ML17177A576: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
Line 16: Line 16:


=Text=
=Text=
{{#Wiki_filter:Tennessee ValleyAuthority, PostOfficeBox2000,Decatur,Alabama35609-2000 June26,2017ATTN:DocumentControlDeskU.S.NuclearRegulatory Commission Washington, D.C.20555-0001 10CFR50.73BrownsFerryNuclearPlant,Units1,2,and3RenewedFacilityOperating LicenseNos.DPR-33,DPR-52,andDPR-68NRCDocketNos.50-259,50-260,and50-296
{{#Wiki_filter:Tennessee Valley Authority, Post Office Box 2000, Decatur, Alabama 35609-2000 June 26, 2017 ATTN: Document Control Desk U.S.Nuclear Regulatory Commission Washington, D.C.20555-0001 10 CFR 50.73 Browns Ferry Nuclear Plant, Units 1, 2, and 3 Renewed Facility Operating License Nos.DPR-33, DPR-52, and DPR-68 NRC Docket Nos.50-259, 50-260, and 50-296  


==Subject:==
==Subject:==
LicenseeEventReport50-259/2017-003-00 TheenclosedLicenseeEventReport(LER)providesdetailsofanunanalyzed condition fortornadomissilesstrikingtheEmergency DieselGenerator FuelOilVentLines.TheTennessee ValleyAuthority (TVA)issubmitting thisreportinaccordance withTitle10oftheCodeofFederalRegulations (CFR)10CFR50.73(a)(2)(ii)(B),
Licensee Event Report 50-259/2017-003-00 The enclosed Licensee Event Report (LER)provides details of an unanalyzed condition for tornado missiles striking the Emergency Diesel Generator Fuel Oil Vent Lines.The Tennessee Valley Authority (TVA)is submitting this report in accordance with Title 10 of the Code of Federal Regulations (CFR)10 CFR 50.73(a)(2)(ii)(B), as any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degraded plant safety;and 10 CFR 50.73(a)(2)(v)(A)I(B)/(D), as any event or condition that could have prevented the fulfillment of the safety function of structures or systems that are needed to shut down the reactor and maintain it in a safe shutdown condition, remove residual heat, or mitigate the consequences of an accident.Further evaluation is underway to determine if the Browns Ferry Nuclear Plant is susceptible to additional tornado missile effects.At this time, WA anticipates the need to supplement this LER with the results of that evaluation.
asanyeventorcondition thatresultedinthenuclearpowerplantbeinginanunanalyzed condition thatsignificantly degradedplantsafety;and10CFR50.73(a)(2)(v)(A)I(B)/(D),
There are no new regulatory commitments contained in this letter.Should you have any questions concerning this submittal, please contact J.L.Paul, Nuclear Site Licensing Manager, at (256)729-2636.Respectfully, S.M.Bono Site Vice President
asanyeventorcondition thatcouldhaveprevented thefulfillment ofthesafetyfunctionofstructures orsystemsthatareneededtoshutdownthereactorandmaintainitinasafeshutdowncondition, removeresidualheat,ormitigatetheconsequences ofanaccident.
Furtherevaluation isunderwaytodetermine iftheBrownsFerryNuclearPlantissusceptible toadditional tornadomissileeffects.Atthistime,WAanticipates theneedtosupplement thisLERwiththeresultsofthatevaluation.
Therearenonewregulatory commitments contained inthisletter.Shouldyouhaveanyquestions concerning thissubmittal, pleasecontactJ.L.Paul,NuclearSiteLicensing Manager,at(256)729-2636.
Respectfully, S.M.BonoSiteVicePresident


