Semantic search

Jump to navigation Jump to search
 Start dateReporting criterionTitleEvent descriptionSystemLER
ENS 564588 April 2023 00:52:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Core Injection (HPCI) System InoperableThe following information was provided by the licensee via email: At 2052 EDT on April 7, 2023, during routine system preventative maintenance functional testing, the Unit 1 HPCI turbine stop valve, FV-15612, remained in the intermediate position. This failure resulted in the Unit 1 HPCI system being inoperable. This is being reported as a loss of an entire safety function condition in accordance with 10 CFR 50.72(b)(3)(v)(D). The NRC Resident Inspector was notified. The following additional information was obtained from the licensee in accordance with Headquarters Operations Officers Report Guidance: The Unit 1 HPCI inoperability places Unit 1 in a 14-day Technical Specification (TS) Limiting Condition for Operation (LCO).
ENS 5640914 March 2023 14:00:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Core Injection Inoperable

The following information was provided by the licensee via email: At 1000 EDT on March 14, 2023, during valve diagnostic testing, the high pressure core injection (HPCI) lube oil cooling water supply isolation valve did not stroke open. This failure resulted in the Unit 2 HPCI system being inoperable. This is being reported as a loss of an entire safety function condition in accordance with 10CFR50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector.

  • * * RETRACTION FROM BOB BINGMAN TO BILL GOTT AT 2208 EDT ON 04/02/2023 * * *

The following information was provided by the licensee via email: The purpose of this notification is to retract event notification (EN) 56409 reported on 03/14/2023. On March 09, 2023, Susquehanna Unit 2 entered a routine high pressure core injection (HPCI) maintenance outage. In support of this system outage, Technical Specification (TS) 3.5.1, Condition D was entered for an inoperable HPCI system. On March 14 as reported in EN 56409, the HPCI lube oil cooling water supply isolation valve did not electrically stroke open following engagement of manual clutch lever. Specifically, to support the maintenance evolution, electricians declutched the valve actuator to move it from the motor/electric operational mode to the manual operational mode as part of planned valve diagnostic data collection. In this testing configuration (i.e., manual operational mode), an attempt to electrically stroke the valve was made, resulting in the valve failure to stroke. Prior to this maintenance evolution, the HPCI lube oil cooling water supply isolation valve was found in the expected full-closed position with the motor/electric operational mode enabled, meaning prior to the HPCI maintenance outage, the affected valve was operating as designed and capable of performing all design functions. The described condition was therefore determined to be the result of the maintenance activity. NUREG-1022, Section 3.2.7, states: 'reports are not required when systems are declared inoperable as part of a planned evolution for maintenance or surveillance testing when done in accordance with an approved procedure and the plant's TS (unless a condition is discovered that would have resulted in the system being declared inoperable).' Following completion of investigation and repair, Susquehanna determined that, per NUREG-1022, Section 3.2.7, the event was not reportable. HPCI was declared inoperable as part of a maintenance evolution which was done in accordance with an approved procedure and the TS. The described condition was not a pre-existing condition that would have resulted in the system being declared inoperable prior to the planned maintenance activity. Notified R1DO (Schroeder)

ENS 551289 March 2021 08:13:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Coolant Injection InoperableAt 0313 EST on March 9th, 2021, during performance of Unit 1 High Pressure Coolant Injection (HPCI) valve exercising, the inboard vacuum breaker isolation valve did not stroke closed as expected, but remained mid-position. The affected penetration of primary containment was isolated by closing the outboard HPCI vacuum breaker isolation valve. This results in an unplanned inoperability of the Unit 1 HPCI system. This is being reported as a loss of an entire safety function condition in accordance with 10CFR50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector. Unit 1 is in a 14-day LCO for Tech Spec 3.5.1(d), HPCI inoperability. Tech Spec 3.6.1.3(a), Containment Penetration Valve, was completed with closing the outboard HPCI vacuum breaker isolation valve. The Units are in a normal offsite power line-up.High Pressure Coolant Injection
Primary containment
ENS 530036 October 2017 23:45:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentLoss of Control Room Habitability EnvelopeOn October 6, 2017 at 1945 EDT, a loss of Control Room Habitability Envelope (CRE) was declared due to failing to meet the requirements of SR 3.7.3.4 during 72 month surveillance testing. Measured in-leakage exceeded the SR acceptance value. The CRE is required to be maintained such that occupants can control the reactor safely under normal conditions and maintain it in a safe condition following a radiological event, hazardous chemical release, or a smoke challenge. The station remains in compliance with Technical Specification required action statements. This event is being reported under 10 CFR 50.72(b)(3)(v)(D) and per the guidance of NUREG 1022, Rev. 3, Section 3.2.7 as a loss of a Safety Function. There is no redundant Susquehanna Control Room Habitability Envelope. The licensee notified the NRC Resident Inspector.05000387/LER-2017-006
ENS 5236916 November 2016 15:45:0010 CFR 50.72(b)(3)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.72(b)(3)(v)(B), Loss of Safety Function - Remove Residual Heat
10 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.72(b)(3)(v)(C), Loss of Safety Function - Release of Radioactive Material
Failure of Unit 2 B Engineered Safeguards System Bus Sync Selector SwitchOn November 16, 2016 at 1045 (EST), Unit 2 B ESS (Engineered Safeguards System) Bus Sync Selector switch failed and was unable to be switched out of the ON position. The failure rendered all other sync selector switches associated with Emergency Diesel Generators and Off-Site supplies to the ESS buses unable to fulfill their intended function of allowing manual transfer between power supplies to the ESS buses. This resulted in the inability of Unit 1 and Unit 2 to comply with SR (Surveillance Requirements) 3.8.1.8 and 3.8.1.16 thus requiring declaration of Operating AC Sources inoperable. This condition could have prevented the fulfillment of the safety function of systems required to maintain the reactor in a safe shutdown condition, remove residual heat, control the release of radioactive material, and mitigate the consequences of an accident. Subsequent actions were taken in accordance with station procedures to remove fuses for the affected sync circuit, restoring the manual transfer function to all but the Unit 2 B ESS bus. One Emergency Diesel and one offsite source remain inoperable with the fuses removed. At no time were any ESS buses disconnected from offsite power. All ESS buses remained capable of being automatically energized from their respective emergency diesel in an emergency. The licensee has notified the NRC Resident Inspector.Emergency Diesel Generator
ENS 5020013 June 2014 08:52:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentLoss of Both Trains of Control Structure Chilled WaterOn 6/13/2014 at 0417 (EDT), Limiting Conditions of Operation were entered on SSES Units 1 and 2 for an inoperable Train of Control Structure Chilled Water for planned maintenance. During clearance order application at 0452 on 6/13/2014, a switching move caused the in service (Division 1) Control Structure Chilled Water Train to trip and be declared inoperable. It was realized that a prior switching move had already rendered the standby train (Division 2) inoperable. There was no equipment failure or misoperation associated with this event. The trip of the running Control Structure Chiller was in accordance with its control logic scheme. This was not identified during the planning phase of this evolution. During this time both divisions of Control Structure Chillers were inoperable and were not available to perform the required safety function. This condition also resulted in the inoperability of Control Room Emergency Outside Air Supply System due to the relationship between some of the equipment. This is a condition that, at the time of discovery, could have prevented fulfillment of Safety Functions and is reportable under 50.72(b)(3)(v)(D) as an 8 hour notification. The loss of safety functions are based on 1) the SSC is inoperable in a required mode of operation, 2) the inoperability is due to procedural deficiency, and 3) there was no redundant equipment in the same system that was operable. One Train of Control Structure Chilled Water and Control Room Emergency Outside Air Supply System were restored to operable status at 0503 on 6/13/2014. The licensee notified the NRC Resident Inspector.
ENS 5019812 June 2014 18:44:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentSystem Restoration Error Causes Both Trains of Control Structure Chilled Water System to Be InoperableOn 6/12/2014, (multiple Limiting Condition of Operations) LCOs were entered on SSES Units 1 and 2 for an inoperable Division 2 train of Control Structure Chilled Water starting at 1344 EDT for the planned performance of a flow surveillance. During restoration steps at 1444 EDT on 6/12/2014, a Division 1 Control Structure Chilled Water control switch was mistakenly manipulated which caused the redundant operable train to be declared inoperable. During this time both divisions of Control Structure Chillers were inoperable and were not available to perform the required safety function. This is a condition that, at the time of discovery, could have prevented fulfillment of a Safety Function and is reportable under (10 CFR) 50.72(b)(3)(v)(D) as an 8 hour notification. The loss of safety function is based on 1) the SSC is inoperable in a required mode of operation, 2) the inoperability is due to personnel error, and 3) there was no redundant equipment in the same system that was operable. The Division 1 train of Control Structure Chilled Water was restored to operable status at 1446 EDT on 6/12/2014. The licensee notified the NRC Resident Inspector.
ENS 496136 December 2013 17:48:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Coolant Injection System Inoperable

