05000315/LER-1998-031, :on 980610,potential Common Mode Failure of RHR Pumps Were Noted.Caused by Inaccurate Values.Accurate Miniflow Numbers Have Been Determined by Flow Testing

:on 980610,potential Common Mode Failure of RHR Pumps Were Noted.Caused by Inaccurate Values.Accurate Miniflow Numbers Have Been Determined by Flow Testing

ML17335A387
Person / Time
Site:	Cook
Issue date:	12/11/1998
From:	Boston D INDIANA MICHIGAN POWER CO.
To:
Shared Package
ML17335A386	List: 05000315/LER-1998-031, :on 980610,potential Common Mode Failure of RHR Pumps Were Noted.Caused by Inaccurate Values.Accurate Miniflow Numbers Have Been Determined by Flow Testing 05000315/LER-1998-031-01, Forwards LER 98-031-01,re Potential Common Mode Failure of RHR Pumps Due to Use of Inaccurate Values.Commitment Made by Util,Listed
References
LER-98-031, LER-98-31, NUDOCS 9812150146
Download: ML17335A387 (5)

LER-1998-031, on 980610,potential Common Mode Failure of RHR Pumps Were Noted.Caused by Inaccurate Values.Accurate Miniflow Numbers Have Been Determined by Flow Testing

Event date:
Report date:
Reporting criterion:	10 CFR 50.73(a)(2)(viii) 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(ii) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(x)
3151998031R00 - NRC Website

text

NRC Form 366 U.S. NUCLEAR REGUlATORYCOMMISSION 1998)

LlCENSEE EVENT REPORT (LER)

(See reverse for required number of digits/characters for each block)

APPROVED BYOMB No. 3150%104 EXPIRES 06l30/2001 EsrsIATED IKEIOEN pER REspoNsE To cotsK.Y wiTH Ttes MAIIATORY 00'ORMATICNCOLLECTIONREOVEST: 50.0 tOtS. REPORTED LESSONS LEARNEDARE NCORPORATED elTO Tt& UENNSSIO PROCESS AND FED SACK TO SIVSTRY.

FORWARD COMMENTS REOARDSIO SVRDEN ESTSIATE TO THE IIFORMATICNANO RECORDS MANAGEMENT SRANCH IM AS).

U.S.

NUCLEAR RECIAATORY COMMISSCN. WASISNCTOH. DC 005550001. AICI TO THEP~

EDVCllON PROIECT o1500100, OFFCE OF MANACEMEN'rAIE5 SVDCET, WASteNOTOIL DC 20505 FACIUlYNAME(I) llTLE(5)

Cook Nuclear Plant Unit 1 DOCKET NUMBER(2) 05000-315 PAGE (5) 1 of 3 Potential Common Mode Failure of Residual Heat Removal Pumps Due to Use of Inaccurate Values EVENT DATE (5)

LER NUMBER(6)

REPORT DATE (7)

OTHER FACILITIESINVOLVED(8)

MONTH DAY 06 10 OPERATING MODE (9)

YEAR YEAR 1998 1998 SEQUENTIAL NUMBER 031 REVISION NUMBER 01 12 DAY YEAR 1998 ILI Cook Unit 2 V

05000-316 50.73(a)(2)(viii) 20.2201 (b) 20.2203(a)(2)(v) 50.73(a)(2)(i)

THIS REPORT IS SUBMITTEDPURSUANT TO THE REQUIREMENTS OF 10 CFR g: (Check one or more) (11)

POWER LEVEL(10) 00 20.2203(a)(1) 20.2203(a)(2)(I) 20.2203(a)(2)(ii) 20.2203(a)(2)(iii) 20.2203(a)(2)(iv) 20.2203(a)(3)(i) 20.2203(a)(3)(ii) 20.2203(a)(4) 50.36(c)(1) 50.36(c)(2)

LICENSEE CONTACT FOR THIS LER (12) 50.73(a)(2)(ii) 50.73(a)(2)(iii) 50.73(a)(2)(iv) 50.73(a)(2)(v) 50.73(a)(2)(vii) 50.73(a)(2)(x) 73.71 OTHER Specify in Abetrect bekee or DNRCFcrlnSSEA NAME TELEPHONE NUMBER(Inc4dehree Code)

Mr. Dan Boston, Safety Related Mechanical Engineering Superintendent 616/465-5901, X1863 COMPLETE ONE LINE FOR EACH COMPONENT FAILURE DESCRIBED IN THIS REPORT (13)

CAUSE

SYSTEM COMPONENT MANUFACTURER REPORTABLE TO EPIX

CAUSE

SYSTEM COMPONENT

'ANUFACTURER REPORTABLE TO EPIX SUPPLEMENTAL REPORT EXPECTED (14 YES (IfYes, complete EXPECTED SUBMISSION DATE)

NO EXPECTED SUBMISSION DATE (15)

MONTH DAY Abstract (Limitto 1400 spaces, I.e., approximately 15 single-spaced typewritten lines) (16)

On June 10, 1998, with both units in Mode 5, itwas determined that the Residual Heat Removal (RHR) pump minimum flow (miniflow)controls for both units had a potential design deficiency. Westinghouse Nuclear Safety Advisory Letter 98-002 stated that during a LOCAof a size to allow the RHR/Low Head Safety Injection pumps to inject into the reactor coolant system (RCS) at less than required miniflow, the miniflow valves might cycle repeatedly from open to close until the valves or the valve motors failed. Available miniflowis a combination of accident mitigation flow and bypass flow through the miniflowvalves.

