ML20364A213
| ML20364A213 | |
| Person / Time | |
|---|---|
| Site: | Cook  |
| Issue date: | 08/13/2020 |
| From: | Chuck Zoia NRC/RGN-III/DRS/OLB |
| To: | American Electric Power, NRC/RGN-III/DRS/OLB |
| Zoia C | |
| Shared Package | |
| ML17164A382 | List: |
| References | |
| Download: ML20364A213 (94) | |
Text
Appendix D Scenario Outline Form ES-D-1 Facility: DC COOK 1 & 2 Scenario No.: 1 Op-Test No.: _________
Examiners: ___________________________ Operators: ____________________________
Initial Conditions: 80 % Power .
Turnover: Restore power to 100% following Turbine Valve testing Critical Tasks: Place Rods In Manual on MPC-253 Failure, Stabilize SG Level on MFC-121 Failure, Manually Actuate SI .
Event Malf. No. Event Event No. Type* Description 1 R-RO Raise Turbine and Reactor Power 2 U1_MPC253 I-RO Turbine Impulse Transmitter (MPC-253) fails LOW
@0 TS 3 R-RO Recover RODs and temperature 4
U1_MFC 121 I-BOP Steam Flow Channel (MFC-121) failure fails Low
@0 TS 5
U1_ED07B C-RO PZR HTR Transformer Fails (11PHC Fails).
TS 6 U1_RC19A M Pressurizer Safety Starts leaking and progresses to full open
@ 100%
7 U1_RP10A C-RO Train A Safety Injection signal failure to actuate in AUTO 8 U1_RP10B C-RO Train B Safety Injection signal failure to actuate in AUTO or U1_RP11B C-BOP Manual on the PRZ panel only 9 U1_RP19D C-BOP RPS Relay Failure Train A equipment fails to start (CV, SI, RHR,CC & Control Room Ventilation)
- (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Page 1 of 17
Appendix D Scenario Outline Form ES-D-1 Event Summary The Crew is directed to restore power to 100% following Turbine Valve testing.
A failure of Turbine Impulse instrument (MPC-253) results in a control rod insertion. The auto rod control circuit will see a power mismatch causing the rods to move in, decreasing reactor power and Tave. The auto rod control circuit will also see a decreased Tref (min 547 deg f) causing rods to move in. RO will be required to place rod control in manual. Crew will be required to implement AOP actions to stabilize the plant and trip Bistables.
The restoration of Tavg will require reactivity manipulations to restore the Axial Flux Difference SG Steam Flow instrument (MFC-121) fails Low. This will result in the closing of #2 SG FWRV (FRV-220) to lower feedwater flow. The BOP will be required to take manual control and regulate FRV-230.
The Crew will be required to implement AOP actions to stabilize the plant and trip bistables.
A failure of the PZR HTR Bus 11PHC will occur. The PZR SCR heater control will need to be transferred to 11PHA. The crew should also refer to Technical Specifications.
The major event will start with a leaking Pressurizer Safety Valve. This will progress to SV-45A PRZ Safety Valve failing full open. A unit trip will be required. As the crew performs the actions of E-0, the Safety Injection will fail to automatically actuate. The Crew must manually actuate SI (Trn B from SI panel only) and/or align ECCS Pumps and Equipment as required. The crew will transition to E-1. The scenario will terminate when the crew has transitioned to ES-1.2 for Post LOCA cooldown.
Critical Tasks Place Rods In Manual on MPC-253 Failure Stabilize SG Level on MFC-121 Failure Manually Actuate SI Procedures E-0, Reactor Trip or Safety Injection E-1, Loss of Reactor or Secondary Coolant Page 2 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 1 Event
Description:
Raise Turbine and Reactor Power NOTE: Place Event 2 Failure In prior to Crew Placing Rods In Manual for Power Change Time Position Applicants Actions or Behavior RO Calculates the dilution required per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.
RO Briefs crew on reactivity plan for power escalation.
US Reviews / concurs with reactivity plan.
US Directs RO to commence Power Escalation in accordance with OHP-4021-001-006, Power Escalation (at step 4.77)
RO Performs DILUTION (batch add OR Continuous):
- Place RC Makeup Blend control switch in STOP
- Place RC Makeup Blend Control Mode switch in DILUTE or ALT DILUTE
- Adjust PW to the desired flow rate and/or amount.
- May close QRV-451 if aligning to CCP Suction Only
- Place RC Makeup Blend control switch in START
- May take QRV-303 to Manual and Open as required to maintain VCT Level and Pressure.
RO Commences escalation:
- Raises turbine load (reactor power) using the DCS HMI.
- Maintains Tavg/Tref deviation within limits by dilution and turbine load adjustments.
- Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.
RO RO verifies appropriate reactivity feedback.
BOP Acts as peer checker for RO during blender operations.
Page 3 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 2 Event
Description:
Turbine Impulse Transmitter (MPC-253) fails LOW Time Position Applicants Actions or Behavior RO/BOP Recognizes and reports multiple annunciators on Ann. Panels 111, 113, and 114 for a Turbine Impulse pressure failure.
RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
Critical
- Checks for no turbine runback Task #1
- Ensures control rods are in manual with no rod motion
- Reports MPC-253 has failed low
- Reports on Stability Checks Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of 1-OHP-4022-012-003, Continuous Control Bank Movement procedure (If Rods in AUTO).
RO Performs the following as directed (If Rods in AUTO):
- 1. Checks for no turbine runback
- 2. Ensures control rods are in manual with no rod motion
- 3. Checks rod position above low-low rod insertion limit
- 4. Checks axial flux difference (AFD) within target band Note: Depending on the amount of rod motion, operators may find themselves in TS for AFD limits.
- 5. Initiates restoration of equilibrium conditions using either:
- Control rod movement
- Turbine load adjustment
- 6. Identifies failed Turbine First Stage Impulse Pressure Instrument US Directs actions per 1-OHP-4022-013-016, Turbine First Stage Impulse Pressure Instrument Malfunction.
Page 4 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 2 Event
Description:
Turbine Impulse Transmitter (MPC-253) fails LOW Time Position Applicants Actions or Behavior RO Performs the following:
- 1. Verifies rod control in manual.
- 2. Places AMSAC bypass/test switch in BYPASS/TEST
- 3. Places Steam Dump selector control switches to OFF OR leaves them ON for Turbine Trip Controller Function (may be placed to off due to failure of Load Rejection Portion of Steam Dumps [will open fully if a C-7 Load rejection is Received] or May be left ON so Dumps can function if turbine Trips)
US Initiates actions to trip bistables for MPC-253 failure per Attachment A of 1-OHP-4022-013-016.
US Refers to TS (LCO):
- TS 3.3.1 Reactor Trip System (RTS) Instrumentation Condition A (Table 3.3.1-1) o Function 18e, Reactor Trip System Interlocks - Turbine First Stage Pressure, P-13. Condition L
- TS 3.3.2 Engineered Safety Feature Actuation System (ESFAS) Instrumentation Condition A (Table 3.3.2-1) o Function 4e, Steam Line Isolation - High Steam Flow in Two Steam Lines (per steam line), Coincident with Tavg -
Low Low Condition D
Note: P-13 interlock (Conditions L) must be verified in correct state within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. All other actions are greater than 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
NOTE:
Failure of MPC-253 low will cause a Turbine DCS Tave HOLD. This will prevent Turbine load from being changed until The Hold is disable at an Engineering Workstation by Maintenance/Engineering.
If Additional Power Change Actions are Required, Have Maintenance repair a lose lead on MPC 253 to Restore the Channel.
Page 5 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 3 Event
Description:
Recover Rods and Temperature Time Position Applicants Actions or Behavior SRO Directs RO to develop reactivity plan to recover temperature and Delta Flux RO
- Determines required Tavg based on Tref from Main Turbine HMI or Tech Data Book
- Determines required AFD from Tech Data Book Curve
- Determines previous Rod position from log/notes or PPC RO Develops plan for rod withdrawal to restore Tavg and AFD to target RO Briefs crew on recovery plan.
SRO Directs RO to Implement plan to recover Tavg and AFD.
RO Withdraws rods in steps (2-3 steps at a time) while monitoring Temperature, Power and AFD Page 6 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 4 Event
Description:
Steam Flow Channel (MFC-121) fails Low Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciators on Panel #113 (Drops 42, 43, and 33) which are indicative of a steam flow instrument failure.
Panel #116 Drop 51 SJAE D/P may Alarm BOP Reports instrument malfunction and performs the immediate Critical actions of OHP-4022-IFR-001, Instrument Failure Response:
Task #2 Determine SG 2 level is lowering and that its Feedwater Regulating Valve (FRV-220) is not responding as expected.
- Notify US and takes manual control of FRV-220.
- Determine failure affects MFP Auto P, and takes P controller to MANUAL or Places in Speed Control.
- Stabilize SG 2 level in manual Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of 1-OHP-4022-013-014, Steam Flow Instrument Malfunction procedure.
BOP Performs the following actions as directed:
- 1. Restores SG 2 level using MANUAL control of FRV-220.
- 2. Places MFP P controller in MANUAL and maintains pressure.
- 3. Reports MFC-121 has failed LOW.
- 4. Places 1-FS-522C selector switch in channel 2 position.
- 5. Nulls and returns FRV-220 controller to AUTO.
- 6. Returns MFP P controller to AUTO.
US Refers to the following Tech Specs (TS):
TS 3.3.1 RTS Instrumentation (Table 3.3.1-1)
Condition A - Refer to Table Function 15 Condition D - Trip Bistables in 6 Hours TS 3.3.2 ESFAS Instrumentation (Table 3.3.2-1)
Condition A - Refer to Table Function 4e Condition D - Trip Bistables in 6 Hours US Initiates actions to trip bistables associated with MFC-121 failure per Attachment B-1 of 1-OHP-4022-013-014.
Page 7 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: .: 5 Event
Description:
PZR HTR Transformer Fails (11PHC Fails).
Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel 108, Drops 46 and 50, indicative of a pressurizer (PRZ) heater power supply failure.
(Breaker T11D9 on Electrical Panel)
RO Reenergizes PRZ control (cycling) group heaters per 1-OHP-4024-108, Drop 50 annunciator response, as follows:
- Opens breaker CB11PHC6
- Closes breaker CB11PHA6 (Drop 50 clears)
RO Monitors PRZ pressure response and ensures normal PRZ heater operations for PHA supplied heaters.
US Refers to Tech Specs (TS):
- TS 3.4.9.b Pressurizer - (Condition B.1) due to a loss of 1 train of pressurizer heaters. Restore B/U heaters to operable within 72 Hours.
Page 8 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: .: 6,7,8,& 9 Event
Description:
Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &
Control Room Ventilation fails to auto start)
Time Position Applicants Actions or Behavior RO Recognize and reports abnormal RCS leakage:
- RCS pressure lowering with PZR Heaters ON
- PRZ Safety Valve SV-45A indicates open
- Panel #108:
- Drop 8, Pressurizer Press Low Dev Backup Htrs On
- Drop 29, PRZ SV A Disch Temp Hi
- Drop 31, Prz Relief Tk Pressure High Or Low US Direct entry into 1-OHP-4022-002-020, Excessive Reactor Coolant Leakage RO Performs the following actions, if directed:
- Manually raises charging flow to maintain pressurizer level.
- Manually adjusts seal injection flow (6-12 gpm / each RCP).
- Reduces/isolates letdown flow to maintain pressurizer level.
- Attempts to determine RCS leak rate.
BOP/RO Monitor Containment Pressure US Directs RO to Perform a Reactor Trip Directs RO/BOP to perform the immediate actions of 1-OHP-4023-E-0, Reactor Trip or Safety Injection.
RO/BOP Performs the immediate actions of E-0:
- 1. Checks reactor trip
- 2. Checks turbine trip
- 3. Checks power to AC emergency buses
- 4. Checks safety injection status Page 9 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: .: 6,7,8,& 9 Event
Description:
Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &
Control Room Ventilation fails to auto start)
Time Position Applicants Actions or Behavior RO/BOP Check Safety Injection Actuated:
Manually Actuate SI (From SI Panel for Train B) to establish Critical High Head Injection Flowpath Task #3 -OR-NOTE: May be performed in E-0, Attachment A.
