ML20237J424

From kanterella
Jump to navigation Jump to search
Evaluation of Integrated Control Sys
ML20237J424
Person / Time
Site: Rancho Seco
Issue date: 08/05/1987
From: Croley B, Humenansky D, Moyer R
SACRAMENTO MUNICIPAL UTILITY DISTRICT
To:
Shared Package
ML20237J375 List:
References
NUDOCS 8708180175
Download: ML20237J424 (29)


Text

_ - _ - _ - _ _ _ _ _ _ _ _ _ _ - _ _ _ _ - _ - _ - _ _ - - _ _ _ - - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - - _ _

of

f EXPANDED AUGMENTED SYSTEM REVIEW AND TEST PROGRAM (EXPANDED ASRTP)

EVALUATION 0F THE INTEGRATED CONTROL i:

SYSTEM SUBMITTED BY:

/

DATE: 88-C/-67 '

<<r

/-

RICHARD M0YER

/

TEAM LEADER

' f'O DATE:

CONCURRENCE:-

t V10 HUMENANSKY.

EXPANDED ASR PROGRAM M ER

[/I/d7 CONCURRENCE:

DATE:

/.B0B CROLEY

\\

//

DIRECTOR, NUCLEAR TE NICAL SERVICES i

1 K

8708190175 870810 PDR ADOCK 05000312 G

PDR

L' s.

L..

n TABLE OF CONTENTS

l j _'

Page Numby; f0-1.0 -INTRODUCTION 3

l 2.0: PURPOSE' 4-3.0 SCOPE 5

f. c 4,0 OVERALL RESULTS AND CONCLUSIONS 6

I.-

5.0 DETAILED OBSERVATIONS - REQUESTS FOR'INFORMATION 8

6.0 ATTACHMENTS.

23' 6.1 List of Documents Reviewed

6.2 Status of RIs

\\

l i

4

}

I a.

1 i

________.____.s.

EXPANDED AUGPENTED SYSTEM REVIEW AND TEST PROGRAM b

EVALUATION OF THE INTEGRATED CONTROL SYSTEM

1.0 INTRODUCTION

l

-The Rancho Seco Expanded Augmented System Review and Test Program

[ASRTP) evaluation effort involves an assessment of the effectiveness of the. System Review and Test Program [SRTP] and an analysis'of the adequacy of ongoing programs to ensure that systems will! continue to f,nction properly after restart. The Expanded u

ASRTP is a detailed system by system review of the SRTP as implemented on 33 selected systems and an in-depth review of the engineering, modification, maintenance, operations, surveillance, inservice testing, and quality programs.

It also conducts a review, h

on a sampling basis, of many of the numerous ongoing verification and' review programs at Rancho Seco.

Six multi-disciplined teams composed of knowledgeable and experienced personnel are tasked with performing the Expanded ASRTP. Each multi-disciplined team consists of dedicated personnel with' appropriate backgrounds to evaluate the operations, maintenance, engineering, and design functional areas.

Independence, perspective, and industry standards provided by team y

members with consultants, architect engineer and vendor backgrounds are joined with the-specific plant knowledge of SMUD team members.

\\

Eaca team performs an-evaluation on a selected system using the same g

fundamental evaluation techniques employed by the NRC in the ASRTP inspection. System Status Reports are used as the primary source of leads for the teams.

They are augmented with references to available source and design bcses documents as needed. Team synergism and communication is emphasized during the process in order to enhance the evaluation.

Each team prepares a final report for each rompleted selected system evaluated. This report is for the Integrated Control System.(ICS).

l 3

g t;.;

?^'#

2 0 PURPOSE 4,,

.The' objectives of the Expanded ASRTP. evaluation are to (1)' assess Lthe adequacy of: activities and systems in support of restart and (2) evaluate the 'ef festiveness o,f ' established programs for' ensuring-

.saf ety during plant operation af terc restart.

~

l 'l

.{

f

< s[

Pt 9

5

\\

1 f

6 i

3.0 SCOPE To accomplish the first objective, the Control Systems team evaluated the Integrated Control System to determine whether:

1.

The system was capable of performing the functions required by its design bases.

-2.

Testing was adequate to demonstrate that the system would perform all of the functions required.

3.

System maintenance was adequate to ensure system j

operability under postulated accident conditions.

4.

Operator and maintenance technician training was adequate to ensure proper operations and maintenance of the system.

5.

Human factors relative to the system and the system's supporting procedures were adequate to ensure proper system operations under normal and accident conditions.

\\

To accomplish the second objective, the Control Systems team reviewed the programs as implemented for the Integrated Control System in the following functional areas:

E 1.

Systems Design and Change Control

\\

2.

Maintenance 3.

Operations and Training 4.

Surveillance and Inservice Testing 5.

Quality Assurance 6.