At 1248 EST, Unit 2 High Pressure Coolant Injection (HPCI) system was being tested for routine quarterly flow verification using surveillance test procedure SO-252-002. When HPCI turbine speed was lowered to approximately 2400 RPM, oscillations on turbine speed, flow and discharge pressure were observed. HPCI turbine speed was raised to approximately 2700 RPM and the oscillations stopped. Unit 2 HPCI system had been declared inoperable and LCO 3.5.1 entered at 1200 EST for the surveillance test. (This is a 14 day LCO.) Review by Engineering determined that cause of the oscillations warrant further evaluation and HPCI remains inoperable. HPCI is a single train Emergency Core Cooling Safety system. This event results in the loss of an entire safety function which requires an 8 hour ENS notification in accordance with 10CFR50.72(b)(3)(v).

There are no other ECCS systems presently out of service. The licensee notified the NRC Resident Inspector.

  • * * RETRACTION FROM DARVIN DUTTRY TO JOHN SHOEMAKER AT 1201 EST ON 1/17/14 * * *

NUREG-1022, Revision 3, states, 'if the retraction or cancellation of a report under this criterion is due to a revised operability determination, the retraction or cancellation should discuss the basis for why the operability determination was revised, and why it is believed that system operability was never lost (i.e., in lieu of the initial determination).' As indicated in the initial report, Engineering determined that the cause of the oscillations required further evaluation and HPCI remained inoperable. Additional evaluation by Engineering resulted in a conclusion that HPCI was OPERABLE with the observed oscillations at the low flow conditions. Details are as follows: HPCI speed/flow oscillations at low flow conditions can occur due to inherent instability at these conditions. This phenomenon is understood and documented in industry OE (Operating Experience), EPRI (Electric Power Research Institute) maintenance guidelines, and station procedures. HPCI system operation and control during the surveillance were as expected and demonstrated proper response and stable operation, with the only exception being the described oscillations at the low flow condition. This was confirmed by a review of the system response on the start-up traces. A system walkdown confirmed no abnormality with the control system equipment or governor setting. No tuning adjustments were considered to be necessary based on the low magnitude of the oscillations and their negligible impact on system operation. Unit 2 HPCI was declared OPERABLE and LCO 3.5.1 was cleared at 2308 (EST) on December 6, 2013. Based on the above additional information, PPL (Pennsylvania Power and Light) is retracting this report. The licensee has notified the NRC Resident Inspector. Notified the R1DO (Rogge).

High Pressure Coolant Injection
ENS 488117 March 2013 06:35:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Coolant Injection Declared Inoperable

At 0135 EST, Unit 2 High Pressure Coolant Injection (HPCI) system was declared inoperable, and LCO 3.5.1 entered, due to its turbine steam exhaust valve failing in the closed position during the quarterly valve exercising surveillance. The supply breaker tripped when the opening stroke was attempted. The valve was verified to have remained fully closed via the manual operator. HPCI will not automatically start with this valve closed. HPCI is a single train Emergency Core Cooling Safety (ECCS) system. This event results in the loss of an entire safety function which requires an 8 hour ENS notification in accordance with 10CFR50.72(b)(3)(v) and the guidance provided under NUREG-1022, rev. 2. There are no other ECCS systems presently out of service. The licensee has notified the NRC Resident Inspector.

* * * RETRACTION FROM TODD CREASY TO PETE SNYDER ON 5/3/13 AT 1401 EDT * * * 

The reported condition, described above, was further evaluated by PPL Susquehanna, LLC (PPL). The following is additional information concerning the condition: The HPCI Turbine Exhaust valve (HV255F066): 1) is a DC motor operated valve with no design features which cause automatic valve actuation, 2) is manipulated by remote Operator action to open or close the valve, 3) is designed as a normally open valve to support the HPCI function, and 4) is manually closed for long-term containment isolation. When the HPCI turbine exhaust valve was stroked, the valve successfully closed; however, position indication was lost when attempting to re-open the valve. Troubleshooting identified a faulty relay contact that in conjunction with the operator repositioning the key lock switch from CLOSE to OPEN caused a direct short in the circuit. NUREG-1022, Revision 2, Section 3.2.7, provides the following example of a condition that is not reportable under 10 CFR 50.72(b)(3)(v): Removal of a system or part of a system from service as part of a planned evolution for maintenance or surveillance testing when done in accordance with an approved procedure and the plant's TS (unless a condition is discovered that could have prevented the system from performing its function). When the failure of the HV255F066 occurred, HPCI was properly removed from service for planned quarterly valve exercising in accordance with an approved surveillance procedure and LCO 3.5.1. Since HV255F066 is a normally open valve, a failure to open does not impact the safety function to provide a flow path for HPCI exhaust since routine valve stroking or maintenance that might close the valve would not be conducted in an accident scenario where HPCI would be required to start and closure associated with long-term containment isolation would only occur after the HPCI function is complete (i.e., the failure to open was introduced by the testing activity and would not occur in a scenario in which the valve is required to perform its safety function to open). With regard to the long-term containment isolation function, the faulty relay contact failed in a manner that prevented the valve from opening but did not prevent the valve from closing. Based on closure of the valve during the test, there was no pre-existing operability issue associated with its safety function to close. Furthermore, even without credit for HV255F066, the containment isolation safety function would be maintained by Check Valve 255F049 and Drain Isolation Valve 255F013. Based on the above additional information, PPL is retracting this report. Susquehanna was in a planned evolution and did not discover a condition that could have prevented performing a safety function. The licensee will notify the NRC Resident Inspector. Notified R1DO (Hunegs).

