ML18137A468

301 Exam Final Items (ADAMS-2B) Delay Release 2 Years

ML18137A468
Person / Time
Site:	Surry
Issue date:	05/17/2018
From:	NRC/RGN-II
To:	Virginia Electric & Power Co (VEPCO)
References
Download: ML18137A468 (643)

Text

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 Facility: _Surry_________________ Scenario No.: ___1_____ Op-Test No.: 17-301___

Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 and 2 at 100% power; MOL.

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover: The Team will pre-brief conduct of PT-18.6I, PZR Block Valve Stroke Test Event Malf. Event Event No. No. Type* Description 1 RCMOV_5 N BOP/SRO Test Cycle Pressurizer PORV, Block Valve breaker will trip when re-35_BKR, opened Open C RO TS SRO 2 RC4903, - I RO/SRO PRZR Level Transmitter Fails to 34%, requiring IAs of AP-53.00 to

.2 DEG control CH flow.

TS SRO 3 SD0201 C BOP/SRO Loss of High Pressure Drain Pump, 1-SD-P-1A. (AP-18.00) (CT-1) 4 R RO/SRO Ramp to 75% power IAW AP-23.00.

N BOP 5 FW1902, I BOP/SRO B FRV Controller fails low requiring manual FRV control. ( AP-53.00).

-1 DEG (CT-2) 6 RC2402, M All Steam Generator Tube Rupture B SG at approximately 360 gpm. AP-40%, 60 16.00, (E-0, E-3).

sec ramp GM0701, GM0702 Generator Output breakers dont automatically open.

RC5601 RC5602 Reactor Coolant Pumps trip on electrical power swap to Reserve Station RC5603 Service Transformers (30 seconds after reactor trip).

CH6401, CH6402 Failure of HHSI (C trip, A and B fail to auto start) and LHSI (B fails to CH0503 auto start).

(CT-3, CT-4) 7 PCV455C_ M All SGTR with Loss of Pressure Control. (ECA-3.3)

OPEN, OFF

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 8 SI409 C BOP BOP Failures in E-0 Attachments:

SI2505

• 1-CH-P-1A/B fail to auto start; 1-CH-P-1C trips on Overcurrent.

• 1-SI-P-1B, LHSI pump does not auto start.

CH54

• 1-CH-HCV-1200, Letdown Orifice Isol. A/B does not auto close.

CH55

• 1-VS-MOD-103A, Control Room Sup MOD does not auto close.

• 1-MS-TV-109, SFGD Steam Traps Outlet Trip Valve does not auto close.

• 1-DA-TV-100A/B, CTMT Sump PPS Disch I/S TV does not auto close.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 LIST OF CRITICAL TASKS CT # EVENT DESCRIPTION MET ()

CT-1 3, Loss of Start a third Condensate pump and reduce power HP Drain prior to S/G low level trip (2/3 channels on one S/G <

Pump 17% NR).

CT-2 5, B FRV Restore Feedwater to normal and restore S/G level to CNTRL FL normal prior to S/G Low level trip (2/3 channels on one S/G < 17% NR), or S/G High level trip (2/3 channels on one S/G > 75% NR).

CT-3 6, SGTR Restore High Head SI to the core prior to exiting E-0.

CT-4 6, SGTR Isolate Feedwater flow into the ruptured S/G before S/G B NR reaches 100%

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 Event 1: PT-18.6 I, PZR Block Valve Stroke Test. (N- BOP/SRO)

The Team will pre-brief this evolution prior to entering the Simulator. Upon entry of the Team to the Simulator, the Scenario brief will be given, questions answered, and the Team allowed ~ 5 minutes to become acclimated to the Simulator Environment.

When the BOP closes 1-RC-MOV-1535, 1-RC-PCV-1456 block valve, and attempts to re-open 1-RC-MOV-1535, a series of triggers actuate to trip the power supply breaker to 1-RC-MOV 1535.

Verifiable Action(s):

1) BOP will close 1-RC-MOV-1535 and time the stroke.

2) RO/BOP will place the 1-RC-MOV-1456 PORV control switch in the close position following Tech Spec review.

Technical Specifications: The SRO will Review Tech Specs and determine which TS LCOs are not met. The following LCOs are not met:

• Tech Specs 3.1.A.6.d: A one (1) hour clock exists to place 1-RC-PCV-1456 in manual (switch to close); and a 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> clock to return the block valve to an OPERABLE status, or be in HSD in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and RCS temperature <350°F within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

This Event sets up entry into ECA-3.3, SGTR without Pressure Control; Major Event later in the Scenario.

Event 2: PRZR level Upper Channel Fails Low PRZR level on selected Upper Channel fails to ~34%. (I - RO/SRO, TS - SRO).

The RO will diagnose the failure based on CH to Regen HX Hi/Low flow alarm (Annunciator 1D-E5) or identification of CH flow increasing and PZR level Channel III lowering.

Verifiable Actions(s):

1) The RO will place CH flow in Manual and control PRZR level at setpoint IAW AP-53.00, Loss of Vital Instrumentation/Controls.

2) RO will select an operable channel on the pressurizer level recorder.

3) The RO will defeat the failed channel IAW AP-53.00, and return CH flow to automatic when normal PRZR level restored.

Technical Specifications: The SRO will Review Tech Specs and determine which TS LCOs are not met. The following LCOs are not met:

• TS 3.7, Table 3.7-1, item 9. Operator Actions: 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> clock to place the Failed Channel in trip. With the number of OPERABLE Channels less than the Total number of channels; place the failed channel in trip in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, allowable to bypass the channel for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance, if requirements not met reduce power to less than P-7 (10%) within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

Other Tech Spec LCOs mentioned in AP-53.00 which are met include:

• TS-Table 3.7-6, item 14, Pressurizer Level, 2 Channels required, condition met.

• Tech Spec 3.1.A.5 (Pressurizer heaters) is met.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 Event 3: Loss of the HP Heater Drain Pump (1-SD-P-1A) (C - BOP/SRO)

The BOP will diagnose the failure based upon alarms and indication received. The Team will initiate AP-18.00, Loss of HP Heater Drain Pump/ Network 90 failure.

Verifiable Actions:

1) The BOP will place the tripped High Pressure Drain pump control switch in PTL.

2) The BOP will start a third condensate pump.

3) Reduce Turbine Load as necessary to maintain reactor power less than 100% using the valve position limiter or using Turbine Manual (approximately 50 MW reduction required).

Technical Specifications - None Critical Task (CT-1): Start a third condensate pump, and reduce power prior to S/G low level trip (2/3 channels on one S/G < 17% NR). (approx. 14 minutes w/no operator action).

Event 4: Power Reduction to less than 75% power using AP-23.00, Rapid Load Reduction. (R - RO/SRO, N-BOP)

The SRO will lead a Team Brief where the reactivity plan will be discussed to reduce reactor power to less than 75% power in order to restore the Polishing Building to service. The RO and SRO will be credited with a Reactivity Manipulation and the BOP with a Normal Evolution.

Verifiable Action(s):

1) RO will manipulate control rods to control delta flux and/or Tave.

2) RO will manipulate CVCS controls to Emergency Borate.

3) RO will manipulate CVCS control to establish a normal boration to assist in Tave control.

4) BOP will manipulate Turbine Controls to establish power reduction.

5) BOP will maintain B Feed flow in MANUAL during the ramp.

Event #5: B FRV Controller fails low. (I - BOP/SRO)

BOP will diagnose the failure based upon alarms and indications received and take the Immediate Actions of AP-53.00. The Team will implement AP-53.00, Loss of Vital Instrumentation/Controls and shift B FRV controller to manual. The BOP will restore B SG NR level to program.

Verifiable Action(s):

1) BOP will place the B FRV in manual and regain control of B SG NR level.

2) BOP will restore B S/G to normal band and maintain control throughout remainder of scenario.

Technical Specifications - None

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 Critical Task (CT-2): Restore Feedwater to normal and restore S/G level to normal prior to S/G Low level trip (2/3 channels on one S/G < 17% NR), or S/G High level trip (2/3 channels on one S/G > 75% NR).

Event #6: SGTR B SG, 360 gpm. (M - ALL)

When the evaluation Team is ready, a SGTR in the B SG will be implemented. The RO will assess RCS leakage in response to alarms and indications received. The RO will perform AP-16.00, and determine that RCS leakage exceeds 50 gpm. The Team will perform E-0 and manually initiate SI. During the performance of E-0 the main generator output breakers will fail to trip requiring the RO to manually trip them. During the manual SI the HHSI pumps will fail; 1-CH-P-1A trips shortly after auto starting, and 1-CH-P-1B, and 1C fail to auto start. 1-SI-P-1B will fail to auto start, and with the A LHSI pump tagged out there will be no LHSI pump running.

The SRO will perform a commensurate brief and continue with E-0. While the RO and SRO continue with E-0, the BOP will be directed to perform E-0 Attachments 1 through 3. The RO may be directed to perform Attachment 2 due to the SI failures.

Verifiable Actions:

1) RO will increase CH flow in manual per Immediate Action Steps of 1-AP-16.00, Excessive RCS Leakage to determine if RCS leakage is greater than the capacity of a single CH pump.

2) RO re-perform High Level Steps of E-0, and manually Safety Inject on Step 4 of 1-E-0.

3) BOP will perform Attachments 1-3 of E-0. Failures included in Event 8. Note: The RO may be directed to perform Attachment 2.

Critical Tasks:

CT-3: Total loss of HHSI: 1-CH-P-1C trips on overcurrent immediately after reactor trip. 1-CH-P-1A, and 1B fail to auto start on the SI. 1-SI-P-1B will fail to auto start, and with the A LHSI pump tagged out there will be no LHSI pump running. The operator must restore HHSI to the core prior to exiting E-0 to provide adequate core cooling.

CT-4: Isolate feedwater flow into the ruptured S/G before S/G B NR reaches 100%. With no operator action to isolate FW, this would take approximately 24 minutes. Failing to isolate Feedwater into the ruptured S/G will cause the S/G to fill faster. Once NR level reaches 100%

there is no accurate method for determining S/G level due to the inaccuracy of the WR S/G levels. Once a S/G is fully flooded the hydrodynamic loading on the S/G, MS lines, and other components may exceed their allowable stress rating, possibly causing the S/G to fail catastrophically.

Event #7: SGTR with Loss of Pressure control. (M - All)

The Team continues through the EOP progression E-0 to E-3.

After the Team has completed the rapid cooldown of E-3 and moves to the Depressurization steps, the Team will be presented with the inability to depressurize the RCS (No RCPs - No Spray available), 1 PZR PORV inoperable, and the last Pzr PORV not responding to placing the control switch in Open. This will require the Team to Transition to ECA-3.3, SGTR without Pressure Control.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #1 When ECA-3.3 is entered, it is expected that the ruptured SG level will be > 73% NR leading to Team moving to Step 6, Check If SI Can Be Terminated.

Verifiable Actions:

1) BOP will isolate AFW flow to the Ruptured SG.

2) BOP will reset SI and secure A CH pump and one of the running LHSI pumps.

(Discretionary CT - within 30 minutes).

3) BOP will manipulate steam dump controls for rapid cooldown.

4) RO/BOP will block SI signals when conditions established.

5) RO will manipulate SI/CVCS control to terminate SI, establish CH flow, and restore letdown flow (ECA-3.3).

Event #8: BOP Failures in E-0 Attachments During performance of E-0 the BOP will identify and correct the following component failures:

• 1-CH-P-1A/B fail to auto start; 1-CH-P-1C trips on Overcurrent.

• 1-SI-P-1B, LHSI pump does not auto start.

• 1-CH-HCV-1200, Letdown Orifice Isol. A/B does not auto close.

• 1-VS-MOD-103A, Control Room Sup MOD does not auto close.

• 1-MS-TV-109, SFGD Steam Traps Outlet Trip Valve does not auto close.

• 1-DA-TV-100A/B, CTMT Sump PPS Disch I/S TV does not auto close.

The Scenario is terminated at Lead Evaluator discretion or at Step 10 of ECA-3.3, Check SI FLOW NOT REQUIRED.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 Initial Conditions: Unit 1 and 2 Operating at 100%.

Turnover: The Team will pre-brief conduct of PT-18.6I, PZR Block Valve Stroke Test Pre-load malfunctions: (Trigger 30s) o CH6401 DISABLE CHP1A AUTO START o CH6402 DISABLE CHP1B AUTO START o GM0701 MAIN GEN BKR OCB-G102 AUTO TRIP DISABLE o GM0702 MAIN GEN BKR OCB-G1T240 AUTO TRIP DISABLE o SI2409 SI RELAY CI1A FAILS TO ACTUATE o SI2505 SI RELAY SI5B FAILS TO ACTUATE o CH54 DISABLE CH-HCV-1200A AUTO CLOSURE o CH55 DISABLE CH-HCV-1200B AUTO CLOSURE o FP0301 FPS FACP07 ALARM HORN FAILURE o FP0302 FPS PC SPEAKER FAILURE o SIP1A_BKRPOS SIP1A BK 14H3 CUBICLE POSITION Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover:

Unit 1 and 2 at 100% power; MOL.

A BAST at 8.0 W/%; Last Shift performed two (2) 35 gallon alt dilutes followed by a manual makeup for training.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days.

• 1-SI-P-1A is tagged out for breaker work (2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover: Team will perform 1-PT-18.6I, PZR Block Valve Stroke Test. The performance of this procedure has been analyzed based on the current plant configurations and the PSA indicates green.

Event Malf. #s Severity Instructor Notes and Required Feedback 1 RCMOV_ Open Test Cycle Pressurizer PORV, Block Valve breaker will trip when re-opened.

535_BKR, 2 RC4903, -.2 DEG PRZR Level Transmitter Fails Low, requiring IAs of AP-53.00 to control CH flow. 0-AP-53.00.

3 SD0201 True Loss of High Pressure Drain, AP-18.00 4 N/A N/A Ramp to 75% power IAW AP-23.00 5 FW1902, -1 DEG B FRV Controller fails low requiring manual FRV control. IAs of AP-53.00.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 6 RC2402 40% Steam Generator Tube Rupture B SG at approximately 360 gpm. AP-16.00, (E-0, E-3).

GM0701 TRUE GM0702 Generator Output breakers fail to trip open.

Reactor Coolant Pumps trip on electrical power swap to Reserve Station Service RC5601 TRUE Transformers (30 seconds after reactor trip).

RC5602 RC5603 TRUE Failure of HHSI (A trip, B and C fail to auto start). Failure of LHSI (B fails to auto CH6402 CH6403 start.

CH0503 7 PCV455C OFF PZR PORV 1-RC-1455C will not open when switch placed in open - Go to ECA-

_OPEN, 3.3 8 SI409 TRUE BOP Failures in E-0 Attachments:

SI2505

• 1-CH-P-1A/B fail to auto start; 1-CH-P-1C trips on Overcurrent.

• 1-SI-P-1B, LHSI pump does not auto start.

CH54

• 1-CH-HCV-1200, Letdown Orifice Isol. A/B does not auto close.

CH55

• 1-VS-MOD-103A, Control Room Sup MOD does not auto close.

• 1-MS-TV-109, SFGD Steam Traps Outlet Trip Valve does not auto close.

• 1-DA-TV-100A/B, CTMT Sump PPS Disch I/S TV does not auto close.

Scenario Objectives:

A. Given a failure of 1-RC-MOV-1535 to re-open during performance of 1-PT-18.6I, PZR Block Valve Stroke Test, Implement the Applicable Tech Spec LCO.

B. Given a pressurizer level channel deviation, respond IAW 0-AP-53.00 to the failure.

C. Given a trip of the running High Pressure Drain pump, ramp the Unit 1 <75% IAW 1-AP-18.00 and 0-AP-23.

D. Given a failure of B FRV controller - low, take action IAW 0-AP-53.00 to control SG level.

E. Given a Design Basis SG Tube Rupture, respond IAW 1-E-0, and 1-E-3, Steam Generator Tube Rupture.

F. Given the Failure of 1-RC-PCV-1445C to open to depressurize the RCS, transition to 1-ECA-3.3, Steam Generator Tube Rupture without Pressurizer Pressure Control.

G. Given SI relay failures, manually align components IAW E-0, Attachment 1, 2, and 3

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 Scenario Sequence Event One: PRZR PORV Block Valve Stroke Test Following turnover, the Crew will begin performing 1-PT-18.6I, Przr PORV Block Valve Stroke Test. The RO will stroke and time 1-RC-MOV-1535 closure time. The RO will then attempt to time the stroke-open time of 1-RC-MOV-1535. As soon as the operator places the control switch in the OPEN position, the breaker for 1-RC-MOV-1535 will trip open, preventing 1-RC-MOV-1535 from opening.

Malfunctions required: One, Breaker remote function RCMOV535_BKR PRZR PORV BLOCK.

Objectives: (RO) Place 1-RC-MOV-1535 to OPEN and determine that supply breaker for 1-RC-MOV-1535 tripped.

(SRO). Refer to Tech Specs, determine if any LCOs are not met, and determine required actions.

Success Path. Determine that 1-RC-MOV-1535 is inoperable and place PORV 1-RC-MOV-1456 to CLOSE.

Event Two: Pressurizer Level Upper Channel fails low..

When the Evaluating Team is ready, the malfunction is implemented to cause the Pressurizer Level channel 3 (1-RC-LT-461) to fail low. This malfunction will cause the channel to fail to approximately 34% which will cause Charging flow to rise above the program amount.

Malfunctions required: One, RC4903.

Objectives: (RO): Place Charging flow controller 1-CH-FC-1122C to MAN and lower Charging flow to restore Pressurizer level to program value.

(SRO): Direct actions of 0-AP-53.00. Consult Tech Specs for the failure.

Success Path: Respond IAW 0-AP-53.00 to stabilize pressurizer level by taking manual control of 1-CH-FCV-1122 and lowering charging flow. Swap to an operable pressurizer level.

Event Three: Loss of High Pressure Drain Pump, 1-SD-P-1A.

When the Evaluating Team is ready, the malfunction is implemented to cause the loss of High Pressure Drain Pump, 1-SD-P-1A. This failure will result in a lower Feed flow due to the loss of the HP drain flow, thereby lowering all S/G NR levels below their program level. The BOP is expected to identify the failure, and when directed, start an additional condensate pump per 1-AP-18.00. The team will start making preparations to ramp the Unit to < 75%.

Malfunctions required: One, SD0201.

Objectives: (BOP) Diagnose the loss of the High Pressure Drain pump. When directed start an additional Condensate pump, and restore S/G level to normal.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 (SRO) Direct starting of an additional Condensate pump and lower power level to be within Feeding capacity.

Success Path: Enter 1-AP-18.00. Start an additional Condensate pump and lower power as necessary to stabilize S/G level. Determine that a ramp to < 75% will be required.

Critical Task (CT-1) Start a third condensate pump, and reduce power prior to S/G low level trip (2/3 channels on one S/G < 17% NR).

Event Four: Ramp to < 75%.

The crew will implement a ramp plan to lower power to < 75%. Note: The Feed Controller failure (Event 5) can be implemented during the ramp.

Malfunctions required: None.

Objectives: (BOP) Control B SG NR level using B FEED Controller in MAN.

(RO) Operate Boric Acid controls to maintain Tave in the band with Tref.

(SRO) Direct actions for ramp to < 75%.

Success Path: Ramp the unit to < 75% per 0-AP-23.00, Rapid Load Reduction.

Event Five: SG B Feed Controller fails low.

When the Evaluating Team is ready, the failure of the B Feed Controller will take place. SG B Feed controller will fail low causing feed flow to the B SG to lower. B S/G level will lower and the operator must take action prior to SG level reaching 17% to avoid a Reactor Trip. Actions are taken in accordance with 0-AP-53.00. SG B level is stabilized.

Malfunctions required: One, FW 1801.

Objectives: (BOP) Place the B FF controller to MAN and raise Feed flow slowly.

(SRO) Direct actions per 0-AP-53. Consult with Tech Specs to determine if any LCOs are not met, and required actions.

Success Path: Perform 0-AP-53.00, and consult Tech Specs to determine if there are any Required Actions.

Critical Task (CT-2): Restore Feedwater to normal and restore S/G level to normal prior to S/G Low level trip (2/3 channels on one S/G < 17% NR), or S/G High level trip (2/3 channels on one S/G > 75% NR)

Event Six: SGTR B SG of 360 gpm.

When the Evaluating team is ready the malfunction is entered which will cause a SGTR of 360 gpm to be ramped in. The team will identify the leak and will perform AP-16.00, Excessive RCS Leakage. The rupture will rise and will require the crew to Trip and initiate SI per 1-E-0, Reactor Trip or SI. During the performance of E-0 the main generator output breakers will fail to trip

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 requiring the RO to manually trip them. During the manual SI the HHSI pumps will fail; 1-CH-P-1A trips shortly after auto starting, and 1-CH-P-1B, and 1C fail to auto start. 1-SI-P-1B will fail to auto start, and with the A LHSI pump tagged out there will be no LHSI pump running.

The SRO will perform a commensurate brief and continue with E-0. While the RO and SRO continue with E-0, the BOP will be directed to perform E-0 Attachments 1 through 3. The RO may be directed to perform Attachment 2 due to the SI failures Malfunctions required: Nine; RC2402, GM0701, GM0702, RC5601, RC5602, RC5603, CH6402, CH6403, CH0503.

Objectives: (RO): Perform immediate actions of 1-AP-16.00. Trip the Reactor and perform the Immediate Action Steps of 1-E-0, Reactor Trip or Safety Injection, from memory.

(BOP): Perform E-0 Attachments 1-3.

(SRO): Direct actions of E-0, and E-3 Success Path: Trip the Reactor and perform actions of 1-E-0, Reactor Trip or SI, and 1-E-3, SGTR to restore HHSI flow to the core. Isolate Feedwater to the ruptured SG and restore HHSI to the core.

Critical Tasks:

CT-3: Total loss of HHSI: 1-CH-P-1C trips on overcurrent after the reactor trip. 1-CH-P-1A, and 1B fail to auto start on the SI. 1-SI-P-1B will fail to auto start, and with the A LHSI pump tagged out there will be no LHSI pump running. The operator must restore HHSI to the core prior to exiting E-0 to provide adequate core cooling.

CT-4: Isolate feedwater flow into the ruptured S/G before S/G B NR reaches 100%. With no operator action to isolate FW, this would take approximately 24 minutes. Failing to isolate Feedwater into the ruptured S/G will cause the S/G to fill faster. Once NR level reaches 100%

there is no accurate method for determining S/G level due to the inaccuracy of the WR S/G levels. Once a S/G is fully flooded the hydrodynamic loading on the S/G, MS lines, and other components may exceed their allowable stress rating, possibly causing the S/G to fail catastrophically.

Event Seven: SGTR with Loss of Pressure Control.

After the Team has completed the rapid cooldown of E-3 and moves to the Depressurization steps. The RCPs tripped during swapover, and during event 1 1-RC-MOV-1535 failed such that one PORV was rendered inoperable. During E-3 when the team opens the other remaining PORV a failure will keep that PORV closed also. The Team will discover that they are unable to depressurize the RCS (No RCPs/No Spray available, No PORV available, Letdown isolated).

This will require the Team to Transition to ECA-3.3, SGTR without Pressure Control.

When ECA-3.3 is entered, it is expected that the ruptured SG level will be > 73% NR leading to Team moving to Step 6, Check If SI Can Be Terminated.

Malfunctions required: One, PCV 455C_OPEN OFF.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 Objectives:

(RO) manipulate SI/CVCS control to terminate SI, establish CH flow, and restore letdown flow.

(BOP) Reset SI and secure A CH pump. Isolate AFW flow to the Ruptured SG.

Manipulate steam dump controls for rapid cooldown.

Success Path: Transition to ECA-3.3 when it is determined there is no success path to depressurize the RCS..

Event Eight: BOP Failures in E-0 Attachments.

During performance of E-0 the BOP will identify and correct the following component failures:

• 1-CH-P-1A/B fail to auto start; 1-CH-P-1C trips on Overcurrent.

• 1-SI-P-1B, LHSI pump does not auto start.

• 1-CH-HCV-1200, Letdown Orifice Isol. A/B does not auto close.

• 1-VS-MOD-103A, Control Room Sup MOD does not auto close.

• 1-MS-TV-109, SFGD Steam Traps Outlet Trip Valve does not auto close.

• 1-DA-TV-100A/B, CTMT Sump PPS Disch I/S TV does not auto close.

Malfunctions required: Four: SI409, SI2505, CH54, CH55.

Objectives: (BOP) Identify components that fail to reposition on the SI Signal, and place them in their required condition.

Success Path: Identify and position components using 1-E-0, Attachment 1, 2, and 3.

The Scenario is terminated at Lead Evaluator discretion or at Step 10 of ECA-3.3, Check SI FLOW NOT REQUIRED Scenario Recapitulation Total Malfunctions: 17 Abnormal Events: 3, AP-53.00 (twice), AP-18.00.

Major Transients: 1 EOPs Entered: 2 (E-0, E-3)

EOP Contingencies: 1 (ECA-3.3)

SHIFT TURNOVER INFORMATION OPERATING PLAN:

Unit 1 is at 100% power with RCS boron concentration of 795 ppm.

Unit conditions have been stable at approximately 100% power since the last refueling outage.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra RO will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect.

Return to service expected later this shift.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to maintain 100% power on Unit #1 and upon relieving the watch, perform PT-18.6I, PZR Block Valve Stroke Test. Performance of this procedure has been authorized and has been PSA analyzed for current plant conditions.

The last shift performed two 35 gallon dilutions followed by a manual makeup for training.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 1 Page 15 of 97 Event

Description:

Test Cycle Pressurizer Block Valves, Block valve trips on re-open, PT-18.6I.

Cue: By team performance of 1-PT-18.6I.

Time Position Applicants Action or Behavior 1-PT-18.6I SRO/BOP NOTE - Team will pre-brief this evolution prior to entering the simulator. Initial Conditions and Precautions and Limitations will be completed before entering the simulator.

BOP Verify closed or close PRZR PORV 1-RC-PCV-1456. (step 6.1.1)

Verify key switch for PRZR PORV 1-RC-PCV-1456 OVPRESS BOP Mitigating System is in DISABLE. (6.1.2)

Verify PRZR PORV Block Valve 1-RC-MOV-1535 is open. (6.1.3)

BOP Stroke PRZR PORV Block Valve 1-RC-MOV-1535 through one complete cycle, timing valve movement in each direction. Time from signal initiation to complete valve travel. (6.1.4)

BOP Valve closes and fails to reopen.

SRO Refer to Technical Specification 3.1.A.6 for required action SRO Refer to Technical Specification 3.1.A.6 for required actions.

With one block valve inoperable, within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> either restore the block valve to operable status or place the associated PORV in manual. In addition, restore the block valve to operable status in the next 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or, be in at least HSD within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature to < 350°F within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. (TS 3.1.A.6.d)

BOP Places 1-RC-PCV-1456 in CLOSE.

SRO Start 72 Hour Clock to repair Block Valve.

SRO Direct RO/BOP to notify Service Building Operator to check status of 1H1-2S 6A breaker for 1-RC-MOV-1535.

RO/BOP Contact Service Building Operator to check status of 1-RC-MOV-1535 Breaker.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 1 Page 16 of 97 Event

Description:

Test Cycle Pressurizer Block Valves, Block valve trips on re-open, PT-18.6I.

Cue: By team performance of 1-PT-18.6I.

RO/BOP When notified by field operator that 1H1-2S 6A. Breaker is tripped, report information to the Team using a Focus Brief.

SRO Notify Shift Manager of Block Valve failure and suspension of PT performance.

Request Electrical Maintenance support to investigate breaker trip.

SRO Exit 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> clock to place 1-RC-PCV-1456 in manual.

SRO Perform brief to update Team on Technical Specification requirements. Brief driven by brief card and placards.

---END OF EVENT 1---

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 17 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Time Position Applicants Action or Behavior RO Diagnoses failure of 1-RC-LI-1461 with the following indications/alarms:

Alarms:

• 1C-D8 PRZR LO LEVEL (ARP at end of this section)

Indications:

• CH Flow rises on 1-CH-FI-1122A to ~109 gpm

• PRZR Level on 1-RC-LI-1461 lowers to 34%

In accordance with the immediate actions of AP-53.00 the RO will take manual control of pressurizer level control by placing 1-CH-FCV-1122 in manual and lowering charging flow to maintain program level (per AP-53.00).

SRO Enters 0-AP-53.00, Loss of Vital Instrumentation / Controls.

RO [1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Checks 1-RC-LI-1459, Pressurizer Level Channel 1, and 1-RC-LI-1460, Pressurizer Level Channel 2 are NORMAL.

RO [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Places 1-CH-FCV-1122 in manual and lowers charging flow.

SRO Conduct a Brief using the Briefing Placard and obtains Critical Parameter information from the RO and BOP. The SRO will update the Shift Manager during AP-progression.

SRO will provide a band for control of PRZR level with CH flow in MANUAL.

STA will have no input for the brief.

Step 3, AP-53.00 RO VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO will identify that reactor power is less than 100% using PCS Display of Core Thermal Power.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 18 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

SRO Caution prior to step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

Notes Prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 11.

SRO *4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

• PRZR Level Control, Step 9.

RO The RO will identify that 1-RC-LI-1461 (Channel 3) has failed.

Step 9, AP-53.00 SRO 9. CHECK PRZR LEVEL CONTROL CHANNELS - NORMAL RO Responds NO, 1-RC-LI-1461 Abnormal.

SRO 9 a) RNO 1) Place either of the following in MANUAL:

• 1-CH-FC-1122C, CHG FLOW CNTRL, OR

• 1-CH-LC-1459G, PRZR LEVEL CNTRL RO Responds 1-CH-FC-1122C in MANUAL SRO 9 a) RNO 2) Control PRZR Level at Program Level.

RO Responds Maintain PRZR Level at program +/- band set by SRO SRO 9 a) RNO 3) Move PRZR Level - CH SEL switch to Defeat the failed channel.

RO/BOP Transfers PZR CH SEL switch to 1 / 2 Position.

SRO 9 a) RNO 4) Check or place recorder 1-RC-LR-1459 on an operable channel.

BOP Checks or adjusts PRZR Level Recorder to 1-RC-LI-1459 or 1-RC-LI-1460.

SRO 9a) RNO 5) Refer to Tech Specs 3.1.A.5, Table 3.7-1 Item 9, and Table 3.7-6, Item 13.

• 3.1.A.5 (If Pzr heaters deenergized): This LCO is met.

• Table 3.7-1, item 9; Operator Action 7. Number of Operable channels one less than Total number of channels: Place Inoperable channel in trip within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, allowed to bypass channel for 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance, If conditions not met within allowed time, reduce power to less than P-7 in the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

• TS Table 3.7-6, Item 13: Required Number of channels to meet function = 2. This LCO is met.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 19 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

SRO 9 a) RNO 6) Refer to Attachment 3.

SRO hands Attachment 3, Pressurizer Level Control diagram to RO/BOP for review.

Note: Attachment 3 is at the end of this section.

Step 9, AP-53.00, Continued:

SRO Step 9 b) Check Pressurizer Heaters - Energized.

RO Checks Required Pressurizer Heaters energized, and reports that Pressurizer heaters are energized.

SRO Step 9 c) Check Letdown - IN SERVICE.

RO Reports Letdown in service.

SRO Evaluator Note: If crew isolates letdown (not anticipated), then crew will return Letdown to service per 0-AP-53.00, Attachment 8. (Attachment 8 included at end of RO this section)

SRO Step 9 d) Check PRZR level control - IN AUTOMATIC.

Reports pressurizer level control in MANUAL.

RO Step 9 d) RNO When pressurizer level restored to program level, un-saturate 1-CH-LC-1459G, PRZR LEVEL CNTRL. Place 1-CH-FC-1122C in automatic.

Acknowledges direction and notifies SRO when pressurizer level returned to AUTOMATIC.

Step 11, AP-53.00 SRO SRO recalls NOTE 2 Prior to Step 4 and goes to Step 11 of AP-53.00.

SRO Step 11 Check Calorimetric - Functional IAW 1-OPT-RX-001, Attachment 4.

RO/BOP Checks Calorimetric unaffected by this failure, and reports to the SRO.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 20 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Step 12, AP-53.00 SRO Step 12 REVIEW THE FOLLOWING:

• Tech Spec 3.7

• VPAP 2802 Notifications and Reports

• TRM

• Reg Guide 1.97

• EP-AA-303, Equipment Important to Emergency Response.

SRO directs STA to review all documents listed.

STA reports that all documents have been reviewed and discussed with the Shift Manager.

Step 13, AP-53.00 SRO CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS The team will identify that no new additional failures exist (i.e., all failures have already been addressed), proceed to the RNO section, and this will direct the team to Step 15.

Step 15, AP-53.00 SRO PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C END EVENT 2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 21 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 22 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 23 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 24 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 25 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 2 Page 26 of 97 Event

Description:

PRZR Level Transmitter Fails to 34%, 0-AP-53.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 3 Page 27 of 97 Event

Description:

Loss of High Pressure Drain Pump. (1-AP-18.00 Cue: By Examiner.

Time Position Applicants Action or Behavior BOP Diagnose the trip of the High Pressure Drain Pump, 1-SD-P-1A based on the following indications/alarms:

Alarms:

• 1K-D4: 4 KV BKR AUTO TRIP

• 1H-F3: CN POLISHING SYS TRBL

• 1H-D3: CN POLISHING BYPASS AOV OPEN

• 1H-E5/6/7: SG 1A/1B/1C FF > < SF

• 1H-G5/6/7: SG 1A/1B/1C LVL ERROR

• 1J-B4: HP HTR DR RCVR TK HI LVL

• 1J-E1:FW HTR 4A HI LVL

• 1J-F1: FW HTR 4B HI LVL Indications:

• Lowering S/G level indications.

• FRV controllers open all FRVs in an attempt to maintain level.

Step 1, AP-18.00 SRO Enter 1-AP-18.00 CHECK HP HEATER DRAIN PUMP STATUS:

SRO a) Check HP Heater Drain Pump - TRIPPED OR NOT PROVIDING SUFFICIENT FLOW BOP Reports that 1-SD-P-1, HP Heater Drain pumps tripped.

SRO b) Place pump control Switch in PTL BOP Places 1-SD-P-1A control switch in PTL Evaluator Note: It is possible that crew may enter 1-AP-21.00 first, due to lowering feed flow. This is not anticipated, but AP-21.00 is included at the end of this section.

Step 2, 1-AP-18.00 SRO CHECK REACTOR POWER - GREATER THAN OR EQUAL TO 75%

RO/BOP Reports reactor power at 100%. Note: Over time power will rise to approx. 101%.

Step 3, AP-18.00 SRO START THIRD CONDENSATE PUMP AS REQUIRED BY PLANT CONDITIONS BOP Starts 1-CN-P-1A and verifies Proper Operation.

Critical Task (CT-1): Start a third condensate pump, and reduce power prior to S/G low level trip (2/3 channels on one S/G < 17% NR).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 3 Page 28 of 97 Event

Description:

Loss of High Pressure Drain Pump. (1-AP-18.00 Cue: By Examiner.

Step 4, AP-18.00 SRO NOTE: With unit at 100% power, Turbine load should be decreased approximately 50 MW.

REDUCE TURBINE LOAD AS NECESSARY TO MAINTAIN LOOP Ts -

LESS THAN 100%

• Use Valve Position Limiter OR

• Reduce Turbine load using Turbine Manual. (Expected)

BOP Using Guidance of NOTE preceding the Step, Turbine load will be reduced.

Step 5, 1-AP-18.00 SRO NOTE: Ramping to 75% allows the Condensate Polishing Building to be placed fully in service.

COMMENCE RAMP TO 75% POWER IAW 0-AP-23.00, RAPID LOAD REDUCTION Step 6, 1-AP-18.00 SRO

• USE CONTROL RODS AND CHEMICAL SHIM TO MAINTAIN FLUX IN BAND Step 7, 1-AP-18.00 SRO MONITOR MAIN FEED REG VALVE RESPONSE - MAINTAINING SG LEVEL IN BAND BOP Acknowledges Step direction.

SRO Initiate AP-23.00, Rapid Load Reduction. (Event 5)

END EVENT #3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 3 Page 29 of 97 Event

Description:

Loss of High Pressure Drain Pump. (1-AP-18.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 3 Page 30 of 97 Event

Description:

Loss of High Pressure Drain Pump. (1-AP-18.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 3 Page 31 of 97 Event

Description:

Loss of High Pressure Drain Pump. (1-AP-18.00 Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 4 Page 32 of 97 Event

Description:

Ramp to 75% power. (0-AP-23.00)

Cue: When initiated by Team.

Time Position Applicants Action or Behavior AP-23.00, Rapid Load Reduction SRO The team will hold a transient brief. During the brief the upcoming ramp will be discussed.

The RO and BOP will report critical parameters, as per placard on Main Control Room Bench Board. It is expected that the RO will discuss reactivity parameters associated with the ramp from the pre-planned ramp plan.

The STA will have nothing new to add.

The following reactivity plan will be discussed for a ramp to 75%:

• The Team will discuss duration of Emergency Borate at start of Ramp, and remaining boron to be added via normal boration flowpath.

• Gallons of boric acid required as per plan - 147 gallons.

• Will probably recommend 25 sec Emerg Boration (50 gallons). Depending on Tave/Tref mismatch.

• If 25 sec. EB then 97 gallons Normal Boration.

• D control bank end at 197 steps.

• 1900 gallons of PG to stabilize power at 75%.

Step 1, 0-AP-23.00 SRO Caution Prior to Step 1:

• Conservative decision-making must be maintained during rapid load reductions. Refer to Attachment 1 for trip criteria.

Notes Prior to Step 1:

• Actions that can be completed independently of preceding steps may be performed out of sequence as directed by the SRO

• When the Turbine is not being actively ramped, the REFERENCE and SETTER values must remain matched to prevent inadvertent ramp.

• Pre-planned reactivity plans located in the Main Control Room will be used as guidance for ramping down to the desired power level.

• The ramp rate in IMP OUT is nonlinear and therefore pre-planned reactivity plans based on IMP IN are not as accurate. However, total amounts of boration and dilution can be used as guidance.

• For ramp rates greater than or equal to 1%/minute, Rod Control should remain in Automatic if available.

Step 1, 0-AP-23.00 RO TURN ON ALL PRZR HEATERS.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 4 Page 33 of 97 Event

Description:

Ramp to 75% power. (0-AP-23.00)

Cue: When initiated by Team.

SRO Step 2 0-AP-23.00 INITIATE PLANT LOAD REDUCTION AT 2%/MINUTE OR LESS:

BOP a) Check turbine valve position - NOT ON LIMITER The turbine is NOT on the limiter.

RO b) Insert control rods in AUTO or MANUAL as necessary to maintain Tave and Tref within 5°F.

BOP c) Check or place turbine in IMP IN or IMP OUT as determined by Shift Supervision The SRO chooses IMP IN.

BOP d) Adjust SETTER to desired power level. (Will adjust to approx.. 70%)

BOP e) Adjust LOAD RATE %/MIN thumbwheel to desired ramp rate (1%/minute)

BOP f) Initiate Turbine load reduction using OPERATOR AUTO (pushes the GO button)

BOP g) Reduce Turbine Valve Position Limiter as load decreases Periodically reduce the limiter setpoint during the ramp.

Step 3, 0-AP-23.00 SRO CHECK EMERGENCY BORATION - REQUIRED RO Reports Emergency Boration required.

Step 4, 0-AP-23.00 SRO NOTE: Step 4 or Step 5 may be performed repeatedly to maintain Tref and Tave matched, Flux in band, and control rod position above the LO-LO insertion limit.

RO Acknowledges NOTE.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 4 Page 34 of 97 Event

Description:

Ramp to 75% power. (0-AP-23.00)

Cue: When initiated by Team.

Step 4, 0-AP-23.00 SRO PERFORM AN EMERGENCY BORATION IAW THE FOLLOWING:

RO a) Check or raise CHG flow to greater than 75 gpm RO b) Transfer the in-service BATP to FAST RO c) Open 1-CH-MOV-1350 for required time RO d) Monitor EMRG BORATE FLOW

• 1-CH-FI-1110 e) After required emergency boration, perform the following:

RO 1) Close 1-CH-MOV-1350 RO 2) Transfer the in-service BATP to AUTO

3) Restore Charging flow control to normal.

Step 5, 0-AP-23.00 RO ESTABLISH A NORMAL BORATION TO MAINTAIN CONTROL ROD POSITION ABOVE THE LO-LO INSERTION LIMITS IAW ATTACHMENT 4 Attachment 4 (Boration) and 5 (Manual Makeups) are at the end of this section.

Step 6, 0-AP-23.00, NOTES SRO NOTES:

• If at any time plant conditions no longer require rapid load reduction, actions should continue at Step 37.

• RCS Tave must be maintained less than or equal to 577°F and RCS pressure must be maintained greater than or equal to 2205 psig. Tech Spec 3.12.F.1 should be reviewed if either parameter is exceeded.

• I & C should be contacted to provide assistance with adjusting IRPIs.

Step 6, 0-AP-23.00 RO/BOP CONTROL RAMP RATE TO MAINTAIN RCS PRESSURE GREATER THAN 2205 PSIG Step 7, 0-AP-23.00 RO

• CHECK LETDOWN ORIFICES - TWO IN SERVICE Evaluator note: two orifices will already be in service.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 4 Page 35 of 97 Event

Description:

Ramp to 75% power. (0-AP-23.00)

Cue: When initiated by Team.

Step 8, 0-AP-23.00 BOP MONITOR STEAM DUMPS FOR PROPER OPERATION Step 9, 0-AP-23.00 SRO NOTIFY THE FOLLOWING:

• Energy Supply (MOC)

• Polishing Building

• Chemistry

• OMOC Step 10, 0-AP-23.00 SRO EVALUATE THE FOLLOWING:

• EPIP applicability The Shift Manager will review EPIPs for applicability. They are not applicable.

• VPAP-2802, NOTIFICATIONS AND REPORTS, applicability SRO directs STA to review VPAP-2802. The STA reports that he has completed his review of VPAP-2802, and EPIPs and has discussed these with the Shift Manager.

Step 11, 0-AP-23.00 SRO CHECK RAMP WILL BE TO LESS THAN APPROXIMATELY 35% REACTOR POWER.

SRO determines that ramp will NOT be to < 35% and goes to Step 13.

Step 13, 0-AP-23.00 SRO CHECK REACTOR POWER - HAS DECREASED MORE THAN 15% IN ONE HOUR.

When reactor power has decreased >15%, then chemistry will be notified.

Step 14, 0-AP-23.00 SRO NOTIFY CHEMISTRY OF POWER CHANGE . 15% IN ONE HOUR.

RO/BOP notifies Chemistry END EVENT #4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 4 Page 36 of 97 Event

Description:

Ramp to 75% power. (0-AP-23.00)

Cue: When initiated by Team. AP-23.00 ATTACHMENT 4, 5.

Time Position Applicants Action or Behavior 0-AP-23.00 Attachment 4 (NORMAL BORATION) Actions RO 1. Place the MAKE-UP MODE CNTRL switch in the STOP position.

RO 2. Adjust 1-CH-YIC-1113 to desired total gallons.

RO 3. Adjust 1-CH-FC-1113A to desired flow rate.

RO 4. Place the MAKE-UP MOD SEL switch in the BORATE position.

RO 5. Place the MAKE MODE CNTRL switch in the START position.

RO 6. Check proper valve positions.

RO 7. Adjust boration rate using 1-CH-FC-1113A, as necessary.

RO 8. WHEN boration is complete, THEN perform the following. IF boric acid is to remain in the Blender to support ramping the Unit, THEN enter N/A.

a) Manually blend approximately 20 gallons to flush the boration path IAW Attachment 5, Manual Makeups.

b) Enter N/A for the remaining steps in this Attachment.

Attachment 5 is on the next page RO 9. Check controllers for Primary Grade water and Boric Acid are set correctly.

RO 10. Place the MAKE-UP MODE SEL switch in the AUTO position.

RO 11. Place the MAKE-UP MODE CNTRL switch in the START position.

RO 12. Notify Shift Supervision of blender status.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 4 Page 37 of 97 Event

Description:

Ramp to 75% power. (0-AP-23.00)

Cue: When initiated by Team. AP-23.00 ATTACHMENT 4, 5.

Time Position Applicants Action or Behavior 0-AP-23.00 Attachment 5 (Manual Makeups) Actions RO 1. Place the MAKE-UP MODE CNTRL switch in the STOP position.

RO 2. Check controllers for the flow rate of Boric Acid and Primary Grade water are set correctly.

RO 3. Check integrators for the gallons of Boric Acid and Primary Grade water are set correctly.

RO 4. Place the MAKE-UP MODE SEL switch in the MANUAL position.

RO 5. Place the MAKE-UP MODE CNTRL switch in the START position.

RO 6. Open 1-CH-FCV-1113B, BLENDER TO CHG PUMP.

RO 7. Check proper valve positions.

RO 8. WHEN the Manual Makeup operation is complete, THEN place 1-CH-FCV-1113B in the AUTO position RO 9. Place the MAKE-UP MODE CNTRL switch in the STOP position.

RO 10. Check or place the control switches in the AUTO position.

RO 11. Check controllers for Primary Grade water and Boric Acid are set correctly.

RO 12. Place the MAKE-UP MODE SEL switch in the AUTO position.

RO 13. Place the MAKE-UP MODE CNTRL switch in the START position.

RO 14. Notify Shift Supervision of blender status.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 5 Page 38 of 97 Event

Description:

B FRV Controller Fails Low (0-AP-53.00)

Cue: Examiner (Following ramp/ Blender returned to AUTO).

Time Position Applicants Action or Behavior BOP Diagnoses failure B FRV Controller with the following indications/alarms:

Alarms:

• 1H-G6 STM GEN 1B LVL ERROR.

Indications:

• Step decrease in 1B SG Feed Flow indication.

• Step decrease in 1B SG Feed Flow Controller indication.

• Lowering level on B SG.

SRO Enters 0-AP-53.00 LOSS OF VITAL INSTRUMENTATION / CONTROLS Step 1, AP-53.00 BOP

[1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL BOP identifies that all Feed flow indication is lowering due to FRV controller failure.

Step 2, AP-53.00 BOP

[2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION BOP takes manual control of B SG feed reg valve and raises demand (FF > SF) to restore level to program.

Critical Task (CT-2): Restore Feedwater to normal and restore S/G level to normal prior to S/G Low level trip (2/3 channels on one S/G < 17% NR), or S/G High level trip (2/3 channels on one S/G > 75% NR)

SRO Conduct a Brief using the Briefing Placard and obtains Critical Parameter information from the RO and BOP. The SRO will update the Shift Manager during AP-progression.

SRO will provide a band for control of B SG level with B FRV in MANUAL.

STA will have no input for the brief.

Step 3, AP-53.00 SRO VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO RO will identify that reactor power is less than 100% using PCS Display of Core Thermal Power.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 5 Page 39 of 97 Event

Description:

B FRV Controller Fails Low (0-AP-53.00)

Cue: Examiner (Following ramp/ Blender returned to AUTO).

SRO Caution prior to step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

Notes Prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 13.

Step 4, AP-53.00 SRO DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

RO/BOP Identifies 1B SG Feed Flow affected by a failure of the B FRV Controller 1-FW-FCV-1488.

SRO Goes to Step 7.

Step 7, AP-53.00 SRO CAUTION: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

CHECK STEAM GENERATOR LEVEL CONTROL INSTRUMENTS - NORMAL SRO

• Steam Pressure

• Steam Flow

• Feed Flow

• Steam Generator Level Determines CH III and IV Feed flow instrumentation for B SG is NOT normal.

BOP Step 7. RNO, AP-53.00 IF the selected steam flow, steam pressure, or feed flow input to the SG Water Level Control system has failed, THEN do the following:

a) Place the associated Feed Reg Valve in MANUAL.

BOP Verifies B SG MFRV controller, 1-FW-FCV-1488, in manual BOP b) Control SG level at program level (44%, a band will be given).

BOP Verifies B SG NR level is returning to program level.

BOP d) WHEN SG level returned to normal, THEN place the Feed Reg Valve in AUTOMATIC.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 5 Page 40 of 97 Event

Description:

B FRV Controller Fails Low (0-AP-53.00)

Cue: Examiner (Following ramp/ Blender returned to AUTO).

Maintains control of 1-FW-FCV-1488 in MANUAL BOP Step 7, RNO, AP-53.00 (Continued)

SRO Perform follow-up actions:

a) Consult with Shift Manager on need to initiate ( )-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

If asked the Shift Manager will recommend not performing 1-OP-RP-001 at this time.

SRO b) Refer to the following Tech Spec 3.7 items:

• Table 3.7-1, 12 and 17

• Table 3.7-2, 1.c, 1.e, and 3.a

• Table 3.7-3, 2.a, and 3.a

• Table 3.7-6, 15 and 16 SRO Determines all LCOs are met.

c) Refer to Attachment 1.

d) IF no other instrumentation failure exists, THEN GO TO Step 11.

Step 11, AP-53.00 SRO SRO recalls NOTE 2 Prior to Step 4 and goes to Step 11 of AP-53.00.

SRO Step 11 Check Calorimetric - Functional IAW 1-OPT-RX-001, Attachment 4.

RO/BOP Checks Calorimetric unaffected by this failure, and reports to the SRO.

Step 12, AP-53.00 SRO Step 12 REVIEW THE FOLLOWING:

• Tech Spec 3.7

• VPAP 2802 Notifications and Reports

• TRM

• Reg Guide 1.97

• EP-AA-303, Equipment Important to Emergency Response.

SRO directs STA to review all documents listed.

STA reports that all documents have been reviewed and discussed with the Shift Manager.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 5 Page 41 of 97 Event

Description:

B FRV Controller Fails Low (0-AP-53.00)

Cue: Examiner (Following ramp/ Blender returned to AUTO).

Step 13, AP-53.00 SRO CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS The team will identify that no new additional failures exist (i.e., all failures have already been addressed), proceed to the RNO section, and this will direct the team to Step 15.

Step 15, AP-53.00 SRO PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C END EVENT #5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 42 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Team Diagnose SGTR B SG based on the following:

Alarms:

• 1A-B3 N-16 ALERT

• 1A-A3 N-16 HIGH

• RM-G8 CNDSR AIR EJECTOR ALERT/FAILURE

• RM-H8 1-SV-RI-111 HIGH Indications:

• Increasing trend on 1-MS-RR-193, Control Room N16 Trend Recorder, from Normal to 200 GPD.

• STM LINE B Trend will Lead STM LINE A and STM LINE B.

SRO Direct Unit to Perform Annunciator Response Procedure for A/E Alert and High Alarms.

Note: Unit 2 Operator will perform ARP for A/E RM Alarms. Unit 2 will hand Page 3 and 4 of RM-H8 ARP to BOP to check Auto Actions complete; following E-0 Team Brief.

1-AP-16.00 SRO Direct the RO to perform the Immediate Action Steps of 1-AP-16.00.

Step 1, 1-AP-16.00 SRO NOTE:

• If SI Accumulators are isolated, 1-AP-16.01, SHUTDOWN LOCA, should be used for guidance.

• RCS average temperature has a direct impact on pressurizer level.

MAINTAIN PRZR LEVEL

• Isolate Letdown.

• Control Charging flow.

RO RO isolates letdown by closing 1-LCV-1460A, and B.

RO takes manual control of charging to stabilize pressurizer level.

Step 2, 1-AP-16.00 SRO CHECK THE FOLLOWING PARAMETERS - STABLE OR INCREASING

• PRZR level

• PRZR pressure

• RCS subcooling RO Report that PRZR Level, Pressure, and Subcooling are not stable.

RO continues actions to quantify leakrate

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 43 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 3, 1-AP-16.00 SRO PLACE THE FOLLOWING COMPONENTS IN OFF:

RO

• CTMT sump pumps Places 1-DA-P-4B control switch on OFF

• CTMT vacuum pumps Places 1-CV-P-1A control switch in OFF Step 4, 1-AP-16.00 SRO NOTE: Shift Supervision and STA must remain informed of RCS leak rate for EPIP applicability.

SRO CHECK REACTOR TRIP - REQUIRED

• Leak rate - GREATER THAN 50 GPM OR

• Adequate makeup not being provided by blender RO Reports RCS leak rate greater than 50 gpm.

NOTE: Due to transient on RCS caused by Ramp for previous event, exact quantification of leak rate may be difficult.

Step 5, 1-AP-16.00 SRO ALIGN CHG PUMP SUCTION TO RWST a) Open 1-CH-MOV-1115B and 1-CH-MOV-1115D RO Opens CH pump Suction MOVs from RWST, 1-CH-MOV-1115B/D b) Close 1-CH-MOV-1115C and 1-CH-MOV-1115E Closes CH pump Suction from VCT MOVs, 1-CH-MOV-1115C/E Step 6, 1-AP-16.00 SRO GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 44 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

1-E Reactor Trip or Safety Injection RO [1] CHECK REACTOR TRIP:

a) Manually trip reactor Pushes the reactor trip push buttons.

b) Check the following:

• All Rods On Bottom light - LIT

• Reactor trip and bypass breakers - OPEN

• Neutron flux - DECREASING RO Reports Reactor Tripped at completion of Step 1. SRO Acknowledges.

RO [2] CHECK TURBINE TRIP:

RO a) Manually trip the turbine Pushes the turbine trip push buttons.

b) Check all turbine stop valves - CLOSED c) Isolate reheaters by closing MSR steam supply SOV

• 1-MS-SOV-104 d) Verify generator output breakers - OPEN (Time Delayed). RO determines generator output breakers did not auto open.

d) RNO RO manually opens output breakers and places Excitation control switch in OFF.

RO Reports Turbine Tripped at completion of Step 2. SRO Acknowledges.

RO [3] VERIFY BOTH AC EMERGENCY BUSES - ENERGIZED RO Reports Both AC Emergency Buses Energized at completion of Step 3. SRO acknowledges.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 45 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

RO [4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

• LHSI pumps - RUNNING

• SI annunciators - LIT

• A-F-3 SI INITIATED - TRAIN A

• A-F-4 SI INITIATED - TRAIN B RO will determine that SI has not occurred and perform step 4a RNO actions:

RO 4a RNO Check if SI is required or imminent as indicated by any of the following:

• Low PRZR pressure

• High CTMT pressure

• High steamline differential pressure

• High steam flow with low Tave or low line pressure IF SI is required, THEN GO TO Step 4b.

Evaluator Note: It is possible that crew may opt to go to ES-0.1, Reactor Trip Response due to the current size of the leak. If this is the case the crew will then shortly return to E-0 once SI auto initiates or the crew recognizes that SI is required.

Report to SRO that Safety Injection is required.

Manually Initiate Safety Injection.

Check Annunciator 1A-F3, SI Initiated Train A - LIT Check Annunciator 1A-F4, SI Initiates Train B - LIT Check LHSI, HHSI Pumps Running and flowing to the core.

SRO Report to SRO Immediate Actions of E-0 with SI Complete. There is no SI flow to the core.

SRO Acknowledges.

After the immediate actions of 1-E-0 are reported as complete, the SRO will check off RO immediate action steps in his copy of 1-E-0. After the immediate actions are verified, the team will conduct a brief.

The SRO will set priorities: (Most likely listed below)

RO - Perform Attachment 2, 9, continue with SRO in performance of E-0 to E-3.

SRO BOP - Perform Attachment 1 and 3 of E-0.

The SRO will hand out copies of the E-0 Continuous Action Page, and Continuous Action Steps (Located at Event 9).

Note: Attachments 2, 9 are at end of this section. Attachments 1, 3 are in Event 8.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 46 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 5, E-0 SRO/BOP Initiate Attachment 1 (Attachment 1, contained in Event 8).

SRO/RO SRO may direct the RO to perform Attachment 9 of 1-E-0 for Ruptured SG Isolation and AFW Control. This may or may not be initiated at any time during the performance of E-0. Attachment 9 actions are contained at the end of this section.

Step 6, E-0 RO

• CHECK RCS AVERAGE TEMPERATURE

• STABLE AT 547°F OR

• TRENDING TO 547°F The team will identify that RCS temperature is decreasing. The team should attribute this to the injection of SI into the RCS and AFW flow to the SGs. Stop dumping steam Reduce AFW flow to the SG Close MSTVs if cooldown continues Evaluator Note: The team is performing equivalent actions per Attachment 9 of E-0.

Step 7. E-0

7. CHECK PRZR PORVs AND SPRAY VALVES:

RO a) PRZR PORVs - CLOSED b) PRZR spray controls

• Demand at Zero (or)

• Controlling Pressure c) PORV block valves - AT LEAST ONE OPEN

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 47 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 8, E-0 SRO NOTE: Seal injection flow should be maintained to all RCPs.

• CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS Two or three Charging pumps may or may not be running and flowing to the RCS.

NOTE: The Charging pumps are initially off (due to malfunction), they will be restored by Checklist 1, or 2.

b) RCS subcooling - LESS THAN 30°F [85°F]

RCS subcooling will NOT be less than 30 °F RNO for the step is to go to step 9.

Step 9, E-0 RO CHECK IF SGs ARE NOT FAULTED:

• Check pressures in all SGs a) STABLE OR INCREASING AND b) GREATER THAN 100 PSIG RO will observe a slightly decreasing trend on SG pressures. This will be attributed to the RCS cooldown. The team will not transition to 1-E-2.

Step 10, E-0 RO CHECK IF SG TUBES ARE NOT RUPTURED:

• Condenser air ejector radiation - NOT NORMAL

• SG blowdown radiation - NOT NORMAL

• SG MS radiation - NORMAL

• TD AFW pump exhaust radiation - NORMAL

• SG NR Level - NOT INCREASING IN AN UNCONTROLLED MANNER RO should observe B SG NR level going up uncontrollably.

SRO RNO: GO TO 1-E-3, STEAM GENERATOR TUBE RUPTURE.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 48 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

E-3 SRO The team will hold a transition brief. During the brief it will be identified that B SG is ruptured, current isolation status of the ruptured SG and that the team is transitioning to 1-E-3.

The STA will state that he has nothing to add to the brief.

BEGIN Step 1, 1-E-3:

SRO NOTE: Seal injection flow should be maintained to all RCPs.

• CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

RO a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS RO will identify that two charging pumps are running.

b) RCS subcooling - LESS THAN 30°F [85°F]

RO will identify that RCS subcooling is greater than 30°F RNO is to go to step 2 Step 2, E-3 IDENTIFY RUPTURED SG(s):

• Unexpected rise in any SG narrow range level SRO OR

• High radiation from any SG MS line monitor OR

• High radiation from any SG blowdown line OR

• High radiation from any SG sample Team identifies B SG NR level rising unexpectedly.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 49 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 3, E-3 SRO CAUTION:

• If the TD AFW pump is the only available source of feed flow, steam supply to the TD AFW pump must be maintained from at least one SG.

• At least one SG must be maintained available for RCS cooldown.

3. ISOLATE RUPTURED SG(s):

RO a) Adjust ruptured SG PORV controller setpoint to 1035 psig b) Check ruptured SG(s) PORV - CLOSED c) Verify blowdown TVs from ruptured SG(s) - CLOSED d) Locally close steam supply valve(s) to TD AFW pump:

• 1-MS-120 for B SG If 1-MS-120 not closed iaw attachment 9 of 1-E-0, then a field operator will be dispatched to close it at this time.

e) Close ruptured SG(s) MSTV (B)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 50 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 4, E-3 SRO CAUTION: If any ruptured SG is faulted, feed flow to that SG should remain isolated during subsequent recovery actions unless needed for RCS cooldown.

• CHECK RUPTURED SG LEVEL:

a) Narrow range level - GREATER THAN 12% [18%]

b) Stop feed flow to ruptured SG(s)

RO Identifies B SG level >12%, closes 1-FW-MOV-151C/D to isolate AFW Flow CT-4: Isolate feedwater flow into the ruptured S/G before S/G B NR reaches 100%. Note: Isolation of FW occurs at this step or may have been completed while performing Attachment 9 of E-0.

c) Check ruptured SG AFW MOVs auto-open signal - DEFEATED RO Identifies auto-open signal not defeated, SRO goes to Step 4 c) RNO NOTE: BOP may have performed the following IAW Attachment 9.

1) Select the ruptured SG AFW MOVs using the following switches:

• H TRAIN DISABLE SELECTOR SWITCH

• J TRAIN DISABLE SELECTOR SWITCH

2) Defeat the auto-open signal for the selected MOVs by placing the following key switches in the DISABLE SELECTED position:

• H TRAIN AUTO OPEN ENABLE SWITCH

• J TRAIN AUTO OPEN ENABLE SWITCH Step 5, E-3 SRO CAUTION: Major steam flow paths from the ruptured SG(s) should be isolated before initiating RCS cooldown.

CHECK RUPTURED SG(S) PRESSURE - GREATER THAN 350 PSIG RO Identifies B SG pressure ~ 1000 psig.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 51 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 6, E-3 SRO

• CHECK LOW PRZR PRESS SI SIGNAL - BLOCKED

• Permissive Status light C LIT RO Identifies PSL C2 NOT LIT. (May or may not be LIT)

SRO WHEN PRZR pressure less than 2000 psig, THEN do the following:

a) Turn both LO PRZR PRESS & STM HDR/LINE P switches to block.

b) Check Permissive Status light C LIT.

NOTE: BOP may have completed this action in E-0, Attachment 1.

Step 7, E-3 SRO CHECK LOW TAVE SI SIGNAL - BLOCKED

• Permissive Status light F LIT RO Identifies PSL F1 NOT LIT. (May or may not be LIT)

SRO WHEN Tave less than 543°F, THEN do the following:

a) Turn both HI STM FLOW & LO TAVG OR LP switches to block.

b) Check Permissive Status light F LIT.

NOTE: BOP may have completed this action in E-0, Attachment 1.

Step 8, E-3 SRO CAUTION:

• Flow on each Main Steamline should be kept less than 1.0 x 106 PPH to prevent Main Steamline isolation during RCS cooldown with the Steam Dumps.

• If no RCPs are running, RCS cooldown and depressurization may cause a false Integrity Status Tree indication on the ruptured loop. The Cold Leg indication on the ruptured loop should be disregarded until after the performance of Step 36.

NOTE: RCP trip criteria does NOT apply after initiation of an operator controlled cooldown.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 52 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

SRO/BOP Step 8, E-3, Continued RO INITIATE RCS COOLDOWN:

a) Determine required core exit temperature (ONE TIME):

RO RO SRO Concur Target CETC temperature 485 °F if SG pressure between 901 and 1000 psig, or 495° if SG pressure between 1001 and 1085 psig.

b) Place Steam Dump Mode Select switch in Steam Pressure mode RO c) Check RCS Tave - LESS THAN 543°F d) Place the STM DUMP CNTRL switch in BYP INTLK and then return to RO ON.

e) Check Bypass Status light D LIT SRO f) Dump steam to condenser from intact SG(s) at maximum rate g) Check CETCs - LESS THAN REQUIRED TEMPERATURE When RCS Temperature < 543°F, SRO will direct the block of HSF SI and check of PSL F1 LIT.

When RCS pressure < 2000 psig, SRO will direct the block of Low Pressure/Header-to-Line SI Signal, and check the PSL C2 LIT.

Performs the Block of SI Signals and check of PSLs when directed.

h) Stop RCS cooldown When target CETC Temperature reached, RO throttles back on steam dumps.

i) Maintain CETCs - LESS THAN REQUIRED TEMPERATURE SRO will direct a band for control of CETC temperature.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 53 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 9, E-3 SRO CHECK INTACT SG LEVELS:

a) Any narrow range level - GREATER THAN 12% [18%]

b) Check emergency buses - BOTH ENERGIZED c) Control feed flow to maintain narrow range level between 22% and 50%

RO/BOP Adjust AFW to restore A and C SG NR Level to 22-50%.

Step 10, E-3 SRO CAUTION: If any PRZR PORV opens because of high PRZR pressure, the PORV must be verified closed or isolated after pressure decreases to less than 2335 psig.

• CHECK PRZR PORVs AND BLOCK VALVES:

a) Power to PRZR PORV block valves - AVAILABLE b) PRZR PORVs - CLOSED c) PRZR PORV block valves - AT LEAST ONE OPEN Evaluator Note: The Block Valve 1-RC-MOV-1535 failed at step 1 therefore the only PORV/Block valve available would be PORV 1-RC-PCV-1455C and Block Valve 1-RC-MOV-1536.

Step 11. E-3 SRO RESET BOTH TRAINS OF SI RO Push SI Reset Pushbuttons. SI previously reset.

Step 12, E-3 SRO RESET CLS:

a) Check CTMT pressure - HAS EXCEEDED 17.7 psia RO Report No, CTMT has not exceeded 17.7 psia.

RNO a) GO TO Step 13.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 54 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 13, E-3 SRO CHECK INSTRUMENT AIR AVAILABLE:

a) Check annunciator B-E NOT LIT RO Report Yes, B-E-6 Not Lit.

b) Check at least one CTMT IA compressor - RUNNING

• 1-IA-C-4A or 1-IA-C-4B RO Report Yes, 1-IA-C-4A running c) Check 1-IA-TV-100 - OPEN RO Report Yes, 1-IA-TV-100 open.

Step 14, E-3 SRO ALIGN CONDENSER AIR EJECTOR TO CTMT:

a) Check the following:

• 1-SV-TV-102 - OPEN

• 1-SV-TV-103 - CLOSED b) Open the following valve:

• 1-SV-TV-102A RO/BOP Opens 1-SV-TV-102A.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 55 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 15, E-3 SRO CAUTION: RCS pressure should be monitored. If RCS pressure decreases in an uncontrolled manner to less than 250 psig [400 psig], one LHSI pump must be manually restarted to supply water to the RCS.

• CHECK IF LHSI PUMPS SHOULD BE STOPPED:

a) Check LHSI pumps - ANY RUNNING WITH SUCTION ALIGNED TO RWST RO Reports 1 LHSI pump running with suction aligned to RWST.

b) RCS pressure - GREATER THAN 250 PSIG [400 PSIG]

RO Reports RCS pressure greater than 250 psig.

c) Stop LHSI pumps and put in AUTO RO Stops running LHSI pump and places in AUTO.

Step 16, E-3 SRO CHECK IF RCS COOLDOWN SHOULD BE STOPPED:

a) Check CETCs - LESS THAN REQUIRED TEMPERATURE RO/BOP Reports CETCs < required temperature b) Stop RCS cooldown RO/BOP Reports RCS Coodown stopped.

c) Maintain CETCs - LESS THAN REQUIRED TEMPERATURE RO/BOP Reports that RCS temperature being maintained in required band.

Step 17, E-3 SRO CHECK RUPTURED SG(s) PRESSURE - STABLE OR INCREASING BOP Reports B SG pressure stable.

Step 18. E-3 SRO CHECK RCS SUBCOOLING BASED ON CETCs - GREATER THAN 50°F [105°F]

BOP Reports indicated subcooling value.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 56 of 97 Event

Description:

SGTR B SG of 360 gpm (AP-16.00, E-0, E-3)

Cue: Examiner.

Step 19, E-3 SRO DEPRESSURIZE RCS TO MINIMIZE BREAK FLOW AND REFILL PRZR:

a) Check normal spray - AVAILABLE

• RCP C AND 1-RC-PCV-1455B - BOTH AVAILABLE OR

• RCPs A and B, AND 1-RC-PCV-1455A - BOTH AVAILABLE RO Identifies No pressurizer spray available, SRO Goes To Step 20.

Note: RCPS tripped when reactor tripped and generator output breakers opened.

Step 20, E-3 SRO CAUTION:

• The PRT may rupture if a PRZR PORV is used for RCS depressurization.

Rupturing the PRT may result in abnormal containment conditions.

• Cycling of the PRZR PORV should be minimized.

NOTE: The upper head region may void during RCS depressurization if RCPs are not running. This will result in a rapidly increasing PRZR level.

DEPRESSURIZE RCS USING PRZR PORV TO MINIMIZE BREAK FLOW AND REFILL PRZR:

a) PRZR PORV - AT LEAST ONE AVAILABLE b) Open one PRZR PORV until ANY of the following conditions satisfied:

(Attachment 3 lists conditions)

• PRZR level - GREATER THAN 69%

OR

• RCS subcooling based on CETCs - LESS THAN 30°F [85°F]

OR

• BOTH of the following exist:

1) RCS pressure - LESS THAN RUPTURE SG(s) PRESSURE

2) PRZR level - GREATER THAN 22% [50%]

RO When Attempt Made to open 1-RC-PCV-1455C, PCV will Not Open.

SRO Transition to ECA-3.3 End EVENT #6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 57 of 97 Event

Description:

SGTR SG of 360 gpm. E-0 ATTACHMENT 2 Cue: Examiner.

Time Position Applicants Action or Behavior ATTACHMENT 2 of 1-E-0 BOP NOTE: Components previously aligned by SI termination steps, must not be realigned by this Attachment.

ATTACHMENT 2 of 1-E-0 BOP 1. Check opened or open CHG pump suction from RWST MOVs.

• 1-CH-MOV-1115B

• 1-CH-MOV-1115D ATTACHMENT 2 of 1-E-0 BOP 2. Check closed or close CHG pump suction from VCT MOVs.

• 1-CH-MOV-1115C

• 1-CH-MOV-1115E ATTACHMENT 2 of 1-E-0 BOP 3. Check running or start at least two CHG pumps. (listed in preferred order)

• 1-CH-P-1C

• 1-CH-P-1B

• 1-CH-P-1A CT-3: Restore HHSI flow to the core prior to exiting E-0. Total loss of HHSI: 1-CH-P-1C trips on overcurrent immediately after reactor trip. 1-CH-P-1A, and 1B fail to auto start.

ATTACHMENT 2 of 1-E-0 BOP 4. Check opened or open HHSI to cold legs MOVs.

• 1-SI-MOV-1867C

• 1-SI-MOV-1867D ATTACHMENT 2 of 1-E-0 BOP 5. Check closed or close CHG line isolation MOVs.

• 1-CH-MOV-1289A

• 1-CH-MOV-1289B

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 58 of 97 Event

Description:

SGTR SG of 360 gpm. E-0 ATTACHMENT 2 Cue: Examiner.

ATTACHMENT 2 of 1-E-0 BOP 6. Check closed or close Letdown orifice isolation valves.

• 1-CH-HCV-1200A

• 1-CH-HCV-1200B

• 1-CH-HCV-1200C RO/BOP will CLOSE 1-CH-HCV-1200A and 1-CH-HCV-1200B ATTACHMENT 2 of 1-E-0 BOP 7. Check opened or open LHSI suction from RWST MOVs.

• 1-SI-MOV-1862A

• 1-SI-MOV-1862B ATTACHMENT 2 of 1-E-0 BOP 8. Check opened or open LHSI to cold legs MOVs.

• 1-SI-MOV-1864A

• 1-SI-MOV-1864B ATTACHMENT 2 of 1-E-0 BOP 10. check High Head SI flow to cold legs indicated.

• 1-SI-FI-1961

• 1-SI-FI-1962

• 1-SI-FI-1963

• 1-SI-FI-1943 or 1-SI-FI-1943A ATTACHMENT 2 of 1-E-0 BOP 11. IF flow not indicated, THEN manually start pumps and align valves. IF flow NOT established, THEN consult with Shift Supervision to establish another high pressure injection flow path while continuing with this procedure.

• Alternate SI to Cold legs

• Hot leg injection

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 59 of 97 Event

Description:

SGTR SG of 360 gpm. E-0 ATTACHMENT 9 Cue: Examiner.

ATTACHMENT 9 of 1-E-0

1. Check SI is in progress. If SI is not in progress, then return to procedure step in effect.

RO/BOP RO/BOP identifies that SI is in progress.

ATTACHMENT 9 of 1-E-0 RO/BOP 2. Identify Ruptured SG by one of the following conditions:

• Unexpected rise in any SG Narrow Range level

• High radiation from any SG MS line monitor

• High radiation from any SG Blowdown line With SRO concurrence identifies B SG as the ruptured SG ATTACHMENT 9 of 1-E-0 RO/BOP 3. Check running or start AFW Pumps, as necessary

• 1-FW-P-3A

• 1-FW-P3B

• 1-FW-P-2 ATTACHMENT 9 of 1-E-0 RO/BOP 4. Maintain feed flow to ruptured SG until level greater than 12% [18%]. GO TO Step

2. WHEN ruptured SG(s) Narrow Range level greater than 12% [18%], THEN then isolate feed flow by closing ruptured SG(s) AFW Isolation MOVs:

• SG B, 1-FW-MOV-151C and 1-FW-MOV-151D RO/BOP closes 1-FW-MOV-151C/D when SG level is greater than 12% Narrow Range.

CT-4: Isolate feedwater flow into the ruptured S/G before S/G B NR reaches 100%. Note: Isolation of FW occurs at this step or may have been completed while performing E-3, step 4.

ATTACHMENT 9 of 1-E-0 RO/BOP 5. Select the ruptured SG AFW MOVs using the following switches:

• H TRAIN DISABLE SELECTOR SWITCH

• J TRAIN DISABLE SELECTOR SWITCH

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 6 Page 60 of 97 Event

Description:

SGTR SG of 360 gpm. E-0 ATTACHMENT 9 Cue: Examiner.

RO/BOP ATTACHMENT 9 of 1-E-0

6. Disable the auto-open signal for the selected MOVs by placing the following keyswitches in the DISABLE SELETED position:

• H TRAIN AUTO OPEN ENABLE SWITCH

• J TRAIN AUTO OPEN ENABLE SWITCH ATTACHMENT 9 of 1-E-0 RO/BOP CAUTION: At least one SG must be maintained available for RCS heat sink.

7. Locally close steam supply valve to the TD AFW pump:

• 1-MS-120 RO/BOP directs field operator to close 1-MS-120.

The field operator will acknowledge the requirement to close 1-MS-120. The field operator will later report that 1-MS-120 is closed.

Note: This step is also accomplished by E-3, step 3.

ATTACHMENT 9 of 1-E-0 RO/BOP 8. Control Feed Flow to the SG IAW the following requirements:

• Minimum AFW flow is 350 gpm with SI initiated, until one SG Narrow Range level is greater than 12%

• When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50%.

• SG A, 1-FW-MOV-151E and 1-FW-MOV-151F

• SG C, 1-FW-MOV-151A and 1-FW-MOV-151B End EVENT #6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 7 Page 61 of 97 Event

Description:

1-RC-PCV-1455C fails to open. (1-ECA-3.3)

Cue: Pre-Event Failures.

Time Position Applicants Action or Behavior 1-ECA-3.3 Actions The team will hold a transition brief. During the brief it will be identified that B SG is ruptured, isolated, and unable to depressurize RCS normally.ECA-3.3 will provide actions to mitigate SGTR w/o Pressurizer pressure control.

SRO The SRO will hand out ECA-3.3 Continuous Action Page (located at Event 9).

The STA will state that he has nothing to add to the brief.

Step 1, ECA-3.3 CAUTION: If no RCPs were running during the cooldown performed in 1-E-3, SI flow may cause a false Integrity Status Tree indication on the ruptured loop. The Cold Leg indication on the ruptured loop should be disregarded until after the performance of Step 21.