Manually Align Valves
- BIT Inlet Valves ICM-255 -AND/OR ICM-256 - OPEN
- BIT Outlet Valves ICM-250 -AND/OR ICM-251 - OPEN
- Manually Start/Align ECCS Equipment and Actuate Phase A (Train A)
- Stop all RCPs when RCS is < 1300 psig and CCP/SI pump running BOP Manually controls AFW flow to maintain SG narrow range levels 14% - 50% once one SG narrow range level is greater than 14%.
US
- Ensures immediate actions of E-0 are completed
- Directs subsequent actions of E-0.
RO/BOP Completes actions of E-0 through step 19 as directed.
Page 10 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: .: 6,7,8,& 9 Event
Description:
Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &
Control Room Ventilation fails to auto start)
Time Position Applicants Actions or Behavior RO/BOP Performs manual actions of E-0, Attachment A as directed by US.
- Verifies CEQ Fans and CCW to CEQ
- Place DIS in Service - Turn on Igniters
- Verify Train A Control Room Pressurization aligned
- Reset Bypass switches for PACHMS
- Verifies Containment Ventilation & Phase A Isolations US/RO Checks if RCS is Intact - NO.
US Announces transition to 1-OHP-4023-E-1, Loss of Reactor or Secondary Coolant and directs operator actions.
RO/BOP Completes actions of E-1 through step 12 (Check if RCS Cooldown and Depressurization is required) as directed.
BOP Restore SG narrow range levels and maintain between 20% and 50%.
US/RO Checks if SI Termination Criteria is MET:
RCS Subcooling >40°F Secondary Heat Sink (SG >14% or AFW Flow >240x103)
RCS Pressure rising or stable - NO Pressurizer Level >21%
US/RO Check if RHR can be stopped (NO - RCS Pressure Lowering)
- Check RCS Pressure > 300 psig and stable Page 11 of 17
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: .: 6,7,8,& 9 Event
Description:
Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &
Control Room Ventilation fails to auto start)
Time Position Applicants Actions or Behavior BOP Shutdown Unloaded EDGs.
US Evaluate Plant Status Check Cold Leg Recirculation Capability Check Aux. Building Radiation US Announces transition to 1-OHP-4023-ES-1.2, Post LOCA Cooldown and Depressurization (at step 12).
Terminate Scenario Page 12 of 17
Critical Task Summary Task Elements Results Cueing:
- Panel #111 Drop 15
- 1
- MPC-253 & Tref Indication Lowering SAT / UNSAT
- Control Rods Inserting with NO Runback Place Control Rods In Manual to Stabilize Performance Indicators:
Plant following MPC-
- Place Control Rods in Manual Prior to Reactor Trip 253 Failure (or any Position out of Auto)
(Trip from Steamline Isolation\Low SG Levels)
Performance Feedback:
- Rod Motion Stops
- RCS Temperature Stabilzes Cueing:
- Panel #113 Drops 42,43, & 33
- 2
- MFC-121 Indication Lowering SAT / UNSAT
- FRV-220 closing Manually Control SG#12 Level on MFC- Performance Indicators:
121 Failure
- Place FRV-220 in Manual and control SG #12 Level to maintain it 15% - 67% preventing a Reactor Trip.
(May Select MFC-120 as Controlling Channel and Place\Leave FRV-220 In Auto)
Performance Feedback:
- SG Level Stabilizes and returns to band Page 13 of 17
Critical Task Summary Task Elements Results
- 3 Cueing: SAT / UNSAT
- Check SI Actuated Safety Injection Actuated Manually Status Light LIT (E-0, Step 4.a)
Actuate/Align one -OR-train of Safety
- Check BOTH CCP leakoff valve "Safety Injection Injection to establish Signal" white lights - LIT HIGH Head Injection Flow Performance Indicators:
Before transitioning from E-0 and reaching a Valid Orange Path in FR-C series Core Cooling
- Actuate 1 Train of SI
-OR-
- Manually Start/Align ECCS Equipment and Actuate Phase A (Train B)
Manually Align Valves
- BIT Inlet Valves ICM-255 -AND/OR ICM-256 -
OPEN
- BIT Outlet Valves ICM-250 -AND/OR ICM-251 -
OPEN
- OPEN
- ECCS flow is indicated to at least one train (as indicated by flow on cold leg BIT injection flowmeters)
- One Train of Phase A Isolation is complete per E-0, Attachment A Page 14 of 17
Scenario Instructor Actions Setup:
- 1. Reset to IC-308 MOL; 80% power, 883 MW, 805.58 ppm, 565.7 F 195 Steps on D
- 2. Place ALL Pressurizer Heaters In ON
- 3. Reset control rods and check group step counters.
- 4. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.
- 5. Advance chart recorder paper & clear chart recorder memory.
- 6. Activate the following (pre-load) malfunctions:
Train A Safety Injection Auto Failure U1_RP10A Train B Safety Injection Auto Failure U1_RP10B Train B Safety Injection Manual on the PRZ panel only U1_RP11D RPS Relay Failure Train A Equipment fails to start U1_RP19D (CV, SI, RHR,CC & Control Room Ventilation)
Page 15 of 17
Scenario Instructor Actions Scenario Events:
NOTE: Place Event 2 Failure In prior to Crew Placing Rods In Manual for Power Change EVENT #1 Respond as required to power change notifications and requests EVENT #2 ICF U1_MPC253 to 0 over 30 sec to cause Turbine Impulse Transmitter (MPC-253) to fail LOW.
U1_MPC253 EVENT #3 Recover RODs and temperature No Additional Actions EVENT #4 ICF U1_MFC121 to 0 over 3 sec to cause Steam Flow Channel (MFC-121) to fail LOW.
U1_MFC121 EVENT #5 IMF U1_ED07B to cause the PZR HTR Transformer Failure (11PHC Fails).
U1_ED07B If contacted as AEO to investigate the PZR HTR Transformer Failure, report back after ~ 2 min. delay that Breaker T11D9 has an OC trip.
Page 16 of 17
Scenario Instructor Actions EVENTS #6,7,8,& 9 IMF U1_RC19A to 100 from .1 over 5 Minutes to simulate the PZR Safety leak to full open U1_RC19A Malfunctions for Train A & B SI Auto Failure, Train B from PRZ Panel, and Train A Slave Relay have already been Entered.
Perform Local actions after entry into E-0 as requested:
- Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01
- Aux Tour will monitor Spent Fuel Pool Level and Temperatures
- Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.
OR U1_CHR03 U1_CHR02 (both have 10 minute delay built in)
- U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.
If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A EGR 03B U1_EGR03B U1_EGR03B EGR 04A U1_EGR04A U1_EGR04A U1_EGR04B U1_EGR04B EGR 04B Page 17 of 17
Appendix D Scenario Outline Form ES-D-1 Facility: DC COOK 1 & 2 Scenario No.: 2 Op-Test No.: _________
Examiners: ___________________________ Operators: ____________________________
Initial Conditions: ____ Unit is at 50% power .
Turnover: A 2 gpm tube leak on S/G #3 requires a T.S. shutdown. The Crew is in 1-OHP-4021-001-003 power Reduction, and has completed NARPI adjustments per step 4.13.
Critical Tasks Stabilize Pressurizer Pressure, Isolate #13 Steam Generator, Cooldown RCS, Depressurize RCS to stop #13 SGTR leakage Even Malf. No. Event Event t No. Type* Description 1 U1_RC24C R-RO SG Tube Leakage requiring shutdown
@ 20 - 2 N-gpm BOP 2 U2_EESW C- Unit 2 East ESW Pump Trip, Unit 1 West ESW fail to Start Short Circuit BOP U1_WPS705 TS (Need Alarm 104 drop 78 on trigger with drop 66) fail 3 U1_NPP151 I-RO Pressurizer Pressure Channel Fails High to 2500 TS 4 U1_RX08A C-RO NRV-163 Controller Fails Open in Auto (insert with NPP151
@ 100% failure) 5 U1_MPP230 I-BOP SG Pressure Channel MPP-230 Fails Low.
to 1 over 30 TS Sec 6 U1_RC23C M SG #13 Tube Rupture 500 GPM
@ 50 ~ 500 Gpm 7 U1_RP13A C- Phase A Fails to auto Actuate U1_RP13B BOP 8 U1_RC15A C-RO NRV-163 & NRV -164 fail to OPEN (PORV must be used to U1_RC15B depressurize)
- (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Page 1 of 20
Appendix D Scenario Outline Form ES-D-1 Event Summary The scenario begins at 50% power with a shutdown required per 01-OHP-4022-002-021, Steam Generator Tube Leakage due to SG tube leakage. The RO and BOP will perform actions of the shutdown procedure to bring the plant offline.
A trip of the UNIT 2 East ESW Pump and failure of the West U1 ESW pump will require the BOP to start the West ESW pump on unit 1.
After the Crew has addressed the ESW failure, the Pressurizer Pressure Channel NPP-151 Fails High, Pressurizer spray valves will go full open. The crew will need to take manual control of pressurizer pressure and enter an Abnormal Operating Procedure, defeat the failed channel, address Technical Specifications, and then restore pressurizer pressure control to auto.
Along with the Pressure Channel failure, a failure of the Pressurizer Spray Valve controller for NRV-163 to 100% causes NRV-163 to go full open. RCS pressure will begin to lower. The RO will be required to take manual control of NRV-163 and close the spray valve then return pressure to the normal band. Pressurizer pressure control may still be operated in AUTO with NRV-164.
The next event will involve the SG Pressure Channel MPP-230 fails low. The BOP will be required to take manual control SG 13 Feedwater Regulating Valve FRV-230 to stabilize level.
The crew will address the failure with an Abnormal Operating Procedure, address Technical Specifications, select an operable channel, and restore automatic control.
A Steam Generator Tube Rupture will build in to 500 gpm over 5 minutes. The crew will perform a Reactor Trip and Safety Injection. The crew should identify the Steam Generator Tube Rupture on #13 SG. The crew will transition to E-3 to isolate #13 SG. As the crew performs the actions of E-3 to depressurize the SG the Pressurizer Spray Valves will fail to open requiring use of the PORV for depressurization, The scenario will terminate when the crew has completed the cooldown, depressurization, and terminated SI.
Critical Tasks Stabilize Pressurizer Pressure Isolate #13 Steam Generator Cooldown RCS Depressurize RCS to stop #13 SGTR leakage Procedures E-0, Reactor Trip or Safety Injection E-3, Steam Generator Tube Rupture Page 2 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 1 Event
Description:
SG Tube Leakage requiring shutdown Time Position Applicants Actions or Behavior US Refers to Tech Specs 3.4.13 RCS Operational Leakage.
SG Leakage >150 gpd/SG. Action D applies. - Be in Mode 3 in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.
RO Calculates boric acid addition per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.
RO Briefs crew on reactivity plan for power reduction.
US Reviews / concurs with reactivity plan.
US Directs RO to commence Power Reduction in accordance with OHP-4021-001-003.
RO Performs BORATION:
Place RC Makeup Blend Control Switch in STOP.
Place RC Makeup Blend Control Mode Selector Switch in BORATE.
Set desired batch on BA Flow Totalizer.
Adjust BA Flow Ctrl (RU-33) to desired flow.
Place RC Makeup Blend Control Switch in START.
RO Commences power reduction:
- Lowers turbine load (reactor power) using HMI.
- Maintains Tavg/Tref deviation within limits by boration and turbine load adjustments.
- Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.
BOP/RO BOP acts as peer checker for RO during blender operations and RO verifies appropriate reactivity feedback.
Page 3 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 2 Event
Description:
Unit 2 East ESW Pump Trip, Unit 1 West ESW fail to Start Time Position Applicants Actions or Behavior BOP Recognizes and reports ESW annunciators on Ann. Panel 104 indicative of ESW pump trip including:
- Drop 78, WEST ESW PUMP LOW PRESSURE START-UP BOP Recognizes and reports that running Unit 2 East ESW pump has tripped and standby U1 West ESW pump failed to auto start.