High Pressure Coolant Injection
ENS 4859514 December 2012 18:50:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.72(b)(2)(i), Tech Spec Required Shutdown
Technical Specification Required Shutdown - Control Structure Chillers Inoperable

At 1350 on 12/14/2012, both Control Structure Chillers at Susquehanna were rendered inoperable. This event required entry into Tech Spec 3.0.3 for both Units. Per Susquehanna procedures, after 1 hour, a power reduction must be commenced. Tech Spec 3.0.3 requires that action be taken within one hour to place the Unit in Mode 3 within 13 hours and Mode 4 within 37 hours. Physical power reduction commenced at 1453 for Unit 1 and 1459 for Unit 2. The 'A' Control Structure Chiller was previously inoperable for routine maintenance. The system was in service for post maintenance testing and activities were underway to swap to the opposite train to allow removal of test instrumentation and fan belt tensioning for equipment associated with the 'A' Control Structure HVAC system. At 1350, the 'B' Control Structure loop circulating pump tripped, rendering the 'B' Control Structure Chiller inoperable. This condition requires immediate entry into Tech Spec 3.0.3. Both Control Structure Chillers are inoperable and this report is being made per 10CFR50.72(b)(2)(i) as a shutdown required by Tech Specs, and 10CFR 50.72(b)(3)(v)(D), Loss of a Safety Function required to mitigate the consequences of an accident. Efforts are underway to restore at least one system to operable status in parallel with Unit shutdown activities. The licensee has notified the NRC Resident Inspector, and will be notifying the State of Pennsylvania.

  • * * UPDATE FROM ALEX MCLELLAN TO JOHN KNOKE AT 2228 EST ON 12/14/12 * * *

On 12/14/12 at 1500 EST Susquehanna Steam Electric Station reported a shutdown had been commenced at 1453 EST for Unit 1 and 1459 EST for Unit 2 due to inoperability of both Control Structure Chillers. At 1750 EST the 'A' Control Structure Chiller was declared operable and LCO 3.0.3 was exited. Power reduction for both Units was halted at 1750 and preparations for power restoration initiated. On 12/14/12 Unit 1 power was restored to 98% at 1819 EST and Unit 2 power was restored to 98% at 1943 EST, the maximum power output possible based on grid conditions for Unit 1 and thermal limits for Unit 2. The licensee has notified the NRC Resident Inspector. R1DO (Holody) notified.

HVAC05000387/LER-2012-010
ENS 4829310 September 2012 14:25:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentBoth Units Entered Technical Specification 3.0.3 Due to Inoperable Control Structure Chillers

Unit 1 and Unit 2 entered LCO 3.0.3 due to both Control Structure (CS) chillers 'A & B' concurrently inoperable. At 1025 (EDT), the control room was notified that the 'B' CS Chiller was not running. There were no control room alarms due to this condition. Review of indications on control room panel 0C681 noted that the loop circ pump and all three CS fans remained in service. Indication of CS loop flow and loop temperature remained normal, approximately 600 gpm and 44 degrees. The 'B' CS Chiller restarted at 1027 (EDT) and normal system parameters were observed. Work on the 'A' CS Chiller was released at 0928 (EDT) on 9/10/2012 for scheduled maintenance, LCO's 3.7.3 and 3.7.4 were entered, however no work had actually commenced or was performed. The 'A' CS Chiller remained available and in standby during the entire evolution. Since the cause of the 'B' CS Chiller to shutdown has not been determined, the 'B' CS Chiller was declared inoperable. Inoperability of both CS chillers 'A & B' required immediate entry into LCO 3.0.3 per TS 3.7.4 Condition D. Both chillers were inoperable from 1025 (EDT) until 1042 (EDT) (17 minutes), when the 'A' CS Chiller was restored to operable status. This condition is being reported as an event or condition that could have prevented fulfillment of a safety function per 10CFR 50.72(b)(3)(v)(D). The licensee informed the NRC Resident Inspector.

  • * * RETRACTION FROM LICHTNER TO CROUCH AT 2008 EDT ON 10/08/12 * * *

This event was reported as a condition that could have prevented fulfillment of a safety function per 10 CFR 50.72(b)(3)(v)(D) because the 'A' Control Structure (CS) chiller was released for scheduled maintenance (LCO's 3.7.3 and 3.7.4 were entered), although no physical work had begun on the 'A' CS chiller. Concurrent with the 'A' chiller being in the aforementioned status, the 'B' CS chiller shutdown for approximately 2.5 minutes before automatically restarting. Following the ENS report, Susquehanna determined that although it had shutdown, the 'B' CS chiller remained operable and capable of fulfilling all its design functions. The chiller shutdown was not due to operation of a safety trip. Under safety trip conditions, automatic restart of the chiller would have been prevented and alarms would have been received in the control room. Rather, the event was due to chiller load recycle operation during which the chiller is designed to shutdown at approximately 5 degrees F below the normal operating chilled water temperature and automatically restart. Troubleshooting did not detect any faulty components and the chiller has remained in operation for greater than 48 hours since the shutdown, without a repeat event. Additionally, although the 'A' CS chiller was declared inoperable due to entry into LCO's 3.7.3 and 3.7.4 to perform routine maintenance, no physical action had been taken to disable the 'A' chiller. Therefore, the 'A' CS chiller was capable of auto-starting and performing its safety function for all design conditions while in the LCO's. Based on the above information, Susquehanna has determined that since both the 'A' and the 'B' CS chillers were available and capable of performing their design safety functions, there was no loss of safety function therefore this ENS report is retracted. The licensee has notified the NRC Resident Inspector. Notified R1DO (Trapp).

ENS 4791911 May 2012 20:03:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentLoss of Control Room Floor CoolingAt 16:03 hours on 5/11/12, Susquehanna Steam Electric Station Unit 2 entered LCO 3.0.3 due to two control room floor cooling systems being inoperable. A discharge damper for the 'A' train of control room floor cooling had failed earlier during the same day at 05:23 hours, rendering the associated 'A' fan inoperable. The redundant 'B' train fans and associated Control Structure Chiller automatically started as a result of a fan low flow interlock. The 'A' train logic was left in 'Start' and the 'B' train logic was left in 'Auto' as directed by an alarm response procedure. During application of a clearance order for repair of the failed 'A' fan damper, the 'A' control room cooling fan switch was placed in 'Stop' position. This resulted in an automatic start of the 'A' Control Structure Chiller and all the associated 'A' fans except for the control room cooling fan, and a trip of the 'B' train fans and chiller. This condition caused a loss of both control room cooling fans. The control room operators immediately recognized the loss of cooling and took manual action to restart the 'B' train. LCO 3.0.3 was exited at 16:18 hours without a reactor power reduction. This condition is reportable as loss of entire safety function under 10CFR50.72(b)(3)(v) & (vi). The licensee has notified the NRC Resident Inspector.05000388/LER-2012-001
ENS 478169 April 2012 05:02:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentBoth Control Structure Chillers Declared Inoperable While Switching Power Supplies

On 4/9/2012, starting at 0102 EDT, the 'A' and 'C' Emergency Diesel Generators (EDG) were sequentially and briefly declared inoperable to switch their DC control power back to their normal supplies. Switching power to the normal supply is required by Unit 2 technical specification 3.8.4 following maintenance work on the U1 power supplies. Previously, at 18:35 EDT on 4/4/2012, the 'B' Control Structure Chiller was declared inoperable due to an unrelated problem. With the 'B' Control Structure Chiller inoperable coincident with the 'A' EDG or 'C' EDG inoperable, neither Control Structure Chiller would be available to perform its design function on a loss of offsite power. This is a condition that, at the time of discovery, could have prevented fulfillment of a Safety Function and is reportable under 50.72(b)(3)(v)(D) as an 8 hour notification. Switching the power supplies was a planned evolution. The duration of the loss of safety function was a total of eight minutes. As a mitigating action, operators were continuously available with communication to the control room. The associated diesel generator could have been returned to an operable condition promptly if required. Note that Technical Specifications allows four hours to correct the condition before further actions are required, i.e. declare the features ('A' Control Structure Chiller) supported by the inoperable diesel inoperable. The licensee notified the NRC Resident Inspector.

