'me~ 11 ""'t"'osmon 1l ;"~D1J11*c:a~nt's Actions or Behavior APPENDIXC NOTE 1 The following step ensures that MFW Bypass valves are available to control feeclwater flow at low power.

NOTE2 If any MFW Reg valve is in MANUAL, the associated MFW Bypass valve controller should remain in MANUAL to prevent undesired opening of bypass valve.

[1 O] WHEN Reactor power is less than 50%,

THEN PERFORM the following:

[a] IF af! MFW Reg Valves are in AUTO.

THEN PLACE MFW Bypass Reg Valve controllers in AUTO. D

[b] IF any MFW Reg Valve is in MANUAL, THEN PERFORM the following:

1) MAINTAIN MFW Bypass Reg Valve in MANUAL for S/G with MFW Reg valve in MANUAL. D 2} PLACE MFW Bypass Reg Valves in AUTO for remaining S/Gs. D 30

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:3 Event

Description:

Plant Power Reduction Time I Position j Applicant's Actions or Behavior NOTE 1 If performing this AOP to reduce po. . .ver to allow shutting down one MFW pump, the affected MFWP may be removed from service at power level less than 55% (Unit 1) or 60% (Unit 2).

NOTE2 AFW start function on loss of both MFW pumps is inoperable vvhen a MFW pump is RESET but NOT pumping forward. LCO 3.3.2.1 (Unit 1) or 3.3.2 (Unit 2) allows AFW start channel to be inoperable for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months when shutting down a MFWP.

[11] WHEN it is desired to remove one MFW pump from service ANO power level is less than applicable limit

turbine impulse pressure less than approximately 45%

OR

reactor power less than value specified in Note 1, THEN PERFORM the following:

[a] ENSURE MFWP Recirc Manual Isolation valve OPEN for MFWP to be removed from service: (N/A valves NOT opened)

UN ff MFWP VALVE LOCATION OPEN .J 1

1A 1-VLV-3-576 TB eL 706, Northeast comer of 1A condenser D 18 1-VLV-3-577 TB eL 706, Northeast corner of 1A condenser D 2

2A 2-VlV-3-576 TB el. 706, Southeast comer of 2A condenser D 28 2-VlV-3-577 TB eL 706, Southeast comer of 2A condenser D

[b] THROTTLE OPEN recirc valve in MANUAL (30-50% OPEN}

for MFWP to be removed from service. D

[c] PLACE speed controller in MANUAL for MFWP to be removed from service. D

[d] REDUCE speed gradually on MFWP to be removed from service. D (step continued on next page) 31

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:4 Event

Description:

3 HOT LCV Failure Manual Runback Required.

Time Position Applicant's Actions or Behavior Examiner Note: Ensure Event 4 is inserted prior to plant power< 77%.

Direct facility operator to insert Event 4, #3 HOT LCV Failure Manual Runback Required.

Indications/Alarms Annunciators:

1-M-2

M2C B-7 ZS-6-1 OSA & B NO 3 HTR DR TK BYPASS TO COND Significant Resultant Alarms/Indications:

1-M-3

FR-6-107 Channel one #3 HOT Flow trending down.

ZS-6-105A & B NO 3 HTR DRTK BYPASS TO COND BOP Refers to ARP for annunciator M2C B-7 BOP [1] VERIFY LCV-6-*105A or LCV-6-1058 silown OPEN OR THROTTLED by indicating ligt1ts {'1-XX-6-'I, M-2).

BOP [2] IF> 8'1% load AND FR-6-107 indicates< 5500 gpm AND LCV-6-105A OR '1058 not fully closed, after 10 seconds time delay, THEN VERIFY turbine runback to less than 77%.

BOP [3] IF reactor trips, THEN GO TO E-0, Reactor Trip or Safety injection.

[4] MONITOR #3 Heater Drain Tank System parameters on M-2_

32

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:4 Event

Description:

3 HOT LCV Failure Manual Runback Required.

~*

,_- Position Applicant's Actions or Behavior BOP [5] DISPATCH operator to turbine building to perforrn the following:

[a] CHECK local level indication (sightglass).

[b] ENSURE LCV-6-'106A and *1068 OPEN and LCV-6-'105A and 1058 THROTTLED controlling leveL

[c] CHECK #3 Heater Drain Pumps operation.

[6] IF #3 Heater Drain Pump{s) tripped OR #3 Heater Drain Tank flo'\lv is lost, THEN GO TO AOP-S.04, Condensate or Heater Drains Malfw1ction.

SRO Transitions to AOP-S.04, Condensate or Heater Drains Malfunction.

SRO Directs response using AOP-S.04, Condensate or Heater Drains Malfunction.

1. DIAGNOSE the failure:

GOTO IF ...

SECTION PAGE Total or Partial Loss of #3 Heater Drain Tank Pump flow 2.6 31 BOP 1. MONITOR the following:

at least one #3 Heater Drain Tank Pump RUNNING AND

#3 Heater Drain Tank Pump flow greater than zero 33

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:4 Event

Description:

3 HOT LCV Failure Manual Runback Required.

Time Position Applicant's Actions or Behavior BOP 2. MONITOR for turbine runback conditions:

a. Turbine load greater than 81 % (Unit 1) or 82% (Unit 2).

b. #3 HOT bypass valve LCV-6-105A or -1058 OPEN. [M-2]

c. #3 Heater Drain Tank Outlet Flow less than 5500 gpm [M-2, FR-6-107]

for at least 10 seconds.

BOP 3. VERIFY turbine runback to less than IF #3 HOT flow less than 5500 gpm or equal to 77% turbine load AND LCV-6-105A or 1058 is open, (approximately 940 MWE). THEN

a. INITIATE turbine runback USING valve position limiter.

BOP 4. CHECK rods controlling in AUTO.

NOTE: If LEFM thermal power (U2118) is inoperable, rod insertion limit curve must be raised by 3 steps. Rod insertion limit alarms and !CS display are NOT automatically adjusted when LEFM is inoperable.

ATC 5. MONITOR control rods above low-low INITIATE boration USING Appendix A.

insertion limit using ICS or COLR EVALUATE Tech Spec LCO 3.1.3.6 and 3.1.1.1.

3.1.1.1 The SHUTDOWN MARGIN shall be greaterlhan or equal to 1.6% delta klkfor 4 loop operation.

APPL!CABlLITY: MODES 1. 2*. 3. and4.

ACTION:

'Mth the SHUTDOWN MARGIN le$$ than 1.6% delta klk, immedlatel:ii initiate and continue borailon at greate< than or equal to 35 gpm of a solution containing greater than or equal IO 8120 ppm boron or equivalent until ltle required SHUTDOWN MARGIN is restored.

34

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:4 Event

Description:

3 HOT LCV Failure Manual Runback Required.

Time Position Applicant's Actions or Behavior 3.1.3.6 Th!!! control banks shall be limited in physic<il insertion as specified in !he COLR.

APf'LICA,611.l!Y: MODES 1

and 2"#.

ACTION:

<>- With the control banks inserted beyond the above insertion limits, ex:oept for surveillance testil'lg pursuant to Specifica!ioo 4.1.3.1.2 oc whoo complying with ACTION ti of this specificalion. eilMr:

1. Restore the control banks to within the limits within two hours, or

2. Reduce THERMAL POWER within two hours to less than or equal to that fraction of RATED THERMAL PO\IVER wtlich is allowed by the group position using the insertion limits specified in !he COLR, oc

3. Be Jn HOT STANDBY within 6 hoors.

CAUTION: Feedwater temperature changes may impact core thermal power.

BOP 6. MONITOR Steam generator levels returning to program. [M-4]

NOTE 1: Recommended load rate is 1% per minute if turbine load reduction is needed.

NOTE2: Severe MFW pump cavitation is likely if inlet pressure is less than 250 psig.

BOP 7. MONITOR Feedwater pump inlet pressure greater than 320 psig. [M-3, Pl-2-1291 BOP 8. MONITOR Condensate Booster pump suction pressure greater than 100 psig.

[M-3, Pl-2-77]

BOP 9. MONITOR reactor power:

a. CHECK !CS thermal power indication AVAILABLE.

9. b. VERIFY 10 minute average power less than or equal to applicable limit:

IF LEFM is operable, THEN VERIFY !CS point U2118RA is less than or equal to 3455 MWt.

35

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:4 Event

Description:

3 HOT LCV Failure Manual Runback Required.

Time Position Applicant's Actions or Behavior

10. ENSURE operators dispatched to investigate cause for loss of #3 heater drain tank: pump flow:

CHECK LCV-6-106A and -1068 functioning properly.

CHECK position of LCV-6-105A and 1058

CHECK #3 heater drain tank: pumps functioning properly.

11. CHECK VALVE POSITION LIMIT light DARK on 1(2)-XX-47-2000.

EHC DISPLAY.

36

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:4 Event

Description:

3 HOT LCV Failure Manual Runback Required.

Time Position Applicant's Actions or Behavior BOP APPENDIXB TURBINE RUNBACK RESTORATION NOTE This appendix is used to remove turbine from valve position limiter prior to starting load reduction follovving a BOP runback.

[1] IF normal turbine load control is available (OPER AUTO light LIT),

THEN PERFORM the following:

[a] ENSURE governor valve tracking meter centered close to ZERO. D

[b] DEPRESS [TURB MANUAL] mode selector pushbutton. D

[c] VERIFY [TURB MANUAL] lamp LIT. D

[d] VERIFY reference and setter counters stabilize. D

[e] ENSURE governor valve tracking meter centered close to ZERO. D

[f] DEPRESS [OPER AUTO] mode selector pushbutton. D

[g] VERIFY [OPER AUTOJ lamp LIT. D

[h] VERIFY reference and setter counters stabilize. D

[i] REDUCE turbine load reference using SETTER UNTIL VALVE POS LIMIT light is DARK. D Examiner Note: The next event is already occurring, proceed to the next event.

37

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:5 Event

Description:

Control Rods Continuously Auto Insert.

Time Position Applicant's Actions or Behavior Malfunction is active at the scenario start.

Indications available:

Annunciators:

1-M-4

M4B B-7 ZB-4128 ROD CONTROL BANKS LIMIT LOW-LOW Significant Resultant Alarms/Indications:

Control rods continuing to insert without sufficient Tave-Tref mismatch.

ZB-4128 TS 68 2M/N ROD CONTROL RC LOOPS T AVG BANKS LIMIT fAUCT T AVG OEVN LOW-LOW HIGH-LOW ATC Refers to ARP for annunciator M4B B-7 or M5A-A7 A TC [1] IF alarm has been verified as being valid {ICS and/or COLR),

AND unit is in l'v1ode -1 or Mode 2 with reactor critical, THEN IMMEDIATELY INITIATE boration by performing the following:

[a] PLACE BA transfer pump aligned to blender in FAST speed_

[b] ADJUST FCV-62-"138 as necessary to establish boration flow greater than or equal to 35 gpm from BAT (at least 6'120 ppm)_

[c] IF required flow via FCV-62-'138 CANNOT be established, THEN PERFORM one of the following:

INITIATE normal boration of greater than or equal to 35 gpm from BAT (at least 6120 ppm)

USING O-S0-62-7 Sect 6.4.

38

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:5 Event

Description:

Control Rods Continuously Auto Insert.

['ll CHECK *t-XX-55-5, Trip status panel for any bistables that may be 1it, AND EVALUATE Reactor Trip criteria with SRO by comparison with redundant instrumentation_

[2] IF reactor trips, THEN GO TO E-0, Reactor Trip or Safety Injection_

[3J IF Tavg channel failed, THEN GO TO AOP-L02, RCS LOOP RTD INSTRUMENT MALFUNCTION_

[41 IF rod control system is malfunctioning, THEN GO TO AOP-C_Ol, Roel Control Sv.<:;fP.m MAlf1mr:tions ATC [d] RECORD the following:

Boration start time: _ _ _ _ gpm

- - - - - Boration flow:

A TC (2] IF rod insertion continues and cannot be explained, THEN GO TO AOP-C_o*1, Rod Control System Malfunctions_

SRO [7] REFER TO Technical Specification LCOs 3_1_'L1, 3_'L3.5 and 3.1.3_6_

3_ L3_S The con!rol banks shall be limited in physical insemon as specified In I.he COLR_

APPLICAf31l.IIY: MODES 1* and 2"#_

ACTION:

a. With the control banks inserted beyond the above insertion limits, except for surveilance testirig pursuant to Specfficaiioo 4, 1,3_1.2 or when complying with ACTlON o of this specification, eitl1er:

1. Restore the control banks to within the limits within two hours, or 2_ Reduce THERMAL POWER within two hOurs to less than or equal to ti-lat fraction of RATED THERMAL POWER which Is albwoo by the group position using the insertion limits specified in !he COLR, or

3. Be in HOT STANDBY within 6 hour6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months s_

SRO Transitions to AOP-C.01, ROD CONTROL SYSTEM MALFUNCTIONS.

SRO Directs actions from AOP-C.01, ROD CONTROL SYSTEM MALFUNCTIONS.

39

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:5 Event

Description:

Control Rods Continuously Auto Insert.

Time Position Applicant's Actions or Behavior

1. DIAGNOSE the failure:

GOTO IF ... SECTION PAGE Uncontrolled rod bank movement 2.1 4 (rod movement NOT due to actual T-avg/T-ref mismatch or change in reactor/turbine power)

NOTE: Step 1 is an immediate action step.

A TC 'I. STOP uncontrolled rod motion:

a. PLACE rod control in MAN.

b. CHECK rod motion STOPPED.

CAUTION: Control Rods should NOT be manually withdrawn during a plant transient.

A TC 2. MONITOR for plant transient

a. CHECK reactor power and T-avg STABLE.

2. b. CHECK !CS thermal power indication AVAILABLE.

c. VERIFY 10 minute average power less than or equal to applicable limit

IF LEFl'vl is operable, THEN VERIFY !CS point U21'l8RA is less than or equal to 3455 rv1wt.

IF LEFM is NOT operable, THEN VERIFY !CS point U11 '!8RA is less than or equal to 3411 MWt.

40

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:5 Event

Description:

Control Rods Continuously Auto Insert.

-*- I Position Applicant's Actions or Behavior "T'"

ATC 3. CHECK for instrumentation malfunction:

a_ CHECK all Vital Instrument Power Boards ENERGIZED:

VITAL POWER BOARD UV OR BREAKER TRIP alarms [l'v1-'JC windows A-7, B-7, C-7, and D-71 DARK b_ CHECK nuclear instrumentation OPERABLE.

c_ CHECK RCS RTOs OPERABLE.

d. CHECK turbine irnpulse pressure channels OPERABLE e_ CHECK T-ref OPERABLE USING TR-68-28.

f_ CHECK Auctioneered T-avg OPERABLE USING TR-68-28 .

41

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:5 Event

Description:

Control Rods Continuously Auto Insert.

Posi't'ion I Aoollicant's Actions or Behavior ATC 4. CHECK for inadvertent RCS dilution:

a. CHECK evidence of dilution a_ GO TO Step 5_

INDICATED:

VCT level indication

~

OR

T-avg rising unexplained with stable turbine load.

ATC 5. CHECK for inadvertent boration flow:

a. CHECK evidence of boration flow a_ GO TO Step 6_

INDICATED:

Batch counters flow indication ~

OR

VCT level indication OR

T-avg dropping unexplained.

NOTE: When adjusting T-avg, reactivity changes should be accomplished by only one method at a time_

ATC 6_ RESTORE T-avg to within 'l _5°F of T-ref

POSITION control rods OR

ADJUST turbine load OR

ADJUST RCS boron concentration USING O-S0-62-7, Boron Concentration Control.

42

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.:5 Event

Description:

Control Rods Continuously Auto Insert.

7_ EVALUATE the following Tech Specs!TRfv1 for applicability:

3_ -1_ -u, Shutdown Margin - T-avg_

Greater than 200°F

3_ 1_1 -4, fv1inimum Temperature for Criticality

3:1.3.'I, Movable Control Assemblies, Group Height

3_ 1 _3_5, Shutdown Rod Insertion Limit

3_1_3_6, Control Rod Insertion Limits

3-2, Power Distribution Limits (entire section)

When technical specifications have been identified or at discretion of the Lead Examiner, proceed to the next event.

43

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time I Position I Applicant's Actions or Behavior

~:: 1::..-'"..~* -- ---tor to insert Event 6 SGTR 1

Indications available:

1-M-3:

LOOP #1 FEEDWATER MAIN REG VALVE indicator shows a lower feed flow that steam flow; 1-M-4:

LOOP #1 FF indicators showing lower flow than SF for a constant power level.

RCS Pzr LEVEL Chs, 1-Ll-68-339A, 335A & 320 going down slowly initially; 1-M-5:

RCS PZR LEVEL 1-LR-68-339 shows Pzr level trending down initially.

1-PR-68-69, RCS LOOP 1 HL WIDE RANGE PRESS indicator trending down.

CHARGING HOR FLOW 1Fl-62-93A indicating above normal flow to maintain Pzr level on program.

1-M-6:

1-Pl-68-66A, HL Pressure LOOP 3 indicator trending down.

1-Pl-68-62, RCS HL Press WR indicator trending down.

1-Pl-68-69, RCS HL Press WR indicator trending down.

Examiner Note: The following steps come from AOP-R.01, STEAM GENERATOR TUBE LEAK and may be performed as the SGTL degrades.

1. MONITOR if Pressurizer level ATC can be maintained:

44

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

e Position Applicant's Actions or Behavior

b. MONITOR pressurizer level STABLE b. PERFORM the following:

or RISING.

1) ENSURE letdown isolated:

FCV-62-72 CLOSED

FCV-62-73 CLOSED

FCV-62-74 CLOSED

2) IF pzr level continues lo drop.

THEN START additional CCP as necessary.

IF pzr level CANNOT be maintained greater than 5%

OR loss of pzr level is imminent.

THEN PERFORM the following:

1) TRIP !he reactor.

2) WHEN reactor is tripped.

THEN INITIATE Safety Injection.

3) GO TO E-0. Reactor Trip or Safety Injection.

Transitions to E-0. Reactor Trip or Safety Injection Examiner Note: following IOA performance, prior to Steps 1-4 immediate action verification, ATC/BOP surveys MCBs for any expected automatic system response that failed to occur. Upon discovery, they may take manual action(s) to align plant systems as expected for the event in progress. (Ref. EPM-4, Prudent Operator Actions)

Examiner Note: MONITOR status trees, the crew will implement status tree monitoring via ICS.

When a RED or ORANGE path status tree is observed, the SRO will designate one of the Board operators (typically the BOP) to verify status tree conditions using 1-FR-O, UNIT 1 STATUS TREES. Once verified, the SRO should direct the crew to transition to the appropriate RED and/or ORANGE path procedure(s).

Directs performance of E-0, Reactor Trip Or Safety Injection.

45

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Position Applicant's Actions or Behavior NOTE1 Steps 1 through 4 are immedlate actton steps.

NOTE2 This procedure has a foldout page.

1. VERIFY reactor TRIPPED:

Reactor trip breakers OPEN Reactor trip bypass breakers DISCONNECTED or OPEN ATC Rod bottom llghts LIT Rod position indicators less than or equal to *12 steps.

Neutron flux DROPPING

2. VERIFY turbine TRIPPED:

BOP Turbine stop valves CLOSED.

3. VERIFY at least one 6.9KV shutdown BOP board ENERGIZED on this unit

4. DETERMINE if SI actuated:

ATC

ECCS pumps RUNNING.

Any SI alarm UT [M-4D].

5. PER.FORM ES-0.5, Equipment BOP Verifications WHILE continutng in this procedure.

Continue with the performance of E-0 REACTOR TRIP OR SAFETY SRO/ATC INJECTION BOP Performs ES-0.5, Equipment Verifications (go to page 64 for details)

SRO Addresses foldout page.

