ML093280304

Initial Exam 2009/301 Draft Simulator Scenarios

ML093280304
Person / Time
Site:	Vogtle
Issue date:	11/18/2009
From:	Division of Nuclear Materials Safety II
To:
References
Download: ML093280304 (207)

Text

Appendix 0 Scenario Outline Form ES*D*1

• Facility: VogUe Examiners: Lea Scenario No.: 1 Operators:

NEW Op-Test No.: 2009-301 Initial Conditions: 100% 120wer, CNMT Mini-Purge in service, HV-3009 shut tagged for rel2airs (emergent work}. SG ARV #3 tagged for rel2airs, BATP #2 tagged for rel2airs, I&C recording lift coil currents in rod control for baseline PM data.

Turnover: New system l2eak record eXl2ected due to extremely hot weather. System loads at maximum due to unexl2ected unit tril2. LCO 3.7.5 Condition A (HV-3009). INFO LCO 3.7.4 (ARV) INFO TR 13.1.3 (BATP).

Event Malf. Event Event No. No. Type* Description 1 PR05 C-SS PORV-455 fails partially open. AOP 18000-C entry required. PORV

@20% C-OATC block valve shut to stop leak. LCO 3.4.11 13.4.1 TS-SS 2 EL13A I-ALL Loss of 1AY1A AOP 18032-C loss of 120 Vital AC due to inverter

& TS-SS failure - power restored from regulated transformer ALB34 LCO 3.3.1 13.3.2 I 3.8.7/3.8.9 E02-0N 3 N/A N-OATC Restore CVCS letdown to service N-SS 4 SG03D2 I-SS SG Pressure instrument PT-545 fails low (after power restored)

@O% I-UO LCO 3.3.2 I 3.3.3 TS-SS 5 SG01B R-ALL SG # 2 develops 20 gpm tube leak. AOP 18009-C

@2% TS-SS LCO 3.4.13 Rapid power reduction per AOP 18013-C 6 SG01B M-ALL SGTL degrades to SGTR - EOP 19000 to 19030. Air to CNMT

@45% isolation (HV-9378) valve sticks closed. Depressurize RCS with PORV.

ORHV-9387 SHUT 7 MS03B C-SS SG #2 ARV fully opens due to failed pressure transmitter. Occurs after

@100% C-UO 19030-C transition.

• 8 ES22A ES22B C-SS C-OATC BIT isolation valves fail to auto open, and charging line isolation valves fail to auto close.

Scenario 1 Page 1

Appendix 0 Scenario Outline Form ES*D*1

• 9 ES23A ES23B AF05C C-SS C-UO TDAFWP fails to auto start.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Event 1:

PORV-455 fails partially open requiring the crew to enter AOP 1BOOO-C. The PORV block valve is shut to stop the RCS leakage.

Verifiable action:

OATC - Immediately verifies PRZR spray valves closed. Closes the affected PORV block valve. Checks PRZR safety valves closed. Verifies PRZR pressure control instrumentation operating properly.

Technical Specifications:

LCO 3.4.11 PORVs - Condition B - Close associated block valve in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and remove power from associated block valve in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. Restore PORV within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in mode 3 within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and mode 4 in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

LCO 3.4.1 DNB parameters - Condition A - Restore within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> Event 2:

Loss of 120 VAC vital instrumentation bus 1A Y1 A due to inverter failure. This requires entry into AOP 1B032-1 Section A.

Verifiable action:

OATC - Immediate actions: checks power> 10% and places rods to manual.

Reduces charging flow to 10 gpm > RCP seal injection flow, maintains seal injection flow B-13 gpm, controls PZR pressure with manual sprays / heaters, defeats loop 1 Tave & delta T inputs into control circuits, restores rods to ARO UO - places all MFRVs and MFPTs speed control in manual, matches steam and feed flows to maintain SG levels at 65%. Bypasses PRNI 41 rod stop, transfer steam dumps to steam pressure mode.

OATC & UO select unaffected channels and place control systems back to automatic.

Technical specifications:

LCO 3.3.1 - Functions 16a through f (P-6, P-7, P-B, P-9, P-10, and P-13) - verify correct status in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> LCO 3.3.2 - Function Bb (P-11) - verify correct status in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> LCO 3.B.7 Condition A (1 inverter inoperable) - restore inverter within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> and enter LCO 3.B.9 with any vital bus de-energized.

LCO 3.B.9 condition B (vital AC bus) - restore vital bus from regulated transformer within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> Scenario 1 Page 2

Appendix 0 Scenario Outline Form ES-D-1

• Event 3:

Restore CVCS Letdown to service using SOP 13006-1 Verifiable Actions:

OATC - Align letdown flowpath, establish 80-90 gpm charging flow and 8-13 gpm RCP seal injection flow, establish 75 gpm letdown flow, raise letdown flow 120 gpm, place letdown controls in automatic.

Event 4:

Controlling SG pressure instrument fails low requiring entry into AOP 18001-C section F.

Verifiable action:

UO - Immediately takes manual control of affected SG MFRV and MFPs speed to restore levels to 65%

with steam & feed flows matched. Unaffected channel selected, controls returned to automatic.

Technical specifications:

LCO 3.3.2 ESFAS - Functions 1e (SI), 4d(1) and 4d(2) (SU)- action D - trip channel in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> LCO 3.3.3 PAMS - Function 8 (SL pressure) - Action B - restore in 30 days

• Event 5:

A 20 gpm SGTL develops on SG # 2. AOP entry is required for the SGTL into AOP 18009-C. The AOP will require a rapid shutdown using AOP 18013-C in conjunction with the SGTL AOP (18009-C).

Verifiable actions:

OATC - Maintain PRZR level with charging & letdown, maintain Tave matched with Tref during SID.

Maintain rods above RIL with borations.

UO - reduce turbine power for SID.

Technical Specifications:

LCO 3.4.13 - RCS Operational Leakage - Action B - mode 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

Events 6, 7, 8, and 9:

SGTL degrades to SGTR. OATC is unable to maintain PRZR level with normal charging. This requires tripping the reactor and actuating SI. A transition to 19030-C, E-3 for the SGTR is required to stop the primary to secondary leakage.

Verifiable actions:

OATC- recognize not able to maintain PRZR level with 2 charging pumps and no CVCS letdown.

Manually trips reactor and actuates Safety Injection. Manually open BIT isolations and close charging line isolations. RCS depressurization following rapid cooldown. Use PORV to depressurize RCS.

Terminate ECCS injection & establish normal charging.

Scenario 1 Page 3

Appendix 0 Scenario Outline Form ES*D*1 UO - Identify & isolate ruptured SG. Rapid ReS cooldown to target temperature and maintain that temperature with SG ARVs. Manually close stuck open SG#2 ARV. Manually start TDAFW pump.

CRITICAL STEPS:

1. Manually restore ECCS HHSI flow paths to maintain RCS inventory

2. Stop offsite emergency release from SG #2 ARV.

• Scenario 1 Page 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 1 Page 1 of 3 Event

Description:

PORV-455 will fail to an intermediate position causing PRZR pressure to lower to 2185 psig. The crew will enter AOP 18000-C for this failure and isolate the malfunctioning PORV and restore PRZR pressure to normal and address the technical specifications.

Time Position Applicant's AJlplicant's Action or Behavior CREW Diagnoses failure of PORV 455:

Alarms:

PRZR RELIEF DISCH HI TEMP PRZR CONTROL LO PRESS AND HEATERS ON PRZR PRESS LO PORV BLOCK Indications:

Intermediate valve position for PV-455 PRZR pressure lowering PORV tailpipe temperature indication (TI-449) rising - 200°F Both PORV Block Valves shut @ 2185 psig PRZR pressure

• SS Enters AOP 18000-C, Pressurizer Spray, Safety, or Relief Valve Malfunction OATC Immediate Action: Verifies PRZR spray valves closed OATC Energizes PRZR heaters as necessary to maintain 2235 psig

• 1

Appendix D Required Operator Actions Form ES*D*2 Op*Test No.: 2009-301 Scenario No.: 1 Page 2 of 3 Event No.: 1 Event

Description:

PORV-455 will fail to an intermediate position causing PRZR pressure to lower to 2185 psig. The crew will enter AOP 18000-C for this failure and isolate the malfunctioning PORV and restore PRZR pressure to normal and address the technical specifications.

Time Position Applicant's Action or Behavior OATC Verifies PORV 455 is shut: (Not)

• Places handswitch for PORV-455 block valve in close

• Dispatches CSO to open PORV breaker 1AD1M-04 OATC Checks PRZR Safety Valves closed:

IPC or PSMS valve position indication PRZR Safety tailpipe temperature indications OATC Checks master controller PIC-455A operating properly using figure 1 of AOP 18000-C OATC Checks PRZR pressure instruments reading properly

• 2

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 1 Page 3 of 3 Event

Description:

PORV-455 will fail to an intermediate position causing PRZR pressure to lower to 2185 psig. The crew will enter AOP 18000-C for this failure and isolate the malfunctioning PORV and restore PRZR pressure to normal and address the technical specifications.

Time Position Applicant's Action or Behavior SS Complies with Technical Specifications:

• 3.4.11 PORVs - Condition B:

0 Close associated PORV block valve in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, and 0 Remove power from the associated block valve in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />

• 1ABE-13 0 Restore PORV to operable status in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />

• 3.4.1 DNB Parameters - Condition A - Restore within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />

• SS Contacts SSS to perform following actions:

• Remove power from PORV block valve in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />

• Initiate condition report

• Contact maintenance

• Notify OPS Duty Manager of AOP entry

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 1 of9 Event

Description:

A loss 120 VAC vital instrument bus 1A Y1 A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's Action or Behavior CREW Diagnoses loss of power to vital bus 1A Y1 A:

Indications:

• Several channel I trip status lights are lit

• Simultaneous loss of SR, IR, and PR NIS channels N-31/35/41 Alarms:

• 120V AC PANELS 1AY1A 1AY2A TROUBLE

• INVERTERS 1AD111 1AD1111 TROUBLE

• Several other alarms resulting from loss of channell vital AC power

• OATC IMMEDIATE ACTIONS:

• Check reactor power> P-10 setpoint

• Verify control rods in manual UO IMMEDIATE ACTIONS:

Control SG NR levels 60%-70%:

• Place MFRVs in manual

• MFPT SPEED CONTROL MASTER in manual

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 2 of9 Event

Description:

A loss 120 VAC vital instrument bus 1AY1A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's Action or Behavior SS Enters AOP 18032-C, Loss of 120V AC Instrument Power, section A (Crew Update)

OATC 1 UO Verify immediate actions with SS Initiate continuous actions page

• OATC Maintain seal injection flow to all RCP's 8 to 13 GPM Reduce charging flow to - 10 GPM greater than total seal injection flow OATC Restore PRZR level control:

• Checks failed channel selected for control

• Select control to channels 461/460

• Restore Control Heaters by placing control switch to ON

• Reset Backup Heaters - Handswitches to OFF then AUTO

• Operate heaters 1 sprays to maintain 2220-2250 psig

• Select channel 461 on chart recorder

• 2

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 2 Scenario No.: 1 Page 3 of9 Event

Description:

A loss 120 VAC vital instrument bus 1A Y1 A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's Action or Behavior OATC Check Letdown in service - (not)

Restore letdown by initiating SOP 13006-1, Chemical and Volume Control System (go to Event 3)

OATC Select alternate PRZR pressure control channel:

• Place PORV 455 handswitch in close

• Place spray controllers in manual

• Set master controller to 25%

• Select channels 457 / 456 for control

• Select channel 457 for the chart recorder OATC Restore automatic PRZR pressure control:

• Check pressure 2220-2250 psig

• Place PORV 455 HS in auto 0 (should remain in manual close due to event 1 failure)

• Check PORV 455 remains closed

• Place PRZR heaters in AUTO

• Place PRR spray valve controllers in AUTO

• Verify RCS pressure - stable or rising

• Return PRZR master pressure controller to AUTO

• 3

Appendix 0 Required Operator Actions Form ES*D*2 Op*Test No.: 2009*301 Scenario No.: 1 Page 40f9 Event No.: 2 Event

Description:

A loss 120 VAC vital instrument bus 1AY1A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's Apl!iicant's Action or Behavior UO Select channell/ SG control instruments by placing selector switches to the right (May ask for peer check)

UO Restore SG levels to 65% and then return MFRVs and MFP master controllers to automatic

• OATC Defeat loop 1 Tavg and 11 T inputs into the temperature control circuits OATC Determine Tref using figure 1 of AOP 18032-C UO Place ROD STOP BYPASS switch to BYPASS PRN41 position This will clear alarm ALB10D03 - Overpower Rod Stop

• 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 50f9 Event

Description:

A loss 120 VAC vital instrument bus 1AY1A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position AJ>~icant's Ap~licant's Action or Behavior OATC Restore Tave to Tref with control rods Transfer Steam Dumps to Steam Pressure mode:

UO

• Check Condenser available

• Verify PIC507 steam dump control set to auto at 1092 psig (7.28 on potentiometer) and zero demand

• Place steam dumps in steam pressure mode OATC / UO Maintain stable plant conditions:

• Tavg within 1 F of Tref

• PRZR level within 5% of program

• PRZR pressure 2220-2250 psig

• SG NR levels 60-70%

• 5

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 60f9 Event

Description:

A loss 120 VAC vital instrument bus 1AY1A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 1B0032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's Action or Behavior SS/OATC Verify interlocks in required state for existing conditions:

(This is a Tech Spec required 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> action)

• P6

• P7

• PB

• pg

• P10 and input to P7

• P13

• P11 SS Dispatch operator to transfer 1A Y1 A to alternate supply (SOP 13431-1)

OATC Check ACCW system status due to loss of power:

• ACCW pump 1 started

• Proper operation of ACCW pump 1

• Shutdown ACCW pump 2

• Verify thermal barrier header return isolation valve (HV-2041) open

• 6

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 7 of 9 Event

Description:

A loss 120 VAC vital instrument bus 1AY1A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's AI!P_licant's Action or Behavior SS Check 1A Y 1A restored from alternate or norm al power Note: do not expect path below to be taken, power will be restored from the regulated transformer.

If 1AY1A cannot be re-energized in a timely manner:

• Place standby NSCW and CCW pumps that started in PTL

• Initiate 18002-C, NIS malfunction AOP

• Refer to Attachment A, Table 1 to determine affected instruments

• Refer to Attachment A, Table 2 and 3 to determine additional equipment affected

• Refer to technical specifications and complete any applicable actions UO Check NSCW and CCW train A in service Shutdown and place in AUTO any standby NSCW or CCW pump which started due to loss of 1A Y1 A NOTE: CCW pump will auto restart if handswitch is not held in stop for several seconds to let discharge pressure stabilize.

• 7

Appendix D Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 8 of 9 Event

Description:

A loss 120 VAC vital instrument bus 1AY1A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 1B0032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's Action or Behavior SS Check loss of 1AY1A due to inverter 1AD111 failure Check 1AY1A restored to inverter supply (Not)

Return to procedure and step in effect

• SS Determine Technical Specifications impacted by failure:

LCO 3.3.1 - Functions 16a through f(P-6, P-7, P-B, P-9, P-10, and P-13) - verify correct status in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> LCO 3.3.2 - Function Bb (P-11) - verify correct status in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />

• LCO 3.B.7 Condition A (1 inverter inoperable) - restore inverter within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> and enter LCO 3.B.9 with any vital bus de-energized.

• LCO 3.B.9 Condition B (vital AC bus) - restore vital bus from regulated transformer within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />

• B

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 1 Page 9 of 9 Event

Description:

A loss 120 VAC vital instrument bus 1A Y1 A occurs. The crew will diagnose the failure and take immediate actions to stabilize the affected control systems and then enter AOP 180032-C. This failure will be due to an inverter failure, the bus will be re-energized from the alternate power source, the regulated transformer.

Time Position Applicant's ARPJicant's Action or Behavior SS Contact SSS to perform following:

• Notify OPS Duty Manager of AOP entry

• Initiate Condition Report GOTO EVENT 4

• 9

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 1 Page 1 of 2 Event

Description:

OATC returns CVCS letdown to service using SOP 13006-1 following loss of vital instrument bus 1AY1A Time Position Ap~icant's Aj>~icant's Action or Behavior SOP 13006-1! Section 4.4.2 OATC Verifies NCP miniflow (HV-81 09) is open Aligns letdown flow path for start up:

• LTDN Orifice isolations(HV-8149AJB/C) - CLOSED

• LTDN isolations (LV-459/460) - CLOSED

• PZR aux Spray(HV-8145) - CLOSED

• Pipe Break protection (HV-15214) - OPEN

• LTDN CNMT isolations (HV-8160 & HV-8152) - OPEN

• LTDN pressure controller (PV-131) -Manual 50%-75%

• LTDN HX outlet (TIC-130) - Manual to most recent position on rounds sheets OATC Verify PZR level> 17%

OATC Verify charging aligned:

• Charging line isolations(HV-8105 & HV-81 06) -OPEN

• Charging to RCS loop isolation -either one OPEN

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 1 Page 2 of2 Event

Description:

OATe returns eves letdown to service using SOP 13006-1 following loss of vital instrument bus 1AY1A Time Position Applicant's Action or Behavior OATe Raises charging flow to 80-90 GPM while maintaining Rep seal injection flow between 8-13 GPM OATe Establishes Letdown flow:

• Opens LTON isolations and LTON Orifice Isolation to establish 75 gpm letdown flow

• Adjusts LTON pressure between 360-380 pSig, then places controller in automatic

• Places LTON HX temperature controller in automatic

• Verify LTON REGEN HX outlet temperature (TI-127) < 380 of.

NOTE: The crew may opt to increase letdown flow to 120 GPM after placing a 75 GPM orifice in service.

RETURN TO EVENT 2

• 2

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 1 Page 1 of 3 Event

Description:

After 1A Y1A is re-energized SG # 4 controlling pressure channel fails low.

The UO will take immediate actions to restore SG # 4 level and manually control the speed of both MFPs. The crew will complete the corrective actions using AOP 18001-C, Section F.

Time Position Applicant's Action or Behavior App_licant's CREW Diagnose failure of controlling SG # 4 pressure channel:

Alarms:

STM GEN 4 HI STM PRESS RATE ALERT STM GEN 4 LO STEAMLINE PRESS ALERT STM GEN 4 FLOW MISMATCH STM GEN 4 HIILO LVL DEVIATION Indications:

SG # 4 pressure channel" (PT -545) drops to 0 pSig SG # 4 controlling steam flow channel drops to 0 MPPH Both main feed pumps speed starts lowering SGs 1, 2, and 3 feed flows start to lower UO IMMEDIATE ACTIONS:

Check steam & feed flows not matched on loop 4 Takes manual control of SG 4 MFRV and both MFPs speed Restores SG NR levels to 60-70%

SS Enters AOP 18001-C, Section F, Failure of SG Pressure Instrumentation (Crew Update)

• Verifies completion of immediate actions.

1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 1 Page 2 of 3 Event

Description:

After 1A Y1A is re-energized SG # 4 controlling pressure channel fails low.

The UO will take immediate actions to restore SG # 4 level and manually control the speed of both MFPs. The crew will complete the corrective actions using AOP 18001-C, Section F.

Time Position Applicant's Action or Behavior UO Checks controlling steam flow channel affected by pressure channel failure UO Selects unaffected channel for SG 4 steam flow NOTE: This will place SG #4 controls back to channel I which is on an alternate power supply without a battery backup.

• UO Return MFPs speed controls to automatic Returns SG 4 MFRV to automatic OATC / UO Initiate continuous actions page UO Checks SG level control maintains NR level at 65%

• 2

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 1 Page 3 of3 Event

Description:

After 1A Y1A is re-energized SG # 4 controlling pressure channel fails low.

The UO will take immediate actions to restore SG # 4 level and manually control the speed of both MFPs. The crew will complete the corrective actions using AOP 18001-C, Section F.

Time Position Applicant's Action or Behavior SS Has SSS perform following:

Notifies I & C to initiate repairs Initiate Condition Report Notify OPS Duty Manager of AOP entry SS Bypasses affected channel if desired (do not expect this to be implemented)

• SS Applies Technical Specifications:

• LCO 3.3.2 ESFAS - Functions 1e (SI), 4d(1) and 4d(2) (SLI)- action D - trip channel in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> except 4d(2) is an INFO LCO

• LCO 3.3.3 PAMS - Function 8 (SL pressure) - INFO LCO SS Returns to procedure and step in effect

• 3

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 1 Page 1 of 4 Event No.: 5 Event

Description:

SG 2 develops a 20 GPM tube leak requiring entry into AOP 18009-C. With SGTL > 5 gpm a rapid shutdown using AOP 18013-C is required. This event will be used for the required reactivity manipulation.

Time Position A~pJicant's Applicant's Action or Behavior CREW Diagnose SG Tube Leakage:

ALARMS:

INTMD RADIATION ALARM HIGH RADIATION RE-0724 - Primary to secondary leakage monitor RE-0810 - SJAE low range monitor RE-12839C - SJAE monitor INDICATIONS:

Charging flow increases if in auto (expect manual control)

PRZR level slowly lowers SS Enters AOP 18009-C, Steam Generator Tube Leak (Crew Update)

OATC / UO Initiate continuous actions page OATC Maintains PRZR level by:

• Adjusting charging flow

• Isolating letdown (only necessary if at 120 GPM letdown)

• Start additional charging pump (will not be necessary)

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 1 Page 2 of 4 Event

Description:

SG 2 develops a 20 GPM tube leak requiring entry into AOP 18009-C. With SGTL > 5 gpm a rapid shutdown using AOP 18013-C is required. This event will be used for the required reactivity manipulation.

Time Position Applicant's Action or Behavior A2PJicant's SS Direct Chemistry attempt to identify the leaking SG by initiating 31120-C UO Try to identify leaking SG by changes to level and / or feed flow rate

• OATC Verifies VCT level maintained with automatic makeup control OATC / SS Check leak rate < 5 GPM as determined by CVCS flow balance

[charging - (letdown + seal leak off)]

Leak rate will be - 20 GPM SS Initiates 18013-C, Rapid Power Reduction to be in mode 3 within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.

Also continues with AOP 18009-C step 11

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 1 Page 3 of4 Event

Description:

SG 2 develops a 20 GPM tube leak requiring entry into AOP 18009-C. With SGTL > 5 gpm a rapid shutdown using AOP 18013-C is required. This event will be used for the required reactivity manipulation.

Time Position Applicant's Action or Behavior SS Notify:

• Shift Manager to Implement EPIPs

• HP to initiate 43028-C

• SSS to implement Attachment B of 18009-C (local actions to minimize secondary contamination)

• UO Minimize Secondary contamination:

Place hotwellievel control in manual @ 50%

Initiate swapping steam loads to auxiliary steam SS Initiates a unit shutdown per AOP-18013-C, Rapid Down Power

• Performs SHUTDOWN BRIEFING

• Initiates the Continuous Actions page.

• 3

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 1 Page 4 of 4 Event No.: 5 Event

Description:

SG 2 develops a 20 GPM tube leak requiring entry into AOP 18009-C. With SGTL > 5 gpm a rapid shutdown using AOP 18013-C is required. This event will be used for the required reactivity manipulation.

Time Position Applicant's Action or Behavior OATC / UO

• Reduce Turbine load at a rate up to 5% minute:

• Maintains Tave within 6 degrees F of Tref using rods in auto and boration as necessary.

• Maintains reactor and turbine power matched.

• PRZR level and pressure maintained on program.

• SG levels maintained on program.

SS Notifies System Operator that a load reduction is in progress.

• NOTE Event will continue until adequate power maneuver completed.

• 4

Appendix 0 Required Operator Actions Form ES*D*2 Op-Test No.: 2009-301 Scenario No.: 1 Page 1 of 16 Event No.: 6 through 9 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Try to maintain PRZR level: (Continuous action from SGTL AOP)

• Maximize charging line flow

• Start a second charging pump

• Isolate letdown if not previously performed OATC Report to SS unable to maintain PRZR level through the normal charging path.

SS Directs OATC: (18009-C step 2 RNO actions)

• Trip the reactor

• Verify Reactor Trip

• Then actuate SI SS Enters EOP 19000-C, Reactor Trip or Safety Injection

• 1

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 2 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030*C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior CREW Performs IOAs of 19000 Step # 1 - Verifies Reactor Trip

• Rod Bottom Lights lit

• Reactor Trip and Bypass Breakers - Open

• Neutron Flux Lowering Step # 2 - Verifies Turbine Trip

• All Turbine Stop Valves - Closed

• Step # 3 - Checks Power to AC Emergency Buses 3a, at least 1 4160 1E bus energized 3b, all AC Emergency buses energized -4160 and 480V Step # 4 Checks if SI / Actuated

• Any SI annunciator lit

• SI BPLP status light lit

• 2

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 3 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior SS ITEAM Step # 5 - Initiates Foldout Page Step # 6 - Initiates OATC Initial Actions pages and UO Initial Actions Pages.