      • RETRACTION FROM RON FRY TO S. SANDIN ON 6/7/12 AT 0205 EDT***

The licensee is retracting this report based on the following: On April 9, 2012, Susquehanna reported that the 'A' and 'C' Emergency Diesel Generators (EDGs) were sequentially and briefly declared inoperable to switch their DC control power back to their normal supplies while the 'B' Control Structure Chiller was inoperable. The basis for the 8 hour notification, which was reported under Reporting Requirement 50.72(b)(3)(v)(D), was the conclusion that neither Control Structure Chiller would be available to perform its design function on a loss of offsite power. The reporting guidance in NUREG-1022, Revision 2 identifies events or conditions that are generally not reportable in accordance with 50.72(b)(3)(v). One of the identified conditions is 'removal of a system or part of a system from service as part of a planned evolution for maintenance or surveillance testing when done in accordance with an approved procedure and the plant's TS (unless a condition is discovered that could have prevented the system from performing its function).' After further review, Susquehanna has determined that an ENS report was not required for this event since the EDGs and the associated 'A' Chiller were removed from service as part of a planned evolution in accordance with approved procedures and the plant Technical Specifications and no condition was discovered that could have prevented the EDGs and associated 'A' chiller from performing their function. Based on the above information, this ENS report is retracted. The licensee informed the NRC Resident Inspector. Notified R1DO(Cahill).

Emergency Diesel Generator
ENS 478074 April 2012 22:35:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentInoperable Accident Mitigation EquipmentOn 4/4/2012 at 1517 EDT, the 'A' Emergency Diesel Generator (EDG) was declared inoperable for performance of a maintenance surveillance. At 1835 EDT on 4/4/2012 the 'B' Control Structure Chiller was declared inoperable due to an unrelated problem. (With) the 'B' Control Structure Chiller inoperable coincident with the 'A' EDG inoperable, the 'A' Control Structure Chiller would not be available to perform its design function on a loss of offsite power. This is a condition that, at the time of discovery, could have prevented fulfillment of a Safety Function and is reportable under 50.73(a)(2)(v) as an 8 hour notification. Note that Technical Specifications allows four hours to correct the condition before further actions are required, i.e. declare the features ('A' Control Structure Chiller) supported by the inoperable diesel inoperable. The 'A' EDG was restored to operable at 2200 which restored safety function capability for the 'A' Control Structure Chiller. The licensee notified the NRC Resident Inspector.Emergency Diesel Generator05000387/LER-2012-002
ENS 473286 October 2011 15:40:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Coolant Injection System InoperableOn 10/06/2011 the control room was notified of an oscillation occurring on the output of Unit 2 High Pressure Coolant Injection (HPCI) pump electronic governor. These oscillations are occurring while the system is in standby and is an early indication of potential governor failure. The governor oscillations were discovered on 10/06/2011 at 1140 EDT by the system engineer while performing system trending analysis via plant computer points. HPCI was declared inoperable and LCO 3.5.1 was entered at 1140 EDT on 10/06/2011. An investigation is in progress. Unit 1 HPCI and both Unit 1 and Unit 2 RCIC (Reactor Core Isolation Cooling) systems are unaffected as the electronic governor outputs for this equipment is stable and trending as expected. This is being reported as a loss of an entire safety function condition in accordance with 10CFR50.72(b)(3)(V)(D). The licensee notified the NRC Resident Inspector.High Pressure Coolant Injection
Reactor Core Isolation Cooling
ENS 469254 June 2011 20:14:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentBoth Control Structure Chillers Out of Service

On 06/04/2011, personnel observed the temperature control valve for the 'B' control structure chiller not operating properly. To investigate control valve operation, the controller was taken to the manual mode (from automatic) at 1614 (EDT). The control valve stem was lubricated, and the valve was operated with the controller in the manual mode. The 'B' control structure chiller was inoperable in this condition until control valve responsiveness was validated (total of 35 minutes, until 1649 (EDT)). The 'B' chiller continued to operate during this period. The 'A' control structure chiller was out of service during this timeframe to perform maintenance activities. Hence, neither chiller was operable. The control structure chillers provide control building habitability during unit operation. The control structure chillers also provide cooling water for emergency switchgear room cooling on unit one only. This condition is being reported as an event or condition that could have prevented fulfillment of a safety function per 10CFR 50.72(b)(3)(v)(D). The licensee has notified the NRC Resident Inspector.

  • * * RETRACTION ON 7/22/2011 AT 1519 FROM LONNIE CRAWFORD TO MARK ABRAMOVITZ * * *

On June 4, 2011, Susquehanna reported the simultaneous inoperability of both control structure (CS) chillers as an event or condition that could have prevented fulfillment of a safety function in accordance with 10CFR 50.72(b)(3)(v)(D). After further investigation, Susquehanna has concluded that the 'A' and 'B' CS chillers were not inoperable at the same time. On June 3, 2011 at 1608, fluctuating amperage was observed on the 'A' CS chiller and the chiller was declared inoperable. As a result, the 'B' CS chiller was placed in service with the 'A' CS chiller placed in standby. Subsequent troubleshooting of the 'A' CS chiller included replacing the chiller temperature controller with a spare while the original controller was evaluated in the shop. The original controller was re-installed on June 4, 2011 at approximately 1030 but did not resolve the issue. The 'A' CS chiller was later shutdown and removed from standby on June 4, 2011 at 1727. Originally, Susquehanna believed that the fluctuating amperage on the 'A' chiller was an operability issue. Subsequent engineering evaluation has determined that the observed oscillations were not rapid enough and did not have sufficient amplitude to cause damage to the chiller motor and were within design limits. The conclusion is that the 'A' control structure chiller was operable and would continue to operate for its 30 day mission time with the observed current oscillations. Although the 'A' chiller was inoperable as a result of troubleshooting at various times on June 3 and 4, the 'A' chiller was available and operable during the short period of time on June 4 when the 'B' chiller was inoperable. . Based on the above information, this ENS report is retracted. The licensee notified the NRC Resident Inspector. Notified the R1DO (Dentel).

ENS 4664426 February 2011 01:27:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentUnit 1 Hpci Inoperable Due to Steam LeakAt 2027 EST, Unit 1 HPCI system was declared inoperable due to a steam leak on HV155F002, HPCI Steam Supply Inboard Isolation Valve. Engineering evaluation determined that the valve actuator will not close the valve fully under design basis conditions, due to the impingement of steam from the valve packing region on the valve stem. The penetration flow path has been isolated and the outboard isolation valve has been deactivated. HPCI is a single train ECCS safety system, This event results in the loss of an entire safety function which requires an 8 hour ENS notification in accordance with 10CFR50.72(b)(3)(v) and the guidance provided under NUREG-1022, rev. 2. There are no other ECCS systems presently out of service. Unit 1 is in a 14 day LCO 3.5.1. EDG's are operable, and offsite power is normal. There is no increase in plant risk, and the licensee will notify the Pennsylvania Emergency Management Agency (PEMA). The NRC Resident Inspector has been notified.
ENS 465193 January 2011 18:44:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.72(b)(3)(ii)(B), Unanalyzed Condition
Single Point of Failure Vulnerability Discovered Which Could Potentially Affect Accident Response

On Monday, January 3, 2011, at 1344 EST, it was discovered by engineering that a single point of vulnerability exists at Susquehanna Steam Electric Station affecting both Unit 1 and Unit 2. A potential single HVAC control component has been discovered whose failure could result in a spurious Steam Leak Detection (SLD) isolation causing a loss of generation, loss of the normal heat sink (main condenser) and a loss of HPCI and RCIC. The SLD delta temperature (delta T) instrumentation is dependent on proper operation of the Unit 1 and Unit 2 RB (Reactor Building) HVAC heater temperature controller during cold weather operation. The Unit 1 and Unit 2 RB HVAC heaters are controlled by a single temperature controller which sends a signal to multiple step controllers. Failure of the temperature controller could cause the heaters to turn off. This would cause a significant decrease in RB HVAC supply temperature which results in a significant increase in measured SLD delta T during cold winter months. This could cause an isolation of the MSIVs, HPCI, RCIC and RWCU within a short period of time. This is reportable pursuant to 10CFR50.72(b)(3)(v) for a condition that at discovery could have prevented fulfillment of a safety function needed to mitigate the consequences of an accident and 10CFR50.72(b)(3)(ii) for and event that resulted in the nuclear power plant being in an unanalyzed condition. The licensee notified the NRC Resident Inspector.

