ML17139B890

App E to Rev 1 to Control Sys Power Supply & Sensor Malfunction Study, Failure Modes & Effects Analysis

ML17139B890
Person / Time
Site:	Susquehanna
Issue date:	03/31/1982
From:	EDS NUCLEAR, INC.
To:
Shared Package
ML17139B884	List: ML17139B885 ML17139B887 ML17139B888 ML17139B890 ML17139B891 ML18040A709 ML18040B027 PLA-1894, Forwards Rev 1 to Control Sys Power Supply & Sensor Malfunction Study. Existing Sys Adequately Controls Facility
References
02-0160-1102-AP, 02-0160-1102-R1-APPE, 2-160-1102-AP, 2-160-1102-R1-APPE, NUDOCS 8310180501
Download: ML17139B890 (60)

Text

Report No. 02-0160-1102 Revision 0

APPENDIX E

FAILURE MODES AND EFFECTS ANALYSIS 8310i8050i 83i014 PDR ADQCK 050D0387 f

P PDR

)

3 7

0

Report No. 02.-0160-1102 Revision 0

GUIDE FOR USING THE FAILU'RE MODES AND EFFECTS ANALYSIS (FMEA) 1.

The FMEA's contained herein are segregated by common power supply or sensor.

Each system that 'is affected by this commonality is then analyzed individually to determine the appropriate failure information.

The two "Effects" columns on the FMEA's provide a summary of the results of the combined failure of all the components noted in the "Components" column.

Pacilitya Susquehanna Steam Electric Station Docket'0-387, 50-388 PAILURE HODES AND EPPECTS ANALYSIS Sheet 1

of 3

ICommou Power Supply or Sensor:

IIControl System Affected'0615 125VDC Reactor Peedwater Control S stem CSIDc 0160 004-001 CDc 0160-004-011 Job No.

Prepared bye Datea Checked bye Approved bye r.wl~-i rl Rev 0

Datea Date:

0160-004-671 Component Name and Number Pailure Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summaryx Effect Upon Control System Summarya Effect Upon Plant Performance

1. Reactor feed pump turbine Ac I

a. Trip circuit - Level 8 I

trip contacts De-ener-gized Trip circuit is de-ener-gized Level 8 trip signal cannot be processed Trip circuits for feed pump turbines 8 and C are powered by other DC poser supplies Loss of ability to trip turbine A on I.evel 8 trip signal There is no affect on plant performance unless Level 8 trip condition exists

Pacility:

Susquehanna Steam Electric Station Docket'0-387, 50-388 PAILUBE IIODES AND EPPECTS ANALXSIS Shoot 3

of 3

ICommon Powor Supply or Sonsor:

IIControl System Affoctod:

10615 125 VDC P ~R1 to d '1/d Co trol CSIDs 0160 004-001 CDa 0160-004-011 Job No.

Prepared by:

Dates Checked bya Approved bye 0160-004-671 Bov.

o Dates Da to'c Component Name and Numbor Pailure Node Symptoms and Local Effects Including Dopondont Failures System Inhoront Compensating Provision Summary c

Effect Upon Control System Summarys Effoct Upon Plant Performance

1. Trip and alarm switchosc a.

PSL<<11981A1, Bl/Thrust boaring waar detector and low bearing oil pressure b.

PSL-10180A/Low hyd rau 1 ic fluid pressure c.

PSL-11932A/Shaf t pump discharge low pressure

d. TSHH-10115AI-CI/Exhaust hood high tomporatura generator-ond trip o.

LSH-10127A. -28A. -29A/

Hoisturo separator re-haator drain tank 1A high water level Pail High IPail High IPail High I

I I

I IPai1 Low I

IPail Low PSLX-11981 Al, Bl will not energizes

- Contacts remain un-changed

~

PSLX-10180A will not energizes

- Contacts remain un-changed PSIX-11932A will not energizes Contacts remain un-changed

'I'SSH-10119A1-Cl will not energizes

- Contacts remain un" changed I.SHX-1027A will not energizes

- Contacts remain un-changod Logic arrangomont (2/3) in EHC trip system pre-vents a single power supply from interrupting the EHC trip logic If turbines are shut down, back-up unit pro-tection available for anti-monitoring Logic reduced to a 2/2 logic arrangomant-both remaining relays must energize to complete the trip configuration Loss of primary unit protection on generator

~ Any genorator malfunc-tions cannot induce an EIIC trip by way of pri-mary unit protection l

Logic for unit protectionl initiated EHC trip is reduced to 1/1 from 1/2 The loss of power does not causa an EHC trip.

thus there is no impact on overall plant por-formanco

Facilitya Susquehanna Steam Electric Station Docketc 50-387, 50-388 PAILURE HODES AND EFFECTS ANALySIS Shoot 2

of 3

Common Po<<er Supply or Sensors Control System Affected'D615 125VDC Recirculation Flow Control CSIDc 0160 004-001 CDs 0160-004-011 Job No.

Prepared bye Dates Checked bye Approved bye 0160-004-671 Rev.

0 D t

~l/

Datea ~

Component Name and Number Failure Node Symptoms and Local Effects Including Dependent Failures System Inherent Compensating Provision Summaryc Effect Upon Control System Summary t Effeet.Upon Plant Performance

1. Temperature switch:.

TSll-14021A2

2. Peedwater system control of reactor reci rculaticn system runback circuitry - recircu-lation flow loop A:

a. Feed<<ster low flow:

1.

PSL-10604A1 2.

FSL-1060481 3.

PS I -10604C1 b.

Peed<<a tor high le vs 1:

l. LSHU-10317A2 2.

LSUU-1031782 3.

LSUII-10317C2 4.

LSUll-10305A2 5.

LSNN-1030582 6 ~

LSUII-10305C2

c. Condensate pump low dis-charge pressures 1.

PSL-10507A 2.

PSL-105078 3.

FSL-10507C 4.

FSL-10507D Off Off Failure of the tempera-ture switch has no local effects Loss of bus voltage is predominant Loss of bus voltage

.causes:

, - Low flow runback signal transmitted to auxiliary circuits A and 8

Circulating ~ater pump trip signal transmitted I

to auxiliary circuits A and 8

Oenerator field breaker for loop A will open and trip the H-0 set (re-circulation pump)

Scoop tube for loop A H-0 set will lock in position at the instant the bus voltage is lost Redundant lube oil tem-perature indicators and a temperature switch-alarm combination provide additional monitoring No inherent compensating provision for loop A Compensation of loop 8 is limited to a flow reduction via recircula" tion pump 8 Loss of automatic com-pensation for high lube oil temperature Por recirculation loop A, the H-0 set must be restarted after the bus is recovered

. Control of loop A is re" established after the restart procedure For recirculation loop 8, control may still be exercised over the re-circulation pump

. Operation of the recir-culation pump in loop 8 must be governed by the criteria for single loop operation Loss of recirculation flow is, caused by the loss of flow in loop A A coro flux differenco will result from the flow imbalance

d. Circulating water pump trip circuits 1 ~

COIL 52XI-101US

- In loop A, speed control circuitry speed limiter No.

2 is enabled 13.

Loop A circuitsc

a. Under-voltage relay

b. Lockout c.

Pump vibration reset

d. Scoop tube power failure lock and reset

e. Auxiliary circuits

f. Uenerator field breaker Off Loop 8 controller ad-

)usts the scoop tube to reduce H-0 set speed

Facilitya Dockotc Susquoimuna Steam Electric Station 50-307, 50-3SB PAIIURE HODES AND EFFECTS AHAIYSIS Sheot 3s of 3

Comaon Power Supply or Sensors Control Systoa Affected:

1D615 125 VDC p

~Rl to

~dT A Co It *1 CSID:

0160-004-001 CDx 0160-004-011 Job Ho e Prepared bye Dates Checked by:

Approved by>

0160-004-671 Rov Date:

Dates Component IIame snd Humbor Pailuro Hodo Symptoms and Local Effects Including Dopondont Failures System Inhoront Compensating Provision Summary:

Effect Upon Control System Sumaarys Effect Upon Plant Performance

2. Sequential trips I

I

a. ZS-I Ol GOA2-F2, AS-PS/

I Fa i 1 Off I

Position switchos on lntorcopt and intormodisto stop valves-servo valves

b. ZS-1014IA2-D2/Position

. IFail Off switchos on aain stop valve-servo valves

c. 52XT1-IR101/A-C circuit I Ps i 1 Off breaker All contacts aust closo to complete tho sequential trip Pails to energize and open contactsa

- Causing an interruption in tho gonorator so-quontial trip

d. 33Xl-10141/Position switch relay - main stop vs 1 vo IFail Off I

Coil fails to energize and chango stato of con-tacts in tho anti-aotoring circuit Anti-motoring circuit in unit protection is also on 1D615. primary lock-out relays on unit pro-tection bus are disabled Power directional relay fails to energize and coaplete circuit that contains contacts from sequential trip - there-

fore, any adverse offocts from the iapropor con-figuration of sequential I

trip contacts is elim-inated

3. Prlaary unit protection

a. 060C/Primary lockout IFail Of f'elays

-unit protection Coils do not onorgizo to close contacts in EIIC and initiate a trip Primary unit protectioon is disablod

Facility:

Susquehanna Stean Electric Stetion Docket:

50-387, 50-388 FAILURE NODES AND EFFECTS ANALYSIS Sheet 1

of 4

Couson Power Supply or Sensors IControl Systen Affected<

1D625 125 VDC Reactor Feedwater Control S sten CSID$

0160-004-001 CDa 0160-004-012 Job No.

Prepared bye Dates Checked by:

Approved bye

,v4 gn ')I l~ /r 0160-004-671 Rev 0

Date:

7 Dates Component Naee and Nunber I

Failure I

Mode Sywptoes and Local Effects Including Dependent Failures

'ysten Inherent Conpensating Provision Susearyx Effect Upon Control Systen Sunmaryx Effect Upon Plant Perfornance ll. Reactor feed pusp turbine 8

I trip circuit - Level 8 trip contacts De-ener-gized Trip circuit is de-ener-gired Level 8 trip signal cannot be processed Trip circuits for reactor feed punp turbines A and C are powered by other DC power supplies Loss of ability to trip turbine B on a Level 8 trip signal There is no affect on plant perforsance unless I

a Level 8 trip condition I

exists

Pacility:

Docket!

