Text

DC Cook 2016 Administered Operating Test Scenarios
	ML16341C543
Person / Time
Site:	Cook
Issue date:	12/02/2016
From:	; NRC/RGN-III
To:	; Indiana Michigan Power Co, American Electric Power
Shared Package
ML15274A376	List: ML16341B980; ML16341C428; ML16341C481; ML16341C543;
References
	Download: ML16341C543 (117)
	v • d • e

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No.: NRC 2016-01 Op-Test No.: ______________

Examiners: ________________________ Operators: _____________________________

Initial Conditions: MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D East MDAFW pump OOS.

Turnover: Stable at 52% power. The unit is shutting down and the reactor must be in Mode 3 within the next 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months due to exceeding the LCO for the East MDAFW pump. It has been out of service to perform motor replacement for 73 hours8.449074e-4 days 0.0203 hours 1.207011e-4 weeks 2.77765e-5 months . Currently in 1-OHP 4021.001.003, Power Reduction.

Event Event Event Malf. No.

No. Type* Description N-1 Swap #1 Control Fluid Pump for #3 Control Fluid Pump BOP 2 R-RO Continue Power Reduction C-U1_101ACRA1 3 BOP Loss of Control Room North Air Handling Unit (Global)

TS U1_NTP131 to I-RO 4 RCS THOT instrument (NTP-131) fails HIGH 650°F TS U1_FDC_251 to Main Feedwater Pump Delta-P Controller Setpoint fails high over 5 200 over 15 min. I-BOP 15 minutes.

ramp 6 U1_CV04C C-RO QRV- 162 (75 gpm orifice)Fails Closed due to a solenoid fault 7 U1_FW05A Major Trip of East MFP and Loss of ALL Feedwater M-8 U1_ED05E Loss of Bus T11A due to fault on Bus 1A ALL U1_TC02 C- Main Turbine Fails to Trip 9 U1_RP07A BOP Auto Steam Line Isolation Failure U1_RP07B U1_FW51 C- TDAFW pump T&TV failure due to blown control power fuse 10 U1_FW48C BOP West AFW pump power is lost (East AFW is OOS)

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Cook Plant Units 1 & 2 Page 1

Appendix D Required Operator Actions Form ES-D-2 Summary The crew is directed to swap Control Fluid pumps due to potential problem with one of the running pumps.

The crew is directed to continue power reduction to shut down.

After the power change, a trip of the North Control Room Air Handling Unit will occur. The crew will need to investigate the cause, start the South Air Handling Unit, and address Technical Specifications.

The next event will involve the RCS Th Inst (NTP-131) fails High. This will result in control rod movement requiring the crew to respond using IFR-001. After disabling the channel rods can be restored.

The MFP Delta P Controller Setpoint fails high over 9 minutes. The crew will be required to respond using IFR-001 and controlling MFP speed in manual.

The next event will involve a failure of letdown orifice failing closed due to a solenoid fault.

The crew will respond and restore letdown to service.

The major event will involve a trip of the East MFP resulting in a loss of all feedwater. The crew will manually trip the reactor. On the trip bus T11Awill be lost due to a fault and the AB EDG will trip causing a loss of one train of power. This will result in a loss of the West MDAFP.

The Main Turbine will fail to trip requiring the closure of the steam stop valves.

The TDAFP will fail to start due to blown control power fuses. This will require a transition to FR-H-1, Loss of Secondary Heat Sink. When heat sink is restored via AFW cross-tie or with the TDAFP (local or repaired), the scenario is complete.

Critical Tasks Manually isolate Steam Lines (turbine trip) prior to ECA-2.1 Establish FW Flow to SG before Bleed and Feed is required Procedures E-0, Reactor Trip or Safety Injection FR-H-1, Loss of Secondary Heat Sink Cook Plant Units 1 & 2 Page 2 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 1 Event

Description:

Swap #1 Control Fluid Pump for #3 Control Fluid Pump Time Position Applicant's Actions or Behavior US Directs use of 1-OHP-4021-050-006, Main and MFP Turbine Control Fluid Operation, Attachment 1, Control Fluid System Operation, Section 4.2, for swapping Control Fluid Pumps.

BOP Places Control Fluid Pump #1 in RUN.

BOP Acknowledges Alarms on MT DCS Ann. Panel:

Drop 179, No Ctrl Fluid Pump in Auto 2

Drop 208, More than 1 CTRL FLD Pump in Manual and Running BOP Places Control Fluid Pump #3 in OFF.

BOP Places Control Fluid Pump #3 in AUTO 2.

BOP Acknowledges Alarms clearing on MT DCS Panel.

RO Provides peer checks during evolution as appropriate.

Cook Plant Units 1 & 2 Page 3 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 2 Event

Description:

Continue Power Reduction Time Position Applicant's Actions or Behavior RO Calculates boric acid addition per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power reduction.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Reduction in accordance with OHP-4021-001-003.

RO Performs BORATION:

Place RC Makeup Blend Control Switch in STOP.

Place RC Makeup Blend Control Mode Selector Switch in BORATE.

Set desired batch on BA Flow Totalizer.

Adjust BA Flow Ctrl (RU-33) to desired flow.

Place RC Makeup Blend Control Switch in START.

RO Commences power reduction:

Lowers turbine load (reactor power) using HMI.

Maintains Tavg/Tref deviation within limits by boration and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP/RO BOP acts as peer checker for RO during blender operations and RO verifies appropriate reactivity feedback.

BOP Monitors main electrical generator temperatures.

Cook Plant Units 1 & 2 Page 4 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 3 Event

Description:

Loss of North Control Room North Air Handling Unit Time Position Applicant's Actions or Behavior BOP Recognizes and reports annunciator on Panel #103, Drop 23, indicative of the loss of the North Control Room Air Handling Unit.

US/BOP Starts the South Control Room Air Handling Unit per OHP-4024-103, Drop 23 annunciator response by placing the South Control Room Air Handling Unit to RUN.

(NOTE: May attempt 1 restart of the North Control Room Air Handling Unit per ARP)

May Place North CRAC in STOP US Refers to Tech Specs (TS):

TS 3.7.11 Control Room Air Conditioning (CRAC) System

(Condition A) due to a loss of 1 cooling system. Restore in 30 Days Cook Plant Units 1 & 2 Page 5 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Ann. Panel 111 which are indicative of a RCS RTD failure. (Drops 3,4, 10)

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place rod control in manual after verifying no runback in progress, if previously in auto.

Identifies that PRZ Program Level is affected by this failure and Place PRZ level control to manual US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 01-OHP-4022-012-003, Continuous Control Bank Movement procedure, if rods moved.

RO If 1-OHP-4022-012-003 is entered, then performs the following as directed:

1. Checks rod position above low-low rod insertion limit Note: Delta T failure affects RIL Setpoint - Must use COLR or manually calculate. (1.89 * % thermal Power ~ 98 Steps)

2. Checks axial flux difference (AFD) within target band

3. Initiates restoration of equilibrium conditions using either:

Control rod movement

Turbine load adjustment (Turbine on Tavg-Tref Hold until channel is defeated)

Boron adjustment

4. Identifies failed RTD channel US Enters and directs actions of 1-OHP-4022-013-007, RCS RTD Instrument Malfunction procedure.

Continued on next page Cook Plant Units 1 & 2 Page 6 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO 1. Ensures control rods are in manual.

2. Reports Loop 3 as failed RCS temperature channel and aligns the following switches: (This will clear Turbine hold)

Tavg defeat switch to Loop 3 position

T defeat switch to Loop 3 position

T/OPT/OTT recorder switch to Loop 1,2, or 4

3. Verifies PZR Level Control in Auto US Notifies SM/MTI to trip bistables associated with RCS loop 3 RTD failure per Attachment C of 1-OHP 4022-013-007.

US Refers to TS LCO:

TS 3.3.1, Reactor Trip System (RTS) Instrumentation (Table 3.3.1-1) o Function 6, Overtemperature T. Condition D o Function 7, Overpower T. Condition D

TS 3.3.2, Engineered Safety Feature Actuation System (ESFAS)

Instrumentation (Table 3.3.2-1) o Function 4e, Steam Line Isolation - High Steam Flow in Two Steam Lines (per steam line), Coincident with Tavg - Low Low Condition D o Function 8c, ESFAS Interlocks - Tavg - Low Low, P-12.

Condition D May refer to the following if LEFM readings are Magenta on PPC

TRM 8.7.14, Leading Edge Flow Meter (Mode 1 > 3250 MWth applicability)- N/A Cook Plant Units 1 & 2 Page 7 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 5 Event

Description:

Main Feedwater Pump Delta-P Controller Setpoint Fails High Time Position Applicant's Actions or Behavior Note: Malfunction will cause the Total Steam Flow summing unit for the Feed Pump Delta-P circuit to fail low thus driving the Delta-P setpoint high.

BOP Recognizes and reports annunciator on Ann. Panel 115, Drop 42, FPT DCS Trouble, and indications of a failure affecting main feedwater to all steam generators (SGs):

Main FW Pump Differential Pressure Controller.

May Identify

All feedwater regulating valves closing.

Main feedwater pump speed rising.

Note: Ann. OHP-4024-DCS-MFP, Drop C-10, DP SETPOINT STEAM FLOW XMTR FAIL, Also contains actions to address setpoint failure. (ALM point 2010 on DCS Screen)

BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies/Places Main FW Pump to speed control in manual and lowers output (MFW Pump Speed) to restore DP and match feedwater flow with steam flow and restore SG levels to program.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

CREW Identifies that Main Feedwater Pump Delta-P Controller Setpoint has failed high.

BOP Monitors/adjusts MFP differential pressure (via manual control of FWP Delta-P or Main FW Pump Speed controllers) to while maintaining SG levels at program.

RO Monitors nuclear power during feedwater transient.

Cook Plant Units 1 & 2 Page 8 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 6 Event

Description:

75 GPM Letdown Orifice Valve (QRV-162) Fails Closed Time Position Applicant's Actions or Behavior RO Identifies and reports rise in pressurizer (PRZ) or lowering VCT level due to a loss of letdown flow as a result of QRV-162 failing closed.

US/RO Minimizes charging flow to that amount required for seal injection.

NOTE If required, Shift Manager will direct that normal letdown (75 gpm) be re-established.

US Directs RO to restore normal letdown (using QRV-161, 75 gpm letdown orifice) per 1-OHP-4021-003-001, Attachment 13.

RO Restores normal letdown per Attachment 13, Section 4.1 as follows:

1. Places QRV-302 in divert position.

2. Verifies orifice isolations closed (QRV-160, 161 and 162).

3. Adjusts CRV-470 controller to >50% output.

4. Verifies open letdown isolation valves:

a. QCR-300, CVCS letdown cntmt isol

b. QCR-301, CVCS letdown cntmt isol

c. QRV-111, RC letdown to regen hx

d. QRV-112, RC letdown to regen hx

5. Adjusts QRV-301 controller to 50% output.

6. Checks/adjusts charging flow to > 75 gpm.

7. Opens QRV-161, 75 gpm letdown orifice isolation.

8. Adjusts QRV-301 to maintain 160 - 350 psig on QPC-301.

9. Places QRV-301 in auto (if desired).

10. Nulls and returns CRV-470 controller to auto.

11. Adjusts charging flow as required to maintain PRZ level.

12. Places PRZ level control in automatic (if desired).

13. Places QRV-302 in normal (demin) position when letdown temperature is stable.

Cook Plant Units 1 & 2 Page 9 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior RO/US Determines that a loss of feedwater is occurring based on the following:

Both FW pumps tripped

SG level change

FW & Steam flow mismatch US Directs RO to manually trip the reactor Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection RO Performs the (primary) immediate actions of E-0:

1. Checks reactor trip

2. Checks safety injection status Performs the (secondary) immediate actions of E-0:

1. Checks Turbine Trip US/BOP

Determines that ALL Turbine Stop Valves are NOT Closed

Attempts manual turbine trip via the Solenoid Trip.

