ML18151A512

From kanterella
Jump to navigation Jump to search
Insp Repts 50-280/88-32 & 50-281/88-32 on 880912-16,26-30 & 1114-18.Violations Noted.Major Areas Inspected:Operational Readiness of Svc Water & Recirculation Spray Sys to Meet Intended Design Functions Under Postulated Conditions
ML18151A512
Person / Time
Site: Surry  Dominion icon.png
Issue date: 12/15/1988
From: Belisle G, Julian C, Mellen L
NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION II)
To:
Shared Package
ML18151A513 List:
References
50-280-88-32, 50-281-88-32, NUDOCS 8812220026
Download: ML18151A512 (77)


See also: IR 05000280/1988032

Text

e

UNITED STATES

e

NUCLEAR REGULATORY COMMISSION

REGION II

101 MARIETTA STREET, N.W.

ATLANTA, GEORGIA 30323

ENCLOSURE 2

Report Nos.:

50-280/88-32 and 50-281/88-32

Licensee:

Virginia Electric and Power Company

Richmond, VA

23261

Docket Nos.:

50-280 and 50-281

Facility Name:

Surry 1 and 2

License Nos.: DPR-32 and DPR-37

Inspection Conducted:

September 12-16, September 26-30, and November 14-18,

1988

/1/

..

Inspectors:

1 J.

1 /S~_,;_,/ :_____->

G. A. Belisfe~ Team Leader*

r--~ s.

1Yrli&C-~

ct. S. Mellen, Assistant Team Leader*

Team Members:

R. Bernhard*

T. Cooper

R. Gibbs

R. Moore

M. Thomas

Date Signed

Accompanying Personnel:

F. Witt, Office of Nuclear Reactor

Regulation

Westec *contractor Personnel:

T. DelGaizo*, S. Kobylarz*

Approved

  • conducte~ iJspection on Novemb~r 14-18,

By: ~

A. ~.,,,

Caudle A. Julian, Chie~

Operations Branch

.

Division of Reactor Safety

8812220026 881215

PDR

ADOCK 05000280

G

PNU

1988

/2//5/<tO

&te s*;gned

e

2

SUMMARY

Scope: This special, announced Safety System Functional Inspection (SSFI.) was

performed to assess the operational readiness of the Service Water (SW) and

Recirculation Spray (RS) systems to meet their intended design function under

all postulated conditions. The licensee 1 s tiperational and management controls

were evaluated in the following functional areas:

Design Control

Operations

Maintenance

Surveillance

QA/QC

Inspection Objective:

The inspection objective at Surry was to assess the

ope rat i ona 1 readiness of the SW and RS systems.

The assessment included

determining the following:

capability of the systems to perform their safety functions as

required by the design basis

adequacy of operations to ensure the systems are being operated

properly

adequacy of maintenance to ensure the systems are being maintained

properly

adequacy of surveillances to ensure the systems are being tested

properly

adequacy of QA/QC activities to ensure the systems are being reviewed

properly.

Acronyms used throughout this report are listed in the Appendix B.

Results of Inspection Findings:

Eight apparent violations, two apparent deviations, three URis, and sixteen

IFis were identified as follows:

Apparent violation 280,281/88-32-01: Failure to adequately establish a

design contra 1 program that meets A_NSI N 45. 2-11 requirements, Paragraphs

4.A.1.a, 4.A.l.b, 4.A.l.c, 4.A.l.d, 4.A.2.a, 4.A.2.b, 4.A.2.i .(2), and

4.A.6.

Apparent violation 280,281/88-32-02: Failure to exercise service water

valves to the position required (closed to open), paragraph 4.0.1.

Apparent violation 280,281/88-32-03:

Failure to include appropriate

qualitative or quantitative acceptance criteria into site procedures,

paragraphs 4.A.2.d, 4.A.2.e, 4;A.2.g, 4.C.l, and 4.0.2.c.

e

3

Apparent violation 280,281/88-32-04:

Failure to establish adequate

procedures for torquing fasteners, paragraph 4.C.l.

Apparent violation 280,281/88-32-05:

Failure to establis~ adequate

measures to maintain material traceability, paragraph 4.C.l.

Apparent violation 280,281/88-32-06:

Failure to perform testing to

demonstrate operability, paragraph 4.C.1.

Apparent violation 280,281/88-32-07: Failure to correct conditions adverse

to quality promptly, paragraph 4.C.4.

Apparent violation 280,281/88~32-08:

Failure to document corrective

actions for identiffed deficiencies, paragraph 4.E.

Apparent deviation 280,281/88-32-09: Failure to meet commitments to the

NRC Generic Letter 83-28 for including vendor manua 1 requirements into

site proceduresi paragraphs 4.A.l.n, 4.8.3, 4.C.l ~nd 4.C.2.

Apparent deviation 280,281/88-32-10: Failure to meet UFSAR commitment

(IEEE-279)

to

have

indication of bypassed engineered

safeguards

actuations, paragraph 4.A.2.k.

Unresolved Item 280,281/88-32-ll: NRR to determine if Surry can meet GDC-2

requirements, paragraph 4.A.1.1.

Unresolved Item 280,281/88-32-12: Licensee, to evaluate lack of -voltage

drop/voltage profile analysis for station 125 VDC batteries, paragraph

4.A.2.c.

Unresolved Item 280,281/88-32-13: Licensee to'eval-uate potential loss of

combustion air to ESW diesels due to ceiling damper failure, paragraph

4.A.2.j.

Inspector Followup Item 280,281/88-32-14: Clarify procedure SUADM-LR-12

relative to performing safety evaluations, paragraph 4.A.1.i.

Inspector* Followup

Item 280,281/88-32-15:

Items

identified during

observations and system walkdowns, paragraphs 4.A.l.m, 4.A.1.o, and

4.A.l.p.

Inspector

Followup

Item 280,281/88-32-16: Clarify testing the

ESW

batteries without the charger being connected, paragraph 4.A.2.f.

IRspector Followup Item 280,281/88-32-17:

Update electrical drawing

11448-FE-lG to accurately reflect as built conditions,

paragraph

4.A.2. i .(1).

Inspector Fo 11 owup Item 280 ,281/88-32-18: Wiring discrepancies between

drawings and as built conditions in the main control boards, paragraph

4.A.4.

. (*

-

e

4

Inspector Fo 11 owup Item 280, 281/88-32-19: Eva 1 uate the use of butterfly

valves for throttling, paragraph 4.B.4.

Inspector Followup Item 280,281/88-32-20: Correctly maintain*operator logs

to accurately reflect personnel available, paragraph 4.B.5.

Inspector Followup Item 280,281/88-32-21: Update plant procedures and

UFSAR to accurately reflect updated calculations, paragraph 4.8.6.

Inspector Followup Item 280,281/88-32-22: Verify SW valve testi,ng and

method to keep RSHXs dry, paragraph .4.B.8.

Inspector Followup Item 280,281/88-32-23: Evaluate installing commercial

grade gauge in safety-related applications and maintain calibration

records for this gauge, paragraph 4.C.l .

Inspector Fo 11 owup Item 280, 281/88-32-24: Incorporate MDVATS testing for

SW and CW valves, paragraph 4.C.3.

Inspector Fo 11 owup

Item 280, 281/88-32-25:

Revise UFSAR to accurately

reflect correct test frequency for ESW pumps, paragraph 4.D.2.a.

Inspector Followup Item 280,281/88-32-26: Provide t'raining for personnel

on use of PT25.3.C data taking, paragraph 4.0.2.d.

Inspector Followup Item 280,281/88-32-27: Include tolerances for ESW pump

flow in appropriate procedures, paragraph 4.b.2.e.

Inspector Fo 11 owup

Item 280, 281/88-32-28: Revise procedures to assure

operability of control room chiller pumps, paragraph 4.D.3.

Inspector Followup Item 280,281/88-32-29: Perform corrective action to

close DR 1-88-0998, paragraph 4.A.2.h .

e

TABLE OF CONTENTS

. FOR

REPORT DETAILS

e

1.

Persons Contacted ..................... ; . . . . . . . . . . . . . . . . . . .

1

2.

Exit Interview ..... .' ...... * .......................... :.....

I

3.

System Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1

4.

Detailed Inspection Findings..............................

2

. A.

Design Control .................. * .......... -. ......... .

2

2

1.

Mechanical Design ........ ; ........... , ......... .

a.

Design Calculation ME-180............. ... ..

2

b.

Design Calculation ME-179........... ... .. . .

4

c.

Design Calculation ME-166.............. ....

5

d.

D~sign Calculation ME-187 ............ , .~.,.

6

e.

Intake Canal Level Instrument Calibration..

6

f.

Demon strati on of ESW Pump Rated Fl ow.......

7

g.

HX Fouling ................................ ,

8

h.

Environmental Qualification of Equipment .... 13

i.

Design Modification Process.:..............

13

j.

Design Control Packages .................... 15

k.

Chiller Condenser Pump NPSH ............ ***-

.15

1.

Protection Against Natural Phenomena.......

16

m.

Maintenance and Housekeeping Items ..... :... 16

n.

RSHX Replacement ........................... 16

o.

System Wa 1 k.down............................

17

p.

SW Pumphouse Walkdown ...*.................. 19

2.

Electrical Design

a.

Minimum Design ESW Pumphouse Ambient

Temperature ............................ ; . . . . .

21

b.

Maximum Design Ambient Temperature ......... 23

c.

Adeq~acy of Class IE 125 Volt DC System

Voltage ...... .-.............................. 24

d.

ESW Pump Diesel Battery Procedures ......... 25

e.

Battery Specific Gravity Surveillance ...... 27

f.

Batteries Never Tested Without Charger ..... 27

. g.

Electrical Maintenance Procedure Minimum_

Specific Gravity ....... * .................... 28

h.

Seismic Design Qualification for ESW Pump

Equipment ..... _............................. 29

i.

Design Ve~ification Calculation for Class

lE Station Battery Sizing .................. 31

,.

e

Table of Contents

2

j.

Potential Loss of Combustion Air on

Damper Single Failure ...................... 33

k.

Lack of Continuous Indication of Bypass of

Engineered Safeguards Actuation ........... :

34

3.

Chemical Design ................................. 34

a.

SW System Inspection ....................... 34

b.

Service Water Chemistry .................... 35

c.

Surveillance and Inspection Program ........ 36

4:

Configuration Control ........................... 37

5 . * Health Phys i cs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3 9

6.

Off-site Engineering ............................ 39

B.

OPERATIONS...........................................

39

1.

SNSOC Reviews of Procedure Deviations ........... 40

2.

ESW Diesel Engine Fuel Oil System ............... 40

3.

Operating Procedures for SW and ESW Systems ..... 41

4.

Use of Butterfly Valves in the SW ,System ........ 42

5.

Minimum Shift Crew Coverage ..................... 43

6.

Operator Training for SW and ESW Systems ........ 44

7.

Control Room/Relay Room Ventilation System

Chiller Condenser Problems ...................... 45

8.

Water Found in the RSHXs ........................ 47

9.

SW and ESW Panel Configuration .................. 47

C.

Maintenance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

48

1.

Review of Maintenance in Progress and Complete

Maintenance Work Orders ......................... 48

2.

Preventive Maintenance .............. ~ ........... 53

3.

Predictive Analysis.............................

55

4.

Trending and Root Cause Analysis of Component

Failures ........................................ 56

e

Table of Contents

3

D.

Survei 11 a nee........ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

57

1.

SW System Valve Testing .............. : .......... 58

2.

SW System Pump Testing ............. ~ ............ 58

3.

Control Room Chiller Pumps .......................

61

E.

QA/QC.................................................

62

Appendix A

Appendix B

Lice~see Employees

Acronyms

1.

Persons Contacted*

Refer to Appendix A

2.

Exit Interview

r .-

e

The inspection scope and findings were summarized on November 18, 1988,

with those persons indicated in Appendix A.

The inspectors described' the

area~ inspected and discussed in detail the inspection findings previously

listed. The licensee did not identify as proprietary any of the material

provided to or reviewed by the inspectors during this inspection.

Dissenting comments were not received from the licensee.

Revisions to the

findings were discussed with Mr. Benthall of your staff on December 2,

December 12, and December 14, 1988.

3.

System Description

The

CW system supplies cooling water to the main condenser.

Water is

drawn from the James River through eight screenwe 11 s to eight CW pump

inlets (one screenwell per CW pump).

The CW pumps discharge water through

eight 96-inch lines up over a berm and down into the upper intake canal.

The CW pumps are powered from non-vital 4160 V AC busses and each pump

discharges 210,000 gpm.

Each CW pump discharge line has a VP system

(assists getting water from the pump discharge up over the berm and down

into the upper intake can a 1) and a VB system ( prevents water from

siphoning from the upper intake canal back to the James River if power is

lost to the CW pumps).

The upper intake canal is 1.7 miles long and at

the time of the inspection, the minimum TS operating *level was 18 feet

above MSL.

The licensee was contro*lling the upper intake canal level at

27 feet during the inspection due to concerns identified with the CCWHXs.

Water flows from the upper intake can a 1 to the high 1 eve 1 intake structure

for each unit.

Water then flows by gravity through each unit's

condensers, through the associated discharge tunnel and back to the James

River.

Each unit's high level intake structure has a bubbler type level

transmitter which uses backpressure on the sensing line to determine the

upper intake canal's level.

When the upper intake canal drops below the

TS required level, the turbine trips, the 96 inch CW inlet and outlet MOVs

to the condenser close and SW is isolated except for water to the RSHXs,

control room chillers, and the charging pump SW system.

The safety-related SW system branches off from the CW lines between the CW

inlet MOVs to the condenser and the upper intake canal.

The SW system

supplies water to the CC, RS, and BC HXs, control room and relay room air

conditioning unit chiller-condenser, charging pump SW system, station VP

seal water coolers, 555-ton air conditioning unit chiller-condensers, and

4.

e

e

2

river water makeup pumps.

The SW system can also be supplied water from

three diesel driven ESW pumps at the river water pumphouse.

The~e pumps

take a suct.i on from the James River and discharge to the upper i nt;ake

canal through their-own separate discharge lines.

Detailed inspection Findings

A.

Design Contro 1

.

.

During the inspection~ th~ licensee was asked if an 18 foot level in

the upper intake canal provided sufficient water to perform all

required safety functions.

They were also asked to provide the

design basis calculation for this level. Th~ licensee responded that

a search for the original calculitions failed to produce any design

basis calculations on canal inventory.

Consequently, calculation

ME-179 was performed and issued on September 9, 1988, and changes to

the UFSAR were issued on or about that date .. The p 1 ant had been

operating with the upper intake canal level at 27 feet due to earlier

concerns raised by the resident inspectors.

Calculation ME-180 was

performed and issued on September 9, 1988, and provided the basis for

operation at the 27 foot level.

1.

Mechanical Des_ign

a.

Design Calculation ME-180, SW Inventory Impact of the Condenser

Isolation Valves, Revision 1, dated September 9, 1988, Operation

at 27 Foot Intake Cana 1 Leve 1

The current minimum TS water level for the upper intake canal

is 18 feet.* At this level, according to the UFSAR, the upper

intake cana 1 contains sufficient water inventory to supply

essential post~ac,ident cooling loads for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> without upper

intake canal make-up;

A licensee SW system design review

performed prior to the SSFI i dent ifi ed that the upper intake

canal low-level instruments and trip circuitry, which isolate

non-safety cooling loads to preserve canal inventory, were not

safety grade or single failure- proof.

Calculation ME-180 concluded that from a 26.5 foot initial canal

level,* post-accident canal level remained above the minimum

level (16 feet) needed for acceptable SW flow to the RSHXs.

Calculation ME-180 provided the justification for continued

operation.

Calculation ME-180 assumed that the CW system would be isolated

by operator action 30 minutes following the accident's start,

that one ESW pump would be started after 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, that two RSHXs

would be isolated after 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, and that the third RSHX would

be isolated after 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

However, this calculation was

insufficient as a justification for continued operation for the

following reasons:

. ('

(1)

3

,.

o"

e

The upper intake canal inventory loss by siphoning back

through the 96 inch CW inlet lines was not. considered.

These lines are provided with non-safety related VBs which

must function to break the siphons. If both VBs on any of.

the eight CW inlet lines do not function, canal inventory

will decrease until the siphons are automatically broken by

exposing the CW piping at a canal level of approximately 19

feet.

(2)

Loss of inventory through the BC and CC HXs was not

considered.

These nonessential loads are also isolated by

the non-safety low-level trip circuit.

Flow through these

components during the 30 minute delay for operator action

needed to be included .

(3)

The accuracy of the level instruments measuring the initial

upper intake can a 1 1 eve 1 was

not included.

Because

combined errors constitute over 1 foot of canal level, an

observed level of nearly 28*feet is needed to assure an

actual initial level of 26.5 feet. * This is further

discussed in paragraph 4.A.l.e.

(4)

The assumed design rated flow (15,000 gpm) for the running

ESW pump has not been demonstrated.

The current periodic

test of the ESW pumps is desi-gned to verify approximately

12,000 gpm.

River level (i.e., low level) and pipe fouling

may further reduce fl ow.

This is further discussed in

paragraph 4.A.l.f.

(5)

Design pipe fouling factors were not representative of

actual system conditions. Substantial fouling was observed

in the SW system.

This is further discussed in paragraph

4.A.1.g.

In a postulated LOCA with a coincident LOOP and an initial upper

intake canal level at 27 feet (as measured by installed

instrumentation), upper intake canal level could decrease below

the minimum canal level (16 feet) necessary to achieve required

minimum SW flow (6000 gpm) to the RSHXs.

Failure to include required design basis information in Design

Calculation ME-180 i.s contrary to the requirements of 10 CFR 50

Appendix B Criterion III and the licensee 1 s commitment to

Regulatory Guide 1.64 and ANSI N45.2.ll.

This is collectively

combined with additional design basis inadequacies and is

identified as apparent violation 280,281/88-32-01.a .

4

(\\

0

e

b.

Design Calculation ME-179, SW Loss of Inventory Design Basis,

Revision 1, dated September 9, 1988, Operation at 18 Foot Intake

Canal Level

Calculation ME-179 was prepared to develop an inventory profile

as a design basis for the SW upper intake canal once the canal

low-level instrumentation and trip circuitry are modified to

meet

safety grade

and single failure requirements.

The

calculation concluded that, with an 18 foot initial upper intake

canal

level, post-accident canal level remained above the

minimum level (16 feet) needed for acceptable SW flow to the

RSHXs.

Calculation ME-179 assumed that all nonessential cooling loads

would be isolated 1 minute after the start of the accident, that

1 ESW pump would be started after 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, that 2 RSHXs would be

isolated after 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />; and that the third RSHXs would be

isolated after 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

However, this calculation failed to

demonstrate that the 18 foot level provided needed inventory for

the following reasons:

(1)

The accuracy of the level instruments measuring the initial

upper intake canal level was not included.

These combined

errors constitute over one foot of canal level.

This is

further discussed in paragraph 4.A.l.e.

(2)

The assumed design rated flow (15,000 gpm) for the running

ESW pump has not been demonstrated.

The periodic test of

the ESW pumps is designed to verify approximately 12,000

gpm.

River level (i.e., low level) and pipe fouling may

further degrade flow.

This is further discussed in

paragraph 4.A.l.f.

(3)

Design pipe fouling factors were not representative of

actual system conditions. Substantial fouling was observed

in the SW system. This is further discussed in paragraph

4.A.l.g.

In a postulated LOCA with a coincident LOOP, upper intake canal

level at 18 feet (as measured by the installed instrumentation)

could decrease below the minimum level (16 feet) necessary to

achieve required minimum SW flow (6000 gpm) to the RSHXs.