SRO

1. CHECK RUPTURED SG(S) NARROW RANGE LEVEL - LESS THAN 75%

[73%]

RO Reports that B SG Level is greater than 75%.

1. RNO - GO TO Step 6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 7 Page 62 of 97 Event

Description:

1-RC-PCV-1455C fails to open. (1-ECA-3.3)

Cue: Pre-Event Failures.

Step 6, ECA-3.3 SRO

6. CHECK IF SI CAN BE TERMINATED:

a) Check RCS subcooling based on CETCs - GREATER THAN 30°F [85°F]

RO/BOP Identifies that RCS subcooling is greater than 30°F.

b) Check secondary heat sink:

• Total feed flow to SGs - GREATER THAN 350 GPM [450 GPM]

AVAILABLE OR

• Narrow range level in at least one intact SG - GREATER THAN 12%

[18%]

RO/BOP Identifies That >350 gpm AFW Available, and A and C SG NR level >12%.

c) Check RVLIS indication - GREATER THAN VALUE FROM TABLE RCPs RVLIS INDICATION Running Full Range Dynamic Range 0 GREATER THAN 63%

1 GREATER THAN 36%

2 GREATER THAN 51%

3 GREATER THAN 82%

RO/BOP Identify that RVLIS Full Range is Greater than 63%.

d) Check any ruptured SG narrow range level - INCREASING IN AN UNCONTROLLED MANNER OR OFFSCALE HIGH BOP BOP will identify that B SG Level is Off-Scale High, or rising uncontrollably.

Step 7, ECA-3.3 SRO

7. STOP ALL BUT ONE CHG PUMP AND PUT IN AUTO RO Secure one of the running charging pumps.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 7 Page 63 of 97 Event

Description:

1-RC-PCV-1455C fails to open. (1-ECA-3.3)

Cue: Pre-Event Failures.

Step 8, ECA-3.3 SRO

8. ISOLATE HHSI TO COLD LEGS:

a) Verify the following:

RO

1) CHG pump suctions from RWST - OPEN

• 1-CH-MOV-1115B

• 1-CH-MOV-1115D

2) Check CHG pump miniflow recirc valves - OPEN

• 1-CH-MOV-1275A

• 1-CH-MOV-1275B

• 1-CH-MOV-1275C

• 1-CH-MOV-1373 b) Close HHSI to Cold Leg:

RO

• 1-SI-MOV-1867C

• 1-SI-MOV-1867D

• 1-SI-MOV-1842 Step 9, ECA-3.3 SRO

9. ESTABLISH CHARGING FLOW:

RO a) Close CHG flow control:

• 1-CH-FCV-1122 a) b) Check CHG line isolation - OPEN

• 1-CH-HCV-1310A RO c) Open CHG line isolation MOVs

• 1-CH-MOV-1289A

• 1-CH-MOV-1289B RO d) Establish at least 40 gpm charging flow using CHG flow control

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 7 Page 64 of 97 Event

Description:

1-RC-PCV-1455C fails to open. (1-ECA-3.3)

Cue: Pre-Event Failures.

Step 10, ECA-3.3 SRO

10. CHECK SI FLOW NOT REQUIRED:

• RCS subcooling based on CETCs - GREATER THAN 30°F [85°F]

• Check RVLIS indication - GREATER THAN VALUE FROM TABLE RCPs RVLIS INDICATION Running Full Range Dynamic Range 0 GREATER THAN 63%

1 GREATER THAN 36%

2 GREATER THAN 51%

3 GREATER THAN 82%

RO Reports Full Range RVLIS >63%.

END Event 7 End Scenario

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 65 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 1 Cue: Pre-load Malfunctions Time Position Applicants Action or Behavior ATTACHMENT 1 OF E-0 BOP 1. CHECK FW ISOLATION:

• Feed pump discharge MOVs - CLOSED

• 1-FW-MOV-150A

• 1-FW-MOV-150B

• MFW pumps - TRIPPED

• Feed REG valves - CLOSED

• SG FW bypass flow valves - DEMAND AT ZERO

• SG blowdown TVs - CLOSED BOP 2. CHECK CTMT ISOLATION PHASE I:

• Phase I TVs - CLOSED

• 1-CH-MOV-1381 - CLOSED

• 1-SV-TV-102A - CLOSED

• PAM isolation valves - CLOSED

• 1-DA-TV-103A

• 1-DA-TV-103B Will identify 1-DA-TV-100A/B, and 1-MS-TV-109 OPEN and CLOSE them.

BOP 3. CHECK AFW PUMPS RUNNING:

a) MD AFW pumps - RUNNING (Time Delayed) b) TD AFW pump - RUNNING IF NECESSARY

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 66 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 1 Cue: Pre-load Malfunctions Attachment 1 of E-0 BOP 4. CHECK SI PUMPS RUNNING:

• CHG pumps - RUNNING

• LHSI pumps - RUNNING Starts HHSI pumps 1-CH-P-1A, and B. Starts LHSI pump 1-SI-P-1B.

CT-3: Restore HHSI flow to the core prior to exiting E-0. Total loss of HHSI: 1-CH-P-1C trips on overcurrent immediately after reactor trip. 1-CH-P-1A, and 1B fail to auto start.

BOP 5. CHECK CHG PUMP AUXILIARIES:

• CHG pump CC pump - RUNNING

• CHG pump SW pump - RUNNING

6. CHECK INTAKE CANAL:

BOP

• Level - GREATER THAN 24 FT

• Level - BEING MAINTAINED BY CIRC WATER PUMPS

7. CHECK IF MAIN STEAMLINES SHOULD BE ISOLATED:

a) Check if ANY of the following annunciators - HAVE BEEN LIT

• E-F-10 (High Steam Flow SI)

• B-C-4 (Hi Hi CLS Train A)

BOP

• B-C-5 (Hi Hi CLS Train B)

Identifies annunciators not lit and goes to step 8.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 67 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 1 Cue: Pre-load Malfunctions Attachment 1 of E-0 BOP

• 8. CHECK IF CS REQUIRED:

a) CTMT pressure - HAS EXCEEDED 23 PSIA Identifies pressure has not exceeded 23 or 17.7 psia and goes to step 10.

• 10. BLOCK LOW PRZR PRESS SI SIGNAL:

BOP a) Check PRZR pressure - LESS THAN 2000 psig b) Turn both LO PRZR PRESS & STM HDR/LINE P switches to block c) Verify Permissive Status light C LIT May block the low pressurizer pressure SI signal depending on current RCS pressure.

BOP *11. BLOCK LOW TAVE SI SIGNAL:

Step may not be performed at this time (if Tave is greater than 543°F).

a) Check RCS Tave - LESS THAN 543°F b) Turn both HI STM FLOW & LO TAVG OR LP switches to block c) Verify Permissive Status light F LIT

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 68 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 1 Cue: Pre-load Malfunctions Attachment 1 of E-0 NOTE:

• CHG pumps should be run in the following order of priority: C, B, A.

• Subsequent SI signals may be reset by re-performing Step 12.

BOP

12. CHECK SI FLOW:

a) HHSI to cold legs - FLOW INDICATED

• 1-SI-FI-1961 (NQ)

• 1-SI-FI-1962 (NQ)

• 1-SI-FI-1963 (NQ)

• 1-SI-FI-1943 or 1-SI-FI-1943A b) Check CHG pumps - THREE RUNNING No go to step 12e. (1-CH-P-1C tripped on overcurrent) 12e) RCS pressure - LESS THAN 185 PSIG RNO: e) IF one LHSI pump running, THEN GO TO Step 13:

BOP 13. CHECK TOTAL AFW FLOW - GREATER THAN 350 GPM [450 GPM]

BOP 14. CHECK AFW MOVs - OPEN Will identify that all AFW MOVS are not open and will read the RNO portion of this step and manually align valves as necessary.

BOP 15. INITIATE SI VALVE ALIGNMENT IAW ATTACHMENT 2 See attached copy of Attachment 2. (Next page of this guide)

Depending on timing, this attachment may have already been completed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 69 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 1 Cue: Pre-load Malfunctions Attachment 1 of E-0 BOP

16. INITIATE VENTILATION, AC POWER, AND SFP STATUS CHECKS IAW ATTACHMENT 3 Attachment 3 follows Attachment 2.

Identify failure of 1-VS-MOD-103A CLOSES the MOD.

Unit 2 Operator will state that Unit 2 is at 100% power (if asked)

Unit 2 will also accept responsibility to complete Attachment 3 if it is given to Unit 2 at the point where differential pressure indications are requested.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 70 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 3 Cue: Pre-load Malfunctions

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 71 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 3 Cue: Pre-load Malfunctions

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 72 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 3 Cue: Pre-load Malfunctions

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 73 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 3 Cue: Pre-load Malfunctions

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 74 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 3 Cue: Pre-load Malfunctions

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No.: 8 Page 75 of 97 Event

Description:

BOP Failures. 1-CH-P-1A,B fail to auto start, 1-CH-P-1C trips on overcurrent; 1-SI-P-1B not auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOV-103A not close, 1-MS-TV-109 and 1-DA-TV-100 A/B not close. E-0 ATTACHMENT 3 Cue: Pre-load Malfunctions Note: Unit 2 may be asked to perform tasks on page 6 of Attachment 3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No. : 9 Page 76 of 97 FOLDOUT PAGES: E-0, E-3, ECA-3.3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No. : 9 Page 77 of 97 FOLDOUT PAGES: E-0, E-3, ECA-3.3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No. : 9 Page 78 of 97 FOLDOUT PAGES: E-0, E-3, ECA-3.3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Event No. : 9 Page 79 of 97 FOLDOUT PAGES: E-0, E-3, ECA-3.3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 80 of 97 SIMULATOR OPERATORS GUIDE Simulator Scenario Checklist Perform Simulator Turnover Pre-session, and Post-session Checklist prior to the first Scenario of the day.

Perform Simulator Turnover Post-session Checklist after the last Scenario of the day.

Perform/Verify Simulator Setup:

Recall IC -391 (100%) and verify Trigger #30 implemented.

OR Recall Base IC (IC001), Open Schedule, and Event Files for Scenario 1. Run Schedule file, and implement Trigger 30.

Option: Recall Base IC (001), and open Schedule and Event File for 2017 NRC Scenario1. Run Schedule and Event File Verify 1-SI-P-1A in Pull-To-Lock, with red (tagged) magnet Verify 1-RC-LR-1459 selected to L-461 (ch 3).

Verify PRZR LVL-CH SEL positioned to CH3/CH2 (Position 3).

Enter/Verify the following MALFUNCTIONS:

Trigger Malfunction Delay Ramp Trigger Value Final Type (Auto or Manual)

RC4903 PRZR LEVEL XMTR CH 10 20 1 0.0 -0.2 MANUAL 3 FAILURE (461)

SD0201 HP HTR DRN PP SD-P-1A 10 0 3 FALSE TRUE MANUAL TRIPS: OVR CURRENT FW1902 B S/G MN FD FLOW 10 300 5 0.0 -1 MANUAL CNTRLR FC-488 FAILS RC2402 STEAM GENERATOR B 10 360 7 0.0 40 MANUAL TUBE RUPTURE CH0503 OVER-CURRENT TRIP 0 0 9 FALSE TRUE MANUAL CHG PUMP CH-P-1C (NRM)

RC5601 SPURIOUS TRIP RCP 1A 0 0 17 FALSE TRUE AUTO RC5602 SPURIOUS TRIP RCP 1B 0 0 17 FALSE TRUE AUTO RC5603 SPURIOUS TRIP RCP 1C 0 0 17 FALSE TRUE AUTO CH6401 DISABLE CHP1A AUTO 0 0 30 FALSE TRUE MANUAL START CH6402 DISABLE CHP1B AUTO 0 0 30 FALSE TRUE MANUAL START GM0701 MAIN GEN BKR OCB- 0 0 30 FALSE TRUE MANUAL G102 Auto trip disables.

GM0702 MAIN GEN BKR OCB- 0 0 30 FALSE TRUE MANUAL G1T240 Auto trip disables.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 81 of 97 SIMULATOR OPERATORS GUIDE SI2409 SI RELAY C11A FAILS TO 0 0 30 FALSE TRUE MANUAL ACTUATE SI2505 SI RELAY S15B FAILS TO 0 0 30 FALSE TRUE MANUAL ACTUATE CH54 DISABLE CH-HCV-1200A 0 0 30 FALSE TRUE MANUAL AUTO CLOSURE CH55 DISABLE CH-HCV-1200B 0 0 30 FALSE TRUE MANUAL AUTO CLOSURE FP0301 FPS FACP07 ALARM 0 0 30 FALSE TRUE MANUAL HORN FAILURE FP0302 FPS PC SPEAKER 0 0 30 FALSE TRUE MANUAL FAILURE Enter/Verify the following REMOTE FUNCTIONS:

Trigger Description Delay Ramp Trigger Value Final Type (Auto or Manual)

SIP1A_BKRPOS SIP-1A BKR 14H3 0 0 30 RACK MANUAL CUBICLE POSITION OPEN RCMOV535_BKR PZR PORV 0 0 16 CLOSED OPEN AUTO BLOCK MS_120 SG B STM SUPPLY TO 0 60 21 100 0 MANUAL FW-P2 Enter/Verify the following EVENT TRIGGERS:

Trigger# EVENT Command Trigger setup to trip 1-RC-MOV1535 breaker when control switch in open to stroke test open time, Event 1.

Trigger 16 sets when 1-RC-MOC-1535 closed, and 1-RC-MOV-1535 control switch taken to open 9 Reactor power < 10% Sets Trigger 9 16 RCMOV535 < .3 & MOV535_OPEN==1 Sets Trigger 16 Trigger setup to trip A, B, C, RCPs when Generator Output breakers open. (EL2 Auto Trigger). Actuates Trigger which implements Malfunction RC5601/5602/5603.

17  !(elg102_bkr(2) & elg1T240_bkr) Sets Trigger 17

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 82 of 97 SIMULATOR OPERATORS GUIDE TRIGGER TYPE DESCRIPTION 1 MAN Fails PZR Level CH III to ~34%.

3 MAN Trip running High Pressure Drain Pump.

5 MAN B SG MN Feed Flow Flow Cntrl fails low Actuates Steam Generator Tube Rupture, 360 gpm 7 MAN Sets OR so 1-RC-PCV-1455C will NOT OPEN.

9 AUTO Actuates CH0503 to trip 1-CH-P-1C on reactor trip.

16 AUTO Open Breaker to 1-RC-MOV-1535 17 AUTO Spurious Trip A/B/C RCPs when Gen. Output Bkrs open 21 MAN Opens 1-MS-120, SG B Supply to FW-P2 CH6401 DISABLE CHP-1A AUTO START CH 6402 DISABLE CHP-1B AUTO START GM0701 DISABLE MN GEN BKR G102 AUTO TRIP GM0702 DISABLE MN GEN BKR G1T240 AUTO TRIP MAN CH54 DISABLE CH-HCV-1200A AUTO CLOSURE 30 ACTIVE CH55 DISABLE CH-HCV-1200B AUTO CLOSURE FP0301 FPS FACP07 ALARM HORN FAILURE FP0302 FPS PC SPEAKER FAILURE SI2409 SI RELAY CI1A FAILS TO ACTUATE SI2505 SI RELAY SI5B FAILS TO ACTUATE Enter/Verify the following Switch Overrides:

Override Set Condition Trigger PCV455C_OPEN OFF 7 PCV455C_CLOSE ON 7 PCV455C_ENABLE OFF 7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 83 of 97 SIMULATOR OPERATORS GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components: 1-SI-P-1A Verify All pink magnets collected from previous scenarios.

Verify vertical board PCS monitor on ALARM SCREEN.

Reset ICCMs.

Verify all calcalc points are displayed on PCS: U9103, U9104, U9105V.

Verify Component Switch Flags; 1-VS-F-58A and 1-VS-F-58B switches (AUTO AFTER STOP).

Verify Brass Caps properly placed (Hi-Hi CLS, MSTVs, CH-MOV-1350, CW and SW MOVs, CTMT Hogger suction, CNDSR Vacuum breaker).

Radiation Monitors all clear.

Verify SG PORVs set for 1035 psig.

Verify D bank rod height at 227 steps and Bank Overlap Counter at 611.

Advance Charts.

Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset).

Verify SYNC keys in proper place.

Verify MOL reactivity plans and benchboard Reactivity Placard is current.

Reset Blender Integrators for Boric Acid to 100 and PG to 1000.

Verify Stop Watches are available for RO and BOP.

Verify Simulator Session In Progress light is turned ON.

Verify no persons are logged onto network computer to ensure no procedures displayed.

Verify PCS time matches Sim time.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 84 of 97 SIMULATOR OPERATORS GUIDE Spot check all ARPs are clean, verify the following ARPs are clean.

1A-A3 1A-B3 1A-G4 1C-D8 1E-E3 1H-D3 1H-D4 1H-E5 1H-E6 1H-E7 1H-F3 1H-G5 1H-G6 1H-G7 1J-B4 1K-D4 1RM-G8 1RM-H8 1J-E1 1J-F1 Verify CLEAN copies of the following procedures are in place.

1-PT-18.6.I 0-AP-53.00 (2) 0-AP-23.00 1-AP-18.00 1-AP-16.00 1-E-0 1-E-3 1-ECA-3.3 1-OP-ZZ-002 1-OPT-RX-001 1-OP-CH-007

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 85 of 97 SIMULATOR OPERATORS GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

TEAM 1 TEAM 2 TEAM 3 SRO RO BOP Ask for and answer questions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 86 of 97 SIMULATOR OPERATORS GUIDE Conduct shift turnover:

Unit 1 at 100% power with RCS boron concentration of 795 ppm.

Unit conditions have been stable at approximately 100% power since the last refueling outage.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra RO will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect.

Return to service expected later this shift.

Unit #2 is at 100% power with all systems and crossties operable Shift orders are to maintain 100% power on Unit #1 and upon relieving the watch, perform PT-18.6I, PZR Block Valve Stroke Test. Performance of this procedure has been authorized and has been PSA analyzed for current plant conditions.

The last shift performed two 35 gallon dilutions followed by a manual makeup for training.

When the team has accepted the shift, proceed to the Session Conduct Section.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 87 of 97 SIMULATOR TURNOVER CHECKLIST Pre Session Checks:

Safety Injection Section (Magnets) CW/SW Section RCS Section CVCS SI-MOV-1865A R G Brass Caps Tcold Loop Stop Pos (R - O)

Core Life Plaque R G SW MOVs A BC Ramp Plan Book SI-MOV-1865B 103A 103B 103C 103D Loop Bypass Valves (G - C)

SI-MOV-1865C R G A B C OP-RX-010 Book CW MOVs SI-MOV-1869A R G Thot Loop Stop Pos (R - O) PG Int Set 1000 106A 106B 106C 106D A BC SI-MOV-1869B R G BA Int Set 100 SI-MOV-1890A R G T/O CW Inlet Throttle Plaques (10%)

100A 100B 100C 100D SFP PPs Pwr Norm Alt Tavg/Tref Rec.

SI-MOV-1890B R G T/O PZR Level Recorder NI-NR-B SI-MOV-1890C R G T/O Brass Cap CLS TR A CLS TR B CTMT Hogger Suction Cap Group Step Ctrs CERPIs CH-MOV-1350 Main Steam/Feedwater Electrical/VSP PCS RM/WD/BR SG PORVs Set Synch Key PCS Main Screen RM-112 A BC MSTV Caps A BC SVB Power H J U9103 RM-113 A B C SF/FF Rec Scale LO System Switches U9104 Comm RM Pwr 1J 2J Cond Vac Bkr Cap VS-F-58A Pwr H J Grn Flag U9105V Synch Key VS-F-58B Pwr H J Grn Flag Alarm Screen (List)

Post Session Checks:

PCS Screens (Cleared/Display) RO BOP SM STA PCs Logged OFF (including Booth) Phone cleared Recall IC-1 Advance Charts Procedures Changed Red Light Binders Stored Trash Picked Up/Emptied Vacuum Reqd?

Pink Magnets in Drawer BB and VB Scenario Magnets removed E-Mail to SSG Required DVD Finalized EAL Charts Note Pads Manning Sheets Sticky Tabs (SRO/SM/ARPs) Markers (ARPs) Personnel/Comms Tracking Sheets (Booth)

Floor timers reset/In place Booth timers reset/In place Printers ready/have paper

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 88 of 97 SIMULATOR OPERATORS GUIDE Session Conduct:

• Ensure conditions in Simulator Set-up are established.

EVENT 1 Test Cycle PORV Block Valves, 1-PT-18.6I BOOTH:

30 minutes prior to the beginning of the scenario, provide the team with a copy of 1-PT-18.6I, Pressurizer Block Valve Stroke Test. The team will pre-brief the PT prior to entering the simulator.

Trigger 16 implements Remote Function to trip 1-RC-MOV-1535 breaker.

Trigger 16 (becomes Active) when 1-RC-MOC-1535 closed, and 1-RC-MOV-1535 control switch taken to open.

Operations Supervisor/Management/Work Week Coordinator:

If contacted, will acknowledge 1-RC-MOV-1535 breaker tripped when the valve was re-opened, suspension of the PT, and Tech Spec Clock identified (1 hour/72 hour).

Field Operator: (3 minute delay from request to answer)

If Contacted, as Service Building Operator, to check the status of 1-RC-MOV-1535 breaker, 1H1-2S 6A; report that the breaker has tripped (in the trip free position)

Shift Technical Advisor:

If asked to review Technical Specifications; report that you have reviewed Tech Specs and discussed this with the Shift Manager.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 89 of 97 SIMULATOR OPERATORS GUIDE EVENT 2 PRZR Level Transmitter 1-RC-LI-1461 Fail to 34%, 0-AP-53.00 When cued by examiner, implement Trigger #1.

Operations Supervisor/Management:

• If contacted, will acknowledge the failure of 1-RC-LI-1461. The individual(s) contacted will also acknowledge any TS LCOs and entry into AP-53.00.

• If contacted, will recommend to the team that channels remain as they are for now (i.e.,

do not perform 1-OP-RP-001 at this time).

• If contacted, will take responsibility for writing the CR.

STA:

• If contacted, will acknowledge the failure of 1-RC-LI-1461. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

• If asked, the STA will report that all documents have been reviewed and discussed with the Shift Manager.

• If contacted, will take responsibility for writing the CR.

• If the team has a transient brief: The STA will state that he has nothing to add.

Maintenance/Work Week Coordinator:

If contacted, will acknowledge instrumentation failure and commence investigations and/or efforts to place the channel in trip.

Unit 2 Operator:

If it appears that the SRO/RO will take action to perform 1-OPT-RX-007, the Unit 2 Operator will state that he will have the fourth RO perform 1-OPT-RX-007.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 90 of 97 SIMULATOR OPERATORS GUIDE EVENT 3 Loss of HPD, 1-SD-P-1A. (1-AP-18.00).

When the Evaluator indicates Ready, Activate Trigger #3.

Critical Task (CT-1): Start a third condensate pump, and reduce power prior to S/G low level trip (2/3 channels on one S/G < 17% NR).

Operations Supervisor/Management:

• If contacted, will acknowledge the trip of 1-SD-P-1A, and the need to ramp at 1%/minute to 75%

power.

• If asked for a recommended ramp rate, ask what the Unit Supervisor recommends. When authorized by the NRC, the Shift Manager will direct a 1%/minute ramp rate.

STA:

• If contacted, will acknowledge the trip of 1-SD P-1A and the need to ramp at 1%/minute to 75%

power.

• If asked, the STA will acknowledge the need to borate and use rods (will acknowledge the team review of pre-planned reactivity plans and OP-RX-010, if performed). If asked to perform the OP-RX-010 review, the STA will state that he is not able to at this time.

• After directed, the STA will report that he has reviewed VPAP-2802 and has discussed this with the Shift Manager.

• If contacted, will take responsibility for writing the CR.

• If the team has a transient brief: The STA will state that he has nothing to add.

• When contacted: EPIPs have been reviewed with the Shift Manager.

Field Operators: (Wait three (3) minutes from direction of a local action to the report of local condition found.)

• If contacted, the condensate polishing building operator will acknowledge the need to ramp the unit.

• If asked, the condensate polishing building operator acknowledge bypass of the polisher.

• When contacted, as the Service Building Operator concerning the status of 1-SD-P-1A power supply breaker, 1-EP-BKR-15B6, report that the breaker is open with a timed overcurrent drop on A phase.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 91 of 97 SIMULATOR OPERATORS GUIDE

• When contacted, as the Turbine Building Operator to check the status of 1-SD-P-1A, report that there are no apparent abnormalities with the A High Pressure Drain Pump.

Unit 2:

• If contacted, will acknowledge the trip of 1-SD-P-1A and the need to ramp at 1%/minute to 75%

power.

Role-play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 92 of 97 SIMULATOR OPERATORS GUIDE EVENT 4 Ramp to 75%, 0-AP-23.00.

Operations Supervisor/Management:

• If contacted, will acknowledge Ramp to 75% required due to the loss of 1-SD-P-1A.

• If contacted, will take responsibility for writing the CR.

• When contacted: The Shift Manager will review EPIPs for applicability. They are not applicable.

Unit 2 Operator:

• If notified of Ramp: Acknowledge ramp of Unit 1.

STA:

• If contacted, will acknowledge the impending ramp to 75% power.

• If contacted, will take responsibility for writing the WR and CR.

• When contacted: The STA reports that he has completed his review of VPAP-2802 and EPIPs and has discussed these with the Shift Manager.

• If the team has a transient brief: The STA will state that he has nothing new to add.

Chemistry:

• If contacted, will acknowledge ramp to 75%, and power has lowered by 15%.

Field Operators:

• If contacted, as the Turbine Building Operator to walkdown the Turbine during the ramp, acknowledge the direction.

If contacted, as the polishing building operator, acknowledge the direction to monitor polisher DP. (Polisher D/P can be monitored on XtremeView, Drawing Index, Condensate Polishing -

CN2)

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 93 of 97 SIMULATOR OPERATORS GUIDE EVENT 5 B FRV Controller Fails Low.

BOOTH NOTE: Recommend the next event starts following ramp, or when Blender placed in AUTO.

When cued by examiner, implement Trigger #5.

Critical Task (CT-2): Restore Feedwater to normal and restore S/G level to normal prior to S/G Low level trip (2/3 channels on one S/G < 17% NR), or S/G High level trip (2/3 channels on one S/G

> 75% NR)

Operations Supervisor/Management:

• If contacted, will acknowledge failure, and entry into 0-AP-53.00.

STA:

• If contacted, will conduct review of documents and report, all documents have been reviewed with the Shift Manager.

• If the team has a transient brief: The STA will state that he has nothing to add.

Maintenance/ Work Week Coordinator:

• If contacted, will acknowledge the failure and commence investigations.

Field Operators

• If dispatched to check on B FRV, acknowledge direction and report (after 3 minutes), there are no abnormalities noted.

Role-play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 94 of 97 SIMULATOR OPERATORS GUIDE EVENTS 6 SGTR (360) gpm). 0-AP-16.00, E-0, E-3.

When cued by examiner, implement Trigger #9.

Booth Notes. Verify the following:

• 1-CH-P-1C trips immediately after reactor trip.

• RCPs trip via Trigger 17 when generator output breakers open following reactor trip.

• 1-RC-PCV-1455C is overridden to CLOSE (Trigger 9).

Operations Supervisor/Management:

• If contacted, will acknowledge RCS leakage into the B SG. Will also acknowledge any TS information (time permitting) and information related to radiation monitors alarming.

• If contacted, will take responsibility for writing the WR and CR.

• If contacted, will acknowledge entry into AP-16.00, E-0, and E-3.

STA:

• If contacted, will acknowledge the RCS leakage into the B SG.

• If asked to calculate the RCS leak rate, state that it is difficult to ascertain at this time, but you will continue to monitor as time permits.

• If contacted, will take responsibility for writing the WR and CR.

• If the team has a transient brief: The STA will state that he has nothing to add.

• If asked to confirm EALs, report that you have discussed the EAL with the Shift Manager.

Unit Two:

• When radiation alarms sound on the radiation alarm panel, silence the alarms when directed and report the alarm to the Unit 1 SRO.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 95 of 97 SIMULATOR OPERATORS GUIDE

• If directed perform the associated RM ARP without leaving the confines of the Unit 2 control area. If actions or verifications are required on the Unit 1 side, inform the Unit 1 SRO of the need for an operator to complete the ARP.

• If asked, blowdown and air ejector RM readings are [as indicated at the time].

• If asked: Unit 2 RWST cross-ties are open.

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

• If asked to sound the Emergency Alarm, perform actions as directed.

Field Operators:

• If contacted, to report abnormalities on RCPs, report no 86 devices drops apparent on RCP breakers, but the Speed Sensing Panel appears to be malfunctioning; lights blinking on and off 1-FW set fw_88 to zero upon request.

• If contacted, to close 1-MS-120, SG G Supply to 1-FW-P2. Insert Trigger 21, wait 3 minutes, then report that 1-MS-120 is CLOSED Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the failure and commence investigations.

HP:

• If contacted, will acknowledge B SGTR.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 96 of 97 SIMULATOR OPERATORS GUIDE EVENT 7 SGTR with Loss of Pressure Control Booth Instructions:

Pre-event triggers 7 will disable PORV PCV 1455C. Verify that after Trigger 7 is implemented, PCV 1455C is overridden to the CLOSE position.

Operations Supervisor/Management:

• If contacted, will take responsibility for writing the WR and CR.

• If contacted, will acknowledge entry into 1-ECA-3.3.

• If contacted, will acknowledge the SGTR on B SG.

• If contacted, will acknowledge the isolation of B SG (if informed).

Unit Two:

• If asked, blowdown and air ejector RM readings are [as indicated at the time].

• If requested, acknowledge RM alarms, and perform ARP actions.

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

STA:

If the team has a transient brief: The STA will state that he has nothing to add.

Field Operators:

If contacted, field operators will perform valve manipulations as required Role play as other individuals as needed.

The scenario will end upon entering at step 10 of 1-ECA-3.1 or at the lead examiners discretion.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 97 of 97 SIMULATOR OPERATORS GUIDE EVENT 8 BOP Failures: 1-CH-P-1A/B no auto start, 1-CH-P-1C trip, 1-SI-P-1B no auto start, 1-CH-HCV-1200 A/B not close, 1-VS-MOD-103A not close, 1-MS-TV-109 and 1-DA-TV-100A/B not close Operations Supervisor/Management:

• If contacted, will take responsibility for writing the WR and CR.

Unit Two:

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

• If asked, MRC differential pressure is a found. Unit 2 will assume responsibility for throttling SW flow IAW E-0, Attachment 3 guidance (page 6).

Field Operators:

If contacted, field operators will perform valve manipulations as required.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Facility: _Surry_________________ Scenario No.: ___2_____ Op-Test No.: 17-301___

Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 at 65%, and Unit 2 at 100% power; MOL. Unit 1 has just completed 1-FW-P-1B1 pump bearing replacement.

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover: The Team will pre-brief ramp to 75% power in accordance with 1-OP-TM-005 prior to Simulator entry, and commence the ramp following turnover.

Event Malf. No. Event Event No. Type* Description 1 N/A N BOP Ramp to 75% (1-OP-TM-005)

R RO/SRO 2 CH28, +2 C RO/SRO Charging FC 1122 Fails High. (AP-53.00) 3 FW1801, -1 I BOP/SRO A SG FF Fails Low . (AP-53.00) CT-1 (5:00 ramp)

TS SRO 4 FW2703 C BOP/SRO MFP B trips < 80%. (AP-21.00) CT-2 5 RC1501, C RO/SRO PZR Press MPC FH. (AP-53.00, AP-31.00) CT-3

+1 (5:00 ramp) TS SRO RC0101 6 (10%, 20 M All LBLOCA w/ HHSI failure, and Cont spray failure. (AP-16.00, FR-Z.1, E-1) min ramp) CT-4, CT-5.

SI34,35 CS12, SI 1867C, and 1867D fail to open. 1-CS-P-1B trips after 10 min. 1-CS-CS13, MOV101A, and 101B fail to auto open.

CS0802 7 SI0902 M All Loss of LHSI. (ECA-1.1) 1-SI-P-1B when started will trip in 5 min.

8 FW48 C BOP BOP Failures in E-0 Attachments:

FW5502

• 1-FW-P-3A, AFW pump A fails to auto start.

BD03

• 1-FW-MOV-150B, Feed Pump Discharge MOV fails to auto close.

SW03 SW1303

• 1-BD-TV-100C SG B I/S TV does not auto close.

• 1-SW-MOV-104A, RSHX A SW Inlet, does not auto open.

• 1-SW-P-5C, RSHX C rad sample pump fails to auto start.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 LIST OF CRITICAL TASKS CT # EVENT DESCRIPTION MET ()

CT-1 3, A SG Restore Feedwater to normal and restore S/G level to FF fails low normal prior to S/G low level trip (2/3 channels on one S/G < 17% NR).

CT-2 4, Loss of Start an additional Condensate pump, and lower FW pump B power prior to S/G Low level trip (2/3 channels on one S/G < 17% NR).

CT-3 5, Pzr Restore pressure to normal band prior to low pressure Press MPC reactor trip at 1885 psig.

fails high CT-4 6, LB LOCA Restore HHSI flow to the core by manually opening 1-SI-MOV-1867C or 1-SI-MOV-1867D prior to the RCS fully depressurizing or prior to exiting E-0.

CT-5 6, LB LOCA Manually open CS 1A discharge MOV; 1-CS-MOV-101A or B prior to Recirc Spray pump start (60% in RWST) in order to provide adequate NPSH.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Event 1: Ramp to 75% IAW 1-OP-TM-005 (N- BOP, R-RO,SRO)

The Team will pre-brief this evolution prior to entering the Simulator. Upon entry of the Team to the Simulator, the Scenario brief will be given, questions answered, and the Team allowed ~ 5 minutes to become acclimated to the Simulator Environment. The team will then commence ramp per 1-OP-TM-005 and hold at 75% power.

Verifiable Action(s):

1) RO will manipulate control rods to control delta flux and/or Tave.

2) RO will manipulate CVCS control to establish a normal dilution to assist in Tave control.

3) BOP will manipulate Turbine Controls to establish power increase.

Technical Specifications: None.

Event #2: Charging Line Flow controller fails high (C - RO/SRO)

This failure will cause FCV-1122 to stroke close causing Letdown perturbations based on loss of cooling to Regen HX. The RO will diagnose the failure based upon alarms and indication received. The Team will initiate AP-53.00 Verifiable Actions:

1) The RO will place Charging line controller to manual and restore charging line flow to normal.

Technical Specifications: None Event 3: A Feed Flow Channel FAILS Low. (I - BOP/SRO, TS - SRO)

BOP will diagnose the failure based upon alarms and indications received and take the Immediate Actions of AP-53.00. The Team will implement AP-53.00, Loss of Vital Instrumentation/Controls and shift SGWLC input to Channel IV for A SG. The BOP will restore A SG NR level to program. If the operator does not take prompt action the turbine and reactor will trip on Hi S/G level (75%) in approximately 3 minutes.

Verifiable Action(s):

1) BOP will place the A FRV in manual and regain control of A SG NR level.

2) RO will defeat the failed channel.

3) BOP will return the A FRV to automatic.

Technical Specifications: The SRO will Review Tech Specs and determine which TS LCOs are not met. The following LCOs are not met:

1) Tech Spec 3.7, Table 3.7-1 Item 17, Low steam generator water level with steam flow/feedwater flow mismatch, Operator Action 6. With the number of OPERABLE Channels less than the TOTAL number of channels, operation may continue if the failed channel is placed in trip in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, the channel may be bypassed for 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance, if conditions not satisfied in the time permitted be in Hot Shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

Critical Task: (CT-1): Restore Feedwater to normal and restore S/G level to normal prior to S/G High level trip at 75% NR. (2/3 channels on one S/G > 75%)

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Event 4: Loss of Feed pump 1B with power < 80%. (C - BOP/SRO)

The BOP will diagnose the failure and start an additional Condensate pump per AP-21.00. If the operator does nothing the S/G low level trip will occur in approx. 3 min. The crew will perform 1-AP-21.00, If the operator starts an additional condensate pump but does not lower power, the reactor will trip on S/G Low level trip within 7 minutes Verifiable Action(s):

1) BOP start an additional Condensate pump.

2) Team lower power to support one feed pump (approx.5-10%)

Critical Tasks:

CT-2: Start an additional Condensate pump, and lower power prior to S/G low level reactor trip at 17% NR. (2/3 channels on one S/G < 17%)

Event 5: PRZR Pressure MPC fails high (I - RO/SRO, TS - SRO).

The RO will diagnose the failure based on lowering pressure on all pressure channels. The RO will perform actions per AP-53.00, and AP-31.00 to stop the pressure transient and restore pressure to normal. If the RO does not take prompt actions the reactor will trip on low pressure in just under 3 minutes.

Verifiable Actions(s):

1) The RO will place Przr Press MPC to Manual.

2) RO will close the spray valves.

3) The RO will raise pressure to normal operating band Technical Specifications: The SRO will Review Tech Specs and determine which TS LCOs are not met. The following LCOs are not met:

2) TS 3.1.A.6.a: With one or both PORVs inoperable but capable of being manually cycled, within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> either restore the PORV to operable status or close the block valve and maintain power to the block valve. Otherwise be in HSD within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> Note: Pressure may lower below DNB and then recover. While pressure is below the DNB limit of 2205 psig there is a 2-hour clock to restore pressure to within its limit in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> (TS3.12.F.2). It is not expected for this event for pressure to remain below the DNB limit for an appreciable amount of time.

Critical Tasks (CT-3): Restore pressure to normal band prior to low pressure reactor trip at 1885 psig. (2/3 Pzr Press < 1885 psig)

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Event #6: Large Break LOCA. (M-All)

A large break LOCA will occur causing a rapid lowering of pressurizer level and pressure. The RO will diagnose and perform AP-16.00 actions. The RO will report that leak size is > 50 gpm, and perform E-0 with SI at step 4. The team will diagnose failures of 1-SI-1867C and D to auto open. This will result in a loss of HHSI. 1-SI-P-1B, LHSI pump will auto start but because the break size is intermediate, there will be no LHSI flow to the core. There will be no SI flow to the core with this failure. Once containment pressure reaches HI-HI CLS setpoint team will diagnose failures of containment spray. The team will transition from E-0 to E-1 Verifiable Actions:

1) RO will perform AP-16.00 and will quantify leakrate.

2) RO will perform E-0 and identify no SI flow to the core.

3) RO or BOP will open 1-SI-1867C or D.

4) RO and BOP will perform Attachments 1-4 of E-0.

5) RO/BOP will open 1-CS-MOV-A or B.

Critical Tasks:

CT-4: The HHSI pumps will auto start but the HHSI cold leg MOVs; 1-SI-MOV-1867C and 1-SI-MOV-1867D will fail to auto open. The crew must restore HHSI flow to the core by manually opening 1-SI-MOV-1867C OR 1-SI-MOV-1867D prior to the RCS fully depressurizing or prior to exiting E-0. Failure to do this would represent a demonstrated inability of the crew to:

• Recognize a failure/incorrect auto actuation of an ESF system or component.

• Effectively direct/manipulate ESF controls.

CT-5: Both Containment Spray pumps will auto start on HI-HI CLS. Failures in 1-CS-MOV-101A, B prevent any containment spray from the A train. Additionally 1-CS-P-1B will trip on overcurrent 10 minutes after starting. Once 1-CS-P-1B trips there will be no containment spray. Therefore the crew should manually open CS 1A discharge MOV; 1-CS-MOV 101A OR B prior to Recirc Spray pump start (60% in RWST) in order to provide adequate NPSH.

Event #7: Loss of LHSI. (M - ALL)

Shortly after starting SI automatically starts 1-SI-P-1B, the pump will trip on overcurrent. With total loss of LHSI the team will transition from E-1 to ECA-1.1 at step 18 Verifiable Actions:

1) RO/BOP will verify subcooling above the limit (30/85).

2) RO/BOP will stop all but one CHG pump.

3) RO/BOP will isolate HHSI to cold legs.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #2 Event #8: BOP Failures in E-0 Attachments During performance of E-0 the BOP will identify and correct the following component failures:

• 1-FW-P-3A, AFW pump A fails to auto start.

• 1-FW-MOV-150B, Feed Pump Discharge MOV fails to close.

• 1-BD-TV-100C SG B I/S TV does not auto close.

• 1-SW-MOV-104A, RSHX A SW Inlet, does not auto open.

• 1-SW-P-5C, RSHX C rad sample pump fails to auto start.

The Scenario is terminated at Lead Evaluator discretion or at Step 10 of ECA-1.1.

Scenario Recapitulation Total Malfunctions: 11 Abnormal Events: 5, AP-53.00 (twice), AP-16.00, AP-21.00, AP-31.00.

Major Transients: 1 EOPs Entered: 2 (E-0, E-1)

EOP Contingencies: 1 (ECA-1.1)

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #2 Initial Conditions:

Turnover: The Team will raise power to 75% and hold for Feed Pump 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> run.

Pre-load malfunctions: (Trigger 30s) o SI34 DISABLE SI-MOV-867C AUTO OPEN o SI35 DISABLE SI-MOV-867D AUTO OPEN o CS12 DISABLE CS-MOV-101A AUTO OPEN o CS13 DISABLE CS-MOV-101B AUTO OPEN o FW48 DISABLE AFW P-3A AUTO START o FW5502 FW-MOV-150B AUTO CLOSE DISABLE o BD03 DISABLE BD-TV-100C AUTO CLOSURE o SW03 DOSAB;E SW-MOV-104A AUTO OPEN o SW1303 DISABLE SW-P-5C AUTO START o FP0301 FPS FACP07 ALARM HORN FAILURE o FP0302 FPS PC SPEAKER FAILURE o SIP1A_BKRPOS SIP1A BK 14H3 CUBICLE POSITION Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover:

Unit 1 is at 65%, and Unit 2 is at 100% power, MOL. Unit 1 has just completed 1-FW-P-1B1 pump bearing replacement, and 1-FW-P-1B was recently started. More data is needed at 75% power before 1-FW-P-1B1 can be returned to service.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover: The team will pre-brief a ramp to 75% power per 1-OP-TM-005. The team is to raise power to 75% and hold for Feed pump 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> run.

Event Malf. #s Severity Instructor Notes and Required Feedback 1 N/A Ramp to 75% (1-OP-TM-005) 2 CH28 +2 Charging FC 1122 Fails High. (AP-53.00) 3 FW1801, - (-1) 5:00 A SG FF Fails Low. (AP-53.00) CT-1 1 (5:00 ramp ramp) 4 FW2703 TRUE MFP B trips < 80%. (AP-21.00) CT-2

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #2 5 RC1501 (+1) 5:00 PZR Press MPC FH. (AP-53.00, AP-31.00) CT-3 ramp RC0101 6 (10%, 20 (10%) LBLOCA w/ HHSI failure, and Cont spray failure. (AP-16.00, FR-Z.1, E-1) min ramp) 20:00 SI34, ramp

• 1-SI-1867C, and D fail to auto open. (CT-4)

SI35,

• 1-CS-P-1B trips after 10 min. 1-CS-MOV101A, and 101B fail to auto open. (CT-CS12, 5)

CS13, CS0802

7. SI0902 TRUE Loss of LHSI. (ECA-1.1) 1-SI-P-1B when started will trip in 5min.

8 FW48 TRUE BOP Failures in E-0 Attachments:

FW5502 BD03

• 1-FW-P-3A, AFW pump A fails to auto start.

SW03

• 1-FW-MOV-150B, Feed Pump Discharge MOV fails to auto close.

SW1303

• 1-BD-TV-100C SG B I/S TV does not auto close.

• 1-SW-MOV-104A, RSHX A SW Inlet, does not auto open.

• 1-SW-P-5C, RSHX C rad sample pump fails to auto start.

Scenario Objectives A. Demonstrate the ability to ramp the Unit in accordance with 1-OP-TM-005, Unit Ramping Operations while maintaining critical parameters within their program levels.

B. Given a failure of the Pressurizer Pressure Master Controller, respond in accordance with 0-AP-53.00 to control Pressurizer pressure.

C. Given a failure of the A controlling Feed Flow channel, respond in accordance with 0-AP-53.00 to control A SG level.

D. Given a failure of the Charging flow controller, respond in accordance with 0-AP-53.00 to control Charging flow and Pressurizer Level.

E. Given a trip of the B Main Feed Pump, respond in accordance with 1-AP-21.00 to control Feed flow to all SGs.

F. Given a Large Break LOCA respond in accordance with E-0, Reactor Trip or Safety Injection and E-1, Loss of Reactor or Secondary Coolant to maintain adequate core cooling.

G. Given a loss of Low Head Safety Injection, respond in accordance with ECA-1.1, Loss of Emergency Coolant Recirculation to maintain adequate core cooling.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #2 Scenario Sequence Event One: Ramp to 75% power.

The Team will pre-brief a Ramp up in power IAW 1-OP-TM-005 and a provided Ramp Plan. Upon assuming the watch, the Team will commence a power escalation using 1-OP-TM-005, Unit Ramping Operations. The RO will use rods and dilution to maintain Tave/Tref within 5 °F, IAW the Ramp Plan. The BOP will manipulate turbine controls and monitor secondary parameters. The RO/BOP will peer check manipulations affecting reactivity, as time permits.

Malfunctions required: None.

Objectives: Initiate a controlled power escalation..

Success Path. Maintain Tave/Tref mismatch within 5 oF and Delta flux dear target value.

Event Two: Charging Flow Controller fails high.

When the Evaluating Team is ready, the failure of the Charging Flow Controller, 1-FC-1122 (HIGH) will take place. This failure will cause FCV-1122 to stroke close causing Letdown perturbations based on loss of cooling to Regen HX. The RO will diagnose the failure based upon alarms and indication received. The Team will initiate AP-53.00.

Malfunctions required: One, CH28.

Objectives: (RO) Place the Charging controller, 1-FC-1122 to MAN and raise Charging flow to restore Pressurizer level to normal.

(SRO) Direct actions per 0-AP-53. Consult with Tech Specs to determine if any LCOs are not met, and required actions.

Success Path: Perform 0-AP-53.00, and consult Tech Specs to determine if there are any Required Actions.

Event Three: A SG Feed Flow fails low.

When the Evaluating Team is ready, the malfunction is implemented to cause the A SG feed flow transmitter to fail low. This will cause the Feed Reg Valve for the A SG to stroke open in an attempt to restore Feed flow. Actual Feed flow will rise, and with no operator action will reach the Hi SG level trip setpoint of 75%. The BOP will initiate action per 0-AP-53.00 and take manual control of the B FRV and lower feed flow and SG level to program values. An alternate channel of Feed flow will be selected and the FRV returned to automatic.

Malfunctions required: One, FW1801.

Objectives: (BOP) Diagnose the failure of the FF channel, place the A Feed Reg valve in MANUAL and regain control of the A SG NR level. Return A Feed Reg valve to AUTO after an alternate channel is selected.

(RO) Defeat the failed channel.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #2 (SRO) Direct actions per 0-AP-53.00. Refer to Tech Specs and determine which LCOs are not met.

Success Path: Enter 0-AP-53.00, take manual control of A FRV, restore A S/G level to program and swap to alternate FF channel.

Critical Task: (CT-1): Restore Feedwater to normal and restore S/G level to normal prior to S/G High level trip at 75% NR. (2/3 channels on one S/G > 75%)

Event Four: Loss of Feed Pump 1B with power < 80%

When the Evaluation Team is ready, the tripping of Main Feed Pump 1B will take place. The BOP will perform immediate actions of 1-AP-21.00, Loss of Main Feedwater flow. The operator will start an additional Condensate pump and lower power as necessary for one Feed Pump operation Malfunctions required: One, FW2703 Objectives: (BOP) Control all SG NR levels using FEED Controller(s) in MAN.

(RO) Operate Boric Acid controls to maintain Tave in the band with Tref.

(SRO) Direct actions for matching steam flow with feed flow.

Success Path: Reduce power as necessary to match turbine steam flow with feed flow.

Critical Tasks: (CT-2): Start an additional Condensate pump, and lower power prior to S/G low level reactor trip at 17% NR. (2/3 channels on one S/G < 17%)

Event Five: Pressurizer Pressure MPC fails high.

When the Evaluating Team is ready, the malfunction is implemented to cause the Pressurizer Pressure Master Pressure Controller, 1-RC-PC-1444J to fail high over a 5 minute ramp. As the MPC fails, Pressurizer spray valves will open causing Pressurizer pressure to lower. Backup heaters will energize. The RO will take action per 0-AP-53.00, Loss of Vital Instrumentation and Control; and 1-AP-31.00, Increasing or Decreasing RCS pressure to stop the pressure transient and restore pressure to normal prior to the reactor tripping in Low Pressurizer pressure.

Malfunctions required: One, RC1501.

Objectives: (RO): Place 1-RC-PC-144J to MAN and lower MPC manual control to restore Pressurizer pressure to program value.

(SRO): Direct actions of 0-AP-53.00. Consult Tech Specs for the failure.

Success Path: Respond IAW 0-AP-53.00, and AP-31.00 to stop pressurizer pressure from lowering and restore pressurizer pressure to normal operating pressure (2235 psig).

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #2 Critical Task (CT-3): Restore pressure to normal band prior to low pressure reactor trip at 1885 psig. (2/3 Pzr Press < 1885 psig)

Event Six: Large Break LOCA.

When the Evaluating team is ready the malfunction is entered which will cause a Large Break LOCA causing a rapid lowering of pressurizer level and pressure. The RO will diagnose and perform AP-16.00 actions. The RO will report that leak size is > 50 gpm, and perform E-0 with SI at step 4. The team will diagnose failures of 1-SI-1867C and D to auto open. This will result in a loss of HHSI. 1-SI-P-1B, LHSI pump will auto start but because the break size is intermediate, there will be no LHSI flow to the core. There will be no SI flow to the core with this failure. Once containment pressure reaches HI-HI CLS setpoint team will diagnose failures of containment spray. The team will transition from E-0 to E-1.

The SRO will perform a commensurate brief and continue with E-0. While the RO and SRO continue with E-0, the BOP will be directed to perform E-0 Attachments 1 through 4. The RO may be directed to perform Attachment 2 due to the SI failures Malfunctions required: Six: RC0101, SI34, SI35, CS12, CS13, CS0802.

Objectives: (RO): Perform immediate actions of 1-AP-16.00. Trip the Reactor and perform the Immediate Action Steps of 1-E-0, Reactor Trip or Safety Injection, from memory.

Identify no SI to the core. RO may be directed to perform Attachment 2.

(BOP): Perform E-0 Attachments 1-4.

(SRO): Direct actions of E-0, and E-1 Success Path: Trip the Reactor and perform actions of 1-E-0, Reactor Trip or SI, restore HHSI to the core and once CLS HI HI is reached, identify failures in Containment Spray.

Critical Tasks:

CT-4: The HHSI pumps will auto start but the HHSI cold leg MOVs; 1-SI-MOV-1867C and 1-SI-MOV-1867D will fail to auto open. The crew must restore HHSI flow to the core by manually opening 1-SI-MOV-1867C OR 1-SI-MOV-1867D prior to the RCS fully depressurizing or prior to exiting E-0. Failure to do this would represent a demonstrated inability of the crew to:

• Recognize a failure/incorrect auto actuation of an ESF system or component.

• Effectively direct/manipulate ESF controls.

CT-5: Both Containment Spray pumps will auto start on HI-HI CLS. Failures in 1-CS-MOV-101A, B prevent any containment spray from the A train. Additionally 1-CS-P-1B will trip on overcurrent 10 minutes after starting. Once 1-CS-P-1B trips there will be no containment spray. Therefore the crew should manually open CS 1A discharge MOV; 1-CS-MOV 101A OR B prior to Recirc Spray pump start (60% in RWST) in order to provide adequate NPSH.

Event Seven: Loss of LHSI (ECA-1.1).

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #2 Shortly after the SI automatically starts 1-SI-P-1B, the pump will trip on overcurrent. The A LHSI pump is already tagged out so now there is a total loss of LHSI. With total loss of LHSI the team will transition from E-1 to ECA-1.1 at step 18.

Malfunctions required: One, SI0902 Objectives:

(RO) will verify subcooling above the limit (30/85). .

(BOP) will stop all but one CHG pump. Will isolate HHSI to the cold legs.

Success Path: Transition to ECA-1.1 when it is determined there is no success path to depressurize the RCS.

Event Eight: BOP Failures in E-0 Attachments..

During performance of E-0 the BOP will identify and correct the following component failures:

• 1-FW-P-3A, AFW pump A fails to auto start.

• 1-FW-MOV-150B, Feed Pump Discharge MOV fails to close.

• 1-BD-TV-100C SG B I/S TV does not auto close.

• 1-SW-MOV-104A, RSHX A SW Inlet, does not auto open.

• 1-SW-P-5C, RSHX C rad sample pump fails to auto start.

Malfunctions required: Five: FW48, FW5502, BD03, SW03, SW1303.

Objectives: (BOP) Identify components that fail to reposition on the SI Signal, and place them in their required condition.

Success Path: Identify and position components using 1-E-0, Attachment 1, 2, 3.and 4.

The Scenario is terminated at Lead Evaluator discretion or at Step 10 of ECA-1.1.

Scenario Recapitulation Total Malfunctions: 11 Abnormal Events: 5, AP-53.00 (twice), AP-16.00, AP-21.00, AP-31.00.

Major Transients: 1 EOPs Entered: 2 (E-0, E-1)

EOP Contingencies: 1 (ECA-1.1)

SHIFT TURNOVER INFORMATION OPERATING PLAN:

The initial conditions have Unit 1 is at 65% power with RCS boron concentration of 897 ppm.

Unit 1 conditions have been stable at approximately 65% power for the last four hours. Unit 1 has just completed 1-FW-P-1B1 pump bearing replacement and started the B Main Feed pump.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra RO will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect.

Return to service expected later this shift.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to raise power to 75% and hold for Feed Pump 24-hour run.

The last shift performed one 30 gallon dilution. Previous to this, shifts had been performing two 30 gallon dilutions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 14 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

Time Position Applicants Action or Behavior 1-OP-TM-005 Team Team will pre-brief Initial Conditions, Precautions and Limitations, and procedure prior to entering simulator.

The team will be provided with a copy of 1-OP-TM-005, Unit Ramping (Marked up to Section 5.3); 1-OP-CH-021, Alternate Dilution Using Blender; and a Reactivity plan.

SRO 1-OP-TM-005, Unit Ramping Operations Section 5.3 will be completed (signed off), but will be reviewed by the team prior to entering the simulator.

SRO 1-OP-TM-005, Unit Ramping Operations 5.3 Preparations for Turbine Ramp Up 5.3.1 Review all lighted annunciator windows for adverse conditions that could impact the performance of this procedure.

Will be initialed as complete. - No annunciators Lit.

5.3.2 Review the Tagout File for tagouts that could impact this procedure.

Will be initialed as complete. - MCR FP Panel Tagged out, OC-18 performed by Unit 2 BOP.

5.3.3 Review the Plant Status Log for conditions that could impact this procedure.

Will be initialed as complete. - No items in the plant status log.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 15 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

SRO 1-OP-TM-005, Unit Ramping Operations NOTE: Rod height adjustments should be used to maintain Delta Flux as recommended by Reactor Engineering. Boration or dilution should be used to account for power defect and Xenon changes to maintain reference temperature.

5.3.4 For scheduled power level changes greater than 10%, verify that a reactivity plan has been provided by Reactor Engineering. Otherwise, direct the STA to notify Reactor Engineering and request recommendations for control of core parameters.

• Delta Flux control

• Recommendations for Rod height and/or RCS Boron adjustments

• Expected Xenon transient Will be initialed as complete. The team will be given a reactivity plan.

5.3.5 Record the Target Power Level, the Current Power Level, and the Percent Power Change below.

Target Power Level _____75%_________

Minus Current Power Level - _____65%________

Equals Percent Power Change = ____10%_________

Will be initialed as complete 5.3.6 Obtain a current copy of 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations, and attach to this procedure. (Reference 2.3.9)

Will be initialed as complete.

5.3.7 Review 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations.

Will be initialed as complete.

5.3.8 Document the power level(s) and hold time(s) that will be used to satisfy 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations. This information should be obtained from the Reactivity Plan and/or the Reactor Engineer.

Enter N/A if the fuel has been conditioned.

Will be marked as N/A. Fuel Conditioning complete.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 16 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

SRO 1-OP-TM-005, Unit Ramping Operation Note prior to Step 5.3.9: If a shift turnover is required while Subsection 5.4 is in progress, Steps 5.3.9, 5.3.10, and 5.3.11 must be performed for the relieving shift.

Multiple signoffs are provided for this purpose.

5.3.9 Check that the Shift Manager (who is the designated Test Coordinator) or his designee has reviewed the Detailed Pre-Job Briefing Checklist and Responsibilities in Attachment 1 (page 3 of 5) and conducted a Detailed Pre-Job Briefing with all the personnel performing the unit ramp.

Will be initialed as complete. Team will re-perform these steps prior to entering simulator.

5.3.10 Check that the Senior Operations Manager or Operations Manager on Call has reviewed the Management Expectations Briefing Checklist in Attachment 1 (page 2 of 5) and briefed the Operations Department and support personnel on management expectations.

Will be initialed as complete. Team will re-perform these steps prior to entering simulator.

5.3.11 The pre-job brief shall include the items in Attachment 2, Pre-job Brief Expectations for Reactivity Control.

Will be initialed as complete. Team will re-perform these steps prior to entering simulator.

5.3.12 Determine the specific rate of Reactor power change and the methods which will be used to achieve this rate of change.

Rate of Power Change _______0.33%/min______________________

Reactor Power Change Methods Turbine, rod control, and chemical shim.

Will be initialed as complete.

5.3.13 Notify Energy Supply (MOC), Chemistry, and the Polishing Building that the power change is imminent Will be initialed as complete.

The Team will commence with Section 5.4. Several steps may be completed prior to entering the simulator (i.e., marked N/A).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 17 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

SRO/RO 1-OP-TM-005, Unit Ramping Operation 5.4 Power Increase Between 50% and 100% Reactor Power Caution prior to Step 5.4.1:

• Energizing additional PRZR heaters may cause a change in RCS average temperature due to a difference in boron concentration between the PRZR and the RCS.

5.4.1 Check or place PRZR Backup Heaters in the MANUAL ON position IAW 1-OP-RC-019, Pressurizer Heater Operation.

SRO/RO 1-OP-TM-005, Unit Ramping Operation Notes prior to Step 5.4.2:

• The second MFP should be started at approximately 6.0 x 106 lbm/hr (5.6 - 6.4 x 106 lbm/hr) total Feedwater flow.

• When a Main Feed Pump Recirc Valve opens, a decrease in FW temperature will occur that can add positive reactivity to the core. The magnitude of the reactivity change is dependent on the time in core life and the value of the Moderator Temperature Coefficient.

5.4.2 WHEN reactor power level reaches the point where additional Feedwater flow is desired, THEN perform the following substeps. Enter N/A if a Main Feed Pump will not be started.

a. Notify Chemistry and the Polishing Building of the imminent start of the idle Main Feedwater Pump.

b. Place the idle Main Feedwater pump in service in accordance with 1-OP-FW-004, Main Feedwater System Operation.

Sub-steps 5.4.1 and 5.4.2 will be marked N/A Note prior to Step 5.4.3:

The turbine control valves should not run up against the Turbine Load Limiter 5.4.3 Increase the Turbine Load Limiter and maintain the limiter as close as reasonably possible above the actual turbine load during power escalation (Reference 2.4.2).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 18 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

SRO/RO 1-OP-TM-005, Unit Ramping Operation Cautions prior to Step 5.4.4:

• To maintain positive control of reactivity, control rods shall be moved in a deliberate, carefully controlled manner while closely monitoring the Reactor's response.

• The Turbine will momentarily (1.5 seconds) shift to MANUAL when placed in IMP IN. To minimize Governor valve oscillations, the GV Tracking Meter should read as close to 0 as possible before transferring to IMP IN.

5.4.4 Check initiated or initiate Attachment 4, Reactivity Control and Monitoring During Ramp. (Reference 2.4.6). Attachment 4, 1-OP-TM-005, on Pages 27-29.

Notes prior to Step 5.4.5:

• The Turbine should be operated in IMP IN while ramping is in progress. If the power increase is stopped during the ramp up, IMP OUT may be used to assist in stabilizing the Turbine.

• This procedure is normally entered at greater than 50% power. If power is less than 50%, procedure 1-GOP-1.5, Unit Startup, 2% Reactor Power to Max Allowable Power, must be used.

BOP 5.4.5 Commence the power increase at the ramp rate specified by Shift Supervision, using the LOAD RATE % PER MIN thumbwheel.

Note prior to Step 5.4.6:

Alternate indications of Reactor Power, such as Core T, 1st Stage Pressure, RO Condensate and Feedwater performance parameters, and Electrical output, should be reviewed and compared during power escalation. (Reference 2.4.3) 5.4.6 Borate, dilute, or use control rods as required to maintain flux in band.

Observe the expected response on FR-1-113, BA-PRI WTR FLOW and Y1C-114A, PRI WTR SUP BATCH INTEGRATOR.

1-OP-CH-021 - Alternate Dilution Using Blender actions are outlined starting on page 24.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 19 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

SRO 5.4.7 IF either annunciator 1G-C4, UPPER ION CHAMBER DEVIATION OR AUTO DEFEAT <50%, or 1G-D4, LOWER ION CHAMBER DEVIATION OR AUTO DEFEAT <50%, are LIT, THEN perform the following substeps.

Otherwise, enter N/A.

a. Notify the OMOC.

b. Initiate an excore quadrant power tilt calculation and perform a calculation at 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> intervals until both annunciators are NOT LIT.

c. Review Tech Spec 3.12.B.5 and 3.12.B.6.

d. Notify Reactor Engineering or STA to determine new High Flux trip and rod stop setpoints.

e. Have I & C adjust High Flux trip and rod stop setpoints as necessary based on tilt calculation.

f. Review Tech Spec 3.12.B.7 for additional actions required if tilt is not reduced to less than 2 percent after a period of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

g. Stop ramp at least 5 percent less than High Flux Trip setpoint.

This step will be marked N/A 5.4.8 WHEN both annunciators 1G-C4 and 1G-D4 are NOT LIT, THEN verify or adjust High Flux Trip and Rod Stop setpoints to the full power values

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 20 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

SRO 1-OP-TM-005, Unit Ramping Operation Caution prior to Step 5.4.9:

The following parameters must be closely monitored prior to exceeding 60%

power: CP Bldg P, MFP suction pressure, MFP recirc status, and HP Heater Drain status. Adequate margin must be maintained on MFP suction pressure and CP Bldg P to prevent bypassing the CP Bldg and subsequent secondary transient. Reactor power should be held at approximately 60% while an HP Heater Drain Pump is started if adequate margin does not exist.

Notes prior to Step 5.4.9:

• Steps 5.4.9 through 5.4.16 may be marked with N/A depending on the power level at which the procedure was entered.

• Ramping should be stopped at least 5 percent less than High Flux trip setpoint.

• The following PCS points may be used to monitor duct temperature trend:

o T2545A, Isolated Phase Bus Duct A Phase Air Temperature o T2546A, Isolated Phase Bus Duct B Phase Air Temperature o T2547A, Isolated Phase Bus Duct C Phase Air Temperature 5.4.9 Notify Chemistry and the Polishing Building of the imminent start of 1-SD-P-1A or 1-SD-P-1B. HP FW HTR DRN PP. Enter N/A for Steps 5.4.9 and 5.4.10 if pump is already running.

Pump is already in service 5.4.10 WHEN there is sufficient flow to the HP Heater Drain Tank, THEN start 1-SD-P-1A or 1-SD-P-1B IAW 1-OP-SD-002, HP Heater Drain Pump Operation.

NOTE: If calorimetric basis has not been changed during the ramp, and no adjustments have been made to the NIs during the ramp, then a calorimetric is not required.

(Reference 4.15) 5.4.11 Continue the power escalation and evaluate the calorimetric. IF a calorimetric is required, THEN notify Energy Supply (MOC) that there will be a 70 percent (approximate) power hold to perform a calorimetric. Otherwise, enter N/A.

(Reference 4.15) 5.4.12 WHEN power level is stable at approximately 70 percent, THEN stop the power escalation AND initiate a calorimetric. Enter N/A if calorimetric is not required. (Reference 4.15) 5.4.13 IF a flux map is needed, as desired by Reactor Engineering, THEN direct Reactor Engineering to perform flux map at this time. Otherwise, enter N/A.

All steps will be marked N/A

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 21 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

1-OP-TM-005, Unit Ramping Operations 5.4.14 WHEN the calorimetric (if needed), initiated in Step 5.4.11, and the flux map (if needed), initiated in Step 5.4.12, have been satisfactorily completed, THEN notify Energy Supply (MOC), Chemistry, and the Polishing Building that the power escalation will continue, as required.

Step will be marked N/A 5.4.15 Continue the power escalation to 75 percent (approximate) power.

Team will begin at this Step.

Evaluators Note: No further actions are expected for this event.

-- END EVENT 1 --

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 22 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1 Alternate Dilution NOTE: This subsection will be used for the first alternate dilution of the shift.

Attachment 1 will be used as a guide for further alternate dilutions for the remainder of the shift.

NOTE: If unit on Excess Letdown, 1-OP-CH-007 should be used.

5.1.1 Determine the required integrator setpoint by performing the following:

________________ gal (-) _____________= ______ Integrator setpoint (Desired Dilution) (anticipated additional flow, dependent on flowrate) 5.1.2 Notify Shift Supervision of impending Alternate Dilution. (Reference 2.4.1) 5.1.3 Notify STA of impending Alternate Dilution.

5.1.4 Place the MAKE-UP MODE CNTRL switch in the STOP position.

5.1.5 Adjust both of the following controllers for the flow rate and total gallons of Primary Grade water for the dilution. IF the PG FLOW CNTRL controller setpoint has previously been set, THEN enter N/A for that substep.

a. 1-CH-FC-1114A, PG FLOW CNTRL ______ GPM (IAW Attachment 2)

b. Record number of gallons of PG to be added from Step 5.1.1 and enter into 1-CH-YIC-1114A, PRI WATER SUP BATCH INTEGRATOR (GAL) as follows:

______ GAL

1. Depress PRESET A Button (Controller will read the last value entered into the controller; reads in gallons.)

2. To clear PRESET A, depress the CLR Button. Enter N/A if not required.

3. Enter desired PRESET A value. Enter N/A if not required.

4. Depress ENT Button

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 23 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1.6 Place the MAKE-UP MODE SEL switch in the ALT DIL position.

5.1.7 IF it is desired to direct the dilution water to the charging pump suction only, THEN place 1-CH-FCV-1114B, BLENDER TO VCT, in the CLOSE position. Otherwise, enter N/A.

5.1.8 Place the MAKE-UP MODE CNTRL switch in the START position.

5.1.9 Check all of the following conditions.

a. 1-CH-FCV-1113A, BORIC ACID TO BLENDER, is closed.

b. 1-CH-FCV-1113B, BLENDER TO CHG PUMP, is open.

c. 1-CH-FCV-1114A, PGW TO BLENDER, is controlling in AUTO.

d. 1-CH-1114B, BLENDER TO VCT, is OPEN - N/A 5.1.10 IF it is desired to stop the Dilution before the selected amount, THEN place the MAKE-UP MODE CNTRL switch in the STOP position. IF the PRI WATER SUP BATCH INTEGRATOR (GAL) is used to stop the flow, THEN enter N/A for this step.

5.1.11 WHEN the desired amount of makeup has been reached, THEN check both of the following valves closed.

• 1-CH-FCV-1113B

• 1-CH-FCV-1114B RO 5.1.12 Check or place 1-CH-FCV-1114B in AUTO.

5.1.13 Check or place the following controllers in AUTO.

• 1-CH-FC-1113A, BA FLOW CNTRL

• 1-CH-FC-1114A, PG FLOW CNTRL 5.1.14 Place the MAKE-UP MODE SEL switch in the AUTO position.

5.1.15 Place the MAKE-UP MODE CNTRL switch in the START position.

5.1.14 Notify Shift Supervision of Blender status. (Reference 2.4.1)

Additional Alternate Dilutions will be performed using 1-OP-CH-021, Attachment 1 (Next Page).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 24 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 25 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 26 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 1 Page 27 of 105 Event

Description:

Unit Ramp to 75% per 1-OP-TM-005, Ramping Operations.

Cue: When team and Examiners are ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 28 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Time Position Applicants Action or Behavior Charging Line Flow Controller 1-CH-FC-1122 Fails High.

Diagnose the failure based on the following alarms and indications:

• 1-CH-FC-1122C indicates maximum demand.

• Charging Line Flow, 1-CH-FI-1122A shows step drop to 0 gpm.

• Annunciator 1D-E5, CHG PP TO REGEN HX HI-LO FLOW

• Pressurizer Level lowers slowly on all Level channels.

• Pressurizer Pressure lowers slowly on all channels.

• VCT Level rising slowly.

SRO Enters 0-AP-53.00, Loss of Vital Instrumentation / Controls.

RO [1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Checks Pressurizer Level channels; 1-RC-LI-1459, 1-RC-LI-1460, and 1-RC-LI-1461 are all normal.

RO [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Places 1-CH-FCV-1122 in manual and raises charging flow.

SRO Conduct a Brief using the Briefing Placard and obtains Critical Parameter information from the RO and BOP. The SRO will update the Shift Manager during AP-progression.

SRO will provide a band for control of PRZR level with CH flow in MANUAL.

STA will have no input for the brief.

Step 3, AP-53.00 RO VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO will identify that reactor power is less than 100% using PCS Display of Core Thermal Power.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 29 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Step 4 CAUTION and Notes, AP-53.00 SRO Caution prior to step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

Notes Prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 11.

SRO *4 DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

• PRZR Level Control, Step 9.

RO The RO will identify that 1-RC-FC-1122C has failed.

Step 9, AP-53.00 SRO 9. CHECK PRZR LEVEL CONTROL CHANNELS - NORMAL RO Responds NO, 1-RC-FC-1122C Abnormal.

SRO 9 a) RNO 1) Place either of the following in MANUAL:

• 1-CH-FC-1122C, CHG FLOW CNTRL, OR

• 1-CH-LC-1459G, PRZR LEVEL CNTRL RO Responds 1-CH-FC-1122C in MANUAL SRO 9 a) RNO 2) Control PRZR Level at Program Level.

RO Responds Maintain PRZR Level at program +/- band set by SRO SRO 9 a) RNO 3) Move PRZR Level - CH SEL switch to Defeat the failed channel.

RO/BOP Responds There is no failed channel.

SRO 9 a) RNO 4) Check or place recorder 1-RC-LR-1459 on an operable channel.

BOP Responds 1-RC-LR-1459 is on an operable channel..

SRO 9a) RNO 5) Refer to Tech Specs 3.1.A.5, Table 3.7-1 Item 9, and Table 3.7-6, Item 13.

• 3.1.A.5 (If Pzr heaters deenergized): This LCO is met.

• Table 3.7-1, item 9: This LCO is met.

• TS Table 3.7-6, Item 13: This LCO is met.

9 a) RNO 6) Refer to Attachment 3. (Continued on next page)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 30 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Step 9a) RNO 6)

SRO SRO hands Attachment 3, Pressurizer Level Control diagram to RO/BOP for review.

Note: Attachment 3 is at the end of this section.

Step 9b-9d, AP-53.00, Continued:

SRO Step 9 b) Check Pressurizer Heaters - Energized.

RO Checks Required Pressurizer Heaters energized, and reports that Pressurizer heaters are energized.

SRO Step 9 c) Check Letdown - IN SERVICE.

RO Reports Letdown in service.

SRO Step 9 d) Check PRZR level control - IN AUTOMATIC.

RO Reports pressurizer level control in MANUAL.

SRO Step 9 d) RNO When pressurizer level restored to program level, un-saturate 1-CH-LC-1459G, PRZR LEVEL CNTRL. Place 1-CH-FC-1122C in automatic.

RO Acknowledges direction and notifies SRO when pressurizer level has returned to program value. RO maintains manual control of Charging flow.

SRO SRO recalls NOTE 2, prior to Step 4 and goes to Step 11 of AP-53.00.

Step 11, AP-53.00 SRO Step 11 Check Calorimetric - Functional IAW 1-OPT-RX-001, Attachment 4.

RO/BOP Checks Calorimetric unaffected by this failure, and reports to the SRO.

1-OPT-RX-001, Attachment 4 at the end of this section.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 31 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Step 12, AP-53.00 SRO Step 12 REVIEW THE FOLLOWING:

• Tech Spec 3.7

• VPAP 2802 Notifications and Reports

• TRM

• Reg Guide 1.97

• EP-AA-303, Equipment Important to Emergency Response.

SRO directs STA to review all documents listed.

STA reports that all documents have been reviewed and discussed with the Shift Manager.

Step 13, AP-53.00 SRO CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS The team will identify that no new additional failures exist (i.e., all failures have already been addressed), proceed to the RNO section, and this will direct the team to Step 15.

Step 15, AP-53.00 SRO PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C END EVENT #2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 32 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 33 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 2 Page 34 of 105 Event

Description:

Charging Line Flow Controller Fails High. (AP-53.00)

Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 35 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner Time Position Applicants Action or Behavior BOP Diagnoses failure FT-1477 with the following indications/alarms:

Alarms:

• 1H-E5 STM GEN 1A FW >< STM FLOW

• 1F-C7 STM GEN 1A CH 3 FW < STM FLOW

• 1F-D7 STM GEN 1A CH 4 FW < STM FLOW

• 1H-G5 STM GEN 1A LVL ERROR.

Indications:

• Lowering 1A SG Feed Flow indication CH-3

• Rising 1A SG Feed Flow indication CH-4

• Rising demand indication on 1-FW-FC-1478 (A FRV)

• Rising level indication on A SG.

SRO Enters 0-AP-53.00 LOSS OF VITAL INSTRUMENTATION / CONTROLS Step 1, AP-53.00 BOP [1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL BOP identifies Channel IV indication for feed flow is NORMAL.

Step 2, AP-53.00 BOP [2] PLACE AFFECTED CONTROL(S)/COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION BOP takes manual control of A SG feed reg valve and lowers demand (FF < SF) to restore level to program using Channel IV indication.

Critical Task: (CT-1): Restore Feedwater to normal and restore S/G level to normal prior to S/G High level trip at 75% NR.

SRO Conduct a Brief using the Briefing Placard and obtains Critical Parameter information from the RO and BOP. The SRO will update the Shift Manager during AP-progression.

SRO will provide a band for control of B SG level with B FRV in MANUAL.

The STA will state nothing to add.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 36 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner Step 3, AP-53.00 SRO

• VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO Checks Reactor Power < 100% using PCS Calorimetric. Due to restoration of FF on 1A SG, power increase may be noted. As required, the SRO may direct the BOP to reduce turbine load to prevent exceeding 100% Calorimetric power.