Critical

Attempts to manually actuate AMSAC Task #1 2. Determines that Turbine did NOT trip.

3. Isolates SG Stop Valves and Stop Valve Dump Valves Checks power to AC emergency buses

Reports loss of 4KV Bus T11A (due to fault) and T11B BOP

Reports trip of AB EDG (due to bus fault)

US Ensures immediate actions of E-0 are completed.

Crew Determines SI has NOT Actuated and is Not Required Checks AFW Flow and Announces Transition to ES-0.1 US Determines that No AFW pumps are running requiring transition to FR-H.1 based on a Red Path after exiting E-0 Cook Plant Units 1 & 2 Page 10 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01 Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to Fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior US Announces transition to FR-H.1, Response to Loss of Secondary Heat Sink.

RO/BOP Reviews foldout page for FR-H.1, Response to Loss of Secondary Heat Sink.

US Directs actions of FR-H.1, Response to Loss of Secondary Heat Sink.

US/RO Verifies Bleed and Feed initiation is not required:

Recognizes one CCP available

SG WR Levels > 32%

PRZ Pressure < 2335 psig Attempts to establish secondary heat sink to one SG:

Starts TDAFP from Control Room or Locally US/BOP

Opens TDAFP FMOs to Obtain total feed flow > 240E3 PPH (FMO-211, 221, 231, 241 are normally throttled open but less than Critical required minimum).

OR

Establish Crosstie to Unit 2 per OHP-4022--055-003 Attachment A Task #2

Close U1 FMO-212 & FMO-242

Direct U2/AEO to perform steps to :

Close U2 FMO-222, FMO232, FRV-255 & Test Valve Air

Open of Crosstie 2-FW-129

Start U2 East AFW Pump

Throttle U1 FMO-212 & FMO-242 to Feed SGs US Announces transition to E-0, Reactor Trip or Safety Injection.

TERMINATE SCENARIO Cook Plant Units 1 & 2 Page 11 of 16

Appendix D Critical Task Summary Form ES-D-2 (NRC 2016-01)

Task Elements Results

1 Cueing:

Manually

All turbine stop valves closed status lights - LIT SAT / UNSAT Trip/Isolate Main (E-0, Step 2)

Turbine Performance Indicators:

Manually Isolate Main Steam Lines

Must be performed prior to:

o ECA-2.1 Entry o FR-S Series Entry Performance Feedback:

Main Steam Lines Isolated o MRV-210 o MRV-220 o MRV-230 o MRV-240

2 Cueing:

AFW flow < 240,000 PPH Establish FW Flow to

NR SG Levels OFFSCALE LOW SAT / UNSAT SG prior to Bleed and Feed Performance Indicators:

Establish AFW flow to SG >240,000 PPH

Must be performed prior to:

SG Dryout (<17% wide range level)

Exceeding RCS safety valve limit (2485 psig)

Performance Feedback:

AFW or FW flow indicated to SGs

CETCs - lowering Cook Plant Units 1 & 2 Page 12 of 16

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Setup:

1. Reset to IC-731 MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D East MDAFW pump OOS.

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Tagout 1E MDAFP as follows:

Place control switch in pull-to-lock

Place clearance tag on control switch

Activate FWR61, final value RO U1_FWR61

6. Activate the following (pre-load) malfunctions:

TC02, Main Turbine Fails to Trip U1_TC02

FW48C, Failure of TDAFWP AUTO start U1_FW48C

RP07A, Train A Steamline Isolation fails to AUTO actuate U1_RP07A

RP07B, Train B Steamline Isolation fails to AUTO actuate U1_RP07B

7. Assign file U1ReactorTripBreaker to event #9: U1ReactorTripBreaker to

FW51, TDAFWP T&TV blown control fuse U1_FW51

ED05E, T11A Bus fault U1_ED05E - On Trig 9 Cook Plant Units 1 & 2 Page 13 of 16

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Scenario:

EVENT #1 If required, Local Control Fluid Temperature is 124°F EVENT #2 (if desired to use Rod Motion to perform power change insert event 4 prior to placing rods in Manual for power change)

No Additional Actions EVENT #3 Insert Global malfunction U1_101ACRA1 (Loss of Control Room North Air Handling Unit) after crew has performed a power change.

U1_101ACRA1 If contacted as AEO to investigate the North Air Handling Unit Trip, report back after ~ 2 min. delay that Breaker 1-AB-D-2D has an OC trip.

EVENT #4 ICF U1_NTP131 to 650 over 5 sec to cause the Loop 3 Hot Leg RTD to fail high.

U1_NTP131 EVENT #5 (consider entering this Malfunction with event 4)

ICF U1_FDC_251 to 200 over 15 minutes to cause the Main FWP Delta Pressure Setpoint to fail high.

U1_FDC_251 EVENT #6 IMF CV04C, to cause QRV-162, 75 gpm letdown orifice to fail closed ).

U1_CV04C If desired, direct the Crew as the SM to restore ONLY 75 GPM letdown using section 4.1 of Attachment 13.

Cook Plant Units 1 & 2 Page 14 of 16

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

EVENT #7 ICF U1_FW05A to cause the East Main FW Pump to Trip.

U1_FW05A EVENT # 8,9,10 Turbine Trip fails to AUTO actuate (Pre-Loaded)

Steam Line Isolation fails to AUTO actuate (Pre-Loaded)

TD AFW pump fails to start (Pre-Loaded)

After FR-H.1 determination that Bleed & Feed is NOT required, report as the AEO and/or Maintenance that T&TV appears to be functional with NO physical damage evident, but the fuse was blown and has been replaced. Or Inform the Crew that the U2 AFW is ready to Start.

DMF FW51 to replace the blown fuse.

U1_FW51 OR Start TDAFP Locally U1_QT506ACT To Provide AFW through Crosstie to Unit 2 To Simulate Closing U2_FMO-212 and FMO-242 (Close Manual Isolations) - FRV-255 is closed U2_FWR44 U2_FWR47 Open U1 AFW to U2 Cosstie 1-FW-129 and Start u2 West AFW U1_FWR06 ZGI101TA2_U2 Cook Plant Units 1 & 2 Page 15 of 16

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Local actions after entry into E-0:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01

Aux Tour will monitor Spent Fuel Pool Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

Report Control Room Damper Positions ACRDA-1A, ACRDA-2 are closed. ACRDA-3 is open.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A U1_EGR03B U1_EGR03B EGR 03B EGR 04A U1_EGR04A U1_EGR04A U1_EGR04B U1_EGR04B EGR 04B Cook Plant Units 1 & 2 Page 16 of 16

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No.: NRC 2016-01(a) Op-Test No.: 2016 NRC ILE Examiners: ________________________ Operators: _________________________

Initial Conditions: MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D, East MDAFW pump OOS.

Turnover: Stable at 52% power. The unit is shutting down and the reactor must be in Mode 3 within the next 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months due to exceeding the LCO for the East MDAFW pump. It has been out of service to perform motor replacement for 73 hours8.449074e-4 days 0.0203 hours 1.207011e-4 weeks 2.77765e-5 months . Currently in 1-OHP 4021.001.003, Power Reduction.

Event Event Event Malf. No.

No. Type* Description 1 N-BOP Swap #1 Control Fluid Pump for #3 Control Fluid Pump 2 R-RO Continue Power Reduction 3 U1_101ACRA1 C-BOP (Global) Loss of Control Room North Air Handling Unit TS U1_NTP131 to I-RO RCS THOT instrument (NTP-131) fails HIGH 4 650°F TS U1_FDC_251 to Main Feedwater Pump Delta-P Controller Setpoint fails high 5 200 over 15 min. I-BOP ramp over 15 minutes. DELETED U1_CV04C QRV-162 (75 gpm orifice) Fails Closed due to a solenoid 6 C-RO fault 7 U1_FW05A M-ALL Trip of East MFP and Loss of ALL Feedwater 8 U1_ED05E M-ALL Loss of Bus T11A due to fault on Bus 1A U1_TC02 9 U1_RP07A C-BOP Main Turbine Fails to Trip/Auto Steam Line Isolation Failure U1_RP07B U1_FW51 TDAFW pump T&TV failure due to blown control power fuse 10 C-BOP U1_FW48C West AFW pump power is lost (East AFW is OOS)

(N)ormal, (R)eactivity, (I)nstrument, (C) omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Summary The crew is directed to swap Control Fluid pumps due to potential problem with one of the running pumps.

The crew is directed to continue power reduction to shut down.

After the power change, a trip of the North Control Room Air Handling Unit will occur. The crew will need to investigate the cause, start the South Air Handling Unit, and address Technical Specifications.

The next event will involve the RCS Th Inst (NTP-131) fails High. This will result in control rod movement requiring the crew to respond using IFR-001. After disabling the channel rods can be restored.

The MFP Delta P Controller Setpoint fails high over 9 minutes. The crew will be required to respond using IFR-001 and controlling MFP speed in manual.

The next event will involve a failure of letdown orifice failing closed due to a solenoid fault.

The crew will respond and restore letdown to service.

The major event will involve a trip of the East MFP resulting in a loss of all feedwater. The crew will manually trip the reactor. On the trip bus T11Awill be lost due to a fault and the AB EDG will trip causing a loss of one train of power. This will result in a loss of the West MDAFP.

The Main Turbine will fail to trip requiring the closure of the steam stop valves.

The TDAFP will fail to start due to blown control power fuses. This will require a transition to FR-H-1, Loss of Secondary Heat Sink. When heat sink is restored via AFW cross-tie or with the TDAFP (local or repaired), the scenario is complete.

Critical Tasks Manually isolate Steam Lines (turbine trip) prior to ECA-2.1 Establish FW Flow to SG before Bleed and Feed is required Procedures E-0, Reactor Trip or Safety Injection FR-H-1, Loss of Secondary Heat Sink

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 1 Event

Description:

Swap #1 Control Fluid Pump for #3 Control Fluid Pump Time Position Applicant's Actions or Behavior US Directs use of 1-OHP-4021-050-006, Main and MFP Turbine Control Fluid Operation, Attachment 1, Control Fluid System Operation, Section 4.2, for swapping Control Fluid Pumps.

BOP Places Control Fluid Pump #1 in RUN.

BOP Acknowledges Alarms on MT DCS Ann. Panel:

Drop 179, No Ctrl Fluid Pump in Auto 2

Drop 208, More than 1 CTRL FLD Pump in Manual and Running BOP Places Control Fluid Pump #3 in OFF.

BOP Places Control Fluid Pump #3 in AUTO 2.

BOP Acknowledges Alarms clearing on MT DCS Panel.

RO Provides peer checks during evolution as appropriate.

Cook Plant Unit 1 & 2 Page 3 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 2 Event

Description:

Continue Power Reduction Time Position Applicant's Actions or Behavior RO Calculates boric acid addition per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power reduction.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Reduction in accordance with OHP-4021-001-003.

RO Performs BORATION:

Place RC Makeup Blend Control Switch in STOP.

Place RC Makeup Blend Control Mode Selector Switch in BORATE.

Set desired batch on BA Flow Totalizer.

Adjust BA Flow Ctrl (RU-33) to desired flow.

Place RC Makeup Blend Control Switch in START.

RO Commences power reduction:

Lowers turbine load (reactor power) using HMI.

Maintains Tavg/Tref deviation within limits by boration and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP/RO BOP acts as peer checker for RO during blender operations and RO verifies appropriate reactivity feedback.