The failure to include required design basis information in

Design Calculation ME-179 is contrary to the requirements of 10

CFR 50 Appendix B Criterion III and the licensee's commitment to

Regulatory Guide 1.64 and ANSI N45.2.11.

This is collectively

combined with additional design basis inadequacies and is

identified as apparent violation 280,281/88-32-01.b.

'.

5

(I *

e

c.

Design*calculation ME-166, Intake Canal Inventory, Revision 0,

dated October 10, 1988, Operation at 23 Foot Intake Canal Level

Calculation ME-166 was prepared in _October 1988 to supplement

( and subsequently supersede) ca lcul ati ons ME-179 and ME-180.

Calculation ME-166 evaluates a number of potential* single

. failure events and operator reaction times in order to establish

the design basis inventory requirements for the intake caQal.

Th~ calculation concluded that with a 22 foot intake canal level

and the most limiting single failure, canal level remained above

the minimum level (revised by this calculation to 17 feet)

needed to assure acceptable SW flow to the RSHXs.

(Note:

The

Licensee included an additional 1 foot margin and established

the minimum intake canal level at 23 feet).

Calculation ME-166 made several of the same assumptions made in

ME-179 except that ESW pump~ did not start until 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> into

the accident (with flow at the IWP alert level of 14,100 gpm

each), that the discharge channel elevation (river level) was

-1.3 feet, and that a ~assive vacuum break.er will be installed

to preverit siphoning through the

CW inlet lines.* After*

reviewing this calculation, the inspectors determined that this

calculatiori would adequately document establishing 23 feet as a

minimum TS level, provided the following discrepancies were

resolved:

(1)

The assumption that BCHX flow would be design flow (12,000

gpm) at a canal

level of 18 feet appeared to be

nonconservative.

The flow figure used (12,000 gpm) was

taken from the original design basis and was not consistent

with more conservative methods used to calculate flows in

previous (ME-179 and ME-180) calculations.

(2)

The assumption that CCWHX flow would be design flow (9,000

gpm) at a can a 1 1 evel of 18

feet appeared to be

nonconservative.

The flow figure used (9,000 gpm) was

taken from the original design basis and was not consistent

with m6re conservative methods used to calculate flows in

previous (ME-179 .and ME-180) calculations.

(3) The design input that- CW flow would be 840,000 gpm per

condenser was taken from a 1967 preconstruction Stone &

Webster calculation which did not sufficiently document its

basis.

It was not based on as-built information on the

original condenser or on their replacements.

The validity

of this flow rate needed to be confirmed.

On November 11, 1988, the l1censee issued Revision 1 to ME-166.

The revision indicated that assumptions on BCHX and CCWHX flow

were nonconservative but that CW flow was so conservative that

e

6

the end result of the revision, m1n1mum canal level, was reduced

from 22 feet (Revision. 0) to 21.25 feet {Revision 1).

Calculation ME-166 was a state-of~the-art calc~lation, an.

improvement over prior comparable calculations,. and possibly the

first thoroughly documented design basis for canal level in the

life of the* plant.

In addition, since ME-166 was part of a

Design Control Package (DCP), it will be

subject to a design

verification which had not* been conducted at the time of

0the

NRC

1 s inspection. Nevertheless, Calculation ME-166 demonstrated

. that the design contro 1 process needs to be imp roved even

fufther with regard to confirmation of design input and design

assumptions.

The failure to use conservative flows for the BCHX

and CCWHX and using an unconfirmed flow for the CW system is

collectively identified with additional examples of failure to

include iequired design basis information ~nd is identified as

apparent violation 280,281/88-32-01.c.

d.

Calculation ME-187, Pressure Drop Due to Marine Growth in RSHX

Inlet SW Piping Upstream of Valves SW-MOV-203, Revision 0, Dated

Septemb~r 9, 1988, SW System Fouling Fattors

Calculation ME-187 was performed to determine fouling factors to

be used in determining SW flow to RSHXs based upon marine growth

and

fouling. observed during * SW

valve maintenance. *. The

calculation used

methodology

and

information

from

Crane

Technical Paper 410.

One step fo. the methodology requires

determining the factor

11e/0 11 which is the ratio of *fouling level

(

11 e

11 ) divided by pipe diameter (

110

11 ). The calculation; however,

u~ed pipe diameter in inches rather than feet.

Pipe diameter

11 0

11 , as used in Crane T.P, 410, is defined as diameter in feet .

. This error might have introduced a large inaccuracy in the

calculated fouling factor.

The

11e/D

11 factors were subsequently

combined in another ratio which tended to minimize the

inaccuracy introduced in the calculation.

The failure to use appropriate design input is collectively

combined with additional examples and constitutes apparent

violation 280,281/88-32-01.d.

On November 11, 1988, the licensee issued Revision 1 tci ME-187

which. confirmed the. fact that the change to the ca lcul at ion

output was minimal because ratios tended to cancel the errors.

e.

Intake Canal Level Instrument Calibration

The upper intake canal level transmitter performs an essential*

safety function in that it is used to isolate non-safety loads

for preserving the minimum intake cana 1 water inventory for

essential SW use.

These instruments were not designated as

f.

e

7

safety related in the original design and therefore, the

instrument accuracy was not determined.

Additionally, their

calibration was not controlled to assure an adequate set point

to achieve the required TS limit.

The current Rosemount 1152 upper intake canal level instruments

are calibrated for a canal level trip point of 19 feet.

Calculation EE-0041,

Surry Intake Canal

Level Transmitter

Accuracy, Revision 0, dated September 16, 1988, indicatea a

potential error of plus or minus 11.835 inches. There was also

the potential for an additional 0.91 inches. inaccuracy due to

density changes (salinity and temperature) in the canal water,

for a total potential inaccuracy of 12.745 inches.

To assure a

low-level trip at 18 feet, the transmitter had to be calibrated

to a minimum of 19 feet, 0.745 inches.

The calibration procedure for these instruments sets the trip

point at an intake canal level of 19 feet.

In the worst case

(all errors maximized and in the low direction), the trip occurs

less than 1 inch below the 18 foot level. The one foot margin

of the calibration procedure, however, appears to* have been

added by the procedure writer as some general instrument error

margin and is not the result of a controlled set point

calculation or calibration program.

In the this case there was

margin

in the calibration which nearly accommodated all

potential errors.

Instrument error misapplication in design

basis calculations is discussed 'in paragraphs 4.A.1.a. and

4.A. l.b.

Other examples of non-safety equipment which, in the original

design, were relied upon to perform functions important to

safety include ESW diesel start batteries, discharge tunnel VP,

and anti-siphon VB on the CW pump discharge lines to the upper

intake canal.

The accuracy of these instruments is also not

being calculated or controlled. Except for the ESW diesel start

batteries, this other instrumentation is non-safety grade. The

diesel start batteries are further discussed in paragraph

4;A.2.d.

Demonstration of ESW Pump Rated Flow

ESW pumps are rated by the manufacturer for 15,000 gpm at a 45

foot total developed head.

The accident analyses (i.e., canal

profile calculations ME-179 and ME-180) assume one of the three

pumps operates at rated flow following a postulated LOCA, one

pump is inoperative for maintenance, and one pump single fails.

However, the ability of a pump to de 1 i ver 15,000 gpm under

accident conditions has not been .demonstrated.

The following

problems were identified:

e

e

8

(1)

The quarterly PT relies on visual obs~rvation of the ~ater

plume formed at the exit of the discharge piping above the

water in the upper intake canal relative to a pre.set

benchmark.

There

is ~o

installed flow

4ndication

instrumentation. The setting of the benchmark was based on

a calculation which was prepared to verify, a minimum flow

of approximately 12,000 gpm.

Successful completion of the

test will, at best, verify approximateJy 12,000 gpm.

( 2)

The operator has no i ndi cation that an ESW pump diesel

drive clutch is disengaged, other than an over speed trip

of the diesel.

In this case, should the operator first

attempt to start the ESW pumps near the e~d of on~ hour (as

re qui red by design cal cul at ions ME-179 and ME-180), there

may not be enough time to dispatch an operator to the ESW

pump house, resolve.the problem, and start a pump prior to

the end of the hour.

In calculations ME-179, ME-180 and ME-166, minimum canal upper

intake water level tomes within inches of the minimum required

levet (16 feet in the case of ME-179 and ME-180; 17 feet in the

case of ME-166) just before. the third RSHX is i so 1 ated at

approximately 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> after the start of a postulated LOCA.

If

the running ESW pump does not achieve its rated flow, canal

level will drop below min1mum. * (NOTE:

Rated.ESW flow is 15,000

gpm in all cases; however, calcula.tion ME-166 considers ESW flow

to be the IWP alert l eve 1 qf 14,100 gpm rather than the

manufacturer rating of 15,000 gpm.)

The imp~ct of canal level

decreasing below minimum is that the SW flow to the RSHXs could

be decreased below the 6000 gpm used as a design input to the.

containment pressure -and temperature analysis, which could

affect the environmental qualification of equipment inside

containment.

As a result of the ESW pump capacity concern described above,

the licens~e tentatively initiated a program to have each pump

(one at a time) refurbished by the pump manufacturer. Once all

three pumps have been refurbished and reinstalled, the licensee

has committed to perform a 48-hour performance test, both to

demonstrate flow capability and also to resolve a number of

other outstanding questions relative to ESW pumps such as diesel

heat production and lube oil consumption. The test will be run

with temporary flow indication but permanent flow instruments

will ultimately be installed.

The refurbishment program, the

48-hour test, and subsequent periodic testing should resolve any

concerns as to

ESW flow capability.

ESW

pump capacity

misapplication in design basis calculations is. discussed in

paragraphs 4.A.l.a. and 4.A.1.b.

g.

HX Fouling

'*

. (*

9

(1)

Removal of 2SW-203C Valve

(*

o'"

On September 15, 1988, a maintenance crew removed t~e SW

2b3C and D valves.

The 203 and 204 valves *isolate the

RSHXs from SW.

One side of the 203 valves is exposed to SW

at all times.

When the valves were removed, the discs were

covered with silt and organic matter. Silt had accumulated

in approximately the lower seven inches of the valves.

Oysters, clams, barnacles, and seaweed covered the cfisc.

Clams were present near the disc seating surfaces,.

Clams

were up to one and one-half inches in size and still fixed

to the disc and body.

Oysters were up to two and one-ha 1 f

inches in size. Barnacles covered the disc surface and the

valve body .

Silt is present due to low flow in the vicinity of valve.

Flow in the CW header (only several feet from the SW line)

would provide oxygen and nutrients to the marine life, and

silting would result due to the lower velocities present in

the lines to the closed valves.

The silt and debris

accumulated in front of the 203 va 1 ves would be flushed

into the RSHXs when flow through the line is e,stablished .

(2). Examination of the CW Lines and Condenser Water Boxes

Because they share a common water supply, the condition of

the CW components would be" representative of SW water

components.

The access manways to the CW tunnel were open

during the first week of this inspection.

Presence of

seaweed, barnacles, oysters and clams were noted in the

manway.

Interviews with the workmen involved in cleaning

the CW tunne 1 indicated the seaweed was from one half to

one and one-ha 1 f inches thick throughout the tunne 1.

Observation of the manway confirmed the solid blanket of

seaweed present on the surface.

The condenser inlet isolation valves were removed the

second week of the inspection which allowed viewing the

condenser water box.

The tube sheet showed seaweed

covering virtually all the tube sheet area.

Additionally,

about 50 percent of the condenser tubes appear to be

obstructed by the seaweed inside the tubes.

( 3)

SW Programs

The James River provides brackish river water for Surry.

The water contains forms of life common to salt water and

some forms common in fresh water.

Various species of fish;

crabs, eels, barnacles, clams, and oysters were observed

during the inspection.

Sea grasses were also present in

quantity.

In addition, the water is.silty.

The upper

-

10

(1 ..

intake can a 1 has* most of the same aquatic 1 i fe present in

the river.

Although most adult animal life cannot easily

pass through the trave 1 i ng screens, *the 1 arvae in many

cases can.

Shel 1 fish 1 arvae and immature -grasses are

microscopic and pass easily through the screens.

The

fouling mechanisms found in the CW system confirm this.

Large masses of * sea grasses were present.

Barnacles

covered exposed va 1 ve surfaces in the SW piping.

Oysters

and clams were present in quantity 1n sizes many tfmes

larger than could have passed*through the screens. Silting

was present in the stagnant areas of the SW pipe.

With

water flow, all the nutrients required for ,growth. are

present for the spread of the organisms.

Surry has a hi story that indicates prob 1 ems caused by

fouling and salt water enhanced corrosion.

The condenser

CW

boxes are cleaned regularly to insure good heat

transfer.

Problems have occurred with CCW and the control

room HVAC chi 11 ers.

Currently, Surry does not have a

testing program to monitor the heat transfer capability of

the safety-re 1 ated HXs.

Mon i tori rig for fouling is not

performed

on

a

regular. basis.

Minimum

operating

requirements for CCW and

RHR

heat removal

were

not

available at the time of the inspection.

Confirmation

could not be obtained that the heat removal listed in the

UFSAR for the HXs was actualJy available.

Preoperational

test data baselining HX performance could not be located.

There is a possibility it was not performed.

The CW system and condensers receive maintenance attention

  • due to their impact on plant efficiencies.

Components

important to safety_ and operating in the same environment

are not currently monitored for design perfbrmance.

In view of substantial marine growth, biological fouling,

silt~* and other mechanisms for HX degradation observed in

both

CW and SW condensers, coolers, and piping, the

inspectors and the system engineer took measurements of CCW

and SW parameters that would enable an estimate of SW flow

to be obtained.

On September 9, 1988, SW flow to the CCW

HXs was estimated by a shell side to tube side heat

balance.

Inlet and outlet temperatures on both shell ~ide

and tube side were measured using a single hand-held

pyrometer.

Using control room flow indication for CCW flow

~hell side flows were estimated.

The tube sid~ (SW flow)

was determined by performing a .heat bal.ance setting the

shell side heat transferred equal to the tube side heat

transferred.

e

11

Multiple heat balances were performed with the results

ranging from 9,000 gpm to 13,000 gpm total SW flow to the

. CCW HXs.

At the time the heat balances were performed, upper intake

canal level was at 25 feet, as measured by contra l room

instrumentation.

At this level, theoretical clean pipe

flow was calculated (Crane Technical

Paper

No.

410

analysis) to be approximately 40,000 gpm for all fouf HXs

with no VP in the discharge tunnel.

The data indicated

that the flow was only one-fourth of the expected value.

While the flow balance methodology is sound, gathering of

the data is imprecise and the results must be considered

approximate.

In

addition, it was

reported by site

personnel that the outlet valves of two of the four HXs

were throttled at the time the data was taken (one valve

one-half open and one valve one-third open).

Neither the

errors in the data taken nor the reported throttling would

account for the estimated reduction in flow.

During the third week of the inspection, the inspectors

examined a CCW HX that had been taken out of service. The

downstream water box showed heavy silting and a distinctive

high water mark was present which indicated that the upper

approximately eighteen inches of the tubes did not have

water flow, but were airbound.

Examination of the inlet

water box identified that the tube sheet was fully covered

by seaweed.

Tube blockage by mussels and clam shells was

a 1 so evident. Severa 1 fish and crabs were present in the

water box.

Barnacle growth was evident on the hatch cover.

Due to the heavy growth of seaweed covering the tube sheet,

a .determination of the presence of barnacles on the tube

sheet could not be made.

Interviews with plant personnel

indicated that condenser water boxes are cleaned weekly

during some parts of the year.

CCW HXs are cleaned less

frequently.

The CCW HX fouling appeared heavy enough to

preclude full design flow and roughly confirm the flow

numbers arrived at using the heat balance.

In view of the reduction in flow and the observed CCW HX

and condenser water box fouling,

the

heat exchange

capability of other safety-related coolers in the SW system

which were not specifically reviewed is questionable.

These coolers are significant because they support proper

contra l room HVAC system operation and high-head safety

injection pump operation.

The RSHXs are cooled by SW.

They are also susceptible to

biological fouling and flow degradation.

By design, these

HXs are required to be kept dry under normal conditions.

e

However, RSHXs have been discovered partially filled with

  • ~ater, (see paragraph 4.8.8) in spite of procedures to keep

them dry (apparently due to leaking valves, valve testing,

etc.).

Unless an effective program is established to

maintain

RSHXs

dry, fouling and degradation of this

equipment will occur.

For safety-related HXs, the design basis heat transfer' rate

is established by the heat transfer rate used in the

accident analyses.

If the heat transfer capability is

degraded (e.g. fouling of heat transfer areas, tube

plugging, etc.) below the design basis rate of the

analyses, the HX is essentially inoperative with respect to

its safety function.

In the case of the HXs cited above,

the safety functions of concern are:

HEAT EXCHANGER

RS

Chiller Condenser

Charging Pump SW

ccw

SAFETY FUNCTION

Post-LOCA containment heat

removal (including long term core

decay heat removal).

The analysis

of concern is the post-accident

containment

pressure

and

temp.era tu re profi 1 e.

Control room cooling.* Control

room electronic equipment is not

qua 1 ifi ed* to operate in a harsh

environment

because of control

.room cooling.

'

Charging pump SW cools the

lubricating oil coolers.

These

coolers are needed post-accident

for the charging pump high head

injection mode ..

The CCW HXs are not safety related

because Surry is licensed to

hot-standby as its safe shutdown

condition.

However,

once

one

p 1 ant is coo 1 ed down and on the

RHR

system,

continuous

CCW is

required as

the

RHR

cooling

medium.

Hence, in a post-accident

scenario, if the unaffected unit*

is on

RHR,

CCW fl ow must be

continued.

e

13

The licensee is currently opening and cleaning the service

water side of the safety related HXs at Surry.

In

addition, the licensee is in the process of establishing a

monitoring program, with specific acceptance *criteria, in

order to open and clean HXs on a continuing basis such that

minimum flow will be assured (or in the case of the RSHXs,

to assure they will remain dry). This may resolve concerns

relative to HX performance.

HX fouling misapplication in

design basis calculations is discussed in paragraphs

4.A.l.a. and 4.A.l.b.

h.

Environmental Qualification of Equipment

Due to the inaccuracies of the design calculation noted in

paragraphs 4.A.1.a and 4.A.l.b. of this report,the SW flow to the

RSHXs has the potential to drop below the minimum required

(6000

gpm)

by the post-accident containment pressure and

temperature analysis.

The results of the analysis can not be

assured because of the change to a design input (RSHX capacity).

Since the environmental

qualification of safety related

electrical equipment and instrumentation inside containment

depends upon the containment pressure and temperature profile of

this analysis, qualification of some of this equipment may be

invalidated.

However, the licensee has demonstrated that at a

23-foot canal level, minimum SW flow to the RSHX will be

provided with the most limiting' single failure of safety

equipment and without reliance on non safety related equipment

(see paragraph 4.A.1.c).

Since plant TS will be revised to

require a minimum level of 23 feet for operations, the matter of

environmental equipment qualification with respect to this issue

is satisfactorily resolved.

Within this area, no violations or deviations were identified.

i.

Design Modification Process

Two weeks prior to the start of the SSFI the licensee conducted

a SW system design review and identified that the upper intake

canal low-level trip instrumentation was not safety grade and

could not withstand a single failure.

In view of this

discovery, the licensee (through standing orders and proposed

UFSAR changes) instituted the following changes:

One ESW pump was required to be started within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of

the start of a OBA, and

If RHR was being used by the non-affected unit, all three

ESW pumps were required to be operable (one pump for the

e

14

non-affected unit, one for the affected unit, and. one

single failed).

These changes may have to be modified based on* additional

calculations.