==Enclosure:==
==Enclosure:==


LicenseeEventReport50-259/2017-003-00
Licensee Event Report 50-259/2017-003-00
-Unanalyzed Condition forTornadoMissilesStrikingtheEmergency DieselGenerator FuelOilVentLines U.S.NuclearRegulatory Commission Page2June26,2017cc(wiEnclosure):
-Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines U.S.Nuclear Regulatory Commission Page 2 June 26, 2017 cc (wi Enclosure):
NRCRegionalAdministrator
NRC Regional Administrator
-RegionIINRCSeniorResidentInspector
-Region II NRC Senior Resident Inspector-Browns Ferry Nuclear Plant ENCLOSURE Browns Ferry Nuclear Plant Unit 1, 2, and 3 Licensee Event Report 50-259/2017-003-00 Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines See Enclosed NRC FORM 366 U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150.0104 EXPIRES: 03/3112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours.,.'." Reported lessons learned are incorporated into the licensing process and fed back to industry.Send comments regarding burden estimate to the Information Services Branch (1-2 F43), U.S.Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to Infocollects.
-BrownsFerryNuclearPlant ENCLOSURE BrownsFerryNuclearPlantUnit1,2,and3LicenseeEventReport50-259/2017-003-00 Unanalyzed Condition forTornadoMissilesStrikingtheEmergency DieselGenerator FuelOilVentLinesSeeEnclosed NRCFORM366U.S.NUCLEARREGULATORY COMMISSION APPROVEDBY0MB:NO.3150.0104 EXPIRES:03/3112020 (04-2017)
Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Off ce of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
Estimated burdenperresponsetocomplywiththismandatory collection request:80hours.,.'."Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.
1.FACILITY NAME 2.DOCKET NUMBER 3.PAGE Browns Ferry Nuclear Plant, Unit 1 05000259 1 OF 5 4.TITLE Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines 5.EVENT DATE 6.LER NUMBER 7.REPORT DATE 8.OTHER FACILITIES INVOLVED SEQUENTIAL FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR NUMBER MONTH DAY YEAR Browns Ferry Nuclear, Unit 2 05000260 04 25 2017 2017-003-00 06 26 2017 FACILITY NAME DOCKET NUMBER Browns Ferry Nuclear, Unit 3 05000296_________________
Sendcommentsregarding burdenestimatetotheInformation ServicesBranch(1-2F43),U.S.NuclearRegulatory Commission, Washington, DC20555-0001, orbye-mailtoInfocollects.
Resource@nrc.gov, andtotheDeskOfficer,OfficeofInformation andRegulatory Affairs,NEOB-10202,(3150-0104),
OffceofManagement andBudget,Washington, DC20503.Ifameansusedtoimposeaninformation collection doesnotdisplayacurrently valid0MBcontrolnumber,theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto,theinformation collection.
1.FACILITYNAME2.DOCKETNUMBER3.PAGEBrownsFerryNuclearPlant,Unit1050002591OF54.TITLEUnanalyzed Condition forTornadoMissilesStrikingtheEmergency DieselGenerator FuelOilVentLines5.EVENTDATE6.LERNUMBER7.REPORTDATE8.OTHERFACILITIES INVOLVEDSEQUENTIAL FACILITYNAMEDOCKETNUMBERMONTHDAYYEARYEARNUMBERMONTHDAYYEARBrownsFerryNuclear,Unit205000260042520172017-003-0006262017FACILITYNAMEDOCKETNUMBERBrownsFerryNuclear,Unit305000296_________________
9.OPERATING MODE__________________
9.OPERATING MODE__________________
__________
__________
_____11.THISREPORTISSUBM11EDPURSUANTTOTHEREQUIREMENTS OF10CFR:(Checkallthatapply)El20.2201(b) 020.2203(a)(3)(i) 05073(a)(2)(ii)(A) 050.73(a)(2)(viii)(A) 1020.2201(d) 020.2203(a)(3)(ii) 50.73(a)(2)(ii)(B) 050.73(a)(2)(viii)(B) o20.2203(a)(1)
_____11.THIS REPORT IS SUBM11ED PURSUANT TO THE REQUIREMENTS OF 10 CFR: (Check all that apply)El 20.2201(b) 0 20.2203(a)(3)(i) 0 5073(a)(2)(ii)(A) 0 50.73(a)(2)(viii)(A) 1 0 20.2201(d) 0 20.2203(a)(3)(ii) 50.73(a)(2)(ii)(B) 0 50.73(a)(2)(viii)(B) o 20.2203(a)(1)
El20.2203(a)(4)
El 20.2203(a)(4)
El50.73(a)(2)(iii) 050.73(a)(2)(ix)(A) o20.2203(a)(2)(i) 050.36(c)(1)(i)(A) 050.73(a)(2)(iv)(A)
El 50.73(a)(2)(iii) 0 50.73(a)(2)(ix)(A) o 20.2203(a)(2)(i) 0 50.36(c)(1)(i)(A) 0 50.73(a)(2)(iv)(A)
El50.73(a)(2)(x)
El 50.73(a)(2)(x)
____________________
____________________
10.POWERLEVEL020.2203(a)(2)(ii)
10.POWER LEVEL 0 20.2203(a)(2)(ii)
El50.36(c)(1)(ii)(A) 50.73(a)(2)(v)(A) 073.71(a)(4) o202203(a)(2)(iii)
El 50.36(c)(1)(ii)(A) 50.73(a)(2)(v)(A) 0 73.71(a)(4) o 202203(a)(2)(iii)
El50.36(c)(2) 50.73(a)(2)(v)(B)
El 50.36(c)(2) 50.73(a)(2)(v)(B)
El73.71(a)(5) 100020.2203(a)(2)(iv) 050.46(a)(3)(ii)
El 73.71(a)(5) 100 0 20.2203(a)(2)(iv) 0 50.46(a)(3)(ii)
El50.73(a)(2)(v)(C)
El 50.73(a)(2)(v)(C)
El73.77(a)(1)
El 73.77(a)(1)
El202203(a)(2)(v)
El 202203(a)(2)(v)
El50.73(a)(2)(i)(A)
El 50.73(a)(2)(i)(A)
Z50.73(a)(2)(v)(D) 073.77(a)(2)(i)
Z 50.73(a)(2)(v)(D) 0 73.77(a)(2)(i)
El202203(a)(2)(vi)
El 202203(a)(2)(vi)
El50.73(a)(2)(i)(B)
El 50.73(a)(2)(i)(B)
El50.73(a)(2)(vii) 073.77(a)(2)(ii) 050.73(a)(2)(i)(C) 0OTHERSpecifyinAbstractbeloworinNRCForm366A12.LICENSEECONTACTFORTHISLERLICENSEECONTACTTELEPHONE NUMBER(IncludeAreaCode)RyanCoons,Licensing Engineer56-729-2070 13.COMPLETEONEUNEFOREACHCOMPONENT FJLUREDESCRIBED INTHISREPORTCAUSESYSTEMCOMPONENT FACTURERREPORTABLE CAUSESYSTEMCOMPONENT FACTURERREPORTABLE N/AN/AN/AN/AN/AN/AN/AN/AN/AN/A14.SUPPLEMENTAL REPORTEXPECTED15.EXPECTEDMONTHDAYYEARYES(Ifyes,complete15.EXPECTEDSUBMISSION DATE)LINOSUBMISSION 08252017BSTRACT(Limitto1400spaces,i.e.,approximately 15single-spaced typewritten fines)Inaccordance withNRCRegulatory IssueSummary(RIS)2015-06,TornadoMissileProtection, adesignandlicensing basisreviewwasperformed toevaluatetheeffectsofexposingsafetyrelatedfeaturestotornadowindloads,depressurization loads,andstrikesfromtornadogenerated missiles.
El 50.73(a)(2)(vii) 0 73.77(a)(2)(ii) 0 50.73(a)(2)(i)(C) 0 OTHER Specify in Abstract below or in NRC Form 366A 12.LICENSEE CONTACT FOR THIS LER LICENSEE CONTACT TELEPHONE NUMBER (Include Area Code)Ryan Coons, Licensing Engineer 56-729-2070 13.COMPLETE ONE UNE FOR EACH COMPONENT FJLURE DESCRIBED IN THIS REPORT CAUSE SYSTEM COMPONENT FACTURER REPORTABLE CAUSE SYSTEM COMPONENT FACTURER REPORTABLE N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A 14.SUPPLEMENTAL REPORT EXPECTED 15.EXPECTED MONTH DAY YEAR YES (If yes, complete 15.EXPECTED SUBMISSION DATE)LI NO SUBMISSION 08 25 2017 BSTRACT (Limit to 1400 spaces, i.e., approximately 15 single-spaced typewritten fines)In accordance with NRC Regulatory Issue Summary (RIS)2015-06, Tornado Missile Protection, a design and licensing basis review was performed to evaluate the effects of exposing safety related features to tornado wind loads, depressurization loads, and strikes from tornado generated missiles.On April 25, 2017, it was discovered that a tornado missile strike could potentially damage the exposed and unprotected portion of the D, 3A, 3B, 3C, and 3D Emergency Diesel Generator (EDG)fuel oil vent lines.This could potentially fully crimp the vent line, and disable the tank's vacuum prevention feature.Developing a vacuum in the fuel oil system would limit the fuel oil pump's ability to transfer fuel oil from the 7 day tank to the day tank, restricting or eliminating the fuel oil flow to the affected EDG, which would prevent the EDG from functioning.