Ifthe failed valves prevented adequate miniflow, the associated RHR pumps could fail. In accordance with 10CFR50.72(b)(2)(i), "Any event, found while the reactor is shut down, that, had it been found while the reactor was in operation, would have resulted in the nuclear power plant being in an unanalyzed condition that significantly compromises plant safety," and 1.0CFR50.72(b)(2)(iii), "Any condition that alone could have prevented the fulfillmentof the safety function of a system needed to [m]itigate the consequences of an accident," an ENS notification was made at 1140 hours0.0132 days <br />0.317 hours <br />0.00188 weeks <br />4.3377e-4 months <br /> EDT. An interim LER was submitted in accordance with 10CFR50.73(a)(2)(ii) and 10CFR50.73(a)(2)(v).

The primary cause of this event was use of inaccurate miniflownumbers in calculating the valve control set points. It is not known how long or why inaccurate flowwas used for the set point calculations.

The values had not been verified by sting. Accurate minifiowvalues have been determined by flow testing. These numbers willbe used in calculating set oints for new instruments that willbe installed. Other systems were evaluated for similar concerns.

Several programs ave been initiated or improved to identify or prevent similar concerns.

Overall evaluation of this low probability condition determined that the health and safety of the public were not endangered.

98i2i5014h 9812ii PDR ADQCK 050003i5 S

PDR

RCFORM366A Us Nu L

E 6-1998)

LICENSEE EVENT REPORT (LER)

TEXT CONTINUATION FACILITYNAME(1)

Cook Nuclear Plant Unit 1 DOCKET NUMBER(2) 05000-315 YEAR LER NUMBER(6)

SEQUENTIAL NUMBER REVISION NUMBER PAGE (3) 2 of 3 TEXT (Ifmore spece is required, use edditionel copies ofNRC Form (366A) (17)

Conditions Prior to Event

Unit 1 was in Mode 5, Cold Shutdown Unit 2 was in Mode 5, Cold Shutdown 1998

031 01 Descri tlon of Event On June 10, 1998, during a review of Westinghouse Nuclear Safety Advisory Letter (NSAL)98-002, engineers determined that the Residual Heat Removal (RHR) pump minimum flow (miniflow)controls for both units had a potential design deficiency. The NSAL stated that during a LOCAof a size to allow the RHR/Low Head Safety Injection pumps to inject into the reactor coolant system (RCS) at less than required miniflow, the miniflowvalves might cycle repeatedly from open to close until the valves or the valve motors failed. Available miniflowis a combination of accident mitigation flowand bypass flowthrough the miniflowvalves. Ifthe failed valves prevented adequate miniflow, the associated RHR pumps could fail.

An earlier condition report (CR) investigation had determined that the flow measurement instrumentation that controls the RHR pump miniflowvalves would need to be replaced by instruments with different design characteristics.

This work had begun in October 1996 when a CR was written because the Unit 2 East RHR Pump failed a post maintenance test. The CR investigation determined that the flow measurement instrumentation that controls the RHR pump miniflowvalves would eed to be replaced by instruments with different design characteristics.

New instruments were being procured when SAL-98-002 was received.

Review of NSAL-98-002 prompted instrumentation and controls (l&C)engineers working on he instrument replacement to focus on potential valve cycling problems.

To prevent valve cycling, itwas necessary to have an accurate value for the flowthrough the miniflowline to property set the open and close setpoints.

Ultrasonic flow measurement equipment was used to determine that actual miniflowwas approximately 508 gallons per minute (gpm) for Unit 1 and 535 gpm for Unit 2. Once miniflowwas known, itwas possible to review historical miniflowinstrument calibration data and determine ifcycling could have occurred in the past. The review showed that the open and close set points, with flow instrumentation calibrated to the historical standards, did not have enough separation to prevent cycling, given the accident scenario presented in NSAL-98-002. The typical open setpoint was about 455 gpm and the typical close setpoint was about 939 gpm. Calibration records showed that with instrument driftand uncertainty, there were periods when the set points did have enough separation to prevent cycling.

Cause of Event

The primary cause of this event was use of inaccurate miniflownumbers in calculating the valve control set points.