Step # 7 -Initiates Continuous Actions pages.

• OATC Performs OATC Initial Operator Actions of E-O.

Step # 1 - Checks both Trains of ECCS aligning per MLBs.

Step # 2 - Checks CIA - actuated per MLBs OATC Performs OATC Initial Operator Actions of E-O.

Step # 3 Checks ECCS pumps and NCP status.

• 3a, CCPs - running

• 3b, SI Pumps - running

• 3c, RHR pumps - running

• 3d, NCP - tripped

• 3

Appendix D Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 4 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 4 - CCW pumps - only two running per train Step # 5a - NSCW pumps - only two running per train Step # 5b - NSCW tower return bypass valves - in auto Step # 6a - Containment coolers running in LOW speed Step # 6b - NSCW cooler isolation valves open

• Step # 7 - CVI dampers and valves shut per MLBs Step # 8 - Containment pressure remained < 21.5 OATC Performs OATC Initial Operator Actions of E-O.

Step # 9 - Checks ECCS flows:

CRITICAL

• BIT Flow - None

• Notifies SS of no BIT flow, then aligns valves using Attachment B

• RCS pressure> 1625 psig

• RCS pressure> 300 psig

• 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 5 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 10 - Checks ECCS valve alignment proper on MLBs Step # 11 - Checks at least one ACCW pump running Step # 12 - Adjusts seal injection flow to RCPs 8 to 13 gpm.

• 5

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 6 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position A~-'icant's Action or Behavior Applicant's UO Performs UO Initial Operator Actions of E-O Step # 1 - Checks MDAFW and TDAFW pumps are running.

Notifies SS the TDAFW pump failed to start, then opens steam supply valve HV-5106 Step # 2 - Checks NR SG levels - one> 10%, If not ensures at least 570 GPM flow Step # 3 - Checks if SLI is required

• Any SL Pressure < 585 psig

• CNMT Pressure> 14.5 psig

• High rate bistables lit with low pressure SI/SLI blocked

• If any above met then verify MSIVs & BSIVs closed Step # 4 - Verifies FWI (MFRV, BFRV, MFIV, BFIVs all shut)

Step # 5 - Verifies SGBD isolated

• places hand switches for SGBD isolation valves to close

• verify SGBD sample isolations closed.

Step # 6 - Verify Diesel Generators running.

Step # 7 - Throttle AFW flow to control SG levels 10 - 65% NR Step # 8 - Verify both MFPs tripped.

Step # 9 - Check Main Generator Output breakers open.

• 6

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 1 Page 7 of 16 Event No.: 6 through 9 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Checks RCS temperature stable at or trending to 557 degrees Fusing RCS Tavg.

UO If necessary, takes actions of RNO step 8 to control RCS temperature.

• Stop dumping steam.

• Reduces AFW flow (not < 570 gpm if SG NR levels < 10% NR).

• If cool down continues shuts MSIVs and BSIVs

• If temperature> 557 F & rising then dump steam OATC Step # 9 - Checks PORVs, Block Valves, & Spray Valves

• 9a, PORVs closed and in AUTO

• 9b, Normal spray valves closed

• 9c, Power available to at least one block valve

• 9d, At least one block valve open (NOT)

• 9d RNO, verify open at least one block valve when RCS pressure> 2185 psig.

• 7

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 8 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Step # 10 - Checks if RCPs should be stopped

• 10a, CCP or SIP running

• 10b, RCS pressure < 1375 psig

• If yes then stop all RCPs if no then go to step # 11 UO/SS Step # 11 - Checks for faulted SG and transition to E-2

• SG pressures:

0 0

Any lowering in an uncontrolled manner, or Completely depressurized If yes then go to 19020-C, E-2 If no then go to step # 12 SS/UO Step # 12 - Checks for SG tubes intact.

• Directs chemistry to sample all SG one at a time for activity.

• Checks secondary radiation normal:

0 Main Steam Line Rad Monitors 0 Condenser Air Ejector Rad Monitors 0 Steam Generator Liquid Process Rad Monitors 0 SG sample radiation

• Any SG level rising in an uncontrolled manner

• If rad monitors abnormal or SG level rising uncontrollably, then go to 19030-C, E-3

• 8

Appendix 0 Required Operator Actions Form ES*D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 9 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior SS Enters EOP 19030-C, Steam Generator Tube Rupture (Crew Update)

OATC / UO Initiate Continuous Actions and Foldout Pages Monitor CSFSTs per 19200-C

• SS Directs SM to implement EPIPs OATC Maintain RCP seal injection flow 8 to 13 GPM OATC Checks if RCPs should be stopped:

• At least one CCP or SI pump running

• RCS pressure < 1375 psig (not)

• If pressure lowers < 1375 psig prior to initiation of RCS cooldown then stop all RCPs

• 9

Appendix 0 Required Operator Actions Form ES-O-2 Op-Test No.: 2009-301 Scenario No.: 1 Page 10 of 16 Event No.: 6 through 9 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior UO Identifies Ruptured SG:

• Unexpected rise in SG # 2 narrow range level, or

• Report for chemistry UO Isolate Ruptured SG ARV:

• Adjusts SG 2 ARV controller to 1160 psig (7.7.3 pot setting)

• Notes SG 2 ARV fully open CRITICAL

• Verifies SG 2 pressure < 1160 psig with ARV open

• Manually closes SG 2 ARV to stop off site emergency release

• NOTE: This will require manual operation of the ARV later to prevent lifting a code safety valve.

UO Checks at lease one MDAFW pump running & capable of feeding SG(s) needed for RCS cooldown UO Closes SG 2 supply to TDAFW pump HV-3019 NOTE: This will result in no steam to the TDAFW pump.

• 10

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 11 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

I Time Position Applicant's Action or Behavior UO Verifies SGBD isolation valves & handswitches in close UO Closes loop 2 MSIVs & BSIV's to isolate ruptured SG from intact SGs

• SS CAUTION:

Procedure should be performed in a timely manner to assure break flow in the ruptured SG is terminated before wate enters the SGs main steam piping.

UO Maintains ruptured SG that is also faulted isolated unless needed for RCS cooldown or SG activity sample UO Checks SG 2 isolated from intact SGs:

• MSIVs & BSIVs on loop 2 shut

• Steam supply to TDAFW pump (HV-3019) shut UO Controls ruptured SG level:

• Maintains feed flow until NR level> 10%, then isolates feed flow 11

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 12 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior UO Checks ruptured SG pressure> 290 psig CREW Blocks low steam line pressure SI/SLI when RCS pressure < 2000 pSig and SG high steam pressure rate alarms are clear.

UO Bypasses steam dump interlock when RCS temperature < 550 F

• UO OATC Raises intact SG levels prior to maximum rate cooldown Checks at least one RCP running CREW Determines required core exit temperature for cooldown:

Ruptured SG Core Exit Pressure Temperature (psig) (OF) eF)

> 1200 530 1100 to 1199 518 1000 to 1099 506 900 to 999 493 800 to 899 479 700 to 799 463 600 to 699 445 500 to 599 424 400 to 499 399 300 to 399 366 290 to 299 350

• 12

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 13 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior UO Initiates RCS cooldown at maximum rate using steam dumps UO Stops Cooldown when temperature < required NOTE: should continues with other EOP steps while rapid cooldown is in progress

• UO Controls intact SG NR levels 10% to 65%.

OATC Checks PRZR PORVs and Block valves closed SS Reads LOSP caution to crew OATC Resets SI & CIA UO Attempts to open Instrument Air to CNMT (HV-9378) after verifying air pressure> 100 psig. Valve will not open due HS failure.

SS Ensures HP and / or plant personnel aware of possible changes in radiation levels throughout plant as a result of resetting CIA 13

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 14 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Verifies PRZR spray valves operating as required OATC Stops RHR pumps if RCS pressure> 300 psig & stable or rising Restarts RHR pumps if RCS pressure drops below 300 psig CREW DOES NOT PROCEED BEYOND THIS POINT UNTIL RCS COOLDOWN IS COMPLETED SS Reads caution concerning expected response of ruptured SG pressure and RCS subcooling after cooldown is stopped UO Checks ruptured SG pressure stable or rising OATC / UO Checks RCS subcooling > 44 F OATC Checks if RCS depressurization termination criteria met:

• RCS pressure < ruptured SG pressure AND PRZR level> 9%

-- OR--

• RCS subcooling < 24 F

-- OR-

• PRZR level> 75%

OATC Check normal Spray is not available due to no air to containment

• OATC Checks PRZR PORV & Block Valve available 14

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 15 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior SS Reads cautions to crew:

Possible PRT rupture while using PORV causing abnormal containment conditions Cycling of PRZR PORV should be minimized OATC Depressurizes RCS using PORV to refill PRZR, must arm one train of COPS prior opening PORV

• OATC Checks RCS depressurization termination criteria met:

• RCS pressure < ruptured SG pressure AND PRZR level> 9%

-- OR--

• RCS subcooling < 24 F

-- OR-

• PRZR level> 75%

REMAINS ON THIS STEP UNTIL TERMINATION CRITERIA MET

• 15

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 through 9 Scenario No.: 1 Page 16 of 16 Event

Description:

The SGTL degrades into a SGTR with additional failures. The OATC will not be able to maintain PRZR level and will manually actuate Safety Injection. The crew will enter the EOP network and transition to 19030-C, SGTR. The OATC will have to manually establish HHSI flow through the BIT. The UO will have recognize and stop a release from the ruptured SG via a failed ARV. The UO will also have to manually start the TDAFW pump.

Time Position Applicant's Action or Behavior OATC Closes PRZR PORV & Blocks COPS OATC Checks RCS pressure rising CREW Checks if ECCS termination criteria met: (SHOULD BE MET)

RCS subcooling > 24 F, and SG NR level in one intact SG > 10%, or

> 570 GPM flow to SGs, and RCS pressure stable or rising, and PRZR level> 9%

OATC Stops both SI pumps and one CCP END OF SCENARIO

• 16

Appendix 0 Scenario Outline Form ES-D-1

• Facility: Vogtle Examiners: Lea Scenario No.: 2 Operators:

NEW Op-Test No.: 2009-301 Initial Conditions: 100% Qower, CNMT Mini-Purge in service, HV-3009 shut tagged for reQairs (emergent work). SG ARV #3 tagged for reQairs, BATP #2 tagged for reQairs, I&C recording lift coil currents in rod control for baseline PM data.

Turnover: New system Qeak record eXQected due to extremely hot weather. System loads at maximum due to unexQected unit triQ. LCO 3.7.5 Condition A (HV-3009). INFO LCO 3.7.4 (ARV) INFO TR 13.1.3 (BATP}.

Event Malf. Event Event No. No. Typ_e* Description 1 PR02A I-SS PZR pressure control channel failure (AOP 1B001-C)

@100% I-OATC LCO 3.3.1 /3.3.2/3.4.1 TS-SS 2 C001 R-ALL Condenser low vacuum (ARP 17019 & AOP 1B013-C)

• 3 100%

RH02A

@50%

C-SS C-OATC TS-SS (Set malfunction severity to 65% after low vacuum alarm to prevent unit trip)

RCS leakage into PRT (AOP 1B004-C) (15-20 gpm)

LCO 3.4.13 for RCS leakage 4 MS11A I-SS PT -507 fails low (AOP 1B001-C)

@O% I-UO 5 RH02A M-ALL LOCA Outside CNMT (EOPs 19000 to 19112 to 19111)

@95%

(Set malfunction to BO-B5% after SI to ensure RCS pressure lowering) 6 FW17 I-SS FWI failure I-UO 7 RH01A C-SS RHR pump trips due to water in room C-OATC NOTE: When SO sent to investigate - report RHR pump room full of water & steam cannot enter.

• B ES16 I-SS I-OATC SSPS train B fails to auto actuate Scenario 2 Page 1

Appendix 0 Scenario Outline Form ES-D-1

• 9 ALB35 C06,C07 C04,C03, C05 C-SS C-UO DG-1A Jacket Water Pump failure Enter C06 & C07 first Then enter C04, C03, C05 in that order with 15 second time delays.

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Event 1:

Controlling PRZR pressure control channel fails high, AOP 18001-C section C entry is required.

Verifiable Actions:

OATC- Immediately closes both PRZR spray valves, affected PORV and operates PRZR heaters as necessary. Control PRZR pressure using heaters & sprays. Select unaffected channel for control and return controls to automatic.

Technical Specifications:

3.3.1 - Reactor Trip:

Function 6 - OT11 T- Condition E Action - trip channel in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 8a - PRZR low pressure - Condition M Action - trip channel in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 8b - PRZR high pressure - Condition E action - trip channel in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />

• 3.3.2 - ESFAS Function 1d - Sllow PRZR pressure - Condition D - Action trip channel in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 8b - Interlock P11 - Condition L - Action verify status in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> 3.4.1 - DNB Condition A Action - restore DNB parameters in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

Event 2:

Low condenser vacuum due to air in leakage. Use ARP 17019 to operate condenser air removal equipment. Crew will have to rapidly lower load using AOP 18013-C to stabilize condenser vacuum.

Verifiable Actions:

UO - start mechanical vacuum pumps, start standby SJAE, reduce turbine load until vacuum stabilizes.

OATC - maintain Tave / Tref matched with rods and / or boration, and maintain SDM with boration during rapid load reduction.

Event 3:

Loss of RCS inventory to PRT will require AOP 18004-C entry for RCS Leakage. Leakage will be greater than TS limit (10 gpm identified).

Verifiable Actions:

OATC - maintain PRZR level with CVCS charging & letdown controls. Verify proper VCT automatic make up flows. Determines leakage is into PRT. Maintains Tave & Tref matched during power reduction.

UO - lowers turbine load as directed by SS/OATC Scenario 2 Page 2

Appendix 0 Scenario Outline Form ES*D*1

• Technical Specifications:

LCO 3.4.13 condition A - identified leakage> 10 gpm.

Required actions - reduce leakage within limits in 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> or Unit must be in mode 3 in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and mode 5 in 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

Event 4:

Steamline pressure transmitter PT-507 fails high causing MFP speeds to lower. This requires entry into AOP 18001-C Section I.

Verifiable Actions:

UO - Immediately place MFPs in manual control to match SG feed and steam flows. Verify steam dumps in Tave mode of operation Events 5. 6. 7. and 8:

RHR HL suction valves fail resulting in failure of RHR suction piping causing a LOCA outside CNMT and loss of emergency coolant recirculation. Crew enters 19000 and then transitions to 19112 (LOCA outside CNMT) and 19111 (Loss of Emergency Coolant Recirculation).

Verifiable Actions:

OATC- Manually actuates SI. Isolate and restore ECCS flow from each of the RHR and SI pumps discharge lines to attempt isolation of the leak. Minimize ECCS flow, make up to the RWST UO -Initiates a 100 F/hr RCS cooldown, Manually isolates feedwater to all SGs Event 9:

DG-1A Jacket Water Pump fails causing low pressure and high temperature alarms. DG will not trip due to emergency start. ARP 17035-1 will require DG shutdown if it is not needed for current plant conditions.

Verifiable Actions:

The UO will have to pull the annunciator response procedure and determine that DG should be shutdown to protect the equipment.

Critical actions:

1. Manually actuate SI due to failure of train B SSPS to ensure full ECCS flow during LOCA

2. Minimizing ECCS flow to conserve RWST inventory during LOCA outside CNMT

3. Manually isolating Feedwater to all SGs on reactor trip to prevent excessive RCS cooldown

• Scenario 2 Page 3

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 2 Page 1 of 4 Event

Description:

The controlling PRZR pressure channel will fail high, causing one PORV and both spray valves to fully open. The OATC will take immediate actions to stabilize PRZR pressure and prevent a reactor trip / SI. The crew will then enter AOP 18001-C, Section C to complete the corrective actions to mitigate this event.

Time Position Applicant's Action or Behavior CREW Diagnose high failure of PRZR pressure channel:

Alarms:

PRZR HI PRESS PRZR HI PRESS CHANNEL ALERT PV-455A OPEN SIGNAL PRZR LO PORV BLOCK Indications:

PRZR pressure channel 455 off scale high Other PRZR pressure channel < 2235 psig and lowering Both PRZR Spray valves fully open PRZR PORV 455 fully open PRZR PORV 455 & associated block valve close @ 2185 psig PORV-455 discharge temperature increasing OATC IMMEDIATE ACTIONS:

• Check RCS Pressure Stable or Rising (NOT)

• Close spray valves

• Close affected PRZR PORV

• Operate PRZR heaters as necessary SS Enters AOP 18001-C, Section C, Failure of PRZR Pressure Instrumentation (Crew Update)

Verifies immediate actions properly completed

• 1

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 2 Page 2 of 4 Event No.: 1 Event

Description:

The controlling PRZR pressure channel will fail high, causing one PORV and both spray valves to fully open. The OATC will take immediate actions to stabilize PRZR pressure and prevent a reactor trip / SI. The crew will then enter AOP 18001-C, Section C to complete the corrective actions to mitigate this event.

Time Position Applicant's Action or Behavior SS Reads caution to OATC concerning saturation of PRZR pressure master controller OATC Checks controlling channel not operating properly and verifies PORV closed and spray valves in manual OATC / UO Initiate continuous actions page OATC Manually controls PRZR pressure with heaters & sprays between 2220-2250 psig OATC Adjusts PRZR pressure master controller output to 25% in manual OATC Selects channel 457/456 for control OATC Checks PRZR pressure stable - 2235 psig OATC Returns PRZR heaters and spray valve controllers to automatic

• 2

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 2 Page 3 of 4 Event

Description:

The controlling PRZR pressure channel will fail high, causing one PORV and both spray valves to fully open. The OATC will take immediate actions to stabilize PRZR pressure and prevent a reactor trip / SI. The crew will then enter AOP 18001-C, Section C to complete the corrective actions to mitigate this event.

Time Position ~pplicant's Applicant's Action or Behavior OATC Places PORV-455 in automatic & verifies proper operation OATC Places PRZR pressure master controller in automatic

• OATC Selects channel 457 for the chart recorder OATC Checks P-11 status light on BPLB correct for conditions SS Contacts SSS to perform following:

• Notify I&C to initiate repairs

• Write Condition Report

• Contact OPS Duty Manager for AOP entry SS Elects not to bypass or trip failed channel (expected action)

• 3

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 2 Page 4 of 4 Event

Description:

The controlling PRZR pressure channel will fail high, causing one PORV and both spray valves to fully open. The OATC will take immediate actions to stabilize PRZR pressure and prevent a reactor trip / SI. The crew will then enter AOP 18001-C, Section C to complete the corrective actions to mitigate this event.

Time Position Applicant's Action or Behavior SS Initiates Technical Specification actions:

3.3.1 - Reactor Trip:

Function 6 - OTf1 T- Condition E - trip in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 8a - PRZR low pressure - Condition M - trip in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 8b - PRZR high pressure - Condition E -trip in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> 3.3.2 - ESFAS:

Function 1d - Sllow PRZR pressure - Condition D - trip in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 8b - Interlock P11 - Condition L - verify status in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />

• 3.4.1 - DNB Condition A Action - restore DNB parameters in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

SS Returns to procedure & step in effect

• 4

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 2 Page 1 of 2 Event

Description:

Loss of condenser vacuum will occur requiring the UO to start mechanical vacuum pumps and the standby SJAE. The crew will have to implement AOP 18013-C, Rapid Power Reduction, and lower power to keep condenser vacuum above the turbine trip setpoint.

This event will be the required reactivity manipulation.

Time Position Applicant's Action or Behavior CREW Diagnose loss of main condenser vacuum:

Alarms:

TURB CNDSR LO VAC Indications:

Main condenser vacuum < 28 " and lowering Main Generator MWe lowering

• UO UO Refers to ARP 17019-1 window B04 Starts both mechanical vacuum pumps Starts standby SJAE Dispatches TBO to look for leaks Verifies Sealing steam pressure 3-5 psig Verifies Circulating Water Pumps are operating SS Initiates power reduction per AOP-18013-C, Rapid Down Power

• Performs BRIEFING

• Initiates the Continuous Actions page .

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 2 Page 2 of2 Event

Description:

Loss of condenser vacuum will occur requiring the UO to start mechanical vacuum pumps and the standby SJAE. The crew will have to implement AOP 18013-C, Rapid Power Reduction, and lower power to keep condenser vacuum above the turbine trip setpoint.

This event will be the required reactivity manipulation.

Time Position Applicant's Action or Behavior OATC / UO

• Reduce Turbine load at a rate up to 5% minute:

• Maintains Tave within 6 degrees F of Tref using rods in auto and boration as necessary.

• Maintains reactor and turbine power matched.

• PRZR level and pressure maintained on program.

• SG levels maintained on program.

SS Notifies System Operator that a load reduction is in progress.

10% POWER REDUCTION RESTORES VACUUM

• 2

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 3 Scenario No.: 2 Page 1 of 2 Event

Description:

This event will cause 15-20 GPM RCS leakage into the PRT via the train A RHR hot leg suction piping and the suction relief to the PRT. The crew will enter AOP 18004-C, RCS leakage after realizing charging flow is higher than normal and PRZR level is lowering.

Time Position Applicant's Action or Behavior CREW Diagnose loss of Reactor Coolant inventory:

Alarms:

NONE Indications:

Charging flow control valve FV-121 @100%

PRZR level lowering PRT level & pressure slowly increasing RHR discharge pressure increased

• SS Enters AOP 18004-C, Section A, for RCS Leakage (Crew Update)

SS Verifies unit in mode 1 OATC / UO Initiate continuous actions page OATC Maintains PRZR level:

• Adjust charging flow

• Isolate letdown

• Start standby charging pump (not necessary)

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 2 Page 2 of2 Event No.: 3 Event

Description:

This event will cause 15-20 GPM RCS leakage into the PRT via the train A RHR hot leg suction piping and the suction relief to the PRT. The crew will enter AOP 18004-C, RCS leakage after realizing charging flow is higher than normal and PRZR level is lowering.

Time Position Applicant's Action or Behavior OATC Maintains VCT level using automatic control SS Contacts SM to implement EPIPs OATC Verifies PORVs and Sprays closed UO Ensures no load changes in progress OATC Check PRZR pressure trending to 2235 pSig OATC Verifies CNMT conditions normal CREW Initiates RCS Leak rate calculation CREW Determines leakage is into PRT using 18004-C, Attachment A SS Determines leak cannot be isolated SS Applies Technical Specifications:

LCO 3.4.13 Condition A for identified leakage> 10 GPM Reduce leakage within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> or place unit in mode 3 in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> SS Begins unit shutdown to comply with Technical Specifications

• 2

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 2 Page 1 of 2 Event No.: 4 Event

Description:

Steam pressure controlling MFPs speed will fail low causing MFPs speed to decrease. SG levels will start to lower due to the under feed situation. The UO will take immediate action to manually control MFP speeds and restore feed flow to prevent a reactor trip on Lo-Lo SG levels. The crew will then enter AOP 18001-C to complete the actions to mitigate this event.

Time Position Applicant's Action or Behavior CREW Diagnose failure of main steam pressure failure:

Alarms:

SG LVL DEVIATION (all 4 loops)

Indications:

• All 4 SG levels lowering

• All 4 SG feed rates below steam rates

• Both MFP speeds decreasing

• M FP discharge pressure lowering

• UO IMMEDIATE ACTIONS:

Checks steam & feed flows NOT matched on ALL SGs Manually controls MFP master controller and MFRVs as necessary to restore SG levels SS Enters AOP 18001-C,Section I, Failure of MFP Control Instrumentation (Crew Update)

Verifies proper completion of immediate actions OATC / UO Initiates Continuous actions page UO Maintains SG NR levels> 40% or trips the reactor and goes to 19000-C 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 2 Page 2 of2 Event

Description:

Steam pressure controlling MFPs speed will fail low causing MFPs speed to decrease. SG levels will start to lower due to the under feed situation. The UO will take immediate action to manually control MFP speeds and restore feed flow to prevent a reactor trip on La-La SG levels. The crew will then enter AOP 18001-C to complete the actions to mitigate this event.

