Semantic search

Jump to navigation Jump to search
 Start dateReport dateSiteReporting criterionSystemEvent description
05000483/LER-2017-00215 August 2017
13 October 2017
13 October 2017Callaway10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.73(a)(2)(vii), Common Cause Inoperability
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Steam Generator
Service water
Emergency Diesel Generator
Auxiliary Feedwater
Main Steam Safety Valve
Decay Heat Removal
Main Steam Line
Main Steam

On August 15, 2017, Callaway Plant was in Mode 1 at 100 percent power. During evaluation of protection for safety-related equipment from the damaging effects of tornados, Callaway Plant personnel determined that the minimum-flow recirculation lines for the turbine-driven auxiliary feedwater pump (TDAFP) and both motor-driven auxiliary feedwater pumps (MDAFPs) could be damaged if a postulated tornado-generated missile were to penetrate the condensate storage tank (CST) valve house and strike the lines. In response, Operations declared all three auxiliary feedwater pumps inoperable.

Compensatory measures were implemented consistent with Enforcement Guidance Memorandum (EGM) 15-002, "Enforcement Discretion for Tornado-Generated Missile Protection Noncompliance." Upon completion of the initial compensatory measures, the TDAFP and MDAFPs were declared Operable but nonconforming.

Subsequent to the condition identified on August 15, 2017, continued investigation of tornado missile vulnerabilities led to discovery that the exposed steam exhaust stacks for the main steam safety valves and atmospheric steam dump valves, as well as the exposed vents for the diesel generator fuel oil storage and day tanks, were also susceptible to tornado missile damage to the extent that compliance with General Design Criterion 2 is not ensured. Compensatory measures were then promptly implemented for these conditions, as well, in accordance with EGM 15-002 such that the affected systems have been evaluated to be nonconforming but Operable.

It has been determined that the identified noncomformances are an original plant design legacy issue. Long-term resolution for establishing compliance is under development and will be completed within the time frame described in the EGM.

05000334/LER-2017-0013 February 2017
18 April 2017
18 April 2017Beaver Valley10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.73(a)(2)(vii), Common Cause Inoperability
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Auxiliary Feedwater
Main Steam Safety Valve
Decay Heat Removal
Main Steam

In order to address the concerns outlined in NRC Regulatory Issue Summary (RIS) 2015-06 "TORNADO MISSILE PROTECTION", an evaluation of tornado missile vulnerabilities and their potential impact on Technical Specification (TS) plant equipment was conducted. This evaluation concluded that the following Structures, Systems, and Components (SSCs) are potentially vulnerable to tornado generated missiles:

The steam discharge flow paths to atmosphere of the Beaver Valley Power Station Unit 1 (BV-1) and Unit 2 (BV-2) Main Steam Safety Valves (MSSVs) (reference TS 3.7.1) are potentially vulnerable to tornado generated missiles.

The steam discharge flow paths to atmosphere of the BV-1 and BV-2 Atmospheric Dump Valves (ADVs) (reference TS 3.7.4) are potentially vulnerable to tornado generated missiles.

On February 23, 2017, the BV-1 and BV-2 TS required MSSVs and ADVs were declared inoperable and Enforcement Guidance Memorandum (EGM) 15-002 Rev 1 "Enforcement Discretion for Tornado-Generated Missile Protection Noncompliance," was applied. Compensatory measures were implemented within the time allowed by the applicable Limiting Condition(s) for Operation and the associated systems were then declared Operable but nonconforming.

The apparent cause of this issue was a lack of clarity during the original design and licensing of the plants that led to inadequate understanding of the tornado missile protection regulatory requirements.

In addition, as part of the evaluation of tornado missile vulnerabilities, two BV-2 tornado missile barrier doors were found to be open. Specifically, Auxiliary Building door (A-35-5A) was found open and Fuel Building door (F-66-3), was found to be partially open. These doors were then closed and latched.

Actions will be taken to establish compliance for the MSSVs and ADVs either by plant modification or by employing a methodology for addressing tornado missile noncompliance for the MSSVs and the ADVs.

These conditions (as applicable) were reported to the NRC on February 23, 2017 in Event Notification (EN) number 52571 under 10 CFR 50.72(b)(3)(ii)(B) and 10 CFR 50.72(b)(3)(v)(A).

05000445/LER-2016-00222 February 2017Comanche Peak10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(v), Loss of Safety Function
10 CFR 50.73(a)(2)(vii), Common Cause Inoperability
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Service water
Emergency Diesel Generator
Containment Spray

On September 13, 2016, and September 14, 2016, during plant walk downs by Engineering and the NRC Senior Resident inspector, pressurized fire protection piping in the Service Water Intake Structure was found to not be shielded against a Moderate Energy Line Break (MELB), resulting in inoperability of one train of Service Water for both units.

During extent of condition walk downs conducted on October 6, 2016, October 10, 2016, November 17, 2016, December 5, 2016, and December 22, 2016, additional piping in the Unit 1 and Unit 2 Safeguards and Auxiliary Buildings was found to not be shielded against a MELB, resulting in inoperability of one train of various.safety related equipment for both units. The most likely cause of this event was the methodology used to conduct the initial MELB walk downs was flawed and allowed some MELB threats to be missed.

Corrective actions include shielding the affected piping, performing a 100 percent walk down of rooms containing MELB piping identified for shielding, and revising the systems interaction program maintenance procedure. I All times in this report are approximate and Central Time unless noted otherwise.

05000456/LER-2016-00225 May 2016
19 July 2016
19 July 2016Braidwood10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Reactor Coolant System
Auxiliary Feedwater
Containment Spray

On May 25, 2016, during evaluation of protection for Technical Specification (TS) equipment from the damaging effects of tornadoes, Braidwood identified non-conforming conditions in the plant design such that specific TS equipment on both units was considered to not be adequately protected from tornado missiles.

On May 25, 2016 at 1415 Operations declared the affected equipment inoperable, implemented Enforcement Guidance Memorandum (EGM) 15-002, "Enforcement Discretion for Tornado-Generated Missile Protection Noncompliance" and the required compensatory measures, and then declared the affected equipment operable but non-conforming.

The cause of this issue was a lack of clarity and changing requirements during the original licensing of the plants which led to inadequate understanding of the original NRC regulatory guidance.

The corrective actions planned are to complete the EGM 60-day comprehensive compensatory measures to demonstrate a discernable change from its pre-discovery actions, to modify the refueling water storage tank hatches to eliminate the tornado missile vulnerability, and to obtain and implement a license amendment for an analytical solution dispositioning tornado generated missile nonconforming conditions.

05000293/LER-2016-00219 April 2016
20 June 2016
18 August 2016Pilgrim
Pilgriin Nuclear Power Station
10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.73(a)(2)(vii), Common Cause Inoperability
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Emergency Diesel Generator

, On April 19, 2016, at approximately 1450 hours, it was discovered that a maintenance activity performed between 2010 hours on August 26, 2014 and 0143 hours on August 27, 2014, had rendered the Startup Transformer (X4) and the standby Emergency Diesel Generators (EDG) (X-107A&B) unable to automatically supply power to Buses A5 and A6, due to the breaker interlock that would prevent Startup Transformer breakers (152-504 and 152-604) and standby EDG breakers (152-509 and 152-609) from closing, when Bus A8 to Bus A5 breaker (152-501) and Bus A8 to Bus A6 breaker (52-601) are in the TEST position and CLOSED. During the maintenance activity, the plant was operating at 100 percent power and the_ Unit Auxiliary Transformer (X3) was providing power to Emergency Buses A5/A6.

The functional testing of negative sequence relays (146-600/A and B) and 23kV feed undervoltage relays (127-600A/1 and 2, and 127-600B/1 and 2) created a test configuration, lasting less than 1-hour, whereby power to Buses A5 and A6 was not automatically available from either the startup transformer or from the EDGs. As a result, Limiting Conditions for Operation (LCO) Action Statement 3.9.6.2 was not met.

The root cause is that the decision to perform the described surveillance testing online, instead of during cold shutdown, lacked sufficient rigor to ensure compliance with Technical Spepifications. Corrective actions will establish and institutionalize expectations and accountability for station leadership regarding consequence-biased decision-making and effective risk manaaement. There was no impact to_public health and safety.

05000220/LER-2014-0028 May 20148 July 2014Nine Mile Point10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Reactor Water Cleanup

On May 8, 2014, at 1645, the results of an industry operating experience (OE) extent of condition review identified that an un-fused control circuit associated with the Unit 1 Reactor Water Cleanup Isolation Valve 12 could short circuit due to a fire in the circuit cable routing. This short circuit could cause the cable to self- heat and cause secondary fires along the associated cable route. The unanalyzed secondary fires could adversely affect safe shutdown equipment and potentially cause the loss of ability to safely shutdown as required by 10 CFR 50 Appendix R. The original plant wiring design and configuration for the containment isolation valve did not include separate overcurrent protection for motive power and control wiring. The only protection for control circuit wiring is by motive circuit fuses which are not sized appropriately to protect the control wiring. As a compensatory measure, Operations has initiated a fire inspection each shift to monitor the associated Fire Areas (1 and 10) until separate fuses are installed within the control circuitry of the motor operated valve (MOV). A similar event was reported in LER 2013-002.

This condition was entered into the Nine Mile Point (NMP) corrective action program as Condition Report (CR) 2014-004630.

05000285/LER-2014-00424 April 20143 October 2014Fort Calhoun10 CFR 50.73(a)(2)(v), Loss of Safety Function
10 CFR 50.73(a)(2)(vii), Common Cause Inoperability
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Steam Generator
Reactor Coolant System
Main Steam Isolation Valve
Auxiliary Feedwater
Shutdown Cooling
HVAC
Auxiliary Feed Water
Main Steam
Containment Spray

On April 24, 2014, during a review of previous conditions affecting equipment qualification it was identified that the environmental qualification of Namco EA180 series limit switches were not being properly maintained per vendor requirements. This condition was not verbally reported at the time of discovery as the condition was identified and resolved while the plant was in an extended shutdown.

A cause evaluation was completed and determined that technical requirements from the vendor manual for maintaining environmental qualification of the Namco EA180 series limit switches were not captured in the applicable plant procedure.

The applicable plant procedure has been revised to include vendor information for maintaining environmental qualification of the limit switches. The limit switch top cover gasket and screw assemblies for all environmentally qualified Namco EA180 series limit switches were replaced and torqued in accordance with vendor requirements.

05000410/LER-2013-00322 October 201320 December 2013Nine Mile Point10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System

On October 22, 2013 it was discovered that unfused ammeter indication circuits associated with the Nine Mile Point Unit 2 (NMP2) safety-related Direct Current (DC) buses could short circuit due to a fire in the circuit cable routing. This ground fault equivalent hot short could cause the cable to self-heat and lead to secondary fires. The unanalyzed secondary fires could adversely affect safe shutdown equipment and potentially cause the loss of the ability to safely shutdown as required by 10 CFR 50 Appendix R.

This event is reportable in accordance with 10 CFR 50.73(a)(2)(ii)(B) as a condition that resulted in the nuclear plant being in an unanalyzed condition that significantly degraded plant safety, and 10 CFR 50.73(a)(2)(ix)(A) as a condition that as a result of a single cause could have prevented the fulfillment of a safety function for two or more trains or channels in different systems.

The cause of this event is that the equipment design issue was not recognized as an unacceptable configuration. The design issue is associated with an evolving industry understanding of the 10 CFR 50 Appendix R common enclosure scope.

Corrective actions include the isolation of the affected circuits at the DC bus in order to prevent the condition from occurring, and the development, issuance and installation of a plant modification to install fuses on the safety-related DC ammeters at NMP2 to ensure adequate circuit protection to prevent the propagation of fires in additional areas due to overcurrent conditions.

05000220/LER-2013-00222 October 201320 December 2013Nine Mile Point10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System

On October 22, 2013 it was discovered that unfused ammeter indication circuits associated with the Nine Mile Point Unit 1 (NMP1) safety-related Direct Current (DC) buses could short circuit due to a fire in the circuit cable routing. This ground fault equivalent hot short could cause the cable to self-heat and lead to secondary fires. The unanalyzed secondary fires could adversely affect safe shutdown equipment and potentially cause the loss of the ability to safely shutdown as required by 10 CFR 50 Appendix R.

This event is reportable in accordance with 10 CFR 50.73(a)(2)(ii)(B) as a condition that resulted in the nuclear plant being in an unanalyzed condition that significantly degraded plant safety, and 10 CFR 50.73(a)(2)(ix)(A) as a condition that as a result of a single cause could have prevented the fulfillment of a safety function for two or more trains or channels in different systems.

The cause of this event is that the equipment design issue was not recognized as an unacceptable configuration. The design issue is associated with an evolving industry understanding of the 10 CFR 50 Appendix R common enclosure scope.

Corrective actions include the isolation of the affected circuits at the DC bus in order to prevent the condition from occurring, and the development, issuance and installation of a plant modification to install fuses on the safety-related DC ammeters at NMP I to ensure adequate circuit protection to prevent the propagation of fires in additional areas due to overcurrent conditions.

05000306/LER-2012-00220 July 20124 April 2013Docket Number10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor
10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Emergency Diesel Generator
Main Steam Isolation Valve
On July 20, 2012, the Prairie Island Nuclear Generating Plant (PINGP) Unit 2 declared Emergency Diesel Generators (EDGs) D5 and D6 inoperable due to a missing hazard barrier. The missing hazard barrier is required to be installed with Unit 2 in Modes 1, 2, 3 and 4 when the Main Steam Isolation Valves (MSIVs) are open.
05000445/LER-2012-00220 June 201216 August 2012Docket Number10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Emergency Diesel Generator
Auxiliary Feedwater

Between October 2009 and March 2012, Comanche Peak Nuclear Power Plant (CPNPP) Units 1 and 2 experienced three failures of safety related breaker control devices that caused Technical Specification equipment to become inoperable. Two of the failures were on Unit 1 and one of the failures was on Unit 2. On June 14, 2012, a failure analysis concluded that these failures were caused by a material weakness of the control devices' contact carrier frames due to a manufacturing defect. Less than adequate control of the manufacturing process increased the susceptibility to shock loading of the cured phenolic material used to make the contact carrier frames. On June 20, 2012, CPNPP determined that this condition was reportable per 10CFR50.73(a)(2)(ix)(A) and 10CFR21. Corrective actions include replacement of the potentially affected safety related breaker control devices, development of receipt inspection testing criteria to be used for breaker control devices, issuing an Operating Experience Report on this event, and notification of the breaker vendor (ABB Inc.).

All times in this report are approximate and Central Time unless noted otherwise.

05000285/LER-2012-00429 March 201227 October 2012Fort Calhoun10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Steam Generator
Reactor Protection System
Containment Spray

While investigating industry operating experience, it was determined that Fort Calhoun Station is subject to similar conditions where Static "0" Ring pressure switches with certain housing styles exhibit a setpoint shift when exposed to a change in temperature if the switch body is not vented. Fort Calhoun Station pressure switches that provide signals for high containment pressure to the reactor protection system and engineered safeguards actuation circuitry may have this configuration. The impact of the potential drift was evaluated and it was initially determined that neither reactor protection system nor the engineered safeguard circuitry may actuate at the required containment pressure of 5 psig. A subsequent evaluation of actual data concluded that safety analysis limits were not exceeded. However, two Technical Specification limits were not protected by the calibration procedure nominal trip setpoint when applying the additional uncertainty.

The Apparent Cause was determined to be poor vendor documentation which led to Engineering personnel to improperly interpret and apply the information contained in the Static "0" Ring vendor manual. Corrective actions were initiated to remove the vent caps, revise the affected calculations to the temperature correction factor and drift.

Additional actions to revise and re-perform surveillance testing were initiated.

05000446/LER-2009-00114 December 200911 February 2010Comanche Peak10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple SystemSteam Generator
Reactor Coolant System
Control Rod
Main Steam
Containment Spray

On December 14, 2009, at 0800 hours, Comanche Peak Nuclear Power Plant (CPNPP) Unit 2 was in Mode 1 at 100% power. A channel calibration on Unit 2 Train B Neutron Flux Monitoring System (Gamma-Metrics) resulted in the inoperability of channels in different systems: Unit 2 containment pressure channel 4, and Channel 4 of the Overtemperature N-16 and Overpower N-16 reactor trips.