Susquehanna Steam Electric Station 50-387, 50-388 P*ILURE NODES AND EPFECTS ANALTSIS Sheet 2

of 4

Common Power Supply or Sensor:

IControl System Affected:

1DG25 125 VDC Recirculation Plow Control CSID'160 004-001 CD:

0160-004-012 Job No.

Prepared bys Date!

Checked by:

Approved by:

0160-004-671 Component Name and Number Pai lure Node Symptoms and Local

-Effects Including Dependent Failures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary!

Effect Upon Plant Performance I 1. Temperature swi tch:

I TSB-1402182 l2. Circuits - recirculation flow loop 8:

a. Under-voltage relay b-Lockout c.

Pump vibration reset

d. Scoop tube power failure lock and reset

e. Auxiliary circuits

f. Bonerator field breaker IOff I

Off Pa ilure of the tempera-ture switch has no local effects There are no dependent failures associated with the switch failure Loss of bus voltage is predominant Loss of bus voltage will cause the following:

- Uenerator field breaker for loop 8 will open The scoop tube for H-0 set, loop 8 will lock in I

position at the instant bus voltage is lost

- The H-0 set and recir-cu lat ion pump for loop 8 will trip and coast

'to a stop Redundant lube oil tem-perature indicators and a temperature switch-alarm combination pro-vide additional moni-toring Recirculation loop A

will continue to oper-ate normally Reactor runback signals will be processed in the auxiliary and speed control circuitry for loop A No compensation effect for the loss of flow in loop 8 Loss of automatic com-pensation for high lube oil temperature

. Operation of the recir-culat!on pump in loop A must be governed by the flow criteria for single pump operation Control of loop 8 recir-culation is lost and cannot be re-established until the bus voltage is recovered Control of recirculation loop A may be exercised via the master control-ler, H/A transfer station and speed control cir-cuitry Recirculation flow is reduced due to the loss of flow in loop 8 A core flux difference will result from the flow imbalance

Pacilitys Susquehanna Steam L'lactric Station Docket:

50-387, 50-388 PAILURE HODES AND EPPE~

ANALXSIS Shoot 3

of 4

I I

I ICommon Powor Supply or Sensors IIControl System Affoctods 10625 125 VDC CSIDs 0160-004-001 CDs 0160-004"012 Job No.

Prepared by Dates Checked by:

Approved bys 0160-004-671 Ro v.

Dates ~~@

Date's ~+fr Componont Name and Number Pa ilure Nod o Symptoms and Local Effocts Including Dopendent Pailuros System Inherent Componsating Provision Summarys Effect Upon Control System Summarys Effect Upon Plant Performance

1. Unit protections a.

1R101/Oonorator oil circuit breaker-230kv ponos

2. Trip ansi alarm switchoss a.

PSL-11981A2, 82/Thrust boaring uoar detector and low bearing oil pressure b.

PSL-101808/Low hydraulic fluid pressure c.

PSL-119328/Shaft pump dischargo-low pressure

d. TSUN-1011SA2-C2/Exhaust hood high temperature generator ond trip e.

LSll-101278s

-288, -298/

Hoisturo soparator roheatar drain tank 18 high water lovel I

l"ail Off I

Pail llighl IPail Nigls Pail Nigh Pail tow I

Pail tow 52X coil in 1R101 control systom fails to remain onorgizad Contacts in breaker aux-iliary SNS2-1 will close

{normally closed state when da-energized)

Closed contacts initiate an ENC trip PSLX-10112A2-82 will not energizes

- Contacts remain un-changed in logic circuitl PSLX10180B will not energize s

- Contacts remain un-changed in logic circultl PSl.X11932B wtll not onorgizas

- Contacts remain un-

, changod in logic circuit TSNNX-10118A2-C2 will not energizes

- Contacts remain un-changed in logic circuit LSNX101278 will not ona rg iza s

- Contacts remain un-changed in logic circuit Circuit logic (2/3) pro-vonts inadvertent trip via the instrumentation circuits Initiates tho T/0 trip signal in the EHC system

- no noad for further turbine relay circuitry Any two energized trip and alarm switchos registering a transient suffictent to change their associated contacts will cause a T/0 trip Remaining relays bocoma arranged in a 2/2 logic The generator sequontial trip becomes disabled There are no furthor ac-tions or trips tnvolvod whon the soquontial trip is lost Tha main generator 1R101'il circuit breaker do" anorgizos and trips tho T/8

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE HODL'S AND EPPBCYS ANALTSIS sheet 3a of 4

Common Power Supply or Sensors IIControl System Affectdd:

I Component Name and Number 1D625 125 VDC e,~n,> c*, - roc,c o>

I I

Symptoms and Local I Pailure I ffects Including Dependent Pailures CSIDc 0160-004-001 CDs 0160-004-012 System Inherent Compedsating Provision Job No.

Prepared by:

Datea Checked bys Approved bye Summarya Effect Upon Control System 0160-004-671 Rev Date R

Date:

Summary I

~

Effect Upon Plant Performance

3. Sequential trip instrumenta-tion:

a.

ZS-10160A2-P2, A5-P5/

Position transducers-intercept and intermediate stop valves-servo valves

b. ZS-10141A2-D2/Position transducers

- main stop valves-servo valves Pail Off Pail Off

~ Sequential trip disabled by the failure to energize 33X2-10141 Contact 5X2T2-1R101 fails to open due to the ina-bility to energize the corresponding coil in the auxiliary circuit Same as ZS-10160 c.

52XT2-1R101 IPail Off 52XTI-IRIOI/Hain generatorl auxiliary relay Pails to energize and open contact in generator sequential trip

Facility:

Susquohassna Steom Electric Station Dockots 50-387, 50-388 PAIl UEE NODES AND EFFECTS AllALYSIS Shoot 4

of 4

ICommoss Power Supply or Sensors IIControl System Affoctods 10625 125 VDS CSIDs 0160-004-001 CDs 0160-004 012 Job No.

Prepared bys Dates Checked bys Approved bys 0160-004-671 R

~

0 D0%,, /.

D t Componont Name and Number Pai lure Hodo Syssptoms and Local Effects Including Dependent Pailures Systom Inherent Compensating Provision Summarys Effect Upon Control System Summarys Effect Upon Plant Porformanco

1. Volvo control monitor Off Shear valve is inoperative Dry gas purgo circuit is inoperative

~

On loss of 125 VDC, TIP is automatically with-drawn Control system returns TIP probo to normally housed position Purther system operation is not possible until DC power is restored Unable to perform TIP operation Unablo to obtain core flux readings through TIP probe

Facility:

Sus<lucl!anna Steam Bloctric Station Docket!

50-387, 50-388 PAILURB HODL'S AND BFPBCTS ANAfYSIS Shoot 1

of 2

Common Power Supply or Sensors Control System Affected!

10635 125 VDC Roactor Pecdwater Flow Control CSIDs 0160-004-001 CDs 0160-004-013 Job" No.

Prepared bys Dates Checked bys Approved bys 7/

)>>

~l Rov.

o Dates Dates 0160-004-671 Component Nemo and Number I

Failure I

Hode Symptoms and Local Lffccts Including Dependent Failures System Inhorent Componsating Provision Summarys Bffoct Upon Control System Su!sclary s

Bffoct Upon Plant Performance ll. Puodwator flow instrumcnta-I tions a.

Pocdwator flow sensor train 8/C32-N002

2. Foodwator lovel instrumonta-tions a.

Reactor vessel lovel sonsor C/C32-N004C

b. Reactor vessel l!igh level alarm train C/C32-K624C

3. Reactor feed pump turbine trip (RPPT) circuit train C Off Off Alarm Armed Off Plow signal from sensor 0

goos to zero for flow signal processing circuit Lose C train reactor water level signal High lovel alarm is armed I

for Level 8 trip Le ve1 8 contact in trip circuit not processed Lovel 8 trip logic is roducod from 2/3 to 1/2 and provonts an inad-vertent trip causod by a powor failure In the 3 element modes

- A zero flow input sig-nal to the flow control circuit causes an in-crease in spood for reactor food pump tur-bine A, 8, and C

In start-up mode thoro is no affect Reactor vessel high lovol (Level 8) trip is armed in train C

Circuits are in 1/2 logic Thoro is no affect on tho control system, providing the trip condition is not present If Level 8 trip is

rcachod, RPPT C will not trip duo to tho disablingl of tho trip circuit A Levol 8 trip is possi-ble due to the zero flow input signal to the flow I control circuit I

Pacilitys Susguehnnna Stuns Electric Station Docket:

50-387, 50-300 PAILUIM llODES AHD EPPECTS ANALySIS Shoot 2

of 2

Common Power Supply or Sensors Control System Affected<

1D635 125 VDC P

~81 to dT/AC t*i CSID4 0160-004"001 CDR 0160"004-013 Job No.

Prepared bye Dates Chockod bye Approved bya 0160-004-671 ev O

Dates Dates Component Name and Number Pa ilure Hode Symptoms and Local Effects Including Dopondont Pailuros System Inherent Compensating Provision Summarya Effect Upon Control System Summarys Effect Upon Plant Performance

1. Trip and Alarm switchosa a.

PSL-11901A3, 83/Thrust bearing wear detector and low bearing oil pressure b.