BOP Monitors main electrical generator temperatures.

Cook Plant Unit 1 & 2 Page 4 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 3 Event

Description:

Loss of North Control Room North Air Handling Unit Time Position Applicant's Actions or Behavior BOP Recognizes and reports annunciator on Panel #103, Drop 23, indicative of the loss of the North Control Room Air Handling Unit.

US/BOP Starts the South Control Room Air Handling Unit per OHP-4024-203, Drop 23 annunciator response by placing the South Control Room Air Handling Unit to RUN.

(NOTE: May attempt 1 restart of the North Control Room Air Handling Unit per ARP)

US Refers to Tech Specs (TS):

TS 3.7.11 Control Room Air Conditioning (CRAC) System

(Condition A) due to a loss of 1 cooling system.

Cook Plant Unit 1 & 2 Page 5 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Ann. Panel 111 which are indicative of a RCS RTD failure.

RO/BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place rod control in manual after verifying no runback in progress, if previously in auto.

Identifies that PRZ Program Level is affected by this failure.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 01-OHP-4022-012-003, Continuous Control Bank Movement procedure, if rods moved.

RO If 1-OHP-4022-012-003 is entered, then performs the following as directed:

1. Checks for no turbine runback

2. Ensures control rods are in manual with no rod motion

3. Checks rod position above low-low rod insertion limit Note: Delta T failure may affect RIL Setpoint - Must use COLR or manually calculate.

4. Checks axial flux difference (AFD) within target band

5. Initiates restoration of equilibrium conditions using either:

Control rod movement

Turbine load adjustment

Boron adjustment

6. Identifies failed RTD channel US Enters and directs actions of 1-OHP-4022-013-007, RCS RTD Instrument Malfunction procedure.

Continued on next page Cook Plant Unit 1 & 2 Page 6 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO 1. Ensures control rods are in manual.

2. Reports Loop 3 as failed RCS temperature channel and aligns the following switches:

Tavg defeat switch to Loop 3 position

T defeat switch to Loop 3 position

T/OPT/OTT recorder switch to Loop 1,2, or 4 US Initiates actions to trip bistables associated with RCS loop 3 RTD failure per Attachment C of 1-OHP 4022-013-007.

US Refers to TS LCO:

TS 3.3.1, Reactor Trip System (RTS) Instrumentation (Table 3.3.1-1) o Function 6, Overtemperature T. Condition D o Function 7, Overpower T. Condition D

TS 3.3.2, Engineered Safety Feature Actuation System (ESFAS)

Instrumentation (Table 3.3.2-1) o Function 4e, Steam Line Isolation - High Steam Flow in Two Steam Lines (per steam line), Coincident with Tavg - Low Low Condition D o Function 8c, ESFAS Interlocks - Tavg - Low Low, P-12.

Condition D May refer to the following if LEFM readings are Magenta on PPC

TRM 8.7.14, Leading Edge Flow Meter (Mode 1 > 3250 applicability)

Cook Plant Unit 1 & 2 Page 7 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 5 Event

Description:

Main Feedwater Pump Delta-P Controller Setpoint Fails High Time Position Applicant's Actions or Behavior Note: Malfunction will cause the Total Steam Flow summing unit for the Feed Pump Delta-P circuit to fail low thus driving the Delta-P setpoint high.

BOP Recognizes and reports annunciator on Ann. Panel 115, Drop 42, FPT DCS Trouble, and indications of a failure affecting main feedwater to all steam generators (SGs):

Main FW Pump Differential Pressure Controller.

May Identify

All feedwater regulating valves closing.

Main feedwater pump speed rising.

Note: Ann. OHP-4024-DCS-MFP, Drop C-10, DP SETPOINT STEAM FLOW XMTR FAIL, contains actions to address setpoint failure.

RO/BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies/Places Main FW Pump to speed control in manual and lowers output (MFW Pump Speed) to restore DP and match feedwater flow with steam flow and restore SG levels to program.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

CREW Identifies that Main Feedwater Pump Delta-P Controller Setpoint has failed high.

BOP Monitors/adjusts MFP differential pressure (via manual control of FWP Delta-P or Main FW Pump Speed controllers) to while maintaining SG levels at program.

RO Monitors nuclear power during feedwater transient.

Cook Plant Unit 1 & 2 Page 8 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 6 Event

Description:

75 GPM Letdown Orifice Valve (QRV-162) Fails Closed Time Position Applicant's Actions or Behavior RO Identifies and reports rise in pressurizer (PRZ) or lowering VCT level due to a loss of letdown flow as a result of QRV-162 failing closed.

US/RO Minimizes charging flow to that amount required for seal injection.

NOTE If required, Shift Manager will direct that normal letdown (75 gpm) be re-established.

US Directs RO to restore normal letdown (using QRV-161, 75 gpm letdown orifice) per 1-OHP-4021-003-001, Attachment 13.

RO Restores normal letdown per Attachment 13, Section 4.1 as follows:

1. Places QRV-302 in divert position.

2. Verifies orifice isolations closed (QRV-160, 161 and 162).

3. Adjusts CRV-470 controller to >50% output.

4. Verifies open letdown isolation valves:

a. QCR-300, CVCS letdown cntmt isol

b. QCR-301, CVCS letdown cntmt isol

c. QRV-111, RC letdown to regen hx

d. QRV-112, RC letdown to regen hx

5. Adjusts QRV-301 controller to 50% output.

6. Checks/adjusts charging flow to > 75 gpm.

7. Opens QRV-161, 75 gpm letdown orifice isolation.

8. Adjusts QRV-301 to maintain 160 - 350 psig on QPC-301.

9. Places QRV-301 in auto (if desired).

10. Nulls and returns CRV-470 controller to auto.

11. Adjusts charging flow as required to maintain PRZ level.

12. Places PRZ level control in automatic (if desired).

13. Places QRV-302 in normal (demin) position when letdown temperature is stable.

Cook Plant Unit 1 & 2 Page 9 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior RO/US Determines that a loss of feedwater is occurring based on the following:

Both FW pumps tripped

SG level change

FW & Steam flow mismatch US Directs RO to manually trip the reactor Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection RO Performs the (primary) immediate actions of E-0:

1. Checks reactor trip

2. Checks safety injection status Performs the (secondary) immediate actions of E-0:

1. Checks Turbine Trip US/BOP

Determines that ALL Turbine Stop Valves are NOT Closed

Attempts manual turbine trip via the Solenoid Trip.

Critical

Attempts to manually actuate AMSAC Task #1 2. Determines that Turbine did NOT trip.

3. Isolates SG Stop Valves and Stop Valve Dump Valves Checks power to AC emergency buses

Reports loss of 4KV Bus T11A (due to fault) and T11B BOP

Reports trip of AB EDG (due to bus fault)

US Ensures immediate actions of E-0 are completed.

Crew Determines SI has Actuated Crew Performs E-0 Actions as directed

Perform Attachment A

Attempt to restore AFW US Determines that No AFW pumps are running requiring transition to FR-H.1 at Step 10 RNO.

Cook Plant Unit 1 & 2 Page 10 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-01(a) Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to Fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior US Announces transition to FR-H.1, Response to Loss of Secondary Heat Sink.

RO/BOP Reviews foldout page for FR-H.1, Response to Loss of Secondary Heat Sink.

US Directs actions of FR-H.1, Response to Loss of Secondary Heat Sink.

US/RO Verifies Bleed and Feed initiation is not required:

Recognizes one CCP available

SG WR Levels > 32%

PRZ Pressure < 2335 psig Attempts to establish secondary heat sink to one SG:

Starts TDAFP from Control Room or Locally US/BOP

Opens TDAFP FMOs to Obtain total feed flow > 240E3 PPH (FMO-211, 221, 231, 241 are normally throttled open but less than Critical required minimum).

OR

Establish Crosstie to Unit 2 per OHP-4022--055-003 Attachment A Task #2

Close U1 FMO-212 & FMO-242

Direct U2/AEO to perform steps to :

Close U2 FMO-222, FMO232, FRV-255 & Test Vale Air

Open of Crosstie 2-FW-129

Start U2 East AFW Pump

Throttle U1 FMO-212 & FMO-242 to Feed SGs US Announces transition to E-0, Reactor Trip or Safety Injection.

TERMINATE SCENARIO Cook Plant Unit 1 & 2 Page 11 of 16

Critical Task Summary (NRC 2016-01(a))

Task Elements Results

1 Cueing:

Manually

All turbine stop valves closed status lights - LIT SAT / UNSAT Trip/Isolate Main (E-0, Step 2)

Turbine Performance Indicators:

Manually Isolate Main Steam Lines

Must be performed prior to:

o ECA-2.1 Enry o FR-S Series Entry Performance Feedback:

Main Steam Lines Isolated o MRV-210 o MRV-220 o MRV-230 o MRV-240

2 Cueing:

AFW flow < 240,000 PPH Establish FW Flow to

NR SG Levels OFFSCALE LOW SAT / UNSAT SG prior to Bleed and Feed Performance Indicators:

Establish AFW flow to SG >240,000 PPH

Must be performed prior to:

SG Dryout (<17% wide range level)

Exceeding RCS safety valve limit (2485 psig)

Performance Feedback:

AFW or FW flow indicated to SGs

CETCs - lowering Cook Plant Unit 1 & 2 Page 12 of 16

Simulator Instructions (NRC 2016-01(a))

Setup:

1. Reset to IC-315 MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D East MDAFW pump OOS.

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Tagout 1E MDAFP as follows:

Place control switch in pull-to-lock

Place clearance tag on control switch

Activate FWR61, final value RO U1_FWR61

6. Activate the following (pre-load) malfunctions:

TC02, Main Turbine Fails to Trip U1_TC02

FW48C, Failure of TDAFWP AUTO start U1_FW48C

7. Assign file U1ReactorTripBreaker to event #9: U1ReactorTripBreaker to

FW51, TDAFWP T&TV blown control fuse U1_FW51

ED05E, T11A Bus fault U1_ED05E - On Trig 9 Cook Plant Unit 1 & 2 Page 13 of 16

Simulator Instructions (NRC 2016-01(a))

Scenario:

EVENT #1 If required, Local Control Fluid Temperature is 124°F EVENT #2 (if desired to use Rod Motion to perform power change insert event 4 prior to placing rods in Manual for power change)

No Additional Actions EVENT #3 Insert Global malfunction U1_101ACRA1 (Loss of Control Room North Air Handling Unit) after crew has performed a power change.

U1_101ACRA1 If contacted as AEO to investigate the North Air Handling Unit Trip, report back after ~ 2 min. delay that Breaker 1-AB-D-2D has an OC trip.

EVENT #4 ICF U1_NTP131 to 650 over 5 sec to cause the Loop 3 Hot Leg RTD to fail high.

U1_NTP131 EVENT #5 ICF U1_FDC_251 to 200 over 15 minutes to cause the Main FWP Delta Pressure Setpoint to fail high.

U1_FDC_251 EVENT #6 After crew has demonstrated ability to raise power, THEN insert IMF CV04C, to cause QRV-162, 75 gpm letdown orifice to fail closed).

U1_CV04C If desired, direct the Crew as the SM to restore ONLY 75 GPM letdown using section 4.1 of 3.

Cook Plant Unit 1 & 2 Page 14 of 16

Simulator Instructions (NRC 2016-01(a))

EVENT #7 ICF U1_FW05A to cause the East Main FW Pump to Trip.

U1_FW05A EVENT # 8,9,10 Turbine Trip fails to AUTO actuate (Pre-Loaded)

Steam Line Isolation fails to AUTO actuate (Pre-Loaded)

TD AFW pump fails to start (Pre-Loaded)

After FR-H.1 determination that Bleed & Feed is NOT required, report as the AEO and/or Maintenance that T&TV appears to be functional with NO physical damage evident, but the fuse was blown and has been replaced. Or Inform the Crew that the U2 AFW is ready to Start.