Determination of the proper control set points depends on accurate knowledge of full flow in the miniflowlines. The actual flows are approximately 508 gpm for Unit 1 and approximately 535 gpm for Unit 2, as determined by recent ultrasonic flow meter testing. The value used historically, which had not been verified by testing, was approximately 463 gpm. It is not known how Iong or why inaccurate flowwas used for the set point calculations.

Anal sls of Event This condition was determined to be reportable in accordance with 10CFR50.72(b)(2)(i), as a condition which was found while the reactor is shut down, which ifit had been found while the reactor was operating, would have resulted in the nuclear power plant being in an unanalyzed condition and with 10CFR50.72(b)(2)(iii), as a condition that alone could have prevented the fulfillmentof the safety function of a system needed to mtigate the consequences of an accident.

An ENS notification was made on June 10, 1998, at 1140 hours0.0132 days <br />0.317 hours <br />0.00188 weeks <br />4.3377e-4 months <br /> EDT on June 10, 1998. An interim LER was submitted on July 10, 1998, in accordance with 10CFR50.73(a)(2)(ii) and 10CFR50.73(a)(2)(v).

This LER is submitted as an update.

The safety function of the RHR system is to provide low head emergency core cooling flowduring a LOCA. RHR injection ay be precluded during a small break LOCA. In such a situation, the miniflowcontrols play an important role in pump rotection by regulating flow through the miniflowlines.U.S. NUCLEAR REGULATORY COMMISSION (6-1998)

LICENSEE EVENT REPORT (LER)

TEXT CONTINUATION V

'ACILITYNAME(1)

Cook Nuclear Plant Unit 1 DOCKET NUMBER(2) 05000-315 YEAR LER NUMBER(6)

SEQUENTIAL NUMBER REVISION NUMBER PAGE (3) 3of3 1998 031 01 TEXT(Ifmme speceis mquinrd, use edditionel copies ofNRC Form (366A) (17)The event had a low probability of occurrence because multiple conditions would have had to occur in specific sequences to have caused a common-mode failure of the RHR pumps.

Cycling could have occurred only ifthe flowthrough an RHR train was within a narrow range of values.

The approximate flowthrough a train would have had to have been between 390 and 470 gpm. This flowwould have only occurred while the RHR pumps were discharging to the suctions of the safety injection (Sl) and centrifugal charging pumps while the RCS was at a relatively high pressure.

Even ifthe flowwould have been within the range, the systems were not always susceptible to cycling. Flow instrument driftcaused the actual differential between the open and close set points to vary. Ifcycling had occurred, the valve would have had to have failed closed to deprive the pumps of minNow. Even with the valve fullyclosed, flowwould have been at least 390 gpm.

Westinghouse had informed AEP that the miniflowrequirement for similar pumps at another nuclear power plant was approximately 330 gpm. Although this cannot be directly applied to D. C. Cook, it is reasonable to believe that an RHR pump can su'Ivive at flows less than the 500 gpm given in the vendor manual.

Finally, there is no reason to believe that cycling would have caused both valves to fail at the same time. The failure of one valve and pump would have allowed RCS pressure to decrease as input flowwas reduced.

This would have caused the other pump's flowto increase beyond the range where cycling would have occurred.

The flow Into the RCS would have ad to decrease back to the cycling range before the other valve and pump could have failed. The time between the two vents would have given the operators time to take corrective actions. The combined effect ofthe above conditions was to reduce the probability of a common-mode failure.

Overall evaluation of the condition determined that the health and safety of the public were not endangered.

Corrective Actions

Accurate miniflownumbers have been determined by flowtesting. These numbers willbe used in calculating set points for new flowcontrol instruments that will be installed. The calculation, ECP-12-I3-01, has not yet been completed, however the methodology is complete and is not expected to change.

The calculation willserve as the record for how and why the set points were established.

During a review of other systems, engineers determined that the centrifugal charging pumps and Sl pumps might be subject to similar conditions.

Evaluation of the Sl pumps determined that they were not susceptible to the same failure mechanism because there is no automatic control scheme.

Evaluation of the charging pumps determined that the associated miniflowsystem was not as tightly coupled as the RHR miniflowcontrol system.

The potential for cycling had been considered during preparation of Calculation ENSM 971023CV, which had established the charging pump miniflow control set points. The calculation basis willbe maintained through the new calculation procedure, 800000-LTG-5400.02 "Calculations".

Control and documentation of changes to plant instrument set points have been improved and are controlled by procedure PMP,6065.ISP.001, "Plant Instrument Set Point Control Program."

The operating experience review program, system readiness reviews, restart walkdowns, the calculation verification program, and the set point control and instrumentation uncertainty review, willprovide additional assurance that issues similar to the miniflowvalve cycling issue are corrected or prevented.

revlous Similar Events one vs~

0