46

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time I Position I Applicant's Actions or Behavior FOLDOUT PAGE RCP TRIP CRITERIA IF any of the following conditions occurs:

RCS pressure less than 1250 psig AND at least one CCP or SI pump running OR

Phase B isolation, THEN STOP all RCPs.

EVENT DIAGNOSTICS

IF any SIG pressure is dropping uncontrolled, THEN PERFORM the following:

a. CLOSE MSIVs and MS!V bypass valves.

b. IF any SIG pressure continues to drop uncontrolled, THEN PERFORM the following:

1) ENSURE SI actuated.

2) IF at least one S/G is intact (S/G pressure controlled or rising), THEN ISOLATE AFW to faulted S/G(s):

CLOSE AFW level control valves for faulted S/G(s).

IF any AFW valve for faulted SIG CANNOT be CLOSED, THEN REFER TO Appendix E to stop AFW flow to faulted SIG.

3) ENSURE at least one of the following conditions met:

total AFW flow greater than 440 gpm OR

Narrow Range level greater than 10% [25% ADV] in at least one intact S/G.

IF both trains of shutdown boards de-energized, THEN GO TO ECA-0.0, Loss of All AC Power.

TANK SWITCHOVER SETPOINTS

IF CST level less than 5%, THEN ALIGN AFW suction to ERCW.

IF RWST level less than 27%, THEN GO TO ES-1.3, Transfer to RHR Containment Sump.

47

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time Position Applicant's Actions or Behavior

6. DETERMINE if secondary heat sink available:

a. CHECK total AFW flow greater than 440 gpm.

b. CHECK narrow range level b. MAINTAIN total feed flow ATC greater than 10% [25% ADVJ greater than 440 gpm in at least one SIG. UNTIL narrow range level greater than 10% [25% ADV]

in at least one SIG.

c. CONTROL feed flow to maintain narrow range level between 10% [25% ADV] and 50%

in intact or ruptured S/Gs.

7. CHECK if main steam lines should be isolated:

a. CHECK if any of the following conditions have occurred:

Any S/G pressure less than 600 psig OR

Any SIG pressure dropping ATC UNCONTROLLED OR

Phase B actuation.

b. ENSURE MSIVs and MSIV bypass valves CLOSED.

c. ENSURE applicable Foldout Page actions COMPLETED.

Examiner Note: The crew may take action using the Foldout Page (FOP) to isolate the #1 Steam Generator now.

48

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time Positio1nl P1pplicant's Actions or Behavior

8. CHECK RCP trip criteria:

a. CHECK the following: a. GO TO Step 9.

RCS pressure less than 1250 psig ATC ANO

At least one CCP OR SI pump RUNNING.

b. STOP RCPs.

9. MONITOR RCS temperatures: IF temperature less than 547'°F and dropping,

IF any RCP running. THEN THEN PERFORM the following:

CHECK T-avg stable at or trending to between 547°F and 552°F. a. ENSURE steam dumps and atmospheric reliefs CLOSED.

OR

b. IF coo!down continues,

IF RCPs stopped, THEN THEN CONTROL total feed flow:

CHECK T-cold stable at or trending ATC/BOP 1) ENSURE total AFW flow to between 547°F and 552°F.

less than or equal to 600 gpm.

2) MAINTAIN total AFW flow greater than 440 gpm UNTIL narrow range level is greater than 10% [25% ADV]

in at least.one SIG.

c. IF cooldown continues after AFW flow is controlled.

THEN CLOSE MSIVs and MSIV bypass

~-~ v Ives~*~~-

10. CHECK pressurizer PORVs, safeties, and spray valves:

ATC

a. Pressurizer PORVs CLOSED.

49

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time I Position Applicant's Actions or Behavior

b. Pressurizer safety valves CLOSED.

10. C. Normal spray valves CLOSED.

d. Power to at least one block valve AVAILABLE.

e. At least one block valve OPEN.

11. DETERMINE if SIG secondary pressure PERFORM the following:

boundaries are INTACT:

ATC

. CHECK all S/G pressures

a. MONITOR status trees.

CONTROLLED or RISING. b. GO TO E-2, Faulted Steam

. CHECK all S/G pressures Generator Isolation.

greater than 140 psig. -

12. DETERMINE if SIG tubes are INTACT: IF any SIG has level rising in an uncontrolled manner

All SIG narrow range levels OR has high radiation, CONTROLLED or DROPPING THEN PERFORM the following:

ATC

Secondary radiation NORMAL USING Appendix A, Secondary Rad a. MONITOR status trees.

Monitors. (App. A performed in ES-0.5). b. GO TO E-3, Steam Generator Tube Rupture.

SRO determines SIG #1 is ruptured and directs monitoring status trees and SRO transitions to E-3, Steam Generator Tube Rupture.

Examiner Note: MONITOR status trees, the crew will implement status tree monitoring via SPDS.

When a RED or ORANGE path status tree is observed, the SRO will designate one of the Board operators (typically the BOP) to verify status tree conditions using 1-FR-O, UNIT 1 STATUS TREES. Once verified, the SRO should direct the crew to transition to the appropriate RED and/or ORANGE path procedure(s).

SRO Direct performance of E-3, Steam Generator Tube Rupture NOTE This procedure has a foldout page.

50

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

1

~~ I Position I Applicant's Actions or Behavior FOLDOUT PAGE SI REINITIATION CRITERIA IF S! has been terminated AND either of the following conditions occurs:

RCS subcooling based on core exit TiCs less than 40"F OR

Pressurizer level CANNOT be maintained greater than 10% [20% ADV],

THEN

a. ESTABLISH ECCS flow by performing one or both of1he following:

ESTABLISH CCP!Tflow as necessary USING Appendlx C

START CCPs or SI pumps manually as necessary.

b. GO TO ECA-3.1, SGTR and LOCA- Subcoo!ed Recovery.

EVENT DIAGNOSTICS

IF both trains of shutdown boards deenergized, THEN GO TO ECA-0.0, Loss of All AC Power.

IF any SIG pressure dropping in an uncontrolled manner or less than *140 psig AND SIG NOT isolated AND SIG NOT needed for RCS cooldown, THEN GO TO E-2, Faulted Steam Generator Isolation.

IF any Intact SIG has level rising in an uncontrolled manner OR has abnormal radlation, THEN STOP any deliberate RCS coo!down or depressurization and GO TO E-3 Step 1.

TANK SWITCHOVER SETPOINTS

IF CST level less than 5%,

THEN ALIGN AFW suctfon to ERCW.

IF RWST level less than 27%,

THEN GO TO ES-1.3, Transfer to RHR Containment Sump.

51

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

~* - I Position I Applicant's Actions or Behavior ATC 1. MONITOR at least one RCP RUNNING.

2. MONITOR RCP trip criteria:

a_ CHECK the following: a. GO TO Step 3.

RCS pressure less than 1250 psig ~

ATC AND

At least one CCP OR SI pump RUNNING.

b. STOP RCPs.

3. MONITOR indications of Ruptured S/G(s):

a. IDENTIFY Ruptured S/G(s) as indicated by any of the following:

Unexpected rise in any SIG narrow range lever.

OR

High radiation from any SIG Crew sample.

OR

RADCON survey of main steam lines and SIG b!owdown tines.

OR

High radiation on any main steamline radiation monitor.

CAUTION If the TD AFW pump is the only source of feed flow, isolating both steam supplies wm result in loss of secondary heat sink.

52

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Position Applicant's Actions or Behavior

4. ISOLATE flow from Ruptured S/G{s):

ATC/BOP

a. ADJUST Ruptured S/G(s) atmospheric relief controller setpoint to 87% in AUTO. ('1040 psig)

b. CHECK Ruptured S/G(s} b. WHEN Ruptured S/G(s) pressure atmospheric relief hand switch in less than 1040 psig, P-AUTO and valve(s) CLOSED. THEN PERFORM the following:

1) VERIFY atmospheric relief CLOSED.

2) IF atmospheric relief NOT closed.

ATC/BOP THEN CLOSE atmospheric relief.

IF Ruptured S/G(s) atmospheric relief CANNOT be closed.

THEN DISPATCH personnel to close atmospheric relief USING EA-1-2.

Local Control of S/G PORVs.

4. c. CHECK S/G #1 or #4 ruptured.

d. CLOSE TD AFW pump steam supply from Ruptured S/G FCV-1-15 (S/G #1) or FCV-1-16 (S/G #4).

ATC/BOP e. VERIFY Ruptured S/G(s) blowdovm isolation valves CLOSED.

4. f. CLOSE Ruptured S/G(s) MSIV ATC/BOP and MSIV bypass valve.

53

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Position Applicant's Actions or Behavior

5. MONITOR Ruptured S/G(s) level:

a. CHECK ruptured SIG narrow range level greater than 10% [25% AOV]-

b. ISOLATE AFW to ruptured SIG:

1) ENSURE AFW LCVs ATC/BOP for ruptured SIG are CLOSED.

2) PLACE Turbine Driven AFW LCV for ruptured SIG in CLOSE PULL TO LOCK.

3) MONITOR AFW flow and LCV positions to verify AFW remains isolated to ruptured SIG.

6. VERIFY Ruptured SiG ISOLATED from Intact S/G(s):

a. CHECK either of the following conditions SATISFIED:

Ruptured SIG MSIVs and MSIV bypass valves CLOSED OR

MSIV(s) and MSlV bypass valve(s)

CLOSED on Intact SJG(s) to be ATC/BOP used for RCS cooldown.

b. CHECK SIG #1 or #4 ruptured.

c. CHECK TDAFW pump steam supply from ruptured SIG ISOLATED:

FCV-1-15(S/G#1)or FCV-1-16 (S/G #4) CLOSED 54

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time Position Applicant's Actions or Behavior

7. CHECK Ruptured SIG pressure ATC/BOP greater than 550 psig (Unit 1) or 425 psig (Unit 2).

N.OTE Blocking low steamline pressure SI as soon as pressurizer pressure is less than 1960 psig will prevent an inadvertent MSIV closure and keep the condenser available for steam dump.

After the low steamline pressure SI signal is blocked, main steamline isolation wm occur if the high steam pressure rate setpoint is exceeded.

The 1250 psig RCP trip criterion is NOT applicable after RCS coo!down is initiated in the following step.

8_ INITIATE RCS cootdown:

a. DETERMINE target core exit TIC temperature based on Ruptured S/G pressure:

ATC/BOP Lowest Ruptured Target Core Exit SIG res ) T/CTem °F 1000-1049 486 950-999 480

8. b. WHEN RCS pressure less than 1960 psig, THEN PERFORM the following:

1) BLOCK low stearnline pressure SL

2) CHECK STEAMUNE PRESS

!SOUS! BLOCK RATE !SOL ENABLE pennisslve LIT.

[M-4A, A4]

55

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time Position Applicant's Actions or Behavior c_ DUMP steam to condenser from Intact S/G(s) at maximum achievable rate:

n CHECK condenser available:

C-9 condenser interlock.

permissive UT. [M-4A, E6J

Intact SIG MSlVs OPEN .

2) PLACE steam dumps in OFF.

3} ENSURE steam dumps in steam pressure mode with demand less than 25°/o_

4) PLACE steam dumps in ON_

5) ADJUST steam dump demand to FULLY OPEN three cooldown valves_

6) WHEN T-avg is less than 540"'F, THEN BYPASS steam dump interlock..

7) RAISE ARN flow to intact S/Gs as necessary to support coaldown_

56

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time Position Applicant's Actions or Behavior 8_ d_ WHEN core exit T/Cs less than target temperature determined in Substep 8.a, THEN PERFORM the following:

1) CLOSE steam dumps or SIG atmospheric reliefs.

2) REDUCE total ARN flow to fess than 600 gpm to stop cooldown.

MAINTAIN total feed flow greater than 440 gpm UNTIL level greater than 10% [25% ADV]

in at least one Intact SIG.

3) MAINTAIN core exit T/Cs ress than target temperature USING steam dumps or atmospheric reliefs.

57

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time Position Applicant's Actions or Behavior 9_ MAINTAIN Intact SIG narrow range levels:

a. Greater than 10% [25"/o ADVJ BOP

b. Between 20% [25% ADV] and 50%.

10. MONITOR pressurizer PORVs and block valves:

a_ Power to block valves AVAILABLE ATC b_ Pressurizer PORVs CLOSED

c. At least one block valve OPEN.

A TC 11. RESET SI signal.

BOP 12_ MONITOR AC busses energized from start busses.

ATC 13. ENSURE Phase A and Phase B RESET.

58

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

14. CHECK control air established to containment: [Panel 6K and 6LJ

1-FCV-32-80 (2-FCV-32-81)

Train A essential air OPEN ATC

*1-FCV-32-'!02 (2-FCV-32-103)

Train B essential air OPEN

*t-FCV-32-110 (2-FCV-32-111) non-essenttaf air OPEN.

15. DETERMINE if RHR pumps should be stopped:

a. CHECK RHR pump suction aligned from RWST.

b. CHECK RCS pressure greater than 300 pslg.

C. STOP RHR pumps and PLACE in A-AUTO.

cl. MONITOR RCS pressure greater than 300 psig.

59

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Position Applicant's Actions or Behavior

16. CHECK if RCS cooldown should be stopped:

a. CHECK core exit T/Cs less than target temperature determined in Substep 8.a.

b. CLOSE steam clumps or atmospheric reliefs.

BOP C. REDUCE total AFW ftow to less than 600 gpm to stop coolclown.

MAINTAIN total feed ftow greater than 440 gpm UNTIL level greater than 10% [25% ADVJ in at least one Intact SIG.

cl. MAINTAIN core exit T/Cs less than target temperature USING steam dumps or atmospheric reliefs.

17. MONITOR Ruptured S/G(s) pressure BOP STABLE or RISING.

ATC 18. CHECK RCS subcooling based on core exit T/Cs greater than 60°F.

60

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Time I Pos~11t's Actions or Behavior

19. DEPRESSURIZE RCS to minimize break flow and to refill pressurizer:

a. CHECK normal pressurizer spray AVAILABLE.

b. INITIATE maximum available pressurizer spray.

c. CHECK depressurization rate ADEQUATE.

d. REDUCE RCS pressure UNTIL any of the following conditions {also listed on handout page) are met

Both of the following:

1) RCS pressure less than Ruptured SfG(s) pressure AND

2) Pressurizer level greater than 10% [20% ADV].

OR

Pressurizer level greater than 65%.

OR

RCS subcooling based on core exit T /Cs less than 40°F.

61

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Position Applicant's Actions or Behavior

e. CLOSE spray valve(s):

1) Norma! spray valves.

2) Auxiliary spray valve.

f. GO TO Caution prior to Step 22.

CAUTION Any delay in terminating SI after termination criteria are met may cause Ruptured S/G(s) overtill.

22. CHECK jf ECCS flow should be terminated:

a. RCS subcooling based on core exit T/Cs greater than 40°F.

b. Secondary heat sink:

Narrow range level in at least one Intact SIG greater than *10% [25% ADV]

ATC OR

Total feed flow to S/Gs greater than 440 gpm AVAILABLE

c. RCS pressure STABLE or RISING.

d. PresSllrizer level greater than 10% [20% ADV].

62

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event No.: 6, 7 Event

Description:

Steam Generator Tube Rupture/Failed Open Atmospheric Dump.

Position Applicant's Actions or Behavior

23. STOP the following ECCS pumps:

a. STOP SI pumps and PLACE in A-AUTO.

ATC b_ CHECK offsite power supplying shutdown boards.

C. STOP al! BUT one CCP and PLACE in A-AUTO.

24. ISOLATE CCPIT:

a. CLOSE inlet Isolation valves FCV-63-39 and FCV-63-40.

ATC

b. CLOSE outlet isolation valves FCV-63-26 and FCV-63-25.

Scenario may be terminated when the CCPIT is isolated or earlier, at discretion of Lead Examiner 63

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

1 Timo l 0 ~:::ition I Applicant's Actions or Behavior BOP 1- VERIFY DIGS RUNNING.

BOP 2. VERIFY DIG ERCW supply valves OPEN.

3_ VERIFY at least four ERON pumps BOP RUNNING.

4. VERIFY ccs pumps RUNNING:

. Pump 1A-A (2A-A)

BOP

. Pump *rn-B (28-B)

. Pump C-S_

BOP 5. VERIFY EGTS fans RUNNING.

BOP 6. VERIFY generator breakers OPEN.

7. NOTIFY at least two AUOs to report BOP to MCR to be available for local actions_

8_ VERIFY AFW pumps RUNNING:

a. MDAFWpumps BOP b_ TDAFWpump.

NOTE AFW level control valves should NOT be repositioned if manual action has been taken to control SIG levels, to establish flow due to failure, or to isolate a faulted S/G_

64

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

I Time I Position I Applicant's Actions or Behavior g_ CHECK AFW valve alignment

a. VERIFY MD AFW LCVs in AUTO.

BOP b_ VERIFY TD AFW LCVs OPEN.

C. VERIFY MD AF'vV pump recirculation valves FCV-3-400 and FCV-3-401 CLOSED_

10. VERIFY MFW Isolation:

a. CHECK MFW pumps TRJPPED_

b. ENSURE the following:

BOP

. MF\i\I regulating valves CLOSED

. MFW regulattng bypass valve controllers in IVIANUAL with output ZERO

. MFW isolatton valves CLOSED .

11. MONITOR ECCS operation:

a. VERIFY ECCS pumps RUNNING:

. CCPs

. RHR pumps BOP

. SI pumps b_ VERIFY CCP flow through CCPIT.

c_ CHECK RCS pressure less than 1500 psig.

65

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

Time I Position I Applicant's Actions or Behavior ct VERIFY SI pump flow.

e. CHECK RCS pressure e. GO TO Step 12.

less than 300 psig.

~

f_ VERIFY RHR pump flow.

12. VERIFY ESF systems ALIGNED:

a. Phase A ACTUATED:

PHASE A TRAIN A alann UT

{M-6C, 85].

PHASE A TRAIN 8 alamt UT

{M-6C, 86).

b. Cntmt Vent Isolation ACTUATEO:

CNTMT VENT ISOLATION TRAIN A alann UT [M-6C, C5}.

CNTMT VENT ISOLATION TRAIN 8 alarm UT [M-6C, C6}.

C. status monitor panels:

BOP

. 6COARK

. 60DARK

. 6E LIT OUTSIDE outlined area

. 6H DARK

. 6J LIT.

d. Train A status panel 6K:

. CNTMT VENT GREEN

. PHASE A GREEN

e. Train B status panel 6L:

. CNTMT VENT GREEN

. PHASE A GREEN 66

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

I

-* I Applicant's Actions or Behavior

13. MONITOR for containment spray and Phase B actuation:

a. CHECK for any of the following:

. Phase B ACTUATED OR

. Containment pressure greater than 2.8 psig.

b. VERIFY containment spray INITIATED:

1) Containment spray pumps RUNNING.

2) Containment spray header isolation valves FCV-72-39 and FCV-72-2 OPEN.

BOP

3) Containment spray recirculation valves to RWST FCV-72-34 and FCV-72-13 CLOSED.

4) Containment spray header flow greater than 4750 gpm per train.

5) Panel 6E LIT.

c. VERIFY Phase B ACTUATED:

PHASE B TRAIN A alarm LIT

[M-6C, A5].

PHASE B TRAIN B alarm LIT

[M-6C, A6].

d. ENSURE RCPs STOPPED.

e. VERIFY Phase B valves CLOSED:

. Panel 6K PHASE B GREEN .

. Panel 6L PHASE B GREEN .

67

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

Time I Position I Applicant's Actions or Behavior

f. WHEN i 0 minutes have elapsed.

THEN ENSURE containment air return fans RUNNING.

NOTE The continuous action in Step 14 remains applicable if containment pressure rises above 1.5 psig after ES-0.5 is completed.