DMF FW51 to replace the blown fuse.

U1_FW51 OR Start TDAFP Locally U1_QT506ACT To Provide AFW through Crosstie to Unit 2 To Simulate Closing U2_FMO-212 and FMO-242 (Close Manual Isolations) - FRV-255 is closed U2_FWR44 U2_FWR47 Open U1 AFW to U2 Crosstie 1-FW-129 and Start u2 West AFW U1_FWR06 ZGI101TA2_U2 Cook Plant Unit 1 & 2 Page 15 of 16

Simulator Instructions (NRC 2016-01(a))

Local actions after entry into E-0:

Perform Local actions after entry into E-0 as requested:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01

Aux Tour will monitor Spent Fuel Pool Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

Report Control Room Damper Positions ACRDA-1A, ACRDA-2 are closed. ACRDA-3 is open.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A U1_EGR03B U1_EGR03B EGR 03B EGR 04A U1_EGR04A U1_EGR04A U1_EGR04B U1_EGR04B EGR 04B Cook Plant Unit 1 & 2 Page 16 of 16

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No.: NRC 2016-02 Op-Test No.: ________

Examiners: _________________ Operators: ___________________

Initial Conditions: MOL, 80% power , 888 MW, 864 ppm, 565.7 F 198 Steps on D Turnover: Raise Power to 100%

Event Malf. No. Event Event No. Type* Description I-RO 1 U1_QLC451@ 0 VCT Level Transmitter (QLC-451) fails LOW TS 2 R-RO Raise Turbine and Reactor Power U1_QTC302@

175°F C-RO Letdown Temperature Controller fails High 3

I-BOP 4 U1_FFC220 @ 2 SG Feed Flow Instrument (FFC-220) fails LOW TS U1_RC16 to 5 100% over 2 M - ALL Pressurizer Steam Space Manway Leak min. ramp 6 U1_TC03 C-BOP Failure of Main Turbine Auto Trip U1_RP20C Slave Relay Failure (CCP,CCW,SI,RH pumps dont auto start) 7 C-RO U1_ECP East CCP trips

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Cook Plant Units 1 & 2 Page 1

Appendix D Required Operator Actions Form ES-D-2 Summary The crew is directed to begin raising power to 100%.

Before the power rise has begun, the VCT Level instrument (QLC-451) failing LOW. This will result in the VCT Low Level alarm and auto makeup. The crew will be required to enter the AOP and address the Technical Requirements Manual. The RO will be required to terminate the auto makeup to RCS.

After an acceptable power change, the Letdown Temperature Controller failing High in AUTO.

This will result in excessive letdown cooling. RO will be required to take manual control of CRV-470 and restore temperature to normal band.

The fourth event will involve a failure of #2 Steam Generator Feed Flow instrument (FFC-220)

LOW. This will result in a rise in feedwater flow to #2 SG with corresponding SG level rise.

The BOP will be required to take manual control of FRV-220. Crew will be required to implement AOP actions to stabilize the plant and address Technical Specifications.

The major event will involve a large leak on the PRZ Steam Space Manway. A unit trip will be required. As the crew performs the actions of E-0, the Main Turbine will fail to automatically trip. Additionally the East CCP will trip and a failure of the opposite train slave relay will require manually stating the West CCP and other ECCS equipment. The crew will transition to E-1. The scenario will terminate when the crew has transitioned to ES-1.2 for Post LOCA cooldown.

Critical Tasks Manually trip the Turbine prior to a transition to ECA-2.1 Stop all running RCPs when RCS pressure is below 1300 psig Procedures E-0, Reactor Trip or Safety Injection E-1, Loss of Reactor or Secondary Coolant Cook Plant Units 1 & 2 Page 2 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 1 Event

Description:

VCT Level Transmitter (QLC-451) fails LOW Time Position Applicant's Actions or Behavior RO Recognizes indication(s) of VCT Level problem and reports annunciators:

Panel #109 Drop 49 - VCT Level Low RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Places RC Makeup Control to Stop US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-017, VCT Level Malfunction RO

Report failure of VCT Level Transmitter (QLC-451) to US

Perform MANUAL blend operation to maintain VCT level in band, if required US

Informs SM/MTI that Interposing Relay must be energized in accordance with Attachment A US Refers to the following Tech Requirements:

TRM 8.1.1, Boration Systems Operating - Condition A - 72 Hr (Interposing Relay is energized for Refueling Water Sequence)

Cook Plant Units 1 & 2 Page 3 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 2 Event

Description:

Raise Turbine Load/Reactor Power Time Position Applicants Actions or Behavior RO Calculates the dilution required per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power escalation.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Escalation in accordance with OHP-4021-001-006, Power Escalation (at step 4.77)

RO Performs DILUTION (batch add OR Continuous):

Place RC Makeup Blend Control Mode switch in DILUTE or ALT DILUTE

Adjust PW to the desired flow rate and/or amount.

May close QRV-451 if aligning to CCP Suction Only

Place RC Makeup Blend control switch in START

May take QRV-303 to Manual and Open as required to maintain VCT Level and Pressure.

RO Commences escalation:

Raises turbine load (reactor power) using the DCS HMI.

Maintains Tavg/Tref deviation within limits by dilution and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

RO RO verifies appropriate reactivity feedback.

BOP Acts as peer checker for RO during blender operations.

Cook Plant Units 1 & 2 Page 4 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 3 Event

Description:

CVCS Letdown Temperature Controller (QTC-302) output fails High.

Time Position Applicant's Actions or Behavior RO Recognize and reports annunciator Panel 109 alarms which indicates a problem with CCW cooling to the letdown heat exchanger:

Drop 8, Letdown HX Outlet Temp High (a failed high transmitter causes excessive cooling to letdown)

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Places CRV-470, Letdown Temperature Control valve, controller to MANUAL.

Positions CRV-470 and restores letdown temperature to normal.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

RO May dispatch operator to obtain a local temperature reading and/or valve position.

Identifies that QTC-302 has failed high

Determines condition NOT due to makeup US Initiates action to have MTI investigate problem with letdown temperature controller/indicator.

NOTE:

QRV-302 Letdown Demineralizer Divert Valve will reposition based on QTS-301. Diverts past Demins at 143°F. This is a separate switch from the Controller & Instrument that has failed (QTC-302).

Cook Plant Units 1 & 2 Page 5 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 4 Event

Description:

SG #2 Feedwater Flow Transmitter (FFC-220) Fails LOW Time Position Applicant's Actions or Behavior BOP Recognizes and reports annunciators on Panel #113

Drop 32, Steam Generator 2 Water LVL HI Deviation

Drop 43, Steam Generator 2 SF > FWF Mismatch BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies FRV-220, SG #2 MFW Reg. Valve controller in manual Lowers controller output to match the operable feed flow channel with steam flow.

Restores SG #2 level to program.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-015, Feedwater Flow Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Reports FFC-220 has failed low

2. Places FS-520-C selector switch in channel 2 position.

3. Nulls and returns FRV-220 controller to auto.

US Refers to Tech Specs 3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 15, Condition D). Trip Bistables in 6 Hr US Notifies SM/MTI to Initiate actions to trip bistables associated with FFC-220 FW Flow Failure per Attachment B-1 of OHP-4022-013-015.

Cook Plant Units 1 & 2 Page 6 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior RO Receives Alarms on Panel 104 Drop 41, 105 Drops 31/32 due to Containment Temperature and Pressure Recognize and reports abnormal RCS leakage:

RCS pressure lowering with PZR Heaters ON.

Rising Containment dewpoint, pressure, and radiation.

US Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection.

RO/BOP Performs the immediate actions of E-0:

1. Checks reactor trip

2. Checks turbine trip

3. Checks power to AC emergency buses

4. Checks safety injection status US

Ensures immediate actions of E-0 are completed

Directs subsequent actions of E-0.

BOP Check Main Turbine Trip:

Manually Actuate Turbine Trip Critical -OR-Task #1

Manually Actuate AMSAC

-OR-

Manually Isolate Main Steam Lines US/RO Foldout Page - RCP Trip Criteria:

Stop all RCPs within 5 minutes of when RCS is < 1300 psig and Critical CCP/SI pump running Task #2 BOP Manually controls AFW flow to maintain SG narrow range levels 13% - 50%

once one SG narrow range level is greater than 13%.

Cook Plant Units 1 & 2 Page 7 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior RO Determines that East CCP tripped and that the West CCP must be manually started.

Also Identifies that the West RHR, South SI, and West CCW pump failed to auto start on SI.

RO/BOP Completes actions of E-0 through step 19 as directed.

RO/BOP Performs manual actions of E-0, Attachment A as directed by US.

(Note ESW pump and Ventilation are impacted by slave relay failure)

US/RO Checks if RCS is Intact - NO US Announces transition to E-1, Loss of Reactor or Secondary Coolant and directs operator actions.

RO/BOP Completes actions of E-1 through step 12 (Check if RCS Cooldown and Depressurization is required) as directed.

BOP Restore SG narrow range levels >20%, but < 50%.

US/RO Checks if SI Termination Criteria is MET:

RCS Subcooling >40°F Secondary Heat Sink (SG >13% or AFW Flow >240x103)

RCS Pressure rising or stable - NO (May be Rising See next Step)

Pressurizer Level >16%

Crew Transition to ES-1.1, Safety Injection Termination if criteria is met.

ES-1.1 Actions are listed on Page 9.

IF SI Termination Criteria are NOT met, THEN E-1 Actions Are Continued on Page 10.)

Cook Plant Units 1 & 2 Page 8 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior Note: Crew may transition to SI termination if criteria is met. This may involve stopping ECCS pumps and realigning charging until parameters change causing them to restart equipment and return to E-1 or ES-1.2. There are several points of transition to ES-1.2 from ES-1.1. The ES-1.1 Steps are listed below. The Scenario may be terminated upon transition to ES-1.2 US Announces transition to ES-1.1, Safety Injection Termination (step 6 of E-1).

RO/BOP Reviews ES-1.1, Foldout Page Criteria.

Monitors RCS Subcooling >40°F and PZR Level >16%, if NOT realign ECCS and GO TO E-1 US Directs Actions of ES-1.1 RO/BOP Performs the following as directed:

1. Resets both trains of Safety Injection

2. Resets both trains of Phase A

3. Establishes Control Air to Containment CREW Check if RCS Pressure is stable or Rising If Lowering, Transition to ES-1.2 RO/BOP Performs the following as directed:

1. Establish Normal Charging Flowpath

2. Isolate BIT Injection CREW Check if:

Pressurizer Level is stable and

RCS Pressure is Stable or Rising If NOT, Transition to ES-1.2 CREW Check if transition is made to ES-1.2, then perform the following:

Reset SI

Reset Containment Isolation:

Establish Control Air To Containment TERMINATE SCENARIO Cook Plant Units 1 & 2 Page 9 of 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior US/RO Check if RHR can be stopped:

Check RCS Pressure > 300 psig and stable

Reset SI Shutdown RHR and place in Standby BOP Shutdown Unloaded EDGs.

US Announces transition to ES-1.2, Post LOCA Cooldown and Depressurization (at step 12).