PS1.-10100C/Low hydraulic fluid prossure

c. PSL-110132C/Shaft pump discharge low pressure d.

rSHH-1019A3-C3/High ex-haust hood temperature generator end

o. Lovel 8 reactor high wator lovel trip. train C

2. Back-up unit protection BGOD Back-up lockout relay unit protection Ipail High I

I pail Highl 1'ail High Pail Low I

Armed Off Coil doss not energize and fails to chango state of contacts in EHC logic circuit One third of Lovel 0 trip circuit armed Loss of redundant unit protection system Ci rcuit logic

( 2/3) pre-vents inadvertent EHC trip Lovel 8 trip can still trip T/0 Primary unit protection remains activnted Control logic circuit reduces to a 2/2 logic system Lovol 8 trip logic is reduced from 2/3 to 1/2 Loss of back-up unit protection No trip of EHC occurs when powor supply'lost No impact to overall plant performamco will occur

))

II

/I )

III I

II IIII b.

I I

c, p

pl60 0004

~6'ocket.

eov Dat Dote lp645 COS s l25 VDC su co v ulattoc a T Co Cont col a

l<<lC I

Synpton Local ect s uding ailucCes 5P 2

)inn.

guoh I

50 2

<<cj)a 88 loctci

<<l ctc otton son p pa onoc lLDee Lontcot

""Ply

)topes w

col ysten

))tp a SO aff o

onso) to n

ep'peez oct'ed l 8 At)a 4ysSle Cospon an<<l S c

nona unboc I

))C con I p CSZDl I

))tod C

l Ol60 0 l

Shoo con tnstcu cdo I

CO l Od Opl ob t)o.

nocto ak c ntcol l

I I

l 0

I l

l60 00o ptd l'ed b

peep a tel lpff I

Checked b

I I.

I 8

I

~ Pall o

ystoc) l on A

od byl PSll l0 I

~

ul'<<) tO nhec lospoa o tci g

P o

p tucbt covisto 8

pass vo I

ossuco scones I

foot 0 poc'ab ontcol' I

~-lOll ol 'Syst oacin c

I ol' en I

Sun

/'Ftlsu

. Znactl on I

effoct Dpo I

I tcip n

g a nt Pocf a nt oca)

~

PSlY ttg

/

I COtOCtt Ve cato<<t s

<Shaf t p

e ~

v shaf eo otoc cha c

stands lplpp sttll and ossuco t is 2'hcust in s of DC t co tctp dis-2 boacin c

t ts-I LoN pcos I

I abl e<<tpl'os tctp I

. Lo cauli 012)A, o

I I. eel Lo c fluid I

S.

cuu u d I

~

))) vsc un II

- )tochantc p

I sol on I

ad-a<<l lt)att I

). )t e

I

~t Ol 604 odtato I

toc lo coh o vol pacato I

ntoc oc I

I chtos dts I

I

8. 0 ato oat oc I

I vo,,

I tsabl od I

~ Switches ts I

II

~

S los dtsab

)os le<<t ~

I I

I val v

~

0 oned I

lo eo I.

s <<lis I

. Alt Fe I

). )

III II

0

Facilityi Docket'usquehanna Stcam Electric Station 50-387, 50-388 PAII.URE WODES ARD EPPEefs ANAl.ySIS Shoot la Control System Affected:

P

~ll 1 t* iTn carol Common Power Supply or Sensors 1D645 125 VDC CDg 0160"004-014 CSIDx 0160-004-001 Job Ho.

Prepared bye Datos Checked by:

Approved bye 0160-004-671 Rov O

Dates Datex Component liame and Wuml>or Pai lure Hode Symptoms and Local Effects Including Dopcndont Pailuros System Inhorcnt Compensating Provision Summa ry s Effect Upon Control System Summnryc Effect Upon Plant Performance 5 ~ ZS-IOIGOAI-PI, A7, C7, E7/

Open switchos, close

switches, rospcctivoly Off Switches aro disabled nnd I

intercept valves l. 3, and 5 cannot bo proporly positioned

k. ZS-i0140AI-EI, A2-E2/

I Position switches Off All position switches on bypass valves aro disnbleds

~ - Bypass valve cannot bo positioned Al1 va 1 ves thnt a ro

'oporated by position are disabled

1. Valve test logic circuits Off Ho toots on valvos can bo conducted whilo customer DC is not functioning Tho Emergency Trip system will close valves, if activated

m. Lcvol 8 reactor high water lovel trip, train 8 Armed One third of Lovel 8 trip circui't armed Lovel 8 trip can still trip T/0 on high level

Pacilitya Susquehanna Steam Blectric Station Docket:

50-387, 50-388 PAILURV HODBS AND EPPECYS ANAfYSIS Sheet 2

of 2

I I

I I

Common Power Supply or Sensor:

Control System Affcctcds 1DG45 125 VDC Reactor Peedwater Control S stem CSIDx 0160"004-001 CD:

0160-004-014 Job No.

Prepared bye Dates Checked bya Approved bye 3~ nY PPI '1GO-004-671 Re v.

Datea I

Dates Component Name and Number I

I Failure Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision A

Summary:

Effect Upon Control System Summary:

Effect Upon Plant Performance l.

Peedwater level instrumenta-tions

a. Reactor vessel level I

sensor train 8/C32-N0040

b. Reactor vessel high level alarm/C32-K6240 Off Armed If 8 is selected, the level signal input to the flow control circuit goes to zero Level signal input to flow control circuit be-comes zero Loss of power to alarm enables 1/3 logic of the Level 8 trip circuit If level A is selected as input to flow control circuit, there is no effect on the resulting control signal A and C train input sig-nals to Level 8 trip cir" cuit are not enabled If level A is selected as input to the control

system, there will be no affect on the control system If level 8 is selected as the input signal to the control system, a

zero level signal results inc

-Reactor feed pump tur-bine speed will increase causing a high steady state reactor vessel level to compensate for the low level signal Level 8 trip logic (2/3) is reduced to 1/2 logic due to arming of the 8 train portion of the Level 8 trip circuit For level A selected, there is no affect on plant performance For level 8 selected, the higher steady state reactor vessel water level may result in Level 8 trip of reactor feed pump tu'rbtnes A, 8, and C

Pacilitys Susquehanna Stoam Electric Station Dockots 50-387, 50-388 PAILURE NODES AND EPPECTS ANALYSIS Shoot 1

of 17 I

I ICommon Power Supply or Sensors IIControl System Affoctods 1Y218 120 VAC Nuclear Pressure Relief CSIDs 0160-004 001 CD:

0160-004-015 Job No.

Prepared bys Dates Checked bys Approvod bys 0160-004-671 Rov Dates I-'I 5 Dates i Componont Nano and Number Paiiufo Node Symptoms and Local Effects Including Dopondant Pailures System Inherent Compensating Provision Summarys Effect Upon Control System Summa ry

'f fact Upon Plant Performanco

1. Temperature monitoring/leak detection subsystems

a. Thormocouple/1N004 0,

N, K, H, N,

A, 8, C,

0, E,

P, N,

P, R,

S

b. Temperature recorder/R614 I

As Is Off Loss of signal to s~itch in RG14

~ Loss of high temperature alarm indication There are no inherent compensating provisions Loss of safety relief volvo leakage detection Loss of high temparaturo signal to annunciator circuit Loss of tomporature in-dication/leak detection Loss of ability to moni-tor for downstream leak-age from safety relief valve Loss of temperature in-dication downstraass of safety raliof valvo

Pacilitys Susqueha>>na Steam Electric Station Docket!

50-387, 50-388 PAILURE NODES AND EFPECTS ANAlYSIS Sheet 2

of 17 Common Power Supply or Sensor<

Control System Affected!

1Y218 120 VAC Pressure Be<iulator - T 0 Control CS ID!

0160-004 001 CD!

0160-004-015 Job No.

Prepared by!

Date!

Checked by<

Approved by:

/~

a.

01GO-004 G71 Date; Date!

Component Name and Number Pai lure Ho<le Symptoms an>eluding Dependent Failures System Inherent Compensating Provision Summary!

Effect Upon Control System Summary:

Effect Upon Plant Performance I I. Level 8 trip circuit for I

T/0 train A One third of Level 8 trip circuit armed Level 8 trip logic re-duced from 2/3 to 1/2 No affect on plant performance

Facilityc Susqucha>>na Stcam Electric Station Dockot:

50-387, 50-388 PAILURE NODES AND EPFECTS ANAIYSIS Sheet 3

oE 17 ICommon Power Supply or Sensor:

IIControl System Affected:

1Y218 120 VAC Reactor Paedwater Flow Control CSID$

0160-004-001 CD) 0160-004-015 Job Ho.

Prepared by>

Datoa Checked bye Approved bye 0160-004-671

?r e~ )j~

Rov Datet Datos Component Name and Number Pa i1uro Hode Symptoms and Local Effects Including Dependent Failures System Inherent Componsating Provision Summarys Effect Upon Control System Summary\\

Effect Upon Plant Porformanco

l. Fcadwater Elow control in-strumantationc a.

Paedwator flow sensor C32-N002A, C

b.

Steam flow sensor C32-H003A, 8,

C, D

IOff I

I IOff Zoro output trains A, C

Zero output all trains Loss of fcedwator flow signals and automatic control in 1 or 3 element mode Loss of steam flow signals In start up or at power, tho RPPT H/A controls are disabled Foedwater flow remains invariant duo to a "Speod Froozo"

d. Reactor prcssure levol C32-H005 Off

e. Hain turbine first stage prcssuro.

stoam flow C32-N007 Off

f. Roactor pressure sensor IOff C32-H008

g. Square rootor C32-K605 C32-K606 Off

h. Oain and bias control

i. Dias/gain stcam flow sig-nal/C32-K603

5. Hain and bias inputs/

C32-K602 Off OEE Off

k. Proportional ampl ifier/

C32-K616 (summer)

Off

c. Reactor water level sensor Off C32-H004A Zero output train A

Zero output Zero output Zero output Zero output Zero output Zoro output Zero output Zero output Two lovel sonsors remain on 2/3 logic for reactor water level (lovol 8) trip Loss of entire instru-mentation loop connected I

to SRUs 1,

4, and 5

I I

At low flow, control I

system fails to regulate I.

flow H/A control of RPPTs via a single control signal is lost All control of individual!