OnApril25,2017,itwasdiscovered thatatornadomissilestrikecouldpotentially damagetheexposedandunprotected portionoftheD,3A,3B,3C,and3DEmergency DieselGenerator (EDG)fueloilventlines.Thiscouldpotentially fullycrimptheventline,anddisablethetank'svacuumprevention feature.Developing avacuuminthefueloilsystemwouldlimitthefueloilpump'sabilitytotransferfueloilfromthe7daytanktothedaytank,restricting oreliminating thefueloilflowtotheaffectedEDG,whichwouldpreventtheEDGfromfunctioning.
The development of a vacuum may also damage the 7 day tank.This condition is an original plant design legacy issue.Due to the historical nature of this vulnerability, a specific cause was not identified.
Thedevelopment ofavacuummayalsodamagethe7daytank.Thiscondition isanoriginalplantdesignlegacyissue.Duetothehistorical natureofthisvulnerability, aspecificcausewasnotidentified.
Ihe compensatory measures implemented provide alternate fuel tank venting as soon as a tornado warning has been declared.This is implemented by removing a sampling plug from each of 7 day fuel tank manhole covers inside the D, 3A, 3B, 3C, and 3D EDG rooms.NRC FORM 366 (04-2017)
Ihecompensatory measuresimplemented providealternate fueltankventingassoonasatornadowarninghasbeendeclared.
NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 3/3112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT RE PORT (LE R)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resoercenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Bedget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
Thisisimplemented byremovingasamplingplugfromeachof7dayfueltankmanholecoversinsidetheD,3A,3B,3C,and3DEDGrooms.NRCFORM366(04-2017)
1.FACILITY NAME 2.DOCKET NUMBER 3.LERNUMBER YEAR SEQUENTIAL REV NUMBER I NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 NARRATIVE I.Plant Operating Conditions Before the Event At the time of discovery, Browns Ferry Nuclear Plant (BFN), Units 1, 2, and 3, were in Mode 1 at 100 percent power.IL Description of Event A.Event Summary In accordance with NRC Regulatory Issue Summary (RIS)2015-06, Tornado Missile Protection (TMP), a design and licensing basis review was performed to evaluate the effects of exposing safety related features to tornado wind loads, depressurization loads, and strikes from tornado generated missiles.On April 25, 2017, it was discovered during this evaluation that damage to the exposed and unprotected portion of the D, 3A, 3B, 3C, and 3D Emergency Diesel Generator (EDG)[DC]fuel oil vent lines[VLR]by a tornado missile strike has the potential to fully crimp the vent line, which would render the vacuum prevention feature ineffective.
NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION APPROVEDBY0MB:NO.3150-0104 EXPIRES:3/3112020 (04-2017)
Developing a vacuum in the fuel oil system[DE]would limit the ability of the fuel oil pumps[P]to transfer fuel oil from the 7 day tank[TK]to the day tank.This would restrict or eliminate the flow of fuel oil to the affected EDG, which would prevent the EDG from functioning.
Estimated burdenperresponsetocomplywiththismandatory collection request:80hours.Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.
A development of a vacuum may also damage the 7 day tank.B.Status of structures, components, or systems that were inoperable at the start of the event and that contributed to the event There were no structures, systems, or components whose inoperability contributed to this condition.
SendLICENSEEEVENTREPORT(LER)commentsregarding burdenestimatetotheInformation ServicesBranch(T-2F43),U.S.NuclearCONTINUATION SHEETRegulatory Commission, Washington, DC20555-0001, orbye-mailtolnfocollects.Resoercenrc.gov, andtotheDeskOfficer,OfficeofInformation andRegulatory Affairs,NEOB-10202,(3150-0104),
C.Dates and approximate times of occurrences Dates&Approximate Times Occurrence April 25, 2017, The D, 3A, 3B, 3C, and 3D EDGs were declared at 1630 CDT inoperable following an engineering evaluation of TMP, which found that the EDG 7 day tank vent piping is subject to potential damage.April 25, 2017, In accordance with NRC Enforcement Guide at 1631 CDT Memorandum (EGM)15-002, Revision 1, Enforcement Discretion for Tornado-Generated Missile Protection Non-Compliance, initial compensatory measures were implemented which provide additional protection and lessen tornado missile effects.NRC FORM 366A (04-2017)Page 2 of 5 NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 313112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT REPORT (LER)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
OfficeofManagement andBedget,Washington, DC20503.Ifameansusedtoimposeaninformation collection doesnotdisplayacurrently valid0MBcontrolnumber,theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto,theinformation collection.
1.FACILITY NAME I 2.DOCKET NUMBER I 3.LERNUNIBER YEAR SEQUENTIAL REV NUMBER NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 Dates&Approximate Times Occurrence April 25, 2017, The D, 3A, 3B, 3C, and 3D EDGs were declared at 1647 CDT Operable at this time.April 25, 2017, The NRC was notified of the unanalyzed condition that at 1653 CDT significantly degraded plant safety.D.Manufacturer and model number of each component that failed during the event This condition did not involve any equipment failure.E.Other systems or secondary functions affected No other systems or secondary functions were affected by this condition.
1.FACILITYNAME2.DOCKETNUMBER3.LERNUMBER YEARSEQUENTIAL REVNUMBERINO.BrownsFerryNuclearPlant,Unit105000-259 2017-003-00NARRATIVE I.PlantOperating Conditions BeforetheEventAtthetimeofdiscovery, BrownsFerryNuclearPlant(BFN),Units1,2,and3,wereinMode1at100percentpower.ILDescription ofEventA.EventSummaryInaccordance withNRCRegulatory IssueSummary(RIS)2015-06,TornadoMissileProtection (TMP),adesignandlicensing basisreviewwasperformed toevaluatetheeffectsofexposingsafetyrelatedfeaturestotornadowindloads,depressurization loads,andstrikesfromtornadogenerated missiles.
F.Method of discovery of each component or system failure or procedural error This event did not involve the actual failure of plant equipment.
OnApril25,2017,itwasdiscovered duringthisevaluation thatdamagetotheexposedandunprotected portionoftheD,3A,3B,3C,and3DEmergency DieselGenerator (EDG)[DC]fueloilventlines[VLR]byatornadomissilestrikehasthepotential tofullycrimptheventline,whichwouldrenderthevacuumprevention featureineffective.
However, an unanticipated potential for failure was discovered on April 25, 2017, as part of a design and licensing basis review to evaluate the effects of tornados and tornado missiles on safety related features, in accordance with RIS 2015-06.G.The failure mode, mechanism, and effect of each failed component This condition did not involve the actual failure of plant equipment.
Developing avacuuminthefueloilsystem[DE]wouldlimittheabilityofthefueloilpumps[P]totransferfueloilfromthe7daytank[TK]tothedaytank.Thiswouldrestrictoreliminate theflowoffueloiltotheaffectedEDG,whichwouldpreventtheEDGfromfunctioning.
H.Operator actions There were no operator actions associated with this condition.
Adevelopment ofavacuummayalsodamagethe7daytank.B.Statusofstructures, components, orsystemsthatwereinoperable atthestartoftheeventandthatcontributed totheeventTherewerenostructures, systems,orcomponents whoseinoperability contributed tothiscondition.
I.Automatically and manually initiated safety system responses There were no automatic or manual safety system responses associated with this condition.