Step 4, AP-53.00, CAUTION, and Notes CAUTION: If Reactor power has been affected by a secondary transient, Turbine SRO adjustment may be needed to control Tave.

NOTES:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction has been addressed by this procedure, recovery actions may continue at Step 11.

Step 4, AP-53.00 SRO DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

RO/BOP Identifies 1A SG Feed Flow (CH 3) affected.

SRO Goes to Step 7.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 37 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner Step 7, AP-53.00 SRO CAUTION: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

SRO CHECK STEAM GENERATOR LEVEL CONTROL INSTRUMENTS - NORMAL

• Steam Pressure

• Steam Flow

• Feed Flow

• Steam Generator Level BOP Determines CH III Feed flow instrumentation for A SG is NOT normal.

SRO Step 7. RNO, AP-53.00 IF the selected steam flow, steam pressure, or feed flow input to the SG Water Level Control system has failed, THEN do the following:

a) Place the associated Feed Reg Valve in MANUAL.

BOP Verifies A SG MFRV controller, 1-FW-FCV-1478F, in manual SRO b) Control SG level at program level (44%, a band will be given).

BOP Verifies A SG NR level is returning to program level.

SRO c) Select the redundant channel for affected SG(s)

RO Selects Channel IV Feed Flow for A SG using two-position selector switch on Vertical Board 1-2 (applicant may also place the associated Steam Flow channel in Channel IV)

SRO d) WHEN SG level returned to normal, THEN place the Feed Reg Valve in AUTOMATIC.

BOP Places A SG FRV controller, 1-FW-FCV-1478F, in automatic control.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 38 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner Step 7, RNO, AP-53.00 (Continued)

SRO Perform follow-up actions:

a) Consult with Shift Manager on need to initiate 1-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

If asked the Shift Manager will recommend not performing 1-OP-RP-001 at this time.

SRO b) Refer to the following Tech Spec 3.7 items:

• Table 3.7-1, 12 and 17

• Table 3.7-2, 1.c, 1.e, and 3.a

• Table 3.7-3, 2.a, and 3.a

• Table 3.7-6, 15 and 16 SRO Determines Table 3.7-1 item 17, is applicable.

1. Tech Specs Section 3.7, Table 3.7-1, Item 17, Low steam generator water level with steam/feedwater flow mismatch, Operator Action 6. With the number of Operable channels one less than the total number of channels, Power Operation may proceed provided the channel is placed in the trip condition in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, the channel may be bypassed for 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance; if these requirements are not met, the Unit must be placed in Hot Shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

c) Refer to Attachment 1.

d) IF no other instrumentation failure exists, THEN GO TO Step 13.

Step 11, AP-53.00 SRO 11. Check Calorimetric - Functional IAW 1-OPT-RX-001, Attachment 4.

RO Determines that Calorimetric is functional.

Note: 1-OPT-RX-001, Attachment 4 is included on page 41.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 39 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner Step 12, AP-53.00 SRO 12. REVIEW THE FOLLOWING

• Tech Spec 3.7 Determines Table 3.7-1 item 17, Operator action 6, is applicable (place channel in trip w/in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />).

• VPAP-2802, NOTIFICATIONS

• TRM SECTION 3.3, INSTRUMENTATION

• Reg. Guide 1.97

• EP-AA-303, EQ. IMPORTANT TO EMERGENCY RESPONSE The STA reports he has completed review and has discussed the results with the Shift Manager.

STA Step 13, AP-53.00 SRO 13 CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS BOP Reports no additional failure exists SRO GOES TO Step 15 Step 15, AP-53.00 SRO 15. PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C END OF EVENT 3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 40 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 3 Page 41 of 105 Event

Description:

A SG Feed Flow XMTR (Ch 3), Fails low. (AP-53.00)

Cue: By Examiner

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 42 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

Time Position Applicants Action or Behavior BOP Diagnoses 1-FW-P-1B trips.

Indications:

• 1H-H8, FW PP OVERCURRENT TRIP

• 1H-E5/E6/E7, STM GEN 1A (1B, 1C) FW><STM FLOW.

• 1H-G5/G6/G7, STM GEN 1A (1B, 1C) LVL ERROR.

• 1-FW-P-1B1, and 1-FW-P-1B2 ammeter indicates 0 amps.

• Breaker trip lights; 1-FW-P-1B1, and 1-FW-P-1B2.

• ALL SG levels lowering rapidly.

Performs 1-AP-21.00 immediate actions.

SRO Enters 1-AP-21.00, LOSS OF FEEDWATER FLOW 1-AP-21.00 BOP [1] CHECK MAIN FEED PUMP STATUS a) Check Reactor power GREATER than 80%

b) Check Main Feed Pumps - TWO Running Determines that power is LESS than 80%, and goes to step 1a RNO.

1-AP-21.00 BOP 1a RNO If at least on Main Feed Pump running THEN GO TO Step 2.

1-AP-21.00 BOP [2] START AN ADDITIONAL CONDENSATE PUMP Starts an additional Condensate Pump 1-CN-P-1A.

1-AP-21.00 BOP [3] REDUCE TURBINE LOAD TO MATCH STEAM FLOW WITH FEED FLOW.

• Use Valve Position Limiter OR

• Reduce Turbine load using Turbine Manual BOP reduces Turbine load until Steam flow matches Feed flow.

Critical Task CT-2: Start an additional Condensate pump, and lower power prior to S/G low level reactor trip at 17% NR.

Evaluator Note: Once Feed Flow is > 2.5 x 106 lbm/hr then a Feed Pump trip will cause a Reactor trip on SG Low level unless the BOP starts an additional Condensate pump.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 43 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

1-AP-21.00 SRO Conducts a Brief summarizing the Event and Establish priorities.

RO will provide Critical Parameters using Brief Placard.

BOP will provide Critical Parameters using Brief Placard.

The STA will state that primary integrity is as the RO reported and that secondary integrity is as the BOP reported. The STA will state that radiological conditions are normal. He will also state that containment conditions and the electrical conditions are as you see them.

Completes Brief and continues with 1-AP-21.00.

1-AP-21.00 SRO 4. CHECK CONDENSATE POLISHING BYPASS REQUIRED.

• Main Feed Pump Suction Pressure Less than 400 psig.

BOP BOP determines that Main Feed Pump Suction pressure is NOT < 400 psig. Go to step 6.

1-AP-21.00 SRO 6. ENERIZE ALL PRESSURIZER HEATERS.

RO RO energizes all pressurizer heaters.

1-AP-21.00 SRO 7. CHECK STEAM DUMP OPERATION - REDUCING TAVE/TREF MISMATCH BASED ON DEMAND SIGNAL.

BOP Determines that steam dump operation is effective. OR Determines that steam dump operation is not needed.

1-AP-21.00 SRO NOTE: Depending on initial plan conditions, rod insertion or boration may be used to stabilize temperature and maintain delta flux in band.

RO/BOP RO/BOP acknowledges the note.

1-AP-21.00 SRO 8. CHECK CONTROL RODS - INSERTING IF NECESSARY.

RO RO reports that rods are inserting as necessary.

IF RO answers NO, then SRO will direct the RO to manually insert rods as necessary.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 44 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

1-AP-21.00 SRO 9. CHECK ANNUNCIATOR 1E-E3, DELTA FLUX DEVIATION IS NOT LIT.

RO RO reports status of annunciator.

Evaluator Note: This annunciator may come in depending on degree of turbine load reduction.

If annunicator 1E-E3 is lit then crew will perform annunciator response.

Note: 1E-E3 Annunciator actions included at end of this section..

1-AP-21.00 SRO 10. CHECK ALL SG FLOWS - STEAM FLOW IS LESS THAN OR EQUAL TO FEED FLOW.

BOP BOP reports that all SG steam flows are less than Feed flow.

1-AP-21.00 SRO 11. CHECK ALL SG LEVELS - AT OR TRENDING TO PROGRAMMED LEVEL.

BOP BOP reports that all SG levels are at programmed level.

1-AP-21.00 SRO 12. CHECK TAVE - MATCHED WITH TREF.

RO RO reports that Tave is matched with Tref.

Evaluator Note: If Tave is not matched with Tref then RO will be instructed to adjust control rods, dilute, or borate as necessary.

1-AP-21.00 SRO 13. CHECK FEED HEADER TO STEAM HEADER DELTA P - AT LEAST 50 PSID.

BOP BOP reports on actual Feed Header to Steam Header Delta P which will be in excess of 50 psid.

1-AP-21.00 SRO 14. CHECK AMPS ON EACH MOTOR OF THE RUNNING MAIN FEED PUMP LESS THAN 420 AMPS.

BOP BOP reports that yes B Main Feed pump amps are < 420 amps and are approx. xx amps. Note: Amps is variable dependent on power level.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 45 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

1-AP-21.00 SRO 15. CHECK OPERATION OF MAIN FEED PUMPS

• Recirc valve position Reports that Recirc valve position is closed.

BOP

• Discharge MOV position.

Reports that Discharge MOV is OPEN.

• Pump Amps.

Reports that Pump amps are approx.. 240 amps.

1-AP-21.00 SRO 16. Check Reactor Power change less than 15% in one hour.

BOP BOP makes report on amount of reactor power change in one hour.

If yes, continue to step 17.

If no, BOP will be instructed to notify chemistry.

1-AP-21.00 SRO 17. NOTIFY THE FOLLOWING

• OMOC

• Maintenance Foreman.

RO/BOP Notifications made END EVENT #4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 46 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 47 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 4 Page 48 of 105 Event

Description:

Loss of Main Feed Pump 1-FW-P-1B with power < 80%. (AP-21.00)

Cue: By Examiner, after verifying with Booth that Feed Flow is > 2.5 x 106 lbm/hr.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 5 Page 49 of 105 Event

Description:

Pressurizer Pressure Master Pressure Controller Fails High (AP-53.00)

Cue: By Examiner.

Time Position Applicants Action or Behavior RO Diagnoses Failure based on the following indications:

• Master pressure controller output rising from approximately 35%.

• PRZR Spray Valves, 1-RC-PCV-1455A, and 1-RC-PCV-1455B opening.

• All Pressurizer Heater Banks energize.

• Annunciator 1C-B8, PRZR LO PRESS

• ~ 1 minute after event initiation, pressurizer pressure indicates 2133 psig.

RO Performs the Immediate Actions of AP-53.00

[1] Checks redundant indications of pressurizer pressure - NORMAL

[2] Places the Master Pressure Controller in MANUAL and lowers output to

~ 30%.

Critical Tasks (CT-3): Restore pressure to normal band prior to low pressure reactor trip at 1885 psig Announces completion of Immediate Actions of AP-53.00.

Step 1, 0-AP-53.00 SRO CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION - NORMAL.

RO Reports Redundant indications of Pressurizer pressure normal.

Step 2, 0-AP-53.00 SRO PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION RO Reports Master pressure Controller placed in manual and output set at 30%.

SRO Conducts brief using Brief Placard. RO Will report Critical parameters. BOP will report Critical Parameters. STA will state Nothing to add.

Step 3, 0-AP-53.00 SRO

• VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO Reports reactor power approximately 100% using PCS indication.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 5 Page 50 of 105 Event

Description:

Pressurizer Pressure Master Pressure Controller Fails High (AP-53.00)

Cue: By Examiner.

Step 4, 0-AP-53.00 SRO CAUTION: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

NOTES before Step 4

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 13.

Step 4, 0-AP-53.00, Continued SRO

• DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

RO

• PRZR Pressure Control, Step 5 Step 5, 0-AP-53.00 SRO NOTE: RCS pressure decrease will cause a slight decrease in RCS Tave due to negative reactivity from the moderator pressure coefficient.

SRO CHECK PRZR SPRAY VALVE CONTROLLERS - NORMAL RO Reports PRZR Spray Valve Controller Normal.

Step 6, 0-AP-53.00 SRO GO TO ( )-AP-31.00, INCREASING OR DECREASING RCS PRESSURE Transitions to 1-AP-31.00.

Step 1, 1-AP-31.00 SRO [1] CHECK PRZR PORVS - CLOSED RO Checks PRZR PORVs closed.

SRO SRO will hold a brief on entry to AP-31.00. SRO will direct RO to maintain RCS pressure at 2235 psig +/- band, and pressure to be monitored by RO at a specific frequency.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 5 Page 51 of 105 Event

Description:

Pressurizer Pressure Master Pressure Controller Fails High (AP-53.00)

Cue: By Examiner.

Step 2, 1-AP-31.00 SRO CAUTION: A Safety Injection may occur if the unit is not tripped prior to RCS pressure decreasing below 2100 psig.

CHECK RCS PRESSURE - DECREASING RO Reports Yes, RCS pressure initially lowering.

Step 3, 1-AP-31.00 SRO CHECK MASTER CONTROLLER RESPONSE - NORMAL.

RO Reports Master Pressure Controller Response NOT normal.

Step 3 RNO, 1-AP-31.00 SRO a) Place 1-RC-PC-1444J, PRZR PRESS MASTER CNTRL, in MANUAL.

RO Reports 1-RC-PC-1444J, PRZR PRESS MASTER CNTRL, is in MANUAL.

SRO b) Lower demand on PRZR PRESS MASTER CNTRL to raise RCS pressure.

RO Reports that demand has been lowered.

Step 4, 1-AP-31.00 SRO CHECK PRZR SPRAY VALVES - CLOSED.

RO Reports that PRZR SPRAY valves are closed.

Step 5, 1-AP-31.00 SRO CHECK ALL PRZR HEATERS - ENERGIZED.

RO Reports that all PRZR heaters are energized.

Step 6 Cautions & Notes, 1-AP-31.00 SRO CAUTION: Lowering RCS pressure will cause the OT T setpoint to lower.

NOTES:

• Attachment 1 may be referred to for a diagram of the pressure control system.

• RCS pressure lowering will cause a slight reduction in RCS Tave due to negative reactivity from the moderator pressure coefficient.

RO Acknowledges Cautions, and Notes.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 5 Page 52 of 105 Event

Description:

Pressurizer Pressure Master Pressure Controller Fails High (AP-53.00)

Cue: By Examiner.

Step 6, 1-AP-31.00 SRO CHECK RCS PRESSURE - STILL LOWERING.

RO Reports that No, RCS pressure is no longer lowering GOES TO STEP 10 Step 10, 1-AP-31.00 SRO CHECK RCS PRESSURE - STABILIZING AT OR TRENDING TO 2235 psig.

RO Reports, Yes RCS pressure is stabilizing at (trending to) 2235 psig.

Step 11, 1-AP-31.00 SRO GO TO STEP 17 Step 17, 1-AP-31.00 SRO CHECK MASTER CONTROLLER - IN MANUAL RO Reports, Yes, MASTER PRESSURE CONTROLLER IS IN MANUAL.

Step 18, 1-AP-31.00 SRO DECLARE 1-RC-PCV-1455C INOPERABLE.

Declares 1-RC-PCV-1455C is INOPERABLE.

Step 19, 1-AP-31.00 SRO CHECK PRZR PORVS - EITHER INOPERABLE.

• 1-RC-PCV-1455C

• 1-RC-PCV-1456 RO Reports, Yes, 1-RC-PCV-1455C is inoperable.

Step 20, 1-AP-31.00 SRO CLOSE BLOCK VALVE FOR INOPERABLE PORV RO

• 1-RC-MOV-1536 if 1-RC-PCV-1455C INOPERABLE.

• 1-RC-MOV-1535 if 1-RC-PCV-1456 INOPERABLE.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 5 Page 53 of 105 Event

Description:

Pressurizer Pressure Master Pressure Controller Fails High (AP-53.00)

Cue: By Examiner.

Step 21, 1-AP-31.00 SRO CHECK PRZR PORVS - EITHER INCAPABLE OF BEING MANUALLY CYCLED.

RO Reports NO, both PORVs are capable of being manually cycled.

Goes to RNO, THEN goes to Step 23 Step 23, 1-AP-31.00 SRO NOTIFY THE FOLLOWING:

• OMOC

• STA

• I&C Contacts the above named individuals Step 24, 1-AP-31.00 SRO REFER TO TECH SPECS:

• 3.1.A.5 - Not applicable for this event.

• 3.1.A.6. a, Relief Valves - With one or both PORVs inoperable but capable of being manually cycled, within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> either restore the PORV(s) to OPERABLE status or close the associated block valve(s) and maintain power to the associated block valve(s). Otherwise, be in at least HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce Reactor Coolant System average temperature to < 350°F within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />

• 3.1.C - Not applicable for this event.

• 3.12.F - This LCO is met if pressure > 2205 psig. During the lowering pressure transient, Pressurizer pressure more-than-likely lowered below the DNB limit of 2205 psig. Per TS 3.12.F.2, whenever any of the parameters in Tech Spec 3.12.F.1 has been exceeded (pressure < 2205 psig) then either restore the parameter to within its limit within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or reduce Thermal Power to < 5% within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

Step 25, 1-AP-31.00 SRO REVIEW APPLICABILITY:

• VPAP-2802

• EAL MATRIX SU6.1 STA The STA will report that he has reviewed these documents and discussed the results with the Shift Manager.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 5 Page 54 of 105 Event

Description:

Pressurizer Pressure Master Pressure Controller Fails High (AP-53.00)

Cue: By Examiner.

Step 26, 1-AP-31.00 SRO RESTORE PRESSURE CONTROL SYSTEM(S) TO NORMAL END EVENT 5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 55 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

Time Position Applicants Action or Behavior Team Diagnoses the failure with the following indications:

Alarms:

• RM-Q7 - CTMT PART ALERT/FAILURE

• RM-Q8 - CTMT GAS ALERT/FAILURE

• RM-R8 - CTMT GAS RM-RI-160 HIGH Indications:

• CTMT Sump Level increasing

• 1-DA-P-4A running continuously Unit 2 will perform RM ARPs, but will be unable to perform Auto Action verification.

1-AP-16.00 SRO Direct initiation of 1-AP-16.00, EXCESSIVE RCS LEAKAGE 1-AP-16.00 SRO Notes Prior to Step 1:

• If SI Accumulators are isolated, 1-AP-16.01, Shutdown LOCA, should be used for guidance.

• RCS average temperature has a direct impact on pressurizer level.

1-AP-16.00 RO [1] MAINTAIN PRZR LEVEL:

• Isolate Letdown

• Control Charging flow RO isolates Letdown by closing; 1-CH-LCV-1460A or 1-CH-LCV-1460B (expected to close both), or by closing the orfice isolation valves, 1-CH-HCV 1200A, B, and C. The RO will take manual control of 1-CH-FCV-1122 to stabilize Pzr. level.

1-AP-16.00 RO 2. CHECK THE FOLLOWING PARAMETERS - STABLE OR INCREASING

• PRZR Level

• PRZR Pressure

• RCS Subcooling Identifies that not all parameters are stable under the control of the operator. Team should identify RCS leak rate greater than 150 gpm.

Team goes to 1-E-0.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 56 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

SRO GO TO 1-E-0, REACTOR TRIP OR SAFETY INJECTION SRO Directs RO to trip the reactor, perform E-0, and Manually Safety Inject on Step 4.

1-E Reactor Trip or Safety Injection RO [1] CHECK REACTOR TRIP:

a) Manually trip reactor Pushes the reactor trip push buttons.

b) Check the following:

• All Rods On Bottom light - LIT

• Reactor trip and bypass breakers - OPEN

• Neutron flux - DECREASING 1-E-0 RO [2] CHECK TURBINE TRIP:

a) Manually trip the turbine RO Pushes the turbine trip push buttons.

b) Verify all turbine stop valves - CLOSED c) Isolate reheaters by closing MSR steam supply SOV

• 1-MS-SOV-104 d) Verify generator output breakers - OPEN (Time Delayed)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 57 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-0 RO [3] CHECK BOTH AC EMERGENCY BUSES - ENERGIZED RO confirms that both AC emergency buses are energized.

1-E-0

[4] CHECK IF SI INITIATED:

RO a) Check if SI is actuated:

• LHSI pumps - RUNNING

• SI annunciators - LIT

• A-F-3 SI INITIATED - TRAIN A

• A-F-4 SI INITIATED - TRAIN B RO 4b) Manually initiate SI The RO will manually initiate SI at step 4 by pushing both SI pushbuttons.

After the immediate actions of 1-E-0 are reported as complete, the SRO will check off immediate action steps in his copy of 1-E-0. After the immediate actions are verified, the SRO will conduct a commensurate brief by polling the Team to determine whether a higher priority exists other than establishing SI flow. The SRO will close the brief and continue.

RO should identify that there is NO SI flow to the core.

The STA will have no input for the brief.

1-E-0 SRO/BOP 5. Initiate Attachment 1.

Note: SRO will hand Attachment 2 to the RO, and Attachments 1 and 3 to the BOP.

Evaluator Note: E-0 Attachments 2, and 7 are at the end of this section. Attachments 1, 3, and 4 are in Section 8 (BOP).

Critical Task CT-4: The crew must restore HHSI flow to the core by manually opening 1-SI-MOV-1867C OR 1-SI-MOV-1867D prior to the RCS fully depressurizing or prior to exiting E-0.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 58 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

SRO/RO NOTE: SRO may direct the RO to perform Attachment 7 of 1-E-0 for Transient AFW Control following completion of Attachment 2 of 1-E-0, or opt to throttle AFW as part of E-0, Step 6.

1-E-0 SRO *6. CHECK RCS AVERAGE TEMPERATURE

• STABLE AT 547°F OR

• TRENDING TO 547°F RO The team will identify that RCS temperature is decreasing. The team should attribute this to the injection of SI into the RCS and AFW flow to the SGs. It is acceptable for the team to enter the RNO portion of this step and perform the applicable steps (summarized below):

Stop dumping steam Reduce AFW flow to the SGs Close MSTVs if cooldown continues 1-E-0 SRO 7. CHECK PRZR PORVs AND SPRAY VALVES:

RO a) PRZR PORVs - CLOSED b) PRZR spray controls

• Demand at Zero (or)

• Controlling Pressure c) PORV block valves - AT LEAST ONE OPEN

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 59 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-0 SRO NOTE: Seal injection flow should be maintained to all RCPs.

RO *8. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS Two or three Charging pumps will be running and flowing to the RCS.

b) RCS subcooling - LESS THAN 30°F [85°F]

RCS subcooling may or may not be less than 30 °F at this time.

RNO for the step is to go to step 9.

NOTE: If RCP trip Criteria are met prior to reaching this Step, the Continuous Actions Page (CAP) contains these criteria. After this Step is read, this step or the CAP can be used for criteria as long as the Team is performing E-0. CAP pages are at the end of this section 1-E-0 RO 9. CHECK IF SGs ARE NOT FAULTED:

• Check pressures in all SGs a) STABLE OR INCREASING AND b) GREATER THAN 100 PSIG RO will observe a slightly decreasing trend on SG pressures. This will be attributed to the RCS cooldown. The team will not transition to 1-E-2.

1-E-0 SRO 10. CHECK IF SG TUBES ARE NOT RUPTURED:

Unit 2

• Condenser air ejector radiation - NORMAL Unit 2

• SG blowdown radiation - NORMAL

• SG MS radiation - NORMAL

• TD AFW pump exhaust radiation - NORMAL

• SG NR Level - NOT INCREASING IN AN UNCONTROLLED MANNER RO RO will use PCS indication for MS and TDAFW Exhaust radiation.

Unit 2 will be used to report Condenser A/E and SG Blowdown radiation trend.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 60 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-0 SRO 11 CHECK RCS - INTACT INSIDE CTMT

• CTMT radiation - NORMAL

• CTMT pressure - NORMAL

• CTMT RS sump level - NORMAL RO Identify CTMT conditions as abnormal SRO GO TO 1-E-1, LOSS OF REACTOR OR SECONDARY COOLANT.

1-E-1 SRO Conducts a Brief summarizing the Event and Establish priorities.

RO RO/BOP will provide Critical Parameters The STA will have no input for the brief.

The SRO will complete the Brief and continue with E-1.

1-E-1 SRO 1. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA.

a) Charging pumps - At LEAST ONE RUNNING AND FLOWING TO RCS.

b) RCS subcooling - LESS THAN 30oF [85oF]

c) STOP ALL RCPs.

RO Responds that all 3 charging pumps are running and flowing to the RCS. Subcooling is less than 30oF. Stops all RCPs. (Note: This may already have been completed by E-0 CAP)

SRO d) RCS pressure - LESS THAN 1275 psig [1475 psig]

e) CLOSE CHG pump miniflow recirc valves.

RO Responds that RCS pressure is less than 1275 psig. Closes CHG pump mini flow valves 1-CH-MOV-1275A, 1275B, and 1275C. Note: This may have already been performed by E-0 CAP.

1-E-1 SRO 2. CHECK IF SGs ARE NOT FAULTED.

CHECK pressures in all SGs:

• STABLE OR RISING RO Responds Yes, SGs are not faulted

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 61 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-1 SRO 3. CHECK INTACT SG LEVELS.

a) Narrow Range level - GREATER THAN 12% [18%].

b) Check emergency busses - BOTH ENERGIZED.

c) Control feed flow to maintain narrow range level between 22% and 50%.

RO Responds All SGs are intact.

1-E-1 SRO 4. CHECK IF SG TUBES ARE NOT RUPTURED:

• Condenser air ejector radiation - NORMAL. U2 responds NORMAL.

• SG blowdown radiation - NORMAL. U2 responds NORMAL.

• SG main steam radiation - NORMAL. RO responds NORMAL.

• TD AFW pump exhaust radiation - NORMAL. RO responds NORMAL

• SG NR Level - NOT RISING IN AN UNCONTROLLED MANNER.

RO/U2 RO responds SG TUBES ARE NOT RUPTURED.

1-E-1 SRO CAUTION: If any PRZR PORV opens because of high PRZR pressure, the PORV must be verified closed or isolated after pressure lowers to less than 2335 psig.

5. CHECK PRZR PORVs AND BLOCK VALVES:

a) Power to PRZR PORV block valves AVAILABLE RO Yes, Power is available to PRZR PORV block valves.

SRO b) PRZR PORVs - CLOSED RO Yes, PRZR PORVs are CLOSED.

SRO c) PRZR PORV block valves - AT LEAST ONE OPEN RO Yes, one PORV block valve is OPEN.

1-E-1 SRO *6. CHECK IF SI FLOW SHOULD BE REDUCED:

a) RCS subcooling based on CETCs - GREATER THAN 30oF [85oF]

RO Responds No subcooling is less than 30oF [85oF].

Goes to Step 7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 62 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-1 SRO *7. CHECK IF HI HI CLS INITIATED:

• CS pump(s) - RUNNING OR

• Any Hi Hi CLS annunciator - LIT RO Responds, Yes HI HI CLS is INITIATED.

1-E-1 SRO 8. CHECK SERVICE WATER AVAILABLE:

a) Check Intake Canal level - BEING MAINTAINED BY CW PUMPS RO Responds, Yes Intake Canal is being maintained by CW pumps.

Goes to step 12 1-E-1 SRO 12. CHECK IF CS PUMPS CAN BE STOPPED a) Check the following:

• RWST level - LESS THAN 3% AND

• CS Pump amps - FLUCTUATING RO Responds No, RWST level is NOT less than 3%. Step 12 RNO; Perform steps 12b through 12f when these conditions are met.

Goes to step 14.

1-E-1 SRO CAUTION: RCS pressure should be monitored. If RCS pressure lowers in an uncontrolled manner to less than 250 psig [400 psig], one LHSI pump must be manually restarted to supply water to the RCS

14. CHECK IF LHSI PUMPS SHOULD BE STOPPED:

a) Check RCS pressure:

1) Pressure - GREATER THAN 250 PSIG [400 PSIG]

2) Pressure - STABLE OR RISING RO Responds No pressure is not greater than 400 psig Goes to step 16.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 63 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-1 SRO 16. CHECK IF EDGs CAN BE STOPPED:

a) Check AC emergency buses - ENERGIZED BY OFFSITE POWER b) Reset both trains of SI if necessary.

RO Responds, AC emergency buses are energized by OFFSITE Power. SI has been reset (resets SI if it hasnt been reset).

c) Check CTMT pressure - LESS THAN 14 PSIA Responds, CTMT pressure is NOT less than 14 PSIA.

Goes to step 17.

1-E-1 SRO 17. CHECK INSTRUMENT AIR AVAILABLE a) Check annunciator B-E NOT LIT b) Check at least one CTMT IA compressor RUNNING

• 1-IA-C-4A or 1-IA-C-4B c) Check 1-IA-TV-100 - OPEN Responds, annunciator B-E-6 is NOT LIT. 1-IA-C-4A is running. 1-IA-TV-100 is CLOSED due to HI HI CLS.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 64 of 105 Event

Description:

Large Break LOCA (AP-16.00, E-0, E-0 Attachment 2 and 7, E-1)

Cue: By Examiner.

1-E-1 SRO 18. INITIATE EVALUATION OF PLANT STATUS:

a) Check at least one train of cold leg recirculation capability:

1) Train A - AVAILABLE

• 1-SI-P-1A

• 1-SI-MOV-1863A

• 1-SI-1885 A and D

• 1-SI-MOV-1860A

• 1-SI-MOV-1862A

• 1-CH-MOV-1115 B and D

• 1-CH-MOV-1115C or E Responds, Train A is not available due to 1-SI-P-1A tagged out RO

2) Train B - AVAILABLE SRO

• 1-SI-P-1B RO Responds, Train B is not available due to 1-SI-P-1B overcurrent trip.

SRO Goes to 1-ECA-1.1, LOSS OF EMERGENCY COOLANT RECIRCULATION End EVENT #6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 65 of 105 Event

Description:

Large Break LOCA. E-0 ATTACHMENT 2 Cue: By Examiner.

Time Position Applicants Action or Behavior ATTACHMENT 2 of 1-E-0 NOTE: Components previously aligned by SI termination steps, must not be realigned by this Attachment.

ATTACHMENT 2 of 1-E-0 RO 1. Check opened or open CHG pump suction from RWST MOVs.

• 1-CH-MOV-1115B

• 1-CH-MOV-1115D ATTACHMENT 2 of 1-E-0 RO 2. Check closed or close CHG pump suction from VCT MOVs.

• 1-CH-MOV-1115C

• 1-CH-MOV-1115E ATTACHMENT 2 of 1-E-0 RO 3. Check running or start at least two CHG pumps. (listed in preferred order)

• 1-CH-P-1C

• 1-CH-P-1B ATTACHMENT 2 of 1-E-0 RO 4. Check opened or open HHSI to cold legs MOVs.

• 1-SI-MOV-1867C

• 1-SI-MOV-1867D Opens 1-SI-1867C, and 1-SI-1867D.

Critical Task CT-4: Restore HHSI flow to the core by manually opening 1-SI-MOV-1867C OR 1-SI-MOV-1867D prior to the RCS fully depressurizing or prior to exiting E-0.

ATTACHMENT 2 of 1-E-0 RO 5. Check closed or close CHG line isolation MOVs.

• 1-CH-MOV-1289A

• 1-CH-MOV-1289B

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 66 of 105 Event

Description:

Large Break LOCA. E-0 ATTACHMENT 2 Cue: By Examiner.

ATTACHMENT 2 of 1-E-0 RO 6. Check closed or close Letdown orifice isolation valves.

• 1-CH-HCV-1200A

• 1-CH-HCV-1200B

• 1-CH-HCV-1200C ATTACHMENT 2 of 1-E-0 RO 7. Check opened or open LHSI suction from RWST MOVs.

• 1-SI-MOV-1862A

• 1-SI-MOV-1862B ATTACHMENT 2 of 1-E-0 RO 8. Check opened or open LHSI to cold legs MOVs.

• 1-SI-MOV-1864A

• 1-SI-MOV-1864B ATTACHMENT 2 of 1-E-0 RO 9. Check running or start at least one LHSI pump.

• 1-SI-P-1A

• 1-SI-P-1B Note: 1-SI-P-1B will trip 5 minutes after SI. 1-SI-P-1B may or may not be running. If it has tripped then annunciator 1A-H4, LHSI PP 1B LOCKOUT OR OL TRIP will be lit and the operator should not attempt to start 1-SI-P-1B.

ATTACHMENT 2 of 1-E-0 RO 10. Check High Head SI flow to cold legs indicated.

• 1-SI-FI-1961

• 1-SI-FI-1962

• 1-SI-FI-1963

• 1-SI-FI-1943 or 1-SI-FI-1943A

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 67 of 105 Event

Description:

Large Break LOCA. E-0 ATTACHMENT 7 Cue: By Examiner.

Time Position Applicants Action or Behavior ATTACHMENT 7 of 1-E-0 RO 1. Check SI is in progress. IF SI NOT in progress, THEN RETURN TO procedure step in effect.

Identifies SI in progress, GOES TO STEP 2.

ATTACHMENT 7 of 1-E-0 RO 2. Check running or start AFW Pumps, as necessary.

1-FW-P-3A 1-FW-P-3B 1-FW-P-2 Identifies AFW PUMPs Running.

ATTACHMENT 7 of 1-E-0 RO 3. Maintain at least 350 gpm [450 gpm] AFW flow until one SG Narrow Range Level is greater than 12% [18%].

Confers with SRO to determine AFW flow requirement.

Throttles AFW Flow to achieve ~120 gpm per SG.

ATTACHMENT 7 of 1-E-0 RO NOTE: AFW to idle loop(s) (RCP secured), should be throttled to prevent depressurization of the SG and subsequent Header / Line SI. AFW flow between approximately 60 gpm and 100 gpm should be adequate to prevent a Header / Line SI.

Acknowledges NOTE.

4. When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50% by throttling AFW Isolation MOVs:

SG A, 1-FW-MOV-151E and 1-FW-MOV-151F SG B, 1-FW-MOV-151C and 1-FW-MOV-151D SG C, 1-FW-MOV-151A and 1-FW-MOV-151B Checks SG NR level rising and continues to Step 5.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 6 Page 68 of 105 Event

Description:

Large Break LOCA. E-0 ATTACHMENT 7 Cue: By Examiner.

ATTACHMENT 7 of 1-E-0 RO 5. Isolate AFW header with deenergized Emergency Bus MOVs by closing the following header isolation valves:

Emergency Bus H deenergized: 1-FW-141, 1-FW-156, 1-FW-171 Emergency Bus J deenergized: 1-FW-140, 1-FW-155, 1-FW-170 Identifies Both Emergency Buses energized, returns Attachment 7 to SRO.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 7 Page 69 of 105 Event

Description:

LOSS OF LHSI (ECA-1.1, ATTACHMENT 1)

Cue: Pre-Event Failures.

Time Position Applicants Action or Behavior 1-ECA-1.1 SRO Conducts a Brief summarizing the Event and Establish priorities.

RO RO/BOP will provide Critical Parameters The STA will have no input for the brief.

The SRO will complete the Brief and continue with ECA-1.1.

1-ECA-1.1 SRO CAUTION:

• If emergency coolant recirculation capability is restored, return to the procedure and step in effect.

• If suction source is lost to any SI or spray pump, the pump should be stopped.

NOTES:

• Attachment 1 provides a graph of the minimum amount of RCS makeup flow required to remove decay heat. (Attachment 1 located at the end of this section)

• If procedure has been entered due to CTMT sump blockage, FRs should NOT be implemented until directed.

• The minimum containment sump level for manual restart of LHSI is 6.0 ft.

SRO refers to Attachment 1 to determine amount of SI flow required. Determines that >

250 gpm needed to provide adequate heat removal.

1. CHECK EMERGENCYT COOLANT RECIRCULATION EQUIPMENT -

AVAILABLE a) Check the following pumps - AVAILABLE:

• 1-SI-P-1A AND

• 1-CH-P-1A, B, or C RO Responds, No 1-SI-P-1A is NOT AVAILABLE.

Goes to step 2.

1-ECA-1.1 SRO 2. TRY TO RESTORE THE REDUNDANT FLOW PATH FROM THE CTMT SUMP TO THE RCS

a. Check the following pumps - AVAILABLE

• 1-SI-P-1B AND

• 1-CH-P-2A, B, or C RO Responds, No 1-SI-P-1B is NOT AVAILABLE Goes to Step 3.

1-ECA-1.1 SRO 3. RESET BOTH TRAINS OF SI

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 7 Page 70 of 105 Event

Description:

LOSS OF LHSI (ECA-1.1, ATTACHMENT 1)

Cue: Pre-Event Failures.

RO Resets both trains of SI or announces that all trains of SI have been reset.

1-ECA-1.1 SRO 4. PUT RMT MODE TRANSFER SWITCHES IN THE REFUEL MODE.

RO Places both RMT MODE TRANSFER switches in the REFUEL MODE.

1-ECA-1.1 SRO 5. CHECK RWST LEVEL - GREATER THAN 6%.

RO Responds, RWST level is greater than 6%.

1-ECA-1.1 SRO 6. ESTABLISH ONE TRAIN OF SI FLOW:

a. Check CHG pumps - ONLY ONE RUNNING.

RO Responds, two CHG pumps (B, C) are running.

SRO 6a RNO) IF CTMT Sump blockage has NOT occurred, THEN start or stop CHG pumps to establish only one pump running.

RO Secures either B or C CHG pumps.

SRO b) Place non-running CHG pumps in PTL RO Places CHG pump in PTL.

SR0 c) RCS pressure - LESS THAN 250 PSIG [400 PSIG]

d) Check LHSI pumps - ONLY ONE RUNNING.

RO Responds No, there are no LHSI pumps running.

e) Implement FRs as necessary.

SRO f) GO TO Step 8

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 7 Page 71 of 105 Event

Description:

LOSS OF LHSI (ECA-1.1, ATTACHMENT 1)

Cue: Pre-Event Failures.

1-ECA-1.1 SRO CAUTION: Operation of an OSRS pump without the associated CS pump could cause cavitation as indicated by fluctuating amperage.

NOTE: If CLS can NOT be reset, local breaker operation will be required to stop CS and ISRS pumps.

8. CHECK RECIRCULATION SPRAY SYSTEM.

a) Check for EITHER of the following:

• Any CS pump - RUNNING OR REQUIRED OR

• RWST level - LESS THAN 20%

RO Responds, Yes the A CS pump is running.

SRO b) Check CTMT sump level - GREATER THAN 4.0 ft.

c) Check SW aligned to at least two RS HXs.

d) Start RS pumps associated with aligned RS HXs RO Starts two RS pumps as directed by SRO.

1-ECA-1.1 SRO 9. DETERMINE CS REQUIREMENTS.

a) Determine number of CS pumps required.

b) CS pumps running - EQUAL TO NUMBER REQUIRED.

RO Closes 1-CS-MOV-101C and 1-CS-MOV-101D.

Note: Will not be able to close MOVs until CLS is reset (CTMT press , 14 psia) 1-ECA-1.1 SRO 10. MAKE UP TO RWST USING 1-OP-CS-004, REFUELING WATER STORAGE TANK MAKEUP, WHILE CONTINUING WITH THIS PROCEDURE.

RO End of Event 7

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 7 Page 72 of 105 Event

Description:

LOSS OF LHSI (ECA-1.1, ATTACHMENT 1)

Cue: Pre-Event Failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 73 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 1 Cue: Pre Event failures.

Time Position Applicants Action or Behavior Attachment 1 of E-0 BOP 1 CHECK FW ISOLATION:

• Feed pump discharge MOVs - CLOSED

• 1-FW-MOV-150A

• 1-FW-MOV-150B Closes 1-FWMOV-150B

• MFW pumps - TRIPPED

• Feed REG valves - CLOSED

• SG FW bypass flow valves - DEMAND AT ZERO

• SG blowdown TVs - CLOSED Attachment 1 of E-0 BOP 2 CHECK CTMT ISOLATION PHASE I:

• Phase I TVs - CLOSED (Closes 1-BD-TV-100C)

• 1-CH-MOV-1381 - CLOSED

• 1-SV-TV-102A - CLOSED

• PAM isolation valves - CLOSED

• 1-DA-TV-103A

• 1-DA-TV-103B Attachment 1 of E-0 BOP 3 CHECK AFW PUMPS RUNNING:

a) MD AFW pumps - RUNNING (Time Delayed)

Starts 1-FW-P-3A b) TD AFW pump - RUNNING IF NECESSARY

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 74 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 1 Cue: Pre Event failures.

Attachment 1 of E-0 BOP 4. CHECK SI PUMPS RUNNING:

• CHG pumps -RUNNING

• LHSI pumps - RUNNING Attachment 1 of E-0 BOP 5. CHECK CHG PUMP AUXILIARIES:

• CHG pump CC pump - RUNNING

• CHG pump SW pump - RUNNING Attachment 1 of E-0 BOP 6. CHECK INTAKE CANAL:

• Level - GREATER THAN 24 FT

• Level - BEING MAINTAINED BY CIRC WATER PUMPS Attachment 1 of E-0 BOP 7. CHECK IF MAIN STEAMLINES SHOULD BE ISOLATED:

a) Check if ANY of the following annunciators - HAVE BEEN LIT

• E-F-10 (High Steam Flow SI)

• B-C-4 (Hi Hi CLS Train A)

• B-C-5 (Hi Hi CLS Train B) b) Check MSTV - CLOSED c) Check either of the following - ACTUATED

• Hi steam flow SI OR

• Header to Line SI Identifies annunciators BC-4, BC-5 lit and goes to step 8.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 75 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 1 Cue: Pre Event failures.

Attachment 1 of E-0 BOP *8. CHECK IF CS REQUIRED:

a) CTMT pressure - HAS EXCEEDED 23 PSIA b) Manually initiate HI HI CLS c) Trip all RCPs d) Check CS pumps - RUNNING e) Initiate Attachment 4 Identifies pressure has exceeded 23 psia and goes to Attachment 4.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 76 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 4 Cue: Pre Event failures.

Valves Operated for Hi CLS Failure.

Valves Operated for Hi Hi CLS Failure.

Valve BOP/SRO may confer and leave open.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 77 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 4 Cue: Pre Event failures.

Critical Task CT-5: Open 1-CS-MOV-101A OR 1-CS-MOV-101B prior to Recirc Spray pump start (60% in RWST)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 78 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 3 Cue: Pre Event failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 79 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 3 Cue: Pre Event failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 80 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 3 Cue: Pre Event failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 81 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 3 Cue: Pre Event failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 82 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 3 Cue: Pre Event failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Event No.: 8 Page 83 of 105 Event

Description:

BOP FAILURES. E-0 ATTACHMENTS 3 Cue: Pre Event failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2015-301 Scenario No.: 1 Event No.: 9 Page 84 of 105 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2015-301 Scenario No.: 1 Event No.: 9 Page 85 of 105 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2015-301 Scenario No.: 1 Event No.: 9 Page 86 of 105 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 87 of 105 SIMULATOR OPERATORS GUIDE Simulator Scenario Checklist Perform Simulator Turnover Pre-session, and Post-session Checklist prior to the first Scenario of the day.

Perform Simulator Turnover Post-session Checklist after the last Scenario of the day.

Perform/Verify Simulator Setup:

Recall IC -392 (65%) and verify Trigger #30 implemented.

OR Recall Base IC (IC10), Open Schedule, and Event Files for Scenario 2. Run Schedule file, and implement Trigger 30.

Verify 1-SI-P-1A in Pull-To-Lock, with red (tagged) magnet Verify S/G A FW FLOW CH SEL to CH 477 (BLUE)

Open the Monitor window and add the following points to it:

asp_ao_off Enter/Verify the following MALFUNCTIONS:

Trigger Malfunction Delay Ramp Trigger Value Final Type (Auto or Manual)

CH28 CHG LINE FLOW 5 0 1 1 2 MANUAL CONTROLLER FC-1122A FAILS FW1801 A S/G MN FD FLOW 10 5:00 3 0 -1 MANUAL SMTR FT-1477 FAILS FW2703 MAIN FW PUMP FW-P- 10 0 5 FALSE TRUE MANUAL 1B OVERCURRENT TRIP RC1501 PRZR PRESS 10 5:00 7 0 1 MANUAL CONTROLLER FAILURE (1-RC-PC-1444J)

RC0101 RCS COLD LEG A PIPE 10 20:00 9 0 10 MANUAL RUPTURE CS0802 CS-P-1B BKR 14J5 10:00 0 11 FALSE TRUE AUTO OVERCURRENT TRIP SI0902 LHSI PUMP SI-P-1B 5:00 0 13 FALSE TRUE AUTO OVERCURRENT TRIP SI34 DISABLE SI-MOV-8967C 0 0 30 FALSE TRUE MANUAL AUTO OPEN SI35 DISABLE SI-MOV-8967D 0 0 30 FALSE TRUE MANUAL AUTO OPEN CS12 DISABLE CSMOV101A 0 0 30 FALSE TRUE MANUAL AUTO OPEN CS13 DISABLE CSMOV101B 0 0 30 FALSE TRUE MANUAL AUTO OPEN FW48 DISABLE AFWP3A AUTO 0 0 30 FALSE TRUE MANUAL START FW5502 FW-MOV-150B AUTO 0 0 30 FALSE TRUE MANUAL CLOSE DISABLE

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 88 of 105 SIMULATOR OPERATORS GUIDE BD03 DISABLE BDTV100C AUTO 0 0 30 FALSE TRUE MANUAL CLOSURE SW03 DISABLE SW-MOV-104A 0 0 30 FALSE TRUE MANUAL AUTO OPEN SW1303 DISABLE SW-P-5C AUTO 0 0 30 FALSE TRUE MANUAL START FP0301 FPS FACP07 ALARM 0 0 30 FALSE TRUE MANUAL HORN FAILURE FP0302 FPS PC SPEAKER 0 0 30 FALSE TRUE MANUAL FAILURE Enter/Verify the following REMOTE FUNCTIONS:

Trigger Description Delay Ramp Trigger Value Final Type (Auto or Manual)

SIP1A_BKRPOS SIP-1A BKR 14H3 0 0 30 RACK MANUAL CUBICLE POSITION OPEN Enter/Verify the following EVENT TRIGGERS:

Trigger# EVENT Command 11 CSP1B_run Sets Trigger 11 13 SIP1B_RUN Sets Trigger 13 TRIGGER TYPE DESCRIPTION 1 MAN Fails Pressurizer Pressure Master Pressure Controller High 3 MAN Fails A S/G Feed Flow Transmitter FT-1477 Low 5 MAN Fails CHG Flow Controller FC-1122A High 7 MAN Trips 1-FW-P-1B on overcurrent 9 MAN Ruptures RCS Cold Leg A

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 89 of 105 SIMULATOR OPERATORS GUIDE 11 AUTO Sets Trigger 11 after 1-CS-P-1B starts 13 AUTO Sets Trigger 13 after SI initiates

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 90 of 105 SIMULATOR OPERATORS GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components: 1-SI-P-1A Verify All pink magnets collected from previous scenarios.

Verify vertical board PCS monitor on ALARM SCREEN.

Reset ICCMs.

Verify all calcalc points are displayed on PCS: U9103, U9104, U9105V.

Verify Component Switch Flags; 1-VS-F-58A and 1-VS-F-58B switches (AUTO AFTER STOP).

Verify Brass Caps properly placed (Hi-Hi CLS, MSTVs, CH-MOV-1350, CW and SW MOVs, CTMT Hogger suction, CNDSR Vacuum breaker).

Radiation Monitors all clear.

Verify SG PORVs set for 1035 psig.

Verify D bank rod height at 190 steps and Bank Overlap Counter at 574.

Advance Charts.

Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset).

Verify SYNC keys in proper place.

Verify MOL reactivity plans and benchboard Reactivity Placard is current.

Reset Blender Integrators for Boric Acid to 100 and PG to 1000.

Verify stopwatches for RO and BOP.

Verify Simulator Session In Progress light is turned ON.

Verify no persons are logged onto network computer to ensure no procedures displayed.

Verify PCS time matches Sim time.

Spot check all ARPs are clean, verify the following ARPs are clean.

1B-A3 1C-B8 1C-D8 1D-E5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 91 of 105 SIMULATOR OPERATORS GUIDE 1F-C7 1H-E5 1H-E6 1H-E7 1H-G5 1H-G6 1H-G7 1H-H8 1RM-Q7 1RM-Q8 1RM-R8 Verify CLEAN copies of the following procedures are in place.

1-OP-TM-005 0-AP-53.00 (3) 1-AP-16.00 1-AP-21.00 1-AP-31.00 1-E-0 1-E-1 1-ECA-1.1 1-OP-ZZ-002 1-OPT-RX-001 1-OP-CH-007 1-OP-CH-021 1-OP-TM-005 (marked up)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 92 of 105 SIMULATOR OPERATORS GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

TEAM 1 TEAM 2 TEAM 3 SRO RO BOP Ask for and answer questions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 93 of 105 SIMULATOR OPERATORS GUIDE Conduct shift turnover:

The initial conditions have Unit 1 at 65% power with RCS boron concentration of 795 ppm.

Unit conditions have been stable at approximately 65% power. The B Main Feed Pump 1-FW-P-1B was just started following pump bearing replacement.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra RO will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect.

Return to service expected later this shift.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to raise power on Unit #1 to 75% and hold at that power level for further Feed Pump testing.

The last shift performed one 30 gallon dilution followed by a manual makeup for training.

When the team has accepted the shift, proceed to the Session Conduct Section.

Op-Test No.: Surry 2017-301 Scenario No.: 1 Page 94 of 105 SIMULATOR TURNOVER CHECKLIST Pre Session Checks:

Safety Injection Section (Magnets) CW/SW Section RCS Section CVCS SI-MOV-1865A R G Brass Caps Tcold Loop Stop Pos (R - O)

Core Life Plaque R G SW MOVs A BC Ramp Plan Book SI-MOV-1865B 103A 103B 103C 103D Loop Bypass Valves (G - C)

SI-MOV-1865C R G A B C OP-RX-010 Book CW MOVs SI-MOV-1869A R G Thot Loop Stop Pos (R - O) PG Int Set 1000 106A 106B 106C 106D A BC SI-MOV-1869B R G BA Int Set 100 SI-MOV-1890A R G T/O CW Inlet Throttle Plaques (10%)

100A 100B 100C 100D SFP PPs Pwr Norm Alt Tavg/Tref Rec.

SI-MOV-1890B R G T/O PZR Level Recorder NI-NR-B SI-MOV-1890C R G T/O Brass Cap CLS TR A CLS TR B CTMT Hogger Suction Cap Group Step Ctrs CERPIs CH-MOV-1350 Main Steam/Feedwater Electrical/VSP PCS RM/WD/BR SG PORVs Set Synch Key PCS Main Screen RM-112 A BC MSTV Caps A BC SVB Power H J U9103 RM-113 A B C SF/FF Rec Scale LO System Switches U9104 Comm RM Pwr 1J 2J Cond Vac Bkr Cap VS-F-58A Pwr H J Grn Flag U9105V Synch Key VS-F-58B Pwr H J Grn Flag Alarm Screen (List)

Post Session Checks:

PCS Screens (Cleared/Display) RO BOP SM STA PCs Logged OFF (including Booth) Phone cleared Recall IC-1 Advance Charts Procedures Changed Red Light Binders Stored Trash Picked Up/Emptied Vacuum Reqd?

Pink Magnets in Drawer BB and VB Scenario Magnets removed E-Mail to SSG Required DVD Finalized EAL Charts Note Pads Manning Sheets Sticky Tabs (SRO/SM/ARPs) Markers (ARPs) Personnel/Comms Tracking Sheets (Booth)

Floor timers reset/In place Booth timers reset/In place Printers ready/have paper

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 95 of 105 SIMULATOR OPERATORS GUIDE Session Conduct:

• Ensure conditions in Simulator Set-up are established.

EVENT 1 Unit Ramp to 75% per 1-OP-TM-001 BOOTH:

30 minutes prior to the beginning of the scenario, provide the team with a marked up copy of 1-OP-TM-001, 1-OP-CH-021, and a Reactivity plan. The team will pre-brief the procedure for ramping the unit prior to entering the simulator Operations Supervisor/Management:

• If contacted, acknowledge start of Ramp to 75%.

• If asked: I&C is standing by to adjust IRPIs as necessary.

I&C:

• If contacted: Standing by to adjust IRPIs as necessary.

System Operator/MOC If contacted: acknowledge Surry Unit 1 starting ramp to 75% at normal rate Field Operators: (2 minute delay from request to answer)

• If contacted as Unit 1 Turbine Building: monitoring Lube oil temperatures during ramp.

• If contacted as Polishing Building Operator: There are 6 Beds in service; D/P ~22 psig.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 96 of 105 SIMULATOR OPERATORS GUIDE EVENT 2 Charging Line Flow Controller Fails High.

When cued by examiner, implement Trigger #5.

Operations Supervisor/Management:

• If contacted, will acknowledge the malfunction of the Charging Line Flow Controller and entry into AP-53.00.

• If contacted, will take responsibility for writing the CR.

• If contacted, acknowledge that EPIPs and VPAP-2802 are required to be reviewed.

STA:

• If contacted, will acknowledge the malfunction of the Charging Line Flow Controller and entry into AP-53.00. The individual(s) contacted will also acknowledge any TS LCOs. The STA will not confirm or deny any TS decisions.

• If contacted, will take responsibility for writing the CR.

• If contacted, reports to SRO that EPIPs, and VPAP-2802, have been reviewed and discussed with the Shift Manager.

• If the team has a transient brief: The STA will state that he has nothing to add.

Field Operators:

• If dispatched to look at 1-FCV-1122, report no abnormalities noted.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the malfunction of the Charging Line Flow Controller and commence investigation of the failure.

Unit 2 Operator:

If contacted, will acknowledge the failure of the Charging Line Flow Controller.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 97 of 105 SIMULATOR OPERATORS GUIDE EVENT 3 A SG Feed Flow XMTR (Ch3) Fails low.

When cued by examiner, (prior to step 11 of AP-53.00 from Event 2), implement Trigger #3.

BOOTH NOTE: Critical Task: (CT-1): Restore Feedwater to normal and restore S/G level to normal prior to S/G High level trip at 75% NR.

Operations Supervisor/Management:

• If contacted, acknowledge feed flow channel failure. The individual(s) contacted will also acknowledge any TS LCOs.

• If contacted, will take responsibility for writing the CR.

• If contacted, will acknowledge entry into AP-53.00.

• If contacted, will recommend to the team that channels remain as they are for now (i.e.,

do not perform 1-OP-RP-001 at this time).

STA:

• If contacted, will acknowledge feed flow channel failure. The individual(s) contacted will also acknowledge any TS LCOs. The STA will not confirm or deny any TS decisions.

• If contacted, will take responsibility for writing the CR.

• IF contacted: regarding Regulatory procedure review. Acknowledge request. If asked for status, report that all reviews have been completed and discussed with the Shift Manager.

• If the team has a transient brief: The STA will state nothing to add.

Field Operators:

• Will perform actions as directed.

• If asked to walkdown LP Heater Drain pump, report no abnormalities noted.

Maintenance/ Work Week Coordinator:

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 98 of 105 SIMULATOR OPERATORS GUIDE

• If contacted, will acknowledge the feed flow channel failure and contact I&C to commence preparation to place the failed channel in trip.

Maintenance/ Work Week Coordinator:

• If contacted, will the dropped rod and commence investigations into the reason the rod dropped into the core.

• If contacted, will acknowledge the impending ramp.

Unit 2:

• If contacted, will acknowledge the failure of the feed flow channel.

• If contacted to perform 1-OP-RP-009, respond there is no one available at this time.

Role-play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 99 of 105 SIMULATOR OPERATORS GUIDE EVENT 4 Loss of Main Feed Pump 1-FW-P-1B with power < 80%.

When cued by examiner, implement Trigger #7.

Critical Task CT-2: Start an additional Condensate pump, and lower power prior to S/G low level reactor trip at 17% NR.

Booth Notes: Monitor Feed Flow during the ramp and inform the Chief Examiner when:

• SG A Feed Flow is > 2.47 x106 lbm/hr. Once Feed Flow is above this flow rate than a third Condensate pump needs to be started in order to restore SG level to program.

• SG A Feed Flow is > 2.64 x106 lbm/hr. Once Feed Flow is above this flow rate than a third Condensate pump will need to be started AND power will need to be lowered.

Operations Supervisor/Management:

• If contacted, acknowledge trip of the A Main Feed pump and actions taken per 1-AP-21.00.

Unit 2 Operator:

• If asked, blowdown and air ejector RM readings are [as indicated at the time].

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

STA:

• If the team has a transient brief: The STA will have no input for the brief.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the failure and commence investigations.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 100 of 105 SIMULATOR OPERATORS GUIDE EVENT 5 Pressurizer Pressure Master Pressure Controller Fails High When cued by examiner, implement Trigger #1.

Critical Task CT-3: Restore pressure to normal band prior to low pressure reactor trip at 1885 psig Operations Supervisor/Management:

• If contacted, will acknowledge the malfunction of the Master Pressure Controller and entry into AP-53.00/P-31.00.

• If contacted, will take responsibility for writing the CR.

• If contacted, will acknowledge, but not confirm, entry into 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Tech Spec Clock to close the block valve for 1-RC-PCV-1455C.

• If contacted, acknowledge that EPIPs and VPAP-2802 are required to be reviewed.

STA:

• If contacted, will acknowledge the malfunction of the Master Pressure Controller and entry into AP-53.00/P-31.00. The individual(s) contacted will also acknowledge any TS LCOs. The STA will not confirm or deny any TS decisions.

• If contacted, will take responsibility for writing the CR.

• If contacted, reports to SRO that EPIPs, and VPAP-2802, and SU6.1 have been reviewed and discussed with the Shift Manager.

• If the team has a transient brief: The STA will state that he has nothing to add.

Field Operators:

• If contacted, field operators will perform actions as directed.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the malfunction of the Master Pressure Controller and commence investigation of the failure.

Unit 2 Operator:

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 101 of 105 SIMULATOR OPERATORS GUIDE

• If contacted, will acknowledge the Master Controller Malfunction.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 102 of 105 SIMULATOR OPERATORS GUIDE EVENT 6/7 Large Break LOCA/ Entry into ECA-1.1 When cued by examiner, implement Trigger #9.

Booth Notes: After Trigger 9 is entered the following will occur:

• RC0101, RCS Cold Leg A rupture will ramp in to 10% over 20 minutes.

• Verify Trigger 13 goes active after SI is initiated.

• Verify Trigger 11 goes active after 1-CS-P-1B starts Critical Task CT-4: The crew must restore HHSI flow to the core by manually opening 1-SI-MOV-1867C OR 1-SI-MOV-1867D prior to the RCS fully depressurizing or prior to exiting E-0.

Critical Task CT-5: Manually open CS 1A discharge MOV; 1-CS-MOV 101A OR B prior to Recirc Spray pump start (60% in RWST) in order to provide adequate NPSH.

Operations Supervisor/Management:

• If contacted, will take responsibility for writing the WR and CR.

• If contacted, will acknowledge entry into AP-16.00.

• If contacted, will acknowledge Unit shutdown imminent due to excessive RCS leakage.

• If contacted, will acknowledge EPIPs require evaluation.

• If contacted, will acknowledge equipment failures.

• If contacted, will acknowledge entry into 1-ECA-1.1, Loss of Emergency Coolant Recirculation.

STA:

• If the team has a transient brief: The STA will acknowledge monitoring of CSFSTs.

• If directed, monitor restoration of SI flow flow, and report PCS indicated flow when established.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 103 of 105 SIMULATOR OPERATORS GUIDE

• When conditions are met for FR-P.1, Inform SRO that conditions are met for FR-P.1 (red path).

• When notified, acknowledge that EPIPs require evaluation.

Unit Two:

• When radiation alarms sound on the radiation alarm panel, silence the alarms when directed and report the alarm to the Unit 1 SRO.

• If directed perform the associated RM ARP without leaving the confines of the Unit 2 control area. If actions or verifications are required on the Unit 1 side, inform the Unit 1 SRO/BOP.

• If asked, blowdown and air ejector RM readings are [as indicated at the time].

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

• If requested, acknowledge RM alarms, and perform ARP actions.

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

• If asked to assist with EPIP actions, perform actions as directed Field Operators:

• If contacted, field operators will perform valve manipulations as required:

• If contacted, regarding 1-SI-P-1B overcurrent trip. Acknowledge and call back after 2 minutes and report that 1-SI-P-1B breaker has an overcurrent trip flag on C phase.

• If contacted, regarding 1-CS-P-1B overcurrent trip. Acknowledge and call back after 2 minutes and report that 1-SI-P-1B breaker has an overcurrent trip flag on A phase Health Physics:

• If contacted, will acknowledge the leak of RCS coolant into containment.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the failures to safety related equipment, and will commence troubleshooting as directed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 104 of 105 SIMULATOR OPERATORS GUIDE Role play as other individuals as needed.

The Scenario will end after step 10 of 1-ECA-1.1 or as directed by Chief Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 2 Page 105 of 105 SIMULATOR OPERATORS GUIDE EVENT 8/9 BOP FAILURES Operations Supervisor/Management:

• If contacted,.

• If contacted,.

Unit 2 Operator:

• When radiation alarms sound on the radiation alarm panel, silence the alarms when directed and report the alarm to the Unit 1 SRO.

• If directed perform the associated RM ARP without leaving the confines of the Unit 2 control area. If actions or verifications are required on the Unit 1 side, inform the Unit 1 SRO of the need for an operator to complete the ARP.

Field Operators:

• If directed,.

Role play as other individuals as needed.

The scenario will end upon entering 1-ECA-3.1 or at the lead examiners discretion.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 Facility: Surry Power Station Scenario No.: 3 Op-Test No.: 2017-003 Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 90% power; MOL. Unit 2 at 100% power.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

Turnover: The Crew will be provided a copy of 1-OP-TM-005 and a ramp plan to return Unit 1 to 100% power.

Event Malf. No. Event Event No. Type* Description N BOP 1 N/A R SRO/RO Ramp Unit 1 to 100% power IAW 1-OP-TM-005 2 MS1401 I SRO/RO Channel III Turbine First Stage Impulse Pressure fails low, 120 TS SRO second Ramp. 0-AP-53.00 [CT-1]

3 MS2102 Steam Pressure channel input for B SG PORV will fail high I BOP/SRO causing B SG PORV to open. 0-AP-53.00, 1-AP-38.00.

4 CHLC112C VCT level controller setpoint fails low causing CH-LCV-1115A Setpt, fail C RO/SRO to divert to the PDT. 0-AP-53.00.

low 5 FW1309, Channel III C SG NR level input fails low causing C FRV to FWFCV498 I BOP/SRO open complicated by failure of manual pushbutton. 0-AP-53.00, C_Manual TS SRO TS-3.7. [CT-2]

6 RC1403 #3 Seal, C RCP fails leading to manual reactor trip. 1-AP-C RO/SRO 9.00, E-0, ES-0.1.

7 FW1603 C SG Feed line break inside CTMT with failure of HI-HI CLS RS1001 to actuate. FR-Z.1, E-0, E-2, ES-1.1. [CT-3]

RS1002 M All SW O/R CCTV105A/ [CT-4]

B/C Close 8 VS0102 SI Components fail to reposition on SI signal. Identified and VS1501 C BOP SI2509 corrected using E-0 Attachments.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 LIST OF CRITICAL TASKS CT # EVENT DESCRIPTION MET ()

Place rod control in manual prior to reactor trip and SI on High Steam Flow. Should the RO/BOP fail to take timely 2, Turbine action to place rod control in manual, a reactor trip and SI Impulse will occur on High Steam Flow approximately 2 minutes CT-1 Pressure Fail following Event initiation. Actuation of the reactor Low protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Control C SG NR level to prevent an automatic turbine trip/reactor trip on high SG NR level at 75%. Should the BOP fail to take timely action to control C SG NR level, an 5, C SG NR automatic turbine trip/reactor trip will occur approximately CT-2 CH III, Fail 80 seconds from Event initiation. Actuation of the reactor Low protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Terminate CS and SI flow from the RWST prior to transition to 1-ES-1.3, Transfer to Cold Leg Recirculation, at RWST 7, Feed Line level of 20%. Critical Task start begins at initiation of CS CT-3 Break in and SI flow from RWST and ends when CS and SI flow is CTMT terminated. Time to reach RWST level of 20% is approximately 50 minutes. A Plant Representative will be available for consult during the Scenario.

Secure A/B RCPs on loss of support conditions (Cooling Water flow) prior to receipt of RCP Frame Danger Annunciator (high vibrations). Approximately 22 minutes 7, Feed Line following CTMT pressure exceeding the Hi-Hi-CLS setpoint, CT-4 Break in Annunciator 1C-H4, RCP Frame Danger, will be received if CTMT the RCPs have not been secured. Failure to secure the RCPs when directed will adversely complicate Plant Recovery following blowdown of the faulted SG by preventing the use of the RCPs.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 Event 1: Ramp 90% to 100% Power. (N- BOP, R - RO/SRO)

The Crew will be pre-briefed prior to entering the Simulator concerning a ramp at the normal ramp rate from an initial power of 90%, in accordance with 1-OP-TM-005, Unit Ramping Operations.

The Crew will be provided a copy 1-OP-TM-005 and the ramp plan for the power escalation.

Verifiable Action(s):

1) RO: Operate the control rods and blender systems as required by the ramp plan for the power escalation.

2) BOP: Operate the Turbine controls as necessary to begin the power escalation.

Technical Specifications: None.

Event 2: First Stage Turbine Impulse Pressure Channel III Fail Low. (I - RO/SRO, TS -

SRO).

On Lead Evaluator Cue, the Malfunction for the failure of Channel III of Turbine Impulse Pressure will be actuated. This failure will cause control rods to drive in at 72 steps minute and cause the SGWLC setpoint for all three SGs to go to 33%. The RO is expected to place control rods in manual to stop rod motion IAW 0-AP-53.00. The BOP will monitor SG NR level as they trend to 33%. The SRO will consult Tech Specs and determine requirements as specified below. During recovery from the event, the RO is expected to return control rods to the pre-event rod height; the BOP will place all FRVs in manual control and restore SG NR levels to 44%, and then return the FRVs to Automatic Control. Actions taken IAW 0-AP-53.00, Loss of Vital Instrumentation/Controls. Approximately 6 minutes following the Channel Failure, AMSAC will be non-functional.

Verifiable Actions(s):

1) RO: Place rod control in manual to stop inward rod motion.

2) RO: Place Steam Dump Control in OFF, and Defeat Polishing Building Bypass prior to Shifting controlling channels of Turbine Impulse Pressure to Channel IV.

3) BOP: Place FRVs in Manual and restore SG NR level to program, and return FRVs to Automatic.

Technical Specifications:

1) TS 3.7, Item 20.e., Operator Action 13: within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> determine by observation of the associated permissive annunciator window(s) that the interlock is in its required state for the existing plant condition, or be in at least HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

2) TS 3.7, Table 2, Item 1.e.1), Steam Line Flow, Operator Action 20, With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 If the conditions are not satisfied in the time permitted, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature &

pressure to less than 350°F/450 psig, respectively in the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

3) TS 3.12.F.1, DNB Parameters, RCS Pressure <2205 psig, restore the RCS pressure to >2205psig within two (2) hours or reduce Thermal Power to less than 5% of Rated Power within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

4) Per VPAP-2802, Notifications and Reports, Section 6.30.2, AMSAC is non-functional.

A 30 day clock in effect to review 10CFR50.72/50.73 requirements for reportability.

Critical Task: (CT-1), Place rod control in manual prior to reactor trip and SI on High Steam Flow. Should the RO/BOP fail to take timely action to place rod control in manual, a reactor trip and SI will occur on High Steam Flow. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Event 3: B SG PORV Pressure Input Fails High. (I - BOP/SRO)

Following completion of the required actions of event 2 and at the Lead Evaluator Cue, the malfunction will be actuated causing the failure of the Steam Pressure input for the B SG PORV to fail high leading to the B SG PORV to open in automatic. The BOP is expected to take Action IAW 0-AP-53.00, Loss of Vital Instrumentation/Controls, place the B SG PORV in Manual, and close the Valve. The Crew will perform 0-AP-53.00, and 1-AP-38.00, Main Stem System Control Malfunction, to address this failure.

Verifiable Action(s):

1) BOP: Place the B SG PORV in Manual and reduce demand to zero leading to the closure of the B SG PORV.

Technical Specifications:

None.

Event #4: CVCS Letdown Controller Failure/CH-LCV-1115A fail to Divert Position (C -

RO/SRO)

Following the completion of Event 3 and at the Lead Evaluators Cue, the Malfunction is actuated to fail the setpoint of the CVCS Letdown controller, which causes 1-CH-LCV-1115A to fail to the Divert Position. The RO should respond IAW 0-AP-53.00, Loss of Vital Instrumentation/Controls, and place the control switch for 1-CH-LCV-1115A in the VCT position to stop the divert. Further action will be directed by the SRO using the guidance of 0-AP-53.00 to place the VCT level controller in Manual, reduce the setpoint to zero, and return the control switch for 1-CH-LCV-1115A to the Auto position.

Verifiable Actions:

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3

1) RO: Place 1-CH-LCV-1115A control switch in VCT position.

2) RO: Place VCT level controller in manual and reduce the setpoint to zero.

3) RO: Return 1-CH-LCV-1115A control switch to Auto position.

Technical Specifications:

None.

Event #5: C SG NR Level Channel III Fail Low/C FRV Manual-Down Button Disabled.

(I -BOP/SRO, TS - SRO)

When the actions of Event 4 are completed and Lead Evaluator Cue the malfunction will be initiated to cause Channel III C SG NR level to fail low. This failure results in the C FRV opening and the rise in C SG NR level. This failure is complicated by the failure of the C FRV controller Manual Down button to function, requiring the BOP to use the FRV MOV to throttle feed flow to the C SG before a turbine/reactor trip occurs on high SG level. The actions of the BOP are taken IAW 0-AP-53.00, Loss of Vital Instrumentation/Controls. The SRO will use the guidance of 0-AP-53.00 in response to the failure.

Verifiable Action(s):

1) BOP: Place C FRV in manual and attempt to reduce feed flow to the C SG.

2) BOP: Use 1-FW-MOV-154C to throttle feed flow to the C SG. C FRV Bypass valve may also be used for fine control.

Technical Specifications:

1) TS 3.7, Table 3.7-1, Item 12, Operator Action 6. With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and POWER OPERATION may proceed provided the following conditions are satisfied:

a. 1. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. 2. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

If the conditions are not satisfied in the time permitted, be in at least HOT SHUTDOWN within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

2) TS 3.7, Table 3.7-2, Items 3a, 1) and 2), Operator Action 20. With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 If the conditions are not satisfied in the time permitted, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature & pressure to less than 350F/450 psig, respectively in the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

3) TS 3.7, Table 3.7-3, Item 3a), Operator Action 20. With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

If the conditions are not satisfied in the time permitted, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature & pressure to less than 350°F/450 psig, respectively in the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

4) TS Table 3.7-6, Item 15, SG Water Level (Narrow Range), 2 per SG - Met.

Critical Task: (CT-2) Control C SG NR level to prevent an automatic turbine trip/reactor trip on high SG NR level at 75%. Should the BOP fail to take timely action to control C SG NR level an automatic turbine trip/reactor trip will occur. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Event #6: #3 Seal failure C RCP. (C -RO/SRO)

Following completion of actions for Event 5 and with the Lead Evaluator Cue, the next event will occur. This malfunction is the failure of the #3 Seal on the C RCP resulting in low seal leakoff from the C RCP, loss of D/P on Seal 2/3, and small leak into CTMT. The Crew will respond to alarms and indications available and enter 1-AP-9.00, RCP Abnormal Conditions. On Step 8 RNO of the Abnormal Procedure, the Crew will have indications that of 0 gpm seal leakoff flow, the Crew will initiate E-0 to trip the reactor. The SRO should direct the BOP to the C Loop Pressurizer Spray Valve and secure the C RCP approximately 5 minutes after the reactor has been tripped. The Crew will Transition to and perform ES-0.1 while continuing actions of 1-AP-9.00.

Verifiable Actions:

1) RO: Manual reactor trip and performance of E-0 Immediate Actions from memory.

Technical Specifications:

None.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 Event #7: C SG Feed Line Break in CTMT with Hi-Hi CLS Failure. (M - All)

When the actions of Event 6 have been completed and on the Lead Evaluator Cue, the malfunction for a Feed Line Break in CTMT will be actuated. The Crew is expected to respond by initiating SI and returning to E-0. As CTMT pressure rises and exceeds the Hi-Hi CLS setpoint (23 psia), the majority of Hi-Hi-CLS actions will fail with the exception that the CC cooling TVs for the RCPs (valves close.) The Crew should identify entry conditions for FR-Z.1 and enter the procedure to restore CTMT cooling. Upon completion of FR-Z.1, the Crew should transition to E-0, E-2, and ES-1.1.

Verifiable Actions:

1) RO: Manually start/align components to restore CTMT Cooling.

Critical Task: (CT-3): Terminate CS and SI flow from the RWST prior to transition to 1-ES-1.3, Transfer to Cold Leg Recirculation, at RWST level of 20%. Critical Task start begins at initiation of CS and SI flow from RWST and ends when CS and SI flow is terminated. Time to reach RWST level of 20% is approximately 50 minutes. A Plant Representative will be available for consult during the Scenario.

Critical Task: (CT-4) Secure A/B RCPs on loss of support conditions (Cooling Water flow) prior to receipt of RCP Frame Danger Annunciator (high vibrations). Approximately 22 minutes following CTMT pressure exceeding the Hi-Hi-CLS setpoint, Annunciator 1C-H4, RCP Frame Danger, will be received if the RCPs have not been secured. Failure to secure the RCPs when directed will adversely complicate Plant Recovery following blowdown of the faulted SG by preventing the use of the RCPs.

Event #8: SI Components that fail to reposition following SI actuation. (C - BOP)

Following exit from FR-Z.1, and re-entry into E-0, the following components will be identified by the BOP and placed in their required positions IAW E-0 Attachments:

1) 1-CH-TV-1204B, Letdown Outside CTMT isolation TV, Open, must be manually closed.

2) 1-VS-F-9A, Aux Bldg Central Area Fan, running, must be manually secured.

3) 1-VS-F-58B, Filtered Exhaust Fan, secured, must be manually started.

4) 1-VS-MOD-103C, MCR Ventilation isolation MOD, Open, must be manually closed.

The Scenario ends on Lead Evaluator Cue when the Crew has completed Step 11of 1-ES-1.1.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #3 Initial Conditions:

Unit 1 at 90% with a ramp up to 100% power IAW 1-OP-TM-005 planned. The Crew will pre-brief the procedure and ramp plan prior to Simulator entry.

Pre-load malfunctions: (Trigger 30s) o SIP1A_BKRPOS, RACKOUT o FP0301, FACP07 ALARM HORN FAILURE o FP0302, FPS SPEAKER FAILURE Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. OC-18 for monitoring being performed by Unit 2 BOP.

o 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover:

• Ramp Unit 1 to 100% power in accordance with 1-OP-TM-005, Unit Ramping Operations and the provided Ramp Plan.

• The performance of this procedure has been analyzed based on the current plant configurations, has been approved by Station Management, and the PSA indicates green.

Event Malf. #s Severity Instructor Notes and Required Feedback 1 N/A N/A Ramp Unit 1 to 100% power IAW 1-OP-TM--005 2 MS1401 -2 Deg Channel III Turbine First Stage Impulse Pressure fails low, 120 second Ramp. 0-AP-53.00 [CT-1]

3 MS2102 +1 Deg Steam Pressure channel input for B SG PORV will fail high causing B S PORV to open. 0-AP-53.00, 1-AP-38.00.