  • * * UPDATE FROM TODD CREASY TO JOE O'HARA AT 1310 ON 2/28/11 * * *

On January 3, 2011, SSES reported the discovery of a single point vulnerability that affected both Unit 1 and Unit 2 (EN # 46519). The vulnerability involved failure of a temperature controller that had the potential to result in a Steam Leak Detection (SLD) isolation causing a loss of generation, loss of the normal heat sink (main condenser), and a loss of HPCI and RCIC. The condition was reported pursuant to 10CFR50.72(b)(3)(v) as a condition that at discovery could have prevented fulfillment of a safety function needed to mitigate the consequences of an accident and pursuant to 10CFR50.72(b)(3)(ii) as an event that resulted in the nuclear power plant being in an unanalyzed condition. SSES has further evaluated the condition and determined that the condition did not meet reporting criterion 10CFR50.72(b)(3)(v) for a condition that at discovery could have prevented fulfillment of a safety function needed to mitigate the consequences of an accident. The level of judgment in reporting under this criterion Is a reasonable expectation of preventing fulfillment of a safety function. Alternately stated, the condition is reportable if there was reasonable doubt that the safety function would have been fulfilled if the system had been called upon to perform it. Technical evaluation of the condition concluded the following: there is reasonable assurance (high degree of confidence) that the HPCI, RCIC, Main Steam Isolation and RWCU systems will remain operable. The identified condition does not adversely affect the operability of the affected systems. The identified condition increases the probability that a failure of the Reactor Building HVAC temperature controller TC-17589 or TC-27589 could cause the MSIV's, HPCI and RCIC to isolate during cold weather operation. However, this increase in probability is very small and is not sufficient to erode the confidence in the reasonable expectation of operability. For a system isolation to occur, the heater controller had to fail and concurrently the outside air temperature had to be below approximately 10?F. The Reactor Building HVAC temperature controllers are highly reliable and the outside air temperatures required for this event occur infrequently (there have only been 11 instances of temperatures at Susquehanna dropping below 10 deg F in the past two years). Since both infrequent conditions have to occur concurrently, it is unlikely that this postulated failure would occur. As a result, reporting pursuant to 10CFR50.72(b)(3)(v) is retracted; however, the condition remains reportable pursuant to 10CFR50.72(b)b)(3)(ii) as an event that resulted in the nuclear power plant being in an unanalyzed condition. The NRC Resident Inspector has been notified. Notified R1DO (T.Dimitriadis)

  • * * UPDATE FROM DAVE BORGER TO HOWIE CROUCH AT 1220 EDT ON 6/7/2011 * * *

On January 3, 2011, SSES reported the discovery of a single point vulnerability that affected both Unit 1 and Unit 2 (EN #46519). The vulnerability involved failure of a temperature controller that had the potential to result in a Steam Leak Detection (SLD) isolation causing a loss of generation, loss of the normal heat sink (main condenser), and a loss of HPCI and RCIC. The condition was reported pursuant to 10CFR50.72(b)(3)(v) as a condition that at discovery could have prevented fulfillment of a safety function needed to mitigate the consequences of an accident and pursuant to 10CFR50.72(b)(3)(ii) as an event that resulted in the nuclear power plant being in an unanalyzed condition. On February 28, 2011, SSES retracted the 10CFR50.72(b)(3)(v) portion of the report on the basis that there was reasonable assurance that the HPCI, RCIC, Main Steam Isolation and RWCU systems would remain operable. The reasonable assurance was based on the very small probability of system isolation that required failure of the highly reliable heater controller had to fail concurrent with outside air temperature below approximately 10?F. This notification is intended to revise the basis for retraction of the 10CFR50.72(b)(3)(v) portion of the report. The revised basis is that the conditions required to prevent fulfillment of a safety function did not exist at the time of discovery. The licensee has notified the NRC Resident Inspector. Notified R1DO (Rogge).

HVAC
Main Condenser
Main Steam
ENS 4626822 September 2010 12:30:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHigh Pressure Coolant Injection System Inoperable Due to a Minor Lube Oil Leak

At 0830 (EDT) on 09/22/2010, the Unit 2 High Pressure Coolant Injection (HPCI) system was determined to be inoperable due to a minor lube oil leak on the 'A' supply filter. LCO 3.5.1 for the HPCI system was entered at 0830 (EDT) on 09/22/2010. The leak on the 'A' filter could not be immediately corrected. The 'B' filter was placed in service and leak checked satisfactorily. The LCO 3.5.1 action statements were closed at 1454 (EDT) on 09/22/2010. This incident is being reported as an event or condition that could have prevented fulfillment of a safety function required to mitigate the consequences of an accident in accordance with 10CFR50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector.

  • * * RETRACTION FROM RONALD FRY TO DONG PARK AT 1609 EST ON 11/18/10 * * *

At 1501 on September 22, 2010, PPL Susquehanna, LLC reported that the Unit 2 High Pressure Coolant Injection (HPCI) system was inoperable due to a minor lube oil leak on the 'A' supply filter. Subsequent investigation and evaluation determined that HPCI was capable of performing all of its safety functions with the identified oil leak. The operability determination was based on the following: Investigation of the leak identified that the installed filter housing cover o-ring was undersized and had to be inappropriately stretched to fit in the o-ring groove in the housing cover. The cover is torqued to 75 ft-lbs by four bolts on the outer diameter of the cover, enclosing the o-ring in a metal to metal connection. There is no concern for the o-ring to extrude from the cover under this configuration. The worst case that can be postulated as a result of the undersized o-ring is a leak in which the drops break into a small stream. This type of leak is expected to result in less than 10 gallons of oil loss during the system's 6 hour mission time. The vendor recommended oil reserve level is approximately 124 gallons. The lube oil sump has a 155 gallon capacity and the remaining oil (approximately 145 gallons) is sufficient to support operability. As a result, the worst case leakage is not expected to affect operability of HPCI or result in system failure during the HPCI mission time. Operations verifies oil level weekly and prior to any planned run. The licensee has notified the NRC Resident Inspector. Notified R1DO (Gray).