Engineering Programs The Control Systems team reviewed a number of documents in preparation for and during the Expanded ASRTP evaluation. This list of documents is found in Attachment 1.

l The primary source of leads for the team were the problems

-l identified in the ICS System Status Report. Various source documents such as the USAR and Ter.hnical Specifications and

)

available design bases documents were reviewed as needed to augment

(

the information needed by the team.

I The evaluation of the Integrated Control System included a review of l

i pertinent portions of support systems that must be functional in order for the Integrated Control System to meet its design objectives.

5

4.0' OVERALL RESULTS AND CONCLUSIONS The more significant issues identified pertaining to the adequacy of the SRTP and the ef festiveness of programs to ensure continued safe operations af ter restart are summarized below.

The summary focuses on the weaknesses identified during the evaluation. Section 5.0 provides detailed findings by providing the Request for Information (RI) forms that are used by the Expanded ASRTP teams to identify potential concerns during tne evaluation. The numbers in brackets after each individual summary refer to the corresponding RIs in Section 5.0, 4.1 Engineering Design 4.1.1 ICS devices may be calibrated to incorrect setpoints.

ICS devices are presently set using information from calibration records which are not controlled documents. The calibration records provide no source for their setpoint content and no mechanism exists in design modification procedures to ensure setpoint changes are documented and incorporated into the plant' design.

Incorrect setpoint actuations could result in unexpected plant control or prevent actuations from occurring at their required design values.

(RI-036)'

4.1.2 The intended sequential cperation of Turbine Bypass Valves (TBVs), Atmospheric Dump Valves (I.DVs) and Main Steam Relief g

Valves (MSRVs) may not be achievable due to possible overlapping of the actuation setpoints as a result of setpoint tolerances. Of particular concern is the possible opening of ADVs prior to the TBVs in the event of tube rupture which coulo cause unnecessary atmospheric releases.

Compounding the problem is a large number of discrepancies in the setpoints and their tolerances due to a lack of a single setpoint source document (Ref: Item 4.1.1) and calculations which lack consistency in approach and crosc referencing of source information.

(RI-028) 4.1.3 Inadequate design analysis and documentation exists for i

determination of adequate sizing of Integrated Control System (ICS) breakers lJ04 and 1C07.

ICS System Status Report Problem No.18 discussed discrepancies in the two breaker sizes (30 amp vs 40 emp) and provided a resolution of analysis to determine the correct breaker capacity.

However, the conclusion of the resulting analysis did not support the replacement of the 30 amp breaker with a 40 amp breaker and did not determine actual loads in reaching the j

conclusion. This may reduce plant availability / reliability '

and may damage equipment if the breaker is oversized.

(RI-096) 6 l

o

  • OVERALL RESULTS AND CONCLUSIONS (Continued) 4.2 Programmatic Concerns 4.2.1 Engineering Change Notices (ECNs) are being closed without all modifications being performed, which could lead operators to take inappropriate or ineffective actions.

ICS System Status Report Problem #46 identified the necessity of replacing shunt trip switch labels for ICS and NNI.

The ECN incorporating the modification was closed without the labels for NNI being replaced.

(RI-039) 4.2.2

.No program exists to recall or void active work requests for Preventive Maintenance (PM) tasks when a new or modified PM task is entered into the system. PM tasks are not identified by revision, and the potential exists for the earlier work request based on the superseded PM task to be worked af ter the revised PM task work request which could cause incorrect maintenance to be performed.

(RI-074) 4.3 Testing 4.3.1 The ICS functional test appears inadequate to verify errors in the system which may have resulted due to the massive

. rework of terminations resulting from an identified cause of g

the December 26, 1985 trip as noted in ICS System Status Report Problem #10.

Quality Control inspection was requested and performed on the quility of the terminations only. Recent documented findings show that some terminations were not made to their correct locations.

This is of particular concern since the team noted that a plant t

trip af ter restart resulted at Davis-Besse f rom an ICS wiring discrepancy which was undisclosed during ICS functional testing. (RI-080) 7

5.0 DETAILED OBSERVATIONS - REQUEST FOR INFORMATION During an evaluation, all potential concerns are documented on.

Request for Information sheets (RIs) that are sent to the responsible organization to receive their input concerning the potential concern. RIs are also used to regyest information that the EASRTP team is having difficulty obtaining.

These RIs are considered drafts throughout the entire evaluation until they become part of the final report.

Responsible organizations can accept the potential concern as valid or they may disagree with the potential concern.

If they disagree, they can submit information that convinces the EASRTP team members that the potential concern is not valid, or they may redirect the EASRTP members to better focus.the concern.

RIs developed during the system evaluation comprise th s section of the report. of the report provides RI status as of this report date. An RI is considered closed if the Team Leader was convinced a potential concern was not valid or not significant enough to be an RI.

An RI would also be closed if requested information was provided.

All other RIs are open.