14. MONITOR if containment vacuum relief isolation valves should be closed:

BOP a. CHECK containment pressure a. GO TO Step 15.

greater than 1.5 psig.

15. CHECK secondary and containment rad monitors USING the following:

BOP

Appendix A, Secondary Rad Monitors

Appendix B, Containment Rad Monitors.

APPENDIX A SECONDARY RAD MONITORS

1. IF SI occurred on Unit *1.

THEN CHECK following rad monitors including available trends prior to isolation:

BOP

Condenser exhaust recorder 1-RR-90-*1 *19

SIG blowdown recorder 1-RR-90-120

Unit 1 Main steam line rad monitors ["l-M-30]

Post-Accident rad recorder *1-RR-90-2688 points 3 {blue), 4 {violet), 5 {black), and 6 (turquoise).

[1-M-31 (back of 1-M-30)]

68

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

Time I Position I Applicant's Actions or Behavior

3. NOTIFY Unit Supervisor whether secondary radiation is NORMAL or HIGH.

APPENDIXB CONTAINMENT RAD MONITORS

1. IF SI occurred on Unit 1 THEN CHECK folrowing rad monitors.:

BOP

Upper containment post-accident rad monitors 1-RM-90-271A and 1-RM-90-272A NORMAL [i-M-30]

Lower containment post-accident rad monitors

J-RM-90-273A and 1-RM-90-274A NORMAL [1-M-30]

Containment rad recorders *1-RR-90-*112 and *J-RR-90-"!06 NORMAL [O-M-*121 (prior to isolation).

16. WHEN directed by E-0, THEN BOP PERFORM Appendix D, Hydrogen Mitigation Actions.

H. CHECK pocket sump pumps STOPPED:

[M-15, upper left comer}

BOP

HS-77-410, Rx Bldg Aux Floor and Equipment Drain Sump pump A

HS-77-411, Rx Bldg Aux Floor and Equipment Drain Sump pump 8-

18. DISPATCH personnel to pertorm BOP EA-0-*1, Equipment Checks Following ESF Actuation_

19. ENSURE plant announcement has been BOP made regarding Reactor Trip and SI.

20. PERFORM Appendix E, Spent Fuel BOP Cooling Actions, as time permits_

END OF TEXT 69

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 3 Event

Description:

Equipment Verifications.

1

""",... I Position I Applicant's Actions or Behavior 70

Appendix D Scenario Outline Form ES-D-1 Facility: Sequoyah Scenario No.: 4 Op Test No.: 2015-301 Examiners: Candidates: ATC SRO BOP Initial Conditions: 95% BOL, EOOS risk green, FT-1-3A is in MAINT BYPASS, RTS 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

Turnover: Raise power to 100%

Critical Tasks CT-7 Manually start at least one required high-head (Safety Injection) ECCS pump prior to transition out of E-0 during a SBLOCA when RCS pressure is less than 1500 psig.

CT-16 Manually trip all Reactor Coolant Pumps given the following conditions:

One Safety Injection pump is not functioning.

AND One of the following malfunctions is inserted:

. A 2" RCS Cold Leg break (TH02 0.529%) for greater than 33 minutes .

OR

. A 3" RCS Cold Leg break (TH02 1.19%) for greater than 10 minutes but less than 13.5 minutes.

AND The RCP's automatically trip after the above times has elapsed.

CT NRC Following a Steam Flow instrument failure, manually control #1 SG Level prior to exceeding the reactor trip setpoint for Low #1 SG Level.

Event Event Type Event Description No.

(R) ATC Raise Reactor power to 100%

1 (N)BOP/SRO ED120B1B 120 V vital power breaker to lower Containment radiation monitor 1-RM 2 TS-SRO 106 trips. The SRO declares the radiation Monitor INOPERABLE.

007 The 3A Heater Drain Pump trips which results in a Main Turbine runback; 3 RD09 (C) ATC/SRO the ATC manually inserts control rods due to a failure of the Rod Control system.

A Pressurizer Level instrument failure occurs resulting in a loss of Letdown.

(I) ATC/SRO 4 RX06A The ATC will de-select the affected instrument and restore Letdown. The (TS) SRO SRO declares the instrument INOPERABLE.

(C) BOP A failure will occur on #1 SG Steam Flow Instrumentation. The BOP will 5 RX09VE place the Feed Reg Valve to.#1 SG in MANUAL and control SG level.

(C) SRO A leak will develop in the Condenser Cooling water system in the Turbine (C) BOP 6 ANOV699 Building. The crew will trip the Reactor. The BOP will stop all Unit 1 CCW (C)SRO pumps and isolate all Unit 1 Main Condenser Waterboxes to stop the leak.

A SBLOCA will develop. The crew will respond using E-0 to initiate Safety 7 TH02A (M) ALL Injection and ultimately transition to E-1.

During the safety Injection, the A SI pump will trip and the B SI pump will fail 8 Sl13B (C) ATC to AUTO start, the ATC will manually start the B SI pump.

(N)ormal, (R)eactivity, (l)nstrument, (C)omponent, (M)ajor 1

Appendix D Scenario Outline Form ES-D-1

SUMMARY

Event 1 - The crew raises plant power using G0-5 section 5.1 from 95% to 100% power Event 2 - When directed by the lead examiner, 120 V vital power breaker to lower Containment radiation monitor 1-RM-90-106 trips. The SRO will enter LCO 3.3.3.1 action 27 and LCO 3.4.6.1 action b.

Event 3 - When directed by the lead examiner, the 3A Heater Drain Pump trips resulting in a Main Turbine run back. The A TC manually inserts control rods due to a failure of the Rod Control system using prudent operator actions.

Event 4 - When directed by the lead examiner, the pressurizer level channel LT 68-339 will fail low resulting in letdown isolation and de-energizing Pressurizer heaters. The ATC will remove the channel from service and restore Letdown using AOP-1.04, PRESSURIZER INSTRUMENT AND CONTROL MALFUNCTIONS. The SRO will enter LCO 3.3.1.1 Action 6 and LCO 3.3.3.7 Action 2.

Event 5 - When directed by the lead examiner a failure will occur on #1 SG Steam Flow Instrumentation. The BOP will place the Feed Regulating Valve to #1 SG in MANUAL and control SG level using AOP-S.01 MAIN FEEDWATER MALFUNCTIONS.

Event 6 -A leak will develop in the Condenser Cooling water system in the Turbine Building.

The crew will trip the Reactor. The BOP will stop all Unit 1 CCW pumps and isolate all Unit 1 Main Condenser Water boxes to stop the leak using AOP-M.08 INTERNAL FLOODING.

Event 7 - When directed by the lead examiner, a SBLOCA will develop. The crew will respond using E-0, REACTOR TRIP OR SAFETY INJECTION to initiate Safety Injection and ultimately transition to E-1 LOSS OF REACTOR OR SECONDARY COOLANT.

Event 8 - During the safety Injection, the A SI pump will trip and the B SI pump will fail to AUTO start, the ATC will manually start the B SI pump. (Credit sought for a post trip component malfunction for the ATC. The verifiable action is a Prudent Operator Action that only the ATC will perform.)

2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 1 Event

Description:

Plant Power Increase.

*on I Applicant's Actions or Behavior Simulator Operator: No actions required for Event 1 Examiner Note: The following Steps are from O-S0-62-7 Boron Concentration Control, Section 6.2, Dilute CAUTION 1 When making an RCS dilution of~ 3000 gallons, it should be done in batches with an RCS boron concentration verification at the halfway point {e.g .* 1500 gallons}. Allow at least 15 minutes between batches. [C.5] (C.7]

CAUTION2 Returning the Boric Acid Blender to service after unplugging, cleaning, or maintenance on the Boric Acid System could introduce debris, sludge, air or chunks of solidified boron into the CCP suction resulting in pump damage. Extreme care must be exercised to properly flush the Boric Acid Blender system following an outage. [C.2]

NOTE1 If an excessive amount of dilution is required (plant startup}, the pressurizer heaters should be energized to cause pressurizer spray operation for equalizing boron concentration in RCS and pressurizer.

NOTE2 Dilute mode will be used anytime a long-term positive reactivity addition is desired_ The operator should use the normal dilute mode whenever conditions permit Examiner Note: Dilutions will be performed based on the Reactor Engineering provided Reactivity Spreadsheet SRO [1] ENSURE unit is NOT in a Tech Spec or TRM action that prohibits positive reactivity additions. [C.1]

NOTE HUT level rise of 1% is equal to 1380 gallons (Tl-28 Figure 34)_

[2] ENSURE sufficient capacity available in the HUT selected to receive expected amounts of CVCS letdown: (NIA if not used)

ATC HUT LEVEL INITIALS A %

B %

ATC

[3] ENSURE makeup system is aligned for AUTO operation in accordance with Section 5 .1.

1

Appendix D Required Operator Actions Form ES-0-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 1 Event

Description:

Plant Power Increase.

Position Applicant's Actions or Behavior

[4] RECORD the quantity of dilution water required to achieve desired boron concentration using Appendix O_ (NJA for minor ATC power changes)

_ _ _ _ _ gals NOTE Due to eyeball interpolation the verified calculation may slightly differ from the initial calculation_ The following signoff indicates that any differences in the two results have been discussed and are dose enough to be considered validated_

[5) PERFORM Appendix I Independent Verification of Calculation for Amount of Boric Acid or Primary Water.

SRO

{NIA if App_ 0 was performed by SRO to verify data from Rx Engineering)

[6] PLACE [HS-62-140A]. Boric Acid Supply to Blender Flov1 Control Switch to the STOP position.

[7] PLACE [HS-62-1408], CVCS Makeup Selector Svvitch to th DILUTE

[8] ENSURE [HS-62-1400]. Boric Acid Valve to the Blender CLOSED (Green light is LIT).

[9) SET [FQ-62-142), Batch Integrator for the desired quantity.

NOTE Primary Water Flow Controller [FC-62-142] receives its reference signal (70 gpm) from setpoint potentiometer (dial indicator) located on panel M-6. A setpoint of 35%

corresponds to a 70 gpm primary vvater flow rate.

[10] ADJUST [FC-62-142], Primary Makeup Water Flow Controller for the desired flow rate.

2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 1 Event

Description:

Plant Power Increase.

Applicant's Actions or Behavior

[11) PLACE [HS-62-140A), Boric Acid Supply to Blender Flow Control Switch to the START position.

NOTE Flow oscillations and/or erratic controller response may require manual operation of Primary Water Flow Controller [FC-62-142]

until stable conditions exist.

[12] VERIFY the following; ATC [a] Inlet to top of VCT [FCV-62-128] is OPEN.

[b] Primary Water flow by [Fl-62-142A] OR [FQ-62-142].

NOTE Alternate dilution in small amounts is acceptable on a regular basis, provided no significant changes in seal water temperature or seal leakoff are indicated. Batches of 5 to 1O gallons may be added through FCV-62-144 on a frequency not to exceed once per 30 minutes. ICS points for No. 1 seal leakoffs and seal water temperatures on the RCPs should be monitored during and after dilution.

ATC [13) IF primary water addition to the bottom of the VCT [FCV-62-144] is desired, THEN NOTE It may take approximately 15 minutes before any changes to reactivity are indicated on nuclear instrumentation or RCS temperature indication.

ATC

[14] MONITOR nuclear instrumentation and reactor coolant temperature to ensure the proper response from dilution.

ATC

[15) IF [Ll-62-129], Volume Control Tank Level, rises to 63 percent, THEN ENSURE [LCV-62-118], Volume Control Tank Divert Valve OPENS to divert excess water to the Holdup Tanks.

3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 1 Event

Description:

Plant Power Increase.

Applicant's Actions or Behavior

[16] WHEN dilution is complete, THEN

[a] PLACE [HS-62-140A], Boric Acid to Blender Flow Control Switch to the STOP position.

[b] IF [FCV-62-144] was previously OPENED, THEN CLOSE [FCV-62-144] with [HS-62-144).

[c] VERIFY no primary water flow on either

[Fl-62-142A] OR [FQ-62-142].

[d] ENSURE [FCV-62-128) is CLOSED.

Lead Examiner may cue the next event when power has been sufficiently raised 4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.:2 Event

Description:

Containment Radiation Monitor Breaker 1-RM-90-106 Trips

~*

Position Applicant's Actions or Behavior Direct facility operator to insert Event 2 Containment Radiation Monitor Breaker 1-RM-90-106 Trips Indications available:

1C, A-7 "120V AC VITAL PWR BO 1-1 UV OR BKR TRIP"

12A, A-4 "1-RA-90-106A CNTMT BLDG LWR COMPT AIR MON HIGH RAD"

12A, A-5 "1-RA-90-106B CNTMT BLDG LWR COMPT AIR MON GAS INSTR MALF"

12A, A-6 "1-RA-90-106C CNTMT BLDG LWR COMPT AIR MON PART INSTR MALF"

Flow light Dark on Rl-90-106A (M-12)

Examiner Note: Primary response is contained in two Annunciator Response Procedures.

One is for the Breaker trip the other is for the radiation monitor instrument malfunction.

Applicable steps from each are listed below.

Refer to Annunciator Response Procedures for Vital Board I Breaker Crew Trip.

[1] DISPATCH personnel to CHECK 120V AC Vital Power Bd 1-1 for the following:

[a] Local voltmeter indicating power available.

BOP [b] Voltage potential lamps (amber) ILLUMINATED

[c] Tripped or open breakers on panel.

[d] Any blown fuses in rear of board.

Panel O-M-12 1-RA-90-106C CNTMT BLDG LWR COMPT AIR MON PART INSTR MALF Refers to Annunciator Response Procedures for Rad Monitor Gas or BOP Particulate Instrument Malfunction.

5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.:2 Event

Description:

Containment Radiation Monitor Breaker 1-RM-90-106 Trips Time I Position I Applicant's Actions or Behavior

['I] CHECK *l-Rl-90-'I06 on o-rv1-*12 for indication of malfunct!on.

[3] DISPATCH operator to 1-RE-90-106 to check following:

BOP [3.1] Valves aligned properly

[3.2] Low flow indication on *1-FIS-90-106

[3.3] Pump failure

[3.4] [1-HS-90-106] Heat Trace circuit handswitch. (Heat Trace Control station adjacent to *1-RM-90-"106, -*1 *12) in ON position_

[8] [CTS] EVALUATE Technical Specifications 3.3.3 *1, 3.4_6_ *1 and 3.4.6.2.

BOP

[ITS] EVALUATE Technical Specifications 3.3.6, 3.4.15, and 3.4.13.

3.3.3.1 The radiation roon.itorJFJg !nstrumentatit'Xl channels shown in Tabfe 3.3-6 shall oo OPERABLE with their alarmllrif) selpoints Within !he specified limits.

APPLICABILITY: A:s shown in Table 3.3-6.

a. With a radiation monitoring channel alarm/trip setpoint exceeding the value shown in Table 3.3-6, adjust the ootpo1nt to within the limit within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months or declare the channel inoperable.

b. With one or more radiation monitoring channals inoperable. rake !he ACTION shown in Table 3.3-6.

c. Tile provisions of Specification 3.0.3 are not applicable.

SRO 2. PROCESS MONITORS

b. Containmoot

i. Deteled ii. Particulate ActMty RCS leakage 1.2.3&4 NIA 27 Delec1'°'1 ACTJON 27 - With lhe number of OPERABLE channels less lhan required by IM Minimum Channels OPERABLE requirement. comply wilh the ACTION requirements of Specillcatlon 3.4.6.1.

6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.:2 Event

Description:

Containment Radiation Monitor Breaker 1-RM-90-106 Trips Position Applicant's Actions or Behavior 3-4.6.1 The following Reactor Cooiant System leakage detection instrumentation shall be OPERABLE:

a. One lower cootainment atmosphere particulate radioactivity monitOfing channel, arid

b. Orie conmi11ment pocket sL!mp level moniloL APPLICABILITY: MODES 1, 2, 3 and 4.

ACTION:

b. Wi1h lhe particulate lower contalnmBn:t atmosphere radioactivity monitor inoperable, operation may i::ontinue for up to 30 days provided grab samples of the lower contaf11meot atmosphere are analyzed once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or SR 4A6.2. 1 is perfOfffied orrre per 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s*; otherwise, be in at leai;t HOT STANDBY within too next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the fl,)flQ\lliniq SQ hQllt'$.

[9) IF 1-RE-90-106 [CTS] inoperable [ITS] nonfunctional, TH EN ALIGN 1-RE-90-*1 *12 to lower containment in Crew accordance with 1-S0-90-2, Gaseous Process Racfiation li/lonitoring System.

Crew Performs a Crew Brief as time allows.

When technical specifications have been identified or at discretion of the Lead Examiner, proceed to the next event.

7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 3 Event

Description:

Main Turbine Runback Failure of Control Rods to Auto Insert.

Position Applicant's Actions or Behavior Direct facility operator to insert Event 3 Main Turbine Run back failure of Control Rods to Auto Insert.

Indications available:

3 Heater Drain Tank Pump A Trip:

White light on associated handswitch HS-6-112A (M-2) and Buzzer

Alarm XA-55-1B, E-3 "MOTOR TRIPOUT PANEL 1-M-1THRU1-M-6

Alarm XA-55-2C, B-7 "ZS-6-105A & B NO 3 HTR DR TK BYPASS TO COND Run back:

Alarm XA-55-2A, B-1 "TURBINE RUNBACK BOP"

Generator Megawatts decreasing Auto Rod Failure:

Megawatts decreasing with no rod insertion Examiner Note: Runback does not occur immediately when #3 HOT pump trips. Bypass valve failure will eventually result in reducing #3 HOT discharge flow to less than 5500 gpm as

3 HOT level decreases due to excessive bypass flow Transitions to AOP-S.04 CONDENSATE OR HEATER DRAINS SRO MALFUNCTION Directs actions from AOP-S.04 CONDENSATE OR HEATER DRAINS SRO MALFUNCTION

1. DIAGNOSE the failure:

GOTO IF ...

SECTION PAGE

3 Heater Drain Tank Pump Trip while pumping forward 2.1 4

1. MONITOR at least one #3 HDT pump BOP RUNNING.

8

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 3 Event

Description:

Main Turbine Runback Failure of Control Rods to Auto Insert.

Position Applicant's Actions or Behavior

2. MONITOR for turbine runback conditions:

a. Turbine load greater than 81% (Unit 1) or 82% (Unit 2).

BOP b. #3 HDT bypass valve LCV-6-105A or-1058 OPEN. [M-2]

c. #3 HeaterDrain Tank Outlet Flow less than 5500 gpm [M-2, FR-6-107]

for at least 10 seconds.

3. VERIFY turbine runback to less than BOP or equal to 77% turbine load (approximately 940 MWE).

4. CHECK rods controlling in AUTO. PERFORM the following:

a. ENSURE control rods in MANUAL.

ATC

b. INSERT rods as necessary to restore T-avg within 3°F of T-ref.

NOTE: If LEFM thermal power (U2118) is inoperable, rod insertion limit curve must be raised by 3 steps. Rod insertion limit alarms and ICS display are NOT automatically adjusted when LEFM is inoperable.

5. MONITOR control rods above low-low INITIATE boration USING Appendix A.

insertion limit using ICS or COLR.

ATC EVALUATE Tech Spec LCO 3.1.3.6 and 3.1.1.1.

3.1.1.1 The SHUTDOWN MARGIN shall be greater !han or equal to 1.6% delta Wk for 4 loop operation.

APPLICABILITY: MODES 1. 2*. 3. and 4.

~:

With the SHUTDOWN MARGIN less than 1.6% della klk, immediately inlliate and continue boratioo at great<< than ot equal to 35 gpm of a solution containing greater tht:m or equal to 8120 ppm boron or equivalent until !he re<1uired SHUTDOWN MARGIN is raslored.

