Semantic search

Jump to navigation Jump to search
 SiteStart dateTitleDescription
05000440/LER-2017-006Perry1 December 2017Loss of Safety Function due to the Inoperability of Both Trains of Motor Control Center Ventilation
LER 17-006-00 for Perry Nuclear Power Plant Regarding Loss of Safety Function due to the Inoperability of Both Trains of Motor Control Center Ventilation

On October 4, 2017 at 0155 hours, while in Mode 1 at 100 percent rated thermal power, inoperability of both A and B trains of Motor Control Center, Switchgear, and Miscellaneous Electrical Equipment Areas Heating, Ventilation, and Air Conditioning System and Battery Rooms Exhaust System (M23/24) occurred. Train A was shutdown and declared inoperable based on excessive drive belt noise and belt malfunction. Train B was inoperable due to ongoing maintenance on its associated chilled water system. The combination of inoperability resulted in a loss of safety function. Technical Specification (TS) 3.0.3 was entered per plant procedures, and at 0250 hours a plant shutdown was commenced. At 0620 hours, the A train of M23/24 was declared operable following belt replacement and TS 3.0.3 was exited. The plant was restored to 100 percent rated thermal power at 0804 hours.

The cause was determined to be inadequate procedural guidance in that the "general tensioning" method described in plant maintenance procedure, V-belt and Sheave Maintenance, is insufficient for restoring components to a reliable condition. Corrective action includes revising the procedure for correct tensioning guidance.

The safety significance of this event is considered to be very small. This event is being reported in accordance with 10CFR50.73(a)(2)(v)(B), 10CFR50.73(a)(2)(v)(C), and 10CFR50.73(a)(2)(v)(D) as an event or condition that could have prevented the fulfilment of a safety function.

NRC FORM 386 (06-2016)

05000440/LER-2017-004Perry8 August 2017
4 October 2017
Loss of Safety Function for High Pressure Core Spray Suppression Pool Level Instrumentation
LER 17-004-00 for Perry re Loss of Safety Function for High Pressure Core Spray Suppression Pool Level Instrumentation

On August 8, 2017, at 1554 hours, while the plant was at 100 percent rated thermal power, during restoration from testing of the High Pressure Core Spray (HPCS) Suppression Pool (SP) Level High Instrumentation, unexpected as-left indications were found that impacted both of the required channels of instrumentation. With both SP level instruments inoperable, a loss of safety function existed.

While venting the sensing line, the HPCS system was aligned to the suppression pool water source. This source of water is HPCS's safety-related source of water. The automatic suction swap on high suppression pool level is implicitly assumed in the accident and transient analysis since it assumes that the HPCS suction source is the suppression pool.

Since the HPCS system was aligned to the suppression pool when the failure occurred, the assumptions of the accident analysis are met, and no safety system functional failure occurred.

The cause for the unexpected as-left indications is due to air entrained in the sensing line which came out of solution.

The safety significance of this event is considered to be small. This event is being reported under 50.73(a)(2)(v)(D) for a loss of safety function.

05000461/LER-2017-008Clinton15 June 2017
11 August 2017
Division 3 Shutdown Service Water Pump Start Failure
LER 17-008-00 for Clinton, Unit 1 re Division 3 Shutdown Service Water Pump Start Failure
On June 15, 2017, Clinton Power Station (CPS) commenced procedure CPS 9069.01, Shutdown Service Water Operability Test. The purpose of this procedure is to verify operability of the Division 3 Shutdown Service Water (SX) System Pump 1SX01PC and selected valves per the Inservice Testing program on a quarterly basis. At 0958, SX pump 1SX01PC was started and after approximately 30 seconds, it tripped due to thermal overload. The pump was declared inoperable and operations entered Technical Specifications (TS) Limiting Condition for Operation (LCO) 3.7.2, Condition A which requires the High Pressure Core Spray (HPCS) system to be declared inoperable and enter TS LCO 3.5.1 Condition B which requires verification by administrative means that the Reactor Core Isolation Cooling (RCIC) system is operable and within 14 days restore the HPCS system to operable status. The cause of the event is under investigation. A supplemental report will be provided when the cause has been established. An ENS notification was made at 1214 (EN 52806). Because the HPCS system is a single train safety system, this event is reportable under 10 CFR 50.73(a)(2)(v)(D) as a condition that could have prevented the fulfilment of a safety function to mitigate the consequences of an accident.
05000374/LER-2017-003Lasalle
LaSalle
11 February 2017
9 August 2017
High Pressure Core Spray System Inoperable due to Injection Valve Stem-Disc Separation
LER 17-003-01 for LaSalle County Station, Unit 2 Regarding High Pressure Core Spray System Inoperable due to Injection Valve Stem-Disc Separation

On February 11, 2017, Unit 2 was in Mode 5 for a planned refueling outage. While attempting to fill and vent the Unit 2 High Pressure Core Spray (HPCS) system, no flow was observed from the drywell vent valves or downstream of the HPCS injection valve. The HPCS system was already inoperable to support scheduled surveillances performed on February 8, 2017 in which the HPCS injection isolation valve had been cycled five times satisfactorily. Troubleshooting determined the cause of the valve malfunction was due to stem-disc separation. The valve internal components were replaced prior to restart of the unit from the refueling outage. The root cause of the valve failure was insufficient capacity of the shrink-fit stem collar, combined with multiple high-load cycles, which resulted in loosening and eventual shear failure of the wedge pin and threads.

This component failure is reported in accordance with 10 CFR 50.73(a)(2)(v)(D) as an event or condition that could have prevented fulfillment of the safety function of structures or system that are needed to mitigate the consequences of an accident. This condition could have prevented the HPCS system, a single train safety system, from performing its design function if the valve failure occurred during an actual demand. This component failure is also reported in accordance with 10 CFR 50.73(a)(2)(i)(B) as a condition prohibited by Technical Specifications (TS) 3.5.1 "ECCS - Operating," since the HPCS system could have been 1 inoperable for greater than the TS 3.5.1, Required Action B.2, Completion Time of 14 days to restore HPCS system to operable status. There were minimal safety consequences associated with the condition since HPCS was not required to be operable at the time of the failure, and other required emergency safety systems remained operable. There were no actual demands for Unit 2 LHPCS, other ECCS systems, or the reactor core isolation cooling (RCIC) system during this period.

- --- ------- - NRC FORM 366 (04-2017) - 01 003 2017

05000458/LER-2017-006River Bend15 May 2017
13 July 2017
Potential Loss of Safety Function of Onsite Power Sources due to Inadvertent Inoperability of Control Building Chiller
LER 17-006-00 for River Bend, Unit 1 re Potential Loss of Safety Function of Onsite Power Sources due to Inoperability of Control Building Chiller

On May 15, 2017, an engineering investigation determined that a modification installed in 2014 on two of the four safety-related main control building chillers had a design error. The nature of that error was such that the performance of a regularly scheduled preventative maintenance (PM) task to draw an oil sample from'the chiller gearbox inadvertently caused the chiller to be incapable of responding to an automatic start signal. A review of the history of the PM found that, on three occasions since the modification was installed, the task was performed on the operable chiller that was in the standby condition. The inadvertent inoperability of the standby division of the main control building chillers causes the loss of safety function of the supported electrical distribution systems in the building. The control building chilled water system provides cooling to the equipment rooms housing the battery chargers and inverters for the safety-related onsite electrical distribution systems. The loss of cooling to the various equipment rooms in the control building requires that the supported equipment in those areas be declared inoperable. The Technical Specifications for the Division 3 DC distribution system requires that the high pressure core spray (HPCS) system be immediately declared inoperable. This condition potentially causes the HPCS system to be incapable of performing its safety function, and is, thus, reportable in accordance with 10 CFR 50.73(a)(2)(v)(D). The error in the subject modification is considered a legacy issue since its design was completed and approved in July 2012. The PM task will be revised to preclude its performance on chillers in the standby configuration.

At no time during the three performances of the PM on the operable standby chiller was there an actual demand for its automatic start. This condition was, thus, of minimal significance with respect to the health and safety of the public.

I

05000397/LER-2016-004Columbia8 June 20171 OF 3
LER 16-004-01 for Columbia Generating Station Regarding Automatic Scram Due to Off-site Load Reject

On December 18, 2016 at 11:24 hours, an automatic scram occurred due to a fault on an off-site transmission network. A reactor scram was automatically initiated by the plant response to the transient.

All rods fully inserted, Main Steam Isolation Valves (SB,V) automatically closed due to loss of pow er to both Reactor Protection Sy stem (JC) busses. All safety sy stems operated as designed. Two Safety Relief Valves (SB,V) were initially cycled automatically, then several manually to maintain Reactor Pressure Vessel (AC) pressure. Reactor water level was maintained with Reactor Core Isolation Cooling (BN), Control Rod Drive (AA) flow, and High Pressure Core Spray (BG).

The cause analysis for the loss of off-site power is being performed by the entity responsible for the off-site transmission network, Bonneville Power Administration (BPA). BPA took immediate corrective actions to restore the off-site transmission network. The root cause evaluation addressing the plant response is being performed by plant personnel. A supplemental LER will be issued when the cause analyses are completed.

05000416/LER-2017-004Grand Gulf26 May 2017Outside-of-Tech-Spec-Allowable-Value Automatic Depressurization System Initiation Timer Relay due to Inadequate Procedures

On May 26, 2017, while performing the Automatic Depressurization System (ADS) quarterly surveillance, the time delay on the Trip System A (Division 1) ADS initiation timer relay was found outside of its Technical Specification (TS) Allowable Value of 5 115 seconds. Specifically, the ADS timer requirements in TS 3.3.5.1, Emergency Core Cooling System Instrumentation, Table 3.3.5.1-1, Emergency Core Cooling System Instrumentation, Function 4, Sub-function c. ADS Initiation Timer, Allowable Value was not met. The cause was determined to be inadequate preventive maintenance and review of the previous test results. This event is reportable as a license event report (LER) in accordance with 10CFR50.73(a)(2)(i)(B), as a "condition prohibited by Technical Specifications" because the same relay failed its previous test and could not be considered as OPERABLE during the full interval between tests. Corrective actions included replacement of the defective timer relay and planned actions to replace the corresponding timer relays in ADS and the Feedwater Control System. In addition, the applicable preventive maintenance procedures were revised. The event posed no threat to the health and safety of the general public or to nuclear safety as ADS would have performed as designed. No Technical Specification safety limits were challenged or violated.

APPROVED BY OMB: NO. 3150-0104 EXPIRES: 3/31/2020 366A U.S. NUCLEAR REGULATORY COMMISSION NRC FORM (4-2017)

  • ..*
  • ‘‘ Reported lessons learned are incorporated into the licensing process and fed back to industry. Send comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

(See NUREG-1022, R.3 for instruction and guidance for completing this form httplAwm.nrc.00vireadino-rm/doc-collections/nureas/staff/sr1022/r3/) 05000 416

DESCRIPTION

On May 26, 2017, while performing Automatic Depressurization System (ADS) (AD)(C23) quarterly surveillance, the time delay on the Trip System A ADS initiation timer relay (RLY2) was found outside of its Technical Specification (TS) Allowable Value of 115 seconds. Specifically, the ADS timer requirements that are specified in Technical Specifications 3.3.5.1, Emergency Core Cooling System (ECCS) Instrumentation, Table 3.3.5.1-1, Emergency Core Cooling System Instrumentation, Function 4, Sub-function c. ADS Initiation Timer, Allowable Value were not met.

The failure mechanism is degradation of the timing function in the ADS initiation timer relay (Agastat Model TR14D3EC750) that delays initiation of ADS in order to allow time for high pressure injection to restore reactor water level. The TS Allowable Value for this timer is less than or equal to 115 seconds. The as found value was beyond this value. This surveillance is performed on a quarterly basis. This same condition was found during the last surveillance performed on February 23, 2017.

This condition was not found during the surveillance performed prior to that on November 18, 2016.

The Automatic Depressurization System is required in Modes 1, 2, and 3 with the reactor above 150 psig. Between November 18, 2016 and January 30, 2017, the plant was in Mode 4. Therefore this function was not required from November 18, 2016 to January 30, 2017, which is when the reactor reached 150 psig in Mode 2.

The ADS was required to be Operable from January 30, 2017, until May 26, 2017. ADS initiation is accomplished by energization of either the Trip System A (Division 1) or Trip System B (Division 2) solenoids (FSW) associated with each of the ADS valves. The logic for each Trip System is separate and either trip system will cause all the ADS relief valves to open. Therefore, the automatic safety function would still be accomplished within the allowable time provided that the Trip System B was Operable. Trip System B initiation logic was taken out of service on March 10, 2017, to support performance of the quarterly ADS channel calibration surveillance procedure. An additional review was performed to determine if the Trip System A logic would have initiated within the allowable time during the period when the Trip System B logic was out of service. The average rate of change of the setpoint between surveillances was 0.402 seconds/day for the first interval (November 18, 2016 - February 23, 2017) and 0.424 seconds/day for the second interval (February 23, 2017 - May 26, 2017). Use of the larger rate of change is conservative, and therefore a rate of 0.424 seconds/day was assumed for the second interval. Linearly extrapolating from an as left condition of 104 seconds on February 23, 2017, it is concluded that the setpoint would have been approximately 110.4 seconds on March 10, 2017. This value is within the 115 second TS AV. Therefore, it is concluded that no loss of safety function occurred for this condition.

REPORTABILITY

This event is reportable as a license event report (LER) in accordance with NUREG-1022, Section 3.2.2, and 10CFR50.73(a)(2)(i)(B), as a "condition prohibited by Technical Specifications" because the same relay failed its previous test and could not have been considered operable for the full interval between tests. The timer relay would have been considered inoperable for a time period such that the Technical Specification 3.3.5.1 completion time would not have been met.

NRC FORM 366A U.S. NUCLEAR REGULATORY COMMISSION (6-2016)

CONTINUATION SHEET

(See NUREG-1022, R.3 for instruction and guidance for completing this form + a httplAvwt.v.nrc.covireadinci-rm/doc-collections/nureqs/staff/sr1022/r3I) APPROVED BY OMB: NO. 3150-0104 EXPIRES: 3/31/2020 Reported lessons learned are incorporated into the licensing process and fed back to industry. Send comments regarding burden estimate to the Information Services Branch (T- 2 F43), U.S. Nuclear Regulatory Commission, Washington, DC 20555.0001, or by e-mail to InTocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

05000 416

CAUSE

The direct cause of the failure is the degradation of timing function for ADS initiation timer relay 1B21-K5A, most likely due to the electrolytic capacitor degradation.

The cause of the failure was an inadequate preventive maintenance task and inadequate procedural guidance.

The procedures did not require periodic replacement of the relay nor did they require an engineering review of the test results.

CORRECTIVE ACTIONS

Immediate:

The defective timer relay in Trip System A was replaced.

Completed:

Preventive maintenance tasks were revised to require periodic replacement of the relays.

Surveillance testing was revised to require timely engineering review of the completed quarterly surveillance tests.

Planned:

The corresponding relays in ADS and the Feedwater Control System will be replaced. This action has been entered in the corrective action program and may be modified in accordance with that program.

SAFETY SIGNIFICANCE

Initiation of the ADS is accomplished by energizing either the Trip System A or Trip System B solenoids associated with each of the ADS valves. Each separate trip system will cause all the ADS relief valves to open. Therefore, the automatic safety function would still be accomplished within the allowable time with Trip System A inoperable provided that Trip System B was Operable. Trip System B initiation logic was taken out of service on March 10, 2017, to support performance of the quarterly ADS Channel B calibration surveillance procedure. An additional review was performed to determine if the Trip System A logic would have initiated within the allowable time during the period when the Trip System B logic was out of service. The conclusion was that the "A" setpoint would have been approximately 110.4 seconds on March 10, 2017. This value is within the 115 second TS AV. Therefore, at least one division of ADS was always available to perform the safety function. In addition, manual actuation was available, and operators are trained on the conditions requiring manual actuation and the associated procedures.

The ADS acts as a backup to High Pressure Core Spray System (BG) for a small break loss of coolant accident. The High Pressure Core Spray System was not impacted by the degraded condition of ADS.

The event posed no threat to the health and safety of the general public or to nuclear safety as ADS would have performed as designed. No Technical Specification safety limits were challenged or violated. Industrial safety was not challenged, and there was no potential or actual radiological release during the event.

PREVIOUS SIMILAR OCCURRENCES

The identified licensee event reports were attributed to inadequate maintenance procedures. The events were reviewed and it has been determined that the causes and corrective actions were sufficiently different that they could not have predicted or prevented the occurrence of this event.

05000458/LER-2017-004River Bend23 March 2017
22 May 2017
Loss of High Pressure Core Spray Safety Function During Surveillance Due to Malfunction of Test Return Valve
LER 17-004-00 for River Bend Station, Unit 1, Regarding Loss of High Pressure Core Spray Safety Function During Surveillance Due to Malfunction of Test Return Valve
On March 23, 2017, at 0028 CDT, with the plant operating at 100 percent power, the high pressure core spray system (HPCS was declared inoperable due to a malfunction of a motor-operated valve (MOV) in the system. During a scheduled test, the HPCS pump test return valve to the suppression pool was given a "close" signal after having been opened for the test. The valve position lights indicated that it fully closed, but system flow parameters did not respond as expected. An operator went to the valve and reported that it appeared that the anti-rotation device on the valve actuator had failed, and that the valve was not fully closed. This valve is a primary containment isolation valve. An examination of the MOV found that a set screw on the actuator had loosened, allowing the anti-rotation device to slip down the valve stem. When the anti-rotation device slipped far enough, the retainer keys fell out, allowing the valve stem to disengage from the anti-rotation device. The maintenance history of the valve was investigated, and it was found that in 1996, the anti-rotation device was loosened during a scheduled maintenance task. A review of the work documentation package found that no torque value was specified for the set screw, whereas the vendor manual requires the set screw to be torqued to 60 ft.-lbs. upon installation. This condition is being reported in accordance with 10 CFR 50.72(b)(3)(v) as a potential loss of safety function of the HPCS system and the primary containment isolation function. An evaluation of the as-found condition has concluded that the HPCS system and primary containment isolation would have been able to perform their design safety function had an actual design basis event occurred during the test.
05000458/LER-2017-001River Bend31 January 2017
3 April 2017
Operations Prohibited by Technical Specifications (Conduct of Operations With a Potential to Drain the Reactor Vessel With Primary Containment Open)
LER 17-001-00 for River Bend Station, Unit 1, Regarding Operations Prohibited by Technical Specifications (Conduct of Operations With a Potential to Drain the Reactor Vessel With Primary Containment Open)
During a refueling outage that commenced on January 28, 2017, there were occasions during which maintenance was performed without taking the required actions to comply with the applicable Technical Specifications. Specifically, operations with a potential to drain the reactor vessel (OPDRVs) were conducted without establishing primary containment integrity, and the provisions of NRC Enforcement Guidance Memorandum (EGM) 11-003, Rev. 3, were invoked instead. The first such operation was commenced on January 31, and the final OPDRV was completed on March 4. This condition is being reported in accordance with 10 CFR 50.73(a)(2) (i)(B) as operations prohibited by Technical Specifications. During all OPDRVs, the prerequisites specified by the EGM were enforced. All activities were completed with no transients in reactor cavity water level having occurred. This event was, thus, of minimal safety significance with regard to the health and safety of the public. On December 20, 2016, NRC approved a generic Technical Specification amendment that can be used by licensees to reconcile this condition. It is required by the EGM that applicable licensees (including River Bend Station) must submit a request for this amendment by December 20, 2017.
05000374/LER-2017-002Lasalle
LaSalle
30 January 2017
30 March 2017
High Pressure Core Spray System Declared Inoperable due to Cooling Water Strainer Backwash Valve Stem-Disc Separation
LER 17-002-00 for LaSalle, Unit 2, Regarding High Pressure Core Spray System Declared Inoperable due to Cooling Water Strainer Backwash Valve Stem-Disc Separation

On January 30, 2017, during routine surveillance testing of the Unit 2 Division 3 Diesel Generator Cooling Water (DGCW) system, the cooling water strainer backwash valve was unable to open. The Division 3 DGCW system was declared inoperable. Upon investigation, operators determined the cause of the valve malfunction was due to stem-disc separation. Division 3 DGCW is a support system for the Division 3 Emergency Diesel Generator and the High Pressure Core Spray (HPCS) system. The required actions of Technical Specifications (TS) 3.7.2 and 3.5.1 were entered on January 30, 2017 when the DGCW and HPCS system, respectively, were determined to be inoperable. TS 3.7.2 Required Action (RA) A.1 requires the supported system to be immediately declared inoperable. TS 3.5.1 RA B.2 requires restoration of the HPCS system to operable within 14 days. TS 3.8.1 was not applicable since a note provides that Division 3 AC electrical power sources are not required to be operable when HPCS is inoperable. The valve was replaced, and the HPCS system was returned to operable on February 2, 2017.

This condition could have prevented the HPCS system, a single train safety system, from performing its design function. This event is reportable in accordance with 10 CFR 50.73(a)(2)(v)(D) as an event or condition that could have prevented fulfillment of the safety function of structures or system that are needed to mitigate the consequences of an accident. There were minimal safety consequences associated with the event since the other emergency safety systems remained operable, and the Division 3 DGCW system remained functional as it retained the ability to provide the required flow through the system. The apparent cause of the stem-disc separation was erosion due to the carbon-steel valve internals in a raw water system environment.

05000416/LER-2017-001Grand Gulf27 January 2017
28 March 2017
High Pressure Core Spray (HPCS) Jockey Pump Trip
LER 17-001-00 for Grand Gulf, Unit 1, Regarding High Pressure Core Spray Jockey Pump Trip

At 1808 hours on 1/27/17, Grand Gulf Nuclear Station entered into LCO 3.5.1.6 when the High Pressure Core Spray (HPCS) Jockey Pump (Component Function Identifier- P) failed and the HPCS System was declared inoperable. The Reactor Core Isolation Cooling (RCIC) System was verified operable and investigation into the cause was initiated. Under those plant conditions the Plant Technical Specifications action to restore the HPCS System to operable status allows a 14 day completion time.

No other safety systems were inoperable at the time of this event.

The decision was made to disassemble the HPCS Jockey Pump and rebuild the pump using parts from the warehouse which was completed on 1/29/17. The pump was tested to demonstrate functionality of the pump on 1/29/17 and the system was returned to service.

05000397/LER-2017-001Columbia20 March 2017Contactor Coil Failure Results in Tripping of HPCS Diesel Mixed Air Fan
LER 17-001-00 for Columbia Generating Station Regarding Contactor Coil Failure Results in Tripping of HPCS Diesel Mixed Air Fan

On January 25, 20:7 at 1836 PST, smoke was detected in the High Pressure Core Spray (HPCS) System diesel room with no indication of a lire. Immediate recovery actions by Operations personnel included opening the disconnect for the affected motor starter, at which point the smoke dissipated, Investigation of the condition found the motor starter for the Diesel Mixed Air Fan had failed, Prior to the start of the event, the HPCS system had been declared inoperable in accordance with plant Technical Specifications for planned maintenance.

The apparent cause of the motor starter failure was overheating of the contactor coil due to elevated system voltages. Corrective actions for this event include replacement of the contactor coil, increased frequency of preventative maintenance, and procedure revision. There were no other event-related equipment malfunctions.

tow Fogm 366 (08-2Q15)

05000397/LER-2016-005Columbia18 December 2016
15 February 2017
Leak in Minimum Flow Line Makes HPCS and Primary Containment Inoperable
LER 16-005-00 for Columbia Generating Station Regarding Leak in Minimum Flow Line Makes HPCS and Primary Containment Inoperable

On December 18, 2016, during a forced plant outage reported under Licensee Event Report (LER)-2016-004, a leak was identified on the minimum flow line of the High Pressure Core Spray (HPCS) system downstream of the Primary Containment Isolation Valve.