When the test equipment being used for the channel calibration was disconnected from the Gamma- Metrics system, the affected control room indications returned to normal. The cause of this event was grounding the Gamma-Metrics system to current paths and ground loops which served to couple a voltage potential through the plant grounding system to the affected plant parameters. Completed corrective actions include: 1) A Maintenance Standing Order was issued to control the use of test equipment that has the ability to ground a floating circuit, and (2) The shield cable ground was corrected for the Unit 2 containment pressure channel 3 and 4 main control board indicators. Planned corrective actions include procedure changes to improve the control and use of test equipment.

All times in this report are approximate and Central Standard Time unless noted otherwise.

05000302/LER-2005-00127 January 200523 March 2005Crystal River10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Steam Generator
Reactor Coolant System
Feedwater
Emergency Diesel Generator
Auxiliary Feedwater
Emergency Feedwater Initiation and Control
Control Rod
At 18:30, on January 27, 2005, Progress Energy Florida, Inc., Crystal River Unit 3, was in MODE 1 (POWER OPERATION) at 100 percent RATED THERMAL POWER. A non emergency eight-hour notification was made to the NRC Operations Center under 10CFR50.72(b)(3)(ii)(B) to report a design configuration subject to a single failure that could prevent both onsite and both offsite power sources from supplying power to their respective 4160 volt Engineered Safeguards buses. This condition was identified by NRC inspection personnel during the NRC Triennial Fire Protection Inspection. No failure modes effects analysis was performed during the design change process in effect at the time the Offsite Power Transformer and Back-up Engineered Safeguards Transformer were installed in 1990 and 1993, respectively. Also, inadequate technical rigor was exercised during the design, verification, and acceptance of the modification packages developed by the Architect Engineer. Modifications to remove the single failure vulnerability have been implemented. This report is being submitted pursuant to 10CFR50.73(a)(2)(ii)(B) and 10CFR50.73(a)(2)(ix)(A). This condition does not represent a reduction in the public health and safety. No previous similar occurrences have been reported.
05000266/LER-2002-00116 August 200215 October 2002Docket Number10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple SystemSteam Generator
Feedwater
Auxiliary Feedwater
Decay Heat Removal

On August 16, 2002, during the development of the new AOV evaluation and assessment program at Point Beach Nuclear Plant (PBNP), NMC Engineers determined that 1MS-5959, one of two steam generator (SG) blowdown isolation valves on Unit 1, may have been unable to shut with full differential pressure of 1085 psig across the valve.

The new AOV evaluation and assessment program is used to determine whether the valve's performance will meet design basis functions under prescribed operating conditions. In this case, we evaluated that 1MS-5959 would not have shut under those conditions. Since this is a new evaluation method, it was not used when the valve was diagnostically tested in 1999.

This condition was documented in the PBNP corrective action program as CAP029065. Interim action was taken to place the valve in the required shut position to ensure that minimum feed water flow requirements would be maintained in the event of a loss of normal feed water accident. Following diagnostic testing, adjustment of the spring closing force of this AOV, and successful completion of post maintenance testing, 1MS-5959 was restored to full operability, and Unit 1 "B" SG blowdown was restored. The remaining Unit 1 and 2 SG blowdown isolation valves at PBNP were evaluated and determined to be capable of shutting against the maximum differential pressure assumed within the calculation.

This event is reportable as an unanalyzed condition that had the potential to significantly degrade plant safety. The safety assessment concluded that the overall safety significance of this event was low.

05000528/LER-2001-00511 December 20017 February 2002Palo Verde Nuclear Generating Station Unit 110 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System
Reactor Protection System

On December 11, 2001, plant technicians discovered a procedural inadequacy in the method used for response time testing of the Plant Protection System Log Power Trip. This method did not meet Technical Specification Surveillance Requirements 3.3.1.13, and 3.3.2.5. All three Palo Verde Units were in Mode 1 when the Log Power Trip was declared inoperable. Since the Log Power Trip is not required in Mode 1 operation, no Limiting Condition for Operation Required Action was entered. Cause of the inadequate test method is attributed to inadequate documentation of the system design impact upon the time response testing requirements. Retest using an adequate test procedure was completed on December 21, 2001. The "As Found" response times were all acceptable and the log power channels were returned to operable status.

The Surveillance Test Procedure will be updated with a note to reflect the need to conduct log power trip time response testing using the correct signal range.

There have been no previous similar licensee event reported in the last three years.