Time Position Applicant's Action or Behavior UO Verifies manual MFP speed control has stabilized MFP speeds and adjusts manual controls to keep DIP 100 to 225 psi UO Checks PT-507 has failed low UO Places steam dumps in Tave mode of operation using SOP 13601-1

• UO SS Returns feed flow controls to AUTO as necessary Contacts SSS to perform the following:

• Notify I&C to initiate repairs

• Write a Condition Report

• Notify OPS Duty Manager of AOP entry SS Returns to procedure and step in effect

• 2

Appendix 0 Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 2 Page 1 of 19 Event No.: 5-9 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior CREW Diagnoses deterioration of RCS leakage:

Alarms:

PRZR LO LEVEL DEVIATION PRZR CONTROL LO PRESS AND HEATERS ON PRZRPRESSLOPORVBLOCK OVERTEMP ~ T ROD BLOCK AND RUNBACK ALERT RHR PMP 1 DISCH HI PRESS LVL 0 LEAK DETECTED (Back Panel)

• Indications:

PRZR level lowering with maximum charging flow & letdown isolated OATC Notifies SS of inability to maintain PRZR level Trips reactor & verified trip, then actuates SI SS Enters EOP 19000-C, Reactor Trip or Safety Injection

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 2 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position AppJicant's Action or Behavior CREW Performs IOAs of E-O Step # 1 - Verifies Reactor Trip

• Rod Bottom Lights lit

• Reactor Trip and Bypass Breakers - Open

• Neutron Flux Lowering Step # 2 - Verifies Turbine Trip

• All Turbine Stop Valves - Closed Step # 3 - Checks Power to AC Emergency Buses 3a, at least 1 4160 1E bus energized 3b, all AC Emergency buses energized -4160 and 480V Step # 4 Checks if SI I Actuated

• Any SI annunciator lit

• SI BPLP status light lit SS I TEAM Step # 5 - Initiates Foldout Page NOTE: Expect Rep trip criteria to eventually be met Step # 6 - Initiates OATC Initial Actions pages and UO Initial Actions Pages.

Step # 7 - Initiates Continuous Actions pages.

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 3 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 1 - Checks both Trains of ECCS aligning per MLBs.

If not previously manually actuated notes that SI train B not aligning.

Notifies SS and then manually actuates SI.

Step # 2 - Checks CIA - actuated per MLBs OATC Performs OATC Initial Operator Actions of E-O.

Step # 3 Checks ECCS pumps and NCP status.

• 3a, CCPs - running

• 3b, SI Pumps - running

• 3c, RHR pumps - Notifies SS that RHR pump 1 is tripped

• 3d, NCP - tripped

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 4 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 4 - CCW pumps - only two running per train Step # Sa - NSCW pumps - only two running per train Step # Sb - NSCW tower return bypass valves - in auto Step # 6a - Containment coolers running in LOW speed Step # 6b - NSCW cooler isolation valves open Step # 7 - CVI dampers and valves shut per MLBs

• Step # 8 - Containment pressure remained < 21.S OATC Performs OATC Initial Operator Actions of E-O.

Step # 9 - Checks ECCS flows:

• BIT Flow

• RCS pressure < 162S psig

• SI pump flow

• RCS pressure> 300 psig

• 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Scenario No.: 2 Page 5 of 19 Event No.: 5-9 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 10 - Checks ECCS valve alignment proper on MLBs Step # 11 - Checks at least one ACCW pump running Step # 12 - Adjusts seal injection flow to RCPs 8 to 13 gpm.

• 5

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 6 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior UO Performs UO Initial Operator Actions of E-O Step # 1 - Checks MDAFW and TDAFW pumps are running.

Step # 2 - Checks NR SG levels one> 10%

Step # 3 - Checks if SLI is required

• Any SL Pressure < 585 psig

• CNMT Pressure> 14.5 psig

• High rate bistables lit with low pressure SI/SLI blocked

• If any above met then verify MSIVs & BSIVs closed Step # 4 - Verifies FWI (MFRV, BFRV, MFIV, BFIVs all shut)

FWI will fail UO will have manually close all valves to achieve FWI and stop potential overfeeding of SG's Step # 5 - Verifies SGBD isolated

• places hand switches for SGBD isolation valves to close

• verify SGBD sample isolations closed.

Step # 6 - Verify Diesel Generators running.

Step # 7 - Throttle AFW flow to control SG levels 10 - 65% NR Step # 8 - Verify both MFPs tripped.

Step # 9 - Check Main Generator Output breakers open.

• 6

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 7 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Checks RCS temperature stable at or trending to 557 degrees Fusing RCS Tavg. Or RCS WR Cold leg temperatures without RCPs running.

UO Takes actions of RNO step 8 to control RCS temperature.

• Stop dumping steam.

• Reduces AFW flow (not < 570 gpm if SG NR levels < 10% NR).

If cooldown continues shuts MSIVs and BSIVs If temperature> 557 F & rising then dump steam OATC Step # 9 - Checks PORVs, Block Valves, & Spray Valves

• 9a, PORVs closed and in AUTO

• 9b, Normal spray valves closed

• 9c, Power available to at least one block valve

• 9d, At least one block valve open

• 9d RNO, verify open at least one block valve when RCS pressure> 2185 psig.

• 7

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 8 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Step # 10 - Checks if RCPs should be stopped

• 10a, CCP or SIP running

• 10b, RCS pressure < 1375 psig

• If yes then stop all RCPs if no then go to step # 11

• UO/SS Step # 11 - Checks for faulted SG and transition to E-2

• SG pressures:

0 0

Any lowering in an uncontrolled manner, or Completely depressurized

• go to step # 12 SS/UO Step # 12 - Checks for SG Tubes intact.

• Directs chemistry to sample all SG one at a time for activity.

• Checks secondary radiation normal:

0 Main Steam Line Rad Monitors 0 Condenser Air Ejector Rad Monitors 0 Steam Generator Liquid Process Rad Monitors 0 SG sample radiation

• Any SG level rising in an uncontrolled manner

• 8

Appendix 0 Required Operator Actions Form ES*D*2 Op-Test No.: 2009-301 Scenario No.: 2 Page 9 of 19 Event No.: 5-9 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OA TC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position ~f!Plicant's Applicant's Action or Behavior OATC Step # 13 - Check if RCS intact inside CNMT:

• CNMT Radiation - Normal

• CNMT Pressure - Normal

• CNMT Emergency Recirculation Sump levels - Normal OATC/UO Step # 14 - Check if ECCS flow should be reduced:

a. RCS Subcooling - > 24 F

b. Secondary Heat sink available:

0 Total AFW flow> 570 gpm, or 0 NR level in at least one SG > 10%

c. RCS pressure stable or rising If any of above not met go to step 22 (this will be the case)

d. PRZR level - > 9%

If not met try to stabilize RCS pressure with normal PRZR spray.

Return to step 14a.

OATC/UO Step # 22 -Initiate CSFSTs per 19200-C, F-O

• 9

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 10 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior SS Step # 23 - Initiate 91001-C, E-Plan Classification & Implementing instructions UO Step # 24 - Check intact SG levels:

a. NR level - at least one> 10% [32% adverse]

b. Maintain NR levels 10%-65%

• UO Step # 25 - Check Auxiliary Building leak detection systems:

a. Plant Vent Radiation Monitors - Normal

• RE-12442A, B, C

• RE-12444C

b. Aux. Bldg break detection system on QPCP - all leak detection status lights NOT lit The RHR pump 1 room leak detection light will be lit and the level D leak detected annunciator will be alarming (these are back panel indications)

If any above abnormal and cause is loss of RCS inventory, then go to 19112-C, ECA 1.2 NOTE: If SO sent to investigate, he will report RHR pump room is full of water & steam NOTE: Crew may transition to 19010-C based on abnormal PRT conditions. If they do they should then transition at step 18 of 19010 to the LOCA outside CNMT EOP (19112-C)

• 10

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 11 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior SS Enters EOP 19112-C, LOCA Outside Containment (Crew Update)

OATC Verifies proper RHR & SI systems alignment:

• HL suctions (HV-8701A18701 B/8702A/8702B) - Closed

• HL injection valve (HV-8840) - Closed

• SI HL injection valves (HV-8802A18802B) - Closed OATC Tries to identify and isolate RHR cold leg injection break:

• Close cold injection valve (HV-8809A)

• Check for rising RCS pressure - It will be lowering

• Reopen cold injection valve

• Repeat process for Train B

• 11

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR Page 12 of 19 suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Tries to identify and isolate SI cold leg injection line break:

• Close cold leg injection valve (HV-8821A)

• Check for rising RCS pressure - it will be lowering

• Reopen cold leg injection valve

• Repeat process for Train B

• Close common cold leg injection valve (HV-8835)

• Check for rising RCS pressure - it will be lowering

• Reopen HV-8835 OATC Check RCS pressure rising - it will be lowering SS Transitions to EOP 19111-C, Loss of Emergency Coolant Recirculation (Crew Update)

SS Reads caution to stop ECCS or CS pumps if suction source is lost to crew

• 12

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 13 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position ~~Iicant's Applicant's Action or Behavior OATC Check emergency coolant recirculation capability restored

• CNMT sump levels will not recover - recirculation capability will not be restored in this scenario.

OATC Monitors RHR pump B suction condition:

Stable parameters- amps/flow/pressure SS Reads caution to crew concerning restarting SI equipment following SI reset on an LOSP OATC Reset S I if not reset CREW Determines CNMT Spray pump and CNMT coolers - Not needed UO Notes DG-1A JW low pressure and high temperature alarms Refers to ARP 17035-1

• 13

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 14 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior SS/UO Determine DG-1 B not needed for current plant conditions and emergency stops the DG to protect the equipment from further damage.

OATC Check RWST level> 8% (this is a continuous action)

If level falls below 8% the crew will stop all ECCS and CS pumps taking suction from the RWST

• SS {OATC SS Determines no CNMT spray pumps are required and none are running Determines CNMT spray will not have to be aligned for recirculation SS/OATC Initiates makeup to the RWST:

CRITICAL

• SOP 13701-1, Boric Acid System

--OR-

• Attachment A, RWST MAKEUP FROM THE SPENT FUEL POOL

• 14

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 2 Page 15 of 19 Event No.: 5-9 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior UO Controls SG NR levels 10% to 65%

Checks CST level> 15%

UO Initiate RCS cooldown to cold shutdown:

• Monitor SOM (Will be assigned to SSS)

• Cooldown rate in cold legs < 100 F/hr OATC I UO Block Low Steam line pressure SI/SLI when PRZR pressure < 2000 psig and high steam pressure rate alarms are clear OATC Reduces ECCS flow to a single train to conserve RWST inventory while still cooling core CRITICAL

• 15

Appendix D Required Operator Actions Form ES-D-2 Op-Test No.: 2009-301 Scenario No.: 2 Page 16 of 19 Event No.: 5-9 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Verifies CNMT Sump Suction valves (HV-8811A18811 B) closed to prevent backflow from RWST to CNMT sumps OATC Ensures only RCP 4 is running OATC Checks alternate ECCS termination criteria:

• RVLlS indication:

RCP(s) running Re~uired Indication Required 0 Full Range greater than 62%

1 Dynamic Range greater than 25%

2 Dynamic Range greater than 34%

3 Dynamic Range greater than 50%

4 Dynamic Range greater than 72%

RCS Subcooling > 74 F - Probably not met

• 16

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 17 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position A licant's Action or Behavior OATC / SS Determines minimum ECCS flow using Figure 1:

900 800 700

E Q.

~ 600

~

~ 500 u..

en 400 (J

(J w

300 200 100 1 10 100 1000 10000 TIME SINCE REACTOR TRIP (MINUTES)

• 17

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 18 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate SI and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior A,,-plicant's OATC Throttles ECCS flow to minimum value SS /OATC Checks for adequate ECCS flow:

Applicable RVLlS indication:

RCP(s)

• running runninfl 0

1 2

Required Reguired Indication Full Range greater than 62%

Dynamic Range greater than 25%

Dynamic Range greater than 34%

3 Dynamic Range greater than 50%

4 Dynamic Range greater than 72%

• Core Exit TC's - Stable or lowering If either condition not met then raise ECCS flow

• 18

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5-9 Scenario No.: 2 Page 19 of 19 Event

Description:

The RCS leakage into the PRT will increase above the capacity of the RHR suction relief, resulting in failure of the RHR suction piping. This will result in a LOCA outside containment. Leakage to the PRT will stop at this point. The OATC will not be able to maintain PRZR level. The crew will actuate Sl and enter the EOPs. Additional failures include a trip of the RHR in the room with the LOCA and a failure of FWI.

Time Position Applicant's Action or Behavior OATC Depressurize RCS to reduce RCS subcooling:

• 24 to 34 F

-- OR-

• PRZR level> 75%

END OF SCENARIO

• 19

Appendix 0 Scenario Outline Form ES-D-1

• Facility:

Examiners:

I VogUe Lea I Scenario No.:

Operators:

3 Op-Test No.: 2009-301 MODIFIED Initial Conditions: (IC06) Plant is at 3.5% power with power ascension in progress at BOL. Ready to swap SG 4 to BFRV.

Pre load the following: auto reactor trip failure (ES01), SI train "A" auto actuation failure (ES08)

Tumover:

BOL - power ascent in progress after an outage with reactor power approximately 3.5%. MFPT "A" has been placed in service, AFW flow 250 gpm to SG 4. Crew is completing Step 4.1.8 of UOP 12004-C. Swap from AFW to the Bypass Feed Regulation Valve (BFRV) for SG 4 then continue power increase.

Event Malf. No. Event Event Description No. Type*

1 N/A N-UO UO will perform a swap from AFW to the BFRV on SG 4. The OATC will control N-SS reactor power stable (or as SS directs) during the swap.

• 2 3

N/A SG02G@

0%

R-ALL I-SS*

I-UO TS-SS Power ramp from 3.5% until plant is in Mode 1.

Controlling SG Level Transmitter for Loop # 3 fails low. 18002-C section E for Failure of Steam Generator Level Instrumentation. TS 3.3.1 (Reactor Trip), 3.3.2 (ESFAS), 3.3.3 (PAMS) 4 PR03A@ I-SS Controlling PRZR level instrument LT-459 fails high.

100% I-OATC 18001-C, Section D Failure of PRZR Level Instrumentation TS-SS TS 3.3.1 (Rx. Trip) TS 3.3.3 (PAMS) INFO TS 3.3.4 Remote SID 5 CC03A@ C-SS Loss of CCW Train A (pipe break at discharge header). 18020-C Loss of 100% C-UO Component Cooling Water. TS 3.7.7 Component Cooling Water TS-SS 6 EL13B C-ALL Loss of 120V AC 1E Vital Bus 1BY1B (results in ATWT with manual Rx. trip)

ES01 Crew will enter E-O after the OATC performs a manual reactor trip and transition to ES-0.1 to stabilize the plant.

Proceed to next event after AFW flow is throttled in ES-O.1 7 PR01B@ M-ALL PRZR Code Safety fails open resulting in LOCA to the PRT.

50% Crew will re-enter E-O after manually actuating safety injection. Train B ES08 I-OATC components will have to be manually aligned due to loss of BY1 B.

• * (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Scenario 3 Page 1

Appendix 0 Scenario Outline Form ES-O-1

• Event 1:

Perform swap of AFW to Main Feed water. AFW flow will be swapped to the BFRV in accordance with UOP-12004 step 4.1.8.

Verifiable Action:

UO Swaps from AFW to BFRV while controlling SG level.

OATC Maintains reactor power stable during BFRV swap by manipulation of control rods or boration.

Event 2:

Perform power ramp from 3.5% to greater than 5% (Mode 1 entry). Crew will perform steps of UOP-12004 section for Power Ascent.

Verifiable Actions:

OATC - Power increase. Operate control rods and the CVCS boration controls while the UO - Initiates actions to prepare for Turbine startup.

Event 3:

Controlling PRZR level channel LT-459 will fail high resulting in an automatic reduction of charging flow via FV-0121. This will require entry into AOP-18001-C, section D for Failure of PRZR level instrumentation.

Verifiable Actions:

OATC - Takes manual control of charging flow control valve FV-0121 to restore charging flow to normal or isolate letdown. Selects an unaffected channel for control and restores letdown if initially isolated.

Technical Specifications:

3.3.1 - Reactor Trip - Function 9 - Condition M - trip bistables within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> 3.3.3 - PAMS - Function 6 - INFO only 3.3.4 - Remote SID - Function 8 - Condition B - restore within 30 days Event 4:

Controlling Steam Generator # 3 Level Transmitter will fail low causing the BFRV to fully open requiring the BOP to take manual control. This will require entry into AOP-18001, section E for failure of Steam Generator Level Instrumentation.

Verifiable Actions:

UO Performs lOA to take manual control of MFRV # 3 to control SG # 3 level.

Technical Specifications:

3.3.1 - Reactor Trip - Function 13 - Condition E - trip bistables within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />

• 3.3.2 - ESFAS:

Function 5c - P14 - Condition I - trip bistables within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 6c - AFW - Condition D - trip bistables within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Scenario 3 Page 2

Appendix 0 Scenario Outline Form ES-D-1

• 3.3.3 - PAMS - Function 5 - INFO Only Event 5:

CCW train A discharge header will fail requiring entry into AOP-18020 for Loss of CCW.

Verifiable Actions:

UO Place Train A CCW Pumps in PTL, Close demin water makeup valve, Start up train B CCW.

Technical Specifications:

3.7.7 Component Cooling Water (CCW) - Condition A - restore within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> 3.4.6 RCS Loops Mode 4 - INFO only Event 6:

Loss of 120V AC 1E Vital Bus 1BY1 B will occur. This will result in an A TWT condition due to NI35 loss and 2/4 coincidence made up on SG Lo-Lo Level bistables. The OATC will manually trip the reactor and the crew will enter E-O and transition to ES-O.1 to stabilize the plant.

Verifiable Actions:

OATC Performs manual reactor trip when ATWT condition recognized.

Event 7:

Shortly after the reactor trip, PRZR code safety valve will slowly fail open over several minutes resulting in a LOCA to the PRT. The crew will have to manually actuate SI Train "A" and manually align SI Train "B" components due to the loss of 1BY1 B.

Verifiable Actions:

OATC Manual SI actuation due to RCS pressure lowering uncontrolled. Perform manual alignment of Train "B" ECCS 1 SI components.

UO Performs manual start of DG "B". Performs manual alignment of Train "B" CIA 1 CVI valves and dampers.

Critical Tasks:

1. Manual reactor trip.

2. Manual Safety Injection actuation.

• Scenario 3 Page 3

Appendix D Scenario Outline Form ES-D-1 Draft

• I FaclJlly' I Vogue 1Facility:

Examiners:

VogUe I No.:

Scenario No,:

Operators:

3 Op-Test No.: 2007-301 2007*301 Initial Conditions: is at 3.5% power with power ascension in Plant Is In progress al at BOL.

BOl. Ready to swap to BFRV.

I Pre load Ike the follow following failure (ES01).

ing : auto reactor trip fallure II 5 auto start failure (CC04E)

(ES01), 51 SI train "A" auto actuation failure (ESOS)

(ESOS). CCW pump Tumover.

Turnover: Storms are approaching 'rom from the Southwest and high winds are possible within Ihe the hour.

BOl - power ascent1n BOL ascent In progress after an outage with reactor power approximately 3.5%. MFPT -A" "A" has been placed service , AFW flow currently aboul250 in service, about 250 gpm per SG. Step 4.1.8 of UOP 12004-<; l2004-C Isis the next step to be performed.

Swap from AFW 10 Regulation Valves (BFRV) and continue the power ascent to the Bypass Feed Regulatjon ascent.

I Event Malt. No.

Matf. No .11 Event Event Description No. Position Type Typo'

• M'W AFW N BOP will perform a sw swap ap from AFW to the BFRV B FRV on all 4 SG one at a time.

1 swap to BFRV The RO RQ will control reactor power stable (or as SS directs) during the swaps.

BOP / RO RC11C@

RCl1C @ I Loop 11 loop # 3 ReS RCS Flow Instrument Fails Low Falls low 0% lS0Di-C, 18001-C, section A for Failure of RCS loop Loop Flow Instrumentation 2

SRO (TS) TS 3.3.1 (Reactor Trip)

SG02G@ I Controlling SG Level Transmitter for loop Loop 11# 3 fails low 0% 18002-C section E for Failure of Steam Generator Levellnstrumenlallon 18002*C level Instrumentation 3 BOP 3.3.1 (Reactor Trip), 3.3 TS 3.3.1 3.3.2

.2 (ESFAS). 3.3.3 (PAMS)

SRO (TS)

Power Powe' R Power ramp from 3.5% until plant Is In in Mode 1.

4 Ramp RO CC01A C CCW pump 111 # 1 trip with CCW pump 11# 5 falls fails to start.

5 S BOP 18020*C Loss of Component Cooling Water SRO (TS) TS 3.7 3.7.7

.7 Component Cooling Water EL13B El13B C Loss of 120V loss l20V AC 1E Vital Bus 1BV1B lBY1B (results In ATWT with manual Rx. trip) 6 RO Crew will enter e-o E-O after aft.e r the RD RO perlonns performs a manual react reactor or trip and

.. nd transition translUon ES-O.1 to stabilize the plant.

to ES-O.1 PROiB@

PR01B@ M M PRZR Code Safety fails falls open resulting In LOCA to the PRT.

7 50%

will re-enter e-o Crew wilt E-O after manually actuating safety injection. Train B ALL components will haye have to be manually aligned due to loss of BViB. BY1 B.

I . * (R)eactivity. (I)nstrument, (N)ormal. (R)eactlvity. (I)nstrumenl, (C)omponent, (C)omponent. (M)ajor Scenario Event Description Vogtle-2007-301 Draft

• Vogtle 2007-301 Scenario # 6 (low power-backup) (Low Power Ops 13.5% on AFW)

Event 1 Perform swap of AFVVAFW to Main Feed water. AFW flow will be swapped to the BFRV in accordance with UOP-12004 step 4.1.8. 4.1 .8.

Verifiable Action: (BOP) Swaps from AFW AFIN to BFRV one at a time while controlling SG levels.

Verifiable Action: (RO) Maintains reactor power stable during BFRV swaps by manipulation of control rods or boration.

Event 2 RCS loop flow transm low on loop # 3. This will require entry into AOP-18001 itter fails Iowan transmitter AOP- 18001 section A for Fai Failure lure of RCS Loop Flow Instrumentation.

Technical Specifications: LCO 3.3.1 3.3. 1 Event 3 Controlling Steam Generator # 3 Level Transmitter will fail low causingcausi ng the BFRV to fully open requ iring the BOP to take manual control. This will require entry into AOP-1 requiring 8001, AOP-18001, section E for failure of Steam Generator Level Instrumentation Instrumentation..

Verifiable Action: (BOP) Perfonns Performs IDA lOA to take manual control of MFRV # 3 to control SG # 3 level.

SG#

Technical Specificalions:

Specifications: LCO LeO 3,3.1, 3.3.1 , LCO 3.3.2, 3,3,2, and LCO 3.3,3 3.3.3 Event 4 Perform power ramp from 3.5% to greater than 5% (Mode 1 entry). entry). Crew will perform steps of UOP-12004 section for POYIe Powerr Ascent.

Verifiable Action increase. RO will operate control rods and the eves Action:: (RO) Power increase. CVCS boration controls while the BOP initiates actions to prepare for Turbine startup.

Event 5 entered,, CCW pump # 1 will trip with failure of CCW pump # 5 to Once Mode 1 is entered start. This will require a manual start of cew automatically start. CCW pump # 5 and entry into AOP-18020 AO of CCW.

P-1e020 for Loss ofCCW, Verifiable Action: (BOP). BOP will manually slart Aclion: (BOP), start CCW pump # 5, 5.

Technicall Specifications: 3.7.7 for Component Cooling Water (CCW)

Technica

Scenario Event Description Vogtle-2007 -301 Vogtle-2007-301 Draft

• Event 6 Loss of 120V AC 1E Vital Sus Bus 1SY1 S will occur. This will result in an A BY1 B due to NI35 loss and 2/4 coincidence made up on SG Lo-Lo TWT condition ATWT Lo-La Level bistables. The RO will manually trip the reactor and the crew will enter E-O and transition to ES-O.1 ptant.

the plant.

ES-O.1 to stabilize Verifiable Action: (RO) Performs manual reaclor reactor trip when ATWT ATINT condition recognized.

recognized .

Critical Task: Manual reactor trip.

Event Event? 7 Shortly after the reactor trip. PRZR code safety valve will slowly fail open over several reaclor trip, minutes resulting in a LOCA to the PRT. The crew Will will have to manually actuate SI81 Train

~A" and manually align SI "A" 81 Train "8" "S" components due to the loss of 1 1BY1B.

SY1 S.

Verifiable Action: (RO) Manual SI 81 actuation due to ReS RCS pressure pressure lowering uncontrolled uncontrolled..

Verifiable Action: (RO)

(RO ) Performs manual alignment of Train "S- 'S" EeeS ECCS I/ SI components components..

Verifiable Action: (SOP)

(BOP) Performs manual start of DG "B", "S".