CREW Check if transition is made to ES-1.2, then perform the following:

Reset SI

Reset Containment Isolation:

Establish Control Air To Containment TERMINATE SCENARIO Cook Plant Units 1 & 2 Page 10 of 14

Critical Task Summary (NRC 2016-02)

Task Elements Results

1 Cueing: SAT / UNSAT Manually

All turbine stop valves closed status lights - LIT Trip/Isolate Main (E-0, Step 2)

Turbine Performance Indicators:

Manually Actuate Turbine Trip

-OR-

Manually Actuate AMSAC

-OR-

Manually Isolate Main Steam Lines

Prior to entering ECA-2.1 Performance Feedback:

All turbine stop valves closed status lights - LIT

-OR-

Main Steam Lines Isolated

MRV-210

MRV-220

MRV-230

MRV-240 Cueing:

RCS pressure - less than 1300 psig AND CCPs

2 or SI pumps - at least one running SAT / UNSAT

E-0, Foldout Page, Step 1 Manually trip all

E-1, Foldout Page, Step 1 Reactor Coolant

E-1, Step 1 Pumps Performance Indicators:

Manually stop all Reactor Coolant Pumps (RCPs) when RCS pressure is less than 1300 psig.

RCPs must be tripped within 5 minutes of the trip criteria being met.

Performance Feedback:

RCP ammeters - zero current

RCP trip low flow alarms - lit

RCS loop flow meters - flow lowering Cook Plant Units 1 & 2 Page 11 of 14

Simulator Instructions (NRC 2016-02)

Setup:

1. Reset to IC-733 MOL, 80% power , 888 MW, 864 ppm, 565.7 F 198 Steps on D

2. Reset control rods and check group step counters

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position

4. Advance chart recorder paper & clear chart recorder memory

5. Update PPC Chart Recorders VCT 20-70, PWR 70-90%, Tavg/Tref 561-571°F

6. Go to RUN and acknowledge/clear alarms

7. Verify MW OUT Selected on Main Turbine

8. Insert Malfunction:

TC03 to cause an Automatic Turbine Trip failure U1_TC03

RP20C to Cause Slave Relay Failure U1_RP20C (CCP,CCW,SI,RH pumps dont auto start)

U1 RX Trip on Trigger 5 U1 RX Trip onT5

East CCP trip 5 seconds after RX Trip U1_ECP (continued on next page)

Cook Plant Units 1 & 2 Page 12 of 14

Simulator Instructions (NRC 2016-02)

Scenario:

EVENT #1 Before the crew has started a power escalation, insert ICF U1_QLC451, final value 0 over 2 sec (QLC-451 fails Low).

U1_QLC451 If directed to energize interposing relay for QLC-451 then use:

Remote Function RPR157 to Trip LBX-112B U1_RPR157 NOTE: Ensure Crew has Caution Tags (> 2).

EVENT #2 Complete (sign-off) 1-OHP-4021-001-006 up to Step 4.77 EVENT #3 Insert Malfunction U1_QTC302, final value 175 (Letdown Temp Controller fails High) when crew has made a power change.

U1_QTC302 If contacted as MTI investigate Letdown Temp controller, report back after some 5 min.

delay that additional testing will be required to identify the problem.

(USE isd or MP u1_cvxqtc302_inp if local temp is taken with a pyrometer)

Local Indicator QTC-302 reads 175°F.

EVENT #4 Insert Malfunction U1_FFC220, final value 2 (FFC-220 fails LOW) after crew has recovered from Letdown temperature controller failure.

U1_FFC220 Cook Plant Units 1 & 2 Page 13 of 14

Simulator Instructions (NRC 2016-02)

EVENT #5,6,7 Initiate the following to lead to a Reactor Trip / Safety Injection (E-0 Entry).

IMF RC16, final value 100 (PZR Steam Space LOCA/ PZR Steam Space Manway Leak):

U1_RC16 Turbine Trip Auto Failure U1_TC03.

Slave Relay Failure U1_RP20C East CCP Trip U1_ECP Local actions after entry into E-0:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01

Aux Tour will monitor Spent Fuel Pool Radiation, Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A EGR 03B U1_EGR03B U1_EGR03B EGR 04A U1_EGR04A U1_EGR04A EGR 04B U1_EGR04B U1_EGR04B Cook Plant Units 1 & 2 Page 14 of 14

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No: NRC 2016-03 Op-Test No: _________

Examiners: _________________ Operators: ___________________

Initial Conditions: MOL 1% Pwr, Manual Aux Feed to SG, Turbine offline Turnover: Start the Middle Condensate Booster Pump, Raise Power to 3% for MFW Pump Start-up (Extra-RO will start the MFP)

Event Malf. No. Event Event No. Type* Description 1 N-BOP Start the Middle Condensate Booster Pump.

2 R-RO Raise Power to 3% Power.

I-RO U1_NLP151 3 Pressurizer level channel CH 1: 1-NLP-151, fails High 100 TS C-RO 4 ED07B PZR HTR Transformer Fails (11PHC Fails).

TS 5 CLC10 to 0% I-BOP Hotwell Level Transmitter CLC-10 Fails LOW.

C-BOP RX11D 6 SG PORV Controller Failure.

@100%

TS ED01 Loss of All AC Power.

ED25 7 M ED03A 1CD EDG Trip.

EG06B 8 EG08A C-BOP 1AB EDG Speed Governor Failure.

9 FW48C C-BOP TD AFW Pump Fails to AUTO start.

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Cook Plant Units 1 & 2 Page 1

Appendix D Required Operator Actions Form ES-D-2 Summary The BOP is directed to start the Middle Condensate Booster Pump (CBP). The operator will place the Middle CBP in service in accordance with the normal operating procedure.

The Crew is directed to raise power to 3-4% for MFW Pump Start-up.

The third event will involve the Pressurizer Level Controlling Channel NLP-151 failing high The RO will have to manually control level. The crew will need to implement an Abnormal Operating Procedure, select an operable channel, and restore Pressurizer Level controller to auto, and address Technical Specifications.

A failure of the PZR HTR Bus 11PHC will occur. The PZR SCR heater control will need to be transferred to 11PHA. The crew should also refer to Technical Specifications.

Then the Hotwell Level Transmitter CLC-10 fails LOW. The low failure will cause the Condensate Makeup valve (CRV-55) to fully open and the Condensate Letdown Valve (CRV-155) to fully close causing a rise in actual hotwell level. The BOP will be required to take manual control of the Hotwell Level Controller and return hotwell level to a normal band. The non failed hotwell level input may be selected for subsequent auto control.

The next event will involve the failure of the SG #14 PORV Controller. The controller will fail causing PORV 1-MRV-243 to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV and the US will need to declare the associated radiation monitor inoperable.

The Major event is a loss of all AC power. The reactor will trip. Failure of the EDGs will require entry into ECA-0.0 actions. Failure of the TDAFW Pump to auto start will require a manual start to restore feedwater flow. The crew will be required to take actions to restore Emergency Power (EP). The crew should transition to ECA-0.1 once power has been restored to one Safeguards Bus. The scenario will terminate when the crew has restored emergency power and transitioned to ECA-0.1 or ECA-0.2.

Critical Tasks Establish AFW (Start TDAFWP)

Restore Emergency Power to Safeguards Bus Procedures E-0, Reactor Trip or Safety Injection ECA-0.0, Loss of All AC Power Cook Plant Unit 1 & 2 Page 2 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 1 Event

Description:

Start the Middle Condensate Booster Pump Time Position Applicant's Actions or Behavior US Directs actions of 1-OHP-4021-054-001, Attachment 2, Operation of Hotwell (HW) and Condensate Booster (CB) Pumps to start the Middle CB Pump.

US Directs the following actions to realign condensate system:

Start the Middle CB pump.

BOP Performs the following to swap CB Pumps as directed:

1. Places the following switches in NEUTRAL:

Standby CB Pump

Standby HW Pump

Standby TACW Pump

2. Starts the Middle CB Pump.

3. Directs operator to verify CRV-224 closed.

4. Places the following switches in AUTO:

Standby CB Pump

Standby HW pump

Standby TACW pump Note: If desired, crew may remove power from 1-CRV-202, Middle CBP Emergency Leak-Off.

Note: Ann. 116, Drop 73, CNDST BOOSTER PUMP DISCH PRESSURE LOW may annunciate during this evolution.

Cook Plant Unit 1 & 2 Page 3 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 2 Event

Description:

Raise Power to 3-4% Power Time Position Applicant's Actions or Behavior RO Briefs crew on reactivity plan for power rise.

US Reviews reactivity plan.

US Directs RO to commence Power Escalation in accordance with 1-OHP-4021-001-006, Power Escalation procedure.

RO Commences power rise.

Verifies Control Rod Selector in Manual indicating rod Speed 48 Steps/min.

Place Rod Control to withdraw for desired number of steps (0.5 to 3)

Verify expected response on RCS Tavg, Delta-T power and steam dump demand.

US Acts as reactivity manager.

Cook Plant Unit 1 & 2 Page 4 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 3 Event

Description:

Pressurizer level channel CH 1: 1-NLP-151, fails high Time Position Applicant's Actions or Behavior CREW Respond to ANNUNCIATOR #108, Drop 1 Pressurizer Level High-High and Drop 3 Pressurizer Level High Deviation Alarms RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Restores PRZ level using manual control of EITHER:

PRZ Level Control (master controller)

-OR-

1-QRV-251, CCP discharge flow controller.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

RO Note that CH 1: 1-NLP-151, failed high

Check PRZ Level - Stable or Trending to Program Level -

Place PRZ control in Manual and restore PRZ Level to Program Level

Check Letdown - IN SERVICE - Minimize Charging Flow if Letdown Isolated US Enters and directs actions of 1-OHP-4022-013-010, Pressurizer Level Instrument Malfunction Continued on Next Page Cook Plant Unit 1 & 2 Page 5 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 3 Event

Description:

Pressurizer level channel CH 1: 1-NLP-151, fails high Time Position Applicant's Actions or Behavior RO Check for Failed PRZ Level Instrument and perform the following:

IF 1-NLP-151 is the Control channel, THEN verify PRZ Level control in MANUAL using one of the following:

PRZ Level Control (master controller)

-OR-

1-QRV-251, CCP discharge flow controller.

Verify PRZ Level CTRL selector switch (1-LS-459-D) in CHANNELS 2 & 3 position.

Verify PRZ Level Rec selector switch (1-LS-459-E) in CHAN 2 or CHAN 3 position.

Check 1-NPP-151, Pressurizer Pressure Channel 1, for failure.

Check Letdown And PRZ Heaters In Service:

PRZ level - Greater than 17%

Letdown - In Service

Pressurizer Heaters Not Tripped

Check PRZ Level Control In Auto:

1-QRV-251, CCP discharge flow controller in - Auto

Check PRZ Level Control in - Auto US Refers to Tech Specs (TS) :

TS 3.3.1, Reactor Trip System (RTS) Instrumentation (Table 3.3.1-1)

Function 9, Pressurizer Water Level - High.

Condition A - Refer to Table

Condition D - 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to trip bistables (When above P-7)

TS 3.3.3 Post Accident Monitoring (Minimum channels are met) -

N/A.

TS 3.3.4 Remote Shutdown Instrumentation Condition A - 30 Days to restore to operable US Notifies SM/MTI to Initiate actions to trip bistables associated with NLP-151 PZR Level Failure per Attachment A of 1-OHP-4022-013-010.

Cook Plant Unit 1 & 2 Page 6 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 4 Event

Description:

Pressurizer Heater Transformer (TR11PHC) Fails Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Panel 108, Drops 46 and 50, indicative of a pressurizer (PRZ) heater power supply failure.

RO Reenergizes PRZ control (cycling) group heaters per 1-OHP-4024-108, Drop 46 annunciator response, as follows:

Opens breaker CB11PHC6

Closes breaker CB11PHA6 (Drop 50 clears)

RO Monitors PRZ pressure response and ensures normal PRZ heater operations for PHA supplied heaters.