BOP Manually starts West ESW pump in accordance with ESW Annunciator Response Procedures. Drop 78 Verify ESW system flow is greater than or equal to 2000 gpm by adjusting flow to the following as necessary (listed in preferred order):
o CCW heat exchanger o EDG heat exchanger(s) o CTS heat exchanger (if used, maintain 2000 to 3000 gpm thru CTS heat exchanger)
US May refer to actions of 1-OHP-4022-019-001,ESW System Loss/Rupture procedure.
BOP If 1-OHP-4022-019-001,ESW Malfunction procedure is used, the operator performs the following actions as directed:
- 1. Ensures at least one ESW pump is running
- 2. Checks ESW flow established
- 3. Checks ESW System Integrity
- 5. Checks Control Room Air Conditioner ESW Supply Page 4 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 2 Event
Description:
Unit 2 East ESW Pump Trip, Unit 1 West ESW fail to Start Time Position Applicants Actions or Behavior SRO Refers to TS 3.7.8, Essential Service Water (ESW) System.
Condition A U2 East ESW Pump is declared INOPERABLE.
One Train is INOPERABLE since the Crossties are Open.
Both Unit 1 and Unit 2 would enter Action A.
Note: Low Pressure Auto Start is NOT a Required Safety Function. The W ESW pump is technically not INOPERABLE, but SI auto start is required. Unit 1 could close the crosstie and declare ESW OPERABLE on Unit 1
Page 5 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 3 Event
Description:
Pressurizer Pressure Channel NPP 151 Fails High Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel #108 indicative of a pressurizer (PRZ) pressure instrument failure (Drops 6, 7, 8).
Reports instrument malfunction and performs the immediate RO actions of OHP-4022-IFR-001, Instrument Failure Response:
Critical Task Places PRZ pressure master controller OR both PRZ spray
- 1 valve controllers (1-NRV-163 and 164) to manual and lowers controller output to close spray valves. (NRV-163 also fails Open in Auto - see next event)
Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of 01-OHP-4022-013-009, Pressurizer Pressure Instrument Malfunction procedure.
May enter Technical Specification 3.4.1 RCS Pressure, Temperature, and Flow DNB Limits if Pressure lowers to <2168 psig. (2200 psig admin limit)
Performs the following actions as directed:
RO 1. Restores PRZ pressure using manual control of EITHER:
- PRZ pressure master controller
- Both PRZ spray valve controllers
- 2. Reports 1-NPP-151 has failed HIGH
- 3. Ensures PRZ pressure master controller is in manual
- 4. Places PRZ Press Ctrl selector switch in Ch 2 & 3 position
- 5. Places the following recorder switches in Ch 2, 3 or 4 position:
- PRZ Press Rec selector
- Delta T selector
- Overpower Delta T selector
- Overtemp Delta T selector Page 6 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 3 Event
Description:
Pressurizer Pressure Channel NPP 151 Fails High Time Position Applicants Actions or Behavior RO Performs the following actions as directed:
- 6. Verifies 1-QMO-225, E CCP Leakoff is open NOTE: (May place QRV251 in Manual while opening Leakoff -
Letdown may also be reduced - QRV-251 should be returned to Auto)
- 7. Dispatches Aux operator to open breaker for 1-QMO-225 (1-ABV-D-5C)
- 8. Checks 1-NLP-151, PRZ Level Channel 1 and 1-NLI-151, PRZ Level Cold Calibration instruments for failure
- 9. Nulls and returns the following controllers to auto:
- Both PRZ spray valve controllers (NRV-163 Failed In Auto)
- PRZ pressure master controller US Declares the 1E Centrifugal Charging Pump inoperable.
US Initiates actions to trip bistables associated with 1-NPP-151 PZR Pressure Failure per Attachment A of 1-OHP-4022-013-009.
US Refers to Tech Specs (TS):
- TS 3.3.2 ESFAS Instrumentation (Condition A Table 3.3.2-1, Function 1d Condition D, 8b Condition G *)
- TS 3.3.4 Remote Shutdown Instrumentation Condition A
- TRM 8.1.1 Rx Control Systems Charging Pumps - Operating Action A
- =Identifies requirement to verify the status of Permissive P-11 bistables within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of pressurizer pressure channel failure.
Page 7 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 4 Event
Description:
Pressurizer Spray Valve Controller NRV-163 fails to 100%
(Actions May have been performed in Previous Event or may re-appear when returning to Auto)
Time Position Applicants Actions or Behavior RO
- Recognizes and reports Ann. Panel 108, Drop 8, PRESSURIZER PRESS LOW DEV BACKUP HTRS ON.
- Identifies that NRV-163 PRZ Spray Valve is open.
US Directs RO to take manual control of NRV-163 and restore Pressurizer pressure.
- Manually closes NRV-163 PRZ Spray Valve.
Critical
- Monitors PRZ pressure control system and ensures pressure Task #1 returns to normal conditions (~2235 psig).
US May enter the following TS if Pressure lowers to <2168 (2200 Admin) psig during the transient:
Condition A.
Page 8 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 5 Event
Description:
SG Pressure Channel MPP-230 Fails Low.
Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciators on Panel 114 which are indicative of a steam generator #3 water level control / pressure instrument failure (Drops 12, 14).
BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
- restores SG 3 level to program
- (may also place MFP P controller in MANUAL or Speed Control at this time).
Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of 1-OHP-4022-013-012, Steam Generator Pressure Instrument Malfunction procedure.
BOP Performs the following actions as directed:
- 1. Restores SG 3 level using manual control of FRV-230.
- 3. Places MFP P controller in MANUAL.
- 4. Reports MPP-230 has failed.
- 5. Places 1-FS-532C selector switch in channel 2 position.
- 6. Nulls and returns FRV-230 controller to AUTO.
- 7. Returns MFP P controller to Auto. (If in speed control, Place to manual P and then place in Auto)
Page 9 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 5 Event
Description:
SG Pressure Channel MPP-230 Fails Low.
Time Position Applicants Actions or Behavior US Refers to Tech Specs (TS):
- Function 15 - Cond. D Trip Bistables in 6 Hours
- Function 1e(2) & 4e - Cond. D - Trip Bistables in 6 Hours
- TS 3.3.4 Remote Shutdown Instrumentation - Condition A -
Restore within 30 Days US Initiates actions to trip bistables associated with MPP-230 per Attachment C-1 of 1-OHP-4022-013-012.
Page 10 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event
Description:
SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior RO/BOP Perform the following:
- Recognizes and reports excessive charging flow demand as indicated by:
o Lowering Pressurizer level o Lowering Pressurizer pressure o PRZ level deviation alarm US May enter and direct operator actions per OHP-4022-002-021 SG Tube Leakage (or OHP-4022-002-020, Excessive RCS Leakage):
- Raise charging flow and isolate letdown
- Start the second CCP
- Maintain VCT level RO Recognizes and reports RCS leak rate greater than the capacity of charging pump -OR- unable to maintain Pressurizer level/VCT level US Directs RO/BOP to manually trip the reactor and perform the immediate actions of OHP-4023-E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging system capability, may also initiate SI).
US Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection.
RO/BOP Performs the immediate actions of E-0:
- 1. Checks reactor trip
- 2. Checks turbine trip
- 3. Checks power to AC emergency buses
- 4. Checks safety injection status (Manually initiate if required)
US Ensures immediate actions of E-0 are completed Page 11 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event
Description:
SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior US Directs subsequent actions of E-0:
- Check Main Steam Isolation Required
- Check CTS Required
- Direct Attachment A to Be Performed
RO/BOP Performs manual actions of Attachment A in E-0 as directed by US.
RO/BOP Identifies that Phase A did not Automatically Actuate
- Manually Actuates Phase A on Both Trains
- Verifies Phase A Isolation Complete US Completes actions of E-0 through step 18 (Check If SG Tubes Are Intact).
- Checks AFW
- Minimize RCS Cooldown
- Check FW Isolation
- Check PZR PORVs and Sprays
- Check If RCPs Should Be stopped
- Check for Steam Line Break US Announces transition to OHP-4023-E-3, Steam Generator Tube Rupture (step 18 of E-0).
US Directs actions of E-3, Steam Generator Tube Rupture.
US/BOP Identifies SG #3 as ruptured Page 12 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event
Description:
SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior US/BOP Manually closes the following valves for SG #13:
- MRV-233, PORV (E-3 Step 3a,b)
Critical
- MCM-231, TDAFP Steam Supply (E-3 Step 3c)
Task #2
- MRV-230, SG Stop Valve (E-3 Step 3i)
- MRV-231, SG Stop Valve Dump Valve (E-3 Step 3j)
- MRV-232, SG Stop Valve Dump Valve (E-3 Step 3j)
- FMO-231, TDAFP Discharge (may be performed in E-0, Step 8 Whenever Level >13%) (E-3 Step 4)
- FMO-232, MDAFP Discharge (may be performed in E-0, Step 8 Whenever Level >13%) (E-3 Step 4)
Note: The following should be checked closed (Not Critical)
- FRV-230, Feedwater Reg. Valve (E-3 Step 4)
- FMO-203, Feedwater Isolation Valve (E-3 Step 4)
- DCR-330, Blowdown Isolation Valve(E-3 Step 3d)
- DCR-303, Blowdown Sample Valve(E-3 Step 3e)
- DRV-407, SG Stop Valve Drain Valve (E-3 Step 3g)
US Directs RCS Cooldown to required core exit temperature:
Critical ______________°F Task #3 RO/BOP Commence cooldown at maximum rate using Manual Steam Dump Operation -OR- INTACT (3) SG PORVs Critical Task #3 Monitor RCS Thermocouple readings for target temperature Stop RCS cooldown when TCs < required temperature:
_____________°F Page 13 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event
Description:
SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior US Directs operator action to maintain TCs < required temperature (provide band)
RO/BOP Performs the following as directed:
- Resets SI and Containment Isolation Phase A
- Establish Control Air to Containment
Determines that NRV-163 and NRV -164 fail to Open US Directs RCS Depressurization to minimize break flow:
- Directs Use of Pressurizer PORVs since Normal Spray is Critical NOT available Task #4 RO Commence depressurization using PORV(S) as directed:
- Stop RCS depressurization based upon:
Task #4 (Criteria Used from E-3, Step 17 or Att. A):
US Check if ECCS flow should be terminated US/RO Terminate Safety Injection:
- Stop Both SI Pumps
- Stop 1 CCP
- Isolate BIT Page 14 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event
Description:
SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior US/RO Establish normal charging flow US Verify ECCS flow NOT required TERMINATE SCENARIO Page 15 of 20
Critical Task Summary Task Elements Results
- 1 Cueing: SAT / UNSAT
- Panel 108 Drop 6 Pressurizer Pressure High-High Stabilize PZR
- Pressurizer Pressure NPP-151 failed High with actual Pressure Prior to Pressure Lowering Reactor Trip with failure of NPP-151 and Performance Indicators:
NRV-163 Takes Manual Control of NRV-163 and Pressurizer Master Controller or NRV-164 and Closes NRV-163 and NRV-164:
- NRV-163 and NRV-164 Closed Indications
- May place to auto after Operable Channel is selected (NRV-163 must remain in Manual)
- Pressurizer Pressure Stabilizes
- Prior to reaching 1950 psig - Pressurizer Low Pressure Reactor trip Performance Feedback:
- RCS pressure stabilizing
- 2 Cueing:
- Check Feed Flow To Ruptured SG Isolated (E-3, Step 4.b)
Performance Indicators:
Prior to RCS cooldown to preclude transition to ECA-3.1, Loss of Reactor Coolant -Subcooled Recovery Desired:
- Isolates SG13:
o Manually Closes SG PORV o Trips SG 13 Stop Valve closed o Closes SG 13 Stop Valve dump valves o Isolates TDAFP Steam Supply from SG #13 o Isolates AFW to #13 SG when level is > 14%
Performance Feedback:
- Stable or rising pressure in the ruptured SG.
Page 16 of 20
Critical Task Summary Task Elements Results
- 2 Cueing: SAT / UNSAT
- Initiate RCS Cooldown (E-3, Step 7)
Establishes and Maintains RCS Target Performance Indicators:
Temperature Performs RCS cooldown, establishes and maintains CETC temperatures below target temperature. Temperature must be maintained within limits to prevent transition from E-3 due to either:
- Loss of subcooling (high temp.)