Acknowledged RIs are open RIs that have been accepted as valid by the responsible organization, i

Approximately one week will be provided after the report is issued to provide time for departments to address each RI for validity. A j

revision to Attachment 2 will then be issued to reflect the status of RIs. All RIs not acknowledged at the end of this period will have an "Open" status.

RIs are then transferred into the Restart Scope List tracking system for resolution and corrective action implementation.

1

}

8

4 REQUEST FOR INFORMATION (RI)

RI NO: 028 SYSTEM CODE:

ICS ISSUE DATE: 7-23-87

SUBJECT:

SETPOINTS FOR THE STEAM BYPASS SYSTEM DEPARTMENT:

NUCLEAR ENGINEERING COORDINATOR:

RON LAWRENCE TEAM MEMBER:

SINGH BAGGA TEAM LEADER:

RICH M0YER POTENTIAL CONCERN /00ESTION:

The intended steam bypass system operation according to the' Main Steam System (MSS) design bases document is to open Turbine Bypass Valves

'(TBVs), Atmospheric Dump Valves (ADVs) and Main Steam Relief. Valve (MSRV) sequentially in this order which may not be achievable due to the overlap i

of set points (S.P.) for these valves when the set point tolerances are taken into consideration. The overlapping of the set points could cause ADVs to open prior to opening TBVs which could release unnecessary radioactivity to the atmosphere in the event of tube rupture.

The plant personnel were unable to provide the documents supporting the selection of the setpoints for the TBVs and ADVs.for review. Several discrepancies were noted among the documents for the setpoint values and the setpoints are not controlled through any established method or z

procedure within the organization.

OVERLAP OF THE SETPOINTS FOR TBVs. ADVs AND MSRVs:

First MSRV S.P. (psig)

ADV's S.P. (psig)

  • TBVs S.P. (psig)

Nominal

  • Min
  • Nominal
  • Max
  • Min
  • Nominal
  • Max 1000
  • 990
  • 1020 *1050
  • 1035
  • 1050
  • 1050 *
  • Calculation #
  • Process standards
  • AP-150 p.16
  • Table 3
  • Z-EFI-10146 p. 6 DISCREPANCIES IN ADVs SEPTOINT LOOP ERRORS:

After reviewing the calculations 2-EFI-10146 Rev. O and Z-EFI-10157 Rev. O, Process Standards AP-150 Rev.14 and System Desi.gn Bases l

(SDB) for ICS Rev. 1 draft, the following concern is noted:

Calc Z-EFI-10146 Pages 6 & 43 1020.117 psigi30.05 psig Calc Z-EFI-10157 Page 2 1020 psigi25 psig I

9 i

2

~

POTENTIAL CONCERN /00ESTION:

After' reviewing'ICS SSR Rev. 1, System design basis for ICS Rev. 1 draft and MSS Rev.'1 draf t, System Description N21.01-112 Vol. 2 and Plant

.Operat ng Proce ures B.2 Rev. 38, Engineering Change Notice (ECN) A-5415 i

d Rev.1, the following discrepancies were noted:

DISCREPANCIES IN SETPOINT FOR THE TBVs CONTROL ON REACTOR TRIP:

ICS SSR p. 2-7 para 2.2.2.d 1015 psig ICS SDB p.13 Table 3 1000 psig MSS S08 p. 5 para 2.2 125 psi above normal S.P. of 885 psig=1010 psig B & W-ICS final documentation 125 psi above normal s.p.

Sheet IC 5 of 8 System description p. 3.4 115 psi above normal S.P. of 885 psig=1000 psig ICS Schematic Diagram N21.01-72 Rev. 6 115 psi above normal S.P.

ICS Calibration record j

pp.129 & 130 115 psi above normal S.P.

DISCREPANCIESINSETPOINTFORTHET8VsCONTROLONTURBINETRIP:

MSS SOB p. 5 para 2.2 pressure control point biased by small amount ICS SOB p.13 Table 3 setpoint changes from 935 psig to 885 psig DISCREPANCIES IN SETPOINT FOR THE TBVs CONTROL DURING NORMAL OPERATION

  • ICS SDB p.13 Table 3 935 psig MSS SOB p. 5 para 2.2 885 psig Plant Operating Procedure B.2 Rev. 38 p. 29 935 psig (885+50) f 10

-- ----- a

1 1

POTENTIAL CONCERN /0VESTION:

ADV CONTROL:

MSS SDB' ppa 30 & 31 para 6.2.1 ICS Controls ADVs l\\

ICS'SDBp.l13 Table 3 ICS Controls.ADVs ECN A-5415 Rev.1 Emergency Feedwater Initiation and. Controls (EFIC) Controls ADVs

.f T8Vs OVERRIDE:

.ICS' SDB p.13 Table 3 1035 psig Calibration Records 1050 psig After reviewing calculations Z-EFI-10146 Rev. O and Z-EFI-10157 Rev. O, the following discrepancies were noted:

ADV Setpoint is 1020.117" 7-EFI-IO146 p. 6 item 3.a Max. error in ADV control loop pp. 35 & 43 130.45 psig vs 130.05 psig EADVL=1200 x 2.5%=130.05 psig

p. 43 f.1. j
p. 36 & 39' Error direction (+ or -) not called out consistently.