RFPTs within tho feed-wator control system is disablod Active trip system is reduced to 1/2 logic Any additional alarm will trip tho system "Spood Praozo" initiated I

via tho IC-12730/electric automatic positionor on each RFPT Peedwatcr flow regulation is unavailablo duo to thol loss of tho start-up valve control station Reactor runback signal transmitted to tho ro-circulation system Prior to tho Lovol 8 trip. tho RPPTs may bo terminatod only via an operator-initiated trip Soo sheet 16 for the offccts on tho recircu-lation system Reactor vossol high water lovel

( La vol 8) trip is possible if "Speed Proozo" occurs at maximum demand.

Reactor vassal low lavol (iovol

2) trip is possible if "Speed Frooro" occurs at minimum demand

1. Dynamic Couponsator/

C32-K649 IOfE I

Zoro output

m. Punction generator/

C32-K630 OEE Zoro output

Pacilitys Susquehanna Steam Electric Station Docket s 50-387, 50-388 PAILURE MODES AHD EPPECTS AHALYSIS Shoot 3a of 17 Common Power Supply or Sensors Control System Affected'Y218 120 VAC Reactor Paodwator Control S stem CSIDs 0160-004-001 CD) 0160-004-015 Job Ho.

Prepared bye Dates Checked by<

Approved bya 0160-004-671 Rove 0

Dates

~

Dntea Component Hase and Number I Pailure Modo Symptoms and Local Effects Including Dopendent Pailures System Inherent Compensating Provision Summaryc Effect Upon Control System Summarys Effect Upon Plant Performance 2.

24V 08 power supply:

a.

C32-K611

b. C32-K612

c. C32-K613 Off Zero output power to the individual instrument loops

3. Control stationsx a.

Low flow demand signal logic/C32-K645, K646

b. Paadwatar demand signal (I or 3 element levol control)/C-32-K633,

K634, K653 Off Off Loss of auto/annual con-trol of the foedwatar start-up control valve Loss of all auto/manual control of feadwater control system "Speed Freeze" is ini-tiatod when tho control signal is lost c.

RPPT logic control/

C32-K637, K638A, 8, C

d. A/A transfer station/C32-

R600, R601A, 8,

C, R602 Off Off Loss of auto/manual con-trol associated with each

~

RPPT - Ho speed freeze override availablo in faadwater system Loss of transfer station due to failure of asso-ciated devices powered by 1Y218

4. Alarmss

n. Recirculation loop pump cavitation interlock/

C32-K618

b. Peodwater pump interlock/

recirculation loop flow reduction alarm/C32-K628 Pal 1 Low Pail Low Transmits a low-low run-back signal to the re-circulation system Transmits n trip signal to tho recirculation system c.

Steam flow lovel/C32-K608 Pail Low Transmits a low flow sig-nal to the computer

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 FAILURH HODBS AHD BPPBCTS ANALYSIS Sheet 3b

. of 17 I

I I

ICommon Power Supply or Sensor:

IIControl System Affected:

I Component Name and Number I

I Pailure I

Hode IY218 120 VAC Symptoms and Local Bffects Including Dependent Failures CHID:

0160-004-001 CD:

0160"004-015 System Inherent Compensating Provision Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

Summary:

effect Upon Control System 0160-004-671 Rev ~

Date: ~-II~.l Date: ~

.I I

Summa ly Bffect Upon Plant Performance

d. Bi-level alarm/C32-K635

e. High reactor water level turbine trip/C32-K624A f

RPpT control signal loss/

C32-K607 IPail Highl.

land Low I

I I

I I

IFail Highl.

-I I

I I

IPail Dif-l.

Iference I

High and low level annun-ciators for reactor water level are energized on.

the control room display panel Train h alarm indicates high reactor water level The alarm for the loss of contiol signal is armed

. High water level logic (2/3) prevents inad-vertent trip with arming I

of train h alarm

. A 'Speed Freeze is initiated

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE KODES AND EPPECTS ANALYSIS Sheet 4

ot 17 I

I I

ICommon Power Supply or Sensor:

IIControl System Affected:

erector r *teeter Control ~s er.en CSID:

0160-004-001 CD; 0160-004-015 Job No.

Prepared by:

Date Checked by:

Approved by:

0160-004-671 Rev.

D

.I Date: 'j'Q21fpi.l Date:

r~Pgg/..

Component Name and Number I

I I Failure I

I Node I

I Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:-

Effect Upon Control System Summdrye Effect Upon plant Performance Il. a.

K6058/Steam signal square I

rooter I

b: K6068/Feedwater flow signal square rooter l2. K6078/Peed pump 8 speed I

control signal loss I

Il3. a. K6188/Recirculation loop I

pump cavitation interlock alarm

b. K6288/Peedwater pump trip interlock/runback signal to recirculation system l4. K6308, C/Function generator I

IS. K6378

& C, K6388 6 Ci I

K6388-1 6 c-l, R6018 rr c/

Peed pump manual/auto trans-fer control station IOff I

I I

IOff I

IIPail Lossl.

lof Signall I

I I

I IPail Low I.

I I

I I

I I

IPai1 Low I

Loss of signal input, zerol output from 8 train to I

controller Loss of automatic signal input to the auto posi-tioner for feed pump 8

Speed Freeze'n train 8 initiated IOff I

IOff I

. Zero output signal

. Loss of all automatic and I. 'Speed Preeze'n feed manual control of reactor I

pumps 8

6 C initiated feed pump turbines 8 and Cl Runback signal transmittedl.

Ho compensating devices to recirculation system Loss of signals will in-duce feed pumps to in-crease flow in 3 element control

. Automatic control for train 8 and C feed pump is lost

. Trip signals transmitted to recirculation system Ho manual override of

'Speed Freeze'ircuit is available on RPPT 8 and C

RPPT speed is increased due to the loss of train 8 signal

. Runback sit3nals sent to recirculation system

. Optimum water level may not be maintailwu by automatic control Initiation of a 'Speed Preeze't high pump I

speed may result in a.

I high level (Level 8)

I trip I

I Initiation of a 'Speed I

Freeze't low pump I

speed may result in u I

low level (level 2) trip I I

I I

I I

I I

I I

I I

I I

I I

I I

I I

I I

I I

I I

I I

I I

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE HODES AHD LPPECTS AHALYSIS Sheet 5

of 17 I

I I[rosooo possr soppiy or ssosor:

~1Y218 lyo Y~AQ ro ory-rory yrvooL IIControl System Affected:

Reactor Peedwater Control S stem CSID:

0160-004-001 CD:

0160-004-015 Job Ho Prepared by:

Date:

Checked by:

Approved by:

0160-UU4-671

-ry Hev ~

-/ y P~

Date; Date:

Component Hame and Humber I

I I Pailure Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary:

Effect Upon Plant Performance Ill. a.

K606A/Peedwater flow h square rooter Ho compensating devices Control signals are lost from train A,

)Off Off

b. K616/Proportional ampli-fier Input signals to the levell controller are lost I

I Input signals to each feed) pump control station are reduced to zero

c. K630A/Punction generator train h Off d.

K605A/Steam flow h square rooter IOff I

IIPail Highl Trip logic I2/3) pre-vents an inadvertent Level 8 trip resulting from a power failure I2. K624A/High level turbine trip alarm Pails in high water level I.

mode I

I I

I ~

I I

IPail Loss).

lof Signall Level 8 trip logic Il/3) is armed I

Pails in 'Speed Preeze'rientation I3. K607A/Alarm for feed pump I

control signal loss I

II4. K633, 634, 634-1, 653, R-600/

Ievel controller Ho compensating device needed I

IIOff

. Each pump can be con-trolled by separate manual control stations

. Since input signals are reduced to zero, all automatic control is lost Auto mode is disabled for all pumps

. Hanual control of all 3 feed pumps from a single control station is un-available

'Speed preeze's ini-tiated

)5.

K637Ap 638A, 638A-1, R-601A/ )Off I

Peed pump A manual/automatic I

I transfer control station I

Ile K645 ~ 646'46 1 ~ R602/

Off I

Start-up, low flow control station

. All automatic/manual control of feed pump A

is lost Low flow conditions will I be altered by manual control of feed pump turbines

. Por low feedwater flow, manual/automatic control of the start-up valve is lost Input signals via auto-matic monitoring of the reactor water level are lost - level controller cannot be operated in the auto mode Initiates a 'Speed Preeze'n trains A, B, and C

. Loss of all 1 or 3 mode level control

. Hanual or automatic con-trol of all 3 feed pumps I

from a single station cannot be exercised I

. Loss of manual override of feed pump h

~ Por conditions of low feedwater flow demand, control of feedwater flow cannot be performed via the start-up valve Hanual override of

'Speed Preeze'or RPPT 8 and C is available Low flow runback signal transmitted to the re-circulation system

Pacility:

Susquehanna Steam Electric Station.

Docket:

50-387, 50-388 PAILURE HODES AND EPPECTS ANALYSIS Sheet ba of 1'/

4 I

I I

ICommon Power Supply or Sensor:

I[Control System Affected:

lY218 120 VAC to C32-K612 24VDC Reactor Peedwater Control S stem CSID:

0160-004-001 CD:

0160-004-015 Job No.

Prepared by:

Date:

Checked by:

Approved by:

0160-OU4-671 I

I I

Hev.

o Date: ~3~g

~~I Date:

/>

pg Component Name and Number I

I I, Pailure I

Hode Symptoms and Local Effects Including Dependent Pailures I

I System Inherent I

Compensating Provision Summary:

Effect Upon Control System Summary; Lffect Vpou Plant Performance l7. a. K618A/Recirculation loop pump cavitation interlock

b. K628A/Peedwater pump trip interlock/runback signal to recirculation system IPail Low I. Runback signal is trans-l I

mitted to the recircula-I I

tion system I

I IPail Low

)

I I

I I

I 2

I

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE HODES AHD EPPECTS AHALYSIS Sheet 6

of 17 I

I I

ICommon Power Supply or Sensor:

IIControl System Affected:

1Y218 120 VAC to C32-K613 24VDC Reactor Peeduater Control S stem CSID:

0160-004-001 CD:

0160-004-015 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

016U-UU4-6/1 o

I LY. 2 &..~

I Component Same and Humber I

Pailure I

Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary; Eftect Upon Plant Performance I

Ill. a.