Verifiable Action: (SOP) Performs manual alignment of Train "S" ~ B~ CIA I/ CVI CVI valves and dampers.

Critical task: Manual Safety Injection actuation.

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 3 (low power)

Page 1 of 1 Event

Description:

The scenario will start with the crew at 3.5% power while performing the steps of UOP-12004 for Power Ascent. MFPT "An has been placed into service. The crew will initiate a swap from AFW to the BFRV for loop 4.

Time Position Applicant's Action or Behavior Al?plicant's UO Transfers from Auxiliary Feed Water to Bypass Feed Water, by performing the following:

• Verifies MFPT Delta P maintained between 100 - 150 psid.

• Stabilizes SG NR level between 60% and 70% and note total feed flow.

• Slowly open the BFRV and verify slight increase in feed water flow.

• Close the Auxiliary Feed Water Supply valve.

• Adjust the BFRV to re-establish total feed flow as noted in previous step b.

• Stabilize SG level and place the BFRV in automatic.

• UO Stops MD AFW pumps and places in standby per 13610-1, AFW.

• Partially opens MDAFW pump throttle valves

• Stops MDAFW pump

• Fully Opens AFW throttle valves

• 1

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 3 (low power)

Page 1 of2 Event

Description:

The crew will initiate a power ramp from 3.5% power to > 5% for Mode 1 entry. All entry requirements for Mode 1 will have been met according to shift turnover.

Time Position A~~licant's Ap~licant's Action or Behavior SS Co-ordinates the following with chemistry if not already performed during the swap over from AFW to M FW.

• Notifies chemistry that feeding via MFW has commenced.

• Verifies that PRZR Steam space sample is in service.

• Initiates actions to place N-16 radiation monitor RE-0724 in service.

• Ensures SGBD is in service.

• Directs ABO to adjust SGBD condensate return temperatures.

OATC Energizes at least on bank of PRZR heaters until power> 30%.

SS Verifies AFW in standby readiness prior to exceeding 5% power.

OATC Initiates raising reactor power to between 16% and 20%.

OATC / UO Maintains plant conditions during power increase as follows:

• Tave within 2 F of program Tave using steam dumps in the Steam Pressure Mode.

• Steam Generator levels between 60% and 70% NR.

• PRZR Pressure 2235 + or - 15 psig.

• PRZR level within 5% of program with normal charging and letdown in service.

• Monitors TavelTref Deviation Alarm during remainder of startup.

1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 3 (low power)

Page 2 of2 Event

Description:

The crew will initiate a power ramp from 3.5% power to > 5% for Mode 1 entry. All entry requirements for Mode 1 will have been met according to shift turnover.

SS When power reaches 5% as determined by higher of Average PR NIS or Average Loop Delta T.

• Logs Mode 1 entry into the Unit Control Logbook .

• Notifies Chemistry of the Mode Change .

NOTE: After adequate power change, proceed to Event # 3.

• 2

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 3 (low power)

Page 1 of 3 Event

Description:

Controlling SG Level transmitter for Loop # 3 fails LOW. This will require the crew to enter AOP-18001 section E for Failure of SG NR Level Instrumentation. The BFRV for loop # 3 will open requiring the BOP to perform IOAs and take manual control of the valve to prevent FWI on Hi-Hi SG level.

Time Position Applicant's Action or Behavior UO Diagnoses the low failure of SG # 3 NR level instrument:

Symptoms / alarms / indications:

• STM GEN 3 HI / LO LVL DEVIATION

• STM GEN 3 LO LEVEL

• STM GEN 3 LO / LO LVL ALERT

• Steam generator # 3 controlling level channel reading down scale low.

• BFRV for loop # 3 SG throttling open.

• MFW flow to SG # 3 increasing.

• Other 3 level channels on SG # 3 rising.

UO Performs IOAs of AOP-18001 section E

• Checks steam and feed flows matched on all SGs (not loop # 3)

• Takes manual control of SG # 3 BFRV to restore SG # 3 level between 60% and 70%.

SS Enters AOP-18001-C, section E for Failure of SG NR Level Instrumentation.

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 3 Scenario No.: 3 (low power)

Page 2 of 3 Event

Description:

Controlling SG Level transmitter for Loop # 3 fails LOW. This will require the crew to enter AOP-18001 section E for Failure of SG NR Level Instrumentation. The BFRV for loop # 3 will open requiring the BOP to perform IOAs and take manual control of the valve to prevent FWI on Hi-Hi SG level.

UO Selects an unaffected control channel.

UO Returns feed flow control to automatic.

SS/CREW Initiates the Continuous Actions Page.

UO Checks SG level control maintains NR level at 65%.

SS Notifies I & C to initiate repairs, informs Operation Duty of the AOP entry.

• 2

Appendix 0 Required Operator Actions Form ES-O-2 Op-Test No.: 2009-301 Scenario No.: 3 Page 3 of 3 (low power)

Event No.: 3 Event

Description:

Controlling SG Level transmitter for Loop # 3 fails LOW. This will require the crew to enter AOP-18001 section E for Failure of SG NR Level Instrumentation. The BFRV for loop # 3 will open requiring the BOP to perform IOAs and take manual control of the valve to prevent FWI on Hi-Hi SG level.

Time Position ~~licant's Applicant's Action or Behavior SS Identifies requirement to trip the affected bistables listed in Table B1 of 18001-C within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> of the channel failure to comply with the following requirements Tech Specs.

3.3.1 - Reactor Trip - Function 13 - Condition E 3.3.2 - ESFAS:

Function 5c - P14 - Condition I Function 6b - AFW - Condition 0 3.3.3 - PAMS - Function 5 - INFO Only

• 3

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 3 (low power)

Page 1 of 2 Event

Description:

Controlling PZR level channel fails high causing a reduction of charging flow.

This will require the crew to enter AOP 18001-C, Section D, Failure of PRZR Level Instrumentation.

Time Position Applicant's Action or Behavior OATC Diagnoses that PZR level channel 459 has failed high and informs SS of the failure:

Indications:

PZR level channell (459) goes to 100%

Charging flow lowers from 132 gpm Possible flashing in CVCS letdown line (flow oscillations)

Alarms:

PRZR CONTROL HI LEVEL DEV AND HEATERS ON PRZR HI LEVEL CHANNEL ALERT REGEN HX LTDN HI TEMP NC PUMP LO FLOW CHARGING LINE HI/LO FLOW RCP SEAL WATER INJ LO FLOW SS Enters AOP 18001-C, Section D Crew update on AOP entry OATC Checks PRZR level not trending to program:

• Adjusts charging to prevent letdown from flashing -OR-

• Isolate letdown OATC Maintains seal injection flow to all RCPs 8 to 13 gpm OATC Selects unaffected channel for control and chart recorder

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 3 (low power)

Page 2 of2 Event

Description:

Controlling PZR level channel fails high causing a reduction of charging flow.

This will require the crew to enter AOP 18001-C, Section D, Failure of PRZR Level Instrumentation.

OATC Restores letdown flow per SOP 13006-1 if required OATC Returns PRZR level control to automatic SS Notify I&C to initiate repairs, Duty manager of AOP entry, SSS to generate CR.

• SS Determines Tech Spec impact:

3.3.1 Reactor Trip-Function 9-INFO only 3.3.3 PAMS - Function 6 - INFO only 3.3.4 Remote SID - Function 8 - Condition B - restore within 30 days

• 2

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 3 (low power)

Page 1 of 2 Event

Description:

CCW train A discharge header will fail requiring entry into AOP-18020 for Loss ofCCW Time Position Applicant's Action or Behavior CREW Diagnoses failure of the train A CCW pump discharge header:

Indications:

CCW Train A pumps trip after short delay Rapid CCW surge tank level decrease Alarms:

LVL A LEAK DETECTED (QPCP - BACK PANEL)

CCW surge tank 10 level alarms (M/U, Lo, Lo-Lo) - within 20 seconds UO Checks QPCP Light Boxes ZLB-11, ZLB-13 and ZLB-14 to determine where on level A the leak alarm originated.

• SS Enters AOP 18020-C, Loss of CCW crew update for AOP entry UO Stops CCW pumps in Train A - will place pumps in PTL UO Places CCW train B in service per SOP 13715B-1 UO Verifies NSCW supply header flow - 17000 GPM

• 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 3 (low power)

Page 2 of 2 Event

Description:

CCW train A discharge header will fail requiring entry into AOP-18020 for Loss ofCCW UO Isolates makeup water to train A CCW surge tank SS Investigates location of leak to determine how to isolate fault.

SS Determines Tech Spec impact:

3.7.7 Component Cooling Water (CCW)-

Condition A - restore within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> 3.4.6 RCS Loops Mode 4 - INFO only UO Verifies FHB normal HVAC units in operation SS Notifications:

OPS duty manager of AOP entry SSS- CR / maintenance

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 1 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position Applicant's Action or Behavior CREW Recognizes Loss of 1BY1 B - ATWT event has occurred by the following symptoms / alarms / indications:

• 120V AC PANEL 1BY1B 1BY2B TROUBLE alarm.

• INVERTERS 1BD 112 1BD 1112 TROUBLE alarm.

• All channel II trip status lights (except IR P-6, CNMT HI-3 PRESS, and RWST LO-LO LEVEL) lit.

• Simultaneous loss of SR N-32, IR N-36, and PR N-42.

• First out annunciator for SG LOOP 3 LO-LO LVL RX TRIP

• First out annunciator for NIS HI FLUX IR REACTOR TRIP OATC CRITCAL Performs IOAs of 18032 and performs a manual reactor trip.

STEP SS Enters E-O, Reactor Trip or Safety Injection.

• 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 2 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position Applicant's Action or Behavior OATC / UO Performs IOAs of E-O

• Verifies Reactor Trip (OATC)

• Verifies Turbine Trip (UO)

• Verifies Power to AC Emergency Buses (UO)

• Checks if SI actuated or required (OATC)

• SS Transitions to 19001, ES-0.1 Reactor Trip Response (Crew update)

SS Initiates the following:

• Continuous Actions and Foldout Page

• CSFST monitoring

• Reviews step for SI actuation to transition back to E-O

• 2

Appendix D Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 3 of 17 A loss of 120V AC Vital Bus 1BY1B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure.

Time Position Applicant's Action or Behavior UO Performs actions to limit RCS cool down:

• Verifies AFW flow to the SGs.

• Trips both MFPs.

• Checks SG NR levels - at least one> 10%.

• Throttles AFW flow as necessary.

• Verifies SGBD isolation valves & hand switches in closed position.

• OATC Checks RCS temperature stable at or trending to 557 using Tavg with RCPs running.

UO Checks FW status:

• RCS average temperature < 564 degrees F

• Verifies MFIVs, BFIVs, MFRVs, BFRVs all shut.

• 3

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 4 of 17 A loss of 120V AC Vital Bus 1BY1B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure failure.

Time Position Applicant's Action or Behavior UO Checks total feed flow capability to SGs - greater than 570 gpm available.

CREW AFTER AFW FLOW IS THROTTLED IN 19001-C

• START OF EVENT # 7 Recognizes degrading plant conditions:

Lowering Pressurizer level and pressure indications and alarms PRZR SAFETY RELIEF DISCH HI TEMP alarm Open Safety Valve indication on IPC or PSMS screens.

OATC Raises charging flow to attempt to maintain PRZR level and pressure.

OATC CRITICAL Manually actuates safety injection.

STEP

• 4

Appendix D Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 5 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1 BY1 B failure.

Time Position Applicant's Action or Behavior SS Transitions back to E-O, Reactor Trip or Safety Injection.

OATC I UO Performs IOAs of E-O

• Verifies Reactor Trip (OATC)

• Verifies Turbine Trip (UO)

• Verifies AC Power to the Emergency Buses (UO)

• Checks SI actuated (OATC)

SS I TEAM Initiates Foldout Page, Continuous Actions Page and RO and BOP Initial Actions Pages.

OATC Performs Initial Operator Actions of E-O.

• Checks both trains of ECCS aligning per MLBs. If not performed previously - actuates SI.

• Checks CIA actuated per MLBs (it won't be for Train B).

• Informs SS and manually actuates CIA.

• Informs SS of CIA failure for Train B and initiates manual alignment.

• 5

Appendix D Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 6 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure.

Time Position Applicant's Action or Behavior OATC Performs Initial Operator Actions of E-O.

Checks ECCS pumps and NCP status.

• CCPs - both running

• Informs SS and starts CCP "B"

• SI Pumps - running (SI "B" tagged out)

• RHR pumps - both running.

• Informs SS and starts RHR pump "B"

• NCP - tripped.

OATC Performs Initial Operator Actions of E-O.

• CCW pumps - two running per train.

• Informs SS and starts two Train B CCW pumps

• NSCW pumps - two running per train.

• NSCW tower return bypass valves - in auto.

• Containment coolers running in SLOW speed with cooler isolation valves open.

• Informs SS that CNMT coolers for Train B need to be started in SLOW speed (SS will direct UO to align)

• 6

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 7 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure failure.

Time Position Applicant's Action or Behavior OATC Performs Initial Operator Actions of E-O.

• CVI valves and dampers closed per MLBs.

• Informs SS and initiates manual closure of valves and dampers.

(SS will direct UO to align back panel dampers and valves)

• OATC Performs Initial Operator Actions of E-O.

• Checks containment pressure has remained < 21.5 psig.

OATC Performs Initial Operator Actions of E-O.

Checks ECCS flows:

• BIT Flow

• RCS pressure < 1625 psig.

• SI pump flow

• RCS pressure> 300 psig

• 7

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 8 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure failure.

Time Position Applicant's Action or Behavior OATC Performs Initial Operator Actions of E-O.

Checks ECCS valve alignment proper per MLBs.

Informs SS and aligns Train B valves per attachments A, B, C as necessary.

• OATC Performs Initial Operator Actions of E-O.

Checks ACCW pumps - at least one running.

OATC Performs Initial Operator Actions of E-O.

Adjusts RCP seal injection to all RCPs 8 to 13 gpm.

• 8

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 9 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position Applicant's Action or Behavior UO Performs UO Initial Operator Actions of E-O

• Checks MDAFW and TDAFW pumps are running.

• Informs SS and starts MDAFW pump "B"

• Checks NR SG levels> 10%, controls AFW flows.

• Checks if SLI is required and ensures MSIVs and Bypasses are closed.

• Verifies FWI (MFRV, BFRV, MFIV, BFIVs all shut)

• Verifies SGBD isolated and places hand switches for SGBD isolation valves to close.

• Verifies SGBD sample isolations closed.

• Verifies Diesel Generators running.

• Informs SS and starts DG 1B

• Throttles AFW flow to control SG levels 10 - 65% NR.

• Verifies both MFPs tripped.

• Checks Main Generator Output breakers open.

UO Performs UO Initial Operator Actions of E-O

• Assists OATC with alignment of CIA and CVI valves and dampers located on the back panels, starts CTMT coolers SLOW speed.

• 9

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 10 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position A~plicant's Applicant's Action or Behavior OATC Checks RCS temperature stable at or trending to 557 degrees Fusing RCS Tavg.

NOTE: Will have to use WR RCS HOT LEG Temps if RCPs are tripped due to loss of train A instrument power affecting WR COLD LEG temperature indication.

CREW Takes actions of RNO step 8 to control RCS temperature.

• OATC Checks PORVs, Block Valves, and Spray Valves all Closed.

OATC Checks if RCPs should be stopped.

• Checks at least one CCP or SIP running.

• RCS pressure < 1375 psig.

• Stops RCPs UO/SS Checks for faulted SG and transition to E-2 (not met)

• 10

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 11 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure.

Time Position Applicant's Action or Behavior SS/ UO Checks for SG Tubes intact.

• Directs chemistry to sample all SG one at a time for activity.

Checks secondary radiation normal:

• Main Steam Line Rad Monitors

• Condenser Air Ejector Rad Monitors

• Steam Generator Liquid Process Rad Monitors

• Any SG level rising in an uncontrolled manner.

E-3 SGTR transition criteria (not met)

SS/ Checks for RCS intact inside containment.

OATC

• Containment radiation normal (it is)

• Containment pressure normal (it is)

• Containment Emergency Sump level normal (it is)

NOTE: If slow during scenario to this point, PRT may rupture and a transition to 1901 O-C would be appropriate at this point. If not, continue with E-O will eventually transition you to 1901 O-C later in the procedure.

• 11

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 12 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position Applicant's Action or Behavior OATC Checks if ECCS flow should be reduced.

• RCS subcooling > 24 degrees F (not met)

SS Initiates CSFST monitoring and implements EPIP procedures.

• UO Checks intact SG levels.

• NR level in at least one SG > 10% (32% Adverse)

• Maintains NR levels between 10% (32% Adverse) and 65%.

• No NR level rising in an uncontrolled manner.

UO Checks Auxiliary Building Leak Detection Normal

• Plant vent radiation monitors normal.

• Auxiliary Building Leak Detection status lights NOT LIT.

• 12

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 13 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position Applicant's Al'plicant's Action or Behavior OATC Checks if PRT conditions NORMAL.

• PRZR PORV and Safety tailpipe temperatures < 190 F

• PRT temperature < 115 F

• PRT level between 57% and 88%

• PRT pressure between 3 PSIG and 8 PSIG

• SS Transitions to 19010-C, Loss of Reactor or Secondary Coolant.

(Crew Update)

SS Initiates the Continuous Actions and Foldout Pages.

SS Initiates CSFST monitoring and implements EPIPs.

OATC Maintains seal injection to RCPs 8 to 13 gpm.

• 13

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 14 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure.

failure Time Position Applicant's Action or Behavior OATC Checks RCPs stopped and at least one ACCW pump is running.

UO Places Containment Hydrogen Monitors in service per SOP-13130.

• UO Checks SG secondary pressure boundaries intact.

UO Checks intact SG levels 10 - 65% NR, controls AFW, and checks for any ruptured SG.

UO Checks SG Tubes Intact - No secondary side radiation (steam lines, SJAE, SGBD, samples)

• 14

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 15 of 17 A loss of 120V AC Vital Bus 1BY1B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure Time Position Applicant's Action or Behavior OATC Checks PORV and Block valve status, checks CL temperatures.

NOTE: will have to use HL temperatures due to loss of power to CL temperature indications OATC Checks ECCS termination criteria (not met)

NOTE: will have to calculate RCS sub-cooling.

• OATC Checks if containment spray should be stopped (not met)

TEAM Reviews step addressing LOSP after SI reset to restart equipment.

OATC Stops RHR pumps if RCS pressure> 300 psig & stable or rising Restarts RHR pumps if pressure drops < 300 psig OATC Checks RCS & SG pressure trends:

• SG pressures - all stable or rising, and

• RCS pressure - stable or lowering

• 15

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 16 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an A TWT condition. Two first outs will alert the crew to the ATWT. SG Lo-Lo level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-0.1 , A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure failure.

Time Position Applicant's Action or Behavior UO Checks if DGs should be stopped, directs OAO operator to shutdown the DGs per 13145-1, Diesel Generators, checks stub busses energized (NB01 & NB1 0).

OATC Checks Cold Leg recirculation capability.

• Power to both HV-8811 A and HV-8811 B

• Power to RHR pumps A and B

• Power to HV-8809A and HV-8809B

• RHR HX A and B OPERABLE UO Checks auxiliary building leak detection alarms and plant vent radiogas.

TEAM Directs Chemistry to obtain samples for boron, pH, radioactivity from the RCS and both Containment Emergency Sumps, etc.

• 16

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 3 (low power)

Page 17 of 17 A loss of 120V AC Vital Bus 1BY1 B will occur resulting in an ATWT condition. Two first outs will alert the crew to the ATWT. SG La-La level due to earlier instrument failure and IR NIS Hi Flux Reactor Trip. The crew will trip the reactor manually and perform the actions of E-O and transition to 19001-C, Reactor Trip Response to stabilize the plant. Shortly after the trip while in ES-O.1, A PRZR Safety will fail open requiring a manual SI. Train B equipment will have to be aligned due to the 1BY1 B failure.

Time Position Applicant's Action or Behavior TEAM Evaluate plant status.

• Secure unnecessary equipment.

• Isolate NSCW corrosion monitor racks after 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.

• Consult TSC for additional actions and to repair additional equipment required to mitigate the event.

• SS ITEAM Checks for transition criteria met for 19012-C, Post LOCA Cool down and Depressurization. (met)

SS Transitions to 19012-C, Post LOCA Cool down and Depressurization.

(Crew Update)

The End This is the end point of the scenario

• 17

Facility: I VogUe I Scenario No.: 4 Op-Test No.: 2009-301 Examiners: Lea Operators:

MODIFIED Initial Conditions: 100% Qower. CNMT Mini-Purge in service, HV-3009 tagged shut for reQairs {emergent work}. SG ARV #3 tagged for reQairs, BATP #2 tagged for reQairs, I&C recording lift coil currents in rod control for baseline PM data.

Pre load the following: Auto reactor trip failure (ES01 ,) Trains "An & "B" SI Auto failures (ESOB, ES16), CIA fails to actuate in auto or manual (ES20A, ES20B), NSCW Train A pumps fail to auto start (NS07A, NS07C, NS07E).

Turnover:

New system Qeak record eXQected due to extremely hot weather. System loads at maximum due to unexQected unit triQ. LCO 3.7.5 Condition A (HV-3009}. INFO LCO 3.7.4 (ARV} INFO TR 13.1.3 {BATP}.

Event Malf. No. Event Event Description No. Type*

RCOBC I-SS NR Temperature Instrument Fails High (T-hot) 1 @100% I-OATC AOP-1B001, section B for Failure of RCS Narrow Range Temperature Instr.

TS-SS LCO 3.3.1, LCO 3.3.2 SG05B I-SS Steam Generator # 2 Steam Flow Instrument Fail Low.

2

@O% I-UO 1B001-C section G for Failure of Steam Generator Flow Instrument CV1BA C-SS Train "A" Centrifugal Charging Pump Discharge line leak.

C-OATC 17061-1 , window F06 for Level C Leak Detected 3

TS-SS LCO 3.5.2 (ECCS), TRM 13.1.3 INFO (BA Flow Paths), TRM 13.1.5 INFO (Charging Pumps) 4 N/A R-ALL Lower power for shutdown due to CCP discharge pipe break.

RP06D@ C-SS #1 seal on RCP 4 will fail resulting in a need to immediately trip reactor and 5 20% C-OATC stop RCP 4.

30 sec ramp 6 RP06D M-ALL Small RCS LOCA through RCP seals requiring manual SI actuation, manual

@100% CIA valve alignment.

RP07D Crew will enter E-O after SI actuation, transition to E-1 RCS LOCA.

@100%

.@100%

7 ES01 I-OATC/SS Automatic Reactor Trip Failure ESOB & 16 I-OATc/SS Automatic SI Failure ES20A&20B I-ALL CIA automatic & manual actuation failure B EL03 C-SS LOSP after SI reset on 1AA02 I 1BA03. Train A NSCW fails to auto start.

EL02 C-UO Crew should manually start NSCW train A after recognizing failure to start.

EL07B NS07A1C/E Scenario 4 Page 1

Event 1:

RCS Narrow Range Thot instrument fails high resulting in inward rod motion. The OATC will place control

• rods in manual.

Verifiable Actions:

OATC - Performs lOA and places control rods in manual. Selects out the failed channel on the Tavg /

Delta T defeat switches. Restores Tave to program value, returns rod control back to automatic.

Technical Specifications:

3.3.1 - Reactor Trip:

Function 6 - OTLlT - Condition E - trip channel within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Function 7 - OPLl T - Condition E - trip channel within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> 3.3.2 - ESFAS - Function 5a - Lo Tave FWI - Condition I - trip channel within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Event 2:

Steam Generator # 2 Steam Flow will fail low requiring the BOP to take manual control of the MFRV # 2 and MFPT Master Speed Controller. An entry into 18001-C, section G for Steam Generator Flow Instrument Failure will be required.

Verifiable Actions:

UO - Performs lOA to take MFRV # 2 to manual and MFPT Master Speed Controller to manual and control SG levels. Defeats the failed channel and selects an operable channel using the Steam Flow Selector switch.

• Event 3:

CCP "A" discharge line leak, this will be found by leak detection annunciators for Auxiliary Building Level C. The Emergency Boration flow path through HV-8104 will not be available.

Verifiable Actions:

UO - Informs crew of CCP "A" leak detection ZLBs illuminated.

OATC -Manually isolate CCP "A" to stop the leakage and place CCP "A" in PTL.

Technical Specifications:

LCO 3.5.2 - ECCS - Condition A - restore within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> TR 13.1.3 - Boric Acid Flow paths (Operating) - INFO Only TR 13.1.5 - Charging Pumps (Operating) - INFO Only Event 4:

The crew will perform a power ramp of approximately 10% from 100% power to 90%.