\\

. Assumption for the error is 2%

Z-EFI-10157 p. 22 of Upper Range Limit (URL) but calculation uses 2% of calibrated span.

Assumption for the errors in Buffer and Control Module is not considered.

Reference for the nominal value of setpoint is not called out.

Error direction (+ or -) not i

called out consistently.

ADV CONTROL LOOP ERROR INCONSISTENT:

Total loop error 130.05 psig

}

Z-EFI-10146 pp. 35 & 43 i

2-EFI-10157.pp. 2 & 22 Total loop error 125 psig 1

The calculations are not cross-referenced (in Z-EFI-IO157) l l

11 I

I

- 1

REQUEST FOR INFORMATION (RI)

~

RI NO: 036 SYSTEM CODE:

ICS ISSUE DATE: 7-27-87 i

SUBJECT:

CONTROL SETPOINTS DOCUMENTATION DEPARTMENT:

NUCLEAR ENGINEERING COORDINATOR:

RON LAWRENCE TEAM MEMBER:

JEFF IRWIN TEAM LEADER:

RICN MOYER I

POTENTIAL-CONCERN /00ESTION:

I Integrated Control System devices may be calibrated to incorrect l

setpoints.

l 1.

ICS setpoints are not in process standards and the plant could not i

produce another controlled setpoint document.

I&C shop calibration i

records appear to have complete electronic hardware settings and are archived but not controlled.

2.

Programmatic control of implementing new or modified setpoints is unclear.

Review of procedures for generation, implementation and turnover of modification packages (NEP-4109, RSAP-803 and AP44) revealed no directions for addressing setpoints. There is no guidance on analyzing, documenting and transmitting design setpoints and tolerances. There is no flow chart for implementing design setpoints and disseminating setpoints to setpoint documents and training.

\\

3.

Plant was unable to provide cross reference to, or assurance of existence of loop error analysis for setpoints and/or indication, providing uncertainty in meeting USAR, Technical Specifications, Regulatory and functional requirements for ICS and other plant systems.

4.

No controlled documentation of module functions exists. Maintenance and modifications require detailed knowledge of signal functions including engineering units.

Process Standards is a partial setpoint document of selected 5.

instruments.

It does not reference support documents and does not provide signal to engineering unit conversions.

12

-- n

l REQUEST FOR INFORMATION (RI)

RI NO: _Oli SYSTEM CODE:

ICS ISSUE DATE: 7-27-87

SUBJECT:

LABELING OF NNI SHUNT TRIP SWITCHES-ECN CLOSURE l

DEPARTMENT:

NUCLEAR ENGINEERING C0ORDINATOR:

RON LAWRENCE j

TEAM MEMBER:

P. WAGNER TEAM LEADER:

RICH M0YER POTENTIAL CONCERN /0VESTION:

1 Engineering Change Notices (ECNs) are being closed without all modifications being performed, which could lead operators to take inappropriate or ineffective actions.

4 According~to the ICS System Status Report Problem #46, S1 and S2 Shunt Trip Switches were not labeled to provide positive indication that the switches were in a tripped condition.

i According to the ICS System Status Report, "ECN R-0472 relabeled breakers Si and S2 on the ICS and NNI so that positive indication of these breakers being open can be determined without question."

ECN R-0472 Rev. O specified relabeling S1 and S2 on the ICS alone.

4 (ECN is closed)

I ECN R-0580 Rev. O specified relabeling Sl\\and 52 on the NNI. The Design Basis Report states:

"In addition labels will be added to Si and S2 in the X and Y power distributions to aid the operator in determining switch position."

(ECN is closed)

The plant could not produce another ECN that labels NNIs S1 and 52.

A walkdown of the NNI verified that labels have not been added to

)

J NNIs S1 and S2.

Work Request 114092 included replacing NNI Si and S2 labels but was a

closed without the work being performed.

'There is a potential that the operator, attempting to find the cause of an NNI loss of power may not be able to identify that the 51 and S2 switches are tripped.

This happened on identical switches in the ICS on December 26, 1985.

ECN R-0580 was released to operations without all work specified in 9

the ECN completed. This does not meet the intent of AP44 Plant Modification procedure which states prior to ECN release installation, testing, and design of the modification must be complete. Contributing to this concern is that a work request had been written to cover the work in question and was signed as completed, but the total work was not performed.

j l

13 1

o REQUEST FOR INFORMATION (RI)

.e

. f..