C.Datesandapproximate timesofoccurrences Dates&Approximate TimesOccurrence April25,2017,TheD,3A,3B,3C,and3DEDGsweredeclaredat1630CDTinoperable following anengineering evaluation ofTMP,whichfoundthattheEDG7daytankventpipingissubjecttopotential damage.April25,2017,Inaccordance withNRCEnforcement Guideat1631CDTMemorandum (EGM)15-002,Revision1,Enforcement Discretion forTornado-Generated MissileProtection Non-Compliance, initialcompensatory measureswereimplemented whichprovideadditional protection andlessentornadomissileeffects.NRCFORM366A(04-2017)
Ill.Cause of the event A.Cause of each component or system failure or personnel error This condition is an original plant design legacy issue.Due to the historical nature of this vulnerability, a specific cause was not identified.
Page2of5 NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION APPROVEDBY0MB:NO.3150-0104 EXPIRES:313112020 (04-2017)
B.Cause(s)and circumstances for each human perlormance related root cause There were no human performance related root causes for this condition.
Estimated burdenperresponsetocomplywiththismandatory collection request:80hours.Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.
NRC FORM 366A (04-2017)Page 3 of 5 NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 3/31/2020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT REPORT (LER)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resourcenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
SendLICENSEEEVENTREPORT(LER)commentsregarding burdenestimatetotheInformation ServicesBranch(T-2F43),U.S.NuclearCONTINUATION SHEETRegulatory Commission, Washington, DC20555-0001, orbye-mailtolnfocollects.Resource@nrc.gov, andtotheDeskOfficer,OfficeofInformation andRegulatory Affairs,NEOB-10202,(3150-0104),
1.FACILITY NAME I 2.DOCKET NUMBER I 3.LERNUMBER YEAR SEQUENTIAL REV I NUMBER I NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 IV.Analysis of the event The Tennessee Valley Authority (TVA)is submitting this report in accordance with Title 10 of the Code of Federal Regulations (CFR)50.73(a)(2)(ii)(B), as any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degraded plant safety;and 10 CFR 50.73(a)(2)(v)(A)/(B)/(D), as any event or condition that could have prevented the fulfillment of the safety function of structures or systems that are needed to shut down the reactor and maintain it in a safe shutdown condition, remove residual heat, or mitigate the consequences of an accident.The condition was discovered on April 25, 2017, at 1630 CDT, when an engineering evaluation of TMP determined that the 7 day tank vent piping is subject to potential damage for the D, 3A, 3B, 3C, and 3D EDGs rendering the EDGs inoperable for potential tornado missile protection.
OfficeofManagement andBudget,Washington, DC20503.Ifameansusedtoimposeaninformation collection doesnotdisplayacurrently valid0MBcontrolnumber,theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto,theinformation collection.
An actual tornado missile event could have caused a safety system functional failure due to the inoperability of multiple EDGs.However, compensatory measures were established to provide additional protection for alleviating tornado missile effects, in accordance with EGM 15-002, Revision 1.These initial compensatory measures allowed the affected EDGs to be considered Operable but nonconforming.
1.FACILITYNAMEI2.DOCKETNUMBERI3.LERNUNIBER YEARSEQUENTIAL REVNUMBERNO.BrownsFerryNuclearPlant,Unit105000-259 2017-003-00Dates&Approximate TimesOccurrence April25,2017,TheD,3A,3B,3C,and3DEDGsweredeclaredat1647CDTOperableatthistime.April25,2017,TheNRCwasnotifiedoftheunanalyzed condition thatat1653CDTsignificantly degradedplantsafety.D.Manufacturer andmodelnumberofeachcomponent thatfailedduringtheeventThiscondition didnotinvolveanyequipment failure.E.Othersystemsorsecondary functions affectedNoothersystemsorsecondary functions wereaffectedbythiscondition.
Further evaluation is underway to determine if BFN is susceptible to additional tornado missile effects.At this time, WA anticipates the need to supplement this LER with the results of that evaluation.
F.Methodofdiscovery ofeachcomponent orsystemfailureorprocedural errorThiseventdidnotinvolvetheactualfailureofplantequipment.
V.Assessment of Safety Consequences The exposed portion of the fuel oil vent lines for the D, 3A, 3B, 3C and 3D EDGs are not protected from a tornado generated missile strike.An exposed portion of a fuel oil vent line could experience crimping damage such that it cannot perform its function to prevent the development of a vacuum in the fuel oil system.The development of a vacuum in the fuel oil system would render the fuel oil transfer system from the 7 day tank to the day tank ineffective.
However,anunanticipated potential forfailurewasdiscovered onApril25,2017,aspartofadesignandlicensing basisreviewtoevaluatetheeffectsoftornadosandtornadomissilesonsafetyrelatedfeatures, inaccordance withRIS2015-06.G.Thefailuremode,mechanism, andeffectofeachfailedcomponent Thiscondition didnotinvolvetheactualfailureofplantequipment.
The affected EDG(s)would be unable to function due to lack of fuel oil.To prevent tornado missile induced EDG inoperability, BFN Operations personnel are now procedurally required to open an alternate ventilation path on the EDG 7 day fuel tanks following the declaration of a tornado warning.This condition had no actual safety consequences impacting plant or public safety because BFN did not experience an actual tornado missile event;however, the compensatory actions that have been implemented in the Severe Weather procedure will manage this condition's risk to the health and safety of the public.A.Availability of systems or components that could have performed the same function as the components and systems that failed during the event This condition did not result in any actual system or component failures.NRC FORM 366A (04-2017)Page 4 of 5 NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 3/3112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT REPORT (LER)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resourcenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
H.OperatoractionsTherewerenooperatoractionsassociated withthiscondition.
1.FACILITY NAME I 2.DOCKET NUMBER I 3.LERNUMBER YEAR I SEQUENTIAL REV NUMBER I NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 B.For events that occurred when the reactor was shut down, availability of systems or components needed to shutdown the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident This condition did not occur during a shutdown.C.For failure that rendered a train of a safety system inoperable, estimate of the elapsed time from discovery of the failure until the train was returned to service This condition is an original plant design legacy issue.Due to the historical nature of this vulnerability, a specific cause was not identified.
I.Automatically andmanuallyinitiated safetysystemresponses Therewerenoautomatic ormanualsafetysystemresponses associated withthiscondition.
Initial compensatory measures to restore operability were implemented within 17 minutes of discovering the condition.
Ill.CauseoftheeventA.Causeofeachcomponent orsystemfailureorpersonnel errorThiscondition isanoriginalplantdesignlegacyissue.Duetothehistorical natureofthisvulnerability, aspecificcausewasnotidentified.
VI.Corrective Actions Corrective Actions are being managed by TVA's corrective action program under Condition Report (CR)1288222.A.Immediate Corrective Actions An operator workaround was implemented to provide an alternate fuel tank venting as soon as possible following a tornado event.B.Corrective Actions to Prevent Recurrence or to reduce the probability of similar events occurring in the future The comprehensive compensatory measures included revising the Severe Weather procedure to include removing a sampling plug on each of the EDG 7 day fuel oil tanks to provide an alternate ventilation path when a tornado warning has been declared.These comprehensive compensatory measures will remain in place until the vulnerability is permanently resolved.VII.Previous Similar Events at the Same Site A search of the BFN Corrective Action Program identified no similar conditions that have occurred at BFN.VIII.Additional Information There is no additional information.
B.Cause(s)andcircumstances foreachhumanperlormance relatedrootcauseTherewerenohumanperformance relatedrootcausesforthiscondition.
IX.Commitments There are no new commitments.
NRCFORM366A(04-2017)
NRC FORM 366A (04-2017)Page 5 of 5}}
Page3of5 NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION APPROVEDBY0MB:NO.3150-0104 EXPIRES:3/31/2020 (04-2017)
Estimated burdenperresponsetocomplywiththismandatory collection request:80hours.Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.
SendLICENSEEEVENTREPORT(LER)commentsregarding burdenestimatetotheInformation ServicesBranch(T-2F43),U.S.NuclearCONTINUATION SHEETRegulatory Commission, Washington, DC20555-0001, orbye-mailtolnfocollects.Resourcenrc.gov, andtotheDeskOfficer,OfficeofInformation andRegulatory Affairs,NEOB-10202,(3150-0104),
OfficeofManagement andBudget,Washington, DC20503.Ifameansusedtoimposeaninformation collection doesnotdisplayacurrently valid0MBcontrolnumber,theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto,theinformation collection.
1.FACILITYNAMEI2.DOCKETNUMBERI3.LERNUMBER YEARSEQUENTIAL REVINUMBERINO.BrownsFerryNuclearPlant,Unit105000-259 2017-003-00IV.AnalysisoftheeventTheTennessee ValleyAuthority (TVA)issubmitting thisreportinaccordance withTitle10oftheCodeofFederalRegulations (CFR)50.73(a)(2)(ii)(B),
asanyeventorcondition thatresultedinthenuclearpowerplantbeinginanunanalyzed condition thatsignificantly degradedplantsafety;and10CFR50.73(a)(2)(v)(A)/(B)/(D),
asanyeventorcondition thatcouldhaveprevented thefulfillment ofthesafetyfunctionofstructures orsystemsthatareneededtoshutdownthereactorandmaintainitinasafeshutdowncondition, removeresidualheat,ormitigatetheconsequences ofanaccident.
Thecondition wasdiscovered onApril25,2017,at1630CDT,whenanengineering evaluation ofTMPdetermined thatthe7daytankventpipingissubjecttopotential damagefortheD,3A,3B,3C,and3DEDGsrendering theEDGsinoperable forpotential tornadomissileprotection.
Anactualtornadomissileeventcouldhavecausedasafetysystemfunctional failureduetotheinoperability ofmultipleEDGs.However,compensatory measureswereestablished toprovideadditional protection foralleviating tornadomissileeffects,inaccordance withEGM15-002,Revision1.Theseinitialcompensatory measuresallowedtheaffectedEDGstobeconsidered Operablebutnonconforming.
Furtherevaluation isunderwaytodetermine ifBFNissusceptible toadditional tornadomissileeffects.Atthistime,WAanticipates theneedtosupplement thisLERwiththeresultsofthatevaluation.
V.Assessment ofSafetyConsequences TheexposedportionofthefueloilventlinesfortheD,3A,3B,3Cand3DEDGsarenotprotected fromatornadogenerated missilestrike.Anexposedportionofafueloilventlinecouldexperience crimpingdamagesuchthatitcannotperformitsfunctiontopreventthedevelopment ofavacuuminthefueloilsystem.Thedevelopment ofavacuuminthefueloilsystemwouldrenderthefueloiltransfersystemfromthe7daytanktothedaytankineffective.
TheaffectedEDG(s)wouldbeunabletofunctionduetolackoffueloil.TopreventtornadomissileinducedEDGinoperability, BFNOperations personnel arenowprocedurally requiredtoopenanalternate ventilation pathontheEDG7dayfueltanksfollowing thedeclaration ofatornadowarning.Thiscondition hadnoactualsafetyconsequences impacting plantorpublicsafetybecauseBFNdidnotexperience anactualtornadomissileevent;however,thecompensatory actionsthathavebeenimplemented intheSevereWeatherprocedure willmanagethiscondition's risktothehealthandsafetyofthepublic.A.Availability ofsystemsorcomponents thatcouldhaveperformed thesamefunctionasthecomponents andsystemsthatfailedduringtheeventThiscondition didnotresultinanyactualsystemorcomponent failures.
NRCFORM366A(04-2017)
Page4of5 NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION APPROVEDBY0MB:NO.3150-0104 EXPIRES:3/3112020 (04-2017)
Estimated burdenperresponsetocomplywiththismandatory collection request:80hours.Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.
SendLICENSEEEVENTREPORT(LER)commentsregarding burdenestimatetotheInformation ServicesBranch(T-2F43),U.S.NuclearCONTINUATION SHEETRegulatory Commission, Washington, DC20555-0001, orbye-mailtolnfocollects.Resourcenrc.gov, andtotheDeskOfficer,OfficeofInformation andRegulatory Affairs,NEOB-10202,(3150-0104),
OfficeofManagement andBudget,Washington, DC20503.Ifameansusedtoimposeaninformation collection doesnotdisplayacurrently valid0MBcontrolnumber,theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto,theinformation collection.
1.FACILITYNAMEI2.DOCKETNUMBERI3.LERNUMBER YEARISEQUENTIAL REVNUMBERINO.BrownsFerryNuclearPlant,Unit105000-259 2017-003-00B.Foreventsthatoccurredwhenthereactorwasshutdown,availability ofsystemsorcomponents neededtoshutdownthereactorandmaintainsafeshutdownconditions, removeresidualheat,controlthereleaseofradioactive
: material, ormitigatetheconsequences ofanaccidentThiscondition didnotoccurduringashutdown.
C.Forfailurethatrenderedatrainofasafetysysteminoperable, estimateoftheelapsedtimefromdiscovery ofthefailureuntilthetrainwasreturnedtoserviceThiscondition isanoriginalplantdesignlegacyissue.Duetothehistorical natureofthisvulnerability, aspecificcausewasnotidentified.
Initialcompensatory measurestorestoreoperability wereimplemented within17minutesofdiscovering thecondition.
VI.Corrective ActionsCorrective ActionsarebeingmanagedbyTVA'scorrective actionprogramunderCondition Report(CR)1288222.A.Immediate Corrective ActionsAnoperatorworkaround wasimplemented toprovideanalternate fueltankventingassoonaspossiblefollowing atornadoevent.B.Corrective ActionstoPreventRecurrence ortoreducetheprobability ofsimilareventsoccurring inthefutureThecomprehensive compensatory measuresincludedrevisingtheSevereWeatherprocedure toincluderemovingasamplingplugoneachoftheEDG7dayfueloiltankstoprovideanalternate ventilation pathwhenatornadowarninghasbeendeclared.
Thesecomprehensive compensatory measureswillremaininplaceuntilthevulnerability ispermanently resolved.
VII.PreviousSimilarEventsattheSameSiteAsearchoftheBFNCorrective ActionProgramidentified nosimilarconditions thathaveoccurredatBFN.VIII.Additional Information Thereisnoadditional information.
IX.Commitments Therearenonewcommitments.
NRCFORM366A(04-2017)
Page5of5}}