9

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 3 Event

Description:

Main Turbine Runback Failure of Control Rods to Auto Insert.

Time Position Applicant's Actions or Behavior 3.1.3.6 The conttol banks $hall be limited in physical insertion a$ specified in the COLR.

APPLICABILITY: MODES 1* and 2"#.

ACTION:

a, With the control banks inserted beyond the above insertion limits, except for surveillance testing pursuant to Specification 4 .1.3.1.2 or whoo complying with ACTION o of this specification, either:

1.. Restore the control banks to Within the limits Within two hours, or 2 Reduce THERMAL POWER within two hours to less than Of equal to that fraction of RATED THERMAL POWER wtlich is allowed by the group position using the insertion limits specified in the COLR, or

3. Be in HOT STANDBY Within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

CAUTION: Feedwater temperature changes may impact core thermal power.

BOP 6. MONITOR S/G levels returning to program.

NOTE: An auto valve closure for LCV-6-1068 exists if any one of three #3 Heater Drain Tank Pumps trip and turbine load is greater than 81% (Unit 1) or 82% (Unit 2).

7. CHECK LS-6-111 #3 HEATER DRAIN TANK BOP LEVEL ABNORMAL alarm, DARK.

[M-2C, A1]

CAUTION: Reducing turbine load too rapidly could result in further drop in condensate pressure due to reduction in heater drain flow. Recommended load rate is 1% per minute if turbine load reduction is needed.

8. MONITOR Feedwater pump inlet pressure BOP greater than 320 psig. [M-3, Pl-2-129]

9. MONITOR Condensate Booster pump BOP suction pressure greater than 100 psig.

[M-3, Pl-2-77]

10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 3 Event

Description:

Main Turbine Runback Failure of Control Rods to Auto Insert.

T:~~

.. - Position Applicant's Actions or Behavior

10. MONITOR reactor power:

a. CHECK ICS thermal power indication AVAILABLE.

10. b. VERIFY 10 minute average power less than or equal to applicable limit:

ATC

IF LEFM is operable, THEN VERIFY ICS point U2118RA is less than or equal to 3455 MWt.

IF LEFM is NOT operable, THEN VERIFY ICS point U1118RA is less than or equal to 3411 MWt.

11. ENSURE operator dispatched to investigate CREW cause of #3 Heater Drain Tank Pump trip.

12. NOTIFY Maintenance to investigate and CREW repair pump malfunction as necessary.

13. CHECK VALVE POSITION LIMIT light RESTORE turbine controls to normal BOP DARK on 1(2)-XX-47-2000, USING Appendix B. Turbine Runback EHC DISPLAY. Restoration.

Examiner Note: See next page for APPENDIX B TURBINE RUNBACK RESTORATION details.

11

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 3 Event

Description:

Main Turbine Run back Failure of Control Rods to Auto Insert.

TURBINE RUNBACK RESTORATION This appendix is used to remove turbine from valve position limiter prior to starting load reduction following a BOP runback.

[1] IF normal turbine load control is available (OPER AUTO light LIT),

THEN PERFORM tile following:

[a] ENSURE governor valve tracking meter centered close to ZERO.

[b] DEPRESS [TURB MANUAL] mode selector pushbutton.

[c] VERIFY fTURB MANUAL] lamp LIT.

[d] VERIFY reference and setter counters stabilize.

[e] ENSURE governor valve tracking meter centered close to ZERO.

[f] DEPRESS [OPER AUTO] mode selector pushbutton.

[g] VERIFY [OPER AUTO] lamp LIT.

[h] VERIFY reference and setter counters stabilize.

[i] REDUCE turbine load reference using SETTER NOTE: Steam dump load rejection circuit may require several minutes decay time before C-7 can be reset 12

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 3 Event

Description:

Main Turbine Runback Failure of Control Rods to Auto Insert.

Applicant's Actions or Behavior IF C-7 interlock LIT, THEN RESET Load Rejection Signal:

a. PLACE HS-1-103A and 1038, Steam Dump Control, in OFF.

b. PLACE HS-1-103D, Steam Dump Control, 1n RESET and VERIFY spring return to TAVG.

c. VERIFY C-7, LOSS OF LOAD INTERLOCK alarm, DARK.

[M-4A, 5E]

d. ENSURE Steam Dump demand is ZERO.

e. PLACE HS-1-103A and 1038, Steam Dump Control, in ON.

ATC 15. CHECK reactor power less than 95 %.

16. GO TO appropriate plant procedure.

SRO Crew Performs a Crew Brief as time allows.

When technical specifications have been identified or at discretion of the Lead Examiner, proceed to the next event.

13

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 4 Event

Description:

Pressurizer Level Instrument Fails Low Time Position I Applicant's Actions or Behavior Direct the Simulator Operator to initiate Event 4, PLCS Transmitter Fails Low.

Indications/Alarms Alarms:

1-M-5A

C-3, "PRESSURIZER LEVEL HIGH-LOW"

E-3, "PRZR LVL LOW HEATER OFF & LETDOWN SECURED" Indications:

1-M-4

1-Ll-68-339 RCS PZR LEVEL indicates 'O' level Significant Resultant Alarms/Indications:

1-M-6

1-Fl-62-82, LETDOWN HX OUTLET FLOW indicates '0' flow O-M-278-B

A-5, "LETDOWN HX OUTLET FLOW/TEMP ABNORMAL" Panel 1-M-5A LS-68-3350/E PRESSURIZER LEVEL HIGH-LOW

[1} CHECK pressurizer level (1-U-6B-339A, 335A, 320)

[2} ff level is high, THEN ENSURE backup heaters ON_

£31 ENSURE level control system Is attempting to return levet to program with letdown and charging.

[4] IF level channel failed, THEN GO TO AOP-L04, Pressurizer Instrument Malfunction.

BOP Responds to ARP 1-AR-M5A C-3.

Examiner Note: Several steps, notes, and cautions in the Annunciator response procedure do not apply to this failure. Only those that are applicable are listed in this event guide.

Transitions to AOP-1.04, PRESSURIZER INSTRUMENT AND CONTROL SRO MALFUNCTIONS 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 4 Event

Description:

Pressurizer Level Instrument Fails Low Time I Position I Applicant's Actions or Behavior Directs actions from AOP-1.04, PRESSURIZER INSTRUMENT AND SRO CONTROL MALFUNCTIONS MALFUNCTION

1. DIAGNOSE the failure:

GOTO IF .*. SECTION PAGE Pressurizer level Instrument Malfunction 2.4 20 2.4 Pressurizer Level Instrument Malfunction CAUTION Chemistry sampling of PZR Liquid Space may result in additional bistables actuating due to impact on 1-LT-68-320 or 2-LT-68-335.

NOTE Appendix M shows layout of PZR level control for operator reference.

1. CHECK U-68-339 NORMAL. PERFORM the following:

a. ENSURE LEVEL CONTROL CHANNEL SELECTOR switch XS-68-339E in LT-68-335 & 320.

b. ENSURE LEVEL REC CHANNEL ATC SELECTOR switch XS-68-3398 in LT-68-320 or LT-68-335.

c. GO TO Step 4.

~

4. CHECK letdown IN SERVICE. PERFORM the following:

a. EVALUATE manual control or charging now USING the following:

HIC-62-93A. Charging flow Control ATC

HIC-62-89A. Charging Seal Water Flow Control.

0. RESTORE letdown USING EA-62-5, Establishing Normal Charging and Letdown.

15

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 4 Event

Description:

Pressurizer Level Instrument Fails Low Examiner note: The following are from EA-62-5, go to page 18 for AOP-1.-4 actions.

EA-62-5 ESTABLISHING NORMAL CHARGING AND LETDOWN actions

2. IF normal letdown flow is to be established, THEN A TC GO TO Section 4.3.

4.3 Establishing Normal Letdown Flow NOTE EA-62-3, Establishing Excess Letdown, may be utilized if Normal LetdolNl1 cannot be established.

1. IF charging flow NOT established, ATC THEN PERFORM Section 4.2.

2. VERIFY pressurizer level greater than 17~/*.

ATC

')

"- ENSURE letdown orifice isolation valves CLOSED:

CLOS LETDOWN ORIFICE ISOLATION VALVES ..j ATC D FCV-62-72 FCV-62-73 D FCV-62-74 D

4. OPEN letdown isolation valves:

OPEN LETDOWN ISOLATION VALVES ATC FCV-62-69 "

D FCV-62-70 D FCV-62-77 D 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 4 Event

Description:

Pressurizer Level Instrument Fails Low I Time I Position I Applicant's Actions or Behavior NOTE Placing cooling water on the Letdown Heat Exchanger prior to restoring letdown flow should prevent TIS-62-798/A from actuating and fully opening TCV-70-192.

5. PLACE [HIC-G2-7SJ in MANUAL, AND ATC OPEN [TCV-70-192] to~ 50%.

7. ADJUST charging flow as necessary to prevent flashing in tlle ATC letdown line.

8. OPEN letdown orifice isolation valves as needed:

II LETDOWN ORIFICE ISOLATION VALVES OPEN ATC If FCV-62-73 D NOTE Normal letdown pressure is 325 pslg at normal operating temperature.

9. ADJUST letdown pressure controller [PCV-62-81] output to obtain desired pressure.

17

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 4 Event

Description:

Pressurizer Level Instrument Fails Low Position Applicant's Actions or Behavior NOTE Nom1al letdown temperature is ~100°F.

A TC 12. ADJUST (HIC-62-78AJ to obtain desired letdown temperature, as indicated on [Tl-62-781 Examiner Note: Several steps, notes, and cautions in the procedure do not apply to this failure.

Only those that are applicable are listed in this event guide.

Examiner note: AOP-1.04 actions recommence here.

5. EVALUATE the following Tech Specs far appllcability:

SRO

3.3. 1 .1 (3.3. 1), Reactor Trip system Instrumentation

3.3.3.7 Accident Monitoring Instrumentation LIMITING CONDITION FOR OPERATION 3.3.1.1 As a minimum. !he reactor trip system instrumentatlC<l', chanr,;ls and interlocks of Taole 3.3-1 shall be OPERABLE.

APPUGABll !TY: As shavm in Table 3.3-1.

As shown Tablf! 3.3-1.

TABLE 3,3-1 REACTOR TRIP SYSTEM INSTRUMENT_6I!ON TOTAL NO. MlN!MUM OF CHANNE'l-S CHANNE'LS APPLICABLE FUNCTIONAL UN1T CHANNELS TO TRIP OPERABLE ~ ACTION Prcssurizf!r Waler L<Wf!l- 3 2 2 1, 2 6 High ACTION6- 1/11111 th;; number of OPERABLE clla1mf!!s one !f!ss tt>an the Total NumbH of Channels. STARTUP andlorPO"WER OPERATION rl!d"Y proceed provkied the fo'i!oW!!9 condilions are satr;:ied:

a. The inopsab!e channel is placed the tripped c.ondilion wilhl!! 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

18

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 4 Event

Description:

Pressurizer Level Instrument Fails Low Time I Position I Applicant's Actions or Behavior 3_3_3_7 The accident monitoring instrumentation channels shet1m in Tai:JE 3.3-10 shalf be OPERABLE.

APP!.ICABI! !IT MODES t 2 and 3.

7_ Pressurizer Level {'41/"i!di': Range) 3 3 2

{Instrument Loops SB-320,-335,-J3g)

ACTION 2 - NOTE: Also refer to the appjcab'Je action requirements from Tables 3.3-1 since it may contain more restriclive actions.

a. With the number of channels ooe !.?ss than tne minimum char~ls req<£7ed, restore the inoperable channel to OPERABLE st3tus v1ithin 30 days oc be in at

!.?ast HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and HOT SHUTDOWN within

!he next 5 hour5.787037e-5 days 0.00139 hours 8.267196e-6 weeks 1.9025e-6 months s_

6_ ENSURE pressurizer heaters restored ATC to service.

CAUTION RCS pressure changes and changes in RCS boron concentration {due to differences between pzr and RCS boron} may impact core reactivity.

7 _ MONITOR reactor power:

a_ CHECK reactor in Mode 1 or 2.

ATC b_ MONITOR core thermal power for unexpected changes_

NOTE:

If performing AOP in conjunction with AOP-1.11 for an Eagle LCP failure, then actions to hard trip bistables should be delayed until Eagle system reset is attempted. Actions to hard trip bistables must be completed within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months UNLESS affected loop is restored to operable status by resetting Eagle rack.

8. NOTIFY l&C to remove failed pressurizer level channel from servlce USING appropriate ATC Appendix:

L-68-339 A endix I Crew Performs a Crew Brief as time allows.

When technical specifications have been identified or at discretion of the Lead Examiner, proceed to the next event.

19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 5 Event

Description:

SG Steam Flow Failure Time Position Applicant's Actions or Behavior Indications/Alarms Alarms:

1-M-38

C-1: MAIN FEEDWATER DIGITAL CONTROL SYSTEM ABNORMAL 1-M-SA

B-7: LS-3-420 STEAM GEN LVL HIGH-LOW DEVIATION Indications:

1-M-4

SG-1 FW FLOW trending down

SG-1 STEAM FLOW trending down

SG-1 LEVEL trending down Panel 1-M-5A LS-3-420 STEAM GEN LVL HIGH-LOW DEVIATION

[11 CHECK steam generator levels to see which has level deviation.

[2) IF automatic level control is NOT controlling to maintain S/G level, THEN GO TO AOP-S.01, Loss of Normal Feedwater.

BOP Responds to ARP 1-AR-M5A-B-7.

Examiner Note: Several steps, notes, and cautions in the Annunciator response procedure do not apply to this failure. Only those that are applicable are listed in this event guide.

SRO Transitions to AOP-S.01, MAIN FEEDWATER MALFUNCTIONS.

SRO Directs actions from AOP-S.01, MAIN FEEDWATER MALFUNCTIONS.

20

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 5 Event

Description:

SG Steam Flow Failure Time I Position I Applicant's Actions or Behavior

1. DIAGNOSE the failure:

GOTO IF.*. PAGE SECTION Failure of Automatic SJG Level Control 2.1 4 NOTE Step 1 is an IMMEDIATE ACTION

1. RESTORE steam generator level{s):

a. PLACE affected feedwater reg valve controller(s) and/or bypass reg valve controller(s) in MANUAL.

BOP

b. CONTROL feedwater flow on affected S/G(s) to restore level to program.

2. CHECK the following:

BOP

S/G pressure instruments NORMAL

S/G level instruments NORMAL.

21

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 5 Event

Description:

SG Steam Flow Failure Time I Position I Applicant's Actions or Behavior

3. CHECK Steam Flow and Feed Flow !F DCS has NOT bypassed failed channel, instruments NORMAL USING the THEN following: PERFORM the following:

control board indicators [M-4] a. SELECT applicable "SG # Detail" window on DCS Operator Display Monitor.

DCS Operator Display Monitor.

b. SELECT "Steam Flow" OR "Feed Flow" overlay windovt on DCS Operator Display Monitor for affected loop.

BOP

c. SELECT flow channel to be bypassed.

d. SELECT appropriate "MAINT BYP SIGNAL" button.

e. CONFIRM "MAINT BYP SIGNAL" button changes from gray to red.

f. VERIFY the appropriate flow column has yellow "BYP" displayed.

CAUTION: Feed flow transients may impact core thermal power.

NOTE ICS point U1118 (Megawatt thermal indication) may be impacted by feed flow instrument failure. U2118 (LEFM calorimetric power) should remain reliable.

4. MAINTAIN Steam Generator level(s)

BOP on program.

CREW 5. INITIATE repairs on failed equipment.

22

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 5 Event

Description:

SG Steam Flow Failure

........ ,_ Position Applicant's Actions or Behavior

6. WHEN automatic control of affected MFW reg valve(s) is available and reliable, THEN PLACE control!er(s) in AUTO USING 1,2-80-98-1, Distributed Control System.

SRO NOTE: Instructions for restoring bypassed instrument channels are contained in 1,2-S0-98-1.

7. GO TO appropriate plant procedure.

Crew Performs a Crew Brief as time allows.

END OF SECTION Lead Examiner may cue the next event when plant is stable with FIC-3-35 in manual.

23

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 6 Event

Description:

Condenser Cooling Water Rupture.

Time I Position Applicant's Actions or Behavior Direct facility operator to insert Event 6 Condenser Cooling Water Rupture Indications/Alarms Alarms:

1-M-158

D-3: TURB AUX OR REAC BLDG FLOODED Panel 1-M-158 TURB AUX OR REAC BLDG FLOODED BOP Responds to ARP 1-AR-M15B D-3.

BOP [1] DISPATCH operator to flood alarm panel on elevation 734' in "A" 6900V Shutdown Board Room to determine flooded area.

{3] IF Turbine Bldg is being flooded due to CCW or RCW break, THEN GO TO AOP-l'vl.08, Internal Flooding.

SRO Transitions to AOP-M.08 INTERNAL FLOODING.

SRO Directs response from AOP-M.08 INTERNAL FLOODING.

CAUTION To minimize damage to equipment, flooding in safety-related areas should be identified and isolated as soon as possible (within one hour from initiation).

NOTE The following procedures take priority over AOP-M.08:

AOP-M.01, Loss of ERCW

AOP-M.03, Loss of CCS

AOP-M.06, Loss of Spent Fuel Cooling If any of these procedures are applicable, AOP-M.08 should be performed as time permits.

24

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 6 Event

Description:

Condenser Cooling Water Rupture.

I-*

'" : :-'osition Applicant's Actions or Behavior

1. DIAGNOSE the failure:

GOTO IF internal flooding located in ...

SECTION PAGE Turbine Building 2.6 42 I I I I CAUTION: Rising water level and wetted electrical equipment may result in safety hazard which prevents access to Turbine Bldg basement.

BOP 1. ENSURE personnel dispatched with radio to determine flooding source and exact location.

BOP 2. MONITOR if source of flooding is from CCW or Amertap systems:

a. CHECK for any of the following:

rupture on CCW or Amertap OR

severe flooding from unknown source.

BOP 2. b. IF flooding requires isolating all CCW flow on Unit 1, THEN PERFORM the following:

1) NOTIFY unit operator to perform Appendix C, Isolating Unit 1 CCW.

Examiner Note: The BOP will perform APPENDIX C ISOLATING UNIT 1 CCW, see next page for details. The SRO and ATC will trip the Reactor, go to page 27 for details.

25

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 6 Event

Description:

Condenser Cooling Water Rupture.

Position Applicant's Actions or Behavior NOTE 1 This appendix should be performed by one UO while the US and OATC trip the reactor and perform E-0.

NOTE2 CCW pump will immediately trip when CCW pump control power DC-AC handswitch [1-M-15] is placed to STOP position. Discharge valve will remain open.

BOP [1] STOP all Unit 1 CCW pumps by placing the following switches in STOP position: [1-M-15 bottom center]

CCW Pump 1A Control Power DC-AC D

CCW Pump 1B Control Power DC-AC D

CCW Pump 1C Control Power DC-AC. D BOP [2] CLOSE the following: [1-M-15]

Unit 1 condenser waterbox isolation valves D

Unit 1 CCW pump disch valves. D BOP [3] PLACE steam dump handswitches in OFF: (1-M-4]

1-HS-1-103A, Steam Dump A FSV D

1-HS-1-1038, Steam Dump B FSV. D Transitions to E-0. Reactor Trip or Safety Injection 26

Appendix D Required Operator Actions Form ES-0-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Position Applicant's Actions or Behavior Direct the Simulator Operator to initiate Event 7, SBLOCA with Failure of AUTO SI.