The inspector reviewed

EWR 88-008 which replaced the ESW

clutch/coupling adaptor assembly that connects the diesel output

shaft to the ESW pump with a shop fabricated assembly ana EWR 87-251 which modified eight primary containment penetration

collars in the SW system.

The inspectors had concerns on both

of these EWRs related to the adequacy of 10 CFR 50.59 reviews.

These concerns were resolved during discussions with the

licensee.

The 1 i censee' s procedure SUADM-LR-12, Safety Ana lysi s/10 CFR

50.59/10 CFR 72.35 Reviews, Dated February 26, 1988, has wording

that implies that changes to the facility that do not change PCT

by more than 20 degrees Fahrenheit do not require that a safety

evaluation be performed.

This procedure was in response to an

NRC inspector's review of the original accident analysis for the

OBA. In this method6logy, the licensee improperly selected 32.5

degrees Fahrenheit as opposed to the actual minimum inlet water

temperature

of

25

degrees

Fahrenheit

as

the

starting

temperature.

The licensee stated that this neither required a

safety evaluation nor a 10 CFR 50.59 determination.

This was

based upon the use of the 20 degree Fahrenheit margin used in 10

CFR 50 Appendix K.

This is a misapplication of the 10 CFR 50

Appendix K criterion.

Appendix K cannot be extended to allow

basic design calculation assumption inaccuracies or physical

changes to the facility that appear not to change PCT by more

than 20 degrees Fahrenheit without a documented basis for the

change.

Discussions with licensee management indicated that the

example identified by the inspector was not the intent of

SUADM-LR-12 and that it would be changed to prevent recurrence

of the condition.

No additional examples of this practice were

noted.

Therefore, until the 1 i censee changes SUADM-LR-12 and

evaluates the effects of the changes in assumptions on the OBA,

this is identified as .inspector followup item 280,281/88-32-14.

An inspection performed July 5-8, 1988, questioned the adequacy

of the 10 CFR 50.59 review performed prior to replacing the old

RSHXs with new ones.

URI 88-27-01, Potential Inadequate 10 CFR

50.59 Review for RSHX Replacement, was written to track the

concern until adequate information was available to resolve the

issue.

The new HXs design allowed greater flow through the HXs

than the old, for equal water head.

The new exchangers effect

on canal inventory had not been considered.

An adequate review

of this issue during the eva 1 uat ion phase of the exchanger

replacement

could

have

lead to self identification of

inconsistencies in the UFSAR accident analysis and design basis

j.

(*

k.

15

for the canal.

.Based on problems previously identified with

calculations ME-179, ME-180, and ME-166, this URI is considered

closed.

Preparation of Design Control Packages

General procedure STD-GN-0001, Instructions for DCP Preparation,

Revision 8, dated September 1, 1987, Section A.1.1.1 states that

preparation of a Design Control Package is mandatory when' the

design basis of existing equipment is changed or when

new

equipment is installed. Since calculation ME-180 (see paragraph

4.A.1.a) established the intake canal level at 27 feet, it

effectively changed the design basis of the intake canal. *

However, a design change package was not prepared.

Procedure NODS-ENG-07, Design Control Process, Revision 1, dated

5/5/88, Section 5.4 requires design verification for design

change packages.

However,. since a design control package was

not prepared, calculation ME-180 was not design verified.

A

design verification of this calculation may have revealed the

deficiencies in the assumptions and input to this calculation.

This is considered to be part of the overall design control

problem;

consequently, a. violation for failure to follow

procedure NODS-ENG-07 is not warranted.

Chiller Condenser Pump NPSH

In the past two years, 11 LERs have been written related to the

Control Room HVAC chiller condensers. This is further discussed

in paragraph 4.B.7.

While many of the LERs are related to

condenser fouling or tube plugging, others are related to pump

or condenser

switching problems

and therefore could be

indicative of pump cavitation.

However, the origi.nal design

calculation for NPSH available to the presently installed pumps

could not be located. Therefore, no conclusion can be drawn as

to the sufficiency of the NPSH.

Design Calculation 14937.53-M-l, establishes 12 feet (or less)

as the NPSH required for the new chiller condenser pumps.

This

calculation uses 18 feet as minimum upper intake canal level

rather than. 16 feet.

Sixteen feet is minimum level under

accident conditions to assure sufficient RSHX

flow

(see

paragraphs 4.A.l.a and 4.A.l.b).

On September 27, 1988, chiller condenser pump NPSH calculation

14937.53-M-l was revised to account for a 16-foot minimum canal

level, vice 18 feet.

In addition, a review of the NPSH was

performed for the existing pumps and it was determined that

sufficient NPSH was available.

16

"

o'

e

Within this area, no violations or deviations we~e identified.

1.

Protection Against Natural Phenomena

Section 2.3 of the UFSAR defines the maximum water levels for

the James River as the plant's design basis. These levels range

as high as 24 feet above MSL.

At higher river levels, the

static head of water available for gravity flow through th~ RS

.and CCW HXs decreases.

The UFSAR assumes a reduction of the

upper intake can a 1 1 eve 1 to 26 *feet due tc;:> wind act ion during

hurricane

conditions.

At

a

24-foot

river

level,

the

differential pressure head is 2 feet of water. A static head of

2 feet is not s~fficie~t to deliver rated flow to SW HXs since

the

RSHXs

require an 8-foot <lifferential. Decreasing the

differential will seriously degrade heat transfer capability.

10 CFR 50 Appendix A Criterion 2 requires systems important

to safety be designed to with stand the effects of natura 1

. phenomena, including hurricanes and floods without loss of

capability to perform their design function.

It is not clear

how the Surry design meets GDC-2 with respect to the flooding _

assumed in the UFSAR.

This matter has been forwarded to NRR for

resolution and is identified as unresolved item 280,281/88-32-11.

m.

Maintenance arid Housekeeping Items

n.

During the course of the SSFI, traveling screens were observed

operating with sections of screens removed.

A 1 so, wh i 1 e the

inspection was in progress, the licensee identified foreign

objects inside system piping, including a wrench and a sump

pump.

The sump pump was identified by DR S2-88-456.

Loose foreign objects in the CW system may lodge in HX tube

sheet areas, in valves, or other fittings in the piping system,

possibly resulting in reduced flow and reduced heat exchange

capability for components important to safety such as the RSHXs.

Until the traveling screens are fully repaired and the licensee

identified objects in. the system are removed, this is combined

with additional examples and is identified as inspector followup

item 280,281/88-32-lS~a.

RSHX Replacement

The inspectors examined the new RSHXs prior to their transfer to

the protected area.

There were signs of rusting around the

bolting material on the HXs.

In addition, some weld fitup

blocks had not been removed at the factory, but were still tack

welded in place on some vessels. The blocks had been ground off

e

17

ori other vessels, but signs of gouging by the grinder were

present.

One of the. vessels in the yard was noted to have the

covers on the nozzles not sealed.

The covers were split .and

warped and the tape no longer provided a seal.

The

Joseph

Oat

Corporation Installation,

Operation and

Maintenance Manual for Recirculation Coolers, Revision 2A,

states .the followin~:

Units stored outdoors must have a desiccant maintenance

program.

Before being shipped, the nuts and bolts will. be

  • coated with Tectyl 502C, a rust preventive. The integrity

of the coating, a waxy layer, should be checked every three

months and the nuts and bolts shall be recoated if

necessary.

The old coating need not be removed prior to

recoating unless rusting is evident, in which case the old

coating shall be removed with mineral spirits, kerosene or

other petroleum solvent and the rust removed with a wire

brush.

The coating need not be removed at the tinie of

installation.

The rusting was present, both on the bolts. and the flanges.

The

pre_serice of rust and the covers off, def eating any desiccant

program, indicate poor maintenance of the vessels while in

storage.

The failure to store this equipment prior to in.stallatio11 in

accordance with vendor recommendations and the licensees'

commitment to Generic Letter 83-28, which requires the licensee

to establish and implement programs for assuring that vendor

recommendations are included in site procedures, is identified

with additional examples as apparent deviation 280,281/88-32-09.d.

o.

System Walkdown

A walkdown was performed of selected accessible Unit 1 and

Unit 2 SW piping.

Equipment walked down is based on the follow-

ing flow drawings:

11448-FM-071A, Revision 24

11448-FM-0718, Revision 21, Sheet 1. of 2

11448-FM-071D, Revision 9, Sheet 1 of 1

11548-FM-71A, Revision 23, Sheet 1

11548-FM-718, Revision 22, Sheet 2

11448-FM-130A, Revision 8, Sheet 2 of 3

The following discrepancies were noted:

Drawing 11548-FM-07.lA (A-3 to C-3) does not reflect the

proper order of equipment and taps between the 205 valves

and the discharge.

As-built configuration is the

205

e

18

valve, bellows, RTD, FT, Radiation Monitor taps, and vent.

The drawing indicates the 205 valve, Bellows, one Radiation

monitor tap, vent, second Radiation monitor tap, FT,. and

RTD.

Drawing

11448-FM-071B does not reflect the as-built

configuration of PI23, PS2, PS1 and their connected piping

and valves (C-3).

PS1 is not off the same header as both

PI23 and PS2, but is located on a separate

11P.

Al°so,

1-SW-195 is shown branching off from the wrong side of the

111'

11 to 1SW119 (F-4).

FM-071B has the order of the tie in

from the Intermediate Seal Coolers Flow Indications to the

drain line in the improper order. The actual flow order is

101A, lOOA, lOOB, 101B, 101C, then to the drain line.

Drawing

11448-FM-O?lD

does

not

show

the

proper

configuration for the VS-PlA, B, and C leakoff seal and PI

connections.

Four valves, an eductor, and the associated

piping that canst i tute the 1 eak-off arrangement are not

shown.

In addition, the Pis on all three pumps will give

pressure readings that do not reflect pressure in the

pump's piping. The leakoff eductor flow will cause a lower

pressure reading due to the flow and associated pressure

drop in the instrument tubing. If the PI is to be used to

obtain accurate pressures, the flow must be stopped prior

to reading the gauge.

The pr.int is also missing the valve

numbers for the isolation valves for 1-SW-PIC-lOOA, B, and

C (E-7, E-5, G-3).

The print does not show.the bypass

valve and drain for 1-SW-DPI-108A (C-6).

Drawing 11548-FM-71B has some discrepancies in how it

depicts the Charging Pump SW pump's (2-SW-P-lOA) discharge

pressure instrumentation configuration.

Valve 2-SW-459

tees off prior to the common instrument header, not off the

header ( F-9).

The arrangement of the pump lOB pressure

instrumentation does not represent actual configuration.

The PI24 tees off the line followed by a cross servicing

SW3 and SW4.

Valve 2-SW-450 is capped at the end of the

line after the cross (F-8).

Drawing 11448-FM-071A does not sho~ the sight glass to the

v-ent trap and shaft bearing oil cooler for the ESW pumps.

In addition to the drawing discrepancies, the following items

were noted at the time of the walkdown.

Some items were noticed

to have been repaired before the end of the inspection.

Walkdown Items:

1-SW-255 - pipe cap is missing

p.

19

-2-SW-308 - pipe cap is missing

2-SW-349 - blind flange is missing

e

1-SW-PCV-lOOC - tag missing, excessive packing leak

l-SW-PI-116C - tag missing .

l-SW-PCV-1018 - heavily rusted, excessive packing leak

l-SW-PCV-1008 - heavily rusted, excessive packing leak

1-SW-320 - pipe not capped, Chicago fitting installed

l-SW-316 - tag missing

1-VS-P-lA - in spite of leakoff arrangement, leakoff fs

still present

1-VS-P-lA - there appears to be an orifice plate located

prior to PlA

1-VS-P-lA strainers - no numbers bn print~ not tagged

l-SW-DPI-28 - not tagged

1-0S-S-2A - not tagged or marked

1~os-S-2B - not tagged or marked

l-SW-108 - not tagged

l-SW-446 - not tagged

1-SW-448 - not tagged

l-SW-430 - not tagged

1-SW-450

pipe cap missing

1-SW-350 - blin~ flange not bolted

1-SW-346 - bolts very rusted

1-SW-301 - packing leak

l-SW-306 - packing leak

l~SW-302 - packing leak

2~SW-455 - tag missing

2-SW-459 - pipe cap missing

1-SW-268 - no tag

l~SW-26~ - handl~ missing

FI-SW-2008 - glass fouled, cannot read, acc~racy

questioned with fouling

FI-SW-201C - glass fouled, accuracy questtoned

FI-SW-200A - glass fouled, accuracy questioned

FI-SW-200C - glass fouled, accuracy questioned

1-SW-FE120B - T-shirt used as leak seal

1-SW-165 - tag missing

Most instruments were noticed to have been calibrated or

replaced within a week prior to the inspection.

Some parts of

the . system were found to be very rusty.

Rust was very

noticeable on control valves with excessive packing leaks.

Until the licensee evaluates these. items and updates drawings to

accurately reflect the as-built configurations, this is combined

with additional examples and is identified as inspector followup

item 280,281/88-32-15.b .

SW Pumphouse Walkdown

-

20

A wal kdown was conducted of the intake structure and its

associated buildings and components.

The structure is located

approximately 1.7 miles from the plant on the James River ..

The ESW pumps are located in a seismic structure behind the

traveling screens.

The pumphouse contains two diesel-driven ESW

pumps and one ESW pump that can be driven by either a diesel or

an electric motor powered from a non-emergency power source.

Each pump I s discharge line is a 24-i nch 1 i ne whose exit* is

located in the upper intake can a 1 at an e 1 evat ion of 33 feet

above MSL.

A go/no-go gauge (benchmark) is used to judge pump

flow and is located at the discharge line 1 s exit. There are no

discharge iso)ation valves or check valves located in the ESW

discharge lines.

The pump suction is located behind the

traveling screens, so the screens act to filter debris from the

river.

The ESW pump-s also have screens at their inlet to

prevent foreign matter from entering the pumps.

There is also a switchgear building which houses the electrical

equipment

to support operation of the CW system, and a VP

building, housing the VP system for the CW pump discharge

piping.

Observations made during the walkdown included:

Several of the CW water VBs ,were tagged to indicate they

were inoperable.

The intake traveling screens had sections missing which

could allow larger debris to reach the CW pumps and ESW

pumps.

Up to an inch of standing water was present in the ESW

pumphouse.

All instrumentation for ESW appeared to be calibrated

within a week of the inspection.

Pressure instrumentation for the ESW pump fl ow to the

diesel coolers was not bolted down, but was supported only

by the instrument tubing.

Diesel engine oil was present below the A and C diesels.

The angle gear cooling water flow sight glass was not shown

on the applicable drawing.

Until the licensee evaluates these items; this is combined with

additional examples and is identified as inspector followup item

280,281/88-32-15.c.

2.

. ('

a.

-

e

21

Electrical Design

The focus of the electrical design review was to verify that the

power sources which support various SW and RS system components

have adequate capacity and capability to supply the power

required for the systems to function as required by their design

bases, important ancillary support systems (such as HVAC) will

perform adequately to support the design bases operation of the

ESW equipment, and electrical control of the condenser isofation

valves was adequate. The inspectors reviewed selected clrawings,

equipment specifications, design calculations for the electrical

design,

specifications for mechanical systems equipment, and

design calculations for the ESW pumphouse HVAC systems.

The

inspectors performed walkdowns of the system to obtain data and

to observe the condition of the equipment .

Minimum Design ESW Pumphouse Ambient Temperature

The calculation for the minimum design ambient temperature

condition in the ESW pumphouse was requested.

No calculation

was provided; however, the licensee stated that the minimum

design ambient temperature was 55 degrees F, based on winter

conditions (10 degrees F outside air) with the ESW pumps

in-service.

On winter conditions with the ESW pumps not

in-service, the licensee stated that the pumphouse was normally

maintained at 70 degrees F.

The licensee advised that the basis

for the* 70 degrees F normal room temperature was the control

setpoint for the unit heaters in the pumphouse.

The licensee did not consider the effect on room temperature due

to a

LOOP

and the resultant impact on

the

ESW diesel

operability.

On

LOOP conditions during winter, the electric

. unit heaters (which were previously operating) will de-energize

due to the loss of power and the room temperature will decrease

from

a starting

temperature

of

about

70

degrees

F.

Additionally, the licensee stated that the pumphouse air intake

and exhaust dampers fa i 1 open on* a* LOOP.

Therefore, any

residual heat available in the pumproom would be rapidly* lost

during adversely cold outside air temperature conditions. Prior

to this inspection, based on the calculated reserve capacity of

water in the upper intake canal, ESW pumps would not be required

to start for up to 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> after a LOCA/LOOP.

Low level in the

canal was used as the criteria to start the ESW pumps.

However,

the actual time after a LOOP or LOCA/LOOP when a canal low level

condition would occur had not been accurately established.

The

room ambient and the equipment temperature 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> into the

LOOP could easily be at the outside air temperature.

During

this inspection, Design Calculation ME-0188, Emergency Service

Water Pumphouse & Diesel Winter Cooldown Rate, Revision 0,

calculated that the room ambient temperature reaches the outside

. '

  • -

e

22

air temperature, which is considered to be 10 degrees F minimum,

approximately 16 minutes after a LOOP.

The inspectors found on reviewing the equipment specification

for the ESW pump diesels, NUS-144, Specification for Screen Wash

and ESW Pumps, dated May 27, 1969, that the diesels were not

specified to operate or start for any minimum ambient tempera-

ture requirement. Also, the diesel battery_ specification data

sheet provided by the engine manufacturer specified the battery

performance at only 77 degrees F.

The diesel starting battery

was sized and supplied by the diesel engine manufacturer.*. As

such, the diesel battery may not be capable of starting the _

diesel for the minimum ambient temperature condition, since the

starting capability was not a specified design requirement.

Also, diesel lubricating oil would be adversely affected by cold

temperature, which causes additional design load on the starter

and the battery, and raises a question* on the adequacy of the

diesel lubrication.

After discussion with the di ese 1 engine manufacturer, the

licensee identified in a Surry Station DR, 1-88-0988, dated

September 29, 1988, that the operabi 1 ity of the ESW Pumps is

indeterminate since-it is questionable that the diesels could

start on design ambient temperatures of 10 degrees F, or for

diesel engine block temperatures lower than 45 degrees" F.

The

inspectors contacted the battery manufacturer and were informed

that the cold crank rating for tne Exide D~8D battery is 860

amperes at O degrees F for 30 seconds.

The licensee was advised

by the diesel manufacturer that the diesel requires 950 or 1250

amperes of cranking power depending if its_ temperature is

greater than or 1 ess than 32 degrees F.

Therefore, the abi 1 i ty

of the battery to provide sufficient cold cranking power has not

been established. In addition, the licensee was advised by the

diesel manufacturer that for diesel engine temperatures be]ow

45 degrees F, diesel starting aids are necessary to ensure

diesel* start-up.

Keep..-warm heaters, for example, would be*

required for the water/engine block and lubricating oil systems.

However, the inspectors noted that any starting aids would need

to be operable for a specified duration during a LOOP condition.

The failure to include appropriate design basis information

regarding the effects of minimum

ESW pump room operating

temperatures on diesel starting, diesel battery operation, and

diesel lubrication oil is contrary to 10 CFR 50 Appendix B,

Criterion III and the licensee

1s commitment to regulatory guide

1.64 and ANSI N45.2.ll.

This example is collectively combined

wfth additional examples and is identified as apparent violation

280,281/88-32-01.e .

b.

23

Maximum Design Ambient Temperature

o*

0

e

Ca 1 cul at ion 513N, Intake Structure Emergency Service Water

Diesels - Ventilation, Revision 0, considers two *ESW diesels

operating, with outside air at 93 degrees F, and determines a

maxi mum ambient temperature of 140 degrees F in the pump house.