- CSF transition (low temp.)
Performance Feedback:
- RCS temp. less than target temp.
- 4 Cueing: SAT / UNSAT
Depressurize RCS Performance Indicators:
Depressurizes RCS using PRZ PORV:
Performance Feedback:
- RCS pressure lowering
- PRZ level rising Page 17 of 20
Scenario Instructor Actions Setup:
- 1. Reset to IC 310 MOL; 48% power, 485 MW, 892 ppm, 558 F 179 Steps on D, MSRs Isolated, West MFP in Speed Control idling at 3000, East in DP control
- 2. Place All Pressurizer Heaters in On
- 3. Reset control rods and check group step counters.
- 4. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.
- 5. Advance chart recorder paper & clear chart recorder memory.
- 6. Activate the following (pre-load) malfunctions:
Train A Phase A Auto Failure U1_RP13A Train B Phase A Auto Failure U1_RP13B Steam Generator Tube Leak & U1_RC24C Radiation Monitor U12_SRA1905 Close U2 East HX on T2 Set up Triggers and ESW Auto Start Failure ESW<40 on T1 T1 is true at <40 psig which turns on 104 Drop 78 AN04_U1(078)
T2 is set by trigger 1 and then looks for pressure to ESW>40 on T2 Rise > 40 psig to clear 104 Drop 78 AN04_U1(078)
Pressure switch failure keeps pump from starting U1_WPS705 Setup Phase A on Trigger 4 to fail normal spray valves Phase A on T4 U1_RC15A U1_RC15B U1_NPP151 Place Events 3 & 4 on Trigger 10 U1_RX08A Page 18 of 20
Scenario Instructor Actions Scenario Events:
EVENT #1 Respond as required to requests for chemistry sampling or shutdown preps EVENT #2 ICF U2_EESW to cause the U2 East ESW Pump to trip U2_EESW Call as Unit 2 that the East ESW pump has Tripped EVENT #3&4 Activate trigger ET to cause the Pressurizer Pressure Channel to fail High and the NRV-163 to fail Open in Auto Events 3 & 4 on T10
-OR-ICF U1_NPP151 to 2700 over 10 seconds cause the Pressurizer Pressure Channel to fail High U1_NPP151 When Requested to De-energize Power for QMO-225 (1-ABV-D-5C)
U1_EDPR10J EVENT #4 ICF U2_RX08A to 100 cause the NRV-163 Controller to Fail Open in Auto U1_RX08A EVENT #5 ICF U1_MPP230 to 1 over 30 seconds to cause the SG Pressure Channel MPP-230 to Fail Low U1_MPP230 Page 19 of 20
Scenario Instructor Actions EVENT #6 - 8 IMF RC23C, Final Value 50, Ramp Time 5 min, to cause a 500 gpm SGTR on SG #3 U1_RC23C If contacted as Radiation Protection, report that the requirements of 12-THP-6010-RPP-706, Gaseous Monitor Alarm Response have been met.
If contacted as Chemistry to evaluate SG Blowdown sample line activity per 12-THP-4030-002-208, Primary to Secondary Leakage - report back after some delay that leakage appears to be > 50 GPM on the #3 SG.
Local actions after entry into E-0:
- Locally stop U1 Ice Condenser AHUs MRF U1_CHR01 to OFF.
U1_CHR01
- Aux Tour will monitor Spent Fuel Pool Level and Temperatures
- Place PACHMAS in service - MRF U1_CHR02 or 03 with 10 min delay.
U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in.)
- U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.
If directed to secure EDG jacket water pumps select OFF then AUTO:
Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A EGR 03B U1_EGR03B U1_EGR03B U1_EGR04A U1_EGR04A EGR 04A U1_EGR04B U1_EGR04B EGR 04B Page 20 of 20
Appendix D Scenario Outline Form ES-D-1 Facility: DC COOK 1 & 2 Scenario No.: 3 Op-Test No.: _________
Examiners: ___________________________ Operators: ____________________________
Initial Conditions: ___Power is stable @ 1e-8 in Intermediate Range with AFW in service .
Turnover: _______Raise Power to 2% to place MFP in service .
Critical Tasks Manually Trip Reactor, Actuate SI, Establish Cold Leg Recirculation Event Malf. No. Event Event No. Type* Description 1 R-RO Raise Power to 2% using rods 2 N- Control SG levels using AFW BOP 3 U1_NPP15 I-RO Pressurizer Pressure Channel Fails Low 1 @ 1700 TS 4 Set C- Main Steam Stop Valve Comes Off Detent (Open Limit Switch)
U1_MSVM BOP RV210 .94 5 U1_MPP21 I-BOP SG PORV Pressure Transmitter Failure 2 to 1500 TS 6 U1_RC10A C-RO RCS Leakage ramps in over 10 min. ramp to 5% TS 7 U1_RC01A M RCS LOCA over 30 second. ramp at 50%.
8 U1_RP01A C- Auto RX trip Fails - Manual Works U1_RP01B RO 9 U1_RP10A I(ATC) Auto SI Fails - Manual Works U1_RP10B 10 U1_RP16B C- CTS (West) Train B - fails to actuate (AUTO/MANUAL)
U1_RP17B BOP
- (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Page 1 of 20
Appendix D Scenario Outline Form ES-D-1 Event Summary The scenario starts with the plant stable at ~ 1e-8 amps on IR. The crew will be directed to withdraw rods to raise power to 2 % to roll the Main FW pump. The BOP will need to control SG levels with AFW in Manual.
After power has been raised, The Controlling Pressurizer Pressure channel will fail low.
The RO will be required to take manual control of Pressurizer Pressure Master Controller and restore normal pressure control. The Crew will implement the Abnormal Operating Procedure, address Technical Specifications, select an operable channel, and restore pressure control to automatic.
The #1 SG Main Steam Stop Valve will come off the open limit switch/detent. The crew will need dispatch an operator to check the status and then reopen the Stop Valve to continue on.
Next a failure of SG #11 Pressure Channel (MPP-212) fails high causing SG #11 PORV to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV, the crew will implement AOP actions, and the US will need to declare the associated radiation monitor inoperable.
Shortly after the SG Pressure Channel failure, a slowly developing RCS leak will require the RO to control Charging in an attempt to stabilize the plant.
The RCS leakage will develop into a large break LOCA. The plant will NOT automatically trip and Automatic Safety Injection will NOT actuate. The Crew will be required to manually trip the reactor and actuate Safety Injection. The BOP should identify that train B of Containment Spray/Phase B has failed to actuate and align as required. The crew will transition to E-1 and to ES-1.3 to align for cold leg recirculation. The scenario will terminate when the crew has aligned ECCS for cold leg injection.
Critical Tasks Manually Trip Reactor Manually Actuate SI Establish Cold Leg Recirculation Procedures E-0 Reactor Trip or Safety Injection E-1 Loss of Reactor or Secondary Coolant ES-1.3 Transfer to Cold Leg Recirculation Page 2 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 1 Event
Description:
Raise Power to 2 % from 1e-8 amps Time Position Applicants Actions or Behavior RO Briefs crew on reactivity plan for power rise.
US Reviews reactivity plan.
US Directs RO to commence Power Escalation in accordance with 1-OHP-4021-001-006, Power Escalation procedure.
RO Commences power rise.
- Verifies Control Rod Selector in Manual indicating rod Speed 48 Steps/min.
- Place Rod Control to withdraw for desired number of steps (0.5 to 3)
- Verify expected response Positive SUR and Power rising on Intermediate Range
- Verify expected response on RCS Tavg, Delta-T power and steam dump demand as power rises above the Point of adding Heat.
US Acts as reactivity manager.
Page 3 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 2 Event
Description:
Control SG levels using AFW Time Position Applicants Actions or Behavior BOP Monitors SG levels and Adjusts AFW flow control valves as required BOP Adjusts AFW valves as power reaches Point of Adding Heat Page 4 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 3 Event
Description:
Pressurizer Pressure Channel NPP 151 Fails Low Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel #108 indicative of a pressurizer (PRZ) pressure instrument failure (Drops 8, 9, 10).
RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
- 1. Restores PRZ pressure using manual control of EITHER:
- PRZ pressure master controller
- Both PRZ spray valve controllers Crew Performs Plant Stability Checks May Stabilize Power Rise by Inserting Control Rods US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of OHP-4022-013-009, Pressurizer Pressure Instrument Malfunction procedure.
Performs the following actions as directed:
RO 1. Reports NPP-151 has failed
- 2. Ensures PRZ pressure master controller is in manual
- 3. Places PRZ Press Ctrl selector switch in Ch 2 & 3 position
- 4. Places the following recorder switches in Ch 2, 3 or 4 position:
- PRZ Press Rec selector
- Delta T selector
- Overpower Delta T selector
- Overtemp Delta T selector
- 5. Verifies QMO-225, E CCP Leakoff is open
- 6. Dispatches Aux operator to open breaker for QMO-225 (1-ABV-D-5C)
Page 5 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 3 Event
Description:
Pressurizer Pressure Channel NPP 151 Fails Low Time Position Applicants Actions or Behavior Performs the following actions as directed:
- 7. Checks NLP-151, PRZ Level Channel 1 and NLI-151, PRZ Level Cold Calibration instruments for failure
- 8. Nulls (~2235#) and returns the following controllers to auto:
- Both PRZ spray valve controllers
- PRZ pressure master controller
- 9. Verify P-11 is in its correct state.
US Declares the East Centrifugal Charging Pump inoperable.
US Refers to ITS LCO:
- 3.3.1 RTS Instrumentation (Condition A Table 3.3.1-1, Function 6, 8a, 8b - Cond D)
- 3.3.2 ESFAS Instrumentation (Condition A Table 3.3.2-1, Function 1d, 8b - Cond D & G) (6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> to trip bistables)
- 3.5.2 ECCS Subsystems (Condition A - 72 hr)
- TRM 8.1.1 Boration Systems (Condition A - 72 hr)
US Notifies SM/MTI to initiate actions to trip bistables associated with NPP-151 PZR Pressure Failure per Attachment A of OHP-4022-013-009.
RO Monitors PRZ pressure response and ensures normal PRZ heater operations Page 6 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 4 Event
Description:
Main Steam Stop Valve Comes Off Detent (Open Limit Switch)
Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciator on Panel #113 indicative of a Stop Valve misalignment Drop 6 SG 1 STOP VLV1-MRV-210 ABNORMAL US Directs BOP to review ARP for annunciators and dispatch operator to Investigate.
BOP Determines Main Steam Stop Valve 1-MRV-210 has come off the open detent.
US Directs BOP to reopen Main Steam Stop Valve 1-MRV-210 BOP Re-open Main Steam Stop Valve 1-MRV-210 by placing Control Switch to open May Refer to 1-OHP-4021-051-003 Removing a SG Stop Valve MMO or MRV from Service.
US May Refer to Technical Specification 3.7.2 Page 7 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 5 Event
Description:
SG Pressure Channel MPP-212 Fails HIGH - SG 1 PORV Opens Time Position Applicants Actions or Behavior BOP Recognize and reports Annunciator Panel #114, Drop 21, 1-MRV-213 OP OR HSD1 PANEL OVERRIDE alarm that indicates SG #1 PORV (MRV-213) has opened.
BOP Place SG PORV #1 in Manual and Closes #1 PORV.
Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Direct operator actions to determine cause, verify SG #1 PORV closed, and monitor Reactor Power.
BOP Reports MPP-212 has failed high.
US Enters and directs actions of 1-OHP-4022-013-012, Steam Generator Pressure Instrument Malfunction procedure.
US Refers to TSs / TRM:
- TS 3.3.2 ESFAS Instrumentation (Condition A Table 3.3.2-1, Function 1.e (1& 2) & 4.d - all Condition D) Trip bistables in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />
- TRM 8.3.8. Radiation Monitoring Instrumentation (Condition A Table 8.3.8-1, Function 2.b - Condition C)
- Declares MRA-1601 inoperable
- Restore in 7 days US Notifies SM/MTI to Initiate actions to trip bistables associated with MPP-212 Steam Generator Pressure Instrument Failure per Attachment A-3 of 1-OHP-4022-013-012.