Indications/Alarms:

Indications 1-M-4:

RCS PZR LVL, decreasing level value 1-M-5:

RCS PR PRESS (Chs 1-4), 1-Pl-68-340A, 334, 323, 322: RCS (Pzr) pressure decreasing Annunciators 1-M-5C:

B-1: TS-30-31 LOWER COMPT TEMP HIGH

B-3: TS-30-241 LOWER COM PT MOISTURE HI

B-4: TS-30-240 LOWER COM PT MOISTURE HI 1-M-6E:

C-6: "ZS-61-186 ICE CONDENSER LOWER INLET DOOR OPEN" Examiner Note: following IOA performance, prior to Steps 1-4 immediate action verification, ATC/BOP surveys MCBs for any expected automatic system response that failed to occur. Upon discovery, they may take manual action(s) to align plant systems as expected for the event in progress. (Ref. EPM-4, Prudent Operator Actions)

Performs the first four steps of E-0 unprompted.

NOTE1 Steps 1 through 4 are immediate actton steps_

NOTE2 This procedure has a foldout page_

1. VERIFY reactor TRIPPED:

Reactor trip breakers OPEN Reactor trip bypass breakers DISCONNECTED or OPEN ATC Rod bottom lights UT Rod position indicators less than or equal to 12 steps_

Neutron flux DROPPfNG 27

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

2. VERIFY turbine TRIPPED:

BOP

Turbine stop valves CLOSED.

3. VERIFY at least one 6.9KV shutdown BOP board ENERGIZED on this unit 4_ DETERMINE if SI actuated:

ATC

ECCS pumps RUNNING.

Any SI alarm LIT [M-4DJ.

5. PERFORM ES-0.5, Equipment BOP Verifications WHILE continuing in this procedure_

SRO/AT Continue with the performance of E-0 REACTOR TRIP OR SAFETY C INJECTION BOP Performs ES-0.5, Equipment Verifications (go to page 44 for details)

SRO Addresses foldout page (see next page for details.)

28

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time I Position I Applicant's Actions or Behavior FOLDOUT PAGE RCP TRIP CRITERIA IF any of the following conditions occurs:

RCS pressure less than 1250 psig AND at least one CCP or SI pump running OR

Phase B isolation, THEN STOP all RCPs.

EVENT DIAGNOSTICS

IF any SIG pressure is dropping uncontrolled, THEN PERFORM the following:

a. CLOSE MSIVs and MSIV bypass valves.

b. IF any SIG pressure continues to drop uncontrolled, THEN PERFORM the following:

1) ENSURE SI actuated.

2) IF at least one SIG is intact (S/G pressure controlled or rising), THEN ISOLATE AFW to faulted S/G(s):

CLOSE AFW level control valves for faulted S/G(s).

IF any AFW valve for faulted SIG CANNOT be CLOSED, THEN REFER TO Appendix E to stop AFW flow to faulted SIG.

3) ENSURE at least one of the following conditions met:

total AFW flow greater than 440 gpm OR

Narrow Range level greater than 10% [25% ADV] in at least one intact SIG.

IF both trains of shutdown boards de-energized, THEN GO TO ECA-0.0, Loss of All AC Power.

TANK SWITCHOVER SETPOINTS

IF CST level less than 5%, THEN ALIGN AFW suction to ERCW.

IF RWST level less than 27%, THEN GO TO ES-1.3, Transfer to RHR Containment Sump.

29

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Position Applicant's Actions or Behavior

6. DETERMINE if secondary heat sink available:

a. CHECK total AFW flow greater than 440 gpm.

b. CHECK narrow range level b. MAINTAIN total feed flow ATC greater than 10% [25% ADV] greater than 440 gpm in at least one SIG. UNTIL narrow range level greater than 10% [25% ADV]

in at least one SIG.

c. CONTROL feed flow to maintain narrow range level between 10% [25% ADV] and 50%

in intact or ruptured S/Gs.

7. CHECK if main steam lines should be isolated:

a. CHECK if any of the following conditions have occurred:

Any S/G pressure less than 600 psig OR

Any S/G pressure dropping ATC UNCONTROLLED OR

Phase B actuation.

b. ENSURE MS!Vs and MSIV bypass valves CLOSED.

c. ENSURE applicable Foldout Page actions COMPLETED.

30

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Position Applicant's Actions or Behavior

8. CHECK RCP trip criteria:

a. CHECK the following:

RCS pressure less than 1250 psig ATC AND

At least one CCP OR SI pump RUNNING.

b. STOP RCPs.

9. MONITOR RCS temperatures: IF temperature less than 547°F and dropping,

IF any RCP running, THEN THEN PERFORM the following:

CHECK T-avg stable at or trending to between 547°F and 552°F. a. ENSURE steam dumps and atmospheric reliefs CLOSED.

OR

b. IF cooldown continues,

IF RCPs stopped, THEN THEN CONTROL total feed flow:

CHECK T-cold stable at or trending ATC/BOP 1) ENSURE total AFW flow to between 547°F and 552°F.

less than or equal to 600 gpm.

2) MAINTAIN total AFW flow greater than 440 gpm UNTIL narrow range level is greater than 10% [25% ADV]

in at least one SIG.