However, all three ESW pumps may be operating. Therefore, the

inspectors identified that the maximum room amb1ent temperature

was not established, and more importantly, any adverse effect on

the performance of the diesels was not adequately evaluat~d.

Fbr example, the diesels were specified to operate in a maximum

ambient temperature of 100 degrees F as noted in NUS-144,

Specification for Screen Wash and Emergency Service Water Pumps.

Al though,

the licensee stated that temperatures above . 120

degrees Fare unrealistic, the original design basis calculation

(which con side red two pumps operating) calculated a maximum

temperature of 140 degrees F.

Therefore, inadequate design data

on the maximum ambient tem~erature conditions was used in the

original equip~ent specification for the diesel-driven ESW pumps.

The inspectors questioned the licensee on September 13",1988, to

determine whether any diesel derating is necessary for.pumphouse

arnbi ent temperatures above 100 degrees F.

In a telephone

  • conference with the lic~nsee 1s engineers on September 20,1988,

the in specters expressed an additional concern that a* 140

degrees F (or higher) ambient tem'perature for the diesel could

result in a high temperature trip of the engine (which is an

automatic protective feature).

The high temperature trip could

potentially be common to all three diesels if they were all

operating simultaneously.

The diesel battery may also be

subject to failure in an abnormally high ambient temperature.

The licensee was requested to determine the

11 new

11 maximum

ambient temperature for the pumphouse and evaluate whether any

adverse operational or design conditions result.

The licensee

performed calculation ME-189, Revision O,*to establish the ESW

pumproom summer design indoor temperature.

One motor-driven and

two diesel engine driven pumps were considered to be operating

(worst case lineup from a heat load perspective) with 93 degrees

F outside air available for cooling.

The steady-state room

temperature for this condition was calculated to be approxi-

mately 185 degrees F.

The licensee contacted Detroit Diesel, the manufacturer of the

diesel engines, and was advised that a 1 HP decrease can be

expected for every 10 degrees F increase in temperature above 90

degrees F.

Therefore, a maximum derating of 10 HP due to the

combustion air temperature conditions in th~ pumphouse can be

expected.

The ESW pump maximum BHP requirement was reviewed by

the licensee to ensure that adequate HP was available from the

diesel driver for the maximum combustion air temperature

COflditions.

C *

e

24

The inspectors noted, however, that lead-acid batteries are

normally designed to operate at temperatures less than 120

degrees F.

If the battery is required for the continued

operation of the engine, or for essential features*which may be

required to stop the engine for an orderly shutdown or an

equipment protective function, the battery will need to operate

during the maximum design ambient temperature conditions.

The

adequacy of the diesel battery for a 185 degrees F ambient

~ondition is under review by the licensee.

'

The failure to include appropriate design basis information

regarding the effects of maximum

ESW pump room operating

temperatures on diesel operability and diesel battery operation

is contrary to 10 CFR 50 Appendix B, Criterion III and the

licensee 1 s commitment to regulatory guide 1.64 and

ANSI

N45.2.ll. This example is collectively combined with additional

examples

and

is . identified

as

apparent

violation

280,281/88-32-0l.f.

Adequacy of Class lE 125 Volt DC System Voltage

The inspectors requested design calculations for the s1z1ng of

cables and the voltage study or voltage drop analysis for the

newly installed Class lE 125 Volt DC System.

The licensee

stated that no formal design calc~lations existed on the sizing

of the Class lE 125 Volt DC system cables or on the voltage

drops in the system.

The licensee stated that system cables

were apparently sized based on an AE' s- design standard.

The

bases for the selection criteria for the cables was not fully

established.

The UFSAR, Section 8.2, states that the selection of cable

conductors is based on Power Cable Arnpacities published by the

IPCEA .

The inspectors concluded that the selection of cables

solely on the basis of ampacity considerations (conductor

temperature) will riot assure that adequate voltage is provided

at the equipment terminals.

In addition, as a battery ages and

looses capacity, its voltage performance likewise deteriorates.

Equipment operating outside its design voltage range is subject

to potential failure, especially the voltage sensitive loads on

the system, such as the Class lE UPS.

Inadequate voltage to UPS

equipment can cause maloperation, potentially resulting in UPS

equipment shutdown.

These systems generally include the plant

protection

systems

such

as reactor protection

systems,*

engineered safeguards detection and initiation systems,* and

essential

safety-related

instrumentation

systems

such

as

post-accident monitoring instrumentation systems .

For example, the station Class lE vital inverters or UPS were

specified in NUS-2061, Specification for Uninterruptible Power

d.

e

25

Supplies, Revision 1, dated November 27, 1985, to operate on a

DC input power supply voltage range of 105 volts to 140 volts

DC.

The licensee advised that the design criteria for voltage

drop/cable sizing was to maintain greater than 101 volts DC at

the main 125 volt DC distributi~n cabinets at the end of the

2-hour battery duty cycle. Also, the inspectors noted that the

minimum voltage available at the UPS is further decreased by an

estimated additional 1 percent to 2 percent drop in the feeder

cable from the main distribution cabinet to the UPS. Since" the

minimum voltage criteria for the main distribution cabinets

which feed the UPS equipment does not satisfy the UPS-specified

minimum voltage requirement, the inspectors could not establish

that adequate DC voltage will be available to power the UPS on a

design basis battery discharge, especially when the battery is

at an end-of-life condition.

Since no voltage drop or voltage profile analysis documents the

system design,

design modifications to

the

system were

apparently performed without a formal check to ensure that the

voltage was adequate.

For example, the Unit #2 Class lE station

batteries were being replaced during this inspection.

Similaf

batteries were already installed at Unit #1.

Class lE UPS

equipment was also added to the unit(s) recently.

Any inadequacies in the voltage available to operate equipment

would most likely go undetected in normal plant operation and

system surveillances because equipment is not normally being

challenged to operate at its rated design limits. For example,

the inspectors noted on a plant walkdown that the Class lE

system voltage at the battery is normally at the float charge

level, which is approximately 135 to 136 volts. This voltage is

the

11 normal

11

battery voltage when system surveillances are

performed.

Therefore, the ability of plant equipment to operate

when the minimum battery voltage exists (at the end of a design

discharge condition on the battery) is not confirmed by the

system surveillances:

Until the licensee fully evaluates the lack of voltage drop or

voltage profile analysis, this is identified as unresolved item

280,281/88-32-12.

ESW Pump Diesel Battery Procedures

The inspectors reviewed Weekly and Quarterly PT procedures for

the ESW pump diesel battery.

The acceptance criteria for the

surveillance testing performed on the ESW pump diesel battery*

does not ensure the capabi 1 ity of the battery to start the

diesel.

e

e

26

The

ESW

pump

diesel

battery is Exide type 0~80.

The

is 1.265 at 77 degrees F.

Likewise, at full charge and 77

degrees F, the battery voltage (6 cells) was calculated by the

inspectors to be 12.63 volts based on Exide recommended

procedures to calculate battery cell voltage.

Weekly Periodic Test, PT-23.7D, Emergency Service Water Pumps

Batteries Weekly Check, uses 12.4 volts as the acceptance

criter_ia for. an

individual battery (6 cells).

Two (2)

individual batteries are wired in series to form a baltery

assembly (12 cells total) for each dieseL

The acceptance

criteria for the battery assembly is 24.8 volts ( or twice 12 . .4

volts). The battery voltage acceptance criteria (at 77 degrees

F electrolyte temperature) is indicative* of a battery at

approximately a 75 percent state of charge, as noted in Special

Report No. 9, Station Battery Program Review, dated April 25,

1987.

On reviewing PT-23.7D, the inspectors also identified that there

were no acceptance criteria for electrolyte temperature and that

battery voltage is not compensated for temperature. Electrolyte

temperature is a necessary parameter to monitor to ascertain

overall battery environmental conditions.

An adversely low cell

electrolyte temperature would also be an indirect indication of

unit heater or unit heater control system malfunction.

Also,

battery voltage is not compensated for temperature.

At cell

e 1 ectro lyte temperature conditions 1 ess than 77 degrees F,

inaccurate indications of the adequacy of battery voltage could

exist and the* battery would be considered acceptable.

For

example, on electrolyte temperatures less than 77 degrees F the

battery voltage increases as* the battery specific gravity

increases.

As the battery voltage increases, battery float

charging decreases (since the charger produces a constant output

voltage), and effectively the battery can discharge as battery

capacity is consumed when surveillance testing is performed on

the diesel.

The licensee has indicated in Special Report No. 9, Station

Battery Program Review, that the basis * for the acceptance

criteria for the battery voltage was to ensure that the battery*

would not freeze (and su~tain damage)

on

adverse cold

temperature conditions in the ESW pumphouse.

The inspectors

identified that this basis is incomplete and incorrect in that

it alone will not ensure that the battery is capable of starting

the diesel in a partially discharged condition (75 percent

charged).

The inspectors also identified during the review of .Periodic

Test, PT-23.140, Emergency Diesel Service Water Pumps_ Battery

. ('

. e.

e

27

Replacement, that batteries being tested by this procedure may

also be inadequate for service since the instruction which

ensures adequate voltage also requires only 12.4 volts ,per

battery minimum.

This voltage,

as

previously *noted,

is

indicative of a battery which is only 75 percent charged.

The failure to provide adequate acceptance criteria in PT-23.7D

and

PT-23.14D

relating to acceptable battery voltage is

combined with add it i ona 1 ex amp 1 es of inadequate procedura 1

acceptance

criteria

and

constitutes

apparent

violation

280,281/88-32-03.a,b, and c.

Battery Specific Gravity Surveillance

The inspectors reviewed, PT-23.90, Emergency Diesel Service

Water Pump Batteries Quarterly Test, and i dent i fi ed that the

acceptance criteria for the specific gravity of the battery cell

electrolyte was 1.215.

Based on data in licensee's .Special

Report No. 9 the inspectors estimated that a specific gravity of

1.215 is representative of a battery in an approximate 70

percent state of charge ( or 30 percent discharged), si nee the

ful 1 charge specific gravity of the battery is 1. 265 at 77

degrees F.

The inspectors identified that the procedure did not correct the

specific gravity measurement for temperature.

The licensee has

indicated that pumproom unit heaters are thermostatically

controlled to maintain 70 degrees F.

Therefore, the battery

electrolyte temperature in winter is not maintained at 77

degrees F.

Furthermore, since the batteries are mounted near

the floor on an outside wall and the unit heaters are in the

overhead, the ce 11 e 1 ectro lyte temperature can be much 1 ower

than 70 degrees F due to temperature stratification in the room.

The

licensee indicated that the mini'mum

specific gravity

acceptance criteria without the need to correct for temperature

was the recommendation of the battery manufacturer.

However,

the

inspectors

could

not

independently

confirm

these

recommendations.

On discussion with the licensee 1 s engineer who

established the surveillance requirements, the recommendations

were made without any consideration given to the required

battery capacity to start the ESW diesel.

The failure to provide ftdequate acceptance criteria in PT-23.9D

relating to minimum specific gravity is collectively combined

with additional examples of inadequate procedural acceptance

criteria and constitutes apparent violation 280,281/88-32-03.d.

f.

Batteries Never Tested Without Charger

"

..

e

e

28

The inspectors reviewed survei 11 ance procedures for the ESW

pumps, PT-25.3A, B, and C, and identified that the batteries are

never load tested without the battery charger supplying part of

the starting current for the diesel.

However, the inspectors

calculated that the battery chargers supply less than one (1)

percent of the starting current requirement and that the effect

of the charger is minimal when the dies~l is started.

Regardl e*ss, the battery charger could easily be disconnected

from the station power supply during the ESW pump diesel

surveillance, and would thereby give a better indication of the

batter1 1s performance during the testing.

Until the licensee evaluates testing the batteries without the

  • charger connected, this is identified as inspector followup item

280,281/88-32-16.

g.

Electrical Maintenance Procedure Minimum Specific Gravity

Electrical Maintenance Procedure EMP-C-EPDC-62, dated March 25,

1986, did not contain

adequate instructions for the minimum

specific

gravity

requirement.

Instruction

5.1

of

the

maintenance procedure required that the battery being installed

should have a specific gravity of 1.200. If not, the procedure

instruction required that the battery be placed on a charge to

bring the specific gravity up to minimum 1.200.

The inspectors

i dent ifi ed during discussions with. the battery manufacturer that

the batteries installed by the procedure, Exide D-80, have a

manufacturers rated specific gravity of 1.265 at 77 degrees F.

The inspectors estimated that the minimum specific gravity

requirement of 1.200 in the procedure allowed the batteries to

be commissioned for initial service at an approximate 55 percent

charged condition (or 45 percent discharged condition) at

77 degrees F, based on data provided by the battery manufacturer

to the licensee described in Special Report No. 9.

The acceptance criteria for minimum specific gravity to satisfy

the quarterly battery surveillance test, PT-23.90, is 1.215.

A

specific gravity of L 215 at 77 degrees F is equi va 1 ent to the

battery at an approximate 75 percent charged condition (or 25

percent discharged condition) as noted in Special Report No. 9

described above.

Regardless, the licensee, when advised of the

discrepancy between the EMP and the PT, initiated a Procedure

Change Request to procedure EMP-C-EPDC-62, dated September 26,

1988, which changed the minimum specific gravity from 1.200 to

1. 215.

The

failure to provide

adequate acceptance criteria in

EMC-C-EDPC-62

relating

to

m1n1mum

specific

gravity is

collectively combined with additional examples of inadequate

e

e

29

procedural

acceptance

criteria

and

constitutes

apparent

violation 280,281/88-32-03.e.

The inspectors also noted that Reference 2.2 in Electrical

Maintenance Procedure EMP-C-EPDC-62, which refers to the C&D

Battery manual, needs to be revised to include the Exide Battery

manual

and instructions relevant to the Exide 0-80 battery

covered by the procedure.

The 1 i censee stated that this

procedure would be updated.

h:

Seismic Design Qualification for ESW Pump Equipment

(1)

ESW Pump Diesel Battery Charger and Battery

The inspectors reviewed equipment specification for the ESW

pumps, NUS-144, and identified that specifications required

that the pumping equipment be designed to withstand a

seismic event.

The inspectors identified that this

specification requirement was not clear with regard to the

starting equipment for the E"SW pump diesels.

Therefore,

the

inspectors

requested

the. seismic

qualification

documentation for the ESW pump di ese 1 battery charger and

battery.

The

1 i censee,

after

a

search

for

the

qualification documentation, found that none was available.

The inspectors contacted Exide, the battery manufacturer,

and was advised that Exide had not seismically qualified

the battery.

Exide also stated that they do not plan to

seismically qualify the battery, since the battery, type

0-80, is manufactured and sold as a truck battery.

The inspectors also identified that the licensee considered

the

safety design classification of the battery as

non-Class lE. The inspectors were told that this was due

to the lack of any vendor seismic qualification for the

battery.

Therefore, the licensee's engineers considered

the battery as

11 non-Class lE (but crucial),

11 as noted in

Special Report No. 9.

Equipment is defined to be Class lE

as required by the function performed by the equipment.

As

defined by IEEE Standard 308 and endorsed by RG 1.32,

Criteria for Safety-Related Electric Power Systems for

Nuclear Power Plants, Class lE is the safety classification

of the electric equipment and systems that are essential to

containment and reactor heat remova 1 as we 11 * as other

essential

safety

functions.

The

treatment

of

safety-related equipment, which is essential to ensure the

ultimate heat sink of the station, as non-Class lE is a

significant concern to the inspectors.

e

30

C,

C

e

Furthe~more, the inspectors un~erstand that the ESW diesel

batteries and charger were relocated to_ their present

location, mounted on the wall, by a relatively re~ent

design modification.

Also, the batteries were replaced in

1987 on Work Requests 354517, 354518, and 354519.

These

work requests identified the batteries as Nuclear Safety:

YES, and Class lE: NO.

Again, the failure to identify the

lack of qualification documentation for these components

during* the modification or to recognize the approprhte

design classification during the battery replacement, and

to take appropriate corrective action, ~s a shortcoming of

the design control *process.

During the inspection, the

inspectors were advised by the licensee* that a diesel

battery was

subjected to a seismic test and passed

successfully.

The lack of seismic design and qualification for the

battery charger can result in the potential failure. of the

equipment on seismic events.

On failure of the charger,

the battery could be shorted, causing a discharge or

failure of the battery.

Failure of the battery directly

impacts the operability of the ESW pumps, since the battery

is required for starting the ESW pump diese.l.

For the

conditions stated, the failures postulated could be common

mode to all three ESW pump diesels.

The

inspectors

understa~d that the licensee is evaluating. adding a

qualified isolation device oetween the charger and the

battery, as we 11 as adding an alternator to* the di ese 1

engine.

(2)

ESW Pump Diesel Exhaust Piping

On walkdqwn of the ESW pumphouse on 9-12-88, the inspectors

noted that the

ESW pump diesel(s) exhaust piping was

supported to concrete ceiling structures which appeared to

be the equipment hatches for the room.

The inspectors

requested the* analysis which concluded that the diesel

exhaust is sei smi ca lly i nsta 11 ed.

The exhaust 1 i nes are

positioned directly above and adjacent to the diesel

engines and their failure on a seismic event could damage

diesel engine components such as the combustion air intake

as semb 1 i es.

The 1 i cen see acknowledged. on September 18,

1988, that no existing seismic analysis for the diesel

exhaust lines could be found and that these lines were also

i'nadvertently not included within the scope of the IE

Bulletin 79-14" reanalysis effort.

During the inspection,

the licensee performed a seismic analysis of the exhaust

1 i nes which demonstrated that the piping stresses were

within the stress allowable limits of the ASME B31.1 - 1967

code.

However, on verification of th~ nozzle loads with

e

31

the diesel engine manufacturer, the licensee has indicated

that the nozzle loads were not verified acceptable.

(3)

ESW Pump House Dampers and Actuators

The licensee reviewed procurement documents and*vendor data

for the dampers and actuators to determine the applicable

design basis information. The dampers are required to open

to supply both the cooling and the combustion air for the

ESW pump diesels.

The initial review by the licensee was

not successful in determining the safety status or seismic

design data for the dampers or actuators.

The licensee has initiated a Surry Power Station Deviation

Report No. 1-88-0998, dated September 29, 1988, which addressed

the seismic qualification requirements of the ESW pump diesel

battery, battery charger, and exhaust piping, in addition to

other concerns related to the operability of the ESW pumps.

These items have been identified by the licensee on a deviation

report; Until the licensee evaluates these issues and performs

corrective actions to close DR 1-88-0998, this is identified as

inspector followup item 280,281/88-32-29.

i.

Design Verification Calculation for Class lE Station Battery

Sizing

The inspectors reviewed battery sizing calculations for the

Class lE station batteries, Verification of Lead Storage Battery

Size for DC Vital Bus, Calculation No. 14937.16-E-2, Revision 2,

for the adequacy of the methodology and design criteria, data,

and design assumptions utilized.

The calculation was provided

to the inspectors as the applicable updated analysis for the

battery capacity requirement.

The inspectors compared the load

data considered in the calculation and the one-line diagram for

the Battery lB di stri but ion system, Drawing No. 11448-FE-lG,

Revision 13, with the plant distribution equipment which was

observed during a system walkdown.

The inspectors identified that the drawing for the Class lE

Battery Bus lB, Drawing No. 11448-FE-lG, did not agree with the

battery loads considered in the

11 verification

11 calculation, and

both the drawing and the calculation also disagreed in different

aspects with the actual plant configuration observed.

The

discrepancies observed are as follows:

(1)

Battery Bus 18

The calculation considered the deletion and addition of

various loads from system busses.