K602/Steam and feedwater I

signals gain and bias I

b. K603/Steam flow signal gain and bias

c. K615/Peedwater signal gain and bias d.

K605 CED/Steam flow C and D square rooter

e. K606C/Peeduater to train C square rooter

)Off I

IlOff I

IlOff I

I lOff Off

. All output signals yo to zero Ho compensation is avail-I. In 1 element

mode, a

able or necessary I

loss of bias and gain has no consequence In 3 element

mode, the level controller output I

will initiate a speed increase of all 3 feed pumps

. Automatic control for feed pump C is I.ost

. Recirculation system receives a lou flou runback signal due to the loss of the feeduaterl flow siynal Level 8 trip may be ini-tiated as the result of speed increase of feed-water pumps

. Tl)e speed of pump C can-not be increased due to the 'Speed Preeze'.

K649/Dynamic compensator

12. K635/Bi-level trip alarm I

I I

Il3. K636/High pressure alarm I

Il4. K608/Steam level alarm I

IIS.

K607C/Peed pump speed signal I

loss alarm unit I

I I

IOff I

I I

Pail Lou I Pail High I I

I I

I IPail Low I.

I I

I I

(Pail Loss(.

lof Signall I

I I

I I

Annunciators for high and I.

lou reactor water level are energized in the con-trol room same as item 1

Low flow signal is trans-mitted to computer

'Speed Preeze'ignal is transmitted to the elec-tric automatic positioner Same as item 1

Speed Preeze'ircuit is available for train C

when in the auto mode

- Hanual override of

'Speed Preeze'vaila-ble Annunciator for reactor Same as item 1

high pressure is energizedl

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 4

FAILURE HODES AND EPPECTS ANALYSIS Sheet 7

ot 17 I

I I

ICommon Power Supply or Sensor"r IIControl System Affected:

1Y218 120 VAC Reactor Hanual Control S stem RHCS CSID:

0160-004-001 CD:

0160-004-015 Job No.

016U-UU4-671 Prepared by:

Date: t l.

Rev.

Checked by:

~

Date:

Approved by:

Date:

Component Name and Number I

I I Failure I

Hode Symptoms and Local I

Effects Including Dependent Pailures System Inherent Compensating Provision I

Summary:

I Effect Upon Control System Summary:

hffect Upon Plant Performance SUHHARY REACTOR NAHUATL CONTROL SYSTEH ll. Rod control unit operating IOff I

benchboard I

12.

Rod position information Off I

system

~

I 13.

Rod sequence control system IOff I

I l4. Trip unit, turbine pressure IOff I

I IS. Scram time test panel IOff I

I l6. Control rod drive hydraulic IOff control I

. See sheet 9

See sheet 10

. See sheet 8

See sheet 12

. See sheet ll See sheets 13, 14

. Control rods cannot be operated due to a loss of pouer to these sub-systems Pull core display is not available

. Operator signals-cannot be transmitted to rod drive control Rod ppsition information is not available I

I Rod sequence control is de-energized

. Rod movement limitation associated with RCS are still imposed

. Scram timing test cannot be operated Control rod movement is not possible:

Power changes cannot be made Rod testing cannot be I

accomplished (if in I

progress)

I I

I I

I

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILVRE RODES ARD EPPEerS ARALYSIS Sheet 8

of 17 I

I I

ICommon Power Supply or Sensor:

IlControl System Affected:

IY218 120 VAC Reactor Iraaaal C

trot ~s stea~RHCS CSID:

0160-004-001 CD:

0160-004-015 Job Ho.

Prepared by:

Date:

Checked bye Approved by:

0160-Ou4-671 Ruv.

D

. Date:

/ATE P Component Rame and Rumber I

Pailure I

Rode I

symptoms and Local Effects Including I

Dependent Pailures System Inherent Compensating Provision Summary:

Effect Opon Control System Summarye Lfrect Upon I

Plant Performance I

,I 1.

Rod sequence control system/

p659:

a.

RSCS page lOff I

I I

I b.

Rod pattern controller lOff

. Loss of timing and gating l

signals

. Loss of test signals

. Loss of memory circuitry processing

. Rod block contacts open if closed and remain open if already open See summary sheet page 1

l I

Rod block function with-draw and insert signals to input isolation of RDCC are activated I

RsCS rod movement limita-l tions are invoked:

I

1. Prevents out-of-sequence rods from being moved

2. Limits movement ot out-of-sequence rod I

I I

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE HODES AUD EPPECYS AUAIYSIS Sheet 9

of x I I

I I

ICommon Po~er Supply or Sensor:

IIControl System Affected:

1Y218 120 VAC a actor nannal control a~stem anon CSID:

0160-004-001 CD 0160-004-015 Job Uo.

Prepared by:

Date:

Checked by:

Approved by:

U160-U04-671 Ruvo Date:

Date:

I

.I Component Name and Uumber I

I Pailure Node Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summaryr Effect Upon Control System I

Summary:

Effect Upon Plant Performance 1.

Rod control unit operating benchboard/P6804

a. Pull core display module IOff I

b.

Rod select switch assemblylOff I

I c.

Rod select and transmitterIOff module

. Loss of full core display I

. Switch assembly inopera-tive

. Signals cannot be trans-mitted to rod drive con-trol

. See summary sheet page 1

I. Lose full core display module Lose rod select switch assembly

. Lose rod select and transmitter module-cannot transmit to rod drive control system

. Lose rod worth minimizer operator panel - initia-tion Loss of ability to selectl and move control rods I

I I

I I

I I

I I

I I

Facility:

Susquehanna steam Electric Station Docket:

50-387, 50-388 FAILURE NODES AND EFFECTS ANALYSIS Sheet 1 u of 17 I

I I

)Common Power Supply or Sensor:

I(Control System Affected:

1Y218 120 VAC

<<*a<<<<<<<<<<a

<<al C<<<<<<<<1 ~St*

R<<jCS CSID:

0160-004-001 CD 0160-004-015 Job No.

prepared by:

Date:

Checked by:

Approved by:

I'omponent Name and Number I

)

Symptoms and Local

.I Failure

)

Effects Including Dependent Pailures Node System Inherent Compensating Provision Summary:

Effect Upon Control System Summaryr Effect Upon Plant Performance Ill. Rod position information system/P615:

a. Control module - control

)Off file, multiplex file I

I I

I I

I I(off

b. Nultiplex module (2)

. All electrical control signals are de-energized (control file)

I Rod position indicator probe signals are not pro-(

cessed I

I

. Rod position indicator I

probe signals are not pro-)

cessed See summary sheet page 1

I. Lose rod position output to scram time test panel

. Lose rod position output to 4 rod control file

. Control rod position I

cannot be monitored i,ose

'Rods In'ignal to I

refueling hoist controI

. Lose rod position in-dication

Facility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILORE HODES AHD EFFECTS ANALYSIS Sheet li of I

I I

ICommon Power Supply or Sensor:

IIControl System Affected:

1Y218 120 VAC Reactor Hanual Control S stem RHCS CSID 0160-004-001 CD:

0160-004-015 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

016U-UU4-671 Hev ~

Date:

Date; Component Hame and Humber

'I I

i Pal lure I

Hode I

I Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary; Lffec.t Upon Plant Performance

l. Scram time test panel/P610 IOff

. Loss of rod position/

movement signal from the rod position information system Loss of input from the master clock from RDCC P616 See summary sheet page 1 I. Loss of ability to meas-ure scram time for con-trol rods Hormal operation of I

control rods is not I

affected - scram testing I

function is lost I

I Loss of scram test signal from the output isolation of RDCC F616

~ Loss the of scram signal processing input to scram time test panel from reactor protection

Pacility:

Susquehanna Steam Llectric Station Docket:

50-387, 50-388 PAILURE HODES AHD EPPECTS AHALYSIS Sheet 12 of 17 I

I I

ICommon Power Supply or Sensor:

IIControl.System Affected:

1Y218 120 VAC Reactor nan at Control ~Sstes

~Rs~CS CD 0160-004-015 CSZDr 0160-004-001 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

Component Hame and Humber I

I I Pailure I

Hode

b. Press indicating switch/

IOff PIE-1B654hc 8

I I

c. Pressure transmitter/

IOff PT-18054hc 8

Ill. Trip unit first stage turbineI press/P613 a.

SRU-1 Off Symptoms and Local Effects Including I

Dependent Pailures instrument loop is de-energised

. Contacts in switch remain I

open I

I

. Signal from transmitter isI not processed System Inherent Compensating Provision

. See summary sheet page 1

I I

Summarye Effect Upon Control System pressure transmitter signals are not processed

. Trip unit signal is not bypassed when low power set-point is reached-signal is not sent to RSCS P659 I

Summary:

I Effect Upon Plant Performance I

I Hod movemeut limitations I

of HSCS are still presuntl even atter low power set-I point is reached:

I

l. Cannot move out-ot-I sequence rod I

I

2. Limits movement of I

in-sequence rod

Pacility:

Susquehanna Steam Electric Station Docket 50 387s 50 388 PhILURE NODES hND EPPECTS hNhLYSIS Shout 13 of 17 I

I I

ICommon Power Supply or Sensor:

IIControl System hffected:

1Y218 120 VAC Reactor Hanoal Cont~col S

t~RH~CS CSIDx 0160 004 001 CD:

0160-004-015 Job No.

Prepared by:

Date:

Checked byr hpproved by:

I

.I

.I Component Name and Number I

I Symptoms and Local I Pailure I

Effects Including Dependent Pailures Node System Inherent Compensating Provision Summary:

Effect Upon Control System Summarya Effect Upon Plant Performance IIl. Control rod drive (CRD) hydraulic control:

a.