Verifiable Actions:

ALL - Power reduction. UO will operate the main turbine and OATC will operate control rods and the CVCS boration controls to control reactor power.

• Scenario 4 Page 2

Event 5:

The crew will perform a manual reactor trip of RCP # 4 after seal #1 leak off flow increases to > 5.5 gpm.

This requires immediate shutdown of the RCP per 13003-C. Observation of seal leak off flow alarms will alert the crew to the increasing seal leak off flow. The crew will enter E-O, trip RCP # 4, shut PRZR spray valve from loop # 4, and shut RCP # 4 seal leak off isolation valve. As the RCP seal failure degrades into a small LOCA eventually SI actuation criteria will be reached.

Verifiable Actions:

OATC - Perform a manual reactor trip. Starts RCP # 4 oil lift pump, stops RCP # 4. Shut PRZR spray valve for loop # 4. Isolates RCP # 4 seal leak off valve HV-8141 D.

Event 6 and 7:

While in ES-0.1, Reactor Trip Response, a small size LOCA will develop due to multiple RCP seal failures. The crew will manually actuate SI and return to E-O. While in E-O, it will be discovered CIA has failed to manually actuate. The QMCB hand switches will also fail to actuate CIA, and require manual alignment of valves and dampers by the OATC / UO.

Verifiable Actions:

OATC - Manual actuation of SI in response to lowering PRZR level and RCS / PRZR pressure.

OATC / UO - Manual alignment of CIA valves and dampers which fail to align automatically or with hand switch actuation.

Event 8:

• While in 19010-C, Response to Loss of Reactor or Secondary Coolant, Offsite Power will be lost to 4160 1E bus AA02 and BA03 with the DG1A re-energizing the bus. However, NSCW cooling water pumps will fail to auto start requiring a manual start by the crew.

Train B bus BA03 will fail to re-energize during the event. This will leave only the Train A ECCS pumps injecting into the core.

Verifiable Actions:

OATC - Restart SI pumps UO - Manual start of Train A NSCW pumps which failed to auto start. Shift CNMT coolers to low speed, restart Post LOCA cavity purge fans Critical Tasks:

1. Close at least one CIA valve in each penetration flow path from containment.

2. Manual start of Train A NSCW pumps to maintain cooling water supply to the Train A DG and to the Train A ECCS cooling water pumps.

• Scenario 4 Page 3

Appendix 0 D Scenario Outline Form ES-O-1 ES-D-1 Final

• II Facility; Examiners:

IVogUe VogtJe JI Scenario No.:

Operators:

4 Op-Test No.: 2007-301 2007*301 Conditions:

Initial Condllioos: Plant has been at 100%

10{)% Power for three months following foHowing a refueling outage.

fol lowing:: Auto reactor trip failure Pre load the following {allure (ES01 ,) r'8105 "'A

.) Trains Awn& M B"" S.

"B SI A uto failures (ailures (ES08 (ES08., ES16), CIA fails to actuate In in aulo auto or manual (ES20A, ES20B),

ES20BI. NSCW Train A pumps fall hili to auto start (NS07A, NS01C.

5tal't (NS01A. NS07C, NS07E).

Place SIP ""SB "" in PTL and place a red hold tag on the hand switch. Place 5', Train " B" In PTL B" SSMP hand switch to

" Bypass".

Bypass ".

I Turnover.

Tumover; Storms are approaching from the Southwest and high winds IMndsareare possible within wi thin the hour.

SI Ptlmp 51 Pump "S" "B" was tagged out yesterday yes terday al1 at 1200 retumed to S9fViC8 200 hours0.00231 days <br />0.0556 hours <br />3.306878e-4 weeks <br />7.61e-5 months <br /> and Is scheduled to be returned S8Nice In in 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> nours (TS 3.5.2).

Heater Dmin Drain Pump # 1 is experiencing high vibrations, the system engineer, maintenance.maintenance, and operations management are in the field evaluating the pump at this time.

I ~ ~

Event Malf. No. /I Malt. No. Event Event Description No. Position Type-Type" .

CV18A C r,.ln A"n Centrifugal Charging Pump Discha Train " A rge line leak.

DlschargeUne leak.

RO 17061-1, Window F06 17061.1, ""ndow FOG for Level l evel C leak Detected 1I SRO (TS)

ITS) lCO 3.5.2 (ECCS), TRM T~~ 13.1.3 13.1 .3 INFO (BA (SA Flow Paths),

Paths). TRM 13.1.5 INFO (Charging Pump.)

Pumps)

RC08C@ I NR Temperatllre ,nstrument Falls Temperaturwlnstrument Fails High (That)

(Thot) 100%

AOP- 1a001, section AOP-18001, ,ection B for Falfure Failure of RCS Narrow Range Temperature Instr.

2 RO LCO lCO 3.3,1, 3.3.1, lCO lj':O 3.3.2 SRO (TS)

ITS)

SGOSB@

SG05B @ I Steam Generator Generator" # 2 Steam Flow Instrument Fail low.

3 0%

18001-C section G for Fai lure of Steam Generator Flow Instrument Failure BOP "

RP06D@

RP06D @ cC .1 RCP # 1 seal on RCP # 4 fails to 5.2 gpm (abnormal range per SOP) 14%

13003-1 , Reactor Coolant Pumps section 4.2.1 Operation with seal abnorma 13003*1 abnormal.l.

4 30 sec Cr w will determine that management and engineering need to be consulted Crew ramp for the RCP seal prob lem.

problem.

RO Power R Power ramp from 100% to approximately 9S% 95% per management direction to 5 Ramp shutdown RCP # 4 within wIthin 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> using AOP-18013-C, AOP-18013.C, Rapid Down Power.

ALL RP06D C RCP # 1 seal on RCP # 4 falls fails to > 5.5 gpm (immediate shutdown per SOP)

)0 5.S 15 -17.5%

13003-1, Reactor Coolant Pumps section 4.2.1 Operation with seal abnormal.

6 30 sec Crew will determine RCP # 4 requires requ ires immediate shutdown and trip the plant.

ramp Stop RCP # 4, shuts spray valve from loop # 4, 4. shuts RCP seal leak off valve, valve.

RO perform actions of E-O. E*O.

Appendix D Scena Scenariorio Outline Form ES-D-1 ES-O-1 Final

• I Event Evenl No.

7 Malf. No.1 Malt. No. 1 Position RC05D Event Type' Type" Med ium size Re Medium RC5S LoeA Event Description nlqu lring manual 51 LOCA requiring actuation, manual 51 actuatlon, ma nual CIA valve ramp alignment.

from M Ot07%

0107% Crew will enter E-O actuation, transition to E-1.0 ReS E-Q after 51 actuation, RCS LOCA.

LOGA.

ALL 8 EL03 L05P after 51 reset o lOSP on 1AA02 / 1BA03. Train A N5CW n 1AA02/ fails to aauto NSCW falls uto start.

EL02 ElO2 C Crew should manually start NSCW train A after recognizing failure to start.

EL07B I BOP II

Scenario Event Description Vogtle-2007-301 Final

• Vogtle 2007*301 Scenario # 4 (RCS LOCA I Post LOCA CD &

Event 1 CCP ~"A"

& Depressurization)

A" discharge line leak, this will be found by leak detection annunciators for Auxiliary Building Level C. The Emergency Boration flow path through HV-8104 will not be available.

available.

Action : (BOP) Informs crew of CCP "A~

Verifiable Action: "A" leak detecUon detection ZLBs illuminated.

Ver~iable Verifiable Action:: (RO) The RO will manually isolate CCP "A" t6 Action to stop the leakage and place CCCCPP "A" in PTL.

Specifications: LCO 3.5.2.

Technical Specifications: 3.5.2, TRM INFO LCO LCO '13. 1.3, TRM 13.1.3. TRM INFO LCO 13.1.5 Event 2  ; '"

RCS Narrow Range Thot instrument fails high resulting in in Inward rod motion. The RO will place control rods in manual. '.

Verifiable Action:

Action: (RO) Performs lOA and places control rods in manual.

failed channel on the Tavg f/ Dellta Verifiable Action: (RO) Selects out the faUed Delta T defeat switches.

switches.

• Technical Specifications: LCOLCOa.3.1, 3.3.1. LCO 3.3.2 Event 3 Steam Generator # 2 Steam Flow will fail low requiring the BOP to take manual control MFRV # 2 and MFPT of the MFRV# MFPT Master Speed Conlrotler.

Controller. An entry into 18001*C.

18001-C, section G Instrument Failure win be required.

for Steam Generator Flow Instrumenl Verifiable Action: (BOP) Performs lOA to take MFRV # 2 to manual and MFPT Master Speed Controller to manual and control SG levels.

Verifiable Action: (BOP) Defeats the failed channel and selects an operable channel channel using the Steam Flow Selector switch.

switch .

Event 4 Reactor Coolant Pump # 4 seal leak off increases to abnormal range. The crew will enter SOP-13003 section 4.2.14.2.1 ror for Operation with a Seat Seal Abnormality and evaluate continued RCP operation via a decision tree. The decision tree will require consultation of Rep management and engineering regarding RCP operation.

Scenario Event Description Vogtle-2007-301 VogUe-2007-301 Final Event 5 EventS The crew will perfonn perform a power ramp of approximately 5% from 100% power to 95% after receiving direction from management to use AOP-18013-C and take the plant off line and shutdown RCP # 4 within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.hour.

Verifiable Action:

Action : (ALL) Power reduction. BOP will operate the main turbine and RO will reduction . SOP operate control rods and the CVCS boration controls to control reactor power.

Event 6 The crew will perform a manual reactor trip of RCP # 4 after seal leak off flow increases gpm . This requires immediate shutdown of the RCP per 13003-C.

to > 5.5 gpm. 13003-C. Observation of seal leak off flow rising and Rep RCP shaft vibrations will alert the crew to the increasing seal leak off flow. The crew will enter E-O, trip RCP RCP# # 4, shut PRZR spray valve from loop # 4, and shut RCP # 4 seal leak off isolation valve.

Verifiable Action:

Action : (RO) Perform a manual reactor trip.

Action : (RO) Starts Rep Verifiable Action: Rep # 4.

RCP # 4 oil lift pump. stops RCP 4.

Verifiable Action: (RO) Shut PRZR spray valve for loop # 4.

Verifiable Action:

Action : (RO) Isolates Rep RCp # 4 seal leak off valve HV-B141D.

HV-8141D.

Event 7 Event?

While in ES-0.1, Reactor Trip Response, ReactorTrip Response, a medium size LOCA (1000 gpm) will ramp in seconds. The crew will manually actuate 51 over 120 seconds. 5 1and return to E-O. While in E-O E-O,, it will be discovered CIA has failed to manuaJly manually actuate. The OMCSQMCB hand switches will also fail to actuate CIA, and require manual alignment of valves and dampers by the ROJ RO / BOP. . :\."

Verifiable Action Action:: (RO) Manual actuation of SI in response to lowering PRZR level and RCS I PRZR pressure.

ReS pressure.

Verifiable Act i on~ (RO I BOP) Manual alignment of CIA valves and dampers which fail to Action:

align automatically or with hand switch actuation actuation..

Critical Task: Close at leaat least one CIA valve in each penetration flow path from containment.

Scenario Event Description Vogtle-2007-301 Final Event 8 EventS While in 19010-C, Response to Loss of Reactor or Secondary Coolant.

Coolant, Offsite Power will be lost to 4160 1E 1E bus AA02 and BA03 with the DG 1A fe-energizing DG1A re-energizing the bus.

However, NSCW cooling water pumps will fail to auto start requiring a manual start by the crew.

Train B bus BA03 will fail to re-energize during the event. This will leave only the Train A ECCS pumps injecting into the core.

Verifiable Action: (BOP) Manual start of Train A NSCW pumps which failed to auto start.

Critical Task: Manual start of Train A NSCW pumps to maintain cooling water supply to the Train A OGDG and to the Train A ECCS cooling water pumps.

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 4 Page 1 of 3 Event

Description:

RCS NR Temperature Instrument Fails High (Thot) on loop # 3. This will require the OATC to perform IOAs to stop inward control rod motion by placing rods in MANUAL.

The crew will be required to enter AOP-18001 section 8 for Failure of RCS Narrow Range Temperature Instrumentation.

Time Position Applicant's Action or Behavior Diagnose NR Temperature Instrument Failure:

Symptoms / alarms:

• RC LOOP DELTAT / AUCT DELTA T HI-LO DEV OATC

• RC LOOP TAVG / AUCT TAVG HI-LO DEV

• TAVG TREF DEVIATION

• AUCT TAVG HIGH Indications:

• Rapid inward control rod motion.

• Loop 3 Tavg / Delta T indication deviating from other loops.

• OATC lOA Step # 81 - Takes manual control of control rods to stop rapid insertion.

SS Initiates AOP 18001-C, Section 8 to direct crew actions.

(Crew Update)

OATC Step # 82 - Restores Tavg to program, if required.

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 4 Page 2 of3 Event

Description:

RCS NR Temperature Instrument Fails High (Thot) on loop # 3. This will require the OATC to perform IOAs to stop inward control rod motion by placing rods in MANUAL.

The crew will be required to enter AOP-18001 section B for Failure of RCS Narrow Range Temperature Instrumentation.

Time Position Applicant's Action or Behavior OATC Selects out the failed channel:

• Step # B3 - Selects affected loop 3 on TS-412T Tavg Defeat switch to defeat 432.

• Step # B4 - Selects affected loop on TS-411 F Delta T Defeat switch to defeat 431 .

OATC Step # B5 - Places control rod bank selector back in AUTO if desired.

SS Step # B6 - Notifies I & C to initiate repairs, notifies Operations Duty of AOP entry.

SS Step # B7 - Bypass the failed instrument channel using 13509-C, Bypass Test Instrumentation (BTl) Panel Operation NOTE: It is NOT expected the SS will bypass the channel at this time.

• 2

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 4 Page 3 of 3 Event

Description:

RCS NR Temperature Instrument Fails High (Thot) on loop # 3. This will require the OATC to perform IOAs to stop inward control rod motion by placing rods in MANUAL.

The crew will be required to enter AOP-18001 section 8 for Failure of RCS Narrow Range Temperature Instrumentation.

Time Position Applicant's Action or Behavior SS Step # 88 - Identifies Tech Spec requirements to trip the affected bistables listed in table 81 within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> of the channel failure.

Step # 89 - Initiates applicable Tech Spec actions of the following:

• TS 3.3.1, FU 6, Condition E

• TS 3.3.1, FU 7, Condition E

• TS 3.3.2, FU 5b, Condition I

• SS Step # 810 - Initiates the Continuous Actions Pages.

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 2 Scenario No.: 4 Event

Description:

Steam Generator # 2 Controlling Steam Flow instrument fails LOW Page 1 of 2 (FI-522A). This will require entry into AOP-18001 section G for Failure of SG Flow Instrument and selection of an unaffected SG flow channel. The UO will have IOAs to take manual control of MFRV # 2 and MFPT speed control.

Time Position A~~licant's Action or Behavior UO Diagnose failure of SG Steam Flow instrument:

Symptoms I alarms I indications:

• STM GEN 1 (2,3,4) FLOW MISMATCH

• Any unexplained steam I feed flow mismatch indication UO Step # G1 - Performs lOA of 18001 section G for Steam Flow Instrument Failure (FI-522A):

lOA

• Checks steam and feed flows matched on all SGs (they aren't)

• Take manual control of MFRV # 2 to raise FW flow.

• Take manual control of MFPT(s) speed control to raise speed.

SS Enters AOP-18001 section G for Steam Flow Instrument Failure.

(Crew Update)

UO Step # G2 - Selects an unaffected channel for contro/.

• 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 4 Event

Description:

Steam Generator # 2 Controlling Steam Flow instrument fails LOW Page 2 of2 (FI-522A). This will require entry into AOP-18001 section G for Failure of SG Flow Instrument and selection of an unaffected SG flow channel. The UO will have IOAs to take manual control of MFRV # 2 and MFPT speed control.

Time Position A1?~icant's Action or Behavior Applicant's UO Step # G3 - Returns MFP(s} speed controls to AUTO UO Step # G4 - Returns SG feed flow valve to automatic SS / Step # G5 - Initiates the Continuous Actions Page.

CREW UO Step # G6 - Checks SG level control maintains NR level at 65% in AUTO.

SS Step # G7 - Notifies I & C to initiate repairs, notifies Operation Duty of AOP entry.

• 2

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 4 Page 1 of 1 Event

Description:

Train "An CCP discharge line break. This will require the crew to isolate the suction and discharge to CCP "A" to stop the leak. The QPCP leak detection annunciators will alert the crew to the leak and direct isolation of the leak. This will render CCP "An inoperable for ECCS (opposite train from SIP "B") requiring Tech Spec entry into 3.5.2 for ECCS and TRM for Borated Water Source Flow Paths and Charging Pumps.

Time Position Applicant's Action or Behavior Diagnoses leak in CCP "A" pump room:

UO Symptoms / alarms:

• LEVEL C LEAK DETECTION alarm on QPCP (ALB61 , E06)

Indications/Actions:

• Dispatches operator to investigate per the ARP guidance.

• CCP "An leak detection status light lit.

• Operator reports back from field that "CCP "A" has leak in the pump room between the pump & the discharge isolation valve HV-848SA".

• OATC ISS Isolates leak on CCP "A" per ARP-17061, window E06 step # 4.

• Place CCP "An in Pull-to-Iock

• Closes CCP "An suction isolation valve.

• Closes CCP "A" discharge isolation valve.

• Observe leak stops (VCT level best indication)

NOTE: The Crew may opt to use guidance in AOP 18004-C, RCS leakage in response to this failure and isolate the leak.

SS Initiates Technical Specifications for inoperable CCP.

• LCO 3.5.2 condition A for ECCS

• TRM 13.1.3 Borated Water Source Flow Paths - Operating, (INFO LCO)

• TRM 13.1.5 Charging Pumps - Operating, (INFO LCO)

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 4 Page 1 of 1 Event

Description:

CCP 1A discharge pipe break will result in a 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> LCO. Repair crew will report 7 days to fix and test. Crew will begin a TS required shutdown at Management based on this information.

Time Position Applicant's Action or Behavior SS Initiates a unit shutdown per UOP 12004-C, Power Operations.

(Crew Update)

OATC / UO

• Energize PRZR backup heaters

• Places rods in manual control

• Reduces turbine load

• Maintains Tave within 2 degrees F of Tref using rods in manual and / or boration as necessary.

• Maintains AFD within limits SS Notifies System Operator that a load reduction is in progress.

NOTE Event will continue until adequate power maneuver completed for the examiners to evaluate.

• 1

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 4 Page 1 of 2 Event

Description:

Failure of RCP # 1 seal on RCP # 4 to > 5.5 gpm. The RCP seal decision tree (Figure # 1 or SOP-13003) will direct the crew to immediately shutdown the RCP.

Time Position Applicant's Action or Behavior CREW Diagnose failure of RCP # 4 (seal # 1):

Symptoms I alarms:

• RCP 4 CONTROLLED LKG HIILO FLOW

• RCP 4 NO.2 SEAL LKOF HI FLOW Indications:

• RCP 4 seal leak off high range reading> 5.5 gpm

• Excess letdown temperature rising (possibly)

• Changes in VCT level or pressure

• RCP 4 operating parameters changing (temperatures)

• CREW Enters SOP-13003-1, "RCP Operation" section 4.2.1 for Operation With A Seal Abnormality".

Step # 4.2.1.1 Trends RCP computer data points listed in Table 2 on the IPC computer.

NOTE: The candidate may call this up using the "RCP" button on the IPC computer to display all RCP parameters. Many of the Table 2 indications are located on the QMCB.

The following indications are computer point only and are displayed on the IPC with the RCP button.

• Number 1 Seal Inlet Temperature

• Number 1 Seal Inlet Temperature

• Motor Lower Radial Bearing Temperature

• Motor Upper Radial Bearing Temperature

• Motor Thrust Bearing UPPER Shoe Temperature

• Motor Thrust Bearing Lower Shoe Temperature

• Motor Stator Winding Temperature Step # 4.2.1.2 should be N/A as the IPC computer will be available.

• 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 4 Page 2 of2 Event

Description:

Failure of RCP # 1 seal on RCP # 4 to > 5.5 gpm. The RCP seal decision tree (Figure # 1 or SOP-13003) will direct the crew to immediately shutdown the RCP.

Time Position Applicant's Action or Behavior OATCI SS Step # 4.2.1.3 - Evaluates monitored indications on Figure 1, "RCP Seal Abnormalities Tree". Below is projected flow path through the tree.

• Seal injection> 8 gpm (yes)

• Seal injection < 135 degrees F (yes)

• NO.1 seal leak off within figure 2 Normal delta P range (no)

• NO.1 seal leak off> 5.5 gpm (yes)

• Immediately stop RCP per step 4.2.1.4

• OATC Step 4.2.1.4 - Immediately stops RCP # 4.

4.2.1 .4a - starts RCP # 4 oil lift pump.

4.2.1.4b(1) - Trips reactor and initiates E-O Performs 10As of E-O (OATC and UO) 4.2.1.4b(2) - goes to step 4.2.1.4d after E-O 10As complete.

• 4.2.1.4.d - Stops RCP # 4 using HS-498B and HS-498A

• 4.2.1.4.e - Closes spray valve loop 4 using PIC-455B

• 4.2.1.4.f - Closes seal leak off valve after RCP stops and reverse flow is indicated using HS-8141 0

• 4.2.1.4.g - Stops RCP # 4 Oil Lift Pump

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 1 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior CREW Recognizes degrading plant conditions:

• Multiple RCP seal failure alarms

• Lowering Pressurizer level and pressure indications and alarms

• Containment high radiation alarms

• The crew may briefly reference AOP-18004 for RCS Leakage.

• OATC Raises charging flow to attempt to maintain PRZR level and pressure.

OATC Manually actuates SI when unable to maintain PRZR level or pressure.

SS Transitions back to E-O to perform actions for Safety Injection.

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 2 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior OATC / UO Performs IOAs of E-O Step # 1 - Verifies Reactor Trip (OATC)

• Rod Bottom Lights lit

• Reactor Trip and Bypass Breakers - Open

• Neutron Flux Lowering Step # 2 - Verifies Turbine Trip (UO)

• All Turbine Stop Valves - Closed.(yes)

• Step # 3 - Checks Power to AC Emergency Buses (UO)

• 3a, at least 14160 1E bus energized. (yes)

• 3b, all AC Emergency buses energized -4160 and 480V (yes).

Step # 4 Checks if SI / Actuated (OATC)

• Any SI annunciator lit (yes)

• SI BPLP status light lit (yes).

SS/CREW Step # 5 - Initiates Foldout Page.

Step # 6 - Initiates the RO and BOP Initial Actions Pages.

Step # 7 - Initiates the Continuous Actions Page.

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 3 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

• Step # 1 - Checks both trains of ECCS aligning per MLBs. If not performed previously - actuates Sf.

• Step # 2 - Checks CIA actuated per MLBs (it won't be).

• Step # 2 RNO - Informs SS and manually actuates CIA.

• Step # 2 RNO - Informs SS of CIA failure and initiates manual alignment.

CRITICAL STEP NOTE: The UO may assist with CIA alignment at the back panels.

CRITICAL - To close at least one valve in each CIA flow path.

OATC Performs OATC Initial Operator Actions of E-O.

Step # 3 - Checks ECCS pumps and NCP status.

• 3a, CCPs - both running.

• 3b, SI Pumps - both running

• 3c, RHR pumps - both running.

• 3d, NCP - tripped.

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 4 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Ap~licant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 4 - CCW pumps - two running per train.

Step # 5a - NSCW pumps - two running per train.

Step # 5b - NSCW tower return bypass valves - in auto.

Step # 6a - Containment coolers running in LOW speed Step # 6b - NSCW cooler isolation valves open.

• OATC Performs OATC Initial Operator Actions of E-O.

Step # 7 - Verifies CVI dampers and valves closed (yes)

OATC Performs OATC Initial Operator Actions of E-O.

Step # 8 - Checks containment pressure has remained < 21.5 psig (yes)

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 5 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 9 - Checks ECCS flows:

• 9a, BIT Flow (yes)

• 9b, RCS pressure < 1625 psig (yes, unless crew too fast)

• 9c, SI pump flow (yes, unless crew too fast)

• 9d, RCS pressure < 300 psig (no)

OATC Performs OATC Initial Operator Actions of E-O.

Step # 10 - Checks ECCS valve alignment proper per MLBs (yes)

OATC Performs OATC Initial Operator Actions of E-O.

Step # 11 - Checks ACCW pumps - at least one running (yes)

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 6 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto Sf will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior OATC Performs OATC Initial Operator Actions of E-O.