Page 8 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 6 Event
Description:
RCS Leakage ramps in over 10 min. ramp Time Position Applicants Actions or Behavior RO/US Determines that a loss of reactor coolant is occurring based on the following:
- Pressurizer and VCT level change
- Charging and letdown flow mismatch
- Containment radiation monitoring trend ERS-1300, ERS-1400
- Containment pressure rise
- Containment sump level rise
- Containment dewpoint US Enter and direct actions of 1-OHP-4022-002-020, Excessive Reactor Coolant Leakage procedure.
RO Performs the following actions, if directed:
- 1. Manually raises charging flow to maintain pressurizer level.
- 2. Manually adjusts seal injection flow (6-12 gpm / each RCP).
- 3. Reduces/isolates letdown flow to maintain pressurizer level.
- 4. Attempts to determine RCS leak rate.
Refers to TSs / TRM:
US TS 3.4.13 RCS Operational Leakage (Condition A & B) - Reduce In 4 Hours TS 3.6.4 Containment Pressure (if >.3 psig) Condition A - Restore in 1 Hour Page 9 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event
Description:
RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US/BOP Acknowledges Ann. Panel 122, Drop 83, ICE CONDENSER INLET DOORS OPEN, alarm and/or RMS PPC Alarms on Panel 111 and determines that the reactor coolant leak rate has risen US Directs RO/BOP to manually trip the Reactor and perform the immediate actions of OHP-4023-E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging or makeup system capability or rising containment pressure).
RO Performs Manual Reactor Trip Critical Opens Trip Breaker A - OR- Trip Breaker B Task #1 RO/BOP Perform the immediate actions of E-0:
- 1. Checks reactor trip.
- 2. Checks turbine trip.
- 3. Checks power to AC emergency buses RO/BOP Determines that Automatic Safety Injection Did NOT occur and is required.
Critical Task #2 Actuates Safety Injection (Must have one train actuated)
Pressurizer Panel - Train A and/or Train B
-OR-Safety Injection Panel - Train A and/or Train B US Ensures immediate actions of E-0 are completed.
RO/BOP Reviews E-0 Foldout Page Criteria.
Page 10 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event
Description:
RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior RO/BOP Trip Reactor Coolant Pumps due to Phase B RO/BOP Determines that Train B CTS has NOT actuated (White CTS timer off on Train B - CTS Monitor Lights Not Lit)
US Directs Operator to Actuate CTS/Phase B and Align Valves as Required RO/BOP Actuate CTS and Phase B Align CTS Valves as Required per SML-9A and SML-9B Verifies East CTS Pump starts and starts West CTS pump as directed by US.
US Directs subsequent actions of E-0.
RO/BOP Performs manual actions of E-0 Attachment A as directed by US.
RO/BOP Manually controls AFW flow to maintain SG narrow range levels 13% [28%] - 50% once one SG narrow range level is > 13% [28%].
CREW Completes all actions of E-0 through step 19 (Check If RCS Is Intact).
RO/BOP Manually Closes Train B Phase B valves (May Use Sup-004)
NOTE:
Momentary entry into OHP-4023-FR-P.1 will be required until crew verifies RHR flow sufficient to indicate a LB LOCA has occurred.
US Enters OHP-4023-E-1, Loss Of Reactor Or Secondary Coolant.
Page 11 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event
Description:
RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior RO/BOP Reviews E-1 Foldout Page Criteria (see NOTE regarding cold leg switchover criteria).
NOTE:
When RWST level lowers to < 30% then the crew must immediately Transition to ES-1.3, Transfer To Cold Leg Recirculation.
See Page 13 for applicants actions or behaviors associated with ES-1.3, Transfer To Cold Leg Recirculation.
US Directs actions of OHP-4023-E-1, Loss Of Reactor Or Secondary Coolant.
BOP Maintains SG narrow range levels 20% - 50%.
US/RO Check If CTS may be terminated - (No Pressure < 300 Psig)
Check If RHR may be terminated - (No Pressure < 300 Psig)
BOP Performs the following as directed:
- 1. Reset SI.
- 2. Stops running Emergency Diesel Generators (EDGs).
- 3. Dispatches operator to secure EDG jacket water pumps.
US Evaluate Plant Status
- Check Recirc Capabilities
- Check Aux Building Radiation Page 12 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event
Description:
RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US Announces transition to OHP-4023-ES-1.3, Transfer To Cold Leg Recirculation when RWST level < 30% per:
- E-0, Foldout Page, Criteria 3
- E-1, Foldout Page, Criteria 5
- E-1, Step 13 Applicants actions or behavior associated with ES-1.3, Transfer To Cold Leg Recirculation.
US Directs actions of ES-1.3, Transfer To Cold Leg Recirculation.
RO/BOP Resets both trains of Safety Injection.
RO/BOP Adjusts CCW return flow on each RHR HX at 3000-3500 gpm.
Checks the following prior to switching over to cold leg recirc:
RO/BOP
- RWST level < 20%
- Cntmt water level > MIN RECIRC LEVEL Page 13 of 20
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event
Description:
RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US/RO Directs/Performs switchover as follows:
NOTE: If RWST level < 9% then stop CCPs and SI pumps.
Critical 1. Stops and locks out East RHR pump.
Task #3 2. Stops and locks out East CTS pump (if not previously stopped).
- 4. Initiates valve closure:
- IMO-310, East RHR pump suction
- 5. Stops and locks out West CTS pump (if not previously stopped).
- 6. Stops and locks out West RHR pump.
- 8. Initiates valve closure:
- IMO-320, West RHR pump suction
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event
Description:
RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US/RO Continues to direct/perform switchover as follows:
- 9. Restores control power to ICM-305, Recirc sump to East RHR/CTS pumps.
Critical Task #3 10. Checks ICM-305 open interlock:
- IMO-310 fully closed
- IMO-215 fully closed
- 11. Opens ICM-305.
- 12. Starts:
- East RHR pump
- East CTS pump if previously running.
- 13. Restores control power to ICM-306, Recirc sump to West RHR/CTS pumps.
- 14. Checks ICM-306 open interlock:
- IMO-320 fully closed
- IMO-225 fully closed
- 15. Opens ICM-306.
- 16. Starts
- West RHR pump
- Starts the West CTS pump if previously running.
Critical Task Summary Task Elements Results
- 1 Cueing: SAT / UNSAT
- Symptoms which require a reactor trip (i.e., RCS Manually Trip Pressure, Containment Pressure)
Reactor
- Challenge to multiple reactor trip instrumentation setpoints (i.e.):
- Lo Pressurizer Pressure
- Hi Containment Pressure Performance Indicators:
- Manually open at least one reactor trip breaker from the control room.
- Reactor trip breaker must be opened prior to Crew transition to FR S.1 or FR C series Performance Feedback:
- RPIs indicate rods - fully inserted
- Rod bottom lights - lit
- Neutron flux - lowering
- 2 Cueing: SAT / UNSAT
- Check SI Actuated Safety Injection Actuated Status Manually Light LIT (E-0, Step 5.a)
Actuate/Align one -OR-train of Safety
- Check BOTH CCP leakoff valve "Safety Injection Injection Signal" white lights - LIT Performance Indicators:
Before transitioning to FR C.1:
- Manually Actuate SI (Train A or B)
-OR-
- Manually Start/Align ECCS Equipment and Actuate Phase A (Train A or B)
Performance Feedback:
- ECCS flow is indicated to at least one train (as indicated by flow on cold leg BIT injection flowmeters, 1 SI Train and 1 RHR Train)
- One Train of Phase A Isolation is complete per E-0 Attachment A Page 16 of 20
Critical Task Summary Task Elements Results
- 3 Cueing: SAT / UNSAT
- E-0 Foldout Page, Criteria 3 (switchover criteria)
Establish Cold Leg
- E-1 Foldout Page, Criteria 5 (switchover criteria)
Recirculation Flow
- E-1, Step 13, Check For Transfer To CL Recirc.
Performance Indicators:
- RHR pumps stopped for no longer than 5 minutes during switchover.
Performance Feedback:
- At least one train of ECCS pumps running /
indicating flow with suction aligned to Recirc Sump.
Page 17 of 20
Scenario Instructor Actions Setup:
- 1. Reset to IC 850 1623 PPM 170 Steps on Bank D, 548.9 Power is stable @ 1e-8 in Intermediate Range with AFW in service Mode 1 Checklist Complete
- 2. Reset control rods and check group step counters.
- 3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.
- 4. Advance chart recorder paper & clear chart recorder memory.
- 5. Activate the following (pre-load) malfunctions:
Train A Reactor Trip Auto Failure U1_RP01A Train B Reactor Trip Auto Failure U1_RP01B Train A Safety Injection Auto Failure U1_RP10A Train B Safety Injection Auto Failure U1_RP10B U1_RP16B Train B Phase B Auto Fails U1_RP17B Train B Phase B Manual Fails Page 18 of 20
Scenario Instructor Actions Scenario Events:
EVENT #1 & 2 Respond as required to requests for chemistry sampling or startup preps EVENT #3 ICF U1_NPP151 to 1700 over 3 seconds cause the Pressurizer Pressure Channel to fail Low U1_NPP151 When Requested to De-energize Power for QMO-225 (1-ABV-D-5C)
U1_EDPR10J EVENT #4 Set the Main Steam Stop Valve to 94% to simulate valve off open detent.
Set U1_MSVMRV210 0.94 EVENT #5 ICF U1_MPP212 to 1200 over 4 seconds to cause the SG Pressure Channel MPP-212 to Fail High (SG11 PORV Opens in Auto)
U1_MPP212 EVENT #6 ICF U1_RC10A to 5 over 10 minutes to cause RCS Leakage U1_RC10A Page 19 of 20
Scenario Instructor Actions EVENT #7 (8, 9, & 10 already loaded)
ICF U1_RC01A to 50 over 30 seconds to cause RCS Break U1_RC01A Local actions after entry into E-0:
- Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01
- Aux Tour will monitor Spent Fuel Pool Level and Temperatures
- Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.
U1_CHR02 OR U1_CHR03 (both have 10 minute delays built in)
- U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.
If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A U1_EGR03B U1_EGR03B EGR 03B U1_EGR04A U1_EGR04A EGR 04A U1_EGR04B U1_EGR04B EGR 04B Page 20 of 20
Appendix D Scenario Outline Form ES-D-1 Facility: DC Cook 1 & 2 Scenario No.: 4 Op-Test No.: _________
Examiners: __________________________ Operators: ____________________________
Initial Conditions: ______80% Power_____________________________________________
Turnover: Start the West TACW pump and stop the East TACW Pump .
Critical Tasks Stabilize SG#12 Level following FFC-220 Failure, Align High Head Injection Event Malf. No. Event Event No. Type* Description 1 N-BOP Swap Turbine Aux Cooling Water (TACW) Pumps.
2 U1_CV04C C-RO Letdown Orifice valve fails closed 3 U1_NLP151 I-RO Pressurizer Level Channel Failure (perform before letdown
@ 0% TS is restored) 4 U1_FFC220 I-BOP Feed Flow Channel Fails low on SG 2
@ 0 over 20 TS sec 5
U1_FW05A C-BOP East Main Feed Pump Trip R -RO 6 R-RO Stabilize Plant And Recover AFD from FW Pump Trip N-BOP 7 U1_RC02C M Hot Leg LOCA 100%
8 U1_ED05H C-BOP Loss of Power to T11D 9 U1_RP20B, C-RO Slave Relay failures: High Head [ECCS] Charging valves fail U1_RP20G to align (Preloaded)
U1_RP19G 10 U1_WRHR C- BOP RHR Pump Fails to Start ECA-1.1
- (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Page 1 of 16
Appendix D Scenario Outline Form ES-D-1 Event Summary The Crew is directed to start West TACW pump and stop East TACW Pump.
After the TACW pump swap, the in-service letdown orifice valve will fail closed. The RO will need to restore letdown through a different valve.
Prior to restoring letdown, the controlling Pressurizer Level channel NLP-151 fails LOW. Charging flow control valve (QRV-251) will be in manual so RO will monitor for stability. Pressurizer water level low alarm comes in (letdown was previously isolated) and all pressurizer heaters will de-energize. The RO will have manual control of the Pressurizer Level controller and will be restoring level. The crew should implement the AOP, stabilize the plant, trip bi-stables, select an operable channel, and restore letdown and level control to auto.
The #2 SG Feed Flow instrument (FFC-220) fails LOW. This will result in the opening of #2 SG FWRV (FRV-220) to raise feedwater flow. The BOP will be required to take manual control and regulate FRV-220. The Crew will be required to implement AOP actions to stabilize the plant.
A trip of the East Main Feed Pump will result in a rapid power reduction to less than 60% if not already performed. The BOP will start additional pumps as required and stabilize FW pump speed control.
The RO will be required to control reactivity while the BOP monitors the SG levels.
A Hot Leg break will result in a Reactor Trip and Safety Injection. On the SI, various slave relay failures will cause the High Head Charging (ECCS) Injection flowpath to fail to align. The RO will need to manually align the High Head Injection Valves. The crew will enter E-0 and transition to E-1. The West RHR pump will trip resulting in a loss of Recirculation Capability requiring entry into ECA-1.1.
On the Generator Trip, a loss of 4 KV bus T11D causes a trip of the running Charging Pump, Component Cooling Pump, and ESW pump. The Standby ESW (U2) and CCW pumps will start. (The East RHR and North SI pumps will also be unavailable)
Critical Tasks Stabilize SG#12 Level following FFC-220 Failure Align High Head Injection Procedures E-0, Reactor Trip or Safety Injection E-1, Loss of Reactor or Secondary Coolant FR-Z.1, Response to High Containment Pressure FR-P.1, Response to Imminent Pressurized Thermal Shock Page 2 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 1 Event
Description:
Swap Turbine Aux Cooling Water (TACW) Pumps.
Time Position Applicants Actions or Behavior US Directs actions of 1-OHP-4021-058-002, Operation of TACW System.
BOP Performs the following to swap TACW pumps as directed:
- Start Standby (West) TACW Pump.
- Stop running (East) TACW Pump.
- Place East TACW Pump in AUTO.
Page 3 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 2 Event
Description:
Letdown Orifice valve fails closed Time Position Applicants Actions or Behavior RO Identifies and reports rise in pressurizer (PRZ) or lowering VCT level due to a loss of letdown flow as a result of QRV-162 failing closed.
US/RO Minimizes charging flow to that amount required for seal injection.
US Directs RO to restore normal letdown (using QRV-161, 75 gpm letdown orifice) per 1-OHP-4021-003-001, Letdown, Charging, and seal water Operation, Attachment 13.
RO/BOP Restores normal letdown per Attachment 13, Section 4.1 as follows:
(Will Perform after following event)
- 1. Places QRV-302 in divert position.
- 2. Verifies orifice isolations closed (QRV-160, 161 and 162).
- 3. Adjusts CRV-470 controller to >50% output.
- 4. Verifies open letdown isolation valves:
- a. QCR-300, CVCS letdown Cntmt isol
- b. QCR-301, CVCS letdown Cntmt isol
- c. QRV-111, RC letdown to Regen hx
- d. QRV-112, RC letdown to Regen hx
- 5. Adjusts QRV-301 controller to 50% output.
- 6. Checks/adjusts charging flow to > 75 gpm.
- 7. Opens QRV-161, 75 gpm letdown orifice isolation.
- 8. Adjusts QRV-301 to maintain 160 - 350 psig on QPC-301.
- 9. Places QRV-301 in auto (if desired).
- 10. Nulls and returns CRV-470 controller to auto.
- 11. Adjusts charging flow as required to maintain PRZ level.
- 12. Places PRZ level control in automatic (if desired).
- 13. Places QRV-302 in normal (demin) position when letdown temperature is stable.
Page 4 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 3 Event
Description:
Pressurizer Level Channel NLP-151 Failure (perform before letdown is restored)
Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel #108 (Drops 4 and 5). Reports instrument malfunction indicative of a pressurizer (PRZ) level instrument failure.
RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
- Verifies 1-QRV-251, Charging Flow Controller OR PRZ Level Controller in manual from previous event or manually adjusts output to restore charging header flow and seal injection to normal Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of OHP-4022-013-010, Pressurizer Level Instrument Malfunction procedure.
RO Performs the following actions as directed:
- 1. Restores PRZ level using 1-QRV-251 or level controller
- 2. Reports 1-NLP-151 has failed
- 3. Ensures PRZ level control is in manual
- 4. Places PRZ Level CTRL selector switch in Ch 2 & 3 position
- 5. Places PRZ Level REC selector switch in 2 or 3 position
- 6. Checks NPP-151 and NLI-151 for failure
- 7. Restore Letdown or Excess Letdown per 1-OHP-4021-003-001 (See Steps on Previous Event #2)
- 8. Cycle PRZ Heaters to restore control
- 9. Nulls and returns 1-QRV-251 and PRZ Level Controller back to auto (May Proceed to event #4 at Lead Examiners Discretion)
US Initiates actions to trip bistables associated with 1-NLP-151 PZR Level Failure per Attachment A of OHP-4022-013-010.
US Refers to Tech Specs (TS):
- TS 3.3.3 Post Accident (Minimum channels met)
- TS 3.3.4 Remote Shutdown Instrumentation (Condition A)
Page 5 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 4 Event
Description:
Feed Flow Channel (FFC-220)Fails low on SG 2 Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciators on Panel #113
- Drop 32, Steam Generator 2 Water LVL HI Deviation
- Drop 42 Steam Generator 2 Feedwater Flow High
- Drop 43, Steam Generator 2 SF > FWF Mismatch BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
Critical
- Places FRV-220, SG #2 MFW Reg. Valve controller in Task #1 manual Lowers controller output to match the operable feed flow channel with steam flow.
- Restores SG #2 level to program.
- Performs Stability Checks Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
US Enters and directs actions of OHP-4022-013-015, Feedwater Flow Instrument Malfunction procedure.
BOP Performs the following actions as directed:
- 1. Reports FFC-220 has failed low
- 2. Places FS-520-C selector switch in channel 2 position.
- 3. Nulls and returns FRV-220 controller to auto.
US Refers to Tech Specs 3.3.1 RTS Instrumentation (Condition A Table 3.3.1-1, Function 15, Condition D). Trip Bistables in 6 Hr US Notifies SM/MTI to Initiate actions to trip bi-stables associated with FFC-220 FW Flow Failure per Attachment B-1 of OHP-4022-013-015.
Page 6 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 5 Event
Description:
East Main Feed Pump Trip Time Position Applicants Actions or Behavior BOP Recognizes indication of MFP trip and reports annunciator Panel
- 115, Drop 1, East FPT DCS Trouble, DCS Screen East FW Pump Tripped Status US Directs operators to perform the immediate actions per OHP-4022-055-001, Loss of One MFP.
RO Performs the following immediate actions:
- 1. Verify Turbine Load is automatically reduced to < 60%
- 2. Verifies rod control switch in AUTO and functioning properly.
BOP Performs the following immediate actions:
- 1. Close the East FW Pump Emergency Leakoff Valves FRV-251 & 252
- 2. Adjust West FW Pump speed/integration as required
- 3. Start Standby Hotwell & Condensate Booster Pumps if required
- 4. Start AFW pumps if required.
US Checks the immediate actions and directs operators to perform the subsequent actions of OHP-4022-055-001, Loss of One MFP.
BOP Verify SG levels are stable at or returning to normal (44%).
RO Initiate normal or emergency boration flow (if required) to maintain rods above the RIL (~1.89 * % power) using Attachment C or D of OHP-4022-055-001 CREW May enter Technical Specification 3.4.1 RCS Pressure, Temperature, and Flow DNB Limits (Condition A) if Pressure lowers to <2168 psig. (2200 psig admin limit) (may use PPC times to track TS entry/exit times)
Page 7 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 6 Event
Description:
Stabilize Plant And Recover AFD from FW Pump Trip Time Position Applicants Actions or Behavior US Direct operator actions to restore normal system alignment: (as required) OHP-4022-055-001 (Steps 8-16)
- Restore AFD to required Band
- Restore Megawatt Control to OUT
- Return W MFP to DP control
- Check ALL PRZ Backup Heaters on
- Reset Steam Dump Load Rejection
- Stop running AFW pumps and align for standby condition (Attachment B)
- Complete FW Pump Shutdown
- Align Condensate system for current plant conditions RO Borate to position rods to restore AFD to within Target Band (Attachment C or D of OHP-4022-055-001)
BOP Stop AFW Pumps and Place in Standby (Attachment B)
Stabilize West FW pump speed and restore required DP Reset Steam Dump Load Rejection Align Condensate system for current plant conditions Page 8 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event
Description:
Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior RO/US Acknowledge Ann. Panel 122, Drop 84, ICE CONDENSER INLET DOORS OPEN, alarm.
Determines that a loss of reactor coolant is occurring based on the following:
- Pressurizer and VCT level change
- Charging and letdown flow mismatch
- Containment radiation monitoring trend
- Containment pressure rise
- Containment sump level rise
- Containment dewpoint US Directs RO/BOP to manually trip the reactor and initiate safety injection and perform the immediate actions of OHP-4023-E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging system capability or rising Containment Pressure).
RO/BOP Performs the immediate actions of OHP-4023-E-0:
- Checks reactor trip
- Checks turbine trip BOP Checks power to AC emergency buses
- Determines that T11A and T11B are Energized
- May Identify that 1AB DG did Not Start (from relay failure)
- Determines That T11D and T11C are De-Energized RO Verifies that Safety Injection Has Actuated US Ensures immediate actions of E-0 are completed US Directs subsequent actions of E-0.
RO/BOP Reviews E-0 Foldout Page Criteria.
BOP Manually controls AFW flow to maintain SG narrow range levels 13% - 50% once one SG narrow range level is > 13%.
Page 9 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event
Description:
Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior RO Reports that RHR pumps are NOT running - 1E RHR pump off due to T11D Power Loss and 1W RHR Pump has tripped.
US/RO Manually opens high head safety injection valves:
- BIT Inlet Valve Critical o 2-IMO-256 Task #2
- BIT Outlet Valve o 2-ICM-251 Note: Event 9, Manually align the High Head Injection Valves.
US/RO Verifies Containment Isolation - Phase A.
CREW Manually stops all Reactor Coolant Pumps (RCPs) when RCS pressure lowers below 1300 psig.
RO/BOP Performs verification and actions of E-0 Attachment A as directed by US.
CREW Completes all actions of E-0 through step 19 (Check If RCS Is Intact).
US Announces transition to OHP-4023-E-1, Loss Of Reactor Or Secondary Coolant (at step 19 of E-0).
Checks Status Trees for Red Path US May Transition to Z.1 on Orange Path in Containment based on Pressure.
- Check Containment Isolation
- Verify CTs operating and Phase B
- Stop Vent Fans
- Verify CEQ Fans Running and Lineup
- Verify Secondary not Faulted & Isolated Return to Procedure and step in effect Page 10 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event
Description:
Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior US May Transition to OHP-4023-FR-P.1 due to RED Path.
- Identifies RCS pressure < 300psig - May exit at RNO May Continue since No RHR Flow (due to lost Pumps)
- Verifies Cooldown Sources Isolated
- Check PZR PORVS
- Check ECCS Go to Step 26 due to No Subcooling for Soak and exit RO/BOP Reviews E-1 Foldout Page Criteria.
US Directs actions of E-1, Loss Of Reactor Or Secondary Coolant.
BOP Maintains SG narrow range levels 27% - 50%.
Directs chemistry to initiate post-accident sampling US Checks if SI Termination Criteria is MET:
- RCS Subcooling >40°F - NO
- RCS Pressure rising or stable - NO Lowering
- Pressurizer Level >20%
Crew Checks CTS Injection - (If Containment < 2 PSIG RCS pressure <300 Psig so operate for 24 Hours)
Page 11 of 16
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event
Description:
Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior RO/BOP Performs the following as directed:
- 1. Resets both trains of Safety Injection
- 2. Checks Emergency Diesel Generators (EDG) NOT running
- 4. Evaluate Long Term Plant Status (RHR Not Available)
US Announces transition to OHP-4023-ECA-1.1, Loss of Emergency Coolant Recirculation (at step 11 of E-1).
Terminate Scenario Page 12 of 16
Critical Task Summary Task Elements Results Cueing: SAT / UNSAT
- Panel #113 Drops 43 & 32
- 1
- FFC-220 Indication Lowering
- FRV-220 opening Manually Control SG#12 Level on FFC- Performance Indicators:
220 Failure
- Place FRV-220 in Manual and control SG #12 Level to maintain it 15% - 67% preventing a Reactor Trip.
(May Select FFC-221 as Controlling Channel and Place\Leave FRV-220 In Auto)
Performance Feedback:
- SG Level Stabilizes and returns to band
- 2 Cueing: SAT / UNSAT
- Check BIT Flow (E-0, Attachment A Step 2)
Manually Align one
- 1-IFI-51 train of Safety
- 1-IFI-52 Injection to establish HIGH Head Injection
- 1-IFI-53 Flow
- 1-IFI-54 Performance Indicators:
Before transitioning from E-0 and entering a Core Cooling Critical Safety Function Procedure.
Manually Align Valves
- BIT Inlet Valve ICM-256 - OPEN
- BIT Outlet Valve ICM-251 - OPEN Performance Feedback:
- ECCS flow is indicated to at least one train (as indicated by flow on cold leg BIT injection flowmeters)
- 1-IFI-51
- 1-IFI-52
- 1-IFI-53
- 1-IFI-54 Page 13 of 16
Scenario Instructor Actions Setup:
- 1. Reset to IC- 308 MOL; 80% power, 883 MW, 805.58 ppm, 565.7 F 195 Steps on D
- 2. Reset control rods and check group step counters.
- 3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.
- 4. Advance chart recorder paper & clear chart recorder memory.
- 5. Activate the following (pre-load) malfunctions:
Generator Trip to Trigger 4 Generator Trip on T4 T11D Failure to Trigger 4 U1_ED05H RPS Relay Failure Train B U1_RP20B AB DG, QMO226, 1S NESW, IMO-256 ICM-251 U1_RP20G U1_RP19G U1_WRHR West RHR Trip ON T10 U1_RC02C Hot Leg Break on T10 U1_RC01C CL Break on T10 (raise size of RCS break)
Page 14 of 16
Scenario Instructor Actions Scenario Events:
EVENT #1 If asked, a Starting Party is standing by to observe swap of the TACW Pumps.
EVENT #2 IMF CV04C, to cause QRV-162, 75 gpm letdown orifice to fail closed.
U1_CV04C If desired, direct the Crew as the SM to restore ONLY 75 GPM letdown using section 4.1 of Attachment 13.
EVENT #3 ICF U1_NLP151 to 0 to fail Pressurizer Level Channel NLP-151 (perform before letdown is restored)
U1_NLP151 NOTE: May Proceed to event #4 at Lead Examiners Discretion if waiting to Restore Pressurizer Level Control to Auto EVENT #4 ICF U1_FFC220 to 0 over 20 Seconds to cause Feed Flow Channel FFC-220 to fail low on SG 2 U1_FFC220 EVENT #5 IMF U1_FW05A to cause the East Main Feed Pump Trip U1_FW05A EVENT #6 No Additonal Actions Page 15 of 16
Scenario Instructor Actions EVENT # 7, 8,& 9 Activate Trigger 10 to begin the LOCA with Slave Relay failures, RHR Pump Trip and Loss of T11D (on Generator Trip)
Start LOCA On T10 Local actions after entry into E-0:
- Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01
- Aux Tour will monitor Spent Fuel Pool Level and Temperatures
- Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.
U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in)
- U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.
Manually (locally) CLOSE 1-HV-ACR-DA-2A if Dispatched U1_HVR11 If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO U1_EGR03A EGR 03A U1_EGR03A U1_EGR03B U1_EGR03B EGR 03B U1_EGR04A U1_EGR04A EGR 04A U1_EGR04B U1_EGR04B EGR 04B Page 16 of 16
Appendix D Scenario Outline Form ES-D-1 Facility: DC Cook 1 & 2 Scenario No.: 5 Op-Test No.: _________
Examiners: ___________________________ Operators: ____________________________
Initial Conditions: ___100% power .
Turnover: Reduce power for East AFW pump inoperable > 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> - Shutdown in 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> .
Critical Tasks Stabilize SG Level following BLP111 Failure, Isolate the Faulted Steam Generator Event Malf. No. Event Event No. Type* Description 1 U1_QLC45 I-RO VCT Level Channel QLC 452 fails HIGH 2 to 100 TS 2 R-RO Perform Rapid Power Reduction N-BOP 3 U1_RX11D C-BOP SG PORV Controller Failure
@100%
4 U1_ECP C-RO East CCP pump trips TS 5 U1_BLP111 I-BOP #11 SG level Transmitter fails LOW
@ 0 over 30 TS sec 6 U1_MS01D M-ALL Steam Line Break inside Containment (#14 SG)
@ 20 over 2 min 7 U1_RP03A C-RO AUTO/MANUAL Reactor trip actuation failure (ATWS)
U1_RP03B 8 U1_RP07A C-BOP Steam Line Isolation fails to AUTO actuate U1_RP07B (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Page 1 of 21
Appendix D Scenario Outline Form ES-D-1 Event Summary The scenario starts with the East MDAF pump inoperable due to a failed coupling. The crew must perform a shutdown within the next 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.
Prior to reducing power, the VCT Level Channel QLC-452 fails high. This will cause the QRV-303 VCT Divert valve to fully divert letdown flow to the HUT. The Operator is required to take Manual control of QRV-303 and direct letdown flow back to the VCT. Crew will be required to implement AOP actions to stabilize the plant and address Technical Specifications (TRM).
If required, the crew will be directed by the Shift Manager to lower power.
A failure of the SG #11 PORV Controller while in Auto will occur. The Controller will fail causing PORV MRV-213 to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV and the US will need to declare the associated radiation monitor inoperable.
The next event will involve a trip of the East Charging Pump. This will result in the loss of charging and letdown. RO will be required to manually start the West Charging Pump to restore charging flow. Crew will be required to take manual control of charging and restore letdown to stabilize the plant.
The #11 Steam Generator Level instrument (BLP-111) fails LOW. This results in a higher feedwater flow and Steam Generator level will rise. BOP will be required to take manual control and restore normal level. Crew will be required to implement AOP actions to stabilize the plant and address Technical Specifications.
The main event will involve a Steamline Break inside containment on the #14 SG. The unit will NOT trip and a Safety Injection will actuate. The reactor must be locally tripped. The crew will implement FR-S.1 actions until reactor is subcritical. Failure of the Steam Line Isolation actuation circuit will require a manual actuation. After the crew performs the actions of FR-S.1, they should identify the Main Steamline Break inside containment on the #14 SG. The crew will isolate the SG in FR-Z.1 or eventually transition to E-2 to isolate #14 SG. The scenario will terminate when the crew has isolated the Faulted SG.
Critical Tasks Stabilize SG Level following BLP111 Failure Isolate the Faulted Steam Generator Procedures E-0, Reactor Trip or Safety Injection E-2, Faulted Steam Generator Isolation FR-S.1, Response to Anticipated Trip without Scram FR-Z.1, Response to High Containment Pressure Page 2 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 1 Event
Description:
VCT Level Channel QLC 452 fails HIGH Time Position Applicants Actions or Behavior RO Recognizes indication of VCT Level problem and reports Annunciator Panel #109 (if VCT level on QLC-451 lowers to 14%):
- Drop 48 VOLUME CTRL TANK MAKEUP NOT IN AUTO alarm
- Drop 49 VOLUME CONTROL TANK LEVEL LOW alarm Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
- Place QRV-303 controller in Manual and lowers demand
-OR-
- Place Divert valve (QRV-303) in VCT position.
- Recognizes and reports failure of VCT Level Transmitter (QLC-452).
US Directs operator actions per 1-OHP-4022-013-017, VCT Instrument Malfunction.
US Refers TRM 8.1.1, Boration Systems - Operating:
- Condition A (Interposing Relay should be energized for Refueling Water Sequence).
Enters action statement to restore to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.
US Notify SM/MTI to initiate actions to energize Interposing Relay in accordance with Attachment B.
Page 3 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 2 Event
Description:
Rapid Power Reduction Shutdown Time Position Applicants Actions or Behavior US Directs RO to commence Rapid Power Reduction in accordance with 1-OHP-4022-001-006, Rapid Power Reduction.
RO Performs (Att. D) NORMAL BORATION:
- Verify charging is > 75 gpm
- Place RC Makeup Blend control switch in STOP.
- Place RC Makeup Blend Control Mode switch in BORATE.
- Adjust BA Controller/Totalizer to the desired flow rate and amount.
- Place RC Makeup Blend control switch in START.
- May take QRV-303 to MANUAL/OPEN (as required) to maintain VCT level and pressure.
1-OHP 4022-001-006 Attachment D Table
-OR-(Next page)
Page 4 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 2 Event
Description:
Rapid Power Reduction Shutdown Time Position Applicants Actions or Behavior Performs (Att. E) EMERGENCY BORATION:
- Verify charging is > 75 gpm.
- Place #2 BAT pump to FAST speed.
- Open QMO-410, Emergency Boration To CHG Pump Suction valve.
- Verify QFI-410, Emergency Boration Flow.
- May take QRV-303 to MANUAL/OPEN (as required) to maintain VCT level and pressure.
1-OHP 4022-001-006 Attachment E Table RO Commences power reduction:
- Verify all PRZ backup heaters ON.
- Ensures control rods in AUTO.
BOP Acts as peer checker for RO and verifies appropriate reactivity feedback.
Page 5 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 2 Event
Description:
Rapid Power Reduction Shutdown Time Position Applicants Actions or Behavior BOP Performs Attachment F Adjusting Main Turbine Load
- Places MW feedback IN
- Enters TARGET Load into HMI
- Enters RAMP RATE into HM
- Depresses GO to Lower Turbine load using HMI.
CREW Begins Load Reduction on Main Turbine RO Monitors Power and Tavg as load lowers BOP Monitors SG Levels and FW Pumps as Load Lowers Page 6 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 3 Event
Description:
SG PORV Controller Failure Time Position Applicants Actions or Behavior BOP Recognize and reports Annunciator #114 Drop 24 that indicates SG #4 PORV MRV-243 has opened.
BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
Crew Performs plant stability checks.
US Enters OHP-4022-IFR-001, Instrument Failure Response: to direct operator actions to close SG #4 PORV and monitor Reactor Power.
US Declares the SG #4 PORV Radiation Monitor MRA-1602 inoperable.
US Refers to the following Tech Specs (TS) / Tech Requirements Manual (TRM):
- TRM 8.3.8. Radiation Monitoring Instrumentation, Condition A Table 8.3.8-1 Function 2b Condition C.1-Restore channel/monitor to operable status within 7 Days (PORV must be able to auto open for Radiation Monitor but not PORV safety Function.)
Page 7 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 4 Event
Description:
East CCP pump trips Time Position Applicants Actions or Behavior RO Recognizes and reports multiple annunciators on Panel #107, #108 and #109 which are indicative of a loss of charging capability.
- Loss of charging flow
- Loss of letdown flow
US Directs RO to start the W CCP per annunciator response procedure(s):
- 1-OHP 4024-108 Drop 20, Charging Flow < Min Set Point or
- Starts W CCP
- Adjusts QRV-200 and QRV-251 flow to maintain RCP seal injection flow and pressurizer level.
- Places normal letdown back in service in accordance with 1-OHP-4021-003-001, Attachment 13.
(Continued on next page)
Page 8 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 4 Event
Description:
East CCP pump trips Time Position Applicants Actions or Behavior RO Restores normal letdown per 1-OHP-4021-003-001, Letdown, Charging, and Seal Water Operation, Attachment 13 :
- 1. Places QRV-302 in divert position.
- 2. Verifies orifice isolations closed (QRV-160, 161 and 162).
- 3. Adjusts CRV-470 controller to 50%.
- 4. Verifies open letdown isolation valves:
- QCR-300
- QCR-301
- QRV-111
- QRV-112
- 5. Adjusts QRV-301controller to 50%.
- 6. Checks/adjusts charging flow to > 75 gpm.
- 7. Opens QRV-161 or 162.
- 8. Adjusts QRV-301 to maintain 160 - 350 psig.
- 9. Places QRV-301 in AUTO.
- 10. Nulls and returns CRV-470 controller to AUTO.
- 11. Adjusts charging flow as required to maintain PRZ level.
- 12. Places PRZ level control in automatic (if desired).
- 13. Places QRV-302 in normal (demineralizer) position when letdown temperature is stable.
US Declares E CCP inoperable and refers to Tech Specs (TS):
- 3.5.2, ECCS Subsystems - Tavg > 350°F (Condition A)
Refers to Technical Requirements Manual (TRM):
- TRM 8.1.1, Boration Systems - Operating Condition A (Enters action statements to restore E CCP to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.)
Page 9 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 5 Event
Description:
- 11 SG level Transmitter BLP-111 fails LOW Time Position Applicants Actions or Behavior Crew Respond to ANNUNCIATOR #113 RESPONSE: STEAM GENERATOR 1 AND 2:
Drop 3: STEAM GEN 1 WATER LVL LOW DEVIATION Drop 5: STEAM GEN 1 WATER LEVEL LOW-LOW Drop 13: STEAM GEN 1 SF > FWF FLOW MISMROH BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:
Critical
- Stabilizes and restores SG Level Crew Performs plant stability checks.
US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.
- Restore Steam Generator Narrow Range Level using Manual Control of Feedwater Regulating Valve 1-FRV-210
- Check Steam Generator Narrow Range Level - Stable OR Trending to 44%
US Enters and directs actions of 1-OHP-4022-013-013, Steam Generator Level Instrument Malfunction US Refers to the following TS:
3.3.1 RTS Instrumentation (Condition A Table 3.3.1-1, Function 14 - Cond D).
3.3.2 ESFAS Instrumentation (Condition A Table 3.3.2-1, Function 5b & 6c - Cond D).
US Direct actions to trip bi-stables per Attachment A-2 of 1-OHP-4022-013-013.
Page 10 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 5 Event
Description:
- 11 SG level Transmitter BLP-111 fails LOW Time Position Applicants Actions or Behavior Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Crew Recognize RCS temp/press, pressurizer level lowering, reactor power rising MT MW lowering and reactor trip requirements.
US Enter 1-OHP-4023-E-0: Reactor Trip or Safety Injection - Directs RO to Perform Reactor trip RO Recognizes and reports failure of reactor to manually trip US Directs actions of OHP-4023-FR-S.1, Response to Nuclear Power Generation/ATWS RO Performs the immediate actions of FR-S.1:
- 1. Checks reactor trip Automatically/Manually insert control rods(must Insert Negative Reactivity through Inserting Control Rods or Emergency Boration)
BOP Performs the immediate actions of FR-S.1:
- 1. Manually actuate AMSAC
- 2. Check Turbine Trip
- 3. Check AFW pumps running
- MDAFP - West Running
- TDAFP - Running US Ensures immediate actions of FR-S.1 are completed Page 11 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior RO Initiate Emergency Boration of RCS(must Insert Negative Reactivity through Inserting Control Rods or Emergency Boration)
- CCPs - at least one running
- Initiate emergency boration
- Start both boric acid transfer pumps in FAST speed
- Open 1-QMO-410. Emergency boration to CCP suction valve
- Check emergency boration flow - GREATER THAN 44 GPM Check PRZ pressure LESS THAN 2335 PSIG Check Containment Ventilation Isolation Closed:
Crew
- Pressure Relief
- Instrument room
- Purge Check SI Status - Actuation status light - LIT
- As time permits, perform Steps 5 through 13 of E-0 US Check if the following trips have occurred:
- Reactor Trip - Reactor Trip Breakers, Bypass breakers, Rod drive MG set output breakers
- Turbine Trip Dispatch Operator to Locally Trip Reactor CREW Check if Reactor is Subcritical - Go to step 20 Continue Boration To Maintain Adequate Shutdown Margin During Subsequent Recovery Actions:
- Determine shutdown margin
- Return To Procedure And Step In Effect E-0 US Transition to OHP-4023-E-0 and direct actions NOTE:
Crew may transition to FR-Z.1 on exit from FR-S.1 Steps for FR-Z.1 follow. Steps for E-0 are on Page 14 Page 12 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Crew Check Containment Isolation Status
- Ventilation Isolation - Completed
- Phase A Isolation - Completed US/RO Check CTS Actuation
- CTS Pumps Running
- CTS Valve Alignment per SML-9A,B, C
- Phase B Isolation - Completed
- Stop RCPs
- Stop Lower Containment Ventilation Fans
- Stop Control Rod Drive Fans US Check RHR Spray Not Required BOP Check Containment Recirculation Fans Operating
- CEQ Fans Running
- CEQ Fan Dampers open
- CEQ CCW Cooling Valves open BOP Check DIS in Service BOP Check all SG stop valves and SG SV Dump Valves are closed Stop Valves may NOT trip closed if Steam Pressure is low.
May be driven closed with hydraulics from control switch Crew Check SG Stop Valves CLOSED MRV-240 (may need to Critical close with C/S hydraulics)
Task#2 Check SG Stop Valve Dump Valves CLOSED MRV-241 and 1-MRV-242 Check if any SG secondary pressure boundary is intact
- 1-FMO-241
- 1-FMO-242 Page 13 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior May Terminate once SG is Isolated E-0 Actions CREW Check Reactor Trip Check Turbine Trip Check Power to AC Busses - At least ONE Energized AC Emergency Busses - ALL Energized Check SI Status - Status Light LIT BOTH CCP Leakoff valve Safety Injection Signal white lights -
LIT BOP Check Main Steamline Isolation - Required - Verify all SG stop valves and SG SV Dump Valves are closed Stop Valves may NOT trip closed if Steam Pressure is low.
May be driven closed with hydraulics from control switch RO Check CTS- CTS is required and should be actuated (timed out)
- Verify CTS Pumps Running and valves aligned RO/BOP Stops all Reactor Coolant Pumps RO/BOP Verifies CEQ fan operation Places Lower Containment Vent Unit fans in OFF Places CRDM fans in STOP Places DIS in service
- Dispatches operator to stop all ice condenser AHUs
- Starts all hydrogen igniters RO/BOP Implement Attachment A While Continuing With This Procedure Crew Check If Ruptured SG Is Suspected: SG narrow range levels -
NONE rising in an uncontrolled manner Page 14 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Crew Check AFW pumps running - MDAFPs - West running, TDAFP running, East OOS Check Total AFW flow - GREATER THAN 240x103 PPH Minimize Unnecessary RCS Cooldown:
- Check SG narrow range level Greater than 13%
- Control feed flow to maintain SG narrow range level between 13% and 50%
Check AFW Pump Discharge valves - OPEN or Throttled Check FW Isolation Crew
- Main feed pumps - BOTH TRIPPED Feed pump discharge valves - CLOSED
- Feedwater regulating valves - CLOSED
- Cold Leg Temperatures stable at or trending to 547°F
- Stop dumping steam
- Verify 1-DRV-407 CLOSED
- If cooldown continues, then control total feed flow
- If cooldown continued, then perform the following:
- Trip all SG stop valves closed (or manually close)
- PORV block valves at least one energized
- Block valves at least one open Check IF RCPs Should Be Stopped:
- ECCS pumps at least one running
Pressure in all SGs:
- NO SG pressure lowering in an uncontrolled manner
- NO SG completely depressurized RNO: Go to OHP-4023-E-2, Faulted Steam Generator Isolation Page 15 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior US Announces entry into OHP-4023-E-2, Faulted SG Isolation Crew Check SG Stop Valves CLOSED MRV-240 (may need to Critical close with C/S hydraulics)
Task#2 Check SG Stop Valve Dump Valves CLOSED MRV-241 and 1-MRV-242 Check if any SG secondary pressure boundary is intact
- Check pressure in all SGs
- Any SG Pressure Lowering in an Uncontrolled Manner or
- Any SG Completely Depressurized Isolate Faulted SG:
- 1-FMO-241
- 1-FMO-242
- Check blowdown isolation valve for faulted SG CLOSED
- Place 1-DRV-407, SG stop valves drain valve in CLOSED
- Check 1-DRV-407 CLOSED
- Check Steam line warming valves CLOSED May Terminate once SG is Isolated Page 16 of 21
Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event
Description:
Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Check CST Level Greater Than 15%
Check Secondary Radiation:
- Reset containment isolation Phase A if Necessary
- Direct Chemistry to periodically sample all SGs for activity
- Secondary radiation - NORMAL Check If ECCS Flow Should Be Reduced RCS subcooling based on core exit TCs - Greater than 40F Secondary heat sink:
- Total feed flow to intact SGs - Greater Than 240x103 PPH
- Narrow range level in at least one intact SG - Greater Than 14%
RCS pressure - Stable or Rising PZR level - Greater than 21%
Go to OHP-4023-ES-1.1, SI Termination Terminate Scenario Page 17 of 21
Critical Task Summary Task Elements Results Cueing: SAT / UNSAT
- Panel #113 Drops 32
- 1
- BLP-111 Indication Lowering
- FRV-220 opening Manually Control SG#11 Level on BLP- Performance Indicators:
111 Failure
- Place FRV-220 in Manual and control SG #11 Level to maintain it 15% - 67% preventing a Reactor Trip.
Performance Feedback:
- SG Level Stabilizes and returns to band
- 2 Cueing: SAT / UNSAT
- E-2, steps 1, 2 and 5 Isolate Faulted
- FR-Z.1 Steps 7-10 Steam Generator
- Steam generator pressure lowering
- RCS temperature lowering Performance Indicators:
- Isolate SG 14 by closing:
- MFW valves
- AFW valves - FMO-241, FMO-242
- SG Stop valve - MRV-240
- SG 24 must be isolated within 30 Minutes of tripping the reactor.
Performance Feedback:
- RCS cooldown stops
- Depressurization of intact SGs stop
Scenario Instructor Actions Setup:
- 2. Turn on ALL Pressurizer Heaters
- 3. Reset control rods and check group step counters.
- 4. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.
- 5. Advance chart recorder paper & clear chart recorder memory.
- 6. Activate the following (pre-load) malfunctions:
- 7. RP03A (Reactor Trip / Train A breaker failure) U1_RP03A
- 8. RP03B (Reactor Trip / Train B breaker failure) U1_RP03B
- 9. RP07A (Streamline Isolation A auto failure) U1_RP07A
- 10. RP07B (Streamline Isolation B auto failure) U1_RP07B
- 11. U1_FWR61 (E MDAFP Breaker Racked Out) U1_FWR61 Page 19 of 21
Scenario Instructor Actions Scenario Events:
EVENT #1 Insert Malfunction during Brief for power change Prior to starting the Ramp ICF U1_QLC452 to 100 to fail VCT Level Channel QLC-452 High U1_QLC452 To trip Interposing relay LBX185B U1_RPR158 EVENT #2 Respond to Power Change Requests as required EVENT #3 IMF U1_RX11D to 100 to cause SG 4 PORV Controller to fail to 100% in Auto U1_RX11D EVENT #4 ICF U1_ECP to cause the East CCP to trip (Report Instantaneous OC trip on Breaker if Dispatched)
U1_ECP EVENT #5 ICF U1_BLP111 to 0 to cause the SG Level Channel BLP-111 to fail Low on SG 1 U1_BLP111 Page 20 of 21
Scenario Instructor Actions EVENT #6, 7, 8,& 9 IMF MS01D to 20% over 2 minutes cause a MS Break Inside Containment on SG 4 (The Failure of the reactor to trip and the Steamline Isolation Failures are Already entered.)
U1_MS01D To Locally Trip open the MG Set Breakers Wait until crew is past step 7 in FR S.1 U1_RDR01 U1_RDR03 Local actions after entry into E-0:
- Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF U1_CHR01
- Aux Tour will monitor Spent Fuel Pool Level and Temperatures
- Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.
U1_CHR02 OR U1_CHR03 (both have 10 minute delay built in)
- U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.
If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A U1_EGR03A U1_EGR03A U1_EGR03B U1_EGR03B EGR 03B U1_EGR04A U1_EGR04A EGR 04A U1_EGR04B U1_EGR04B EGR 04B Page 21 of 21