IR 05000285/2015012: Difference between revisions
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
||
(5 intermediate revisions by the same user not shown) | |||
Line 3: | Line 3: | ||
| issue date = 12/17/2015 | | issue date = 12/17/2015 | ||
| title = IR 05000285/2015012; 10/19/2015 - 11/06/2015; Fort Calhoun Station; Triennial Fire Protection Team Inspection | | title = IR 05000285/2015012; 10/19/2015 - 11/06/2015; Fort Calhoun Station; Triennial Fire Protection Team Inspection | ||
| author name = Werner G | | author name = Werner G | ||
| author affiliation = NRC/RGN-IV/DRS/EB-2 | | author affiliation = NRC/RGN-IV/DRS/EB-2 | ||
| addressee name = Cortopassi L | | addressee name = Cortopassi L | ||
Line 18: | Line 18: | ||
=Text= | =Text= | ||
{{#Wiki_filter: | {{#Wiki_filter:ber 17, 2015 | ||
==SUBJECT:== | |||
FORT CALHOUN STATION - NRC TRIENNIAL FIRE PROTECTION INSPECTION REPORT 05000285/2015012 | |||
SUBJECT: FORT CALHOUN STATION - | |||
NRC TRIENNIAL FIRE PROTECTION INSPECTION REPORT 05000285/2015012 | |||
==Dear Mr. Cortopassi:== | ==Dear Mr. Cortopassi:== | ||
On November 6, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed an inspection at your Fort Calhoun Station and discussed the results of this inspection with you and other members of your staff. The inspectors documented the results of this inspection in the enclosed inspection report. | On November 6, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed an inspection at your Fort Calhoun Station and discussed the results of this inspection with you and other members of your staff. The inspectors documented the results of this inspection in the enclosed inspection report. | ||
The inspectors documented three findings of very low safety significance (Green) in this report. All three of these findings involved violations of NRC requirements. The NRC is treating these violations as non-cited violations consistent with Section 2.3.2.a of the Enforcement Policy. | The inspectors documented three findings of very low safety significance (Green) in this report. | ||
All three of these findings involved violations of NRC requirements. The NRC is treating these violations as non-cited violations consistent with Section 2.3.2.a of the Enforcement Policy. | |||
If you contest the violations or significance of the violations in this report, you should provide a written response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC resident inspector at the Fort Calhoun Station. | If you contest the violations or significance of the violations in this report, you should provide a written response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC resident inspector at the Fort Calhoun Station. | ||
If you disagree with a cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your | If you disagree with a cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, Region IV, and the NRC resident inspector at the Fort Calhoun Station. | ||
In accordance with Title 10 of the Code of Federal Regulations 2.390, Public Inspections, Exemptions, Requests for Withholding, a copy of this letter, its enclosure, and your response (if any) will be available electronically for public inspection in the NRCs Public Document Room or from the Publicly Available Records (PARS) component of the NRC's Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). | |||
In accordance with Title 10 of the Code of Federal Regulations 2.390, | |||
Sincerely, | Sincerely, | ||
/RA/ | /RA/ | ||
Gregory E. Werner, Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-285 License No. DPR-40 | Gregory E. Werner, Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-285 License No. DPR-40 | ||
Enclosure: Inspection Report 05000285/2015012 w/Attachment: Supplemental Information | ===Enclosure:=== | ||
Inspection Report 05000285/2015012 w/Attachment: Supplemental Information | |||
REGION IV== | |||
Docket: 05000285 License: DPR-40 Report Nos.: 05000285/2015012 Licensee: Omaha Public Power District Facility: Fort Calhoun Station Location: 9610 Power Lane, Blair, NE 68008 Dates: October 19 through November 6, 2015 Team Leader: J. Mateychick, Senior Reactor Inspector, RIV, Engineering Branch 2 Inspectors: S. Alferink, Reactor Inspector, Region IV, Engineering Branch 2 N. Okonkwo, Reactor Inspector, Region IV, Engineering Branch 2 E. Uribe, Reactor Inspector, Region IV, Technical Support Services S. Galbreath, Reactor Inspector, Region I, Engineering Branch 3 D. Loveless, Region IV, Senior Reactor Analyst Accompanying H. Barrett, Senior Fire Protection Engineer, Office of Nuclear Reactor Personnel: Regulation, Division of Risk Assessment Approved By: Gregory E. Werner Chief, Engineering Branch 2 Division of Reactor Safety-1- Enclosure | |||
=SUMMARY= | |||
IR 05000285/2015012; 10/19/2015 - 11/06/2015; Fort Calhoun Station; Triennial Fire Protection | |||
Team Inspection. | |||
The report covered a two week triennial fire protection team inspection by specialist inspectors from Region I and Region IV. Three findings of very low safety significance (Green) are documented in this report. These findings involved violations of NRC requirements. The significance of inspection findings is indicated by their color (i.e., Green, White, Yellow, or Red) and determined using Inspection Manual Chapter 0609, | The report covered a two week triennial fire protection team inspection by specialist inspectors from Region I and Region IV. Three findings of very low safety significance (Green) are documented in this report. These findings involved violations of NRC requirements. The significance of inspection findings is indicated by their color (i.e., Green, White, Yellow, or Red)and determined using Inspection Manual Chapter 0609, Significance Determination Process, dated April 29, 2015. Cross-cutting aspects are determined using Inspection Manual Chapter 0310, Aspects within the Cross-Cutting Areas, dated December 4, 2014. All violations of NRC requirements are dispositioned in accordance with the NRCs Enforcement Policy, dated February 4, 2015. The NRCs program for overseeing the safe operation of commercial nuclear power reactors is described in NUREG-1649, Reactor Oversight Process, | ||
Revision | |||
===NRC-Identified and Self-Revealing Findings=== | ===NRC-Identified and Self-Revealing Findings=== | ||
Line 91: | Line 58: | ||
===Cornerstone: Mitigating Systems=== | ===Cornerstone: Mitigating Systems=== | ||
: '''Green.''' | : '''Green.''' | ||
The inspectors identified two examples of a non-cited violation of License Condition 3.D, | The inspectors identified two examples of a non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to adequately implement required National Fire Protection Association Standard 805 implementation items in accordance with the approved fire protection program. Specifically, the licensee did not implement two items listed in Table S-3, Implementation Items, of Omaha Public Power District letter LIC-14-0042 by June 15, 2015. There was no immediate safety concern with either example and the licensee entered this violation into the corrective action program as Condition Reports 2015-2620 and 2015-2683. | ||
The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, | The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, Fire Protection Significance Determination Process, and determined that the issue was of very low safety significance (Green). These findings had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not have a process in place to ensure system level design basis documents were updated within the period required by a license condition and to assure plant-specific requirements were incorporated into the appropriate procedures (H.3). (Section 1R05.01.b) | ||
: '''Green.''' | : '''Green.''' | ||
The inspectors identified a non-cited violation of License Condition 3.D, | The inspectors identified a non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to ensure one success path necessary to achieve and maintain the nuclear safety performance criteria was maintained free of fire damage for all single fires. Specifically, the licensee failed to provide adequate isolation for the pressurizer heaters credited for achieving safe and stable plant conditions for fires that require shutdown from outside the control room. The licensee entered this issue into their corrective action program as Condition Report 2015-12195 and added this issue to their compensatory measures for the control room and cable spreading room. | ||
The failure to provide adequate isolation for equipment relied upon to achieve safe and stable plant conditions for a shutdown from outside of the control room was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, | The failure to provide adequate isolation for equipment relied upon to achieve safe and stable plant conditions for a shutdown from outside of the control room was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, Fire Protection Significance Determination Process. Because the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire requiring evacuation of the control room, a senior reactor analyst performed a Phase 3 evaluation and determined that the issue was of very low safety significance (Green). This finding did not have a cross-cutting aspect since it was not indicative of present performance in that the performance deficiency occurred more than three years ago. (Section 1R05.05.b) | ||
: '''Green.''' | : '''Green.''' | ||
The inspectors identified a non-cited violation of License Condition 3.D, | The inspectors identified a non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to establish an appropriate monitoring program in accordance with National Fire Protection Association Standard 805, Section 2.6. | ||
Specifically, the licensee failed to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid. There was no immediate safety concern since the raw water pumps availability remained above the value assumed in the analysis and the licensee entered this violation into the corrective action program as Condition Report 2015-12612. | Specifically, the licensee failed to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid. There was no immediate safety concern since the raw water pumps availability remained above the value assumed in the analysis and the licensee entered this violation into the corrective action program as Condition Report 2015-12612. | ||
The failure to set the action level for the | The failure to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, Fire Protection Significance Determination Process, and determined that the issue was of very low safety significance (Green). This finding had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not use the process that was in place to ensure that the appropriate fire risk assessment monitoring action levels were incorporated into the maintenance rule program and monitored (H.3). (Section 1R05.13.b) | ||
=REPORT DETAILS= | =REPORT DETAILS= | ||
==REACTOR SAFETY== | ==REACTOR SAFETY== | ||
Cornerstones: | Cornerstones: Initiating Events, Mitigating Systems, and Barrier Integrity {{a|1R05}} | ||
{{a|1R05}} | |||
==1R05 Fire Protection== | ==1R05 Fire Protection== | ||
{{IP sample|IP=IP 71111.05XT}} | {{IP sample|IP=IP 71111.05XT}} | ||
This report presents the results of a triennial fire protection inspection conducted in accordance with NRC Inspection Procedure 71111.05XT, | This report presents the results of a triennial fire protection inspection conducted in accordance with NRC Inspection Procedure 71111.05XT, Fire Protection - NFPA 805 (Triennial), issued January 31, 2013. The inspectors reviewed the licensees fire protection program against the requirements of NFPA 805, Performance-Based Standard for Fire Protection for Light Water Reactor Electric Generating Plants, 2001 Edition, as incorporated by Title 10 of the Code of Federal Regulation (CFR) 50.48(c). | ||
The NFPA 805 standard establishes a comprehensive set of requirements for fire protection programs at nuclear power plants. The standard incorporates both deterministic and risk-informed performance-based concepts. The inspectors evaluated the implementation of the approved fire protection program in selected risk-significant areas with an emphasis on the procedures, equipment, fire barriers, and systems that ensure the post-fire capability to safely shutdown the plant. | |||
Inspection Procedure 71111.05XT requires the selection of three to five fire areas and one or more mitigating strategies for review. The inspectors used the Fort Calhoun Station NFPA 805 Fire Probabilistic Risk | Inspection Procedure 71111.05XT requires the selection of three to five fire areas and one or more mitigating strategies for review. The inspectors used the Fort Calhoun Station NFPA 805 Fire Probabilistic Risk Assessment to select the following four fire areas (inspection samples) for review: | ||
Fire Area Description Category | Fire Area Description Category Electrical Penetration Area Ground and 34B-1 Performance-Based Intermediate Levels (Room 57)36B West Switchgear Area (Room 56W) Performance-Based Control Room Complex Performance-Based Emergency Feedwater Tank Area (Room 81) Performance-Based Since this was the first triennial inspection following NRC approval of the risk-informed, performance-based fire protection program, the inspectors reviewed samples of the implementation items required to have been completed in accordance with Operating License Condition 3.D. The inspectors also reviewed samples of the plant modifications credited to support the approved fire protection program. | ||
The inspectors evaluated the | The inspectors evaluated the licensees fire protection program using the applicable requirements, which included plant Technical Specifications, Operating License Condition 3.D, NRC safety evaluations, 10 CFR 50.48, and NFPA 805. The inspectors also reviewed related documents that included the Updated Safety Analysis Report Section 9.5, the nuclear safety capability assessment, and the fire safety analyses. | ||
Specific documents reviewed by the inspectors are listed in the attachment. | Specific documents reviewed by the inspectors are listed in the attachment. | ||
Line 128: | Line 96: | ||
The inspectors reviewed the nuclear safety capability assessment, piping and instrumentation diagrams, and fire response procedures to verify that a safe shutdown success path, free of fire damage, would be available to meet the nuclear safety goals, objectives, and performance criteria in the event of a fire under any plant operational mode or configuration. | The inspectors reviewed the nuclear safety capability assessment, piping and instrumentation diagrams, and fire response procedures to verify that a safe shutdown success path, free of fire damage, would be available to meet the nuclear safety goals, objectives, and performance criteria in the event of a fire under any plant operational mode or configuration. | ||
The inspectors reviewed applicable sections of the fire response procedures for the selected fire areas and their associated fire scenarios to verify that the shutdown methodology properly identified the | The inspectors reviewed applicable sections of the fire response procedures for the selected fire areas and their associated fire scenarios to verify that the shutdown methodology properly identified the components and systems necessary to achieve and maintain safe and stable plant conditions. The inspectors performed walk-throughs of procedure steps to ensure the implementation and human factors adequacy of the procedures. The inspectors verified that licensee personnel credited for procedure implementation had procedures available, were trained on implementation, and were available in the event a fire occurred. The inspectors verified that the operators could reasonably be expected to perform the specific actions within the time required to maintain plant parameters within specified limits. | ||
====b. Findings==== | ====b. Findings==== | ||
=====Introduction.===== | =====Introduction.===== | ||
The inspectors identified two examples of a Green non-cited (NCV) violation of License Condition 3.D, | The inspectors identified two examples of a Green non-cited (NCV)violation of License Condition 3.D, Fire Protection Program, for the failure to adequately implement required NFPA 805 implementation items in accordance with the approved fire protection program. | ||
=====Description.===== | =====Description.===== | ||
The licensee adopted a performance-based, risk-informed fire protection program meeting the requirements of NFPA 805, | The licensee adopted a performance-based, risk-informed fire protection program meeting the requirements of NFPA 805, Performance-Based Standard for Fire Protection for Light Water Reactor Electric Generating Plants, 2001 Edition, as allowed per 10 CFR 50.48(c). | ||
The licensee shall implement the items listed in Enclosure 1, Attachment S, Table S-3, | The fire protection program was approved by the NRC in a revised License Condition 3.D, Fire Protection Program, issued in License Amendment Number 275 on June 16, 2014. License Condition 3.D, Section (3), Transition License Condition, Sub-Section | ||
: (c) states: | |||
The licensee shall implement the items listed in Enclosure 1, Attachment S, Table S-3, Implementation Items, of OPPD letter LIC-14-0042, dated April 10, 2014, no later than 12 months after issuance of the license amendment. | |||
The inspectors identified two examples of the licensee failing to adequately implement | The inspectors identified two examples of the licensee failing to adequately implement items listed in Table S-3. | ||
Example 1: Failure to Complete a Required Implementation Item within the Allowable Time Period Implementation item REC-104 states, Update system level design basis documents to reflect the NFPA 805 NSPC [Nuclear Safety Performance Criteria] role that the system components now play (as described in Section 2.7.2 of NFPA 805). | |||
Example 1: | |||
The licensee failed to complete this implementation item within the required 12-month period. The applicable NFPA 805 information was not incorporated into the system design basis documents currently available for use by plant personnel. An engineering change was created to update all the impacted system design basis documents as part of the Design Basis Reconstitution Project and marked-up system design basis documents were provided to the project, but revised documents have not been issued. | The licensee failed to complete this implementation item within the required 12-month period. The applicable NFPA 805 information was not incorporated into the system design basis documents currently available for use by plant personnel. An engineering change was created to update all the impacted system design basis documents as part of the Design Basis Reconstitution Project and marked-up system design basis documents were provided to the project, but revised documents have not been issued. | ||
=====Analysis.===== | =====Analysis.===== | ||
The failure to implement a requirement of a license condition within the allowed implementation period was a | The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. | ||
Specifically, the performance deficiency could adversely affect the capability for the systems that are used to respond to fire initiating events. | |||
Example 2: | The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. Using IMC 0609, Appendix F, 1, Fire Protection Significance Determination Process Worksheet, dated September 20, 2013, the finding was screened as a Green finding of very low safety significance in accordance with Step 1.3, Ability to Achieve Safe Shutdown, Question A. The inspectors concluded that the failure to update the system design basis documents with the NFPA 805 fire protection program in a timely manner did not directly impact the plants ability to achieve and maintain hot shutdown conditions as required by the approved fire protection program. | ||
Example 2: Failure to Adequately Maintain a Required Implementation Item Implementation item REC-136 stated, in part, that revisions will be made to Standing Order SO-O-21, Shutdown Operations Protection Plan, Standing Order SO-O-25, Temporary Modification, and General Form FC-66, Temporary Modification Control Form, to caution against the use of temporary electrical installations during higher risk evolutions that take place in planned outages. | |||
Section 4.1 of Standing Order SO-O-21, Revision 55, contained the following note: | Section 4.1 of Standing Order SO-O-21, Revision 55, contained the following note: | ||
NOTE: | NOTE: The performance of, or use of temporary modifications during HIGHER RISK EVOLUTIONS (as defined for NFPA 805, see definition 2.11 in Section 2.0) must be evaluated for impact to identify where the station departs from the assumptions of the non-power operations separation analysis, and that heightened administrative controls or other compensatory measures be applied, as applicable, to address the change(s) from the perspective of fire risk. | ||
The inspectors identified that this note did not adequately implement the specific requirement of implementation item REC-136. | The inspectors identified that this note did not adequately implement the specific requirement of implementation item REC-136. | ||
Section 4.4.12.A of Standing Order SO-O-25, Revision 86, and General Form FC-66, Revision 69, were reviewed and the inspectors determined that the requirements of implementation item REC-136 had been incorporated. However, Standing Order SO-O-25, Section 1.1.3.A, also stated, | Section 4.4.12.A of Standing Order SO-O-25, Revision 86, and General Form FC-66, Revision 69, were reviewed and the inspectors determined that the requirements of implementation item REC-136 had been incorporated. However, Standing Order SO-O-25, Section 1.1.3.A, also stated, All new Temporary Configuration Changes (previously called Temporary Modifications) will be processed using CC-AA-112. Procedure CC-AA-112, Temporary Configuration Changes, Revision 21, did not list any Fort Calhoun Station specific commitments. Section 4.5.1.4 stated, Determine applicable design consideration impacts using the Design Impact Screening Procedure CC-AA-102 and the Design Attribute Review (DAR), Attachment 1 in CC-AA-102. | ||
The inspectors reviewed Procedure CC-AA-102, | The inspectors reviewed Procedure CC-AA-102, Design Input and Configuration Change Impact Screening, Revision 1, and the additional procedures referenced for reviewing the impact on the fire protection program, Procedure CC-AA-209, Fire Protection Program Configuration Change Review, Revision 5, and Procedure CC-AA-209-1001, Guidelines for Performing Fire Protection Program Configuration Change Review, Revision 1. The inspectors determined that all three procedures had a general requirement to review the change for impact on the fire protection program, but did not have the specific information required by implementation item REC-136. | ||
=====Analysis.===== | =====Analysis.===== | ||
The failure to implement a requirement of a license condition within the allowed implementation period was a | The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. | ||
The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, | Specifically, the performance deficiency could adversely affect the availability of systems that are used to respond to fire initiating events during higher risk evolutions that take place in planned outages. | ||
The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. Using IMC 0609, Appendix F, 1, Fire Protection Significance Determination Process Worksheet, dated September 20, 2013, the finding was screened as a Green finding of very low safety significance in accordance with Step 1.3, Ability to Achieve Safe Shutdown, B Question. Based on the criteria in Appendix F, Attachment 2, Degradation Rating Guidance Specific to Various Fire Protection Program Elements, dated February 28, 2005, the inspectors assigned the finding a Low degradation rating. Using Table A2.3, the inspectors considered a low degradation rating because the procedural deficiencies were not significant since there was a general requirement to review the impact of changes on fire protection program, and other licensee procedures require risk impacts to be evaluated during outages. | |||
These findings had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not have a process in place to ensure system level design basis documents were updated within the period required by a license condition and to assure plant-specific requirements were incorporated into the appropriate procedures (H.3). | These findings had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not have a process in place to ensure system level design basis documents were updated within the period required by a license condition and to assure plant-specific requirements were incorporated into the appropriate procedures (H.3). | ||
=====Enforcement.===== | =====Enforcement.===== | ||
License Condition 3.D, | License Condition 3.D, Fire Protection Program, states, in part, Omaha Public Power District shall implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c). The fire protection program was approved by the NRC in the revised License Condition 3.D, issued in License Amendment Number 275 on June 16, 2014. | ||
License Condition 3.D, Section (3), | License Condition 3.D, Section (3), Transition License Condition, Sub-Section (c)states: | ||
The licensee shall implement the items listed in Enclosure 1, Attachment S, Table S-3, Implementation Items, of OPPD letter LIC-14-0042, dated April 10, 2014, no later than 12 months after issuance of the license amendment. | |||
Implementation item REC-104, from Table S-3 states, | Implementation item REC-104, from Table S-3 states, Update system level design basis documents to reflect the NFPA 805 NSPC role that the system components now play (as described in Section 2.7.2 of NFPA 805). | ||
Implementation item REC-136, From Table S-3 states, in part, that, | Implementation item REC-136, From Table S-3 states, in part, that, Revisions will be made to Standing Order SO-O-21, Shutdown Operations Protection Plan, Standing Order SO-O-25, Temporary Modification, and General Form FC-66, Temporary Modification Control Form, to caution against the use of temporary electrical installations during higher risk evolutions that take place in planned outages. | ||
Contrary to the above, from June 16, 2015, to November 6, 2015, the licensee failed to implement two items listed in Table S-3 of OPPD letter LIC-14-0042 within the required 12-month period that ended June 15, 2015. Specifically, the license did not implement items: | |||
: (1) REC-104, update of system level design basis documents to reflect NFPA 805 nuclear safety performance criteria, and | : (1) REC-104, update of system level design basis documents to reflect NFPA 805 nuclear safety performance criteria, and | ||
: (2) REC-136, which cautioned against the use of temporary modifications during higher risk evolutions while in planned outages. | : (2) REC-136, which cautioned against the use of temporary modifications during higher risk evolutions while in planned outages. | ||
The licensee entered this violation into the corrective action program as Condition Reports 2015-12620 and 2015-12683 and were developing corrective actions. Because this violation was of very low safety significance and no immediate safety concerns existed, this violation is being treated as a non-cited violation, consistent with Section 2.3.2.a of the NRC Enforcement Policy: | The licensee entered this violation into the corrective action program as Condition Reports 2015-12620 and 2015-12683 and were developing corrective actions. Because this violation was of very low safety significance and no immediate safety concerns existed, this violation is being treated as a non-cited violation, consistent with Section 2.3.2.a of the NRC Enforcement Policy: NCV 05000285/2015012-01, Failure to Adequately Implement and Maintain Required NFPA 805 Implementation Items. | ||
===.02 Passive Fire Protection=== | ===.02 Passive Fire Protection=== | ||
Line 207: | Line 178: | ||
The inspectors performed a walkdown of accessible portions of the detection and suppression systems in the selected fire areas. The inspectors also performed a walkdown of major system support equipment in other areas (e.g., fire pumps and Halon supply systems) to assess the material condition of these systems and components. | The inspectors performed a walkdown of accessible portions of the detection and suppression systems in the selected fire areas. The inspectors also performed a walkdown of major system support equipment in other areas (e.g., fire pumps and Halon supply systems) to assess the material condition of these systems and components. | ||
The inspectors reviewed the electric and diesel fire pumps | The inspectors reviewed the electric and diesel fire pumps flow and pressure tests to verify that the pumps met their design requirements. The inspectors reviewed the fire main flow tests to verify that the flow loops met their design requirements. The inspectors also reviewed the Halon suppression functional tests to verify that the system capability met the design requirements. | ||
The inspectors assessed the fire brigade capabilities by reviewing training, qualification, and drill critique records. The inspectors also reviewed pre-fire plans and smoke removal plans for the selected fire areas to determine if appropriate information was provided to fire brigade members and plant operators to identify safe shutdown equipment and instrumentation, and to facilitate suppression of a fire that could impact post-fire safe shutdown capability. In addition, the inspectors inspected fire brigade equipment to determine operational readiness for firefighting. | The inspectors assessed the fire brigade capabilities by reviewing training, qualification, and drill critique records. The inspectors also reviewed pre-fire plans and smoke removal plans for the selected fire areas to determine if appropriate information was provided to fire brigade members and plant operators to identify safe shutdown equipment and instrumentation, and to facilitate suppression of a fire that could impact post-fire safe shutdown capability. In addition, the inspectors inspected fire brigade equipment to determine operational readiness for firefighting. | ||
The inspectors observed an unannounced fire drill and subsequent drill critique on November 3, 2015, using the guidance contained in Inspection Procedure 71111.05AQ, | The inspectors observed an unannounced fire drill and subsequent drill critique on November 3, 2015, using the guidance contained in Inspection Procedure 71111.05AQ, Fire Protection Annual/Quarterly. The inspectors observed fire brigade members fight a simulated fire in the compressor area. The inspectors verified that the licensee identified problems, openly discussed them in a self-critical manner at the drill debrief, and identified appropriate corrective actions. Specific attributes evaluated were: | ||
: (1) proper wearing of turnout gear and self-contained breathing apparatus, | : (1) proper wearing of turnout gear and self-contained breathing apparatus, | ||
: (2) proper use and layout of fire hoses, | : (2) proper use and layout of fire hoses, | ||
Line 227: | Line 198: | ||
====a. Inspection Scope==== | ====a. Inspection Scope==== | ||
The inspectors performed plant walkdowns and reviewed documents to verify that redundant success paths for achieving safe and stable plant conditions, which are located in the same fire area, would not be subject to damage from fire suppression activities, or from the rupture or inadvertent operation of fire suppression systems. Specifically, the inspectors verified: | The inspectors performed plant walkdowns and reviewed documents to verify that redundant success paths for achieving safe and stable plant conditions, which are located in the same fire area, would not be subject to damage from fire suppression activities, or from the rupture or inadvertent operation of fire suppression systems. | ||
Specifically, the inspectors verified: | |||
* A fire in one of the selected fire areas would not directly, through production of smoke, heat, or hot gases, cause activation of suppression systems that could potentially damage all redundant success paths. | * A fire in one of the selected fire areas would not directly, through production of smoke, heat, or hot gases, cause activation of suppression systems that could potentially damage all redundant success paths. | ||
* A fire in one of the selected fire areas or the inadvertent actuation or rupture of a fire suppression system would not directly cause damage to all redundant success paths (e.g., sprinkler-caused flooding of other than the locally affected | * A fire in one of the selected fire areas or the inadvertent actuation or rupture of a fire suppression system would not directly cause damage to all redundant success paths (e.g., sprinkler-caused flooding of other than the locally affected train). | ||
train). | |||
* Adequate drainage was provided in areas protected by water suppression systems and for manual use of fire hoses by the fire brigade. | * Adequate drainage was provided in areas protected by water suppression systems and for manual use of fire hoses by the fire brigade. | ||
Line 242: | Line 213: | ||
Review of Methodology The inspectors reviewed the nuclear safety capability assessment, procedures, piping and instrumentation drawings, electrical drawings, and other supporting documents to verify that the licensee can achieve and maintain safe and stable plant conditions from the primary control station in the event a fire required evacuation of the control room. | Review of Methodology The inspectors reviewed the nuclear safety capability assessment, procedures, piping and instrumentation drawings, electrical drawings, and other supporting documents to verify that the licensee can achieve and maintain safe and stable plant conditions from the primary control station in the event a fire required evacuation of the control room. | ||
The inspectors verified that the nuclear safety capability assessment properly identified the components and systems necessary to meet the nuclear safety performance criteria for the fire area selected. Specifically, the inspectors determined the adequacy of the | The inspectors verified that the nuclear safety capability assessment properly identified the components and systems necessary to meet the nuclear safety performance criteria for the fire area selected. Specifically, the inspectors determined the adequacy of the systems selected to meet the criteria for reactivity control, inventory and pressure control, decay heat removal, vital auxiliaries, and process monitoring. For the primary control station, which was analyzed using a performance-based approach, the inspectors verified that the analysis included a consideration of all the necessary cables and equipment associated with operation and control of off-site power. | ||
systems selected to meet the criteria for reactivity control, inventory and pressure control, decay heat removal, vital auxiliaries, and process monitoring. For the primary control station, which was analyzed using a performance-based approach, the inspectors verified that the analysis included a consideration of all the necessary cables and equipment associated with operation and control of off-site power. | |||
The inspectors verified that the transfer of command and control from the control room to the primary control station would be unaffected by fire-induced circuit faults (e.g., by the provision of separate fuses and power supplies for shutdown control circuits). | The inspectors verified that the transfer of command and control from the control room to the primary control station would be unaffected by fire-induced circuit faults (e.g., by the provision of separate fuses and power supplies for shutdown control circuits). | ||
Review of Operational Implementation | Review of Operational Implementation The inspectors verified that the training program for licensed and non-licensed operators included the procedures for achieving and maintaining safe and stable plant conditions, including any necessary recovery actions. The inspectors also verified that sufficient personnel required to achieve and maintain safe and stable plant conditions were properly trained and were available at all times among the normal on-site staff, exclusive of the fire brigade. | ||
The inspectors verified that the training program for licensed and non-licensed operators included the procedures for achieving and maintaining safe and stable plant conditions, including any necessary recovery actions. The inspectors also verified that sufficient personnel required to achieve and maintain safe and stable plant conditions were properly trained and were available at all times among the normal on-site staff, exclusive of the fire brigade. | |||
The inspectors performed a timed walkdown of Procedure AOP-06, | The inspectors performed a timed walkdown of Procedure AOP-06, Fire Emergency, Revision 29, with licensed and non-licensed operators to determine the adequacy of the procedure. The inspectors verified that the recovery actions taken were feasible and that operators could reasonably be expected to implement the procedure within the applicable time requirements to achieve the nuclear safety performance criteria. The inspectors evaluated the feasibility of the recovery actions using the criteria established in the licensees approved fire protection program. | ||
The inspectors also verified that the licensee conducted periodic operational tests of the transfer and isolation capability and instrumentation and control functions used for transferring control from the main control room to the primary control station and other locations where recovery actions would be performed. The inspectors verified that the tests were adequate to prove the functionality of the primary control stations | The inspectors also verified that the licensee conducted periodic operational tests of the transfer and isolation capability and instrumentation and control functions used for transferring control from the main control room to the primary control station and other locations where recovery actions would be performed. The inspectors verified that the tests were adequate to prove the functionality of the primary control stations capability to meet performance criteria and achieve and maintain safe and stable plant conditions. | ||
====b. Findings==== | ====b. Findings==== | ||
=====Introduction.===== | =====Introduction.===== | ||
The inspectors identified a Green non-cited violation of License Condition 3.D, | The inspectors identified a Green non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to ensure one success path necessary to achieve and maintain the nuclear safety performance criteria was maintained free of fire damage for all single fires. Specifically, the licensee failed to provide adequate isolation for the pressurizer heaters credited for achieving safe and stable plant conditions for fires that require shutdown from outside the control room. | ||
=====Description.===== | =====Description.===== | ||
For fires in the control room or cable spreading room that require control room evacuation and shutdown from outside the control room, the licensee was required to achieve and maintain safe and stable plant conditions by entering Hot Shutdown (Mode 3) and maintaining that condition for an initial 24-hour coping time. The licensee documented their compliance strategy for each fire area in the plant in Attachment 8 of NFPA 805 analysis, EA10-036, | For fires in the control room or cable spreading room that require control room evacuation and shutdown from outside the control room, the licensee was required to achieve and maintain safe and stable plant conditions by entering Hot Shutdown (Mode 3) and maintaining that condition for an initial 24-hour coping time. The licensee documented their compliance strategy for each fire area in the plant in Attachment 8 of NFPA 805 analysis, EA10-036, Fort Calhoun Station Automation and Update of Safe Shutdown | ||
=====Analysis.===== | =====Analysis.===== | ||
For the control room and cable spreading room fire areas, the licensee documented that the inventory and pressure control nuclear safety performance criterion would be satisfied using the pressurizer backup heater bank 4 (RC4-4) for fires that require shutdown from outside the control room. | |||
C, | C, NEI 04-02 Table B-3 - Fire Area Transition, of the license amendment request, dated September 28, 2011, provided the method of accomplishment for the performance goals for each fire area. This table also specified that operators would initially maintain reactor coolant system pressure by operating the pressurizer backup heater bank 4 locally at the breaker for the reactor coolant system pressure control performance goal for fires that require shutdown from outside the control room. | ||
The licensee used Procedure AOP-06, | The licensee used Procedure AOP-06, Fire Emergency, Revision 29, to shut down the reactor in the event a control room or cable spreading room fire required control room evacuation and shutdown from outside the control room. During a walkdown of this procedure, the inspectors inquired about the isolation of pressurizer backup heater bank 4 from the control room. | ||
In response to the inspectors questions, the licensee reviewed the drawings for pressurizer backup heater bank 4 and identified a circuit vulnerability that could result in the loss of control for the pressurizer heater bank when performing a shutdown from outside the control room. This vulnerability involved an external hot short affecting the conductor connecting to the control room switch which could keep a relay energized and defeat control of the heater from the motor control center. If this condition occurred, operators would be unable to control pressurizer backup heater bank 4, which was relied upon to achieve safe and stable plant conditions for fires that require shutdown from outside the control room. | |||
In response to the inspectors | |||
The licensee reported this issue as an unanalyzed condition in Event Notification 51487 on October 21, 2015. | The licensee reported this issue as an unanalyzed condition in Event Notification 51487 on October 21, 2015. | ||
=====Analysis.===== | =====Analysis.===== | ||
The failure to provide adequate isolation for equipment relied upon to achieve safe and stable plant conditions for a shutdown from outside of the control room was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Specifically, the performance deficiency could adversely affect the availability, reliability, and capability of pressurizer heater bank 4, which is used to respond to fire initiating events. The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, | The failure to provide adequate isolation for equipment relied upon to achieve safe and stable plant conditions for a shutdown from outside of the control room was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Specifically, the performance deficiency could adversely affect the availability, reliability, and capability of pressurizer heater bank 4, which is used to respond to fire initiating events. The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. A senior reactor analyst performed a Phase 3 evaluation to determine the risk significance of this finding since it involved a postulated control room fire that led to control room evacuation. | ||
control room evacuation. | |||
For the control room, the senior reactor analyst assigned a plant-specific fire ignition frequency for the main control board ( | For the control room, the senior reactor analyst assigned a plant-specific fire ignition frequency for the main control board (FIFMCB) from Calculation CN-RAM-09-021, Fire Ignition Frequencies for Fort Calhoun Station, Revision 2. The analyst multiplied the fire ignition frequency by a severity factor (SF) and a non-suppression probability indicating that operators failed to extinguish the fire within 20 minutes, assuming a 2-minute detection that required a control room evacuation (NPCRE). The resulting control room evacuation frequency (FCR) was: | ||
FCR = FIFMCB | |||
* SF | * SF | ||
* | * NPCRE | ||
= 1.63E-3/year | |||
* 0.1 | * 0.1 | ||
* 1.3E-2 | * 1.3E-2 | ||
= 2.12E-6/year The main control board had a total of 7 panels. The analyst determined that only a fire in one of these panels (CB-1) could lead to the loss of the credited pressurizer heater. | |||
Therefore, a bounding change in core damage frequency for a control room fire that leads to evacuation and the loss of the pressurizer heater (FCR+PZR) was determined to be: | |||
FCR+PZR = FCR * (1 / 7) | |||
= 2.12E-6/year * (1 / 7) | |||
= 3.03E-7/year For the cable spreading room, the senior reactor analyst limited the risk determination to transient and hot work fires since there were no fixed ignition sources in the cable spreading room. The senior reactor analyst assigned a plant-specific fire ignition frequency for transients (FIFCSR-TR) and hot work activities (FIFCSR-HW) from Calculation CN-RAM-10-013, Fire Scenario Selection and Characterization for Fort Calhoun Station, Revision 1. | |||
Based on a walkdown of the cable spreading room, the senior reactor analyst assigned a screening weighting factor (W) of 0.1 for transient and hot work fires. The senior reactor analyst noted that the cable spreading room was protected by a Halon system. | |||
The senior reactor analyst assigned a nominal failure probability of the Halon system (NPHalon) from Calculation CN-RAM-10-013. | |||
Therefore, a bounding change in core damage frequency for a cable spreading room fire that leads to evacuation and the loss of the credited pressurizer heater (FCSR+PZR) was determined to be: | |||
FCSR+PZR = (FIFCSR-TR + FIFCSR-HW) | |||
Therefore, a bounding change in core damage frequency for a cable spreading room fire that leads to evacuation and the loss of the credited pressurizer heater ( | |||
* W | * W | ||
* | * NPHalon | ||
= (2.3E-5/year + 7.52E-6/year) | |||
* 0.1 | * 0.1 | ||
* 0.069 | * 0.069 | ||
= 2.11E-7/year Since fires in the control room are independent of fires in the cable spreading room, the senior reactor analyst calculated a bounding total change in core damage frequency (CDFTOT) for the performance deficiency by adding the change in core damage frequencies for the control room and cable spreading room calculated above. The senior reactor analyst calculated a bounding total change in core damage frequency of: | |||
CDFTOT = FCR+PZR + FCSR+PZR | |||
= 3.03E-7/year + 2.11E-7/year | |||
Since fires in the control room are independent of fires in the cable spreading room, the senior reactor analyst calculated a bounding total change in core damage frequency | = 5.1E-7/year This change in core damage frequency was considered to be bounding since it assumed: | ||
( | |||
assumed: | |||
* A fire in any of the applicable main control board panels or the cable spreading room areas would cause a loss of the credited pressurizer heater, | * A fire in any of the applicable main control board panels or the cable spreading room areas would cause a loss of the credited pressurizer heater, | ||
* The conditional core damage probability given a control room fire with evacuation and the loss of the credited pressurizer heater was equal to one, and | * The conditional core damage probability given a control room fire with evacuation and the loss of the credited pressurizer heater was equal to one, and | ||
* The performance deficiency accounted for the entire change in core damage frequency (i.e., the baseline core damage frequency for this event was zero). | * The performance deficiency accounted for the entire change in core damage frequency (i.e., the baseline core damage frequency for this event was zero). | ||
In accordance with the guidance in Inspection Manual Chapter 0609, Appendix H, | In accordance with the guidance in Inspection Manual Chapter 0609, Appendix H, Containment Integrity Significance Determination Process, dated May 6, 2004, the senior reactor analyst screened the performance deficiency for its potential risk contribution to large early release frequency since the bounding change in core damage frequency provided a risk significance estimate greater than 1E-7/yr. Given that Fort Calhoun Station has a large dry containment and that control room evacuation sequences do not include steam generator tube ruptures or intersystem loss of coolant accidents, the analyst determined that this example was not significant with respect to large early release frequency. The analyst determined this example was of very low risk significance (Green). | ||
This finding did not have a cross-cutting aspect since it was not indicative of present performance in that the performance deficiency occurred more than three years ago. | This finding did not have a cross-cutting aspect since it was not indicative of present performance in that the performance deficiency occurred more than three years ago. | ||
=====Enforcement.===== | =====Enforcement.===== | ||
License Condition 3.D, | License Condition 3.D, Fire Protection Program, states, in part, that the licensee shall implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c), as specified in the licensee amendment request, dated September 28, 2011 (and supplements, dated December 19, 2011; December 22, 2011; March 20, 2012; July 24, 2012; August 24, 2012; September 27, 2012; April 23, 2013; May 21, 2013; July 29, 2013; September 12, 2013; October 11, 2013; November 4, 2013; November 11, 2013; December 18, 2013; January 24, 2014; February 28, 2014; April10, 2014; and June 11, 2014) and as approved in the safety evaluation, dated June 16, 2014. Table B-3, Fire Area Transition, of the license amendment request, dated September 28, 2011, states that the licensee would initially maintain reactor coolant system pressure by operating pressurizer heater RC4-4 locally at the breaker for fires in the control room or cable spreading room. | ||
Contrary to the above, from September 28, 2011, to November 6, 2015, the licensee failed to implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c). Specifically, a fire in the control room or cable spreading room could disable the pressurizer heater RC4-4 such that the heater could not maintain reactor coolant system pressure. | Contrary to the above, from September 28, 2011, to November 6, 2015, the licensee failed to implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c). Specifically, a fire in the control room or cable spreading room could disable the pressurizer heater RC4-4 such that the heater could not maintain reactor coolant system pressure. | ||