US Refers to Tech Specs (TS):

TS 3.4.9.b Pressurizer - (Condition B.1) due to a loss of 1 train of pressurizer heaters. Restore B/U heaters to operable within 72 Hours.

Note: This TS prevents entry into Mode 1.

Cook Plant Unit 1 & 2 Page 7 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 5 Event

Description:

Hotwell Level Transmitter CLC-10 fails Low Time Position Applicants Actions or Behavior BOP Acknowledges and reports alarms on Ann. Panel 116 as applicable:

Drop 1, CONDENSER A HOTWELL LEVEL HIGH

Drop 11, CONDENSER B HOTWELL LEVEL HIGH

Drop 21, CONDENSER C HOTWELL LEVEL HIGH BOP Identifies that Hotwell Level Controller CLC-10 is failed as indicated by:

Condensate Makeup Valve (CRV-55) fully open

Condensate Letdown Valve (CRV-155) fully closed

Rising hotwell level on CLC-30 BOP Places Hotwell Level Controller in HAND and adjusts controller output to maintain normal hotwell level.

BOP Performs one of the following:

Maintains Hotwell level in MANUAL.

-OR-

May select CLC-30 as the controlling channel and places the HW Level Controller back to AUTO.

Cook Plant Unit 1 & 2 Page 8 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 6 Event

Description:

SG PORV Controller Failure Time Position Applicant's Actions or Behavior BOP Recognize and reports Annunciator #114 Drop 24 that indicates SG #4 PORV MRV-243 has opened.

BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place SG PORV #4 in MANUAL and closes SG #4 PORV.

US Direct operator actions to close SG #4 PORV and monitor Reactor Power.

US Declares the SG #4 PORV Radiation Monitor MRA-1602 inoperable.

US Refers to the following Tech Specs (TS) / Tech Requirements Manual (TRM):

TS 3.7.4, SG PORVs - (Note: Only Manual Ops Required) - N/A

TRM 8.3.8. Radiation Monitoring Instrumentation, Condition C.1-Restore channel/monitor to operable status within 7 Days (PORV must be able to auto open for Radiation Monitor but not PORV safety Function.)

Cook Plant Unit 1 & 2 Page 9 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 7/8/9 Event

Description:

Complete Loss of All AC Power - 1AB/CD Emergency Diesel Generator Failure; Turbine Driven AFW Pump Fails to Auto Start Time Position Applicant's Actions or Behavior CREW Identifies the need for a Reactor Trip and trips the reactor manually.

US Directs RO/BOP to perform the immediate actions of 1-OHP-4023-E-0 (E-0), Reactor Trip or Safety Injection.

RO Performs the (primary) immediate actions of E-0:

1. Verifies reactor trip

2. Checks safety injection status BOP Performs the (secondary) immediate actions of E-0:

1. Checks turbine trip

2. Checks power to AC emergency buses:

Reports that NO AC emergency buses are energized Note: Crew may enter ECA-0.0, Loss Of All AC Power, directly.

US Announces transition (or entry) to 1-OHP-4023-ECA-0.0 (ECA-0.0), Loss Of All AC Power and directs RO/BOP to perform immediate actions for ECA-0.0.

US Announces RX Trip over Executone RO/BOP Performs the immediate actions of ECA-0.0:

Checks reactor trip

Checks turbine trip US Ensures immediate actions are completed and directs subsequent actions of ECA-0.0.

RO Checks RCS isolated:

1. Checks PRZ PORVs closed (NRV-151, 152 and 153)

2. Checks letdown isolation valves closed (QRV-111 and 112)

3. Checks excess letdown isolation valves closed (QRV-113 and 114)

BOP Checks AFW flow > 240,000 PPH:

1. Manually starts the Turbine Driven AFW (TDAFW) Pump

2. May throttle TDAFW FMOs to establish > 240,000 PPH but heat sink requirements are met with SG Levels.

Cook Plant Unit 1 & 2 Page 10 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 7/8/9 Event

Description:

Complete Loss of All AC Power - 1AB/CD Emergency Diesel Generator Failure; Turbine Driven AFW Pump Fails to Auto Start Time Position Applicant's Actions or Behavior US Identifies that:

NEITHER EDG (AB nor CD) is available

NEITHER the T11A nor the T11D bus is energized US Identifies Emergency Power (EP) source is AVAILABLE.

US Directs Restoration of 4KV Power From EP using Attachment D.

RO Directs AEO to manually isolate RCP Seals by closing :

Critical Task

1-CS-311N

1

1-CS-311S

1-CS-307

1-QCM-350 (locally)

BOP/US Places the following equipment in Pull-To-Lock:

MDAFPs

CCPs

RHR Pumps

SI Pumps

CTS Pumps

CCW Pumps

ESW Pumps

NESW Pumps Open PRZ Heater Breakers

T11-A6

T11-D9 BOP/US Identifies that the EITHER Train - Load Conservation lights are NOT LIT and that the Offsite Emergency Power is supplying the EP bus.

BOP Energizes EITHER emergency bus (T11A or T11D) from EP as directed:

Critical Task 1. Checks bus - not faulted

2

T11A - Panel 119 Drops 75 & 88 (T11B Drops 96 & 98)

T11D - Panel 119 Drops 96 & 98 (T11C Drops 75 & 88)

2. Places EDG supply to bus in pull to lock

3. Places Load Conservation Switch in LOAD CON

4. Closes 4KV EP supply to bus and energizes bus RO Isolates Seal Return and RCP CCW Return line from Thermal Barrier:

Critical Task

QCM-350 OR QCM-250 - CLOSED

1

CCM-454 OR CCM-453 - CLOSED Cook Plant Unit 1 & 2 Page 11 of 16

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-03 Event No.: 7/8/9 Event

Description:

Complete Loss of All AC Power - 1AB/CD Emergency Diesel Generator Failure; Turbine Driven AFW Pump Fails to Auto Start Time Position Applicant's Actions or Behavior BOP Energizes emergency bus (T11B or T11C) from EP as directed:

1. Checks bus - not faulted

2. Places DG supply to bus in pull to lock

3. Closes 4KV EP supply to bus and energizes bus RO/BOP Checks RCS Temperature stable or trending to 547ºF.

RO/BOP Realigns Equipment following power restoration:

Start ESW Pump and verifies discharge valve opens.

Return Load Conservation Switch to NORMAL.

Reset and start one Control Room AHU.

US Based on RCS subcooling and PRZ level, announces transition to:

ECA-0.1, Loss Of All AC Power Recovery Without SI Required

-OR-

ECA-0.2, Loss Of All AC Power Recovery With SI Required if Subcooling is < 40 ºF OR Pressurizer level is < 16%.

TERMINATE SCENARIO Cook Plant Unit 1 & 2 Page 12 of 16

Critical Task Summary (NRC 2016-03)

Task Elements Results

1 Cueing: SAT / UNSAT CLOSE QCM-350 and/or Dispatch an operator to locally Isolate Seal Return close QCM-350 (ECA-0.0, Step 1.c & 4d, Attachment D )

CLOSE QCM-250 and/or Dispatch an operator to locally close QCM-250 (ECA-0.0, Step 7d, Attachment D )

Performance Indicators:

QCM-350 OR QCM-250 Closed before CCP pump starts or is restarted (Within 15 Minutes of Loss of All AC)

Performance Feedback:

QCM-350 Close Lights Lit or field report OR

QCM-250 Close Lights Lit

2 Cueing: SAT / UNSAT

Restore AC Power (ECA-0.0)

Restore Emergency

T11 A, B, C, D Energized Lights - NOT Lit Power Performance Indicators:

Power should be restored prior to depressurizing intact SGs to 190 psig (ECA-0.0, Step 19):

Restores emergency power (EP) to at least one 4KV emergency (pump) bus (i.e., T11A or T11D).

Performance Feedback:

T11A or T11D bus energized

Power available to safeguards equipment.

Cook Plant Unit 1 & 2 Page 13 of 16

Simulator Instructions (NRC 2016-03)

Setup:

1. Reset to IC- 730 1294.93 ppm, 150 steps on Rods, 549.3°F

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Set Up PPC Digital Display to Point U0485 (Delta T Power)

5. Advance chart recorder paper & clear chart recorder memory.

6. Verify/Activate the following (pre-load) malfunctions:

IMF EG08A, AB EDG Speed Governor Failure U1_EG08A

IMF FW48C, TD AFW pump fails to AUTO start U1_FW48C

IMF SFR401, SJAE Flow to Maintain Steady Low Power Values U1_SFR401

7. Assign the following Event Trigger 9:

IMF ED01, Delay 10 secs, Loss of 345 KV Bus 1 U12_ED01

IMF ED25, Delay 12 secs, Loss of 765/345 KV Transformer Bank No. 4 U12_ED25

IMF E03A, Delay 15 secs, Loss Of Reserve Auxiliary Transformer TR-101AB U1_ED03A

EG06B Delay 30 secs, CD EDG Trip U1_EG06B Cook Plant Unit 1 & 2 Page 14 of 16

Simulator Instructions (NRC 2016-03)

Scenario:

EVENT #1 Report as AEO as required:

Starting Party is standing-by, the Middle CB Pump is ready for start. Maintenance verified the oil pump is primed and has added oil IAW 1-OHP-4021-054-001.

Oil Pressure is 5 psig after pump start.

1-CRV-224 is closed Report as required to other departmental requests.

If asked to remove power from 1-CRV-202, insert ZDIVDAB13_U1 to OFF (May need to use Soft Panel for VDAB)

EVENT #2 NOTE: Ensure 1-OHP-4021-001-006, Power Escalation procedure is sign-off thru step 4.7 and steps have been completed on the simulator.

EVENT #3 Insert malfunction U1_NLP151, final value 100 (PZR Level NLP151 fails High) when crew has performed the power change.

U1_NLP151 EVENT #4 After the crew has responded to the PZR level failure, insert IMF ED07B (PZR heater transformer fails). U1_ED07B As AEO, report T11D9 tripped on Overload/Overcurrent.

Cook Plant Unit 1 & 2 Page 15 of 16

Simulator Instructions (NRC 2016-03)

EVENT #5 When the PRZ heater transformer failure is inserted, also insert ICF U1_CLC10, Final Value 0, to fail Hotwell Level Transmitter (CLC-10) Low.

U1_CLC10 and close overboard valve U1_FWR20 Note: Takes ~8 minutes before alarms come in.

Monitor u1_msxcla10_inp for Hotwell level - alarms at 588.333 If Dispatched to restore fuses for 1-CMO-155 U1_EDPR37Z Report back that Fire Watch and Chemistry have been notified.

EVENT #6 After the crew has responded to the Hotwell level transmitter failure, then insert RX11D, final value 100 (SG PORV Controller failure). U1_RX11D EVENT #7 - 9 After the crew has responded to the SG PORV failure, insert Event Trigger 9.

Activate Trigger 9

IMF ED01, Delay 10 secs, Loss of 345 KV Bus 1

IMF ED25, Delay 12 secs, Loss of 765/345 KV Transformer Bank No. 4

IMF E03A, Delay 15 secs, Loss Of Reserve Auxiliary Transformer TR-101AB

EG06B Delay 30 secs, CD EDG Trip If directed to locally close seal injection valves (1-CS-311N, 311S and 307) then activate remote functions:

IRF CVR20, Final Value 0 (CLOSE) U1_CVR20

IRF CVR21, Final Value 0 (CLOSE) U1_CVR21 If directed to locally isolate RCP Seal Water Return Valve (1-QCM-350) then activate remote function:

IRF CVR77, Final Value 0 (CLOSE) U1_CVR77 Cook Plant Unit 1 & 2 Page 16 of 16

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No: NRC 2016-04 Op-Test No: _________

Examiners: _________________ Operators:___________________

Initial Conditions: MOL 57% pwr; 602MW, 931 ppm, 559.6 F, 179 Steps on D East Motor Driven AF Pump OOS.