Plow control station I

10-009h/0:

1. PE-1N003/Plow element

2. PC-1R600/Controller

3. PY-IK001/Converter

4. FT-1N004/Plow trans-mitter 5.

18600/Power supply Off

. Loss of power does not effect flow element

. Controller does not send signals to converter

. Converter does not re-position to allow control I

air to reposition air-operated valve Plow signal is not trans-mitted to controller Loss of power (hC to DC conversion) to control/

instrument loop

. See summary sheet page 1

I Loss of automatic flow control capability.

. Loss of system flow in-dication

. Differential pressure indication required to properly ad)ust drive water pressure control valve is not available

. Cannot maintain proper differential pressure between reactor.vessel and drive water header Loss of alarm indication I

for high charging water header pressure

. Normal control rod move-ment cannot be accom-plished due to loss of normal control rod drive I

hydraulic control in-I strumentation I

I I

I I

I I

b. Drive/cooling water pres-I sure control:

1. PDT-lN011/Differential pressure Off Loss of transmitted differential pressure (reactor coolant/drive water header) downstream of pressure control station

2. PDT-1N008/Differential I

pressure

~ Loss of transmitted differential pressure upstream of pressure control station

Facility:

Susguehanna Steam Electric Station Docket:

50-387, 50-388 FAILURE HODES AHD EPFECTS AHALYSIS Sheet

<4 or 17 I

I I

ICommon Power Supply or Sensor:

1(Control System Affected:

1Y218 120 VAC R a t*r Ran al Co carol ~Sstew~RN~CS CD 0160-004-015 CHID:

0160-004-U01 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

0160-OU4-671 Hev ~

r Date: ~g~/~

Date:

Component Hame and Humber I Failure Hbde Symptoms and Local Effects Including Dependent Failures System Inherent Compensating Provision Summary:

Effect Upon Control System Summ4TY'ftect Upon Plant Performance 3.

PE-1H010, FT-IH009/

Cooling water flow

4. IK600/Power supply

5. FE-lH006, FE-1H007/

Drive header flow

c. Charging water header lOff pressure instrumentation:

1. PT-1H005/Pressure transmitter

2. PISH-1H600/Pressure I

switch

3. PAH-14604/Charging water high pressure alarm

. Loss of cooling water flow indication

. Loss of instrumentation/

control loop for pressure I

control I

I

. Loss of drive water headers flow indication

. Loss of charging water I

pressure signal to switch I

. Loss of high pressure signal to alarm

. Loss of alarm signal indication

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE NODES AND EPPECTS htthLYSIS Sheet lb ot 17 I

I I

ICommon Power Supply or Sensor:

IControl System Affected:

1Y218 120 VAC Reenter Mater ~cl an

~ate

~Race CEIL 0160-004-001 CD:

0160-U04-015 Job No.

Prepared by:

Date:

Checked by:

Approved by:

0160-UU4-671 IRj R~IRR R 'r.

'ate:

Date:

Component Name and tlumber I

I I

I Pailure I

Node Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary Effect Upon Control System I

I Summaryr Efrect Upon Plant Performance

1. Differential flow instrumen-tation:

a.

PT-1N036-RHCS inlet flow IOff PT-1N012-RWCS blowdown I

flow I

PT-lt(041-RWCS return flow I SRV1

. Instrument loops de-ener-gized RHCS Leak Detection System I

. Signal processing lost I

I

. Signal to isolation valvesI NV-lP001, NV-1P004 lost RHCS system isolation protection (in event of high differential flow due to RHCS system leakage) is lost I

RHCS system will continue l to operate normally - If I system leakage is preseutl isolation will be pro-vided by the RHCS Leak Detection System

Fhcility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE HODES AND EFFECTS ANALYSIS Sheet re of II I

I I

ICommon Power Supply or Sensor:

IIControl System Affected:

1Y218 120 VAC Recirculation Flow Control CSID:

0160-004-001 CD:

0160-004-015 Job No.

Prepared by:

Date:

Checked by:

Approved by:

6U-004-671 Date Date:

Component Name and Number I

I Pailure Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary:

Effect Upon Plant Performince

1. Recirculation flow control system:

a.

H/A transfer station and IOff speed control for Loop h I

I H/h transfer station and IOff speed control for Loop 8 I

I Haster Controller IOff Loss of the bus voltage I.

causes the following to I

become inoperative:

I Haster Controller H/h Transfer Stations A and 8

- Speed Control Circuitry I

for Loops h and B

I I

. The fallowing reactor run-I back signals are trans-mitted to auxiliary cir-cuits h and 0:

Scoop tube locking cir-cuitry permits recircu-lation pumps h and 8 to maintain the flovs prior to loss of bus voltage Hanual adjustment of the I.

recirculation pump speed I

can be performed at the I

H-G sets through posit-ioning of the scoop tubesI Speed controls for both recirculation pumps are lost until:

- Hanual speed ad)ust-ments are made

- Bus voltaye is recovered Reactor runback signals cannot be processed

. Recirculation flow rate maintained at the value prior to lose of bus voltaye I

I

. Variation of the reactor I

power Level cannot be performed unless the re-circulation flow rates are altered via manual positioniny of the scoop I

tubes

- Lov flow from feedwater system alarm/relay

- Low NPSH from feedwater system alarm/relay

~ Runback signals cannot be I

processed because of the loss of the above compo-nents

. Scoop tubes on the H-G sets A and 0 vill lock in I

their last positions priorI to the bus failure

- Recirculation pumps maintain previous speedI Indicators for speed and speed set point indicate zero

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 FAILURE MODES AHD BPPECTS AHALYSIS Sheet 17 of 17 I

I I

(Common Power Supply or Sensor:

IIControl System Affected:

1Y218 120 VAC CSID:

0160-004-001 CD:

0160-004-015 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

016u-004-671 S>l 1 yl

.gfl" Date:

I

.I I

Component Hame and Humber I

I Failure Mode Symptoms and Local Effects Including Dependent Pailures I

I I

I I

System Inherent Compensating Provision Summary:

Effect Upon Control System I

I I

Summary:

Effect Upon Plant performance Il. TIP control and monitor:

b. X-Y recorder/J600-1 IOff I

IlOff I

I I

I

d. Valve Control Monitor-10ff

c. Drive control unit/

J600-A-B Purge circuit a.

Plux probe monitor/J600-2 lOff

. Plux detection processing circuit is de-energized-Ho signal input to X-Y recorder

. Plotter drive circuit is de-energized

. Control circuit for pro-cessing signals to the drive mechanism and in-dexing is de-energized

. Mechanism, computer and X-Y recorder pen lift

. TIP can be isolated through either of the following:

Isolation signal from primary containment reactor vessel iso-lation system

- Manual isolation through shear valve operation powered off DC

. Cannot record TIP flux signals vs detection position Loss of flux signals to process computer

. Loss of control capabil-.

ity to successfully pro-cess signals to the drivel and indexing mechanisms I

. Loss of ability to I

operate TIP - Core flux levels cannot be obtainedl I

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE MODES AMD BPPECTS AMALYSIS Sheet 1

of 2

I I

I ICommon Power Supply or Sensor:

IIControl System Affected:

IY219 120 VAC Reactor a naal Con~trol a at n

CSID:

0160<<004-001 CD:

0160"004-016 Job Mo.

Prepared by:

Date:

Checked by:

Approved by:

U160-004-671 I

.I Component Hame and Number Pailure Mode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary:

Bftect Upon Plant Performance Ill. Control Rod Drive Temper I

Monitoring:

I I

a. Thermocouple TC-(185)

I

b. Recorder R018 aturel I

I I IU'A I

I IOff

. Thermocouple signals are not processed

. Recorder is de-energized

. There are no inherent compensating provisions

. Temperature signal from the thermocouple is not processed through the temperature circuitry CRD temperature monitor-ing/recording is not available CRD temperature infOrma-tion is not available

. Potential CRD high temp-erature condition cannot be detected

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 FAILURE HODBS AHD EFPFCTS ANALISIS Sheet 2

of 2

I I

I ICommon Power Supply or Sensor:

lControl System Affected:

I ly219 120 VAC Reactor water clean~us~stem

{Rw~cs CSIDl 0160-004-001 CD:

0160-004-016 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

Datet D

~z J~:::

Component Name and Number I

I Pailure I

Hode Symptoms and I,ocal Effects Including Dependent Failures Systeta Inherent I

Compensating Provision Summary:

Effect upon Control System I

I I

Summary:

.Effect Upon Plant Performance l

I

1. Liquid radwaste/main conden-ser flow control instrumentsll

a. PSL-ltl013, PSH-1N014 IOff SV-14438 I

. Plow control solenoid valve SV-14438 de-ener-gizes 'shutting flow con-trol valve to condenser/

liquid radwaste system

. Normal system flow returnl to feedwater system is I

still available Nortaal operation of the RWCS is not effected

. Automatic operation of isolation valve to the condenser or liquid rad-waste system is not available I

Loss ot ability to uirecc I RWCS liquid to either I

main condenser or liquid I

radwaste system I

I 2.

RWCS pump cooling water high I

temperature shutoff:

I

a. TE-lH001A, B, IOff TISH-lt{002hiB 3.

RWCS temperature monitoring:

I

a. TE-1N004/Inlet, tempera-IOff ture TE-ltl015/Outlet, tempera-ture T8-1tl019/Non-r e gene rat ivs

- heat exchange effluent TE-1N006/Regenerative-heat exchanges effluent TB-1N043/Reactor bot tom head drain TT-ltl045/Temperature transmitter

. Pressure switch signals I

high or low have no affectl on solenoid valve since I

it is already closed on I

loss of power Instrument loop de-ener-gized

. High temperature annun-ciators are inoperative Instrument loop is de-energized No inherent compensating I

effect I

No inherent compensating I

effect I

. High temp. shutoff pro-tection for RWCS pump is I

lost I

I

. Ability to monitor key I

RWCS temperatures is lostl I

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE NODES AND EPPECTS ANALYSIS Sheet 1, of 2..