4 CHLC112C 0 VCT level controller setpoint fails low causing CH-LCV-1115A to divert to Setpt, fail the PDT. 0-AP-53.00.

low 5 FW1309, -1 Deg Channel III C SG NR level input fail low causing C FRV to open FWFCV498 O/R OFF complicated by failure of manual pushbutton. 0-AP-53.00, TS-3.7.

C_Manual [CT-2]

6 RC1403 100% Deg #3 Seal, C RCP fails leading to manual reactor trip. 1-AP-9.00, E-0, ES-0.1.

7. FW1603 100% Dg C SG Feed line break inside CTMT with failure of HI-HI CLS to actuate.

RS1001 FR-Z.1, E-0, E-2, ES-1.1. [CT-3]

RS1002 True SW O/R O/R, CCTV105A/ Close, ON [CT-4]

B/C Close VS0102 8 VS1501 True SI Components fail to reposition on SI signal. Identified and corrected SI2509 using E-0 Attachments.

SHIFT TURNOVER INFORMATION OPERATING PLAN:

Unit 1 is at 90% power with RCS boron concentration of 825 ppm.

All systems and crossties are operable with the following exception:

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to ramp Unit 1 to 100% power IAW 1-OP-TM-005, Unit Ramping Operations and the reactivity plan provided by Reactor Engineering. Performance of 1-OP-TM-005 has been authorized and has been PSA analyzed for current plant conditions.

The last shift performed one 30 gallon dilution. Previous to this, shifts had been performing two 30 gallon dilutions.

Scenario 3:

Scenario Objectives:

A. Given conditions requiring ramp in power to 100%, perform the ramp in accordance with 1-OP-TM-005, Unit Ramping Operations, and the provided ramp plan.

B. Given a failure of Channel III Turbine Impulse Pressure in the low direction, respond to the failure in accordance with 0-AP-53.00, Loss of Vital Instrumentation/Controls.

C. Given the failure of the Steam Pressure input to the B SG PORV failing high, respond to the failure IAW 0-AP-53.00, Loss of Vital Instrumentation and Controls, and 1-AP-38.00, Main Steam System Control Malfunction.

D. Given a failure of the VCT Level Controller setpoint in the low direction, respond in accordance with 0-AP-53.00, Loss of Vital Instrumentation/Controls.

E. Given the failure of Channel III of C SG NR SG level in the low direction and subsequent failure of the C FRV to shift to manual control, respond in accordance with 0-AP-53.00, Loss of Vital Indications/Controls, to control C SG NR level using C FRV isolation MOV and/or C FRV Bypass HCV.

F. Given a failure of C RCP #3 Seal, respond in accordance with 1-AP-9.00, RCP Abnormal Conditions to trip the reactor and secure the C RCP.

G. Given a Feed Line Break inside CTMT with the failure of Hi-Hi CLS to actuate, respond in accordance with E-0, Reactor Trip or Safety Injection, and FR-Z.1, Response to High Containment Pressure.

H. Given various SI components failing to reposition on SI actuation, respond in accordance with 1-E-0, Attachments to place the components in their required position.

SHIFT TURNOVER INFORMATION Scenario Sequence Event One: Ramp Increase in Reactor Power.

Following turnover, the Crew will begin raising reactor power from 90% to maximum rated thermal power in accordance with 1-OP-TM-005, Unit Ramping Operations.

Malfunctions required: None.

Objectives: (RO) Manipulate the Control Rods and the CVCS Blender system to control Tave and Delta Flux during the power escalation.

(BOP) Manipulate the Turbine Controls to begin the ramp up in power.

(SRO) Supervise and Direct the ramp up in power.

Success Path: Raise reactor power using Turbine Controls, Controls Rods, and the CVCVS Blender to while maintaining Tave/Tref within +/- 5°F and Delta Flux within the target band.

Event Two: Channel III Turbine Impulse Pressure Fails Low.

When the Evaluating Team is ready, the malfunction is implemented to fail 1-MC-PT-1446 in the low direction. This will result in control rods inserting at 72 steps per minutes, SGWLC system setpoint to lower to 33%, and all SG NR level levels begin trending to 33%. The Crew will respond IAW 0-AP-53.00, Loss of Vital Instrumentation/Controls, to place rod control in manual to stop rod motion Malfunctions required: One, MS1401.

Objectives: (RO): Place Rod Control in Manual to stop inward rod motion.

(BOP): Control FRV in Manual to restore SG NR level to 44%; return FRVs to Auto.

(SRO): Consult Tech Specs for the failure.

Success Path: Respond IAW 0-AP-53.00 to swap controlling channel of Turbine First Stage Pressure, restore SG NR level to 44%, and return control rods to pre-event height without exceeding maximum licensed power level.

Critical Task: (CT-1), Place rod control in manual prior to reactor trip and SI on High Steam Flow. Should the RO/BOP fail to take timely action to place rod control in manual, a reactor trip and SI will occur on High Steam Flow. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Event Three: B SG PORV opens due to pressure input channel failing high.

SHIFT TURNOVER INFORMATION When the Evaluating Team is ready, the malfunction is implemented to cause the B SG PORV to fail full open. The BOP is expected to identify the failure, place the controller for the B SG PORV in Manual, and reduce demand to close the valve. Actions taken are in accordance with 0-AP-53.00 and 1-AP-38.00, Main Steam System Control Malfunction.

Malfunctions required: One, MS2102.

Objectives: (BOP) Operate the B SG PORV controller to close the open PORV.

Success Path: Close the open SG PORV by placing in Manual and reducing demand to 0.

Event Four: VCT Level Controller setpoint fail low, Letdown Divert to the PDT.

When the Evaluating Team is ready, the failure of the VCT level controller is implemented which causes Letdown to divert to the PDT. The RO is expected to identify that letdown is diverting, and place 1-CH-LCV-1115A control switch in the VCT position. Actions taken in accordance with 0-AP-53.00.

Malfunctions required: One, Setpoint Override, CHLC112C_SETPT, 0.

Objectives: (RO) Place the control switch for 1-CH-LCV-11115A in VCT position to stop diversion of Letdown flow to the PDT.

Success Path: Place VCT Level Controller in Manual and reduce demand to 0, then return 1-CH-LCV-1115A control switch to the NORM position.

Event Five: Channel III C SG NR Level Fail Low with failure of C FRV controller to shift to Manual.

When the Evaluation Team is ready, the malfunction is implemented to cause Channel III NR level on C SG to fail low. This will result in C FRV opening to full demand. When the BOP attempts to take manual control of the C FRV, the controller will fail to shift to Manual, requiring the BOP to throttle feed flow using 1-FW-MOV-154C, C FRV Manual Isolation MOV, to prevent SG level from rising to the Turbine Trip setpoint of 75%. Operation of the MOV will provide gross control of SG level; once C SG level has been restored to normal, the BOP may use the C FRV bypass HCV for fine control of SG level. Actions taken are in accordance with 0-AP-53.00.

Malfunctions required: Two, FW1309, Switch O/R FWFC498F_MANUAL OFF.

Objectives: (BOP) Control C SG NR level using C FRV isolation MOV and/or C FRV bypass HCV.

(SRO) Consult Tech Specs to determine requirements for the Channel Failure.

Success Path: Control C SG NR level to prevent a Turbine Trip/Reactor Trip on SG High level.

SHIFT TURNOVER INFORMATION Critical Task: (CT-2) Control C SG NR level to prevent an automatic turbine trip/reactor trip on high SG NR level at 75%. Should the BOP fail to take timely action to control C SG NR level an automatic turbine trip/reactor trip will occur. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Event Six: #3 Seal Failure on C RCP.

When the Evaluating Team is ready, the malfunction for the failure of #3 seal on C RCP is implemented. This failure causes a loss of seal D/P indication for #1 and #2 Seal, and C RCP seal return flow to go to 0 gpm indicated flow. The Crew will respond in accordance with 1-AP-9.00, RCP Abnormal Conditions. On Step 8 RNO, the procedure requires the reactor be tripped; the associated Spray Valve demand set to 0, and C RCP secure approximately five (5) minutes following the reactor trip. The Crew will transition to 1-ES-0.1, Reactor Trip Response, and continue actions associated with 1-AP-9.00.

Malfunctions required: One, RC1403 Objectives: (RO): Trip the Reactor and perform the Immediate Action Steps of 1-E-0, Reactor Trip or Safety Injection, from memory.

(BOP): Close C Loop Spray Valve and Secure C RCP.

Success Path: Trip the Reactor and secure the C RCP.

Event Seven: C SG Feed Line Break Inside CTMT with Hi-Hi CLS Failure to Actuate.

When the Evaluating Team is satisfied with the Crew actions associated with 1-ES-0.1 and 1-AP-9.00, the malfunction is actuated to cause a Feed Line Break inside CTMT. The Crew is expected to Transition back to 1-E-0 with SI in service, and check the first four (4) steps of E-0 accomplished. The Crew is expected to identify Hi-HI CLS has failed to actuate and Transition to FR-Z.1, Response to Containment High Pressure, on an ORANGE Path. Component Cooling TVs that are closed by a Hi-Hi CLS signal will close when CTMT pressure exceeds 23 psia. The Crew will perform actions of FR-Z.1 to manually align CS/RS containment depressurizing equipment, then transition back to E-0, E-2 (Faulted Steam Generator Isolation), and transition to 1-E-1 (Loss of Reactor or secondary Coolant) where the Scenario is terminated at the discretion of the Lead Evaluator.

Malfunctions required: Six, FW1603, RS1001, RS1002, Switch Overrides TCCC105A_CLOSE/TVCC105B_CLOSE/TVCC105C_CLOSE.

Objectives: (RO) Backup SI and re-verify E-0 Immediate Actions.

SHIFT TURNOVER INFORMATION (RO/BOP) Manually align CTMT depressurizing components due to failure of Hi-Hi CLS.

Success Path: Transition to FR-Z.1 when CTMT pressure exceeds 23 psia, manually align components to begin depressurizing CTMT.

Critical Task: (CT-3): Terminate CS and SI flow from the RWST prior to transition to 1-ES-1.3, Transfer to Cold Leg Recirculation, at RWST level of 20%. Critical Task start begins at initiation of CS and SI flow from RWST and ends when CS and SI flow is terminated. Time to reach RWST level of 20% is approximately 50 minutes. A Plant Representative will be available for consult during the Scenario.

Critical Task: (CT-4) Secure A/B RCPs on loss of support conditions (Cooling Water flow) prior to receipt of RCP Frame Danger Annunciator (high vibrations). Approximately 22 minutes following CTMT pressure exceeding the Hi-Hi-CLS setpoint, Annunciator 1C-H4, RCP Frame Danger, will be received if the RCPs have not been secured. Failure to secure the RCPs when directed will adversely complicate Plant Recovery following blowdown of the faulted SG by preventing the use of the RCPs.

Event Eight: Various SI Components Fail to Reposition on the Signal.

Following transition from FR-Z.1 to E-0, the BOP will be provided Attachments 1, 2, 3, and 4 of E-0 to check the position of components affected by and SI, Hi and Hi-Hi CLS signal. The BOP will identify and place the following components in their required condition:

• 1-CH-TV-1204B, Letdown Isolation Outside TV.

• 1-VS-F-9A, Auxiliary Building Central Fan.

• 1-VS-F-58B, Cat I Filter Fan.

• 1-VS-MOD-103C, MCR Ventilation Isolation Damper.

Malfunctions required: Three, VS0102, VS1501, SI2509.

Objectives: (BOP) Identify components that fail to reposition on the SI Signal, and place them in their required condition.

Success Path: Identify and position components using 1-E-0, Attachment 1, 2, 3, and 4.

Scenario Recapitulation Total Malfunctions: 16 Abnormal Events: 5, (0-AP-53.00 (4), 1-AP-38.00, 1-AP-9.00)

Major Transients: 1 EOPs Entered: 4 (ES-0.1, E-0 With SI, E-2, ES-1.1)

EOP Contingencies: 1 (FR-Z.1)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 14 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

Time Position Applicants Action or Behavior SRO 1-OP-TM-005, Unit Ramping Operations 5.3 Preparations for Turbine Ramp Up 5.3.1 Review all lighted annunciator windows for adverse conditions that could impact the performance of this procedure.

Will be initialed as complete. - No annunciators Lit.

5.3.2 Review the Tagout File for tagouts that could impact this procedure.

Will be initialed as complete. - MCR FP Panel Tagged out, checks performed by Extra Reactor Operator.

5.3.3 Review the Plant Status Log for conditions that could impact this procedure.

Will be initialed as complete. - No items in the plant status log.

NOTE: Rod height adjustments should be used to maintain Delta Flux as recommended by Reactor Engineering. Boration or dilution should be used to account for power defect and Xenon changes to maintain reference temperature SRO 5.3.4 For scheduled power level changes greater than 10%, verify that a reactivity plan has been provided by Reactor Engineering. Otherwise, direct the STA to notify Reactor Engineering and request recommendations for control of core parameters.

• Delta Flux control

• Recommendations for Rod height and/or RCS Boron adjustments

• Expected Xenon transient Will be initialed as complete. The team will be given a reactivity plan.

5.3.5 Record the Target Power Level, the Current Power Level, and the Percent Power Change below.

Target Power Level _____100%_________

Minus Current Power Level - _____90.0%________

Equals Percent Power Change = ____10%_________

Will be initialed as complete 5.3.6 Obtain a current copy of 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations, and attach to this procedure. (Reference 2.3.9)

Will be initialed as complete.

5.3.7 Review 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 15 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-TM-005, Unit Ramping Operations Will be initialed as complete.

SRO 5.3.8 Document the power level(s) and hold time(s) that will be used to satisfy 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations. This information should be obtained from the Reactivity Plan and/or the Reactor Engineer. Enter N/A if the fuel has been conditioned.

Will be marked as N/A. Fuel Conditioning complete.

Note prior to Step 5.3.9: If a shift turnover is required while Subsection 5.4 is in progress, Steps 5.3.9, 5.3.10, and 5.3.11 must be performed for the relieving shift.

Multiple signoffs are provided for this purpose.

5.3.9 Check that the Shift Manager (who is the designated Test Coordinator) or his designee has reviewed the Detailed Pre-Job Briefing Checklist and Responsibilities in Attachment 1 (page 3 of 5) and conducted a Detailed Pre-Job Briefing with all the personnel performing the unit ramp.

Will be initialed as complete. Team will re-perform these steps prior to entering simulator.

1-OP-TM-005, Unit Ramping Operation SRO 5.3.10 Check that the Senior Operations Manager or Operations Manager on Call has reviewed the Management Expectations Briefing Checklist in Attachment 1 (page 2 of 5) and briefed the Operations Department and support personnel on management expectations.

Will be initialed as complete. Team will re-perform these steps prior to entering simulator.

5.3.11 The pre-job brief shall include the items in Attachment 2, Pre-job Brief Expectations for Reactivity Control.

Will be initialed as complete. Team will re-perform these steps prior to entering simulator.

5.3.12 Determine the specific rate of Reactor power change and the methods which will be used to achieve this rate of change.

Rate of Power Change _______0.33%/min______________________

Reactor Power Change Methods Turbine, rod control, and chemical shim.

Will be initialed as complete.

5.3.13 Notify Energy Supply (MOC), Chemistry, and the Polishing Building that the power change is imminent Will be initialed as complete.

The Team will commence with Section 5.4. Several steps may be completed prior to entering the simulator (i.e., marked N/A).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 16 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-TM-005, Unit Ramping Operation SRO/RO 5.4 Power Increase Between 50% and 100% Reactor Power Caution prior to Step 5.4.1:

• Energizing additional PRZR heaters may cause a change in RCS average temperature due to a difference in boron concentration between the PRZR and the RCS.

5.4.1 Check or place PRZR Backup Heaters in the MANUAL ON position IAW 1-OP-RC-019, Pressurizer Heater Operation.

1-OP-TM-005, Unit Ramping Operation Notes prior to Step 5.4.2:

• The second MFP should be started at approximately 6.0 x 106 lbm/hr (5.6 - 6.4 x 106 lbm/hr) total Feedwater flow.

• When a Main Feed Pump Recirc Valve opens, a decrease in FW temperature will occur that can add positive reactivity to the core. The magnitude of the reactivity change is dependent on the time in core life and the value of the Moderator Temperature Coefficient.

SRO/RO 5.4.2 WHEN reactor power level reaches the point where additional Feedwater flow is desired, THEN perform the following substeps. Enter N/A if a Main Feed Pump will not be started.

a. Notify Chemistry and the Polishing Building of the imminent start of the idle Main Feedwater Pump.

b. Place the idle Main Feedwater pump in service in accordance with 1-OP-FW-004, Main Feedwater System Operation.

Sub-steps 5.4.1 and 5.4.2 will be marked N/A Note prior to Step 5.4.3:

The turbine control valves should not run up against the Turbine Load Limiter 5.4.3 Raise the Turbine Load Limiter and maintain the limiter as close as reasonably possible above the actual turbine load during power escalation (Reference 2.4.2).

Cautions prior to Step 5.4.4:

• To maintain positive control of reactivity, control rods shall be moved in a deliberate, carefully controlled manner while closely monitoring the Reactor's response.

• The Turbine will momentarily (1.5 seconds) shift to MANUAL when placed in IMP IN. To minimize Governor Valve oscillations, the GV Tracking Meter should read as close to zero as possible before transferring to IMP IN.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 17 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-TM-005, Unit Ramping Operation BOP/RO 5.4.4 Check initiated or initiate Attachment 4, Reactivity Control and Monitoring During Ramp. (Reference 2.4.6). Attachment 4, 1-OP-TM-005, on Pages 25-27.

Notes prior to Step 5.4.5:

• The Turbine should be operated in IMP IN while ramping is in progress. If the power increase is stopped during the ramp up, IMP OUT may be used to assist in stabilizing the Turbine.

• This procedure is normally entered at greater than 50% power. If power is less than 50%, procedure 1-GOP-1.5, Unit Startup, 2% Reactor Power to Max Allowable Power, must be used.

BOP 5.4.5 Commence the power increase at the ramp rate specified by Shift Supervision, using the LOAD RATE % PER MIN thumbwheel.

1-OP-TM-005, Unit Ramping Operation Note prior to Step 5.4.6:

Alternate indications of Reactor Power, such as Core T, 1st Stage Pressure, Condensate and Feedwater performance parameters, and Electrical output, should be reviewed and compared during power escalation. (Reference 2.4.3)

RO 5.4.6 Borate, dilute, or use control rods as required to maintain flux in band.

Observe the expected response on FR-1-113, BA-PRI WTR FLOW and Y1C-114A, PRI WTR SUP BATCH INTEGRATOR.

1-OP-CH-021 - Alternate Dilution Using Blender actions are outlined starting on page 20.

5.4.7 IF either annunciator 1G-C4, UPPER ION CHAMBER DEVIATION OR SRO AUTO DEFEAT <50%, or 1G-D4, LOWER ION CHAMBER DEVIATION OR AUTO DEFEAT <50%, are LIT, THEN perform the following substeps.

Otherwise, enter N/A.

a. Notify the OMOC.

b. Initiate an excore quadrant power tilt calculation and perform a calculation at 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> intervals until both annunciators are NOT LIT.

c. Review Tech Spec 3.12.B.5 and 3.12.B.6.

d. Notify Reactor Engineering or STA to determine new High Flux trip and rod stop setpoints.

e. Have I & C adjust High Flux trip and rod stop setpoints as necessary based on tilt calculation.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 18 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-TM-005, Unit Ramping Operation

f. Review Tech Spec 3.12.B.7 for additional actions required if tilt is not reduced to less than 2 percent after a period of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

g. Stop ramp at least 5 percent less than High Flux Trip setpoint.

This step will be marked N/A SRO 5.4.8 WHEN both annunciators 1G-C4 and 1G-D4 are NOT LIT, THEN verify or adjust High Flux Trip and Rod Stop setpoints to the full power values.

1-OP-TM-005, Unit Ramping Operation Caution prior to Step 5.4.9:

The following parameters must be closely monitored prior to exceeding 60%

power: CP Bldg P, MFP suction pressure, MFP recirc status, and HP Heater Drain status. Adequate margin must be maintained on MFP suction pressure and CP Bldg P to prevent bypassing the CP Bldg and subsequent secondary transient. Reactor power should be held at approximately 60% while an HP Heater Drain Pump is started if adequate margin does not exist.

Notes prior to Step 5.4.9:

• Steps 5.4.9 through 5.4.16 may be marked with N/A depending on the power level at which the procedure was entered.

• Ramping should be stopped at least 5 percent less than High Flux trip setpoint.

• The following PCS points may be used to monitor duct temperature trend:

o T2545A, Isolated Phase Bus Duct A Phase Air Temperature o T2546A, Isolated Phase Bus Duct B Phase Air Temperature o T2547A, Isolated Phase Bus Duct C Phase Air Temperature SRO 5.4.9 Notify Chemistry and the Polishing Building of the imminent start of 1-SD-P-1A or 1-SD-P-1B. HP FW HTR DRN PP. Enter N/A for Steps 5.4.9 and 5.4.10 if pump is already running.

Pump is already in service 5.4.10 WHEN there is sufficient flow to the HP Heater Drain Tank, THEN start 1-SD-P-1A or 1-SD-P-1B IAW 1-OP-SD-002, HP Heater Drain Pump Operation.

NOTE: If calorimetric basis has not been changed during the ramp, and no adjustments have been made to the NIs during the ramp, then a calorimetric is not required.

(Reference 4.15) 5.4.11 Continue the power escalation and evaluate the calorimetric. IF a calorimetric is required, THEN notify Energy Supply (MOC) that there will be a 70 percent (approximate) power hold to perform a calorimetric. Otherwise, enter N/A.

(Reference 4.15)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 19 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-TM-005, Unit Ramping Operation SRO 5.4.12 WHEN power level is stable at approximately 70 percent, THEN stop the power escalation AND initiate a calorimetric. Enter N/A if calorimetric is not required. (Reference 4.15) 5.4.13 IF a flux map is needed, as desired by Reactor Engineering, THEN direct Reactor Engineering to perform flux map at this time. Otherwise, enter N/A.

All steps will be marked N/A 1-OP-TM-005, Unit Ramping Operations SRO 5.4.14 WHEN the calorimetric (if needed), initiated in Step 5.4.11, and the flux map (if needed), initiated in Step 5.4.12, have been satisfactorily completed, THEN notify Energy Supply (MOC), Chemistry, and the Polishing Building that the power escalation will continue, as required.

Step will be marked N/A SRO 5.4.15 Continue the power escalation to 90 to 91 percent (approximate) power.

Team will begin at this Step.

Caution prior to Step 5.4.16:

The Turbine will momentarily (1.5 seconds) shift to MANUAL when placed in IMP OUT. To minimize Governor Valve oscillations, the GV Tracking Meter should read as close to 0 as possible before transferring to IMP OUT.

SRO 5.4.16 WHEN power level is stable at approximately 90 to 91 percent, THEN place the Turbine in IMP OUT. Enter N/A if turbine operation above 90 to 91 percent will be in IMP IN.

SRO 5.4.17 Check that Power Hold Limits from 1-DRP-003, Curve Book, Reactor Power and Rod Movement Limitations, have been satisfied or accounted for prior to exceeding 95%. Enter N/A if fuel has been conditioned.

Evaluators Note: No further actions are expected for this event.

-- END EVENT 1 --

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 20 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

Time Position Applicants Action or Behavior 1-OP-CH-021, Alternate Dilution Using Blender RO 3.0 Initial Conditions 3.1 Check Primary Grade water is available to the Blender.

4.0 Precautions and Limitations 4.1 Control rod position, Tavg, and/or power level should be observed when making up to the RCS.

4.2 Operation of pressurizer heaters and spray valves should be used to equalize Boron concentration (CB) when changing CB.

4.3 The blender must be frequently monitored for proper operation during the entire duration of the makeup. (Reference 2.4.1) 4.4 The Reactor Operator shall notify Shift Supervision before performing any Blender evolution. (Reference 2.4.1) 4.5 Rapidly changing VCT level and pressure may affect RCP Seal leakoff, which should be monitored for normal response.

4.6 Operation of the Blender must be Peer checked.

4.7 Due to system configuration, PG flow will continue after reaching the integrator endpoint. Depending on the total flow rate, 0-5 gallons of additional flow should be anticipated. At 100 gpm, four gallons of additional flow is expected. At 60 gpm, two gallons of additional flow is expected.

4.8 The Blender may lock up if the RATE function is in use at the end of make up. (Integrator lock up does NOT affect the Blender AUTO function). (Ref.

2.4.2) 4.9 If the ENT button on the BA or PG integrator is pressed twice in succession, the integrator will flash the Grand Total on the digital display. The ENT button should be pressed an additional time to exit the Grand Total display.

The integrator setpoint will NOT be affected.

4.10 Dilutions of greater than 2000 gallons can result in RCS H2 concentration going low out of band. Dilutions of this amount should be made to the top of the VCT using 1-OP-CH-007, Blender Operations

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 21 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1 Alternate Dilution NOTE: This subsection will be used for the first alternate dilution of the shift.

Attachment 3 will be used as a guide for further alternate dilutions for the remainder of the shift.

If unit on excess letdown, 1-OP-CH-007 should be used.

5.1.1 Determine the required integrator setpoint by performing the following:

________________ gal (-) _____________= ______ Integrator setpoint (Desired Dilution) (anticipated additional flow, dependent on flowrate) 5.1.2 Notify Shift Supervision of impending Alternate Dilution. (Reference 2.4.1) 5.1.3 Notify STA of impending Alternate Dilution.

5.1.4 Place the MAKE-UP MODE CNTRL switch in the STOP position.

5.1.4 Adjust both of the following controllers for the flow rate and total gallons of Primary Grade water for the dilution. IF the PG FLOW CNTRL controller setpoint has previously been set, THEN enter N/A for that substep.

a. 1-CH-FC-1114A, PG FLOW CNTRL ______ GPM (IAW Attachment 10)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 22 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1.5 (Continued)

b. Record number of gallons of PG to be added from Step 5.4.4.b and enter into 1-CH-YIC-1114A, PRI WATER SUP BATCH INTEGRATOR (GAL) as follows:

______ GAL

1. Depress PRESET A Button (Controller will read the last value entered into the controller; reads in gallons.)

2. To clear PRESET A, depress the CLR Button. Enter N/A if not required.

3. Enter desired PRESET A value. Enter N/A if not required.

4. Depress ENT Button.

5.1.6 Place the MAKE-UP MODE SEL switch in the ALT DIL position.

5.1.7 IF it is desired to direct the dilution water to the charging pump suction only, THEN place 1-CH-FCV-1114B, BLENDER TO VCT, in the CLOSE position. Otherwise, enter N/A.

5.1.8 Place the MAKE-UP MODE CNTRL switch in the START position.

5.1.9 Check all of the following conditions.

a. 1-CH-FCV-1113A, BORIC ACID TO BLENDER, is closed.

b. 1-CH-FCV-1113B, BLENDER TO CHG PUMP, is open.

c. 1-CH-FCV-1114A, PGW TO BLENDER, is controlling in AUTO.

d. 1-CH-1114B, BLENDER TO VCT, is OPEN - N/A 5.1.10 IF it is desired to stop the Dilution before the selected amount, THEN place the MAKE-UP MODE CNTRL switch in the STOP position. IF the PRI WATER SUP BATCH INTEGRATOR (GAL) is used to stop the flow, THEN enter N/A for this step.

5.1.11 WHEN the desired amount of makeup has been reached, THEN check both of the following valves are closed.

• 1-CH-FCV-1113B

• 1-CH-FCV-1114B

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 23 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

RO 1-OP-CH-021, Alternate Dilution Using Blender 5.1.12 Check or place 1-CH-FCV-1114B in AUTO.

5.1.13 Check or place the following controllers in Automatic.

• 1-CH-FC-1113A, BA FLOW CNTRL

• 1-CH-FC-1114A, PG FLOW CNTRL 5.1.14 Place the MAKE-UP MODE SEL switch in the AUTO position.

5.1.15 Place the MAKE-UP MODE CNTRL switch in the START position.

5.1.16 Notify Shift Supervision of Blender status. (Reference 2.4.1)

Additional Alternate Dilutions will be performed using 1-OP-CH-021, Attachment 1 (Next Page).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 24 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 25 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 26 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 1 Page 27 of 121 Event

Description:

Unit Ramp 90% to 100% IAW 1-OP-TM-005.

Cue: When team ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 28 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

Time Position Applicants Action or Behavior RO Identify the failure based on:

• Annunciator 1H-A4, Tave/Tref DEV

• Annunciator 1H-G5/G6/G7, SG LVL ERROR, A/B/C SG

• Annunciator 1H-H7, STM DUMP V V TRIP OPEN

• Annunciator 1F-F4/F5/F6, STM GEN 1A/1B/1C CH 3 HI STM LINE FLOW

• Control rods stepping in 72 steps/minute

• 1-MS-PI-1446, Failing Low 0-AP-53.00 RO Perform the Immediate Action Steps of 0-AP-53.00

[1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Identifies 1-MS-PI-1446, Turbine Impulse Pressure failing low.

[2] PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Places Rod Control in Manual Checks Rod Motion Stopped Critical Task: (CT-1), Place rod control in manual prior to reactor trip and SI on High Steam Flow. Should the RO/BOP fail to take timely action to place rod control in manual, a reactor trip and SI will occur on High Steam Flow approximately 2 minutes following Event initiation. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

0-AP-53.00 SRO Reads Immediate Action Steps of 0-AP-53.00

[1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL RO Reports Yes, 1-MS-PI-1447, Channel IV First Stage Pressure, Normal.

SRO [2] PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION RO Reports, Yes, Rod Control in Manual and Rod Motion Stopped.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 29 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-53.00 SRO Conducts a Transient Brief Summarizes Event and queries RO and BOP for Annunciators received and Critical Parameters.

RO reports Annunciators received on VB 1-1, Critical Parameters: RCS Pressure, Tave, Rod Height, and Delta Flux.

BOP reports Annunciators on VB 1-2, Critical Parameters: SG NR Level and trend STA will have no input for the Brief.

SRO Concludes the Brief and continues 0-AP-53.00 at Step 3.

0-AP-53.00 SRO *3 CHECK REACTOR POWER - LESS THAN OR EQUAL TO 100%

BOP Reports Actual Reactor Power and Trend using PCS 30 minute power indication.

0-AP-53.00 CAUTION Prior to Step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

NOTES prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 11.

SRO *4. DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

• Turbine First Stage Pressure, Attachment 2 RO/BOP Reports Yes, Turbine First Stage Pressure Failed.

SRO Goes to Attachment 2 0-AP-53.00, Attachment 2 SRO CAUTION prior to Step 1: Delta flux must be monitored and maintained within band if rods have moved.

RO Acknowledges caution, may report current indication of Delta Flux.

SRO NOTE Prior to Step 1: Page 4 of this Attachment shows a one-line diagram of Turbine First Stage Pressure.

RO Acknowledges Note.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 30 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-50.00, Attachment 2 SRO 1. IF the selected Turbine First Stage Pressure channel has failed, THEN do the following:

a. Check or place the ROD CONT MODE SEL switch in MANUAL.

RO Reports Rod Control in Manual.

SRO b. Select redundant Turbine First Stage Pressure channel IAW the following:

1. Check or place STM DUMP CNTRL switch in OFF-RESET.

BOP Places STM DUMP CNTRL in OFF.

2. Check or place (1)-CP-43-(1)CP(1)01, SUDDEN LOSS LOAD DEFEAT switch in DEFEAT position.

Places 1-CP-43-1CP-101 in Defeat.

SRO 3. Check or place Main Feed Reg Valves in MANUAL:

• (1)-FW-FCV-(1)478, SG A FEED REG

• (1)-FW-FCV-(1)488, SG B FEED REG

• (1)-FW-FCV-(1)498, SG C FEED REG BOP Places A/B/C FRV controllers in Manual.

SRO 4. Check or place TURB FIRST STAGE PRESS CH SEL switch to redundant channel.

RO Shifts TURB FIRST STAGE PRESS CH SEL switch in CH IV.

Reports Turbine Impulse Pressure channel in CH IV, verified by SG LVL DEV Annunciators 1H-G5/6/7 for A/B/C SGs alarming.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 31 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-53.00, Attachment 2 SRO CAUTION prior to Step 2: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

BOP Acknowledges Caution.

SRO 2. Return affected components to normal position IAW Shift Supervision direction:

a. WHEN SG level returned to normal, THEN place Main Feed Reg Valves in AUTO:

• (1)-FW-FCV-(1)478, SG A FEED REG

• (1)-FW-FCV-(1)488, SG B FEED REG

• (1)-FW-FCV-(1)498, SG C FEED REG BOP Slowly adjusts A/B/C FRV controllers to restore SG NR level to 44% while monitoring Reactor Power using PCS 30 minute display. When level restored, places FRVs in Auto.

0-AP-53.00, Attachment 2 SRO NOTES applicable prior to substep b.:

• Unless there is evidence that a Turbine runback is imminent, the preferred alignment of the Steam Dump control system is ON in the Tave Mode.

• If (1)-MS-PT-(1)446 fails low, Steam Dump Demand will go to 100%, but steam dumps will not open, since an arming signal (load reject or trip) is not present. If the steam dumps are not in Steam Pressure Mode following (1)-MS-PT-(1)446 failing low and a load reject occurs, then all the steam dumps will open. AMSAC will not function six minutes after the failure.

SRO will hold a Focus Brief with the Crew discuss Steam Dump Operation with the failure of 1-NS-PT-1446.

b. Return Steam Dumps to service IAW Shift Supervision direction.

1. Momentarily place STM DUMP MODE SEL switch in RESET.

BOP Places STM DUMP MODE SEL in RESET.

SRO 2. Place STM DUMP CNTRL switch in ON.

BOP Places STM DUMP CNTRL in ON.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 32 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-53.00, Attachment 2, Substep b., Continued.

SRO 3. Place (1)-CP-43-(1)CP(1)01, SUDDEN LOSS LOAD DEFEAT switch in NORMAL position.

BOP Places 1-CP-43-1CP-101 in NORMAL.

SRO 4. IF (1)-MS-PT-(1)447 has failed, THEN restore the CP Bldg as required.

BOP Reports No, 1-MS-PT-1447 not failed SRO 5. IF ( )-MS-PT-( )446 has failed low, THEN consult with Shift Manager for the need to place the STM DUMP MODE SEL switch in STEAM PRESSURE mode.

BOP Acknowledges SRO need to consult SM.

SRO c. Return Rod Control to Auto IAW Shift Supervision direction.

1. Review appropriate ARP(s) to check correct rod position. (for example, G-F-8)

RO Reports No, 1G-F8 Not LIT.

SRO 2. Place the ROD CONT MODE SEL switch in AUTO.

RO/SRO should discuss restoring control rods to pre-event rod height and placing rod control in auto.

RO Restores control rods to pre-event height and places rod control in Auto.

0-AP-53.00, Attachment 2 SRO 3. Perform follow-up actions:

a. Consult with Shift Manager on need to initiate (1)-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

SRO consults with SM; notifying of failure, actions taken, Unit status, and follow-up actions required.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 33 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-53.00, Attachment 2 SRO b. Refer to the following Tech Spec 3.7 items.

• Table 3.7-1, 20 (Refer to (1)-OPT-RP-001 - one hour clock) and Table 3.7-2, 1.e

1) TS 3.7, Item 20.e., Operator Action 13: within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> determine by observation of the associated permissive annunciator window(s) that the interlock is in its required state for the existing plant condition, or be in at least HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

2) TS 3.7, Table 2, Item 1.e.1), Steam Line Flow, Operator Action 20, With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and/or POWER OPERATION may proceed provided the following conditions are satisfied: a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1. If the conditions are not satisfied in the time permitted, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature & pressure to less than 350°F/450 psig, respectively in the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

3) TS 3.12.F.1, DNB Parameters, RCS Pressure <2205 psig, restore the RCS pressure to >2205psig within two (2) hours or reduce Thermal Power to less than 5% of Rated Power within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

SRO updates Crew/SM concerning results of TS Review, and directs BOP to perform 1-OPT-RP-001 to be completed within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. Unit 2 will provide copy of OPT to BOP. OPT pages follow at end of this section.

c. Refer to VPAP-2802 for AMSAC inoperability.

SRO directs STA to review VPAP-2802 concerning AMSAC Operability.

STA will report review complete and requirements discussed with the Shift Manager.

d. IF no other instrumentation failure exists, THEN GO TO Step 11.

SRO returns to AP-53.00, Step 11.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 34 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-53.00 SRO 11. CHECK CALORIMETRIC - FUNCTIONAL IAW (1)-OPT-RX-001, ATTACHMENT 4 Directs BOP to perform 1-OPT-RX-001, Attachment 4, upon completion of 1-OPT-RP-001.

BOP Reports Yes, Calorimetric is Functional IAW 1-OPT-RX-001, Attachment 4. 1-OPT-RX-001, Attachment 4 at end of this section.

0-AP-53.00 SRO 12. REVIEW THE FOLLOWING:

• Tech Spec 3.7

• VPAP-2802, NOTIFICATIONS AND REPORTS

• TRM SECTION 3.3, INSTRUMENTATION

• Reg Guide 1.97

• EP-AA-303, Equipment Important to Emergency Response SRO Directs STA to perform reviews required for the failure. STA will report reviews have been completed and results discussed with the Shift Manager.

0-AP-53.00 SRO 13. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS RO Reports No, no further malfunction exists.

SRO GOES TO Step 15.

0-AP-53.00 SRO 15. PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C SRO consults Shift Manager concerning notification of OMOC of the failure and request for I&C assistance; Notifies STA to add failure to PRA program.

END EVENT 2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 35 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

0-AP-53.00, Attachment 2, Page 4 (SRO provides to RO/BOP)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 36 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

1-OPT-RX-001, Attachment 4, Calorimetric Program Operability

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 37 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

1-OPT-RX-001, Attachment 4, Calorimetric Program Operability

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 38 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

1-OPT-RP-001, Check of Permissive Status Lights P-6, P-7, P-8 and P-10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 2 Page 39 of 121 Event

Description:

Channel III Turbine Impulse Pressure Fails Low Cue: By Examiner.

1-OPT-RP-001, Check of Permissive Status Lights P-6, P-7, P-8 and P-10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 3 Page 40 of 121 Event

Description:

Steam Pressure Input to B SG PORV Fails, B SG PORV Opens Fully.

Cue: Evaluator Cue, when Team completes 1-OPT-RP-001.

Time Position Applicants Action or Behavior Crew Diagnoses failure based on the following indications:

B SG PORV RED open light LIT B SG SG PORV Demand ramping to 100%

B SG NR level swell 0-AP-53.00 BOP Perform Immediate Action Steps of 0-AP-53.00

[1] CHECK REDUNDANT INSTRUMENT CHANNEL(S)

INDICATION - NORMAL Identifies B SG pressure NORMAL.

[2] PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION Places B SG PORV in Manual, and reduces demand to close the B SG PORV.

Checks B SG PORV RED light out and GREEN light LIT.

Reports Immediate Actions of AP-53.00 complete.

0-AP-53.00 SRO Reads Immediate Action Steps of 0-AP-53.00

[1] CHECK REDUNDANT INSTRUMENT CHANNEL(S)

INDICATION - NORMAL BOP Reports Yes, B SG Pressure, Normal.

SRO [2] PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION BOP Reports, Yes, B SG PORV placed in Manual and PORV is closed.

0-AP-53.00 SRO Conducts a Transient Brief Summarizes Event and queries RO and BOP for Annunciators received and Critical Parameters.

RO reports no Annunciators received on VB 1-1, Critical Parameters:

unchanged.

BOP reports no Annunciators on VB 1-2, Critical Parameters: PORV closed.

STA will have no input for the Brief.

SRO Concludes the Brief and continues 0-AP-53.00 at Step 3.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 3 Page 41 of 121 Event

Description:

Steam Pressure Input to B SG PORV Fails, B SG PORV Opens Fully.

Cue: Evaluator Cue, when Team completes 1-OPT-RP-001.

0-AP-53.00 SRO *3 CHECK REACTOR POWER - LESS THAN OR EQUAL TO 100%

BOP Reports Actual Reactor Power and Trend using PCS 30 minute power indication.

0-AP-53.00 CAUTION Prior to Step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

NOTES prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been SRO addressed by this procedure, recovery actions should continue at Step 11.

• 4. DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

BOP

• Steam Dumps / SG PORVs 1-AP-38.00.

SRO Reports Yes, SG B SG PORV.

Goes to 1-AP-38.00 Note: SRO may have directly entered 1-AP-38.00, Main Steam System Malfunction.

1-AP-38.00 SRO 1. CHECK STEAM DUMP VALVES - CLOSED BOP Reports Yes, Steam Dumps closed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 3 Page 42 of 121 Event

Description:

Steam Pressure Input to B SG PORV Fails, B SG PORV Opens Fully.

Cue: Evaluator Cue, when Team completes 1-OPT-RP-001.

1-AP-38.00 SRO 2. CHECK SG PORVS - CLOSED BOP Reports, Yes B: SG PORV closed, but was open.

SRO 2. RNO IF SG pressure greater than desired pressure, THEN check PORV(s) close when SG pressure lowers below desired pressure AND GO TO Step 3.

BOP Reports No, B SG Pressure NORMAL.

SRO IF SG pressure less than desired pressure, THEN do the following:

a) Place affected PORV controller in Manual and close valve.

BOP Reports Yes, B SG PORV in Manual and closed.

SRO b) IF any SG PORV NOT closed, THEN do either of the following:

BOP Reports No, PORV is closed.

SRO c) Check associated MS line pressure transmitter (1-MS-PI-101A, B, C) for the affected PORV at the ASD Panel to determine if transmitter failure is cause of PORV failure.

Directs BOP to dispatch Service Bldg Inside operator to check status of MS line pressure indicators on Aux Shutdown Panel.

Note: Service Bldg Inside operator will report 1-MS-PI-101B failed high.

SRO continues to Step 3, while awaiting local report.

1-AP-38.00 SRO 3. CHECK THE FOLLOWING CONDITIONS:

• Reactor power - LESS THAN OR EQUAL TO 100%

• Turbine load - NORMAL BOP Reports Yes, reactor power is less than 100% and Turbine load is normal.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 3 Page 43 of 121 Event

Description:

Steam Pressure Input to B SG PORV Fails, B SG PORV Opens Fully.

Cue: Evaluator Cue, when Team completes 1-OPT-RP-001.

1-AP-38.00 NOTE prior to Step 4: The power reductions required by Step 4 are intended for failures causing full or partial closure of a control valve, or if valve closure is required for maintenance.

SRO 4. CHECK MAIN TURBINE AND MSR STEAM CONTROL VALVES:

a) MSR Steam supply MOVs and FCVs - NORMAL b) Turbine Governor Valves and Stop Valves - NORMAL c) Reheat Stop and Intercept Valves - NORMAL BOP Reports Yes, Turbine and MST Steam Control Valves normal.

1-AP-38.00 SRO 5. CHECK TURBINE MONITORING LIGHTS - NORMAL BOP Reports Yes, Turbine Monitoring Lights are normal.

1-AP-38.00 SRO 6. STABILIZE UNIT CONDITIONS:

a) Adjust Turbine load as necessary b) Borate or dilute as necessary RO/BOP Report Yes, Unit Conditions Stable.

1-AP-38.00 SRO 7. SUBMIT CONDITION REPORT AS NECESSARY RO/BOP Acknowledge CR submission required.

1-AP-38.00 SRO 8. PROVIDE NOTIFICATIONS:

• Shift Supervision

• STA (PRA determination)

• OMOC

• MOC SRO will contact Shift Manager; notify of failure, Unit Status, and procedure entered; request OMOC and I&C be notified.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 3 Page 44 of 121 Event

Description:

Steam Pressure Input to B SG PORV Fails, B SG PORV Opens Fully.

Cue: Evaluator Cue, when Team completes 1-OPT-RP-001.

1-AP-38.00 SRO 9. CHECK ABNORMAL CONDITION Do the following:

- CORRECTED a) Consult with Shift Supervision.

b) Submit Condition Report.

c) IF problem of short term nature, THEN GO TO Step 10 when problem corrected.

SRO will conduct a focus brief and discuss failure with the Crew; 1-AP-38.00 will be suspended until resolution by I&C.

END EVENT 3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 4 Page 45 of 121 Event

Description:

VCT Level Controller Setpoint Fails Low Cue: Evaluator Cue.

Time Position Applicants Action or Behavior RO Diagnose the failure based on the flowing alarms/indications:

1-CH-LC-1112C, VCT Level CNTRL, Demand goes to 100%

1-CH-LCV-1115A, Opens, Amber light LIT If level VCT level reaches 27%, Blender will start to recover level in the VCT.

0-AP-53.00 Perform Immediate Action Steps of 0-AP-53.00 RO [1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Identifies Both VCT level Channels lowering.

[2] PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION.

Places 1-CH-LCV-1115 A control switch in NORM position, and checks Amber Light NOT LIT, and RED VCT Light LIT.

Reports 1-CH-LCV-1115A in NORM position, valves indicates closed, and Immediate Action steps of 0-AP-53.00 complete.

0-AP-53.00 SRO Conducts a Transient Brief Summarizes Event and queries RO and BOP for Annunciators received and Critical Parameters.

RO reports no Annunciators received on VB 1-1, Critical Parameters VCT is (reports actual level in VCT) and trend stable.

BOP reports no Annunciators on VB 1-2, Critical Parameters: unchanged.

STA will have no input for the Brief.

SRO Concludes the Brief and continues 0-AP-53.00 at Step 3.

SRO/RO Consult and determine the failure is limited to the 1-CH-LC-1112C, the Modulating Divert Function has been lost. Discussion concludes that 1-CH-LC-1112C can be placed in Manual, Demand reduced to 0, and 1-CH-LCV-1115 control switch returned to Auto.

RO Places 1-CH-LC-1112C in Manual, reduces Demand to 0, and returns 1-CH-LCV-1115A to Auto position.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 4 Page 46 of 121 Event

Description:

VCT Level Controller Setpoint Fails Low Cue: Evaluator Cue.

0-AP-53.00 SRO *3 CHECK REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO Reports Actual Reactor Power and Trend using PCS 30 minute power indication.

0-AP-53.00 CAUTION Prior to Step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

NOTES prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 11.

SRO *4. DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

Based on 2nd Note, SRO/RO determine controller malfunction has been addressed.

SRO GOES TO Step 11 RO Agrees that controller malfunction has been addressed and Procedure Action should continue at Step 11.

0-AP-53.00 SRO 11. CHECK CALORIMETRIC - FUNCTIONAL IAW (1)-OPT-RX-001, ATTACHMENT 4 Directs BOP to check Calorimetric Functional IAW 1-OPT-RX-001, Attachment 4.

BOP Checks Calorimetric Functional using 1-OP-RX-001, Attachment 4.

Reports Calorimetric Functional.

Note: Attachment 4 of 1-OPT-RX-001 follows this section.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 4 Page 47 of 121 Event

Description:

VCT Level Controller Setpoint Fails Low Cue: Evaluator Cue.

0-AP-53.00 SRO 12. REVIEW THE FOLLOWING:

• Tech Spec 3.7

• VPAP-2802, NOTIFICATIONS AND REPORTS

• TRM SECTION 3.3, INSTRUMENTATION

• Reg Guide 1.97

• EP-AA-303, Equipment Important to Emergency Response SRO Directs STA to check items 2 through 5, above.

SRO Consults Tech Specs and determine no Action Items are impacted.

STA Will report references have been checked and requirements discussed with the Shift Manager.

0-AP-53.00 SRO 13. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS RO Reports, No additional controller/instrument failure does not exist.

SRO GOES TO Step 15.

0-AP-53.00 SRO 15. PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C Contacts Shift manger and reports failure, Procedure entered, and status of the plant. Requests OMOC and I&C be contacted concerning the failure.

Directs the STA to add the failure to the PRA calculation.

END EVENT #4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 4 Page 48 of 121 Event

Description:

VCT Level Controller Setpoint Fails Low Cue: Evaluator Cue.

1-OPT-RX-001, Attachment 4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 4 Page 49 of 121 Event

Description:

VCT Level Controller Setpoint Fails Low Cue: Evaluator Cue.

1-OPT-RX-001, Attachment 4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 50 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

Time Position Applicants Action or Behavior BOP Diagnoses the Failure based on the following Alarms/Indications:

Annunciator 1H-G7, STM GEN 1C LVL ERROR Annunciator 1H-C7, STM GEN 1C LO-LO LVL Annunciator 1F-G9, STM GEN 1C LO- LO LVL CH 3 Lowering trend in Channel III, C SG NR Level, 1-FW-LI-1496 Rising trend on Channel I&II C SG NR Level, 1-FW-LI-1494/1495 Rising Demand on 1-FW-FC-1498F, C FRV 0-AP-53.00 BOP Perform Immediate Action Steps of 0-AP-53.00

[1] CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION -

NORMAL Identifies C SG Channels I&II Rising.

[2] PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION.

[2] RNO Do the following:

• IF no control function affected, THEN GO TO Step 4.

• IF Feedwater-related failure, THEN control SG level with Feedwater Isolation MOVs.

Attempts to place C FRV, 1-FW-FC-1498F in Manual; Throttles 1-FW-MOV-154C, to reduce Feed Flow less than Steam Flow on C SG. And Checks C SG level trending back to Normal level.

Reports C SG Channel III NR Level has failed Low, C FRV controller would not shift to Manual, 1-FW-MOV-154C throttled to reduce Feed Flow to C SG, C SG level returning to Normal level, and Immediate Action steps of 0-AP-53.00 complete.

Critical Task: (CT-2) Control C SG NR level to prevent an automatic turbine trip/reactor trip on high SG NR level at 75%. Should the BOP fail to take timely action to control C SG NR level, an automatic turbine trip/reactor trip will occur approximately 80 seconds from Event initiation. Actuation of the reactor protection system for this event would be considered failure of this CT.

A Plant Representative will be available for consult during the Scenario.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 51 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

0-AP-53.00 SRO Conducts a Transient Brief Summarizes Event and queries RO and BOP for Annunciators received and Critical Parameters.

RO reports no Annunciators received on VB 1-1, Critical Parameters are stable.

May report Reactor Power using PCS 30 minute variable.

BOP reports no Annunciators on VB 1-2, Critical Parameters: C SG Level and trend.

STA will have no input for the Brief.

SRO Concludes the Brief, Establishes Band for C SG NR level with BOP of 44 +/-

5% when normal level restored, and discusses Contingency for C SG level control should a reactor trip occur with the abnormal C Feed Control.

Continues with 0-AP-53.00 at Step 3.

0-AP-53.00 SRO *3 CHECK REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO Reports Actual Reactor Power and Trend using PCS 30 minute power indication.

SRO Direct RO to Review the Annunciator Response Procedures for alarms associated with the Event.

RO Report results of ARP review to SRO.

0-AP-53.00 CAUTION Prior to Step 4: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

NOTES prior to Step 4:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 11.

SRO *4. DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

• SG NR Level, Step 7.

BOP Reports Yes, Channel III, C SG NR Level Failed Low.

SRO Goes to Step 7.

NOTE: SRO/BOP may discuss use of C FRV bypass valve HCV, 1-FW-HCV-155C, for fine control of C SG NR Level.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 52 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

0-AP-53.00 CAUTION prior to Step 7: When CALCALC is based on Feedwater, changes in feed flow will affect calorimetric power. Reactor power must be monitored when adjusting feed flow.

SRO 7. CHECK STEAM GENERATOR LEVEL CONTROL INSTRUMENTS -

NORMAL

• Steam Generator Level BOP Reports No, C SG NR Level failed Low SRO IF the selected steam flow, steam pressure, or feed flow input to the SG Water Level Control system has failed, THEN do the following:

BOP Reports No, steam flow, steam pressure and feed flow are normal.

IF SG Level Channel III has failed, THEN do the following:

SRO a) Place the associated Feed Reg Valve in MANUAL.

BOP Reports No, C FRV cannot be placed in Manual.

SRO b) IF manual control of Feedwater is inoperable, THEN do the following:

1) Control SG level with Feedwater Isolation MOVs.

BOP Reports Yes C SG NR level being controlled using C FRV isolation MOV.

SRO 2) Consult with the Shift Manager concerning the need to place the MFRV on the jack.

States that Shift Manager will be consulted.

SRO c) Control SG level at program level.

BOP Reports Yes C SG being controlled at (provides actual level +/- set band).

SRO d) Main Feed Reg Valve Bypass Valves may be used for fine control of SG level.

BOP Acknowledges FRV bypass valve may be used for fine control

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 53 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

0-AP-53.00, Step 7 RNO, Continued SRO Perform follow-up actions a) Consult with Shift Manager on need to initiate (1)-OP-RP-001, ALIGNING CONTROL SYSTEM FOR PERFORMANCE OF CHANNEL I, II, III, AND IV PROCESS AND PROTECTION TESTING.

b) Refer to the following Tech Spec 3.7 items:

• Table 3.7-1, 12 and 17

• Table 3.7-2, 1.c, 1.e, and 3.a

• Table 3.7-3, 2.a, and 3.a

• Table 3.7-6, 15 and 16 c) Refer to Attachment 1.

d) IF no other instrumentation failure exists, THEN GO TO Step 11.

Notifies RO/BOP of Need to Consult Tech Specs and Shift Manager.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 54 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

0-AP-53.00 SRO Notify Shift Manager of the Failure, Actions taken, Procedures entered, and status of the Unit. Request OMOC be notified, and I&C contacted. Address 1-OP-RP-001, stating that this procedure should be prioritized until I&C is ready to place the channel in trip.

Consult Tech Specs and identify:

1) TS 3.7, Table 3.7-1, Item 12, Operator Action 6. With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

If the conditions are not satisfied in the time permitted, be in at least HOT SHUTDOWN within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

2) TS 3.7, Table 3.7-2, Items 3a, 1) and 2), Operator Action 20. With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

If the conditions are not satisfied in the time permitted, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature & pressure to less than 350°F/450 psig, respectively in the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

3) TS 3.7, Table 3.7-3, Item 3a), Operator Action 20. With the number of OPERABLE channels less than the Total Number of Channels, REACTOR CRITICAL and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum OPERABLE Channels requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.1.

If the conditions are not satisfied in the time permitted, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and reduce RCS temperature &

pressure to less than 350°F/450 psig, respectively in the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

4) TS Table 3.7-6, Item 15, SG Water Level (Narrow Range), 2 per SG - Met.

Notify Crew and Shift Manager the results of Tech Spec consult.

Note: Attachment 1 follows this Section.

GO TO Step 11

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 55 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

0-AP-53.00 SRO 11. CHECK CALORIMETRIC - FUNCTIONAL IAW (1)-OPT-RX-001, ATTACHMENT 4 Directs RO to check Calorimetric Functional IAW 1-OPT-RX-001, Attachment 4.

RO Checks Calorimetric Functional using 1-OP-RX-001, Attachment 4.

Reports Calorimetric Functional.

0-AP-53.00 SRO 12. REVIEW THE FOLLOWING:

• Tech Spec 3.7

• VPAP-2802, NOTIFICATIONS AND REPORTS

• TRM SECTION 3.3, INSTRUMENTATION

• Reg Guide 1.97

• EP-AA-303, Equipment Important to Emergency Response SRO Directs STA to check items 2 through 5, above.

SRO Consults Tech Specs and determine no Action Items are impacted.

Will report references have been checked and requirements discussed with the Shift Manager.

0-AP-53.00 SRO 13. CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS RO Reports, No additional controller/instrument failure does not exist.

GOES TO Step 15.

0-AP-53.00 SRO 15. PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C Contacts Shift manger and reports failure, Procedure entered, and status of the plant. Requests OMOC and I&C be contacted concerning the failure.

Directs the STA to add the failure to the PRA calculation.

END EVENT #5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 5 Page 56 of 121 Event

Description:

Channel III, C SG NR Level Fail Low; C FRV Manual Button Failed Cue: Lead Evaluator Cue.

0-AP-53.00, Attachment 1:

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 57 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

Crew Diagnoses the Failure of #3 Seal on the C RCP based on the following alarms/indications:

Annunciator 1C-C5, RCP 1C SEAL 2 LO INLET PRESS Annunciator 1C-F4, RCP 1C SEAL LEAKOFF LO FLOW Blue Pen, 1-CH-FR-1190, RCP Seal Leakoff Flow Recorder, 0 gpm PCS Indications, C RCP:

1. 1 Seal D/P ~1118 psid

1. 2 &#3 Seal D/P - Grayed out with B (Bad) notation.

1-AP-9.00, RCP Abnormal Conditions SRO Note: SRO will direct the RO to check Seal Indications using the PCS, and review the Annunciator Response Procedure for alarms Lit on the C Annunciator Panel, (Step 3 of 1C-F4 directs response IAW 1-AP-9.00.)

CAUTION prior to Step 1: If RCP seal injection flow is lost, RCP seal or bearing temperatures can be expected to reach maximum operating limits within one to two hours, even with normal Thermal Barrier CC flow.

NOTES prior to Step 1:

• If an RCP needs to be tripped with the Reactor critical, a Reactor trip must be performed before securing the RCP.

• Attachment 1 and Attachment 6 list PCS points which may be used to monitor RCP performance. SRO provides Att. 1 & 6 to RO.

1. CHECK SEAL INJECTION - FLOW INDICATED RO Reports Yes, Seal Injection flow is (provides actual flow) and Stable.

1-AP-9.00 SRO 2. CHECK RCS PRESSURE - LESS THAN 2100 PSIG RO Reports No, RCS pressure is (provides actual pressure) and Stable.

SRO Goes TO STEP 4.

1-AP-9.00 SRO *4 CHECK RCP SEAL WATER OUTLET TEMPERATURE - LESS THAN 200°F

• PCS Point T0183A - RCP C RO Reports Yes, C RPC Seal Outlet Temperature is (provides actual Temperature) and is Stable.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 58 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-AP-9.00 NOTE prior to Step 5: First, Second, and Third Stage Seal P is indicated on the PCS, or may be determined using Notes on Attachment 1, page 2.

SRO *5. CHECK RCP SEAL STAGES - NOT FAILED

• P across each seal stage - LESS THAN 2000 PSID RO Reports Yes, #1 Seal D/P ~ 1118 psid; #2 & #3 - grayed out.

1-AP-9.00 NOTE prior to Step 6: Differential pressure of greater than 1440 psid is an indication that one seal stage has failed and a second seal stage is degrading.

Unit operation with only one failed seal stage is acceptable.

SRO *6. CHECK RCP SEAL STAGES - LESS THAN ONE SEAL STAGE FAILED

• P across each seal stage - LESS THAN 1440 PSID RO Reports Yes, Seal D/P less than1440 psid.

1-AP-9.00 CAUTION prior to Step 7: RCPs may be operated without seal water return flow for up to 30 minutes.

NOTE prior to Step 7: Attachment 3 may be used to check suspect Seal Leakoff flow instrumentation.

SRO *7. CHECK RCP SEAL LEAKOFF - LESS THAN 3.3 GPM RO Reports Yes, C RCP Seal Leakoff is 0 gpm.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 59 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-AP-9.00 CAUTION prior to Step 8: RCPs may be operated without seal water return flow for up to 30 minutes.

NOTEs prior to Step 8:

• Attachment 3 may be used to check suspect Seal Leakoff flow instrumentation.

• If Seal Leakoff flow lowers to less than or equal to 0.2 gpm, the PCS points listed below will display zero and turn gray. An actual low flow condition can be diagnosed/confirmed by changes in other parameters, including CTMT Sump and PDTT level / influent rate, P2 pressure, and Seal Leakoff temperature.

• P1CH002C, Loop A #2 Seal P

• P1CH003C, Loop A #3 Seal P

• P1CH005C, Loop B #2 Seal P

• P1CH006C, Loop B #3 Seal P

• P1CH008C, Loop C #2 Seal P

• P1CH009C, Loop C #3 Seal P

• If RCP Seal Leakoff flow lowers significantly, concurrent with a rise in PDTT inleakage, flow from the third stage leakoff to the PDTT may be included as part of total seal leakoff flow, as this means the third stage has elevated leakby and sufficient cooling remains.

SRO 8. CHECK RCP SEAL LEAKOFF - GREATER THAN OR EQUAL TO 1.2 GPM RO Reports No, C RCP Seal Leakoff is 0 gpm.

SRO Do the following:

a) Check open or open RCP SEAL LKOFF ISOL VV on affected RCP(s):

• 1-CH-HCV-1303A

• 1-CH-HCV-1303B

• 1-CH-HCV-1303C RO Reports Yes, RCP Seal Leak off isolation valves open.

SRO b) IF 1-CH-HCV-1303A/B/C closed and can NOT be opened within 30 minutes, OR flow is less than 0.2 gpm (with RCP SEAL LKOFF ISOL VV open), THEN do the following:

1) Trip the Reactor.

2) Initiate 1-E-0, Reactor Trip or Safety Injection.

3) WHEN approximately five minutes have elapsed since Reactor Trip, THEN do the following:

a. IF RCP A affected, THEN close 1-RC-PCV-1455A, Pressurizer Spray Valve From Loop A.

b. IF RCP C affected, THEN close 1-RC-PCV-1455B, Pressurizer Spray Valve From Loop C.

c. Stop the affected RCP(s).

• 1-RC-P-1A

• 1-RC-P-1B

• 1-RC-P-1C

d. GO TO Step 9.

SRO Conduct a Focus Brief; The RO will be directed to perform E-0, The BOP directed to Monitor C SG level and Acknowledge Alarms. After E-0 IAs checked, the BOP will continue 1-AP-9.00 Action to close the Spray Valve and secure C RCP.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 60 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-E-0, Reactor Trip and Safety Injection RO [1] CHECK REACTOR TRIP:

a) Manually trip reactor RO push Reactor Trip pushbutton.

b) Check the following:

• All Rods On Bottom light - LIT

• Reactor trip and bypass breakers - OPEN

• Neutron flux - LOWERING RO will check indications of Reactor Trip as above.

Reports Reactor Tripped.

SRO Acknowledges.

1-E-0 RO [2] CHECK TURBINE TRIP:

a) Manually trip the turbine RO Manually pushes both Turbine Trip pushbuttons, simultaneously.

b) Check all turbine stop valves - CLOSED RO Checks turbine stop valves closed.

c) Isolate reheaters by closing MSR steam supply SOV

• 1-MS-SOV-104 RO checks MSR Steam Supply valves closed; places 1-MS-SOV-104 in CLOSE position.

d) Check generator output breakers - OPEN (Time Delayed)

When Generator output breakers open, Reports Turbine Tripped.

SRO Acknowledges.

1-E-0 RO [3] CHECK BOTH AC EMERGENCY BUSES - ENERGIZED RO Checks Voltage indicated on H and J buses using voltmeters on #1 & #3 EDG Control Panels.

Reports, Both AC Emergency Buses Energized.

SRO Acknowledges

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 61 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-E-0 RO [4] CHECK IF SI INITIATED:

a) Check if SI is actuated:

• LHSI pumps - RUNNING

• SI annunciators - LIT

• A-F-3

• A-F-4 Checks LHSI pumps running by Breaker lights - Green On, Red Off, 0 indicated amps for LHSI pumps.

Sep a) RNO a) Check if SI is required or imminent as indicated by any of the following:

• Low PRZR pressure Reports Actual RCS pressure and Trend.

• High CTMT pressure Reports Actual CTMT pressure and Trend

• High steamline differential pressure Reports Actual Steamline D/P.

• High steam flow with low Tave or low line pressure Reports No Steam line flow indicated.

Reports SI is not in service or required, E-0 Immediate Actions Are compete, and recommend a transition to 1-ES-0.1.

SRO will check off steps of E-0. When Complete, the SRO will hand out ES-0.1 CAPs, and commence a Transition Brief.

RO will be asked to provide First-Out Annunciators and Critical Parameters.

RO will provide Manual Reactor Trip as First Out; Critical Parameters, at minimum, C RCP #3 Seal Return Flow, RCS Pressure, RCS Subcooling.

BOP will be asked to provide First Out and Critical Parameters.

BOP will provide Turbine Tripped by Reactor Trip as First Out; Critical Parameters, at minimum, C SG NR level and trend.

STA will have no Input for the Brief.

SRO will Direct BOP to continue with AP-9.00 Actions, and then throttle AFW Flow using ES-0.1, Att. 5 guidance (Transient AFW Flow Control).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 62 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-AP-9.00, Step 8, RNO 3)

BOP 3) WHEN approximately five minutes have elapsed since Reactor Trip, THEN do the following:

a. IF RCP A affected, THEN close 1-RC-PCV-1455A, Pressurizer Spray Valve From Loop A.

Notes that A RCP not effected, GOES TO Substep b.

b. IF RCP C affected, THEN close 1-RC-PCV-1455B, Pressurizer Spray Valve From Loop C.

Takes C RCS Loop Spray Valve Controller, 1-RC-PC-1444H, to Manual and Checks Demand at 0%.

c. Stop the affected RCP(s).

• 1-RC-P-1A

• 1-RC-P-1B

• 1-RC-P-1C Secures C RCP.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 63 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-ES-0.1, Reactor Trip response, Attachment 5 BOP 1. Maintain minimum AFW flow of 540 gpm with RCP(s) in service until one SG Narrow Range level is greater than 12%.

Initials Step.

2. Maintain minimum AFW flow of 350 gpm with NO RCPs running, until one SG Narrow Range level is greater than 12%.

Marks N/A NOTE prior to Step 3: AFW to idle loop(s) (RCP secured), should be throttled to prevent depressurization of the SG and subsequent Header / Line SI. AFW flow between approximately 60 gpm and 100 gpm should be adequate to prevent a Header / Line SI.

3. When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50% by throttling AFW Isolation MOVs:

• SG A, 1-FW-MOV-151E and 1-FW-MOV-151F

• SG B, 1-FW-MOV-151C and 1-FW-MOV-151D

• SG C, 1-FW-MOV-151A and 1-FW-MOV-151B Throttle AFW to ~ 200 gpm A/B SG, ~100 gpm C SG

4. Isolate AFW header with deenergized Emergency Bus MOVs by closing the following header isolation valves:

Emergency Bus H deenergized: 1-FW-141 1-FW-156 1-FW-171 Emergency Bus J deenergized: 1-FW-140 1-FW-155 1-FW-170 Marks Step N/A

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 64 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-ES-0.1 NOTE: If this procedure is being entered from 1-E-0, REACTOR TRIP OR SAFETY INJECTION, following a tube leak of less than 150 gpm, 1-AP-24.01, LARGE STEAM GENERATOR TUBE LEAK, should be used for guidance instead of this procedure.

SRO *1. CHECK RCS TEMPERATURE CONTROL a) Check RCPS - ANY RUNNING RO Reports Yes, A & B RCP running (may report A/B/C running depending on BOP action - previous Page).

SRO b) Monitor RCS Average Temperature

1) STABLE AT 547°F OR

2) TRENDING TO 547°F Reports Yes, Trending to 547°F (may add stable on the Seam Dumps)..

1-ES-0.1 SRO 2. CHECK FW STATUS:

a) Check RCS Average temperatures - LESS THAN 554°F RO Reports Yes, Tave < 554 °F (may provide actual Tave Value and Trend).

SRO b) Check Feed REG valves - CLOSED RO Reports Yes, Feed Reg Valves closed.

SRO c) Close SG FW isolation MOVs

• 1-FW-MOV-154A

• 1-FW-MOV-154B

• 1-FW-MOV-154C RO Closes 1-FW-MOV-154 A/B/C (Two Handed Operation allowed per Ops Standards).

SRO d) Check AFW pumps - RUNNING

• Motor Driven AFW pumps

• TD AFW pump RO Reports Yes, MD and TD AFW pumps running.

SRO e) Check total AFW flow - GREATER THAN 540 GPM (350 GPM W/O RCPs)

RO Reports Yes, AFW Flow > 540 gpm (may report actual indicated flow, actual flowrate dependent on BOP action).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 6 Page 65 of 121 Event

Description:

C RCP #3 Seal Failed Cue: Lead Evaluator Cue.

1-ES-0.1, Step 2, Continued SRO f) Check emergency buses - BOTH ENERGIZED RO Reports Yes, both emergency energized.

SRO g) Control feed flow to maintain narrow range level between 22% and 50%

RO/BOP Acknowledges direction to control AFW flow.

SRO h) Initiate Attachment 8 to restore blowdown BOP Acknowledges direction to restore Blowdown.

End EVENT #6

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 66 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

Time Position Applicants Action or Behavior Crew Diagnoses Feed Line Break in CTMT using the following Alarms/Indications.

Annunciator 1F-C6/D6/E6, STM GEN 1C CH2/CH3/CH4 HI STM LINE & HDR P

Annunciator 1A-F3/F4, SI INITIATED TRA/B Annunciator 1B-B4/B5, HI CLS TRA/B C SG NR Level lowering on 1-FW-LI-1494/1495/1496 CTMT Pressure rising on 1-LM-PI-100A/B/C/D 1-E-0 SRO Directs RO to manually backup SI and reperform High Level Steps of E-0.

Announces Transition to 1-E-0.

1-E-0, High Level Steps RO [1] Check Reactor Tripped Presses SI pushbuttons.

Checks Reactor Tripped, Reports Reactor Tripped, SRO Acknowledges.

[2] Check Turbine Tripped Checks Turbine Tripped, Reports Turbine Tripped, SRO Acknowledges.

[3] Check AC Emergency Buses - Both energized.

Checks both AC emergency buses energized, Reports both AC Emergency buses energized, SRO Acknowledges.

[4] Check SI Initiated Checks LHSI Pump A/B running, Annunciator A-F3 and A-F4 LIT, checks SI flow to RCS using 1-SI-FI-1961/1962/1963, 1943, 1943A.

Reports E-0 Immediate Actions are complete with SI in service, SRO Acknowledges.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 67 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-0 SRO Conducts Commensurate Brief, queries Crew concerning items identified that have a higher priority than responding to the Fault on C SG. SRO closes Brief.

SRO hands-out E-0 CAPs, assigns RO/ BOP to complete E-0, Attachment 8, Part A for the C SG (This Section), then perform E-0, Attachments 1, 2, 3, and 4 (Event 8).

STA When the Crew has identified that CTMT pressure has exceeded the Hi Hi CLS setpoint (23 psia) and no CS/RS is running, will hand the SRO the CTMT Status Tree marked to show FR-Z.1 Entry on ORANGE Path.

SRO Announces Transition of FR-Z.1.

CT-4 Start Time: _______________

BOP Suspend performance of E-0 Attachments until exit from FR-Z.1.

1-FR-Z.1, Response to Containment high Pressure CAUTION prior to Step 1: If 1-ECA-1.1, LOSS OF EMERGENCY COOLANT RECIRCULATION, is in effect, containment spray systems should be operated as directed by 1-ECA-1.1, instead of Step 1 below.

SRO 1. CHECK IF CS REQUIRED:

a) Check CTMT pressure - HAS INCREASED TO GREATER THAN 23 PSIA RO Reports Yes, CTMT pressure has exceeded 23 psia (may report actual pressure and Trend.

SRO b) Check CS pumps - RUNNING RO Reports No, CS pumps not running.

SRO continues with Substep b) RNO.

SRO b) RNO IF RWST level greater than 3%, THEN start CS pumps. IF any CS pump can NOT be started, THEN monitor OSRS pumps for cavitation. IF cavitation is indicated, THEN put affected OSRS pump in PTL.

RO Reports Yes, RWST level is > 3%, starts 1-CS-P-1A and 1-CS-P-1B.

CT-3 Start Time: ______________

SRO CT-3: Terminate CS and SI flow from the RWST prior to transition to 1-ES-1.3, Transfer to Cold Leg Recirculation, at RWST level of 20%.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 68 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-FR-Z.1, Response to Containment high Pressure, Step 1, Continued.

SRO c) Check CS system valves - OPEN c) Manually align CS valves.

• 1-CS-MOV-100A

• 1-CS-MOV-100B

• 1-CS-MOV-101A and B

• 1-CS-MOV-101C and D

• 1-CS-MOV-102A and B RO Opens Valves listed above.

SRO d) Stop all RCPs RO Secures 1-RC-P-1A and 1-RC-P-1B.

CT-4 Stop Time: ______________

Critical Task: (CT-4) Secure A/B RCPs on loss of support conditions (Cooling Water flow) prior to receipt of RCP Frame Danger Annunciator (high vibrations). Approximately 22 minutes following CTMT pressure exceeding the Hi-Hi-CLS setpoint, Annunciator 1C-H4, RCP Frame Danger, will be received if the RCPs have not been secured. Failure to secure the RCPs when directed will adversely complicate Plant Recovery following blowdown of the faulted SG by preventing the use of the RCPs.

1-FR-Z.1 SRO 2. CHECK SW FLOW TO RS HXs - Align valves as necessary.

GREATER THAN 4750 GPM a) Check the following valves - OPEN

• 1-SW-MOV-103A, B, C, and D

• 1-SW-MOV-104A, B, C, and D

• 1-SW-MOV-105A, B, C, and D RO Reports No, Valves are closed.

Opens Valves listed above.

When Valves have been manipulated, RO checks SW flow to RSHXs.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 69 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-FR-Z.1 SRO 3. CHECK RS SYSTEMS:

a) Check RWST level -LESS THAN 60%

RO Reports No, RWST level is (provides actual level and Trend).

SRO a) Do the following:

1) Monitor RWST level.

2) WHEN RWST level is less than 60%, THEN perform Steps 3b and 3c.

RO Acknowledges direction to monitor RWST level.

SRO GOES TO step 4 1-FR-Z.1 SRO 4. CHECK INTAKE CANAL LEVEL - GREATER THAN 24 FT BOP Reports Yes, canal level is (provides canal level and Trend).

1-FR-Z.1 SRO 5. CHECK CTMT ISOLATION VALVES - CLOSED IAW ATTACHMENT 1 Provides Attachment 1 to BOP. BOP perform Attachment 1 (Attachment 1 on Page 72).

1-FR-Z.1 SRO 6. CHECK MSTVs - CLOSED RO Reports No, MSTVs Open. RO Closes MSTVs.

1-FR-Z.1 CAUTIONs prior to Step 7:

• At least one SG must be maintained available for RCS cooldown.

• If all SGs are faulted, at least 60 gpm [100 gpm] feed flow should be maintained to each SG.

SRO 7. CHECK IF FEED FLOW SHOULD BE ISOLATED TO ANY SG(s):

a) Check pressures in all SGs:

• ANY SG PRESSURE DECREASING IN AN UNCONTROLLED MANNER OR

• ANY SG COMPLETELY DEPRESSURIZED BOP Reports Yes, C SG completely Depressurized.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 70 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-FR-Z.1, Step 7, Continued SRO b) Isolate feed flow to affected SG(s):

1) Close or check closed SG FW isolation MOV(s)

BOP Reports Yes, SG FW isolation MOVs closed.

SRO 2) Close or check closed SG Feed REG valve(s)

BOP Reports Yes, FRVs are closed.