Step # 12 - Adjusts RCP seal injection to all RCPs 8 to 13 gpm.

• UO Performs UO Initial Operator Actions of E-O Step # 1 - Checks MDAFW and TDAFW pumps are running.

Step # 2 - Checks NR SG levels> 10%, controls AFW flows.

• Step # 3 - Checks if SLI is required and ensures MSIVs and Bypasses are closed (no)

• Step # 4 - Verifies FWf (MFRV, BFRV, MFfV, BFIVs all shut)

• Step # 5 - Verifies SGBD isolated and places hand switches for SGBD isolation valves to close and verifies SGBD sample isolations closed.

• Step # 6 - Verifies Diesel Generators running.

• Step # 7 - Throttles AFW flow to control SG levels 10 - 65% NR.

• Step # 8 - Verifies both MFPs tripped.

• Step # 9 - Checks Main Generator Output breakers open.

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 7 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior UO Performs UO Initial Operator Actions of E-O CRITIAL

• Assists OATC with alignment of CIA valves and dampers STEP located on the back panels.

• OATC Step # 8 - Checks RCS temperature stable at or trending to 557 degrees Fusing RCS Tavg.

CREW Takes actions of RNO step 8 to control RCS temperature.

• Stops dumping steam.

• Checks SG NR levels> 10% and throttles AFW flow.

• Shuts MSIVs and BSIVs (not required)

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 8 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 1901 O-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position ~plicant's Action or Behavior Applicant's OATC Step # 9 - Checks PORVs, Block Valves, and Spray Valves all Closed.

• 9a, PORVs shut and in AUTO. (yes)

• 9b, Normal spray valves closed. (yes)

• 9c, Power available to at least one block valve. (yes)

• 9d, At least one block valve open (no)

• 9d RNO, verify block valves open when RCS > 2185 psig.

OATC Step # 10 - Checks if RCPs should be stopped.

• 10a, Checks at least one CCP or SIP running (yes)

• 10b, RCS pressure < 1375 psig (not expected)

UO/SS Step # 11- Checks for faulted SG and transition to E-2 (not met)

• Goes to step # 12

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 9 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior SS/UO Step # 12 - Checks for SG Tubes intact (E-3 transition not met)

• Directs chemistry to sample all SG one at a time for activity.

Checks secondary radiation normal:

• Main Steam Line Rad Monitors

• Condenser Air Ejector Rad Monitors

• Steam Generator Liquid Process Rad Monitors

• Any SG level rising in an uncontrolled manner.

SS / Step # 13 - Checks for RCS intact inside containment.

OATC

• Containment radiation normal (it is not)

• Containment pressure normal (it is not)

• Containment Emergency Sump level normal (it is not)

SS Transitions to 19010-C, Loss of Reactor or Secondary Coolant (Crew Update)

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 10 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior SS Step # 1 , Initiates the Continuous Actions and Foldout Pages and Initiates CSFST monitoring.

• SS Step # 2 - Implements EPIPs.

OATC Step # 3 - Maintains seal injection to RCPs 8 to 13 gpm.

OATC Step # 4 - Checks if RCPs should be stopped.

• 4a, Checks at least one CCP or SIP running (yes)

• 4b, RCS pressure < 1375 psig (not expected)

Step # 5 - Checks at least one ACCW pump is running. (yes)

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 11 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior SS Step # 6 - Assigns personnel to place Containment hydrogen monitors in service per SOP-13130, Post Accident Hydrogen Control.

NOTE: - SS may call for an extra operator to perform this.

• UO Step # 7 - Checks SG secondary pressure boundaries intact. (yes)

UO Step # 8 - Checks intact SG levels 32 - 65% NR, controls AFW, and checks for any ruptured SG.

UO Step # 9 - Checks for any ruptured SG. (no radiation present on SGs)

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 12 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 1901 O-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior OATC Step # 10a - Checks PORV block valves power available (yes)

Step # 10b - Checks PORVs closed (yes)

Step # 1Oc - Checks at least one block valve open (yes)

Step # 10d - checks CL temps < 220 F, does NOT arm COPS per RNO.

• OATC Step # 11 - Checks ECCS termination criteria (not met)

• 11 a - RCS subcooling > 24 For 38 F (no)

OATC Step # 12 - Checks if containment spray should be stopped (not met)

• Step # 12a, spray pumps running (no)

TEAM Reviews CAUTION addressing LOSP after SI reset to restart equipment.

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 13 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 19010-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior OATC Step # 13 - Checks if RHR pumps should be stopped (no)

• 14a, running with suction aligned to RWST (yes)

• 14b, RCS > 300 psig & stable or rising (yes)

• Reset SI

• Stop RHR pumps

• OATC Step # 14 - Restart RHR pumps if RCS pressure drops < 300 psig (no)

OATC Step # 15 - Checks RCS and SG pressures.

• 16a, stable or rising SG pressures (yes)

• 16b, RCS pressure stable or lowering (yes)

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 6 and 7 Event

Description:

Scenario No.: 4 Page 14 of 14 A LOCA through the RCP #4 seals develops due to failure of seal #2 in addition to the existing #1 seal failure. PRZR level and pressure will begin to lower faster than the capacity of the normal charging system. The OATC will be required to manually actuate SI as auto SI will not work. In addition, CIA will fail to auto or manual actuate. This will require manual closure of CIA valves and dampers. The crew will return to E-O, transition eventually to 1901 O-C, E-1.0 Loss of Primary or Secondary Coolant.

Time Position Applicant's Action or Behavior UO Step # 16 - Checks if DGs should be stopped

• 16a, AC emergency busses energized by offsite power (yes)

• 16b, Resets SI

• 16c, directs OSA operator to stop DGs per SOP-13145.

• 16d, checks and energizes stub busses per RNO.

• UO Step # 17 - Checks Cold Leg recirculation capability.

NOTE: At this time simulator operator will insert Loss of Offsite Power (Loss of Both RATs). Proceed to Event # 8.

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 8 Event

Description:

Scenario No.: 4 Page 1 of 2 A Loss of RAT 1A and 1B will occur resulting in an LOSP to 4160 1E busses 1AA02 and 1BA03.

The DG-1A will re-energize 1AA02, 1BA03 will fail to re-energize. Train A NSCW pumps will fail to auto start requiring a manual start by the crew to prevent losing cooling water to the DG and Train A safety related ECCS pumps required for the LOCA. Once the crew has re-started the NSCW pumps manually, the scenario will end.

Time Position Applicant's Action or Behavior CREW Diagnoses loss of RAT 1A feed to 1AA02:

Indications / alarms / symptoms:

• Various electrical distribution alarms.

• Control room lights go dim and then re-energize.

• DG1A output breaker closing and LOSP sequence running.

• RO Step # 13 Continuous Actions

• Restarts RHR pump "A" (not critical as RCS pressure is higher)

BOP/ Diagnoses failure of NSCW Train "A" pumps to auto start:

CREW Indications / alarms / symptoms:

• NSCW pump green lights illuminated on Train "A"

• ZLBs for NSCW Train "A" discharge valves indicate closed (pump start interlock met)

• NSCW flows and discharge pressure reading 0 (zero)

• DG high temperature alarms if NSCW not started promptly.

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 8 Event

Description:

Scenario No.: 4 Page 2 of2 A Loss of RAT 1A and 1B will occur resulting in an LOSP to 4160 1E busses 1AA02 and 1BA03.

The DG-1A will re-energize 1AA02, 1BA03 will fail to re-energize. Train A NSCW pumps will fail to auto start requiring a manual start by the crew to prevent losing cooling water to the DG and Train A safety related ECCS pumps required for the LOCA. Once the crew has re-started the NSCW pumps manually, the scenario will end.

Time Position Applicant's Action or Behavior BOP Starts two Train "A" NSCW pumps and verifies proper operation.

CRITICAL

• NSCW discharge pressure, supply and return flows normal .

STEP END This is the end of the scenario!

• 2

Appendix 0 Scenario Outline Form ES-O-1

• Facility:

Examiners:

IVogtle Lea I Scenario No.:

Operators:

5 Op-Test No.: 2009-301 MODIFIED Initial Conditions: 100% power. CNMT Mini-Purge in service, HV-3009 tagged shut for repairs (emergent work). SG ARV #3 tagged for repairs, BATP #2 tagged for repairs, I&C recording lift coil currents in rod control for baseline PM data.

Pre load the following: Failure of automatic SLI (ES10, ES11), failure of automatic and manual SI (ES16, ES17) MD AFW pump "B" trip AF02C.

Turnover:

New system peak record expected due to extremely hot weather. System loads at maximum due to A (HV-3009). INFO LCO 3.7.4 (ARV) INFO TR 13.1.3 {BATP).

unexpected unit trip. LCO 3.7.5 Condition AiHV-3009). (BATP).

Event Malf. No. Event Event Description No. Type*

1 CV07 C-SS NCP trip, entry into AOP 18007-C section B for loss of charging.

C-OATC TR 13.1.3 Boric Acid Flow Path (Operating) - INFO only TS-SS TR 13.1.5 Charging Pumps (Operating) - INFO only 2 N/A N-OATC Restore CVCS charging & letdown to service.

N-SS 3 EL02 C-ALL Loss of RAT 1A (Offsite Power) with DG1A tripping on over speed.

EL01A TS-SS AOP-18031, section A for Loss of 41601 E Bus with DG Failing to Tie TS 3.8.1 (AC Sources), 3.8.9 (Distribution), and 3.8.4 (DC Sources) 4 N/A R-ALL Power ramp from 100% to 90% to remove HDP # 1 from service.

5 FW02D I-SS Controlling FW Flow Channel on Loop # 4 SG fails high

@100% I-UO 18001-C section G for Failure of Steam Generator Flow Instrumentation 6 FW06A M-ALL Feed water Line Break on SG # 1 IRC. Crew will enter E-O after manually

@0-25% tripping the reactor and SI will actuate on Low PRZR pressure. The crew ramp 50s will transition to E-2 to isolate the faulted SG.

7 ES10&11 I-UO Steam Line Isolation actuation failure (automatic & manual)

ES16&17 I-OATC Safety Injection actuation failure (automatic & manual)

AF02C C-UO MDAFW pump B trip Scenario 5 Page 1

Appendix D 0 Scenario Outline Form ES-D-1

• Event 1:

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor The Normal Charging Pump trips resulting in flashing of the CVCS normal letdown flowpath. Crew enters AOP 18007-C section B for loss of charging flow.

Verifiable Actions:

OATC - Immediately isolates letdown flowpath. Trends RCP seal parameters on IPC. Determines that NCP did not have a loss of suction prior to starting either CCP. Verifies normal charging flowpath is correct.

Technical Requirements:

13.1.3 & 13.1.5 - both INFO only for charging pumps and boration flowpaths operating.

Event 2:

Place CVCS charging & letdown in service using SOP 13006-1.

Verifiable Actions:

OATC - Starts CCP and establishes 80-90 gpm charging flow. Establishes 75 gpm letdown flow.

• Event 3:

Loss of RAT <<Au the offsite source to 1E 4160 bus AA02. DG 1A will briefly start and trip on over speed resulting in a complete loss of power to the bus. This will require entry into AOP-18031-1 section A for Loss of 4160 1E Emergency Bus will DG Failing to Tie.

Verifiable Actions:

ALL - Restore reactor power to < 100%.

UO - Throttle TDAFW pump to control SG levels and reactor power.

Technical Specifications:

3.8.1 - AC Sources (Operating) - Condition E - Restore in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and apply LCO 3.8.9 3.8.9 - Distribution Systems (Operating) - Condition A - Restore in 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> 3.8.4 - DC Sources (Operating) - Condition C - Restore in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> Event 4:

Power descent to 90% to remove HDP # 1 from service.

Verifiable Actions:

ALL - Power reduction. UO will operate the main turbine and OATC will operate control rods and the CVCS boration controls.

• Scenario 5 Page 2

Appendix 0 Scenario Outline Form ES-O-1

• EventS:

Controlling feed water flow channel fails high. This will result in underfeed of affected SG and also affects MFPT Master Speed Controller. This will require entry into AOP-18001 section G for Failure of Steam Generator Flow Instrumentation.

Verifiable Actions:

UO - Takes manual control of MFPT Master Speed Controller and SG # 4 MFRV to control SG levels.

Select out the failed channel.

Events 6 and 7:

Feed water line break IRC on SG # 1. This will result in either a manual reactor trip by the crew or an automatic reactor trip on SG # 1 Lo-Lo level. On the reactor trip, an SI actuation signal will soon be received on Hi-1 containment pressure of 3.8 psig. However, automatic SI and manual SI will not actuate.

This will require the crew to manually start ECCS pumps and align ECCS valves. CIA / CVI will actuate if the crew uses the actuation hand switches. Automatic isolation of the main steam lines will also fail to actuate requiring manual actions by the crew.

Verifiable Action:

OATC - Performs a manual reactor trip as SG levels lower. Manual start of Train B ECCS pumps and aligns valves. Manual start of two (2) Train B CCW pumps. Manual actuation of CIA / CVI.

• UO - Manual steam line isolation actuation. Isolation of Faulted SG. Raises TDAFW speed or opens isolation valves to establish auxiliary feed water flow.

Critical Tasks:

1. Manual SLI to limit blow down to one SG to prevent challenge to Containment Barrier.

2. Manual isolation offaulted SG # 1. This includes direction to plant personnel to locally isolate de-energized AFW valve to SG # 1.

• Scenario 5 Page 3

Scenario Event Description VogUe-2007-301 Vogtle-2007-301 Draft

• Facility: IVogUe E.xamlners:

Examiners:

VogUe I Scenario No.:

Operators:

5 Op-Test No.: 2007-301 I Conditions:

Initial Conditions: Plant has been at 100% Power for Ihree three months following a refueling outage.

I following : Falture Pre load the following: Failure of automatic SU SLI (EStO.

(E510, ES11). falhJ,.. of automatic and manual SI E511), failure 51 (E5 16, E517)

(ES1S, ES17)

I MO AFW pump "B" MD " S" shaft shear AF02B.

Place SIP "S " B""lnIn PTL.

PTL, place a red hold lag tag on the hand switc switch.

h. Place 51 Train "8" " B" SSMP 5SM P hand switch to "Bypass",

"Bypass ".

Tumover:

Tumover: Storms are approaching from the Southwest and high winds are possible within wi thin the hour.

I SI Pump O 51 °B" S" was tagged out yesterday at 1200 1200 hours0.0139 days <br />0.333 hours <br />0.00198 weeks <br />4.566e-4 months <br /> and is scheduled to be retumed to &eMce service In 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> (TS 3.5.2).

I Healer Heater Drain Pump #II 1 is experiencing high vibra vibrations.

management are in the field evaluating the pump at thIs tions . The system engineer.

this time.

lime.

maintenance. and operations engineer, maintenance, I

Event Malf. No. I Malt. No.1 Event Event Description No. Position Type Type*

I Fill SI 81 N Fill Safety Inj ection Accumulator # 3, leve Injection levell low due to sample valve left open. open.

Accum I 1 BOP 50P-13150-1. Safety Injection System section 4.2.1 for Filling Accumulator at SOP*131SO*1, Normal Res Notmal RCS Prossure.

Pressure. ,

I SRO (TS) TS 3.5.1 TS (eees

• 3.S.1 (ECCS - Acc-umulalors)

AccumulaJors) is cleared during this evolution evolution..

I PR03A@ I Controlling PRZR level Instru instrument ment lLT*459 T-459 faits fails high. I 100%

100°" 1800 1 ~ C . Section 18001-C, ~ ection 0 Failure of PRZR Level level Instrumentation 2

RO 3.3.' tRx.

TS 3.3.1 T5 (Rx. Trip)

SRO (TS)

SRO(TS) cC I

I EElL02 O2 los.

loss of RAT 1A 1A (Offsite Power Power)) with DG1AOG1A tripping on over speed.

I I 3 EL01 A AOP-f 8031 . section A for Loss of 4160 1E Bus with DG AOP-18031, OG Failing to Tie I RO/BOP RO / BOP TS 3.8.1 (AC Sources)

I SRO (TS)

FW020@

FW020 @ I Controlling FW Flow Channel on loop Loop # 4 SG falls fails high I

I 4 100%

18001-C section G for Fail Failure ure of Steam Generator Flow Instrumentation I

18001*C BOP Power R Power ramp from 100% to 90% to remove HOP # 1 from service.

, 5 Ramp ALL AOP-18013-C. Rapid Power Reduction.

AOP.18013.C, I FW06A@

FW06A @

0-25%

0*25%

M Feed water line Break on SG # 1 ORC outside FWI valves.

Crew will enter E*O E-O after manually tripping the reactor and SI 51 will actuate on ,

/

6 over 50 Low PRZR p pressure.

ressure. The crew will wi ll transition to E-2E*2 to isolate is olate the faulted SG.

seconds ALL All

Scenario Event Description Vogtle-2007-301 Draft AC028 AC02B C ACCW Pump # 2 trips resulting in a loss of Rep RCP cooling.

7 RO RCP before 10 minutes elapse Dr Crew trips Rep or after exceeding Rep RCP trip limits.

limits.

(N)ormal,. (R)eaclivity, (N)ormal (R)eactivity, {I)nstrument.

(I)nstrument, (C)omponent, (M)ajor Vogtle 2007-301 Scenario #5 (Feed Water Line Break IRC I Loss of ACCW)

Event 1 Crew assumes shift with 51 SI Accumulator # 3 pressure of < 617 psig (Tech Spec limit).

Pressure low due to Chemistry inadvertently left sample valve open causing level to lower along with pressure. This happened just prior prio'r to turnover, turnover, direct crew to restore accumulator # 3's3'5 pressure to normal.

normal. Crew will restore using SOP-13105-1 SQP-13105-1 SI 51 system.

Verifiable Action: (BOP) Manual start of SIP "A" appropriate 51 "An and manipulate appr()priate Sisystem system valves to restore Accumulator # 3 pressure to greater tha thann the Tech Spec limit. "

Technical Specifications: LCO 3.5.1 3. 5.1 to be cleared.

Event 2 Controlling PRZR level channel LT- LT-459 will fail hig 459 wfll highh resulting in an automatic reduction

• of charging flow via FV-0121 . This will require Failure of PRZR level instrumentation.

Verifiable Action: (RO) Takes req uire entry into AOP*

AOP-1800 1-C, section 0 for 18001-C, Ta kes manual control of charging flow control valve FV-0121 to restore charging flow to normal.

Verifiable Action:

Action : (ROJ (RO) Selects out the failed cha channel.

nnel.

Specifications: LCO 3.3.1 Technical Specifications; 3. 3.1 Event 3 Loss of RAT -A*"A" the offsite source to 1E 4160 bus AA02 AA02.. DG1A will briefly start and trip on over speed resulting in a complete loss of power to the bus bus.. This will require entry into AOP-18031-AOP-18031-11 section A for Loss of 4160 1E Emergency Bus will DG Failing to Tie.

Verifiable Action: (ALL) Restore reactor power to < 100%.

Verifiable Action: (BOP) Throttle TDAFW pump to control SG levels and reactor power.

Technical Specifications: LCD LCO 3.8.3.8.11 and list in Attachment A of 18031.

Vogtle-2007 -301 Scenario Event Description Vogtle-2007-301 Draft Event 4 Controlling feed water flow channel fails high. This will result in underfeed of affected SG and also affects MFPT Master Speed Controller. This will require entry into AOP-18001 section G for Failure of Steam Generator Flow Instrumentation.

Verifiable Action: (BOP). Takes manual control of MFPT Master Speed Controller and SG # 4 MFRV to control SG levels. Select out the failed channel. channel.

Event 5 EventS Management request rapid power descent to 90% to remove HDP HOP # 1 from service as a safety concern.

Verifiable Action: (ALL) Power reduction. BOP will operate the main turbine and RO will operate control rods and the CVCS boration controls.controls.

Event 6 Feed water line break IRC on SG # 1. This will result in either a 'manual manual reactor trip by the crew or an automatic reactor trip on SG # 1 La-La Lo-Lo level. On the reactor trip, triP. an SI signall will soon be received on Hi-1 containment pressure of 3.8 psig.

actuation signa psig.

However, automatic SI and manual 51 SI will not actuate. This will require the crew to manual start ECCS pumps and align ECCS valves. CIA I CVI CVI will actuate if the crew uses the actuation hand switches. Automatic Isolation.

isolation of the main steam lines will also fail to actuate requiring manual actions by the crew.

• Verifiable Action: (RO) Performs a manual reactor trip as SG levels lower Action:: (RO) Manual start of Train B ECCS Verifiable Action ECGS pumps and aligns valves.

Verifiable Action: (RG)

(RO) Manual start of of two (2) Train B CCW pumps.

(RO) Manual actuation of CIA I/ CVI.

Action:: (ROJ Verifiable Action Verifia ble Action: (BOP) Manual steam line isolation actuation.

Verifiable Verifiable Action: (BOP) Raises TDAFW speed or opens isolation valves to establish auxiliary feed water flow.

flow _

Task:: Manual start of CCP "8" Critical Task "B" and opening of BIT outlet isolation HV-8801B.

88016.

Task:: Manual Sli Critical Task SLI to limit blow down to one SG to prevent challenge to Containment Barrier.

Scenario Event Description Vogtle-2007-301 Vogtle-200?-301 Draft

• Event 7 Event?

ACCW pump # 2 will trip just after entry into E-2 resulting in a loss of cooling to the RCPs . The crew should trip the RCPs prior to 10 minutes or immediately (within 1 RCPs.

minute) of receipt of any RCP immediate trip criteria parameter. This will be a chance for the SRO to prioritize crew actions between faulted SG and ACCW pump trip.

Verifiable Action: (RO).

(ROj. Manually trips RCP on loss of ACCW ACCW..

Action : (BOP) Manual isolation of faulted SG # 1.

Verifiable Action: 1.

Critical task: Manual isolation of faulted SG # 1. This includes direction to plant de~energized AFW valva personnel to locally isolate the de-energized valve to SG # 1.

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 5 Page 1 of 3 Event

Description:

The NCP will trip resulting in a loss of CVCS charging flow and flashing of the CVCS letdown line. This will require entry into AOP 18007-C, section B for loss of charging.

Time Position Applicant's Action or Behavior CREW Diagnose trip of the in service normal charging pump (NCP)

Alarms:

• CHARGING LINE HIILO FLOW

• NC PUMP LO FLOW

• CHARGING PUMP OVERLOAD TRIP

• REGEN HX LTDN HI TEMP

• RCP SEAL WATER INJ LO FLOW Indications:

• Charging flow - goes to 0 gpm

• Letdown flow - starts wide oscillations due to flashing

• RCP seal injection flows - go to 0 gpm OATC Immediately isolates CVCS letdown flow:

• Closes letdown orifice isolation valves

• Closes letdown isolation valves SS Enters AOP 18007-C, Section B, Loss of Charging (Crew Update)

OATC/UO Initiate foldout page for 18007-C, section B 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 5 Page 2 of 3 Event

Description:

The NCP will trip resulting in a loss of CVCS charging flow and flashing of the CVCS letdown line. This will require entry into AOP 18007-C, section B for loss of charging.

Time Position Applicant's Action or Behavior OATC Trends RCP seal parameters (attachment A):

• Seal injection flows

• Seal injection temperatures (VCT outlet)

• #1 sealleakoff flows

• #1 seal inlet temperatures OATC Determines cause of charging pump trip (its not gas binding):

• NCP flow & pressure trend history

• VCT level 30%-50 OATC Checks ACCW system is in service OATC Verifies charging valves open:

• HV-8105

• HV-8106

• HV-8146 OR HV-8147

• HV-8485A and B

• FV-121

• 2

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 5 Page 3 of 3 Event

Description:

The NCP will trip resulting in a loss of CVCS charging flow and flashing of the CVCS letdown line. This will require entry into AOP 18007-C, section B for loss of charging.

Time Position Applicant's Action or Behavior SS Initiates Technical Requirements:

TR 13.1.3 Boration Flow paths - INFO only TR 13.1.5 Charging pumps - INFO only OATC Proceeds to SOP 13006-1 to restore normal charging & letdown (Event 2)

• 3

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 5 Page 1 of 3 Event

Description:

The OATC will restore normal charging and letdown to service using SOP 13006-1 following implementation of AOP 18007-C from event 1.