HPCS system had been running on minimum flow after being used to maintain Reactor Pressure Vessel water level. The HPCS line leak was identified during a walk down by Operations personnel after the HPCS pump had been secured. Due to the location of the leak downstream of the Primary Containment Isolation Valve, this leak constituted a breach of Primary Containment. Both HPCS and Primary Containment were declared inoperable.

The cause of the leak was determined to be from a gasketed flange in the HPCS minimum flow piping. Corrective actions included replacing the gasket. Further evaluation is ongoing and this report will be supplemented once complete.

05000373/LER-2017-001Lasalle
LaSalle
16 December 2016
8 February 2017
Reactor Core Isolation Cooling System Inoperable Longer than Allowed by the Technical Specifications due to Low Suction Pressure Trips
LER 17-001-00 for LaSalle County, Unit 1, Regarding Reactor Core Isolation Cooling System Inoperable Longer than Allowed by the Technical Specifications due to Low Suction Pressure Trips

On October 18, 2016, the Unit 1 Reactor Core Isolation Cooling (RCIC) system tripped on low suction pressure during a normal system start following completion of scheduled maintenance activities. The system was restored to operable on October 20, 2016.

A second event involving a Unit 1 RCIC system trip on low pressure suction pressure occurred on November 17, 2016, during the system's quarterly operability surveillance. The system was restored to operable on November 20, 2016. The component failure analysis completed on December 16, 2016, determined the cause of both Unit 1 RCIC system trips was a failure of the electronic governor-remote (EG-R) hydraulic actuator.

The Unit 1 RCIC inoperable period was from the first system trip on October 18, 2016, to when full restoration was completed on November 20, 2016. This time was greater than allowed by Technical Specifications (TS) 3.5.3, "RCIC System," Condition A Completion Time of 14 days. This event is reportable in accordance with 10 CFR 50.73(a)(2)(i)(B) as a condition prohibited by the plant's TS. The root cause for the low suction pressure trips was inadequate management of the EG-R preventative maintenance (PM) strategy. Corrective actions included replacement of the EG-R and a plan to implement an appropriate PM strategy for the RCIC EG-R. The safety consequences were minimal since the RCIC system is not credited in the safety analysis, and the credited High Pressure Core Spray (HPCS) system remained available to provide its safety function.

05000416/LER-2016-007Grand Gulf8 September 2016Technical Specification Shutdown due to Loss of Residual Heat Removal Pump

On September 4, 2016 at 02:58, Grand Gulf Nuclear Station entered three TS LCO Action Statements because RHR 'A' pump was declared inoperable.

LCO Actions entered:

1) 3.5.1 for one low pressure ECCS injection/spray subsystem, 2) 3.6.1.7 for one RHR containment spray subsystem, and 3) 3.6.2.3 for one RHR suppression pool cooling subsystem. All have 7 day Completion Times A decision was made to shutdown the plant to repair the RHR 'A' pump because, based on the troubleshooting and testing plan, the pump could not be repaired and returned to service within the LCO Completion Times. At 0300 CDT on 09/08/16, GGNS initiated the transition to Mode 4.

The pump was removed from service and sent to the vendor facility for decontamination, disassembly and failure analysis.

The 'A' pump was then replaced and tested satisfactorily. RHR 'A' was returned to operable.

APPROVED BY OMB: NO. 3150-0104 EXPIRES: 10/31/2018 Reported lessons learned are incorporated into the licensing process and fed back to industry. Send comments regarding burden estimate to the FOIA, Privacy and Information Collections Branch (T-5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by internet e-mail to Intocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may 366A U.S. NUCLEAR REGULATORY COMMISSION

CONTINUATION SHEET

2. DOCKET 3. LER NUMBER 05000 416

PLANT CONDITIONS PRIOR TO THE EVENT

At the time of the event, Grand Gulf Nuclear Station (GGNS) Unit 1 was in Mode 1, at 100% rated thermal power.

All systems, structures and components, with the exception of the RHR 'A' pump, that were necessary to mitigate, reduce the consequences of, or limit the safety implications of the event were available. No other safety significant components were out of service.

DESCRIPTION

On September 4, 2016, GGNS was performing a Residual Heat Removal (RHR) 'A' quarterly Technical Specification (TS) Surveillance Requirement (SR). At 02:58, The RHR pump failed to meet its TS SR Acceptance Criteria for flow and differential pressure (d/p) and was therefore declared Inoperable. Action Statements for TS Limiting Conditions for Operation (LCOs) 3.5.1, 3.6.1.7 and 3.6.2.3 were entered, each having Completion Times of 7 days.

LCO Action Statements entered:

1) 3.5.1 for one low pressure ECCS injection/spray subsystem, 2) 3.6.1.7 for one RHR containment spray subsystem, and 3) 3.6.2.3 for one RHR suppression pool cooling subsystem.

Initial troubleshooting verified that the pump was incapable of meeting the flow requirement of 7756 gpm and d/p of 131 psid simultaneously. The observed pump flow and discharge pressures were verified to be correct via a temporarily installed ultrasonic flow meter and pressure gauge. RHR system valves and lines were verified not to be clogged or leaking. The pump motor was confirmed to be operating at the proper speed.

Further troubleshooting and testing lead station management to the conclusion that RHR 'A' would not be returned to operable status within the 7 day Completion Time. A decision was made to commence an orderly shutdown. On September 8, 2016 at 0300, GGNS began the transition to Mode 4. No other systems were out of service that would have complicated an orderly shutdown to Mode 4.

REPORTABILITY

Event Notification No. 52225 was made to the U.S. Nuclear Regulatory Commission (NRC) Operations Center.

This LER is being submitted pursuant to Title 10 Code of Federal Regulations 10 CFR 50.73(a)(2)(i)(A) for the completion of any nuclear plant shutdown required by the plant's Technical Specifications. Telephonic notification was made to the NRC Emergency Notification System on September 8, 2016, at 03:27, pursuant to 10 CFR 50.72(b)(2)(i) for the initiation of any nuclear plant shutdown required by the plant's Technical Specifications.

CAUSE

Direct Cause: The RHR 'A' pump was unable to provide its required flow at the required differential pressure in order to perform its safety function.

APPROVED BY OMB: NO. 3150-0104 EXPIRES: 10/31/2018 Reported lessons learned are incorporated into the licensing process and fed back to industry. Send comments regarding burden estimate to the FOIA, Privacy and Information Collections Branch (T-5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by internet e-mail to Infocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs. NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may

NRC FORM

366A U.S. NUCLEAR REGULATORY COMMISSION

CONTINUATION SHEET

Grand Gulf Nuclear Station, Unit 1 05000 416 Apparent Cause: Subsequent investigation suggests internal pump degradation but the Apparent Cause is ongoing. A supplemental report to this LER will be provided when the Apparent Cause investigation is complete.

EXTENT OF CONDITION

Quarterly surveillance data of similar Emergency Core Cooling System (ECCS) pumps showed no evidence of degradation. Data was re-examined from the following pumps: Low Pressure Core Spray (LPCS), High Pressure Core Spray (HPCS) and RHR 'B' and 'C.' GGNS also performed a partial quarterly surveillance on the RHR 'B' which was completed satisfactorily.

CORRECTIVE ACTIONS

The RHR 'A' pump was replaced and retested satisfactorily. The pump removed from service has been sent to the vendor facility for failure analysis.

SAFETY SIGNIFICANCE

The event posed no threat to the health and safety of the general public or to nuclear safety as safety- systems performed as designed. No Technical Specification safety limits were violated. Industrial safety was not challenged, and there was no potential or actual radiological release during the event.

PREVIOUS SIMILAR EVENTS

Previous similar events. will be discussed in the supplemental report upon completion of the Apparent Cause investigation.

05000458/LER-2015-010River Bend11 December 2015
8 February 2016
Potential Loss of Safety Function of High Pressure Core Spray Due to Failure of Main Control Building Ventilation Chiller
LER 15-010-00 for River Bend Station, Unit 1, Regarding Potential Loss of Safety Function of High Pressure Core Spray Due to Failure of Main Control Building Ventilation Chiller

On December 11, 2015, at 4:16 a.m. CST, with the plant operating at 83 percent power, the high pressure core spray system (HPCS) was declared inoperable following the failure of the operating chiller in the Division 2 control building ventilation system (HVK).

Chiller "D" was in service when it tripped automatically due to a high bearing temperature signal. The "C" chiller in the Division 1 subsystem automatically started as designed, and was confirmed to be operating correctly within approximately 5 minutes. The Technical Specifications for the Division 3 DC distribution system requires that the HPCS system be immediately declared inoperable.

This condition potentially causes the HPCS system to be incapable of performing its safety function. The investigation determined that, during a recent corrective maintenance activity, too much oil was added to the chiller prior to its return to service. A subsequent load increase on the chiller caused excess oil to migrate into the compressor sump, where it contributed to the high bearing temperature condition. The HVK system continued to support the safety function of Division 3 electrical equipment after chiller trip, since the time required to restore an operable chiller is significantly less than the time limit for restoration of equipment room cooling. This event had no actual adverse effect on the ability of the Division 3 HPCS electrical system to perform its design safety function since there was more than sufficient time to align the other chiller in the same division to provide control building switchgear room cooling. This event, thus, did not constitute an actual loss of the ability of the HPCS system to perform its design safety function.

05000458/LER-2015-008River Bend19 November 2015
18 January 2016
Potential Loss of Safety Function of High Pressure Core Spray Due to Failure of Main Control Building Ventilation Chiller
LER 15-008-00 of River Bend Station, Unit 1, Regarding Loss of Safety Function of High Pressure Core Spray Due to Failure of Main Control Building Ventilation Chiller

On November 19, 2015, at 7:24 a.m. CST, with the plant operating at 97 percent power, the high pressure core spray system (HPCS) was declared inoperable following the failure of the operating chiller in the Division 2 control building ventilation system (HVK).

Chiller "D" was in service when the building operator found an oil leak on that machine. The chiller subsequently tripped on low oil pressure. The "A" chiller in the Division 1 subsystem automatically started as designed. The loss of cooling to the various equipment rooms in the control building requires that the supported equipment in those areas be declared inoperable. The Technical Specifications for the Division 3 DC distribution system requires that the HPCS system be immediately declared inoperable. This condition potentially causes the HPCS system to be incapable of performing its safety function. Maintenance technicians identified the source of the oil leak as a failed seal on the compressor drive shaft. The apparent cause of the seal failure was the age-related degradation of a setscrew holding one of the rotating elements of the seal, allowing it to get out of position and disrupt the integrity of the seal face. In this event, the "A" chiller automatically started as designed, and it was confirmed to be operating correctly within 10 minutes. The HVK system continued to support the safety function of Division 3 electrical equipment after chiller trip, since the time required to restore an operable chiller is significantly less than the time limit for restoration of equipment room cooling. This event had no actual adverse effect on the ability of the Division 3 HPCS electrical system to perform its design safety function since there was more than sufficient time to align the other chiller in the same division to provide control building switchgear room cooling. This event, thus, did not constitute an actual loss of the ability of the HPCS system to perform its design safety function.

05000458/LER-2015-007River Bend17 November 2015
18 January 2016
Potential Loss of Safety Function of High Pressure Core Spray Due to Failure of Main Control Building Ventilation Chiller
LER 15-007-00 for River Bend Station - Unit 1 Regarding Potential Loss of Safety Function of High Pressure Core Spray Due to Failure of Main Control Building Ventilation Chiller

On November 17, 2015, at 11:55 p.m. CST, with the plant operating at 71 percent power, the high pressure core spray system (HPCS) was declared inoperable following the failure of the operating chiller in the Division 1 control building ventilation (HVK) system.

HVK' chiller "C" was in service when the building operator found a freon leak in the system. The leakage was determined to be of such magnitude as to cause the chiller to be inoperable, and the operators took action to shift the building cooling loads to the standby Division 2 chiller. Maintenance technicians disassembled the service water flow control valve on the chiller, and found that the cause of the freon leak was failed rubber diaphragm in the valve actuator. No positive identification of the failure mode of the diaphragm could be made, so it was shipped to the valve vendor for further analysis. This condition potentially caused the HPCS system to be incapable of performing its safety function, and is, thus, reportable in accordance with 10 CFR 50.73(a)(2)(v)(D). The maximum time needed to perform the chiller realignment has been conservatively estimated to be 76 minutes. Calculations have determined temperatures in the Division 3 equipment rooms will remain below the 122F limit of the equipment for at least 24 hours. This event had no actual adverse effect on the ability of the Division 3 HPCS electrical system to perform its design safety function since there was more than sufficient time to align the other chiller in the same division to provide control building switchgear room cooling.

05000440/LER-2015-001Perry16 June 2015Degraded Voltage relay found outside the Allowable Value

On June 16, 2015, at 0452 hours, during performance of surveillance testing, a degraded voltage time delay relay was found outside of the Technical Specification allowable value.

The cause of the Division 3 degraded voltage time delay relay being outside the allowable value was setpoint drift and the calibration setpoint not being centered within the allowable value range. The relay was satisfactorily recalibrated in accordance with procedures and successfully passed the as-left performance test during the remainder of the surveillance testing and was made operable on June 16, 2015, at 1117 hours. Planned corrective actions include centering the time delay relay setpoint within the allowable value and relay removal for analysis and evaluation.

The safety significance of this event is considered to be small. The degraded voltage time delay relay initiates load shedding, isolates the Division 3 bus and starts the Division 3 Emergency Diesel Generator (EDG). The Division 3 EDG is the on-site power source for the High Pressure Core Spray System which is a single train system. Therefore, this event is being reported in accordance with 10CFR50.73(a)(2)(v) as an event or condition that could have prevented the fulfillment of a safety function.

Additionally, as discussed in the Event Analysis section, this event is not considered a safety system functional failure because the as found setpoint was within the analytical design limit.

05000374/LER-2014-001Lasalle5 August 2014Reactor Scram Due to Main Steam Isolation Valve Stem-Disk Separation

On August 5, 2014, at approximately 1734 hours CDT, Unit 2 automatically scrammed from 100% power on high neutron flux, followed by a Group I containment isolation. Following the Group I isolation, the control room operators noted that the position indication for valve 2B21-F022C, the inboard 2C Main Steam Isolation Valve (MSIV), showed dual indication rather than full closed.

Troubleshooting of the 2C MSIV determined that the valve stem disk had separated from the stem, which allowed the main disk to drop into the main steam flow path. The resulting reactor pressure transient added positive reactivity, which caused the high neutron flux scram. Increased steam flow in the other three main steam lines resulted in a nearly simultaneous high main steam line flow Group I containment isolation.

The cause of the stem-disk separation on the 2C MSIV was fretting wear attributable to marginal design. The root cause of the event was a legacy decision made in 2008 deferring installation of a manufacturer upgrade that would have prevented the failure. Corrective actions include installing the upgrade on all MSIVs on both units, and reviewing previous deferral decisions made using the same decision-making process.

05000458/LER-2014-005River Bend1 August 20141 OF 4On August 1, 2014, at approximately 9:42 p.m. CDT, with the plant operating at 100 percent power, the high pressure core spray (HPCS) system was declared to be inoperable as a result of an engineering evaluation of an apparent leakage path through a part of the system. The evaluation determined that, should the HPCS system be initiated in response to a design basis event, the leakage path through a pump test return line to the condensate storage tank (the symptoms of which were first seen on July 12) could potentially cause the suppression pool inventory to be depleted to the extent that the pool would not support its 30-day mission time assumed in the station's accident analysis. Operators closed the HPCS pump suction valve at the suppression pool on August 1, resulting in the inoperability of the system. This event is being reported in accordance with 10 CFR 50.73(a)(2)(v) as a condition that defeated the safety function of the the HPCS system. A subsequent evaluation confirmed that, had the HPCS system actuated in response to a design basis event, the leakage through the pump test return line would have depleted the suppression pool inventory before the completion of its 30-day mission time. Regarding the suppression pool, this event constituted operations prohibited by Technical Specifications (10 CFR 50.73 (a)(2)(i)(b)), as well as a condition that defeated the safety function of the suppression pool (10 CFR 50.73 (a)(2)(v)). A blind flange was installed in the pump test return line to the condensate storage tank in order to isolate the leakage path, and the 1-IPCS system was restored to an operable status on August 5. Repairs on the test return line isolation valves are scheduled.
05000331/LER-2014-004Duane Arnold30 May 2014Unplanned Inoperability of High Pressure Coolant Injection

On May 30, 2014, at 1043, while operating at 100% power, during the performance of a routine Technical Specification (TS) required Surveillance Test Procedure (STP), the 'A' side High Pressure Coolant Injection (HPCI) (BG) isolation logic was activated. The logic activation occurred while attempting to block open contacts of HGA relay E41A-K43, HPCI Auto Isolation Logic Steam Line High Differential Pressure.

The root cause of this event was the design of the HGA relay makes the act of installing relay blocks very difficult and prone to inadvertent actuation. The Resident Inspector was notified, and Event Notification Number 50154 was made pursuant to 10 CFR 50.72(b)(3)(v)(D) due to a condition at the time of discovery that prevented the fulfillment of the HPCI safety function. On May 30, 2014, at 1209, HPCI was returned to operable status after resetting the isolation logic and returning the system to standby readiness condition.

This event did result in a safety system functional failure. There were no radiological releases associated with this event.

05000373/LER-2014-002Lasalle29 March 2014Unit 1 Division 3 Ventilation Failure

On March 29, 2014, Unit 1 was in Mode 1 at 100% power. At 1620 hours CDT, the Division 3 Core Standby Cooling System (CSCS) Pump Room, Switchgear Room, and Battery Room Ventilation failed in such a manner that heat could not be removed from the rooms. Due to the lack of ventilation in the Division 3 switchgear room the High Pressure Core Spray (HPCS) system was declared inoperable and Condition B of Technical Specification (TS) 3.5.1 was entered.

The cause of the event was a failure of the hydramotor pump bearing for the 1VD19Y, Division 3 CSCS Ventilation Return Fan Outlet Damper. Loss of hydraulic pressure in the hydramotor resulted in 1VD19Y failing in the closed position. The corrective action for the event was replacement of the hydramotor for the 1VD19Y damper.

05000416/LER-2013-006Grand Gulf17 December 2013Primary Containment Inoperable Due to an Inadequate Surveillance Procedure Resulting in a Loss of Safety FunctionOn December 17, 2013, at 1322 central standard time (CST) with the plant operating in Mode 1 at 100 percent thermal power, Grand Gulf Nuclear Station (GGNS) personnel utilized a procedure that was improperly revised. The event was identified at approximately 1415 CST during the performance of the surveillance when valve E51F063, RCIC Steam Line Drywell Inboard Isolation was observed to close when a test signal was applied. This was not an expected condition, the surveillance was halted and corrective actions were commenced. The improperly revised procedure resulted in the inoperability of primary containment, a loss of safety function for primary containment and the inoperability of the Reactor Core Isolation Cooling (RCIC) system. Primary containment operability was restored at approximately 1437 CST when the breaker was closed to energize valve E51F064, RCIC Steam Line Drywell Outboard Isolation which restored the penetration to an operable status. RCIC was Inoperable at 1415 CST and restored to an operable condition at approximately 1435 CST when valve E51F063 was reenergized and opened. The direct cause of the event was an improper procedure revision that resulted in an inadequate procedure. The procedure was revised to be technically adequate and an extent of condition review was performed for the affected procedure writer's work. There were no adverse effects on the health or safety of the public as a result of the event.
05000410/LER-2013-004Nine Mile Point2 December 2013Manual Reactor Protection System Actuation due to Loss of Reactor Recirculation Flow

On December 2, 2013, at 0903, Nine Mile Point Unit 2 (NMP2) was lowering reactor power level to remove the main turbine from service to support maintenance. During the power reduction, the Low Frequency Motor Generators (LFMGs) did not start automatically. Attempts to manually start the recirculation system pumps in slow speed were unsuccessful and a manual reactor scram was inserted due to the sudden reduction in core flow.

This event is reportable in accordance with 10 CFR 50.73(a)(2)(iv)(A) as a condition that resulted in manual or automatic actuation of any of the systems listed in 10 CFR 50.73(a)(2)(iv)(B). The Reactor Protection System is listed in 10 CFR 50.73(a)(2)(iv)(B).

The root cause of this event is a failure to identify that the switches in the auto transfer circuits for the reactor recirculation pumps to shift from high speed to low speed are single point vulnerable (SPV) components because they were exempted from the AP-913 classification process. Since the switches were not classified as SPV components, no mitigation strategies were developed.

Corrective actions include revision of the operating procedures to manually start the LFMG sets and not rely on the auto transfer circuitry.

There are no similar Licensee Event Reports for NMP2.

05000440/LER-2013-004Perry17 October 2013Vulnerability. to Cause Secondary Fire due to Unfused Control Room Ammeters

On October 17, 2013, at 1300 hours, a review of industry operating experience regarding the impact of unfused Direct Current ammeter circuits in the Control Room determined the described condition to be applicable to the Perry Nuclear Power Plant resulting in a potentially unanalyzed condition with respect to 10 CFR 50 Appendix R analysis requirements. The original plant wiring design and associated safe shutdown analysis for the Class 1 E batteries control room ampere indications do not include overcurrent protection features to limit the fault current.

The cause of this event was determined to be a latent design error related to wiring and isolation that constituted a fire protection program deficiency which could adversely affect the ability to achieve and maintain safe shutdown of the plant in the unlikely event of a control room fire. A probabilistic risk assessment of this event determined the event to be of small safety significance.

The identified deficiency was corrected utilizing temporary modifications to the plant that eliminated the potential for a control room fire to induce a hot short. The corrective actions to permanently address this condition include the design and implementation of a permanent plant modification to isolate the indication circuits in the unlikely event of a control room fire.

This event is being reported in accordance with 10CFR50.73(a)(2)(ii)(B) as an unanalyzed condition.

05000374/LER-2013-002Lasalle25 April 2013Manual Reactor Scram Following Trip of Circulating Water Pumps

On April 25, 2013, Unit 2 was in Mode 1 at approximately 56% power. The east condenser waterbox was being dewatered in order to address a condenser tube leak. Waterbox isolation valves 2CW007A and 2CW007C had been closed using their motor operators; however, in order to minimize leak-by, an attempt was made to manually seat the valves. These valves are 144 inch butterfly valves with no internal stops. Outlet isolation valve 2CW007C was seated without incident, but inlet valve 2CW007A was inadvertently moved past its closed position, which allowed flow from the running circulating water pumps to fill the waterbox.

At 2005 hours CDT, the Main Control Room was informed that a large amount of water was coming from the open waterbox upper manways. An attempt was made to close the manways; however, at 2019 hours, the 2A and 2B circulating water pumps tripped on high condenser pit water level, requiring Unit 2 to be manually scrammed.

The root causes of the event were determined to be a lack of strict procedural adherence on the part of the operators performing the waterbox dewatering task, and inadequate procedure quality. Corrective actions include coaching in accordance with company policies, and clarifying revisions to the circulating water dewatering procedure.

05000373/LER-2013-004Lasalle22 April 2013Reactor Pressure Exceeded 150 psig With Reactor Core Isolation Cooling Inoperable

On April 22, 2013, Unit 1 was in Mode 2, Startup. At approximately 0723 hours CDT, reactor pressure was increased above 150 psig with the Reactor Core Isolation Cooling (RCIC) system isolated and inoperable. Technical Specification (TS) LCO 3.5.3 requires RCIC to be operable in Mode 1, and in Modes 2 and 3 with reactor steam dome pressure greater than 150 psig. TS Required Actions (RA) A.1 and A.2 were entered.

At approximately 0815 hours, it was recognized that increasing reactor pressure greater than 150 psig with RCIC isolated and inoperable was a violation of TS LCO 3.0.4, which requires that entry into another Mode with an LCO not met shall only be made when the associated actions allow continued operation for an unlimited period of time. This was not the case for TS 3.5.3, and thus TS LCO 3.0.4 was not satisfied. Control rod withdrawals were stopped, and control rod insertion commenced in order to reduce reactor pressure and bring the Unit back into compliance with TS.

At 0900 hours RCIC was declared operable, and control rod insertion was stopped.

The cause of this event was a weakness in Normal Unit Startup procedure LGP-1-1 in that there was no specific procedure step to verify RCIC operability prior to exceeding 150 psig. LGP-1-1 does contain a limitation stating that RCIC operability is required prior to exceeding 150 psig but this would have been more effective if it had been a specific procedural step. In addition, there was a lack of recognition of the impact of TS LCO 3.0.4 by Operations with respect to RCIC operability. Corrective actions include reviewing the event with all licensed operators and revisions to the Normal Unit Startup procedure LGP-1-1.

05000374/LER-2013-001Lasalle18 April 2013Pin Hole Leaks Identified in High Pressure Core Spray Piping

On April 18, 2013, Unit 2 was in Mode 3 following a scram and a loss of offsite power that had occurred on both LaSalle Units the previous day. At 1400 hours CDT, three pin hole through-wall leaks in the U2 High Pressure Core Spray (HPCS) minimum flow line piping were discovered. The leaks were on the outside bend of the first elbow downstream of the minimum flow restricting orifice, and appeared to be leaking a total of approximately 0.5 gpm with the HPCS pump not running.

Unit 2 HPCS was declared inoperable and, because the HPCS minimum flow line is in direct communication with the suppression pool, primary containment was also declared inoperable.

The direct cause of the event was a combination of cavitation and mechanical wear/erosion of the piping wall. The apparent cause was procedural inconsistencies that allowed operation of the HPCS system in minimum-flow for extended periods. Corrective actions included replacing the leaking pipe elbow, and performing ultrasonic inspections of susceptible piping on both Units. Also, HPCS operating procedures will be reviewed and revised as required to provide consistent guidance for minimizing operation of HPCS in minimum flow mode.

05000373/LER-2013-00217 April 2013Unusual Event Declared Due to Loss of Offsite Power and Dual Unit Reactor Scram

On April 17, 2013, LaSalle Units 1 and 2 were operating in Mode 1 at 100% power, with a severe thunderstorm in progress. At 1457 hours CDT, lightning struck 138KV Line 0112, resulting in a phase-to-ground fault which subsequently cleared. At 1459 hours, a second phase-to-ground fault on Line 0112 occurred and all 345 KV oil circuit breakers (OCBs) in the main switchyard opened, resulting in a loss of offsite power and reactor scrams on both Units. All emergency diesel generators automatically started and loaded onto their respective busses. All control rods fully inserted, and all systems responded as expected.

An Unusual Event was declared due to a loss of offsite power for greater than 15 minutes. Offsite power was restored to all ESF busses by 2301 hours on April 17, 2013, and the Unusual Event was terminated at 0814 hours on April 18, 2013.

The root cause of the event was determined to be degradation of the 138kV switchyard grounding system that allowed a lightning induced fault to flash over onto the DC protective system. The ground system in the 138kV switchyard was repaired, and corrective actions include improving lightning shielding in the 138kV switchyard.

05000458/LER-2013-001River Bend2 March 2013Operations Prohibited by Technical Specifications for Operations With a Potential to Drain the Reactor VesselOn March 2, 2013, at approximately 1448 CST, with the plant in a refueling outage, maintenance on the reactor recirculation system was commenced without taking the required actions to comply with the applicable Technical Specifications. This maintenance constituted operations with a potential to drain the reactor vessel, and the required action for such an activity is restoration of the integrity of primary containment. This action was not taken, and the provisions of NRC Enforcement Guidance Memorandum 11-003 (Rev. 1) were instead invoked. The maintenance was completed and compliance with Technical Specifications was restored at 0830 CST on March 7. This event is being reported in accordance with 10 CFR 50.73(a)(2)(i)(B) as operations prohibited by Technical Specifications, as additionally specified by the Enforcement Guidance Memorandum.
05000410/LER-2013-002Nine Mile Point28 February 2013Failure of High Pressure Core Spray System Pressure Pump due to Motor Winding Failure

On February 28, 2013 at 1319, Nine Mile Point Unit 2 was operating at 100 percent power when the High Pressure Core Spray (HPCS) system pressure pump failed. At the time of the failure, the HPCS system was inoperable for planned maintenance. The HPCS system pressure pump failure was due to an electrical short caused by a turn-to-turn failure in the motor.

The cause of this event was determined to be a turn-to-turn short in the motor winding, attributed to poor manufacturer quality of the original motor.

Corrective actions include replacement of the failed motor with a rewound motor and development of a new replacement strategy for these types of motors.

This event is reportable in accordance with 10 CFR 50.73(a)(2)(v)(D), as any event or condition that at the time of discovery could have prevented the fulfillment of the safety function of structures or systems that are needed to mitigate the consequences of an accident. This report constitutes a 10 CFR 21 (Part 21) notification because the motor failure that initiated the event is attributed to a manufacturing deficiency.

There are no previous LERs similar to this event.

05000461/LER-2013-001Clinton18 February 2013Inadequate Risk Identification Results in Loss of Safety FunctionOn 2/18/13, the Division 4 Nuclear System Protection System (NSPS) inverter transferred to its alternate power source. Instrument maintenance technicians were performing a surveillance when a technician inadvertently dropped a test cable and connector. The cable connector swung down and by pendulum motion went under a robust operational barrier in the cabinet coming in contact with the bottom edge of a fuse block staple jumper. The momentary shorting to ground caused the Division 4 NSPS bus to transfer from its normal inverter power source to its alternate power source. Per Technical Specifications (TS), the NSPS is inoperable when powered by its alternate source. With the NSPS inoperable, per the TS, operators declared the High pressure Core Spray System, a single train safety system, inoperable and reported the condition as a loss of safety function. The cause of this event was an inadequate risk identification related to pendulum motion of the cable connector during jobsite planning and set up for the job. Corrective actions include an Instrument Maintenance Department stand down, use of a checklist to aid in challenging jobsite conditions for risk/hazards assessment and management observations, and a case study of this event for Maintenance personnel. There were no safety consequences; the HPCS was capable of initiating with the operable Division 3 NSPS inverter.
05000410/LER-2013-001Nine Mile Point23 January 2013Reactor Core Isolation Cooling System Isolation Due to a Temperature Switch Unit Failure

On January 23, 2013 at 15:16, Nine Mile Point Unit 2 was operating at 100 percent power when Reactor Building General Area temperature switch unit 2RHS*TS85A failed, resulting in the closure of primary containment isolation valves and causing the Reactor Core Isolation Cooling (RCIC) system to isolate from the reactor vessel and become inoperable. The failure of the temperature switch unit occurred concurrently with the High-Pressure Core Spray (HPCS) system inoperable for planned surveillance testing. With both the RCIC and HPCS systems inoperable, high pressure makeup capability to the reactor core was lost from these systems.

This event is reportable in accordance with 10 CFR 50.73(a)(2)(iv)(A), as an automatic actuation of containment isolation valves in more than one system. The event is also reportable in accordance with 10 CFR 50.73(a)(2)(v), as an event that could have prevented the fulfillment of the safety function of systems that are needed to: (A) shut down the reactor and maintain it in a safe shutdown condition, and (D) mitigate the consequences of an accident.

The temperature switch failed due to age-related capacitor degradation. The apparent cause of the event is insufficient use of the corrective action program to fully implement a periodic capacitor replacement program for the Riley temperature switches. Corrective actions include replacement of the failed switch and planned refurbishment of similar units.

05000440/LER-2013-001Perry22 January 2013Loss of Feedwater Results in Automatic Reactor Protection System Actuation

On January 22, 2013, at 0332 hours, the reactor protection system (RPS) automatically actuated due to a loss of feedwater flow to the reactor pressure vessel (RPV). There were no complications during the shutdown as all control rods fully inserted and pressure was maintained by normal means. The High Pressure Core Spray (HPCS) and the Reactor Core Isolation Cooling (RCIC) systems actuated based on a valid reactor water level initiation and injected to restore RPV water level.

The cause of the event was failure of a balance-of-plant inverter/static transfer switch, which provides electrical power to the digital feedwater control system. A circuit card in the static transfer switch degraded, which affected operation of the inverter. The electrical loads serviced by the inverter/static transfer switch were placed on an alternate power source. This alignment will continue until permanent repairs are made which are currently scheduled for the next refueling outage.

The safety significance of this event is considered to be small. This event is being reported in accordance with 10 CFR 50.73(a)(2)(iv)(A) as an event or condition that resulted in an automatic actuation of the RPS, HPCS, and RCIC systems, and Operational Requirements Manual section 7.6.2.1, which requires a Special Report submittal following an Emergency Core Cooling System actuation and injection into the reactor coolant system.

05000461/LER-2012-00323 November 2012Breaker Failure Leads to Loss of Safety Function and System StartOn 11/23/12 an operator reported to the Main Control Room that the Control Room (VC) B Chiller Breaker was cycling with no demand signal and attempted numerous times to open the breaker with no success. In response, the Control Building Unit Sub B Cubicle was manually tripped causing the following isolations/actuations: a loss of power to Division 2 Instrument Air System and Service Air System Containment isolation valves causing the valves to isolate; and a loss of power to Fuel Building (VF) system ventilation Division 2 isolation dampers resulting in a trip of the VF system. High Pressure Core Spray (HPCS) became inoperable based on inoperability of the room cooler for the associated Division 4 inverter and battery charger. Following the loss of power to the VF isolation dampers, secondary containment differential pressure became positive. Subsequently, power was restored to Control Building Unit Sub B and HPCS was restored to operable. The Standby Gas Treatment System was manually started and secondary containment differential pressure was restored. An automatic start of Division 2 Shutdown Service Water (SX) system also occurred during this event. The cause of this event was the failure of the VC B Chiller Breaker closing spring charging mechanism. The breaker that failed has been replaced and the failed breaker has been sent to an offsite laboratory for failure analysis.
05000374/LER-2012-001Lasalle County Station31 August 20122B Diesel Generator Declared Inoperable Due to Excessive Air Start Receiver Blowdown Caused by a Degraded Drain Valve

On August 31, 2012, at 09:40 CDT, while blowing down the 2B Diesel Generator (DG) A train Starting Air receiver for preventative maintenance, the receiver pressure decreased below the minimum 165 psig required for DG operability per Technical Specification (TS) 3.8.3, Condition D. The 2B DG provides emergency AC power to Division 3, which supplies the High Pressure Core Spray System (HPCS). The 2B DG was declared inoperable in accordance with TS 3.8.3 Required Action E.1.

At 10:22 CDT, the A air start train was re-pressurized to greater than 165 psig, and the 2B DG was declared operable.

The 2B DG was inoperable for approximately 42 minutes.

The cause of the event was determined to be a degraded drain valve on the A train starting air receiver. The corrective actions included replacement of the drain valve.

05000440/LER-2012-002Perry11 June 2012. Inoperable High Pressure Core Spray System Results in Loss of Safety Function
05000410/LER-2012-003Docket Number4 June 2012Suppression Pool Level Below Technical Specification Limit During Mode ChangeOn June 4, 2012, at 0517, Nine Mile Point Unit 2 (NMP 2) entered Mode 2 (startup) with suppression pool water level at 199.44 feet, below the minimum required level of 199.5 feet, per Technical Specification (TS) Limiting Condition for Operation (LCO) 3.6.2.2. Contrary to the requirements of LCO 3.0.1, the conditions for changing modes from Mode 4 (cold shutdown) to Mode 2 were not met when Mode 2 was entered. The low suppression pool level of 199.4 feet was discovered during shift checks on June 4, 2012 at 0846, when TS 3.6.2.2, Condition A was entered. Suppression pool water level was restored at 0926 and TS 3.6.2.2 Condition A was exited at 0933. The cause of this event is a failure to recognize abnormalities. The operators performing and verifying the Surveillance Requirements (SRs) and control room supervision reviewing the SRs did not recognize that little margin remained to the TS required lower level for suppression pool water level. Actions are being taken to communicate lessons learned from this event with operating crews for both units at Nine Mile Point Nuclear Station (NMPNS) with an emphasis on operator fundamentals of plant parameter monitoring and control. This event was entered into the NMPNS corrective action program (Condition Report CR-2012-005507).
05000458/LER-2012-00324 May 2012Reactor Scram Following a Loss of Main Reactor Feedwater Pump Due to Electrical Fault

On May 24, 2012, at 3:40 p.m. CDT, a manual reactor scram was initiated in response to the loss of the running reactor feedwater pump. The plant was operating at approximately 32% power. The reactor core isolation cooling system was manually started to provide high pressure makeup to the reactor. The high pressure core spray system was manually started during the recovery from the event, but was not aligned to the reactor vessel. An electrical transient caused by the failure of a lockout relay resulted in the main supply breaker to the "B" 13.8kv switchgear to trip. Reactor recirculation pump "B" tripped due to the loss of its power source; the "A" reactor recirculation pump continued to operate in slow speed. The electrical transient also caused a loss of power to all main condenser circulating water pumps and normal service water pumps, necessitating the manual closure of the main steam isolation valves. The standby service water system actuated as designed in response to low normal service water pressure. The operators manually operated selected SRVs for reactor pressure control and for reactor cooldown.

Personnel in the turbine building reported the presence of smoke in the area of the feedwater pumps, but no actual fire was observed. There were no safety-related systems out of service at the time. This event is being reported in accordance with 10CFR50.73(a)(2)(iv)(A) as an actuation of the reactor protection system and the standby service water system. This event was of low safety significance to the health and safety of the public.

05000458/LER-2012-0018 May 2012Operations Prohibited by Technical Specifications Due to Inoperability of Division 3 Diesel Generator

On May 8, 2012, plant engineers confirmed that the lubricating oil in the Division 3 diesel generator (DG) was contaminated with fuel at a level that required its replacement. At the time of this discovery, a plant heat-up was in progress in preparation for return to service following a maintenance outage. The oil sample that yielded these 1 results had been drawn on April 25, and shipped off-site for vendor analysis. Plant engineers evaluated the Itrends of prior lubricating oil samples taken prior to May 8, and determined that the DG had become incapable of performing its design safety function on approximately October 28, 2011. It was concluded that this date was the likely starting point of the internal fuel leak that contaminated the oil. That fuel leak likely resulted from gasket damage that occurred during work on the fuel injectors. On May 8, the DG was removed from service in order to change the lubricating oil and repair the fuel leak. It has been determined that, in the as-found condition, the DG remained capable of fulfilling the mission time assumed by the station's probabilistic risk analysis. Enhanced , work instructions for fuel jumper installation have been added to the vendor manual and to model work orders.

This condition is being reported in accordance with 10CFR50.73(a)(2)(i)(B) as operations prohibited by Technical Specifications.t

05000416/LER-2012-003Grand Gulf2 April 2012ESF Actuation Due to Division III Bus Undervoltage following a Lightning StrikeOn 4/2/12 at 1511 hours Central Daylight Time (CDT), Grand Gulf Nuclear Generating Station (GGNS) was in Mode 5 when a valid Engineered Safety Feature (ESF) actuation for emergency Alternating Current (AC) power to Division III 4160 Volt bus occurred due to degraded voltage. One of the two 500 (kilovolt) kV offsite feeder breakers tripped causing a drop in grid voltage which resulted in a trip of the ESF feeder breaker for Division III 4160 V bus. The High Pressure Core Spray (HPCS) Diesel Generator automatically started and energized the bus. The HPCS system was not running and no Emergency Core Cooling System (ECCS) initiation occurred during this event. Divisions I and II ESF power monitoring instrumentation responded to the grid voltage transient but no actuation setpoints were reached. Division I and II ESF 4160 Volt buses remained energized and shutdown cooling remained in service. The Technical Specifications required offsite power sources remained operable and in service during this event. The 500kV feeder that tripped was restored by the dispatcher at approximately 1515 CDT. The Division III bus was subsequently transferred back to offsite power and the HPCS Diesel Generator was secured.