SRO 3) Close or check closed SG FW bypass flow valve(s)

BOP Reports Yes, FRV bypass HCVs are closed.

SRO 4) Close AFW MOV(s)

BOP Closes 1-FW-MOV-151A and 1-FW-MOV-151B.

Reports AFW to C SG isolated.

1-FR-Z.1 SRO 8. CHECK SERVICE WATER AVAILABLE:

a) Check Intake Canal level - BEING MAINTAINED BY CIRC WATER PUMPS BOP Reports Yes, Canal level being maintained by CW pump.

SRO b) RETURN TO procedure and step in effect SRO announces transition to E-0, RO and BOP Acknowledge.

SRO directs BOP to Continue with E-0 Attachment 1, 2, 3, and 4.

Note: Attachment 1 through 4 of E-0 are contained in Event 8.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 71 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-FR-Z.1, Attachment 1 Note: Valves located in Boxes above will be found out of position, and closed by the BOP.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 72 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-0 SRO Direct RO to perform Attachment 8, Part A:

NOTE: This attachment shall NOT be used if all three SGs are faulted.

PART A RO

1. Check SI is in progress. IF SI NOT in progress, THEN RETURN TO procedure step in effect.

2. Check running or start AFW Pumps, as necessary.

• 1-FW-P-3A

• 1-FW-P-3B

• 1-FW-P-2 AFW pumps will be identified as Running.

3. Identify Faulted SG by one of the following conditions:

• Any SG depressurizing in an uncontrolled manner

• Any SG completely depressurized C SG will be identified as Faulted.

CAUTION: At least one SG must be maintained available for RCS heat sink

4. Isolate the faulted SG(s) by performing the following.

a. Check closed or close faulted SG(s) MSTV:

• SG A, 1-MS-TV-101A

• SG B, 1-MS-TV-101B

• SG C, 1-MS-TV-101C All MSTVs identified as closed.

b. Check closed or close faulted SG(s) AFW Isolation MOVs:

• SG A, 1-FW-MOV-151E and 1-FW-MOV-151F

• SG B, 1-FW-MOV-151C and 1-FW-MOV-151D

• SG C, 1-FW-MOV-151A and 1-FW-MOV-151B 1-FW-MOV-151A and 1-FW-MOV-151B identified as closed.

c. Check closed or close faulted SG(s) PORV:

• SG A, 1-MS-RV-101A

• SG B, 1-MS-RV-101B

• SG C, 1-MS-RV-101C C SG PORV identified as closed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 73 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-0, Attachment 8, Continued RO d. Select the faulted SG AFW MOVs using the following switches:

• H TRAIN DISABLE SELECTOR SWITCH

• J TRAIN DISABLE SELECTOR SWITCH Turns H Train Switch to A; Turns J Train Switch to B.

e. Defeat the auto-open signal for the selected MOVs by placing the following key switches in the DISABLE SELECTED position:

• H TRAIN AUTO OPEN ENABLE SWITCH

• J TRAIN AUTO OPEN ENABLE SWITCH Turns H and J Train Switches to DISABLE SELECTED.

CAUTION: Feed flow should remain isolated to any faulted SG if intact SG(s) are available for heat sink.

5. Control Feed flow to the intact SGs IAW the following requirements:

• Minimum AFW flow is 350 gpm [450 gpm] with SI initiated, until one SG Narrow Range level is greater than 12% [18%]

• When minimum heat sink has been verified, AFW MOVs should be controlled to maintain intact SG Narrow Range levels between 22% and 50% by throttling AFW Isolation MOVs:

• SG A, 1-FW-MOV-151E and 1-FW-MOV-151F

• SG B, 1-FW-MOV-151C and 1-FW-MOV-151D

• SG C, 1-FW-MOV-151A and 1-FW-MOV-151B Throttles AFW to the A & B SG as necessary.

Hands SRO completed Attachment.

1-E-0, Step 6 SRO *6. CHECK RCS AVERAGE TEMPERATURE

• STABLE AT 547°F OR

• TRENDING TO 547°F RO Reports RCS Tave and Trend.

Note: Depending on Crew progression, RCS Tave is expected to be <547°F and rising at this time.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 74 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-0 SRO 7. CHECK PRZR PORVs AND SPRAY VALVES:

a) PRZR PORVs - CLOSED RO Reports PRZR PORVs Closed.

SRO b) PRZR spray controls

• Demand at Zero OR

• Controlling pressure SRO c) PORV block valves - AT LEAST ONE OPEN RO Reports Yes, Both PRZR PORV block valves open.

1-E-0 NOTE prior to Step 8: Seal injection flow should be maintained to all RCPs.

SRO *8. CHECK RCP TRIP AND MINIFLOW RECIRC CRITERIA:

a) Charging Pumps - AT LEAST ONE RUNNING AND FLOWING TO RCS RO Reports Yes, 2 are running and flowing to the RCS.

Note: Depending on BOP progression through the Attachments, 3 CH pumps may still be running at this time.

SRO b) RCS subcooling - LESS THAN 30°F [85°F]

RO Reports No, subcooling is (provides value and Trend).

SRO GOES TO Step 9.

1-E-0 SRO 9. CHECK IF SGs ARE NOT FAULTED:

• Check pressures in all SGs:

• STABLE OR RISING AND

• GREATER THAN 100 PSIG RO Reports NO, C SG is Faulted.

SRO Announces Transition to 1-E-2, Faulted Steam Generator Isolation.

Crew Acknowledges Transition to E-2.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 75 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-2 SRO Will conduct Commensurate Brief to poll RO/BOP if any item should have a higher priority than continuing with E-2 with goal of reaching E-1 and terminating SI.

SRO closes brief. BOP become available for Crew response at this time.

STA/Crew may identify CTMT is no longer Adverse.

1-E-2 SRO CAUTIONs prior to Step 1:

• At least one SG must be maintained available for RCS cooldown.

• Any faulted SG or secondary break should remain isolated during subsequent recovery actions unless needed for RCS cooldown.

1. CHECK MSTV AND BYPASS VALVE ON AFFECTED SG(s) - CLOSED RO/BOP Reports Yes, C SG MSTV is closed.

1-E-2 SRO 2. CHECK IF ANY SG SECONDARY SIDE IS INTACT:

• Check pressures in all SGs - ANY STABLE OR RISING RO/BOP Reports Yes, A & B SG ae intact.

1-E-2 SRO 3. IDENTIFY FAULTED SG(S):

a) Check pressures in all SGs:

• ANY SG PRESSURE LOWERING IN AN UNCONTROLLED MANNER OR

• ANY SG COMPLETELY DEPRESSURIZED RO/BOP Reports Yes, C SG is faulted.

1-E-2 CAUTION prior to Step 4: If the TD AFW pump is the only available source of feed flow, steam supply to the TD AFW pump must be maintained from at least one SG.

SRO 4. ISOLATE FAULTED SG(s):

• Check closed or close faulted SG AFW MOV(s)

RO/BOP Reports Yes, C SG AFW MOVs are closed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 76 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-2, Step 4, Continued SRO

• Check faulted SG AFW MOVs auto-open signal - DEFEATED RO/BOP Reports Yes, C SG AFW MOV Auto open signal defeated.

SRO

• Isolate MFW line:

a) Check closed or close faulted SG MFW Isolation MOV(s)

RO/BOP Reports Yes, C SG MFW isolation MOV is closed.

SRO b) Locally close faulted SG feed REG bypass valve manual isolation valve(s):

• 1-FW-26 for SG A

• 1-FW-57 for SG B

• 1-FW-88 for SG C RO/BOP Directs Service Building Operator to close 1-FW-88.

SRO

• Locally close faulted SG steam supply valve(s) to TD AFW pump:

• 1-MS-87 for SG A

• 1-MS-120 for SG B

• 1-MS-158 for SG C RO/BOP Directs Service Building Operator to close 1-MS-158.

SRO

• Check closed or close faulted SG PORV(s)

RO/BOP Reports Yes, C SG PORV closed.

SRO

• Check closed or close faulted SG blowdown TVs RO/BOP Reports Yes, C SG blowdown TVs are closed.

1-E-2 SRO 5. CHECK ECST LEVEL - GREATER THAN 20%

BOP Reports Yes, ECST level (provides actual level and trend).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 77 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-2 SRO 6. CHECK SECONDARY RADIATION:

a) Consult with TSC or SEM to determine if FAULTED SG should be aligned for sampling b) Initiate periodic activity sampling of INTACT SGs IAW Attachment 1 SRO contacts the Shift Manager to accomplish Substep a) and b) above.

SRO c) Check unisolated secondary radiation monitors:

• Main steamline

• TD AFW pump exhaust

• Condenser air ejector BOP Reports Yes, main steamline, TDAFW exhaust, and air ejector RM normal.

SRO may request Air ejector status from Unit 2 Operator.

SRO d) Secondary Radiation - NORMAL RO/BOP Report Yes, secondary radiation is Normal.

1-E-2 SRO 7. ADJUST INTACT SG PORVs TO LIMIT RCS HEATUP:

a) Determine required PORV pressure setting using Attachment 2.

Hands Attachment 2 to BOP. Attachment 2 follows this Section.

SRO b) Adjust intact SG PORVs pressure setting BOP Acknowledges direction and uses Attachment 2 to set the approximate A & B SG PORV pressure setpoint.

SRO c) Stabilize RCS temperature by controlling SG PORV pressure setting BOP Adjusts A & B SG PORV setpoint further to limit RCS temperature rise.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 78 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-2 SRO 8. CHECK IF SI FLOW SHOULD BE REDUCED:

a) RCS subcooling based on CETCs - GREATER THAN 30°F [85°F]

BOP Reports Yes, Subcooling is (provides actual value and trend)

SRO b) Secondary heat sink:

• Total feed flow to INTACT SGs - GREATER THAN 350 gpm [450 gpm]

OR

• Narrow range level in at least one intact SG - GREATER THAN 12%

[18%]

BOP Reports Yes A & B SG NR level is (provides value and trend) and A & B SG AFW is (provides actual value and trend).

Note: SRO/BOP may discuss isolating AFW flow A & B SG if NR level is adequate.

SRO c) RCS pressure - STABLE OR RISING RO Reports Yes, RCS pressure is (provides value and trend).

SRO d) PRZR level - GREATER THAN 22% [50%]

RO Reports Yes, PRZR level is (provides value and trend).

SRO e) GO TO 1-ES-1.1, SI TERMINATION Announces transition to ES-1.1. RO/BOP Acknowledge.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 79 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-E-2, Attachment 2:

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 80 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

Time Position Applicants Action or Behavior 1-ES-1.1 SRO Will conduct a commensurate Brief to determine if there are any issues with a higher priority than terminating SI flow. SRO will hand out ES-1.1 CAPs and conclude the brief.

1-ES-1.1 SRO 1. RESET BOTH TRAINS OF SI RO Reports Yes, SI is reset.

1-ES-1.1 SRO 2. RESET CLS:

a) Check CTMT pressure - HAS EXCEEDED 17.7 psia RO Reports Yes, CTMT pressure has exceeded 23 psia (provides value and trend.)

SRO b) CTMT pressure - LESS THAN 14 PSIA RO Reports Yes, CTMT pressure < 14 psia (provides value and trend.)

SRO c) Reset both trains of CLS if necessary RO Resets CLS using CLS reset pushbuttons.

1-ES-1.1 SRO 3. CHECK INSTRUMENT AIR AVAILABLE:

a) Check annunciator B-E NOT LIT RO Reports Yes, B-E-6 NOT LIT.

SRO b) Check at least one CTMT IA compressor - RUNNING

• 1-IA-C-4A or 1-IA-C-4B RO Reports Yes, 1-IA-C-4A running.

SRO c) Check 1-IA-TV-100 - OPEN RO Reports No, 1-IA-TV-100 Not Open.

Opens 1-IA-TV-100.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 81 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-ES-1.1 SRO 4. STOP ALL BUT ONE CHG PUMP AND PUT IN AUTO RO Stops CH-P-1B and places in Auto.

1-ES-1.1 SRO 5. CHECK RCS PRESSURE - STABLE OR RISING RO Reports Yes, RCS pressure is (provides value and trend.)

1-ES-1.1 SRO 6. ISOLATE HHSI TO COLD LEGS:

a) Check the following:

1) CHG pump suctions from RWST - OPEN

• 1-CH-MOV-1115B

• 1-CH-MOV-1115D RO Reports Yes, 1-CH-MOV-1115B & D open.

SRO 2) Check CHG pump miniflow Recirc valves - OPEN

• 1-CH-MOV-1275A

• 1-CH-MOV-1275B

• 1-CH-MOV-1275C

• 1-CH-MOV-1373 RO Reports Yes, CH pump mini-flow recircs open.

SRO b) Close HHSI to Cold Leg:

• 1-SI-MOV-1867C

• 1-SI-MOV-1867D

• 1-SI-MOV-1842 RO Closes 1-SI-MOV-1867C & D. Reports 1-SI-MOV-1867C/D and 1-SI-MOV-1842 closed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 82 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-ES-1.1 SRO 7. ___ ESTABLISH CHG FLOW:

a) Close CHG flow control:

• 1-CH-FCV-1122 RO Places 1-CH-FCV-1122 in Manual and opens valve.

SRO b) Check CHG line isolation - OPEN

• 1-CH-HCV-1310A RO Reports Yes, 1-CH-HCV-1310A open.

SRO c) Open CHG line isolation MOVs:

• 1-CH-MOV-1289A

• 1-CH-MOV-1289B RO Opens 1-CH-MOV-1289A and B.

SRO d) Establish at least 40 gpm charging flow using CHG flow control RO Adjusts 1-CH-FCV-1122 to ~40 gpm on 1-CH-FI-1122, CHG LINE FLOW 1-ES-1.1 SRO 8. CONTROL CHG FLOW TO MAINTAIN PRZR LEVEL RO May close 1-CH-FCV-1122 to control PRZR level/press.

1-ES-1.1 SRO 9. CHECK IF LHSI PUMPS SHOULD BE STOPPED:

a) Check LHSI pumps - ANY RUNNING WITH SUCTION ALIGNED TO RWST RO Reports, Yes B LHSI pump running with suction aligned to the RWST.

SRO b) Stop LHSI pumps and put in Auto RO Stops 1-SI-P-1B and places in Auto.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 83 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-ES-1.1 SRO 10. CHECK SI FLOW NOT REQUIRED:

a) RCS subcooling based on CETCs - GREATER THAN 30°F [85°F]

RO Reports, Yes and provides Subcooling value and trend.

SRO b) Control charging flow to maintain PRZR level greater than 22% [50%]

Acknowledges direction.

1-ES-1.1 SRO 11. CHECK IF CS SHOULD BE STOPPED:

a) Spray pumps - ANY RUNNING RO Reports, Yes both spray pumps running.

SRO b) Check for either of the following:

• CTMT pressure - LESS THAN 12 psia OR

• Both of the following:

• RWST - LESS THAN 3%

AND

• CS Pump amps - FLUCTUATING RO Reports Yes, provides CTMT pressure and Trend; provides RWST level and trend; CS pump amps not fluctuating.

SRO c) Stop OSRS pumps and put in AUTO:

• 1-RS-P-2A

• 1-RS-P-2B RO Stops 1-RS-P-2A and 2B and places in AUTO.

SRO d) Stop CS pumps and put in PTL:

• 1-CS-P-1A

• 1-CS-P-1B RO Stops 1-CS-P-1A and 1B.

CT-3 Stop Time: ______________

CT-3: Terminate CS and SI flow from the RWST prior to transition to 1-ES-1.3, Transfer to Cold Leg Recirculation, at RWST level of 20%.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 7 Page 84 of 121 Event

Description:

C SG Feed Line Break in CTMT, Hi Hi CLS Failure to Actuate Cue: Lead Evaluator Cue.

1-ES-1.1, Step 11, Continued SRO e) Close CS discharge valves:

• 1-CS-MOV-101A

• 1-CS-MOV-101B

• 1-CS-MOV-101C

• 1-CS-MOV-101D RO Closes valves listed above.

SRO f) Close CHEM ADD TK OUTLT valves:

• 1-CS-MOV-102A

• 1-CS-MOV-102B RO Closes Valves listed above.

END OF EVENT 7 END OF SCENARIO

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 85 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: 1-CH-TV-1204B, Letdown O/S TV, identified and closed in FR-Z.1, Att. 1.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 86 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 87 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 88 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: RCPS tripped in FR-Z.1; CT-4.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 89 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: BOP will flag Substeps b), c) and d) and perform these steps when RWST level reaches 60%.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 90 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 91 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: Expected that the RO has throttled AFW by time BOP reaches this Step; if not, BOP will throttle AFW.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 92 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 93 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 94 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: 1-VS-9A will be stopped

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 95 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: 1-VS-F-58B must be started.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 96 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: 1-VS-MOD-103C must be closed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 97 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: Unit 2 will notify BOP that CD flow will be throttled IAW NOTE prior to Step 10.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 98 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: Unit 2 will notify BOP that these indications match the pressure indicated on the First four gauges.

Evaluators Note: Unit 2 will notify BOP that 0-AP-50.00 has been initiated.

Evaluators Note: Unit 2 will notify BOP that Unit 2 is NOT being supplied by RSSTs, and Unit 2 RCPs are running.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 99 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: Unit 2 will take responsibility for Page 6 of Att. 3.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 100 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note: These TVs were positioned in FR-Z.1, Att. 1.

Evaluators Note:

BOP secures Fans.

Evaluators Note: Valves positioned in FR-Z.1.

Evaluators Note:

BOP Starts Pumps.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: 8 Page 101 of 121 Event

Description:

E-0 Attachment Items that Fail to Reposition on SI.

Cue: Pre-Load Failures.

Evaluators Note:

Valves positioned in FR-Z.1.

Evaluators Note: Section Not Applicable, no LOOP in effect.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: N/A Page 102 of 121 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: N/A Page 103 of 121 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Event No.: N/A Page 104 of 121 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 105 of 121 SIMULATOR OPERATORS GUIDE Simulator Scenario Checklist Perform Simulator Turnover Pre-session, and Post-session Checklist prior to the first Scenario of the day.

Perform Simulator Turnover Post-session Checklist after the last Scenario of the day.

Perform/Verify Simulator Setup:

Recall IC -403 [T-Rex: 424] (90%) and implement TRIGGER #30 to activate all passive malfunctions and verify Trigger #30 implemented.

Verify 1-SI-P-1A in Pull-To-Lock, with red (tagged) magnet Open SimView [Insight] and add the following points asp_ao_off Enter/Verify the following MALFUNCTIONS:

Trigger Malfunction Delay Ramp Trigger Value Final Type (Auto or Manual)

MS1401, 1st Stage PRSR Trnsmtr 10 120 1 0 -2 M MS-P-446, Fail Low MS2102, MS Pressure Trnsmtr MS- 10 10 3 0 +1 M PT-101B Fail High FW1309, C SG NR Level XMTR 10 60 7 0 -1 M CH-3 Fail Low RC1403, Failure of RCP-C Seal #3 10 60 9 0 100 M FW1603, C SG Feed Line Break in 10 60 11 0 100 M CNTMNT RS1001, Hi Hi CLS TR A Fail 5 11 False True M RS1002, Hi Hi Cls Fail 5 11 False True M VS0102, Pressure Switch VS-P-127B 5 11 False True M Sticks As Is VS1501, VS-PS-118A Sticks As Is 5 11 False True M (VS-F-9A)

SI2509, SI Relay CI1B Fails to 5 11 False True M Actuate FP0301, FACP07 Alarm Horn Fail 0 30 False True M FP0302, FPS PC Speaker Fail 0 30 False True M

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 106 of 121 SIMULATOR OPERATORS GUIDE Enter/Verify the following REMOTE FUNCTIONS:

Trigger Description Delay Ramp Trigger Value Final Type (Auto or Manual)

FW_88, C FRV Bypass Isolation 0 60 14 100 0 Man MS_158, C Stm Line to TDAFW pp 0 60 15 100 0 Man SIP1A_BKRPOS 10 0 30 Connect Disconnect Man Enter/Verify the following SWITCH OVERRIDES:

Override Set Condition Trigger CHLC112C_SETPT, LCV-1115A VCT Set to 0, 10 Second Delay, 10 Second Ramp 5 LVL SETPT, Fail Low FWFC498F_MANUAL O/R OFF, 5 Sect TD 7 TVCC105A_Close 5 Sec Delay, O/R ON 21 TVCC105B_Close 5 Sec Delay, O/R ON 21 TVCC105C_Close 5 Sec Delay, O/R ON 21 Enter/Verify the following EVENT TRIGGERS:

Trigger# EVENT Command 21 CVP000>23, CTMT Pressure >23 CTMT Pressure > 23 psia, Trigger 21 actuates to O/R psia Closed TV-CC-105 A thru C

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 107 of 121 SIMULATOR OPERATORS GUIDE Trigger Summary:

TRIGGER TYPE DESCRIPTION 1

Manual Actuate Event 2, Turbine 1 Stage Failure st Actuate Event 3, B SG PORV Open 3 Manual Actuate Event 4, CHLC112C_SETPT Fail , CH-LCV-1115A Divert 5 Manual Opens Actuate Event 5, C SG NR level Fail Low coupled with C FRV 7 Manual Manual Lower Button fail 9 Manual Actuate Event 6, C RCP #3 Seal Fail; RX Trip - E-0, ES-0.1 Actuate Event 7, Feed Break in CTMT; Also Fails Hi Hi CLS TR A&B 11 Manual Actuation, 58A fan start, VS-F-9A trip, VS-MOD-103C and CH-TV-1204B closure.

14 Manual Closes 1-FW-88, C FRV Bypass Manual Isolation 15 Manual Closes 1-MS-158, C Stm Line to TDAFW pump Overrides TV-CC-105A/B/C closed when CTMT pressure >23 psia to 21 Auto establish conditions for RCP secure [CT].

30 Manual Initial setup; 1-SAI-P-1A racked out, FPS panel alarms failed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 108 of 121 SIMULATOR OPERATORS GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components: 1-SI-P-1A Verify All pink magnets collected from previous scenarios.

Verify vertical board PCS monitor on ALARM SCREEN.

Reset ICCMs.

Verify all calcalc points are displayed on PCS: U9103, U9104, U9105V.

Verify Component Switch Flags; 1-VS-F-58A and 1-VS-F-58B switches (AUTO AFTER STOP).

Verify Brass Caps properly placed (Hi-Hi CLS, MSTVs, CH-MOV-1350, CW and SW MOVs, CTMT Hogger suction, CNDSR Vacuum breaker).

Radiation Monitors all clear.

Verify SG PORVs set for 1035 psig.

Verify D bank rod height at 209 steps and Bank Overlap Counter at 593.

Advance Charts.

Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset).

Verify SYNC keys in proper place.

Verify MOL reactivity plans and benchboard Reactivity Placard is current.

Reset Blender Integrators for Boric Acid to 100 and PG to 1000.

Verify Simulator Session In Progress light is turned ON.

Verify no persons are logged onto network computer to ensure no procedures displayed.

Verify PCS time matches Sim time.

Spot check all ARPs are clean, verify the following ARPs are clean.

1C-C5 1C-F4 1F-C6 1F-D6 1F-E6 1F-F4 1F-F5 1F-F6 1H-A4 1H-A7 1H-C7 1H-G5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 109 of 121 SIMULATOR OPERATORS GUIDE 1H-G6 1H-G7 1H-H7 Verify CLEAN copies of the following procedures are in place.

0-AP-53.00 (4) 1-AP-38.00 1-AP-9.00 1-OP-TM-005 (3),

marked through Step 5.4.14 1-E-2 1-ES-1.1 FR-Z.1 Ramp Plan 1-OP-ZZ-002 1-OPT-RX-001 1-OP-CH-007 1-OP-CH-021 (3) 1-MOP-FW-015 (3) 1-OPT-RP-001

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 110 of 121 SIMULATOR OPERATORS GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

TEAM 1 TEAM 2 TEAM 3 SRO RO BOP Ask for and answer questions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 111 of 121 SIMULATOR OPERATORS GUIDE Conduct shift turnover:

The initial conditions.

Unit conditions 90% power, Stable.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect.

Return to service expected later this shift.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to ramp Unit 1 to 100% IAW 1-OP-TM-005, Unit Ramping Operations, Starting at Step 5.4.15; an approved Ramp Plan and a blank copy of 1-OP-CH-021, . Alternate Dilution Using Blender, is provided.

The last shift borated or diluted as necessary to maintain Tave/Tref matched.

Blend is in the Blender.

When the team has accepted the shift, proceed to the Session Conduct Section.

Op-Test No.: Surry 2017-3 Scenario No.: 3 Page 112 of 121 SIMULATOR TURNOVER CHECKLIST Pre Session Checks:

Safety Injection Section (Magnets) CW/SW Section RCS Section CVCS SI-MOV-1865A R G Brass Caps Tcold Loop Stop Pos (R - O)

Core Life Plaque R G SW MOVs A BC SI-MOV-1865B 103A 103B 103C 103D Loop Bypass Valves (G - C)

Ramp Plan Book SI-MOV-1865C R G A BC OP-RX-010 Book CW MOVs SI-MOV-1869A R G Thot Loop Stop Pos (R - O) PG Int Set 1000 106A 106B 106C 106D A BC SI-MOV-1869B R G BA Int Set 100 SI-MOV-1890A R G T/O CW Inlet Throttle Plaques (10%)

100A 100B 100C 100D SFP PPs Pwr Norm Alt Tavg/Tref Rec.

SI-MOV-1890B R G T/O PZR Level Recorder NI-NR-B SI-MOV-1890C R G T/O Brass Cap CLS TR A CLS TR B CTMT Hogger Suction Cap Group Step Ctrs CERPIs CH-MOV-1350 Main Steam/Feedwater Electrical/VSP PCS RM/WD/BR SG PORVs Set Synch Key PCS Main Screen RM-112 A BC MSTV Caps A BC SVB Power H J U9103 RM-113 A B C SF/FF Rec Scale LO System Switches U9104 Comm RM Pwr 1J 2J Cond Vac Bkr Cap VS-F-58A Pwr H J Grn Flag U9105V Synch Key VS-F-58B Pwr H J Grn Flag Alarm Screen (List)

Post Session Checks:

PCS Screens (Cleared/Display) RO BOP SM STA PCs Logged OFF (including Booth) Phone cleared Recall IC-1 Advance Charts Procedures Changed Red Light Binders Stored Trash Picked Up/Emptied Vacuum Reqd?

Pink Magnets in Drawer BB and VB Scenario Magnets removed E-Mail to SSG Required DVD Finalized EAL Charts Note Pads Manning Sheets Sticky Tabs (SRO/SM/ARPs) Markers (ARPs) Personnel/Comms Tracking Sheets (Booth)

Floor timers reset/In place Booth timers reset/In place Printers ready/have paper

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 113 of 121 SIMULATOR OPERATORS GUIDE Session Conduct:

• Ensure conditions in Simulator Set-up are established.

EVENT 1 Ramp to 100% Power IAW 1-OP-TM-005 BOOTH: 30 minutes prior to beginning the Scenario, provide the Crew with a copy of 1-OP-TM-005, Unit Ramping Operations, signed off to Step 5.4.15; a copy of the approved Ramp Plan; and a blank copy of 1-OP-CH-021, Alternate Dilution Using Blender.

Operations Supervisor/Management/Work Week Coordinator:

• If contacted, Acknowledge start of Ramp to 100% power Field Operators:

• If Contacted as Turbine Building Operator, you have been briefed and are monitoring Turbine Building parameters.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 114 of 121 SIMULATOR OPERATORS GUIDE EVENT 2 Channel III Turbine First Stage Pressure Fails Low When cued by examiner, implement Trigger #1.

Critical Task: (CT-1), Place rod control in manual prior to reactor trip and SI on High Steam Flow.

Should the RO/BOP fail to take timely action to place rod control in manual, a reactor trip and SI will occur on High Steam Flow. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Operations Supervisor/Management:

• If contacted, will acknowledge the failure of Channel III Impulse Pressure (1-MS-PI-1446);

entry into 0-AP-53.00, acknowledge but confirm entry into TS LCOs.

• If contacted, will concur with SRO recommendation to perform 1-OP-RP-001 at this time when I&C ready to place the channel in trip.

• If contacted, will take responsibility for writing the CR.

STA:

• If contacted, will acknowledge failure of Channel III Impulse Pressure (1-MS-PI-1446); entry into 0-AP-53.00, direction to review TS for the failure.

• If asked, will report to the Control Room (10 minutes following request.)

• When directed, will review TRM Section 3.3, RG 1.97, TS 3.7, VPAP-2802, and EP-AA-303 and notify SRO that review have been completed and results discussed with the Shift Manager.

• If the team has a transient brief: The STA will have no input for the brief.

Field Operators:

• If contacted, field operators will report no issues in the area of the Impulse Pressure transmitter.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge instrumentation failure and notify I&C commence investigations and/or efforts to place the channel in trip.

Unit 2 Operator:

• If notified, will acknowledge failure of 1-MS-PI-1446.

• When asked: provide Copy of 1-OPT-RP-001 to Unit 1 SRO/BOP.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 115 of 121 SIMULATOR OPERATORS GUIDE Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 116 of 121 SIMULATOR OPERATORS GUIDE EVENT 3 B SG PORV Opens, 1-MS-PT-101B Fail High.

When cued by examiner, implement Trigger #3.

Operations Supervisor/Management:

• If contacted, acknowledge failure of 1-MS-PT-101B, MS Line B Press, entry into 0-AP-53.00 and 1-AP-38.00.

• If asked will take responsibility for writing CR.

STA:

• If contacted, acknowledge failure of 1-MS-PT-101B, B SG PORV input, entry into 0-AP-53.00 and 1-AP-38.00.

• If asked, will report to the Control Room (10 minutes following request).

• If asked, will take responsibility for writing CR.

• If directed, will add failed transmitter to PSA analysis.

• Crew transient brief: The STA will have no input for the brief.

Maintenance/ Work Week Coordinator:

• If contacted, will acknowledge the failure of 1-MS-PT-101B, notify I&C to commence investigation.

Field Operators: (3 minutes from notification to report to MCR).

• If contacted, will report 1-MS-PT-101B, MS Line B Press, indications indicates off-scale high

(> 1450 psig) on the Aux Shutdown Panel.

Unit 2:

• If contacted, will acknowledge Failure of 1-MS-PT-101B, and Entry into 0-AP-53.00/1-AP-38.00.

HP:

• If contacted, will acknowledge short term lift of B SG PORV.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 117 of 121 SIMULATOR OPERATORS GUIDE Role-play as other individuals as needed.

EVENT 4 CVCT Level Controller Setpoint Fail Low, 1-CH-LCV-1115A Divert.

When cued by examiner, implement Trigger #5.

Operations Supervisor/Management:

• If contacted, will acknowledge failure of VCT level controller and entry into 0-AP-53.00.

• If contacted, will take responsibility for writing the CR.

STA:

• If contacted, will acknowledge failure of VCT level controller and entry into 0-AP-53.00.

• If asked, will report to the Control Room (10 minutes following request.)

• When directed, will review TRM Section 3.3, RG 1.97, TS 3.7, VPAP-2802, and EP-AA-303 and notify SRO that review have been completed and results discussed with the Shift Manager.

• If the team has a transient brief: The STA have no input for the brief.

• When directed, will review TRM Section 3.3, RG 1.97, TS 3.7, VPAP-2802, and EP-AA-303 and notify SRO that review have been completed and results discussed with the Shift Manager.

Field Operators:

• If asked, will find no abnormal conditions in the vicinity of the VCT.

Maintenance/ Work Week Coordinator:

• If contacted, will notify I&C of the failure and commence investigation.

Unit 2:

• If contacted, will acknowledge VCT divert.

Role-play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 118 of 121 SIMULATOR OPERATORS GUIDE EVENT 5: Channel III C SG NR Level Fail Low/Failure of Controller to Shift to Manual.

When cued by examiner, implement Trigger #7.

Critical Task: (CT-2): Control C SG NR level to prevent an automatic turbine trip/reactor trip on high SG NR level at 75%. Should the BOP fail to take timely action to control C SG NR level an automatic turbine trip/reactor trip will occur. Actuation of the reactor protection system for this event would be considered failure of this CT. A Plant Representative will be available for consult during the Scenario.

Operations Supervisor/Management:

• If contacted, acknowledge failure of 1-FW-LI-1496, C SG Chan. III NR Level, C FRV Controller failing to shift to Manual, C SG level controlled by throttling 1-FW-MOV-154C, C FRV isolation, and entry into 0-AP-53.00.

• If contacted, will acknowledge TS LCO entry to place channel in trip, but not confirm/deny SRO determination of LCO.

• If requested, will notify OMOC of the failure.

• If requested, will print copies of 1-MOP-FW-015, Main Feedwater Regulating Valve Jacking Operations, for the MCR and take responsibility to brief Field Operators to place C FRV on the Jack.

• If requested, will contact Training to request JITT for Field Operators for placing C FRV on the Jack.

• If requested, will take responsibility for writing CR.

Maintenance/ Work Week Coordinator:

• If contacted, will notify I&C of the failure and commence investigation.

Unit 2 Operator:

• If requested, Unit 2 BOP unavailable to assist Unit 1.

• If requested, provide Unit 1 SRO with copy of 1-MOP-FW-015, Main Feedwater Regulating Valve Jacking Operations.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 119 of 121 SIMULATOR OPERATORS GUIDE STA:

• When contacted, The STA will acknowledge failure of C SG NR Level transmitter, C SG NR level controlled using 1-FW-MOV-154C.

• When contacted, will report to the Control Room (10 minutes after request).

• Crew transient brief: Will have no input for the brief.

• When notified, will acknowledge entry into TS LCO for the failed channel, will not confirm SRO determination of TS LCO.

• If requested, will take responsibility for writing CR.

• When directed, will review TRM Section 3.3, RG 1.97, TS 3.7, VPAP-2802, and EP-AA-303 and notify SRO that review have been completed and results discussed with the Shift Manager.

Field Operators: (3 minutes from request to report to the MCR).

• If directed, to locally check for abnormal condition of C FRV, report no local abnormalities found.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 120 of 121 SIMULATOR OPERATORS GUIDE EVENTS 6 : #3 Seal Fail C RCP.

When cued by examiner, implement Trigger #9.

Operations Supervisor/Management:

• If contacted, acknowledge failure of #3 Seal C RCP, entry into AP-9.00, and impending trip of Unit 1.

• If requested, will take responsibility for writing CR.

• If requested, will notify OMOC.

STA:

• When notified, will acknowledge failure of #3 Seal on C RCP and impending trip of Unit 1.

• If the team has a transient brief: The STA will have no input.

Unit Two:

• If requested, acknowledge CTMT RM alarms, and perform ARP actions.

• If contacted, Unit Two has implemented AP-50.00, and all conditions on U2 are normal.

Role play as other individuals as needed.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2017-301 Scenario No.: 3 Page 121 of 121 SIMULATOR OPERATORS GUIDE EVENT 7/8 Feed Line Break in CTMT/HI HI CLS Failure/SI Relay Failures-When cued by examiner, implement Trigger #11.

Critical Task: (CT-3): Terminate CS and SI flow from the RWST prior to transition to 1-ES-1.3, Transfer to Cold Leg Recirculation, at RWST level of 20%. Critical Task start begins at initiation of CS and SI flow from RWST and ends when CS and SI flow is terminated. Time to reach RWST level of 20% is approximately 50 minutes.

Critical Task: (CT-4) Secure A/B RCPs on loss of support conditions (Cooling Water flow) prior to receipt of RCP Frame Danger Annunciator (high vibrations). Approximately 22 minutes following CTMT pressure exceeding the Hi-Hi-CLS setpoint, Annunciator 1C-H4, RCP Frame Danger, will be received if the RCPs have not been secured. Failure to secure the RCPs when directed will adversely complicate Plant Recovery following blowdown of the faulted SG by preventing the use of the RCPs.

Booth: Trigger 21 actuates when CTMT pressure exceeds 23 psia, causing TV-CC-105A/B/C to close Operations Supervisor/Management:

• If contacted, will acknowledge E-0 entry with SI in service.

• If contacted, will notify OMOC.

Unit 2 Operator:

• If radiation alarms sound on the radiation alarm panel, silence the alarms when directed and report the alarm to the Unit 1 SRO.

• When asked, E-0, Attachment 3 items:

o Step 10, Chilled Water flow throttled IAW Note prior to Step 10.

o Step 11: MCR pressure matches indications on Unit Ventilation Panel.

o Step 13: 0-AP-50.00 has been initiated.

o Step 17: Unit will assume responsibility for Attachment 3, Page 6 items.

Field Operators: (Wait three minutes from direction to report of task completion)

• When directed, to close 1-FW-88, C FRV Bypass Manual Isolation, Trigger 14.

• When directed, to close 1-MS-158, C Steam Line to TDAFW pump, Trigger 15.

Role play as other individuals as needed.

The scenario will end upon completion of Step 11 1-ES-1.1 or at the lead examiners discretion.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Facility: Surry Power Station Scenario No.: 4 Op-Test No.: 2017-004 Examiners: ____________________________ Operators: _____________________________

Initial Conditions: Unit 1 at ~5%, BOL, 1415 ppm Boron. Unit 2 at 100% power

• Unit startup in progress, 1-GOP-1.8 and 1-OP-TM-001.

• Unit 1 SVB aligned to the J Bus supply.

• Containment Smoke and heat detectors are non-functional due to local fire panel failure.

TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Turnover: The Crew will pre-brief placing the generator on-line and ramping up in power prior to entering the Simulator.

Event Malf. Event Event No. No. Type* Description R -RO/SRO 1 N/A N - BOP Place Unit on-line and begin ramp up in power RM0209, I- BOP/SRO 2 +.5 TS-SRO CC RM Fail upscale with failure auto close HCV-CC-100 CC07 PG0101 3 PG0202 C-RO/SRO 1-PG-P-1A trips on overcurrent, 1-PG-P-1B fails to auto start RC1503, C-RO/SRO 4 +1 TS-SRO PRZR Spray Valve fails open (AP-53.00) (CT-1) 5 EL0801 C-BOP/SRO Loss of 1G Screenwell Transformer (AP-12.01) (CT-2)

EL01 Loss of Offsite Power with Failure of EDG #1 and EDG #2 (ECA-0.0) and ED0201 6 M - ALL TDAFW pump auto start failure.

ED0602F FW47 (CT-3, CT-4)

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 CT # EVENT DESCRIPTION MET ()

CT-1 4, PRZR If the RO fails to take timely action in response to the Spray Spray Valve Valve opening, an automatic reactor trip on RCS Low Fails Open Pressure will occur at ~1885 psig; an unanticipated reactor trip should be considered as failure criteria. An Operations representative will be available for consultation as necessary.

CT-2 5, Loss of If the BOP re-starts the Unit 1 CW pumps prior to the 1G required wait time of five (5) minutes, the CW pump(s) will Transformer trip on overcurrent. The five minute wait period is required to allow CW backflow through the CW pump to cease; this backflow causes the CW pump(s) to rotate in the reverse direction. This CT is based on the Crew demonstrating non-compliance with procedural Notes designed to prevent damage to the CW pump, which can lead to power escalation limitations for Unit 1 and potentially affect full power operation of Unit 2. An operations representative will be available for consult during the Scenario.

CT-3 6, Loss of Establish AFW Flow during SBO; Establish greater than All AC 350 gpm AFW flow before wide range level in any 2 steam generators is less than 7%.

Power Job Aid 17, Critical Task Development, CT-23, based on Pressurized Water Reactor Owners Group Westinghouse Emergency Response Guideline -Based Critical Tasks (PWROG-14043-NP) Appendix B Critical Task CT-23. Old CT - ECA-0.0 - B CT-4 6, Loss of Energize the 1J emergency bus from the AAC diesel within All AC 10 minutes of entering AP-17.06.

Power Based on SPS-CT-1, Re-energize an Emergency Bus on the AAC DG. (WOG E-0-C).

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Event 1: Place Unit On-Line and Ramp Up in Power. (R - RO/SRO, N- BOP)

The Crew will pre-brief 1-GOP-1.8, Unit Startup, HSD to Max Allowable Power (step 5.6.13),

and 1-OP-TM-001 (step 5.7), Turbine-Generator Startup to 20% - 25% Turbine Power prior to Simulator entry. A reactivity plan will be provided for the Crew to use during the pre-brief and in the Simulator for the Ramp up in power. The Crew will place the Unit on-line and commence a ramp up in power. A surrogate operator will be available for SG Feed control until the FRVs are in AUTO and the Bypass valves are closed; then the surrogate will turnover to the BOP and exit the Simulator.

Verifiable Action(s):

1) RO - Manipulate rod control and CVCS Blender to control Tave and Flux during the power escalation.

2) BOP - manipulate Generator output breakers.

3) Surrogate Operator actions limited to Feed Control; the Candidates are responsible for providing peer checking of control board manipulations as necessary..

Technical Specifications: None.

Event 2: 1-CC-RI-105, CC RM, Fail high without associated auto action. (I - BOP/SRO, TS - SRO).

After the Crew has raised power, stable control of SG NR level with FRVs in auto has been achieved, and the Evaluation Team is ready, the malfunction is initiated. This failure causes 1-CC-RI-105 Alert and High alarms to actuate with the failure of HCV-CC-100, CC Surge TK VNT Isol VV, to auto close. The BOP will respond to the RM alarm and take action IAW with RM Annunciator Response Procedure.

Verifiable Actions(s):

1) BOP - Close HCV-CC-100, CC Surge Tank vent valve.

Technical Specifications:

1) Tech Spec table 3.7-5, Item 1, Component Cooling water radiation monitors close HCV-CC-100, See Specification 3.13.

2) Tech Spec 3.13.C, Whenever the component cooling water radiation monitor is inoperable, the surge tank vent valve shall remain closed.

Event 3: Running PG pump trips, backup PG pump fails to start. (C - RO/SRO)

When the Evaluating Team is ready, the malfunction is implemented. This failure causes the running PG pump to trip with the backup pump failing to auto trip. The RO will diagnose the failure based on alarms and indications received, and start 1-PG-P-1B, Primary Grade Water Pump.

Verifiable Action(s):

1) RO - Start 1-PG-P-1B, Primary Grade Water Pump.

Technical Specifications: None.

Event #4: 1-RC-PCV-1455B, B Spray valve fails Open (C - RO/SRO, TS - SRO)

When the Evaluating Team is ready, the malfunction is initiated. The controller for the B Spray Valve, 1-RC-PCV-1455B, fails causing the spray valve to open fully. The RO will diagnose the failure based on alarms and indications received, place the controller in Manual and reduce output to close the spray valve to allow pressure to recover. The Team will implement 0-AP-53.00, Loss of Vital Instrumentation/Controls for this failure.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Verifiable Actions:

1) RO - Place the failed controller in Manual and reduce output.

Critical Task 1: If the RO fails to take timely action in response to the Spray Valve opening, an automatic reactor trip on RCS Low Pressure will occur at ~1885 psig; an unanticipated reactor trip should be considered as failure criteria. An Operations representative will be available for consultation as necessary.

Technical Specifications:

1) Tech Spec 3.12.F.2, DNB Parameters, RCS pressure < 2205 psig, Return RCS to

>2205 psig within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or reduce Thermal Power to less than 5% of Rated Power within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

Event 5: Loss of the 1G Screenwell Bus. (C - BOP/SRO)

When the Evaluating Team is ready the malfunction is initiated. This failure causes the loss of the 1G screenwell bus which causes the loss of the running Unit 1 CW pumps. The Team will respond to the alarms received and implement 0-AP-12.01, Loss of Intake Canal Level.

Verifiable Action(s):

1) RO - Throttle the Waterbox outlet MOVs to control canal level.

2) BOP - Use PCS interface to restart Unit 1 CW pumps using Attachment 3 of 0-AP-12.01.

Critical Task 2: If the BOP re-starts the Unit 1 CW pumps prior to the required wait time of five (5) minutes, the CW pump(s) will trip on overcurrent. The five minute wait period is required to allow CW backflow through the CW pump to cease; this backflow causes the CW pump(s) to rotate in the reverse direction. This CT is based on the Crew demonstrating non-compliance with procedural Notes designed to prevent damage to the CW pump, which can lead to power escalation limitations for Unit 1 and potentially affect full power operation of Unit 2. An operations representative will be available for consult during the Scenario.

Event #6: Loss of Offsite Power, #1/#2 EDGs fail, ECA-0.0. (M - ALL)

When the Evaluation Team is ready, the malfunction is initiated. These failure cause a Loss of Off-site power, failure of the Air Start System for EDG #1, #2 EDG trip on overspeed on startup, and lead the Crew to implement ECA-0.0. The TDAFW pump will also fail to auto start leading to a condition where no AFW is available to the SGs following the reactor trip. The Crew is expected to start the TDAFW pump to control SGs level, initiate 0-AP-17.06, AAC Diesel Generator - Emergency Operations, to strip the 1J Emergency Bus and load the AAC on the 1J bus. When the AAC Diesel Generator is loaded on the 1J bus, ECA-0.0 will send the Team to Step 33, where operating equipment is checked. The Crew is expected to transition to ECA-0.1, Loss of All AC Power Recovery Without SI Required.

Verifiable Actions:

1) RO - Close MSTVs on Step 2 of ECA-0.0.

2) BOP - Start TDAFW pump.

3) BOP - Place components supplied by the 1J bus in PTL.

4) BOP - Load the AAC diesel on the 1J bus.

Appendix D Scenario Outline Form ES-D-1 NRC EXAM - SCENARIO #4 Critical Task:

1) CT-3: Establish AFW Flow during SBO; Establish greater than 350 gpm AFW flow before wide range level in any 2 steam generators is less than 7%.

Job Aid 17, Critical Task Development, CT-23, based on Pressurized Water Reactor Owners Group Westinghouse Emergency Response Guideline -Based Critical Tasks (PWROG-14043-NP) Appendix B Critical Task CT-23. Old CT -

ECA-0.0 - B.

2) CT-4: Energize the 1J emergency bus from the AAC diesel within 10 minutes of entering AP-17.06.

Based on SPS-CT-1, Re-energize an Emergency Bus on the AAC DG. (WOG E-0-C).

Critical Task start time begins when crew enters 0-AP-17.06, and Critical Task stop time ends when AAC DG is loaded on the 1J bus.

The Scenario is terminated on Evaluation Team cue after power is restored to the 1J bus.

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 Initial Conditions:

Unit 1 at ~5% power with a startup in progress; BOL. Unit 2 is operating at 100% power with all system and cross-ties operable.

Unit 1 SVB power aligned to J Bus supply.

Pre-load malfunctions: (Trigger 30s) o FW47, Disable FW-P-2 Auto Start o CC07, Disable CC-HCV-100 Auto closure o FP0301, FACP07 ALARM HORN FAILURE o FP0302, FPS SPEAKER FAILURE Equipment Status/ Procedures/ Alignments/ Data Sheets/ etc.:

o 1-GOP-1.8, Unit Startup, 2% Reactor Power to Max Allowable Power.

o 1-OP-TM-001, Turbine-Generator Startup to 20% - 25% Turbine Power.

o Ramp Plan for Power Ascension.

Turnover:

Unit 1 at ~5% reactor Power, with a startup in progress.

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

The Team will pre-brief 1-GOP-1.8, Unit Startup, 2% Reactor Power to Max Allowable Power, and 1-OP-TM-001, Turbine-Generator Startup to 20% - 25% Turbine Power. Once in the Simulator, the Team will place Unit 1 on-line and begin ramping the Unit to 100% power. The performance of this procedure has been analyzed based on the current plant configurations and the PSA indicates green Event Malf. #s Severity Instructor Notes and Required Feedback 1 N/A N/A Place unit on line and begin ramp up in power. (1-GOP-1.8, 1-OP-TM-001)

RM0209 2 +0.5 CC RM Fail upscale with failure of HCV-CC-100 to auto close.

CC07 3 PG0101 TRUE 1-PG-P-1A trips on overcurrent, 1-PG-P-1B fails to auto start.

PG0202 4 RC1503 +1 Przr spray valve fails open (0-AP-53.00) (CT-1)

EL0801 5 CW0101 TRUE Loss of Screenwell Transformer (0-AP-12.01) (CT-2)

CW0102 CW0104 CW0103

Appendix D Scenario Outline Form ES-D-2 NRC EXAM - SCENARIO #1 6 EL01 TRUE Loss of Offsite power with failure of EDG #1, and EDG #2. TDAFW pump failure.

ED0201 (ECA-0.0) (CT-3, CT-4)

ED0602 FW47

SHIFT TURNOVER INFORMATION OPERATING PLAN:

Unit 1 is stable at ~5% reactor power with RCS boron concentration of 1415 ppm.

Unit 1 SVB is aligned to the J Bus supply.

Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Unit startup is progress in accordance with 1-GOP-1.8, Unit Startup, 2% Reactor Power to Max Allowable Power, and 1-OP-TM-001, Turbine-Generator Startup to 20% - 25% Turbine Power.

All systems and crossties are operable.

Unit #2 is at 100% power with all systems and crossties operable.

Shift orders are to place the Unit on-line and commence ramp to 100% power in accordance with 1-GOP-1.8, Unit Startup, 2% Reactor Power to Max Allowable Power, starting at Step 5.6.13; and 1-OP-TM-001, Turbine-Generator Startup to 20% - 25% Turbine Power, Section 5.7. Performance of this evolution has been authorized and has been PSA analyzed for current plant conditions.

SHIFT TURNOVER INFORMATION PWR Scenario :

Scenario Objectives:

A. Given the Unit at ~5% reactor power, place the Unit on-line and commence a ramp up in power in accordance with 1-GOP-1.8, Unit Startup, 2% Reactor Power to Max Allowable Power, and 1-OP-TM-001, Turbine-Generator Startup to 20% - 25% Turbine Power.

B. Given a failure of RI-CC-105, respond in accordance with the ARP 0-RM-M5, and perform actions to isolate the CC Surge Tank.

C. Given a failure of the running PG pump, respond in accordance with ARP 1B-D4 and restore PG flow.

D. Given a failure of the Pressurizer spray valve, respond in accordance with 0-AP-53.00, and restore pressure to normal.

E. Given a failure of the 1G Screenwell Transformer, respond in accordance with 0-AP-12.01 and restore Canal level to normal.

F. Given a Station blackout with loss of AFW, respond in accordance with 1-ECA-0.0, and 0-AP-17.06 to restore power to 1J bus.

Scenario Sequence Event One: Place Unit On-Line and Ramp Up in Power.

The Team will pre-brief 1-GOP-1.8, Unit Startup, HSD to Max Allowable Power, and 1-OP-TM-001, Turbine-Generator Startup to 20% - 25% Turbine Power prior to Simulator entry. A reactivity plan will be provided for the Team use during the pre-brief and in the Simulator for the Ramp up in power. The Team will place the Unit on-line and commence a ramp up in power. A surrogate operator will be available to the Crew until the FRVs are in AUTO and the Bypass valves are closed; the BOP will then assume SG level control.

Malfunctions required: None Objectives: (RO) Control reactor power per 1-GOP-1.8.

(BOP) Place the Unit on-line IAW 1-OP-TM-001 (BOP) Commence ramp up in power using Turbine controls.

Success Path: (RO) control RCS Tave using control rods and dilution. (BOP) Place Unit on-line and begin ramp up in power using turbine controls. (Crew) When conditions established, place FRVs in automatic.

Event Two: 1-CC-RI-105, CC RM, Fail high without associated auto action.

SHIFT TURNOVER INFORMATION After the Team has raised power, stable control of SG NR level with FRVs in auto has been achieved, and the Evaluation Team is ready, the malfunction is initiated. This failure causes 1-CC-RI-105 Alert and High alarms to actuate with the failure of HCV-CC-100, CC Surge TK VNT Isol VV, to auto close. The BOP will respond to the RM alarm and take action IAW with RM Annunciator Response Procedure Malfunctions required: Two, RM0209, CC07.

Objectives: (BOP) Close HCV-CC-100, CC Surge Tank vent valve.

(SRO) Identifies Tech Spec 3.13.C is not met until the surge tank vent valve HCV-CC-100 is closed.

Success Path: HCV-CC-100, CC Surge Tank vent valve is closed.

Event Three: Running PG pump trips, backup PG pump fails to start.

When the Evaluating Team is ready, the malfunction is implemented. This failure causes the running PG pump to trip with the backup pump failing to auto start. The RO will diagnose the failure based on alarms and indications received, and start 1-PG-P-1B.

Malfunctions required: Two PG0101, PG0202 Objectives: (RO) Identifies loss of running PG pump and failure of the standby pump to auto start.

RO manually starts 1-PG-P-1B.

Success Path: Standby PG pump is started.

Event Four 1-RC-PCV-1455B, B Spray valve fails Open (C - RO/SRO, TS - SRO)

When the Evaluating Team is ready, the malfunction is initiated. The controller for the B Spray Valve, 1-RC-PCV-1455B, fails causing the spray valve to open fully. The RO will diagnose the failure based on alarms and indications received, place the controller in manual and reduce output to close the spray valve to allow pressure to recover. The Team will implement 0-AP-53.00, Loss of Vital Instrumentation/Controls for this failure.

Malfunctions required: One, RC1503 Objectives: (RO) Identify failure of Spray controller, takes spray controller to MAN and restores pressure to normal band.

(SRO) Direct actions of 0-AP-53.00. Identify Tech Spec 3.12.F.2, DNB Parameters, RCS pressure < 2205 psig, Return RCS to >2205 psig within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or reduce Thermal Power to less than 5% of Rated Power within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

SHIFT TURNOVER INFORMATION Critical Task 1: If the RO fails to take timely action in response to the Spray Valve opening, an automatic reactor trip on RCS Low Pressure will occur; an unanticipated reactor trip should be considered as failure criteria. An Operations representative will be available for consultation as necessary Success Path: Stop lowering RCS pressure by closing spray valve, and restore Pressurizer pressure to normal.

Event Five: Loss of the 1G Screenwell Bus. (C - BOP/SRO)

When the Evaluating Team is ready the malfunction is initiated. This failure causes the loss of the 1G screenwell bus which causes the loss of the running Unit 1 CW pumps. The Team will respond to the alarms received and implement 0-AP-12.01, Loss of Intake Canal Level.

Malfunctions required: Five, EL0801, CW0101, CW0102, CW0104, CW0103 Objectives: (BOP) Identify loss of Screenwell transformer. Start Unit 1 CW pumps per 0-AP-12.01.

(RO) Throttle Waterbox outlet MOVs to control canal level.

(SRO) Direct actions per 0-AP-12.01.

Success Path: Restart Unit 1 CW pumps IAW 0-AP-12.01.

Critical Task 2: : If the BOP re-starts the Unit 1 CW pumps prior to the required wait time of five (5) minutes, the CW pump(s) will trip on overcurrent. The five minute wait period is required to allow CW backflow through the CW pump to cease; this backflow causes the CW pump(s) to rotate in the reverse direction. This CT is based on the Crew demonstrating non-compliance with procedural Notes designed to prevent damage to the CW pump, which can lead to power escalation limitations for Unit 1 and potentially affect full power operation of Unit 2. An operations representative will be available for consult during the Scenario.

Event Six: Loss of Offsite Power, #1/#2 EDGs fail, ECA-0.0.

When the Evaluation Team is ready, the malfunction is initiated. These failure cause a Loss of Off-site power, failure of the Air Start System for EDG #1, #2 EDG trip on overspeed on startup, and lead the Team to implement ECA-0.0. The TDAFW pump will fail to start leading to a condition where no AFW is available to the SGs following the reactor trip. The Team is expected to start the TDAFW pump to control SGs level, initiate 0-AP-17.06, AAC Diesel Generator - Emergency Operations, to strip the 1J Emergency Bus and load the AAC on the 1J bus. When the AAC DG is loaded on the 1J bus, ECA-0.0 will send the Team to Step 33, where operating equipment is checked. The Team is expected to transition to ECA-0.1, Loss of All AC Power Recovery Without SI Required Malfunctions required: Four; EL01, ED0201, ED0602, and FW47 Objectives: (RO) Perform immediate actions of ECA-0.0. Close MSTVs.

SHIFT TURNOVER INFORMATION (BOP) Start TDAFW pump. Strip the 1J bus. Load the AAC diesel on the 1J bus per AP-17.06.

(SRO) Direct actions per ECA-0.0 to restore power to 1J bus.

Success Path: AFW is restored to the SGs. Power is restored to the 1J bus.

The Scenario is terminated once power is restored to 1J bus as determined by NRC Lead evaluator.

Critical Tasks:

1) CT-3: Establish AFW Flow during SBO; Establish greater than 350 gpm AFW flow before wide range level in any 2 steam generators is less than 7%.

Job Aid 17, Critical Task Development, CT-23, based on Pressurized Water Reactor Owners Group Westinghouse Emergency Response Guideline -Based Critical Tasks (PWROG-14043-NP) Appendix B Critical Task CT-23. Old CT -

ECA-0.0 - B.

2) CT-4: Energize the 1J emergency bus from the AAC diesel within 10 minutes of entering AP-17.06. Based on SPS-CT-1, Re-energize an Emergency Bus on the AAC DG. (WOG E-0-C). Critical Task start time begins when the Crew enters 0-AP-17.06, and Critical Task stop time ends when AAC DG is loaded on the 1J bus.

Scenario Recapitulation Total Malfunctions: 14 Abnormal Events: 5, (ARP RM-M5, ARP 1D-B4, 0-AP-53.00, 0-AP-12.01, 0-AP-17.06)

Major Transients: 1 EOPs Entered: 0 EOP Contingencies: 1 (ECA-0.0)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 13 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

Time Position Applicants Action or Behavior 1-GOP-1.8 Team Team will pre-brief Initial Conditions, Precautions and Limitations, and procedure prior to entering simulator.

1-GOP-1.8 1-OP-CH-021 (Alternate Dilution Using Blender) procedure steps are contained in this guide starting at page 22.

RO 5.6.13 IF the Steam Dumps are in Auto in Steam Pressure Mode, THEN do the following. Otherwise, enter N/A.

a. Increase Reactor power to approximately 6% -10% by withdrawing the Control Rods and/or using chemical shim.

b. Check that the Steam Dumps come open to maintain Steam Header BOP pressure at approximately 1005 psig.

5.6.14 Check that condenser pressure will be equal to or less than 3.5 inches of Hg pressure (or greater than 26.5 inches of Hg vacuum) before BOP synchronization.

5.6.15 Notify the System Operator and Energy Supply (MOC) that the unit is BOP coming on line.

5.6.16 Check that at least five Polishing beds are in service.

CP operator will report 6 polishers in service.

1-GOP-1.8 SRO Note prior to Step 5.6.17:

• Hotwell temperature should be greater than 70°F before synchronization. This recommended temperature is based on a North Anna Reactor trip caused by low feedwater temperature.

1-GOP-1.8 SRO 5.6.17 Synchronize the Generator with the bus in accordance with 1-OP-TM-001, Subsection 5.7, Synchronizing and Loading the Turbine to 5 percent Rated Load in the OPER AUTO Mode.

The team will now go to 1-OP-TM-001 (Subsection 5.7). All previous subsections will be completed. 1-OP-TM-001 actions start on page 18 of this guide.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 14 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-GOP-1.8 RO 5.6.18 AFTER the generator breakers are closed, THEN verify annunciator 1K-B1, GEN BKR AUX REL FAIL TURB TRIP CKT, is NOT LIT.

SRO 5.6.19 Notify the System Operator and Energy Supply (MOC) that the unit is on the line and log the on-line time in the Unit 1 Narrative Log.

SRO 5.6.20 Check that the VOLTAGE REGULATOR is in automatic control. IF the VOLTAGE REGULATOR is NOT in automatic control, THEN notify Supervisor - System Operations at 8-730-3345 (Innsbrook).

1-GOP-1.8 SRO CAUTION prior to Step 5.6.21:

• To provide for a positive channel check indication, steam flow must be verified on all six channels of SG STEAM FLOW PROTECT before 23 percent reactor power is exceeded.

SRO NOTES prior to Step 5.6.21:

• Power level increases should be monitored closely and rods adjusted to maintain Tave close to Tref. Ramp rate will be a function of Steam Generator Level Control.

• Chemistry should be notified when power level changes are equal to or greater than 15 percent/hr.

• The Turbine should be operated in IMP IN while ramping is in progress. If desired, the turbine may be placed in IMP OUT at approximately 90 to 91 percent power. If the power increase is stopped during the ramp to 100%, IMP OUT may be used to assist in stabilizing the Turbine.

SRO 5.6.21 Continue in 1-OP-TM-001, Subsection 5.8, Power Escalation to 20% - 25%

Turbine Power, while continuing to perform this procedure.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 15 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-GOP-1.8 SRO CAUTION prior to Step 5.6.22:

• To prevent a Reactor Trip, Step 5.3.24 must be repeated if Reactor Power has decreased below 10 percent and PERM STATUS LIGHTs B1 and C1 are NOT LIT.

1-GOP-1.8 RO 5.6.22 WHEN reactor power increases above 10 percent power, THEN perform the following.

RO a. Check that the following Trip Status Lights are LIT.

_______ 1. Trip Status Light E1, NIS PWR RGE P-10 CH-1

_______ 2. Trip Status Light F1, NIS PWR RGE P-10 CH-2

_______ 3. Trip Status Light G1, NIS PWR RGE P-10 CH-3

_______ 4. Trip Status Light H1, NIS PWR RGE P-10 CH-4 RO b. Check that the Perm Status Light A3, P-10 NIS PWR RGE > 10%, is LIT.

RO c. Check that the Perm Status Light B2, P-7 NIS PWR RGE AND TURB PWR < 10%, is NOT LIT.

d. Block the Intermediate Range Trip by performing the following.

RO 1. Depress 1/N 38A TRA, INT RNG TRIP - BLOCK, pushbutton.

2. Depress 1/N 38B TRB, INT RNG TRIP - BLOCK, pushbutton.

3. Check Perm Status Light B1, NIS INT RNG RX TRIP AND ROD STOP BLOCKED, is LIT.

RO e. Block the Power Range Low Trip by performing the following.

1. Depress 1/N 47A TRA, PWR RNG (LO SETPT) TRIP - BLOCK, pushbutton.

2. Depress 1/N 47B TRB, PWR RNG (LO SETPT) TRIP - BLOCK, pushbutton.

3. Check Perm Status Light C1, NIS PWR RNG LO SP TRIP -

BLOCKED, is LIT BOP 5.6.23 Perform the following substeps at the described Turbine Power.

a. WHEN turbine power increases through 10 percent, THEN check that the following Trip Status Lights are LIT.

_______ 1. Trip Status Light E3, TURB PWR > 10% CH-3

_______ 2. Trip Status Light F3, TURB PWR > 10% CH-4

b. WHEN turbine power increases through 15 percent, THEN check Perm Status Light K1, P-2 AUTO ROD CONTROL BLOCKED TURB PWR <

15%, is NOT LIT.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 16 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-GOP-1.8 SRO NOTE prior to Step 5.6.24:

• When Steam Dumps close, a reduction in RCS temperature should be anticipated and compensatory actions taken.

RO/BOP 5.6.24 IF Steam Dumps in Auto, THEN verify the Steam Dumps modulate closed as Turbine Power is raised.

5.6.25 IF the Steam Header Pressure controller in Manual, THEN as Turbine power level continues to increase, reduce the STM DUMP VVS DEMAND signal to zero while maintaining Reactor power constant. Enter N/A if controller in Auto.

BOP 5.6.26 Maintain Turbine Valve Position Limiter approximately 5% above Governor Valve demand.

NOTE: Steam Flow / Feed Flow indications do not have to be matched to be considered stable.

All three MFRVs should be placed in Auto at the same time to ease the transition to Auto feed control.

TEAM 5.6.27 WHEN Feedwater temperature is greater than 260°F (PCS points T0418A, SURROGATE T0438A, T0458A) with stable Steam Flow / Feed Flow, THEN perform the following:

a. Check that the MFRVs are closed.

b. Place the MFRVs in Auto.

c. WHEN MFRV demand exceeds approximately 9%, THEN slowly close the MFRV Bypass HCVs as the MFRVs come open.

NOTE: When the Steam Dumps are fully closed, Tave will lower as Turbine power is raised.

RO/BOP 5.6.28 IF the Steam Header Pressure controller is in Auto, THEN as Turbine power level is raised, perform the following. Enter N/A if controller in Manual.

a. Check that the Steam Dumps modulate closed.

b. WHEN the Steam Dumps are closed, THEN place the Steam Header Pressure controller in Manual.

SRO 5.6.29 IF the Steam Header Pressure controller is in Manual, THEN as Turbine power level continues to rise, reduce the STM DUMP VVS DEMAND signal to zero while maintaining Reactor power constant. Enter N/A if controller was operated in Auto.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 17 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-GOP-1.8 RO/BOP 5.6.30 Place the STM DUMP MODE SEL switch in the TAVG position as follows.

a. Check STM HDR pressure controller demand at zero.

b. Place STM DUMP CNTRL switch to OFF/RESET.

c. Place STM DUMP MODE SEL switch to RESET and spring return to TAVG.

d. Check annunciator 1H-D7, STM DUMP PERM, is NOT LIT.

e. Place STM DUMP CNTRL switch to ON.

END OF GOP ACTIONS OP-TM-001 ACTIONS BEGIN NEXT PAGE.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 18 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-TM-001 5.7 Synchronizing and Loading the Turbine to 5% Rated Load in the OPER AUTO Mode BOP NOTES prior to Step 5.7.1:

• Shift Supervision may authorize entry or exit from this subsection at any step or substep based upon existing plant conditions. N/A must be entered for the specific steps or substeps in the subsection that were not performed as a result of the authorized exit or entry.

• Hotwell temperature should be greater than 70°F before synchronization. This recommended temperature is based on a North Anna Reactor trip caused by low feedwater temperature.

BOP 5.7.1 Check that the Hotwell temperature is greater than 70°F. IF Hotwell temperature is NOT greater than 70°F, THEN evaluate the effects of synchronization with temperature less than 70°F 1-OP-TM-001 SRO CAUTION prior to Step 5.7.2:

• During Turbine startup and operation at less than 10% electrical load, Condenser vacuum, as read on MCR Condenser Vacuum Recorders CN-PR-101A and CN-PR-101B, should be maintained as high as possible and greater than 26.5 in. Hg to prevent Turbine blade flutter. During shutdown, Condenser vacuum should be maintained as high as possible, and greater than 26.5 in. Hg until the Turbine rotor is on the Turning Gear.

BOP 5.7.2 Check that the Turbine vacuum indicated on MCR Condenser Vacuum Recorders CN-PR-101A and CN-PR-101B is greater than 26.5 inches of Hg Vacuum.

BOP 5.7.3 Check that the pumps and fans for the three Main Transformers are in operation.

Field operator will report pumps and fans in service 1-OP-TM-001 BOP 5.7.4 Check that UNIT NO. 1 LOAD MEGAWATTS chart recorder is ON.

BOP 5.7.5 Check or depress the VV POSTN LIMITER raise button until the VV POSTN LIMIT indicator registers 30% VALVE POSITION.

SRO 5.7.6 Check that the applicable GOP has been completed up to synchronization, and that the Startup Team is ready to synchronize the generator with the bus.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 19 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-TM-001 BOP NOTE prior to Step 5.7.7: Shift Supervision may adjust the ramp rate to aid in unit stabilization.

BOP 5.7.7 Verify or place the LOAD RATE % PER MIN thumbwheel to position 1.

(1%/MIN)

SRO CAUTIONS prior to step 5.7.8:

• The Sync Switch should not be turned to the AUTO position as the AUTO SYNC function is inoperative.

• To prevent breaker disagreement, the Generator output breaker control switch should be held in CLOSE until the red light is LIT or the breaker indicates tripped.

BOP 5.7.8 Synchronize the Generator with the bus using OCB-G102, GEN OUTPUT BKR, by performing the following substeps. IF the Generator will be synchronized using OCB-G1T240, THEN enter N/A AND GO TO Step 5.7.9.

a. Insert the Sync Key into CS-G102, GEN OUTPUT BKR SYNC SWITCH.

b. Turn CS-G102 to MAN.

c. Raise the SETTER to 1805 rpm and press the GO button.

d. Check that voltage is indicated on the INCOMING and RUNNING voltmeters.

NOTE: Slow in the fast direction is one clockwise rotation in 20 or more seconds.

e. Check a slow rotation of the synchroscope in the fast direction.

(clockwise) IF NOT, THEN raise or lower the SETTER as required and press the GO Button.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 20 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-TM-001 5.7.8 (Continued)

NOTE: INCOMING and RUNNING voltages should be within 2 volts.

BOP f. Equalize the INCOMING voltage with the RUNNING voltage using the EXCITATION LEVEL control switch.

CAUTION: If Generator output is not indicated at the time of synchronization and no operator action is taken, an anti-motoring trip will occur NOTE: With the Synchroscope running as close to a 20-second cycle as possible, very little load will be placed on the generator.

NOTE: Reflexes should be mentally checked with respect to the Synchroscope needle speed so that the Generator Breaker is closed at 12:00 oclock.

g. WHEN the Synchroscope is at (approximately) 2 minutes to 12:00 oclock, THEN close OCB-G102, Generator Output Breaker.

NOTE: Approximately 15 to 20 seconds may elapse before the Setter indication increases above zero.

h. Check that the following indications are NOT LIT.

• Permissive Status Light E-3 GEN NO. 1 MOTORING INITIATED

• Annunciator 1J-D7, GEN MOTORING TURB LO P

i. IF the Generator is motoring, THEN immediately raise the setter to 5%

and depress the GO pushbutton. Otherwise, enter N/A. (The ramp rate may be raised as necessary to clear the motoring alarms. When the alarms are clear, the Turbine ramp rate may be lowered or halted as desired.)

j. Turn CS-G102, GEN OUTPUT BKR SYNC SWITCH, to OFF.

k. Insert the Sync Key into CS-G1T240, GEN OUTPUT BKR SYNC SWITCH.

l. Turn CS-G1T240 to MAN.

m. Check that the synchroscope needle stopped at approximately the 12:00 oclock position.

n. Check that the INCOMING and RUNNING voltages are within 2 volts.

o. Close OCB-G1T240.

p. Turn CS-G1T240 to OFF and remove the Sync Key.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 21 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-TM-001 SRO/BOP 5.7.9 Synchronize the Generator with the bus using OCB-G1T240, GEN OUTPUT BKR, by performing the following substeps. IF the Generator was synchronized using OCB-G102, THEN enter N/A AND GO TO Step 5.7.10 SRO/BOP Caution and Notes prior to Step 5.7.10:

• During Power Escalation, the VV POSTN LIMIT should be maintained as close as reasonably possible just above the actual governor valve position for the desired power level. This method of operation will prevent a Turbine Governor Valve(s) from failing to an open position due to an electronic or hydraulic failure thereby causing an excessive load on the Unit or causing the Unit to exceed licensed power limits.

• The VV POSTN LIMIT setpoint should be raised proportionally as the Turbine load is raised. The Turbine Governor Valves should not be run up against the Limiter.

• The Turbine should not be continuously operated on the VV POSTN LIMIT.

• If Steam Dumps are open and controlling in Auto, raising limiter setting to remove turbine from the limiter will trade steam to dumps for steam to turbine.

BOP/SRO 5.7.10 IF the VALVE POS LIMIT light is LIT, THEN do the following:

a. IF Steam Dumps are open and controlling in Auto, THEN slowly raise limiter setting to remove Turbine from limiter.

b. IF steam dumps are not open, OR not in Auto, THEN do the following:

1. Stop the ramp.

BOP 2. Lower Unit load until the VALVE POS LIMIT light is NOT LIT.

3. Adjust the VV POS LIMIT setpoint as required.

BOP 4. Resume ramp.

5.7.11 Verify that the SPEED light is NOT LIT and the LOAD light is LIT.

5.7.12 RETURN TO appropriate startup GOP to continue the Unit Startup.

THE team will return to GOP-1.8 (momentarily).

CAUTIONS prior to Step 5.8.1:

SRO

• Constant communication between the Reactor Operators on the S/G Level Controls, the Control Rods, Steam Dumps, and the Turbine must be maintained to prevent temperature or level transients.

• Rapid Loading of the Turbine - Generator may cause a Steam Generator High Level Trip. (Reference 2.4.1)

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 22 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-TM-001 SRO/BOP NOTES prior to Step 5.8:

• Shift Supervision may authorize entry or exit from this subsection at any step or substep based upon existing plant conditions. N/A must be entered for the specific steps or substeps in the subsection that were not performed as a result of the authorized exit or entry.

• Ramping the Turbine at 1%/min until the Steam Dumps are closed will aid in the transition to auto feed control. Once the Steam Dumps are closed the normal ramp rate is Position 6.

• In the OPER AUTO mode, Turbine loading may be stopped by depressing the HOLD pushbutton and may be restarted by depressing the GO pushbutton.

5.8.1 With the OPER AUTO mode selected, set the desired load in the SETTER and depress the GO pushbutton.

5.8.2 Maintain the System Voltage on the 230 KV BUS VOLT meter as requested by the System Operator.

5.8.3 WHEN Turbine power increases above 10%, THEN check PCS alarm Y2060D, Exh Hood Sprays OFF, is received.

5.8.4 WHEN IMPULSE CHAMBER PRESSURE (Turbine Power) passes through 30 percent OR when the startup has stabilized, THEN check or depress the IMP IN pushbutton AND check that the IMP IN light is LIT and the IMP OUT light is NOT LIT. Enter N/A if Turbine control will remain in IMP OUT.

Evaluators Note: No further actions are expected for this event.

BOP END EVENT 1

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 23 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

Time Position Applicants Action or Behavior 1-OP-CH-021, Alternate Dilution Using Blender RO 3.0 Initial Conditions 3.1 Check Primary Grade water is available to the Blender.

4.0 Precautions and Limitations 4.1 Control rod position, Tavg, and/or power level should be observed when making up to the RCS.

4.2 Operation of pressurizer heaters and spray valves should be used to equalize Boron concentration (CB) when changing CB.

4.3 The blender must be frequently monitored for proper operation during the entire duration of the makeup. (Reference 2.4.1) 4.4 The Reactor Operator shall notify Shift Supervision before performing any Blender evolution. (Reference 2.4.1) 4.5 Rapidly changing VCT level and pressure may affect RCP Seal leakoff, which should be monitored for normal response.

4.6 Operation of the Blender must be Peer checked.

4.7 Due to system configuration, PG flow will continue after reaching the integrator endpoint. Depending on the total flow rate, 0-5 gallons of additional flow should be anticipated. At 100 gpm, four gallons of additional flow is expected. At 60 gpm, two gallons of additional flow is expected.

4.8 The Blender may lock up if the RATE function is in use at the end of make up. (Integrator lock up does NOT affect the Blender AUTO function). (Ref.

2.4.2) 1-OP-CH-021, Alternate Dilution Using Blender RO 4.0 Precautions and Limitations (Continued) 4.9 If the ENT button on the BA or PG integrator is pressed twice in succession, the integrator will flash the Grand Total on the digital display. The ENT button should be pressed an additional time to exit the Grand Total display.

The integrator setpoint will NOT be affected.