RI NO: 043 SYSTEM CODE:

ICS -

ISSUE DATE:

7-24-87

SUBJECT:

ICS SHUNT TRIP SWITCHES S1 AND S2 PERFORMANCE LIFE EXPIRES PRIOR TO REPLACEMENT DEPARTMENT:

MAINTENANCE COORDINATOR:

JIM DARKE TEAM MEMBER:

P. WAGNER TEAM LEADER:

RICH MOYER

{

POTENTIklCONCEPN/00ESTION:

ICS and NNI shunt trip switches (S1 and S2) may not be functional, prior to scheduled replacement because the Preventative Maintenance (PM) Task i

does not account for shelf life.

The manufacturer of the switches stated that they would not guarantee the switches for longer than five years after the switch leaves the factory.

(per Engineering Report (ERPT I-0010)

The PM Task (05608) for replacement of the switches has a performance interval of 1825 days (five years) and does not account for shelf life.

Therefore, since shelf life is not considered, a period will exist' when the switch is installed'in the field and is no longer guaranteed by the manufacturer.

Failure of these switches could,mean a spurious loss of ICS power or a f ailure to trip ICS power.

14 l

__________________________________________________________J

1 d

REQUEST FOR INFORMATION (RI)

RI NO: 073 SYSTEM CODE:

ICS ISSUE DATE:

7-29-87

SUBJECT:

USAR DESCRIPTION OF ICS DEPARTMENT:

LICENSING COORDINATOR:

'J.

DELE 21NSKI TEAM MEMBER:

JEFF IRWIN TEAM LEADER:

RICH M0YER POTENTIAL CONCERN /00ESTION:

USAR description of functioning of ICS control stations on loss of power is incorrect.

USAR, including amendment 5 revisions, section 7.2.3.3.1, is incorrect in stating " Loss of electrical power to automatic control i

stations reverts the control system to Manual."

The Bailey 720 design such as Oconee and TMI operate in this manner, but the Bailey 820 design used at Rancho Seco has both automatic and manual control being powered from the same DC source.

N

\\

4 e

15

).Gt' 41

,'S; I

REQUEST FOR INFORMATION (RI) x RI NO: 074-SYSTEM CODE:

ICS ISSUE DATE: 7-29-87

.i t

SUBJECT:

REVISIONS TO PM TASKS DEPARTMENT: MAINTENANCE COORDINATOR:

J.!DARKE' TEAM MEMBER:

JEFF IRWIN

. TEAM LEADER:

RICH'M0YER-j POTENTIAL CONCERN /0VESTION:

Superseded Preventive Maintenance (PM) tasks may be worked even though

.the respective new or modified PM tasks have been entered into the system.

No' procedures (ref. AP650) exist to recall active work. requests written by: PM tasks. when a new or modified PM task for the respective device is-entered into the PM system.

b PM tasks are~not identified by revision number.

As a result' work requests incorporating old directions may get.

worked after the revised modifications work request, causing e

incorrect maintenance.to be performed.

f

\\

i 16 1

n s

l ll

.o REQUEST FOR INFORMATION (RI)

RI NO: 080 SYSTEM CODE:

ICS ISSUE DATE: 7-29-87

SUBJECT:

. TESTING OF WIREWRAP REWORK IN THE ICS DEPARTMENT: SYSTEM ENGINEERING COORDINATOR:

JOHN ITTNER-TEAM MEMBER:

PAT WAGNER TEAM LEADER:

RICH M0YER POTENTIAL CONCERN /0UESTION:

The ICS functional test appears inadequate to detect errors resulting f rom termination rework; errors which could lead to a plant trip or to making a plant trip more complex.

Due to an identified cause of the December 26, 1985 trip, a bad lug in the ICS, a significant number (thousands) of terminations and wirewrap connections in the ICS were inspected and reworked.

(ICS System Status Report Problem 10)^

Quality Control inspection was requested and performed on the

+

quality of the terminations only.

Recent findings (Nonconformance Reports S-6603, S-6867) indicate some terminations were not returned to their proper location.

A discussion with an I&C Maintenance Engineer indicated that maintenance is relying on the ICS Functideal Test (Special Test Procedure STP.778) to find any discrepancies.

Although the ICS Function Test (STP.778) tests the functions of the l

ICS, the test does not verify that every wire in the ICS is landed l

at the proper terminal.

A review of a section of the ICS Function Test (Section 6.4, Feedwater) showed that only approximately 80% of the wiring in the l

subsystem will be tested.

l U

The B&W ICS Engineer who was involved in the Davis-Besse restart stated that a plant trip after restart at Davis-Besse was attributed directly to a wiring discrepancy which was missed during function testing.

j l

1 j

17 l

l l

l

REQUEST FOR INFORMATION (RI)

~'

1,.