c. IF cooldown continues after AFW flow is controlled, THEN CLOSE MSIVs and MSIV bypass

~~~~valves.

10. CHECK pressurizer PORVs, safeties, and spray valves:

ATC a. Pressurizer PORVs CLOSED.

b. Pressurizer safety valves CLOSED.

c. Normal spray valves CLOSED.

31

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

-r:

'~

Position Applicant's Actions or Behavior

d. Power to at least one block valve AVAILABLE.

e. At least one block valve OPEN.

11. DETERMINE if SIG secondary pressure boundaries are INTACT:

ATC

. CHECK all S/G pressures CONTROLLED or RISING.

. CHECK all SIG pressures greater than 140 psig.

12. DETERMINE if S/G tubes are INTACT:

All SIG narrow range levels CONTROLLED or DROPPING ATC

Secondary radiation NORMAL USING Appendix A, Secondary Rad Monitors. (App. A performed in ES-0.5).

13. DETERMINE if RCS is INTACT: PERFORM the following:

Containment pressure NORMAL

a. INITIATE ES-0.5 Appendix D,

Containment sump level NORMAL Hydrogen Mitigation Actions.

ATC

LOWER COMPT TEMP HIGH alarm b . MONITOR status trees.

DARK. [M-5C, 81]

c. GO TO E-1 . Loss of Reactor or

Containment radiation NORMAL Secondary Coolant.

USING Appendix B, Containment Rad Monitors. (performed in ES-0.5) --

Examiner Note: MONITOR status trees, the crew will implement status tree monitoring via ICS. When a RED or ORANGE path status tree is observed, the SRO will designate one of the Board operators (typically the BOP) to verify status tree conditions using 1-FR-O, UNIT 1 STATUS TREES. Once verified, the SRO should direct the crew to transition to the appropriate RED and/or ORANGE path procedure(s).

Examiner Note: When a RED or ORANGE Path for Containment is evident on ICS, the SRO will transition to FR-Z.1, go to page 41 for details.

SRO Transitions to E-1 Loss of Reactor or Secondary Coolant.

SRO Directs actions from E-1 Loss of Reactor or Secondary Coolant.

NOTE This procedure has a foldout page.

32

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time I Position I Applicant's Actions or Behavior FOLDOUT PAGE RCP TRIP CRITERIA IF any of the following conditions occurs:

RCS pressure less than 1250 psig AND at least one CCP or SI pump running OR

Phase B isolation, THEN STOP all RCPs.

SI REINITIATION CRITERIA IF any of the following conditions occurs:

RCS subcooling based on core exit T/Cs less than 40°F OR

Pressurizer level CANNOT be maintained greater than 10% [20'Vo ADV],

THEN RAISE ECCS flow by performing one or both of the following as necessary:

ESTABLISH CCPITflow USING Appendix C

START CCPs or SI pumps manually.

EVENT DIAGNOSTICS

IF both trains of shutdown boards de-energized, THEN GO TO ECA-0.0, Loss of All AC Power.

IF any SIG pressure dropping in an uncontrolled manner or less than 140 psig AND S/G NOT isolated, THEN GO TO E-2, Faulted Steam Generator Isolation.

IF any S/G has level rising in uncontrolled manner or has abnormal radiation, THEN:

a. RAISE EGGS flow by performing one or both of the following as necessary:

ESTABLISH CCPITflow USING Appendix C

START CCPs or SI pumps manually.

b. GO TO E-3, Steam Generator Tube Rupture.

TANK SWITCHOVER SETPOINTS

IF CST level less than 5%,

THEN ALIGN AFW suction to ERCW.

IF RWST level less than 27%,

THEN GO TO ES-1.3, Transfer to RHR Containment Sump.

33

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time I Position I Applicant's Actions or Behavior

1. CHECK RCP trip criteria:

a. CHECK the following: a. GOTO Step2.

At least one CCP OR SI pump ATC RUNNING

~

AND

RCS pressure less than 1250 psig.

b. STOP RCPs.

2. CHECK SIG secondary pressure boundaries INTACT:

ATC/BOP

SIG pressures CONTROLLED or RISING

SIG pressures greater than 140 psig.

3. MAINTAIN Intact SIG narrow range levels:

a. Greater than 10% [25% ADV].

ATC/BOP

b. Between 10% [25% ADV] and 50%.

34

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

~*

Position Applicant's Actions or Behavior

4. VERIFY secondary radiation NORMAL:

a. CHECK secondary radiation NORMAL USING Appendix A, Secondary Rad Monitors.

b. NOTIFY Chem Lab to take S/G activity samples.

c. WHEN Chem Lab is ready to sample S/Gs, THEN PERFORM the following:

ATC

1) ENSURE FCV-15-43 Slowdown Flow Control valve CLOSED.

2) ENSURE Phase A RESET.

3) OPEN blowdown isolation valves.

d. NOTIFY RADCON to survey main steam lines and SIG blowdown.

e. WHEN SfG samples completed, THEN CLOSE blowdown isolation valves.

CAUTION Any time a pressurizer PORV opens, there is a possibility that it may stick open.

5. MONITOR pressurizer PORVs and block valves:

a. Power to block valves AVAILABLE. a. DISPATCH personnel to restore power to block valves USING EA-201-1, 480V Board Room Breaker Alignments.

ATC b. Pressurizer PORVs CLOSED. b. IF pressurizer pressure less than 2335 psig, THEN CLOSE pressurizer PORVs.

IF pressurizer PORV CANNOT be closed, THEN CLOSE its block valve.

35

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

6. MONITOR SI termination criteria:

ATC a. RCS subcooling based on core exit T/Cs a. GO TO Step 7.

~

greater than 40°F.

7. MONITOR if containment spray should be stopped:

a. CHECK any containment spray pump a. GO TO Step 8.

RUNNING.

ATC ~

b. CHECK containment pressure b. GO TO Step 8.

less than 2.0 psig.

~

8. MONITOR shutdown boards ATC continuously energized.

9. DETERMINE if RHR pumps should be stopped:

a. CHECK RCS pressure:

1) Greater than 300 psig I) GO TO Step *11

~

2) STABLE or RISING. 2) ENSURE CCS ALIGNED to RHR heat exchanger:

FCV-70-'156 OPEN

FCV-70-153 OPEN.

GO TO Notes prior to Step 10.

ATC

~

b. CHECK RHR pump suction b. GO TO Notes pnor to Step *10.

aligned from RWST.

c. ENSURE SI signal RESET.

9. d. STOP RHR pumps and PLACE in A-AUTO.

e. MONITOR RCS pressure greater than 300 psig.

36

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

-* Position Applicant's Actions or Behavior NOTE1 SIG pressures dropping slowly during a LOCA with no faulted SIG should be considered "stable" in the following step.

NOTE2 RCS pressure rising slightly during a LOCA which is NOT isolated should be considered "stable" in the following step.

10. DETERMINE if SI termination criteria should be checked again:

a. CHECK pressure in all S/Gs ATC STABLE or RISING.

b. CHECK RCS pressure STABLE or DROPPING.

11. DETERMINE if diesel generators should be stopped:

a. VERIFY shutdown boards ENERGIZED from start busses.

ATC

b. ENSURE SI signal RESET.

c. STOP any unloaded diesel generators and PLACE in standby USING EA-82-1, Placing D/Gs in Standby.

37

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time Position A nnlicant's Actions or Behavior

12. MONITOR if hydrogen igniters and recombiners should be turned on:

a. ENSURE ice condenser AHU breakers opened USING EA-201-1, 480 V Board Room Breaker Alignments.

b. CHECK hydrogen concentration measurement AVAILABLE:

Hydrogen analyzers have been in ANALYZE for at least 5 minutes.

ATC 12. c. CHECK containment hydrogen concentration less than 6%.

d. WHEN ice condenser AHU breakers have been opened, THEN ENSURE hydrogen igniters ENERGIZED USING Appendix D.

e. CHECK containment hydrogen concentration less than 0.5%. [M-10]

38

Appendix D Required Operator Actions Form ES-0-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

-* ,_ Position Applicant's Actions or Behavior

13. MONITOR if containment vacuum control should be returned to normal:

a. CHECK containment pressure less than 1.0 psig.

ATC

b. VERIFY containment vacuum relief isolation valves OPEN: [Panel 6K]

FCV-30-46

FCV-30-47

FCV-30-48 .

14. INITIATE evaluation of plant status:

a. ENSURE cold leg recirculation capability:

1) Power to at least one RHR pump AVAILABLE.

2) Capability to operate the following valves AVAILABLE:

FCV-63-72 and FCV-74-3 (for RHR Pump A-A).

ATC OR

FCV-63-73 and FCV-74-21 (for RHR Pump B-B).

b. CHECK Auxiliary Building radiation:

1) Area Radiation Monitors RR-90-1 A and RR-90-1 B NORMAL

2) Aux Bldg Vent monitor recorder D-RR-90-101 NORMAL (prior to isolation).

39

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time Position Applicant's Actions or Behavior

14. c. MONITOR containment sump level less than 68%.

d. NOTIFY TSC to initiate post-accident sampling as necessary.

e. EVALUATE plant equipment status USING EA-0-4, Evaluation of Equipment Status.

15. DETERMINE if RCS cooldown and depressurization is required:

a. CHECK RCS pressure greater than 300 psig.

SRO

b. GO TO ES-1.2, Post LOCA Cooldown and Depressurization.

Scenario may be terminated when the SRO transitions to ES-1.2 or earlier, at discretion of Lead Examiner.

40

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

I Position I Applicant's Actions or Behavior FR-Z.1 Actions NOTE !f this procedure has been entered for an orange path and performance of ECA-1.1 {Loss of RHR Sump Recirculation) is required, FR-Z.1 may be performed concurrently with ECA-1. 1.

MONITOR RWST level BOP greater than 27°/o.

VERIFY Phase B valves CLOSED:

BOP

Panel 6K PHASE B GREEN

Panel 6L PHASE B GREEN.

3. ENSURE RCPs STOPPED.

BOP

4. DETERMINE if this procedure should be exited:

a. CHECK for faulted SIG: a. GO TO Step 5.

Any SIG pressure DROPPING BOP in an uncontrolled manner OR

Any S/G pressure less than 140 psig.

5. VERIFY containment spray operation:

a. IF ECA-1.1, LossofRHRSump Recirculation, is IN EFFECT, THEN PERFORM the following:

1) OPERATE containment spray as directed by ECA-1 .1.

2) GO TO Step 6.

BOP

b. VERIFY containment spray pumps RUNNING.

c. CHECK RWST level greater than 27%.

41

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time Position Applicant's Actions or Behavior

5. d. VERIFY containment spray suction ALIGNED to RWST:

. FCV-72-22 OPEN

. FCV-72-21 OPEN .

e. VERIFY containment spray discharge valves OPEN:

BOP .* FCV-72-39 FCV-72-2 .

f. VERIFY containment spray recirc

.valves CLOSED:

. FCV-72-34 FCV-72-13.

g. VERIFY containment spray flow greater than 4750 gpm on each train.

6. MONITOR containment air return fans:

WHEN at least 10 minutes BOP have elapsed from Phase B, THEN ENSURE containment air return fans RUNNING.

7. VERIFY containment ventilation dampers CLOSED:

BOP Panel 6K CNTMT VENT GREEN

. Panel 6L CNTMT VENT GREEN .

8. VERIFY Phase A valves CLOSED:

BOP . Panel 6K PHASE A GREEN

. Panel 6L PHASE A GREEN .

9. VERIFY cntmnt vacuum relief isolation valves CLOSED: [Pnl 6K MANUAL]

BOP

. FCV-30-46

. FCV-30-47

. FCV-30-48 .

42

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event No.: 7, 8 Event

Description:

SBLOCA/Failure of Auto SI.

Time Position Applicant's Actions or Behavior

10. VERIFY MSIVs and MSlV bypass valves BOP CLOSED.

1 *1. DETERMINE if any SIG Intact

a. CHECK at least one SIG pressure:

BOP

CONTROLLED or RISING AND

Greater than *140 pslg.

CAUTION Isolating all S/Gs will result in a loss of secondary heat sink.

12. DETERMINE if any SIG Faulted:

a. CHECK SIG pressures: a. GO TO step 13.

BOP Any SIG pressure DROPPING in an uncontrolled manner ~

OR

. Any SIG pressure less than 140 psig.

13. MONITOR if RHR spray should be placed in service:

BOP a. CHECK the following: a. GO TO Step 14.

~

Containment pressure greater than 9.5 psig

14. MONITOR if containment spray should be stopped:

a. CHECK any containment spray pump a. GO TO Step 15.

RUNNING.

BOP

b. CHECK containment pressure b. GO TO Step 15.

less than 2. O psig.

15. RETURN TO procedure and step in effect BOP END 43

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5 Time I Position I Applicant's Actions or Behavior BOP 1. VERIFY D/Gs RUNNING.

BOP 2. VERIFY DIG ERCW supply valves OPEN.

BOP 3. VERIFY at !east four ERCW pumps RUNNING.

4. VERIFY ccs pumps RUNNING:

. Pump 1A-A (2A-A)

BOP

. Pump 1B-8 (2B-B)

. Pump C-S .

BOP 5. VERIFY EGTS fans RUNNING.

6 CHECK main generator output breaker(s):

BOP a. Unit 1 Only:

VERIFY main generator PCBs OPEN. [M-1]

7. NOTIFY at least two AUOs to report BOP to MGR to be available for local actions.

8. VERIFY AFW pumps RUNNING:

a. MDAFWpumps BOP

b. TDAFWpump.

NOTE AFW level control valves should NOT be repositioned if manual action has been taken to control SIG levels, to establish now due to fallure, or to isolate a faulted S/G.

44

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5 Time I Position I Applicant's Actions or Behavior

9. CHECK AFW valve alignment

a. VERIFY MD AFW LCVs in AUTO.

BOP b. VERIFY TD AFW LCVs OPEN.

c. VERIFY MD AFW pump recirculation valves FCV-3-400 and FCV-3-401 CLOSED.

10. VERIFY MFW Isolation:

a. CHECK MFW pumps TRIPPED.

b. ENSURE the following:

BOP

MFW regulating valves CLOSED

MFW regulating bypass valve controllers in MANUAL with output ZERO

MFW isolation valves CLOSED.

11. MONITOR ECCS operatioff

a. VERIFY ECCS pumps RUNNING:

CCPs

RHRpumps BOP

SI pumps

b. VERIFY CCP flow through CCPIT.

C. CHECK RCS pressure less than 1500 psig.

45

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5 Time Position Applicant's Actions or Behavior

d. VERIFY SI pump flow.

e. CHECK RCS pressure e. GO TO Step *12.

less than 300 psig.

f_ VERIFY RHR pump flow.

12. VERIFY ESF systems ALIGNED:

a. Phase A ACTUATED:

PHASE A TRAIN A alarm UT

[M-6C, 85].

PHASE A TRAIN B alarm UT

[M-6C, 86].

b. Cntmt Vent lsolation ACTUATED:

CNTMT VENT ISOLATION TRAIN A alarm LIT [M-6C, C5J.

CNTMT VENT !SOLATION TRAIN B alann UT £M-6C, C6J.

c. status monitor panels:

BOP

6C DARK

60 DARK

6E UT OUTSIDE outlined area

6H DARK

6J UT cl. Train A status panel 6K:

CNTMT VENT GREEN

PHASE A GREEN

e. Train B status panel 6l:

CNTMT VENT GREEN

PHASE A GREEN 46

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5

~*

I Position I Applicant's Actions or Behavior

13. MONITOR for containment spray and Phase B actuation:

a. CHECK for any of the following:

. Phase B ACTUATED OR

. Containment pressure greater than 2.8 psig.

b. VERIFY containment spray INITIATED:

1) Containment spray pumps RUNNING.

2) Containment spray header isolation valves FCV-72-39 and FCV-72-2 OPEN.

BOP

3) Containment spray recirculation valves to RWST FCV-72-34 and FCV-72-13 CLOSED.

4) Containment spray header flow greater than 4750 gpm per train.

5) Panel 6E LIT.

c. VERIFY Phase B ACTUATED:

PHASE B TRAIN A alarm LIT

[M-6C, A5J.

PHASE B TRAIN B alarm LIT

[M-6C, A6].

d. ENSURE RCPs STOPPED.

e. VERIFY Phase B valves CLOSED:

. Panel 6K PHASE B GREEN .

. Panel 6L PHASE B GREEN .

47

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5 Time I Position I Applicant's Actions or Behavior

f. WHEN 10 minutes have elapsed, THEN ENSURE containment air return fans RUNNING.

NOTE The continuous action in step 14 remains applicable if containment pressure rises above 1_5 psig after ES-0 . 5 is completed.

14. MONITOR if containment vacuum relief isolation valves should be closed:

BOP a. CHECK containment pressure a. GO TO Slep 15.

greater than 1.5 psig.

15. CHECK secondary and containment rad monitors USING the following:

BOP

Appendix A, Secondary Rad Monitors

Appendix B, Containment Rad Monitors_

APPENDIX A SECONDARY RAD MONITORS 1_ IF SI occurred on Unit 1.

THEN CHECK following rad monitors including available trends prior to isolation:

Cone.lenser exhaust recorder 1-RR-90-119

SIG blowclown recorder 1-RR_:9Q-120

Unit 1 Main steam line rad monitors ["1-M-30]

Post-Accident rad recorder 1-RR-90-2688 points 3 {blue), 4 {violet}, 5 (black), and 6 (turquoise).

[1-M-31 (back of 1-M-30)]

48

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5 I II flt: : - * * ,, , : Applicant's Actions or Behavior

3. NOTIFY Unit Supervisor wtiether secondary radiation is NORMAL or HIGH.

APPENDIX B CONTAINMENT RAD MONITORS

1. IF SI occurred on Unit 1.

THEN CHECK following rad monitors:

BOP

Upper containment post-accident rad monitors

1-RM-90-271A and 1-RM-90-272A NORMAL f1-M-30]

Lower containment post-accident rad monitors 1-RM-90-273A and 1-RM-90-274A NORMAL [1-M-30]

Containment rad recorders 1-RR-90-112 and l-RR-90-106 NORMAL [O-M-12] (prior to isolation).

16. WHEN directed by E-0, THEN BOP PERFORM Appendix D, Hydrogen Mitigation Actions.

17. CHECK pocket sump pumps STOPPED:

[M-15, upper left comer]

BOP

HS-77-4'l0, Rx Bldg Aux Floor and Equipment Drain Sump pump A

HS-77-411, Rx Bldg Aux Floor and Equipment Drain Sump pump B.

18. DISPATCH pers;onnel to perform BOP EA-O-*t, Equipment Checks Following ESF Actuation.

19. ENSURE plant announcement has been BOP made regarding Reactor Tlip and SL

20. PERFORM Appendix E, Spent Fuel BOP Cooling Actions, as time permits.

49

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 4 Event

Description:

Equipment Verification ES-0.5 Time I Position I Applicant's Actions or Behavior APPENDIXD HYDROGEN MITIGATION ACTIONS NOTE This appendix should only be peliormed when directed by step in E-0.

1. DISPATCH AUO to open ice condenser AHU breakers USING EA-201-1, 480V Board Room Breaker Alignments. D

2. PLACE hydrogen analyzers in service:

a. ENSURE the following switches in ANALYZE position: (M-10]

HS-43-200A. Cntmt H2 Analyzer Fan A D HS-43-210A, Cntmt H2 Analyzer Fan B. D

b. RECORD time: _ _ _ _ __ D CAUTION If inadequate core cooling (red path) has occurred, hydrogen igniters should NOT be energized until containment hydrogen concentration is determined to be less than 6%. Hydrogen analyzers require 5 minute warmup after being placed in ANALYZE.

3. WHEN ice condenser AHU breakers have been opened, THEN PLACE hydrogen igniters switches in ON position: [M-10]

HS-268-73, H2 lgniters Group A. D

HS-268-74, H2 lgniters Group B. D

4. WHEN hydrogen igniters and analyzers have been placed in service, THEN NOTIFY Unit Supervisor. D END OF TEXT 50

Appendix D Scenario Outline Form ES-D-1 Facility: Sequoyah Scenario No.: 5 Op Test No.: 2015-301 Examiners: Candidates: ATC SRO BOP Initial Conditions: 48% BOL, EOOS risk green, FT-1-3A is in MAINT BYPASS, RTS 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

Turnover: Start the B Main Feed Pump, then raise power to 100%.

Critical Tasks CT-13 Manually trip the main turbine before a Pressurized Thermal Shock (P) CSF or before transition to ECA-2.1, whichever happens first.

CT-45 Manually establish at least 440 gpm feed water flow rate to the SGs while in FR-H.1 before any three SG wide range levels are less than 23% [43% ADV].

Event Event Type Event Description No.

Injection Water Pump A Trips with a failure of the B Injection Water pump to CN12B (C) BOP 1 AUTO Start. The BOP manually starts the B Injection Water pump using the (C)SRO ARP.

Impulse pressure transmitter PT-1-73 fails high resulting in rod withdrawal.

RX11B (l)ATC 2 The ATC places control rods in manual using Immediate Operator Actions.

(TS,I) SRO The SRO declares PT-1-73 INOPERABLE.

RC04E RCS Loop #2 Flow 1-FT-68-29B Transmitter Fails Low, the SRO enters 3 TS-SRO LCO 3.3.1.1, Action 6.

AN_OV_59 (R)ATC An Exciter Insulation Resistance Low alarm is received. The crew will 4

(N)BOP/SRO reduce power in response to the Main Generator alarm.

Upon the initiation of the reduction in power, normal boration controller FIC-CV38 (C) ATC 5 62-139 fails closed, the ATC initiates Emergency Boration to facilitate the (C)SRO reduction of power.

During the of the reduction in power, Feed Regulating valve FCV-3-48 fails FW16B (C) BOP 6'* to control in AUTO, the BOP places FIC-3-48 in MANUAL to control SG (C)SRO level on program.

7 FWR13A (M)ALL The A Main Feed water Pump trips, the crew manually trips the Reactor.

TC11ALL The Main Turbine fails to AUTO trip; the BOP manually trips the Main 8 TC12ALL (C) BOP Turbine during Immediate Operator Actions.

FW07 All Auxiliary Feed water pumps fail. The SRO transitions to FR-H.1 and 9 (C) BOP establishes Feed water using a Main Feed water pump.

(N)ormal, (R)eactivity, (l)nstrument, (C)omponent, (M)aior 1

Appendix D Scenario Outline Form ES-D-1

SUMMARY

Event 1 - When directed by the Lead Examiner, Injection Water Pump A Trips with a failure of the B Injection Water pump to AUTO Start. The BOP manually starts the B Injection Water pump using the ARP.

Event 2 - When directed by the Lead Examiner, turbine first stage pressure transmitter, PT 73, will fail high. The ATC will place control rods to MANUAL to stop the continuous rod withdrawal using Immediate Operator Actions of AOP-C.01, Rod Control System Malfunctions.

The crew will transition to AOP-1.08, Turbine Impulse Pressure Instrument Malfunction to address the RCS temperature control, feed water control and steam dump realignment. The SRO will enter LCO 3.3.1.1 Action 8.b.

Event 3 - RCS Loop #2 Flow 1-FT-68-29B Transmitter Fails Low, the SRO enters LCO 3.3.1.1, Action 6.

Event 4 -An Exciter Insulation Resistance Low alarm is received. The crew will reduce power in response to the Main Generator alarm using AOP-C.03 RAPID SHUTDOWN OR LOAD REDUCTION.

Event 5 - Upon the initiation of the reduction in power, normal boration controller FIC-62-139 fails closed; the ATC initiates Emergency Boration using AOP-C.03 RAPID SHUTDOWN OR LOAD REDUCTION, APPENDIX I EMERGENCY BORATION to facilitate the reduction of power.

Event 6 - During the reduction in power, Feed Regulating valve FCV-3-48 fails to control in AUTO, the BOP places FIC-3-48 in MANUAL to control SG level on program using the Immediate Operator Actions of AOP-S.01 MAIN FEEDWATER MALFUNCTIONS.

Event 7 - The "A" Main Feed water pump trips, the crew manually trips, the Reactor and enters E-0, REACTOR TRIP OR SAFETY INJECTION.

Event 8 - The Main Turbine fails to AUTO trip; the BOP manually trips the Main Turbine during Immediate Operator Actions of E-0, REACTOR TRIP OR SAFETY INJECTION. (Credit sought for a post trip component malfunction for the BOP. The verifiable action is an Immediate Operator Action that only the BOP will perform.)

Event 9 - All Auxiliary Feed water pumps fail. The SRO transitions to FR-H.1 LOSS OF SECONDARY HEAT SINK and establishes Feed water using a Main Feed water pump. (Credit sought for a post trip component malfunction for the BOP. The verifiable action is an action that only the BOP will perform.)

2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:1 Event

Description:

Injection Water Pump A Trip ime Position Applicant's Actions or Behavior Direct facility operator to insert Event 1, Injection Water Pump Trip.

Alarms/Indications Annunciator:

1-M-3

38 E-1, "MFPT 1A & 18 INJECTION SEAL WATER PRESS LOW Panel 1-M-38 MFPT 1A & 18 INJECTION SEAL WATER PRESS LOW BOP Performs actions of 1-AR-M3B BOP [1] ENSURE standby injection water pump RUNNING (M-2)

Proceed to the next event when desired.

1

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:2 Event

Description:

1ST Stage Pressure Transmitter Fails High e Position Applicant's Actions or Behavior Direct facility operator to insert Event 2, 15 T Stage Pressure Transmitter Fails High Alarms/Indications Annunciator:

1-M-3

38 C-1, "MAIN FEED SYS MALF" 1-M-5

SA C-6, "TS-68-2P/Q REAC COOL LOOPS T REF T AUCT HIGH-LOW" Indications 1-M-4

Automatic Control Rod withdrawal SRO Transitions to AOP-C.01, ROD CONTROL SYSTEM MALFUNCTIONS.

1. DIAGNOSE the failure:

GOTO IF ... SECTION PAGE Uncontrolled rod bank movement 2.1 4 (rod movement NOT due to actual T-avg/T-ref mismatch or change in reactor/turbine power)

NOTE: Step 1 is an immediate action step.

ATC 1. STOP uncontrolled rod motion:

a. PLACE rod control in MAN.

b. CHECK rod motion STOPPED.

CAUTION: Control Rods should NOT be manually withdrawn during a plant transient.

2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:2 Event

Description:

15 T Stage Pressure Transmitter Fails High Time I Position I Applicant's Actions or Behavior ATC 2. MONITOR for plant transient:

a. CHECK reactor power and T-avg STABLE.

2. b. CHECK !CS thermal power indication AVAILABLE.

c. VERIFY 10 minute average power less than or equal to applicable limit

IF LEFM is operable, THEN VERIFY ICS point U2118RA is less than or equal to 3455 MWt.

IF LEFM is NOT operable, THEN VERIFY ICS point U1118RA is less than or equal to 3411 MWt.

ATC 3. CHECK for instrumentation malfunction:

a. CHECK all Vital Instrument Power Boards ENERGIZED:

VITAL POWER BOARD UV OR BREAKER TRIP alarms [M-1C windows A-7, B-7, C-7, and D-7]

DARK

b. CHECK nuclear instrumentation OPERABLE.

C. CHECK RCS RTDs OPERABLE.

ATC d. CHECK turbine impulse pressure d. GO TO AOP-1.08, Turbine Impulse channels OPERABLE. Pressure Instrument Malfunction.

SRO Transitions to AOP-1.08, TURBINE IMPULSE PRESSURE INSTRUMENT MALFUNCTION.

3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:2 Event

Description:

1sT Stage Pressure Transmitter Fails High Position Applicant's Actions or Behavior

1. DIAGNOSE the failure:

GOTO IF ..* SECTION PAGE Failure of P-1-73 2.1 4 (based on Pl-1-73, DCS Monitor, or ICS indication)

SRO Directs actions from AOP-1.08, TURBINE IMPULSE PRESSURE INSTRUMENT MALFUNCTION.

A TC 1. ENSURE control rods in MANUAL.

NOTE: Turbine impulse pressure instruments which input into feedwater DCS {PT-1-72, PT-1-73, and PT-47-13) have median signal selector. On failure of one channel, DCS software will BYPASS bad signal and remaining channels will be averaged to determine output signal.

BOP 2. VERIFY PT-1-73 bypassed on DCS: IF DCS has NOT placed PT-1-73 in BYPASS,

"MFW VLV OVERVIEW" screen on DCS THEN indicates PT-1-73 bypassed. PERFORM the following:

a. SELECT "Turbine Impulse Pressure Overlay" by clicking on Turbine Impulse Pressure button on DCS Operator Display Monitor.

b. SELECT impulse pressure instrument to be bypassed (PT-1-73)

c. SELECT "MAINT BYP SIGNAL" button for PT-1-73.

d. VERIFY indication for PT-1-73 has yellow "BYP" displayed on overlay screen.

e. VERIFY overlay screen is indicating "USING AVERAGE" on upper right hand comer.

f. IF SIG level controls in AUTO, THEN MONITOR feed flow and SIG level.

4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:2 Event

Description:

18 T Stage Pressure Transmitter Fails High Time Position Applicant's Actions or Behavior BOP 3. PLACE steam dumps in steam pressure mode:

a. PLACE steam dump FSV handswitches in OFF.

b. PLACE steam dump mode selector in STEAM PRESS mode.

c. ENSURE zero output (demand).

d. PLACE steam dump FSV handswitches in ON.

e. ENSURE steam dump controller setpoint at 1005 psig.

SRO 4. EVALUATE the following Tech Spec for applicability

3.3.1.1, (3.3.1 ), Reactor Trip System Instrumentation 3.3.1.1 As a minimum, the reaci:ortrip system lnwumentatkm channels and interlocks ofTab4e 3.3*1 shall be OPERABLE.

APPUCABIUTY: As shown In Table 3,3 As shown in Table 3.3-1.

TABLE 3.3-1 REACTOR TRIP SYSTE;M !NSrRUMENTATION TOTAL NO. MINIMUM OF CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT CHANNELS TO TRIP OPERABLE ~ t&!.!W

22. Reactor Trip System lnteriocks E. Turbine Impulse Chamber 2 2 8b Pressure, p.13 5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:2 Event

Description:

1ST Stage Pressure Transmitter Fails High Time Position Applicant's Actions or Behavior ACTIONS- 'With less than the Mlnimum Number of Channels OPERABLE, deciare tile interlock inoperable and verify that an affected cilannels of the functkms listed below are OPERABLE or apply the appropriate ACTION staternent(s} for ltlo~ functlons.

Functions to be evaluated are:

b. Reactor Trip Low Reaclor Coolant Loop Flow (2 loops}

Unde1V0ltage Underlrequency Pressurizer Low Pressure Pressurizer High Level A TC 5. DETERMINE Program T-avg for current reactor power USING Tl-28 Figure 3 or ICS (NSSS I BOP, Program Reactor Average Temperature).

A TC 6. RESTORE T-avg to within 1°F of program value USING one of the following:

POSITION control rods OR

ADJUST turbine load OR

ADJUST RCS boron concentration.

NOTE: If performing this AOP in conjunction with AOP-1.11 for Eagle LCP failure, then actions to hard trip bistables should be delayed until Eagle system reset is attempted. Actions to hard trip bistab!es must be completed within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months UNLESS affected loop is restored to operable status by resetting Eagle rack.

Crew 7. PERFORM the following for applicable unit:

[a] IF performance is for UNIT 1, THEN NOTIFY l&C to perform Appendix A, Removing Unit 1 Turbine Impulse Pressure Instrument Loop 1-P-1-73 from Service.

6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:2 Event

Description:

1ST Stage Pressure Transmitter Fails High Time Position Applicant's Actions or Behavior Crew 8. INITIATE Maintenance on P-1-73.

9.

GO TO appropriate plant procedure.

Crew Performs a Crew Brief as time allows.

When technical specifications have been identified or at discretion of the Lead Examiner, proceed to the next event.

7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:

Event

Description:

RCP LOOP FLOW Instrument Failure.

~*

.. - Position Applicant's Actions or Behavior Direct facility operator to insert Event 3, Indications available:

Annunciator:

1-M-6

1-XA-55-6A B-4 "FS-68-29A REACTOR COOLANT LOOP 2 LOW FLOW."

Indications

1-Fl-68-298 LOOP 2 RCS FLOW indicates 0 .

Panel 1-M-6A FS-68-29A REACTOR COOLANT LOOP 2 LOW FLOW ATC Responds to ARP 1-AR-M6A B-4

[1} IF no reactor trip occurs, THEN

[a) CHECK 1-XX-55-6A Reactor Trip SI status panel for bistables that may be tripped_

[b] EVALUATE reactor trip criteria with SRO per AOP-R.04, Reactor Coolant Pump Malfunctions_

[c] IF reactor trip should have occurred automatically, THEN ATC TRIP the reactor, AND GO TO E-0, Reactor Trip or Safety Injection.

[d] CHECK C1-Fl-68-29AJ, f1 -Fl-68-2981, and

£1-Fl-68-2901 for channel failure.

[e] IF a single flow channel has failed, THEN GO TO AOP-1.03, RCS Flow Instrument MalfUnction.

Examiner Note: Several steps, notes, and cautions in the Annunciator response procedure do not apply to this failure. Only those that are applicable are listed in this event guide.

SRO Transitions to AOP-1.03 RCS FLOW INSTRUMENT MALFUNCTION Directs actions from AOP-1.03 RCS FLOW INSTRUMENT SRO MALFUNCTION.

8

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:

Event

Description:

RCP LOOP FLOW Instrument Failure.

Time Position Applicant's Actions or Behavior

1. EVALUATE the following Tech Spec for applicability:

SRO

3.3.1.1 (3.3.1 ), Reactor Trip System Instrumentation LIMITJNG CONDITION FOR OPERATION 3.3.1.1 As a minimum, fue reactor trip system instrumentatio!"I chan~s and intarlocks of Tah.le 3 .3-1 shall be OPERABLE.

APPLICABILITY* As sl'>!Own in Table 3.3-1.

As shown ill Table 3.3-1.

TABLE3.3,1 REACTOR TRIP SYSTEM INSTRUMEl-(J:f;!fil!:!

TOTAL NO. MINIMUM SRO OF CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT CHANNELS TOTRlP OPERABLE ~ ~

12. Loss of Flow - Single Loop 3Jloop 2/loopln 2/loop in 6

{Above P-8) any each operating operating loop loop ACTIONS- With the numbe( of OPERABLE channels ooe less than the Tola! Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following oond!!icms are satisfied:

a. The inoperable channel is placed in the tripped condition withifl 6 hoorn.

b. ThG Minimum Channels OPERABLE requirement is met; however, tho l11oporab!e chan11111 may be bypassed for up lo 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance !GSllng of other channels per Specification 4.3.1.1.1.

9

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:

Event

Description:

RCP LOOP FLOW Instrument Failure.

Time I Position I Applicant's Actions or Behavior

2. NOTIFY l&C to remove failed instrument from service USING appropriate Appendix:

INSTRUMENT PROT LOOP APPENDIX NUMBER CH CREW Fl-68-29A D (F-424) 2 Fl-68-298 II E (F-425)

Fl-68-290 Ill F (F-426)

CREW Notifies WCC and/or l&C to remove Fl-68-29A from service.

7. GO TO appropriate plant procedure.

SRO END OF SECTION Crew Performs a Crew Brief as time allows.

Lead Examiner may cue the next event when Tech Specs have been addressed.

10

Appendix D Required Operator Actions Form ES-0-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:4 Event

Description:

Main Generator Alarm/Plant Power reduction.

p .. I Time I os1t1on 1

- s Actions or Behavior

....- - LI!

'!l'!.L .*

-::tor to insert Event 4, Main Generator Alarm/Plant Power reduction .

Panel 1-M-1 C EXCITER INSULATION RESISTANCE LOW Indications available:

Annunciator:

1-M-1

1C D-3

['I] DISPATCH AUO to the exciter cubicle to verify ground detector white light ON_

[2] NOTIFY srvt

[3] MONITOR the following indications for unexpected or unexplained changes:

[3.1] Generator megavars

[3-2} Generator voltage

[3.3] Main exciter voltage

[3.4] Main exciter amps

[3.5] Generator bearings #9 and #10 vibration

[41 IF an unexpected or unexplained change occurs for any of the above indications, THEN INITIATE AOP-C.03, Emergency SfJutdown.

[51 NOTIFY System Engineer immediately_

No action required for Event 5, Rapid Power reduction Transitions to AOP-C.03 RAPID SHUTDOWN OR LOAD SRO REDUCTION.

Directs performance of AOP-C.03 RAPID SHUTDOWN OR LOAD SRO REDUCTION.

11

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:4 Event

Description:

Main Generator Alarm/Plant Power reduction.

Time I Position I Applicant's Actions or Behavior

1. ENSURE crew has been briefed on reactivity SRO management expectations USING Appendix A.

APPENDIX A REACTIVITY MANAGEMENT BRIEFING NOTE This appendix should be used In addition to event-based brief.

[1] ENSURE crew has been briefed on the following:

Reason for Rapid Shutdown or Load Reduction

Load Reduction Rate: _ _ __

Desired final power level:_ __

Reactivity Management expectations:

Unit Supervisor shall concur with all reactivity manipulations

Ensure reactor responding as expected using diverse indications

Tavg-Tref Mismatch requirements:

3°F control band

5°F reactor trip criteria

Crew focus will be on reducing power in a controlled and conseJVative manner.

OATC will monitor rod insertion limits and AFD limit

Boratlon source: _ _ _ __

Crew will monitor reactor trip and turbine trip criteria using App. B

CRO will stop secondary plant equipment using App. C.

Termination Criteria (conditions requiring Reactor Trip, Turbine Trip, or condition no longer requiring rapid load reduction):

12

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:4 Event

Description:

Main Generator Alarm/Plant Power reduction.

Time I Position I Applicant's Actions or Behavior

2. MONITOR reactor/turbine trip NOT required USING Appendix B, Reactor am:J Turbine CREW Trip Criteria. (two extra copies provided for UOs)

3. CHECK VALVE POSITION LIMIT light CREW DARK on EHC paneL [M-2]

Examiner note: Appendix B reactor and turbine trip criteria see page 25 NOTE: Step 4 should be handed off to opposite unit or extra operator (rt available}.

If NO operator is available, notifications should be perfom1ed concurrently with subsequent steps (when time permits).

4. ENSURE following personnel notified of rapid shutdown or load reduction: [C.1]

Balancing Authority (Load Coordinator)

(75"1-7547).

CREW

Chemistry

Radiation Protection

Plant Management CREW Makes notifications as required.

NOTE: Boration volumes and flowrates listed in this procedure are recommendations and may be adjusted as necessary.

5. INITIATE boration:

a. CHECK rod control AVAILABLE:

ATC

Control Bank D rods capable of being moved

NO dropped or misaligned rods in Control Bank D.

b. CHECK Control Bank D group position b. IF performing shutdown or power ATC greater than 200 steps. reduction following turbine runback, THEN 13

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:4 Event

Description:

Main Generator Alarm/Plant Power reduction.

, . . ., ., I 0 osition I Applicant's Actions or Behavior

c. CHECK boration capabmty from BAT AVAILABLE

d. DETERMINE recommended boration volume from BAT:

~soo gal to reduce power from *100% to 20°/o OR SRO

1O gal for each 1% power reduction (from current power level)

OR

volume recommended by Reactor Engineering.

5. e. DETERMINE recommended boratlon flowrate from table below or from Reactor Engineering:

LOAD REDUCTION BORATION SRO RATE(%/min) FLOWRATE 1% --15 gpm 2% -30 gpm 3% ~45 gpm t ENSURE concurrence obtained from ATC STA for boration volume and flowrate.

g. CHECK status of charging and letdown:

normal letdown flow ATC ESTABLISHED

charging flow control HIC-62-93A in AUTO.

14

Appendix D Required Operator Actions Form ES-0-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:4 Event

Description:

Main Generator Alarm/Plant Power reduction.

~*

Position Applicant's Actions or Behavior

h. DETERMINE if normal boration will be used:

ATC

desired load reduction rate is less than 4% per minute

time is available for normal boration.

i. INITIATE normal boration i. IF normal boration flow CANNOT be USING Appendix H. established or maintained, ATC THEN INITIATE emergency boration USING Appendix I.

Panel 1-M-GC FS-62-139A/B REACTOR COOLANT MAKE UP B.A.

FLOW DEVIATION Examiner Note: The Normal Boration Flow Controller has failed, the crew will transition to Appendix I and initiate Emergency Boration.

SRO Transitions to Appendix I 15

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

I Position I Applicant's Actions or Behavior Examiner note: Appendix H Actions are listed in the following steps.

APPENDIXH NORMAL BORATION

{1] RECORD desired boration volume and ftowrate:

A TC Volume (gal)

Flowrate (gpm)

NOTE Boric Acid controller setting is twice the desired flow rate_

Maximum Boric Acid flow is ~45 gpm_

[4] ADJUST [FC-62-139] BA flow controller setpoint ATC for desired flow rate_

[7] ENSURE boric acid transfer pump aligned to blender ATC in FAST speed.

16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

e Position Applicant's Actions or Behavior

[8] IF desired boric acid flow rate NOT obtained, THEN ADJUST one or both of the following as necessary:

ATC

[FC-62-1391 BA flow controller D

recirculation valve for BAT aligned to blender. D APPENDIX I EMERGENCY BORATlON

[1] RECORD desired boration volume and flowrate:

A TC Volume {gal)

[4J RECORD the following:

A TC Boration flow: _ _ _ _ __

Time:

[51 NOTIFY Unit Supervisor when boration flow established.

17

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

I Time I Position I Applicant's Actions or Behavior

[61 IF Unit Supervisor directs changing boration flowrate, THEN RECORD the following:

ATC Boration flow: - - - - - -

Time:

Examiner Note: The crew continues actions to lower plant power using AOP-C.03 RAPID SHUTDOWN OR LOAD REDUCTION here.

5. INITIATE boration:

J. CONTROL boration flow as required to inject desired boric acid volume.

CAUTION: If borating from the RWST, Turbine Load Reduction Rate greater than 2°/o per minute could result in violating Rod Insertion Limit.

6. INITIATE load reduction as follows:

a. CHECK OPER AUTO light UT on EHC panel. [M-2]

b. ADJUST load rate to desired value:

BOP

between 1% and 4% per minute if borating via FCV-62-138 OR

between 1% and 3% per minute if borating via normal boration (App. H)

OR

2% per minute if borating from RWST.

C. ADJUST setter for desired power level:

DESIRED RECOMMENDED BOP RX POWER LEVEL SETTER VALUE 20% or less 15 II 18

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior

d. VERIFY boration flow established.

BOP

e. INITIATE turbine load reduction by depressing GO pushbutton.

f. CONTROL turbine load reduction BOP as necessary to reduce power to desired level.

7. MONITOR T-avg!T-ref mismatch:

a. CHECK T-ref!ndicatlon a. PERFORM the following:

AVAILABLE 1} MONITOR Program T-avg for current reactor power USING Tl-28 figure 3 or ICS (NSSS I BOP. Program Reactor Average Temperature).

2) USE program T-avg in place of T-ref

3) MAINTAIN T-avg *within 3°F Of program T-avg USING manual rod ATC control.

4) ADJUST turbine load rate as necessary.

5) IF mismatch between T-avg and program value CANNOT be maintained less than 5~F.

THEN TRIP the reactor and GO TO E--0, Reactor Trip or Safety Injection.

19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior

7. b. MONITOR automatic rod control b. IF auto rod control is functional maintaining T-avgiT-ref mismatch AND situation allows slowing down less than 3°F. load reduction, THEN PERFORM the following:

1) REDUCE turbine load rate to allow auto rod control to restore T-avglT-ref mismatch.

2) WHEN T REF T AUCT HIGH LOW alarm (M-SA, C-6) is clear, THEN RESTORE turbine load rate to desired value.

IF any of the following conditions met:

auto rod control NOT functional OR

turbine load rate adjustment is NOT effective in reducing mismatch OR

situation does NOT allow slowing down lo8d reduction, THEN RESTORE T-avg to within 3"F ofT-ref USING manual rod control as necessary.

IF T-avg/T-ref mismatch CANNOT be maintained less tr.an 5°F, THEN TRIP the reactor and GO TO E-0, Reactor Trip or Safety Injection.

8. MONITOR automatic control of BOP MFW pump speed AVAILABLE.

9. STOP secondary plant equipment BOP USING Appendix C, Secondary Plant Equipment Examiner Note: Appendix C, Secondary Plant Equipment starts at page 26.

NOTE: If lEFM thennal power (U21 '18) is inoperable, rod insertion !imfl: curve must be raised by 3 steps. Rod insertion limit alarms and ICS display are NOT automatically adjusted when LEFM ls inoperable.

20

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

1 Time I Position I Applicant's Actions or Behavior

10. MONITOR control rods above CREW low-low insertion limit USING !CS orCOLR NOTE: lnfl:iating plant shutdown required by Tech Specs requires 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months NRC notification per NPG-SPP-03.5, Regulatory Reporting Requirements_

1 *1. EVALUATE Tech Specs/TRM for applicabi!ity:

3-2_1, Axial Flux Difference

3.1.1_1, Shutdown Margin CREW

3.1.3.6. Rod Insertion limits

TRM 3.1 _2.2, Boration Flowpaths

3.5.5, RWST.

12. EVALUATE EPIP-1, Emergency Plan CREW Initiating Conditions Matrix.

13. PERFORM the following to reduce boron concentration difference between pzr and RCS loops:

a. CHECK at least one normal spray valve AVAILABLE ATC

b. ENSURE at least one backup heater group ENERGIZED_

c. ENSURE spray valve(s) responds to control RCS pressure.

21

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior

14. WHEN reactor power change exceeds 15% within one hour, THEN NOTIFY Chemistry to initiate sampling as required by the following:

CREW

O-S!-CEM-000-050.2

O-S!-CEM-030-407 .2

O-S!-CEM-030-4l5.0 .

15. MONITOR if turbine load reduction can be stopped:

a. CHECK the following conditions met

reactor shutdown is NOT needed

turbine shutdown is NOT needed

turbine load at desired power level (further load reduction NOT needed)

b. ENSURE turbine load reduction STOPPED.

CREW C. WHEN control rods are above the low-low insertion limit, THEN ENSURE boration flow STOPPED.

d. NOTIFY Chem lab to sample RCS for boron concentration.

e. MAINTAIN T-avg within 3"f ofT-ref USING one of the following:

AUTO or MANUAL rod control OR

dilution or boration USING O-S0-62-7 OR

additional turbine load reduction .

22

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior 15_ t CHECK reactor power greater than 50%_

g_ DETERMINE Tech Spec AFD limits for current power level USING ICS (Primary Mimics, Doghouse Display) or COLR h_ CHECK AFD within Tech Spec limits on at least three operable pawer range NIS channels.

L IF AFD is outside target band, THEN INITIATE O-Sl-NUC-000-044.0, Axial Flux Difference.

15_ J_ INITIATE performance of O-Sl-OPS-092-078.0, Power Range Neutron Flux Channel Calibration By Heat Balance Comparison_

k_ CHECK C-7 LOSS OF LOAD INTERLOCK [M-4A window E-5]

DARK.

NOTE: Time in core life, expected Xenon changes, and planned power changes should be considered when evaluating: need for boration or dilution_

If dilution is required, Reactor Engineering Data Sheet provides recommended dilution volume for first hour following downpower.

23

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior L CONSULT Reactor Engineering and STA regarding ti.[ control and compensating for Xe changes.

m. PERFORM the following as necessary-to control Lil and maintain T-avg on program:

INmATE boration or dilution as necessary USING O-S0-62-7, Boron Concentration Control OR

ADJUST control rod position as necessary.

15. n. CHECK at least one normal pzr spray valve OPERABLE

o. DETERMINE appropriate procedure based upon power level and cause of rapid shutdown:

Other applicable AOP OR

O-G0-5, Norma! Power Operation

{if greater than approximately 30% power)

OR

O-G0-4, Power Ascension from Less than 5% to 30% Power (if less than approximately 30%)

p. GO TO appropriate plant instruction.

Examiner Note: When the crew has sufficiently reduced power the Lead Examiner may go to the next event starting at page 33.

24

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

II ~111*11e, 1: 1'"'r>,~os1t101n:1 /.A\OC)llCant'sAA.c-t"ions or Behavior APPENDIX B REACTOR AND TURBINE TRIP CRITERIA REACTOR TRIP CRITERIA TURBINE TRIP CRITERIA Turbine trip required or imminent Turbine vibration exceeding 14 mils with reactor power greater than P-9 (50%) with one of the following:

Uncontrolled rod movement which CANNOT be

high vibration on multiple bearings stopped by placing rods in IVlANUAl (AOP-C.01) OR loss of SIG level control:

abnormal noise/vibration apparent level dropping or rising toward trip setpoint and level CANNOT be restored (AOP-s.01 l More than one dropped rod (AOP-c.01 l T-avglT-ref mismatch CANNOT be maintained less than 5"F (refer to Step 7 or App_ E)

~ 30% turbine load: < 30% turbine load:

Condenser Pressure > 2.7 psia AND CANNOT Condenser Pressure> '1.72 psia be restored within 5 minutes (AOP-S.02) {AOP-S.02)

Any automatic reactor trip setpoint reached Any automatic turbine trip setpoint reached OR automatic trip imminent: OR automatic trip imminent:

Turbine trip above P-9 (50%)

High Stator Cooling Water temp 90°C

Safety injection OR Stator O/P '12 psig below normal

Power Range high flux 109%

Both MFPT's tripped

Power Range flux rate +/- 5% in 2 seconds

Low Auto Stop Oil pressure 45 psig

Pressurizer high level 92%

High SIG level 81% narrow range

Pressurizer pressure !ow 1970 psig

Main Turb Bearing Oil low pressure 7 pslg

Pressurizer pressure high 2385 psig

Thrust Bearing Oil high pressure 60 psig

RCS low flow 90%

Turbine Overspeed *1980 rpm

RCP undervoltage 5_022 kilovolts

loss of EHC pressure

RCP underfrequency 56.0 Hz

Unit 1 Only:

OT~T *1*15% {variable) Generator Circuit Breaker (GCB) tripped OR 500kV bkrs 5034 and 5038 tripped_

OPAT '108.7% (variable)

Unit 2 Only:

SIG !ow level 10.7% [15% EAM]

Generator Circuit Breaker (GCB) tripped

SSPS general warning in both trains OR 16'lkV bkrs 924 and 928 tripped.

25

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

I Position I Applicant's Actions or Behavior APPENDIXC SECONDARY PLANT EQUIPMENT

[1] ENSURE plant announcement(s) made on the following:

starting rapid shutdown (or load reduction) due to (reason) 1 l

stopping secondary plant equipment D NOTE 1 lf reactor power will be reduced below 50%, AUO should be on station at #3 heater drain tank {if possible) when 60% power rs reached.

NOTE2 Dispatching of AUO in Steps [21 and [3] may be performed out of sequence.

[2] IF reactor power will be reduced below 50%,

THEN DISPATCH AUO with Appendix J (Unit 1) or K (Unit 2) to #3 Heater Drain Tank. D

[3] IF one MFP will be shutdown using this appendix, THEN DISPATCH AUO to OPEN MFWP recirc manual Isolation valve tor MFWP to be removed from service: (NIA valves NOT opened)

UNIT MFWP VALVE LOCATION OPENv 1 1A 1-VLV-3-576 TB eL 706, Northeast corner of 1A condenser D 1B 1-VLV-3-577 TB eL 706, Northeast corner of 1A condenser D 2 2A 2-VLV-3-576 TB el. 706, Southeast comer of 2A condenser D 2B 2-VLV-3-577 TB el. 706, Southeast comer of 2A condenser D 26

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior APPENDIXC

[4] IF BOTH of the following conditions are met:

power is being reduced as directed by AOP-S.01 (Main Feedwater Malfunctions) or AOP-S.04 (Condensate or Heater Drain Malfunctions)

leaving secondary pumps in service is desired, THEN GO TO Step [8]. D

~

[5] WHEN turbine impulse pressure is approximately 80% or less, THEN PERFORM the folfowing:

[a) ENSURE one Cond Demin Booster Pump STOPPED. D

[b] ENSURE associated suction valve CLOSED:

CONDDEMIN SUCTION VALVE CLOSED../

BOOSTER PUMP A FCV-2-290 [J OR B FCV-2-285 D OR c FCV-2-280 D 27

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

-* I Position I Applicant's Actions or Behavior

[6J WHEN turbine impulse pressure is approximately 70-75%,

THEN PERFORM the following:

[a] ENSURE one Condensate Booster Pump STOPPED_

[b] ENSURE associated CBP suction vafve CLOSED:

CONDENSATE BOOSTER PUMP SUCTION VALVE CLOSED../

A FCV-2-94 D OR B FCV-2-87 D OR c FCV-2-81 D

[c] PERFORM applicable procedure to adjust seal injection water pressure on stopped CBP to prevent water intrusion in oil:

(may be assigned to another operator or delayed if necessary)

1-S0-213-1Section7.2 D OR

2-S0-213-1 Section 7 _3 D 28

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior

[7] WHEN turbine impulse pressure is approximately 65% or less, THEN PERFORM the following:

[a] STOP remaining two Cond Demin Booster Pumps simultaneously_ D

[b] ENSURE suction valves CLOSED:

CONDDEMIN BOOSTER PUMP SUCTION VALVE CLOSED 'I/

A FCV-2-290 B FCV-2-285 c FCV-2-280 D

[c] STOP one No_ 3 Heater Draln pump_

[d] STOP one No_ 7 Heater Drain pump_ D 29

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior APPENDIXC

[S] IF reactor power wilt be maintained greater than 50%,

THEN GO TO Notes prior to Step [11]. D

~

CAUTION Isolation of all three intermediate heater strings could occur if turbine is tripped prior to fUlly opening LCV-6-105A and 8 using Appendix K or L.

[9] WHEN reactor power is less than 60%

AND AUO with Appendix K (Unit 1} or L (Unit 2) is on statton at #3 Heater Drain Tank, THEN PERFORM the following:

[a) STOP #3 Heater Drain Tank Pumps. D

[bJ NOTIFY AUO to perform App. K (Unit 1} or App. L (Unit 2),

Fully Opening #3 Heater Drain Tank Bypass Valves. D

[c] CLOSE isolation valves from #3 Htr Drain Pumps to heater strings:

VALVE DESCRIPTION CLOSED-if FCV-6-108 Htr Drain Tk Pump 3 to Htr String A D FCV-6-109 Htr Drain Tk Pump 3 to Htr String B 0 FCV-6-110 Htr Drain Tk Pump 3 to Htr String C D 30

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

' -* II Pn~* ~-- II ........

11

.-..-"---""' "ctions or Behavior APPENDIXC NOTE 1 The following step ensures that MFW Bypass valves are available to control feedwater flow at low power.

NOTE2 If any MFW Reg valve is in MANUAL, tile associated MFW Bypass valve controller should remain in MANUAL to prevent undesired opening of bypass valve.

[1 O] WHEN Reactor power is less than 50%,

THEN PERFORM the following:

[a] IF an MFW Reg Valves are in AUTO, THEN PLACE MFW Bypass Reg Valve controllers in AUTO. D

[b] IF any MFW Reg Valve is in MANUAL, THEN PERFORM the following:

1) MAINTAIN MFW Bypass Reg Valve in MANUAL for SIG with MFW Reg valve in MANUAL. D

2) PLACE MFW Bypass Reg Valves in AUTO for remaining S/Gs.

31

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:5 Event

Description:

Normal Boration Failure/Emergency Boration Required.

Time I Position I Applicant's Actions or Behavior NOTE 1 If performing this AOP to reduce power to allow shutting down one MFW pump, the affected MFWP may be removed from service at power level less than 55% (Unit 1) or 60% (Unit 2).

NOTE2 AFW start function on loss of both MFW pumps is inoperable when a MFW pump is RESET but NOT pumping forv.1ard. LCO 3.3.2.1 (Unit 1) or 3.3.2 (Unit 2) allows AFW start channel to be inoperable for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months when shutting down a MFWP.

[11] WHEN it is desired to remove one MFW pump from service ANO power level is less than applicable limit:

turbine impulse pressure less than approximately 45%

OR

reactor power less than value specified in Note 1, THEN PERFORM the following:

[a] ENSURE MFWP Recirc Manual Isolation valve OPEN for MFWP to be removed from service: (NIA valves NOT opened)

UNIT MFWP VALVE LOCATION OPEN.../

1 1A 1-VLV-3-576 TB eL 706, Northeast comer of 1A condenser 0 18 'l-VlV-3-577 TB eL 706, Northeast comer of 1A condenser 0 2

2A 2-VlV-3-576 TB eL 706, Southeast comer of 2A condenser D 28 2-VLV-3-577 TB eL 706, Southeast comer of 2A condenser D

[b] THROTTLE OPEN recirc valve in MANUAL (30-50% OPEN) for MFWP to be removed from service. D

[c] PLACE speed controller in MANUAL for MFWP to be removed from service. D

[d] REDUCE speed gradually on MFWP to be removed from service. D (step continued on next page) 32

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:6 Event

Description:

Feed Reg Control Auto Failure.

Time I Position I Applicant's Actions or Behavior Direct the Simulator Operator to initiate Event 6, FRV LCV-3-48 Fails to respond in AUTO.

Indications/Alarms Indications:

1-M-4

S/G #2 Level above the other three S/G

S/G #2 Feed Flow above the other three S/G Transitions to AOP-S.01, MAIN FEEDWATER.

1. DIAGNOSE the failure:

GOTO IF... PAGE SECTION Failure of Automatic SIG Level Control 2.1 4 SRO Directs actions from AOP-S.01, MAIN FEEDWATER MALFUNCTIONS.

NOTE: step 1 is an IMMEDIATE ACTION.

1. RESTORE steam generator level(s }:

a. PLACE affected feedwater reg valve controner(s) and/or bypass reg valve controller(s) in MANUAL BOP

b. CONTROL feedwater ftow on affected SJG(s) to restore level to program.

2. CHECK the following:

BOP

SIG pressure instruments NORMAL

SIG level instruments NORMAL 33

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:6 Event

Description:

Feed Reg Control Auto Failure.

Position Applicant's Actions or Behavior

3. CHECK Steam Flow and Feed Flow instruments NORMAL USING the following:

BOP

control board indicators [M-4J

DCS Operator Display Monitor.

CAUTION: Feed flow transients may impact core thermal power.

NOTE ICS point U11 'l8 (Megawatt thermal indication) may be impacted by feed flow instrument failure. U2118 (LEFM calorimetric power) should remain reliable.

4. MAINTAIN steam Generator leve!(s)

BOP on program.

5. INITIATE repairs on failed equipment CREW

6. WHEN automatic control of affected MFW reg valve(s) is available and reliable, BOP THEN PLACE control!er(s} in AUTO USING l ,2-S0-98-1, Distributed Control System.

NOTE: Instructions for restoring bypassed instrument channels are contained in 1,2-S0-98-*t.

7. GO TO appropriate plant procedure.

CREW Crew Performs a Crew Brief as time allows.

Lead Examiner may cue the next event when plant is stable with #2 SIG control in manual.

34

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:7 Event

Description:

Main Feed Pump Trips/Reactor Trip/Main Turbine Trip Failure.

Time I Position I Applicant's Actions or Behavior Direct the facility operator to insert Event 7, A MFP Trip.

Indications available:

Annunicators:

1-M-4

4C F-1, "PS-46-13MFPT1A & 18 TRIPPED TURBINE TRIP" Indicators:

1-M-4

ALL NR SG LEVEL: trending down.

Panel 1-M-4C PS-46-13 MFPT 1A & 18 TRIPPED TURBINE TRIP

[1] IF reactor trips, THEN GO TO E-0, Reactor Trip or Safety Injection_

Transitions to E-0 and Direct Immediate Operator Actions (IOAs).

Examiner Note: following IOA performance, prior to Steps 1-4 immediate action verification, A TC/BOP surveys MCBs for any expected automatic system response that failed to occur.

Upon discovery, they may take manual action(s) to align plant systems as expected for the event in progress. (Ref. EPM-4, Prudent Operator Actions)

CREW Performs the first four steps of E-0 unprompted.

SRO Directs performance of E-0 NOTE1 Steps 1 through 4 are immediate action steps_

NOTE2 This procedure has a foldout page.

35

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:7 Event

Description:

Main Feed Pump Trips/Reactor Trip/Main Turbine Trip Failure.

Time Position Applicant's Actions or Behavior

1. VERIFY reactor TRIPPED:

Reactor trip breakers OPEN Reactor trip bypass breakers DISCONNECTED or OPEN ATC Rod bottom lights UT Rod position indicators less than or equal to 12 steps.

Neutron flux DROPPING

2. VERIFY turbine TRIPPED:

BOP Turbine stop valves CLOSED.

3. VERIFY at least one 6.9KV shutdown BOP board ENERGIZED on this unit.

4. DETERMINE if SI actuated: DETERMINE if SI required:

ECCS pumps RUNNING. a. IF any of the following conditions exists:

Any SI alarm UT [M-40].

SIG pressure less than 600 psi~

OR RCS pressure less than 1870 psig.

OR Containment pressure ATC greater than 1.5 psig.

THEN ACTUATE SI.

b. IF SI is NOT required, THEN PERFORM the following:

1) MONITOR status trees.

2) GO TO ES-0.1, Reactor Trip Response.

36

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:7 Event

Description:

Main Feed Pump Trips/Reactor Trip/Main Turbine Trip Failure.

Time I Position I Applicant's Actions or Behavior SRO Transitions to ES-0.1, REACTOR TRIP RESPONSE SRO Directs actions from ES-0.1, REACTOR TRIP RESPONSE NOTE This procedure has a foldout page.

See next page

1. MONITOR SI NOT actuated:

. SI ACTUATED permissive DARK

[M-4A, 04]

2. VERIFY Generator Circuit Bkr (GCB)

OPEN. [M-1]

3. MONITOR RCS temperatures:

IF any RCP running, THEN CHECK T-avg stable at or trending to between 547°F and 552°F.

OR

IF RCPs stopped .

THEN CHECK T-cold stable at or trending to between 547°F and 552°F.

37

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:7 Event

Description:

Main Feed Pump Trips/Reactor Trip/Main Turbine Trip Failure.

Time I Position I Applicant's Actions or Behavior FOLDOUT PAGE SI ACTUATION CRITERIA IF either of the following conditions occurs:

RCS subcooling based on core exit T/Cs less than 40°F OR

Pressurizer level CANNOT be maintained greater than 5%.

THEN ACTUATE SI and GO TO E-0, Reactor Trip or Safety Injection.

EVENT DIAGNOSTICS IF both trains of shutdown boards deenergized.

THEN GO TO ECA-0.0, Loss of All AC Power.

TANK SWITCHOVER SETPOINTS IF CST level less than 5%,

THEN ALIGN AFW suction to ERCW.

Examiner Note: Crew should recognize Loss of Heat Sink entry conditions, total AFW flow less than 440 gpm due to a loss of all AFW pumps, and implement 1-FR-O verification and transitions to FR-H.1.

I SRO I Transitions to FR-H.1, Loss of Secondary Heat Sink, go to next page.

Examiner Note: MONITOR status trees, the crew will implement status tree monitoring via ICS. When a RED or ORANGE path status tree is observed, the SRO will designate one of the Board operators (typically the BOP) to verify status tree conditions using 1-FR-O, UNIT 1 STATUS TREES. Once verified, the SRO should direct the crew to transition to the appropriate RED and/or ORANGE path procedure(s).

38

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Time I Position I Applicant's Actions or Behavior CAUTION Feeding an Intact or Ruptured SIG is preferred to feeding a Faulted SIG.

Thermal stresses from feeding a Faulted SIG could rupture tubes, resulting in a Faulted-AND-Ruptured SIG.

SRO Directs actions from FR-H .1.

1. DETERMINE procedure applicabiHty:

a. CHECK the following: a. GO TO Step 2.

Total feed 1low less than 440 gpm due to operator action ~

SRO directed by another procedure.

AND

Total feed flow capability of greater than 440 gprn AVAILABLE.

2. MONITOR RWST level ATC greater than 27%.

3. CHECK if secondary heat sink required:

a. RCS pressure greater than any non-Faulted SIG pressure.

ATC

b. RCS temperature greater than 350°E ATC 4. MONITOR at least one CCP available.

NOTE Pressurizer pressure greater than or equal to 2335 psig with rising RCS temperature and a low loop de!ta-T indicates loss of heat removal capability_

39

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Time I Position I Applicant's Actions or Behavior

5. MONITOR RCS feed and bleed criteria:

a. CHECK the following: a. GO TO Step 6.

ATC

Any three SIG wide range levels less than 23% [43% ADV] ~

OR

Pressurizer pressure greater than or equal to 2335 psig due to loss of secondarv heat removal.

BOP 6. MONITOR CST level greater than 5%.

7. ATTEMPT to establish AFW flow to at least one SIG in the following order of priority-- Intact, Ruptured, Faulted:

a. CHECK S,1G blowdown isolation valves CLOSED.

BOP

b. CHECK control room indications for cause of AFW failure:

. CST level

. AFW pump power supply

. AFW valve alignment 40

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Position Applicant's Actions or Behavior

7. c. ESTABLISH MD AFW pump flow: C. PERFORM the following:

1) ENSURE MD AFW pumps

REFER TO EA-3-10, Establishin RUNNING. Motor Driven AFW Flow, as necessary

2) ENSURE AFW level control

DISPATCH personnel to restore valves OPEN.

MD AFW pump flow

3) ENSURE MD AFW recirculation valves FCV-3-400 and FCV-3-401 CLOSED.

d. ESTABLISH TD AFW pump flow: d. PERFORM the following:

BOP

1) ENSURE turbine steam supply

REFER TO EA-3-9, Establishing valves OPEN: Turbine Driven AFW Flow,

. Either FCV-*H 5 or FCV-1-*15 as necessary

. FCV-*1-17 and FCV-*1-*13

DISPATCH personnel to restore TD AFW pump flow.

. Trip and throttle valve, FCV-1-51.

2) ENSURE AFW level control valves OPEN.

3) RAISE TD AFW pump speed as necessary.

NOTE Continuous actions in Step 8 are NOT applicable after RCS feed and bleed is initiated in Step *17.

8. MONITOR for AFW flow:

a. CHECK total AFW flow to S/Gs a. IF NO AFW flow can be verified, greater than 440 gpm. THEN:

BOP 1) ENSURE personnel dispatched to locally restore AFW flow.

2) GOT0Step9.

~

ATC g_ STOP all RCPs_

10. MONITOR shutdown boards BOP continuously energized_

41

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Time I Position I Applicant's Actions or Behavior

11. ATTEMPT to establish MFW flow to at least one SIG:

a. CHECK at least one main feedwater pump available:

MSIVopen

condenser vacuum established

containment pressure less than 1.5 psig BOP

MFW pump available .

b. CHECK condensate system IN SERVICE:

Hotwe!I pumps

Condensate booster pumps

11. c. CHECK SI signal previously actuated. c. IF SI has NOT actuated, THEN GO TO Substep 11.i.

42

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Position Applicant's Actions or Behavior

11. i. CHECK FW isolation valves OPEN. i. PERFORM the following:

1) ENSURE MFW reg valve controllers in MANUAL and output ZERO.

2) ENSURE MFW bypass reg valve controllers in MANUAL and output ZERO.

3) CYCLE reactor trip breakers.

BOP

4) RESET FW Isolation signal. [M-3]

5) OPEN FW isolation valves for intact S/Gs.

IF NO FW isolation valve can be opened, THEN GO TO Step 16.

J_ ESTABLISH MFW flow to at least one SIG USING EA-2-2, Establishing Secondary Heat Sink Using Main Feedwater or Condensate System_

Examiner Note: The following steps are from EA-2-2, ESTABLISHING SECONDARY HEAT SINK USING MAIN FEEDWATER OR CONDENSATE SYSTEM 43

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Time I Position I Applicant's Actions or Behavior 4.1 Section Appl!cablllty NOTE Steps 1 and 2 apply when this procedure has been entered directly from ES-0.1 or E*3 (1YjY11<uJ ent.,ring FR-H.1 ).

1. IF directed b)' ES-0.1. Reactor Trip Response.

to establish main feectwater flow.

THEN PERFORM Section 4.2. []

BOP

2. IF directed by E-3. Steam Generator Tube Rupture, to establish main teedwater or condensate flow.

THEN PERFORM Section 4.3. n

3. IF directed by FR-H. 1. Loss of Secondaiy Heat Sink.

to esteblish main feadwater flow (MFP available),

THEN PERFORM Section 4.4 to establish main feedwater flow to S/Gs. 0 4.4 Establishing Main Feedwater Flow to S/Gs NOTE Removal of fuses should be performed in parallel with subsequent steps.

1. DISPATCH operator to perform Appendix E, Part I to remove fuses BOP to disable intermediate heater string isolation. D

2. ENSURE Condensate inlet and outlet valves for at least one LP heater BOP string are OPEN. [M-3] D CAUTION Condensate flowpath through at least one LP heater string must be established prior to starting a Condensate Booster Pump.

3. ENSURE the following condensate pumps RUNNING:

At least two Hotwell pumps D BOP

At least one Condensate Booster Pump (with suction valve OPEN) D

At least one Injection water pump . D

4. ENSURE MFPT Recirc Valves in MANUAL and CLOSED:

BOP * [FIC-3-701 MFPT A D

[FIC-3-84] MFPT B. D BOP 5. ENSURE MFW reg controllers in MANUAL and output ZERO. D 44

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 I P\oi::>lican-t'sActions or Behavior NOTE Condensate isolation valves for intermediate pressure heater strings may have closed due to high-high level condition.

7. IF a flowpath is NOT available through at least one intermediate heater string, BOP THEN NOTIFY personnel to PERFORM Appendix E Part II to establish a flow path. D

8. ENSURE Inlet and Outlet valves for at least one string of Intermediate and High pressure heaters OPEN:

BOP

High Pressure Feedwater Heaters D

Intermediate Pressure Feedwater Heaters. D

10. IF starting MFW pump B, THEN PERFORM the following:

a. ENSURE MFW pump B drain handswitch [HS-46-41]

in OPEN position. [M-3] D

b. ENSURE the following valves OPEN:

BOP VALVE DESCRIPTION OPEN~

FCV-2-211 MFPT condenser B inlet isol [M-2] D FCV-2-216 MFPT condenser B outlet isol [M-3] D FCV-2-224 MFWP "B" inlet valve [M-2] D FCV-3-81 MFWP "B" outlet valve [M-3] D NOTE HP steam to MFW pump may be isolated if O-G0-12, Appendix A has been performed or MFW pump was out of service at time of trip.

45

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Time Position Applicant's Actions or Behavior

c. DISPATCH operator to periorm the following: [fB el. 706]

1) OPEN [VLV-3-5771 FDWTR Pmp Min !sol valve. D BOP

2) IF [VLV-1-6121 MFW Pump BHP steam isolation valve CLOSED.

THEN OPEN CVLV-1-6121. D

g. DO NOT CONTINUE until suction flowpath established to MFP. D BOP

h. ENSURE [VLV-3-577] FDWTR Pmp Min !sol Valve OPEN. D BOP k. VERIFY MFPT governor valve positioner is indicating CLOSED. D I. IF MFPT governor valve positioner is NOT indicating CLOSED, THEN BOP 1) IF MGR operation of governor valve positioner is available, THEN PLACE [HS-46-40Al to LOWER to close the steam chest valves. D

m. OPEN MFPT B stop valves by placing HP stop valve switch BOP [HS-46-43A] to RAISE. D 46

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 NOTE MFPT speed controller should take over speed control when MFPT accelerates to approximately 3300 rpm.

n. RAISE MFPT B speed by performing one of the following:

BOP 1) IF MCR operation of governor vvalve positioner is available, THEN

0. WHEN MFPT speed controller controlling MFPT speed, BOP THEN ENSURE governor valve positioner is fully RAISED. D

p. ADJUST MFPT speed USING master controller [PC-46-201 BOP UNTIL feedwater header pressure is approximately 80 psid greater than steam header pressure. D

11. IF RCS temperature is less than 550°F.

THEN BOP GO TO Step 13.

CAUTION Restoration of feedwater flow will result in an RCS cooldown.

FW Isolation will occur if FWI signal is not defeated by depressing FWI reset pushbuttons prior to RCS temperature falling below 550°F.

12. IF RCS temperature is greater than 550°F AND Feedwater Isolation Valves are OPEN, THEN PERFORM the following when feedwater is established:

a. WHEN Tavg approaches 550°F.

BOP THEN DEPRESS and HOLD both FWI reset pushbuttons [M-3]. D

b. WHEN T-avg is less than 550°F, THEN RELEASE FWI reset pushbuttons. D 47

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2015-301 Scenario No.: 5 Event No.:8 Event

Description:

AFW Failure/FR-H.1 Time Position Applicant's Actions or Behavior CAUTION If automatic SI signals are NOT blocked, feed flow should be carefully controlled to prevent rapid cooldown which could result in low steam line pressure SI actuation (and subsequent feedwater isolation).

NOTE 0.2 x 106 lbm/hr feed flow is equivalent to approximately 440 gpm.

Due to inaccuracy of flow indication at low end of scale, feed flow should be determined based on a rise in indicated flow.

ADJUST MFW regulating bypass valve controller to establish required feed flow.

The scenario may be terminated when the crew establishes at least 440 gpm feedwater flow or earlier, at the discretion of the Lead examiner.

48

ML15126A441

Text

SUMMARY

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

Description:

SUMMARY

Description:

Description:

Description:

Description:

Description:

Description: