ML20363A114

2018 Donald C. Cook Nuclear Power Plant Exam Proposed Scenarios

ML20363A114
Person / Time
Site:	Cook
Issue date:	08/13/2018
From:	Chuck Zoia NRC/RGN-III/DRS/OLB
To:	Indiana Michigan Power Co
Zoia C
Shared Package
ML17164A386	List: ML20363A070 ML20363A094 ML20363A097 ML20363A098 ML20363A104 ML20363A114 ML20363A116 ML20363A131
References
Download: ML20363A114 (91)

Text

Appendix D Scenario Outline Form ES-D-1 Page 1 of 16 Facility: DC COOK 1 & 2 Scenario No.: 1 Op-Test No.: _________

Examiners: ___________________________ Operators:

Initial Conditions: 80 % Power.

Turnover: Restore power to 100% following Turbine Valve testing Critical Tasks: Trip RCPs, Initiate 1 train of Safety Injection.

Event No.

Malf. No.

Event Type*

Event Description 1

R-RO Raise Turbine and Reactor Power 2

U1_MPC253

@ 0 I-RO TS Turbine Impulse Transmitter (MPC-253) fails LOW 3

R-RO Recover RODs and temperature 4

U1_MFC 121

@ 0 I-BOP TS Steam Flow Channel (MFC-121) failure fails Low 5

U1_ED07B C-RO TS PZR HTR Transformer Fails (11PHC Fails).

6 U1_RC19A

@ 100%

M Pressurizer Safety Starts leaking and progresses to full open 7

U1_RP10A C-RO Train A Safety Injection signal failure to actuate in AUTO 8

U1_RP10B U1_RP11B C-RO C-BOP Train B Safety Injection signal failure to actuate in AUTO or Manual on the PRZ panel only 9

U1_RP19D C-BOP RPS Relay Failure Train A equipment fails to start (CV, SI, RHR,CC & Control Room Ventilation)

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Page 2 of 16 Event Summary The Crew is directed to restore power to 100% following Turbine Valve testing.

A failure of Turbine Impulse instrument (MPC-253) results in a control rod insertion. The auto rod control circuit will see a power mismatch causing the rods to move in, decreasing reactor power and Tave. The auto rod control circuit will also see a decreased Tref (min 547 deg f) causing rods to move in. RO will be required to place rod control in manual. Crew will be required to implement AOP actions to stabilize the plant and trip Bistables.

The restoration of Tavg will require reactivity manipulations to restore the Axial Flux Difference SG Steam Flow instrument (MFC-121) fails Low. This will result in the closing of #2 SG FWRV (FRV-220) to lower feedwater flow. The BOP will be required to take manual control and regulate FRV-230.

The Crew will be required to implement AOP actions to stabilize the plant and trip bistables.

A failure of the PZR HTR Bus 11PHC will occur. The PZR SCR heater control will need to be transferred to 11PHA. The crew should also refer to Technical Specifications.

The major event will start with a leaking Pressurizer Safety Valve. This will progress to SV-45A PRZ Safety Valve failing full open. A unit trip will be required. As the crew performs the actions of E-0, the Safety Injection will fail to automatically actuate. The Crew must manually actuate SI (Trn B from SI panel only) and/or align ECCS Pumps and Equipment as required. The crew will transition to E-1. The scenario will terminate when the crew has transitioned to ES-1.2 for Post LOCA cooldown.

Critical Tasks Manually Actuate SI Stop all running RCPs when RCS pressure is below 1300 psig Procedures E-0, Reactor Trip or Safety Injection E-1, Loss of Reactor or Secondary Coolant

Appendix D Required Operator Actions Form ES-D-2 Page 3 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 1 Event

Description:

Raise Turbine and Reactor Power Time Position Applicants Actions or Behavior RO Calculates the dilution required per OHP-4021-005-002,, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power escalation.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Escalation in accordance with OHP-4021-001-006, Power Escalation (at step 4.77)

RO Performs DILUTION (batch add OR Continuous):

Place RC Makeup Blend Control Mode switch in DILUTE or ALT DILUTE Adjust PW to the desired flow rate and/or amount.

May close QRV-451 if aligning to CCP Suction Only Place RC Makeup Blend control switch in START May take QRV-303 to Manual and Open as required to maintain VCT Level and Pressure.

RO Commences escalation:

Raises turbine load (reactor power) using the DCS HMI.

Maintains Tavg/Tref deviation within limits by dilution and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

RO RO verifies appropriate reactivity feedback.

BOP Acts as peer checker for RO during blender operations.

Appendix D Required Operator Actions Form ES-D-2 Page 4 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 2 Event

Description:

Turbine Impulse Transmitter (MPC-253) fails LOW Time Position Applicants Actions or Behavior RO/BOP Recognizes and reports multiple annunciators on Ann. Panels 111, 113, and 114 for a Turbine Impulse pressure failure.

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Checks for no turbine runback Ensures control rods are in manual with no rod motion Reports MPC-253 has failed low Reports on Stability Checks Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 1-OHP-4022-012-003, Continuous Control Bank Movement procedure (If Rods in AUTO).

RO Performs the following as directed (If Rods in AUTO):

1. Checks for no turbine runback

2. Ensures control rods are in manual with no rod motion

3. Checks rod position above low-low rod insertion limit

4. Checks axial flux difference (AFD) within target band Note: Depending on the amount of rod motion, operators may find themselves in TS for AFD limits.

5. Initiates restoration of equilibrium conditions using either:

Control rod movement Turbine load adjustment

6. Identifies failed Turbine First Stage Impulse Pressure Instrument US Directs actions per 1-OHP-4022-013-016, Turbine First Stage Impulse Pressure Instrument Malfunction.

Appendix D Required Operator Actions Form ES-D-2 Page 5 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 2 Event

Description:

Turbine Impulse Transmitter (MPC-253) fails LOW Time Position Applicants Actions or Behavior RO Performs the following:

1. Verifies rod control in manual.

2. Places AMSAC bypass/test switch in BYPASS/TEST

3. Places Steam Dump selector control switches to OFF Or leaves them ON for Turbine Trip Controller Function US Initiates actions to trip bistables for MPC-253 failure per Attachment A of 1-OHP-4022-013-016.

US Refers to TS (LCO):

TS 3.3.1 Reactor Trip System (RTS) Instrumentation (Table 3.3.1-1) o Function 18e, Reactor Trip System Interlocks - Turbine First Stage Pressure, P-13. Condition L TS 3.3.2 Engineered Safety Feature Actuation System (ESFAS) Instrumentation (Table 3.3.2-1) o Function 4e, Steam Line Isolation - High Steam Flow in Two Steam Lines (per steam line), Coincident with Tavg -

Low Low Condition D TRM 8.3.6 ATWS Mitigation System Actuation Circuitry (AMSAC)

Note: P-13 interlock (Conditions L) must be verified in correct state within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. All other actions are greater than 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.

Appendix D Required Operator Actions Form ES-D-2 Page 6 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 3 Event

Description:

Recover Rods and Temperature Time Position Applicants Actions or Behavior SRO Directs RO to develop reactivity plan to recover temperature and Delta Flux RO Determines required Tavg based on Tref from Main Turbine HMI or Tech Data Book Determines required AFD from Tech Data Book Curve Determines previous Rod position from log/notes or PPC RO Develops plan for rod withdrawal to restore Tavg and AFD to target RO Briefs crew on recovery plan.

SRO Directs RO to Implement plan to recover Tavg and AFD.

RO Withdraws rods in steps (2-3 steps at a time) while monitoring Temperature, Power and AFD

Appendix D Required Operator Actions Form ES-D-2 Page 7 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.: 4 Event

Description:

Steam Flow Channel (MFC-121) fails Low Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciators on Panel #113 (Drops 42, 43, and 33) which are indicative of a steam flow instrument failure.

Panel #116 Drop 51 SJAE D/P may Alarm BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Determine SG 2 level is lowering and that its Feedwater Regulating Valve (FRV-220) is not responding as expected.

Notify US and takes manual control of FRV-220.

Determine failure affects MFPs, and take P controller to MANUAL.

Stabilize SG 2 level in manual Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 1-OHP-4022-013-014, Steam Flow Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Restores SG 2 level using MANUAL control of FRV-220.

2. Places MFP P controller in MANUAL and maintains pressure.

3. Reports MFC-121 has failed high.

4. Places 1-FS-522C selector switch in channel 2 position.

5. Nulls and returns FRV-220 controller to AUTO.

6. Returns MFP P controller to AUTO.

US Refers to the following Tech Specs (TS):

TS 3.3.1 RTS Instrumentation (Table 3.3.1-1)

Condition A - Refer to Table Function 15 Condition D - Trip Bistables in 6 Hours TS 3.3.2 ESFAS Instrumentation (Table 3.3.2-1)

Condition A - Refer to Table Function 4e Condition D - Trip Bistables in 6 Hours US Initiates actions to trip bistables associated with MFC-121 failure per Attachment B-1 of 1-OHP-4022-013-014.

Appendix D Required Operator Actions Form ES-D-2 Page 8 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.:.: 5 Event

Description:

PZR HTR Transformer Fails (11PHC Fails).

Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel 108, Drops 46 and 50, indicative of a pressurizer (PRZ) heater power supply failure.

RO Reenergizes PRZ control (cycling) group heaters per 1-OHP-4024-108, Drop 50 annunciator response, as follows:

Opens breaker CB11PHC6 Closes breaker CB11PHA6 (Drop 50 clears)

RO Monitors PRZ pressure response and ensures normal PRZ heater operations for PHA supplied heaters.

US Refers to Tech Specs (TS):

TS 3.4.9.b Pressurizer - (Condition B.1) due to a loss of 1 train of pressurizer heaters. Restore B/U heaters to operable within 72 Hours.

Appendix D Required Operator Actions Form ES-D-2 Page 9 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.:.: 6,7,8,& 9 Event

Description:

Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &

Control Room Ventilation fails to auto start)

Time Position Applicants Actions or Behavior RO Recognize and reports abnormal RCS leakage:

RCS pressure lowering with PZR Heaters ON PRZ Safety Valve SV-45A indicates open Panel #108:

Drop 8, Pressurizer Press Low Dev Backup Htrs On Drop 29, PRZ SV A Disch Temp Hi Drop 31, Prz Relief Tk Pressure High Or Low US Direct entry into 1-OHP-4022-002-020, Excessive Reactor Coolant Leakage RO Performs the following actions, if directed:

Manually raises charging flow to maintain pressurizer level.

Manually adjusts seal injection flow (6-12 gpm / each RCP).

Reduces/isolates letdown flow to maintain pressurizer level.

Attempts to determine RCS leak rate.

BOP/RO Monitor Containment Pressure US Directs RO to Perform a Reactor Trip Directs RO/BOP to perform the immediate actions of 1-OHP-4023-E-0, Reactor Trip or Safety Injection.

RO/BOP Performs the immediate actions of E-0:

1. Checks reactor trip

2. Checks turbine trip

3. Checks power to AC emergency buses

4. Checks safety injection status

Appendix D Required Operator Actions Form ES-D-2 Page 10 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.:.: 6,7,8,& 9 Event

Description:

Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &

Control Room Ventilation fails to auto start)

Time Position Applicants Actions or Behavior RO/BOP Critical Task #1 Check Safety Injection Actuated:

Manually Actuate SI (From SI Panel for Train B) to establish High Head Injection Flowpath

-OR-NOTE: May be performed in E-0, Attachment A.

Manually Align Valves BIT Inlet Valves ICM-255 -AND/OR ICM-256 - OPEN BIT Outlet Valves ICM-250 -AND/OR ICM-251 - OPEN RWST to CCP Valves IMO-910 -AND/OR IMO-911 - OPEN VCT to CCP Valves QMO-451 -AND/OR QMO-452 - CLOSED

• Manually Start/Align ECCS Equipment and Actuate Phase A (Train A)

• SI

• RHR US/RO Critical Task #2 Foldout Page - RCP Trip Criteria:

Stop all RCPs when RCS is < 1300 psig and CCP/SI pump running BOP Manually controls AFW flow to maintain SG narrow range levels 14% - 50% once one SG narrow range level is greater than 14%.

US

• Ensures immediate actions of E-0 are completed

• Directs subsequent actions of E-0.

RO/BOP Completes actions of E-0 through step 19 as directed.

Appendix D Required Operator Actions Form ES-D-2 Page 11 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.:.: 6,7,8,& 9 Event

Description:

Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &

Control Room Ventilation fails to auto start)

Time Position Applicants Actions or Behavior RO/BOP Performs manual actions of E-0, Attachment A as directed by US.

Verifies CEQ Fans and CCW to CEQ Place DIS in Service - Turn on Igniters Verify Train A Control Room Pressurization aligned Reset Bypass switches for PACHMS Verifies Containment Ventilation & Phase A Isolations US/RO Checks if RCS is Intact - NO.

US Announces transition to 1-OHP-4023-E-1, Loss of Reactor or Secondary Coolant and directs operator actions.

RO/BOP Completes actions of E-1 through step 12 (Check if RCS Cooldown and Depressurization is required) as directed.

BOP Restore SG narrow range levels and maintain between 20% and 50%.

US/RO Checks if SI Termination Criteria is MET:

RCS Subcooling >40°F Secondary Heat Sink (SG >14% or AFW Flow >240x103)

RCS Pressure rising or stable - NO Pressurizer Level >21%

US/RO Check if RHR can be stopped (NO - RCS Pressure Lowering)

Check RCS Pressure > 300 psig and stable

Appendix D Required Operator Actions Form ES-D-2 Page 12 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-1 Event No.:.: 6,7,8,& 9 Event

Description:

Pressurizer Safety Leak Progressing to Full Open, Train A & B Auto Safety Injection failure with Train A Relay Failure (CV, SI, RHR,CC &

Control Room Ventilation fails to auto start)

Time Position Applicants Actions or Behavior BOP Shutdown Unloaded EDGs.

US Evaluate Plant Status Check Cold Leg Recirculation Capability Check Aux. Building Radiation US Announces transition to 1-OHP-4023-ES-1.2, Post LOCA Cooldown and Depressurization (at step 12).

Terminate Scenario

Critical Task Summary Page 13 of 16 Task Elements Results

1. 1 Manually Actuate/Align one train of Safety Injection to establish HIGH Head Injection Flow Cueing:

Check SI Actuated Safety Injection Actuated Status Light LIT (E-0, Step 4.a)

-OR-Check BOTH CCP leakoff valve "Safety Injection Signal" white lights - LIT Performance Indicators:

Before transitioning from E-0:

Actuate 1 Train of SI

-OR-Manually Start/Align ECCS Equipment and Actuate Phase A (Train B)

Manually Align Valves BIT Inlet Valves ICM-255 -AND/OR ICM-256 -

OPEN BIT Outlet Valves ICM-250 -AND/OR ICM-251 -

OPEN RWST to CCP Valves IMO-910 -AND/OR IMO-911

- OPEN VCT to CCP Valves QMO-451 -AND/OR QMO-452 - CLOSED Ensure 1 CCP and SI running Performance Feedback:

ECCS flow is indicated to at least one train (as indicated by flow on cold leg BIT injection flowmeters)

One Train of Phase A Isolation is complete per E-0, Attachment A SAT / UNSAT

1. 2 Manually trip all Reactor Coolant Pumps Cueing:

• RCS pressure - less than 1300 psig AND CCPs or SI pumps - at least one running

• E-0, Foldout Page, Step 1

• E-1, Foldout Page, Step 1

• E-1, Step 1 Performance Indicators:

• Manually stop all Reactor Coolant Pumps (RCPs) when RCS pressure is less than 1300 psig prior to core uncovery leading to CETC >2200°F.

Performance Feedback:

• RCP ammeters - zero current

• RCP trip low flow alarms - lit

• RCS loop flow meters - flow lowering SAT / UNSAT

Scenario Instructor Actions Page 14 of 16 Setup:

1. Reset to IC-308 MOL; 80% power, 883 MW, 805.58 ppm, 565.7 F 195 Steps on D

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Activate the following (pre-load) malfunctions:

Train A Safety Injection Auto Failure Train B Safety Injection Auto Failure Train B Safety Injection Manual on the PRZ panel only RPS Relay Failure Train A Equipment fails to start (CV, SI, RHR,CC & Control Room Ventilation)

U1_RP10B U1_RP19D U1_RP11D U1_RP10A

Scenario Instructor Actions Page 15 of 16 Scenario Events:

EVENT #1 Respond as required to power change notifications and requests EVENT #2 ICF U1_MPC253 to 0 over 30 sec to cause Turbine Impulse Transmitter (MPC-253) to fail LOW.

EVENT #3 Recover RODs and temperature No Additional Actions EVENT #4 ICF U1_MFC121 to 0 over 3 sec to cause Steam Flow Channel (MFC-121) to fail LOW.

EVENT #5 IMF U1_ED07B to cause the PZR HTR Transformer Failure (11PHC Fails).

If contacted as AEO to investigate the PZR HTR Transformer Failure, report back after ~ 2 min. delay that Breaker T11D9 has an OC trip.

U1_ED07B U1_MPC253 U1_MFC121

Scenario Instructor Actions Page 16 of 16 EVENTS #6,7,8,& 9 IMF U1_RC19A to 100 from.1 over 5 Minutes to simulate the PZR Safety leak to full open Malfunctions for Train A & B SI Auto Failure, Train B from PRZ Panel, and Train A Slave Relay have already been Entered.

Perform Local actions after entry into E-0 as requested:

• Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

• Aux Tour will monitor Spent Fuel Pool Level and Temperatures

• Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

• U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR03A U1_CHR01 U1_EGR03B U1_EGR04A U1_EGR04B U1_RC19A U1_EGR03B U1_CHR03 U1_EGR04A U1_EGR03A U1_EGR04B U1_CHR02

Appendix D Scenario Outline Form ES-D-1 Page 1 of 18 Facility: DC COOK 1 & 2 Scenario No.: 2 Op-Test No.: _________

Examiners: ___________________________ Operators:

Initial Conditions: ____ Unit is at 50% power.

Turnover: A 2 gpm tube leak on S/G #3 requires a T.S. shutdown. The Crew is in 1-OHP-4021-001-003 power Reduction, and has completed NARPI adjustments per step 4.13 Critical Tasks Isolate #13 Steam Generator, Cooldown RCS, Depressurize RCS to stop #13 SGTR leakage.

Even t No.

Malf. No.

Event Type*

Event Description 1

U1_RC24C

@ 20 - 2 gpm R-RO N-BOP SG Tube Leakage requiring shutdown 2

U2_EESW Short Circuit U1_WPS705 fail C-BOP Unit 2 East ESW Pump Trip, Unit 1 West ESW fail to Start (Need Alarm 104 drop 78 on trigger with drop 66) 3 U1_NPP151 to 2500 I-RO TS Pressurizer Pressure Channel Fails High 4

U1_RX08A

@ 100%

C-RO NRV-163 Controller Fails Open in Auto (insert with NPP151 failure) 5 U1_MPP230 to 1 over 30 Sec I-BOP TS SG Pressure Channel MPP-230 Fails Low.

6 U1_RC23C

@ 50 ~ 500 Gpm M

SG #13 Tube Rupture 500 GPM 7

U1_RP13A U1_RP13B C-BOP Phase A Fails to auto Actuate 8

U1_RC15A U1_RC15B C-RO NRV-163 & NRV -164 fail to OPEN (PORV must be used to depressurize)

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Page 2 of 18 Event Summary The scenario begins at 50% power with a shutdown required per 01-OHP-4022-002-021, Steam Generator Tube Leakage due to SG tube leakage. The RO and BOP will perform actions of the shutdown procedure to bring the plant offline.

A trip of the UNIT 2 East ESW Pump and failure of the West U1 ESW pump will require the BOP to start the West ESW pump on unit 1.

After the Crew has addressed the ESW failure, the Pressurizer Pressure Channel NPP-151 Fails High, Pressurizer spray valves will go full open. The crew will need to take manual control of pressurizer pressure and enter an Abnormal Operating Procedure, defeat the failed channel, address Technical Specifications, and then restore pressurizer pressure control to auto.

Along with the Pressure Channel failure, a failure of the Pressurizer Spray Valve controller for NRV-163 to 100% causes NRV-163 to go full open. RCS pressure will begin to lower. The RO will be required to take manual control of NRV-163 and close the spray valve then return pressure to the normal band. Pressurizer pressure control may still be operated in AUTO with NRV-164.

The next event will involve the SG Pressure Channel MPP-230 fails low. The BOP will be required to take manual control SG 13 Feedwater Regulating Valve FRV-230 to stabilize level.

The crew will address the failure with an Abnormal Operating Procedure, address Technical Specifications, select an operable channel, and restore automatic control.

A Steam Generator Tube Rupture will build in to 500 gpm over 5 minutes. The crew will perform a Reactor Trip and Safety Injection. The crew should identify the Steam Generator Tube Rupture on #13 SG. The crew will transition to E-3 to isolate #13 SG. As the crew performs the actions of E-3 to depressurize the SG the Pressurizer Spray Valves will fail to open requiring use of the PORV for depressurization, The scenario will terminate when the crew has completed the cooldown, depressurization, and terminated SI.

Critical Tasks Isolate #13 Steam Generator Cooldown RCS Depressurize RCS to stop #13 SGTR leakage Procedures E-0, Reactor Trip or Safety Injection E-3, Steam Generator Tube Rupture

Appendix D Required Operator Actions Form ES-D-2 Page 3 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 1 Event

Description:

SG Tube Leakage requiring shutdown Time Position Applicants Actions or Behavior US Refers to Tech Specs 3.4.13 RCS Operational Leakage.

SG Leakage >150 gpd/SG. Action D applies. - Be in Mode 3 in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

RO Calculates boric acid addition per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power reduction.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Reduction in accordance with OHP-4021-001-003.

RO Performs BORATION:

Place RC Makeup Blend Control Switch in STOP.

Place RC Makeup Blend Control Mode Selector Switch in BORATE.

Set desired batch on BA Flow Totalizer.

Adjust BA Flow Ctrl (RU-33) to desired flow.

Place RC Makeup Blend Control Switch in START.

RO Commences power reduction:

• Lowers turbine load (reactor power) using HMI.

• Maintains Tavg/Tref deviation within limits by boration and turbine load adjustments.

• Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP/RO BOP acts as peer checker for RO during blender operations and RO verifies appropriate reactivity feedback.

Appendix D Required Operator Actions Form ES-D-2 Page 4 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 2 Event

Description:

Unit 2 East ESW Pump Trip, Unit 1 West ESW fail to Start Time Position Applicants Actions or Behavior BOP Recognizes and reports ESW annunciators on Ann. Panel 104 indicative of ESW pump trip including:

Drop 66, WEST ESW HEADER PRESSURE LOW Drop 78, WEST ESW PUMP LOW PRESSURE START-UP BOP Recognizes and reports that running Unit 2 East ESW pump has tripped and standby U1 West ESW pump failed to auto start.

BOP Manually starts West ESW pump in accordance with ESW Annunciator Response Procedures. Drop 78 Verify ESW system flow is greater than or equal to 2000 gpm by adjusting flow to the following as necessary (listed in preferred order):

o CCW heat exchanger o EDG heat exchanger(s) o CTS heat exchanger (if used, maintain 2000 to 3000 gpm thru CTS heat exchanger)

US May refer to actions of 1-OHP-4022-019-001,ESW System Loss/Rupture procedure.

BOP If 1-OHP-4022-019-001,ESW Malfunction procedure is used, the operator performs the following actions as directed:

1. Ensures at least one ESW pump is running

2. Checks ESW flow established

3. Checks ESW System Integrity

4. Checks CCW Hx ESW Supply

5. Checks Control Room Air Conditioner ESW Supply

Appendix D Required Operator Actions Form ES-D-2 Page 5 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 2 Event

Description:

Unit 2 East ESW Pump Trip, Unit 1 West ESW fail to Start Time Position Applicants Actions or Behavior SRO Refers to TS 3.7.8, Essential Service Water (ESW) System.

Condition A U2 East ESW Pump is declared INOPERABLE.

One Train is INOPERABLE since the Crossties are Open.

Both Unit 1 and Unit 2 would enter Action A.

Note: Low Pressure Auto Start is NOT a Required Safety Function. The W ESW pump is technically not INOPERABLE, but SI auto start is required. Unit 1 could close the crosstie and declare ESW OPERABLE on Unit 1

Appendix D Required Operator Actions Form ES-D-2 Page 6 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 3 Event

Description:

Pressurizer Pressure Channel NPP 151 Fails High Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel #108 indicative of a pressurizer (PRZ) pressure instrument failure (Drops 6, 7, 8).

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Places PRZ pressure master controller OR both PRZ spray valve controllers (1-NRV-163 and 164) to manual and lowers controller output to close spray valves.

Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 01-OHP-4022-013-009, Pressurizer Pressure Instrument Malfunction procedure.

May enter Technical Specification 3.4.1 RCS Pressure, Temperature, and Flow DNB Limits if Pressure lowers to <2168 psig. (2200 psig admin limit)

RO Performs the following actions as directed:

1. Restores PRZ pressure using manual control of EITHER:

PRZ pressure master controller Both PRZ spray valve controllers

2. Reports 1-NPP-151 has failed

3. Ensures PRZ pressure master controller is in manual

4. Places PRZ Press Ctrl selector switch in Ch 2 & 3 position

5. Places the following recorder switches in Ch 2, 3 or 4 position:

PRZ Press Rec selector Delta T selector Overpower Delta T selector Overtemp Delta T selector

Appendix D Required Operator Actions Form ES-D-2 Page 7 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 3 Event

Description:

Pressurizer Pressure Channel NPP 151 Fails High Time Position Applicants Actions or Behavior RO Performs the following actions as directed:

6. Verifies 1-QMO-225, E CCP Leakoff is open NOTE: (May place QRV251 in Manual while opening Leakoff -

Letdown may also be reduced - QRV-251 should be returned to Auto)

7. Dispatches Aux operator to open breaker for 1-QMO-225 (1-ABV-D-5C)

8. Checks 1-NLP-151, PRZ Level Channel 1 and 1-NLI-151, PRZ Level Cold Calibration instruments for failure

9. Nulls and returns the following controllers to auto:

Both PRZ spray valve controllers PRZ pressure master controller US Declares the 1E Centrifugal Charging Pump inoperable.

US Initiates actions to trip bistables associated with 1-NPP-151 PZR Pressure Failure per Attachment A of 1-OHP-4022-013-009.

US Refers to Tech Specs (TS):

TS 3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 6, 8a, 8b Condition D)

TS 3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1d Condition D, 8b Condition G *)

TS 3.3.4 Remote Shutdown Instrumentation TS 3.5.2 ECCS Subsystems TRM 8.1.1 Rx Control Systems Charging Pumps - Operating TRM 8.7.14, LEFM, (Applicable above 3250 MW)

• =Identifies requirement to verify the status of Permissive P-11 bistables within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of pressurizer pressure channel failure.

Appendix D Required Operator Actions Form ES-D-2 Page 8 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 4 Event

Description:

Pressurizer Spray Valve Controller NRV-163 fails to 100% (Actions May have been performed in Previous Event or may re-appear when returning to Auto)

Time Position Applicants Actions or Behavior RO Recognizes and reports Ann. Panel 108, Drop 8, PRESSURIZER PRESS LOW DEV BACKUP HTRS ON.

Identifies that NRV-163 PRZ Spray Valve is open.

US Directs RO to take manual control of NRV-163 and restore Pressurizer pressure.

RO Manually closes NRV-163 PRZ Spray Valve.

Monitors PRZ pressure control system and ensures pressure returns to normal conditions (~2235 psig).

US May enter the following TS if Pressure lowers to <2168 (2200 Admin) psig during the transient:

TS 3.4.1, RCS Pressure, Temperature, and Flow DNB Limits.

Condition A.

Appendix D Required Operator Actions Form ES-D-2 Page 9 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 5 Event

Description:

SG Pressure Channel MPP-230 Fails Low.

Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciators on Panel 114 which are indicative of a steam generator #3 water level control / pressure instrument failure (Drops 12, 14).

BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

1. Places FRV-230, SG 3 MFW Reg. Valve controller to MANUAL, lowers controller output and restores SG 3 level to program (may also place MFP P controller in MANUAL at this time).

Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 1-OHP-4022-013-012, Steam Generator Pressure Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Restores SG 3 level using manual control of FRV-230.

2. Checks SG PORVs closed.

3. Places MFP P controller in MANUAL.

4. Reports MPP-230 has failed.

5. Places 1-FS-532C selector switch in channel 2 position.

6. Nulls and returns FRV-230 controller to AUTO.

7. Returns MFP P controller to auto.

Appendix D Required Operator Actions Form ES-D-2 Page 10 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 5 Event

Description:

SG Pressure Channel MPP-230 Fails Low.

Time Position Applicants Actions or Behavior US Refers to Tech Specs (TS):

• TS 3.3.1 RTS Instrumentation Condition A - Check Table 3.3.1-1 Function:

• Function 15 - Cond. D Trip Bistables in 6 Hours

• TS 3.3.2 ESFAS Instrumentation Condition A - Check Table 3.3.2-1 Functions:

• Function 1e(2) & 4e - Cond. D - Trip Bistables in 6 Hours

• TS 3.3.4 Remote Shutdown Instrumentation - Condition A -

Restore within 30 Days US Initiates actions to trip bistables associated with MPP-230 per Attachment C-1 of 1-OHP-4022-013-012.

Appendix D Required Operator Actions Form ES-D-2 Page 11 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event

Description:

SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior RO/BOP Perform the following:

Recognizes and reports excessive charging flow demand as indicated by:

o Lowering Pressurizer level o Lowering Pressurizer pressure o PRZ level deviation alarm US May enter and direct operator actions per OHP-4022-002-021 SG Tube Leakage (or OHP-4022-002-020, Excessive RCS Leakage):

Raise charging flow and isolate letdown Start the second CCP Maintain VCT level RO Recognizes and reports RCS leak rate greater than the capacity of charging pump -OR-unable to maintain Pressurizer level/VCT level US Directs RO/BOP to manually trip the reactor and perform the immediate actions of OHP-4023-E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging system capability, may also initiate SI).

US Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection.

RO/BOP Performs the immediate actions of E-0:

1. Checks reactor trip

2. Checks turbine trip

3. Checks power to AC emergency buses

4. Checks safety injection status (Manually initiate if required)

US Ensures immediate actions of E-0 are completed

Appendix D Required Operator Actions Form ES-D-2 Page 12 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event

Description:

SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior US Directs subsequent actions of E-0:

Check Main Steam Isolation Required Check CTS Required Direct Attachment A to Be Performed Check AFW Pumps and Flow US Directs BOP to isolate AFW flow to SG #3 when NR Level > 14%

RO/BOP Performs manual actions of Attachment A in E-0 as directed by US.

RO/BOP Identifies that Phase A did not Automatically Actuate Manually Actuates Phase A on Both Trains Verifies Phase A Isolation Complete US Completes all actions of E-0 through step 18 (Check If SG Tubes Are Intact).

US Announces transition to OHP-4023-E-3, Steam Generator Tube Rupture (step 18 of E-0).

US Directs actions of E-3, Steam Generator Tube Rupture.

US/BOP Identifies SG #3 as ruptured US/BOP Critical Task #1 Manually closes the following valves for SG #13:

FMO-231, TDAFP Discharge (may be performed in E-0, Step

8)

FMO-232, MDAFP Discharge (may be performed in E-0, Step 8)

MRV-230, SG Stop Valve MRV-231, SG Stop Valve Dump Valve MRV-232, SG Stop Valve Dump Valve MRV-233, PORV MCM-231, TDAFP Steam Supply

Appendix D Required Operator Actions Form ES-D-2 Page 13 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event

Description:

SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior BOP Closes DRV-407, SG Stop Valve Drain Valve US Critical Task #2 Directs RCS Cooldown to required core exit temperature:

______________°F RO/BOP Critical Task #2 Commence cooldown at maximum rate using Manual Steam Dump Operation -OR-INTACT (3) SG PORVs Monitor RCS Thermocouple readings for target temperature Stop RCS cooldown when TCs < required temperature:

_____________°F US Directs operator action to maintain TCs < required temperature (provide band)

RO/BOP Performs the following as directed:

Resets SI and Containment Isolation Phase A Establish Control Air to Containment Stop RHR Pumps US Directs RCS Depressurization to minimize break flow:

Normal spray since RCPs are running RO Attempts to depressurize using Normal Sprays.

Determines that NRV-163 and NRV -164 fail to Open

Appendix D Required Operator Actions Form ES-D-2 Page 14 of 18 Op-Test No.: Cook 2018 Scenario No.: NRC2018-2 Event No.: 6, 7,& 8 Event

Description:

SG #13 Tube Rupture 500 GPM, Phase A Auto Actuation Failure, NRV-163 & 164 Pressurizer Spray Valves fail closed Time Position Applicants Actions or Behavior US Critical Task #3 Directs RCS Depressurization to minimize break flow:

Directs Use of Pressurizer PORVs since Normal Spray is NOT available RO Critical Task #3 Commence depressurization using PORV(S) as directed:

Monitor RCS pressure, PRZ level, and RCS Subcooling Stop RCS depressurization based upon:

(Criteria Used from E-3, Step 17 or Att. A):

US Check if ECCS flow should be terminated US/RO Terminate Safety Injection:

Stop Both SI Pumps Stop 1 CCP Isolate BIT US/RO Establish normal charging flow US Verify ECCS flow NOT required TERMINATE SCENARIO

Critical Task Summary Page 15 of 18 Task Elements Results

1. 1 Isolates Flow To and From The Ruptured Steam Generator Cueing:

Isolate Flow From Ruptured SG (E-3, Step 3)

If Ruptured SG Then Close AFW Valves to Affected SG (E-0, Step 8, RNO)

Check Feed Flow To Ruptured SG Isolated (E-3, Step 4.b)

Performance Indicators:

Prior to RCS cooldown to preclude transition to ECA-3.1, Loss of Reactor Coolant -Subcooled Recovery Desired:

Isolates SG13:

o Manually Closes SG PORV o

Trips SG 13 Stop Valve closed o

Closes SG 13 Stop Valve dump valves o

Isolates TDAFP Steam Supply from SG #13 o

Isolates AFW to #13 SG when level is > 14%

Performance Feedback:

Stable or rising pressure in the ruptured SG.

No feedwater flow to the ruptured SG.

SAT / UNSAT

1. 2 Establishes and Maintains RCS Target Temperature Cueing:

Initiate RCS Cooldown (E-3, Step 7)

Performance Indicators:

Performs RCS cooldown, establishes and maintains CETC temperatures below target temperature. Temperature must be maintained within limits to prevent transition from E-3 due to either:

Loss of subcooling (high temp.)

CSF transition (low temp.)

Performance Feedback:

RCS temp. less than target temp.

SAT / UNSAT

1. 3 Depressurize RCS Cueing:

Depressurize RCS Using PORV (E-3, Step 18)

Performance Indicators:

Depressurizes RCS using PRZ PORV:

Final RCS conditions must meet SI termination criteria Ruptured SG inventory remains below 44ft. (RCLSG2)

Performance Feedback:

RCS pressure lowering PRZ level rising SAT / UNSAT

Scenario Instructor Actions Page 16 of 18 Setup:

1. Reset to IC 310 MOL; 48% power, 485 MW, 892 ppm, 558 F 179 Steps on D, MSRs Isolated, West MFP in Speed Control idling at 3000, East in DP control

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Activate the following (pre-load) malfunctions:

Train A Phase A Auto Failure Train B Phase A Auto Failure Steam Generator Tube Leak &

Radiation Monitor Set up Triggers and ESW Auto Start Failure T1 is true at <40 psig which turns on 104 Drop 78 T2 is set by trigger 1 and then looks for pressure to Rise > 40 psig to clear 104 Drop 78 Pressure switch failure keeps pump from starting Setup Phase A on Trigger 4 to fail normal spray valves Place Events 3 & 4 on Trigger 10 U1_RC15B U12_SRA1905 ESW<40 on T1 U1_RP13B U1_WPS705 Close U2 East HX on T2 ESW>40 on T2 Phase A on T4 U1_RX08A U1_RC15A U1_NPP151 U1_RP13A AN04_U1(078)

AN04_U1(078)

U1_RC24C

Scenario Instructor Actions Page 17 of 18 Scenario Events:

EVENT #1 Respond as required to requests for chemistry sampling or shutdown preps EVENT #2 ICF U2_EESW to cause the U2 East ESW Pump to trip Call as Unit 2 that the East ESW pump has Tripped EVENT #3&4 Activate trigger ET to cause the Pressurizer Pressure Channel to fail High and the NRV-163 to fail Open in Auto

-OR-ICF U1_NPP151 to 2700 over 10 seconds cause the Pressurizer Pressure Channel to fail High When Requested to De-energize Power for QMO-225 (1-ABV-D-5C)

EVENT #4 ICF U2_RX08A to 100 cause the NRV-163 Controller to Fail Open in Auto EVENT #5 ICF U1_MPP230 to 1 over 30 seconds to cause the SG Pressure Channel MPP-230 to Fail Low U1_MPP230 U1_NPP151 U2_EESW Events 3 & 4 on T10 U1_RX08A U1_EDPR10J

Scenario Instructor Actions Page 18 of 18 EVENT #6 - 8 IMF RC23C, Final Value 50, Ramp Time 5 min, to cause a 500 gpm SGTR on SG #3 If contacted as Radiation Protection, report that the requirements of 12-THP-6010-RPP-706, Gaseous Monitor Alarm Response have been met.

If contacted as Chemistry to evaluate SG Blowdown sample line activity per 12-THP-4030-002-208, Primary to Secondary Leakage - report back after some delay that leakage appears to be > 50 GPM on the #3 SG.

Local actions after entry into E-0:

• Locally stop U1 Ice Condenser AHUs MRF U1_CHR01 to OFF.

• Aux Tour will monitor Spent Fuel Pool Level and Temperatures

• Place PACHMAS in service - MRF U1_CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in.)

• U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO:

Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR03B U1_EGR04A U1_RC23C U1_EGR04A U1_CHR01 U1_EGR03A U1_CHR03 U1_EGR03B U1_EGR04B U1_EGR03A U1_EGR04B U1_CHR02

Appendix D Scenario Outline Form ES-D-1 Page 1 of 20 Facility: DC COOK 1 & 2 Scenario No.: 3 Op-Test No.: _________

Examiners: ___________________________ Operators:

Initial Conditions: ___Power is stable @ 1e-8 in Intermediate Range with AFW in service.

Turnover: _______Raise Power to 3% to place MFP in service.

Critical Tasks Manually Trip Reactor, Actuate SI, Establish Cold Leg Recirculation Event No.

Malf. No.

Event Type*

Event Description 1

R-RO Raise Power to 3% using rods 2

N-BOP Control SG levels using AFW 3

U1_NPP15 1 @ 1700 I-RO TS Pressurizer Pressure Channel Fails Low 4

Set U1_MSVM RV210.94 C-BOP Main Steam Stop Valve Comes Off Detent (Open Limit Switch) 5 U1_MPP21 2 to 1500 I-BOP TS SG PORV Pressure Transmitter Failure 6

U1_RC10A to 5%

C-RO RCS Leakage ramps in over 10 min. ramp 7

U1_RC01A at 50%.

M RCS LOCA over 30 second. ramp 8

U1_RP01A U1_RP01B C -

RO Auto RX trip Fails - Manual Works 9

U1_RP10A U1_RP10B I(ATC)

Auto SI Fails - Manual Works 10 U1_RP16B U1_RP17B C-BOP CTS (West) Train B - fails to actuate (AUTO/MANUAL)

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Page 2 of 20 Event Summary The scenario starts with the plant stable at ~ 1e-8 amps on IR. The crew will be directed to withdraw rods to raise power to 3 % to roll the Main FW pump. The BOP will need to control SG levels with AFW in Manual.

After power has been raised, The Controlling Pressurizer Pressure channel will fail low.

The RO will be required to take manual control of Pressurizer Pressure Master Controller and restore normal pressure control. The Crew will implement the Abnormal Operating Procedure, address Technical Specifications, select an operable channel, and restore pressure control to automatic.

The #1 SG Main Steam Stop Valve will come off the open limit switch/detent. The crew will need dispatch an operator to check the status and then reopen the Stop Valve to continue on.

Next a failure of SG #11 Pressure Channel (MPP-212) fails high causing SG #11 PORV to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV, the crew will implement AOP actions, and the US will need to declare the associated radiation monitor inoperable.

Shortly after the SG Pressure Channel failure, a slowly developing RCS leak will require the RO to control Charging in an attempt to stabilize the plant.

The RCS leakage will develop into a large break LOCA. The plant will NOT automatically trip and Automatic Safety Injection will NOT actuate. The Crew will be required to manually trip the reactor and actuate Safety Injection. The BOP should identify that train B of Containment Spray/Phase B has failed to actuate and align as required. The crew will transition to E-1 and to ES-1.3 to align for cold leg recirculation. The scenario will terminate when the crew has aligned ECCS for cold leg injection.

Critical Tasks Manually Trip Reactor Manually Actuate SI Establish Cold Leg Recirculation Procedures E-0 Reactor Trip or Safety Injection E-1 Loss of Reactor or Secondary Coolant ES-1.3 Transfer to Cold Leg Recirculation

Appendix D Required Operator Actions Form ES-D-2 Page 3 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 1 Event

Description:

Raise Power to 3 % from 1e-8 amps Time Position Applicants Actions or Behavior RO Briefs crew on reactivity plan for power rise.

US Reviews reactivity plan.

US Directs RO to commence Power Escalation in accordance with 1-OHP-4021-001-006, Power Escalation procedure.

RO Commences power rise.

Verifies Control Rod Selector in Manual indicating rod Speed 48 Steps/min.

Place Rod Control to withdraw for desired number of steps (0.5 to 3)

Verify expected response Positive SUR and Power rising on Intermediate Range Verify expected response on RCS Tavg, Delta-T power and steam dump demand as power rises above the Point of adding Heat.

US Acts as reactivity manager.

Appendix D Required Operator Actions Form ES-D-2 Page 4 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 2 Event

Description:

Control SG levels using AFW Time Position Applicants Actions or Behavior BOP Monitors SG levels and Adjusts AFW flow control valves as required BOP Adjusts AFW valves as power reaches Point of Adding Heat

Appendix D Required Operator Actions Form ES-D-2 Page 5 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 3 Event

Description:

Pressurizer Pressure Channel NPP 151 Fails Low Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel #108 indicative of a pressurizer (PRZ) pressure instrument failure (Drops 8, 9, 10).

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

1. Restores PRZ pressure using manual control of EITHER:

PRZ pressure master controller Both PRZ spray valve controllers Crew Performs Plant Stability Checks May Stabilize Power Rise by Inserting Control Rods US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-009, Pressurizer Pressure Instrument Malfunction procedure.

RO Performs the following actions as directed:

1. Reports NPP-151 has failed

2. Ensures PRZ pressure master controller is in manual

3. Places PRZ Press Ctrl selector switch in Ch 2 & 3 position

4. Places the following recorder switches in Ch 2, 3 or 4 position:

PRZ Press Rec selector Delta T selector Overpower Delta T selector Overtemp Delta T selector

5. Verifies QMO-225, E CCP Leakoff is open

6. Dispatches Aux operator to open breaker for QMO-225 (1-ABV-D-5C)

Appendix D Required Operator Actions Form ES-D-2 Page 6 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 3 Event

Description:

Pressurizer Pressure Channel NPP 151 Fails Low Time Position Applicants Actions or Behavior RO Performs the following actions as directed:

7. Checks NLP-151, PRZ Level Channel 1 and NLI-151, PRZ Level Cold Calibration instruments for failure

8. Nulls (~2235#) and returns the following controllers to auto:

Both PRZ spray valve controllers PRZ pressure master controller

9. Verify P-11 is in its correct state.

US Declares the East Centrifugal Charging Pump inoperable.

US Refers to ITS LCO:

• 3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 6, 8a, 8b -

Cond D)

• 3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1d, 8b -

Cond D & G) (6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> to trip bistables)

• 3.3.4 Remote Shutdown Instrumentation (Table B3.3.4-1 Function 2 Cond A - 30 Days)

• 3.4.1 DNB & Tavg Parameters (if RCS pressure goes <2200 psig when in Mode 1)

• 3.5.2 ECCS Subsystems (Cond A - 72 hr)

• TRM 8.1.1 Boration Systems (Cond A - 72 hr)

• TRM 8.7.14 Thermal Power (Only applicable greater than 3250 MWt - NA)

US Notifies SM/MTI to initiate actions to trip bistables associated with NPP-151 PZR Pressure Failure per Attachment A of OHP-4022-013-009.

RO Monitors PRZ pressure response and ensures normal PRZ heater operations

Appendix D Required Operator Actions Form ES-D-2 Page 7 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 4 Event

Description:

Main Steam Stop Valve Comes Off Detent (Open Limit Switch)

Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciator on Panel #113 indicative of a Stop Valve misalignment Drop 6 SG 1 STOP VLV1-MRV-210 ABNORMAL US Directs BOP to review ARP for annunciators and dispatch operator to Investigate.

BOP Determines Main Steam Stop Valve 1-MRV-210 has come off the open detent.

US Directs BOP to reopen Main Steam Stop Valve 1-MRV-210 BOP Re-open Main Steam Stop Valve 1-MRV-210 by placing Control Switch to open May Refer to 1-OHP-4021-051-003 Removing a SG Stop Valve MMO or MRV from Service.

US May Refer to Technical Specification 3.7.2

Appendix D Required Operator Actions Form ES-D-2 Page 8 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 5 Event

Description:

SG Pressure Channel MPP-212 Fails HIGH - SG 1 PORV Opens Time Position Applicants Actions or Behavior BOP Recognize and reports Annunciator Panel #114, Drop 21, 1-MRV-213 OP OR HSD1 PANEL OVERRIDE alarm that indicates SG #1 PORV (MRV-213) has opened.

BOP Place SG PORV #1 in Manual and Closes #1 PORV.

Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Direct operator actions to determine cause, verify SG #1 PORV closed, and monitor Reactor Power.

BOP Reports MPP-212 has failed high.

US Enters and directs actions of 1-OHP-4022-013-012, Steam Generator Pressure Instrument Malfunction procedure.

US Refers to TSs / TRM:

• TS 3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1.e (1& 2) & 4.d - all Condition D) Trip bistables in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />

• TS 3.7.4, SG PORVs (Note: Only Manual Ops Required) - N/A

• TRM 8.3.8. Radiation Monitoring Instrumentation (Table 8.3.8-1, Function 2.b - Condition C)

• Declares MRA-1601 inoperable

• Restore in 7 days US Notifies SM/MTI to Initiate actions to trip bistables associated with MPP-212 Steam Generator Pressure Instrument Failure per Attachment A-3 of 1-OHP-4022-013-012.

Appendix D Required Operator Actions Form ES-D-2 Page 9 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 6 Event

Description:

RCS Leakage ramps in over 10 min. ramp Time Position Applicants Actions or Behavior RO/US Determines that a loss of reactor coolant is occurring based on the following:

• Pressurizer and VCT level change

• Charging and letdown flow mismatch

• Containment radiation monitoring trend ERS-1300, ERS-1400

• Containment pressure rise

• Containment sump level rise

• Containment dewpoint US Enter and direct actions of 1-OHP-4022-002-020, Excessive Reactor Coolant Leakage procedure.

RO Performs the following actions, if directed:

1. Manually raises charging flow to maintain pressurizer level.

2. Manually adjusts seal injection flow (6-12 gpm / each RCP).

3. Reduces/isolates letdown flow to maintain pressurizer level.

4. Attempts to determine RCS leak rate.

Appendix D Required Operator Actions Form ES-D-2 Page 10 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event

Description:

RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US/BOP Acknowledges Ann. Panel 122, Drop 83, ICE CONDENSER INLET DOORS OPEN, alarm and/or RMS PPC Alarms on Panel 111 and determines that the reactor coolant leak rate has risen US Directs RO/BOP to manually trip the Reactor and perform the immediate actions of OHP-4023-E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging or makeup system capability or rising containment pressure).

RO Critical Task #1 Performs Manual Reactor Trip Opens Trip Breaker A - OR-Trip Breaker B RO/BOP Perform the immediate actions of E-0:

1. Checks reactor trip.

2. Checks turbine trip.

3. Checks power to AC emergency buses RO/BOP Critical Task #2 Determines that Automatic Safety Injection Did NOT occur and is required.

Actuates Safety Injection (Must have one train actuated)

Pressurizer Panel - Train A and/or Train B

-OR-Safety Injection Panel - Train A and/or Train B US Ensures immediate actions of E-0 are completed.

RO/BOP Reviews E-0 Foldout Page Criteria.

Appendix D Required Operator Actions Form ES-D-2 Page 11 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event

Description:

RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior RO/BOP Trip Reactor Coolant Pumps due to Phase B RO/BOP Determines that Train B CTS has NOT actuated (White CTS timer off on Train B - CTS Monitor Lights Not Lit)

US Directs Operator to Actuate CTS/Phase B and Align Valves as Required RO/BOP Actuate CTS and Phase B Align CTS Valves as Required per SML-9A and SML-9B Verifies East CTS Pump starts and starts West CTS pump as directed by US.

US Directs subsequent actions of E-0.

RO/BOP Performs manual actions of E-0 Attachment A as directed by US.

RO/BOP Manually controls AFW flow to maintain SG narrow range levels 13% [28%] - 50% once one SG narrow range level is > 13% [28%].

CREW Completes all actions of E-0 through step 19 (Check If RCS Is Intact).

RO/BOP Manually Closes Train B Phase B valves (May Use Sup-004)

NOTE:

Momentary entry into OHP-4023-FR-P.1 will be required until crew verifies RHR flow sufficient to indicate a LB LOCA has occurred.

US Enters OHP-4023-E-1, Loss Of Reactor Or Secondary Coolant.

Appendix D Required Operator Actions Form ES-D-2 Page 12 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event

Description:

RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior RO/BOP Reviews E-1 Foldout Page Criteria (see NOTE regarding cold leg switchover criteria).

NOTE:

When RWST level lowers to < 30% then the crew must immediately Transition to ES-1.3, Transfer To Cold Leg Recirculation.

See Page 13 for applicants actions or behaviors associated with ES-1.3, Transfer To Cold Leg Recirculation.

US Directs actions of OHP-4023-E-1, Loss Of Reactor Or Secondary Coolant.

BOP Maintains SG narrow range levels 20% - 50%.

US/RO Check If CTS may be terminated - (No Pressure < 300 Psig)

Check If RHR may be terminated - (No Pressure < 300 Psig)

BOP Performs the following as directed:

1. Reset SI.

2. Stops running Emergency Diesel Generators (EDGs).

3. Dispatches operator to secure EDG jacket water pumps.

US Evaluate Plant Status Check Recirc Capabilities Check Aux Building Radiation

Appendix D Required Operator Actions Form ES-D-2 Page 13 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event

Description:

RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US Announces transition to OHP-4023-ES-1.3, Transfer To Cold Leg Recirculation when RWST level < 30% per:

E-0, Foldout Page, Criteria 3 E-1, Foldout Page, Criteria 5 E-1, Step 13 Applicants actions or behavior associated with ES-1.3, Transfer To Cold Leg Recirculation.

US Directs actions of ES-1.3, Transfer To Cold Leg Recirculation.

RO/BOP Resets both trains of Safety Injection.

RO/BOP Adjusts CCW return flow on each RHR HX at 3000-3500 gpm.

RO/BOP Checks the following prior to switching over to cold leg recirc:

RWST level < 20%

Cntmt water level > MIN RECIRC LEVEL

Appendix D Required Operator Actions Form ES-D-2 Page 14 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event

Description:

RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US/RO Critical Task #3 Directs/Performs switchover as follows:

NOTE: If RWST level < 9% then stop CCPs and SI pumps.

1. Stops and locks out East RHR pump.

2. Stops and locks out East CTS pump (if not previously stopped).

3. Checks East CTS and East RHR pumps stopped

4. Initiates valve closure:

IMO-310, East RHR pump suction IMO-215, East CTS pump suction from RWST

5. Stops and locks out West CTS pump (if not previously stopped).

6. Stops and locks out West RHR pump.

7. Checks West CTS and West RHR pumps stopped.

8. Initiates valve closure:

IMO-320, West RHR pump suction IMO-225, West CTS pump suction from RWST

Appendix D Required Operator Actions Form ES-D-2 Page 15 of 20 Op-Test No.: Cook 2018 Scenario No.: NRC2018-3 Event No.: 7, 8, 9,& 10 Event

Description:

RCS LOCA over 30 second. ramp, Rx Trip and SI Auto Actuation Failures, Train B Phase B /CTS Auto/Manual Failure Time Position Applicants Actions or Behavior US/RO Critical Task #3 Continues to direct/perform switchover as follows:

9. Restores control power to ICM-305, Recirc sump to East RHR/CTS pumps.

10. Checks ICM-305 open interlock:

IMO-310 fully closed IMO-215 fully closed

11. Opens ICM-305.

12. Starts:

East RHR pump East CTS pump if previously running.

13. Restores control power to ICM-306, Recirc sump to West RHR/CTS pumps.

14. Checks ICM-306 open interlock:

IMO-320 fully closed IMO-225 fully closed

15. Opens ICM-306.

16. Starts West RHR pump Starts the West CTS pump if previously running.

17. Checks at least one RHR pump running on the recirc sump TERMINATE SCENARIO

Critical Task Summary Page 16 of 20 Task Elements Results

1. 1 Manually Trip Reactor Cueing:

• Symptoms which require a reactor trip (i.e., RCS Pressure, Containment Pressure)

• Challenge to multiple reactor trip instrumentation setpoints (i.e.):

• Lo Pressurizer Pressure

• Hi Containment Pressure Performance Indicators:

• Manually open at least one reactor trip breaker from the control room.

• Reactor trip breaker must be opened prior to Crew transition to FR S.1 or FR C series Performance Feedback:

• RPIs indicate rods - fully inserted

• Rod bottom lights - lit

• Neutron flux - lowering SAT / UNSAT

1. 2 Manually Actuate/Align one train of Safety Injection Cueing:

Check SI Actuated Safety Injection Actuated Status Light LIT (E-0, Step 5.a)

-OR-Check BOTH CCP leakoff valve "Safety Injection Signal" white lights - LIT Performance Indicators:

Before transitioning from E-0:

Manually Actuate SI (Train A or B)

-OR-Manually Start/Align ECCS Equipment and Actuate Phase A (Train A or B)

Performance Feedback:

ECCS flow is indicated to at least one train (as indicated by flow on cold leg BIT injection flowmeters, 1 SI Train and 1 RHR Train)

One Train of Phase A Isolation is complete per E-0 Attachment A SAT / UNSAT

Critical Task Summary Page 17 of 20 Task Elements Results

1. 3 Establish Cold Leg Recirculation Flow Cueing:

• E-0 Foldout Page, Criteria 3 (switchover criteria)

• E-1 Foldout Page, Criteria 5 (switchover criteria)

• E-1, Step 13, Check For Transfer To CL Recirc.

Performance Indicators:

• At least one train of ECCS running aligned to the containment sump.

• RHR pumps stopped for no longer than 5 minutes during switchover.

• No total interruption of ECCS flow (CHG and SI) to the RCS during switchover.

Performance Feedback:

At least one train of ECCS pumps running /

indicating flow with suction aligned to Recirc Sump.

SAT / UNSAT

Scenario Instructor Actions Page 18 of 20 Setup:

1. Reset to IC 850 1623 PPM 170 Steps on Bank D, 548.9 Power is stable @ 1e-8 in Intermediate Range with AFW in service Mode 1 Checklist Complete

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Activate the following (pre-load) malfunctions:

Train A Reactor Trip Auto Failure Train B Reactor Trip Auto Failure Train A Safety Injection Auto Failure Train B Safety Injection Auto Failure Train B Phase B Auto Fails Train B Phase B Manual Fails U1_RP10A U1_RP01A U1_RP10B U1_RP17B U1_RP16B U1_RP01B

Scenario Instructor Actions Page 19 of 20 Scenario Events:

EVENT #1 & 2 Respond as required to requests for chemistry sampling or startup preps EVENT #3 ICF U1_NPP151 to 1700 over 3 seconds cause the Pressurizer Pressure Channel to fail Low When Requested to De-energize Power for QMO-225 (1-ABV-D-5C)

EVENT #4 Set the Main Steam Stop Valve to 94% to simulate valve off open detent.

EVENT #5 ICF U1_MPP212 to 1200 over 4 seconds to cause the SG Pressure Channel MPP-212 to Fail High (SG11 PORV Opens in Auto)

EVENT #6 ICF U1_RC10A to 5 over 10 minutes to cause RCS Leakage U1_MPP212 U1_EDPR10J U1_RC10A U1_NPP151 Set U1_MSVMRV210 0.94

Scenario Instructor Actions Page 20 of 20 EVENT #7 (8, 9, & 10 already loaded)

ICF U1_RC01A to 50 over 30 seconds to cause RCS Break Local actions after entry into E-0:

• Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

• Aux Tour will monitor Spent Fuel Pool Level and Temperatures

• Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delays built in)

• U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR03A U1_EGR03B U1_EGR03A U1_EGR04A U1_CHR01 U1_CHR02 U1_EGR04A U1_EGR03B U1_RC01A U1_CHR03 U1_EGR04B U1_EGR04B

Appendix D Scenario Outline Form ES-D-1 Page 1 of 16 Facility: DC Cook 1 & 2 Scenario No.: 4 Op-Test No.: _________

Examiners: __________________________ Operators: ____________________________

Initial Conditions: ______80% Power_____________________________________________

Turnover: Start the West TACW pump and stop the East TACW Pump.

Critical Tasks Align High Head Injection, Trip RCPs, Make-up / Reduce RWST Outflow Event No.

Malf. No.

Event Type*

Event Description 1

N-BOP Swap Turbine Aux Cooling Water (TACW) Pumps.

2 U1_CV04C C-RO Letdown Orifice valve fails closed 3

U1_NLP151

@ 0%

I-RO TS Pressurizer Level Channel Failure (perform before letdown is restored) 4 U1_FFC220

@ 0 over 20 sec I-BOP TS Feed Flow Channel Fails low on SG 2 5

U1_FW05A C-BOP R -RO East Main Feed Pump Trip 6

R-RO N-BOP Stabilize Plant And Recover AFD from FW Pump Trip 7

U1_RC02C 100%

M Hot Leg LOCA 8

U1_ED05H C-BOP Loss of Power to T11D 9

U1_RP20B, U1_RP20G C-RO Slave Relay failures: High Head [ECCS] Charging valves fail to align (Preloaded) 10 U1_WRHR C-BOP RHR Pump Fails to Start ECA-1.1 (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Page 2 of 16 Event Summary The Crew is directed to start West TACW pump and stop East TACW Pump.

After the TACW pump swap, the in-service letdown orifice valve will fail closed. The RO will need to restore letdown through a different valve.

Prior to restoring letdown, the controlling Pressurizer Level channel NLP-151 fails LOW. Charging flow control valve (QRV-251) will be in manual so RO will monitor for stability. Pressurizer water level low alarm comes in (letdown was previously isolated) and all pressurizer heaters will de-energize. The RO will have manual control of the Pressurizer Level controller and will be restoring level. The crew should implement the AOP, stabilize the plant, trip bi-stables, select an operable channel, and restore letdown and level control to auto.

The #2 SG Feed Flow instrument (FFC-220) fails LOW. This will result in the opening of #2 SG FWRV (FRV-220) to raise feedwater flow. The BOP will be required to take manual control and regulate FRV-220. The Crew will be required to implement AOP actions to stabilize the plant.

A trip of the East Main Feed Pump will result in a rapid power reduction to less than 60% if not already performed. The BOP will start additional pumps as required and stabilize FW pump speed control.

The RO will be required to control reactivity while the BOP monitors the SG levels.

A Hot Leg break will result in a Reactor Trip and Safety Injection. On the SI, various slave relay failures will cause the High Head Charging (ECCS) Injection flowpath to fail to align. The RO will need to manually align the High Head Injection Valves. The crew will enter E-0 and transition to E-1. The West RHR pump will trip resulting in a loss of Recirculation Capability requiring entry into ECA-1.1.

On the Generator Trip, a loss of 4 KV bus T11D causes a trip of the running Charging Pump, Component Cooling Pump, and ESW pump. The Standby ESW (U2) and CCW pumps will start. (The East RHR and North SI pumps will also be unavailable)

Critical Tasks Align High Head Injection Trip RCPs Procedures E-0, Reactor Trip or Safety Injection E-1, Loss of Reactor or Secondary Coolant FR-Z.1, Response to High Containment Pressure FR-P.1, Response to Imminent Pressurized Thermal Shock

Appendix D Required Operator Actions Form ES-D-2 Page 3 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 1 Event

Description:

Swap Turbine Aux Cooling Water (TACW) Pumps.

Time Position Applicants Actions or Behavior US Directs actions of 1-OHP-4021-058-002, Operation of TACW System.

BOP Performs the following to swap TACW pumps as directed:

• Start Standby (West) TACW Pump.

• Stop running (East) TACW Pump.

• Place East TACW Pump in AUTO.

Appendix D Required Operator Actions Form ES-D-2 Page 4 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 2 Event

Description:

Letdown Orifice valve fails closed Time Position Applicants Actions or Behavior RO Identifies and reports rise in pressurizer (PRZ) or lowering VCT level due to a loss of letdown flow as a result of QRV-162 failing closed.

US/RO Minimizes charging flow to that amount required for seal injection.

US Directs RO to restore normal letdown (using QRV-161, 75 gpm letdown orifice) per 1-OHP-4021-003-001, Letdown, Charging, and seal water Operation, Attachment 13.

RO/BOP Restores normal letdown per Attachment 13, Section 4.1 as follows:

(Will Perform after following event)

1. Places QRV-302 in divert position.

2. Verifies orifice isolations closed (QRV-160, 161 and 162).

3. Adjusts CRV-470 controller to >50% output.

4. Verifies open letdown isolation valves:

a. QCR-300, CVCS letdown Cntmt isol

b. QCR-301, CVCS letdown Cntmt isol

c. QRV-111, RC letdown to Regen hx

d. QRV-112, RC letdown to Regen hx

5. Adjusts QRV-301 controller to 50% output.

6. Checks/adjusts charging flow to > 75 gpm.

7. Opens QRV-161, 75 gpm letdown orifice isolation.

8. Adjusts QRV-301 to maintain 160 - 350 psig on QPC-301.

9. Places QRV-301 in auto (if desired).

10. Nulls and returns CRV-470 controller to auto.

11. Adjusts charging flow as required to maintain PRZ level.

12. Places PRZ level control in automatic (if desired).

13. Places QRV-302 in normal (demin) position when letdown temperature is stable.

Appendix D Required Operator Actions Form ES-D-2 Page 5 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 3 Event

Description:

Pressurizer Level Channel NLP-151 Failure (perform before letdown is restored)

Time Position Applicants Actions or Behavior RO Recognizes and reports annunciators on Panel #108 (Drops 4 and 5). Reports instrument malfunction indicative of a pressurizer (PRZ) level instrument failure.

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

• Verifies 1-QRV-251, Charging Flow Controller OR PRZ Level Controller in manual from previous event or manually adjusts output to restore charging header flow and seal injection to normal Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-010, Pressurizer Level Instrument Malfunction procedure.

RO Performs the following actions as directed:

1. Restores PRZ level using 1-QRV-251 or level controller

2. Reports 1-NLP-151 has failed

3. Ensures PRZ level control is in manual

4. Places PRZ Level CTRL selector switch in Ch 2 & 3 position

5. Places PRZ Level REC selector switch in 2 or 3 position

6. Checks NPP-151 and NLI-151 for failure

7. Restore Letdown or Excess Letdown per 1-OHP-4021-003-001 (See Previous Event)

8. Cycle PRZ Heaters to restore control

9. Nulls and returns 1-QRV-251 and PRZ Level Controller back to auto US Initiates actions to trip bistables associated with 1-NLP-151 PZR Level Failure per Attachment A of OHP-4022-013-010.

US Refers to Tech Specs (TS):

• TS 3.3.1 RTS Instrumentation (Table 3.3-1, *Function 9 Action D)

• TS 3.3.3 Post Accident (Minimum channels met)

• Identifies requirement to trip associated bistables within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of pressurizer level channel failure.

• TS 3.3.4 Remote Shutdown Instrumentation

Appendix D Required Operator Actions Form ES-D-2 Page 6 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 4 Event

Description:

Feed Flow Channel (FFC-220)Fails low on SG 2 Time Position Applicants Actions or Behavior BOP Recognizes and reports annunciators on Panel #113 Drop 32, Steam Generator 2 Water LVL HI Deviation Drop 42 Steam Generator 2 Feedwater Flow High Drop 43, Steam Generator 2 SF > FWF Mismatch BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

• Verifies FRV-220, SG #2 MFW Reg. Valve controller in manual Lowers controller output to match the operable feed flow channel with steam flow.

• Restores SG #2 level to program.

• Performs Stability Checks Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-015, Feedwater Flow Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Reports FFC-220 has failed low

2. Places FS-520-C selector switch in channel 2 position.

3. Nulls and returns FRV-220 controller to auto.

US Refers to Tech Specs 3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 15, Condition D). Trip Bistables in 6 Hr US Notifies SM/MTI to Initiate actions to trip bi-stables associated with FFC-220 FW Flow Failure per Attachment B-1 of OHP-4022-013-015.

Appendix D Required Operator Actions Form ES-D-2 Page 7 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 5 Event

Description:

East Main Feed Pump Trip Time Position Applicants Actions or Behavior BOP Recognizes indication of MFP trip and reports annunciator Panel

1. 115, Drop 1, East FPT DCS Trouble, DCS Screen East FW Pump Tripped Status US Directs operators to perform the immediate actions per OHP-4022-055-001, Loss of One MFP.

RO Performs the following immediate actions:

1. Verify Turbine Load is automatically reduced to < 60

2. Verifies rod control switch in AUTO and functioning properly.

BOP Performs the following immediate actions:

1. Close the East FW Pump Emergency Leakoff Valves FRV-251 & 252

2. Adjust West FW Pump speed/integration as required

3. Start Standby Hotwell & Condensate Booster Pumps if required

4. Start AFW pumps if required.

US Checks the immediate actions and directs operators to perform the subsequent actions of OHP-4022-055-001, Loss of One MFP.

BOP Verify SG levels are stable at or returning to normal (44%).

RO Initiate normal or emergency boration flow (if required) to maintain rods above the RIL (~1.89 * % power)

CREW May enter Technical Specification 3.4.1 RCS Pressure, Temperature, and Flow DNB Limits if Pressure lowers to <2168 psig. (2200 psig admin limit)

Appendix D Required Operator Actions Form ES-D-2 Page 8 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 6 Event

Description:

Stabilize Plant And Recover AFD from FW Pump Trip Time Position Applicants Actions or Behavior US Direct operator actions to restore normal system alignment: (as required)

Restore AFD to required Band Restore Megawatt Control to OUT Return W MFP to DP control Check ALL PRZ Backup Heaters on Reset Steam Dump Load Rejection Stop running AFW pumps and align for standby condition Complete FW Pump Shutdown Align Condensate system for current plant conditions RO Borate to position rods to restore AFD to within Target Band BOP Stop AFW Pumps and Place in Standby Stabilize West FW pump speed and restore required DP Reset Steam Dump Load Rejection Align Condensate system for current plant conditions

Appendix D Required Operator Actions Form ES-D-2 Page 9 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event

Description:

Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior RO/US Acknowledge Ann. Panel 122, Drop 84, ICE CONDENSER INLET DOORS OPEN, alarm.

Determines that a loss of reactor coolant is occurring based on the following:

Pressurizer and VCT level change Charging and letdown flow mismatch Containment radiation monitoring trend Containment pressure rise Containment sump level rise Containment dewpoint US Directs RO/BOP to manually trip the reactor and initiate safety injection and perform the immediate actions of OHP-4023-E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging system capability or rising Containment Pressure).

RO/BOP Performs the immediate actions of OHP-4023-E-0:

• Checks reactor trip

• Checks turbine trip BOP Checks power to AC emergency buses

• Determines that T11A and T11B are Energized

• May Identify that 1AB DG did Not Start (from relay failure)

• Determines That T11D and T11C are De-Energized RO Verifies that Safety Injection Has Actuated US Ensures immediate actions of E-0 are completed US Directs subsequent actions of E-0.

RO/BOP Reviews E-0 Foldout Page Criteria.

BOP Manually controls AFW flow to maintain SG narrow range levels 13% - 50% once one SG narrow range level is > 13%.

Appendix D Required Operator Actions Form ES-D-2 Page 10 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event

Description:

Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior RO Reports that RHR pumps are NOT running - 1E RHR pump off due to T11D Power Loss and 1W RHR Pump has tripped.

US/RO Critical Task #1 Manually opens high head safety injection valves:

• BIT Inlet Valve o 2-IMO-256

• BIT Outlet Valve o 2-ICM-251 Note: Event 9, Manually align the High Head Injection Valves.

US/RO Verifies Containment Isolation - Phase A.

CREW Critical Task #2 Manually stops all Reactor Coolant Pumps (RCPs) within 5 minutes of RCS pressure lowering below 1300 psig.

RO/BOP Performs verification and actions of E-0 Attachment A as directed by US.

CREW Completes all actions of E-0 through step 19 (Check If RCS Is Intact).

US Announces transition to OHP-4023-E-1, Loss Of Reactor Or Secondary Coolant (at step 19 of E-0).

Checks Status Trees for Red Path

Appendix D Required Operator Actions Form ES-D-2 Page 11 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event

Description:

Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior US May Transition to Z.1 on Orange Path in Containment based on Pressure.

Check Containment Isolation Verify CTs operating and Phase B Stop Vent Fans Verify CEQ Fans Running and Lineup Verify Secondary not Faulted & Isolated Return to Procedure and step in effect US May Transition to OHP-4023-FR-P.1 due to RED Path.

Identifies RCS pressure < 300psig - May exit at RNO May Continue since No RHR Flow Verifies Cooldown Sources Isolated Check PZR PORVS Check ECCS Go to Step 26 due to No Subcooling for Soak and exit RO/BOP Reviews E-1 Foldout Page Criteria.

US Directs actions of E-1, Loss Of Reactor Or Secondary Coolant.

BOP Maintains SG narrow range levels 27% - 50%.

Directs chemistry to initiate post-accident sampling

Appendix D Required Operator Actions Form ES-D-2 Page 12 of 16 Op-Test No.: Cook 2018 Scenario No.: NRC2018-4 Event No.: 7,8,9, & 10 Event

Description:

Hot Leg LOCA with trip of T11D bus, High Head SI Relay failure and Loss of RHR Time Position Applicants Actions or Behavior US Checks if SI Termination Criteria is MET:

• RCS Subcooling >40°F - NO

• Secondary Heat Sink (SG >13% or AFW Flow >240x103)

• RCS Pressure rising or stable - NO Lowering

• Pressurizer Level >20%

Crew Checks CTS Injection - (If Containment < 2 PSIG RCS pressure <300 Psig so operate for 24 Hours)

RO/BOP Performs the following as directed:

1. Resets both trains of Safety Injection

2. Checks Emergency Diesel Generators (EDG) NOT running

3. Dispatches operator to secure EDG jacket water pumps (for EDG Stopped)

4. Evaluate Long Term Plant Status (RHR Not Available)

US Announces transition to OHP-4023-ECA-1.1, Loss of Emergency Coolant Recirculation (at step 11 of E-1).

Terminate Scenario

Critical Task Summary Page 13 of 16 Task Elements Results

1. 1 Manually Align one train of Safety Injection to establish HIGH Head Injection Flow Cueing:

Check BIT Flow (E-0, Attachment A Step 2) 1-IFI-51 1-IFI-52 1-IFI-53 1-IFI-54 Performance Indicators:

Before transitioning from E-0:

Manually Align Valves BIT Inlet Valve ICM-256 - OPEN BIT Outlet Valve ICM-251 - OPEN Performance Feedback:

ECCS flow is indicated to at least one train (as indicated by flow on cold leg BIT injection flowmeters) 1-IFI-51 1-IFI-52 1-IFI-53 1-IFI-54 SAT / UNSAT

1. 2 Manually trip all Reactor Coolant Pumps Cueing:

RCS pressure - less than 1300 psig AND CCPs or SI pumps - at least one running E-0, Foldout Page, Step 1 E-1, Foldout Page, Step 1 E-1, Step 1 Performance Indicators:

Manually stop all Reactor Coolant Pumps (RCPs) when RCS pressure is less than 1300 psig prior to core uncovery leading to CETC >2200°F.

Performance Feedback:

RCP ammeters - zero current RCP trip low flow alarms - lit RCS loop flow meters - flow lowering SAT / UNSAT

Scenario Instructor Actions Page 14 of 16 Setup:

1. Reset to IC-308 MOL; 80% power, 883 MW, 805.58 ppm, 565.7 F 195 Steps on D

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Activate the following (pre-load) malfunctions:

Generator Trip to Trigger 4 T11D Failure to Trigger 4 RPS Relay Failure Train B AB DG, QMO226, 1S NESW, IMO-256 ICM-251 West RHR Trip ON T10 Hot Leg Break on T10 CL Break on T10 (raise size of RCS break)

U1_RC01C U1_ED05H U1_RP20G U1_WRHR U1_RC02C Generator Trip on T4 U1_RP20B

Scenario Instructor Actions Page 15 of 16 Scenario Events:

EVENT #1 If asked, a Starting Party is standing by to observe swap of the TACW Pumps.

EVENT #2 IMF CV04C, to cause QRV-162, 75 gpm letdown orifice to fail closed.

If desired, direct the Crew as the SM to restore ONLY 75 GPM letdown using section 4.1 of Attachment

13.

EVENT #3 ICF U1_NLP151 to 0 to fail Pressurizer Level Channel NLP-151 (perform before letdown is restored)

EVENT #4 ICF U1_FFC220 to 0 over 20 Seconds to cause Feed Flow Channel FFC-220 to fail low on SG 2 EVENT #5 IMF U1_FW05A to cause the East Main Feed Pump Trip U1_FFC220 U1_NLP151 U1_FW05A U1_CV04C

Scenario Instructor Actions Page 16 of 16 EVENT #6, 7, 8,& 9 Activate Trigger 10 to begin the LOCA with Slave Relay failures, RHR Pump Trip and Loss of T11D (on Generator Trip)

Local actions after entry into E-0:

• Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

• Aux Tour will monitor Spent Fuel Pool Level and Temperatures

• Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

• U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

Manually (locally) CLOSE 1-HV-ACR-DA-2A if Dispatched If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_CHR02 U1_EGR04B U1_CHR03 Start LOCA On T10 U1_EGR04A U1_EGR03B U1_CHR01 U1_EGR03B U1_EGR03A U1_EGR03A U1_EGR04A U1_EGR04B U1_HVR11

Appendix D Scenario Outline Form ES-D-1 Page 1 of 21 Facility: DC Cook 1 & 2 Scenario No.: 5 Op-Test No.: _________

Examiners: ___________________________ Operators:

Initial Conditions: ___100% power.

Turnover: Reduce power for East AFW pump inoperable > 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> - Shutdown in 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

Critical Tasks Insert Negative Reactivity, Isolate the Faulted Steam Generator.

Event No.

Malf. No.

Event Type*

Event Description 1

U1_QLC45 2 to 100 I-RO TS VCT Level Channel QLC 452 fails HIGH 2

R-RO N-BOP Perform Rapid Power Reduction 3

U1_RX11D

@100%

C-BOP SG PORV Controller Failure 4

U1_ECP C-RO TS East CCP pump trips 5

U1_BLP111

@ 0 over 30 sec I-BOP TS

1. 11 SG level Transmitter fails LOW 6

U1_MS01D

@ 20 over 2 min M-ALL Steam Line Break inside Containment (#14 SG) 7 U1_RP03A U1_RP03B C-RO AUTO/MANUAL Reactor trip actuation failure (ATWS) 8 U1_RP07A U1_RP07B C-BOP Steam Line Isolation fails to AUTO actuate (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Page 2 of 21 Event Summary The scenario starts with the East MDAF pump inoperable due to a failed coupling. The crew must perform a shutdown within the next 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

Prior to reducing power, the VCT Level Channel QLC-452 fails high. This will cause the QRV-303 VCT Divert valve to fully divert letdown flow to the HUT. The Operator is required to take Manual control of QRV-303 and direct letdown flow back to the VCT. Crew will be required to implement AOP actions to stabilize the plant and address Technical Specifications (TRM).

If required, the crew will be directed by the Shift Manager to lower power.

The next event will involve a trip of the East Charging Pump. This will result in the loss of charging and letdown. RO will be required to manually start the West Charging Pump to restore charging flow. Crew will be required to take manual control of charging and restore letdown to stabilize the plant.

A failure of the SG #11 PORV Controller while in Auto will occur. The Controller will fail causing PORV MRV-213 to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV and the US will need to declare the associated radiation monitor inoperable.

The #11 Steam Generator Level instrument (BLP-111) fails LOW. This results in a higher feedwater flow and Steam Generator level will rise. BOP will be required to take manual control and restore normal level. Crew will be required to implement AOP actions to stabilize the plant and address Technical Specifications.

The main event will involve a Steamline Break inside containment on the #14 SG. The unit will NOT trip and a Safety Injection will actuate. The reactor must be locally tripped. The crew will implement FR-S.1 actions until reactor is subcritical. Failure of the Steam Line Isolation actuation circuit will require a manual actuation. After the crew performs the actions of FR-S.1, they should identify the Main Steamline Break inside containment on the #14 SG. The crew will isolate the SG in FR-Z.1 or eventually transition to E-2 to isolate #14 SG. The scenario will terminate when the crew has isolated the Faulted SG.

Critical Tasks Insert Negative Reactivity Isolate the Faulted Steam Generator Procedures E-0, Reactor Trip or Safety Injection E-2, Faulted Steam Generator Isolation FR-S.1, Response to Anticipated Trip without Scram FR-Z.1, Response to High Containment Pressure

Appendix D Required Operator Actions Form ES-D-2 Page 3 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 1 Event

Description:

VCT Level Channel QLC 452 fails HIGH Time Position Applicants Actions or Behavior RO Recognizes indication of VCT Level problem and reports Annunciator Panel #109 (if VCT level on QLC-451 lowers to 14%):

Drop 48 VOLUME CTRL TANK MAKEUP NOT IN AUTO alarm Drop 49 VOLUME CONTROL TANK LEVEL LOW alarm Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place QRV-303 controller in Manual and lowers demand

-OR-Place Divert valve (QRV-303) in VCT position.

Recognizes and reports failure of VCT Level Transmitter (QLC-452).

US Directs operator actions per 1-OHP-4022-013-017, VCT Instrument Malfunction.

US Refers TRM 8.1.1, Boration Systems - Operating:

Condition A (Interposing Relay should be energized for Refueling Water Sequence).

Enters action statement to restore to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

US Notify SM/MTI to imitate actions to energize Interposing Relay in accordance with Attachment B.

Appendix D Required Operator Actions Form ES-D-2 Page 4 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 2 Event

Description:

Rapid Power Reduction Shutdown Time Position Applicants Actions or Behavior US Directs RO to commence Rapid Power Reduction in accordance with 1-OHP-4022-001-006, Rapid Power Reduction.

RO Performs (Att. D) NORMAL BORATION:

Verify charging is > 75 gpm CLOSE 1-QMO-225, EAST CCP Mini-Flow (CCP ELO)

Place RC Makeup Blend control switch in STOP.

Place RC Makeup Blend Control Mode switch in BORATE.

Adjust BA Controller/Totalizer to the desired flow rate and amount.

Place RC Makeup Blend control switch in START.

May take QRV-303 to MANUAL/OPEN (as required) to maintain VCT level and pressure.

1-OHP 4022-001-006 Attachment D Table

-OR-(Next page)

Appendix D Required Operator Actions Form ES-D-2 Page 5 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 2 Event

Description:

Rapid Power Reduction Shutdown Time Position Applicants Actions or Behavior Performs (Att. E) EMERGENCY BORATION:

Verify charging is > 75 gpm.

CLOSE 1-QMO-225, EAST CCP Mini-Flow (CCP ELO)

Place #2 BAT pump to FAST speed.

Open QMO-410, Emergency Boration To CHG Pump Suction valve.

Verify QFI-410, Emergency Boration Flow.

May take QRV-303 to MANUAL/OPEN (as required) to maintain VCT level and pressure.

1-OHP 4022-001-006 Attachment E Table RO Commences power reduction:

Verify all PRZ backup heaters ON.

Ensures control rods in AUTO.

BOP Acts as peer checker for RO and verifies appropriate reactivity feedback.

Appendix D Required Operator Actions Form ES-D-2 Page 6 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 2 Event

Description:

Rapid Power Reduction Shutdown Time Position Applicants Actions or Behavior BOP Performs Attachment F Adjusting Main Turbine Load Places MW feedback IN Enters TARGET Load into HMI Enters RAMP RATE into HM Depresses GO to Lower Turbine load using HMI.

CREW Begins Load Reduction on Main Turbine RO Monitors Power and Tavg as load lowers BOP Monitors SG Levels and FW Pumps as Load Lowers

Appendix D Required Operator Actions Form ES-D-2 Page 7 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 3 Event

Description:

SG PORV Controller Failure Time Position Applicants Actions or Behavior BOP Recognize and reports Annunciator #114 Drop 24 that indicates SG #4 PORV MRV-243 has opened.

BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place SG PORV #4 in MANUAL and closes SG #4 PORV.

Crew Performs plant stability checks.

US Enters OHP-4022-IFR-001, Instrument Failure Response: to direct operator actions to close SG #4 PORV and monitor Reactor Power.

US Declares the SG #4 PORV Radiation Monitor MRA-1602 inoperable.

US Refers to the following Tech Specs (TS) / Tech Requirements Manual (TRM):

• TS 3.7.4, SG PORVs - (Note: Only Manual Ops Required) - N/A

• TRM 8.3.8. Radiation Monitoring Instrumentation, Condition C.1-Restore channel/monitor to operable status within 7 Days (PORV must be able to auto open for Radiation Monitor but not PORV safety Function.)

Appendix D Required Operator Actions Form ES-D-2 Page 8 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 4 Event

Description:

East CCP pump trips Time Position Applicants Actions or Behavior RO Recognizes and reports multiple annunciators on Panel #107, #108 and #109 which are indicative of a loss of charging capability.

• Loss of charging flow

• Loss of letdown flow

• Loss of RCP seal injection flow RO Recognizes and reports that running (E) CCP has tripped.

US Directs RO to start the W CCP per annunciator response procedure(s):

• 1-OHP 4024-108 Drop 20, Charging Flow < Min Set Point or

• 1-OHP 4024-109 Drop 11, East CCP Motor Instant Trip RO Performs the following as directed:

• Starts W CCP

• Adjusts QRV-200 and QRV-251 flow to maintain RCP seal injection flow and pressurizer level.

• Places normal letdown back in service in accordance with 1-OHP-4021-003-001, Attachment 13.

(Continued on next page)

Appendix D Required Operator Actions Form ES-D-2 Page 9 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 4 Event

Description:

East CCP pump trips Time Position Applicants Actions or Behavior RO Restores normal letdown per 1-OHP-4021-003-001, Letdown, Charging, and Seal Water Operation, Attachment 13 :

1. Places QRV-302 in divert position.

2. Verifies orifice isolations closed (QRV-160, 161 and 162).

3. Adjusts CRV-470 controller to 50%.

4. Verifies open letdown isolation valves:

QCR-300 QCR-301 QRV-111 QRV-112

5. Adjusts QRV-301controller to 50%.

6. Checks/adjusts charging flow to > 75 gpm.

7. Opens QRV-161 or 162.

8. Adjusts QRV-301 to maintain 160 - 350 psig.

9. Places QRV-301 in AUTO.

10. Nulls and returns CRV-470 controller to AUTO.

11. Adjusts charging flow as required to maintain PRZ level.

12. Places PRZ level control in automatic (if desired).

13. Places QRV-302 in normal (demineralizer) position when letdown temperature is stable.

US Declares E CCP inoperable and refers to Tech Specs (TS):

3.5.2, ECCS Subsystems - Tavg > 350°F (Condition A)

Refers to Technical Requirements Manual (TRM):

TRM 8.1.1, Boration Systems - Operating (Enters action statements to restore E CCP to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.)

Appendix D Required Operator Actions Form ES-D-2 Page 10 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 5 Event

Description:

1. 11 SG level Transmitter BLP-111 fails LOW Time Position Applicants Actions or Behavior Crew Respond to ANNUNCIATOR #113 RESPONSE: STEAM GENERATOR 1 AND 2:

Drop 3: STEAM GEN 1 WATER LVL LOW DEVIATION Drop 5: STEAM GEN 1 WATER LEVEL LOW-LOW Drop 13: STEAM GEN 1 SF > FWF FLOW MISMROH BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies FRV-210, SG 1 Feedwater Regulating Valve, controls in MANUAL.

Crew Performs plant stability checks.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

BOP Restore Steam Generator Narrow Range Level using Manual Control of Feedwater Regulating Valve 1-FRV-210 Check Steam Generator Narrow Range Level - Stable OR Trending to 44%

US Enters and directs actions of 1-OHP-4022-013-013, Steam Generator Level Instrument Malfunction US Refers to the following TS:

3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 14 - Cond D).

3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 5b & 6c

- Cond D).

US Direct actions to trip bi-stables per Attachment A-2 of 1-OHP-4022-013-013.

Appendix D Required Operator Actions Form ES-D-2 Page 11 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Crew Recognize RCS temp/press, pressurizer level lowering, reactor power rising MT MW lowering and reactor trip requirements.

US Enter 1-OHP-4023-E-0: Reactor Trip or Safety Injection - Directs RO to Perform Reactor trip RO Recognizes and reports failure of reactor to manually trip US Directs actions of OHP-4023-FR-S.1, Response to Nuclear Power Generation/ATWS RO Critical Task #1 Performs the immediate actions of FR-S.1:

1. Checks reactor trip Automatically/Manually insert control rods(must Insert Negative Reactivity through Inserting Control Rods or Emergency Boration)

BOP Performs the immediate actions of FR-S.1:

1. Manually actuate AMSAC

2. Check Turbine Trip

3. Check AFW pumps running MDAFP - West Running TDAFP - Running US Ensures immediate actions of FR-S.1 are completed

Appendix D Required Operator Actions Form ES-D-2 Page 12 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior RO Critical Task #1 Initiate Emergency Boration of RCS(must Insert Negative Reactivity through Inserting Control Rods or Emergency Boration)

CCPs - at least one running Initiate emergency boration Start both boric acid transfer pumps in FAST speed Open 1-QMO-410. Emergency boration to CCP suction valve Check emergency boration flow - GREATER THAN 44 GPM Check PRZ pressure LESS THAN 2335 PSIG Crew Check Containment Ventilation Isolation Closed:

Pressure Relief Instrument room Purge Check SI Status - Actuation status light - LIT As time permits, perform Steps 5 through 13 of E-0 US Check if the following trips have occurred:

Reactor Trip - Reactor Trip Breakers, Bypass breakers, Rod drive MG set output breakers Turbine Trip Dispatch Operator to Locally Trip Reactor CREW Check if Reactor is Subcritical - Go to step 20 Continue Boration To Maintain Adequate Shutdown Margin During Subsequent Recovery Actions:

Determine shutdown margin Return To Procedure And Step In Effect E-0 US Transition to OHP-4023-E-0 and direct actions NOTE:

Crew may transition to FR-Z.1 on exit from FR-S.1 Steps for FR-Z.1 follow. Steps for E-0 are on Page 14

Appendix D Required Operator Actions Form ES-D-2 Page 13 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Crew Check Containment Isolation Status Ventilation Isolation - Completed Phase A Isolation - Completed US/RO Check CTS Actuation CTS Pumps Running CTS Valve Alignment per SML-9A,B, C Phase B Isolation - Completed Stop RCPs Stop Lower Containment Ventilation Fans Stop Control Rod Drive Fans US Check RHR Spray Not Required BOP Check Containment Recirculation Fans Operating CEQ Fans Running CEQ Fan Dampers open CEQ CCW Cooling Valves open BOP Check DIS in Service BOP Check all SG stop valves and SG SV Dump Valves are closed Stop Valves may NOT trip closed if Steam Pressure is low.

May be driven closed with hydraulics from control switch Crew Critical Task#2 Check SG Stop Valves CLOSED MRV-240 (may need to close with C/S hydraulics)

Check SG Stop Valve Dump Valves CLOSED MRV-241 and 1-MRV-242 Check if any SG secondary pressure boundary is intact Pressure in all SGs - Any stable or rising Identify Faulted SG Isolate Faulted SG:

Check feedwater valves for faulted SG CLOSED Check AFW valves for faulted SG CLOSED 1-FMO-241 1-FMO-242

Appendix D Required Operator Actions Form ES-D-2 Page 14 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior May Terminate once SG is Isolated E-0 Actions CREW Check Reactor Trip Check Turbine Trip Check Power to AC Busses - At least ONE Energized AC Emergency Busses - ALL Energized Check SI Status - Status Light LIT BOTH CCP Leakoff valve Safety Injection Signal white lights -

LIT BOP Check Main Steamline Isolation - Required - Verify all SG stop valves and SG SV Dump Valves are closed Stop Valves may NOT trip closed if Steam Pressure is low.

May be driven closed with hydraulics from control switch RO Check CTS-CTS is required and should be actuated (timed out)

Verify CTS Pumps Running and valves aligned RO/BOP Stops all Reactor Coolant Pumps RO/BOP Verifies CEQ fan operation Places Lower Containment Vent Unit fans in OFF Places CRDM fans in STOP Places DIS in service Dispatches operator to stop all ice condenser AHUs Starts all hydrogen igniters RO/BOP Implement Attachment A While Continuing With This Procedure Crew Check If Ruptured SG Is Suspected: SG narrow range levels -

NONE rising in an uncontrolled manner

Appendix D Required Operator Actions Form ES-D-2 Page 15 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Crew Check AFW pumps running - MDAFPs - West running, TDAFP running, East OOS Check Total AFW flow - GREATER THAN 240x103 PPH Minimize Unnecessary RCS Cooldown:

Check SG narrow range level Greater than 13%

Control feed flow to maintain SG narrow range level between 13% and 50%

Check AFW Pump Discharge valves - OPEN or Throttled Crew Check FW Isolation Main feed pumps - BOTH TRIPPED Feed pump discharge valves - CLOSED Feedwater regulating valves - CLOSED Feedwater isolation valves - CLOSED Check RCS Temperature:

Cold Leg Temperatures stable at or trending to 547°F Stop dumping steam Verify 1-DRV-407 CLOSED If cooldown continues, then control total feed flow If cooldown continued, then perform the following:

Trip all SG stop valves closed (or manually close)

Verify SG stop valve dump valves are closed Check PRZ PORVs ad Spray Valves CLOSED PORV block valves at least one energized Block valves at least one open Check IF RCPs Should Be Stopped:

RCS Pressure less than 1300 PSIG ECCS pumps at least one running Stop all RCPs Check If SG Secondary Pressure Boundaries are Intact:

Pressure in all SGs:

NO SG pressure lowering in an uncontrolled manner NO SG completely depressurized RNO: Go to OHP-4023-E-2, Faulted Steam Generator Isolation

Appendix D Required Operator Actions Form ES-D-2 Page 16 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior US Announces entry into OHP-4023-E-2, Faulted SG Isolation Crew Critical Task#2 Check SG Stop Valves CLOSED MRV-240 (may need to close with C/S hydraulics)

Check SG Stop Valve Dump Valves CLOSED MRV-241 and 1-MRV-242 Check if any SG secondary pressure boundary is intact Pressure in all SGs - Any stable or rising Identify Faulted SG Check pressure in all SGs Any SG Pressure Lowering in an Uncontrolled Manner or Any SG Completely Depressurized Isolate Faulted SG:

Check feedwater valves for faulted SG CLOSED Check AFW valves for faulted SG CLOSED 1-FMO-241 1-FMO-242 Check PORVs for faulted SG CLOSED Check blowdown isolation valve for faulted SG CLOSED Place 1-DRV-407, SG stop valves drain valve in CLOSED Check 1-DRV-407 CLOSED Check Steam line warming valves CLOSED May Terminate once SG is Isolated

Appendix D Required Operator Actions Form ES-D-2 Page 17 of 21 Op-Test No.: Cook 2018 Scenario No.: NRC2018-5 Event No.: 6,7,8, & 9 Event

Description:

Steam line #4 break inside containment, Reactor trip failure (ATWS), Steam Line isolation does not occur in automatic, Time Position Applicants Actions or Behavior Check CST Level Greater Than 15%

Check Secondary Radiation:

Reset containment isolation Phase A if Necessary Direct Chemistry to periodically sample all SGs for activity Check SG PORV radiation monitors Secondary radiation - NORMAL Check If ECCS Flow Should Be Reduced RCS subcooling based on core exit TCs - Greater than 40F Secondary heat sink:

Total feed flow to intact SGs - Greater Than 240x103 PPH Narrow range level in at least one intact SG - Greater Than 14%

RCS pressure - Stable or Rising PZR level - Greater than 21%

Go to OHP-4023-ES-1.1, SI Termination Terminate Scenario

Critical Task Summary Page 18 of 21 Task Elements Results

1. 1 Manually Trip Reactor Cueing:

• Symptoms which require a reactor trip (i.e., loss of feedwater flow to SGs)

• Challenge to multiple reactor trip instrumentation setpoints (i.e.):

Lo SG Level with FF/SF mismatch Lo-Lo SG level

• RX TRIP BKR TRAIN A/B UV TRIP (ATWS) alarms Performance Indicators:

• Manually open at least one reactor trip breaker from the control room.

• Reactor trip breaker must be opened prior to exceeding the RCS pressure safety valve limit of 2485 psig).

Performance Feedback:

• RPIs indicate rods - fully inserted

• Rod bottom lights - lit

• Neutron flux - lowering SAT / UNSAT

1. 2 Isolate Faulted Steam Generator Cueing:

• E-2, steps 1, 2 and 5

• FR-Z.1 Steps 7-10

• Steam generator pressure lowering

• RCS temperature lowering Performance Indicators:

• Isolate SG 14 by closing:

• MFW valves

• AFW valves - FMO-241, FMO-242

• SG Stop valve - MRV-240

• SG 24 must be isolated before transitioning out of E-2/FR-Z.1 Performance Feedback:

• RCS cooldown stops

• Depressurization of intact SGs stop

• Feedwater flow to affected SG stops SAT / UNSAT

Scenario Instructor Actions Page 19 of 21 Setup:

1. Reset to IC-303 MOL; 100% power, 1130 MW, ppm, 571 F Steps on D East AFW Pump OOS

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Activate the following (pre-load) malfunctions:

6. RP03A (Reactor Trip / Train A breaker failure)

7. RP03B (Reactor Trip / Train B breaker failure)

8. RP07A (Streamline Isolation A auto failure)

9. RP07B (Streamline Isolation B auto failure)

10. U1_FWR61 (E MDAFP Breaker Racked Out)

U1_RP03B U1_RP03A U1_RP07B U1_RP07A U1_FWR61

Scenario Instructor Actions Page 20 of 21 Scenario Events:

EVENT #1 Insert Malfunction during Brief for power change Prior to starting the Ramp ICF U1_QLC452 to 100 to fail VCT Level Channel QLC-452 High To trip Interposing relay LBX185B EVENT #2 Respond to Power Change Requests as required EVENT #3 IMF U1_RX11D to 100 to cause SG 4 PORV Controller to fail to 100% in Auto EVENT #4 ICF U1_ECP to cause the East CCP to trip (Report Instantaneous OC trip on Breaker if Dispatched)

EVENT #5 ICF U1_BLP111 to 0 to cause the SG Level Channel BLP-111 to fail Low on SG 1 U1_RX11D U1_QLC452 U1_BLP111 U1_ECP U1_RPR158

Scenario Instructor Actions Page 21 of 21 EVENT #6, 7, 8,& 9 IMF MS01D to 20% over 2 minutes cause a MS Break Inside Containment on SG 4 (The Failure of the reactor to trip and the Steamline Isolation Failures are Already entered.)

To Locally Trip open the MG Set Breakers Wait until crew is past step 7 in FR S.1 Local actions after entry into E-0:

• Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

• Aux Tour will monitor Spent Fuel Pool Level and Temperatures

• Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

• U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR03B U1_EGR03A U1_EGR03A U1_MS01D U1_EGR04B U1_EGR04A U1_EGR03B U1_CHR03 U1_EGR04A U1_CHR02 U1_EGR04B U1_RDR01 U1_RDR03 U1_CHR01