RI NO: _0&l SYSTEM CODE:

ICS ISSUE DATE:

7-30-87

SUBJECT:

ICS/NNI ABT OPERATION l

' DEPARTMENT:

OPERATIONS C00Rli.i) OR:

R. MACIAS TEAM MEMBER:

JEFF IRWIN TEAM LEADER:

RICH MOYER POTENTIAL CONCERN /0VESTION:

The Automatic Bus Transfer (ABT) is designed such that a situation could exist where ICS AC loads'are lost but ICS DC loads remain energized causing uncertainty in ICS control.

Review of drawing E203 Sht 99 Rev. 2 showed ICS.ABT performs automatic bus transf er f rom primary AC power alignment to alternute AC power alignment; but will not perform automatic bus transfer from alternate to primary.

The operator must manually push the reset button located on the ABT l

enclosure, after primary AC power is restored, to realign the ABT to i

primary.AC power.

' Plant could not provide a design basis requiring use of a unidirectional versus a bidirectional power seeking ABT.

\\

ABT alignment to alternate AC power is annunciated.

Annunciator Response Procedure (ARP) H2PSB addresses the need to reset the ABT to primary AC power alignment.

Plant conditions may not cllow immediate/near term realignment to primary AC power.

Plausibly the ABT could be aligned to alternate AC power, the ABT primary AC source would be restored and prior to the time the operators reset the. ABT to primary AC power alignment the alternate AC power could be lost. This would de-energize all ICS AC loads while all ICS DC loads would still be energized.

Operators interviewed knew that the ABT was unidirectional power seeking. Operators were not aware that there was a possibility that ICS AC loads could be lost while ICS DC loads remained energized.

This condition would cause loss of MFW pumps while ICS controllers remained energized and ICS control actions would become unpredictable.

t The plant could not provide an analysis of ICS with AC loads lost and DC loads energized.

i 6

i 1B

-w___.____-_____'_

]

L..

~

REQUEST FOR INFORMATION (RI) 6:

i I

RI NO: 093 SYSTEM CODE:

ICS ISSUE DATE: 7-30-87

SUBJECT:

LABELING OF AUXILIARY STEAM STATION FOR LOSS OF ICS POWER DEPARTMENT: SYSTEM ENGINEERING _ _

COORDINATOR:

JOHN ITTNER l

. TEAM MEMBER:

PAT WAGNER TEAM LEADER:

RICH MOYER.

l POTENTIAL CONCERN /00ESTION:

3 On a loss ofL CS power, operators may not be aware that Control Room:

I control of Auxiliary Steam.is not. function;.l.

ICS System Status Report (SSR)' Problem 22 identified that all Control Room. instrumentation and controls which are powered from ICS should be

. labeled. A portion of the Auxiliary Steam Reducing Station'in the Control Room is powered from ICS. There is no label in the Control Room indicating that the station is powered from ICS.

During the ICS Equipment Investigation- ( Action List Item Number 3A),.

upon loss of ICS power, it was noted that the Auxiliary Steam Reducing Station lost power unexpectedly.

a" In the resolution of ICS SSR Problem 22, ICS Bailey Hand / Auto (H/A)

Stations did not require labeling. The ICS Bailey Hand / Auto stations are grouped together on panel H1kl and, being ICS stations, do not require labeling indicating that they are ICS powered.

The Auxiliary Steam Station, at one time.a Bailey station, is not located among the rest of the H/A stations and is no longer clearly identified as being powered by ICS (ECN R-0878).

A walkdown of the Control Room confirmed that there is no purple label signifying that this controller is affected by a loss of ICS

power, 1

I

.1 l

1 19 j

i

?

?

REQUEST FOR INFORMATION (RI)

RI NO: 094 SYSTEM CODE:

'ICS ISSUE DATE: 7-30-87

SUBJECT:

EFFECTIVENESS OF ENGINEERING REGARDING ECN WORK PACKAGES i

IDEPARTMENT: NUCLEAR ENGINEERING COORDINATOR:

RON LAWRENCE TEAM MEMBER:

JEFF IRWIN TEAM LEADER:

RICH M0YER 1

POTENTIAL CONCERN /0VESTION:

Engineering design walkdowns and verifica'tions for design modifications as found in NEP 4109 are not being performed adequately.

Review of Engineering Change Notice (ECN) work packages (R-0861 and R-0927) in progress showed a large number (25 and 26 respectively) of Field Problem Reports (FPRs) being generated. The majority of FPRs appeared to be of technical nature requiring design correction. There is a concern that design errors that affect functionality of the system may avoid detection by installation personnel and modification testing Review of FPRs for ECN R-0861 revealed several in:tances where the original design called for instrument cables to be routed in trays that the field determined was unacceptable.

Field engineering then recommended the cables be routed in trays which were power. trays.