4.10 Dilutions of greater than 2000 gallons can result in RCS H2 concentration going low out of band. Dilutions of this amount should be made to the top of the VCT using 1-OP-CH-007, Blender Operations.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 24 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1 Alternate Dilution NOTE: This subsection will be used for the first alternate dilution of the shift.

Attachment 3 will be used as a guide for further alternate dilutions for the remainder of the shift, unless Excess Letdown is in service.

NOTE: If unit on excess letdown, 1-OP-CH-007 should be used.

5.1.1 Determine the required integrator setpoint by performing the following:

________________ gal (-) _____________= ______ Integrator setpoint (Desired Dilution) (anticipated additional flow, dependent on flowrate) 5.1.2 Notify Shift Supervision of impending Alternate Dilution. (Reference 2.4.1) 5.1.3 Notify STA of impending Alternate Dilution.

5.1.4 Place the MAKE-UP MODE CNTRL switch in the STOP position.

5.1.5 Adjust both of the following controllers for the flow rate and total gallons of Primary Grade water for the dilution. IF the PG FLOW CNTRL controller setpoint has previously been set, THEN enter N/A for that substep.

a. 1-CH-FC-1114A, PG FLOW CNTRL (N/A) ______ GPM (IAW Attachment 2)

b. Record number of gallons of PG to be added from Step 5.4.4.b and enter into 1-CH-YIC-1114A, PRI WATER SUP BATCH INTEGRATOR (GAL) as follows:

______ GAL

1. Depress PRESET A Button (Controller will read the last value entered into the controller; reads in gallons.)

2. To clear PRESET A, depress the CLR Button. Enter N/A if not required.

3. Enter desired PRESET A value. Enter N/A if not required.

4. Depress ENT Button.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 25 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1.6 Place the MAKE-UP MODE SEL switch in the ALT DIL position.

5.1.7 IF it is desired to direct the dilution water to the charging pump suction only, THEN place 1-CH-FCV-1114B, BLENDER TO VCT, in the CLOSE position. Otherwise, enter N/A.

5.1.8 Place the MAKE-UP MODE CNTRL switch in the START position.

5.1.9 Check all of the following conditions.

a. 1-CH-FCV-1113A, BORIC ACID TO BLENDER, is closed.

b. 1-CH-FCV-1113B, BLENDER TO CHG PUMP, is open.

c. 1-CH-FCV-1114A, PGW TO BLENDER, is controlling in AUTO.

d. 1-CH-1114B, BLENDER TO VCT, is OPEN - N/A 5.1.10 IF it is desired to stop the Dilution before the selected amount, THEN place the MAKE-UP MODE CNTRL switch in the STOP position. IF the PRI WATER SUP BATCH INTEGRATOR (GAL) is used to stop the flow, THEN enter N/A for this step.

5.1.11 WHEN the desired amount of makeup has been reached, THEN check both of the following valves closed.

• 1-CH-FCV-1113B

• 1-CH-FCV-1114B

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 26 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

1-OP-CH-021, Alternate Dilution Using Blender RO 5.1.12 Check or place 1-CH-FCV-1114B in AUTO.

Otherwise, enter N/A.

5.1.13 Check or place the following controllers in Automatic.

1-CH-FC-1113A, BA FLOW CNTRL 1-CH-FC-1114A, PG FLOW CNTRL 5.1.14 Place the MAKE-UP MODE SEL switch in the AUTO position.

5.1.15 Place the MAKE-UP MODE CNTRL switch in the START position.

5.1.16 Notify Shift Supervision of Blender status. (Reference 2.4.1)

Additional Alternate Dilutions will be performed using 1-OP-CH-021, Attachment 1 (Next Page).

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 1 Page 27 of 76 Event

Description:

Place Unit on line and ramp up in power.

Cue: When team ready.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 2 Page 28 of 76 Event

Description:

CC RM Fail upscale with failure of HCV-CC-100 to auto close.

Cue: By Examiner when FRVs have been placed in Auto, and Feed Control Role Player relieved.

Time Position Applicants Action or Behavior BOP Diagnoses failure of 1-RM-CC-105 with the following indications/alarms:

Alarms:

• 0-RM-L5 CC HX A/B OUT ALERT/FAILURE

• 0-RM-M5 1-CC-RI-105 HIGH Indications:

1-CC-RI-105 indicates all EEEEEEs.

1-CC-RI-105, HIGH, WARN and RANGE lights LIT.

NOTE: RM-M5 Guidance located at end of this section.

0-RM-L5 BOP Notes Prior to Step 1:

• If a monitor fails, the automatic functions associated with that monitor must be verified or performed.

• When HP has surveyed the area and declared radiation levels normal, the components that were realigned due to monitor failure may be returned to normal and activities in the affected area may continue.

SRO

• Tech Spec 3.13.C requires that HCV-CC-100 remain closed if either CC radiation monitor is inoperable.

0-RM-L5 BOP

1. CHECK ALARM - READING ON MONITOR GREATER THAN OR EQUAL TO ALERT SETPOINT OR RADIATION LEVEL HAS TRENDED UP

• 1-CC-RI-105, HDR A

• 1-RM-RR-150C, Pen 1 BOP will identify that the meter indicates EEEEEEEs and a steeply rising trend.

0-RM-L5, Step 1 RNO BOP a) IF all EEEEEs indicated on display, THEN GO TO 0-OPT-RM-001, Radiation Monitoring Equipment Check.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 2 Page 29 of 76 Event

Description:

CC RM Fail upscale with failure of HCV-CC-100 to auto close.

Cue: By Examiner when FRVs have been placed in Auto, and Feed Control Role Player relieved.

0-OPT-RM-001 Precautions and Limitations 4.1 Each process radiation monitor paper advance uses about 5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> worth of paper.

Unnecessary paper advances will cause the roll to run out prematurely.

4.2 Check Sources for the Victoreen digital radiation monitors operate as follows.

• For digital PROCESS monitors - The Check Source is exposed to the detector by depressing and holding the CHECK SOURCE pushbutton.

• For digital AREA monitors - A Check Source signal is inserted into the detector circuit by depressing and releasing the CHECK SOURCE pushbutton. The Check Source signal is removed when the CHECK SOURCE pushbutton is depressed and released a second time or after approximately three minutes. The digital AREA monitors do not have a radioactive Check Source.

0-OPT-RM-001 BOP 6.1 Work Preparation 6.1.1 IF a radiation monitor is out of service, THEN enter OOS in applicable spaces of Attachments.

NOTE:

• A failed Digital Rate Meter is indicated by EEEEEs in the digital display window, and the FAIL Alarm light LIT.

• If the Radiation Monitor has associated automatic actions, those actions will occur when the monitor fails.

6.1.2 IF this procedure is being performed due to failure of a Digital Radiation Monitor with all EEEEEs displayed, THEN perform the following. Otherwise, enter N/A.

a. IF Radiation Monitor has associated automatic actions, THEN check or perform actions as necessary. Otherwise, enter N/A.

BOP may use RM-L5or RM-M5 guidance for completion of the verification of Auto Actions. Places 1-HCV-CC-100 in OFF. Directs Unit 2 to place SOV-CC-200 in close.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 2 Page 30 of 76 Event

Description:

CC RM Fail upscale with failure of HCV-CC-100 to auto close.

Cue: By Examiner when FRVs have been placed in Auto, and Feed Control Role Player relieved.

0-OPT-RM-001 BOP b. On the front panel of rate meter, depress the ON/OFF push button, and check the meter is OFF.

BOP places On/Off switch in Off.

c. WHEN 30 seconds have elapsed, THEN perform Step 6.1.2.d.

d. On the front panel of rate meter, depress the ON/OFF push button, and check the meter is ON.

BOP Places RM in On, Meter immediately goes to all EEEEEs with the HIGH, WARN and RANGE lights Lit.

BOP Notifies SRO RM has failed and I&C assistance is required.

SRO SRO will review Technical Specifications 3.13.C and identify that whenever the component cooling water radiation monitor is inoperable, the surge tank vent valve shall remain closed.

The SRO may review Technical Specification Table 3.7-5, which will refer the SRO to Technical Specification 3.13.

SRO The team will hold a transient brief. During the brief the failure of the CC RM and Vent Valve will be discussed.

The RO/BOP will report Annunciators received related to the event, and Critical Parameters affected.

STA will have no input for the brief.

SRO SRO will notify the Shift Manager of the failure and request I&C assistance.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 2 Page 31 of 76 Event

Description:

CC RM Fail upscale with failure of HCV-CC-100 to auto close.

Cue: By Examiner when FRVs have been placed in Auto, and Feed Control Role Player relieved.

RM-M5 Note: Candidate may refer to this ARP initially in response to the High Alarm.

BOP NOTE:

• If a monitor fails, the automatic functions associated with that monitor should be verified or performed.

• When HP has surveyed the area and declared radiation levels normal, the components that were realigned due to monitor failure may be returned to normal and activities in the affected area may continue.

• Tech Spec 3.13.C requires that HCV-CC-100 remain closed if either CC radiation monitor is inoperable.

1 VERIFY ALARM - READING ON MONITOR GREATER THAN OR EQUAL TO HIGH SETPOINT

• 1-CC-RI-105, HDR A

• 1-RM-RI-150C, Pen 1 Identifies Monitor reading is greater than High Alarm.

RM-M5 BOP 2 VERIFY CC HEAD TANK VENT VALVE - CLOSED a) Place HCV-CC-100 in OFF (Unit 1)

Places HCV-CC-100 in Off.

b) Place SOV-CC-200 in CLOSE (Unit 2)

Directs Unit 2 operator to place SOV-CC-200 in close.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 2 Page 32 of 76 Event

Description:

CC RM Fail upscale with failure of HCV-CC-100 to auto close.

Cue: By Examiner when FRVs have been placed in Auto, and Feed Control Role Player relieved.

RM-M5 NOTE: The following components are the most likely sources of inleakage to the CC System:

• RCP Thermal Barrier

• NRHX

• Primary Sample coolers

• Excess Letdown HX

• HRSS coolers

• RHR HX

• SFP coolers

• RHR Pump Seal coolers BOP 3 MONITOR CC HEAD TANK LEVEL AND CC TEMP FOR INCREASING LEAKAGE TO CC SYSTEM RM-M5 BOP 4 NOTIFY HP TO DO THE FOLLOWING:

• Verify area evacuated as necessary

• Control access as necessary

• Investigate cause

• Determine need for setpoint change BOP Notifies HP.

RM-M5 BOP 5 PERFORM ( )-OPT-RC-10.0, REACTOR COOLANT LEAKAGE OR ( )-AP-16.00, EXCESSIVE RCS LEAKAGE, AS NECESSARY Notifies RO/SRO to perform 1-OPT-RC-10.0, as necessary.

RM-M5 BOP 6 DETERMINE LEAKAGE SOURCE BY SAMPLING AS NECESSARY Notifies SRO concerning Step.

RM-M5 BOP 7 ISOLATE LEAKAGE Notifies SRO of need to isolate leakage if discovered by sampling.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 2 Page 33 of 76 Event

Description:

CC RM Fail upscale with failure of HCV-CC-100 to auto close.

Cue: By Examiner when FRVs have been placed in Auto, and Feed Control Role Player relieved.

RM-M5 BOP 8 PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA

• Health Physics

• Instrumentation Department Informs SRO of required notifications.

END EVENT 2

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 3 Page 34 of 76 Event

Description:

1-PG-P-1A trips on overcurrent, 1-PG-P-1B fails to auto start Cue: When initiated by Team Time Position Applicants Action or Behavior Team Diagnose the failure using the following:

Alarms:

BR-D10, PRI GRADE WTR LO HDR PRESS 1D-B4, PRI WTR TO BLEND LO PRESS Indications:

1-PG-P-1A RED indication light OFF.

1-PG-P-1B does not Auto Start as expected.

NOTE: Actions for 1D-B4, at the end of this section.

SRO Directs the BOP to implement the ARP for BR-D10 Annunciator SRO notifies Unit 2 that PG water flow has been lost.

NOTE: The standby PG Pump should automatically start when system pressure decreases to less than or equal to 50 psig.

BOP 1 VERIFY PG SYSTEM PRESSURE LESS THAN OR EQUAL TO 75 PSIG

• PI-BR-121, Pri Wtr Sup Press BOP checks 1-BR-PI-121, PRI WTR SUP PRESS meter on BR Panel and notes pressure has decreased to 0 psig.

BOP 2 VERIFY PG PUMPS - RUNNING AS Do the following NECESSARY a) Align switches as necessary

• One in Hand b) IF PG Pumps off for planned

• One in Auto evolution, THEN return to procedure in effect RO Starts 1-PG-P-1B by placing control switch in HAND.

BOP Verifies PG pressure returns to Normal pressure. (1D-B4 annunciator clears).

SRO Informs Unit 2 of PG system status.

Directs RO to dispatch operator to check status of 1-PG-P-1A breaker.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 3 Page 35 of 76 Event

Description:

1-PG-P-1A trips on overcurrent, 1-PG-P-1B fails to auto start Cue: When initiated by Team BOP 3 CHECK EXCESSIVE USE OF PG WATER AS INDICATED ON FI-BR-126, PRI WTR SUP PPS FLOW Identifies 0 indicated flow on FR-BR-126, PRI WTR SUP PPS FLOW.

Step 3 RNO Do the following:

a) Locally check PG Pump for proper operation.

BOP directs Service Building North Yard to check status of 1-PG -P-1A and 1B.

b) Locally check for system integrity Directs Auxiliary Building operator/SB North Yard to check system integrity.

c) IF system leakage or rupture exists, THEN isolate as necessary AND GO TO Step 6.

d) GO TO Step 5.

BOP 5 VERIFY PROPER OPERATION OF PUMP RECIRCULATION VALVE

• 1-BR-PCV-114, PRI SUP WATER PUMPS 1A/B RECIRC HDR Identifies PG header pressure normal.

BOP 6 SUBMIT CONDITION REPORT AS NECESSARY BOP 7 PROVIDE NOTIFICATION AS NECESSARY

• Shift Supervision Notifies SRO that ARP actions complete.

BOP Reviews ARP for 1D-B4, PRI WTR TO BLEND LO PRESS.

1D-B4 BOP 1 CHECK PG HDR PRESS - LESS THAN OR EQUAL TO 65 PSIG ON 1-BR- PI-121 AT THE BORON RECOVERY PANEL Identifies 0 psig indicated.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 3 Page 36 of 76 Event

Description:

1-PG-P-1A trips on overcurrent, 1-PG-P-1B fails to auto start Cue: When initiated by Team 1D-B4 BOP 2 CHECK PRIMARY GRADE WATER PUMPs - ONE RUNNING

• 1-PG-P-1A

• 1-PG-P-1B RO Identifies no PG pump running.

Step 2 RNO: Start a pump.

RO Starts 1-PG-P-1B 1D-B4 BOP 3 CHECK 1-BR-PCV-114 - THROTTLING TO RAISE HDR PRESS BOP Identifies PG Pressure returns to normal.

1D-B4 BOP 4 CHECK VALVE LINEUP - CORRECT Identifies PG pump alignment correct.

BOP may direct Auxiliary Building Operator to walk down PG system for abnormalities.

1D-B4 BOP 5 CHECK PG HDR PRESS - GREATER THAN 65 PSIG Identifies PG pressure normal and stable.

1D-B4 BOP 6 NOTIFY SHIFT SUPERVISION Notifies SRO that ARP review complete.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 3 Page 37 of 76 Event

Description:

1-PG-P-1A trips on overcurrent, 1-PG-P-1B fails to auto start Cue: When initiated by Team SRO Update Shift Manager on status of PG system and request electrical maintenance to determine cause of 1-PG-P-1A trip and 1-PG-P-1B failure to AUTO Start.

END EVENT #3

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 4 Page 38 of 76 Event

Description:

Pressurizer Spray valve fails open.

Cue: By Examiner.

Time Position Applicants Action or Behavior RO Diagnoses Failure based on the following indications:

1-RC-PCV-1455B, Spray from Loop C, fails to 100%.

1-RC-PCV-1444J, Master Cntrl, starts lowering in response to press.

Annunciator 1C-B8, PRZR LO PRESS.

Pressurizer Heater Banks A / B/ E energize.

RO Performs the Immediate Actions of 0-AP-53.00

[1] Checks redundant indications of pressurizer pressure - NORMAL

[2] Places the PRZR SPRAY LOOP C Controller in MANUAL closes spray valve.

Critical Task 1: Close the Spray valve before Reactor trip on low pressure. If the RO fails to take timely action in response to the Spray Valve opening, an automatic reactor trip on RCS Low Pressure will occur; an unanticipated reactor trip should be considered as failure criteria.

Announces completion of Immediate Actions of AP-53.00.

Step 1, 0-AP-53.00 SRO CHECK REDUNDANT INSTRUMENT CHANNEL(S) INDICATION - NORMAL.

RO Reports Redundant indications of Pressurizer pressure normal.

Step 2, 0-AP-53.00 SRO PLACE AFFECTED CONTROL(S)/ COMPONENT(S) IN MANUAL CONTROL AND STABILIZE PARAMETER USING REDUNDANT INDICATION RO Reports 1-RC-PCV-1455B, Spray from Loop C in manual and closed.

SRO The SRO will lead a transient brief. During the brief, the failure of 1-RC-PCV-1455B, Spray from Loop C will be discussed.

The RO/BOP will report Annunciators received related to the event, and Critical Parameters affected.

STA will have no input for the brief; monitor RCS pressure using PCS if SRO directs.

Step 3, 0-AP-53.00 SRO

• VERIFY REACTOR POWER - LESS THAN OR EQUAL TO 100%

RO Reports indicated reactor power using PR Control Board Indicators.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 4 Page 39 of 76 Event

Description:

Pressurizer Spray valve fails open.

Cue: By Examiner.

Step 4, 0-AP-53.00 SRO CAUTION: If Reactor power has been affected by a secondary transient, Turbine adjustment may be needed to control Tave.

NOTE:

• Step 4 failures are listed in order of performance priority. Only the failed instrument/control and associated step number should be read aloud.

• When the affected instrument/controller malfunction(s) has been addressed by this procedure, recovery actions should continue at Step 11.

Step 4, 0-AP-53.00, Continued SRO

• DETERMINE THE FAILED INSTRUMENT / CONTROL AND GO TO APPROPRIATE STEP OR PROCEDURE:

RO

• PRZR Pressure Control, Step 5 Step 5, 0-AP-53.00 SRO NOTE: RCS pressure decrease will cause a slight lowering in RCS Tave due to negative reactivity from the moderator pressure coefficient.

SRO CHECK PRZR SPRAY VALVE CONTROLLERS - NORMAL RO Reports No, PRZR Spray Vale Controller is NOT Normal.

Step 5 RNO, 0-AP-53.00 SRO a. Place failed controller in Manual.

b. Restore pressure to normal and stabilize.

c. Check or stabilize Turbine load.

d. If manual control is ineffective or unavailable, THEN GO TO 1-AP-31.00.

e. If RCS pressure returns to normal THEN do the following:

1) Maintain stable Turbine load until pressure control system is returned to normal.

2) If no other instrumentation failure exists, THEN GO TO Step 11.

Otherwise, GO TO Step 7.

RO Reports that Spray valve controller is in Manual. Pressure is stable or returning to normal.

GO TO step 11.

Step 11, AP-53.00 SRO 11. Check Calorimetric - Functional IAW 1-OPT-RX-001, Attachment 4.

RO Determines that Calorimetric is functional.

Note: 1-OPT-RX-001, Attachment 4 is included after step 15.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 4 Page 40 of 76 Event

Description:

Pressurizer Spray valve fails open.

Cue: By Examiner.

0-AP-53.00 SRO 12. REVIEW THE FOLLOWING

• Tech Spec 3.7 Determines Tech Spec 3.7 is met.

NOTE: If pressure lowered to 2205 psig, then SRO declares Tech Spec 3.12.F.2 is applicable. This requires pressure be raised above 2205 psig in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

• VPAP-2802, NOTIFICATIONS - None

• TRM SECTION 3.3, INSTRUMENTATION - None.

• Reg. Guide 1.97: None STA

• EP-AA-303, EQ. IMPORTANT TO EMERGENCY RESPONSE - None The STA reports completion of review and has discussed the results with the Shift Manager.

0-AP-53.00 SRO 13 CHECK ADDITIONAL INSTRUMENT / CONTROLLER MALFUNCTION -

EXISTS BOP Reports no additional failure exists SRO GOES TO Step 15 0-AP-53.00 SRO 15. PROVIDE NOTIFICATIONS AS NECESSARY:

• Shift Supervision

• OMOC

• STA (PRA determination)

• I&C

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 4 Page 41 of 76 Event

Description:

Pressurizer Spray valve fails open.

Cue: By Examiner.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 4 Page 42 of 76 Event

Description:

Pressurizer Spray valve fails open.

Cue: By Examiner.

END EVENT #4

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 5 Page 43 of 76 Event

Description:

Loss of 1G Screenwell Transformer.

Cue: By Examiner.

Time Position Applicants Action or Behavior Diagnoses failure using the following indications/alarms:

BOP

• VSP-J6 - 230 KV HSE TRBL

• VSP L7 - LLIS TROUBLE

• PCS Alarms:

• IS-C8 - S/W NO.1 OR NO. 2 XFMR TRBL

• IS-D9 - XFMR NO. 1 DIFF OPER

• PCS screens indicating a loss of Unit 1 CW pumps ARP VSP L-7 directs use of PCS, IS-C8 dispatches personnel to inspect transformer at low levels, and IS-D9 verifies proper crosstie of the 1G & 2G busses then initiates 0-AP-12.01.

Enters 0-AP-12.01, LOSS OF INTAKE CANAL LEVEL SRO NOTE: EPIPs may be applicable.

1. CHECK ENTRY INTO THIS PROCEDURE-FROM AN EOP OR AN AP TO RO RESTORE SW FLOW TO THE CCHXs Step 1 RNO actions: GO TO Step 3.

Determines entry is not from an EOP or an AP to restore SW flow to the CCHXs and goes to step 3 Caution and Note prior to step 3 SRO CAUTION:

• To prevent turbine damage from turbine stall flutter, Main Condenser vacuum must be maintained greater than 26.5 in-Hg when turbine power is less than or equal to 10%.

• Abnormal Procedure ( )-AP-14.00, LOSS OF CONDENSER VACUUM, should be reviewed if turbine vacuum can NOT be maintained.

NOTE: If both units are at power, it may be necessary to trip one unit to reduce the rate of Intake Canal inventory loss.

• 3. TRY TO MAINTAIN INTAKE CANAL LEVEL:

• Throttle Waterboxes RO

• Reduce Unit load as necessary to maintain Condenser vacuum BOP

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 5 Page 44 of 76 Event

Description:

Loss of 1G Screenwell Transformer.

Cue: By Examiner.

AP-12.01 SRO 4. CHECK INTAKE CANAL LEVEL - LOWERING RO/BOP RO/BOP reports canal level trending down Goes to step 8.

AP-12.01 SRO 5. CHECK INTAKE CANAL LEVEL - LOWERING DUE TO SUSPECTED BREACH

• Local observation

• Canal level trend RO/BOP Reports Canal level lowering due to loss of CW pumps SRO Goes to Step 8 AP-12.01 SRO 8. START CIRC WATER PUMPS AS REQUIRED FROM THE MCR IAW ATTACHMENT 3 SRO Directs BOP to perform attachment 3.

Critical Task 2: If the BOP re-starts the Unit 1 CW pumps prior to the required wait time of five (5) minutes, the CW pump(s) will trip on overcurrent. The five minute wait period is required to allow CW backflow through the CW pump to cease; this backflow causes the CW pump(s) to rotate in the reverse direction. This CT is based on the Crew demonstrating non-compliance with procedural Notes designed to prevent damage to the CW pump, which can lead to power escalation limitations for Unit 1 and potentially affect full power operation of Unit 2. An operations representative will be available for consult during the Scenario.

AP-12.01, Attachment 3:

BOP 1. STARTING CIRCULATING WATER PUMPS FROM THE MCR OR LLIS CAUTION: To prevent long term degradation of electrical cables between 1G / 2G Transformers and the associated 1G / 2G 4KV bus, when the 1G & 2G 4KV buses are crosstied with only one Screenwell Transformer supplying both buses, no more than 7 CW pumps should be running.

NOTE:

• If starting circ water pumps that have just tripped, 5 minutes must be allowed for coastdown before starting.

• If loss of power is due to a loss of transformer or is feeder related, the bus voltmeter will read 0 VAC by PCS due to voltmeter tapping off upstream of

()-EP-BKR-()5G1.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 5 Page 45 of 76 Event

Description:

Loss of 1G Screenwell Transformer.

Cue: By Examiner.

AP-12.01, Attachment 3, Continued

a. Check 4160 VAC G bus energized by Normal Supply or X-Tie.

b. Check the LOCAL CONTROL indication for the pump to be started is NOT LIT. IF remote start is inoperable, THEN verify CW pumps to be started are in LOCAL.

c. Select Soft Control for the pump to be started. N/A if local start to occur.

d. Enable Soft Control and verify red border. N/A if local start to occur.

e. Start the selected Circulating Water Pump by pushing the START button.

IF local start to occur due to inoperable PCS, THEN start CW pumps locally.

f. Check amps indicated for pump started.

g. Direct Outside Operator to perform local operational checks IAW OP-48.1.1.

Note: BOP will wait 5 minutes before REMOTELY starting all CW pumps that had previously tripped.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 5 Page 46 of 76 Event

Description:

Loss of 1G Screenwell Transformer.

Cue: By Examiner.

AP-12.01, Notes prior to step 9 SRO NOTE:

• A PIN Number and a Key are required for entry into the ESW Pump house.

• A Key is required for entry into the ESW Pump house and the Low Level Switchgear Room.

• There are no restrictions on the number of CW pumps which may be started with the 1G and 2G buses crosstied.

BOP 9. SEND OPERATOR TO LOW LEVEL INTAKE TO PERFORM THE FOLLOWING PROCEDURES:

• Attachment 2, LOW LEVEL INTAKE RESPONSES

• 0-OP-SW-002, EMERGENCY SERVICE WATER PUMP OPERATION

• OP-48.1.1, STARTING ANY CW PUMP AP-12.01 SRO/RO 10. CHECK INTAKE CANAL LEVEL - GREATER THAN TRIP SETPOINT

• Annunciator ( )F-G1, INTK CANAL LO LVL TRIP - NOT LIT

• Intake Canal level - GREATER THAN 23.5 FEET AP-12.01 SRO/RO 11. CHECK CW LOSS - SUSTAINED WITH NO EXPECTATION OF RECOVERY Step 11 RNO actions: GO TO Step 13.

AP-12.01 SRO 13. CONTINUE TO REDUCE UNIT LOAD AS NECESSARY TO MAINTAIN VACUUM Team will determine not necessary to reduce turbine load.

NOTE: Gravel Neck makeup is a portable system placed near the Intake Canal. By design, makeup to Gravel Neck cannot be supplied with the Intake Canal less than 23.5 ft. Gravel Neck notifies the MCR prior to use.

14. CHECK GRAVEL NECK MAKEUP FROM INTAKE CANAL - IN SERVICE.

GO TO STEP 16

16. CHECK INTAKE CANAL LEVEL - STABLE OR RISING

17. GO TO STEP 32

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 5 Page 47 of 76 Event

Description:

Loss of 1G Screenwell Transformer.

Cue: By Examiner.

AP-12.01 SRO 32. NOTIFY THE FOLLOWING:

• OM on call

• Manager Nuclear Operations

• STA AP-12.01, Note prior to step 33 SRO NOTE: Intake canal level must be maintained above 17.2 FT for adequate RS HX inventory.

33. CHECK INTAKE CANAL LEVEL - RISING RO 34. CHECK INTAKE CANAL LEVEL - GREATER THAN 17.2 FT AP-12.01, Note prior to step 35 SRO NOTE: If SW flow to the CC HXs is increased, intake canal level should be monitored.

The valves must be returned to their original position if canal level decreases.

35. THROTTLE OPEN CC HX SW OUTLET VALVES AS NECESSARY TO LOWER CC TEMPERATURE RO Team will determine that this is not necessary.

36. VERIFY CAUSE OF LEVEL DECREASE - CORRECTED

37. RESTORE CW AND SW COMPONENTS (INCLUDING CW CHEMICAL INJECTION BY OPENING 1-SA-285 AND 2-SA-274) TO SUPPORT PLANT CONDITIONS

- END AP-12.01 actions End Event #5

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 48 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

Crew Diagnoses loss of power to both Unit 1 Emergency AC busses.

Crew may directly enter 1-ECA-0.0.

Crew may perform 1-E-0 and enter 1-ECA-0.0 at step 3 of E-0. Either way is acceptable.

ECA-0.0, Loss of All AC Power Performs ECA-0.0 Immediate Actions, OR SRO Prompts ECA-0.0 IAs.

NOTE Prior to Step 1: CSF Status Trees should be monitored for information only. FRs should NOT be implemented.

RO [1] CHECK REACTOR TRIP:

a) Manually trip reactor b) Check the following:

Reactor trip and bypass breakers - OPEN Neutron Flux - LOWER Reports Reactor Tripped SRO Acknowledges Reactor Tripped ECA-0.0, Loss of All AC Power RO [2] CHECK TURBINE TRIP:

a) Manually trip the turbine b) Close MSTVs Closes MSTVs Reports Turbine Tripped, Immediate Actions of ECA-0.0 complete.

SRO Acknowledges Turbine Tripped and completion of ECA-0.0 Immediate Actions.

Note: MSTVs may have been closed on E-0, Step 2.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 49 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0 SRO 3. CHECK RCS ISOLATION:

RO a) Letdown isolation valves - CLOSED 1-CH-LCV-1460A - Manually Closes Valve 1-CH-LCV-1460B - Manually Closes Valve 1-RH-HCV-1142 - Checks Valve Closed SRO b) PRZR PORVs - CLOSED RO Reports Yes, PRZR PORVs Closed.

SRO c) Loop drain valves - CLOSED 1-RC-HCV-1557A 1-RC-HCV-1557B 1-RC-HCV-1557C RO Reports Yes, Loop drain valves closed.

SRO d) RX Head vent valves - CLOSED 1-RC-SOV-100A-1 1-RC-SOV-100A-2 1-RC-SOV-100B-1 1-RC-SOV-100B-2 RO Reports Yes, RX Head vent valves closed.

SRO e) PRZR vent valves - CLOSED 1-RC-SOV-101A-1 1-RC-SOV-101A-2 1-RC-SOV-101B-1 1-RC-SOV-101B-2 RO Reports Yes, PRZR vent valves closed

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 50 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0 NOTES Prior to Step 4: Local actions performed in the field may require use of the following:

Sound Powered Headphones to communicate and coordinate with Control Room or other locations.

Appropriate Vital Area Key to access locked areas.

SRO 4. CHECK AFW FLOW - GREATER THAN 350 GPM [450 GPM]

BOP Reports No, 0 gpm AFW flow indicated.

Step 4 RNO SRO Do the following:

Check TD AFW pump running. IF NOT, THEN manually open steam supply valves.

BOP Reports No, TDAFW pump not running, opening steam supply valves.

Monitors TDAFW start, and reports AFW Indicated at (actual AFW indicated).

CT-3: Establish AFW Flow during SBO. Establish greater than 350 gpm AFW flow before wide range level in any 2 steam generators is less than 7%.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 51 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0 SRO CAUTIONS prior to Step 5:

If EDG 3 is loaded on 2J emergency bus, an evaluation should be made prior to taking any actions affecting EDG 3.

Instrument Air must be restored in a timely manner using 1-IA-C-1, 2-IA-C-1, or the Temporary Diesel Driven Air Compressor. Emergency Bus restoration must consider operation of an emergency bus supplied air compressor.

Breaker 15J3 will not close automatically with an Undervoltage or Degraded Voltage Signal on Unit 2 J Bus, except with a valid Unit 1 SI signal.

RO/BOP Acknowledge CAUTIONS.

SRO 5. TRY TO RESTORE POWER TO ANY AC EMERGENCY BUS a) Check EDG - RUNNING May query Unit 2 concerning status of #2 and #3 EDG. Unit 2 will respond that #3 EDG is supplying 2J Emergency Bus; #2 EDG started but tripped on overspeed.

Report No #1 EDG not running; there appears to be a problem with the air start motors.

SRO Step 5. RNO: Do the following:

1) Put EDG in EXERCISE.

BOP Places #1 EDG in EXERCISE.

SRO 2) Start EDG.

BOP Reports #1 EDG is NOT running.

SRO 3) Check established or establish generator voltage by depressing Field Flash pushbutton.

SRO 5) GO TO Step 5c.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 52 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0, Step 5 (Continued)

SRO c) Check AC emergency buses - AT LEAST ONE ENERGIZED RO/BOP Reports No, 1H and 1J emergency busses are NOT energized.

SRO 1) IF both EDGs NOT running THEN initiate 0-AP-17.06, AAC DIESEL GENERATOR - EMERGENCY OPERATIONS AND GO TO Step 6.

CT - 4: Energize the 1J emergency bus from the AAC diesel within 10 minutes of entering AP-17.06. Based on SPS-CT-1, Re-energize an Emergency Bus on the AAC DG. (WOG E-0-C). Critical Task start time begins when the Crew enters 0-AP-17.06, and Critical Task stop time ends when AAC DG is loaded on the 1J bus.

NOTE: 0-AP-17.06 Actions begin on Page 57.

ECA-0.0, Step 6 SRO 6. CHECK LOSS OF EMERGENCY BUSES - DUE TO APPENDIX R FIRE RO Reports No, Loss due to a loss of off-site power.

SRO Goes to Step 8.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 53 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0, Step 8 SRO Caution Prior to Step 8: If an SI signal exists or an SI signal is actuated during this procedure, it should be reset to permit manual loading of equipment on an AC emergency bus.

RO Acknowledges Caution.

SRO 8. DEFEAT AUTO START OF EQUIPMENT:

a) Put the following switches in Pull to Lock:

Air recirc fans (A & C CTMT Recirc Fans)

LHSI pumps OSRS pumps ISRS pumps CS pumps BC pumps PRZR heaters (A PRZR heater)

CHG pumps MD AFW pumps CN pumps Filter exhaust fans (1-VS-F-58A)

CC pumps RO Places component switches in PTL/Lockout.

SRO b) Check breakers open by checking breaker position indicating lights - RED LIGHTS NOT LIT CS pumps ISRS pumps RO Reports Yes, Red lights not lit.

SRO c) Check breakers open by checking breaker position indicating lights - RED LIGHTS NOT LIT.

MD AFW pumps RO Reports Yes, Red Light not lit.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 54 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0, Step 9 SRO 9. LOCALLY ISOLATE RECP SEALS.

• RCP Seal Return, 1-CH-MOV-1381

• RCP Seal injection, 1-CH-MOV-1370

• Seal Injection needle valves, 1-CH-294, 1-CH-297, 1-CH-300.

• Thermal barrier CC, 1-CC-96.

RO RO directs Field operator to close, 1-CH-MOV-1381, 1-CH-MOV-1370, Seal Injection valves 1-CH-294, 1-CH-297, and 1-CH-300; and 1-CC-96.

ECA-0.0 Step 10 SRO 10. CHECK COMMUNICATIONS CAPABILITY.

• Gaitronics or RO

• Station Radios ECA-0.0 Step 11 SRO 11. TAKE ACTION TO CONSERVE INTAKE CANAL INVENTORY.

a. Check Unit 2J bus - ENERGIZED. RO reports 2J IS ENERGIZED.

b. Check closed or close condenser circ water isolation valves:

RO

• 1-CW-MOV-100A

• 1-CW-MOV-106B

• 1-CW-MOV-100C

• 1-CW-MOV-106D

c. Initiate SW isolation IAW Attachment 4.

RO closes Circ Water isolation valves.

RO directs field operator to initiate SW isolation IAW Attachment 4 ECA-0.0 Step 12 SRO Caution before Step 12

• When power is restored to either AC emergency bus from an offsite source or the associated EDG recovery actions should continue, starting with Step 33.

• If the AAC Diesel Generator is supplying only Bus 1J and is not required by Unit 2, recovery actions should continue, starting with Step 33.

12. TRY TO LOCALLY RESTORE AC POWER.

a. Initiate AP-17 series procedures to restore EDGs.

b. Initiate 0-AP-10.08, STATION POWER RESTORATION, to restore power to transfer buses.

c. Initiate backfeed alignment.

Note: At this time power should be restored to 1J bus from the AAC Diesel Generator

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 55 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0 Step 33.

SRO 33. CHECK IF 4160V AC EMERGENCY POWER IS RESTORED.

a. AC emergency buses - AT LEAST ONE ENERGIZED FROM THE FOLLOWING.

• Off Site Source

• Associated EDG RO/BOP

• AAC Diesel Generator

b. Check FSGs - Any implemented. No, go to Step 33.d

c. Perform 1-FSG-13. Not needed goes to next step.

d. Check Bus 1H or 1J ENERGIZED FROM ANY OF THE FOLLOWING.

• Off Site Source

• Associated EDG

• AAC Diesel Generator Goes to Step 34.

ECA-0.0 Step 34 SRO 34. MANUALLY OR LOCALLY CONTROL SG PORVS TO STABILIZE SG PRESSURES.

RO RO checks SG PORVs and adjusts if necessary. (Should not be necessary at this time)

ECA-0.0 Step 35 SRO 35.CHECK FOLLOWING EQUIPMENT LOADED ON AC EMERGENCY BUS

• CHG pump SW pump

• CHG pump CC pump

• 480 VAC MCCs

• Vital bus UPS

• Gaitronics

• One control room chiller(Two Control Room Chillers if any MCR or ESGR temperature indicator greater than 84oF, monitor approximately every hour)

• One Unit 1 Control Room AHU and one Unit 2 Control Room AHU.

• One Unit 1 ESGR AHU and one Unit 2 ESGR AHU

• Aux Vent filtered exhaust fan

• Turning Gear oil pump

• Turbine Turning Gear

• Common Radiation monitoring cabinets

• Semi Vital Bus

• IA Compressor.

RO RO checks all equipment available or directs field operator to start equipment as necessary.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 56 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

ECA-0.0 Step 36 Note before Step 36.

NOTE: If RCP seal cooling was previously isolated, further cooling of the RCP seals will be established by natural circulation cooldown as directed in subsequent guidelines.

36. IDENTIFY RECOVERY PROCEDURE.

a. Check RCS subcooling based on CETCs - GREATER THAN 30oF [85 oF].

b. Check PRZR level - GREATER THAN 22% [50%].

c. Check SI equipment satus:

• SI equipment HAS REMAINED SECURED UPON AC POWER RESTORATION.

• SI flow - isolated.

d. GO TO 1-ECA-0.1, LOSS OF ALL AC POWER RECOVERY WITHOUT SI REQUIRED.

The Scenario may be terminated when Lead Evaluator determines.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 57 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

Time Position Applicants Action or Behavior 0-AP-17.06, AAC DG Generator - Emergency Operations BOP NOTES Prior to Step 1:

A one-line diagram showing the AAC Electrical distribution is provided in Attachment 1.

The AAC Diesel Generator should automatically start when Transfer Buses D and F OR E and F are deenergized.

1. CHECK EMERGENCY BUSES 1J AND 2H - EITHER OR BOTH DEENERGIZED Yes, both de-energized.

CT-4: Energize the 1J emergency bus from the AAC diesel within 10 minutes of entering AP-17.06. Based on SPS-CT-1, Re-energize an Emergency Bus on the AAC DG. (WOG E-0-C). Critical Task start time begins when the Crew enters 0-AP-17.06, and Critical Task stop time ends when AAC DG is loaded on the 1J bus.

0-AP-17.06 BOP CAUTION Prior to Step 2:

Loading of the AAC Diesel should consider availability of Instrument Air from 1-IA-C-1 or the Temporary Diesel Air Compressor.

2. GO TO THE APPROPRIATE STEP BASED ON DESIRED USE OF THE AAC DIESEL GENERATOR Step 3, Only Bus 1J to be energized Goes to Step 3.

0-AP-17.06 BOP 3. CHECK AAC DIESEL GENERATOR - AVAILABLE AND RUNNING Annunciator 0-WD-C2, AAC SYSTEM AVAILABLE BUS 1D - LIT AND Annunciator 0-WD-D1, AAC GENERATOR TRIP - NOT LIT Locates to the Waste Disposal Board and verifies annunciator status as above.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 58 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

0-AP-17.06 BOP CAUTION Prior to Step 4:

An overcurrent fault on 15D1 will prevent 0-AAC-BKR-05L3 from closing.

NOTE Prior to Step 4:

Annunciator 0-WD-C2, AAC SYSTEM AVAILABLE BUS 1D, should go out when 0-AAC-BKR-05L3 closes.

Acknowledge CAUTION and NOTE.

4. ENERGIZE TRANSFER BUS D BY CLOSING 0-AAC-BKR-05L3 a) At Unit 1 EDG 3 Control Panel, place Transfer Switch NORMAL/AAC, 0-AAC-43-15J8, in AAC position Locates to the #3 EDG Panel and places Switch in AAC Position.

b) Check Annunciator 1K-D3, BUS 1D UNDERVOLT - NOT LIT Verifies annunciator 1K-D3 - Not LIT.

0-AP-17.06 BOP 5. CHECK OR PLACE THE FOLLOWING LOADS IN PTL a) Put the following switches in PTL / LOCKOUT:

1-VS-F-1B (14J7) 1-SI-P-1B (14J3) 1-RS-P-2B (14J8) 1-RS-P-1B (14J4) 1-CS-P-1B (14J5)

PRZR Heater Group A (14J9) 1-CH-P-1B (15J5) 1-CH-P-1C (15J2, ALT) 1-FW-P-3B (15J4) 1-CC-P-1B (15J10) 1-VS-F-58B, if powered from Alternate source, 14J13 Places control switches in PTL / Lockout (bolded above).

b) Check breakers open by checking breaker position indicating lights - RED LIGHTS NOT LIT 1-CS-P-1B (14J-5) 1-RS-P-1B (14J-4)

Verifies indicating lights OUT.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Event No.: 6 Page 59 of 76 Event

Description:

Loss of Offsite Power, ECA-0.0 Cue: By Examiner.

0-AP-17.06, Step 5 c)

BOP c) Check breaker open by checking breaker position indicating lights - RED LIGHTS NOT LIT 1-FW-P-3B (15J4)

Identifies Red Light NOT LIT; Goes to Step 5.

0-AP-17.06 Step 6 BOP 6. ENERGIZE EMERGENCY BUS 1J a) Place the Sync switch for 15J8 in ON b) Check breaker 15J3 is OPEN Note: May reset amber light by taking 15J8 control switch to Trip and return to Auto-After-Trip position.

Notifies the Team that 1J Emergency Bus will be energized.

c) Close breaker 15J8 by holding control switch in the Closed position for at least five seconds CT-4 Stop Time: ____________________

d) Place the Sync switch for 15J8 in OFF Performs actions bolded above. Reports that 1J Bus has been Energized.

End EVENT #6 End SCENARIO

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2015-1 Scenario No.: 4 Event No.: N/A Page 60 of 76 FOLDOUT PAGES FOR REFERENCED PROCEDURES

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 61 of 76 SIMULATOR OPERATORS GUIDE Simulator Scenario Checklist Perform Simulator Turnover Pre-session, and Post-session Checklist prior to the first Scenario of the day.

Perform Simulator Turnover Post-session Checklist after the last Scenario of the day.

Ensure Feed Control Role Player has been briefed concerning expectations.

Perform/Verify Simulator Setup:

Recall IC -404 [T-Rex: 425] (~5%) and implement TRIGGER #30 to activate all passive malfunctions and verify Trigger #30 implemented.

Verify Semi-Vital Bus and Power Source Magnet on J bus supply.

Verify 1-SI-P-1A in Pull-To-Lock, with red (tagged) magnet Verify 4 CW pumps running on Unit 1, 3 CW pumps running on Unit 2 Verify BC, Remotes, BC_505_INST_ASST, AUTO Open SimView [Insight] and add the following points asp_ao_off Verify 1K-F2, MN XFMR TROUBLE, Clear.

Enter/Verify the following MALFUNCTIONS:

Trigger Malfunction Delay Ramp Trigger Value Final Type (Auto or Manual)

RM0209 PROCESS RAD 10 0 1 0 0.5 MAN MONITOR RI-CC-105 FAILURE PG0202 DISABLE PG-P-1B AUTO 0 0 3 FALSE TRUE MAN START PG0101 THERMAL OVERLOAD 10 0 3 FALSE TRUE MAN PG-P-1A RC1503 PRZR PRESS 10 0 5 0 1 MAN CONTROLLER FAILURE (1-RC-PC-1444H)

EL0801 LOSS OF SCREENWELL 10 0 7 FALSE TRUE MAN TRANSFORMER 1 EL01 LOSS OF OFFSITE POWER 10 0 9 FALSE TRUE MAN ED0201 EDG 1 AIR START 0 0 9 FALSE TRUE MAN SYSTEM FAILURE ED0602 EMERG DIESEL 2 0 0 9 FALSE TRUE MAN OVERSPEED CW0101 1-CW-P-1A TRIP ON 5 0 20 FALSE TRUE AUTO OVERCURRENT CW0102 1-CW-P-1B TRIP ON 5 0 21 FALSE TRUE AUTO OVERCURRENT CW0104 1-CW-P-1D TRIP ON 5 0 22 FALSE TRUE AUTO OVERCURRENT CW0103 1-CW-P-1C TRIP ON 5 0 23 FALSE TRUE AUTO OVERCURRENT

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 62 of 76 SIMULATOR OPERATORS GUIDE FW47 DISABLE FW-P-2 AUTO 0 0 30 FALSE TRUE ACTIVE START CC07 DISABLE CC-HCV-100 0 0 30 FALSE TRUE ACTIVE AUTO CLOSURE FP0301 FACP07 ALARM HORN 0 0 30 FALSE TRUE ACTIVE FAILURE FP0302, FPS SPEAKER FAILURE 0 0 30 FALSE TRUE ACTIVE Enter/Verify the following REMOTE FUNCTIONS:

Trigger Description Delay Ramp Trigger Value Final Type (Auto or Manual)

LW_130 CONTAMINATION 10 600 7 0 100 MAN DRAIN PUMP A RECIRC SA_223 SERVICE AIR 2:00 1:00 11 0 100 MAN COMPRESSOR SA-C-2C DISCHARGE ISO VALVE CHMOV381 CH-MOV-381 RCP 2:00 0 13 100 0 MAN SEAL RETURN CHMOV370 CH-MOV-370 RCP 2:00 0 13 100 0 MAN SEAL INJECTION CH_294 RC PMP A SEAL ISOL 2:00 0 13 31 0 MAN VLV CH_297 RC PMP B SEAL ISOL 2:00 0 13 31 0 MAN VLV CH_300 RC PMP C SEAL ISOL 2:00 0 13 31 0 MAN VLV CC_96 THERMAL BARRIER RCP 2:00 0 13 100 0 RTRN VV SW_39 OUTLET SW ISOLATION 2:00 0 15 100 0 MAN VALVE FM 1-CC-E-1A SW_35 OUTLET SW ISOLATION 2:00 0 15 100 0 MAN VALVE FM 1-CC-E-1B SW_52 OUTLET SW ISOLATION 2:00 0 15 100 0 MAN VALVE FM 1-BC-E-1A SW_48 OUTLET SW ISOLATION 2:00 0 15 100 0 MAN VALVE FM 1-BC-E-1B SW_43 OUTLET SW ISOLATION 2:00 0 15 100 0 MAN VALVE FM 1-BC-E-1C FW_141 AUX FW PUMP FW-P-2 2:00 0 17 100 0 MAN discharge flow to hdr A isol vlv FW_156 AUX FW PUMP FW-P-3A 2:00 0 17 100 0 MAN discharge flow to hdr A isol vlv FW_171 AUX FW PUMP FW-P-3B 2:00 0 17 100 0 MAN discharge flow to hdr A isol vlv SIP1A_BKRPOS, 1-SI-P-1A BKR 0 0 30 0 2 MAN POSITION

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 63 of 76 SIMULATOR OPERATORS GUIDE Enter/Verify the following EVENT TRIGGERS:

AUTO TRIGGER SETUP DESCRIPTION Trigger07 & lw_130 > 0.1 & lw_130 < 0.5 & CWP1A_BKR 20 Trip CW-P-1A if started < 5 minutes after loss of Bus Power Trigger07 & lw_130 > 0.1 & lw_130 < 0.5 & CWP1B_BKR 21 Trip CW-P-1B if started < 5 minutes after loss of Bus Power Trigger07 & lw_130 > 0.1 & lw_130 < 0.5 & CWP1D_BKR 22 Trip CW-P-1D if started < 5 minutes after loss of Bus Power Trigger07 & lw_130 > 0.1 & lw_130 < 0.5 & CWP1C_BKR 23 Trip CW-P-1C if started < 5 minutes after loss of Bus Power Trigger Summary:

TRIGGER TYPE DESCRIPTION 1 MAN PROCESS RAD MON FAILURE, RI-CC-105 THERMAL OL PG-P-1B, WITH AUTO START FLR 3 MAN 5 MAN PRZR PRESS CONTROLLER, 1-RC-PC-1444H, FAILURE 7 MAN LOSS OF SCREENWELL XFMR 1 9 MAN LOSS OF OFFSITE, WITH EDG 1AND EDG 2 FAILURE 11 MAN STARTS TEMP DIESEL AIR COMPRESSOR 13 MAN RCP SEAL INJECTION ISOLATION 15 MAN SW ISOLATION 17 MAN AUX FW ISOLATION OF H HEADER 20 AUTO TRIP 1-CW-P-1A IF START < 5 MINUTES 21 AUTO TRIP 1-CW-P-1B IF START < 5 MINUTES 22 AUTO TRIP 1-CW-P-1D IF START < 5 MINUTES 23 AUTO TRIP 1-CW-P-1C IF START < 5 MINUTES 30 MAN DISABLE FW-P-2 AUTO START 30 MAN DISABLE CC-HCV-100 AUTO CLOSURE 30 MAN FP0301, Disable FP Alarm 30 MAN FP0302, Disable FPS Speaker 30 MAN SIP1A_BKPOS RACK_OUT

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 64 of 76 SIMULATOR OPERATORS GUIDE Verify the following control room setup:

Place the simulator in RUN and verify normal 100% power operation indications.

Verify Red Magnets on the following components: 1-SI-P-1A Verify All pink magnets collected from previous scenarios.

Verify vertical board PCS monitor on ALARM SCREEN.

Reset ICCMs.

Verify all calcalc points are displayed on PCS: U9103, U9104, U9105V.

Verify Component Switch Flags; 1-VS-F-58A and 1-VS-F-58B switches (AUTO AFTER STOP).

Verify Brass Caps properly placed (Hi-Hi CLS, MSTVs, CH-MOV-1350, CW and SW MOVs, CTMT Hogger suction, CNDSR Vacuum breaker).

Radiation Monitors all clear.

Verify SG PORVs set for 1035 psig.

Verify D bank rod height at 149 steps and Bank Overlap Counter at 533.

Advance Charts.

Verify Containment Instrument Air Compressors are on Inside Suction (all RMs reset).

Verify SYNC keys in proper place.

Verify BOL reactivity plans and benchboard Reactivity Placard is current.

Reset Blender Integrators for Boric Acid to 100 and PG to 1000.

Verify Simulator Session In Progress light is turned ON.

Verify no persons are logged onto network computer to ensure no procedures displayed.

Verify PCS time matches Sim time.

Spot check all ARPs are clean, verify the following ARPs are clean.

1C-B8 1D-B4 VSP-J6 VSP-L7 0-RM-L5 0-RM-M5 0-BR-D10

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 65 of 76 SIMULATOR OPERATORS GUIDE Verify CLEAN copies of the following procedures are in place.

1-GOP-1.8 1-OP-TM-001 1-OP-CH-021 0-OPT-RM-001 1-AP-31.00 0-AP-12.01 0-AP-17.06 1-ECA-0.0 0-AP-53.00 Ramp Plan

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 66 of 76 SIMULATOR OPERATORS GUIDE Brief This simulator performance scenario is performed in the EVALUATION MODE. You should not direct questions to the evaluators. Otherwise, you should perform as if you were in the MCR.

Your ability to maintain a log is not being graded, but maintaining a rough log is recommended to help during briefs.

If you need to communicate with the Unit 2 operator, verbally state, Unit 2 and an instructor will locate to the Unit 2 area and respond to you as quickly as possible.

In the unlikely event that the simulator fails such that illogical indications result, the session will be terminated. In other words, respond to what you see. If there is a problem with the simulation, the session will be terminated or adjusted as appropriate based on the specific problem.

Assign operating positions.

TEAM 1 TEAM 2 TEAM 3 SRO RO BOP Ask for and answer questions.

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Surry 2016-1 Scenario No.: 4 Page 67 of 76 SIMULATOR OPERATORS GUIDE Conduct shift turnover:

The initial conditions.

Unit 1 currently operating at ~5% reactor Power. Semi-Vital Bus is on the J Supply.

All systems and crossties are operable with the following exception:

• Containment Smoke and heat detectors are non-functional due to local fire panel failure. TRM Section 3.3.1, Fire Detection Instrumentation, Condition B, Smoke Detectors, and Condition C, Heat Detectors is in effect. Containment air temperatures monitored once/hour, and restore to Functional status in 14 days. The Extra Reactor Operator will perform these checks.

• 1-SI-P-1A is tagged out for breaker work (8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> ago). 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TS clock in effect. Return to service expected later this shift.

Unit #2 is at 100% power.

Shift orders are to place the Unit on-line and commence a ramp to 30% in accordance with 1-GOP-1.8, Unit Startup, HSD to Max Allowable Power, Step 5.6.13; and 1-OP-TM-001, Turbine - Generator Startup to 20% - 25%

Turbine Power, Section 5.7. Station Management has given permission to continue the startup.

Current Boron concentration is 1487 ppm. 8.0 weight percent in the A BAST. Blend is in the Blender.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 68 of 76 SIMULATOR TURNOVER CHECKLIST Pre Session Checks:

Safety Injection Section (Magnets) CW/SW Section RCS Section CVCS SI-MOV-1865A R G Brass Caps Tcold Loop Stop Pos (R - O)

Core Life Plaque R G SW MOVs A BC SI-MOV-1865B 103A 103B 103C 103D Loop Bypass Valves (G - C)

Ramp Plan Book SI-MOV-1865C R G A BC OP-RX-010 Book CW MOVs SI-MOV-1869A R G Thot Loop Stop Pos (R - O) PG Int Set 1000 106A 106B 106C 106D A BC SI-MOV-1869B R G BA Int Set 100 SI-MOV-1890A R G T/O CW Inlet Throttle Plaques (10%)

100A 100B 100C 100D SFP PPs Pwr Norm Alt Tavg/Tref Rec.

SI-MOV-1890B R G T/O PZR Level Recorder NI-NR-B SI-MOV-1890C R G T/O Brass Cap CLS TR A CLS TR B CTMT Hogger Suction Cap Group Step Ctrs CERPIs CH-MOV-1350 Main Steam/Feedwater Electrical/VSP PCS RM/WD/BR SG PORVs Set Synch Key PCS Main Screen RM-112 A BC MSTV Caps A BC SVB Power H J U9103 RM-113 A B C SF/FF Rec Scale LO System Switches U9104 Comm RM Pwr 1J 2J Cond Vac Bkr Cap VS-F-58A Pwr H J Grn Flag U9105V Synch Key VS-F-58B Pwr H J Grn Flag Alarm Screen (List)

Post Session Checks:

PCS Screens (Cleared/Display) RO BOP SM STA PCs Logged OFF (including Booth) Phone cleared Recall IC-1 Advance Charts Procedures Changed Red Light Binders Stored Trash Picked Up/Emptied Vacuum Reqd?

Pink Magnets in Drawer BB and VB Scenario Magnets removed E-Mail to SSG Required DVD Finalized EAL Charts Note Pads Manning Sheets Sticky Tabs (SRO/SM/ARPs) Markers (ARPs) Personnel/Comms Tracking Sheets (Booth)

Floor timers reset/In place Booth timers reset/In place Printers ready/have paper

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 69 of 76 SIMULATOR TURNOVER CHECKLIST Session Conduct:

• Ensure conditions in Simulator Set-up are established.

• Ensure Feed Control Role Player has been briefed.

EVENT 1: Place Unit on line, commence ramp up Operations Supervisor/Management:

• If contacted, acknowledge placing Unit on-line.

System Operator (SOC)/MOC:

• When contacted, acknowledge Unit 1 on-line.

Field Operators:

• If contacted, Turbine Building Operator is monitoring Lube Oil temperatures and will adjust cooling flow as necessary.

• If contacted: Operator reports main transformer pumps and fans operating.

Polishing Building:

• If contacted: 6 polishing beds are in service.

STA:

Will monitor ramp.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 70 of 76 SIMULATOR TURNOVER CHECKLIST EVENT 2 1-CC-RI-105 Fails high with no Auto Action When cued by examiner, implement Trigger #1.

Have copy of 0-OPT-RM-001 ready for Unit 2 to provide to BOP.

Operations Supervisor/Management:

• If contacted, will acknowledge the failure 1-CC-RI-105.

• If contacted, will acknowledge TS 3.13 requirement to maintain the CC Surge Tank Vent Valve closed.

• If contacted, will contact I&C.

• If contacted, will take responsibility for writing the CR.

Unit 2 Operator:

• If asked, Unable to respond to CC RM alarm.

• When asked, Will provide copy of 0-OPT-RM-001.

• When asked, SOV-CC-200 has been placed in close.

STA:

• If contacted, will acknowledge the failure of 1-CC-RI-105. The individual(s) contacted will also acknowledge (but not confirm/deny) any TS LCOs.

• If contacted, will take responsibility for writing the CR.

• If the team has a transient brief: The STA will have no input.

Field Operators:

• If contacted, field operators will report no issues at the RM detector.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge instrumentation failure and Notify I&C.

Rad Protection/HP

• If contacted, acknowledge failure of CC Rad Monitor.

Role play as other individuals as needed.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 71 of 76 SIMULATOR TURNOVER CHECKLIST EVENT 3 1-PG-P-1A trips, no Auto Start 1-PG-P-1B.

When cued by examiner, implement Trigger #3.

Operations Supervisor/Management:

• If contacted, will acknowledge the trip of 1-PG-P-1A, and failure of 1-PG-P-1B to auto start.

• If contacted, will take responsibility for writing the CR.

• If requested. Will notify Electrical Maintenance to investigate.

STA:

• If contacted, will acknowledge the trip of 1-PG-P-1A, and failure of 1-PG-P-1B to auto start.

• If contacted, will take responsibility for writing the CR.

• If the team has a transient brief: The STA will have no input.

Field Operators: (three minutes elapse from dispatch to report).

• If contacted, will check local status of 1-PG-P-1A, no abnormalities noted.

• If contacted, 1-PG-P-1B is operating normally following start.

• If contacted, will check status of 1-PG-P-1A breaker, MCC 1B1-1A 1C. Will report that breaker has thermalled.

Work Week Coordinator:

• If contacted, will acknowledge thermal trip of 1-PG-P-1A and take responsibility for contact of Electrical Maintenance.

Unit 2:

• If contacted, will acknowledge the loss of PG flow and restoration of PG when 1-PG-P-1B started.

Role-play as other individuals as needed.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 72 of 76 SIMULATOR TURNOVER CHECKLIST EVENT 4 PRZR Spray valve fails open.

When cued by examiner, implement Trigger #5.

Critical Task 1: Close the Spray valve before Reactor trip on low pressure. If the RO fails to take timely action in response to the Spray Valve opening, an automatic reactor trip on RCS Low Pressure will occur; an unanticipated reactor trip should be considered as failure criteria.

Operations Supervisor/Management:

• If contacted, acknowledge failure of PRZR Spray valve controller.

• If asked, will notify I&C of the failure.

• If asked, will notify the OMOC.

• When notified, acknowledge any Tech Spec requirements (DNB) due to the failure, but do not imply concurrence with SRO Tech Spec determination.

STA:

• If contacted, acknowledge the failure, acknowledge the Tech Spec requirements for the failed channel, but do not imply concurrence with the Tech Spec determination by the SRO.

• When notified, VPAP-2802, Reg Guide 1.97, TRM Section 3.3, and EP-AA-303 have been reviewed and results discussed with the Shift Manager.

• If the team has a transient brief: The STA will have no input.

• If directed, will monitor RCS pressure recovery using PCS.

I&C:

• If notified, acknowledge the failure and the need to place the channel in trip.

Maintenance/Work Week Coordinator:

• If contacted, will notify I&C of the failed channel, have I&C prepare to place the channel in trip, and prepare to troubleshoot the cause of the failure.

Role play as other individuals as needed.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 73 of 76 SIMULATOR TURNOVER CHECKLIST EVENT 5 Loss of 1G Screenwell Transformer-.

When cued by examiner, implement Trigger #7.

Booth Operator: Triggers 20, 21, 22, and 23 are set to actuate if the CW pumps are started < 5 minutes from the time of the Screenwell transformer trip. Monitor the time from the transformer trip and verify the triggers actuate correctly.

Critical Task 2: If the BOP re-starts the Unit 1 CW pumps prior to the required wait time of five (5) minutes, the CW pump(s) will trip on overcurrent. The five minute wait period is required to allow CW backflow through the CW pump to cease; this backflow causes the CW pump(s) to rotate in the reverse direction. This CT is based on the Crew demonstrating non-compliance with procedural Notes designed to prevent damage to the CW pump, which can lead to power escalation limitations for Unit 1 and potentially affect full power operation of Unit 2. An operations representative will be available for consult during the Scenario.

Operations Supervisor/Management:

• If contacted, will acknowledge the loss of 1G transformer and entry into AP-12.01.

• If contacted, will take responsibility for writing the CR.

Unit 2 Operator:

• If directed, acknowledge that they need to implement AP-12.01.

• If directed, acknowledge they need to throttle waterboxes.

STA:

• If contacted, will acknowledge the loss of 1G transformer.

• If contacted, will take responsibility for writing the CR.

• If the team has a transient brief: The STA will state have no input.

• If directed, will assist the Team in screenwell distribution status.

Field Operators:

• If contacted, will report to the low levels and/or switchyard as directed. The outside operator will report a large bird, dead on top of 1G transformer.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 74 of 76 SIMULATOR TURNOVER CHECKLIST

• If directed, to perform OP-48.1.1, wait 5 minutes and report all local checks for CW pumps are sat.

Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the loss of 1G transformer and will commence investigations and/or efforts to repair.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 75 of 76 SIMULATOR TURNOVER CHECKLIST EVENTS 6 Loss of Offsite power, ECA-0.0.

When cued by examiner, implement Trigger #9.

Critical Tasks CT-3: Establish AFW Flow during SBO; Establish greater than 350 gpm AFW flow before wide range level in any 2 steam generators is less than 7%.

CT-4: Energize the 1J emergency bus from the AAC diesel within 10 minutes of entering AP-17.06.

Operations Supervisor/Management:

• If contacted, acknowledge LOOP, and Reactor Trip of Both Units.

Unit Two:

• If contacted, Event initiated, acknowledge WD, BR, and RMA alarms.

• If asked, will report that #2 EDG is NOT running (started but tripped immediately), and #3 EDG is loaded on 2J Emergency Bus.

Field Operators:

• If asked, to start and align temporary diesel air compressor, Insert Trigger 11. After 3 minutes inform MCR that Temporary Diesel air compressor is running.

• If asked, to RCP Seal isolation , Insert Trigger 13, and inform operator after 2 minutes that RCP Seal isolation completed.

• If asked, to isolate SW IAW Attachment 4, Insert Trigger 15, and inform operator after 2 minutes that Attachment 4 is complete.

• If asked, to isolate AFW H Train, 1-FW-141/156/171, Insert Trigger 17, wait 2 minutes then inform operator that H Train of AFW is isolated.

Op-Test No.: Surry 2017-1 Scenario No.: 1 Page 76 of 76 SIMULATOR TURNOVER CHECKLIST Maintenance/Work Week Coordinator:

• If contacted, will acknowledge the failures and commence investigations.

STA:

• If contacted, acknowledge LOOP and go to floor 10 minutes following call.

• If the team has a transient brief: The STA will have no input for the brief.

Role play as other individuals as needed.

Surry 2017-301 JPM A 006A1.13 U.S. Nuclear Regulatory Commission Surry Power Station SR 17-301 Simulator Job Performance Measure [KA 006A1.13 3.5/3.7]

[Alternate Path]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title ISOLATE/VENT SAFETY INJECTION ACCUMULATORS (Faulted)

K/A: 006A1.13 Accumulator pressure (level, boron concentration) 3.5/3.7 Applicability Estimated Time Actual Time RO/SRO(I)/SRO(U) 20 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• An RCS leak to Containment exists. The Unit was tripped and SI initiated. 1-E-0 and 1-E-1 have been completed and 1-ES-1.2 has been performed up to Step 26.

Standards

• SI Accumulators isolated/venting IAW 1-ES-1.2, Post-LOCA Cooldown and Depressurization, Step 26.

Initiating Cues

• 1-ES-1.2, Post-LOCA Cooldown and Depressurization, Step 26.

• Shift Manager direction.

Terminating Cues

• 1-ES-1.2, Post-LOCA Cooldown and Depressurization, Step 26 completed.

Procedures

• 1-ES-1.2, Post-LOCA Cooldown and Depressurization, Rev. 49.

Tools and Equipment Safety Considerations

• Keys 11, 12, 13

• None Page 1 of 12

Surry 2017-301 JPM A 006A1.13 Simulator Setup

• Recall IC -405 (T-Rex: 415), OR

• Call up 100% power IC and initialize. Switch override MOV865B_OPEN, On, ACTIVE. Switch override MOV865B_CLOSE, Off, ACTIVE. Malfunction FP-0301, FP0302, ACTIVE. PCS105SPKR_NULL, ACTIVE.

• Initiate 420 gpm RCS leak (RC04 at 40% deg). Trip Rx & perform 1-E-0, transfer to 1-E-1 & to 1-ES-1.2 where 1-ES-1.2 is performed up to Step 26. Freeze simulator & verify subcooling > 80°F, Przr level > 50%,

and CTMT pressure < 20 psia (CTMT NOT adverse).

• Throttle AFW flow to stabilize A/B/C SG level.

• Place SIMOV865A_BKR, SIMOV865B_BKR SIMOV865C_BKR, Closed, on Trigger 1.

• If called to open breakers IAW step 26.d.3, double click on Remote function for each MOV, select Open, then click Modify.

• Verify keys NOT in accumulator defeat switches. Have keys 11, 12 & 13 readily available to deliver to Operator upon request.

• An Instructor will be needed on the floor to perform Unit 2 duties.

Initial Conditions

• I am the Shift Manager and you are the Unit 1 BOP.

• Unit 1 currently has an RCS leak to containment in progress. The Unit was tripped and Safety Injection initiated. 1-E-0 and 1-E-1 have been completed and 1-ES-1.2 has been performed up to Step 26.

Initiating Cues

• Here is a copy of 1-ES-1.2, Post-LOCA Cooldown and Depressurization, Step 26. I need you to perform Step 26 to isolate Safety Injection Accumulators.

• When you finish the actions necessary to accomplish this, please inform me.

Notes to the Evaluator:

Task critical elements are bolded and denoted by an asterisk (*).

• This is a Faulted JPM - MOV-1865B fails to shut. Must apply RNO and vent B SI Accumulator.

Page 2 of 12

Surry 2017-301 JPM A 006A1.13 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor is stationed on Unit 2 to silence alarms for the examinee.

• START TIME_______:

STEP 1:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED [Step 26, a)]:

_______ UNSAT STANDARD:

a) RCS subcooling based on CETCs - GREATER THAN 80°F [135°F].

Determines Abnormal Containment conditions do not exist by observing the following conditions:

Ctmt pressure is < 20 psia on 1-LM-PI-100A/B/C/D, and Ctmt radiation is < 105R/hr on 1-RM-RI-127 and 1-RM-RI-128 (CHRRMS).

(b) Determines RCS subcooling is greater than 80°F by observing Train A and/or Train B ICCM.

EVALUATORS NOTE:

• If asked: Ctmt radiation has never exceeded 105R/hr.

COMMENTS:

STEP 2:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED [Step 26, b)]:

_______ UNSAT STANDARD:

b. PRZR level - GREATER THAN 22% [50%].

Determines Przr level > 22% by observing 1-RC-LI-1459A, -1460 and/or -1461 EVALUATORS NOTE:

None.

COMMENTS:

Page 3 of 12

Surry 2017-301 JPM A 006A1.13 STEP 3:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED [Step 26, c)]:

_______ UNSAT STANDARD:

c. Check power to Accumulator discharge isolation valves - AVAILABLE Determines SI Acc. Disch MOVs de-energized by checking:

• 1-SI-MOV-1865A. (Green and Red Indicating Lights out.)

• 1-SI-MOV-1865B. (Green and Red Indicating Lights out.)

• 1-SI-MOV-1865C. (Green and Red Indicating Lights out.)

• d. Locally close the following breakers (key required):

Contacts an auxiliary operator to locally close the following breakers:

• 1H1-2N 5B, 1-SI-MOV-1865A, A SI Acc. Disch MOV).

• 1J1-2E 1B, 1-SI-MOV1865B, B SI Acc. Disch MOV).

• 1J1-2E 1C, 1-SI MOV01865C, C SI Acc. Dich MOV).

e. Check SI Acc. Disch MOVs energized:

• 1-SI-MOV-1865A, (Red Light Lit, Green Light OFF).

• 1-SI-MOV-1865B, (Red Light Lit, Green Light OFF).

• 1-SI-MOV-1865C, (Red Light Lit, Green Light OFF).

EVALUATORS NOTE:

If asked: Supply Key 11, 12, and 13 to Candidate.

Simulator Instructors Note:

When directed: Energize SI Acc. Disch MOVs, using Trigger 1.

COMMENTS:

Page 4 of 12

Surry 2017-301 JPM A 006A1.13 STEP 4:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED. [Step 26, d)]

_______ UNSAT STANDARD:

a) Obtains keys 11, 12 and 13.

• b) Places a key into appropriate keyswitch for each of the following:

• 1-SI-MOV-1865A.

• 1-SI-MOV-1865B.

• 1-SI-MOV-1865C.

• c) Places keyswitch to DEFEAT position for each of the following:

• 1-SI-MOV-1865A.

• 1-SI-MOV-1865B.

• 1-SI-MOV-1865C.

• d) Momentarily places the control switch to CLOSE for each of the following:

• 1-SI-MOV-1865A.

• 1-SI-MOV-1865B.

• 1-SI-MOV-1865C.

e) Acknowledges annunciators 1A-D4 (SI VV OUT OF POSTN), 1A-C4 (ACCUM TK 1A OUTLT VV CLOSED) and 1A-C6 (ACCUM TK 1C OUTLT VV CLOSED).

f) Verifies MOV closure by observing valve position lights for each of the following:

• 1-SI-MOV-1865A,

• 1-SI-MOV-1865C.

g) Recognizes 1-SI-MOV-1865B is NOT going closed.

h) Notifies Shift Manager that 1-SI-MOV-1865B is NOT closing.

EVALUATORS NOTE:

• If asked: Provide operator with keys 11, 12 & 13.

• Substep g) above begins faulted portion of JPM.

• Note: Candidate may elect to direct opening of SI Accumulator Breakers at this step or upon JPM completion.

Simulator Instructor's Note

• If called upon to open breakers IAW step 26.d.3, double click on the Remote functions for each, Select Open, Click Modify.

COMMENTS:

Page 5 of 12

Surry 2017-301 JPM A 006A1.13 STEP 5:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED. [Step 26, d) RNO]

_______ UNSAT STANDARD:

a) IF CTMT and Turbine BLDG IA available, THEN do the following to vent any unisolated SI ACC:

Checks if Ctmt IA is available by observing the following:

• Adequate Ctmt IA pressure indicated on PI-IA-101, and

• One Ctmt IA Compressor running (1-IA-C-4A or -4B).

Checks if Turb Bldg IA is available by observing the following:

• Adequate IA pressure indicated on PI-IA-100, and

• Annunciator 1B-E6, IA LO HDR PRESS/IA COMPR 1 TRBL, clear.

b) Informs Shift Manager to consult with TSC or HP on venting the SI Acc.

c) Checks Process Vent System in service by performing the following:

• Checks one PV Blower, GW-F-1A in service by observing indicating lights.

• Checks PV Vent System flow of ~294 cfm indicated on FI-GW-100.

• Checks PV RMs in service by observing RM meters indicating for MGPI Radiation Monitors.

d) Checks with Unit 2 RO to verify that 2-SI-TV-201A and B are closed.

EVALUATORS NOTE:

• If asked: Consultations with TSC and HP have been completed. Venting is recommended.

Simulator Instructors Note:

If asked: Report Yes, 2-SI-TV-201A and B are closed.

COMMENTS:

Page 6 of 12

Surry 2017-301 JPM A 006A1.13 STEP 6:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED. [Step 26, d) RNO]

_______ UNSAT STANDARD:

a) Checks 1-RC-HCV-1549, PRT Vent, closed by observing valve switch in CLOSED position and GREEN position indicating light lit.

• b) Opens Accum Vnt VV, HCV-1853B by placing control switch to OPEN.

c) Verifies HCV-1853B opens by observing valve position indicating lights change to RED light on & GREEN light OFF.

• d) Opens Ctmt isolation, 1-SI-TV-101A, by depressing OPEN pushbutton (RED light) until RED light remains illuminated and green light goes out.

• e) Opens Ctmt isolation, 1-SI-TV-101B, by depressing OPEN pushbutton (RED light) until RED light remains illuminated and green light goes out.

g) Notes initial pressure of "B" Accumulator by observing PI-1-925 and PI-1-927 or PCS.

• h) Begins opening HCV-1936 by rotating control pot clockwise to raise valve demand.

i) Monitors MGPI Process Vent RMs for any indications of increased activity in the PV System.

j) Checks for accumulator pressure lowering by observing PI-1-925 and PI-1-927 or PCS indication.

EVALUATORS NOTE:

• If asked: Unit 2 will continue to monitor Process Vent Activity.

• NOTE: The order of substep d) and e) above are not critical.

• Following substep j) above: Candidate may raise HCV-1936 demand further to raise Accumulator vent rate.

COMMENTS:

Page 7 of 12

Surry 2017-301 JPM A 006A1.13 STEP 7:

_______ SAT STEP 26, CHECK IF SI ACCUMULATORS SHOULD BE ISOLATED. [Step 26]

_______ UNSAT STANDARD:

REPORTS TO SHIFT MANAGER (EVALUATOR).

Standards Verbal status report made that "B" Accumulator venting is in progress.

EVALUATORS NOTE:

If B SI Acc. Venting in progress, the Evaluator may end the JPM, at Evaluator discretion.

STOP TIME:_______________

COMMENTS:

Comments:

Page 8 of 12

Surry 2017-301 JPM A 006A1.13 Page 9 of 12

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• I am the Shift Manager and you are the Unit 1 BOP.