Turnover: Perform ESW Pump Strainer Backwash. Raise Power to 80%

Event Malf. No. Event Event No. Type* Description 1 N-BOP Perform ESW Strainer Backwash U1_RX08A @

2 C-RO Spray Valve fails open in Auto 100 3 R-RO Raise Reactor Power to 80%

U1_CBPN 4 U1_FW58B C-BOP North CB pump trip; Middle CB pump fails to start in AUTO U1_FW58C U1_NPP151 I-RO 5 Pressurizer Pressure Channel NPP-151 Fails Low

@ 1700 TS U1_MPP242 I-BOP SG 4 Pressure Channel (MPP-242) fails High (SG #14 PORV 6

@1200 psig TS fails open)

U1_RC10A to 20% over 5 min. ramp Large Break Loss of Coolant Accident on Loop 1 7 Major U1_RC01A at (Starts Out Slowly) 50% after 5 min.

U1_RHR17 -

RO, 8 C-RO 1W RHR Pump Fails to AUTO Start on SI ZLO101TA4_

U![GRN]

9 U1_ERHR C-RO 1E RHR Pump Trips 15 minutes after SI

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Cook Plant Units 1 & 2 Page 1

Appendix D Required Operator Actions Form ES-D-2 Summary The scenario starts with the plant at 57% power with the Both Main FW Pumps in service.

The crew is directed to perform a PMT on the East ESW Pump Strainer (Manual Backwash)

The first failure involves a failure of one of the PZR Spray valves will fail Open while in Auto. The crew will respond to lowering RCS pressure by closing the valve in manual using OHP-4022-IFR-001.

After the Pressurizer Spray Valve Failure, the crew is directed to raise power.

The next event is a trip of the North Condensate Booster pump. This will result in reduced feedwater capability. BOP will be required to manually start the Middle or South Condensate Booster pump. Crew will be required to implement compensatory actions to stabilize the plant.

A short time later the Pressurizer Pressure Controlling Channel, NPP-151, fails LOW. The RO will be required to take manual control of Pressurizer Pressure Master Controller and restore normal pressure control. The Crew will implement the Abnormal Operating Procedure, address Technical Specifications, select an operable channel, and restore pressure control to automatic.

Next a failure of SG #14 Pressure Channel (MPP-242) fails high causing SG #14 PORV to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV, the crew will implement AOP actions, and the US will need to declare the associated radiation monitor inoperable.

Shortly after the SG Pressure Channel failure, a LOCA will slowly develop resulting in a large break LOCA. The plant will trip and Safety Injection will actuate. As the crew performs the actions of E-0 they will note that the 1W RHR pump failed to auto start on the SI. The crew will transition to E-1 and to ES-1.3 to align for cold leg recirculation. The 1E RHR will trip 15 minutes into the event. The crew will have to align ECCS to the recirculation sump without the 1E RHR pump. The scenario will terminate when the crew has aligned ECCS for cold leg injection.

Critical Tasks Establish Low Pressure SI (RHR)

Establish Cold Leg Recirculation Procedures E-0 Reactor Trip or Safety Injection E-1 Loss of Reactor or Secondary Coolant ES-1.3 Transfer to Cold Leg Recirculation Cook Plant Units 1 & 2 Page 2 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 1 Event

Description:

1E ESW Pump Strainer Backwash Time Position Applicant's Actions or Behavior BOP Perform ESW Strainer Backwash per 12-OHP-4021-019-001 Attachment 36 BOP Manually backwashes the 1E ESW pump strainer

Places backwash selector in RIGHT position

Places strainer control in MANUAL

May depress manual BACKWASH pushbutton (for additional backwash)

Cook Plant Units 1 & 2 Page 3 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 2 Event

Description:

Pressurizer Spray Valve NRV-163 Controller Fails to 100%

Time Position Applicant's Actions or Behavior RO Performs the following:

Recognizes and reports Ann. Panel 108, Drop 8, PRESSURIZER PRESS LOW DEV BACKUP HTRS ON.

Identifies that NRV-163 PRZ spray valve is open US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US/RO Directs RO to take Manual Control of 1-NRV-163 and Restore Pressurizer pressure.

RO Performs the following:

Manually closes 1-NRV-163 PRZ Spray Valve

Monitors PRZ pressure control system and ensures pressure returns to normal conditions (~2235 psig).

US May enter the following TS if Pressure lowers to <2200 psig during the transient:

3.4.1 DNB & Tavg Parameters (if RCS pressure goes <2200 psig.)

Cook Plant Units 1 & 2 Page 4 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 3 Event

Description:

Raise Turbine Load / Raise Reactor Power Time Position Applicant's Actions or Behavior RO Calculates the dilution required per 1-OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power escalation.

US Reviews reactivity plan.

US Directs RO to commence Power Escalation in accordance with 1-OHP-4021-001-006.

RO Performs DILUTION (batch add OR continuous):

Place RC Makeup Blend control switch in STOP

Place RC Makeup Blend Control Mode switch in DILUTE or ALT DILUTE

Adjust PW to the desired flow rate and/or amount.

May close QRV-451 if aligning to CCP Suction Only

Place RC Makeup Blend control switch in START

May take QRV-303 to Manual and Open as required to maintain VCT Level and Pressure.

RO/BOP Commences escalation:

Raises turbine load (reactor power) using the DCS HMI.

Maintains Tavg/Tref deviation within limits by dilution and turbine load adjustments. (Administrative Limits of +/- 2°F)

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP Acts as peer checker for RO during blender operations and with RO verifies appropriate reactivity feedback.

RO Verifies appropriate reactivity feedback.

BOP Monitors and maintains main electrical generator temperatures within limits per:

1-OHP-4021-059-001, Generator Stator Cooling Water System

1-OHP-4021-080-003, Generator Hydrogen Gas System Cook Plant Units 1 & 2 Page 5 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 4 Event

Description:

North CB pump trip; Middle CB pump fails to start in AUTO Time Position Applicant's Actions or Behavior BOP Recognizes feedwater control problem and reports Panel #116 alarms:

Drop 73 - CNDST BOOSTER PUMP DISCH PRESSURE LOW Drop 71 - CNDST BOOSTER PUMP MOTOR INSTANT TRIP US Directs operator actions to stabilize the unit and restore Condensate Booster pump flow.

RO Monitor RCS & Secondary parameters during transient.

BOP

Manually start the Middle CB pump.

May Place North CB pump control switch to TRIP and back to NEUTRAL (Clear Alarms).

Monitor Secondary parameters for normal operations.

May Dispatch an AEO to Check CRV-224 Low Pressure Heater Bypass Closed US/RO Stabilize Power, if desired:

Place Main Turbine on HOLD (at constant load) as desired.

Cook Plant Units 1 & 2 Page 6 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: _____ Scenario No.: NRC 2016-04 Event No.: 5 Event

Description:

Pressurizer Pressure Channel (NPP-151) Fails Low Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Panel #108 indicative of a pressurizer (PRZ) pressure instrument failure (Drops 8, 9, 10).

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

1. Restores PRZ pressure using manual control of EITHER:

PRZ pressure master controller

Both PRZ spray valve controllers US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-009, Pressurizer Pressure Instrument Malfunction procedure.

RO Performs the following actions as directed:

1. Reports NPP-151 has failed

2. Ensures PRZ pressure master controller is in manual

3. Places PRZ Press Ctrl selector switch in Ch 2 & 3 position

4. Places the following recorder switches in Ch 2, 3 or 4 position:

PRZ Press Rec selector

Delta T selector

Overpower Delta T selector

Overtemp Delta T selector

5. Verifies QMO-225, E CCP Leakoff is open

6. Dispatches Aux operator to open breaker for QMO-225 (1-ABV-D-5C)

7. Checks NLP-151, PRZ Level Channel 1 and NLI-151, PRZ Level Cold Calibration instruments for failure

8. Nulls (~2235#) and returns the following controllers to auto:

Both PRZ spray valve controllers

PRZ pressure master controller

9. Verify P-11 is in its correct state.

(Continued on Next Page)

Cook Plant Units 1 & 2 Page 7 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: _____ Scenario No.: NRC 2016-04 Event No.: 5 Event

Description:

Pressurizer Pressure Channel (NPP-151) Fails Low Time Position Applicant's Actions or Behavior US Declares the East Centrifugal Charging Pump inoperable.

US Refers to ITS LCO:

3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 6, 8a, 8b - Cond D)

3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1d, 8b - Cond D &

G) (6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to trip bistables)

3.3.4 Remote Shutdown Instrumentation (Table B3.3.4-1 Function 2 Cond A - 30 Days)

3.4.1 DNB & Tavg Parameters (if RCS pressure goes <2200 psig.)

3.5.2 ECCS Subsystems (Cond A - 72 hr)

TRM 8.1.1 Boration Systems (Cond A - 72 hr)

TRM 8.7.14 Thermal Power (Only applicable greater than 3250 MWt -

NA)

US Notifies SM/MTI to initiate actions to trip bistables associated with NPP-151 PZR Pressure Failure per Attachment A of OHP-4022-013-009.

RO Monitors PRZ pressure response and ensures normal PRZ heater operations Cook Plant Units 1 & 2 Page 8 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 6 Event

Description:

SG #4 Press. Failure (MPP-242) Fails HIGH - #4 SG PORV Opens Time Position Applicant's Actions or Behavior BOP Recognize and reports Annunciator Panel #114, Drop 24, 1-MRV-243 OP OR HSD1 PANEL OVERRIDE alarm that indicates SG #4 PORV (MRV-243) has opened.

Panel 113 Drop 14 May also alarm.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Direct operator actions to determine cause, reclose SG #4 PORV, and monitor Reactor Power.

BOP Place SG PORV #4 in Manual and Closes #4 PORV.

US Enters and directs actions of 1-OHP-4022-013-012, Steam Generator Pressure Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Checks SG PORVs closed.

2. Reports MPP-242 has failed high.

3. Returns MFP P controller to auto (if placed in manual).

US Refers to TSs / TRM:

TS 3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1.e (1& 2) &

4.d - all Condition D) Trip bistables in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months

TS 3.7.4, SG PORVs (Note: Only Manual Ops Required) - N/A

TRM 8.3.8. Radiation Monitoring Instrumentation (Table 8.3.8-1, Function 2.b - Condition C)

Declares MRA-1602 inoperable

Restore in 7 days US Notifies SM/MTI to Initiate actions to trip bistables associated with MPP-242 Steam Generator Pressure Instrument Failure per Attachment D-3 of 1-OHP-4022-013-012.

Cook Plant Units 1 & 2 Page 9 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes after SI)

Time Position Applicant's Actions or Behavior RO/US Acknowledges Ann. Panel 122, Drop 83, ICE CONDENSER INLET DOORS OPEN, alarm and/or RMS PPC Alarms on Panel 111 and determines that a loss of reactor coolant is occurring based on the following:

Pressurizer and VCT level change

Charging and letdown flow mismatch

Containment radiation monitoring trend

Containment pressure rise

Containment sump level rise US May enter and direct actions of 1-OHP-4022-002-020, Excessive Reactor Coolant Leakage procedure.

RO Performs the following actions, if directed:

1. Manually raises charging flow to maintain pressurizer level.

2. Manually adjusts seal injection flow (6-12 gpm / each RCP).

3. Reduces/isolates letdown flow to maintain pressurizer level.

4. Attempts to determine RCS leak rate.

US Directs RO/BOP to manually trip the Reactor and perform the immediate actions of E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging or makeup system capability or rising containment pressure).

RO/BOP Perform the immediate actions of E-0:

1. Checks reactor trip.

2. Checks turbine trip.

3. Checks power to AC emergency buses.

4. Checks safety injection status.

US Ensures immediate actions of E-0 are completed.

RO/BOP Reviews E-0 Foldout Page Criteria.

US Directs subsequent actions of E-0.

Cook Plant Units 1 & 2 Page 10 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes after SI)

Time Position Applicant's Actions or Behavior RO/BOP Performs manual actions of E-0 Attachment A as directed by US.

RO/BOP Performs the following actions as directed:

Checks SGSVs closed (MSLI).

Checks CTS actuated Light LIT

Checks Cntmt Isol Phase B actuated.

Stops all RCPs.

Stops All Lower Cntmt Vent Fans (CLVs).

Stops All CRDM Fans.

RO/BOP Attachment A of E-0 Checks all ECCS pumps running and manually starts:

Critical

W RHR pump Task #1 RO/BOP Manually controls AFW flow to maintain SG narrow range levels 13% [28%] - 50% once one SG narrow range level is > 13% [28%].

CREW Completes all actions of E-0 through step 19 (Check If RCS Is Intact).

Checks CTS Pumps Started, SML 9A/9B Lights, and Spray Add Flow after actuated light is OFF US Announces transition to E-1, Loss Of Reactor Or Secondary Coolant (at step 19 of E-0).

NOTE:

Momentary entry into FR-P.1 will be required until crew verifies RHR flow sufficient to indicate a LB LOCA has occurred.

RO/BOP Reviews E-1 Foldout Page Criteria (see NOTE regarding cold leg switchover criteria).

NOTE:

When RWST level lowers to < 30% then the crew must immediately Transition to ES-1.3, Transfer To Cold Leg Recirculation.

See Page 12 for applicants actions or behaviors associated with ES-1.3, Transfer To Cold Leg Recirculation.

Cook Plant Units 1 & 2 Page 11 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes)

Time Position Applicant's Actions or Behavior US Directs actions of E-1, Loss Of Reactor Or Secondary Coolant.

RO/BOP Acknowledges Annunciator 106, Drop 45, RHR PUMPS MOTOR INSTANT TRIP and reports East RHR pump trip.

US/RO Identifies and reports that the East RHR pump has tripped:

Recognizes one train of RHR has lost recirculation capability

Verifies at least one train of cold leg recirculation capability exists BOP Maintains SG narrow range levels 20% - 50%.

BOP Performs the following as directed:

1. Stops running Emergency Diesel Generators (EDGs).

2. Dispatches operator to secure EDG jacket water pumps.

US Check if transfer to cold leg recirculation is required (RWST

<30%).

Cook Plant Units 1 & 2 Page 12 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes)

Time Position Applicant's Actions or Behavior Applicants actions or behavior associated with ES-1.3, Transfer To Cold Leg Recirculation.

US Announces transition to ES-1.3, Transfer To Cold Leg Recirculation when RWST level < 30% per:

E-0, Foldout Page, Criteria 3

E-1, Foldout Page, Criteria 5

E-1, Step 13 US Directs actions of ES-1.3,Transfer To Cold Leg Recirculation.

RO/BOP Resets both trains of Safety Injection.

RO/BOP Checks CCW return flow on each RHR Hx at 3000-3500 gpm.

(may only perform for the East CCW HX)

RO/BOP Checks the following prior to switching over to cold leg recirc:

RWST level < 20%

Cntmt water level > MIN RECIRC LEVEL US/RO Directs/Performs switchover as follows:

NOTE: If RWST level < 9% then stop CCPs and SI pumps.

Critical 1. Stops and locks out East CTS pump (if not previously Task #2 stopped).

2. Locks out East RHR pump(OOS).

3. Checks East CTS and East RHR pumps stopped

4. Initiates valve closure:

IMO-310, East RHR pump suction

IMO-215, East CTS pump suction from RWST

5. Stops and locks out West CTS pump (if not previously stopped).

6. Stops and locks out West RHR pump.

7. Checks West CTS and West RHR pumps stopped.

8. Initiates valve closure:

IMO-320, West RHR pump suction

IMO-225, West CTS pump suction from RWST Cook Plant Units 1 & 2 Page 13 of 19

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Crews Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes)

Time Position Applicant's Actions or Behavior US/RO Continues to direct/perform switchover as follows:

9. Restores control power to ICM-305, Recirc sump to East Critical RHR/CTS pumps.

Task #2 10. Checks ICM-305 open interlock:

IMO-310 fully closed

IMO-215 fully closed

11. Opens ICM-305.

12. Starts:

May attempt to start the East RHR pump (1 restart allowed)

East CTS pump if previously running.

13. Restores control power to ICM-306, Recirc sump to West RHR/CTS pumps.

14. Checks ICM-306 open interlock:

IMO-320 fully closed

IMO-225 fully closed

15. Opens ICM-306.

16. Starts

West RHR pump

Starts the West CTS pump if previously running.

17. Checks at least one RHR pump running on the recirc sump TERMINATE SCENARIO Cook Plant Units 1 & 2 Page 14 of 19

Critical Task Summary (NRC 2016-04)

Task Elements Results

1 Cueing: SAT / UNSAT

Check ECCS Pumps ALL running (E-0, Step 7 -

Manually starts Att. A Step 1) 1W RHR pump

Check RHR Hx Flow Indicated (E-1, Step 12.

(one low-head RNO)

ECCS pump)

Check Cold Leg Recirc Capability (E-1, Step 11)

Performance Indicators:

Starts the W RHR pump and ensures at least one train of low-head ECCS available for cold leg recirculation.

Must be performed prior to ES-1.3, Step 6.s Check At Least One RHR Pump - Running On Recirculation Sump.

Performance Feedback:

W RHR pump red run light lit

W RHR pump current indicated

W RHR pump flow indicated

2 Cueing: SAT / UNSAT

E-0 Foldout Page, Criteria 3 (switchover criteria)

Establish Cold Leg

E-1 Foldout Page, Criteria 5 (switchover criteria)

Recirculation Flow

E-1, Step 13, Check For Transfer To CL Recirc.

Performance Indicators:

At least one train of ECCS running aligned to the containment sump.

RHR pumps stopped for no longer than 5 minutes during switchover.

No total interruption of ECCS flow (CHG and SI) to the RCS during switchover.

Performance Feedback:

At least one train of ECCS pumps running /

indicating flow with suction aligned to Recirc Sump.

Cook Plant Units 1 & 2 Page 15 of 19

Simulator Instructions (NRC 2016-04)

Setup:

1. Reset to IC-732 MOL 57% pwr; 602MW, 931 ppm, 559.6 F, 179 Steps on D.

2. Reset control rods and check group step counters.

3. Verify that the North and South CB pumps are running w/ Middle CB pump in AUTO.

4. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

5. Advance chart recorder paper.

6. Set up PPC Recorders

7. Go to RUN and acknowledge/clear alarms.

8. Tagout 1E MDAFP as follows:

Place control switch in pull-to-lock

Place clearance tag on control switch U1_FWR61

Activate remote function FWR61, final value RO

9. Activate the following pre-load override/malfunction:

FW58B, Middle CB pump fails to start in AUTO U1_FW58B

FW58C, South CB pump fails to start in AUTO U1_FW58C

AN06_U1(48) RHR Alarm OFF AN06_U1(048)

RHR17 to RO (Prevent U1 W RHR start) U1_RHR17

ZLO101TA4_U1[GRN] ON ZLO101TA4_U1[GRN]

10. Assign the following to ET10:

SI Signal to event trigger ET10 U1 SI on Trg E10

U1_ERHR with a 15 minute delay to event trigger ET10 U1_ERHR

11. Assign the following to ET3

U1 W RHR in Close/after Close West RHR Close

U1_RHR17 to RI on ET3 RHR to RI

ZLO101TA4_U1[GRN] clear Clear RHR Stop Light

12. Assign the following to ET7:

Malfunction RC10A to 20% with a 2 minute ramp to event trigger ET7 U1_RC10A

Malfunction RC01A to 50% with a 5 minute delay to event trigger ET7 U1_RC01A Cook Plant Units 1 & 2 Page 16 of 19

Simulator Instructions (NRC 2016-04)

Scenario:

EVENT #1 No actions required.

EVENT #2 When the crew has completed the backwash, a failure of 1-NRV-163 PZR Spray valve Controller will cause the valve to fully Open while in Auto U1_RX08A EVENT #3 No actions required. (Prompt crew as Shift Manager if required to continue Power Escalation)

EVENT #4 When crew has performed the required power change, insert CBPN (North CB pump trip)

U1_CBPN If contacted as AEO to investigate Condensate Booster pump operations, report back after some 3 min. delay that all parameters are in the normal band and stable on the Middle CB pump. After 2 min., report an overcurrent trip on North CB pump breaker and that the motor smells of burnt insulation.

Report back that 1-CRV-224 Low Pressure Heater Bypass is Closed.

EVENT #5 Insert malfunction U1_NPP151, final value 1700 (NPP-151 fails LOW)

U1_NPP151 If directed to remove power from 1-QMO-225, then activate the remote function for breaker 1-ABV-D-5C. U1_EDPR10J Cook Plant Units 1 & 2 Page 17 of 19

Simulator Instructions (NRC 2016-04)

EVENT #6 After crew has addressed the spray valve failure, ICF U1_MPP242 final value 1200 once the power change has been demonstrated U1_MPP242 EVENT #7 After crew has recovered from the failed SG Pressure Channel failure, Activate Trigger 7 to start the RCS Leak\LOCA.

Activate TRG 7 EVENT #8 No additional actions required EVENT #9 Previously setup with a 15 minute delay to trigger ET10 IF the RHR Pump fails to trip after 15 minutes ERHR U1_ERHR Cook Plant Units 1 & 2 Page 18 of 19

Simulator Instructions (NRC 2016-04)

Local actions after entry into E-0:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01

Aux Tour will monitor Spent Fuel Pool Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A EGR 03B U1_EGR03B U1_EGR03B EGR 04A U1_EGR04A U1_EGR04A EGR 04B U1_EGR04B U1_EGR04B Cook Plant Units 1 & 2 Page 19 of 19

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No: NRC 2016-04(a) Op-Test No: _________

Examiners: _________________ Operators:___________________

Initial Conditions: MOL 57% pwr; 602MW, 931 ppm, 559.6 F, 179 Steps on D East Motor Driven AF Pump OOS.

Turnover: Perform ESW Pump Strainer Backwash. Raise Power to 80%

Event Malf. No. Event Event No. Type* Description 1 N-BOP Perform ESW Strainer Backwash U1_RX08A @

2 C-RO Spray Valve fails open in Auto 100 3 R-RO Raise Reactor Power to 80%

U1_CBPN North CB pump trip; Middle CB pump fails to start in AUTO 4 U1_FW58B C-BOP U1_FW58C DELETED U1_NPP151 I-RO 5 Pressurizer Pressure Channel NPP-151 Fails Low

@ 1700 TS U1_MPP242 I-BOP SG 4 Pressure Channel (MPP-242) fails High (SG #14 PORV 6

@1200 psig TS fails open)

U1_RC10A to 20% over 5 min. ramp Large Break Loss of Coolant Accident on Loop 1 7 Major U1_RC01A at (Starts Out Slowly) 50% after 5 min.

U1_RHR17 -

RO, 8 C-RO 1W RHR Pump Fails to AUTO Start on SI ZLO101TA4_

U![GRN]

9 U1_ERHR C-RO 1E RHR Pump Trips 15 minutes after SI

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Cook Plant Units 1 & 2 Page 1