Revision as of 19:21, 7 July 2018

LER 17-003-00 for Browns Ferry, Unit 1, Regarding Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines
ML17177A576
Person / Time
Site:  Tennessee Valley Authority icon.png
Issue date: 06/26/2017
From: Bono S M
Tennessee Valley Authority
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
LER 17-003-00
Download: ML17177A576 (8)


Text

Tennessee Valley Authority, Post Office Box 2000, Decatur, Alabama 35609-2000 June 26, 2017 ATTN: Document Control Desk U.S.Nuclear Regulatory Commission Washington, D.C.20555-0001 10 CFR 50.73 Browns Ferry Nuclear Plant, Units 1, 2, and 3 Renewed Facility Operating License Nos.DPR-33, DPR-52, and DPR-68 NRC Docket Nos.50-259, 50-260, and 50-296

Subject:

Licensee Event Report 50-259/2017-003-00 The enclosed Licensee Event Report (LER)provides details of an unanalyzed condition for tornado missiles striking the Emergency Diesel Generator Fuel Oil Vent Lines.The Tennessee Valley Authority (TVA)is submitting this report in accordance with Title 10 of the Code of Federal Regulations (CFR)10 CFR 50.73(a)(2)(ii)(B), as any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degraded plant safety;and 10 CFR 50.73(a)(2)(v)(A)I(B)/(D), as any event or condition that could have prevented the fulfillment of the safety function of structures or systems that are needed to shut down the reactor and maintain it in a safe shutdown condition, remove residual heat, or mitigate the consequences of an accident.Further evaluation is underway to determine if the Browns Ferry Nuclear Plant is susceptible to additional tornado missile effects.At this time, WA anticipates the need to supplement this LER with the results of that evaluation.

There are no new regulatory commitments contained in this letter.Should you have any questions concerning this submittal, please contact J.L.Paul, Nuclear Site Licensing Manager, at (256)729-2636.Respectfully, S.M.Bono Site Vice President

Enclosure:

Licensee Event Report 50-259/2017-003-00

-Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines U.S.Nuclear Regulatory Commission Page 2 June 26, 2017 cc (wi Enclosure):

NRC Regional Administrator

-Region II NRC Senior Resident Inspector-Browns Ferry Nuclear Plant ENCLOSURE Browns Ferry Nuclear Plant Unit 1, 2, and 3 Licensee Event Report 50-259/2017-003-00 Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines See Enclosed NRC FORM 366 U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150.0104 EXPIRES: 03/3112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />.,.'." Reported lessons learned are incorporated into the licensing process and fed back to industry.Send comments regarding burden estimate to the Information Services Branch (1-2 F43), U.S.Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to Infocollects.

Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Off ce of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

1.FACILITY NAME 2.DOCKET NUMBER 3.PAGE Browns Ferry Nuclear Plant, Unit 1 05000259 1 OF 5 4.TITLE Unanalyzed Condition for Tornado Missiles Striking the Emergency Diesel Generator Fuel Oil Vent Lines 5.EVENT DATE 6.LER NUMBER 7.REPORT DATE 8.OTHER FACILITIES INVOLVED SEQUENTIAL FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR NUMBER MONTH DAY YEAR Browns Ferry Nuclear, Unit 2 05000260 04 25 2017 2017-003-00 06 26 2017 FACILITY NAME DOCKET NUMBER Browns Ferry Nuclear, Unit 3 05000296_________________

9.OPERATING MODE__________________

__________

_____11.THIS REPORT IS SUBM11ED PURSUANT TO THE REQUIREMENTS OF 10 CFR: (Check all that apply)El 20.2201(b) 0 20.2203(a)(3)(i) 0 5073(a)(2)(ii)(A) 0 50.73(a)(2)(viii)(A) 1 0 20.2201(d) 0 20.2203(a)(3)(ii) 50.73(a)(2)(ii)(B) 0 50.73(a)(2)(viii)(B) o 20.2203(a)(1)

El 20.2203(a)(4)

El 50.73(a)(2)(iii) 0 50.73(a)(2)(ix)(A) o 20.2203(a)(2)(i) 0 50.36(c)(1)(i)(A) 0 50.73(a)(2)(iv)(A)

El 50.73(a)(2)(x)

____________________

10.POWER LEVEL 0 20.2203(a)(2)(ii)

El 50.36(c)(1)(ii)(A) 50.73(a)(2)(v)(A) 0 73.71(a)(4) o 202203(a)(2)(iii)

El 50.36(c)(2) 50.73(a)(2)(v)(B)

El 73.71(a)(5) 100 0 20.2203(a)(2)(iv) 0 50.46(a)(3)(ii)

El 50.73(a)(2)(v)(C)

El 73.77(a)(1)

El 202203(a)(2)(v)

El 50.73(a)(2)(i)(A)

Z 50.73(a)(2)(v)(D) 0 73.77(a)(2)(i)

El 202203(a)(2)(vi)

El 50.73(a)(2)(i)(B)

El 50.73(a)(2)(vii) 0 73.77(a)(2)(ii) 0 50.73(a)(2)(i)(C) 0 OTHER Specify in Abstract below or in NRC Form 366A 12.LICENSEE CONTACT FOR THIS LER LICENSEE CONTACT TELEPHONE NUMBER (Include Area Code)Ryan Coons, Licensing Engineer 56-729-2070 13.COMPLETE ONE UNE FOR EACH COMPONENT FJLURE DESCRIBED IN THIS REPORT CAUSE SYSTEM COMPONENT FACTURER REPORTABLE CAUSE SYSTEM COMPONENT FACTURER REPORTABLE N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A 14.SUPPLEMENTAL REPORT EXPECTED 15.EXPECTED MONTH DAY YEAR YES (If yes, complete 15.EXPECTED SUBMISSION DATE)LI NO SUBMISSION 08 25 2017 BSTRACT (Limit to 1400 spaces, i.e., approximately 15 single-spaced typewritten fines)In accordance with NRC Regulatory Issue Summary (RIS)2015-06, Tornado Missile Protection, a design and licensing basis review was performed to evaluate the effects of exposing safety related features to tornado wind loads, depressurization loads, and strikes from tornado generated missiles.On April 25, 2017, it was discovered that a tornado missile strike could potentially damage the exposed and unprotected portion of the D, 3A, 3B, 3C, and 3D Emergency Diesel Generator (EDG)fuel oil vent lines.This could potentially fully crimp the vent line, and disable the tank's vacuum prevention feature.Developing a vacuum in the fuel oil system would limit the fuel oil pump's ability to transfer fuel oil from the 7 day tank to the day tank, restricting or eliminating the fuel oil flow to the affected EDG, which would prevent the EDG from functioning.

The development of a vacuum may also damage the 7 day tank.This condition is an original plant design legacy issue.Due to the historical nature of this vulnerability, a specific cause was not identified.

Ihe compensatory measures implemented provide alternate fuel tank venting as soon as a tornado warning has been declared.This is implemented by removing a sampling plug from each of 7 day fuel tank manhole covers inside the D, 3A, 3B, 3C, and 3D EDG rooms.NRC FORM 366 (04-2017)

NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 3/3112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT RE PORT (LE R)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resoercenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Bedget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

1.FACILITY NAME 2.DOCKET NUMBER 3.LERNUMBER YEAR SEQUENTIAL REV NUMBER I NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 NARRATIVE I.Plant Operating Conditions Before the Event At the time of discovery, Browns Ferry Nuclear Plant (BFN), Units 1, 2, and 3, were in Mode 1 at 100 percent power.IL Description of Event A.Event Summary In accordance with NRC Regulatory Issue Summary (RIS)2015-06, Tornado Missile Protection (TMP), a design and licensing basis review was performed to evaluate the effects of exposing safety related features to tornado wind loads, depressurization loads, and strikes from tornado generated missiles.On April 25, 2017, it was discovered during this evaluation that damage to the exposed and unprotected portion of the D, 3A, 3B, 3C, and 3D Emergency Diesel Generator (EDG)[DC]fuel oil vent lines[VLR]by a tornado missile strike has the potential to fully crimp the vent line, which would render the vacuum prevention feature ineffective.

Developing a vacuum in the fuel oil system[DE]would limit the ability of the fuel oil pumps[P]to transfer fuel oil from the 7 day tank[TK]to the day tank.This would restrict or eliminate the flow of fuel oil to the affected EDG, which would prevent the EDG from functioning.

A development of a vacuum may also damage the 7 day tank.B.Status of structures, components, or systems that were inoperable at the start of the event and that contributed to the event There were no structures, systems, or components whose inoperability contributed to this condition.