• Unit 1 currently has an RCS leak to containment in progress. The Unit was tripped and Safety Injection initiated. 1-E-0 and 1-E-1 have been completed and 1-ES-1.2 has been performed up to Step 26.

Initiating Cues

• Here is a copy of 1-ES-1.2, Post-LOCA Cooldown and Depressurization, Step 26. I need you to perform Step 26 to isolate Safety Injection Accumulators.

• When you finish the actions necessary to accomplish this, please inform me.

Surry 2017-301 JPM B 062A2.04 U.S. Nuclear Regulatory Commission Surry Power Station SR 17-301 Simulator Job Performance Measure [062A2.05 3.1/3.4]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Respond to a Loss of Semi-Vital Bus K/A: 062 A2.04 Effect on plant of de-energizing a bus Applicability Estimated Time Actual Time RO/SRO(I)/SRO(U) 10 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• A Loss of Unit 1 Semi-Vital Bus has occurred.

Standards

• Respond to a Loss of Unit 1 Semi-Vital Bus IAW 1-AP-10.05, Steps 1 through 9.

Initiating Cues

• A loss of Unit 1 Semi-Vital Bus has occured.

• Shift Manager direction.

Terminating Cues

• Completion of Step 9 of 1-AP-10.05.

Procedures

• 1-AP-10.05, Loss of Semi-Vital Bus, Rev. 33.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 12

Surry 2017-301 JPM B 062A2.04 Simulator Setup

• Recall IC-406 (T-Rex: 416), OR

• Call up 100% power IC and initialize. Place simulator in RUN.

• Implement EL14, Loss of Semi-Vital Bus. Malfunction FP0301, FP0302, ACTIVE. PCS105SPKR_NULL, ACTIVE.

• Freeze and store IC until needed for Evaluation.

Initial Conditions

• A Loss of Unit 1 Semi-Vital Bus has occurred.

Initiating Cues

• I am the Nuclear Shift Manager. You are the Unit 1 BOP.

• You are to respond to a loss of Unit 1 Semi-Vital Bus IAW 1-AP-10.05, Steps 1 though 9

• When you finish the actions necessary to accomplish this task, please inform me.

Notes to the Evaluator:

Task critical elements are bolded and denoted by an asterisk (*).

If Candidate asks to review procedure, state You must expedite performance of these steps.

Page 2 of 12

Surry 2017-301 JPM B 062A2.04 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor may be needed to silence alarms for the Candidate.

• If Candidate asks to review procedure, state You must expedite performance of these steps.

• START TIME_______:

STEP 1:

CAUTION prior to STEP 1 _______ SAT

• CAUTION: Low vacuum Turbine trip may occur within five minutes. Steps 1 through _______ UNSAT 4 must be performed without delay.

Step 1: CHECK MAIN CONDENSER - REQUIRED STANDARD:

a) Acknowledges CAUTION.

b) Checks Main Condenser Vacuum Required

1) Identifies Reactor Power ~100% using Control Board PR NI Indication NI-1-41B, NI-1-42B, NI-1-43B, NI-1-44B.

2) Identifies turbine ~100% using Turbine 1ST Stage Pressure 1-MS-PI-1446, 1-MS-PI-1447 EVALUATORS NOTE: None COMMENTS:

STEP 2:

_______ SAT Step 2: CHECK AUX STEAM TO AIR EJECTOR - VALVES DEENERGIZED

_______ UNSAT

• 1-AS-FCV-100A

• 1-AS-FCV-100B STANDARD:

a) Checks 1-AS-FCV-100A/100B Valve Position.

Identifies FCV-AS-100A on BB-2 Sloping Section, Green and Red Lights - Out.

Identifies FCV-AS-100B on BB-2 Sloping Section, Green and Red Lights - Out.

EVALUATORS NOTE: None COMMENTS:

Page 3 of 12

Surry 2017-301 JPM B 062A2.04 STEP 3:

_______ SAT Step 3: ALIGN AIR EJECTOR DISCHARGE TO CONTAINMENT:

• Close or check closed 1-SV-TV-103 (AE DISCH TO VENT VENT TV) _______ UNSAT

• Open or check open 1-SV-TV-102A (AE DISCH TO SFGD TV)

• Open or check open 1-SV-TV-102 (AE DISCH TO CTMT TB TV)

STANDARD:

Candidate locates to VB1, Trip Valves Section

• a) Closes 1-SV-TV-103.

b) Checks 1-SV-TV-102A Open.

• c) Opens 1-SV-TV-102.

EVALUATORS NOTE: None.

COMMENTS:

STEP 4:

_______ SAT NOTE prior to Step 4: Main Condenser Vacuum can only be monitored locally or using PCS.

_______ UNSAT Step *4: CHECK MAIN CONDENSER VACUUM - GREATER THAN 26.5 IN HG.

STANDARD:

a) Acknowledges Note.

b) Checks Condenser Vacuum using PCS.

EVALUATORS NOTE:

Candidate may also use Condenser Vacuum indications on VB2, CN-PR-101A & B. These indications are powered from a portion of the Instrumentation System with a Battery Backup COMMENTS:

Page 4 of 12

Surry 2017-301 JPM B 062A2.04 STEP 5:

_______ SAT Step 5: CHECK REACTOR POWER - GREATER THAN OR EQUAL TO 75%

_______ UNSAT STANDARD:

a) Checks Reactor Power using BB2 PR NI indication and determine power is >75%.

NI-1-41B, NI-1-42B, NI-1-43B, NI-1-44B.

EVALUATORS NOTE:

COMMENTS:

STEP 6:

_______ SAT Step 6: START THIRD CONDENSATE PUMP

_______ UNSAT STANDARD:

• a) Starts 1-CN-P-1A, A CN Pump.

b) Checks 1-CN-P-1A ammeter settling to post start amps of approximately 360 amps.

EVALUATORS NOTE:

Before 1-CN-P-1A is started Feed Flow will be less than Steam flow for A/B/C SGs, with SG NR level indications on VB2 lowering.

If the Candidate fails to start 1-CN-P-1A within ~ 5 minutes of runtime, the Unit will trip on Low Low SG level (17%).

COMMENTS:

Page 5 of 12

Surry 2017-301 JPM B 062A2.04 STEP 7:

_______ SAT Note prior to Step 7: With unit at 100% power, Turbine load should be lowered approximately 50 MW. _______ UNSAT 7: REDUCE TURBINE LOAD APPROXIMATELY 50 MW USING LIMITER.

STANDARD:

a) Checks MW indication on BB2, Sloping Section.

• b) Reduces Turbine Load using Limiter until GEN-MEGAWATTS indication on BB2 has been lowered ~ 50 MW.

EVALUATORS NOTE:

Vertical Board MW Chart is de-energized on Loss of Semi-Vital Bus.

Candidate may reduce Turbine Load further to reduce Loop T indication to value less than 100%, on VB2 recorder 1-RC-TR-1412, TEMP - PROTECTION..

Candidate may elect to shift to Turbine Manual, and reduce Turbine Load using the GV Pushbutton on the Turbine Controls section of BB2. This is also acceptable (Turbine Manual Operation is listed in the RNO for the Step, and allows for a finer control of Turbine Power reduction; Operator Auto could also be used, but is less likely due to timeliness.)

COMMENTS:

STEP 8:

_______ SAT Step *8: CHECK ALL SG FLOWS - STEAM FLOW IS LESS THAN OR EQUAL TO FEED FLOW. _______ UNSAT STANDARD:

a) Checks Steam Flow is less than Feed Flow using VB 2 SF/FF Meters, or SG A/B/C Feed Flow & Steam Flow Recorders (1-FW-FR-1478/1488/1498).

EVALUATORS NOTE: None COMMENTS:

Page 6 of 12

Surry 2017-301 JPM B 062A2.04 STEP 9:

_______ SAT Step *9: CHECK REACTOR POWER - LESS THAN OR EQUAL TO 100%

_______ UNSAT STANDARD:

a) Checks Reactor Power less than 100% using PR NIs and/or Loop Tave Recorder on VB2.

EVALUATORS NOTE:

Calorimetric power may be > 100% due to FW overshoot transient. Candidate may begin action to initiate Attachment 1, Prompt Actions to Reduce Reactor Power.

IF Candidate Initiates Attachment 1: Tell Candidate that another operator will perform Attachment 1.

COMMENTS:

STEP 10 STANDARD:

REPORTS TO SHIFT MANAGER (EVALUATOR) 1-AP-10.05, Loss of Semi-Vital Bus, Steps 1 through 9 are complete.

STOP TIME:_______________

Comments:

Page 7 of 12

Surry 2017-301 JPM B 062A2.04 Page 8 of 12

Surry 2017-301 JPM B 062A2.04 END Page 9 of 12

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• A Loss of Unit 1 Semi-Vital Bus has occurred.

Initiating Cues

• I am the Nuclear Shift Manager. You are the Unit 1 BOP.

• You are to respond to a loss of Unit 1 Semi-Vital Bus IAW 1-AP-10.05, Steps 1 through 9.

• When you finish the actions necessary to accomplish this task, please inform me.

Surry 2017-301 JPM C APE054AA1.01 U.S. Nuclear Regulatory Commission Surry Power Station SR 17-301 Simulator Job Performance Measure APE054AA1.01 4.5/4.4]

[Alternate Path]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Perform FR-H.1 K/A: APE054AA1.01, AFW controls, including the use of alternate AFW sources, 4.5/4.4.

Applicability Estimated Time Actual Time RO/SRO(I)/SRO(U) 18 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• A Loss of Secondary Heat Sink has occurred.

Standards

• Heat sink restored IAW 1-FR-H.1, Response to Loss of Secondary Heat Sink, using MFW.

Initiating Cues

• I am the Shift Manager and you are the Unit 1 BOP.

• A loss of Secondary Heat Sink has occurred.

• Here is a copy of 1-FR-H.1, and I want you to respond to the Loss of Heat Sink IAW 1-FR-H.1.

• When you have restored Unit 1 Heat Sink, please inform me.

Terminating Cues

• 1-FR-H.1, Step 4 complete.

Procedures

• 1-FR-H.1, Response to Loss of Secondary Heat Sink, Rev. 38.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 16

Surry 2017-301 JPM C APE054AA1.01 Simulator Setup

• Recall IC-407 (T-Rex: 417), OR

• Call up 100% power IC and initialize. Place simulator in RUN.

• Load the following MALFUNCTIONS:

• EL2102, Loss of J 4160V Bus, Trigger 1.

• FW09, TDAFW Pump FW-P-2 TTV Trip, Trigger 1.

• RC04, RCS Leak, 50% Deg, Trigger 1.

• FW1102, FWP3A Impeller Crack, 20% Deg, Trigger 1.

• FP0301, FPS FACP07 Alarm Horn Failure, Active.

• FP0302, FPS PC Speaker Failure, Active.

• Set U2_FWMOV251X_RF to 0% on eXtremeView AFW2.

• U2_FWP2_RUNNING, Trigger 7.

Load the following REMOTES:

• FW, FWMOV150A_BKR, Open, Trigger 3.

• FW, FWMOV150A, 100%, 60 Sec Ramp, Trigger 4.

• FW, FWMOV150B_BKR, Open, Trigger 5.

• FW, FWMOV150B, 100%, 60 Sec Ramp, Trigger 6.

• PCS105SPKR_NULL, ACTIVE.

Place the Simulator in RUN and Insert Trigger 1.

Perform AP-16.00 Actions, Trip the Reactor and SI. (Approximately 40-50gpm AFW will be available to the SGs.)

When SG WR levels are trending up and SG NR levels <0%; Ensure SI actuated, NOT reset; Freeze the Simulator and Save the IC.

Unit 2 will Simulate attempting to establish AFW cross-tie.

Success path is to establish FW flow to the SGs.

Initial Conditions

• Unit 2 operating at 100% power with all cross-ties operable.

• Unit 1 initially operating at 100%.

• Unit 1 Reactor tripped and SI actuated due to an RCS leak.

• Unit 1 J 4160V emergency bus was lost.

• #3 EDG started, but its output breaker (15J3) tripped.

• Annunciator KG4, 4KV EMERG BUS EMERG SUP BKR AUTO TRIP, actuated.

• The TDAFW pump, 1-FW-P-2, tripped on startup, local investigation in progress.

Initiating Cues I am the Nuclear Shift Manager. You are the Unit 1 BOP.

Unit 1 is experiencing a Loss of Secondary Heat Sink.

You are to perform 1-FR-H.1, Response to Loss of Secondary Heat Sink, to restore flow to the Steam Generators.

When you finish the actions necessary to accomplish this task, please inform me.

Notes Task critical elements are bolded and denoted by an asterisk (*).

Page 2 of 16

Surry 2017-301 JPM C APE054AA1.01 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor will be needed to silence alarms for the examinee.

• START TIME_______:

STEP 1:

_______ SAT CAUTIONs prior to Step 1:

• If total feed flow is less than 350 gpm [450 gpm] due to operator action, this procedure _______ UNSAT should NOT be performed.

• Feed flow should NOT be reestablished to any faulted SG if a non-faulted SG is available.

Step 1: CHECK IF SECONDARY HEAT SINK IS REQUIRED:

a) RCS pressure - GREATER THAN ANY NON-FAULTED SG PRESSURE b) RCS hot leg temperature - GREATER THAN 350°F STANDARD:

a) Acknowledges CAUTIONS.

b) Identifies RCS pressure greater than SG pressure.

c) Identifies RCS hot leg temperature > 350°F.

EVALUATORS NOTE: None.

COMMENTS:

Page 3 of 16

Surry 2017-301 JPM C APE054AA1.01 STEP 2:

Step *2: CHECK IF BLEED AND FEED IS REQUIRED _______ SAT a) Check for either of the following conditions

• Wide range level in any 2 SGs - LESS THAN 12% [27%] _______ UNSAT OR

• RCS pressure - GREATER THAN 2335 PSIG DUE TO LOSS OF SECONDARY HEAT SINK a) RNO GO TO Step 3.

STANDARD:

a) Checks Abnormal Containment conditions do not exist by observing the following conditions:

Ctmt pressure is < 20 psia on 1-LM-PI-100A/B/C/D, and Ctmt radiation is < 105R/hr on 1-RM-RI-127 and 1-RM-RI-128 (CHRRMS).

b) Determines SG WR levels are > 12% and rising using SG LEVEL (WIDE) recorder, 1-FW-LR-1477 on VB2.

c) Checks RCS pressure < 2335 psig using ICCM RCS WR pressure indication, or RCS WR pressure indicator meters.

d) Goes to Step 3.

EVALUATORS NOTE: None.

COMMENTS:

STEP 3:

Step 3: TRY TO ESTABLISH AFW FLOW TO AT LEAST ONE SG:

a) Check SG blowdown TVs - CLOSED b) Check AFW MOVs - OPEN c) Check ECST - AVAILABLE d) Check AFW - AVAILABLE

1) Start AFW Pumps

2) Check total flow to SGs - GREATER THAN 350 GPM [450 GPM]

Goes to Step 3 d) RNO STANDARD:

a) Identifies all SG BD TVs closed using valve position pushbuttons on VB1, TV section.

b) Identifies H Train AFW MOVs, FW-MOV-151E/C/A, indicate Open, (RED light LIT, Green light OUT), and J Train MOVs, FW-MOV-151F/D/B, De-energized (RED and GREEN lights OUT).

c) Checks ECST available using EMERG CST NO. 1 Indicators (1-CN-LI-100/1-CN-LI-101) on VB2 > 90%.

d) Identifies:

1) 1-FW-P-3A running using breaker position indicating lights (RED ON, GREEN OFF); 1-FW-P-3B - De-Energized; 1-FW-P-2 Tripped.

2) AFW flow < 350 gpm (~50 gpm to each SG) using AFW Flow meters (1-FW-FI-100A/100B/100C on VB2)

EVALUATORS NOTE:

If asked, For Step b) above, J Train AFW MOVs were not throttled prior to the J bus loss.

Note: Candidate should not attempt to start 1-FW-P-3B.

COMMENTS:

Page 4 of 16

Surry 2017-301 JPM C APE054AA1.01 STEP 4:

_______ SAT Step 3 d) RNO IF minimum feed flow NOT established, THEN do the following:

1) Stop ALL RCPs. _______ UNSAT

2) IF desired to transfer EDG 3 to Bus 2J to restore power to 2-FW-P-3B, THEN GO TO Attachment 2.

3) Have Unit 2 operator close Unit 2 AFW MOVs.

4) Have Unit 2 operator open the following valves:

• 1-FW-MOV-160A (AUX FEEDWATER CROSSTIE.)

• 1-FW-MOV-160B (AUX FEEDWATER CROSSTIE.)

5) Have Unit 2 operator start AFW pump(s).

6) Control flow to restore narrow range level in at least one SG greater than 12%

[18%].

7) WHEN narrow range level in at least one SG greater than 12% [18%], THEN RETURN TO procedure and step in effect.

8) IF minimum AFW flow NOT established, THEN try to locally restore AFW flow AND GO TO Step 4.

GOES TO STEP 4.

STANDARD:

• 1) Stops RCPs by placing control switch in PTL position and leaving switch in PTL or allowing switch to return to Auto-After-Stop position.

2) Determines #3 EDG not available to supply Unit 1 J bus due to Annunciators indicating a fault on 1J emergency bus, GOES TO substep 3).

3) Directs Unit 2 to close AFW MOVs.

4) Directs Unit 2 to open AFW cross-tie valves.

5) Directs Unit 2 to start AFW pumps.

8) Determines AFW flow through the cross-tie unavailable (no change in indicated AFW flow) and goes to Step 4.

EVALUATORS NOTE:

If asked, for Step 2) above, state that #3 EDG is not supplying Unit 2.

If asked, Unit 2 J Bus energized by off-site power.

Simulator Instructor's Note:

When directed to close Unit 2 AFW MOVs, wait 2 minutes and report MOVs closed.

When directed to open AFW cross-tie MOVs, wait 1 minute and report MOVs open.

When directed to start AFW pumps, wait 30 seconds and report 2-FW-P-3A and B started with low amps indicated.

If directed, to start 2-FW-P-2, actuate Trigger 7, and report 2-FW-P-2, Unit 2 TDAFW pump started.

If directed, operators dispatched to check AFW alignment.

COMMENTS:

Page 5 of 16

Surry 2017-301 JPM C APE054AA1.01 STEP 5:

_______ SAT

4. a) Check CN system - IN SERVICE AND INTACT b) Check MFW system - INTACT _______ UNSAT c) Reset FW isolation signal:

1) Reset both trains of SI if required

2) Push both FW isolation reset pushbuttons d) Establish MFW flow:

1) Start one MFW pump

2) Manually or locally open appropriate feed pump discharge MOV

3) Control flow with SG FW bypass flow valve(s) OR feed REG valve(s) locally STANDARD:

a) Checks CN system intact by noting 1-CN-P-1B/1C running.

b) Check MFW system intact by noting secondary parameters or asking Evaluator or Unit 2 (Simulator Instructor.)

c) *Reset SI Signal: Identify SI is Reset or push SI Reset Pushbuttons (BB1, sloping section.)

• Push BOTH FW RESET Pushbuttons, on BB2.

• d) Establish MFW Flow:

1) Start 1-FW-P-1A, by closing 1-FW-P-1A1 and 1A2 breakers, and checking amps indicated on BB2, sloping section. OR Start 1-FW-P-1B, by closing 1-FW-P-1B1 and 1B2 breakers, and checking amps indicated on BB2, sloping section.

2) Open 1-FW-MOV-150A, if A FW pump started; OR Open 1-FW-MOV-150B, if 1-FW-P-1B started.

3) Open one or more FRV bypass valves, by raising demand on 1-FW-HCV-155A/155B/155C on BB2.

EVALUATORS NOTE:

If asked, for a) or b) above, state there have been no reports of leakage in Unit 1 Turbine Building.

Step d) above: Candidate may reset A or B MFP breaker Amber lights by taking breaker control switch to PTL and returning to Auto.

Simulator Instructor's Note:

If asked, for a) or b) above, state there have been no reports of leakage in Unit 1 Turbine Building.

COMMENTS:

Page 6 of 16

Surry 2017-301 JPM C APE054AA1.01 STEP 6:

_______ SAT Step 5: CHECK SG LEVELS:

a) Narrow range level in at least one SG - GREATER THAN 12% [18%] _______ UNSAT a) RNO IF feed flow to at least one SG verified, THEN maintain flow to restore narrow range level to greater than 12% [18%]. IF flow NOT verified, THEN GO TO Step 6.

STANDARD:

a) Checks SG NR level using meters on VB2 and determines SG NR level not on scale.

b) RNO Verifies MFW flow established using ANY of the following:

1) PCS FW flow indication.

2) SG WR level rate of change rise.

3) RCS Temperature lowering.

EVALUATORS NOTE:

COMMENTS:

STEP 7:

_______ SAT STANDARD:

_______ UNSAT REPORTS TO SHIFT MANAGER (EVALUATOR).

Flow restored to A/B/C SG IAW FR-H.1 with a MFP and the FRV bypass valves.

STOP TIME:_______________

COMMENTS:

Page 7 of 16

Surry 2017-301 JPM C APE054AA1.01 Page 8 of 16

Surry 2017-301 JPM C APE054AA1.01 Page 9 of 16

Surry 2017-301 JPM C APE054AA1.01 Page 10 of 16

Surry 2017-301 JPM C APE054AA1.01 Page 11 of 16

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• Unit 2 operating at 100% power with all cross-ties operable.

• Unit 1 initially operating at 100%.

• Unit 1 Reactor tripped and SI actuated due to an RCS leak.

• Unit 1 J 4160V emergency bus was lost.

• #3 EDG started, but its output breaker (15J3) tripped.

• Annunciator KG4, 4KV EMERG BUS EMERG SUP BKR AUTO TRIP, actuated.

• The TDAFW pump, 1-FW-P-2, tripped on startup, local investigation in progress.

Initiating Cues I am the Nuclear Shift Manager. You are the Unit 1 BOP.

Unit 1 is experiencing a Loss of Secondary Heat Sink.

You are to perform 1-FR-H.1, Response to Loss of Secondary Heat Sink, to restore flow to the Steam Generators.

When you finish the actions necessary to accomplish this task, please inform me.

Surry 2017-301 JPM D EPE007EA2.02 U.S. Nuclear Regulatory Commission Surry Power Station SR17-301 Simulator Job Performance Measure [EPE007EA2.02 4.3/4.6]

[Alternate Path]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Perform E-0, Immediate Actions K/A: EPE007EA2.02 Proper actions to be taken if the automatic safety functions have not taken place 4.3/4/6 Applicability Estimated Time Actual Time RO/SRO(I) 5 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• Unit 1 operating at 100%, and stable.

Standards

• Perform E-0, Reactor Trip or Safety Injection, Steps 1 through 4, from memory.

Initiating Cues

• Given an automatic reactor trip, perform E-0 Immediate Actions from memory.

• Shift manager direction.

Terminating Cues

• 1-E-0, Reactor Trip or Safety Injection, Step 4 Completed.

Procedures

• 0-AP-1.00, Rod Control System Malfunction, Rev. 27.

• 1-E-0, Reactor Trip or Safety Injection, Rev. 72.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 9

Surry 2017-301 JPM D EPE007EA2.02 Simulator Setup

• Recall IC-408 (T-Rex: 418), OR

• Call up 100% power IC and initialize. Place simulator in RUN.

• Load the following:

Remotes, EH, TURB_TRIP_LOC, Trigger 1.

RD18, Failure of Auto Trip to SCRAM Reactor, Active.

MS16, Failure of Relay MS-RLY-104,TRUE, Active.

FP0301, FP0302, Active.

Load Switch Override:

MS, MSSOV104_OPEN, Override ON, Active.

PCS105SPKR_NULL, Active.

• Freeze the Simulator and Store the IC for later performance.

Initial Conditions

• Unit 1 is operating at 100% and stable.

Initiating Cues

• I am the Nuclear Shift Manager. You are the Unit 1 RO.

• Respond to Plant Events.

Notes to the Evaluator:

• Task critical elements are bolded and denoted by an asterisk (*).

Page 2 of 9

Surry 2017-301 JPM D EPE007EA2.02 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor will be needed to silence alarms for the examinee.

• START TIME_______:

STEP 1:

_______ SAT Identifies Manual Reactor trip required using the following Alarms and indications:

1E-A8, REACTOR TRIPPED BY TURB TRIP, FIRST OUT (RED) LIT. _______ UNSAT Annunciators 1F-F4/5/6 RX TRIP CH 1/2/3 AUTO STOP OIL DUMP - LIT.

Reactor Trip Breakers indicate Closed (Red Lights LIT, Green OFF)

Control Rods FULL OUT (228 Steps) using CERPI Trains A and B Display.

D Bank Control Rods Inserting at 72 Steps per Minute.

[1] CHECK REACTOR TRIP:

a) Manually trip reactor b) Check the following:

• All Rods On Bottom light - LIT

• Reactor trip and bypass breakers - OPEN

• Neutron flux - LOWERING STANDARD:

• a) Pushes Reactor Trip Pushbutton on Benchboard 1-1 or 1-2.

b) Checks the following:

All Rods on Bottom Light LIT on CERPI A and/or B.

Identifies Reactor Trip and Bypass breakers Open on BB2, sloping section.

Identifies Neutron Flux Lowering using PR NIs (BB2) near zero %, and IR Nis (BB2) indication lowering, IR SUR indication (-) 0.5 DPM.

c) Reports Reactor Tripped to Evaluator.

EVALUATORS NOTE:

Candidate announces and commences E-0 Immediate Actions.

Discretionary for Evaluator to repeat back Reactor Tripped.

Simulator Instructor's Note The Simulator should be in Run when the Candidate enters. When the Candidate is ready, implement Trigger 1.

COMMENTS:

Page 3 of 9

Surry 2017-301 JPM D EPE007EA2.02 STEP 2:

_______ SAT

[2] CHECK TURBINE TRIP:

a) Manually trip the turbine _______ UNSAT b) Check all turbine stop valves - CLOSED c) Isolate reheaters by closing MSR steam supply SOV

• 1-MS-SOV-104 c) RNO IF reheater FCVs will NOT close, THEN close MSR steam supply MOVs.

d) Check generator output breakers - OPEN (Time Delayed) e) RNO IF Generator Output Breakers do NOT open within 30 seconds, THEN manually open output breakers AND place the EXCITATION control switch in OFF.

STANDARD:

a) Pushes BOTH Turbine Trip pushbuttons simultaneously.

b) Checks Turbine Stop Valves closed using Valve Position Lights on Turbine Controls Section (SV1/SV2/SV3/SV4 - GREEN Light ON, RED Light OFF).

• c) Identifies MSR Steam Supply Open (RED) Lights LIT, Places 1-MS-SOV-104 switch to CLOSE, Identifies MSR Steam Supply OPEN lights remain LIT.

• d) RNO Takes control switch for 1-MS-MOV-100A/100B/100C/100D to close, and identifies MS MOV indicating lights intermediate.

e) Identifies Generator Output Breakers open after 30 Seconds.

f) Reports Turbine Tripped.

EVALUATORS NOTE:

Discretionary for Evaluator to repeat back Turbine Tripped.

COMMENTS:

STEP 7:

_______ SAT

[3] CHECK BOTH AC EMERGENCY BUSES - ENERGIZED

_______ UNSAT STANDARD:

a) Checks H and J Emergency buses energized by noting voltage between 4000 and 4400 VAC on #1 EDG Panel and #3 EDG Panel, respectively.

b) Reports AC Emergency Buses Energized.

EVALUATORS NOTE:

Candidate may also vocalize H and J Frequency when checking voltages for emergency buses.

Discretionary for Evaluator to repeat back AC Emergency Buses Energized.

COMMENTS:

Page 4 of 9

Surry 2017-301 JPM D EPE007EA2.02 STEP 8:

_______ SAT

[4] CHECK IF SI INITIATED:

a) Check if SI is actuated: _______ UNSAT

• LHSI pumps - RUNNING

• SI annunciators - LIT

• A-F-3

• A-F-4 a) RNO Check if SI is required or imminent as indicated by any of the following:

• Low PRZR pressure

• High CTMT pressure

• High steamline differential pressure

• High steam flow with low Tave or low line pressure IF SI is NOT required, THEN GO TO 1-ES-0.1, REACTOR TRIP RESPONSE.

STANDARD:

a) Check if SI Actuated Identifies 1-SI-P-1A and 1-SI-P-1B Not running by checking breaker indicating Lights (GREEN Light LIT, RED Light OUT), and 0 amps indicated (BB1, sloping section).

Identifies SI Initiated Train A and Train B, Not LIT.

a) RNO Check SI required or imminent Identifies RCS Pressure > 1885 psig and rising, using ICCM WR pressure (VB 2) or RCS Pressure Protection channels (VB 1.)

Identifies CTMT Pressure < 17.7 psia (Hi CLS setpoint) and stable using CTMT pressure indications 1-LM-PI-100A/100B/100C/100D (VB1).

Identifies no steam line differential (< 120 psid) using Steam Header Pressure and Steam Generator Pressure meters on VB2.

Identifies Hi Steam Flow Logic not met using A/B/C Steam Line Flow meters on VB2.

b) Reports SI is not in service or required, E-0 Immediate Actions are complete, and recommend Transition to ES-0.1.

EVALUATORS NOTE:

Imminent is defined as within the next one to two hours as defined in the Emergency Plan.

Discretionary to repeat back SI is not in service or required, E-0 Immediate Actions are complete, and recommend Transition to ES-0.1.

COMMENTS:

Page 5 of 9

Surry 2017-301 JPM D EPE007EA2.02 STEP 9:

STANDARD: _______ SAT REPORTS TO SHIFT MANAGER (EVALUATOR) _______ UNSAT E-0 Immediate Actions have been completed.

STOP TIME:_______________

Comments:

Page 6 of 9

Surry 2017-301 JPM D EPE007EA2.02 Page 7 of 9

Surry 2017-301 JPM D EPE007EA2.02 Page 8 of 9

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• Unit 1 is operating at 100% and stable.

Initiating Cues

• I am the Nuclear Shift Manager. You are the Unit 1 RO.

• Respond to Plant Events.

Surry 2017-301 JPM E APE025AA1.09 U.S. Nuclear Regulatory Commission Surry Power Station SR17-301 Simulator Job Performance Measure [APE025AA1.09 3.2/3.1]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title RESPOND TO A LOSS OF THE OPERATING RHR PUMP K/A: APE025AA1.09 LPI pump switches, ammeter, discharge pressure gauge, flow meter, and indicators 3.2/3.1 Applicability Estimated Time Actual Time RO/SRO(I) 15 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• 1-RH-P-1A is in service on "A" RHR HX.

Standards

• 1-RH-P-1B started and RHR flow restored in accordance with 1-AP-27.00, Loss of Decay Heat Removal Capability.

Initiating Cues

• Trip of the operating RHR pump.

• Shift Manager direction.

Terminating Cues

• 1-AP-27.00, Loss of Decay Heat Removal Capability, step 14 completed.

Procedures

• 1-AP-27.00, Loss of Decay Heat Removal Capability, Rev. 28.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 13

Surry 2017-301 JPM E APE025AA1.09 Simulator Setup

• Call up IC -409 (T-Rex: 419) or IC with RHR in service (IC-28) and initialize. Place simulator in RUN.

• Verify "A" RHR pump running and "B" in AUTO.

• Malfunction FP0301, FP0302, Active. Remote PCS105SPKR_NULL, Active.

• Verify 1-RH-FCV-1605 in auto with flowrate set at 3600 gpm. Set 1-RH-HCV-1758 to 90% Demand.

• Reduce Steam Dump Demand to lower Cooldown rate; Fill VCT to 50%, Place Blender Control Switch in OFF.

• Insert RH0501 on Trigger 1, RHR PUMP 1-RH-P-1A OVERCURRENT TRIP, Activate Trigger 1, and allow annunciators B-G-6 & B-G-7 to alarm.

• Place simulator in FREEZE until ready to perform JPM.

Simulator Operator Note: Place RED magnets on 1-RH-MOV-1700, 1701 and 1720A red bulbs.

Initial Conditions

• I am the Shift Manager and you are the Unit RO.

• The unit has been operating on RHR with 1-RH-P-1A, A RHR pump is in service on "A" RHR heat exchanger.

• We just received annunciator B-G-6, RHR HX LO FLOW, and 1-RH-P-1A has tripped.

Initiating Cues

• Here is a copy of 1-AP-27.00, Loss of Decay Heat Removal Capability. I need you to perform the necessary steps to address this condition and restore RHR flow. No RCS draindown evolutions are in progress.

• When you complete AP-27.00, please inform me.

Notes to the Evaluator:

• Task critical elements are bolded and denoted by an asterisk (*).

• Critical step sequencing requirements: 4 before 5 before 6.

Page 2 of 13

Surry 2017-301 JPM E APE025AA1.09 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor will be needed to silence alarms for the examinee.

• START TIME_______:

STEP 1:

_______ SAT CAUTIONS prior to Step 1:

• Loss of RHR due to a total loss of IA is addressed by 0-AP-40.00, NON- _______ UNSAT RECOVERABLE LOSS OF IA.

• Loss of RHR due to a total loss of AC Power is addressed by 1-AP-10.27, LOSS OF ALL AC POWER WHILE ON RHR.

• Loss of RHR may cause CTMT radiological and heat stress conditions to degrade.

Local actions in CTMT should be coordinated with HP.

• During solid plant operation, inadvertent actuation of the OPMS may occur if letdown is isolated.

• If RCS boiling occurs, non-essential personnel should be evacuated from CTMT.

NOTE prior to Step 1: EPIPs may be applicable

1. CHECK RCS INVENTORY - LOWERING

• PRZR level - LOWERING

• Standpipe level - LOWERING

• Reactor cavity level - LOWERING

• RCS Narrow Range level - LOWERING

• CTMT sump level - RISING

• Makeup rate - RISING

• PRT level, pressure, or temperature - RISING

• PDTT level - RISING

• RWST level - RISING

1. RNO GO TO Step 4.

STANDARD:

a) Acknowledges CAUTIONS and NOTE prior to Step 1.

b) Determines Inventory not lowering.

c) Goes to Step 4.

EVALUATORS NOTE:

If asked: No personnel are in Containment.

If asked: Provide cue Rx head is on; cavity is not flooded.

COMMENTS:

Page 3 of 13

Surry 2017-301 JPM E APE025AA1.09 STEP 2:

4. CHECK RHR PUMP - ONE RUNNING _______ SAT

4. RNO IF Emergency Bus power is available, THEN do the following:

a) IF stub bus NOT energized, THEN do the following: _______ UNSAT b) IF Unit 1 CC pump NOT running, THEN do the following:

c) IF CC pump NOT running on either unit, THEN do the following:

d) Manually close RH control valves:

• 1-RH-FCV-1605

• 1-RH-HCV-1758 e) Start one RHR pump.

f) Adjust RH control valves to return flow to pre-event rate:

• 1-RH-FCV-1605

• 1-RH-HCV-1758 g) IF an RHR pump can NOT be started, THEN GO TO Step 16.

STANDARD:

a) Identifies stub bus energized using PCS.

b) Identifies 1-CC-P-1A and 1-CC-P-1B running using CC Pump breaker indicating Lights (RED ON, Green OFF) on VB2, and CC Pump amps indicated (VB2).

• c) Places 1-RH-FCV-1605 in Manual and lowers demand to 0.

• d) Adjusts 1-RH-1758 to 100% demand using POT.

• e) Announces and starts 1-RH-P-1B.

• f) Adjusts 1-RH-FCV-1605 to ~3500 gpm flow and places in Auto.

• g) Adjusts 1-RH-HCV-1758 to ~ 90% demand.

h) Identifies 1-RH-P-1B started, GOES TO next page).

i) Identifies RHR pump not lost due to Loss of Emergency Bus, GOES TO Step 5.

EVALUATORS NOTE:

If asked, no one is in CTMT to perform pre-start checks on 1-RH-P-1B.

If Candidate: Opens 1-RH-HCV-1758 fully prior to starting B RHR pump; the limits for CC temperature exiting A RHR HX and RHR System Heatup and Cooldown rate will both be violated.

COMMENTS:

STEP 3:

5. CHECK RHR FLOW - INDICATED ON RHR SYS FLOW _______ SAT

• 1-RH-FI-1605

_______ UNSAT STANDARD:

a) Checks flow on 1-RH-FI-1605 at ~ 3500 gpm using 1-RH-FI-1605 (VB1) or PCS.

EVALUATORS NOTE:

May use PCS to adjust RHR flowrate to ~3500 gpm.

NOTE: Candidate may place 1-RH-P-1A in PTL to clear lock-out alarm (1B-G7)

COMMENTS:

Page 4 of 13

Surry 2017-301 JPM E APE025AA1.09 STEP 4:

_______ SAT

6. CHECK RHR PUMP - VORTEXING

• Flow indication on 1-RH-FI-1605 - OSCILLATING _______ UNSAT

• Amperage indication - OSCILLATING

6. RNO GO TO Step 12 STANDARD:

a) Checks flow indicator 1-RH-FI-1605 (VB1) or PCS stable.

b) Checks amp indicator for 1-RH-P-1B stable on BB1 sloping section.

c) Goes to Step 12.

EVALUATORS NOTE: None.

COMMENTS:

STEP 5:

_______ SAT

12. CHECK RHR HEAT SINK:

a) Flow on 1-RH-FI-1605 - NORMAL _______ UNSAT b) CC to RHR HX

1) In-Service RHR HX CC Outlet HDR Flow - NORMAL

• 1-CC-FI-110A OR

• 1-CC-FI-110B

2) In-Service RHR HX CC Outlet HDR TEMP - NORMAL

• 1-CC-TI-109A OR

• 1-CC-TI-109B STANDARD:

a) Checks 1-RH-FI-1605 flow ~3500 gpm b) Identifies 1-CC-FI-110A indication ~5200 gpm using meter on VB1.

c) Identifies 1-CC-TI-109A indication ~95°F using meter on VB1.

EVALUATORS NOTE: None.

COMMENTS:

Page 5 of 13

Surry 2017-301 JPM E APE025AA1.09 STEP 6:

_______ SAT

13. CHECK RCS TEMPERATURE - STABLE OR LOWERING

_______ UNSAT STANDARD:

a) Checks RCS temperature using C Loop WR Temperature Recorder, 1-RC-TR-1433 on VB2, or RHR Temp Recorder, 1-RH-TR-1604 on VB1.

b) Adjusts 1-RH-HCV-1758 and/or Steam Dump Demand as necessary to control temperature.

EVALUATORS NOTE:

If asked, maintain RCS Cooldown rate of < 40°F/hr.

COMMENTS:

STEP 7:

_______ SAT

14. RETURN TO PROCEDURE IN EFFECT

_______ UNSAT REPORTS TO SHIFT MANAGER (EVALUATOR).

STANDARD:

Verbal report that 1-RH-P-1B has been started and Actions of 1-AP-27.00 are complete EVALUATORS NOTE:

Candidate may add that they will continue to monitor RCS Cooldown rate STOP TIME:_______________

COMMENTS:

Comments:

Page 6 of 13

Surry 2017-301 JPM E APE025AA1.09 Page 7 of 13

Surry 2017-301 JPM E APE025AA1.09 Page 8 of 13

Surry 2017-301 JPM E APE025AA1.09 Page 9 of 13

Surry 2017-301 JPM E APE025AA1.09 Page 10 of 13

Surry 2017-301 JPM E APE025AA1.09 Page 11 of 13

Surry 2017-301 JPM E APE025AA1.09 Page 12 of 13

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• I am the Shift Manager and you are the Unit RO.

• The unit has been operating on RHR with 1-RH-P-1A, A RHR pump is in service on "A" RHR heat exchanger.

• We just received annunciator 1B-G6, RHR HX LO FLOW, and 1-RH-P-1A has tripped.

Initiating Cues

• Here is a copy of 1-AP-27.00, Loss of Decay Heat Removal Capability. I need you to perform the necessary steps to address this condition and restore RHR flow. No RCS draindown evolutions are in progress.

• When you complete AP-27.00, please inform me.

Surry 2017-301 JPM F 007A2.02 U.S. Nuclear Regulatory Commission Surry Power Station SR17-301 Simulator Job Performance Measure [007A2.02 2.6/3.2

[Alternate Path]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Venting the PRT to Process Vent IAW 1-OP-RC-011 K/A: 007A2.02, Abnormal pressure in the PRT, 2.6/3.2 Applicability Estimated Time Actual Time RO/SRO(I) 10 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• Leakage from 1-RC-PCV-1456 has caused an abnormal pressure in the PRT.

Standards

• Actions taken IAW ARP 0-RMA-C7, Process Vent Normal Range Gas Alert/High, to Manually isolate release paths following the failure of Auto isolation.

Initiating Cues

• Vent the PRT to Process Vent IAW 1-OP-RC-011, Pressurizer Relief Tank Operations.

Terminating Cues

• Manually isolate release following failure of Auto Isolation IAW 0-RMA-C7, Process Vent Normal Range Gas Alert/High.

Procedures

• 1-OP-RC-011, Pressurizer Relief Tank Operations, Rev. 28.

• 0-RMA-C7, Process Vent Normal Range Gas Alert/High, Rev. 3.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 16

Surry 2017-301 JPM F 007A2.02 Simulator Setup

• Recall IC-410 (T-rex: 420), OR

• Call up 100% power IC and initialize. Place simulator in RUN.

• Malfunctions, RC4002, PRZR PORV 1456 Leak, 53% Deg, Active. Run until 1C-F7 alarms, PRZR RELIEF TK HI PRESS. Close 1-RC-MOV-1535 and place 1-RC-PCV-1456 switch in close. Freeze the Simulator.

• Load the following Malfunction:

• RM0602, MGP Process Vent NR Gas Fail, 65% Deg, 120 Sec Ramp, Trigger 3.

• GW02, GW-FCV-160 Auto Close Failure, Active.

• GW03, GW-FCV-260 Auto Close Failure, Active.

• FP0301, FP0302, Active.

• Load the following REMOTE

• SI_312, 0%, 30 Sec Ramp, Trigger 1, Active.

• PCS105SPKR_NULL, Active.

• Place Simulator in RUN, Freeze, and Store the IC for Evaluation.

Initial Conditions

• Leakage through 1-RCPCV-1456, PRZR PORV has caused annunciator 1C-F7, PRZR RELIEF TK HI PRESS, to actuate.

• 1-RC-MOV-1535, 1-RC-PCV-1456 Isolation MOV has been closed and the control switch for 1-RC-PCV-1456, PRZR PORV has been placed in close.

Initiating Cues

• I am the Nuclear Shift Manager. You are the Unit 1 BOP.

• Here is a copy of 1-OP-RC-011, Pressurizer Relief Tank Operations signed off to Step 5.6.10. You are to vent the PRT to the Process Vent system until the PRT has been reduced to approximately 5 psig.

• Due to low activity in the PRT a release permit is not required.

• Current H2 concentration in the PRT is 13.4%.

• The Auxiliary Building Operator has been briefed and is standing by to perform local actions, as required.

• When you finish the actions necessary to accomplish this task, please inform me.

Notes

• 30 minutes prior to JPM Evaluation the Candidate will be provided with a copy of 1-OP-RC-011, marked off to Step 5.6.10; pre-briefed on JPM Initial Conditions and Initiating Cues prior to Simulator entry. Candidate will begin Evaluation on Simulator entry.

• Task critical elements are denoted by an asterisk (*). If substeps of a critical element also have an asterisk (*),

then only those asterisked substeps are critical to performance of that task element.

Page 2 of 16

Surry 2017-301 JPM F 007A2.02 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor may be needed to silence alarms for the examinee.

• START TIME_______:

STEP 1:

_______ SAT Step 5.6.10: Open 1-RC-HCV-1549, PRT VENT.

_______ UNSAT STANDARD:

• a) Opens 1-RC-HCV-1549, PRT VENT (RED Light ON, GREEN Light OFF), on BB1 RCS section.

EVALUATORS NOTE: None.

COMMENTS:

STEP 2:

_______ SAT Step 5.6.11: IF the PRT is to be vented once to the Process Vent System, THEN perform the following. Otherwise, enter N/A. _______ UNSAT

a. Record the PRT pressure and level on the release form.

b. Open 1-SI-TV-101A, ACCUM VENT HDR I/S TV.

c. Open 1-SI-TV-101B, ACCUM VENT HDR O/S TV.

d. Record PRT Hydrogen concentration. ________________%

STANDARD:

a) Remembers from brief that no release form required, marks step N/A.

• b) Opens 1-SI-TV-101A and checks RED Light ON, GREEN Light OFF, using valve pushbuttons on VB1 Trip Valve Section.

• c) Opens 1-SI-TV-101B and checks RED Light ON, GREEN Light OFF, using valve pushbutton on VB1 Trip Valve section.

d) Records 13.4% for hydrogen concentration.

EVALUATORS NOTE:

If asked, Release form is not required.

COMMENTS:

Page 3 of 16

Surry 2017-301 JPM F 007A2.02 STEP 3:

_______ SAT NOTES prior to Step 5.6.11 e.:

• For PRT Hydrogen concentrations between the values listed, the higher Hydrogen _______ UNSAT concentration (lower rate) must be used.

• The maximum allowable PRT pressure drop values are based on a maximum PRT pressure of 10 psig.

Step 5.6.11 e.: Based on PRT Hydrogen concentration, note the maximum allowable PRT pressure drop allowed in a ten minute period.

STANDARD:

a) Acknowledges NOTES prior to Step 5.6.11 e.

b) Uses Table listed in Step 5.6.11 e. and selects PRT H 2 15%, 13 psig / 10 MIN value.

EVALUATORS NOTE: None.

COMMENTS:

STEP 4:

_______ SAT NOTE prior to Step 5.6.11 f.: Valve 1-SI-312 should be adjusted as PRT Hydrogen concentration lowers to maintain maximum release rate. _______ UNSAT Step 5.6.11 f.: To maintain Rad Monitors below the ALERT setpoint, AND to prevent exceeding the maximum allowable pressure drop, SLOWLY throttle open 1-SI-312, ACCUMS VENT HDR OUTSIDE ISOL, and/or cycle 1-SI-TV-101B, as required.

STANDARD:

c) Acknowledges NOTE prior to Step 5.6.11 f.

d) Contacts Aux Bldg Operator to slowly open 1-SI-312.

EVALUATORS NOTE:

Candidate may direct Aux Bldg Operator to close 1-SI-312 when RMA annunciator alarms.

Alternate Path Begins when 1-SI-312 has been reported throttled open.

Simulator Instructors Note:

When contacted to open 1-SI-312, Actuate Trigger 3. Report that a time compression has occurred and 1-SI-312 has been throttled open approximately 1 turn.

COMMENTS:

Page 4 of 16

Surry 2017-301 JPM F 007A2.02 STEP 5:

_______ SAT 0-RMA-C7, PROCCESS VENT NORMAL RANGE GAS ALERT / HI Alarm.

_______ UNSAT STANDARD:

a) Locates to MGPI indicators and acknowledges alarm on RMA Annunciator Panel, and on 1-GW-RI-130B, PROCESS VENT NORMAL GAS INDICATOR module (BLUE button).

b) Identifies Alert and High Lights LIT on 1-GW-RI, and Bar Graph indication.

c) Identifies rising trend on Process Vent Radiation Monitor recorder, 1-RM-RR-132.

d) Initiates 0-RMA-C7 Annunciator procedure.

EVALUATORS NOTE:

Candidate may direct Aux Bldg Operator to close 1-SI-312 when RMA annunciator alarms.

COMMENTS:

STEP 6:

_______ SAT Notes prior to Step 1:

• The MGP Process Vent channel sensing high radiation will buzz with an audible _______ UNSAT alarm. Pressing the blue SEL key on the display unit will silence the alarm.

• This annunciator does NOT have reflash capability. This MGP remote display unit indicating high radiation will buzz with an audible alarm.

Step 1: CHECK ALARM - READING ON MONITOR OR CHART RECORDER GREATER THAN OR EQUAL TO ALERT SETPOINT

• 1-GW-RI-130B

• 1-RM-RR-132, Ch 2

• 1-RM-RR-132, Ch 5 STANDARD:

a) Acknowledges Notes prior to Step 1.

b) Identifies Alert and High LEDs LIT on 1-GW-RI-130B.

c) Identifies 1-RM-RR-132, Ch 2 trend rising.

EVALUATORS NOTE: None.

COMMENTS:

Page 5 of 16

Surry 2017-301 JPM F 007A2.02 STEP 7:

_______ SAT Step 2: CHECK PROCESS VENT FLOW RATE DEVICE 1-GW-FI-100 - OPERABLE

_______ UNSAT Step 3: CONSULT SHIFT SUPERVISION TO DETERMINE IF GW SHOULD BE ISOLATED STANDARD:

a) Remembers from 1-OP-RC-011 Initial Conditions that 1-GW-FI-100 Operable.

b) Notifies Shift Supervision (Evaluator) of Step 3 consult.

EVALUATORS NOTE:

Step 2, Candidate may locate to Waste Disposal Board and check 1-GW-FI-100.

Step 3, Direct Candidate to continue actions in ARP.

COMMENTS:

Page 6 of 16

Surry 2017-301 JPM F 007A2.02 STEP 8:

_______ SAT CAUTION prior to Step 4: When CTMT Vacuum Pump Discharge Isolation valve 1-GW-FCV-160 or 1-GW-FCV-260 is closed, the associated Vacuum Pumps must be _______ UNSAT placed in OFF.

NOTE prior to Step 4: If a high alarm has actuated, the automatic functions associated with that monitor shall be verified or performed.

Step 4: CHECK AUTOMATIC ACTIONS:

a) Decay Tank Bleed Isolation valve 1-GW-FCV-101 - CLOSED b) Check the following

• CTMT Vacuum Pump Discharge Isolation valve 1-GW-FCV-160 - CLOSED

• CTMT Vacuum Pump Discharge Isolation valve 1-GW-FCV-260 - CLOSED Step 4 b) RNO: Do the following:

1) Check or place Ctmt Vacuum pumps in OFF

• 1-CV-P-1A

• 1-CV-P-1B

• 2-CV-P-1A

• 2-CV-P-1B

2) Manually close valve(s).

3) GO TO Step 6.

STANDARD:

a) Acknowledges CAUTION and NOTE prior to Step 4.

b) Checks 1-GW-FCV-101 control switch in OFF on Waste Disposal Board.

c) Identifies 1-GW-FCV-160 / 1-GW-FCV-260 are NOT Closed on Waste Disposal Board, GOES TO Step 4 b) RNO.

• d) Places 1-CV-P-1A in OFF, checks 1-CV-P-1B in OFF, on BB1 CTMT Section.

e) Directs Unit 2 to place 2-CV-P-1A and 1B in OFF.

• f) Closes 1-GW-FCV-160 and 1-GW-FCV-260, on Waste Disposal Board.

g) GOES TO Step 6.

EVALUATORS NOTE:

• JPM may be terminated at this point, at Evaluators discretion if Candidate has directed the Aux Bldg Operator to close 1-SI-312. Steps continue through Step 7, where substep a) directs securing PRT venting.

Simulator Instructors Note:

When directed, report 2-CV-P-1A and 2-CV-P-1B are in OFF.

COMMENTS:

STOP TIME: __________ (if any of the following valves have been closed to terminate the release:1-SI-312, 1-RC-HCV-1549, 1-SI-TV-101A,or 1-SI-TV-101B.)

Page 7 of 16

Surry 2017-301 JPM F 007A2.02 STEP 9:

_______ SAT Step 6: NOTIFY HP TO DO THE FOLLOWING:

a) Check area evacuated as necessary _______ UNSAT b) Control access as necessary c) Sample d) Contact HP to check activity within limits e) Investigate cause STANDARD:

a) Contacts HP and discusses items a) through e) above, or Notifies Shift Manager (Evaluator) that HP should perform items a) through e) above.

EVALUATORS NOTE:

If notified to contact HP, acknowledge HP contact required.

COMMENTS:

Page 8 of 16

Surry 2017-301 JPM F 007A2.02 Step 10:

_______ SAT Step 7: ISOLATE KNOWN RELEASES TO PROCESS VENTS:

a) Secure any known venting evolution: _______ UNSAT

• SI ACCUM(s)

• PRT b) Attempt to isolate leakage:

• WGDT

• CTMT VAC PUMPS

• PRT

• SI ACCUM(s) c) Coordinate with HP to determine need for setpoint change STANDARD:

a)

• Contacts Aux Bldg Operator to close 1-SI-312.

b)

• Candidate isolates the release by closing 1-RC-HCV-1549, 1-SI-TV-101A, 1-SI-TV-101B, or 1-SI-312.

EVALUATORS NOTE:

Any of the four valves listed above will isolate the release and will satisfy the Critical step.

JPM may be terminated, at discretion of Evaluator when the release is isolated (Aux Bldg Operator has been directed to close 1-SI-312, or any of the other valves listed above), and the Candidate has closed 1-GW-FCV-160/260.

Simulator Instructors Note:

If directed, report a time compression has occurred and 1-SI-312 has been closed.

COMMENTS:

STOP TIME: __________

Comments:

Page 9 of 16

Surry 2017-301 JPM F 007A2.02 Init Init Init Init Init Init Init Init Init Init Init Init Page 10 of 16

Surry 2017-301 JPM F 007A2.02 N/A Init Init Init 13.4 Init Page 11 of 16

Surry 2017-301 JPM F 007A2.02 Init Page 12 of 16

Surry 2017-301 JPM F 007A2.02 Page 13 of 16

Surry 2017-301 JPM F 007A2.02 Page 14 of 16

Surry 2017-301 JPM F 007A2.02 1-SI-312 directed to be closed Page 15 of 16

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• Leakage through 1-RCPCV-1456, PRZR PORV has caused annunciator 1C-F7, PRZR RELIEF TK HI PRESS, to actuate.

• 1-RC-MOV-1535, 1-RC-PCV-1456 Isolation MOV has been closed and the control switch for 1-RC-PCV-1456, PRZR PORV has been placed in close.

Initiating Cues

• I am the Nuclear Shift Manager. You are the Unit 1 BOP.

• Here is a copy of 1-OP-RC-011, Pressurizer Relief Tank Operations signed off to Step 5.6.10.

You are to vent the PRT to the Process Vent system until PRT has been reduced to approximately 5 psig.

• Due to low activity in the PRT a release permit is not required.

• Current H2 concentration in the PRT is 13.4%.

• The Auxiliary Building Operator has been briefed and is standing by to perform local actions, as required.

• When you finish the actions necessary to accomplish this task, please inform me.

Surry 2017-301 JPM G 015A4.03 U.S. Nuclear Regulatory Commission Surry Power Station SR17-301 Simulator Job Performance Measure [KA 015A4.03 3.8 / 3.9]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Remove Source Range NIs From Service During a Reactor Startup.

K/A: 015A4.03 Ability to manually operate and/or monitor in the control room: Trip bypasses 3.8 / 3.9 Applicability Estimated Time Actual Time RO/SRO(I) 6 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• Reactor power at approximately 1.2 x 10-10 amps during a startup, and the SR high voltage cannot be removed from either N-31 or N-32.

Standards

• Source Range Channel N31 and N32 Deenergized IAW 1-AP-4.00, Step 22 RNO.

Initiating Cues

• Shift manager Direction.

Terminating Cues

• 1-AP-4.00, Nuclear Instrumentation Malfunction, Step 38 complete.

Procedures

• 1-AP-4.00, Nuclear Instrumentation Malfunction, Rev 34.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 17

Surry 2017-301 JPM G 015A4.03 Simulator Setup

• Recall IC-411 (T-Rex: 421), OR

• Call up IC-14, Cycle 28 10-8 Amps D+131 Steps MSTV Shut, and initialize. Place simulator in RUN.

• Malfunction FP0301, FP0302, Active. Remote, PCS105SPKR_NULL, Active.

• Perform the startup to obtain power at 1.2 x 10-10 amps (or slightly greater), then implement switch overrides (SRTRP_BLK_TRA_PB, and SRTRP_BLK_TRB_PB, override OFF, Insert), Flux Level Trip Cutout Pushbuttons.

Freeze the simulator until ready for operator to perform JPM.

• Do not allow the SUR to be greater than +0.1 dpm.

Initial Conditions

• During a Reactor startup, when P-6 was reached the Operator pushed 1/N-33A TR A and 1/N-33B TR B to de-energize the Source Range NIs. Both N-31 and N-32 failed to de-energize.

Initiating Cues

• You are the RO. Respond to a failure of both Source Range NIs to de-energize in accordance with 1-AP-4.00, Nuclear Instrumentation Malfunction, so the Reactor startup can continue.

• When you finish the actions necessary to accomplish this, please inform me.

Notes

• This task is to be performed in the Simulator.

• Task critical elements are denoted by an asterisk (*). If substeps of a critical element also have an asterisk (*),

then only those asterisked substeps are critical to performance of that task element.

Page 2 of 17

Surry 2017-301 JPM G 015A4.03 PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• An additional instructor may be needed to silence alarms for the examinee.

• START TIME: _________________________.

STEP 1:

_______ SAT AP-4.00, (Step 1)

_______ UNSAT DETERMINES PROCEDURAL STEPS TO RESPOND TO SRNI FAILURE.

STANDARD:

(a) Enters 1-AP-4.00 at Step 1.

(b) Acknowledges Note prior to Step 1.

(c) Determines failure not in Power Range NI and goes to Step 10.

(d) Determines failure not in Intermediate Range NI and goes to Step 19.

EVALUATORS NOTE:

None.

COMMENTS:

STEP 2:

_______ SAT CHECK NI MALFUNCTION - SOURCE RANGE FAILURE

_______ UNSAT STANDARD:

Identifies failure is in the SR NIs.

EVALUATORS NOTE:

None.

COMMENTS:

Page 3 of 17

Surry 2017-301 JPM G 015A4.03 STEP 3:

_______ SAT AP-4.00, Step 20

_______ UNSAT STABILIZE UNIT CONDITIONS.

STANDARD:

(a) Verifies Unit conditions stable with a zero startup rate.

(b) Maintains power with zero startup rate.

EVALUATORS NOTE:

Candidate may adjust control rods IN or OUT to stabilize SUR.

A manual Reactor trip is NOT an acceptable action.

COMMENTS:

STEP 4:

_______ SAT AP-4.00. (Step 21)

_______ UNSAT CHECK REACTOR POWER GREATER THAN P-6 (1X10-10).

STANDARD:

a) Checks Reactor power level greater than P-6 (1x 10-10 amps) by:

• observing INT RNG FLUX meters NI-1-35B and NI-1-36B, Benchboard 1-2, ~ 1.2 x 10-10 amps

• Meters on the IR CH 1 and CH2 Drawers ~ 1.2 x 10-10 amps.

• Permissive Status Light on Vertical Board 1-2, B-3, LIT.

• Trip Status Lights on Vertical Board 1-2, C-2 and D-2 LIT

• Bistable Light, Power Above Permissive P6, on IR CH-1 and CH2 Drawer, LIT.

EVALUATORS NOTE:

None.

COMMENTS:

Page 4 of 17

Surry 2017-301 JPM G 015A4.03 STEP 5:

_______ SAT AP-4.00. (Step 22)

_______ UNSAT CHECK BOTH SOURCE RANGE CHANNELS- HIGH VOLTAGE OFF STANDARD:

(a) Determines that both SRNI Channels are still energized. Goes to Step 22 RNO.

(b) Pushes "1/N 33A TR A" pushbutton and "1/N 33B TR B" pushbutton.

(c) Notes that N-31 and N-32 still have high voltage applied to the detectors.

(d) Informs Evaluator (Shift Manager) that Annunciator 1G-D1, Source or INT RNG NIS TRIP BYP will be received.

• (e) Places LEVEL TRIP switch for N-31 in BYPASS.

• (f) Removes INSTRUMENT POWER fuses for N-31.

• (g) Places LEVEL TRIP switch for N-32 in BYPASS.

• (h) Removes INSTRUMENT POWER fuses for N-32.

(i) Notes requirement to refer to Tech Spec Table 3.7-1 Item 4.

(j) Notes requirement to make entry in PSL and Shift Turnover to reinstall fuses.

(k) Goes to Step 38 of 1-AP-4.00.

(l) Informs the Shift Manager that I&C and the OMOC must be notified EVALUATORS NOTE:

When notified: Acknowledge that Tech Spec Table 3.7-1, item 4 requires review.

When notified: Acknowledge PSL and Turnover entries are required.

When notified: Acknowledge that I&C and OM on Call must be notified.

• When the Instrument Power fuses are pulled on the first channel, annunciator 1G-A3, "NIS SOURCE RNG LOSS OF DET VOLT" is received.

• It is acceptable to place BOTH N-31 and N-32 Channel LEVEL TRIP switches in the BYPASS position before removing the INSTRUMENT POWER fuses for (e) through (h) above.

COMMENTS:

STEP 6

_______ SAT REPORT TO NUCLEAR SHIFT MANAGER (EVALUATOR).

_______ UNSAT Standard Verbal status report that N-31 and N-32 have been removed from service IAW 1-AP-4.00.

Evaluator's Comments STOP TIME:

Page 5 of 17

Surry 2017-301 JPM G 015A4.03 Comments:

Page 6 of 17

Surry 2017-301 JPM G 015A4.03 Page 7 of 17

Surry 2017-301 JPM G 015A4.03 Page 8 of 17

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• During a Reactor startup, when P-6 was reached the Operator pushed 1/N-33A TR A and 1/N-33B TR B to de-energize the Source Range NIs. Both N-31 and N-32 failed to de-energize.

Directions to the Operator

• You are the RO. Respond to a failure of both Source Range NIs to de-energize in accordance with 1-AP-4.00, Nuclear Instrumentation Malfunction, so the Reactor startup can continue.

• When you finish the actions necessary to accomplish this, please inform me.

Surry 2017-301 JPM H EPEEE02 EK3.3 U.S. Nuclear Regulatory Commission Surry Power Station SR14301 Simulator Job Performance Measure EPEE02.EK3.3 (3.9/3.9)

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Re-establish Normal Letdown Following SI K/A: EPEE02.EK3.3 Knowledge of the reasons for the following responses as they apply to the (SI Termination): Manipulation of controls required to obtain desired operating results during abnormal, and emergency situations. 3.9 / 3/9 Applicability Estimated Time Actual Time RO 10 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

• A spurious SI has occurred. E-0 has been performed, SI reduction criteria are satisfied, transition made to ES-1.1, and it has been performed through Step 14.

Standards

• Establish normal letdown following SI.

Initiating Cues

• 1-ES-1.1, SI Termination, Step 15.

• Shift Manager direction.

Terminating Cues

• Step 15 of 1-ES-1.1 complete.

Procedures

• 1-ES-1.1, SI Termination, Rev. 51.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 9

Surry 2017-301 JPM H EPEEE02 EK3.3 Simulator Setup

• Recall IC-426 (T-Rex) or call up 100% power IC. Place simulator in RUN.

• Enter malfunctions: FP0301, FP0302, active.

• Enter Remote; PCS105SPKR_null.

• Initiate SI. Perform E-0, reset SI, verify SI reduction criteria satisfied, transition to ES-1.1 and perform it through Step 14.

• Close 1-CH-LCV-1460A & B.

• Set seal injection at 8 gpm.

• Verify PRZR Level Control Channel Select Switch is in the III/II position.

• Freeze simulator at these conditions for JPM performance.

Initial Conditions

• Plant was at 100% power with all systems operating normal and in automatic.

Initiating Cues

• The crew is currently recovering from a spurious SI initiation.

• 1-ES-1.1, SI Termination has been completed up to Step 15.

• SI has been reset.

• You are the Unit 1 RO. Re-establish letdown by performing step 15 of 1-ES-1.1.

• When you finish the actions necessary to accomplish this, please inform me.

Notes Task critical elements are bolded and denoted by an asterisk (*).

Page 2 of 9

Surry 2017-301 JPM H EPEEE02 EK3.3 PERFORMANCE CHECKLIST Notes to the Evaluator

• Operator is given a copy of 1-ES-1.1, SI Termination, Step 15.

• Task critical elements are bolded and demoted by an asterisk (*).

• START TIME:_______________

STEP 1:

_______ SAT Adjust CHG line flow to establish greater than 40 gpm (Step 15a of ES-1.1)

_______ UNSAT STANDARD:

Raises CHG line flow to > 40 gpm, using 1-CH-FCV-1122.

EVALUATORS NOTE:

COMMENTS:

STEP 2:

_______ SAT Open Letdown Line pressure control valve, 1-CH-PCV-1145. (Step 15 b)

_______ UNSAT STANDARD:

(a) Places 1-CH-PCV-1145 controller into MANUAL.

• (b) Adjusts demand increase button until 1-CH-PCV-1145 indicates open (zero demand indicated).

EVALUATORS NOTE:

COMMENTS:

Page 3 of 9

Surry 2017-301 JPM H EPEEE02 EK3.3 STEP 3:

_______ SAT Check closed or close letdown orifice isolation valves; 1-CH-HCV-1200A, 1-CH-HCV-1200B, 1-CH-HCV-1200C. (Step 15 c) _______ UNSAT STANDARD:

a) Checks 1-CH-HCV-1200A closed.

b) Checks 1-CH-HCV-1200B closed.

c) Checks 1-CH-HCV-1200C closed.

EVALUATORS NOTE:

COMMENTS:

STEP 4:

_______ SAT Open letdown isolation valves; 1-CH-TV-1204A, 1-CH-TV-1204B, 1-CH-LCV-1460A, and 1-CH-LCV-1450B. (Step 15 d) _______ UNSAT STANDARD:

• a) Opens 1-CH-TV-1204A.

• b) Opens 1-CH-TV-1204B.

• c) Open 1-CH-LCV-1460A.

• d) Open 1-CH-LCV-1460B.

EVALUATORS NOTE:

Candidate should perform Steps a) or b) in any order, then steps c) or d) in any order. Best Practice is to open LD TVs first, and then open LD LCVs to prevent lifting the LD relief valve if LD orifice isolation valves (1200s) leak when closed. Critical that ALL valves are opened, since the valves are in series; sequence of valve opening is NOT critical.

COMMENTS:

Page 4 of 9

Surry 2017-301 JPM H EPEEE02 EK3.3 STEP 5:

_______ SAT Open Letdown orifice isolation valves; 1-CH-HCV-1200A, and 1-CH-HCV-1200B or 1-CH-HCV-1200C. (Step 15e) _______ UNSAT STANDARD:

• a) Opens 1-CH-HCV-1200A.

• b) Opens 1-CH-HCV-1200B or 1-CH-HCV-1200C.

EVALUATORS NOTE:

• Normally 1-CH-HCV-1200A, and 1-CH-HCV-1200B are open to establish 105 gpm letdown flow.

• Normally the 45 gpm orifice, 1-CH-HCV-1200A is placed in service first.

• If asked which orifice isolation valves should be opened: Respond Open the 45 gpm and one 60 gpm orifice isolation valve.

• Opening ANY of the Letdown Orifice Isolation valves satisfactorily completes this Step.

COMMENTS:

STEP 6:

_______ SAT Adjust letdown line pressure control valve to maintain letdown pressure: (Step 15f)

_______ UNSAT STANDARD:

• a) Adjust 1-CH-PCV-1145 setpoint to obtain approximately 300 psig, and place in AUTO.

EVALUATORS NOTE:

The setpoint value is approximately 5.0 for 300 psig.

Candidate may leave 1-CH-PCV-1145 in Manual. Acceptable for performance of this step.

Acceptable adjustment of 1-CH-PCV-1145 is accomplished if 1) No flashing of letdown is observed on 1-CH-FI-1150, Letdown Line Flow oscillating, or 2) Annunciator 1D-G4, LO PRESS RELIEF LINE HI TEMP, remains clear, indicating LD relief did not lift on high pressure.

COMMENTS:

Page 5 of 9

Surry 2017-301 JPM H EPEEE02 EK3.3 STEP 7:

_______ SAT Adjust NRHX outlet temperature control valve to control letdown temperature, if necessary.

(Step 15g) _______ UNSAT STANDARD:

a) Verify/adjust 1-CC-TCV-103, NRHX Outlet Temp control to maintain NRHX outlet temperature by checking demand of approximately 80%.

EVALUATORS NOTE:

• Normal temperature is approximately 100°F.

COMMENTS:

Step 12 REPORTS TO SHIFT MANAGER (EVALUATOR).

Standards Verbal status report made that Step 15 completed and letdown has been re-established.

Evaluator's Comments STOP TIME:________________

Page 6 of 9

Surry 2017-301 JPM H EPEEE02 EK3.3 Page 7 of 9

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• Plant was at 100% power with all systems operating normal and in automatic.

Initiating Cues

• The crew is currently recovering from a spurious SI initiation.

• 1-ES-1.1, SI Termination has been completed up to Step 15.

• You are the Unit 1 RO. Re-establish letdown by performing step 15 of 1-ES-1.1.

• When you finish the actions necessary to accomplish this, please inform me.

Surry 2017-301 (JPM i) Crosstie Charging U.S. Nuclear Regulatory Commission Surry Power Station SR15301 In Plant Job Performance Measure EPEE11 EA1.1 TIME CRITICAL Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title LOCALLY ESTABLISH CHARGING PUMP CROSSTIE FROM UNIT 1 TO UNIT 2.

K/A: EPE E11EA1.1 Ability to operate and/or monitor the following as they apply to the Loss of Emergency Coolant Recirculation: Components, and functions of control and safety systems, including instrumentation, signals, interlocks, failure modes, and automatic and manual features. (3.9/4.0)

Applicability Estimated Time Actual Time RO/SRO(I)/SRO(U) 16 Minutes (Time Critical) ___ Minutes Conditions

• Task is to be SIMULATED in the plant.

• Fire has been reported in the Unit 2 Emergency Switchgear Room.

Standards

• 2-CH-447 and 1-CH-728 opened IAW 0-FCA-14.00, Establishing Stable RCS Makeup Flowpaths, Att. 1

• Charging crosstie established from Unit 1 to Unit 2.

Initiating Cues

• 0-FCA-14.00, Establishing Stable RCS Makeup Flowpaths.

• Shift Manager direction.

Terminating Cues

• Charging crosstie established from Unit 1 to Unit 2.

• 0-FCA-14.00, Attachment 1, step 7 complete.

Procedures

• 0-FCA-14.00, Establishing Stable RCS Makeup Flowpaths, Revision 10 1 of 12

Surry 2017-301 (JPM i) Crosstie Charging Tools and Equipment Safety Considerations

• None

• None Initial Conditions

• We are currently experiencing a fire in Unit 2 Emergency Switchgear Room.

• Unit 2 RCP seals have been isolated Initiating Cues

• This JPM is **TIME CRITICAL**.

• Here is a copy of 0-FCA-14.00, Establishing Stable RCS Makeup Flowpaths, Attachment 1. Steps 1-4 have been completed.

• I need you to perform Attachment 1 of FCA-14.00 steps 5-7 in order to establish Charging Pump crosstie from Unit 1 to Unit 2.

• When you finish the actions necessary to accomplish this, please inform me so I can have the Operating Team establish makeup flow IAW step 8.

Notes:

• Task briefing should occur in the pre-determined location.

• This task is to be SIMULATED. Do NOT allow the Applicant to manipulate controls, operate switches or reposition valves.

• This JPM is TIME CRITICAL in that the charging pump crosstie must be established within 16 minutes after entry into the Aux Building. (Failure to establish charging crosstie within 16 minutes is deemed UNSAT)

• The time clock is not in effect when processing through HP.

2 of 12

Surry 2017-301 (JPM i) Crosstie Charging PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• START TIME (Entry into Aux Bldg)_______:

STEP 1:

_______ SAT Check open or open Manual Charging Cross-Connect valve on UNIT 1. (located on Unit 1 side of Gate 23 walkway, near RT pumps). (Attachment 1, Step 5) _______ UNSAT

• 1-CH-728, CH Sys Xconn Hdr Root Valve STANDARD:

a) Proceeds to Unit 1 side of Aux Bldg.

b) Locates 1-CH-728 (see location sketch on next page).

c) Places the ratchet selector in the UP position (rotates selector lever counter-clockwise until top stop reached).

d)

• Opens 1-CH-728 by "ratcheting" the valve handwheel to turn the valve handwheel in the counter-clockwise direction.

EVALUATORS CUE:

• If asked: The valve ratchet selector is as indicated.

• Tell operator: if operator attempts to reposition valve with ratchet selector in the DOWN position, as he/she pulls down on handwheel, it will not move since valve is closed. If room exists to push up on handwheel, it will "click".

• Tell operator: AFTER moving ratchet selector to UP position, handwheel "clicks" as it is moved down & valve moves counter-clockwise & begins opening as handwheel is pushed up.

• Tell operator: When 1-CH-728 properly operated, tell operator that flow noise is heard through the line.

• When properly operated: Valve stem extends, operator ratchets the valve until valve no longer travels and flow noise heard.

EVALUATORS NOTE:

In order to open valve, the ratchet selector must be in the UP position. The ratchet selector in the DOWN position will close the valve.

COMMENTS:

3 of 12

Surry 2017-301 (JPM i) Crosstie Charging STEP 2:

_______ SAT Vent cross-connect piping: (located outside of Gate 23. (Attachment 1, step 6)

_______ UNSAT

• 1-CH-732, CH Sys Xconn Hdr Drain.

STANDARD:

a) Locates 1-CH-732 (see location sketch).

b) Begins venting by opening 1-CH-732 (turning valve in the counter-clockwise direction).

c) Recloses 1-CH-732 by turning valve in the clockwise direction.

EVALUATORS CUE

• Tell operator: When 1-CH-732 properly operated, intermittent flow noises are heard from behind gate 23, followed by a steady flow noise.

• If asked: Pressure indication on pressure gauge is steady after a couple of seconds.

EVALUATORS NOTE:

Area location sketch COMMENTS:

4 of 12

Surry 2017-301 (JPM i) Crosstie Charging STEP 3:

_______ SAT Check open or open manual Charging Cross-connect on UNIT 2. (Attachment 1 step 7)

_______ UNSAT

• 2-CH-447, CHG Pumps Xconn to Unit 1 Isol STANDARD:

a) Proceeds to Auxiliary Building Basement Unit 2 side.

b) Locates 2-CH-447 (see location sketch).

c)

• Opens 2-CH-447 (by turning valve handwheel in the counter-clockwise direction).

EVALUATORS CUE:

• When correctly operated: Handwheel rotates, stem extends out, then the handwheel stops, and flow noise is heard for a short period of time, then it stops.

• • TIME CRITICAL STOP TIME: ____________ (must be less than 16 minutes).

COMMENTS:

5 of 12

Surry 2017-301 (JPM i) Crosstie Charging STEP 4:

_______ SAT Report to Shift Manager that Charging is crosstied, Unit 1 supplying Unit 2.

_______ UNSAT STANDARD:

a) Verbal report made that task is complete.

EVALUATORS NOTE:

.COMMENTS:

STOP TIME:____________________

6 of 12

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• We are currently experiencing a fire in Unit 2 Emergency Switchgear Room.

• Unit 2 RCP seals have been isolated Initiating Cues

• This JPM is **TIME CRITICAL**.

• Here is a copy of 0-FCA-14.00, Establishing Stable RCS Makeup Flowpaths, Attachment 1.