Engineering corrected this error in the FPR before responding, but this i

scenario reflects the necessity for engineering walkdowns to be performed

'p initially per the procedures. Engineering's initial response to this concern stated that drawing details were difficult to read or lacking in detail, which also emphasizes the need to perform walkdowns and verifications before completing the design.

l l

1 i

20

l REQUEST FOR INFORMATION (RI)

RI RO: 095 SYSTEM CODE:

ICS ISSUE DATE: 7-30-87

SUBJECT:

. CALIBRATION RECORDS CONTROL

~

-DEPARTMENT: MAINTENANCE COORDINATOR:

J. DARKE TEAM MEMBER:

JEFF IRWIN TEAM LEADER:

RICH M0YER POTENTIAL CONCERN /00ESTION:

No procedures exist for I&C. maintenance to ensure calibration data sheets are microfilmed in accordance with Records Management requirements.

In Response to NRC open item 86-22 calibration data sheets were.

brought into. compliance of pennanent plant records by microfilming in early 1987.

Interview with I&C shop supervisor indicated that new data sheets are collected and periodically microfilmed by records management to maintain permanent plant record status, by arrangement with Records management.

Review of Maintenance Procedures 1011 Rev.3 and 1014 Rev. 2 did not f

show programmatic control of this process of micro filming all new calibration data.

No occurrences of calibration data sheets not l

being microfilmed or calibration data shhets being lost were found.

However, there is a potential for these occurrences with no procedural control of this activity at the shop lovel under the RSAP-0601 guidelines.

21 1

~

REQUEST FOR INFORMATION (RI) 4

.RI NO: 096 SYSTEM CODE:

ICS ISSUE DATE: 7-30-87 i

SUBJECTi 'ICS BREAKERS FORill8VAC POWER SUPPLIES DEPARTMENT: NUCLEAR ENGINEERING COORDINATOR:

RON LAWRENCE

' TEAM MEMBER:

SINGH BAGGA TEAM LEADER:

RICH M0YER POTENTIAL CONCERN /00ESTION:

i The ICS breakers 1J04 and 1C07 may not be sized properly. This could cause unnecessar.y/f requent' tripping of the breakers or could cause damage l

to the equipment if the breakers are oversized, thereby reducing plant availability and reliability.

The plant"is unable to provide a document showing all the loads to support the sizing and selection of breakers. The loads may be shown on several drawings but it is very dif ficult to verify the loads due to several modifications being made to ICS.

The engineering report ERPT-E0208 Rev. O still shows various loads which have been removed from ICS.

It appears from this report that the breaker loads do not get re-analyzed or updated.

Drawings E-1011 Sh.110-2 and Sh.115A inqicate the " total load" of 25 Amps for the breakers but the individual loads are not called out on this drawing.

Discussions with engineers revealed that the

" total load" of 23.15 Amps is identified in the instruction manual for ICS. However, the instruction manual never gets updated' for the revised loads.

In addition, it was stated that it is good engineering practice to select a breaker of 125% capacity of full load. The 30 Amp breaker 1J04 has been replaced with a 40 Amp breaker under Engineering Change Notice (ECN) R-0469 Rev. O.

The calculation #1-ICS-E0640 Rev. 1 was done for the coordination of breakers and fuses of 118VAC circuits.

It was concluded from this calculation that fuses in 118 VAC circuits coordinate properly with 40 Amp and 30 Amp breakers for all fault currents available from the inverter or f rom the regulating transformer. This conclusion did not support the replacement of 30 Amps breaker under 2CN #R-0469 Rev. O.

f 22 4

--___________.___d

r er 6.0 ATTACHMENTS 6.1 List of Documents Reviewed 6.2 Status of RIs

\\

l 23

[;

p. -

i e.

LIST OF DOCUMENTS REVIEWED

+.,

ATTACHMENT 1 1.

SSFIs l

A.

ANO B.

Oconee C..

Palisades D.

Pilgrim E.

Rancho Seco F.

'H.R. Robinson G.

Three Mile Island 1 l

)

H.

Trojan 1.

. Turkey Point l

2.

System Status Reports A.

Integrated Control System (revision 1)

B.

Main Steam System (revision 1)

C.

. Main Feedwater (revision 1)

D.

Non-Nuclear Instrumentation (revision 1) 3.

SMUD Vendor Technical Manuals

\\

A.

N21.01-115 (ICS Volune l A)

B.

N21.01-116 (ICS Volume 1B)

C.

N21.01-117 (ICS Volume 1C) i i

D.

N21.01-112 (ICS Volume 2)

E ~.

E32.09-IM01 ( Automatic Buss Transfer Devices) i 4.

Drawings A.

N21.01 series (ICS Schematics) j B.

E203 shts 99(r2),100,101 l

C.

M-530 shts 1 (r13), 2 (r12), 2A (r3), 3 (rl7) l D.

M-532 shts 2 (r6), 3-(r6)

E.

Pink Drawings in N21.01 series for ECNs:

(1) A-4058 (2) A-5415W,Y,2

.( 3) R-0823 (4) R-0824 (5) R-0825 (6)- R-0826 (7)

R-0861 (8) R-0878 (9)

R-0927 (10 R-1217 i

24

\\

m.

