ML18153D234

From kanterella
Jump to navigation Jump to search
LER 93-001-00:on 930108,reactor Trip & Safety Injection Occurred Due to Spurious Initiation of Train a High Consequence Limiting Safeguards Signal.Caused by Cycling of Relay 3-CLS-1AM.Drawing Error corrected.W/930129 Ltr
ML18153D234
Person / Time
Site: Surry Dominion icon.png
Issue date: 01/29/1993
From: Kansler M
VIRGINIA POWER (VIRGINIA ELECTRIC & POWER CO.)
To:
NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
93-047, 93-47, LER-93-001, LER-93-1, NUDOCS 9302100236
Download: ML18153D234 (8)


Text

. \ .

  • surry, Virginia 23883 January 29, 1993 U. S. Nuclear Regulatory Commission Serial No.: 93-047 Document Control Desk Docket No.: 50-280

. Washington, D. C. 20555 License No.: DPR-32 Gentlemen:

Pursuant to Surry Power Station Technical Specifications, Virginia Electric and Power Company hereby submits the following Licensee Event Report for Unit 1.

REPORT NUMBER 50-280/93-001-00 This report has been reviewed by the Station Nuclear Safety and Operating Committee and will be reviewed by the Corporate Management Safety Review Committee.

Very truly yours, Enclosure cc: Regional Administrator Suite 2900 101 Marietta Street, NW Atlanta, Georgia 30323 Mr. M. W. Branch NRC Senior Resident Inspector Surry Power Station n o n r. .., "

9302100236 930129 PDR ADOCK 05000280 S PDR

.., NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED 0MB NO. 3150-0104 (6-89) EXPIRES: 4/30/92 ESTIMATED BURDEN 'PER RESPONSE TO COMPLY WITH THIS INFORMATION COLLECTION REQUEST: 50.0 HRS. FORWARD COMMENTS REGARDING BURDEN LICENSEE EVENT REPORT (LER) ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530), U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWORK REDUCTION .PROJECT (3150-0104). OFFICE OF MANAGEMENT AND BUDGET, WASHINGTON, DC 20503.

FACILITY NAME (1) DOCKET NUMBER (2) PAGE 3 Surry Power Station Unit 1 0 5 0 0 0 2 8 0 OF O 7 TITLE (4 ) Reactor Trip and Safety Injection Due to Spurious High Consequence Limiting Safeguards Signal Caused by Malfunctioning Relay EVENT DATE (5) LEA NUMBER (6) REPORT DATE (7) OTHER FACILITIES INVOLVED (8)

SEQUENTIAL REVISION FACILITY NAMES DOCKET NUMBER(S)

MONTH DAY YEAR YEAR  ::11:1 MONTH DAY YEAR NUMBER NUMBER 0 0 0 0 1 089393 0 0 1 0 0 0 1 5 0 0 0 OPERATING N THIS REPORT IS SUBMITIED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check one or more of the following) (11)

MODE (9) 20.402(b) 20.405(c) 50.73(a(2)(w) 73.71(b) t - - - - - - - , - -.........-+---1 20.405(a)(1}(i) 50.36(c}(1) 50.73(a}(2)(v) 73.71(c) 20.405(a)(1)(ii) 50.36(c)(2) 50. 73( a)(2)(vii) OTHER (Specify;, Ab"'act below and in Text NRC Form 366A) 20.405(a)(1}(iii) 50.73(a)(2)(i) 50.73(a)(2)(viii)(A) 20.405(a)( 1}(iv) 50.73(a)(2)(ii) 50.73(a)(2)(viii)(B) 20.405(a)( 1)(v) 50.73(a)(2)(iii) 50.73(a)(2)(x)

LICENSEE CONTACT FOR THIS LER (12)

NAME TELEPHONE NUMBE_R M. R. Kansler, Station Manager AREA CODE 804357 REPORTABLE CAUSE SYSTEM COMPONENT TO NPRDS X JERLY W 1 2 0 y X W 1 2 0 y EXPECTED MONTH DAY YEAR SUBMISSION YES (II yes, c001plete EXPECTED SUBMISSION DATE) DATE (15)

ABSTRACT (Lima lo 1400 spaces, i.e., approximately fifteen single-space lypewritten tines) ( 16)

On January 8, 1993 at 1729 hours0.02 days <br />0.48 hours <br />0.00286 weeks <br />6.578845e-4 months <br />, with Unit 1 operating at 100% power, a reactor trip *and safety injection occurred due to spurious initiation of ,the train "A" high consequence limiting safeguards (Hi-CLS). The spurious signal was generated during troubleshooting by either a l(_)Ose negative lead or an intermittently closing contact on relay 3/4-CLS-lA. On January 9, 1993 at 0722 hours0.00836 days <br />0.201 hours <br />0.00119 weeks <br />2.74721e-4 months <br />, with Unit 1 at hot shutdown, a spurious initiation of train A safety injection occurred during testing after replacement of relay 3/4-CLS- lA. The spurious signal was caused by testing prior to removal of a temporary modification (electrical jumper). After both spurious actuations, operators used the appropriate procedures to stabilize the unit. Failed components were replaced and a root cause evaluation was conducted. An engineering evaluation will be performed to identify single point failures which can cause spurious actuations. Circuitry modifications and relay preventive maintenance will be evaluated. A drawing error will be corrected and the everit will be discussed in safety evaluation training. This report is required by 10 CFR 50.73(a)(2)(iv).

NRC Fam 366 (6*89)

NRC FORM 366A U.S. NUCLEAR REGULATORY COMMISSION APPROVED 0MB NO. 3150-0104 (6-89) EXPIRES: 4130/92 ESTIMATED BURDEN PER RESPONSE Tb COMPLY WITH THIS INFORMATION LICENSEE EVENT REPORT (LER) COLLECTION REQUEST: 50.0 HRS. FORWARD COMMENTS REGARDING BURDEN TEXT CONTINUATION ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530), U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWORK REDUCTION PROJECT (3150-0104) .. OFFICE OF MANAGEMENT AND BUDGET, WASHINGTON, DC 20503.

FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE(3)

SEQUENTIAL Jil~~t REVISION YEAR

NUMBER -:-:-:-:-:-: NUMBER Surry Power Station Unit 1 oI s I o I o I o I 2 Is Io 9 I 3 - 0 I 0 I 1 - 0 I 0 oI 2 OF ol 7 TEXT (ltmao space I* required, u** additional NRC Fam 366A'*) (17) 1.0 - DESCRIPTION OF THE EVENT On January 8, 1993 at 1729 hours0.02 days <br />0.48 hours <br />0.00286 weeks <br />6.578845e-4 months <br />, with Unit 1 operating at 100% power, a reactor trip and safety injection occurred due to spurious initiation of the train "A" high consequence limiting safeguards

. (Hi-CLS) [EIIS: JE].

Prior to the spurious Hi-CLS signal, surveillance testing of the ~ain A Hi-CLS logic had been in progress in accordance with procedure l-PT-8.4, "Consequence Limiting Safeguards (Hi Train)". The channels I and II portions of this test !lad been completed satisfactorily. Following testing of channel III with a circuit te$t switch in the test position, the "test terminate" pushbutton was depressed but the logic did not return to the normal mode. At 1425 hours0.0165 days <br />0.396 hours <br />0.00236 weeks <br />5.422125e-4 months <br />, the eight hour action statement in effect for surveillance testing was exited and a twelve hour action statement was entered in accordance with Technical Specification (TS) 3.7.C, Action 14, due to the inoperable train A Hi-CLS logic.

Troubleshooting was initiated to determine if relay 3-CLS-lAM [EIIS: JE, RLY] was energizing as required to enable the train A Hi-CLS logic to return to normal (See Figure 1). The troubleshooting involved depressing and holding the test terminate pushbutton while checking the circuitry required to energize relay 3-CLS-lAM. When the "CLS reset" pushbutton was depressed simultaneously with the test terminate pushbutton and the logic did not return to normal, it was concluded that the test switch was not the cause of the malfunction. It was determined that the malfunction was in another part of the circuit, most likely in contact 9 of relay 3/4-CLS-lA [EIIS: JE, RLY]. Voltage readings taken across contact 9 indicated either no voltage was being supplied to the contact or that the contact was closed. The electricians removed their voltmeter probes from the contacts and exited the relay cabinet to evaluate their readings. Following this action, with the test terminate pushbutton still depressed, the spurious train A Hi~CLS signal occurred and train A safety injection actuated as designed.

Following the train A Hi-CLS signal and safety injection, the following safety systems automatically actuated as designed: train A and B reactor trip generated by the safety injection signal (all control rods inserted into the core), turbine trip, trip of both main feedwater pumps and feedwater isolation, phase 1 and 2 containment isolation, start of both motor driven auxiliary feed water pumps, start of the turbine-driven auxiliary feedwater pump on low-low steam generator water level, discharge of one bank of the main control room, air bottles, start of emergency filtered exhaust fan 1-VS-F-58A and associated ventilation damper alignment, start of emergency diesel- generator No. 1 (loading was not required), and AMSAC. In addition, operators manually initiated reactor trip, turbine trip, and safety injection in accordance with emergency operating procedure l-E-0, "Reactor Trip or Safety Injection".

This caused train B safety injection actuation and the following automatic safety system initiations:

start of emergency filtered exhaust fan l-VS-F-5813 and associated ventilation damper alignment, NRC Form 366A (6-89)

NRG FORM 366A US, NUCLEAR REGULATORY COMMISSION APPROVED 0MB NO, 3150-0104 (6-89) EXPIRES: 4/30/92 ESTIMATED BURDEN PER RESPONSE TO COMPLY Wl)'H THIS INFORMATION LICENSEE EVENT REPORT (LEA) COLLECTION REQUEST: 50,0 HRS, FORWARD COMMENTS REGARDING BURDEN TEXT CONTINUATION ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530); U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWORK REDUCTION PROJECT (3150-0104), OFFICE OF MANAGEMENT AND BUDGET, WASHINGTON, DC 20503, FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE (3)

Surry Power Station Unit 1 YEAR tl{f SEQUENTIAL NUMBER

    • ~;:;:

REVISION NUMBER oI s I ol o I 0 I 2 Is I 0 9 I3 - 0 I 0 I 1 - 0 I 0 ol 3 OF 017 TEXT (If mae space is required, use additional NRC Fam 366A's) (17) 1.0 - DESCRIPTION OF THE EVENT (CONT'D) discharge of the second bank of the main control room air bottles, and start of emergency diesel generator No. 3 (loading was not required)_ Safety systems functioned as designed except for source range neutron flux monitor N-31 [EIIS: IG, RI], which did not indicate as expected after its high voltage power supply re-energized followii:ig the reactor trip.

  • On January 9, 1993 at 0722 hours0.00836 days <br />0.201 hours <br />0.00119 weeks <br />2.74721e-4 months <br />, with Unit 1 at hot shutdown, a spurious initiation of train A safety injection occurred during testing after replacement of relay 3/4-CLS-lA. Following recovery from the January 8, 1993 reactor trip, troubleshooting of the Hi-CLS circuitry had continued. A temporary modJfication (TM), consisting of a jumper across contact 2 of safety injection actuation -relay CR-CLS-lAl, had been installed to maintain the train A safety injection signal in order to prevent additional spurious safety injection signals from occurring during troubleshooting. Relay 3/4-CLS-lA was replaced. Testing of the train A Hi-CLS was then performed with the jumper in place to prevent a spurious safety injection signal in the event relay 3/4-CLS-lA was not the only problem in the circuit.

After completion of testing, when the test terminate pushbutton was depressed, the train A safety injection signal occurred.

Following the safety injection signal, the following automatic actuations occurred as designed: train A safety injection, trip of the running main feedwater pump, start of both motor-driven auxiliary feedwater pumps, discharge of one bank of the main control room air bottles, start of emergency filtered exhaust fan l-VS-F-58A and associated ventilation damper alignment, and start of emergency diesel generator No. 1 (loading was not required). Safety injection was not manually initiated following the automatic initiation because the operators correctly diagnosed that the signal was-spurious.

This report is required by 10 CFR 50.73(a)(2)(iv), because automatic and manual engineered safety features actuations took place. -

2.0 - SIGNIFICANT SAFETY CONSEQUENCES AND IMPLICATIONS The Hi-CLS signal is designed to actuate safety injection and other engineered safety features systems upon receipt of a high containment pressure signal indicative of a loss of primary or secondary coolant inside containment. Although the Hi CLS signal and the safety injection signal in this event were not caused by an actual high containment pre*ssure condition, plant systems functioned to place the plant in a safe and stable condition. Source range neutron flux monitor N-32 was operable and capable of

NRC FORM 366A (6-89)

  • U.S. NUCLEAR REGULATORY COMMISSION
  • APPROVED 0MB NO. 3150-0104 EXPIRES: 4/30/92 ESTIMATED BURDEN PER RESPONSE TO COMPLY WITH THIS INFORMATION LICENSEE EVENT REPORT (LER) COLLECTION REQUEST: 50.0 HRS. FORWARD COMMENTS REGARDING BURDEN TEXT CONTINUATION ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530), U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWOR_K REDUCTION PROJECT (3150-0104). OFFICE OF MANAGEMENT AND BUDGET, WASHINGTON, DC 20503. .

FACILITY NAME (1) DOCKET NUMBER 12) LEA NUMBER (6) PAGE(3)

IJ~~~~

SEQUENTIAL REVISION YEAR

ttf NUMBER NUMBER Surry Power Station Unit 1 oI s I ol o I 0 1218 I 0 9 I3 - 0 I 0 I 1 - 0 I 0 014 OF ol 7 TEXT (II more space is required, use additional NRC Fam 366A's) {17) 2.0- SIGNIFICANT SAFETY CONSEQUENCES AND IMPLICATIONS (CONT'D) performing its safety functions. There were, therefore, no adverse consequences to public health and safety.

3.0 - CAUSE OF THE EVENT A root cause evaluation determined that the January 8, 1993 Hi CLS initiation was caused by intermittent cycling of relay 3-CLS-lAM. This relay is normally energized and _de-energizes on a Hi-CLS signal. It is de-energized during logic testing and is re-energized at the conclusion of testing

. by depressing the test terminate pushbutton. During the troubleshooting steps, relay 3-CLS-lAM energized, resulting in the test switch returning to normal because the test terminate pushbutton was being held in. It then quickly de-energized, initiating the train A Hi-CLS and safety injection as designed. The root cause evaluation team identified two conditions which could have caused the spurious cycling.

First, the negative lead on relay 3/4-CLS- lA was found to be loose during relay replacement. The loose connection could have caused an intermittent cycling of relay 3-CLS-lAM, since ihe negative terminal of 3-CLS-lAM was wired to the negative terminal of 3/4-CLS- lA.

The second condition was high resistance across contact 9 on relay 3/4-CLS- lA, which could cause an intermittent cycling of relay 3-CLS-lAM. The high resistance was caused by oxidation and dust accumulation.

The failure of source range neutron detector N-31 to indicate was due to a short circuit condition across the center conductor and the inner shield of its signal cable. The short circuit was detennined to be internal to the detector and was the result of age-related degradation.

The January 9, 1993 safety injection initiation was caused by testing the Hi-CLS logic before removing the jumper instaUed to maintain the train A safety injection signal. Testing before removal of the jumper was the result of cognitive error.by licensee engineering personnel.

During preparation and review of the TM and associated safety evaluation, it was decided that testing should be performed with the protection of the jumper. This decision was based on the understanding that a failure of the test switch had possibly contributed to the spurious Hi-CLS actuation and that the jumper would prevent additional actuations. During the Hi-CLS actuation on January 8, 1993, personnel at the relay cabinet had not seen or heard relay 3-CLS- lAM cycle. This relay is required to

NRC FORM 366A (6-89)

  • U.S. NUCLEAR REGULATORY COMMISSION
  • APPROVED 0MB NO. 3150-0104 EXPIRES: 4130/92 ESTIMATED BURDEN PER RESPONSE TO COMPLY WITH THIS INFORMATION LICENSEE EVENT REPORT (LER) COLLECTION REQUEST: 50.0 HRS. FORWARD COMMENTS REGARDING BURDEN TEXT CONTINUATION ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530), U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWORK REDUCTION PROJECT (3150-0104). OFFICE OF MANAGEMENT AND BUDGET, WASHINGTON, DC 20503.

FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE(3)

Surry Power Station Unit 1 YEAR rrir SEQUENTIAL NUMBER ttf REVISION NUMBER ol sl ol o I o I 2 Is Io 9 13 - 0 I 0 I 1 - 0 I 0 ols OF ol 7 TEXT (II mae space Is required, use addiional NAC Fam 366A's) (17}

3.0 - CAUSE OF THE EVENT (CONT'D) energize in order for the test switch to return to normal. Since the personnel at the cabinet did not detect any cycling of relay 3-CLS-lAM, their first indication of the Hi-CLS actuation was the sound of the iest switch unlatching and returning to normal. This led to the belief that the test switch may have returned to normal without the required relay actuation. The sequence of events recorder later showed that relay 3-CLS-lAM had actually cycled twice within a 0.3 second interval. Therefore, the relay actuation had occurred but was not detected.

The NSSS vendor elementary diagram for safety injection was reviewed to determine if testing before jumpei: removal would create any adverse effects. This drawing indicated that no spurious actuations would occur; however, the drawing did not show contact 2 of test switch TS-CLS-lA, which is in series with the jumpered contact. The test switch contact initiated the spurious safety injection signal when it was opened then re-closed, which de-energized then re-energized the safety injection output relay, during the testing sequence. The station elementary diagram for Hi-CLS correctly shows the two contacts in series.

4.0 - IMMEDIATE CORRECTIVE ACTIONS Following the Hi-CLS actuation and the safety injection actuation, operators used the appropriate emergency operating procedures to stabilize the plant. The shift technical advisor reviewed the critical safety function status trees to ensure plant parameters remained within safe bounds.

5.0 - ADDITIONAL CORRECTIVE ACTIONS A multi-discipline root cause evaluation team was formed to investigate the event.

Relay 3/4-CLS-lA and source range/ intermediate range detector assembly N-31/N-35 were replaced.

Evaluations of the causes of the component failures were conducted.

After completion of the required repairs, testing, and post-trip reviews, Unit 1 was restarted. The unit was critical at 0701 hours0.00811 days <br />0.195 hours <br />0.00116 weeks <br />2.667305e-4 months <br /> and ori line at 1507 hour~ on January 11, 1993.

6.0 - ACTIONS TO PREVENT RECURRENCE Single point relays (relays whose failure could cause spurious safety system actuations) will be identified. The feasibility of modifying circuitry to remove single point failures will be evaluated.

NRC FORM 366A

'(6-89)

  • U.S. NUCLEAR REGULATORY COMMISSION
  • APPROVED 0MB NO. 3150-0104 EXPIRES: 4/30/92 ESTIMATED BURDEN PER RESPONSE TO COMPLY WITH THIS INFORMATION LICENSEE EVENT REPORT (LER) COLLECTION REQUEST: 50.0 HRS. FORWARD COMMENTS REGARDING BURDEN TEXT CONTINUATION ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530), U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWORK REDUCTION PROJECT (31~0-0104). OFFICE OF MANAGEMENT AND BUDGET, WASHINGTON, DC 20503.

FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE(3) ftt SEQUENTIAL REVISION YEAR

=~:::::::::: NUMBER t::.:::i NUMBER Surry Power Station Unit 1 ol sl ol o I 0 I 2 Is I 0 9 I3 - 0 I 0 I 1 - 0 I 0 ol 6 OF ol 7 TEXT (lfm<<e space is required, use additional NRC Fam 366A'6) (17) 6.0 - ACTIONS TO PREVENT RECURRENCE (CONT'D)

Preventive maintenance and/or periodic replacement ~f these relays will be evaluated.

The incomplete NSSS vendor elementary diagram will be updated.

The e\Tent will be discussed in training sessions for safety evaluation preparers and reviewers.

7.0- SIMILAR EVENTS Licensee Event Report 50-280/88-029: A reactor trip and safety injectio_n occurred due to spurious initiation of train A Hi-CLS during performance of a periodic test. The spurious Hi-CLS initiation was caused by failure of a contact in relay 3-CLS-lAM to close when the test terminate pushbutton was depressed. The relay was replaced.

8.0 - ADDITIONAL INFORMATION Failed Components:

a. Westinghouse Model BFD44S relay
b. Westinghouse Source and Intermediate Range Detector Assembly - Part No. WL 23823 NRC For~ 366A (6-89)

PN_R_C_F_O_R_M_366_A---*--------------U-(6-89)

  • ..S-.-NU_C_LEAR
  • __R_EG_U_LA_T_O_RY_CO-M-M-ISS-ION-,,.....---------A-P_P_R_O_V_E_D_O_M_B_N_0___3_1S0-0--1-04---------,

EXPIRES: 4/30/92 ESTIMATED BURDEN PER RESPONSE TO COMPLY WITH THIS INFORMATION LICENSEE EVENT REPORT (LER) COLLECTION REQUEST: 50.0 HRS. FORWARD COMMENTS REGARDING BURDEN TEXT CONTINUATION ESTIMATE TO THE RECORDS AND REPORTS MANAGEMENT BRANCH (P-530), U.S.

NUCLEAR REGULATORY COMMISSION, WASHINGTON, DC 20555, AND TO THE PAPERWORK REDUCTION PROJECT (31S0-0104). OFFICE OF MANAGEMENT AND .

BUDGET, WASHINGTON, DC 20503.

FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE(3)

YEAR f'% SEQUENTIAL NUMBER REVISION*

NUMBER Surry Power Station Unit 1 050002809 3 0 0 1 0 0 0 7 TEXT (II moro IP"C* lorequirod, ... addllonal NRC F<<m 366A'o) ( 17)

~XI 3 IS 3 ~SET IS 3 o..s PUSHlUTTON }- TEST TEANl,..TE I~

q IAII ltllllN CONTROL 80 Q.OSEII IN RESET 8 TS 12 3 l'IISKIUTTON CLS 0..S TS 6 IA Wt CLS a.osm CLS IA IN TEST II q

3/4 CI.S RESET PERMISSIVE o-------i----,

TEST

,...__STAYS IN -

FCII THIS TEST

. II . ITHIS IS A DIFFEIEIT 3 3-Q.S TS-Q.S*IA TEST IIIITCla CI.S

  • IIM*X IOPEN IN TESn IOH*X 314 3 CR 3 TS 0..S IA 0..S WI a.s IAI .......

CLS CLS IA

~ CONTACT 2 TEST SWITCH

~

1 0..DSm 111£N AEUY CR zCI.Sl IAIHI 0..5 3:1LS :

TEST

_ c::TIIC~NTEST IN ~~c'------------~---~------,--,

+-------T IS EIEAGIZED 6r-1 ~

-ro-sr----- ~ 1

,., ------~

l'IISIEJ - .

z CONT.CT Z

  • CR O..S IAI ca.DSED 1111 tt a.s

. NIIAT!tlO Figure 1 Hi-CLS Simplified Logic Schematic NRC Form 366A (6-89)