• I need you to perform Attachment 1 of FCA-14.00 steps 5-7 in order to establish Charging Pump crosstie from Unit 1 to Unit 2.

• When you finish the actions necessary to accomplish this, please inform me so I can have the Operating Team establish makeup flow IAW step 8.

Surry 2017-301 (JPM j) Actuate CO2 to FOPH U.S. Nuclear Regulatory Commission Surry Power Station SR15301 In Plant Job Performance Measure 086A2.04

[Alternate Path]

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title MANUAL ACTUATION OF THE UNDERGROUND FUEL OIL PUMP HOUSE CO2 SYSTEM SYS086 A2.04 K/A: Ability to (a) predict the impacts of the following malfunctions or operations on the Fire Protection System; and (b) based on those predictions, use procedures to correct, control or mitigate the consequences of those malfunctions or operations: Failure to actuate the FPS when required, resulting in fire damage. (3.3/3.9)

Applicability Estimated Time Actual Time RO/SRO(I)/SRO(U) 8 Minutes ___ Minutes Conditions

• Task is to be SIMULATED in the plant.

• Plant is at 100% power with all systems in their normal configuration.

Standards

• CO2 is actuated per 0-OP-FP-006 OPERATION OF FIRE PROTECTION SYSTEMS.

Initiating Cues

• Shift Manager direction.

Terminating Cues

• CO2 dump initiated and verified to B FUEL OIL PUMP HOUSE IAW 0-OP-FP-006, OPERATION OF FIRE PROTECTION SYSTEMS.

Procedures

• 0-OP-FP-006, OPERATION OF FIRE PROTECTION SYSTEMS, Revision 14.

1 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH Tools and Equipment Safety Considerations

• None

• None Initial Conditions

• This task is to be SIMULATED. Do NOT turn switches, manipulate controls or reposition valves.

• There is a confirmed fire in the B Underground Fuel Oil Pump House.

Initiating Cues

• You are to actuate the B Underground Fuel Oil Pump House HP CO2 System IAW 0-OP-FP-006 section 5.3.

• When you finish the actions necessary to accomplish this task, please inform me.

Notes:

• Task briefing should occur in the pre-determined location.

• This task is to be SIMULATED. Do NOT allow the Applicant to manipulate controls, operate switches or reposition valves 2 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• START TIME_______:

STEP 1:

_______ SAT CAUTION: If the Underground Fuel Oil Pump House CO2 system control power is de-energized, both the automatic and electrical initiation of the system will be disabled. _______ UNSAT (CAUTION prior to step 5.3.1).

STANDARD:

a) Verbalizes Caution.

EVALUATORS CUE:

• If asked: There are no reports of a loss of control power to Fire protection.

COMMENTS:

STEP 2:

_______ SAT Determine which Underground fuel oil pump house requires CO2. (Step 5.3.1)

_______ UNSAT STANDARD:

a) Determines B Underground Fuel Oil Pump House requires CO2 actuation from handout.

EVALUATORS Cue:

• If asked: If asked for confirmation of which Underground Fuel oil pump house requires CO2 respond: All the information you need has been provided.

• If asked: Dark black smoke is coming out of the B FOPH exhaust louvers. These are the exhaust louvers on the left as you are facing them. (closest to the CO2 bottle house)

COMMENTS:

3 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH STEP 3:

_______ SAT Initiate CO2 for affected area by pulling down on the lever for one of the two available manual actuation stations (one station is located at entrance to the associated fuel oil pump house and _______ UNSAT the other is located inside the CO2 bottle storage house). (Step 5.3.2)

STANDARD:

• Proceeds to either B Underground Fuel Oil Pump House manual actuation station.

• Pulls down on lever for B Fuel Oil Pump House CO2 actuation station.

EVALUATORS CUE:

• If asked: There is no preference as to which actuation station is used.

EVALUATORS NOTE:

• One manual actuation station is located at the entrance to the associated fuel oil pump house and the other is located inside the CO 2 bottle storage house. Either is acceptable.

• This is the start for the Alternate path as this is an unexpected outcome which the procedure addresses.

COMMENTS:

4 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH STEP 4:

_______ SAT Check CO2 initiation and notify Main Control Room. (Step 5.3.3)

_______ UNSAT

• Exhaust fan for affected house tripped.

• Frost on piping.

• Discharge horn sounds.

• Discharge light flashes.

STANDARD:

a) Observes that the B Underground Fuel Oil Pump House CO2 system fails to initiate.

b) Notifies Main Control Room of CO2 failure.

EVALUATORS CUE:

• If asked: Exhaust fan not tripped.

• If asked: No frost on piping.

• If asked: Discharge horn does not sound.

• If asked: Discharge light does not flash.

EVALUATORS NOTES:

• The Operator may attempt to actuate the other CO2 station. This is acceptable but not required. The Manual Actuation will not work for any location.

COMMENTS:

5 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH STEP 5:

_______ SAT IF CO2 fails to initiate, THEN perform the following steps. Otherwise enter N/A (Step 5.3.4.a)

_______ UNSAT a) Secure the ventilation exhaust fan for the affected house by pushing the STOP pushbutton on the breaker.

• 1-VS-F-46A (1-EP-BKR-1B1-1B-1E) A House.

• 1-VS-F-46B (2-EP-BKR-2B1-1B-2A) B House.

STANDARD:

a) Proceeds to Unit 2 VP house.

b) *Pushes STOP pushbutton on breaker 2-EP-BKR-2B1-1B-2A.

EVALUATORS CUE:

• If asked: Exhaust fan is not running.

EVALUATORS NOTE:

• Both breakers are located in Unit 2 Valve Pump house.

COMMENTS:

STEP 6:

_______ SAT NOTE: The following valves are located in the high pressure CO2 bottle storage house next to the B Underground fuel oil pump house. _______ UNSAT Open the bypass valve for the affected Fuel Oil pump house. (Step 5.3.4.b)

• 1-FP-433 (Fuel Oil pump house A)

• 1-FP-435 (Fuel Oil pump house B)

STANDARD:

a) Reads and acknowledges Note.

b) *Opens 1-FP-435.

EVALUATORS NOTE:

This step is sequence critical. 1-FP-435 must be opened before dumping CO2 in the next step.

COMMENTS:

6 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH STEP 7:

_______ SAT Dump CO2 in accordance with ONE of the following: (Step 5.3.4.c)

_______ UNSAT

1) Dump main CO2 bank by opening ONE of the following:

• 1-FP-932 (1-FP-TK-132)

• 1-FP-933 (1-FP-TK-133)

OR

2) Dump reserve CO2 bank by opening ONE of the following:

• 1-FP-934 (1-FP-TK-134)

• 1-FP-935 (1-FP-TK-135)

STANDARD:

• Operator opens any one of the above listed valves.

• Note: Opening more than one valve is acceptable.

EVALUATORS NOTES:

• Valve pin must be pulled to operate valve.

COMMENTS:

7 of 12

Surry 2017-301 (JPM j) Actuate CO2 to FOPH STEP 8:

_______ SAT Check CO2 system actuation and notify Main Control Room. (Step 5.3.4.d)

_______ UNSAT

• Discharge horn sounds.

• Discharge light flashes

• Frost on piping.

STANDARD:

a) Checks bottles (pressure, sound, sweat, or frost) to verify CO2 actuation.

b) Notifies Main Control Room that CO2 has been actuated to the B Fuel Oil pump house.

EVALUATORS CUE:

When properly actuated, if asked:

• Discharge horn sounds.

• Discharge light flashes.

• Frost on piping.

COMMENTS:

STOP TIME:____________________

8 of 12

1-FP-435 must be opened to allow CO2 to open 1-PSV-22.

Any one of the Four CO2 Bank Isolation valves will provide necessary CO2.

9 of 12

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• This task is to be SIMULATED. Do NOT turn switches, manipulate controls or reposition valves.

• There is a confirmed fire in the B Underground Fuel Oil Pump House.

Initiating Cues

• You are to actuate the B Underground Fuel Oil Pump House HP CO2 System IAW 0-OP-FP-006 section 5.3.

• When you finish the actions necessary to accomplish this task, please inform me.

Surry 2017-301 (JPM k) Swap N-16 RM Power U.S. Nuclear Regulatory Commission Surry Power Station SR15301 In Plant Job Performance Measure 073A2.01 Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title SWAP N-16 AND MGPI RADIATION MONITOR POWER SUPPLIES K/A: 073A2.01 Ability to (a) predict the impacts of the following malfunctions or operations on the PRM system; and (b) based on those predictions, use procedures to correct, control, or mitigate the consequences of those malfunctions or operations: Erratic or failed power supply (2.5/2.9)

Applicability Estimated Time Actual Time RO/SRO(I) 17 minutes ___ minutes Conditions

• Task is to be SIMULATED in the plant.

Standards

• 2-AP-10.07, Loss of Unit 2 Power and 0-OP-RM-001, Radiation Monitor Equipment.

Initiating Cues

• Both Units were at 100% power with all systems in their normal configuration when a loss of the 2H emergency bus occurred. 2-AP-10.07, LOSS OF UNIT 2 POWER has been implemented and Step 24 RNO is being performed.

Terminating Cues

• Report from operator that steps 5.10.5 thru 5.10.12 are complete.

Procedures

• 0-OP-RM-001, Radiation Monitor Equipment, Rev 15.

Tools and Equipment Safety Considerations

• None

• None 1 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power Initial Conditions

• This task is to be SIMULATED. Do NOT turn switches, manipulate controls or reposition valves.

• I am the Shift Manager. Both Units were stable with all systems in their normal configuration when a loss of the 2H emergency bus occurred. Step 24 RNO of 2-AP-10.07 is being performed at this time.

• Currently, the N-16 and MGPI Radiation Monitors are aligned to the 2H bus Initiating Cues

• Here is a copy of 0-OP-RM-001, RADIATION MONITORING SYSTEM, section 5.10, Transferring Power Supply to N-16 and MGPI Radiation Monitors. Steps 5.10.1 thru 5.10.4 have been completed.

• I need you to transfer the power supply for the N-16 and MGPI Radiation Monitors to the 1H bus IAW 0-OP-RM-001, RADIATION MONITORING SYSTEM, Steps 5.10.5 thru 5.10.12.

• When you finish the actions necessary to accomplish this, please inform me.

Notes:

• Task briefing should occur in the pre-determined location.

• This task is to be SIMULATED. Do NOT allow the Applicant to manipulate controls, operate switches or reposition valves 2 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• START TIME_______:

STEP 1:

_______ SAT NOTES:

• If the H Busses on both units are energized, the N-16 Radiation Monitors for both units _______ UNSAT will lose power during the power supply transfer. Annunciator 1A-C3, N-16 Trouble and 2A-C3, N-16 Trouble, will be received.

• The key for the N-16 LPDU switches may be obtained from the I&C key locker.

Place the key switches on all six N-16 LPDUs in the OFF position. (Step 5.10.5)

• 1-MS-RI-190

• 1-MS-RI-191

• 1-MS-RI-192

• 2-MS-RI-290

• 2-MS-RI-291

• 2-MS-RI-292 STANDARD:

• Reads the NOTE regarding the effects of losing both H busses, and notes that it doesnt apply.

• Reads the NOTE regarding location of the key for the N-16 LPDUs (Local Power Display Units).

• Proceeds to the U-1 Cable Spreading Room (CSR) and places the 3 LPDU key switches in OFF.

• Proceeds to the U-2 Cable Spreading Room (CSR) and places the 3 LPDU key switches in OFF.

EVALUATORS CUE:

• When the Operator asks for the Key: Ask him where would he go to obtain key?

Answer: I&C or Control Room Key locker in the Annex.

• When asked: Inform Operator that the LPDU lights go out.

EVALUATORS NOTE:

• This step is not critical. The equipment is designed to deenergize and restart following loss of power.

COMMENTS:

3 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power STEP 2:

_______ SAT NOTE: If the H Buses on both units are energized, the MGPI Process Vent and Vent Vent Radiation Monitors will lose power during the power supply transfer. Annunciators 0-RMA-C5, _______ UNSAT Process Vent Rad Mon Trbl, and 0-RMA-D5, Vent Stack #2 Rad Mon Trbl, will be received.

Open the following breakers on 1-EP-DB-101, N-16 Radiation Monitor Distribution Panel, located in Unit 2 Cable Spreading Room. (Step 5.10.6)

• Breaker No. 2, 1-GW-RM-130-1 Control (Surge Protection)

• Breaker No. 4, 1-GW-RM-130-2 Control (Surge Protection)

• Breaker No. 5, 1-VG-RM-131-1 Pump & 1-VG-RM-131-2 Heater

• Breaker No. 6, 1-VG-RM-131-2 Control (Surge Protection)

• Breaker No. 7, 1-VG-RM-131-1 Control (Surge Protection)

• Breaker No. 8, 1-GW-RM-130-1 Pump & 1-GW-RM-130-2 Heater STANDARD:

a) Reads the NOTE regarding the effects of losing both H busses, and notes that it doesnt apply.

b) Locates the breaker in U-2 CSR.

c) Verifies correct breaker ID tag/label.

d) Simulates opening the following breakers: Breakers no. 2, 4, 5, 6, 7, 8 EVALUATORS CUE:

• Acknowledge the position as OPEN.

EVALUATORS NOTE:

• This step is not critical. The equipment is designed to deenergize and restart following loss of power.

COMMENTS:

4 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power STEP 3:

_______ SAT Check open or open 1-EP-BKR-1H1-1-4B2, Unit 1 N-16 Power Supply. (Step 5.10.7)

_______ UNSAT STANDARD:

a) Locates the breaker.

b) Verifies correct breaker using the ID tag/label.

c) Verifies breaker is already open.

EVALUATORS CUE:

• Breaker is OPEN. Actual breaker position may be OPEN or CLOSED but for purposes of this JPM the as-found position of this breaker is OPEN.

EVALUATORS NOTE:

• Pinch hazard on steps down to the ESGR (below MCR doors).

• Must badge in to gain access from the stairwell to the ESGR.

COMMENTS:

STEP 4:

_______ SAT Check open or open 2-EP-BKR-2H1-1-2D2, Unit 2 N-16 Power Supply. (Step 5.10.8)

_______ UNSAT STANDARD:

a) Locates the breaker.

b) Verifies correct breaker using the ID tag/label.

c)

• Simulates opening breaker 2-EP-BKR-2H1-1-2D2.

EVALUATORS CUE:

• As-Found Breaker position is CLOSED. Actual breaker position may be OPEN or CLOSED but for purposes of this JPM the as-found position of this breaker is CLOSED.

• As-Left Breaker position is OPEN by indicating that breaker handle is pointing to the OPEN position.

COMMENTS:

5 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power STEP 5:

_______ SAT Swap throwover switch 1-EP-TRS-DB-101 (near MCC 1H1-1) to align desired power supply.

(Step 5.10.9) _______ UNSAT STANDARD:

a) Locates the throwover switch.

b) Verifies correct component using the ID tag/label.

c)

• Simulates swapping to Unit 1 supply powered from 1H bus.

EVALUATORS CUE:

• As-Found throwover switch position is Unit 2.

• As-Left throwover switch position is Unit 1.

COMMENTS:

STEP 6:

_______ SAT Close desired supply breaker. (Step 5.10.10)

_______ UNSAT

• 1-EP-BKR-1H1-1-4B2, Unit 1 N-16 Power Supply.

• 2-EP-BKR-2H1-1-2D2, Unit 2 N-16 Power Supply.

STANDARD:

a) Locates breaker 1-EP-BKR-1H1-1-4B2, Unit 1 N-16 Power Supply.

b) Verifies correct component using the ID tag/label.

c)

• Simulates closing breaker 1-EP-BKR-1H1-1-4B2, Unit 1 N-16 Power Supply.

EVALUATORS CUE:

• Breaker is closed by indicating that the breaker handle is pointing to the CLOSED position.

COMMENTS:

6 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power STEP 7:

_______ SAT Place the keyswitches on all six N-16 LPDUs in the ON position. (Step 5.10.11)

_______ UNSAT

• 1-MS-RI-190

• 1-MS-RI-191

• 1-MS-RI-192

• 2-MS-RI-290

• 2-MS-RI-291

• 2-MS-RI-292 STANDARD:

a) Proceeds to the U-1 Cable Spreading Room (CSR) and places the 3 LPDU key switches in ON.

b) Proceeds to the U-2 Cable Spreading Room (CSR) and places the 3 LPDU key switches in ON.

EVALUATORS CUE:

• Inform operator that the LPDU lights come on.

COMMENTS:

7 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power STEP 8:

_______ SAT Close the following breakers on 1-EP-DB-101, N-16 Radiation Monitor Distribution Panel, located in Unit 2 Cable Spreading Room. (Step 5.10.12) _______ UNSAT

• Breaker No. 2, 1-GW-RM-130-1 Control (Surge Protection)

• Breaker No. 4, 1-GW-RM-130-2 Control (Surge Protection)

• Breaker No. 5, 1-VG-RM-131-1 Pump & 1-VG-RM-131-2 Heater

• Breaker No. 6, 1-VG-RM-131-2 Control (Surge Protection)

• Breaker No. 7, 1-VG-RM-131-1 Control (Surge Protection)

• Breaker No. 8, 1-GW-RM-130-1 Pump & 1-GW-RM-130-2 Heater STANDARD:

a) Locates the breaker in U-2 CSR.

b) Verifies correct breaker ID tag/label.

c) Simulates closing the following breakers: Breakers no. 2, 4, 5, 6, 7, 8.

EVALUATORS CUE:

If asked: Acknowledge the need for an IV and state that it will be done by another operator.

COMMENTS:

8 of 14

Surry 2017-301 (JPM k) Swap N-16 RM Power STEP 9:

_______ SAT Reports to Shift Manager (MCR) that steps 5.10.5 through 5.10.12 of 0-OP-RM-001 have been completed. _______ UNSAT STANDARD:

• Verbal status report made that the task is completed.

EVALUATORS NOTE:

COMMENTS:

STOP TIME:____________________

9 of 14

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• This task is to be SIMULATED. Do NOT turn switches, manipulate controls or reposition valves.

• I am the Shift Manager. Both Units were stable with all systems in their normal configuration when a loss of the 2H emergency bus occurred. Step 24 RNO of 2-AP-10.07 is being performed at this time.

• Currently, the N-16 and MGPI Radiation Monitors are aligned to the 2H bus Initiating Cues

• Here is a copy of 0-OP-RM-001, RADIATION MONITORING SYSTEM, section 5.10, Transferring Power Supply to N-16 and MGPI Radiation Monitors. Steps 5.10.1 thru 5.10.4 have been completed.

• I need you to transfer the power supply for the N-16 and MGPI Radiation Monitors to the 1H bus IAW 0-OP-RM-001, RADIATION MONITORING SYSTEM, Steps 5.10.5 thru 5.10.12.

• When you finish the actions necessary to accomplish this, please inform me.

Surry 2017-301 Quadrant Power Tilt Calculation U.S. Nuclear Regulatory Commission Surry Power Station SR17301 Administrative Job Performance Measure G2.1.7 Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Perform a Quadrant Power Tilt Calculation.

K/A: G.2.1.7 Ability to evaluate plant performance and make operational judgments based on operating characteristics, reactor behavior, and instrument interpretation.

Applicability Estimated Time Actual Time SRO(D)/SRO(U) ALL (mgd, 10/17) 15 Minutes Conditions

• Task is to be PERFORMED in the classroom.

Standards

• Correctly calculates Quadrant Power Tilt for given core conditions on the Calculation of Excore Quadrant Power Tilt Ratios, Attachment 6 of 0-AP-1.00, Rod Control System Malfunction.

Initiating Cues

• A dropped rod has occurred on Unit 1.

• A Quadrant Power Tilt Calculation needs to be performed as directed by 0-AP-1.00. Rod Control System Malfunction.

• When you have determined the Quadrant Power Tilt, inform the examiner.

Terminating Cues

• Applicant has completed the QPTR Calculation.

Procedures

• 0-AP-1.00, Rod Control System Malfunction, Rev. 27 Tools and Equipment

• Calculator

• NIS Setpoints and Power Range Currents Data Sheet. (Included with Current detector currents)

Page 1 of 14

Surry 2017-301 Quadrant Power Tilt Calculation Initial Conditions:

• Unit 1 operating at 100% power.

o Control Rod D-10, Control Bank B, Group 1 dropped and is currently indicating 0 steps.

Initiating Cues

• Perform the Quadrant Power Tilt Calculation in accordance with Attachment 6, Calculation of Excore Quadrant Power Tilt Ratios, of 0-AP-1.00, Rod Control System Malfunction.

• You are provided a copy of the Power Range Currents from the NIS Data Book providing Normalized Values.

• When you have determined the Quadrant Power Tilt, inform the examiner.

Actual current detector currents taken from the Power Range NIs:

N-41 Upper Detector Current 120.5 N-41 Lower Detector Current 124.2 N-42 Upper Detector Current 96.5 N-42 Lower Detector Current 94.23 N-43 Upper Detector Current 114.7 N-43 Lower Detector Current 115.5 N-44 Upper Detector Current 119.1 N-44 Lower Detector Current 121.8 Surry Unit 1 NI Calibration Data Power Range Currents N41 N42 N43 N44 DELTA I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom)

FLUX @ µamps µamps µamps µamps µamps µamps µamps µamps 100%

0 118.8 119.5 118.5 119.3 119.1 119.5 119.1 119.5 DELTA I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom)

FLUX @ µamps µamps µamps µamps µamps µamps µamps µamps 120%

0 142.5 143.4 142.2 143.1 142.9 143.5 142.9 143.4 8 148.6 137.2 148.3 137.0 149.1 137.3 149.1 137.2

- 24 124.2 161.8 123.9 161.5 124.5 161.9 124.6 161.9 Data based on flux map number S1C28M15A Computer and Recorder Constants Recorder = K0411 = K0412 = K0413 = K0414 = 18.647 LaFrance Davis 9/21/17 Performed / Verified By: __________/ __________ Date: _______

Page 2 of 14

Surry 2017-301 Quadrant Power Tilt Calculation PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• At the completion of the JPM all SRO Candidates will have a Follow-Up question.

• START TIME: ____________

STEP 1: [Step 1 NOTE, Att. 6 _______ SAT NOTE: Calculations for QPTR should be carried out to four places to the right of the _______ UNSAT decimal place to provide accuracy and consistency of results.

STANDARD Acknowledges NOTE prior to Step 1 of Att. 6.

COMMENTS:

STEP 2: [Step 1, Att. 6] _______ SAT Record Reactor Power, Date, and Time in appropriate blocks.

_______ UNSAT STANDARD:

Records 100% for Reactor Power block, Current Date in Date block, Time in Time block.

EVALUATORS NOTE:

If Asked: Current Reactor Power is 100%.

If Asked: Use todays date.

If Asked: Use current time.

COMMENTS:

STEP 3: [Step 2, Att. 6] _______ SAT Record the following Excore Detector Data:

• Actual Excore Detector Readings. _______ UNSAT

• Expected Excore Detector Readings.

STANDARD:

Places PR NI currents and Normalized Currents in appropriate location on Calculation of Excore Quadrant Power Tilt Ratios.

COMMENTS:

Page 3 of 14

Surry 2017-301 Quadrant Power Tilt Calculation STEP 4: [STEP 3, Att. 6] _______ SAT Normalize the Upper detector readings.

_______ UNSAT STANDARD:

• Divides Upper Detector currents by Normalized currents for each detector.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

STEP 5: [STEP 3, Att. 6] _______ SAT Sum the normalized values for the Upper detectors.

_______ UNSAT STANDARD:

• Adds Upper Detector Normalized currents for all Upper detectors EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations).

COMMENTS:

STEP 6: [STEP 3, Att. 6] _______ SAT Normalize the Lower detectors readings.

_______ UNSAT STANDARD:

• Divides Lower Detector currents by Normalized currents for each detector.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

Page 4 of 14

Surry 2017-301 Quadrant Power Tilt Calculation STEP 7: [Step 3, Att. 6] _______ SAT Sum the normalized values for the Lower detectors.

_______ UNSAT STANDARD:

• Adds Lower Detector Normalized currents for all Lower Detectors.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

STEP 8: [Step 4, Att. 6] _______ SAT Record the Number of Detectors in use.

_______ UNSAT STANDARD:

Records 4.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

STEP 9: [Step 5, Att. 6] _______ SAT Calculate the average upper and lower detector current values.

_______ UNSAT STANDARD:

a) Transcribes Upper and Lower detector Sum of Normalized Values from Step 3 of Attachment 6.

• b) Divides each Sum by the number of Detectors in use.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

Page 5 of 14

Surry 2017-301 Quadrant Power Tilt Calculation STEP 10: [Step 6, Att. 6] _______ SAT From Step 3, Record the Maximum Normalized Upper and Lower Detector Currents. _______ UNSAT STANDARD:

• a) Records the Maximum Normalized Upper Detector Current from Step 3 (N41 value of 1.0143.)

• b) Records the Maximum Normalized Lower Detector Current From Step 3 (N41 value of 1.0393.)

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

STEP 11: [Step 7, Att. 6] _______ SAT Calculate the maximum upper and lower Excore Quadrant Power Tilt Ratios.

_______ UNSAT STANDARD:

• a) Divides Maximum Upper channel current by the Average Upper Detector currents to determine the Upper Excore Quadrant Power Tilt Ratio.

• b) Divides Maximum Lower channel current by the Average Lower Detector current to determine the Lower Excore Quadrant Power Tilt Ratio.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

STEP 12: [Step 8, Att. 6] _______ SAT Calculate Tilt %.

_______ UNSAT STANDARD:

• a) Calculates Tilt % for Upper channels.

• b) Calculates Tilt % for Lower channels.

EVALUATOR S NOTE:

(See attached Calculation of Excore Quadrant Power Tilt Ratios for calculations.)

COMMENTS:

Page 6 of 14

Surry 2017-301 Quadrant Power Tilt Calculation STEP 13: Determine final Quadrant Power Tilt Value. _______ SAT STANDARD: _______ UNSAT

• a) Determines final Quadrant Power Tilt Value from above calculations to be 1.0898 or 8.98% Tilt based on the Lower Channels. (Range 8.8% - 9.2%; + .2% based on rounding errors) b) Notifies Examiner, Task Complete.

EVALUATORS NOTE:

• Proceed to Follow-up question for SRO Candidates.

COMMENTS:

STOP TIME:

EVALUATOR NOTE: Proceed to Follow-up question for SRO Candidates.

Page 7 of 14

Surry 2017-301 Quadrant Power Tilt Calculation Page 8 of 14

Surry 2017-301 Quadrant Power Tilt Calculation Page 9 of 14

Surry 2017-301 Quadrant Power Tilt Calculation SRO ONLY ANSWER KEY NOT FOR TRAINEE QPTR FOLLOW-UP Question Are there any Tech Spec implications?

ANSWER: TS 3.12.B.6 requires:

• 3.12.B.6.a Within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> either hot channel factors shall be determined and power level adjusted to meet the requirement OR

• 3.12.B.6.b Power level to be reduced from Rated Power 2% for each percent of Quadrant Power Tilt. Therefore for a QPTR of 9% power must be reduced 18%. The high neutron flux trip setpoint shall also be reduced within the following 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

Page 10 of 14

SRO ONLY Candidate QPTR FOLLOW-UP Question Are there any Tech Spec implications?

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions:

• Unit 1 operating at 100% power.

o Control Rod D-10, Control Bank B, Group 1 dropped and is currently indicating 0 steps.

Initiating Cues

• Perform the Quadrant Power Tilt Calculation in accordance with Attachment 6, Calculation of Excore Quadrant Power Tilt Ratios, of 0-AP-1.00, Rod Control System Malfunction.

• You are provided a copy of the Power Range Currents from the NIS Data Book providing Normalized Values.

• When you have determined the Quadrant Power Tilt, inform the examiner.

Actual current detector currents taken from the Power Range NIs:

N-41 Upper Detector Current 120.5 N-41 Lower Detector Current 124.2 N-42 Upper Detector Current 96.5 N-42 Lower Detector Current 94.23 N-43 Upper Detector Current 114.7 N-43 Lower Detector Current 115.5 N-44 Upper Detector Current 119.1 N-44 Lower Detector Current 121.8 Surry Unit 1 NI Calibration Data Power Range Currents N41 N42 N43 N44 DELTA I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom)

FLUX @ µamps µamps µamps µamps µamps µamps µamps µamps 100%

0 118.8 119.5 118.5 119.3 119.1 119.5 119.1 119.5 DELTA I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom) I (Top) I (Bottom)

FLUX @ µamps µamps µamps µamps µamps µamps µamps µamps 120%

0 142.5 143.4 142.2 143.1 142.9 143.5 142.9 143.4 8 148.6 137.2 148.3 137.0 149.1 137.3 149.1 137.2

- 24 124.2 161.8 123.9 161.5 124.5 161.9 124.6 161.9 Data based on flux map number S1C28M15A Computer and Recorder Constants Recorder = K0411 = K0412 = K0413 = K0414 = 18.647 LaFrance Davis 9/21/17 Performed / Verified By: __________/ __________ Date: _______

Surry 2017-301 WGDT Press U.S. Nuclear Regulatory Commission Surry Power Station SR17301 Administrative Job Performance Measure GEN2.1.7 (4.4/4.7)

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title DETERMINE REQUIRED NITROGEN DILUTION FOR OUT OF SPEC WASTE GAS DECAY TANK K/A: G2.1.7 Ability to evaluate plant performance and make operational judgments based on operating characteristics, reactor behavior, and instrument interpretation. (4.4/4.7)

Applicability Estimated Time Actual Time ALL 20 Minutes Conditions

• Task is to be PERFORMED in the classroom.

Standards

• Applicant correctly calculates 1B WGDT pressure for O2 dilution, per OP-23.2.4, within +1 psig.

• SRO applicants make the correct TS determination.

Initiating Cues

• Alarm WD-D9 (WASTE GAS DECAY TANKS HI O 2 ) has just been received.

Terminating Cues

• Final WGDT pressure after dilution determined using Attachment 2 of OP-23.2.4, Release of Waste Gas Decay Tank 1B.

Procedures

• 0-WD-D9, Waste Gas Decay Tank HI O 2, Rev. 8.

• OP-23.2.4, Release of Waste Gas Decay Tank 1B, Rev. 20.

• Surry Technical Specifications.

Tools and Equipment

• None 1 of 29

Surry 2017-301 WGDT Press Initial Conditions

• Unit 1and 2 are operating at 100% power.

• WGDT A is isolated.

• WGDT B is in service on the A Oxygen analyzer.

• Annunciator WD-D9, Waste Gas Decay Tanks HI O 2 , has been received.

Initiating Cues

• I am the Shift Manager and you are a licensed operator assigned to the control room.

• No maintenance or testing activities are in progress.

• The indication on the oxygen analyzer has been trending up slowly with NO spiking or other abnormalities noted (both Local and MCR indications are NORMAL with NO indications of analyzer failure present)

• You are to review WD-D9 and determine the following:

o RO - Required actions and amount of Nitrogen dilution to restore the WGDT to the desired concentration.

o SRO - Required actions and amount of Nitrogen dilution to restore the WGDT to the desired concentration, and applicable Tech Spec LCOs and applicable time requirements.

• Due to activity level in the B WGDT, release is not desired at this time.

• Neither units PRT is aligned to the Process Vent System.

Notes Simulator Setup for Screen Captures

• Call up IC-1 and initialize.

• Meter override 1B Waste Gas Decay Tank pressure to 30 psig (0.136), and override GW-AIT-150A, pen #

(green) to an indicated concentration of 3.9% (0.39).

• Verify in service / isolated tanks swapped (Isolated magnet on WGDT A) 2 of 29

Surry 2017-301 WGDT Press PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• Prior to starting the JPM in WD-D9 all SRO Candidates should determine applicable Tech Spec actions. Do not hand out procedures to SRO candidates until they have determined Tech Spec actions.

• START TIME: ____________

FOR SRO ONLY: (TECH SPECS)

_______ SAT SRO TECH SPEC REVIEW:

_______ UNSAT 3.11 - RADIOACTIVE GAS STORAGE A. Explosive Gas Mixture

1. The concentration of oxygen in the waste gas holdup system shall be limited to less than or equal to 2% by volume whenever the hydrogen concentration could exceed 4% by volume.

a. With the concentration of oxygen in the waste gas holdup system greater than 2% by volume but less than or equal to 4% by volume, reduce the oxygen concentration to the above limits within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />.

b. With the concentration of oxygen in the waste gas holdup system greater than 4% by volume, immediately suspend all additions of waste gases to the affected tank and reduce the concentration of oxygen to less than or equal to 4% by volume, then take the action in 1.a above.

c. With the requirements of action 1.a above not satisfied, immediately suspend all additions of waste gases to the affected tank until the oxygen concentration is restored to less than or equal to 2% by volume, and submit a special report to the Commission within the next 30 days outlining the following:

(1) The cause of the waste gas decay tank exceeding the 2%

oxygen limit.

(2) The reason why the oxygen concentration could not be returned to within the limits.

(3) The actions taken and the time required to return the oxygen concentration to within limits.

2. The requirements of Specification 3.0.1 are not applicable.

STANDARD:

• SRO CANDIDATE LISTS REQUIRED TECH SPEC ACTIONS AS:

Take action to reduce the oxygen concentration to <2% within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />. (TS 3.11.A.1.a)

COMMENTS:

3 of 29

Surry 2017-301 WGDT Press STEP 1: (WD-D9)

_______ SAT Step 6 RNO Actions: IF oxygen concentration is greater than 2%, and less than or equal to 4%, THEN GO TO STEP 12. _______ UNSAT STANDARD:

• Identifies oxygen concentration is greater than 2% and less than or equal to 4%.

• GOES to STEP 12.

EVALUATORS NOTE: N/A COMMENTS:

STEP 2: (WD-D9)

Step 12 - CHECK SAMPLE OXYGEN CONCENTRATION - GREATER THAN 2% ON INSERVICE TANK.

STANDARD:

• Confirms that Oxygen concentration is 3.9%.

EVALUATORS NOTE: N/A COMMENTS:

STEP 3: (WD-D9)

_______ SAT Note prior to step 13:

• The maximum pressure allowed in the WGDT is 115 psig. (Actual Pressure _______ UNSAT 30 psig - See Handout)

Step 13 - REDUCE OXYGEN TO LESS THAN OR EQUAL TO 2.0% WITHIN 48 HOURS ON OUT-OF-SPEC TANK IAW APPROPRIATE OPERATING PROCEDURE:

OP-23.2.3, RELEASE OF WASTE GAS DECAY TANK 1A OR OP-23.2.4, RELEASE OF WASTE GAS DECAY TANK 1B STANDARD:

• Trainee requests copy of OP-23.2.4 to reduce Oxygen concentration.

EVALUATORS NOTE:

• Cue: Provide procedure requested (OP-23.2.3, or OP-23.2.4).

• OP-23.2.4 actions begin on next Step (Step 3) of the JPM. Remaining ARP actions for WD-D9 continue at Step 10.

COMMENTS:

4 of 29

Surry 2017-301 WGDT Press STEP 4: (OP-23.2.4)

_______ SAT STANDARD:

_______ UNSAT Candidate Reviews Initial Conditions, and Precautions and Limitations of OP-23.2.4.

3.0 INITIAL CONDITIONS 3.1 Check that the Waste Gas Decay Tank has been on Holdup for as long as possible. (Holdup is not required for purging the tank after maintenance.) (Ref. 2.4.1) 3.2 Neither unit PRT is aligned to the Process Vent System.

4.0 PRECAUTIONS AND LIMITATIONS 4.1 To ensure the maximum Holdup time for the Waste Gas Decay Tank, an evaluation of existing plant conditions must be made before release.

(Ref. 2.4.1) 4.2 When the Waste Gas Decay Tank H2 concentration is greater than 4 percent by volume, the O2 concentration must not be greater than 2 percent by volume. (Ref. 2.4.2) 4.3 The minimum operable channels for the Surry Radioactive Gaseous Effluent Monitoring Instrumentation for the Process Vent System are listed in VPAP-2103S.

4.4 If the MGPI Process Vent skid is inoperable, Health Physics must adjust Process Vent Accountability Sampler Flow to between 1.0 to 3.0 cfm.

4.5 With both WGDT Gas Analyzer A and Analyzer B out of service, a WGDT in service, and 1-BR-79, 1-BR-TK-6 to 1-GW-TK-2 Isol, open, grab samples shall be collected at least once each 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> during degassing operations to the WGDT and at least once each 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> during other operations. Samples shall be analyzed within four hours after collection. (Ref. 2.4.2) 4.6 The WGDT maximum pressure is 115 psig. (Ref. 2.4.2) 4.7 If the Operations Computer Calculation Program is used, the procedure revision number and the calculation revision number must be the same.

COMMENTS:

5 of 29

Surry 2017-301 WGDT Press STEP 5: (OP-23.2.4)

_______ SAT Section 5.1 Waste Gas Decay Tank 1B Sampling and/or Dilution

_______ UNSAT Note: A Chemistry sample is required to determine H2 concentration for release rate adjustments.

Step 5.1.1 - Sample 1-GW-TK-1B IAW OP-23.2.12. IF WGDT is NOT being Prepared for release, THEN enter N/A.

STANDARD: Candidate N/As step EVALUATORS NOTE:

If Candidate lists actions of Section 5.5 of OP-23.2.4, this constitutes Failure Criteria: This section is designed for maintenance; it releases the tank to atmosphere to a final pressure of 0 psig for tank entry.

COMMENTS:

STEP 6: (OP-23.2.4)

_______ SAT 5.1.2 IF the O2 concentration is greater than 1.65 percent and N2 addition is desired OR the tank is being purged after maintenance, THEN open _______ UNSAT 1-GW-755, 1-GW-FCV-104B Outlet Isolation. Otherwise, enter N/A.

(Ref. 2.4.4)

STANDARD:

• Candidate lists OPENING 1-GW-755 as a required action.

EVALUATORS NOTE: N/A COMMENTS:

6 of 29

Surry 2017-301 WGDT Press STEP 7: (OP-23.2.4)

_______ SAT 5.1.3 IF O2 concentration is greater than 1.65 percent and N2 addition is Desired OR the tank is being purged for maintenance, THEN dilute the _______ UNSAT O2 concentration using Attachment 2 and/or Attachment 3 as applicable By performing the following Substeps. Otherwise, enter N/A. (Ref. 2.4.2) a)

• Place 1-GW-43-GW-104B, 1-GW-FCV-104B Control Switch, in open.

b) Locally check that 1-GW-FCV-104B is open.

c)

• Adjust nitrogen flow as necessary using 1-GW-PCV-140, N2 Regulator.

d)

• Determines final pressure is 77 psig (Attachment 2).

STANDARD:

• Candidate lists determination of final WGDT pressure as (77 +1, psig).

• Candidate lists locally opening 1-GW-43-GW-104B as a required action

• Candidate lists locally adjusting N2 flow as a required action.

EVALUATORS NOTE: N/A

• Attachment 2 is used to determine WGDT pressure for O2 < 2%.

• Evaluators Cue: If asked, O2 indication at 77 psig is 1.95%.

COMMENTS:

STEP 8: (OP-23.2.4)

_______ SAT 5.1.4 WHEN tank pressure is at desired pressure, THEN perform the following.

IF tank was NOT diluted in Step 5.1.3, THEN enter N/A. _______ UNSAT

a. Place 1-GW-43-GW-104B, 1-GW-FCV-104B Control Switch, in close.

b. Locally check that 1-GW-FCV-104B is closed.

STANDARD:

EVALUATORS NOTE: N/A COMMENTS:

• • JPM COMPLETE **

COMMENTS:

7 of 29

Surry 2017-301 WGDT Press KEY Required actions (SRO/RO) - Bolded items are Critical Steps.

1. Step 6 of JPM: Candidate lists OPENING 1-GW-755 as a required action.

2. Step 7 of JPM: (See Attachment 2 and 3 on next two pages) o Candidate lists final WGDT pressure as _____ (77 +1 psig).

o Candidate lists locally opening 1-GW-43-GW-104B as a required action.

o Candidate lists locally adjusting N2 flow (PCV 140) as a required action.

Required actions (SRO) Bolded items are Critical Steps

1. SRO CANDIDATE LISTS REQUIRED TECH SPEC ACTIONS AS:

With the concentration of oxygen in the waste gas holdup system greater than 2% by volume but less than or equal to 4% by volume, reduce the oxygen concentration to the above limits within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />. (TS 3.11.A.1.a).

8 of 29

Surry 2017-301 WGDT Press 1

2 9 of 29

Surry 2017-301 WGDT Press NO 10 of 29

Surry 2017-301 WGDT Press NO 11 of 29

Surry 2017-301 WGDT Press 12 of 29

Surry 2017-301 WGDT Press 13 of 29

Surry 2017-301 WGDT Press 14 of 29

Surry 2017-301 WGDT Press 15 of 29

Surry 2017-301 WGDT Press 16 of 29

Surry 2017-301 WGDT Press 17 of 29

Surry 2017-301 WGDT Press 18 of 29

Surry 2017-301 WGDT Press 19 of 29

Surry 2017-301 WGDT Press 20 of 29

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• Unit 1and 2 are operating at 100% power.

• WGDT A is isolated.

• WGDT B is in service on the A Oxygen analyzer.

• Annunciator WD-D9, Waste Gas Decay Tanks HI O 2 , has been received.

Initiating Cues

• I am the Shift Manager and you are a licensed operator assigned to the control room.

• No maintenance or testing activities are in progress.

• The indication on the oxygen analyzer has been trending up slowly with NO spiking or other abnormalities noted (both Local and MCR indications are NORMAL with NO indications of analyzer failure present)

• You are to review WD-D9 and determine the following:

o RO - Required actions and amount of Nitrogen dilution to restore the WGDT to the desired concentration.

o SRO - Required actions and amount of Nitrogen dilution to restore the WGDT to the desired concentration, and applicable Tech Spec LCOs and applicable time requirements.

• Due to activity level in the B WGDT, release is not desired at this time.

• Neither units PRT is aligned to the Process Vent System.

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Required actions (SRO/RO):

Applicable Tech Spec LCOs and Required Actions (SRO ONLY):

NO NO

\

U.S. Nuclear Regulatory Commission Surry Power Station SR17301 Administrative Job Performance Measure G2.3.4 (RO 3.2 / SRO 3.7)

Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Calculate Transit Dose and allowed time on station.

K/A: G2.3.4 Knowledge of radiation exposure limits under normal or emergency conditions. (3.2/3.7)

Applicability Estimated Time Actual Time ALL 20 minutes Conditions

• Task is to be PERFORMED in the classroom.

Standards

• Determines the maximum allowable time for opening 1-RH-MOV-1700 is 2 minutes.

Initial Conditions:

- Unit 1 has experienced a small break LOCA with a safety injection.

Initiating Cues You have been directed to determine:

• The maximum time you will have to open 1-RH-MOV-1700 without exceeding your allowable dose.

Terminating Cues

• Determines the maximum time for opening 1-RH-MOV-1700 without exceeding dose limits.

Tools and Equipment

• Calculator

• Survey Data

• VPAP-2101 Safety Considerations

- None

PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• Provide survey map to candidate.

- START TIME:__________________

STEP 1:

_______ SAT Calculate path exposure to and from1-RH-MOV-1700.

_______ UNSAT STANDARD:

___ 1. (3 R/HR)(1000 MR/R)(1 HR/60 MIN)(0.5 MIN)(2 TRIPS) = 50 MR.

(Personnel Hatch to Stairway)

___ 2. (3 R/HR)(1000 MR/R)(1 HR/60 MIN)(1.5 MIN)(2 TRIPS) = 150 MR.

(Stairway)

___ 3. (12 R/HR)(1000 MR/R)(1 HR/60 MIN)(1 MIN)(2 TRIPS) = 400 MR.

(Stairway on -36 to valve)

___ 4. (50 MR)+(150 MR)+(400MR) =

• 600 MR.

EVALUATOR'S NOTES: Total exposure to travel to the valve and back: 600 mr. THIS IS A CRITICAL STEP COMMENTS:

STEP 2:

_______ SAT Calculate remaining allowable exposure at valve.

_______ UNSAT STANDARD:

__ 1. Allowable Dose to open the valve - (1000 MR) - (600 MR) =

• 400 MR EVALUATOR'S NOTES: Total allowable dose: 400 MR. THIS IS A CRITICAL STEP COMMENTS:

STEP 3:

_______ SAT Determine the maximum allowable time the operator has to open 1-RH-MOV-1700.

_______ UNSAT STANDARD:

___ 1. (400 MR)(HR/12R)(1R/1000 MR)(60 MIN/1 HR) =

• 2 MIN.

EVALUATOR'S NOTES: Determines maximum allowable time to operate the valve is 2 minutes. THIS IS A CRITICAL STEP COMMENTS:

STOP TIME:

EVALUATOR NOTE: Proceed to Follow-up question for SRO Candidates.

SRO ONLY ANSWER KEY NOT FOR TRAINEE DOSE CALC FOLLOW-UP Question While working on 1-RH-MOV-1770, you inadvertently lacerated your left thigh. Medical attention is required and you will need to be transported to a nearby hospital. HP reports that you are contaminated and will to be accompanied by an HP Tech to the hospital.

Are there any reportability requirements?

ANSWER: VPAP-2802, section 6.3.5.a.6 requires an 8-hour report for any event requiring the transport of a radioactively contaminated person to an off-site medical facility for treatment.

Operator Directions Handout (TO BE READ TO APPLICANT BY EXAMINER)

Initial Conditions:

- Unit 1 has experienced a small break LOCA with a safety injection.

- The Operating Team is attempting to place the Residual Heat Removal System in service, but they are unable to open 1-RH-MOV-1700 from the Main Control Room.

- You have been tasked with entering Containment and locally opening 1-RH-MOV-1700.

- Your allowable dose limit for this job is 1000 mr based on Emergency DAD limits.

- General area radiation levels have been manually estimated based on installed radiation monitor readings.

Health Physics personnel are currently unavailable to provide assistance for dose determination.

- Survey maps of the Unit 1 Containment are available, showing dose rates and one way travel time to reach the valve via the chosen route.

- One way travel time is as follows:

- Personnel Hatch to Stairwell 30 seconds

- Stairwell to 36 elevation 1.5 minutes

- 36 elevation to 1-RH-MOV-1700 1 minutes Initiating Cues You have been directed to determine:

• The maximum time you will have to open 1-RH-MOV-1700 without exceeding your allowable dose.

SRO ONLY Candidate Dose Calc FOLLOW-UP Question While working on 1-RH-MOV-1770, you inadvertently lacerated your left thigh. Medical attention is required and you will need to be transported to a nearby hospital. HP reports that you are contaminated and will to be accompanied by an HP Tech to the hospital.

Are there any reportability requirements?

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions:

- Unit 1 has experienced a small break LOCA with a safety injection.

- The Operating Team is attempting to place the Residual Heat Removal System in service, but they are unable to open 1-RH-MOV-1700 from the Main Control Room.

- You have been tasked with entering Containment and locally opening 1-RH-MOV-1700.

- Your allowable dose limit for this job is 1000 mr based on Emergency DAD limits.

- General area radiation levels have been manually estimated based on installed radiation monitor readings.

Health Physics personnel are currently unavailable to provide assistance for dose determination.

- Survey maps of the Unit 1 Containment are available, showing dose rates and one way travel time to reach the valve via the chosen route.

- One way travel time is as follows:

- Personnel Hatch to Stairwell 30 seconds

- Stairwell to 36 elevation 1.5 minutes

- 36 elevation to 1-RH-MOV-1700 1 minutes Initiating Cues You have been directed to determine:

• The maximum time you will have to open 1-RH-MOV-1700 without exceeding your allowable dose.

Surry 2017-301 EP-RO Complete EPIP-2.01 U.S. Nuclear Regulatory Commission Surry Power Station SR17301 Administrative Job Performance Measure G2.4.39 TIME CRITICAL Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Complete EPIP-2.01 K/A: G.2.4.39 - Knowledge of RO responsibilities in emergency plan implementation. (3.9/3.8)

Applicability Estimated Time Actual Time RO only. 15 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the simulator.

Standards

• EPIP-2.01, Report of Emergency to State and Local Governments, Attachment 2 completed and transmitted.

Initiating Cues

• EPIP-1.01, Emergency Manager Controlling Procedure

• EPIP-2.01, Report of Emergency to State and Local Governments.

Terminating Cues

• All State and Local Governments notified and EPIP-2.01 complete through step 9.

Procedures

• EPIP-2.01, Notification of State and Local Governments, Rev. 44.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 20

Surry 2017-301 EP-RO Complete EPIP-2.01 Simulator Setup

• Reset to IC 423, or call up 100% power IC.

• Initiate the following malfunctions:

o RC0501, RCP-1A overcurrent ground fault trip.

o RD18, RPS Auto trip failure o MM0101, Wind Speed Upper Detector Failure - Setting 12 (12 mph).

o MM0201, Wind Direction Upper Detector Failure - Setting 300 (300 degrees).

• Perform immediate actions for E-0.

• Throttle AFW so that SG A has60-100 gpm, and SG B and C has 250 gpm/SG.

• Check PCS on SM does not show any displays.

• Verify Instaphone works.

• Stabilize the plant and place Simulator in FREEZE.

Initial Conditions

• This JPM is Time Critical.

• I am the Station Emergency Manager (SEM) and you are the State and Local Communicator. A Reactor Coolant Pump tripped and the reactor failed to automatically trip. The reactor was manually tripped and the team is responding IAW the EOP network. I have declared an ALERT SA2.1 due to an auto trip failure to shutdown the reactor requiring a manual trip, which was successful.

Initiating Cues

• I need you to initiate EPIP-2.01 and notify state and local governments of our emergency.

• There are no releases in progress, and site access is available.

• When you finish the actions necessary to accomplish this task, please inform me.

Notes

• Student should use State & Local Communicator Book in the Simulator for use of the procedure and the ROE.

Page 2 of 20

Surry 2017-301 EP-RO Complete EPIP-2.01 Notes to the Evaluator

• This JPM is Time Critical-15 minutes. Time starts from the JPM start time until transmittal is complete and time recorded on Report of Emergency (ROE) (step 7 of JPM).

• Task critical elements are bolded and denoted by an asterisk (*).

• Critical step sequencing requirements: Steps 4 and 5 before Step 6.

• Role play as the Station Emergency Manager. Approve Attachment 2 when given to you by student.

• Time declared for the ALERT will be the JPM start time. Use TODAYS date.

START TIME: _________________:

STEP 1:

_______ SAT INITIATES PROCEDURE.

_______ UNSAT STANDARD:

Fills in name, date, time, and location in step 1 of EPIP-2.01.

EVALUATORS NOTE:

• If asked: Use todays date. Time should be current time. Location is Surry Power Station Control Room (simulated).

• A partial copy of EPIP-2.01 is included for the Evaluator at the end of this JPM. The candidate should use the same copy as provided in the State & Local Communicator binder in the MCR.

COMMENTS:

STEP 2:

_______ SAT CHECKS FIRST REPORT OF EMERGENCY FOR EVENT REQUIRED

_______ UNSAT STANDARD:

Answers yes to step 2 based on direction to perform EPIP-2.01.

EVALUATORS NOTE:

If asked: First report of emergency for event is required.

COMMENTS:

Page 3 of 20

Surry 2017-301 EP-RO Complete EPIP-2.01 STEP 3:

_______ SAT Reviews notes prior to step 3:

_______ UNSAT

• The initial notification of any emergency classification must be made (meaning contact initiated with the first agency) within 15 minutes of declaring the emergency class.

• Attachment 1, Instructions for Completing Report of Emergency to State and Local Governments, may be referenced as needed.

• Items 7 through 11 on the Report of Emergency to State and Local Governments are optional for a message reporting initial entry into the Emergency Plan or an emergency class change.

STANDARD:

Acknowledges notes.

EVALUATORS NOTE:

COMMENTS:

STEP 4:

_______ SAT CHECKS EMERGENCY REMAINS IN EFFECT (Step 3)

_______ UNSAT STANDARD:

Determines emergency still in effect.

EVALUATORS NOTE:

If asked: The emergency does remain in effect.

COMMENTS:

Page 4 of 20

Surry 2017-301 EP-RO Complete EPIP-2.01 STEP 5:

_______ SAT RECORDS INFORMATION ON REPORT OF EMERGENCY TO STATE AND LOCAL GOVERNMENTS (ATTACHMENT 2). (Step 4) _______ UNSAT STANDARD:

a) Records message #1 on page 1 and 2 of attachment 2.

b) Checks box for Drill Message.

c)

• Item 1, Emergency Classification: ALERT checked, SA 2.1, Declared at time (given to trainee) and date (given to trainee). Writes name in space for Emergency Communicator.

d)

• Item 2, MET Data: Obtains MET Data from PCS or MCR Indications. Uses Lower Met Tower data (WS approx. 280o, WD approx. 10 mph) e)

• Item 3, Release of Radioactive Material. No radiological release: Will NOT transmit Report of Radiological conditions to Virginia EOC block is checked.

f)

• Item 4, Site Access: Available block is checked.

g)

• Item 5, Protective Action Recommendation: Is not required block is checked.

h) Item 6, Update Schedule: Will be checked after transmittal.

i) Items 7-11, Excluded from message blocks are checked.

EVALUATORS NOTE:

• Item 1, If asked, what is declaration time? Provide time given at start of JPM.

Item 1 must be filled in completely after notification made.

• Item 2, If asked is MET data available in MCR? Respond, Use MET data specified by EPIP-2.01. PCS EMCOMM should be accessed and data recorded from that screen. Note: Lower tower should be used and data recorded will be approx. 280o, and 10 mph.

Evaluator Note: Upper Tower wind speed and direction have failures programmed in for this JPM.

• Item 2, If asked to verify MET data, or is MET data verified? Respond, MET data has been verified. Normally all MET data is verified by a second person (Training note).

• Item 3, If asked, are there any releases? Respond No release in progress.

• Item 4, If asked, Is Site access available? Respond, Site Access is available.

• Item 5, If asked, are there any PARs? Respond, There are no PARs.

• If asked for any other information: Respond, All the information you need has been provided.

COMMENTS:

Page 5 of 20

Surry 2017-301 EP-RO Complete EPIP-2.01 STEP 6:

HAVE SEM APPROVE REPORT. (Step 5) _______ SAT STANDARD: _______ UNSAT SEM reviews and approves report.

EVALUATORS NOTE:

• Sign the report at top of the page as SEM.

• Inform the candidate that they have permission to transmit report to State and Local governments.

• A copy of Attachment 2 (before SEM approves) is included at end of JPM.

COMMENTS:

STEP 7:

_______ SAT SEND REPORT OF EMERGENCY TO STATE AND LOCAL GOVERNMENTS.

(Step 6) _______ UNSAT STANDARD:

a) Acknowledges Note prior to step 6.

b) Check Instaphone clear of conflicting message or traffic.

c) Contacts State and Local governments.

d) Reads item 1.

e) Perform acknowledgement roll-call (check boxes) as EOC answers.

f) Repeat any information in Item 1 upon request.

g) Check Virginia EOC acknowledged message.

h) Check all local EOC(s) answered acknowledgement roll call.

i)

• Record date and time transmittal of item 1 completed. The TIME CRITICAL clock stops after transmittal of item 1 is completed. STOP TIME_________.

j)

• Read Items 2 through 5.

k)

• Consult with Virginia EOC Watch officer to determine desired update schedule.

l)

• Completes item 6, Update Schedule.

m) Read Items 7 through 11.

n) Repeat any items upon request.

o) Record time and date transmittal of items 2 - 11 completed.

p) Go to step 9.

EVALUATORS NOTE:

• Booth instructor: will role-play the State and Local governments and will acknowledge all information.

• Booth instructor: will request a 60 minute update.

• Booth instructor: Virginia EOC duty officers name is John Smith.

COMMENTS:

Page 6 of 20

Surry 2017-301 EP-RO Complete EPIP-2.01 STEP 8:

_______ SAT NOTIFY SEM TRANSMITTAL WAS SENT (Step 9)

_______ UNSAT STANDARD:

Notifies SEM transmittal was sent.

EVALUATORS NOTE:

Acknowledge report. End of JPM.

COMMENTS:

• • END OF JPM **

STOP TIME: _____________

Comments:

Page 7 of 20

Operator Directions Handout (TO BE READ TO APPLICANT BY EXAMINER)

Initial Conditions

• This JPM is Time Critical.

• I am the Station Emergency Manager (SEM) and you are the State and Local Communicator. A Reactor Coolant Pump tripped and the reactor failed to automatically trip. The reactor was manually tripped and the team is responding IAW the EOP network. I have declared an ALERT SA2.1 due to an auto trip failure to shutdown the reactor requiring a manual trip, which was successful.

Initiating Cues

• I need you to initiate EPIP-2.01 and notify state and local governments of our emergency.

• There are no releases in progress, and site access is available.

• When you finish the actions necessary to accomplish this task, please inform me.

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• This JPM is Time Critical.

• I am the Station Emergency Manager (SEM) and you are the State and Local Communicator. A Reactor Coolant Pump tripped and the reactor failed to automatically trip. The reactor was manually tripped and the team is responding IAW the EOP network. I have declared an ALERT SA2.1 due to an auto trip failure to shutdown the reactor requiring a manual trip, which was successful.

Initiating Cues

• I need you to initiate EPIP-2.01 and notify state and local governments of our emergency.

• There are no releases in progress, and site access is available.

• When you finish the actions necessary to accomplish this task, please inform

Surry 2017-301 OPT Review U.S. Nuclear Regulatory Commission Surry Power Station SR17301 Administrative Job Performance Measure G2.2.12 Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Review 1-OPT-FW-006, Auxiliary Feedwater MOV Test.

K/A: G.2.2.12 - Knowledge of surveillance procedures. RO: 3.7/ SRO: 4.1 Applicability Estimated Time Actual Time SRO Only 15 minutes Conditions

• Task is to be PERFORMED in the CLASSROOM.

Standards

• Review 1-OPT-FW-006, Auxiliary Feedwater MOV Test.

Initiating Cues

• 1-OPT-FW-006 has been completed by another operator earlier in the shift.

• You are to perform the supervisory review of 1-OPT-FW-006.

Terminating Cues

• 1-OPT-FW-006 review complete.

Procedures

• 1-OPT-FW-006 (marked up), Revision 13.

Tools and Equipment

• None Safety Considerations

• None Page 1 of 10

Surry 2017-301 OPT Review Initial Conditions:

• Unit 1 at 100% power.

Initiating Cues

• 1-OPT-FW-006 has been completed by another operator earlier in the shift.

• You are to perform the supervisory review of 1-OPT-FW-006 by completing step 7.4.

• Document any issues identified during your review in accordance with the requirements of the OPT.

• When you have completed the review of 1-OPT-FW-006, inform your examiner.

Page 2 of 21

Surry 2017-301 OPT Review PERFORMANCE CHECKLIST Notes to the Evaluator

• Task critical elements are bolded and denoted by an asterisk (*).

• START TIME: ____________

STEP 1: Evaluate the Test results by reviewing the Acceptance criteria for the components _______ SAT tested.

The valve(s) tested travel(s) full stroke within the specified acceptable _______ UNSAT range. (step 7.1.1)

STANDARD:

a) Reviews the following:

• Starts reviewing each section starting with section 6.2.

EVALUATOR NOTES:

• If asked, it is desired to perform this Review now.

COMMENTS:

Page 3 of 21

Surry 2017-301 OPT Review STEP 2: Reviews section 6.2, Testing 1-FW-MOV-151E, SG A AFW Flow Isol. _______ SAT STANDARD: _______ UNSAT a) Step 6.2.1: Cycle 1-FW-MOV-151E and verify full stroke. Record the time required to close and to open the MOV.

• *Identifies Close time is outside the Acceptable Range*. This is a critical task.

• Identifies Open time within the Acceptable Range.

b) Step 6.2.2: Return 1-FW-MOV-151E to position specified by Shift Supervision. Circle as left position.

• Identifies OPEN circled.

• Identifies Return to position correctly verified by initial in verification blank.

c) Step 6.2.3: record the stopwatch SQC No. and Cal Due Date.

• Identifies SQC No. and Cal Due Date blanks filled out appropriately.

EVALUATOR NOTES: NONE

• Acknowledge that 1-FW-MOV-151E Close time is outside the acceptable range. This may be done now or at step 7.1.2.

• Have the Candidate continue with the PT review.

• If candidate asks for a CR #: Respond as follows, A CR will be generated.

COMMENTS:

Page 4 of 21

Surry 2017-301 OPT Review STEP 3: Reviews section 6.3, Testing 1-FW-MOV-151F, SG A AFW Flow Isol. _______ SAT STANDARD: _______ UNSAT a) Step 6.3.1: Cycle 1-FW-MOV-151F and verify full stroke. Record the time required to close and to open the MOV.

• Identifies Close and Open times within the Acceptable Range.

b) Step 6.3.2: Return 1-FW-MOV-151F to position specified by Shift Supervision. Circle as left position.

• Identifies OPEN circled.

• Identifies Return to position correctly verified by initial in verification blank.

c) Step 6.3.3: record the stopwatch SQC No. and Cal Due Date.

• Identifies SQC No. and Cal Due Date blanks filled out appropriately.

EVALUATOR NOTES: NONE COMMENTS:

STEP 4: Reviews section 6.4, Testing 1-FW-MOV-151C, SG B AFW Flow Isol. _______ SAT STANDARD: _______ UNSAT a) Step 6.4.1: Cycle 1-FW-MOV-151C and verify full stroke. Record the time required to close and to open the MOV.

• *Identifies Close and Open times are outside the Acceptable Range*. This is a critical task.

b) Step 6.4.2: Return 1-FW-MOV-151C to position specified by Shift Supervision. Circle as left position.

• Identifies OPEN circled.

• Identifies Return to position correctly verified by initial in verification blank.

c) Step 6.4.3: record the stopwatch SQC No. and Cal Due Date.

• Identifies SQC No. and Cal Due Date blanks filled out appropriately.

EVALUATOR NOTES: NONE

• Acknowledge that return 1-FW-MOV-151C OPEN and CLOSE times are outside the acceptable range. This may be done now or at step 7.1.2.

• Have the Candidate continue with the PT review.

• If candidate asks for a CR #: Respond as follows, A CR will be generated.

COMMENTS:

Page 5 of 21

Surry 2017-301 OPT Review STEP 5: Reviews section 6.5, Testing 1-FW-MOV-151D, SG B AFW Flow Isol. _______ SAT STANDARD: _______ UNSAT a) Step 6.5.1: Cycle 1-FW-MOV-151D and verify full stroke. Record the time required to close and to open the MOV.

• Identifies Close time is at the minimum limit and Open time is within the Acceptable Range.

b) Step 6.5.2: Return 1-FW-MOV-151D to position specified by Shift Supervision. Circle as left position.

• Identifies OPEN circled.

• Identifies Return to position correctly verified by initial in verification blank.

c) Step 6.5.3: record the stopwatch SQC No. and Cal Due Date.

• Identifies SQC No. and Cal Due Date blanks filled out appropriately.

EVALUATOR NOTES:

• Acknowledge 1-FW-MOV-151D CLOSE time is at the minimum limit.

• Have the Candidate continue the PT Review.

• If candidate asks for a CR #: Respond as follows, A CR will be generated.

COMMENTS:

STEP 6: Reviews section 6.6, Testing 1-FW-MOV-151A, SG C AFW Flow Isol. _______ SAT STANDARD: _______ UNSAT a) Step 6.6.1: Cycle 1-FW-MOV-151A and verify full stroke. Record the time required to close and to open the MOV.

• Identifies Close and Open times within the Acceptable Range.

b) Step 6.6.2: Return 1-FW-MOV-151A to position specified by Shift Supervision. Circle as left position.

• Identifies OPEN circled.

• Identifies Return to position correctly verified by initial in verification blank.

c) Step 6.6.3: record the stopwatch SQC No. and Cal Due Date.

• Identifies SQC No. is NOT filled in.

EVALUATOR NOTES: NONE

• Acknowledge SQC No. is not filled in.

• Have the Candidate continue the PT Review.

• If candidate asks for a CR #: Respond as follows, A CR will be generated.

COMMENTS:

Page 6 of 21

Surry 2017-301 OPT Review STEP 7: Reviews section 6.7, Testing 1-FW-MOV-151B, SG C AFW Flow Isol.

_______ SAT STANDARD:

_______ UNSAT a) Step 6.7.1: Cycle 1-FW-MOV-151B and verify full stroke. Record the time required to close and to open the MOV.

• Identifies Close time is within the Acceptable range and Open time is at the upper limit.

b) Step 6.7.2: Return 1-FW-MOV-151B to position specified by Shift Supervision. Circle as left position.

• Identifies OPEN circled.

• Identifies Return to position correctly verified by initial in verification blank.

c) Step 6.7.3: record the stopwatch SQC No. and Cal Due Date.

• Identifies SQC No. and Cal Due Date blanks filled out appropriately.

EVALUATOR NOTES:

• Acknowledge 1-FW-MOV-151B OPEN time is at the upper limit.

• Have the Candidate continue the PT Review COMMENTS:

STEP 8: Reviews Section 7.1, Acceptance Criteria.

_______ SAT STANDARD: _______ UNSAT

• Initials Step 7.1.1.

• Notes check mark on step 7.1.2, Satisfactory results. *Identifies that the test results are in fact Unsatisfactory. This is a critical task.

EVALUATOR NOTES:

Candidate may identify why test is unsat (1-FW-MOV-151E Close time; 1-FW-MOV-151C Open and Close time) at this time.

COMMENTS:

Page 7 of 21

Surry 2017-301 OPT Review STEP 9: Reviews Section 7.2 Follow-On Tasks.

_______ SAT STANDARD:

_______ UNSAT

• 7.2.1) Identifies step 7.2.1 was filled out incorrectly as the test was unsatisfactory.

o a)

• Identifies that the test was unsatisfactory.* This is a critical task.

o b) Notify System Engineer and record the name.

o c) Notify the IST Engineer and record the name.

o d) Initiate a Condition Report and Record the number.

• N/A step 7.2.2.

• Initials 7.2.3.

EVALUATOR NOTES:

• Operator identifies 1-FW-MOV-151E, and 1-FW-MOV-151C stroke times are outside acceptable range. The candidate may document reason or return the test for correction.

• Operator will probably also document:

o 1-FW-MOV-151D CLOSE time at lower limit.

o 1-FW-MOV-151B OPEN time at upper limt.

• If candidate asks for a CR #: Respond as follows, A CR will be generated.

• If Asked System Engineer: Jignesh Jain, and IST Engineer: John Rayno.

• Operator may hand back OPT with instructions that the RO must correctly perform step 7.2.1. This meets the intent of the step.

COMMENTS:

STEP 10: Reviews Section 7.3 Notification, Documentation, and Procedure Closeout. _______ SAT STANDARD: _______ UNSAT

• Initial for Step 7.3.1.

• Initials/Prints Name in Table.

• Signature and date at bottom of page.

• Identifies that Operator comments needs to be filled out. Fills out (or directs RO to correctly fill out) Operator Comments section. Includes 1-FW-MOV-151E (Close time outside acceptable range), 1-FW-MOV-151C (Close and Open outside acceptable range), 1-FW-MOV-151D (Close time at lower limit), and 1-FW-MOV-151B (Open time at upper limit).

EVALUATOR NOTES: NONE Operator may direct RO to correctly fill out section 7.2, and 7.3. This is acceptable.

COMMENTS:

STOP TIME: ________

Page 8 of 21

Surry 2017-301 OPT Review Notes:

Page 9 of 21

Surry 2017-301 OPT Review KEY The items that are critical are bolded.

Step 6.2.1: Identifies Close time for 1-FW-MOV-151E is outside the Acceptable range.

Step 6.4.1: Identifies Close and Open times for 1-FW-MOV-151C are outside the Acceptable range.

Step 6.5.1: Identifies Close time for 1-FW-MOV-151D is at the minimum limit. Engineering will need to be notified.

Step 6.6.3: Identifies SQC No. is missing for stop watch.

Step 6.7.1: Identifies Open time for 1-FW-MOV-151B is at the upper limit. Engineering will need to be notified.

Step 7.1.2: Identifies that test results are Unsat. Note this can be done during JPM debrief.

Step 7.2.1: Identifies that step 7.2.1 needs to be performed as test is Unsat.

Step 7.3: Identifies that step 7.3 needs to be annotated in the Operator Comments why the test was unsat.

Step 7.4: Candidate does not sign for Review until corrections are made.

Page 10 of 21

Surry 2017-301 OPT Review Page 11 of 21

Surry 2017-301 OPT Review Page 12 of 21

Surry 2017-301 OPT Review Page 13 of 21

Surry 2017-301 OPT Review Page 14 of 21

Surry 2017-301 OPT Review Page 15 of 21

Surry 2017-301 OPT Review Page 16 of 21

Surry 2017-301 OPT Review Page 17 of 21

Surry 2017-301 OPT Review Page 18 of 21

Surry 2017-301 OPT Review Page 19 of 21

Surry 2017-301 OPT Review EVALUATORS REFERENCE COPY Operator Directions Handout (TO BE READ TO APPLICANT BY EXAMINER)

Initial Conditions:

• Unit 1 at 100% power.

Initiating Cues

• 1-OPT-FW-006 has been completed by another operator earlier in the shift.

• You are to perform the supervisory review of 1-OPT-FW-006 by completing step 7.4.

• Document any issues identified during your review in accordance with the requirements of the OPT.

• When you have completed the review of 1-OPT-FW-006, inform your examiner.

Page 20 of 21

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions:

• Unit 1 at 100% power.

Initiating Cues

• 1-OPT-FW-006 has been completed by another operator earlier in the shift.

• You are to perform the supervisory review of 1-OPT-FW-006 by completing step 7.4.

• Document any issues identified during your review in accordance with the requirements of the OPT.

• When you have completed the review of 1-OPT-FW-006, inform your examiner.

Surry 2017-301 EP-SRO U.S. Nuclear Regulatory Commission Surry Power Station SR17301 Administrative Job Performance Measure G2.4.39 TIME CRITICAL Applicant________________________________ Start Time___________________

Examiner_______________________________

Date ___________________________________ Stop Time___________________

Title Complete EPIP-2.01 K/A: G2.4.40 - Knowledge of SRO responsibilities in emergency plan implementation. (2.7/4.5)

Applicability Estimated Time Actual Time SRO only. 15 Minutes ___ Minutes Conditions

• Task is to be PERFORMED in the classroom.

Standards

• EPIP-2.01, Report of Emergency to State and Local Governments, Attachment 2 reviewed and errors identified.

Initiating Cues

• EPIP-2.01, Report of Emergency to State and Local Governments.

Terminating Cues

• Reviewed ROE and determined errors that need to be fixed before transmitting.

Procedures

• EPIP-2.01, Notification of State and Local Governments, Rev. 44.

Tools and Equipment Safety Considerations

• None

• None Page 1 of 9

Surry 2017-301 EP-SRO Initial Conditions

• This JPM is Time Critical.

• You are the Station Emergency Manager (SEM). At 1026 today (11-1-17), an earthquake was felt and verified by the National Earthquake Information Center. At 1030 today you declared a NOUE HU 1.1.

Initiating Cues

• MET Data has been obtained and verified.

• There are no releases in progress, and site access is available.

• Review EPIP-2.01 Attachment 2, Report of Emergency to State and Local Governments, for accuracy and sign for approval.

• When you finish the actions necessary to accomplish this task, please inform me.

Notes Page 2 of 9

Surry 2017-301 EP-SRO Notes to the Evaluator

• This JPM is Time Critical-15 minutes. Time starts from the JPM start time until the candidate announces he has completed his review.

• Task critical elements are bolded and denoted by an asterisk (*).

• Critical step sequencing requirements: Steps 4 and 5 before Step 6.

• Role play as the Emergency Communicator.

• Time declared for the ALERT will be the JPM start time. Use TODAYS date.

START TIME: _________________:

STEP 1:

_______ SAT REVIEWS INFORMATION ON REPORT OF EMERGENCY TO STATE AND LOCAL GOVERNMENTS (ATTACHMENT 2). (Step 4) _______ UNSAT STANDARD:

a) Checks ROE message #1 recorded on ROE.

b) Message type:

• Identifies that box for Drill termination checked.

c) Item 1, Emergency Classification:

• Identifies that Wrong Box (Alert) is checked.

d) Item 2, MET Data:

• Identifies that box for On-Site Measurements is not checked.

e) Item 3, Release of Radioactive Material:

• Identifies Wrong box (B) is checked instead of Box A.

f) Item 4, Site Access: Available block is checked.

g) Item 5, Protective Action Recommendation:

• Identifies that Item 5 is left blank.

h) Item 6, Update Schedule: 60 minutes recommended block is not checked.

i) Items 7-11, Excluded from message blocks are checked.

EVALUATORS NOTE:

• If asked for any other information: Respond, All the information you need has been provided.

• If asked to make correction to ROE: Respond, Continue the review and identify if there are any other errors.

COMMENTS:

Page 3 of 9

Surry 2017-301 EP-SRO STEP 6:

SEM APPROVES REPORT. (Step 5) _______ SAT STANDARD: _______ UNSAT SEM reviews and does NOT approve the report, and does one of the following:

Identifies all errors and turns ROE back in for correction. OR Identifies all errors and makes corrections.

EVALUATORS NOTE:

• A copy of Attachment 2 (before SEM approves) is included at end of JPM.

COMMENTS:

• • JPM COMPLETE **

STOP TIME: _____________

Comments:

Page 4 of 9

Surry 2017-301 EP-SRO Key The following items need to be identified:

1) The Drill Termination box was checked. The Drill Message box should have been checked.

2) In Item 1, The Alert box was checked. The NOUE box should have been checked.

3) In Item 2, No check marks. Should have checked On-site measurements.

4) In Item 3, the wrong box (B) was checked. The (A) box, No radiological release should have been checked.

5) In Item 5, no box was checked. The is not required box should have been checked.

Page 5 of 9

Surry 2017-301 EP-SRO Page 6 of 9

Surry 2017-301 EP-SRO Operator Directions Handout (TO BE READ TO APPLICANT BY EXAMINER)

Initial Conditions

• This JPM is Time Critical.

• You are the Station Emergency Manager (SEM). At 1026 today (11-1-17), an earthquake was felt and verified by the National Earthquake Information Center. At 1030 today you declared a NOUE HU 1.1.

Initiating Cues

• There are no releases in progress, and site access is available.

• Review EPIP-2.01 Attachment 2, Report of Emergency to State and Local Governments, and sign for approval.

• When you finish the actions necessary to accomplish this task, please inform me.

Page 7 of 9

Operator Directions Handout (TO BE GIVEN TO APPLICANT)

Initial Conditions

• This JPM is Time Critical.

• You are the Station Emergency Manager (SEM). At 1026 today (11-1-17), an earthquake was felt and verified by the National Earthquake Information Center. At 1030 today you declared a NOUE HU 1.1.

Initiating Cues

• MET Data has been obtained and verified.

• There are no releases in progress, and site access is available.

• Review EPIP-2.01 Attachment 2, Report of Emergency to State and Local Governments, and sign for approval.

• When you finish the actions necessary to accomplish this task, please inform me.