Time Position Applicant's Action or Behavior SOP 13006-1! Section 4.4.13:

OATC Dispatch ABO to perform CCP pre-start checks Verify VCT level between 30% & 80%

Verify proper charging alignment:

• VCT suctions - OPEN (LV-112B & LV-112C)

• Pump normal miniflow isolations - OPEN (HV-8111A/8111 B/811 0)

• Pump suction & discharge valves - OPEN (HV-8471B & HV-8485B)

• Safety Grade Charging isolation - CLOSED (HV-190B)

• CCP discharge header cross connect - OPEN (HV-8438)

• Seal injection flow (HC-182) set for maximum flow

• Charging control FIC-121 set to minimum

• Charging loop isolation - OPEN (HV-8146 or HV-8147)

• CCP Aux LO pump - Running OATC Start selected CCP (most likely will be CCP-1 B):

• Verify pump aux LO pump lamp goes out

• Adjust charging to desired flow

• Adjust seal injection flow between 8 and 13 GPM.

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 5 Page 2 of 3 Event

Description:

The OATC will restore normal charging and letdown to service using SOP 13006-1 following implementation of AOP 18007-C from event 1.

Time Position Applicant's Action or Behavior SOP 13006-1! Section 4.4.2 OATC Align letdown flow path for start up:

• LTDN Orifice isolations(HV-8149NB/C) - CLOSED

• LTDN isolations (LV-459/460) - CLOSED

• PZR aux Spray(HV-8145) - CLOSED

• Pipe Break protection (HV-15214) - OPEN

• LTDN CNMT isolations (HV-8160 & HV-8152) - OPEN

• LTDN pressure controller (PV-131) -Manual 50%-75%

• LTDN HX outlet (TIC-130) - Manual to most recent position on rounds sheets OATC Verify PZR level> 17%

OATC Verify charging aligned:

• Charging line isolations(HV-8105 & HV-81 06) -OPEN

• Charging to RCS loop isolation -either one OPEN

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 5 Page 3 of 3 Event

Description:

The OATC will restore normal charging and letdown to service using SOP 13006-1 following implementation of AOP 18007-C from event 1.

Time Position Applicant's Action or Behavior OATC Raises charging flow to 80-90 GPM whife maintaining RCP seal injection flow between 8-13 GPM OATC Establishes Letdown flow:

• Opens L TON isolations and LTON Orifice Isolation to establish 75 gpm letdown flow

• Adjusts LTON pressure between 360-380 psig, then places controller in automatic

• Places LTON HX temperature controller in automatic

• Verify LTON REGEN HX outlet temperature (TI-127) < 380 of.

• 3

Appendix D Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 3 Scenario No.: 5 Page 1 of 6 Event

Description:

RAT 1A (offsite source) will trip with DG-1A tripping on overs peed during start. This will result in 4160 1E bus 1AA02 being de-energized. The crew will be required to enter AOP-18031 section A to address the loss of the 1E bus. Prompt action will have to be taken to address TDAFW pump start and reactor power rise due to cold FW from AFW.

Time Position Applicant's Action or Behavior Diagnoses loss of 1E electrical bus 1AA02:

CREW Symptoms I alarms / indications:

• Various plant alarms associated with Train A

• DG 1A start and subsequent trip.

• DG1A OVERSPEED TRIP alarm.

• TDAFW pump auto start

• SS Enters AOP-18031 Loss of Class 1E Electrical Systems (Crew Update)

OATC Checks reactor power -less than 100% on the following indications:

• UQ-1118 less than or equal to 100% MWT

• PR NIS less than or equal to 100%

• Delta T less than or equal to 100% (not)

UO Performs the following actions to lower power.

• Reduces TDAFW speed to not less than 1535 rpm.

• Throttles affected MDAFW pump discharge valves.

• Reduces turbine load if reactor power still> 100%

• 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 5 Page 2 of 6 Event

Description:

RAT 1A (offsite source) will trip with DG-1A tripping on overspeed during start. This will result in 4160 1E bus 1AA02 being de-energized. The crew will be required to enter AOP-18031 section A to address the loss of the 1E bus. Prompt action will have to be taken to address TDAFW pump start and reactor power rise due to cold FW from AFW.

Time Position Applicant's Action or Behavior UO Verifies DG-1A is not running SS Transitions to 18031 section A UO Verifies two NSCW pumps running on Train B

• OATC Verifies CCP-1 B is running.

If it is not, then isolates letdown and initiates 18007-C for loss of charging flow.

OATC/UO Verifies two CCW pumps running on Train B OATC I UO Initiates the Continuous Actions Page UO Checks AFW not needed to maintain SG levels

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 5 Page 3 of 6 Event

Description:

RAT 1A (offsite source) will trip with DG-1A tripping on overspeed during start. This will result in 4160 1E bus 1AA02 being de-energized. The crew will be required to enter AOP-18031 section A to address the loss of the 1E bus. Prompt action will have to be taken to address TDAFW pump start and reactor power rise due to cold FW from AFW.

Time Position Applicant's Action or Behavior OATC Verifies ACCW pump "B" running UO Verifies four containment coolers Train B running in high speed per 13120-C, Containment Building Cooling System.

UO Verifies two Train B CRDM fans running.

UO Verifies reactor cavity COOling unit Train B is running.

CREW Verifies SFP cooling pump on Train B running.

UO Verifies Train B class 1E 480V load centers energized.

• BB06

• BB07

• BB16

• NB10

• 3

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 5 Page 4 of 6 Event

Description:

RAT 1A (offsite source) will trip with DG-1A tripping on overs peed during start. This will result in 4160 1E bus 1AA02 being de-energized. The crew will be required to enter AOP-1S031 section A to address the loss of the 1E bus. Prompt action will have to be taken to address TDAFW pump start and reactor power rise due to cold FW from AFW.

Time Position A~~licant's Applicant's Action or Behavior UO Verifies Train B MCCs - no trouble alarms present.

SS Directs propping open of Unit 1 Train A Control Building doors.

SS Initiates the following actions:

14230, AC Source Verification Verify SAT energized per 1341S-C, Standby Auxiliary Transformer OATC Verify DRPI - energized.

UO Checks DC bus loads, battery amps less than the following limits.

• AD1 B - 300 amps

• BD1 B - 300 amps

• CD1B -100 amps

• DD1 B - SO amps Monitors all 1E battery bus voltages - remain> 105V DC.

• 4

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 5 Page 5 of 6 Event

Description:

RAT 1A (offsite source) will trip with DG-1A tripping on overspeed during start. This will result in 4160 1E bus 1AA02 being de-energized. The crew will be required to enter AOP-18031 section A to address the loss of the 1E bus. Prompt action will have to be taken to address TDAFW pump start and reactor power rise due to cold FW from AFW.

Time Position Applicant's Action or Behavior OATC Checks reactor makeup water system status.

• Train B Boric Acid Transfer Pump running or in auto.

• Unaffected Reactor Makeup Water Pump running or in auto.

UO Verifies battery charger in service for non-1 E batteries.

ND1

• ND2

• ND3A

• ND3B UO Transfers any de-energized NYS, NYRS, and NYR buses to the alternate sources per 13432-1, 120V AC NON-1 E Instrumentation Electrical Distribution System CREW Directs transfer of control room emergency lighting for Train A to Unit 2

• 5

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 5 Page 6 of 6 Event

Description:

RAT 1A (offsite source) will trip with DG-1A tripping on overspeed during start. This will result in 4160 1E bus 1AA02 being de-energized. The crew will be required to enter AOP-18031 section A to address the loss of the 1E bus. Prompt action will have to be taken to address TDAFW pump start and reactor power rise due to cold FW from AFW.

Time Position Applicant's Action or Behavior SS Initiates applicable Technical Specification requirements listed in Attachment A.

• LCO 3.8.1 AC Sources - Condition E

• LCO 3.8.9 Distribution Systems - Condition A SS Initiates an investigation and repair for the loss of power.

Notifies Operations Duty of the AOP entry.

• 6

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 5 Event

Description:

Power ramp to 90% to remove HDP # 1 from service. The Operations Page 1 of 1 Manager will direct the crew to reduce power to 90% within 15 minutes due to HDP # 1 vibration increasing and a possible personnel safety hazard. The crew will enter AOP-18013-C, Rapid Power Reduction to lower power to 90%.

Time Position Applicant's Action or Behavior SS Initiates a unit shutdown per AOP-18013-C, Rapid Down Power at Operations Management direction.

• Performs SHUTDOWN BRIEFING

• Initiates the Continuous Actions page.

OATC / UO

• Reduce Turbine load at a rate up to 5% minute:

• Maintains Tave within 3 degrees F of Tref using rods in manual or boration as necessary.

• Maintains reactor and turbine power matched.

• PRZR level and pressure maintained on program.

• SG levels maintained on program.

SS Notifies System Operator that a load reduction is in progress.

NOTE Event will continue until adequate power maneuver completed.

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 5 Scenario No.: 5 Page 1 of2 Event

Description:

Controlling feed water flow channel for SG # 4 will fail high resulting in MFRV throttling shut and underfeeding SG # 4. MFPT speed control will also be affected. The crew will be required to perform IOAs of 18001-C section G for SG Flow Instrumentation Failure.

Time Position Applicant's Action or Behavior UO Diagnoses failure of SG # 4 controlling feed flow instrument:

Symptoms / alarms / indications:

• STM GEN 4 FLOW MISMATCH

• Any unexplained steam / feed flow mismatch indication UO Performs lOA of AOP-18001 section G Checks steam and feed flows - matched on all SGs (not)

Performs RNO of lOA.

Takes manual control of MFRV # 4 Takes manual control of MFP speed UO Selects an unaffected channel for control UO Returns MFP(s) speed controls to automatic

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 5 Page 2 of2 Event

Description:

Controlling feed water flow channel for SG # 4 will fail high resulting in MFRV throttling shut and underfeeding SG # 4. MFPT speed control will also be affected. The crew will be required to perform IOAs of 18001-C section G for SG Flow Instrumentation Failure.

Time Position Applicant's Action or Behavior UO Returns SG feed flow valve to automatic SS / Initiates the Continuous Actions Pages CREW UO Checks SG level control maintains NR level at 65%

• SS Notifies I & C to initiate repairs, notifies Operations Duty of AOP entry

• 2

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 1 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCB hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1 Time Position Applicant's Action or Behavior CREW Recognizes degrading plant conditions:

• FW flow higher than steam flow with SG # 1 level lowering rapidly

• Various SG # 1 feed flow, steam flow and level alarms

• OATC Manually trips the reactor using the QMCB hand switches SS Enters E-O, Reactor Trip or Safety Injection OATC / UO Performs IOAs of E-O

• Verifies Reactor Trip (OATC)

• Verifies Turbine Trip (UO)

• Verifies AC Power to the Emergency Buses (UO)

• Checks if SI actuated (OATC)

• 1

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009*301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 2 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCB hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1.

Time Position Applicant's Action or Behavior UO With SS permission performs the following actions to limit RCS cooldown and CNMT pressure rise:

CRITICAL

• Manual SLI

• Isolates AFW flow to SG # 1 (faulted SG)

• Throttles AFW flow to intact SG's (2, 3, and 4)

Note this is an early action allowed by procedure 10020-C and will mostly be performed with SS concurrence shortly after reactor trip immediate actions are completed.

SS/TEAM Initiates Foldout Page, Continuous Actions Page and RO and BOP Initial Actions Pages OATC Performs Initial Operator Actions of E-O

• Checks both trains of ECCS aligning per MLBs. If not performed previously - attempts manual SI actuation

• Checks CIA actuated per MLBs (it won't be)

• Informs SS and manually actuates CIA

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 3 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMC8 hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1 .

Time Position Applicant's Action or Behavior OATC Performs Initial Operator Actions of E-O Checks ECCS pumps and NCP status Part of CRITCAL

• CCPs - NOT running, informs SS STEP

• Places alternate mini flow valve for CCP "8" to Enable PTL st (1 part)

• Starts CCP "B" to achieve high head ECCS flow

• SI Pumps - NOT running

• RHR pumps - NOT running

• Informs SS and starts SI & RHR pumps "8"

• NCP - tripped OATC Performs Initial Operator Actions of E-O

• CCW pumps - informs SS and starts two train 8 CCW pumps

• NSCW pumps - two running per train

• NSCW tower return bypass valves - in auto

• Containment coolers running in SLOW speed with cooler isolation valves open

• Informs SS Train "8" containment coolers need to be shifted to SLOW speed (UO will perform this action)

• 3

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 4 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCB hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 11.

Time Position Applicant's Action or Behavior OATC Performs Initial Operator Actions of E-O.

• CVI valves and dampers closed per MLBs. Should have aligned properly after manual CIA actuation

• OATC Performs Initial Operator Actions of E-O

• Checks containment pressure has remained < 21.5 psig OATC Performs Initial Operator Actions of E-O Part of Checks ECCS flows:

CRITICAL STEP nd

• BIT Flow (none as valves have not aligned)

(2 part)

• Aligns valves per Attachment B

• Opens HV-8801 B to achieve BIT flow

• RCS pressure < 1625 psig.

• SI pump flow

• RCS pressure> 300 psig

• 4

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 5 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the aMC8 hand switches. SLI will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1.

Time Position Applicant's Action or Behavior OATC Performs Initial Operator Actions of E-O Checks ECCS valve alignment proper per ML8s Manually aligns train "8" ECCS valves per Attachments 8, C, D as necessary OATC Performs Initial Operator Actions of E-O Checks ACCW pumps - Train "8" running OATC Performs Initial Operator Actions of E-O Adjusts RCP seal injection to all RCPs 8 to 13 gpm

• 5

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 6 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCB hand switches. SLI will not occur in auto requiring the crew to initiate a manual SLI. The crew will eventually transition to E-2 to isolate SG # 11.

Time Position Applicant's Action or Behavior UO Performs UO Initial Operator Actions of E-O CRITICAL

• Checks MDAFW pump "B" and TDAFW pump is running STEP

• Will need to manually raise TDAFWP pump speed

• Checks NR SG levels> 10%, controls AFW flows

• Checks if SLI is required and ensures MSIVs and Bypasses are closed

• Informs SS and performs manual SLI using QMCB hand switches to limit blow down to 1 SG.

Verifies FWI (MFRV, BFRV, MFIV, BFIVs all shut)

Verifies SGBD isolated and places hand switches for SGBD isolation valves to close Verifies SGBD sample isolations closed Verifies Diesel Generator Train "B" running (not)

Informs SS and manually starts DG "B"

• Throttles AFW flow to control SG levels 10 - 65% NR

• Veri.fies both MFPs tripped

• Checks Main generator output breakers are open OATC Checks RCS temperature stable at or trending to 557 degrees Fusing RCS Tavg

• 6

Appendix 0 Required Operator Actions Form ES*D*2

• Op.Test No.: 2009*301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 7 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCB hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1 Time Position Applicant's Action or Behavior CREW Takes actions of RNO step 8 to control RCS temperature

• Stop dumping steam

• Reduce AFW flow (maintain 570 gpm if SG level <

10%[32%])

• OATC Checks PORVs, Block Valves, and Spray Valves all Closed UO/SS Checks for faulted SG and transitions to E-2, Faulted SG Isolation OATC Checks if RCPs should be stopped (not expected)

• Checks at least one CCP or SIP running

• RCS pressure < 1375 psig

• Stops RCPs if criteria met

• 7

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 8 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCB hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1 .

Time Position Applicant's Action or Behavior SS Initiates CSFST monitoring and initiates EPIP implementation.

UO Verifies MSIVs and Bypasses - SHUT.

• UO Checks SG secondary pressure boundaries.

• Any intact - SG pressure ANY stable or rising.

• Identifies faulted SG # 1 pressure lowering uncontrolled or completely depressurized.

UO Isolates Main Feed water to SG # 1.

• Shuts affected MFIV, HV-5227.

• Shuts affected BFIV, HV-15196.

• 8

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 9 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCS hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1.

Time Position Applicant's Action or Behavior UO Isolates AFW to SG # 1

• MDAFW pump A throttle valve (HV-5139)

• TDAFW pump throttle valve (HV-5122)

• UO Verifies MDAFW pump S running and capable of feeding SGs for RCS cooldown UO Shuts SG #1 steam supply to TDAFW pump (HV-3009)

UO Verifies SG # 1 ARV shut UO Verifies SGSD isolation valve for loop 1 closed with handswitch in close

• 9

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 10 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the OMCS hand switches. SLI will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1 Time Position Applicant's Action or Behavior UO Verifies SG #1 sample isolation is closed UO Verifies SG # 1 remains isolated during subsequent recovery actions unless needed for RCS cooldown UO Checks CST level> 15%

UO Checks for SG tube rupture:

• Secondary radiation trend (steamlines, SJAE, SGSD, sample, etc)

• 10

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6 and 7 Event

Description:

Scenario No.: 5 Page 11 of 11 A feed water line break on SG # 1 inside CNMT will occur. The crew will enter E-O after tripping the reactor and SI will not actuate automatically or from the manual hand switches. This will require the crew to manually start ECCS pumps and align ECCS valves. CIA and CVI actuation will not occur due to auto SI failure but can be actuated using the QMCS hand switches. SU will not occur in auto requiring the crew to initiate a manual SU. The crew will eventually transition to E-2 to isolate SG # 1 .

Time Position Applicant's Action or Behavior UO Checks if ECCS flow can be reduced:

• RCS subcooling > 24°F [38 of ADVERSE]

• Secondary Heat Sink - 570 gpm flow or 10% NR level intact SG

• RCS pressure - stable or rising

• PRZR level> 9%[37% ADVERSE]

• CREW If ECCS termination criteria met transition to 19011-C, SI Termination.

-- OR --

If ECCS termination criteria not met transition to 19010, Loss of Reactor or Secondary Coolant END OF SCENARIO

• 11

Appendix 0 Scenario Outline Form ES*D*1

• Facility: Vogtle Examiners: Lea Scenario No.: 6(Spare)

Operators:

Op-Test No.: 2009-301 NEW Initial Conditions: (IC11)

Power was 100% for previous 30 da~s. 50% power for last 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. CNMT Mini-Purge in service, HV-3009 shut tagged for repairs (emergent work}. DG-1 B running for monthl~ surveillance {3000 KW}, SG ARV #3 tagged for repairs, BA TP #2 tagged for repairs, I&C recording lift coil currents in rod control for baseline PM data.

Turnover: 50% power due to vibration issues with MFP B, maintain 50%. LCO 3.7.5 Condition A {HV-3009}. INFO LCO 3.7.4 (ARV} INFO TR 13.1.3 {BATP}. Complete DG-1 B surveillance procedure.

Event Malf. Event Event No. No. Type" Description Report from PCC that the distribution center is "one contingency away" N-UO 1 N/A from being unable to maintain system voltage between 230 and 242Kv.

N-SS (AOP 1B017-C section A). UO will shutdown EDG-1B.

Dropped Control Rod - (blown lift coil fuse for rod HB due to short from R-ALL 2 RD131 test leads. Dropped rod recovery. (AOP 1B003-C Section A)

TS-SS LCO 3.1.4 - Rod alignment limits I-SS VCT LT-112 fails low causing continuous automatic makeup. Must 3 CV13 I-OATC manually control blender operations otherwise get continuous makeup.

ARP 17007-1.

C-ALL Loss of NSCW train A - pipe break must shift components to alternate 4 NS05 TS-SS train. LCO 3.7.B NSCW & 3.B.1 AC Sources GEOB@ Loss of Offsite AC Power 0% ( EOP 19000-C and AOP 1B017-C Section Band ). LCO 3.B.1 13.0.3 EL02 C-ALL This will also result in a loss of Both RATs 5

EL03 TS-SS After UV load shed OR 1BA03-19 Trip DG-1 B output breaker trips.

6 M-ALL OR Loss of All AC Power go to EOP 19100-C (ECA - 0.0)

Amber lite - on Scenario 6 Page 1

Appendix 0 Scenario Outline Form ES-D-1

• 7 RFs:

EL02 EL37 N-UO N-SS Power restored to SAT from Plant Wilson CT

• (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor Event 1:

Power Control Center reports "one contingency away" from being unable to maintain system voltage between 230 Kv and 242 Kv. Crew enters AOP 18017-C for degraded grid conditions, section A.

Verifiable Actions:

UO - Unload and shutdown OG-1 Busing 14980B-1. Check 1E 4.16KV switchgear voltages between 3873 and 4326. Shift Main Turbine turning gear and turning gear oil pump to alternate power supplies.

OATC & UO - initiate 11400-C station service reduction checklist. (BATP/Rx MU water pump, RWST sludge mixing pump)

Event 2:

Control bank 0 rod drops due to I&C personnel error. Crew enters AOP 18003-C section A.

Verifiable Actions:

OATC - Realigns dropped rod to bank. Exercises bank. Keeps Tave rrref Matched during dropped rod recovery actions.

UO - Open and close rod control lift coil disconnect switches to support recovery of dropped rod.

Technical Specifications:

3.1.4 - Rod Group Alignment Limits - Condition B - Verify SOM met or initiate boration within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Event 3:

VCT local level transmitter LT -112 fails low resulting in a continuous VCT makeup. Entry into ARP 17007-1 window E05 is required to stop the makeup flow and manually control makeup flow using SOP 13009-1.

Verifiable Actions:

OATC - Place VCT makeup control in stop. Manually control VCT makeup to maintain VCT level 30% to 50%.

Event 4:

NSCW train A pipe break requiring entry into AOP 18021-C.

Verifiable Actions:

UO - Place Train A NSCW pumps in PTL to stop leak.

OATC & UO - shift pumps I systems from train A to train B.

Scenario 6 Page 2

Appendix 0 Scenario Outline Form ES*D*1

• Technical Specifications:

3.7.8 NSCW - condition A 3.8.1 AC sources operating - condition B - one OG inoperable 3.4.6 RCS Loops Mode 4 -INFO Only Event 5:

Loss of offsite power requiring entry into EOP 19000-C and AOP 18017-C section B.

Verifiable Actions:

OATC & UO - Verify proper UV sequence and complete actions of E-O due to main generator trip on loss of grid.

UO - control AFW pumps Technical Specifications:

3.8.1 AC Sources - Operating Condition I - action enter LCO 3.0.3 immediately.

3.0.3 Events 6, and 7:

OG-1 B output breaker trips, loss of all AC power, power restored to SAT from Plant Wilson CT black start.

Verifiable Actions:

UO -Emergency stop OG-1 B. Complete rapid RCS cooldown. Restore power to 1BA03 from Wilson CT via SAT.

Critical actions:

1. OG-1 B removed from grid to protect ESF equipment from degraded grid conditions.

2. Completion of rapid RCS cooldown to reduce RCS inventory loss during loss of all AC power.

3. Wilson power through SAT restored to 1BA03. (Note 1AA02 has no NSCW)

• Scenario 6 Page 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 1 Scenario No.: 6 Page 1 of 5 Event

Description:

PCC will report that they are "one contingency away" from being able to maintain system voltage. DG-1 B is tied to the grid for testing. This will require the crew to enter AOP 180 17-C, section A for degraded grid conditions. The UO will have to shutdown DG-1 B to prevent damaging an emergency power source from grid problems.

Time Position Applicant's Action or Behavior CREW Report form PCC that they are "one contingency away" from being able to maintain grid voltage within limits (230 to 242 Kv)

SS Enters AOP 18017-C, Section A, for Degraded Grid Conditions (Crew Update)

• UO Checks DG-1A in standby. Notes DG-1B paralleled to 1BA03.

UO performs DG-1 B unloading and shutdown per 14980B-1 starting with step 5.1.44:

• Unloads DG to 3000 Kw for 5 minutes

• Unloads DG to 700 Kw and opens DG output breaker

• Places DG in UNIT mode and waits for 30 secs

• Verifies Blue fast start light is lit

• Has OAO place LO circ pump in off

• Alarm ALB38-F06 DG1B SWITCH NOT IN AUTO received

• Depresses DG-1 B stop push button (1 HS-4572B)

• Extra / OAO performs standby alignments checks SS Terminates maintenance / testing activities on critical electrical distribution components

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 6 Event

Description:

PCC wi" report that they are "one contingency away" from being able to maintain system voltage. DG-1 B is tied to the grid for testing. This wi" require the crew to enter Page 2 of 5 AOP 18017-C, section A for degraded grid conditions. The UO wi" have to shutdown DG-1B to prevent damaging an emergency power source from grid problems.

Time Position Applicant's Action or Behavior UO Checks Power System Stabilizer in service OATC / UO Initiate AOP continuous actions page UO Verifies Main Generator within reactive capability curve of Figure 1 ltOo....-_ _ _ _ _ _ _un U_E_l_3n_d_G_e_ne_r_a1_0r_C_3t--.palb_lIity..4-_

and Generator Capability ltoo,...--------;..;;:.;;;....;;.;;.;'-===-=L,;:.:,.;.;.;.;L-_ __________---.

Mat MVAzo13"-D.O

-80$+-0--:~.~:---~'i()-.--.o~.--.-.O--l~."-O--1~.O-.--14-0.--1.~OO--1-J ***

• MWatts (Red operating POlO! indicates Mgatl¥e watts)

• 2

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 6 Page 3 of5 Event

Description:

PCC will report that they are "one contingency away" from being able to maintain system voltage. DG-1 B is tied to the grid for testing. This will require the crew to enter AOP 18017-C, section A for degraded grid conditions. The UO will have to shutdown DG-1B to prevent damaging an emergency power source from grid problems.