C.Dates and approximate times of occurrences Dates&Approximate Times Occurrence April 25, 2017, The D, 3A, 3B, 3C, and 3D EDGs were declared at 1630 CDT inoperable following an engineering evaluation of TMP, which found that the EDG 7 day tank vent piping is subject to potential damage.April 25, 2017, In accordance with NRC Enforcement Guide at 1631 CDT Memorandum (EGM)15-002, Revision 1, Enforcement Discretion for Tornado-Generated Missile Protection Non-Compliance, initial compensatory measures were implemented which provide additional protection and lessen tornado missile effects.NRC FORM 366A (04-2017)Page 2 of 5 NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 313112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT REPORT (LER)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

1.FACILITY NAME I 2.DOCKET NUMBER I 3.LERNUNIBER YEAR SEQUENTIAL REV NUMBER NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 Dates&Approximate Times Occurrence April 25, 2017, The D, 3A, 3B, 3C, and 3D EDGs were declared at 1647 CDT Operable at this time.April 25, 2017, The NRC was notified of the unanalyzed condition that at 1653 CDT significantly degraded plant safety.D.Manufacturer and model number of each component that failed during the event This condition did not involve any equipment failure.E.Other systems or secondary functions affected No other systems or secondary functions were affected by this condition.

F.Method of discovery of each component or system failure or procedural error This event did not involve the actual failure of plant equipment.

However, an unanticipated potential for failure was discovered on April 25, 2017, as part of a design and licensing basis review to evaluate the effects of tornados and tornado missiles on safety related features, in accordance with RIS 2015-06.G.The failure mode, mechanism, and effect of each failed component This condition did not involve the actual failure of plant equipment.

H.Operator actions There were no operator actions associated with this condition.

I.Automatically and manually initiated safety system responses There were no automatic or manual safety system responses associated with this condition.

Ill.Cause of the event A.Cause of each component or system failure or personnel error This condition is an original plant design legacy issue.Due to the historical nature of this vulnerability, a specific cause was not identified.

B.Cause(s)and circumstances for each human perlormance related root cause There were no human performance related root causes for this condition.

NRC FORM 366A (04-2017)Page 3 of 5 NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 3/31/2020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT REPORT (LER)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resourcenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

1.FACILITY NAME I 2.DOCKET NUMBER I 3.LERNUMBER YEAR SEQUENTIAL REV I NUMBER I NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 IV.Analysis of the event The Tennessee Valley Authority (TVA)is submitting this report in accordance with Title 10 of the Code of Federal Regulations (CFR)50.73(a)(2)(ii)(B), as any event or condition that resulted in the nuclear power plant being in an unanalyzed condition that significantly degraded plant safety;and 10 CFR 50.73(a)(2)(v)(A)/(B)/(D), as any event or condition that could have prevented the fulfillment of the safety function of structures or systems that are needed to shut down the reactor and maintain it in a safe shutdown condition, remove residual heat, or mitigate the consequences of an accident.The condition was discovered on April 25, 2017, at 1630 CDT, when an engineering evaluation of TMP determined that the 7 day tank vent piping is subject to potential damage for the D, 3A, 3B, 3C, and 3D EDGs rendering the EDGs inoperable for potential tornado missile protection.

An actual tornado missile event could have caused a safety system functional failure due to the inoperability of multiple EDGs.However, compensatory measures were established to provide additional protection for alleviating tornado missile effects, in accordance with EGM 15-002, Revision 1.These initial compensatory measures allowed the affected EDGs to be considered Operable but nonconforming.

Further evaluation is underway to determine if BFN is susceptible to additional tornado missile effects.At this time, WA anticipates the need to supplement this LER with the results of that evaluation.

V.Assessment of Safety Consequences The exposed portion of the fuel oil vent lines for the D, 3A, 3B, 3C and 3D EDGs are not protected from a tornado generated missile strike.An exposed portion of a fuel oil vent line could experience crimping damage such that it cannot perform its function to prevent the development of a vacuum in the fuel oil system.The development of a vacuum in the fuel oil system would render the fuel oil transfer system from the 7 day tank to the day tank ineffective.

The affected EDG(s)would be unable to function due to lack of fuel oil.To prevent tornado missile induced EDG inoperability, BFN Operations personnel are now procedurally required to open an alternate ventilation path on the EDG 7 day fuel tanks following the declaration of a tornado warning.This condition had no actual safety consequences impacting plant or public safety because BFN did not experience an actual tornado missile event;however, the compensatory actions that have been implemented in the Severe Weather procedure will manage this condition's risk to the health and safety of the public.A.Availability of systems or components that could have performed the same function as the components and systems that failed during the event This condition did not result in any actual system or component failures.NRC FORM 366A (04-2017)Page 4 of 5 NRC FORM 366A U.S.NUCLEAR REGULATORY COMMISSION APPROVED BY 0MB: NO.3150-0104 EXPIRES: 3/3112020 (04-2017)Estimated burden per response to comply with this mandatory collection request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />.Reported lessons learned are incorporated into the licensing process and fed back to industry.Send LICENSEE EVENT REPORT (LER)comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S.Nuclear CONTINUATION SHEET Regulatory Commission, Washington, DC 20555-0001, or by e-mail to lnfocollects.Resourcenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.If a means used to impose an information collection does not display a currently valid 0MB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

1.FACILITY NAME I 2.DOCKET NUMBER I 3.LERNUMBER YEAR I SEQUENTIAL REV NUMBER I NO.Browns Ferry Nuclear Plant, Unit 1 05000-259 2017-003-00 B.For events that occurred when the reactor was shut down, availability of systems or components needed to shutdown the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident This condition did not occur during a shutdown.C.For failure that rendered a train of a safety system inoperable, estimate of the elapsed time from discovery of the failure until the train was returned to service This condition is an original plant design legacy issue.Due to the historical nature of this vulnerability, a specific cause was not identified.

Initial compensatory measures to restore operability were implemented within 17 minutes of discovering the condition.

VI.Corrective Actions Corrective Actions are being managed by TVA's corrective action program under Condition Report (CR)1288222.A.Immediate Corrective Actions An operator workaround was implemented to provide an alternate fuel tank venting as soon as possible following a tornado event.B.Corrective Actions to Prevent Recurrence or to reduce the probability of similar events occurring in the future The comprehensive compensatory measures included revising the Severe Weather procedure to include removing a sampling plug on each of the EDG 7 day fuel oil tanks to provide an alternate ventilation path when a tornado warning has been declared.These comprehensive compensatory measures will remain in place until the vulnerability is permanently resolved.VII.Previous Similar Events at the Same Site A search of the BFN Corrective Action Program identified no similar conditions that have occurred at BFN.VIII.Additional Information There is no additional information.

IX.Commitments There are no new commitments.

NRC FORM 366A (04-2017)Page 5 of 5