I I

I ICommon Power Supply or Sensor:

1Y226 120 VAC CSID:

0160-004-001 Job No.

0160-OU4-I'll Prepared by:

Nev..

4'ontrol system Affected:

Nuclear Pressure Relief CD:

0160-004-017 Component Name and Number I

I Symptoms and Local I

+I Pailure I

Effects Including Dependent Pa i lures I

Node I

System Inherent Compensating Provision Summary:

Effect Upon Control System Summary Effect Upon Plant Performance IIl. SRV flow monitoring/DIV.

a. Vibration transmitter VT-14180 81-88

b. Vibration indicating switch (high)

II: I IIOff I

I(Off I

I I

. Transmitter unable to transmit flow information

. Switch unable to indicate I

high flow condition I

I I

I I

I

. Division I Safety Relief valve flow monitoring system is still available)

(powered by a different power supply)

. Loss of Division II

. Operator is unable to Safety Relief Valve flow I

monitor safety relief monitoring capability valve flow for 8

Division II SRV's I

I

Facility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 FAILURE NODES AND EFFECTS ANALYSIS Sheet 2

of 2

I I

I ICommon paver Supply or Sensor:

IControl System Affected:

1Y226 120 VAC Reactor Mater Cleanu S stem RWCS CSID:

0160-004-001 CD:

0160-004-017 Job No.

Prepared by:

Date:

Checked by:

Approved by:

0160-004-671 Nev.

b Date: i'~

Date:

n Component Name and Number I

I I Failure I

Node Symptoms and Local Effects Including Dependent Failures System Inherent Compensating Provision Summary:

Effect Upon Control System Summaryr Eftect Upon Plant Performance Il. Filter demineralizer tempera-I I

ture instrumentation:

I I

a. TE-lN007, TE-1N008 IOff Filter demineralizer in-strument loop is de-energized

. Alternate system high temperature available through TSH-1N020/

TAH-14420 at the inlet filter demineralizer

. Automatic RMCS system I

shutdown Ipump and I

valves) is disabled I

I toI q

Y protection I

I I

I I

I I

I I

I I

I RMCS system will still I

operate normally II. Operator action is re-I uired to ensure s stem I

Pacility:

Susquehanna Steam Electric Station Docket:

50-'387S 50-388 PAILVRB HODBS AND EPPECTS ANALYSIS Sheet 1

of 3

I I

I ICommon Power Supply or Sensor:

IY629 120 VAC I!cont!a! sYstem Affected:

Reantot manna! cont a~is t

m JBa~cs CD; 0160-004-018 CSID:

0160-004-001 Job No.

Prepared by:

Date:

Checked by:

APProvef) bye U16U-UU4-6Il Hev.

i Zl

~

Date'ate:

Component Name and Number IIl. Rod Drive Control Cabinet/

P616:

a.

Power Section b..Activity Control I

I I Pailure I

Hode IOff I

)Off Symptoms and Local Effects Including Dependent Pailures

. Loss of power to branch 5unction modules

. Loss of power to logic power supply IRDCC elec.)

. Loss of power to contact power supply (external contacts to RDCC)

. Loss of input processing and isolation

. Loss of rod motion signal processing

. Loss of rod motion sequence timing signal System Inherent Compensating Provision Can disconnect power to the system if the self test sub-system in the analyzer determines a

malfunction has occurred

. affect of loss of power I

in 1-a. is the overridingI I

factor I

. Loss of the activity control is enveloped by the loss of power Summary:

Effect Upon Control System

. The ma5or effect on the RHCS is the loss of powerl to operate the HCU'sg therefore, no rod move-ment is possible Command signals cannot be processed

. The solenoid valves if in operation will fail shut) therefore, rod movement will stop at the nearest mechanical latch position

. All modes of operation are lost operator control, scan, and self test Summary Effect Upon Plant Performance I

Loss ot reactor power I

control through the RHcs I

. Loss of rod movement capability during rod testing f

I

c. Analyzer IOff

d. Branch Junction Nodule IOff Loss of system signal comparison device

. Loss of fault mapping circuitry

. Loss of COHHAND'ord'ignal processing to valves

. Loss of power to trans-porter

. Effect of loss of power in 1-a. is the overridingI factor Loss of the analyzer is enveloped by the loss of po'wer Effect of loss of power in 1-a. is the overridingI factor I

I Loss of the transporter is enveloped by the loss I

of power

. There is also a loss of electrical output from the accumulator pressure/I level limit switches, scram valve position, scram test NOTE:

The loss of the RHCS does not impact on the scram function

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE MODES AND EPPECTS ANALYSIS Sheet la of 3

I I

I (Common Power Supply or Sensor:

IIControl System Affected:

1Y629 120 VAC R

a tor Rannal a*astrol R

taa~llllCS CD:

0160-004-018 CSID:

0160-004-001 Job No.

Prepared by:

(

Date:

Checked by:

Approved by:

0160-OU4-671 Bev ~

Date; Date:

Component Name and Number

e. Transponder I

I

) Pailure

(

Mode

)Off Symptoms and Local Effects Including Dependent Pailures

. Loss of command signal processing from the trans-I ponder to the directional I

control valves (HCU)

I I

. Loss of power to the directional control valves(

(HCU)

Loss of accumulator pre-ssure and the level limit switch circuit

. Loss of the scram valve position switch circuit

. Loss of the scram test switch circuit System Inherent Compensating Provision j I

Directional control valves fail shut on loss

(

of power I

I I

I Summary:

Effect Upon Control System Summary:

Effect Upon Plant Performance

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 FAILURE HODES AHD EPPECTS AHALYSIS Sheet 2

of 3

I I

I ICommon Power Supply or Sensor:

IIcontrol system Affected:

1Y629 120 VAC Recirculation Plow Control CSID:

0160-004-001 CD:

0160-004-018 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

igif:::

Date.~.+'lf Component Hame and Humber I

I I Pailure I

Hode Symptoms and Local Effects Including Dependent Failures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary:

Efrect Upon 1'lant Performance Off Peedwater system train B: IOff 1.

PT-1060481

2. PY-1060481 3.

PSL-10604B1 Peedwater system train Cr IOff 1.

PT-10604C1 I

2. PY-10604Cl 3.

PSL-10604C1 I

Il. Reactor runback instrumenta-tion:

a.

Peedwater system train A:,I

1. PT-10604Al

2. PY-10604Al

3. PSL-10604A1 I

Low flow signal trans-mitt ted from the feedwate r system control of reactor recirculation system run-back circuitry to aux-iliary circuits A and 8

. Relay contacts in the auxiliary circuitry logic I

are activated as part of the runback signal pro-cessing

. Bus failure will not system to react to the runback signal without the following inputs to auxiliary circuits A and I

B:

I Low flow input from I

feedwater system alarm I

relay I

I Circulating water pump I

Low HPSH input from the feedwater system Reactor runback circuitryI is partially armed

. Plant performance is not affected

. Recirculation flow is identical to the flow prior to the loss of power

Pacility:

Susquehanna Steam Electric Station Docket:

PAII URE HODBS AND BPPECTS ANALYSIS Sheet 3

of 3

I I

I IComaon Power Supply or Sensor:

IIControl System Affected:

IY629 120 VAC Pressure Re ulator and T G Control CSID 01'60-004-001 CD:

0160-004-018 Job No Prepared by: ~

Dater L. c.

Checked by:

Approved by:

0160-004-671 Nev.

O Component Name and Number Pailure Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Summary Effect Upon Plant Performance

1. Non-redundant power supplied devices

a. pirst stage pressure feedback potentiometer I

I I

I I

IAs Is b.

PA/PA Cransfer potentio-meter IAs Is I

c.

Load reference motor lhs Is I

e. Pressure reference signal IOff motor

f. Past-acting solenoid valve - intermediate valve/SV-10160A2 -

P2 IAs Is

d. Bypass valve jack motor IOff

. Gain is not applied to the signal which operates I

the control valves at I

start-up I

. Hodulating control is not transferred from the stop I

valves to the control valves

. Automatic modulation of the load reference signal I

can not be conducted I

-The power/land unbalance I

circuit cannot reset I

load signal automaticallyl I

. Disable manual position-ing of the bypass valves during start-up and cool-down Hanual control of pressurel set-point is disabled-No variable set-point pressure for pressure control unit's primary pressure amplifier I

Intermediate valve fails hs Is Inherent compensating devices unnecessary for non-redundant power supplied devices The solenoid valves that fail 'as is'ill be closed by ETS only if loss of load occurs simultaneously with loss I

of power supply I

. Loss of the AC bus vol-tage without PHG results I

in:

I Loss of 24, -22, 30 VDCI I

Blectrical trip system I

disabled I ~

I Both master trip pilot I

solenoid valves of the I

Haster Trip Solenoid I

become de-energized I

I

. The Haster Trip Solenoid I

valve will close and I

results in:

I

- Emergency Trip System I

actuates to trip T/G I

. At speeds sufficient to.

operate the permanent magnet generator IPHG),

redundant power for essential devices is supplied All 24, -22, 30 VDC operated devices

. Although several regu-laCing control features will be unavailable, a

trip will not occur when I

the PHG is supplying I

redundant power I

I ht operating

speeds, de-I vices without redundant power supply either:

hre not required at operating speeds T/G trip is actuated when pHG is not providingl redundant electricl I

power - otherwise no I

trip will o<<<<ur I

I Reactor scram will occur I

following T/G trip only I

if. reactor po~er is I

greater than 30%

I I

I

Pacility:

Susquehanna Steam Electric Station Docket:

PAILURE HODES AHD EPPECTS AHALYSIS Sheet 3a of 3

I I

Common PoMer Supply or Sensor:

Control System Affected:

1Y629 120 VAC Pressure~Re ulator and~TG Control.