Deletion of the Air Side

32

0 .

. .

e

Seal Oil Backup Pump, *the Computer Inverter, the Vital Bus

Inverter, and addition of two 15 KVA UPSs were adjustments

to the load schedules included in

the calculation.

However, on an inspect{on of the di~tribution *system busses

by the inspectors, the Computer Inverter was found to be a

load on the bus, as well as an L&N 2020 Remote unit and a

feed to the MCB Rear Panel. The sum total of the loads not

considered in the calculation is over 120 amperes.

This

120 amperes is over 20 percent more than the first minute

load which was considered in the battery sizing calculation

and it would also be an additional continuous 1oad over the

entire battery 2-hour duty cycle.

The last two loads were

not only not considered in the calculation, but in the case

of the L&N 1 oad, it was a 1 so not shown on the one-1 i ne

diagram for the bus.

Based on the sizing criteria utilized

by the licensee in the sizing calculation, the inspector

calculated that in order to account for the additional

loads which the inspectors identified, a battery with 13

positive plates would be required.

The existing batteries,

Exide 2GN-23, have 11 positive plates.

The licensee stated that the computer load was not included

in the load calculation because it was and is expected to

  • be

removed

from

the station battery..

However,

the

calculation does not represent the design, therefore, the

design verification which wa~ performed is inadequate. The

calculation was last updated in May 1986.

Therefore, for

the past two and one-half years the potential existed for

design or operational decisions, which would be based on

the battery sizing calculation, to be inaccurate, since the

actual battery load was not complete1y and accurately

established.

One-line diagram Drawing No. 11448-FE-IG, Revision 13, was

also found to show a feed to the Air Side Seal Oil Backup

Pump from Bus 18, however, this feed was apparently

previously deleted.

The licensee acknowledged that the

drawing should have been updated for this change and until

this specific drawing is updated, this is identified as

inspector followup item 280,28/88-32-17.

(2)

Battery Bus 2A

The inspectors identified that the battery load from the

480 volt switchgear busses, both Class IE and non-Class lE,

may be understated.

For example, the current (ampere)

requirements for the 480 vo 1 t circuit breaker spring

charging motor, for certain electrically operated circuit

breakers, appears to be neglected in the battery load and

therefore was not considered in sizing the battery.

The

'

{'

j.

e

33

subject electrically operated circuit breakers, which can

receive trip commands during OBA conditions, have a breaker

mechanism closing spring charging motor with a rated

average current require,ment of approximately* 10 amperes.

The rated starting or inrush current for the spring

charging motor can be significantly higher, some 6 to 8

times the average rated value. The

load duration is *very

short, for example, less than two seconds.

But the loads

could occur simultaneously on a battery since the circuit

breakers which receive contra 1 power from the battery may

be tripped automatically.

When the subject breakers are

tripped, the closing spring charging motor is automatically

energized by a breaker position auxiliary switch.

For example, on reviewjng Battery Bus 2A, the inspectors

identified that circuit breakers for the Containment Air

Recirculation Fan (2-VS-F-lA, Bus 2H) and the Auxiliary

Building Exhaust Fan (1-VS-F-59, Bus 2B2) are tripped

automatically on an SI.

The SI condition could occur at

any time after a LOOP when the battery would be on

discharge.

Based on the circuit breaker manufacturer I s

pub 1 i shed data, the inspectors ca 1 cul ated 120 amperes

(minimum) total spring charging motor momentary load for

the subject circuit breakers.

The battery verification

calculation stated the load as only 3.9 amperes for both

Bus 2Cl and 2B2, and 6.5 amperes for 480 volt Emergency

Switchgear Bus 2H fqr a. total load of 10.4 amperes.

The

loads could occur as a first-minute load or as a random

load from a battery load profile perspective.

As a result of this inspection, the inspectors understand that

the verification calculation is under review by

licensee

engineers.

These examples of inadequate design control and

design verification of the Class lE 125 VDC station power system

battery sizing are considered to be

apparent violation

280,281/88-32-01.g.

Potential Loss of Combustion Air on Damper Single-Failure

The combustion air source for the ESW pump diesels is provided

by five e 1 ectri c-motor driven dampers at the ESW pump house.

Four dampers are located in the front wall and one damper is

located in the ceiling.

On hurricane conditions at the Surry

site, UFSAR Section 2.3.1.2.2 states that the air intake louvers

(dampers) located on the front wall will be made watertight by

means of a cover placed on the air intake duct structures inside

the pump house.

The UFSAR states that with the norma 1 air

intake louvers sealed, combustion air for operation of the

di ese 1 s would be provided by

11the motor-operated dampers"

located in the top of the pump house structure.

.*

e

34

C, * e

However, on inspection only one motor-operated damper was found

located in the ceiling and, as such, the damper is subject to a

postulated single failure.

For the conditions stated, a single

failure of the damper to open results in losing the combustion

air source for the di~sel drivers for the ESW,pumps.

Pending evaluation by the licensee, this is identified as an

unresolved item 280,281/88-32-13.

k.

Lack of Continuous Indication of Bypass of Engineered Safeguards

Actuation

On

reviewing Design Change No.

DC-88~17-3, the inspectors

identified that the design change incorporated a manual override

feature for the CLS open control circuitry for the RSHX

i~olation valves MOV-SW-104A, B, C, and D, and MOV-SW-lOSA, B,

C, and D.

The manual override feature is initiated by the

manual contr.ol switch for the valves and is accomplished by

simply operating the normal control switch for the valve to the

11close

11 position during a CLS Hi-Hi event, after the CLS signal

opens the valve.

Plant operators may elect to isolate a RSHX

post-accident to mitigate a leakage of radioactive material

which has occurred in the heat exchanger.

Isolation of the heat

exchanger is covered by plant procedures.

The inspectors identified that -t;.he

CLS open signal to the

isolation valves is a protective action of the engineered

safeguards as defined* by IEEE Standard 279, Criteria for

Protection Systems for Nuclear Power Generating Stations.

The

UFSAR, Section 7.2.1, Design Bases, states that the engineered

safeguards are designed in accordance with IEEE Standard 279,

August 1968.

Part 4.13 of the standard states that if the

protective action of some part of the system has been bypassed

or deliberately rendered inoperative for any purpose, this fact

shall

be continuously indicated in the control room.

In

discussions with licensee personnel, they were not aware of this

commitment.

Nevertheless, the inspectors identified that the design change

did not incorporate i ndi cation in the contro 1 room that a

protective action is bypassed.

Due to this variance between the

licensee 1 s commitments in the UFSAR, this is identified as

apparent deviation 280,281/88-32-10.

3.

Chemical Design

a.

SW System Inspection

The A CW piping which is the source of river water for the

SW system was inspected after marine growth, silt, and

b .

35

she 11 fish were removed by hydro 1 az i ng.

Severe through

wall corrosion was noted, particularly in the elbow leading

to the water box.

The corrosion mechanism was identified

as localized corrosion resulting in pitting:

Since the

pipe was coated, localized corrosion probably occurred at

discontinuities in the coating.

There was some evidence of

erosion possibly from silt and sea shells suspended in th~

cw.

The

CW

inlet. to the condenser (96 inch, cast iron,

butterfly) valves were severely attacked by graphit i c

corrosion (leaching of iron in brackish water environment).

These butterfly valves are being replaced with ductile iron

units coated with an epoxy film.

Some valves in the SW

system were also attacked by graphitic corrosion and ~re

being refurbished or replaced.

The RSHX SW system lines

were inspected to assess the performance of the epoxy

coaltar coating.

Some blistering of the coating was noted

with some clam growth as well as silting in some areas.

Prior to removing the A RSHX from containment, the SW

piping internals to the HX and the HX channel head were

inspected.

The SW system elbow to the HX was severely

corroded with large areas of heavy scale formation.

It

could not be determined whether the elbow was originally

coated.

The lower part of t~e SW piping was less severely

corroded with some blistering.

Epoxy coal tar coating

could be identified inside this piping.

The RSHX channel

head,

tube

sheet,

and

tubes

were

a 1 so

corroded.

Microbiologically induced corrosion was identified inside

the Cu/Ni tubes.

The SW side of the replacement heat

exchangers (channel

head,

tube sheet,

and tubes are

constructed of titanium Grade 2 material which is not

susceptible to river water corrosion).

The HXs shell side

are constructed of Type 304 stainless steel which is

compatible with the sump water during a OBA.

Galvanic corrosion tests were conducted to assess the

corrosion behavior of materials in contact with the

titanium in the HXs.

The corrosion rate of titanu.im to

stainless steel was very low while that of titanium to

carbon steel was high.

To

protect against potential

galvanic corrosion, the nozzle interfaces between the

carbon steel SW pipe connections and the RSHX titanium

channel head connections will be insulated.

Service Water Chemistry

A meeting was held with the Chemistry Supervisor to

determine

plant

chemistry

personnels 1

responsibility

related to the SW system.

River water is sampled and

e

36

analyzed once per month.

The river water analysis is

basically for historical records.

Biofouling control

techniques; e.g., chlorination,. biocides, etc. are not

being employed.

The river water pH was revi~wed over the

period of the last two years and wis found to range between

7.5 and 8.0.

(1)

Biofouling, Corrosion, and Protective Coatings

Biofouling, corrosion, and protective coatings related

to the

SW system were discussed with the lead

mechanical

engineer

and

materials

engineering

personnel.

The CW system is constructed of 96-inch

diameter carbon steel piping inside the turbine

building and 96-inch diameter concrete tunnels from

the turbine building to the canal intake structure.

The 96-i nch

CW and 42- and 30-i nch SW piping are

presently coated with an epoxy coal tar coating. The

96-inch piping is being sandblasted, inspected, and

repaired followed by recoating with Chesterton No. 855

abrasion resistant cured epoxy (20 to 30 mils dry film

thickness). The water boxes of the condensers have a

3/16-inch neoprene rubber lining which performed well

in the river water environment. The tube sheet of the

titanium tubed condensers are coated with 30 to 35

mils of 100 percent sol ids epoxy.

The 4 RSHXs are

being replaced with titanium/stainless steel units

with a 0.0005 fouling factor on the sw* side.

The

Cu/Ni

tubes

of* the

original

HXs

experienced

microbiologically induced corrosion.

They were also

designed with a zero fouling factor on the tube side

since they were intended to be kept in dry lay up.

c.

Surveillance and Inspection Program

There is no formal

periodic program for

SW

system

inspection in place at this time.

Some work was conducted

in the last several years and additional. activities will be

performed during at least the next two or three refueling

outages to inspect and repair the SW piping. Selected SW

system components have been or will be replaced including

the CW and SW valves, BC, CC, and RS HXs, and Mechanical

Equipment Room #3 chillers. The licensee plans to inspect

the refurbished SW system in the future.

The

following* documents

provide current information

regarding CW and SW systems:

NUREG/CR-4626, Improving the Reliability of Open Cycle

Water Systems, Volumes 1 and 2

4.

e

37

NUREG/CR-3054, Closeout of IE Bulletin 81-03: Flow

Blockage of Cooling Water to Safety System Components*

by Corbicula sp. (Asiatic. Clams) and Mytilus. sp.

(Mussel)

Configuration Control

The NRC inspectors field verified portions of the wiring

0 and

electrical wiring terminations in the RPS, SI system, and MCB

cabinets.

The majority of the identified discrepancies were in

the

MCB

cabinets.

Discrepancies

between

the

as-built

configuration and the drawings were identified.

The discrep~ncies identified by the inspectors included:

Capacitors installed but not shown on drawings.

Licensee

evaluation : Capacitors appear to have been installed for

correction of high frequency noise, however there was no

explanation available of the cause of the discrepancies.

Examples : Drawing 11448-FE-4A, terminal block A, terminals

1 and 3, and drawing 11448-FE-4B, terminal block 8,

terminals 1 and 3.

Field conductors are the opposite polarity of the polarity

indicated on the approved drawing.

Licensee evaluation :

none.

Examples : Drawing li448-FE-4A, terminal block C,

terminals 10 and 11, and terminal block F, terminals 1 and

2; drawing 11448-FE-48, terminal block 5, terminals 1 and

2; and drawing 11548-FE-4A, terminai block J, terminals 1

and 2.

Field cables are terminated on the internal side of the

terminal block and other field cables are terminated on the

external side of the terminal block.

These are not in

accordance with the approved drawings.

Licensee evaluation

none.

Examples : Drawing 11448-FE-4A terminal biock G,

terminals 10, 11, and 12 and terminal block D, terminals

10, 11, and 12; drawing 11548-FE-4A, terminal block 1,

terminal 7; terminal block D, terminals 10, 11, and 12; and

terminal block 10, terminals 11 and 12.

Internal rack wiring is shown on the external field side of

the terminal block and is incorrectly identified on the

external *field drawing.

Licensee evaluation : none.

Example : Drawing 11448-FE-4A, terminal block H, terminals

5, 7, and 8.

External cables are terminated on the terminal block but

are not shown on drawings.

Licensee evaluation : none.

38

r

c*

e

Example : Drawing 11448-FE-4A, terminal block 3, terminals

3 and 4 and terminal block 1, terminals 10 and 11; drawing

11548-FE-4A, terminal block 3, terminals 3 and 4, .and

terminal block 1, terminals 10 and 11.

-

External cables are terminated at the correct

a re shown on the drawing of the i nterna 1

Licensee evaluation :

none. Example drawing

terminal block 10, terminals 1, 2, 3, and 4.

terminals.but

side only.

11448-FE-4A,

Some 250 Ohm resistors are installed in the field but are

not on the appropriate drawings.

Licensee evaluation :*

none.

Example: Drawing 11448-FE-4A, terminal block 10,

terminals 8 and 9.

Installed instrumentation power supply is series jumpered

but is not shown on drawings.

Licensee evaluation : none.

Examples : Drawing 11448-FE-4A, terminal block 7, terminals

11 and 12, and all terminals on terminal blocks 8 and 9.

Drawing 11548-FE-4A, terminal bl~ck 7, terminals 11 and 12,

and all terminals ~n terminal blocks 8 and 9 .

Incorrectly labeled components on drawings.

Licensee

evaluation : typographical error.

Example : 11448-FE-4B,

terminal blotk C, terminal lf.

Color coding for installed wiring is not consistent within

cabinets.

Licensee evaluation : this does not represent a

concern and wi 11

not be changed.

Examp 1 es : drawing

11448-FE-4B, terminal block C, terminals 4 and 5; drawing

11548-FE-4A, terminal block D, terminals 7 and 8; and

drawing 11548-FE-4B, terminal block F, terminals 7 and 8

and terminal block H, terminals 1, 2, 7, and 8.

Several of the conductors of an RTD were rollsd.

Licensee

evaluation

none.

Examples

drawing

11448-FE-4B,

terminal block J terminals 8 and 9; and drawing 11548-FE-4B

terminal block J, terminals 1 through 10.

Conductors were shown terminated on drawings, but did not

exist in the field.

Licensee evaluation : none. Example :

drawing 11448-FE-4AS terminal A23-5.

The scope of this wiring review was not all inclusive and the

discrepancies listed above are not meant to represent all of the

wiring discrepancies in the cabinets examined.

Until the

licensee evaluates these discrepancies, this is identified as

inspector followup item 280,281/88-32-18.

I*

('

B .

5.

6.

-

-

39

Health Physics

On

two

separate occasions the ins~ectors noted licen~ee

employees violating site health physics requireme~ts by exiting

through the radiation/contamination monitors at the exit portals

while the monitors were either inoperable or were alarming.

During the first observed incident, a licensee employee stood in

the exit portal monitor and after it alarmed he moved to the

second portal which also alarmed.

This employee and six Other

licensee employees passed through the alaiming exit po~tal and

left the protected area. The second observed incident involved

two licensee employees that used an exit portal that was marked

out-of-service and 1 eft the protected area.

This matter has*

been

referred

to appropriate Region

II Health

Physics

Specialists and.will be addressed in NRC Inspection Report Nos.

50-280,281/88-44.

Off-site Engineering

The inspectors contacted the off-site engineering staff both at

the site and at the Insbrook Technical Center.

The off-site

engineering staff appeared to be well organized, and records of

existing design calculations appeared to be adequate at the

Insbrook Center; however, some design records were difficult to

obtain on-site.

The inspectors reviewed numerous' existing design calculations

for the SW system prepared by the engineering staff at the

Insbrook Technical Center or by contractors.

Approximately 20

design calculations were reviewed at the Insbrook Technical*

Center and only one calculation had a questionable conclusion,

ME-079, Determination of the Corrosion Rate of the Component

Cooling Water HX 1-CC-E-lB Head.

The overall conclusion of this

design calculation indicated that there were

no

apparent

concerns with the CCW

HX

1-CC-E-lB minimum allowable head

thickness.

The calculation failed to conclude that at the time

the calculation was performed, that the calculated corrosion

rate indicated that approximately 14 percent of the HX head

sample wai below minimum wall thickness and that after 18 months

approximately 50 perient of the HX head sample would be below

minimum wall thickness. This is considered an additional example

of inadequate design control and is combined with additional

examples

and . is

identified

as

apparent

violation

280,281/88-32-01.h.

OPERATIONS

The operation department 1 s involvement with the SW,

ESW, and RS

systems was assessed by directly observing operational activities,

system wal kdowns, personnel interviews, and document reviews.

The

--

e

40

document reviews involved completed data packages, procedures, work

orders, LERs, DRs, EWRs, training lesson plans, system descriptions,

training records, shift logs, and the UFSAR.

1.

SNSOC Reviews of Procedure Deviations

TS 6.4.E requires that temporary changes to procedures receive

an approval from the SNSOC within 14 days of the change.

During

an inspection conducted in April 1988 (50-280, 281/88-11)', a

review of station DRs determined that between January 1987 and

March 1988 there had been approximately 60 DRs, each with an

average of three procedures, written on late SNSOC reviews of

tempera ry changes to procedures.

The

SN SOC identified this

problem in meeting 87-335, on December 18, 1987, but the action

taken between that time and the time of the inspection had not

resulted in an improvement.

This item was identified as a

weakness at that time because the licensee was in the process of

implementing changes that had the potential of correcting the

problem.

As a part of the corrective actions, the Maintenance Department

has instituted a work package control center which processes,

logs, tracks, and reviews all work packages.

As part of this

process, procedure deviations requiring review by the SNSOC are

identified,

logged,

and

assembled

for

the

department

superintendent to take to the SNSOC within seven days of the day

that the procedures were reviewed by the Operations Shift

Supervisor.

The program is new, being implemented in late August 1988. This

program has the potential for resolving the problem.

Within this area, no violations or deviations were identified.

2.

ESW Diesel Engine Fuel Oil System

The UFSAR states that the diesel engines, which power the ESW

pumps, have a fuel storage capacity sufficient to allow 125

hours of continuous operation. The inspector examined the fuel

oil storage tank operat i ona 1 requirements for verifying tank

level and determining fuel oil quality.

The fuel oil tank level is checked once per shift by the Outside

Watch Operator, in accordance with the Outside Log Sheet, which

provides the minimum and maximum levels allowed in the tank,

2500 and 4700 gallons, respectively. A notation existed on the

log sheet requiring the operator to notify the Shift Supervisor

of abnormal or out-of-specification readings.

e

41

. ("

c*

e

Periodic test l-PT-25.4 samples fuel oil on a monthly basis for

water and other impurities.

When the fuel oil tank level needed

to be increased, external connections existed for a tanker_truck

to allow additions to the tank. Adequate surveill~nces existed

to assure that the fuel oil system remains functional.

Within this area, no violations or deviations were identified.

3.

Operating Procedures for SW and ESW Systems

The inspector reviewed operating procedures for the ESW system.

These included Normal Operating Procedures, OP 49.2, Emergency

Service Water System,

and

PT

Procedures,

l-PT-25.3A,B,C,

Emergency Service Water Pumps.

Requirements for ESW system

(diesel

engines

and

pumps)

operations were

compared to

instructions in the vendor manua1s for the Detroit Diesel

engines and the Bingham-Willamette pumps.

For non-emergency instances where the pumps are run, -the

procedures do not incorporate requirements from the vendor

manuals.

Some examples from the vendor manuals, which are not

incorporated, include diesel warm-up and cool-down prior to and

following

the engine

runs.*

In addition, there are no

verifications that oi1 pressure has increased during an engine

start nor are there checks for oil 1eaks during pump runs.

The

licensee stat~d that the warm-up and cool-down are not performed

because the PT is written to use a qui ck start as wou1 d be

required when the pumps are needed to provide the safety

function.

With a normal wear cyc1e of 7,000 to 10,000 hours0 days <br />0 hours <br />0 weeks <br />0 months <br />,

the reduction in the engine cycle hours due to running these

engines a total of 5 to 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> per year has been offset by the

assurance that the pump will quick start when needed.

This

appears acceptable for quick st'arting; however, other vendor

recommendations such as verifying 1 ubri cat i ng oi 1 pressure

increasing and checking for oil leaks are not included. The

failure to include vendor recommendations into appropriate

procedures is collectively combined with additional examples

and is identified as apparent deviation 280,281/88-32-09.c.

Section 2.3 of the UFSAR defines the maximum water levels for

the James River as the plant's Design Basis.

A review of

station procedures AP-37.01, Abnormal Environmental Conditions,

Revision

00.01;

EPIP-1.01,

Emergency

Manager

Controlling

Procedure, Revision 19; EPIP-1.03, Response to Alert, Revision

06; and EPIP-1.04, Response to Site Area Emergency, Revision 06,

was conducted to determine if the required actions during the

hurricane conditions are addressed. Utilizing these procedures,

emergency actions for preparation are taken; however, the loss

of CCW and/or RSHXs are not addressed and no instructions are

given to decrease the upper intake canal level to 26 feet MSL or

to m~ke the ESW building air intake louvers airtight, as stated

'

-

42

in the UFSAR.

These procedures define the emergency cl ass

requirements, based on the intensity of the hurricane winds and

flood levels; orders the consideration of placing a uni"t in

shutdown, if necessary; establishes the required emergency

organization;

and

tak.es

certain

precautionary

measures.

However, the statements in the UFSAR as to the actions the

operators will tak.e are not reflected in the procedures.

Discussions with operations personnel,

from Control

Room

Operators up to and including the Superintendent of Operati~ns,

revealed that they were unaware of the statements that the UFSAR

mak.es regarding operations in this condition.

The absence of

the UFSAR commitments in the plant operating procedures is under

review by the licensee. This is further discussed in paragraph

4.B.6.

The inspector reviewed the operating procedures for the SW

system and verified the correctness of the va 1 ve

1 i ne-up

check.lists with the plant drawings and system walk.downs.

Even

though some discrepancies were noted in the drawings, there were

no

problems with the valve line-up checklists.

Drawing

discrepancies are discussed in Design Control section of this

report, paragraphs 4.A.l.o and 4.A.4.

4.

Use of Butterfly Valves in the SW System

The inlet and outlet isolation valves on the various HXs in the

SW and CW flow paths are butterflj valves.

These valves are

used in many cases to throttle flow thro~gh these *components.

The licensee has stated that using butterfly valves in

throttling applications where low fluid velocity, low fluid

pressure, and cold fluid service exist was acceptable.

The

licensee also stated that the use of the butterfly valves in all

applications in the SW system was acceptable- over the entire

range of valve travel due to the low flow, fluid temperature,

and fluid pressure which exists.

A record of a telephone conversation between a licensee

representative and a representative of the Henry Pratt Valve

Company on September 14, 1988, stated that in genera 1, Henry

Pratt does not recommend throttling valves below 20 degrees.

Throttling valves between 20 degrees and*90 degrees is not going

to affect the valve.

Below 20 degree the velocities may

substantially increase and cavitation may occur damaging the

seat integrity and subsequently the life of the valve.

However,

in this application (less than 4.5 feet per second) the

manufacturer's representative indicated that Virginia Power

should not have ariy problems even if the valves are throttled

below 20 degrees. This would; however, require confirmation by

analysis.

These general rules of operation apply to the

original butterfly valves as well as the proposed replacement

valves furnished by Henry Pratt.

"

,-

I

-

43

While the CCW HX SW fluid velocity is below 4.5 feet per second,

and has been described in discussions with the manufacturer,

both the RSHX and the CW flow are above this value.

The manu-

facturer stated that analysis was needed to confirm the low

probability of cavitation at 4.5 feet per second.

Therefore,

it would also be required at the higher velocities experienced

in the other components.

Since the operators throttle these

valves based on required flow and not valve position, it" is

possible that these valves have been throttled at less than the

20 degree point, since there are no administrative controls to

prevent this.

Until the licensee evaluates throttling with

butterfly valves, this is identified as inspector followup item

280,281/88-32-19.

5.

Minimum Shift Crew Coverage

TS Table 6.1-1 requires a minimum shift operating crew to

consist of:

Shift Supervisor (SRO)

1

SRO

1

RO

3

Auxiliary Operator (non-licensed)

4

Licensee procedure SUADM-0-07, Operations Department - Organiza-

tion, Responsibilities, and Functtons, approved August 23, 1988,

step 2.2.3 states that at any time a unit -is being Operated in

Power Operation, Startup, Hot Standby, or Hot Shutdown modes,

the minimum shift crew shall include two licensed SROs, one of

whom shall be designated as the Shift Supervisor, two licensed

ROs and two unlicensed POs for both units.

The inspector reviewed the balance of this procedure and

determined that even though this step in the procedure is les~

conservative than the TS

requirements,

the minimum staff

requirements described in other parts of the procedure met the

requirements of the TS.

The inspector reviewed the shift supervisor log for August and

September 1988 in order to determine that the minimum shift crew

requirements were met during that period. The following shifts

and- dates were times when the log did not accurately reflect

sufficient personnel to man both the minimum shift and the Fire

Brigade as required by TS:

Date

8/04/88

8/22/88

9/02/88

9/14/88

Shift

0800-1600

0800-1600

1600-2400

0000-0800

I

-

44

By reviewing time sheets and individual logs, the licensee and

the inspector were able to determine that adequate coverage was

present on site.

The fact that the Shift Supervisor was not

verifying and recording that the TS were met indicates poor log

keeping practices. Until the licensee assures correct logs are

being maintained, this is identified as inspector followup item

280,281/88-32-20.

6,

Operator Training for SW and ESW Systems

The operator training program for licensed and non-licensed

operators, in the area of SW system operations, was reviewed for

completeness arid accuracy against the system description and the

UFSAR contents.

JPMs

R0.15.02A and R0.15.02B, for licensed operators, and

2.76.01 and 2.76.02, for non-licensed operators,

contain

instructions for the PTs on the ESW Pumps.

All four JPMs refer

to this test as a monthly test, however the test is actually

performed quarterly.

This is further discussed in paragraph

4.0.2.a.

In addition, the only measuring equipment referred to

by the JPMs is a vibration meter, for taking pump vibration

readings.

PTs l-PT-25.3 A, B, and C require that the pump speed

be recorded; however, there is no indication of pump speed and

operators have not been adequately trained to use a stroboscope

for this PT.

This is further discussed in paragraph 4.0.2.d.

System descriptions discuss

RSHX

inlet isolation valves,

MOV-SW-104A/B/C/D, as being normally open.

These va 1 ves are

normally maintained closed and have been for several months.

The UFSAR, Section 2, assumes that certain actions will be taken

regarding the upper intake canal level in preparation for a

hurricane. These actions are not discussed in the training or

in the plant procedures.

These examples are not all inclusive

of discrepancies that exist between

the

UFSAR,

system

descriptions, lesson plans, and the plant procedures.

Until

plant procedures accurately reflect the results of calculations

and UFSAR changes, this is identified as inspector followup item

280,281/88-32-21.

The inspector reviewed the qualifications records of selected

plant operation 1s personnel and determined that the records were

complete and up-to-date.

There was a completed checklist, or

test results for personne 1 exempted from sections due to

previous experience (e.g. Navy Nuclear Program graduates).

The

inspector did not identify any discrepancies related to the

training documentation for operation's personnel.

. ('

I

-

45

7.

Control Room/Relay Room Ventilation System Chiller Condenser

Problems

Since January 1987, the follciwing 11 LERs have be~n written on

various SW problems related to the main control room ventilation

chiller condensers: 87-002

87-007 88-007

87-003 87-008

88-020 87-005

87-018 88-025

87-006 87-021

The reportable events occurred whenever two trains of SW to the

control room ventilation system were simultaneously inoperable.

There were also cases where only a single train was inoperable

which is not ~equired to be reported.

Of the 11 LERs, 7 were

caused by inadequate SW fl ow to the chi 11 er condenser.

The

licensee identified cause of these seven occurrences was fouling

of various components by debris which included silts, seaweeds,

bivalve shells, and other assorted non-liquids.

LER 86-024, which occurred in August 1986, discussed replacing

the suction strainer for pump 1-VS-P-lB and replacing the

internals of the self-cleaning strainer.

EWR 88-347 was the

justification for reinstalling the pump suction strainers and

was completed after the inspection began on September 18,

1988.

The

EWR addressed reinstalling suction strainers as

remedial corrective action to resolve recurring problems:

The installation of these strainers and a prescribed

cleaning cycle has precluded plugging qf the chiller

condenser, manual throttle valve, and PCV valves.

LERs written since 1986; however, were not generally caused by

plugging of the chiller condenser, manual throttle valves, or

PCV valves, but by the plugging of the pump suction strainer

itself.

The

EWR stated that installing the pump suction

strainer would reduce the amount of cleaning required for the

chiller conden~er tubes for the following reasons:

Due to the screen mesh being significantly smaller than the

chiller condenser tube IDs, anything escaping the strainers

would have very limited impact on the chiller condenser

performance.

However, in the discussion section for EWR 88-347, the following

statement was made:

Annual cleaning of the chiller condensers is in progress*

but the plugging had reached an hourly rate during the

worst debris cycle in 1987.

,

-

46

Since the pump suction strainers were installed in 1986, it

appears that the pump suction strainer was not completely

reliable in preventing chiller condenser tube plugging.

The inspector examined portions of the SW system that had been

opened for maintenance and noted that evidence existed of the

growth of marine organisms on the piping and valve internals.

The assumption that the screen mesh will remove any debris large

enough to degrade the performance of the chiller condenser tubes

does not take into account the growth of organisms small enough

to pass through the strainer.

For example, the larvae stage of

most bivalves is microscopic and could easily pass through the

strainer mesh and would then grow large enough to plug the

chiller condenser tubes. Numerous bivalves were observed to be

growing in other portions of the SW system.

As part of installing the pump suction strainers, guidelines

were established for their periodic backwashing.

The pump

suction strainers were backwashed at least every two weeks or

anytime the pump discharge pressure dropped to 25 psig.

The

design pump discharge pressure was 43 psi (plus 2 psi static

head).

However, after the strainer had been cleaned, the pump

discharge pressure normally exceeded the 45 psig by 5 to 10 psi.

Thus, in some cases, the pump discharge pressure must drop by

approximately 30 psi before the pump suction strainer was

backwashed.

At this point, a substantial percentage of the

suction strainer would be plugged.*

The EWR also justified the suction strainer backwashing versus

the chiller condenser tube cleaning by stating that after the

suction strainer was backwashed, the pump discharge pressure was

normally 5 to 10 psi higher than design, indicating that the

chiller condenser tubes were not plugged, since the predicted

pressure drop for the chiller condenser had not been reached.

The pump discharge pressure indicators, 1-SW-PI-116A/B/C, are

between the pump and the chi 11 er condenser.

An increase in

indicated discharge pressure with the pressure indicator in this

configuration demonstrates an increased back-pressure from the

chiller condenser, indicating tube plugging, not the opposite.

The. actions taken to correct this problem that had been

previously identified by the licensee to the NRC and which had

resulted in

numerous

LERs

has not been adequate.

The

reinstallation of the temporary strainers had proven to be _an

ineffective resolution to the existing problem.

Problems have

continued to occur since that action was taken.

The written

justification and analysis for the actions taken was not

performed until it was requested by the inspector. When the EWR

was

issued,

it contained

inaccurate

and

contradictory

information.

This inadequate corrective action is part of a

more broadbased issue concerning the operability of the control

47

room/relay room ventilation system that is under NRC review.

Consequently, a finding will not be identified in this report.

8.

Water Found in the RSHXs

After cycling the SW supply valves 1-MOV-SW-103A & B for MOVATs

testing, on September 28, 1988, the operators assigned to drain

the SW piping between the valves and the RSHX inlet isolation

valves, 1-MOV-SW-104A/B/C/D, and verify that the RSHXs remained

free of water found greater than 20 feet of water in the A HX,

18 feet of water in the B HX, and greater than 20 feet of water

in the D HX.

On the following day, the MOVATs testing was

completed and greater than 20 feet of water was found in the C

HX.

Prior to the test start, water level was not checked in the

RSHXs, so it was not known if the water entered the HXs before

or during the testing.

The 104 valves were rebuilt during the

summer refueling outage and had successfully passed leak

testing.

The 104 valves had not been operated in the open

position during the present cycle, nor had they been stroke

tested since the outage.

Initially, the licensee attributed the problem to the 104 valves

leaking.

However, it was determined that without knowing the

status of the RSHXs prior to the test, the possibility that the

103 valves had been leaking existed.

The licensee's plans at

this point include the following:

a.

Developing tests to determine the source of inleakage

(which may require removing expansion joints to

visually inspect the valves while pressurized).

b.

Request engineering assistance.

c.

Blowing the RSHXs dry.

It is essential that these HXs remain dry while not in use,

since the heat transfer calculations used in the design of the

HXs assumes little (essentially zero) ,fouling.

Pending the outcome of the testing and the resolution of the

possibility of water inleakage to the RSHXs, this item is

identified as inspector followup item

280,281/88-32-22.

9.

SW and ESW Panel Configuration

The inspector performed a walk-down of the main control room SW

pane 1 s.

Modifi cat i ans have been performed on the Unit 1

instrumentation

panel

to

improve

the

groupings of the

indicators.

The Unit 2 panel has been scheduled for the same

,

48

"

C. -

modifications.

The ESW pumps indicate they are operating by a

red START light on the GETAC panel.

In case the pump trips, a

green STOP 1 i ght on the GET AC pane 1 is i 11 umi nated for that

pump.

Control room lighting appears adequate and does not hamper the

ease of reading the indicators and the recorders.

Noise levels

in the control room are minimized by the access controls

administered by the plant operation's personnel.

C

Within this area, no violations or deviations were identified.

C. .

Maintenance

During this inspection, an in-depth review of the maintenance program

for the safety related portions of the SW system was conducted.

The

inspection included observing work in progress and reviewing the

associated documentation for that work.

The inspection also included

a detailed review of completed work order packages including

applicable maintenance and calibration procedures, the vendor manual

for each component, and associated documentation for the completed

work.

Completed work order packages were selected based on the

importance of the component to plant safety and .to provide a

cross-sectional overview of all types of maintenance activities. All

work reviewed had been comp 1 eted in the past three yea rs.

The

primary focus of this review was to d~termine the technical adequacy

of the work performed.

The inspection also included reviewing

programs for predictive analysis, PM, trending, and root cause

analysis for component failures. Specific concerns are addressed in

the following paragraphs:

1.

Review of Maintenance in Progress and Complete Maintenance Work

Orders

As previously discussed, inspection sampling was designed to

provide a cross section of maintenance practices. Work reviewed

ranged from a simple gauge replacement to complete overhaul

or

replacement of MOVs and pumps.

The specific problem areas noted

during this portion of the inspection are discussed in the

following paragraphs:

a.

Work order 25253, Pressure Contra 1 Va 1 ve 01-SW-PCV-1008:

This work order and the associated maintenance procedures

accomplished a complete overhaul of the valve including

replacement of the valve body, bonnet, stem disc assembly,

etc. Problems noted:

Copies of the material control

parts were not included in the

the licensee was

unable to

traceability for these parts.

tags for installed

work order package and

establish material

,

49

C

0 *

The body to bonnet fasteners were over torqued to a

value of 590 ft-1 bs.

  • The vendor manual did not

provide the torque value for these fasteners; ho~ever,

discussions between the licensee and

0 the vendor

determined the correct torque value to be 400 ft-lbs.

No proceduralized/documented post-maintenance testing

was

performed

on

the

valve

after

completing

maintenance.

b.

Work order 58398, Charging Pump Lubricating Oil Cooler SW

. Pump 02-SW-P-108.

The complete rotating assembly for this

pump was replaced.

The rotating assembly consists of the

shaft, the impeller, and the packing assembly.

Problems

noted:

Copies of the material control tags for the installed

rotating assembly were not included in the work order

package and the licensee was unable to establish

material traceability for this assembly.

The pump casing cap screws (Item# 370) and the gland

plate nuts (Item# 355) were over torqued to values of

83 ft-lbs and 18 ft-lbs,

respectively.

The vendor

manual

did

not

provide

these

torque

va 1 ues.

Discussions between the licensee and the vendor

determined that the correct values are 50 ft-lbs and

10 ft-lbs, respectively.

c.

Work order. 29791 , Motor Operated Valve Ol-RS-MOV-155A.

This work order accomplished replacing the valve body to.

bonnet fasteners.

Problem noted:

The new fasteners were over torqued to a value of 150

ft-lbs. Conversations between the licensee and the

vendor determined the correct torque value as 120-135

ft-lbs.

d,

Work order 29790, Motor Operated Valve Ol-RS-MOV-1558.

This work order accomplished the replacement of the valve

body to bonnet fasteners.

Problem noted:

The new * fasteners were over torqued to a value of

150ft-lbs. Conversations between the licensee and the

vendor determined the correct torque value as 120-135

ft-lbs.

e.

Work order 45742, Gauge Ol-SW-PI-28.

This work order *

replaced the subject gauge.

Problems noied:

-~

e

e

50

No material control tags were filed in the work order

package. The licensee was able to establish material

traceability through the stock number which was

written

on

the work

order by

the ,.installing

maintenance technician.

This gauge was purchased as non-safety related and no

engineering

evaluation

of * this

condition

was

performed.

The purchase order for the gauge did not invoke 10 CFR

Part 21 on the vendor.

The gauge was calibrated by experienced maintenance

technicians and was considered minor maintenance.

No

records of the calibration were available.

f.

Work order 38044, Motor Operated Valve 10-SW-MOV-103C.

This work

included removing

of the motor,

bearing

replacement, and motor reinstallation.

Problems noted:

Paragraph

5.3.5

of

the

maintenance

procedure

( EMP-C-MOV-18) attached to the comp 1 eted work order

required data to be recorded concerning installed

jumpers.

This paragraph was signed off as complete

but data was not tecorded as required.

The full Joad amperage recorded in paragraph 6.10 of

the maintenance procedure (EMP-C-MOV-18) attached to

the work order was recorded as 3.2 amperes.

The full

load amper~s rec6~ded on ~he EQ data sheet was 4.8/2.4

amperes.

The

1 i censee was questioned

concerning

. which rating was correct. The licensee concluded that

2.4 amperes was the correct value.

This value

  • indicated the actua 1 motor performance was out of

specification since the actual readings in the open

direction were 2.8 amperes ~nd the acceptance criteria

required amperage not to exceed 115 percent of full

load (115 percent X 2.4 = 2.76 amperes).

Note:

Current procedures require motor performance not to

exceed 125 percent of full load amperage.

This

problem

was .not discovered

during

work

performance nor during the comp l_eted work package

final QA review.

g.

Work order 34887,

Motor Operated Valve 01-SW-MOV-105C.

This work order removed the valve from the system, removed

the valve operator and reinstalled a new Valve and the old

operator in the system.

Problem noted:

'

('

h.

e

51

Paragraph 6.6 of* the completed maintenance procedur~

(EMP-C-MOV-11) which was attached to the work order

required

that current

readings on a 11* three motor

phases be taken and compared to the full load amperage

for the motor.

Readings were not to differ from the

f u 11 1 oad amperage

by more than + 15 percent.

A 11

six readings taken (0.6 amperes) exceeded the full

1 oad amperage ( 0. 95 amperes) by more than mi nus

0 15

percent and no corrective action was taken for the out

of specification

readings

nor

was

a procedure

deviation issued.

Work order 40304, Flow Transmitter 02-SW-FT-2058.

order accomplished replacement and calibration

Rosemount transmitter.

Problem noted:

The work

of a

The calibration procedure (CAL 466) used to calibrate

this transmitter did * not pro vi de the vendor manua 1

required closing torque value (90 in-lbs) for the

detector vent and drain va 1 ves used to vent the

detector during calibration.

i.

Work

order 56035,

Intermediate Seal

Heat

Exchanger

02-SW-E-lA.

This work order replaced the intermediate seal

HX and several sections of piping going to/from the HX.

j.

Problem noted:

C

Copies of the material control tags for the installed

HX were not filed in the work order package and the

licensee

was

unable

to

establish

material

traceability for the new HX.

Work

order

02-SW-E-lA:

HX and some

noted:

48151,

Intermediate Seal

Heat Exchanger

This work order replaced the intermediate seal

piping and fittings to/from the HX.

Problem

Copies of the material control tags for the installed

HX were not filed in the work. order package. The

licensee was able to establish material traceability

by reference to the purchase order on the work order.

k.

Work order 63350, Motor Operator Valve 01-SW-MOV-1038:

The

work on this valve consisted of removing the valve from the

system, replacing the valve seat, seat leak testing the

valve, and reinstalling the valve.

Problem noted:

Copies of the material control tags for the new valve

seat were not filed in the work order package.

The

e

52

licensee was able to establish material traceability

by reference of the purchase order and stock number

for the new seat on the work order.

1.

Work orders 26319, 26320, 26321, 47148, 47146, and 47144,

ESW pump batteries: The work orders replaced the ESW pump

batteries.

Problem noted:

.

A copy of one of the material control tags for the new

batteries i nsta 11 ed by work order 26321 was not filed

in the work 6rder package.

The licensee was able to

es tab 1 i sh rnateri a 1 traceability by reference to -the

stock number on the work order.

rn.

Work

orders 70085 and 70086,

Motor Operated Valves

02-SW-MOV-203C and 2030:

These work orders removed the

valves, replaced the valve seats, seat leak tested the

valves, and reinstalled the valves in the sys~em.

Problems

.noted:

The new va 1 ves seats were purchased from Jamesbury

Corporation. Jamesbury is on the Virginia Power

approved vendor list.

The only inspection ever

performed on the vendor was an eighteen criteria (10

CFR 50, Appendix B) surv,eillance, done in 1985 to add

Jamesbury to the approved vendors list.

The wrong post-maintenance test for stroke timing the

valve was referenced on the work order (PT 25.1 was

referenced in 1 i eu of the correct PT 25. 2).

This

error was corrected during this inspection.

There was no required post-maintenance test to verify

th~ leak tightness of the valve to the piping system

flanges.

The

maintenance* procedure

(MMP-C-G-228)

used to

perform the work was weak since most of the procedure

was being deleted by procedure deviations.

Paragraph S.9.21 (Note) of the maintenance procedure

(MMP-C-G-228) requires a check of the disc to seat

clearance to ensure seat was making contact. However,

no acceptance criteria was provided for this check.

The following work order packages were reviewed and no

deficiencies were noted:

56579, 58821, 56565, 38112, 30391, and 30354.

"

e

53

To summarize the problems identified with the previous work

order packages, the system closure fastener~ on three valves and

one pump were over-torqued during m~intenance activities (work

orders 25253, 58398, 29791, and 29790). These deficiencies are

the result of inadequate maintenance procedures and are collec-

tively identified as apparent violation 280,281/88-32-04.a,b,c,

and d.

.

.

-

.

Material traceability was not m*aintained for the replacement*

parts of a ~ressure control val~e, the rotating assembly of a

p~mp, and an installed HX (work orders 25253, 58398, and 56035),

These deficiencies are collectively identified as apparent

violation 280,281/88-32~0~.a,b, and c.

Post-maintenance *testing was not performed following a. major

repair to -an

SW system pressure contro 1 va 1 ve (work order

25253).

This

is

identified

as

apparent

violation

50-280,281/88-32-06.

-

Acteptance criteria was not incltided in MMP-C-G-228 (work orders

70085 and 70086).

This is identified- as apparent violation

50-280,281/88-32-03.f.

Vendor

requirements were not included in site procedures.

Specifically, torque values for vent valves on

Rosemount

transmitters were not included in calibration procedure CAL 466

(work order 40304).

This deficiency is identified as apparent

deviation 280,281/88-32-09.a.

A safety-related gauge was purchased as non~safety related and

installed without any engineering evaluation of this condition,

no 10 CFR part 21 was invoked, and no calibration records are

available to support the gauge calibration (work order-45742).

This is identified as inspector followup item 280,281/88-32-23.

2.

Preventive Maintenance

During this inspection, a review of the licensee PM program was

accomp 1 i shed.

This part of the inspection was conducted to

determine the extent of PM being actually performed on the

components in the SW and

CW systems.

The inspection was

accomplished by comparing vendor manual PM

requirements to site

PM procedures, reviewing adherence to 1 i censee and vendor

established PM intervals, and discussing the PM program with

licensee personnel.

-

54

The CW valves between the upper intake canal and the condenser

(Ol-CW-MOV-106 A, B, C, and D and 02- CW-MOV-206 A, B, C, and D)

for each unit and the CW valves between the condenser and the

outlet canal (Ol-CW-MOV-100 A, B, C, and D and 02-GW-MOV-200 A,

B, C, and D)

are not in the licensee 1 s routine mechanical PM

program;

however, these valves were replaced with new valves

during the 1988 outages.

No procedure has been developed to

accomplish PM on these valves.

Electrical PM is done, but is

often not done

on

schedule.

The valve operator vendo'r

(Limitorque) states that PM on the electrical and mechanical

portions of the valve operator should be accomplished on an

eighteen-month frequency until experience indicates otherwise.

These valves are required to close upon receipt of an accident

signal.

The vendor manual (Detroit Diesel) for the diesel-driven ESW

pumps includes the following preventive maintenance items which

have not been included in the sites PM procedure (SW-P-M/A3) for

the diesels:

The vendor manual requires a 20 minute wait after running

the diesel for a check of the oil level.

SW-P-M/A3 does

not include this requirement.

The vendor recommends treatment of the fuel oil for

preventing marine growth. The licensee 1 s procedures do not

address this recommendation.*

The vendor manual requires periodic cleaning of the diesel

cooling system using a radiator cleaning compound followed

by a reverse flush with fresh water.

Procedure SW-P-M/A3

does not include this requirement.

The vendor manual states that the starter motor wicks

should be oiled whenever the starter is removed or

disassembled for maintenance.

Licensee's investigation

indicates that this has not been done since as far back as

1981.

The vendor manual

crankcase pressure.

this requirement.

requires a peri cidi c check of the

Procedure SW-P-M/A3 does not 1nclude

The vendor manual re qui res a periodic cleaning of the air

box check valves followed by blow out of the lines.

Procedure SW-P~M/A3 does not include this requirement.

The vendor manual requires a periodic inspection and

cleaning of the blower screen.

Procedure SW-P-M/A3 does

not include this requirement.

. . *

./

'

-

55

The vendor manual re qui res a periodic check/change of the

lubrication in the reductiqn gear.

Procedure SW-P-M/A3

does not include this requirement.

Regarding MOVs, the electrical and mechanical PMs for MOVs which

must change position in an accident condition was not accom-

plished at the frequency_recommended by the vendor (Limitorque

-

18 months unless experience indicates

otherwise) or the

licensee 1s PM Program (annually).

Nearly all valves revi

0ewed

exceeded these PM frequencies. The following valves are listed

below to support the overall conclusion; however, this list is

not intended to be all inclusive:

Valve

01-SW-MOV-lOlA

Ol-SW-MOV-102A

01-SW-MOV-103A

01-SW-MOV-104D

01-SW-MOV-105D

Electrical

PM Dates

6/25/88

6/28/86

5/6/88

5/2/85

7/3/88

7/16/86

6/28/88

7/11/86

6/28/88

7/16/86

Mechanical PM Dates

8/26/87

No data provided

No data provided

8/26/87

No data provided

7/7 /88

7 /11/86

8/19/85

7/8/88

7/8/86

Vendor requirements were not included in site procedures related

to CW MOVs and ESW pumps and diesels.

These deficiencies are

identified as apparent deviation 280,281/88-32-09.b and 09.c.

3. Predictive Analysis

Revie~ of the licen~ee 1s _predictive analysis program for

safety-related portions of the SW and CW systems was also

conducted during this inspection.

The licensee primarily uses

three types of predictive analysis to anticipate component

failures.

Oil and vibration analysis are used to predict

failures in site rotating equipment.

These programs have been

in pl ace for a number of years and using these techniques

appears to be well integrated into the licensee's periodic

testing program.

MOVATS testing of motor operated valves is

also used by the licensee to predict failures. It appears that

this type of testing is more often used in determini~g the cause

, .

\\

-4.

o'=*

e

56

as opposed to predicting a failure. This technique has been in

use for over four years; however, .only a small percentage of the

critical SW and_CW valves have been tested by MOVATS.

There are

52 va 1 ves ( 26 per unit) that must *cycle during en accident

condition.

Of these 52 valves, only,10 have been MOVATS tested

and these 10 valves have only been tested on one occasion.

The

following is a listing of the 52 valves; valves which have been

tested are indicated by an*:

1-sw-Mov~io3 A*, B*, C*, D*

'l-SW-MOV-104 A, B, C, D

l-SW-MOV-105 A, B, C*, D

l-SW-MOV-106 A, B

l-SW-MOV-101 A, B

l-SW-MOV-102 A, B

l-CW-MOV-100 Al B, C, D

l-CW-MOV-106 A, B*, C, D

2-SW-MOV-203 A, 8, C, D

2-SW-MOV-204 A, B, C, D

2-SW-MOV-205 A, B*, C, 0*

2-SW-MOV-206 A, 8

2-SW-MOV-201 A, 8

2-SW-MOV-202 A, 8*

2-CW-MOV-200 A*, 8, C, D

2-CW-MOV-206 A, B, C, D

Until the licen~ee evaluates appropriate testing methods for all

CW and SW valves, this is identified as inspector followup item

280,281/88-32-24.

Trending and Root Cause Analysis of Component Failures

The licensee provided the inspector with a listing of the

maintenance hi story for a 11 SW components worked in the 1 ast

three years. Reviewing this list identified trends in component

failures.

The licensie was questioned concerning these apparent

trends. Discussing this area with licensee personnel determined

that the licensee does not have a viable component failure

trending and root cause analysis program in place.

ANSI

Nl8.7-1976 paragraph 5.2.7.1 requires that malfunctions of

safety related structures, systems, and components be evaluated,

recorded, and tr~nded.

Surry has not developed a comprehensive

evaluation*and trending program for corrective maintenance on

safety _ related equipment although this inadequacy has been

identified by various audit.activities. Findings in licensee QA

Audits S84-21, S86-09, and S88-21 have addressed this weakness.

  • These findings encompass 4 years.

Reviewing corrective action

for Audit Finding S86-09-0l provided information as to the

status of . th.is programs deve 1 opment.

An audit task group

submitted recommendations to station management on August 27,

1987.

The recommendation proposed transferring responsibility

of failure evaluation and trending to Maintenance Engineering

from the Safety Engineering staff.

This proposal did not

address the format or mechanism for failure evaluation nor the

lack of guidelines for consistent evaluation performance.

This

proposal received four extensions awaiting management review

before action was taken May 5, 1988, tQ transfer responsibility

to Maintenance

Engineering.

An intermediate fix was to assign

..

., .

. (.'

D.

e

57

one SES engineer this responsibility due to man power shortage

in Maintenance Engineering. Transferring responsibility did not

establish a program;

however,

in April

1988 the system

engineering concept was established and these system engineers

assumed responsibility for a tracking and trending program.

The

trending and tracking - failure analysis program was entered

into the station Commitment Tracking Program (Commitment No. 5)

and received periodic attention in 1987 but no resolution.

Procedure SUADM-LR-07, Failure Trending and Analysis of Safety

Related Equipment, dated May 17, 1988, and SUADM-ENG-08; System

Engineer Failure and Root Cause Analysis, dated August 15l 1988,

are

recent procedural

developments

which

represent the

licensee

1 s program development to date.

These procedures

provide minimal guidance on actual failure evaluations although,

if the

personnel

performing

the

evaluations

re.ceived

suppl ementa 1 training, the guidance would be sufficient.

A

licensee Audit S88-21 comment on electrical maintenance activity

also identified this problem.

Procedure SUADM-LR-07 requires

that the failure mechanism and failure mode be included in the

work performed section of the maintenance report, presumably

performed by the craft personnel.

Procedure SUADM-ENG-08

provided adequate guidance but the scope was limited to pressure

boundary failures of safety related and ASME coded systems and

components.

This procedure additionally states that documenting

failure and root cause analysis would be by the EWR process,

presumably performed by the system engineers.

Although review

of* system engineer failure evaluations indicated a thorough

evaluation of the subject failures, the program is inconsistent.

It would heavily burden system engineering resources if each

safety related equipment failure received on EWRs processed root

cause analysis.

In summary, after four years of identified need, a comprehensive

program for equipment failure evaluation and trending has not

been developed.

Lack of clearly defined responsibility,

guidance, and training for this function remains the basic

weakness.

Coordination of the numerous engineering groups

involved in plant activities aggravates developing a consistent

evaluation program.

Although this is a licensee identified

problem, corrective action has been inadequate to resolve the

issue.

This

is

identified

as

apparent

violation

280,281/88-32-07.

Surveillance

The inspectors reviewed survei 11 ance testing associated with the

safety-related

SW

system.

This

included

reviewing

related

surveillance procedures, completed surveillances, and observing

surveillance tests conducted by operations personnel.

e

-58

1.

SW System Valve Testing

Safety-re 1 ated va 1 ves in the SW system are required by TS and

ASME Section XI to be tested every three months.

lhe testing is

performed per PT procedures PT-25.1, Quarterly Testing of CW and

SW System Valves, and PT-25.2, Testing of SW Valves to the

RSHXs.

The valves are also tested each refueling outage to

verify proper operation on a CLS actuation signal. The valves*

are tested per PT-8.5A,

Consequence

Limiting Safeguards

Funct-ional Test Hi-Hi System.

The inspectors reviewed completed

copies of PT-25.1 and PT-25.2 for 1987 and 1988 to verify that

testing.was performed in accordance with applicable ASME Section

XI

requirements with regard to corrective actions and/or

increased test frequency when problems were identified during

quarterly valve testi~g.

While reviewing the Unit 1 SW system configuration, the

inspector

noted

the

RSHX

inlet

isolation

valves

(Mov~sW-104A,B,C,D)

and

outlet

  • isolation

valves

(MOV-SW-105A,B,C,D) are now being maintained closed instead of

open.

The valves are kept closed as part of the actions

implemented to keep the RSHXs dry.

The RSHXs were replaced

during the previous Unit 1 refueling outage and will be replaced*

during the current refueling outage for Unit 2.

A design change

had been implemented for Unit 1 adding logic so that the valves

now receive an automatic open signal. The valves were tested in

PT-8.5A to verify proper operatiori on a CLS signal. The desigM

change was being i!Jlplemented for Unit 2 during the current

refueling outage.

While reviewing the latest completed copy of _PT-25.1 dated July

7, 1988, the inspectors noted that valves MOV-SW-104A,8,C,D and

MOV-SW-105A,B,C,D were tested from the open to closed position.

ASME Section XI requires that valves be exercised to the

position required to fulfill their function and the full stroke_.

time measured.

The RSHXs inlet and outlet isolation valves are

required to be in the open position during a LOCA.

Thus, the

valves were required to have been tested and stroke time

measured fr6m their closed to open position.

The valves were

cycled from the closed to the open position in PT-8.5A, but the

stoke time was not measured.

The inspectors discussed this item

with licensee personnel who stated that the PT revisions were at

the final management approval stage.

The licensee further

stated that procedure deviation sheets were provided to the

Control Room to reflect the logi~ changes; however, the valves

were not ti med in the correct direction. - Failure to test the

valves in accordance with ASME Section XI requirements is

identified as apparent violation 280,281/88-32-02 .

2.

SW System Pump Testing

,_,,_

e

59

The inspectors reviewed the Surry TS, UFSAR, and applicable

portions of ASME Section XI to determine te~t requirements for

the. SW system pumps~

The inspectors reviewed applicable test

requirements for the ESW pumps SW-P-lA,18,lC; chaPging pump SW

pumps

SW-P-lOA,108;

and

the control

room chiller pumps

VS-P-lA,18,lC.

While reviewing the test procedures for the

applicable pumps,

the inspectors identified the following

problems concerning whether testing met applicable requirem

0ents.

a.

UFSAR ESW Pump Testing Frequency

The UFSAR states that the ESW pumps will be tested monthly.

However,

the pumps

are being tested quarterly per

PT-25.3A,38,3C for ESW pumps SW-P-lA,18,lC.

The inspectors

asked licensee personnel why the pumps were not being

. tested in accordance with the frequency stated in the

UFSAR.

Licensee personnel stated that the quarterly. test

frequency is in accordance with their Inservice Test

program

which

is consistent with

ASME

Section

XI

requirements. The licensee further stated that a deviation

report had been submitted* to ensure that the UFSAR is

revised to reflect the test frequency.

Until the UFSAR is

revised to reflect the correct test frequency for the ESW

pumps, this is identified as inspector followup item

280,281/88-32-25 ..

b.

ASME Section XI ESW Pump Testing Requirements

The inspectors reviewed completed copies of periodic tests

PT-25.3A,3B,3C for 1987 and 1988.

The tests were reviewed

to verify that the pumps were being tested in accordance

with applicable requirements.

The inspectors identified that the ESW pumps are not being

tested in accordance with ASME Section XI requirements in

that pump inlet pressure, differential pressure, and flow

rate are not measured during testing.

The inspectors

discussed this issue with li.censee personnel who stated

that they have submitted a request to NRR (Relief Request

11, Revision 3, dated March 27,. 1987) seeking relief from

measuring these parameters during pump testing because

there is no instrumentation installed to measure the

parameters.

The licensee stated in the relief request that

pump vibration and lubricant level are monitored during

testing which should be adequate indications of pump

performance.

The licensee also stated in the relief

request that a design change has been initiated for

discharge

pressure

and

fl ow

instrumentation.

The

inspectors questioned whether measuring only pump vibration

and lubricant level during testing provided adequate

information for determining whether the ESW pumps are

, ,.,

....

1

C.

d.

e

60

capable

of

performing

their design

function.

The

licensee's proposed IST program for the ten-year period

(1982-1992) has not been approved and is still being

reviewed by NRR.

A meeting was conducted on.March 29-30,

1988, between NRR and 1 i censee personne 1 to discuss the

proposed IST program.

Questions were raised by NRR during

this

meeting

concerning

when

and

what

specific

instrumentation would be installed to permit measuring ASME

Section XI re qui red parameters.

Licensee personne 1 stated

that as a result of the meeting with NRR, Relief Request 11

was being revised to identify a 1 tern ate testing where a

fl ow test was being performed by observing where the

discharge water impacts in the upper intake canal in

relation to a fixed reference point.

In addition to the

design change initiated for di..scharge pressure and flow

rate, inlet pressure will be calculated from river level.

Questioris concerning testing performed on the ESW pumps not

meeting the requirements of ASME Section -XI wi 11 not be

identified for followup in this report since NRR is aware

of the issue and he 1 d discussions with the 1 i censee in

order to resolve the previous questions .

ESW Pump Flow

The licensee has been determi,ning ESW pump flow during

testing by observing where the discharge water impacts in

the upper intake canal in re*lation to a fixed reference

point.

The reference point was positioned to- demonstrate

that each ESW pump delivers at least 12,000 gpm.

The PT

acceptance criteria and pump operability are based, in

pa rt, on whether the discharge fl ow from each ESW pump

touches the reference point during testing.

The inspectors reviewed the licensee's calculations for

positioning the reference point in the upper intake canal.

After reviewing the calculations and discussing them with

licensee personnel, and direct observation of PT-25.3C for

ESW pump SW-P-lC, it was determined that the actual flow

rate was 1 ess than 12,000 gpm ( about 11,000 gpm) even

though the pump discharge flow did impact the reference

point. This PT was performed on September 29, 1988.

The

TS state that the 1 ong term servi Ce water requirement for

the design basis accident is 15,000 gpm.

The UFSAR states

that the design capacity for each ESW pump is 15,000 gpm.

Thus, the licensee's PT contains

inadequate acceptance

criteria for demonstrating that the ESW pumps are operable

and capable of performing design functions as stated in the

TS.

This

item

is identified as apparent violation

280,281/88-32-03.g.

ESW pump Speed

,, **

3.

o'

-

e

61

During the ESW pump testing. on September 29, 1988, the

inspectors observed that the value recorded for pump speed

was 440 RPM.

Th~ inspectors questioned this* value because

the pump is a single speed pump rated at 900 RPM.

Licensee

personne 1 stated that the va 1 ue was either read wrong

initially or.the wrong scale was used for the strobe light

which was being used to measure di ese 1 speed and pump

s~eed.

The inspectors nbserved the operator when the pump

speed was measured and the strobe light value was 440 ~PM.

Since the operator did not misread the value, and 440 RPM

was not* the correct pump speed, this indicates that the

test personne 1 had . no*t been trained in how to use the

strobe light properly.

The inspectors noted from reviewing

previously completed PTs that personnel had been recording

pump speed .as 1800 RPM.

This appeared to be the value for

the ESW pump_ diesel speed which i~ rated at 1800 RPM.

When

questioned concerning this matter,

licensee personnel

stated that the PT is confusing in this regard and will be

revised.

The PT performed on September 29, 1988, was

corrected with out being re performed to determine whether

the operator made a mistake when the test was performed.

The inspectors did not consider changing a value (which was

recorded during testing) subsequent to a test to be a good

practice.

The reason* for changing the value was not

documented in the comp 1 eted PT.

Unt i 1 personne 1 are

adequately trained in

performing this PT,

this is

identified as inspector follo'wup item 280,281/88-32-26.

e.

ESW Pump Tolerances

There are no tolerances given for the parameters such as

maximum or minimum values for pump oil levels, ESW pump

diesel oil pressure, and ESW pump diesel water temperature

in section five of the PT.

Although the parameters are not

part of the acceptance criteria, tolerances would give the

test personnel an indication if the ESW pump diesel

parameters are still within their acceptable ranges.

This

item was discussed with licensee personnel who stated that

consideration will be given to providing expected ranges of

certain parameters when the PT is revised.

Until the

licensee evaluates if tolerances are needed in the ESW pump

procedures.

This is identified as inspector followup item

280,281/88-32-27.

Control Room Chiller Pumps

The TS requires *that there be an operating SW flow path to and

from one operating control area ~ir conditioning condenser. It

also requires at least one operable SW flow path to and from at

least one operable control area control air conditioning

~ondenser. Both of these are required whenever fuel is loaded in

.r ..

I,,'

'

E.

QA/QC

e

e

62

the reactor core.

In addition, the UFSAR states that the

required SW flow to the control room air conditioning condenser

is 330 gpm.

Service water is delivered to the control room air

conditioning condenser via the control

room chtller pumps

1-VS-P-lA,lB,lC.

The inspectors identified that there are no

surveillances to demonstrate that there is an operable SW flow

path to and from an operable control area air conditioning

condenser.

Additionally, there are no surveillances to test the

control room chiller pumps and the pumps are not included{~ the

licensee's

ASME

Section XI

inservice test program.

The

inspectors questioned why there are no surveillances to test the

chiller pumps and demonstrate an operable SW flow path to the

air conditioning condensers.

Licensee personnel stated that

chiller pumps are subject to surveillance via the Maintenance

Department's Maintenance Program.

The licensee further stated

that a PT is being developed to demonstrate operability of the

control room chiller pumps and thereby demonstrate the SW flow

path operability through the pumps.

The inspectors will review

the PT for adequacy during a subsequent inspection.

This is

identified as inspector followup item 280,281/88-32-28. -

Quality organization activities wer~ examined to determine

,

generally, the organization's ability to identify technical problems

and, specifically, to review QA/QC activities in the systems

encompassed by the SSFI.

The general review involved examining

previous licensee audits, audit schedules, scheduling responses to

evolving plant conditions, and audit finding corrective action

activity.

Examining_ this information provided an indication of

safety related QA activity scope, audit quality, and resolution

process

adequacy.

Additionally,

documentation

of

real

time

observation activity performed by QC inspectors was examined for

scope, depth, and resolution.

A specific examination of QA/QC

activity was performed on the SSFI systems under review to verify

that these safety related systems were subject to QA activity

consistent with that attention received by other plant safety-related

systems.

Reviewing the audit schedule and audit reports demonstrated the

licensee performed audits required by

TS

6.13.

These audits

encompassed safety-related activities occurring on-site.

Followup

audits had been performed to verify effectiveness of corrective

actions for previous findings.

The

Quality

organization

has

demonstrated the flexibility to perform special unscheduled audits in

response to evolving conditions in specific plant areas. Examples

include audits performed of Independent Fuel Storage activities

(S87-25)

and station tag-out activities (S88-24).

The

audit

schedule, in conjunction with the flexibility to perform special

r ..

e

63

audits, provide adequate safety-re 1 ated activity coverage by the

audit group.

The qualify or technical merit of individual audits has improv~d in

the previous year and the recent audits identified more substantial

findings.

For example, PT audits over the last 4 years (S85-06,

S86-06, S87-06, and S88-06)

have demonstrated an evo 1 vi ng audit

qua 1 i ty.

The 1985 audit adequately verified comp 1 i ance with no

apparent technical depth; i.e., check list items regarding adequacy

of PT evaluations or test procedures.

The majority of check list

items* identified if an administrative procedure step was complied

with or the required individual signed for a review.

The 1986 audit

contained approximately 26 check list items; 5 of which represented

plant operability or safety impact issues. These items included the

following:

Do PTs on ESF equipment test equipment in condition required for

operation?

Are Unit 1 and Unit 2 procedures for same equi~ment equivalent?

Are PTs performed at required frequencies?

Does comparison of TS and PT index verify all TS requirements

are addressed?

Are department PT files up-to-date?

The remaining items and those of the 1985 audit provide little

insight into the functional success of the PT program.

The 1987

audit selected program requirements fo~ compliance with

six check

list items of merit, five were followup from the 1986 audit items

listed above.

One 1987 audit finding indicated that the auditors did

review the activity output; i.e., the PT for the outside RS pumps did

not eva 1 uate pump head as required by TS.

The 1988 PT audit

demonstrated a more direct review of the audited activity product as

opposed to a gross comp 1 i ance cross section review.

This audit

reviewed individual

PT results and analyses of these results

performed by plant personnel.

Audits of other plant activities;

i.e.,

In-service Inspection,

Design

Control,

Operations,

and

Maintenance, also were evolving towards reviewing the quality

activity end product.

Audit S87-07 of the In-Service Inspection

program utilized an NOE specialist which contributed to audit depth.

Utilization of technical specialists for plant audits was not a

common practice although it was evident that the the combination of

the audit group's exper:tise and specialist's greater depth of

technical knowledge produced a more comprehensive review of the

audited activity, thereby enhancing the quality organization's

capability to fulfill their function.

Design control audit S87-61 was a high manpower design activity

compliance type audit performed in late 1987 of North Anna, Surry,

and

corporate

design

groups.

Although

many

findings

were

administrative-compliance oriented, some findings demonstrated that

the engineering product qua 1 i ty was eva 1 uated to a greater degree

, ...

e

64

than previous audits.

The following items, applicable to Surry, were

identified from this audit:

Sample of EWRs identified examples of

Inadequate 10 CFR 50.59 safety analysis

Failure to review Design Base documents for safety analyses

Lack of independent review and review by design authority

Field change not subjected to design control measures

commensurate with original design change.

Inadequate controls to limit design change activity to the

designated design authority.

Inadequate disposition of Nonconformance Re~orts by the

Surry SEO

Inadequate/inconsistent processing of commercial quality

evaluations by the SEO related to commercial grade

procurement activity

These

findings

represent

another

example

of

the

quality

organization 1 s ability to identify problems.

The audits reviewed demonstrated an increased tendency to review the

activity output quality.

Previous compliance-based philosophy was

identified . as a weakness by the April 1988 QVFI ( NRC Report No.

50-280,281/88-11). The increased audit depth and findings* substance

evident in the previous year audit activity demonstrated the

capability of the audit organization to identify problems in safety

related activities.

Equal in importance to the scope and quality of audit activity is the

adequacy and timeliness of conditions adverse to quality resolution,

which has been identified as a weakness at Surry.

The QVFI

identified that audit findings were

closed without adequate

verification that the corrective actions accomplished were effective.

Additionally, plant responses to audit finding notifications were

frequently untimely.

In

response to closure inadequacies,

QA

management now approves all closeout action.

In response to the

latter, a plant-wide memorandum was issued requiring prompt response

to AFRs.

Trending of response times by QA indicated improvement

since the memorandum was issued; however, due to the relatively short

time elapsed since initiation of these corrective actions, it was

indeterminate whether the finding resolution weakness is totally

resolved.

Real time quality organization inspection activity was accomplished

by the QC group.

This activity included observation of work in

progress, surveillances, and procedural holdpoint verification.

QC

inspector comments and activities are documented in a QC inspection

1 og.

There is no requirement or guidance for 1 og entries nor

requirement that all activity be recorded in this log. Occasionally,

QC inspectors document comments on the work document.

Eight adverse

' .

65

0 *

e

findings or procedure deviations, noted {n the QC inspection log were

reviewed for documentation of the identified discrepant condition and

eventual resolution.

The following deviations or discrepancies were

listed in the inspection log by*job number and date:

Job 67316 dated June 9, 1988, Non-safety related gasket used in

a safety related application - RS system

Job 65335 dated May 13, 1988, Safety

related

air

valve

(PCV-MS-102B) failed valve operability test.

Job DC 88-01 dated June 21, 1988, Tack welds installed on RS

sump covers when procedure required seal welds.

Job DC 87-22 dated June 4, 1988, RSHX upper restraint gap less

than 1/16 inch minimum gap specified by drawing.

Job DC 87-22 dated June 21, 1988, RSHX installation procedure

require fit up per plant specification NUS-20, J-bevel

end

preparation.

Weld end preparation was

not

J-bevel.

Job 69526 dated August 11, 1988, Multiple findings on

replacement of SW radiation monitor pump.

Job 63352 dated May 19, 1988, Exc~ssive corrosion in RS system

piping.

Entry questioned the integrity of the pipe .

. Job 62913 dated May 1, 1988, QC holdpoint bypassed.

Although reviewing the deviations or discrepancies indicated that no

potential safety problems existed from those specific examples, they

represent a failure of the quality organization to adequately process

identified discrepant conditions.

In some cases, the corrective action *effectiveness was not apparent

although QC management indicated that the problem was resolved if the

QC signature was eventually entered on the work procedure.

The

existence of the signature was considered documentation of the

nonconformance or deviation resolution.

This signature provided no

description of how the identified deficiency was resolved nor was a

later QC Inspection log entry available to provide this information.

The licensee 1 s method of documenting QC inspection findings does not

provide a reliable process to ensure that identified discrepant

conditions are consistently and effectively resolved:

This failure

to adhere to ANSI Nl8.7-1976, paragraph 5.Z.l7, which requires that

inspection deviations, their cause, and corrective actions be

documented, is identified as apparent violation 50-280,281/88-32-08. *

In summary, the qua 1 ity organization possesses the resources to

identify problems in safety related activity in the plant. The scope

e

  • 66

of audit and real time QC inspection activity included a cross

section of safety related systems encompassing the SSFI systems.

The

audit activity currently being performed demonstrated a depth

adequate to identify technical problems. although expanded use of

technical specialists would further enhance audit technical quality.

The organization has experienced weaknesses in resolving identified

problems from audit findings and QC inspections.

These weaknesses

have received management attention and are being resolved.

. ,, .

, ...

"

-

e

APPENDIX A

Licensee Employees

S. Alberico - Materials Engineering - Senior Engineer

J. Bailey - Superintendent of Operations

C. Baird - Site Engineering

L. Baker - Reactor Operator

  • R. Benthall - Licensing
  • R. Bilyeu - Licensing

M. Blankenship -

I&C Engineer

  • H. Burruss - Licensing

R. Calder - Manager, Nuclear Licensing

  • W. Cartwright - Vice President Nuclear

J. Clemmons - Senior Engineer

P. Conner -

I&C Engineer

8. Corbin - Atlantic Technical Services - Contract Engineer

A. Davis - Assistant to Chemistry Supervisor

C. Duong -

RS System Engineer

A. Farmer - Electrical System Engineer

8. Foster - Design Engineer

  • E. Grecheck - Assistant Station Manager, Nuclear Safety and Licensing

R. Green - Site Engineering - Lead Mechanical Engineer

R. Green - Materials Engineering - Engineer

  • N. Hardwick - Manager Nuclear Licensing
  • R. Hardwick,Jr, - Manager Corporate QA
  • D. Hart - QA Supervisor

8. Hill - Electrical Engineer

  • H. Kansler - Station Manager
  • J. Maciejewski -

SW System Engineer

E. May - Project Engineer

H. McCallum - Supervisor of Training, Power Station Operations

J. McCarthy - Operations Coordinator

S. McKay - Plant Engineering Supervisor

J. McGinnis - Senior I&C Technician

A. McNeill - IS! Supervisor

  • G. Miller - Licensing Coordinator
  • H. Miller - Assistant Station Manager, Operations and Maintenance

T. Miller - Electrical Engineer

  • F. Moore - Vice President Powef Engineering Services

A. Price - QA Manager

R. Rasnic - Supervising Mechanical Engineer

T. Ringler - Assistant Shift Supervisor

P. Rippeth -

I&C Technician

E. Shore - Battery System Engineer

J. Smith - QC Supervisor

  • D. Sommers - Licensing Supervisor torporate
  • T. Sowers - Power Engineering Services

T. Swindell - Chemistry Supervisor

R. Stacy - Electrical Engineer

o*

e

Appendix A

2

S. Tajbakhsh - Mechanical Engineer

  • G. Thompson - Maintenance Engineering

P. Tacker - Supervisor, Site Engineering Office

  • J. Waddill - Power Engineering Services Mechanical

A. Wilson - Pipe Foreman

R. Wilson - Auxiliary Operator

S. Wiser - Mechanical Design Engineer

R. Zefar - Staff Engineer

Other

licensee employeis

contacted

included engineers,

operators,

technicians, maintenance personnel, and office personnel.

NRC Resident Inspectors

  • W. Holland, Senior Resident Inspector
  • L. Nicholson, Resident Inspector

NRC Personnel

  • B. Buckley - NRR Project Manager
  • F. Cantrell - Chief, DRP
  • A. Gibson* - Division Director, DRS
  • C. Haughney - NRR Chief, Special Inspection Branch

.*S. Patel - NRR Project Manager

  • Attended Exit Interview

... * ..

...

I'

..

('

APPENDIX B

AC - Alternating Current

AE - Architect Engineer

AFR - Audit Finding Report

Acronyms

ANSI - American National Standards Instit~te

ASME - American Society of Mechanical Engineers

AP - Abnormal Operating Procedure

BC - Bearing Cooler

BHP - Brake Horse Power

CC - Component Cooling

CCW - Component Cooling Water

CFR - Code of Federal Regulation

CLS - Consequence Limiting Safeguards

Cu - Copper

CW - Circulating Water

OBA - Design Basis Accident

DC - Direct Current

DPI - Delta Pressure Indicator

DR - Deviation Report

EMP - Electrical Maintenance Procedure

ESF - Engineered Safety Features

ESW - Emergency Service Water

EWR - Engineering Work Request

F - Fahrenheit

FT - Flow Transmitter

GDC - General Design Criteria

GPM - Gallons Per Minute

HP - Horse Power

HVAC - Heating, Ventilation and Air Conditioning

HX - Heat Exchanger

I&C - Instrument and Control

ID - Inside Diameter

IE - Inspection and Enforcement

C

0

e

IEEE - Institute of Electrical and Electronics Engineers

IFI - Inspector Followup Item

IPCEA - Insulated Power Cable Engineers Association

ISI - Inservice Inspection

JPM - Job Performance Measure

KVA - Kilovolt-Ampere

L&N - Leeds and Northrup

LER - Licensee Event Report

LOCA - Loss of Coolant Accident

LOOP - Loss of Offsite Power

MCB - Main Control Board

MDV - Motor Operated Valve

MSL - Mean Sea Level

L

..

) .,

. ,. ,> ii . '

,.

Appendix B

NOE - Non Destructive Testing

Ni - Nickel

NPSH - Net Positive Suction Head

NRC - Nuclear Regulatory Commission

NRR - Nuclear Reactor Regulation

OP - Operatin~ Procedure

P - Pump

PCT - Peak Clad Temperature

PCV - Pressure Control Valve

pH *- Percent Hydroxide

PI - Pressure Indicator

PM - Preventive Maintenance

PO - Plant Operator

PS

Pressure Switch

PSI-- Pounds Per Square Inch

PSIG - Pounds Per Square Inch Gauge

PT - Periodic Test

QA - Quality Assurance

QC - Quality Control

2

QVFI - Quality Verification Functional Inspection

RHR - Residual Heat Removal

RG - Regulatory Guides

RO - Reactor Operator

RPM - Revolutions Per Minute

RPS - Reactor Protection System

RS - Recirculation Spray

RSHX - Recirculation Spray Heat Exchanger

RTD - Resistance Temperature Device

SEO - Site Engineering Organization

SER - Safety Evaluation Report

SI - Safety Injection

'r.:?

e

SNSOC - Station Nuclear Safety and Operatirrg Committee

SRO - Senior Reactor Operator

SSFI - Safety System Functional Inspection

SW - Service Water

.

TS - Technical Specification*

UFSAR - Updated Final Safety Analysis Report

UPS - Uninterruptible Power Supply

URI - Unresolved Item

VB - Vacuum Breaking

VDC - Volts Direct Current

VP - Vacuum Priming

VS - Ventilation System