Time Position Applicant's Action or Behavior UO Places following on alternate power supply:

• Main Turbine Turning Gear

• Turning Gear Oil Pump Actions:

• Place TURNING GEAR MOTOR 1HS-6541 in the After Stop (green target) position

• Start the MAIN TURB AUX EMERG DC OIL PMP and verify red lamp is LIT on 1HS-6545.

• Place TURNING GEAR OIL PMP 1HS-6543 in the PULL TO LOCK position

• Has TBO locally swap feeder breakers

• Place TURNING GEAR OIL PMP 1HS-6543 in AUTO.

• Place TURNING GEAR MOTOR 1HS-6541 in AUTO PTL

• Stop MAIN TURB AUX EMERG DC OIL PMP using 1HS-6545 UO Verifies Turning Gear Oil Pump in AUTO SS Informs shift personnel of degraded offsite electrical system condition and potential for loss of offsite power

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 6 Page 4 of 5 Event

Description:

PCC will report that they are "one contingency away" from being able to maintain system voltage. DG-1 B is tied to the grid for testing. This will require the crew to enter AOP 18017-C, section A for degraded grid conditions. The UO will have to shutdown DG-1 B to prevent damaging an emergency power source from grid problems.

Time Position Applicant's Action or Behavior SS Designates individuals to monitor DGs and TDAFW pump if a loss of offsite power occurs SS Verifies SATin standby and available

• SS Checks Plant Wilson Manned and Operating Report that normal Wilson dayshift crew is currently manning Wilson CREW Initiates 11400-C, Station Service Reduction Checklist:

• Shutdown one train of CCW

• Verify BA transfer and Reactor M/U water pumps - not in run

• Shut down RWST sludge mixing pump

• Ensure only 2 River Water Pumps running

• 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 1 Scenario No.: 6 Page 5 of 5 Event

Description:

PCC will report that they are "one contingency away" from being able to maintain system voltage. DG-1 B is tied to the grid for testing. This will require the crew to enter AOP 18017-C, section A for degraded grid conditions. The UO will have to shutdown DG-1 B to prevent damaging an emergency power source from grid problems.

Time Position Applicant's Action or Behavior SS Checks either 4160V 1E bus energized by offsite power (This is a continuous action step)

If a loss of offsite power to both busses occurs then:

• Trip the reactor

• Initiate EOP 19000-C, Reactor Trip or Safety Injection

• Go to Section B of 18017-C, Loss of Grid

• UO Checks 1E 4.16kV switchgear voltages 3873 to 4326V each hour

• 5

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 2 Scenario No.: 6 Page 1 of 6 Event

Description:

Control Rod H-8 will drop to the bottom of the core due to personnel error while testing lift coil currents. The crew will enter AOP 18003-C, Section A and recover the dropped rod to restore normal rod alignment and flux distributions.

Time Position Applicant's Action or Behavior CREW Diagnose dropped control rod:

Indications:

Rod H-8 DRPI goes to 0 steps Reduction in RCS Tave Change in AFD / PR Nl's Alarms:

ROD AT BOTTOM ROD DEV TAVEITREF DEVIATION

• SS Enters AOP 18003-C, Section A for a dropped control rod (Crew Update)

UO Stops any changes in turbine load OATC Checks DRPI available and only one rod has dropped SS Initiates Technical Specifications:

3.1.4 - Rod Group Alignment Limits - Condition B - Verify SDM met or initiate boration within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Verifies < 75% power

• OATC / UO Initiate continuous actions page 1

Appendix D Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 2 Scenario No.: 6 Page 2 of 6 Event

Description:

Control Rod H-8 will drop to the bottom of the core due to personnel error while testing lift coil currents. The crew will enter AOP 18003-C, Section A and recover the dropped rod to restore normal rod alignment and flux distributions.

Time Position Applicant's Action or Behavior OATC Maintains Tavg on program by:

• Adjusting turbine load

• Dilute or Borate

• Use manual rod control OATC Maintain power distribution within limits when> 50% power:

• AFD within 5% of target

• QPTR~ 1.02

• SS Determines cause of dropped rod from I&C report REPORT: Shorted test leads. All testing suspended, fuse replaced.

UO NOTE: ENSURE Malfunction RD-131 has been removed prior to rod withdrawal.

Disconnects lift coil for dropped rod (H8) with maintenance concurrence SS Records data in log:

• Time of rod drop

• Dropped rod number

• Initial power level

• Affected group step counter position

• OATC Verifies power < 75%

2

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009-301 Event No.: 2 Scenario No.: 6 Page 3 of 6 Event

Description:

Control Rod H-8 will drop to the bottom of the core due to personnel error while testing lift coil currents. The crew will enter AOP 18003-C, Section A and recover the dropped rod to restore normal rod alignment and flux distributions.

Time Position Applicant's Action or Behavior SS Determines that dropped rod can be retrieved:

• Time of dropped rod known

• Direct cause known and corrected

• Dropped rod withdrawal will be initiated time limits (4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />)

OATC / SS Verifies power < 65% or 10% below most limiting AFD/QPTR requirement

• OATC / UO OATC OATC Maintains power < 75% or AFD / QPTR limits during rod recovery Maintains Tavg within 3 F of Tref during recovery Rod select switch to Control Bank D OATC Reset affected group step counter to 0 UO Reconnects rod H8 lift coils Disconnects all lift coils in control bank D except rod H8

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 6 Page 4 of6 Event

Description:

Control Rod H-8 will drop to the bottom of the core due to personnel error while testing lift coil currents. The crew will enter AOP 18003-C, Section A and recover the dropped rod to restore normal rod alignment and flux distributions.

Time Position Applicant's Action or Behavior OATC Determines rod is in group 2 SS Verifies unit power history> 75% for at least 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> in previous 7 days SS Record affected bank group step counter positions in log SS Reads Notes to crew:

Expect rod control urgent failure during rod withdrawal Per 10000-C, Conduct of Operations, 3 step rod withdrawal limit may be suspended during abnormal conditions SS Suspends 3 step limit during rod H8 recovery OATC Withdraws rod H8 to bank control bank D position SS Records rod recovery completion time and affected bank position

• 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 6 Page 5 of 6 Event

Description:

Control Rod H-8 will drop to the bottom of the core due to personnel error while testing lift coil currents. The crew will enter AOP 18003-C, Section A and recover the dropped rod to restore normal rod alignment and flux distributions.

Time Position Applicant's Action or Behavior UO Connects all lift coils OATC Resets rod control urgent alarm with HS-40039 rod control alarm reset switch SS Dispatches operator to reset master cycler locally at rod control cabinets

• SS Determines PIA converter needs to be reset Dispatches CSO to reset PIA converter Discontinues 14915 for rod insertion limit monitor OATC Completes rod exercise per 14410-1 for the affected bank (control bank D)

OATC Places rods in manual or auto

• SS Limits future power increases to 3%/hr 5

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 2 Scenario No.: 6 Page 6 of 6 Event

Description:

Control Rod H-8 will drop to the bottom of the core due to personnel error while testing lift coil currents. The crew will enter AOP 18003-C, Section A and recover the dropped rod to restore normal rod alignment and flux distributions.

Time Position A~~icant's Action or Behavior Applicant's SS Notifies duty engineer of dropped rod recovery and that plant computer (lPC) position adjustment may be necessary Discontinues 14915 for rod deviation monitor when rod demand position input to the IPC is reset SS Returns to procedure and step in effect Has SSS:

• Write a condition Report

• Notify OPS Duty Manager of AOP entry

• 6

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 6 Page 1 of2 Event

Description:

VCT local indicator LT-112 fails low causing a continuous makeup to the VCT. The crew will refer to ARP 17007-1 manually control VCT makeup.

Time Position Applicant's Action or Behavior CREW Diagnoses VCT makeup problems:

Alarms:

VCT HIILO LEVEL Indications:

Continuous automatic VCT makeup start with VCT level between 30-50%

• OATC ISS OATC Refer to ARP 17007-1 for VCT HI/LO LEVEL Checks VCT level using main control board indication (L T-185)

OATC Determines VCT level is I will be high Stops VCT makeup Diverts letdown to the RHT if necessary to restore VCT level Operates makeup per 13009-1 as necessary This failure will require the OA TC to manually start I stop VCT makeup as necessary to maintain VCT 30-50%.

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 3 Scenario No.: 6 Page 2 of2 Event

Description:

VCT local indicator LT -112 fails low causing a continuous makeup to the VCT. The crew will refer to ARP 17007-1 manually control VCT makeup.

Time Position Applicant's Action or Behavior SS Has SSS perform following:

• Write a condition report

• Notify I&C to repair

• 2

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 6 Page 1 of 4 Event

Description:

NSCW train A discharge header will rupture causing a loss of NSCW inventory. The crew will enter AOP 18021-C, Loss of NSCW, to shutdown the affected train and stop the leakage and shift supported components to train S.

Time Position Applicant's Action or Behavior CREW Diagnoses NSCW leakage:

Alarms:

NSCW TRAIN A LO HDR PRESS NSCW TRAIN A RHR PMP & MTR CLR LO FLOW NSCW TRAIN A CNMT CLR 1 & 2 LO FLOW NSCW TRAIN A CNMT CLR 5 & 6 LO FLOW LVL 2 LEAK DETECTED (Sack Panel)

Indications:

NSCW Train A supply / return flow mismatch rd Auto start of 3 NSCW pump on low discharge header pressure

• SS Enters AOP 18021-C, Loss of NSCW (Crew Update)

UO Checks that catastrophic leakage does exist on NSCW Train A UO Places all 3 NSCW Train A pumps in Pull-To-Lock UO Emergency stops DG-1A

• 1

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 6 Event

Description:

NSCW train A discharge header will rupture causing a loss of NSCW Page 2 of 4 inventory. The crew will enter AOP 18021-C, Loss of NSCW, to shutdown the affected train and stop the leakage and shift supported components to train B.

Time Position Applicant's Action or Behavior UO Verifies proper operation of NSCW Train B

• 2 pumps running

• Supply header pressure> 70 psig

• Supply water temperature < 90 F

• Supply header flow - 17,000 GPM UO / OATC Verifies following equipment on Train B running if required:

CCP SI Pump CS Pump RHR Pump CCW Pumps (Will need to be started)

CREFS

• ESF Chiller UO / OATC Places Train A equipment in PTL:

• CCP

• SI Pump

• CS Pump

• RHR Pump

• CCW Pumps

• CREFS

• ESF Chiller in stop

• 2

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 4 Scenario No.: 6 Page 3 of4 Event

Description:

NSCW train A discharge header will rupture causing a loss of NSCW inventory. The crew will enter AOP 18021-C, Loss of NSCW, to shutdown the affected train and stop the leakage and shift supported components to train B.

Time Position Applicant's Action or Behavior SS Notifies SSS to have SFP cooling swapped SS Dispatches operators to investigate leak UO Uses Attachment A to:

Start train B components:

• CNMT coolers in high speed

• CNMT Aux air cooler

• Reactor Cavity Cooler Stop Train A components:

• CNMT coolers in high speed

• CNMT Aux air cooler

• Reactor Cavity Cooler UO Disables automatic operation of DG-1A using 13145A-1 SS Has SSS:

Initiate 14230-1 AC Source Verification Verify SAT energized using 13418-C Write a Condition Report Notify OPS Duty Manager of AOP entry

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009*301 Event No.: 4 Scenario No.: 6 Page 4 of 4 Event

Description:

NSCW train A discharge header will rupture causing a loss of NSCW inventory. The crew will enter AOP 18021-C, Loss of NSCW, to shutdown the affected train and stop the leakage and shift supported components to train B.

Time Position AQ~licant's Action or Behavior SS Determines Technical Specification impact:

• 3.7.8 NSCW - condition A

• 3.8.1 AC Sources Operating - condition B - one DG inoperable

• 3.4.6 RCS Loops Mode 4 - INFO Only UO Checks NSCW Train A return temperature < 95 F SS Returns to procedure and step in effect

• 4

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 6 Page 1 of 6 Event

Description:

Grid voltage will start to sag causing numerous alarms in the control room.

Eventually both 1E busses will load shed and the sequencers will start a UV sequence. The crew will manually trip the reactor, initiate EOP 19000-C, and enter AOP 18017-C, Section B due to the loss of offsite power supply to both 1E 4.16 kV busses.

Time Position Applicant's Action or Behavior CREW Diagnose loss of grid:

Indications:

Both 1E busses load shed and start a UV load sequence Alarms:

4160V SWGR 1AA02 TROUBLE SEQ A TROUBLE 4160V SWGR 1BA03 TROUBLE SEQ B TROUBLE Numerous related alarms as grid voltage drops

• CREW Immediate actions of 19000-C:

• Verify Reactor Trip

• Verify Turbine Trip

• Check Power to AC Emergency Busses (only 1BA03)

• Check if SI is actuated or required (Not)

UO Possible early action to throttle AFW flow to limit RCS cooldown with SS approval.

SS Transitions to 19001-C, Reactor Trip Response (Crew Update)

OATC/UO Initiate Continuous Action and Foldout pages

• 1

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 6 Page 2 of 6 Event

Description:

Grid voltage will start to sag causing numerous alarms in the control room.

Eventually both 1E busses will load shed and the sequencers will start a UV sequence. The crew will manually trip the reactor, initiate EOP 19000-C, and enter AOP 18017-C, Section B due to the loss of offsite power supply to both 1 E 4.16 kV busses.

Time Position Applicant's Action or Behavior JY>plicant's OATC Initiate monitoring of Critical Safety Function Status Trees SS If Si actuation occurs will return to 19000-C UO Limits RCS cooldown:

• Verify AFW flow to SGs

• Trip both MFPs

• Checks SG NR level> 10%

• Throttle AFW flow as necessary

• (maintains at least 570 GPM if SG NR levels < 10%)

• Verifies SGBD isolation valves and handswitches closed UO Checks RCS Temperature stable at or trending to 557 F If Not, then:

• Stop dumping steam

• Throttle AFW flow

• Shut MSIVs & BSIVs

• Borate RCS UO Checks for proper Feedwater Isolation when RCS temperature < 564 F:

• MFIVs

• BFIVs

• MFRVs

• BFRVs 2

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 6 Page 3 of 6 Event

Description:

Grid voltage will start to sag causing numerous alarms in the control room.

Eventually both 1E busses will load shed and the sequencers will start a UV sequence. The crew will manually trip the reactor, initiate EOP 19000-C, and enter AOP 18017-C, Section B due to the loss of offsite power supply to both 1E 4.16 kV busses.

Time Position Applicant's Action or Behavior UO Checks total feed flow capability to SGs > 570 GPM OATC Checks all rods fully inserted UO Checks main generator output breakers open

• SS Initiates AOP 18017-C, Section B, Loss of Grid (Crew Update)

SS Notifies the SM to implement EPIPs UO Checks both class 1E 4160V busses energized by their DG:

NOTE: Only train B will have power Check DG-1 B frequency at 60 Hz and Voltage 4025-4330 V SS Dispatches designated personnel to monitor DG-1 B

• 3

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 6 Page 4 of6 Event

Description:

Grid voltage will start to sag causing numerous alarms in the control room.

Eventually both 1E busses will load shed and the sequencers will start a UV sequence. The crew will manually trip the reactor, initiate EOP 19000-C, and enter AOP 18017-C, Section B due to the loss of offsite power supply to both 1E 4.16 kV busses.

Time Position Applicant's Action or Behavior UO Checks Train B 480V switchgear & MCCs energized UO Checks only two Train B NSCW pumps running OATC Checks only one charging pump running

• OATC Checks two CCW pumps running train B OATC / UO Initiate continuous actions page UO Checks AFW pumps running and controls SG NR levels 10-65%

OATC Checks ACCW pump 2 running

• 4

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 6 Page 5 of 6 Event

Description:

Grid voltage will start to sag causing numerous alarms in the control room.

Eventually both 1E busses will load shed and the sequencers will start a UV sequence. The crew will manually trip the reactor, initiate EOP 19000-C, and enter AOP 18017-C, Section B due to the loss of offsite power supply to both 1 E 4.16 kV busses.

Time Position Applicant's Action or Behavior UO Verifies four train B CNMT coolers running in fast speed UO Verifies two CRDM fans and one reactor cavity fan running

• SS Has SSS verify SFP cooling Train B running SS Contacts Transmission System Operator to determine EOP to be used to restore power. Operator will select Plant Wilson black start as the procedure to use.

SS Has SSS dispatch personnel to switchyard / Wilson to support power recovery.

• 5

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 5 Scenario No.: 6 Page 60f6 Event

Description:

Grid voltage will start to sag causing numerous alarms in the control room.

Eventually both 1E busses will load shed and the sequencers will start a UV sequence. The crew will manually trip the reactor, initiate EOP 19000-C, and enter AOP 18017-C, Section B due to the loss of offsite power supply to both 1E 4.16 kV busses.

Time Position Applicant's Action or Behavior UO Checks Train B & D DC busses energized by battery chargers Checks discharge rates on Train A & C batteries < 300A & 100A Evaluates selective load stripping of Train A & C DC busses using 19100-C Attachment A.

Dispatches operators to shutdown inverters and open battery breakers if 1E battery voltage drops < 105 V DC GO TO EVENT 6 - LOSS OF ALL AC POWER

• 6

Appendix 0 Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 1 of9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 19100-C, Loss of All AC Power, after tripping DG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position Applicant's Action or Behavior CREW Diagnoses loss of all AC 1E Power:

Indications:

DG-1 B output breaker trips open Both 1AA02 & 1BA03 de-energized UO Emergency stops DG-1 B to protect engine from overheating due to loss of NSCW cooling. This action will be taken with SS concurrence.

SS Enters EOP 191 OO-C, Loss of all AC Power OATC / UO Immediate Actions:

1. Verify Reactor Tripped

• Reactor Trip & Bypass Breakers Open

• Neutron Flux - Lowering

2. Verify Turbine Tripped - All stop valves Closed

• 1

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 2 of 9 Event

Description:

OG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip OG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 191 OO-C, Loss of All AC Power, after tripping OG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position Applicant's Action or Behavior SS Reads NOTE: CSFSTs should be monitored for information only. FRPs should NOT be implemented.

CREW Verifies immediate actions completed properly with procedure OATC Isolates RCS:

• PRZR PORVs - Closed

• Letdown Orifice Isolations - Closed

• Letdown Isolations - Closed

• Excess Letdown Isolations - Closed

• RV Head Vent Isolations - Closed UO Verifies AFW flow> 570 GPM OATC Trips all RCPs and the NCP OATC / UO Initiate Continuous Actions page SS Notifies SM to implement EPIPs 2

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 3 of 9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 191 OO-C, Loss of All AC Power, after tripping DG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position A~plicant's Applicant's Action or Behavior UO Checks Main Generator Output Breakers Open SS Dispatches operators to DG-1 B to determine cause of trip.

(Broken coupling between engine & generator)

• SS Initiates action to energize at least one 4160V AC bus (1AA02 or (1 BA03) from any available power supply OATC Check SI signal- If actuated, reset SI signal (Continuous Action)

CREW When power restored to an AC emergency bus continue recovery with 19100-C, step 42 UO Verifies - 2 NSCW pump handswitches in auto on Train B

• 3

Appendix 0 Required Operator Actions Form ES*D*2

• Op*Test No.: 2009*301 Event No.: 6&7 Scenario No.: 6 Page 4 of9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 191 OO-C, Loss of All AC Power, after tripping DG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position Applicant's Action or Behavior OATC / UO Places equipment in PTL:

• CCPs

• RHR Pumps

• SI Pumps

• CNMT Spray Pumps

• CCW Pumps

• ACCW Pumps

• MDAFW Pumps

• CNMT Coolers

• ESF Chillers SS Determines if AC Emergency Bus can be energized from control room SS Dispatches Operator to initiate isolation of RCP seals by performing Attachment E SS Dispatch operator to check hotwell level control valves closed SS Dispatches operators to prepare for local SG ARV operation

• 4

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 5 of 9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 19100-C, Loss of All AC Power, after tripping DG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position A'p~licant's Applicant's Action or Behavior UO Isolates SGs:

• MSIVs & BSIVs

• MFIVs & BFIVs

• SGBD Isolations

• SG Sample Isolations

• UO Checks for faulted SG - Any SG pressure lowering in an uncontrolled manner or completely depressurized SS Reads caution: Sample temperatures may be elevated due to loss of cooling water to sample coolers UO Checks for Ruptured SG:

• Direct chemistry to take periodic activity samples of all SGs one at a time

• Abnormal secondary radiation:

0 Main Steam lines 0 Steam Jet Air Ejector 0 SGBD UO Checks CST level> 15%

• 5

Appendix D Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 6of9 Event

Description:

DG-18 output breaker will trip de-energizing 18A03. The UO will have to manually trip DG-1 8 to protect the engine from damage due to loss of cooling. The crew will enter EOP 19100-C, Loss of All AC Power, after tripping DG-18. Power will eventually be restored from Plant Wilson to the SAT.

Time Position ~p~licant's Applicant's Action or Behavior UO Controls intact SG NR levels 10-65%

SS CAUTION:

Equipment failures & loss of control power may occur if doors are not opened within 30 minutes of loss of AC power SS Directs SSS to have Unit 1 doors opened:

• UO 847,848,852,855,861,876,863 Monitors 1 E battery bus voltages> 105 VDC If voltage < 105 VDC then shuts down inverter( s) and opens battery breaker If time permits:

• Evaluate securing unnecessary battery loads using Attachment A

• Initiating 18032-C for any inverter shutdown

• Initiating 18034 for any battery breaker opened SS Reads NOTE to CREW:

• Depressurize SG at max rate within capacity of TDAFW Pump to minimize RCS inventory loss

• Continue SG depressurization even if PRZR level goes off scale low

• or RV upper head voiding occurs 6

Appendix 0 Required Operator Actions Form ES-D-2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 7 of 9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 19100-C, Loss of All AC Power, after tripping DG-1B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position Applicant's Action or Behavior UO / SO's Depressurize SGs to 300 psig:

• UO - controls at least ONE SG NR level> 10% & SG Pressure

> 200 psig

• SG Depressurization stopped if either criteria not met

• Locally dump steam using ARVs at max rate

• UO CRITICAL Stops depressurization if any RCS Cold Leg Temperature < 280 F or SG pressure < 300 psig UO / SO's Locally operate SG ARVs to maintain SG pressures @ 300 psig OATC Stops RCS cooldown if reactor does not remain subcritical:

• IR or SR NIS SUR> 0 DPM SS Informed that Wilson Black start is completed and SAT is now Energized.

• 7

Appendix 0 Required Operator Actions Form ES-O-2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 8 of9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 19100-C, Loss of All AC Power, after tripping DG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position Applicant's Action or Behavior SS/UO Energize 1BA03 from SAT using 13418-C and 13427B-1 CRITICAL SS Dispatches operator to reset LOP (UV) sequencer per 13427B-1 UO Checks for proper NSCW Train B operation:

2 NSCW pumps running Tower return/bypass handswitch in AUTO Verify CNMT cooler isolations OPEN SS Dispatches Operators to start up any de-energized Inverters and restore any DC loads previously shed UO / SO's Stabilize SG pressures even if> 300 psig.

UO Verifies Train B 480 VAC Switchgear energized:

• 1BB06

• 1BB07

• 1BB16

• 1NB10

• 8

Appendix D Required Operator Actions Form ES*D*2

• Op-Test No.: 2009-301 Event No.: 6&7 Scenario No.: 6 Page 9 of9 Event

Description:

DG-1 B output breaker will trip de-energizing 1BA03. The UO will have to manually trip DG-1 B to protect the engine from damage due to loss of cooling. The crew will enter EOP 191 OO-C, Loss of All AC Power, after tripping DG-1 B. Power will eventually be restored from Plant Wilson to the SAT.

Time Position Applicant's Action or Behavior UO Verifies Essential 480V AC loads energized:

• Battery chargers

• Control room instruments

• Emergency Lighting

• Communications

• Battery Room Fans SS NOTE:

If RCP cooling was previously isolated, further cooling of the RCP seals will be established by natural circulation cooldown as directed in subsequent procedures SS Selects recovery procedure based on plant conditions:

• RCS subcooling > 24 F [38 F ADVERSE]

• PRZR Level> 9% [37% ADVERSE]

• BIT Isolations (HV-8801A18801 B) - Closed If all conditions met go to 191 01-C, Loss of All AC Power Recovery Without SI required Otherwise, go to 191 02-C, Loss of All AC Power Recovery With SI required END OF SCENARIO

• 9