High Pressure Coolant Injection
ENS 4527318 August 2009 13:20:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHpci Turbine Stop Valve Fails in MidpositionAt 0920 on 08/18/2009, the Unit 1 HPCI turbine stop valve (FV15612) showed dual indication following performance of the weekly functional test of the HPCI lube oil system. Subsequent investigation revealed that the valve stem was not in the full closed position. LCO 3.5.1 for the HPCI system was entered at 0920 on 08/18/2009. An investigation is in progress to determine the nature of the problem. This incident is being reported as an event or condition that could have prevented fulfillment of a safety function required to mitigate the consequences of an accident in accordance with 10CFR50.72(b)(3)(v)(D). The HPCI pump was declared inoperable. This is a 14 day LCO. The licensee notified the NRC Resident Inspector.05000387/LER-2009-001
ENS 4507316 May 2009 22:01:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentFailure of High Pressure Coolant Injection Steam Supply Valve to Close During Test

At 1801 on 5/16/2009, the HPCI turbine steam supply valve (HV255F001) failed to close during shutdown of the system following performance of its quarterly flow surveillance. The auxiliary oil pump was de-energized to prevent an inadvertent start of HPCI and the HPCI system was declared inoperable. LCO 3.5.1 for the HPCI system being inoperable was entered at 1720 on 5/16/2009 at the start of the HPCI surveillance. An investigation is in progress to determine the nature of the problem. This is being reported as an event or condition that could have prevented fulfillment of a safety function required to mitigate the consequences of an accident in accordance with 10 CFR 50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector.

  • * * RETRACTION ON 7/16/09 AT 1543 FROM TODD CREASEY TO CHARLES TEAL * * *

On May 16, 2009, the HPCI system was declared inoperable at 1720 hours and LCO 3.5.1 was entered to support the planned quarterly HPCI flow surveillance test. During the surveillance test, at 1801 hours, the HPCI turbine steam supply valve (HV255F001) failed to close during shutdown of the system. It was also identified that neither the open nor closed indication lamp in the control room were lit. Troubleshooting was performed by cycling the valve's breaker in an attempt to restore power to the HPCI steam supply valve. No movement of the valve was observed. Because the position of the HPCI steam supply valve was unknown, Operations secured HPCI by opening the auxiliary oil pump breaker for the purpose of conducting additional troubleshooting (maintenance) of the failure of the HV255F001 valve to close. On 5/16/09 at 2004 hours EDT, Susquehanna made an 8-hour ENS notification (45703) to the NRC, due to HPCI being declared inoperable when HV255F001 failed to close during performance of the quarterly surveillance. Subsequent investigation concluded that the HPCI turbine steam supply valve (HV255F001) did close as expected, but did not indicate closed due to a loss of position indication. It was determined that the closed indicating lamp had burned out. Upon replacement of the lamp, the valve was successfully stroked open and closed and HPCI was declared operable at 0800 EDT 5/17/2009. Because a condition did not exist at the time of discovery that could have prevented the fulfillment of a safety function in accordance with 10 CFR 50.72(b)(3)(v)(D), EN #45073 is hereby being retracted. It should be noted that the subsequent action to disable HPCI by opening the auxiliary oil pump break does not preclude retraction of the ENS notification. This action did not create a new reportable condition since HPCI was already inoperable for planned surveillance testing. This action was taken as part of troubleshooting activities (maintenance) on the HV255F001 valve and to prevent an inadvertent start of HPCI. The NRC Resident has been notified. Notified R1DO (Gray)

High Pressure Coolant Injection
ENS 4450318 September 2008 22:48:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHpci Inoperable Due to Missing Insulation

At 1848 on 09/18/2008, the control room was notified by system engineering that insulation was missing from the bottom of the HPCI turbine that could result in nearby electronic components being subjected to higher than design temperatures. This could challenge the ability of the HPCI system to perform its design function for the prescribed mission times. The condition does not prevent the high pressure coolant injection system from automatically starting and injecting during an accident. The longer term ability of the system to continue to inject is challenged by the existing condition. The HPCI system was immediately declared inoperable while engineering continues to evaluate the condition to determine if an actual loss of design function has occurred. This is being reported as an event or condition that could have prevented fulfillment of a safety function required to mitigate the consequences of an accident in accordance with 10CFR50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector.

  • * * RETRACTION ON 11/12/2008 AT 1616 FROM MARTIN LICHTNER TO MARK ABRAMOVITZ * * *

On September 18, 2008, PPL Susquehanna LLC reported a potential loss of the HPCI safety function under the provisions of 10CFR50.72(b)(3)(v)(D). The report was made when it was discovered that insulation was missing from the bottom of the Unit 2 HPCI turbine. This situation raised concerns that increased area temperatures could adversely affect nearby electronic equipment needed to support long-term HPCI operation. A subsequent investigation has determined that all potentially affected components were rated for operation at temperatures greater than those anticipated during HPCI operation with the missing insulation. An additional physical inspection confirmed that there was no abnormal discoloration or visible signs of accelerated thermal aging on the components and wires in question. It has therefore been concluded that HPCI operability had not been impacted by the missing insulation. Accordingly, the loss of safety function reported on September 18th under ENS # 44503 is being retracted. The insulation has since been restored to the HPCI turbine. The licensee notified the NRC Resident Inspector. Notified the R1DO (Trapp).

High Pressure Coolant Injection
ENS 439635 February 2008 23:45:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.72(b)(3)(v)(C), Loss of Safety Function - Release of Radioactive Material
Irradiated Fuel Movement Performed with a Required Accident Mitigation/Radiation Release System BypassedOn February 5, 2008 EST at 1845 hours it was discovered that irradiated fuel moves had been performed during the previous shift with both Unit 1 and Unit 2 refuel floor high exhaust radiation monitors bypassed. The condition affected both Susquehanna Units. The radiation monitors are required to be operable for conditions noted in footnotes (a) and (b) in Technical Specification Tables 3.3.6.2-1 and 3.3.7.1-1 (i.e. operations with a potential for draining the reactor vessel, and during CORE ALTERATIONS and during movement of irradiated fuel assemblies in the secondary containment). The function of these instruments is to initiate systems that limit fission product release during and following certain postulated fuel handling accidents and to minimize the consequences of radioactive material in the control room environment. No movement of irradiated fuel assemblies was in progress when the issue was discovered. The event has been determined to be reportable within 8 hours under 10 CFR 50.72(b)(3)(v)(C) and 10 CFR 50.72(b)(3)(v)(D). The radiation monitors were bypassed on 1/31/08, as allowed, during a fuel pool activity NOT involving fuel movement. Approximately one hour of fuel movement occurred during the time the radiation monitors were bypassed. The oncoming shift manager identified the discrepancy during the shift turnover prior to assuming the shift. The licensee has notified the NRC Resident Inspector.Secondary containment
ENS 4356313 August 2007 18:20:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.72(b)(3)(v)(C), Loss of Safety Function - Release of Radioactive Material
Inoperable Radiation Monitors Due to Setpoint Calculation Errors

On August 13, 2007 at 14:20 (EDT), the Susquehanna Control Room was notified that during review of calculations for the Secondary Containment Radiation Monitor Setpoints errors were identified in Tech Spec Allowable Values and TRM Trip Setpoints that rendered them non-conservative. The affected instruments are Refuel Floor Wall, Refuel Floor High, and Railroad Access radiation monitors. The condition affects both Susquehanna Units. The radiation monitors are required to be operable for conditions noted in footnotes (a), (b), and (c) in Tech Spec tables 3.3.6.2-1 and 3.3.7.1-1 (i.e. operations with a potential for draining the reactor vessel, during CORE ALTERATIONS and during movement of irradiated fuel assemblies in the secondary containment, and movement of irradiated fuel assemblies within or above the Railroad Access Shaft). The function of these instruments is to initiate systems that limit fission product release during and following certain postulated accidents and to minimize the consequences of radioactive material in the control room environment. The radiation monitoring instruments were declared inoperable. All movement of irradiate fuel assemblies was halted (dry fuel storage activities were in progress at the time of notification). Based on this action, these monitors are no longer within the specified Applicability, and are therefore not currently required to be operable. The event has been determined to be reportable within 8 hours under 10 CFR 50.72(b)(3)(v)(C) and 10 CFR 50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector.

  • * * UPDATE FROM G. ROBINSON TO J. KNOKE AT 1222 EDT ON 10/03/07 * * *

On August 13, 2007 PPL Susquehanna reported that during a review of calculations for the Secondary Containment Radiation Monitor Setpoints, errors were identified in Tech Spec Allowable Values and TRM Trip Setpoints that rendered them non-conservative. The affected monitors were declared inoperable and the required LCO & TRO Actions entered. A subsequent engineering review determined that the values used to establish the Tech Spec Allowable Values and TRM Trip Setpoints were based on a Realistic Source Term, not a Design Basis Source Term. These values were sufficiently conservative to compensate for the errors in the calculations and the dose release limits from a Design Basis Accident would not have been challenged. It was concluded that the existing Tech Spec values and setpoints remained valid and the monitors were operable in their original condition. Based on this conclusion Event Notification EN# 43563 is being retracted. The licensee notified the NRC Resident Inspector. R1DO ( Powell) was notified.

Secondary containment
ENS 4281731 August 2006 15:11:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentHpci Declared Inoperable Due to Stop Valve Indication IssueAt 1111, on August 31, 2006, during performance of SO-152-006 HPCI was declared inoperable when the HPCI Turbine Stop Valve FV-15612 had dual position indication. Local observation of the stop valve by plant operators and a report from the system engineer verified the valve was closed, and the problem appears to be a limit switch problem. With the lower limit switch not responding correctly the system engineer informed the control room the HPCI Ramp Generator is not reset, which will result in an over speed condition of the HPCI turbine if an actuation signal is received. To prevent possible damage to the HPCI turbine, control room personnel overrode HPCI injection in accordance with plant operating procedures. Plans are being developed to investigate the problem, and adjust the limit switch if required. This is being reported as an event or condition that could have prevented fulfillment of a safety function required to mitigate the consequences of an accident in accordance with 10CFR50.72(b)(3)(v)(D). The licensee has entered the provisions of TS 3.5.1 for this condition. No other accident mitigation systems are currently inoperable. The licensee notified the NRC Resident Inspector.
ENS 414636 March 2005 20:00:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentPost-Accident Monitoring Instrumentation Inoperable

The following information was provided by the licensee via facsimile (licensee text in quotes): At 1500, on March 6, 2005, the Control Room declared both required divisions for three functions (Primary Containment Pressure, Primary Containment Hydrogen and Oxygen Analyzer, and Drywell Atmosphere Temperature) of Post Accident Monitoring Instrumentation (a Safety System) inoperable. The control room was notified of 'Non Quality' (non-Q) parts installed in both required divisions of a Post Accident Monitoring Instrumentation Recorder. The appropriate LCO Conditions were entered for one or more functions with two required channels inoperable. This equipment has passed all surveillance requirements and has been functional since installation. Plans are being developed to replace the non-qualified parts. This is being reported as an event or condition that could have prevented fulfillment of a safety function required to mitigate the consequences of an accident in accordance with 10CFR50.72(b)(3)(v)(D). The licensee notified the NRC Resident Inspector.

  • * * UPDATE ON 03/30/05 @ 1128 BY JIM HUFFORD TO CHAUNCEY GOULD * * * RETRACTION

The following information was provided by the licensee via facsimile (licensee text in quotes): On March 6, 2005, PPL Susquehanna, LLC reported a perceived loss of safety function for three functions of Post Accident Monitoring Instrumentation on Unit 1. The notification was made pursuant to the reporting requirements of 10CFR50,72(b)(3)(v)(d). Engineering analysis has subsequently determined that the use of non-Q fuse holders in the Quality application did not adversely affect the safety-related functions which they supported. The fuse holders were removed, subjected to testing, and determined to be electrically and functionally equivalent 'to Quality fuse holders maintained at the station. This analysis conclusion provides the basis for retraction of the ENS report of March 6. The NRC Resident Inspector was notified. The Reg 1 RDO (Jim Trapp) was informed.

Primary containment
ENS 413909 February 2005 14:20:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentBoth Trains of the Control Structure Emergency Outside Air Supply System Inoperable

At 09:20 am, on February 9th, the control room declared both trains of Control Structure Emergency Outside Air Supply System (CREOASS) inoperable. The control room was notified of an inoperable boundary door that was not closed and latched and therefore would not have allowed CREOASS to perform its safety function of maintaining the Control Structure at a positive pressure if required. The door was closed and locked (at 11:15) to restore the habitability boundary. The door has since been repaired (adjustment of latch mechanism). Initial investigation determined that the door had been unlocked at approximately 09:20 this morning by an elevator vendor to perform maintenance. This is being reported as an event or condition that could have prevented the fulfillment of the safety function required to mitigate the consequences of an accident. CREOASS was not called upon to function during the period that the door was not operable. The licensee notified the NRC Resident Inspector.

  • * * RETRACTION FROM LICENSEE (ROBINSON) TO NRC (HUFFMAN) @ 1328 EDT ON 4/8/05 * * *

The following information was provided by the licensee (licensee text in quotes): On 2/9/2005, PPL Susquehanna LLC reported a loss of safety function for the Control Room Emergency Outside Air Supply System (CREOASS) based on one of the Control Structure Habitability boundary doors being found partially open. Positive air pressure generated by the Control Structure HVAC System prevented the door closure mechanism from maintaining the door closed. The door was closed to restore the habitability boundary. The event was reported as a condition that could have prevented the fulfillment of the safety function required to mitigate the consequences of an accident. The Safety Function of the CREOASS is to provide adequate radiation protection to permit occupancy of the Control Room under accident conditions for the duration of the accident. The CREOASS accomplishes this by: 1) filtering the outside make-up air supply and 2) maintaining a positive pressure in the control structure habitability boundary to limit unfiltered air in leakage into the boundary. A subsequent engineering evaluation concluded that with the door closure mechanism providing a resistive force, CREOASS would have been able to maintain a positive pressure within the boundary and perform its safety function as described above. In conclusion, the reported condition did not result in a loss of safety function under 10CFR50.72 (b)(3)(v)(D) and is therefore being retracted. The NRC Resident Inspector and R1DO (Noggle) have been notified.

HVAC
ENS 406465 April 2004 15:40:0010 CFR 50.72(b)(3)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.72(b)(3)(v)(B), Loss of Safety Function - Remove Residual Heat
10 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.72(b)(3)(v)(C), Loss of Safety Function - Release of Radioactive Material
Loss of Safety Function for Emergency Diesel Generators During Surveillance Testing

At 1040 hrs during setup for Unit 1 Division 1 LOCA/LOOP Surveillance testing, the controlling procedure required making the Loss of Power instrumentation for the 1A and 1C ESS buses inoperable. The specification has a 1 hour time limit for restoration, or the associated Diesel Generators must be declared inoperable. Due to delays during the setup of equipment the time requirements were not met, and the 'E' (Substituting for 'A') and 'C' Diesel Generators were declared inoperable at 1140 hrs. The Loss of Power instruments were restored, and the Diesel Generators declared operable at 1206 hrs. Unit 1 is in Mode 5 requiring only 2 diesel generators operable, therefore not impacted by the Loss of Power instrumentation inoperability. Also during the surveillance, two pump start timers failed to meet the required acceptance criteria. The 'A' ESW Pump timer actuated at 47.86 seconds (criteria; 36 sec. to 44 sec) and the 'C' ESW Pump timer actuated at 50.38 seconds (criteria: 39.6 sec. to 48.4 sec). With failure of the timers, proper loading on the Diesel Generators is not assured, and they were declared inoperable until the associated pump control breakers were opened. The 'E' Diesel Generator was declared inoperable at 1448 hrs, when the data analysis identified that the 'A' ESW pump timer did not meet acceptance criteria. The 'E' Diesel Generator was returned to operable at 1453 hrs when the DC Knife switches for the 'A' ESW pump were open. The 'C' Diesel Generator was declared inoperable at 1524 hrs, when the data analysis identified that the 'C' ESW pump timer did not meet acceptance criteria. The 'C' Diesel Generator was restored to operable at 1706 hrs after supported systems were realigned to prevent further loss of safety function and the DC Knife switches for the 'C' ESW pump were open. The Susquehanna safety analysis requires three operable Diesel Generators to safely shutdown the plant. Therefore with only two operable Diesel Generators, the condition requires an 8 hr ENS notification in accordance with 10CFR50.72(b)(3)(v)and (vi). All times referenced above are EDT. The licensee informed the NRC Resident Inspector.

* * * RETRACTION FROM R. FRY TO M. RIPLEY 1419 ET ON 05/27/04 * * * *

The following is a retraction of ENS Notification #40642 AND #40646: On April 5, 2004, PPL Susquehanna, LLC reported three events to the NRC associated with Unit 1 Division 1 LOCA/LOOP surveillance testing. In each case, the safety function of two (out of 4) emergency diesel generators was brought into question during the testing. In two of these events, the E (substituting for A) and C diesel generators were administratively declared inoperable per Technical Specifications. This was necessary because Loss of Power instrumentation for the 1A and 1C buses, rendered inoperable in support of the test procedure, was not restored within 1 hour. In the third event, the E (for A) and C emergency diesel generators were, again, declared inoperable when two ESW pump start timers failed to meet acceptance criteria thus bringing the proper start sequencing of emergency loads into question. Because the Susquehanna Safety Analysis requires three diesel generators to safely shutdown an operating unit, the potential compromise of the diesel generator safety function was a concern for Unit 2 in each instance. (NOTE: Unit 1 was in Refueling Mode 5 and was, therefore, not impacted by these events.) Accordingly, Control Room personnel conservatively initiated ENS reporting under 10CFR50.72(b)(3)(v) in response to the apparent loss of safety function for Unit 2. Subsequent engineering analysis has concluded that, although the declaration of diesel generator inoperability was correct and in accordance with Technical Specifications, fulfillment of these administrative actions did not result in an actual loss of safety function during any of the above described events. Details of the analysis show that the diesel generators were available to supply emergency power to the ESS buses and/or that sufficient redundant equipment was available to fulfill the safety function needs of Unit 2. These analysis conclusions provide the basis for retraction of the ENS reports made on April 5, 2004." The licensee notified the NRC Resident Inspector. Notified R1DO (R. Conte)

Emergency Diesel Generator
ENS 4027223 October 2003 20:40:0010 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an AccidentNonemergency Notification Due to Failure to Maintain Control Structure Habitability Envelope

During routine monitoring, Control Room personnel noted control structure pressure differential was below the 1/8" (inches of water pressure) required to maintain the Control Structure Habitability Envelope. A walkdown of the Control Structure and initial investigation has revealed no obvious problems that would cause the low positive pressure condition. Due to the inability of the Control Structure HVAC to maintain a positive pressure, both trains of Control Room Emergency Outside Air Supply system were declared inoperable. This is considered a Loss of Safety Function in accordance with 10 CFR 50.72(b)(3)(v)(D). The licensee has notified the NRC Resident Inspector.

  • * * * RETRACTION FROM A. FITCH TO M. RIPLEY 1343 ET 12/12/03 * * * *

At the time of the original 8-hour ENS notification was made, both trains of the Control Room Emergency Outside Air Supply (CREOAS) system were declared inoperable due to the failure of the Control Structure HVAC system to maintain the control structure habitability envelope at a pressure greater than + 1/8" w.g. (water gauge) with respect to outside atmosphere. Subsequent to this event, an evaluation was performed which determined that the requirement to maintain the control structure habitability envelope at a pressure greater than + 1/8" w.g. is only applicable during emergency operating conditions. Under emergency conditions, the CREOAS system, in conjunction with the Control Structure HVAC system, is required to maintain control structure pressure greater than + 1/8" w.g. in accordance with Technical Specification 3.7.3. However, during normal plant operation, the design function of the Control Structure HVAC system is to maintain the habitability envelope at a positive pressure above atmospheric. No specific value is required. Differential pressure readings for the control structure indicated that pressure was maintained above atmospheric at the time of this event. On October 24, 2003, surveillance testing successfully demonstrated that the Control Structure HVAC and CREOAS systems were capable of maintaining the control structure habitability envelope at a pressure greater than + 1/8" w.g. As such, there was no loss of safety function. The licensee has notified the NRC Resident Inspector. Notified R1DO (A. Della Greca)

HVAC
ENS 401345 September 2003 13:33:0010 CFR 50.72(b)(3)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.72(b)(3)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
High Pressure Coolant Injection (Hpci) Declared Inoperable.

At 09:30 EDT, Unit 1 was performing the HPCI Quarterly Flow verification surveillance. Shortly after the initiation of the system an abnormally loud bang was heard. System flow of approximately 5200 gpm and discharge pressure of approximately 1300 psi was achieved at approximately 09:33. Approximately 4 seconds after reaching rated system flow HPCI discharge pressure increased to approximately 1675 psi and system flow dropped to approximately 2700 gpm. HPCI had been declared inoperable at 08:35 EDT to perform the surveillance and will remain inoperable until the cause of the loss of system flow is corrected. Because HPCI is a single train ECCS (Emergency Core Cooling System) safety system, this event results in the loss of an entire safety function which requires an 8 hour ENS notification in accordance with 10CFR50.72(b)(3)(v) and the guidance provided under NUREG-1022, rev. 2. There are no other ECCS systems presently out of service. Reactor Core Isolation Cooling (RCIC) is fully operable and HPCI entered Tech Spec 3.5.1 (14 day Limiting Condition of Operation). All other ECCS systems are fully operable. The NRC Resident Inspector was notified of this event by the licensee.

  • * * RETRACTION FROM WALSH TO CROUCH ON 10/02/03 @ 1548 EDT* * *

On 09/05/2003, PPL Susquehanna LLC made an ENS notification per 10CFR50.72(b)(3)(v) in response to an apparent loss of the HPCI (High Pressure Coolant Injection) safety function. In the event, results of HPCI Quarterly Flow Surveillance testing did not meet acceptance criteria established for the system. Investigation into the cause of the failed HPCI surveillance revealed a 360-degree weld crack on the HPCI Test Line to Condensate Storage Tank (CST) Valve, HV155F008. HV155F008 is not in the reactor vessel injection flowpath. The impact of this crack, which was located between the valve seat cage assembly and the valve body, was that the HPCI Test Line to CST valve was not capable of throttling over the full range of HPCI system flows. Valve performance became erratic at higher flows because the valve seat cage was lifted out of the valve body into the flow path, increasing system resistance, and preventing attainment of design flow in the HPCI test loop. While the ability to effectively test the HPCI system using the test return path to the CST was compromised, the HPCI injection flowpath to the reactor vessel was not adversely affected by the damaged valve. Accordingly, the HPCI system maintained full capability for providing sufficient coolant to the reactor vessel in the event of a small break loss-of-coolant accident. Because the HPCI safety function was not compromised by the identified test path obstruction, this ENS notification is being retracted. The Licensee has notified the NRC Resident Inspector. Notified R1DO (Cobey).

High Pressure Coolant Injection
Reactor Core Isolation Cooling