The licensee entered this issue into their corrective action program as Condition Report 2015-12195 and added this issue to their compensatory measures for the control room and cable spreading room. Because this violation was of very low safety significance and has been entered into the corrective action program, this violation is being treated as a non-cited violation, consistent with Section 2.3.2.a of the NRC Enforcement Policy: | The licensee entered this issue into their corrective action program as Condition Report 2015-12195 and added this issue to their compensatory measures for the control room and cable spreading room. Because this violation was of very low safety significance and has been entered into the corrective action program, this violation is being treated as a non-cited violation, consistent with Section 2.3.2.a of the NRC Enforcement Policy: NCV 05000285/2015012-02, Failure to Provide Adequate Isolation for Pressurizer Heaters. | ||
for Pressurizer Heaters. | |||
===.06 Circuit Analyses=== | ===.06 Circuit Analyses=== | ||
Line 379: | Line 328: | ||
====a. Inspection Scope==== | ====a. Inspection Scope==== | ||
The inspectors verified that compensatory measures were implemented for out-of-service, degraded, or inoperable fire protection and success path equipment, systems, or features (e.g., detection and suppression systems and equipment; passive fire barriers; or pumps, valves, or electrical devices providing nuclear safety functions or capabilities for meeting performance criteria)necessary to achieve and maintain safe and stable plant conditions. The inspectors also verified that the short-term compensatory measures compensated for the degraded function or feature until appropriate corrective action could be taken and that the licensee was effective in returning the equipment to service in a reasonable period of time. | The inspectors verified that compensatory measures were implemented for out-of-service, degraded, or inoperable fire protection and success path equipment, systems, or features (e.g., detection and suppression systems and equipment; passive fire barriers; or pumps, valves, or electrical devices providing nuclear safety functions or capabilities for meeting performance criteria) necessary to achieve and maintain safe and stable plant conditions. The inspectors also verified that the short-term compensatory measures compensated for the degraded function or feature until appropriate corrective action could be taken and that the licensee was effective in returning the equipment to service in a reasonable period of time. | ||
====b. Findings==== | ====b. Findings==== | ||
Line 387: | Line 336: | ||
====a. Inspection Scope==== | ====a. Inspection Scope==== | ||
The inspectors verified that the licensee provided reasonable assurance that a fire would not result in a radiological release that adversely affects the public, plant personnel, or the environment. The inspectors also verified that the licensee evaluated that any radiation release to any unrestricted area resulting from fire suppression activities were as low as reasonably achievable and would not exceed applicable 10 CFR Part 20 limits. The inspectors verified that the licensee analyzed radioactive release on a fire area basis in accordance with NFPA 805, Section 2.2.4. The inspectors walked down the selected fire zones and verified that the pre-fire plan tactics and instructions were consistent with the potential radiological conditions identified in the analyses. | The inspectors verified that the licensee provided reasonable assurance that a fire would not result in a radiological release that adversely affects the public, plant personnel, or the environment. The inspectors also verified that the licensee evaluated that any radiation release to any unrestricted area resulting from fire suppression activities were as low as reasonably achievable and would not exceed applicable 10 CFR Part 20 limits. | ||
The inspectors verified that the licensee analyzed radioactive release on a fire area basis in accordance with NFPA 805, Section 2.2.4. The inspectors walked down the selected fire zones and verified that the pre-fire plan tactics and instructions were consistent with the potential radiological conditions identified in the analyses. | |||
====b. Findings==== | ====b. Findings==== | ||
Line 408: | Line 359: | ||
=====Introduction.===== | =====Introduction.===== | ||
The inspectors identified a Green non-cited violation of License Condition 3.D, | The inspectors identified a Green non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to establish an appropriate monitoring program in accordance with NFPA 805, Section 2.6. Specifically, the licensee failed to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid. | ||
=====Description.===== | =====Description.===== | ||
The inspectors reviewed selected samples of equipment monitored by the licensee utilizing Procedure ER-AA-610-1003, | The inspectors reviewed selected samples of equipment monitored by the licensee utilizing Procedure ER-AA-610-1003, NFPA 805 Monitoring Program, Revision 0, to ensure that the licensees program properly implemented the requirements of NFPA 805, Section 2.6. | ||
Revision 0, to ensure that the | |||
Licensee letter LIC-11-0099, Section 4.6.2, | Licensee letter LIC-11-0099, Section 4.6.2, Overview of Post-Transition NFPA 805 Monitoring Program, states that, Monitoring will ensure that assumptions in engineering analysis remain valid. The monitoring program will be documented in an administrative process (i.e., program manual or directive) that provides the process and sets clear guidelines to consistently measure the performance of the fire protection program. | ||
Table S-3, Implementation Items, item REC-101, states: Development of the NFPA 805 monitoring program for FCS utilizing guidance from FAQ [Frequently Asked Question] 10-0059 (as described in Section 2.6 of NFPA 805). Frequently Asked Question 10-0059, NFPA 805 Monitoring, Revision 5, states in the Details section, Item 3, Action level threshold - When establishing the action level threshold for reliability and availability, the action level should be no lower than the fire PRA | |||
[probabilistic risk assessment] assumptions. | |||
For the raw water system pumps, the licensee opted to use their maintenance rule program as the monitoring program. The inspectors noted that the maintenance rule program allowable availability was 95 percent. However, the fire probabilistic risk assessment basic event for test and maintenance unavailability was 0.0134, which relates to an availability of 98.66 percent. Therefore, the action level for availability in the monitoring program was lower than the assumptions in the fire probabilistic risk assessment. | For the raw water system pumps, the licensee opted to use their maintenance rule program as the monitoring program. The inspectors noted that the maintenance rule program allowable availability was 95 percent. However, the fire probabilistic risk assessment basic event for test and maintenance unavailability was 0.0134, which relates to an availability of 98.66 percent. Therefore, the action level for availability in the monitoring program was lower than the assumptions in the fire probabilistic risk assessment. | ||
Equipment Reliability Procedure ER-AA-610-1003, | Equipment Reliability Procedure ER-AA-610-1003, NFPA 805 Monitoring Program, Section 2.1, defines Action Level, For those SSCs monitored by the NFPA 805 Monitoring Program, the action level is the threshold at which mitigating actions are required to keep assumptions made in the engineering analysis valid. Section 4.4 Risk Target Value Determination, Item 4.4.1, states, Using the Fire PRA, or other processes as appropriate, to determine target values of reliability and availability for the HSS fire protection/NSCA SSCs and programmatic elements established in Section 4.3 as requiring additional monitoring beyond inspection and test programs and system/ | ||
program health programs. Item 4.4.4 states, If HSS SSCs have been identified using the maintenance rule guidelines, then the associated SSC specific performance criteria may be ESTABLISHED as in the Maintenance Rule, provided the criteria are consistent with Fire PRA assumptions. The fourth criteria provided states, If the maintenance rule criteria does not bound the Fire PRA assumptions, then SUBMIT a Maintenance Rule Change request per reference 6.2.5. The inspectors noted that the licensee had not submitted a maintenance rule change request despite the maintenance rule criteria failing to bound the fire probabilistic risk assessment assumptions. | |||
=====Analysis.===== | =====Analysis.===== | ||
The failure to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Specifically, the performance deficiency could adversely affect the acceptable level of availability of the raw water pumps, which are used to respond to fire initiating events. | The failure to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Specifically, the performance deficiency could adversely affect the acceptable level of availability of the raw water pumps, which are used to respond to fire initiating events. | ||
The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, | The finding was screened in accordance with NRC Inspection Manual Chapter (IMC)0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. Using IMC 0609, Appendix F, Attachment 1, Fire Protection Significance Determination Process Worksheet, dated September 20, 2013, the finding was screened as a Green finding of very low safety significance in accordance with Step 1.3, Ability to Achieve Safe Shutdown, B Question. Based on the criteria in Appendix F, Attachment 2, Degradation Rating Guidance Specific to Various Fire Protection Program Elements, dated February 28, 2005, the finding was assigned a Low degradation rating. Using Table A2.3, the inspectors considered a low degradation rating because the issue involved monitoring of components that did not degrade below acceptable levels during the exposure period. | ||
This finding had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not use the process that was in place to ensure that the appropriate NFPA 805 fire risk assessment monitoring action levels were incorporated into the maintenance rule program and | This finding had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not use the process that was in place to ensure that the appropriate NFPA 805 fire risk assessment monitoring action levels were incorporated into the maintenance rule program and monitored (H.3). | ||
monitored (H.3). | |||
=====Enforcement.===== | =====Enforcement.===== | ||
License Condition 3.D, | License Condition 3.D, Fire Protection Program, states, in part, that the licensee shall implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c), as specified in the licensee amendment request dated September 28, 2011 (and supplements, dated December 19, 2011, December 22, 2011, March 20, 2012, July 24, 2012, August 24, 2012, September 27, 2012, April 23, 2013, May 21, 2013, July 29, 2013, September 12, 2013, October 11, 2013, November 4, 2013, November 11, 2013, December 18, 2013, January 24, 2014, February 28, 2014, April10, and June 11, 2014), and as approved in the safety evaluation, dated June 16, 2014. | ||
The approved fire protection program is a risk-informed performance-based program in accordance with NFPA 805, | The approved fire protection program is a risk-informed performance-based program in accordance with NFPA 805, Performance-Based Standard for Fire Protection for Light Water Reactor Electric Generating Plants, 2001 Edition (NFPA 805), incorporated by reference into 10 CFR 50.48(c). NFPA 805, Section 2.6, Monitoring, states that, Monitoring shall ensure that the assumptions in the engineering analysis remain valid. | ||
Contrary to the above, from June 16, 2015, to November 6, 2015, the licensee failed to appropriately monitor plant equipment to ensure that the assumptions in the NFPA 805 engineering analysis remained valid. Specifically, the licensees monitoring program did not monitor the availability of the raw water system pumps to ensure that it was no lower than the fire probabilistic risk assessment assumptions. | |||
Assumptions in the Engineering Analysis Remain Valid. | Because the finding was of very low safety significance (Green), was entered into the licensees corrective action program as Condition Report 2015-12612, the availability of the pumps was greater than that assumed in the fire probabilistic risk assessment, and the licensee was in the process of developing corrective actions to address the monitoring of the pumps, this finding is being treated as a non-cited violation consistent with Section 2.3.2.a of the NRC Enforcement policy. This finding is identified as NCV 05000285/2015012-03, Failure to Set Action Levels to Ensure that the Assumptions in the Engineering Analysis Remain Valid. | ||
===.14 Plant Change Evaluation=== | ===.14 Plant Change Evaluation=== | ||
Line 455: | Line 407: | ||
====a. Inspection Scope==== | ====a. Inspection Scope==== | ||
The inspectors verified that the licensee appropriately implemented risk-related items in the establishment and early operation of their NFPA 805 program. This review included the risk management policy for fire brigade emergency response, upgraded fire human reliability analysis methods, alternate steam generator level monitoring methods, and incorporation of revised fire risk methods in the fire probabilistic risk assessment. The inspectors also reviewed the | The inspectors verified that the licensee appropriately implemented risk-related items in the establishment and early operation of their NFPA 805 program. This review included the risk management policy for fire brigade emergency response, upgraded fire human reliability analysis methods, alternate steam generator level monitoring methods, and incorporation of revised fire risk methods in the fire probabilistic risk assessment. The inspectors also reviewed the licensees integration of multi-compartment scenarios into the base fire probabilistic risk assessment. Finally, the inspectors reviewed the licensees probabilistic risk assessment to ensure the basic event data in the fire probabilistic risk assessment matched the internal events probabilistic risk assessment basic events, which included a verification of multiple spurious operation and human reliability analysis treatment. | ||
The inspectors sampled the following alternate methods to ensure that the licensee appropriately replaced them with approved methods: | The inspectors sampled the following alternate methods to ensure that the licensee appropriately replaced them with approved methods: | ||
* Fire Pump Frequency Apportioning The licensee based apportioning on pump runtime to account for lower usage with standby pumps. Standard NFPA 805 suggested apportioning on pump count alone. The licensee had performed sensitivity studies using pump count apportioning. Acceptable results were achieved. | * Fire Pump Frequency Apportioning The licensee based apportioning on pump runtime to account for lower usage with standby pumps. Standard NFPA 805 suggested apportioning on pump count alone. The licensee had performed sensitivity studies using pump count apportioning. Acceptable results were achieved. | ||
* Diesel Generator Fire Treatment The licensee assumed that most fires occur during surveillance testing. Therefore, it was assumed that an operator would be physically stationed in the room. This artificially improved manual suppression credit. Standard NFPA 805 suggested that surveillance testing is indicative of demand runs and likely will not have manual suppression. The licensee had performed sensitivity indicated studies indicating that the acceptance criteria were still met. | * Diesel Generator Fire Treatment The licensee assumed that most fires occur during surveillance testing. | ||
Therefore, it was assumed that an operator would be physically stationed in the room. This artificially improved manual suppression credit. Standard NFPA 805 suggested that surveillance testing is indicative of demand runs and likely will not have manual suppression. The licensee had performed sensitivity indicated studies indicating that the acceptance criteria were still met. | |||
* Use of Draft Frequently Asked Question 08-0050 The licensee indicated there was no change to their conclusions given implementation of the final frequently asked question. | * Use of Draft Frequently Asked Question 08-0050 The licensee indicated there was no change to their conclusions given implementation of the final frequently asked question. | ||
* Electrical Cabinet Generic Severity Factor The licensee assumed that 10 percent of fires will damage targets external to the cabinet. However, the acceptance criteria were still met when the severity factor was set to 1.0. | * Electrical Cabinet Generic Severity Factor The licensee assumed that 10 percent of fires will damage targets external to the cabinet. However, the acceptance criteria were still met when the severity factor was set to 1.0. | ||
Line 469: | Line 423: | ||
====a. Inspection Scope==== | ====a. Inspection Scope==== | ||
The inspectors reviewed the | The inspectors reviewed the licensees implementation of guidance and strategies intended to maintain or restore core, containment, and spent fuel pool cooling capabilities under the circumstances associated with the potential loss of large areas of the plant due to explosions or fire as required by 10 CFR 50.54(hh)(2). | ||
The inspectors verified that the licensee maintained and implemented adequate procedures, maintained and tested equipment necessary to properly implement the strategies, and ensured station personnel were knowledgeable and capable of implementing the procedures. The inspectors performed a visual inspection of portable equipment used to implement the strategy to ensure the availability and material readiness of the equipment, including the adequacy of portable pump trailer hitch attachments, and verify the availability of on-site vehicles capable of towing the portable pump. The inspectors evaluated the containment flooding with portable pump strategy. | The inspectors verified that the licensee maintained and implemented adequate procedures, maintained and tested equipment necessary to properly implement the strategies, and ensured station personnel were knowledgeable and capable of implementing the procedures. The inspectors performed a visual inspection of portable equipment used to implement the strategy to ensure the availability and material readiness of the equipment, including the adequacy of portable pump trailer hitch attachments, and verify the availability of on-site vehicles capable of towing the portable pump. The inspectors evaluated the containment flooding with portable pump strategy. | ||
Line 489: | Line 443: | ||
====b. Findings==== | ====b. Findings==== | ||
No findings were identified. | No findings were identified. | ||
{{a|4OA6}} | |||
{{a|4OA6}} | |||
==4OA6 Meetings, Including Exit== | ==4OA6 Meetings, Including Exit== | ||
Line 497: | Line 450: | ||
The inspectors presented the inspection results to Mr. L. Cortopassi, Site Vice President and Chief Nuclear Officer, and other members of the licensee staff at an exit meeting on November 6, 2015. The licensee acknowledged the findings presented. | The inspectors presented the inspection results to Mr. L. Cortopassi, Site Vice President and Chief Nuclear Officer, and other members of the licensee staff at an exit meeting on November 6, 2015. The licensee acknowledged the findings presented. | ||
The inspectors verified that proprietary information was retained by the inspectors would | The inspectors verified that proprietary information was retained by the inspectors would be appropriately controlled. | ||
be appropriately controlled. | |||
ATTACHMENT: | ATTACHMENT: | ||
Line 508: | Line 459: | ||
===Licensee Personnel=== | ===Licensee Personnel=== | ||
: [[contact::K. Ahrens]], Fire Protection System Engineer | : [[contact::K. Ahrens]], Fire Protection System Engineer | ||
: [[contact::C. Averett]], Site Communicator | : [[contact::C. Averett]], Site Communicator | ||
: [[contact::D. Bacalan]], Site Security Manager | : [[contact::D. Bacalan]], Site Security Manager | ||
: [[contact::R. Beck]], Chemistry Manager | : [[contact::R. Beck]], Chemistry Manager | ||
: [[contact::B. Bittle]], Design Engineer | : [[contact::B. Bittle]], Design Engineer | ||
: [[contact::B. Blame]], Site Regulatory Assurance Manager | : [[contact::B. Blame]], Site Regulatory Assurance Manager | ||
: [[contact::D. Brehm]], Radiological Protection Supervisor | : [[contact::D. Brehm]], Radiological Protection Supervisor | ||
: [[contact::C. Cameron]], Regulatory Assurance | : [[contact::C. Cameron]], Regulatory Assurance | ||
: [[contact::H. Childs]], Site Security Manager | : [[contact::H. Childs]], Site Security Manager | ||
: [[contact::G. Coleman]], Training | : [[contact::G. Coleman]], Training | ||
: [[contact::L. Cortopassi]], Site Vice President and Chief Nuclear Officer | : [[contact::L. Cortopassi]], Site Vice President and Chief Nuclear Officer | ||
: [[contact::S. Dean]], Plant Manager | : [[contact::S. Dean]], Plant Manager | ||
: [[contact::S. Fatora]], Work Management Director | : [[contact::S. Fatora]], Work Management Director | ||
: [[contact::J. Geschwender]], Probabilistic Risk Assessment Engineer | : [[contact::J. Geschwender]], Probabilistic Risk Assessment Engineer | ||
: [[contact::H. Goodman]], Site Engineering Director | : [[contact::H. Goodman]], Site Engineering Director | ||
: [[contact::H. Hackeroft]], Probabilistic Risk Assessment Engineer | : [[contact::H. Hackeroft]], Probabilistic Risk Assessment Engineer | ||
: [[contact::B. Heimes]], Security | : [[contact::B. Heimes]], Security | ||
: [[contact::R. Hugenroth]], Nuclear Oversight Manager | : [[contact::R. Hugenroth]], Nuclear Oversight Manager | ||
: [[contact::T. Kapuan]], Maintenance Director | : [[contact::T. Kapuan]], Maintenance Director | ||
: [[contact::J. LeMaire]], Fire Protection Engineer (EPM Contractor) | : [[contact::J. LeMaire]], Fire Protection Engineer (EPM Contractor) | ||
: [[contact::S. Lindquist]], Unit Supervisor | : [[contact::S. Lindquist]], Unit Supervisor | ||
: [[contact::E. Matzke]], Regulatory Assurance | : [[contact::E. Matzke]], Regulatory Assurance | ||
: [[contact::J. McManuis]], Project Engineering Manager | : [[contact::J. McManuis]], Project Engineering Manager | ||
: [[contact::H. Minassian]], Program Engineer | : [[contact::H. Minassian]], Program Engineer | ||
: [[contact::T. Muff]], Maintenance | : [[contact::T. Muff]], Maintenance | ||
: [[contact::F. Pellizzori]], Safe Shutdown Analyst (EPM Contractor) | : [[contact::F. Pellizzori]], Safe Shutdown Analyst (EPM Contractor) | ||
: [[contact::C. Pragman]], Exelon Corporate Fire Protection | : [[contact::C. Pragman]], Exelon Corporate Fire Protection | ||
: [[contact::M. Prospero]], Executive Outage Manager | : [[contact::M. Prospero]], Executive Outage Manager | ||
: [[contact::A. Rochon]], Westinghouse (Fire PRA Support) | : [[contact::A. Rochon]], Westinghouse (Fire PRA Support) | ||
: [[contact::T. Swanson]], Fire Marshall | : [[contact::T. Swanson]], Fire Marshall | ||
: [[contact::M. Seip]], Fire Brigade Instructor | : [[contact::M. Seip]], Fire Brigade Instructor | ||
: [[contact::A. Sublett]], NFPA 805 Safe Shutdown Engineer | : [[contact::A. Sublett]], NFPA 805 Safe Shutdown Engineer | ||
: [[contact::S. Swanson]], Operations Director | : [[contact::S. Swanson]], Operations Director | ||
: [[contact::R. Swerczek]], Fire Protection Engineer | : [[contact::R. Swerczek]], Fire Protection Engineer | ||
: [[contact::J. Tarpinian]], NFPA 805 Fire Protection Engineer (EPM Contractor) | : [[contact::J. Tarpinian]], NFPA 805 Fire Protection Engineer (EPM Contractor) | ||
: [[contact::T. Uehling]], Training | : [[contact::T. Uehling]], Training | ||
: [[contact::J. Wiegand]], Operations Support and Services Manager | : [[contact::J. Wiegand]], Operations Support and Services Manager | ||
: [[contact::J. Wilson]], Design Engineer | : [[contact::J. Wilson]], Design Engineer | ||
: [[contact::Z. Wineinger]], Design Engineer | : [[contact::Z. Wineinger]], Design Engineer | ||
===NRC Personnel=== | ===NRC Personnel=== | ||
: [[contact::S. Schneider]], Senior Resident Inspector | : [[contact::S. Schneider]], Senior Resident Inspector | ||
Attachment | |||
==LIST OF ITEMS OPENED, CLOSED, AND DISCUSSED== | ==LIST OF ITEMS OPENED, CLOSED, AND DISCUSSED== | ||
===Opened and Closed=== | ===Opened and Closed=== | ||
: 05000285/2015012-01 NCV | : 05000285/2015012-01 NCV Failure to Adequately Implement and Maintain Required NFPA 805 Implementation Items (Section 1R05.01.b) | ||
Failure to Adequately Implement and Maintain Required NFPA 805 Implementation Items (Section 1R05.01.b) | : 05000285/2015012-02 NCV Failure to Provide Adequate Isolation for Pressurizer Heaters (Section 1R05.05.b) | ||
: 05000285/2015012-02 NCV | : 05000285/2015012-03 NCV Failure to Set Action Levels to Ensure that the Assumptions in the Engineering Analysis Remain Valid (Section 1R05.13.b) | ||
Failure to Provide Adequate Isolation for Pressurizer Heaters (Section 1R05.05.b) | ` | ||
: 05000285/2015012-03 NCV | |||
Failure to Set Action Levels to Ensure that the | |||
Assumptions in the Engineering Analysis Remain Valid | |||
(Section 1R05.13.b) ` | |||
==LIST OF DOCUMENTS REVIEWED== | ==LIST OF DOCUMENTS REVIEWED== | ||
}} | }} |
Latest revision as of 01:43, 20 December 2019
ML15351A398 | |
Person / Time | |
---|---|
Site: | Fort Calhoun ![]() |
Issue date: | 12/17/2015 |
From: | Greg Werner NRC/RGN-IV/DRS/EB-2 |
To: | Cortopassi L Omaha Public Power District |
References | |
IR 2015012 | |
Download: ML15351A398 (46) | |
Text
ber 17, 2015
SUBJECT:
FORT CALHOUN STATION - NRC TRIENNIAL FIRE PROTECTION INSPECTION REPORT 05000285/2015012
Dear Mr. Cortopassi:
On November 6, 2015, the U.S. Nuclear Regulatory Commission (NRC) completed an inspection at your Fort Calhoun Station and discussed the results of this inspection with you and other members of your staff. The inspectors documented the results of this inspection in the enclosed inspection report.
The inspectors documented three findings of very low safety significance (Green) in this report.
All three of these findings involved violations of NRC requirements. The NRC is treating these violations as non-cited violations consistent with Section 2.3.2.a of the Enforcement Policy.
If you contest the violations or significance of the violations in this report, you should provide a written response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555-0001; with copies to the Regional Administrator, Region IV; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001; and the NRC resident inspector at the Fort Calhoun Station.
If you disagree with a cross-cutting aspect assignment in this report, you should provide a response within 30 days of the date of this inspection report, with the basis for your disagreement, to the Regional Administrator, Region IV, and the NRC resident inspector at the Fort Calhoun Station.
In accordance with Title 10 of the Code of Federal Regulations 2.390, Public Inspections, Exemptions, Requests for Withholding, a copy of this letter, its enclosure, and your response (if any) will be available electronically for public inspection in the NRCs Public Document Room or from the Publicly Available Records (PARS) component of the NRC's Agencywide Documents Access and Management System (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).
Sincerely,
/RA/
Gregory E. Werner, Chief Engineering Branch 2 Division of Reactor Safety Docket No. 50-285 License No. DPR-40
Enclosure:
Inspection Report 05000285/2015012 w/Attachment: Supplemental Information
REGION IV==
Docket: 05000285 License: DPR-40 Report Nos.: 05000285/2015012 Licensee: Omaha Public Power District Facility: Fort Calhoun Station Location: 9610 Power Lane, Blair, NE 68008 Dates: October 19 through November 6, 2015 Team Leader: J. Mateychick, Senior Reactor Inspector, RIV, Engineering Branch 2 Inspectors: S. Alferink, Reactor Inspector, Region IV, Engineering Branch 2 N. Okonkwo, Reactor Inspector, Region IV, Engineering Branch 2 E. Uribe, Reactor Inspector, Region IV, Technical Support Services S. Galbreath, Reactor Inspector, Region I, Engineering Branch 3 D. Loveless, Region IV, Senior Reactor Analyst Accompanying H. Barrett, Senior Fire Protection Engineer, Office of Nuclear Reactor Personnel: Regulation, Division of Risk Assessment Approved By: Gregory E. Werner Chief, Engineering Branch 2 Division of Reactor Safety-1- Enclosure
SUMMARY
IR 05000285/2015012; 10/19/2015 - 11/06/2015; Fort Calhoun Station; Triennial Fire Protection
Team Inspection.
The report covered a two week triennial fire protection team inspection by specialist inspectors from Region I and Region IV. Three findings of very low safety significance (Green) are documented in this report. These findings involved violations of NRC requirements. The significance of inspection findings is indicated by their color (i.e., Green, White, Yellow, or Red)and determined using Inspection Manual Chapter 0609, Significance Determination Process, dated April 29, 2015. Cross-cutting aspects are determined using Inspection Manual Chapter 0310, Aspects within the Cross-Cutting Areas, dated December 4, 2014. All violations of NRC requirements are dispositioned in accordance with the NRCs Enforcement Policy, dated February 4, 2015. The NRCs program for overseeing the safe operation of commercial nuclear power reactors is described in NUREG-1649, Reactor Oversight Process,
Revision
NRC-Identified and Self-Revealing Findings
Cornerstone: Mitigating Systems
- Green.
The inspectors identified two examples of a non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to adequately implement required National Fire Protection Association Standard 805 implementation items in accordance with the approved fire protection program. Specifically, the licensee did not implement two items listed in Table S-3, Implementation Items, of Omaha Public Power District letter LIC-14-0042 by June 15, 2015. There was no immediate safety concern with either example and the licensee entered this violation into the corrective action program as Condition Reports 2015-2620 and 2015-2683.
The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, Fire Protection Significance Determination Process, and determined that the issue was of very low safety significance (Green). These findings had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not have a process in place to ensure system level design basis documents were updated within the period required by a license condition and to assure plant-specific requirements were incorporated into the appropriate procedures (H.3). (Section 1R05.01.b)
- Green.
The inspectors identified a non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to ensure one success path necessary to achieve and maintain the nuclear safety performance criteria was maintained free of fire damage for all single fires. Specifically, the licensee failed to provide adequate isolation for the pressurizer heaters credited for achieving safe and stable plant conditions for fires that require shutdown from outside the control room. The licensee entered this issue into their corrective action program as Condition Report 2015-12195 and added this issue to their compensatory measures for the control room and cable spreading room.
The failure to provide adequate isolation for equipment relied upon to achieve safe and stable plant conditions for a shutdown from outside of the control room was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, Fire Protection Significance Determination Process. Because the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire requiring evacuation of the control room, a senior reactor analyst performed a Phase 3 evaluation and determined that the issue was of very low safety significance (Green). This finding did not have a cross-cutting aspect since it was not indicative of present performance in that the performance deficiency occurred more than three years ago. (Section 1R05.05.b)
- Green.
The inspectors identified a non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to establish an appropriate monitoring program in accordance with National Fire Protection Association Standard 805, Section 2.6.
Specifically, the licensee failed to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid. There was no immediate safety concern since the raw water pumps availability remained above the value assumed in the analysis and the licensee entered this violation into the corrective action program as Condition Report 2015-12612.
The failure to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. The inspectors evaluated this finding using Inspection Manual Chapter 0609, Appendix F, Fire Protection Significance Determination Process, and determined that the issue was of very low safety significance (Green). This finding had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not use the process that was in place to ensure that the appropriate fire risk assessment monitoring action levels were incorporated into the maintenance rule program and monitored (H.3). (Section 1R05.13.b)
REPORT DETAILS
REACTOR SAFETY
Cornerstones: Initiating Events, Mitigating Systems, and Barrier Integrity
1R05 Fire Protection
This report presents the results of a triennial fire protection inspection conducted in accordance with NRC Inspection Procedure 71111.05XT, Fire Protection - NFPA 805 (Triennial), issued January 31, 2013. The inspectors reviewed the licensees fire protection program against the requirements of NFPA 805, Performance-Based Standard for Fire Protection for Light Water Reactor Electric Generating Plants, 2001 Edition, as incorporated by Title 10 of the Code of Federal Regulation (CFR) 50.48(c).
The NFPA 805 standard establishes a comprehensive set of requirements for fire protection programs at nuclear power plants. The standard incorporates both deterministic and risk-informed performance-based concepts. The inspectors evaluated the implementation of the approved fire protection program in selected risk-significant areas with an emphasis on the procedures, equipment, fire barriers, and systems that ensure the post-fire capability to safely shutdown the plant.
Inspection Procedure 71111.05XT requires the selection of three to five fire areas and one or more mitigating strategies for review. The inspectors used the Fort Calhoun Station NFPA 805 Fire Probabilistic Risk Assessment to select the following four fire areas (inspection samples) for review:
Fire Area Description Category Electrical Penetration Area Ground and 34B-1 Performance-Based Intermediate Levels (Room 57)36B West Switchgear Area (Room 56W) Performance-Based Control Room Complex Performance-Based Emergency Feedwater Tank Area (Room 81) Performance-Based Since this was the first triennial inspection following NRC approval of the risk-informed, performance-based fire protection program, the inspectors reviewed samples of the implementation items required to have been completed in accordance with Operating License Condition 3.D. The inspectors also reviewed samples of the plant modifications credited to support the approved fire protection program.
The inspectors evaluated the licensees fire protection program using the applicable requirements, which included plant Technical Specifications, Operating License Condition 3.D, NRC safety evaluations, 10 CFR 50.48, and NFPA 805. The inspectors also reviewed related documents that included the Updated Safety Analysis Report Section 9.5, the nuclear safety capability assessment, and the fire safety analyses.
Specific documents reviewed by the inspectors are listed in the attachment.
Four fire area inspection samples and one mitigating strategy sample were completed.
.01 Protection of Safe Shutdown Capabilities
a. Inspection Scope
The inspectors reviewed the nuclear safety capability assessment, piping and instrumentation diagrams, and fire response procedures to verify that a safe shutdown success path, free of fire damage, would be available to meet the nuclear safety goals, objectives, and performance criteria in the event of a fire under any plant operational mode or configuration.
The inspectors reviewed applicable sections of the fire response procedures for the selected fire areas and their associated fire scenarios to verify that the shutdown methodology properly identified the components and systems necessary to achieve and maintain safe and stable plant conditions. The inspectors performed walk-throughs of procedure steps to ensure the implementation and human factors adequacy of the procedures. The inspectors verified that licensee personnel credited for procedure implementation had procedures available, were trained on implementation, and were available in the event a fire occurred. The inspectors verified that the operators could reasonably be expected to perform the specific actions within the time required to maintain plant parameters within specified limits.
b. Findings
Introduction.
The inspectors identified two examples of a Green non-cited (NCV)violation of License Condition 3.D, Fire Protection Program, for the failure to adequately implement required NFPA 805 implementation items in accordance with the approved fire protection program.
Description.
The licensee adopted a performance-based, risk-informed fire protection program meeting the requirements of NFPA 805, Performance-Based Standard for Fire Protection for Light Water Reactor Electric Generating Plants, 2001 Edition, as allowed per 10 CFR 50.48(c).
The fire protection program was approved by the NRC in a revised License Condition 3.D, Fire Protection Program, issued in License Amendment Number 275 on June 16, 2014. License Condition 3.D, Section (3), Transition License Condition, Sub-Section
- (c) states:
The licensee shall implement the items listed in Enclosure 1, Attachment S, Table S-3, Implementation Items, of OPPD letter LIC-14-0042, dated April 10, 2014, no later than 12 months after issuance of the license amendment.
The inspectors identified two examples of the licensee failing to adequately implement items listed in Table S-3.
Example 1: Failure to Complete a Required Implementation Item within the Allowable Time Period Implementation item REC-104 states, Update system level design basis documents to reflect the NFPA 805 NSPC [Nuclear Safety Performance Criteria] role that the system components now play (as described in Section 2.7.2 of NFPA 805).
The licensee failed to complete this implementation item within the required 12-month period. The applicable NFPA 805 information was not incorporated into the system design basis documents currently available for use by plant personnel. An engineering change was created to update all the impacted system design basis documents as part of the Design Basis Reconstitution Project and marked-up system design basis documents were provided to the project, but revised documents have not been issued.
Analysis.
The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences.
Specifically, the performance deficiency could adversely affect the capability for the systems that are used to respond to fire initiating events.
The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. Using IMC 0609, Appendix F, 1, Fire Protection Significance Determination Process Worksheet, dated September 20, 2013, the finding was screened as a Green finding of very low safety significance in accordance with Step 1.3, Ability to Achieve Safe Shutdown, Question A. The inspectors concluded that the failure to update the system design basis documents with the NFPA 805 fire protection program in a timely manner did not directly impact the plants ability to achieve and maintain hot shutdown conditions as required by the approved fire protection program.
Example 2: Failure to Adequately Maintain a Required Implementation Item Implementation item REC-136 stated, in part, that revisions will be made to Standing Order SO-O-21, Shutdown Operations Protection Plan, Standing Order SO-O-25, Temporary Modification, and General Form FC-66, Temporary Modification Control Form, to caution against the use of temporary electrical installations during higher risk evolutions that take place in planned outages.
Section 4.1 of Standing Order SO-O-21, Revision 55, contained the following note:
NOTE: The performance of, or use of temporary modifications during HIGHER RISK EVOLUTIONS (as defined for NFPA 805, see definition 2.11 in Section 2.0) must be evaluated for impact to identify where the station departs from the assumptions of the non-power operations separation analysis, and that heightened administrative controls or other compensatory measures be applied, as applicable, to address the change(s) from the perspective of fire risk.
The inspectors identified that this note did not adequately implement the specific requirement of implementation item REC-136.
Section 4.4.12.A of Standing Order SO-O-25, Revision 86, and General Form FC-66, Revision 69, were reviewed and the inspectors determined that the requirements of implementation item REC-136 had been incorporated. However, Standing Order SO-O-25, Section 1.1.3.A, also stated, All new Temporary Configuration Changes (previously called Temporary Modifications) will be processed using CC-AA-112. Procedure CC-AA-112, Temporary Configuration Changes, Revision 21, did not list any Fort Calhoun Station specific commitments. Section 4.5.1.4 stated, Determine applicable design consideration impacts using the Design Impact Screening Procedure CC-AA-102 and the Design Attribute Review (DAR), Attachment 1 in CC-AA-102.
The inspectors reviewed Procedure CC-AA-102, Design Input and Configuration Change Impact Screening, Revision 1, and the additional procedures referenced for reviewing the impact on the fire protection program, Procedure CC-AA-209, Fire Protection Program Configuration Change Review, Revision 5, and Procedure CC-AA-209-1001, Guidelines for Performing Fire Protection Program Configuration Change Review, Revision 1. The inspectors determined that all three procedures had a general requirement to review the change for impact on the fire protection program, but did not have the specific information required by implementation item REC-136.
Analysis.
The failure to implement a requirement of a license condition within the allowed implementation period was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences.
Specifically, the performance deficiency could adversely affect the availability of systems that are used to respond to fire initiating events during higher risk evolutions that take place in planned outages.
The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. Using IMC 0609, Appendix F, 1, Fire Protection Significance Determination Process Worksheet, dated September 20, 2013, the finding was screened as a Green finding of very low safety significance in accordance with Step 1.3, Ability to Achieve Safe Shutdown, B Question. Based on the criteria in Appendix F, Attachment 2, Degradation Rating Guidance Specific to Various Fire Protection Program Elements, dated February 28, 2005, the inspectors assigned the finding a Low degradation rating. Using Table A2.3, the inspectors considered a low degradation rating because the procedural deficiencies were not significant since there was a general requirement to review the impact of changes on fire protection program, and other licensee procedures require risk impacts to be evaluated during outages.
These findings had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not have a process in place to ensure system level design basis documents were updated within the period required by a license condition and to assure plant-specific requirements were incorporated into the appropriate procedures (H.3).
Enforcement.
License Condition 3.D, Fire Protection Program, states, in part, Omaha Public Power District shall implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c). The fire protection program was approved by the NRC in the revised License Condition 3.D, issued in License Amendment Number 275 on June 16, 2014.
License Condition 3.D, Section (3), Transition License Condition, Sub-Section (c)states:
The licensee shall implement the items listed in Enclosure 1, Attachment S, Table S-3, Implementation Items, of OPPD letter LIC-14-0042, dated April 10, 2014, no later than 12 months after issuance of the license amendment.
Implementation item REC-104, from Table S-3 states, Update system level design basis documents to reflect the NFPA 805 NSPC role that the system components now play (as described in Section 2.7.2 of NFPA 805).
Implementation item REC-136, From Table S-3 states, in part, that, Revisions will be made to Standing Order SO-O-21, Shutdown Operations Protection Plan, Standing Order SO-O-25, Temporary Modification, and General Form FC-66, Temporary Modification Control Form, to caution against the use of temporary electrical installations during higher risk evolutions that take place in planned outages.
Contrary to the above, from June 16, 2015, to November 6, 2015, the licensee failed to implement two items listed in Table S-3 of OPPD letter LIC-14-0042 within the required 12-month period that ended June 15, 2015. Specifically, the license did not implement items:
- (1) REC-104, update of system level design basis documents to reflect NFPA 805 nuclear safety performance criteria, and
- (2) REC-136, which cautioned against the use of temporary modifications during higher risk evolutions while in planned outages.
The licensee entered this violation into the corrective action program as Condition Reports 2015-12620 and 2015-12683 and were developing corrective actions. Because this violation was of very low safety significance and no immediate safety concerns existed, this violation is being treated as a non-cited violation, consistent with Section 2.3.2.a of the NRC Enforcement Policy: NCV 05000285/2015012-01, Failure to Adequately Implement and Maintain Required NFPA 805 Implementation Items.
.02 Passive Fire Protection
a. Inspection Scope
The inspectors walked down accessible portions of the selected fire areas to observe the material condition and configuration of the installed fire area boundaries (including walls, fire doors, and fire dampers) and verify that the electrical raceway fire barriers were appropriate for the fire hazards in the area. The inspectors compared the installed configurations to the approved construction details, supporting fire tests, and applicable license commitments.
The inspectors reviewed installation, repair, and qualification records for a sample of penetration seals to ensure the fill material possessed an appropriate fire rating and that the installation met the engineering design. The inspectors also reviewed similar records for the rated fire wraps to ensure the material possessed an appropriate fire rating and that the installation met the engineering design.
The inspectors also reviewed recent inspection and functional test records for fire dampers to verify whether the inspection and testing was adequately conducted, the acceptance criteria were met, and any potential performance degradation was identified.
b. Findings
No findings were identified.
.03 Active Fire Protection
a. Inspection Scope
The inspectors reviewed the design, maintenance, testing, and operation of the fire detection and suppression systems in the selected fire areas. The inspectors verified the automatic detection systems and the manual and automatic suppression systems were installed, tested, and maintained in accordance with the NFPA code of record or approved deviations, and that each suppression system was appropriate for the hazards in the selected fire areas.
The inspectors performed a walkdown of accessible portions of the detection and suppression systems in the selected fire areas. The inspectors also performed a walkdown of major system support equipment in other areas (e.g., fire pumps and Halon supply systems) to assess the material condition of these systems and components.
The inspectors reviewed the electric and diesel fire pumps flow and pressure tests to verify that the pumps met their design requirements. The inspectors reviewed the fire main flow tests to verify that the flow loops met their design requirements. The inspectors also reviewed the Halon suppression functional tests to verify that the system capability met the design requirements.
The inspectors assessed the fire brigade capabilities by reviewing training, qualification, and drill critique records. The inspectors also reviewed pre-fire plans and smoke removal plans for the selected fire areas to determine if appropriate information was provided to fire brigade members and plant operators to identify safe shutdown equipment and instrumentation, and to facilitate suppression of a fire that could impact post-fire safe shutdown capability. In addition, the inspectors inspected fire brigade equipment to determine operational readiness for firefighting.
The inspectors observed an unannounced fire drill and subsequent drill critique on November 3, 2015, using the guidance contained in Inspection Procedure 71111.05AQ, Fire Protection Annual/Quarterly. The inspectors observed fire brigade members fight a simulated fire in the compressor area. The inspectors verified that the licensee identified problems, openly discussed them in a self-critical manner at the drill debrief, and identified appropriate corrective actions. Specific attributes evaluated were:
- (1) proper wearing of turnout gear and self-contained breathing apparatus,
- (2) proper use and layout of fire hoses,
- (3) employment of appropriate firefighting techniques,
- (4) sufficient firefighting equipment brought to the scene,
- (5) effectiveness of fire brigade leader communications, command, and control,
- (6) utilization of pre-planned strategies,
- (7) adherence to the pre-planned drill scenario, and
- (8) drill objectives.
b. Findings
No findings were identified.
.04 Protection from Damage from Fire Suppression Activities
a. Inspection Scope
The inspectors performed plant walkdowns and reviewed documents to verify that redundant success paths for achieving safe and stable plant conditions, which are located in the same fire area, would not be subject to damage from fire suppression activities, or from the rupture or inadvertent operation of fire suppression systems.
Specifically, the inspectors verified:
- A fire in one of the selected fire areas would not directly, through production of smoke, heat, or hot gases, cause activation of suppression systems that could potentially damage all redundant success paths.
- A fire in one of the selected fire areas or the inadvertent actuation or rupture of a fire suppression system would not directly cause damage to all redundant success paths (e.g., sprinkler-caused flooding of other than the locally affected train).
- Adequate drainage was provided in areas protected by water suppression systems and for manual use of fire hoses by the fire brigade.
b. Findings
No findings were identified.
.05 Shutdown from a Primary Control Station
a. Inspection Scope
Review of Methodology The inspectors reviewed the nuclear safety capability assessment, procedures, piping and instrumentation drawings, electrical drawings, and other supporting documents to verify that the licensee can achieve and maintain safe and stable plant conditions from the primary control station in the event a fire required evacuation of the control room.
The inspectors verified that the nuclear safety capability assessment properly identified the components and systems necessary to meet the nuclear safety performance criteria for the fire area selected. Specifically, the inspectors determined the adequacy of the systems selected to meet the criteria for reactivity control, inventory and pressure control, decay heat removal, vital auxiliaries, and process monitoring. For the primary control station, which was analyzed using a performance-based approach, the inspectors verified that the analysis included a consideration of all the necessary cables and equipment associated with operation and control of off-site power.
The inspectors verified that the transfer of command and control from the control room to the primary control station would be unaffected by fire-induced circuit faults (e.g., by the provision of separate fuses and power supplies for shutdown control circuits).
Review of Operational Implementation The inspectors verified that the training program for licensed and non-licensed operators included the procedures for achieving and maintaining safe and stable plant conditions, including any necessary recovery actions. The inspectors also verified that sufficient personnel required to achieve and maintain safe and stable plant conditions were properly trained and were available at all times among the normal on-site staff, exclusive of the fire brigade.
The inspectors performed a timed walkdown of Procedure AOP-06, Fire Emergency, Revision 29, with licensed and non-licensed operators to determine the adequacy of the procedure. The inspectors verified that the recovery actions taken were feasible and that operators could reasonably be expected to implement the procedure within the applicable time requirements to achieve the nuclear safety performance criteria. The inspectors evaluated the feasibility of the recovery actions using the criteria established in the licensees approved fire protection program.
The inspectors also verified that the licensee conducted periodic operational tests of the transfer and isolation capability and instrumentation and control functions used for transferring control from the main control room to the primary control station and other locations where recovery actions would be performed. The inspectors verified that the tests were adequate to prove the functionality of the primary control stations capability to meet performance criteria and achieve and maintain safe and stable plant conditions.
b. Findings
Introduction.
The inspectors identified a Green non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to ensure one success path necessary to achieve and maintain the nuclear safety performance criteria was maintained free of fire damage for all single fires. Specifically, the licensee failed to provide adequate isolation for the pressurizer heaters credited for achieving safe and stable plant conditions for fires that require shutdown from outside the control room.
Description.
For fires in the control room or cable spreading room that require control room evacuation and shutdown from outside the control room, the licensee was required to achieve and maintain safe and stable plant conditions by entering Hot Shutdown (Mode 3) and maintaining that condition for an initial 24-hour coping time. The licensee documented their compliance strategy for each fire area in the plant in Attachment 8 of NFPA 805 analysis, EA10-036, Fort Calhoun Station Automation and Update of Safe Shutdown
Analysis.
For the control room and cable spreading room fire areas, the licensee documented that the inventory and pressure control nuclear safety performance criterion would be satisfied using the pressurizer backup heater bank 4 (RC4-4) for fires that require shutdown from outside the control room.
C, NEI 04-02 Table B-3 - Fire Area Transition, of the license amendment request, dated September 28, 2011, provided the method of accomplishment for the performance goals for each fire area. This table also specified that operators would initially maintain reactor coolant system pressure by operating the pressurizer backup heater bank 4 locally at the breaker for the reactor coolant system pressure control performance goal for fires that require shutdown from outside the control room.
The licensee used Procedure AOP-06, Fire Emergency, Revision 29, to shut down the reactor in the event a control room or cable spreading room fire required control room evacuation and shutdown from outside the control room. During a walkdown of this procedure, the inspectors inquired about the isolation of pressurizer backup heater bank 4 from the control room.
In response to the inspectors questions, the licensee reviewed the drawings for pressurizer backup heater bank 4 and identified a circuit vulnerability that could result in the loss of control for the pressurizer heater bank when performing a shutdown from outside the control room. This vulnerability involved an external hot short affecting the conductor connecting to the control room switch which could keep a relay energized and defeat control of the heater from the motor control center. If this condition occurred, operators would be unable to control pressurizer backup heater bank 4, which was relied upon to achieve safe and stable plant conditions for fires that require shutdown from outside the control room.
The licensee reported this issue as an unanalyzed condition in Event Notification 51487 on October 21, 2015.
Analysis.
The failure to provide adequate isolation for equipment relied upon to achieve safe and stable plant conditions for a shutdown from outside of the control room was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Specifically, the performance deficiency could adversely affect the availability, reliability, and capability of pressurizer heater bank 4, which is used to respond to fire initiating events. The finding was screened in accordance with NRC Inspection Manual Chapter (IMC) 0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. A senior reactor analyst performed a Phase 3 evaluation to determine the risk significance of this finding since it involved a postulated control room fire that led to control room evacuation.
For the control room, the senior reactor analyst assigned a plant-specific fire ignition frequency for the main control board (FIFMCB) from Calculation CN-RAM-09-021, Fire Ignition Frequencies for Fort Calhoun Station, Revision 2. The analyst multiplied the fire ignition frequency by a severity factor (SF) and a non-suppression probability indicating that operators failed to extinguish the fire within 20 minutes, assuming a 2-minute detection that required a control room evacuation (NPCRE). The resulting control room evacuation frequency (FCR) was:
FCR = FIFMCB
- SF
- NPCRE
= 1.63E-3/year
- 0.1
- 1.3E-2
= 2.12E-6/year The main control board had a total of 7 panels. The analyst determined that only a fire in one of these panels (CB-1) could lead to the loss of the credited pressurizer heater.
Therefore, a bounding change in core damage frequency for a control room fire that leads to evacuation and the loss of the pressurizer heater (FCR+PZR) was determined to be:
FCR+PZR = FCR * (1 / 7)
= 2.12E-6/year * (1 / 7)
= 3.03E-7/year For the cable spreading room, the senior reactor analyst limited the risk determination to transient and hot work fires since there were no fixed ignition sources in the cable spreading room. The senior reactor analyst assigned a plant-specific fire ignition frequency for transients (FIFCSR-TR) and hot work activities (FIFCSR-HW) from Calculation CN-RAM-10-013, Fire Scenario Selection and Characterization for Fort Calhoun Station, Revision 1.
Based on a walkdown of the cable spreading room, the senior reactor analyst assigned a screening weighting factor (W) of 0.1 for transient and hot work fires. The senior reactor analyst noted that the cable spreading room was protected by a Halon system.
The senior reactor analyst assigned a nominal failure probability of the Halon system (NPHalon) from Calculation CN-RAM-10-013.
Therefore, a bounding change in core damage frequency for a cable spreading room fire that leads to evacuation and the loss of the credited pressurizer heater (FCSR+PZR) was determined to be:
FCSR+PZR = (FIFCSR-TR + FIFCSR-HW)
- W
- NPHalon
= (2.3E-5/year + 7.52E-6/year)
- 0.1
- 0.069
= 2.11E-7/year Since fires in the control room are independent of fires in the cable spreading room, the senior reactor analyst calculated a bounding total change in core damage frequency (CDFTOT) for the performance deficiency by adding the change in core damage frequencies for the control room and cable spreading room calculated above. The senior reactor analyst calculated a bounding total change in core damage frequency of:
CDFTOT = FCR+PZR + FCSR+PZR
= 3.03E-7/year + 2.11E-7/year
= 5.1E-7/year This change in core damage frequency was considered to be bounding since it assumed:
- A fire in any of the applicable main control board panels or the cable spreading room areas would cause a loss of the credited pressurizer heater,
- The conditional core damage probability given a control room fire with evacuation and the loss of the credited pressurizer heater was equal to one, and
- The performance deficiency accounted for the entire change in core damage frequency (i.e., the baseline core damage frequency for this event was zero).
In accordance with the guidance in Inspection Manual Chapter 0609, Appendix H, Containment Integrity Significance Determination Process, dated May 6, 2004, the senior reactor analyst screened the performance deficiency for its potential risk contribution to large early release frequency since the bounding change in core damage frequency provided a risk significance estimate greater than 1E-7/yr. Given that Fort Calhoun Station has a large dry containment and that control room evacuation sequences do not include steam generator tube ruptures or intersystem loss of coolant accidents, the analyst determined that this example was not significant with respect to large early release frequency. The analyst determined this example was of very low risk significance (Green).
This finding did not have a cross-cutting aspect since it was not indicative of present performance in that the performance deficiency occurred more than three years ago.
Enforcement.
License Condition 3.D, Fire Protection Program, states, in part, that the licensee shall implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c), as specified in the licensee amendment request, dated September 28, 2011 (and supplements, dated December 19, 2011; December 22, 2011; March 20, 2012; July 24, 2012; August 24, 2012; September 27, 2012; April 23, 2013; May 21, 2013; July 29, 2013; September 12, 2013; October 11, 2013; November 4, 2013; November 11, 2013; December 18, 2013; January 24, 2014; February 28, 2014; April10, 2014; and June 11, 2014) and as approved in the safety evaluation, dated June 16, 2014. Table B-3, Fire Area Transition, of the license amendment request, dated September 28, 2011, states that the licensee would initially maintain reactor coolant system pressure by operating pressurizer heater RC4-4 locally at the breaker for fires in the control room or cable spreading room.
Contrary to the above, from September 28, 2011, to November 6, 2015, the licensee failed to implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c). Specifically, a fire in the control room or cable spreading room could disable the pressurizer heater RC4-4 such that the heater could not maintain reactor coolant system pressure.
The licensee entered this issue into their corrective action program as Condition Report 2015-12195 and added this issue to their compensatory measures for the control room and cable spreading room. Because this violation was of very low safety significance and has been entered into the corrective action program, this violation is being treated as a non-cited violation, consistent with Section 2.3.2.a of the NRC Enforcement Policy: NCV 05000285/2015012-02, Failure to Provide Adequate Isolation for Pressurizer Heaters.
.06 Circuit Analyses
a. Inspection Scope
The inspectors reviewed the nuclear safety capability assessment to verify that the licensee identified the circuits that may impact the ability to achieve and maintain safe and stable conditions. The inspectors verified, on a sample basis, that the licensee properly identified the cables for equipment required to achieve and maintain safe and stable conditions in the event of a fire in the selected fire areas. The inspectors verified that these cables were either adequately protected from the potentially adverse effects of fire damage or were analyzed to show that fire-induced faults (e.g., hot shorts, open circuits, and shorts to ground) would not prevent achieving safe and stable conditions.
The inspectors verified that the licensee's analyses considered potential spurious operations due to fire-induced cable faults.
The inspectors' evaluation focused on the cables of selected components from the reactor coolant system, the credited charging pump, the pressurizer power-operated relief valves, emergency diesel generator, 125Vdc system, and the credited motor-driven auxiliary feedwater pump. For the sample of components selected, the inspectors reviewed process and instrumentation drawings, electrical elementary and block diagrams and identified power, control, and instrument cables necessary to support their operation. In addition, the inspectors reviewed cable routing information to verify that fire protection features were in place as needed to satisfy the separation requirements specified in the fire protection license basis.
b. Findings
No findings were identified.
.07 Communications
a. Inspection Scope
The inspectors reviewed the contents of designated emergency storage lockers and reviewed the procedure for shutdown from outside of the control room to verify that portable radio communications and fixed emergency communications systems were available, operable, and adequate for the performance of designated activities. The inspectors verified the capability of the communication systems to support the operators in the conduct and coordination of their required actions. The inspectors also verified that the design and location of communications equipment, such as repeaters and transmitters, would not cause a loss of communications during a fire. The inspectors discussed system design, testing, and maintenance with the system engineer.
b. Findings
No findings were identified.
.08 Emergency Lighting
a. Inspection Scope
The inspectors reviewed the emergency lighting provided, both in fixed and portable form, along access routes and egress routes and at control stations, plant parameter monitoring locations, and recovery action locations. The inspectors verified that the emergency lighting was adequate for operators to perform the required recovery actions during a walkdown of the procedure for shutdown from outside of the control room.
b. Findings
No findings were identified.
.09 Cold Shutdown Repairs
a. Inspection Scope
The inspectors determined that the licensee did not credit cold shutdown repairs to meet the nuclear safety performance criteria. The inspectors reviewed the nuclear safety capability assessment and interviewed licensee personnel and determined that the licensee does not require transitioning to cold shutdown to achieve a safe and stable condition.
b. Findings
No findings were identified.
.10 Compensatory Measures
a. Inspection Scope
The inspectors verified that compensatory measures were implemented for out-of-service, degraded, or inoperable fire protection and success path equipment, systems, or features (e.g., detection and suppression systems and equipment; passive fire barriers; or pumps, valves, or electrical devices providing nuclear safety functions or capabilities for meeting performance criteria) necessary to achieve and maintain safe and stable plant conditions. The inspectors also verified that the short-term compensatory measures compensated for the degraded function or feature until appropriate corrective action could be taken and that the licensee was effective in returning the equipment to service in a reasonable period of time.
b. Findings
No findings were identified.
.11 Radiological Release
a. Inspection Scope
The inspectors verified that the licensee provided reasonable assurance that a fire would not result in a radiological release that adversely affects the public, plant personnel, or the environment. The inspectors also verified that the licensee evaluated that any radiation release to any unrestricted area resulting from fire suppression activities were as low as reasonably achievable and would not exceed applicable 10 CFR Part 20 limits.
The inspectors verified that the licensee analyzed radioactive release on a fire area basis in accordance with NFPA 805, Section 2.2.4. The inspectors walked down the selected fire zones and verified that the pre-fire plan tactics and instructions were consistent with the potential radiological conditions identified in the analyses.
b. Findings
No findings were identified.
.12 Non-Power Operations
a. Inspection Scope
The plant did not enter an outage during the inspection. However, the inspectors verified that the licensee defined specific points where one or more key safety functions could be lost during non-power operations. The inspectors reviewed the actions that the licensee would take during higher-risk evolutions where those key safety functions could be lost.
b. Findings
See Example 2 of Non-cited Violation 05000285/2015012-01 in Section 1R05.01.b.
.13 Monitoring Program
a. Inspection Scope
The inspectors verified that the licensee established a monitoring program to ensure that the availability and reliability of the fire protection systems, structures, and components credited in the performance-based analyses are maintained and to assess the performance of the fire protection program in meeting the performance criteria specified in NFPA 805. The inspectors verified that the monitoring program ensured the assumptions in the engineering analysis remain valid. The inspectors also verified that the licensee was maintaining acceptable levels of availability, reliability, and performance per its license condition. When the established levels of availability, reliability, and performance were not met, the inspectors verified that the licensee took appropriate corrective actions to return to the established levels.
b. Findings
Introduction.
The inspectors identified a Green non-cited violation of License Condition 3.D, Fire Protection Program, for the failure to establish an appropriate monitoring program in accordance with NFPA 805, Section 2.6. Specifically, the licensee failed to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid.
Description.
The inspectors reviewed selected samples of equipment monitored by the licensee utilizing Procedure ER-AA-610-1003, NFPA 805 Monitoring Program, Revision 0, to ensure that the licensees program properly implemented the requirements of NFPA 805, Section 2.6.
Licensee letter LIC-11-0099, Section 4.6.2, Overview of Post-Transition NFPA 805 Monitoring Program, states that, Monitoring will ensure that assumptions in engineering analysis remain valid. The monitoring program will be documented in an administrative process (i.e., program manual or directive) that provides the process and sets clear guidelines to consistently measure the performance of the fire protection program.
Table S-3, Implementation Items, item REC-101, states: Development of the NFPA 805 monitoring program for FCS utilizing guidance from FAQ [Frequently Asked Question] 10-0059 (as described in Section 2.6 of NFPA 805). Frequently Asked Question 10-0059, NFPA 805 Monitoring, Revision 5, states in the Details section, Item 3, Action level threshold - When establishing the action level threshold for reliability and availability, the action level should be no lower than the fire PRA
[probabilistic risk assessment] assumptions.
For the raw water system pumps, the licensee opted to use their maintenance rule program as the monitoring program. The inspectors noted that the maintenance rule program allowable availability was 95 percent. However, the fire probabilistic risk assessment basic event for test and maintenance unavailability was 0.0134, which relates to an availability of 98.66 percent. Therefore, the action level for availability in the monitoring program was lower than the assumptions in the fire probabilistic risk assessment.
Equipment Reliability Procedure ER-AA-610-1003, NFPA 805 Monitoring Program, Section 2.1, defines Action Level, For those SSCs monitored by the NFPA 805 Monitoring Program, the action level is the threshold at which mitigating actions are required to keep assumptions made in the engineering analysis valid. Section 4.4 Risk Target Value Determination, Item 4.4.1, states, Using the Fire PRA, or other processes as appropriate, to determine target values of reliability and availability for the HSS fire protection/NSCA SSCs and programmatic elements established in Section 4.3 as requiring additional monitoring beyond inspection and test programs and system/
program health programs. Item 4.4.4 states, If HSS SSCs have been identified using the maintenance rule guidelines, then the associated SSC specific performance criteria may be ESTABLISHED as in the Maintenance Rule, provided the criteria are consistent with Fire PRA assumptions. The fourth criteria provided states, If the maintenance rule criteria does not bound the Fire PRA assumptions, then SUBMIT a Maintenance Rule Change request per reference 6.2.5. The inspectors noted that the licensee had not submitted a maintenance rule change request despite the maintenance rule criteria failing to bound the fire probabilistic risk assessment assumptions.
Analysis.
The failure to set the action level for the availability of the raw water system pumps to ensure that the assumptions in the engineering analysis remained valid was a performance deficiency. The performance deficiency was more than minor because it was associated with the protection against external events (fire) attribute of the Mitigating Systems cornerstone and it adversely affected the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Specifically, the performance deficiency could adversely affect the acceptable level of availability of the raw water pumps, which are used to respond to fire initiating events.
The finding was screened in accordance with NRC Inspection Manual Chapter (IMC)0609, Significance Determination Process, Attachment 4, Initial Characterization of Findings, dated June 19, 2012. The inspectors determined that an IMC 0609, Appendix F, Fire Protection Significance Determination Process, dated September 20, 2013, review was required as the finding affected the ability to reach and maintain safe shutdown conditions in case of a fire. Using IMC 0609, Appendix F, Attachment 1, Fire Protection Significance Determination Process Worksheet, dated September 20, 2013, the finding was screened as a Green finding of very low safety significance in accordance with Step 1.3, Ability to Achieve Safe Shutdown, B Question. Based on the criteria in Appendix F, Attachment 2, Degradation Rating Guidance Specific to Various Fire Protection Program Elements, dated February 28, 2005, the finding was assigned a Low degradation rating. Using Table A2.3, the inspectors considered a low degradation rating because the issue involved monitoring of components that did not degrade below acceptable levels during the exposure period.
This finding had a cross-cutting aspect associated with change management within the human performance area since the leaders failed to use a systematic process for evaluating and implementing change so that nuclear safety remains the overriding priority. Specifically, the inspectors determined that the licensee did not use the process that was in place to ensure that the appropriate NFPA 805 fire risk assessment monitoring action levels were incorporated into the maintenance rule program and monitored (H.3).
Enforcement.
License Condition 3.D, Fire Protection Program, states, in part, that the licensee shall implement and maintain in effect all provisions of the approved fire protection program that comply with 10 CFR 50.48(a) and 10 CFR 50.48(c), as specified in the licensee amendment request dated September 28, 2011 (and supplements, dated December 19, 2011, December 22, 2011, March 20, 2012, July 24, 2012, August 24, 2012, September 27, 2012, April 23, 2013, May 21, 2013, July 29, 2013, September 12, 2013, October 11, 2013, November 4, 2013, November 11, 2013, December 18, 2013, January 24, 2014, February 28, 2014, April10, and June 11, 2014), and as approved in the safety evaluation, dated June 16, 2014.
The approved fire protection program is a risk-informed performance-based program in accordance with NFPA 805, Performance-Based Standard for Fire Protection for Light Water Reactor Electric Generating Plants, 2001 Edition (NFPA 805), incorporated by reference into 10 CFR 50.48(c). NFPA 805, Section 2.6, Monitoring, states that, Monitoring shall ensure that the assumptions in the engineering analysis remain valid.
Contrary to the above, from June 16, 2015, to November 6, 2015, the licensee failed to appropriately monitor plant equipment to ensure that the assumptions in the NFPA 805 engineering analysis remained valid. Specifically, the licensees monitoring program did not monitor the availability of the raw water system pumps to ensure that it was no lower than the fire probabilistic risk assessment assumptions.
Because the finding was of very low safety significance (Green), was entered into the licensees corrective action program as Condition Report 2015-12612, the availability of the pumps was greater than that assumed in the fire probabilistic risk assessment, and the licensee was in the process of developing corrective actions to address the monitoring of the pumps, this finding is being treated as a non-cited violation consistent with Section 2.3.2.a of the NRC Enforcement policy. This finding is identified as NCV 05000285/2015012-03, Failure to Set Action Levels to Ensure that the Assumptions in the Engineering Analysis Remain Valid.
.14 Plant Change Evaluation
a. Inspection Scope
The inspectors reviewed plant change evaluations to verify that where performance-based methods were applied, the methods adequately represented plant design and conditions in the fire area, were performed by qualified persons, were acceptable for the application and met the requirements of the fire protection license condition for self-approved changes to the fire protection program. The licensee had not yet implemented the plant changes. Therefore, the inspectors reviewed a sample of engineering changes planned by the licensee. Additionally, the inspectors reviewed the governing procedures related to engineering changes and the requirements for performing plant change evaluations.
The inspectors sampled the following changes:
- REC-111, high energy arc fault shielding to limit damage.
- REC-114, provide protection for SOV HCV-247 control cables to prevent spurious isolation of CVCS injection flow path.
- REC-116, modification to ensure that diesel generator 1 supply breaker cannot close unless breakers 1A3-1 and 1A3-3 are open. Offsite power can potentially be lost with fire in DG1 area and diesel connects to grid.
- REC-131, provide nitrogen backup to valve YCV-1045 so that pump FW-10 can operate for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
b. Findings
No findings were identified.
.15 Implementation of Risk-Related Implementation Items
a. Inspection Scope
The inspectors verified that the licensee appropriately implemented risk-related items in the establishment and early operation of their NFPA 805 program. This review included the risk management policy for fire brigade emergency response, upgraded fire human reliability analysis methods, alternate steam generator level monitoring methods, and incorporation of revised fire risk methods in the fire probabilistic risk assessment. The inspectors also reviewed the licensees integration of multi-compartment scenarios into the base fire probabilistic risk assessment. Finally, the inspectors reviewed the licensees probabilistic risk assessment to ensure the basic event data in the fire probabilistic risk assessment matched the internal events probabilistic risk assessment basic events, which included a verification of multiple spurious operation and human reliability analysis treatment.
The inspectors sampled the following alternate methods to ensure that the licensee appropriately replaced them with approved methods:
- Fire Pump Frequency Apportioning The licensee based apportioning on pump runtime to account for lower usage with standby pumps. Standard NFPA 805 suggested apportioning on pump count alone. The licensee had performed sensitivity studies using pump count apportioning. Acceptable results were achieved.
- Diesel Generator Fire Treatment The licensee assumed that most fires occur during surveillance testing.
Therefore, it was assumed that an operator would be physically stationed in the room. This artificially improved manual suppression credit. Standard NFPA 805 suggested that surveillance testing is indicative of demand runs and likely will not have manual suppression. The licensee had performed sensitivity indicated studies indicating that the acceptance criteria were still met.
- Use of Draft Frequently Asked Question 08-0050 The licensee indicated there was no change to their conclusions given implementation of the final frequently asked question.
- Electrical Cabinet Generic Severity Factor The licensee assumed that 10 percent of fires will damage targets external to the cabinet. However, the acceptance criteria were still met when the severity factor was set to 1.0.
b. Findings
No findings were identified.
.16 Alternative Mitigation Strategy Inspection Activities
a. Inspection Scope
The inspectors reviewed the licensees implementation of guidance and strategies intended to maintain or restore core, containment, and spent fuel pool cooling capabilities under the circumstances associated with the potential loss of large areas of the plant due to explosions or fire as required by 10 CFR 50.54(hh)(2).
The inspectors verified that the licensee maintained and implemented adequate procedures, maintained and tested equipment necessary to properly implement the strategies, and ensured station personnel were knowledgeable and capable of implementing the procedures. The inspectors performed a visual inspection of portable equipment used to implement the strategy to ensure the availability and material readiness of the equipment, including the adequacy of portable pump trailer hitch attachments, and verify the availability of on-site vehicles capable of towing the portable pump. The inspectors evaluated the containment flooding with portable pump strategy.
One mitigating strategy sample was completed.
b. Findings
No findings were identified.
OTHER ACTIVITIES (OA)
4OA2 Identification and Resolution of Problems
Corrective Actions for Fire Protection Deficiencies
a. Inspection Scope
The inspectors selected a sample of condition reports associated with the licensee's fire protection program to verify that the licensee had an appropriate threshold for identifying deficiencies. The inspectors reviewed the corrective actions proposed and implemented to verify that they were effective in correcting identified deficiencies. The inspectors evaluated the quality of recent engineering evaluations through a review of condition reports, calculations, and other documents during the inspection.
b. Findings
No findings were identified.
4OA6 Meetings, Including Exit
Exit Meeting Summary
The inspectors presented the inspection results to Mr. L. Cortopassi, Site Vice President and Chief Nuclear Officer, and other members of the licensee staff at an exit meeting on November 6, 2015. The licensee acknowledged the findings presented.
The inspectors verified that proprietary information was retained by the inspectors would be appropriately controlled.
ATTACHMENT:
SUPPLEMENTAL INFORMATION
KEY POINTS OF CONTACT
Licensee Personnel
- K. Ahrens, Fire Protection System Engineer
- C. Averett, Site Communicator
- D. Bacalan, Site Security Manager
- R. Beck, Chemistry Manager
- B. Bittle, Design Engineer
- B. Blame, Site Regulatory Assurance Manager
- D. Brehm, Radiological Protection Supervisor
- C. Cameron, Regulatory Assurance
- H. Childs, Site Security Manager
- G. Coleman, Training
- L. Cortopassi, Site Vice President and Chief Nuclear Officer
- S. Dean, Plant Manager
- S. Fatora, Work Management Director
- J. Geschwender, Probabilistic Risk Assessment Engineer
- H. Goodman, Site Engineering Director
- H. Hackeroft, Probabilistic Risk Assessment Engineer
- B. Heimes, Security
- R. Hugenroth, Nuclear Oversight Manager
- T. Kapuan, Maintenance Director
- J. LeMaire, Fire Protection Engineer (EPM Contractor)
- S. Lindquist, Unit Supervisor
- E. Matzke, Regulatory Assurance
- J. McManuis, Project Engineering Manager
- H. Minassian, Program Engineer
- T. Muff, Maintenance
- F. Pellizzori, Safe Shutdown Analyst (EPM Contractor)
- C. Pragman, Exelon Corporate Fire Protection
- M. Prospero, Executive Outage Manager
- T. Swanson, Fire Marshall
- M. Seip, Fire Brigade Instructor
- A. Sublett, NFPA 805 Safe Shutdown Engineer
- S. Swanson, Operations Director
- R. Swerczek, Fire Protection Engineer
- J. Tarpinian, NFPA 805 Fire Protection Engineer (EPM Contractor)
- T. Uehling, Training
- J. Wiegand, Operations Support and Services Manager
- J. Wilson, Design Engineer
- Z. Wineinger, Design Engineer
NRC Personnel
- S. Schneider, Senior Resident Inspector
Attachment
LIST OF ITEMS OPENED, CLOSED, AND DISCUSSED
Opened and Closed
- 05000285/2015012-01 NCV Failure to Adequately Implement and Maintain Required NFPA 805 Implementation Items (Section 1R05.01.b)
- 05000285/2015012-02 NCV Failure to Provide Adequate Isolation for Pressurizer Heaters (Section 1R05.05.b)
- 05000285/2015012-03 NCV Failure to Set Action Levels to Ensure that the Assumptions in the Engineering Analysis Remain Valid (Section 1R05.13.b)
`