' LIST OF REVIEWED DOCUMENTS ATTACHMENT 1 (Continued) 5.

Updated Safety Analysis Report Chapter 7 (ICS) 6.

Nonconforming Reports A.

S-5263 B.

S-6603 iJ C.

S-6867 7.

Licensee Event Report A.

86-10 B.

85-16 8.

Quality Control Instrumentation 12 (QCI-12), r2 9.

Nuclear Engineering Procedures A.

NEP-5435 ICS System Design Bases, r1 B.

NEP-5100 Series construction Specs C.

NEP-4109 Configuration Control, r6 -

l D.

NEP-6118 E.

NEP-5444 MSS System Design Bases r0 10.

ICS Testing Documents A.

System Test Matrix B.

Test Outlines for:

(1) STP.660 r1 (ICS Tuning)

(2) STP.664 r0 (Loss of ICS, NNI)

(3) STP.778 r0 (ICS Function Test)

C.

Test Procedures for:

(1) STP.660 r0 (2) STP.778 r0 11.

Procedures I

A.

Administrative Procedures (1)

AP.4A, Safe Clearance Procedure, r5 (2)

AP.44, Plant Modification, r11 l

(3). AP.100 series (Process Standards), r11 25 e

llel-i LIST OF REVIEWED DOCUMENTS

-4

. ATTACHMENT 1 (Continued)

I 8.

Rancho Seco Administrative Procedures (1)

RSAP.601 (2)

RSAP.803 C.

Operating Procedures i

i (1)' A.71 ICS Operating Procedure, r9 (2)

B.2, r38 (3)

B.3, r29 (4)

B.4, r40 i

1 D.

Casualty Procedures (1)

C.13A, r6 (2)

C.138, r4 (3)

C.40 Loss of ICS Power, r2 draft E.

Annunciator Response Procedure (1) ARP.H2PSB, r15 j

F.

Modification Procedures and Inspection Standards 302

\\

12.

Engineering Changes (ECNs, DBRs)

A.

R-0357A,8 8.

R-0359A, B C.

R-0459 D.

R-0472 E.

R-0477 i

F.

R-0580 G.

R-0822 H.

R-0823 I.

R-0826 J.

R-0828 K.

R-0861 L.

R-0878 M.

R-0918 N.

R-0927 0.

R-0442 i

P.

R-0469 13.

Field Problem Reports A.

R-0927 FPR1-FPR26 8.

R-0861 FPR1-FPR25 26

p a.

LIET OF~ REVIEWED. DOCUMENTS

o ATTACHMENT.1 '(Continued) 14.

PM Tasks for the ICS A.

Task 04145 B.

Task 05355 C.

Task 05378 D.

Task 05389 E.!

Task 05602 F,

Task 05608 G.

Task 05745 H.

Task 05746 I.

Task 05749 J.

' Task 05750

15.. I&C Calibration Records for ICS
16. Work Request History for ICS
17. Occurrence Description Reports A.

4/7/86 (Marty Ehlinger, MFW RPM)

.{

18.

Standard ANSI Nk45.2.11 1974

19. NRC Bulletin 79-27

\\

20. Engineering Reports A.

ERPT-10010 (SAIC Report)

B.

ERPT-E0208 (Fuses for 118 VAC)

21. Draft Rancho Seco System Configuration and' Test Program Review (ICS, done by B&W)-

22.

CRTS letter GCA 87-090 dated 7/21/87 23.

BAW-1919 Draft, BWOG I&C Committee, ICS/NNI Evaluation, Appendix R 24.

Engineering Calculations A.

Z-ICS-E0640 B.

~Z-ICS-E0598 C.

!Z-EFI-10146 D.

Z-EFI-10159 E.

Z-EFI-10158 F.

Z-EFI-10163-27 4

t

d 4

LIST OF REVIEWED DOCUMENTS

,a ATTACHMENT 1 (Continued) 25.

Training Materials A.

Nuclea'r Training Department Course Catalog (TTM07, 7/16/87) 8.

Lesson Plan, ICS (OD 21 I 4900 rl)

\\

l 1

l 28 4

1 l

1 J

[

jl'

'd4:

STATUS OF Ris fd:

,r-

, t RI NUMBER STATUS RSL NLMABER j

028 Acknowledged-RSL-RI-028

i.

036 Acknowledged RSL-kI-036 039 Acknowledged-

~RSL-RI-039 043 Acknowledged.

. RSL-RI.-043

- 073-Acknowledged

,RSL-RI-073 074 Acknowledged RSL-RI-074 000.

Open.

081

. Acknowledged RSL-RI-081 093' Open 094 Open 095 Open 096

Open l

.\\ -

l j

l I

'l i

ATTACHMENT 2 i

i 29 j

l

- _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _