ML20028E958

LER 82-068/03L-0:on 821220,core Imbalance Vs Core Power Limit Computer Alarm C963 Inoperable.Caused by Mistake in Alarm Subroutine.Alarm Statement Corrected So Limits & Value for Imbalance Scaled Same

ML20028E958
Person / Time
Site:	Davis Besse
Issue date:	01/19/1983
From:	Tabbert J TOLEDO EDISON CO.
To:	NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION III)
Shared Package
ML20028E954	List: ML20028E953 ML20028E958
References
LER-82-068-03L, LER-82-68-3L, NUDOCS 8301280299
Download: ML20028E958 (2)

Text

NRCIOkM 366 U.S. NUCLEAR REGULATC~;Y COMMISSION (7-77)

LICENSEE EVENT REPORT CONTROL BLOCK: l 1

l l l l l lh 6

(PLEA,SE PRINT OR TYPE ALL REQUIRED INFORMATION) lo l t8 l9l 0 l11 l D l B l S14l 1 15l@l 0 l0 l- l LICENSE 0 l0 lNUMBER

$ l 0 l$ l- lf3 l 250 l@l4 26 l1 l1 l1 LICENSE TYPEl1JOl@l57 CAT l

$8

[g 7 LICENSEE CODE CON'T 7

O 1 8

$$RcE 60 l L l@l 61 015 DOCKET l0 l 0NUMBER l0 l3 l 4 l 686 l@l1 69 l EVENT 2 l 2DATE l0 l 8 l 742 @l 75 0 lREPORT 1 l 1DATEl 9 l 880l 3 l@

EVENT DESCRIPTION AND PROB ABLE CONSEQUENCES h O 2 l (NP-33-82-87) on 12/20/82, it was determined that the Core Imbalance vs. Core Power l 10 l a I l Limit Computec Alarm, C963, was inoperable. This invoked Tech Spec Surveillance Re- l 1014l lquirement 4.2.1 which requires increased surveillance of the axial power imbalance l o 3 lwith the computer alarm inoperable. There was no danger to the health and safety of l.

O s Ithe public or station personnel. The function of computer alarm C963 is to assure thel l 0 l 7 l l operator that imbalance is maintained within its limits. With C963 inoperable, only l l O 1a ] l increased surveillance is required. l 80 7 8 9 DE CODE S BC E COMPONENT CODE SU8 CODE SU E O 9 9

lI lF l@ y@ ]@ l Zl Zl Zl Zl Zl Zl@ g@ g @

10 12 13 18 19 20 7 8 11 SEQUENTIAL OCCURRENCE REPORT REVISION

_ EVENT YE AR REPORT NO. CODE TYPE .

@ ~"LE UE R/RO I 8l 2l 21 22 l-l 23 le l618 i 24 26 W

27 10l31 28 29 6

30 l-l 31

@N 32 KEN AC . ON PL NT MET 22 S8 i FOR B. SUPPLI MANUF C RER lXl@[X_j@ 34 lZ 35 l@ l36 Zl@ l N1 37 7URSl Nl 40 l @@

48 lNlg 42 g g 43 lZl9l9l9lg 44 47 33 CAUSE DESCRIPTION AND CORRECTIVE ACTIONS h .

, IiI0llThe cause was a mistake in the alarm subroutine. The value for imbalance was in deci-l

, i i l mal form and was being compared to the limit which was in a percent form. On 12/20/82l l

,, ,7, lapproximately 30 minutes after the problem was discovered, the alarm statement was l i a lcorrected so that the limits and the value for imbalance were scaled the same. Other l i 4 l computer alarms which are used to reduce surveillance requirements were verified to be; operable. 80 7 8 9 ST S  % POWER OTHER STATUS 15 RY DISCOVERY DESCRIPTION 32 i s W@ l 0] 919l@l NA l W@l Discovered by Technical ServYces Engrs l A TivlTY CO TENT RELE ASED C* RELE ASE AMOUNT OF ACTIVITY LOCATION OF RELEASE NA l t lc l {Z J @ [Z_jg[NA l l l

PERSONNEL EXPOS ES NUMBER TYPE DESCRIPTION l

I i 171 101010 l@LZJ@l"^

PERSONNE L INJURIES l hUMBER DESCRIPTION l t j a l l 0 l 0 l 0 l@l NA l 7 8 9 11 12 80 LOSS OF OR DAMAGE TO FACtLITY Q TYPE DESCRIPTION N/

l l

l 7 1 9 8 9 W hlNA 10 80 PuetiCiTY 8301280299 830119 NRC USE ONLY

• ISSUE D PDR ADOCK 05000346

, l 2 l 0 l W@j DESCRIPTION NA ,3 S PDR I lllllllllIlll5 7 8 9 10 68 69 80 5 0

e ,

i TOLEDO EDISON COMPANY DAVIS-BESSE NUCLEAR POWER STATION UNIT ONE SUPPLEMENTAL INFORMATION FOR LER NP-33-82-87 DATE OF EVENT: December 20, 1982 .

FACILITY: Davis-Besse Unit 1 IDENTIFICATION OF OCCURRENCE: Computer Alarm C963, Core Imbalance vs.

Core Power Limit was discovered to be inoperable Conditions Prior to Occurrence: The unit was in Mode 1, with Power (MWT) = 2740 and Load (Gross MWE) = 923 Description of Occurrence: During the running of Surveillance Test ST 5033.03, Incore Instrument Channel Calibration, the computer alarm C963 could not be alarmed by the method. described in the procedure. At first it was thought that the test method was incorrect. After an investigation

! of the software, it was found on December 20, 1982 that the value for imbalance was in decimal form whereas the limits were in a' percent form .

j (i.e., the value for imbalance was a factor of 100 smaller than the t

limits). Therefore, the alarm was inoperable.

l l As per Technical Specification Surveillance Requirement 4.2.1, if the alarm is inoperable, increased surveillance was required.

Designation of Apparent Cause of Occurrence: The cause of the event was due to a software mistake in the alarm subroutine.

l l Analysis of Occurrence: There was no danger to the health and safety of the public or station personnel. The function of computer alarm C963 is to assurc the operators that imbalance is maintained within its limits.

With the computer alarm C963 inoperable, only increased surveillance is l required. During the time computer alarm C963 was inoperable, the plant did not experience any adverse conditions. Also imbalance was checked once per shift with no indications of the value to be outside the limits.

. Also, imbalance is monitored by the Reactor Protection System (flux-aflux-flow) which was not exceeded.

Corrective Action: Approximately one half hour after the problem was discovered, a Station Programmer, under the direction of a Technical l Services Engineer, changed the alarm statement for the computer alarm C963 so that the limits and the value for imbalance were scaled the same.

Babcock and Wilcox was notified, and they are producing a Software Change l _ Notice (SCN). ,

, Other computer alarms which are used to reduce surveillance requirements l were verified to be operable. Also, these computer alarms will be func-l tionally tested when Technical Specifications require program changes. In

( the future, these computer alarms will be qualitatively checked for operability on a shift basis.

Failure Data: There have been no previous occurrences. -

LER #82-068