CSID:

0160-004-001 0160-004-018 Job Ho.

prepared by:

Date:

Checked by:

Approved by:

0160-004-6yl Rev' Date:

Date:

Component Hame and Humber Pailure Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Pffect upon Control System Summary:

Effect Upon Plant Performance

h. Solenoid valve - bypass valve/SV-1014A E

i. Solenoid test valve-stop valve/SV-10142 IClosed I

I I(off

j. Reset oil valve solenoid/ lOff SV-10123 I

I I

k. Lockout valve solenoid/

lOff SV-10124

1. Oil trip valve solenoid/

lOff SV-10122 I

I I

I IAs Is I

I I

n. 'Closing solenoid - controllAs Is

m. Closing solenoid valve intercept valve/

SV-10160C1 - Pl valve/SV-10150A -

D

g. Past-acting solenoid lAs Is valve - intercept valve/

SV-10160A1 Bl Intercept valve fails As Is

. Bypass valves will fail closed - the bypass sys<<

tern is disabled Inability to energize prevents valve position-ing by chest/shell Marmingl stop valve Cannot be energized to reset mechanical trip valve

. Prevents lockout valve from bypassing mechanical trip valve, whereby the mechanical trip valve remains effective

. Valve closes and prevents I

acceptable hydraulic pressure by closing mech-anical trip valve Intercept valve fails As Is' I

I

. The control valves mill fail 'As Is' fail as is and have a

hydraulic backup systeml I

- 'Preeze'n its last I

configuration prior to I

the failure of the AC bus

o. Past-acting solenoid valve - stop valve/

SV-10141A -

D As Is

. Stop valve fails 'As Is'

pacility:

Susquehanna Steam Electric Station Docket:

PAILURE HODES AllD EPPECTS ANALYSIS Sheet 3b of I

I I

ICommon Power Supply or Sensor:

IIControl System Affected:

1Y629 120 VAC Sr ss ra Separator d~TG Control CSID:

0160>>U04-001 CD:

0160-004-018 Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

U16U-004-671 Rev.

0 Date; Component Hame and llumber I

I I Pailure I

Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary:

Effect Upon Plant Performance

p. Solenoid test valve-stop valve g3/SV-10143 Solenoid test valve-stop valve l4/SV-10144 Solenoid test valve-intermediate valve/

SV-10160A3 - P3 Il2. Redundant power-supplied devices:.

IOff I

I I

I I

a.

Speed control

b. Pressure control c.

Load control d.

Bypass control unit IOff IIOff Iloff I

IIOff

e. Automatic pressure set-IOff point adjustment I

I

f. Hain steam sensor/PT-10101IOff I

I IOff I

I I

h. Electronic pressure trans-IOff mitter in steam chest/

I PT-10102 Inability to energize prevents opening and closing of valve when I

controlled by positioning I

unit in shell/chest warm-ing stop valve

. Loss of speed signals

. Loss of pressure control Loss of power-load match-ing

. Loss of bypass

system, to I

direct steam to condenser.l Required system at low I

speeds I

I Loss of pressure set-pointl signal to other systems

. Loss of main steam pres-sure signals

. Loss of intermediate steam pressure signal (power-level signal) loss of steam chest pres-sure signal At operating

speeds, re-dundant power is availa-ble from the permanent magnet generator IPHG)

Several devices are essential at low speeds without redundant power-the emergency trip is activated

r Pacility:

Susquehanna Steam Electric Station Docket:

PAILURE NODES AND EPPECTS ANALYSIS Sheet 3c of 3

I I

I ICommon Power Supply or Sensor:

IIControl System Affected:

1Y629 120 VAC PCeSSue R~ ~latae ad T G Cantral CSID:

0160-004-001 CD:

0160-004-018 Job No, Prepared by:

Date:

Checked by:

Approved by:

0160-004-671 Hev.

L Date:

i7 2%1 Date; m+/

Component Name and Number I

Symptoms and Local Pailure I

Effects Including Node Dependent Pailures System Inherent Compensating Provision Summdryr Effect Upon Control System Summary:

Effect Upon Plant Performance Off

i. Servo valve - control valve/XV-10148A -

D

. Loss of control valve positioning

$. Servo valve main stop valve/XV-10141 Off Loss of stop valve 42 positioning for chest/

chell warming

k. Servo valve - intercept I

valve/XV-10161A, C, E

Servo valve - bypass valve/XV-10139A - E

l. Auto load following unit Off Off Loss of intercept valve positioning

. Loss of tracking signals I

I I

I

m. Prequency-voltage con-lOff verter I

I

n. Line speed matcher lOff I

I

o. Chest/shell warming (Off circuit and logic

p. Current/voltage converter lOff I

q. Rate-sensitive power-load lOff unbalance circuit I

I

r. Valve positioning units lOff I

s. Haster trip bus lOff I

t. Position transducer - con-lOff trol valve/ZT-10150A -

D I

I Position transducer main lOff stop valve/ZT-10141A -

D

. Unnecessary at low speeds I

. Loss of chest/shell warm-ing circuit.

Required in start-up mode (low speeds)

Loss of converter Loss of rate-sensitive load control

. Loss of flow control

. Pails to energize

. Loss of position feedback I

signal to the position unit in flow control I

I I

i

Pacility:

'Susquehanna Steam Electric Station Docket:

PAILURE NODES AND EFEECTS ANALYSIS Sheet 3d.

of 3

I I

I (Common Power Supply or Sensor:

(Control System Affected:

IY629 120 VAC Pressure Re ulator and ~T G Control CSID:

0160-004-001 CD:

0160-004-018 Job No.

Prepared by:

Date; Checked by:

Approved by:

P. I Nev ~

'ate:

nate:

Component Name and Number I

I Pa ilure Hode I

I Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision

Summary, Effect Upon Control System SummaryJ Effect Upon Plant Performance Position transducer -

lOff intercept valves/

I ZT10160A1 - El I

I Position transducer -

lOff intermediate stop valve/

ZT-10160A2 - P2

u. Haster trip solenoids Off

. Doth solenoids de-ener-gized actuates Emergency Trip System

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE NODES AND EPPECTS ANALTSIS Sheet 1

of 2

I I

I ICommon Power Supply or Sensor:

IIControl System Affected:

PE-1N001A 8

C - Plow Elements Reactor Peedwater Control S stem CSID:

0160-004-001 CD:

0160-004-020 Job No.

Date:

Checked by:

Approved by:

0160-004-671

~. s" Rev.

Date:

Component Name and Number I

Il. Peedwater flow signal in-strumentation:

I I

I Pailure I

Node Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary:

Effect Upon Control System Summary:

Effect Upon Plant Performance Plow element/FE-1NOOIA>

0, C ~ I IPail Nighl.

I I

I I

I I

Nigh flow level signal from 1 of 3 sensors will be transmitted to level controller

. There are no inherent compensating provisions

. Upon failing high, the feedwater signals are summed together and fed into the control system

. The sensed floW rate willi be too high ta maintain the desired level I

I

, The feed pumps will re-ceive a speed runback control signal from the level controller There will be no atfect on plant performance unless Lqvel 2 and 3

'trips ale reached

. The reactor water level signal will in turn counteract the flow sig-nal and attempt to stabilize the water levell Pail low I

I Low flow level signal from 1 of 3 sensors will be transmitted to level controller

. There are no inherent system compensating provisions I ~ Level 2 and 3 trips may occur in dynamic transient

. Upon failing low, the control signal speeds up I

the reactor feed pumps tol counter lower feedwater flow rates.

. There will be no affect on plant performance unless Level 8 trip is reached

. The reactor level will rise and in turn attempt to counteract low flow signal Level 8 trip may occur in dynamic transient

~ Assumes failure of one element only, PNEA is the same for any one element failure.

Pacility:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURE MODES AND BPPECTS ANALYSIS Shoot 2

of 2

I I

I ICommon Power Supply or Sensor:

I(Control System Affected:

Component Name and Number I

I Pailure I

Mode Symptoms and Local Effects Including Dopendent Pailures PE-1NOOlh 8

C - Flou Elements

~ Recirculation Plow Control CSID:

0160-004-001 CD:

0160-004-020 I

I System Inherent I

Compensating Provision +

Job Ho.

Prepared by:

Date:

Checked by:

Approved by:

Summaryt Effect Upon Control System I

Summary:

Effect Upon Plant Performance 0160-004-671 kev.

D p~aJ ~

Date:

~. r-Date t W

P/

I

1. Reactor Runback Signal Instrumentation-Feedwater System:

a. Plov element, PE-1HOOlh, 8

C IPail Night.

Ho low flow runback I

signal associated with I

instrument failure I

I IPails Loul. Low flov signal trans-mitted from the feedvater system control of reactor recirculation system run-back circuitry to auxil-iary circuits A and 8

. Relay contacts in the auxiliary circuitry logic I

are activated as part of tho reactor runback signall processing I

. There are no inherent compensating provisions Recirculation control system vill not react to the runback signal without the following inputs to the auxiliary circuits:

iow flou input from feedwater system blare/Relay Circulating water pump trip input

- Low HPSN input from feoduater system Loss of ability to moni-tor actual low flow con-ditions from the failed instruments

. Reactor runback circuitryl is partially armed

. Plant performance is not affected Plant pertormance is not affected.

. Recirculation flow is identical to the flow prior to instrument's failure Assumes failure of one element only, PMEA is the same for any one failure.

Paciltiy:

Susquehanna Steam Electric Station Docket:

50-387, 50-388 PAILURB NODES AHD EPPECTS ANALYSIS Sheet 1

of 1

I I

I ICommon Power Supply or Sensor:

IIControl System Affected:

Cascading Power Supply Effect 1Y218 and 1Y219 120 VAC See Note CSID:

0160-004-001 CD:

0160-004-019 Job No.

Prepared by:~

Date:

Checked by:

Approved by:

0160-004-671

Hev, O

Date:

Component Name and Number I

I I Pailure I

Hode Symptoms and Local Effects Including Dependent Pailures System Inherent Compensating Provision Summary Effect Upon Control System Summary:

Effect Upon Plant Performance Note:

The PHEAs for these power supplies are ad dressed individually under 1Y218 and 1Y219, respectively.

I